@caupulican/pi-adaptative 0.86.2 → 0.86.5

package/dist/core/delegation/worker-context-fork-store.js

@@ -0,0 +1,437 @@
+import { createHash } from "node:crypto";
+import { unlinkSync } from "node:fs";
+import { basename, join } from "node:path";
+import { workerContextForkFile, workerContextForksDir } from "../agent-paths.js";
+import { MAX_ORCHESTRATION_IDENTIFIER_LENGTH, MAX_ORCHESTRATION_MODEL_ID_LENGTH, MAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH, } from "../orchestration/contracts.js";
+import { MAX_WORKER_CONTEXT_FORK_API_LENGTH, MAX_WORKER_CONTEXT_FORK_BYTES, MAX_WORKER_CONTEXT_FORK_MESSAGES, MAX_WORKER_CONTEXT_FORK_TEXT_BLOCKS, normalizeWorkerContextForkReference, WORKER_CONTEXT_FORK_REFERENCE_SCHEMA_VERSION as SCHEMA_VERSION, } from "../orchestration/worker-context-fork-reference.js";
+import { withFileLockSync, writeFileAtomicSync } from "../util/atomic-file.js";
+import { readBoundedDirectoryNamesSync, readBoundedTextFileSync } from "../util/bounded-file.js";
+import { requireBoundedTrimmedText } from "../util/bounded-value.js";
+import { DEFAULT_WORKER_FLEET_LIMITS } from "./worker-fleet-limits.js";
+const MAX_PATH_CHARS = 4096;
+const MAX_FILE_BYTES = MAX_WORKER_CONTEXT_FORK_BYTES + 16 * 1024;
+const MAX_DIRECTORY_ENTRIES = DEFAULT_WORKER_FLEET_LIMITS.maxAgentsPerSession + 32;
+const SNAPSHOT_FILE_PATTERN = /^([a-f0-9]{64})-([a-f0-9]{64})\.json$/;
+export const MAX_RETAINED_WORKER_CONTEXT_FORK_SNAPSHOTS = DEFAULT_WORKER_FLEET_LIMITS.maxAgentsPerSession;
+/** Stable failure classification for controller admission and recovery wiring. */
+export class WorkerContextForkStoreError extends Error {
+    constructor(code, message, cause) {
+        super(message, cause === undefined ? undefined : { cause });
+        this.name = "WorkerContextForkStoreError";
+        this.code = code;
+    }
+}
+class DurableWorkerContextForkReferenceIndex {
+    constructor(value) {
+        this.keysByIdentity = new Map();
+        if (!Array.isArray(value))
+            throw new TypeError("Durable worker context fork references must be an array.");
+        for (const candidate of value) {
+            const reference = normalizeWorkerContextForkReference(candidate);
+            const keys = this.keysByIdentity.get(reference.identityDigest) ?? new Set();
+            keys.add(referenceKey(reference));
+            this.keysByIdentity.set(reference.identityDigest, keys);
+        }
+    }
+    hasIdentity(identityDigest) {
+        return this.keysByIdentity.has(identityDigest);
+    }
+    hasConflictingIdentity(reference) {
+        const keys = this.keysByIdentity.get(reference.identityDigest);
+        return keys !== undefined && (keys.size !== 1 || !keys.has(referenceKey(reference)));
+    }
+}
+function exactObject(value, keys, label) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError(`${label} must be an object.`);
+    const record = value;
+    const actualKeys = Object.keys(record);
+    if (actualKeys.length !== keys.length || keys.some((key) => !Object.hasOwn(record, key))) {
+        throw new TypeError(`${label} has an unsupported shape.`);
+    }
+    return record;
+}
+function boundedString(value, maximum, label) {
+    if (typeof value !== "string" || !value.trim() || value.length > maximum) {
+        throw new TypeError(`${label} must be non-empty and no longer than ${maximum} characters.`);
+    }
+    return value;
+}
+function safeTimestamp(value, label) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) {
+        throw new TypeError(`${label} must be a non-negative safe integer.`);
+    }
+    return value;
+}
+function nonNegativeFinite(value, label) {
+    if (typeof value !== "number" || !Number.isFinite(value) || value < 0) {
+        throw new TypeError(`${label} must be a non-negative finite number.`);
+    }
+    return value;
+}
+function nonNegativeTokenCount(value, label) {
+    const normalized = nonNegativeFinite(value, label);
+    if (!Number.isSafeInteger(normalized))
+        throw new TypeError(`${label} must be a safe integer.`);
+    return normalized;
+}
+function normalizeUsage(value) {
+    const usage = exactObject(value, ["input", "output", "cacheRead", "cacheWrite", "totalTokens", "cost"], "Usage");
+    const cost = exactObject(usage.cost, ["input", "output", "cacheRead", "cacheWrite", "total"], "Usage cost");
+    return {
+        input: nonNegativeTokenCount(usage.input, "Usage input"),
+        output: nonNegativeTokenCount(usage.output, "Usage output"),
+        cacheRead: nonNegativeTokenCount(usage.cacheRead, "Usage cache read"),
+        cacheWrite: nonNegativeTokenCount(usage.cacheWrite, "Usage cache write"),
+        totalTokens: nonNegativeTokenCount(usage.totalTokens, "Usage total tokens"),
+        cost: {
+            input: nonNegativeFinite(cost.input, "Usage input cost"),
+            output: nonNegativeFinite(cost.output, "Usage output cost"),
+            cacheRead: nonNegativeFinite(cost.cacheRead, "Usage cache-read cost"),
+            cacheWrite: nonNegativeFinite(cost.cacheWrite, "Usage cache-write cost"),
+            total: nonNegativeFinite(cost.total, "Usage total cost"),
+        },
+    };
+}
+function normalizeTextBlock(value, counter) {
+    if (counter.count >= MAX_WORKER_CONTEXT_FORK_TEXT_BLOCKS) {
+        throw new TypeError(`A worker context fork may contain at most ${MAX_WORKER_CONTEXT_FORK_TEXT_BLOCKS} text blocks.`);
+    }
+    const block = exactObject(value, ["type", "text"], "Worker context fork text block");
+    if (block.type !== "text")
+        throw new TypeError("Worker context forks may contain text blocks only.");
+    const text = boundedString(block.text, MAX_WORKER_CONTEXT_FORK_BYTES, "Worker context fork text");
+    counter.count += 1;
+    return { type: "text", text };
+}
+function normalizeUserMessage(value, counter) {
+    const message = exactObject(value, ["role", "content", "timestamp"], "Worker context fork user message");
+    if (message.role !== "user")
+        throw new TypeError("Worker context fork user role is invalid.");
+    let content;
+    if (typeof message.content === "string") {
+        content = boundedString(message.content, MAX_WORKER_CONTEXT_FORK_BYTES, "Worker context fork user content");
+        counter.count += 1;
+        if (counter.count > MAX_WORKER_CONTEXT_FORK_TEXT_BLOCKS) {
+            throw new TypeError(`A worker context fork may contain at most ${MAX_WORKER_CONTEXT_FORK_TEXT_BLOCKS} text blocks.`);
+        }
+    }
+    else {
+        if (!Array.isArray(message.content) || message.content.length === 0) {
+            throw new TypeError("Worker context fork user content must contain text.");
+        }
+        content = message.content.map((block) => normalizeTextBlock(block, counter));
+    }
+    return { role: "user", content, timestamp: safeTimestamp(message.timestamp, "User timestamp") };
+}
+function normalizeAssistantMessage(value, counter) {
+    const message = exactObject(value, ["role", "content", "api", "provider", "model", "usage", "stopReason", "timestamp"], "Worker context fork assistant message");
+    if (message.role !== "assistant")
+        throw new TypeError("Worker context fork assistant role is invalid.");
+    if (!Array.isArray(message.content) || message.content.length === 0) {
+        throw new TypeError("Worker context fork assistant content must contain text.");
+    }
+    if (message.stopReason !== "stop") {
+        throw new TypeError("Worker context forks may contain complete assistant messages only.");
+    }
+    return {
+        role: "assistant",
+        content: message.content.map((block) => normalizeTextBlock(block, counter)),
+        api: boundedString(message.api, MAX_WORKER_CONTEXT_FORK_API_LENGTH, "Assistant API"),
+        provider: boundedString(message.provider, MAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH, "Assistant provider"),
+        model: boundedString(message.model, MAX_ORCHESTRATION_MODEL_ID_LENGTH, "Assistant model"),
+        usage: normalizeUsage(message.usage),
+        stopReason: "stop",
+        timestamp: safeTimestamp(message.timestamp, "Assistant timestamp"),
+    };
+}
+function normalizeMessages(value) {
+    if (!Array.isArray(value) || value.length > MAX_WORKER_CONTEXT_FORK_MESSAGES) {
+        throw new TypeError(`A worker context fork may contain at most ${MAX_WORKER_CONTEXT_FORK_MESSAGES} messages.`);
+    }
+    const messages = [];
+    const counter = { count: 0 };
+    let hasUser = false;
+    for (const candidate of value) {
+        if (!candidate || typeof candidate !== "object" || Array.isArray(candidate)) {
+            throw new TypeError("Worker context fork message must be an object.");
+        }
+        const role = Object.getOwnPropertyDescriptor(candidate, "role");
+        const roleValue = role && "value" in role ? role.value : undefined;
+        if (roleValue === "user") {
+            messages.push(normalizeUserMessage(candidate, counter));
+            hasUser = true;
+            continue;
+        }
+        if (roleValue === "assistant") {
+            if (!hasUser)
+                throw new TypeError("A worker context fork cannot begin with an assistant message.");
+            messages.push(normalizeAssistantMessage(candidate, counter));
+            continue;
+        }
+        throw new TypeError("Worker context forks may contain user and assistant messages only.");
+    }
+    const serialized = JSON.stringify(messages);
+    const byteLength = Buffer.byteLength(serialized, "utf-8");
+    if (byteLength > MAX_WORKER_CONTEXT_FORK_BYTES) {
+        throw new TypeError(`A worker context fork may contain at most ${MAX_WORKER_CONTEXT_FORK_BYTES} bytes.`);
+    }
+    return { messages, serialized, byteLength };
+}
+function sha256(domain, value) {
+    return createHash("sha256").update(domain).update("\0").update(value).digest("hex");
+}
+function identityDigest(parentSessionId, logicalAgentId) {
+    return sha256("pi-worker-context-fork-identity-v1", `${parentSessionId}\0${logicalAgentId}`);
+}
+function contentDigest(serializedMessages) {
+    return sha256("pi-worker-context-fork-content-v1", serializedMessages);
+}
+function referenceKey(reference) {
+    return JSON.stringify([
+        reference.schemaVersion,
+        reference.identityDigest,
+        reference.contentDigest,
+        reference.messageCount,
+        reference.messageBytes,
+    ]);
+}
+function canonicalEnvelope(parentSessionId, logicalAgentId, reference, messages) {
+    return {
+        schemaVersion: SCHEMA_VERSION,
+        parentSessionId,
+        logicalAgentId,
+        identityDigest: reference.identityDigest,
+        contentDigest: reference.contentDigest,
+        messageCount: reference.messageCount,
+        messageBytes: reference.messageBytes,
+        messages,
+    };
+}
+function serializeEnvelope(envelope) {
+    const serialized = `${JSON.stringify(envelope)}\n`;
+    if (Buffer.byteLength(serialized, "utf-8") > MAX_FILE_BYTES) {
+        throw new TypeError("Worker context fork snapshot exceeds its durable byte limit.");
+    }
+    return serialized;
+}
+function persistedIdentity(value, label) {
+    if (typeof value !== "string")
+        throw new TypeError(`${label} is invalid.`);
+    const normalized = requireBoundedTrimmedText(value, MAX_ORCHESTRATION_IDENTIFIER_LENGTH, label);
+    if (normalized !== value)
+        throw new TypeError(`${label} is not canonical.`);
+    return normalized;
+}
+function parseEnvelope(raw, expectedParentSessionId, expectedLogicalAgentId, expectedReference) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (error) {
