@hearsay-tools/squawk 0.0.0-stage → 0.17.0-pr3058.5683

package/dist/delegation/idle-test-app.js

@@ -0,0 +1,186 @@
+import { POWERSHELL, powershellEnv } from '../detached-process.js';
+import { spawnSync } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { existsSync, lstatSync, readFileSync, realpathSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+import { setTimeout as delay } from 'node:timers/promises';
+import { processStartToken, stopGroup, leaseIdentity, leaseGroupLive, reclaimTestEnvHolders } from '../detached-process.js';
+import { inspectGeneration } from './process-liveness.js';
+import { windowsStartToken, windowsTestAppHolds } from './windows-test-app.js';
+// Process probes use the host OS even when a test simulates another platform.
+const windowsWatchers = process.platform === 'win32';
+const startToken = (pid) => process.platform === 'win32' ? windowsStartToken(pid) : processStartToken(pid);
+const samePath = (a, b) => process.platform === 'win32' ? a.toLowerCase() === b.toLowerCase() : a === b;
+function present(path) {
+    try {
+        lstatSync(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+function claimIdle(db, start, blocked) {
+    db.exec('PRAGMA busy_timeout=1000');
+    db.exec('BEGIN IMMEDIATE');
+    try {
+        const holders = reclaimTestEnvHolders(db, leaseIdentity, leaseGroupLive);
+        if (holders.length) {
+            blocked(holders);
+            db.exec('COMMIT');
+            return undefined;
+        }
+        const claim = `destroy-${randomUUID()}`;
+        db.prepare('INSERT INTO holders (id, token, pid, start) VALUES (?, ?, ?, ?)').run(claim, randomUUID(), process.pid, start);
+        db.exec('COMMIT');
+        return claim;
+    }
+    catch (error) {
+        db.exec('ROLLBACK');
+        throw error;
+    }
+}
+function readApp(root) {
+    const qa = join(root, '.ai/qa');
+    const database = join(qa, 'test-env-lease.sqlite');
+    const descriptor = join(qa, 'test-env.json');
+    if (!existsSync(database) || !samePath(realpathSync(qa), qa) || !samePath(realpathSync(database), database))
+        return undefined;
+    // Windows has no cwd-holder scan to exclude a surviving descriptor-less app.
+    if (!present(descriptor))
+        return process.platform === 'win32' ? undefined : { app: undefined, pid: null, start: null, database, descriptor };
+    if (!samePath(realpathSync(descriptor), descriptor))
+        return undefined;
+    const app = JSON.parse(readFileSync(descriptor, 'utf8'));
+    if (app?.startedByThisRepo !== true)
+        return undefined;
+    const pid = app.app?.pid;
+    const start = app.app?.start;
+    if (app.status === 'stopped' && pid === undefined && start === undefined) {
+        return { app, pid: null, start: null, database, descriptor };
+    }
+    if (!Number.isSafeInteger(pid) || pid <= 1 || (start !== undefined && typeof start !== 'string'))
+        return undefined;
+    return { app, pid: pid, start: typeof start === 'string' ? start : null, database, descriptor };
+}
+function recordedAppGone(pid, start) {
+    const current = startToken(pid);
+    if (current !== undefined)
+        return start !== null && current !== start;
+    try {
+        process.kill(pid, 0);
+        return false;
+    }
+    catch (error) {
+        return error.code === 'ESRCH';
+    }
+}
+async function stopOwnedApp(root, entry) {
+    if (entry.pid === null)
+        return false;
+    const leader = { pid: entry.pid, start: entry.start };
+    if (recordedAppGone(leader.pid, leader.start)) {
+        if (!await waitForTestAppWatcher(root))
+            return false;
+    }
+    else {
+        if (leader.start === null)
+            return false; // Legacy PID alone never authorizes a signal.
+        const owned = process.platform === 'win32' ? windowsTestAppHolds(leader.pid, leader.start, root)
+            : inspectGeneration({ paths: [root] }).pids.includes(leader.pid);
+        if (!owned || startToken(leader.pid) !== leader.start || !await stopGroup({ pid: leader.pid, start: leader.start }, { graceMs: 1000, readStart: startToken }))
+            return false;
+    }
+    entry.app.status = 'stopped';
+    delete entry.app.app.pid;
+    delete entry.app.app.start;
+    writeFileSync(entry.descriptor, JSON.stringify(entry.app, null, 2) + '\n');
+    return true;
+}
+/** Claim the checkout's test environment while removing it. Any uncertain state fails closed. */
+export async function withIdleTestApp(root, remove) {
+    let db;
+    let claim;
+    let claimDb;
+    let stopped = false;
+    const database = join(root, '.ai/qa/test-env-lease.sqlite');
+    let reason = `Test environment metadata could not be verified: ${database} or ${join(root, '.ai/qa/test-env.json')}; keep the checkout and repair the metadata before retrying destroy`;
+    let busy = present(join(root, '.ai/qa/test-env.json')) || present(join(root, '.ai/qa/test-env-lease.sqlite'));
+    try {
+        try {
+            const entry = readApp(root);
+            const ownStart = entry && startToken(process.pid);
+            if (entry && ownStart) {
+                db = new DatabaseSync(entry.database);
+                claim = claimIdle(db, ownStart, holders => {
+                    const summary = holders.slice(0, 8).map(holder => `pid ${holder.pid} start ${JSON.stringify(String(holder.start ?? 'unknown').slice(0, 128))} group ${JSON.stringify(String(holder.pgid ?? 'none').slice(0, 128))}`).join(', ');
+                    reason = `Test environment lease ${entry.database} is held by ${summary}${holders.length > 8 ? ', …' : ''}; wait for holders and their groups to exit, then retry destroy`;
+                });
+                // The durable row protects the environment after closing SQLite. Keeping the file
+                // open here prevents Windows from removing the checkout that contains it.
+                if (claim) {
+                    claimDb = entry.database;
+                    db.close();
+                    db = undefined;
+                    // A descriptor alone cannot authorize signalling a process outside this checkout.
+                    stopped = entry.pid !== null && await stopOwnedApp(root, entry);
+                    busy = entry.pid !== null && !stopped;
+                }
+            }
+        }
+        catch { /* Unverifiable metadata or a failed stop must block even without a cwd scan. */ }
+        return await remove(stopped, busy, busy ? reason : undefined);
+    }
+    finally {
+        if (claim && claimDb) {
+            try {
+                if (existsSync(claimDb) && samePath(realpathSync(claimDb), claimDb)) {
+                    const cleanup = new DatabaseSync(claimDb);
+                    try {
+                        cleanup.prepare('DELETE FROM holders WHERE id = ?').run(claim);
+                    }
+                    finally {
+                        cleanup.close();
+                    }
+                }
+            }
+            catch { /* checkout may already be gone */ }
+        }
+        db?.close();
+    }
+}
+/** Read command lines, not cwd: production watchers run from the system temp directory.
+ * This probe never authorizes a signal. Ambiguous matches only delay/refuse removal. */
+function watcherPresent(root) {
+    const windows = windowsWatchers;
+    const script = "$ErrorActionPreference='Stop'; ConvertTo-Json -Compress -InputObject @(Get-CimInstance Win32_Process -Filter \"Name = 'node.exe'\" | ForEach-Object { if (!$_.CommandLine) { throw 'Unreadable node command line' }; $_.CommandLine })";
+    const result = windows
+        ? spawnSync(POWERSHELL, ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(script, 'utf16le').toString('base64')], { env: powershellEnv(), encoding: 'utf8', timeout: 10_000, windowsHide: true })
+        : spawnSync('ps', ['-axww', '-o', 'args='], { encoding: 'utf8', timeout: 2_000 });
+    if (result.status !== 0)
+        return true;
+    try {
+        const lines = windows ? JSON.parse(result.stdout || '[]') : result.stdout.split('\n');
+        if (!Array.isArray(lines))
+            return true;
+        const normalize = (value) => windows ? value.replaceAll('\\', '/').toLowerCase() : value;
+        return lines.some(line => line.includes('test-env-lease.mjs') && line.includes('watch-app') && normalize(line).includes(normalize(root)));
+    }
+    catch {
+        return true;
+    }
+}
+/** A timeout or unreadable process table keeps the checkout intact for a later retry. */
+export async function waitForTestAppWatcher(root) {
+    const deadline = Date.now() + 32_000;
+    while (watcherPresent(root)) {
+        if (Date.now() >= deadline)
+            return false;
+        await delay(250);
+    }
+    return true;
+}
+//# sourceMappingURL=idle-test-app.js.map

