@caupulican/pi-adaptative 0.81.41 → 0.81.43

package/dist/core/delegation/worker-action-journal.d.ts

@@ -0,0 +1,73 @@
+export type WorkerActionJournalState = "not_started" | "unknown" | "succeeded" | "failed";
+export interface WorkerActionJournalScope {
+    agentDir: string;
+    parentSessionId: string;
+    taskId: string;
+    attemptId: string;
+    fencingToken: number;
+}
+export interface WorkerActionJournalAction {
+    op: "write" | "edit";
+    path: string;
+    content?: string;
+    old?: string;
+    new?: string;
+}
+export interface BeginWorkerActionInput {
+    index: number;
+    action: WorkerActionJournalAction;
+    /** Realpath-resolved target used by the executor, never model-provided text alone. */
+    targetPath: string;
+}
+export interface WorkerActionExecutionPermit {
+    kind: "execute";
+    state: "not_started";
+    actionId: string;
+    actionDigest: string;
+    normalizedTarget: string;
+}
+export interface WorkerActionInspectionRequired {
+    kind: "inspection_required";
+    state: Exclude<WorkerActionJournalState, "not_started">;
+    actionId: string;
+    actionDigest: string;
+    normalizedTarget: string;
+    reasonCode: string;
+    evidencePointer?: string;
+}
+export type BeginWorkerActionResult = WorkerActionExecutionPermit | WorkerActionInspectionRequired;
+export interface WorkerActionJournalInspection {
+    state: WorkerActionJournalState;
+    actionId: string;
+    actionDigest?: string;
+    normalizedTarget?: string;
+    reasonCode?: string;
+    evidencePointer?: string;
+}
+/** Canonical lexical identity for an already-authorized real target, including native Windows paths. */
+export declare function normalizeWorkerActionTarget(cwd: string, targetPath: string): string;
+/**
+ * Durable intent/receipt journal for model-emitted structured mutations. It deliberately records
+ * only action digests and normalized targets; operation payloads can contain source text or secrets
+ * and must never leave the model result in persisted orchestration state.
+ */
+export declare class WorkerActionJournal {
+    readonly agentDir: string;
+    readonly filePath: string;
+    private readonly scope;
+    private readonly identity;
+    constructor(scope: WorkerActionJournalScope);
+    inspect(actionIdentity: string): WorkerActionJournalInspection;
+    begin(input: BeginWorkerActionInput): BeginWorkerActionResult;
+    recordSucceeded(permit: WorkerActionExecutionPermit, options?: {
+        evidencePointer?: string;
+    }): void;
+    recordFailed(permit: WorkerActionExecutionPermit, reasonCode: string, options?: {
+        evidencePointer?: string;
+    }): void;
+    private recordTerminal;
+    private readLocked;
+    private writeLocked;
+    private inspectionFor;
+}
+//# sourceMappingURL=worker-action-journal.d.ts.map

package/dist/core/delegation/worker-action-journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-action-journal.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-action-journal.ts"],"names":[],"mappings":"AAgBA,MAAM,MAAM,wBAAwB,GAAG,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE1F,MAAM,WAAW,wBAAwB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACzC,EAAE,EAAE,OAAO,GAAG,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,sBAAsB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,yBAAyB,CAAC;IAClC,sFAAsF;IACtF,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC3C,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,8BAA8B;IAC9C,IAAI,EAAE,qBAAqB,CAAC;IAC5B,KAAK,EAAE,OAAO,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAAC;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,uBAAuB,GAAG,2BAA2B,GAAG,8BAA8B,CAAC;AAEnG,MAAM,WAAW,6BAA6B;IAC7C,KAAK,EAAE,wBAAwB,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AA8DD,wGAAwG;AACxG,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAInF;AAmHD;;;;GAIG;AACH,qBAAa,mBAAmB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6C;IACnE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IAEvD,YAAY,KAAK,EAAE,wBAAwB,EAK1C;IAED,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,6BAA6B,CAO7D;IAED,KAAK,CAAC,KAAK,EAAE,sBAAsB,GAAG,uBAAuB,CAsC5D;IAED,eAAe,CAAC,MAAM,EAAE,2BAA2B,EAAE,OAAO,GAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,IAAI,CAErG;IAED,YAAY,CACX,MAAM,EAAE,2BAA2B,EACnC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAA;KAAO,GACxC,IAAI,CAON;IAED,OAAO,CAAC,cAAc;IA8BtB,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,aAAa;CA4BrB"}

package/dist/core/delegation/worker-action-journal.js

@@ -0,0 +1,293 @@
+import { createHash } from "node:crypto";
+import { existsSync } from "node:fs";
+import path from "node:path";
+import { workerActionJournalFile } from "../agent-paths.js";
+import { withFileLockSync, writeFileAtomicSync } from "../util/atomic-file.js";
+import { readBoundedTextFileSync } from "../util/bounded-file.js";
+import { requireBoundedTrimmedText } from "../util/bounded-value.js";
+const JOURNAL_SCHEMA_VERSION = 1;
+const MAX_IDENTIFIER_CHARS = 256;
+const MAX_TARGET_CHARS = 2048;
+const MAX_REASON_CHARS = 512;
+const MAX_EVIDENCE_POINTER_CHARS = 512;
+const MAX_ENTRIES = 64;
+const MAX_JOURNAL_BYTES = 256 * 1024;
+function safeFencingToken(value) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1)
+        throw new TypeError("Worker action journal fencing token must be a positive safe integer.");
+    return value;
+}
+function validateScope(scope) {
+    return {
+        parentSessionId: requireBoundedTrimmedText(scope.parentSessionId, MAX_IDENTIFIER_CHARS, "Parent session id"),
+        taskId: requireBoundedTrimmedText(scope.taskId, MAX_IDENTIFIER_CHARS, "Task id"),
+        attemptId: requireBoundedTrimmedText(scope.attemptId, MAX_IDENTIFIER_CHARS, "Attempt id"),
+        fencingToken: safeFencingToken(scope.fencingToken),
+    };
+}
+function journalIdentity(scope) {
+    return { parentSessionId: scope.parentSessionId, taskId: scope.taskId };
+}
+function scopeDigest(scope) {
+    return createHash("sha256")
+        .update("pi-worker-action-journal-scope-v1")
+        .update("\0")
+        .update(scope.parentSessionId)
+        .update("\0")
+        .update(scope.taskId)
+        .update("\0")
+        .digest("hex");
+}
+function usesWindowsPath(value) {
+    return /^[a-zA-Z]:([\\/]|$)/.test(value) || value.startsWith("\\\\") || value.startsWith("//");
+}
+/** Canonical lexical identity for an already-authorized real target, including native Windows paths. */
+export function normalizeWorkerActionTarget(cwd, targetPath) {
+    const pathApi = usesWindowsPath(cwd) || usesWindowsPath(targetPath) ? path.win32 : path.posix;
+    const normalized = pathApi.resolve(cwd, targetPath);
+    return pathApi === path.win32 ? normalized.toLowerCase() : normalized;
+}
+function actionDigest(input, normalizedTarget) {
+    const hash = createHash("sha256");
