@full-self-browsing/lattice 1.3.0 → 1.4.0

package/dist/runtime-D25ehzCj.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-D25ehzCj.js","names":["textEncoder"],"sources":["../src/artifacts/metadata.ts","../src/artifacts/artifact.ts","../src/contract/bands.ts","../src/receipts/canonical.ts","../src/receipts/envelope.ts","../src/receipts/redact.ts","../src/receipts/receipt.ts","../src/contract/checkpoint.ts","../src/agent/format-tools.ts","../src/outputs/validate.ts","../src/runtime/survivability.ts","../src/tools/tools.ts","../src/agent/host.ts","../src/agent/types.ts","../src/agent/runtime.ts"],"sourcesContent":["import mime from \"mime\";\n\nimport type { ArtifactKind, ArtifactOptions, ArtifactSize } from \"./artifact.js\";\n\nexport interface InferMediaTypeOptions\n  extends Pick<ArtifactOptions, \"mediaType\"> {\n  readonly kind: ArtifactKind;\n  readonly defaultMediaType?: string;\n}\n\nconst textEncoder = new TextEncoder();\n\nexport function inferMediaType(\n  value: unknown,\n  options: InferMediaTypeOptions,\n): string | undefined {\n  if (options.mediaType !== undefined) {\n    return options.mediaType;\n  }\n\n  if (isBlobLike(value) && value.type !== \"\") {\n    return value.type;\n  }\n\n  if (typeof value === \"string\") {\n    return mime.getType(value) ?? options.defaultMediaType;\n  }\n\n  return options.defaultMediaType;\n}\n\nexport function measureArtifactValue(\n  value: unknown,\n  kind: ArtifactKind,\n): ArtifactSize | undefined {\n  if (kind === \"text\" && typeof value === \"string\") {\n    return measureString(value);\n  }\n\n  if (kind === \"json\") {\n    const serialized = JSON.stringify(value);\n\n    return serialized === undefined ? undefined : measureString(serialized);\n  }\n\n  if (isBlobLike(value)) {\n    return {\n      bytes: value.size,\n    };\n  }\n\n  return undefined;\n}\n\nfunction measureString(value: string): ArtifactSize {\n  return {\n    characters: value.length,\n    bytes: textEncoder.encode(value).byteLength,\n  };\n}\n\nfunction isBlobLike(value: unknown): value is Blob {\n  return typeof Blob !== \"undefined\" && value instanceof Blob;\n}\n","import type { PolicySpec } from \"../policy/policy.js\";\nimport type {\n  ArtifactLineage,\n  ArtifactTransformDescriptor,\n} from \"./lineage.js\";\nimport { inferMediaType, measureArtifactValue } from \"./metadata.js\";\n\nexport type ArtifactKind =\n  | \"text\"\n  | \"json\"\n  | \"file\"\n  | \"image\"\n  | \"audio\"\n  | \"video\"\n  | \"document\"\n  | \"url\"\n  | \"tool-result\";\n\ntype ProviderUploadArtifactSource = `provider-${\"up\"}${\"load\"}`;\n\nexport type ArtifactSource =\n  | \"inline\"\n  | \"file\"\n  | \"url\"\n  | \"generated\"\n  | ProviderUploadArtifactSource\n  | \"tool\";\n\nexport type ArtifactPrivacy = NonNullable<PolicySpec[\"privacy\"]>;\n\nexport interface ArtifactSize {\n  readonly bytes?: number;\n  readonly characters?: number;\n  readonly pages?: number;\n  readonly width?: number;\n  readonly height?: number;\n  readonly durationMs?: number;\n}\n\nexport interface ArtifactFingerprint {\n  readonly algorithm: \"sha256\";\n  readonly value: string;\n}\n\nexport interface ArtifactStorageRef {\n  readonly storeId: string;\n  readonly key: string;\n}\n\nexport interface ArtifactOptions {\n  readonly id?: string;\n  readonly mediaType?: string;\n  readonly label?: string;\n  readonly metadata?: Record<string, unknown>;\n  readonly privacy?: ArtifactPrivacy;\n  readonly size?: ArtifactSize;\n  readonly fingerprint?: ArtifactFingerprint;\n  readonly storage?: ArtifactStorageRef;\n  readonly lineage?: ArtifactLineage;\n}\n\nexport interface ArtifactToolResultOptions extends ArtifactOptions {\n  readonly toolName: string;\n  readonly callId?: string;\n}\n\nexport interface ArtifactDerivedOptions extends ArtifactOptions {\n  readonly kind: ArtifactKind;\n  readonly source?: ArtifactSource;\n  readonly value?: unknown;\n  readonly parents: readonly ArtifactRef[];\n  readonly transform: ArtifactTransformDescriptor;\n}\n\nexport interface ArtifactRef {\n  readonly id: string;\n  readonly kind: ArtifactKind;\n  readonly mediaType?: string;\n  readonly source: ArtifactSource;\n  readonly label?: string;\n  readonly metadata?: Record<string, unknown>;\n  readonly privacy: ArtifactPrivacy;\n  readonly size?: ArtifactSize;\n  readonly fingerprint?: ArtifactFingerprint;\n  readonly storage?: ArtifactStorageRef;\n  readonly lineage?: ArtifactLineage;\n}\n\nexport type ArtifactInput = ArtifactRef & {\n  readonly value?: unknown;\n};\n\nexport const artifact = {\n  text(value: string, options: ArtifactOptions = {}): ArtifactInput {\n    return createArtifact(\"text\", \"inline\", value, options, \"text/plain\");\n  },\n\n  json(value: unknown, options: ArtifactOptions = {}): ArtifactInput {\n    return createArtifact(\"json\", \"inline\", value, options, \"application/json\");\n  },\n\n  file(value: Blob | File | string, options: ArtifactOptions = {}): ArtifactInput {\n    return createArtifact(\"file\", \"file\", value, options);\n  },\n\n  image(value: Blob | File | string, options: ArtifactOptions = {}): ArtifactInput {\n    return createArtifact(\"image\", \"file\", value, options);\n  },\n\n  audio(value: Blob | File | string, options: ArtifactOptions = {}): ArtifactInput {\n    return createArtifact(\"audio\", \"file\", value, options);\n  },\n\n  document(value: Blob | File | string, options: ArtifactOptions = {}): ArtifactInput {\n    return createArtifact(\"document\", \"file\", value, options);\n  },\n\n  url(value: string | URL, options: ArtifactOptions = {}): ArtifactInput {\n    return createArtifact(\"url\", \"url\", value.toString(), options);\n  },\n\n  toolResult(value: unknown, options: ArtifactToolResultOptions): ArtifactInput {\n    return createArtifact(\n      \"tool-result\",\n      \"tool\",\n      value,\n      {\n        ...options,\n        metadata: {\n          ...options.metadata,\n          toolName: options.toolName,\n          ...(options.callId !== undefined ? { callId: options.callId } : {}),\n        },\n      },\n      \"application/json\",\n    );\n  },\n\n  derive(input: ArtifactDerivedOptions): ArtifactInput {\n    const {\n      kind,\n      source = \"generated\",\n      value,\n      parents,\n      transform,\n      ...options\n    } = input;\n\n    return createArtifact(kind, source, value, {\n      ...options,\n      lineage: {\n        parents: parents.map(toArtifactRef),\n        transform,\n      },\n    }, defaultMediaTypeForKind(kind));\n  },\n};\n\nexport function toArtifactRef(input: ArtifactInput | ArtifactRef): ArtifactRef {\n  return {\n    id: input.id,\n    kind: input.kind,\n    source: input.source,\n    privacy: input.privacy,\n    ...(input.mediaType !== undefined ? { mediaType: input.mediaType } : {}),\n    ...(input.label !== undefined ? { label: input.label } : {}),\n    ...(input.metadata !== undefined ? { metadata: input.metadata } : {}),\n    ...(input.size !== undefined ? { size: input.size } : {}),\n    ...(input.fingerprint !== undefined ? { fingerprint: input.fingerprint } : {}),\n    ...(input.storage !== undefined ? { storage: input.storage } : {}),\n    ...(input.lineage !== undefined ? { lineage: input.lineage } : {}),\n  };\n}\n\nexport function isArtifactRef(value: unknown): value is ArtifactRef {\n  if (!isRecord(value)) {\n    return false;\n  }\n\n  return (\n    typeof value.id === \"string\" &&\n    isArtifactKind(value.kind) &&\n    isArtifactSource(value.source) &&\n    isArtifactPrivacy(value.privacy)\n  );\n}\n\nfunction createArtifact(\n  kind: ArtifactKind,\n  source: ArtifactSource,\n  value: unknown,\n  options: ArtifactOptions,\n  defaultMediaType?: string,\n): ArtifactInput {\n  const mediaType = inferMediaType(value, {\n    kind,\n    ...(options.mediaType !== undefined ? { mediaType: options.mediaType } : {}),\n    ...(defaultMediaType !== undefined ? { defaultMediaType } : {}),\n  });\n  const size = options.size ?? measureArtifactValue(value, kind);\n\n  return {\n    id: options.id ?? createArtifactId(kind),\n    kind,\n    source,\n    value,\n    privacy: options.privacy ?? \"standard\",\n    ...(mediaType !== undefined ? { mediaType } : {}),\n    ...(options.label !== undefined ? { label: options.label } : {}),\n    ...(options.metadata !== undefined ? { metadata: options.metadata } : {}),\n    ...(size !== undefined ? { size } : {}),\n    ...(options.fingerprint !== undefined ? { fingerprint: options.fingerprint } : {}),\n    ...(options.storage !== undefined ? { storage: options.storage } : {}),\n    ...(options.lineage !== undefined ? { lineage: options.lineage } : {}),\n  };\n}\n\nfunction defaultMediaTypeForKind(kind: ArtifactKind): string | undefined {\n  switch (kind) {\n    case \"text\":\n      return \"text/plain\";\n    case \"json\":\n    case \"tool-result\":\n      return \"application/json\";\n    default:\n      return undefined;\n  }\n}\n\nfunction isArtifactKind(value: unknown): value is ArtifactKind {\n  return (\n    value === \"text\" ||\n    value === \"json\" ||\n    value === \"file\" ||\n    value === \"image\" ||\n    value === \"audio\" ||\n    value === \"video\" ||\n    value === \"document\" ||\n    value === \"url\" ||\n    value === \"tool-result\"\n  );\n}\n\nfunction isArtifactSource(value: unknown): value is ArtifactSource {\n  return (\n    value === \"inline\" ||\n    value === \"file\" ||\n    value === \"url\" ||\n    value === \"generated\" ||\n    value === `provider-${\"up\"}${\"load\"}` ||\n    value === \"tool\"\n  );\n}\n\nfunction isArtifactPrivacy(value: unknown): value is ArtifactPrivacy {\n  return value === \"standard\" || value === \"sensitive\" || value === \"restricted\";\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction createArtifactId(kind: ArtifactKind): string {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\") {\n    return `artifact:${kind}:${crypto.randomUUID()}`;\n  }\n\n  return `artifact:${kind}:${Date.now()}:${Math.random().toString(16).slice(2)}`;\n}\n","/**\n * Tripwire band pipeline -- Lattice's primitive for ordered, budgeted hook\n * execution around provider + tool boundaries.\n *\n * This module is a SIBLING of tripwire.ts (the pure invariant evaluator) --\n * the two have no callsite coupling. evaluateTripwires stays pure; the\n * band pipeline owns side effects (tracer emit, timing, mutation isolation).\n *\n * Phase 2 (FSB v0.10.0-attempt-2) -- ships:\n *   - Priority bands: SAFETY (0) > OBSERVABILITY (1) > EXTENSION (2)\n *   - Per-handler regex matcher (opt-in)\n *   - Per-handler race-with-log budget (default 100ms; HOOK_TIMEOUT via TracerLike)\n *   - structuredClone + Object.freeze context per handler (mutations don't leak)\n *   - Irreversible freeze() blocking late register()\n *   - HookLifecycleEvent union: BEFORE_PROVIDER, AFTER_PROVIDER, BEFORE_TOOL, AFTER_TOOL\n *\n * Lifecycle event vocabulary is intentionally SEPARATE from tracing.ts's\n * RunEventKind. Run events (\"run.start\", \"provider.attempt\", ...) describe\n * Lattice runtime stages; lifecycle events describe pluggable hook\n * attach-points. Phase 3 may add observability event kinds; Phase 2 ships\n * only the four lifecycle events listed.\n *\n * Race-with-log uses no-abort Promise.race: the handler keeps running\n * in the background after a timeout (CPU-leak risk is acceptable; see\n * 02-CONTEXT.md D-09 and 02-RESEARCH.md CD-01 Resolution).\n */\n\nimport type { TracerLike } from \"../tracing/tracing.js\";\n\n/**\n * Hook lifecycle event vocabulary -- separate from RunEventKind by design.\n *\n * Phase 19 (v1.2) additively extends with BEFORE_AGENT_ITERATION and\n * AFTER_AGENT_ITERATION — emitted by `runAgent` around each iteration's\n * provider call. Existing four events continue to fire inside each\n * iteration (BEFORE/AFTER_PROVIDER per native call; BEFORE/AFTER_TOOL\n * per dispatched tool).\n */\nexport type HookLifecycleEvent =\n  | \"BEFORE_PROVIDER\"\n  | \"AFTER_PROVIDER\"\n  | \"BEFORE_TOOL\"\n  | \"AFTER_TOOL\"\n  | \"BEFORE_AGENT_ITERATION\"\n  | \"AFTER_AGENT_ITERATION\";\n\n/**\n * SAFETY-band veto mechanism — Phase 19.\n *\n * Handlers can deny an iteration by calling `controls.deny(reason)`. The\n * pipeline records the latest reason and exposes it via `lastDenialReason()`.\n * The reason resets at the start of each `run()` call.\n *\n * Composition convention: the agent runtime invokes BEFORE_AGENT_ITERATION\n * before provider call, then checks `pipeline.lastDenialReason()`. If set,\n * the iteration aborts with `agent-iteration-denied` failure.\n */\nexport interface HookDenyDirective {\n  readonly reason: string;\n}\n\n/**\n * Controls passed to each handler as an optional second argument.\n *\n * Backward compat: existing single-argument handlers (Phase 15 + Phase 16)\n * ignore this and continue to work unchanged.\n */\nexport interface HookControls {\n  /** Set a denial reason; the latest call wins per `run()`. */\n  readonly deny: (reason: string) => void;\n}\n\n/**\n * Priority bands. Lower number = higher priority (runs first).\n *\n * SAFETY (0)        -- safety / breaker hooks; cannot be overridden by lower bands\n * OBSERVABILITY (1) -- logging, metrics, audit; runs after safety, before extension\n * EXTENSION (2)     -- user-supplied hooks; runs last\n *\n * Within a band, handlers run in registration order.\n */\nexport const BAND = {\n  SAFETY: 0,\n  OBSERVABILITY: 1,\n  EXTENSION: 2,\n} as const;\n\nexport type Band = typeof BAND[keyof typeof BAND];\n\nconst BAND_ORDER: readonly Band[] = [BAND.SAFETY, BAND.OBSERVABILITY, BAND.EXTENSION];\n\n/**\n * Handler input -- frozen snapshot of the caller's context at run() time.\n *\n * structuredClone-then-Object.freeze: handlers receive a deep-cloned,\n * surface-frozen view. Mutations on the handler side do NOT leak back to\n * the calling site.\n *\n * The handler's return value is currently ignored; future revisions may\n * add a typed return that downstream bands consume.\n */\nexport interface HookHandler<TContext = unknown> {\n  (context: Readonly<TContext>, controls?: HookControls): void | Promise<void>;\n}\n\nexport interface RegisterOptions {\n  readonly band: Band;\n  readonly matcher?: RegExp;\n  readonly budgetMs?: number;\n}\n\n/**\n * The HookPipeline interface returned by createHookPipeline().\n *\n * IMMUTABILITY: once freeze() is called, register() throws an Error whose\n * .name === \"PIPELINE_FROZEN\". freeze() is irreversible by design --\n * protects against late-binding hook injection mid-session.\n */\nexport interface HookPipeline {\n  readonly kind: \"hook-pipeline\";\n  register<TContext = unknown>(\n    event: HookLifecycleEvent,\n    handler: HookHandler<TContext>,\n    options: RegisterOptions,\n  ): void;\n  freeze(): void;\n  isFrozen(): boolean;\n  run<TContext = unknown>(\n    event: HookLifecycleEvent,\n    context: TContext,\n  ): Promise<void>;\n  /**\n   * Phase 19: returns the latest denial reason set by any handler during\n   * the most recent `run()` call. Resets to `null` at the start of each run.\n   * Read by the agent runtime to detect SAFETY-band veto.\n   */\n  lastDenialReason(): string | null;\n}\n\nexport interface CreateHookPipelineOptions {\n  readonly tracer?: TracerLike;\n  readonly sessionId?: string;\n  readonly defaultBudgetMs?: number;\n}\n\nexport const HOOK_DEFAULT_BUDGET_MS = 100;\nexport const PIPELINE_FROZEN_ERROR_NAME = \"PIPELINE_FROZEN\";\nexport const HOOK_TIMEOUT_EVENT_NAME = \"HOOK_TIMEOUT\";\n\ninterface HandlerRecord {\n  readonly handler: HookHandler<unknown>;\n  readonly matcher?: RegExp;\n  readonly budgetMs: number;\n  readonly band: Band;\n  readonly registrationIndex: number;\n}\n\nfunction freezeContext<T>(ctx: T): Readonly<T> {\n  let cloned: T;\n  try {\n    cloned = structuredClone(ctx);\n  } catch {\n    cloned = ctx;\n  }\n  if (typeof cloned === \"object\" && cloned !== null) {\n    Object.freeze(cloned);\n  }\n  return cloned as Readonly<T>;\n}\n\nasync function runHandlerWithBudget(\n  record: HandlerRecord,\n  ctx: Readonly<unknown>,\n  controls: HookControls,\n  emit: ((kind: string, payload: Record<string, unknown>) => void) | undefined,\n  event: HookLifecycleEvent,\n  sessionId: string | undefined,\n): Promise<void> {\n  const startedAt = performance.now();\n  let timeoutFired = false;\n  const budgetMs = record.budgetMs;\n  const budgetPromise = new Promise<\"__timeout__\">((resolve) => {\n    setTimeout(() => {\n      timeoutFired = true;\n      resolve(\"__timeout__\");\n    }, budgetMs);\n  });\n  const handlerPromise = (async () => {\n    try {\n      await record.handler(ctx, controls);\n    } catch {\n      // handler errors are absorbed (pipeline does not propagate)\n    }\n    return \"__done__\" as const;\n  })();\n  const result = await Promise.race([handlerPromise, budgetPromise]);\n  if (result === \"__timeout__\" && timeoutFired) {\n    const elapsedMs = Math.round(performance.now() - startedAt);\n    if (emit !== undefined) {\n      emit(HOOK_TIMEOUT_EVENT_NAME, {\n        event,\n        band: record.band,\n        budgetMs,\n        ...(sessionId !== undefined ? { sessionId } : {}),\n        handlerIndex: record.registrationIndex,\n        elapsedMs,\n      });\n    }\n  }\n}\n\n/**\n * Factory: build a fresh hook pipeline.\n */\nexport function createHookPipeline(\n  options?: CreateHookPipelineOptions,\n): HookPipeline {\n  const tracer = options?.tracer;\n  const sessionId = options?.sessionId;\n  const defaultBudgetMs = options?.defaultBudgetMs ?? HOOK_DEFAULT_BUDGET_MS;\n  const registry: Map<HookLifecycleEvent, Map<Band, HandlerRecord[]>> = new Map();\n  let frozen = false;\n  let globalRegistrationCounter = 0;\n  let currentDenialReason: string | null = null;\n\n  // TracerLike.event is optional on the interface; the emit factory bridges\n  // through optional-chain so a tracer without an event method (or no tracer\n  // at all) becomes a no-op rather than a TypeError. Mirrors the pattern at\n  // runtime/create-ai.ts:862 (normalized.tracing?.event?.(...)).\n  const emit: ((kind: string, payload: Record<string, unknown>) => void) | undefined =\n    tracer !== undefined\n      ? (kind, payload) => {\n          tracer.event?.(kind, payload);\n        }\n      : undefined;\n\n  function register<TContext = unknown>(\n    event: HookLifecycleEvent,\n    handler: HookHandler<TContext>,\n    opts: RegisterOptions,\n  ): void {\n    if (frozen) {\n      const err = new Error(\"HookPipeline.register() called after freeze()\");\n      err.name = PIPELINE_FROZEN_ERROR_NAME;\n      throw err;\n    }\n    let perEventBands = registry.get(event);\n    if (perEventBands === undefined) {\n      perEventBands = new Map();\n      registry.set(event, perEventBands);\n    }\n    let arr = perEventBands.get(opts.band);\n    if (arr === undefined) {\n      arr = [];\n      perEventBands.set(opts.band, arr);\n    }\n    const record: HandlerRecord = {\n      handler: handler as HookHandler<unknown>,\n      ...(opts.matcher !== undefined ? { matcher: opts.matcher } : {}),\n      budgetMs: opts.budgetMs ?? defaultBudgetMs,\n      band: opts.band,\n      registrationIndex: globalRegistrationCounter,\n    };\n    globalRegistrationCounter += 1;\n    arr.push(record);\n  }\n\n  function freezePipeline(): void {\n    frozen = true;\n  }\n\n  function isFrozen(): boolean {\n    return frozen;\n  }\n\n  async function run<TContext = unknown>(\n    event: HookLifecycleEvent,\n    context: TContext,\n  ): Promise<void> {\n    currentDenialReason = null;\n    const perEventBands = registry.get(event);\n    if (perEventBands === undefined) return;\n    const controls: HookControls = {\n      deny: (reason: string) => {\n        currentDenialReason = reason;\n      },\n    };\n    for (const band of BAND_ORDER) {\n      const arr = perEventBands.get(band);\n      if (arr === undefined || arr.length === 0) continue;\n      for (const record of arr) {\n        if (record.matcher !== undefined && !record.matcher.test(event)) {\n          continue;\n        }\n        const ctx = freezeContext(context);\n        await runHandlerWithBudget(record, ctx, controls, emit, event, sessionId);\n      }\n    }\n  }\n\n  function lastDenialReason(): string | null {\n    return currentDenialReason;\n  }\n\n  const pipeline: HookPipeline = {\n    kind: \"hook-pipeline\",\n    register,\n    freeze: freezePipeline,\n    isFrozen,\n    run,\n    lastDenialReason,\n  };\n  return pipeline;\n}\n","import canonicalize from \"canonicalize\";\n\nimport type { Usage } from \"../providers/provider.js\";\nimport type {\n  CapabilityReceiptBody,\n  ReceiptUsageCanonical,\n} from \"./types.js\";\n\nconst encoder = new TextEncoder();\n\n/**\n * Convert costUsd (number | null) to its canonical string form.\n * RFC 8785 requires deterministic float-to-string; using JS Number→string\n * directly is unsafe across V8 versions (Grisu3 vs Dragonbox). We pin the\n * format by routing through Number.prototype.toString() for FINITE numbers\n * only, and treat NaN/Infinity as null. This matches \"I-JSON only\" from\n * 09-CONTEXT.md — receipts NEVER carry non-finite floats.\n */\nexport function stringifyCostUsd(costUsd: number | null): string | null {\n  if (costUsd === null) return null;\n  if (!Number.isFinite(costUsd)) return null;\n  return costUsd.toString();\n}\n\n/**\n * Convert a runtime Usage (number costUsd) to its canonical receipt form\n * (string costUsd). This is the single conversion site — canonical bytes\n * NEVER see a raw float in the cost field.\n */\nexport function usageToCanonical(usage: Usage): ReceiptUsageCanonical {\n  return {\n    promptTokens: usage.promptTokens,\n    completionTokens: usage.completionTokens,\n    costUsd: stringifyCostUsd(usage.costUsd),\n  };\n}\n\n/**\n * Canonicalize a receipt body to JCS bytes (RFC 8785).\n *\n * INVARIANT: callers MUST pass an already-redacted body. The redactor in\n * redact.ts produces the input to this function — never the cleartext.\n * See 09-CONTEXT.md \"Redact-Then-Sign Ordering (UNRETROFITTABLE)\".\n *\n * Throws if canonicalize returns undefined (impossible for valid bodies\n * — surfaces a programmer error rather than silently producing zero\n * bytes that would later fail signature verification).\n */\nexport function canonicalizeReceiptBody(\n  body: CapabilityReceiptBody,\n): Uint8Array {\n  const json = canonicalize(body);\n  if (json === undefined) {\n    throw new Error(\n      \"canonicalizeReceiptBody: canonicalize returned undefined; receipt body contained a non-canonicalizable value (function/symbol/undefined).\",\n    );\n  }\n  return encoder.encode(json);\n}\n","/**\n * DSSE-shaped envelope encoder/decoder + Pre-Authentication Encoding (PAE).\n *\n * This module is the single source of truth for:\n *   - PAYLOAD_TYPE constant (the receipt media type)\n *   - base64 (standard, NOT base64url) encoding helpers\n *   - DSSE v1.0 PAE construction: signatures MUST be computed over the bytes\n *     returned by buildPae(...), never over raw canonical JSON bytes.\n *\n * Reference: https://github.com/secure-systems-lab/dsse/blob/v1.0.0/protocol.md\n *\n * Reconciled in plan 09-03 to import canonical types from ./types.js (plan\n * 09-01 lands the spine). `_Local` aliases are retained as deprecated type\n * exports for backward compatibility with the Wave 1 sibling imports.\n */\n\nimport type { ReceiptEnvelope, ReceiptSignature } from \"./types.js\";\n\n/**\n * @deprecated Use ReceiptSignature from \"./types.js\". Retained as an alias\n * during the Wave 1 -> Wave 2 reconciliation.\n */\nexport type ReceiptSignature_Local = ReceiptSignature;\n\n/**\n * @deprecated Use ReceiptEnvelope from \"./types.js\". Retained as an alias\n * during the Wave 1 -> Wave 2 reconciliation.\n */\nexport type ReceiptEnvelope_Local = ReceiptEnvelope;\n\nexport const PAYLOAD_TYPE = \"application/vnd.lattice.receipt+json\" as const;\n\nconst textEncoder = new TextEncoder();\n\nexport function base64Encode(bytes: Uint8Array): string {\n  return Buffer.from(bytes).toString(\"base64\");\n}\n\nexport function base64Decode(value: string): Uint8Array {\n  return new Uint8Array(Buffer.from(value, \"base64\"));\n}\n\n/**\n * DSSE v1.0 Pre-Authentication Encoding.\n *\n * Reference: https://github.com/secure-systems-lab/dsse/blob/v1.0.0/protocol.md\n *\n * PAE = UTF-8(\"DSSEv1 \" + len(payloadType) + \" \" + payloadType\n *           + \" \" + len(payload) + \" \" + payload)\n *\n * `payload` here is the BASE64-encoded string per DSSE v1.0 spec (NOT raw\n * canonical bytes). Both signing and verification MUST construct PAE the\n * same way; this module is the single source of truth.\n *\n * ASCII length is decimal (no zero-padding). e.g. length 1000 → \"1000\".\n */\nexport function buildPae(\n  payloadType: string,\n  payloadBase64: string,\n): Uint8Array {\n  const ascii =\n    \"DSSEv1 \" +\n    payloadType.length.toString() +\n    \" \" +\n    payloadType +\n    \" \" +\n    payloadBase64.length.toString() +\n    \" \" +\n    payloadBase64;\n  return textEncoder.encode(ascii);\n}\n\nexport interface EncodeEnvelopeInput {\n  readonly payloadBytes: Uint8Array;\n  readonly signatures: readonly {\n    readonly keyid: string;\n    readonly sig: Uint8Array;\n  }[];\n}\n\nexport function encodeEnvelope(\n  input: EncodeEnvelopeInput,\n): ReceiptEnvelope {\n  const payload = base64Encode(input.payloadBytes);\n  const signatures: ReceiptSignature[] = input.signatures.map((entry) => ({\n    keyid: entry.keyid,\n    sig: base64Encode(entry.sig),\n  }));\n  return {\n    payloadType: PAYLOAD_TYPE,\n    payload,\n    signatures,\n  };\n}\n\nexport interface DecodedEnvelope {\n  readonly payloadType: string;\n  readonly payloadBytes: Uint8Array;\n  readonly signatures: readonly {\n    readonly keyid: string;\n    readonly sig: Uint8Array;\n  }[];\n}\n\nexport function decodeEnvelope(\n  envelope: ReceiptEnvelope,\n): DecodedEnvelope {\n  if (envelope.payloadType !== PAYLOAD_TYPE) {\n    throw new Error(\n      `envelope payloadType mismatch: expected \"${PAYLOAD_TYPE}\" got \"${envelope.payloadType}\"`,\n    );\n  }\n  return {\n    payloadType: envelope.payloadType,\n    payloadBytes: base64Decode(envelope.payload),\n    signatures: envelope.signatures.map((entry) => ({\n      keyid: entry.keyid,\n      sig: base64Decode(entry.sig),\n    })),\n  };\n}\n","import type {\n  CapabilityReceiptBody,\n  ReceiptRedaction,\n} from \"./types.js\";\n\n/**\n * Default redaction policy id for v1.1. Free-form string per\n * 09-CONTEXT.md — registry enforcement deferred to v1.2.\n */\nexport const DEFAULT_REDACTION_POLICY_ID = \"lattice.default.v1\";\n\nexport interface RedactionResult {\n  readonly body: CapabilityReceiptBody;\n  readonly redactions: readonly ReceiptRedaction[];\n}\n\n/**\n * Redact a receipt body BEFORE canonicalization (and BEFORE signing).\n *\n * The signed digest commits to canonicalize(redact(body)). NEVER the\n * other way around. See 09-CONTEXT.md \"Redact-Then-Sign Ordering\n * (UNRETROFITTABLE)\" and PITFALLS.md Pitfall #1.\n *\n * For v1.1 the default policy is minimal — the heavy lifting already\n * happened upstream:\n *   - Tripwire evaluator emits {detector, substring} for no-pii (T-08-01).\n *   - Provider responses are hashed into inputHashes/outputHash, never\n *     embedded raw.\n *   - Router reject messages do not contain PII by construction.\n *\n * This function therefore primarily:\n *   1. Materializes the redactions[] manifest declaring what WAS elided\n *      upstream (so receipts are self-describing).\n *   2. Provides the extension point future policies will use.\n *\n * Returns a NEW body — never mutates the input.\n */\nexport function redactReceiptBody(\n  body: CapabilityReceiptBody,\n  policyId: string = DEFAULT_REDACTION_POLICY_ID,\n): RedactionResult {\n  const redactions: ReceiptRedaction[] = [];\n\n  // Record the no-pii redaction as a declared manifest entry.\n  // The tripwire kernel ALREADY redacted to {detector, substring};\n  // this only declares that the redaction happened so verifiers can\n  // see it in the signed body.\n  if (\n    body.tripwireEvidence !== undefined &&\n    body.tripwireEvidence.kind === \"no-pii\"\n  ) {\n    redactions.push({\n      path: \"tripwireEvidence.observed\",\n      reason: \"no-pii-detector-substring-only\",\n    });\n  }\n\n  // Sort redactions by path for canonical-form stability (sorted arrays\n  // canonicalize identically regardless of insertion order).