@caupulican/pi-adaptative 0.81.40 → 0.81.42

package/dist/core/delegation/worker-write-reservation.js

@@ -0,0 +1,348 @@
+import { createHash, randomUUID } from "node:crypto";
+import { existsSync, mkdirSync, unlinkSync, watch } from "node:fs";
+import { basename, dirname } from "node:path";
+import { stateFile } from "../agent-paths.js";
+import { canonicalPathScopeIdentity, isPathWithinScope, pathScopesOverlap, safeRealpathSync, } from "../autonomy/path-scope.js";
+import { withFileLockSync, writeFileAtomicSync } from "../util/atomic-file.js";
+import { readBoundedTextFileSync } from "../util/bounded-file.js";
+import { requireBoundedTrimmedText } from "../util/bounded-value.js";
+import { parseLocalWorkerProcessOwnerId } from "./worker-process-owner.js";
+const SCHEMA_VERSION = 1;
+const MAX_IDENTIFIER_CHARS = 256;
+const MAX_PATH_CHARS = 4096;
+const MAX_SCOPES = 32;
+const MAX_RESERVATIONS = 64;
+const MAX_FILE_BYTES = 128 * 1024;
+const availabilityListeners = new Map();
+function positiveFencingToken(value) {
+    if (!Number.isSafeInteger(value) || value < 1)
+        throw new TypeError("Fencing token must be a positive safe integer.");
+    return value;
+}
+/**
+ * Prefer a real path for filesystem-backed scopes, but preserve a foreign lexical path family
+ * (for example a Windows drive path inspected from WSL) so shared path-scope helpers retain
+ * their documented Windows drive/UNC comparison semantics.
+ */
+function canonicalRealOrLexicalPath(value, label) {
+    const lexical = canonicalPathScopeIdentity(requireBoundedTrimmedText(value, MAX_PATH_CHARS, label));
+    const resolved = safeRealpathSync(lexical);
+    return pathScopesOverlap(lexical, resolved) ? canonicalPathScopeIdentity(resolved) : lexical;
+}
+function canonicalWorkspace(workspace) {
+    const repositoryRoot = canonicalRealOrLexicalPath(workspace.repositoryRoot, "Repository root");
+    const executionRoot = canonicalRealOrLexicalPath(workspace.executionRoot, "Execution root");
+    const isolatedWorktreeId = workspace.isolatedWorktreeId
+        ? requireBoundedTrimmedText(workspace.isolatedWorktreeId, MAX_IDENTIFIER_CHARS, "Isolated worktree id")
+        : undefined;
+    const isPrimaryExecutionRoot = isPathWithinScope(executionRoot, repositoryRoot) && isPathWithinScope(repositoryRoot, executionRoot);
+    if (isPrimaryExecutionRoot && isolatedWorktreeId) {
+        throw new TypeError("An isolated worktree execution root must differ from the shared repository root.");
+    }
+    if (!isPrimaryExecutionRoot && !isolatedWorktreeId) {
+        throw new TypeError("A non-primary execution root requires an explicit isolated worktree identity.");
+    }
+    return {
+        repositoryRoot,
+        executionRoot,
+        executionIdentity: isolatedWorktreeId ? `isolated:${executionRoot}` : `shared:${repositoryRoot}`,
+        ...(isolatedWorktreeId ? { isolatedWorktreeId } : {}),
+    };
+}
+function reservationFile(agentDir, repositoryRoot) {
+    const digest = createHash("sha256")
+        .update("pi-worker-write-reservations-v1")
+        .update("\0")
+        .update(repositoryRoot)
+        .digest("hex");
+    return stateFile(agentDir, "orchestration", "worker-write-reservations", `${digest}.json`);
+}
+function notifyAvailability(filePath) {
+    for (const listener of availabilityListeners.get(filePath) ?? [])
+        queueMicrotask(listener);
+}
+function leaseFromRecord(filePath, record) {
+    return {
+        filePath,
+        reservationId: record.reservationId,
+        parentSessionId: record.parentSessionId,
+        ownerId: record.ownerId,
+        taskId: record.taskId,
+        attemptId: record.attemptId,
+        fencingToken: record.fencingToken,
+        repositoryRoot: record.repositoryRoot,
+        executionRoot: record.executionRoot,
+        executionIdentity: record.executionIdentity,
+        ...(record.isolatedWorktreeId ? { isolatedWorktreeId: record.isolatedWorktreeId } : {}),
+        writeScopes: [...record.writeScopes],
+    };
+}
+function stringField(value, label, maximum) {
+    if (typeof value !== "string")
+        throw new Error(`Worker write reservation ${label} is invalid.`);
+    return requireBoundedTrimmedText(value, maximum, `Worker write reservation ${label}`);
+}
+function localOwnerId(value) {
+    const ownerId = stringField(value, "owner id", MAX_IDENTIFIER_CHARS);
+    if (!parseLocalWorkerProcessOwnerId(ownerId))
+        throw new Error("Worker write reservation owner id is invalid.");
+    return ownerId;
+}
+function parseReservation(value, repositoryRoot) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error("Worker write reservation entry is invalid.");
+    const entry = value;
+    const fencingToken = entry.fencingToken;
+    if (typeof fencingToken !== "number")
+        throw new Error("Worker write reservation fencing token is invalid.");
+    const parsedRepositoryRoot = stringField(entry.repositoryRoot, "repository root", MAX_PATH_CHARS);
+    if (parsedRepositoryRoot !== repositoryRoot)
+        throw new Error("Worker write reservation repository root conflicts with its store.");
+    if (!Array.isArray(entry.writeScopes) || entry.writeScopes.length === 0 || entry.writeScopes.length > MAX_SCOPES) {
+        throw new Error("Worker write reservation scopes are invalid.");
+    }
+    const writeScopes = entry.writeScopes.map((scope) => stringField(scope, "write scope", MAX_PATH_CHARS));
+    const isolatedWorktreeId = entry.isolatedWorktreeId === undefined
+        ? undefined
+        : stringField(entry.isolatedWorktreeId, "isolated worktree id", MAX_IDENTIFIER_CHARS);
+    return {
+        reservationId: stringField(entry.reservationId, "id", MAX_IDENTIFIER_CHARS),
+        parentSessionId: stringField(entry.parentSessionId, "parent session", MAX_IDENTIFIER_CHARS),
+        ownerId: localOwnerId(entry.ownerId),
+        taskId: stringField(entry.taskId, "task", MAX_IDENTIFIER_CHARS),
+        attemptId: stringField(entry.attemptId, "attempt", MAX_IDENTIFIER_CHARS),
+        fencingToken: positiveFencingToken(fencingToken),
+        repositoryRoot: parsedRepositoryRoot,
+        executionRoot: stringField(entry.executionRoot, "execution root", MAX_PATH_CHARS),
+        executionIdentity: stringField(entry.executionIdentity, "execution identity", MAX_PATH_CHARS),
+        ...(isolatedWorktreeId ? { isolatedWorktreeId } : {}),
+        writeScopes,
+        createdAt: stringField(entry.createdAt, "created time", MAX_IDENTIFIER_CHARS),
+    };
+}
+function parseStore(raw, repositoryRoot) {
+    if (Buffer.byteLength(raw, "utf-8") > MAX_FILE_BYTES)
+        throw new Error("Worker write reservation store exceeds its byte limit.");
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch {
+        throw new Error("Worker write reservation store is unreadable; refusing concurrent write admission.");
+    }
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error("Worker write reservation store is invalid.");
+    const store = value;
+    if (store.schemaVersion !== SCHEMA_VERSION)
+        throw new Error("Worker write reservation store schema is unsupported.");
+    if (stringField(store.repositoryRoot, "store repository root", MAX_PATH_CHARS) !== repositoryRoot) {
+        throw new Error("Worker write reservation store root conflicts with the requested workspace.");
+    }
+    if (!Array.isArray(store.reservations) || store.reservations.length > MAX_RESERVATIONS) {
+        throw new Error("Worker write reservation store entries are invalid.");
+    }
+    const reservations = store.reservations.map((entry) => parseReservation(entry, repositoryRoot));
+    if (new Set(reservations.map((entry) => entry.reservationId)).size !== reservations.length) {
+        throw new Error("Worker write reservation store contains duplicate reservation identities.");
+    }
+    return { schemaVersion: SCHEMA_VERSION, repositoryRoot, reservations };
+}
+function writeStore(filePath, store) {
+    const serialized = `${JSON.stringify(store)}\n`;
+    if (Buffer.byteLength(serialized, "utf-8") > MAX_FILE_BYTES) {
+        throw new Error("Worker write reservation store would exceed its byte limit.");
+    }
+    writeFileAtomicSync(filePath, serialized, { mode: 0o600 });
+}
+function overlappingReservationIds(reservations, executionIdentity, writeScopes) {
+    const matches = [];
+    for (const reservation of reservations) {
+        if (reservation.executionIdentity !== executionIdentity)
+            continue;
+        if (reservation.writeScopes.some((reservedScope) => writeScopes.some((requestedScope) => pathScopesOverlap(reservedScope, requestedScope)))) {
+            matches.push(reservation.reservationId);
+        }
+    }
+    return matches;
+}
+/**
+ * Cross-process, agent-owned admission seam for concurrent worker mutations. It owns only
+ * reservations; lifecycle, process liveness, and terminal status remain controller concerns.