+    hash.update("pi-worker-action-v1");
+    hash.update("\0");
+    hash.update(input.action.op);
+    hash.update("\0");
+    hash.update(normalizedTarget);
+    hash.update("\0");
+    if (input.action.op === "write") {
+        hash.update(input.action.content ?? "");
+    }
+    else {
+        hash.update(input.action.old ?? "");
+        hash.update("\0");
+        hash.update(input.action.new ?? "");
+    }
+    return hash.digest("hex");
+}
+function actionId(scope, index, digest) {
+    return createHash("sha256")
+        .update("pi-worker-action-id-v1")
+        .update("\0")
+        .update(scope.attemptId)
+        .update("\0")
+        .update(String(scope.fencingToken))
+        .update("\0")
+        .update(String(index))
+        .update("\0")
+        .update(digest)
+        .digest("hex")
+        .slice(0, 40);
+}
+function stringValue(value, label, maximum) {
+    if (typeof value !== "string" || value.length === 0 || value.length > maximum) {
+        throw new Error(`Worker action journal ${label} is invalid.`);
+    }
+    return value;
+}
+function objectValue(value, label) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error(`Worker action journal ${label} is invalid.`);
+    return value;
+}
+function parseEntry(value) {
+    const entry = objectValue(value, "entry");
+    const index = entry.index;
+    if (typeof index !== "number" || !Number.isSafeInteger(index) || index < 0)
+        throw new Error("Worker action journal entry index is invalid.");
+    const parsedIndex = index;
+    const operation = entry.operation;
+    const status = entry.status;
+    if ((operation !== "write" && operation !== "edit") ||
+        (status !== "intent" && status !== "succeeded" && status !== "failed")) {
+        throw new Error("Worker action journal entry shape is invalid.");
+    }
+    const reasonCode = entry.reasonCode;
+    const evidencePointer = entry.evidencePointer;
+    if (reasonCode !== undefined && (typeof reasonCode !== "string" || reasonCode.length > MAX_REASON_CHARS)) {
+        throw new Error("Worker action journal entry reason is invalid.");
+    }
+    if (evidencePointer !== undefined &&
+        (typeof evidencePointer !== "string" || evidencePointer.length > MAX_EVIDENCE_POINTER_CHARS)) {
+        throw new Error("Worker action journal entry evidence pointer is invalid.");
+    }
+    return {
+        actionId: stringValue(entry.actionId, "entry action id", 128),
+        actionDigest: stringValue(entry.actionDigest, "entry action digest", 128),
+        index: parsedIndex,
+        attemptId: stringValue(entry.attemptId, "entry attempt id", MAX_IDENTIFIER_CHARS),
+        fencingToken: safeFencingToken(entry.fencingToken),
+        operation,
+        normalizedTarget: stringValue(entry.normalizedTarget, "entry target", MAX_TARGET_CHARS),
+        status,
+        createdAt: stringValue(entry.createdAt, "entry created time", 128),
+        updatedAt: stringValue(entry.updatedAt, "entry updated time", 128),
+        ...(reasonCode ? { reasonCode } : {}),
+        ...(evidencePointer ? { evidencePointer } : {}),
+    };
+}
+function parseJournal(value, expectedScope) {
+    const journal = objectValue(value, "document");
+    if (journal.schemaVersion !== JOURNAL_SCHEMA_VERSION)
+        throw new Error("Worker action journal schema is unsupported.");
+    const scope = objectValue(journal.scope, "scope");
+    const parsedScope = {
+        parentSessionId: stringValue(scope.parentSessionId, "scope parent session", MAX_IDENTIFIER_CHARS),
+        taskId: stringValue(scope.taskId, "scope task", MAX_IDENTIFIER_CHARS),
+    };
+    if (parsedScope.parentSessionId !== expectedScope.parentSessionId || parsedScope.taskId !== expectedScope.taskId) {
+        throw new Error("Worker action journal scope conflicts with the current fenced attempt.");
+    }
+    if (!Array.isArray(journal.entries) || journal.entries.length > MAX_ENTRIES) {
+        throw new Error("Worker action journal entries are invalid.");
+    }
+    const entries = journal.entries.map(parseEntry);
+    if (new Set(entries.map((entry) => entry.actionId)).size !== entries.length) {
+        throw new Error("Worker action journal contains duplicate action identities.");
+    }
+    return { schemaVersion: JOURNAL_SCHEMA_VERSION, scope: parsedScope, entries };
+}
+function now() {
+    return new Date().toISOString();
+}
+/**
+ * Durable intent/receipt journal for model-emitted structured mutations. It deliberately records
+ * only action digests and normalized targets; operation payloads can contain source text or secrets
+ * and must never leave the model result in persisted orchestration state.
+ */
+export class WorkerActionJournal {
+    constructor(scope) {
+        this.agentDir = requireBoundedTrimmedText(scope.agentDir, MAX_TARGET_CHARS, "Agent directory");
+        this.scope = validateScope(scope);
+        this.identity = journalIdentity(this.scope);
+        this.filePath = workerActionJournalFile(this.agentDir, this.scope.parentSessionId, scopeDigest(this.identity));
+    }
+    inspect(actionIdentity) {
+        const actionId = requireBoundedTrimmedText(actionIdentity, 128, "Worker action id");
+        return withFileLockSync(this.filePath, () => {
+            const entry = this.readLocked().entries.find((candidate) => candidate.actionId === actionId);
+            if (!entry)
+                return { state: "not_started", actionId };
+            return this.inspectionFor(entry);
+        });
+    }
+    begin(input) {
+        if (!Number.isSafeInteger(input.index) || input.index < 0 || input.index >= MAX_ENTRIES) {
+            throw new TypeError(`Worker action index must be a safe integer from 0 through ${MAX_ENTRIES - 1}.`);
+        }
+        const normalizedTarget = normalizeWorkerActionTarget(this.agentDir, input.targetPath);
+        if (normalizedTarget.length > MAX_TARGET_CHARS)
+            throw new TypeError("Worker action target is too long.");
+        const digest = actionDigest(input, normalizedTarget);
+        const id = actionId(this.scope, input.index, digest);
+        return withFileLockSync(this.filePath, () => {
+            const journal = this.readLocked();
+            const existing = journal.entries.find((entry) => entry.actionId === id);
+            if (existing) {
+                if (existing.actionDigest !== digest)
+                    throw new Error("Worker action journal action identity collision.");
+                return this.inspectionFor(existing);
+            }
+            const previousFence = journal.entries.find((entry) => entry.actionDigest === digest &&
+                entry.operation === input.action.op &&
+                entry.normalizedTarget === normalizedTarget);
+            if (previousFence)
+                return this.inspectionFor(previousFence, true);
