@calliopelabs/cli 3.0.0 → 3.2.0

package/dist/supervision/journal.js

@@ -0,0 +1,311 @@
+import { canonicalJson, digest } from '../approvals/index.js';
+import { array, fail, hex, integer, shape, text, uuid } from '../orchestration/validation.js';
+import { supervisionProposalHash } from './approval.js';
+import { validateSupervisionDecision } from './contracts.js';
+import { validateSupervisionHealthEvidence } from './health.js';
+export function newSupervision() {
+    return { version: 1, rounds: 0, stalledRounds: 0, phase: 'ready', evidenceIds: [], evidenceHash: null, reviewedHash: null, completedTasks: 0, forceReview: false, operatorReview: false, review: null, active: null, draft: null, decision: null, decisionId: null, halt: null, strategies: Object.create(null) };
+}
+export function supervisionEvidence(events) {
+    const latest = new Map();
+    for (const event of events)
+        if (event.change.type === 'task_finished' || event.change.type === 'task_accepted')
+            latest.set(event.change.taskId, event.id);
+    const ids = [...latest.values()];
+    return { ids, hash: digest(canonicalJson(ids)) };
+}
+export function validateSupervisionChange(value, plan) {
+    if (!plan.supervision)
+        fail('Supervision events require a reviewed supervision policy.');
+    shape(value, ['type'], ['round', 'role', 'agentId', 'sessionId', 'evidenceIds', 'evidenceHash', 'health', 'decision', 'decisionId', 'receipts', 'outcome', 'reason', 'source', 'proposalHash', 'requestAttribution']);
+    if (value.requestAttribution !== undefined && (value.type !== 'supervision_started' || value.requestAttribution !== 1))
+        fail('Invalid supervision request attribution.');
+    if (value.type === 'supervision_started' || value.type === 'supervision_decided') {
+        shape(value, ['type', 'round', 'role', 'agentId', 'sessionId', ...(value.type === 'supervision_started' ? ['evidenceIds', 'evidenceHash'] : ['decision'])], value.type === 'supervision_started' ? ['health', 'requestAttribution'] : []);
+        integer(value.round, 1, plan.supervision.maxRounds);
+        if (!['controller', 'reviewer'].includes(String(value.role)) || value.agentId !== (value.role === 'controller' ? plan.supervision.controllerId : plan.supervision.reviewerId))
+            fail('Controller event does not match its reviewed agent.');
+        text(value.sessionId, 128);
+        if (!/^[a-zA-Z0-9_-]+$/.test(value.sessionId))
+            fail('Invalid controller session.');
+        if (value.type === 'supervision_started') {
+            array(value.evidenceIds, 1024, 1);
+            if (value.evidenceIds.some(ref => !uuid(ref)) || new Set(value.evidenceIds).size !== value.evidenceIds.length || !hex(value.evidenceHash) || value.evidenceHash !== digest(canonicalJson(value.evidenceIds)))
+                fail('Invalid controller evidence snapshot.');
+            if (value.health !== undefined)
+                validateSupervisionHealthEvidence(value.health);
+        }
+    }
+    else if (value.type === 'supervision_applied') {
+        shape(value, ['type', 'round', 'decisionId', 'receipts']);
+        integer(value.round, 1, plan.supervision.maxRounds);
+        if (!uuid(value.decisionId))
+            fail('Invalid controller decision reference.');
+        array(value.receipts, 8);
+        for (const receipt of value.receipts) {
+            shape(receipt, ['artifactId', 'sha256', 'exitCode', 'outcome', 'cleanupConfirmed']);
+            text(receipt.artifactId, 64);
+            integer(receipt.exitCode, -1, 2147483647);
+            if (!hex(receipt.sha256) || !['passed', 'failed', 'timeout'].includes(String(receipt.outcome)) || receipt.cleanupConfirmed !== true)
+                fail('Automatic retries require confirmed verification cleanup.');
+        }
+    }
+    else if (value.type === 'supervision_halted') {
+        shape(value, ['type', 'round', 'outcome', 'reason']);
+        integer(value.round, 0, plan.supervision.maxRounds);
+        text(value.reason);
+        if (!['stop', 'limit', 'failed', 'denied', 'cancelled', 'interrupted'].includes(String(value.outcome)))
+            fail('Invalid supervision stop reason.');
+    }
+    else if (value.type === 'supervision_proposed' || value.type === 'supervision_approved') {
+        shape(value, ['type', 'decisionId', 'proposalHash', 'source']);
+        if (!uuid(value.decisionId) || !hex(value.proposalHash) || !['cli', 'repl'].includes(String(value.source)))
+            fail('Improvement review requires an exact proposal hash and operator source.');
+    }
+    else if (value.type === 'supervision_withdrawn') {
+        shape(value, ['type', 'decisionId', 'source']);
+        if (!uuid(value.decisionId) || !['cli', 'repl'].includes(String(value.source)))
+            fail('Improvement withdrawal requires an explicit operator and decision ID.');
+    }
+    else if (value.type === 'supervision_reset') {
+        shape(value, ['type', 'source']);
+        if (!['cli', 'repl'].includes(String(value.source)))
+            fail('Controller recovery requires an explicit operator action.');
+    }
+    else
+        fail('Unknown supervision event.');
+    return value;
+}
+/** Replay checks references; the executor checks artifact bytes immediately before applying. */
+export function assertSupervisedRetry(plan, state, events, taskId, receipts) {
+    const task = state.tasks[taskId], spec = plan.tasks.find(value => value.id === taskId), agent = plan.agents.find(value => value.id === spec?.agentId);
+    const retainedPartial = task?.status === 'review_required' && /truncat/i.test(task.output?.summary ?? '') && task.output?.checks?.length && task.output.checks.every(check => check.passed);
+    if (!task || !spec || !agent || !(task.status === 'failed' || retainedPartial) || task.escalation || task.attempts > agent.escalationPolicy.maxRetries || plan.tasks.some(other => other.dependencies.includes(taskId) && state.tasks[other.id].attempts > 0))
+        fail('Supervised retry requires a failed, unconsumed task with attempts remaining.');
+    let ancestor = agent;
+    for (let n = 0; n < plan.agents.length; n++) {
+        if (state.stoppedAgents.includes(ancestor.id) || Object.values(state.tasks).some(t => t.agentId === ancestor.id && t.escalation))
+            fail('A stopped or escalated agent cannot be retried automatically.');
+        const parent = plan.agents.find(value => value.id === ancestor.parentId);
+        if (!parent)
+            break;
+        ancestor = parent;
+    }
+    let lastStart = -1;
+    for (let i = events.length - 1; i >= 0; i--)
+        if (events[i].change.type === 'task_started' && 'taskId' in events[i].change && events[i].change.taskId === taskId) {
+            lastStart = i;
+            break;
+        }
+    const tools = new Map();
+    for (const event of events.slice(lastStart + 1))
+        if (event.change.type === 'tool' && event.change.taskId === taskId) {
+            const c = event.change;
+            if (c.stage === 'started')
+                tools.set(c.callId, { name: c.name, finished: false });
+            else if (tools.has(c.callId))
+                tools.get(c.callId).finished = true;
+        }
+    if (task.mutations && (!plan.workspace.isolation || !spec.isolation || [...tools.values()].some(tool => !tool.finished)))
+        fail('Uncertain mutation outcomes require explicit recovery.');
+    if (receipts === undefined)
+        return;
+    const artifacts = task.output?.artifacts ?? [], shellCount = [...tools.values()].filter(tool => tool.name === 'shell').length;
+    if (task.mutations && (!shellCount || receipts.length !== shellCount || !artifacts.some(a => a.id === spec.isolation?.patchArtifactId)) || !task.mutations && receipts.length)
+        fail('An isolated retry requires its original verification and patch evidence.');
+    if (new Set(receipts.map(receipt => receipt.artifactId)).size !== receipts.length)
+        fail('Duplicate retry evidence.');
+    for (const receipt of receipts)
+        if (!spec.isolation?.commands.some(command => command.artifactId === receipt.artifactId) || !artifacts.some(artifact => artifact.id === receipt.artifactId && artifact.sha256 === receipt.sha256 && artifact.kind === 'test_result'))
+            fail('Retry receipts differ from the recorded task artifacts.');
+}
+export function replaySupervisionChange(event, plan, state, prior, createdAt, manifest) {
+    const c = validateSupervisionChange(event.change, plan), s = state.supervision, policy = plan.supervision;
+    const active = () => { if (state.status !== 'running' || !state.ownerId || Object.values(state.tasks).some(task => task.status === 'running'))
+        fail('Supervision requires an owned execution barrier with no active workers.'); };
+    if (c.type === 'supervision_withdrawn') {
+        if (state.ownerId || !['ready', 'decision', 'halted'].includes(s.phase))
+            fail('Stop active execution before withdrawing an improvement.');
+        if (s.decisionId && s.decisionId !== c.decisionId)
+            fail('Resolve the current pending decision before withdrawing an older improvement.');
+        const target = prior.find(e => e.id === c.decisionId), change = target?.change;
+        if (change?.type !== 'supervision_decided' || change.role === 'controller' && policy.reviewerId || !('hypothesis' in change.decision) || prior.some(e => e.change.type === 'supervision_withdrawn' && e.change.decisionId === c.decisionId))
+            fail('Withdrawal requires an unwithdrawn final improvement decision.');
+        const d = change.decision;
+        if (d.action === 'replan' && s.strategies[d.taskId]?.decisionId === c.decisionId) {
+            const withdrawn = new Set(prior.filter(e => e.change.type === 'supervision_withdrawn').map(e => e.change.decisionId));
+            withdrawn.add(c.decisionId);
+            delete s.strategies[d.taskId];
