@caupulican/pi-adaptative 0.81.41 → 0.81.43

package/dist/core/delegation/worker-conversation-store.js

@@ -0,0 +1,440 @@
+import { createHash } from "node:crypto";
+import { existsSync } from "node:fs";
+import { basename, dirname, isAbsolute, relative, resolve } from "node:path";
+import { isDeepStrictEqual } from "node:util";
+import { convertToLlm } from "@caupulican/pi-agent-core";
+import { assertValidSessionId, createDeterministicCompaction, estimateContextTokens, prepareCompaction, SessionManager, } from "@caupulican/pi-agent-core/node";
+import { orchestrationSessionsDir, workerConversationSessionsDir } from "../agent-paths.js";
+import { sameAgentResumeIdentity } from "../orchestration/agent-resume.js";
+import { validateAttemptUsageSnapshot } from "../orchestration/attempt-usage.js";
+import { withFileLockSync, writeFileAtomicSync } from "../util/atomic-file.js";
+import { readBoundedTextFileSync } from "../util/bounded-file.js";
+import { collectBoundedWorkerClaimChangedFiles, MAX_WORKER_CLAIM_CHANGED_FILES, MAX_WORKER_CLAIM_TERMINAL_ATTEMPT_ID_CHARS, } from "./worker-claim.js";
+const MAX_WORKER_CONVERSATION_METADATA_BYTES = 256 * 1024;
+const WORKER_CHANGED_FILE_CUSTOM_TYPE = "worker-changed-file";
+function stableWorkerSessionId(parentSessionId, logicalAgentId) {
+    const normalizedAgentId = logicalAgentId.trim();
+    if (!normalizedAgentId)
+        throw new TypeError("A logical worker agent id is required.");
+    const digest = createHash("sha256")
+        .update("pi-worker-conversation-v1")
+        .update("\0")
+        .update(parentSessionId)
+        .update("\0")
+        .update(normalizedAgentId)
+        .digest("hex")
+        .slice(0, 32);
+    return `worker-${digest}`;
+}
+function cloneResumeContext(context) {
+    return structuredClone(context);
+}
+function expectedResumeContext(options) {
+    const sessionDir = workerConversationSessionsDir(options.agentDir, options.parentSessionId);
+    const sessionId = stableWorkerSessionId(options.parentSessionId, options.logicalAgentId);
+    assertValidSessionId(sessionId);
+    if (!options.cwd.trim())
+        throw new TypeError("A worker conversation working directory is required.");
+    return {
+        provider: "pi",
+        sessionId,
+        sessionDir,
+        sessionFile: joinWorkerSessionFile(sessionDir, sessionId),
+        cwd: resolve(options.cwd),
+        ...(options.orchestrationProfileId ? { orchestrationProfileId: options.orchestrationProfileId } : {}),
+        ...(options.modelRef ? { modelRef: options.modelRef } : {}),
+        resourceProfileNames: [...options.resourceProfileNames],
+        contextPointers: structuredClone(options.contextPointers),
+    };
+}
+function metadataFromFile(metadataFile) {
+    let metadata;
+    try {
+        metadata = JSON.parse(readBoundedTextFileSync(metadataFile, MAX_WORKER_CONVERSATION_METADATA_BYTES, "Worker conversation metadata durable size bound"));
+    }
+    catch {
+        throw new Error(existsSync(metadataFile)
+            ? "Worker conversation metadata is invalid or exceeds its durable size bound."
+            : "Worker conversation metadata is missing or invalid.");
+    }
+    if (!metadata || typeof metadata !== "object" || Array.isArray(metadata)) {
+        throw new Error("Worker conversation metadata is invalid.");
+    }
+    const logicalAgentId = metadata.logicalAgentId;
+    const resumeContext = metadata.resumeContext;
+    if (typeof logicalAgentId !== "string" || !logicalAgentId.trim() || !resumeContext) {
+        throw new Error("Worker conversation metadata is invalid.");
+    }
+    return { logicalAgentId, resumeContext: cloneResumeContext(resumeContext) };
+}
+function assertExactConversationMetadata(metadataFile, expected, logicalAgentId) {
+    const metadata = metadataFromFile(metadataFile);
+    if (logicalAgentId && metadata.logicalAgentId !== logicalAgentId) {
+        throw new Error("Worker conversation logical agent identity conflicts with the persisted transcript.");
+    }
+    if (!sameAgentResumeIdentity(metadata.resumeContext, expected)) {
+        throw new Error("Worker conversation resume context conflicts with the persisted transcript.");
+    }
+}
+function assertWorkerConversationFile(agentDir, sessionFile, sessionId) {
+    const workersRoot = resolve(orchestrationSessionsDir(agentDir));
+    const resolvedFile = resolve(sessionFile);
+    const fileRelativeToWorkersRoot = relative(workersRoot, resolvedFile);
+    if (fileRelativeToWorkersRoot === "" ||
+        fileRelativeToWorkersRoot.startsWith("..") ||
+        isAbsolute(fileRelativeToWorkersRoot)) {
+        throw new Error("Worker conversation session file must remain under the canonical worker sessions directory.");
+    }
+    const segments = fileRelativeToWorkersRoot.split(/[\\/]/);
+    if (segments.length !== 3 || segments[1] !== "worker-conversations") {
+        throw new Error("Worker conversation session file must remain under the canonical worker sessions directory.");
+    }
+    if (basename(resolvedFile) !== `${sessionId}.jsonl`) {
+        throw new Error("Worker conversation session file does not match its durable session id.");
+    }
+    return resolvedFile;
+}
+/**
+ * Durable SessionManager-backed transcript for exactly one logical worker lane.
+ *
+ * Single-writer invariant: orchestration must ensure that no two live processes append to the same
+ * conversation. This store deliberately does not merge branches or lock competing writers; a
+ * complete child transcript is committed only after it proves the current provider-visible context
+ * is its exact prefix.
+ */
+export class WorkerConversation {
+    constructor(sessionManager, resumeContext) {
+        this.sessionManager = sessionManager;
+        this.resumeContext = cloneResumeContext(resumeContext);
+    }
+    /** Resolve current provider-visible messages lazily through SessionManager. */
+    getProviderContext() {
+        return this.sessionManager.buildSessionContext();
+    }
+    /** Convert the current compacted projection at its transcript owner, never at each consumer. */
+    getProviderMessages() {
+        return convertToLlm(this.getProviderContext().messages);
+    }
+    /** True when provider context is a compacted projection rather than the raw transcript prefix. */
+    hasProviderCompaction() {
+        return this.sessionManager.getBranch().some((entry) => entry.type === "compaction");
+    }
+    /**
+     * The immutable, append-only raw worker messages, including messages compacted out of provider
+     * context. This is recovery/audit data; it is never loaded into a provider request implicitly.
+     */
+    getRawTranscript() {
+        const messages = [];
+        for (const entry of this.sessionManager.getEntries()) {
+            if (entry.type === "message" &&
+                (entry.message.role === "user" || entry.message.role === "assistant" || entry.message.role === "toolResult")) {
+                messages.push(structuredClone(entry.message));
+            }
+        }
+        return messages;
+    }
+    /** Durable host-observed mutation progress. Custom entries never enter provider context. */
+    recordChangedFile(attemptId, filePath) {
+        if (!attemptId.trim() || attemptId.length > MAX_WORKER_CLAIM_TERMINAL_ATTEMPT_ID_CHARS) {
+            throw new TypeError("Worker changed-file progress attempt id is invalid or exceeds its durable bound.");
+        }
+        const candidate = collectBoundedWorkerClaimChangedFiles([filePath]);
+        if (candidate.overflowed || candidate.values.length !== 1) {
+            throw new TypeError("Worker changed-file progress path is invalid or exceeds its durable bound.");
+        }
+        const path = candidate.values[0];
+        const existing = this.getChangedFiles(attemptId);
+        if (existing.includes(path))
+            return;
+        if (existing.length >= MAX_WORKER_CLAIM_CHANGED_FILES) {
+            throw new Error("Worker changed-file progress exceeds its durable entry bound.");
+        }
+        this.sessionManager.appendCustomEntry(WORKER_CHANGED_FILE_CUSTOM_TYPE, { attemptId, path });
+    }
+    /** Rehydrate the bounded mutation set across owner-session disposal and worker resume. */
+    getChangedFiles(attemptId) {
+        const paths = [];
+        for (const entry of this.sessionManager.getEntries()) {
+            if (entry.type !== "custom" || entry.customType !== WORKER_CHANGED_FILE_CUSTOM_TYPE)
+                continue;
+            const data = entry.data;
+            if (!data || typeof data !== "object" || Array.isArray(data))
+                continue;
+            const attemptDescriptor = Object.getOwnPropertyDescriptor(data, "attemptId");
+            const pathDescriptor = Object.getOwnPropertyDescriptor(data, "path");
+            if (attemptDescriptor &&
+                "value" in attemptDescriptor &&
+                attemptDescriptor.value === attemptId &&
+                pathDescriptor &&
+                "value" in pathDescriptor &&
+                typeof pathDescriptor.value === "string") {
+                paths.push(pathDescriptor.value);
+            }
+        }
+        return collectBoundedWorkerClaimChangedFiles(paths).values;
+    }
+    /**
+     * Recover cumulative accounting from raw entry metadata without cloning or resolving message
+     * payloads that compaction deliberately moved out of the provider-visible working set.