\n  const sorted = [...redactions].sort((a, b) =>\n    a.path < b.path ? -1 : a.path > b.path ? 1 : 0,\n  );\n\n  return {\n    body: {\n      ...body,\n      redactionPolicyId: policyId,\n      redactions: sorted,\n    },\n    redactions: sorted,\n  };\n}\n","import type { TrainingClass } from \"../capabilities/profile.js\";\nimport type { TripwireEvidence } from \"../contract/tripwire.js\";\nimport type { RouteRejectReason } from \"../plan/plan.js\";\nimport type { Usage } from \"../providers/provider.js\";\n\nimport { canonicalizeReceiptBody, usageToCanonical } from \"./canonical.js\";\nimport {\n  PAYLOAD_TYPE,\n  base64Encode,\n  buildPae,\n  encodeEnvelope,\n} from \"./envelope.js\";\nimport { DEFAULT_REDACTION_POLICY_ID, redactReceiptBody } from \"./redact.js\";\nimport type {\n  CapabilityReceiptBody,\n  ContractVerdict,\n  ReceiptEnvelope,\n  ReceiptModel,\n  ReceiptRoute,\n  ReceiptSigner,\n} from \"./types.js\";\n\n/**\n * Public input to createReceipt. Mirrors CapabilityReceiptBody minus:\n *   - `version` (forced to \"lattice-receipt/v1.3\" per Phase 46)\n *   - `kid` (forced from signer.kid — caller cannot mismatch)\n *   - `redactions[]` (populated by redactReceiptBody)\n *   - `usage.costUsd` (converted to canonical string by usageToCanonical)\n *\n * receiptId and issuedAt default to runtime-generated values when omitted.\n * redactionPolicyId defaults to DEFAULT_REDACTION_POLICY_ID.\n */\nexport interface CreateReceiptInput {\n  readonly runId: string;\n  readonly issuedAt?: string;\n  readonly receiptId?: string;\n  readonly model: ReceiptModel;\n  readonly route: ReceiptRoute;\n  readonly modelClass?: TrainingClass;\n  // Phase 39 (DELEG-06): chain-link to the parent receipt's CID\n  // (`sha256:<hex>` of the parent envelope's canonical payload bytes,\n  // derived via receipts/cid.ts receiptCid). Omit for root/non-crew receipts.\n  readonly parentReceiptCid?: string;\n  readonly lineageMerkleRoot?: string;\n  readonly usage: Usage;\n  readonly contractVerdict: ContractVerdict;\n  readonly contractHash: string | null;\n  readonly inputHashes: readonly string[];\n  readonly outputHash: string | null;\n  readonly redactionPolicyId?: string;\n  readonly noRouteReasons?: readonly RouteRejectReason[];\n  readonly tripwireEvidence?: TripwireEvidence;\n  // Phase 2 v1.1 step-marker fields. All optional; populated when a step\n  // transition emits a receipt. Phase 26 (CRYPTO-01) collapsed the v1/v1.1\n  // version-bump heuristic to ALWAYS emit \"lattice-receipt/v1.1\" since v1\n  // receipts can no longer pass verifyReceipt (receipt-downgrade defense).\n  readonly stepName?: string;\n  readonly stepIndex?: number;\n  readonly parentStepName?: string;\n  readonly previousStepName?: string;\n  readonly sessionId?: string;\n  readonly timestamp?: string;\n}\n\n/**\n * Build, redact, canonicalize, sign, and envelope a CapabilityReceipt.\n *\n * Ordering INVARIANT (09-CONTEXT.md, PITFALLS.md Pitfall #1):\n *   redact -> canonicalize -> PAE -> sign -> encode\n *\n * The signed digest commits to canonicalize(redact(body)). The function\n * structure makes any other ordering impossible to write by accident —\n * canonicalizeReceiptBody is ONLY called on the output of redactReceiptBody.\n *\n * Defense in depth:\n *   - body.kid is assigned from signer.kid, never from input (input has no\n *     kid field). The signed body and the envelope keyid CANNOT disagree by\n *     construction.\n *   - signer.kid is also written to envelope.signatures[0].keyid, so the\n *     verifier can cross-check (Step 7 of verifyReceipt).\n *\n * I-JSON guarantees: usage.costUsd is converted to string (or null) via\n * usageToCanonical. Receipts NEVER carry raw floats in the canonical form.\n */\nexport async function createReceipt(\n  input: CreateReceiptInput,\n  signer: ReceiptSigner,\n): Promise<ReceiptEnvelope> {\n  const policyId = input.redactionPolicyId ?? DEFAULT_REDACTION_POLICY_ID;\n  const receiptId = input.receiptId ?? crypto.randomUUID();\n  const issuedAt = input.issuedAt ?? new Date().toISOString();\n\n  // Phase 46: always emit v1.3. v1.1/v1.2 remain verifier-compatible, but\n  // new receipts can carry the optional lineageMerkleRoot provenance field.\n  const version: CapabilityReceiptBody[\"version\"] = \"lattice-receipt/v1.3\";\n\n  // Step 1: assemble the raw body. `kid` comes from the signer — caller\n  // cannot mismatch it. `usage.costUsd` is converted to string (I-JSON).\n  const body0: CapabilityReceiptBody = {\n    version,\n    receiptId,\n    runId: input.runId,\n    issuedAt,\n    kid: signer.kid,\n    model: input.model,\n    route: input.route,\n    ...(input.modelClass !== undefined ? { modelClass: input.modelClass } : {}),\n    ...(input.parentReceiptCid !== undefined ? { parentReceiptCid: input.parentReceiptCid } : {}),\n    ...(input.lineageMerkleRoot !== undefined ? { lineageMerkleRoot: input.lineageMerkleRoot } : {}),\n    usage: usageToCanonical(input.usage),\n    contractVerdict: input.contractVerdict,\n    contractHash: input.contractHash,\n    inputHashes: input.inputHashes,\n    outputHash: input.outputHash,\n    redactionPolicyId: policyId,\n    redactions: [],\n    ...(input.noRouteReasons !== undefined\n      ? { noRouteReasons: input.noRouteReasons }\n      : {}),\n    ...(input.tripwireEvidence !== undefined\n      ? { tripwireEvidence: input.tripwireEvidence }\n      : {}),\n    // v1.1 step-marker fields (conditional-spread to honor exactOptionalPropertyTypes)\n    ...(input.stepName !== undefined ? { stepName: input.stepName } : {}),\n    ...(input.stepIndex !== undefined ? { stepIndex: input.stepIndex } : {}),\n    ...(input.parentStepName !== undefined ? { parentStepName: input.parentStepName } : {}),\n    ...(input.previousStepName !== undefined ? { previousStepName: input.previousStepName } : {}),\n    ...(input.sessionId !== undefined ? { sessionId: input.sessionId } : {}),\n    ...(input.timestamp !== undefined ? { timestamp: input.timestamp } : {}),\n  };\n\n  // Step 2: redact BEFORE canonicalize. body now carries the redactions[]\n  // manifest declaring what was elided.\n  const { body } = redactReceiptBody(body0, policyId);\n\n  // Step 3: canonicalize the redacted body (RFC 8785 JCS).\n  const payloadBytes = canonicalizeReceiptBody(body);\n\n  // Step 4: base64-encode for the envelope (DSSE wire format).\n  const payload = base64Encode(payloadBytes);\n\n  // Step 5: build PAE — Pre-Authentication Encoding per DSSE v1.0.\n  const pae = buildPae(PAYLOAD_TYPE, payload);\n\n  // Step 6: sign the PAE bytes.\n  const sig = await signer.sign(pae);\n\n  // Step 7: assemble the envelope. signer.kid duplicated in signatures[]\n  // even though it is ALSO inside the signed body (defense in depth).\n  return encodeEnvelope({\n    payloadBytes,\n    signatures: [{ keyid: signer.kid, sig }],\n  });\n}\n","/**\n * Checkpoint hook -- Lattice's per-step receipt + tracer-event primitive.\n *\n * This module is a SIBLING of bands.ts (the hook pipeline factory) and\n * receipt.ts (the Capability Receipt mint). It does NOT modify either; the\n * checkpoint hook is composed from both surfaces.\n *\n * Phase 3 (FSB v0.10.0-attempt-2) -- ships:\n *   - createCheckpointHook(options) factory returning a HookHandler\n *   - One signed v1.2 Capability Receipt minted per handler invocation\n *     (when a signer is configured); body carries step-marker fields\n *   - Exactly one \"step.transition\" tracer event emitted per invocation\n *     (when a tracer is configured); metadata carries the same step\n *     fields plus runId and either receiptId (mint success) or mintError\n *     (mint failed)\n *\n * Registration convention (D-06): the caller registers the returned\n * handler on a HookPipeline at BAND.OBSERVABILITY -- between SAFETY\n * (must run first) and EXTENSION (user-supplied; runs last). The factory\n * exposes DEFAULT_CHECKPOINT_BAND as a re-export of BAND.OBSERVABILITY\n * for clarity at the registration site. The factory does NOT auto-\n * register -- the caller owns lifecycle.\n *\n * Best-effort mint contract (D-07): signer.sign() failures are caught\n * by an internal try/catch; the handler emits a tracer event with\n * mintError (no throw upstream). Mirrors maybeIssueReceipt at\n * create-ai.ts:956-992. Callers cannot rely on receipt minting; if\n * minting is required for correctness, the caller must inspect the\n * envelope returned via the tracer event (event.metadata.envelope) AND\n * check mintError absence.\n *\n * Step-marker field contract (carries forward Phase 2 D-04):\n *   - stepName, parentStepName, previousStepName, sessionId are STABLE\n *     IDENTIFIERS, NOT user content. Callers MUST NOT populate them\n *     with free-form user input -- those fields appear cleartext in\n *     the signed receipt (the redaction manifest at redact.ts\n *     intentionally does NOT cover them per Phase 2 D-04).\n *   - timestamp is ISO-8601 RFC 3339 (e.g., \"2026-05-24T18:00:00.000Z\").\n *   - stepIndex is a monotonically increasing ordinal supplied by the\n *     caller. The handler does NOT auto-increment -- the caller owns\n *     ordering (typically via session state).\n *\n * Tracer event vocabulary (D-01):\n *   - Event name: \"step.transition\" (added to RunEventKind in the\n *     preceding tracing.ts commit; namespace-sibling of run.start /\n *     stage.start / provider.attempt / tool.call).\n *   - Metadata keys (flat -- CD-01 resolved to flat per existing\n *     emitEvent at create-ai.ts:862-868):\n *       { stepName, stepIndex, parentStepName?, previousStepName?,\n *         sessionId?, timestamp, runId,\n *         receiptId? | mintError?, envelope? }\n *   - envelope (the minted ReceiptEnvelope) is included on success so\n *     downstream subscribers can persist or display the signed receipt\n *     without re-minting.\n *\n * Vocabulary separation (D-02): HookLifecycleEvent (bands.ts) and\n * RunEventKind (tracing.ts) remain SEPARATE unions. This module\n * subscribes to HookLifecycleEvent (the caller registers on BEFORE_TOOL\n * or AFTER_TOOL or wherever) and emits a RunEventKind tracer event.\n * The two vocabularies meet only at the checkpoint hook boundary.\n */\n\nimport type { ReceiptEnvelope, ReceiptModel, ReceiptRoute, ReceiptSigner } from \"../receipts/types.js\";\nimport { createReceipt, type CreateReceiptInput } from \"../receipts/receipt.js\";\nimport type { TracerLike } from \"../tracing/tracing.js\";\n\nimport { BAND, type Band, type HookHandler } from \"./bands.js\";\n\n/**\n * The tracer event name Lattice's checkpoint hook emits per step transition.\n * Identical to the literal added to RunEventKind in tracing.ts.\n */\nexport const STEP_TRANSITION_EVENT_NAME = \"step.transition\" as const;\n\n/**\n * Default band convention for the checkpoint hook (D-06). The caller is\n * free to register in a different band but the documented convention is\n * OBSERVABILITY -- between SAFETY (runs first) and EXTENSION (runs last).\n */\nexport const DEFAULT_CHECKPOINT_BAND: Band = BAND.OBSERVABILITY;\n\n/**\n * Per-step context the caller passes through the hook pipeline.\n *\n * Fields are stable identifiers (D-04 carryforward); do NOT populate with\n * user content -- they appear cleartext in the signed receipt body.\n *\n * - stepName: required. Stable identifier for this step.\n * - stepIndex: required. Monotonically increasing ordinal; caller-owned.\n * - parentStepName: optional. Names the enclosing step when nested.\n * - previousStepName: optional. Names the immediately-prior step in the\n *   linked-list timeline (D-09 linked-list threading).\n * - timestamp: required. ISO-8601 RFC 3339.\n */\nexport interface CheckpointHookContext {\n  readonly stepName: string;\n  readonly stepIndex: number;\n  readonly parentStepName?: string;\n  readonly previousStepName?: string;\n  readonly timestamp: string;\n}\n\n/**\n * The factory's options.\n *\n * - runId: required. Threaded into every receipt body + every tracer event.\n * - tracer: optional. When omitted, the handler still mints (when signer\n *   present) but does NOT emit a tracer event. When provided, the handler\n *   ALWAYS emits exactly one event per invocation (independent of mint\n *   success/failure per D-10).\n * - signer: optional. When omitted, the handler emits a tracer event only\n *   (no mint attempted). When provided, the handler attempts to mint via\n *   createReceipt(...) inside a try/catch (D-07 best-effort).\n * - sessionId: optional. Threaded into receipt body and event metadata.\n * - model: optional. ReceiptModel descriptor for the receipt body; the\n *   factory provides a sensible \"step\" default when omitted.\n * - route: optional. ReceiptRoute descriptor for the receipt body; the\n *   factory provides a sensible \"step\" default when omitted.\n * - contractVerdict: optional. Defaults to \"success\" -- step transitions\n *   are observability events, not contract evaluations.\n */\nexport interface CheckpointHookOptions {\n  readonly runId: string;\n  readonly tracer?: TracerLike;\n  readonly signer?: ReceiptSigner;\n  readonly sessionId?: string;\n  readonly model?: ReceiptModel;\n  readonly route?: ReceiptRoute;\n  readonly contractVerdict?: CreateReceiptInput[\"contractVerdict\"];\n}\n\nconst DEFAULT_MODEL: ReceiptModel = {\n  requested: \"lattice-checkpoint/observability\",\n  observed: null,\n};\n\nconst DEFAULT_ROUTE: ReceiptRoute = {\n  providerId: \"lattice-checkpoint\",\n  capabilityId: \"lattice-checkpoint/step-transition\",\n  attemptNumber: 1,\n};\n\nconst DEFAULT_USAGE = {\n  promptTokens: 0,\n  completionTokens: 0,\n  costUsd: null as null,\n};\n\n/**\n * Build a checkpoint hook handler.\n *\n * The returned handler is suitable for registration on a HookPipeline\n * created via createHookPipeline (see ./bands.ts). The handler does not\n * auto-register; the caller passes it to pipeline.register(...) with the\n * desired lifecycle event (typically AFTER_TOOL or BEFORE_TOOL) and band\n * (typically BAND.OBSERVABILITY, exported as DEFAULT_CHECKPOINT_BAND).\n *\n * Per-invocation behavior:\n *   1. Build event metadata from options + per-call context.\n *   2. If signer is configured, attempt createReceipt(...) inside a\n *      try/catch. On success, set metadata.receiptId + metadata.envelope.\n *      On failure, set metadata.mintError (string from caught error).\n *   3. If tracer is configured, emit exactly one tracer.event?.(\n *      STEP_TRANSITION_EVENT_NAME, metadata) call.\n *   4. Return void.\n *\n * NO upstream throw (D-07). NO global mutation (D-05).\n */\nexport function createCheckpointHook(\n  options: CheckpointHookOptions,\n): HookHandler<CheckpointHookContext> {\n  const runId = options.runId;\n  const tracer = options.tracer;\n  const signer = options.signer;\n  const sessionId = options.sessionId;\n  const model = options.model ?? DEFAULT_MODEL;\n  const route = options.route ?? DEFAULT_ROUTE;\n  const contractVerdict = options.contractVerdict ?? \"success\";\n\n  return async function checkpointHookHandler(\n    ctx: Readonly<CheckpointHookContext>,\n  ): Promise<void> {\n    // Step 1: assemble event metadata. Optional context fields are spread\n    // conditionally to honor exactOptionalPropertyTypes (mirrors the\n    // conditional-spread pattern in receipt.ts createReceipt).\n    const baseMetadata: Record<string, unknown> = {\n      runId,\n      stepName: ctx.stepName,\n      stepIndex: ctx.stepIndex,\n      timestamp: ctx.timestamp,\n      ...(ctx.parentStepName !== undefined ? { parentStepName: ctx.parentStepName } : {}),\n      ...(ctx.previousStepName !== undefined ? { previousStepName: ctx.previousStepName } : {}),\n      ...(sessionId !== undefined ? { sessionId } : {}),\n    };\n\n    // Step 2: best-effort receipt mint (D-07). The try/catch absorbs\n    // signer.sign() failures so the handler never throws upstream.\n    let envelope: ReceiptEnvelope | undefined;\n    let receiptId: string | undefined;\n    let mintError: string | undefined;\n    if (signer !== undefined) {\n      try {\n        const input: CreateReceiptInput = {\n          runId,\n          model,\n          route,\n          usage: DEFAULT_USAGE,\n          contractVerdict,\n          contractHash: null,\n          inputHashes: [],\n          outputHash: null,\n          stepName: ctx.stepName,\n          stepIndex: ctx.stepIndex,\n          timestamp: ctx.timestamp,\n          ...(ctx.parentStepName !== undefined ? { parentStepName: ctx.parentStepName } : {}),\n          ...(ctx.previousStepName !== undefined ? { previousStepName: ctx.previousStepName } : {}),\n          ...(sessionId !== undefined ? { sessionId } : {}),\n        };\n        envelope = await createReceipt(input, signer);\n        // Re-derive receiptId from the envelope by decoding the canonical\n        // payload bytes. createReceipt does not return the body directly;\n        // the receiptId lives inside the payload. We pull it back so\n        // subscribers can correlate the tracer event to the receipt\n        // without re-decoding the envelope themselves.\n        receiptId = extractReceiptId(envelope);\n      } catch (err) {\n        mintError = err instanceof Error ? err.message : String(err);\n      }\n    }\n\n    // Step 3: assemble the final metadata + emit. tracer.event?.() is\n    // optional-chained per the established pattern (create-ai.ts:862).\n    const metadata: Record<string, unknown> = {\n      ...baseMetadata,\n      ...(receiptId !== undefined ? { receiptId } : {}),\n      ...(envelope !== undefined ? { envelope } : {}),\n      ...(mintError !== undefined ? { mintError } : {}),\n    };\n    tracer?.event?.(STEP_TRANSITION_EVENT_NAME, metadata);\n  };\n}\n\n/**\n * Decode the canonical payload of a freshly-minted envelope and return\n * its receiptId. The envelope's payload is base64-encoded JSON of the\n * signed body (DSSE v1.0 form); receiptId is a top-level field.\n *\n * Returns undefined if decoding fails (defensive -- the handler still\n * emits the tracer event with the envelope itself so subscribers can\n * re-derive the id if they want).\n */\nfunction extractReceiptId(envelope: ReceiptEnvelope): string | undefined {\n  try {\n    // base64 decode without depending on Node-only Buffer.\n    const bytes = Uint8Array.from(atob(envelope.payload), (c) => c.charCodeAt(0));\n    const body = JSON.parse(new TextDecoder().decode(bytes)) as { receiptId?: unknown };\n    return typeof body.receiptId === \"string\" ? body.receiptId : undefined;\n  } catch {\n    return undefined;\n  }\n}\n","/**\n * formatToolsForProvider — Phase 19 (v1.2).\n *\n * The agent loop runs over the existing v1.1 + v1.2 `ProviderAdapter`\n * interface unchanged (CONTEXT.md Q2). Adapters accept only a single\n * `task: string` plus `outputs[]` — they have no native multi-turn or\n * tool-use surface.\n *\n * This helper bridges that gap by encoding the running conversation +\n * tool descriptions + a structured \"respond with this envelope\" instruction\n * into the `task` string. The model is asked to either answer directly or\n * emit a JSON envelope on a line by itself. `parseToolUse` extracts the\n * envelope.\n *\n * The implementation works ACROSS all 7 logical providers (openai,\n * openai-compat, anthropic, gemini, xai, openrouter, lm-studio) by virtue\n * of being provider-agnostic: it uses the adapter's normalized text\n * response (`ProviderRunResponse.rawOutputs`) and never touches the\n * provider-specific request shape. Native tool_use (Anthropic Messages-API\n * `tools[]`, OpenAI Chat-Completions `tools[]`, Gemini `function_declarations`)\n * is DEFERRED to a follow-on milestone where the `ProviderAdapter` interface\n * can be additively extended without breaking the INV-03 parity contract\n * shipped in v1.2 Phase 17.\n *\n * Returned closure shape:\n *   {\n *     buildTask(conversation, system?) — encodes turns + tools + envelope\n *                                        instructions into a single string;\n *     parseToolUse(text)               — extracts JSON tool-call envelopes\n *                                        from the response, returns null\n *                                        when the response is a final answer;\n *     describeForSystem()              — returns the static tool-description\n *                                        block (for tracing / logging);\n *   }\n */\n\nimport type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\nimport type { ToolDefinition } from \"../tools/tools.js\";\nimport type { ToolUseRequest } from \"./types.js\";\n\n/**\n * One turn in the running conversation.\n *\n * `role: \"tool\"` is used for tool-result turns; `toolCallId` and `toolName`\n * are populated so the model can correlate the result with its prior\n * `tool_call` envelope.\n */\nexport interface ConversationTurn {\n  readonly role: \"user\" | \"assistant\" | \"tool\";\n  readonly content: string;\n  readonly toolCallId?: string;\n  readonly toolName?: string;\n}\n\nexport type FormatToolsMode = \"native\" | \"prompt-reencoded\" | \"auto\";\n\nexport interface FormatToolsOptions {\n  /**\n   * Tool-use protocol mode. Defaults to `\"auto\"`, which currently resolves\n   * to `\"prompt-reencoded\"` for ALL 7 providers (Phase 19 simplification —\n   * native tool_use deferred to a follow-on milestone). Reserved for\n   * forward compatibility.\n   */\n  readonly mode?: FormatToolsMode;\n  /**\n   * Optional system prompt to prepend. Useful for setting persona /\n   * domain-specific instructions on top of the tool-use envelope.\n   */\n  readonly system?: string;\n}\n\nexport interface FormattedToolsHandle {\n  /**\n   * Builds the single `task` string passed to `ProviderAdapter.execute()`.\n   * Encodes the conversation, available tools, and response-envelope\n   * instructions.\n   */\n  readonly buildTask: (conversation: readonly ConversationTurn[]) => string;\n  /**\n   * Phase 39 (v1.3): body-only sibling of `buildTask` — identical turn\n   * rendering minus the leading system block, so the byte-stable\n   * `describeForSystem()` prefix can be hoisted once per crew for\n   * prompt-cache sharing without duplication (39-05).\n   *\n   * Invariant: `describeForSystem() + \"\\n\" + buildTaskBody(conversation)`\n   * reconstructs `buildTask(conversation)` byte-for-byte.\n   */\n  readonly buildTaskBody: (conversation: readonly ConversationTurn[]) => string;\n  /**\n   * Parses the assistant's response text. Returns:\n   *   - `ToolUseRequest[]` when the response contains one or more tool-call\n   *     envelopes (parsed in declaration order).\n   *   - `null` when the response is a final answer (no tool-call envelopes\n   *     detected).\n   *\n   * The parser is forgiving: it tolerates extra prose around the JSON\n   * envelope (markdown fences, leading explanations) and the model\n   * occasionally drifting on whitespace.\n   */\n  readonly parseToolUse: (responseText: string) => ReadonlyArray<ToolUseRequest> | null;\n  /**\n   * Returns the static system block describing available tools. Useful for\n   * tracing / logging the exact tool-description text fed to the model.\n   */\n  readonly describeForSystem: () => string;\n  /**\n   * Effective mode this handle resolved to (`\"prompt-reencoded\"` for all\n   * v1.2 providers). Exposed for inspectability.\n   */\n  readonly mode: \"prompt-reencoded\";\n}\n\n/**\n * Convert a Standard Schema to a JSON Schema-shaped descriptor suitable for\n * inclusion in an LLM tool description. Standard Schema vendors can\n * optionally expose `toJSONSchema` on their schema objects; when absent,\n * we fall back to a minimal structural description that lists the schema\n * vendor + version + a placeholder. Models tolerate placeholder schemas in\n * practice because the tool description is supplementary — what matters\n * is the envelope contract (`{tool_call: {name, args}}`).\n */\nexport function toolSchemaToJsonSchema(schema: StandardSchemaV1): unknown {\n  const standardSchema = (schema as unknown as { readonly \"~standard\"?: unknown })[\"~standard\"];\n  if (\n    typeof standardSchema === \"object\" &&\n    standardSchema !== null &&\n    \"vendor\" in standardSchema\n  ) {\n    const vendor = standardSchema as { readonly vendor: string };\n    const maybeToJson = (schema as unknown as { readonly toJSONSchema?: () => unknown })\n      .toJSONSchema;\n    if (typeof maybeToJson === \"function\") {\n      try {\n        return maybeToJson();\n      } catch {\n        // fall through to placeholder\n      }\n    }\n    return {\n      $comment: `standard-schema vendor: ${vendor.vendor}; toJSONSchema not available`,\n      type: \"object\",\n    };\n  }\n  return { $comment: \"non-standard-schema input\", type: \"object\" };\n}\n\n/**\n * Builds the prompt-reencoded tool-use protocol handle for any provider.\n *\n * Phase 19 ships a uniform implementation across all 7 logical providers\n * (openai, openai-compat, anthropic, gemini, xai, openrouter, lm-studio).\n * The `providerName` argument is accepted for forward compatibility but\n * does not branch the implementation in v1.2.\n */\nexport function formatToolsForProvider(\n  providerName: string,\n  tools: ReadonlyArray<ToolDefinition<StandardSchemaV1>>,\n  options: FormatToolsOptions = {},\n): FormattedToolsHandle {\n  // mode is currently a forward-compat field — v1.2 resolves all modes to\n  // prompt-reencoded.\n  void providerName;\n  void options.mode;\n\n  const system = options.system?.trim() ?? \"\";\n  const toolDescriptions = tools\n    .map((tool) => {\n      const schemaDescriptor = toolSchemaToJsonSchema(tool.inputSchema);\n      const schemaJson = JSON.stringify(schemaDescriptor, null, 2);\n      const desc = tool.description?.trim() ?? \"(no description)\";\n      return `- name: ${tool.name}\\n  description: ${desc}\\n  args_schema: ${schemaJson}`;\n    })\n    .join(\"\\n\");\n\n  const envelopeInstructions = [\n    \"You are a single-agent loop. You can either:\",\n    \"  (a) answer the user directly with a final response, OR\",\n    \"  (b) request one or more tool calls.\",\n    \"\",\n    \"To request tool calls, respond with ONE JSON object on a line by itself:\",\n    '  {\"tool_calls\": [{\"id\": \"...\", \"name\": \"tool_name\", \"args\": {...}}]}',\n    \"Each tool_call needs a unique id (any string). The args MUST match the tool's args_schema.\",\n    \"\",\n    \"To answer directly, respond with a final answer in natural language with NO JSON envelope.\",\n    \"Do not mix a final answer and a tool_calls envelope in the same response.\",\n  ].join(\"\\n\");\n\n  const systemBlock = [\n    system,\n    \"\",\n    \"Available tools:\",\n    toolDescriptions || \"(none)\",\n    \"\",\n    envelopeInstructions,\n  ]\n    .filter((s) => s !== \"\" || true)\n    .join(\"\\n\")\n    .replace(/^\\n+/, \"\")\n    .trimEnd();\n\n  function assembleTask(\n    conversation: readonly ConversationTurn[],\n    includeSystemBlock: boolean,\n  ): string {\n    const lines: string[] = [];\n    if (includeSystemBlock) {\n      lines.push(systemBlock);\n    }\n    lines.push(\"\");\n    lines.push(\"---\");\n    lines.push(\"\");\n    for (const turn of conversation) {\n      if (turn.role === \"user\") {\n        lines.push(`USER:\\n${turn.content}`);\n      } else if (turn.role === \"assistant\") {\n        lines.push(`ASSISTANT:\\n${turn.content}`);\n      } else {\n        const idHint = turn.toolCallId !== undefined ? ` id=${turn.toolCallId}` : \"\";\n        const nameHint = turn.toolName !== undefined ? ` name=${turn.toolName}` : \"\";\n        lines.push(`TOOL_RESULT (${nameHint.trim() || \"tool\"}${idHint}):\\n${turn.content}`);\n      }\n      lines.push(\"\");\n    }\n    lines.push(\"ASSISTANT:\");\n    return lines.join(\"\\n\");\n  }\n\n  function buildTask(conversation: readonly ConversationTurn[]): string {\n    return assembleTask(conversation, true);\n  }\n\n  function buildTaskBody(conversation: readonly ConversationTurn[]): string {\n    return assembleTask(conversation, false);\n  }\n\n  function describeForSystem(): string {\n    return systemBlock;\n  }\n\n  return {\n    buildTask,\n    buildTaskBody,\n    parseToolUse: parseToolUseEnvelope,\n    describeForSystem,\n    mode: \"prompt-reencoded\",\n  };\n}\n\nexport function parseToolUseEnvelope(responseText: string): ReadonlyArray<ToolUseRequest> | null {\n  if (typeof responseText !