+        throw new WorkerContextForkStoreError("snapshot_corrupt", "Worker context fork snapshot is not valid JSON.", error);
+    }
+    try {
+        const envelope = exactObject(parsed, [
+            "schemaVersion",
+            "parentSessionId",
+            "logicalAgentId",
+            "identityDigest",
+            "contentDigest",
+            "messageCount",
+            "messageBytes",
+            "messages",
+        ], "Worker context fork snapshot");
+        if (envelope.schemaVersion !== SCHEMA_VERSION) {
+            throw new TypeError("Worker context fork snapshot schema is unsupported.");
+        }
+        const parentSessionId = persistedIdentity(envelope.parentSessionId, "Snapshot parent session id");
+        const logicalAgentId = persistedIdentity(envelope.logicalAgentId, "Snapshot logical agent id");
+        if (parentSessionId !== expectedParentSessionId || logicalAgentId !== expectedLogicalAgentId) {
+            throw new WorkerContextForkStoreError("identity_conflict", "Worker context fork snapshot identity conflicts with the requested logical agent.");
+        }
+        const messages = normalizeMessages(envelope.messages);
+        const actualReference = {
+            schemaVersion: SCHEMA_VERSION,
+            identityDigest: identityDigest(parentSessionId, logicalAgentId),
+            contentDigest: contentDigest(messages.serialized),
+            messageCount: messages.messages.length,
+            messageBytes: messages.byteLength,
+        };
+        if (envelope.identityDigest !== actualReference.identityDigest ||
+            envelope.contentDigest !== actualReference.contentDigest ||
+            envelope.messageCount !== actualReference.messageCount ||
+            envelope.messageBytes !== actualReference.messageBytes ||
+            (expectedReference !== undefined &&
+                (expectedReference.identityDigest !== actualReference.identityDigest ||
+                    expectedReference.contentDigest !== actualReference.contentDigest ||
+                    expectedReference.messageCount !== actualReference.messageCount ||
+                    expectedReference.messageBytes !== actualReference.messageBytes))) {
+            throw new TypeError("Worker context fork snapshot digest or bounds metadata is invalid.");
+        }
+        const canonical = canonicalEnvelope(parentSessionId, logicalAgentId, actualReference, messages.messages);
+        if (raw !== serializeEnvelope(canonical)) {
+            throw new TypeError("Worker context fork snapshot is not in canonical form.");
+        }
+        return { ...actualReference, parentSessionId, logicalAgentId, messages: messages.messages };
+    }
+    catch (error) {
+        if (error instanceof WorkerContextForkStoreError)
+            throw error;
+        throw new WorkerContextForkStoreError("snapshot_corrupt", "Worker context fork snapshot failed schema, digest, or bounds validation.", error);
+    }
+}
+function errorCode(error) {
+    if (!error || typeof error !== "object")
+        return undefined;
+    const descriptor = Object.getOwnPropertyDescriptor(error, "code");
+    return descriptor && "value" in descriptor && typeof descriptor.value === "string" ? descriptor.value : undefined;
+}
+/**
+ * Immutable, per-session store for the exact sanitized message snapshot inherited by a new logical
+ * worker. Capture is synchronous so the caller can commit the snapshot before admitting dispatch.
+ * Identity is deliberately `(parentSessionId, logicalAgentId)`: persistent-agent follow-up tasks
+ * continue the existing transcript and cannot install a second birth context.
+ */
+export class WorkerContextForkStore {
+    constructor(options) {
+        this.agentDir = requireBoundedTrimmedText(options.agentDir, MAX_PATH_CHARS, "Agent directory");
+        this.parentSessionId = requireBoundedTrimmedText(options.parentSessionId, MAX_ORCHESTRATION_IDENTIFIER_LENGTH, "Parent session id");
+        this.directory = workerContextForksDir(this.agentDir, this.parentSessionId);
+        this.lockFile = join(this.directory, "capture-index");
+    }
+    capture(request) {
+        const prepared = this.prepareCapture(request);
+        return withFileLockSync(this.lockFile, () => this.captureLocked(prepared).reference);
+    }
+    /**
+     * Hold the capture lock across orphan classification, capture, and synchronous durable prepare.
+     * A callback failure removes only a file created by this invocation, and only after a refreshed
+     * lifecycle reference read still proves the logical identity unbound. A process crash can leave
+     * an orphan, which the next transaction may reclaim under the same proof and lock.
+     */
+    captureAndPrepare(request) {
+        const prepared = this.prepareCapture(request);
+        return withFileLockSync(this.lockFile, () => {
+            if (request.isLogicalIdentityClaimed?.()) {
+                throw new WorkerContextForkStoreError("identity_claimed", "Logical worker context identity already owns a durable attempt.");
+            }
+            const referenced = new DurableWorkerContextForkReferenceIndex(request.readDurableReferences());
+            const captured = this.captureLocked(prepared, referenced);
+            try {
+                const value = request.prepare(structuredClone(captured.reference));
+                return { reference: structuredClone(captured.reference), value };
+            }
+            catch (error) {
+                if (captured.created)
+                    this.rollbackCreatedSnapshot(prepared, request.readDurableReferences);
+                throw error;
+            }
+        });
+    }
+    open(request) {
+        const logicalAgentId = requireBoundedTrimmedText(request.logicalAgentId, MAX_ORCHESTRATION_IDENTIFIER_LENGTH, "Logical agent id");
+        let reference;
+        try {
+            reference = normalizeWorkerContextForkReference(request.reference);
+        }
+        catch (error) {
+            throw new WorkerContextForkStoreError("snapshot_corrupt", "Worker context fork reference failed schema or bounds validation.", error);
+        }
+        if (reference.identityDigest !== identityDigest(this.parentSessionId, logicalAgentId)) {
+            throw new WorkerContextForkStoreError("identity_conflict", "Worker context fork reference conflicts with the requested logical agent.");
+        }
+        const filePath = workerContextForkFile(this.agentDir, this.parentSessionId, reference.identityDigest, reference.contentDigest);
+        return this.readSnapshot(filePath, logicalAgentId, reference);
+    }
+    prepareCapture(request) {
+        const logicalAgentId = requireBoundedTrimmedText(request.logicalAgentId, MAX_ORCHESTRATION_IDENTIFIER_LENGTH, "Logical agent id");
+        const normalized = normalizeMessages(request.messages);
+        const reference = {
+            schemaVersion: SCHEMA_VERSION,
+            identityDigest: identityDigest(this.parentSessionId, logicalAgentId),
+            contentDigest: contentDigest(normalized.serialized),
+            messageCount: normalized.messages.length,
+            messageBytes: normalized.byteLength,
+        };
+        const targetFile = workerContextForkFile(this.agentDir, this.parentSessionId, reference.identityDigest, reference.contentDigest);
+        const targetName = basename(targetFile);
+        const serialized = serializeEnvelope(canonicalEnvelope(this.parentSessionId, logicalAgentId, reference, normalized.messages));
+        return { logicalAgentId, normalized, reference, targetFile, targetName, serialized };
+    }
+    captureLocked(prepared, referenced) {
+        let names;
+        try {
+            names = readBoundedDirectoryNamesSync(this.directory, MAX_DIRECTORY_ENTRIES, "Worker context fork snapshot directory");
+        }
+        catch (error) {
+            throw new WorkerContextForkStoreError("capacity_reached", "Worker context fork snapshot directory exceeds its bounded retention capacity.", error);
+        }
+        const snapshotNames = names.filter((name) => SNAPSHOT_FILE_PATTERN.test(name));
+        const identityPrefix = `${prepared.reference.identityDigest}-`;
+        const identityMatches = snapshotNames.filter((name) => name.startsWith(identityPrefix));
+        if (identityMatches.length > 1) {
+            throw new WorkerContextForkStoreError("identity_conflict", "Logical worker context identity has multiple durable snapshots.");
+        }
+        const existingName = identityMatches[0];
+        if (existingName === prepared.targetName) {
+            if (referenced?.hasConflictingIdentity(prepared.reference)) {
+                throw new WorkerContextForkStoreError("identity_conflict", "Logical worker context identity conflicts with its durable lifecycle reference.");
+            }
+            const existing = this.readSnapshot(prepared.targetFile, prepared.logicalAgentId, prepared.reference);
+            if (JSON.stringify(existing.messages) !== prepared.normalized.serialized) {
+                throw new WorkerContextForkStoreError("identity_conflict", "Logical worker context identity is bound to different snapshot content.");
+            }
+            return { reference: prepared.reference, created: false };
+        }
+        let retainedSnapshotCount = snapshotNames.length;
+        if (existingName !== undefined) {
+            if (!referenced || referenced.hasIdentity(prepared.reference.identityDigest)) {
+                throw new WorkerContextForkStoreError("identity_conflict", "Logical worker context identity is already bound to a different snapshot.");
+            }
+            const existingFile = join(this.directory, existingName);
+            const existing = this.readSnapshot(existingFile, prepared.logicalAgentId);
+            const canonicalExistingName = `${existing.identityDigest}-${existing.contentDigest}.json`;
+            if (existingName !== canonicalExistingName) {
+                throw new WorkerContextForkStoreError("snapshot_corrupt", "Worker context fork snapshot filename conflicts with its canonical content.");
+            }
+            unlinkSync(existingFile);
+            retainedSnapshotCount -= 1;
+        }
+        else if (referenced?.hasIdentity(prepared.reference.identityDigest)) {
+            throw new WorkerContextForkStoreError("identity_conflict", "Logical worker context identity has a durable reference but no exact snapshot replay.");
+        }
+        if (retainedSnapshotCount >= MAX_RETAINED_WORKER_CONTEXT_FORK_SNAPSHOTS) {
+            throw new WorkerContextForkStoreError("capacity_reached", `Worker context fork retention is capped at ${MAX_RETAINED_WORKER_CONTEXT_FORK_SNAPSHOTS} snapshots.`);
+        }
+        writeFileAtomicSync(prepared.targetFile, prepared.serialized, { mode: 0o600 });
+        this.readSnapshot(prepared.targetFile, prepared.logicalAgentId, prepared.reference);
+        return { reference: prepared.reference, created: true };
+    }
+    rollbackCreatedSnapshot(prepared, readDurableReferences) {
+        try {
+            const refreshed = new DurableWorkerContextForkReferenceIndex(readDurableReferences());
+            if (refreshed.hasIdentity(prepared.reference.identityDigest))
+                return;
+            unlinkSync(prepared.targetFile);
+        }
+        catch {
+            // Preserve the snapshot on an ambiguous refresh or cleanup failure. The next locked
+            // transaction can reclassify it from a fresh durable lifecycle projection.