+     */
+    getRawTranscriptUsage() {
+        const usage = {
+            toolCalls: 0,
+            inputTokens: 0,
+            outputTokens: 0,
+            cacheReadTokens: 0,
+            cacheWriteTokens: 0,
+            totalTokens: 0,
+            costUsd: 0,
+            activeWallClockMs: 0,
+        };
+        for (const entry of this.sessionManager.getEntries()) {
+            if (entry.type === "compaction" && entry.usage) {
+                usage.inputTokens += entry.usage.input;
+                usage.outputTokens += entry.usage.output;
+                usage.cacheReadTokens += entry.usage.cacheRead;
+                usage.cacheWriteTokens += entry.usage.cacheWrite;
+                usage.totalTokens += entry.usage.totalTokens;
+                usage.costUsd += entry.usage.cost.total;
+                continue;
+            }
+            if (entry.type !== "message")
+                continue;
+            if (entry.message.role === "toolResult") {
+                usage.toolCalls += 1;
+                continue;
+            }
+            if (entry.message.role !== "assistant")
+                continue;
+            usage.inputTokens += entry.message.usage.input;
+            usage.outputTokens += entry.message.usage.output;
+            usage.cacheReadTokens += entry.message.usage.cacheRead;
+            usage.cacheWriteTokens += entry.message.usage.cacheWrite;
+            usage.totalTokens += entry.message.usage.totalTokens;
+            usage.costUsd += entry.message.usage.cost.total;
+        }
+        return validateAttemptUsageSnapshot(usage, "legacy worker transcript usage");
+    }
+    /**
+     * Locate a bounded set of durable mailbox delivery commits without materializing or cloning the
+     * complete raw transcript. Recovery uses this only to close the narrow crash window after a
+     * control message was appended but before its mailbox acknowledgement was persisted.
+     */
+    findDeliveredWorkerControlMessageIds(pendingMessageIds) {
+        const unresolved = new Set(pendingMessageIds);
+        const delivered = new Set();
+        if (unresolved.size === 0)
+            return delivered;
+        const entries = this.sessionManager.getEntries();
+        for (let index = entries.length - 1; index >= 0; index--) {
+            const entry = entries[index];
+            if (!entry)
+                continue;
+            if (entry.type !== "message" || entry.message.role !== "user" || typeof entry.message.content !== "string") {
+                continue;
+            }
+            const messageId = /^\[Worker control (worker-message-[^\]]+)\]\n/.exec(entry.message.content)?.[1];
+            if (!messageId || !unresolved.delete(messageId))
+                continue;
+            delivered.add(messageId);
+            if (unresolved.size === 0)
+                break;
+        }
+        return delivered;
+    }
+    /**
+     * Append one shared-compaction checkpoint when the current provider-visible context exceeds the
+     * explicit worker policy. The source transcript remains append-only; only the projection sent to
+     * the next provider call changes. The method is idempotent while no new messages are appended.
+     */
+    async compactProviderContext(policy, signal) {
+        assertRetentionPolicy(policy);
+        signal?.throwIfAborted();
+        const before = this.getProviderContext();
+        const beforeUsage = estimateContextTokens(before.messages);
+        if (beforeUsage.tokens <= policy.maxContextTokens) {
+            return { status: "within_limit", context: before, contextUsage: beforeUsage };
+        }
+        const preparation = prepareCompaction(this.sessionManager.getBranch(), {
+            enabled: true,
+            // The store does not choose a model or invoke a provider. This is only the shared cut-point
+            // input required by deterministic fallback; a controller-provided verified generator owns
+            // the model-specific reserve and retry policy.
+            reserveTokens: Math.max(1, Math.floor(policy.maxContextTokens / 4)),
+            keepRecentTokens: policy.keepRecentTokens,
+            triggerPercent: 0,
+        });
+        if (!preparation) {
+            return { status: "cannot_compact", context: before, contextUsage: beforeUsage };
+        }
+        let result;
+        let status = "compacted_deterministic";
+        if (policy.generateVerifiedCompaction) {
+            try {
+                const verified = await policy.generateVerifiedCompaction(preparation);
+                signal?.throwIfAborted();
+                assertApplicableCompactionResult(verified, preparation);
+                result = verified;
+                status = "compacted_verified";
+            }
+            catch {
+                // Cancellation/suspension transfers transcript ownership. The retiring owner must
+                // not append a fallback after its execution fence has been released.
+                signal?.throwIfAborted();
+                const failedUsage = policy.getFailedCompactionUsage?.();
+                result = {
+                    ...createDeterministicCompaction(preparation),
+                    ...(failedUsage ? { usage: structuredClone(failedUsage) } : {}),
+                };
+            }
+        }
+        else {
+            result = createDeterministicCompaction(preparation);
+        }
+        signal?.throwIfAborted();
+        this.sessionManager.appendCompaction(result.summary, result.firstKeptEntryId, result.tokensBefore, result.details, false, result.usage);
+        const context = this.getProviderContext();
+        return { status, context, contextUsage: estimateContextTokens(context.messages) };
+    }
+    /** Append one already-authorized worker message to the canonical transcript. */
+    appendMessage(message) {
+        return this.sessionManager.appendMessage(structuredClone(message));
+    }
+    /**
+     * Commit one complete child-owned transcript without replaying its persisted prefix.
+     *
+     * Any mismatch is a divergence: appending would duplicate or reorder provider context, so the
+     * caller must resolve it rather than silently branching this logical worker conversation.
+     */
+    commitTranscript(transcript) {
+        // Compare against the append-only source transcript, not the provider projection: once a
+        // compaction checkpoint exists, buildSessionContext() begins with its synthetic summary and is
+        // intentionally no longer an exact prefix of the child loop's raw message sequence.
+        const persisted = this.getRawTranscript();
+        if (transcript.length < persisted.length) {
+            throw new Error("Worker conversation transcript is shorter than its persisted raw context.");
+        }
+        for (let index = 0; index < persisted.length; index++) {
+            if (!isDeepStrictEqual(persisted[index], transcript[index])) {
+                throw new Error(`Worker conversation transcript diverges from persisted context at message ${index}.`);
+            }
+        }
+        for (const message of transcript.slice(persisted.length)) {
+            this.appendMessage(message);
+        }
+        return transcript.length - persisted.length;
+    }
+    /** Return an isolated copy suitable for durable orchestration/process-resume state. */
+    getResumeContext() {
+        return cloneResumeContext(this.resumeContext);
+    }
+}
+function assertRetentionPolicy(policy) {
+    if (!Number.isSafeInteger(policy.maxContextTokens) || policy.maxContextTokens < 2) {
+        throw new TypeError("Worker conversation maximum context tokens must be an integer of at least 2.");
+    }
+    if (!Number.isSafeInteger(policy.keepRecentTokens) ||
+        policy.keepRecentTokens < 1 ||
+        policy.keepRecentTokens >= policy.maxContextTokens) {
+        throw new TypeError("Worker conversation retained context tokens must be an integer below the maximum.");
+    }
+}
+function assertApplicableCompactionResult(result, preparation) {
+    if (!result ||
+        typeof result.summary !== "string" ||
+        result.firstKeptEntryId !== preparation.firstKeptEntryId ||
+        result.tokensBefore !== preparation.tokensBefore) {
+        throw new Error("Worker verified compaction result does not match the prepared durable transcript.");
+    }
+}
+/** Creates and reopens canonical SessionManager transcripts for logical Pi worker lanes. */
+export class WorkerConversationStore {
+    create(options) {
+        const resumeContext = expectedResumeContext(options);
+        const sessionFile = resumeContext.sessionFile;
+        return withFileLockSync(sessionFile, () => this.createLocked(options, resumeContext));
+    }
+    createLocked(options, resumeContext) {
+        const sessionDir = resumeContext.sessionDir;
+        const sessionFile = resumeContext.sessionFile;
+        const metadataFile = workerConversationMetadataFile(sessionFile);
+        if (existsSync(sessionFile)) {
+            throw new Error(`Worker conversation already exists for logical agent '${options.logicalAgentId}'.`);
+        }
+        // SessionManager intentionally defers a brand-new header until its first assistant message.
