@caupulican/pi-adaptative 0.94.1 → 0.95.0

package/dist/core/delegation/worker-authority-resolver.js

@@ -1,11 +1,14 @@
 import { createHash } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
 import { resolveModelThinkingLevel } from "@caupulican/pi-ai/models";
 import { mapToolNamesForPlatform, STABLE_SHELL_TOOL_NAME } from "../default-tool-surface.js";
+import { ROOT_MEMORY_TOOL_NAME, WORKER_MEMORY_READ_TOOL_NAME, WORKER_ROOT_MEMORY_TOOL_NAMES, } from "../memory/worker-memory-tools.js";
 import { ORCHESTRATION_SCHEMA_VERSION, } from "../orchestration/contracts.js";
 import { CLASSIFIED_LANE_TOOL_NAMES } from "../orchestration/lane-tool-manifests.js";
 import { resolvePinnedOrchestrationModel } from "../orchestration/model-binding.js";
 import { envelopeHasToolCapability, getToolCapabilityPolicy } from "../tool-capability-policy.js";
-import { LEAN_WORKER_DELEGATION_LIMITS } from "./worker-fleet-limits.js";
+import { LEAF_WORKER_DELEGATION_LIMITS } from "./worker-fleet-limits.js";
+import { resolveWorkerWorkspacePath } from "./worker-machine-scope.js";
 /**
  * Smallest token grant a worker can survive on. A worker's first response pays the full
  * uncached system prompt (~3.3k budgeted tokens in the field), so grants below this floor
@@ -22,11 +25,13 @@ const DEFAULT_TOOL_NAMES = [
     "ls",
     "write",
     "edit",
-    "memory",
+    "python",
     STABLE_SHELL_TOOL_NAME,
-    "delegate",
+    "artifact_retrieve",
+    "skill",
+    "skill_audit",
 ];
-const AVAILABLE_TOOL_NAMES = new Set([...CLASSIFIED_LANE_TOOL_NAMES, "delegate"]);
+const AVAILABLE_TOOL_NAMES = new Set(CLASSIFIED_LANE_TOOL_NAMES);
 const DEFAULT_CAPABILITIES = [
     "filesystem.read",
     "filesystem.write",
@@ -35,9 +40,43 @@ const DEFAULT_CAPABILITIES = [
     "process.exec",
     "network.http",
     "service.mcp",
-    "memory.query",
+    "skill.read",
 ];
-function selectModelBinding(modelPin, authority, base, foregroundModel, modelRegistry) {
+/**
+ * Bind a compiled implementation profile to the compiled verifier identity it will persist.
+ * Verifier admission can legitimately derive a new immutable profile id (for example when the
+ * host forces a legacy delegation-capable preset to the leaf contract), so retaining the
+ * configured source id would make the execution contract internally inconsistent. Rebinding changes compiled
+ * content and therefore derives a fresh implementation identity as well.
+ */
+export function bindCompiledVerifierIdentity(shipment, verifierProfileId) {
+    if (shipment.profile.verificationProfileId === verifierProfileId)
+        return shipment;
+    const profile = {
+        ...shipment.profile,
+        verificationProfileId: verifierProfileId,
+        profileId: adaptiveProfileId({
+            baseProfileId: shipment.profile.profileId,
+            verificationProfileId: verifierProfileId,
+        }),
+    };
+    return { ...shipment, profile };
+}
+/** Bind the immutable profile snapshot to the exact native tools its host plan materialized. */
+export function bindCompiledToolSurface(shipment, toolNames) {
+    if (isDeepStrictEqual(shipment.profile.toolNames, toolNames))
+        return shipment;
+    const profile = {
+        ...shipment.profile,
+        toolNames: [...toolNames],
+        profileId: adaptiveProfileId({
+            baseProfileId: shipment.profile.profileId,
+            toolNames,
+        }),
+    };
+    return { ...shipment, profile };
+}
+function selectModelBinding(modelPin, authority, base, foregroundModel, foregroundThinkingLevel, modelRegistry) {
     if (modelPin)
         return { ...modelPin };
     const provider = authority?.model?.provider ?? base?.modelBinding.provider ?? foregroundModel?.provider;
@@ -50,7 +89,7 @@ function selectModelBinding(modelPin, authority, base, foregroundModel, modelReg
         (sameAsBase
             ? base.modelBinding.thinkingLevel
             : foregroundModel && provider === foregroundModel.provider && modelId === foregroundModel.id
-                ? resolveModelThinkingLevel(foregroundModel, undefined)
+                ? (foregroundThinkingLevel ?? resolveModelThinkingLevel(foregroundModel, undefined))
                 : selectedModel
                     ? resolveModelThinkingLevel(selectedModel, undefined)
                     : "off");
@@ -66,51 +105,62 @@ function tokenBudgetFloorFailure(maxTokens) {
 }
 /** Materialize free-form model choices as one immutable profile-shaped execution snapshot. */
 export function resolveWorkerAuthority(input) {
-    if (!input.authority && input.base) {
-        const floorFailure = tokenBudgetFloorFailure(input.base.profile.budget.maxTokens);
-        if (floorFailure)
-            return { ok: false, reason: floorFailure };
-        if (!input.modelPin)
-            return { ok: true, shipment: input.base };
-        const resolvedModel = resolvePinnedOrchestrationModel(input.modelPin, input.modelRegistry, input.isModelExhausted);
-        if (!resolvedModel)
-            return { ok: false, reason: "orchestration_model_unavailable" };
-        return {
-            ok: true,
-            shipment: {
-                ...input.base,
-                model: resolvedModel.model,
-                modelBinding: resolvedModel.binding,
-                profile: {
-                    ...input.base.profile,
-                    modelPolicy: { mode: "fixed", candidates: [resolvedModel.binding] },
-                },
-            },
-        };
-    }
-    const binding = selectModelBinding(input.modelPin, input.authority, input.base, input.foregroundModel, input.modelRegistry);
+    const binding = selectModelBinding(input.modelPin, input.authority, input.base, input.foregroundModel, input.foregroundThinkingLevel, input.modelRegistry);
     if (!binding)
         return { ok: false, reason: "orchestration_model_required" };
     const resolvedModel = resolvePinnedOrchestrationModel(binding, input.modelRegistry, input.isModelExhausted);
     if (!resolvedModel)
         return { ok: false, reason: "orchestration_model_unavailable" };
-    const configuredToolNames = mapToolNamesForPlatform(input.authority?.toolNames ?? input.base?.profile.toolNames ?? DEFAULT_TOOL_NAMES);
-    const inheritsDelegation = input.authority?.capabilities === undefined &&
-        (input.base === undefined ||
-            (input.base.profile.toolNames.includes("delegate") &&
-                input.base.profile.capabilityCeiling.includes("workflow.delegate")));
-    const requestedToolNames = inheritsDelegation && !configuredToolNames.includes("delegate")
-        ? [...configuredToolNames, "delegate"]
-        : configuredToolNames;
-    const uniqueToolNames = [...new Set(requestedToolNames)];
+    if (input.modelPin &&
+        ((input.authority?.model !== undefined &&
+            (input.authority.model.provider !== input.modelPin.provider ||
+                input.authority.model.modelId !== input.modelPin.modelId)) ||
+            (input.authority?.thinkingLevel !== undefined &&
+                input.authority.thinkingLevel !== input.modelPin.thinkingLevel))) {
+        return {
+            ok: false,
+            reason: `worker_model_pin_conflict:${input.authority?.role ?? input.base?.profile.role ?? "implementer"}`,
+        };
+    }
+    const inheritedForegroundToolNames = mapToolNamesForPlatform(input.foregroundToolNames ?? input.foregroundEnvelope?.allowedTools ?? DEFAULT_TOOL_NAMES).filter((toolName) => AVAILABLE_TOOL_NAMES.has(toolName) && !WORKER_ROOT_MEMORY_TOOL_NAMES.has(toolName));
+    const requestedForbiddenTool = input.authority?.toolNames?.find((toolName) => WORKER_ROOT_MEMORY_TOOL_NAMES.has(toolName));
+    if (requestedForbiddenTool) {
+        return { ok: false, reason: `orchestration_tool_unavailable:${requestedForbiddenTool}` };
+    }
+    const baseForbiddenTool = input.base?.profile.toolNames.find((toolName) => WORKER_ROOT_MEMORY_TOOL_NAMES.has(toolName));
+    if (baseForbiddenTool) {
+        return { ok: false, reason: `orchestration_tool_unavailable:${baseForbiddenTool}` };
+    }
+    const configuredToolNames = mapToolNamesForPlatform(input.authority?.toolNames ?? input.base?.profile.toolNames ?? inheritedForegroundToolNames).filter((toolName) => !WORKER_ROOT_MEMORY_TOOL_NAMES.has(toolName));
+    const deniedForegroundTools = new Set(input.base ? [] : (input.foregroundEnvelope?.deniedTools ?? []));
+    const uniqueToolNames = [
+        ...new Set(configuredToolNames.filter((toolName) => toolName !== "delegate" && !deniedForegroundTools.has(toolName))),
+    ];
+    if (input.authority?.toolNames?.includes("delegate")) {
+        return { ok: false, reason: "orchestration_tool_unavailable:delegate" };
+    }
     const unavailableTools = uniqueToolNames.filter((toolName) => !AVAILABLE_TOOL_NAMES.has(toolName));
     if (unavailableTools.length > 0) {
         return { ok: false, reason: `orchestration_tool_unavailable:${unavailableTools.join(",")}` };
     }
-    const capabilities = new Set(input.authority?.capabilities ?? input.base?.profile.capabilityCeiling ?? DEFAULT_CAPABILITIES);
-    if (uniqueToolNames.includes("delegate") && inheritsDelegation) {
-        capabilities.add("workflow.delegate");
+    if (input.authority?.toolNames !== undefined) {
+        const inheritedSurface = new Set(input.base ? mapToolNamesForPlatform(input.base.profile.toolNames) : inheritedForegroundToolNames);
+        const foregroundTools = input.foregroundToolNames ?? input.foregroundEnvelope?.allowedTools ?? DEFAULT_TOOL_NAMES;
+        const boundedMemoryReadInherited = uniqueToolNames.includes(WORKER_MEMORY_READ_TOOL_NAME) &&
+            foregroundTools.includes(ROOT_MEMORY_TOOL_NAME) &&
+            input.foregroundEnvelope?.capabilities.includes("memory.query") === true;
+        const uninheritedTools = uniqueToolNames.filter((toolName) => !inheritedSurface.has(toolName) &&
+            !(toolName === WORKER_MEMORY_READ_TOOL_NAME && boundedMemoryReadInherited));
+        if (uninheritedTools.length > 0) {
+            return { ok: false, reason: `orchestration_tool_unavailable:${uninheritedTools.join(",")}` };
+        }
     }
+    const capabilities = new Set(input.authority?.capabilities ??
+        input.base?.profile.capabilityCeiling ??
+        input.foregroundEnvelope?.capabilities ??
+        DEFAULT_CAPABILITIES);
+    capabilities.delete("workflow.delegate");
+    capabilities.delete("memory.mutate");
     const capabilityList = [...capabilities];
     const toolNames = [];
     for (const toolName of uniqueToolNames) {
@@ -129,44 +179,55 @@ export function resolveWorkerAuthority(input) {
     const floorFailure = tokenBudgetFloorFailure(budget.maxTokens);
     if (floorFailure)
         return { ok: false, reason: floorFailure };
-    const role = input.authority?.role ?? input.base?.profile.role ?? "orchestrator";
-    const delegationLimits = input.base
-        ? input.base.profile.delegationLimits
-        : structuredClone(LEAN_WORKER_DELEGATION_LIMITS);
+    const role = input.authority?.role ?? input.base?.profile.role ?? "implementer";
+    const delegationLimits = structuredClone(LEAF_WORKER_DELEGATION_LIMITS);
+    const requestedWorkspacePath = input.authority?.path ?? input.base?.profile.workspacePath;
+    const workspacePath = requestedWorkspacePath
+        ? resolveWorkerWorkspacePath(input.cwd ?? process.cwd(), requestedWorkspacePath)
+        : undefined;
     const now = new Date().toISOString();
     const descriptor = {
+        baseProfileId: input.base?.profile.profileId ?? null,
         role,
         binding: resolvedModel.binding,
         capabilities: [...capabilities],
         toolNames,
         budget,
         delegationLimits: delegationLimits ?? null,
+        workspacePath: workspacePath ?? null,
         resourceProfileNames: input.base?.profile.resourceProfileNames ?? [],
+        dispatchProfileIds: input.base?.profile.dispatchProfileIds ?? [],
+        executionPolicy: input.base?.profile.executionPolicy ?? null,
+        requireIndependentVerification: input.base?.profile.requireIndependentVerification ?? false,
+        verificationProfileId: input.base?.profile.verificationProfileId ?? null,
     };
     const maxWallClockMs = budget.maxWallClockMs ?? 0;
     const wallClockLeaseTtlMs = maxWallClockMs > Number.MAX_SAFE_INTEGER - 30_000 ? Number.MAX_SAFE_INTEGER : maxWallClockMs + 30_000;
     const profile = {
         schemaVersion: ORCHESTRATION_SCHEMA_VERSION,
-        profileId: adaptiveProfileId(descriptor),
-        description: "Admission-time adaptive agent authority",
+        profileId: input.base?.profile.profileId ?? "",
+        description: input.base?.profile.description ?? "Admission-time adaptive agent authority",
         role,
         modelPolicy: { mode: "fixed", candidates: [resolvedModel.binding] },
         capabilityCeiling: [...capabilities],
         toolNames,
+        ...(workspacePath ? { workspacePath } : {}),
         resourceProfileNames: [...(input.base?.profile.resourceProfileNames ?? [])],
-        dispatchProfileIds: [],
+        dispatchProfileIds: [...(input.base?.profile.dispatchProfileIds ?? [])],
         ...(input.base?.profile.executionPolicy ? { executionPolicy: input.base.profile.executionPolicy } : {}),
-        ...(delegationLimits ? { delegationLimits: structuredClone(delegationLimits) } : {}),
+        delegationLimits,
         budget,
-        maxConcurrent: Number.MAX_SAFE_INTEGER,
+        maxConcurrent: input.base?.profile.maxConcurrent ?? Number.MAX_SAFE_INTEGER,
         leaseTtlMs: Math.max(input.base?.profile.leaseTtlMs ?? 0, wallClockLeaseTtlMs, 90_000),
         requireIndependentVerification: input.base?.profile.requireIndependentVerification ?? false,
         ...(input.base?.profile.verificationProfileId
             ? { verificationProfileId: input.base.profile.verificationProfileId }
             : {}),
-        createdAt: now,
-        updatedAt: now,
+        createdAt: input.base?.profile.createdAt ?? now,
+        updatedAt: input.base?.profile.updatedAt ?? now,
     };
+    const unchangedBase = input.base && isDeepStrictEqual(profile, input.base.profile);
+    profile.profileId = unchangedBase ? profile.profileId : adaptiveProfileId(descriptor);
     return {
         ok: true,
         shipment: {
@@ -176,8 +237,6 @@ export function resolveWorkerAuthority(input) {
             resourcePointers: structuredClone(input.base?.resourcePointers ?? []),
             ...(input.base?.soul ? { soul: input.base.soul } : {}),
         },
-        ...(input.authority?.readPaths ? { requestedReadPaths: [...input.authority.readPaths] } : {}),
-        ...(input.authority?.writePaths ? { requestedWritePaths: [...input.authority.writePaths] } : {}),
     };
 }
 //# sourceMappingURL=worker-authority-resolver.js.map

