@ckanner/flywheel 0.32.1 → 0.33.0

package/node_modules/dsh-subagent-codex-pro/lib/machine-recovery.js

@@ -0,0 +1,167 @@
+/** Private, durable evidence for one explicitly identified machine invocation. */
+import { closeSync, constants, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { createHash, randomUUID } from 'node:crypto';
+import { dirname, isAbsolute, join, normalize } from 'node:path';
+export const MACHINE_LIFECYCLE_VERSION = 1;
+export const MACHINE_LIFECYCLE_CAPABILITIES = Object.freeze({
+    version: 1, durableJournal: true, readOnlyRecovery: true, threadReadyBeforeDispatch: true,
+});
+const MAX_JOURNAL_BYTES = 64 * 1024 * 1024;
+const RECORD_NAME = 'machine-journal.json';
+const EVENTS = new Set(['thread-ready', 'dispatch-intent', 'dispatch-possible', 'turn-accepted', 'terminal', 'cleanup-confirmed']);
+function object(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function identity(value) {
+    return typeof value === 'string' && value.trim() !== '' && !value.includes('\0') && Buffer.byteLength(value) <= 4096;
+}
+/** A recovery path is deliberately not a search root, an alias or a symlink. */
+export function validateRecoveryDirectory(value, existing = false) {
+    if (typeof value !== 'string' || !isAbsolute(value) || value.includes('\0') || normalize(value) !== value
+        || value === dirname(value) || realpathSync(dirname(value)) !== dirname(value)) {
+        throw new Error('recoveryDirectory must be a canonical absolute path with an existing physical parent');
+    }
+    if (existing) {
+        const stat = lstatSync(value);
+        if (!stat.isDirectory() || stat.isSymbolicLink() || (stat.mode & 0o077) !== 0
+            || (process.getuid !== undefined && stat.uid !== process.getuid())) {
+            throw new Error('recoveryDirectory must be a private owned directory, not a symlink');
+        }
+    }
+}
+export function validLifecycle(value, requestId, runId) {
+    if (!object(value) || value.lifecycleVersion !== 1 || value.type !== 'lifecycle'
+        || value.requestId !== requestId || value.runId !== runId || !Number.isSafeInteger(value.sequence)
+        || value.sequence < 1 || !EVENTS.has(value.event)
+        || (value.threadId !== null && !identity(value.threadId)) || (value.turnId !== null && !identity(value.turnId))
+        || typeof value.persistent !== 'boolean' || (value.configuration !== null && !object(value.configuration))
+        || !['not-dispatched', 'possible', 'accepted'].includes(value.dispatch)
+        || !['unknown', 'completed', 'failed', 'cancelled'].includes(value.outcome)
+        || typeof value.cleanupConfirmed !== 'boolean')
+        return false;
+    if (value.event === 'thread-ready' && (value.dispatch !== 'not-dispatched' || value.threadId === null
+        || !object(value.configuration) || value.configuration.matched !== true))
+        return false;
+    if (value.event === 'dispatch-intent' && value.dispatch !== 'not-dispatched')
+        return false;
+    if (value.event === 'dispatch-possible' && value.dispatch !== 'possible')
+        return false;
+    if (value.event === 'turn-accepted' && value.dispatch !== 'accepted')
+        return false;
+    return value.event !== 'cleanup-confirmed' || value.cleanupConfirmed === true;
+}
+function checksum(body) {
+    return createHash('sha256').update(JSON.stringify(body)).digest('hex');
+}
+/** One writer, exclusive directory admission, atomic replacement and directory fsync. */
+export class MachineJournal {
+    #directory;
+    #body;
+    constructor(directory, requestId, runId) {
+        validateRecoveryDirectory(directory);
+        // EEXIST is a refusal, never an invitation to rerun or replace old evidence.