+            const timestamp = now();
+            journal.entries.push({
+                actionId: id,
+                actionDigest: digest,
+                index: input.index,
+                attemptId: this.scope.attemptId,
+                fencingToken: this.scope.fencingToken,
+                operation: input.action.op,
+                normalizedTarget,
+                status: "intent",
+                createdAt: timestamp,
+                updatedAt: timestamp,
+            });
+            this.writeLocked(journal);
+            return { kind: "execute", state: "not_started", actionId: id, actionDigest: digest, normalizedTarget };
+        });
+    }
+    recordSucceeded(permit, options = {}) {
+        this.recordTerminal(permit, "succeeded", "worker_action_applied", options.evidencePointer);
+    }
+    recordFailed(permit, reasonCode, options = {}) {
+        this.recordTerminal(permit, "failed", requireBoundedTrimmedText(reasonCode, MAX_REASON_CHARS, "Worker action failure reason"), options.evidencePointer);
+    }
+    recordTerminal(permit, status, reasonCode, evidencePointer) {
+        const boundedEvidence = evidencePointer
+            ? requireBoundedTrimmedText(evidencePointer, MAX_EVIDENCE_POINTER_CHARS, "Worker action evidence pointer")
+            : undefined;
+        withFileLockSync(this.filePath, () => {
+            const journal = this.readLocked();
+            const entry = journal.entries.find((candidate) => candidate.actionId === permit.actionId);
+            if (!entry ||
+                entry.actionDigest !== permit.actionDigest ||
+                entry.normalizedTarget !== permit.normalizedTarget ||
+                entry.attemptId !== this.scope.attemptId ||
+                entry.fencingToken !== this.scope.fencingToken) {
+                throw new Error("Worker action journal receipt does not match a persisted intent.");
+            }
+            if (entry.status !== "intent")
+                throw new Error("Worker action journal intent already has a terminal receipt.");
+            entry.status = status;
+            entry.reasonCode = reasonCode;
+            entry.updatedAt = now();
+            if (boundedEvidence)
+                entry.evidencePointer = boundedEvidence;
+            this.writeLocked(journal);
+        });
+    }
+    readLocked() {
+        if (!existsSync(this.filePath)) {
+            return { schemaVersion: JOURNAL_SCHEMA_VERSION, scope: structuredClone(this.identity), entries: [] };
+        }
+        const content = readBoundedTextFileSync(this.filePath, MAX_JOURNAL_BYTES, "Worker action journal");
+        let raw;
+        try {
+            raw = JSON.parse(content);
+        }
+        catch {
+            throw new Error("Worker action journal is unreadable; refusing mutation replay.");
+        }
+        return parseJournal(raw, this.identity);
+    }
+    writeLocked(journal) {
+        const serialized = `${JSON.stringify(journal)}\n`;
+        if (Buffer.byteLength(serialized, "utf-8") > MAX_JOURNAL_BYTES) {
+            throw new Error("Worker action journal would exceed its byte limit.");
+        }
+        writeFileAtomicSync(this.filePath, serialized, { mode: 0o600 });
+    }
+    inspectionFor(entry, fromPreviousFence = false) {
+        if (entry.status === "intent") {
+            return {
+                kind: "inspection_required",
+                state: "unknown",
+                actionId: entry.actionId,
+                actionDigest: entry.actionDigest,
+                normalizedTarget: entry.normalizedTarget,
+                reasonCode: fromPreviousFence
+                    ? "worker_action_prior_fence_requires_inspection"
+                    : "worker_action_outcome_unknown",
+                ...(entry.evidencePointer ? { evidencePointer: entry.evidencePointer } : {}),
+            };
+        }
+        return {
+            kind: "inspection_required",
+            state: entry.status,
+            actionId: entry.actionId,
+            actionDigest: entry.actionDigest,
+            normalizedTarget: entry.normalizedTarget,
+            reasonCode: fromPreviousFence
+                ? "worker_action_prior_fence_requires_inspection"
+                : entry.status === "succeeded"
+                    ? "worker_action_already_succeeded"
+                    : "worker_action_previously_failed",
+            ...(entry.evidencePointer ? { evidencePointer: entry.evidencePointer } : {}),
+        };
+    }
+}
+//# sourceMappingURL=worker-action-journal.js.map

package/dist/core/delegation/worker-action-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-action-journal.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-action-journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAErE,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AAkFrC,SAAS,gBAAgB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACzE,MAAM,IAAI,SAAS,CAAC,sEAAsE,CAAC,CAAC;IAC7F,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAA+B;IACrD,OAAO;QACN,eAAe,EAAE,yBAAyB,CAAC,KAAK,CAAC,eAAe,EAAE,oBAAoB,EAAE,mBAAmB,CAAC;QAC5G,MAAM,EAAE,yBAAyB,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,EAAE,SAAS,CAAC;QAChF,SAAS,EAAE,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,EAAE,YAAY,CAAC;QACzF,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC;KAClD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAiD;IACzE,OAAO,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,WAAW,CAAC,KAAkC;IACtD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,mCAAmC,CAAC;SAC3C,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;SAC7B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;SACpB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACrC,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAChG,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,2BAA2B,CAAC,GAAW,EAAE,UAAkB;IAC1E,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAC9F,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACpD,OAAO,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;AACvE,CAAC;AAED,SAAS,YAAY,CAAC,KAA6B,EAAE,gBAAwB;IAC5E,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClB,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClB,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiD,EAAE,KAAa,EAAE,MAAc;IACjG,OAAO,UAAU,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,wBAAwB,CAAC;SAChC,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;SACvB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;SAClC,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SACrB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,MAAM,CAAC;SACd,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa,EAAE,OAAe;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,cAAc,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,cAAc,CAAC,CAAC;IAC/D,OAAO,KAAgC