+ */
+export class WorkerWriteReservationStore {
+    agentDir;
+    watchDirectory;
+    constructor(options) {
+        this.agentDir = requireBoundedTrimmedText(options.agentDir, MAX_PATH_CHARS, "Agent directory");
+        this.watchDirectory = options.watchDirectory ?? watch;
+    }
+    acquire(request) {
+        if (request.access === "read")
+            return { kind: "granted" };
+        if (request.access !== "write")
+            throw new TypeError("Worker write reservation access must be read or write.");
+        if (request.writeScopes.length === 0 || request.writeScopes.length > MAX_SCOPES) {
+            throw new TypeError(`Write reservations require from 1 through ${MAX_SCOPES} write scopes.`);
+        }
+        const workspace = canonicalWorkspace(request.workspace);
+        const writeScopes = [
+            ...new Set(request.writeScopes.map((scope) => canonicalRealOrLexicalPath(scope, "Write scope"))),
+        ].sort();
+        if (writeScopes.some((scope) => !isPathWithinScope(scope, workspace.executionRoot))) {
+            throw new TypeError("Write reservation scopes must be within the execution root.");
+        }
+        const parentSessionId = requireBoundedTrimmedText(request.parentSessionId, MAX_IDENTIFIER_CHARS, "Parent session id");
+        const ownerId = localOwnerId(request.ownerId);
+        const taskId = requireBoundedTrimmedText(request.taskId, MAX_IDENTIFIER_CHARS, "Task id");
+        const attemptId = requireBoundedTrimmedText(request.attemptId, MAX_IDENTIFIER_CHARS, "Attempt id");
+        const fencingToken = positiveFencingToken(request.fencingToken);
+        const filePath = reservationFile(this.agentDir, workspace.repositoryRoot);
+        return withFileLockSync(filePath, () => {
+            const store = this.readLocked(filePath, workspace.repositoryRoot);
+            const matchingAttempt = store.reservations.find((reservation) => reservation.parentSessionId === parentSessionId &&
+                reservation.ownerId === ownerId &&
+                reservation.taskId === taskId &&
+                reservation.attemptId === attemptId &&
+                reservation.fencingToken === fencingToken);
+            if (matchingAttempt) {
+                if (matchingAttempt.executionIdentity !== workspace.executionIdentity ||
+                    matchingAttempt.isolatedWorktreeId !== workspace.isolatedWorktreeId ||
+                    matchingAttempt.writeScopes.length !== writeScopes.length ||
+                    matchingAttempt.writeScopes.some((scope, index) => scope !== writeScopes[index])) {
+                    return { kind: "blocked", reasonCode: "attempt_reservation_conflict" };
+                }
+                return { kind: "granted", lease: leaseFromRecord(filePath, matchingAttempt) };
+            }
+            const conflicts = overlappingReservationIds(store.reservations, workspace.executionIdentity, writeScopes);
+            if (conflicts.length > 0) {
+                return { kind: "blocked", reasonCode: "overlapping_write_scope", conflictingReservationIds: conflicts };
+            }
+            if (store.reservations.length >= MAX_RESERVATIONS)
+                return { kind: "blocked", reasonCode: "reservation_capacity_reached" };
+            const record = {
+                reservationId: randomUUID(),
+                parentSessionId,
+                ownerId,
+                taskId,
+                attemptId,
+                fencingToken,
+                repositoryRoot: workspace.repositoryRoot,
+                executionRoot: workspace.executionRoot,
+                executionIdentity: workspace.executionIdentity,
+                ...(workspace.isolatedWorktreeId ? { isolatedWorktreeId: workspace.isolatedWorktreeId } : {}),
+                writeScopes,
+                createdAt: new Date().toISOString(),
+            };
+            store.reservations.push(record);
+            writeStore(filePath, store);
+            return { kind: "granted", lease: leaseFromRecord(filePath, record) };
+        });
+    }
+    release(lease) {
+        const repositoryRoot = requireBoundedTrimmedText(lease.repositoryRoot, MAX_PATH_CHARS, "Lease repository root");
+        const ownerId = localOwnerId(lease.ownerId);
+        const expectedFilePath = reservationFile(this.agentDir, repositoryRoot);
+        if (lease.filePath !== expectedFilePath)
+            throw new TypeError("Worker write reservation lease does not belong to this agent state.");
+        return withFileLockSync(expectedFilePath, () => {
+            const store = this.readLocked(expectedFilePath, repositoryRoot);
+            const index = store.reservations.findIndex((reservation) => reservation.reservationId === lease.reservationId);
+            if (index < 0) {
+                const supersedingReservation = store.reservations.some((reservation) => reservation.parentSessionId === lease.parentSessionId &&
+                    reservation.ownerId === ownerId &&
+                    reservation.taskId === lease.taskId &&
+                    reservation.fencingToken > lease.fencingToken);
+                return { kind: supersedingReservation ? "stale_fence" : "not_found" };
+            }
+            const record = store.reservations[index];
+            if (record.parentSessionId !== lease.parentSessionId ||
+                record.ownerId !== ownerId ||
+                record.taskId !== lease.taskId ||
+                record.attemptId !== lease.attemptId ||
+                record.fencingToken !== lease.fencingToken ||
+                record.executionIdentity !== lease.executionIdentity ||
+                record.isolatedWorktreeId !== lease.isolatedWorktreeId) {
+                return { kind: "stale_fence" };
+            }
+            store.reservations.splice(index, 1);
+            if (store.reservations.length === 0)
+                unlinkSync(expectedFilePath);
+            else
+                writeStore(expectedFilePath, store);
+            notifyAvailability(expectedFilePath);
+            return { kind: "released" };
+        });
+    }
+    /** Event-driven cross-process wakeup for queued write admission; caller owns disposal. */
+    watchAvailability(workspace, listener) {
+        const canonical = canonicalWorkspace(workspace);
+        const filePath = reservationFile(this.agentDir, canonical.repositoryRoot);
+        const listeners = availabilityListeners.get(filePath) ?? new Set();
+        availabilityListeners.set(filePath, listeners);
+        listeners.add(listener);
+        const directory = dirname(filePath);
+        mkdirSync(directory, { recursive: true });
+        let scheduled = false;
+        const schedule = () => {
+            if (scheduled)
+                return;
+            scheduled = true;
+            queueMicrotask(() => {
+                scheduled = false;
+                listener();
+            });
+        };
+        const watcher = this.watchDirectory(directory, { persistent: false }, (_eventType, fileName) => {
+            // Node may omit a filename (notably on Windows), or provide a Buffer when the watcher is
+            // configured that way. An unknown filename is conservatively treated as a wake signal: the
+            // scheduler re-evaluates durable admission, so this cannot grant access by itself.