package/dist/core/delegation/worker-authority-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker-authority-resolver.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-authority-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAE7F,OAAO,EAEN,4BAA4B,GAG5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAElG,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAGzE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AAEpD,MAAM,kBAAkB,GAAG;IAC1B,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,OAAO;IACP,MAAM;IACN,QAAQ;IACR,sBAAsB;IACtB,UAAU;CACD,CAAC;AACX,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,0BAA0B,EAAE,UAAU,CAAC,CAAC,CAAC;AACvG,MAAM,oBAAoB,GAAiC;IAC1D,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,iBAAiB;IACjB,cAAc;IACd,cAAc;IACd,aAAa;IACb,cAAc;CACd,CAAC;AAoBF,SAAS,kBAAkB,CAC1B,QAA+C,EAC/C,SAAuD,EACvD,IAAuC,EACvC,eAAuC,EACvC,aAA4B;IAE5B,IAAI,QAAQ;QAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,SAAS,EAAE,KAAK,EAAE,QAAQ,IAAI,IAAI,EAAE,YAAY,CAAC,QAAQ,IAAI,eAAe,EAAE,QAAQ,CAAC;IACxG,MAAM,OAAO,GAAG,SAAS,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,YAAY,CAAC,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;IAC/F,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,UAAU,GAAG,QAAQ,KAAK,IAAI,EAAE,YAAY,CAAC,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;IACrG,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,aAAa,GAClB,SAAS,EAAE,aAAa;QACxB,CAAC,UAAU;YACV,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa;YACjC,CAAC,CAAC,eAAe,IAAI,QAAQ,KAAK,eAAe,CAAC,QAAQ,IAAI,OAAO,KAAK,eAAe,CAAC,EAAE;gBAC3F,CAAC,CAAC,yBAAyB,CAAC,eAAe,EAAE,SAAS,CAAC;gBACvD,CAAC,CAAC,aAAa;oBACd,CAAC,CAAC,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC;oBACrD,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACvC,OAAO,YAAY,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,SAAS,uBAAuB,CAAC,SAA6B;IAC7D,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,8BAA8B;QAC3E,CAAC,CAAC,sCAAsC,SAAS,QAAQ,8BAA8B,EAAE;QACzF,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,sBAAsB,CAAC,KAAqC;IAC3E,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClF,IAAI,YAAY;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,aAAa,GAAG,+BAA+B,CACpD,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,gBAAgB,CACtB,CAAC;QACF,IAAI,CAAC,aAAa;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;QACpF,OAAO;YACN,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE;gBACT,GAAG,KAAK,CAAC,IAAI;gBACb,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,YAAY,EAAE,aAAa,CAAC,OAAO;gBACnC,OAAO,EAAE;oBACR,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO;oBACrB,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;iBACnE;aACD;SACD,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CACjC,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,aAAa,CACnB,CAAC;IACF,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC3E,MAAM,aAAa,GAAG,+BAA+B,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5G,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAEpF,MAAM,mBAAmB,GAAG,uBAAuB,CAClD,KAAK,CAAC,SAAS,EAAE,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB,CACjF,CAAC;IACF,MAAM,kBAAkB,GACvB,KAAK,CAAC,SAAS,EAAE,YAAY,KAAK,SAAS;QAC3C,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YACxB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,kBAAkB,GACvB,kBAAkB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC9D,CAAC,CAAC,CAAC,GAAG,mBAAmB,EAAE,UAAU,CAAC;QACtC,CAAC,CAAC,mBAAmB,CAAC;IACxB,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACzD,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnG,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC3B,KAAK,CAAC,SAAS,EAAE,YAAY,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB,IAAI,oBAAoB,CAC9F,CAAC;IACF,IAAI,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,kBAAkB,EAAE,CAAC;QAChE,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;IACzC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,QAAQ,EAAE,EAAE,CAAC;QACzF,IAAI,yBAAyB,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;YACzD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,SAAS;QACV,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,QAAQ,EAAE,EAAE,CAAC;QACnF,CAAC;IACF,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC5F,MAAM,YAAY,GAAG,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC;IACjF,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI;QAClC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB;QACrC,CAAC,CAAC,eAAe,CAAC,6BAA6B,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG;QAClB,IAAI;QACJ,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;QAC/B,SAAS;QACT,MAAM;QACN,gBAAgB,EAAE,gBAAgB,IAAI,IAAI;QAC1C,oBAAoB,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,oBAAoB,IAAI,EAAE;KACpE,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;IAClD,MAAM,mBAAmB,GACxB,cAAc,GAAG,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,GAAG,MAAM,CAAC;IACvG,MAAM,OAAO,GAAyB;QACrC,aAAa,EAAE,4BAA4B;QAC3C,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC;QACxC,WAAW,EAAE,yCAAyC;QACtD,IAAI;QACJ,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;QACnE,iBAAiB,EAAE,CAAC,GAAG,YAAY,CAAC;QACpC,SAAS;QACT,oBAAoB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAC3E,kBAAkB,EAAE,EAAE;QACtB,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,eAAe,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM;QACN,aAAa,EAAE,MAAM,CAAC,gBAAgB;QACtC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC;QACtF,8BAA8B,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,8BAA8B,IAAI,KAAK;QAC3F,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,qBAAqB;YAC5C,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE;YACrE,CAAC,CAAC,EAAE,CAAC;QACN,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACd,CAAC;IACF,OAAO;QACN,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACT,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,YAAY,EAAE,aAAa,CAAC,OAAO;YACnC,OAAO;YACP,gBAAgB,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD;QACD,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChG,CAAC;AACH,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { Api, Model } from \"@caupulican/pi-ai\";\nimport { resolveModelThinkingLevel } from \"@caupulican/pi-ai/models\";\nimport { mapToolNamesForPlatform, STABLE_SHELL_TOOL_NAME } from \"../default-tool-surface.ts\";\nimport type { ModelRegistry } from \"../model-registry.ts\";\nimport {\n\ttype HarnessCapability,\n\tORCHESTRATION_SCHEMA_VERSION,\n\ttype OrchestrationModelBinding,\n\ttype OrchestrationProfile,\n} from \"../orchestration/contracts.ts\";\nimport { CLASSIFIED_LANE_TOOL_NAMES } from \"../orchestration/lane-tool-manifests.ts\";\nimport { resolvePinnedOrchestrationModel } from \"../orchestration/model-binding.ts\";\nimport { envelopeHasToolCapability, getToolCapabilityPolicy } from \"../tool-capability-policy.ts\";\nimport type { WorkerDelegationAuthorityRequest } from \"./worker-delegation-request.ts\";\nimport { LEAN_WORKER_DELEGATION_LIMITS } from \"./worker-fleet-limits.ts\";\nimport type { ResolvedWorkerProfile } from \"./worker-profile-resolver.ts\";\n\n/**\n * Smallest token grant a worker can survive on. A worker's first response pays the full\n * uncached system prompt (~3.3k budgeted tokens in the field), so grants below this floor\n * starve mid-flight with every tool call denied `token_budget_exhausted` — reject them at\n * admission with an explicit reason instead (field session 019fd4dc: 8-9k grants died in\n * 2-3 responses under face-value cache-read counting; the floor plus discounted counting\n * makes small grants viable again).\n */\nexport const MIN_VIABLE_WORKER_TOKEN_BUDGET = 5_000;\n\nconst DEFAULT_TOOL_NAMES = [\n\t\"read\",\n\t\"grep\",\n\t\"find\",\n\t\"ls\",\n\t\"write\",\n\t\"edit\",\n\t\"memory\",\n\tSTABLE_SHELL_TOOL_NAME,\n\t\"delegate\",\n] as const;\nconst AVAILABLE_TOOL_NAMES: ReadonlySet<string> = new Set([...CLASSIFIED_LANE_TOOL_NAMES, \"delegate\"]);\nconst DEFAULT_CAPABILITIES: readonly HarnessCapability[] = [\n\t\"filesystem.read\",\n\t\"filesystem.write\",\n\t\"worktree.read\",\n\t\"worktree.mutate\",\n\t\"process.exec\",\n\t\"network.http\",\n\t\"service.mcp\",\n\t\"memory.query\",\n];\n\nexport interface WorkerAuthorityResolutionInput {\n\tauthority?: WorkerDelegationAuthorityRequest;\n\tbase?: ResolvedWorkerProfile;\n\tmodelPin?: OrchestrationModelBinding;\n\tforegroundModel?: Model<Api>;\n\tmodelRegistry: ModelRegistry;\n\tisModelExhausted(model: Model<Api>): boolean;\n}\n\nexport type WorkerAuthorityResolution =\n\t| {\n\t\t\tok: true;\n\t\t\tshipment: ResolvedWorkerProfile;\n\t\t\trequestedReadPaths?: readonly string[];\n\t\t\trequestedWritePaths?: readonly string[];\n\t  }\n\t| { ok: false; reason: string };\n\nfunction selectModelBinding(\n\tmodelPin: OrchestrationModelBinding | undefined,\n\tauthority: WorkerDelegationAuthorityRequest | undefined,\n\tbase: ResolvedWorkerProfile | undefined,\n\tforegroundModel: Model<Api> | undefined,\n\tmodelRegistry: ModelRegistry,\n): OrchestrationModelBinding | undefined {\n\tif (modelPin) return { ...modelPin };\n\tconst provider = authority?.model?.provider ?? base?.modelBinding.provider ?? foregroundModel?.provider;\n\tconst modelId = authority?.model?.modelId ?? base?.modelBinding.modelId ?? foregroundModel?.id;\n\tif (!provider || !modelId) return undefined;\n\tconst sameAsBase = provider === base?.modelBinding.provider && modelId === base.modelBinding.modelId;\n\tconst selectedModel = modelRegistry.find(provider, modelId);\n\tconst thinkingLevel =\n\t\tauthority?.thinkingLevel ??\n\t\t(sameAsBase\n\t\t\t? base.modelBinding.thinkingLevel\n\t\t\t: foregroundModel && provider === foregroundModel.provider && modelId === foregroundModel.id\n\t\t\t\t? resolveModelThinkingLevel(foregroundModel, undefined)\n\t\t\t\t: selectedModel\n\t\t\t\t\t? resolveModelThinkingLevel(selectedModel, undefined)\n\t\t\t\t\t: \"off\");\n\treturn { provider, modelId, thinkingLevel };\n}\n\nfunction adaptiveProfileId(value: object): string {\n\treturn `adaptive-${createHash(\"sha256\").update(JSON.stringify(value)).digest(\"hex\").slice(0, 32)}`;\n}\n\nfunction tokenBudgetFloorFailure(maxTokens: number | undefined): string | undefined {\n\treturn maxTokens !== undefined && maxTokens < MIN_VIABLE_WORKER_TOKEN_BUDGET\n\t\t? `token_budget_below_floor:requested=${maxTokens},min=${MIN_VIABLE_WORKER_TOKEN_BUDGET}`\n\t\t: undefined;\n}\n\n/** Materialize free-form model choices as one immutable profile-shaped execution snapshot. */\nexport function resolveWorkerAuthority(input: WorkerAuthorityResolutionInput): WorkerAuthorityResolution {\n\tif (!input.authority && input.base) {\n\t\tconst floorFailure = tokenBudgetFloorFailure(input.base.profile.budget.maxTokens);\n\t\tif (floorFailure) return { ok: false, reason: floorFailure };\n\t\tif (!input.modelPin) return { ok: true, shipment: input.base };\n\t\tconst resolvedModel = resolvePinnedOrchestrationModel(\n\t\t\tinput.modelPin,\n\t\t\tinput.modelRegistry,\n\t\t\tinput.isModelExhausted,\n\t\t);\n\t\tif (!resolvedModel) return { ok: false, reason: \"orchestration_model_unavailable\" };\n\t\treturn {\n\t\t\tok: true,\n\t\t\tshipment: {\n\t\t\t\t...input.base,\n\t\t\t\tmodel: resolvedModel.model,\n\t\t\t\tmodelBinding: resolvedModel.binding,\n\t\t\t\tprofile: {\n\t\t\t\t\t...input.base.profile,\n\t\t\t\t\tmodelPolicy: { mode: \"fixed\", candidates: [resolvedModel.binding] },\n\t\t\t\t},\n\t\t\t},\n\t\t};\n\t}\n\tconst binding = selectModelBinding(\n\t\tinput.modelPin,\n\t\tinput.authority,\n\t\tinput.base,\n\t\tinput.foregroundModel,\n\t\tinput.modelRegistry,\n\t);\n\tif (!binding) return { ok: false, reason: \"orchestration_model_required\" };\n\tconst resolvedModel = resolvePinnedOrchestrationModel(binding, input.modelRegistry, input.isModelExhausted);\n\tif (!resolvedModel) return { ok: false, reason: \"orchestration_model_unavailable\" };\n\n\tconst configuredToolNames = mapToolNamesForPlatform(\n\t\tinput.authority?.toolNames ?? input.base?.profile.toolNames ?? DEFAULT_TOOL_NAMES,\n\t);\n\tconst inheritsDelegation =\n\t\tinput.authority?.capabilities === undefined &&\n\t\t(input.base === undefined ||\n\t\t\t(input.base.profile.toolNames.includes(\"delegate\") &&\n\t\t\t\tinput.base.profile.capabilityCeiling.includes(\"workflow.delegate\")));\n\tconst requestedToolNames =\n\t\tinheritsDelegation && !configuredToolNames.includes(\"delegate\")\n\t\t\t? [...configuredToolNames, \"delegate\"]\n\t\t\t: configuredToolNames;\n\tconst uniqueToolNames = [...new Set(requestedToolNames)];\n\tconst unavailableTools = uniqueToolNames.filter((toolName) => !AVAILABLE_TOOL_NAMES.has(toolName));\n\tif (unavailableTools.length > 0) {\n\t\treturn { ok: false, reason: `orchestration_tool_unavailable:${unavailableTools.join(\",\")}` };\n\t}\n\tconst capabilities = new Set<HarnessCapability>(\n\t\tinput.authority?.capabilities ?? input.base?.profile.capabilityCeiling ?? DEFAULT_CAPABILITIES,\n\t);\n\tif (uniqueToolNames.includes(\"delegate\") && inheritsDelegation) {\n\t\tcapabilities.add(\"workflow.delegate\");\n\t}\n\tconst capabilityList = [...capabilities];\n\tconst toolNames: string[] = [];\n\tfor (const toolName of uniqueToolNames) {\n\t\tconst policy = getToolCapabilityPolicy(toolName);\n\t\tif (!policy) return { ok: false, reason: `orchestration_tool_unclassified:${toolName}` };\n\t\tif (envelopeHasToolCapability(capabilityList, toolName)) {\n\t\t\ttoolNames.push(toolName);\n\t\t\tcontinue;\n\t\t}\n\t\tif (input.authority?.toolNames !== undefined) {\n\t\t\treturn { ok: false, reason: `orchestration_tool_capability_missing:${toolName}` };\n\t\t}\n\t}\n\tconst budget = structuredClone(input.authority?.budget ?? input.base?.profile.budget ?? {});\n\tconst floorFailure = tokenBudgetFloorFailure(budget.maxTokens);\n\tif (floorFailure) return { ok: false, reason: floorFailure };\n\tconst role = input.authority?.role ?? input.base?.profile.role ?? \"orchestrator\";\n\tconst delegationLimits = input.base\n\t\t? input.base.profile.delegationLimits\n\t\t: structuredClone(LEAN_WORKER_DELEGATION_LIMITS);\n\tconst now = new Date().toISOString();\n\tconst descriptor = {\n\t\trole,\n\t\tbinding: resolvedModel.binding,\n\t\tcapabilities: [...capabilities],\n\t\ttoolNames,\n\t\tbudget,\n\t\tdelegationLimits: delegationLimits ?? null,\n\t\tresourceProfileNames: input.base?.profile.resourceProfileNames ?? [],\n\t};\n\tconst maxWallClockMs = budget.maxWallClockMs ?? 0;\n\tconst wallClockLeaseTtlMs =\n\t\tmaxWallClockMs > Number.MAX_SAFE_INTEGER - 30_000 ? Number.MAX_SAFE_INTEGER : maxWallClockMs + 30_000;\n\tconst profile: OrchestrationProfile = {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tprofileId: adaptiveProfileId(descriptor),\n\t\tdescription: \"Admission-time adaptive agent authority\",\n\t\trole,\n\t\tmodelPolicy: { mode: \"fixed\", candidates: [resolvedModel.binding] },\n\t\tcapabilityCeiling: [...capabilities],\n\t\ttoolNames,\n\t\tresourceProfileNames: [...(input.base?.profile.resourceProfileNames ?? [])],\n\t\tdispatchProfileIds: [],\n\t\t...(input.base?.profile.executionPolicy ? { executionPolicy: input.base.profile.executionPolicy } : {}),\n\t\t...(delegationLimits ? { delegationLimits: structuredClone(delegationLimits) } : {}),\n\t\tbudget,\n\t\tmaxConcurrent: Number.MAX_SAFE_INTEGER,\n\t\tleaseTtlMs: Math.max(input.base?.profile.leaseTtlMs ?? 0, wallClockLeaseTtlMs, 90_000),\n\t\trequireIndependentVerification: input.base?.profile.requireIndependentVerification ?? false,\n\t\t...(input.base?.profile.verificationProfileId\n\t\t\t? { verificationProfileId: input.base.profile.verificationProfileId }\n\t\t\t: {}),\n\t\tcreatedAt: now,\n\t\tupdatedAt: now,\n\t};\n\treturn {\n\t\tok: true,\n\t\tshipment: {\n\t\t\tmodel: resolvedModel.model,\n\t\t\tmodelBinding: resolvedModel.binding,\n\t\t\tprofile,\n\t\t\tresourcePointers: structuredClone(input.base?.resourcePointers ?? []),\n\t\t\t...(input.base?.soul ? { soul: input.base.soul } : {}),\n\t\t},\n\t\t...(input.authority?.readPaths ? { requestedReadPaths: [...input.authority.readPaths] } : {}),\n\t\t...(input.authority?.writePaths ? { requestedWritePaths: [...input.authority.writePaths] } : {}),\n\t};\n}\n"]}