== \"string\" || responseText.length === 0) {\n    return null;\n  }\n  const candidates = extractJsonCandidates(responseText);\n  for (const candidate of candidates) {\n    const parsed = tryParseEnvelope(candidate);\n    if (parsed !== null) {\n      return parsed;\n    }\n  }\n  return null;\n}\n\n/**\n * Extracts JSON-looking candidate substrings from a response text.\n *\n * Models routinely wrap JSON in markdown code fences (```json ... ```),\n * prepend explanatory prose (\"I'll call the search tool: { ... }\"), or\n * produce multiple JSON-shaped blobs. This extractor scans for plausible\n * candidates ordered by likelihood.\n */\nfunction extractJsonCandidates(text: string): readonly string[] {\n  const candidates: string[] = [];\n  // 1) Fenced code blocks (most common formatting).\n  const fenceRegex = /```(?:json)?\\s*([\\s\\S]*?)```/g;\n  let fenceMatch: RegExpExecArray | null;\n  while ((fenceMatch = fenceRegex.exec(text)) !== null) {\n    const inner = fenceMatch[1];\n    if (inner !== undefined) {\n      candidates.push(inner.trim());\n    }\n  }\n  // 2) Top-level braced blobs (greedy match from first '{' to last '}').\n  const braceStart = text.indexOf(\"{\");\n  const braceEnd = text.lastIndexOf(\"}\");\n  if (braceStart !== -1 && braceEnd > braceStart) {\n    candidates.push(text.slice(braceStart, braceEnd + 1));\n  }\n  // 3) Whole text as a candidate (envelope-only response).\n  candidates.push(text.trim());\n  return candidates;\n}\n\nfunction tryParseEnvelope(jsonLike: string): ReadonlyArray<ToolUseRequest> | null {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(jsonLike);\n  } catch {\n    return null;\n  }\n  if (typeof parsed !== \"object\" || parsed === null) {\n    return null;\n  }\n  const envelope = parsed as Record<string, unknown>;\n  const toolCalls = envelope[\"tool_calls\"];\n  if (!Array.isArray(toolCalls) || toolCalls.length === 0) {\n    return null;\n  }\n  const requests: ToolUseRequest[] = [];\n  for (const call of toolCalls) {\n    if (typeof call !== \"object\" || call === null) {\n      return null;\n    }\n    const callRecord = call as Record<string, unknown>;\n    const id = callRecord[\"id\"];\n    const name = callRecord[\"name\"];\n    const args = callRecord[\"args\"];\n    if (typeof id !== \"string\" || typeof name !== \"string\") {\n      return null;\n    }\n    requests.push({ id, name, args });\n  }\n  return requests;\n}\n","import type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\nimport { isArtifactRef, toArtifactRef } from \"../artifacts/artifact.js\";\nimport type { ResultPlan } from \"../plan/plan.js\";\nimport type { ValidationIssue } from \"../results/errors.js\";\nimport type { RunResult } from \"../results/result.js\";\nimport type { OutputContract, OutputContractMap } from \"./contracts.js\";\nimport type { InferOutputMap } from \"./infer.js\";\n\nexport async function validateSchemaOutput<S extends StandardSchemaV1>(\n  name: string,\n  schema: S,\n  value: unknown,\n): Promise<\n  | { readonly ok: true; readonly value: StandardSchemaV1.InferOutput<S> }\n  | {\n      readonly ok: false;\n      readonly issue: {\n        readonly [\"output\"]: string;\n        readonly issues: readonly ValidationIssue[];\n      };\n    }\n> {\n  const result = schema[\"~standard\"].validate(value);\n  const validation = result instanceof Promise ? await result : result;\n\n  if (validation.issues) {\n    return {\n      ok: false,\n      issue: {\n        [\"output\"]: name,\n        issues: validation.issues.map(normalizeIssue),\n      },\n    };\n  }\n\n  return {\n    ok: true,\n    value: validation.value,\n  };\n}\n\nexport async function validateOutputMap<TOutputs extends OutputContractMap>(\n  contracts: TOutputs,\n  rawOutputs: Record<string, unknown>,\n  plan: ResultPlan,\n): Promise<RunResult<TOutputs>> {\n  const outputs: Record<string, unknown> = {};\n\n  for (const [name, contract] of Object.entries(contracts)) {\n    const value = rawOutputs[name];\n    const issue = await validateOutput(name, contract, value);\n\n    if (!issue.ok) {\n      return {\n        ok: false,\n        error: {\n          kind: \"validation\",\n          message: `Invalid output \"${name}\".`,\n          [\"output\"]: name,\n          issues: issue.issues,\n        },\n        usage: { promptTokens: 0, completionTokens: 0, costUsd: null },\n        raw: rawOutputs,\n        partialOutputs: outputs,\n        plan,\n      };\n    }\n\n    outputs[name] = issue.value;\n  }\n\n  return {\n    ok: true,\n    outputs: outputs as InferOutputMap<TOutputs>,\n    artifacts: [],\n    usage: { promptTokens: 0, completionTokens: 0, costUsd: null },\n    plan,\n  };\n}\n\nasync function validateOutput(\n  name: string,\n  contract: OutputContract,\n  value: unknown,\n): Promise<\n  | { readonly ok: true; readonly value: unknown }\n  | { readonly ok: false; readonly issues: readonly ValidationIssue[] }\n> {\n  if (contract === \"text\") {\n    if (typeof value !== \"string\") {\n      return {\n        ok: false,\n        issues: [{ message: \"Expected text output to be a string.\" }],\n      };\n    }\n\n    return { ok: true, value };\n  }\n\n  if (isStandardSchema(contract)) {\n    const result = await validateSchemaOutput(name, contract, value);\n\n    if (!result.ok) {\n      return {\n        ok: false,\n        issues: result.issue.issues,\n      };\n    }\n\n    return { ok: true, value: result.value };\n  }\n\n  if (contract.kind === \"citations\") {\n    if (!Array.isArray(value)) {\n      return {\n        ok: false,\n        issues: [{ message: \"Expected citations output to be an array.\" }],\n      };\n    }\n\n    return { ok: true, value };\n  }\n\n  if (contract.kind === \"artifacts\") {\n    if (!Array.isArray(value)) {\n      return {\n        ok: false,\n        issues: [{ message: \"Expected artifacts output to be an array.\" }],\n      };\n    }\n\n    for (const item of value) {\n      if (!isArtifactRef(item)) {\n        return {\n          ok: false,\n          issues: [{ message: \"Expected artifacts output item to be an artifact ref.\" }],\n        };\n      }\n\n      if (contract.artifactKind !== undefined && item.kind !== contract.artifactKind) {\n        return {\n          ok: false,\n          issues: [\n            {\n              message: `Expected artifacts output item kind to be \"${contract.artifactKind}\".`,\n            },\n          ],\n        };\n      }\n    }\n\n    return { ok: true, value: value.map(toArtifactRef) };\n  }\n\n  return {\n    ok: false,\n    issues: [{ message: \"Unsupported output contract.\" }],\n  };\n}\n\nfunction isStandardSchema(contract: OutputContract): contract is StandardSchemaV1 {\n  if (typeof contract !== \"object\" || contract === null) {\n    return false;\n  }\n\n  const standard = (contract as { readonly \"~standard\"?: { readonly validate?: unknown } })[\n    \"~standard\"\n  ];\n\n  return typeof standard?.validate === \"function\";\n}\n\nfunction normalizeIssue(issue: StandardSchemaV1.Issue): ValidationIssue {\n  const path = issue.path\n    ?.map(normalizePathSegment)\n    .filter((segment): segment is string | number | symbol => segment !== undefined);\n\n  return {\n    message: issue.message,\n    ...(path !== undefined && path.length > 0 ? { path } : {}),\n  };\n}\n\nfunction normalizePathSegment(\n  segment: PropertyKey | StandardSchemaV1.PathSegment,\n): string | number | symbol | undefined {\n  if (\n    typeof segment === \"string\" ||\n    typeof segment === \"number\" ||\n    typeof segment === \"symbol\"\n  ) {\n    return segment;\n  }\n\n  return normalizePathKey(segment.key);\n}\n\nfunction normalizePathKey(key: PropertyKey): string | number | symbol {\n  return key;\n}\n","/**\n * MV3-survivability adapter contract -- Phase 5 (FSB v0.10.0-attempt-2).\n *\n * This module is a SIBLING of create-ai.ts (the Lattice runtime facade) and\n * a SIBLING of contract/bands.ts (the hook pipeline factory) and\n * contract/checkpoint.ts (the per-step receipt hook). It does NOT modify\n * any of them; the SurvivabilityAdapter contract is composed from those\n * surfaces by the consumer (FSB's lattice-runtime-adapter.js in Plan 05-05).\n *\n * What is the survivability problem?\n *   Some host runtimes can evict the execution context mid-flow with no\n *   synchronous shutdown signal:\n *     - Chrome MV3 service workers: evicted after 30s silence OR 5min idle.\n *     - Cloudflare Workers: evicted at end of each request unless waitUntil.\n *     - AWS Lambda: process freeze + thaw across invocations.\n *   Lattice's existing runtime (create-ai.ts) assumes the process stays\n *   live for the duration of a run. The SurvivabilityAdapter contract is\n *   the seam where a host runtime tells Lattice \"here is how to serialize\n *   my state, here is how to deserialize it back, here is how to resume\n *   work after I get evicted and recreated.\"\n *\n * What this module SHIPS:\n *   - SurvivabilityAdapter<TState> interface (4 methods)\n *   - SerializedSnapshot type (string-encodable opaque envelope)\n *   - EvictionHook<TState> type (pre-eviction callback signature)\n *   - ResumePolicy literal-union (post-restore reconstruction verdict)\n *   - UnsubscribeFn type\n *   - createNoopSurvivabilityAdapter() reference implementation\n *\n * What this module DOES NOT ship:\n *   - chrome.storage.session integration (FSB-side; Plan 05-05).\n *   - offscreen-document message bus (FSB-side; Plan 05-04).\n *   - Auto-wiring into create-ai.ts runtime (deferred indefinitely; the\n *     contract is consumer-controlled).\n *   - Mid-API-request / mid-tool-dispatch recovery dispatcher (CONSERVATIVE\n *     recovery wiring is deferred to a follow-on FSB milestone per\n *     CONTEXT.md D-22; only the ResumePolicy taxonomy lands here).\n *\n * Composition conventions (NOT enforced; documented for callers):\n *   D-09: onEviction hooks SHOULD register in BAND.SAFETY band on the\n *         caller's HookPipeline so they run FIRST per Phase 2 priority\n *         ordering. This module does NOT auto-register; it ships the\n *         contract only.\n *   D-10: serialize(state) MAY include the latest checkpoint receipt\n *         envelope (Phase 3 createCheckpointHook output) inside the\n *         SerializedSnapshot.payload; deserialize() reconstructs session\n *         identifiers from the v1.1 receipt body's step-marker fields\n *         (stepName, stepIndex, parentStepName, previousStepName,\n *         sessionId, timestamp). The payload is opaque to Lattice -- the\n *         host runtime defines the shape.\n *\n * ResumePolicy taxonomy (CD-E resolution per attempt-1 02-04-PLAN.md):\n *   - SAFE: the snapshot was captured at a safe boundary (BEFORE_ITERATION\n *     or BEFORE_NEXT_ITERATION_SCHEDULE step markers) and can be replayed\n *     deterministically. The host runtime may re-arm the loop.\n *   - RECOVERY_AMBIGUOUS: the snapshot was captured during a tool dispatch\n *     where re-execution risk is non-zero (file write, network POST without\n *     Idempotency-Key, side-effecting browser action). Host should escalate\n *     to the user before deciding.\n *   - ON_ERROR_SW_EVICTION_MID_REQUEST: the eviction happened mid-API-call\n *     (the provider request was in flight). 6 of 7 FSB providers do NOT\n *     document Idempotency-Key headers; replay risks duplicate charges +\n *     duplicate responses. Host should treat the run as failed and surface\n *     the error to the user.\n *   - ON_ERROR_SW_EVICTION_MID_TOOL_DISPATCH: the eviction happened mid-\n *     tool-dispatch (a browser action was in progress). Re-execution risk\n *     is similar to mid-API-call but lands in a different recovery branch\n *     (the host may inspect the page state before deciding).\n *\n * SerializedSnapshot is intentionally opaque + string-encodable. The\n * host runtime defines the payload shape; Lattice's only requirement\n * is that serialize() followed by deserialize() round-trips the state.\n *\n * Ed25519 receipt envelope contract (carries forward from Phase 1-3):\n *   Callers MAY embed a v1.1 ReceiptEnvelope inside SerializedSnapshot.payload\n *   for signed checkpoint round-trip. verifyReceipt against the embedded\n *   envelope MUST return result.ok === true after a serialize -> deserialize\n *   cycle (Test 12). This validates that JSON.stringify + JSON.parse over\n *   the envelope preserves the JCS-canonical body bytes used by DSSE PAE.\n *\n * Threat model (Phase 5 CONTEXT.md security block):\n *   - PII via serialized state: callers MUST ensure SerializedSnapshot.payload\n *     contains only stable identifiers + user-controlled state the user has\n *     already consented to persist. Mirrors Phase 2 D-04 receipt-body contract\n *     (step-marker fields are stable identifiers, not free-form user input).\n *   - Snapshot tampering: the noop adapter does NOT sign the snapshot.\n *     Callers that need cryptographic integrity SHOULD embed a signed\n *     ReceiptEnvelope inside the payload + verify it on deserialize.\n *     Phase 5 ships the contract; signature wrapping is a follow-on.\n *\n * Vocabulary separation (carries forward Phase 2 D-12 + Phase 3 D-02):\n *   ResumePolicy is the survivability vocabulary -- separate from\n *   RunEventKind (tracing) AND separate from HookLifecycleEvent (bands).\n *   The three vocabularies meet only when a host runtime composes them.\n */\n\n/**\n * String-encodable opaque snapshot. The host runtime defines the payload\n * shape; Lattice's only requirement is that serialize() followed by\n * deserialize() round-trips the original state object.\n *\n * Why string-encodable? MV3's chrome.storage.session and most cross-process\n * storage layers accept structured-clone-safe values. JSON-string payloads\n * are the lowest-common-denominator that survives MV3 SW eviction +\n * Cloudflare Worker freeze + Lambda thaw. Callers MAY use a richer payload\n * shape (Uint8Array, Blob) IF the host runtime supports it; the contract\n * does not constrain payload format beyond \"deserialize round-trips it\".\n */\nexport interface SerializedSnapshot {\n  readonly kind: \"survivability-snapshot\";\n  readonly version: \"lattice-survivability/v1\";\n  readonly payload: string;\n  readonly capturedAt: string;\n}\n\n/**\n * Pre-eviction callback. The host runtime CAN attempt to call this hook\n * before the execution context is evicted, but MAY NOT be able to in\n * every case (MV3 eviction has no synchronous signal -- the SW just\n * stops). Callers should treat onEviction as best-effort: useful for\n * gathering final state when the eviction is announced (e.g., user-\n * initiated stop) but not load-bearing for involuntary eviction.\n *\n * The hook receives the current TState by reference. Mutations on the\n * hook side leak to the caller's state -- this is deliberate (the hook\n * is the LAST chance to update state before eviction). Callers who want\n * structuredClone semantics SHOULD wrap state in their own freeze layer.\n */\nexport type EvictionHook<TState> = (state: TState) => void | Promise<void>;\n\n/**\n * Return value of onEviction(); calling unsubscribes the hook.\n *\n * Idempotent -- calling twice has the same effect as calling once.\n */\nexport type UnsubscribeFn = () => void;\n\n/**\n * Resume policy taxonomy. The host runtime calls adapter.resume(snapshot)\n * after eviction + restore; the returned policy tells the host runtime\n * how to react.\n *\n * The 4 literal members carry forward from FSB v0.10.0-attempt-1's\n * 02-04-PLAN.md CONSERVATIVE recovery dispatch (preserved at\n * .planning/milestones/v0.10.0-attempt-1-pre-pivot/02-state-inspectability-\n * carve-out/02-04-PLAN.md). Per CONTEXT.md CD-E this is the locked union.\n */\nexport type ResumePolicy =\n  | \"SAFE\"\n  | \"RECOVERY_AMBIGUOUS\"\n  | \"ON_ERROR_SW_EVICTION_MID_REQUEST\"\n  | \"ON_ERROR_SW_EVICTION_MID_TOOL_DISPATCH\";\n\n/**\n * The SurvivabilityAdapter contract. Host runtimes implement this; Lattice\n * runs against the interface.\n *\n * 4 methods (D-08 locked):\n *   - serialize(state): convert in-memory state to SerializedSnapshot\n *   - deserialize(snapshot): inverse of serialize\n *   - onEviction(hook): register a best-effort pre-eviction callback\n *   - resume(snapshot): return ResumePolicy verdict for the post-restore\n *     reconstruction. The host runtime acts on the policy.\n *\n * Adapters are POLYMORPHIC over TState -- the host runtime parameterizes\n * the type. Lattice's vitest covers the contract surface with a noop\n * adapter where TState = Record<string, unknown> for ergonomics.\n */\nexport interface SurvivabilityAdapter<TState> {\n  readonly kind: \"survivability-adapter\";\n  readonly id: string;\n  serialize(state: TState): SerializedSnapshot;\n  deserialize(snapshot: SerializedSnapshot): TState;\n  onEviction(hook: EvictionHook<TState>): UnsubscribeFn;\n  resume(snapshot: SerializedSnapshot): Promise<ResumePolicy>;\n}\n\n/**\n * Factory options for the reference noop adapter.\n *\n * - id: optional. Defaults to \"noop-survivability\". Useful when callers\n *   want to distinguish multiple adapter instances in test fixtures.\n * - policy: optional. Sets the default ResumePolicy returned by resume().\n *   Defaults to \"SAFE\" (matches noop adapter semantics: no recovery\n *   ambiguity if nothing was ever persisted).\n */\nexport interface NoopSurvivabilityAdapterOptions {\n  readonly id?: string;\n  readonly policy?: ResumePolicy;\n}\n\n/**\n * Reference implementation of SurvivabilityAdapter<TState>. Records\n * eviction events but does NOT persist; serialize / deserialize round-\n * trip via JSON.stringify / JSON.parse. Analog to createFakeProvider\n * in the providers/ module -- gives Lattice's vitest a complete shape-\n * conformance target before the real (FSB-side) adapter ships in\n * Plan 05-05.\n *\n * Per CONTEXT.md D-11 the noop adapter ships in Lattice (not FSB)\n * because it covers the contract surface in Lattice's own test suite;\n * FSB's real chrome.storage.session-backed adapter is glue layer.\n */\nexport function createNoopSurvivabilityAdapter<TState = Record<string, unknown>>(\n  options: NoopSurvivabilityAdapterOptions = {},\n): SurvivabilityAdapter<TState> {\n  const id = options.id ?? \"noop-survivability\";\n  const defaultPolicy: ResumePolicy = options.policy ?? \"SAFE\";\n  const hooks = new Set<EvictionHook<TState>>();\n\n  return {\n    kind: \"survivability-adapter\" as const,\n    id,\n    serialize(state: TState): SerializedSnapshot {\n      return {\n        kind: \"survivability-snapshot\" as const,\n        version: \"lattice-survivability/v1\" as const,\n        payload: JSON.stringify(state ?? null),\n        capturedAt: new Date().toISOString(),\n      };\n    },\n    deserialize(snapshot: SerializedSnapshot): TState {\n      // Trust the contract: callers are responsible for matching the\n      // payload shape to TState (noop adapter does not validate).\n      return JSON.parse(snapshot.payload) as TState;\n    },\n    onEviction(hook: EvictionHook<TState>): UnsubscribeFn {\n      hooks.add(hook);\n      let unsubscribed = false;\n      return () => {\n        if (unsubscribed) return;\n        unsubscribed = true;\n        hooks.delete(hook);\n      };\n    },\n    async resume(_snapshot: SerializedSnapshot): Promise<ResumePolicy> {\n      // The noop adapter has no persisted state to inspect; it always\n      // returns the default policy. Real adapters (Plan 05-05) inspect\n      // the snapshot's payload to determine which CONSERVATIVE branch\n      // applies.\n      return defaultPolicy;\n    },\n  };\n}\n","import type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\nimport { artifact, type ArtifactInput, type ArtifactRef } from \"../artifacts/artifact.js\";\nimport { validateSchemaOutput } from \"../outputs/validate.js\";\nimport type { RunEventSink } from \"../tracing/tracing.js\";\n\nexport interface ToolExecutionContext {\n  readonly signal?: AbortSignal;\n  readonly emit?: RunEventSink;\n}\n\nexport interface ToolDefinition<TSchema extends StandardSchemaV1 = StandardSchemaV1> {\n  readonly kind: \"tool\";\n  readonly name: string;\n  readonly description?: string;\n  readonly inputSchema: TSchema;\n  readonly execute: (\n    input: StandardSchemaV1.InferOutput<TSchema>,\n    context: ToolExecutionContext,\n  ) => Promise<unknown> | unknown;\n}\n\nexport interface ToolCallResult {\n  readonly callId: string;\n  readonly toolName: string;\n  readonly artifact: ArtifactInput;\n}\n\nexport function defineTool<TSchema extends StandardSchemaV1>(\n  definition: Omit<ToolDefinition<TSchema>, \"kind\">,\n): ToolDefinition<TSchema> {\n  return {\n    kind: \"tool\",\n    ...definition,\n  };\n}\n\nexport async function runTool<TSchema extends StandardSchemaV1>(\n  tool: ToolDefinition<TSchema>,\n  input: unknown,\n  context: ToolExecutionContext = {},\n): Promise<ToolCallResult> {\n  const validation = await validateSchemaOutput(tool.name, tool.inputSchema, input);\n\n  if (!validation.ok) {\n    throw new Error(`Invalid input for tool \"${tool.name}\".`);\n  }\n\n  const callId = createToolCallId();\n  const output = await tool.execute(validation.value, context);\n\n  return {\n    callId,\n    toolName: tool.name,\n    artifact: artifact.toolResult(output, {\n      id: `artifact:tool-result:${tool.name}:${callId}`,\n      toolName: tool.name,\n      callId,\n    }),\n  };\n}\n\nexport interface McpLikeClient {\n  readonly listTools?: () => Promise<readonly McpToolDescriptor[]> | readonly McpToolDescriptor[];\n  readonly callTool: (input: {\n    readonly name: string;\n    readonly arguments: unknown;\n  }) => Promise<unknown> | unknown;\n}\n\nexport interface McpToolDescriptor {\n  readonly name: string;\n  readonly description?: string;\n  readonly inputSchema: StandardSchemaV1;\n}\n\nexport async function importMcpTools(\n  client: McpLikeClient,\n  toolNames?: readonly string[],\n): Promise<readonly ToolDefinition[]> {\n  const descriptors = await Promise.resolve(client.listTools?.() ?? []);\n  const allowed = toolNames === undefined ? undefined : new Set(toolNames);\n\n  return descriptors\n    .filter((descriptor) => allowed === undefined || allowed.has(descriptor.name))\n    .map((descriptor) =>\n      defineTool({\n        name: descriptor.name,\n        ...(descriptor.description !== undefined\n          ? { description: descriptor.description }\n          : {}),\n        inputSchema: descriptor.inputSchema,\n        execute: async (input) =>\n          client.callTool({\n            name: descriptor.name,\n            arguments: input,\n          }),\n      }),\n    );\n}\n\nexport function toolArtifactRef(result: ToolCallResult): ArtifactRef {\n  const { value: _value, ...ref } = result.artifact;\n\n  return ref;\n}\n\nfunction createToolCallId(): string {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\") {\n    return crypto.randomUUID();\n  }\n\n  return `${Date.now()}:${Math.random().toString(16).slice(2)}`;\n}\n","/**\n * AgentHost — Phase 20 (v1.2).\n *\n * The pluggable host adapter for `runAgent`. Promotes the Phase 19\n * forward-declared `AgentHost` to a full interface with three optional\n * seams: scheduler (how iterations yield between provider calls),\n * transport (how provider calls are dispatched), and storage (how the\n * agent state persists for resume after eviction).\n *\n * Composition surfaces:\n *   - SurvivabilityAdapter (Phase 18) handles serialize/deserialize/resume\n *     against the host's storage payload. The agent loop wires storage +\n *     SurvivabilityAdapter together to deliver the eviction-resume\n *     contract.\n *   - createCheckpointHook (Phase 16) continues to mint per-iteration\n *     receipts via the OBSERVABILITY band; receipts can be embedded inside\n *     the `AgentSnapshot.lastReceiptId` (when callers want auditable\n *     resume).\n *\n * Phase 20 ships:\n *   - The full `AgentHost` interface (3 seams: scheduler / transport / storage).\n *   - `AgentSnapshot` interface — the agent-state shape that gets serialized.\n *   - `createNoopAgentHost()` reference implementation suitable for Node tests\n *     and the Phase 19 default behavior (no scheduling delay, direct provider\n *     transport, no persistence).\n *\n * Concrete MV3 SW / Cloudflare Worker / Lambda hosts are out of scope —\n * they live in consumer codebases (FSB, etc.).\n */\n\nimport type { SerializedSnapshot } from \"../runtime/survivability.js\";\nimport type {\n  ProviderAdapter,\n  ProviderRunRequest,\n  ProviderRunResponse,\n  Usage,\n} from \"../providers/provider.js\";\n\nimport type { ConversationTurn } from \"./format-tools.js\";\n\n/**\n * Snapshot shape the agent loop serializes between iterations. The full\n * shape is opaque to callers (they only see it through SerializedSnapshot\n * via the configured SurvivabilityAdapter) but it's exported so reference\n * implementations and tests can inspect the round-trip.\n */\nexport interface AgentSnapshot {\n  readonly version: \"agent-snapshot/v1\";\n  readonly iterationIndex: number;\n  readonly conversation: readonly ConversationTurn[];\n  readonly cumulativeUsage: Usage;\n  readonly providerName: string;\n  readonly capturedAt: string;\n  /**\n   * Phase 39 (v1.3): dispatch ancestry chain of crew `AgentSpec` ids\n   * (root-first). Absent = root agent (single-agent runs never set it).\n   * Optional so existing serialized `agent-snapshot/v1` snapshots\n   * deserialize unchanged — the version literal stays `\"agent-snapshot/v1\"`\n   * (D-05; Pitfall 8). The crew dispatcher threads the chain through\n   * dispatch context in 39-05; cycle prevention rejects any dispatch whose\n   * target id already appears in the chain.\n   */\n  readonly ancestry?: readonly string[];\n}\n\n/**\n * Scheduler seam — controls how the agent loop yields between iterations.\n *\n * `scheduleNext(iterationIndex)` is called AFTER an AFTER_AGENT_ITERATION\n * emission and BEFORE the next iteration's BEFORE_AGENT_ITERATION. The\n * scheduler decides when to resume — synchronously (sync loop), on next\n * tick (setTimeout/queueMicrotask), via a queue (Durable Object), or any\n * other strategy.\n *\n * Default (noop): resolves immediately.\n */\nexport interface AgentScheduler {\n  scheduleNext(iterationIndex: number): Promise<void>;\n}\n\n/**\n * Transport seam — controls how a provider call is dispatched.\n *\n * `call(provider, request)` wraps the provider's `execute()` invocation.\n * Default (noop): pass-through (`provider.execute!(request)`). Cross-process\n * bridges (FSB's offscreen-document host) override to dispatch via\n * `chrome.runtime.sendMessage`.\n *\n * Per the Phase 19 INV-03 parity invariant, the transport seam does NOT\n * modify the `ProviderAdapter` interface — it operates on top of the\n * existing `execute()` method.\n */\nexport interface AgentTransport {\n  call(\n    provider: ProviderAdapter,\n    request: ProviderRunRequest,\n  ): Promise<ProviderRunResponse>;\n}\n\n/**\n * Storage seam — controls how agent state persists between iterations for\n * resume after host eviction.\n *\n * Phase 20 composes this with the Phase 18 `SurvivabilityAdapter`:\n *   - The adapter serializes `AgentSnapshot` to `SerializedSnapshot` on\n *     each AFTER_AGENT_ITERATION; storage.save() persists the snapshot.\n *   - On run start, the agent loop calls storage.load(). If a non-null\n *     snapshot is returned, the adapter deserializes it; the loop resumes\n *     at the recorded iteration index.\n *   - On success, the loop calls storage.clear() so the next run starts\n *     fresh.\n *\n * Default (noop): save() is a no-op, load() returns null, clear() is a\n * no-op. Suitable for Node tests where eviction never occurs.\n */\nexport interface AgentStorage {\n  save(snapshot: SerializedSnapshot): Promise<void>;\n  load(): Promise<SerializedSnapshot | null>;\n  clear(): Promise<void>;\n}\n\n/**\n * The host adapter — three optional seams, all swappable independently.\n *\n * Callers pass `host` on `AgentIntent`. The agent runtime falls back to\n * `createNoopAgentHost()` when `intent.host` is absent (so Phase 19\n * single-shot Node usage continues to work without explicit configuration).\n */\nexport interface AgentHost {\n  readonly kind: \"agent-host\";\n  readonly scheduler?: AgentScheduler;\n  readonly transport?: AgentTransport;\n  readonly storage?: AgentStorage;\n}\n\n/**\n * Reference implementation suitable for Node tests + the Phase 19 default\n * behavior.