+        }
+    }
+    readSnapshot(filePath, logicalAgentId, reference) {
+        let raw;
+        try {
+            raw = readBoundedTextFileSync(filePath, MAX_FILE_BYTES, "Worker context fork snapshot");
+        }
+        catch (error) {
+            if (errorCode(error) === "ENOENT") {
+                throw new WorkerContextForkStoreError("snapshot_missing", "Worker context fork snapshot is missing.", error);
+            }
+            throw new WorkerContextForkStoreError("snapshot_corrupt", "Worker context fork snapshot cannot be read within its durable bounds.", error);
+        }
+        return parseEnvelope(raw, this.parentSessionId, logicalAgentId, reference);
+    }
+}
+//# sourceMappingURL=worker-context-fork-store.js.map

package/dist/core/delegation/worker-context-fork-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-context-fork-store.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-context-fork-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,EACN,mCAAmC,EACnC,iCAAiC,EACjC,uCAAuC,GACvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,kCAAkC,EAClC,6BAA6B,EAC7B,gCAAgC,EAChC,mCAAmC,EACnC,mCAAmC,EACnC,4CAA4C,IAAI,cAAc,GAE9D,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAErE,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAEvE,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,6BAA6B,GAAG,EAAE,GAAG,IAAI,CAAC;AACjE,MAAM,qBAAqB,GAAG,2BAA2B,CAAC,mBAAmB,GAAG,EAAE,CAAC;AACnF,MAAM,qBAAqB,GAAG,uCAAuC,CAAC;AAEtE,MAAM,CAAC,MAAM,0CAA0C,GAAG,2BAA2B,CAAC,mBAAmB,CAAC;AAS1G,kFAAkF;AAClF,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAGrD,YAAY,IAAqC,EAAE,OAAe,EAAE,KAAe;QAClF,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC;CACD;AA2DD,MAAM,sCAAsC;IAG3C,YAAY,KAAc;QAFT,mBAAc,GAAG,IAAI,GAAG,EAAuB,CAAC;QAGhE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,0DAA0D,CAAC,CAAC;QAC3G,KAAK,MAAM,SAAS,IAAI,KAA2B,EAAE,CAAC;YACrD,MAAM,SAAS,GAAG,mCAAmC,CAAC,SAAS,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YACpF,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IAED,WAAW,CAAC,cAAsB;QACjC,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAChD,CAAC;IAED,sBAAsB,CAAC,SAAqC;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC/D,OAAO,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;CACD;AAiBD,SAAS,WAAW,CAAC,KAAc,EAAE,IAAuB,EAAE,KAAa;IAC1E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,OAAe,EAAE,KAAa;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAC1E,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,yCAAyC,OAAO,cAAc,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,uCAAuC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa;IAC3D,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IAC/F,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACjH,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;IAC5G,OAAO;QACN,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC;QACxD,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC;QAC3D,SAAS,EAAE,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;QACrE,UAAU,EAAE,qBAAqB,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC;QACxE,WAAW,EAAE,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,CAAC;QAC3E,IAAI,EAAE;YACL,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC;YACxD,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC;YAC3D,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC;YACrE,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC;YACxE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC;SACxD;KACD,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,OAAyB;IACpE,IAAI,OAAO,CAAC,KAAK,IAAI,mCAAmC,EAAE,CAAC;QAC1D,MAAM,IAAI,SAAS,CAClB,6CAA6C,mCAAmC,eAAe,CAC/F,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;IACrG,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,6BAA6B,EAAE,0BAA0B,CAAC,CAAC;IAClG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;IACnB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,OAAyB;IACtE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,kCAAkC,CAAC,CAAC;IACzG,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IAC9F,IAAI,OAA+B,CAAC;IACpC,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,6BAA6B,EAAE,kCAAkC,CAAC,CAAC;QAC5G,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QACnB,IAAI,OAAO,CAAC,KAAK,GAAG,mCAAmC,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAClB,6CAA6C,mCAAmC,eAAe,CAC/F,CAAC;QACH,CAAC;IACF,CAAC;SAAM,CAAC;QACP,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc,EAAE,OAAyB;IAC3E,MAAM,OAAO,GAAG,WAAW,CAC1B,KAAK,EACL,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,EACnF,uCAAuC,CACvC,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACxG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,0DAA0D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO;QACN,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3E,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,kCAAkC,EAAE,eAAe,CAAC;QACpF,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,uCAAuC,EAAE,oBAAoB,CAAC;QACxG,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,iCAAiC,EAAE,iBAAiB,CAAC;QACzF,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;QACpC,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,qBAAqB,CAAC;KAClE,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,gCAAgC,EAAE,CAAC;QAC9E,MAAM,IAAI,SAAS,CAAC,6CAA6C,gCAAgC,YAAY,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,QAAQ,GAAkC,EAAE,CAAC;IACnD,MAAM,OAAO,GAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC/C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,SAAS,IAAI,KAA2B,EAAE,CAAC;QACrD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,IAAI,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YACxD,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACV,CAAC;QACD,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;YACnG,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,SAAS;QACV,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,UAAU,GAAG,6BAA6B,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,6CAA6C,6BAA6B,SAAS,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,KAAa;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,cAAc,CAAC,eAAuB,EAAE,cAAsB;IACtE,OAAO,MAAM,CAAC,oCAAoC,EAAE,GAAG,eAAe,KAAK,cAAc,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,aAAa,CAAC,kBAA0B;IAChD,OAAO,MAAM,CAAC,mCAAmC,EAAE,kBAAkB,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAC,SAAqC;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC;QACrB,SAAS,CAAC,aAAa;QACvB,SAAS,CAAC,cAAc;QACxB,SAAS,CAAC,aAAa;QACvB,SAAS,CAAC,YAAY;QACtB,SAAS,CAAC,YAAY;KACtB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACzB,eAAuB,EACvB,cAAsB,EACtB,SAAqC,EACrC,QAAuC;IAEvC,OAAO;QACN,aAAa,EAAE,cAAc;QAC7B,eAAe;QACf,cAAc;QACd,cAAc,EAAE,SAAS,CAAC,cAAc;QACxC,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,QAAQ;KACR,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAoC;IAC9D,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;IACnD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,cAAc,EAAE,CAAC;QAC7D,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,EAAE,mCAAmC,EAAE,KAAK,CAAC,CAAC;IAChG,IAAI,UAAU,KAAK,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC5E,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CACrB,GAAW,EACX,uBAA+B,EAC/B,sBAA8B,EAC9B,iBAA8C;IAE9C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,2BAA2B,CACpC,kBAAkB,EAClB,iDAAiD,EACjD,KAAK,CACL,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,WAAW,CAC3B,MAAM,EACN;YACC,eAAe;YACf,iBAAiB;YACjB,gBAAgB;YAChB,gBAAgB;YAChB,eAAe;YACf,cAAc;YACd,cAAc;YACd,UAAU;SACV,EACD,8BAA8B,CAC9B,CAAC;QACF,IAAI,QAAQ,CAAC,aAAa,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,eAAe,GAAG,iBAAiB,CAAC,QAAQ,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;QAClG,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;QAC/F,IAAI,eAAe,KAAK,uBAAuB,IAAI,cAAc,KAAK,sBAAsB,EAAE,CAAC;YAC9F,MAAM,IAAI,2BAA2B,CACpC,mBAAmB,EACnB,mFAAmF,CACnF,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,eAAe,GAA+B;YACnD,aAAa,EAAE,cAAc;YAC7B,cAAc,EAAE,cAAc,CAAC,eAAe,EAAE,cAAc,CAAC;YAC/D,aAAa,EAAE,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjD,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM;YACtC,YAAY,EAAE,QAAQ,CAAC,UAAU;SACjC,CAAC;QACF,IACC,QAAQ,CAAC,cAAc,KAAK,eAAe,CAAC,cAAc;YAC1D,QAAQ,CAAC,aAAa,KAAK,eAAe,CAAC,aAAa;YACxD,QAAQ,CAAC,YAAY,KAAK,eAAe,CAAC,YAAY;YACtD,QAAQ,CAAC,YAAY,KAAK,eAAe,CAAC,YAAY;YACtD,CAAC,iBAAiB,KAAK,SAAS;gBAC/B,CAAC,iBAAiB,CAAC,cAAc,KAAK,eAAe,CAAC,cAAc;oBACnE,iBAAiB,CAAC,aAAa,KAAK,eAAe,CAAC,aAAa;oBACjE,iBAAiB,CAAC,YAAY,KAAK,eAAe,CAAC,YAAY;oBAC/D,iBAAiB,CAAC,YAAY,KAAK,eAAe,CAAC,YAAY,CAAC,CAAC,EAClE,CAAC;YACF,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzG,IAAI,GAAG,KAAK,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,EAAE,GAAG,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,2BAA2B;YAAE,MAAM,KAAK,CAAC;QAC9D,MAAM,IAAI,2BAA2B,CACpC,kBAAkB,EAClB,2EAA2E,EAC3E,KAAK,CACL,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClE,OAAO,UAAU,IAAI,OAAO,IAAI,UAAU,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACnH,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IAMlC,YAAY,OAAsD;QACjE,IAAI,CAAC,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;QAC/F,IAAI,CAAC,eAAe,GAAG,yBAAyB,CAC/C,OAAO,CAAC,eAAe,EACvB,mCAAmC,EACnC,mBAAmB,CACnB,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,CAAC,OAAwC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAChB,OAAqD;QAErD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC3C,IAAI,OAAO,CAAC,wBAAwB,EAAE,EAAE,EAAE,CAAC;gBAC1C,MAAM,IAAI,2BAA2B,CACpC,kBAAkB,EAClB,iEAAiE,CACjE,CAAC;YACH,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,sCAAsC,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;YAC/F,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACJ,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;gBACnE,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,QAAQ,CAAC,OAAO;oBAAE,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;gBAC5F,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAqC;QACzC,MAAM,cAAc,GAAG,yBAAyB,CAC/C,OAAO,CAAC,cAAc,EACtB,mCAAmC,EACnC,kBAAkB,CAClB,CAAC;QACF,IAAI,SAAqC,CAAC;QAC1C,IAAI,CAAC;YACJ,SAAS,GAAG,mCAAmC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,2BAA2B,CACpC,kBAAkB,EAClB,mEAAmE,EACnE,KAAK,CACL,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,cAAc,KAAK,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,2BAA2B,CACpC,mBAAmB,EACnB,2EAA2E,CAC3E,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,qBAAqB,CACrC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,eAAe,EACpB,SAAS,CAAC,cAAc,EACxB,SAAS,CAAC,aAAa,CACvB,CAAC;QACF,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAC/D,CAAC;IAEO,cAAc,CAAC,OAAwC;QAC9D,MAAM,cAAc,GAAG,yBAAyB,CAC/C,OAAO,CAAC,cAAc,EACtB,mCAAmC,EACnC,kBAAkB,CAClB,CAAC;QACF,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,SAAS,GAA+B;YAC7C,aAAa,EAAE,cAAc;YAC7B,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC;YACpE,aAAa,EAAE,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC;YACnD,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;YACxC,YAAY,EAAE,UAAU,CAAC,UAAU;SACnC,CAAC;QACF,MAAM,UAAU,GAAG,qBAAqB,CACvC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,eAAe,EACpB,SAAS,CAAC,cAAc,EACxB,SAAS,CAAC,aAAa,CACvB,CAAC;QACF,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,iBAAiB,CACnC,iBAAiB,CAAC,IAAI,CAAC,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CACvF,CAAC;QACF,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACtF,CAAC;IAEO,aAAa,CACpB,QAA0C,EAC1C,UAAmD;QAEnD,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACJ,KAAK,GAAG,6BAA6B,CACpC,IAAI,CAAC,SAAS,EACd,qBAAqB,EACrB,wCAAwC,CACxC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,2BAA2B,CACpC,kBAAkB,EAClB,gFAAgF,EAChF,KAAK,CACL,CAAC;QACH,CAAC;QACD,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,MAAM,cAAc,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC;QAC/D,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QACxF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,2BAA2B,CACpC,mBAAmB,EACnB,iEAAiE,CACjE,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,YAAY,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,UAAU,EAAE,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,2BAA2B,CACpC,mBAAmB,EACnB,iFAAiF,CACjF,CAAC;YACH,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YACrG,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC1E,MAAM,IAAI,2BAA2B,CACpC,mBAAmB,EACnB,yEAAyE,CACzE,CAAC;YACH,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC1D,CAAC;QAED,IAAI,qBAAqB,GAAG,aAAa,CAAC,MAAM,CAAC;QACjD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC9E,MAAM,IAAI,2BAA2B,CACpC,mBAAmB,EACnB,2EAA2E,CAC3E,CAAC;YACH,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;YAC1E,MAAM,qBAAqB,GAAG,GAAG,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,aAAa,OAAO,CAAC;YAC1F,IAAI,YAAY,KAAK,qBAAqB,EAAE,CAAC;gBAC5C,MAAM,IAAI,2BAA2B,CACpC,kBAAkB,EAClB,6EAA6E,CAC7E,CAAC;YACH,CAAC;YACD,UAAU,CAAC,YAAY,CAAC,CAAC;YACzB,qBAAqB,IAAI,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,2BAA2B,CACpC,mBAAmB,EACnB,uFAAuF,CACvF,CAAC;QACH,CAAC;QAED,IAAI,qBAAqB,IAAI,0CAA0C,EAAE,CAAC;YACzE,MAAM,IAAI,2BAA2B,CACpC,kBAAkB,EAClB,8CAA8C,0CAA0C,aAAa,CACrG,CAAC;QACH,CAAC;QACD,mBAAmB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpF,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;IAEO,uBAAuB,CAC9B,QAA0C,EAC1C,qBAAkE;QAElE,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,IAAI,sCAAsC,CAAC,qBAAqB,EAAE,CAAC,CAAC;YACtF,IAAI,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC;gBAAE,OAAO;YACrE,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACR,oFAAoF;YACpF,2EAA2E;QAC5E,CAAC;IACF,CAAC;IAEO,YAAY,CACnB,QAAgB,EAChB,cAAsB,EACtB,SAAsC;QAEtC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACJ,GAAG,GAAG,uBAAuB,CAAC,QAAQ,EAAE,cAAc,EAAE,8BAA8B,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,2BAA2B,CACpC,kBAAkB,EAClB,0CAA0C,EAC1C,KAAK,CACL,CAAC;YACH,CAAC;YACD,MAAM,IAAI,2BAA2B,CACpC,kBAAkB,EAClB,wEAAwE,EACxE,KAAK,CACL,CAAC;QACH,CAAC;QACD,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAC5E,CAAC;CACD","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { unlinkSync } from \"node:fs\";\nimport { basename, join } from \"node:path\";\nimport type { AssistantMessage, TextContent, Usage, UserMessage } from \"@caupulican/pi-ai\";\nimport { workerContextForkFile, workerContextForksDir } from \"../agent-paths.ts\";\nimport {\n\tMAX_ORCHESTRATION_IDENTIFIER_LENGTH,\n\tMAX_ORCHESTRATION_MODEL_ID_LENGTH,\n\tMAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH,\n} from \"../orchestration/contracts.ts\";\nimport {\n\tMAX_WORKER_CONTEXT_FORK_API_LENGTH,\n\tMAX_WORKER_CONTEXT_FORK_BYTES,\n\tMAX_WORKER_CONTEXT_FORK_MESSAGES,\n\tMAX_WORKER_CONTEXT_FORK_TEXT_BLOCKS,\n\tnormalizeWorkerContextForkReference,\n\tWORKER_CONTEXT_FORK_REFERENCE_SCHEMA_VERSION as SCHEMA_VERSION,\n\ttype WorkerContextForkReference,\n} from \"../orchestration/worker-context-fork-reference.ts\";\nimport { withFileLockSync, writeFileAtomicSync } from \"../util/atomic-file.ts\";\nimport { readBoundedDirectoryNamesSync, readBoundedTextFileSync } from \"../util/bounded-file.ts\";\nimport { requireBoundedTrimmedText } from \"../util/bounded-value.ts\";\nimport type { SanitizedContextForkMessage } from \"./sanitized-context-fork.ts\";\nimport { DEFAULT_WORKER_FLEET_LIMITS } from \"./worker-fleet-limits.ts\";\n\nconst MAX_PATH_CHARS = 4096;\nconst MAX_FILE_BYTES = MAX_WORKER_CONTEXT_FORK_BYTES + 16 * 1024;\nconst MAX_DIRECTORY_ENTRIES = DEFAULT_WORKER_FLEET_LIMITS.maxAgentsPerSession + 32;\nconst SNAPSHOT_FILE_PATTERN = /^([a-f0-9]{64})-([a-f0-9]{64})\\.json$/;\n\nexport const MAX_RETAINED_WORKER_CONTEXT_FORK_SNAPSHOTS = DEFAULT_WORKER_FLEET_LIMITS.maxAgentsPerSession;\n\nexport type WorkerContextForkStoreErrorCode =\n\t| \"capacity_reached\"\n\t| \"identity_conflict\"\n\t| \"identity_claimed\"\n\t| \"snapshot_corrupt\"\n\t| \"snapshot_missing\";\n\n/** Stable failure classification for controller admission and recovery wiring. */\nexport class WorkerContextForkStoreError extends Error {\n\treadonly code: WorkerContextForkStoreErrorCode;\n\n\tconstructor(code: WorkerContextForkStoreErrorCode, message: string, cause?: unknown) {\n\t\tsuper(message, cause === undefined ? undefined : { cause });\n\t\tthis.name = \"WorkerContextForkStoreError\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface WorkerContextForkSnapshot extends WorkerContextForkReference {\n\tparentSessionId: string;\n\tlogicalAgentId: string;\n\tmessages: SanitizedContextForkMessage[];\n}\n\nexport interface CaptureWorkerContextForkRequest {\n\t/**\n\t * Newly admitted persistent specialist. Follow-up tasks reuse its durable conversation and must\n\t * reopen, never replace, this one birth snapshot.\n\t */\n\tlogicalAgentId: string;\n\tmessages: readonly SanitizedContextForkMessage[];\n}\n\nexport interface OpenWorkerContextForkRequest {\n\tlogicalAgentId: string;\n\treference: WorkerContextForkReference;\n}\n\n/**\n * Cross-process transaction input for the capture-before-dispatch boundary. The durable-reference\n * reader is invoked while the capture lock is held, so reclamation never relies on a stale snapshot\n * gathered before lock acquisition. `prepare` must synchronously persist or adopt the dispatch.