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IACjC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,KAAK,CAAC;IAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IACC,CAAC,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,MAAM,CAAC;QAC/C,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,QAAQ,CAAC,EACrE,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IAC9C,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,gBAAgB,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnE,CAAC;IACD,IACC,eAAe,KAAK,SAAS;QAC7B,CAAC,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,GAAG,0BAA0B,CAAC,EAC3F,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC;QAC7D,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE,qBAAqB,EAAE,GAAG,CAAC;QACzE,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,EAAE,oBAAoB,CAAC;QACjF,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC;QAClD,SAAS;QACT,gBAAgB,EAAE,WAAW,CAAC,KAAK,CAAC,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,CAAC;QACvF,MAAM;QACN,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,EAAE,GAAG,CAAC;QAClE,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,EAAE,GAAG,CAAC;QAClE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,aAA0C;IAC/E,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,aAAa,KAAK,sBAAsB;QACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG;QACnB,eAAe,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,EAAE,sBAAsB,EAAE,oBAAoB,CAAC;QACjG,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,oBAAoB,CAAC;KACrE,CAAC;IACF,IAAI,WAAW,CAAC,eAAe,KAAK,aAAa,CAAC,eAAe,IAAI,WAAW,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;QAClH,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,GAAG;IACX,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IAM/B,YAAY,KAA+B;QAC1C,IAAI,CAAC,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;QAC/F,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChH,CAAC;IAED,OAAO,CAAC,cAAsB;QAC7B,MAAM,QAAQ,GAAG,yBAAyB,CAAC,cAAc,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACpF,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YAC7F,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAA6B;QAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;YACzF,MAAM,IAAI,SAAS,CAAC,6DAA6D,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACtF,IAAI,gBAAgB,CAAC,MAAM,GAAG,gBAAgB;YAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QACzG,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;YACxE,IAAI,QAAQ,EAAE,CAAC;gBACd,IAAI,QAAQ,CAAC,YAAY,KAAK,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBAC1G,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CACzC,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,CAAC,YAAY,KAAK,MAAM;gBAC7B,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnC,KAAK,CAAC,gBAAgB,KAAK,gBAAgB,CAC5C,CAAC;YACF,IAAI,aAAa;gBAAE,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;YACxB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBACpB,QAAQ,EAAE,EAAE;gBACZ,YAAY,EAAE,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;gBAC/B,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;gBACrC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;gBAC1B,gBAAgB;gBAChB,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,SAAS;aACpB,CAAC,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACxG,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,MAAmC,EAAE,OAAO,GAAiC,EAAE;QAC9F,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,uBAAuB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5F,CAAC;IAED,YAAY,CACX,MAAmC,EACnC,UAAkB,EAClB,OAAO,GAAiC,EAAE;QAE1C,IAAI,CAAC,cAAc,CAClB,MAAM,EACN,QAAQ,EACR,yBAAyB,CAAC,UAAU,EAAE,gBAAgB,EAAE,8BAA8B,CAAC,EACvF,OAAO,CAAC,eAAe,CACvB,CAAC;IACH,CAAC;IAEO,cAAc,CACrB,MAAmC,EACnC,MAA8B,EAC9B,UAAkB,EAClB,eAAmC;QAEnC,MAAM,eAAe,GAAG,eAAe;YACtC,CAAC,CAAC,yBAAyB,CAAC,eAAe,EAAE,0BAA0B,EAAE,gCAAgC,CAAC;YAC1G,CAAC,CAAC,SAAS,CAAC;QACb,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1F,IACC,CAAC,KAAK;gBACN,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;gBAC1C,KAAK,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;gBAClD,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS;gBACxC,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,YAAY,EAC7C,CAAC;gBACF,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAC/G,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YACtB,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;YAC9B,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACxB,IAAI,eAAe;gBAAE,KAAK,CAAC,eAAe,GAAG,eAAe,CAAC;YAC7D,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,UAAU;QACjB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACtG,CAAC;QACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;QACnG,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAEO,WAAW,CAAC,OAAyB;QAC5C,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QAClD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,iBAAiB,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACvE,CAAC;QACD,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAEO,aAAa,CAAC,KAA4B,EAAE,iBAAiB,GAAG,KAAK;QAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO;gBACN,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,UAAU,EAAE,iBAAiB;oBAC5B,CAAC,CAAC,+CAA+C;oBACjD,CAAC,CAAC,+BAA+B;gBAClC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5E,CAAC;QACH,CAAC;QACD,OAAO;YACN,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,UAAU,EAAE,iBAAiB;gBAC5B,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW;oBAC7B,CAAC,CAAC,iCAAiC;oBACnC,CAAC,CAAC,iCAAiC;YACrC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC;IACH,CAAC;CACD","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { workerActionJournalFile } from \"../agent-paths.ts\";\nimport { withFileLockSync, writeFileAtomicSync } from \"../util/atomic-file.ts\";\nimport { readBoundedTextFileSync } from \"../util/bounded-file.ts\";\nimport { requireBoundedTrimmedText } from \"../util/bounded-value.ts\";\n\nconst JOURNAL_SCHEMA_VERSION = 1;\nconst MAX_IDENTIFIER_CHARS = 256;\nconst MAX_TARGET_CHARS = 2048;\nconst MAX_REASON_CHARS = 512;\nconst MAX_EVIDENCE_POINTER_CHARS = 512;\nconst MAX_ENTRIES = 64;\nconst MAX_JOURNAL_BYTES = 256 * 1024;\n\nexport type WorkerActionJournalState = \"not_started\" | \"unknown\" | \"succeeded\" | \"failed\";\n\nexport interface WorkerActionJournalScope {\n\tagentDir: string;\n\tparentSessionId: string;\n\ttaskId: string;\n\tattemptId: string;\n\tfencingToken: number;\n}\n\nexport interface WorkerActionJournalAction {\n\top: \"write\" | \"edit\";\n\tpath: string;\n\tcontent?: string;\n\told?: string;\n\tnew?: string;\n}\n\nexport interface BeginWorkerActionInput {\n\tindex: number;\n\taction: WorkerActionJournalAction;\n\t/** Realpath-resolved target used by the executor, never model-provided text alone. */\n\ttargetPath: string;\n}\n\nexport interface WorkerActionExecutionPermit {\n\tkind: \"execute\";\n\tstate: \"not_started\";\n\tactionId: string;\n\tactionDigest: string;\n\tnormalizedTarget: string;\n}\n\nexport interface WorkerActionInspectionRequired {\n\tkind: \"inspection_required\";\n\tstate: Exclude<WorkerActionJournalState, \"not_started\">;\n\tactionId: string;\n\tactionDigest: string;\n\tnormalizedTarget: string;\n\treasonCode: string;\n\tevidencePointer?: string;\n}\n\nexport type BeginWorkerActionResult = WorkerActionExecutionPermit | WorkerActionInspectionRequired;\n\nexport interface WorkerActionJournalInspection {\n\tstate: WorkerActionJournalState;\n\tactionId: string;\n\tactionDigest?: string;\n\tnormalizedTarget?: string;\n\treasonCode?: string;\n\tevidencePointer?: string;\n}\n\ninterface PersistedJournalEntry {\n\tactionId: string;\n\tactionDigest: string;\n\tindex: number;\n\tattemptId: string;\n\tfencingToken: number;\n\toperation: \"write\" | \"edit\";\n\tnormalizedTarget: string;\n\tstatus: \"intent\" | \"succeeded\" | \"failed\";\n\tcreatedAt: string;\n\tupdatedAt: string;\n\treasonCode?: string;\n\tevidencePointer?: string;\n}\n\ninterface PersistedJournal {\n\tschemaVersion: number;\n\tscope: WorkerActionJournalIdentity;\n\tentries: PersistedJournalEntry[];\n}\n\ninterface WorkerActionJournalIdentity {\n\tparentSessionId: string;\n\ttaskId: string;\n}\n\nfunction safeFencingToken(value: unknown): number {\n\tif (typeof value !== \"number\" || !Number.isSafeInteger(value) || value < 1)\n\t\tthrow new TypeError(\"Worker action journal fencing token must be a positive safe integer.\");\n\treturn value;\n}\n\nfunction validateScope(scope: WorkerActionJournalScope): Omit<WorkerActionJournalScope, \"agentDir\"> {\n\treturn {\n\t\tparentSessionId: requireBoundedTrimmedText(scope.parentSessionId, MAX_IDENTIFIER_CHARS, \"Parent session id\"),\n\t\ttaskId: requireBoundedTrimmedText(scope.taskId, MAX_IDENTIFIER_CHARS, \"Task id\"),\n\t\tattemptId: requireBoundedTrimmedText(scope.attemptId, MAX_IDENTIFIER_CHARS, \"Attempt id\"),\n\t\tfencingToken: safeFencingToken(scope.fencingToken),\n\t};\n}\n\nfunction journalIdentity(scope: Omit<WorkerActionJournalScope, \"agentDir\">): WorkerActionJournalIdentity {\n\treturn { parentSessionId: scope.parentSessionId, taskId: scope.taskId };\n}\n\nfunction scopeDigest(scope: WorkerActionJournalIdentity): string {\n\treturn createHash(\"sha256\")\n\t\t.update(\"pi-worker-action-journal-scope-v1\")\n\t\t.update(\"\\0\")\n\t\t.update(scope.parentSessionId)\n\t\t.update(\"\\0\")\n\t\t.update(scope.taskId)\n\t\t.update(\"\\0\")\n\t\t.digest(\"hex\");\n}\n\nfunction usesWindowsPath(value: string): boolean {\n\treturn /^[a-zA-Z]:([\\\\/]|$)/.test(value) || value.startsWith(\"\\\\\\\\\") || value.startsWith(\"//\");\n}\n\n/** Canonical lexical identity for an already-authorized real target, including native Windows paths. */\nexport function normalizeWorkerActionTarget(cwd: string, targetPath: string): string {\n\tconst pathApi = usesWindowsPath(cwd) || usesWindowsPath(targetPath) ? path.win32 : path.posix;\n\tconst normalized = pathApi.resolve(cwd, targetPath);\n\treturn pathApi === path.win32 ? normalized.toLowerCase() : normalized;\n}\n\nfunction actionDigest(input: BeginWorkerActionInput, normalizedTarget: string): string {\n\tconst hash = createHash(\"sha256\");\n\thash.update(\"pi-worker-action-v1\");\n\thash.update(\"\\0\");\n\thash.update(input.action.op);\n\thash.update(\"\\0\");\n\thash.update(normalizedTarget);\n\thash.update(\"\\0\");\n\tif (input.action.op === \"write\") {\n\t\thash.update(input.action.content ?? \"\");\n\t} else {\n\t\thash.update(input.action.old ?? \"\");\n\t\thash.update(\"\\0\");\n\t\thash.update(input.action.new ?? \"\");\n\t}\n\treturn hash.digest(\"hex\");\n}\n\nfunction actionId(scope: Omit<WorkerActionJournalScope, \"agentDir\">, index: number, digest: string): string {\n\treturn createHash(\"sha256\")\n\t\t.update(\"pi-worker-action-id-v1\")\n\t\t.update(\"\\0\")\n\t\t.update(scope.attemptId)\n\t\t.update(\"\\0\")\n\t\t.update(String(scope.fencingToken))\n\t\t.update(\"\\0\")\n\t\t.update(String(index))\n\t\t.update(\"\\0\")\n\t\t.update(digest)\n\t\t.digest(\"hex\")\n\t\t.slice(0, 40);\n}\n\nfunction stringValue(value: unknown, label: string, maximum: number): string {\n\tif (typeof value !== \"string\" || value.length === 0 || value.length > maximum) {\n\t\tthrow new Error(`Worker action journal ${label} is invalid.`);\n\t}\n\treturn value;\n}\n\nfunction objectValue(value: unknown, label: string): Record<string, unknown> {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value))\n\t\tthrow new Error(`Worker action journal ${label} is invalid.`);\n\treturn value as Record<string, unknown>;\n}\n\nfunction parseEntry(value: unknown): PersistedJournalEntry {\n\tconst entry = objectValue(value, \"entry\");\n\tconst index = entry.index;\n\tif (typeof index !== \"number\" || !Number.isSafeInteger(index) || index < 0)\n\t\tthrow new Error(\"Worker action journal entry index is invalid.\");\n\tconst parsedIndex = index;\n\tconst operation = entry.operation;\n\tconst status = entry.status;\n\tif (\n\t\t(operation !== \"write\" && operation !== \"edit\") ||\n\t\t(status !== \"intent\" && status !== \"succeeded\" && status !== \"failed\")\n\t) {\n\t\tthrow new Error(\"Worker action journal entry shape is invalid.\");\n\t}\n\tconst reasonCode = entry.reasonCode;\n\tconst evidencePointer = entry.evidencePointer;\n\tif (reasonCode !== undefined && (typeof reasonCode !== \"string\" || reasonCode.length > MAX_REASON_CHARS)) {\n\t\tthrow new Error(\"Worker action journal entry reason is invalid.\");\n\t}\n\tif (\n\t\tevidencePointer !== undefined &&\n\t\t(typeof evidencePointer !== \"string\" || evidencePointer.length > MAX_EVIDENCE_POINTER_CHARS)\n\t) {\n\t\tthrow new Error(\"Worker action journal entry evidence pointer is invalid.\");\n\t}\n\treturn {\n\t\tactionId: stringValue(entry.actionId, \"entry action id\", 128),\n\t\tactionDigest: stringValue(entry.actionDigest, \"entry action digest\", 128),\n\t\tindex: parsedIndex,\n\t\tattemptId: stringValue(entry.attemptId, \"entry attempt id\", MAX_IDENTIFIER_CHARS),\n\t\tfencingToken: safeFencingToken(entry.fencingToken),\n\t\toperation,\n\t\tnormalizedTarget: stringValue(entry.normalizedTarget, \"entry target\", MAX_TARGET_CHARS),\n\t\tstatus,\n\t\tcreatedAt: stringValue(entry.createdAt, \"entry created time\", 128),\n\t\tupdatedAt: stringValue(entry.updatedAt, \"entry updated time\", 128),\n\t\t...(reasonCode ? { reasonCode } : {}),\n\t\t...(evidencePointer ? { evidencePointer } : {}),\n\t};\n}\n\nfunction parseJournal(value: unknown, expectedScope: WorkerActionJournalIdentity): PersistedJournal {\n\tconst journal = objectValue(value, \"document\");\n\tif (journal.schemaVersion !== JOURNAL_SCHEMA_VERSION)\n\t\tthrow new Error(\"Worker action journal schema is unsupported.