+        // A worker must be resumable after its first user/tool message, so atomically seed the exact
+        // SessionManager header and immediately reopen it through SessionManager for all later writes.
+        const seed = SessionManager.create(resumeContext.cwd, options.agentDir, sessionDir, {
+            id: resumeContext.sessionId,
+        });
+        const header = seed.getHeader();
+        if (!header)
+            throw new Error("Unable to create a worker conversation session header.");
+        if (existsSync(metadataFile)) {
+            assertExactConversationMetadata(metadataFile, resumeContext, options.logicalAgentId);
+        }
+        else {
+            // Metadata lands first: a crash leaves no visible conversation until the ordinary session
+            // header is atomically published, while a later ensure can validate the exact intended identity.
+            writeFileAtomicSync(metadataFile, `${JSON.stringify({ logicalAgentId: options.logicalAgentId, resumeContext })}\n`);
+        }
+        writeFileAtomicSync(sessionFile, `${JSON.stringify(header)}\n`);
+        return this.open({
+            agentDir: options.agentDir,
+            resumeContext,
+            expectedLogicalAgentId: options.logicalAgentId,
+        });
+    }
+    /** Open the one canonical transcript or atomically create it with the exact same durable identity. */
+    ensure(options) {
+        const resumeContext = expectedResumeContext(options);
+        const sessionFile = resumeContext.sessionFile;
+        return withFileLockSync(sessionFile, () => {
+            if (!existsSync(sessionFile))
+                return this.createLocked(options, resumeContext);
+            return this.open({
+                agentDir: options.agentDir,
+                resumeContext,
+                expectedLogicalAgentId: options.logicalAgentId,
+            });
+        });
+    }
+    open(options) {
+        const context = cloneResumeContext(options.resumeContext);
+        if (context.provider !== "pi")
+            throw new TypeError("Only Pi worker conversations can be reopened.");
+        if (!context.sessionFile)
+            throw new TypeError("A persisted worker session file is required to reopen a conversation.");
+        if (!context.cwd.trim())
+            throw new TypeError("A worker conversation working directory is required.");
+        assertValidSessionId(context.sessionId);
+        const sessionFile = assertWorkerConversationFile(options.agentDir, context.sessionFile, context.sessionId);
+        if (!existsSync(sessionFile))
+            throw new Error(`Worker conversation session file does not exist: ${sessionFile}`);
+        const sessionDir = dirname(sessionFile);
+        if (context.sessionDir && resolve(context.sessionDir) !== sessionDir) {
+            throw new Error("Worker conversation resume context has a session directory that disagrees with its session file.");
+        }
+        const sessionManager = SessionManager.open(sessionFile, options.agentDir, sessionDir);
+        if (sessionManager.getSessionId() !== context.sessionId) {
+            throw new Error("Worker conversation session file does not contain the requested durable session id.");
+        }
+        if (sessionManager.getCwd() !== resolve(context.cwd)) {
+            throw new Error("Worker conversation resume context working directory disagrees with the persisted session.");
+        }
+        assertExactConversationMetadata(workerConversationMetadataFile(sessionFile), context, options.expectedLogicalAgentId);
+        return new WorkerConversation(sessionManager, {
+            ...context,
+            sessionDir,
+            sessionFile,
+            cwd: sessionManager.getCwd(),
+        });
+    }
+}
+function joinWorkerSessionFile(sessionDir, sessionId) {
+    return resolve(sessionDir, `${sessionId}.jsonl`);
+}
+function workerConversationMetadataFile(sessionFile) {
+    return `${sessionFile}.worker.json`;
+}
+//# sourceMappingURL=worker-conversation-store.js.map

package/dist/core/delegation/worker-conversation-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-conversation-store.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-conversation-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EACN,oBAAoB,EAGpB,6BAA6B,EAC7B,qBAAqB,EACrB,iBAAiB,EAEjB,cAAc,GACd,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAEjF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EACN,qCAAqC,EACrC,8BAA8B,EAC9B,0CAA0C,GAC1C,MAAM,mBAAmB,CAAC;AAE3B,MAAM,sCAAsC,GAAG,GAAG,GAAG,IAAI,CAAC;AAC1D,MAAM,+BAA+B,GAAG,qBAAqB,CAAC;AA2D9D,SAAS,qBAAqB,CAAC,eAAuB,EAAE,cAAsB;IAC7E,MAAM,iBAAiB,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,iBAAiB;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SACjC,MAAM,CAAC,2BAA2B,CAAC;SACnC,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,iBAAiB,CAAC;SACzB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,OAAO,UAAU,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B;IACtD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAwC;IACtE,MAAM,UAAU,GAAG,6BAA6B,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACzF,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IACrG,OAAO;QACN,QAAQ,EAAE,IAAI;QACd,SAAS;QACT,UAAU;QACV,WAAW,EAAE,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC;QACzD,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QACzB,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,oBAAoB,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACvD,eAAe,EAAE,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC;KACzD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAoB;IAC7C,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,QAAQ,GAAG,IAAI,CAAC,KAAK,CACpB,uBAAuB,CACtB,YAAY,EACZ,sCAAsC,EACtC,iDAAiD,CACjD,CACD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CACd,UAAU,CAAC,YAAY,CAAC;YACvB,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,qDAAqD,CACxD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,cAAc,GAAI,QAAyC,CAAC,cAAc,CAAC;IACjF,MAAM,aAAa,GAAI,QAAwC,CAAC,aAAa,CAAC;IAC9E,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,CAAC,aAAmC,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,SAAS,+BAA+B,CACvC,YAAoB,EACpB,QAA4B,EAC5B,cAAuB;IAEvB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,cAAc,IAAI,QAAQ,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAChG,CAAC;AACF,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAgB,EAAE,WAAmB,EAAE,SAAiB;IAC7F,MAAM,WAAW,GAAG,OAAO,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,yBAAyB,GAAG,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACtE,IACC,yBAAyB,KAAK,EAAE;QAChC,yBAAyB,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1C,UAAU,CAAC,yBAAyB,CAAC,EACpC,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,sBAAsB,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,CAAC,KAAK,GAAG,SAAS,QAAQ,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,YAAY,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IAI9B,YAAY,cAA8B,EAAE,aAAiC;QAC5E,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IAED,+EAA+E;IAC/E,kBAAkB;QACjB,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;IAClD,CAAC;IAED,gGAAgG;IAChG,mBAAmB;QAClB,OAAO,YAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED,kGAAkG;IAClG,qBAAqB;QACpB,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IACrF,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACf,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,CAAC;YACtD,IACC,KAAK,CAAC,IAAI,KAAK,SAAS;gBACxB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,EAC3G,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