@hearsay-tools/squawk 0.0.0-stage → 0.17.0-pr3058.5683

package/dist/delegation/conversations.js

@@ -0,0 +1,285 @@
+import { productName } from '../home/display.js';
+import { createHash } from 'node:crypto';
+import { workerOperationSchema } from '../contract/index.js';
+import { deliveryReceipts } from '../runs/outcome-commit.js';
+import { ConversationIdInUseError, RunWriteRefusedError } from '../runs/store.js';
+import { DelegationPolicyError } from './policy.js';
+import { reservedReplies } from './questions.js';
+/**
+ * First durable request settlement wins, with the defined late-reply timeout amendment handled
+ * by send. Review is not completion for a worker, which its parent can resume; a peer recipient at
+ * review settles `completed-without-reply` at once, because no peer can resume it, and a deleted
+ * one settles `deleted` (spec 2026-10-27-task-communication-protocol § 5, § 7). Lookup only the
+ * named sender/recipient runs.
+ */
+export function reconcileConversationState(root, lookup, now, isSettled, unreadable = () => false) {
+    if (root.delegation?.role !== 'root' || !root.delegation.conversation)
+        return undefined;
+    const state = root.delegation.conversation;
+    const outcomes = [...state.outcomes];
+    for (const request of state.messages) {
+        if (request.kind !== 'request' || request.state !== 'accepted' || outcomes.some(outcome => outcome.requestId === request.id))
+            continue;
+        const recipient = lookup(request.recipientRunId);
+        const status = request.relationship === 'peer' ? peerRecipientSettlement(recipient, isSettled, unreadable(request.recipientRunId)) : familyRecipientSettlement(root, request, recipient, isSettled);
+        const closed = (run) => run && ['done', 'failed', 'cancelled'].includes(run.status) && isSettled(run);
+        const sender = lookup(request.senderRunId);
+        const humanFinished = finishedByHuman(sender);
+        const settled = (humanFinished ? 'sender-closed' : status) ?? (closed(root) || closed(lookup(request.senderRunId)) ? 'sender-closed'
+            : request.deadline && request.deadline <= now ? 'timed-out' : undefined);
+        if (settled)
+            outcomes.push({ requestId: request.id, status: settled, observedAt: now });
+    }
+    return outcomes.length === state.outcomes.length ? state : { ...state, outcomes };
+}
+/** Finish closes the sender's obligations, including when its result rests at review. */
+function finishedByHuman(sender) {
+    return sender?.delegation?.role === 'root' && !!sender.delegation.finishRequestedAt;
+}
+/** A peer recipient settles the request when it is deleted, rests at `review` (no peer can resume
+ *  it), or ends `done`, `failed` or `cancelled`. A row this store cannot decode is not a deleted
+ *  one: its request stays open (hearsay-tools/cezarion#1990 review). */
+function peerRecipientSettlement(recipient, isSettled, unreadable) {
+    if (!recipient)
+        return unreadable ? undefined : 'deleted';
+    if (!['review', 'done', 'failed', 'cancelled'].includes(recipient.status) || !isSettled(recipient))
+        return undefined;
+    return recipient.status === 'review' || recipient.status === 'done' ? 'completed-without-reply' : recipient.status;
+}
+/** A family recipient: a destroyed worker, or a closed one. Review is not completion: its parent can resume it. */
+function familyRecipientSettlement(root, request, recipient, isSettled) {
+    const receipts = root.delegation?.role === 'root' ? root.delegation.receipts : [];
+    const deletedRecipient = !recipient && receipts.some(receipt => receipt.workerId === request.recipientRunId && receipt.deletion?.phase === 'complete');
+    if (deletedRecipient || (recipient?.delegation?.role === 'worker' && recipient.delegation.destroy?.phase === 'complete'))
+        return 'destroyed';
+    if (!recipient || !['done', 'failed', 'cancelled'].includes(recipient.status) || !isSettled(recipient))
+        return undefined;
+    // A worker's question ends with its parent like any request; it never moves to a human
+    // (hearsay-tools/cezarion#2410).
+    return recipient.status === 'done' ? 'completed-without-reply' : recipient.status;
+}
+/** Repair observation only; replay never inserts agent inputs or starts execution. A ledger whose
+ *  history is being deleted projects nothing: its events would recreate deleted transcripts
+ *  (hearsay-tools/cezarion#1990 review). */
+export function projectConversationEvents(store, root) {
+    if (root.delegation?.role !== 'root' || !root.delegation.conversation || root.delegation.historyDeletion)
+        return;
+    const state = root.delegation.conversation;
+    const outcomes = new Map(state.outcomes.map(outcome => [outcome.requestId, outcome]));
+    for (const message of state.messages) {
+        for (const runId of [message.senderRunId, message.recipientRunId]) {
+            if (!store.getRun(runId))
+                continue;
+            try {
+                projectDelivery(store, runId, message);
+                projectOutcome(store, runId, outcomes.get(message.id));
+            }
+            catch (error) {
+                // A peer read from `.ai/squawk/` stays unchanged; its own binary projects its transcript.
+                if (!(error instanceof RunWriteRefusedError && error.ownership === 'fallback'))
+                    throw error;
+            }
+        }
+    }
+}
+/** Project delivery steps for one participant, preserving their order and indexed IDs. */
+function projectDelivery(store, runId, message) {
+    // The run's indexed projection ids (open-mercato/cezar#880): appendEvent keeps them, so no transcript read.
+    const ids = { has: (id) => store.hasProjection(runId, id) };
+    const input = store.getRun(message.recipientRunId)?.agentInputs?.find(input => input.id === message.id);
+    const delivery = input?.consumedAt ? 'consumed' : input?.deliveredAt ? 'delivered' : input ? 'queued' : 'not-delivered';
+    // A read message was delivered first, even when both landed between two projections;
+    // readers that predate `consumed` still see it delivered (hearsay-tools/cezarion#505).
+    for (const step of delivery === 'consumed' ? ['delivered', 'consumed'] : [delivery]) {
+        const projectionId = `conversation-message:${message.id}:${step}`;
+        if (ids.has(projectionId))
+            continue;
+        store.appendEvent(runId, { type: 'conversation-message', projectionId, message, delivery: step, ...deliveryReceipts(input, step) });
+    }
+}