\n */\nexport interface CaptureAndPrepareWorkerContextForkRequest<T> extends CaptureWorkerContextForkRequest {\n\treadDurableReferences: () => readonly WorkerContextForkReference[];\n\t/** Rechecked under the capture lock so a fresh start never adopts another caller's dispatch. */\n\tisLogicalIdentityClaimed?: () => boolean;\n\tprepare: (reference: WorkerContextForkReference) => T;\n}\n\nexport interface CaptureAndPrepareWorkerContextForkResult<T> {\n\treference: WorkerContextForkReference;\n\tvalue: T;\n}\n\ninterface NormalizedMessages {\n\tmessages: SanitizedContextForkMessage[];\n\tserialized: string;\n\tbyteLength: number;\n}\n\ninterface PreparedWorkerContextForkCapture {\n\tlogicalAgentId: string;\n\tnormalized: NormalizedMessages;\n\treference: WorkerContextForkReference;\n\ttargetFile: string;\n\ttargetName: string;\n\tserialized: string;\n}\n\ninterface LockedCaptureResult {\n\treference: WorkerContextForkReference;\n\tcreated: boolean;\n}\n\nclass DurableWorkerContextForkReferenceIndex {\n\tprivate readonly keysByIdentity = new Map<string, Set<string>>();\n\n\tconstructor(value: unknown) {\n\t\tif (!Array.isArray(value)) throw new TypeError(\"Durable worker context fork references must be an array.\");\n\t\tfor (const candidate of value as readonly unknown[]) {\n\t\t\tconst reference = normalizeWorkerContextForkReference(candidate);\n\t\t\tconst keys = this.keysByIdentity.get(reference.identityDigest) ?? new Set<string>();\n\t\t\tkeys.add(referenceKey(reference));\n\t\t\tthis.keysByIdentity.set(reference.identityDigest, keys);\n\t\t}\n\t}\n\n\thasIdentity(identityDigest: string): boolean {\n\t\treturn this.keysByIdentity.has(identityDigest);\n\t}\n\n\thasConflictingIdentity(reference: WorkerContextForkReference): boolean {\n\t\tconst keys = this.keysByIdentity.get(reference.identityDigest);\n\t\treturn keys !== undefined && (keys.size !== 1 || !keys.has(referenceKey(reference)));\n\t}\n}\n\ninterface PersistedWorkerContextFork {\n\tschemaVersion: 1;\n\tparentSessionId: string;\n\tlogicalAgentId: string;\n\tidentityDigest: string;\n\tcontentDigest: string;\n\tmessageCount: number;\n\tmessageBytes: number;\n\tmessages: SanitizedContextForkMessage[];\n}\n\ninterface TextBlockCounter {\n\tcount: number;\n}\n\nfunction exactObject(value: unknown, keys: readonly string[], label: string): Record<string, unknown> {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) throw new TypeError(`${label} must be an object.`);\n\tconst record = value as Record<string, unknown>;\n\tconst actualKeys = Object.keys(record);\n\tif (actualKeys.length !== keys.length || keys.some((key) => !Object.hasOwn(record, key))) {\n\t\tthrow new TypeError(`${label} has an unsupported shape.`);\n\t}\n\treturn record;\n}\n\nfunction boundedString(value: unknown, maximum: number, label: string): string {\n\tif (typeof value !== \"string\" || !value.trim() || value.length > maximum) {\n\t\tthrow new TypeError(`${label} must be non-empty and no longer than ${maximum} characters.`);\n\t}\n\treturn value;\n}\n\nfunction safeTimestamp(value: unknown, label: string): number {\n\tif (typeof value !== \"number\" || !Number.isSafeInteger(value) || value < 0) {\n\t\tthrow new TypeError(`${label} must be a non-negative safe integer.`);\n\t}\n\treturn value;\n}\n\nfunction nonNegativeFinite(value: unknown, label: string): number {\n\tif (typeof value !== \"number\" || !Number.isFinite(value) || value < 0) {\n\t\tthrow new TypeError(`${label} must be a non-negative finite number.`);\n\t}\n\treturn value;\n}\n\nfunction nonNegativeTokenCount(value: unknown, label: string): number {\n\tconst normalized = nonNegativeFinite(value, label);\n\tif (!Number.isSafeInteger(normalized)) throw new TypeError(`${label} must be a safe integer.`);\n\treturn normalized;\n}\n\nfunction normalizeUsage(value: unknown): Usage {\n\tconst usage = exactObject(value, [\"input\", \"output\", \"cacheRead\", \"cacheWrite\", \"totalTokens\", \"cost\"], \"Usage\");\n\tconst cost = exactObject(usage.cost, [\"input\", \"output\", \"cacheRead\", \"cacheWrite\", \"total\"], \"Usage cost\");\n\treturn {\n\t\tinput: nonNegativeTokenCount(usage.input, \"Usage input\"),\n\t\toutput: nonNegativeTokenCount(usage.output, \"Usage output\"),\n\t\tcacheRead: nonNegativeTokenCount(usage.cacheRead, \"Usage cache read\"),\n\t\tcacheWrite: nonNegativeTokenCount(usage.cacheWrite, \"Usage cache write\"),\n\t\ttotalTokens: nonNegativeTokenCount(usage.totalTokens, \"Usage total tokens\"),\n\t\tcost: {\n\t\t\tinput: nonNegativeFinite(cost.input, \"Usage input cost\"),\n\t\t\toutput: nonNegativeFinite(cost.output, \"Usage output cost\"),\n\t\t\tcacheRead: nonNegativeFinite(cost.cacheRead, \"Usage cache-read cost\"),\n\t\t\tcacheWrite: nonNegativeFinite(cost.cacheWrite, \"Usage cache-write cost\"),\n\t\t\ttotal: nonNegativeFinite(cost.total, \"Usage total cost\"),\n\t\t},\n\t};\n}\n\nfunction normalizeTextBlock(value: unknown, counter: TextBlockCounter): TextContent {\n\tif (counter.count >= MAX_WORKER_CONTEXT_FORK_TEXT_BLOCKS) {\n\t\tthrow new TypeError(\n\t\t\t`A worker context fork may contain at most ${MAX_WORKER_CONTEXT_FORK_TEXT_BLOCKS} text blocks.`,\n\t\t);\n\t}\n\tconst block = exactObject(value, [\"type\", \"text\"], \"Worker context fork text block\");\n\tif (block.type !== \"text\") throw new TypeError(\"Worker context forks may contain text blocks only.\");\n\tconst text = boundedString(block.text, MAX_WORKER_CONTEXT_FORK_BYTES, \"Worker context fork text\");\n\tcounter.count += 1;\n\treturn { type: \"text\", text };\n}\n\nfunction normalizeUserMessage(value: unknown, counter: TextBlockCounter): UserMessage {\n\tconst message = exactObject(value, [\"role\", \"content\", \"timestamp\"], \"Worker context fork user message\");\n\tif (message.role !== \"user\") throw new TypeError(\"Worker context fork user role is invalid.\");\n\tlet content: UserMessage[\"content\"];\n\tif (typeof message.content === \"string\") {\n\t\tcontent = boundedString(message.content, MAX_WORKER_CONTEXT_FORK_BYTES, \"Worker context fork user content\");\n\t\tcounter.count += 1;\n\t\tif (counter.count > MAX_WORKER_CONTEXT_FORK_TEXT_BLOCKS) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`A worker context fork may contain at most ${MAX_WORKER_CONTEXT_FORK_TEXT_BLOCKS} text blocks.`,\n\t\t\t);\n\t\t}\n\t} else {\n\t\tif (!Array.isArray(message.content) || message.content.length === 0) {\n\t\t\tthrow new TypeError(\"Worker context fork user content must contain text.\");\n\t\t}\n\t\tcontent = message.content.map((block) => normalizeTextBlock(block, counter));\n\t}\n\treturn { role: \"user\", content, timestamp: safeTimestamp(message.timestamp, \"User timestamp\") };\n}\n\nfunction normalizeAssistantMessage(value: unknown, counter: TextBlockCounter): AssistantMessage {\n\tconst message = exactObject(\n\t\tvalue,\n\t\t[\"role\", \"content\", \"api\", \"provider\", \"model\", \"usage\", \"stopReason\", \"timestamp\"],\n\t\t\"Worker context fork assistant message\",\n\t);\n\tif (message.role !== \"assistant\") throw new TypeError(\"Worker context fork assistant role is invalid.\");\n\tif (!Array.isArray(message.content) || message.content.length === 0) {\n\t\tthrow new TypeError(\"Worker context fork assistant content must contain text.\");\n\t}\n\tif (message.stopReason !== \"stop\") {\n\t\tthrow new TypeError(\"Worker context forks may contain complete assistant messages only.\");\n\t}\n\treturn {\n\t\trole: \"assistant\",\n\t\tcontent: message.content.map((block) => normalizeTextBlock(block, counter)),\n\t\tapi: boundedString(message.api, MAX_WORKER_CONTEXT_FORK_API_LENGTH, \"Assistant API\"),\n\t\tprovider: boundedString(message.provider, MAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH, \"Assistant provider\"),\n\t\tmodel: boundedString(message.model, MAX_ORCHESTRATION_MODEL_ID_LENGTH, \"Assistant model\"),\n\t\tusage: normalizeUsage(message.usage),\n\t\tstopReason: \"stop\",\n\t\ttimestamp: safeTimestamp(message.timestamp, \"Assistant timestamp\"),\n\t};\n}\n\nfunction normalizeMessages(value: unknown): NormalizedMessages {\n\tif (!Array.isArray(value) || value.length > MAX_WORKER_CONTEXT_FORK_MESSAGES) {\n\t\tthrow new TypeError(`A worker context fork may contain at most ${MAX_WORKER_CONTEXT_FORK_MESSAGES} messages.`);\n\t}\n\tconst messages: SanitizedContextForkMessage[] = [];\n\tconst counter: TextBlockCounter = { count: 0 };\n\tlet hasUser = false;\n\tfor (const candidate of value as readonly unknown[]) {\n\t\tif (!candidate || typeof candidate !== \"object\" || Array.isArray(candidate)) {\n\t\t\tthrow new TypeError(\"Worker context fork message must be an object.