@kynver-app/runtime 0.1.106 → 0.1.112

package/dist/server/monitor.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/heartbeat.ts", "../../src/heartbeat-final-result.ts", "../../src/util.ts", "../../src/stream.ts", "../../src/repo-search.ts", "../../src/shell-command-outcome.ts", "../../src/exit-classify.ts", "../../src/exited-salvage.ts", "../../src/git.ts", "../../src/worker-env.ts", "../../src/landing-gate.ts", "../../src/worker-final-result-embed.ts", "../../src/landing-contract-gate.ts", "../../src/status.ts", "../../src/harness-lease-owner.ts", "../../src/monitor/monitor.classify.ts", "../../src/paths.ts", "../../src/config.ts", "../../src/wsl-host.ts", "../../src/disk-gate.ts", "../../src/resource-gate.ts", "../../src/completion-ack.ts", "../../src/monitor/monitor.terminal.ts"],
-  "sourcesContent": ["import { existsSync, readFileSync } from \"node:fs\";\r\nimport { terminalFinalResultFromHeartbeatRow } from \"./heartbeat-final-result.js\";\r\nimport { safeJson } from \"./util.js\";\r\nimport type { RuntimeBoxResourceSnapshot, RuntimeBoxResourceSnapshotPrEvidence } from \"./box-resource-snapshot.js\";\r\n\r\nexport interface ParsedHeartbeat {\r\n  heartbeatCount: number;\r\n  lastHeartbeatAt: string | null;\r\n  lastHeartbeatPhase: string | null;\r\n  lastHeartbeatSummary: string | null;\r\n  /** Structured finalResult from the terminal `phase: complete` heartbeat line. */\r\n  terminalFinalResult: unknown;\r\n  heartbeatBlocker: string | null;\r\n  timestampAnomalies: ParsedHeartbeatTimestampAnomaly[];\r\n  lastBoxResourceSnapshot: RuntimeBoxResourceSnapshot | null;\r\n  lastPrEvidence: RuntimeBoxResourceSnapshotPrEvidence[];\r\n}\r\n\r\nexport interface ParsedHeartbeatTimestampAnomaly {\r\n  kind: \"future_heartbeat_timestamp\";\r\n  observedAt: string;\r\n  clampedTo: string;\r\n}\r\n\r\nconst HEARTBEAT_FUTURE_SKEW_MS = 60_000;\r\n\r\n/** Worker contract: append `phase: \"complete\"` when productively finished. */\r\nexport function isTerminalHeartbeatPhase(phase: string | null | undefined): boolean {\r\n  return phase === \"complete\";\r\n}\r\n\r\n/**\r\n * When stdout has no stream-json `result` yet (common for Cursor workers mid-exit),\r\n * treat the worker's completion heartbeat as a synthetic final result so lifecycle\r\n * sync, completion replay, and resource gates advance.\r\n */\r\nexport function terminalFinalResultFromHeartbeat(heartbeat: ParsedHeartbeat): unknown {\r\n  if (!isTerminalHeartbeatPhase(heartbeat.lastHeartbeatPhase)) return null;\r\n  if (heartbeat.terminalFinalResult !== undefined && heartbeat.terminalFinalResult !== null) {\r\n    return heartbeat.terminalFinalResult;\r\n  }\r\n  const summary = heartbeat.lastHeartbeatSummary?.trim();\r\n  return summary || \"completed\";\r\n}\r\n\r\nexport function parseHeartbeat(file: string): ParsedHeartbeat {\r\n  const result: ParsedHeartbeat = {\r\n    heartbeatCount: 0,\r\n    lastHeartbeatAt: null,\r\n    lastHeartbeatPhase: null,\r\n    lastHeartbeatSummary: null,\r\n    terminalFinalResult: null,\r\n    heartbeatBlocker: null,\r\n    timestampAnomalies: [],\r\n    lastBoxResourceSnapshot: null,\r\n    lastPrEvidence: [],\r\n  };\r\n  if (!existsSync(file)) return result;\r\n  const maxFutureMs = Date.now() + HEARTBEAT_FUTURE_SKEW_MS;\r\n  const clampedTo = new Date(maxFutureMs).toISOString();\r\n  const lines = readFileSync(file, \"utf8\").split(\"\\n\").filter(Boolean);\r\n  for (const line of lines) {\r\n    const entry = safeJson(line);\r\n    if (!entry || typeof entry !== \"object\" || Array.isArray(entry)) continue;\r\n    const row = entry as Record<string, unknown>;\r\n    result.heartbeatCount++;\r\n    if (row.ts) {\r\n      const ts = String(row.ts);\r\n      const tsMs = Date.parse(ts);\r\n      if (Number.isFinite(tsMs) && tsMs > maxFutureMs) {\r\n        result.timestampAnomalies.push({\r\n          kind: \"future_heartbeat_timestamp\",\r\n          observedAt: ts,\r\n          clampedTo,\r\n        });\r\n      } else {\r\n        result.lastHeartbeatAt = ts;\r\n      }\r\n    }\r\n    if (row.phase !== undefined && row.phase !== null) result.lastHeartbeatPhase = String(row.phase);\r\n    if (row.summary !== undefined && row.summary !== null) result.lastHeartbeatSummary = String(row.summary);\r\n    if (isTerminalHeartbeatPhase(result.lastHeartbeatPhase)) {\r\n      result.terminalFinalResult = terminalFinalResultFromHeartbeatRow(row);\r\n    }\r\n    result.heartbeatBlocker = row.blocker ? String(row.blocker) : null;\r\n    if (row.boxResourceSnapshot && typeof row.boxResourceSnapshot === \"object\" && !Array.isArray(row.boxResourceSnapshot)) {\r\n      result.lastBoxResourceSnapshot = row.boxResourceSnapshot as RuntimeBoxResourceSnapshot;\r\n    }\r\n    if (Array.isArray(row.prEvidence)) {\r\n      result.lastPrEvidence = row.prEvidence.filter(\r\n        (entry): entry is RuntimeBoxResourceSnapshotPrEvidence =>\r\n          !!entry &&\r\n          typeof entry === \"object\" &&\r\n          typeof (entry as RuntimeBoxResourceSnapshotPrEvidence).prUrl === \"string\",\r\n      );\r\n    }\r\n  }\r\n  return result;\r\n}\r\n", "// Resolve structured harness finalResult from a terminal heartbeat line.\r\n\r\nfunction tryParseJsonObject(text: string): Record<string, unknown> | null {\r\n  const trimmed = text.trim();\r\n  if (!trimmed.startsWith(\"{\")) return null;\r\n  try {\r\n    const parsed: unknown = JSON.parse(trimmed);\r\n    if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) {\r\n      return parsed as Record<string, unknown>;\r\n    }\r\n  } catch {\r\n    return null;\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction embeddedRecordFromProse(text: string): Record<string, unknown> | null {\r\n  const trimmed = text.trim();\r\n  if (!trimmed) return null;\r\n  const direct = tryParseJsonObject(trimmed);\r\n  if (direct) return direct;\r\n\r\n  const candidates: Record<string, unknown>[] = [];\r\n  const fenceRe = /```(?:json)?\\s*([\\s\\S]*?)```/gi;\r\n  let fenceMatch: RegExpExecArray | null;\r\n  while ((fenceMatch = fenceRe.exec(trimmed)) !== null) {\r\n    const fromFence = tryParseJsonObject(fenceMatch[1] ?? \"\");\r\n    if (fromFence) candidates.push(fromFence);\r\n  }\r\n\r\n  const firstBrace = trimmed.indexOf(\"{\");\r\n  const lastBrace = trimmed.lastIndexOf(\"}\");\r\n  if (firstBrace >= 0 && lastBrace > firstBrace) {\r\n    const slice = tryParseJsonObject(trimmed.slice(firstBrace, lastBrace + 1));\r\n    if (slice) candidates.push(slice);\r\n  }\r\n\r\n  return candidates.length > 0 ? candidates[candidates.length - 1]! : null;\r\n}\r\n\r\n/**\r\n * Prefer an explicit heartbeat `finalResult`, else structured JSON embedded in\r\n * `summary`, else the summary string (legacy contract).\r\n */\r\nexport function terminalFinalResultFromHeartbeatRow(\r\n  row: Record<string, unknown>,\r\n): unknown {\r\n  const explicit = row.finalResult ?? row.final_result;\r\n  if (explicit !== undefined && explicit !== null) {\r\n    if (typeof explicit === \"string\") {\r\n      const embedded = embeddedRecordFromProse(explicit);\r\n      return embedded ?? (explicit.trim() || null);\r\n    }\r\n    return explicit;\r\n  }\r\n\r\n  const summary = typeof row.summary === \"string\" ? row.summary.trim() : \"\";\r\n  if (!summary) return null;\r\n\r\n  const embedded = embeddedRecordFromProse(summary);\r\n  if (embedded) return embedded;\r\n\r\n  return summary;\r\n}\r\n", "import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from \"node:fs\";\r\nimport path from \"node:path\";\r\n\r\nexport function fail(message: string): never {\r\n  console.error(message);\r\n  process.exit(1);\r\n}\r\n\r\n/** Avoid flashing a visible console on Windows when spawning worker/sidecar children. */\r\nexport function hiddenSpawnOptions<T extends Record<string, unknown>>(opts: T): T {\r\n  if (process.platform !== \"win32\") return opts;\r\n  return { windowsHide: true, ...opts };\r\n}\r\n\r\nexport function required(value: string | undefined, name: string): string {\r\n  if (!value) fail(`missing ${name}`);\r\n  return value;\r\n}\r\n\r\nexport function safeJson(line: string): unknown {\r\n  try {\r\n    return JSON.parse(line);\r\n  } catch {\r\n    return null;\r\n  }\r\n}\r\n\r\nexport function readJson<T>(file: string, fallback?: T): T {\r\n  try {\r\n    return JSON.parse(readFileSync(file, \"utf8\")) as T;\r\n  } catch (error) {\r\n    if (arguments.length > 1) return fallback as T;\r\n    fail(`failed to read ${file}: ${(error as Error).message}`);\r\n  }\r\n}\r\n\r\nexport function writeJson(file: string, value: unknown): void {\r\n  mkdirSync(path.dirname(file), { recursive: true });\r\n  writeFileSync(file, `${JSON.stringify(value, null, 2)}\\n`);\r\n}\r\n\r\nexport function safeSlug(value: string | undefined): string {\r\n  return (\r\n    String(value || \"\")\r\n      .toLowerCase()\r\n      .replace(/[^a-z0-9._-]+/g, \"-\")\r\n      .replace(/^-+|-+$/g, \"\") || \"worker\"\r\n  );\r\n}\r\n\r\nexport function timestampSlug(name: string): string {\r\n  return safeSlug(`${new Date().toISOString().replace(/[-:]/g, \"\").replace(/\\..+/, \"Z\")}-${name}`);\r\n}\r\n\r\nexport function splitCsv(value: string | undefined): string[] {\r\n  return value ? String(value).split(\",\").map((item) => item.trim()).filter(Boolean) : [];\r\n}\r\n\r\nexport function trimTrailingSlash(url: string): string {\r\n  return String(url).replace(/\\/+$/, \"\");\r\n}\r\n\r\nexport function oneLine(value: string): string {\r\n  return String(value || \"\")\r\n    .replace(/\\s+/g, \" \")\r\n    .trim();\r\n}\r\n\r\nexport function fileSize(file: string): number {\r\n  try {\r\n    return statSync(file).size;\r\n  } catch {\r\n    return 0;\r\n  }\r\n}\r\n\r\nexport function fileMtime(file: string): string | null {\r\n  try {\r\n    return statSync(file).mtime.toISOString();\r\n  } catch {\r\n    return null;\r\n  }\r\n}\r\n\r\nexport function tailFile(file: string, lines: number): string {\r\n  if (!existsSync(file)) return \"\";\r\n  const data = readFileSync(file, \"utf8\");\r\n  return data.split(\"\\n\").slice(-lines).join(\"\\n\");\r\n}\r\n\r\nexport function readMaybeFile(file: string | undefined): string {\r\n  return file ? readFileSync(path.resolve(file), \"utf8\") : \"\";\r\n}\r\n\r\nexport function listRunIds(runsDir: string): string[] {\r\n  if (!existsSync(runsDir)) return [];\r\n  return readdirSync(runsDir, { withFileTypes: true })\r\n    .filter((entry) => entry.isDirectory())\r\n    .map((entry) => entry.name);\r\n}\r\n\r\nexport function sleepMs(ms: number): void {\r\n  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);\r\n}\r\n\r\n/** Non-blocking sleep for async loops (daemon backoff, interruptible shutdown). */\r\nexport function sleepMsAsync(ms: number): Promise<void> {\r\n  return new Promise((resolve) => setTimeout(resolve, ms));\r\n}\r\n\r\nexport function isPidAlive(pid: number | undefined): boolean {\r\n  if (!pid) return false;\r\n  try {\r\n    process.kill(pid, 0);\r\n    return true;\r\n  } catch {\r\n    return false;\r\n  }\r\n}\r\n\r\nexport function killWorkerProcess(pid: number, signal: NodeJS.Signals): void {\r\n  try {\r\n    process.kill(-pid, signal);\r\n  } catch {\r\n    process.kill(pid, signal);\r\n  }\r\n}\r\n\r\nexport function latestIso(values: Array<string | null | undefined>): string | null {\r\n  let best: string | null = null;\r\n  let bestMs = -Infinity;\r\n  for (const value of values) {\r\n    if (!value) continue;\r\n    const ms = Date.parse(value);\r\n    if (Number.isFinite(ms) && ms > bestMs) {\r\n      bestMs = ms;\r\n      best = value;\r\n    }\r\n  }\r\n  return best;\r\n}\r\n\r\nexport function secsAgo(ms: number): number {\r\n  return Math.max(0, Math.round((Date.now() - ms) / 1000));\r\n}\r\n", "import { existsSync, readFileSync } from \"node:fs\";\r\nimport {\r\n  classifyShellCommandOutcome,\r\n  type ShellCommandOutcome,\r\n} from \"./shell-command-outcome.js\";\r\nimport { oneLine, safeJson } from \"./util.js\";\r\n\r\nexport interface ParsedStream {\r\n  firstEventAt: string | null;\r\n  lastEventAt: string | null;\r\n  currentTool: string | null;\r\n  finalResult: unknown;\r\n  error: string | null;\r\n  /** Most recent non-success shell outcome for operator error streams. */\r\n  lastShellOutcome: ShellCommandOutcome | null;\r\n}\r\n\r\nfunction eventTimestampIso(event: Record<string, unknown>): string | undefined {\r\n  const tsMs = event.timestamp_ms as number | undefined;\r\n  return (event.timestamp || event.ts || (tsMs ? new Date(tsMs).toISOString() : undefined)) as\r\n    | string\r\n    | undefined;\r\n}\r\n\r\n/** Cursor `stream-json` encodes tools as `{ grepToolCall: \u2026 }` keys on `tool_call`. */\r\nfunction cursorToolNameFromCall(toolCall: Record<string, unknown> | undefined): string | null {\r\n  if (!toolCall) return null;\r\n  for (const key of Object.keys(toolCall)) {\r\n    if (key.endsWith(\"ToolCall\")) {\r\n      const stem = key.slice(0, -\"ToolCall\".length);\r\n      return stem.length ? stem : key;\r\n    }\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction recordStreamResult(result: ParsedStream, event: Record<string, unknown>): void {\r\n  result.finalResult = event.result || event.subtype || event.terminal_reason || \"completed\";\r\n  if (event.is_error) {\r\n    result.error = String(event.result || event.api_error_status || \"stream result error\");\r\n  }\r\n}\r\n\r\nfunction shellPayloadFromCursorEvent(\r\n  event: Record<string, unknown>,\r\n): { command: string; exitCode: number; stdout: string; stderr: string; interleaved: string } | null {\r\n  if (event.type !== \"tool_call\" || event.subtype !== \"completed\") return null;\r\n  const toolCall =\r\n    event.tool_call && typeof event.tool_call === \"object\" && !Array.isArray(event.tool_call)\r\n      ? (event.tool_call as Record<string, unknown>)\r\n      : null;\r\n  const shell = toolCall?.shellToolCall;\r\n  if (!shell || typeof shell !== \"object\" || Array.isArray(shell)) return null;\r\n  const shellObj = shell as Record<string, unknown>;\r\n  const args = shellObj.args;\r\n  const command =\r\n    args && typeof args === \"object\" && !Array.isArray(args) && typeof (args as Record<string, unknown>).command === \"string\"\r\n      ? String((args as Record<string, unknown>).command)\r\n      : \"\";\r\n  const result = shellObj.result;\r\n  if (!result || typeof result !== \"object\" || Array.isArray(result)) return null;\r\n  const body = (result as Record<string, unknown>).success ?? (result as Record<string, unknown>).failure;\r\n  if (!body || typeof body !== \"object\" || Array.isArray(body)) return null;\r\n  const row = body as Record<string, unknown>;\r\n  const exitCode = typeof row.exitCode === \"number\" ? row.exitCode : 0;\r\n  return {\r\n    command,\r\n    exitCode,\r\n    stdout: typeof row.stdout === \"string\" ? row.stdout : \"\",\r\n    stderr: typeof row.stderr === \"string\" ? row.stderr : \"\",\r\n    interleaved: typeof row.interleavedOutput === \"string\" ? row.interleavedOutput : \"\",\r\n  };\r\n}\r\n\r\nfunction applyShellOutcome(parsed: ParsedStream, outcome: ShellCommandOutcome): void {\r\n  if (outcome.kind === \"success\" || outcome.kind === \"search_no_matches\") return;\r\n  parsed.lastShellOutcome = outcome;\r\n}\r\n\r\n/**\r\n * Parse harness worker stdout (`stream-json` from Claude Code or Cursor Agent).\r\n * Cursor emits `tool_call` events and may only write `type: \"result\"` after exit;\r\n * completion heartbeats are merged in `computeWorkerStatus`.\r\n */\r\nexport function parseHarnessStream(file: string): ParsedStream {\r\n  const result: ParsedStream = {\r\n    firstEventAt: null,\r\n    lastEventAt: null,\r\n    currentTool: null,\r\n    finalResult: null,\r\n    error: null,\r\n    lastShellOutcome: null,\r\n  };\r\n  if (!existsSync(file)) return result;\r\n  const lines = readFileSync(file, \"utf8\").split(\"\\n\").filter(Boolean);\r\n  for (const line of lines) {\r\n    const event = safeJson(line) as Record<string, unknown> | null;\r\n    if (!event) continue;\r\n    const ts = eventTimestampIso(event);\r\n    if (ts) {\r\n      result.firstEventAt ||= ts;\r\n      result.lastEventAt = ts;\r\n    }\r\n    if (\r\n      event.type === \"stream_event\" &&\r\n      event.event &&\r\n      typeof event.event === \"object\" &&\r\n      (event.event as Record<string, unknown>).type === \"content_block_start\"\r\n    ) {\r\n      const block = (event.event as Record<string, unknown>).content_block as Record<string, unknown> | undefined;\r\n      if (block?.type === \"tool_use\") result.currentTool = String(block.name || \"tool\");\r\n    }\r\n    if (event.type === \"assistant\" && event.message && typeof event.message === \"object\") {\r\n      const content = (event.message as Record<string, unknown>).content;\r\n      if (Array.isArray(content)) {\r\n        const tool = content.find((item) => item?.type === \"tool_use\") as Record<string, unknown> | undefined;\r\n        if (tool) result.currentTool = String(tool.name || result.currentTool);\r\n      }\r\n    }\r\n    if (event.type === \"tool_call\" && event.subtype === \"started\") {\r\n      const toolCall =\r\n        event.tool_call && typeof event.tool_call === \"object\" && !Array.isArray(event.tool_call)\r\n          ? (event.tool_call as Record<string, unknown>)\r\n          : undefined;\r\n      const name = cursorToolNameFromCall(toolCall);\r\n      if (name) result.currentTool = name;\r\n    }\r\n    const shell = shellPayloadFromCursorEvent(event);\r\n    if (shell) {\r\n      applyShellOutcome(\r\n        result,\r\n        classifyShellCommandOutcome({\r\n          command: shell.command,\r\n          exitCode: shell.exitCode,\r\n          stdout: shell.stdout,\r\n          stderr: shell.stderr,\r\n          interleavedOutput: shell.interleaved,\r\n        }),\r\n      );\r\n    }\r\n    if (event.type === \"result\") {\r\n      recordStreamResult(result, event);\r\n    }\r\n  }\r\n  return result;\r\n}\r\n\r\n/** @deprecated Use {@link parseHarnessStream} \u2014 kept for existing imports. */\r\nexport function parseClaudeStream(file: string): ParsedStream {\r\n  return parseHarnessStream(file);\r\n}\r\n\r\nexport function summarizeShellToolCallEvent(event: Record<string, unknown>): string | undefined {\r\n  const shell = shellPayloadFromCursorEvent(event);\r\n  if (!shell) return undefined;\r\n  const outcome = classifyShellCommandOutcome({\r\n    command: shell.command,\r\n    exitCode: shell.exitCode,\r\n    stdout: shell.stdout,\r\n    stderr: shell.stderr,\r\n    interleavedOutput: shell.interleaved,\r\n  });\r\n  const cmd = oneLine(shell.command).slice(0, 120);\r\n  if (outcome.kind === \"audit_findings\") {\r\n    return `[audit:findings] ${outcome.summary}${cmd ? ` \u00B7 ${cmd}` : \"\"}`;\r\n  }\r\n  if (outcome.kind === \"search_no_matches\") {\r\n    return `[search:no_matches] ${outcome.summary}${cmd ? ` \u00B7 ${cmd}` : \"\"}`;\r\n  }\r\n  if (outcome.kind === \"command_failure\") {\r\n    return `[command:failed] ${outcome.summary}${cmd ? ` \u00B7 ${cmd}` : \"\"}`;\r\n  }\r\n  return `[command:ok] exit 0${cmd ? ` \u00B7 ${cmd}` : \"\"}`;\r\n}\r\n\r\nexport function summarizeEvent(event: Record<string, unknown>): string | undefined {\r\n  if (event.type === \"system\" && event.subtype) {\r\n    return `[system:${event.subtype}] ${String(event.status || event.cwd || \"\")}`.trim();\r\n  }\r\n  if (event.type === \"stream_event\" && event.event && typeof event.event === \"object\") {\r\n    const type = (event.event as Record<string, unknown>).type;\r\n    if (type === \"content_block_start\") {\r\n      const block = (event.event as Record<string, unknown>).content_block as Record<string, unknown> | undefined;\r\n      if (block?.type === \"tool_use\") return `[tool:start] ${block.name}`;\r\n    }\r\n    if (type === \"content_block_delta\") {\r\n      const delta = (event.event as Record<string, unknown>).delta as Record<string, unknown> | undefined;\r\n      if (delta?.partial_json) return `[tool:input] ${delta.partial_json}`;\r\n    }\r\n    if (type === \"message_stop\") return \"[message:stop]\";\r\n    return type ? `[stream:${type}]` : undefined;\r\n  }\r\n  if (event.type === \"assistant\" && event.message && typeof event.message === \"object\") {\r\n    const content = (event.message as Record<string, unknown>).content;\r\n    if (Array.isArray(content)) {\r\n      const text = content.find((item) => item?.type === \"text\") as Record<string, unknown> | undefined;\r\n      if (text) return `[assistant] ${oneLine(String(text.text || \"\"))}`;\r\n      const tool = content.find((item) => item?.type === \"tool_use\") as Record<string, unknown> | undefined;\r\n      if (tool) return `[tool] ${tool.name} ${JSON.stringify(tool.input || {})}`;\r\n    }\r\n  }\r\n  if (event.type === \"user\" && event.tool_use_result) {\r\n    const result = event.tool_use_result as Record<string, unknown>;\r\n    return `[tool:result] stdout=${JSON.stringify(result.stdout || \"\")} stderr=${JSON.stringify(result.stderr || \"\")}`;\r\n  }\r\n  if (event.type === \"tool_call\") {\r\n    const subtype = String(event.subtype || \"\");\r\n    const shellSummary =\r\n      subtype === \"completed\" ? summarizeShellToolCallEvent(event) : undefined;\r\n    if (shellSummary) return shellSummary;\r\n    const toolCall =\r\n      event.tool_call && typeof event.tool_call === \"object\" && !Array.isArray(event.tool_call)\r\n        ? (event.tool_call as Record<string, unknown>)\r\n        : undefined;\r\n    const name = cursorToolNameFromCall(toolCall) ?? \"tool\";\r\n    return `[tool:${subtype}] ${name}`;\r\n  }\r\n  if (event.type === \"result\") {\r\n    return `[result] ${event.subtype || \"\"} ${oneLine(String(event.result || \"\"))}`.trim();\r\n  }\r\n  return undefined;\r\n}\r\n", "/**\r\n * Normalize and classify repo text-search commands for harness operators and chat agents.\r\n *\r\n * Codex/OpenClaw often emit `search \"pattern\" in <scope>` meta that maps poorly to ripgrep\r\n * (e.g. `in !node_modules` instead of `-g '!node_modules/**'`, or `in package.json` as a path).\r\n */\r\n\r\nconst RG_BINARIES = new Set([\"rg\", \"ripgrep\", \"grep\"]);\r\nconst RG_OPTS_WITH_VALUE = new Set([\r\n  \"-e\",\r\n  \"--regexp\",\r\n  \"-f\",\r\n  \"--file\",\r\n  \"-m\",\r\n  \"--max-count\",\r\n  \"-A\",\r\n  \"--after-context\",\r\n  \"-B\",\r\n  \"--before-context\",\r\n  \"-C\",\r\n  \"--context\",\r\n  \"-g\",\r\n  \"--glob\",\r\n  \"--iglob\",\r\n]);\r\n\r\nexport type RepoSearchKind =\r\n  | \"not_repo_search\"\r\n  | \"bad_scope\"\r\n  | \"rg_exclude_syntax\"\r\n  | \"no_matches\";\r\n\r\nexport interface RepoSearchContext {\r\n  kind: RepoSearchKind;\r\n  pattern?: string;\r\n  target?: string;\r\n}\r\n\r\nfunction binaryName(token: string | undefined): string | null {\r\n  if (!token) return null;\r\n  const base = token.split(\"/\").pop() ?? token;\r\n  return base.replace(/\\.exe$/i, \"\").toLowerCase();\r\n}\r\n\r\nfunction splitShellWords(input: string): string[] {\r\n  if (!input) return [];\r\n  const words: string[] = [];\r\n  let current = \"\";\r\n  let quote: string | undefined;\r\n  let escaped = false;\r\n  for (const char of input) {\r\n    if (escaped) {\r\n      current += char;\r\n      escaped = false;\r\n      continue;\r\n    }\r\n    if (char === \"\\\\\") {\r\n      escaped = true;\r\n      continue;\r\n    }\r\n    if (quote) {\r\n      if (char === quote) quote = undefined;\r\n      else current += char;\r\n      continue;\r\n    }\r\n    if (char === '\"' || char === \"'\") {\r\n      quote = char;\r\n      continue;\r\n    }\r\n    if (/\\s/.test(char)) {\r\n      if (current) {\r\n        words.push(current);\r\n        current = \"\";\r\n      }\r\n      continue;\r\n    }\r\n    current += char;\r\n  }\r\n  if (current) words.push(current);\r\n  return words;\r\n}\r\n\r\nfunction isRgArgv(argv: string[]): boolean {\r\n  const bin = binaryName(argv[0]);\r\n  return Boolean(bin && RG_BINARIES.has(bin));\r\n}\r\n\r\nexport function isSingleFileSearchTarget(target: string | undefined): boolean {\r\n  if (!target || target.includes(\"/\") || target.includes(\"*\")) return false;\r\n  return /\\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(target);\r\n}\r\n\r\n/** `!node_modules` as a path is invalid \u2014 ripgrep needs `-g '!node_modules/**'`. */\r\nexport function isRgExcludeScopeTarget(target: string | undefined): boolean {\r\n  if (!target) return false;\r\n  const t = target.trim();\r\n  return t.startsWith(\"!\") && !t.includes(\"/\") && !t.endsWith(\"/**\");\r\n}\r\n\r\nfunction fixRgGlobToken(token: string): string {\r\n  if (!token.startsWith(\"--glob=\")) return token;\r\n  const value = token.slice(\"--glob=\".length);\r\n  if (value.startsWith(\"!\") && !value.includes(\"/\") && !value.endsWith(\"/**\")) {\r\n    return `--glob=${value}/**`;\r\n  }\r\n  return token;\r\n}\r\n\r\nfunction collectRgPositional(argv: string[]): string[] {\r\n  const positional: string[] = [];\r\n  for (let i = 1; i < argv.length; i += 1) {\r\n    const token = argv[i];\r\n    if (!token) continue;\r\n    if (token === \"--\") {\r\n      positional.push(...argv.slice(i + 1));\r\n      break;\r\n    }\r\n    if (token.startsWith(\"-\")) {\r\n      if (token.includes(\"=\")) continue;\r\n      if (RG_OPTS_WITH_VALUE.has(token)) i += 1;\r\n      continue;\r\n    }\r\n    positional.push(token);\r\n  }\r\n  return positional;\r\n}\r\n\r\nexport function normalizeRgArgv(argv: string[]): { argv: string[]; changed: boolean } {\r\n  let changed = false;\r\n  const out = argv.map((token) => {\r\n    const fixed = fixRgGlobToken(token);\r\n    if (fixed !== token) changed = true;\r\n    return fixed;\r\n  });\r\n  const positional = collectRgPositional(out);\r\n  if (positional.length === 2) {\r\n    const [pattern, target] = positional;\r\n    if (isSingleFileSearchTarget(target)) {\r\n      return { argv: [out[0] ?? \"rg\", \"-g\", target, pattern, \".\"], changed: true };\r\n    }\r\n  }\r\n  return { argv: out, changed };\r\n}\r\n\r\nexport function normalizeRepoSearchCommand(command: string): { command: string; changed: boolean } {\r\n  const trimmed = command.trim();\r\n  if (!trimmed) return { command: trimmed, changed: false };\r\n  const joiner = trimmed.includes(\"&&\") ? \" && \" : trimmed.includes(\"||\") ? \" || \" : \"; \";\r\n  const stages = trimmed.split(/\\s*(?:&&|\\|\\||;)\\s*/u);\r\n  let changed = false;\r\n  const normalizedStages = stages.map((stage) => {\r\n    const argv = splitShellWords(stage.trim());\r\n    if (!argv.length || !isRgArgv(argv)) return stage;\r\n    const normalized = normalizeRgArgv(argv);\r\n    if (normalized.changed) {\r\n      changed = true;\r\n      return normalized.argv.join(\" \");\r\n    }\r\n    return stage;\r\n  });\r\n  if (!changed) return { command: trimmed, changed: false };\r\n  return { command: normalizedStages.join(joiner), changed: true };\r\n}\r\n\r\nexport function extractSearchMeta(meta: string): { pattern?: string; target?: string } {\r\n  if (!meta) return {};\r\n  const pipelineMatch = meta.match(/search\\s+\"(.+)\"\\s+in\\s+([^()]+?)(?:\\s*\\(|$)/iu);\r\n  if (pipelineMatch) {\r\n    return { pattern: pipelineMatch[1], target: pipelineMatch[2]?.trim() };\r\n  }\r\n  const match = meta.match(/^search\\s+\"(.+)\"\\s+in\\s+(.+)$/iu);\r\n  if (!match) return {};\r\n  return { pattern: match[1], target: match[2]?.trim() };\r\n}\r\n\r\nexport function classifyRepoSearchMeta(meta: string): RepoSearchContext {\r\n  const { pattern, target } = extractSearchMeta(meta);\r\n  if (!pattern) return { kind: \"not_repo_search\" };\r\n  if (isRgExcludeScopeTarget(target)) {\r\n    return { kind: \"rg_exclude_syntax\", pattern, target };\r\n  }\r\n  if (isSingleFileSearchTarget(target)) {\r\n    return { kind: \"bad_scope\", pattern, target };\r\n  }\r\n  return { kind: \"not_repo_search\", pattern, target };\r\n}\r\n\r\nexport function metaToNormalizedRgCommand(meta: string): { command: string; changed: boolean } | null {\r\n  const { pattern, target } = extractSearchMeta(meta);\r\n  if (!pattern) return null;\r\n  if (isRgExcludeScopeTarget(target)) {\r\n    const glob = `${target!.trim()}/**`;\r\n    return {\r\n      command: `rg \"${pattern}\" -g '${glob}' .`,\r\n      changed: true,\r\n    };\r\n  }\r\n  if (target && isSingleFileSearchTarget(target)) {\r\n    return {\r\n      command: `rg -g ${target} \"${pattern}\" .`,\r\n      changed: true,\r\n    };\r\n  }\r\n  return null;\r\n}\r\n\r\nexport function formatRepoSearchGuidance(ctx: RepoSearchContext): string | null {\r\n  if (\r\n    ctx.kind === \"bad_scope\" &&\r\n    ctx.pattern?.includes(\"agent-os-land-pr\") &&\r\n    ctx.target === \"package.json\"\r\n  ) {\r\n    return (\r\n      \"Search package.json with a glob from the repo root: \" +\r\n      \"`rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.\"\r\n    );\r\n  }\r\n  if (ctx.kind === \"bad_scope\" && ctx.pattern && ctx.target) {\r\n    return `Use \\`rg -g '${ctx.target}' ${ctx.pattern} .\\` from the repo root instead of treating ${ctx.target} as a folder.`;\r\n  }\r\n  if (ctx.kind === \"rg_exclude_syntax\" && ctx.pattern) {\r\n    const glob = ctx.target ? `${ctx.target.trim()}/**` : \"!node_modules/**\";\r\n    return (\r\n      `Repo search scope \\`${ctx.target ?? \"!node_modules\"}\\` is not a valid ripgrep path. ` +\r\n      `Use \\`rg \"${ctx.pattern}\" -g '${glob}' .\\` from the repo root (exclude globs need a \\`/**\\` suffix).`\r\n    );\r\n  }\r\n  if (ctx.kind === \"no_matches\" && ctx.pattern) {\r\n    return `No matches for \"${ctx.pattern}\". Try a broader pattern, drop overly short tokens, or search from the repo root with \\`rg \"${ctx.pattern}\" .\\`.`;\r\n  }\r\n  return null;\r\n}\r\n\r\n/** Extract `search \"\u2026\" in \u2026` from a tool-failure line or command string. */\r\nexport function extractSearchMetaFromToolLine(line: string): string | null {\r\n  const match = line.match(/search\\s+\"(.+)\"\\s+in\\s+([^()]+?)(?:\\s*\\(agent\\)|\\s*failed|$)/iu);\r\n  if (!match) return null;\r\n  return `search \"${match[1]}\" in ${match[2]?.trim()}`;\r\n}\r\n\r\nexport function diagnoseRepoSearchFailure(input: {\r\n  meta?: string;\r\n  command?: string;\r\n  exitCode?: number;\r\n}): string | null {\r\n  const meta =\r\n    input.meta?.trim() ||\r\n    (input.command ? extractSearchMetaFromToolLine(input.command) : null) ||\r\n    null;\r\n  if (meta) {\r\n    const ctx = classifyRepoSearchMeta(meta);\r\n    const guidance = formatRepoSearchGuidance(ctx);\r\n    if (guidance) return guidance;\r\n    const normalized = metaToNormalizedRgCommand(meta);\r\n    if (normalized?.changed) {\r\n      return `Repo search used an invalid scope. Retry with: \\`${normalized.command}\\`.`;\r\n    }\r\n  }\r\n  if (input.command && /\\b(rg|ripgrep)\\b/i.test(input.command)) {\r\n    const normalized = normalizeRepoSearchCommand(input.command);\r\n    if (normalized.changed) {\r\n      return `Ripgrep scope may be invalid. Retry with: \\`${normalized.command}\\`.`;\r\n    }\r\n    if (input.exitCode === 1) {\r\n      return \"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root.\";\r\n    }\r\n  }\r\n  return null;\r\n}\r\n", "// Classify harness shell tool results for operator-facing streams (tail, status, Telegram).\r\n//\r\n// npm audit exits 1 when advisories exist \u2014 that is a successful run with findings,\r\n// not a command execution failure. ripgrep exits 1 when there are no matches \u2014 also\r\n// not a command execution failure. Reserve \"command failed\" for ENOLOCK, network\r\n// errors, invalid JSON, and other tool failures.\r\n\r\nimport { diagnoseRepoSearchFailure, normalizeRepoSearchCommand } from \"./repo-search.js\";\r\n\r\nexport type ShellCommandOutcomeKind =\r\n  | \"success\"\r\n  | \"audit_findings\"\r\n  | \"search_no_matches\"\r\n  | \"command_failure\";\r\n\r\nexport interface NpmAuditSummary {\r\n  total: number;\r\n  critical: number;\r\n  high: number;\r\n  moderate: number;\r\n  low: number;\r\n  info: number;\r\n}\r\n\r\nexport interface ShellCommandOutcome {\r\n  kind: ShellCommandOutcomeKind;\r\n  exitCode: number;\r\n  /** Short operator-facing line (no raw JSON blob). */\r\n  summary: string;\r\n  /** Present when kind === audit_findings and JSON parsed. */\r\n  audit?: NpmAuditSummary;\r\n  /** When JSON was expected but invalid. */\r\n  parseError?: string;\r\n}\r\n\r\nconst NPM_AUDIT_RE = /\\bnpm\\s+audit\\b/i;\r\nconst RG_CMD_RE = /\\b(rg|ripgrep)\\b/i;\r\nconst RG_REAL_ERROR_RE = /\\b(error|invalid|unknown|panic|not found)\\b/i;\r\n\r\nfunction tidy(text: string, max = 200): string {\r\n  const one = text.replace(/\\s+/g, \" \").trim();\r\n  return one.length > max ? `${one.slice(0, max - 1)}\u2026` : one;\r\n}\r\n\r\nfunction extractJsonObject(text: string): unknown | null {\r\n  const trimmed = text.trim();\r\n  if (!trimmed) return null;\r\n  if (trimmed.startsWith(\"{\")) {\r\n    try {\r\n      return JSON.parse(trimmed);\r\n    } catch {\r\n      /* fall through \u2014 scan for embedded object */\r\n    }\r\n  }\r\n  const start = trimmed.indexOf(\"{\");\r\n  const end = trimmed.lastIndexOf(\"}\");\r\n  if (start >= 0 && end > start) {\r\n    try {\r\n      return JSON.parse(trimmed.slice(start, end + 1));\r\n    } catch {\r\n      return null;\r\n    }\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction isRecord(value: unknown): value is Record<string, unknown> {\r\n  return Boolean(value) && typeof value === \"object\" && !Array.isArray(value);\r\n}\r\n\r\nexport function summarizeNpmAuditReport(report: Record<string, unknown>): NpmAuditSummary | null {\r\n  const meta = report.metadata;\r\n  if (!isRecord(meta)) return null;\r\n  const vuln = meta.vulnerabilities;\r\n  if (!isRecord(vuln)) return null;\r\n  const num = (key: string) => (typeof vuln[key] === \"number\" ? vuln[key] : 0);\r\n  const summary: NpmAuditSummary = {\r\n    info: num(\"info\"),\r\n    low: num(\"low\"),\r\n    moderate: num(\"moderate\"),\r\n    high: num(\"high\"),\r\n    critical: num(\"critical\"),\r\n    total: num(\"total\"),\r\n  };\r\n  if (\r\n    typeof vuln.total !== \"number\" &&\r\n    !summary.critical &&\r\n    !summary.high &&\r\n    !summary.moderate &&\r\n    !summary.low &&\r\n    !summary.info\r\n  ) {\r\n    return null;\r\n  }\r\n  return summary;\r\n}\r\n\r\nfunction formatAuditSummaryLine(audit: NpmAuditSummary): string {\r\n  const parts: string[] = [];\r\n  if (audit.critical) parts.push(`${audit.critical} critical`);\r\n  if (audit.high) parts.push(`${audit.high} high`);\r\n  if (audit.moderate) parts.push(`${audit.moderate} moderate`);\r\n  if (audit.low) parts.push(`${audit.low} low`);\r\n  if (audit.info) parts.push(`${audit.info} info`);\r\n  const breakdown = parts.length ? parts.join(\", \") : \"see report\";\r\n  return `npm audit: ${audit.total} vulnerabilit${audit.total === 1 ? \"y\" : \"ies\"} (${breakdown}) \u2014 remediation required`;\r\n}\r\n\r\nfunction npmAuditFailureReason(report: Record<string, unknown>, stderr: string): string {\r\n  const err = report.error;\r\n  if (isRecord(err)) {\r\n    const summary = typeof err.summary === \"string\" ? err.summary.trim() : \"\";\r\n    const code = typeof err.code === \"string\" ? err.code.trim() : \"\";\r\n    if (summary) return code ? `${code}: ${summary}` : summary;\r\n    if (code) return code;\r\n  }\r\n  const detail = typeof report.message === \"string\" ? report.message.trim() : \"\";\r\n  if (detail) return detail;\r\n  const errTail = stderr.trim();\r\n  if (errTail) return tidy(errTail.split(\"\\n\").find(Boolean) ?? errTail, 160);\r\n  return \"npm audit failed\";\r\n}\r\n\r\nexport function classifyNpmAuditOutcome(input: {\r\n  exitCode: number;\r\n  stdout: string;\r\n  stderr: string;\r\n}): ShellCommandOutcome {\r\n  const combined = `${input.stdout}\\n${input.stderr}`.trim();\r\n  const parsed = extractJsonObject(combined);\r\n\r\n  if (!parsed || !isRecord(parsed)) {\r\n    const tail = tidy(combined || `exit ${input.exitCode}`, 180);\r\n    return {\r\n      kind: \"command_failure\",\r\n      exitCode: input.exitCode,\r\n      summary: `npm audit failed (invalid or missing JSON): ${tail}`,\r\n      parseError: \"invalid_json\",\r\n    };\r\n  }\r\n\r\n  if (isRecord(parsed.error)) {\r\n    return {\r\n      kind: \"command_failure\",\r\n      exitCode: input.exitCode,\r\n      summary: `npm audit command failed: ${npmAuditFailureReason(parsed, input.stderr)}`,\r\n    };\r\n  }\r\n\r\n  const audit = summarizeNpmAuditReport(parsed);\r\n  if (!audit) {\r\n    return {\r\n      kind: \"command_failure\",\r\n      exitCode: input.exitCode,\r\n      summary: \"npm audit failed: JSON response missing vulnerability metadata\",\r\n      parseError: \"missing_metadata\",\r\n    };\r\n  }\r\n\r\n  if (input.exitCode === 0 && audit.total === 0) {\r\n    return {\r\n      kind: \"success\",\r\n      exitCode: 0,\r\n      summary: \"npm audit: no vulnerabilities reported\",\r\n      audit,\r\n    };\r\n  }\r\n\r\n  return {\r\n    kind: \"audit_findings\",\r\n    exitCode: input.exitCode,\r\n    summary: formatAuditSummaryLine(audit),\r\n    audit,\r\n  };\r\n}\r\n\r\nfunction isNpmAuditCommand(command: string): boolean {\r\n  return NPM_AUDIT_RE.test(command);\r\n}\r\n\r\nfunction isRgCommand(command: string): boolean {\r\n  return RG_CMD_RE.test(command);\r\n}\r\n\r\nfunction classifyRgOutcome(input: {\r\n  command: string;\r\n  exitCode: number;\r\n  stdout: string;\r\n  stderr: string;\r\n  interleaved: string;\r\n}): ShellCommandOutcome {\r\n  const diagnosis = diagnoseRepoSearchFailure({\r\n    command: input.command,\r\n    exitCode: input.exitCode,\r\n  });\r\n\r\n  if (input.exitCode === 0) {\r\n    return {\r\n      kind: \"success\",\r\n      exitCode: 0,\r\n      summary: \"ripgrep finished (exit 0)\",\r\n    };\r\n  }\r\n\r\n  if (input.exitCode === 1) {\r\n    const errText = (input.stderr || input.interleaved).trim();\r\n    if (errText && RG_REAL_ERROR_RE.test(errText)) {\r\n      const tail = tidy(errText, 160);\r\n      return {\r\n        kind: \"command_failure\",\r\n        exitCode: 1,\r\n        summary: diagnosis ?? `ripgrep failed (exit 1): ${tail}`,\r\n      };\r\n    }\r\n    const normalized = normalizeRepoSearchCommand(input.command);\r\n    const retry =\r\n      normalized.changed && !diagnosis ? ` Retry with: \\`${normalized.command}\\`.` : \"\";\r\n    return {\r\n      kind: \"search_no_matches\",\r\n      exitCode: 1,\r\n      summary:\r\n        diagnosis ??\r\n        `ripgrep: no matches (exit 1).${retry} Try a broader pattern or search from the repo root.`,\r\n    };\r\n  }\r\n\r\n  const tail = tidy(input.interleaved || input.stdout || input.stderr || `exit ${input.exitCode}`, 180);\r\n  return {\r\n    kind: \"command_failure\",\r\n    exitCode: input.exitCode,\r\n    summary: diagnosis ?? `ripgrep failed (exit ${input.exitCode}): ${tail}`,\r\n  };\r\n}\r\n\r\nexport function classifyShellCommandOutcome(input: {\r\n  command: string;\r\n  exitCode: number;\r\n  stdout?: string;\r\n  stderr?: string;\r\n  interleavedOutput?: string;\r\n}): ShellCommandOutcome {\r\n  const stdout = input.stdout ?? \"\";\r\n  const stderr = input.stderr ?? \"\";\r\n  const interleaved = input.interleavedOutput ?? \"\";\r\n\r\n  if (isNpmAuditCommand(input.command)) {\r\n    const body = stdout.trim() || interleaved.trim() || stderr.trim();\r\n    return classifyNpmAuditOutcome({\r\n      exitCode: input.exitCode,\r\n      stdout: body,\r\n      stderr,\r\n    });\r\n  }\r\n\r\n  if (isRgCommand(input.command)) {\r\n    return classifyRgOutcome({\r\n      command: input.command,\r\n      exitCode: input.exitCode,\r\n      stdout,\r\n      stderr,\r\n      interleaved,\r\n    });\r\n  }\r\n\r\n  const searchDiagnosis = diagnoseRepoSearchFailure({\r\n    command: input.command,\r\n    exitCode: input.exitCode,\r\n  });\r\n  if (searchDiagnosis && input.exitCode !