+        mkdirSync(directory, { mode: 0o700 });
+        const parent = openSync(dirname(directory), constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+        try {
+            fsyncSync(parent);
+        }
+        finally {
+            closeSync(parent);
+        }
+        this.#directory = directory;
+        this.#body = { protocol: 1, type: 'machine-journal', requestId, runId, lifecycle: null, receipt: null };
+        this.#write();
+    }
+    lifecycle(event) {
+        if (!validLifecycle(event, this.#body.requestId, this.#body.runId)
+            || event.sequence !== (this.#body.lifecycle?.sequence ?? 0) + 1)
+            throw new Error('invalid lifecycle journal sequence');
+        this.#body = { ...this.#body, lifecycle: event };
+        this.#write();
+    }
+    receipt(receipt) {
+        if (receipt.protocol !== 1 || receipt.type !== 'result' || receipt.requestId !== this.#body.requestId
+            || receipt.runId !== this.#body.runId || this.#body.receipt !== null)
+            throw new Error('invalid terminal journal identity');
+        this.#body = { ...this.#body, receipt };
+        this.#write();
+    }
+    #write() {
+        validateRecoveryDirectory(this.#directory, true);
+        const data = JSON.stringify({ body: this.#body, sha256: checksum(this.#body) }) + '\n';
+        if (Buffer.byteLength(data) > MAX_JOURNAL_BYTES)
+            throw new Error('machine journal exceeds its bounded size');
+        const temporary = join(this.#directory, '.pending-' + randomUUID());
+        const fd = openSync(temporary, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | constants.O_NOFOLLOW, 0o600);
+        try {
+            writeFileSync(fd, data);
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+        try {
+            renameSync(temporary, join(this.#directory, RECORD_NAME));
+            const directory = openSync(this.#directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+            try {
+                fsyncSync(directory);
+            }
+            finally {
+                closeSync(directory);
+            }
+        }
+        finally {
+            try {
+                unlinkSync(temporary);
+            }
+            catch { /* already renamed or retained evidence */ }
+        }
+    }
+}
+/** Read exactly one owned journal. Never starts a process, contacts a model or changes files. */
+export async function recoverMachine(value) {
+    if (!object(value) || Object.keys(value).some(key => !['protocol', 'requestId', 'runId', 'recoveryDirectory'].includes(key))
+        || value.protocol !== 1 || !identity(value.requestId) || !identity(value.runId)
+        || typeof value.recoveryDirectory !== 'string' || !isAbsolute(value.recoveryDirectory)
+        || value.recoveryDirectory.includes('\0'))
+        throw new Error('invalid machine recovery request');
+    const base = { protocol: 1, type: 'recovery', requestId: value.requestId, runId: value.runId };
+    const unknown = (reason) => ({ ...base, status: 'unknown', receipt: null, lifecycle: null, reason });
+    try {
+        validateRecoveryDirectory(value.recoveryDirectory, true);
+        const file = join(value.recoveryDirectory, RECORD_NAME);
+        const fd = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW);
+        let data;
+        try {
+            const stat = fstatSync(fd);
+            if (!stat.isFile() || stat.size > MAX_JOURNAL_BYTES || (stat.mode & 0o077) !== 0
+                || (process.getuid !== undefined && stat.uid !== process.getuid()))
+                return unknown('untrusted journal file');
+            data = JSON.parse(readFileSync(fd, 'utf8'));
+        }
+        finally {
+            closeSync(fd);
+        }
+        if (!object(data) || !object(data.body) || data.sha256 !== checksum(data.body))
+            return unknown('invalid journal integrity');
+        const body = data.body;
+        if (body.protocol !== 1 || body.type !== 'machine-journal' || body.requestId !== value.requestId || body.runId !== value.runId
+            || (body.lifecycle !== null && !validLifecycle(body.lifecycle, value.requestId, value.runId)))
+            return unknown('journal identity does not match');
+        const lifecycle = body.lifecycle;
+        if (body.receipt === null)
+            return { ...base, status: 'pending', receipt: null, lifecycle,
+                reason: 'no durable terminal receipt; owner liveness, execution outcome and replay safety remain unproven' };
+        const receipt = body.receipt;
+        if (!object(receipt) || receipt.protocol !== 1 || receipt.type !== 'result'
+            || receipt.requestId !== value.requestId || receipt.runId !== value.runId || typeof receipt.ok !== 'boolean') {
+            return unknown('invalid terminal receipt identity');
+        }
+        return { ...base, status: 'terminal', receipt: receipt, lifecycle,
+            reason: 'original durable receipt; caller must validate its configuration, outcome and independent cleanup facts' };
+    }
+    catch {
+        return unknown('journal absent, inaccessible or malformed; no replay is authorized');
+    }
+}
+//# sourceMappingURL=machine-recovery.js.map

package/node_modules/dsh-subagent-codex-pro/lib/machine-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-recovery.js","sourceRoot":"","sources":["../src/machine-recovery.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAC1E,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,GAClE,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAGhE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAU,CAAA;AACnD,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1D,OAAO,EAAE,CAAU,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI;CACnG,CAAC,CAAA;AAqCF,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAC1C,MAAM,WAAW,GAAG,sBAAsB,CAAA;AAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,eAAe,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAA;AAElI,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAA;AACtH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,QAAQ,GAAG,KAAK;IACxE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK;WACpG,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAA;IACzG,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;eACxE,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;QACvF,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,SAAiB,EAAE,KAAa;IAC7E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gBAAgB,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;WAC3E,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;WAC9F,KAAK,CAAC,QAAmB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC;WACpE,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;WAC5G,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;WACvG,CAAC,CAAC,gBAAgB,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAkB,CAAC;WAC9E,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAiB,CAAC;WAClF,OAAO,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC9D,