+            for (const applied of [...prior].reverse())
+                if (applied.change.type === 'supervision_applied' && !withdrawn.has(applied.change.decisionId)) {
+                    const decision = prior.find(e => e.id === applied.change.decisionId), value = decision?.change;
+                    if (value?.type === 'supervision_decided' && value.decision.action === 'replan' && value.decision.taskId === d.taskId) {
+                        s.strategies[d.taskId] = { decisionId: decision.id, strategy: value.decision.strategy, evidence: [...value.decision.evidence] };
+                        break;
+                    }
+                }
+        }
+        if (d.action === 'decompose')
+            for (const agent of d.children.agents)
+                if (state.graph?.plan.agents.some(a => a.id === agent.id) && !state.stoppedAgents.includes(agent.id))
+                    state.stoppedAgents.push(agent.id);
+        // A withdrawal is a restriction: retain evidence, allocations and task outcomes, then stop.
+        s.phase = 'halted';
+        s.operatorReview = false;
+        s.review = null;
+        s.active = null;
+        s.decision = null;
+        s.decisionId = null;
+        s.draft = null;
+        s.halt = { outcome: 'stop', reason: 'An improvement was withdrawn by the operator; inspect retained results before explicit recovery.' };
+        return;
+    }
+    if (c.type === 'supervision_reset') {
+        if (state.ownerId || s.phase !== 'halted' || !s.decision && s.rounds >= policy.maxRounds || Date.parse(event.at) >= state.deadline)
+            fail('Controller recovery requires an inactive, unexpired run with rounds remaining.');
+        s.phase = s.decision ? 'decision' : 'ready';
+        s.active = null;
+        s.halt = null;
+        s.forceReview = !s.decision;
+        if (!s.decision) {
+            s.draft = null;
+            s.decisionId = null;
+        }
+        return;
+    }
+    active();
+    if (c.type === 'supervision_proposed' || c.type === 'supervision_approved') {
+        const decision = prior.find(e => e.id === c.decisionId);
+        if (s.phase !== 'decision' || s.decisionId !== c.decisionId || !s.decision || !('hypothesis' in s.decision) || !decision || Date.parse(event.at) >= state.deadline || c.proposalHash !== supervisionProposalHash(manifest, decision, state.deadline))
+            fail('Improvement review differs from the current unexpired proposal.');
+        if (c.type === 'supervision_proposed') {
+            if (s.review?.announced)
+                fail('This proposal already has a review hold.');
+            s.review = { decisionId: c.decisionId, proposalHash: c.proposalHash, approved: false, announced: true };
+        }
+        else {
+            if (!s.review || s.review.approved || s.review.decisionId !== c.decisionId || s.review.proposalHash !== c.proposalHash)
+                fail('Approval requires its pending proposal hold.');
+            s.review.approved = true;
+            s.operatorReview = false;
+        }
+        return;
+    }
+    if (c.type === 'supervision_started') {
+        const evidence = supervisionEvidence(prior);
+        if (canonicalJson(c.evidenceIds) !== canonicalJson(evidence.ids) || c.evidenceHash !== evidence.hash || Date.parse(event.at) >= state.deadline)
+            fail('Controller evidence changed or its deadline expired.');
+        const account = plan.agents.find(a => a.id === c.agentId);
+        let ancestor = account;
+        for (let n = 0; n < plan.agents.length; n++) {
+            if (c.role === 'controller' && (state.stoppedAgents.includes(ancestor.id) || Object.values(state.tasks).some(task => task.agentId === ancestor.id && (task.escalation || task.status === 'denied'))))
+                fail('Stopped agents cannot supervise.');
+            const parent = plan.agents.find(a => a.id === ancestor.parentId);
+            if (!parent)
+                break;
+            ancestor = parent;
+        }
+        if (Date.parse(event.at) >= createdAt + account.timeBudgetMs)
+            fail('Controller account deadline expired.');
+        if (c.role === 'controller') {
+            if (s.phase !== 'ready' || c.round !== s.rounds + 1 || !s.forceReview && s.reviewedHash === evidence.hash)
+                fail('Controller round is duplicated or not ready.');
+            const completed = Object.values(state.tasks).filter(task => task.status === 'completed').length;
+            if (completed <= s.completedTasks && s.stalledRounds >= policy.maxStalledRounds)
+                fail('Controller stalled-round limit reached.');
+            s.stalledRounds = completed > s.completedTasks ? 0 : s.stalledRounds + 1;
+            s.completedTasks = completed;
+            s.rounds = c.round;
+            s.evidenceIds = [...c.evidenceIds];
+            s.evidenceHash = c.evidenceHash;
+            s.draft = null;
+            s.decision = null;
+            s.decisionId = null;
+            s.forceReview = false;
+        }
+        else if (s.phase !== 'draft-ready' || c.round !== s.rounds || s.evidenceHash !== c.evidenceHash)
+            fail('Reviewer needs the recorded controller draft in this round.');
+        s.phase = c.role;
+        s.active = { agentId: c.agentId, sessionId: c.sessionId, role: c.role };
+    }
+    else if (c.type === 'supervision_decided') {
+        if (Date.parse(event.at) >= Math.min(state.deadline, createdAt + plan.agents.find(a => a.id === c.agentId).timeBudgetMs))
+            fail('Controller result arrived after its original deadline.');
+        if (c.round !== s.rounds || s.phase !== c.role || s.active?.agentId !== c.agentId || s.active.sessionId !== c.sessionId || s.evidenceHash !== supervisionEvidence(prior).hash)
+            fail('Controller result does not match its active evidence snapshot.');
+        const decision = validateSupervisionDecision(c.decision, policy, plan, new Set(s.evidenceIds));
+        s.active = null;
+        if (c.role === 'controller' && policy.reviewerId) {
+            s.draft = decision;
+            s.phase = 'draft-ready';
+        }
+        else {
+            s.decision = decision;
+            s.decisionId = event.id;
+            s.phase = 'decision';
+            if (s.operatorReview) {
+                if ('hypothesis' in decision)
+                    s.review = { decisionId: event.id, proposalHash: supervisionProposalHash(manifest, event, state.deadline), approved: false, announced: false };
+                else
+                    s.operatorReview = false;
+            }
+        }
+    }
+    else if (c.type === 'supervision_applied') {
+        if (Date.parse(event.at) >= state.deadline)
+            fail('Controller action exceeded the original run deadline.');
+        if (s.phase !== 'decision' || c.round !== s.rounds || s.decisionId !== c.decisionId || !s.decision)
+            fail('Controller action has no unapplied decision.');
+        const d = s.decision;
+        if (s.review && !s.review.approved)
+            fail('The proposed improvement requires its exact reviewed approval.');
+        s.review = null;
+        if (d.action === 'retry' || d.action === 'replan') {
+            assertSupervisedRetry(plan, state, prior, d.taskId, c.receipts);
+            const last = [...prior].reverse().find(e => e.change.type === 'task_finished' && e.change.taskId === d.taskId);
+            if (!last || !d.evidence.includes(last.id))
+                fail('A retry must reference the current failed attempt.');
+            const task = state.tasks[d.taskId];
+            task.status = 'pending';
+            task.output = null;
+            task.artifactIds = [];
+            task.changedFiles = [];
+            task.mutations = false;
+            task.escalation = null;
+            if (d.action === 'replan')
+                s.strategies[d.taskId] = { decisionId: c.decisionId, strategy: d.strategy, evidence: [...d.evidence] };
+        }
+        else {
+            if (c.receipts.length)
+                fail('Only retry decisions may carry verification receipts.');
+            if (d.action === 'decompose' && !state.graph?.admissions.some(admission => admission.proposal.source.eventId === c.decisionId))
+                fail('Child decomposition needs a recorded budget-backed graph admission.');
+        }
+        s.phase = d.action === 'stop' ? 'halted' : 'ready';
+        s.reviewedHash = s.evidenceHash;
+        if (d.action === 'stop')
+            s.halt = { outcome: 'stop', reason: d.reason };
+        s.decision = null;
+        s.decisionId = null;
+        s.draft = null;
+    }
+    else if (c.type === 'supervision_halted') {
+        if (c.round !== s.rounds)
+            fail('Controller stop refers to another round.');
+        s.phase = 'halted';
+        s.active = null;
+        s.halt = { outcome: c.outcome, reason: c.reason };
+    }
+}
+/** A controller proposal is authorized by one recorded decision, never by its filename. */
+export function assertSupervisionProposal(proposal, state) {
+    const s = state.supervision, d = s?.decision;
+    if (proposal.source.kind !== 'supervision' || !s || s.phase !== 'decision' || s.decisionId !== proposal.source.eventId || !d || d.action !== 'decompose' || !state.ownerId || state.status !== 'running' || Object.values(state.tasks).some(task => task.status === 'running'))
+        fail('Child admission requires the active, recorded controller decision.');
+    if (s.review && !s.review.approved)
+        fail('Child admission requires the exact reviewed improvement approval.');
+    const children = { version: proposal.version, parentId: proposal.parentId, agents: proposal.agents, tasks: proposal.tasks };
+    if (canonicalJson(children) !== canonicalJson(d.children) || proposal.source.sha256 !== digest(canonicalJson(d.children)))
+        fail('Child proposal differs from the recorded controller decision.');
+}
+//# sourceMappingURL=journal.js.map