\n *\n * - scheduler: resolves immediately (no yield between iterations).\n * - transport: pass-through to provider.execute().\n * - storage: save() / clear() are no-ops; load() always returns null.\n *\n * Equivalent to passing no host at all.\n */\nexport function createNoopAgentHost(): AgentHost {\n  return {\n    kind: \"agent-host\",\n    scheduler: {\n      async scheduleNext(_iterationIndex: number): Promise<void> {\n        void _iterationIndex;\n      },\n    },\n    transport: {\n      async call(\n        provider: ProviderAdapter,\n        request: ProviderRunRequest,\n      ): Promise<ProviderRunResponse> {\n        if (provider.execute === undefined) {\n          throw new Error(\n            `AgentTransport: provider ${provider.id} has no execute() method.`,\n          );\n        }\n        return provider.execute(request);\n      },\n    },\n    storage: {\n      async save(_snapshot: SerializedSnapshot): Promise<void> {\n        void _snapshot;\n      },\n      async load(): Promise<SerializedSnapshot | null> {\n        return null;\n      },\n      async clear(): Promise<void> {\n        // no-op\n      },\n    },\n  };\n}\n","/**\n * Agent runtime type definitions — Phase 19 (v1.2).\n *\n * The agent surface is intentionally distinct from the v1.0 single-shot\n * runtime (`RunIntent` / `RunResult`). The agent loop wraps multiple\n * provider iterations, dispatches tool calls between them, and threads\n * v1.1 capability receipts through Phase 16's `createCheckpointHook` when\n * a signer is configured.\n *\n * Composition surfaces (all optional on `AgentIntent`):\n *   - `pipeline?` — Phase 15 `HookPipeline`; if absent, runtime creates a default.\n *   - `signer?`   — Phase 9 `ReceiptSigner`; if present, auto-registers Phase 16\n *                   checkpoint hook on `BAND.OBSERVABILITY`.\n *   - `tracer?`   — Phase 5 `TracerLike`; flows through pipeline + provider calls.\n *   - `host?`     — Phase 20 `AgentHost` pluggable adapter (forward-declared here;\n *                   default in-process implementation lives in `runtime.ts`).\n *   - `contract?` — Phase 7 `CapabilityContract`; budget.maxIterations + .maxWallTimeMs\n *                   enforced by the loop.\n */\n\nimport type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\nimport type { ArtifactRef } from \"../artifacts/artifact.js\";\nimport type { HookPipeline } from \"../contract/bands.js\";\nimport type { CapabilityContract } from \"../contract/contract.js\";\nimport type { OutputContractMap } from \"../outputs/contracts.js\";\nimport type { InferOutputMap } from \"../outputs/infer.js\";\nimport type { PolicySpec } from \"../policy/policy.js\";\nimport type { Usage } from \"../providers/provider.js\";\nimport type { LatticeRunError } from \"../results/errors.js\";\nimport type { ReceiptEnvelope, ReceiptSigner } from \"../receipts/types.js\";\nimport type { SurvivabilityAdapter } from \"../runtime/survivability.js\";\nimport type { ToolDefinition } from \"../tools/tools.js\";\nimport type { TracerLike } from \"../tracing/tracing.js\";\n\n// Phase 20 (v1.2): the AgentHost forward-decl that shipped in Phase 19 is\n// replaced by the full interface in host.ts. Existing imports of AgentHost\n// from \"./types.js\" continue to resolve via this re-export.\nexport type {\n  AgentHost,\n  AgentScheduler,\n  AgentSnapshot,\n  AgentStorage,\n  AgentTransport,\n} from \"./host.js\";\nimport type { AgentHost as _AgentHost } from \"./host.js\";\n\n/**\n * Per-iteration record stored on `AgentSuccess.iterations` for inspectability.\n *\n * `toolCalls` carries content-addressed args/result hashes (sha256) so\n * downstream receipts can reference them without inlining the bodies.\n *\n * `deniedReason` is populated on iterations whose `BEFORE_AGENT_ITERATION`\n * SAFETY-band handler set `controls.deny(...)`.\n */\nexport interface IterationRecord {\n  readonly index: number;\n  readonly provider: string;\n  readonly promptTokens: number;\n  readonly completionTokens: number;\n  readonly costUsd: number | null;\n  readonly durationMs: number;\n  readonly toolCalls: ReadonlyArray<{\n    readonly id: string;\n    readonly name: string;\n    readonly argsHash: string;\n    readonly resultHash: string;\n  }>;\n  readonly deniedReason?: string;\n  readonly receipt?: ReceiptEnvelope;\n}\n\n/**\n * Input shape accepted by `ai.runAgent(intent)`.\n *\n * All fields except `task` and `tools` are optional. The runtime supplies\n * sensible defaults (in-process host, fresh pipeline, no signer, no tracer).\n *\n * `TOutputs` parameterizes the final-answer schema map; defaults to a free-form\n * `{ answer: \"text\" }` shape when the field is omitted. Validation runs once\n * against the final assistant message (no intermediate iteration validation).\n */\nexport interface AgentIntent<TOutputs extends OutputContractMap = OutputContractMap> {\n  readonly task: string;\n  readonly tools: ReadonlyArray<ToolDefinition<StandardSchemaV1>>;\n  readonly host?: _AgentHost;\n  /**\n   * Phase 20 (v1.2): when the agent loop resumes from a host.storage snapshot,\n   * the configured SurvivabilityAdapter handles the serialize/deserialize\n   * round-trip. When absent, runtime defaults to\n   * `createNoopSurvivabilityAdapter<AgentSnapshot>()`.\n   */\n  readonly survivabilityAdapter?: SurvivabilityAdapter<\n    import(\"./host.js\").AgentSnapshot\n  >;\n  readonly contract?: CapabilityContract;\n  readonly policy?: PolicySpec;\n  readonly outputs?: TOutputs;\n  readonly pipeline?: HookPipeline;\n  readonly signer?: ReceiptSigner;\n  readonly tracer?: TracerLike;\n  /**\n   * When `false`, the runtime will NOT auto-register `createCheckpointHook`\n   * even if `signer` is provided. Callers who want full manual control over\n   * receipt minting set this to `false` and register their own hook.\n   * Defaults to `true` (auto-register when signer present).\n   */\n  readonly autoRegisterCheckpoint?: boolean;\n}\n\n/**\n * Success result returned by `ai.runAgent` when the loop reaches a final\n * answer and (when `outputs` is declared) the final answer validates.\n *\n * `iterations[]` records every iteration that ran — including the one that\n * produced the final answer. `receipt` is the outermost receipt minted at\n * loop close when `signer` is configured (separate from per-iteration\n * receipts on `iterations[i].receipt`).\n */\nexport interface AgentSuccess<TOutputs extends OutputContractMap = OutputContractMap> {\n  readonly kind: \"success\";\n  readonly output: InferOutputMap<TOutputs>;\n  readonly artifacts?: readonly ArtifactRef[];\n  readonly usage: Usage;\n  readonly iterations: ReadonlyArray<IterationRecord>;\n  readonly receipt?: ReceiptEnvelope;\n}\n\n/**\n * Failure kinds specific to the agent loop. v1.1 `LatticeRunError.kind`\n * values remain valid (provider errors, no-contract-match, validation-failed,\n * tripwire-violated) and are reused verbatim. Phase 19 adds three\n * agent-specific kinds. Phase 39 (v1.3) adds `crew-budget-exceeded` —\n * crew-level shared-pool exhaustion, terminal across the parent/child\n * boundary (D-10).\n */\nexport type AgentFailureKind =\n  | LatticeRunError[\"kind\"]\n  | \"agent-iteration-denied\"\n  | \"agent-max-iterations\"\n  | \"agent-wall-time-exceeded\"\n  | \"crew-budget-exceeded\";\n\n/**\n * Failure result returned by `ai.runAgent`. Discriminates via `kind`.\n *\n * `iterations[]` carries any iterations that completed before the failure\n * (empty if the failure occurred pre-iteration). For `agent-iteration-denied`,\n * the failing iteration is the LAST entry and carries `deniedReason`.\n */\nexport interface AgentFailure {\n  readonly kind: AgentFailureKind;\n  readonly usage: Usage;\n  readonly iterations: ReadonlyArray<IterationRecord>;\n  readonly reason?: string;\n  readonly cause?: unknown;\n  readonly receipt?: ReceiptEnvelope;\n}\n\n/**\n * Discriminated union returned by `ai.runAgent`.\n */\nexport type AgentResult<TOutputs extends OutputContractMap = OutputContractMap> =\n  | AgentSuccess<TOutputs>\n  | AgentFailure;\n\n/**\n * Typed error raised when a SAFETY-band handler sets `controls.deny(reason)`\n * during `BEFORE_AGENT_ITERATION`. Carries `terminal: true` semantics to\n * align with v1.1 `TripwireViolationError`: the failure is NOT retried by\n * the fallback chain.\n *\n * Surfaced via `AgentFailure { kind: \"agent-iteration-denied\", reason, ... }`\n * — callers can also catch the typed error if they prefer.\n */\nexport class AgentDeniedError extends Error {\n  readonly kind = \"agent-iteration-denied\" as const;\n  readonly terminal = true as const;\n  readonly reason: string;\n  readonly iterationIndex: number;\n\n  constructor(reason: string, iterationIndex: number) {\n    super(`Agent iteration ${iterationIndex} denied: ${reason}`);\n    this.name = \"AgentDeniedError\";\n    this.reason = reason;\n    this.iterationIndex = iterationIndex;\n  }\n}\n\n/**\n * Returned by `formatToolsForProvider` (Phase 19 Plan 19-03). Re-exported\n * here for convenience; the canonical declaration lives in format-tools.ts.\n */\nexport interface ToolUseRequest {\n  readonly id: string;\n  readonly name: string;\n  readonly args: unknown;\n}\n","/**\n * runAgent — Phase 19 (v1.2).\n *\n * The agent-loop orchestrator. Wraps multiple provider iterations under one\n * `ai.runAgent(intent)` call. Each iteration:\n *\n *   1. Budget pre-check (maxIterations, maxWallTimeMs, maxCostUsd).\n *   2. Emit BEFORE_AGENT_ITERATION through the hook pipeline; check\n *      `pipeline.lastDenialReason()` for SAFETY-band veto.\n *   3. Build the provider request via formatToolsForProvider.buildTask().\n *   4. Call the sticky provider's `execute()` (or pick first provider on\n *      iteration 0).\n *   5. Parse tool-use envelopes from the response. If absent, the response\n *      is a final answer: validate against `intent.outputs` (if declared)\n *      and exit with AgentSuccess.\n *   6. If tool-use envelopes are present: dispatch each via `runTool`,\n *      append assistant + tool-result turns to the conversation, record an\n *      IterationRecord, emit AFTER_AGENT_ITERATION, continue.\n *\n * Composition surfaces (all optional on AgentIntent):\n *\n *   - `pipeline?` — Phase 15 HookPipeline; runtime creates one if absent.\n *   - `signer?`   — Phase 9 ReceiptSigner; when present AND\n *                   `autoRegisterCheckpoint !== false`, the runtime\n *                   auto-registers `createCheckpointHook` on\n *                   BAND.OBSERVABILITY for per-iteration receipts.\n *   - `tracer?`   — Phase 5 TracerLike; flows through pipeline.\n *   - `outputs?`  — final-answer schema map; validated only on the final\n *                   assistant message (no intermediate validation).\n *   - `contract?` — Phase 7 CapabilityContract; budget invariants are\n *                   enforced pre-iteration.\n */\n\nimport type { ArtifactRef } from \"../artifacts/artifact.js\";\nimport { toArtifactRef } from \"../artifacts/artifact.js\";\nimport { BAND, type HookPipeline, createHookPipeline } from \"../contract/bands.js\";\nimport { createCheckpointHook } from \"../contract/checkpoint.js\";\nimport type { LatticeConfig } from \"./../runtime/config.js\";\nimport type { OutputContractMap } from \"../outputs/contracts.js\";\nimport type { ProviderAdapter, ProviderRunResponse, Usage } from \"../providers/provider.js\";\nimport { createNoopSurvivabilityAdapter, type SurvivabilityAdapter } from \"../runtime/survivability.js\";\nimport { runTool, type ToolCallResult } from \"../tools/tools.js\";\n\nimport { formatToolsForProvider, type ConversationTurn } from \"./format-tools.js\";\nimport {\n  createNoopAgentHost,\n  type AgentHost,\n  type AgentSnapshot,\n} from \"./host.js\";\nimport {\n  AgentDeniedError,\n  type AgentFailure,\n  type AgentIntent,\n  type AgentResult,\n  type IterationRecord,\n  type ToolUseRequest,\n} from \"./types.js\";\n\nconst ZERO_USAGE: Usage = { promptTokens: 0, completionTokens: 0, costUsd: null };\n\n/**\n * Context handed to an injected `dispatchToolUse` seam (Phase 39, internal).\n * Carries the loop position plus read-only views of the live conversation\n * and the hook pipeline so a crew dispatcher can run its own pipeline\n * events around child execution.\n */\nexport interface DispatchToolUseContext {\n  readonly iterationIndex: number;\n  readonly conversation: readonly ConversationTurn[];\n  readonly pipeline: HookPipeline;\n}\n\n/**\n * Internal (in-package only — NOT re-exported from src/index.ts) options\n * for `runAgentInternal`. Phase 39 (v1.3) adds the injectable tool-use\n * dispatch seam the CrewDispatcher (39-05) routes child-agent calls\n * through.\n *\n * Semantics: for each `ToolUseRequest` in step 4g, when `dispatchToolUse`\n * is present it is consulted FIRST. If it resolves `{ content }`, that\n * content is pushed as the `role: \"tool\"` turn (same toolCallId/toolName\n * as the default path) and recorded in `toolCallRecords`; the default\n * lookup/`runTool` path — including its BEFORE_TOOL/AFTER_TOOL hook band\n * semantics — is bypassed for that request (the dispatcher owns its own\n * pipeline events). If it resolves `undefined`, the existing\n * lookup/`runTool` path executes verbatim (fall-through).\n */\nexport interface RunAgentInternalOptions {\n  readonly dispatchToolUse?: (\n    req: ToolUseRequest,\n    ctx: DispatchToolUseContext,\n  ) => Promise<{ readonly content: string } | undefined>;\n}\n\n/**\n * Resolves the runtime's behaviour for a single `ai.runAgent(intent)` call.\n *\n * Phase 19 ships an in-process default scheduler (the loop runs in the\n * calling Promise), direct transport (provider.execute()), and in-memory\n * transcript (the `conversation` array). Phase 20 promotes scheduler /\n * transport / storage to the pluggable `AgentHost` adapter.\n *\n * Phase 39: `runAgent` is a thin public wrapper over `runAgentInternal`\n * with no internal options — the public signature and behavior are\n * unchanged.\n */\nexport async function runAgent<TOutputs extends OutputContractMap = OutputContractMap>(\n  intent: AgentIntent<TOutputs>,\n  config: LatticeConfig = {},\n): Promise<AgentResult<TOutputs>> {\n  return runAgentInternal(intent, config);\n}\n\n/**\n * The agent-loop implementation with the internal dispatch seam (Phase 39).\n * In-package consumers (agent/crew/, 39-05) call this directly; it is NOT\n * part of the public package surface.\n */\nexport async function runAgentInternal<TOutputs extends OutputContractMap = OutputContractMap>(\n  intent: AgentIntent<TOutputs>,\n  config: LatticeConfig = {},\n  internalOptions: RunAgentInternalOptions = {},\n): Promise<AgentResult<TOutputs>> {\n  const startedAt = Date.now();\n  const cumulativeUsage = { promptTokens: 0, completionTokens: 0, costUsd: null as number | null };\n  const iterations: IterationRecord[] = [];\n\n  // 0. Host adapter + survivability defaults.\n  const host: AgentHost = intent.host ?? createNoopAgentHost();\n  const survivabilityAdapter: SurvivabilityAdapter<AgentSnapshot> =\n    intent.survivabilityAdapter ?? createNoopSurvivabilityAdapter<AgentSnapshot>();\n\n  // 1. Hook pipeline + auto-checkpoint registration.\n  const pipeline = ensurePipeline(intent);\n  maybeAutoRegisterCheckpoint(pipeline, intent);\n\n  // 2. Provider selection — pick the first adapter with execute().\n  const provider = pickFirstExecutableProvider(config);\n  if (provider === null) {\n    return buildFailure({\n      kind: \"execution_unavailable\",\n      reason: \"No provider adapter with execute() is configured.\",\n      iterations,\n      usage: cumulativeUsage,\n    });\n  }\n  let providerName = provider.id;\n\n  // 3. Initialize conversation + tools handle.\n  let conversation: ConversationTurn[] = [{ role: \"user\", content: intent.task }];\n  const handle = formatToolsForProvider(providerName, intent.tools);\n\n  const budget = intent.contract?.budget;\n  const maxIterations = budget?.maxIterations ?? Number.POSITIVE_INFINITY;\n  const maxWallTimeMs = budget?.maxWallTimeMs ?? Number.POSITIVE_INFINITY;\n  const maxCostUsd = budget?.maxCostUsd ?? Number.POSITIVE_INFINITY;\n\n  let iterationIndex = 0;\n\n  // 3.5. Resume path (Phase 20): attempt to load a snapshot from host.storage.\n  // On success, deserialize via the survivability adapter and re-enter at the\n  // recorded iteration index. Emits recovery.start / recovery.complete /\n  // recovery.failed events on the configured tracer (TRACE-EXT-01).\n  const existingSnapshot = await host.storage?.load();\n  if (existingSnapshot !== null && existingSnapshot !== undefined) {\n    intent.tracer?.event?.(\"recovery.start\", {\n      snapshotVersion: existingSnapshot.version,\n      capturedAt: existingSnapshot.capturedAt,\n    });\n    try {\n      const restored = survivabilityAdapter.deserialize(existingSnapshot);\n      iterationIndex = restored.iterationIndex;\n      conversation = [...restored.conversation];\n      cumulativeUsage.promptTokens = restored.cumulativeUsage.promptTokens;\n      cumulativeUsage.completionTokens = restored.cumulativeUsage.completionTokens;\n      cumulativeUsage.costUsd = restored.cumulativeUsage.costUsd;\n      providerName = restored.providerName;\n      intent.tracer?.event?.(\"recovery.complete\", {\n        iterationIndex,\n        providerName,\n      });\n    } catch (error) {\n      intent.tracer?.event?.(\"recovery.failed\", {\n        reason: error instanceof Error ? error.message : \"deserialize failed\",\n      });\n      await host.storage?.clear();\n      // Fall through to fresh start (iterationIndex stays 0).\n    }\n  }\n\n  while (iterationIndex < maxIterations) {\n    // 4a. Budget pre-checks.\n    const elapsedMs = Date.now() - startedAt;\n    if (elapsedMs >= maxWallTimeMs) {\n      return buildFailure({\n        kind: \"agent-wall-time-exceeded\",\n        reason: `Wall-time budget ${maxWallTimeMs}ms exceeded after ${elapsedMs}ms`,\n        iterations,\n        usage: cumulativeUsage,\n      });\n    }\n    if (\n      cumulativeUsage.costUsd !== null &&\n      cumulativeUsage.costUsd >= maxCostUsd\n    ) {\n      // Reuses v1.1 \"no-contract-match\" kind for contract-budget-exceeded\n      // (per LatticeRunError taxonomy); agent-specific cost-budget exhaustion\n      // surfaces with this kind and a descriptive `reason`.\n      return buildFailure({\n        kind: \"no-contract-match\",\n        reason: `Cost budget $${maxCostUsd} exceeded at $${cumulativeUsage.costUsd}`,\n        iterations,\n        usage: cumulativeUsage,\n      });\n    }\n\n    // 4b. BEFORE_AGENT_ITERATION + deny check.\n    await pipeline.run(\"BEFORE_AGENT_ITERATION\", {\n      iterationIndex,\n      intent,\n      conversation: conversation.map((t) => ({ ...t })),\n      // CheckpointHookContext fields — the auto-registered checkpoint hook\n      // reads these to assemble its receipt + tracer event metadata.\n      stepName: `agent-iteration-${iterationIndex}-before`,\n      stepIndex: iterationIndex,\n      timestamp: new Date().toISOString(),\n      ...(iterationIndex > 0\n        ? { previousStepName: `agent-iteration-${iterationIndex - 1}-after` }\n        : {}),\n    });\n    const denial = pipeline.lastDenialReason();\n    if (denial !== null) {\n      const failedRecord: IterationRecord = {\n        index: iterationIndex,\n        provider: providerName,\n        promptTokens: 0,\n        completionTokens: 0,\n        costUsd: null,\n        durationMs: 0,\n        toolCalls: [],\n        deniedReason: denial,\n      };\n      iterations.push(failedRecord);\n      await pipeline.run(\"AFTER_AGENT_ITERATION\", {\n        iterationIndex,\n        intent,\n        record: failedRecord,\n        stepName: `agent-iteration-${iterationIndex}-after`,\n        stepIndex: iterationIndex,\n        timestamp: new Date().toISOString(),\n        previousStepName: `agent-iteration-${iterationIndex}-before`,\n      });\n      return buildFailure({\n        kind: \"agent-iteration-denied\",\n        reason: denial,\n        iterations,\n        usage: cumulativeUsage,\n      });\n    }\n\n    // 4c. Build task + dispatch via host transport seam.\n    const task = handle.buildTask(conversation);\n    const iterStart = Date.now();\n    let response: ProviderRunResponse;\n    try {\n      if (provider.execute === undefined) {\n        return buildFailure({\n          kind: \"execution_unavailable\",\n          reason: \"Selected provider has no execute() method.\",\n          iterations,\n          usage: cumulativeUsage,\n        });\n      }\n      const providerRequest = {\n        task,\n        artifacts: [],\n        outputs: [\"answer\"],\n        ...(intent.policy !== undefined ? { policy: intent.policy } : {}),\n      };\n      response = host.transport !== undefined\n        ? await host.transport.call(provider, providerRequest)\n        : await provider.execute(providerRequest);\n    } catch (error) {\n      return buildFailure({\n        kind: \"provider_execution\",\n        reason: error instanceof Error ? error.message : \"Provider execution failed\",\n        cause: error,\n        iterations,\n        usage: cumulativeUsage,\n      });\n    }\n    const iterDuration = Date.now() - iterStart;\n    const iterUsage = response.normalizedUsage ?? ZERO_USAGE;\n    accumulateUsage(cumulativeUsage, iterUsage);\n\n    // 4d. Extract response text + parse tool-use envelope.\n    const responseText = extractResponseText(response);\n    const toolUseRequests = response.toolCalls !== undefined\n      ? response.toolCalls.map((toolCall) => ({\n          id: toolCall.id,\n          name: toolCall.name,\n          args: toolCall.args,\n        }))\n      : handle.parseToolUse(responseText);\n\n    if (toolUseRequests === null || toolUseRequests.length === 0) {\n      // 4e. Final answer path.\n      const finalRecord: IterationRecord = {\n        index: iterationIndex,\n        provider: providerName,\n        promptTokens: iterUsage.promptTokens,\n        completionTokens: iterUsage.completionTokens,\n        costUsd: iterUsage.costUsd,\n        durationMs: iterDuration,\n        toolCalls: [],\n      };\n      iterations.push(finalRecord);\n      conversation.push({ role: \"assistant\", content: responseText });\n\n      await pipeline.run(\"AFTER_AGENT_ITERATION\", {\n        iterationIndex,\n        intent,\n        record: finalRecord,\n        stepName: `agent-iteration-${iterationIndex}-after`,\n        stepIndex: iterationIndex,\n        timestamp: new Date().toISOString(),\n        previousStepName: `agent-iteration-${iterationIndex}-before`,\n      });\n\n      // 4e.1. Clear persistent storage on final-answer success so the next\n      // run starts fresh (Phase 20).\n      await host.storage?.clear();\n\n      // 4f. Output materialization. Phase 19 produces a flat\n      // `{ answer: string }` output by default. When `intent.outputs` is\n      // declared, the runtime still surfaces the same flat shape — full\n      // OutputContractMap-aware materialization (Standard Schema\n      // round-trip, structured output fields) lives in a follow-on phase\n      // alongside the agent showcase (Phase 22).\n      const artifactRefs =\n        response.artifactRefs !== undefined\n          ? response.artifactRefs.map(toArtifactRef)\n          : [];\n      return {\n        kind: \"success\",\n        output: { answer: responseText } as never,\n        ...(artifactRefs.length > 0 ? { artifacts: artifactRefs } : {}),\n        usage: snapshotUsage(cumulativeUsage),\n        iterations: Object.freeze([...iterations]),\n      };\n    }\n\n    // 4g. Tool dispatch path.\n    conversation.push({ role: \"assistant\", content: responseText });\n    const toolCallRecords: Array<{\n      readonly id: string;\n      readonly name: string;\n      readonly argsHash: string;\n      readonly resultHash: string;\n    }> = [];\n    for (const req of toolUseRequests) {\n      let resultContent: string | null = null;\n      let resultHash = \"tool-not-found\";\n\n      // Phase 39 internal dispatch seam: consult the injected dispatcher\n      // first. `{ content }` short-circuits the default path; `undefined`\n      // falls through to the existing lookup/runTool path verbatim.\n      if (internalOptions.dispatchToolUse !== undefined) {\n        const dispatched = await internalOptions.dispatchToolUse(req, {\n          iterationIndex,\n          conversation,\n          pipeline,\n        });\n        if (dispatched !== undefined) {\n          resultContent = dispatched.content;\n          resultHash = stableHash(dispatched.content);\n        }\n      }\n\n      if (resultContent === null) {\n        const tool = intent.tools.find((t) => t.name === req.name);\n        let toolResult: ToolCallResult | null = null;\n        if (tool === undefined) {\n          resultContent = JSON.stringify({\n            error: `Unknown tool: ${req.name}`,\n          });\n        } else {\n          try {\n            await pipeline.run(\"BEFORE_TOOL\", {\n              iterationIndex,\n              toolName: req.name,\n              args: req.args,\n            });\n            toolResult = await runTool(tool, req.args);\n            resultContent = stringifyArtifactValue(toolResult.artifact.value);\n            resultHash = toolResult.callId;\n            await pipeline.run(\"AFTER_TOOL\", {\n              iterationIndex,\n              toolName: req.name,\n              args: req.args,\n              result: toolResult.artifact.value,\n            });\n          } catch (error) {\n            resultContent = JSON.stringify({\n              error: error instanceof Error ? error.message : \"Tool execution failed\",\n            });\n          }\n        }\n      }\n      conversation.push({\n        role: \"tool\",\n        content: resultContent,\n        toolCallId: req.id,\n        toolName: req.name,\n      });\n      toolCallRecords.push({\n        id: req.id,\n        name: req.name,\n        argsHash: stableHash(req.args),\n        resultHash,\n      });\n    }\n\n    const record: IterationRecord = {\n      index: iterationIndex,\n      provider: providerName,\n      promptTokens: iterUsage.promptTokens,\n      completionTokens: iterUsage.completionTokens,\n      costUsd: iterUsage.costUsd,\n      durationMs: iterDuration,\n      toolCalls: Object.freeze([...toolCallRecords]),\n    };\n    iterations.push(record);\n\n    await pipeline.run(\"AFTER_AGENT_ITERATION\", {\n      iterationIndex,\n      intent,\n      record,\n      stepName: `agent-iteration-${iterationIndex}-after`,\n      stepIndex: iterationIndex,\n      timestamp: new Date().toISOString(),\n      previousStepName: `agent-iteration-${iterationIndex}-before`,\n    });\n\n    // 4h. Persist agent state via host.storage so the loop can resume\n    // after eviction (Phase 20). The survivability adapter handles\n    // serialization (default: createNoopSurvivabilityAdapter which\n    // JSON.stringifies the state).\n    if (host.storage !== undefined) {\n      const snapshot = survivabilityAdapter.serialize({\n        version: \"agent-snapshot/v1\",\n        iterationIndex: iterationIndex + 1,\n        conversation: [...conversation],\n        cumulativeUsage: snapshotUsage(cumulativeUsage),\n        providerName,\n        capturedAt: new Date().toISOString(),\n      });\n      await host.storage.save(snapshot);\n    }\n\n    // 4i. Yield to the host scheduler between iterations.\n    if (host.scheduler !== undefined) {\n      await host.scheduler.scheduleNext(iterationIndex);\n    }\n\n    iterationIndex += 1;\n  }\n\n  return buildFailure({\n    kind: \"agent-max-iterations\",\n    reason: `Iteration budget ${maxIterations} reached without a final answer`,\n    iterations,\n    usage: cumulativeUsage,\n  });\n}\n\nfunction ensurePipeline<T extends AgentIntent>(intent: T): HookPipeline {\n  if (intent.pipeline !== undefined) return intent.pipeline;\n  const options: Parameters<typeof createHookPipeline>[0] =\n    intent.tracer !== undefined ? { tracer: intent.tracer } : {};\n  return createHookPipeline(options);\n}\n\nfunction maybeAutoRegisterCheckpoint<T extends AgentIntent>(\n  pipeline: HookPipeline,\n  intent: T,\n): void {\n  if (intent.signer === undefined) return;\n  if (intent.autoRegisterCheckpoint === false) return;\n  if (pipeline.isFrozen()) return;\n  const handler = createCheckpointHook({\n    runId: `runAgent-${Date.now()}-${Math.random().toString(16).slice(2)}`,\n    signer: intent.signer,\n    ...