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,gBAAgB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;WAChG,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACxF,IAAI,KAAK,CAAC,KAAK,KAAK,iBAAiB,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAA;IAC1F,IAAI,KAAK,CAAC,KAAK,KAAK,mBAAmB,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IACtF,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IAClF,OAAO,KAAK,CAAC,KAAK,KAAK,mBAAmB,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI,CAAA;AAC/E,CAAC;AAWD,SAAS,QAAQ,CAAC,IAAa;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxE,CAAC;AAED,yFAAyF;AACzF,MAAM,OAAO,cAAc;IAChB,UAAU,CAAQ;IAC3B,KAAK,CAAa;IAClB,YAAY,SAAiB,EAAE,SAAiB,EAAE,KAAa;QAC7D,yBAAyB,CAAC,SAAS,CAAC,CAAA;QACpC,6EAA6E;QAC7E,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QAC9G,IAAI,CAAC;YAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAAC,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;QAC3B,IAAI,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QACvG,IAAI,CAAC,MAAM,EAAE,CAAA;IACf,CAAC;IACD,SAAS,CAAC,KAA4B;QACpC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;eAC7D,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QACxH,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAChD,IAAI,CAAC,MAAM,EAAE,CAAA;IACf,CAAC;IACD,OAAO,CAAC,OAAuB;QAC7B,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS;eAChG,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QAC5H,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAA;QACvC,IAAI,CAAC,MAAM,EAAE,CAAA;IACf,CAAC;IACD,MAAM;QACJ,yBAAyB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAA;QACtF,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,iBAAiB;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QAC5G,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,UAAU,EAAE,CAAC,CAAA;QACnE,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QACvH,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QAAC,CAAC;QACxE,IAAI,CAAC;YACH,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAA;YACzD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;YAC9G,IAAI,CAAC;gBAAC,SAAS,CAAC,SAAS,CAAC,CAAA;YAAC,CAAC;oBAAS,CAAC;gBAAC,SAAS,CAAC,SAAS,CAAC,CAAA;YAAC,CAAC;QAC/D,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC;gBAAC,UAAU,CAAC,SAAS,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;QAAC,CAAC;IAClG,CAAC;CACF;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA6B;IAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;WACvH,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;WAC5E,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC;WACnF,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IAChG,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,CAAU,EAAE,IAAI,EAAE,UAAmB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;IAChH,MAAM,OAAO,GAAG,CAAC,MAAc,EAA0B,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACpI,IAAI,CAAC;QACH,yBAAyB,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAA;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAA;QACvD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACpE,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;YAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,iBAAiB,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;mBAC3E,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBAAE,OAAO,OAAO,CAAC,wBAAwB,CAAC,CAAA;YAC9G,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAY,CAAA;QACxD,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,2BAA2B,CAAC,CAAA;QAC3H,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;QACtB,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;eACzH,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,iCAAiC,CAAC,CAAA;QAClJ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAyC,CAAA;QAChE,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;gBACtF,MAAM,EAAE,kGAAkG,EAAE,CAAA;QAC9G,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;eACtE,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC/G,OAAO,OAAO,CAAC,mCAAmC,CAAC,CAAA;QACrD,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAoC,EAAE,SAAS;YAC5F,MAAM,EAAE,yGAAyG,EAAE,CAAA;IACvH,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,CAAC,oEAAoE,CAAC,CAAA;IAAC,CAAC;AAClG,CAAC"}

package/node_modules/dsh-subagent-codex-pro/lib/machine-supervision.js

@@ -0,0 +1,141 @@
+/** A machine supervisor owns terminal persistence even after its API caller dies. */
+import { fork } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+import { validLifecycle } from "./machine-recovery.js";
+/** This promise rejects on incomplete evidence; it never fabricates a successful receipt. */
+export async function superviseMachine(request, options) {
+    const runId = randomUUID();
+    const host = fork(fileURLToPath(new URL(import.meta.url.endsWith('.ts') ? './machine-supervisor.ts' : './machine-supervisor.js', import.meta.url)), [], {
+        execPath: process.execPath, execArgv: [], detached: true,
+        stdio: ['ignore', 'ignore', 'pipe', 'ipc'], env: {},
+    });
+    let settled = false, ready = false, receipt, failure;
+    let lastSequence = 0;
+    let exitDrain;
+    let resolveClosed;
+    const closed = new Promise(resolve => { resolveClosed = resolve; });
+    const send = (message) => {
+        if (!host.connected)
+            return;
+        try {
+            host.send({ protocol: 1, runId, ...message }, error => { if (error !== null)
+                disconnect(); });
+        }
+        catch {
+            disconnect();
+        }
+    };
+    const disconnect = () => {
+        try {
+            if (host.connected)
+                host.disconnect();
+        }
+        catch { /* The inherited lease is already closed. */ }
+    };
+    const invalid = (reason) => {
+        failure ??= new Error(reason);
+        send({ type: 'cancel' });
+        disconnect();
+    };
+    const cancel = () => { send({ type: 'cancel' }); };
+    options.signal?.addEventListener('abort', cancel, { once: true });
+    const admissionTimer = setTimeout(() => { invalid('machine supervisor admission timed out'); }, 10_000);
+    host.stderr?.on('data', () => { });
+    const settleExit = (code, signal) => {
+        if (settled)
+            return;
+        settled = true;
+        clearTimeout(admissionTimer);
+        if (exitDrain !== undefined)
+            clearTimeout(exitDrain);
+        options.signal?.removeEventListener('abort', cancel);
+        if (code !== 0 || signal !== null)
+            failure ??= new Error('machine supervisor exited without a complete normal handoff');
+        resolveClosed();
+    };
+    host.once('error', () => { invalid('machine supervisor could not start'); if (host.pid === undefined)
+        settleExit(null, null); });
+    host.once('close', settleExit);
+    host.once('exit', (code, signal) => {
+        // A simultaneous IPC disconnect can suppress ChildProcess 'close' on some
+        // Node versions. The OS exit is authoritative for this supervisor; allow a
+        // bounded IPC drain, then stop waiting on an already-dead process.