/C,CAAC;QACF,CAAC;QACD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,4FAA4F;IAC5F,iBAAiB,CAAC,SAAiB,EAAE,QAAgB;QACpD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC,MAAM,GAAG,0CAA0C,EAAE,CAAC;YACxF,MAAM,IAAI,SAAS,CAAC,kFAAkF,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,SAAS,GAAG,qCAAqC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpE,IAAI,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,SAAS,CAAC,4EAA4E,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO;QACpC,IAAI,QAAQ,CAAC,MAAM,IAAI,8BAA8B,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,+BAA+B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,0FAA0F;IAC1F,eAAe,CAAC,SAAiB;QAChC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,CAAC;YACtD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,+BAA+B;gBAAE,SAAS;YAC9F,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACxB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvE,MAAM,iBAAiB,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAC7E,MAAM,cAAc,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrE,IACC,iBAAiB;gBACjB,OAAO,IAAI,iBAAiB;gBAC5B,iBAAiB,CAAC,KAAK,KAAK,SAAS;gBACrC,cAAc;gBACd,OAAO,IAAI,cAAc;gBACzB,OAAO,cAAc,CAAC,KAAK,KAAK,QAAQ,EACvC,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;QACF,CAAC;QACD,OAAO,qCAAqC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACH,qBAAqB;QACpB,MAAM,KAAK,GAAyB;YACnC,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;YACf,eAAe,EAAE,CAAC;YAClB,gBAAgB,EAAE,CAAC;YACnB,WAAW,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;YACV,iBAAiB,EAAE,CAAC;SACpB,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,CAAC;YACtD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChD,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;gBACvC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;gBACzC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC/C,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;gBACjD,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC7C,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;gBACxC,SAAS;YACV,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YACvC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;gBACrB,SAAS;YACV,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAS;YACjD,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/C,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YACjD,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;YACvD,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;YACzD,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;YACrD,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACjD,CAAC;QACD,OAAO,4BAA4B,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACH,oCAAoC,CAAC,iBAAoC;QACxE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QACjD,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5G,SAAS;YACV,CAAC;YACD,MAAM,SAAS,GAAG,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACnG,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1D,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzB,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM;QAClC,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,sBAAsB,CAC3B,MAAyC,EACzC,MAAoB;QAEpB,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACnD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QAC/E,CAAC;QAED,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE;YACtE,OAAO,EAAE,IAAI;YACb,4FAA4F;YAC5F,0FAA0F;YAC1F,+CAA+C;YAC/C,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC;YACnE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,cAAc,EAAE,CAAC;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QACjF,CAAC;QAED,IAAI,MAAwB,CAAC;QAC7B,IAAI,MAAM,GAAiD,yBAAyB,CAAC;QACrF,IAAI,MAAM,CAAC,0BAA0B,EAAE,CAAC;YACvC,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;gBACtE,MAAM,EAAE,cAAc,EAAE,CAAC;gBACzB,gCAAgC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBACxD,MAAM,GAAG,QAAQ,CAAC;gBAClB,MAAM,GAAG,oBAAoB,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACR,kFAAkF;gBAClF,qEAAqE;gBACrE,MAAM,EAAE,cAAc,EAAE,CAAC;gBACzB,MAAM,WAAW,GAAG,MAAM,CAAC,wBAAwB,EAAE,EAAE,CAAC;gBACxD,MAAM,GAAG;oBACR,GAAG,6BAA6B,CAAC,WAAW,CAAC;oBAC7C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC/D,CAAC;YACH,CAAC;QACF,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,CAAC,cAAc,CAAC,gBAAgB,CACnC,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,OAAO,EACd,KAAK,EACL,MAAM,CAAC,KAAK,CACZ,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACnF,CAAC;IAED,gFAAgF;IAChF,aAAa,CAAC,OAAgB;QAC7B,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,UAA8B;QAC9C,yFAAyF;QACzF,+FAA+F;QAC/F,oFAAoF;QACpF,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1C,IAAI,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC9F,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,6EAA6E,KAAK,GAAG,CAAC,CAAC;YACxG,CAAC;QACF,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAC7C,CAAC;IAED,uFAAuF;IACvF,gBAAgB;QACf,OAAO,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/C,CAAC;CACD;AAED,SAAS,qBAAqB,CAAC,MAAyC;IACvE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,SAAS,CAAC,8EAA8E,CAAC,CAAC;IACrG,CAAC;IACD,IACC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC9C,MAAM,CAAC,gBAAgB,GAAG,CAAC;QAC3B,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,gBAAgB,EACjD,CAAC;QACF,MAAM,IAAI,SAAS,CAAC,mFAAmF,CAAC,CAAC;IAC1G,CAAC;AACF,CAAC;AAED,SAAS,gCAAgC,CAAC,MAAwB,EAAE,WAAkC;IACrG,IACC,CAAC,MAAM;QACP,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,MAAM,CAAC,gBAAgB,KAAK,WAAW,CAAC,gBAAgB;QACxD,MAAM,CAAC,YAAY,KAAK,WAAW,CAAC,YAAY,EAC/C,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACtG,CAAC;AACF,CAAC;AAED,4FAA4F;AAC5F,MAAM,OAAO,uBAAuB;IACnC,MAAM,CAAC,OAAwC;QAC9C,MAAM,aAAa,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,aAAa,CAAC,WAAY,CAAC;QAC/C,OAAO,gBAAgB,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IACvF,CAAC;IAEO,YAAY,CACnB,OAAwC,EACxC,aAAiC;QAEjC,MAAM,UAAU,GAAG,aAAa,CAAC,UAAW,CAAC;QAC7C,MAAM,WAAW,GAAG,aAAa,CAAC,WAAY,CAAC;QAC/C,MAAM,YAAY,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,yDAAyD,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;QACtG,CAAC;QAED,4FAA4F;QAC5F,6FAA6F;QAC7F,+FAA+F;QAC/F,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE;YACnF,EAAE,EAAE,aAAa,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACvF,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,+BAA+B,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACtF,CAAC;aAAM,CAAC;YACP,0FAA0F;YAC1F,iGAAiG;YACjG,mBAAmB,CAClB,YAAY,EACZ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,CAAC,IAAI,CAChF,CAAC;QACH,CAAC;QACD,mBAAmB,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,IAAI,CAAC;YAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa;YACb,sBAAsB,EAAE,OAAO,CAAC,cAAc;SAC9C,CAAC,CAAC;IACJ,CAAC;IAED,sGAAsG;IACtG,MAAM,CAAC,OAAwC;QAC9C,MAAM,aAAa,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,aAAa,CAAC,WAAY,CAAC;QAC/C,OAAO,gBAAgB,CAAC,WAAW,EAAE,GAAG,EAAE;YACzC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC,IAAI,CAAC;gBAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa;gBACb,sBAAsB,EAAE,OAAO,CAAC,cAAc;aAC9C,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAsC;QAC1C,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;QACpG,IAAI,CAAC,OAAO,CAAC,WAAW;YACvB,MAAM,IAAI,SAAS,CAAC,uEAAuE,CAAC,CAAC;QAC9F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;QACrG,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAExC,MAAM,WAAW,GAAG,4BAA4B,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3G,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,WAAW,EAAE,CAAC,CAAC;QACjH,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,UAAU,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CACd,kGAAkG,CAClG,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACtF,IAAI,cAAc,CAAC,YAAY,EAAE,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,cAAc,CAAC,MAAM,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAC/G,CAAC;QACD,+BAA+B,CAC9B,8BAA8B,CAAC,WAAW,CAAC,EAC3C,OAAO,EACP,OAAO,CAAC,sBAAsB,CAC9B,CAAC;QAEF,OAAO,IAAI,kBAAkB,CAAC,cAAc,EAAE;YAC7C,GAAG,OAAO;YACV,UAAU;YACV,WAAW;YACX,GAAG,EAAE,cAAc,CAAC,MAAM,EAAE;SAC5B,CAAC,CAAC;IACJ,CAAC;CACD;AAED,SAAS,qBAAqB,CAAC,UAAkB,EAAE,SAAiB;IACnE,OAAO,OAAO,CAAC,UAAU,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,8BAA8B,CAAC,WAAmB;IAC1D,OAAO,GAAG,WAAW,cAAc,CAAC;AACrC,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync } from \"node:fs\";\nimport { basename, dirname, isAbsolute, relative, resolve } from \"node:path\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport { convertToLlm } from \"@caupulican/pi-agent-core\";\nimport {\n\tassertValidSessionId,\n\ttype CompactionPreparation,\n\ttype CompactionResult,\n\tcreateDeterministicCompaction,\n\testimateContextTokens,\n\tprepareCompaction,\n\ttype SessionContext,\n\tSessionManager,\n} from \"@caupulican/pi-agent-core/node\";\nimport type { Message, Usage } from \"@caupulican/pi-ai\";\nimport { orchestrationSessionsDir, workerConversationSessionsDir } from \"../agent-paths.ts\";\nimport { sameAgentResumeIdentity } from \"../orchestration/agent-resume.ts\";\nimport { validateAttemptUsageSnapshot } from \"../orchestration/attempt-usage.ts\";\nimport type { AgentResumeContext, AttemptUsageSnapshot, ResourcePointer } from \"../orchestration/contracts.ts\";\nimport { withFileLockSync, writeFileAtomicSync } from \"../util/atomic-file.ts\";\nimport { readBoundedTextFileSync } from \"../util/bounded-file.ts\";\nimport {\n\tcollectBoundedWorkerClaimChangedFiles,\n\tMAX_WORKER_CLAIM_CHANGED_FILES,\n\tMAX_WORKER_CLAIM_TERMINAL_ATTEMPT_ID_CHARS,\n} from \"./worker-claim.ts\";\n\nconst MAX_WORKER_CONVERSATION_METADATA_BYTES = 256 * 1024;\nconst WORKER_CHANGED_FILE_CUSTOM_TYPE = \"worker-changed-file\";\n\nexport interface CreateWorkerConversationOptions {\n\tagentDir: string;\n\tparentSessionId: string;\n\t/** Durable logical identity for the worker/lane. It never becomes a path segment directly. */\n\tlogicalAgentId: string;\n\tcwd: string;\n\torchestrationProfileId?: string;\n\tmodelRef?: string;\n\tresourceProfileNames: readonly string[];\n\tcontextPointers: readonly ResourcePointer[];\n}\n\nexport interface OpenWorkerConversationOptions {\n\tagentDir: string;\n\tresumeContext: AgentResumeContext;\n\texpectedLogicalAgentId?: string;\n}\n\n/**\n * Explicit, token-based retention for a durable worker transcript.\n *\n * This deliberately has no default: the worker model/context policy belongs to orchestration, not\n * the transcript store. Call only at a safe worker turn boundary, after all messages from that turn\n * have been durably committed. The execution controller provides `generateVerifiedCompaction`\n * through the shared model-aware pipeline; this store owns only preparation, append-only apply,\n * and its deterministic verified fallback.\n */\nexport interface WorkerConversationRetentionPolicy {\n\t/** Maximum provider-visible context tokens after a checkpoint is applied. */\n\tmaxContextTokens: number;\n\t/** Shared compaction's retained recent-context target. Must be lower than the maximum. */\n\tkeepRecentTokens: number;\n\t/**\n\t * Generate a verified shared compaction result. Failures, malformed results, and omitted\n\t * generators fall back to `createDeterministicCompaction`; raw transcript entries are never\n\t * replaced or removed.\n\t */\n\tgenerateVerifiedCompaction?: (preparation: CompactionPreparation) => Promise<CompactionResult>;\n\t/**\n\t * Cumulative provider usage spent by the current verified generation if it failed before it\n\t * could return a CompactionResult. This usage is attached to the deterministic checkpoint so\n\t * recovery never loses rejected-summary spend.\n\t */\n\tgetFailedCompactionUsage?: () => Usage | undefined;\n}\n\nexport interface WorkerConversationRetentionOutcome {\n\tstatus: \"within_limit\" | \"compacted_verified\" | \"compacted_deterministic\" | \"cannot_compact\";\n\tcontext: SessionContext;\n\tcontextUsage: ReturnType<typeof estimateContextTokens>;\n}\n\ninterface WorkerConversationMetadata {\n\tlogicalAgentId: string;\n\tresumeContext: AgentResumeContext;\n}\n\nfunction stableWorkerSessionId(parentSessionId: string, logicalAgentId: string): string {\n\tconst normalizedAgentId = logicalAgentId.trim();\n\tif (!normalizedAgentId) throw new TypeError(\"A logical worker agent id is required.\");\n\tconst digest = createHash(\"sha256\")\n\t\t.update(\"pi-worker-conversation-v1\")\n\t\t.update(\"\\0\")\n\t\t.update(parentSessionId)\n\t\t.update(\"\\0\")\n\t\t.update(normalizedAgentId)\n\t\t.digest(\"hex\")\n\t\t.slice(0, 32);\n\treturn `worker-${digest}`;\n}\n\nfunction cloneResumeContext(context: AgentResumeContext): AgentResumeContext {\n\treturn structuredClone(context);\n}\n\nfunction expectedResumeContext(options: CreateWorkerConversationOptions): AgentResumeContext {\n\tconst sessionDir = workerConversationSessionsDir(options.agentDir, options.parentSessionId);\n\tconst sessionId = stableWorkerSessionId(options.parentSessionId, options.logicalAgentId);\n\tassertValidSessionId(sessionId);\n\tif (!options.cwd.trim()) throw new TypeError(\"A worker conversation working directory is required.\");\n\treturn {\n\t\tprovider: \"pi\",\n\t\tsessionId,\n\t\tsessionDir,\n\t\tsessionFile: joinWorkerSessionFile(sessionDir, sessionId),\n\t\tcwd: resolve(options.cwd),\n\t\t...(options.orchestrationProfileId ? { orchestrationProfileId: options.orchestrationProfileId } : {}),\n\t\t...(options.modelRef ? { modelRef: options.modelRef } : {}),\n\t\tresourceProfileNames: [...options.resourceProfileNames],\n\t\tcontextPointers: structuredClone(options.contextPointers),\n\t};\n}\n\nfunction metadataFromFile(metadataFile: string): WorkerConversationMetadata {\n\tlet metadata: unknown;\n\ttry {\n\t\tmetadata = JSON.parse(\n\t\t\treadBoundedTextFileSync(\n\t\t\t\tmetadataFile,\n\t\t\t\tMAX_WORKER_CONVERSATION_METADATA_BYTES,\n\t\t\t\t\"Worker conversation metadata durable size bound\",\n\t\t\t),\n\t\t);\n\t} catch {\n\t\tthrow new Error(\n\t\t\texistsSync(metadataFile)\n\t\t\t\t? \"Worker conversation metadata is invalid or exceeds its durable size bound.\"\n\t\t\t\t: \"Worker conversation metadata is missing or invalid.\",\n\t\t);\n\t}\n\tif (!metadata || typeof metadata !== \"object\" || Array.isArray(metadata)) {\n\t\tthrow new Error(\"Worker conversation metadata is invalid.\");\n\t}\n\tconst logicalAgentId = (metadata as { logicalAgentId?: unknown }).logicalAgentId;\n\tconst resumeContext = (metadata as { resumeContext?: unknown }).resumeContext;\n\tif (typeof logicalAgentId !== \"string\" || !logicalAgentId.trim() || !resumeContext) {\n\t\tthrow new Error(\"Worker conversation metadata is invalid.\");\n\t}\n\treturn { logicalAgentId, resumeContext: cloneResumeContext(resumeContext as AgentResumeContext) };\n}\n\nfunction assertExactConversationMetadata(\n\tmetadataFile: string,\n\texpected: AgentResumeContext,\n\tlogicalAgentId?: string,\n): void {\n\tconst metadata = metadataFromFile(metadataFile);\n\tif (logicalAgentId && metadata.logicalAgentId !== logicalAgentId) {\n\t\tthrow new Error(\"Worker conversation logical agent identity conflicts with the persisted transcript.