package/dist/delegation/idle-test-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idle-test-app.js","sourceRoot":"","sources":["../../src/delegation/idle-test-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC5H,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE/E,8EAA8E;AAC9E,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACrD,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;AACnH,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAExH,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACrC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACtG,CAAC;AAED,SAAS,SAAS,CAAC,EAAgB,EAAE,KAAa,EAAE,OAAoE;IACtH,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;QACxC,EAAE,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3H,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAC,OAAO,KAAK,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACvD,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9H,6EAA6E;IAC7E,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAC7I,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,IAAI,GAAG,EAAE,iBAAiB,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC;IAAC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;IACvD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACnH,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAa,EAAE,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAC5G,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,KAAoB;IACxD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,CAAC;IACtE,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC3C,OAAO,KAAK,EAAE,CAAC;QAAC,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAA8C;IACtF,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACtD,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,qBAAqB,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,CAAC,8CAA8C;QACvF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;YAC9F,CAAC,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9K,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;IAAC,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;IACnF,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,IAAY,EAAE,MAAwE;IAC7H,IAAI,EAA4B,CAAC;IAAC,IAAI,KAAyB,CAAC;IAAC,IAAI,OAA2B,CAAC;IAAC,IAAI,OAAO,GAAG,KAAK,CAAC;IACtH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC;IAC5D,IAAI,MAAM,GAAG,oDAAoD,QAAQ,OAAO,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,qEAAqE,CAAC;IACxL,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC,CAAC;IAC9G,IAAI,CAAC;QACJ,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,KAAK,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACtB,EAAE,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtC,KAAK,GAAG,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;oBACxC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,MAAM,CAAC,GAAG,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChO,MAAM,GAAG,0BAA0B,KAAK,CAAC,QAAQ,eAAe,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,iEAAiE,CAAC;gBAC7K,CAAC,CAAC,CAAC;gBACH,kFAAkF;gBAClF,0EAA0E;gBAC1E,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC;oBAAC,EAAE,CAAC,KAAK,EAAE,CAAC;oBAAC,EAAE,GAAG,SAAS,CAAC;oBACrD,kFAAkF;oBAClF,OAAO,GAAG,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAChE,IAAI,GAAG,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC;gBACxC,CAAC;YACH,CAAC;QACF,CAAC;QAAC,MAAM,CAAC,CAAC,gFAAgF,CAAC,CAAC;QAC5F,OAAO,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;YACO,CAAC;QACP,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;oBACpE,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;oBAC1C,IAAI,CAAC;wBAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAAC,CAAC;4BAAS,CAAC;wBAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBAAC,CAAC;gBACtG,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;QAChD,CAAC;QACD,EAAE,EAAE,KAAK,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;wFACwF;AACxF,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,OAAO,GAAG,eAAe,CAAC;IAChC,MAAM,MAAM,GAAG,wOAAwO,CAAC;IACxP,MAAM,MAAM,GAAG,OAAO;QACpB,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAChN,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAa,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACjG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5I,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,OAAO,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/delegation/input.d.ts