+        exitDrain = setTimeout(() => { host.stderr?.destroy(); settleExit(code, signal); }, 250);
+    });
+    host.on('message', (raw) => {
+        if (settled || failure !== undefined)
+            return;
+        if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {
+            invalid('invalid machine supervisor message');
+            return;
+        }
+        const message = raw;
+        if (message.protocol !== 1 || (message.type !== 'ready' && message.runId !== runId)) {
+            invalid('machine supervisor identity mismatch');
+            return;
+        }
+        if (message.type === 'ready') {
+            if (ready) {
+                invalid('duplicate machine supervisor admission');
+                return;
+            }
+            ready = true;
+            clearTimeout(admissionTimer);
+            const env = { ...process.env, ...options.env };
+            send({ type: 'start', request, options: { env,
+                    ...(options.recoveryDirectory === undefined ? {} : { recoveryDirectory: options.recoveryDirectory }) } });
+            if (options.signal?.aborted === true)
+                cancel();
+            return;
+        }
+        if (!ready || receipt !== undefined) {
+            invalid('machine supervisor message out of order');
+            return;
+        }
+        if (message.type === 'lifecycle') {
+            const event = message.event;
+            if (!validLifecycle(event, request.requestId, runId) || event.sequence !== lastSequence + 1) {
+                invalid('machine supervisor lifecycle mismatch');
+                return;
+            }
+            lastSequence = event.sequence;
+            // Rejection is an explicit negative ACK. The host aborts before a turn can
+            // cross a pre-dispatch barrier; a final receipt remains intact after cleanup.
+            void Promise.resolve().then(() => options.onLifecycle?.(event)).then(() => { send({ type: 'ack', sequence: event.sequence, ok: true }); }, () => { send({ type: 'ack', sequence: event.sequence, ok: false }); });
+        }
+        else if (message.type === 'progress' && typeof message.text === 'string') {
+            try {
+                options.onProgress?.(message.text);
+            }
+            catch { /* Progress is display-only. */ }
+        }
+        else if (message.type === 'result') {
+            const value = message.receipt;
+            if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+                invalid('invalid machine supervisor receipt');
+                return;
+            }
+            const result = value;
+            if (result.protocol !== 1 || result.type !== 'result' || result.requestId !== request.requestId
+                || result.runId !== runId || typeof result.ok !== 'boolean') {
+                invalid('machine supervisor terminal identity mismatch');
+                return;
+            }
+            receipt = result;
+        }
+        else if (message.type === 'failure') {
+            failure = new Error('machine supervisor could not persist or deliver complete invocation evidence');
+            disconnect();
+        }
+        else
+            invalid('unsupported machine supervisor message');
+    });
+    await closed;
+    if (failure !== undefined)
+        throw failure;
+    if (receipt === undefined)
+        throw new Error('machine supervisor closed without a terminal receipt; recover the known journal before replay');
+    return receipt;
+}
+//# sourceMappingURL=machine-supervision.js.map

package/node_modules/dsh-subagent-codex-pro/lib/machine-supervision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-supervision.js","sourceRoot":"","sources":["../src/machine-supervision.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAOtD,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAuB,EAAE,OAAuB;IACrF,MAAM,KAAK,GAAG,UAAU,EAAE,CAAA;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACtJ,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI;QACxD,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE;KACpD,CAAC,CAAA;IACF,IAAI,OAAO,GAAG,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,OAAmC,EAAE,OAA0B,CAAA;IACnG,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,IAAI,SAAqC,CAAA;IACzC,IAAI,aAAyB,CAAA;IAC7B,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,aAAa,GAAG,OAAO,CAAA,CAAC,CAAC,CAAC,CAAA;IACxE,MAAM,IAAI,GAAG,CAAC,OAAgC,EAAQ,EAAE;QACtD,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAM;QAC3B,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,KAAK,KAAK,IAAI;gBAAE,UAAU,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,UAAU,EAAE,CAAA;QAAC,CAAC;IAC7H,CAAC,CAAA;IACD,MAAM,UAAU,GAAG,GAAS,EAAE;QAC5B,IAAI,CAAC;YAAC,IAAI,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,UAAU,EAAE,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IACtG,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,CAAC,MAAc,EAAQ,EAAE;QACvC,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;QAC7B,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QACxB,UAAU,EAAE,CAAA;IACd,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,GAAS,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA,CAAC,CAAC,CAAA;IACvD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACjE,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,wCAAwC,CAAC,CAAA,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACtG,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAqF,CAAC,CAAC,CAAA;IACpH,MAAM,UAAU,GAAG,CAAC,IAAmB,EAAE,MAA6B,EAAQ,EAAE;QAC9E,IAAI,OAAO;YAAE,OAAM;QACnB,OAAO,GAAG,IAAI,CAAA;QACd,YAAY,CAAC,cAAc,CAAC,CAAA;QAC5B,IAAI,SAAS,KAAK,SAAS;YAAE,YAAY,CAAC,SAAS,CAAC,CAAA;QACpD,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACpD,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