== 0) {\r\n    return {\r\n      kind: \"command_failure\",\r\n      exitCode: input.exitCode,\r\n      summary: searchDiagnosis,\r\n    };\r\n  }\r\n\r\n  if (input.exitCode === 0) {\r\n    return {\r\n      kind: \"success\",\r\n      exitCode: 0,\r\n      summary: `command succeeded (exit 0)`,\r\n    };\r\n  }\r\n\r\n  const tail = tidy(interleaved || stdout || stderr || `exit ${input.exitCode}`, 180);\r\n  return {\r\n    kind: \"command_failure\",\r\n    exitCode: input.exitCode,\r\n    summary: `command failed (exit ${input.exitCode}): ${tail}`,\r\n  };\r\n}\r\n", "// Exit normalization for workers that died without a stream-json final result.\r\n//\r\n// When a worker process exits before recording a `result` event, the status path\r\n// used to surface a single generic \"process exited without a final result\"\r\n// needs_attention \u2014 indistinguishable whether the agent crashed mid-task or the\r\n// provider CLI rejected the model/args at startup. That made model/provider\r\n// misconfigurations look like silent stalls the watchdog had to triage by hand.\r\n//\r\n// `classifyExitFailure` inspects the worker's stderr/error tail and, when it\r\n// matches a known startup/config failure (model rejection, missing CLI, auth),\r\n// returns a structured `blocked` classification with a precise reason. The\r\n// status path promotes that to `attention.state = \"blocked\"` \u2014 a real board\r\n// attention state that flows through the harness completion ingest unchanged \u2014\r\n// instead of the catch-all needs_attention.\r\n\r\nexport interface ExitClassification {\r\n  /** True when the failure is a structural blocker an operator must fix. */\r\n  blocked: boolean;\r\n  /** Precise, human-readable reason for the blocker. */\r\n  reason: string;\r\n}\r\n\r\ninterface FailurePattern {\r\n  test: RegExp;\r\n  label: string;\r\n}\r\n\r\n// Ordered most-specific first. Each entry maps a recognizable stderr signature to\r\n// a short blocker label; the matched error tail is appended for context.\r\nconst FAILURE_PATTERNS: FailurePattern[] = [\r\n  {\r\n    test: /\\b(?:invalid|unknown|unsupported|unrecognized)\\b[^.\\n]*\\bmodel\\b/i,\r\n    label: \"provider rejected the requested model\",\r\n  },\r\n  {\r\n    test: /\\bmodel\\b[^.\\n]*\\b(?:not\\s+(?:found|supported|available|recognized|valid)|is\\s+not\\s+valid|does\\s+not\\s+exist)/i,\r\n    label: \"provider rejected the requested model\",\r\n  },\r\n  {\r\n    test: /\\b(?:did you mean|available models|choose (?:a|one of)|supported models)\\b/i,\r\n    label: \"provider rejected the requested model\",\r\n  },\r\n  {\r\n    test: /model preflight failed/i,\r\n    label: \"model/provider preflight failed\",\r\n  },\r\n  {\r\n    test: /\\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\\b/i,\r\n    label: \"provider CLI is missing or not on PATH\",\r\n  },\r\n  {\r\n    test: /\\bfailed to spawn\\b/i,\r\n    label: \"provider failed to spawn the worker process\",\r\n  },\r\n  {\r\n    test: /\\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\\b/i,\r\n    label: \"provider authentication failed\",\r\n  },\r\n];\r\n\r\n/** Collapse whitespace and clip a noisy error tail to a single readable line. */\r\nfunction tidy(errorText: string, max = 240): string {\r\n  const oneLine = errorText.replace(/\\s+/g, \" \").trim();\r\n  return oneLine.length > max ? `${oneLine.slice(0, max - 1)}\u2026` : oneLine;\r\n}\r\n\r\n/**\r\n * Classify a dead worker's error/stderr output. Returns a structured blocker when\r\n * the text matches a known startup/config failure, or null when it does not (the\r\n * caller should fall back to the generic needs_attention path).\r\n */\r\nexport function classifyExitFailure(\r\n  errorText: string | null | undefined,\r\n): ExitClassification | null {\r\n  const text = (errorText ?? \"\").trim();\r\n  if (!text) return null;\r\n  for (const pattern of FAILURE_PATTERNS) {\r\n    if (pattern.test.test(text)) {\r\n      return { blocked: true, reason: `${pattern.label}: ${tidy(text)}` };\r\n    }\r\n  }\r\n  return null;\r\n}\r\n", "// Workers that die without a stream-json `result` event but leave salvageable work\r\n// behind (uncommitted changes and/or commits ahead of the run base). Distinct from\r\n// a generic \"process exited without a final result\" stall \u2014 operators need a\r\n// review-needed signal and a follow-up salvage/landing lane (PR #285 class).\r\n\r\nimport type { GitAncestry } from \"./git.js\";\r\n\r\nexport type ExitedSalvageKind = \"none\" | \"uncommitted\" | \"committed_ahead\" | \"both\";\r\n\r\nexport interface ExitedSalvageAssessment {\r\n  kind: ExitedSalvageKind;\r\n  /** True when the worktree has reviewable uncommitted and/or committed-ahead work. */\r\n  salvageable: boolean;\r\n  uncommittedCount: number;\r\n  headCommit: string | null;\r\n  /** Board / attention reason \u2014 stable prefix for downstream parsers. */\r\n  attentionReason: string;\r\n}\r\n\r\nfunction trimOrNull(value: unknown): string | null {\r\n  if (typeof value !== \"string\") return null;\r\n  const trimmed = value.trim();\r\n  return trimmed.length ? trimmed : null;\r\n}\r\n\r\nfunction hasFinalResult(value: unknown): boolean {\r\n  if (value === undefined || value === null) return false;\r\n  if (typeof value === \"string\") return value.trim().length > 0;\r\n  if (typeof value === \"boolean\") return value;\r\n  if (Array.isArray(value)) return value.length > 0;\r\n  if (typeof value === \"object\") return Object.keys(value as object).length > 0;\r\n  return true;\r\n}\r\n\r\nfunction committedHeadFromAncestry(ancestry: GitAncestry | null | undefined): string | null {\r\n  if (!ancestry?.checked) return null;\r\n  if (ancestry.headIsAncestorOfBase !== false) return null;\r\n  return trimOrNull(ancestry.head);\r\n}\r\n\r\nfunction buildAttentionReason(\r\n  kind: ExitedSalvageKind,\r\n  uncommittedCount: number,\r\n  headCommit: string | null,\r\n): string {\r\n  const parts: string[] = [\"exited_with_changes_salvage\"];\r\n  if (kind === \"uncommitted\" || kind === \"both\") {\r\n    parts.push(\r\n      `${uncommittedCount} uncommitted change${uncommittedCount === 1 ? \"\" : \"s\"} with no final result`,\r\n    );\r\n  }\r\n  if ((kind === \"committed_ahead\" || kind === \"both\") && headCommit) {\r\n    const sha = headCommit.length > 12 ? headCommit.slice(0, 12) : headCommit;\r\n    parts.push(`commit ${sha} ahead of base with no final result`);\r\n  }\r\n  parts.push(\"review worktree \u2014 commit, open a PR, or run a salvage worker before discarding\");\r\n  return parts.join(\": \");\r\n}\r\n\r\n/**\r\n * Classify a dead worker with no `finalResult`. Returns null when the worker is\r\n * still alive or already recorded a final result.\r\n */\r\nexport function assessExitedWorkerSalvage(input: {\r\n  alive: boolean;\r\n  finalResult: unknown;\r\n  changedFiles?: string[];\r\n  gitAncestry?: GitAncestry | null;\r\n  headCommit?: string | null;\r\n}): ExitedSalvageAssessment | null {\r\n  if (input.alive || hasFinalResult(input.finalResult)) return null;\r\n\r\n  const uncommittedCount = (input.changedFiles ?? []).filter((line) => line.trim()).length;\r\n  const headCommit = trimOrNull(input.headCommit) ?? committedHeadFromAncestry(input.gitAncestry);\r\n  const hasUncommitted = uncommittedCount > 0;\r\n  const hasCommittedAhead = Boolean(headCommit);\r\n\r\n  if (!hasUncommitted && !hasCommittedAhead) {\r\n    return {\r\n      kind: \"none\",\r\n      salvageable: false,\r\n      uncommittedCount: 0,\r\n      headCommit: null,\r\n      attentionReason: \"process exited without a final result\",\r\n    };\r\n  }\r\n\r\n  const kind: ExitedSalvageKind =\r\n    hasUncommitted && hasCommittedAhead ? \"both\" : hasUncommitted ? \"uncommitted\" : \"committed_ahead\";\r\n\r\n  return {\r\n    kind,\r\n    salvageable: true,\r\n    uncommittedCount,\r\n    headCommit,\r\n    attentionReason: buildAttentionReason(kind, uncommittedCount, headCommit),\r\n  };\r\n}\r\n", "import { spawnSync } from \"node:child_process\";\r\nimport { fail } from \"./util.js\";\r\n\r\nexport interface GitOptions {\r\n  allowFailure?: boolean;\r\n  throwError?: boolean;\r\n}\r\n\r\nexport function git(cwd: string, args: string[], options: GitOptions = {}): string {\r\n  const res = spawnSync(\"git\", args, { cwd, encoding: \"utf8\" });\r\n  if (res.status !== 0 && !options.allowFailure) {\r\n    const message = `git ${args.join(\" \")} failed: ${res.stderr || res.stdout}`;\r\n    if (options.throwError) throw new Error(message);\r\n    fail(message);\r\n  }\r\n  return res.stdout || \"\";\r\n}\r\n\r\nexport function ensureGitRepo(repo: string): void {\r\n  git(repo, [\"rev-parse\", \"--show-toplevel\"]);\r\n}\r\n\r\nexport function gitStatusShort(worktreePath: string): string[] {\r\n  return git(worktreePath, [\"status\", \"--short\"], { allowFailure: true })\r\n    .split(\"\\n\")\r\n    .map((line) => line.trim())\r\n    .filter(Boolean);\r\n}\r\n\r\nexport interface GitCaptureResult {\r\n  status: number | null;\r\n  stdout: string;\r\n  stderr: string;\r\n  error: string | null;\r\n}\r\n\r\nexport function gitCapture(cwd: string, args: string[]): GitCaptureResult {\r\n  try {\r\n    const res = spawnSync(\"git\", args, { cwd, encoding: \"utf8\" });\r\n    return {\r\n      status: res.status,\r\n      stdout: res.stdout || \"\",\r\n      stderr: res.stderr || \"\",\r\n      error: res.error ? res.error.message : null,\r\n    };\r\n  } catch (error) {\r\n    return {\r\n      status: null,\r\n      stdout: \"\",\r\n      stderr: \"\",\r\n      error: (error as Error).message,\r\n    };\r\n  }\r\n}\r\n\r\nexport function gitIsAncestor(\r\n  cwd: string,\r\n  ancestor: string,\r\n  descendant: string,\r\n): { isAncestor: boolean | null; error: string | null } {\r\n  const res = gitCapture(cwd, [\"merge-base\", \"--is-ancestor\", ancestor, descendant]);\r\n  if (res.status === 0) return { isAncestor: true, error: null };\r\n  if (res.status === 1) return { isAncestor: false, error: null };\r\n  return { isAncestor: null, error: res.error || res.stderr || res.stdout || `git exited ${res.status}` };\r\n}\r\n\r\nexport type GitAncestryRelation = \"synced\" | \"merged\" | \"ahead\" | \"diverged\" | \"unknown\";\r\n\r\nexport interface GitAncestry {\r\n  checked: boolean;\r\n  base: string;\r\n  head: string | null;\r\n  baseHead: string | null;\r\n  baseIsAncestorOfHead: boolean | null;\r\n  headIsAncestorOfBase: boolean | null;\r\n  relation: GitAncestryRelation;\r\n  error?: string;\r\n}\r\n\r\nexport interface GitAncestryOptions {\r\n  /** Branch or ref name (e.g. origin/main). Used when baseCommit is unset. */\r\n  base?: string;\r\n  /** Pinned SHA the worktree was created from \u2014 preferred over a moving branch ref. */\r\n  baseCommit?: string;\r\n}\r\n\r\nexport function computeGitAncestry(worktreePath: string, baseOrOptions: string | GitAncestryOptions = \"origin/main\"): GitAncestry {\r\n  const options: GitAncestryOptions =\r\n    typeof baseOrOptions === \"string\" ? { base: baseOrOptions } : baseOrOptions;\r\n  const baseLabel = options.baseCommit?.trim() || options.base?.trim() || \"origin/main\";\r\n  const pinnedBaseCommit = options.baseCommit?.trim() || null;\r\n\r\n  if (!worktreePath) {\r\n    return unknownAncestry(baseLabel, \"missing worktree path\");\r\n  }\r\n\r\n  const head = gitCapture(worktreePath, [\"rev-parse\", \"HEAD\"]);\r\n  if (head.status !== 0) {\r\n    return unknownAncestry(baseLabel, head.error || head.stderr || head.stdout || \"failed to resolve HEAD\");\r\n  }\r\n\r\n  let baseSha: string;\r\n  if (pinnedBaseCommit) {\r\n    baseSha = pinnedBaseCommit;\r\n  } else {\r\n    const baseHead = gitCapture(worktreePath, [\"rev-parse\", baseLabel]);\r\n    if (baseHead.status !== 0) {\r\n      return unknownAncestry(\r\n        baseLabel,\r\n        baseHead.error || baseHead.stderr || baseHead.stdout || `failed to resolve ${baseLabel}`,\r\n        head.stdout.trim(),\r\n      );\r\n    }\r\n    baseSha = baseHead.stdout.trim();\r\n  }\r\n\r\n  const headSha = head.stdout.trim();\r\n  if (headSha === baseSha) {\r\n    return {\r\n      checked: true,\r\n      base: baseLabel,\r\n      head: headSha,\r\n      baseHead: baseSha,\r\n      baseIsAncestorOfHead: true,\r\n      headIsAncestorOfBase: true,\r\n      relation: \"synced\",\r\n    };\r\n  }\r\n\r\n  const baseIsAncestorOfHead = gitIsAncestor(worktreePath, baseSha, headSha);\r\n  const headIsAncestorOfBase = gitIsAncestor(worktreePath, headSha, baseSha);\r\n  const error = baseIsAncestorOfHead.error || headIsAncestorOfBase.error || undefined;\r\n  if (baseIsAncestorOfHead.isAncestor == null || headIsAncestorOfBase.isAncestor == null) {\r\n    return {\r\n      checked: false,\r\n      base: baseLabel,\r\n      head: headSha,\r\n      baseHead: baseSha,\r\n      baseIsAncestorOfHead: baseIsAncestorOfHead.isAncestor,\r\n      headIsAncestorOfBase: headIsAncestorOfBase.isAncestor,\r\n      relation: \"unknown\",\r\n      ...(error ? { error } : {}),\r\n    };\r\n  }\r\n\r\n  const relation: GitAncestryRelation = baseIsAncestorOfHead.isAncestor\r\n    ? \"ahead\"\r\n    : headIsAncestorOfBase.isAncestor\r\n      ? \"merged\"\r\n      : \"diverged\";\r\n\r\n  return {\r\n    checked: true,\r\n    base: baseLabel,\r\n    head: headSha,\r\n    baseHead: baseSha,\r\n    baseIsAncestorOfHead: baseIsAncestorOfHead.isAncestor,\r\n    headIsAncestorOfBase: headIsAncestorOfBase.isAncestor,\r\n    relation,\r\n    ...(error ? { error } : {}),\r\n  };\r\n}\r\n\r\nfunction unknownAncestry(base: string, error: string, head: string | null = null): GitAncestry {\r\n  return {\r\n    checked: false,\r\n    base,\r\n    head,\r\n    baseHead: null,\r\n    baseIsAncestorOfHead: null,\r\n    headIsAncestorOfBase: null,\r\n    relation: \"unknown\",\r\n    error,\r\n  };\r\n}\r\n\r\nexport { scrubClaudeEnv, scrubWorkerEnv } from \"./worker-env.js\";\r\n", "/**\r\n * Worker spawn env scrub \u2014 harness workers must not inherit host deployment secrets.\r\n */\r\n\r\n/** Exact env keys that must never reach a worker child process. */\r\nexport const FORBIDDEN_WORKER_ENV_KEYS = [\r\n  \"ANTHROPIC_API_KEY\",\r\n  \"ANALYST_API_KEY\",\r\n  \"RECRUITER_API_KEY\",\r\n  \"AUTH_SECRET\",\r\n  \"NEXTAUTH_SECRET\",\r\n  \"DATABASE_URL\",\r\n  \"PRODUCTION_DATABASE_URL\",\r\n  \"KYNVER_PRODUCTION_DATABASE_URL\",\r\n  \"REDIS_URL\",\r\n  \"GOOGLE_CLIENT_SECRET\",\r\n  \"GITHUB_CLIENT_SECRET\",\r\n  \"KYNVER_API_KEY\",\r\n  \"KYNVER_SERVICE_SECRET\",\r\n  \"KYNVER_RUNTIME_SECRET\",\r\n  \"KYNVER_CRON_SECRET\",\r\n  \"OPENCLAW_CRON_SECRET\",\r\n  \"QSTASH_TOKEN\",\r\n  \"QSTASH_CURRENT_SIGNING_KEY\",\r\n  \"QSTASH_NEXT_SIGNING_KEY\",\r\n  \"TOOL_SECRETS_KEK\",\r\n  \"TOOL_EXECUTOR_DISPATCH_SECRET\",\r\n  \"CLOUDFLARE_API_TOKEN\",\r\n  \"STRIPE_SECRET_KEY\",\r\n  \"STRIPE_WEBHOOK_SECRET\",\r\n  \"STRIPE_IDENTITY_WEBHOOK_SECRET\",\r\n  \"VOYAGE_API_KEY\",\r\n  \"PERPLEXITY_API_KEY\",\r\n  \"FRED_API_KEY\",\r\n  \"FMP_API_KEY\",\r\n  \"CURSOR_API_KEY\",\r\n] as const;\r\n\r\nconst FORBIDDEN_KEY_SET = new Set<string>(FORBIDDEN_WORKER_ENV_KEYS);\r\n\r\n/** Keys matching these suffixes are stripped (case-sensitive). */\r\nconst FORBIDDEN_SUFFIXES = [\"_SECRET\", \"_API_KEY\"] as const;\r\n\r\nexport function isForbiddenWorkerEnvKey(key: string): boolean {\r\n  if (FORBIDDEN_KEY_SET.has(key)) return true;\r\n  return FORBIDDEN_SUFFIXES.some((suffix) => key.endsWith(suffix));\r\n}\r\n\r\nexport function listForbiddenWorkerEnvKeys(env: NodeJS.ProcessEnv): string[] {\r\n  return Object.keys(env).filter(isForbiddenWorkerEnvKey).sort();\r\n}\r\n\r\nexport function scrubWorkerEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv {\r\n  const next = { ...env };\r\n  for (const key of Object.keys(next)) {\r\n    if (isForbiddenWorkerEnvKey(key)) delete next[key];\r\n  }\r\n  return next;\r\n}\r\n\r\nexport interface WorkerEnvAudit {\r\n  forbiddenPresent: string[];\r\n  safe: boolean;\r\n}\r\n\r\nexport function auditWorkerEnv(env: NodeJS.ProcessEnv): WorkerEnvAudit {\r\n  const forbiddenPresent = listForbiddenWorkerEnvKeys(env);\r\n  return { forbiddenPresent, safe: forbiddenPresent.length === 0 };\r\n}\r\n\r\n/** @deprecated Use {@link scrubWorkerEnv} \u2014 kept for existing imports from git.ts */\r\nexport function scrubClaudeEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv {\r\n  return scrubWorkerEnv(env);\r\n}\r\n", "import type { GitAncestry } from \"./git.js\";\r\n\r\nexport type WorkerLandingBlockReason = \"dirty_worktree_no_pr\";\r\n\r\nexport interface WorkerLandingSnapshot {\r\n  finalResult: unknown;\r\n  changedFiles: string[];\r\n  headCommit?: string | null;\r\n  prUrl?: string | null;\r\n  artifactBundlePath?: string | null;\r\n  patchPath?: string | null;\r\n  gitAncestry?: GitAncestry | null;\r\n}\r\n\r\nexport interface WorkerLandingVerdict {\r\n  /** When true, do not treat the worker as cleanly landed/done. */\r\n  blocked: boolean;\r\n  reason?: WorkerLandingBlockReason;\r\n  /** Human-readable attention reason for boards and completion payloads. */\r\n  detail?: string;\r\n}\r\n\r\nfunction trimOrNull(value: unknown): string | null {\r\n  if (typeof value !== \"string\") return null;\r\n  const trimmed = value.trim();\r\n  return trimmed.length ? trimmed : null;\r\n}\r\n\r\nfunction hasFinalResult(value: unknown): boolean {\r\n  if (value === undefined || value === null) return false;\r\n  if (typeof value === \"string\") return value.trim().length > 0;\r\n  if (typeof value === \"boolean\") return value;\r\n  if (Array.isArray(value)) return value.length > 0;\r\n  if (typeof value === \"object\") return Object.keys(value as object).length > 0;\r\n  return true;\r\n}\r\n\r\nfunction hasCommittedLandingRef(snapshot: WorkerLandingSnapshot): boolean {\r\n  if (trimOrNull(snapshot.headCommit)) return true;\r\n  if (trimOrNull(snapshot.prUrl)) return true;\r\n  if (trimOrNull(snapshot.artifactBundlePath)) return true;\r\n  if (trimOrNull(snapshot.patchPath)) return true;\r\n  const ancestry = snapshot.gitAncestry;\r\n  if (ancestry?.checked && ancestry.headIsAncestorOfBase === false && trimOrNull(ancestry.head)) {\r\n    return true;\r\n  }\r\n  return false;\r\n}\r\n\r\n/**\r\n * Hard landing gate: a recorded final result is not sufficient when the worker\r\n * left uncommitted code and has no commit/PR/patch/bundle landing path.\r\n */\r\nexport function assessWorkerLanding(snapshot: WorkerLandingSnapshot): WorkerLandingVerdict {\r\n  if (!hasFinalResult(snapshot.finalResult)) return { blocked: false };\r\n  if (snapshot.changedFiles.length === 0) return { blocked: false };\r\n  if (!hasCommittedLandingRef(snapshot)) {\r\n    return {\r\n      blocked: true,\r\n      reason: \"dirty_worktree_no_pr\",\r\n      detail: `Worktree has ${snapshot.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`,\r\n    };\r\n  }\r\n  return {\r\n    blocked: true,\r\n    detail: `Worktree has ${snapshot.changedFiles.length} uncommitted change(s); commit or discard before landing`,\r\n  };\r\n}\r\n\r\nexport function landingAttentionReason(verdict: WorkerLandingVerdict): string | undefined {\r\n  if (!verdict.blocked) return undefined;\r\n  return verdict.detail ?? verdict.reason ?? \"dirty_worktree_no_pr\";\r\n}\r\n", "// Extract structured harness finalResult JSON embedded in markdown prose.\r\n\r\nfunction tryParseJsonObject(text: string): Record<string, unknown> | null {\r\n  const trimmed = text.trim();\r\n  if (!trimmed.startsWith(\"{\")) return null;\r\n  try {\r\n    const parsed: unknown = JSON.parse(trimmed);\r\n    if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) {\r\n      return parsed as Record<string, unknown>;\r\n    }\r\n  } catch {\r\n    return null;\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction reconciliationEntryCount(record: Record<string, unknown>): number {\r\n  const raw =\r\n    record.targetPrReconciliation ??\r\n    record.target_pr_reconciliation ??\r\n    record.targetPrs ??\r\n    record.target_prs;\r\n  return Array.isArray(raw) ? raw.length : 0;\r\n}\r\n\r\nexport function extractEmbeddedWorkerFinalResultRecord(\r\n  value: string,\r\n): Record<string, unknown> | null {\r\n  const trimmed = value.trim();\r\n  if (!trimmed) return null;\r\n\r\n  const direct = tryParseJsonObject(trimmed);\r\n  if (direct) return direct;\r\n\r\n  const candidates: Record<string, unknown>[] = [];\r\n\r\n  const fenceRe = /```(?:json)?\\s*([\\s\\S]*?)```/gi;\r\n  let fenceMatch: RegExpExecArray | null;\r\n  while ((fenceMatch = fenceRe.exec(trimmed)) !== null) {\r\n    const fromFence = tryParseJsonObject(fenceMatch[1] ?? \"\");\r\n    if (fromFence) candidates.push(fromFence);\r\n  }\r\n\r\n  const firstBrace = trimmed.indexOf(\"{\");\r\n  const lastBrace = trimmed.lastIndexOf(\"}\");\r\n  if (firstBrace >= 0 && lastBrace > firstBrace) {\r\n    const slice = tryParseJsonObject(trimmed.slice(firstBrace, lastBrace + 1));\r\n    if (slice) candidates.push(slice);\r\n  }\r\n\r\n  if (candidates.length === 0) return null;\r\n\r\n  let best = candidates[candidates.length - 1]!;\r\n  let bestScore = reconciliationEntryCount(best);\r\n  for (const candidate of candidates) {\r\n    const score = reconciliationEntryCount(candidate);\r\n    if (score > bestScore) {\r\n      best = candidate;\r\n      bestScore = score;\r\n    }\r\n  }\r\n  return best;\r\n}\r\n", "// Runtime mirror of server landing-contract gate (Dalton landing-only / target PRs).\r\n\r\nimport { extractEmbeddedWorkerFinalResultRecord } from \"./worker-final-result-embed.js\";\r\nimport type { WorkerLandingSnapshot } from \"./landing-gate.js\";\r\n\r\nexport type TargetPrOutcome = \"merged\" | \"skipped\" | \"blocked\";\r\n\r\nexport interface TargetPrReconciliation {\r\n  prUrl: string;\r\n  outcome: TargetPrOutcome;\r\n  mergeCommit?: string | null;\r\n  reason?: string | null;\r\n}\r\n\r\nexport interface WorkerLandingContract {\r\n  landingOnly: boolean;\r\n  targetPrUrls: string[];\r\n  targetPrUrl?: string | null;\r\n  repairEnforceOriginalPr?: boolean;\r\n  requiresTargetPrReconciliation?: boolean;\r\n}\r\n\r\nexport type WorkerLandingContractBlockReason =\r\n  | \"unrelated_implementation_pr\"\r\n  | \"missing_target_pr_reconciliation\"\r\n  | \"incomplete_target_pr_landing\"\r\n  | \"duplicate_repair_pr\"\r\n  | \"missing_repair_target_reconciliation\";\r\n\r\nexport interface WorkerLandingContractVerdict {\r\n  blocked: boolean;\r\n  reason?: WorkerLandingContractBlockReason;\r\n  detail?: string;\r\n}\r\n\r\nfunction trimOrNull(value: unknown): string | null {\r\n  if (typeof value !== \"string\") return null;\r\n  const t = value.trim();\r\n  return t.length ? t : null;\r\n}\r\n\r\nfunction hasFinalResult(value: unknown): boolean {\r\n  if (value === undefined || value === null) return false;\r\n  if (typeof value === \"string\") return value.trim().length > 0;\r\n  if (typeof value === \"object\") return Object.keys(value as object).length > 0;\r\n  return true;\r\n}\r\n\r\nfunction normalizePrUrl(url: string): string | null {\r\n  const m = url\r\n    .trim()\r\n    .match(/github\\.com\\/([^/]+\\/[^/]+)\\/(?:pull|pulls)\\/(\\d+)/i);\r\n  if (!m) return trimOrNull(url);\r\n  return `https://github.com/${m[1]}/pull/${m[2]}`;\r\n}\r\n\r\nfunction prUrlSetKey(url: string): string {\r\n  const m = url\r\n    .trim()\r\n    .match(/github\\.com\\/([^/]+\\/[^/]+)\\/(?:pull|pulls)\\/(\\d+)/i);\r\n  if (!m) return url.trim().toLowerCase();\r\n  return `${m[1].toLowerCase()}/pull/${m[2]}`;\r\n}\r\n\r\nfunction parseReconciliation(finalResult: unknown): TargetPrReconciliation[] {\r\n  let record: Record<string, unknown> | null = null;\r\n  if (typeof finalResult === \"string\") {\r\n    const embedded = extractEmbeddedWorkerFinalResultRecord(finalResult);\r\n    if (embedded) record = embedded;\r\n  } else if (finalResult && typeof finalResult === \"object\" && !Array.isArray(finalResult)) {\r\n    record = finalResult as Record<string, unknown>;\r\n  }\r\n  if (!record) return [];\r\n  const raw = record.targetPrReconciliation ?? record.target_pr_reconciliation;\r\n  if (!Array.isArray(raw)) return [];\r\n  const out: TargetPrReconciliation[] = [];\r\n  for (const item of raw) {\r\n    if (!item || typeof item !== \"object\" || Array.isArray(item)) continue;\r\n    const row = item as Record<string, unknown>;\r\n    const prUrl = normalizePrUrl(String(row.prUrl ?? row.pr_url ?? \"\"));\r\n    const outcome = trimOrNull(row.outcome);\r\n    if (!prUrl || (outcome !== \"merged\" && outcome !== \"skipped\" && outcome !== \"blocked\")) continue;\r\n    out.push({\r\n      prUrl,\r\n      outcome,\r\n      mergeCommit: trimOrNull(row.mergeCommit ?? row.merge_commit),\r\n      reason: trimOrNull(row.reason),\r\n    });\r\n  }\r\n  return out;\r\n}\r\n\r\n/** Snapshot / structured prUrl only \u2014 not laneExpertise.prUrls citation evidence. */\r\nfunction workerAttachedPrUrls(snapshot: WorkerLandingSnapshot, finalResult: unknown): string[] {\r\n  const urls: string[] = [];\r\n  const fromSnapshot = normalizePrUrl(trimOrNull(snapshot.prUrl) ?? \"\");\r\n  if (fromSnapshot) urls.push(fromSnapshot);\r\n  if (finalResult && typeof finalResult === \"object\" && !Array.isArray(finalResult)) {\r\n    const record = finalResult as Record<string, unknown>;\r\n    const pr = normalizePrUrl(String(record.prUrl ?? record.pr_url ?? \"\"));\r\n    if (pr) urls.push(pr);\r\n  }\r\n  return [...new Set(urls)];\r\n}\r\n\r\nexport function assessWorkerLandingContract(input: {\r\n  contract: WorkerLandingContract;\r\n  snapshot: WorkerLandingSnapshot;\r\n  finalResult?: unknown;\r\n}): WorkerLandingContractVerdict {\r\n  const { contract, snapshot } = input;\r\n  const finalResult = input.finalResult ?? snapshot.finalResult;\r\n\r\n  if (\r\n    !contract.landingOnly &&\r\n    contract.targetPrUrls.length === 0 &&\r\n    !contract.repairEnforceOriginalPr\r\n  ) {\r\n    return { blocked: false };\r\n  }\r\n  if (!hasFinalResult(finalResult)) {\r\n    const requiresEarly =\r\n      contract.requiresTargetPrReconciliation ??\r\n      (contract.landingOnly ||\r\n        Boolean(contract.repairEnforceOriginalPr) ||\r\n        contract.targetPrUrls.length > 0);\r\n    if (requiresEarly && contract.targetPrUrls.length > 0) {\r\n      return {\r\n        blocked: true,\r\n        reason: \"missing_target_pr_reconciliation\",\r\n        detail: `Final result required to reconcile target PR(s): ${contract.targetPrUrls.join(\", \")}`,\r\n      };\r\n    }\r\n    return { blocked: false };\r\n  }\r\n\r\n  const requiresTargetPrReconciliation =\r\n    contract.requiresTargetPrReconciliation ??\r\n    (contract.landingOnly ||\r\n      Boolean(contract.repairEnforceOriginalPr) ||\r\n      contract.targetPrUrls.length > 0);\r\n\r\n  if (!requiresTargetPrReconciliation && !contract.repairEnforceOriginalPr) {\r\n    return { blocked: false };\r\n  }\r\n\r\n  const repairTarget = contract.repairEnforceOriginalPr\r\n    ? normalizePrUrl(trimOrNull(contract.targetPrUrl) ?? \"\") ??\r\n      (contract.targetPrUrls.length === 1\r\n        ? normalizePrUrl(contract.targetPrUrls[0]!)\r\n        : null)\r\n    : null;\r\n  if (repairTarget) {\r\n    const workerPrs = workerAttachedPrUrls(snapshot, finalResult);\r\n    const supersedes =\r\n      finalResult &&\r\n      typeof finalResult === \"object\" &&\r\n      !Array.isArray(finalResult) &&\r\n      (finalResult as Record<string, unknown>).supersedesOriginalTargetPr === true;\r\n    if (!supersedes) {\r\n      for (const pr of workerPrs) {\r\n        if (pr !== repairTarget) {\r\n          return {\r\n            blocked: true,\r\n            reason: \"duplicate_repair_pr\",\r\n            detail: `Repair worker opened or attached PR ${pr} instead of canonical target ${repairTarget}`,\r\n          };\r\n        }\r\n      }\r\n    }\r\n    const reconciliation = parseReconciliation(finalResult);\r\n    const entry = reconciliation.find((r) => r.prUrl === repairTarget);\r\n    if (\r\n      !entry ||\r\n      (entry.outcome !== \"merged\" &&\r\n        !(entry.reason?.trim() && (entry.outcome === \"skipped\" || entry.outcome === \"blocked\")))\r\n    ) {\r\n      return {\r\n        blocked: true,\r\n        reason: \"missing_repair_target_reconciliation\",\r\n        detail: `Repair worker must reconcile target PR ${repairTarget}`,\r\n      };\r\n    }\r\n  }\r\n\r\n  const reconciliation = parseReconciliation(finalResult);\r\n  const byUrl = new Map(\r\n    reconciliation.map((r) => [prUrlSetKey(r.prUrl), r] as const),\r\n  );\r\n  const targetSet = new Set(\r\n    contract.targetPrUrls.map((u) => prUrlSetKey(normalizePrUrl(u) ?? u)).filter(Boolean),\r\n  );\r\n  const attachedPrs = workerAttachedPrUrls(snapshot, finalResult);\r\n\r\n  if (contract.landingOnly) {\r\n    for (const pr of attachedPrs) {\r\n      if (targetSet.size > 0 && !targetSet.has(prUrlSetKey(pr))) {\r\n        return {\r\n          blocked: true,\r\n          reason: \"unrelated_implementation_pr\",\r\n          detail: `Landing-only worker attached unrelated PR ${pr}`,\r\n        };\r\n      }\r\n      if (targetSet.size === 0) {\r\n        return {\r\n          blocked: true,\r\n          reason: \"unrelated_implementation_pr\",\r\n          detail: \"Landing-only worker must not open new implementation PRs\",\r\n        };\r\n      }\r\n    }\r\n  }\r\n\r\n  if (contract.targetPrUrls.length === 0) return { blocked: false };\r\n\r\n  const missing: string[] = [];\r\n  for (const target of contract.targetPrUrls) {\r\n    const key = prUrlSetKey(normalizePrUrl(target) ?? target);\r\n    const entry = byUrl.get(key);\r\n    if (!entry) {\r\n      missing.push(key);\r\n      continue;\r\n    }\r\n    if (entry.outcome !== \"merged\" && !entry.reason?.trim()) {\r\n      missing.push(key);\r\n    }\r\n  }\r\n\r\n  if (missing.length > 0) {\r\n    return {\r\n      blocked: true,\r\n      reason: missing.every((u) => byUrl.has(u))\r\n        ? \"incomplete_target_pr_landing\"\r\n        : \"missing_target_pr_reconciliation\",\r\n      detail: `Target PR reconciliation incomplete: ${missing.join(\", \")}`,\r\n    };\r\n  }\r\n\r\n  return { blocked: false };\r\n}\r\n\r\nexport function landingContractAttentionReason(\r\n  verdict: WorkerLandingContractVerdict,\r\n): string | undefined {\r\n  if (!verdict.blocked) return undefined;\r\n  return verdict.detail ?? verdict.reason;\r\n}\r\n", "import { parseHeartbeat, terminalFinalResultFromHeartbeat } from \"./heartbeat.js\";\r\nimport { parseHarnessStream } from \"./stream.js\";\r\nimport { classifyExitFailure } from \"./exit-classify.js\";\r\nimport { assessExitedWorkerSalvage } from \"./exited-salvage.js\";\r\nimport { computeGitAncestry, type GitAncestry, gitStatusShort } from \"./git.js\";\r\nimport { assessWorkerLanding, landingAttentionReason } from \"./landing-gate.js\";\r\nimport {\r\n  assessWorkerLandingContract,\r\n  landingContractAttentionReason,\r\n  type WorkerLandingContract,\r\n  type TargetPrReconciliation,\r\n} from \"./landing-contract-gate.js\";\r\nimport { extractEmbeddedWorkerFinalResultRecord } from \"./worker-final-result-embed.js\";\r\nimport {\r\n  fileMtime,\r\n  fileSize,\r\n  isPidAlive,\r\n  latestIso,\r\n  secsAgo,\r\n  tailFile,\r\n} from \"./util.js\";\r\n\r\nexport const NO_START_MS = 180_000;\r\nexport const STALE_MS = 600_000;\r\n\r\nexport interface WorkerAttention {\r\n  state: \"done\" | \"needs_attention\" | \"blocked\" | \"stale\" | \"ok\";\r\n  reason: string;\r\n}\r\n\r\n/** Snapshot of Lane A policy injection at worker spawn (from dispatch-next). */\r\nexport interface InstructionPolicyEvidenceSnapshot {\r\n  fingerprint?: string;\r\n  ruleSlugs?: string[];\r\n  globalRuleCount?: number;\r\n  personaRuleCount?: number;\r\n  explicitKindCount?: number;\r\n  invariantCount?: number;\r\n  markdownChars?: number;\r\n  injectedAt?: string;\r\n}\r\n\r\n/** Snapshot of task-anchored context envelope injection at worker spawn. */\r\nexport interface ContextEnvelopeEvidenceSnapshot {\r\n  anchorTaskId?: string;\r\n  envelopeGeneratedAt?: string;\r\n  injectedAt?: string;\r\n  hasPersonaBlock?: boolean;\r\n  personaSlug?: string | null;\r\n  operatingRuleCount?: number;\r\n  memoryHitCount?: number;\r\n  markdownChars?: number;\r\n  source?: \"dispatch_injection\" | \"tool_call\";\r\n}\r\n\r\n/** Snapshot of anchored persona context-envelope injection at worker spawn. */\r\nexport interface PersonaContextEvidenceSnapshot {\r\n  expectedPersonaSlug?: string;\r\n  injectedPersonaSlug?: string;\r\n  displayName?: string;\r\n  operatingRuleCount?: number;\r\n  anchorTaskId?: string;\r\n  envelopeGeneratedAt?: string;\r\n  injectedAt?: string;\r\n  markdownChars?: number;\r\n}\r\n\r\n/** Dispatch-time retrieval probe replayed on harness completion. */\r\nexport interface HarnessMemoryQualityCaptureSnapshot {\r\n  memoryQuery: string;\r\n  hitCount: number;\r\n  miss: boolean;\r\n  capturedAt: string;\r\n  retrievalEvidence?: Record<string, unknown> | null;\r\n  /** P7 privacy-safe prompt block (trace summary + live-verification nudges). */\r\n  promptMarkdown?: string | null;\r\n}\r\n\r\nexport interface HarnessWorkerRecord {\r\n  name: string;\r\n  runId: string;\r\n  status: string;\r\n  pid?: number;\r\n  model?: string;\r\n  branch: string;\r\n  worktreePath: string;\r\n  workerDir: string;\r\n  stdoutPath: string;\r\n  stderrPath: string;\r\n  heartbeatPath: string;\r\n  ownedPaths?: string[];\r\n  agentOsId?: string;\r\n  taskId?: string;\r\n  planId?: string;\r\n  /** Lane A policy fingerprint when dispatch injected operating rules. */\r\n  instructionPolicyFingerprint?: string;\r\n  instructionPolicyEvidence?: InstructionPolicyEvidenceSnapshot;\r\n  memoryQualityCapture?: HarnessMemoryQualityCaptureSnapshot;\r\n  personaSlug?: string;\r\n  personaEvidence?: PersonaContextEvidenceSnapshot;\r\n  contextEnvelopeEvidence?: ContextEnvelopeEvidenceSnapshot;\r\n  leaseOwner?: string;\r\n  /** Fencing token from claim \u2014 sent on renew/completion when set. */\r\n  leaseToken?: string;\r\n  dispatched?: boolean;\r\n  startedAt?: string;\r\n  /** Routing audit \u2014 which rule selected model/provider (dispatch inference). */\r\n  routingRule?: string;\r\n  requestedModel?: string;\r\n  /** Orchestration provider/model/auth-source/cost audit (no OAuth secrets). */\r\n  orchestrationAudit?: import(\"./orchestration-providers/types.js\").OrchestrationRoutingAudit;\r\n  /** Board task metadata for landing/PR-handoff gates (set at dispatch). */\r\n  executorRef?: string;\r\n  parentTaskId?: string;\r\n  taskTitle?: string;\r\n  taskPrUrl?: string;\r\n  /** Canonical target PR for repair workers (must not spawn duplicate PRs). */\r\n  repairTargetPrUrl?: string;\r\n  repairTargetBranch?: string;\r\n  /** Set when stale-reconcile patches a dead/stale worker record. */\r\n  reconciledAt?: string;\r\n  reconcileReason?: string;\r\n  /** Last heartbeat blocker text successfully synced to plan-progress-sync (dedupe). */\r\n  lastSyncedHeartbeatBlocker?: string;\r\n  /**\r\n   * Set when the most recent AgentOS completion replay for this finished worker\r\n   * was rejected (e.g. a revoked / expired / cross-workspace runner token) or\r\n   * otherwise failed. While set, the worker is NOT treated as cleanly done:\r\n   * `finalizeStaleRuns` keeps the run non-terminal and the board surfaces it.\r\n   * Cleared once the completion is acknowledged (2xx). Local-only \u2014 never sent\r\n   * to the server as part of the worker's intrinsic status.\r\n   */\r\n  completionBlocker?: string;\r\n  /** ISO timestamp when `/harness/completion` returned 2xx for this worker. */\r\n  completionReportedAt?: string;\r\n  /** Snapshot from the acknowledged completion POST \u2014 local-only. */\r\n  completionSnapshot?: { finalResult?: unknown; prUrl?: string | null; summary?: string | null };\r\n  /** Audit tag for how `completionReportedAt` was set (`tryCompleteWorker`, `board-task-*`). */\r\n  completionAckSource?: string;\r\n  /** Local mirror of the last completion POST outcome. */\r\n  completionOutcome?: \"acknowledged\" | \"rejected\";\r\n  /** Truncated JSON body from the last acknowledged completion response. */\r\n  completionResponse?: unknown;\r\n  /**\r\n   * Direct/local worker with no board linkage \u2014 must not be mistaken for an\r\n   * AgentTask-backed harness worker in completion or dispatch paths.\r\n   */\r\n  localOnly?: boolean;\r\n  /** Sidecar PID when detached; used for observability only. */\r\n  completionSidecarPid?: number;\r\n  completionSidecarSpawnFailedAt?: string;\r\n  /** One-off helper paths removed before completion (`kynver worker discard-disposable`). */\r\n  disposableArtifactsRemoved?: string[];\r\n}\r\n\r\nexport interface RawHarnessWorkerStatus {\r\n  runId: string;\r\n  worker: string;\r\n  pid?: number;\r\n  alive: boolean;\r\n  status: string;\r\n  attention: WorkerAttention;\r\n  branch: string;\r\n  worktreePath: string;\r\n  ownedPaths?: string[];\r\n  stdoutBytes: number;\r\n  stderrBytes: number;\r\n  heartbeatBytes: number;\r\n  firstEventAt: string | null;\r\n  lastEventAt: string | null;\r\n  lastActivityAt: string | null;\r\n  currentTool: string | null;\r\n  heartbeatCount: number;\r\n  lastHeartbeatAt: string | null;\r\n  lastHeartbeatPhase: string | null;\r\n  lastHeartbeatSummary: string | null;\r\n  heartbeatBlocker: string | null;\r\n  /** Parser-detected timestamp anomalies (e.g., future heartbeat ts). */\r\n  timestampAnomalies?: Array<{\r\n    kind: \"future_heartbeat_timestamp\";\r\n    observedAt: string;\r\n    clampedTo: string;\r\n  }>;\r\n  finalResult: unknown;\r\n  error?: string;\r\n  changedFiles: string[];\r\n  gitAncestry: GitAncestry;\r\n  /** Set by PR-ready handoff before completion is posted. */\r\n  prUrl?: string;\r\n  headCommit?: string;\r\n  /** Paths removed via `kynver worker discard-disposable` before completion POST. */\r\n  disposableArtifactsRemoved?: string[];\r\n  /** Fencing token from claim \u2014 echoed on completion when set. */\r\n  leaseToken?: string;\r\n  /** Lane A policy fields echoed on completion status for mirror recovery. */\r\n  instructionPolicyFingerprint?: string | null;\r\n  instructionPolicyEvidence?: InstructionPolicyEvidenceSnapshot | null;\r\n}\r\n\r\nexport interface WorkerStatusOptions {\r\n  /** Branch ref for ancestry when baseCommit is not set. */\r\n  base?: string;\r\n  /** Pinned SHA from run creation \u2014 preferred for ancestry vs a moving branch tip. */\r\n  baseCommit?: string;\r\n}\r\n\r\nexport function computeAttention(input: {\r\n  alive: boolean;\r\n  finalResult: unknown;\r\n  firstEventAt: string | null;\r\n  stdoutBytes: number;\r\n  stderrBytes?: number;\r\n  heartbeatBytes: number;\r\n  lastActivityAt: string | null;\r\n  heartbeatBlocker: string | null;\r\n  startedAt?: string;\r\n  /** stderr tail / parsed error for a worker that died without a final result. */\r\n  error?: string | null;\r\n  changedFiles?: string[];\r\n  gitAncestry?: GitAncestry | null;\r\n  completionBlocker?: string | null;\r\n  landingContract?: WorkerLandingContract | null;\r\n  prUrl?: string | null;\r\n  localOnly?: boolean;\r\n  taskId?: string | null;\r\n  agentOsId?: string | null;\r\n  reconcileReason?: string | null;\r\n}): WorkerAttention {\r\n  const now = Date.now();\r\n  if (input.completionBlocker && !isSkippedTerminalCompletionBlocker(input.completionBlocker)) {\r\n    return { state: \"blocked\", reason: input.completionBlocker };\r\n  }\r\n  if (input.finalResult) {\r\n    if (input.localOnly && hasMergedTargetPrReconciliation(input.finalResult)) {\r\n      return { state: \"done\", reason: \"local-only worker superseded by merged PR\" };\r\n    }\r\n    const landingSnapshot = {\r\n      finalResult: input.finalResult,\r\n      changedFiles: input.changedFiles ?? [],\r\n      gitAncestry: input.gitAncestry ?? null,\r\n      prUrl: input.prUrl ?? null,\r\n    };\r\n    const landing = assessWorkerLanding(landingSnapshot);\r\n    if (landing.blocked) {\r\n      const detail = landingAttentionReason(landing);\r\n      return {\r\n        state: \"needs_attention\",\r\n        reason: landing.reason\r\n          ? `landing blocked (${landing.reason}): ${detail}`\r\n          : `landing blocked: ${detail}`,\r\n      };\r\n    }\r\n    if (input.landingContract) {\r\n      const contractVerdict = assessWorkerLandingContract({\r\n        contract: input.landingContract,\r\n        snapshot: landingSnapshot,\r\n        finalResult: input.finalResult,\r\n      });\r\n      const contractDetail = landingContractAttentionReason(contractVerdict);\r\n      if (contractDetail) {\r\n        return {\r\n          state: \"needs_attention\",\r\n          reason: contractVerdict.reason\r\n            ? `landing contract (${contractVerdict.reason}): ${contractDetail}`\r\n            : `landing contract: ${contractDetail}`,\r\n        };\r\n      }\r\n    }\r\n    return { state: \"done\", reason: \"final result recorded\" };\r\n  }\r\n  if (!input.alive) {\r\n    if (isAbandonedEmptyWorker(input)) {\r\n      return { state: \"done\", reason: \"empty abandoned worker record\" };\r\n    }\r\n    // A worker that exited without a final result is not always a silent stall:\r\n    // a recognizable startup/config failure (model/provider rejection, missing\r\n    // CLI, auth) is a structural blocker, not a generic needs_attention.