@@ -0,0 +1,12 @@
+import { type AgentInput } from '../contract/index.js';
+import type { RunRecord } from '../runs/store.ts';
+/** Pure admission: callers persist the returned queue before attempting delivery. */
+export declare function enqueueAgentInput(run: RunRecord, input: AgentInput): AgentInput[];
+export declare function nextAgentInput(queue: readonly AgentInput[], pendingHumanAsk: boolean): AgentInput | undefined;
+export declare function hasLiveInboxClaim(input: AgentInput, now?: number): boolean;
+/** Drain a bounded FIFO snapshot of conversations into one provider turn. Lifecycle
+ * inputs remain barriers, and an individually valid large message is never split. */
+export declare function agentInputBatch(queue: readonly AgentInput[], format: (input: AgentInput) => string, now?: number): {
+    inputs: AgentInput[];
+    text: string;
+} | undefined;

package/dist/delegation/input.js

@@ -0,0 +1,50 @@
+import { agentInputSchema } from '../contract/index.js';
+import { DelegationPolicyError } from './policy.js';
+/** Pure admission: callers persist the returned queue before attempting delivery. */
+export function enqueueAgentInput(run, input) {
+    if (!['queued', 'running', 'waiting'].includes(run.status) ||
+        (run.delegation?.role === 'worker' && run.delegation.destroy)) {
+        throw new DelegationPolicyError('incompatible_state', 'run state does not accept agent input');
+    }
+    const parsed = agentInputSchema.parse(input);
+    if (parsed.deliveredAt)
+        throw new DelegationPolicyError('invalid_input', 'new input cannot already be delivered');
+    const queue = run.agentInputs ?? [];
+    if (queue.some(entry => entry.id === parsed.id))
+        throw new DelegationPolicyError('invalid_input', 'duplicate input ID');
+    if (queue.filter(entry => !entry.deliveredAt).length >= 32) {
+        throw new DelegationPolicyError('capacity_limit', 'agent input capacity reached');
+    }
+    return [...queue, parsed];
+}
+export function nextAgentInput(queue, pendingHumanAsk) {
+    return pendingHumanAsk ? undefined : queue.find(input => !input.deliveredAt);
+}
+export function hasLiveInboxClaim(input, now = Date.now()) {
+    return !!input.inboxClaim && !input.inboxClaim.acknowledgedAt && Date.parse(input.inboxClaim.expiresAt) > now;
+}
+/** Drain a bounded FIFO snapshot of conversations into one provider turn. Lifecycle
+ * inputs remain barriers, and an individually valid large message is never split. */
+export function agentInputBatch(queue, format, now = Date.now()) {
+    const inputs = [];
+    const parts = [];
+    let length = 0;
+    for (const input of queue) {
+        if (input.deliveredAt)
+            continue;
+        if (hasLiveInboxClaim(input, now))
+            break;
+        if (inputs.length && (!inputs[0].conversation || !input.conversation))
+            break;
+        const text = format(input);
+        if (inputs.length && length + 2 + text.length > 100_000)
+            break;
+        inputs.push(input);
+        parts.push(text);
+        length += text.length + (parts.length > 1 ? 2 : 0);
+        if (inputs.length === 32)
+            break;
+    }
+    return inputs.length ? { inputs, text: parts.join('\n\n') } : undefined;
+}
+//# sourceMappingURL=input.js.map