,KAAK,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;QACvH,aAAa,EAAE,CAAA;IACjB,CAAC,CAAA;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IAC/H,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QACjC,0EAA0E;QAC1E,2EAA2E;QAC3E,mEAAmE;QACnE,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;QAClC,IAAI,OAAO,IAAI,OAAO,KAAK,SAAS;YAAE,OAAM;QAC5C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QAC5H,MAAM,OAAO,GAAG,GAA8B,CAAA;QAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QAChJ,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,IAAI,KAAK,EAAE,CAAC;gBAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YACxE,KAAK,GAAG,IAAI,CAAA;YACZ,YAAY,CAAC,cAAc,CAAC,CAAA;YAC5B,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;YAC9C,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG;oBAC3C,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;YAC3G,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;gBAAE,MAAM,EAAE,CAAA;YAC9C,OAAM;QACR,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QACnG,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;YAC3B,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAY,GAAG,CAAC,EAAE,CAAC;gBAC5F,OAAO,CAAC,uCAAuC,CAAC,CAAC;gBAAC,OAAM;YAC1D,CAAC;YACD,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC7B,2EAA2E;YAC3E,8EAA8E;YAC9E,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAClE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA,CAAC,CAAC,EACnE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC,CACrE,CAAA;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3E,IAAI,CAAC;gBAAC,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;QACtF,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAA;YAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAClI,MAAM,MAAM,GAAG,KAAuB,CAAA;YACtC,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;mBAC1F,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YACnI,OAAO,GAAG,MAAM,CAAA;QAClB,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,GAAG,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;YACnG,UAAU,EAAE,CAAA;QACd,CAAC;;YAAM,OAAO,CAAC,wCAAwC,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IACF,MAAM,MAAM,CAAA;IACZ,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,OAAO,CAAA;IACxC,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAA;IAC3I,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/node_modules/dsh-subagent-codex-pro/lib/machine-supervisor.js

@@ -0,0 +1,128 @@
+/** Private supervised machine host. Native cleanup and journal completion outlive the caller. */
+import { runMachineLocal } from "./machine-local.js";
+import { MachineJournal } from "./machine-recovery.js";
+const abort = new AbortController();
+let started = false, finished = false, runId;
+let acknowledgement;
+const cancel = () => {
+    abort.abort();
+    acknowledgement?.reject(new Error('machine caller disconnected or cancelled'));
+    acknowledgement = undefined;
+};
+for (const event of ['SIGTERM', 'SIGINT', 'SIGHUP'])
+    process.on(event, cancel);
+process.on('disconnect', cancel);
+function send(message) {
+    return new Promise(resolve => {
+        if (!process.connected || process.send === undefined) {
+            resolve(false);
+            return;
+        }
+        try {
+            process.send({ protocol: 1, runId, ...message }, error => {
+                if (error !== null)
+                    cancel();
+                resolve(error === null);
+            });
+        }
+        catch {
+            cancel();
+            resolve(false);
+        }
+    });
+}
+const admissionTimer = setTimeout(() => {
+    if (!started) {
+        cancel();
+        if (process.connected)
+            process.disconnect();
+        process.exitCode = 1;
+    }
+}, 10_000);
+process.on('disconnect', () => { if (!started) {
+    clearTimeout(admissionTimer);
+    process.exitCode = 0;
+} });
+process.on('message', (raw) => {
+    if (finished)
+        return;
+    if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {
+        cancel();
+        return;
+    }
+    const message = raw;
+    if (message.protocol !== 1 || (started && message.runId !== runId)) {
+        cancel();
+        return;
+    }
+    if (message.type === 'cancel') {
+        cancel();
+        return;
+    }
+    if (message.type === 'ack') {
+        if (acknowledgement === undefined || message.sequence !== acknowledgement.sequence || typeof message.ok !== 'boolean') {
+            cancel();
+            return;
+        }
+        const pending = acknowledgement;
+        acknowledgement = undefined;
+        if (message.ok)
+            pending.resolve();
+        else {
+            pending.reject(new Error('machine lifecycle checkpoint was rejected'));
+            abort.abort();
+        }
+        return;
+    }
+    if (started || message.type !== 'start' || typeof message.runId !== 'string') {
+        cancel();
+        return;
+    }
+    started = true;
+    runId = message.runId;
+    clearTimeout(admissionTimer);
+    void execute(message.request, message.options);
+});
+async function execute(request, options) {
+    try {
+        if (!process.connected)
+            cancel();
+        const journal = options.recoveryDirectory === undefined ? undefined : new MachineJournal(options.recoveryDirectory, request.requestId, runId);
+        const onLifecycle = async (event) => {
+            journal?.lifecycle(event);
+            if (!process.connected || abort.signal.aborted)
+                throw new Error('machine caller is no longer awaiting this checkpoint');
+            const ack = new Promise((resolve, reject) => { acknowledgement = { sequence: event.sequence, resolve, reject }; });
+            // Attach the handler before a send can synchronously trigger disconnect.