+{"version":3,"file":"worker-authority-resolver.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-authority-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAErE,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EACN,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,GAC7B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAEN,4BAA4B,GAI5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAElG,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAGvE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AAEpD,MAAM,kBAAkB,GAAG;IAC1B,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,OAAO;IACP,MAAM;IACN,QAAQ;IACR,sBAAsB;IACtB,mBAAmB;IACnB,OAAO;IACP,aAAa;CACJ,CAAC;AACX,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,0BAA0B,CAAC,CAAC;AACtF,MAAM,oBAAoB,GAAiC;IAC1D,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,iBAAiB;IACjB,cAAc;IACd,cAAc;IACd,aAAa;IACb,YAAY;CACZ,CAAC;AAqBF;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC3C,QAA+B,EAC/B,iBAAyB;IAEzB,IAAI,QAAQ,CAAC,OAAO,CAAC,qBAAqB,KAAK,iBAAiB;QAAE,OAAO,QAAQ,CAAC;IAClF,MAAM,OAAO,GAAyB;QACrC,GAAG,QAAQ,CAAC,OAAO;QACnB,qBAAqB,EAAE,iBAAiB;QACxC,SAAS,EAAE,iBAAiB,CAAC;YAC5B,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;YACzC,qBAAqB,EAAE,iBAAiB;SACxC,CAAC;KACF,CAAC;IACF,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,uBAAuB,CACtC,QAA+B,EAC/B,SAA4B;IAE5B,IAAI,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9E,MAAM,OAAO,GAAyB;QACrC,GAAG,QAAQ,CAAC,OAAO;QACnB,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC;QACzB,SAAS,EAAE,iBAAiB,CAAC;YAC5B,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;YACzC,SAAS;SACT,CAAC;KACF,CAAC;IACF,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAC1B,QAA+C,EAC/C,SAAuD,EACvD,IAAuC,EACvC,eAAuC,EACvC,uBAA+D,EAC/D,aAA4B;IAE5B,IAAI,QAAQ;QAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,SAAS,EAAE,KAAK,EAAE,QAAQ,IAAI,IAAI,EAAE,YAAY,CAAC,QAAQ,IAAI,eAAe,EAAE,QAAQ,CAAC;IACxG,MAAM,OAAO,GAAG,SAAS,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,YAAY,CAAC,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;IAC/F,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,UAAU,GAAG,QAAQ,KAAK,IAAI,EAAE,YAAY,CAAC,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;IACrG,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,aAAa,GAClB,SAAS,EAAE,aAAa;QACxB,CAAC,UAAU;YACV,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa;YACjC,CAAC,CAAC,eAAe,IAAI,QAAQ,KAAK,eAAe,CAAC,QAAQ,IAAI,OAAO,KAAK,eAAe,CAAC,EAAE;gBAC3F,CAAC,CAAC,CAAC,uBAAuB,IAAI,yBAAyB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;gBACpF,CAAC,CAAC,aAAa;oBACd,CAAC,CAAC,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC;oBACrD,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACvC,OAAO,YAAY,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,SAAS,uBAAuB,CAAC,SAA6B;IAC7D,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,8BAA8B;QAC3E,CAAC,CAAC,sCAAsC,SAAS,QAAQ,8BAA8B,EAAE;QACzF,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,sBAAsB,CAAC,KAAqC;IAC3E,MAAM,OAAO,GAAG,kBAAkB,CACjC,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,uBAAuB,EAC7B,KAAK,CAAC,aAAa,CACnB,CAAC;IACF,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC3E,MAAM,aAAa,GAAG,+BAA+B,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5G,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACpF,IACC,KAAK,CAAC,QAAQ;QACd,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,KAAK,SAAS;YACrC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,QAAQ;gBAC1D,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3D,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,KAAK,SAAS;gBAC5C,KAAK,CAAC,SAAS,CAAC,aAAa,KAAK,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,EACjE,CAAC;QACF,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,6BAA6B,KAAK,CAAC,SAAS,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,aAAa,EAAE;SACzG,CAAC;IACH,CAAC;IAED,MAAM,4BAA4B,GAAG,uBAAuB,CAC3D,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,kBAAkB,EAAE,YAAY,IAAI,kBAAkB,CACzF,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3G,MAAM,sBAAsB,GAAG,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC5E,6BAA6B,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC3C,CAAC;IACF,IAAI,sBAAsB,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,sBAAsB,EAAE,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACzE,6BAA6B,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC3C,CAAC;IACF,IAAI,iBAAiB,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,iBAAiB,EAAE,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,mBAAmB,GAAG,uBAAuB,CAClD,KAAK,CAAC,SAAS,EAAE,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,4BAA4B,CAC3F,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,6BAA6B,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;IACvG,MAAM,eAAe,GAAG;QACvB,GAAG,IAAI,GAAG,CACT,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CACzG;KACD,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnG,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC/B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,4BAA4B,CACjG,CAAC;QACF,MAAM,eAAe,GAAG,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,kBAAkB,EAAE,YAAY,IAAI,kBAAkB,CAAC;QAClH,MAAM,0BAA0B,GAC/B,eAAe,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YACtD,eAAe,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAC/C,KAAK,CAAC,kBAAkB,EAAE,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC;QAC1E,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAC9C,CAAC,QAAQ,EAAE,EAAE,CACZ,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC/B,CAAC,CAAC,QAAQ,KAAK,4BAA4B,IAAI,0BAA0B,CAAC,CAC3E,CAAC;QACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAC9F,CAAC;IACF,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC3B,KAAK,CAAC,SAAS,EAAE,YAAY;QAC5B,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB;QACrC,KAAK,CAAC,kBAAkB,EAAE,YAAY;QACtC,oBAAoB,CACrB,CAAC;IACF,YAAY,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACzC,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;IACzC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,QAAQ,EAAE,EAAE,CAAC;QACzF,IAAI,yBAAyB,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;YACzD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,SAAS;QACV,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,QAAQ,EAAE,EAAE,CAAC;QACnF,CAAC;IACF,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC5F,MAAM,YAAY,GAAG,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,aAAa,CAAC;IAChF,MAAM,gBAAgB,GAAG,eAAe,CAAC,6BAA6B,CAAC,CAAC;IACxE,MAAM,sBAAsB,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC;IAC1F,MAAM,aAAa,GAAG,sBAAsB;QAC3C,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC;QAChF,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG;QAClB,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;QACpD,IAAI;QACJ,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;QAC/B,SAAS;QACT,MAAM;QACN,gBAAgB,EAAE,gBAAgB,IAAI,IAAI;QAC1C,aAAa,EAAE,aAAa,IAAI,IAAI;QACpC,oBAAoB,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,oBAAoB,IAAI,EAAE;QACpE,kBAAkB,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,kBAAkB,IAAI,EAAE;QAChE,eAAe,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI;QAC5D,8BAA8B,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,8BAA8B,IAAI,KAAK;QAC3F,qBAAqB,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,qBAAqB,IAAI,IAAI;KACxE,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;IAClD,MAAM,mBAAmB,GACxB,cAAc,GAAG,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,GAAG,MAAM,CAAC;IACvG,MAAM,OAAO,GAAyB;QACrC,aAAa,EAAE,4BAA4B;QAC3C,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;QAC9C,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,IAAI,yCAAyC;QACzF,IAAI;QACJ,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;QACnE,iBAAiB,EAAE,CAAC,GAAG,YAAY,CAAC;QACpC,SAAS;QACT,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,oBAAoB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAC3E,kBAAkB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACvE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,gBAAgB;QAChB,MAAM;QACN,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,gBAAgB;QAC3E,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC;QACtF,8BAA8B,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,8BAA8B,IAAI,KAAK;QAC3F,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,qBAAqB;YAC5C,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE;YACrE,CAAC,CAAC,EAAE,CAAC;QACN,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,GAAG;QAC/C,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,GAAG;KAC/C,CAAC;IACF,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,IAAI,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnF,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACtF,OAAO;QACN,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACT,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,YAAY,EAAE,aAAa,CAAC,OAAO;YACnC,OAAO;YACP,gBAAgB,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD;KACD,CAAC;AACH,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport type { Api, Model } from \"@caupulican/pi-ai\";\nimport { resolveModelThinkingLevel } from \"@caupulican/pi-ai/models\";\nimport type { CapabilityEnvelope } from \"../autonomy/contracts.ts\";\nimport { mapToolNamesForPlatform, STABLE_SHELL_TOOL_NAME } from \"../default-tool-surface.ts\";\nimport {\n\tROOT_MEMORY_TOOL_NAME,\n\tWORKER_MEMORY_READ_TOOL_NAME,\n\tWORKER_ROOT_MEMORY_TOOL_NAMES,\n} from \"../memory/worker-memory-tools.ts\";\nimport type { ModelRegistry } from \"../model-registry.ts\";\nimport {\n\ttype HarnessCapability,\n\tORCHESTRATION_SCHEMA_VERSION,\n\ttype OrchestrationModelBinding,\n\ttype OrchestrationProfile,\n\ttype OrchestrationThinkingLevel,\n} from \"../orchestration/contracts.ts\";\nimport { CLASSIFIED_LANE_TOOL_NAMES } from \"../orchestration/lane-tool-manifests.ts\";\nimport { resolvePinnedOrchestrationModel } from \"../orchestration/model-binding.ts\";\nimport { envelopeHasToolCapability, getToolCapabilityPolicy } from \"../tool-capability-policy.ts\";\nimport type { WorkerDelegationAuthorityRequest } from \"./worker-delegation-request.ts\";\nimport { LEAF_WORKER_DELEGATION_LIMITS } from \"./worker-fleet-limits.ts\";\nimport { resolveWorkerWorkspacePath } from \"./worker-machine-scope.ts\";\nimport type { ResolvedWorkerProfile } from \"./worker-profile-resolver.ts\";\n\n/**\n * Smallest token grant a worker can survive on. A worker's first response pays the full\n * uncached system prompt (~3.3k budgeted tokens in the field), so grants below this floor\n * starve mid-flight with every tool call denied `token_budget_exhausted` — reject them at\n * admission with an explicit reason instead (field session 019fd4dc: 8-9k grants died in\n * 2-3 responses under face-value cache-read counting; the floor plus discounted counting\n * makes small grants viable again).\n */\nexport const MIN_VIABLE_WORKER_TOKEN_BUDGET = 5_000;\n\nconst DEFAULT_TOOL_NAMES = [\n\t\"read\",\n\t\"grep\",\n\t\"find\",\n\t\"ls\",\n\t\"write\",\n\t\"edit\",\n\t\"python\",\n\tSTABLE_SHELL_TOOL_NAME,\n\t\"artifact_retrieve\",\n\t\"skill\",\n\t\"skill_audit\",\n] as const;\nconst AVAILABLE_TOOL_NAMES: ReadonlySet<string> = new Set(CLASSIFIED_LANE_TOOL_NAMES);\nconst DEFAULT_CAPABILITIES: readonly HarnessCapability[] = [\n\t\"filesystem.read\",\n\t\"filesystem.write\",\n\t\"worktree.read\",\n\t\"worktree.mutate\",\n\t\"process.exec\",\n\t\"network.http\",\n\t\"service.mcp\",\n\t\"skill.read\",\n];\nexport interface WorkerAuthorityResolutionInput {\n\tauthority?: WorkerDelegationAuthorityRequest;\n\tbase?: ResolvedWorkerProfile;\n\tmodelPin?: OrchestrationModelBinding;\n\tforegroundModel?: Model<Api>;\n\tforegroundThinkingLevel?: OrchestrationThinkingLevel;\n\tforegroundToolNames?: readonly string[];\n\tforegroundEnvelope?: CapabilityEnvelope;\n\tcwd?: string;\n\tmodelRegistry: ModelRegistry;\n\tisModelExhausted(model: Model<Api>): boolean;\n}\n\nexport type WorkerAuthorityResolution =\n\t| {\n\t\t\tok: true;\n\t\t\tshipment: ResolvedWorkerProfile;\n\t  }\n\t| { ok: false; reason: string };\n\n/**\n * Bind a compiled implementation profile to the compiled verifier identity it will persist.\n * Verifier admission can legitimately derive a new immutable profile id (for example when the\n * host forces a legacy delegation-capable preset to the leaf contract), so retaining the\n * configured source id would make the execution contract internally inconsistent. Rebinding changes compiled\n * content and therefore derives a fresh implementation identity as well.\n */\nexport function bindCompiledVerifierIdentity(\n\tshipment: ResolvedWorkerProfile,\n\tverifierProfileId: string,\n): ResolvedWorkerProfile {\n\tif (shipment.profile.verificationProfileId === verifierProfileId) return shipment;\n\tconst profile: OrchestrationProfile = {\n\t\t...shipment.profile,\n\t\tverificationProfileId: verifierProfileId,\n\t\tprofileId: adaptiveProfileId({\n\t\t\tbaseProfileId: shipment.profile.profileId,\n\t\t\tverificationProfileId: verifierProfileId,\n\t\t}),\n\t};\n\treturn { ...shipment, profile };\n}\n\n/** Bind the immutable profile snapshot to the exact native tools its host plan materialized. */\nexport function bindCompiledToolSurface(\n\tshipment: ResolvedWorkerProfile,\n\ttoolNames: readonly string[],\n): ResolvedWorkerProfile {\n\tif (isDeepStrictEqual(shipment.profile.toolNames, toolNames)) return shipment;\n\tconst profile: OrchestrationProfile = {\n\t\t...shipment.profile,\n\t\ttoolNames: [...toolNames],\n\t\tprofileId: adaptiveProfileId({\n\t\t\tbaseProfileId: shipment.profile.profileId,\n\t\t\ttoolNames,\n\t\t}),\n\t};\n\treturn { ...shipment, profile };\n}\n\nfunction selectModelBinding(\n\tmodelPin: OrchestrationModelBinding | undefined,\n\tauthority: WorkerDelegationAuthorityRequest | undefined,\n\tbase: ResolvedWorkerProfile | undefined,\n\tforegroundModel: Model<Api> | undefined,\n\tforegroundThinkingLevel: OrchestrationThinkingLevel | undefined,\n\tmodelRegistry: ModelRegistry,\n): OrchestrationModelBinding | undefined {\n\tif (modelPin) return { ...modelPin };\n\tconst provider = authority?.model?.provider ?? base?.modelBinding.provider ?? foregroundModel?.provider;\n\tconst modelId = authority?.model?.modelId ?? base?.modelBinding.modelId ?? foregroundModel?.id;\n\tif (!provider || !modelId) return undefined;\n\tconst sameAsBase = provider === base?.modelBinding.provider && modelId === base.modelBinding.modelId;\n\tconst selectedModel = modelRegistry.find(provider, modelId);\n\tconst thinkingLevel =\n\t\tauthority?.thinkingLevel ??