+            if (fileName === null) {
+                schedule();
+                return;
+            }
+            const normalizedName = Buffer.isBuffer(fileName) ? fileName.toString("utf-8") : fileName;
+            if (normalizedName === basename(filePath))
+                schedule();
+        });
+        return () => {
+            listeners.delete(listener);
+            if (listeners.size === 0)
+                availabilityListeners.delete(filePath);
+            watcher.close();
+        };
+    }
+    recover(request) {
+        const workspace = canonicalWorkspace(request.workspace);
+        const filePath = reservationFile(this.agentDir, workspace.repositoryRoot);
+        const evidence = new Map();
+        for (const observation of request.evidence) {
+            const reservationId = requireBoundedTrimmedText(observation.reservationId, MAX_IDENTIFIER_CHARS, "Reservation evidence id");
+            if (observation.state !== "live" && observation.state !== "not_live" && observation.state !== "unknown") {
+                throw new TypeError("Reservation evidence state must be live, not_live, or unknown.");
+            }
+            if (evidence.has(reservationId))
+                throw new TypeError("Reservation evidence must not repeat an identity.");
+            evidence.set(reservationId, observation.state);
+        }
+        return withFileLockSync(filePath, () => {
+            const store = this.readLocked(filePath, workspace.repositoryRoot);
+            const outcomes = store.reservations
+                .filter((reservation) => reservation.executionIdentity === workspace.executionIdentity)
+                .map((reservation) => {
+                const state = evidence.get(reservation.reservationId);
+                return {
+                    kind: state === "live" ? "active" : state === "not_live" ? "stale" : "inspection_required",
+                    reservationId: reservation.reservationId,
+                    lease: leaseFromRecord(filePath, reservation),
+                };
+            });
+            return { outcomes };
+        });
+    }
+    readLocked(filePath, repositoryRoot) {
+        if (!existsSync(filePath))
+            return { schemaVersion: SCHEMA_VERSION, repositoryRoot, reservations: [] };
+        return parseStore(readBoundedTextFileSync(filePath, MAX_FILE_BYTES, "Worker write reservation store"), repositoryRoot);
+    }
+}
+//# sourceMappingURL=worker-write-reservation.js.map

package/dist/core/delegation/worker-write-reservation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-write-reservation.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-write-reservation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,UAAU,EAAkB,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EACN,0BAA0B,EAC1B,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAE3E,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAClC,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAA2B,CAAC;AAyGjE,SAAS,oBAAoB,CAAC,KAAa,EAAU;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACrH,OAAO,KAAK,CAAC;AAAA,CACb;AAED;;;;GAIG;AACH,SAAS,0BAA0B,CAAC,KAAa,EAAE,KAAa,EAAU;IACzE,MAAM,OAAO,GAAG,0BAA0B,CAAC,yBAAyB,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;IACpG,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAAA,CAC7F;AAED,SAAS,kBAAkB,CAAC,SAA0C,EAAsB;IAC3F,MAAM,cAAc,GAAG,0BAA0B,CAAC,SAAS,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAC/F,MAAM,aAAa,GAAG,0BAA0B,CAAC,SAAS,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC5F,MAAM,kBAAkB,GAAG,SAAS,CAAC,kBAAkB;QACtD,CAAC,CAAC,yBAAyB,CAAC,SAAS,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB,CAAC;QACvG,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,sBAAsB,GAC3B,iBAAiB,CAAC,aAAa,EAAE,cAAc,CAAC,IAAI,iBAAiB,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IACtG,IAAI,sBAAsB,IAAI,kBAAkB,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,kFAAkF,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,CAAC,sBAAsB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,+EAA+E,CAAC,CAAC;IACtG,CAAC;IACD,OAAO;QACN,cAAc;QACd,aAAa;QACb,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,CAAC,YAAY,aAAa,EAAE,CAAC,CAAC,CAAC,UAAU,cAAc,EAAE;QAChG,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AAAA,CACF;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,cAAsB,EAAU;IAC1E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SACjC,MAAM,CAAC,iCAAiC,CAAC;SACzC,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,cAAc,CAAC;SACtB,MAAM,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,2BAA2B,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;AAAA,CAC3F;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAQ;IACnD,KAAK,MAAM,QAAQ,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;QAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;AAAA,CAC3F;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,MAA4B,EAA+B;IACrG,OAAO;QACN,QAAQ;QACR,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;KACpC,CAAC;AAAA,CACF;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa,EAAE,OAAe,EAAU;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,cAAc,CAAC,CAAC;IAChG,OAAO,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,4BAA4B,KAAK,EAAE,CAAC,CAAC;AAAA,CACtF;AAED,SAAS,YAAY,CAAC,KAAc,EAAU;IAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC;IACrE,IAAI,CAAC,8BAA8B,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC/G,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,cAAsB,EAAwB;IACvF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC5G,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC;IAClG,IAAI,oBAAoB,KAAK,cAAc;QAC1C,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACvF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAClH,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;IACxG,MAAM,kBAAkB,GACvB,KAAK,CAAC,kBAAkB,KAAK,SAAS;QACrC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;IACxF,OAAO;QACN,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,oBAAoB,CAAC;QAC3E,eAAe,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,CAAC;QAC3F,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,oBAAoB,CAAC;QAC/D,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,oBAAoB,CAAC;QACxE,YAAY,EAAE,oBAAoB,CAAC,YAAY,CAAC;QAChD,cAAc,EAAE,oBAAoB;QACpC,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,EAAE,cAAc,CAAC;QACjF,iBAAiB,EAAE,WAAW,CAAC,KAAK,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,cAAc,CAAC;QAC7F,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,WAAW;QACX,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,oBAAoB,CAAC;KAC7E,CAAC;AAAA,CACF;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,cAAsB,EAA6B;IACnF,