+            const waiting = ack.catch((error) => { throw error; });
+            waiting.catch(() => { });
+            const timeout = setTimeout(cancel, 10_000);
+            try {
+                if (!await send({ type: 'lifecycle', event }))
+                    cancel();
+                await waiting;
+            }
+            finally {
+                clearTimeout(timeout);
+            }
+        };
+        const receipt = await runMachineLocal(request, {
+            signal: abort.signal, env: options.env, onLifecycle,
+            onProgress: text => { void send({ type: 'progress', text: text.slice(0, 16_384) }); },
+        }, runId, value => { journal?.receipt(value); });
+        await send({ type: 'result', receipt });
+    }
+    catch {
+        await send({ type: 'failure' });
+    }
+    finally {
+        finished = true;
+        acknowledgement?.reject(new Error('machine supervisor completed'));
+        acknowledgement = undefined;
+        if (process.connected)
+            process.disconnect();
+        process.exitCode = 0;
+    }
+}
+await send({ type: 'ready' });
+//# sourceMappingURL=machine-supervisor.js.map

package/node_modules/dsh-subagent-codex-pro/lib/machine-supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-supervisor.js","sourceRoot":"","sources":["../src/machine-supervisor.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEpD,OAAO,EAAE,cAAc,EAA8B,MAAM,uBAAuB,CAAA;AAGlF,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;AACnC,IAAI,OAAO,GAAG,KAAK,EAAE,QAAQ,GAAG,KAAK,EAAE,KAAyB,CAAA;AAChE,IAAI,eAA8F,CAAA;AAClG,MAAM,MAAM,GAAG,GAAS,EAAE;IACxB,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,eAAe,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAA;IAC9E,eAAe,GAAG,SAAS,CAAA;AAC7B,CAAC,CAAA;AACD,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAU;IAAE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;AACvF,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;AAEhC,SAAS,IAAI,CAAC,OAAgC;IAC5C,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QAChF,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,EAAE,KAAK,CAAC,EAAE;gBACvD,IAAI,KAAK,KAAK,IAAI;oBAAE,MAAM,EAAE,CAAA;gBAC5B,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAA;YACzB,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAAC,CAAC;IACtC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,EAAE,CAAC;QAAC,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IAAC,CAAC;AAC/F,CAAC,EAAE,MAAM,CAAC,CAAA;AACV,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAAC,YAAY,CAAC,cAAc,CAAC,CAAC;IAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAExG,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;IACrC,IAAI,QAAQ;QAAE,OAAM;IACpB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,MAAM,EAAE,CAAC;QAAC,OAAM;IAAC,CAAC;IACvF,MAAM,OAAO,GAAG,GAA8B,CAAA;IAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;QAAC,MAAM,EAAE,CAAC;QAAC,OAAM;IAAC,CAAC;IACxF,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAAC,MAAM,EAAE,CAAC;QAAC,OAAM;IAAC,CAAC;IACnD,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,IAAI,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,eAAe,CAAC,QAAQ,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC;YAAC,OAAM;QAAC,CAAC;QAC3I,MAAM,OAAO,GAAG,eAAe,CAAA;QAC/B,eAAe,GAAG,SAAS,CAAA;QAC3B,IAAI,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,OAAO,EAAE,CAAA;aAC5B,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;QAC9F,OAAM;IACR,CAAC;IACD,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAAC,MAAM,EAAE,CAAC;QAAC,OAAM;IAAC,CAAC;IAClG,OAAO,GAAG,IAAI,CAAA;IACd,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IACrB,YAAY,CAAC,cAAc,CAAC,CAAA;IAC5B,KAAK,OAAO,CAAC,OAAO,CAAC,OAAyB,EAAE,OAAO,CAAC,OAA6B,CAAC,CAAA;AACxF,CAAC,CAAC,CAAA;AAEF,KAAK,UAAU,OAAO,CAAC,OAAuB,EAAE,OAA2B;IACzE,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,MAAM,EAAE,CAAA;QAChC,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,SAAS,EAAE,KAAM,CAAC,CAAA;QAC9I,MAAM,WAAW,GAAG,KAAK,EAAE,KAA4B,EAAiB,EAAE;YACxE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAA;YACzB,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;YACvH,MAAM,GAAG,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,eAAe,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;YACvH,yEAAyE;YACzE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,MAAM,KAAK,CAAA,CAAC,CAAC,CAAC,CAAA;YAC9D,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACvB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAC1C,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;oBAAE,MAAM,EAAE,CAAA;gBACvD,MAAM,OAAO,CAAA;YACf,CAAC;oBAAS,CAAC;gBAAC,YAAY,CAAC,OAAO,CAAC,CAAA;YAAC,CAAC;QACrC,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE;YAC7C,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAuC,EAAE,WAAW;YACvF,UAAU,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA,CAAC,CAAC;SACrF,EAAE,KAAM,EAAE,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QAChD,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IACjC,CAAC;YAAS,CAAC;QACT,QAAQ,GAAG,IAAI,CAAA;QACf,eAAe,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAA;QAClE,eAAe,GAAG,SAAS,CAAA;QAC3B,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO,CAAC,UAAU,EAAE,CAAA;QAC3C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AAED,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA"}