package/dist/supervision/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../src/supervision/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,EAAC,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,GAAG,EAAC,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,MAAM,gCAAgC,CAAC;AACtF,OAAO,EAAC,uBAAuB,EAAC,MAAM,eAAe,CAAC;AAGtD,OAAO,EAAC,2BAA2B,EAAC,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAC,iCAAiC,EAAC,MAAM,aAAa,CAAC;AAI9D,MAAM,UAAU,cAAc;IAC5B,OAAM,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,CAAC,EAAC,aAAa,EAAC,CAAC,EAAC,KAAK,EAAC,OAAO,EAAC,WAAW,EAAC,EAAE,EAAC,YAAY,EAAC,IAAI,EAAC,YAAY,EAAC,IAAI,EAAC,cAAc,EAAC,CAAC,EAAC,WAAW,EAAC,KAAK,EAAC,cAAc,EAAC,KAAK,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,UAAU,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,UAAU,EAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,CAAC;AAChR,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,MAAuB;IACzD,MAAM,MAAM,GAAC,IAAI,GAAG,EAAiB,CAAC;IACtC,KAAI,MAAM,KAAK,IAAI,MAAM;QAAC,IAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAG,eAAe,IAAE,KAAK,CAAC,MAAM,CAAC,IAAI,KAAG,eAAe;YAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/I,MAAM,GAAG,GAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAAA,OAAM,EAAC,GAAG,EAAC,IAAI,EAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAC,CAAC;AAC7E,CAAC;AACD,MAAM,UAAU,yBAAyB,CAAC,KAAa,EAAC,IAAgB;IACtE,IAAG,CAAC,IAAI,CAAC,WAAW;QAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACvF,KAAK,CAAC,KAAK,EAAC,CAAC,MAAM,CAAC,EAAC,CAAC,OAAO,EAAC,MAAM,EAAC,SAAS,EAAC,WAAW,EAAC,aAAa,EAAC,cAAc,EAAC,QAAQ,EAAC,UAAU,EAAC,YAAY,EAAC,UAAU,EAAC,SAAS,EAAC,QAAQ,EAAC,QAAQ,EAAC,cAAc,EAAC,oBAAoB,CAAC,CAAC,CAAC;IACtM,IAAG,KAAK,CAAC,kBAAkB,KAAG,SAAS,IAAE,CAAC,KAAK,CAAC,IAAI,KAAG,qBAAqB,IAAE,KAAK,CAAC,kBAAkB,KAAG,CAAC,CAAC;QAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC7J,IAAG,KAAK,CAAC,IAAI,KAAG,qBAAqB,IAAE,KAAK,CAAC,IAAI,KAAG,qBAAqB,EAAC,CAAC;QACzE,KAAK,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,SAAS,EAAC,WAAW,EAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAG,qBAAqB,CAAA,CAAC,CAAA,CAAC,aAAa,EAAC,cAAc,CAAC,CAAA,CAAC,CAAA,CAAC,UAAU,CAAC,CAAC,CAAC,EAAC,KAAK,CAAC,IAAI,KAAG,qBAAqB,CAAA,CAAC,CAAA,CAAC,QAAQ,EAAC,oBAAoB,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC;QACrN,OAAO,CAAC,KAAK,CAAC,KAAK,EAAC,CAAC,EAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAClD,IAAG,CAAC,CAAC,YAAY,EAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAE,KAAK,CAAC,OAAO,KAAG,CAAC,KAAK,CAAC,IAAI,KAAG,YAAY,CAAA,CAAC,CAAA,IAAI,CAAC,WAAW,CAAC,YAAY,CAAA,CAAC,CAAA,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;YAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QAC9N,IAAI,CAAC,KAAK,CAAC,SAAS,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC3G,IAAG,KAAK,CAAC,IAAI,KAAG,qBAAqB,EAAC,CAAC;YACrC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAC,IAAI,EAAC,CAAC,CAAC,CAAC;YAChC,IAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAE,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,KAAG,KAAK,CAAC,WAAW,CAAC,MAAM,IAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAE,KAAK,CAAC,YAAY,KAAG,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YAC9O,IAAG,KAAK,CAAC,MAAM,KAAG,SAAS;gBAAC,iCAAiC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;SAAK,IAAG,KAAK,CAAC,IAAI,KAAG,qBAAqB,EAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,OAAO,EAAC,YAAY,EAAC,UAAU,CAAC,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,CAAC,KAAK,EAAC,CAAC,EAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACxG,IAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAAA,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAC,CAAC,CAAC,CAAC;QAClG,KAAI,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAC,CAAC;YACnC,KAAK,CAAC,OAAO,EAAC,CAAC,YAAY,EAAC,QAAQ,EAAC,UAAU,EAAC,SAAS,EAAC,kBAAkB,CAAC,CAAC,CAAC;YAAA,IAAI,CAAC,OAAO,CAAC,UAAU,EAAC,EAAE,CAAC,CAAC;YAAA,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAC,CAAC,CAAC,EAAC,UAAU,CAAC,CAAC;YACnJ,IAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAE,CAAC,CAAC,QAAQ,EAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAE,OAAO,CAAC,gBAAgB,KAAG,IAAI;gBAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAC/L,CAAC;IACH,CAAC;SAAK,IAAG,KAAK,CAAC,IAAI,KAAG,oBAAoB,EAAC,CAAC;QAC1C,KAAK,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,OAAO,EAAC,SAAS,EAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,CAAC,KAAK,EAAC,CAAC,EAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtH,IAAG,CAAC,CAAC,MAAM,EAAC,OAAO,EAAC,QAAQ,EAAC,QAAQ,EAAC,WAAW,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC5I,CAAC;SAAK,IAAG,KAAK,CAAC,IAAI,KAAG,sBAAsB,IAAE,KAAK,CAAC,IAAI,KAAG,sBAAsB,EAAC,CAAC;QACjF,KAAK,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,YAAY,EAAC,cAAc,EAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,IAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAE,CAAC,CAAC,KAAK,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAClP,CAAC;SAAK,IAAG,KAAK,CAAC,IAAI,KAAG,uBAAuB,EAAC,CAAC;QAC7C,KAAK,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,YAAY,EAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,IAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAE,CAAC,CAAC,KAAK,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;IACvM,CAAC;SAAK,IAAG,KAAK,CAAC,IAAI,KAAG,mBAAmB,EAAC,CAAC;QACzC,KAAK,