\r\n    const classified = classifyExitFailure(input.error);\r\n    if (classified) return { state: \"blocked\", reason: classified.reason };\r\n    const salvage = assessExitedWorkerSalvage({\r\n      alive: false,\r\n      finalResult: null,\r\n      changedFiles: input.changedFiles,\r\n      gitAncestry: input.gitAncestry,\r\n    });\r\n    if (salvage?.salvageable) {\r\n      const tail = input.error?.trim();\r\n      return {\r\n        state: \"needs_attention\",\r\n        reason: tail ? `${salvage.attentionReason} (${tail})` : salvage.attentionReason,\r\n      };\r\n    }\r\n    const tail = input.error?.trim();\r\n    return {\r\n      state: \"needs_attention\",\r\n      reason: tail\r\n        ? `process exited without a final result: ${tail}`\r\n        : salvage?.attentionReason ?? \"process exited without a final result\",\r\n    };\r\n  }\r\n  if (input.heartbeatBlocker) {\r\n    return { state: \"blocked\", reason: `worker heartbeat reported blocker: ${input.heartbeatBlocker}` };\r\n  }\r\n  const startMs = input.startedAt ? Date.parse(input.startedAt) : NaN;\r\n  if (\r\n    !input.firstEventAt &&\r\n    input.stdoutBytes === 0 &&\r\n    input.heartbeatBytes === 0 &&\r\n    Number.isFinite(startMs) &&\r\n    now - startMs > NO_START_MS\r\n  ) {\r\n    return { state: \"needs_attention\", reason: `no first stream event ${secsAgo(startMs)}s after start` };\r\n  }\r\n  const actMs = input.lastActivityAt ? Date.parse(input.lastActivityAt) : NaN;\r\n  if (Number.isFinite(actMs) && now - actMs > STALE_MS) {\r\n    return { state: \"stale\", reason: `no log/event/heartbeat activity for ${secsAgo(actMs)}s` };\r\n  }\r\n  return { state: \"ok\", reason: \"recent activity\" };\r\n}\r\n\r\nfunction isSkippedTerminalCompletionBlocker(reason: string | null | undefined): boolean {\r\n  const text = reason?.trim();\r\n  if (!text) return false;\r\n  return /completion acknowledged but board not advanced/i.test(text) && /task already terminal/i.test(text);\r\n}\r\n\r\nfunction isAbandonedEmptyWorker(input: {\r\n  finalResult: unknown;\r\n  stdoutBytes: number;\r\n  stderrBytes?: number;\r\n  heartbeatBytes: number;\r\n  changedFiles?: string[];\r\n  error?: string | null;\r\n  taskId?: string | null;\r\n  agentOsId?: string | null;\r\n  reconcileReason?: string | null;\r\n}): boolean {\r\n  if (input.finalResult) return false;\r\n  if (input.taskId || input.agentOsId) return false;\r\n  if (input.stdoutBytes > 0 || (input.stderrBytes ?? 0) > 0 || input.heartbeatBytes > 0) return false;\r\n  if (input.error?.trim()) return false;\r\n  if ((input.changedFiles ?? []).some((line) => line.trim())) return false;\r\n  return /empty worker dir|marked abandoned/i.test(input.reconcileReason ?? \"\");\r\n}\r\n\r\nfunction hasMergedTargetPrReconciliation(value: unknown): boolean {\r\n  let record: Record<string, unknown> | null = null;\r\n  if (typeof value === \"string\") record = extractEmbeddedWorkerFinalResultRecord(value);\r\n  else if (value && typeof value === \"object\" && !Array.isArray(value)) record = value as Record<string, unknown>;\r\n  if (!record) return false;\r\n  const raw = record.targetPrReconciliation ?? record.target_pr_reconciliation;\r\n  if (!Array.isArray(raw)) return false;\r\n  return raw.some((item): item is TargetPrReconciliation => {\r\n    if (!item || typeof item !== \"object\" || Array.isArray(item)) return false;\r\n    return String((item as Record<string, unknown>).outcome ?? \"\").trim() === \"merged\";\r\n  });\r\n}\r\n\r\nfunction resolveFinalResult(\r\n  worker: HarnessWorkerRecord,\r\n  parsedFinalResult: unknown,\r\n  heartbeat: ReturnType<typeof parseHeartbeat>,\r\n): unknown {\r\n  const ackSnapshot = worker.completionSnapshot?.finalResult;\r\n  if (worker.completionAckSource === \"local-pr-merged-reconcile\" && ackSnapshot !== undefined && ackSnapshot !== null) {\r\n    return ackSnapshot;\r\n  }\r\n  if (parsedFinalResult) return parsedFinalResult;\r\n  if (ackSnapshot !== undefined && ackSnapshot !== null) return ackSnapshot;\r\n  return terminalFinalResultFromHeartbeat(heartbeat);\r\n}\r\n\r\nexport function computeWorkerStatus(worker: HarnessWorkerRecord, options: WorkerStatusOptions = {}): RawHarnessWorkerStatus {\r\n  const parsed = parseHarnessStream(worker.stdoutPath);\r\n  const heartbeat = parseHeartbeat(worker.heartbeatPath);\r\n  const completionAcknowledged =\r\n    typeof worker.completionReportedAt === \"string\" && worker.completionReportedAt.trim().length > 0;\r\n  const finalResult = resolveFinalResult(worker, parsed.finalResult, heartbeat);\r\n  const alive = completionAcknowledged ? false : isPidAlive(worker.pid);\r\n  const stdoutBytes = fileSize(worker.stdoutPath);\r\n  const stderrBytes = fileSize(worker.stderrPath);\r\n  const heartbeatBytes = fileSize(worker.heartbeatPath);\r\n  const changedFiles = gitStatusShort(worker.worktreePath);\r\n  const gitAncestry = computeGitAncestry(worker.worktreePath, {\r\n    base: options.base,\r\n    baseCommit: options.baseCommit,\r\n  });\r\n  const lastActivityAt = latestIso([\r\n    parsed.lastEventAt,\r\n    heartbeat.lastHeartbeatAt,\r\n    fileMtime(worker.stdoutPath),\r\n    fileMtime(worker.stderrPath),\r\n    fileMtime(worker.heartbeatPath),\r\n  ]);\r\n  // The error surfaced when a worker died without a final result: the parsed\r\n  // stream error, else the stderr tail. Computed before attention so a startup/\r\n  // config failure can be classified as a structured blocker.\r\n  const error =\r\n    parsed.error ||\r\n    (!alive && !finalResult ? tailFile(worker.stderrPath, 10).trim() || undefined : undefined);\r\n  const completionBlocker =\r\n    typeof worker.completionBlocker === \"string\" && worker.completionBlocker.trim()\r\n      ? worker.completionBlocker.trim()\r\n      : null;\r\n  const effectiveCompletionBlocker = isSkippedTerminalCompletionBlocker(completionBlocker)\r\n    ? null\r\n    : completionBlocker;\r\n  const landingContract: WorkerLandingContract | null = worker.repairTargetPrUrl\r\n    ? {\r\n        landingOnly: false,\r\n        targetPrUrls: [worker.repairTargetPrUrl],\r\n        targetPrUrl: worker.repairTargetPrUrl,\r\n        repairEnforceOriginalPr: true,\r\n      }\r\n    : null;\r\n\r\n  const attention = computeAttention({\r\n    alive,\r\n    finalResult,\r\n    firstEventAt: parsed.firstEventAt,\r\n    stdoutBytes,\r\n    stderrBytes,\r\n    heartbeatBytes,\r\n    lastActivityAt,\r\n    heartbeatBlocker: heartbeat.heartbeatBlocker,\r\n    startedAt: worker.startedAt,\r\n    error,\r\n    changedFiles,\r\n    gitAncestry,\r\n    completionBlocker: effectiveCompletionBlocker,\r\n    landingContract,\r\n    prUrl: worker.repairTargetPrUrl ?? worker.taskPrUrl ?? null,\r\n    localOnly: worker.localOnly === true,\r\n    taskId: worker.taskId ?? null,\r\n    agentOsId: worker.agentOsId ?? null,\r\n    reconcileReason: worker.reconcileReason ?? null,\r\n  });\r\n  const workerStatusLabel =\r\n    effectiveCompletionBlocker || attention.state === \"blocked\"\r\n      ? \"blocked\"\r\n      : completionAcknowledged || attention.state === \"done\"\r\n        ? \"done\"\r\n        : finalResult\r\n          ? \"exited\"\r\n          : alive\r\n            ? \"running\"\r\n            : \"exited\";\r\n  return {\r\n    runId: worker.runId,\r\n    worker: worker.name,\r\n    pid: worker.pid,\r\n    alive,\r\n    status: workerStatusLabel,\r\n    attention,\r\n    branch: worker.branch,\r\n    worktreePath: worker.worktreePath,\r\n    ownedPaths: worker.ownedPaths,\r\n    stdoutBytes,\r\n    stderrBytes,\r\n    heartbeatBytes,\r\n    firstEventAt: parsed.firstEventAt,\r\n    lastEventAt: parsed.lastEventAt,\r\n    lastActivityAt,\r\n    currentTool: completionAcknowledged ? null : parsed.currentTool,\r\n    heartbeatCount: heartbeat.heartbeatCount,\r\n    lastHeartbeatAt: heartbeat.lastHeartbeatAt,\r\n    lastHeartbeatPhase: heartbeat.lastHeartbeatPhase,\r\n    lastHeartbeatSummary: heartbeat.lastHeartbeatSummary,\r\n    heartbeatBlocker: heartbeat.heartbeatBlocker,\r\n    timestampAnomalies: heartbeat.timestampAnomalies,\r\n    finalResult,\r\n    error,\r\n    changedFiles,\r\n    gitAncestry,\r\n    instructionPolicyFingerprint: worker.instructionPolicyFingerprint ?? null,\r\n    instructionPolicyEvidence: worker.instructionPolicyEvidence ?? null,\r\n  };\r\n}\r\n\r\nexport function isFinishedWorkerStatus(status: RawHarnessWorkerStatus): boolean {\r\n  if (status.finalResult) return true;\r\n  if (status.alive === false) return true;\r\n  if (status.status === \"exited\" || status.status === \"done\") return true;\r\n  return false;\r\n}\r\n\r\n/** True when a worker recorded a final result but failed the landing gate. */\r\nexport function isLandingBlockedWorkerStatus(status: RawHarnessWorkerStatus): boolean {\r\n  if (!status.finalResult) return false;\r\n  return status.attention.state === \"needs_attention\" || status.attention.state === \"blocked\";\r\n}\r\n\r\nexport function deriveRunStatus(fallback: string, workers: Array<{ attention?: string; status?: string }>): string {\r\n  if (workers.length === 0) return fallback;\r\n  if (workers.some((w) => w.attention === \"needs_attention\" || w.attention === \"stale\" || w.attention === \"blocked\")) {\r\n    return \"needs_attention\";\r\n  }\r\n  if (workers.every((w) => w.status === \"done\")) return \"done\";\r\n  if (workers.some((w) => w.status === \"running\")) return \"running\";\r\n  return fallback;\r\n}\r\n", "const HARNESS_LEASE_PREFIX = \"kynver-harness:\";\r\nconst RUNNER_MARKER = \"@runner:\";\r\n\r\nfunction trimOrNull(value: string | null | undefined): string | null {\r\n  if (!value?.trim()) return null;\r\n  return value.trim();\r\n}\r\n\r\n/** Run id embedded in a harness lease owner (`kynver-harness:<runId>` or `@runner:` suffix). */\r\nexport function parseHarnessLeaseRunId(leaseOwner: string | null | undefined): string | null {\r\n  const owner = trimOrNull(leaseOwner);\r\n  if (!owner?.startsWith(HARNESS_LEASE_PREFIX)) return null;\r\n  const body = owner.slice(HARNESS_LEASE_PREFIX.length);\r\n  const atRunner = body.indexOf(RUNNER_MARKER);\r\n  if (atRunner >= 0) return body.slice(0, atRunner).trim() || null;\r\n  return body.trim() || null;\r\n}\r\n\r\nexport function parseHarnessLeaseRunnerId(leaseOwner: string | null | undefined): string | null {\r\n  const owner = trimOrNull(leaseOwner);\r\n  if (!owner) return null;\r\n  const idx = owner.indexOf(RUNNER_MARKER);\r\n  if (idx < 0) return null;\r\n  return owner.slice(idx + RUNNER_MARKER.length).trim() || null;\r\n}\r\n\r\n/** Stamp runner id into harness lease owner for cross-runner attribution. */\r\nexport function formatHarnessLeaseOwner(runId: string, runnerId: string): string {\r\n  const run = runId.trim();\r\n  const runner = runnerId.trim();\r\n  return `${HARNESS_LEASE_PREFIX}${run}${RUNNER_MARKER}${runner}`;\r\n}\r\n\r\n/** True when `leaseOwner` belongs to the harness run identified by `runId`. */\r\nexport function harnessLeaseOwnerMatchesRun(\r\n  leaseOwner: string | null | undefined,\r\n  runId: string,\r\n): boolean {\r\n  const expectedRun = trimOrNull(runId);\r\n  if (!expectedRun) return false;\r\n  return parseHarnessLeaseRunId(leaseOwner) === expectedRun;\r\n}\r\n\r\n/** Lease owner sent on renew/release \u2014 must match the row exactly. */\r\nexport function resolveHarnessLeaseOwnerForRenewal(input: {\r\n  runId: string;\r\n  workerLeaseOwner?: string | null;\r\n  runnerId: string;\r\n}): string {\r\n  const stored = trimOrNull(input.workerLeaseOwner);\r\n  if (stored && harnessLeaseOwnerMatchesRun(stored, input.runId)) {\r\n    return stored;\r\n  }\r\n  return formatHarnessLeaseOwner(input.runId, input.runnerId);\r\n}\r\n", "import { harnessLeaseOwnerMatchesRun } from \"../harness-lease-owner.js\";\r\nimport { STALE_MS, type HarnessWorkerRecord, type RawHarnessWorkerStatus } from \"../status.js\";\r\nimport { isPidAlive } from \"../util.js\";\r\nimport type { TaskLeaseSnapshot, WorkerHealthClass } from \"./monitor.types.js\";\r\n\r\nexport interface WorkerHealthClassification {\r\n  health: WorkerHealthClass;\r\n  reason: string;\r\n}\r\n\r\n/**\r\n * Classify harness worker disk state vs optional board lease snapshot.\r\n * `running` on AgentTask means live executor lease \u2014 not plan-row `in_progress`.\r\n */\r\nexport function classifyWorkerHealth(input: {\r\n  worker: HarnessWorkerRecord;\r\n  status: RawHarnessWorkerStatus;\r\n  taskLease?: TaskLeaseSnapshot | null;\r\n}): WorkerHealthClassification {\r\n  const { worker, status, taskLease } = input;\r\n  const leaseOwner = taskLease?.leaseOwner ?? null;\r\n\r\n  if (worker.dispatched && taskLease) {\r\n    if (\r\n      taskLease.status === \"running\" &&\r\n      leaseOwner &&\r\n      !harnessLeaseOwnerMatchesRun(leaseOwner, worker.runId)\r\n    ) {\r\n      return {\r\n        health: \"orphaned\",\r\n        reason: `task lease held by ${leaseOwner}, expected harness run ${worker.runId}`,\r\n      };\r\n    }\r\n    if (taskLease.status === \"running\" && !status.alive && !status.finalResult) {\r\n      return {\r\n        health: \"orphaned\",\r\n        reason: \"board task running but worker process is not alive\",\r\n      };\r\n    }\r\n  }\r\n\r\n  if (worker.status === \"running\" && !status.alive && !status.finalResult) {\r\n    return {\r\n      health: \"orphaned\",\r\n      reason: \"worker.json still running but process is dead\",\r\n    };\r\n  }\r\n\r\n  if (status.attention.state === \"stale\") {\r\n    return { health: \"stale\", reason: status.attention.reason };\r\n  }\r\n\r\n  const hbMs = status.lastHeartbeatAt ? Date.parse(status.lastHeartbeatAt) : NaN;\r\n  if (status.alive && Number.isFinite(hbMs) && Date.now() - hbMs > STALE_MS) {\r\n    return {\r\n      health: \"stale\",\r\n      reason: `heartbeat older than ${Math.floor(STALE_MS / 1000)}s`,\r\n    };\r\n  }\r\n\r\n  if (status.alive && worker.pid && !isPidAlive(worker.pid)) {\r\n    return { health: \"orphaned\", reason: \"pid recorded but process is not alive\" };\r\n  }\r\n\r\n  if (taskLease?.status === \"running\" && !status.alive && status.finalResult) {\r\n    return {\r\n      health: \"healthy\",\r\n      reason: \"finished worker awaiting completion replay\",\r\n    };\r\n  }\r\n\r\n  return {\r\n    health: \"healthy\",\r\n    reason: status.attention.reason || \"worker within expected lifecycle bounds\",\r\n  };\r\n}\r\n", "import { existsSync } from \"node:fs\";\r\nimport { homedir } from \"node:os\";\r\nimport path from \"node:path\";\r\nimport { loadUserConfig } from \"./config.js\";\r\nimport { resolveUserPath } from \"./path-values.js\";\r\nimport { safeSlug } from \"./util.js\";\r\n\r\nconst LEGACY_ROOT = path.join(homedir(), \".openclaw\", \"harness\");\r\n\r\nconst HARNESS_LAYOUT_DIR_NAMES = new Set([\"runs\", \"worktrees\"]);\r\n\r\n/**\r\n * Canonical harness root: the directory that contains `runs/` and `worktrees/`.\r\n * Strips mistaken trailing layout segments (e.g. env set to `.../harness/runs`).\r\n * Server mirror: agent-os.harness-root.ts\r\n */\r\nexport function normalizeHarnessRoot(root: string): string {\r\n  let resolved = path.resolve(resolveUserPath(root.trim()));\r\n  while (HARNESS_LAYOUT_DIR_NAMES.has(path.basename(resolved))) {\r\n    resolved = path.dirname(resolved);\r\n  }\r\n  return resolved;\r\n}\r\n\r\n/** Canonical harness root for CLI/workers. */\r\nexport function resolveHarnessRoot(): string {\r\n  const env = process.env.KYNVER_HARNESS_ROOT || process.env.OPUS_HARNESS_ROOT;\r\n  if (env) return normalizeHarnessRoot(env);\r\n  const configured = loadUserConfig().harnessRoot?.trim();\r\n  if (configured) return normalizeHarnessRoot(configured);\r\n  const kynverRoot = path.join(homedir(), \".kynver\", \"harness\");\r\n  if (existsSync(kynverRoot)) return kynverRoot;\r\n  if (existsSync(LEGACY_ROOT)) return LEGACY_ROOT;\r\n  return kynverRoot;\r\n}\r\n\r\nexport function harnessRunsDir(harnessRoot: string): string {\r\n  return path.join(normalizeHarnessRoot(harnessRoot), \"runs\");\r\n}\r\n\r\nexport function harnessWorktreesDir(harnessRoot: string): string {\r\n  return path.join(normalizeHarnessRoot(harnessRoot), \"worktrees\");\r\n}\r\n\r\nexport function getHarnessPaths() {\r\n  const harnessRoot = resolveHarnessRoot();\r\n  return {\r\n    harnessRoot,\r\n    runsDir: harnessRunsDir(harnessRoot),\r\n    worktreesDir: harnessWorktreesDir(harnessRoot),\r\n  };\r\n}\r\n\r\nexport function runDir(runsDir: string, id: string): string {\r\n  return path.join(runsDir, safeSlug(id));\r\n}\r\n", "import { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\r\nimport { homedir, totalmem } from \"node:os\";\r\nimport path from \"node:path\";\r\nimport { discoverDefaultRepo } from \"./default-repo-discovery.js\";\r\nimport { displayUserPath, redactHomePath } from \"./path-values.js\";\r\nimport { trimTrailingSlash } from \"./util.js\";\r\nimport { normalizeWorkerPoolBoxKind, resolveBoxIdentity } from \"./box-identity.js\";\r\nimport { recommendSetupWorkerCap } from \"./worker-cap-source.js\";\r\nimport { observeRunnerDiskGate } from \"./disk-gate.js\";\r\nimport os from \"node:os\";\r\n\r\nexport interface KynverUserConfig {\r\n  apiBaseUrl?: string;\r\n  agentOsSlug?: string;\r\n  agentOsId?: string;\r\n  defaultRepo?: string;\r\n  workerProvider?: string;\r\n  /** Default Claude model when dispatch does not infer or pass `--model`. */\r\n  defaultModel?: string;\r\n  harnessRoot?: string;\r\n  /**\r\n   * Operator attestation that the hosted Kynver deployment uses this scheduler provider\r\n   * (set on user runners after Vercel env cutover \u2014 scheduling is deployment-owned).\r\n   */\r\n  deploymentSchedulerProvider?: \"qstash\" | \"kynver-cron\" | \"openclaw-cron\";\r\n  /** Physical box pool for capacity snapshots (`forge` | `ghost`). Set via `kynver setup --box-kind`. */\r\n  boxKind?: \"ghost\" | \"forge\";\r\n  /** Max concurrent workers on this machine. Omit to auto-size from RAM. */\r\n  maxConcurrentWorkers?: number;\r\n  /** Where maxConcurrentWorkers came from. */\r\n  maxConcurrentWorkersSource?: \"setup-auto\" | \"setup-flag\" | \"operator\";\r\n  /** @internal Advanced tuning \u2014 not required for setup. */\r\n  perWorkerMemBytes?: number;\r\n  /** @internal Advanced tuning \u2014 not required for setup. */\r\n  memReserveBytes?: number;\r\n  /** @internal Advanced tuning \u2014 not required for setup. */\r\n  memUtilization?: number;\r\n}\r\n\r\nconst CONFIG_DIR = path.join(homedir(), \".kynver\");\r\nconst CONFIG_FILE = path.join(CONFIG_DIR, \"config.json\");\r\nconst CREDENTIALS_FILE = path.join(CONFIG_DIR, \"credentials\");\r\n\r\ninterface KynverCredentialsFile {\r\n  apiKey?: string;\r\n  /** Scoped `krc1.*` runner token for AgentOS by-id callbacks. */\r\n  runnerToken?: string;\r\n  runnerTokenAgentOsId?: string;\r\n}\r\n\r\nexport function loadUserConfig(): KynverUserConfig {\r\n  if (!existsSync(CONFIG_FILE)) return {};\r\n  try {\r\n    return JSON.parse(readFileSync(CONFIG_FILE, \"utf8\")) as KynverUserConfig;\r\n  } catch {\r\n    return {};\r\n  }\r\n}\r\n\r\nexport function saveUserConfig(config: KynverUserConfig): void {\r\n  mkdirSync(CONFIG_DIR, { recursive: true });\r\n  writeFileSync(CONFIG_FILE, `${JSON.stringify(normalizeConfigPaths(config), null, 2)}\\n`, { mode: 0o600 });\r\n}\r\n\r\n/** Persist path fields with `~` instead of absolute home directories. */\r\nexport function normalizeConfigPaths(config: KynverUserConfig): KynverUserConfig {\r\n  return {\r\n    ...config,\r\n    ...(config.harnessRoot?.trim() ? { harnessRoot: redactHomePath(config.harnessRoot.trim()) } : {}),\r\n    ...(config.defaultRepo?.trim() ? { defaultRepo: redactHomePath(config.defaultRepo.trim()) } : {}),\r\n  };\r\n}\r\n\r\n/** Values for setup output (never emit `/home/<user>/\u2026`). */\r\nexport function presentUserConfig(config: KynverUserConfig): KynverUserConfig {\r\n  return normalizeConfigPaths(config);\r\n}\r\n\r\nfunction inferSetupFields(\r\n  existing: KynverUserConfig,\r\n  args: Record<string, string | boolean>,\r\n): Partial<KynverUserConfig> {\r\n  const creds = loadCredentialsFile();\r\n  const apiBaseUrl =\r\n    (typeof args.apiBaseUrl === \"string\" ? args.apiBaseUrl : undefined) ||\r\n    existing.apiBaseUrl?.trim() ||\r\n    process.env.KYNVER_API_URL?.trim() ||\r\n    process.env.KYNVER_CRON_FIRE_BASE_URL?.trim() ||\r\n    process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim();\r\n  const agentOsId =\r\n    (typeof args.agentOsId === \"string\" ? args.agentOsId : undefined) ||\r\n    existing.agentOsId?.trim() ||\r\n    process.env.KYNVER_AGENT_OS_ID?.trim() ||\r\n    (creds.runnerToken?.trim().startsWith(\"krc1.\") ? creds.runnerTokenAgentOsId?.trim() : undefined);\r\n  const explicitRepo =\r\n    typeof args.repo === \"string\"\r\n      ? args.repo\r\n      : args.discoverRepo === true || args.discoverRepo === \"true\"\r\n        ? discoverDefaultRepo()?.repo\r\n        : undefined;\r\n  const defaultRepo =\r\n    explicitRepo ||\r\n    existing.defaultRepo?.trim() ||\r\n    process.env.KYNVER_DEFAULT_REPO?.trim() ||\r\n    process.env.KYNVER_HARNESS_REPO?.trim() ||\r\n    discoverDefaultRepo()?.repo;\r\n  const harnessRoot =\r\n    (typeof args.harnessRoot === \"string\" ? args.harnessRoot : undefined) ||\r\n    existing.harnessRoot?.trim() ||\r\n    process.env.KYNVER_HARNESS_ROOT?.trim() ||\r\n    process.env.OPUS_HARNESS_ROOT?.trim();\r\n\r\n  return {\r\n    ...(apiBaseUrl ? { apiBaseUrl: trimTrailingSlash(apiBaseUrl) } : {}),\r\n    ...(agentOsId ? { agentOsId } : {}),\r\n    ...(defaultRepo ? { defaultRepo } : {}),\r\n    ...(harnessRoot ? { harnessRoot } : {}),\r\n    ...(typeof args.agentOsSlug === \"string\"\r\n      ? { agentOsSlug: args.agentOsSlug }\r\n      : existing.agentOsSlug\r\n        ? { agentOsSlug: existing.agentOsSlug }\r\n        : {}),\r\n  };\r\n}\r\n\r\nconst SETUP_PER_WORKER_MEM_BYTES = 500 * 1024 * 1024;\r\nconst SETUP_MEM_RESERVE_BYTES = 4 * 1024 * 1024 * 1024;\r\nconst SETUP_MEM_UTILIZATION = 0.85;\r\nconst SETUP_AUTO_MAX_WORKERS_CEILING = 64;\r\n\r\nfunction normalizeBoxKind(raw: unknown): \"ghost\" | \"forge\" | undefined {\r\n  const kind = String(raw ?? \"\").trim().toLowerCase();\r\n  if (!kind) return undefined;\r\n  if (kind === \"ghost\" || kind.includes(\"ghost\") || kind.includes(\"openclaw\")) return \"ghost\";\r\n  if (kind === \"forge\" || kind.includes(\"forge\")) return \"forge\";\r\n  return undefined;\r\n}\r\n\r\nexport function computeSetupAutoMaxWorkers(totalMemBytes: number): number {\r\n  const budgetBytes = Math.max(0, Math.floor(totalMemBytes * SETUP_MEM_UTILIZATION) - SETUP_MEM_RESERVE_BYTES);\r\n  const raw = Math.max(1, Math.floor(budgetBytes / SETUP_PER_WORKER_MEM_BYTES));\r\n  return Math.min(raw, SETUP_AUTO_MAX_WORKERS_CEILING);\r\n}\r\n\r\nexport function resolveSetupWorkerConfig(\r\n  existing: KynverUserConfig,\r\n  args: Record<string, string | boolean>,\r\n  totalMemBytes = totalmem(),\r\n): Pick<KynverUserConfig, \"maxConcurrentWorkers\" | \"maxConcurrentWorkersSource\" | \"boxKind\"> {\r\n  const maxWorkersRaw =\r\n    typeof args.maxWorkers === \"string\"\r\n      ? args.maxWorkers\r\n      : typeof args.maxConcurrentWorkers === \"string\"\r\n        ? args.maxConcurrentWorkers\r\n        : undefined;\r\n  const explicitBoxKindArg =\r\n    typeof args.boxKind === \"string\"\r\n      ? args.boxKind\r\n      : typeof args[\"box-kind\"] === \"string\"\r\n        ? String(args[\"box-kind\"])\r\n        : undefined;\r\n  const boxKind = resolveBoxIdentity(process.env, {\r\n    ...existing,\r\n    ...(explicitBoxKindArg ? { boxKind: normalizeWorkerPoolBoxKind(explicitBoxKindArg) } : {}),\r\n  }).boxKind;\r\n  const diskGate = observeRunnerDiskGate({\r\n    diskPath: typeof args.diskPath === \"string\" ? args.diskPath : \"/\",\r\n  });\r\n  const capRecommendation = recommendSetupWorkerCap({\r\n    totalMemBytes,\r\n    diskPath: diskGate.path,\r\n    diskGateOk: diskGate.ok,\r\n    diskFreeBytes: diskGate.freeBytes,\r\n    config: existing,\r\n  });\r\n  if (maxWorkersRaw) {\r\n    return {\r\n      maxConcurrentWorkers: Math.max(1, Math.floor(Number(maxWorkersRaw))),\r\n      maxConcurrentWorkersSource: \"setup-flag\",\r\n      boxKind,\r\n    };\r\n  }\r\n  if (existing.maxConcurrentWorkers !== undefined && existing.maxConcurrentWorkers !== null) {\r\n    return {\r\n      maxConcurrentWorkers: Math.max(1, Math.floor(Number(existing.maxConcurrentWorkers))),\r\n      maxConcurrentWorkersSource: existing.maxConcurrentWorkersSource ?? \"operator\",\r\n      boxKind,\r\n    };\r\n  }\r\n  return {\r\n    maxConcurrentWorkers: capRecommendation.recommendedMaxWorkers,\r\n    maxConcurrentWorkersSource: \"setup-auto\",\r\n    boxKind,\r\n  };\r\n}\r\n\r\nfunction loadCredentialsFile(): KynverCredentialsFile {\r\n  if (!existsSync(CREDENTIALS_FILE)) return {};\r\n  try {\r\n    return JSON.parse(readFileSync(CREDENTIALS_FILE, \"utf8\")) as KynverCredentialsFile;\r\n  } catch {\r\n    return {};\r\n  }\r\n}\r\n\r\nfunction saveCredentialsFile(parsed: KynverCredentialsFile): void {\r\n  mkdirSync(CONFIG_DIR, { recursive: true });\r\n  writeFileSync(CREDENTIALS_FILE, `${JSON.stringify(parsed, null, 2)}\\n`, { mode: 0o600 });\r\n}\r\n\r\nexport function loadApiKey(): string | undefined {\r\n  if (process.env.KYNVER_API_KEY) return process.env.KYNVER_API_KEY;\r\n  return loadCredentialsFile().apiKey;\r\n}\r\n\r\nexport function saveApiKey(apiKey: string): void {\r\n  saveCredentialsFile({ ...loadCredentialsFile(), apiKey });\r\n}\r\n\r\nexport function loadRunnerToken(agentOsId?: string): string | undefined {\r\n  const envToken = process.env.KYNVER_RUNNER_TOKEN?.trim();\r\n  if (envToken) return envToken;\r\n\r\n  const creds = loadCredentialsFile();\r\n  if (!creds.runnerToken) return undefined;\r\n  if (agentOsId && creds.runnerTokenAgentOsId && creds.runnerTokenAgentOsId !== agentOsId) {\r\n    return undefined;\r\n  }\r\n  return creds.runnerToken;\r\n}\r\n\r\nexport function saveRunnerToken(agentOsId: string, token: string): void {\r\n  saveCredentialsFile({\r\n    ...loadCredentialsFile(),\r\n    runnerToken: token,\r\n    runnerTokenAgentOsId: agentOsId,\r\n  });\r\n}\r\n\r\nexport function resolveBaseUrl(argsBaseUrl?: string): string {\r\n  const baseUrl = resolveConfiguredBaseUrl(argsBaseUrl);\r\n  if (!baseUrl) failConfig(\"requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl\");\r\n  return baseUrl;\r\n}\r\n\r\nfunction resolveConfiguredBaseUrl(argsBaseUrl?: string): string | undefined {\r\n  const baseUrl =\r\n    argsBaseUrl ||\r\n    process.env.KYNVER_API_URL ||\r\n    process.env.KYNVER_CRON_FIRE_BASE_URL ||\r\n    process.env.OPENCLAW_CRON_FIRE_BASE_URL ||\r\n    loadUserConfig().apiBaseUrl;\r\n  return baseUrl ? trimTrailingSlash(String(baseUrl)) : undefined;\r\n}\r\n\r\nfunction resolveConfiguredCallbackSecret(argsSecret?: string, agentOsId?: string): string | undefined {\r\n  const scoped =\r\n    argsSecret ||\r\n    loadRunnerToken(agentOsId) ||\r\n    (agentOsId ? undefined : loadRunnerToken(loadUserConfig().agentOsId));\r\n  if (scoped) return String(scoped);\r\n\r\n  const globalSecret =\r\n    process.env.KYNVER_RUNTIME_SECRET ||\r\n    process.env.KYNVER_CRON_SECRET ||\r\n    process.env.OPENCLAW_CRON_SECRET;\r\n  if (globalSecret) {\r\n    console.warn(\r\n      \"[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token\",\r\n    );\r\n    return String(globalSecret);\r\n  }\r\n\r\n  return undefined;\r\n}\r\n\r\nexport function resolveCallbackSecret(argsSecret?: string, agentOsId?: string): string {\r\n  const configured = resolveConfiguredCallbackSecret(argsSecret, agentOsId);\r\n  if (configured) return configured;\r\n\r\n  failConfig(\r\n    \"requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, KYNVER_API_KEY with an API base URL to mint one, or (legacy) KYNVER_RUNTIME_SECRET / KYNVER_CRON_SECRET / OPENCLAW_CRON_SECRET\",\r\n  );\r\n}\r\n\r\nexport async function resolveCallbackSecretWithMint(\r\n  argsSecret?: string,\r\n  agentOsId?: string,\r\n  opts?: { baseUrl?: string },\r\n): Promise<string> {\r\n  const configured = resolveConfiguredCallbackSecret(argsSecret, agentOsId);\r\n  if (configured) return configured;\r\n\r\n  const apiKey = loadApiKey();\r\n  const baseUrl = resolveConfiguredBaseUrl(opts?.baseUrl);\r\n  if (apiKey && agentOsId && baseUrl) {\r\n    try {\r\n      const token = await fetchRunnerCredential(agentOsId, { baseUrl, apiKey });\r\n      saveRunnerToken(agentOsId, token);\r\n      return token;\r\n    } catch (error) {\r\n      failConfig(`runner credential mint failed: ${(error as Error).message}`);\r\n    }\r\n  }\r\n\r\n  failConfig(\r\n    \"requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, KYNVER_API_KEY with an API base URL to mint one, or (legacy) KYNVER_RUNTIME_SECRET / KYNVER_CRON_SECRET / OPENCLAW_CRON_SECRET\",\r\n  );\r\n}\r\n\r\n/**\r\n * Force-mint a fresh scoped runner token for `agentOsId`, bypassing any cached\r\n * or env token. Recovery path for a callback that 401s because the configured\r\n * token is revoked, expired, or scoped to a *different* workspace (the\r\n * self-linked repair case). Requires an API key + base URL to mint; returns\r\n * `null` when a fresh token cannot be obtained, so the caller degrades to a\r\n * structural blocker instead of papering the worker over as done.\r\n */\r\nexport async function refreshRunnerToken(\r\n  agentOsId: string,\r\n  opts?: { baseUrl?: string },\r\n): Promise<string | null> {\r\n  const apiKey = loadApiKey();\r\n  const baseUrl = resolveConfiguredBaseUrl(opts?.baseUrl);\r\n  if (!apiKey || !agentOsId || !baseUrl) return null;\r\n  try {\r\n    const token = await fetchRunnerCredential(agentOsId, { baseUrl, apiKey });\r\n    saveRunnerToken(agentOsId, token);\r\n    return token;\r\n  } catch {\r\n    return null;\r\n  }\r\n}\r\n\r\nexport async function refreshRunnerTokenForAuthFailure(\r\n  rejectedSecret: string,\r\n  agentOsId: string,\r\n  opts?: { baseUrl?: string },\r\n): Promise<{ ok: true; token: string } | { ok: false; reason: string }> {\r\n  const apiKey = loadApiKey();\r\n  const baseUrl = resolveConfiguredBaseUrl(opts?.baseUrl);\r\n  if (!apiKey) return { ok: false, reason: \"KYNVER_API_KEY is required to refresh a rejected runner token\" };\r\n  if (!agentOsId) return { ok: false, reason: \"agentOsId is required to refresh a rejected runner token\" };\r\n  if (!baseUrl) return { ok: false, reason: \"KYNVER_API_URL or --base-url is required to refresh a rejected runner token\" };\r\n\r\n  try {\r\n    const token = await fetchRunnerCredential(agentOsId, { baseUrl, apiKey });\r\n    if (token && token !== rejectedSecret) {\r\n      saveRunnerToken(agentOsId, token);\r\n      return { ok: true, token };\r\n    }\r\n    return { ok: false, reason: \"runner credential refresh returned the rejected token\" };\r\n  } catch (error) {\r\n    return { ok: false, reason: (error as Error).message };\r\n  }\r\n}\r\n\r\nexport async function fetchRunnerCredential(\r\n  agentOsId: string,\r\n  opts?: { baseUrl?: string; apiKey?: string },\r\n): Promise<string> {\r\n  const apiKey = opts?.apiKey || loadApiKey();\r\n  if (!apiKey) throw new Error(\"API key required \u2014 run `kynver login` first\");\r\n\r\n  const base = resolveBaseUrl(opts?.baseUrl);\r\n  const url = `${base}/api/agent-os/by-id/${encodeURIComponent(agentOsId)}/runner-credentials`;\r\n  const res = await fetch(url, {\r\n    method: \"POST\",\r\n    headers: {\r\n      \"Content-Type\": \"application/json\",\r\n      Authorization: `Bearer ${apiKey}`,\r\n    },\r\n    body: JSON.stringify({}),\r\n  });\r\n\r\n  const text = await res.text();\r\n  let parsed: { token?: string; error?: string } | null = null;\r\n  try {\r\n    parsed = JSON.parse(text) as { token?: string; error?: string };\r\n  } catch {\r\n    parsed = null;\r\n  }\r\n  if (!res.ok || !parsed?.token) {\r\n    throw new Error(\r\n      `runner credential mint failed (${res.status}): ${parsed?.error ?? text.slice(0, 200)}`,\r\n    );\r\n  }\r\n  return parsed.token;\r\n}\r\n\r\nexport async function mintRunnerCredential(args: Record<string, string | boolean>): Promise<void> {\r\n  const agentOsId =\r\n    (args.agentOsId ? String(args.agentOsId) : loadUserConfig().agentOsId) || \"\";\r\n  if (!agentOsId) failConfig(\"runner credential requires --agent-os-id or agentOsId in ~/.kynver/config.json\");\r\n\r\n  try {\r\n    const token = await fetchRunnerCredential(agentOsId, {\r\n      baseUrl: args.baseUrl ? String(args.baseUrl) : undefined,\r\n    });\r\n    saveRunnerToken(agentOsId, token);\r\n    console.log(\r\n      JSON.stringify(\r\n        {\r\n          ok: true,\r\n          agentOsId,\r\n          credentialsPath: displayUserPath(CREDENTIALS_FILE),\r\n          tokenPrefix: `${token.slice(0, 12)}\u2026`,\r\n          note: \"Scoped runner token saved; callbacks use X-Kynver-Runner-Token.\",\r\n        },\r\n        null,\r\n        2,\r\n      ),\r\n    );\r\n  } catch (err) {\r\n    console.error(err instanceof Error ? err.message : String(err));\r\n    process.exit(1);\r\n  }\r\n}\r\n\r\nfunction failConfig(message: string): never {\r\n  console.error(message);\r\n  process.exit(1);\r\n}\r\n\r\nexport function parseArgs(argv: string[]): Record<string, string | boolean> {\r\n  const args: Record<string, string | boolean> = {};\r\n  for (let i = 0; i < argv.length; i++) {\r\n    const item = argv[i];\r\n    if (!item.startsWith(\"--\")) continue;\r\n    const key = item.slice(2).replace(/-([a-z])/g, (_, c: string) => c.toUpperCase());\r\n    const next = argv[i + 1];\r\n    if (!next || next.startsWith(\"--\")) args[key] = true;\r\n    else {\r\n      args[key] = next;\r\n      i++;\r\n    }\r\n  }\r\n  return args;\r\n}\r\n\r\nexport async function runSetup(args: Record<string, string | boolean>): Promise<void> {\r\n  const existing = loadUserConfig();\r\n  const diskGate = observeRunnerDiskGate({\r\n    diskPath: typeof args.diskPath === \"string\" ? args.diskPath : \"/\",\r\n  });\r\n  const capRecommendation = recommendSetupWorkerCap({\r\n    totalMemBytes: os.totalmem(),\r\n    diskPath: diskGate.path,\r\n    diskGateOk: diskGate.ok,\r\n    diskFreeBytes: diskGate.freeBytes,\r\n    config: existing,\r\n  });\r\n  const workerConfig = resolveSetupWorkerConfig(existing, args);\r\n  const config: KynverUserConfig = normalizeConfigPaths({\r\n    ...existing,\r\n    ...inferSetupFields(existing, args),\r\n    ...workerConfig,\r\n    workerProvider:\r\n      typeof args.provider === \"string\"\r\n        ? args.provider\r\n        : existing.workerProvider || \"cursor\",\r\n  });\r\n  saveUserConfig(config);\r\n  const boxIdentity = resolveBoxIdentity(process.env, config);\r\n\r\n  let runnerCredentialNote: string | undefined;\r\n  const apiKey = loadApiKey();\r\n  const agentOsId = config.agentOsId;\r\n  if (apiKey && agentOsId) {\r\n    try {\r\n      const token = await fetchRunnerCredential(agentOsId, {\r\n        baseUrl: typeof args.apiBaseUrl === \"string\" ? args.apiBaseUrl : config.apiBaseUrl,\r\n        apiKey,\r\n      });\r\n      saveRunnerToken(agentOsId, token);\r\n      runnerCredentialNote = \"Scoped runner token minted and saved to ~/.kynver/credentials.\";\r\n    } catch {\r\n      runnerCredentialNote =\r\n        \"Runner token not minted (server offline or master secret unset). Run `kynver runner credential` after deploy.\";\r\n    }\r\n  }\r\n\r\n  console.log(\r\n    JSON.stringify(\r\n      {\r\n        ok: true,\r\n        configPath: displayUserPath(CONFIG_FILE),\r\n        config: presentUserConfig(config),\r\n        boxKind: config.boxKind,\r\n        boxKindSource: boxIdentity.source,\r\n        workerCapRecommendation: capRecommendation,\r\n        ...(boxIdentity.warnings.length ? { boxIdentityWarnings: boxIdentity.warnings } : {}),\r\n        note:\r\n          runnerCredentialNote ??\r\n          \"boxKind and maxConcurrentWorkers persisted; override with --box-kind and --max-workers. Run `kynver login` + `kynver runner credential` for scoped callbacks.\",\r\n      },\r\n      null,\r\n      2,\r\n    ),\r\n  );\r\n}\r\n\r\nexport async function runLogin(args: Record<string, string | boolean>): Promise<void> {\r\n  const apiKey = typeof args.apiKey === \"string\" ? args.apiKey : process.env.KYNVER_API_KEY;\r\n  if (!apiKey) failConfig(\"kynver login requires --api-key or KYNVER_API_KEY\");\r\n  saveApiKey(apiKey);\r\n  console.log(JSON.stringify({ ok: true, credentialsPath: displayUserPath(CREDENTIALS_FILE) }, null, 2));\r\n}\r\n", "import { existsSync, readFileSync, statfsSync } from \"node:fs\";\r\n\r\n/**\r\n * WSL host disk probe.\r\n *\r\n * Under WSL, the runtime VHDX (mounted at `/`) grows dynamically into the\r\n * Windows host C: drive. When Windows C: fills up, the VHDX cannot expand:\r\n * writes return SIGBUS, workers exit 135, and the Vmmem VM degrades while\r\n * the Linux-side `statfs /` still reports plenty of free space inside the\r\n * VHDX. This module gives the harness a cheap signal for that pressure so\r\n * it can block dispatch *before* a large npm install/build pushes Windows\r\n * C: into the ground.