+/** A request's outcome on one participant's transcript, once; a late reply gets its own projection. */
+function projectOutcome(store, runId, outcome) {
+    if (!outcome)
+        return;
+    const projectionId = `request-outcome:${outcome.requestId}${outcome.status === 'replied-late' ? ':replied-late' : ''}`;
+    if (!store.hasProjection(runId, projectionId))
+        store.appendEvent(runId, { type: 'request-outcome', projectionId, outcome });
+}
+/** The record that makes a run a root task: every worker operation, no receipts yet. */
+export const rootDelegation = () => ({ role: 'root', permissions: [...workerOperationSchema.options], receipts: [] });
+/** A root task: a root delegation record, or a top-level run with no record yet, which has not
+ *  opened a delegation session yet (spec 2026-10-27-task-communication-protocol § 2). */
+export function isRootTask(run) {
+    return !!run && (run.delegation?.role === 'root' || run.delegation === undefined);
+}
+const denyScope = () => { throw new DelegationPolicyError('denied_scope', 'Worker scope denied'); };
+/** Two root tasks of one project (spec § 2), neither family deleting its history; a sender of a new
+ *  message is live. Undefined when the two are not both root tasks. */
+export function peerPair(sender, recipient, send) {
+    if (sender?.delegation?.role !== 'root' || !isRootTask(recipient) || sender.id === recipient.id)
+        return undefined;
+    if (sender.delegation.historyDeletion || (recipient.delegation?.role === 'root' && recipient.delegation.historyDeletion))
+        denyScope();
+    if (send && (!['running', 'waiting'].includes(sender.status) || sender.delegation.finishRequestedAt))
+        throw new DelegationPolicyError('incompatible_state', 'Sender session is not active');
+    return { relationship: 'peer', sender, recipient };
+}
+/** A root and its direct owned worker, in either direction; anything else is `denied_scope`. */
+export function familyPair(sender, recipient) {
+    const root = sender?.delegation?.role === 'root' ? sender : recipient;
+    const worker = sender?.delegation?.role === 'worker' ? sender : recipient;
+    if (!sender || !recipient || sender.id === recipient.id || !root || !worker || !ownsWorker(root, worker))
+        return denyScope();
+    return { root, worker };
+}
+/** The root owns the worker by a live receipt, and no history deletion is pending on the family. */
+function ownsWorker(root, worker) {
+    return root.delegation?.role === 'root' && worker.delegation?.role === 'worker' && worker.delegation.parentRunId === root.id &&
+        worker.delegation.workspace.ownerRunId === worker.id && !root.delegation.historyDeletion &&
+        root.delegation.receipts.some(receipt => receipt.workerId === worker.id && !receipt.deletion);
+}
+/** A family sender of a new message: a parent holding `steer`, live and not finishing; a worker live and not being destroyed. */
+export function assertFamilySender(sender, root, send) {
+    if (!send)
+        return;
+    const parent = root.delegation?.role === 'root' ? root.delegation : undefined;
+    if (sender.id === root.id && !parent?.permissions.includes('steer'))
+        denyScope();
+    if (!['running', 'waiting'].includes(sender.status) || (sender.id === root.id && parent?.finishRequestedAt) ||
+        (sender.delegation?.role === 'worker' && sender.delegation.destroy))
+        throw new DelegationPolicyError('incompatible_state', 'Sender session is not active');
+}
+/** A root whose human pressed Finish, which has not settled yet. */
+export function finishing(run) {
+    return run.delegation?.role === 'root' && !!run.delegation.finishRequestedAt;
+}
+/** Why a send to a run that cannot take it now was not delivered, and the next step. */
+export function notDeliveredInstruction(pair, root) {
+    const { sender, recipient } = pair;
+    if (recipient.delegation?.role === 'worker' && (recipient.status === 'cancelled' || recipient.stopping || recipient.delegation.destroy)) {
+        return 'Not delivered: this worker was stopped or is being destroyed. Spawn a new worker for further work.';
+    }
+    if (pair.relationship === 'peer')
+        return `Not delivered: task is ${recipient.stopping ? 'stopping' : finishing(recipient) ? 'finishing' : recipient.status}. Only its human can continue it.`;
+    return sender.id === root.id
+        ? `Not delivered: worker is ${recipient.status}. To resume it with a new instruction, run worker resume ${recipient.id} "<instruction>" --id <new-message-UUID>; use a new message ID. Retrying this rejected ID will not deliver it.`
+        : `Not delivered: parent is ${recipient.status}. A worker cannot resume its parent; the parent must be continued by its owner.`;
+}
+/** The ledger's 1,024 messages, where every open request holds room for its reply and a new
+ *  request needs room for its own; its 32 open requests; and 32 inbox slots per run, which hold its
+ *  undelivered inputs and one slot for each open peer request it sent (`inboxSlotsUsed`). A new
+ *  peer request needs a free slot in its sender's inbox; its reply then spends that slot, so it is
+ *  always admitted and no inbox passes 32. An answer to a worker question passes the inbox bound,
+ *  as it always did (hearsay-tools/cezarion#505). */
+export function assertConversationCapacity(state, pair, kind, enqueue, replying, answering) {
+    const reservedMessages = reservedReplies(state) - (replying ? 1 : 0) + (enqueue && kind === 'request' ? 1 : 0);
+    const openRequests = () => state.messages.filter(message => message.kind === 'request' && message.state === 'accepted' && !state.outcomes.some(outcome => outcome.requestId === message.id)).length;
+    const peer = pair.relationship === 'peer';
+    const inboxFull = enqueue && !answering && !(peer && replying) && inboxSlotsUsed(pair.recipient) >= 32;
+    if (state.messages.length + reservedMessages >= 1024 || (enqueue && kind === 'request' && openRequests() >= 32) || inboxFull ||
+        (enqueue && peer && kind === 'request' && inboxSlotsUsed(pair.sender) >= 32))
+        throw new DelegationPolicyError('capacity_limit', 'Conversation capacity limit reached');
+}
+/** A run's inbox slots in use: its undelivered inputs, and one for each open peer request it sent,
+ *  which its reply will fill. */
+export function inboxSlotsUsed(run) {
+    const undelivered = (run.agentInputs ?? []).filter(input => !input.deliveredAt).length;
+    const state = run.delegation?.role === 'root' ? run.delegation.conversation : undefined;
+    const reserved = state?.messages.filter(message => message.relationship === 'peer' && message.kind === 'request' && message.state === 'accepted' &&