\");\n\tconst scope = objectValue(journal.scope, \"scope\");\n\tconst parsedScope = {\n\t\tparentSessionId: stringValue(scope.parentSessionId, \"scope parent session\", MAX_IDENTIFIER_CHARS),\n\t\ttaskId: stringValue(scope.taskId, \"scope task\", MAX_IDENTIFIER_CHARS),\n\t};\n\tif (parsedScope.parentSessionId !== expectedScope.parentSessionId || parsedScope.taskId !== expectedScope.taskId) {\n\t\tthrow new Error(\"Worker action journal scope conflicts with the current fenced attempt.\");\n\t}\n\tif (!Array.isArray(journal.entries) || journal.entries.length > MAX_ENTRIES) {\n\t\tthrow new Error(\"Worker action journal entries are invalid.\");\n\t}\n\tconst entries = journal.entries.map(parseEntry);\n\tif (new Set(entries.map((entry) => entry.actionId)).size !== entries.length) {\n\t\tthrow new Error(\"Worker action journal contains duplicate action identities.\");\n\t}\n\treturn { schemaVersion: JOURNAL_SCHEMA_VERSION, scope: parsedScope, entries };\n}\n\nfunction now(): string {\n\treturn new Date().toISOString();\n}\n\n/**\n * Durable intent/receipt journal for model-emitted structured mutations. It deliberately records\n * only action digests and normalized targets; operation payloads can contain source text or secrets\n * and must never leave the model result in persisted orchestration state.\n */\nexport class WorkerActionJournal {\n\treadonly agentDir: string;\n\treadonly filePath: string;\n\tprivate readonly scope: Omit<WorkerActionJournalScope, \"agentDir\">;\n\tprivate readonly identity: WorkerActionJournalIdentity;\n\n\tconstructor(scope: WorkerActionJournalScope) {\n\t\tthis.agentDir = requireBoundedTrimmedText(scope.agentDir, MAX_TARGET_CHARS, \"Agent directory\");\n\t\tthis.scope = validateScope(scope);\n\t\tthis.identity = journalIdentity(this.scope);\n\t\tthis.filePath = workerActionJournalFile(this.agentDir, this.scope.parentSessionId, scopeDigest(this.identity));\n\t}\n\n\tinspect(actionIdentity: string): WorkerActionJournalInspection {\n\t\tconst actionId = requireBoundedTrimmedText(actionIdentity, 128, \"Worker action id\");\n\t\treturn withFileLockSync(this.filePath, () => {\n\t\t\tconst entry = this.readLocked().entries.find((candidate) => candidate.actionId === actionId);\n\t\t\tif (!entry) return { state: \"not_started\", actionId };\n\t\t\treturn this.inspectionFor(entry);\n\t\t});\n\t}\n\n\tbegin(input: BeginWorkerActionInput): BeginWorkerActionResult {\n\t\tif (!Number.isSafeInteger(input.index) || input.index < 0 || input.index >= MAX_ENTRIES) {\n\t\t\tthrow new TypeError(`Worker action index must be a safe integer from 0 through ${MAX_ENTRIES - 1}.`);\n\t\t}\n\t\tconst normalizedTarget = normalizeWorkerActionTarget(this.agentDir, input.targetPath);\n\t\tif (normalizedTarget.length > MAX_TARGET_CHARS) throw new TypeError(\"Worker action target is too long.\");\n\t\tconst digest = actionDigest(input, normalizedTarget);\n\t\tconst id = actionId(this.scope, input.index, digest);\n\t\treturn withFileLockSync(this.filePath, () => {\n\t\t\tconst journal = this.readLocked();\n\t\t\tconst existing = journal.entries.find((entry) => entry.actionId === id);\n\t\t\tif (existing) {\n\t\t\t\tif (existing.actionDigest !== digest) throw new Error(\"Worker action journal action identity collision.\");\n\t\t\t\treturn this.inspectionFor(existing);\n\t\t\t}\n\t\t\tconst previousFence = journal.entries.find(\n\t\t\t\t(entry) =>\n\t\t\t\t\tentry.actionDigest === digest &&\n\t\t\t\t\tentry.operation === input.action.op &&\n\t\t\t\t\tentry.normalizedTarget === normalizedTarget,\n\t\t\t);\n\t\t\tif (previousFence) return this.inspectionFor(previousFence, true);\n\t\t\tconst timestamp = now();\n\t\t\tjournal.entries.push({\n\t\t\t\tactionId: id,\n\t\t\t\tactionDigest: digest,\n\t\t\t\tindex: input.index,\n\t\t\t\tattemptId: this.scope.attemptId,\n\t\t\t\tfencingToken: this.scope.fencingToken,\n\t\t\t\toperation: input.action.op,\n\t\t\t\tnormalizedTarget,\n\t\t\t\tstatus: \"intent\",\n\t\t\t\tcreatedAt: timestamp,\n\t\t\t\tupdatedAt: timestamp,\n\t\t\t});\n\t\t\tthis.writeLocked(journal);\n\t\t\treturn { kind: \"execute\", state: \"not_started\", actionId: id, actionDigest: digest, normalizedTarget };\n\t\t});\n\t}\n\n\trecordSucceeded(permit: WorkerActionExecutionPermit, options: { evidencePointer?: string } = {}): void {\n\t\tthis.recordTerminal(permit, \"succeeded\", \"worker_action_applied\", options.evidencePointer);\n\t}\n\n\trecordFailed(\n\t\tpermit: WorkerActionExecutionPermit,\n\t\treasonCode: string,\n\t\toptions: { evidencePointer?: string } = {},\n\t): void {\n\t\tthis.recordTerminal(\n\t\t\tpermit,\n\t\t\t\"failed\",\n\t\t\trequireBoundedTrimmedText(reasonCode, MAX_REASON_CHARS, \"Worker action failure reason\"),\n\t\t\toptions.evidencePointer,\n\t\t);\n\t}\n\n\tprivate recordTerminal(\n\t\tpermit: WorkerActionExecutionPermit,\n\t\tstatus: \"succeeded\" | \"failed\",\n\t\treasonCode: string,\n\t\tevidencePointer: string | undefined,\n\t): void {\n\t\tconst boundedEvidence = evidencePointer\n\t\t\t? requireBoundedTrimmedText(evidencePointer, MAX_EVIDENCE_POINTER_CHARS, \"Worker action evidence pointer\")\n\t\t\t: undefined;\n\t\twithFileLockSync(this.filePath, () => {\n\t\t\tconst journal = this.readLocked();\n\t\t\tconst entry = journal.entries.find((candidate) => candidate.actionId === permit.actionId);\n\t\t\tif (\n\t\t\t\t!entry ||\n\t\t\t\tentry.actionDigest !== permit.actionDigest ||\n\t\t\t\tentry.normalizedTarget !== permit.normalizedTarget ||\n\t\t\t\tentry.attemptId !== this.scope.attemptId ||\n\t\t\t\tentry.fencingToken !== this.scope.fencingToken\n\t\t\t) {\n\t\t\t\tthrow new Error(\"Worker action journal receipt does not match a persisted intent.\");\n\t\t\t}\n\t\t\tif (entry.status !== \"intent\") throw new Error(\"Worker action journal intent already has a terminal receipt.\");\n\t\t\tentry.status = status;\n\t\t\tentry.reasonCode = reasonCode;\n\t\t\tentry.updatedAt = now();\n\t\t\tif (boundedEvidence) entry.evidencePointer = boundedEvidence;\n\t\t\tthis.writeLocked(journal);\n\t\t});\n\t}\n\n\tprivate readLocked(): PersistedJournal {\n\t\tif (!existsSync(this.filePath)) {\n\t\t\treturn { schemaVersion: JOURNAL_SCHEMA_VERSION, scope: structuredClone(this.identity), entries: [] };\n\t\t}\n\t\tconst content = readBoundedTextFileSync(this.filePath, MAX_JOURNAL_BYTES, \"Worker action journal\");\n\t\tlet raw: unknown;\n\t\ttry {\n\t\t\traw = JSON.parse(content);\n\t\t} catch {\n\t\t\tthrow new Error(\"Worker action journal is unreadable; refusing mutation replay.\");\n\t\t}\n\t\treturn parseJournal(raw, this.identity);\n\t}\n\n\tprivate writeLocked(journal: PersistedJournal): void {\n\t\tconst serialized = `${JSON.stringify(journal)}\\n`;\n\t\tif (Buffer.byteLength(serialized, \"utf-8\") > MAX_JOURNAL_BYTES) {\n\t\t\tthrow new Error(\"Worker action journal would exceed its byte limit.