\n\t\t(sameAsBase\n\t\t\t? base.modelBinding.thinkingLevel\n\t\t\t: foregroundModel && provider === foregroundModel.provider && modelId === foregroundModel.id\n\t\t\t\t? (foregroundThinkingLevel ?? resolveModelThinkingLevel(foregroundModel, undefined))\n\t\t\t\t: selectedModel\n\t\t\t\t\t? resolveModelThinkingLevel(selectedModel, undefined)\n\t\t\t\t\t: \"off\");\n\treturn { provider, modelId, thinkingLevel };\n}\n\nfunction adaptiveProfileId(value: object): string {\n\treturn `adaptive-${createHash(\"sha256\").update(JSON.stringify(value)).digest(\"hex\").slice(0, 32)}`;\n}\n\nfunction tokenBudgetFloorFailure(maxTokens: number | undefined): string | undefined {\n\treturn maxTokens !== undefined && maxTokens < MIN_VIABLE_WORKER_TOKEN_BUDGET\n\t\t? `token_budget_below_floor:requested=${maxTokens},min=${MIN_VIABLE_WORKER_TOKEN_BUDGET}`\n\t\t: undefined;\n}\n\n/** Materialize free-form model choices as one immutable profile-shaped execution snapshot. */\nexport function resolveWorkerAuthority(input: WorkerAuthorityResolutionInput): WorkerAuthorityResolution {\n\tconst binding = selectModelBinding(\n\t\tinput.modelPin,\n\t\tinput.authority,\n\t\tinput.base,\n\t\tinput.foregroundModel,\n\t\tinput.foregroundThinkingLevel,\n\t\tinput.modelRegistry,\n\t);\n\tif (!binding) return { ok: false, reason: \"orchestration_model_required\" };\n\tconst resolvedModel = resolvePinnedOrchestrationModel(binding, input.modelRegistry, input.isModelExhausted);\n\tif (!resolvedModel) return { ok: false, reason: \"orchestration_model_unavailable\" };\n\tif (\n\t\tinput.modelPin &&\n\t\t((input.authority?.model !== undefined &&\n\t\t\t(input.authority.model.provider !== input.modelPin.provider ||\n\t\t\t\tinput.authority.model.modelId !== input.modelPin.modelId)) ||\n\t\t\t(input.authority?.thinkingLevel !== undefined &&\n\t\t\t\tinput.authority.thinkingLevel !== input.modelPin.thinkingLevel))\n\t) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\treason: `worker_model_pin_conflict:${input.authority?.role ?? input.base?.profile.role ?? \"implementer\"}`,\n\t\t};\n\t}\n\n\tconst inheritedForegroundToolNames = mapToolNamesForPlatform(\n\t\tinput.foregroundToolNames ?? input.foregroundEnvelope?.allowedTools ?? DEFAULT_TOOL_NAMES,\n\t).filter((toolName) => AVAILABLE_TOOL_NAMES.has(toolName) && !WORKER_ROOT_MEMORY_TOOL_NAMES.has(toolName));\n\tconst requestedForbiddenTool = input.authority?.toolNames?.find((toolName) =>\n\t\tWORKER_ROOT_MEMORY_TOOL_NAMES.has(toolName),\n\t);\n\tif (requestedForbiddenTool) {\n\t\treturn { ok: false, reason: `orchestration_tool_unavailable:${requestedForbiddenTool}` };\n\t}\n\tconst baseForbiddenTool = input.base?.profile.toolNames.find((toolName) =>\n\t\tWORKER_ROOT_MEMORY_TOOL_NAMES.has(toolName),\n\t);\n\tif (baseForbiddenTool) {\n\t\treturn { ok: false, reason: `orchestration_tool_unavailable:${baseForbiddenTool}` };\n\t}\n\tconst configuredToolNames = mapToolNamesForPlatform(\n\t\tinput.authority?.toolNames ?? input.base?.profile.toolNames ?? inheritedForegroundToolNames,\n\t).filter((toolName) => !WORKER_ROOT_MEMORY_TOOL_NAMES.has(toolName));\n\tconst deniedForegroundTools = new Set(input.base ? [] : (input.foregroundEnvelope?.deniedTools ?? []));\n\tconst uniqueToolNames = [\n\t\t...new Set(\n\t\t\tconfiguredToolNames.filter((toolName) => toolName !== \"delegate\" && !deniedForegroundTools.has(toolName)),\n\t\t),\n\t];\n\tif (input.authority?.toolNames?.includes(\"delegate\")) {\n\t\treturn { ok: false, reason: \"orchestration_tool_unavailable:delegate\" };\n\t}\n\tconst unavailableTools = uniqueToolNames.filter((toolName) => !AVAILABLE_TOOL_NAMES.has(toolName));\n\tif (unavailableTools.length > 0) {\n\t\treturn { ok: false, reason: `orchestration_tool_unavailable:${unavailableTools.join(\",\")}` };\n\t}\n\tif (input.authority?.toolNames !== undefined) {\n\t\tconst inheritedSurface = new Set(\n\t\t\tinput.base ? mapToolNamesForPlatform(input.base.profile.toolNames) : inheritedForegroundToolNames,\n\t\t);\n\t\tconst foregroundTools = input.foregroundToolNames ?? input.foregroundEnvelope?.allowedTools ?? DEFAULT_TOOL_NAMES;\n\t\tconst boundedMemoryReadInherited =\n\t\t\tuniqueToolNames.includes(WORKER_MEMORY_READ_TOOL_NAME) &&\n\t\t\tforegroundTools.includes(ROOT_MEMORY_TOOL_NAME) &&\n\t\t\tinput.foregroundEnvelope?.capabilities.includes(\"memory.query\") === true;\n\t\tconst uninheritedTools = uniqueToolNames.filter(\n\t\t\t(toolName) =>\n\t\t\t\t!inheritedSurface.has(toolName) &&\n\t\t\t\t!(toolName === WORKER_MEMORY_READ_TOOL_NAME && boundedMemoryReadInherited),\n\t\t);\n\t\tif (uninheritedTools.length > 0) {\n\t\t\treturn { ok: false, reason: `orchestration_tool_unavailable:${uninheritedTools.join(\",\")}` };\n\t\t}\n\t}\n\tconst capabilities = new Set<HarnessCapability>(\n\t\tinput.authority?.capabilities ??\n\t\t\tinput.base?.profile.capabilityCeiling ??\n\t\t\tinput.foregroundEnvelope?.capabilities ??\n\t\t\tDEFAULT_CAPABILITIES,\n\t);\n\tcapabilities.delete(\"workflow.delegate\");\n\tcapabilities.delete(\"memory.mutate\");\n\tconst capabilityList = [...capabilities];\n\tconst toolNames: string[] = [];\n\tfor (const toolName of uniqueToolNames) {\n\t\tconst policy = getToolCapabilityPolicy(toolName);\n\t\tif (!policy) return { ok: false, reason: `orchestration_tool_unclassified:${toolName}` };\n\t\tif (envelopeHasToolCapability(capabilityList, toolName)) {\n\t\t\ttoolNames.push(toolName);\n\t\t\tcontinue;\n\t\t}\n\t\tif (input.authority?.toolNames !== undefined) {\n\t\t\treturn { ok: false, reason: `orchestration_tool_capability_missing:${toolName}` };\n\t\t}\n\t}\n\tconst budget = structuredClone(input.authority?.budget ?? input.base?.profile.budget ?? {});\n\tconst floorFailure = tokenBudgetFloorFailure(budget.maxTokens);\n\tif (floorFailure) return { ok: false, reason: floorFailure };\n\tconst role = input.authority?.role ?? input.base?.profile.role ?? \"implementer\";\n\tconst delegationLimits = structuredClone(LEAF_WORKER_DELEGATION_LIMITS);\n\tconst requestedWorkspacePath = input.authority?.path ?? input.base?.profile.workspacePath;\n\tconst workspacePath = requestedWorkspacePath\n\t\t? resolveWorkerWorkspacePath(input.cwd ?? process.cwd(), requestedWorkspacePath)\n\t\t: undefined;\n\tconst now = new Date().toISOString();\n\tconst descriptor = {\n\t\tbaseProfileId: input.base?.profile.profileId ?? null,\n\t\trole,\n\t\tbinding: resolvedModel.binding,\n\t\tcapabilities: [...capabilities],\n\t\ttoolNames,\n\t\tbudget,\n\t\tdelegationLimits: delegationLimits ?? null,\n\t\tworkspacePath: workspacePath ?? null,\n\t\tresourceProfileNames: input.base?.profile.resourceProfileNames ?? [],\n\t\tdispatchProfileIds: input.base?.profile.dispatchProfileIds ?? [],\n\t\texecutionPolicy: input.base?.profile.executionPolicy ?? null,\n\t\trequireIndependentVerification: input.base?.profile.requireIndependentVerification ?? false,\n\t\tverificationProfileId: input.base?.profile.verificationProfileId ?? null,\n\t};\n\tconst maxWallClockMs = budget.maxWallClockMs ?? 0;\n\tconst wallClockLeaseTtlMs =\n\t\tmaxWallClockMs > Number.MAX_SAFE_INTEGER - 30_000 ? Number.MAX_SAFE_INTEGER : maxWallClockMs + 30_000;\n\tconst profile: OrchestrationProfile = {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tprofileId: input.base?.profile.profileId ?? \"\",\n\t\tdescription: input.base?.profile.description ?? \"Admission-time adaptive agent authority\",\n\t\trole,\n\t\tmodelPolicy: { mode: \"fixed\", candidates: [resolvedModel.binding] },\n\t\tcapabilityCeiling: [...capabilities],\n\t\ttoolNames,\n\t\t...(workspacePath ? { workspacePath } : {}),\n\t\tresourceProfileNames: [...(input.base?.profile.resourceProfileNames ?? [])],\n\t\tdispatchProfileIds: [...(input.base?.profile.dispatchProfileIds ?? [])],\n\t\t...(input.base?.profile.executionPolicy ? { executionPolicy: input.base.profile.executionPolicy } : {}),\n\t\tdelegationLimits,\n\t\tbudget,\n\t\tmaxConcurrent: input.base?.profile.maxConcurrent ?? Number.MAX_SAFE_INTEGER,\n\t\tleaseTtlMs: Math.max(input.base?.profile.leaseTtlMs ?? 0, wallClockLeaseTtlMs, 90_000),\n\t\trequireIndependentVerification: input.base?.profile.requireIndependentVerification ?? false,\n\t\t...(input.base?.profile.verificationProfileId\n\t\t\t? { verificationProfileId: input.base.profile.verificationProfileId }\n\t\t\t: {}),\n\t\tcreatedAt: input.base?.profile.createdAt ?? now,\n\t\tupdatedAt: input.base?.profile.updatedAt ?? now,\n\t};\n\tconst unchangedBase = input.base && isDeepStrictEqual(profile, input.base.profile);\n\tprofile.profileId = unchangedBase ? profile.profileId : adaptiveProfileId(descriptor);\n\treturn {\n\t\tok: true,\n\t\tshipment: {\n\t\t\tmodel: resolvedModel.model,\n\t\t\tmodelBinding: resolvedModel.binding,\n\t\t\tprofile,\n\t\t\tresourcePointers: structuredClone(input.base?.resourcePointers ?? []),\n\t\t\t...(input.base?.soul ? { soul: input.base.soul } : {}),\n\t\t},\n\t};\n}\n"]}

package/dist/core/delegation/worker-claim.d.ts

@@ -78,8 +78,7 @@ export declare function validateWorkerClaim(args: {
  */
 export declare function reviewManagedLaneChangedFiles(args: {
     changedFiles: readonly string[];
-    /** The scope to validate against -- e.g. the session's active `CapabilityEnvelope`, until a
-     * per-launch tmux standing grant envelope lands in a later wave (documented follow-up). */
+    /** The immutable managed-launch profile scope to validate against. */
     envelope: Pick<CapabilityEnvelope, "allowedPaths" | "deniedPaths">;
     cwd?: string;
 }): {

package/dist/core/delegation/worker-claim.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker-claim.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-claim.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAM5G,eAAO,MAAM,8BAA8B,QAAoB,CAAC;AAChE,eAAO,MAAM,8BAA8B,QAAoB,CAAC;AAChE,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C,eAAO,MAAM,8BAA8B,OAAQ,CAAC;AACpD,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAClD,eAAO,MAAM,mCAAmC,OAAQ,CAAC;AACzD,eAAO,MAAM,iCAAiC,MAAM,CAAC;AACrD,eAAO,MAAM,0CAA0C,MAAM,CAAC;AAC9D,eAAO,MAAM,sCAAsC,MAAM,CAAC;AAC1D,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD,eAAO,MAAM,8CAA8C,MAAM,CAAC;AAClE,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAChD,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAEtD,MAAM,WAAW,yBAAyB;IACzC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACpB;AAyBD,uGAAuG;AACvG,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,yBAAyB,CAEtG;AAED,kGAAkG;AAClG,wBAAgB,qCAAqC,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,yBAAyB,CAO1G;AAmCD,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,MAAM,CAMzE;AAuBD,wBAAgB,yBAAyB,CACxC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,GAClB,MAAM,EAAE,CAWV;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAE9E;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAElF;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAuGvE;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKvF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,WAAW,GAAG,WAAW,CAE1E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAOlE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAWhE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,WAAW,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAGlH;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,WAAW,CAAC;IACnB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACb,GAAG,WAAW,CAwId;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IACnD,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC;+FAC2F;IAC3F,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,cAAc,GAAG,aAAa,CAAC,CAAC;IACnE,GAAG,CAAC,EAAE,MAAM,CAAC;CACb,GAAG;IAAE,cAAc,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAwClD"}
+{"version":3,"file":"worker-claim.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-claim.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAM5G,eAAO,MAAM,8BAA8B,QAAoB,CAAC;AAChE,eAAO,MAAM,8BAA8B,QAAoB,CAAC;AAChE,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C,eAAO,MAAM,8BAA8B,OAAQ,CAAC;AACpD,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAClD,eAAO,MAAM,mCAAmC,OAAQ,CAAC;AACzD,eAAO,MAAM,iCAAiC,MAAM,CAAC;AACrD,eAAO,MAAM,0CAA0C,MAAM,CAAC;AAC9D,eAAO,MAAM,sCAAsC,MAAM,CAAC;AAC1D,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD,eAAO,MAAM,8CAA8C,MAAM,CAAC;AAClE,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAChD,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAEtD,MAAM,WAAW,yBAAyB;IACzC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACpB;AAyBD,uGAAuG;AACvG,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,yBAAyB,CAEtG;AAED,kGAAkG;AAClG,wBAAgB,qCAAqC,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,yBAAyB,CAO1G;AAmCD,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,MAAM,CAMzE;AAuBD,wBAAgB,yBAAyB,CACxC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,GAClB,MAAM,EAAE,CAWV;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAE9E;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAElF;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAuGvE;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKvF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,WAAW,GAAG,WAAW,CAE1E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAOlE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAWhE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,WAAW,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAGlH;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,WAAW,CAAC;IACnB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACb,GAAG,WAAW,CAwId;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IACnD,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,sEAAsE;IACtE,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,cAAc,GAAG,aAAa,CAAC,CAAC;IACnE,GAAG,CAAC,EAAE,MAAM,CAAC;CACb,GAAG;IAAE,cAAc,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAwClD"}