+        message.senderRunId === run.id && !state.outcomes.some(outcome => outcome.requestId === message.id)).length ?? 0;
+    return undelivered + reserved;
+}
+/** A reply settles its request, or amends a deadline expiry to `replied-late`. Cancellation,
+ *  lifecycle settlement and an earlier reply still win; the request never becomes pending again. */
+export function replyOutcomes(state, request, settled, now) {
+    const outcomes = [...state.outcomes];
+    if (request.kind !== 'reply' || (settled && settled.status !== 'timed-out'))
+        return outcomes;
+    const outcome = { requestId: request.requestId, status: settled ? 'replied-late' : 'replied', observedAt: now, replyId: request.id };
+    if (settled)
+        outcomes[outcomes.indexOf(settled)] = outcome;
+    else
+        outcomes.push(outcome);
+    return outcomes;
+}
+/** One write for the message, its ledger and the recipient's input; a message ID already in use
+ *  there refuses the whole write. A peer that has not opened a session yet becomes a root task
+ *  with its first message (spec § 2). */
+export function commitAccepted(store, ledgerId, next, input, provision) {
+    const message = next.messages.at(-1);
+    const delivery = input ? { recipientRunId: message.recipientRunId, input, ...(provision ? { recipientDelegation: rootDelegation() } : {}) } : undefined;
+    try {
+        store.commitConversation(ledgerId, next, delivery, { id: message.id, senderRunId: message.senderRunId, recipientRunId: message.recipientRunId });
+    }
+    catch (error) {
+        if (error instanceof ConversationIdInUseError)
+            throw new DelegationPolicyError('invalid_input', error.message);
+        // Another cezar process controls the recipient (a headless run beside the cockpit): nothing is written.
+        if (error instanceof RunWriteRefusedError && error.ownership === 'fallback')
+            throw new DelegationPolicyError('incompatible_state', `Not delivered: ${error.message}`);
+        if (error instanceof RunWriteRefusedError)
+            throw new DelegationPolicyError('incompatible_state', `Not delivered: run ${error.runId} is controlled by another ${productName('cezar')} process. Messages reach only tasks this ${productName('cezar')} process runs.`);
+        throw error;
+    }
+}
+/** The accepted message an input carries, as its ledger holds it, with its request's outcome. */
+export function inboxEntryIn(state, input, recipientId) {
+    const message = state.messages.find(entry => entry.id === input.id && entry.state === 'accepted' && entry.senderRunId === input.conversation?.senderRunId && entry.recipientRunId === recipientId);
+    return message && { message, outcome: state.outcomes.find(entry => entry.requestId === (message.requestId ?? message.id)) };
+}
+/** The merged history order: `createdAt`, then `id`, a total order a cursor can name. */
+export function byCreatedAtAndId(a, b) {
+    return a.createdAt < b.createdAt ? -1 : a.createdAt > b.createdAt ? 1 : a.id < b.id ? -1 : a.id > b.id ? 1 : 0;
+}
+/** A peer message whose sender's ledger was deleted with the sender: the recipient's own input
+ *  still carries it, so its inbox can return it (spec § 5). */
+export function orphanedPeerMessage(input) {
+    if (!input.conversation)
+        return undefined;
+    // The input carries the accepted message's own hash and deadline; inputs written before they did get a stand-in hash.
+    const requestHash = input.requestHash ?? createHash('sha256').update(JSON.stringify({ ...input.conversation, text: input.text })).digest('hex');
+    return { id: input.id, ...input.conversation, text: input.text, createdAt: input.createdAt, ...(input.deadline ? { deadline: input.deadline } : {}), requestHash, state: 'accepted' };
+}
+/** A Cezar-written message (a routed question, a park notice) whose deterministic ID a peer
+ *  already took: nothing is written, and `onConflict` says what happens instead. */
+export function commitNewMessage(store, rootId, conversation, delivery, onConflict) {
+    try {
+        store.commitConversation(rootId, conversation, delivery);
+        return true;
+    }
+    catch (error) {
+        if (!(error instanceof ConversationIdInUseError))
+            throw error;
+        onConflict();
+        return false;
+    }
+}
+/** The caller took part in a peer conversation with `otherId`: a peer message between them in
+ *  either ledger while it exists, or, after the peer's deletion, a peer input from it that the
+ *  caller still holds (spec 2026-10-27-task-communication-protocol § 2, records level). */
+export function takesPart(self, other, otherId) {
+    const between = (message) => { return message.relationship === 'peer' && [message.senderRunId, message.recipientRunId].includes(otherId) && [message.senderRunId, message.recipientRunId].includes(self.id); };
+    const ledger = (run) => { return run?.delegation?.role === 'root' ? run.delegation.conversation?.messages ?? [] : []; };
+    return ledger(self).some(between) || ledger(other).some(between) ||
+        !!self.agentInputs?.some(input => input.conversation?.relationship === 'peer' && input.conversation.senderRunId === otherId);
+}
+/** Every conversation root, live or settled, with an open peer request to `runId`: the peer's
+ *  settlement or deletion settles each at once (spec § 5, R17). Roots another process owns are its
+ *  own to settle. */
+export function rootsAwaitingPeer(store, runId) {
+    // Only ledgers that name the run are read: the store narrows the candidates before decoding any.
+    return store.listConversationRootIds(runId).filter(id => {
+        const root = store.writeRefusal(id) ? undefined : store.getRun(id);
+        const state = root?.delegation?.role === 'root' ? root.delegation.conversation : undefined;
+        return !!state?.messages.some(message => message.relationship === 'peer' && message.kind === 'request' && message.state === 'accepted' &&
+            message.recipientRunId === runId && !state.outcomes.some(outcome => outcome.requestId === message.id));
+    });
+}
+/** The families a settled run's reconcile covers: a worker's parent, or a root's own family and
+ *  every root that awaits it as a peer (`rootsAwaitingPeer`). */
+export function settledRunFamilies(store, run) {
+    if (run.delegation?.role === 'worker')
+        return [run.delegation.parentRunId];
+    return run.delegation?.role === 'root' ? [run.id, ...rootsAwaitingPeer(store, run.id)] : [];
+}
+//# sourceMappingURL=conversations.js.map