\");\n\t\t}\n\t\tconst role = Object.getOwnPropertyDescriptor(candidate, \"role\");\n\t\tconst roleValue = role && \"value\" in role ? role.value : undefined;\n\t\tif (roleValue === \"user\") {\n\t\t\tmessages.push(normalizeUserMessage(candidate, counter));\n\t\t\thasUser = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (roleValue === \"assistant\") {\n\t\t\tif (!hasUser) throw new TypeError(\"A worker context fork cannot begin with an assistant message.\");\n\t\t\tmessages.push(normalizeAssistantMessage(candidate, counter));\n\t\t\tcontinue;\n\t\t}\n\t\tthrow new TypeError(\"Worker context forks may contain user and assistant messages only.\");\n\t}\n\tconst serialized = JSON.stringify(messages);\n\tconst byteLength = Buffer.byteLength(serialized, \"utf-8\");\n\tif (byteLength > MAX_WORKER_CONTEXT_FORK_BYTES) {\n\t\tthrow new TypeError(`A worker context fork may contain at most ${MAX_WORKER_CONTEXT_FORK_BYTES} bytes.`);\n\t}\n\treturn { messages, serialized, byteLength };\n}\n\nfunction sha256(domain: string, value: string): string {\n\treturn createHash(\"sha256\").update(domain).update(\"\\0\").update(value).digest(\"hex\");\n}\n\nfunction identityDigest(parentSessionId: string, logicalAgentId: string): string {\n\treturn sha256(\"pi-worker-context-fork-identity-v1\", `${parentSessionId}\\0${logicalAgentId}`);\n}\n\nfunction contentDigest(serializedMessages: string): string {\n\treturn sha256(\"pi-worker-context-fork-content-v1\", serializedMessages);\n}\n\nfunction referenceKey(reference: WorkerContextForkReference): string {\n\treturn JSON.stringify([\n\t\treference.schemaVersion,\n\t\treference.identityDigest,\n\t\treference.contentDigest,\n\t\treference.messageCount,\n\t\treference.messageBytes,\n\t]);\n}\n\nfunction canonicalEnvelope(\n\tparentSessionId: string,\n\tlogicalAgentId: string,\n\treference: WorkerContextForkReference,\n\tmessages: SanitizedContextForkMessage[],\n): PersistedWorkerContextFork {\n\treturn {\n\t\tschemaVersion: SCHEMA_VERSION,\n\t\tparentSessionId,\n\t\tlogicalAgentId,\n\t\tidentityDigest: reference.identityDigest,\n\t\tcontentDigest: reference.contentDigest,\n\t\tmessageCount: reference.messageCount,\n\t\tmessageBytes: reference.messageBytes,\n\t\tmessages,\n\t};\n}\n\nfunction serializeEnvelope(envelope: PersistedWorkerContextFork): string {\n\tconst serialized = `${JSON.stringify(envelope)}\\n`;\n\tif (Buffer.byteLength(serialized, \"utf-8\") > MAX_FILE_BYTES) {\n\t\tthrow new TypeError(\"Worker context fork snapshot exceeds its durable byte limit.\");\n\t}\n\treturn serialized;\n}\n\nfunction persistedIdentity(value: unknown, label: string): string {\n\tif (typeof value !== \"string\") throw new TypeError(`${label} is invalid.`);\n\tconst normalized = requireBoundedTrimmedText(value, MAX_ORCHESTRATION_IDENTIFIER_LENGTH, label);\n\tif (normalized !== value) throw new TypeError(`${label} is not canonical.`);\n\treturn normalized;\n}\n\nfunction parseEnvelope(\n\traw: string,\n\texpectedParentSessionId: string,\n\texpectedLogicalAgentId: string,\n\texpectedReference?: WorkerContextForkReference,\n): WorkerContextForkSnapshot {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(raw);\n\t} catch (error) {\n\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\"snapshot_corrupt\",\n\t\t\t\"Worker context fork snapshot is not valid JSON.\",\n\t\t\terror,\n\t\t);\n\t}\n\ttry {\n\t\tconst envelope = exactObject(\n\t\t\tparsed,\n\t\t\t[\n\t\t\t\t\"schemaVersion\",\n\t\t\t\t\"parentSessionId\",\n\t\t\t\t\"logicalAgentId\",\n\t\t\t\t\"identityDigest\",\n\t\t\t\t\"contentDigest\",\n\t\t\t\t\"messageCount\",\n\t\t\t\t\"messageBytes\",\n\t\t\t\t\"messages\",\n\t\t\t],\n\t\t\t\"Worker context fork snapshot\",\n\t\t);\n\t\tif (envelope.schemaVersion !== SCHEMA_VERSION) {\n\t\t\tthrow new TypeError(\"Worker context fork snapshot schema is unsupported.\");\n\t\t}\n\t\tconst parentSessionId = persistedIdentity(envelope.parentSessionId, \"Snapshot parent session id\");\n\t\tconst logicalAgentId = persistedIdentity(envelope.logicalAgentId, \"Snapshot logical agent id\");\n\t\tif (parentSessionId !== expectedParentSessionId || logicalAgentId !== expectedLogicalAgentId) {\n\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\"identity_conflict\",\n\t\t\t\t\"Worker context fork snapshot identity conflicts with the requested logical agent.\",\n\t\t\t);\n\t\t}\n\t\tconst messages = normalizeMessages(envelope.messages);\n\t\tconst actualReference: WorkerContextForkReference = {\n\t\t\tschemaVersion: SCHEMA_VERSION,\n\t\t\tidentityDigest: identityDigest(parentSessionId, logicalAgentId),\n\t\t\tcontentDigest: contentDigest(messages.serialized),\n\t\t\tmessageCount: messages.messages.length,\n\t\t\tmessageBytes: messages.byteLength,\n\t\t};\n\t\tif (\n\t\t\tenvelope.identityDigest !== actualReference.identityDigest ||\n\t\t\tenvelope.contentDigest !== actualReference.contentDigest ||\n\t\t\tenvelope.messageCount !== actualReference.messageCount ||\n\t\t\tenvelope.messageBytes !== actualReference.messageBytes ||\n\t\t\t(expectedReference !== undefined &&\n\t\t\t\t(expectedReference.identityDigest !== actualReference.identityDigest ||\n\t\t\t\t\texpectedReference.contentDigest !== actualReference.contentDigest ||\n\t\t\t\t\texpectedReference.messageCount !== actualReference.messageCount ||\n\t\t\t\t\texpectedReference.messageBytes !== actualReference.messageBytes))\n\t\t) {\n\t\t\tthrow new TypeError(\"Worker context fork snapshot digest or bounds metadata is invalid.\");\n\t\t}\n\t\tconst canonical = canonicalEnvelope(parentSessionId, logicalAgentId, actualReference, messages.messages);\n\t\tif (raw !== serializeEnvelope(canonical)) {\n\t\t\tthrow new TypeError(\"Worker context fork snapshot is not in canonical form.\");\n\t\t}\n\t\treturn { ...actualReference, parentSessionId, logicalAgentId, messages: messages.messages };\n\t} catch (error) {\n\t\tif (error instanceof WorkerContextForkStoreError) throw error;\n\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\"snapshot_corrupt\",\n\t\t\t\"Worker context fork snapshot failed schema, digest, or bounds validation.\",\n\t\t\terror,\n\t\t);\n\t}\n}\n\nfunction errorCode(error: unknown): string | undefined {\n\tif (!error || typeof error !== \"object\") return undefined;\n\tconst descriptor = Object.getOwnPropertyDescriptor(error, \"code\");\n\treturn descriptor && \"value\" in descriptor && typeof descriptor.value === \"string\" ? descriptor.value : undefined;\n}\n\n/**\n * Immutable, per-session store for the exact sanitized message snapshot inherited by a new logical\n * worker. Capture is synchronous so the caller can commit the snapshot before admitting dispatch.\n * Identity is deliberately `(parentSessionId, logicalAgentId)`: persistent-agent follow-up tasks\n * continue the existing transcript and cannot install a second birth context.\n */\nexport class WorkerContextForkStore {\n\tprivate readonly agentDir: string;\n\tprivate readonly parentSessionId: string;\n\tprivate readonly directory: string;\n\tprivate readonly lockFile: string;\n\n\tconstructor(options: { agentDir: string; parentSessionId: string }) {\n\t\tthis.agentDir = requireBoundedTrimmedText(options.agentDir, MAX_PATH_CHARS, \"Agent directory\");\n\t\tthis.parentSessionId = requireBoundedTrimmedText(\n\t\t\toptions.parentSessionId,\n\t\t\tMAX_ORCHESTRATION_IDENTIFIER_LENGTH,\n\t\t\t\"Parent session id\",\n\t\t);\n\t\tthis.directory = workerContextForksDir(this.agentDir, this.parentSessionId);\n\t\tthis.lockFile = join(this.directory, \"capture-index\");\n\t}\n\n\tcapture(request: CaptureWorkerContextForkRequest): WorkerContextForkReference {\n\t\tconst prepared = this.prepareCapture(request);\n\t\treturn withFileLockSync(this.lockFile, () => this.captureLocked(prepared).reference);\n\t}\n\n\t/**\n\t * Hold the capture lock across orphan classification, capture, and synchronous durable prepare.\n\t * A callback failure removes only a file created by this invocation, and only after a refreshed\n\t * lifecycle reference read still proves the logical identity unbound. A process crash can leave\n\t * an orphan, which the next transaction may reclaim under the same proof and lock.\n\t */\n\tcaptureAndPrepare<T>(\n\t\trequest: CaptureAndPrepareWorkerContextForkRequest<T>,\n\t): CaptureAndPrepareWorkerContextForkResult<T> {\n\t\tconst prepared = this.prepareCapture(request);\n\t\treturn withFileLockSync(this.lockFile, () => {\n\t\t\tif (request.isLogicalIdentityClaimed?.()) {\n\t\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\t\"identity_claimed\",\n\t\t\t\t\t\"Logical worker context identity already owns a durable attempt.