\");\n\t}\n\tif (!sameAgentResumeIdentity(metadata.resumeContext, expected)) {\n\t\tthrow new Error(\"Worker conversation resume context conflicts with the persisted transcript.\");\n\t}\n}\n\nfunction assertWorkerConversationFile(agentDir: string, sessionFile: string, sessionId: string): string {\n\tconst workersRoot = resolve(orchestrationSessionsDir(agentDir));\n\tconst resolvedFile = resolve(sessionFile);\n\tconst fileRelativeToWorkersRoot = relative(workersRoot, resolvedFile);\n\tif (\n\t\tfileRelativeToWorkersRoot === \"\" ||\n\t\tfileRelativeToWorkersRoot.startsWith(\"..\") ||\n\t\tisAbsolute(fileRelativeToWorkersRoot)\n\t) {\n\t\tthrow new Error(\"Worker conversation session file must remain under the canonical worker sessions directory.\");\n\t}\n\tconst segments = fileRelativeToWorkersRoot.split(/[\\\\/]/);\n\tif (segments.length !== 3 || segments[1] !== \"worker-conversations\") {\n\t\tthrow new Error(\"Worker conversation session file must remain under the canonical worker sessions directory.\");\n\t}\n\tif (basename(resolvedFile) !== `${sessionId}.jsonl`) {\n\t\tthrow new Error(\"Worker conversation session file does not match its durable session id.\");\n\t}\n\treturn resolvedFile;\n}\n\n/**\n * Durable SessionManager-backed transcript for exactly one logical worker lane.\n *\n * Single-writer invariant: orchestration must ensure that no two live processes append to the same\n * conversation. This store deliberately does not merge branches or lock competing writers; a\n * complete child transcript is committed only after it proves the current provider-visible context\n * is its exact prefix.\n */\nexport class WorkerConversation {\n\tprivate readonly sessionManager: SessionManager;\n\tprivate readonly resumeContext: AgentResumeContext;\n\n\tconstructor(sessionManager: SessionManager, resumeContext: AgentResumeContext) {\n\t\tthis.sessionManager = sessionManager;\n\t\tthis.resumeContext = cloneResumeContext(resumeContext);\n\t}\n\n\t/** Resolve current provider-visible messages lazily through SessionManager. */\n\tgetProviderContext(): SessionContext {\n\t\treturn this.sessionManager.buildSessionContext();\n\t}\n\n\t/** Convert the current compacted projection at its transcript owner, never at each consumer. */\n\tgetProviderMessages(): Message[] {\n\t\treturn convertToLlm(this.getProviderContext().messages);\n\t}\n\n\t/** True when provider context is a compacted projection rather than the raw transcript prefix. */\n\thasProviderCompaction(): boolean {\n\t\treturn this.sessionManager.getBranch().some((entry) => entry.type === \"compaction\");\n\t}\n\n\t/**\n\t * The immutable, append-only raw worker messages, including messages compacted out of provider\n\t * context. This is recovery/audit data; it is never loaded into a provider request implicitly.\n\t */\n\tgetRawTranscript(): Message[] {\n\t\tconst messages: Message[] = [];\n\t\tfor (const entry of this.sessionManager.getEntries()) {\n\t\t\tif (\n\t\t\t\tentry.type === \"message\" &&\n\t\t\t\t(entry.message.role === \"user\" || entry.message.role === \"assistant\" || entry.message.role === \"toolResult\")\n\t\t\t) {\n\t\t\t\tmessages.push(structuredClone(entry.message));\n\t\t\t}\n\t\t}\n\t\treturn messages;\n\t}\n\n\t/** Durable host-observed mutation progress. Custom entries never enter provider context. */\n\trecordChangedFile(attemptId: string, filePath: string): void {\n\t\tif (!attemptId.trim() || attemptId.length > MAX_WORKER_CLAIM_TERMINAL_ATTEMPT_ID_CHARS) {\n\t\t\tthrow new TypeError(\"Worker changed-file progress attempt id is invalid or exceeds its durable bound.\");\n\t\t}\n\t\tconst candidate = collectBoundedWorkerClaimChangedFiles([filePath]);\n\t\tif (candidate.overflowed || candidate.values.length !== 1) {\n\t\t\tthrow new TypeError(\"Worker changed-file progress path is invalid or exceeds its durable bound.\");\n\t\t}\n\t\tconst path = candidate.values[0]!;\n\t\tconst existing = this.getChangedFiles(attemptId);\n\t\tif (existing.includes(path)) return;\n\t\tif (existing.length >= MAX_WORKER_CLAIM_CHANGED_FILES) {\n\t\t\tthrow new Error(\"Worker changed-file progress exceeds its durable entry bound.\");\n\t\t}\n\t\tthis.sessionManager.appendCustomEntry(WORKER_CHANGED_FILE_CUSTOM_TYPE, { attemptId, path });\n\t}\n\n\t/** Rehydrate the bounded mutation set across owner-session disposal and worker resume. */\n\tgetChangedFiles(attemptId: string): string[] {\n\t\tconst paths: string[] = [];\n\t\tfor (const entry of this.sessionManager.getEntries()) {\n\t\t\tif (entry.type !== \"custom\" || entry.customType !== WORKER_CHANGED_FILE_CUSTOM_TYPE) continue;\n\t\t\tconst data = entry.data;\n\t\t\tif (!data || typeof data !== \"object\" || Array.isArray(data)) continue;\n\t\t\tconst attemptDescriptor = Object.getOwnPropertyDescriptor(data, \"attemptId\");\n\t\t\tconst pathDescriptor = Object.getOwnPropertyDescriptor(data, \"path\");\n\t\t\tif (\n\t\t\t\tattemptDescriptor &&\n\t\t\t\t\"value\" in attemptDescriptor &&\n\t\t\t\tattemptDescriptor.value === attemptId &&\n\t\t\t\tpathDescriptor &&\n\t\t\t\t\"value\" in pathDescriptor &&\n\t\t\t\ttypeof pathDescriptor.value === \"string\"\n\t\t\t) {\n\t\t\t\tpaths.push(pathDescriptor.value);\n\t\t\t}\n\t\t}\n\t\treturn collectBoundedWorkerClaimChangedFiles(paths).values;\n\t}\n\n\t/**\n\t * Recover cumulative accounting from raw entry metadata without cloning or resolving message\n\t * payloads that compaction deliberately moved out of the provider-visible working set.\n\t */\n\tgetRawTranscriptUsage(): AttemptUsageSnapshot {\n\t\tconst usage: AttemptUsageSnapshot = {\n\t\t\ttoolCalls: 0,\n\t\t\tinputTokens: 0,\n\t\t\toutputTokens: 0,\n\t\t\tcacheReadTokens: 0,\n\t\t\tcacheWriteTokens: 0,\n\t\t\ttotalTokens: 0,\n\t\t\tcostUsd: 0,\n\t\t\tactiveWallClockMs: 0,\n\t\t};\n\t\tfor (const entry of this.sessionManager.getEntries()) {\n\t\t\tif (entry.type === \"compaction\" && entry.usage) {\n\t\t\t\tusage.inputTokens += entry.usage.input;\n\t\t\t\tusage.outputTokens += entry.usage.output;\n\t\t\t\tusage.cacheReadTokens += entry.usage.cacheRead;\n\t\t\t\tusage.cacheWriteTokens += entry.usage.cacheWrite;\n\t\t\t\tusage.totalTokens += entry.usage.totalTokens;\n\t\t\t\tusage.costUsd += entry.usage.cost.total;\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (entry.type !== \"message\") continue;\n\t\t\tif (entry.message.role === \"toolResult\") {\n\t\t\t\tusage.toolCalls += 1;\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (entry.message.role !== \"assistant\") continue;\n\t\t\tusage.inputTokens += entry.message.usage.input;\n\t\t\tusage.outputTokens += entry.message.usage.output;\n\t\t\tusage.cacheReadTokens += entry.message.usage.cacheRead;\n\t\t\tusage.cacheWriteTokens += entry.message.usage.cacheWrite;\n\t\t\tusage.totalTokens += entry.message.usage.totalTokens;\n\t\t\tusage.costUsd += entry.message.usage.cost.total;\n\t\t}\n\t\treturn validateAttemptUsageSnapshot(usage, \"legacy worker transcript usage\");\n\t}\n\n\t/**\n\t * Locate a bounded set of durable mailbox delivery commits without materializing or cloning the\n\t * complete raw transcript. Recovery uses this only to close the narrow crash window after a\n\t * control message was appended but before its mailbox acknowledgement was persisted.\n\t */\n\tfindDeliveredWorkerControlMessageIds(pendingMessageIds: readonly string[]): Set<string> {\n\t\tconst unresolved = new Set(pendingMessageIds);\n\t\tconst delivered = new Set<string>();\n\t\tif (unresolved.size === 0) return delivered;\n\t\tconst entries = this.sessionManager.getEntries();\n\t\tfor (let index = entries.length - 1; index >= 0; index--) {\n\t\t\tconst entry = entries[index];\n\t\t\tif (!entry) continue;\n\t\t\tif (entry.type !