package/dist/delegation/conversations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversations.js","sourceRoot":"","sources":["../../src/delegation/conversations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAiC,MAAM,kBAAkB,CAAC;AACjH,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAe,EAAE,MAA6C,EAAE,GAAW,EAAE,SAAsC,EAC5J,UAAU,GAA4B,GAAG,EAAE,CAAC,KAAK;IACjD,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACxF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAAC;YAAE,SAAS;QACvI,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACpM,MAAM,MAAM,GAAG,CAAC,GAA0B,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7H,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe;YAClI,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC;AACpF,CAAC;AAED,yFAAyF;AACzF,SAAS,eAAe,CAAC,MAA6B;IACpD,OAAO,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC;AACtF,CAAC;AAED;;wEAEwE;AACxE,SAAS,uBAAuB,CAAC,SAAgC,EAAE,SAAsC,EAAE,UAAmB;IAC5H,IAAI,CAAC,SAAS;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACrH,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAgC,CAAC;AAC/I,CAAC;AAED,mHAAmH;AACnH,SAAS,yBAAyB,CAAC,IAAe,EAAE,OAA4B,EAAE,SAAgC,EAAE,SAAsC;IACxJ,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,gBAAgB,GAAG,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,QAAQ,EAAE,KAAK,KAAK,UAAU,CAAC,CAAC;IACvJ,IAAI,gBAAgB,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,KAAK,UAAU,CAAC;QAAE,OAAO,WAAW,CAAC;IAC7I,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACzH,uFAAuF;IACvF,iCAAiC;IACjC,OAAO,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAgC,CAAC;AAC9G,CAAC;AAED;;4CAE4C;AAC5C,MAAM,UAAU,yBAAyB,CAAC,KAA0C,EAAE,IAAe;IACnG,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe;QAAE,OAAO;IACjH,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBACH,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBACvC,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,0FAA0F;gBAC1F,IAAI,CAAC,CAAC,KAAK,YAAY,oBAAoB,IAAI,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC;oBAAE,MAAM,KAAK,CAAC;YAC9F,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,SAAS,eAAe,CAAC,KAAe,EAAE,KAAa,EAAE,OAA4B;IACnF,4GAA4G;IAC5G,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;IACpE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC;IACxH,qFAAqF;IACrF,uFAAuF;IACvF,KAAK,MAAM,IAAI,IAAI,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,CAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAU,EAAE,CAAC;QACtG,MAAM,YAAY,GAAG,wBAAwB,OAAO,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QAClE,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,SAAS;QACpC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACtI,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,SAAS,cAAc,CAAC,KAAiF,EAAE,KAAa,EAAE,OAAmC;IAC3J,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,YAAY,GAAG,mBAAmB,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACvH,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC;QAAE,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9H,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,cAAc,GAAG,GAAoB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,GAAG,qBAAqB,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAEvI;yFACyF;AACzF,MAAM,UAAU,UAAU,CAAC,GAA0B;IACnD,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,SAAS,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,qBAAqB,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3G;uEACuE;AACvE,MAAM,UAAU,QAAQ,CAAC,MAA6B,EAAE,SAAgC,EAAE,IAAa;IACrG,IAAI,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAClH,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,SAAS,EAAE,CAAC;IACtI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,8BAA8B,CAAC,CAAC;IAC5L,OAAO,EAAE,YAAY,EAAE,MAAe,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC9D,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,UAAU,CAAC,MAA6B,EAAE,SAAgC;IACxF,MAAM,IAAI,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,SAAS,EAAE,CAAC;IAC7H,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,oGAAoG;AACpG,SAAS,UAAU,CAAC,IAAe,EAAE,MAAiB;IACpD,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,KAAK,IAAI,CAAC,EAAE;QAC1H,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe;QACxF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAClG,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,IAAe,EAAE,IAAa;IAClF,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,SAAS,EAAE,CAAC;IACjF,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,MAAM,EAAE,iBAAiB,CAAC;QACzG,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,8BAA8B,CAAC,CAAC;AAC/J,