package/node_modules/dsh-subagent-codex-pro/lib/machine.js

@@ -0,0 +1,104 @@
+/** Versioned, host-independent entry point for deterministic orchestrators. */
+import { isAbsolute } from 'node:path';
+import { runMachineLocal } from "./machine-local.js";
+import { superviseMachine } from "./machine-supervision.js";
+import { validateRecoveryDirectory } from "./machine-recovery.js";
+export { MACHINE_LIFECYCLE_VERSION, MACHINE_LIFECYCLE_CAPABILITIES, recoverMachine } from "./machine-recovery.js";
+export const MACHINE_PROTOCOL_VERSION = 1;
+export class MachineInputError extends Error {
+    code = 'INVALID_REQUEST';
+    constructor(message) { super(message); this.name = 'MachineInputError'; }
+}
+const INPUT_KEYS = new Set([
+    'protocol', 'requestId', 'prompt', 'cwd', 'model', 'effort', 'permissionMode',
+    'command', 'timeoutMs', 'maxOutputBytes', 'threadMode', 'threadId', 'images', 'outputSchema',
+]);
+function textField(input, key, optional = false) {
+    const value = input[key];
+    if (optional && value === undefined)
+        return;
+    if (typeof value !== 'string' || value.trim() === '' || value.includes('\0')) {
+        throw new MachineInputError(key + ' must be a nonempty string without NUL');
+    }
+    if (key === 'requestId' && Buffer.byteLength(value) > 4096)
+        throw new MachineInputError('requestId exceeds 4096 bytes');
+}
+/** Validate before starting any process; unknown options never silently disappear. */
+export function parseMachineRequest(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        throw new MachineInputError('request must be a JSON object');
+    }
+    const input = value;
+    if (Object.keys(input).some((key) => !INPUT_KEYS.has(key)))
+        throw new MachineInputError('request contains an unsupported field');
+    if (input.protocol !== MACHINE_PROTOCOL_VERSION)
+        throw new MachineInputError('unsupported machine protocol version');
+    for (const key of ['requestId', 'prompt', 'cwd', 'model', 'effort'])
+        textField(input, key);
+    for (const key of ['command', 'threadId'])
+        textField(input, key, true);
+    if (!isAbsolute(input.cwd))
+        throw new MachineInputError('cwd must be absolute');
+    if (typeof input.permissionMode !== 'string'
+        || !['read-only', 'workspace-write', 'dangerously-bypass-approvals-and-sandbox'].includes(input.permissionMode)) {
+        throw new MachineInputError('permissionMode must explicitly select a supported sandbox');
+    }
+    for (const key of ['timeoutMs', 'maxOutputBytes']) {
+        const number = input[key];
+        if (number !== undefined && (!Number.isSafeInteger(number) || number < (key === 'timeoutMs' ? 0 : 1)
+            || (key === 'timeoutMs' && number > 2_147_483_647))) {
+            throw new MachineInputError(key + ' must be a safe integer in its allowed range');
+        }
+    }
+    if (input.threadMode !== undefined && (typeof input.threadMode !== 'string'
+        || !['ephemeral', 'persistent'].includes(input.threadMode))) {
+        throw new MachineInputError('unsupported threadMode');
+    }
+    if (input.threadId !== undefined && input.threadMode === 'ephemeral') {
+        throw new MachineInputError('resuming a thread requires persistent mode');
+    }
+    if (input.images !== undefined && (!Array.isArray(input.images)
+        || input.images.some((path) => typeof path !== 'string' || !isAbsolute(path) || path.includes('\0')))) {
+        throw new MachineInputError('images must contain absolute paths');
+    }
+    if (input.outputSchema !== undefined) {
+        const schema = input.outputSchema;
+        if (schema === null || typeof schema !== 'object' || Array.isArray(schema)
+            || schema.type !== 'object') {
+            throw new MachineInputError('outputSchema must be an object-rooted JSON Schema');
+        }
+    }
+    return input;
+}
+/** A machine run never invents an exit code, usage, effective effort, or dollar cost. */
+export async function runMachine(value, options = {}) {
+    const request = parseMachineRequest(value);
+    if (process.platform === 'win32')
+        throw new MachineInputError('machine execution requires POSIX process-group supervision');
+    if (options === null || typeof options !== 'object' || Array.isArray(options)
+        || Object.keys(options).some(key => !['signal', 'env', 'onProgress', 'onLifecycle', 'recoveryDirectory'].includes(key))) {
+        throw new MachineInputError('machine options contain unsupported fields');
+    }
+    if (options.signal !== undefined && !(options.signal instanceof AbortSignal))
+        throw new MachineInputError('signal must be an AbortSignal');
+    if (options.onProgress !== undefined && typeof options.onProgress !== 'function')