== \"message\" || entry.message.role !== \"user\" || typeof entry.message.content !== \"string\") {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst messageId = /^\\[Worker control (worker-message-[^\\]]+)\\]\\n/.exec(entry.message.content)?.[1];\n\t\t\tif (!messageId || !unresolved.delete(messageId)) continue;\n\t\t\tdelivered.add(messageId);\n\t\t\tif (unresolved.size === 0) break;\n\t\t}\n\t\treturn delivered;\n\t}\n\n\t/**\n\t * Append one shared-compaction checkpoint when the current provider-visible context exceeds the\n\t * explicit worker policy. The source transcript remains append-only; only the projection sent to\n\t * the next provider call changes. The method is idempotent while no new messages are appended.\n\t */\n\tasync compactProviderContext(\n\t\tpolicy: WorkerConversationRetentionPolicy,\n\t\tsignal?: AbortSignal,\n\t): Promise<WorkerConversationRetentionOutcome> {\n\t\tassertRetentionPolicy(policy);\n\t\tsignal?.throwIfAborted();\n\t\tconst before = this.getProviderContext();\n\t\tconst beforeUsage = estimateContextTokens(before.messages);\n\t\tif (beforeUsage.tokens <= policy.maxContextTokens) {\n\t\t\treturn { status: \"within_limit\", context: before, contextUsage: beforeUsage };\n\t\t}\n\n\t\tconst preparation = prepareCompaction(this.sessionManager.getBranch(), {\n\t\t\tenabled: true,\n\t\t\t// The store does not choose a model or invoke a provider. This is only the shared cut-point\n\t\t\t// input required by deterministic fallback; a controller-provided verified generator owns\n\t\t\t// the model-specific reserve and retry policy.\n\t\t\treserveTokens: Math.max(1, Math.floor(policy.maxContextTokens / 4)),\n\t\t\tkeepRecentTokens: policy.keepRecentTokens,\n\t\t\ttriggerPercent: 0,\n\t\t});\n\t\tif (!preparation) {\n\t\t\treturn { status: \"cannot_compact\", context: before, contextUsage: beforeUsage };\n\t\t}\n\n\t\tlet result: CompactionResult;\n\t\tlet status: WorkerConversationRetentionOutcome[\"status\"] = \"compacted_deterministic\";\n\t\tif (policy.generateVerifiedCompaction) {\n\t\t\ttry {\n\t\t\t\tconst verified = await policy.generateVerifiedCompaction(preparation);\n\t\t\t\tsignal?.throwIfAborted();\n\t\t\t\tassertApplicableCompactionResult(verified, preparation);\n\t\t\t\tresult = verified;\n\t\t\t\tstatus = \"compacted_verified\";\n\t\t\t} catch {\n\t\t\t\t// Cancellation/suspension transfers transcript ownership. The retiring owner must\n\t\t\t\t// not append a fallback after its execution fence has been released.\n\t\t\t\tsignal?.throwIfAborted();\n\t\t\t\tconst failedUsage = policy.getFailedCompactionUsage?.();\n\t\t\t\tresult = {\n\t\t\t\t\t...createDeterministicCompaction(preparation),\n\t\t\t\t\t...(failedUsage ? { usage: structuredClone(failedUsage) } : {}),\n\t\t\t\t};\n\t\t\t}\n\t\t} else {\n\t\t\tresult = createDeterministicCompaction(preparation);\n\t\t}\n\n\t\tsignal?.throwIfAborted();\n\t\tthis.sessionManager.appendCompaction(\n\t\t\tresult.summary,\n\t\t\tresult.firstKeptEntryId,\n\t\t\tresult.tokensBefore,\n\t\t\tresult.details,\n\t\t\tfalse,\n\t\t\tresult.usage,\n\t\t);\n\t\tconst context = this.getProviderContext();\n\t\treturn { status, context, contextUsage: estimateContextTokens(context.messages) };\n\t}\n\n\t/** Append one already-authorized worker message to the canonical transcript. */\n\tappendMessage(message: Message): string {\n\t\treturn this.sessionManager.appendMessage(structuredClone(message));\n\t}\n\n\t/**\n\t * Commit one complete child-owned transcript without replaying its persisted prefix.\n\t *\n\t * Any mismatch is a divergence: appending would duplicate or reorder provider context, so the\n\t * caller must resolve it rather than silently branching this logical worker conversation.\n\t */\n\tcommitTranscript(transcript: readonly Message[]): number {\n\t\t// Compare against the append-only source transcript, not the provider projection: once a\n\t\t// compaction checkpoint exists, buildSessionContext() begins with its synthetic summary and is\n\t\t// intentionally no longer an exact prefix of the child loop's raw message sequence.\n\t\tconst persisted = this.getRawTranscript();\n\t\tif (transcript.length < persisted.length) {\n\t\t\tthrow new Error(\"Worker conversation transcript is shorter than its persisted raw context.\");\n\t\t}\n\t\tfor (let index = 0; index < persisted.length; index++) {\n\t\t\tif (!isDeepStrictEqual(persisted[index], transcript[index])) {\n\t\t\t\tthrow new Error(`Worker conversation transcript diverges from persisted context at message ${index}.`);\n\t\t\t}\n\t\t}\n\t\tfor (const message of transcript.slice(persisted.length)) {\n\t\t\tthis.appendMessage(message);\n\t\t}\n\t\treturn transcript.length - persisted.length;\n\t}\n\n\t/** Return an isolated copy suitable for durable orchestration/process-resume state. */\n\tgetResumeContext(): AgentResumeContext {\n\t\treturn cloneResumeContext(this.resumeContext);\n\t}\n}\n\nfunction assertRetentionPolicy(policy: WorkerConversationRetentionPolicy): void {\n\tif (!Number.isSafeInteger(policy.maxContextTokens) || policy.maxContextTokens < 2) {\n\t\tthrow new TypeError(\"Worker conversation maximum context tokens must be an integer of at least 2.\");\n\t}\n\tif (\n\t\t!Number.isSafeInteger(policy.keepRecentTokens) ||\n\t\tpolicy.keepRecentTokens < 1 ||\n\t\tpolicy.keepRecentTokens >= policy.maxContextTokens\n\t) {\n\t\tthrow new TypeError(\"Worker conversation retained context tokens must be an integer below the maximum.\");\n\t}\n}\n\nfunction assertApplicableCompactionResult(result: CompactionResult, preparation: CompactionPreparation): void {\n\tif (\n\t\t!result ||\n\t\ttypeof result.summary !== \"string\" ||\n\t\tresult.firstKeptEntryId !== preparation.firstKeptEntryId ||\n\t\tresult.tokensBefore !== preparation.tokensBefore\n\t) {\n\t\tthrow new Error(\"Worker verified compaction result does not match the prepared durable transcript.\");\n\t}\n}\n\n/** Creates and reopens canonical SessionManager transcripts for logical Pi worker lanes. */\nexport class WorkerConversationStore {\n\tcreate(options: CreateWorkerConversationOptions): WorkerConversation {\n\t\tconst resumeContext = expectedResumeContext(options);\n\t\tconst sessionFile = resumeContext.sessionFile!;\n\t\treturn withFileLockSync(sessionFile, () => this.createLocked(options, resumeContext));\n\t}\n\n\tprivate createLocked(\n\t\toptions: CreateWorkerConversationOptions,\n\t\tresumeContext: AgentResumeContext,\n\t): WorkerConversation {\n\t\tconst sessionDir = resumeContext.sessionDir!;\n\t\tconst sessionFile = resumeContext.sessionFile!;\n\t\tconst metadataFile = workerConversationMetadataFile(sessionFile);\n\t\tif (existsSync(sessionFile)) {\n\t\t\tthrow new Error(`Worker conversation already exists for logical agent '${options.logicalAgentId}'.`);\n\t\t}\n\n\t\t// SessionManager intentionally defers a brand-new header until its first assistant message.\n\t\t// A worker must be resumable after its first user/tool message, so atomically seed the exact\n\t\t// SessionManager header and immediately reopen it through SessionManager for all later writes.\n\t\tconst seed = SessionManager.create(resumeContext.cwd, options.agentDir, sessionDir, {\n\t\t\tid: resumeContext.sessionId,\n\t\t});\n\t\tconst header = seed.getHeader();\n\t\tif (!header) throw new Error(\"Unable to create a worker conversation session header.\");\n\t\tif (existsSync(metadataFile)) {\n\t\t\tassertExactConversationMetadata(metadataFile, resumeContext, options.logicalAgentId);\n\t\t} else {\n\t\t\t// Metadata lands first: a crash leaves no visible conversation until the ordinary session\n\t\t\t// header is atomically published, while a later ensure can validate the exact intended identity.