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,SAAS,CAAC,GAAc;IACtC,OAAO,GAAG,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC;AAC/E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,uBAAuB,CAAC,IAAkF,EAAE,IAAe;IACzI,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACnC,IAAI,SAAS,CAAC,UAAU,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxI,OAAO,oGAAoG,CAAC;IAC9G,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;QAAE,OAAO,0BAA0B,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,mCAAmC,CAAC;IAC9L,OAAO,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;QAC1B,CAAC,CAAC,4BAA4B,SAAS,CAAC,MAAM,4DAA4D,SAAS,CAAC,EAAE,gHAAgH;QACtO,CAAC,CAAC,4BAA4B,SAAS,CAAC,MAAM,iFAAiF,CAAC;AACpI,CAAC;AAED;;;;;qDAKqD;AACrD,MAAM,UAAU,0BAA0B,CAAC,KAAwB,EAAE,IAAkF,EAAE,IAAqC,EAC5L,OAAgB,EAAE,QAAiB,EAAE,SAAkB;IACvD,MAAM,gBAAgB,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACpM,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACvG,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,KAAK,SAAS,IAAI,YAAY,EAAE,IAAI,EAAE,CAAC,IAAI,SAAS;QAC1H,CAAC,OAAO,IAAI,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;AAC3K,CAAC;AAED;iCACiC;AACjC,MAAM,UAAU,cAAc,CAAC,GAAc;IAC3C,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IACvF,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU;QAC9I,OAAO,CAAC,WAAW,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IACnH,OAAO,WAAW,GAAG,QAAQ,CAAC;AAChC,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,aAAa,CAAC,KAAwB,EAAE,OAAgC,EAAE,OAAmC,EAAE,GAAW;IACxI,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7F,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,cAAuB,CAAC,CAAC,CAAC,SAAkB,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;IACxJ,IAAI,OAAO;QAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC;;QACtD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;yCAEyC;AACzC,MAAM,UAAU,cAAc,CAAC,KAAe,EAAE,QAAgB,EAAE,IAAuB,EAAE,KAA6B,EAAE,SAAkB;IAC1I,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxJ,IAAI,CAAC;QAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAAC,CAAC;IACzJ,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,wBAAwB;YAAE,MAAM,IAAI,qBAAqB,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/G,wGAAwG;QACxG,IAAI,KAAK,YAAY,oBAAoB,IAAI,KAAK,CAAC,SAAS,KAAK,UAAU;YAAE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,kBAAkB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACtK,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,sBAAsB,KAAK,CAAC,KAAK,6BAA6B,WAAW,CAAC,OAAO,CAAC,4CAA4C,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACrQ,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAID,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAAC,KAAwB,EAAE,KAAiB,EAAE,WAAmB;IAC3F,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,EAAE,WAAW,IAAI,KAAK,CAAC,cAAc,KAAK,WAAW,CAAC,CAAC;IACnM,OAAO,OAAO,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC9H,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,gBAAgB,CAAC,CAAoC,EAAE,CAAoC;IACzG,OAAO,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjH,CAAC;AAED;+DAC+D;AAC/D,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAC1C,sHAAsH;IACtH,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChJ,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACxL,CAAC;AAED;oFACoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,KAA2C,EAC1E,MAAc,EAAE,YAA+B,EAAE,QAAuD,EAAE,UAAsB;IAChI,IAAI,CAAC;QAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC9E,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,CAAC,KAAK,YAAY,wBAAwB,CAAC;YAAE,MAAM,KAAK,CAAC;QAAC,UAAU,EAAE,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC9G,CAAC;AAED;;2FAE2F;AAC3F,MAAM,UAAU,SAAS,CAAC,IAAe,EAAE,KAA4B,EAAE,OAAe;IACtF,MAAM,OAAO,GAAG,CAAC,OAA4B,EAAE,EAAE,GAAG,OAAO,OAAO,CAAC,YAAY,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpO,MAAM,MAAM,GAAG,CAAC,GAA0B,EAAE,EAAE,GAAG,OAAO,GAAG,EAAE,UAAU,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/I,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9D,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,KAAK,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC;AACjI,CAAC;AAED;;qBAEqB;AACrB,MAAM,UAAU,iBAAiB,CAAC,KAA4E,EAAE,KAAa;IAC3H,iGAAiG;IACjG,OAAO,KAAK,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,OAAO,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU;YACpI,OAAO,CAAC,cAAc,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;AACL,CAAC;AAED;iEACiE;AACjE,MAAM,UAAU,kBAAkB,CAAC,KAA4E,EAAE,GAAc;IAC7H,IAAI,GAAG,CAAC,UAAU,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC3E,OAAO,GAAG,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC"}