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst referenced = new DurableWorkerContextForkReferenceIndex(request.readDurableReferences());\n\t\t\tconst captured = this.captureLocked(prepared, referenced);\n\t\t\ttry {\n\t\t\t\tconst value = request.prepare(structuredClone(captured.reference));\n\t\t\t\treturn { reference: structuredClone(captured.reference), value };\n\t\t\t} catch (error) {\n\t\t\t\tif (captured.created) this.rollbackCreatedSnapshot(prepared, request.readDurableReferences);\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t});\n\t}\n\n\topen(request: OpenWorkerContextForkRequest): WorkerContextForkSnapshot {\n\t\tconst logicalAgentId = requireBoundedTrimmedText(\n\t\t\trequest.logicalAgentId,\n\t\t\tMAX_ORCHESTRATION_IDENTIFIER_LENGTH,\n\t\t\t\"Logical agent id\",\n\t\t);\n\t\tlet reference: WorkerContextForkReference;\n\t\ttry {\n\t\t\treference = normalizeWorkerContextForkReference(request.reference);\n\t\t} catch (error) {\n\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\"snapshot_corrupt\",\n\t\t\t\t\"Worker context fork reference failed schema or bounds validation.\",\n\t\t\t\terror,\n\t\t\t);\n\t\t}\n\t\tif (reference.identityDigest !== identityDigest(this.parentSessionId, logicalAgentId)) {\n\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\"identity_conflict\",\n\t\t\t\t\"Worker context fork reference conflicts with the requested logical agent.\",\n\t\t\t);\n\t\t}\n\t\tconst filePath = workerContextForkFile(\n\t\t\tthis.agentDir,\n\t\t\tthis.parentSessionId,\n\t\t\treference.identityDigest,\n\t\t\treference.contentDigest,\n\t\t);\n\t\treturn this.readSnapshot(filePath, logicalAgentId, reference);\n\t}\n\n\tprivate prepareCapture(request: CaptureWorkerContextForkRequest): PreparedWorkerContextForkCapture {\n\t\tconst logicalAgentId = requireBoundedTrimmedText(\n\t\t\trequest.logicalAgentId,\n\t\t\tMAX_ORCHESTRATION_IDENTIFIER_LENGTH,\n\t\t\t\"Logical agent id\",\n\t\t);\n\t\tconst normalized = normalizeMessages(request.messages);\n\t\tconst reference: WorkerContextForkReference = {\n\t\t\tschemaVersion: SCHEMA_VERSION,\n\t\t\tidentityDigest: identityDigest(this.parentSessionId, logicalAgentId),\n\t\t\tcontentDigest: contentDigest(normalized.serialized),\n\t\t\tmessageCount: normalized.messages.length,\n\t\t\tmessageBytes: normalized.byteLength,\n\t\t};\n\t\tconst targetFile = workerContextForkFile(\n\t\t\tthis.agentDir,\n\t\t\tthis.parentSessionId,\n\t\t\treference.identityDigest,\n\t\t\treference.contentDigest,\n\t\t);\n\t\tconst targetName = basename(targetFile);\n\t\tconst serialized = serializeEnvelope(\n\t\t\tcanonicalEnvelope(this.parentSessionId, logicalAgentId, reference, normalized.messages),\n\t\t);\n\t\treturn { logicalAgentId, normalized, reference, targetFile, targetName, serialized };\n\t}\n\n\tprivate captureLocked(\n\t\tprepared: PreparedWorkerContextForkCapture,\n\t\treferenced?: DurableWorkerContextForkReferenceIndex,\n\t): LockedCaptureResult {\n\t\tlet names: string[];\n\t\ttry {\n\t\t\tnames = readBoundedDirectoryNamesSync(\n\t\t\t\tthis.directory,\n\t\t\t\tMAX_DIRECTORY_ENTRIES,\n\t\t\t\t\"Worker context fork snapshot directory\",\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\"capacity_reached\",\n\t\t\t\t\"Worker context fork snapshot directory exceeds its bounded retention capacity.\",\n\t\t\t\terror,\n\t\t\t);\n\t\t}\n\t\tconst snapshotNames = names.filter((name) => SNAPSHOT_FILE_PATTERN.test(name));\n\t\tconst identityPrefix = `${prepared.reference.identityDigest}-`;\n\t\tconst identityMatches = snapshotNames.filter((name) => name.startsWith(identityPrefix));\n\t\tif (identityMatches.length > 1) {\n\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\"identity_conflict\",\n\t\t\t\t\"Logical worker context identity has multiple durable snapshots.\",\n\t\t\t);\n\t\t}\n\n\t\tconst existingName = identityMatches[0];\n\t\tif (existingName === prepared.targetName) {\n\t\t\tif (referenced?.hasConflictingIdentity(prepared.reference)) {\n\t\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\t\"identity_conflict\",\n\t\t\t\t\t\"Logical worker context identity conflicts with its durable lifecycle reference.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst existing = this.readSnapshot(prepared.targetFile, prepared.logicalAgentId, prepared.reference);\n\t\t\tif (JSON.stringify(existing.messages) !== prepared.normalized.serialized) {\n\t\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\t\"identity_conflict\",\n\t\t\t\t\t\"Logical worker context identity is bound to different snapshot content.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn { reference: prepared.reference, created: false };\n\t\t}\n\n\t\tlet retainedSnapshotCount = snapshotNames.length;\n\t\tif (existingName !== undefined) {\n\t\t\tif (!referenced || referenced.hasIdentity(prepared.reference.identityDigest)) {\n\t\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\t\"identity_conflict\",\n\t\t\t\t\t\"Logical worker context identity is already bound to a different snapshot.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst existingFile = join(this.directory, existingName);\n\t\t\tconst existing = this.readSnapshot(existingFile, prepared.logicalAgentId);\n\t\t\tconst canonicalExistingName = `${existing.identityDigest}-${existing.contentDigest}.json`;\n\t\t\tif (existingName !== canonicalExistingName) {\n\t\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\t\"snapshot_corrupt\",\n\t\t\t\t\t\"Worker context fork snapshot filename conflicts with its canonical content.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tunlinkSync(existingFile);\n\t\t\tretainedSnapshotCount -= 1;\n\t\t} else if (referenced?.hasIdentity(prepared.reference.identityDigest)) {\n\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\"identity_conflict\",\n\t\t\t\t\"Logical worker context identity has a durable reference but no exact snapshot replay.\",\n\t\t\t);\n\t\t}\n\n\t\tif (retainedSnapshotCount >= MAX_RETAINED_WORKER_CONTEXT_FORK_SNAPSHOTS) {\n\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\"capacity_reached\",\n\t\t\t\t`Worker context fork retention is capped at ${MAX_RETAINED_WORKER_CONTEXT_FORK_SNAPSHOTS} snapshots.`,\n\t\t\t);\n\t\t}\n\t\twriteFileAtomicSync(prepared.targetFile, prepared.serialized, { mode: 0o600 });\n\t\tthis.readSnapshot(prepared.targetFile, prepared.logicalAgentId, prepared.reference);\n\t\treturn { reference: prepared.reference, created: true };\n\t}\n\n\tprivate rollbackCreatedSnapshot(\n\t\tprepared: PreparedWorkerContextForkCapture,\n\t\treadDurableReferences: () => readonly WorkerContextForkReference[],\n\t): void {\n\t\ttry {\n\t\t\tconst refreshed = new DurableWorkerContextForkReferenceIndex(readDurableReferences());\n\t\t\tif (refreshed.hasIdentity(prepared.reference.identityDigest)) return;\n\t\t\tunlinkSync(prepared.targetFile);\n\t\t} catch {\n\t\t\t// Preserve the snapshot on an ambiguous refresh or cleanup failure. The next locked\n\t\t\t// transaction can reclassify it from a fresh durable lifecycle projection.\n\t\t}\n\t}\n\n\tprivate readSnapshot(\n\t\tfilePath: string,\n\t\tlogicalAgentId: string,\n\t\treference?: WorkerContextForkReference,\n\t): WorkerContextForkSnapshot {\n\t\tlet raw: string;\n\t\ttry {\n\t\t\traw = readBoundedTextFileSync(filePath, MAX_FILE_BYTES, \"Worker context fork snapshot\");\n\t\t} catch (error) {\n\t\t\tif (errorCode(error) === \"ENOENT\") {\n\t\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\t\"snapshot_missing\",\n\t\t\t\t\t\"Worker context fork snapshot is missing.\",\n\t\t\t\t\terror,\n\t\t\t\t);\n\t\t\t}\n\t\t\tthrow new WorkerContextForkStoreError(\n\t\t\t\t\"snapshot_corrupt\",\n\t\t\t\t\"Worker context fork snapshot cannot be read within its durable bounds.\",\n\t\t\t\terror,\n\t\t\t);\n\t\t}\n\t\treturn parseEnvelope(raw, this.parentSessionId, logicalAgentId, reference);\n\t}\n}\n"]}

package/dist/core/delegation/worker-context-inheritance-policy.d.ts

@@ -0,0 +1,18 @@
+import { type SanitizedContextForkMode } from "./sanitized-context-fork.ts";
+export interface WorkerContextModelIdentity {
+    provider: string;
+    model: string;
+}
+export interface ResolveWorkerContextInheritanceModeInput {
+    parent: WorkerContextModelIdentity;
+    worker: WorkerContextModelIdentity;
+    /** Eventual `fork_turns` wire value. Omission is policy-significant. */
+    mode?: string;
+}
+/**
+ * Pure provider/model egress policy for sanitized birth context. Implicit inheritance is allowed
+ * only when both identities match exactly; crossing either boundary defaults to none and requires
+ * an explicit none if a mode was supplied.