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,IAAG,CAAC,CAAC,KAAK,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACrJ,CAAC;;QAAK,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACzC,OAAO,KAAqC,CAAC;AAC/C,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,qBAAqB,CAAC,IAAgB,EAAC,KAAyB,EAAC,MAAuB,EAAC,MAAa,EAAC,QAAwB;IAC7I,MAAM,IAAI,GAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAC,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,EAAE,KAAG,MAAM,CAAC,EAAC,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,EAAE,KAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACtI,MAAM,eAAe,GAAC,IAAI,EAAE,MAAM,KAAG,iBAAiB,IAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAE,EAAE,CAAC,IAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,IAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9K,IAAG,CAAC,IAAI,IAAE,CAAC,IAAI,IAAE,CAAC,KAAK,IAAE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAG,QAAQ,IAAE,eAAe,CAAC,IAAE,IAAI,CAAC,UAAU,IAAE,IAAI,CAAC,QAAQ,GAAC,KAAK,CAAC,gBAAgB,CAAC,UAAU,IAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAE,CAAC,QAAQ,GAAC,CAAC,CAAC;QAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;IAC3T,IAAI,QAAQ,GAAC,KAAK,CAAC;IAAA,KAAI,IAAI,CAAC,GAAC,CAAC,EAAC,CAAC,GAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAC,CAAC,EAAE,EAAC,CAAC;QACvD,IAAG,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,OAAO,KAAG,QAAQ,CAAC,EAAE,IAAE,CAAC,CAAC,UAAU,CAAC;YAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QAC9L,MAAM,MAAM,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,EAAE,KAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAAA,IAAG,CAAC,MAAM;YAAC,MAAM;QAAA,QAAQ,GAAC,MAAM,CAAC;IACtG,CAAC;IACD,IAAI,SAAS,GAAC,CAAC,CAAC,CAAC;IAAA,KAAI,IAAI,CAAC,GAAC,MAAM,CAAC,MAAM,GAAC,CAAC,EAAC,CAAC,IAAE,CAAC,EAAC,CAAC,EAAE;QAAC,IAAG,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,IAAI,KAAG,cAAc,IAAE,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,IAAG,MAAM,CAAC,CAAC,CAAE,CAAC,MAA0B,CAAC,MAAM,KAAG,MAAM,EAAC,CAAC;YAAA,SAAS,GAAC,CAAC,CAAC;YAAA,MAAM;QAAA,CAAC;IAC1M,MAAM,KAAK,GAAC,IAAI,GAAG,EAAyC,CAAC;IAC7D,KAAI,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,GAAC,CAAC,CAAC;QAAC,IAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAG,MAAM,IAAE,KAAK,CAAC,MAAM,CAAC,MAAM,KAAG,MAAM,EAAC,CAAC;YAAA,MAAM,CAAC,GAAC,KAAK,CAAC,MAAM,CAAC;YAAA,IAAG,CAAC,CAAC,KAAK,KAAG,SAAS;gBAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAC,EAAC,IAAI,EAAC,CAAC,CAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,CAAC;iBAAK,IAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAE,CAAC,QAAQ,GAAC,IAAI,CAAC;QAAA,CAAC;IACvQ,IAAG,IAAI,CAAC,SAAS,IAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAE,CAAC,IAAI,CAAC,SAAS,IAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IAC/K,IAAG,QAAQ,KAAG,SAAS;QAAC,OAAO;IAC/B,MAAM,SAAS,GAAC,IAAI,CAAC,MAAM,EAAE,SAAS,IAAE,EAAE,EAAC,UAAU,GAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,KAAG,OAAO,CAAC,CAAC,MAAM,CAAC;IACnH,IAAG,IAAI,CAAC,SAAS,IAAE,CAAC,CAAC,UAAU,IAAE,QAAQ,CAAC,MAAM,KAAG,UAAU,IAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,IAAE,CAAC,IAAI,CAAC,SAAS,IAAE,QAAQ,CAAC,MAAM;QAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IAC9O,IAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAA,EAAE,CAAA,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAG,QAAQ,CAAC,MAAM;QAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC/G,KAAI,MAAM,OAAO,IAAI,QAAQ;QAAC,IAAG,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAA,EAAE,CAAA,OAAO,CAAC,UAAU,KAAG,OAAO,CAAC,UAAU,CAAC,IAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAA,EAAE,CAAA,QAAQ,CAAC,EAAE,KAAG,OAAO,CAAC,UAAU,IAAE,QAAQ,CAAC,MAAM,KAAG,OAAO,CAAC,MAAM,IAAE,QAAQ,CAAC,IAAI,KAAG,aAAa,CAAC;YAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;AAClT,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAoB,EAAC,IAAgB,EAAC,KAAyB,EAAC,KAAsB,EAAC,SAAgB,EAAC,QAAoB;IAClK,MAAM,CAAC,GAAC,yBAAyB,CAAC,KAAK,CAAC,MAAM,EAAC,IAAI,CAAC,EAAC,CAAC,GAAC,KAAK,CAAC,WAAY,EAAC,MAAM,GAAC,IAAI,CAAC,WAAY,CAAC;IACnG,MAAM,MAAM,GAAC,GAAE,EAAE,GAAC,IAAG,KAAK,CAAC,MAAM,KAAG,SAAS,IAAE,CAAC,KAAK,CAAC,OAAO,IAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,MAAM,KAAG,SAAS,CAAC;QAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC,CAAA,CAAC,CAAC;IAChN,IAAG,CAAC,CAAC,IAAI,KAAG,uBAAuB,EAAC,CAAC;QACnC,IAAG,KAAK,CAAC,OAAO,IAAE,CAAC,CAAC,OAAO,EAAC,UAAU,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;YAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACpI,IAAG,CAAC,CAAC,UAAU,IAAE,CAAC,CAAC,UAAU,KAAG,CAAC,CAAC,UAAU;YAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;QACnI,MAAM,MAAM,GAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,CAAC,CAAC,UAAU,CAAC,EAAC,MAAM,GAAC,MAAM,EAAE,MAAM,CAAC;QACtE,IAAG,MAAM,EAAE,IAAI,KAAG,qBAAqB,IAAE,MAAM,CAAC,IAAI,KAAG,YAAY,IAAE,MAAM,CAAC,UAAU,IAAE,CAAC,CAAC,YAAY,IAAG,MAAM,CAAC,QAAQ,CAAC,IAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,CAAC,IAAI,KAAG,uBAAuB,IAAE,CAAC,CAAC,MAAM,CAAC,UAAU,KAAG,CAAC,CAAC,UAAU,CAAC;YAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC7R,MAAM,CAAC,GAAC,MAAM,CAAC,QAAQ,CAAC;QACxB,IAAG,CAAC,CAAC,MAAM,KAAG,QAAQ,IAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,KAAG,CAAC,CAAC,UAAU,EAAC,CAAC;YACzE,MAAM,SAAS,GAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,CAAC,IAAI,KAAG,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAC,CAAC,CAAC,MAAoE