package/dist/core/delegation/worker-claim.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker-claim.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-claim.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,MAAM,CAAC,MAAM,8BAA8B,GAAG,iBAAiB,CAAC;AAChE,MAAM,CAAC,MAAM,8BAA8B,GAAG,iBAAiB,CAAC;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AACpD,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAClD,MAAM,CAAC,MAAM,mCAAmC,GAAG,KAAK,CAAC;AACzD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AACrD,MAAM,CAAC,MAAM,0CAA0C,GAAG,GAAG,CAAC;AAC9D,MAAM,CAAC,MAAM,sCAAsC,GAAG,GAAG,CAAC;AAC1D,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AACpD,MAAM,CAAC,MAAM,8CAA8C,GAAG,GAAG,CAAC;AAClE,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAChD,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AAOtD,SAAS,gCAAgC,CACxC,MAAyB,EACzB,YAAoB,EACpB,YAAoB,EACpB,IAAa;IAEb,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YAC1D,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACV,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3C,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,iCAAiC,CAAC,MAAyB;IAC1E,OAAO,gCAAgC,CAAC,MAAM,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,IAAI,CAAC,CAAC;AAClH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,qCAAqC,CAAC,MAAyB;IAC9E,OAAO,gCAAgC,CACtC,MAAM,EACN,8BAA8B,EAC9B,mCAAmC,EACnC,KAAK,CACL,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IAC1C,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,KAAc,EAAE,KAAa;IAC9D,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,kBAAkB,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;IACvF,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YAAE,kBAAkB,CAAC,GAAG,KAAK,IAAI,GAAG,2BAA2B,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc,EAAE,KAAa,EAAE,YAAoB;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,kBAAkB,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAChH,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;QAAE,kBAAkB,CAAC,GAAG,KAAK,YAAY,YAAY,cAAc,CAAC,CAAC;IACpG,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IACjD,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,EAAE,eAAe,EAAE,8BAA8B,CAAC,CAAC;IAClG,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,8BAA8B,EAAE,CAAC;QACzE,kBAAkB,CAAC,yBAAyB,8BAA8B,SAAS,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAC,KAAa,EAAE,MAAM,GAAG,EAAE;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,WAAW,GAAG,8BAA8B,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,8BAA8B,GAAG,WAAW,CAAC,GAAG,MAAM,EAAE,CAAC;AAC7F,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc,EAAE,KAAa,EAAE,YAAoB;IACrF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa,EAAE,YAAoB,EAAE,YAAoB;IACxG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,kBAAkB,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;QAAE,kBAAkB,CAAC,GAAG,KAAK,YAAY,YAAY,WAAW,CAAC,CAAC;IACjG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YAAE,kBAAkB,CAAC,GAAG,KAAK,IAAI,KAAK,yBAAyB,CAAC,CAAC;QAC5G,MAAM,IAAI,GAAG,yBAAyB,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,EAAE,YAAY,CAAC,CAAC;QAC7F,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,MAAyB,EACzB,YAAoB,EACpB,YAAoB;IAEpB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,MAAM,IAAI,YAAY;YAAE,MAAM;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAyB;IACnE,OAAO,iCAAiC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAyB;IACvE,OAAO,qCAAqC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACzD,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IACC,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,WAAW,EACrB,CAAC;QACF,kBAAkB,CAAC,0BAA0B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;QACpH,kBAAkB,CAAC,gCAAgC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACjG,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,YAAY,GACjB,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IACnH,IAAI,YAAY,IAAI,YAAY,CAAC,OAAO,KAAK,UAAU,IAAI,YAAY,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAChG,kBAAkB,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,sBAAsB,GAAgC,YAAY;QACvE,CAAC,CAAC;YACA,aAAa,EAAE,yBAAyB,CACvC,YAAY,CAAC,aAAa,EAC1B,kCAAkC,EAClC,8CAA8C,CAC9C;YACD,OAAO,EAAE,YAAY,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;YACtE,WAAW,EAAE,sBAAsB,CAClC,YAAY,CAAC,WAAW,EACxB,gCAAgC,EAChC,6BAA6B,EAC7B,kCAAkC,CAClC;SACD;QACF,CAAC,CAAC,SAAS,CAAC;IACb,IAAI,sBAAsB,IAAI,sBAAsB,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/E,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO;QACN,SAAS,EAAE,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,EAAE,iCAAiC,CAAC;QAC3G,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACxC,CAAC,CAAC;gBACA,iBAAiB,EAAE,yBAAyB,CAC3C,KAAK,CAAC,iBAAiB,EACvB,yBAAyB,EACzB,0CAA0C,CAC1C;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,MAAM;QACN,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC;QAClD,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,iCAAiC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,YAAY,EAAE,sBAAsB,CACnC,KAAK,CAAC,YAAY,EAClB,oBAAoB,EACpB,8BAA8B,EAC9B,mCAAmC,CACnC;QACD,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC/B,CAAC,CAAC;gBACA,QAAQ,EAAE,sBAAsB,CAC/B,KAAK,CAAC,QAAQ,EACd,gBAAgB,EAChB,yBAAyB,EACzB,8BAA8B,CAC9B;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YACpC,CAAC,CAAC;gBACA,aAAa,EAAE,yBAAyB,CACvC,KAAK,CAAC,aAAa,EACnB,qBAAqB,EACrB,sCAAsC,CACtC;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;YAChC,CAAC,CAAC;gBACA,SAAS,EAAE,yBAAyB,CACnC,KAAK,CAAC,SAAS,EACf,iBAAiB,EACjB,gCAAgC,CAChC;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;YACvC,CAAC,CAAC;gBACA,gBAAgB,EAAE,yBAAyB,CAC1C,KAAK,CAAC,gBAAgB,EACtB,wBAAwB,EACxB,gCAAgC,CAChC;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc,EAAE,QAAgB;IAC9E,OAAO,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CACjF,CAAC,EACD,kCAAkC,CAClC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAkB;IAC5D,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC3C,IAAI,CAAC;QACJ,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAkB;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAkE;IACxG,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,OAAO,KAAK,UAAU,IAAI,UAAU,CAAC,UAAU,KAAK,wBAAwB,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IASnC;IACA,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,IAAI,KAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC;SACxF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1C,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;QACpC,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,qBAAqB;YACjC,OAAO,EAAE,oBAAoB,KAAK,CAAC,SAAS,gCAAgC,OAAO,CAAC,EAAE,IAAI;SAC1F,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACN,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,wBAAwB;YACpC,OAAO,EAAE,8CAA8C,KAAK,CAAC,MAAM,IAAI;YACvE,OAAO,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACpG,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,gCAAgC,KAAK,CAAC,MAAM,IAAI;YACzD,OAAO,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACpG,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC1B,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,kDAAkD;SAC3D,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO;YACN,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,wBAAwB;YACpC,OAAO,EAAE,sEAAsE;YAC/E,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE;SAC1C,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClF,OAAO;gBACN,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,cAAc;gBACpB,UAAU,EAAE,oBAAoB;gBAChC,OAAO,EAAE,0EAA0E;aACnF,CAAC;QACH,CAAC;QAED,wFAAwF;QACxF,uFAAuF;QACvF,gDAAgD;QAChD,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAC9C,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC7D,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,cAAc,CAC9B;oBACC,IAAI;oBACJ,YAAY,EAAE,eAAe;oBAC7B,WAAW,EAAE,cAAc;iBAC3B,EACD,iBAAiB,CACjB,CAAC;gBAEF,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAChC,QAAQ,GAAG,IAAI,CAAC;oBAChB,MAAM;gBACP,CAAC;gBACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAChC,WAAW,GAAG,IAAI,CAAC;gBACpB,CAAC;YACF,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACN,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,cAAc;oBACpB,UAAU,EAAE,qBAAqB;oBACjC,OAAO,EAAE,wBAAwB,WAAW,gCAAgC;iBAC5E,CAAC;YACH,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClB,OAAO;oBACN,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,cAAc;oBACpB,UAAU,EAAE,4BAA4B;oBACxC,OAAO,EAAE,wBAAwB,WAAW,0BAA0B;iBACtE,CAAC;YACH,CAAC;QACF,CAAC;QAED,yDAAyD;QACzD,OAAO;YACN,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,wBAAwB;YACpC,OAAO,EAAE,6CAA6C;SACtD,CAAC;IACH,CAAC;IAED,OAAO;QACN,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,wCAAwC;KACjD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAM7C;IACA,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;QACvD,SAAS,EAAE,qBAAqB;QAChC,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,mCAAmC;QAC5C,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,qBAAqB;KACpC,CAAC,CAAC,YAAY,CAAC;IAChB,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,WAAW,GAAG,qBAAqB,CAAC;IAC1C,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACtC,OAAO,EAAE;YACR,EAAE,EAAE,WAAW;YACf,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE;gBACN,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,cAAc;gBACpB,UAAU,EAAE,CAAC;gBACb,UAAU,EAAE,qBAAqB;gBACjC,OAAO,EAAE,EAAE;aACX;YACD,QAAQ,EAAE;gBACT,EAAE,EAAE,WAAW;gBACf,YAAY,EAAE,CAAC,kBAAkB,CAAC;gBAClC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;gBACxC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;aACtC;SACD;QACD,KAAK,EAAE;YACN,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,mCAAmC;YAC5C,YAAY,EAAE,mBAAmB;YACjC,aAAa,EAAE,WAAW;SAC1B;QACD,GAAG,EAAE,IAAI,CAAC,GAAG;KACb,CAAC,CAAC;IACH,OAAO,EAAE,cAAc,EAAE,UAAU,CAAC,OAAO,KAAK,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;AAC9F,CAAC","sourcesContent":["import path from \"node:path\";\nimport { DEFAULT_MAX_BYTES } from \"@caupulican/pi-agent-core/truncate\";\nimport type { CapabilityEnvelope, GateOutcome, WorkerClaim, WorkerRequest } from \"../autonomy/contracts.ts\";\nimport { checkPathScope } from \"../autonomy/path-scope.ts\";\nimport { normalizeEvidenceBundleForStorage } from \"../research/evidence-bundle.ts\";\nimport { utf8PrefixByBytes } from \"../util/bounded-value.ts\";\nimport { isPlainRecord } from \"../util/value-guards.ts\";\n\nexport const MAX_WORKER_CLAIM_SUMMARY_CHARS = DEFAULT_MAX_BYTES;\nexport const MAX_WORKER_CLAIM_SUMMARY_BYTES = DEFAULT_MAX_BYTES;\nexport const MAX_WORKER_CLAIM_BLOCKERS = 32;\nexport const MAX_WORKER_CLAIM_BLOCKER_CHARS = 1_000;\nexport const MAX_WORKER_CLAIM_CHANGED_FILES = 128;\nexport const MAX_WORKER_CLAIM_CHANGED_FILE_CHARS = 2_048;\nexport const MAX_WORKER_CLAIM_REQUEST_ID_CHARS = 256;\nexport const MAX_WORKER_CLAIM_TERMINAL_ATTEMPT_ID_CHARS = 256;\nexport const MAX_WORKER_CLAIM_USAGE_REPORT_ID_CHARS = 256;\nexport const MAX_WORKER_CLAIM_TIMESTAMP_CHARS = 128;\nexport const MAX_WORKER_CLAIM_VERIFICATION_SUBJECT_ID_CHARS = 256;\nexport const MAX_WORKER_CLAIM_REASON_CODES = 32;\nexport const MAX_WORKER_CLAIM_REASON_CODE_CHARS = 128;\n\nexport interface BoundedWorkerClaimStrings {\n\tvalues: string[];\n\toverflowed: boolean;\n}\n\nfunction collectBoundedWorkerClaimStrings(\n\tvalues: readonly string[],\n\tmaximumCount: number,\n\tmaximumChars: number,\n\ttrim: boolean,\n): BoundedWorkerClaimStrings {\n\tconst bounded: string[] = [];\n\tconst seen = new Set<string>();\n\tlet overflowed = values.length > maximumCount;\n\tfor (let index = 0; index < Math.min(values.length, maximumCount); index++) {\n\t\tconst raw = values[index];\n\t\tif (typeof raw !== \"string\" || raw.length > maximumChars) {\n\t\t\toverflowed = true;\n\t\t\tcontinue;\n\t\t}\n\t\tconst normalized = trim ? raw.trim() : raw;\n\t\tif (!normalized || seen.has(normalized)) continue;\n\t\tseen.add(normalized);\n\t\tbounded.push(normalized);\n\t}\n\treturn { values: bounded, overflowed };\n}\n\n/** Native host observations may be reduced for terminal storage, but callers must surface overflow. */\nexport function collectBoundedWorkerClaimBlockers(values: readonly string[]): BoundedWorkerClaimStrings {\n\treturn collectBoundedWorkerClaimStrings(values, MAX_WORKER_CLAIM_BLOCKERS, MAX_WORKER_CLAIM_BLOCKER_CHARS, true);\n}\n\n/** Changed paths preserve their exact spelling; trimming a real path could change its meaning. */\nexport function collectBoundedWorkerClaimChangedFiles(values: readonly string[]): BoundedWorkerClaimStrings {\n\treturn collectBoundedWorkerClaimStrings(\n\t\tvalues,\n\t\tMAX_WORKER_CLAIM_CHANGED_FILES,\n\t\tMAX_WORKER_CLAIM_CHANGED_FILE_CHARS,\n\t\tfalse,\n\t);\n}\n\nfunction invalidWorkerClaim(message: string): never {\n\tthrow new Error(`Invalid worker claim: ${message}`);\n}\n\n/**\n * The worker boundary must not evaluate accessors from managed/external reports. Copy only own\n * data descriptors, then validate and construct a fresh contract object from the bounded values.\n */\nfunction ownWorkerClaimDataRecord(value: unknown, label: string): Record<string, unknown> {\n\tif (!isPlainRecord(value)) invalidWorkerClaim(`${label} must be a plain object.`);\n\tconst descriptors = Object.getOwnPropertyDescriptors(value);\n\tconst record: Record<string, unknown> = Object.create(null) as Record<string, unknown>;\n\tfor (const [key, descriptor] of Object.entries(descriptors)) {\n\t\tif (!(\"value\" in descriptor)) invalidWorkerClaim(`${label}.${key} must not be an accessor.`);\n\t\trecord[key] = descriptor.value;\n\t}\n\treturn record;\n}\n\nfunction requiredWorkerClaimString(value: unknown, label: string, maximumChars: number): string {\n\tif (typeof value !== \"string\" || value.length === 0) invalidWorkerClaim(`${label} must be a non-empty string.`);\n\tif (value.length > maximumChars) invalidWorkerClaim(`${label} exceeds ${maximumChars} characters.`);\n\treturn value;\n}\n\nfunction requiredWorkerClaimSummary(value: unknown): string {\n\tconst summary = requiredWorkerClaimString(value, \"claim.summary\", MAX_WORKER_CLAIM_SUMMARY_CHARS);\n\tif (Buffer.byteLength(summary, \"utf8\") > MAX_WORKER_CLAIM_SUMMARY_BYTES) {\n\t\tinvalidWorkerClaim(`claim.summary exceeds ${MAX_WORKER_CLAIM_SUMMARY_BYTES} bytes.`);\n\t}\n\treturn summary;\n}\n\n/** Bound a host-produced claim summary without splitting a UTF-8 code point. */\nexport function clipWorkerClaimSummary(value: string, suffix = \"\"): string {\n\tconst suffixBytes = Buffer.byteLength(suffix, \"utf8\");\n\tif (suffixBytes > MAX_WORKER_CLAIM_SUMMARY_BYTES) {\n\t\tthrow new TypeError(\"Worker claim summary suffix exceeds the inline output ceiling.\");\n\t}\n\treturn `${utf8PrefixByBytes(value, MAX_WORKER_CLAIM_SUMMARY_BYTES - suffixBytes)}${suffix}`;\n}\n\nfunction optionalWorkerClaimString(value: unknown, label: string, maximumChars: number): string | undefined {\n\tif (value === undefined) return undefined;\n\treturn requiredWorkerClaimString(value, label, maximumChars);\n}\n\nfunction workerClaimStringArray(value: unknown, label: string, maximumCount: number, maximumChars: number): string[] {\n\tif (!Array.isArray(value)) invalidWorkerClaim(`${label} must be an array.`);\n\tif (value.length > maximumCount) invalidWorkerClaim(`${label} exceeds ${maximumCount} entries.`);\n\tconst copied: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (let index = 0; index < value.length; index++) {\n\t\tconst descriptor = Object.getOwnPropertyDescriptor(value, String(index));\n\t\tif (!descriptor || !(\"value\" in descriptor)) invalidWorkerClaim(`${label}[${index}] must be a data value.