+        throw new MachineInputError('onProgress must be a function');
+    if (options.env !== undefined && (options.env === null || typeof options.env !== 'object' || Array.isArray(options.env)
+        || Object.values(options.env).some(value => value !== undefined && (typeof value !== 'string' || value.includes('\0'))))) {
+        throw new MachineInputError('env must contain only string environment values');
+    }
+    if (options.onLifecycle !== undefined && typeof options.onLifecycle !== 'function')
+        throw new MachineInputError('onLifecycle must be a function');
+    if (options.recoveryDirectory !== undefined) {
+        try {
+            validateRecoveryDirectory(options.recoveryDirectory);
+        }
+        catch {
+            throw new MachineInputError('invalid recoveryDirectory');
+        }
+    }
+    if (options.onLifecycle !== undefined || options.recoveryDirectory !== undefined)
+        return superviseMachine(request, options);
+    return runMachineLocal(request, options);
+}
+//# sourceMappingURL=machine.js.map

package/node_modules/dsh-subagent-codex-pro/lib/machine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine.js","sourceRoot":"","sources":["../src/machine.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,OAAO,EAAE,yBAAyB,EAA8B,MAAM,uBAAuB,CAAA;AAE7F,OAAO,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAGjH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAU,CAAA;AA4DlD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,iBAAiB,CAAA;IACjC,YAAY,OAAe,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA,CAAC,CAAC;CACjF;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB;IAC7E,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc;CAC7F,CAAC,CAAA;AAEF,SAAS,SAAS,CAAC,KAA8B,EAAE,GAAW,EAAE,QAAQ,GAAG,KAAK;IAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;IACxB,IAAI,QAAQ,IAAI,KAAK,KAAK,SAAS;QAAE,OAAM;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,iBAAiB,CAAC,GAAG,GAAG,wCAAwC,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,GAAG,KAAK,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI;QAAE,MAAM,IAAI,iBAAiB,CAAC,8BAA8B,CAAC,CAAA;AACzH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,iBAAiB,CAAC,+BAA+B,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAA;IAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,uCAAuC,CAAC,CAAA;IAChI,IAAI,KAAK,CAAC,QAAQ,KAAK,wBAAwB;QAAE,MAAM,IAAI,iBAAiB,CAAC,sCAAsC,CAAC,CAAA;IACpH,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;QAAE,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC1F,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;QAAE,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IACtE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAa,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAA;IACzF,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;WACvC,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,0CAA0C,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAClH,MAAM,IAAI,iBAAiB,CAAC,2DAA2D,CAAC,CAAA;IAC1F,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;QACzB,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAK,MAAiB,GAAG,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;eAC3G,CAAC,GAAG,KAAK,WAAW,IAAK,MAAiB,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,iBAAiB,CAAC,GAAG,GAAG,8CAA8C,CAAC,CAAA;QACnF,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;WACtE,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;QACrE,MAAM,IAAI,iBAAiB,CAAC,4CAA4C,CAAC,CAAA;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;WAC1D,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAa,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjH,MAAM,IAAI,iBAAiB,CAAC,oCAAoC,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAA;QACjC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;eACpE,MAAkC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3D,MAAM,IAAI,iBAAiB,CAAC,mDAAmD,CAAC,CAAA;QAClF,CAAC;IACH,CAAC;IACD,OAAO,KAAkC,CAAA;AAC3C,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAqB,EAAE,UAA0B,EAAE;IAClF,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,4DAA4D,CAAC,CAAA;IAC3H,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;WACxE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1H,MAAM,IAAI,iBAAiB,CAAC,4CAA4C,CAAC,CAAA;IAC3E,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,YAAY,WAAW,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,+BAA+B,CAAC,CAAA;IAC1I,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,UAAU;QAAE,MAAM,IAAI,iBAAiB,CAAC,+BAA+B,CAAC,CAAA;IAC9I,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;WAClH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3H,MAAM,IAAI,iBAAiB,CAAC,iDAAiD,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU;QAAE,MAAM,IAAI,iBAAiB,CAAC,gCAAgC,CAAC,CAAA;IACjJ,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,CAAC;YAAC,yBAAyB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,iBAAiB,CAAC,2BAA2B,CAAC,CAAA;QAAC,CAAC;IACjI,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC3H,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AAC1C,CAAC"}