\r\n */\r\n\r\n/** Default warn threshold for the Windows host disk (25 GiB free). */\r\nexport const DEFAULT_WSL_HOST_WARN_FREE_BYTES = 25 * 1024 * 1024 * 1024;\r\n/** Default critical threshold for the Windows host disk (12 GiB free). Below\r\n * this, large rebuilds have been observed to trigger SIGBUS / exit 135 on\r\n * WSL when the VHDX cannot grow further. */\r\nexport const DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES = 12 * 1024 * 1024 * 1024;\r\n/** Default Windows host mount point under WSL. Overridable via env or option. */\r\nexport const DEFAULT_WSL_HOST_MOUNT = \"/mnt/c\";\r\n\r\nexport interface WslHostDiskShape {\r\n  ok: boolean;\r\n  /** Mount point that was probed. */\r\n  path: string;\r\n  freeBytes: number;\r\n  totalBytes: number;\r\n  usedPercent: number;\r\n  warnBelowBytes: number;\r\n  criticalBelowBytes: number;\r\n  /** Human-readable explanation when the host disk is under pressure. */\r\n  reason: string | null;\r\n  /** True when the probe itself failed (mount missing, statfs error). */\r\n  probeError: string | null;\r\n}\r\n\r\n/**\r\n * Cheap WSL detection. Reads `/proc/sys/kernel/osrelease` (kernel string\r\n * contains \"microsoft\" / \"WSL2\" on Microsoft's WSL kernel) and falls back\r\n * to `/proc/version`. Both reads are one-shot and gated by `existsSync`,\r\n * so non-Linux hosts return false without throwing.\r\n */\r\nexport function isWslHost(): boolean {\r\n  if (process.platform !== \"linux\") return false;\r\n  for (const probe of [\"/proc/sys/kernel/osrelease\", \"/proc/version\"]) {\r\n    try {\r\n      if (!existsSync(probe)) continue;\r\n      const text = readFileSync(probe, \"utf8\");\r\n      if (/microsoft|wsl/i.test(text)) return true;\r\n    } catch {\r\n      // ignore \u2014 try the next probe path\r\n    }\r\n  }\r\n  return false;\r\n}\r\n\r\nexport interface ObserveWslHostDiskOptions {\r\n  /** Override the Windows host mount path (e.g. `/mnt/d`). Falls back to\r\n   * `KYNVER_WSL_HOST_MOUNT` env, then `/mnt/c`. */\r\n  wslHostMount?: string;\r\n  wslHostFreeWarnBytes?: number;\r\n  wslHostFreeCriticalBytes?: number;\r\n  /** Override WSL detection for tests / cross-platform CI:\r\n   * `true` \u2192 treat host as WSL; `false` \u2192 treat host as non-WSL;\r\n   * `undefined` \u2192 autodetect via `isWslHost()`. */\r\n  forceWsl?: boolean;\r\n  /** Test seam \u2014 swap in a fake statfs. */\r\n  statfs?: (path: string) => { bavail: bigint | number; blocks: bigint | number; bsize: bigint | number };\r\n}\r\n\r\n/**\r\n * Probe the Windows host disk under WSL. Returns `null` when this host is\r\n * not WSL (so callers can treat the field as optional in the gate output).\r\n * When WSL but the mount is unreachable, returns a `probeError` row with\r\n * `ok = false` rather than throwing \u2014 the gate must still block dispatch\r\n * because we can't prove the host disk is healthy.\r\n */\r\nexport function observeWslHostDisk(\r\n  options: ObserveWslHostDiskOptions = {},\r\n): WslHostDiskShape | null {\r\n  const wsl = options.forceWsl === undefined ? isWslHost() : options.forceWsl;\r\n  if (!wsl) return null;\r\n\r\n  const path =\r\n    options.wslHostMount?.trim() ||\r\n    process.env.KYNVER_WSL_HOST_MOUNT?.trim() ||\r\n    DEFAULT_WSL_HOST_MOUNT;\r\n  const warnBelowBytes = options.wslHostFreeWarnBytes ?? DEFAULT_WSL_HOST_WARN_FREE_BYTES;\r\n  const criticalBelowBytes =\r\n    options.wslHostFreeCriticalBytes ?? DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES;\r\n\r\n  const statfs = options.statfs ?? statfsSync;\r\n  let stats: { bavail: bigint | number; blocks: bigint | number; bsize: bigint | number };\r\n  try {\r\n    stats = statfs(path);\r\n  } catch (error) {\r\n    return {\r\n      ok: false,\r\n      path,\r\n      freeBytes: 0,\r\n      totalBytes: 0,\r\n      usedPercent: 100,\r\n      warnBelowBytes,\r\n      criticalBelowBytes,\r\n      reason: `Windows host disk probe failed at ${path}: ${(error as Error).message}`,\r\n      probeError: (error as Error).message,\r\n    };\r\n  }\r\n\r\n  const freeBytes = Number(stats.bavail) * Number(stats.bsize);\r\n  const totalBytes = Number(stats.blocks) * Number(stats.bsize);\r\n  const usedPercent = totalBytes > 0 ? ((totalBytes - freeBytes) / totalBytes) * 100 : 100;\r\n  const lowFree = freeBytes < warnBelowBytes;\r\n  const criticalFree = freeBytes < criticalBelowBytes;\r\n  const ok = !lowFree && !criticalFree;\r\n\r\n  const freeGiB = (freeBytes / (1024 * 1024 * 1024)).toFixed(1);\r\n  let reason: string | null = null;\r\n  if (!ok) {\r\n    const tag = criticalFree ? \"critical\" : \"warning\";\r\n    reason =\r\n      `Windows host disk ${path} at ${tag}: ${freeGiB} GiB free ` +\r\n      `(<${(criticalFree ? criticalBelowBytes : warnBelowBytes) / 1024 / 1024 / 1024} GiB); ` +\r\n      `WSL VHDX cannot grow safely. ${summarizeWslRecoverySteps()}`;\r\n  }\r\n\r\n  return {\r\n    ok,\r\n    path,\r\n    freeBytes,\r\n    totalBytes,\r\n    usedPercent,\r\n    warnBelowBytes,\r\n    criticalBelowBytes,\r\n    reason,\r\n    probeError: null,\r\n  };\r\n}\r\n\r\n/**\r\n * Short operator recovery hint embedded in gate reasons so AgentOS evidence\r\n * surfaces actionable steps without a doc lookup. Keep terse \u2014 full runbook\r\n * lives at `docs/runbooks/wsl-disk-pressure.md`.\r\n */\r\nexport function summarizeWslRecoverySteps(): string {\r\n  return (\r\n    \"Recovery: \" +\r\n    \"1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP%); \" +\r\n    \"2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); \" +\r\n    \"3) clear local node_modules / .next / harness worktrees before restarting workers. \" +\r\n    \"Full runbook: docs/runbooks/wsl-disk-pressure.md.\"\r\n  );\r\n}\r\n", "import { statfsSync } from \"node:fs\";\r\nimport type { DispatchNextDiskGateShape } from \"./callbacks.js\";\r\nimport {\r\n  observeWslHostDisk,\r\n  type ObserveWslHostDiskOptions,\r\n  type WslHostDiskShape,\r\n} from \"./wsl-host.js\";\r\n\r\nconst DEFAULT_WARN_FREE_BYTES = 30 * 1024 * 1024 * 1024;\r\nconst DEFAULT_CRITICAL_FREE_BYTES = 15 * 1024 * 1024 * 1024;\r\nconst DEFAULT_MAX_USED_PERCENT = 80;\r\nconst DEFAULT_HARD_MAX_USED_PERCENT = 90;\r\n\r\nexport interface ObserveDiskGateInput {\r\n  diskPath?: string;\r\n  diskFreeWarnBytes?: number;\r\n  diskFreeCriticalBytes?: number;\r\n  diskMaxUsedPercent?: number;\r\n  diskHardMaxUsedPercent?: number;\r\n  /** Opt-out for the WSL host disk probe \u2014 leave `false`/undefined by\r\n   * default so we always check `/mnt/c` under WSL. */\r\n  skipWslHostCheck?: boolean;\r\n  wslHost?: ObserveWslHostDiskOptions;\r\n}\r\n\r\nexport function observeRunnerDiskGate(input: ObserveDiskGateInput = {}): DispatchNextDiskGateShape {\r\n  const path = input.diskPath?.trim() || \"/\";\r\n  const warnBelowBytes = input.diskFreeWarnBytes ?? DEFAULT_WARN_FREE_BYTES;\r\n  const criticalBelowBytes = input.diskFreeCriticalBytes ?? DEFAULT_CRITICAL_FREE_BYTES;\r\n  const maxUsedPercent = input.diskMaxUsedPercent ?? DEFAULT_MAX_USED_PERCENT;\r\n  const hardMaxUsedPercent = input.diskHardMaxUsedPercent ?? DEFAULT_HARD_MAX_USED_PERCENT;\r\n\r\n  const stats = statfsSync(path);\r\n  const freeBytes = Number(stats.bavail) * Number(stats.bsize);\r\n  const totalBytes = Number(stats.blocks) * Number(stats.bsize);\r\n  const usedPercent = totalBytes > 0 ? ((totalBytes - freeBytes) / totalBytes) * 100 : 100;\r\n  const lowFree = freeBytes < warnBelowBytes;\r\n  const criticalFree = freeBytes < criticalBelowBytes;\r\n  const highUse = usedPercent > maxUsedPercent;\r\n  const hardHighUse = usedPercent > hardMaxUsedPercent;\r\n  const localOk = !lowFree && !criticalFree && !highUse && !hardHighUse;\r\n\r\n  // WSL guard: the VHDX (mounted at `/`) grows into Windows C:; a healthy\r\n  // local statfs is meaningless if the host disk is about to refuse writes.\r\n  const wslHost: WslHostDiskShape | null = input.skipWslHostCheck\r\n    ? null\r\n    : observeWslHostDisk(input.wslHost);\r\n\r\n  const ok = localOk && (wslHost ? wslHost.ok : true);\r\n\r\n  let reason: string | null = null;\r\n  if (!ok) {\r\n    reason = [\r\n      criticalFree ? `free space below critical ${criticalBelowBytes} bytes` : null,\r\n      lowFree ? `free space below warning ${warnBelowBytes} bytes` : null,\r\n      hardHighUse ? `used percent above hard cap ${hardMaxUsedPercent}%` : null,\r\n      highUse ? `used percent above cap ${maxUsedPercent}%` : null,\r\n      wslHost && !wslHost.ok ? wslHost.reason : null,\r\n    ]\r\n      .filter(Boolean)\r\n      .join(\"; \");\r\n  }\r\n\r\n  return {\r\n    ok,\r\n    path,\r\n    freeBytes,\r\n    totalBytes,\r\n    usedPercent,\r\n    warnBelowBytes,\r\n    criticalBelowBytes,\r\n    maxUsedPercent,\r\n    hardMaxUsedPercent,\r\n    reason,\r\n    wslHost,\r\n  };\r\n}\r\n", "import os from \"node:os\";\r\nimport { readMemAvailableBytes } from \"./bounded-build/meminfo.js\";\r\nimport path from \"node:path\";\r\nimport { loadUserConfig, type KynverUserConfig } from \"./config.js\";\r\nimport { resolveBoxKindFromConfig } from \"./box-identity.js\";\r\nimport type { WorkerCapSource } from \"./worker-cap-source.js\";\r\nimport { resolveWorkerCap } from \"./worker-cap-source.js\";\r\nimport type { DispatchNextDiskGateShape } from \"./callbacks.js\";\r\nimport { observeRunnerDiskGate } from \"./disk-gate.js\";\r\nimport { listRunRecords, loadRun, runDirectory, type HarnessRunRecord } from \"./run-store.js\";\r\nimport { listRunWorkerNames } from \"./run-worker-index.js\";\r\nimport { isActiveHarnessWorker, workerProcessMatchesRecord } from \"./harness-worker-active.js\";\r\nimport { readJson, safeSlug } from \"./util.js\";\r\nimport type { HarnessWorkerRecord } from \"./status.js\";\r\n\r\nexport { workerProcessMatchesRecord };\r\n\r\n/** Default RAM budget per worker (~500 MiB, dogfood measured). Internal \u2014 not a setup knob. */\r\nexport const DEFAULT_PER_WORKER_MEM_BYTES = 500 * 1024 * 1024;\r\n\r\n/** Keep headroom for OS / IDE. Internal \u2014 not a setup knob. */\r\nexport const DEFAULT_MEM_RESERVE_BYTES = 4 * 1024 * 1024 * 1024;\r\n\r\n/** Fraction of total RAM used when auto-sizing worker cap. Internal. */\r\nexport const DEFAULT_MEM_UTILIZATION = 0.85;\r\n\r\n/** Auto cap when the user has not set maxConcurrentWorkers (safety on huge hosts). */\r\nexport const AUTO_MAX_WORKERS_CEILING = 64;\r\n\r\nexport interface RunnerResourceGateShape {\r\n  ok: boolean;\r\n  totalMemBytes: number;\r\n  freeMemBytes: number;\r\n  memReserveBytes: number;\r\n  perWorkerMemBytes: number;\r\n  configuredMaxWorkers: number | null;\r\n  /** Where the effective worker cap was resolved (workspace override, env, config, or auto). */\r\n  workerCapSource: WorkerCapSource;\r\n  /** Physical pool for this host (`forge` | `ghost`). */\r\n  boxKind: string;\r\n  autoCap: number;\r\n  capacityWorkers: number;\r\n  maxConcurrentWorkers: number;\r\n  activeWorkers: number;\r\n  slotsAvailable: number;\r\n  reason: string | null;\r\n  /** Present unless `KYNVER_RESOURCE_GATE_SKIP_DISK=1`. */\r\n  diskGate?: DispatchNextDiskGateShape;\r\n}\r\n\r\nexport interface ObserveResourceGateInput {\r\n  runId: string;\r\n  config?: KynverUserConfig;\r\n  /** Command Center / workspace override \u2014 wins over local config when set. */\r\n  configuredMaxWorkersOverride?: number | null;\r\n  /** Override active worker count (tests). */\r\n  activeWorkers?: number;\r\n  totalMemBytes?: number;\r\n  freeMemBytes?: number;\r\n  diskPath?: string;\r\n  skipDiskGate?: boolean;\r\n}\r\n\r\nfunction positiveInt(value: unknown, fallback: number): number {\r\n  const n = Number(value);\r\n  if (!Number.isFinite(n) || n <= 0) return fallback;\r\n  return Math.floor(n);\r\n}\r\n\r\nfunction resolveResourceConfig(\r\n  config: KynverUserConfig = loadUserConfig(),\r\n  configuredMaxWorkersOverride?: number | null,\r\n  totalMemBytes?: number,\r\n) {\r\n  const perWorkerMemBytes = positiveInt(config.perWorkerMemBytes, DEFAULT_PER_WORKER_MEM_BYTES);\r\n  const memReserveBytes = positiveInt(config.memReserveBytes, DEFAULT_MEM_RESERVE_BYTES);\r\n  const memUtilization = Math.min(\r\n    1,\r\n    Math.max(0.1, Number(config.memUtilization) > 0 ? Number(config.memUtilization) : DEFAULT_MEM_UTILIZATION),\r\n  );\r\n  const cap = resolveWorkerCap({\r\n    config,\r\n    configuredMaxWorkersOverride,\r\n    totalMemBytes: totalMemBytes ?? os.totalmem(),\r\n  });\r\n  return {\r\n    perWorkerMemBytes,\r\n    memReserveBytes,\r\n    memUtilization,\r\n    configuredMaxWorkers: cap.configuredMaxWorkers,\r\n    autoCap: cap.autoCap,\r\n    workerCapSource: cap.workerCapSource,\r\n  };\r\n}\r\n\r\n/** How many workers this host could run from RAM alone (before a user cap). */\r\nexport function computeAutoMaxWorkers(\r\n  totalMemBytes: number,\r\n  opts: { perWorkerMemBytes?: number; memReserveBytes?: number; memUtilization?: number } = {},\r\n): number {\r\n  const perWorkerMemBytes = opts.perWorkerMemBytes ?? DEFAULT_PER_WORKER_MEM_BYTES;\r\n  const memReserveBytes = opts.memReserveBytes ?? DEFAULT_MEM_RESERVE_BYTES;\r\n  const memUtilization = opts.memUtilization ?? DEFAULT_MEM_UTILIZATION;\r\n  const budgetBytes = Math.max(0, Math.floor(totalMemBytes * memUtilization) - memReserveBytes);\r\n  const raw = Math.max(1, Math.floor(budgetBytes / perWorkerMemBytes));\r\n  return Math.min(raw, AUTO_MAX_WORKERS_CEILING);\r\n}\r\n\r\nfunction readAvailableMemBytes(): number {\r\n  return readMemAvailableBytes();\r\n}\r\n\r\n/** Count alive, still-executing workers in a single run record. */\r\nfunction countActiveWorkersForRun(run: HarnessRunRecord): number {\r\n  let active = 0;\r\n  for (const name of listRunWorkerNames(run)) {\r\n    const worker = readJson<HarnessWorkerRecord | undefined>(\r\n      path.join(runDirectory(run.id), \"workers\", safeSlug(name), \"worker.json\"),\r\n      undefined,\r\n    );\r\n    if (!worker || !isActiveHarnessWorker(worker)) continue;\r\n    active++;\r\n  }\r\n  return active;\r\n}\r\n\r\n/** Count active workers in ONE run (kept for callers/tests scoped to a run). */\r\nexport function countActiveWorkers(runId: string): number {\r\n  return countActiveWorkersForRun(loadRun(runId));\r\n}\r\n\r\n/**\r\n * Count active workers across EVERY run on disk. The harness creates a new run\r\n * per task, so a per-run count let concurrent runs each believe the machine was\r\n * idle \u2014 the configured cap was never a real global ceiling (the \"spawns 4 or\r\n * infinity, never N\" bug). This machine-wide count is what the gate must use.\r\n */\r\nexport function countActiveWorkersGlobal(): number {\r\n  let active = 0;\r\n  for (const run of listRunRecords()) active += countActiveWorkersForRun(run);\r\n  return active;\r\n}\r\n\r\n/**\r\n * Compute how many workers this host can run and how many dispatch slots remain.\r\n * Uses total RAM for steady-state capacity and free RAM as a hard safety gate.\r\n */\r\nexport function observeRunnerResourceGate(input: ObserveResourceGateInput): RunnerResourceGateShape {\r\n  const config = input.config ?? loadUserConfig();\r\n  const totalMemBytes = input.totalMemBytes ?? os.totalmem();\r\n  const { perWorkerMemBytes, memReserveBytes, memUtilization, configuredMaxWorkers, autoCap: resolvedAutoCap, workerCapSource } =\r\n    resolveResourceConfig(config, input.configuredMaxWorkersOverride, totalMemBytes);\r\n  const boxKind = resolveBoxKindFromConfig(config);\r\n  const freeMemBytes = input.freeMemBytes ?? readAvailableMemBytes();\r\n  // Active count is GLOBAL across all runs (see countActiveWorkersGlobal), so the\r\n  // cap is a true machine-wide ceiling rather than per-run.\r\n  const activeWorkers = input.activeWorkers ?? countActiveWorkersGlobal();\r\n\r\n  const budgetBytes = Math.max(0, Math.floor(totalMemBytes * memUtilization) - memReserveBytes);\r\n  const capacityFromTotal = Math.max(0, Math.floor(budgetBytes / perWorkerMemBytes));\r\n  const capacityFromFree = Math.max(0, Math.floor(Math.max(0, freeMemBytes - memReserveBytes) / perWorkerMemBytes));\r\n\r\n  const autoCap = resolvedAutoCap;\r\n  const targetCap = configuredMaxWorkers ?? autoCap;\r\n  const maxConcurrentWorkers = Math.max(0, Math.min(targetCap, capacityFromTotal));\r\n  const slotsByCapacity = Math.max(0, maxConcurrentWorkers - activeWorkers);\r\n  // capacityFromFree is ADDITIONAL headroom: free/available RAM already excludes\r\n  // memory held by running workers, so we must NOT subtract activeWorkers again.\r\n  // Doing so (the old `capacityFromFree - activeWorkers`) double-counted active\r\n  // workers and collapsed dispatch to a handful of slots under load.\r\n  const slotsByFreeMem = capacityFromFree;\r\n  let slotsAvailable = Math.min(slotsByCapacity, slotsByFreeMem);\r\n\r\n  const skipDisk = input.skipDiskGate || process.env.KYNVER_RESOURCE_GATE_SKIP_DISK === \"1\";\r\n  const diskGate = skipDisk\r\n    ? undefined\r\n    : observeRunnerDiskGate({\r\n        diskPath:\r\n          input.diskPath?.trim() ||\r\n          process.env.KYNVER_DISK_GUARD_PATH?.trim() ||\r\n          \"/\",\r\n      });\r\n  if (diskGate && !diskGate.ok) slotsAvailable = 0;\r\n\r\n  let reason: string | null = null;\r\n  if (slotsAvailable <= 0) {\r\n    if (diskGate && !diskGate.ok) {\r\n      reason = diskGate.reason ?? \"disk gate blocked worker admission\";\r\n    } else if (activeWorkers >= maxConcurrentWorkers) {\r\n      reason = `at worker limit (${activeWorkers}/${maxConcurrentWorkers} running)`;\r\n    } else if (capacityFromFree <= 0) {\r\n      reason = \"insufficient free memory \u2014 waiting for workers to finish\";\r\n    } else {\r\n      reason = \"no worker slots available\";\r\n    }\r\n  }\r\n\r\n  return {\r\n    ok: slotsAvailable > 0,\r\n    totalMemBytes,\r\n    freeMemBytes,\r\n    memReserveBytes,\r\n    perWorkerMemBytes,\r\n    configuredMaxWorkers,\r\n    workerCapSource,\r\n    boxKind,\r\n    autoCap,\r\n    capacityWorkers: capacityFromTotal,\r\n    maxConcurrentWorkers,\r\n    activeWorkers,\r\n    slotsAvailable,\r\n    reason,\r\n    ...(diskGate ? { diskGate } : {}),\r\n  };\r\n}\r\n", "import type { HarnessWorkerRecord } from \"./status.js\";\r\nimport { saveWorker } from \"./run-store.js\";\r\n\r\nexport type CompletionOutcome = \"acknowledged\" | \"skipped_already_acked\" | \"structural_blocker\";\r\n\r\nexport interface CompletionAckFields {\r\n  completionReportedAt: string;\r\n  completionOutcome: \"acknowledged\" | \"rejected\";\r\n  completionResponse?: unknown;\r\n}\r\n\r\nexport function hasCompletionAck(worker: HarnessWorkerRecord): boolean {\r\n  return Boolean(worker.completionReportedAt?.trim());\r\n}\r\n\r\n/** True when AgentOS acknowledged completion and the board advanced (or was already terminal). */\r\nexport function hasSuccessfulCompletionAck(worker: HarnessWorkerRecord): boolean {\r\n  if (!hasCompletionAck(worker)) return false;\r\n  if (worker.completionOutcome === \"rejected\") return false;\r\n  if (typeof worker.completionBlocker === \"string\" && worker.completionBlocker.trim()) {\r\n    return false;\r\n  }\r\n  return true;\r\n}\r\n\r\n/**\r\n * Finished workers with a prior completion POST that did not advance the board\r\n * (rejected route, structural blocker) must be eligible for replay so fresher\r\n * `finalResult` evidence can reach AgentOS.\r\n */\r\nexport function needsCompletionReplay(worker: HarnessWorkerRecord): boolean {\r\n  if (!hasCompletionAck(worker)) return false;\r\n  return !hasSuccessfulCompletionAck(worker);\r\n}\r\n\r\nexport function persistCompletionAck(\r\n  worker: HarnessWorkerRecord,\r\n  runId: string,\r\n  fields: CompletionAckFields,\r\n): void {\r\n  worker.completionReportedAt = fields.completionReportedAt;\r\n  worker.completionOutcome = fields.completionOutcome;\r\n  if (fields.completionResponse !== undefined) {\r\n    worker.completionResponse = fields.completionResponse;\r\n  }\r\n  saveWorker(runId, worker);\r\n}\r\n\r\nexport function clearCompletionAck(worker: HarnessWorkerRecord, runId: string): void {\r\n  delete worker.completionReportedAt;\r\n  delete worker.completionOutcome;\r\n  delete worker.completionResponse;\r\n  saveWorker(runId, worker);\r\n}\r\n", "import { hasCompletionAck } from \"../completion-ack.js\";\r\nimport {\r\n  isFinishedWorkerStatus,\r\n  isLandingBlockedWorkerStatus,\r\n  type HarnessWorkerRecord,\r\n  type RawHarnessWorkerStatus,\r\n} from \"../status.js\";\r\nimport type { AutoCompleteAssessment } from \"./monitor.types.js\";\r\n\r\n/**\r\n * Auto-complete may only run when the worker has reached a verified terminal\r\n * condition and no structural blocker is present. Never paper over heartbeat\r\n * blockers, landing gates, or completion replay failures.\r\n */\r\nexport function assessAutoCompleteEligibility(input: {\r\n  worker: HarnessWorkerRecord;\r\n  status: RawHarnessWorkerStatus;\r\n}): AutoCompleteAssessment {\r\n  const { worker, status } = input;\r\n  const blockers: string[] = [];\r\n\r\n  if (worker.localOnly) {\r\n    blockers.push(\"local-only worker (no board linkage)\");\r\n  }\r\n  if (!worker.agentOsId || !worker.taskId) {\r\n    blockers.push(\"missing agentOsId/taskId linkage\");\r\n  }\r\n  if (hasCompletionAck(worker)) {\r\n    blockers.push(\"completion already acknowledged\");\r\n  }\r\n  if (worker.completionBlocker) {\r\n    blockers.push(worker.completionBlocker);\r\n  }\r\n  if (status.heartbeatBlocker && status.alive) {\r\n    blockers.push(`worker heartbeat blocker: ${status.heartbeatBlocker}`);\r\n  }\r\n  if (status.attention.state === \"blocked\") {\r\n    blockers.push(status.attention.reason || \"worker attention blocked\");\r\n  }\r\n  if (isLandingBlockedWorkerStatus(status)) {\r\n    blockers.push(status.attention.reason || \"landing gate blocked\");\r\n  }\r\n\r\n  const terminalVerified = isFinishedWorkerStatus(status);\r\n  let terminalReason: string | undefined;\r\n  if (terminalVerified) {\r\n    if (status.finalResult) terminalReason = \"final_result\";\r\n    else if (!status.alive) terminalReason = \"process_exited\";\r\n    else terminalReason = \"terminal_status\";\r\n  } else {\r\n    blockers.push(\"worker has not reached a terminal condition\");\r\n  }\r\n\r\n  const eligible = terminalVerified && blockers.length === 0;\r\n  return {\r\n    eligible,\r\n    terminalVerified,\r\n    terminalReason,\r\n    blockers,\r\n  };\r\n}\r\n"],
-  "mappings": ";AAAA,SAAS,cAAAA,aAAY,gBAAAC,qBAAoB;;;ACEzC,SAAS,mBAAmB,MAA8C;AACxE,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAQ,WAAW,GAAG,EAAG,QAAO;AACrC,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,OAAO;AAC1C,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,MAA8C;AAC7E,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,SAAS,mBAAmB,OAAO;AACzC,MAAI,OAAQ,QAAO;AAEnB,QAAM,aAAwC,CAAC;AAC/C,QAAM,UAAU;AAChB,MAAI;AACJ,UAAQ,aAAa,QAAQ,KAAK,OAAO,OAAO,MAAM;AACpD,UAAM,YAAY,mBAAmB,WAAW,CAAC,KAAK,EAAE;AACxD,QAAI,UAAW,YAAW,KAAK,SAAS;AAAA,EAC1C;AAEA,QAAM,aAAa,QAAQ,QAAQ,GAAG;AACtC,QAAM,YAAY,QAAQ,YAAY,GAAG;AACzC,MAAI,cAAc,KAAK,YAAY,YAAY;AAC7C,UAAM,QAAQ,mBAAmB,QAAQ,MAAM,YAAY,YAAY,CAAC,CAAC;AACzE,QAAI,MAAO,YAAW,KAAK,KAAK;AAAA,EAClC;AAEA,SAAO,WAAW,SAAS,IAAI,WAAW,WAAW,SAAS,CAAC,IAAK;AACtE;AAMO,SAAS,oCACd,KACS;AACT,QAAM,WAAW,IAAI,eAAe,IAAI;AACxC,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,QAAI,OAAO,aAAa,UAAU;AAChC,YAAMC,YAAW,wBAAwB,QAAQ;AACjD,aAAOA,cAAa,SAAS,KAAK,KAAK;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,QAAQ,KAAK,IAAI;AACvE,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,WAAW,wBAAwB,OAAO;AAChD,MAAI,SAAU,QAAO;AAErB,SAAO;AACT;;;AC/DA,SAAS,YAAY,WAAW,cAAc,aAAa,UAAU,qBAAqB;AAGnF,SAAS,KAAK,SAAwB;AAC3C,UAAQ,MAAM,OAAO;AACrB,UAAQ,KAAK,CAAC;AAChB;AAaO,SAAS,SAAS,MAAuB;AAC9C,MAAI;AACF,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AA2CO,SAAS,SAAS,MAAsB;AAC7C,MAAI;AACF,WAAO,SAAS,IAAI,EAAE;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,UAAU,MAA6B;AACrD,MAAI;AACF,WAAO,SAAS,IAAI,EAAE,MAAM,YAAY;AAAA,EAC1C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,SAAS,MAAc,OAAuB;AAC5D,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,QAAM,OAAO,aAAa,MAAM,MAAM;AACtC,SAAO,KAAK,MAAM,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI;AACjD;AAsBO,SAAS,WAAW,KAAkC;AAC3D,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUO,SAAS,UAAU,QAAyD;AACjF,MAAI,OAAsB;AAC1B,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,QAAI,CAAC,MAAO;AACZ,UAAM,KAAK,KAAK,MAAM,KAAK;AAC3B,QAAI,OAAO,SAAS,EAAE,KAAK,KAAK,QAAQ;AACtC,eAAS;AACT,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,QAAQ,IAAoB;AAC1C,SAAO,KAAK,IAAI,GAAG,KAAK,OAAO,KAAK,IAAI,IAAI,MAAM,GAAI,CAAC;AACzD;;;AFxHA,IAAM,2BAA2B;AAG1B,SAAS,yBAAyB,OAA2C;AAClF,SAAO,UAAU;AACnB;AAOO,SAAS,iCAAiC,WAAqC;AACpF,MAAI,CAAC,yBAAyB,UAAU,kBAAkB,EAAG,QAAO;AACpE,MAAI,UAAU,wBAAwB,UAAa,UAAU,wBAAwB,MAAM;AACzF,WAAO,UAAU;AAAA,EACnB;AACA,QAAM,UAAU,UAAU,sBAAsB,KAAK;AACrD,SAAO,WAAW;AACpB;AAEO,SAAS,eAAe,MAA+B;AAC5D,QAAM,SAA0B;AAAA,IAC9B,gBAAgB;AAAA,IAChB,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,sBAAsB;AAAA,IACtB,qBAAqB;AAAA,IACrB,kBAAkB;AAAA,IAClB,oBAAoB,CAAC;AAAA,IACrB,yBAAyB;AAAA,IACzB,gBAAgB,CAAC;AAAA,EACnB;AACA,MAAI,CAACC,YAAW,IAAI,EAAG,QAAO;AAC9B,QAAM,cAAc,KAAK,IAAI,IAAI;AACjC,QAAM,YAAY,IAAI,KAAK,WAAW,EAAE,YAAY;AACpD,QAAM,QAAQC,cAAa,MAAM,MAAM,EAAE,MAAM,IAAI,EAAE,OAAO,OAAO;AACnE,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,SAAS,IAAI;AAC3B,QAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG;AACjE,UAAM,MAAM;AACZ,WAAO;AACP,QAAI,IAAI,IAAI;AACV,YAAM,KAAK,OAAO,IAAI,EAAE;AACxB,YAAM,OAAO,KAAK,MAAM,EAAE;AAC1B,UAAI,OAAO,SAAS,IAAI,KAAK,OAAO,aAAa;AAC/C,eAAO,mBAAmB,KAAK;AAAA,UAC7B,MAAM;AAAA,UACN,YAAY;AAAA,UACZ;AAAA,QACF,CAAC;AAAA,MACH,OAAO;AACL,eAAO,kBAAkB;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,IAAI,UAAU,UAAa,IAAI,UAAU,KAAM,QAAO,qBAAqB,OAAO,IAAI,KAAK;AAC/F,QAAI,IAAI,YAAY,UAAa,IAAI,YAAY,KAAM,QAAO,uBAAuB,OAAO,IAAI,OAAO;AACvG,QAAI,yBAAyB,OAAO,kBAAkB,GAAG;AACvD,aAAO,sBAAsB,oCAAoC,GAAG;AAAA,IACtE;AACA,WAAO,mBAAmB,IAAI,UAAU,OAAO,IAAI,OAAO,IAAI;AAC9D,QAAI,IAAI,uBAAuB,OAAO,IAAI,wBAAwB,YAAY,CAAC,MAAM,QAAQ,IAAI,mBAAmB,GAAG;AACrH,aAAO,0BAA0B,IAAI;AAAA,IACvC;AACA,QAAI,MAAM,QAAQ,IAAI,UAAU,GAAG;AACjC,aAAO,iBAAiB,IAAI,WAAW;AAAA,QACrC,CAACC,WACC,CAAC,CAACA,UACF,OAAOA,WAAU,YACjB,OAAQA,OAA+C,UAAU;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;;;AGlGA,SAAS,cAAAC,aAAY,gBAAAC,qBAAoB;;;ACOzC,IAAM,cAAc,oBAAI,IAAI,CAAC,MAAM,WAAW,MAAM,CAAC;AACrD,IAAM,qBAAqB,oBAAI,IAAI;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAcD,SAAS,WAAW,OAA0C;AAC5D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,MAAM,MAAM,GAAG,EAAE,IAAI,KAAK;AACvC,SAAO,KAAK,QAAQ,WAAW,EAAE,EAAE,YAAY;AACjD;AAEA,SAAS,gBAAgB,OAAyB;AAChD,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,QAAM,QAAkB,CAAC;AACzB,MAAI,UAAU;AACd,MAAI;AACJ,MAAI,UAAU;AACd,aAAW,QAAQ,OAAO;AACxB,QAAI,SAAS;AACX,iBAAW;AACX,gBAAU;AACV;AAAA,IACF;AACA,QAAI,SAAS,MAAM;AACjB,gBAAU;AACV;AAAA,IACF;AACA,QAAI,OAAO;AACT,UAAI,SAAS,MAAO,SAAQ;AAAA,UACvB,YAAW;AAChB;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR;AAAA,IACF;AACA,QAAI,KAAK,KAAK,IAAI,GAAG;AACnB,UAAI,SAAS;AACX,cAAM,KAAK,OAAO;AAClB,kBAAU;AAAA,MACZ;AACA;AAAA,IACF;AACA,eAAW;AAAA,EACb;AACA,MAAI,QAAS,OAAM,KAAK,OAAO;AAC/B,SAAO;AACT;AAEA,SAAS,SAAS,MAAyB;AACzC,QAAM,MAAM,WAAW,KAAK,CAAC,CAAC;AAC9B,SAAO,QAAQ,OAAO,YAAY,IAAI,GAAG,CAAC;AAC5C;AAEO,SAAS,yBAAyB,QAAqC;AAC5E,MAAI,CAAC,UAAU,OAAO,SAAS,GAAG,KAAK,OAAO,SAAS,GAAG,EAAG,QAAO;AACpE,SAAO,8CAA8C,KAAK,MAAM;AAClE;AAGO,SAAS,uBAAuB,QAAqC;AAC1E,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,IAAI,OAAO,KAAK;AACtB,SAAO,EAAE,WAAW,GAAG,KAAK,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,EAAE,SAAS,KAAK;AACnE;AAEA,SAAS,eAAe,OAAuB;AAC7C,MAAI,CAAC,MAAM,WAAW,SAAS,EAAG,QAAO;AACzC,QAAM,QAAQ,MAAM,MAAM,UAAU,MAAM;AAC1C,MAAI,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,SAAS,KAAK,GAAG;AAC3E,WAAO,UAAU,KAAK;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,MAA0B;AACrD,QAAM,aAAuB,CAAC;AAC9B,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,QAAQ,KAAK,CAAC;AACpB,QAAI,CAAC,MAAO;AACZ,QAAI,UAAU,MAAM;AAClB,iBAAW,KAAK,GAAG,KAAK,MAAM,IAAI,CAAC,CAAC;AACpC;AAAA,IACF;AACA,QAAI,MAAM,WAAW,GAAG,GAAG;AACzB,UAAI,MAAM,SAAS,GAAG,EAAG;AACzB,UAAI,mBAAmB,IAAI,KAAK,EAAG,MAAK;AACxC;AAAA,IACF;AACA,eAAW,KAAK,KAAK;AAAA,EACvB;AACA,SAAO;AACT;AAEO,SAAS,gBAAgB,MAAsD;AACpF,MAAI,UAAU;AACd,QAAM,MAAM,KAAK,IAAI,CAAC,UAAU;AAC9B,UAAM,QAAQ,eAAe,KAAK;AAClC,QAAI,UAAU,MAAO,WAAU;AAC/B,WAAO;AAAA,EACT,CAAC;AACD,QAAM,aAAa,oBAAoB,GAAG;AAC1C,MAAI,WAAW,WAAW,GAAG;AAC3B,UAAM,CAAC,SAAS,MAAM,IAAI;AAC1B,QAAI,yBAAyB,MAAM,GAAG;AACpC,aAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,MAAM,QAAQ,SAAS,GAAG,GAAG,SAAS,KAAK;AAAA,IAC7E;AAAA,EACF;AACA,SAAO,EAAE,MAAM,KAAK,QAAQ;AAC9B;AAEO,SAAS,2BAA2B,SAAwD;AACjG,QAAM,UAAU,QAAQ,KAAK;AAC7B,MAAI,CAAC,QAAS,QAAO,EAAE,SAAS,SAAS,SAAS,MAAM;AACxD,QAAM,SAAS,QAAQ,SAAS,IAAI,IAAI,SAAS,QAAQ,SAAS,IAAI,IAAI,SAAS;AACnF,QAAM,SAAS,QAAQ,MAAM,sBAAsB;AACnD,MAAI,UAAU;AACd,QAAM,mBAAmB,OAAO,IAAI,CAAC,UAAU;AAC7C,UAAM,OAAO,gBAAgB,MAAM,KAAK,CAAC;AACzC,QAAI,CAAC,KAAK,UAAU,CAAC,SAAS,IAAI,EAAG,QAAO;AAC5C,UAAM,aAAa,gBAAgB,IAAI;AACvC,QAAI,WAAW,SAAS;AACtB,gBAAU;AACV,aAAO,WAAW,KAAK,KAAK,GAAG;AAAA,IACjC;AACA,WAAO;AAAA,EACT,CAAC;AACD,MAAI,CAAC,QAAS,QAAO,EAAE,SAAS,SAAS,SAAS,MAAM;AACxD,SAAO,EAAE,SAAS,iBAAiB,KAAK,MAAM,GAAG,SAAS,KAAK;AACjE;AAEO,SAAS,kBAAkB,MAAqD;AACrF,MAAI,CAAC,KAAM,QAAO,CAAC;AACnB,QAAM,gBAAgB,KAAK,MAAM,+CAA+C;AAChF,MAAI,eAAe;AACjB,WAAO,EAAE,SAAS,cAAc,CAAC,GAAG,QAAQ,cAAc,CAAC,GAAG,KAAK,EAAE;AAAA,EACvE;AACA,QAAM,QAAQ,KAAK,MAAM,iCAAiC;AAC1D,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,SAAO,EAAE,SAAS,MAAM,CAAC,GAAG,QAAQ,MAAM,CAAC,GAAG,KAAK,EAAE;AACvD;AAEO,SAAS,uBAAuB,MAAiC;AACtE,QAAM,EAAE,SAAS,OAAO,IAAI,kBAAkB,IAAI;AAClD,MAAI,CAAC,QAAS,QAAO,EAAE,MAAM,kBAAkB;AAC/C,MAAI,uBAAuB,MAAM,GAAG;AAClC,WAAO,EAAE,MAAM,qBAAqB,SAAS,OAAO;AAAA,EACtD;AACA,MAAI,yBAAyB,MAAM,GAAG;AACpC,WAAO,EAAE,MAAM,aAAa,SAAS,OAAO;AAAA,EAC9C;AACA,SAAO,EAAE,MAAM,mBAAmB,SAAS,OAAO;AACpD;AAEO,SAAS,0BAA0B,MAA4D;AACpG,QAAM,EAAE,SAAS,OAAO,IAAI,kBAAkB,IAAI;AAClD,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,uBAAuB,MAAM,GAAG;AAClC,UAAM,OAAO,GAAG,OAAQ,KAAK,CAAC;AAC9B,WAAO;AAAA,MACL,SAAS,OAAO,OAAO,SAAS,IAAI;AAAA,MACpC,SAAS;AAAA,IACX;AAAA,EACF;AACA,MAAI,UAAU,yBAAyB,MAAM,GAAG;AAC9C,WAAO;AAAA,MACL,SAAS,SAAS,MAAM,KAAK,OAAO;AAAA,MACpC,SAAS;AAAA,IACX;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,KAAuC;AAC9E,MACE,IAAI,SAAS,eACb,IAAI,SAAS,SAAS,kBAAkB,KACxC,IAAI,WAAW,gBACf;AACA,WACE;AAAA,EAGJ;AACA,MAAI,IAAI,SAAS,eAAe,IAAI,WAAW,IAAI,QAAQ;AACzD,WAAO,gBAAgB,IAAI,MAAM,KAAK,IAAI,OAAO,+CAA+C,IAAI,MAAM;AAAA,EAC5G;AACA,MAAI,IAAI,SAAS,uBAAuB,IAAI,SAAS;AACnD,UAAM,OAAO,IAAI,SAAS,GAAG,IAAI,OAAO,KAAK,CAAC,QAAQ;AACtD,WACE,uBAAuB,IAAI,UAAU,eAAe,6CACvC,IAAI,OAAO,SAAS,IAAI;AAAA,EAEzC;AACA,MAAI,IAAI,SAAS,gBAAgB,IAAI,SAAS;AAC5C,WAAO,mBAAmB,IAAI,OAAO,+FAA+F,IAAI,OAAO;AAAA,EACjJ;AACA,SAAO;AACT;AAGO,SAAS,8BAA8B,MAA6B;AACzE,QAAM,QAAQ,KAAK,MAAM,gEAAgE;AACzF,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,WAAW,MAAM,CAAC,CAAC,QAAQ,MAAM,CAAC,GAAG,KAAK,CAAC;AACpD;AAEO,SAAS,0BAA0B,OAIxB;AAChB,QAAM,OACJ,MAAM,MAAM,KAAK,MAChB,MAAM,UAAU,8BAA8B,MAAM,OAAO,IAAI,SAChE;AACF,MAAI,MAAM;AACR,UAAM,MAAM,uBAAuB,IAAI;AACvC,UAAM,WAAW,yBAAyB,GAAG;AAC7C,QAAI,SAAU,QAAO;AACrB,UAAM,aAAa,0BAA0B,IAAI;AACjD,QAAI,YAAY,SAAS;AACvB,aAAO,oDAAoD,WAAW,OAAO;AAAA,IAC/E;AAAA,EACF;AACA,MAAI,MAAM,WAAW,oBAAoB,KAAK,MAAM,OAAO,GAAG;AAC5D,UAAM,aAAa,2BAA2B,MAAM,OAAO;AAC3D,QAAI,WAAW,SAAS;AACtB,aAAO,+CAA+C,WAAW,OAAO;AAAA,IAC1E;AACA,QAAI,MAAM,aAAa,GAAG;AACxB,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;;;ACzOA,IAAM,eAAe;AACrB,IAAM,YAAY;AAClB,IAAM,mBAAmB;AAEzB,SAAS,KAAK,MAAc,MAAM,KAAa;AAC7C,QAAM,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,KAAK;AAC3C,SAAO,IAAI,SAAS,MAAM,GAAG,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,WAAM;AAC1D;AAEA,SAAS,kBAAkB,MAA8B;AACvD,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,QAAQ,WAAW,GAAG,GAAG;AAC3B,QAAI;AACF,aAAO,KAAK,MAAM,OAAO;AAAA,IAC3B,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,QAAQ,QAAQ,QAAQ,GAAG;AACjC,QAAM,MAAM,QAAQ,YAAY,GAAG;AACnC,MAAI,SAAS,KAAK,MAAM,OAAO;AAC7B,QAAI;AACF,aAAO,KAAK,MAAM,QAAQ,MAAM,OAAO,MAAM,CAAC,CAAC;AAAA,IACjD,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEO,SAAS,wBAAwB,QAAyD;AAC/F,QAAM,OAAO,OAAO;AACpB,MAAI,CAAC,SAAS,IAAI,EAAG,QAAO;AAC5B,QAAM,OAAO,KAAK;AAClB,MAAI,CAAC,SAAS,IAAI,EAAG,QAAO;AAC5B,QAAM,MAAM,CAAC,QAAiB,OAAO,KAAK,GAAG,MAAM,WAAW,KAAK,GAAG,IAAI;AAC1E,QAAM,UAA2B;AAAA,IAC/B,MAAM,IAAI,MAAM;AAAA,IAChB,KAAK,IAAI,KAAK;AAAA,IACd,UAAU,IAAI,UAAU;AAAA,IACxB,MAAM,IAAI,MAAM;AAAA,IAChB,UAAU,IAAI,UAAU;AAAA,IACxB,OAAO,IAAI,OAAO;AAAA,EACpB;AACA,MACE,OAAO,KAAK,UAAU,YACtB,CAAC,QAAQ,YACT,CAAC,QAAQ,QACT,CAAC,QAAQ,YACT,CAAC,QAAQ,OACT,CAAC,QAAQ,MACT;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,OAAgC;AAC9D,QAAM,QAAkB,CAAC;AACzB,MAAI,MAAM,SAAU,OAAM,KAAK,GAAG,MAAM,QAAQ,WAAW;AAC3D,MAAI,MAAM,KAAM,OAAM,KAAK,GAAG,MAAM,IAAI,OAAO;AAC/C,MAAI,MAAM,SAAU,OAAM,KAAK,GAAG,MAAM,QAAQ,WAAW;AAC3D,MAAI,MAAM,IAAK,OAAM,KAAK,GAAG,MAAM,GAAG,MAAM;AAC5C,MAAI,MAAM,KAAM,OAAM,KAAK,GAAG,MAAM,IAAI,OAAO;AAC/C,QAAM,YAAY,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI;AACpD,SAAO,cAAc,MAAM,KAAK,gBAAgB,MAAM,UAAU,IAAI,MAAM,KAAK,KAAK,SAAS;AAC/F;AAEA,SAAS,sBAAsB,QAAiC,QAAwB;AACtF,QAAM,MAAM,OAAO;AACnB,MAAI,SAAS,GAAG,GAAG;AACjB,UAAM,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,QAAQ,KAAK,IAAI;AACvE,UAAM,OAAO,OAAO,IAAI,SAAS,WAAW,IAAI,KAAK,KAAK,IAAI;AAC9D,QAAI,QAAS,QAAO,OAAO,GAAG,IAAI,KAAK,OAAO,KAAK;AACnD,QAAI,KAAM,QAAO;AAAA,EACnB;AACA,QAAM,SAAS,OAAO,OAAO,YAAY,WAAW,OAAO,QAAQ,KAAK,IAAI;AAC5E,MAAI,OAAQ,QAAO;AACnB,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,QAAS,QAAO,KAAK,QAAQ,MAAM,IAAI,EAAE,KAAK,OAAO,KAAK,SAAS,GAAG;AAC1E,SAAO;AACT;AAEO,SAAS,wBAAwB,OAIhB;AACtB,QAAM,WAAW,GAAG,MAAM,MAAM;AAAA,EAAK,MAAM,MAAM,GAAG,KAAK;AACzD,QAAM,SAAS,kBAAkB,QAAQ;AAEzC,MAAI,CAAC,UAAU,CAAC,SAAS,MAAM,GAAG;AAChC,UAAM,OAAO,KAAK,YAAY,QAAQ,MAAM,QAAQ,IAAI,GAAG;AAC3D,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU,MAAM;AAAA,MAChB,SAAS,+CAA+C,IAAI;AAAA,MAC5D,YAAY;AAAA,IACd;AAAA,EACF;AAEA,MAAI,SAAS,OAAO,KAAK,GAAG;AAC1B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU,MAAM;AAAA,MAChB,SAAS,6BAA6B,sBAAsB,QAAQ,MAAM,MAAM,CAAC;AAAA,IACnF;AAAA,EACF;AAEA,QAAM,QAAQ,wBAAwB,MAAM;AAC5C,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU,MAAM;AAAA,MAChB,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AAEA,MAAI,MAAM,aAAa,KAAK,MAAM,UAAU,GAAG;AAC7C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU,MAAM;AAAA,IAChB,SAAS,uBAAuB,KAAK;AAAA,IACrC;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,SAA0B;AACnD,SAAO,aAAa,KAAK,OAAO;AAClC;AAEA,SAAS,YAAY,SAA0B;AAC7C,SAAO,UAAU,KAAK,OAAO;AAC/B;AAEA,SAAS,kBAAkB,OAMH;AACtB,QAAM,YAAY,0BAA0B;AAAA,IAC1C,SAAS,MAAM;AAAA,IACf,UAAU,MAAM;AAAA,EAClB,CAAC;AAED,MAAI,MAAM,aAAa,GAAG;AACxB,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX;AAAA,EACF;AAEA,MAAI,MAAM,aAAa,GAAG;AACxB,UAAM,WAAW,MAAM,UAAU,MAAM,aAAa,KAAK;AACzD,QAAI,WAAW,iBAAiB,KAAK,OAAO,GAAG;AAC7C,YAAMC,QAAO,KAAK,SAAS,GAAG;AAC9B,aAAO;AAAA,QACL,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,aAAa,4BAA4BA,KAAI;AAAA,MACxD;AAAA,IACF;AACA,UAAM,aAAa,2BAA2B,MAAM,OAAO;AAC3D,UAAM,QACJ,WAAW,WAAW,CAAC,YAAY,kBAAkB,WAAW,OAAO,QAAQ;AACjF,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SACE,aACA,gCAAgC,KAAK;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,OAAO,KAAK,MAAM,eAAe,MAAM,UAAU,MAAM,UAAU,QAAQ,MAAM,QAAQ,IAAI,GAAG;AACpG,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU,MAAM;AAAA,IAChB,SAAS,aAAa,wBAAwB,MAAM,QAAQ,MAAM,IAAI;AAAA,EACxE;AACF;AAEO,SAAS,4BAA4B,OAMpB;AACtB,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,cAAc,MAAM,qBAAqB;AAE/C,MAAI,kBAAkB,MAAM,OAAO,GAAG;AACpC,UAAM,OAAO,OAAO,KAAK,KAAK,YAAY,KAAK,KAAK,OAAO,KAAK;AAChE,WAAO,wBAAwB;AAAA,MAC7B,UAAU,MAAM;AAAA,MAChB,QAAQ;AAAA,MACR;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,YAAY,MAAM,OAAO,GAAG;AAC9B,WAAO,kBAAkB;AAAA,MACvB,SAAS,MAAM;AAAA,MACf,UAAU,MAAM;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,kBAAkB,0BAA0B;AAAA,IAChD,SAAS,MAAM;AAAA,IACf,UAAU,MAAM;AAAA,EAClB,CAAC;AACD,MAAI,mBAAmB,MAAM,aAAa,GAAG;AAC3C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU,MAAM;AAAA,MAChB,SAAS;AAAA,IACX;AAAA,EACF;AAEA,MAAI,MAAM,aAAa,GAAG;AACxB,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX;AAAA,EACF;AAEA,QAAM,OAAO,KAAK,eAAe,UAAU,UAAU,QAAQ,MAAM,QAAQ,IAAI,GAAG;AAClF,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU,MAAM;AAAA,IAChB,SAAS,wBAAwB,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC3D;AACF;;;AFjRA,SAAS,kBAAkB,OAAoD;AAC7E,QAAM,OAAO,MAAM;AACnB,SAAQ,MAAM,aAAa,MAAM,OAAO,OAAO,IAAI,KAAK,IAAI,EAAE,YAAY,IAAI;AAGhF;AAGA,SAAS,uBAAuB,UAA8D;AAC5F,MAAI,CAAC,SAAU,QAAO;AACtB,aAAW,OAAO,OAAO,KAAK,QAAQ,GAAG;AACvC,QAAI,IAAI,SAAS,UAAU,GAAG;AAC5B,YAAM,OAAO,IAAI,MAAM,GAAG,CAAC,WAAW,MAAM;AAC5C,aAAO,KAAK,SAAS,OAAO;AAAA,IAC9B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAsB,OAAsC;AACtF,SAAO,cAAc,MAAM,UAAU,MAAM,WAAW,MAAM,mBAAmB;AAC/E,MAAI,MAAM,UAAU;AAClB,WAAO,QAAQ,OAAO,MAAM,UAAU,MAAM,oBAAoB,qBAAqB;AAAA,EACvF;AACF;AAEA,SAAS,4BACP,OACmG;AACnG,MAAI,MAAM,SAAS,eAAe,MAAM,YAAY,YAAa,QAAO;AACxE,QAAM,WACJ,MAAM,aAAa,OAAO,MAAM,cAAc,YAAY,CAAC,MAAM,QAAQ,MAAM,SAAS,IACnF,MAAM,YACP;AACN,QAAM,QAAQ,UAAU;AACxB,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,WAAW;AACjB,QAAM,OAAO,SAAS;AACtB,QAAM,UACJ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,KAAK,OAAQ,KAAiC,YAAY,WAC7G,OAAQ,KAAiC,OAAO,IAChD;AACN,QAAM,SAAS,SAAS;AACxB,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AAC3E,QAAM,OAAQ,OAAmC,WAAY,OAAmC;AAChG,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,QAAM,MAAM;AACZ,QAAM,WAAW,OAAO,IAAI,aAAa,WAAW,IAAI,WAAW;AACnE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAAA,IACtD,QAAQ,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAAA,IACtD,aAAa,OAAO,IAAI,sBAAsB,WAAW,IAAI,oBAAoB;AAAA,EACnF;AACF;AAEA,SAAS,kBAAkB,QAAsB,SAAoC;AACnF,MAAI,QAAQ,SAAS,aAAa,QAAQ,SAAS,oBAAqB;AACxE,SAAO,mBAAmB;AAC5B;AAOO,SAAS,mBAAmB,MAA4B;AAC7D,QAAM,SAAuB;AAAA,IAC3B,cAAc;AAAA,IACd,aAAa;AAAA,IACb,aAAa;AAAA,IACb,aAAa;AAAA,IACb,OAAO;AAAA,IACP,kBAAkB;AAAA,EACpB;AACA,MAAI,CAACC,YAAW,IAAI,EAAG,QAAO;AAC9B,QAAM,QAAQC,cAAa,MAAM,MAAM,EAAE,MAAM,IAAI,EAAE,OAAO,OAAO;AACnE,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,SAAS,IAAI;AAC3B,QAAI,CAAC,MAAO;AACZ,UAAM,KAAK,kBAAkB,KAAK;AAClC,QAAI,IAAI;AACN,aAAO,iBAAiB;AACxB,aAAO,cAAc;AAAA,IACvB;AACA,QACE,MAAM,SAAS,kBACf,MAAM,SACN,OAAO,MAAM,UAAU,YACtB,MAAM,MAAkC,SAAS,uBAClD;AACA,YAAM,QAAS,MAAM,MAAkC;AACvD,UAAI,OAAO,SAAS,WAAY,QAAO,cAAc,OAAO,MAAM,QAAQ,MAAM;AAAA,IAClF;AACA,QAAI,MAAM,SAAS,eAAe,MAAM,WAAW,OAAO,MAAM,YAAY,UAAU;AACpF,YAAM,UAAW,MAAM,QAAoC;AAC3D,UAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,cAAM,OAAO,QAAQ,KAAK,CAAC,SAAS,MAAM,SAAS,UAAU;AAC7D,YAAI,KAAM,QAAO,cAAc,OAAO,KAAK,QAAQ,OAAO,WAAW;AAAA,MACvE;AAAA,IACF;AACA,QAAI,MAAM,SAAS,eAAe,MAAM,YAAY,WAAW;AAC7D,YAAM,WACJ,MAAM,aAAa,OAAO,MAAM,cAAc,YAAY,CAAC,MAAM,QAAQ,MAAM,SAAS,IACnF,MAAM,YACP;AACN,YAAM,OAAO,uBAAuB,QAAQ;AAC5C,UAAI,KAAM,QAAO,cAAc;AAAA,IACjC;AACA,UAAM,QAAQ,4BAA4B,KAAK;AAC/C,QAAI,OAAO;AACT;AAAA,QACE;AAAA,QACA,4BAA4B;AAAA,UAC1B,SAAS,MAAM;AAAA,UACf,UAAU,MAAM;AAAA,UAChB,QAAQ,MAAM;AAAA,UACd,QAAQ,MAAM;AAAA,UACd,mBAAmB,MAAM;AAAA,QAC3B,CAAC;AAAA,MACH;AAAA,IACF;AACA,QAAI,MAAM,SAAS,UAAU;AAC3B,yBAAmB,QAAQ,KAAK;AAAA,IAClC;AAAA,EACF;AACA,SAAO;AACT;;;AGpHA,IAAM,mBAAqC;AAAA,EACzC;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AACF;AAGA,SAASC,MAAK,WAAmB,MAAM,KAAa;AAClD,QAAMC,WAAU,UAAU,QAAQ,QAAQ,GAAG,EAAE,KAAK;AACpD,SAAOA,SAAQ,SAAS,MAAM,GAAGA,SAAQ,MAAM,GAAG,MAAM,CAAC,CAAC,WAAMA;AAClE;AAOO,SAAS,oBACd,WAC2B;AAC3B,QAAM,QAAQ,aAAa,IAAI,KAAK;AACpC,MAAI,CAAC,KAAM,QAAO;AAClB,aAAW,WAAW,kBAAkB;AACtC,QAAI,QAAQ,KAAK,KAAK,IAAI,GAAG;AAC3B,aAAO,EAAE,SAAS,MAAM,QAAQ,GAAG,QAAQ,KAAK,KAAKD,MAAK,IAAI,CAAC,GAAG;AAAA,IACpE;AAAA,EACF;AACA,SAAO;AACT;;;AC/DA,SAAS,WAAW,OAA+B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,UAAU;AACpC;AAEA,SAAS,eAAe,OAAyB;AAC/C,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,KAAK,EAAE,SAAS;AAC5D,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,SAAS;AAChD,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK,KAAe,EAAE,SAAS;AAC5E,SAAO;AACT;AAEA,SAAS,0BAA0B,UAAyD;AAC1F,MAAI,CAAC,UAAU,QAAS,QAAO;AAC/B,MAAI,SAAS,yBAAyB,MAAO,QAAO;AACpD,SAAO,WAAW,SAAS,IAAI;AACjC;AAEA,SAAS,qBACP,MACA,kBACA,YACQ;AACR,QAAM,QAAkB,CAAC,6BAA6B;AACtD,MAAI,SAAS,iBAAiB,SAAS,QAAQ;AAC7C,UAAM;AAAA,MACJ,GAAG,gBAAgB,sBAAsB,qBAAqB,IAAI,KAAK,GAAG;AAAA,IAC5E;AAAA,EACF;AACA,OAAK,SAAS,qBAAqB,SAAS,WAAW,YAAY;AACjE,UAAM,MAAM,WAAW,SAAS,KAAK,WAAW,MAAM,GAAG,EAAE,IAAI;AAC/D,UAAM,KAAK,UAAU,GAAG,qCAAqC;AAAA,EAC/D;AACA,QAAM,KAAK,qFAAgF;AAC3F,SAAO,MAAM,KAAK,IAAI;AACxB;AAMO,SAAS,0BAA0B,OAMP;AACjC,MAAI,MAAM,SAAS,eAAe,MAAM,WAAW,EAAG,QAAO;AAE7D,QAAM,oBAAoB,MAAM,gBAAgB,CAAC,GAAG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE;AAClF,QAAM,aAAa,WAAW,MAAM,UAAU,KAAK,0BAA0B,MAAM,WAAW;AAC9F,QAAM,iBAAiB,mBAAmB;AAC1C,QAAM,oBAAoB,QAAQ,UAAU;AAE5C,MAAI,CAAC,kBAAkB,CAAC,mBAAmB;AACzC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,aAAa;AAAA,MACb,kBAAkB;AAAA,MAClB,YAAY;AAAA,MACZ,iBAAiB;AAAA,IACnB;AAAA,EACF;AAEA,QAAM,OACJ,kBAAkB,oBAAoB,SAAS,iBAAiB,gBAAgB;AAElF,SAAO;AAAA,IACL;AAAA,IACA,aAAa;AAAA,IACb;AAAA,IACA;AAAA,IACA,iBAAiB,qBAAqB,MAAM,kBAAkB,UAAU;AAAA,EAC1E;AACF;;;ACjGA,SAAS,iBAAiB;;;ACKnB,IAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,oBAAoB,IAAI,IAAY,yBAAyB;;;AD9B5D,SAAS,IAAI,KAAa,MAAgB,UAAsB,CAAC,GAAW;AACjF,QAAM,MAAM,UAAU,OAAO,MAAM,EAAE,KAAK,UAAU,OAAO,CAAC;AAC5D,MAAI,IAAI,WAAW,KAAK,CAAC,QAAQ,cAAc;AAC7C,UAAM,UAAU,OAAO,KAAK,KAAK,GAAG,CAAC,YAAY,IAAI,UAAU,IAAI,MAAM;AACzE,QAAI,QAAQ,WAAY,OAAM,IAAI,MAAM,OAAO;AAC/C,SAAK,OAAO;AAAA,EACd;AACA,SAAO,IAAI,UAAU;AACvB;AAMO,SAAS,eAAe,cAAgC;AAC7D,SAAO,IAAI,cAAc,CAAC,UAAU,SAAS,GAAG,EAAE,cAAc,KAAK,CAAC,EACnE,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AACnB;AASO,SAAS,WAAW,KAAa,MAAkC;AACxE,MAAI;AACF,UAAM,MAAM,UAAU,OAAO,MAAM,EAAE,KAAK,UAAU,OAAO,CAAC;AAC5D,WAAO;AAAA,MACL,QAAQ,IAAI;AAAA,MACZ,QAAQ,IAAI,UAAU;AAAA,MACtB,QAAQ,IAAI,UAAU;AAAA,MACtB,OAAO,IAAI,QAAQ,IAAI,MAAM,UAAU;AAAA,IACzC;AAAA,EACF,SAAS,OAAO;AACd,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,OAAQ,MAAgB;AAAA,IAC1B;AAAA,EACF;AACF;AAEO,SAAS,cACd,KACA,UACA,YACsD;AACtD,QAAM,MAAM,WAAW,KAAK,CAAC,cAAc,iBAAiB,UAAU,UAAU,CAAC;AACjF,MAAI,IAAI,WAAW,EAAG,QAAO,EAAE,YAAY,MAAM,OAAO,KAAK;AAC7D,MAAI,IAAI,WAAW,EAAG,QAAO,EAAE,YAAY,OAAO,OAAO,KAAK;AAC9D,SAAO,EAAE,YAAY,MAAM,OAAO,IAAI,SAAS,IAAI,UAAU,IAAI,UAAU,cAAc,IAAI,MAAM,GAAG;AACxG;AAsBO,SAAS,mBAAmB,cAAsB,gBAA6C,eAA4B;AAChI,QAAM,UACJ,OAAO,kBAAkB,WAAW,EAAE,MAAM,cAAc,IAAI;AAChE,QAAM,YAAY,QAAQ,YAAY,KAAK,KAAK,QAAQ,MAAM,KAAK,KAAK;AACxE,QAAM,mBAAmB,QAAQ,YAAY,KAAK,KAAK;AAEvD,MAAI,CAAC,cAAc;AACjB,WAAO,gBAAgB,WAAW,uBAAuB;AAAA,EAC3D;AAEA,QAAM,OAAO,WAAW,cAAc,CAAC,aAAa,MAAM,CAAC;AAC3D,MAAI,KAAK,WAAW,GAAG;AACrB,WAAO,gBAAgB,WAAW,KAAK,SAAS,KAAK,UAAU,KAAK,UAAU,wBAAwB;AAAA,EACxG;AAEA,MAAI;AACJ,MAAI,kBAAkB;AACpB,cAAU;AAAA,EACZ,OAAO;AACL,UAAM,WAAW,WAAW,cAAc,CAAC,aAAa,SAAS,CAAC;AAClE,QAAI,SAAS,WAAW,GAAG;AACzB,aAAO;AAAA,QACL;AAAA,QACA,SAAS,SAAS,SAAS,UAAU,SAAS,UAAU,qBAAqB,SAAS;AAAA,QACtF,KAAK,OAAO,KAAK;AAAA,MACnB;AAAA,IACF;AACA,cAAU,SAAS,OAAO,KAAK;AAAA,EACjC;AAEA,QAAM,UAAU,KAAK,OAAO,KAAK;AACjC,MAAI,YAAY,SAAS;AACvB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,MAAM;AAAA,MACN,UAAU;AAAA,MACV,sBAAsB;AAAA,MACtB,sBAAsB;AAAA,MACtB,UAAU;AAAA,IACZ;AAAA,EACF;AAEA,QAAM,uBAAuB,cAAc,cAAc,SAAS,OAAO;AACzE,QAAM,uBAAuB,cAAc,cAAc,SAAS,OAAO;AACzE,QAAM,QAAQ,qBAAqB,SAAS,qBAAqB,SAAS;AAC1E,MAAI,qBAAqB,cAAc,QAAQ,qBAAqB,cAAc,MAAM;AACtF,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,MAAM;AAAA,MACN,UAAU;AAAA,MACV,sBAAsB,qBAAqB;AAAA,MAC3C,sBAAsB,qBAAqB;AAAA,MAC3C,UAAU;AAAA,MACV,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,WAAgC,qBAAqB,aACvD,UACA,qBAAqB,aACnB,WACA;AAEN,SAAO;AAAA,IACL,SAAS;AAAA,IACT,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UAAU;AAAA,IACV,sBAAsB,qBAAqB;AAAA,IAC3C,sBAAsB,qBAAqB;AAAA,IAC3C;AAAA,IACA,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,EAC3B;AACF;AAEA,SAAS,gBAAgB,MAAc,OAAe,OAAsB,MAAmB;AAC7F,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV,sBAAsB;AAAA,IACtB,sBAAsB;AAAA,IACtB,UAAU;AAAA,IACV;AAAA,EACF;AACF;;;AExJA,SAASE,YAAW,OAA+B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,UAAU;AACpC;AAEA,SAASC,gBAAe,OAAyB;AAC/C,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,KAAK,EAAE,SAAS;AAC5D,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,SAAS;AAChD,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK,KAAe,EAAE,SAAS;AAC5E,SAAO;AACT;AAEA,SAAS,uBAAuB,UAA0C;AACxE,MAAID,YAAW,SAAS,UAAU,EAAG,QAAO;AAC5C,MAAIA,YAAW,SAAS,KAAK,EAAG,QAAO;AACvC,MAAIA,YAAW,SAAS,kBAAkB,EAAG,QAAO;AACpD,MAAIA,YAAW,SAAS,SAAS,EAAG,QAAO;AAC3C,QAAM,WAAW,SAAS;AAC1B,MAAI,UAAU,WAAW,SAAS,yBAAyB,SAASA,YAAW,SAAS,IAAI,GAAG;AAC7F,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAMO,SAAS,oBAAoB,UAAuD;AACzF,MAAI,CAACC,gBAAe,SAAS,WAAW,EAAG,QAAO,EAAE,SAAS,MAAM;AACnE,MAAI,SAAS,aAAa,WAAW,EAAG,QAAO,EAAE,SAAS,MAAM;AAChE,MAAI,CAAC,uBAAuB,QAAQ,GAAG;AACrC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,QAAQ,gBAAgB,SAAS,aAAa,MAAM;AAAA,IACtD;AAAA,EACF;AACA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ,gBAAgB,SAAS,aAAa,MAAM;AAAA,EACtD;AACF;AAEO,SAAS,uBAAuB,SAAmD;AACxF,MAAI,CAAC,QAAQ,QAAS,QAAO;AAC7B,SAAO,QAAQ,UAAU,QAAQ,UAAU;AAC7C;;;ACtEA,SAASC,oBAAmB,MAA8C;AACxE,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAQ,WAAW,GAAG,EAAG,QAAO;AACrC,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,OAAO;AAC1C,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,yBAAyB,QAAyC;AACzE,QAAM,MACJ,OAAO,0BACP,OAAO,4BACP,OAAO,aACP,OAAO;AACT,SAAO,MAAM,QAAQ,GAAG,IAAI,IAAI,SAAS;AAC3C;AAEO,SAAS,uCACd,OACgC;AAChC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,SAASA,oBAAmB,OAAO;AACzC,MAAI,OAAQ,QAAO;AAEnB,QAAM,aAAwC,CAAC;AAE/C,QAAM,UAAU;AAChB,MAAI;AACJ,UAAQ,aAAa,QAAQ,KAAK,OAAO,OAAO,MAAM;AACpD,UAAM,YAAYA,oBAAmB,WAAW,CAAC,KAAK,EAAE;AACxD,QAAI,UAAW,YAAW,KAAK,SAAS;AAAA,EAC1C;AAEA,QAAM,aAAa,QAAQ,QAAQ,GAAG;AACtC,QAAM,YAAY,QAAQ,YAAY,GAAG;AACzC,MAAI,cAAc,KAAK,YAAY,YAAY;AAC7C,UAAM,QAAQA,oBAAmB,QAAQ,MAAM,YAAY,YAAY,CAAC,CAAC;AACzE,QAAI,MAAO,YAAW,KAAK,KAAK;AAAA,EAClC;AAEA,MAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,MAAI,OAAO,WAAW,WAAW,SAAS,CAAC;AAC3C,MAAI,YAAY,yBAAyB,IAAI;AAC7C,aAAW,aAAa,YAAY;AAClC,UAAM,QAAQ,yBAAyB,SAAS;AAChD,QAAI,QAAQ,WAAW;AACrB,aAAO;AACP,kBAAY;AAAA,IACd;AAAA,EACF;AACA,SAAO;AACT;;;AC3BA,SAASC,YAAW,OAA+B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,IAAI,MAAM,KAAK;AACrB,SAAO,EAAE,SAAS,IAAI;AACxB;AAEA,SAASC,gBAAe,OAAyB;AAC/C,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,KAAK,EAAE,SAAS;AAC5D,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK,KAAe,EAAE,SAAS;AAC5E,SAAO;AACT;AAEA,SAAS,eAAe,KAA4B;AAClD,QAAM,IAAI,IACP,KAAK,EACL,MAAM,qDAAqD;AAC9D,MAAI,CAAC,EAAG,QAAOD,YAAW,GAAG;AAC7B,SAAO,sBAAsB,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;AAChD;AAEA,SAAS,YAAY,KAAqB;AACxC,QAAM,IAAI,IACP,KAAK,EACL,MAAM,qDAAqD;AAC9D,MAAI,CAAC,EAAG,QAAO,IAAI,KAAK,EAAE,YAAY;AACtC,SAAO,GAAG,EAAE,CAAC,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;AAC3C;AAEA,SAAS,oBAAoB,aAAgD;AAC3E,MAAI,SAAyC;AAC7C,MAAI,OAAO,gBAAgB,UAAU;AACnC,UAAM,WAAW,uCAAuC,WAAW;AACnE,QAAI,SAAU,UAAS;AAAA,EACzB,WAAW,eAAe,OAAO,gBAAgB,YAAY,CAAC,MAAM,QAAQ,WAAW,GAAG;AACxF,aAAS;AAAA,EACX;AACA,MAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,QAAM,MAAM,OAAO,0BAA0B,OAAO;AACpD,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACjC,QAAM,MAAgC,CAAC;AACvC,aAAW,QAAQ,KAAK;AACtB,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG;AAC9D,UAAM,MAAM;AACZ,UAAM,QAAQ,eAAe,OAAO,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;AAClE,UAAM,UAAUA,YAAW,IAAI,OAAO;AACtC,QAAI,CAAC,SAAU,YAAY,YAAY,YAAY,aAAa,YAAY,UAAY;AACxF,QAAI,KAAK;AAAA,MACP;AAAA,MACA;AAAA,MACA,aAAaA,YAAW,IAAI,eAAe,IAAI,YAAY;AAAA,MAC3D,QAAQA,YAAW,IAAI,MAAM;AAAA,IAC/B,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAGA,SAAS,qBAAqB,UAAiC,aAAgC;AAC7F,QAAM,OAAiB,CAAC;AACxB,QAAM,eAAe,eAAeA,YAAW,SAAS,KAAK,KAAK,EAAE;AACpE,MAAI,aAAc,MAAK,KAAK,YAAY;AACxC,MAAI,eAAe,OAAO,gBAAgB,YAAY,CAAC,MAAM,QAAQ,WAAW,GAAG;AACjF,UAAM,SAAS;AACf,UAAM,KAAK,eAAe,OAAO,OAAO,SAAS,OAAO,UAAU,EAAE,CAAC;AACrE,QAAI,GAAI,MAAK,KAAK,EAAE;AAAA,EACtB;AACA,SAAO,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC;AAC1B;AAEO,SAAS,4BAA4B,OAIX;AAC/B,QAAM,EAAE,UAAU,SAAS,IAAI;AAC/B,QAAM,cAAc,MAAM,eAAe,SAAS;AAElD,MACE,CAAC,SAAS,eACV,SAAS,aAAa,WAAW,KACjC,CAAC,SAAS,yBACV;AACA,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AACA,MAAI,CAACC,gBAAe,WAAW,GAAG;AAChC,UAAM,gBACJ,SAAS,mCACR,SAAS,eACR,QAAQ,SAAS,uBAAuB,KACxC,SAAS,aAAa,SAAS;AACnC,QAAI,iBAAiB,SAAS,aAAa,SAAS,GAAG;AACrD,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ,oDAAoD,SAAS,aAAa,KAAK,IAAI,CAAC;AAAA,MAC9F;AAAA,IACF;AACA,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AAEA,QAAM,iCACJ,SAAS,mCACR,SAAS,eACR,QAAQ,SAAS,uBAAuB,KACxC,SAAS,aAAa,SAAS;AAEnC,MAAI,CAAC,kCAAkC,CAAC,SAAS,yBAAyB;AACxE,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AAEA,QAAM,eAAe,SAAS,0BAC1B,eAAeD,YAAW,SAAS,WAAW,KAAK,EAAE,MACpD,SAAS,aAAa,WAAW,IAC9B,eAAe,SAAS,aAAa,CAAC,CAAE,IACxC,QACJ;AACJ,MAAI,cAAc;AAChB,UAAM,YAAY,qBAAqB,UAAU,WAAW;AAC5D,UAAM,aACJ,eACA,OAAO,gBAAgB,YACvB,CAAC,MAAM,QAAQ,WAAW,KACzB,YAAwC,+BAA+B;AAC1E,QAAI,CAAC,YAAY;AACf,iBAAW,MAAM,WAAW;AAC1B,YAAI,OAAO,cAAc;AACvB,iBAAO;AAAA,YACL,SAAS;AAAA,YACT,QAAQ;AAAA,YACR,QAAQ,uCAAuC,EAAE,gCAAgC,YAAY;AAAA,UAC/F;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAME,kBAAiB,oBAAoB,WAAW;AACtD,UAAM,QAAQA,gBAAe,KAAK,CAAC,MAAM,EAAE,UAAU,YAAY;AACjE,QACE,CAAC,SACA,MAAM,YAAY,YACjB,EAAE,MAAM,QAAQ,KAAK,MAAM,MAAM,YAAY,aAAa,MAAM,YAAY,aAC9E;AACA,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ,0CAA0C,YAAY;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,iBAAiB,oBAAoB,WAAW;AACtD,QAAM,QAAQ,IAAI;AAAA,IAChB,eAAe,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,GAAG,CAAC,CAAU;AAAA,EAC9D;AACA,QAAM,YAAY,IAAI;AAAA,IACpB,SAAS,aAAa,IAAI,CAAC,MAAM,YAAY,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,OAAO;AAAA,EACtF;AACA,QAAM,cAAc,qBAAqB,UAAU,WAAW;AAE9D,MAAI,SAAS,aAAa;AACxB,eAAW,MAAM,aAAa;AAC5B,UAAI,UAAU,OAAO,KAAK,CAAC,UAAU,IAAI,YAAY,EAAE,CAAC,GAAG;AACzD,eAAO;AAAA,UACL,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,QAAQ,6CAA6C,EAAE;AAAA,QACzD;AAAA,MACF;AACA,UAAI,UAAU,SAAS,GAAG;AACxB,eAAO;AAAA,UACL,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,SAAS,aAAa,WAAW,EAAG,QAAO,EAAE,SAAS,MAAM;AAEhE,QAAM,UAAoB,CAAC;AAC3B,aAAW,UAAU,SAAS,cAAc;AAC1C,UAAM,MAAM,YAAY,eAAe,MAAM,KAAK,MAAM;AACxD,UAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,QAAI,CAAC,OAAO;AACV,cAAQ,KAAK,GAAG;AAChB;AAAA,IACF;AACA,QAAI,MAAM,YAAY,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG;AACvD,cAAQ,KAAK,GAAG;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ,QAAQ,MAAM,CAAC,MAAM,MAAM,IAAI,CAAC,CAAC,IACrC,iCACA;AAAA,MACJ,QAAQ,wCAAwC,QAAQ,KAAK,IAAI,CAAC;AAAA,IACpE;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAEO,SAAS,+BACd,SACoB;AACpB,MAAI,CAAC,QAAQ,QAAS,QAAO;AAC7B,SAAO,QAAQ,UAAU,QAAQ;AACnC;;;AChOO,IAAM,cAAc;AACpB,IAAM,WAAW;AAuLjB,SAAS,iBAAiB,OAqBb;AAClB,QAAM,MAAM,KAAK,IAAI;AACrB,MAAI,MAAM,qBAAqB,CAAC,mCAAmC,MAAM,iBAAiB,GAAG;AAC3F,WAAO,EAAE,OAAO,WAAW,QAAQ,MAAM,kBAAkB;AAAA,EAC7D;AACA,MAAI,MAAM,aAAa;AACrB,QAAI,MAAM,aAAa,gCAAgC,MAAM,WAAW,GAAG;AACzE,aAAO,EAAE,OAAO,QAAQ,QAAQ,4CAA4C;AAAA,IAC9E;AACA,UAAM,kBAAkB;AAAA,MACtB,aAAa,MAAM;AAAA,MACnB,cAAc,MAAM,gBAAgB,CAAC;AAAA,MACrC,aAAa,MAAM,eAAe;AAAA,MAClC,OAAO,MAAM,SAAS;AAAA,IACxB;AACA,UAAM,UAAU,oBAAoB,eAAe;AACnD,QAAI,QAAQ,SAAS;AACnB,YAAM,SAAS,uBAAuB,OAAO;AAC7C,aAAO;AAAA,QACL,OAAO;AAAA,QACP,QAAQ,QAAQ,SACZ,oBAAoB,QAAQ,MAAM,MAAM,MAAM,KAC9C,oBAAoB,MAAM;AAAA,MAChC;AAAA,IACF;AACA,QAAI,MAAM,iBAAiB;AACzB,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,UAAU,MAAM;AAAA,QAChB,UAAU;AAAA,QACV,aAAa,MAAM;AAAA,MACrB,CAAC;AACD,YAAM,iBAAiB,+BAA+B,eAAe;AACrE,UAAI,gBAAgB;AAClB,eAAO;AAAA,UACL,OAAO;AAAA,UACP,QAAQ,gBAAgB,SACpB,qBAAqB,gBAAgB,MAAM,MAAM,cAAc,KAC/D,qBAAqB,cAAc;AAAA,QACzC;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,OAAO,QAAQ,QAAQ,wBAAwB;AAAA,EAC1D;AACA,MAAI,CAAC,MAAM,OAAO;AAChB,QAAI,uBAAuB,KAAK,GAAG;AACjC,aAAO,EAAE,OAAO,QAAQ,QAAQ,gCAAgC;AAAA,IAClE;AAIA,UAAM,aAAa,oBAAoB,MAAM,KAAK;AAClD,QAAI,WAAY,QAAO,EAAE,OAAO,WAAW,QAAQ,WAAW,OAAO;AACrE,UAAM,UAAU,0BAA0B;AAAA,MACxC,OAAO;AAAA,MACP,aAAa;AAAA,MACb,cAAc,MAAM;AAAA,MACpB,aAAa,MAAM;AAAA,IACrB,CAAC;AACD,QAAI,SAAS,aAAa;AACxB,YAAMC,QAAO,MAAM,OAAO,KAAK;AAC/B,aAAO;AAAA,QACL,OAAO;AAAA,QACP,QAAQA,QAAO,GAAG,QAAQ,eAAe,KAAKA,KAAI,MAAM,QAAQ;AAAA,MAClE;AAAA,IACF;AACA,UAAM,OAAO,MAAM,OAAO,KAAK;AAC/B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,OACJ,0CAA0C,IAAI,KAC9C,SAAS,mBAAmB;AAAA,IAClC;AAAA,EACF;AACA,MAAI,MAAM,kBAAkB;AAC1B,WAAO,EAAE,OAAO,WAAW,QAAQ,sCAAsC,MAAM,gBAAgB,GAAG;AAAA,EACpG;AACA,QAAM,UAAU,MAAM,YAAY,KAAK,MAAM,MAAM,SAAS,IAAI;AAChE,MACE,CAAC,MAAM,gBACP,MAAM,gBAAgB,KACtB,MAAM,mBAAmB,KACzB,OAAO,SAAS,OAAO,KACvB,MAAM,UAAU,aAChB;AACA,WAAO,EAAE,OAAO,mBAAmB,QAAQ,yBAAyB,QAAQ,OAAO,CAAC,gBAAgB;AAAA,EACtG;AACA,QAAM,QAAQ,MAAM,iBAAiB,KAAK,MAAM,MAAM,cAAc,IAAI;AACxE,MAAI,OAAO,SAAS,KAAK,KAAK,MAAM,QAAQ,UAAU;AACpD,WAAO,EAAE,OAAO,SAAS,QAAQ,uCAAuC,QAAQ,KAAK,CAAC,IAAI;AAAA,EAC5F;AACA,SAAO,EAAE,OAAO,MAAM,QAAQ,kBAAkB;AAClD;AAEA,SAAS,mCAAmC,QAA4C;AACtF,QAAM,OAAO,QAAQ,KAAK;AAC1B,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,kDAAkD,KAAK,IAAI,KAAK,yBAAyB,KAAK,IAAI;AAC3G;AAEA,SAAS,uBAAuB,OAUpB;AACV,MAAI,MAAM,YAAa,QAAO;AAC9B,MAAI,MAAM,UAAU,MAAM,UAAW,QAAO;AAC5C,MAAI,MAAM,cAAc,MAAM,MAAM,eAAe,KAAK,KAAK,MAAM,iBAAiB,EAAG,QAAO;AAC9F,MAAI,MAAM,OAAO,KAAK,EAAG,QAAO;AAChC,OAAK,MAAM,gBAAgB,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,EAAG,QAAO;AACnE,SAAO,qCAAqC,KAAK,MAAM,mBAAmB,EAAE;AAC9E;AAEA,SAAS,gCAAgC,OAAyB;AAChE,MAAI,SAAyC;AAC7C,MAAI,OAAO,UAAU,SAAU,UAAS,uCAAuC,KAAK;AAAA,WAC3E,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,EAAG,UAAS;AAC/E,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,MAAM,OAAO,0BAA0B,OAAO;AACpD,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO;AAChC,SAAO,IAAI,KAAK,CAAC,SAAyC;AACxD,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,WAAO,OAAQ,KAAiC,WAAW,EAAE,EAAE,KAAK,MAAM;AAAA,EAC5E,CAAC;AACH;AAEA,SAAS,mBACP,QACA,mBACA,WACS;AACT,QAAM,cAAc,OAAO,oBAAoB;AAC/C,MAAI,OAAO,wBAAwB,+BAA+B,gBAAgB,UAAa,gBAAgB,MAAM;AACnH,WAAO;AAAA,EACT;AACA,MAAI,kBAAmB,QAAO;AAC9B,MAAI,gBAAgB,UAAa,gBAAgB,KAAM,QAAO;AAC9D,SAAO,iCAAiC,SAAS;AACnD;AAEO,SAAS,oBAAoB,QAA6B,UAA+B,CAAC,GAA2B;AAC1H,QAAM,SAAS,mBAAmB,OAAO,UAAU;AACnD,QAAM,YAAY,eAAe,OAAO,aAAa;AACrD,QAAM,yBACJ,OAAO,OAAO,yBAAyB,YAAY,OAAO,qBAAqB,KAAK,EAAE,SAAS;AACjG,QAAM,cAAc,mBAAmB,QAAQ,OAAO,aAAa,SAAS;AAC5E,QAAM,QAAQ,yBAAyB,QAAQ,WAAW,OAAO,GAAG;AACpE,QAAM,cAAc,SAAS,OAAO,UAAU;AAC9C,QAAM,cAAc,SAAS,OAAO,UAAU;AAC9C,QAAM,iBAAiB,SAAS,OAAO,aAAa;AACpD,QAAM,eAAe,eAAe,OAAO,YAAY;AACvD,QAAM,cAAc,mBAAmB,OAAO,cAAc;AAAA,IAC1D,MAAM,QAAQ;AAAA,IACd,YAAY,QAAQ;AAAA,EACtB,CAAC;AACD,QAAM,iBAAiB,UAAU;AAAA,IAC/B,OAAO;AAAA,IACP,UAAU;AAAA,IACV,UAAU,OAAO,UAAU;AAAA,IAC3B,UAAU,OAAO,UAAU;AAAA,IAC3B,UAAU,OAAO,aAAa;AAAA,EAChC,CAAC;AAID,QAAM,QACJ,OAAO,UACN,CAAC,SAAS,CAAC,cAAc,SAAS,OAAO,YAAY,EAAE,EAAE,KAAK,KAAK,SAAY;AAClF,QAAM,oBACJ,OAAO,OAAO,sBAAsB,YAAY,OAAO,kBAAkB,KAAK,IAC1E,OAAO,kBAAkB,KAAK,IAC9B;AACN,QAAM,6BAA6B,mCAAmC,iBAAiB,IACnF,OACA;AACJ,QAAM,kBAAgD,OAAO,oBACzD;AAAA,IACE,aAAa;AAAA,IACb,cAAc,CAAC,OAAO,iBAAiB;AAAA,IACvC,aAAa,OAAO;AAAA,IACpB,yBAAyB;AAAA,EAC3B,IACA;AAEJ,QAAM,YAAY,iBAAiB;AAAA,IACjC;AAAA,IACA;AAAA,IACA,cAAc,OAAO;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB,UAAU;AAAA,IAC5B,WAAW,OAAO;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB;AAAA,IACA,OAAO,OAAO,qBAAqB,OAAO,aAAa;AAAA,IACvD,WAAW,OAAO,cAAc;AAAA,IAChC,QAAQ,OAAO,UAAU;AAAA,IACzB,WAAW,OAAO,aAAa;AAAA,IAC/B,iBAAiB,OAAO,mBAAmB;AAAA,EAC7C,CAAC;AACD,QAAM,oBACJ,8BAA8B,UAAU,UAAU,YAC9C,YACA,0BAA0B,UAAU,UAAU,SAC5C,SACA,cACE,WACA,QACE,YACA;AACZ,SAAO;AAAA,IACL,OAAO,OAAO;AAAA,IACd,QAAQ,OAAO;AAAA,IACf,KAAK,OAAO;AAAA,IACZ;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ,OAAO;AAAA,IACf,cAAc,OAAO;AAAA,IACrB,YAAY,OAAO;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc,OAAO;AAAA,IACrB,aAAa,OAAO;AAAA,IACpB;AAAA,IACA,aAAa,yBAAyB,OAAO,OAAO;AAAA,IACpD,gBAAgB,UAAU;AAAA,IAC1B,iBAAiB,UAAU;AAAA,IAC3B,oBAAoB,UAAU;AAAA,IAC9B,sBAAsB,UAAU;AAAA,IAChC,kBAAkB,UAAU;AAAA,IAC5B,oBAAoB,UAAU;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,8BAA8B,OAAO,gCAAgC;AAAA,IACrE,2BAA2B,OAAO,6BAA6B;AAAA,EACjE;AACF;AAEO,SAAS,uBAAuB,QAAyC;AAC9E,MAAI,OAAO,YAAa,QAAO;AAC/B,MAAI,OAAO,UAAU,MAAO,QAAO;AACnC,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,OAAQ,QAAO;AACnE,SAAO;AACT;AAGO,SAAS,6BAA6B,QAAyC;AACpF,MAAI,CAAC,OAAO,YAAa,QAAO;AAChC,SAAO,OAAO,UAAU,UAAU,qBAAqB,OAAO,UAAU,UAAU;AACpF;;;AC1eA,IAAM,uBAAuB;AAC7B,IAAM,gBAAgB;AAEtB,SAASC,YAAW,OAAiD;AACnE,MAAI,CAAC,OAAO,KAAK,EAAG,QAAO;AAC3B,SAAO,MAAM,KAAK;AACpB;AAGO,SAAS,uBAAuB,YAAsD;AAC3F,QAAM,QAAQA,YAAW,UAAU;AACnC,MAAI,CAAC,OAAO,WAAW,oBAAoB,EAAG,QAAO;AACrD,QAAM,OAAO,MAAM,MAAM,qBAAqB,MAAM;AACpD,QAAM,WAAW,KAAK,QAAQ,aAAa;AAC3C,MAAI,YAAY,EAAG,QAAO,KAAK,MAAM,GAAG,QAAQ,EAAE,KAAK,KAAK;AAC5D,SAAO,KAAK,KAAK,KAAK;AACxB;AAkBO,SAAS,4BACd,YACA,OACS;AACT,QAAM,cAAcC,YAAW,KAAK;AACpC,MAAI,CAAC,YAAa,QAAO;AACzB,SAAO,uBAAuB,UAAU,MAAM;AAChD;;;AC3BO,SAAS,qBAAqB,OAIN;AAC7B,QAAM,EAAE,QAAQ,QAAQ,UAAU,IAAI;AACtC,QAAM,aAAa,WAAW,cAAc;AAE5C,MAAI,OAAO,cAAc,WAAW;AAClC,QACE,UAAU,WAAW,aACrB,cACA,CAAC,4BAA4B,YAAY,OAAO,KAAK,GACrD;AACA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,sBAAsB,UAAU,0BAA0B,OAAO,KAAK;AAAA,MAChF;AAAA,IACF;AACA,QAAI,UAAU,WAAW,aAAa,CAAC,OAAO,SAAS,CAAC,OAAO,aAAa;AAC1E,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAEA,MAAI,OAAO,WAAW,aAAa,CAAC,OAAO,SAAS,CAAC,OAAO,aAAa;AACvE,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,MAAI,OAAO,UAAU,UAAU,SAAS;AACtC,WAAO,EAAE,QAAQ,SAAS,QAAQ,OAAO,UAAU,OAAO;AAAA,EAC5D;AAEA,QAAM,OAAO,OAAO,kBAAkB,KAAK,MAAM,OAAO,eAAe,IAAI;AAC3E,MAAI,OAAO,SAAS,OAAO,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,UAAU;AACzE,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,wBAAwB,KAAK,MAAM,WAAW,GAAI,CAAC;AAAA,IAC7D;AAAA,EACF;AAEA,MAAI,OAAO,SAAS,OAAO,OAAO,CAAC,WAAW,OAAO,GAAG,GAAG;AACzD,WAAO,EAAE,QAAQ,YAAY,QAAQ,wCAAwC;AAAA,EAC/E;AAEA,MAAI,WAAW,WAAW,aAAa,CAAC,OAAO,SAAS,OAAO,aAAa;AAC1E,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,QAAQ,OAAO,UAAU,UAAU;AAAA,EACrC;AACF;;;AC1EA,SAAS,WAAAC,gBAAe;AACxB,OAAOC,WAAU;;;ACDjB,SAAS,SAAS,gBAAgB;AAClC,OAAO,UAAU;;;ACaV,IAAM,mCAAmC,KAAK,OAAO,OAAO;AAI5D,IAAM,uCAAuC,KAAK,OAAO,OAAO;;;ACXvE,IAAM,0BAA0B,KAAK,OAAO,OAAO;AACnD,IAAM,8BAA8B,KAAK,OAAO,OAAO;;;ACShD,IAAM,+BAA+B,MAAM,OAAO;AAGlD,IAAM,4BAA4B,IAAI,OAAO,OAAO;;;AHkB3D,IAAM,aAAa,KAAK,KAAK,QAAQ,GAAG,SAAS;AACjD,IAAM,cAAc,KAAK,KAAK,YAAY,aAAa;AACvD,IAAM,mBAAmB,KAAK,KAAK,YAAY,aAAa;AAoF5D,IAAM,6BAA6B,MAAM,OAAO;AAChD,IAAM,0BAA0B,IAAI,OAAO,OAAO;;;ADvHlD,IAAM,cAAcC,MAAK,KAAKC,SAAQ,GAAG,aAAa,SAAS;;;AKIxD,SAAS,iBAAiB,QAAsC;AACrE,SAAO,QAAQ,OAAO,sBAAsB,KAAK,CAAC;AACpD;;;ACCO,SAAS,8BAA8B,OAGnB;AACzB,QAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,QAAM,WAAqB,CAAC;AAE5B,MAAI,OAAO,WAAW;AACpB,aAAS,KAAK,sCAAsC;AAAA,EACtD;AACA,MAAI,CAAC,OAAO,aAAa,CAAC,OAAO,QAAQ;AACvC,aAAS,KAAK,kCAAkC;AAAA,EAClD;AACA,MAAI,iBAAiB,MAAM,GAAG;AAC5B,aAAS,KAAK,iCAAiC;AAAA,EACjD;AACA,MAAI,OAAO,mBAAmB;AAC5B,aAAS,KAAK,OAAO,iBAAiB;AAAA,EACxC;AACA,MAAI,OAAO,oBAAoB,OAAO,OAAO;AAC3C,aAAS,KAAK,6BAA6B,OAAO,gBAAgB,EAAE;AAAA,EACtE;AACA,MAAI,OAAO,UAAU,UAAU,WAAW;AACxC,aAAS,KAAK,OAAO,UAAU,UAAU,0BAA0B;AAAA,EACrE;AACA,MAAI,6BAA6B,MAAM,GAAG;AACxC,aAAS,KAAK,OAAO,UAAU,UAAU,sBAAsB;AAAA,EACjE;AAEA,QAAM,mBAAmB,uBAAuB,MAAM;AACtD,MAAI;AACJ,MAAI,kBAAkB;AACpB,QAAI,OAAO,YAAa,kBAAiB;AAAA,aAChC,CAAC,OAAO,MAAO,kBAAiB;AAAA,QACpC,kBAAiB;AAAA,EACxB,OAAO;AACL,aAAS,KAAK,6CAA6C;AAAA,EAC7D;AAEA,QAAM,WAAW,oBAAoB,SAAS,WAAW;AACzD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { existsSync, readFileSync } from \"node:fs\";\r\nimport { terminalFinalResultFromHeartbeatRow } from \"./heartbeat-final-result.js\";\r\nimport { safeJson } from \"./util.js\";\r\nimport type { RuntimeBoxResourceSnapshot, RuntimeBoxResourceSnapshotPrEvidence } from \"./box-resource-snapshot.js\";\r\n\r\nexport interface ParsedHeartbeat {\r\n  heartbeatCount: number;\r\n  lastHeartbeatAt: string | null;\r\n  lastHeartbeatPhase: string | null;\r\n  lastHeartbeatSummary: string | null;\r\n  /** Structured finalResult from the terminal `phase: complete` heartbeat line. */\r\n  terminalFinalResult: unknown;\r\n  heartbeatBlocker: string | null;\r\n  timestampAnomalies: ParsedHeartbeatTimestampAnomaly[];\r\n  lastBoxResourceSnapshot: RuntimeBoxResourceSnapshot | null;\r\n  lastPrEvidence: RuntimeBoxResourceSnapshotPrEvidence[];\r\n}\r\n\r\nexport interface ParsedHeartbeatTimestampAnomaly {\r\n  kind: \"future_heartbeat_timestamp\";\r\n  observedAt: string;\r\n  clampedTo: string;\r\n}\r\n\r\nconst HEARTBEAT_FUTURE_SKEW_MS = 60_000;\r\n\r\n/** Worker contract: append `phase: \"complete\"` when productively finished. */\r\nexport function isTerminalHeartbeatPhase(phase: string | null | undefined): boolean {\r\n  return phase === \"complete\";\r\n}\r\n\r\n/**\r\n * When stdout has no stream-json `result` yet (common for Cursor workers mid-exit),\r\n * treat the worker's completion heartbeat as a synthetic final result so lifecycle\r\n * sync, completion replay, and resource gates advance.\r\n */\r\nexport function terminalFinalResultFromHeartbeat(heartbeat: ParsedHeartbeat): unknown {\r\n  if (!isTerminalHeartbeatPhase(heartbeat.lastHeartbeatPhase)) return null;\r\n  if (heartbeat.terminalFinalResult !== undefined && heartbeat.terminalFinalResult !== null) {\r\n    return heartbeat.terminalFinalResult;\r\n  }\r\n  const summary = heartbeat.lastHeartbeatSummary?.trim();\r\n  return summary || \"completed\";\r\n}\r\n\r\nexport function parseHeartbeat(file: string): ParsedHeartbeat {\r\n  const result: ParsedHeartbeat = {\r\n    heartbeatCount: 0,\r\n    lastHeartbeatAt: null,\r\n    lastHeartbeatPhase: null,\r\n    lastHeartbeatSummary: null,\r\n    terminalFinalResult: null,\r\n    heartbeatBlocker: null,\r\n    timestampAnomalies: [],\r\n    lastBoxResourceSnapshot: null,\r\n    lastPrEvidence: [],\r\n  };\r\n  if (!existsSync(file)) return result;\r\n  const maxFutureMs = Date.now() + HEARTBEAT_FUTURE_SKEW_MS;\r\n  const clampedTo = new Date(maxFutureMs).toISOString();\r\n  const lines = readFileSync(file, \"utf8\").split(\"\\n\").filter(Boolean);\r\n  for (const line of lines) {\r\n    const entry = safeJson(line);\r\n    if (!entry || typeof entry !== \"object\" || Array.isArray(entry)) continue;\r\n    const row = entry as Record<string, unknown>;\r\n    result.heartbeatCount++;\r\n    if (row.ts) {\r\n      const ts = String(row.ts);\r\n      const tsMs = Date.parse(ts);\r\n      if (Number.isFinite(tsMs) && tsMs > maxFutureMs) {\r\n        result.timestampAnomalies.push({\r\n          kind: \"future_heartbeat_timestamp\",\r\n          observedAt: ts,\r\n          clampedTo,\r\n        });\r\n      } else {\r\n        result.lastHeartbeatAt = ts;\r\n      }\r\n    }\r\n    if (row.phase !== undefined && row.phase !== null) result.lastHeartbeatPhase = String(row.phase);\r\n    if (row.summary !== undefined && row.summary !== null) result.lastHeartbeatSummary = String(row.summary);\r\n    if (isTerminalHeartbeatPhase(result.lastHeartbeatPhase)) {\r\n      result.terminalFinalResult = terminalFinalResultFromHeartbeatRow(row);\r\n    }\r\n    result.heartbeatBlocker = row.blocker ? String(row.blocker) : null;\r\n    if (row.boxResourceSnapshot && typeof row.boxResourceSnapshot === \"object\" && !Array.isArray(row.boxResourceSnapshot)) {\r\n      result.lastBoxResourceSnapshot = row.boxResourceSnapshot as RuntimeBoxResourceSnapshot;\r\n    }\r\n    if (Array.isArray(row.prEvidence)) {\r\n      result.lastPrEvidence = row.prEvidence.filter(\r\n        (entry): entry is RuntimeBoxResourceSnapshotPrEvidence =>\r\n          !!entry &&\r\n          typeof entry === \"object\" &&\r\n          typeof (entry as RuntimeBoxResourceSnapshotPrEvidence).prUrl === \"string\",\r\n      );\r\n    }\r\n  }\r\n  return result;\r\n}\r\n", "// Resolve structured harness finalResult from a terminal heartbeat line.\r\n\r\nfunction tryParseJsonObject(text: string): Record<string, unknown> | null {\r\n  const trimmed = text.trim();\r\n  if (!trimmed.startsWith(\"{\")) return null;\r\n  try {\r\n    const parsed: unknown = JSON.parse(trimmed);\r\n    if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) {\r\n      return parsed as Record<string, unknown>;\r\n    }\r\n  } catch {\r\n    return null;\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction embeddedRecordFromProse(text: string): Record<string, unknown> | null {\r\n  const trimmed = text.trim();\r\n  if (!trimmed) return null;\r\n  const direct = tryParseJsonObject(trimmed);\r\n  if (direct) return direct;\r\n\r\n  const candidates: Record<string, unknown>[] = [];\r\n  const fenceRe = /```(?:json)?\\s*([\\s\\S]*?)```/gi;\r\n  let fenceMatch: RegExpExecArray | null;\r\n  while ((fenceMatch = fenceRe.exec(trimmed)) !== null) {\r\n    const fromFence = tryParseJsonObject(fenceMatch[1] ?? \"\");\r\n    if (fromFence) candidates.push(fromFence);\r\n  }\r\n\r\n  const firstBrace = trimmed.indexOf(\"{\");\r\n  const lastBrace = trimmed.lastIndexOf(\"}\");\r\n  if (firstBrace >= 0 && lastBrace > firstBrace) {\r\n    const slice = tryParseJsonObject(trimmed.slice(firstBrace, lastBrace + 1));\r\n    if (slice) candidates.push(slice);\r\n  }\r\n\r\n  return candidates.length > 0 ? candidates[candidates.length - 1]! : null;\r\n}\r\n\r\n/**\r\n * Prefer an explicit heartbeat `finalResult`, else structured JSON embedded in\r\n * `summary`, else the summary string (legacy contract).\r\n */\r\nexport function terminalFinalResultFromHeartbeatRow(\r\n  row: Record<string, unknown>,\r\n): unknown {\r\n  const explicit = row.finalResult ?? row.final_result;\r\n  if (explicit !== undefined && explicit !== null) {\r\n    if (typeof explicit === \"string\") {\r\n      const embedded = embeddedRecordFromProse(explicit);\r\n      return embedded ?? (explicit.trim() || null);\r\n    }\r\n    return explicit;\r\n  }\r\n\r\n  const summary = typeof row.summary === \"string\" ? row.summary.trim() : \"\";\r\n  if (!summary) return null;\r\n\r\n  const embedded = embeddedRecordFromProse(summary);\r\n  if (embedded) return embedded;\r\n\r\n  return summary;\r\n}\r\n", "import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from \"node:fs\";\r\nimport path from \"node:path\";\r\n\r\nexport function fail(message: string): never {\r\n  console.error(message);\r\n  process.exit(1);\r\n}\r\n\r\n/** Avoid flashing a visible console on Windows when spawning worker/sidecar children. */\r\nexport function hiddenSpawnOptions<T extends Record<string, unknown>>(opts: T): T {\r\n  if (process.platform !== \"win32\") return opts;\r\n  return { windowsHide: true, ...opts };\r\n}\r\n\r\nexport function required(value: string | undefined, name: string): string {\r\n  if (!value) fail(`missing ${name}`);\r\n  return value;\r\n}\r\n\r\nexport function safeJson(line: string): unknown {\r\n  try {\r\n    return JSON.parse(line);\r\n  } catch {\r\n    return null;\r\n  }\r\n}\r\n\r\nexport function readJson<T>(file: string, fallback?: T): T {\r\n  try {\r\n    return JSON.parse(readFileSync(file, \"utf8\")) as T;\r\n  } catch (error) {\r\n    if (arguments.length > 1) return fallback as T;\r\n    fail(`failed to read ${file}: ${(error as Error).message}`);\r\n  }\r\n}\r\n\r\nexport function writeJson(file: string, value: unknown): void {\r\n  mkdirSync(path.dirname(file), { recursive: true });\r\n  writeFileSync(file, `${JSON.stringify(value, null, 2)}\\n`);\r\n}\r\n\r\nexport function safeSlug(value: string | undefined): string {\r\n  return (\r\n    String(value || \"\")\r\n      .toLowerCase()\r\n      .replace(/[^a-z0-9._-]+/g, \"-\")\r\n      .replace(/^-+|-+$/g, \"\") || \"worker\"\r\n  );\r\n}\r\n\r\nexport function timestampSlug(name: string): string {\r\n  return safeSlug(`${new Date().toISOString().replace(/[-:]/g, \"\").replace(/\\..+/, \"Z\")}-${name}`);\r\n}\r\n\r\nexport function splitCsv(value: string | undefined): string[] {\r\n  return value ? String(value).split(\",\").map((item) => item.trim()).filter(Boolean) : [];\r\n}\r\n\r\nexport function trimTrailingSlash(url: string): string {\r\n  return String(url).replace(/\\/+$/, \"\");\r\n}\r\n\r\nexport function oneLine(value: string): string {\r\n  return String(value || \"\")\r\n    .replace(/\\s+/g, \" \")\r\n    .trim();\r\n}\r\n\r\nexport function fileSize(file: string): number {\r\n  try {\r\n    return statSync(file).size;\r\n  } catch {\r\n    return 0;\r\n  }\r\n}\r\n\r\nexport function fileMtime(file: string): string | null {\r\n  try {\r\n    return statSync(file).mtime.toISOString();\r\n  } catch {\r\n    return null;\r\n  }\r\n}\r\n\r\nexport function tailFile(file: string, lines: number): string {\r\n  if (!existsSync(file)) return \"\";\r\n  const data = readFileSync(file, \"utf8\");\r\n  return data.split(\"\\n\").slice(-lines).join(\"\\n\");\r\n}\r\n\r\nexport function readMaybeFile(file: string | undefined): string {\r\n  return file ? readFileSync(path.resolve(file), \"utf8\") : \"\";\r\n}\r\n\r\nexport function listRunIds(runsDir: string): string[] {\r\n  if (!existsSync(runsDir)) return [];\r\n  return readdirSync(runsDir, { withFileTypes: true })\r\n    .filter((entry) => entry.isDirectory())\r\n    .map((entry) => entry.name);\r\n}\r\n\r\nexport function sleepMs(ms: number): void {\r\n  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);\r\n}\r\n\r\n/** Non-blocking sleep for async loops (daemon backoff, interruptible shutdown). */\r\nexport function sleepMsAsync(ms: number): Promise<void> {\r\n  return new Promise((resolve) => setTimeout(resolve, ms));\r\n}\r\n\r\nexport function isPidAlive(pid: number | undefined): boolean {\r\n  if (!pid) return false;\r\n  try {\r\n    process.kill(pid, 0);\r\n    return true;\r\n  } catch {\r\n    return false;\r\n  }\r\n}\r\n\r\nexport function killWorkerProcess(pid: number, signal: NodeJS.Signals): void {\r\n  try {\r\n    process.kill(-pid, signal);\r\n  } catch {\r\n    process.kill(pid, signal);\r\n  }\r\n}\r\n\r\nexport function latestIso(values: Array<string | null | undefined>): string | null {\r\n  let best: string | null = null;\r\n  let bestMs = -Infinity;\r\n  for (const value of values) {\r\n    if (!value) continue;\r\n    const ms = Date.parse(value);\r\n    if (Number.isFinite(ms) && ms > bestMs) {\r\n      bestMs = ms;\r\n      best = value;\r\n    }\r\n  }\r\n  return best;\r\n}\r\n\r\nexport function secsAgo(ms: number): number {\r\n  return Math.max(0, Math.round((Date.now() - ms) / 1000));\r\n}\r\n", "import { existsSync, readFileSync } from \"node:fs\";\r\nimport {\r\n  classifyShellCommandOutcome,\r\n  type ShellCommandOutcome,\r\n} from \"./shell-command-outcome.js\";\r\nimport { oneLine, safeJson } from \"./util.js\";\r\n\r\nexport interface ParsedStream {\r\n  firstEventAt: string | null;\r\n  lastEventAt: string | null;\r\n  currentTool: string | null;\r\n  finalResult: unknown;\r\n  error: string | null;\r\n  /** Most recent non-success shell outcome for operator error streams. */\r\n  lastShellOutcome: ShellCommandOutcome | null;\r\n}\r\n\r\nfunction eventTimestampIso(event: Record<string, unknown>): string | undefined {\r\n  const tsMs = event.timestamp_ms as number | undefined;\r\n  return (event.timestamp || event.ts || (tsMs ? new Date(tsMs).toISOString() : undefined)) as\r\n    | string\r\n    | undefined;\r\n}\r\n\r\n/** Cursor `stream-json` encodes tools as `{ grepToolCall: \u2026 }` keys on `tool_call`. */\r\nfunction cursorToolNameFromCall(toolCall: Record<string, unknown> | undefined): string | null {\r\n  if (!toolCall) return null;\r\n  for (const key of Object.keys(toolCall)) {\r\n    if (key.endsWith(\"ToolCall\")) {\r\n      const stem = key.slice(0, -\"ToolCall\".length);\r\n      return stem.length ? stem : key;\r\n    }\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction recordStreamResult(result: ParsedStream, event: Record<string, unknown>): void {\r\n  result.finalResult = event.result || event.subtype || event.terminal_reason || \"completed\";\r\n  if (event.is_error) {\r\n    result.error = String(event.result || event.api_error_status || \"stream result error\");\r\n  }\r\n}\r\n\r\nfunction shellPayloadFromCursorEvent(\r\n  event: Record<string, unknown>,\r\n): { command: string; exitCode: number; stdout: string; stderr: string; interleaved: string } | null {\r\n  if (event.type !== \"tool_call\" || event.subtype !== \"completed\") return null;\r\n  const toolCall =\r\n    event.tool_call && typeof event.tool_call === \"object\" && !Array.isArray(event.tool_call)\r\n      ? (event.tool_call as Record<string, unknown>)\r\n      : null;\r\n  const shell = toolCall?.shellToolCall;\r\n  if (!shell || typeof shell !== \"object\" || Array.isArray(shell)) return null;\r\n  const shellObj = shell as Record<string, unknown>;\r\n  const args = shellObj.args;\r\n  const command =\r\n    args && typeof args === \"object\" && !Array.isArray(args) && typeof (args as Record<string, unknown>).command === \"string\"\r\n      ? String((args as Record<string, unknown>).command)\r\n      : \"\";\r\n  const result = shellObj.result;\r\n  if (!result || typeof result !== \"object\" || Array.isArray(result)) return null;\r\n  const body = (result as Record<string, unknown>).success ?? (result as Record<string, unknown>).failure;\r\n  if (!body || typeof body !== \"object\" || Array.isArray(body)) return null;\r\n  const row = body as Record<string, unknown>;\r\n  const exitCode = typeof row.exitCode === \"number\" ? row.exitCode : 0;\r\n  return {\r\n    command,\r\n    exitCode,\r\n    stdout: typeof row.stdout === \"string\" ? row.stdout : \"\",\r\n    stderr: typeof row.stderr === \"string\" ? row.stderr : \"\",\r\n    interleaved: typeof row.interleavedOutput === \"string\" ? row.interleavedOutput : \"\",\r\n  };\r\n}\r\n\r\nfunction applyShellOutcome(parsed: ParsedStream, outcome: ShellCommandOutcome): void {\r\n  if (outcome.kind === \"success\" || outcome.kind === \"search_no_matches\") return;\r\n  parsed.lastShellOutcome = outcome;\r\n}\r\n\r\n/**\r\n * Parse harness worker stdout (`stream-json` from Claude Code or Cursor Agent).\r\n * Cursor emits `tool_call` events and may only write `type: \"result\"` after exit;\r\n * completion heartbeats are merged in `computeWorkerStatus`.\r\n */\r\nexport function parseHarnessStream(file: string): ParsedStream {\r\n  const result: ParsedStream = {\r\n    firstEventAt: null,\r\n    lastEventAt: null,\r\n    currentTool: null,\r\n    finalResult: null,\r\n    error: null,\r\n    lastShellOutcome: null,\r\n  };\r\n  if (!existsSync(file)) return result;\r\n  const lines = readFileSync(file, \"utf8\").split(\"\\n\").filter(Boolean);\r\n  for (const line of lines) {\r\n    const event = safeJson(line) as Record<string, unknown> | null;\r\n    if (!event) continue;\r\n    const ts = eventTimestampIso(event);\r\n    if (ts) {\r\n      result.firstEventAt ||= ts;\r\n      result.lastEventAt = ts;\r\n    }\r\n    if (\r\n      event.type === \"stream_event\" &&\r\n      event.event &&\r\n      typeof event.event === \"object\" &&\r\n      (event.event as Record<string, unknown>).type === \"content_block_start\"\r\n    ) {\r\n      const block = (event.event as Record<string, unknown>).content_block as Record<string, unknown> | undefined;\r\n      if (block?.type === \"tool_use\") result.currentTool = String(block.name || \"tool\");\r\n    }\r\n    if (event.type === \"assistant\" && event.message && typeof event.message === \"object\") {\r\n      const content = (event.message as Record<string, unknown>).content;\r\n      if (Array.isArray(content)) {\r\n        const tool = content.find((item) => item?.type === \"tool_use\") as Record<string, unknown> | undefined;\r\n        if (tool) result.currentTool = String(tool.name || result.currentTool);\r\n      }\r\n    }\r\n    if (event.type === \"tool_call\" && event.subtype === \"started\") {\r\n      const toolCall =\r\n        event.tool_call && typeof event.tool_call === \"object\" && !Array.isArray(event.tool_call)\r\n          ? (event.tool_call as Record<string, unknown>)\r\n          : undefined;\r\n      const name = cursorToolNameFromCall(toolCall);\r\n      if (name) result.currentTool = name;\r\n    }\r\n    const shell = shellPayloadFromCursorEvent(event);\r\n    if (shell) {\r\n      applyShellOutcome(\r\n        result,\r\n        classifyShellCommandOutcome({\r\n          command: shell.command,\r\n          exitCode: shell.exitCode,\r\n          stdout: shell.stdout,\r\n          stderr: shell.stderr,\r\n          interleavedOutput: shell.interleaved,\r\n        }),\r\n      );\r\n    }\r\n    if (event.type === \"result\") {\r\n      recordStreamResult(result, event);\r\n    }\r\n  }\r\n  return result;\r\n}\r\n\r\n/** @deprecated Use {@link parseHarnessStream} \u2014 kept for existing imports. */\r\nexport function parseClaudeStream(file: string): ParsedStream {\r\n  return parseHarnessStream(file);\r\n}\r\n\r\nexport function summarizeShellToolCallEvent(event: Record<string, unknown>): string | undefined {\r\n  const shell = shellPayloadFromCursorEvent(event);\r\n  if (!shell) return undefined;\r\n  const outcome = classifyShellCommandOutcome({\r\n    command: shell.command,\r\n    exitCode: shell.exitCode,\r\n    stdout: shell.stdout,\r\n    stderr: shell.stderr,\r\n    interleavedOutput: shell.interleaved,\r\n  });\r\n  const cmd = oneLine(shell.command).slice(0, 120);\r\n  if (outcome.kind === \"audit_findings\") {\r\n    return `[audit:findings] ${outcome.summary}${cmd ? ` \u00B7 ${cmd}` : \"\"}`;\r\n  }\r\n  if (outcome.kind === \"search_no_matches\") {\r\n    return `[search:no_matches] ${outcome.summary}${cmd ? ` \u00B7 ${cmd}` : \"\"}`;\r\n  }\r\n  if (outcome.kind === \"command_failure\") {\r\n    return `[command:failed] ${outcome.summary}${cmd ? ` \u00B7 ${cmd}` : \"\"}`;\r\n  }\r\n  return `[command:ok] exit 0${cmd ? ` \u00B7 ${cmd}` : \"\"}`;\r\n}\r\n\r\nexport function summarizeEvent(event: Record<string, unknown>): string | undefined {\r\n  if (event.type === \"system\" && event.subtype) {\r\n    return `[system:${event.subtype}] ${String(event.status || event.cwd || \"\")}`.trim();\r\n  }\r\n  if (event.type === \"stream_event\" && event.event && typeof event.event === \"object\") {\r\n    const type = (event.event as Record<string, unknown>).type;\r\n    if (type === \"content_block_start\") {\r\n      const block = (event.event as Record<string, unknown>).content_block as Record<string, unknown> | undefined;\r\n      if (block?.type === \"tool_use\") return `[tool:start] ${block.name}`;\r\n    }\r\n    if (type === \"content_block_delta\") {\r\n      const delta = (event.event as Record<string, unknown>).delta as Record<string, unknown> | undefined;\r\n      if (delta?.partial_json) return `[tool:input] ${delta.partial_json}`;\r\n    }\r\n    if (type === \"message_stop\") return \"[message:stop]\";\r\n    return type ? `[stream:${type}]` : undefined;\r\n  }\r\n  if (event.type === \"assistant\" && event.message && typeof event.message === \"object\") {\r\n    const content = (event.message as Record<string, unknown>).content;\r\n    if (Array.isArray(content)) {\r\n      const text = content.find((item) => item?.type === \"text\") as Record<string, unknown> | undefined;\r\n      if (text) return `[assistant] ${oneLine(String(text.text || \"\"))}`;\r\n      const tool = content.find((item) => item?.type === \"tool_use\") as Record<string, unknown> | undefined;\r\n      if (tool) return `[tool] ${tool.name} ${JSON.stringify(tool.input || {})}`;\r\n    }\r\n  }\r\n  if (event.type === \"user\" && event.tool_use_result) {\r\n    const result = event.tool_use_result as Record<string, unknown>;\r\n    return `[tool:result] stdout=${JSON.stringify(result.stdout || \"\")} stderr=${JSON.stringify(result.stderr || \"\")}`;\r\n  }\r\n  if (event.type === \"tool_call\") {\r\n    const subtype = String(event.subtype || \"\");\r\n    const shellSummary =\r\n      subtype === \"completed\" ? summarizeShellToolCallEvent(event) : undefined;\r\n    if (shellSummary) return shellSummary;\r\n    const toolCall =\r\n      event.tool_call && typeof event.tool_call === \"object\" && !Array.isArray(event.tool_call)\r\n        ? (event.tool_call as Record<string, unknown>)\r\n        : undefined;\r\n    const name = cursorToolNameFromCall(toolCall) ?? \"tool\";\r\n    return `[tool:${subtype}] ${name}`;\r\n  }\r\n  if (event.type === \"result\") {\r\n    return `[result] ${event.subtype || \"\"} ${oneLine(String(event.result || \"\"))}`.trim();\r\n  }\r\n  return undefined;\r\n}\r\n", "/**\r\n * Normalize and classify repo text-search commands for harness operators and chat agents.