(intent.tracer !== undefined ? { tracer: intent.tracer } : {}),\n  });\n  pipeline.register(\"AFTER_AGENT_ITERATION\", handler, { band: BAND.OBSERVABILITY });\n}\n\nfunction pickFirstExecutableProvider(config: LatticeConfig): ProviderAdapter | null {\n  const providers = config.providers ?? [];\n  for (const entry of providers) {\n    if (typeof entry === \"string\") continue;\n    if (\"kind\" in entry && entry.kind === \"provider-adapter\" && entry.execute !== undefined) {\n      return entry;\n    }\n  }\n  return null;\n}\n\nfunction extractResponseText(response: ProviderRunResponse): string {\n  const raw = response.rawOutputs ?? {};\n  const text = raw[\"answer\"];\n  if (typeof text === \"string\") return text;\n  // Fallback: any string value in rawOutputs.\n  for (const value of Object.values(raw)) {\n    if (typeof value === \"string\") return value;\n  }\n  return \"\";\n}\n\nfunction accumulateUsage(\n  cumulative: { promptTokens: number; completionTokens: number; costUsd: number | null },\n  iter: Usage,\n): void {\n  cumulative.promptTokens += iter.promptTokens;\n  cumulative.completionTokens += iter.completionTokens;\n  if (iter.costUsd !== null) {\n    cumulative.costUsd = (cumulative.costUsd ?? 0) + iter.costUsd;\n  }\n}\n\nfunction snapshotUsage(c: {\n  promptTokens: number;\n  completionTokens: number;\n  costUsd: number | null;\n}): Usage {\n  return {\n    promptTokens: c.promptTokens,\n    completionTokens: c.completionTokens,\n    costUsd: c.costUsd,\n  };\n}\n\nfunction buildFailure(input: {\n  kind: AgentFailure[\"kind\"];\n  reason?: string;\n  cause?: unknown;\n  iterations: readonly IterationRecord[];\n  usage: { promptTokens: number; completionTokens: number; costUsd: number | null };\n}): AgentFailure {\n  return {\n    kind: input.kind,\n    usage: snapshotUsage(input.usage),\n    iterations: Object.freeze([...input.iterations]),\n    ...(input.reason !== undefined ? { reason: input.reason } : {}),\n    ...(input.cause !== undefined ? { cause: input.cause } : {}),\n  };\n}\n\nfunction stringifyArtifactValue(value: unknown): string {\n  if (typeof value === \"string\") return value;\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction stableHash(input: unknown): string {\n  try {\n    const json = JSON.stringify(input);\n    let hash = 5381;\n    for (let i = 0; i < json.length; i += 1) {\n      hash = (hash * 33) ^ json.charCodeAt(i);\n    }\n    return `djb2:${(hash >>> 0).toString(16)}`;\n  } catch {\n    return \"djb2:0\";\n  }\n}\n\n// Forward-compat re-export: AgentDeniedError is the typed error class\n// callers can catch (vs reading `result.kind === \"agent-iteration-denied\"`).\nvoid AgentDeniedError;\n"],"mappings":";;;;AAUA,MAAMA,gBAAc,IAAI,aAAa;AAErC,SAAgB,eACd,OACA,SACoB;AACpB,KAAI,QAAQ,cAAc,KAAA,EACxB,QAAO,QAAQ;AAGjB,KAAI,WAAW,MAAM,IAAI,MAAM,SAAS,GACtC,QAAO,MAAM;AAGf,KAAI,OAAO,UAAU,SACnB,QAAO,KAAK,QAAQ,MAAM,IAAI,QAAQ;AAGxC,QAAO,QAAQ;;AAGjB,SAAgB,qBACd,OACA,MAC0B;AAC1B,KAAI,SAAS,UAAU,OAAO,UAAU,SACtC,QAAO,cAAc,MAAM;AAG7B,KAAI,SAAS,QAAQ;EACnB,MAAM,aAAa,KAAK,UAAU,MAAM;AAExC,SAAO,eAAe,KAAA,IAAY,KAAA,IAAY,cAAc,WAAW;;AAGzE,KAAI,WAAW,MAAM,CACnB,QAAO,EACL,OAAO,MAAM,MACd;;AAML,SAAS,cAAc,OAA6B;AAClD,QAAO;EACL,YAAY,MAAM;EAClB,OAAOA,cAAY,OAAO,MAAM,CAAC;EAClC;;AAGH,SAAS,WAAW,OAA+B;AACjD,QAAO,OAAO,SAAS,eAAe,iBAAiB;;;;AC8BzD,MAAa,WAAW;CACtB,KAAK,OAAe,UAA2B,EAAE,EAAiB;AAChE,SAAO,eAAe,QAAQ,UAAU,OAAO,SAAS,aAAa;;CAGvE,KAAK,OAAgB,UAA2B,EAAE,EAAiB;AACjE,SAAO,eAAe,QAAQ,UAAU,OAAO,SAAS,mBAAmB;;CAG7E,KAAK,OAA6B,UAA2B,EAAE,EAAiB;AAC9E,SAAO,eAAe,QAAQ,QAAQ,OAAO,QAAQ;;CAGvD,MAAM,OAA6B,UAA2B,EAAE,EAAiB;AAC/E,SAAO,eAAe,SAAS,QAAQ,OAAO,QAAQ;;CAGxD,MAAM,OAA6B,UAA2B,EAAE,EAAiB;AAC/E,SAAO,eAAe,SAAS,QAAQ,OAAO,QAAQ;;CAGxD,SAAS,OAA6B,UAA2B,EAAE,EAAiB;AAClF,SAAO,eAAe,YAAY,QAAQ,OAAO,QAAQ;;CAG3D,IAAI,OAAqB,UAA2B,EAAE,EAAiB;AACrE,SAAO,eAAe,OAAO,OAAO,MAAM,UAAU,EAAE,QAAQ;;CAGhE,WAAW,OAAgB,SAAmD;AAC5E,SAAO,eACL,eACA,QACA,OACA;GACE,GAAG;GACH,UAAU;IACR,GAAG,QAAQ;IACX,UAAU,QAAQ;IAClB,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,QAAQ,GAAG,EAAE;IACnE;GACF,EACD,mBACD;;CAGH,OAAO,OAA8C;EACnD,MAAM,EACJ,MACA,SAAS,aACT,OACA,SACA,WACA,GAAG,YACD;AAEJ,SAAO,eAAe,MAAM,QAAQ,OAAO;GACzC,GAAG;GACH,SAAS;IACP,SAAS,QAAQ,IAAI,cAAc;IACnC;IACD;GACF,EAAE,wBAAwB,KAAK,CAAC;;CAEpC;AAED,SAAgB,cAAc,OAAiD;AAC7E,QAAO;EACL,IAAI,MAAM;EACV,MAAM,MAAM;EACZ,QAAQ,MAAM;EACd,SAAS,MAAM;EACf,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,WAAW,GAAG,EAAE;EACvE,GAAI,MAAM,UAAU,KAAA,IAAY,EAAE,OAAO,MAAM,OAAO,GAAG,EAAE;EAC3D,GAAI,MAAM,aAAa,KAAA,IAAY,EAAE,UAAU,MAAM,UAAU,GAAG,EAAE;EACpE,GAAI,MAAM,SAAS,KAAA,IAAY,EAAE,MAAM,MAAM,MAAM,GAAG,EAAE;EACxD,GAAI,MAAM,gBAAgB,KAAA,IAAY,EAAE,aAAa,MAAM,aAAa,GAAG,EAAE;EAC7E,GAAI,MAAM,YAAY,KAAA,IAAY,EAAE,SAAS,MAAM,SAAS,GAAG,EAAE;EACjE,GAAI,MAAM,YAAY,KAAA,IAAY,EAAE,SAAS,MAAM,SAAS,GAAG,EAAE;EAClE;;AAGH,SAAgB,cAAc,OAAsC;AAClE,KAAI,CAAC,SAAS,MAAM,CAClB,QAAO;AAGT,QACE,OAAO,MAAM,OAAO,YACpB,eAAe,MAAM,KAAK,IAC1B,iBAAiB,MAAM,OAAO,IAC9B,kBAAkB,MAAM,QAAQ;;AAIpC,SAAS,eACP,MACA,QACA,OACA,SACA,kBACe;CACf,MAAM,YAAY,eAAe,OAAO;EACtC;EACA,GAAI,QAAQ,cAAc,KAAA,IAAY,EAAE,WAAW,QAAQ,WAAW,GAAG,EAAE;EAC3E,GAAI,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,GAAG,EAAE;EAC/D,CAAC;CACF,MAAM,OAAO,QAAQ,QAAQ,qBAAqB,OAAO,KAAK;AAE9D,QAAO;EACL,IAAI,QAAQ,MAAM,iBAAiB,KAAK;EACxC;EACA;EACA;EACA,SAAS,QAAQ,WAAW;EAC5B,GAAI,cAAc,KAAA,IAAY,EAAE,WAAW,GAAG,EAAE;EAChD,GAAI,QAAQ,UAAU,KAAA,IAAY,EAAE,OAAO,QAAQ,OAAO,GAAG,EAAE;EAC/D,GAAI,QAAQ,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,UAAU,GAAG,EAAE;EACxE,GAAI,SAAS,KAAA,IAAY,EAAE,MAAM,GAAG,EAAE;EACtC,GAAI,QAAQ,gBAAgB,KAAA,IAAY,EAAE,aAAa,QAAQ,aAAa,GAAG,EAAE;EACjF,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,SAAS,GAAG,EAAE;EACrE,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,SAAS,GAAG,EAAE;EACtE;;AAGH,SAAS,wBAAwB,MAAwC;AACvE,SAAQ,MAAR;EACE,KAAK,OACH,QAAO;EACT,KAAK;EACL,KAAK,cACH,QAAO;EACT,QACE;;;AAIN,SAAS,eAAe,OAAuC;AAC7D,QACE,UAAU,UACV,UAAU,UACV,UAAU,UACV,UAAU,WACV,UAAU,WACV,UAAU,WACV,UAAU,cACV,UAAU,SACV,UAAU;;AAId,SAAS,iBAAiB,OAAyC;AACjE,QACE,UAAU,YACV,UAAU,UACV,UAAU,SACV,UAAU,eACV,UAAU,qBACV,UAAU;;AAId,SAAS,kBAAkB,OAA0C;AACnE,QAAO,UAAU,cAAc,UAAU,eAAe,UAAU;;AAGpE,SAAS,SAAS,OAAkD;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU;;AAGhD,SAAS,iBAAiB,MAA4B;AACpD,KAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe,WAChE,QAAO,YAAY,KAAK,GAAG,OAAO,YAAY;AAGhD,QAAO,YAAY,KAAK,GAAG,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,EAAE;;;;;;;;;;;;;AC1L9E,MAAa,OAAO;CAClB,QAAQ;CACR,eAAe;CACf,WAAW;CACZ;AAID,MAAM,aAA8B;CAAC,KAAK;CAAQ,KAAK;CAAe,KAAK;CAAU;AAyDrF,MAAa,6BAA6B;AAC1C,MAAa,0BAA0B;AAUvC,SAAS,cAAiB,KAAqB;CAC7C,IAAI;AACJ,KAAI;AACF,WAAS,gBAAgB,IAAI;SACvB;AACN,WAAS;;AAEX,KAAI,OAAO,WAAW,YAAY,WAAW,KAC3C,QAAO,OAAO,OAAO;AAEvB,QAAO;;AAGT,eAAe,qBACb,QACA,KACA,UACA,MACA,OACA,WACe;CACf,MAAM,YAAY,YAAY,KAAK;CACnC,IAAI,eAAe;CACnB,MAAM,WAAW,OAAO;CACxB,MAAM,gBAAgB,IAAI,SAAwB,YAAY;AAC5D,mBAAiB;AACf,kBAAe;AACf,WAAQ,cAAc;KACrB,SAAS;GACZ;CACF,MAAM,kBAAkB,YAAY;AAClC,MAAI;AACF,SAAM,OAAO,QAAQ,KAAK,SAAS;UAC7B;AAGR,SAAO;KACL;AAEJ,KADe,MAAM,QAAQ,KAAK,CAAC,gBAAgB,cAAc,CAAC,KACnD,iBAAiB,cAAc;EAC5C,MAAM,YAAY,KAAK,MAAM,YAAY,KAAK,GAAG,UAAU;AAC3D,MAAI,SAAS,KAAA,EACX,MAAK,yBAAyB;GAC5B;GACA,MAAM,OAAO;GACb;GACA,GAAI,cAAc,KAAA,IAAY,EAAE,WAAW,GAAG,EAAE;GAChD,cAAc,OAAO;GACrB;GACD,CAAC;;;;;;AAQR,SAAgB,mBACd,SACc;CACd,MAAM,SAAS,SAAS;CACxB,MAAM,YAAY,SAAS;CAC3B,MAAM,kBAAkB,SAAS,mBAAA;CACjC,MAAM,2BAAgE,IAAI,KAAK;CAC/E,IAAI,SAAS;CACb,IAAI,4BAA4B;CAChC,IAAI,sBAAqC;CAMzC,MAAM,OACJ,WAAW,KAAA,KACN,MAAM,YAAY;AACjB,SAAO,QAAQ,MAAM,QAAQ;KAE/B,KAAA;CAEN,SAAS,SACP,OACA,SACA,MACM;AACN,MAAI,QAAQ;GACV,MAAM,sBAAM,IAAI,MAAM,gDAAgD;AACtE,OAAI,OAAO;AACX,SAAM;;EAER,IAAI,gBAAgB,SAAS,IAAI,MAAM;AACvC,MAAI,kBAAkB,KAAA,GAAW;AAC/B,mCAAgB,IAAI,KAAK;AACzB,YAAS,IAAI,OAAO,cAAc;;EAEpC,IAAI,MAAM,cAAc,IAAI,KAAK,KAAK;AACtC,MAAI,QAAQ,KAAA,GAAW;AACrB,SAAM,EAAE;AACR,iBAAc,IAAI,KAAK,MAAM,IAAI;;EAEnC,MAAM,SAAwB;GACnB;GACT,GAAI,KAAK,YAAY,KAAA,IAAY,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE;GAC/D,UAAU,KAAK,YAAY;GAC3B,MAAM,KAAK;GACX,mBAAmB;GACpB;AACD,+BAA6B;AAC7B,MAAI,KAAK,OAAO;;CAGlB,SAAS,iBAAuB;AAC9B,WAAS;;CAGX,SAAS,WAAoB;AAC3B,SAAO;;CAGT,eAAe,IACb,OACA,SACe;AACf,wBAAsB;EACtB,MAAM,gBAAgB,SAAS,IAAI,MAAM;AACzC,MAAI,kBAAkB,KAAA,EAAW;EACjC,MAAM,WAAyB,EAC7B,OAAO,WAAmB;AACxB,yBAAsB;KAEzB;AACD,OAAK,MAAM,QAAQ,YAAY;GAC7B,MAAM,MAAM,cAAc,IAAI,KAAK;AACnC,OAAI,QAAQ,KAAA,KAAa,IAAI,WAAW,EAAG;AAC3C,QAAK,MAAM,UAAU,KAAK;AACxB,QAAI,OAAO,YAAY,KAAA,KAAa,CAAC,OAAO,QAAQ,KAAK,MAAM,CAC7D;AAGF,UAAM,qBAAqB,QADf,cAAc,QAAQ,EACM,UAAU,MAAM,OAAO,UAAU;;;;CAK/E,SAAS,mBAAkC;AACzC,SAAO;;AAWT,QAR+B;EAC7B,MAAM;EACN;EACA,QAAQ;EACR;EACA;EACA;EACD;;;;AC/SH,MAAM,UAAU,IAAI,aAAa;;;;;;;;;AAUjC,SAAgB,iBAAiB,SAAuC;AACtE,KAAI,YAAY,KAAM,QAAO;AAC7B,KAAI,CAAC,OAAO,SAAS,QAAQ,CAAE,QAAO;AACtC,QAAO,QAAQ,UAAU;;;;;;;AAQ3B,SAAgB,iBAAiB,OAAqC;AACpE,QAAO;EACL,cAAc,MAAM;EACpB,kBAAkB,MAAM;EACxB,SAAS,iBAAiB,MAAM,QAAQ;EACzC;;;;;;;;;;;;;AAcH,SAAgB,wBACd,MACY;CACZ,MAAM,OAAO,aAAa,KAAK;AAC/B,KAAI,SAAS,KAAA,EACX,OAAM,IAAI,MACR,4IACD;AAEH,QAAO,QAAQ,OAAO,KAAK;;;;AC3B7B,MAAa,eAAe;AAE5B,MAAM,cAAc,IAAI,aAAa;AAErC,SAAgB,aAAa,OAA2B;AACtD,QAAO,OAAO,KAAK,MAAM,CAAC,SAAS,SAAS;;AAG9C,SAAgB,aAAa,OAA2B;AACtD,QAAO,IAAI,WAAW,OAAO,KAAK,OAAO,SAAS,CAAC;;;;;;;;;;;;;;;;AAiBrD,SAAgB,SACd,aACA,eACY;CACZ,MAAM,QACJ,YACA,YAAY,OAAO,UAAU,GAC7B,MACA,cACA,MACA,cAAc,OAAO,UAAU,GAC/B,MACA;AACF,QAAO,YAAY,OAAO,MAAM;;AAWlC,SAAgB,eACd,OACiB;AAMjB,QAAO;EACL,aAAa;EACb,SAPc,aAAa,MAAM,aAAa;EAQ9C,YAPqC,MAAM,WAAW,KAAK,WAAW;GACtE,OAAO,MAAM;GACb,KAAK,aAAa,MAAM,IAAI;GAC7B,EAAE;EAKF;;AAYH,SAAgB,eACd,UACiB;AACjB,KAAI,SAAS,gBAAA,uCACX,OAAM,IAAI,MACR,4CAA4C,aAAa,SAAS,SAAS,YAAY,GACxF;AAEH,QAAO;EACL,aAAa,SAAS;EACtB,cAAc,aAAa,SAAS,QAAQ;EAC5C,YAAY,SAAS,WAAW,KAAK,WAAW;GAC9C,OAAO,MAAM;GACb,KAAK,aAAa,MAAM,IAAI;GAC7B,EAAE;EACJ;;;;;;;;AC9GH,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;;AA4B3C,SAAgB,kBACd,MACA,WAAmB,6BACF;CACjB,MAAM,aAAiC,EAAE;AAMzC,KACE,KAAK,qBAAqB,KAAA,KAC1B,KAAK,iBAAiB,SAAS,SAE/B,YAAW,KAAK;EACd,MAAM;EACN,QAAQ;EACT,CAAC;CAKJ,MAAM,SAAS,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,MACtC,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,EAC9C;AAED,QAAO;EACL,MAAM;GACJ,GAAG;GACH,mBAAmB;GACnB,YAAY;GACb;EACD,YAAY;EACb;;;;;;;;;;;;;;;;;;;;;;;;ACcH,eAAsB,cACpB,OACA,QAC0B;CAC1B,MAAM,WAAW,MAAM,qBAAA;CACvB,MAAM,YAAY,MAAM,aAAa,OAAO,YAAY;CACxD,MAAM,WAAW,MAAM,6BAAY,IAAI,MAAM,EAAC,aAAa;CA2C3D,MAAM,EAAE,SAAS,kBAnCoB;EACnC,SALgD;EAMhD;EACA,OAAO,MAAM;EACb;EACA,KAAK,OAAO;EACZ,OAAO,MAAM;EACb,OAAO,MAAM;EACb,GAAI,MAAM,eAAe,KAAA,IAAY,EAAE,YAAY,MAAM,YAAY,GAAG,EAAE;EAC1E,GAAI,MAAM,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,MAAM,kBAAkB,GAAG,EAAE;EAC5F,GAAI,MAAM,sBAAsB,KAAA,IAAY,EAAE,mBAAmB,MAAM,mBAAmB,GAAG,EAAE;EAC/F,OAAO,iBAAiB,MAAM,MAAM;EACpC,iBAAiB,MAAM;EACvB,cAAc,MAAM;EACpB,aAAa,MAAM;EACnB,YAAY,MAAM;EAClB,mBAAmB;EACnB,YAAY,EAAE;EACd,GAAI,MAAM,mBAAmB,KAAA,IACzB,EAAE,gBAAgB,MAAM,gBAAgB,GACxC,EAAE;EACN,GAAI,MAAM,qBAAqB,KAAA,IAC3B,EAAE,kBAAkB,MAAM,kBAAkB,GAC5C,EAAE;EAEN,GAAI,MAAM,aAAa,KAAA,IAAY,EAAE,UAAU,MAAM,UAAU,GAAG,EAAE;EACpE,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,WAAW,GAAG,EAAE;EACvE,GAAI,MAAM,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,MAAM,gBAAgB,GAAG,EAAE;EACtF,GAAI,MAAM,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,MAAM,kBAAkB,GAAG,EAAE;EAC5F,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,WAAW,GAAG,EAAE;EACvE,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,WAAW,GAAG,EAAE;EACxE,EAIyC,SAAS;CAGnD,MAAM,eAAe,wBAAwB,KAAK;CAMlD,MAAM,MAAM,SAAS,cAHL,aAAa,aAAa,CAGC;CAG3C,MAAM,MAAM,MAAM,OAAO,KAAK,IAAI;AAIlC,QAAO,eAAe;EACpB;EACA,YAAY,CAAC;GAAE,OAAO,OAAO;GAAK;GAAK,CAAC;EACzC,CAAC;;;;;;;;AChFJ,MAAa,6BAA6B;;;;;;AAO1C,MAAa,0BAAgC,KAAK;AAoDlD,MAAM,gBAA8B;CAClC,WAAW;CACX,UAAU;CACX;AAED,MAAM,gBAA8B;CAClC,YAAY;CACZ,cAAc;CACd,eAAe;CAChB;AAED,MAAM,gBAAgB;CACpB,cAAc;CACd,kBAAkB;CAClB,SAAS;CACV;;;;;;;;;;;;;;;;;;;;;AAsBD,SAAgB,qBACd,SACoC;CACpC,MAAM,QAAQ,QAAQ;CACtB,MAAM,SAAS,QAAQ;CACvB,MAAM,SAAS,QAAQ;CACvB,MAAM,YAAY,QAAQ;CAC1B,MAAM,QAAQ,QAAQ,SAAS;CAC/B,MAAM,QAAQ,QAAQ,SAAS;CAC/B,MAAM,kBAAkB,QAAQ,mBAAmB;AAEnD,QAAO,eAAe,sBACpB,KACe;EAIf,MAAM,eAAwC;GAC5C;GACA,UAAU,IAAI;GACd,WAAW,IAAI;GACf,WAAW,IAAI;GACf,GAAI,IAAI,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,IAAI,gBAAgB,GAAG,EAAE;GAClF,GAAI,IAAI,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,IAAI,kBAAkB,GAAG,EAAE;GACxF,GAAI,cAAc,KAAA,IAAY,EAAE,WAAW,GAAG,EAAE;GACjD;EAID,IAAI;EACJ,IAAI;EACJ,IAAI;AACJ,MAAI,WAAW,KAAA,EACb,KAAI;AAiBF,cAAW,MAAM,cAhBiB;IAChC;IACA;IACA;IACA,OAAO;IACP;IACA,cAAc;IACd,aAAa,EAAE;IACf,YAAY;IACZ,UAAU,IAAI;IACd,WAAW,IAAI;IACf,WAAW,IAAI;IACf,GAAI,IAAI,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,IAAI,gBAAgB,GAAG,EAAE;IAClF,GAAI,IAAI,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,IAAI,kBAAkB,GAAG,EAAE;IACxF,GAAI,cAAc,KAAA,IAAY,EAAE,WAAW,GAAG,EAAE;IACjD,EACqC,OAAO;AAM7C,eAAY,iBAAiB,SAAS;WAC/B,KAAK;AACZ,eAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;EAMhE,MAAM,WAAoC;GACxC,GAAG;GACH,GAAI,cAAc,KAAA,IAAY,EAAE,WAAW,GAAG,EAAE;GAChD,GAAI,aAAa,KAAA,IAAY,EAAE,UAAU,GAAG,EAAE;GAC9C,GAAI,cAAc,KAAA,IAAY,EAAE,WAAW,GAAG,EAAE;GACjD;AACD,UAAQ,QAAQ,4BAA4B,SAAS;;;;;;;;;;;;AAazD,SAAS,iBAAiB,UAA+C;AACvE,KAAI;EAEF,MAAM,QAAQ,WAAW,KAAK,KAAK,SAAS,QAAQ,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC;EAC7E,MAAM,OAAO,KAAK,MAAM,IAAI,aAAa,CAAC,OAAO,MAAM,CAAC;AACxD,SAAO,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;SACvD;AACN;;;;;;;;;;;;;;ACxIJ,SAAgB,uBAAuB,QAAmC;CACxE,MAAM,iBAAkB,OAAyD;AACjF,KACE,OAAO,mBAAmB,YAC1B,mBAAmB,QACnB,YAAY,gBACZ;EACA,MAAM,SAAS;EACf,MAAM,cAAe,OAClB;AACH,MAAI,OAAO,gBAAgB,WACzB,KAAI;AACF,UAAO,aAAa;UACd;AAIV,SAAO;GACL,UAAU,2BAA2B,OAAO,OAAO;GACnD,MAAM;GACP;;AAEH,QAAO;EAAE,UAAU;EAA6B,MAAM;EAAU;;;;;;;;;;AAWlE,SAAgB,uBACd,cACA,OACA,UAA8B,EAAE,EACV;AAIjB,SAAQ;CAEb,MAAM,SAAS,QAAQ,QAAQ,MAAM,IAAI;CACzC,MAAM,mBAAmB,MACtB,KAAK,SAAS;EACb,MAAM,mBAAmB,uBAAuB,KAAK,YAAY;EACjE,MAAM,aAAa,KAAK,UAAU,kBAAkB,MAAM,EAAE;EAC5D,MAAM,OAAO,KAAK,aAAa,MAAM,IAAI;AACzC,SAAO,WAAW,KAAK,KAAK,mBAAmB,KAAK,mBAAmB;GACvE,CACD,KAAK,KAAK;CAEb,MAAM,uBAAuB;EAC3B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;CAEZ,MAAM,cAAc;EAClB;EACA;EACA;EACA,oBAAoB;EACpB;EACA;EACD,CACE,QAAQ,MAAM,MAAM,MAAM,KAAK,CAC/B,KAAK,KAAK,CACV,QAAQ,QAAQ,GAAG,CACnB,SAAS;CAEZ,SAAS,aACP,cACA,oBACQ;EACR,MAAM,QAAkB,EAAE;AAC1B,MAAI,mBACF,OAAM,KAAK,YAAY;AAEzB,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,MAAM;AACjB,QAAM,KAAK,GAAG;AACd,OAAK,MAAM,QAAQ,cAAc;AAC/B,OAAI,KAAK,SAAS,OAChB,OAAM,KAAK,UAAU,KAAK,UAAU;YAC3B,KAAK,SAAS,YACvB,OAAM,KAAK,eAAe,KAAK,UAAU;QACpC;IACL,MAAM,SAAS,KAAK,eAAe,KAAA,IAAY,OAAO,KAAK,eAAe;IAC1E,MAAM,WAAW,KAAK,aAAa,KAAA,IAAY,SAAS,KAAK,aAAa;AAC1E,UAAM,KAAK,gBAAgB,SAAS,MAAM,IAAI,SAAS,OAAO,MAAM,KAAK,UAAU;;AAErF,SAAM,KAAK,GAAG;;AAEhB,QAAM,KAAK,aAAa;AACxB,SAAO,MAAM,KAAK,KAAK;;CAGzB,SAAS,UAAU,cAAmD;AACpE,SAAO,aAAa,cAAc,KAAK;;CAGzC,SAAS,cAAc,cAAmD;AACxE,SAAO,aAAa,cAAc,MAAM;;CAG1C,SAAS,oBAA4B;AACnC,SAAO;;AAGT,QAAO;EACL;EACA;EACA,cAAc;EACd;EACA,MAAM;EACP;;AAGH,SAAgB,qBAAqB,cAA4D;AAC/F,KAAI,OAAO,iBAAiB,YAAY,aAAa,WAAW,EAC9D,QAAO;CAET,MAAM,aAAa,sBAAsB,aAAa;AACtD,MAAK,MAAM,aAAa,YAAY;EAClC,MAAM,SAAS,iBAAiB,UAAU;AAC1C,MAAI,WAAW,KACb,QAAO;;AAGX,QAAO;;;;;;;;;;AAWT,SAAS,sBAAsB,MAAiC;CAC9D,MAAM,aAAuB,EAAE;CAE/B,MAAM,aAAa;CACnB,IAAI;AACJ,SAAQ,aAAa,WAAW,KAAK,KAAK,MAAM,MAAM;EACpD,MAAM,QAAQ,WAAW;AACzB,MAAI,UAAU,KAAA,EACZ,YAAW,KAAK,MAAM,MAAM,CAAC;;CAIjC,MAAM,aAAa,KAAK,QAAQ,IAAI;CACpC,MAAM,WAAW,KAAK,YAAY,IAAI;AACtC,KAAI,eAAe,MAAM,WAAW,WAClC,YAAW,KAAK,KAAK,MAAM,YAAY,WAAW,EAAE,CAAC;AAGvD,YAAW,KAAK,KAAK,MAAM,CAAC;AAC5B,QAAO;;AAGT,SAAS,iBAAiB,UAAwD;CAChF,IAAI;AACJ,KAAI;AACF,WAAS,KAAK,MAAM,SAAS;SACvB;AACN,SAAO;;AAET,KAAI,OAAO,WAAW,YAAY,WAAW,KAC3C,QAAO;CAGT,MAAM,YADW,OACU;AAC3B,KAAI,CAAC,MAAM,QAAQ,UAAU,IAAI,UAAU,WAAW,EACpD,QAAO;CAET,MAAM,WAA6B,EAAE;AACrC,MAAK,MAAM,QAAQ,WAAW;AAC5B,MAAI,OAAO,SAAS,YAAY,SAAS,KACvC,QAAO;EAET,MAAM,aAAa;EACnB,MAAM,KAAK,WAAW;EACtB,MAAM,OAAO,WAAW;EACxB,MAAM,OAAO,WAAW;AACxB,MAAI,OAAO,OAAO,YAAY,OAAO,SAAS,SAC5C,QAAO;AAET,WAAS,KAAK;GAAE;GAAI;GAAM;GAAM,CAAC;;AAEnC,QAAO;;;;ACzTT,eAAsB,qBACpB,MACA,QACA,OAUA;CACA,MAAM,SAAS,OAAO,aAAa,SAAS,MAAM;CAClD,MAAM,aAAa,kBAAkB,UAAU,MAAM,SAAS;AAE9D,KAAI,WAAW,OACb,QAAO;EACL,IAAI;EACJ,OAAO;IACJ,WAAW;GACZ,QAAQ,WAAW,OAAO,IAAI,eAAe;GAC9C;EACF;AAGH,QAAO;EACL,IAAI;EACJ,OAAO,WAAW;EACnB;;AAGH,eAAsB,kBACpB,WACA,YACA,MAC8B;CAC9B,MAAM,UAAmC,EAAE;AAE3C,MAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,UAAU,EAAE;EACxD,MAAM,QAAQ,WAAW;EACzB,MAAM,QAAQ,MAAM,eAAe,MAAM,UAAU,MAAM;AAEzD,MAAI,CAAC,MAAM,GACT,QAAO;GACL,IAAI;GACJ,OAAO;IACL,MAAM;IACN,SAAS,mBAAmB,KAAK;KAChC,WAAW;IACZ,QAAQ,MAAM;IACf;GACD,OAAO;IAAE,cAAc;IAAG,kBAAkB;IAAG,SAAS;IAAM;GAC9D,KAAK;GACL,gBAAgB;GAChB;GACD;AAGH,UAAQ,QAAQ,MAAM;;AAGxB,QAAO;EACL,IAAI;EACK;EACT,WAAW,EAAE;EACb,OAAO;GAAE,cAAc;GAAG,kBAAkB;GAAG,SAAS;GAAM;EAC9D;EACD;;AAGH,eAAe,eACb,MACA,UACA,OAIA;AACA,KAAI,aAAa,QAAQ;AACvB,MAAI,OAAO,UAAU,SACnB,QAAO;GACL,IAAI;GACJ,QAAQ,CAAC,EAAE,SAAS,wCAAwC,CAAC;GAC9D;AAGH,SAAO;GAAE,IAAI;GAAM;GAAO;;AAG5B,KAAI,iBAAiB,SAAS,EAAE;EAC9B,MAAM,SAAS,MAAM,qBAAqB,MAAM,UAAU,MAAM;AAEhE,MAAI,CAAC,OAAO,GACV,QAAO;GACL,IAAI;GACJ,QAAQ,OAAO,MAAM;GACtB;AAGH,SAAO;GAAE,IAAI;GAAM,OAAO,OAAO;GAAO;;AAG1C,KAAI,SAAS,SAAS,aAAa;AACjC,MAAI,CAAC,MAAM,QAAQ,MAAM,CACvB,QAAO;GACL,IAAI;GACJ,QAAQ,CAAC,EAAE,SAAS,6CAA6C,CAAC;GACnE;AAGH,SAAO;GAAE,IAAI;GAAM;GAAO;;AAG5B,KAAI,SAAS,SAAS,aAAa;AACjC,MAAI,CAAC,MAAM,QAAQ,MAAM,CACvB,QAAO;GACL,IAAI;GACJ,QAAQ,CAAC,EAAE,SAAS,6CAA6C,CAAC;GACnE;AAGH,OAAK,MAAM,QAAQ,OAAO;AACxB,OAAI,CAAC,cAAc,KAAK,CACtB,QAAO;IACL,IAAI;IACJ,QAAQ,CAAC,EAAE,SAAS,yDAAyD,CAAC;IAC/E;AAGH,OAAI,SAAS,iBAAiB,KAAA,KAAa,KAAK,SAAS,SAAS,aAChE,QAAO;IACL,IAAI;IACJ,QAAQ,CACN,EACE,SAAS,8CAA8C,SAAS,aAAa,KAC9E,CACF;IACF;;AAIL,SAAO;GAAE,IAAI;GAAM,OAAO,MAAM,IAAI,cAAc;GAAE;;AAGtD,QAAO;EACL,IAAI;EACJ,QAAQ,CAAC,EAAE,SAAS,gCAAgC,CAAC;EACtD;;AAGH,SAAS,iBAAiB,UAAwD;AAChF,KAAI,OAAO,aAAa,YAAY,aAAa,KAC/C,QAAO;AAOT,QAAO,OAJW,SAChB,cAGsB,aAAa;;AAGvC,SAAS,eAAe,OAAgD;CACtE,MAAM,OAAO,MAAM,MACf,IAAI,qBAAqB,CAC1B,QAAQ,YAAiD,YAAY,KAAA,EAAU;AAElF,QAAO;EACL,SAAS,MAAM;EACf,GAAI,SAAS,KAAA,KAAa,KAAK,SAAS,IAAI,EAAE,MAAM,GAAG,EAAE;EAC1D;;AAGH,SAAS,qBACP,SACsC;AACtC,KACE,OAAO,YAAY,YACnB,OAAO,YAAY,YACnB,OAAO,YAAY,SAEnB,QAAO;AAGT,QAAO,iBAAiB,QAAQ,IAAI;;AAGtC,SAAS,iBAAiB,KAA4C;AACpE,QAAO;;;;;;;;;;;;;;;;ACIT,SAAgB,+BACd,UAA2C,EAAE,EACf;CAC9B,MAAM,KAAK,QAAQ,MAAM;CACzB,MAAM,gBAA8B,QAAQ,UAAU;CACtD,MAAM,wBAAQ,IAAI,KAA2B;AAE7C,QAAO;EACL,MAAM;EACN;EACA,UAAU,OAAmC;AAC3C,UAAO;IACL,MAAM;IACN,SAAS;IACT,SAAS,KAAK,UAAU,SAAS,KAAK;IACtC,6BAAY,IAAI,MAAM,EAAC,aAAa;IACrC;;EAEH,YAAY,UAAsC;AAGhD,UAAO,KAAK,MAAM,SAAS,QAAQ;;EAErC,WAAW,MAA2C;AACpD,SAAM,IAAI,KAAK;GACf,IAAI,eAAe;AACnB,gBAAa;AACX,QAAI,aAAc;AAClB,mBAAe;AACf,UAAM,OAAO,KAAK;;;EAGtB,MAAM,OAAO,WAAsD;AAKjE,UAAO;;EAEV;;;;ACtNH,SAAgB,WACd,YACyB;AACzB,QAAO;EACL,MAAM;EACN,GAAG;EACJ;;AAGH,eAAsB,QACpB,MACA,OACA,UAAgC,EAAE,EACT;CACzB,MAAM,aAAa,MAAM,qBAAqB,KAAK,MAAM,KAAK,aAAa,MAAM;AAEjF,KAAI,CAAC,WAAW,GACd,OAAM,IAAI,MAAM,2BAA2B,KAAK,KAAK,IAAI;CAG3D,MAAM,SAAS,kBAAkB;CACjC,MAAM,SAAS,MAAM,KAAK,QAAQ,WAAW,OAAO,QAAQ;AAE5D,QAAO;EACL;EACA,UAAU,KAAK;EACf,UAAU,SAAS,WAAW,QAAQ;GACpC,IAAI,wBAAwB,KAAK,KAAK,GAAG;GACzC,UAAU,KAAK;GACf;GACD,CAAC;EACH;;AAiBH,eAAsB,eACpB,QACA,WACoC;CACpC,MAAM,cAAc,MAAM,QAAQ,QAAQ,OAAO,aAAa,IAAI,EAAE,CAAC;CACrE,MAAM,UAAU,cAAc,KAAA,IAAY,KAAA,IAAY,IAAI,IAAI,UAAU;AAExE,QAAO,YACJ,QAAQ,eAAe,YAAY,KAAA,KAAa,QAAQ,IAAI,WAAW,KAAK,CAAC,CAC7E,KAAK,eACJ,WAAW;EACT,MAAM,WAAW;EACjB,GAAI,WAAW,gBAAgB,KAAA,IAC3B,EAAE,aAAa,WAAW,aAAa,GACvC,EAAE;EACN,aAAa,WAAW;EACxB,SAAS,OAAO,UACd,OAAO,SAAS;GACd,MAAM,WAAW;GACjB,WAAW;GACZ,CAAC;EACL,CAAC,CACH;;AAGL,SAAgB,gBAAgB,QAAqC;CACnE,MAAM,EAAE,OAAO,QAAQ,GAAG,QAAQ,OAAO;AAEzC,QAAO;;AAGT,SAAS,mBAA2B;AAClC,KAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe,WAChE,QAAO,OAAO,YAAY;AAG5B,QAAO,GAAG,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,EAAE;;;;;;;;;;;;;;ACiC7D,SAAgB,sBAAiC;AAC/C,QAAO;EACL,MAAM;EACN,WAAW,EACT,MAAM,aAAa,iBAAwC,IAG5D;EACD,WAAW,EACT,MAAM,KACJ,UACA,SAC8B;AAC9B,OAAI,SAAS,YAAY,KAAA,EACvB,OAAM,IAAI,MACR,4BAA4B,SAAS,GAAG,2BACzC;AAEH,UAAO,SAAS,QAAQ,QAAQ;KAEnC;EACD,SAAS;GACP,MAAM,KAAK,WAA8C;GAGzD,MAAM,OAA2C;AAC/C,WAAO;;GAET,MAAM,QAAuB;GAG9B;EACF;;;;;;;;;;;;;ACDH,IAAa,mBAAb,cAAsC,MAAM;CAC1C,OAAgB;CAChB,WAAoB;CACpB;CACA;CAEA,YAAY,QAAgB,gBAAwB;AAClD,QAAM,mBAAmB,eAAe,WAAW,SAAS;AAC5D,OAAK,OAAO;AACZ,OAAK,SAAS;AACd,OAAK,iBAAiB;;;;;;;;;AChI1B,MAAM,aAAoB;CAAE,cAAc;CAAG,kBAAkB;CAAG,SAAS;CAAM;;;;;;;;;;;;;AAgDjF,eAAsB,SACpB,QACA,SAAwB,EAAE,EACM;AAChC,QAAO,iBAAiB,QAAQ,OAAO;;;;;;;AAQzC,eAAsB,iBACpB,QACA,SAAwB,EAAE,EAC1B,kBAA2C,EAAE,EACb;CAChC,MAAM,YAAY,KAAK,KAAK;CAC5B,MAAM,kBAAkB;EAAE,cAAc;EAAG,kBAAkB;EAAG,SAAS;EAAuB;CAChG,MAAM,aAAgC,EAAE;CAGxC,MAAM,OAAkB,OAAO,QAAQ,qBAAqB;CAC5D,MAAM,uBACJ,OAAO,wBAAwB,gCAA+C;CAGhF,MAAM,WAAW,eAAe,OAAO;AACvC,6BAA4B,UAAU,OAAO;CAG7C,MAAM,WAAW,4BAA4B,OAAO;AACpD,KAAI,aAAa,KACf,QAAO,aAAa;EAClB,MAAM;EACN,QAAQ;EACR;EACA,OAAO;EACR,CAAC;CAEJ,IAAI,eAAe,SAAS;CAG5B,IAAI,eAAmC,CAAC;EAAE,MAAM;EAAQ,SAAS,OAAO;EAAM,CAAC;CAC/E,MAAM,SAAS,uBAAuB,cAAc,OAAO,MAAM;CAEjE,MAAM,SAAS,OAAO,UAAU;CAChC,MAAM,gBAAgB,QAAQ,iBAAiB,OAAO;CACtD,MAAM,gBAAgB,QAAQ,iBAAiB,OAAO;CACtD,MAAM,aAAa,QAAQ,cAAc,OAAO;CAEhD,IAAI,iBAAiB;CAMrB,MAAM,mBAAmB,MAAM,KAAK,SAAS,MAAM;AACnD,KAAI,qBAAqB,QAAQ,qBAAqB,KAAA,GAAW;AAC/D,SAAO,QAAQ,QAAQ,kBAAkB;GACvC,iBAAiB,iBAAiB;GAClC,YAAY,iBAAiB;GAC9B,CAAC;AACF,MAAI;GACF,MAAM,WAAW,qBAAqB,YAAY,iBAAiB;AACnE,oBAAiB,SAAS;AAC1B,kBAAe,CAAC,GAAG,SAAS,aAAa;AACzC,mBAAgB,eAAe,SAAS,gBAAgB;AACxD,mBAAgB,mBAAmB,SAAS,gBAAgB;AAC5D,mBAAgB,UAAU,SAAS,gBAAgB;AACnD,kBAAe,SAAS;AACxB,UAAO,QAAQ,QAAQ,qBAAqB;IAC1C;IACA;IACD,CAAC;WACK,OAAO;AACd,UAAO,QAAQ,QAAQ,mBAAmB,EACxC,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,sBAClD,CAAC;AACF,SAAM,KAAK,SAAS,OAAO;;;AAK/B,QAAO,iBAAiB,eAAe;EAErC,MAAM,YAAY,KAAK,KAAK,GAAG;AAC/B,MAAI,aAAa,cACf,QAAO,aAAa;GAClB,MAAM;GACN,QAAQ,oBAAoB,cAAc,oBAAoB,UAAU;GACxE;GACA,OAAO;GACR,CAAC;AAEJ,MACE,gBAAgB,YAAY,QAC5B,gBAAgB,WAAW,WAK3B,QAAO,aAAa;GAClB,MAAM;GACN,QAAQ,gBAAgB,WAAW,gBAAgB,gBAAgB;GACnE;GACA,OAAO;GACR,CAAC;AAIJ,QAAM,SAAS,IAAI,0BAA0B;GAC3C;GACA;GACA,cAAc,aAAa,KAAK,OAAO,EAAE,GAAG,GAAG,EAAE;GAGjD,UAAU,mBAAmB,eAAe;GAC5C,WAAW;GACX,4BAAW,IAAI,MAAM,EAAC,aAAa;GACnC,GAAI,iBAAiB,IACjB,EAAE,kBAAkB,mBAAmB,iBAAiB,EAAE,SAAS,GACnE,EAAE;GACP,CAAC;EACF,MAAM,SAAS,SAAS,kBAAkB;AAC1C,MAAI,WAAW,MAAM;GACnB,MAAM,eAAgC;IACpC,OAAO;IACP,UAAU;IACV,cAAc;IACd,kBAAkB;IAClB,SAAS;IACT,YAAY;IACZ,WAAW,EAAE;IACb,cAAc;IACf;AACD,cAAW,KAAK,aAAa;AAC7B,SAAM,SAAS,IAAI,yBAAyB;IAC1C;IACA;IACA,QAAQ;IACR,UAAU,mBAAmB,eAAe;IAC5C,WAAW;IACX,4BAAW,IAAI,MAAM,EAAC,aAAa;IACnC,kBAAkB,mBAAmB,eAAe;IACrD,CAAC;AACF,UAAO,aAAa;IAClB,MAAM;IACN,QAAQ;IACR;IACA,OAAO;IACR,CAAC;;EAIJ,MAAM,OAAO,OAAO,UAAU,aAAa;EAC3C,MAAM,YAAY,KAAK,KAAK;EAC5B,IAAI;AACJ,MAAI;AACF,OAAI,SAAS,YAAY,KAAA,EACvB,QAAO,aAAa;IAClB,MAAM;IACN,QAAQ;IACR;IACA,OAAO;IACR,CAAC;GAEJ,MAAM,kBAAkB;IACtB;IACA,WAAW,EAAE;IACb,SAAS,CAAC,SAAS;IACnB,GAAI,OAAO,WAAW,KAAA,IAAY,EAAE,QAAQ,OAAO,QAAQ,GAAG,EAAE;IACjE;AACD,cAAW,KAAK,cAAc,KAAA,IAC1B,MAAM,KAAK,UAAU,KAAK,UAAU,gBAAgB,GACpD,MAAM,SAAS,QAAQ,gBAAgB;WACpC,OAAO;AACd,UAAO,aAAa;IAClB,MAAM;IACN,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;IACjD,OAAO;IACP;IACA,OAAO;IACR,CAAC;;EAEJ,MAAM,eAAe,KAAK,KAAK,GAAG;EAClC,MAAM,YAAY,SAAS,mBAAmB;AAC9C,kBAAgB,iBAAiB,UAAU;EAG3C,MAAM,eAAe,oBAAoB,SAAS;EAClD,MAAM,kBAAkB,SAAS,cAAc,KAAA,IAC3C,SAAS,UAAU,KAAK,cAAc;GACpC,IAAI,SAAS;GACb,MAAM,SAAS;GACf,MAAM,SAAS;GAChB,EAAE,GACH,OAAO,aAAa,aAAa;AAErC,MAAI,oBAAoB,QAAQ,gBAAgB,WAAW,GAAG;GAE5D,MAAM,cAA+B;IACnC,OAAO;IACP,UAAU;IACV,cAAc,UAAU;IACxB,kBAAkB,UAAU;IAC5B,SAAS,UAAU;IACnB,YAAY;IACZ,WAAW,EAAE;IACd;AACD,cAAW,KAAK,YAAY;AAC5B,gBAAa,KAAK;IAAE,MAAM;IAAa,SAAS;IAAc,CAAC;AAE/D,SAAM,SAAS,IAAI,yBAAyB;IAC1C;IACA;IACA,QAAQ;IACR,UAAU,mBAAmB,eAAe;IAC5C,WAAW;IACX,4BAAW,IAAI,MAAM,EAAC,aAAa;IACnC,kBAAkB,mBAAmB,eAAe;IACrD,CAAC;AAIF,SAAM,KAAK,SAAS,OAAO;GAQ3B,MAAM,eACJ,SAAS,iBAAiB,KAAA,IACtB,SAAS,aAAa,IAAI,cAAc,GACxC,EAAE;AACR,UAAO;IACL,MAAM;IACN,QAAQ,EAAE,QAAQ,cAAc;IAChC,GAAI,aAAa,SAAS,IAAI,EAAE,WAAW,cAAc,GAAG,EAAE;IAC9D,OAAO,cAAc,gBAAgB;IACrC,YAAY,OAAO,OAAO,CAAC,GAAG,WAAW,CAAC;IAC3C;;AAIH,eAAa,KAAK;GAAE,MAAM;GAAa,SAAS;GAAc,CAAC;EAC/D,MAAM,kBAKD,EAAE;AACP,OAAK,MAAM,OAAO,iBAAiB;GACjC,IAAI,gBAA+B;GACnC,IAAI,aAAa;AAKjB,OAAI,gBAAgB,oBAAoB,KAAA,GAAW;IACjD,MAAM,aAAa,MAAM,gBAAgB,gBAAgB,KAAK;KAC5D;KACA;KACA;KACD,CAAC;AACF,QAAI,eAAe,KAAA,GAAW;AAC5B,qBAAgB,WAAW;AAC3B,kBAAa,WAAW,WAAW,QAAQ;;;AAI/C,OAAI,kBAAkB,MAAM;IAC1B,MAAM,OAAO,OAAO,MAAM,MAAM,MAAM,EAAE,SAAS,IAAI,KAAK;IAC1D,IAAI,aAAoC;AACxC,QAAI,SAAS,KAAA,EACX,iBAAgB,KAAK,UAAU,EAC7B,OAAO,iBAAiB,IAAI,QAC7B,CAAC;QAEF,KAAI;AACF,WAAM,SAAS,IAAI,eAAe;MAChC;MACA,UAAU,IAAI;MACd,MAAM,IAAI;MACX,CAAC;AACF,kBAAa,MAAM,QAAQ,MAAM,IAAI,KAAK;AAC1C,qBAAgB,uBAAuB,WAAW,SAAS,MAAM;AACjE,kBAAa,WAAW;AACxB,WAAM,SAAS,IAAI,cAAc;MAC/B;MACA,UAAU,IAAI;MACd,MAAM,IAAI;MACV,QAAQ,WAAW,SAAS;MAC7B,CAAC;aACK,OAAO;AACd,qBAAgB,KAAK,UAAU,EAC7B,OAAO,iBAAiB,QAAQ,MAAM,UAAU,yBACjD,CAAC;;;AAIR,gBAAa,KAAK;IAChB,MAAM;IACN,SAAS;IACT,YAAY,IAAI;IAChB,UAAU,IAAI;IACf,CAAC;AACF,mBAAgB,KAAK;IACnB,IAAI,IAAI;IACR,MAAM,IAAI;IACV,UAAU,WAAW,IAAI,KAAK;IAC9B;IACD,CAAC;;EAGJ,MAAM,SAA0B;GAC9B,OAAO;GACP,UAAU;GACV,cAAc,UAAU;GACxB,kBAAkB,UAAU;GAC5B,SAAS,UAAU;GACnB,YAAY;GACZ,WAAW,OAAO,OAAO,CAAC,GAAG,gBAAgB,CAAC;GAC/C;AACD,aAAW,KAAK,OAAO;AAEvB,QAAM,SAAS,IAAI,yBAAyB;GAC1C;GACA;GACA;GACA,UAAU,mBAAmB,eAAe;GAC5C,WAAW;GACX,4BAAW,IAAI,MAAM,EAAC,aAAa;GACnC,kBAAkB,mBAAmB,eAAe;GACrD,CAAC;AAMF,MAAI,KAAK,YAAY,KAAA,GAAW;GAC9B,MAAM,WAAW,qBAAqB,UAAU;IAC9C,SAAS;IACT,gBAAgB,iBAAiB;IACjC,cAAc,CAAC,GAAG,aAAa;IAC/B,iBAAiB,cAAc,gBAAgB;IAC/C;IACA,6BAAY,IAAI,MAAM,EAAC,aAAa;IACrC,CAAC;AACF,SAAM,KAAK,QAAQ,KAAK,SAAS;;AAInC,MAAI,KAAK,cAAc,KAAA,EACrB,OAAM,KAAK,UAAU,aAAa,eAAe;AAGnD,oBAAkB;;AAGpB,QAAO,aAAa;EAClB,MAAM;EACN,QAAQ,oBAAoB,cAAc;EAC1C;EACA,OAAO;EACR,CAAC;;AAGJ,SAAS,eAAsC,QAAyB;AACtE,KAAI,OAAO,aAAa,KAAA,EAAW,QAAO,OAAO;AAGjD,QAAO,mBADL,OAAO,WAAW,KAAA,IAAY,EAAE,QAAQ,OAAO,QAAQ,GAAG,EAAE,CAC5B;;AAGpC,SAAS,4BACP,UACA,QACM;AACN,KAAI,OAAO,WAAW,KAAA,EAAW;AACjC,KAAI,OAAO,2BAA2B,MAAO;AAC7C,KAAI,SAAS,UAAU,CAAE;CACzB,MAAM,UAAU,qBAAqB;EACnC,OAAO,YAAY,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,EAAE;EACpE,QAAQ,OAAO;EACf,GAAI,OAAO,WAAW,KAAA,IAAY,EAAE,QAAQ,OAAO,QAAQ,GAAG,EAAE;EACjE,CAAC;AACF,UAAS,SAAS,yBAAyB,SAAS,EAAE,MAAM,KAAK,eAAe,CAAC;;AAGnF,SAAS,4BAA4B,QAA+C;CAClF,MAAM,YAAY,OAAO,aAAa,EAAE;AACxC,MAAK,MAAM,SAAS,WAAW;AAC7B,MAAI,OAAO,UAAU,SAAU;AAC/B,MAAI,UAAU,SAAS,MAAM,SAAS,sBAAsB,MAAM,YAAY,KAAA,EAC5E,QAAO;;AAGX,QAAO;;AAGT,SAAS,oBAAoB,UAAuC;CAClE,MAAM,MAAM,SAAS,cAAc,EAAE;CACrC,MAAM,OAAO,IAAI;AACjB,KAAI,OAAO,SAAS,SAAU,QAAO;AAErC,MAAK,MAAM,SAAS,OAAO,OAAO,IAAI,CACpC,KAAI,OAAO,UAAU,SAAU,QAAO;AAExC,QAAO;;AAGT,SAAS,gBACP,YACA,MACM;AACN,YAAW,gBAAgB,KAAK;AAChC,YAAW,oBAAoB,KAAK;AACpC,KAAI,KAAK,YAAY,KACnB,YAAW,WAAW,WAAW,WAAW,KAAK,KAAK;;AAI1D,SAAS,cAAc,GAIb;AACR,QAAO;EACL,cAAc,EAAE;EAChB,kBAAkB,EAAE;EACpB,SAAS,EAAE;EACZ;;AAGH,SAAS,aAAa,OAML;AACf,QAAO;EACL,MAAM,MAAM;EACZ,OAAO,cAAc,MAAM,MAAM;EACjC,YAAY,OAAO,OAAO,CAAC,GAAG,MAAM,WAAW,CAAC;EAChD,GAAI,MAAM,WAAW,KAAA,IAAY,EAAE,QAAQ,MAAM,QAAQ,GAAG,EAAE;EAC9D,GAAI,MAAM,UAAU,KAAA,IAAY,EAAE,OAAO,MAAM,OAAO,GAAG,EAAE;EAC5D;;AAGH,SAAS,uBAAuB,OAAwB;AACtD,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,KAAI;AACF,SAAO,KAAK,UAAU,MAAM;SACtB;AACN,SAAO,OAAO,MAAM;;;AAIxB,SAAS,WAAW,OAAwB;AAC1C,KAAI;EACF,MAAM,OAAO,KAAK,UAAU,MAAM;EAClC,IAAI,OAAO;AACX,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,EACpC,QAAQ,OAAO,KAAM,KAAK,WAAW,EAAE;AAEzC,SAAO,SAAS,SAAS,GAAG,SAAS,GAAG;SAClC;AACN,SAAO"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@full-self-browsing/lattice",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "TypeScript-first capability runtime SDK for AI applications",
   "license": "MIT",
   "repository": {
@@ -54,13 +54,15 @@
   "devDependencies": {
     "@noble/ed25519": "3.1.0",
     "@types/node": "24.12.2",
+    "fast-check": "4.7.0",
     "zod": "4.3.6"
   },
   "scripts": {
-    "build": "tsdown",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run",
-    "test:types": "vitest --typecheck --run && tsd",
+    "stamp:version": "node ../../scripts/stamp-package-version.mjs --package package.json --out src/version.ts --export latticeVersion",
+    "build": "pnpm stamp:version && tsdown",
+    "typecheck": "pnpm stamp:version && tsc -p tsconfig.json --noEmit",
+    "test": "pnpm stamp:version && vitest run",
+    "test:types": "pnpm stamp:version && vitest --typecheck --run && tsd",
     "lint:packages": "pnpm build && publint && attw --pack . --profile esm-only && node ./scripts/check-cli-deps.mjs"
   }
 }