package/dist/delegation/input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.js","sourceRoot":"","sources":["../../src/delegation/input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAmB,MAAM,yCAAyC,CAAC;AAE5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,GAAc,EAAE,KAAiB;IACjE,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;QACxD,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,uCAAuC,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,WAAW;QAAE,MAAM,IAAI,qBAAqB,CAAC,eAAe,EAAE,uCAAuC,CAAC,CAAC;IAClH,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;IACxH,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA4B,EAAE,eAAwB;IACnF,OAAO,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACnE,OAAO,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;AAChH,CAAC;AAED;qFACqF;AACrF,MAAM,UAAU,eAAe,CAAC,KAA4B,EAAE,MAAqC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACnH,MAAM,MAAM,GAAiB,EAAE,CAAC;IAAC,MAAM,KAAK,GAAa,EAAE,CAAC;IAAC,IAAI,MAAM,GAAG,CAAC,CAAC;IAC5E,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,WAAW;YAAE,SAAS;QAChC,IAAI,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,MAAM;QACzC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;YAAE,MAAM;QAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,OAAO;YAAE,MAAM;QAC/D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM;IAClC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC"}

package/dist/delegation/park-notice.d.ts

@@ -0,0 +1,45 @@
+import type { ConversationMessage, Wait, WorkerWaitEntry } from '../contract/index.js';
+import type { RunEvent, RunStore } from '../runs/store.ts';
+/** How much of the worker's last message a park notice quotes. */
+export declare const PARK_NOTICE_EXCERPT_MAX = 1000;
+/**
+ * A parent waiting on a worker wakes only on its outcome or the wait's deadline, so a worker that
+ * parks before finishing leaves its parent asleep (hearsay-tools/cezarion#1327). Cezar then tells
+ * the parent itself, as a progress message from the worker: it wakes the parent and closes no
+ * wait. The ID derives from the worker and the parent's wait, so one wait gets at most one notice
+ * from each worker, and posting it again after a restart finds the same message.
+ */
+export declare function parkNoticeId(workerRunId: string, waitId: string): string;
+/** The parent's first open worker wait that selects the worker, by its ID or by a request sent to
+ *  it, and holds no park notice from it yet. */
+export declare function parkNoticeWait(workerRunId: string, waits: readonly Wait[], messages: readonly ConversationMessage[]): WorkerWaitEntry | undefined;
+/** Whether the worker sent its parent a message since `since`, the start of its parking turn. A
+ *  turn that already said something needs no notice. */
+export declare function messagedParentSince(messages: readonly ConversationMessage[], workerRunId: string, parentRunId: string, since: string | undefined): boolean;
+/** The turn the worker parked in: when it started, and its last top-level assistant text. An
+ *  event log without a `turn.started` gives no start, and the whole log is that turn. */
+export declare function parkingTurn(events: readonly RunEvent[]): {
+    startedAt?: string;
+    text?: string;
+};
+/** The worker's own words, without Cezar's control lines, cut to `PARK_NOTICE_EXCERPT_MAX`. */
+export declare function parkNoticeExcerpt(text: string): string | undefined;
+/** What the parent reads: who parked, what it waits on, what it last said, and what to do next. */
+export declare function formatParkNoticeText(input: {
+    workerRunId: string;
+    waitId: string;
+    waits: readonly Wait[];
+    lastText?: string;
+}): string;
+export declare function parkNoticeMessage(input: {
+    workerRunId: string;
+    parentRunId: string;
+    waitId: string;
+    waits: readonly Wait[];
+    lastText?: string;
+    now: string;
+    redact(text: string): string;
+}): ConversationMessage;
+/** A peer already took the notice's deterministic ID in the parent conversation (hearsay-tools/cezarion#1990
+ *  review): no notice can be sent for this wait, and the worker's log says so once. */
+export declare function parkNoticeIdInUse(store: Pick<RunStore, 'appendEvent' | 'hasProjection'>, workerId: string, waitId: string): void;