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,cAAc;QACnD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC3E,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IAAI,KAAK,CAAC,aAAa,KAAK,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACrH,IAAI,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,uBAAuB,EAAE,cAAc,CAAC,KAAK,cAAc,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;IAChG,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AAAA,CACvE;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,KAAgC,EAAQ;IAC7E,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;IAChD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,cAAc,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAChF,CAAC;IACD,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAAA,CAC3D;AAED,SAAS,yBAAyB,CACjC,YAA6C,EAC7C,iBAAyB,EACzB,WAA8B,EACnB;IACX,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACxC,IAAI,WAAW,CAAC,iBAAiB,KAAK,iBAAiB;YAAE,SAAS;QAClE,IACC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAC9C,WAAW,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CACtF,EACA,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QACzC,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED;;;GAGG;AACH,MAAM,OAAO,2BAA2B;IACtB,QAAQ,CAAS;IACjB,cAAc,CAAiB;IAEhD,YAAY,OAA8D,EAAE;QAC3E,IAAI,CAAC,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;QAC/F,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IAAA,CACtD;IAED,OAAO,CAAC,OAAsC,EAAuC;QACpF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;QAC9G,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YACjF,MAAM,IAAI,SAAS,CAAC,6CAA6C,UAAU,gBAAgB,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG;YACnB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;SAChG,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,eAAe,GAAG,yBAAyB,CAChD,OAAO,CAAC,eAAe,EACvB,oBAAoB,EACpB,mBAAmB,CACnB,CAAC;QACF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC;QAC1F,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC;QACnG,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC;QAE1E,OAAO,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC;YAClE,MAAM,eAAe,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CAC9C,CAAC,WAAW,EAAE,EAAE,CACf,WAAW,CAAC,eAAe,KAAK,eAAe;gBAC/C,WAAW,CAAC,OAAO,KAAK,OAAO;gBAC/B,WAAW,CAAC,MAAM,KAAK,MAAM;gBAC7B,WAAW,CAAC,SAAS,KAAK,SAAS;gBACnC,WAAW,CAAC,YAAY,KAAK,YAAY,CAC1C,CAAC;YACF,IAAI,eAAe,EAAE,CAAC;gBACrB,IACC,eAAe,CAAC,iBAAiB,KAAK,SAAS,CAAC,iBAAiB;oBACjE,eAAe,CAAC,kBAAkB,KAAK,SAAS,CAAC,kBAAkB;oBACnE,eAAe,CAAC,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;oBACzD,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,CAAC,CAAC,EAC/E,CAAC;oBACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,8BAA8B,EAAE,CAAC;gBACxE,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;YAC/E,CAAC;YACD,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;YAC1G,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,SAAS,EAAE,CAAC;YACzG,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,IAAI,gBAAgB;gBAChD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,8BAA8B,EAAE,CAAC;YACxE,MAAM,MAAM,GAAyB;gBACpC,aAAa,EAAE,UAAU,EAAE;gBAC3B,eAAe;gBACf,OAAO;gBACP,MAAM;gBACN,SAAS;gBACT,YAAY;gBACZ,cAAc,EAAE,SAAS,CAAC,cAAc;gBACxC,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;gBAC9C,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7F,WAAW;gBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACnC,CAAC;YACF,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QAAA,CACrE,CAAC,CAAC;IAAA,CACH;IAED,OAAO,CAAC,KAAkC,EAAuC;QAChF,MAAM,cAAc,GAAG,yBAAyB,CAAC,KAAK,CAAC,cAAc,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAC;QAChH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,gBAAgB,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB;YACtC,MAAM,IAAI,SAAS,CAAC,qEAAqE,CAAC,CAAC;QAC5F,OAAO,gBAAgB,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,CAAC,CAAC;YAC/G,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACf,MAAM,sBAAsB,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CACrD,CAAC,WAAW,EAAE,EAAE,CACf,WAAW,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;oBACrD,WAAW,CAAC,OAAO,KAAK,OAAO;oBAC/B,WAAW,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;oBACnC,WAAW,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAC9C,CAAC;gBACF,OAAO,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACvE,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACzC,IACC,MAAM,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;gBAChD,MAAM,CAAC,OAAO,KAAK,OAAO;gBAC1B,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAC9B,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;gBACpC,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;gBAC1C,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;gBACpD,MAAM,CAAC,kBAAkB,KAAK,KAAK,CAAC,kBAAkB,EACrD,CAAC;gBACF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YAChC,CAAC;YACD,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;gBAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;;gBAC7D,UAAU,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YACzC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;YACrC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAAA,CAC5B,CAAC,CAAC;IAAA,CACH;IAED,0FAA0F;IAC1F,iBAAiB,CAAC,SAA0C,EAAE,QAAoB,EAAc;QAC/F,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAc,CAAC;QAC/E,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC/C,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC;YACtB,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,cAAc,CAAC,GAAG,EAAE,CAAC;gBACpB,SAAS,GAAG,KAAK,CAAC;gBAClB,QAAQ,EAAE,CAAC;YAAA,CACX,CAAC,CAAC;QAAA,CACH,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC;YAC/F,yFAAyF;YACzF,2FAA2F;YAC3F,mFAAmF;YACnF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACvB,QAAQ,EAAE,CAAC;gBACX,OAAO;YACR,CAAC;YACD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACzF,IAAI,cAAc,KAAK,QAAQ,CAAC,QAAQ,CAAC;gBAAE,QAAQ,EAAE,CAAC;QAAA,CACtD,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,CAAC;YACZ,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC3B,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;gBAAE,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjE,OAAO,CAAC,KAAK,EAAE,CAAC;QAAA,CAChB,CAAC;IAAA,CACF;IAED,OAAO,CAAC,OAA8C,EAAyD;QAC9G,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+C,CAAC;QACxE,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,aAAa,GAAG,yBAAyB,CAC9C,WAAW,CAAC,aAAa,EACzB,oBAAoB,EACpB,yBAAyB,CACzB,CAAC;YACF,IAAI,WAAW,CAAC,KAAK,KAAK,MAAM,IAAI,WAAW,CAAC,KAAK,KAAK,UAAU,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzG,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;YAC1G,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY;iBACjC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,iBAAiB,KAAK,SAAS,CAAC,iBAAiB,CAAC;iBACtF,GAAG,CAAC,CAAC,WAAW,EAAyC,EAAE,CAAC;gBAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;gBACtD,OAAO;oBACN,IAAI,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;oBAC1F,aAAa,EAAE,WAAW,CAAC,aAAa;oBACxC,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC;iBAC7C,CAAC;YAAA,CACF,CAAC,CAAC;YACJ,OAAO,EAAE,QAAQ,EAAE,CAAC;QAAA,CACpB,CAAC,CAAC;IAAA,CACH;IAEO,UAAU,CAAC,QAAgB,EAAE,cAAsB,EAA6B;QACvF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACtG,OAAO,UAAU,CAChB,uBAAuB,CAAC,QAAQ,EAAE,cAAc,EAAE,gCAAgC,CAAC,EACnF,cAAc,CACd,CAAC;IAAA,CACF;CACD","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport { existsSync, type FSWatcher, mkdirSync, unlinkSync, watch } from \"node:fs\";\nimport { basename, dirname } from \"node:path\";\nimport { stateFile } from \"../agent-paths.ts\";\nimport {\n\tcanonicalPathScopeIdentity,\n\tisPathWithinScope,\n\tpathScopesOverlap,\n\tsafeRealpathSync,\n} from \"../autonomy/path-scope.ts\";\nimport { withFileLockSync, writeFileAtomicSync } from \"../util/atomic-file.ts\";\nimport { readBoundedTextFileSync } from \"../util/bounded-file.ts\";\nimport { requireBoundedTrimmedText } from \"../util/bounded-value.ts\";\nimport { parseLocalWorkerProcessOwnerId } from \"./worker-process-owner.ts\";\n\nconst SCHEMA_VERSION = 1;\nconst MAX_IDENTIFIER_CHARS = 256;\nconst MAX_PATH_CHARS = 4096;\nconst MAX_SCOPES = 32;\nconst MAX_RESERVATIONS = 64;\nconst MAX_FILE_BYTES = 128 * 1024;\nconst availabilityListeners = new Map<string, Set<() => void>>();\n\ntype WatchDirectory = (\n\tdirectory: string,\n\toptions: { persistent: boolean },\n\tlistener: (eventType: string, fileName: string | Buffer | null) => void,\n) => FSWatcher;\n\nexport interface WorkerWriteReservationWorkspace {\n\t/** Canonical repository/workspace root shared by primary and isolated worktrees. */\n\trepositoryRoot: string;\n\t/** Actual checkout used by this attempt. A non-primary checkout requires an isolation identity. */\n\texecutionRoot: string;\n\t/** Durable worktree identity supplied by the worktree owner, never a model-provided label. */\n\tisolatedWorktreeId?: string;\n}\n\nexport interface WorkerWriteReservationRequest {\n\tparentSessionId: string;\n\t/** Exact pi-owned process instance that acquired this reservation. */\n\townerId: string;\n\ttaskId: string;\n\tattemptId: string;\n\tfencingToken: number;\n\taccess: \"read\" | \"write\";\n\tworkspace: WorkerWriteReservationWorkspace;\n\t/** Absolute authorized write roots. They are resolved before persistence. */\n\twriteScopes: readonly string[];\n}\n\nexport interface WorkerWriteReservationLease {\n\tfilePath: string;\n\treservationId: string;\n\tparentSessionId: string;\n\townerId: string;\n\ttaskId: string;\n\tattemptId: string;\n\tfencingToken: number;\n\trepositoryRoot: string;\n\texecutionRoot: string;\n\texecutionIdentity: string;\n\tisolatedWorktreeId?: string;\n\twriteScopes: readonly string[];\n}\n\nexport type WorkerWriteReservationAcquireResult =\n\t| { kind: \"granted\"; lease?: WorkerWriteReservationLease }\n\t| {\n\t\t\tkind: \"blocked\";\n\t\t\treasonCode: \"overlapping_write_scope\" | \"attempt_reservation_conflict\" | \"reservation_capacity_reached\";\n\t\t\tconflictingReservationIds?: readonly string[];\n\t  };\n\nexport type WorkerWriteReservationReleaseResult =\n\t| { kind: \"released\" }\n\t| { kind: \"stale_fence\" }\n\t| { kind: \"not_found\" };\n\nexport type WorkerWriteReservationEvidenceState = \"live\" | \"not_live\" | \"unknown\";\n\nexport interface WorkerWriteReservationRecoveryEvidence {\n\treservationId: string;\n\tstate: WorkerWriteReservationEvidenceState;\n}\n\nexport interface WorkerWriteReservationRecoveryRequest {\n\tworkspace: WorkerWriteReservationWorkspace;\n\t/** Caller-owned lease observations. This store never polls process state or worker output. */\n\tevidence: readonly WorkerWriteReservationRecoveryEvidence[];\n}\n\nexport interface WorkerWriteReservationRecoveryOutcome {\n\tkind: \"active\" | \"stale\" | \"inspection_required\";\n\treservationId: string;\n\tlease: WorkerWriteReservationLease;\n}\n\ninterface PersistedReservation {\n\treservationId: string;\n\tparentSessionId: string;\n\townerId: string;\n\ttaskId: string;\n\tattemptId: string;\n\tfencingToken: number;\n\trepositoryRoot: string;\n\texecutionRoot: string;\n\texecutionIdentity: string;\n\tisolatedWorktreeId?: string;\n\twriteScopes: string[];\n\tcreatedAt: string;\n}\n\ninterface PersistedReservationStore {\n\tschemaVersion: number;\n\trepositoryRoot: string;\n\treservations: PersistedReservation[];\n}\n\ninterface CanonicalWorkspace {\n\trepositoryRoot: string;\n\texecutionRoot: string;\n\texecutionIdentity: string;\n\tisolatedWorktreeId?: string;\n}\n\nfunction positiveFencingToken(value: number): number {\n\tif (!Number.isSafeInteger(value) || value < 1) throw new TypeError(\"Fencing token must be a positive safe integer.\");\n\treturn value;\n}\n\n/**\n * Prefer a real path for filesystem-backed scopes, but preserve a foreign lexical path family\n * (for example a Windows drive path inspected from WSL) so shared path-scope helpers retain\n * their documented Windows drive/UNC comparison semantics.\n */\nfunction canonicalRealOrLexicalPath(value: string, label: string): string {\n\tconst lexical = canonicalPathScopeIdentity(requireBoundedTrimmedText(value, MAX_PATH_CHARS, label));\n\tconst resolved = safeRealpathSync(lexical);\n\treturn pathScopesOverlap(lexical, resolved) ? canonicalPathScopeIdentity(resolved) : lexical;\n}\n\nfunction canonicalWorkspace(workspace: WorkerWriteReservationWorkspace): CanonicalWorkspace {\n\tconst repositoryRoot = canonicalRealOrLexicalPath(workspace.repositoryRoot, \"Repository root\");\n\tconst executionRoot = canonicalRealOrLexicalPath(workspace.executionRoot, \"Execution root\");\n\tconst isolatedWorktreeId = workspace.isolatedWorktreeId\n\t\t? requireBoundedTrimmedText(workspace.isolatedWorktreeId, MAX_IDENTIFIER_CHARS, \"Isolated worktree id\")\n\t\t: undefined;\n\tconst isPrimaryExecutionRoot =\n\t\tisPathWithinScope(executionRoot, repositoryRoot) && isPathWithinScope(repositoryRoot, executionRoot);\n\tif (isPrimaryExecutionRoot && isolatedWorktreeId) {\n\t\tthrow new TypeError(\"An isolated worktree execution root must differ from the shared repository root.\");\n\t}\n\tif (!isPrimaryExecutionRoot && !isolatedWorktreeId) {\n\t\tthrow new TypeError(\"A non-primary execution root requires an explicit isolated worktree identity.\");\n\t}\n\treturn {\n\t\trepositoryRoot,\n\t\texecutionRoot,\n\t\texecutionIdentity: isolatedWorktreeId ? `isolated:${executionRoot}` : `shared:${repositoryRoot}`,\n\t\t...