package/dist/run-crew-DDznbc3G.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-crew-DDznbc3G.js","names":["minDefined"],"sources":["../src/agent/infra/cost-tracker.ts","../src/receipts/cid.ts","../src/agent/infra/action-history.ts","../src/agent/crew/dispatcher.ts","../src/agent/crew/crew-policy.ts","../src/agent/infra/rate-limit-group.ts","../src/agent/crew/run-crew.ts"],"sourcesContent":["/**\n * CostTracker — Phase 21 (v1.2).\n *\n * Pure accumulator over per-iteration `Usage`. Standalone (no dependency\n * on the agent runtime); callers can plug it in via a hook handler or\n * read it after a run completes.\n */\n\nimport type { BudgetInvariant } from \"../../contract/contract.js\";\nimport type { Usage } from \"../../providers/provider.js\";\n\nexport type CostBudgetStatus = \"ok\" | \"warning\" | \"exceeded\";\n\nexport interface CostTracker {\n  readonly kind: \"cost-tracker\";\n  /** Append a per-iteration Usage record. Mutates internal state. */\n  recordIteration(usage: Usage): void;\n  /** Returns the running sum across all recorded iterations. */\n  total(): Usage;\n  /**\n   * Reports budget status against `contract.budget`:\n   *   - \"ok\" — under 80% of maxCostUsd.\n   *   - \"warning\" — at or over 80% but under 100%.\n   *   - \"exceeded\" — at or over 100% of maxCostUsd.\n   * Returns \"ok\" when no budget is declared or when cumulative cost is null.\n   */\n  budgetStatus(budget?: BudgetInvariant): CostBudgetStatus;\n}\n\nconst WARNING_THRESHOLD = 0.8;\n\nexport function createCostTracker(): CostTracker {\n  let promptTokens = 0;\n  let completionTokens = 0;\n  let costUsd: number | null = null;\n\n  return {\n    kind: \"cost-tracker\" as const,\n    recordIteration(usage: Usage): void {\n      promptTokens += usage.promptTokens;\n      completionTokens += usage.completionTokens;\n      if (usage.costUsd !== null) {\n        costUsd = (costUsd ?? 0) + usage.costUsd;\n      }\n    },\n    total(): Usage {\n      return { promptTokens, completionTokens, costUsd };\n    },\n    budgetStatus(budget?: BudgetInvariant): CostBudgetStatus {\n      const max = budget?.maxCostUsd;\n      if (max === undefined || costUsd === null) return \"ok\";\n      if (costUsd >= max) return \"exceeded\";\n      if (costUsd >= max * WARNING_THRESHOLD) return \"warning\";\n      return \"ok\";\n    },\n  };\n}\n","/**\n * Receipt CID — Phase 39 (v1.3). Content address = sha256 of the DSSE\n * canonical payload bytes (the exact bytes that were signed).\n *\n * The CID is derivable from any envelope WITHOUT key material: it digests\n * `envelope.payload` (the base64-encoded RFC 8785 JCS canonical body) after\n * decoding. verifyReceipt proves payload byte-equality on every accepted\n * envelope (verify.ts re-canonicalization step), so two envelopes with the\n * same signed body always share a CID and any body tamper changes it.\n *\n * Web-standard APIs only (atob + crypto.subtle) — no Node-specific byte\n * types, matching the checkpoint.ts / fingerprint.ts precedents.\n */\n\nimport type { ReceiptEnvelope } from \"./types.js\";\n\n/**\n * Derive the content-addressed CID of a receipt envelope.\n *\n * Returns `sha256:<hex>` where `<hex>` is the 64-char lowercase SHA-256\n * digest of the decoded DSSE payload bytes. No KeySet, signer, or other\n * key material is required — callers chaining receipts (parentReceiptCid)\n * compute this from the parent envelope alone.\n */\nexport async function receiptCid(envelope: ReceiptEnvelope): Promise<string> {\n  // Decode base64 via atob — web-standard, runtime-agnostic (checkpoint.ts:255).\n  const bytes = Uint8Array.from(atob(envelope.payload), (c) => c.charCodeAt(0));\n\n  // Copy into a freshly-allocated backing store so crypto.subtle.digest\n  // never sees a view over a larger shared allocation (fingerprint.ts idiom).\n  const copy = new Uint8Array(bytes.byteLength);\n  copy.set(bytes);\n\n  const digest = await crypto.subtle.digest(\"SHA-256\", copy.buffer);\n\n  const hex = Array.from(new Uint8Array(digest), (byte) =>\n    byte.toString(16).padStart(2, \"0\"),\n  ).join(\"\");\n\n  return `sha256:${hex}`;\n}\n","/**\n * ActionHistory — Phase 21 (v1.2).\n *\n * Detects stuck patterns in the agent loop's tool-call sequence:\n *   - \"consecutive-identical-tool-call\" — same (toolName, argsHash) N+ times in a row\n *   - \"ping-pong\" — last 4 records alternate between 2 distinct (toolName, argsHash) pairs\n *   - \"no-progress\" — reserved for callers wiring goal-progress feedback here\n *\n * Standalone (no dependency on the agent runtime); callers register the\n * primitive externally and pump `recordAction` from their loop or hook.\n */\n\nexport const STUCK_REASONS = [\n  \"consecutive-identical-tool-call\",\n  \"no-progress\",\n  \"ping-pong\",\n] as const;\n\nexport type StuckReason = typeof STUCK_REASONS[number];\n\nexport interface ActionRecord {\n  readonly iterationIndex: number;\n  readonly toolName: string;\n  readonly argsHash: string;\n}\n\nexport interface ActionHistoryOptions {\n  /** Number of consecutive identical records that triggers the consecutive detector. Default 3. */\n  readonly consecutiveLimit?: number;\n}\n\nexport interface ActionHistory {\n  readonly kind: \"action-history\";\n  /**\n   * Append a record. Returns the latest StuckReason triggered by this\n   * record, or null when no detector fires. The most recent reason wins\n   * when multiple apply.\n   */\n  recordAction(action: ActionRecord): StuckReason | null;\n  history(): readonly ActionRecord[];\n}\n\nfunction actionKey(record: ActionRecord): string {\n  return `${record.toolName}::${record.argsHash}`;\n}\n\nexport function createActionHistory(options: ActionHistoryOptions = {}): ActionHistory {\n  const consecutiveLimit = options.consecutiveLimit ?? 3;\n  const records: ActionRecord[] = [];\n\n  return {\n    kind: \"action-history\" as const,\n    recordAction(action: ActionRecord): StuckReason | null {\n      records.push(action);\n      // Consecutive identical detector.\n      if (records.length >= consecutiveLimit) {\n        const tail = records.slice(-consecutiveLimit);\n        const firstKey = actionKey(tail[0]!);\n        if (tail.every((r) => actionKey(r) === firstKey)) {\n          return \"consecutive-identical-tool-call\";\n        }\n      }\n      // Ping-pong detector (last 4 alternate between exactly 2 keys).\n      if (records.length >= 4) {\n        const last4 = records.slice(-4);\n        const keys = last4.map(actionKey);\n        const distinct = Array.from(new Set(keys));\n        if (\n          distinct.length === 2 &&\n          keys[0] === keys[2] &&\n          keys[1] === keys[3] &&\n          keys[0] !== keys[1]\n        ) {\n          return \"ping-pong\";\n        }\n      }\n      return null;\n    },\n    history(): readonly ActionRecord[] {\n      return Object.freeze([...records]);\n    },\n  };\n}\n","/**\n * CrewDispatcher — Phase 39 (v1.3). The single chokepoint where ALL crew\n * concerns live (D-01/D-02).\n *\n * Hybrid dispatch model (D-01): the parent's MODEL sees each child agent as\n * a named tool (synthesized `ToolDefinition`-shaped declarations derived\n * from the child's `id`, `intent`, and `summaryReturnSchema`), but the\n * RUNTIME branches on the `kind: \"agent\"` discriminant at this chokepoint —\n * dispatch is routed through the 39-03 `runAgentInternal` seam\n * (`dispatchToolUse`), never through a tool closure. No policy logic is\n * smuggled into tool `execute` bodies (D-02): budget derivation, ancestry\n * cycle/depth enforcement, summary-return validation, classified failure\n * routing, and receipt minting all live HERE.\n *\n * Re-entry contract (D-04): a completed child returns a schema-validated\n * `{ summary, artifacts, receipts }` envelope that re-enters the parent\n * conversation as a standard `role: \"tool\"` turn over the existing\n * prompt-reencoded tool protocol. Recoverable failures return as structured\n * `{ error: { kind, reason, terminal } }` tool results (D-09); terminal\n * failures (D-10) are never re-dispatched — a per-dispatcher terminal-block\n * set caches the error and short-circuits without running the child.\n *\n * Ancestry convention (D-05): `CrewDispatchContext.ancestry` is the chain\n * of spec ids ABOVE the agent this dispatcher serves (parent-first,\n * exclusive of the agent itself — the root agent's dispatcher receives\n * `[]`). Cycle prevention rejects any dispatch whose target id equals the\n * current agent's id or already appears in the chain; the depth gate\n * rejects dispatch once `ancestry.length >= policy.maxDepth`. The full\n * root-first chain (including the child itself) is persisted on the\n * child's `AgentSnapshot.ancestry` via the survivability seam when\n * snapshots are captured.\n *\n * Receipt chain (research Pattern 2): when a signer is configured the\n * dispatcher mints the child completion receipt directly via\n * `createReceipt` with `parentReceiptCid = crew-root CID` (the anchor\n * minted by the 39-06 orchestrator BEFORE children run — Pitfall 2),\n * using synthetic route identifiers (checkpoint.ts DEFAULT_ROUTE\n * precedent). Per-iteration checkpoint receipts remain UNCHANGED (no\n * parentReceiptCid).\n */\n\nimport type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\nimport type { BudgetInvariant } from \"../../contract/contract.js\";\nimport { validateSchemaOutput } from \"../../outputs/validate.js\";\nimport type {\n  ProviderAdapter,\n  ProviderRunRequest,\n  Usage,\n} from \"../../providers/provider.js\";\nimport { receiptCid } from \"../../receipts/cid.js\";\nimport { createReceipt } from \"../../receipts/receipt.js\";\nimport type { ReceiptEnvelope, ReceiptSigner } from \"../../receipts/types.js\";\nimport type { LatticeConfig } from \"../../runtime/config.js\";\nimport {\n  createNoopSurvivabilityAdapter,\n  type SurvivabilityAdapter,\n} from \"../../runtime/survivability.js\";\nimport type { ToolDefinition } from \"../../tools/tools.js\";\n\nimport { formatToolsForProvider } from \"../format-tools.js\";\nimport { STUCK_REASONS } from \"../infra/action-history.js\";\nimport type { AgentHost, AgentSnapshot, AgentTransport } from \"../host.js\";\nimport {\n  runAgentInternal,\n  type DispatchToolUseContext,\n  type RunAgentInternalOptions,\n} from \"../runtime.js\";\nimport type {\n  AgentFailure,\n  AgentIntent,\n  AgentResult,\n  ToolUseRequest,\n} from \"../types.js\";\n\nimport type { AgentSpec } from \"./agent-spec.js\";\nimport type { ValidatedCrewPolicy } from \"./crew-policy.js\";\n\n/**\n * Context handed to `createCrewDispatcher` by the crew orchestrator\n * (39-06) — or by tests driving the dispatcher directly.\n */\nexport interface CrewDispatchContext {\n  /** Normalized crew policy from `validateCrewPolicy` (39-03). */\n  readonly policy: ValidatedCrewPolicy;\n  /** Host every child loop runs against (`hosts.childHost`). */\n  readonly childHost: AgentHost;\n  /**\n   * Spec-id chain ABOVE the agent this dispatcher serves, parent-first and\n   * exclusive of the agent itself (D-05). Root dispatcher: `[]`.\n   */\n  readonly ancestry: readonly string[];\n  /** Crew-root receipt CID — the chain anchor (absent when no signer). */\n  readonly crewRootCid?: string;\n  /** Crew-level signer threaded into children + completion receipts. */\n  readonly signer?: ReceiptSigner;\n  /**\n   * Feeds the per-agent tracker + crew aggregator. Called exactly once per\n   * child dispatch with the child run's cumulative usage (Pitfall 3).\n   */\n  readonly recordUsage: (agentId: string, usage: Usage) => void;\n  /**\n   * Optional richer telemetry hook for the 39-06 orchestrator. Kept\n   * additive so dispatcher-only tests and direct consumers do not need to\n   * know about CrewResult assembly.\n   */\n  readonly recordAgentResult?: (\n    agentId: string,\n    result: AgentResult,\n  ) => void;\n  /** Remaining crew pool (D-07). `undefined` = unbounded. */\n  readonly remainingBudget: () => BudgetInvariant | undefined;\n  /** Byte-stable crew cache prefix (\"\" = no prefix sharing). */\n  readonly sharedPrefix: string;\n  /** Collects per-agent completion envelopes for the CrewResult. */\n  readonly mintedReceipts: (envelope: ReceiptEnvelope) => void;\n  /** Provider config the child loops execute against (createAI config). */\n  readonly config: LatticeConfig;\n  /** Optional crew-level tracer threaded into child loops. */\n  readonly tracer?: AgentIntent[\"tracer\"];\n  /** Optional crew-level hook pipeline threaded into child loops. */\n  readonly pipeline?: AgentIntent[\"pipeline\"];\n}\n\n/** Seam-compatible dispatch function (39-03 `runAgentInternal` options). */\nexport type DispatchToolUseFn = NonNullable<RunAgentInternalOptions[\"dispatchToolUse\"]>;\n\n/** The chokepoint surface consumed by the 39-06 orchestrator. */\nexport interface CrewDispatcher {\n  /** Plugs into the 39-03 seam: `runAgentInternal(intent, config, { dispatchToolUse })`. */\n  readonly dispatchToolUse: DispatchToolUseFn;\n  /**\n   * Synthesized child declarations for the parent's `intent.tools` —\n   * real `ToolDefinition`-shaped values so `formatToolsForProvider` renders\n   * them and Phase 37 `validateToolCalls` registries accept them (Pitfall 5).\n   */\n  readonly childToolDeclarations: ReadonlyArray<ToolDefinition<StandardSchemaV1>>;\n  /**\n   * Crew-ceiling signal (D-10): flips to `true` once a dispatch was\n   * rejected with terminal `crew-budget-exceeded`. The 39-06 orchestrator\n   * reads this to end the crew run. Shared across the recursive child\n   * dispatchers of one crew.\n   */\n  readonly crewBudgetExhausted: () => boolean;\n}\n\n/** Structured tool-result error body (D-09 shape). */\nexport interface CrewDispatchError {\n  readonly kind: string;\n  readonly reason: string;\n  readonly terminal: boolean;\n}\n\n/** Crew-run state shared across the recursive dispatcher tree. */\ninterface CrewSharedState {\n  exhausted: boolean;\n  readonly runId: string;\n}\n\n/**\n * Create the crew dispatch chokepoint for one agent spec.\n *\n * `spec` is the agent whose loop this dispatcher serves (its `childAgents`\n * are the dispatchable targets); `ctx` carries every crew-level concern.\n */\nexport function createCrewDispatcher(\n  spec: AgentSpec,\n  ctx: CrewDispatchContext,\n): CrewDispatcher {\n  return createDispatcherNode(spec, ctx, {\n    exhausted: false,\n    runId: `lattice-crew-${crypto.randomUUID()}`,\n  });\n}\n\nfunction createDispatcherNode(\n  spec: AgentSpec,\n  ctx: CrewDispatchContext,\n  shared: CrewSharedState,\n): CrewDispatcher {\n  const children = spec.childAgents ?? [];\n  // D-10 terminal-block set: childId -> cached terminal error content.\n  const terminalBlock = new Map<string, string>();\n  // Cache-prefix hoist (DELEG-04): every child loop's transport is wrapped\n  // so requests whose task starts with the byte-stable crew prefix are\n  // hoisted to ProviderRunRequest.cacheSystemPrefix when (and ONLY when)\n  // the executing adapter discloses quirks.promptCachingSupported. All\n  // gating lives here in crew code — adapters stay dumb.\n  const childHost: AgentHost =\n    ctx.sharedPrefix.length > 0\n      ? {\n          ...ctx.childHost,\n          transport: withCachePrefixHoist(ctx.sharedPrefix, ctx.childHost.transport),\n        }\n      : ctx.childHost;\n\n  async function dispatchToolUse(\n    req: ToolUseRequest,\n    _loopCtx: DispatchToolUseContext,\n  ): Promise<{ readonly content: string } | undefined> {\n    void _loopCtx;\n    const childSpec = children.find((child) => child.id === req.name);\n    if (childSpec === undefined) {\n      // Not a child agent — fall through to the default lookup/runTool path.\n      return undefined;\n    }\n\n    // ---- Pre-run checks (Task 2a-c) -------------------------------------\n\n    // (i) Terminal-block short-circuit (D-10): a terminally-failed child is\n    // never re-dispatched — return the cached error WITHOUT running it.\n    const blocked = terminalBlock.get(childSpec.id);\n    if (blocked !== undefined) {\n      return { content: blocked };\n    }\n\n    // (ii) Cycle check (D-05): reject when the target id equals the\n    // dispatching agent's own id or already appears in the ancestry chain.\n    if (req.name === spec.id || ctx.ancestry.includes(req.name)) {\n      return errorResult({\n        kind: \"crew-cycle-rejected\",\n        reason:\n          `Dispatch of \"${req.name}\" rejected: the id already appears in the ` +\n          `crew ancestry chain (D-05 cycle prevention).`,\n        terminal: false,\n      });\n    }\n\n    // (iii) Depth check (D-05): ancestry holds the agents ABOVE this one,\n    // so its length is this agent's depth — dispatching one level further\n    // is rejected once that depth reaches policy.maxDepth.\n    if (ctx.ancestry.length >= ctx.policy.maxDepth) {\n      return errorResult({\n        kind: \"crew-depth-exceeded\",\n        reason:\n          `Dispatch of \"${req.name}\" rejected: crew maxDepth ${ctx.policy.maxDepth} ` +\n          `reached (ancestry depth ${ctx.ancestry.length}).`,\n        terminal: false,\n      });\n    }\n\n    // (iv) Crew ceiling (D-10): a fully-drained pool ends the run — emit\n    // terminal crew-budget-exceeded and flip the orchestrator signal.\n    const pool = ctx.remainingBudget();\n    if (isPoolExhausted(pool)) {\n      shared.exhausted = true;\n      return errorResult({\n        kind: \"crew-budget-exceeded\",\n        reason: \"Crew budget pool exhausted — the crew run must end (D-10).\",\n        terminal: true,\n      });\n    }\n\n    // ---- Child pipeline (Task 1) ----------------------------------------\n\n    // (1) Dispatch args: the model supplies { task: string } per the\n    // synthesized declaration schema. Untrusted model output — reject\n    // malformed args with a recoverable structured error instead of\n    // throwing (T-39-14: failures are structured objects, not raw text).\n    const task = extractTaskArg(req.args);\n    if (task === null) {\n      return errorResult({\n        kind: \"invalid-dispatch-args\",\n        reason: `Dispatch args for child agent \"${childSpec.id}\" must be { \"task\": string }.`,\n        terminal: false,\n      });\n    }\n\n    // (2) Effective budget (D-07): per-dimension min of the child's\n    // contract budget and the remaining crew pool; iterations also capped\n    // by policy.maxIterationsPerAgent. Null/absent cost dimensions never\n    // poison min() (Pitfall 4).\n    const effectiveBudget = deriveChildBudget(\n      childSpec.contract?.budget,\n      pool,\n      ctx.policy.maxIterationsPerAgent,\n    );\n\n    // (3) Build the child AgentIntent and run the existing loop. The\n    // child's dispatch context threads the extended ancestry chain (D-05);\n    // when the child has its own childAgents, a recursive dispatcher node\n    // (sharing this crew's state) serves its loop and its declarations\n    // join the child's tool surface.\n    const childAncestry: readonly string[] = [...ctx.ancestry, spec.id];\n    const childNode =\n      childSpec.childAgents !== undefined && childSpec.childAgents.length > 0\n        ? createDispatcherNode(childSpec, { ...ctx, ancestry: childAncestry }, shared)\n        : undefined;\n    const childTools =\n      childNode !== undefined\n        ? [...childSpec.tools, ...childNode.childToolDeclarations]\n        : childSpec.tools;\n\n    const childIntent: AgentIntent = {\n      task,\n      tools: childTools,\n      host: childHost,\n      // Persist the full root-first chain (including the child itself) on\n      // the child's AgentSnapshot when the childHost captures snapshots.\n      survivabilityAdapter: withAncestrySnapshot(\n        createNoopSurvivabilityAdapter<AgentSnapshot>(),\n        [...childAncestry, childSpec.id],\n      ),\n      ...(effectiveBudget !== undefined\n        ? { contract: { kind: \"capability-contract\", budget: effectiveBudget } }\n        : {}),\n      ...(ctx.signer !== undefined ? { signer: ctx.signer } : {}),\n      ...(ctx.tracer !== undefined ? { tracer: ctx.tracer } : {}),\n      ...(ctx.pipeline !== undefined ? { pipeline: ctx.pipeline } : {}),\n    };\n    const childResult = await runAgentInternal(\n      childIntent,\n      ctx.config,\n      childNode !== undefined ? { dispatchToolUse: childNode.dispatchToolUse } : {},\n    );\n\n    // (5) Record child usage exactly once — success AND failure paths both\n    // consumed provider budget (Pitfall 3: no double-counting; the crew\n    // aggregator never sees this run again).\n    ctx.recordUsage(childSpec.id, childResult.usage);\n    ctx.recordAgentResult?.(childSpec.id, childResult);\n\n    if (childResult.kind !== \"success\") {\n      // (b) Classified failure routing (D-09/D-10).\n      const classified = classifyChildFailure(childSpec.id, childResult);\n      const result = errorResult(classified);\n      if (classified.terminal) {\n        terminalBlock.set(childSpec.id, result.content);\n        if (classified.kind === \"crew-budget-exceeded\") {\n          shared.exhausted = true;\n        }\n      }\n      return result;\n    }\n\n    // (d) Receipt minting at the seam (D-02): child completion receipt\n    // chained to the crew root. Best-effort (checkpoint.ts D-07 precedent) —\n    // a mint failure never destroys the child's completed work.\n    const receipts: string[] = [];\n    if (ctx.signer !== undefined) {\n      try {\n        const envelope = await createReceipt(\n          {\n            runId: shared.runId,\n            model: { requested: \"lattice-crew/agent-completion\", observed: null },\n            route: {\n              providerId: \"lattice-crew\",\n              capabilityId: \"lattice-crew/agent-completion\",\n              attemptNumber: 1,\n            },\n            ...(ctx.crewRootCid !== undefined\n              ? { parentReceiptCid: ctx.crewRootCid }\n              : {}),\n            usage: childResult.usage,\n            contractVerdict: \"success\",\n            contractHash: null,\n            inputHashes: [],\n            outputHash: null,\n            stepName: `crew-agent-completion:${childSpec.id}`,\n          },\n          ctx.signer,\n        );\n        ctx.mintedReceipts(envelope);\n        receipts.push(await receiptCid(envelope));\n      } catch {\n        // Best-effort: the summary simply carries no completion CID.\n      }\n    }\n\n    // (4) Assemble + validate the summary envelope (children only — the\n    // root agent's return is NOT schema-validated; research Open Q2).\n    const envelope = {\n      summary: extractSummary(childResult.output),\n      artifacts: extractArtifacts(childResult),\n      receipts,\n    };\n    const validation = await validateSchemaOutput(\n      childSpec.id,\n      childSpec.summaryReturnSchema,\n      envelope,\n    );\n    if (!validation.ok) {\n      return errorResult({\n        kind: \"summary-validation-failed\",\n        reason: validation.issue.issues.map((issue) => issue.message).join(\"; \"),\n        terminal: false,\n      });\n    }\n\n    // (6) Re-enter the parent conversation as a standard tool turn (D-04).\n    return { content: JSON.stringify(envelope) };\n  }\n\n  return {\n    dispatchToolUse,\n    childToolDeclarations: synthesizeChildDeclarations(children),\n    crewBudgetExhausted: () => shared.exhausted,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Budget derivation (D-07, Pitfall 4)\n// ---------------------------------------------------------------------------\n\n/**\n * Per-dimension `min(spec.contract?.budget, remaining crew pool)` with the\n * iteration dimension additionally capped by `maxIterationsPerAgent`.\n *\n * Cost-dimension min applies ONLY when both sides are numbers — a pool\n * derived from null-cost (unmeasured) usage omits `maxCostUsd`, and even a\n * literal `null` never poisons the arithmetic (Pitfall 4).\n */\nexport function deriveChildBudget(\n  specBudget: BudgetInvariant | undefined,\n  pool: BudgetInvariant | undefined,\n  maxIterationsPerAgent?: number,\n): BudgetInvariant | undefined {\n  const maxIterations = minDefined(\n    minDefined(specBudget?.maxIterations, pool?.maxIterations),\n    maxIterationsPerAgent,\n  );\n  const maxWallTimeMs = minDefined(specBudget?.maxWallTimeMs, pool?.maxWallTimeMs);\n  const maxCostUsd = minDefined(specBudget?.maxCostUsd, pool?.maxCostUsd);\n\n  if (maxIterations === undefined && maxWallTimeMs === undefined && maxCostUsd === undefined) {\n    return undefined;\n  }\n  return {\n    ...(maxIterations !== undefined ? { maxIterations } : {}),\n    ...(maxWallTimeMs !== undefined ? { maxWallTimeMs } : {}),\n    ...(maxCostUsd !== undefined ? { maxCostUsd } : {}),\n  };\n}\n\n/** min() that only applies when BOTH sides are real numbers (Pitfall 4). */\nfunction minDefined(a: number | null | undefined, b: number | null | undefined): number | undefined {\n  const aNum = typeof a === \"number\" && Number.isFinite(a) ? a : undefined;\n  const bNum = typeof b === \"number\" && Number.isFinite(b) ? b : undefined;\n  if (aNum !== undefined && bNum !== undefined) return Math.min(aNum, bNum);\n  return aNum ?? bNum;\n}\n\n/**\n * Crew-ceiling predicate (D-10): the pool is exhausted when ANY bounded\n * dimension is at/below zero. Null/absent dimensions (unmeasured cost)\n * never count as exhausted (Pitfall 4).\n */\nfunction isPoolExhausted(pool: BudgetInvariant | undefined): boolean {\n  if (pool === undefined) return false;\n  return (\n    (typeof pool.maxIterations === \"number\" && pool.maxIterations <= 0) ||\n    (typeof pool.maxWallTimeMs === \"number\" && pool.maxWallTimeMs <= 0) ||\n    (typeof pool.maxCostUsd === \"number\" && pool.maxCostUsd <= 0)\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Cache-prefix sharing (DELEG-04, research Pattern 3)\n// ---------------------------------------------------------------------------\n\n/**\n * Compose the byte-stable crew cache prefix for one tool surface: the\n * `describeForSystem()` block (tool descriptions + envelope instructions),\n * derived from deterministic, version-pinned inputs ONLY — no timestamps,\n * random ids, or unsorted keys (Phase 35 scaffold discipline; any\n * non-byte-stable fragment silently zeroes the cache-hit rate).\n *\n * The 39-06 orchestrator composes this ONCE per crew at crew start and\n * threads it as `CrewDispatchContext.sharedPrefix`. All members sharing a\n * tool surface share byte-identical prefix bytes across dispatches.\n */\nexport function composeCrewCachePrefix(\n  tools: ReadonlyArray<ToolDefinition<StandardSchemaV1>>,\n): string {\n  // The providerName argument does not branch the v1.2+ prompt-reencoded\n  // implementation; a fixed literal keeps the bytes provider-independent.\n  return formatToolsForProvider(\"lattice-crew\", tools).describeForSystem();\n}\n\n/**\n * Transport wrapper implementing the quirks-gated prefix hoist:\n *\n * - Adapter discloses `quirks.promptCachingSupported === true` (Anthropic\n *   block-granular caching) AND the outgoing task starts with the shared\n *   prefix → the prefix is hoisted to `cacheSystemPrefix` and `task`\n *   carries ONLY the conversation body. The 39-03 byte-equality invariant\n *   (`describeForSystem() + \"\\n\" + buildTaskBody(conv) === buildTask(conv)`)\n *   guarantees the stripped remainder IS the body-only rendering — the\n *   prefix is never duplicated.\n * - Any other adapter → the request passes through UNTOUCHED: no\n *   `cacheSystemPrefix` own-property is ever created (Pitfall 6) and the\n *   prefix stays at the head of `task` (OpenAI automatic token-prefix path).\n *\n * Composes over an existing `AgentTransport` (FSB offscreen bridge etc.);\n * when `inner` is absent it dispatches `provider.execute()` directly,\n * matching the runtime's default transport behavior.\n */\nexport function withCachePrefixHoist(\n  sharedPrefix: string,\n  inner?: AgentTransport,\n): AgentTransport {\n  const marker = `${sharedPrefix}\\n`;\n  return {\n    async call(provider, request) {\n      const hoist =\n        sharedPrefix.length > 0 &&\n        supportsPromptCaching(provider) &&\n        request.task.startsWith(marker);\n      const outbound: ProviderRunRequest = hoist\n        ? {\n            ...request,\n            task: request.task.slice(marker.length),\n            cacheSystemPrefix: sharedPrefix,\n          }\n        : request;\n      if (inner !== undefined) {\n        return inner.call(provider, outbound);\n      }\n      if (provider.execute === undefined) {\n        throw new Error(\n          `CrewDispatcher: provider \"${provider.id}\" has no execute() method.