\r\n *\r\n * Codex/OpenClaw often emit `search \"pattern\" in <scope>` meta that maps poorly to ripgrep\r\n * (e.g. `in !node_modules` instead of `-g '!node_modules/**'`, or `in package.json` as a path).\r\n */\r\n\r\nconst RG_BINARIES = new Set([\"rg\", \"ripgrep\", \"grep\"]);\r\nconst RG_OPTS_WITH_VALUE = new Set([\r\n  \"-e\",\r\n  \"--regexp\",\r\n  \"-f\",\r\n  \"--file\",\r\n  \"-m\",\r\n  \"--max-count\",\r\n  \"-A\",\r\n  \"--after-context\",\r\n  \"-B\",\r\n  \"--before-context\",\r\n  \"-C\",\r\n  \"--context\",\r\n  \"-g\",\r\n  \"--glob\",\r\n  \"--iglob\",\r\n]);\r\n\r\nexport type RepoSearchKind =\r\n  | \"not_repo_search\"\r\n  | \"bad_scope\"\r\n  | \"rg_exclude_syntax\"\r\n  | \"no_matches\";\r\n\r\nexport interface RepoSearchContext {\r\n  kind: RepoSearchKind;\r\n  pattern?: string;\r\n  target?: string;\r\n}\r\n\r\nfunction binaryName(token: string | undefined): string | null {\r\n  if (!token) return null;\r\n  const base = token.split(\"/\").pop() ?? token;\r\n  return base.replace(/\\.exe$/i, \"\").toLowerCase();\r\n}\r\n\r\nfunction splitShellWords(input: string): string[] {\r\n  if (!input) return [];\r\n  const words: string[] = [];\r\n  let current = \"\";\r\n  let quote: string | undefined;\r\n  let escaped = false;\r\n  for (const char of input) {\r\n    if (escaped) {\r\n      current += char;\r\n      escaped = false;\r\n      continue;\r\n    }\r\n    if (char === \"\\\\\") {\r\n      escaped = true;\r\n      continue;\r\n    }\r\n    if (quote) {\r\n      if (char === quote) quote = undefined;\r\n      else current += char;\r\n      continue;\r\n    }\r\n    if (char === '\"' || char === \"'\") {\r\n      quote = char;\r\n      continue;\r\n    }\r\n    if (/\\s/.test(char)) {\r\n      if (current) {\r\n        words.push(current);\r\n        current = \"\";\r\n      }\r\n      continue;\r\n    }\r\n    current += char;\r\n  }\r\n  if (current) words.push(current);\r\n  return words;\r\n}\r\n\r\nfunction isRgArgv(argv: string[]): boolean {\r\n  const bin = binaryName(argv[0]);\r\n  return Boolean(bin && RG_BINARIES.has(bin));\r\n}\r\n\r\nexport function isSingleFileSearchTarget(target: string | undefined): boolean {\r\n  if (!target || target.includes(\"/\") || target.includes(\"*\")) return false;\r\n  return /\\.(?:json|md|mjs|cjs|js|ts|tsx|yaml|yml)$/iu.test(target);\r\n}\r\n\r\n/** `!node_modules` as a path is invalid \u2014 ripgrep needs `-g '!node_modules/**'`. */\r\nexport function isRgExcludeScopeTarget(target: string | undefined): boolean {\r\n  if (!target) return false;\r\n  const t = target.trim();\r\n  return t.startsWith(\"!\") && !t.includes(\"/\") && !t.endsWith(\"/**\");\r\n}\r\n\r\nfunction fixRgGlobToken(token: string): string {\r\n  if (!token.startsWith(\"--glob=\")) return token;\r\n  const value = token.slice(\"--glob=\".length);\r\n  if (value.startsWith(\"!\") && !value.includes(\"/\") && !value.endsWith(\"/**\")) {\r\n    return `--glob=${value}/**`;\r\n  }\r\n  return token;\r\n}\r\n\r\nfunction collectRgPositional(argv: string[]): string[] {\r\n  const positional: string[] = [];\r\n  for (let i = 1; i < argv.length; i += 1) {\r\n    const token = argv[i];\r\n    if (!token) continue;\r\n    if (token === \"--\") {\r\n      positional.push(...argv.slice(i + 1));\r\n      break;\r\n    }\r\n    if (token.startsWith(\"-\")) {\r\n      if (token.includes(\"=\")) continue;\r\n      if (RG_OPTS_WITH_VALUE.has(token)) i += 1;\r\n      continue;\r\n    }\r\n    positional.push(token);\r\n  }\r\n  return positional;\r\n}\r\n\r\nexport function normalizeRgArgv(argv: string[]): { argv: string[]; changed: boolean } {\r\n  let changed = false;\r\n  const out = argv.map((token) => {\r\n    const fixed = fixRgGlobToken(token);\r\n    if (fixed !== token) changed = true;\r\n    return fixed;\r\n  });\r\n  const positional = collectRgPositional(out);\r\n  if (positional.length === 2) {\r\n    const [pattern, target] = positional;\r\n    if (isSingleFileSearchTarget(target)) {\r\n      return { argv: [out[0] ?? \"rg\", \"-g\", target, pattern, \".\"], changed: true };\r\n    }\r\n  }\r\n  return { argv: out, changed };\r\n}\r\n\r\nexport function normalizeRepoSearchCommand(command: string): { command: string; changed: boolean } {\r\n  const trimmed = command.trim();\r\n  if (!trimmed) return { command: trimmed, changed: false };\r\n  const joiner = trimmed.includes(\"&&\") ? \" && \" : trimmed.includes(\"||\") ? \" || \" : \"; \";\r\n  const stages = trimmed.split(/\\s*(?:&&|\\|\\||;)\\s*/u);\r\n  let changed = false;\r\n  const normalizedStages = stages.map((stage) => {\r\n    const argv = splitShellWords(stage.trim());\r\n    if (!argv.length || !isRgArgv(argv)) return stage;\r\n    const normalized = normalizeRgArgv(argv);\r\n    if (normalized.changed) {\r\n      changed = true;\r\n      return normalized.argv.join(\" \");\r\n    }\r\n    return stage;\r\n  });\r\n  if (!changed) return { command: trimmed, changed: false };\r\n  return { command: normalizedStages.join(joiner), changed: true };\r\n}\r\n\r\nexport function extractSearchMeta(meta: string): { pattern?: string; target?: string } {\r\n  if (!meta) return {};\r\n  const pipelineMatch = meta.match(/search\\s+\"(.+)\"\\s+in\\s+([^()]+?)(?:\\s*\\(|$)/iu);\r\n  if (pipelineMatch) {\r\n    return { pattern: pipelineMatch[1], target: pipelineMatch[2]?.trim() };\r\n  }\r\n  const match = meta.match(/^search\\s+\"(.+)\"\\s+in\\s+(.+)$/iu);\r\n  if (!match) return {};\r\n  return { pattern: match[1], target: match[2]?.trim() };\r\n}\r\n\r\nexport function classifyRepoSearchMeta(meta: string): RepoSearchContext {\r\n  const { pattern, target } = extractSearchMeta(meta);\r\n  if (!pattern) return { kind: \"not_repo_search\" };\r\n  if (isRgExcludeScopeTarget(target)) {\r\n    return { kind: \"rg_exclude_syntax\", pattern, target };\r\n  }\r\n  if (isSingleFileSearchTarget(target)) {\r\n    return { kind: \"bad_scope\", pattern, target };\r\n  }\r\n  return { kind: \"not_repo_search\", pattern, target };\r\n}\r\n\r\nexport function metaToNormalizedRgCommand(meta: string): { command: string; changed: boolean } | null {\r\n  const { pattern, target } = extractSearchMeta(meta);\r\n  if (!pattern) return null;\r\n  if (isRgExcludeScopeTarget(target)) {\r\n    const glob = `${target!.trim()}/**`;\r\n    return {\r\n      command: `rg \"${pattern}\" -g '${glob}' .`,\r\n      changed: true,\r\n    };\r\n  }\r\n  if (target && isSingleFileSearchTarget(target)) {\r\n    return {\r\n      command: `rg -g ${target} \"${pattern}\" .`,\r\n      changed: true,\r\n    };\r\n  }\r\n  return null;\r\n}\r\n\r\nexport function formatRepoSearchGuidance(ctx: RepoSearchContext): string | null {\r\n  if (\r\n    ctx.kind === \"bad_scope\" &&\r\n    ctx.pattern?.includes(\"agent-os-land-pr\") &&\r\n    ctx.target === \"package.json\"\r\n  ) {\r\n    return (\r\n      \"Search package.json with a glob from the repo root: \" +\r\n      \"`rg -g package.json agent-os-land-pr .` \u2014 or run `node scripts/agent-os-land-pr.mjs <pr-url>` directly.\"\r\n    );\r\n  }\r\n  if (ctx.kind === \"bad_scope\" && ctx.pattern && ctx.target) {\r\n    return `Use \\`rg -g '${ctx.target}' ${ctx.pattern} .\\` from the repo root instead of treating ${ctx.target} as a folder.`;\r\n  }\r\n  if (ctx.kind === \"rg_exclude_syntax\" && ctx.pattern) {\r\n    const glob = ctx.target ? `${ctx.target.trim()}/**` : \"!node_modules/**\";\r\n    return (\r\n      `Repo search scope \\`${ctx.target ?? \"!node_modules\"}\\` is not a valid ripgrep path. ` +\r\n      `Use \\`rg \"${ctx.pattern}\" -g '${glob}' .\\` from the repo root (exclude globs need a \\`/**\\` suffix).`\r\n    );\r\n  }\r\n  if (ctx.kind === \"no_matches\" && ctx.pattern) {\r\n    return `No matches for \"${ctx.pattern}\". Try a broader pattern, drop overly short tokens, or search from the repo root with \\`rg \"${ctx.pattern}\" .\\`.`;\r\n  }\r\n  return null;\r\n}\r\n\r\n/** Extract `search \"\u2026\" in \u2026` from a tool-failure line or command string. */\r\nexport function extractSearchMetaFromToolLine(line: string): string | null {\r\n  const match = line.match(/search\\s+\"(.+)\"\\s+in\\s+([^()]+?)(?:\\s*\\(agent\\)|\\s*failed|$)/iu);\r\n  if (!match) return null;\r\n  return `search \"${match[1]}\" in ${match[2]?.trim()}`;\r\n}\r\n\r\nexport function diagnoseRepoSearchFailure(input: {\r\n  meta?: string;\r\n  command?: string;\r\n  exitCode?: number;\r\n}): string | null {\r\n  const meta =\r\n    input.meta?.trim() ||\r\n    (input.command ? extractSearchMetaFromToolLine(input.command) : null) ||\r\n    null;\r\n  if (meta) {\r\n    const ctx = classifyRepoSearchMeta(meta);\r\n    const guidance = formatRepoSearchGuidance(ctx);\r\n    if (guidance) return guidance;\r\n    const normalized = metaToNormalizedRgCommand(meta);\r\n    if (normalized?.changed) {\r\n      return `Repo search used an invalid scope. Retry with: \\`${normalized.command}\\`.`;\r\n    }\r\n  }\r\n  if (input.command && /\\b(rg|ripgrep)\\b/i.test(input.command)) {\r\n    const normalized = normalizeRepoSearchCommand(input.command);\r\n    if (normalized.changed) {\r\n      return `Ripgrep scope may be invalid. Retry with: \\`${normalized.command}\\`.`;\r\n    }\r\n    if (input.exitCode === 1) {\r\n      return \"Ripgrep returned no matches (exit 1). Try a broader pattern or search from the repo root.\";\r\n    }\r\n  }\r\n  return null;\r\n}\r\n", "// Classify harness shell tool results for operator-facing streams (tail, status, Telegram).\r\n//\r\n// npm audit exits 1 when advisories exist \u2014 that is a successful run with findings,\r\n// not a command execution failure. ripgrep exits 1 when there are no matches \u2014 also\r\n// not a command execution failure. Reserve \"command failed\" for ENOLOCK, network\r\n// errors, invalid JSON, and other tool failures.\r\n\r\nimport { diagnoseRepoSearchFailure, normalizeRepoSearchCommand } from \"./repo-search.js\";\r\n\r\nexport type ShellCommandOutcomeKind =\r\n  | \"success\"\r\n  | \"audit_findings\"\r\n  | \"search_no_matches\"\r\n  | \"command_failure\";\r\n\r\nexport interface NpmAuditSummary {\r\n  total: number;\r\n  critical: number;\r\n  high: number;\r\n  moderate: number;\r\n  low: number;\r\n  info: number;\r\n}\r\n\r\nexport interface ShellCommandOutcome {\r\n  kind: ShellCommandOutcomeKind;\r\n  exitCode: number;\r\n  /** Short operator-facing line (no raw JSON blob). */\r\n  summary: string;\r\n  /** Present when kind === audit_findings and JSON parsed. */\r\n  audit?: NpmAuditSummary;\r\n  /** When JSON was expected but invalid. */\r\n  parseError?: string;\r\n}\r\n\r\nconst NPM_AUDIT_RE = /\\bnpm\\s+audit\\b/i;\r\nconst RG_CMD_RE = /\\b(rg|ripgrep)\\b/i;\r\nconst RG_REAL_ERROR_RE = /\\b(error|invalid|unknown|panic|not found)\\b/i;\r\n\r\nfunction tidy(text: string, max = 200): string {\r\n  const one = text.replace(/\\s+/g, \" \").trim();\r\n  return one.length > max ? `${one.slice(0, max - 1)}\u2026` : one;\r\n}\r\n\r\nfunction extractJsonObject(text: string): unknown | null {\r\n  const trimmed = text.trim();\r\n  if (!trimmed) return null;\r\n  if (trimmed.startsWith(\"{\")) {\r\n    try {\r\n      return JSON.parse(trimmed);\r\n    } catch {\r\n      /* fall through \u2014 scan for embedded object */\r\n    }\r\n  }\r\n  const start = trimmed.indexOf(\"{\");\r\n  const end = trimmed.lastIndexOf(\"}\");\r\n  if (start >= 0 && end > start) {\r\n    try {\r\n      return JSON.parse(trimmed.slice(start, end + 1));\r\n    } catch {\r\n      return null;\r\n    }\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction isRecord(value: unknown): value is Record<string, unknown> {\r\n  return Boolean(value) && typeof value === \"object\" && !Array.isArray(value);\r\n}\r\n\r\nexport function summarizeNpmAuditReport(report: Record<string, unknown>): NpmAuditSummary | null {\r\n  const meta = report.metadata;\r\n  if (!isRecord(meta)) return null;\r\n  const vuln = meta.vulnerabilities;\r\n  if (!isRecord(vuln)) return null;\r\n  const num = (key: string) => (typeof vuln[key] === \"number\" ? vuln[key] : 0);\r\n  const summary: NpmAuditSummary = {\r\n    info: num(\"info\"),\r\n    low: num(\"low\"),\r\n    moderate: num(\"moderate\"),\r\n    high: num(\"high\"),\r\n    critical: num(\"critical\"),\r\n    total: num(\"total\"),\r\n  };\r\n  if (\r\n    typeof vuln.total !== \"number\" &&\r\n    !summary.critical &&\r\n    !summary.high &&\r\n    !summary.moderate &&\r\n    !summary.low &&\r\n    !summary.info\r\n  ) {\r\n    return null;\r\n  }\r\n  return summary;\r\n}\r\n\r\nfunction formatAuditSummaryLine(audit: NpmAuditSummary): string {\r\n  const parts: string[] = [];\r\n  if (audit.critical) parts.push(`${audit.critical} critical`);\r\n  if (audit.high) parts.push(`${audit.high} high`);\r\n  if (audit.moderate) parts.push(`${audit.moderate} moderate`);\r\n  if (audit.low) parts.push(`${audit.low} low`);\r\n  if (audit.info) parts.push(`${audit.info} info`);\r\n  const breakdown = parts.length ? parts.join(\", \") : \"see report\";\r\n  return `npm audit: ${audit.total} vulnerabilit${audit.total === 1 ? \"y\" : \"ies\"} (${breakdown}) \u2014 remediation required`;\r\n}\r\n\r\nfunction npmAuditFailureReason(report: Record<string, unknown>, stderr: string): string {\r\n  const err = report.error;\r\n  if (isRecord(err)) {\r\n    const summary = typeof err.summary === \"string\" ? err.summary.trim() : \"\";\r\n    const code = typeof err.code === \"string\" ? err.code.trim() : \"\";\r\n    if (summary) return code ? `${code}: ${summary}` : summary;\r\n    if (code) return code;\r\n  }\r\n  const detail = typeof report.message === \"string\" ? report.message.trim() : \"\";\r\n  if (detail) return detail;\r\n  const errTail = stderr.trim();\r\n  if (errTail) return tidy(errTail.split(\"\\n\").find(Boolean) ?? errTail, 160);\r\n  return \"npm audit failed\";\r\n}\r\n\r\nexport function classifyNpmAuditOutcome(input: {\r\n  exitCode: number;\r\n  stdout: string;\r\n  stderr: string;\r\n}): ShellCommandOutcome {\r\n  const combined = `${input.stdout}\\n${input.stderr}`.trim();\r\n  const parsed = extractJsonObject(combined);\r\n\r\n  if (!parsed || !isRecord(parsed)) {\r\n    const tail = tidy(combined || `exit ${input.exitCode}`, 180);\r\n    return {\r\n      kind: \"command_failure\",\r\n      exitCode: input.exitCode,\r\n      summary: `npm audit failed (invalid or missing JSON): ${tail}`,\r\n      parseError: \"invalid_json\",\r\n    };\r\n  }\r\n\r\n  if (isRecord(parsed.error)) {\r\n    return {\r\n      kind: \"command_failure\",\r\n      exitCode: input.exitCode,\r\n      summary: `npm audit command failed: ${npmAuditFailureReason(parsed, input.stderr)}`,\r\n    };\r\n  }\r\n\r\n  const audit = summarizeNpmAuditReport(parsed);\r\n  if (!audit) {\r\n    return {\r\n      kind: \"command_failure\",\r\n      exitCode: input.exitCode,\r\n      summary: \"npm audit failed: JSON response missing vulnerability metadata\",\r\n      parseError: \"missing_metadata\",\r\n    };\r\n  }\r\n\r\n  if (input.exitCode === 0 && audit.total === 0) {\r\n    return {\r\n      kind: \"success\",\r\n      exitCode: 0,\r\n      summary: \"npm audit: no vulnerabilities reported\",\r\n      audit,\r\n    };\r\n  }\r\n\r\n  return {\r\n    kind: \"audit_findings\",\r\n    exitCode: input.exitCode,\r\n    summary: formatAuditSummaryLine(audit),\r\n    audit,\r\n  };\r\n}\r\n\r\nfunction isNpmAuditCommand(command: string): boolean {\r\n  return NPM_AUDIT_RE.test(command);\r\n}\r\n\r\nfunction isRgCommand(command: string): boolean {\r\n  return RG_CMD_RE.test(command);\r\n}\r\n\r\nfunction classifyRgOutcome(input: {\r\n  command: string;\r\n  exitCode: number;\r\n  stdout: string;\r\n  stderr: string;\r\n  interleaved: string;\r\n}): ShellCommandOutcome {\r\n  const diagnosis = diagnoseRepoSearchFailure({\r\n    command: input.command,\r\n    exitCode: input.exitCode,\r\n  });\r\n\r\n  if (input.exitCode === 0) {\r\n    return {\r\n      kind: \"success\",\r\n      exitCode: 0,\r\n      summary: \"ripgrep finished (exit 0)\",\r\n    };\r\n  }\r\n\r\n  if (input.exitCode === 1) {\r\n    const errText = (input.stderr || input.interleaved).trim();\r\n    if (errText && RG_REAL_ERROR_RE.test(errText)) {\r\n      const tail = tidy(errText, 160);\r\n      return {\r\n        kind: \"command_failure\",\r\n        exitCode: 1,\r\n        summary: diagnosis ?? `ripgrep failed (exit 1): ${tail}`,\r\n      };\r\n    }\r\n    const normalized = normalizeRepoSearchCommand(input.command);\r\n    const retry =\r\n      normalized.changed && !diagnosis ? ` Retry with: \\`${normalized.command}\\`.` : \"\";\r\n    return {\r\n      kind: \"search_no_matches\",\r\n      exitCode: 1,\r\n      summary:\r\n        diagnosis ??\r\n        `ripgrep: no matches (exit 1).${retry} Try a broader pattern or search from the repo root.`,\r\n    };\r\n  }\r\n\r\n  const tail = tidy(input.interleaved || input.stdout || input.stderr || `exit ${input.exitCode}`, 180);\r\n  return {\r\n    kind: \"command_failure\",\r\n    exitCode: input.exitCode,\r\n    summary: diagnosis ?? `ripgrep failed (exit ${input.exitCode}): ${tail}`,\r\n  };\r\n}\r\n\r\nexport function classifyShellCommandOutcome(input: {\r\n  command: string;\r\n  exitCode: number;\r\n  stdout?: string;\r\n  stderr?: string;\r\n  interleavedOutput?: string;\r\n}): ShellCommandOutcome {\r\n  const stdout = input.stdout ?? \"\";\r\n  const stderr = input.stderr ?? \"\";\r\n  const interleaved = input.interleavedOutput ?? \"\";\r\n\r\n  if (isNpmAuditCommand(input.command)) {\r\n    const body = stdout.trim() || interleaved.trim() || stderr.trim();\r\n    return classifyNpmAuditOutcome({\r\n      exitCode: input.exitCode,\r\n      stdout: body,\r\n      stderr,\r\n    });\r\n  }\r\n\r\n  if (isRgCommand(input.command)) {\r\n    return classifyRgOutcome({\r\n      command: input.command,\r\n      exitCode: input.exitCode,\r\n      stdout,\r\n      stderr,\r\n      interleaved,\r\n    });\r\n  }\r\n\r\n  const searchDiagnosis = diagnoseRepoSearchFailure({\r\n    command: input.command,\r\n    exitCode: input.exitCode,\r\n  });\r\n  if (searchDiagnosis && input.exitCode !== 0) {\r\n    return {\r\n      kind: \"command_failure\",\r\n      exitCode: input.exitCode,\r\n      summary: searchDiagnosis,\r\n    };\r\n  }\r\n\r\n  if (input.exitCode === 0) {\r\n    return {\r\n      kind: \"success\",\r\n      exitCode: 0,\r\n      summary: `command succeeded (exit 0)`,\r\n    };\r\n  }\r\n\r\n  const tail = tidy(interleaved || stdout || stderr || `exit ${input.exitCode}`, 180);\r\n  return {\r\n    kind: \"command_failure\",\r\n    exitCode: input.exitCode,\r\n    summary: `command failed (exit ${input.exitCode}): ${tail}`,\r\n  };\r\n}\r\n", "// Exit normalization for workers that died without a stream-json final result.\r\n//\r\n// When a worker process exits before recording a `result` event, the status path\r\n// used to surface a single generic \"process exited without a final result\"\r\n// needs_attention \u2014 indistinguishable whether the agent crashed mid-task or the\r\n// provider CLI rejected the model/args at startup. That made model/provider\r\n// misconfigurations look like silent stalls the watchdog had to triage by hand.\r\n//\r\n// `classifyExitFailure` inspects the worker's stderr/error tail and, when it\r\n// matches a known startup/config failure (model rejection, missing CLI, auth),\r\n// returns a structured `blocked` classification with a precise reason. The\r\n// status path promotes that to `attention.state = \"blocked\"` \u2014 a real board\r\n// attention state that flows through the harness completion ingest unchanged \u2014\r\n// instead of the catch-all needs_attention.\r\n\r\nexport interface ExitClassification {\r\n  /** True when the failure is a structural blocker an operator must fix. */\r\n  blocked: boolean;\r\n  /** Precise, human-readable reason for the blocker. */\r\n  reason: string;\r\n}\r\n\r\ninterface FailurePattern {\r\n  test: RegExp;\r\n  label: string;\r\n}\r\n\r\n// Ordered most-specific first. Each entry maps a recognizable stderr signature to\r\n// a short blocker label; the matched error tail is appended for context.\r\nconst FAILURE_PATTERNS: FailurePattern[] = [\r\n  {\r\n    test: /\\b(?:invalid|unknown|unsupported|unrecognized)\\b[^.\\n]*\\bmodel\\b/i,\r\n    label: \"provider rejected the requested model\",\r\n  },\r\n  {\r\n    test: /\\bmodel\\b[^.\\n]*\\b(?:not\\s+(?:found|supported|available|recognized|valid)|is\\s+not\\s+valid|does\\s+not\\s+exist)/i,\r\n    label: \"provider rejected the requested model\",\r\n  },\r\n  {\r\n    test: /\\b(?:did you mean|available models|choose (?:a|one of)|supported models)\\b/i,\r\n    label: \"provider rejected the requested model\",\r\n  },\r\n  {\r\n    test: /model preflight failed/i,\r\n    label: \"model/provider preflight failed\",\r\n  },\r\n  {\r\n    test: /\\b(?:command not found|ENOENT|is the .*CLI on PATH|executable not found|no such file or directory)\\b/i,\r\n    label: \"provider CLI is missing or not on PATH\",\r\n  },\r\n  {\r\n    test: /\\bfailed to spawn\\b/i,\r\n    label: \"provider failed to spawn the worker process\",\r\n  },\r\n  {\r\n    test: /\\b(?:not logged in|unauthorized|authentication (?:failed|required)|invalid api key|missing api key|401)\\b/i,\r\n    label: \"provider authentication failed\",\r\n  },\r\n];\r\n\r\n/** Collapse whitespace and clip a noisy error tail to a single readable line. */\r\nfunction tidy(errorText: string, max = 240): string {\r\n  const oneLine = errorText.replace(/\\s+/g, \" \").trim();\r\n  return oneLine.length > max ? `${oneLine.slice(0, max - 1)}\u2026` : oneLine;\r\n}\r\n\r\n/**\r\n * Classify a dead worker's error/stderr output. Returns a structured blocker when\r\n * the text matches a known startup/config failure, or null when it does not (the\r\n * caller should fall back to the generic needs_attention path).\r\n */\r\nexport function classifyExitFailure(\r\n  errorText: string | null | undefined,\r\n): ExitClassification | null {\r\n  const text = (errorText ?? \"\").trim();\r\n  if (!text) return null;\r\n  for (const pattern of FAILURE_PATTERNS) {\r\n    if (pattern.test.test(text)) {\r\n      return { blocked: true, reason: `${pattern.label}: ${tidy(text)}` };\r\n    }\r\n  }\r\n  return null;\r\n}\r\n", "// Workers that die without a stream-json `result` event but leave salvageable work\r\n// behind (uncommitted changes and/or commits ahead of the run base). Distinct from\r\n// a generic \"process exited without a final result\" stall \u2014 operators need a\r\n// review-needed signal and a follow-up salvage/landing lane (PR #285 class).\r\n\r\nimport type { GitAncestry } from \"./git.js\";\r\n\r\nexport type ExitedSalvageKind = \"none\" | \"uncommitted\" | \"committed_ahead\" | \"both\";\r\n\r\nexport interface ExitedSalvageAssessment {\r\n  kind: ExitedSalvageKind;\r\n  /** True when the worktree has reviewable uncommitted and/or committed-ahead work. */\r\n  salvageable: boolean;\r\n  uncommittedCount: number;\r\n  headCommit: string | null;\r\n  /** Board / attention reason \u2014 stable prefix for downstream parsers. */\r\n  attentionReason: string;\r\n}\r\n\r\nfunction trimOrNull(value: unknown): string | null {\r\n  if (typeof value !== \"string\") return null;\r\n  const trimmed = value.trim();\r\n  return trimmed.length ? trimmed : null;\r\n}\r\n\r\nfunction hasFinalResult(value: unknown): boolean {\r\n  if (value === undefined || value === null) return false;\r\n  if (typeof value === \"string\") return value.trim().length > 0;\r\n  if (typeof value === \"boolean\") return value;\r\n  if (Array.isArray(value)) return value.length > 0;\r\n  if (typeof value === \"object\") return Object.keys(value as object).length > 0;\r\n  return true;\r\n}\r\n\r\nfunction committedHeadFromAncestry(ancestry: GitAncestry | null | undefined): string | null {\r\n  if (!ancestry?.checked) return null;\r\n  if (ancestry.headIsAncestorOfBase !== false) return null;\r\n  return trimOrNull(ancestry.head);\r\n}\r\n\r\nfunction buildAttentionReason(\r\n  kind: ExitedSalvageKind,\r\n  uncommittedCount: number,\r\n  headCommit: string | null,\r\n): string {\r\n  const parts: string[] = [\"exited_with_changes_salvage\"];\r\n  if (kind === \"uncommitted\" || kind === \"both\") {\r\n    parts.push(\r\n      `${uncommittedCount} uncommitted change${uncommittedCount === 1 ? \"\" : \"s\"} with no final result`,\r\n    );\r\n  }\r\n  if ((kind === \"committed_ahead\" || kind === \"both\") && headCommit) {\r\n    const sha = headCommit.length > 12 ? headCommit.slice(0, 12) : headCommit;\r\n    parts.push(`commit ${sha} ahead of base with no final result`);\r\n  }\r\n  parts.push(\"review worktree \u2014 commit, open a PR, or run a salvage worker before discarding\");\r\n  return parts.join(\": \");\r\n}\r\n\r\n/**\r\n * Classify a dead worker with no `finalResult`. Returns null when the worker is\r\n * still alive or already recorded a final result.\r\n */\r\nexport function assessExitedWorkerSalvage(input: {\r\n  alive: boolean;\r\n  finalResult: unknown;\r\n  changedFiles?: string[];\r\n  gitAncestry?: GitAncestry | null;\r\n  headCommit?: string | null;\r\n}): ExitedSalvageAssessment | null {\r\n  if (input.alive || hasFinalResult(input.finalResult)) return null;\r\n\r\n  const uncommittedCount = (input.changedFiles ?? []).filter((line) => line.trim()).length;\r\n  const headCommit = trimOrNull(input.headCommit) ?? committedHeadFromAncestry(input.gitAncestry);\r\n  const hasUncommitted = uncommittedCount > 0;\r\n  const hasCommittedAhead = Boolean(headCommit);\r\n\r\n  if (!hasUncommitted && !hasCommittedAhead) {\r\n    return {\r\n      kind: \"none\",\r\n      salvageable: false,\r\n      uncommittedCount: 0,\r\n      headCommit: null,\r\n      attentionReason: \"process exited without a final result\",\r\n    };\r\n  }\r\n\r\n  const kind: ExitedSalvageKind =\r\n    hasUncommitted && hasCommittedAhead ? \"both\" : hasUncommitted ? \"uncommitted\" : \"committed_ahead\";\r\n\r\n  return {\r\n    kind,\r\n    salvageable: true,\r\n    uncommittedCount,\r\n    headCommit,\r\n    attentionReason: buildAttentionReason(kind, uncommittedCount, headCommit),\r\n  };\r\n}\r\n", "import { spawnSync } from \"node:child_process\";\r\nimport { fail, hiddenSpawnOptions } from \"./util.js\";\r\n\r\nexport interface GitOptions {\r\n  allowFailure?: boolean;\r\n  throwError?: boolean;\r\n}\r\n\r\nexport function git(cwd: string, args: string[], options: GitOptions = {}): string {\r\n  const res = spawnSync(\r\n    \"git\",\r\n    args,\r\n    hiddenSpawnOptions({ cwd, encoding: \"utf8\" as const }),\r\n  );\r\n  if (res.status !== 0 && !options.allowFailure) {\r\n    const message = `git ${args.join(\" \")} failed: ${res.stderr || res.stdout}`;\r\n    if (options.throwError) throw new Error(message);\r\n    fail(message);\r\n  }\r\n  return res.stdout || \"\";\r\n}\r\n\r\nexport function ensureGitRepo(repo: string): void {\r\n  git(repo, [\"rev-parse\", \"--show-toplevel\"]);\r\n}\r\n\r\nexport function gitStatusShort(worktreePath: string): string[] {\r\n  return git(worktreePath, [\"status\", \"--short\"], { allowFailure: true })\r\n    .split(\"\\n\")\r\n    .map((line) => line.trim())\r\n    .filter(Boolean);\r\n}\r\n\r\nexport interface GitCaptureResult {\r\n  status: number | null;\r\n  stdout: string;\r\n  stderr: string;\r\n  error: string | null;\r\n}\r\n\r\nexport function gitCapture(cwd: string, args: string[]): GitCaptureResult {\r\n  try {\r\n    const res = spawnSync(\r\n    \"git\",\r\n    args,\r\n    hiddenSpawnOptions({ cwd, encoding: \"utf8\" as const }),\r\n  );\r\n    return {\r\n      status: res.status,\r\n      stdout: res.stdout || \"\",\r\n      stderr: res.stderr || \"\",\r\n      error: res.error ? res.error.message : null,\r\n    };\r\n  } catch (error) {\r\n    return {\r\n      status: null,\r\n      stdout: \"\",\r\n      stderr: \"\",\r\n      error: (error as Error).message,\r\n    };\r\n  }\r\n}\r\n\r\nexport function gitIsAncestor(\r\n  cwd: string,\r\n  ancestor: string,\r\n  descendant: string,\r\n): { isAncestor: boolean | null; error: string | null } {\r\n  const res = gitCapture(cwd, [\"merge-base\", \"--is-ancestor\", ancestor, descendant]);\r\n  if (res.status === 0) return { isAncestor: true, error: null };\r\n  if (res.status === 1) return { isAncestor: false, error: null };\r\n  return { isAncestor: null, error: res.error || res.stderr || res.stdout || `git exited ${res.status}` };\r\n}\r\n\r\nexport type GitAncestryRelation = \"synced\" | \"merged\" | \"ahead\" | \"diverged\" | \"unknown\";\r\n\r\nexport interface GitAncestry {\r\n  checked: boolean;\r\n  base: string;\r\n  head: string | null;\r\n  baseHead: string | null;\r\n  baseIsAncestorOfHead: boolean | null;\r\n  headIsAncestorOfBase: boolean | null;\r\n  relation: GitAncestryRelation;\r\n  error?: string;\r\n}\r\n\r\nexport interface GitAncestryOptions {\r\n  /** Branch or ref name (e.g. origin/main). Used when baseCommit is unset. */\r\n  base?: string;\r\n  /** Pinned SHA the worktree was created from \u2014 preferred over a moving branch ref. */\r\n  baseCommit?: string;\r\n}\r\n\r\nexport function computeGitAncestry(worktreePath: string, baseOrOptions: string | GitAncestryOptions = \"origin/main\"): GitAncestry {\r\n  const options: GitAncestryOptions =\r\n    typeof baseOrOptions === \"string\" ? { base: baseOrOptions } : baseOrOptions;\r\n  const baseLabel = options.baseCommit?.trim() || options.base?.trim() || \"origin/main\";\r\n  const pinnedBaseCommit = options.baseCommit?.trim() || null;\r\n\r\n  if (!worktreePath) {\r\n    return unknownAncestry(baseLabel, \"missing worktree path\");\r\n  }\r\n\r\n  const head = gitCapture(worktreePath, [\"rev-parse\", \"HEAD\"]);\r\n  if (head.status !== 0) {\r\n    return unknownAncestry(baseLabel, head.error || head.stderr || head.stdout || \"failed to resolve HEAD\");\r\n  }\r\n\r\n  let baseSha: string;\r\n  if (pinnedBaseCommit) {\r\n    baseSha = pinnedBaseCommit;\r\n  } else {\r\n    const baseHead = gitCapture(worktreePath, [\"rev-parse\", baseLabel]);\r\n    if (baseHead.status !== 0) {\r\n      return unknownAncestry(\r\n        baseLabel,\r\n        baseHead.error || baseHead.stderr || baseHead.stdout || `failed to resolve ${baseLabel}`,\r\n        head.stdout.trim(),\r\n      );\r\n    }\r\n    baseSha = baseHead.stdout.trim();\r\n  }\r\n\r\n  const headSha = head.stdout.trim();\r\n  if (headSha === baseSha) {\r\n    return {\r\n      checked: true,\r\n      base: baseLabel,\r\n      head: headSha,\r\n      baseHead: baseSha,\r\n      baseIsAncestorOfHead: true,\r\n      headIsAncestorOfBase: true,\r\n      relation: \"synced\",\r\n    };\r\n  }\r\n\r\n  const baseIsAncestorOfHead = gitIsAncestor(worktreePath, baseSha, headSha);\r\n  const headIsAncestorOfBase = gitIsAncestor(worktreePath, headSha, baseSha);\r\n  const error = baseIsAncestorOfHead.error || headIsAncestorOfBase.error || undefined;\r\n  if (baseIsAncestorOfHead.isAncestor == null || headIsAncestorOfBase.isAncestor == null) {\r\n    return {\r\n      checked: false,\r\n      base: baseLabel,\r\n      head: headSha,\r\n      baseHead: baseSha,\r\n      baseIsAncestorOfHead: baseIsAncestorOfHead.isAncestor,\r\n      headIsAncestorOfBase: headIsAncestorOfBase.isAncestor,\r\n      relation: \"unknown\",\r\n      ...(error ? { error } : {}),\r\n    };\r\n  }\r\n\r\n  const relation: GitAncestryRelation = baseIsAncestorOfHead.isAncestor\r\n    ? \"ahead\"\r\n    : headIsAncestorOfBase.isAncestor\r\n      ? \"merged\"\r\n      : \"diverged\";\r\n\r\n  return {\r\n    checked: true,\r\n    base: baseLabel,\r\n    head: headSha,\r\n    baseHead: baseSha,\r\n    baseIsAncestorOfHead: baseIsAncestorOfHead.isAncestor,\r\n    headIsAncestorOfBase: headIsAncestorOfBase.isAncestor,\r\n    relation,\r\n    ...(error ? { error } : {}),\r\n  };\r\n}\r\n\r\nfunction unknownAncestry(base: string, error: string, head: string | null = null): GitAncestry {\r\n  return {\r\n    checked: false,\r\n    base,\r\n    head,\r\n    baseHead: null,\r\n    baseIsAncestorOfHead: null,\r\n    headIsAncestorOfBase: null,\r\n    relation: \"unknown\",\r\n    error,\r\n  };\r\n}\r\n\r\nexport { scrubClaudeEnv, scrubWorkerEnv } from \"./worker-env.js\";\r\n", "/**\r\n * Worker spawn env scrub \u2014 harness workers must not inherit host deployment secrets.\r\n */\r\n\r\n/** Exact env keys that must never reach a worker child process. */\r\nexport const FORBIDDEN_WORKER_ENV_KEYS = [\r\n  \"ANTHROPIC_API_KEY\",\r\n  \"ANALYST_API_KEY\",\r\n  \"RECRUITER_API_KEY\",\r\n  \"AUTH_SECRET\",\r\n  \"NEXTAUTH_SECRET\",\r\n  \"DATABASE_URL\",\r\n  \"PRODUCTION_DATABASE_URL\",\r\n  \"KYNVER_PRODUCTION_DATABASE_URL\",\r\n  \"REDIS_URL\",\r\n  \"GOOGLE_CLIENT_SECRET\",\r\n  \"GITHUB_CLIENT_SECRET\",\r\n  \"KYNVER_API_KEY\",\r\n  \"KYNVER_SERVICE_SECRET\",\r\n  \"KYNVER_RUNTIME_SECRET\",\r\n  \"KYNVER_CRON_SECRET\",\r\n  \"OPENCLAW_CRON_SECRET\",\r\n  \"QSTASH_TOKEN\",\r\n  \"QSTASH_CURRENT_SIGNING_KEY\",\r\n  \"QSTASH_NEXT_SIGNING_KEY\",\r\n  \"TOOL_SECRETS_KEK\",\r\n  \"TOOL_EXECUTOR_DISPATCH_SECRET\",\r\n  \"CLOUDFLARE_API_TOKEN\",\r\n  \"STRIPE_SECRET_KEY\",\r\n  \"STRIPE_WEBHOOK_SECRET\",\r\n  \"STRIPE_IDENTITY_WEBHOOK_SECRET\",\r\n  \"VOYAGE_API_KEY\",\r\n  \"PERPLEXITY_API_KEY\",\r\n  \"FRED_API_KEY\",\r\n  \"FMP_API_KEY\",\r\n  \"CURSOR_API_KEY\",\r\n] as const;\r\n\r\nconst FORBIDDEN_KEY_SET = new Set<string>(FORBIDDEN_WORKER_ENV_KEYS);\r\n\r\n/** Keys matching these suffixes are stripped (case-sensitive). */\r\nconst FORBIDDEN_SUFFIXES = [\"_SECRET\", \"_API_KEY\"] as const;\r\n\r\nexport function isForbiddenWorkerEnvKey(key: string): boolean {\r\n  if (FORBIDDEN_KEY_SET.has(key)) return true;\r\n  return FORBIDDEN_SUFFIXES.some((suffix) => key.endsWith(suffix));\r\n}\r\n\r\nexport function listForbiddenWorkerEnvKeys(env: NodeJS.ProcessEnv): string[] {\r\n  return Object.keys(env).filter(isForbiddenWorkerEnvKey).sort();\r\n}\r\n\r\nexport function scrubWorkerEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv {\r\n  const next = { ...env };\r\n  for (const key of Object.keys(next)) {\r\n    if (isForbiddenWorkerEnvKey(key)) delete next[key];\r\n  }\r\n  return next;\r\n}\r\n\r\nexport interface WorkerEnvAudit {\r\n  forbiddenPresent: string[];\r\n  safe: boolean;\r\n}\r\n\r\nexport function auditWorkerEnv(env: NodeJS.ProcessEnv): WorkerEnvAudit {\r\n  const forbiddenPresent = listForbiddenWorkerEnvKeys(env);\r\n  return { forbiddenPresent, safe: forbiddenPresent.length === 0 };\r\n}\r\n\r\n/** @deprecated Use {@link scrubWorkerEnv} \u2014 kept for existing imports from git.ts */\r\nexport function scrubClaudeEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv {\r\n  return scrubWorkerEnv(env);\r\n}\r\n", "import type { GitAncestry } from \"./git.js\";\r\n\r\nexport type WorkerLandingBlockReason = \"dirty_worktree_no_pr\";\r\n\r\nexport interface WorkerLandingSnapshot {\r\n  finalResult: unknown;\r\n  changedFiles: string[];\r\n  headCommit?: string | null;\r\n  prUrl?: string | null;\r\n  artifactBundlePath?: string | null;\r\n  patchPath?: string | null;\r\n  gitAncestry?: GitAncestry | null;\r\n}\r\n\r\nexport interface WorkerLandingVerdict {\r\n  /** When true, do not treat the worker as cleanly landed/done. */\r\n  blocked: boolean;\r\n  reason?: WorkerLandingBlockReason;\r\n  /** Human-readable attention reason for boards and completion payloads. */\r\n  detail?: string;\r\n}\r\n\r\nfunction trimOrNull(value: unknown): string | null {\r\n  if (typeof value !== \"string\") return null;\r\n  const trimmed = value.trim();\r\n  return trimmed.length ? trimmed : null;\r\n}\r\n\r\nfunction hasFinalResult(value: unknown): boolean {\r\n  if (value === undefined || value === null) return false;\r\n  if (typeof value === \"string\") return value.trim().length > 0;\r\n  if (typeof value === \"boolean\") return value;\r\n  if (Array.isArray(value)) return value.length > 0;\r\n  if (typeof value === \"object\") return Object.keys(value as object).length > 0;\r\n  return true;\r\n}\r\n\r\nfunction hasCommittedLandingRef(snapshot: WorkerLandingSnapshot): boolean {\r\n  if (trimOrNull(snapshot.headCommit)) return true;\r\n  if (trimOrNull(snapshot.prUrl)) return true;\r\n  if (trimOrNull(snapshot.artifactBundlePath)) return true;\r\n  if (trimOrNull(snapshot.patchPath)) return true;\r\n  const ancestry = snapshot.gitAncestry;\r\n  if (ancestry?.checked && ancestry.headIsAncestorOfBase === false && trimOrNull(ancestry.head)) {\r\n    return true;\r\n  }\r\n  return false;\r\n}\r\n\r\n/**\r\n * Hard landing gate: a recorded final result is not sufficient when the worker\r\n * left uncommitted code and has no commit/PR/patch/bundle landing path.\r\n */\r\nexport function assessWorkerLanding(snapshot: WorkerLandingSnapshot): WorkerLandingVerdict {\r\n  if (!hasFinalResult(snapshot.finalResult)) return { blocked: false };\r\n  if (snapshot.changedFiles.length === 0) return { blocked: false };\r\n  if (!hasCommittedLandingRef(snapshot)) {\r\n    return {\r\n      blocked: true,\r\n      reason: \"dirty_worktree_no_pr\",\r\n      detail: `Worktree has ${snapshot.changedFiles.length} uncommitted change(s) with no commit or PR; commit, open a PR, or discard before landing`,\r\n    };\r\n  }\r\n  return {\r\n    blocked: true,\r\n    detail: `Worktree has ${snapshot.changedFiles.length} uncommitted change(s); commit or discard before landing`,\r\n  };\r\n}\r\n\r\nexport function landingAttentionReason(verdict: WorkerLandingVerdict): string | undefined {\r\n  if (!verdict.blocked) return undefined;\r\n  return verdict.detail ?? verdict.reason ?? \"dirty_worktree_no_pr\";\r\n}\r\n", "// Extract structured harness finalResult JSON embedded in markdown prose.\r\n\r\nfunction tryParseJsonObject(text: string): Record<string, unknown> | null {\r\n  const trimmed = text.trim();\r\n  if (!trimmed.startsWith(\"{\")) return null;\r\n  try {\r\n    const parsed: unknown = JSON.parse(trimmed);\r\n    if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) {\r\n      return parsed as Record<string, unknown>;\r\n    }\r\n  } catch {\r\n    return null;\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction reconciliationEntryCount(record: Record<string, unknown>): number {\r\n  const raw =\r\n    record.targetPrReconciliation ??