`);\n\t\tconst item = requiredWorkerClaimString(descriptor.value, `${label}[${index}]`, maximumChars);\n\t\tif (seen.has(item)) continue;\n\t\tseen.add(item);\n\t\tcopied.push(item);\n\t}\n\treturn copied;\n}\n\nexport function boundedWorkerClaimStrings(\n\tvalues: readonly string[],\n\tmaximumCount: number,\n\tmaximumChars: number,\n): string[] {\n\tconst bounded: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const value of values) {\n\t\tconst normalized = value.trim().slice(0, maximumChars);\n\t\tif (!normalized || seen.has(normalized)) continue;\n\t\tseen.add(normalized);\n\t\tbounded.push(normalized);\n\t\tif (bounded.length >= maximumCount) break;\n\t}\n\treturn bounded;\n}\n\nexport function boundedWorkerClaimBlockers(values: readonly string[]): string[] {\n\treturn collectBoundedWorkerClaimBlockers(values).values;\n}\n\nexport function boundedWorkerClaimChangedFiles(values: readonly string[]): string[] {\n\treturn collectBoundedWorkerClaimChangedFiles(values).values;\n}\n\n/**\n * Applies the one mandatory bounded claim contract before persistence, review, finalization, or\n * artifact inspection. Host-built/native reports have already bounded their model output; foreign\n * reports must fit the exact same envelope and are rejected before cloning or getter invocation.\n */\nexport function normalizeWorkerClaimForHost(value: unknown): WorkerClaim {\n\tconst claim = ownWorkerClaimDataRecord(value, \"claim\");\n\tconst status = claim.status;\n\tif (\n\t\tstatus !== \"completed\" &&\n\t\tstatus !== \"partial\" &&\n\t\tstatus !== \"blocked\" &&\n\t\tstatus !== \"failed\" &&\n\t\tstatus !== \"cancelled\"\n\t) {\n\t\tinvalidWorkerClaim(\"claim.status is invalid.\");\n\t}\n\tif (claim.outputFormat !== undefined && claim.outputFormat !== \"structured\" && claim.outputFormat !== \"plain_text\") {\n\t\tinvalidWorkerClaim(\"claim.outputFormat is invalid.\");\n\t}\n\tif (claim.parentReviewRequired !== undefined && typeof claim.parentReviewRequired !== \"boolean\") {\n\t\tinvalidWorkerClaim(\"claim.parentReviewRequired must be boolean.\");\n\t}\n\tconst verification =\n\t\tclaim.verification === undefined ? undefined : ownWorkerClaimDataRecord(claim.verification, \"claim.verification\");\n\tif (verification && verification.verdict !== \"accepted\" && verification.verdict !== \"rejected\") {\n\t\tinvalidWorkerClaim(\"claim.verification.verdict is invalid.\");\n\t}\n\tconst normalizedVerification: WorkerClaim[\"verification\"] = verification\n\t\t? {\n\t\t\t\tsubjectTaskId: requiredWorkerClaimString(\n\t\t\t\t\tverification.subjectTaskId,\n\t\t\t\t\t\"claim.verification.subjectTaskId\",\n\t\t\t\t\tMAX_WORKER_CLAIM_VERIFICATION_SUBJECT_ID_CHARS,\n\t\t\t\t),\n\t\t\t\tverdict: verification.verdict === \"accepted\" ? \"accepted\" : \"rejected\",\n\t\t\t\treasonCodes: workerClaimStringArray(\n\t\t\t\t\tverification.reasonCodes,\n\t\t\t\t\t\"claim.verification.reasonCodes\",\n\t\t\t\t\tMAX_WORKER_CLAIM_REASON_CODES,\n\t\t\t\t\tMAX_WORKER_CLAIM_REASON_CODE_CHARS,\n\t\t\t\t),\n\t\t\t}\n\t\t: undefined;\n\tif (normalizedVerification && normalizedVerification.reasonCodes.length === 0) {\n\t\tinvalidWorkerClaim(\"claim.verification.reasonCodes must not be empty.\");\n\t}\n\treturn {\n\t\trequestId: requiredWorkerClaimString(claim.requestId, \"claim.requestId\", MAX_WORKER_CLAIM_REQUEST_ID_CHARS),\n\t\t...(claim.terminalAttemptId !== undefined\n\t\t\t? {\n\t\t\t\t\tterminalAttemptId: requiredWorkerClaimString(\n\t\t\t\t\t\tclaim.terminalAttemptId,\n\t\t\t\t\t\t\"claim.terminalAttemptId\",\n\t\t\t\t\t\tMAX_WORKER_CLAIM_TERMINAL_ATTEMPT_ID_CHARS,\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\tstatus,\n\t\tsummary: requiredWorkerClaimSummary(claim.summary),\n\t\t...(claim.outputFormat !== undefined ? { outputFormat: claim.outputFormat } : {}),\n\t\t...(claim.evidence !== undefined ? { evidence: normalizeEvidenceBundleForStorage(claim.evidence) } : {}),\n\t\tchangedFiles: workerClaimStringArray(\n\t\t\tclaim.changedFiles,\n\t\t\t\"claim.changedFiles\",\n\t\t\tMAX_WORKER_CLAIM_CHANGED_FILES,\n\t\t\tMAX_WORKER_CLAIM_CHANGED_FILE_CHARS,\n\t\t),\n\t\t...(claim.blockers !== undefined\n\t\t\t? {\n\t\t\t\t\tblockers: workerClaimStringArray(\n\t\t\t\t\t\tclaim.blockers,\n\t\t\t\t\t\t\"claim.blockers\",\n\t\t\t\t\t\tMAX_WORKER_CLAIM_BLOCKERS,\n\t\t\t\t\t\tMAX_WORKER_CLAIM_BLOCKER_CHARS,\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\t...(claim.usageReportId !== undefined\n\t\t\t? {\n\t\t\t\t\tusageReportId: requiredWorkerClaimString(\n\t\t\t\t\t\tclaim.usageReportId,\n\t\t\t\t\t\t\"claim.usageReportId\",\n\t\t\t\t\t\tMAX_WORKER_CLAIM_USAGE_REPORT_ID_CHARS,\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\t...(claim.createdAt !== undefined\n\t\t\t? {\n\t\t\t\t\tcreatedAt: optionalWorkerClaimString(\n\t\t\t\t\t\tclaim.createdAt,\n\t\t\t\t\t\t\"claim.createdAt\",\n\t\t\t\t\t\tMAX_WORKER_CLAIM_TIMESTAMP_CHARS,\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\t...(claim.parentReviewRequired !== undefined ? { parentReviewRequired: claim.parentReviewRequired } : {}),\n\t\t...(claim.parentReviewedAt !== undefined\n\t\t\t? {\n\t\t\t\t\tparentReviewedAt: optionalWorkerClaimString(\n\t\t\t\t\t\tclaim.parentReviewedAt,\n\t\t\t\t\t\t\"claim.parentReviewedAt\",\n\t\t\t\t\t\tMAX_WORKER_CLAIM_TIMESTAMP_CHARS,\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\t...(normalizedVerification ? { verification: normalizedVerification } : {}),\n\t};\n}\n\nexport function normalizeWorkerClaimReasonCode(value: unknown, fallback: string): string {\n\treturn (typeof value === \"string\" && value.trim() ? value.trim() : fallback).slice(\n\t\t0,\n\t\tMAX_WORKER_CLAIM_REASON_CODE_CHARS,\n\t);\n}\n\nexport function cloneWorkerClaimForStorage(claim: WorkerClaim): WorkerClaim {\n\treturn normalizeWorkerClaimForHost(claim);\n}\n\nexport function isWorkerClaim(value: unknown): value is WorkerClaim {\n\ttry {\n\t\tnormalizeWorkerClaimForHost(value);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport function requiresParentReview(claim: WorkerClaim): boolean {\n\tif (claim.status !== \"completed\") {\n\t\treturn true;\n\t}\n\tif (claim.blockers && claim.blockers.length > 0) {\n\t\treturn true;\n\t}\n\tif (claim.changedFiles.length > 0) {\n\t\treturn true;\n\t}\n\treturn false;\n}\n\n/**\n * True iff {@link validateWorkerClaim}'s gate would flag this claim \"ask-user\" /\n * \"parent_review_required\" (the two branches at :110 and :178 below) — an otherwise-completed\n * claim the parent must explicitly look at because it reports blockers, or reports file mutations\n * that passed path-scope validation. Reuses `validateWorkerClaim` itself rather than a\n * separately-maintained heuristic, so a persisted review marker can never drift from the\n * gate's actual verdict.\n */\nexport function isParentReviewRequired(args: { request: WorkerRequest; claim: WorkerClaim; cwd?: string }): boolean {\n\tconst acceptance = validateWorkerClaim(args);\n\treturn acceptance.outcome === \"ask-user\" && acceptance.reasonCode === \"parent_review_required\";\n}\n\nexport function validateWorkerClaim(args: {\n\trequest: WorkerRequest;\n\tclaim: WorkerClaim;\n\t/**\n\t * Baseline for relative paths — BOTH the runner's cwd-relative `changedFiles` and the\n\t * envelope's possibly-relative path scopes resolve against this. Defaults to process.cwd()\n\t * for callers whose session cwd is the process cwd.\n\t */\n\tcwd?: string;\n}): GateOutcome {\n\tconst { request } = args;\n\tlet claim: WorkerClaim;\n\ttry {\n\t\tclaim = normalizeWorkerClaimForHost(args.claim);\n\t} catch (error) {\n\t\treturn {\n\t\t\toutcome: \"block\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"invalid_worker_claim\",\n\t\t\tmessage: error instanceof Error ? error.message : \"Worker claim failed host validation.\",\n\t\t};\n\t}\n\tconst baseDir = args.cwd ?? process.cwd();\n\n\tif (claim.requestId !== request.id) {\n\t\treturn {\n\t\t\toutcome: \"block\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"request_id_mismatch\",\n\t\t\tmessage: `Claim requestId '${claim.requestId}' does not match request id '${request.id}'.`,\n\t\t};\n\t}\n\n\tif (claim.status === \"partial\") {\n\t\treturn {\n\t\t\toutcome: \"ask-user\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"parent_review_required\",\n\t\t\tmessage: `Worker finished with partial claim status '${claim.status}'.`,\n\t\t\tdetails: claim.blockers && claim.blockers.length > 0 ? { blockers: [...claim.blockers] } : undefined,\n\t\t};\n\t}\n\n\tif (claim.status !== \"completed\") {\n\t\treturn {\n\t\t\toutcome: \"block\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"worker_not_completed\",\n\t\t\tmessage: `Worker finished with status '${claim.status}'.`,\n\t\t\tdetails: claim.blockers && claim.blockers.length > 0 ? { blockers: [...claim.blockers] } : undefined,\n\t\t};\n\t}\n\n\tif (!claim.usageReportId) {\n\t\treturn {\n\t\t\toutcome: \"block\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"missing_usage_report\",\n\t\t\tmessage: \"Completed worker claim is missing usageReportId.\",\n\t\t};\n\t}\n\n\tif (claim.blockers && claim.blockers.length > 0) {\n\t\treturn {\n\t\t\toutcome: \"ask-user\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"parent_review_required\",\n\t\t\tmessage: \"Completed worker claim includes blockers and requires parent review.\",\n\t\t\tdetails: { blockers: [...claim.blockers] },\n\t\t};\n\t}\n\n\tif (claim.changedFiles.length > 0) {\n\t\tif (!request.envelope.allowedPaths || request.envelope.allowedPaths.length === 0) {\n\t\t\treturn {\n\t\t\t\toutcome: \"block\",\n\t\t\t\tgate: \"worker_claim\",\n\t\t\t\treasonCode: \"missing_path_scope\",\n\t\t\t\tmessage: \"Worker changed files but no allowedPaths are configured in the envelope.\",\n\t\t\t};\n\t\t}\n\n\t\t// The runner reports changed files relative to the session cwd — resolve file and scope\n\t\t// roots against the SAME baseline. Resolving per-root double-prefixed nested names and\n\t\t// let a denied subtree slip past the deny rule.\n\t\tconst resolvedAllowed = request.envelope.allowedPaths.map((p) => path.resolve(baseDir, p));\n\t\tconst resolvedDenied = request.envelope.deniedPaths?.map((p) => path.resolve(baseDir, p));\n\t\tfor (const changedFile of claim.changedFiles) {\n\t\t\tlet isInsideAny = false;\n\t\t\tlet isDenied = false;\n\n\t\t\tconst scopedChangedFile = path.resolve(baseDir, changedFile);\n\t\t\tfor (const root of resolvedAllowed) {\n\t\t\t\tconst decision = checkPathScope(\n\t\t\t\t\t{\n\t\t\t\t\t\troot,\n\t\t\t\t\t\tallowedPaths: resolvedAllowed,\n\t\t\t\t\t\tdeniedPaths: resolvedDenied,\n\t\t\t\t\t},\n\t\t\t\t\tscopedChangedFile,\n\t\t\t\t);\n\n\t\t\t\tif (decision.kind === \"denied\") {\n\t\t\t\t\tisDenied = true;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t\tif (decision.kind === \"inside\") {\n\t\t\t\t\tisInsideAny = true;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (isDenied) {\n\t\t\t\treturn {\n\t\t\t\t\toutcome: \"block\",\n\t\t\t\t\tgate: \"worker_claim\",\n\t\t\t\t\treasonCode: \"changed_file_denied\",\n\t\t\t\t\tmessage: `Worker changed file '${changedFile}' which matches a denied path.`,\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tif (!isInsideAny) {\n\t\t\t\treturn {\n\t\t\t\t\toutcome: \"block\",\n\t\t\t\t\tgate: \"worker_claim\",\n\t\t\t\t\treasonCode: \"changed_file_outside_scope\",\n\t\t\t\t\tmessage: `Worker changed file '${changedFile}' outside allowed scope.`,\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\t// Files are inside scope, but worker output is untrusted\n\t\treturn {\n\t\t\toutcome: \"ask-user\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"parent_review_required\",\n\t\t\tmessage: \"Worker changed files require parent review.\",\n\t\t};\n\t}\n\n\treturn {\n\t\toutcome: \"allow\",\n\t\tgate: \"worker_claim\",\n\t\treasonCode: \"allowed\",\n\t\tmessage: \"Worker claim is read-only and allowed.\",\n\t};\n}\n\n/**\n * Path-scope-only re-review for a SELF-REPORTED (out-of-process) worker's claimed `changedFiles`\n * -- e.g. a tmux worker's own completion report, which (unlike an in-process worker's) never\n * passed through this process's `applyWorkerActions` envelope enforcement before the write\n * happened; the tmux worker's tool loop runs in a separate process this session does not gate.\n * Reuses {@link validateWorkerClaim}'s exact symlink-safe scope check verbatim -- never\n * reimplement path resolution: synthesizes a minimal, always-\"completed\" request/claim pair\n * carrying only the reported `changedFiles` and the scope's `allowedPaths`/`deniedPaths`, so the\n * ONLY thing that can vary the verdict is the path-scope branch.\n *\n * Deliberately broader than {@link isParentReviewRequired}: that helper only flags the gate's\n * \"ask-user\" branch, which is correct for an in-process worker (a write that would have been\n * \"block\"-worthy was already refused before it could happen, by the SAME envelope, via\n * `applyWorkerActions`). A self-reported claim has no such backstop -- an out-of-scope or denied\n * path already happened on the real filesystem whether or not this gate would allow it, so here\n * ANY non-\"allow\" verdict (in scope, out of scope, or no scope configured at all) means a human\n * must look, not \"the write didn't happen\".\n */\nexport function reviewManagedLaneChangedFiles(args: {\n\tchangedFiles: readonly string[];\n\t/** The scope to validate against -- e.g. the session's active `CapabilityEnvelope`, until a\n\t * per-launch tmux standing grant envelope lands in a later wave (documented follow-up). */\n\tenvelope: Pick<CapabilityEnvelope, \"allowedPaths\" | \"deniedPaths\">;\n\tcwd?: string;\n}): { reviewRequired: boolean; reasonCode: string } {\n\tconst boundedChangedFiles = normalizeWorkerClaimForHost({\n\t\trequestId: \"managed-lane-review\",\n\t\tstatus: \"completed\",\n\t\tsummary: \"Managed lane changed-file review.\",\n\t\tchangedFiles: args.changedFiles,\n\t\tusageReportId: \"managed-lane-review\",\n\t}).changedFiles;\n\tif (boundedChangedFiles.length === 0) {\n\t\treturn { reviewRequired: false, reasonCode: \"no_changed_files\" };\n\t}\n\tconst syntheticId = \"managed-lane-review\";\n\tconst acceptance = validateWorkerClaim({\n\t\trequest: {\n\t\t\tid: syntheticId,\n\t\t\tinstructions: \"\",\n\t\t\troute: {\n\t\t\t\ttier: \"cheap\",\n\t\t\t\trisk: \"scoped-write\",\n\t\t\t\tconfidence: 1,\n\t\t\t\treasonCode: \"managed_lane_review\",\n\t\t\t\treasons: [],\n\t\t\t},\n\t\t\tenvelope: {\n\t\t\t\tid: syntheticId,\n\t\t\t\tcapabilities: [\"filesystem.write\"],\n\t\t\t\tallowedPaths: args.envelope.allowedPaths,\n\t\t\t\tdeniedPaths: args.envelope.deniedPaths,\n\t\t\t},\n\t\t},\n\t\tclaim: {\n\t\t\trequestId: syntheticId,\n\t\t\tstatus: \"completed\",\n\t\t\tsummary: \"Managed lane changed-file review.\",\n\t\t\tchangedFiles: boundedChangedFiles,\n\t\t\tusageReportId: syntheticId,\n\t\t},\n\t\tcwd: args.cwd,\n\t});\n\treturn { reviewRequired: acceptance.outcome !== \"allow\", reasonCode: acceptance.reasonCode };\n}\n"]}