package/dist/delegation/credentials.d.ts

@@ -0,0 +1,21 @@
+declare const callerBrand: unique symbol;
+/** Internal identity minted by credential lookup, never deserialized from a request. */
+export type Caller = Readonly<{
+    projectId: string;
+    runId: string;
+    generation: string;
+    [callerBrand]: true;
+}>;
+/** Runtime check as well as a type brand: copied/forged/revoked objects carry no authority. */
+export declare function isAuthenticatedCaller(caller: Caller): boolean;
+/** Ephemeral session credentials. Only SHA-256 token keys are retained, never the bearer token. */
+export declare class CredentialRegistry {
+    #private;
+    issue(projectId: string, runId: string, generation: string): string;
+    authenticate(token: string): Caller | undefined;
+    revoke(runId: string, generation?: string): void;
+    /** Every credential issued for `projectId`'s runs (the project is detaching). */
+    revokeProject(projectId: string): void;
+    close(): void;
+}
+export {};

package/dist/delegation/credentials.js

@@ -0,0 +1,66 @@
+import { createHash, randomBytes } from 'node:crypto';
+const callerBrand = Symbol('delegation caller');
+const authenticatedCallers = new WeakSet();
+/** Runtime check as well as a type brand: copied/forged/revoked objects carry no authority. */
+export function isAuthenticatedCaller(caller) {
+    return authenticatedCallers.has(caller);
+}
+/** Ephemeral session credentials. Only SHA-256 token keys are retained, never the bearer token. */
+export class CredentialRegistry {
+    #credentials = new Map();
+    #closed = false;
+    issue(projectId, runId, generation) {
+        if (this.#closed)
+            throw new Error('Credential registry is closed');
+        // Reprovisioning a run replaces its session authority, including on a new generation.
+        this.revoke(runId);
+        const token = randomBytes(32).toString('base64url');
+        const key = createHash('sha256').update(token).digest('hex');
+        this.#credentials.set(key, { projectId, runId, generation });
+        return token;
+    }
+    authenticate(token) {
+        const key = createHash('sha256').update(token).digest('hex');
+        const credential = this.#credentials.get(key);
+        if (!credential)
+            return undefined;
+        if (!credential.caller) {
+            credential.caller = Object.freeze({
+                projectId: credential.projectId,
+                runId: credential.runId,
+                generation: credential.generation,
+                [callerBrand]: true,
+            });
+            authenticatedCallers.add(credential.caller);
+        }
+        return credential.caller;
+    }
+    revoke(runId, generation) {
+        for (const [key, credential] of this.#credentials) {
+            if (credential.runId !== runId || (generation !== undefined && credential.generation !== generation))
+                continue;
+            if (credential.caller)
+                authenticatedCallers.delete(credential.caller);
+            this.#credentials.delete(key);
+        }
+    }
+    /** Every credential issued for `projectId`'s runs (the project is detaching). */
+    revokeProject(projectId) {
+        for (const [key, credential] of this.#credentials) {
+            if (credential.projectId !== projectId)
+                continue;
+            if (credential.caller)
+                authenticatedCallers.delete(credential.caller);
+            this.#credentials.delete(key);
+        }
+    }
+    close() {
+        this.#closed = true;
+        for (const credential of this.#credentials.values()) {
+            if (credential.caller)
+                authenticatedCallers.delete(credential.caller);
+        }
+        this.#credentials.clear();
+    }
+}
+//# sourceMappingURL=credentials.js.map

package/dist/delegation/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/delegation/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,WAAW,GAAkB,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAAU,CAAC;AAiBnD,+FAA+F;AAC/F,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,OAAO,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,mGAAmG;AACnG,MAAM,OAAO,kBAAkB;IAC7B,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,OAAO,GAAG,KAAK,CAAC;IAEhB,KAAK,CAAC,SAAiB,EAAE,KAAa,EAAE,UAAkB;QACxD,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnE,sFAAsF;QACtF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,YAAY,CAAC,KAAa;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACvB,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAChC,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,CAAC,WAAW,CAAC,EAAE,IAAa;aAC7B,CAAC,CAAC;YACH,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,UAAU,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,UAAmB;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAClD,IAAI,UAAU,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,UAAU,CAAC;gBAAE,SAAS;YAC/G,IAAI,UAAU,CAAC,MAAM;gBAAE,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,aAAa,CAAC,SAAiB;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAClD,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS;YACjD,IAAI,UAAU,CAAC,MAAM;gBAAE,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACpD,IAAI,UAAU,CAAC,MAAM;gBAAE,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;CACF"}