\r\n    record.target_pr_reconciliation ??\r\n    record.targetPrs ??\r\n    record.target_prs;\r\n  return Array.isArray(raw) ? raw.length : 0;\r\n}\r\n\r\nexport function extractEmbeddedWorkerFinalResultRecord(\r\n  value: string,\r\n): Record<string, unknown> | null {\r\n  const trimmed = value.trim();\r\n  if (!trimmed) return null;\r\n\r\n  const direct = tryParseJsonObject(trimmed);\r\n  if (direct) return direct;\r\n\r\n  const candidates: Record<string, unknown>[] = [];\r\n\r\n  const fenceRe = /```(?:json)?\\s*([\\s\\S]*?)```/gi;\r\n  let fenceMatch: RegExpExecArray | null;\r\n  while ((fenceMatch = fenceRe.exec(trimmed)) !== null) {\r\n    const fromFence = tryParseJsonObject(fenceMatch[1] ?? \"\");\r\n    if (fromFence) candidates.push(fromFence);\r\n  }\r\n\r\n  const firstBrace = trimmed.indexOf(\"{\");\r\n  const lastBrace = trimmed.lastIndexOf(\"}\");\r\n  if (firstBrace >= 0 && lastBrace > firstBrace) {\r\n    const slice = tryParseJsonObject(trimmed.slice(firstBrace, lastBrace + 1));\r\n    if (slice) candidates.push(slice);\r\n  }\r\n\r\n  if (candidates.length === 0) return null;\r\n\r\n  let best = candidates[candidates.length - 1]!;\r\n  let bestScore = reconciliationEntryCount(best);\r\n  for (const candidate of candidates) {\r\n    const score = reconciliationEntryCount(candidate);\r\n    if (score > bestScore) {\r\n      best = candidate;\r\n      bestScore = score;\r\n    }\r\n  }\r\n  return best;\r\n}\r\n", "// Runtime mirror of server landing-contract gate (Dalton landing-only / target PRs).\r\n\r\nimport { extractEmbeddedWorkerFinalResultRecord } from \"./worker-final-result-embed.js\";\r\nimport type { WorkerLandingSnapshot } from \"./landing-gate.js\";\r\n\r\nexport type TargetPrOutcome = \"merged\" | \"skipped\" | \"blocked\";\r\n\r\nexport interface TargetPrReconciliation {\r\n  prUrl: string;\r\n  outcome: TargetPrOutcome;\r\n  mergeCommit?: string | null;\r\n  reason?: string | null;\r\n}\r\n\r\nexport interface WorkerLandingContract {\r\n  landingOnly: boolean;\r\n  targetPrUrls: string[];\r\n  targetPrUrl?: string | null;\r\n  repairEnforceOriginalPr?: boolean;\r\n  requiresTargetPrReconciliation?: boolean;\r\n}\r\n\r\nexport type WorkerLandingContractBlockReason =\r\n  | \"unrelated_implementation_pr\"\r\n  | \"missing_target_pr_reconciliation\"\r\n  | \"incomplete_target_pr_landing\"\r\n  | \"duplicate_repair_pr\"\r\n  | \"missing_repair_target_reconciliation\";\r\n\r\nexport interface WorkerLandingContractVerdict {\r\n  blocked: boolean;\r\n  reason?: WorkerLandingContractBlockReason;\r\n  detail?: string;\r\n}\r\n\r\nfunction trimOrNull(value: unknown): string | null {\r\n  if (typeof value !== \"string\") return null;\r\n  const t = value.trim();\r\n  return t.length ? t : null;\r\n}\r\n\r\nfunction hasFinalResult(value: unknown): boolean {\r\n  if (value === undefined || value === null) return false;\r\n  if (typeof value === \"string\") return value.trim().length > 0;\r\n  if (typeof value === \"object\") return Object.keys(value as object).length > 0;\r\n  return true;\r\n}\r\n\r\nfunction normalizePrUrl(url: string): string | null {\r\n  const m = url\r\n    .trim()\r\n    .match(/github\\.com\\/([^/]+\\/[^/]+)\\/(?:pull|pulls)\\/(\\d+)/i);\r\n  if (!m) return trimOrNull(url);\r\n  return `https://github.com/${m[1]}/pull/${m[2]}`;\r\n}\r\n\r\nfunction prUrlSetKey(url: string): string {\r\n  const m = url\r\n    .trim()\r\n    .match(/github\\.com\\/([^/]+\\/[^/]+)\\/(?:pull|pulls)\\/(\\d+)/i);\r\n  if (!m) return url.trim().toLowerCase();\r\n  return `${m[1].toLowerCase()}/pull/${m[2]}`;\r\n}\r\n\r\nfunction parseReconciliation(finalResult: unknown): TargetPrReconciliation[] {\r\n  let record: Record<string, unknown> | null = null;\r\n  if (typeof finalResult === \"string\") {\r\n    const embedded = extractEmbeddedWorkerFinalResultRecord(finalResult);\r\n    if (embedded) record = embedded;\r\n  } else if (finalResult && typeof finalResult === \"object\" && !Array.isArray(finalResult)) {\r\n    record = finalResult as Record<string, unknown>;\r\n  }\r\n  if (!record) return [];\r\n  const raw = record.targetPrReconciliation ?? record.target_pr_reconciliation;\r\n  if (!Array.isArray(raw)) return [];\r\n  const out: TargetPrReconciliation[] = [];\r\n  for (const item of raw) {\r\n    if (!item || typeof item !== \"object\" || Array.isArray(item)) continue;\r\n    const row = item as Record<string, unknown>;\r\n    const prUrl = normalizePrUrl(String(row.prUrl ?? row.pr_url ?? \"\"));\r\n    const outcome = trimOrNull(row.outcome);\r\n    if (!prUrl || (outcome !== \"merged\" && outcome !== \"skipped\" && outcome !== \"blocked\")) continue;\r\n    out.push({\r\n      prUrl,\r\n      outcome,\r\n      mergeCommit: trimOrNull(row.mergeCommit ?? row.merge_commit),\r\n      reason: trimOrNull(row.reason),\r\n    });\r\n  }\r\n  return out;\r\n}\r\n\r\n/** Snapshot / structured prUrl only \u2014 not laneExpertise.prUrls citation evidence. */\r\nfunction workerAttachedPrUrls(snapshot: WorkerLandingSnapshot, finalResult: unknown): string[] {\r\n  const urls: string[] = [];\r\n  const fromSnapshot = normalizePrUrl(trimOrNull(snapshot.prUrl) ?? \"\");\r\n  if (fromSnapshot) urls.push(fromSnapshot);\r\n  if (finalResult && typeof finalResult === \"object\" && !Array.isArray(finalResult)) {\r\n    const record = finalResult as Record<string, unknown>;\r\n    const pr = normalizePrUrl(String(record.prUrl ?? record.pr_url ?? \"\"));\r\n    if (pr) urls.push(pr);\r\n  }\r\n  return [...new Set(urls)];\r\n}\r\n\r\nexport function assessWorkerLandingContract(input: {\r\n  contract: WorkerLandingContract;\r\n  snapshot: WorkerLandingSnapshot;\r\n  finalResult?: unknown;\r\n}): WorkerLandingContractVerdict {\r\n  const { contract, snapshot } = input;\r\n  const finalResult = input.finalResult ?? snapshot.finalResult;\r\n\r\n  if (\r\n    !contract.landingOnly &&\r\n    contract.targetPrUrls.length === 0 &&\r\n    !contract.repairEnforceOriginalPr\r\n  ) {\r\n    return { blocked: false };\r\n  }\r\n  if (!hasFinalResult(finalResult)) {\r\n    const requiresEarly =\r\n      contract.requiresTargetPrReconciliation ??\r\n      (contract.landingOnly ||\r\n        Boolean(contract.repairEnforceOriginalPr) ||\r\n        contract.targetPrUrls.length > 0);\r\n    if (requiresEarly && contract.targetPrUrls.length > 0) {\r\n      return {\r\n        blocked: true,\r\n        reason: \"missing_target_pr_reconciliation\",\r\n        detail: `Final result required to reconcile target PR(s): ${contract.targetPrUrls.join(\", \")}`,\r\n      };\r\n    }\r\n    return { blocked: false };\r\n  }\r\n\r\n  const requiresTargetPrReconciliation =\r\n    contract.requiresTargetPrReconciliation ??\r\n    (contract.landingOnly ||\r\n      Boolean(contract.repairEnforceOriginalPr) ||\r\n      contract.targetPrUrls.length > 0);\r\n\r\n  if (!requiresTargetPrReconciliation && !contract.repairEnforceOriginalPr) {\r\n    return { blocked: false };\r\n  }\r\n\r\n  const repairTarget = contract.repairEnforceOriginalPr\r\n    ? normalizePrUrl(trimOrNull(contract.targetPrUrl) ?? \"\") ??\r\n      (contract.targetPrUrls.length === 1\r\n        ? normalizePrUrl(contract.targetPrUrls[0]!)\r\n        : null)\r\n    : null;\r\n  if (repairTarget) {\r\n    const workerPrs = workerAttachedPrUrls(snapshot, finalResult);\r\n    const supersedes =\r\n      finalResult &&\r\n      typeof finalResult === \"object\" &&\r\n      !Array.isArray(finalResult) &&\r\n      (finalResult as Record<string, unknown>).supersedesOriginalTargetPr === true;\r\n    if (!supersedes) {\r\n      for (const pr of workerPrs) {\r\n        if (pr !== repairTarget) {\r\n          return {\r\n            blocked: true,\r\n            reason: \"duplicate_repair_pr\",\r\n            detail: `Repair worker opened or attached PR ${pr} instead of canonical target ${repairTarget}`,\r\n          };\r\n        }\r\n      }\r\n    }\r\n    const reconciliation = parseReconciliation(finalResult);\r\n    const entry = reconciliation.find((r) => r.prUrl === repairTarget);\r\n    if (\r\n      !entry ||\r\n      (entry.outcome !== \"merged\" &&\r\n        !(entry.reason?.trim() && (entry.outcome === \"skipped\" || entry.outcome === \"blocked\")))\r\n    ) {\r\n      return {\r\n        blocked: true,\r\n        reason: \"missing_repair_target_reconciliation\",\r\n        detail: `Repair worker must reconcile target PR ${repairTarget}`,\r\n      };\r\n    }\r\n  }\r\n\r\n  const reconciliation = parseReconciliation(finalResult);\r\n  const byUrl = new Map(\r\n    reconciliation.map((r) => [prUrlSetKey(r.prUrl), r] as const),\r\n  );\r\n  const targetSet = new Set(\r\n    contract.targetPrUrls.map((u) => prUrlSetKey(normalizePrUrl(u) ?? u)).filter(Boolean),\r\n  );\r\n  const attachedPrs = workerAttachedPrUrls(snapshot, finalResult);\r\n\r\n  if (contract.landingOnly) {\r\n    for (const pr of attachedPrs) {\r\n      if (targetSet.size > 0 && !targetSet.has(prUrlSetKey(pr))) {\r\n        return {\r\n          blocked: true,\r\n          reason: \"unrelated_implementation_pr\",\r\n          detail: `Landing-only worker attached unrelated PR ${pr}`,\r\n        };\r\n      }\r\n      if (targetSet.size === 0) {\r\n        return {\r\n          blocked: true,\r\n          reason: \"unrelated_implementation_pr\",\r\n          detail: \"Landing-only worker must not open new implementation PRs\",\r\n        };\r\n      }\r\n    }\r\n  }\r\n\r\n  if (contract.targetPrUrls.length === 0) return { blocked: false };\r\n\r\n  const missing: string[] = [];\r\n  for (const target of contract.targetPrUrls) {\r\n    const key = prUrlSetKey(normalizePrUrl(target) ?? target);\r\n    const entry = byUrl.get(key);\r\n    if (!entry) {\r\n      missing.push(key);\r\n      continue;\r\n    }\r\n    if (entry.outcome !== \"merged\" && !entry.reason?.trim()) {\r\n      missing.push(key);\r\n    }\r\n  }\r\n\r\n  if (missing.length > 0) {\r\n    return {\r\n      blocked: true,\r\n      reason: missing.every((u) => byUrl.has(u))\r\n        ? \"incomplete_target_pr_landing\"\r\n        : \"missing_target_pr_reconciliation\",\r\n      detail: `Target PR reconciliation incomplete: ${missing.join(\", \")}`,\r\n    };\r\n  }\r\n\r\n  return { blocked: false };\r\n}\r\n\r\nexport function landingContractAttentionReason(\r\n  verdict: WorkerLandingContractVerdict,\r\n): string | undefined {\r\n  if (!verdict.blocked) return undefined;\r\n  return verdict.detail ?? verdict.reason;\r\n}\r\n", "import { parseHeartbeat, terminalFinalResultFromHeartbeat } from \"./heartbeat.js\";\r\nimport { parseHarnessStream } from \"./stream.js\";\r\nimport { classifyExitFailure } from \"./exit-classify.js\";\r\nimport { assessExitedWorkerSalvage } from \"./exited-salvage.js\";\r\nimport { computeGitAncestry, type GitAncestry, gitStatusShort } from \"./git.js\";\r\nimport { assessWorkerLanding, landingAttentionReason } from \"./landing-gate.js\";\r\nimport {\r\n  assessWorkerLandingContract,\r\n  landingContractAttentionReason,\r\n  type WorkerLandingContract,\r\n  type TargetPrReconciliation,\r\n} from \"./landing-contract-gate.js\";\r\nimport { extractEmbeddedWorkerFinalResultRecord } from \"./worker-final-result-embed.js\";\r\nimport {\r\n  fileMtime,\r\n  fileSize,\r\n  isPidAlive,\r\n  latestIso,\r\n  secsAgo,\r\n  tailFile,\r\n} from \"./util.js\";\r\n\r\nexport const NO_START_MS = 180_000;\r\nexport const STALE_MS = 600_000;\r\n\r\nexport interface WorkerAttention {\r\n  state: \"done\" | \"needs_attention\" | \"blocked\" | \"stale\" | \"ok\";\r\n  reason: string;\r\n}\r\n\r\n/** Snapshot of Lane A policy injection at worker spawn (from dispatch-next). */\r\nexport interface InstructionPolicyEvidenceSnapshot {\r\n  fingerprint?: string;\r\n  ruleSlugs?: string[];\r\n  globalRuleCount?: number;\r\n  personaRuleCount?: number;\r\n  explicitKindCount?: number;\r\n  invariantCount?: number;\r\n  markdownChars?: number;\r\n  injectedAt?: string;\r\n}\r\n\r\n/** Snapshot of task-anchored context envelope injection at worker spawn. */\r\nexport interface ContextEnvelopeEvidenceSnapshot {\r\n  anchorTaskId?: string;\r\n  envelopeGeneratedAt?: string;\r\n  injectedAt?: string;\r\n  hasPersonaBlock?: boolean;\r\n  personaSlug?: string | null;\r\n  operatingRuleCount?: number;\r\n  memoryHitCount?: number;\r\n  markdownChars?: number;\r\n  source?: \"dispatch_injection\" | \"tool_call\";\r\n}\r\n\r\n/** Snapshot of anchored persona context-envelope injection at worker spawn. */\r\nexport interface PersonaContextEvidenceSnapshot {\r\n  expectedPersonaSlug?: string;\r\n  injectedPersonaSlug?: string;\r\n  displayName?: string;\r\n  operatingRuleCount?: number;\r\n  anchorTaskId?: string;\r\n  envelopeGeneratedAt?: string;\r\n  injectedAt?: string;\r\n  markdownChars?: number;\r\n}\r\n\r\n/** Dispatch-time retrieval probe replayed on harness completion. */\r\nexport interface HarnessMemoryQualityCaptureSnapshot {\r\n  memoryQuery: string;\r\n  hitCount: number;\r\n  miss: boolean;\r\n  capturedAt: string;\r\n  retrievalEvidence?: Record<string, unknown> | null;\r\n  /** P7 privacy-safe prompt block (trace summary + live-verification nudges). */\r\n  promptMarkdown?: string | null;\r\n}\r\n\r\nexport interface HarnessWorkerRecord {\r\n  name: string;\r\n  runId: string;\r\n  status: string;\r\n  pid?: number;\r\n  model?: string;\r\n  branch: string;\r\n  worktreePath: string;\r\n  workerDir: string;\r\n  stdoutPath: string;\r\n  stderrPath: string;\r\n  heartbeatPath: string;\r\n  ownedPaths?: string[];\r\n  agentOsId?: string;\r\n  taskId?: string;\r\n  planId?: string;\r\n  /** Lane A policy fingerprint when dispatch injected operating rules. */\r\n  instructionPolicyFingerprint?: string;\r\n  instructionPolicyEvidence?: InstructionPolicyEvidenceSnapshot;\r\n  memoryQualityCapture?: HarnessMemoryQualityCaptureSnapshot;\r\n  personaSlug?: string;\r\n  personaEvidence?: PersonaContextEvidenceSnapshot;\r\n  contextEnvelopeEvidence?: ContextEnvelopeEvidenceSnapshot;\r\n  leaseOwner?: string;\r\n  /** Fencing token from claim \u2014 sent on renew/completion when set. */\r\n  leaseToken?: string;\r\n  dispatched?: boolean;\r\n  startedAt?: string;\r\n  /** Routing audit \u2014 which rule selected model/provider (dispatch inference). */\r\n  routingRule?: string;\r\n  requestedModel?: string;\r\n  /** Orchestration provider/model/auth-source/cost audit (no OAuth secrets). */\r\n  orchestrationAudit?: import(\"./orchestration-providers/types.js\").OrchestrationRoutingAudit;\r\n  /** Board task metadata for landing/PR-handoff gates (set at dispatch). */\r\n  executorRef?: string;\r\n  parentTaskId?: string;\r\n  taskTitle?: string;\r\n  taskPrUrl?: string;\r\n  /** Canonical target PR for repair workers (must not spawn duplicate PRs). */\r\n  repairTargetPrUrl?: string;\r\n  repairTargetBranch?: string;\r\n  /** Set when stale-reconcile patches a dead/stale worker record. */\r\n  reconciledAt?: string;\r\n  reconcileReason?: string;\r\n  /** Last heartbeat blocker text successfully synced to plan-progress-sync (dedupe). */\r\n  lastSyncedHeartbeatBlocker?: string;\r\n  /**\r\n   * Set when the most recent AgentOS completion replay for this finished worker\r\n   * was rejected (e.g. a revoked / expired / cross-workspace runner token) or\r\n   * otherwise failed. While set, the worker is NOT treated as cleanly done:\r\n   * `finalizeStaleRuns` keeps the run non-terminal and the board surfaces it.\r\n   * Cleared once the completion is acknowledged (2xx). Local-only \u2014 never sent\r\n   * to the server as part of the worker's intrinsic status.\r\n   */\r\n  completionBlocker?: string;\r\n  /** ISO timestamp when `/harness/completion` returned 2xx for this worker. */\r\n  completionReportedAt?: string;\r\n  /** Snapshot from the acknowledged completion POST \u2014 local-only. */\r\n  completionSnapshot?: { finalResult?: unknown; prUrl?: string | null; summary?: string | null };\r\n  /** Audit tag for how `completionReportedAt` was set (`tryCompleteWorker`, `board-task-*`). */\r\n  completionAckSource?: string;\r\n  /** Local mirror of the last completion POST outcome. */\r\n  completionOutcome?: \"acknowledged\" | \"rejected\";\r\n  /** Truncated JSON body from the last acknowledged completion response. */\r\n  completionResponse?: unknown;\r\n  /**\r\n   * Direct/local worker with no board linkage \u2014 must not be mistaken for an\r\n   * AgentTask-backed harness worker in completion or dispatch paths.\r\n   */\r\n  localOnly?: boolean;\r\n  /** Sidecar PID when detached; used for observability only. */\r\n  completionSidecarPid?: number;\r\n  completionSidecarSpawnFailedAt?: string;\r\n  /** One-off helper paths removed before completion (`kynver worker discard-disposable`). */\r\n  disposableArtifactsRemoved?: string[];\r\n}\r\n\r\nexport interface RawHarnessWorkerStatus {\r\n  runId: string;\r\n  worker: string;\r\n  pid?: number;\r\n  alive: boolean;\r\n  status: string;\r\n  attention: WorkerAttention;\r\n  branch: string;\r\n  worktreePath: string;\r\n  ownedPaths?: string[];\r\n  stdoutBytes: number;\r\n  stderrBytes: number;\r\n  heartbeatBytes: number;\r\n  firstEventAt: string | null;\r\n  lastEventAt: string | null;\r\n  lastActivityAt: string | null;\r\n  currentTool: string | null;\r\n  heartbeatCount: number;\r\n  lastHeartbeatAt: string | null;\r\n  lastHeartbeatPhase: string | null;\r\n  lastHeartbeatSummary: string | null;\r\n  heartbeatBlocker: string | null;\r\n  /** Parser-detected timestamp anomalies (e.g., future heartbeat ts). */\r\n  timestampAnomalies?: Array<{\r\n    kind: \"future_heartbeat_timestamp\";\r\n    observedAt: string;\r\n    clampedTo: string;\r\n  }>;\r\n  finalResult: unknown;\r\n  error?: string;\r\n  changedFiles: string[];\r\n  gitAncestry: GitAncestry;\r\n  /** Set by PR-ready handoff before completion is posted. */\r\n  prUrl?: string;\r\n  headCommit?: string;\r\n  /** Paths removed via `kynver worker discard-disposable` before completion POST. */\r\n  disposableArtifactsRemoved?: string[];\r\n  /** Fencing token from claim \u2014 echoed on completion when set. */\r\n  leaseToken?: string;\r\n  /** Lane A policy fields echoed on completion status for mirror recovery. */\r\n  instructionPolicyFingerprint?: string | null;\r\n  instructionPolicyEvidence?: InstructionPolicyEvidenceSnapshot | null;\r\n}\r\n\r\nexport interface WorkerStatusOptions {\r\n  /** Branch ref for ancestry when baseCommit is not set. */\r\n  base?: string;\r\n  /** Pinned SHA from run creation \u2014 preferred for ancestry vs a moving branch tip. */\r\n  baseCommit?: string;\r\n}\r\n\r\nexport function computeAttention(input: {\r\n  alive: boolean;\r\n  finalResult: unknown;\r\n  firstEventAt: string | null;\r\n  stdoutBytes: number;\r\n  stderrBytes?: number;\r\n  heartbeatBytes: number;\r\n  lastActivityAt: string | null;\r\n  heartbeatBlocker: string | null;\r\n  startedAt?: string;\r\n  /** stderr tail / parsed error for a worker that died without a final result. */\r\n  error?: string | null;\r\n  changedFiles?: string[];\r\n  gitAncestry?: GitAncestry | null;\r\n  completionBlocker?: string | null;\r\n  landingContract?: WorkerLandingContract | null;\r\n  prUrl?: string | null;\r\n  localOnly?: boolean;\r\n  taskId?: string | null;\r\n  agentOsId?: string | null;\r\n  reconcileReason?: string | null;\r\n}): WorkerAttention {\r\n  const now = Date.now();\r\n  if (input.completionBlocker && !isSkippedTerminalCompletionBlocker(input.completionBlocker)) {\r\n    return { state: \"blocked\", reason: input.completionBlocker };\r\n  }\r\n  if (input.finalResult) {\r\n    if (input.localOnly && hasMergedTargetPrReconciliation(input.finalResult)) {\r\n      return { state: \"done\", reason: \"local-only worker superseded by merged PR\" };\r\n    }\r\n    const landingSnapshot = {\r\n      finalResult: input.finalResult,\r\n      changedFiles: input.changedFiles ?? [],\r\n      gitAncestry: input.gitAncestry ?? null,\r\n      prUrl: input.prUrl ?? null,\r\n    };\r\n    const landing = assessWorkerLanding(landingSnapshot);\r\n    if (landing.blocked) {\r\n      const detail = landingAttentionReason(landing);\r\n      return {\r\n        state: \"needs_attention\",\r\n        reason: landing.reason\r\n          ? `landing blocked (${landing.reason}): ${detail}`\r\n          : `landing blocked: ${detail}`,\r\n      };\r\n    }\r\n    if (input.landingContract) {\r\n      const contractVerdict = assessWorkerLandingContract({\r\n        contract: input.landingContract,\r\n        snapshot: landingSnapshot,\r\n        finalResult: input.finalResult,\r\n      });\r\n      const contractDetail = landingContractAttentionReason(contractVerdict);\r\n      if (contractDetail) {\r\n        return {\r\n          state: \"needs_attention\",\r\n          reason: contractVerdict.reason\r\n            ? `landing contract (${contractVerdict.reason}): ${contractDetail}`\r\n            : `landing contract: ${contractDetail}`,\r\n        };\r\n      }\r\n    }\r\n    return { state: \"done\", reason: \"final result recorded\" };\r\n  }\r\n  if (!input.alive) {\r\n    if (isAbandonedEmptyWorker(input)) {\r\n      return { state: \"done\", reason: \"empty abandoned worker record\" };\r\n    }\r\n    // A worker that exited without a final result is not always a silent stall:\r\n    // a recognizable startup/config failure (model/provider rejection, missing\r\n    // CLI, auth) is a structural blocker, not a generic needs_attention.\r\n    const classified = classifyExitFailure(input.error);\r\n    if (classified) return { state: \"blocked\", reason: classified.reason };\r\n    const salvage = assessExitedWorkerSalvage({\r\n      alive: false,\r\n      finalResult: null,\r\n      changedFiles: input.changedFiles,\r\n      gitAncestry: input.gitAncestry,\r\n    });\r\n    if (salvage?.salvageable) {\r\n      const tail = input.error?.trim();\r\n      return {\r\n        state: \"needs_attention\",\r\n        reason: tail ? `${salvage.attentionReason} (${tail})` : salvage.attentionReason,\r\n      };\r\n    }\r\n    const tail = input.error?.trim();\r\n    return {\r\n      state: \"needs_attention\",\r\n      reason: tail\r\n        ? `process exited without a final result: ${tail}`\r\n        : salvage?.attentionReason ?? \"process exited without a final result\",\r\n    };\r\n  }\r\n  if (input.heartbeatBlocker) {\r\n    return { state: \"blocked\", reason: `worker heartbeat reported blocker: ${input.heartbeatBlocker}` };\r\n  }\r\n  const startMs = input.startedAt ? Date.parse(input.startedAt) : NaN;\r\n  if (\r\n    !input.firstEventAt &&\r\n    input.stdoutBytes === 0 &&\r\n    input.heartbeatBytes === 0 &&\r\n    Number.isFinite(startMs) &&\r\n    now - startMs > NO_START_MS\r\n  ) {\r\n    return { state: \"needs_attention\", reason: `no first stream event ${secsAgo(startMs)}s after start` };\r\n  }\r\n  const actMs = input.lastActivityAt ? Date.parse(input.lastActivityAt) : NaN;\r\n  if (Number.isFinite(actMs) && now - actMs > STALE_MS) {\r\n    return { state: \"stale\", reason: `no log/event/heartbeat activity for ${secsAgo(actMs)}s` };\r\n  }\r\n  return { state: \"ok\", reason: \"recent activity\" };\r\n}\r\n\r\nfunction isSkippedTerminalCompletionBlocker(reason: string | null | undefined): boolean {\r\n  const text = reason?.trim();\r\n  if (!text) return false;\r\n  return /completion acknowledged but board not advanced/i.test(text) && /task already terminal/i.test(text);\r\n}\r\n\r\nfunction isAbandonedEmptyWorker(input: {\r\n  finalResult: unknown;\r\n  stdoutBytes: number;\r\n  stderrBytes?: number;\r\n  heartbeatBytes: number;\r\n  changedFiles?: string[];\r\n  error?: string | null;\r\n  taskId?: string | null;\r\n  agentOsId?: string | null;\r\n  reconcileReason?: string | null;\r\n}): boolean {\r\n  if (input.finalResult) return false;\r\n  if (input.taskId || input.agentOsId) return false;\r\n  if (input.stdoutBytes > 0 || (input.stderrBytes ?? 0) > 0 || input.heartbeatBytes > 0) return false;\r\n  if (input.error?.trim()) return false;\r\n  if ((input.changedFiles ?? []).some((line) => line.trim())) return false;\r\n  return /empty worker dir|marked abandoned/i.test(input.reconcileReason ?? \"\");\r\n}\r\n\r\nfunction hasMergedTargetPrReconciliation(value: unknown): boolean {\r\n  let record: Record<string, unknown> | null = null;\r\n  if (typeof value === \"string\") record = extractEmbeddedWorkerFinalResultRecord(value);\r\n  else if (value && typeof value === \"object\" && !Array.isArray(value)) record = value as Record<string, unknown>;\r\n  if (!record) return false;\r\n  const raw = record.targetPrReconciliation ?? record.target_pr_reconciliation;\r\n  if (!Array.isArray(raw)) return false;\r\n  return raw.some((item): item is TargetPrReconciliation => {\r\n    if (!item || typeof item !== \"object\" || Array.isArray(item)) return false;\r\n    return String((item as Record<string, unknown>).outcome ?? \"\").trim() === \"merged\";\r\n  });\r\n}\r\n\r\nfunction resolveFinalResult(\r\n  worker: HarnessWorkerRecord,\r\n  parsedFinalResult: unknown,\r\n  heartbeat: ReturnType<typeof parseHeartbeat>,\r\n): unknown {\r\n  const ackSnapshot = worker.completionSnapshot?.finalResult;\r\n  if (worker.completionAckSource === \"local-pr-merged-reconcile\" && ackSnapshot !== undefined && ackSnapshot !== null) {\r\n    return ackSnapshot;\r\n  }\r\n  if (parsedFinalResult) return parsedFinalResult;\r\n  if (ackSnapshot !== undefined && ackSnapshot !== null) return ackSnapshot;\r\n  return terminalFinalResultFromHeartbeat(heartbeat);\r\n}\r\n\r\nexport function computeWorkerStatus(worker: HarnessWorkerRecord, options: WorkerStatusOptions = {}): RawHarnessWorkerStatus {\r\n  const parsed = parseHarnessStream(worker.stdoutPath);\r\n  const heartbeat = parseHeartbeat(worker.heartbeatPath);\r\n  const completionAcknowledged =\r\n    typeof worker.completionReportedAt === \"string\" && worker.completionReportedAt.trim().length > 0;\r\n  const finalResult = resolveFinalResult(worker, parsed.finalResult, heartbeat);\r\n  const alive = completionAcknowledged ? false : isPidAlive(worker.pid);\r\n  const stdoutBytes = fileSize(worker.stdoutPath);\r\n  const stderrBytes = fileSize(worker.stderrPath);\r\n  const heartbeatBytes = fileSize(worker.heartbeatPath);\r\n  const changedFiles = gitStatusShort(worker.worktreePath);\r\n  const gitAncestry = computeGitAncestry(worker.worktreePath, {\r\n    base: options.base,\r\n    baseCommit: options.baseCommit,\r\n  });\r\n  const lastActivityAt = latestIso([\r\n    parsed.lastEventAt,\r\n    heartbeat.lastHeartbeatAt,\r\n    fileMtime(worker.stdoutPath),\r\n    fileMtime(worker.stderrPath),\r\n    fileMtime(worker.heartbeatPath),\r\n  ]);\r\n  // The error surfaced when a worker died without a final result: the parsed\r\n  // stream error, else the stderr tail. Computed before attention so a startup/\r\n  // config failure can be classified as a structured blocker.\r\n  const error =\r\n    parsed.error ||\r\n    (!alive && !finalResult ? tailFile(worker.stderrPath, 10).trim() || undefined : undefined);\r\n  const completionBlocker =\r\n    typeof worker.completionBlocker === \"string\" && worker.completionBlocker.trim()\r\n      ? worker.completionBlocker.trim()\r\n      : null;\r\n  const effectiveCompletionBlocker = isSkippedTerminalCompletionBlocker(completionBlocker)\r\n    ? null\r\n    : completionBlocker;\r\n  const landingContract: WorkerLandingContract | null = worker.repairTargetPrUrl\r\n    ? {\r\n        landingOnly: false,\r\n        targetPrUrls: [worker.repairTargetPrUrl],\r\n        targetPrUrl: worker.repairTargetPrUrl,\r\n        repairEnforceOriginalPr: true,\r\n      }\r\n    : null;\r\n\r\n  const attention = computeAttention({\r\n    alive,\r\n    finalResult,\r\n    firstEventAt: parsed.firstEventAt,\r\n    stdoutBytes,\r\n    stderrBytes,\r\n    heartbeatBytes,\r\n    lastActivityAt,\r\n    heartbeatBlocker: heartbeat.heartbeatBlocker,\r\n    startedAt: worker.startedAt,\r\n    error,\r\n    changedFiles,\r\n    gitAncestry,\r\n    completionBlocker: effectiveCompletionBlocker,\r\n    landingContract,\r\n    prUrl: worker.repairTargetPrUrl ?? worker.taskPrUrl ?? null,\r\n    localOnly: worker.localOnly === true,\r\n    taskId: worker.taskId ?? null,\r\n    agentOsId: worker.agentOsId ?? null,\r\n    reconcileReason: worker.reconcileReason ?? null,\r\n  });\r\n  const workerStatusLabel =\r\n    effectiveCompletionBlocker || attention.state === \"blocked\"\r\n      ? \"blocked\"\r\n      : completionAcknowledged || attention.state === \"done\"\r\n        ? \"done\"\r\n        : finalResult\r\n          ? \"exited\"\r\n          : alive\r\n            ? \"running\"\r\n            : \"exited\";\r\n  return {\r\n    runId: worker.runId,\r\n    worker: worker.name,\r\n    pid: worker.pid,\r\n    alive,\r\n    status: workerStatusLabel,\r\n    attention,\r\n    branch: worker.branch,\r\n    worktreePath: worker.worktreePath,\r\n    ownedPaths: worker.ownedPaths,\r\n    stdoutBytes,\r\n    stderrBytes,\r\n    heartbeatBytes,\r\n    firstEventAt: parsed.firstEventAt,\r\n    lastEventAt: parsed.lastEventAt,\r\n    lastActivityAt,\r\n    currentTool: completionAcknowledged ? null : parsed.currentTool,\r\n    heartbeatCount: heartbeat.heartbeatCount,\r\n    lastHeartbeatAt: heartbeat.lastHeartbeatAt,\r\n    lastHeartbeatPhase: heartbeat.lastHeartbeatPhase,\r\n    lastHeartbeatSummary: heartbeat.lastHeartbeatSummary,\r\n    heartbeatBlocker: heartbeat.heartbeatBlocker,\r\n    timestampAnomalies: heartbeat.timestampAnomalies,\r\n    finalResult,\r\n    error,\r\n    changedFiles,\r\n    gitAncestry,\r\n    instructionPolicyFingerprint: worker.instructionPolicyFingerprint ?? null,\r\n    instructionPolicyEvidence: worker.instructionPolicyEvidence ?? null,\r\n  };\r\n}\r\n\r\nexport function isFinishedWorkerStatus(status: RawHarnessWorkerStatus): boolean {\r\n  if (status.finalResult) return true;\r\n  if (status.alive === false) return true;\r\n  if (status.status === \"exited\" || status.status === \"done\") return true;\r\n  return false;\r\n}\r\n\r\n/** True when a worker recorded a final result but failed the landing gate. */\r\nexport function isLandingBlockedWorkerStatus(status: RawHarnessWorkerStatus): boolean {\r\n  if (!status.finalResult) return false;\r\n  return status.attention.state === \"needs_attention\" || status.attention.state === \"blocked\";\r\n}\r\n\r\nexport function deriveRunStatus(fallback: string, workers: Array<{ attention?: string; status?: string }>): string {\r\n  if (workers.length === 0) return fallback;\r\n  if (workers.some((w) => w.attention === \"needs_attention\" || w.attention === \"stale\" || w.attention === \"blocked\")) {\r\n    return \"needs_attention\";\r\n  }\r\n  if (workers.every((w) => w.status === \"done\")) return \"done\";\r\n  if (workers.some((w) => w.status === \"running\")) return \"running\";\r\n  return fallback;\r\n}\r\n", "const HARNESS_LEASE_PREFIX = \"kynver-harness:\";\r\nconst RUNNER_MARKER = \"@runner:\";\r\n\r\nfunction trimOrNull(value: string | null | undefined): string | null {\r\n  if (!value?.trim()) return null;\r\n  return value.trim();\r\n}\r\n\r\n/** Run id embedded in a harness lease owner (`kynver-harness:<runId>` or `@runner:` suffix). */\r\nexport function parseHarnessLeaseRunId(leaseOwner: string | null | undefined): string | null {\r\n  const owner = trimOrNull(leaseOwner);\r\n  if (!owner?.startsWith(HARNESS_LEASE_PREFIX)) return null;\r\n  const body = owner.slice(HARNESS_LEASE_PREFIX.length);\r\n  const atRunner = body.indexOf(RUNNER_MARKER);\r\n  if (atRunner >= 0) return body.slice(0, atRunner).trim() || null;\r\n  return body.trim() || null;\r\n}\r\n\r\nexport function parseHarnessLeaseRunnerId(leaseOwner: string | null | undefined): string | null {\r\n  const owner = trimOrNull(leaseOwner);\r\n  if (!owner) return null;\r\n  const idx = owner.indexOf(RUNNER_MARKER);\r\n  if (idx < 0) return null;\r\n  return owner.slice(idx + RUNNER_MARKER.length).trim() || null;\r\n}\r\n\r\n/** Stamp runner id into harness lease owner for cross-runner attribution. */\r\nexport function formatHarnessLeaseOwner(runId: string, runnerId: string): string {\r\n  const run = runId.trim();\r\n  const runner = runnerId.trim();\r\n  return `${HARNESS_LEASE_PREFIX}${run}${RUNNER_MARKER}${runner}`;\r\n}\r\n\r\n/** True when `leaseOwner` belongs to the harness run identified by `runId`. */\r\nexport function harnessLeaseOwnerMatchesRun(\r\n  leaseOwner: string | null | undefined,\r\n  runId: string,\r\n): boolean {\r\n  const expectedRun = trimOrNull(runId);\r\n  if (!expectedRun) return false;\r\n  return parseHarnessLeaseRunId(leaseOwner) === expectedRun;\r\n}\r\n\r\n/** Lease owner sent on renew/release \u2014 must match the row exactly. */\r\nexport function resolveHarnessLeaseOwnerForRenewal(input: {\r\n  runId: string;\r\n  workerLeaseOwner?: string | null;\r\n  runnerId: string;\r\n}): string {\r\n  const stored = trimOrNull(input.workerLeaseOwner);\r\n  if (stored && harnessLeaseOwnerMatchesRun(stored, input.runId)) {\r\n    return stored;\r\n  }\r\n  return formatHarnessLeaseOwner(input.runId, input.runnerId);\r\n}\r\n", "import { harnessLeaseOwnerMatchesRun } from \"../harness-lease-owner.js\";\r\nimport { STALE_MS, type HarnessWorkerRecord, type RawHarnessWorkerStatus } from \"../status.js\";\r\nimport { isPidAlive } from \"../util.js\";\r\nimport type { TaskLeaseSnapshot, WorkerHealthClass } from \"./monitor.types.js\";\r\n\r\nexport interface WorkerHealthClassification {\r\n  health: WorkerHealthClass;\r\n  reason: string;\r\n}\r\n\r\n/**\r\n * Classify harness worker disk state vs optional board lease snapshot.\r\n * `running` on AgentTask means live executor lease \u2014 not plan-row `in_progress`.\r\n */\r\nexport function classifyWorkerHealth(input: {\r\n  worker: HarnessWorkerRecord;\r\n  status: RawHarnessWorkerStatus;\r\n  taskLease?: TaskLeaseSnapshot | null;\r\n}): WorkerHealthClassification {\r\n  const { worker, status, taskLease } = input;\r\n  const leaseOwner = taskLease?.leaseOwner ?? null;\r\n\r\n  if (worker.dispatched && taskLease) {\r\n    if (\r\n      taskLease.status === \"running\" &&\r\n      leaseOwner &&\r\n      !harnessLeaseOwnerMatchesRun(leaseOwner, worker.runId)\r\n    ) {\r\n      return {\r\n        health: \"orphaned\",\r\n        reason: `task lease held by ${leaseOwner}, expected harness run ${worker.runId}`,\r\n      };\r\n    }\r\n    if (taskLease.status === \"running\" && !status.alive && !status.finalResult) {\r\n      return {\r\n        health: \"orphaned\",\r\n        reason: \"board task running but worker process is not alive\",\r\n      };\r\n    }\r\n  }\r\n\r\n  if (worker.status === \"running\" && !status.alive && !status.finalResult) {\r\n    return {\r\n      health: \"orphaned\",\r\n      reason: \"worker.json still running but process is dead\",\r\n    };\r\n  }\r\n\r\n  if (status.attention.state === \"stale\") {\r\n    return { health: \"stale\", reason: status.attention.reason };\r\n  }\r\n\r\n  const hbMs = status.lastHeartbeatAt ? Date.parse(status.lastHeartbeatAt) : NaN;\r\n  if (status.alive && Number.isFinite(hbMs) && Date.now() - hbMs > STALE_MS) {\r\n    return {\r\n      health: \"stale\",\r\n      reason: `heartbeat older than ${Math.floor(STALE_MS / 1000)}s`,\r\n    };\r\n  }\r\n\r\n  if (status.alive && worker.pid && !isPidAlive(worker.pid)) {\r\n    return { health: \"orphaned\", reason: \"pid recorded but process is not alive\" };\r\n  }\r\n\r\n  if (taskLease?.status === \"running\" && !status.alive && status.finalResult) {\r\n    return {\r\n      health: \"healthy\",\r\n      reason: \"finished worker awaiting completion replay\",\r\n    };\r\n  }\r\n\r\n  return {\r\n    health: \"healthy\",\r\n    reason: status.attention.reason || \"worker within expected lifecycle bounds\",\r\n  };\r\n}\r\n", "import { existsSync } from \"node:fs\";\r\nimport { homedir } from \"node:os\";\r\nimport path from \"node:path\";\r\nimport { loadUserConfig } from \"./config.js\";\r\nimport { resolveUserPath } from \"./path-values.js\";\r\nimport { safeSlug } from \"./util.js\";\r\n\r\nconst LEGACY_ROOT = path.join(homedir(), \".openclaw\", \"harness\");\r\n\r\nconst HARNESS_LAYOUT_DIR_NAMES = new Set([\"runs\", \"worktrees\"]);\r\n\r\n/**\r\n * Canonical harness root: the directory that contains `runs/` and `worktrees/`.\r\n * Strips mistaken trailing layout segments (e.g. env set to `.../harness/runs`).\r\n * Server mirror: agent-os.harness-root.ts\r\n */\r\nexport function normalizeHarnessRoot(root: string): string {\r\n  let resolved = path.resolve(resolveUserPath(root.trim()));\r\n  while (HARNESS_LAYOUT_DIR_NAMES.has(path.basename(resolved))) {\r\n    resolved = path.dirname(resolved);\r\n  }\r\n  return resolved;\r\n}\r\n\r\n/** Canonical harness root for CLI/workers. */\r\nexport function resolveHarnessRoot(): string {\r\n  const env = process.env.KYNVER_HARNESS_ROOT || process.env.OPUS_HARNESS_ROOT;\r\n  if (env) return normalizeHarnessRoot(env);\r\n  const configured = loadUserConfig().harnessRoot?.trim();\r\n  if (configured) return normalizeHarnessRoot(configured);\r\n  const kynverRoot = path.join(homedir(), \".kynver\", \"harness\");\r\n  if (existsSync(kynverRoot)) return kynverRoot;\r\n  if (existsSync(LEGACY_ROOT)) return LEGACY_ROOT;\r\n  return kynverRoot;\r\n}\r\n\r\nexport function harnessRunsDir(harnessRoot: string): string {\r\n  return path.join(normalizeHarnessRoot(harnessRoot), \"runs\");\r\n}\r\n\r\nexport function harnessWorktreesDir(harnessRoot: string): string {\r\n  return path.join(normalizeHarnessRoot(harnessRoot), \"worktrees\");\r\n}\r\n\r\nexport function getHarnessPaths() {\r\n  const harnessRoot = resolveHarnessRoot();\r\n  return {\r\n    harnessRoot,\r\n    runsDir: harnessRunsDir(harnessRoot),\r\n    worktreesDir: harnessWorktreesDir(harnessRoot),\r\n  };\r\n}\r\n\r\nexport function runDir(runsDir: string, id: string): string {\r\n  return path.join(runsDir, safeSlug(id));\r\n}\r\n", "import { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\r\nimport { homedir, totalmem } from \"node:os\";\r\nimport path from \"node:path\";\r\nimport { discoverDefaultRepo } from \"./default-repo-discovery.js\";\r\nimport { displayUserPath, redactHomePath } from \"./path-values.js\";\r\nimport { trimTrailingSlash } from \"./util.js\";\r\nimport { normalizeWorkerPoolBoxKind, resolveBoxIdentity } from \"./box-identity.js\";\r\nimport { recommendSetupWorkerCap } from \"./worker-cap-source.js\";\r\nimport { observeRunnerDiskGate } from \"./disk-gate.js\";\r\nimport os from \"node:os\";\r\n\r\nexport interface KynverUserConfig {\r\n  apiBaseUrl?: string;\r\n  agentOsSlug?: string;\r\n  agentOsId?: string;\r\n  defaultRepo?: string;\r\n  workerProvider?: string;\r\n  /** Default Claude model when dispatch does not infer or pass `--model`. */\r\n  defaultModel?: string;\r\n  harnessRoot?: string;\r\n  /**\r\n   * Operator attestation that the hosted Kynver deployment uses this scheduler provider\r\n   * (set on user runners after Vercel env cutover \u2014 scheduling is deployment-owned).