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAA,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACzM,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC9B,KAAI,MAAM,OAAO,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE;gBAAC,IAAG,OAAO,CAAC,MAAM,CAAC,IAAI,KAAG,qBAAqB,IAAE,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAC,CAAC;oBACnI,MAAM,QAAQ,GAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAI,OAAO,CAAC,MAAkE,CAAC,UAAU,CAAC,EAAC,KAAK,GAAC,QAAQ,EAAE,MAAM,CAAC;oBACnJ,IAAG,KAAK,EAAE,IAAI,KAAG,qBAAqB,IAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAG,QAAQ,IAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAG,CAAC,CAAC,MAAM,EAAC,CAAC;wBAAA,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAC,EAAC,UAAU,EAAC,QAAS,CAAC,EAAE,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAC,QAAQ,EAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAC,CAAC;wBAAA,MAAM;oBAAA,CAAC;gBAC7O,CAAC;QACH,CAAC;QACD,IAAG,CAAC,CAAC,MAAM,KAAG,WAAW;YAAC,KAAI,MAAM,KAAK,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM;gBAAC,IAAG,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,KAAK,CAAC,EAAE,CAAC,IAAE,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChM,4FAA4F;QAC5F,CAAC,CAAC,KAAK,GAAC,QAAQ,CAAC;QAAA,CAAC,CAAC,cAAc,GAAC,KAAK,CAAC;QAAA,CAAC,CAAC,MAAM,GAAC,IAAI,CAAC;QAAA,CAAC,CAAC,MAAM,GAAC,IAAI,CAAC;QAAA,CAAC,CAAC,QAAQ,GAAC,IAAI,CAAC;QAAA,CAAC,CAAC,UAAU,GAAC,IAAI,CAAC;QAAA,CAAC,CAAC,KAAK,GAAC,IAAI,CAAC;QAAA,CAAC,CAAC,IAAI,GAAC,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,kGAAkG,EAAC,CAAC;QAAA,OAAO;IAC9P,CAAC;IACD,IAAG,CAAC,CAAC,IAAI,KAAG,mBAAmB,EAAC,CAAC;QAC/B,IAAG,KAAK,CAAC,OAAO,IAAE,CAAC,CAAC,KAAK,KAAG,QAAQ,IAAE,CAAC,CAAC,CAAC,QAAQ,IAAE,CAAC,CAAC,MAAM,IAAE,MAAM,CAAC,SAAS,IAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,KAAK,CAAC,QAAQ;YAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;QAC3M,CAAC,CAAC,KAAK,GAAC,CAAC,CAAC,QAAQ,CAAA,CAAC,CAAA,UAAU,CAAA,CAAC,CAAA,OAAO,CAAC;QAAA,CAAC,CAAC,MAAM,GAAC,IAAI,CAAC;QAAA,CAAC,CAAC,IAAI,GAAC,IAAI,CAAC;QAAA,CAAC,CAAC,WAAW,GAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1F,IAAG,CAAC,CAAC,CAAC,QAAQ,EAAC,CAAC;YAAA,CAAC,CAAC,KAAK,GAAC,IAAI,CAAC;YAAA,CAAC,CAAC,UAAU,GAAC,IAAI,CAAC;QAAA,CAAC;QAAA,OAAO;IACzD,CAAC;IACD,MAAM,EAAE,CAAC;IACT,IAAG,CAAC,CAAC,IAAI,KAAG,sBAAsB,IAAE,CAAC,CAAC,IAAI,KAAG,sBAAsB,EAAC,CAAC;QACnE,MAAM,QAAQ,GAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,CAAC,CAAC,UAAU,CAAC,CAAC;QAClD,IAAG,CAAC,CAAC,KAAK,KAAG,UAAU,IAAE,CAAC,CAAC,UAAU,KAAG,CAAC,CAAC,UAAU,IAAE,CAAC,CAAC,CAAC,QAAQ,IAAE,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAE,CAAC,QAAQ,IAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,KAAK,CAAC,QAAQ,IAAE,CAAC,CAAC,YAAY,KAAG,uBAAuB,CAAC,QAAQ,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC;YAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QACtS,IAAG,CAAC,CAAC,IAAI,KAAG,sBAAsB,EAAC,CAAC;YAAA,IAAG,CAAC,CAAC,MAAM,EAAE,SAAS;gBAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YAAA,CAAC,CAAC,MAAM,GAAC,EAAC,UAAU,EAAC,CAAC,CAAC,UAAU,EAAC,YAAY,EAAC,CAAC,CAAC,YAAY,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC;QAAA,CAAC;aACrM,CAAC;YAAA,IAAG,CAAC,CAAC,CAAC,MAAM,IAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAE,CAAC,CAAC,MAAM,CAAC,UAAU,KAAG,CAAC,CAAC,UAAU,IAAE,CAAC,CAAC,MAAM,CAAC,YAAY,KAAG,CAAC,CAAC,YAAY;gBAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAAA,CAAC,CAAC,MAAM,CAAC,QAAQ,GAAC,IAAI,CAAC;YAAA,CAAC,CAAC,cAAc,GAAC,KAAK,CAAC;QAAA,CAAC;QAAA,OAAO;IAC/N,CAAC;IACD,IAAG,CAAC,CAAC,IAAI,KAAG,qBAAqB,EAAC,CAAC;QACjC,MAAM,QAAQ,GAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,KAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAE,CAAC,CAAC,YAAY,KAAG,QAAQ,CAAC,IAAI,IAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,KAAK,CAAC,QAAQ;YAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACjM,MAAM,OAAO,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,CAAC,CAAC,OAAO,CAAE,CAAC;QACrD,IAAI,QAAQ,GAAC,OAAO,CAAC;QAAA,KAAI,IAAI,CAAC,GAAC,CAAC,EAAC,CAAC,GAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAC,CAAC,EAAE,EAAC,CAAC;YAAA,IAAG,CAAC,CAAC,IAAI,KAAG,YAAY,IAAE,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,OAAO,KAAG,QAAQ,CAAC,EAAE,IAAE,CAAC,IAAI,CAAC,UAAU,IAAE,IAAI,CAAC,MAAM,KAAG,QAAQ,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAAA,MAAM,MAAM,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAAA,IAAG,CAAC,MAAM;gBAAC,MAAM;YAAA,QAAQ,GAAC,MAAM,CAAC;QAAA,CAAC;QACrX,IAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,SAAS,GAAC,OAAO,CAAC,YAAY;YAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACrG,IAAG,CAAC,CAAC,IAAI,KAAG,YAAY,EAAC,CAAC;YACxB,IAAG,CAAC,CAAC,KAAK,KAAG,OAAO,IAAE,CAAC,CAAC,KAAK,KAAG,CAAC,CAAC,MAAM,GAAC,CAAC,IAAE,CAAC,CAAC,CAAC,WAAW,IAAE,CAAC,CAAC,YAAY,KAAG,QAAQ,CAAC,IAAI;gBAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAChJ,MAAM,SAAS,GAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,MAAM,KAAG,WAAW,CAAC,CAAC,MAAM,CAAC;YAC1F,IAAG,SAAS,IAAE,CAAC,CAAC,cAAc,IAAE,CAAC,CAAC,aAAa,IAAE,MAAM,CAAC,gBAAgB;gBAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACzH,CAAC,CAAC,aAAa,GAAC,SAAS,GAAC,CAAC,CAAC,cAAc,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,aAAa,GAAC,CAAC,CAAC;YAAA,CAAC,CAAC,cAAc,GAAC,SAAS,CAAC;YAC1F,CAAC,CAAC,MAAM,GAAC,CAAC,CAAC,KAAK,CAAC;YAAA,CAAC,CAAC,WAAW,GAAC,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;YAAA,CAAC,CAAC,YAAY,GAAC,CAAC,CAAC,YAAY,CAAC;YAAA,CAAC,CAAC,KAAK,GAAC,IAAI,CAAC;YAAA,CAAC,CAAC,QAAQ,GAAC,IAAI,CAAC;YAAA,CAAC,CAAC,UAAU,GAAC,IAAI,CAAC;YAAA,CAAC,CAAC,WAAW,GAAC,KAAK,CAAC;QACrJ,CAAC;aAAK,IAAG,CAAC,CAAC,KAAK,KAAG,aAAa,IAAE,CAAC,CAAC,KAAK,KAAG,CAAC,CAAC,MAAM,IAAE,CAAC,CAAC,YAAY,KAAG,CAAC,CAAC,YAAY;YAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC1J,CAAC,CAAC,KAAK,GAAC,CAAC,CAAC,IAAI,CAAC;QAAA,CAAC,CAAC,MAAM,GAAC,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,EAAC,SAAS,EAAC,CAAC,CAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC,IAAI,EAAC,CAAC;IAChF,CAAC;SAAK,IAAG,CAAC,CAAC,IAAI,KAAG,qBAAqB,EAAC,CAAC;QACvC,IAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAC,SAAS,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,CAAC,CAAC,OAAO,CAAE,CAAC,YAAY,CAAC;YAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QAC/K,IAAG,CAAC,CAAC,KAAK,KAAG,CAAC,CAAC,MAAM,IAAE,CAAC,CAAC,KAAK,KAAG,CAAC,CAAC,IAAI,IAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAG,CAAC,CAAC,OAAO,IAAE,CAAC,CAAC,MAAM,CAAC,SAAS,KAAG,CAAC,CAAC,SAAS,IAAE,CAAC,CAAC,YAAY,KAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI;YAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAClO,MAAM,QAAQ,GAAC,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAC,MAAM,EAAC,IAAI,EAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAAA,CAAC,CAAC,MAAM,GAAC,IAAI,CAAC;QACxG,IAAG,CAAC,CAAC,IAAI,KAAG,YAAY,IAAE,MAAM,CAAC,UAAU,EAAC,CAAC;YAAA,CAAC,CAAC,KAAK,GAAC,QAAQ,CAAC;YAAA,CAAC,CAAC,KAAK,GAAC,aAAa,CAAC;QAAA,CAAC;aAChF,CAAC;YAAA,CAAC,CAAC,QAAQ,GAAC,QAAQ,CAAC;YAAA,CAAC,CAAC,UAAU,GAAC,KAAK,CAAC,EAAE,CAAC;YAAA,CAAC,CAAC,KAAK,GAAC,UAAU,CAAC;YACjE,IAAG,CAAC,CAAC,cAAc,EAAC,CAAC;gBAAA,IAAG,YAAY,IAAI,QAAQ;oBAAC,CAAC,CAAC,MAAM,GAAC,EAAC,UAAU,EAAC,KAAK,CAAC,EAAE,EAAC,YAAY,EAAC,uBAAuB,CAAC,QAAQ,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,KAAK,EAAC,CAAC;;oBAAK,CAAC,CAAC,cAAc,GAAC,KAAK,CAAC;YAAA,CAAC;QAClN,CAAC;IACH,CAAC;SAAK,IAAG,CAAC,CAAC,IAAI,KAAG,qBAAqB,EAAC,CAAC;QACvC,IAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,KAAK,CAAC,QAAQ;YAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACtG,IAAG,CAAC,CAAC,KAAK,KAAG,UAAU,IAAE,CAAC,CAAC,KAAK,KAAG,CAAC,CAAC,MAAM,IAAE,CAAC,CAAC,UAAU,KAAG,CAAC,CAAC,UAAU,IAAE,CAAC,CAAC,CAAC,QAAQ;YAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC3I,MAAM,CAAC,GAAC,CAAC,CAAC,QAAQ,CAAC;QAAA,IAAG,CAAC,CAAC,MAAM,IAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;YAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAAA,CAAC,CAAC,MAAM,GAAC,IAAI,CAAC;QACxI,IAAG,CAAC,CAAC,MAAM,KAAG,OAAO,IAAE,CAAC,CAAC,MAAM,KAAG,QAAQ,EAAC,CAAC;YAC1C,qBAAqB,CAAC,IAAI,EAAC,KAAK,EAAC,KAAK,EAAC,CAAC,CAAC,MAAM,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,CAAC,IAAI,KAAG,eAAe,IAAE,CAAC,CAAC,MAAM,CAAC,MAAM,KAAG,CAAC,CAAC,MAAM,CAAC,CAAC;YACrG,IAAG,CAAC,IAAI,IAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACnG,MAAM,IAAI,GAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAE,CAAC;YAClC,IAAI,CAAC,MAAM,GAAC,SAAS,CAAC;YAAA,IAAI,CAAC,MAAM,GAAC,IAAI,CAAC;YAAA,IAAI,CAAC,WAAW,GAAC,EAAE,CAAC;YAAA,IAAI,CAAC,YAAY,GAAC,EAAE,CAAC;YAAA,IAAI,CAAC,SAAS,GAAC,KAAK,CAAC;YAAA,IAAI,CAAC,UAAU,GAAC,IAAI,CAAC;YAC1H,IAAG,CAAC,CAAC,MAAM,KAAG,QAAQ;gBAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAC,EAAC,UAAU,EAAC,CAAC,CAAC,UAAU,EAAC,QAAQ,EAAC,CAAC,CAAC,QAAQ,EAAC,QAAQ,EAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAC,CAAC;QACvH,CAAC;aAAK,CAAC;YACL,IAAG,CAAC,CAAC,QAAQ,CAAC,MAAM;gBAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;YACnF,IAAG,CAAC,CAAC,MAAM,KAAG,WAAW,IAAE,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAA,EAAE,CAAA,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,KAAG,CAAC,CAAC,UAAU,CAAC;gBAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;QACpM,CAAC;QACD,CAAC,CAAC,KAAK,GAAC,CAAC,CAAC,MAAM,KAAG,MAAM,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,OAAO,CAAC;QAAA,CAAC,CAAC,YAAY,GAAC,CAAC,CAAC,YAAY,CAAC;QACzE,IAAG,CAAC,CAAC,MAAM,KAAG,MAAM;YAAC,CAAC,CAAC,IAAI,GAAC,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,CAAC;QAC7D,CAAC,CAAC,QAAQ,GAAC,IAAI,CAAC;QAAA,CAAC,CAAC,UAAU,GAAC,IAAI,CAAC;QAAA,CAAC,CAAC,KAAK,GAAC,IAAI,CAAC;IACjD,CAAC;SAAK,IAAG,CAAC,CAAC,IAAI,KAAG,oBAAoB,EAAC,CAAC;QACtC,IAAG,CAAC,CAAC,KAAK,KAAG,CAAC,CAAC,MAAM;YAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACvE,CAAC,CAAC,KAAK,GAAC,QAAQ,CAAC;QAAA,CAAC,CAAC,MAAM,GAAC,IAAI,CAAC;QAAA,CAAC,CAAC,IAAI,GAAC,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,yBAAyB,CAAC,QAAsB,EAAC,KAAyB;IACxF,MAAM,CAAC,GAAC,KAAK,CAAC,WAAW,EAAC,CAAC,GAAC,CAAC,EAAE,QAAQ,CAAC;IACxC,IAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAG,aAAa,IAAE,CAAC,CAAC,IAAE,CAAC,CAAC,KAAK,KAAG,UAAU,IAAE,CAAC,CAAC,UAAU,KAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAE,CAAC,CAAC,IAAE,CAAC,CAAC,MAAM,KAAG,WAAW,IAAE,CAAC,KAAK,CAAC,OAAO,IAAE,KAAK,CAAC,MAAM,KAAG,SAAS,IAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,MAAM,KAAG,SAAS,CAAC;QAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IAC3T,IAAG,CAAC,CAAC,MAAM,IAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;QAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAC1G,MAAM,QAAQ,GAAC,EAAC,OAAO,EAAC,QAAQ,CAAC,OAAO,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,EAAC,KAAK,EAAC,QAAQ,CAAC,KAAK,EAAC,CAAC;IACjH,IAAG,aAAa,CAAC,QAAQ,CAAC,KAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;AAC3L,CAAC"}