+{"version":3,"file":"worker-claim.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-claim.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,MAAM,CAAC,MAAM,8BAA8B,GAAG,iBAAiB,CAAC;AAChE,MAAM,CAAC,MAAM,8BAA8B,GAAG,iBAAiB,CAAC;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AACpD,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAClD,MAAM,CAAC,MAAM,mCAAmC,GAAG,KAAK,CAAC;AACzD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AACrD,MAAM,CAAC,MAAM,0CAA0C,GAAG,GAAG,CAAC;AAC9D,MAAM,CAAC,MAAM,sCAAsC,GAAG,GAAG,CAAC;AAC1D,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AACpD,MAAM,CAAC,MAAM,8CAA8C,GAAG,GAAG,CAAC;AAClE,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAChD,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AAOtD,SAAS,gCAAgC,CACxC,MAAyB,EACzB,YAAoB,EACpB,YAAoB,EACpB,IAAa;IAEb,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YAC1D,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACV,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3C,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,iCAAiC,CAAC,MAAyB;IAC1E,OAAO,gCAAgC,CAAC,MAAM,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,IAAI,CAAC,CAAC;AAClH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,qCAAqC,CAAC,MAAyB;IAC9E,OAAO,gCAAgC,CACtC,MAAM,EACN,8BAA8B,EAC9B,mCAAmC,EACnC,KAAK,CACL,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IAC1C,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,KAAc,EAAE,KAAa;IAC9D,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,kBAAkB,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;IACvF,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YAAE,kBAAkB,CAAC,GAAG,KAAK,IAAI,GAAG,2BAA2B,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc,EAAE,KAAa,EAAE,YAAoB;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,kBAAkB,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAChH,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;QAAE,kBAAkB,CAAC,GAAG,KAAK,YAAY,YAAY,cAAc,CAAC,CAAC;IACpG,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IACjD,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,EAAE,eAAe,EAAE,8BAA8B,CAAC,CAAC;IAClG,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,8BAA8B,EAAE,CAAC;QACzE,kBAAkB,CAAC,yBAAyB,8BAA8B,SAAS,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAC,KAAa,EAAE,MAAM,GAAG,EAAE;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,WAAW,GAAG,8BAA8B,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,8BAA8B,GAAG,WAAW,CAAC,GAAG,MAAM,EAAE,CAAC;AAC7F,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc,EAAE,KAAa,EAAE,YAAoB;IACrF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa,EAAE,YAAoB,EAAE,YAAoB;IACxG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,kBAAkB,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;QAAE,kBAAkB,CAAC,GAAG,KAAK,YAAY,YAAY,WAAW,CAAC,CAAC;IACjG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YAAE,kBAAkB,CAAC,GAAG,KAAK,IAAI,KAAK,yBAAyB,CAAC,CAAC;QAC5G,MAAM,IAAI,GAAG,yBAAyB,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,EAAE,YAAY,CAAC,CAAC;QAC7F,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,MAAyB,EACzB,YAAoB,EACpB,YAAoB;IAEpB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,MAAM,IAAI,YAAY;YAAE,MAAM;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAyB;IACnE,OAAO,iCAAiC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAyB;IACvE,OAAO,qCAAqC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACzD,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IACC,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,WAAW,EACrB,CAAC;QACF,kBAAkB,CAAC,0BAA0B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;QACpH,kBAAkB,CAAC,gCAAgC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACjG,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,YAAY,GACjB,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IACnH,IAAI,YAAY,IAAI,YAAY,CAAC,OAAO,KAAK,UAAU,IAAI,YAAY,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAChG,kBAAkB,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,sBAAsB,GAAgC,YAAY;QACvE,CAAC,CAAC;YACA,aAAa,EAAE,yBAAyB,CACvC,YAAY,CAAC,aAAa,EAC1B,kCAAkC,EAClC,8CAA8C,CAC9C;YACD,OAAO,EAAE,YAAY,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;YACtE,WAAW,EAAE,sBAAsB,CAClC,YAAY,CAAC,WAAW,EACxB,gCAAgC,EAChC,6BAA6B,EAC7B,kCAAkC,CAClC;SACD;QACF,CAAC,CAAC,SAAS,CAAC;IACb,IAAI,sBAAsB,IAAI,sBAAsB,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/E,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO;QACN,SAAS,EAAE,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,EAAE,iCAAiC,CAAC;QAC3G,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACxC,CAAC,CAAC;gBACA,iBAAiB,EAAE,yBAAyB,CAC3C,KAAK,CAAC,iBAAiB,EACvB,yBAAyB,EACzB,0CAA0C,CAC1C;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,MAAM;QACN,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC;QAClD,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,iCAAiC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,YAAY,EAAE,sBAAsB,CACnC,KAAK,CAAC,YAAY,EAClB,oBAAoB,EACpB,8BAA8B,EAC9B,mCAAmC,CACnC;QACD,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC/B,CAAC,CAAC;gBACA,QAAQ,EAAE,sBAAsB,CAC/B,KAAK,CAAC,QAAQ,EACd,gBAAgB,EAChB,yBAAyB,EACzB,8BAA8B,CAC9B;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YACpC,CAAC,CAAC;gBACA,aAAa,EAAE,yBAAyB,CACvC,KAAK,CAAC,aAAa,EACnB,qBAAqB,EACrB,sCAAsC,CACtC;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;YAChC,CAAC,CAAC;gBACA,SAAS,EAAE,yBAAyB,CACnC,KAAK,CAAC,SAAS,EACf,iBAAiB,EACjB,gCAAgC,CAChC;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;YACvC,CAAC,CAAC;gBACA,gBAAgB,EAAE,yBAAyB,CAC1C,KAAK,CAAC,gBAAgB,EACtB,wBAAwB,EACxB,gCAAgC,CAChC;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc,EAAE,QAAgB;IAC9E,OAAO,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CACjF,CAAC,EACD,kCAAkC,CAClC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAkB;IAC5D,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC3C,IAAI,CAAC;QACJ,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAkB;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAkE;IACxG,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,OAAO,KAAK,UAAU,IAAI,UAAU,CAAC,UAAU,KAAK,wBAAwB,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IASnC;IACA,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,IAAI,KAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC;SACxF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1C,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;QACpC,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,qBAAqB;YACjC,OAAO,EAAE,oBAAoB,KAAK,CAAC,SAAS,gCAAgC,OAAO,CAAC,EAAE,IAAI;SAC1F,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACN,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,wBAAwB;YACpC,OAAO,EAAE,8CAA8C,KAAK,CAAC,MAAM,IAAI;YACvE,OAAO,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACpG,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,gCAAgC,KAAK,CAAC,MAAM,IAAI;YACzD,OAAO,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACpG,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC1B,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,kDAAkD;SAC3D,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO;YACN,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,wBAAwB;YACpC,OAAO,EAAE,sEAAsE;YAC/E,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE;SAC1C,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClF,OAAO;gBACN,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,cAAc;gBACpB,UAAU,EAAE,oBAAoB;gBAChC,OAAO,EAAE,0EAA0E;aACnF,CAAC;QACH,CAAC;QAED,wFAAwF;QACxF,uFAAuF;QACvF,gDAAgD;QAChD,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAC9C,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC7D,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,cAAc,CAC9B;oBACC,IAAI;oBACJ,YAAY,EAAE,eAAe;oBAC7B,WAAW,EAAE,cAAc;iBAC3B,EACD,iBAAiB,CACjB,CAAC;gBAEF,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAChC,QAAQ,GAAG,IAAI,CAAC;oBAChB,MAAM;gBACP,CAAC;gBACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAChC,WAAW,GAAG,IAAI,CAAC;gBACpB,CAAC;YACF,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACN,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,cAAc;oBACpB,UAAU,EAAE,qBAAqB;oBACjC,OAAO,EAAE,wBAAwB,WAAW,gCAAgC;iBAC5E,CAAC;YACH,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClB,OAAO;oBACN,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,cAAc;oBACpB,UAAU,EAAE,4BAA4B;oBACxC,OAAO,EAAE,wBAAwB,WAAW,0BAA0B;iBACtE,CAAC;YACH,CAAC;QACF,CAAC;QAED,yDAAyD;QACzD,OAAO;YACN,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,wBAAwB;YACpC,OAAO,EAAE,6CAA6C;SACtD,CAAC;IACH,CAAC;IAED,OAAO;QACN,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,wCAAwC;KACjD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAK7C;IACA,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;QACvD,SAAS,EAAE,qBAAqB;QAChC,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,mCAAmC;QAC5C,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,qBAAqB;KACpC,CAAC,CAAC,YAAY,CAAC;IAChB,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,WAAW,GAAG,qBAAqB,CAAC;IAC1C,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACtC,OAAO,EAAE;YACR,EAAE,EAAE,WAAW;YACf,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE;gBACN,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,cAAc;gBACpB,UAAU,EAAE,CAAC;gBACb,UAAU,EAAE,qBAAqB;gBACjC,OAAO,EAAE,EAAE;aACX;YACD,QAAQ,EAAE;gBACT,EAAE,EAAE,WAAW;gBACf,YAAY,EAAE,CAAC,kBAAkB,CAAC;gBAClC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;gBACxC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;aACtC;SACD;QACD,KAAK,EAAE;YACN,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,mCAAmC;YAC5C,YAAY,EAAE,mBAAmB;YACjC,aAAa,EAAE,WAAW;SAC1B;QACD,GAAG,EAAE,IAAI,CAAC,GAAG;KACb,CAAC,CAAC;IACH,OAAO,EAAE,cAAc,EAAE,UAAU,CAAC,OAAO,KAAK,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;AAC9F,CAAC","sourcesContent":["import path from \"node:path\";\nimport { DEFAULT_MAX_BYTES } from \"@caupulican/pi-agent-core/truncate\";\nimport type { CapabilityEnvelope, GateOutcome, WorkerClaim, WorkerRequest } from \"../autonomy/contracts.ts\";\nimport { checkPathScope } from \"../autonomy/path-scope.ts\";\nimport { normalizeEvidenceBundleForStorage } from \"../research/evidence-bundle.ts\";\nimport { utf8PrefixByBytes } from \"../util/bounded-value.ts\";\nimport { isPlainRecord } from \"../util/value-guards.ts\";\n\nexport const MAX_WORKER_CLAIM_SUMMARY_CHARS = DEFAULT_MAX_BYTES;\nexport const MAX_WORKER_CLAIM_SUMMARY_BYTES = DEFAULT_MAX_BYTES;\nexport const MAX_WORKER_CLAIM_BLOCKERS = 32;\nexport const MAX_WORKER_CLAIM_BLOCKER_CHARS = 1_000;\nexport const MAX_WORKER_CLAIM_CHANGED_FILES = 128;\nexport const MAX_WORKER_CLAIM_CHANGED_FILE_CHARS = 2_048;\nexport const MAX_WORKER_CLAIM_REQUEST_ID_CHARS = 256;\nexport const MAX_WORKER_CLAIM_TERMINAL_ATTEMPT_ID_CHARS = 256;\nexport const MAX_WORKER_CLAIM_USAGE_REPORT_ID_CHARS = 256;\nexport const MAX_WORKER_CLAIM_TIMESTAMP_CHARS = 128;\nexport const MAX_WORKER_CLAIM_VERIFICATION_SUBJECT_ID_CHARS = 256;\nexport const MAX_WORKER_CLAIM_REASON_CODES = 32;\nexport const MAX_WORKER_CLAIM_REASON_CODE_CHARS = 128;\n\nexport interface BoundedWorkerClaimStrings {\n\tvalues: string[];\n\toverflowed: boolean;\n}\n\nfunction collectBoundedWorkerClaimStrings(\n\tvalues: readonly string[],\n\tmaximumCount: number,\n\tmaximumChars: number,\n\ttrim: boolean,\n): BoundedWorkerClaimStrings {\n\tconst bounded: string[] = [];\n\tconst seen = new Set<string>();\n\tlet overflowed = values.length > maximumCount;\n\tfor (let index = 0; index < Math.min(values.length, maximumCount); index++) {\n\t\tconst raw = values[index];\n\t\tif (typeof raw !== \"string\" || raw.length > maximumChars) {\n\t\t\toverflowed = true;\n\t\t\tcontinue;\n\t\t}\n\t\tconst normalized = trim ? raw.trim() : raw;\n\t\tif (!normalized || seen.has(normalized)) continue;\n\t\tseen.add(normalized);\n\t\tbounded.push(normalized);\n\t}\n\treturn { values: bounded, overflowed };\n}\n\n/** Native host observations may be reduced for terminal storage, but callers must surface overflow. */\nexport function collectBoundedWorkerClaimBlockers(values: readonly string[]): BoundedWorkerClaimStrings {\n\treturn collectBoundedWorkerClaimStrings(values, MAX_WORKER_CLAIM_BLOCKERS, MAX_WORKER_CLAIM_BLOCKER_CHARS, true);\n}\n\n/** Changed paths preserve their exact spelling; trimming a real path could change its meaning. */\nexport function collectBoundedWorkerClaimChangedFiles(values: readonly string[]): BoundedWorkerClaimStrings {\n\treturn collectBoundedWorkerClaimStrings(\n\t\tvalues,\n\t\tMAX_WORKER_CLAIM_CHANGED_FILES,\n\t\tMAX_WORKER_CLAIM_CHANGED_FILE_CHARS,\n\t\tfalse,\n\t);\n}\n\nfunction invalidWorkerClaim(message: string): never {\n\tthrow new Error(`Invalid worker claim: ${message}`);\n}\n\n/**\n * The worker boundary must not evaluate accessors from managed/external reports. Copy only own\n * data descriptors, then validate and construct a fresh contract object from the bounded values.\n */\nfunction ownWorkerClaimDataRecord(value: unknown, label: string): Record<string, unknown> {\n\tif (!isPlainRecord(value)) invalidWorkerClaim(`${label} must be a plain object.`);\n\tconst descriptors = Object.getOwnPropertyDescriptors(value);\n\tconst record: Record<string, unknown> = Object.create(null) as Record<string, unknown>;\n\tfor (const [key, descriptor] of Object.entries(descriptors)) {\n\t\tif (!(\"value\" in descriptor)) invalidWorkerClaim(`${label}.${key} must not be an accessor.`);\n\t\trecord[key] = descriptor.value;\n\t}\n\treturn record;\n}\n\nfunction requiredWorkerClaimString(value: unknown, label: string, maximumChars: number): string {\n\tif (typeof value !== \"string\" || value.length === 0) invalidWorkerClaim(`${label} must be a non-empty string.`);\n\tif (value.length > maximumChars) invalidWorkerClaim(`${label} exceeds ${maximumChars} characters.`);\n\treturn value;\n}\n\nfunction requiredWorkerClaimSummary(value: unknown): string {\n\tconst summary = requiredWorkerClaimString(value, \"claim.summary\", MAX_WORKER_CLAIM_SUMMARY_CHARS);\n\tif (Buffer.byteLength(summary, \"utf8\") > MAX_WORKER_CLAIM_SUMMARY_BYTES) {\n\t\tinvalidWorkerClaim(`claim.summary exceeds ${MAX_WORKER_CLAIM_SUMMARY_BYTES} bytes.`);\n\t}\n\treturn summary;\n}\n\n/** Bound a host-produced claim summary without splitting a UTF-8 code point. */\nexport function clipWorkerClaimSummary(value: string, suffix = \"\"): string {\n\tconst suffixBytes = Buffer.byteLength(suffix, \"utf8\");\n\tif (suffixBytes > MAX_WORKER_CLAIM_SUMMARY_BYTES) {\n\t\tthrow new TypeError(\"Worker claim summary suffix exceeds the inline output ceiling.\");\n\t}\n\treturn `${utf8PrefixByBytes(value, MAX_WORKER_CLAIM_SUMMARY_BYTES - suffixBytes)}${suffix}`;\n}\n\nfunction optionalWorkerClaimString(value: unknown, label: string, maximumChars: number): string | undefined {\n\tif (value === undefined) return undefined;\n\treturn requiredWorkerClaimString(value, label, maximumChars);\n}\n\nfunction workerClaimStringArray(value: unknown, label: string, maximumCount: number, maximumChars: number): string[] {\n\tif (!Array.isArray(value)) invalidWorkerClaim(`${label} must be an array.`);\n\tif (value.length > maximumCount) invalidWorkerClaim(`${label} exceeds ${maximumCount} entries.`);\n\tconst copied: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (let index = 0; index < value.length; index++) {\n\t\tconst descriptor = Object.getOwnPropertyDescriptor(value, String(index));\n\t\tif (!descriptor || !