(isolatedWorktreeId ? { isolatedWorktreeId } : {}),\n\t};\n}\n\nfunction reservationFile(agentDir: string, repositoryRoot: string): string {\n\tconst digest = createHash(\"sha256\")\n\t\t.update(\"pi-worker-write-reservations-v1\")\n\t\t.update(\"\\0\")\n\t\t.update(repositoryRoot)\n\t\t.digest(\"hex\");\n\treturn stateFile(agentDir, \"orchestration\", \"worker-write-reservations\", `${digest}.json`);\n}\n\nfunction notifyAvailability(filePath: string): void {\n\tfor (const listener of availabilityListeners.get(filePath) ?? []) queueMicrotask(listener);\n}\n\nfunction leaseFromRecord(filePath: string, record: PersistedReservation): WorkerWriteReservationLease {\n\treturn {\n\t\tfilePath,\n\t\treservationId: record.reservationId,\n\t\tparentSessionId: record.parentSessionId,\n\t\townerId: record.ownerId,\n\t\ttaskId: record.taskId,\n\t\tattemptId: record.attemptId,\n\t\tfencingToken: record.fencingToken,\n\t\trepositoryRoot: record.repositoryRoot,\n\t\texecutionRoot: record.executionRoot,\n\t\texecutionIdentity: record.executionIdentity,\n\t\t...(record.isolatedWorktreeId ? { isolatedWorktreeId: record.isolatedWorktreeId } : {}),\n\t\twriteScopes: [...record.writeScopes],\n\t};\n}\n\nfunction stringField(value: unknown, label: string, maximum: number): string {\n\tif (typeof value !== \"string\") throw new Error(`Worker write reservation ${label} is invalid.`);\n\treturn requireBoundedTrimmedText(value, maximum, `Worker write reservation ${label}`);\n}\n\nfunction localOwnerId(value: unknown): string {\n\tconst ownerId = stringField(value, \"owner id\", MAX_IDENTIFIER_CHARS);\n\tif (!parseLocalWorkerProcessOwnerId(ownerId)) throw new Error(\"Worker write reservation owner id is invalid.\");\n\treturn ownerId;\n}\n\nfunction parseReservation(value: unknown, repositoryRoot: string): PersistedReservation {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value))\n\t\tthrow new Error(\"Worker write reservation entry is invalid.\");\n\tconst entry = value as Record<string, unknown>;\n\tconst fencingToken = entry.fencingToken;\n\tif (typeof fencingToken !== \"number\") throw new Error(\"Worker write reservation fencing token is invalid.\");\n\tconst parsedRepositoryRoot = stringField(entry.repositoryRoot, \"repository root\", MAX_PATH_CHARS);\n\tif (parsedRepositoryRoot !== repositoryRoot)\n\t\tthrow new Error(\"Worker write reservation repository root conflicts with its store.\");\n\tif (!Array.isArray(entry.writeScopes) || entry.writeScopes.length === 0 || entry.writeScopes.length > MAX_SCOPES) {\n\t\tthrow new Error(\"Worker write reservation scopes are invalid.\");\n\t}\n\tconst writeScopes = entry.writeScopes.map((scope) => stringField(scope, \"write scope\", MAX_PATH_CHARS));\n\tconst isolatedWorktreeId =\n\t\tentry.isolatedWorktreeId === undefined\n\t\t\t? undefined\n\t\t\t: stringField(entry.isolatedWorktreeId, \"isolated worktree id\", MAX_IDENTIFIER_CHARS);\n\treturn {\n\t\treservationId: stringField(entry.reservationId, \"id\", MAX_IDENTIFIER_CHARS),\n\t\tparentSessionId: stringField(entry.parentSessionId, \"parent session\", MAX_IDENTIFIER_CHARS),\n\t\townerId: localOwnerId(entry.ownerId),\n\t\ttaskId: stringField(entry.taskId, \"task\", MAX_IDENTIFIER_CHARS),\n\t\tattemptId: stringField(entry.attemptId, \"attempt\", MAX_IDENTIFIER_CHARS),\n\t\tfencingToken: positiveFencingToken(fencingToken),\n\t\trepositoryRoot: parsedRepositoryRoot,\n\t\texecutionRoot: stringField(entry.executionRoot, \"execution root\", MAX_PATH_CHARS),\n\t\texecutionIdentity: stringField(entry.executionIdentity, \"execution identity\", MAX_PATH_CHARS),\n\t\t...(isolatedWorktreeId ? { isolatedWorktreeId } : {}),\n\t\twriteScopes,\n\t\tcreatedAt: stringField(entry.createdAt, \"created time\", MAX_IDENTIFIER_CHARS),\n\t};\n}\n\nfunction parseStore(raw: string, repositoryRoot: string): PersistedReservationStore {\n\tif (Buffer.byteLength(raw, \"utf-8\") > MAX_FILE_BYTES)\n\t\tthrow new Error(\"Worker write reservation store exceeds its byte limit.\");\n\tlet value: unknown;\n\ttry {\n\t\tvalue = JSON.parse(raw);\n\t} catch {\n\t\tthrow new Error(\"Worker write reservation store is unreadable; refusing concurrent write admission.\");\n\t}\n\tif (!value || typeof value !== \"object\" || Array.isArray(value))\n\t\tthrow new Error(\"Worker write reservation store is invalid.\");\n\tconst store = value as Record<string, unknown>;\n\tif (store.schemaVersion !== SCHEMA_VERSION) throw new Error(\"Worker write reservation store schema is unsupported.\");\n\tif (stringField(store.repositoryRoot, \"store repository root\", MAX_PATH_CHARS) !== repositoryRoot) {\n\t\tthrow new Error(\"Worker write reservation store root conflicts with the requested workspace.\");\n\t}\n\tif (!Array.isArray(store.reservations) || store.reservations.length > MAX_RESERVATIONS) {\n\t\tthrow new Error(\"Worker write reservation store entries are invalid.\");\n\t}\n\tconst reservations = store.reservations.map((entry) => parseReservation(entry, repositoryRoot));\n\tif (new Set(reservations.map((entry) => entry.reservationId)).size !== reservations.length) {\n\t\tthrow new Error(\"Worker write reservation store contains duplicate reservation identities.\");\n\t}\n\treturn { schemaVersion: SCHEMA_VERSION, repositoryRoot, reservations };\n}\n\nfunction writeStore(filePath: string, store: PersistedReservationStore): void {\n\tconst serialized = `${JSON.stringify(store)}\\n`;\n\tif (Buffer.byteLength(serialized, \"utf-8\") > MAX_FILE_BYTES) {\n\t\tthrow new Error(\"Worker write reservation store would exceed its byte limit.\");\n\t}\n\twriteFileAtomicSync(filePath, serialized, { mode: 0o600 });\n}\n\nfunction overlappingReservationIds(\n\treservations: readonly PersistedReservation[],\n\texecutionIdentity: string,\n\twriteScopes: readonly string[],\n): string[] {\n\tconst matches: string[] = [];\n\tfor (const reservation of reservations) {\n\t\tif (reservation.executionIdentity !== executionIdentity) continue;\n\t\tif (\n\t\t\treservation.writeScopes.some((reservedScope) =>\n\t\t\t\twriteScopes.some((requestedScope) => pathScopesOverlap(reservedScope, requestedScope)),\n\t\t\t)\n\t\t) {\n\t\t\tmatches.push(reservation.reservationId);\n\t\t}\n\t}\n\treturn matches;\n}\n\n/**\n * Cross-process, agent-owned admission seam for concurrent worker mutations. It owns only\n * reservations; lifecycle, process liveness, and terminal status remain controller concerns.\n */\nexport class WorkerWriteReservationStore {\n\tprivate readonly agentDir: string;\n\tprivate readonly watchDirectory: WatchDirectory;\n\n\tconstructor(options: { agentDir: string; watchDirectory?: WatchDirectory }) {\n\t\tthis.agentDir = requireBoundedTrimmedText(options.agentDir, MAX_PATH_CHARS, \"Agent directory\");\n\t\tthis.watchDirectory = options.watchDirectory ?? watch;\n\t}\n\n\tacquire(request: WorkerWriteReservationRequest): WorkerWriteReservationAcquireResult {\n\t\tif (request.access === \"read\") return { kind: \"granted\" };\n\t\tif (request.access !