package/dist/supervision/receipts.d.ts

@@ -0,0 +1,4 @@
+import type { VerificationCommand } from '../isolation/contracts.js';
+/** Only called for executor-owned command artifacts, after scope and integrity checks. */
+export declare function compactCommandReceipt(bytes: Buffer, command: Pick<VerificationCommand, 'argv'>, image: string): string;
+//# sourceMappingURL=receipts.d.ts.map

package/dist/supervision/receipts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts.d.ts","sourceRoot":"","sources":["../../src/supervision/receipts.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,2BAA2B,CAAC;AAEnE,0FAA0F;AAC1F,wBAAgB,qBAAqB,CAAC,KAAK,EAAC,MAAM,EAAC,OAAO,EAAC,IAAI,CAAC,mBAAmB,EAAC,MAAM,CAAC,EAAC,KAAK,EAAC,MAAM,GAAE,MAAM,CAY/G"}

package/dist/supervision/receipts.js

@@ -0,0 +1,21 @@
+import { canonicalJson } from '../approvals/index.js';
+import { OrchestrationError } from '../orchestration/types.js';
+/** Only called for executor-owned command artifacts, after scope and integrity checks. */
+export function compactCommandReceipt(bytes, command, image) {
+    try {
+        const v = JSON.parse(bytes.toString('utf8'));
+        if (v.version !== 1 || v.kind !== 'isolated-command' || canonicalJson(v.argv) !== canonicalJson(command.argv) || v.image !== image ||
+            !Number.isSafeInteger(v.exitCode) || v.exitCode < 0 || !['passed', 'failed', 'cancelled', 'timeout', 'unavailable'].includes(v.outcome) ||
+            typeof v.cleanupConfirmed !== 'boolean' || typeof v.truncated !== 'boolean' || typeof v.stdout !== 'string' || typeof v.stderr !== 'string' ||
+            !Number.isFinite(v.durationMs) || v.durationMs < 0 || typeof v.container !== 'string' ||
+            !/^[a-f0-9]{64}$/.test(v.workspace?.before) || !(v.workspace.after === null || /^[a-f0-9]{64}$/.test(v.workspace.after)))
+            throw new Error();
+        return JSON.stringify({ version: 1, kind: v.kind, argv: v.argv, image: v.image, exitCode: v.exitCode, outcome: v.outcome,
+            cleanupConfirmed: v.cleanupConfirmed, workspace: { before: v.workspace.before, after: v.workspace.after }, durationMs: v.durationMs, truncated: v.truncated,
+            logsOmitted: true });
+    }
+    catch {
+        throw new OrchestrationError('invalid', 'Executor verification receipt is malformed or does not match the reviewed command.');
+    }
+}
+//# sourceMappingURL=receipts.js.map

package/dist/supervision/receipts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts.js","sourceRoot":"","sources":["../../src/supervision/receipts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAC,kBAAkB,EAAC,MAAM,2BAA2B,CAAC;AAG7D,0FAA0F;AAC1F,MAAM,UAAU,qBAAqB,CAAC,KAAY,EAAC,OAAwC,EAAC,KAAY;IACtG,IAAI,CAAC;QACH,MAAM,CAAC,GAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,IAAG,CAAC,CAAC,OAAO,KAAG,CAAC,IAAE,CAAC,CAAC,IAAI,KAAG,kBAAkB,IAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,IAAE,CAAC,CAAC,KAAK,KAAG,KAAK;YACjH,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAE,CAAC,CAAC,QAAQ,GAAC,CAAC,IAAE,CAAC,CAAC,QAAQ,EAAC,QAAQ,EAAC,WAAW,EAAC,SAAS,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7H,OAAO,CAAC,CAAC,gBAAgB,KAAG,SAAS,IAAE,OAAO,CAAC,CAAC,SAAS,KAAG,SAAS,IAAE,OAAO,CAAC,CAAC,MAAM,KAAG,QAAQ,IAAE,OAAO,CAAC,CAAC,MAAM,KAAG,QAAQ;YAC7H,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAE,CAAC,CAAC,UAAU,GAAC,CAAC,IAAE,OAAO,CAAC,CAAC,SAAS,KAAG,QAAQ;YAC7E,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,IAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,KAAG,IAAI,IAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QACvI,OAAO,IAAI,CAAC,SAAS,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,EAAC,QAAQ,EAAC,CAAC,CAAC,QAAQ,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO;YAC1G,gBAAgB,EAAC,CAAC,CAAC,gBAAgB,EAAC,SAAS,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAC,KAAK,EAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAC,EAAC,UAAU,EAAC,CAAC,CAAC,UAAU,EAAC,SAAS,EAAC,CAAC,CAAC,SAAS;YAC/I,WAAW,EAAC,IAAI,EAAC,CAAC,CAAC;IACvB,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAC,oFAAoF,CAAC,CAAC;IAAA,CAAC;AACvI,CAAC"}

package/dist/supervision/reply.d.ts

@@ -0,0 +1,12 @@
+import { type ProjectPlan } from '../orchestration/types.js';
+import type { SupervisionDecision, SupervisionPolicy, SupervisionRole } from './types.js';
+export declare function supervisionDraftHash(draft: SupervisionDecision): string;
+/** Normalize explicit reviewer verdicts; a legacy continue never means approval. */
+export declare function parseSupervisionReply(content: unknown, context: {
+    role: SupervisionRole;
+    draft?: SupervisionDecision | null;
+    policy: SupervisionPolicy;
+    plan: ProjectPlan;
+    evidenceIds: ReadonlySet<string>;
+}): SupervisionDecision;
+//# sourceMappingURL=reply.d.ts.map

package/dist/supervision/reply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reply.d.ts","sourceRoot":"","sources":["../../src/supervision/reply.ts"],"names":[],"mappings":"AACA,OAAO,EAAoB,KAAK,WAAW,EAAC,MAAM,2BAA2B,CAAC;AAG9E,OAAO,KAAK,EAAC,mBAAmB,EAAC,iBAAiB,EAAC,eAAe,EAAC,MAAM,YAAY,CAAC;AAEtF,wBAAgB,oBAAoB,CAAC,KAAK,EAAC,mBAAmB,GAAE,MAAM,CAAuC;AAe7G,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,OAAO,EAAC,OAAO,EAAC,OAAO,EAAC;IAAC,IAAI,EAAC,eAAe,CAAC;IAAA,KAAK,CAAC,EAAC,mBAAmB,GAAC,IAAI,CAAC;IAAA,MAAM,EAAC,iBAAiB,CAAC;IAAA,IAAI,EAAC,WAAW,CAAC;IAAA,WAAW,EAAC,WAAW,CAAC,MAAM,CAAC,CAAA;CAAC,GAAE,mBAAmB,CAclN"}