+ */
+export declare function resolveWorkerContextInheritanceMode(input: ResolveWorkerContextInheritanceModeInput): SanitizedContextForkMode;
+//# sourceMappingURL=worker-context-inheritance-policy.d.ts.map

package/dist/core/delegation/worker-context-inheritance-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-context-inheritance-policy.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-context-inheritance-policy.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiC,KAAK,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAE3G,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wCAAwC;IACxD,MAAM,EAAE,0BAA0B,CAAC;IACnC,MAAM,EAAE,0BAA0B,CAAC;IACnC,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AASD;;;;GAIG;AACH,wBAAgB,mCAAmC,CAClD,KAAK,EAAE,wCAAwC,GAC7C,wBAAwB,CAqB1B"}

package/dist/core/delegation/worker-context-inheritance-policy.js

@@ -0,0 +1,28 @@
+import { MAX_ORCHESTRATION_MODEL_ID_LENGTH, MAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH, } from "../orchestration/contracts.js";
+import { parseSanitizedContextForkMode } from "./sanitized-context-fork.js";
+function canonicalIdentity(value, maximum, label) {
+    if (!value || value.trim() !== value || value.length > maximum) {
+        throw new TypeError(`${label} must be a bounded non-empty canonical string.`);
+    }
+    return value;
+}
+/**
+ * Pure provider/model egress policy for sanitized birth context. Implicit inheritance is allowed
+ * only when both identities match exactly; crossing either boundary defaults to none and requires
+ * an explicit none if a mode was supplied.
+ */
+export function resolveWorkerContextInheritanceMode(input) {
+    const parentProvider = canonicalIdentity(input.parent.provider, MAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH, "Parent provider");
+    const parentModel = canonicalIdentity(input.parent.model, MAX_ORCHESTRATION_MODEL_ID_LENGTH, "Parent model");
+    const workerProvider = canonicalIdentity(input.worker.provider, MAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH, "Worker provider");
+    const workerModel = canonicalIdentity(input.worker.model, MAX_ORCHESTRATION_MODEL_ID_LENGTH, "Worker model");
+    const sameBoundary = parentProvider === workerProvider && parentModel === workerModel;
+    if (input.mode === undefined)
+        return sameBoundary ? { kind: "all" } : { kind: "none" };
+    const mode = parseSanitizedContextForkMode(input.mode);
+    if (!sameBoundary && mode.kind !== "none") {
+        throw new TypeError("Worker context inheritance cannot cross a provider/model boundary.");
+    }
+    return mode;
+}
+//# sourceMappingURL=worker-context-inheritance-policy.js.map

package/dist/core/delegation/worker-context-inheritance-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-context-inheritance-policy.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-context-inheritance-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,iCAAiC,EACjC,uCAAuC,GACvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,6BAA6B,EAAiC,MAAM,6BAA6B,CAAC;AAc3G,SAAS,iBAAiB,CAAC,KAAa,EAAE,OAAe,EAAE,KAAa;IACvE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,gDAAgD,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CAClD,KAA+C;IAE/C,MAAM,cAAc,GAAG,iBAAiB,CACvC,KAAK,CAAC,MAAM,CAAC,QAAQ,EACrB,uCAAuC,EACvC,iBAAiB,CACjB,CAAC;IACF,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,iCAAiC,EAAE,cAAc,CAAC,CAAC;IAC7G,MAAM,cAAc,GAAG,iBAAiB,CACvC,KAAK,CAAC,MAAM,CAAC,QAAQ,EACrB,uCAAuC,EACvC,iBAAiB,CACjB,CAAC;IACF,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,iCAAiC,EAAE,cAAc,CAAC,CAAC;IAC7G,MAAM,YAAY,GAAG,cAAc,KAAK,cAAc,IAAI,WAAW,KAAK,WAAW,CAAC;IAEtF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACvF,MAAM,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC","sourcesContent":["import {\n\tMAX_ORCHESTRATION_MODEL_ID_LENGTH,\n\tMAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH,\n} from \"../orchestration/contracts.ts\";\nimport { parseSanitizedContextForkMode, type SanitizedContextForkMode } from \"./sanitized-context-fork.ts\";\n\nexport interface WorkerContextModelIdentity {\n\tprovider: string;\n\tmodel: string;\n}\n\nexport interface ResolveWorkerContextInheritanceModeInput {\n\tparent: WorkerContextModelIdentity;\n\tworker: WorkerContextModelIdentity;\n\t/** Eventual `fork_turns` wire value. Omission is policy-significant. */\n\tmode?: string;\n}\n\nfunction canonicalIdentity(value: string, maximum: number, label: string): string {\n\tif (!value || value.trim() !== value || value.length > maximum) {\n\t\tthrow new TypeError(`${label} must be a bounded non-empty canonical string.`);\n\t}\n\treturn value;\n}\n\n/**\n * Pure provider/model egress policy for sanitized birth context. Implicit inheritance is allowed\n * only when both identities match exactly; crossing either boundary defaults to none and requires\n * an explicit none if a mode was supplied.\n */\nexport function resolveWorkerContextInheritanceMode(\n\tinput: ResolveWorkerContextInheritanceModeInput,\n): SanitizedContextForkMode {\n\tconst parentProvider = canonicalIdentity(\n\t\tinput.parent.provider,\n\t\tMAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH,\n\t\t\"Parent provider\",\n\t);\n\tconst parentModel = canonicalIdentity(input.parent.model, MAX_ORCHESTRATION_MODEL_ID_LENGTH, \"Parent model\");\n\tconst workerProvider = canonicalIdentity(\n\t\tinput.worker.provider,\n\t\tMAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH,\n\t\t\"Worker provider\",\n\t);\n\tconst workerModel = canonicalIdentity(input.worker.model, MAX_ORCHESTRATION_MODEL_ID_LENGTH, \"Worker model\");\n\tconst sameBoundary = parentProvider === workerProvider && parentModel === workerModel;\n\n\tif (input.mode === undefined) return sameBoundary ? { kind: \"all\" } : { kind: \"none\" };\n\tconst mode = parseSanitizedContextForkMode(input.mode);\n\tif (!sameBoundary && mode.kind !== \"none\") {\n\t\tthrow new TypeError(\"Worker context inheritance cannot cross a provider/model boundary.\");\n\t}\n\treturn mode;\n}\n"]}

package/dist/core/delegation/worker-conversation-revision.d.ts

@@ -0,0 +1,31 @@
+export interface WorkerConversationFileRevision {
+    readonly dev: bigint;
+    readonly ino: bigint;
+    readonly size: bigint;
+    readonly mtimeNs: bigint;
+    readonly ctimeNs: bigint;
+}
+export interface WorkerSessionFileHead {
+    readonly revision: WorkerConversationFileRevision;
+    readonly headerDigest: string;
+    readonly entryDigest: string;
+    readonly entryCount: number;
+    readonly prefixDigest?: string;
+}
+export declare class WorkerConversationOwnershipError extends Error {
+    constructor(message: string);
+}
+export declare function readWorkerConversationFileRevision(file: string): WorkerConversationFileRevision;
+export declare function sameWorkerConversationFileRevision(left: WorkerConversationFileRevision, right: WorkerConversationFileRevision): boolean;
+/**
+ * Verify the exact bytes appended by SessionManager and advance the trusted raw-file head once.
+ *
+ * The caller must hold the canonical conversation lock. That advisory lock excludes every
+ * supported writer, while revision/digest scans detect changes made between owned critical
+ * sections and during cold opens. This bounded append check intentionally reads only the new
+ * suffix: it cannot detect a noncooperating process rewriting an equal-length prefix inside the
+ * locked append window without reintroducing an O(n) prefix scan or a second durable authority.
+ */
+export declare function advanceWorkerSessionHeadAfterOwnedAppend(sessionFile: string, previousHead: WorkerSessionFileHead, serializedEntry: string): WorkerSessionFileHead;
+export declare function scanWorkerSessionFile(sessionFile: string, expectedSessionId: string, expectedCwd: string, prefixEntryCount?: number): WorkerSessionFileHead;
+//# sourceMappingURL=worker-conversation-revision.d.ts.map