`,\n        );\n      }\n      return provider.execute(outbound);\n    },\n  };\n}\n\n/** Quirks gate: only adapters that disclose block-granular prompt caching. */\nfunction supportsPromptCaching(provider: ProviderAdapter): boolean {\n  const quirks = provider.quirks as\n    | { readonly promptCachingSupported?: boolean }\n    | undefined;\n  return quirks?.promptCachingSupported === true;\n}\n\n// ---------------------------------------------------------------------------\n// Failure classification (D-09/D-10)\n// ---------------------------------------------------------------------------\n\n/**\n * Map a child `AgentFailure` to the structured tool-result error body.\n *\n * Terminal (D-10): tripwire violations and contract no-match (the\n * `isTerminal()` kinds in results/errors.ts — the agent loop reuses\n * `no-contract-match` for child cost-budget exhaustion), crew-ceiling\n * breaches, and non-stuck SAFETY-band denials (AgentDeniedError aligns\n * with TripwireViolationError terminal semantics). Recoverable (D-09):\n * iteration/wall-time exhaustion and STUCK_REASONS stalls — the parent\n * MAY re-dispatch.\n */\nexport function classifyChildFailure(\n  childId: string,\n  failure: AgentFailure,\n): CrewDispatchError {\n  return {\n    kind: failure.kind,\n    reason:\n      failure.reason ?? `Child agent \"${childId}\" failed with kind \"${failure.kind}\".`,\n    terminal: isTerminalChildFailure(failure),\n  };\n}\n\nfunction isTerminalChildFailure(failure: AgentFailure): boolean {\n  if (\n    failure.kind === \"tripwire-violated\" ||\n    failure.kind === \"no-contract-match\" ||\n    failure.kind === \"crew-budget-exceeded\"\n  ) {\n    return true;\n  }\n  if (failure.kind === \"agent-iteration-denied\") {\n    // SAFETY-band stuck detection (STUCK_REASONS) is a recoverable stall;\n    // every other denial carries AgentDeniedError's terminal semantics.\n    const reason = failure.reason ?? \"\";\n    return !STUCK_REASONS.some((stuck) => reason.includes(stuck));\n  }\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction errorResult(body: CrewDispatchError): { readonly content: string } {\n  // D-09 exact shape: {\"error\":{\"kind\":...,\"reason\":...,\"terminal\":...}}.\n  // Errors carry kind/reason strings ONLY — never request options, headers,\n  // or key material (T-39-18).\n  return {\n    content: JSON.stringify({\n      error: { kind: body.kind, reason: body.reason, terminal: body.terminal },\n    }),\n  };\n}\n\nfunction extractTaskArg(args: unknown): string | null {\n  if (typeof args !== \"object\" || args === null) return null;\n  const task = (args as Record<string, unknown>)[\"task\"];\n  return typeof task === \"string\" ? task : null;\n}\n\nfunction extractSummary(output: unknown): string {\n  if (typeof output === \"object\" && output !== null) {\n    const answer = (output as Record<string, unknown>)[\"answer\"];\n    if (typeof answer === \"string\") return answer;\n  }\n  if (typeof output === \"string\") return output;\n  try {\n    return JSON.stringify(output);\n  } catch {\n    return String(output);\n  }\n}\n\nfunction extractArtifacts(result: unknown): unknown[] {\n  const artifacts = (result as { readonly artifacts?: unknown }).artifacts;\n  return Array.isArray(artifacts) ? [...artifacts] : [];\n}\n\n/**\n * Wrap a survivability adapter so serialized child snapshots carry the\n * root-first ancestry chain (D-05; AgentSnapshot.ancestry from 39-03).\n * The `agent-snapshot/v1` version literal is unchanged — the field is\n * additive-optional (Pitfall 8).\n */\nfunction withAncestrySnapshot(\n  base: SurvivabilityAdapter<AgentSnapshot>,\n  ancestry: readonly string[],\n): SurvivabilityAdapter<AgentSnapshot> {\n  return {\n    ...base,\n    serialize: (state) => base.serialize({ ...state, ancestry }),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Child tool declarations (D-01, Pitfall 5)\n// ---------------------------------------------------------------------------\n\nfunction synthesizeChildDeclarations(\n  children: ReadonlyArray<AgentSpec>,\n): ReadonlyArray<ToolDefinition<StandardSchemaV1>> {\n  return children.map((child) => ({\n    kind: \"tool\" as const,\n    name: child.id,\n    description:\n      `Delegate a task to the \"${child.id}\" child agent. ` +\n      `Agent intent: ${child.intent} ` +\n      `Returns a JSON summary envelope { \"summary\": string, \"artifacts\": array, \"receipts\": array } ` +\n      `validated against the agent's summaryReturnSchema.`,\n    inputSchema: makeDispatchArgsSchema(child.id),\n    // NEVER invoked: the CrewDispatcher intercepts matching names at the\n    // dispatch seam BEFORE the default tool path. The body exists only so\n    // the declaration is a real ToolDefinition for Phase 37 registries —\n    // policy logic lives at the chokepoint, not in tool closures (D-01/D-02).\n    execute: () => {\n      throw new Error(\n        `Child agent \"${child.id}\" must be dispatched through the CrewDispatcher ` +\n          `(kind:\"agent\" branch) — direct tool execution is forbidden (D-01/D-02).`,\n      );\n    },\n  }));\n}\n\n/**\n * Deterministic `~standard` schema for `{ task: string }` dispatch args.\n * Carries a fixed `toJSONSchema()` so `formatToolsForProvider` renders a\n * meaningful args_schema (byte-stable — no timestamps/random ids; the\n * declarations feed the shared cache prefix).\n */\nfunction makeDispatchArgsSchema(childId: string): StandardSchemaV1 {\n  const schema = {\n    \"~standard\": {\n      version: 1,\n      vendor: \"lattice-crew\",\n      validate: (value: unknown) => {\n        if (\n          typeof value === \"object\" &&\n          value !== null &&\n          typeof (value as Record<string, unknown>)[\"task\"] === \"string\"\n        ) {\n          return { value };\n        }\n        return {\n          issues: [\n            { message: `Dispatch args for child agent \"${childId}\" must be { \"task\": string }.` },\n          ],\n        };\n      },\n    },\n    toJSONSchema: () => ({\n      type: \"object\",\n      properties: {\n        task: { type: \"string\", description: \"The task to delegate to this child agent.\" },\n      },\n      required: [\"task\"],\n      additionalProperties: false,\n    }),\n  };\n  return schema as unknown as StandardSchemaV1;\n}\n","/**\n * CrewPolicy — Phase 39 (v1.3). Crew-level policy contract + normalizer\n * (D-06, D-11, D-16).\n *\n * `CrewPolicy.budget` reuses `BudgetInvariant` verbatim from\n * `contract/contract.ts` (D-06) — the crew-level shared pool. Structural\n * caps (`maxTotalIterations`, `maxIterationsPerAgent`,\n * `maxConcurrentChildren`, `maxDepth`) bound the crew shape independently\n * of cost.\n *\n * v1.3 executes children serially (D-11): the `maxConcurrentChildren`\n * field exists for forward compatibility but `validateCrewPolicy` rejects\n * values > 1 with a `TypeError` at entry (fail-fast, research Pattern 5 —\n * reject, not clamp, per the project's \"explicit config, no magic\" stance).\n *\n * `limits` is keyed by `adapter.id` and overrides the rate-limit-group\n * defaults per provider key (D-16). `coordination: \"unmanaged\"` is the\n * explicit escape hatch for consumers who handle 429s themselves.\n *\n * `validateCrewPolicy` follows the `contract()` factory template\n * (contract/contract.ts): conditional spread for optional members\n * (`exactOptionalPropertyTypes`-safe), `Object.freeze` on the result and\n * nested objects, input never mutated.\n */\n\nimport type { BudgetInvariant } from \"../../contract/contract.js\";\n\n/** Per-adapter rate-limit override (keyed by `adapter.id` in `limits`). */\nexport interface CrewRateLimitOverride {\n  readonly requestsPerMinute?: number;\n  readonly tokensPerMinute?: number;\n}\n\n/** Crew-level policy contract (D-06, D-11, D-16). */\nexport interface CrewPolicy {\n  /** Crew-level shared budget pool — `BudgetInvariant` reused verbatim. */\n  readonly budget?: BudgetInvariant;\n  readonly maxTotalIterations?: number;\n  readonly maxIterationsPerAgent?: number;\n  /** Forward-compat field; the v1.3 runtime rejects values > 1 (D-11). */\n  readonly maxConcurrentChildren?: number;\n  /** Delegation depth cap; defaults to 1 (parent→child only, D-05). */\n  readonly maxDepth?: number;\n  /** Per-adapter-id rate-limit overrides (D-16). */\n  readonly limits?: Readonly<Record<string, CrewRateLimitOverride>>;\n  /** \"managed\" (default) wraps transports in the rate-limit group; \"unmanaged\" skips it. */\n  readonly coordination?: \"managed\" | \"unmanaged\";\n}\n\n/**\n * Normalized policy returned by `validateCrewPolicy`: defaults applied,\n * structurally frozen.\n */\nexport interface ValidatedCrewPolicy extends CrewPolicy {\n  readonly maxConcurrentChildren: number;\n  readonly maxDepth: number;\n  readonly coordination: \"managed\" | \"unmanaged\";\n}\n\n/**\n * Validates and normalizes a `CrewPolicy`.\n *\n * - Applies defaults: `maxDepth: 1`, `maxConcurrentChildren: 1`,\n *   `coordination: \"managed\"`.\n * - Throws `TypeError` when `maxConcurrentChildren > 1` (serial-only v1.3\n *   limit, D-11) or when any structural cap is a non-integer or < 1.\n * - Returns a frozen normalized policy; the input is never mutated.\n */\nexport function validateCrewPolicy(policy: CrewPolicy = {}): ValidatedCrewPolicy {\n  assertStructuralCap(\"maxConcurrentChildren\", policy.maxConcurrentChildren);\n  if (policy.maxConcurrentChildren !== undefined && policy.maxConcurrentChildren > 1) {\n    throw new TypeError(\n      \"CrewPolicy.maxConcurrentChildren > 1 is not supported in v1.3 — children execute serially (D-11).\",\n    );\n  }\n  assertStructuralCap(\"maxDepth\", policy.maxDepth);\n  assertStructuralCap(\"maxTotalIterations\", policy.maxTotalIterations);\n  assertStructuralCap(\"maxIterationsPerAgent\", policy.maxIterationsPerAgent);\n\n  return Object.freeze({\n    ...(policy.budget !== undefined ? { budget: Object.freeze({ ...policy.budget }) } : {}),\n    ...(policy.maxTotalIterations !== undefined\n      ? { maxTotalIterations: policy.maxTotalIterations }\n      : {}),\n    ...(policy.maxIterationsPerAgent !== undefined\n      ? { maxIterationsPerAgent: policy.maxIterationsPerAgent }\n      : {}),\n    maxConcurrentChildren: policy.maxConcurrentChildren ?? 1,\n    maxDepth: policy.maxDepth ?? 1,\n    ...(policy.limits !== undefined\n      ? {\n          limits: Object.freeze(\n            Object.fromEntries(\n              Object.entries(policy.limits).map(([adapterId, override]) => [\n                adapterId,\n                Object.freeze({ ...override }),\n              ]),\n            ),\n          ),\n        }\n      : {}),\n    coordination: policy.coordination ?? \"managed\",\n  });\n}\n\nfunction assertStructuralCap(field: string, value: number | undefined): void {\n  if (value === undefined) return;\n  if (!Number.isInteger(value) || value < 1) {\n    throw new TypeError(\n      `CrewPolicy.${field} must be a positive integer (>= 1); received ${String(value)}.`,\n    );\n  }\n}\n","/**\n * RateLimitGroup — Phase 39 (v1.3).\n *\n * Standalone dual-dimension (requests/min + input tokens/min) token-bucket\n * rate limiter with a lease-based async interface. Pure infra following the\n * CostTracker precedent (Phase 21): no dependency on the agent runtime, and\n * usable to gate ANY async work — plain `runAgent` calls, crews, or consumer\n * code outside Lattice entirely (D-12).\n *\n * Zero new runtime dependencies (D-17/D-18). The implementation is in-process\n * only; the lease interface (`acquire`/`release`) is the seam a future\n * cross-process implementation (Redis / Durable Object) can satisfy without\n * changing callers.\n *\n * Drain model: continuous per-millisecond smoothing with LAZY refill — bucket\n * levels are recomputed from the `now()` delta on every acquire/release, and\n * at most ONE `setTimeout` is pending at a time, scheduled for the exact\n * deficit of the head waiter. No interval timers, no recurring background\n * timers (the anthropic.ts lazy-expiry rule: the library must not pin the\n * Node event loop). Anthropic itself enforces its limits with continuously\n * replenished token buckets, so this model matches the enforcer.\n *\n * Reconciliation: `acquire` reserves on ESTIMATED input tokens; `release`\n * reconciles against the actual `Usage.promptTokens` every adapter returns —\n * under-use is refunded to the token bucket, over-use is debited. Requests\n * are consumed at acquire time and never refunded.\n *\n * Failure policy (caller contract): on provider failure, release with the\n * original estimate (no refund) — quota may have been consumed despite the\n * error. `withRateLimit` implements this policy for the AgentTransport seam.\n */\n\nimport type { AgentTransport } from \"../host.js\";\nimport type {\n  ProviderAdapter,\n  ProviderRunRequest,\n  ProviderRunResponse,\n} from \"../../providers/provider.js\";\n\n/** Anthropic Tier 1 requests/minute (fetched 2026-06-10). */\nconst DEFAULT_REQUESTS_PER_MINUTE = 50;\n/** Anthropic Tier 1 input tokens/minute, Sonnet-class (fetched 2026-06-10). */\nconst DEFAULT_TOKENS_PER_MINUTE = 30_000;\n\nconst MS_PER_MINUTE = 60_000;\n\n/**\n * Absorbs floating-point drift in two places: bucket-level comparisons\n * (`available >= need`) and deficit-wait rounding. 1e-6 of a token/request\n * (or millisecond) is far above accumulated IEEE-754 error at these\n * magnitudes and far below anything rate-limit-relevant.\n */\nconst FLOAT_EPSILON = 1e-6;\n\nexport interface RateLimitGroupOptions {\n  /** Requests per minute. Defaults to 50 (Anthropic Tier 1). */\n  readonly requestsPerMinute?: number;\n  /** Input tokens per minute. Defaults to 30_000 (Anthropic Tier 1). */\n  readonly tokensPerMinute?: number;\n  /** Injectable clock for tests (defaults to `Date.now`). */\n  readonly now?: () => number;\n}\n\nexport interface RateLimitLease {\n  /**\n   * Reconcile the reservation against actual usage. Refunds\n   * `estimate - actual.promptTokens` to the token bucket when positive,\n   * debits the difference when negative. Idempotent — only the first call\n   * has an effect. Requests are never refunded.\n   */\n  release(actual: { promptTokens: number }): void;\n}\n\nexport interface RateLimitGroup {\n  readonly kind: \"rate-limit-group\";\n  /**\n   * Reserve 1 request + `estimate.inputTokens` tokens. Resolves immediately\n   * when both dimensions have capacity; otherwise the caller waits (FIFO)\n   * until continuous drain refills the deficit.\n   */\n  acquire(estimate: { inputTokens: number }): Promise<RateLimitLease>;\n}\n\ninterface Bucket {\n  available: number;\n  readonly capacity: number;\n  readonly perMsRate: number;\n}\n\ninterface Waiter {\n  readonly inputTokens: number;\n  readonly resolve: (lease: RateLimitLease) => void;\n}\n\nfunction createBucket(perMinute: number, label: string): Bucket {\n  if (!Number.isFinite(perMinute) || perMinute <= 0) {\n    throw new TypeError(\n      `createRateLimitGroup: ${label} must be a positive finite number, got ${perMinute}.`,\n    );\n  }\n  return {\n    available: perMinute,\n    capacity: perMinute,\n    perMsRate: perMinute / MS_PER_MINUTE,\n  };\n}\n\nexport function createRateLimitGroup(\n  options: RateLimitGroupOptions = {},\n): RateLimitGroup {\n  const now = options.now ?? Date.now;\n  const requests = createBucket(\n    options.requestsPerMinute ?? DEFAULT_REQUESTS_PER_MINUTE,\n    \"requestsPerMinute\",\n  );\n  const tokens = createBucket(\n    options.tokensPerMinute ?? DEFAULT_TOKENS_PER_MINUTE,\n    \"tokensPerMinute\",\n  );\n  let lastRefillAt = now();\n  const waiters: Waiter[] = [];\n  let timer: ReturnType<typeof setTimeout> | null = null;\n\n  /** Lazy continuous refill from the clock delta — never a recurring timer. */\n  function refill(): void {\n    const t = now();\n    const elapsed = t - lastRefillAt;\n    if (elapsed <= 0) return;\n    lastRefillAt = t;\n    requests.available = Math.min(\n      requests.capacity,\n      requests.available + elapsed * requests.perMsRate,\n    );\n    tokens.available = Math.min(\n      tokens.capacity,\n      tokens.available + elapsed * tokens.perMsRate,\n    );\n  }\n\n  /**\n   * Token requirement for availability checks, clamped to capacity so an\n   * oversized estimate (> bucket capacity) proceeds at full bucket instead\n   * of deadlocking; the full amount is still debited (the bucket goes into\n   * debt and recovers via drain).\n   */\n  function tokenNeed(inputTokens: number): number {\n    return Math.min(inputTokens, tokens.capacity);\n  }\n\n  function tryDebit(inputTokens: number): boolean {\n    if (\n      requests.available + FLOAT_EPSILON >= 1 &&\n      tokens.available + FLOAT_EPSILON >= tokenNeed(inputTokens)\n    ) {\n      requests.available -= 1;\n      tokens.available -= inputTokens;\n      return true;\n    }\n    return false;\n  }\n\n  /** Exact wait (ms) until both dimensions can cover the head waiter. */\n  function deficitWaitMs(inputTokens: number): number {\n    const requestDeficit = Math.max(0, 1 - requests.available);\n    const tokenDeficit = Math.max(0, tokenNeed(inputTokens) - tokens.available);\n    const requestWait = requestDeficit / requests.perMsRate;\n    const tokenWait = tokenDeficit / tokens.perMsRate;\n    return Math.max(requestWait, tokenWait);\n  }\n\n  function scheduleNext(): void {\n    if (timer !== null) return;\n    const head = waiters[0];\n    if (head === undefined) return;\n    const waitMs = Math.max(\n      1,\n      Math.ceil(deficitWaitMs(head.inputTokens) - FLOAT_EPSILON),\n    );\n    timer = setTimeout(() => {\n      timer = null;\n      pump();\n    }, waitMs);\n  }\n\n  /** Refill, resolve as many FIFO waiters as capacity allows, reschedule. */\n  function pump(): void {\n    if (timer !== null) {\n      clearTimeout(timer);\n      timer = null;\n    }\n    refill();\n    while (waiters.length > 0) {\n      const head = waiters[0];\n      if (head === undefined || !tryDebit(head.inputTokens)) break;\n      waiters.shift();\n      head.resolve(createLease(head.inputTokens));\n    }\n    scheduleNext();\n  }\n\n  function createLease(estimateTokens: number): RateLimitLease {\n    let released = false;\n    return {\n      release(actual: { promptTokens: number }): void {\n        if (released) return;\n        released = true;\n        refill();\n        const actualTokens =\n          typeof actual.promptTokens === \"number\" &&\n          Number.isFinite(actual.promptTokens)\n            ? actual.promptTokens\n            : estimateTokens;\n        // Token bucket only — requests were consumed at acquire, never refunded.\n        tokens.available = Math.min(\n          tokens.capacity,\n          tokens.available + (estimateTokens - actualTokens),\n        );\n        // A refund may unblock pending waiters (or shorten the head's wait).\n        pump();\n      },\n    };\n  }\n\n  return {\n    kind: \"rate-limit-group\" as const,\n    async acquire(estimate: { inputTokens: number }): Promise<RateLimitLease> {\n      refill();\n      // Fast path only when nobody is queued — preserves FIFO fairness.\n      if (waiters.length === 0 && tryDebit(estimate.inputTokens)) {\n        return createLease(estimate.inputTokens);\n      }\n      return new Promise<RateLimitLease>((resolve) => {\n        waiters.push({ inputTokens: estimate.inputTokens, resolve });\n        scheduleNext();\n      });\n    },\n  };\n}\n\n/**\n * chars/4 heuristic for lease reservation (matches the transcript-store\n * default `TokenEstimator`). Persistent estimation error is benign: `release`\n * reconciles every lease against the actual `Usage.promptTokens` (A2).\n */\nfunction estimateInputTokens(task: string): number {\n  return Math.ceil(task.length / 4);\n}\n\n/**\n * Wrap an `AgentTransport` so every provider call is gated through `group`.\n *\n * Every transport wrapped with the SAME group instance shares one bucket —\n * `runAgentCrew` (39-06) wraps parent + child hosts with one shared group per\n * adapter instance, structurally guaranteeing crew-wide coordination (D-13).\n * `ProviderAdapter` is never modified (INV-03 parity invariant intact).\n *\n * - `inner` provided → dispatch nests through `inner.call(provider, request)`,\n *   composing with consumer transports (e.g. cross-process bridges).\n * - `inner` undefined → falls through to `provider.execute(request)`, guarded\n *   the same way as `createNoopAgentHost` (error names the provider id only).\n *\n * Release policy:\n * - Success → release with `normalizedUsage.promptTokens`; when usage is\n *   missing or non-finite, fall back to the estimate (no NaN arithmetic —\n *   the `costUsd: null` \"unmeasured\" discipline analog).\n * - Throw → release with the ORIGINAL estimate (burn — no refund; the\n *   provider may have consumed quota despite the error) and rethrow the\n *   same error unchanged. Request objects and headers are never serialized\n *   into error paths.\n */\nexport function withRateLimit(\n  group: RateLimitGroup,\n  inner?: AgentTransport,\n): AgentTransport {\n  return {\n    async call(\n      provider: ProviderAdapter,\n      request: ProviderRunRequest,\n    ): Promise<ProviderRunResponse> {\n      const estimate = estimateInputTokens(request.task);\n      const lease = await group.acquire({ inputTokens: estimate });\n      try {\n        let response: ProviderRunResponse;\n        if (inner !== undefined) {\n          response = await inner.call(provider, request);\n        } else {\n          if (provider.execute === undefined) {\n            throw new Error(\n              `AgentTransport: provider ${provider.id} has no execute() method.`,\n            );\n          }\n          response = await provider.execute(request);\n        }\n        const actual = response.normalizedUsage?.promptTokens;\n        lease.release({\n          promptTokens:\n            typeof actual === \"number\" && Number.isFinite(actual)\n              ? actual\n              : estimate,\n        });\n        return response;\n      } catch (error) {\n        // Burn the reservation: quota may have been consumed despite the error.\n        lease.release({ promptTokens: estimate });\n        throw error;\n      }\n    },\n  };\n}\n","/**\n * runAgentCrew — Phase 39 (v1.3).\n *\n * Opt-in multi-agent orchestration over the existing single-agent runtime.\n * The crew surface composes a literal `AgentSpec` tree, validates a\n * serial-only `CrewPolicy`, shares budget/rate-limit state across parent\n * and children, and anchors per-agent completion receipts under one\n * crew-root receipt. Internal dispatch stays behind `createCrewDispatcher`;\n * public consumers call this function or `createAI(...).runAgentCrew(...)`.\n *\n * Rate-limit coordination keys by `ProviderAdapter` instance identity, not\n * by adapter id. The `policy.limits` map still addresses overrides by\n * `adapter.id`; two instances with the same id receive separate buckets\n * that share the same override values. `coordination: \"unmanaged\"` skips\n * all wrapping for consumers who already coordinate quota externally.\n */\n\nimport type { BudgetInvariant } from \"../../contract/contract.js\";\nimport { createCostTracker, type CostTracker } from \"../infra/cost-tracker.js\";\nimport type {\n  ProviderAdapter,\n  ProviderRunRequest,\n  ProviderRunResponse,\n  Usage,\n} from \"../../providers/provider.js\";\nimport { receiptCid } from \"../../receipts/cid.js\";\nimport { createReceipt } from \"../../receipts/receipt.js\";\nimport type { ReceiptEnvelope, ReceiptSigner } from \"../../receipts/types.js\";\nimport type { LatticeConfig } from \"../../runtime/config.js\";\nimport type { TracerLike } from \"../../tracing/tracing.js\";\nimport type { HookPipeline } from \"../../contract/bands.js\";\n\nimport { createNoopAgentHost, type AgentHost, type AgentTransport } from \"../host.js\";\nimport { runAgentInternal } from \"../runtime.js\";\nimport type { AgentFailure, AgentIntent, AgentResult } from \"../types.js\";\n\nimport type { AgentSpec } from \"./agent-spec.js\";\nimport {\n  composeCrewCachePrefix,\n  createCrewDispatcher,\n  deriveChildBudget,\n} from \"./dispatcher.js\";\nimport {\n  type CrewPolicy,\n  type ValidatedCrewPolicy,\n  validateCrewPolicy,\n} from \"./crew-policy.js\";\nimport {\n  createRateLimitGroup,\n  type RateLimitGroup,\n  type RateLimitGroupOptions,\n  withRateLimit,\n} from \"../infra/rate-limit-group.js\";\n\nconst ZERO_USAGE: Usage = {\n  promptTokens: 0,\n  completionTokens: 0,\n  costUsd: null,\n};\n\nexport interface RunAgentCrewOptions {\n  readonly root: AgentSpec;\n  readonly hosts: { readonly childHost: AgentHost };\n  readonly policy?: CrewPolicy;\n  /** Crew-level signer threaded into member loops and completion receipts. */\n  readonly signer?: ReceiptSigner;\n  /** Crew-level tracer threaded into member loops. */\n  readonly tracer?: TracerLike;\n  /** Crew-level hook pipeline threaded into member loops. */\n  readonly pipeline?: HookPipeline;\n}\n\nexport interface CrewAgentResult {\n  readonly id: string;\n  readonly usage: Usage;\n  readonly iterations: number;\n  readonly receiptCids: readonly string[];\n}\n\nexport interface CrewResult {\n  /** Parent result, with parent output untouched on success. */\n  readonly result: AgentResult;\n  /** Per-agent accounting records, including root parent and completed children. */\n  readonly perAgent: ReadonlyArray<CrewAgentResult>;\n  /** Crew aggregate usage: parent total + sum(child totals), no double-counting. */\n  readonly usage: Usage;\n  /** Total iterations across every recorded agent. */\n  readonly totalIterations: number;\n  /** All crew completion receipts, including the crew-root envelope. */\n  readonly receipts: ReadonlyArray<ReceiptEnvelope>;\n  readonly crewRootCid?: string;\n}\n\ninterface AgentAccounting {\n  readonly tracker: CostTracker;\n  iterations: number;\n}\n\ninterface MutableUsage {\n  promptTokens: number;\n  completionTokens: number;\n  costUsd: number | null;\n}\n\ntype MutableBudgetInvariant = {\n  -readonly [K in keyof BudgetInvariant]: BudgetInvariant[K];\n};\n\n/**\n * Execute a crew rooted at `options.root`.\n */\nexport async function runAgentCrew(\n  options: RunAgentCrewOptions,\n  config: LatticeConfig = {},\n): Promise<CrewResult> {\n  const policy = validateCrewPolicy(options.policy);\n  const runId = `runAgentCrew-${Date.now()}-${Math.random().toString(16).slice(2)}`;\n  const startedAt = Date.now();\n  const accounting = new Map<string, AgentAccounting>();\n  const receipts: ReceiptEnvelope[] = [];\n  const receiptCidsByAgent = new Map<string, string[]>();\n\n  const crewRoot = await maybeMintCrewRoot({\n    runId,\n    root: options.root,\n    ...(options.signer !== undefined ? { signer: options.signer } : {}),\n  });\n  if (crewRoot !== undefined) {\n    receipts.push(crewRoot.envelope);\n  }\n\n  const groupForProvider = createRateLimitGroupResolver(policy);\n  const childHost = wrapHostWithRateLimits(\n    options.hosts.childHost,\n    groupForProvider,\n  );\n\n  function recordUsage(agentId: string, usage: Usage): void {\n    entryFor(accounting, agentId).tracker.recordIteration(usage);\n  }\n\n  function recordAgentResult(agentId: string, result: AgentResult): void {\n    const entry = entryFor(accounting, agentId);\n    entry.iterations += result.iterations.length;\n  }\n\n  function remainingBudget(): BudgetInvariant | undefined {\n    return deriveRemainingBudget({\n      policy,\n      usage: totalUsage(accounting),\n      iterations: totalIterations(accounting),\n      startedAt,\n    });\n  }\n\n  const dispatcher = createCrewDispatcher(options.root, {\n    policy,\n    childHost,\n    ancestry: [],\n    recordUsage,\n    recordAgentResult,\n    remainingBudget,\n    sharedPrefix: composeSharedPrefix(options.root),\n    mintedReceipts(envelope) {\n      receipts.push(envelope);\n    },\n    config,\n    ...(crewRoot !== undefined ? { crewRootCid: crewRoot.cid } : {}),\n    ...(options.signer !== undefined ? { signer: options.signer } : {}),\n    ...(options.tracer !== undefined ? { tracer: options.tracer } : {}),\n    ...(options.pipeline !== undefined ? { pipeline: options.pipeline } : {}),\n  });\n\n  const parentIntent: AgentIntent = {\n    task: options.root.intent,\n    tools: [...options.root.tools, ...dispatcher.childToolDeclarations],\n    host: wrapHostWithRateLimits(createNoopAgentHost(), groupForProvider),\n    ...(options.root.contract !