== \"write\") throw new TypeError(\"Worker write reservation access must be read or write.\");\n\t\tif (request.writeScopes.length === 0 || request.writeScopes.length > MAX_SCOPES) {\n\t\t\tthrow new TypeError(`Write reservations require from 1 through ${MAX_SCOPES} write scopes.`);\n\t\t}\n\t\tconst workspace = canonicalWorkspace(request.workspace);\n\t\tconst writeScopes = [\n\t\t\t...new Set(request.writeScopes.map((scope) => canonicalRealOrLexicalPath(scope, \"Write scope\"))),\n\t\t].sort();\n\t\tif (writeScopes.some((scope) => !isPathWithinScope(scope, workspace.executionRoot))) {\n\t\t\tthrow new TypeError(\"Write reservation scopes must be within the execution root.\");\n\t\t}\n\t\tconst parentSessionId = requireBoundedTrimmedText(\n\t\t\trequest.parentSessionId,\n\t\t\tMAX_IDENTIFIER_CHARS,\n\t\t\t\"Parent session id\",\n\t\t);\n\t\tconst ownerId = localOwnerId(request.ownerId);\n\t\tconst taskId = requireBoundedTrimmedText(request.taskId, MAX_IDENTIFIER_CHARS, \"Task id\");\n\t\tconst attemptId = requireBoundedTrimmedText(request.attemptId, MAX_IDENTIFIER_CHARS, \"Attempt id\");\n\t\tconst fencingToken = positiveFencingToken(request.fencingToken);\n\t\tconst filePath = reservationFile(this.agentDir, workspace.repositoryRoot);\n\n\t\treturn withFileLockSync(filePath, () => {\n\t\t\tconst store = this.readLocked(filePath, workspace.repositoryRoot);\n\t\t\tconst matchingAttempt = store.reservations.find(\n\t\t\t\t(reservation) =>\n\t\t\t\t\treservation.parentSessionId === parentSessionId &&\n\t\t\t\t\treservation.ownerId === ownerId &&\n\t\t\t\t\treservation.taskId === taskId &&\n\t\t\t\t\treservation.attemptId === attemptId &&\n\t\t\t\t\treservation.fencingToken === fencingToken,\n\t\t\t);\n\t\t\tif (matchingAttempt) {\n\t\t\t\tif (\n\t\t\t\t\tmatchingAttempt.executionIdentity !== workspace.executionIdentity ||\n\t\t\t\t\tmatchingAttempt.isolatedWorktreeId !== workspace.isolatedWorktreeId ||\n\t\t\t\t\tmatchingAttempt.writeScopes.length !== writeScopes.length ||\n\t\t\t\t\tmatchingAttempt.writeScopes.some((scope, index) => scope !== writeScopes[index])\n\t\t\t\t) {\n\t\t\t\t\treturn { kind: \"blocked\", reasonCode: \"attempt_reservation_conflict\" };\n\t\t\t\t}\n\t\t\t\treturn { kind: \"granted\", lease: leaseFromRecord(filePath, matchingAttempt) };\n\t\t\t}\n\t\t\tconst conflicts = overlappingReservationIds(store.reservations, workspace.executionIdentity, writeScopes);\n\t\t\tif (conflicts.length > 0) {\n\t\t\t\treturn { kind: \"blocked\", reasonCode: \"overlapping_write_scope\", conflictingReservationIds: conflicts };\n\t\t\t}\n\t\t\tif (store.reservations.length >= MAX_RESERVATIONS)\n\t\t\t\treturn { kind: \"blocked\", reasonCode: \"reservation_capacity_reached\" };\n\t\t\tconst record: PersistedReservation = {\n\t\t\t\treservationId: randomUUID(),\n\t\t\t\tparentSessionId,\n\t\t\t\townerId,\n\t\t\t\ttaskId,\n\t\t\t\tattemptId,\n\t\t\t\tfencingToken,\n\t\t\t\trepositoryRoot: workspace.repositoryRoot,\n\t\t\t\texecutionRoot: workspace.executionRoot,\n\t\t\t\texecutionIdentity: workspace.executionIdentity,\n\t\t\t\t...(workspace.isolatedWorktreeId ? { isolatedWorktreeId: workspace.isolatedWorktreeId } : {}),\n\t\t\t\twriteScopes,\n\t\t\t\tcreatedAt: new Date().toISOString(),\n\t\t\t};\n\t\t\tstore.reservations.push(record);\n\t\t\twriteStore(filePath, store);\n\t\t\treturn { kind: \"granted\", lease: leaseFromRecord(filePath, record) };\n\t\t});\n\t}\n\n\trelease(lease: WorkerWriteReservationLease): WorkerWriteReservationReleaseResult {\n\t\tconst repositoryRoot = requireBoundedTrimmedText(lease.repositoryRoot, MAX_PATH_CHARS, \"Lease repository root\");\n\t\tconst ownerId = localOwnerId(lease.ownerId);\n\t\tconst expectedFilePath = reservationFile(this.agentDir, repositoryRoot);\n\t\tif (lease.filePath !== expectedFilePath)\n\t\t\tthrow new TypeError(\"Worker write reservation lease does not belong to this agent state.\");\n\t\treturn withFileLockSync(expectedFilePath, () => {\n\t\t\tconst store = this.readLocked(expectedFilePath, repositoryRoot);\n\t\t\tconst index = store.reservations.findIndex((reservation) => reservation.reservationId === lease.reservationId);\n\t\t\tif (index < 0) {\n\t\t\t\tconst supersedingReservation = store.reservations.some(\n\t\t\t\t\t(reservation) =>\n\t\t\t\t\t\treservation.parentSessionId === lease.parentSessionId &&\n\t\t\t\t\t\treservation.ownerId === ownerId &&\n\t\t\t\t\t\treservation.taskId === lease.taskId &&\n\t\t\t\t\t\treservation.fencingToken > lease.fencingToken,\n\t\t\t\t);\n\t\t\t\treturn { kind: supersedingReservation ? \"stale_fence\" : \"not_found\" };\n\t\t\t}\n\t\t\tconst record = store.reservations[index];\n\t\t\tif (\n\t\t\t\trecord.parentSessionId !== lease.parentSessionId ||\n\t\t\t\trecord.ownerId !== ownerId ||\n\t\t\t\trecord.taskId !== lease.taskId ||\n\t\t\t\trecord.attemptId !== lease.attemptId ||\n\t\t\t\trecord.fencingToken !== lease.fencingToken ||\n\t\t\t\trecord.executionIdentity !== lease.executionIdentity ||\n\t\t\t\trecord.isolatedWorktreeId !== lease.isolatedWorktreeId\n\t\t\t) {\n\t\t\t\treturn { kind: \"stale_fence\" };\n\t\t\t}\n\t\t\tstore.reservations.splice(index, 1);\n\t\t\tif (store.reservations.length === 0) unlinkSync(expectedFilePath);\n\t\t\telse writeStore(expectedFilePath, store);\n\t\t\tnotifyAvailability(expectedFilePath);\n\t\t\treturn { kind: \"released\" };\n\t\t});\n\t}\n\n\t/** Event-driven cross-process wakeup for queued write admission; caller owns disposal. */\n\twatchAvailability(workspace: WorkerWriteReservationWorkspace, listener: () => void): () => void {\n\t\tconst canonical = canonicalWorkspace(workspace);\n\t\tconst filePath = reservationFile(this.agentDir, canonical.repositoryRoot);\n\t\tconst listeners = availabilityListeners.get(filePath) ?? new Set<() => void>();\n\t\tavailabilityListeners.set(filePath, listeners);\n\t\tlisteners.add(listener);\n\t\tconst directory = dirname(filePath);\n\t\tmkdirSync(directory, { recursive: true });\n\t\tlet scheduled = false;\n\t\tconst schedule = () => {\n\t\t\tif (scheduled) return;\n\t\t\tscheduled = true;\n\t\t\tqueueMicrotask(() => {\n\t\t\t\tscheduled = false;\n\t\t\t\tlistener();\n\t\t\t});\n\t\t};\n\t\tconst watcher = this.watchDirectory(directory, { persistent: false }, (_eventType, fileName) => {\n\t\t\t// Node may omit a filename (notably on Windows), or provide a Buffer when the watcher is\n\t\t\t// configured that way. An unknown filename is conservatively treated as a wake signal: the\n\t\t\t// scheduler re-evaluates durable admission, so this cannot grant access by itself.