(\"value\" in descriptor)) invalidWorkerClaim(`${label}[${index}] must be a data value.`);\n\t\tconst item = requiredWorkerClaimString(descriptor.value, `${label}[${index}]`, maximumChars);\n\t\tif (seen.has(item)) continue;\n\t\tseen.add(item);\n\t\tcopied.push(item);\n\t}\n\treturn copied;\n}\n\nexport function boundedWorkerClaimStrings(\n\tvalues: readonly string[],\n\tmaximumCount: number,\n\tmaximumChars: number,\n): string[] {\n\tconst bounded: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const value of values) {\n\t\tconst normalized = value.trim().slice(0, maximumChars);\n\t\tif (!normalized || seen.has(normalized)) continue;\n\t\tseen.add(normalized);\n\t\tbounded.push(normalized);\n\t\tif (bounded.length >= maximumCount) break;\n\t}\n\treturn bounded;\n}\n\nexport function boundedWorkerClaimBlockers(values: readonly string[]): string[] {\n\treturn collectBoundedWorkerClaimBlockers(values).values;\n}\n\nexport function boundedWorkerClaimChangedFiles(values: readonly string[]): string[] {\n\treturn collectBoundedWorkerClaimChangedFiles(values).values;\n}\n\n/**\n * Applies the one mandatory bounded claim contract before persistence, review, finalization, or\n * artifact inspection. Host-built/native reports have already bounded their model output; foreign\n * reports must fit the exact same envelope and are rejected before cloning or getter invocation.\n */\nexport function normalizeWorkerClaimForHost(value: unknown): WorkerClaim {\n\tconst claim = ownWorkerClaimDataRecord(value, \"claim\");\n\tconst status = claim.status;\n\tif (\n\t\tstatus !== \"completed\" &&\n\t\tstatus !== \"partial\" &&\n\t\tstatus !== \"blocked\" &&\n\t\tstatus !== \"failed\" &&\n\t\tstatus !== \"cancelled\"\n\t) {\n\t\tinvalidWorkerClaim(\"claim.status is invalid.\");\n\t}\n\tif (claim.outputFormat !== undefined && claim.outputFormat !== \"structured\" && claim.outputFormat !== \"plain_text\") {\n\t\tinvalidWorkerClaim(\"claim.outputFormat is invalid.\");\n\t}\n\tif (claim.parentReviewRequired !== undefined && typeof claim.parentReviewRequired !== \"boolean\") {\n\t\tinvalidWorkerClaim(\"claim.parentReviewRequired must be boolean.\");\n\t}\n\tconst verification =\n\t\tclaim.verification === undefined ? undefined : ownWorkerClaimDataRecord(claim.verification, \"claim.verification\");\n\tif (verification && verification.verdict !== \"accepted\" && verification.verdict !== \"rejected\") {\n\t\tinvalidWorkerClaim(\"claim.verification.verdict is invalid.\");\n\t}\n\tconst normalizedVerification: WorkerClaim[\"verification\"] = verification\n\t\t? {\n\t\t\t\tsubjectTaskId: requiredWorkerClaimString(\n\t\t\t\t\tverification.subjectTaskId,\n\t\t\t\t\t\"claim.verification.subjectTaskId\",\n\t\t\t\t\tMAX_WORKER_CLAIM_VERIFICATION_SUBJECT_ID_CHARS,\n\t\t\t\t),\n\t\t\t\tverdict: verification.verdict === \"accepted\" ? \"accepted\" : \"rejected\",\n\t\t\t\treasonCodes: workerClaimStringArray(\n\t\t\t\t\tverification.reasonCodes,\n\t\t\t\t\t\"claim.verification.reasonCodes\",\n\t\t\t\t\tMAX_WORKER_CLAIM_REASON_CODES,\n\t\t\t\t\tMAX_WORKER_CLAIM_REASON_CODE_CHARS,\n\t\t\t\t),\n\t\t\t}\n\t\t: undefined;\n\tif (normalizedVerification && normalizedVerification.reasonCodes.length === 0) {\n\t\tinvalidWorkerClaim(\"claim.verification.reasonCodes must not be empty.\");\n\t}\n\treturn {\n\t\trequestId: requiredWorkerClaimString(claim.requestId, \"claim.requestId\", MAX_WORKER_CLAIM_REQUEST_ID_CHARS),\n\t\t...(claim.terminalAttemptId !== undefined\n\t\t\t? {\n\t\t\t\t\tterminalAttemptId: requiredWorkerClaimString(\n\t\t\t\t\t\tclaim.terminalAttemptId,\n\t\t\t\t\t\t\"claim.terminalAttemptId\",\n\t\t\t\t\t\tMAX_WORKER_CLAIM_TERMINAL_ATTEMPT_ID_CHARS,\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\tstatus,\n\t\tsummary: requiredWorkerClaimSummary(claim.summary),\n\t\t...(claim.outputFormat !== undefined ? { outputFormat: claim.outputFormat } : {}),\n\t\t...(claim.evidence !== undefined ? { evidence: normalizeEvidenceBundleForStorage(claim.evidence) } : {}),\n\t\tchangedFiles: workerClaimStringArray(\n\t\t\tclaim.changedFiles,\n\t\t\t\"claim.changedFiles\",\n\t\t\tMAX_WORKER_CLAIM_CHANGED_FILES,\n\t\t\tMAX_WORKER_CLAIM_CHANGED_FILE_CHARS,\n\t\t),\n\t\t...(claim.blockers !== undefined\n\t\t\t? {\n\t\t\t\t\tblockers: workerClaimStringArray(\n\t\t\t\t\t\tclaim.blockers,\n\t\t\t\t\t\t\"claim.blockers\",\n\t\t\t\t\t\tMAX_WORKER_CLAIM_BLOCKERS,\n\t\t\t\t\t\tMAX_WORKER_CLAIM_BLOCKER_CHARS,\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\t...(claim.usageReportId !== undefined\n\t\t\t? {\n\t\t\t\t\tusageReportId: requiredWorkerClaimString(\n\t\t\t\t\t\tclaim.usageReportId,\n\t\t\t\t\t\t\"claim.usageReportId\",\n\t\t\t\t\t\tMAX_WORKER_CLAIM_USAGE_REPORT_ID_CHARS,\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\t...(claim.createdAt !== undefined\n\t\t\t? {\n\t\t\t\t\tcreatedAt: optionalWorkerClaimString(\n\t\t\t\t\t\tclaim.createdAt,\n\t\t\t\t\t\t\"claim.createdAt\",\n\t\t\t\t\t\tMAX_WORKER_CLAIM_TIMESTAMP_CHARS,\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\t...(claim.parentReviewRequired !== undefined ? { parentReviewRequired: claim.parentReviewRequired } : {}),\n\t\t...(claim.parentReviewedAt !== undefined\n\t\t\t? {\n\t\t\t\t\tparentReviewedAt: optionalWorkerClaimString(\n\t\t\t\t\t\tclaim.parentReviewedAt,\n\t\t\t\t\t\t\"claim.parentReviewedAt\",\n\t\t\t\t\t\tMAX_WORKER_CLAIM_TIMESTAMP_CHARS,\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\t...(normalizedVerification ? { verification: normalizedVerification } : {}),\n\t};\n}\n\nexport function normalizeWorkerClaimReasonCode(value: unknown, fallback: string): string {\n\treturn (typeof value === \"string\" && value.trim() ? value.trim() : fallback).slice(\n\t\t0,\n\t\tMAX_WORKER_CLAIM_REASON_CODE_CHARS,\n\t);\n}\n\nexport function cloneWorkerClaimForStorage(claim: WorkerClaim): WorkerClaim {\n\treturn normalizeWorkerClaimForHost(claim);\n}\n\nexport function isWorkerClaim(value: unknown): value is WorkerClaim {\n\ttry {\n\t\tnormalizeWorkerClaimForHost(value);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport function requiresParentReview(claim: WorkerClaim): boolean {\n\tif (claim.status !== \"completed\") {\n\t\treturn true;\n\t}\n\tif (claim.blockers && claim.blockers.length > 0) {\n\t\treturn true;\n\t}\n\tif (claim.changedFiles.length > 0) {\n\t\treturn true;\n\t}\n\treturn false;\n}\n\n/**\n * True iff {@link validateWorkerClaim}'s gate would flag this claim \"ask-user\" /\n * \"parent_review_required\" (the two branches at :110 and :178 below) — an otherwise-completed\n * claim the parent must explicitly look at because it reports blockers, or reports file mutations\n * that passed path-scope validation. Reuses `validateWorkerClaim` itself rather than a\n * separately-maintained heuristic, so a persisted review marker can never drift from the\n * gate's actual verdict.\n */\nexport function isParentReviewRequired(args: { request: WorkerRequest; claim: WorkerClaim; cwd?: string }): boolean {\n\tconst acceptance = validateWorkerClaim(args);\n\treturn acceptance.outcome === \"ask-user\" && acceptance.reasonCode === \"parent_review_required\";\n}\n\nexport function validateWorkerClaim(args: {\n\trequest: WorkerRequest;\n\tclaim: WorkerClaim;\n\t/**\n\t * Baseline for relative paths — BOTH the runner's cwd-relative `changedFiles` and the\n\t * envelope's possibly-relative path scopes resolve against this. Defaults to process.cwd()\n\t * for callers whose session cwd is the process cwd.\n\t */\n\tcwd?: string;\n}): GateOutcome {\n\tconst { request } = args;\n\tlet claim: WorkerClaim;\n\ttry {\n\t\tclaim = normalizeWorkerClaimForHost(args.claim);\n\t} catch (error) {\n\t\treturn {\n\t\t\toutcome: \"block\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"invalid_worker_claim\",\n\t\t\tmessage: error instanceof Error ? error.message : \"Worker claim failed host validation.\",\n\t\t};\n\t}\n\tconst baseDir = args.cwd ?? process.cwd();\n\n\tif (claim.requestId !== request.id) {\n\t\treturn {\n\t\t\toutcome: \"block\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"request_id_mismatch\",\n\t\t\tmessage: `Claim requestId '${claim.requestId}' does not match request id '${request.id}'.`,\n\t\t};\n\t}\n\n\tif (claim.status === \"partial\") {\n\t\treturn {\n\t\t\toutcome: \"ask-user\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"parent_review_required\",\n\t\t\tmessage: `Worker finished with partial claim status '${claim.status}'.`,\n\t\t\tdetails: claim.blockers && claim.blockers.length > 0 ? { blockers: [...claim.blockers] } : undefined,\n\t\t};\n\t}\n\n\tif (claim.status !== \"completed\") {\n\t\treturn {\n\t\t\toutcome: \"block\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"worker_not_completed\",\n\t\t\tmessage: `Worker finished with status '${claim.status}'.`,\n\t\t\tdetails: claim.blockers && claim.blockers.length > 0 ? { blockers: [...claim.blockers] } : undefined,\n\t\t};\n\t}\n\n\tif (!claim.usageReportId) {\n\t\treturn {\n\t\t\toutcome: \"block\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"missing_usage_report\",\n\t\t\tmessage: \"Completed worker claim is missing usageReportId.\",\n\t\t};\n\t}\n\n\tif (claim.blockers && claim.blockers.length > 0) {\n\t\treturn {\n\t\t\toutcome: \"ask-user\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"parent_review_required\",\n\t\t\tmessage: \"Completed worker claim includes blockers and requires parent review.\",\n\t\t\tdetails: { blockers: [...claim.blockers] },\n\t\t};\n\t}\n\n\tif (claim.changedFiles.length > 0) {\n\t\tif (!request.envelope.allowedPaths || request.envelope.allowedPaths.length === 0) {\n\t\t\treturn {\n\t\t\t\toutcome: \"block\",\n\t\t\t\tgate: \"worker_claim\",\n\t\t\t\treasonCode: \"missing_path_scope\",\n\t\t\t\tmessage: \"Worker changed files but no allowedPaths are configured in the envelope.\",\n\t\t\t};\n\t\t}\n\n\t\t// The runner reports changed files relative to the session cwd — resolve file and scope\n\t\t// roots against the SAME baseline. Resolving per-root double-prefixed nested names and\n\t\t// let a denied subtree slip past the deny rule.\n\t\tconst resolvedAllowed = request.envelope.allowedPaths.map((p) => path.resolve(baseDir, p));\n\t\tconst resolvedDenied = request.envelope.deniedPaths?.map((p) => path.resolve(baseDir, p));\n\t\tfor (const changedFile of claim.changedFiles) {\n\t\t\tlet isInsideAny = false;\n\t\t\tlet isDenied = false;\n\n\t\t\tconst scopedChangedFile = path.resolve(baseDir, changedFile);\n\t\t\tfor (const root of resolvedAllowed) {\n\t\t\t\tconst decision = checkPathScope(\n\t\t\t\t\t{\n\t\t\t\t\t\troot,\n\t\t\t\t\t\tallowedPaths: resolvedAllowed,\n\t\t\t\t\t\tdeniedPaths: resolvedDenied,\n\t\t\t\t\t},\n\t\t\t\t\tscopedChangedFile,\n\t\t\t\t);\n\n\t\t\t\tif (decision.kind === \"denied\") {\n\t\t\t\t\tisDenied = true;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t\tif (decision.kind === \"inside\") {\n\t\t\t\t\tisInsideAny = true;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (isDenied) {\n\t\t\t\treturn {\n\t\t\t\t\toutcome: \"block\",\n\t\t\t\t\tgate: \"worker_claim\",\n\t\t\t\t\treasonCode: \"changed_file_denied\",\n\t\t\t\t\tmessage: `Worker changed file '${changedFile}' which matches a denied path.`,\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tif (!isInsideAny) {\n\t\t\t\treturn {\n\t\t\t\t\toutcome: \"block\",\n\t\t\t\t\tgate: \"worker_claim\",\n\t\t\t\t\treasonCode: \"changed_file_outside_scope\",\n\t\t\t\t\tmessage: `Worker changed file '${changedFile}' outside allowed scope.`,\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\t// Files are inside scope, but worker output is untrusted\n\t\treturn {\n\t\t\toutcome: \"ask-user\",\n\t\t\tgate: \"worker_claim\",\n\t\t\treasonCode: \"parent_review_required\",\n\t\t\tmessage: \"Worker changed files require parent review.\",\n\t\t};\n\t}\n\n\treturn {\n\t\toutcome: \"allow\",\n\t\tgate: \"worker_claim\",\n\t\treasonCode: \"allowed\",\n\t\tmessage: \"Worker claim is read-only and allowed.\",\n\t};\n}\n\n/**\n * Path-scope-only re-review for a SELF-REPORTED (out-of-process) worker's claimed `changedFiles`\n * -- e.g. a tmux worker's own completion report, which (unlike an in-process worker's) never\n * passed through this process's `applyWorkerActions` envelope enforcement before the write\n * happened; the tmux worker's tool loop runs in a separate process this session does not gate.\n * Reuses {@link validateWorkerClaim}'s exact symlink-safe scope check verbatim -- never\n * reimplement path resolution: synthesizes a minimal, always-\"completed\" request/claim pair\n * carrying only the reported `changedFiles` and the scope's `allowedPaths`/`deniedPaths`, so the\n * ONLY thing that can vary the verdict is the path-scope branch.\n *\n * Deliberately broader than {@link isParentReviewRequired}: that helper only flags the gate's\n * \"ask-user\" branch, which is correct for an in-process worker (a write that would have been\n * \"block\"-worthy was already refused before it could happen, by the SAME envelope, via\n * `applyWorkerActions`). A self-reported claim has no such backstop -- an out-of-scope or denied\n * path already happened on the real filesystem whether or not this gate would allow it, so here\n * ANY non-\"allow\" verdict (in scope, out of scope, or no scope configured at all) means a human\n * must look, not \"the write didn't happen\".\n */\nexport function reviewManagedLaneChangedFiles(args: {\n\tchangedFiles: readonly string[];\n\t/** The immutable managed-launch profile scope to validate against. */\n\tenvelope: Pick<CapabilityEnvelope, \"allowedPaths\" | \"deniedPaths\">;\n\tcwd?: string;\n}): { reviewRequired: boolean; reasonCode: string } {\n\tconst boundedChangedFiles = normalizeWorkerClaimForHost({\n\t\trequestId: \"managed-lane-review\",\n\t\tstatus: \"completed\",\n\t\tsummary: \"Managed lane changed-file review.\",\n\t\tchangedFiles: args.changedFiles,\n\t\tusageReportId: \"managed-lane-review\",\n\t}).changedFiles;\n\tif (boundedChangedFiles.length === 0) {\n\t\treturn { reviewRequired: false, reasonCode: \"no_changed_files\" };\n\t}\n\tconst syntheticId = \"managed-lane-review\";\n\tconst acceptance = validateWorkerClaim({\n\t\trequest: {\n\t\t\tid: syntheticId,\n\t\t\tinstructions: \"\",\n\t\t\troute: {\n\t\t\t\ttier: \"cheap\",\n\t\t\t\trisk: \"scoped-write\",\n\t\t\t\tconfidence: 1,\n\t\t\t\treasonCode: \"managed_lane_review\",\n\t\t\t\treasons: [],\n\t\t\t},\n\t\t\tenvelope: {\n\t\t\t\tid: syntheticId,\n\t\t\t\tcapabilities: [\"filesystem.write\"],\n\t\t\t\tallowedPaths: args.envelope.allowedPaths,\n\t\t\t\tdeniedPaths: args.envelope.deniedPaths,\n\t\t\t},\n\t\t},\n\t\tclaim: {\n\t\t\trequestId: syntheticId,\n\t\t\tstatus: \"completed\",\n\t\t\tsummary: \"Managed lane changed-file review.\",\n\t\t\tchangedFiles: boundedChangedFiles,\n\t\t\tusageReportId: syntheticId,\n\t\t},\n\t\tcwd: args.cwd,\n\t});\n\treturn { reviewRequired: acceptance.outcome !== \"allow\", reasonCode: acceptance.reasonCode };\n}\n"]}