== undefined ? { contract: options.root.contract } : {}),\n    ...(options.signer !== undefined ? { signer: options.signer } : {}),\n    ...(options.tracer !== undefined ? { tracer: options.tracer } : {}),\n    ...(options.pipeline !== undefined ? { pipeline: options.pipeline } : {}),\n  };\n\n  const parentResult = await runAgentInternal(parentIntent, config, {\n    dispatchToolUse: dispatcher.dispatchToolUse,\n  });\n  recordUsage(options.root.id, parentResult.usage);\n  recordAgentResult(options.root.id, parentResult);\n\n  if (options.signer !== undefined && crewRoot !== undefined) {\n    const parentEnvelope = await createAgentCompletionReceipt({\n      runId,\n      agentId: options.root.id,\n      usage: parentResult.usage,\n      signer: options.signer,\n      parentReceiptCid: crewRoot.cid,\n      success: parentResult.kind === \"success\",\n    });\n    receipts.push(parentEnvelope);\n  }\n\n  await populateReceiptCidIndex(receipts, receiptCidsByAgent);\n\n  const result = dispatcher.crewBudgetExhausted() || crewBudgetViolated({\n    policy,\n    usage: totalUsage(accounting),\n    iterations: totalIterations(accounting),\n    startedAt,\n  })\n    ? buildCrewBudgetFailure(parentResult)\n    : parentResult;\n\n  return freezeCrewResult({\n    result,\n    perAgent: buildPerAgent(accounting, receiptCidsByAgent),\n    usage: totalUsage(accounting),\n    totalIterations: totalIterations(accounting),\n    receipts,\n    ...(crewRoot !== undefined ? { crewRootCid: crewRoot.cid } : {}),\n  });\n}\n\nfunction entryFor(\n  accounting: Map<string, AgentAccounting>,\n  agentId: string,\n): AgentAccounting {\n  let entry = accounting.get(agentId);\n  if (entry === undefined) {\n    entry = { tracker: createCostTracker(), iterations: 0 };\n    accounting.set(agentId, entry);\n  }\n  return entry;\n}\n\nfunction totalUsage(accounting: Map<string, AgentAccounting>): Usage {\n  const total: MutableUsage = {\n    promptTokens: 0,\n    completionTokens: 0,\n    costUsd: null,\n  };\n  for (const entry of accounting.values()) {\n    accumulate(total, entry.tracker.total());\n  }\n  return snapshot(total);\n}\n\nfunction totalIterations(accounting: Map<string, AgentAccounting>): number {\n  let total = 0;\n  for (const entry of accounting.values()) {\n    total += entry.iterations;\n  }\n  return total;\n}\n\nfunction accumulate(total: MutableUsage, usage: Usage): void {\n  total.promptTokens += usage.promptTokens;\n  total.completionTokens += usage.completionTokens;\n  if (usage.costUsd !== null) {\n    total.costUsd = (total.costUsd ?? 0) + usage.costUsd;\n  }\n}\n\nfunction snapshot(usage: MutableUsage): Usage {\n  return {\n    promptTokens: usage.promptTokens,\n    completionTokens: usage.completionTokens,\n    costUsd: usage.costUsd,\n  };\n}\n\nfunction deriveRemainingBudget(input: {\n  readonly policy: ValidatedCrewPolicy;\n  readonly usage: Usage;\n  readonly iterations: number;\n  readonly startedAt: number;\n}): BudgetInvariant | undefined {\n  const remaining: MutableBudgetInvariant = {};\n  const budget = input.policy.budget;\n  const iterationCeiling = minDefined(\n    budget?.maxIterations,\n    input.policy.maxTotalIterations,\n  );\n  if (iterationCeiling !== undefined) {\n    remaining.maxIterations = iterationCeiling - input.iterations;\n  }\n  if (budget?.maxWallTimeMs !== undefined) {\n    remaining.maxWallTimeMs = budget.maxWallTimeMs - (Date.now() - input.startedAt);\n  }\n  if (budget?.maxCostUsd !== undefined && input.usage.costUsd !== null) {\n    remaining.maxCostUsd = budget.maxCostUsd - input.usage.costUsd;\n  } else if (budget?.maxCostUsd !== undefined && input.usage.costUsd === null) {\n    // Preserve the cap for measured descendants without treating null-cost\n    // usage as zero-spend evidence that can exhaust the pool.\n    remaining.maxCostUsd = budget.maxCostUsd;\n  }\n  if (budget?.p95LatencyMs !== undefined) {\n    remaining.p95LatencyMs = budget.p95LatencyMs;\n  }\n  return Object.keys(remaining).length > 0 ? remaining : undefined;\n}\n\nfunction crewBudgetViolated(input: {\n  readonly policy: ValidatedCrewPolicy;\n  readonly usage: Usage;\n  readonly iterations: number;\n  readonly startedAt: number;\n}): boolean {\n  const iterationCeiling = minDefined(\n    input.policy.budget?.maxIterations,\n    input.policy.maxTotalIterations,\n  );\n  if (iterationCeiling !== undefined && input.iterations > iterationCeiling) {\n    return true;\n  }\n  const maxWallTimeMs = input.policy.budget?.maxWallTimeMs;\n  if (maxWallTimeMs !== undefined && Date.now() - input.startedAt > maxWallTimeMs) {\n    return true;\n  }\n  const maxCostUsd = input.policy.budget?.maxCostUsd;\n  return (\n    maxCostUsd !== undefined &&\n    input.usage.costUsd !== null &&\n    input.usage.costUsd > maxCostUsd\n  );\n}\n\nfunction minDefined(\n  a: number | undefined,\n  b: number | undefined,\n): number | undefined {\n  if (a !== undefined && b !== undefined) return Math.min(a, b);\n  return a ?? b;\n}\n\nfunction createRateLimitGroupResolver(\n  policy: ValidatedCrewPolicy,\n): (provider: ProviderAdapter) => RateLimitGroup | undefined {\n  if (policy.coordination === \"unmanaged\") {\n    return () => undefined;\n  }\n  const groups = new Map<ProviderAdapter, RateLimitGroup>();\n  return (provider) => {\n    let group = groups.get(provider);\n    if (group === undefined) {\n      group = createRateLimitGroup(rateLimitOptionsFor(policy, provider));\n      groups.set(provider, group);\n    }\n    return group;\n  };\n}\n\nfunction rateLimitOptionsFor(\n  policy: ValidatedCrewPolicy,\n  provider: ProviderAdapter,\n): RateLimitGroupOptions {\n  const override = policy.limits?.[provider.id];\n  return {\n    ...(override?.requestsPerMinute !== undefined\n      ? { requestsPerMinute: override.requestsPerMinute }\n      : {}),\n    ...(override?.tokensPerMinute !== undefined\n      ? { tokensPerMinute: override.tokensPerMinute }\n      : {}),\n  };\n}\n\nfunction wrapHostWithRateLimits(\n  host: AgentHost,\n  groupForProvider: (provider: ProviderAdapter) => RateLimitGroup | undefined,\n): AgentHost {\n  return {\n    ...host,\n    transport: wrapTransport(host.transport, groupForProvider),\n  };\n}\n\nfunction wrapTransport(\n  inner: AgentTransport | undefined,\n  groupForProvider: (provider: ProviderAdapter) => RateLimitGroup | undefined,\n): AgentTransport {\n  return {\n    call(\n      provider: ProviderAdapter,\n      request: ProviderRunRequest,\n    ): Promise<ProviderRunResponse> {\n      const group = groupForProvider(provider);\n      if (group !== undefined) {\n        return withRateLimit(group, inner).call(provider, request);\n      }\n      if (inner !== undefined) {\n        return inner.call(provider, request);\n      }\n      if (provider.execute === undefined) {\n        throw new Error(`AgentTransport: provider ${provider.id} has no execute() method.`);\n      }\n      return provider.execute(request);\n    },\n  };\n}\n\nfunction composeSharedPrefix(root: AgentSpec): string {\n  const firstChild = root.childAgents?.[0];\n  return composeCrewCachePrefix(firstChild?.tools ?? root.tools);\n}\n\nasync function maybeMintCrewRoot(input: {\n  readonly runId: string;\n  readonly root: AgentSpec;\n  readonly signer?: ReceiptSigner;\n}): Promise<{ readonly envelope: ReceiptEnvelope; readonly cid: string } | undefined> {\n  if (input.signer === undefined) return undefined;\n  const envelope = await createReceipt(\n    {\n      runId: input.runId,\n      model: { requested: \"lattice-crew/root\", observed: null },\n      route: {\n        providerId: \"lattice-crew\",\n        capabilityId: \"lattice-crew/run\",\n        attemptNumber: 1,\n      },\n      usage: ZERO_USAGE,\n      contractVerdict: \"success\",\n      contractHash: null,\n      inputHashes: [],\n      outputHash: null,\n      stepName: `crew-start:${input.root.id}`,\n    },\n    input.signer,\n  );\n  return { envelope, cid: await receiptCid(envelope) };\n}\n\nasync function createAgentCompletionReceipt(input: {\n  readonly runId: string;\n  readonly agentId: string;\n  readonly usage: Usage;\n  readonly signer: ReceiptSigner;\n  readonly parentReceiptCid: string;\n  readonly success: boolean;\n}): Promise<ReceiptEnvelope> {\n  return createReceipt(\n    {\n      runId: input.runId,\n      model: { requested: \"lattice-crew/agent-completion\", observed: null },\n      route: {\n        providerId: \"lattice-crew\",\n        capabilityId: \"lattice-crew/agent-completion\",\n        attemptNumber: 1,\n      },\n      parentReceiptCid: input.parentReceiptCid,\n      usage: input.usage,\n      contractVerdict: input.success ? \"success\" : \"execution-failed\",\n      contractHash: null,\n      inputHashes: [],\n      outputHash: null,\n      stepName: `crew-agent-completion:${input.agentId}`,\n    },\n    input.signer,\n  );\n}\n\nasync function populateReceiptCidIndex(\n  receipts: readonly ReceiptEnvelope[],\n  byAgent: Map<string, string[]>,\n): Promise<void> {\n  for (const envelope of receipts) {\n    const body = decodeReceiptBody(envelope);\n    const agentId = parseCompletionAgentId(body.stepName);\n    if (agentId === null) continue;\n    const cids = byAgent.get(agentId) ?? [];\n    cids.push(await receiptCid(envelope));\n    byAgent.set(agentId, cids);\n  }\n}\n\nfunction decodeReceiptBody(envelope: ReceiptEnvelope): { readonly stepName?: string } {\n  return JSON.parse(atob(envelope.payload)) as { readonly stepName?: string };\n}\n\nfunction parseCompletionAgentId(stepName: string | undefined): string | null {\n  const prefix = \"crew-agent-completion:\";\n  if (stepName?.startsWith(prefix) !== true) return null;\n  return stepName.slice(prefix.length);\n}\n\nfunction buildPerAgent(\n  accounting: Map<string, AgentAccounting>,\n  receiptCidsByAgent: Map<string, string[]>,\n): ReadonlyArray<CrewAgentResult> {\n  return Object.freeze(\n    Array.from(accounting.entries(), ([id, entry]) =>\n      Object.freeze({\n        id,\n        usage: Object.freeze(entry.tracker.total()),\n        iterations: entry.iterations,\n        receiptCids: Object.freeze([...(receiptCidsByAgent.get(id) ?? [])]),\n      }),\n    ),\n  );\n}\n\nfunction freezeCrewResult(result: CrewResult): CrewResult {\n  return Object.freeze({\n    result: result.result,\n    perAgent: Object.freeze([...result.perAgent]),\n    usage: Object.freeze({ ...result.usage }),\n    totalIterations: result.totalIterations,\n    receipts: Object.freeze([...result.receipts]),\n    ...(result.crewRootCid !== undefined ? { crewRootCid: result.crewRootCid } : {}),\n  });\n}\n\nfunction buildCrewBudgetFailure(parentResult: AgentResult): AgentFailure {\n  return {\n    kind: \"crew-budget-exceeded\",\n    reason: \"Crew budget pool exhausted — the crew run ended with terminal semantics.\",\n    usage: parentResult.usage,\n    iterations: Object.freeze([...parentResult.iterations]),\n    ...(parentResult.receipt !== undefined ? { receipt: parentResult.receipt } : {}),\n  };\n}\n"],"mappings":";;;AA6BA,MAAM,oBAAoB;AAE1B,SAAgB,oBAAiC;CAC/C,IAAI,eAAe;CACnB,IAAI,mBAAmB;CACvB,IAAI,UAAyB;AAE7B,QAAO;EACL,MAAM;EACN,gBAAgB,OAAoB;AAClC,mBAAgB,MAAM;AACtB,uBAAoB,MAAM;AAC1B,OAAI,MAAM,YAAY,KACpB,YAAW,WAAW,KAAK,MAAM;;EAGrC,QAAe;AACb,UAAO;IAAE;IAAc;IAAkB;IAAS;;EAEpD,aAAa,QAA4C;GACvD,MAAM,MAAM,QAAQ;AACpB,OAAI,QAAQ,KAAA,KAAa,YAAY,KAAM,QAAO;AAClD,OAAI,WAAW,IAAK,QAAO;AAC3B,OAAI,WAAW,MAAM,kBAAmB,QAAO;AAC/C,UAAO;;EAEV;;;;;;;;;;;;AC/BH,eAAsB,WAAW,UAA4C;CAE3E,MAAM,QAAQ,WAAW,KAAK,KAAK,SAAS,QAAQ,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC;CAI7E,MAAM,OAAO,IAAI,WAAW,MAAM,WAAW;AAC7C,MAAK,IAAI,MAAM;CAEf,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,KAAK,OAAO;AAMjE,QAAO,UAJK,MAAM,KAAK,IAAI,WAAW,OAAO,GAAG,SAC9C,KAAK,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CACnC,CAAC,KAAK,GAAG;;;;;;;;;;;;;;;ACzBZ,MAAa,gBAAgB;CAC3B;CACA;CACA;CACD;AA0BD,SAAS,UAAU,QAA8B;AAC/C,QAAO,GAAG,OAAO,SAAS,IAAI,OAAO;;AAGvC,SAAgB,oBAAoB,UAAgC,EAAE,EAAiB;CACrF,MAAM,mBAAmB,QAAQ,oBAAoB;CACrD,MAAM,UAA0B,EAAE;AAElC,QAAO;EACL,MAAM;EACN,aAAa,QAA0C;AACrD,WAAQ,KAAK,OAAO;AAEpB,OAAI,QAAQ,UAAU,kBAAkB;IACtC,MAAM,OAAO,QAAQ,MAAM,CAAC,iBAAiB;IAC7C,MAAM,WAAW,UAAU,KAAK,GAAI;AACpC,QAAI,KAAK,OAAO,MAAM,UAAU,EAAE,KAAK,SAAS,CAC9C,QAAO;;AAIX,OAAI,QAAQ,UAAU,GAAG;IAEvB,MAAM,OADQ,QAAQ,MAAM,GAAG,CACZ,IAAI,UAAU;AAEjC,QADiB,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,CAE/B,WAAW,KACpB,KAAK,OAAO,KAAK,MACjB,KAAK,OAAO,KAAK,MACjB,KAAK,OAAO,KAAK,GAEjB,QAAO;;AAGX,UAAO;;EAET,UAAmC;AACjC,UAAO,OAAO,OAAO,CAAC,GAAG,QAAQ,CAAC;;EAErC;;;;;;;;;;ACoFH,SAAgB,qBACd,MACA,KACgB;AAChB,QAAO,qBAAqB,MAAM,KAAK;EACrC,WAAW;EACX,OAAO,gBAAgB,OAAO,YAAY;EAC3C,CAAC;;AAGJ,SAAS,qBACP,MACA,KACA,QACgB;CAChB,MAAM,WAAW,KAAK,eAAe,EAAE;CAEvC,MAAM,gCAAgB,IAAI,KAAqB;CAM/C,MAAM,YACJ,IAAI,aAAa,SAAS,IACtB;EACE,GAAG,IAAI;EACP,WAAW,qBAAqB,IAAI,cAAc,IAAI,UAAU,UAAU;EAC3E,GACD,IAAI;CAEV,eAAe,gBACb,KACA,UACmD;EAEnD,MAAM,YAAY,SAAS,MAAM,UAAU,MAAM,OAAO,IAAI,KAAK;AACjE,MAAI,cAAc,KAAA,EAEhB;EAOF,MAAM,UAAU,cAAc,IAAI,UAAU,GAAG;AAC/C,MAAI,YAAY,KAAA,EACd,QAAO,EAAE,SAAS,SAAS;AAK7B,MAAI,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,SAAS,IAAI,KAAK,CACzD,QAAO,YAAY;GACjB,MAAM;GACN,QACE,gBAAgB,IAAI,KAAK;GAE3B,UAAU;GACX,CAAC;AAMJ,MAAI,IAAI,SAAS,UAAU,IAAI,OAAO,SACpC,QAAO,YAAY;GACjB,MAAM;GACN,QACE,gBAAgB,IAAI,KAAK,4BAA4B,IAAI,OAAO,SAAS,2BAC9C,IAAI,SAAS,OAAO;GACjD,UAAU;GACX,CAAC;EAKJ,MAAM,OAAO,IAAI,iBAAiB;AAClC,MAAI,gBAAgB,KAAK,EAAE;AACzB,UAAO,YAAY;AACnB,UAAO,YAAY;IACjB,MAAM;IACN,QAAQ;IACR,UAAU;IACX,CAAC;;EASJ,MAAM,OAAO,eAAe,IAAI,KAAK;AACrC,MAAI,SAAS,KACX,QAAO,YAAY;GACjB,MAAM;GACN,QAAQ,kCAAkC,UAAU,GAAG;GACvD,UAAU;GACX,CAAC;EAOJ,MAAM,kBAAkB,kBACtB,UAAU,UAAU,QACpB,MACA,IAAI,OAAO,sBACZ;EAOD,MAAM,gBAAmC,CAAC,GAAG,IAAI,UAAU,KAAK,GAAG;EACnE,MAAM,YACJ,UAAU,gBAAgB,KAAA,KAAa,UAAU,YAAY,SAAS,IAClE,qBAAqB,WAAW;GAAE,GAAG;GAAK,UAAU;GAAe,EAAE,OAAO,GAC5E,KAAA;EAuBN,MAAM,cAAc,MAAM,iBAjBO;GAC/B;GACA,OANA,cAAc,KAAA,IACV,CAAC,GAAG,UAAU,OAAO,GAAG,UAAU,sBAAsB,GACxD,UAAU;GAKd,MAAM;GAGN,sBAAsB,qBACpB,gCAA+C,EAC/C,CAAC,GAAG,eAAe,UAAU,GAAG,CACjC;GACD,GAAI,oBAAoB,KAAA,IACpB,EAAE,UAAU;IAAE,MAAM;IAAuB,QAAQ;IAAiB,EAAE,GACtE,EAAE;GACN,GAAI,IAAI,WAAW,KAAA,IAAY,EAAE,QAAQ,IAAI,QAAQ,GAAG,EAAE;GAC1D,GAAI,IAAI,WAAW,KAAA,IAAY,EAAE,QAAQ,IAAI,QAAQ,GAAG,EAAE;GAC1D,GAAI,IAAI,aAAa,KAAA,IAAY,EAAE,UAAU,IAAI,UAAU,GAAG,EAAE;GACjE,EAGC,IAAI,QACJ,cAAc,KAAA,IAAY,EAAE,iBAAiB,UAAU,iBAAiB,GAAG,EAAE,CAC9E;AAKD,MAAI,YAAY,UAAU,IAAI,YAAY,MAAM;AAChD,MAAI,oBAAoB,UAAU,IAAI,YAAY;AAElD,MAAI,YAAY,SAAS,WAAW;GAElC,MAAM,aAAa,qBAAqB,UAAU,IAAI,YAAY;GAClE,MAAM,SAAS,YAAY,WAAW;AACtC,OAAI,WAAW,UAAU;AACvB,kBAAc,IAAI,UAAU,IAAI,OAAO,QAAQ;AAC/C,QAAI,WAAW,SAAS,uBACtB,QAAO,YAAY;;AAGvB,UAAO;;EAMT,MAAM,WAAqB,EAAE;AAC7B,MAAI,IAAI,WAAW,KAAA,EACjB,KAAI;GACF,MAAM,WAAW,MAAM,cACrB;IACE,OAAO,OAAO;IACd,OAAO;KAAE,WAAW;KAAiC,UAAU;KAAM;IACrE,OAAO;KACL,YAAY;KACZ,cAAc;KACd,eAAe;KAChB;IACD,GAAI,IAAI,gBAAgB,KAAA,IACpB,EAAE,kBAAkB,IAAI,aAAa,GACrC,EAAE;IACN,OAAO,YAAY;IACnB,iBAAiB;IACjB,cAAc;IACd,aAAa,EAAE;IACf,YAAY;IACZ,UAAU,yBAAyB,UAAU;IAC9C,EACD,IAAI,OACL;AACD,OAAI,eAAe,SAAS;AAC5B,YAAS,KAAK,MAAM,WAAW,SAAS,CAAC;UACnC;EAOV,MAAM,WAAW;GACf,SAAS,eAAe,YAAY,OAAO;GAC3C,WAAW,iBAAiB,YAAY;GACxC;GACD;EACD,MAAM,aAAa,MAAM,qBACvB,UAAU,IACV,UAAU,qBACV,SACD;AACD,MAAI,CAAC,WAAW,GACd,QAAO,YAAY;GACjB,MAAM;GACN,QAAQ,WAAW,MAAM,OAAO,KAAK,UAAU,MAAM,QAAQ,CAAC,KAAK,KAAK;GACxE,UAAU;GACX,CAAC;AAIJ,SAAO,EAAE,SAAS,KAAK,UAAU,SAAS,EAAE;;AAG9C,QAAO;EACL;EACA,uBAAuB,4BAA4B,SAAS;EAC5D,2BAA2B,OAAO;EACnC;;;;;;;;;;AAeH,SAAgB,kBACd,YACA,MACA,uBAC6B;CAC7B,MAAM,gBAAgBA,aACpBA,aAAW,YAAY,eAAe,MAAM,cAAc,EAC1D,sBACD;CACD,MAAM,gBAAgBA,aAAW,YAAY,eAAe,MAAM,cAAc;CAChF,MAAM,aAAaA,aAAW,YAAY,YAAY,MAAM,WAAW;AAEvE,KAAI,kBAAkB,KAAA,KAAa,kBAAkB,KAAA,KAAa,eAAe,KAAA,EAC/E;AAEF,QAAO;EACL,GAAI,kBAAkB,KAAA,IAAY,EAAE,eAAe,GAAG,EAAE;EACxD,GAAI,kBAAkB,KAAA,IAAY,EAAE,eAAe,GAAG,EAAE;EACxD,GAAI,eAAe,KAAA,IAAY,EAAE,YAAY,GAAG,EAAE;EACnD;;;AAIH,SAASA,aAAW,GAA8B,GAAkD;CAClG,MAAM,OAAO,OAAO,MAAM,YAAY,OAAO,SAAS,EAAE,GAAG,IAAI,KAAA;CAC/D,MAAM,OAAO,OAAO,MAAM,YAAY,OAAO,SAAS,EAAE,GAAG,IAAI,KAAA;AAC/D,KAAI,SAAS,KAAA,KAAa,SAAS,KAAA,EAAW,QAAO,KAAK,IAAI,MAAM,KAAK;AACzE,QAAO,QAAQ;;;;;;;AAQjB,SAAS,gBAAgB,MAA4C;AACnE,KAAI,SAAS,KAAA,EAAW,QAAO;AAC/B,QACG,OAAO,KAAK,kBAAkB,YAAY,KAAK,iBAAiB,KAChE,OAAO,KAAK,kBAAkB,YAAY,KAAK,iBAAiB,KAChE,OAAO,KAAK,eAAe,YAAY,KAAK,cAAc;;;;;;;;;;;;;AAmB/D,SAAgB,uBACd,OACQ;AAGR,QAAO,uBAAuB,gBAAgB,MAAM,CAAC,mBAAmB;;;;;;;;;;;;;;;;;;;;AAqB1E,SAAgB,qBACd,cACA,OACgB;CAChB,MAAM,SAAS,GAAG,aAAa;AAC/B,QAAO,EACL,MAAM,KAAK,UAAU,SAAS;EAK5B,MAAM,WAHJ,aAAa,SAAS,KACtB,sBAAsB,SAAS,IAC/B,QAAQ,KAAK,WAAW,OAAO,GAE7B;GACE,GAAG;GACH,MAAM,QAAQ,KAAK,MAAM,OAAO,OAAO;GACvC,mBAAmB;GACpB,GACD;AACJ,MAAI,UAAU,KAAA,EACZ,QAAO,MAAM,KAAK,UAAU,SAAS;AAEvC,MAAI,SAAS,YAAY,KAAA,EACvB,OAAM,IAAI,MACR,6BAA6B,SAAS,GAAG,4BAC1C;AAEH,SAAO,SAAS,QAAQ,SAAS;IAEpC;;;AAIH,SAAS,sBAAsB,UAAoC;AAIjE,QAHe,SAAS,QAGT,2BAA2B;;;;;;;;;;;;;AAkB5C,SAAgB,qBACd,SACA,SACmB;AACnB,QAAO;EACL,MAAM,QAAQ;EACd,QACE,QAAQ,UAAU,gBAAgB,QAAQ,sBAAsB,QAAQ,KAAK;EAC/E,UAAU,uBAAuB,QAAQ;EAC1C;;AAGH,SAAS,uBAAuB,SAAgC;AAC9D,KACE,QAAQ,SAAS,uBACjB,QAAQ,SAAS,uBACjB,QAAQ,SAAS,uBAEjB,QAAO;AAET,KAAI,QAAQ,SAAS,0BAA0B;EAG7C,MAAM,SAAS,QAAQ,UAAU;AACjC,SAAO,CAAC,cAAc,MAAM,UAAU,OAAO,SAAS,MAAM,CAAC;;AAE/D,QAAO;;AAOT,SAAS,YAAY,MAAuD;AAI1E,QAAO,EACL,SAAS,KAAK,UAAU,EACtB,OAAO;EAAE,MAAM,KAAK;EAAM,QAAQ,KAAK;EAAQ,UAAU,KAAK;EAAU,EACzE,CAAC,EACH;;AAGH,SAAS,eAAe,MAA8B;AACpD,KAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;CACtD,MAAM,OAAQ,KAAiC;AAC/C,QAAO,OAAO,SAAS,WAAW,OAAO;;AAG3C,SAAS,eAAe,QAAyB;AAC/C,KAAI,OAAO,WAAW,YAAY,WAAW,MAAM;EACjD,MAAM,SAAU,OAAmC;AACnD,MAAI,OAAO,WAAW,SAAU,QAAO;;AAEzC,KAAI,OAAO,WAAW,SAAU,QAAO;AACvC,KAAI;AACF,SAAO,KAAK,UAAU,OAAO;SACvB;AACN,SAAO,OAAO,OAAO;;;AAIzB,SAAS,iBAAiB,QAA4B;CACpD,MAAM,YAAa,OAA4C;AAC/D,QAAO,MAAM,QAAQ,UAAU,GAAG,CAAC,GAAG,UAAU,GAAG,EAAE;;;;;;;;AASvD,SAAS,qBACP,MACA,UACqC;AACrC,QAAO;EACL,GAAG;EACH,YAAY,UAAU,KAAK,UAAU;GAAE,GAAG;GAAO;GAAU,CAAC;EAC7D;;AAOH,SAAS,4BACP,UACiD;AACjD,QAAO,SAAS,KAAK,WAAW;EAC9B,MAAM;EACN,MAAM,MAAM;EACZ,aACE,2BAA2B,MAAM,GAAG,+BACnB,MAAM,OAAO;EAGhC,aAAa,uBAAuB,MAAM,GAAG;EAK7C,eAAe;AACb,SAAM,IAAI,MACR,gBAAgB,MAAM,GAAG,yHAE1B;;EAEJ,EAAE;;;;;;;;AASL,SAAS,uBAAuB,SAAmC;AA6BjE,QA5Be;EACb,aAAa;GACX,SAAS;GACT,QAAQ;GACR,WAAW,UAAmB;AAC5B,QACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAAkC,YAAY,SAEtD,QAAO,EAAE,OAAO;AAElB,WAAO,EACL,QAAQ,CACN,EAAE,SAAS,kCAAkC,QAAQ,gCAAgC,CACtF,EACF;;GAEJ;EACD,qBAAqB;GACnB,MAAM;GACN,YAAY,EACV,MAAM;IAAE,MAAM;IAAU,aAAa;IAA6C,EACnF;GACD,UAAU,CAAC,OAAO;GAClB,sBAAsB;GACvB;EACF;;;;;;;;;;;;;ACtnBH,SAAgB,mBAAmB,SAAqB,EAAE,EAAuB;AAC/E,qBAAoB,yBAAyB,OAAO,sBAAsB;AAC1E,KAAI,OAAO,0BAA0B,KAAA,KAAa,OAAO,wBAAwB,EAC/E,OAAM,IAAI,UACR,oGACD;AAEH,qBAAoB,YAAY,OAAO,SAAS;AAChD,qBAAoB,sBAAsB,OAAO,mBAAmB;AACpE,qBAAoB,yBAAyB,OAAO,sBAAsB;AAE1E,QAAO,OAAO,OAAO;EACnB,GAAI,OAAO,WAAW,KAAA,IAAY,EAAE,QAAQ,OAAO,OAAO,EAAE,GAAG,OAAO,QAAQ,CAAC,EAAE,GAAG,EAAE;EACtF,GAAI,OAAO,uBAAuB,KAAA,IAC9B,EAAE,oBAAoB,OAAO,oBAAoB,GACjD,EAAE;EACN,GAAI,OAAO,0BAA0B,KAAA,IACjC,EAAE,uBAAuB,OAAO,uBAAuB,GACvD,EAAE;EACN,uBAAuB,OAAO,yBAAyB;EACvD,UAAU,OAAO,YAAY;EAC7B,GAAI,OAAO,WAAW,KAAA,IAClB,EACE,QAAQ,OAAO,OACb,OAAO,YACL,OAAO,QAAQ,OAAO,OAAO,CAAC,KAAK,CAAC,WAAW,cAAc,CAC3D,WACA,OAAO,OAAO,EAAE,GAAG,UAAU,CAAC,CAC/B,CAAC,CACH,CACF,EACF,GACD,EAAE;EACN,cAAc,OAAO,gBAAgB;EACtC,CAAC;;AAGJ,SAAS,oBAAoB,OAAe,OAAiC;AAC3E,KAAI,UAAU,KAAA,EAAW;AACzB,KAAI,CAAC,OAAO,UAAU,MAAM,IAAI,QAAQ,EACtC,OAAM,IAAI,UACR,cAAc,MAAM,+CAA+C,OAAO,MAAM,CAAC,GAClF;;;;;ACtEL,MAAM,8BAA8B;;AAEpC,MAAM,4BAA4B;AAElC,MAAM,gBAAgB;;;;;;;AAQtB,MAAM,gBAAgB;AA0CtB,SAAS,aAAa,WAAmB,OAAuB;AAC9D,KAAI,CAAC,OAAO,SAAS,UAAU,IAAI,aAAa,EAC9C,OAAM,IAAI,UACR,yBAAyB,MAAM,yCAAyC,UAAU,GACnF;AAEH,QAAO;EACL,WAAW;EACX,UAAU;EACV,WAAW,YAAY;EACxB;;AAGH,SAAgB,qBACd,UAAiC,EAAE,EACnB;CAChB,MAAM,MAAM,QAAQ,OAAO,KAAK;CAChC,MAAM,WAAW,aACf,QAAQ,qBAAqB,6BAC7B,oBACD;CACD,MAAM,SAAS,aACb,QAAQ,mBAAmB,2BAC3B,kBACD;CACD,IAAI,eAAe,KAAK;CACxB,MAAM,UAAoB,EAAE;CAC5B,IAAI,QAA8C;;CAGlD,SAAS,SAAe;EACtB,MAAM,IAAI,KAAK;EACf,MAAM,UAAU,IAAI;AACpB,MAAI,WAAW,EAAG;AAClB,iBAAe;AACf,WAAS,YAAY,KAAK,IACxB,SAAS,UACT,SAAS,YAAY,UAAU,SAAS,UACzC;AACD,SAAO,YAAY,KAAK,IACtB,OAAO,UACP,OAAO,YAAY,UAAU,OAAO,UACrC;;;;;;;;CASH,SAAS,UAAU,aAA6B;AAC9C,SAAO,KAAK,IAAI,aAAa,OAAO,SAAS;;CAG/C,SAAS,SAAS,aAA8B;AAC9C,MACE,SAAS,YAAY,iBAAiB,KACtC,OAAO,YAAY,iBAAiB,UAAU,YAAY,EAC1D;AACA,YAAS,aAAa;AACtB,UAAO,aAAa;AACpB,UAAO;;AAET,SAAO;;;CAIT,SAAS,cAAc,aAA6B;EAClD,MAAM,iBAAiB,KAAK,IAAI,GAAG,IAAI,SAAS,UAAU;EAC1D,MAAM,eAAe,KAAK,IAAI,GAAG,UAAU,YAAY,GAAG,OAAO,UAAU;EAC3E,MAAM,cAAc,iBAAiB,SAAS;EAC9C,MAAM,YAAY,eAAe,OAAO;AACxC,SAAO,KAAK,IAAI,aAAa,UAAU;;CAGzC,SAAS,eAAqB;AAC5B,MAAI,UAAU,KAAM;EACpB,MAAM,OAAO,QAAQ;AACrB,MAAI,SAAS,KAAA,EAAW;EACxB,MAAM,SAAS,KAAK,IAClB,GACA,KAAK,KAAK,cAAc,KAAK,YAAY,GAAG,cAAc,CAC3D;AACD,UAAQ,iBAAiB;AACvB,WAAQ;AACR,SAAM;KACL,OAAO;;;CAIZ,SAAS,OAAa;AACpB,MAAI,UAAU,MAAM;AAClB,gBAAa,MAAM;AACnB,WAAQ;;AAEV,UAAQ;AACR,SAAO,QAAQ,SAAS,GAAG;GACzB,MAAM,OAAO,QAAQ;AACrB,OAAI,SAAS,KAAA,KAAa,CAAC,SAAS,KAAK,YAAY,CAAE;AACvD,WAAQ,OAAO;AACf,QAAK,QAAQ,YAAY,KAAK,YAAY,CAAC;;AAE7C,gBAAc;;CAGhB,SAAS,YAAY,gBAAwC;EAC3D,IAAI,WAAW;AACf,SAAO,EACL,QAAQ,QAAwC;AAC9C,OAAI,SAAU;AACd,cAAW;AACX,WAAQ;GACR,MAAM,eACJ,OAAO,OAAO,iBAAiB,YAC/B,OAAO,SAAS,OAAO,aAAa,GAChC,OAAO,eACP;AAEN,UAAO,YAAY,KAAK,IACtB,OAAO,UACP,OAAO,aAAa,iBAAiB,cACtC;AAED,SAAM;KAET;;AAGH,QAAO;EACL,MAAM;EACN,MAAM,QAAQ,UAA4D;AACxE,WAAQ;AAER,OAAI,QAAQ,WAAW,KAAK,SAAS,SAAS,YAAY,CACxD,QAAO,YAAY,SAAS,YAAY;AAE1C,UAAO,IAAI,SAAyB,YAAY;AAC9C,YAAQ,KAAK;KAAE,aAAa,SAAS;KAAa;KAAS,CAAC;AAC5D,kBAAc;KACd;;EAEL;;;;;;;AAQH,SAAS,oBAAoB,MAAsB;AACjD,QAAO,KAAK,KAAK,KAAK,SAAS,EAAE;;;;;;;;;;;;;;;;;;;;;;;;AAyBnC,SAAgB,cACd,OACA,OACgB;AAChB,QAAO,EACL,MAAM,KACJ,UACA,SAC8B;EAC9B,MAAM,WAAW,oBAAoB,QAAQ,KAAK;EAClD,MAAM,QAAQ,MAAM,MAAM,QAAQ,EAAE,aAAa,UAAU,CAAC;AAC5D,MAAI;GACF,IAAI;AACJ,OAAI,UAAU,KAAA,EACZ,YAAW,MAAM,MAAM,KAAK,UAAU,QAAQ;QACzC;AACL,QAAI,SAAS,YAAY,KAAA,EACvB,OAAM,IAAI,MACR,4BAA4B,SAAS,GAAG,2BACzC;AAEH,eAAW,MAAM,SAAS,QAAQ,QAAQ;;GAE5C,MAAM,SAAS,SAAS,iBAAiB;AACzC,SAAM,QAAQ,EACZ,cACE,OAAO,WAAW,YAAY,OAAO,SAAS,OAAO,GACjD,SACA,UACP,CAAC;AACF,UAAO;WACA,OAAO;AAEd,SAAM,QAAQ,EAAE,cAAc,UAAU,CAAC;AACzC,SAAM;;IAGX;;;;;AC7PH,MAAM,aAAoB;CACxB,cAAc;CACd,kBAAkB;CAClB,SAAS;CACV;;;;AAqDD,eAAsB,aACpB,SACA,SAAwB,EAAE,EACL;CACrB,MAAM,SAAS,mBAAmB,QAAQ,OAAO;CACjD,MAAM,QAAQ,gBAAgB,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,EAAE;CAC/E,MAAM,YAAY,KAAK,KAAK;CAC5B,MAAM,6BAAa,IAAI,KAA8B;CACrD,MAAM,WAA8B,EAAE;CACtC,MAAM,qCAAqB,IAAI,KAAuB;CAEtD,MAAM,WAAW,MAAM,kBAAkB;EACvC;EACA,MAAM,QAAQ;EACd,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,QAAQ,GAAG,EAAE;EACnE,CAAC;AACF,KAAI,aAAa,KAAA,EACf,UAAS,KAAK,SAAS,SAAS;CAGlC,MAAM,mBAAmB,6BAA6B,OAAO;CAC7D,MAAM,YAAY,uBAChB,QAAQ,MAAM,WACd,iBACD;CAED,SAAS,YAAY,SAAiB,OAAoB;AACxD,WAAS,YAAY,QAAQ,CAAC,QAAQ,gBAAgB,MAAM;;CAG9D,SAAS,kBAAkB,SAAiB,QAA2B;EACrE,MAAM,QAAQ,SAAS,YAAY,QAAQ;AAC3C,QAAM,cAAc,OAAO,WAAW;;CAGxC,SAAS,kBAA+C;AACtD,SAAO,sBAAsB;GAC3B;GACA,OAAO,WAAW,WAAW;GAC7B,YAAY,gBAAgB,WAAW;GACvC;GACD,CAAC;;CAGJ,MAAM,aAAa,qBAAqB,QAAQ,MAAM;EACpD;EACA;EACA,UAAU,EAAE;EACZ;EACA;EACA;EACA,cAAc,oBAAoB,QAAQ,KAAK;EAC/C,eAAe,UAAU;AACvB,YAAS,KAAK,SAAS;;EAEzB;EACA,GAAI,aAAa,KAAA,IAAY,EAAE,aAAa,SAAS,KAAK,GAAG,EAAE;EAC/D,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,QAAQ,GAAG,EAAE;EAClE,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,QAAQ,GAAG,EAAE;EAClE,GAAI,QAAQ,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,UAAU,GAAG,EAAE;EACzE,CAAC;CAYF,MAAM,eAAe,MAAM,iBAVO;EAChC,MAAM,QAAQ,KAAK;EACnB,OAAO,CAAC,GAAG,QAAQ,KAAK,OAAO,GAAG,WAAW,sBAAsB;EACnE,MAAM,uBAAuB,qBAAqB,EAAE,iBAAiB;EACrE,GAAI,QAAQ,KAAK,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,KAAK,UAAU,GAAG,EAAE;EAClF,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,QAAQ,GAAG,EAAE;EAClE,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,QAAQ,GAAG,EAAE;EAClE,GAAI,QAAQ,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,UAAU,GAAG,EAAE;EACzE,EAEyD,QAAQ,EAChE,iBAAiB,WAAW,iBAC7B,CAAC;AACF,aAAY,QAAQ,KAAK,IAAI,aAAa,MAAM;AAChD,mBAAkB,QAAQ,KAAK,IAAI,aAAa;AAEhD,KAAI,QAAQ,WAAW,KAAA,KAAa,aAAa,KAAA,GAAW;EAC1D,MAAM,iBAAiB,MAAM,6BAA6B;GACxD;GACA,SAAS,QAAQ,KAAK;GACtB,OAAO,aAAa;GACpB,QAAQ,QAAQ;GAChB,kBAAkB,SAAS;GAC3B,SAAS,aAAa,SAAS;GAChC,CAAC;AACF,WAAS,KAAK,eAAe;;AAG/B,OAAM,wBAAwB,UAAU,mBAAmB;AAW3D,QAAO,iBAAiB;EACtB,QAVa,WAAW,qBAAqB,IAAI,mBAAmB;GACpE;GACA,OAAO,WAAW,WAAW;GAC7B,YAAY,gBAAgB,WAAW;GACvC;GACD,CAAC,GACE,uBAAuB,aAAa,GACpC;EAIF,UAAU,cAAc,YAAY,mBAAmB;EACvD,OAAO,WAAW,WAAW;EAC7B,iBAAiB,gBAAgB,WAAW;EAC5C;EACA,GAAI,aAAa,KAAA,IAAY,EAAE,aAAa,SAAS,KAAK,GAAG,EAAE;EAChE,CAAC;;AAGJ,SAAS,SACP,YACA,SACiB;CACjB,IAAI,QAAQ,WAAW,IAAI,QAAQ;AACnC,KAAI,UAAU,KAAA,GAAW;AACvB,UAAQ;GAAE,SAAS,mBAAmB;GAAE,YAAY;GAAG;AACvD,aAAW,IAAI,SAAS,MAAM;;AAEhC,QAAO;;AAGT,SAAS,WAAW,YAAiD;CACnE,MAAM,QAAsB;EAC1B,cAAc;EACd,kBAAkB;EAClB,SAAS;EACV;AACD,MAAK,MAAM,SAAS,WAAW,QAAQ,CACrC,YAAW,OAAO,MAAM,QAAQ,OAAO,CAAC;AAE1C,QAAO,SAAS,MAAM;;AAGxB,SAAS,gBAAgB,YAAkD;CACzE,IAAI,QAAQ;AACZ,MAAK,MAAM,SAAS,WAAW,QAAQ,CACrC,UAAS,MAAM;AAEjB,QAAO;;AAGT,SAAS,WAAW,OAAqB,OAAoB;AAC3D,OAAM,gBAAgB,MAAM;AAC5B,OAAM,oBAAoB,MAAM;AAChC,KAAI,MAAM,YAAY,KACpB,OAAM,WAAW,MAAM,WAAW,KAAK,MAAM;;AAIjD,SAAS,SAAS,OAA4B;AAC5C,QAAO;EACL,cAAc,MAAM;EACpB,kBAAkB,MAAM;EACxB,SAAS,MAAM;EAChB;;AAGH,SAAS,sBAAsB,OAKC;CAC9B,MAAM,YAAoC,EAAE;CAC5C,MAAM,SAAS,MAAM,OAAO;CAC5B,MAAM,mBAAmB,WACvB,QAAQ,eACR,MAAM,OAAO,mBACd;AACD,KAAI,qBAAqB,KAAA,EACvB,WAAU,gBAAgB,mBAAmB,MAAM;AAErD,KAAI,QAAQ,kBAAkB,KAAA,EAC5B,WAAU,gBAAgB,OAAO,iBAAiB,KAAK,KAAK,GAAG,MAAM;AAEvE,KAAI,QAAQ,eAAe,KAAA,KAAa,MAAM,MAAM,YAAY,KAC9D,WAAU,aAAa,OAAO,aAAa,MAAM,MAAM;UAC9C,QAAQ,eAAe,KAAA,KAAa,MAAM,MAAM,YAAY,KAGrE,WAAU,aAAa,OAAO;AAEhC,KAAI,QAAQ,iBAAiB,KAAA,EAC3B,WAAU,eAAe,OAAO;AAElC,QAAO,OAAO,KAAK,UAAU,CAAC,SAAS,IAAI,YAAY,KAAA;;AAGzD,SAAS,mBAAmB,OAKhB;CACV,MAAM,mBAAmB,WACvB,MAAM,OAAO,QAAQ,eACrB,MAAM,OAAO,mBACd;AACD,KAAI,qBAAqB,KAAA,KAAa,MAAM,aAAa,iBACvD,QAAO;CAET,MAAM,gBAAgB,MAAM,OAAO,QAAQ;AAC3C,KAAI,kBAAkB,KAAA,KAAa,KAAK,KAAK,GAAG,MAAM,YAAY,cAChE,QAAO;CAET,MAAM,aAAa,MAAM,OAAO,QAAQ;AACxC,QACE,eAAe,KAAA,KACf,MAAM,MAAM,YAAY,QACxB,MAAM,MAAM,UAAU;;AAI1B,SAAS,WACP,GACA,GACoB;AACpB,KAAI,MAAM,KAAA,KAAa,MAAM,KAAA,EAAW,QAAO,KAAK,IAAI,GAAG,EAAE;AAC7D,QAAO,KAAK;;AAGd,SAAS,6BACP,QAC2D;AAC3D,KAAI,OAAO,iBAAiB,YAC1B,cAAa,KAAA;CAEf,MAAM,yBAAS,IAAI,KAAsC;AACzD,SAAQ,aAAa;EACnB,IAAI,QAAQ,OAAO,IAAI,SAAS;AAChC,MAAI,UAAU,KAAA,GAAW;AACvB,WAAQ,qBAAqB,oBAAoB,QAAQ,SAAS,CAAC;AACnE,UAAO,IAAI,UAAU,MAAM;;AAE7B,SAAO;;;AAIX,SAAS,oBACP,QACA,UACuB;CACvB,MAAM,WAAW,OAAO,SAAS,SAAS;AAC1C,QAAO;EACL,GAAI,UAAU,sBAAsB,KAAA,IAChC,EAAE,mBAAmB,SAAS,mBAAmB,GACjD,EAAE;EACN,GAAI,UAAU,oBAAoB,KAAA,IAC9B,EAAE,iBAAiB,SAAS,iBAAiB,GAC7C,EAAE;EACP;;AAGH,SAAS,uBACP,MACA,kBACW;AACX,QAAO;EACL,GAAG;EACH,WAAW,cAAc,KAAK,WAAW,iBAAiB;EAC3D;;AAGH,SAAS,cACP,OACA,kBACgB;AAChB,QAAO,EACL,KACE,UACA,SAC8B;EAC9B,MAAM,QAAQ,iBAAiB,SAAS;AACxC,MAAI,UAAU,KAAA,EACZ,QAAO,cAAc,OAAO,MAAM,CAAC,KAAK,UAAU,QAAQ;AAE5D,MAAI,UAAU,KAAA,EACZ,QAAO,MAAM,KAAK,UAAU,QAAQ;AAEtC,MAAI,SAAS,YAAY,KAAA,EACvB,OAAM,IAAI,MAAM,4BAA4B,SAAS,GAAG,2BAA2B;AAErF,SAAO,SAAS,QAAQ,QAAQ;IAEnC;;AAGH,SAAS,oBAAoB,MAAyB;CACpD,MAAM,aAAa,KAAK,cAAc;AACtC,QAAO,uBAAuB,YAAY,SAAS,KAAK,MAAM;;AAGhE,eAAe,kBAAkB,OAIqD;AACpF,KAAI,MAAM,WAAW,KAAA,EAAW,QAAO,KAAA;CACvC,MAAM,WAAW,MAAM,cACrB;EACE,OAAO,MAAM;EACb,OAAO;GAAE,WAAW;GAAqB,UAAU;GAAM;EACzD,OAAO;GACL,YAAY;GACZ,cAAc;GACd,eAAe;GAChB;EACD,OAAO;EACP,iBAAiB;EACjB,cAAc;EACd,aAAa,EAAE;EACf,YAAY;EACZ,UAAU,cAAc,MAAM,KAAK;EACpC,EACD,MAAM,OACP;AACD,QAAO;EAAE;EAAU,KAAK,MAAM,WAAW,SAAS;EAAE;;AAGtD,eAAe,6BAA6B,OAOf;AAC3B,QAAO,cACL;EACE,OAAO,MAAM;EACb,OAAO;GAAE,WAAW;GAAiC,UAAU;GAAM;EACrE,OAAO;GACL,YAAY;GACZ,cAAc;GACd,eAAe;GAChB;EACD,kBAAkB,MAAM;EACxB,OAAO,MAAM;EACb,iBAAiB,MAAM,UAAU,YAAY;EAC7C,cAAc;EACd,aAAa,EAAE;EACf,YAAY;EACZ,UAAU,yBAAyB,MAAM;EAC1C,EACD,MAAM,OACP;;AAGH,eAAe,wBACb,UACA,SACe;AACf,MAAK,MAAM,YAAY,UAAU;EAE/B,MAAM,UAAU,uBADH,kBAAkB,SAAS,CACI,SAAS;AACrD,MAAI,YAAY,KAAM;EACtB,MAAM,OAAO,QAAQ,IAAI,QAAQ,IAAI,EAAE;AACvC,OAAK,KAAK,MAAM,WAAW,SAAS,CAAC;AACrC,UAAQ,IAAI,SAAS,KAAK;;;AAI9B,SAAS,kBAAkB,UAA2D;AACpF,QAAO,KAAK,MAAM,KAAK,SAAS,QAAQ,CAAC;;AAG3C,SAAS,uBAAuB,UAA6C;AAE3E,KAAI,UAAU,WADC,yBACiB,KAAK,KAAM,QAAO;AAClD,QAAO,SAAS,MAAM,GAAc;;AAGtC,SAAS,cACP,YACA,oBACgC;AAChC,QAAO,OAAO,OACZ,MAAM,KAAK,WAAW,SAAS,GAAG,CAAC,IAAI,WACrC,OAAO,OAAO;EACZ;EACA,OAAO,OAAO,OAAO,MAAM,QAAQ,OAAO,CAAC;EAC3C,YAAY,MAAM;EAClB,aAAa,OAAO,OAAO,CAAC,GAAI,mBAAmB,IAAI,GAAG,IAAI,EAAE,CAAE,CAAC;EACpE,CAAC,CACH,CACF;;AAGH,SAAS,iBAAiB,QAAgC;AACxD,QAAO,OAAO,OAAO;EACnB,QAAQ,OAAO;EACf,UAAU,OAAO,OAAO,CAAC,GAAG,OAAO,SAAS,CAAC;EAC7C,OAAO,OAAO,OAAO,EAAE,GAAG,OAAO,OAAO,CAAC;EACzC,iBAAiB,OAAO;EACxB,UAAU,OAAO,OAAO,CAAC,GAAG,OAAO,SAAS,CAAC;EAC7C,GAAI,OAAO,gBAAgB,KAAA,IAAY,EAAE,aAAa,OAAO,aAAa,GAAG,EAAE;EAChF,CAAC;;AAGJ,SAAS,uBAAuB,cAAyC;AACvE,QAAO;EACL,MAAM;EACN,QAAQ;EACR,OAAO,aAAa;EACpB,YAAY,OAAO,OAAO,CAAC,GAAG,aAAa,WAAW,CAAC;EACvD,GAAI,aAAa,YAAY,KAAA,IAAY,EAAE,SAAS,aAAa,SAAS,GAAG,EAAE;EAChF"}