package/dist/delegation/park-notice.js

@@ -0,0 +1,81 @@
+import { commandText } from '../home/command.js';
+import { WAIT_KINDS } from '../workflows/run/wait-kinds.js';
+import { createHash } from 'node:crypto';
+import { describeWait, isCezarHumanWait } from '../workflows/waits.js';
+import { uuidFrom } from './questions.js';
+import { topLevelAssistantText } from './results.js';
+/** How much of the worker's last message a park notice quotes. */
+export const PARK_NOTICE_EXCERPT_MAX = 1000;
+/**
+ * A parent waiting on a worker wakes only on its outcome or the wait's deadline, so a worker that
+ * parks before finishing leaves its parent asleep (hearsay-tools/cezarion#1327). Cezar then tells
+ * the parent itself, as a progress message from the worker: it wakes the parent and closes no
+ * wait. The ID derives from the worker and the parent's wait, so one wait gets at most one notice
+ * from each worker, and posting it again after a restart finds the same message.
+ */
+export function parkNoticeId(workerRunId, waitId) {
+    return uuidFrom(`worker-park:${workerRunId}:${waitId}`);
+}
+/** The parent's first open worker wait that selects the worker, by its ID or by a request sent to
+ *  it, and holds no park notice from it yet. */
+export function parkNoticeWait(workerRunId, waits, messages) {
+    const selects = (wait) => wait.workerIds ? wait.workerIds.includes(workerRunId)
+        : (wait.requestIds ?? []).some(id => messages.some(message => message.id === id && message.recipientRunId === workerRunId));
+    const noticed = (wait) => { const id = parkNoticeId(workerRunId, wait.id); return messages.some(message => message.id === id); };
+    return WAIT_KINDS.worker.selectOpen(waits).find(wait => selects(wait) && !noticed(wait));
+}
+/** Whether the worker sent its parent a message since `since`, the start of its parking turn. A
+ *  turn that already said something needs no notice. */
+export function messagedParentSince(messages, workerRunId, parentRunId, since) {
+    return since !== undefined && messages.some(message => message.senderRunId === workerRunId && message.recipientRunId === parentRunId && message.createdAt >= since);
+}
+/** The turn the worker parked in: when it started, and its last top-level assistant text. An
+ *  event log without a `turn.started` gives no start, and the whole log is that turn. */
+export function parkingTurn(events) {
+    let text;
+    for (let index = events.length - 1; index >= 0; index--) {
+        const event = events[index];
+        if (event.type === 'turn.started')
+            return { startedAt: event.ts, ...(text === undefined ? {} : { text }) };
+        const said = text === undefined ? topLevelAssistantText(event) : undefined;
+        if (said?.trim())
+            text = said;
+    }
+    return text === undefined ? {} : { text };
+}
+/** The worker's own words, without Cezar's control lines, cut to `PARK_NOTICE_EXCERPT_MAX`. */
+export function parkNoticeExcerpt(text) {
+    const prose = text.split('\n').filter(line => !line.trim().startsWith('CEZ:')).join('\n').trim();
+    if (!prose)
+        return undefined;
+    return prose.length > PARK_NOTICE_EXCERPT_MAX ? `${prose.slice(0, PARK_NOTICE_EXCERPT_MAX)}…` : prose;
+}
+/** What the parent reads: who parked, what it waits on, what it last said, and what to do next. */
+export function formatParkNoticeText(input) {
+    // A worker parked on a question gets no notice; its question reaches the parent instead.
+    const open = input.waits.filter(wait => wait.phase === 'open' && !WAIT_KINDS[wait.kind].userAnswers && !isCezarHumanWait(wait));
+    const excerpt = input.lastText === undefined ? undefined : parkNoticeExcerpt(input.lastText);
+    return [
+        `Cezar notice: your worker ${input.workerRunId} parked before finishing. Your wait ${input.waitId} stays open; this message closes no wait.`,
+        open.length ? `It waits on: ${open.map(describeWait).join('; ')}.` : 'It has no open wait: it waits for a message from you.',
+        ...(excerpt === undefined ? [] : ['Its last message:', excerpt]),
+        commandText(`Check it with cez worker inspect ${input.workerRunId}, or instruct it with cez message request ${input.workerRunId} '<instruction>' --id <new-message-UUID>.`),
+    ].join('\n');
+}
+export function parkNoticeMessage(input) {
+    const id = parkNoticeId(input.workerRunId, input.waitId);
+    const requestHash = createHash('sha256')
+        .update(JSON.stringify({ senderRunId: input.workerRunId, recipientRunId: input.parentRunId, parkNotice: input.waitId }))
+        .digest('hex');
+    return { id, senderRunId: input.workerRunId, recipientRunId: input.parentRunId, kind: 'progress',
+        text: input.redact(formatParkNoticeText(input)), createdAt: input.now, requestHash, state: 'accepted' };
+}
+/** A peer already took the notice's deterministic ID in the parent conversation (hearsay-tools/cezarion#1990
+ *  review): no notice can be sent for this wait, and the worker's log says so once. */
+export function parkNoticeIdInUse(store, workerId, waitId) {
+    const projectionId = `park-notice-id-in-use:${waitId}`;
+    if (store.hasProjection(workerId, projectionId))
+        return;
+    store.appendEvent(workerId, { type: 'note', tone: 'warning', projectionId, message: 'Parked, but the park notice ID is already in use in the parent conversation: no park notice was sent.' });
+}
+//# sourceMappingURL=park-notice.js.map