package/dist/delegation/destroy-observation.d.ts

@@ -0,0 +1,42 @@
+import type { RunStore } from '../runs/store.ts';
+import { type RecordedProcess } from './process-liveness.ts';
+/**
+ * What a full destroy attempt started from, and the processes it found holding the worker's
+ * resources (hearsay-tools/cezarion#879). A scheduled retry that would observe the same, with
+ * every holder still the same live process, has nothing new to try: it skips the transcript
+ * read, the git spawns, the `/proc` scans and the snapshot writes.
+ */
+export type DestroyObservation = {
+    key: string;
+    holders: RecordedProcess[];
+};
+/**
+ * Everything a destroy attempt's outcome depends on that a stat or a small file read can see:
+ * the worker's record (minus `destroy`, which every attempt rewrites), the parent's receipt, the
+ * execution checkpoint, the process record, the scratch locations, the worktree and its own admin
+ * dir, lock and ownership marker and, given the repository's common Git dir, the ownership receipt
+ * and its cleanup checkpoint, the branch ref, `packed-refs`, the branch reflog and the
+ * linked-worktree admin dirs. Synchronous, with no git and no `/proc` scan. The worktree mutation
+ * lock is not here: every full attempt takes it, so its stamp would change on every attempt.
+ */
+export declare function observeDestroy({ store, dataDir, commonDir, workerId }: {
+    store: RunStore;
+    dataDir: string;
+    commonDir?: string | undefined;
+    workerId: string;
+}): string;
+/** The holders a failed attempt named, pinned to their current incarnation. */
+export declare function recordHolders(pids: readonly number[]): RecordedProcess[];
+/**
+ * Every holder the last attempt named still holds: the same live process and, unless it belongs to
+ * the generation's own process record (which blocks wherever it works), still working under the
+ * worktree or a scratch location. A holder that exited, was replaced or moved away is a change.
+ * One `readlink` (Linux) or one-process `lsof` (darwin) per holder; on win32, whose scan names no
+ * holder, only recorded processes reach this, and liveness decides.
+ */
+export declare function holdersStillHold({ store, dataDir, workerId, holders }: {
+    store: RunStore;
+    dataDir: string;
+    workerId: string;
+    holders: readonly RecordedProcess[];
+}): boolean;

package/dist/delegation/destroy-observation.js

@@ -0,0 +1,115 @@
+import { createHash } from 'node:crypto';
+import { lstatSync, readFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { agentTmpDirLocations } from '../runs/agent-tmpdir.js';
+import { processCwdUnder, processStartToken, recordedProcessLive } from './process-liveness.js';
+/** A file's identity, content and permission stamp, or why it cannot be read. `ctime` and `mode`
+ * catch a repair that keeps the size and the second (an in-place rewrite, a `chmod`). */
+function fileSignature(path) {
+    try {
+        const info = lstatSync(path);
+        return `${info.ino}:${info.size}:${info.mtimeMs}:${info.ctimeMs}:${info.mode}`;
+    }
+    catch (error) {
+        return error.code ?? 'error';
+    }
+}
+/** A small identity file's bytes and permissions. Each removal attempt rewrites its cleanup
+ * checkpoint atomically (a new inode, the same bytes), so only what such a file says, and who may
+ * read it, is a change; an in-place repair or a `chmod` still is. */
+function contentSignature(path) {
+    try {
+        const info = lstatSync(path);
+        if (!info.isFile() || info.size > 65_536)
+            return `${info.ino}:${info.size}:${info.mtimeMs}:${info.ctimeMs}:${info.mode}`;
+        return `${info.mode}:${createHash('sha256').update(readFileSync(path)).digest('hex')}`;
+    }
+    catch (error) {
+        return error.code ?? 'error';
+    }
+}
+/** A directory's identity and permissions only: a holder working inside it changes its times,
+ * never whether the directory is there, which one it is, or who may read it. */
+function dirSignature(path) {
+    try {
+        const info = lstatSync(path);
+        return `${info.ino}:${info.mode}`;
+    }
+    catch (error) {
+        return error.code ?? 'error';
+    }
+}
+/** The linked worktree's own admin dir, which its `.git` file names: its lock and its ownership
+ * marker live there. */
+function adminDir(worktree) {
+    try {
+        const gitdir = /^gitdir: (.+)$/m.exec(readFileSync(join(worktree, '.git'), 'utf8'))?.[1]?.trim();
+        return gitdir ? resolve(worktree, gitdir) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Everything a destroy attempt's outcome depends on that a stat or a small file read can see:
+ * the worker's record (minus `destroy`, which every attempt rewrites), the parent's receipt, the
+ * execution checkpoint, the process record, the scratch locations, the worktree and its own admin
+ * dir, lock and ownership marker and, given the repository's common Git dir, the ownership receipt
+ * and its cleanup checkpoint, the branch ref, `packed-refs`, the branch reflog and the
+ * linked-worktree admin dirs. Synchronous, with no git and no `/proc` scan. The worktree mutation
+ * lock is not here: every full attempt takes it, so its stamp would change on every attempt.
+ */
+export function observeDestroy({ store, dataDir, commonDir, workerId }) {
+    const run = store.getRun(workerId);
+    if (run?.delegation?.role !== 'worker')
+        return JSON.stringify({ status: run?.status, role: run?.delegation?.role });
+    const { destroy: _destroy, ...delegation } = run.delegation;
+    const parent = store.getRun(delegation.parentRunId);
+    const receipt = parent?.delegation?.role === 'root' ? parent.delegation.receipts.find(entry => entry.workerId === workerId) : undefined;
+    const execution = store.readWorkerExecution(workerId);
+    const { path, branch, resourceId } = delegation.workspace;
+    const admin = adminDir(path);
+    return JSON.stringify({
+        status: run.status, delegation,
+        receipt: receipt ? receipt.deletion ?? 'present' : 'absent',
+        execution: execution ?? 'absent',
+        processes: execution ? store.readWorkerProcesses(workerId, execution.generation) : 'absent',
+        scratch: agentTmpDirLocations(dataDir, workerId).map(dirSignature),
+        worktree: dirSignature(path),
+        admin: admin ? [fileSignature(admin), fileSignature(join(admin, 'locked')), contentSignature(join(admin, 'cezar-owned-resource'))] : 'absent',
+        ...(commonDir ? { git: [
+                contentSignature(join(commonDir, 'cezar-owned-workspaces', `${resourceId}.json`)),
+                contentSignature(join(commonDir, 'cezar-owned-workspaces', `${resourceId}.cleanup.json`)),
+                fileSignature(join(commonDir, 'refs/heads', branch)),
+                fileSignature(join(commonDir, 'packed-refs')),
+                fileSignature(join(commonDir, 'logs/refs/heads', branch)),
+                fileSignature(join(commonDir, 'worktrees')),
+            ] } : {}),
+    });
+}
+/** The holders a failed attempt named, pinned to their current incarnation. */
+export function recordHolders(pids) {
+    return pids.map(pid => { const startToken = processStartToken(pid); return { pid, ...(startToken ? { startToken } : {}) }; });
+}
+/**
+ * Every holder the last attempt named still holds: the same live process and, unless it belongs to
+ * the generation's own process record (which blocks wherever it works), still working under the
+ * worktree or a scratch location. A holder that exited, was replaced or moved away is a change.
+ * One `readlink` (Linux) or one-process `lsof` (darwin) per holder; on win32, whose scan names no
+ * holder, only recorded processes reach this, and liveness decides.
+ */
+export function holdersStillHold({ store, dataDir, workerId, holders }) {
+    if (!holders.length)
+        return true;
+    const run = store.getRun(workerId);
+    if (run?.delegation?.role !== 'worker')
+        return false;
+    const execution = store.readWorkerExecution(workerId);
+    const record = execution ? store.readWorkerProcesses(workerId, execution.generation) : 'absent';
+    const recorded = typeof record === 'string' ? [] : [record.controller, ...record.processes];
+    const paths = [run.delegation.workspace.path, ...agentTmpDirLocations(dataDir, workerId)];
+    // A recorded entry speaks for a holder only while it is that same incarnation: a reused PID is not the generation's.
+    const inRecord = (holder) => recorded.some(entry => entry.pid === holder.pid && recordedProcessLive(entry));
+    return holders.every(holder => recordedProcessLive(holder) && (inRecord(holder) || processCwdUnder(holder.pid, paths) !== false));
+}
+//# sourceMappingURL=destroy-observation.js.map