\");\n\t\t}\n\t\twriteFileAtomicSync(this.filePath, serialized, { mode: 0o600 });\n\t}\n\n\tprivate inspectionFor(entry: PersistedJournalEntry, fromPreviousFence = false): WorkerActionInspectionRequired {\n\t\tif (entry.status === \"intent\") {\n\t\t\treturn {\n\t\t\t\tkind: \"inspection_required\",\n\t\t\t\tstate: \"unknown\",\n\t\t\t\tactionId: entry.actionId,\n\t\t\t\tactionDigest: entry.actionDigest,\n\t\t\t\tnormalizedTarget: entry.normalizedTarget,\n\t\t\t\treasonCode: fromPreviousFence\n\t\t\t\t\t? \"worker_action_prior_fence_requires_inspection\"\n\t\t\t\t\t: \"worker_action_outcome_unknown\",\n\t\t\t\t...(entry.evidencePointer ? { evidencePointer: entry.evidencePointer } : {}),\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tkind: \"inspection_required\",\n\t\t\tstate: entry.status,\n\t\t\tactionId: entry.actionId,\n\t\t\tactionDigest: entry.actionDigest,\n\t\t\tnormalizedTarget: entry.normalizedTarget,\n\t\t\treasonCode: fromPreviousFence\n\t\t\t\t? \"worker_action_prior_fence_requires_inspection\"\n\t\t\t\t: entry.status === \"succeeded\"\n\t\t\t\t\t? \"worker_action_already_succeeded\"\n\t\t\t\t\t: \"worker_action_previously_failed\",\n\t\t\t...(entry.evidencePointer ? { evidencePointer: entry.evidencePointer } : {}),\n\t\t};\n\t}\n}\n"]}

package/dist/core/delegation/worker-actions.d.ts

@@ -1,6 +1,7 @@
 import type { ToolArgumentValidationOptions } from "@caupulican/pi-ai";
 import { type CapabilityGateway } from "../orchestration/capability-gateway.ts";
 import type { ToolCapabilityManifest } from "../orchestration/contracts.ts";
+import type { WorkerActionInspectionRequired, WorkerActionJournal } from "./worker-action-journal.ts";
 /**
  * Code-writing workers (G2): the worker MODEL never touches the filesystem — it emits strict-JSON
  * actions, and this RUNNER-side module applies them deterministically through the compiled
@@ -19,7 +20,31 @@ export interface WorkerAction {
     /** edit: replacement text. */
     new?: string;
 }
-export declare function parseWorkerActions(raw: unknown, validation?: ToolArgumentValidationOptions): WorkerAction[];
+export type WorkerActionRejectionCode = "worker_actions_invalid_shape" | "worker_actions_too_many" | "worker_actions_path_too_long" | "worker_actions_field_too_large" | "worker_actions_payload_too_large";
+export interface AcceptedWorkerActions {
+    kind: "accepted";
+    actions: WorkerAction[];
+}
+export interface RejectedWorkerActions {
+    kind: "rejected";
+    reasonCode: WorkerActionRejectionCode;
+    message: string;
+}
+/** The sole structured-action admission result used before execution or worker-result projection. */
+export type WorkerActionParseOutcome = AcceptedWorkerActions | RejectedWorkerActions;
+/** Bounded model-to-filesystem mutation contract. All execution callers pass through this owner. */
+export declare const MAX_WORKER_ACTIONS = 20;
+export declare const MAX_WORKER_ACTION_PATH_CHARS = 2048;
+export declare const MAX_WORKER_ACTION_TEXT_CHARS: number;
+/** Limits all source/replacement payloads for one atomic worker action batch. */
+export declare const MAX_WORKER_ACTION_PAYLOAD_CHARS: number;
+/**
+ * A structured edit only needs bounded source/replacement text. Limit the target read to 2 MiB:
+ * this admits the largest UTF-8 text payload (512 Ki code units at four bytes each)
+ * without letting a small edit cause an unbounded repository-file allocation.
+ */
+export declare const MAX_WORKER_ACTION_EDIT_TARGET_BYTES: number;
+export declare function parseWorkerActions(raw: unknown, validation?: ToolArgumentValidationOptions): WorkerActionParseOutcome;
 export interface AppliedActionsReport {
     /** Repo-relative paths actually changed. */
     changedFiles: string[];
@@ -33,11 +58,21 @@ export interface AppliedActionsReport {
         path: string;
         reason: string;
     }>;
+    /** Durable replay blocks. The parent must inspect workspace/evidence instead of re-executing. */
+    inspectionRequired: Array<{
+        path: string;
+        actionId: string;
+        state: WorkerActionInspectionRequired["state"];
+        reasonCode: string;
+        evidencePointer?: string;
+    }>;
 }
 export declare function applyWorkerActions(args: {
     actions: readonly WorkerAction[];
     gateway: CapabilityGateway;
     toolManifests: readonly ToolCapabilityManifest[];
     cwd: string;
+    /** Optional durable mutation journal for one fenced worker attempt. */
+    actionJournal?: WorkerActionJournal;
 }): AppliedActionsReport;
 //# sourceMappingURL=worker-actions.d.ts.map

package/dist/core/delegation/worker-actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker-actions.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-actions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAQ,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAI7E,OAAO,EAAE,KAAK,iBAAiB,EAAgC,MAAM,wCAAwC,CAAC;AAC9G,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAE5E;;;;;;;GAOG;AAEH,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,OAAO,GAAG,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAyDD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,6BAA6B,GAAG,YAAY,EAAE,CAG3G;AAED,MAAM,WAAW,oBAAoB;IACpC,4CAA4C;IAC5C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,8EAA4E;IAC5E,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,8FAA8F;IAC9F,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACxC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IACjC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,aAAa,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACjD,GAAG,EAAE,MAAM,CAAC;CACZ,GAAG,oBAAoB,CAiDvB","sourcesContent":["import { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, relative, resolve } from \"node:path\";\nimport type { Tool, ToolArgumentValidationOptions } from \"@caupulican/pi-ai\";\nimport { validateToolArguments } from \"@caupulican/pi-ai\";\nimport { Type } from \"typebox\";\nimport { safeRealpathSync } from \"../autonomy/path-scope.ts\";\nimport { type CapabilityGateway, CapabilityGatewayDeniedError } from \"../orchestration/capability-gateway.ts\";\nimport type { ToolCapabilityManifest } from \"../orchestration/contracts.ts\";\n\n/**\n * Code-writing workers (G2): the worker MODEL never touches the filesystem — it emits strict-JSON\n * actions, and this RUNNER-side module applies them deterministically through the compiled\n * execution grant. That keeps the structural-contract philosophy (a local model without\n * tool-calling templates can still write code) and makes enforcement execution-time, not\n * validation-only: an out-of-scope action is REFUSED with a reason, never silently dropped, and\n * refusals surface as blockers on the result.