package/dist/delegation/park-notice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"park-notice.js","sourceRoot":"","sources":["../../src/delegation/park-notice.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD,kEAAkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAE5C;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,WAAmB,EAAE,MAAc;IAC9D,OAAO,QAAQ,CAAC,eAAe,WAAW,IAAI,MAAM,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;gDACgD;AAChD,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,KAAsB,EAAE,QAAwC;IAClH,MAAM,OAAO,GAAG,CAAC,IAAqB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9F,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,cAAc,KAAK,WAAW,CAAC,CAAC,CAAC;IAC9H,MAAM,OAAO,GAAG,CAAC,IAAqB,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClJ,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED;wDACwD;AACxD,MAAM,UAAU,mBAAmB,CAAC,QAAwC,EAAE,WAAmB,EAAE,WAAmB,EAAE,KAAyB;IAC/I,OAAO,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,IAAI,OAAO,CAAC,cAAc,KAAK,WAAW,IAAI,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;AACtK,CAAC;AAED;yFACyF;AACzF,MAAM,UAAU,WAAW,CAAC,MAA2B;IACrD,IAAI,IAAwB,CAAC;IAC7B,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,IAAI,EAAE,IAAI,EAAE;YAAE,IAAI,GAAG,IAAI,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,KAAK,CAAC,MAAM,GAAG,uBAAuB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AACxG,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,oBAAoB,CAAC,KAAyF;IAC5H,yFAAyF;IACzF,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAChI,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7F,OAAO;QACL,6BAA6B,KAAK,CAAC,WAAW,uCAAuC,KAAK,CAAC,MAAM,2CAA2C;QAC5I,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,uDAAuD;QAC5H,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAChE,WAAW,CAAC,oCAAoC,KAAK,CAAC,WAAW,6CAA6C,KAAK,CAAC,WAAW,2CAA2C,CAAC;KAC5K,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAEjC;IACC,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;SACrC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;SACvH,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU;QAC9F,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC5G,CAAC;AAED;uFACuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,KAAsD,EAAE,QAAgB,EAAE,MAAc;IACxH,MAAM,YAAY,GAAG,yBAAyB,MAAM,EAAE,CAAC;IACvD,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC;QAAE,OAAO;IACxD,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,uGAAuG,EAAE,CAAC,CAAC;AACjM,CAAC"}

package/dist/delegation/policy.d.ts

@@ -0,0 +1,27 @@
+import type { DelegationErrorResponse, WorkerOperation, WorkerCollectedResult, ModelChoices } from '../contract/index.js';
+import type { RunRecord } from '../runs/store.ts';
+import { type Caller } from './credentials.ts';
+export type { WorkerOperation } from '../contract/index.js';
+export declare class DelegationPolicyError extends Error {
+    readonly code: DelegationErrorResponse['code'];
+    readonly modelChoices?: ModelChoices | undefined;
+    constructor(code: DelegationErrorResponse['code'], message: string, modelChoices?: ModelChoices | undefined);
+}
+/** Task access (hearsay-tools/cezarion#2784): the human's per-task switches, read at every call. */
+export declare const WORKERS_OFF = "Cezar workers are off for this task. A human can turn them on in the task menu.";
+export declare const MESSAGING_OFF = "Task messaging is off for this task. A human can turn it on in the task menu.";
+export declare function requireWorkersAllowed(parent: RunRecord): void;
+export declare function requireMessagingAllowed(run: RunRecord): void;
+/** projectId is the service's trusted store context; RunRecord itself has no project field. */
+export declare function authorizeWorker(caller: Caller, target: RunRecord | undefined, operation: WorkerOperation, parent: RunRecord | undefined, projectId: string): void;
+/** Listing is an inspection of the authenticated parent's durable receipts. */
+export declare function authorizeWorkerList(caller: Caller, parent: RunRecord | undefined, projectId: string): void;
+/** Check before receipt lookup: replay skips the creation cap, never authority or lifecycle. */
+export declare function authorizeSpawnReplay(caller: Caller, parent: RunRecord | undefined, projectId: string): void;
+/** Authorizes a NEW creation against reclaimable capacity and the creation ceiling (#816).
+ * The service resolves existing idempotency receipts before these limits. */
+export declare function authorizeSpawn(caller: Caller, parent: RunRecord | undefined, projectId: string, getRun: (id: string) => RunRecord | undefined): void;
+/** Cancellation and settled receipt reads share ownership and the wait grant, not registration's active-session requirement. */
+export declare function authorizeCancelWait(caller: Caller, parent: RunRecord | undefined, projectId: string): void;
+/** Retained results require both durable ownership and an actual parent-owned payload. */
+export declare function authorizeRetainedResult(caller: Caller, parent: RunRecord | undefined, projectId: string, workerId: string, result: WorkerCollectedResult | undefined): void;