package/dist/delegation/destroy-observation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroy-observation.js","sourceRoot":"","sources":["../../src/delegation/destroy-observation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAwB,MAAM,uBAAuB,CAAC;AAUtH;yFACyF;AACzF,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC;QAAC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IACrH,OAAO,KAAK,EAAE,CAAC;QAAC,OAAQ,KAA+B,CAAC,IAAI,IAAI,OAAO,CAAC;IAAC,CAAC;AAC5E,CAAC;AACD;;qEAEqE;AACrE,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM;YAAE,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACzH,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACzF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAQ,KAA+B,CAAC,IAAI,IAAI,OAAO,CAAC;IAAC,CAAC;AAC9E,CAAC;AACD;gFACgF;AAChF,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QAAC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IACxE,OAAO,KAAK,EAAE,CAAC;QAAC,OAAQ,KAA+B,CAAC,IAAI,IAAI,OAAO,CAAC;IAAC,CAAC;AAC5E,CAAC;AAED;wBACwB;AACxB,SAAS,QAAQ,CAAC,QAAgB;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACjG,OAAO,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAA0F;IAC5J,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,GAAG,EAAE,UAAU,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACpH,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;IAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxI,MAAM,SAAS,GAAG,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC;IAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,QAAQ;QAC3D,SAAS,EAAE,SAAS,IAAI,QAAQ;QAChC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ;QAC3F,OAAO,EAAE,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;QAClE,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC;QAC5B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ;QAC7I,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE;gBACrB,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;gBACjF,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,EAAE,GAAG,UAAU,eAAe,CAAC,CAAC;gBACzF,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;gBACpD,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBAC7C,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;gBACzD,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;aAC5C,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACV,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAChI,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAA+F;IACjK,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,GAAG,EAAE,UAAU,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,SAAS,GAAG,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChG,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1F,qHAAqH;IACrH,MAAM,QAAQ,GAAG,CAAC,MAAuB,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7H,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;AACpI,CAAC"}

package/dist/delegation/effort.d.ts

@@ -0,0 +1 @@
+export declare function parseDelegationEffort(value: string | undefined | null): "high" | "low" | "max" | "medium" | "xhigh" | undefined;

package/dist/delegation/effort.js

@@ -0,0 +1,11 @@
+import { parseEffort } from '../contract/index.js';
+import { DelegationPolicyError } from './policy.js';
+export function parseDelegationEffort(value) {
+    const parsed = parseEffort(value);
+    const trimmed = value?.trim().toLowerCase();
+    if (trimmed && trimmed !== 'auto' && parsed === undefined) {
+        throw new DelegationPolicyError('invalid_input', 'Invalid effort');
+    }
+    return parsed;
+}
+//# sourceMappingURL=effort.js.map

package/dist/delegation/effort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effort.js","sourceRoot":"","sources":["../../src/delegation/effort.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,UAAU,qBAAqB,CAAC,KAAgC;IACpE,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,OAAO,IAAI,OAAO,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1D,MAAM,IAAI,qBAAqB,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}