\n */\n\nexport interface WorkerAction {\n\top: \"write\" | \"edit\";\n\tpath: string;\n\t/** write: full file content. */\n\tcontent?: string;\n\t/** edit: exact string to replace (must occur in the file). */\n\told?: string;\n\t/** edit: replacement text. */\n\tnew?: string;\n}\n\nconst MAX_ACTIONS = 20;\nconst MAX_CONTENT_CHARS = 512 * 1024;\n\nconst workerActionSchema = Type.Union([\n\tType.Object({\n\t\top: Type.Literal(\"write\"),\n\t\tpath: Type.String({ minLength: 1 }),\n\t\tcontent: Type.String({ maxLength: MAX_CONTENT_CHARS }),\n\t}),\n\tType.Object({\n\t\top: Type.Literal(\"edit\"),\n\t\tpath: Type.String({ minLength: 1 }),\n\t\told: Type.String({ minLength: 1 }),\n\t\tnew: Type.String({ maxLength: MAX_CONTENT_CHARS }),\n\t}),\n]);\n\nconst workerActionsTool: Tool = {\n\tname: \"worker_actions\",\n\tdescription: \"Worker filesystem action list\",\n\tparameters: Type.Object({ actions: Type.Array(workerActionSchema) }),\n};\n\nfunction validateWorkerActions(raw: unknown, validation?: ToolArgumentValidationOptions): unknown[] {\n\ttry {\n\t\tconst validated = validateToolArguments(\n\t\t\tworkerActionsTool,\n\t\t\t{ type: \"toolCall\", id: \"worker-actions\", name: \"worker_actions\", arguments: { actions: raw } },\n\t\t\tvalidation,\n\t\t).actions;\n\t\treturn Array.isArray(validated) ? validated : [];\n\t} catch {\n\t\treturn [];\n\t}\n}\n\nfunction sanitizeWorkerActions(raw: readonly unknown[]): WorkerAction[] {\n\tconst actions: WorkerAction[] = [];\n\tfor (const entry of raw.slice(0, MAX_ACTIONS)) {\n\t\tif (!entry || typeof entry !== \"object\") continue;\n\t\tconst record = entry as Record<string, unknown>;\n\t\tif (record.op !== \"write\" && record.op !== \"edit\") continue;\n\t\tif (typeof record.path !== \"string\" || record.path.length === 0) continue;\n\t\tif (record.op === \"write\") {\n\t\t\tif (typeof record.content !== \"string\" || record.content.length > MAX_CONTENT_CHARS) continue;\n\t\t\tactions.push({ op: \"write\", path: record.path, content: record.content });\n\t\t} else {\n\t\t\tif (typeof record.old !== \"string\" || record.old.length === 0) continue;\n\t\t\tif (typeof record.new !== \"string\" || record.new.length > MAX_CONTENT_CHARS) continue;\n\t\t\tactions.push({ op: \"edit\", path: record.path, old: record.old, new: record.new });\n\t\t}\n\t}\n\treturn actions;\n}\n\nexport function parseWorkerActions(raw: unknown, validation?: ToolArgumentValidationOptions): WorkerAction[] {\n\tif (Array.isArray(raw)) return sanitizeWorkerActions(validateWorkerActions(sanitizeWorkerActions(raw), validation));\n\treturn sanitizeWorkerActions(validateWorkerActions(raw, validation));\n}\n\nexport interface AppliedActionsReport {\n\t/** Repo-relative paths actually changed. */\n\tchangedFiles: string[];\n\t/** Grant refusals (execution-time enforcement) — surfaced, never silent. */\n\trefused: Array<{ path: string; reason: string }>;\n\t/** Actions that were in scope but could not be applied (missing file, old-text not found). */\n\tfailed: Array<{ path: string; reason: string }>;\n}\n\nexport function applyWorkerActions(args: {\n\tactions: readonly WorkerAction[];\n\tgateway: CapabilityGateway;\n\ttoolManifests: readonly ToolCapabilityManifest[];\n\tcwd: string;\n}): AppliedActionsReport {\n\tconst report: AppliedActionsReport = { changedFiles: [], refused: [], failed: [] };\n\tconst manifests = new Map(args.toolManifests.map((manifest) => [manifest.toolName, manifest]));\n\tfor (const action of args.actions) {\n\t\tconst manifest = manifests.get(action.op);\n\t\tif (!manifest) {\n\t\t\treport.refused.push({\n\t\t\t\tpath: action.path,\n\t\t\t\treason: `${action.op} is not present in the compiled tool manifest`,\n\t\t\t});\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\targs.gateway.authorizeToolCall(manifest, action.op, { path: action.path });\n\t\t} catch (error) {\n\t\t\tif (error instanceof CapabilityGatewayDeniedError) {\n\t\t\t\treport.refused.push({ path: action.path, reason: `${error.reasonCode}: ${error.message}` });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t\tconst target = safeRealpathSync(resolve(args.cwd, action.path));\n\t\tconst relativePath = relative(args.cwd, target).replaceAll(\"\\\\\", \"/\");\n\t\ttry {\n\t\t\tif (action.op === \"write\") {\n\t\t\t\tmkdirSync(dirname(target), { recursive: true });\n\t\t\t\twriteFileSync(target, action.content ?? \"\", \"utf-8\");\n\t\t\t} else {\n\t\t\t\tif (!existsSync(target)) {\n\t\t\t\t\treport.failed.push({ path: action.path, reason: \"file does not exist\" });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst current = readFileSync(target, \"utf-8\");\n\t\t\t\tif (!action.old || !current.includes(action.old)) {\n\t\t\t\t\treport.failed.push({ path: action.path, reason: \"edit old-text not found in file\" });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\twriteFileSync(\n\t\t\t\t\ttarget,\n\t\t\t\t\tcurrent.replace(action.old, () => action.new ?? \"\"),\n\t\t\t\t\t\"utf-8\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (!report.changedFiles.includes(relativePath)) report.changedFiles.push(relativePath);\n\t\t} catch (error) {\n\t\t\treport.failed.push({ path: action.path, reason: error instanceof Error ? error.message : String(error) });\n\t\t}\n\t}\n\treturn report;\n}\n"]}
+{"version":3,"file":"worker-actions.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-actions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAQ,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAI7E,OAAO,EAAE,KAAK,iBAAiB,EAAgC,MAAM,wCAAwC,CAAC;AAC9G,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAG5E,OAAO,KAAK,EAAE,8BAA8B,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtG;;;;;;;GAOG;AAEH,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,OAAO,GAAG,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,yBAAyB,GAClC,8BAA8B,GAC9B,yBAAyB,GACzB,8BAA8B,GAC9B,gCAAgC,GAChC,kCAAkC,CAAC;AAEtC,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,YAAY,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,yBAAyB,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,qGAAqG;AACrG,MAAM,MAAM,wBAAwB,GAAG,qBAAqB,GAAG,qBAAqB,CAAC;AAErF,oGAAoG;AACpG,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,4BAA4B,OAAQ,CAAC;AAClD,eAAO,MAAM,4BAA4B,QAAa,CAAC;AACvD,iFAAiF;AACjF,eAAO,MAAM,+BAA+B,QAAa,CAAC;AAC1D;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,QAAkB,CAAC;AA8GnE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,6BAA6B,GAAG,wBAAwB,CAOrH;AAED,MAAM,WAAW,oBAAoB;IACpC,4CAA4C;IAC5C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,4EAA4E;IAC5E,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,8FAA8F;IAC9F,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,iGAAiG;IACjG,kBAAkB,EAAE,KAAK,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,8BAA8B,CAAC,OAAO,CAAC,CAAC;QAC/C,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;CACH;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACxC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IACjC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,aAAa,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACpC,GAAG,oBAAoB,CAoHvB"}