package/dist/delegation/policy.js

@@ -0,0 +1,110 @@
+import { delegationStateSchema } from '../contract/index.js';
+import { messagingAllowed, workersAllowed } from '../contract/index.js';
+import { isAuthenticatedCaller } from './credentials.js';
+import { capacityError, workerCapacity } from './capacity.js';
+export class DelegationPolicyError extends Error {
+    code;
+    modelChoices;
+    constructor(code, message, modelChoices) {
+        super(message);
+        this.code = code;
+        this.modelChoices = modelChoices;
+        this.name = 'DelegationPolicyError';
+    }
+}
+/** Task access (hearsay-tools/cezarion#2784): the human's per-task switches, read at every call. */
+export const WORKERS_OFF = 'Cezar workers are off for this task. A human can turn them on in the task menu.';
+export const MESSAGING_OFF = 'Task messaging is off for this task. A human can turn it on in the task menu.';
+export function requireWorkersAllowed(parent) {
+    if (!workersAllowed(parent))
+        throw new DelegationPolicyError('incompatible_state', WORKERS_OFF);
+}
+export function requireMessagingAllowed(run) {
+    if (!messagingAllowed(run))
+        throw new DelegationPolicyError('incompatible_state', MESSAGING_OFF);
+}
+function denyScope() {
+    // Deliberately identical for absent, malformed, wrong-project and unrelated records.
+    throw new DelegationPolicyError('denied_scope', 'Worker scope denied');
+}
+function requireRootAuthority(caller, parent, projectId, operation) {
+    if (!isAuthenticatedCaller(caller) || caller.projectId !== projectId || !parent || caller.runId !== parent.id)
+        denyScope();
+    const parsed = delegationStateSchema.safeParse(parent.delegation);
+    if (!parsed.success || parsed.data.role !== 'root' || !parsed.data.permissions.includes(operation))
+        denyScope();
+}
+function requireActiveParent(parent) {
+    if (parent.delegation?.role === 'root' && parent.delegation.historyDeletion) {
+        throw new DelegationPolicyError('incompatible_state', 'Parent history deletion is pending; retry deletion');
+    }
+    if (parent.status !== 'running' && parent.status !== 'waiting') {
+        throw new DelegationPolicyError('incompatible_state', 'Parent session is not active');
+    }
+}
+/** projectId is the service's trusted store context; RunRecord itself has no project field. */
+export function authorizeWorker(caller, target, operation, parent, projectId) {
+    requireRootAuthority(caller, parent, projectId, operation);
+    if (operation === 'spawn' || !target || !parent || target.id === parent.id)
+        denyScope();
+    const parsed = delegationStateSchema.safeParse(target.delegation);
+    if (!parsed.success || parsed.data.role !== 'worker' ||
+        parsed.data.parentRunId !== parent.id || parsed.data.workspace.ownerRunId !== target.id)
+        denyScope();
+    requireActiveParent(parent);
+    if (parent.delegation?.role === 'root' && parent.delegation.finishRequestedAt && (operation === 'steer' || operation === 'wait')) {
+        throw new DelegationPolicyError('incompatible_state', 'Parent finish is pending');
+    }
+    if (operation === 'steer' && (parsed.data.destroy || !['queued', 'running', 'waiting'].includes(target.status))) {
+        const instruction = !parsed.data.destroy && !target.stopping && ['review', 'done', 'failed'].includes(target.status)
+            ? ` To resume it with a new instruction, run worker resume ${target.id} "<instruction>" --id <new-message-UUID>; use a new message ID.`
+            : '';
+        throw new DelegationPolicyError('incompatible_state', `Worker no longer accepts steering.${instruction}`);
+    }
+    // Reads, wait and idempotent stop/destroy remain scoped but are allowed through destruction.
+    // This grants no permission to relaunch or delete resources without the manager/Git barriers.
+}
+/** Listing is an inspection of the authenticated parent's durable receipts. */
+export function authorizeWorkerList(caller, parent, projectId) {
+    requireRootAuthority(caller, parent, projectId, 'inspect');
+    requireActiveParent(parent);
+}
+/** Check before receipt lookup: replay skips the creation cap, never authority or lifecycle. */
+export function authorizeSpawnReplay(caller, parent, projectId) {
+    requireRootAuthority(caller, parent, projectId, 'spawn');
+    if (!parent)
+        denyScope();
+    requireActiveParent(parent);
+    if (parent.delegation?.role === 'root' && parent.delegation.finishRequestedAt) {
+        throw new DelegationPolicyError('incompatible_state', 'Parent finish is pending');
+    }
+}
+/** Authorizes a NEW creation against reclaimable capacity and the creation ceiling (#816).
+ * The service resolves existing idempotency receipts before these limits. */
+export function authorizeSpawn(caller, parent, projectId, getRun) {
+    authorizeSpawnReplay(caller, parent, projectId);
+    if (parent?.delegation?.role !== 'root')
+        denyScope();
+    // Read again at the serial queue head and just before acceptance: a switch turned off while a
+    // spawn waited refuses it. A replayed request ID skips this, as accepted work finishes.
+    requireWorkersAllowed(parent);
+    const refusal = capacityError(workerCapacity(parent, getRun));
+    if (refusal)
+        throw new DelegationPolicyError('capacity_limit', refusal);
+}
+/** Cancellation and settled receipt reads share ownership and the wait grant, not registration's active-session requirement. */
+export function authorizeCancelWait(caller, parent, projectId) {
+    requireRootAuthority(caller, parent, projectId, 'wait');
+    if (parent?.delegation?.role === 'root' && parent.delegation.historyDeletion) {
+        throw new DelegationPolicyError('incompatible_state', 'Parent history deletion is pending; retry deletion');
+    }
+}
+/** Retained results require both durable ownership and an actual parent-owned payload. */
+export function authorizeRetainedResult(caller, parent, projectId, workerId, result) {
+    requireRootAuthority(caller, parent, projectId, 'inspect');
+    if (!parent || parent.delegation?.role !== 'root' || !parent.delegation.receipts.some(receipt => receipt.workerId === workerId) ||
+        !result || result.parentRunId !== parent.id || result.workerId !== workerId)
+        denyScope();
+    requireActiveParent(parent);
+}
+//# sourceMappingURL=policy.js.map