\n\t\t\tif (fileName === null) {\n\t\t\t\tschedule();\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst normalizedName = Buffer.isBuffer(fileName) ? fileName.toString(\"utf-8\") : fileName;\n\t\t\tif (normalizedName === basename(filePath)) schedule();\n\t\t});\n\t\treturn () => {\n\t\t\tlisteners.delete(listener);\n\t\t\tif (listeners.size === 0) availabilityListeners.delete(filePath);\n\t\t\twatcher.close();\n\t\t};\n\t}\n\n\trecover(request: WorkerWriteReservationRecoveryRequest): { outcomes: WorkerWriteReservationRecoveryOutcome[] } {\n\t\tconst workspace = canonicalWorkspace(request.workspace);\n\t\tconst filePath = reservationFile(this.agentDir, workspace.repositoryRoot);\n\t\tconst evidence = new Map<string, WorkerWriteReservationEvidenceState>();\n\t\tfor (const observation of request.evidence) {\n\t\t\tconst reservationId = requireBoundedTrimmedText(\n\t\t\t\tobservation.reservationId,\n\t\t\t\tMAX_IDENTIFIER_CHARS,\n\t\t\t\t\"Reservation evidence id\",\n\t\t\t);\n\t\t\tif (observation.state !== \"live\" && observation.state !== \"not_live\" && observation.state !== \"unknown\") {\n\t\t\t\tthrow new TypeError(\"Reservation evidence state must be live, not_live, or unknown.\");\n\t\t\t}\n\t\t\tif (evidence.has(reservationId)) throw new TypeError(\"Reservation evidence must not repeat an identity.\");\n\t\t\tevidence.set(reservationId, observation.state);\n\t\t}\n\t\treturn withFileLockSync(filePath, () => {\n\t\t\tconst store = this.readLocked(filePath, workspace.repositoryRoot);\n\t\t\tconst outcomes = store.reservations\n\t\t\t\t.filter((reservation) => reservation.executionIdentity === workspace.executionIdentity)\n\t\t\t\t.map((reservation): WorkerWriteReservationRecoveryOutcome => {\n\t\t\t\t\tconst state = evidence.get(reservation.reservationId);\n\t\t\t\t\treturn {\n\t\t\t\t\t\tkind: state === \"live\" ? \"active\" : state === \"not_live\" ? \"stale\" : \"inspection_required\",\n\t\t\t\t\t\treservationId: reservation.reservationId,\n\t\t\t\t\t\tlease: leaseFromRecord(filePath, reservation),\n\t\t\t\t\t};\n\t\t\t\t});\n\t\t\treturn { outcomes };\n\t\t});\n\t}\n\n\tprivate readLocked(filePath: string, repositoryRoot: string): PersistedReservationStore {\n\t\tif (!existsSync(filePath)) return { schemaVersion: SCHEMA_VERSION, repositoryRoot, reservations: [] };\n\t\treturn parseStore(\n\t\t\treadBoundedTextFileSync(filePath, MAX_FILE_BYTES, \"Worker write reservation store\"),\n\t\t\trepositoryRoot,\n\t\t);\n\t}\n}\n"]}

package/dist/core/extension-import-authority.d.ts

@@ -0,0 +1,6 @@
+import type { SettingsManager } from "./settings-manager.ts";
+export type ExtensionImportAuthority = "explicit" | "profile";
+export declare function hasProfileExtensionImportAuthority(settingsManager: SettingsManager): boolean;
+/** Single import-boundary policy shared by startup discovery, reconciliation, and live loading. */
+export declare function isExtensionPathAllowedForImport(settingsManager: SettingsManager, extensionPath: string, authority: ExtensionImportAuthority, baseDir?: string): boolean;
+//# sourceMappingURL=extension-import-authority.d.ts.map

package/dist/core/extension-import-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-import-authority.d.ts","sourceRoot":"","sources":["../../src/core/extension-import-authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,MAAM,wBAAwB,GAAG,UAAU,GAAG,SAAS,CAAC;AAE9D,wBAAgB,kCAAkC,CAAC,eAAe,EAAE,eAAe,GAAG,OAAO,CAE5F;AAED,mGAAmG;AACnG,wBAAgB,+BAA+B,CAC9C,eAAe,EAAE,eAAe,EAChC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,wBAAwB,EACnC,OAAO,SAAK,GACV,OAAO,CAGT","sourcesContent":["import type { SettingsManager } from \"./settings-manager.ts\";\n\nexport type ExtensionImportAuthority = \"explicit\" | \"profile\";\n\nexport function hasProfileExtensionImportAuthority(settingsManager: SettingsManager): boolean {\n\treturn settingsManager.getActiveResourceProfileNames().length > 0;\n}\n\n/** Single import-boundary policy shared by startup discovery, reconciliation, and live loading. */\nexport function isExtensionPathAllowedForImport(\n\tsettingsManager: SettingsManager,\n\textensionPath: string,\n\tauthority: ExtensionImportAuthority,\n\tbaseDir = \"\",\n): boolean {\n\tif (authority === \"profile\" && !hasProfileExtensionImportAuthority(settingsManager)) return false;\n\treturn settingsManager.isResourceAllowedByProfile(\"extensions\", extensionPath, baseDir);\n}\n"]}

package/dist/core/extension-import-authority.js

@@ -0,0 +1,10 @@
+export function hasProfileExtensionImportAuthority(settingsManager) {
+    return settingsManager.getActiveResourceProfileNames().length > 0;
+}
+/** Single import-boundary policy shared by startup discovery, reconciliation, and live loading. */
+export function isExtensionPathAllowedForImport(settingsManager, extensionPath, authority, baseDir = "") {
+    if (authority === "profile" && !hasProfileExtensionImportAuthority(settingsManager))
+        return false;
+    return settingsManager.isResourceAllowedByProfile("extensions", extensionPath, baseDir);
+}
+//# sourceMappingURL=extension-import-authority.js.map

package/dist/core/extension-import-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-import-authority.js","sourceRoot":"","sources":["../../src/core/extension-import-authority.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,kCAAkC,CAAC,eAAgC,EAAW;IAC7F,OAAO,eAAe,CAAC,6BAA6B,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAAA,CAClE;AAED,mGAAmG;AACnG,MAAM,UAAU,+BAA+B,CAC9C,eAAgC,EAChC,aAAqB,EACrB,SAAmC,EACnC,OAAO,GAAG,EAAE,EACF;IACV,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,kCAAkC,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAClG,OAAO,eAAe,CAAC,0BAA0B,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;AAAA,CACxF","sourcesContent":["import type { SettingsManager } from \"./settings-manager.ts\";\n\nexport type ExtensionImportAuthority = \"explicit\" | \"profile\";\n\nexport function hasProfileExtensionImportAuthority(settingsManager: SettingsManager): boolean {\n\treturn settingsManager.getActiveResourceProfileNames().length > 0;\n}\n\n/** Single import-boundary policy shared by startup discovery, reconciliation, and live loading. */\nexport function isExtensionPathAllowedForImport(\n\tsettingsManager: SettingsManager,\n\textensionPath: string,\n\tauthority: ExtensionImportAuthority,\n\tbaseDir = \"\",\n): boolean {\n\tif (authority === \"profile\" && !hasProfileExtensionImportAuthority(settingsManager)) return false;\n\treturn settingsManager.isResourceAllowedByProfile(\"extensions\", extensionPath, baseDir);\n}\n"]}