\n\t\t\twriteFileAtomicSync(\n\t\t\t\tmetadataFile,\n\t\t\t\t`${JSON.stringify({ logicalAgentId: options.logicalAgentId, resumeContext })}\\n`,\n\t\t\t);\n\t\t}\n\t\twriteFileAtomicSync(sessionFile, `${JSON.stringify(header)}\\n`);\n\n\t\treturn this.open({\n\t\t\tagentDir: options.agentDir,\n\t\t\tresumeContext,\n\t\t\texpectedLogicalAgentId: options.logicalAgentId,\n\t\t});\n\t}\n\n\t/** Open the one canonical transcript or atomically create it with the exact same durable identity. */\n\tensure(options: CreateWorkerConversationOptions): WorkerConversation {\n\t\tconst resumeContext = expectedResumeContext(options);\n\t\tconst sessionFile = resumeContext.sessionFile!;\n\t\treturn withFileLockSync(sessionFile, () => {\n\t\t\tif (!existsSync(sessionFile)) return this.createLocked(options, resumeContext);\n\t\t\treturn this.open({\n\t\t\t\tagentDir: options.agentDir,\n\t\t\t\tresumeContext,\n\t\t\t\texpectedLogicalAgentId: options.logicalAgentId,\n\t\t\t});\n\t\t});\n\t}\n\n\topen(options: OpenWorkerConversationOptions): WorkerConversation {\n\t\tconst context = cloneResumeContext(options.resumeContext);\n\t\tif (context.provider !== \"pi\") throw new TypeError(\"Only Pi worker conversations can be reopened.\");\n\t\tif (!context.sessionFile)\n\t\t\tthrow new TypeError(\"A persisted worker session file is required to reopen a conversation.\");\n\t\tif (!context.cwd.trim()) throw new TypeError(\"A worker conversation working directory is required.\");\n\t\tassertValidSessionId(context.sessionId);\n\n\t\tconst sessionFile = assertWorkerConversationFile(options.agentDir, context.sessionFile, context.sessionId);\n\t\tif (!existsSync(sessionFile)) throw new Error(`Worker conversation session file does not exist: ${sessionFile}`);\n\t\tconst sessionDir = dirname(sessionFile);\n\t\tif (context.sessionDir && resolve(context.sessionDir) !== sessionDir) {\n\t\t\tthrow new Error(\n\t\t\t\t\"Worker conversation resume context has a session directory that disagrees with its session file.\",\n\t\t\t);\n\t\t}\n\n\t\tconst sessionManager = SessionManager.open(sessionFile, options.agentDir, sessionDir);\n\t\tif (sessionManager.getSessionId() !== context.sessionId) {\n\t\t\tthrow new Error(\"Worker conversation session file does not contain the requested durable session id.\");\n\t\t}\n\t\tif (sessionManager.getCwd() !== resolve(context.cwd)) {\n\t\t\tthrow new Error(\"Worker conversation resume context working directory disagrees with the persisted session.\");\n\t\t}\n\t\tassertExactConversationMetadata(\n\t\t\tworkerConversationMetadataFile(sessionFile),\n\t\t\tcontext,\n\t\t\toptions.expectedLogicalAgentId,\n\t\t);\n\n\t\treturn new WorkerConversation(sessionManager, {\n\t\t\t...context,\n\t\t\tsessionDir,\n\t\t\tsessionFile,\n\t\t\tcwd: sessionManager.getCwd(),\n\t\t});\n\t}\n}\n\nfunction joinWorkerSessionFile(sessionDir: string, sessionId: string): string {\n\treturn resolve(sessionDir, `${sessionId}.jsonl`);\n}\n\nfunction workerConversationMetadataFile(sessionFile: string): string {\n\treturn `${sessionFile}.worker.json`;\n}\n"]}

package/dist/core/delegation/worker-delegation-controller.d.ts

@@ -1,6 +1,6 @@
 import type { SessionManager } from "@caupulican/pi-agent-core/node";
 import type { Api, Model, Usage } from "@caupulican/pi-ai";
-import type { AgentSessionEvent, IsolatedCompletionOptions, IsolatedCompletionResult, WorkerDelegationRunOutcome } from "../agent-session.ts";
+import type { AgentSessionEvent, IsolatedCompletionOptions, IsolatedCompletionResult, WorkerDelegationRunOutcome } from "../agent-session-contracts.ts";
 import type { CapabilityEnvelope, WorkerClaim, WorkerRequest } from "../autonomy/contracts.ts";
 import type { LaneRecord, LaneTerminalStatus } from "../autonomy/lane-tracker.ts";
 import { type AutonomyTelemetryEvent } from "../autonomy/telemetry-events.ts";
@@ -8,7 +8,9 @@ import type { GoalState } from "../goals/goal-state.ts";
 import type { ModelRegistry } from "../model-registry.ts";
 import type { OrchestrationProfile } from "../orchestration/contracts.ts";
 import type { TaskRuntimeProjection } from "../orchestration/task-runtime.ts";
+import type { ResourceLoader } from "../resource-loader.ts";
 import type { SettingsManager } from "../settings-manager.ts";
+import type { WorkerAgentControlPort } from "./worker-agent-control.ts";
 import type { WorkerDelegationRequest } from "./worker-delegation-request.ts";
 import type { WorkerLifecycle } from "./worker-lifecycle.ts";
 import type { WorkerNotificationCoordinator } from "./worker-notification-coordinator.ts";
@@ -20,6 +22,7 @@ export interface WorkerDelegationControllerDeps {
     getAgentDir(): string;
     getSessionManager(): SessionManager;
     getSettingsManager(): SettingsManager;
+    getResourceLoader(): ResourceLoader;
     getActiveOrchestrationProfile?(): OrchestrationProfile | undefined;
     getModelRegistry(): ModelRegistry;
     isModelExhausted(model: Model<Api>): boolean;
@@ -53,16 +56,22 @@ export declare class WorkerDelegationController {
     private readonly workerAbort;
     private readonly lifecycle;
     private profileResolver;
-    private queueRecovered;
-    private recoveringDurableState;
-    private readonly verificationRecoveryFailures;
+    private readonly recovery;
     private readonly notifications;
     private readonly scheduler;
     private readonly laneAbortControllers;
+    /** Sole logical-agent control/mailbox owner; execution only calls its narrow delivery hooks. */
+    private readonly agentControl;
     private readonly publishedTerminalAttemptIds;
+    private readonly conversations;
+    private readonly writeReservations;
     private readonly inFlightLedgers;
     constructor(deps: WorkerDelegationControllerDeps, notifications: WorkerNotificationCoordinator, lifecycle: WorkerLifecycle);
     private safeWarn;
+    /** Narrow model-facing control port. It owns control state; this controller only composes it. */
+    getAgentControl(): WorkerAgentControlPort;
+    /** The coordinator's process identity is also the durable execution lease owner. */
+    getAgentControlProcessOwnerId(): string;
     recordTerminal(record: LaneRecord): void;
     getRecords(): LaneRecord[];
     /** Process-local worker records for the shared terminal notifier; never triggers durable recovery. */
@@ -76,7 +85,7 @@ export declare class WorkerDelegationController {
     /** Reconcile the session goal into an already-loaded worker runtime without defeating lazy UAC. */
     synchronizeGoalState(goal: GoalState): void;
     private publishGoalTerminalRecords;
-    private recoverDurableQueue;
+    private dispatchRecoveredVerification;
     private laneCapabilityProfile;
     getProfileCatalog(): Array<{
         profileId: string;
@@ -89,6 +98,13 @@ export declare class WorkerDelegationController {
     private resolveWorkerAdmission;
     private buildVerifierRequest;
     private publishTerminalRecord;
+    /**
+     * A pre-execution denial still owns a prepared durable lane. Publish its terminal projection at
+     * this boundary: immediate callers have no scheduler promise to observe and must not wait for a
+     * future recovery read to receive the handoff. Repeated late cancellation paths are inert via
+     * the attempt-id publication fence above.
+     */
+    private cancelAndPublish;
     private hasWorkerCapacity;
     private workerDispatchAdmission;
     private buildWorkerExecutionPlan;