package/dist/delegation/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/delegation/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAEhF,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAE7F,OAAO,EAAE,qBAAqB,EAAe,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAI9D,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACzB,IAAI;IAA6D,YAAY;IAAlG,YAAqB,IAAqC,EAAE,OAAe,EAAW,YAA2B;QAC/G,KAAK,CAAC,OAAO,CAAC,CAAC;oBADI,IAAI;4BAA6D,YAAY;QAEhG,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,oGAAoG;AACpG,MAAM,CAAC,MAAM,WAAW,GAAG,iFAAiF,CAAC;AAC7G,MAAM,CAAC,MAAM,aAAa,GAAG,+EAA+E,CAAC;AAC7G,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;AAClG,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,GAAc;IACpD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,SAAS;IAChB,qFAAqF;IACrF,MAAM,IAAI,qBAAqB,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc,EAAE,MAA6B,EAAE,SAAiB,EAAE,SAA0B;IACxH,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,EAAE;QAAE,SAAS,EAAE,CAAC;IAC3H,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,SAAS,EAAE,CAAC;AAClH,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAiB;IAC5C,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;QAC5E,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,oDAAoD,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,8BAA8B,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,MAA6B,EAAE,SAA0B,EAAE,MAA6B,EAAE,SAAiB;IACzJ,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3D,IAAI,SAAS,KAAK,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE;QAAE,SAAS,EAAE,CAAC;IACxF,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;QAChD,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,EAAE;QAAE,SAAS,EAAE,CAAC;IACzG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,iBAAiB,IAAI,CAAC,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,MAAM,CAAC,EAAE,CAAC;QACjI,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,0BAA0B,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAChH,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YAClH,CAAC,CAAC,2DAA2D,MAAM,CAAC,EAAE,iEAAiE;YACvI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,qCAAqC,WAAW,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,6FAA6F;IAC7F,8FAA8F;AAChG,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,MAA6B,EAAE,SAAiB;IAClG,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3D,mBAAmB,CAAC,MAAO,CAAC,CAAC;AAC/B,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAA6B,EAAE,SAAiB;IACnG,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM;QAAE,SAAS,EAAE,CAAC;IACzB,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;QAC9E,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,0BAA0B,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,MAA6B,EAAE,SAAiB,EAAE,MAA6C;IAC5I,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,MAAM;QAAE,SAAS,EAAE,CAAC;IACrD,8FAA8F;IAC9F,wFAAwF;IACxF,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,aAAa,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,OAAO;QAAE,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,gIAAgI;AAChI,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,MAA6B,EAAE,SAAiB;IAClG,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;QAC7E,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,oDAAoD,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,MAA6B,EAAE,SAAiB,EAAE,QAAgB,EAAE,MAAyC;IACnK,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC7H,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,SAAS,EAAE,CAAC;IAC3F,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC"}