package/dist/supervision/reply.js

@@ -0,0 +1,50 @@
+import { canonicalJson, digest } from '../approvals/index.js';
+import { OrchestrationError } from '../orchestration/types.js';
+import { shape, text } from '../orchestration/validation.js';
+import { MAX_SUPERVISION_DECISION_BYTES, validateSupervisionDecision } from './contracts.js';
+export function supervisionDraftHash(draft) { return digest(canonicalJson(draft)); }
+/** A single explicit JSON block is data. Surrounding commentary grants no authority. */
+function replyJson(content, role) {
+    const name = role === 'reviewer' ? 'Reviewer' : 'Controller';
+    const invalid = () => new OrchestrationError('invalid', `${name} returned malformed or ambiguous decision JSON.`);
+    if (typeof content !== 'string')
+        throw invalid();
+    if (Buffer.byteLength(content) > MAX_SUPERVISION_DECISION_BYTES)
+        throw new OrchestrationError('invalid', `${name} reply exceeds its byte limit.`);
+    try {
+        return JSON.parse(content.trim());
+    }
+    catch { /* Accept one explicitly tagged block only. */ }
+    const fences = [...content.matchAll(/^[ \t]*```[^\r\n]*\r?$/gm)];
+    if (fences.length !== 2 || !/^```json[ \t]*$/.test(fences[0][0].trim()) || fences[1][0].trim() !== '```')
+        throw invalid();
+    const body = content.slice(fences[0].index + fences[0][0].length, fences[1].index);
+    try {
+        return JSON.parse(body);
+    }
+    catch {
+        throw invalid();
+    }
+}
+/** Normalize explicit reviewer verdicts; a legacy continue never means approval. */
+export function parseSupervisionReply(content, context) {
+    const value = replyJson(content, context.role), validate = (decision) => validateSupervisionDecision(decision, context.policy, context.plan, context.evidenceIds);
+    if (!value || typeof value !== 'object' || !Object.hasOwn(value, 'verdict'))
+        return validate(value);
+    if (context.role !== 'reviewer' || !context.draft)
+        throw new OrchestrationError('invalid', 'Reviewer verdict requires the current controller draft.');
+    shape(value, ['version', 'verdict', 'draftHash'], ['reason', 'decision']);
+    if (value.version !== 1 || value.draftHash !== supervisionDraftHash(context.draft))
+        throw new OrchestrationError('invalid', 'Reviewer verdict does not match the current draft.');
+    if (value.verdict === 'approve' || value.verdict === 'reject') {
+        shape(value, ['version', 'verdict', 'draftHash', 'reason']);
+        text(value.reason);
+        return validate(value.verdict === 'approve' ? { ...context.draft, reason: value.reason } : { version: 1, action: 'stop', reason: value.reason, evidence: context.draft.evidence });
+    }
+    if (value.verdict === 'revise') {
+        shape(value, ['version', 'verdict', 'draftHash', 'decision']);
+        return validate(value.decision);
+    }
+    throw new OrchestrationError('invalid', 'Unknown reviewer verdict.');
+}
+//# sourceMappingURL=reply.js.map

package/dist/supervision/reply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reply.js","sourceRoot":"","sources":["../../src/supervision/reply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,EAAC,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAC,kBAAkB,EAAkB,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAC,8BAA8B,EAAC,2BAA2B,EAAC,MAAM,gBAAgB,CAAC;AAG1F,MAAM,UAAU,oBAAoB,CAAC,KAAyB,IAAU,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA,CAAC;AAE7G,wFAAwF;AACxF,SAAS,SAAS,CAAC,OAAe,EAAC,IAAoB;IACrD,MAAM,IAAI,GAAC,IAAI,KAAG,UAAU,CAAA,CAAC,CAAA,UAAU,CAAA,CAAC,CAAA,YAAY,CAAC;IACrD,MAAM,OAAO,GAAC,GAAE,EAAE,CAAA,IAAI,kBAAkB,CAAC,SAAS,EAAC,GAAG,IAAI,iDAAiD,CAAC,CAAC;IAC7G,IAAG,OAAO,OAAO,KAAG,QAAQ;QAAC,MAAM,OAAO,EAAE,CAAC;IAC7C,IAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAC,8BAA8B;QAAC,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC7I,IAAG,CAAC;QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC,CAAA,8CAA8C,CAAA,CAAC;IAC5F,MAAM,MAAM,GAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC/D,IAAG,MAAM,CAAC,MAAM,KAAG,CAAC,IAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAE,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAG,KAAK;QAAC,MAAM,OAAO,EAAE,CAAC;IAClH,MAAM,IAAI,GAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAM,GAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;IAClF,IAAG,CAAC;QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,OAAO,EAAE,CAAC;IAAA,CAAC;AACtD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAC,OAAwI;IAC5L,MAAM,KAAK,GAAC,SAAS,CAAC,OAAO,EAAC,OAAO,CAAC,IAAI,CAAC,EAAC,QAAQ,GAAC,CAAC,QAAgB,EAAC,EAAE,CAAA,2BAA2B,CAAC,QAAQ,EAAC,OAAO,CAAC,MAAM,EAAC,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/J,IAAG,CAAC,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAC,SAAS,CAAC;QAAC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3F,IAAG,OAAO,CAAC,IAAI,KAAG,UAAU,IAAE,CAAC,OAAO,CAAC,KAAK;QAAC,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAC,yDAAyD,CAAC,CAAC;IAC/I,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,SAAS,EAAC,WAAW,CAAC,EAAC,CAAC,QAAQ,EAAC,UAAU,CAAC,CAAC,CAAC;IACrE,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,IAAE,KAAK,CAAC,SAAS,KAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC;QAAC,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAC,oDAAoD,CAAC,CAAC;IACzK,IAAG,KAAK,CAAC,OAAO,KAAG,SAAS,IAAE,KAAK,CAAC,OAAO,KAAG,QAAQ,EAAC,CAAC;QACtD,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,SAAS,EAAC,WAAW,EAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3E,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,KAAG,SAAS,CAAA,CAAC,CAAA,EAAC,GAAG,OAAO,CAAC,KAAK,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,CAAA,CAAC,CAAA,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAC,CAAC,CAAC;IAClK,CAAC;IACD,IAAG,KAAK,CAAC,OAAO,KAAG,QAAQ,EAAC,CAAC;QAC3B,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,SAAS,EAAC,WAAW,EAAC,UAAU,CAAC,CAAC,CAAC;QAAA,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAC,2BAA2B,CAAC,CAAC;AACtE,CAAC"}

package/dist/supervision/runtime.d.ts

@@ -0,0 +1,8 @@
+import { type AgentExecution } from '../execution/index.js';
+import type { ExecutionStore } from '../orchestration/execution-store.js';
+import type { CoordinatorOptions } from '../orchestration/coordinator.js';
+import type { SupervisionProjection } from './types.js';
+export declare function needsSupervision(store: ExecutionStore): boolean;
+/** At most one controller/reviewer round per barrier; all accounting is inherited. */
+export declare function supervise(store: ExecutionStore, authority: AgentExecution, options: CoordinatorOptions, assertRun: () => void): Promise<SupervisionProjection>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/supervision/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/supervision/runtime.ts"],"names":[],"mappings":"AAQA,OAAO,EAAwD,KAAK,cAAc,EAAC,MAAM,uBAAuB,CAAC;AAYjH,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,qCAAqC,CAAC;AACxE,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,iCAAiC,CAAC;AAYxE,OAAO,KAAK,EAAiB,qBAAqB,EAAC,MAAM,YAAY,CAAC;AAEtE,wBAAgB,gBAAgB,CAAC,KAAK,EAAC,cAAc,GAAE,OAAO,CAI7D;AAoFD,sFAAsF;AACtF,wBAAsB,SAAS,CAAC,KAAK,EAAC,cAAc,EAAC,SAAS,EAAC,cAAc,EAAC,OAAO,EAAC,kBAAkB,EAAC,SAAS,EAAC,MAAI,IAAI,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAqB1J"}