\r\n   */\r\n  deploymentSchedulerProvider?: \"qstash\" | \"kynver-cron\" | \"openclaw-cron\";\r\n  /** Physical box pool for capacity snapshots (`forge` | `ghost`). Set via `kynver setup --box-kind`. */\r\n  boxKind?: \"ghost\" | \"forge\";\r\n  /** Max concurrent workers on this machine. Omit to auto-size from RAM. */\r\n  maxConcurrentWorkers?: number;\r\n  /** Where maxConcurrentWorkers came from. */\r\n  maxConcurrentWorkersSource?: \"setup-auto\" | \"setup-flag\" | \"operator\";\r\n  /** @internal Advanced tuning \u2014 not required for setup. */\r\n  perWorkerMemBytes?: number;\r\n  /** @internal Advanced tuning \u2014 not required for setup. */\r\n  memReserveBytes?: number;\r\n  /** @internal Advanced tuning \u2014 not required for setup. */\r\n  memUtilization?: number;\r\n}\r\n\r\nconst CONFIG_DIR = path.join(homedir(), \".kynver\");\r\nconst CONFIG_FILE = path.join(CONFIG_DIR, \"config.json\");\r\nconst CREDENTIALS_FILE = path.join(CONFIG_DIR, \"credentials\");\r\n\r\ninterface KynverCredentialsFile {\r\n  apiKey?: string;\r\n  /** Scoped `krc1.*` runner token for AgentOS by-id callbacks. */\r\n  runnerToken?: string;\r\n  runnerTokenAgentOsId?: string;\r\n}\r\n\r\nexport function loadUserConfig(): KynverUserConfig {\r\n  if (!existsSync(CONFIG_FILE)) return {};\r\n  try {\r\n    return JSON.parse(readFileSync(CONFIG_FILE, \"utf8\")) as KynverUserConfig;\r\n  } catch {\r\n    return {};\r\n  }\r\n}\r\n\r\nexport function saveUserConfig(config: KynverUserConfig): void {\r\n  mkdirSync(CONFIG_DIR, { recursive: true });\r\n  writeFileSync(CONFIG_FILE, `${JSON.stringify(normalizeConfigPaths(config), null, 2)}\\n`, { mode: 0o600 });\r\n}\r\n\r\n/** Persist path fields with `~` instead of absolute home directories. */\r\nexport function normalizeConfigPaths(config: KynverUserConfig): KynverUserConfig {\r\n  return {\r\n    ...config,\r\n    ...(config.harnessRoot?.trim() ? { harnessRoot: redactHomePath(config.harnessRoot.trim()) } : {}),\r\n    ...(config.defaultRepo?.trim() ? { defaultRepo: redactHomePath(config.defaultRepo.trim()) } : {}),\r\n  };\r\n}\r\n\r\n/** Values for setup output (never emit `/home/<user>/\u2026`). */\r\nexport function presentUserConfig(config: KynverUserConfig): KynverUserConfig {\r\n  return normalizeConfigPaths(config);\r\n}\r\n\r\nfunction inferSetupFields(\r\n  existing: KynverUserConfig,\r\n  args: Record<string, string | boolean>,\r\n): Partial<KynverUserConfig> {\r\n  const creds = loadCredentialsFile();\r\n  const apiBaseUrl =\r\n    (typeof args.apiBaseUrl === \"string\" ? args.apiBaseUrl : undefined) ||\r\n    existing.apiBaseUrl?.trim() ||\r\n    process.env.KYNVER_API_URL?.trim() ||\r\n    process.env.KYNVER_CRON_FIRE_BASE_URL?.trim() ||\r\n    process.env.OPENCLAW_CRON_FIRE_BASE_URL?.trim();\r\n  const agentOsId =\r\n    (typeof args.agentOsId === \"string\" ? args.agentOsId : undefined) ||\r\n    existing.agentOsId?.trim() ||\r\n    process.env.KYNVER_AGENT_OS_ID?.trim() ||\r\n    (creds.runnerToken?.trim().startsWith(\"krc1.\") ? creds.runnerTokenAgentOsId?.trim() : undefined);\r\n  const explicitRepo =\r\n    typeof args.repo === \"string\"\r\n      ? args.repo\r\n      : args.discoverRepo === true || args.discoverRepo === \"true\"\r\n        ? discoverDefaultRepo()?.repo\r\n        : undefined;\r\n  const defaultRepo =\r\n    explicitRepo ||\r\n    existing.defaultRepo?.trim() ||\r\n    process.env.KYNVER_DEFAULT_REPO?.trim() ||\r\n    process.env.KYNVER_HARNESS_REPO?.trim() ||\r\n    discoverDefaultRepo()?.repo;\r\n  const harnessRoot =\r\n    (typeof args.harnessRoot === \"string\" ? args.harnessRoot : undefined) ||\r\n    existing.harnessRoot?.trim() ||\r\n    process.env.KYNVER_HARNESS_ROOT?.trim() ||\r\n    process.env.OPUS_HARNESS_ROOT?.trim();\r\n\r\n  return {\r\n    ...(apiBaseUrl ? { apiBaseUrl: trimTrailingSlash(apiBaseUrl) } : {}),\r\n    ...(agentOsId ? { agentOsId } : {}),\r\n    ...(defaultRepo ? { defaultRepo } : {}),\r\n    ...(harnessRoot ? { harnessRoot } : {}),\r\n    ...(typeof args.agentOsSlug === \"string\"\r\n      ? { agentOsSlug: args.agentOsSlug }\r\n      : existing.agentOsSlug\r\n        ? { agentOsSlug: existing.agentOsSlug }\r\n        : {}),\r\n  };\r\n}\r\n\r\nconst SETUP_PER_WORKER_MEM_BYTES = 500 * 1024 * 1024;\r\nconst SETUP_MEM_RESERVE_BYTES = 4 * 1024 * 1024 * 1024;\r\nconst SETUP_MEM_UTILIZATION = 0.85;\r\nconst SETUP_AUTO_MAX_WORKERS_CEILING = 64;\r\n\r\nfunction normalizeBoxKind(raw: unknown): \"ghost\" | \"forge\" | undefined {\r\n  const kind = String(raw ?? \"\").trim().toLowerCase();\r\n  if (!kind) return undefined;\r\n  if (kind === \"ghost\" || kind.includes(\"ghost\") || kind.includes(\"openclaw\")) return \"ghost\";\r\n  if (kind === \"forge\" || kind.includes(\"forge\")) return \"forge\";\r\n  return undefined;\r\n}\r\n\r\nexport function computeSetupAutoMaxWorkers(totalMemBytes: number): number {\r\n  const budgetBytes = Math.max(0, Math.floor(totalMemBytes * SETUP_MEM_UTILIZATION) - SETUP_MEM_RESERVE_BYTES);\r\n  const raw = Math.max(1, Math.floor(budgetBytes / SETUP_PER_WORKER_MEM_BYTES));\r\n  return Math.min(raw, SETUP_AUTO_MAX_WORKERS_CEILING);\r\n}\r\n\r\nexport function resolveSetupWorkerConfig(\r\n  existing: KynverUserConfig,\r\n  args: Record<string, string | boolean>,\r\n  totalMemBytes = totalmem(),\r\n): Pick<KynverUserConfig, \"maxConcurrentWorkers\" | \"maxConcurrentWorkersSource\" | \"boxKind\"> {\r\n  const maxWorkersRaw =\r\n    typeof args.maxWorkers === \"string\"\r\n      ? args.maxWorkers\r\n      : typeof args.maxConcurrentWorkers === \"string\"\r\n        ? args.maxConcurrentWorkers\r\n        : undefined;\r\n  const explicitBoxKindArg =\r\n    typeof args.boxKind === \"string\"\r\n      ? args.boxKind\r\n      : typeof args[\"box-kind\"] === \"string\"\r\n        ? String(args[\"box-kind\"])\r\n        : undefined;\r\n  const boxKind = resolveBoxIdentity(process.env, {\r\n    ...existing,\r\n    ...(explicitBoxKindArg ? { boxKind: normalizeWorkerPoolBoxKind(explicitBoxKindArg) } : {}),\r\n  }).boxKind;\r\n  const diskGate = observeRunnerDiskGate({\r\n    diskPath: typeof args.diskPath === \"string\" ? args.diskPath : \"/\",\r\n  });\r\n  const capRecommendation = recommendSetupWorkerCap({\r\n    totalMemBytes,\r\n    diskPath: diskGate.path,\r\n    diskGateOk: diskGate.ok,\r\n    diskFreeBytes: diskGate.freeBytes,\r\n    config: existing,\r\n  });\r\n  if (maxWorkersRaw) {\r\n    return {\r\n      maxConcurrentWorkers: Math.max(1, Math.floor(Number(maxWorkersRaw))),\r\n      maxConcurrentWorkersSource: \"setup-flag\",\r\n      boxKind,\r\n    };\r\n  }\r\n  if (existing.maxConcurrentWorkers !== undefined && existing.maxConcurrentWorkers !== null) {\r\n    return {\r\n      maxConcurrentWorkers: Math.max(1, Math.floor(Number(existing.maxConcurrentWorkers))),\r\n      maxConcurrentWorkersSource: existing.maxConcurrentWorkersSource ?? \"operator\",\r\n      boxKind,\r\n    };\r\n  }\r\n  return {\r\n    maxConcurrentWorkers: capRecommendation.recommendedMaxWorkers,\r\n    maxConcurrentWorkersSource: \"setup-auto\",\r\n    boxKind,\r\n  };\r\n}\r\n\r\nfunction loadCredentialsFile(): KynverCredentialsFile {\r\n  if (!existsSync(CREDENTIALS_FILE)) return {};\r\n  try {\r\n    return JSON.parse(readFileSync(CREDENTIALS_FILE, \"utf8\")) as KynverCredentialsFile;\r\n  } catch {\r\n    return {};\r\n  }\r\n}\r\n\r\nfunction saveCredentialsFile(parsed: KynverCredentialsFile): void {\r\n  mkdirSync(CONFIG_DIR, { recursive: true });\r\n  writeFileSync(CREDENTIALS_FILE, `${JSON.stringify(parsed, null, 2)}\\n`, { mode: 0o600 });\r\n}\r\n\r\nexport function loadApiKey(): string | undefined {\r\n  if (process.env.KYNVER_API_KEY) return process.env.KYNVER_API_KEY;\r\n  return loadCredentialsFile().apiKey;\r\n}\r\n\r\nexport function saveApiKey(apiKey: string): void {\r\n  saveCredentialsFile({ ...loadCredentialsFile(), apiKey });\r\n}\r\n\r\nexport function loadRunnerToken(agentOsId?: string): string | undefined {\r\n  const envToken = process.env.KYNVER_RUNNER_TOKEN?.trim();\r\n  if (envToken) return envToken;\r\n\r\n  const creds = loadCredentialsFile();\r\n  if (!creds.runnerToken) return undefined;\r\n  if (agentOsId && creds.runnerTokenAgentOsId && creds.runnerTokenAgentOsId !== agentOsId) {\r\n    return undefined;\r\n  }\r\n  return creds.runnerToken;\r\n}\r\n\r\nexport function saveRunnerToken(agentOsId: string, token: string): void {\r\n  saveCredentialsFile({\r\n    ...loadCredentialsFile(),\r\n    runnerToken: token,\r\n    runnerTokenAgentOsId: agentOsId,\r\n  });\r\n}\r\n\r\nexport function resolveBaseUrl(argsBaseUrl?: string): string {\r\n  const baseUrl = resolveConfiguredBaseUrl(argsBaseUrl);\r\n  if (!baseUrl) failConfig(\"requires --base-url, KYNVER_API_URL, KYNVER_CRON_FIRE_BASE_URL, or ~/.kynver/config.json apiBaseUrl\");\r\n  return baseUrl;\r\n}\r\n\r\nfunction resolveConfiguredBaseUrl(argsBaseUrl?: string): string | undefined {\r\n  const baseUrl =\r\n    argsBaseUrl ||\r\n    process.env.KYNVER_API_URL ||\r\n    process.env.KYNVER_CRON_FIRE_BASE_URL ||\r\n    process.env.OPENCLAW_CRON_FIRE_BASE_URL ||\r\n    loadUserConfig().apiBaseUrl;\r\n  return baseUrl ? trimTrailingSlash(String(baseUrl)) : undefined;\r\n}\r\n\r\nfunction resolveConfiguredCallbackSecret(argsSecret?: string, agentOsId?: string): string | undefined {\r\n  const scoped =\r\n    argsSecret ||\r\n    loadRunnerToken(agentOsId) ||\r\n    (agentOsId ? undefined : loadRunnerToken(loadUserConfig().agentOsId));\r\n  if (scoped) return String(scoped);\r\n\r\n  const globalSecret =\r\n    process.env.KYNVER_RUNTIME_SECRET ||\r\n    process.env.KYNVER_CRON_SECRET ||\r\n    process.env.OPENCLAW_CRON_SECRET;\r\n  if (globalSecret) {\r\n    console.warn(\r\n      \"[kynver] using deployment-level callback secret; run `kynver runner credential --agent-os-id <id>` for a scoped token\",\r\n    );\r\n    return String(globalSecret);\r\n  }\r\n\r\n  return undefined;\r\n}\r\n\r\nexport function resolveCallbackSecret(argsSecret?: string, agentOsId?: string): string {\r\n  const configured = resolveConfiguredCallbackSecret(argsSecret, agentOsId);\r\n  if (configured) return configured;\r\n\r\n  failConfig(\r\n    \"requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, KYNVER_API_KEY with an API base URL to mint one, or (legacy) KYNVER_RUNTIME_SECRET / KYNVER_CRON_SECRET / OPENCLAW_CRON_SECRET\",\r\n  );\r\n}\r\n\r\nexport async function resolveCallbackSecretWithMint(\r\n  argsSecret?: string,\r\n  agentOsId?: string,\r\n  opts?: { baseUrl?: string },\r\n): Promise<string> {\r\n  const configured = resolveConfiguredCallbackSecret(argsSecret, agentOsId);\r\n  if (configured) return configured;\r\n\r\n  const apiKey = loadApiKey();\r\n  const baseUrl = resolveConfiguredBaseUrl(opts?.baseUrl);\r\n  if (apiKey && agentOsId && baseUrl) {\r\n    try {\r\n      const token = await fetchRunnerCredential(agentOsId, { baseUrl, apiKey });\r\n      saveRunnerToken(agentOsId, token);\r\n      return token;\r\n    } catch (error) {\r\n      failConfig(`runner credential mint failed: ${(error as Error).message}`);\r\n    }\r\n  }\r\n\r\n  failConfig(\r\n    \"requires --secret, KYNVER_RUNNER_TOKEN, a scoped runner token (`kynver runner credential`), ~/.kynver/credentials runnerToken, KYNVER_API_KEY with an API base URL to mint one, or (legacy) KYNVER_RUNTIME_SECRET / KYNVER_CRON_SECRET / OPENCLAW_CRON_SECRET\",\r\n  );\r\n}\r\n\r\n/**\r\n * Force-mint a fresh scoped runner token for `agentOsId`, bypassing any cached\r\n * or env token. Recovery path for a callback that 401s because the configured\r\n * token is revoked, expired, or scoped to a *different* workspace (the\r\n * self-linked repair case). Requires an API key + base URL to mint; returns\r\n * `null` when a fresh token cannot be obtained, so the caller degrades to a\r\n * structural blocker instead of papering the worker over as done.\r\n */\r\nexport async function refreshRunnerToken(\r\n  agentOsId: string,\r\n  opts?: { baseUrl?: string },\r\n): Promise<string | null> {\r\n  const apiKey = loadApiKey();\r\n  const baseUrl = resolveConfiguredBaseUrl(opts?.baseUrl);\r\n  if (!apiKey || !agentOsId || !baseUrl) return null;\r\n  try {\r\n    const token = await fetchRunnerCredential(agentOsId, { baseUrl, apiKey });\r\n    saveRunnerToken(agentOsId, token);\r\n    return token;\r\n  } catch {\r\n    return null;\r\n  }\r\n}\r\n\r\nexport async function refreshRunnerTokenForAuthFailure(\r\n  rejectedSecret: string,\r\n  agentOsId: string,\r\n  opts?: { baseUrl?: string },\r\n): Promise<{ ok: true; token: string } | { ok: false; reason: string }> {\r\n  const apiKey = loadApiKey();\r\n  const baseUrl = resolveConfiguredBaseUrl(opts?.baseUrl);\r\n  if (!apiKey) return { ok: false, reason: \"KYNVER_API_KEY is required to refresh a rejected runner token\" };\r\n  if (!agentOsId) return { ok: false, reason: \"agentOsId is required to refresh a rejected runner token\" };\r\n  if (!baseUrl) return { ok: false, reason: \"KYNVER_API_URL or --base-url is required to refresh a rejected runner token\" };\r\n\r\n  try {\r\n    const token = await fetchRunnerCredential(agentOsId, { baseUrl, apiKey });\r\n    if (token && token !== rejectedSecret) {\r\n      saveRunnerToken(agentOsId, token);\r\n      return { ok: true, token };\r\n    }\r\n    return { ok: false, reason: \"runner credential refresh returned the rejected token\" };\r\n  } catch (error) {\r\n    return { ok: false, reason: (error as Error).message };\r\n  }\r\n}\r\n\r\nexport async function fetchRunnerCredential(\r\n  agentOsId: string,\r\n  opts?: { baseUrl?: string; apiKey?: string },\r\n): Promise<string> {\r\n  const apiKey = opts?.apiKey || loadApiKey();\r\n  if (!apiKey) throw new Error(\"API key required \u2014 run `kynver login` first\");\r\n\r\n  const base = resolveBaseUrl(opts?.baseUrl);\r\n  const url = `${base}/api/agent-os/by-id/${encodeURIComponent(agentOsId)}/runner-credentials`;\r\n  const res = await fetch(url, {\r\n    method: \"POST\",\r\n    headers: {\r\n      \"Content-Type\": \"application/json\",\r\n      Authorization: `Bearer ${apiKey}`,\r\n    },\r\n    body: JSON.stringify({}),\r\n  });\r\n\r\n  const text = await res.text();\r\n  let parsed: { token?: string; error?: string } | null = null;\r\n  try {\r\n    parsed = JSON.parse(text) as { token?: string; error?: string };\r\n  } catch {\r\n    parsed = null;\r\n  }\r\n  if (!res.ok || !parsed?.token) {\r\n    throw new Error(\r\n      `runner credential mint failed (${res.status}): ${parsed?.error ?? text.slice(0, 200)}`,\r\n    );\r\n  }\r\n  return parsed.token;\r\n}\r\n\r\nexport async function mintRunnerCredential(args: Record<string, string | boolean>): Promise<void> {\r\n  const agentOsId =\r\n    (args.agentOsId ? String(args.agentOsId) : loadUserConfig().agentOsId) || \"\";\r\n  if (!agentOsId) failConfig(\"runner credential requires --agent-os-id or agentOsId in ~/.kynver/config.json\");\r\n\r\n  try {\r\n    const token = await fetchRunnerCredential(agentOsId, {\r\n      baseUrl: args.baseUrl ? String(args.baseUrl) : undefined,\r\n    });\r\n    saveRunnerToken(agentOsId, token);\r\n    console.log(\r\n      JSON.stringify(\r\n        {\r\n          ok: true,\r\n          agentOsId,\r\n          credentialsPath: displayUserPath(CREDENTIALS_FILE),\r\n          tokenPrefix: `${token.slice(0, 12)}\u2026`,\r\n          note: \"Scoped runner token saved; callbacks use X-Kynver-Runner-Token.\",\r\n        },\r\n        null,\r\n        2,\r\n      ),\r\n    );\r\n  } catch (err) {\r\n    console.error(err instanceof Error ? err.message : String(err));\r\n    process.exit(1);\r\n  }\r\n}\r\n\r\nfunction failConfig(message: string): never {\r\n  console.error(message);\r\n  process.exit(1);\r\n}\r\n\r\nexport function parseArgs(argv: string[]): Record<string, string | boolean> {\r\n  const args: Record<string, string | boolean> = {};\r\n  for (let i = 0; i < argv.length; i++) {\r\n    const item = argv[i];\r\n    if (!item.startsWith(\"--\")) continue;\r\n    const key = item.slice(2).replace(/-([a-z])/g, (_, c: string) => c.toUpperCase());\r\n    const next = argv[i + 1];\r\n    if (!next || next.startsWith(\"--\")) args[key] = true;\r\n    else {\r\n      args[key] = next;\r\n      i++;\r\n    }\r\n  }\r\n  return args;\r\n}\r\n\r\nexport async function runSetup(args: Record<string, string | boolean>): Promise<void> {\r\n  const existing = loadUserConfig();\r\n  const diskGate = observeRunnerDiskGate({\r\n    diskPath: typeof args.diskPath === \"string\" ? args.diskPath : \"/\",\r\n  });\r\n  const capRecommendation = recommendSetupWorkerCap({\r\n    totalMemBytes: os.totalmem(),\r\n    diskPath: diskGate.path,\r\n    diskGateOk: diskGate.ok,\r\n    diskFreeBytes: diskGate.freeBytes,\r\n    config: existing,\r\n  });\r\n  const workerConfig = resolveSetupWorkerConfig(existing, args);\r\n  const config: KynverUserConfig = normalizeConfigPaths({\r\n    ...existing,\r\n    ...inferSetupFields(existing, args),\r\n    ...workerConfig,\r\n    workerProvider:\r\n      typeof args.provider === \"string\"\r\n        ? args.provider\r\n        : existing.workerProvider || \"cursor\",\r\n  });\r\n  saveUserConfig(config);\r\n  const boxIdentity = resolveBoxIdentity(process.env, config);\r\n\r\n  let runnerCredentialNote: string | undefined;\r\n  const apiKey = loadApiKey();\r\n  const agentOsId = config.agentOsId;\r\n  if (apiKey && agentOsId) {\r\n    try {\r\n      const token = await fetchRunnerCredential(agentOsId, {\r\n        baseUrl: typeof args.apiBaseUrl === \"string\" ? args.apiBaseUrl : config.apiBaseUrl,\r\n        apiKey,\r\n      });\r\n      saveRunnerToken(agentOsId, token);\r\n      runnerCredentialNote = \"Scoped runner token minted and saved to ~/.kynver/credentials.\";\r\n    } catch {\r\n      runnerCredentialNote =\r\n        \"Runner token not minted (server offline or master secret unset). Run `kynver runner credential` after deploy.\";\r\n    }\r\n  }\r\n\r\n  console.log(\r\n    JSON.stringify(\r\n      {\r\n        ok: true,\r\n        configPath: displayUserPath(CONFIG_FILE),\r\n        config: presentUserConfig(config),\r\n        boxKind: config.boxKind,\r\n        boxKindSource: boxIdentity.source,\r\n        workerCapRecommendation: capRecommendation,\r\n        ...(boxIdentity.warnings.length ? { boxIdentityWarnings: boxIdentity.warnings } : {}),\r\n        note:\r\n          runnerCredentialNote ??\r\n          \"boxKind and maxConcurrentWorkers persisted; override with --box-kind and --max-workers. Run `kynver login` + `kynver runner credential` for scoped callbacks.\",\r\n      },\r\n      null,\r\n      2,\r\n    ),\r\n  );\r\n}\r\n\r\nexport async function runLogin(args: Record<string, string | boolean>): Promise<void> {\r\n  const apiKey = typeof args.apiKey === \"string\" ? args.apiKey : process.env.KYNVER_API_KEY;\r\n  if (!apiKey) failConfig(\"kynver login requires --api-key or KYNVER_API_KEY\");\r\n  saveApiKey(apiKey);\r\n  console.log(JSON.stringify({ ok: true, credentialsPath: displayUserPath(CREDENTIALS_FILE) }, null, 2));\r\n}\r\n", "import { existsSync, readFileSync, statfsSync } from \"node:fs\";\r\n\r\n/**\r\n * WSL host disk probe.\r\n *\r\n * Under WSL, the runtime VHDX (mounted at `/`) grows dynamically into the\r\n * Windows host C: drive. When Windows C: fills up, the VHDX cannot expand:\r\n * writes return SIGBUS, workers exit 135, and the Vmmem VM degrades while\r\n * the Linux-side `statfs /` still reports plenty of free space inside the\r\n * VHDX. This module gives the harness a cheap signal for that pressure so\r\n * it can block dispatch *before* a large npm install/build pushes Windows\r\n * C: into the ground.\r\n */\r\n\r\n/** Default warn threshold for the Windows host disk (25 GiB free). */\r\nexport const DEFAULT_WSL_HOST_WARN_FREE_BYTES = 25 * 1024 * 1024 * 1024;\r\n/** Default critical threshold for the Windows host disk (12 GiB free). Below\r\n * this, large rebuilds have been observed to trigger SIGBUS / exit 135 on\r\n * WSL when the VHDX cannot grow further. */\r\nexport const DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES = 12 * 1024 * 1024 * 1024;\r\n/** Default Windows host mount point under WSL. Overridable via env or option. */\r\nexport const DEFAULT_WSL_HOST_MOUNT = \"/mnt/c\";\r\n\r\nexport interface WslHostDiskShape {\r\n  ok: boolean;\r\n  /** Mount point that was probed. */\r\n  path: string;\r\n  freeBytes: number;\r\n  totalBytes: number;\r\n  usedPercent: number;\r\n  warnBelowBytes: number;\r\n  criticalBelowBytes: number;\r\n  /** Human-readable explanation when the host disk is under pressure. */\r\n  reason: string | null;\r\n  /** True when the probe itself failed (mount missing, statfs error). */\r\n  probeError: string | null;\r\n}\r\n\r\n/**\r\n * Cheap WSL detection. Reads `/proc/sys/kernel/osrelease` (kernel string\r\n * contains \"microsoft\" / \"WSL2\" on Microsoft's WSL kernel) and falls back\r\n * to `/proc/version`. Both reads are one-shot and gated by `existsSync`,\r\n * so non-Linux hosts return false without throwing.\r\n */\r\nexport function isWslHost(): boolean {\r\n  if (process.platform !== \"linux\") return false;\r\n  for (const probe of [\"/proc/sys/kernel/osrelease\", \"/proc/version\"]) {\r\n    try {\r\n      if (!existsSync(probe)) continue;\r\n      const text = readFileSync(probe, \"utf8\");\r\n      if (/microsoft|wsl/i.test(text)) return true;\r\n    } catch {\r\n      // ignore \u2014 try the next probe path\r\n    }\r\n  }\r\n  return false;\r\n}\r\n\r\nexport interface ObserveWslHostDiskOptions {\r\n  /** Override the Windows host mount path (e.g. `/mnt/d`). Falls back to\r\n   * `KYNVER_WSL_HOST_MOUNT` env, then `/mnt/c`. */\r\n  wslHostMount?: string;\r\n  wslHostFreeWarnBytes?: number;\r\n  wslHostFreeCriticalBytes?: number;\r\n  /** Override WSL detection for tests / cross-platform CI:\r\n   * `true` \u2192 treat host as WSL; `false` \u2192 treat host as non-WSL;\r\n   * `undefined` \u2192 autodetect via `isWslHost()`. */\r\n  forceWsl?: boolean;\r\n  /** Test seam \u2014 swap in a fake statfs. */\r\n  statfs?: (path: string) => { bavail: bigint | number; blocks: bigint | number; bsize: bigint | number };\r\n}\r\n\r\n/**\r\n * Probe the Windows host disk under WSL. Returns `null` when this host is\r\n * not WSL (so callers can treat the field as optional in the gate output).\r\n * When WSL but the mount is unreachable, returns a `probeError` row with\r\n * `ok = false` rather than throwing \u2014 the gate must still block dispatch\r\n * because we can't prove the host disk is healthy.\r\n */\r\nexport function observeWslHostDisk(\r\n  options: ObserveWslHostDiskOptions = {},\r\n): WslHostDiskShape | null {\r\n  const wsl = options.forceWsl === undefined ? isWslHost() : options.forceWsl;\r\n  if (!wsl) return null;\r\n\r\n  const path =\r\n    options.wslHostMount?.trim() ||\r\n    process.env.KYNVER_WSL_HOST_MOUNT?.trim() ||\r\n    DEFAULT_WSL_HOST_MOUNT;\r\n  const warnBelowBytes = options.wslHostFreeWarnBytes ?? DEFAULT_WSL_HOST_WARN_FREE_BYTES;\r\n  const criticalBelowBytes =\r\n    options.wslHostFreeCriticalBytes ?? DEFAULT_WSL_HOST_CRITICAL_FREE_BYTES;\r\n\r\n  const statfs = options.statfs ?? statfsSync;\r\n  let stats: { bavail: bigint | number; blocks: bigint | number; bsize: bigint | number };\r\n  try {\r\n    stats = statfs(path);\r\n  } catch (error) {\r\n    return {\r\n      ok: false,\r\n      path,\r\n      freeBytes: 0,\r\n      totalBytes: 0,\r\n      usedPercent: 100,\r\n      warnBelowBytes,\r\n      criticalBelowBytes,\r\n      reason: `Windows host disk probe failed at ${path}: ${(error as Error).message}`,\r\n      probeError: (error as Error).message,\r\n    };\r\n  }\r\n\r\n  const freeBytes = Number(stats.bavail) * Number(stats.bsize);\r\n  const totalBytes = Number(stats.blocks) * Number(stats.bsize);\r\n  const usedPercent = totalBytes > 0 ? ((totalBytes - freeBytes) / totalBytes) * 100 : 100;\r\n  const lowFree = freeBytes < warnBelowBytes;\r\n  const criticalFree = freeBytes < criticalBelowBytes;\r\n  const ok = !lowFree && !criticalFree;\r\n\r\n  const freeGiB = (freeBytes / (1024 * 1024 * 1024)).toFixed(1);\r\n  let reason: string | null = null;\r\n  if (!ok) {\r\n    const tag = criticalFree ? \"critical\" : \"warning\";\r\n    reason =\r\n      `Windows host disk ${path} at ${tag}: ${freeGiB} GiB free ` +\r\n      `(<${(criticalFree ? criticalBelowBytes : warnBelowBytes) / 1024 / 1024 / 1024} GiB); ` +\r\n      `WSL VHDX cannot grow safely. ${summarizeWslRecoverySteps()}`;\r\n  }\r\n\r\n  return {\r\n    ok,\r\n    path,\r\n    freeBytes,\r\n    totalBytes,\r\n    usedPercent,\r\n    warnBelowBytes,\r\n    criticalBelowBytes,\r\n    reason,\r\n    probeError: null,\r\n  };\r\n}\r\n\r\n/**\r\n * Short operator recovery hint embedded in gate reasons so AgentOS evidence\r\n * surfaces actionable steps without a doc lookup. Keep terse \u2014 full runbook\r\n * lives at `docs/runbooks/wsl-disk-pressure.md`.\r\n */\r\nexport function summarizeWslRecoverySteps(): string {\r\n  return (\r\n    \"Recovery: \" +\r\n    \"1) free Windows C: (empty Recycle Bin / Storage Sense / clear %TEMP%); \" +\r\n    \"2) shut down WSL (`wsl --shutdown`) then compact the VHDX (`Optimize-VHD` or `diskpart compact vdisk`); \" +\r\n    \"3) clear local node_modules / .next / harness worktrees before restarting workers. \" +\r\n    \"Full runbook: docs/runbooks/wsl-disk-pressure.md.\"\r\n  );\r\n}\r\n", "import { statfsSync } from \"node:fs\";\r\nimport type { DispatchNextDiskGateShape } from \"./callbacks.js\";\r\nimport {\r\n  observeWslHostDisk,\r\n  type ObserveWslHostDiskOptions,\r\n  type WslHostDiskShape,\r\n} from \"./wsl-host.js\";\r\n\r\nconst DEFAULT_WARN_FREE_BYTES = 30 * 1024 * 1024 * 1024;\r\nconst DEFAULT_CRITICAL_FREE_BYTES = 15 * 1024 * 1024 * 1024;\r\nconst DEFAULT_MAX_USED_PERCENT = 80;\r\nconst DEFAULT_HARD_MAX_USED_PERCENT = 90;\r\n\r\nexport interface ObserveDiskGateInput {\r\n  diskPath?: string;\r\n  diskFreeWarnBytes?: number;\r\n  diskFreeCriticalBytes?: number;\r\n  diskMaxUsedPercent?: number;\r\n  diskHardMaxUsedPercent?: number;\r\n  /** Opt-out for the WSL host disk probe \u2014 leave `false`/undefined by\r\n   * default so we always check `/mnt/c` under WSL. */\r\n  skipWslHostCheck?: boolean;\r\n  wslHost?: ObserveWslHostDiskOptions;\r\n}\r\n\r\nexport function observeRunnerDiskGate(input: ObserveDiskGateInput = {}): DispatchNextDiskGateShape {\r\n  const path = input.diskPath?.trim() || \"/\";\r\n  const warnBelowBytes = input.diskFreeWarnBytes ?? DEFAULT_WARN_FREE_BYTES;\r\n  const criticalBelowBytes = input.diskFreeCriticalBytes ?? DEFAULT_CRITICAL_FREE_BYTES;\r\n  const maxUsedPercent = input.diskMaxUsedPercent ?? DEFAULT_MAX_USED_PERCENT;\r\n  const hardMaxUsedPercent = input.diskHardMaxUsedPercent ?? DEFAULT_HARD_MAX_USED_PERCENT;\r\n\r\n  const stats = statfsSync(path);\r\n  const freeBytes = Number(stats.bavail) * Number(stats.bsize);\r\n  const totalBytes = Number(stats.blocks) * Number(stats.bsize);\r\n  const usedPercent = totalBytes > 0 ? ((totalBytes - freeBytes) / totalBytes) * 100 : 100;\r\n  const lowFree = freeBytes < warnBelowBytes;\r\n  const criticalFree = freeBytes < criticalBelowBytes;\r\n  const highUse = usedPercent > maxUsedPercent;\r\n  const hardHighUse = usedPercent > hardMaxUsedPercent;\r\n  const localOk = !lowFree && !criticalFree && !highUse && !hardHighUse;\r\n\r\n  // WSL guard: the VHDX (mounted at `/`) grows into Windows C:; a healthy\r\n  // local statfs is meaningless if the host disk is about to refuse writes.\r\n  const wslHost: WslHostDiskShape | null = input.skipWslHostCheck\r\n    ? null\r\n    : observeWslHostDisk(input.wslHost);\r\n\r\n  const ok = localOk && (wslHost ? wslHost.ok : true);\r\n\r\n  let reason: string | null = null;\r\n  if (!ok) {\r\n    reason = [\r\n      criticalFree ? `free space below critical ${criticalBelowBytes} bytes` : null,\r\n      lowFree ? `free space below warning ${warnBelowBytes} bytes` : null,\r\n      hardHighUse ? `used percent above hard cap ${hardMaxUsedPercent}%` : null,\r\n      highUse ? `used percent above cap ${maxUsedPercent}%` : null,\r\n      wslHost && !wslHost.ok ? wslHost.reason : null,\r\n    ]\r\n      .filter(Boolean)\r\n      .join(\"; \");\r\n  }\r\n\r\n  return {\r\n    ok,\r\n    path,\r\n    freeBytes,\r\n    totalBytes,\r\n    usedPercent,\r\n    warnBelowBytes,\r\n    criticalBelowBytes,\r\n    maxUsedPercent,\r\n    hardMaxUsedPercent,\r\n    reason,\r\n    wslHost,\r\n  };\r\n}\r\n", "import os from \"node:os\";\r\nimport { readMemAvailableBytes } from \"./bounded-build/meminfo.js\";\r\nimport path from \"node:path\";\r\nimport { loadUserConfig, type KynverUserConfig } from \"./config.js\";\r\nimport { resolveBoxKindFromConfig } from \"./box-identity.js\";\r\nimport type { WorkerCapSource } from \"./worker-cap-source.js\";\r\nimport { resolveWorkerCap } from \"./worker-cap-source.js\";\r\nimport type { DispatchNextDiskGateShape } from \"./callbacks.js\";\r\nimport { observeRunnerDiskGate } from \"./disk-gate.js\";\r\nimport { listRunRecords, loadRun, runDirectory, type HarnessRunRecord } from \"./run-store.js\";\r\nimport { listRunWorkerNames } from \"./run-worker-index.js\";\r\nimport { isActiveHarnessWorker, workerProcessMatchesRecord } from \"./harness-worker-active.js\";\r\nimport { readJson, safeSlug } from \"./util.js\";\r\nimport type { HarnessWorkerRecord } from \"./status.js\";\r\n\r\nexport { workerProcessMatchesRecord };\r\n\r\n/** Default RAM budget per worker (~500 MiB, dogfood measured). Internal \u2014 not a setup knob. */\r\nexport const DEFAULT_PER_WORKER_MEM_BYTES = 500 * 1024 * 1024;\r\n\r\n/** Keep headroom for OS / IDE. Internal \u2014 not a setup knob. */\r\nexport const DEFAULT_MEM_RESERVE_BYTES = 4 * 1024 * 1024 * 1024;\r\n\r\n/** Fraction of total RAM used when auto-sizing worker cap. Internal. */\r\nexport const DEFAULT_MEM_UTILIZATION = 0.85;\r\n\r\n/** Auto cap when the user has not set maxConcurrentWorkers (safety on huge hosts). */\r\nexport const AUTO_MAX_WORKERS_CEILING = 64;\r\n\r\nexport interface RunnerResourceGateShape {\r\n  ok: boolean;\r\n  totalMemBytes: number;\r\n  freeMemBytes: number;\r\n  memReserveBytes: number;\r\n  perWorkerMemBytes: number;\r\n  configuredMaxWorkers: number | null;\r\n  /** Where the effective worker cap was resolved (workspace override, env, config, or auto). */\r\n  workerCapSource: WorkerCapSource;\r\n  /** Physical pool for this host (`forge` | `ghost`). */\r\n  boxKind: string;\r\n  autoCap: number;\r\n  capacityWorkers: number;\r\n  maxConcurrentWorkers: number;\r\n  activeWorkers: number;\r\n  slotsAvailable: number;\r\n  reason: string | null;\r\n  /** Present unless `KYNVER_RESOURCE_GATE_SKIP_DISK=1`. */\r\n  diskGate?: DispatchNextDiskGateShape;\r\n}\r\n\r\nexport interface ObserveResourceGateInput {\r\n  runId: string;\r\n  config?: KynverUserConfig;\r\n  /** Command Center / workspace override \u2014 wins over local config when set. */\r\n  configuredMaxWorkersOverride?: number | null;\r\n  /** Override active worker count (tests). */\r\n  activeWorkers?: number;\r\n  totalMemBytes?: number;\r\n  freeMemBytes?: number;\r\n  diskPath?: string;\r\n  skipDiskGate?: boolean;\r\n}\r\n\r\nfunction positiveInt(value: unknown, fallback: number): number {\r\n  const n = Number(value);\r\n  if (!Number.isFinite(n) || n <= 0) return fallback;\r\n  return Math.floor(n);\r\n}\r\n\r\nfunction resolveResourceConfig(\r\n  config: KynverUserConfig = loadUserConfig(),\r\n  configuredMaxWorkersOverride?: number | null,\r\n  totalMemBytes?: number,\r\n) {\r\n  const perWorkerMemBytes = positiveInt(config.perWorkerMemBytes, DEFAULT_PER_WORKER_MEM_BYTES);\r\n  const memReserveBytes = positiveInt(config.memReserveBytes, DEFAULT_MEM_RESERVE_BYTES);\r\n  const memUtilization = Math.min(\r\n    1,\r\n    Math.max(0.1, Number(config.memUtilization) > 0 ? Number(config.memUtilization) : DEFAULT_MEM_UTILIZATION),\r\n  );\r\n  const cap = resolveWorkerCap({\r\n    config,\r\n    configuredMaxWorkersOverride,\r\n    totalMemBytes: totalMemBytes ?? os.totalmem(),\r\n  });\r\n  return {\r\n    perWorkerMemBytes,\r\n    memReserveBytes,\r\n    memUtilization,\r\n    configuredMaxWorkers: cap.configuredMaxWorkers,\r\n    autoCap: cap.autoCap,\r\n    workerCapSource: cap.workerCapSource,\r\n  };\r\n}\r\n\r\n/** How many workers this host could run from RAM alone (before a user cap). */\r\nexport function computeAutoMaxWorkers(\r\n  totalMemBytes: number,\r\n  opts: { perWorkerMemBytes?: number; memReserveBytes?: number; memUtilization?: number } = {},\r\n): number {\r\n  const perWorkerMemBytes = opts.perWorkerMemBytes ?? DEFAULT_PER_WORKER_MEM_BYTES;\r\n  const memReserveBytes = opts.memReserveBytes ?? DEFAULT_MEM_RESERVE_BYTES;\r\n  const memUtilization = opts.memUtilization ?? DEFAULT_MEM_UTILIZATION;\r\n  const budgetBytes = Math.max(0, Math.floor(totalMemBytes * memUtilization) - memReserveBytes);\r\n  const raw = Math.max(1, Math.floor(budgetBytes / perWorkerMemBytes));\r\n  return Math.min(raw, AUTO_MAX_WORKERS_CEILING);\r\n}\r\n\r\nfunction readAvailableMemBytes(): number {\r\n  return readMemAvailableBytes();\r\n}\r\n\r\n/** Count alive, still-executing workers in a single run record. */\r\nfunction countActiveWorkersForRun(run: HarnessRunRecord): number {\r\n  let active = 0;\r\n  for (const name of listRunWorkerNames(run)) {\r\n    const worker = readJson<HarnessWorkerRecord | undefined>(\r\n      path.join(runDirectory(run.id), \"workers\", safeSlug(name), \"worker.json\"),\r\n      undefined,\r\n    );\r\n    if (!worker || !isActiveHarnessWorker(worker)) continue;\r\n    active++;\r\n  }\r\n  return active;\r\n}\r\n\r\n/** Count active workers in ONE run (kept for callers/tests scoped to a run). */\r\nexport function countActiveWorkers(runId: string): number {\r\n  return countActiveWorkersForRun(loadRun(runId));\r\n}\r\n\r\n/**\r\n * Count active workers across EVERY run on disk. The harness creates a new run\r\n * per task, so a per-run count let concurrent runs each believe the machine was\r\n * idle \u2014 the configured cap was never a real global ceiling (the \"spawns 4 or\r\n * infinity, never N\" bug). This machine-wide count is what the gate must use.\r\n */\r\nexport function countActiveWorkersGlobal(): number {\r\n  let active = 0;\r\n  for (const run of listRunRecords()) active += countActiveWorkersForRun(run);\r\n  return active;\r\n}\r\n\r\n/**\r\n * Compute how many workers this host can run and how many dispatch slots remain.\r\n * Uses total RAM for steady-state capacity and free RAM as a hard safety gate.\r\n */\r\nexport function observeRunnerResourceGate(input: ObserveResourceGateInput): RunnerResourceGateShape {\r\n  const config = input.config ?? loadUserConfig();\r\n  const totalMemBytes = input.totalMemBytes ?? os.totalmem();\r\n  const { perWorkerMemBytes, memReserveBytes, memUtilization, configuredMaxWorkers, autoCap: resolvedAutoCap, workerCapSource } =\r\n    resolveResourceConfig(config, input.configuredMaxWorkersOverride, totalMemBytes);\r\n  const boxKind = resolveBoxKindFromConfig(config);\r\n  const freeMemBytes = input.freeMemBytes ?? readAvailableMemBytes();\r\n  // Active count is GLOBAL across all runs (see countActiveWorkersGlobal), so the\r\n  // cap is a true machine-wide ceiling rather than per-run.\r\n  const activeWorkers = input.activeWorkers ?? countActiveWorkersGlobal();\r\n\r\n  const budgetBytes = Math.max(0, Math.floor(totalMemBytes * memUtilization) - memReserveBytes);\r\n  const capacityFromTotal = Math.max(0, Math.floor(budgetBytes / perWorkerMemBytes));\r\n  const capacityFromFree = Math.max(0, Math.floor(Math.max(0, freeMemBytes - memReserveBytes) / perWorkerMemBytes));\r\n\r\n  const autoCap = resolvedAutoCap;\r\n  const targetCap = configuredMaxWorkers ?? autoCap;\r\n  const maxConcurrentWorkers = Math.max(0, Math.min(targetCap, capacityFromTotal));\r\n  const slotsByCapacity = Math.max(0, maxConcurrentWorkers - activeWorkers);\r\n  // capacityFromFree is ADDITIONAL headroom: free/available RAM already excludes\r\n  // memory held by running workers, so we must NOT subtract activeWorkers again.\r\n  // Doing so (the old `capacityFromFree - activeWorkers`) double-counted active\r\n  // workers and collapsed dispatch to a handful of slots under load.\r\n  const slotsByFreeMem = capacityFromFree;\r\n  let slotsAvailable = Math.min(slotsByCapacity, slotsByFreeMem);\r\n\r\n  const skipDisk = input.skipDiskGate || process.env.KYNVER_RESOURCE_GATE_SKIP_DISK === \"1\";\r\n  const diskGate = skipDisk\r\n    ? undefined\r\n    : observeRunnerDiskGate({\r\n        diskPath:\r\n          input.diskPath?.trim() ||\r\n          process.env.KYNVER_DISK_GUARD_PATH?.trim() ||\r\n          \"/\",\r\n      });\r\n  if (diskGate && !diskGate.ok) slotsAvailable = 0;\r\n\r\n  let reason: string | null = null;\r\n  if (slotsAvailable <= 0) {\r\n    if (diskGate && !diskGate.ok) {\r\n      reason = diskGate.reason ?? \"disk gate blocked worker admission\";\r\n    } else if (activeWorkers >= maxConcurrentWorkers) {\r\n      reason = `at worker limit (${activeWorkers}/${maxConcurrentWorkers} running)`;\r\n    } else if (capacityFromFree <= 0) {\r\n      reason = \"insufficient free memory \u2014 waiting for workers to finish\";\r\n    } else {\r\n      reason = \"no worker slots available\";\r\n    }\r\n  }\r\n\r\n  return {\r\n    ok: slotsAvailable > 0,\r\n    totalMemBytes,\r\n    freeMemBytes,\r\n    memReserveBytes,\r\n    perWorkerMemBytes,\r\n    configuredMaxWorkers,\r\n    workerCapSource,\r\n    boxKind,\r\n    autoCap,\r\n    capacityWorkers: capacityFromTotal,\r\n    maxConcurrentWorkers,\r\n    activeWorkers,\r\n    slotsAvailable,\r\n    reason,\r\n    ...(diskGate ? { diskGate } : {}),\r\n  };\r\n}\r\n", "import type { HarnessWorkerRecord } from \"./status.js\";\r\nimport { saveWorker } from \"./run-store.js\";\r\n\r\nexport type CompletionOutcome = \"acknowledged\" | \"skipped_already_acked\" | \"structural_blocker\";\r\n\r\nexport interface CompletionAckFields {\r\n  completionReportedAt: string;\r\n  completionOutcome: \"acknowledged\" | \"rejected\";\r\n  completionResponse?: unknown;\r\n}\r\n\r\nexport function hasCompletionAck(worker: HarnessWorkerRecord): boolean {\r\n  return Boolean(worker.completionReportedAt?.trim());\r\n}\r\n\r\n/** True when AgentOS acknowledged completion and the board advanced (or was already terminal). */\r\nexport function hasSuccessfulCompletionAck(worker: HarnessWorkerRecord): boolean {\r\n  if (!hasCompletionAck(worker)) return false;\r\n  if (worker.completionOutcome === \"rejected\") return false;\r\n  if (typeof worker.completionBlocker === \"string\" && worker.completionBlocker.trim()) {\r\n    return false;\r\n  }\r\n  return true;\r\n}\r\n\r\n/**\r\n * Finished workers with a prior completion POST that did not advance the board\r\n * (rejected route, structural blocker) must be eligible for replay so fresher\r\n * `finalResult` evidence can reach AgentOS.\r\n */\r\nexport function needsCompletionReplay(worker: HarnessWorkerRecord): boolean {\r\n  if (!hasCompletionAck(worker)) return false;\r\n  return !hasSuccessfulCompletionAck(worker);\r\n}\r\n\r\nexport function persistCompletionAck(\r\n  worker: HarnessWorkerRecord,\r\n  runId: string,\r\n  fields: CompletionAckFields,\r\n): void {\r\n  worker.completionReportedAt = fields.completionReportedAt;\r\n  worker.completionOutcome = fields.completionOutcome;\r\n  if (fields.completionResponse !== undefined) {\r\n    worker.completionResponse = fields.completionResponse;\r\n  }\r\n  saveWorker(runId, worker);\r\n}\r\n\r\nexport function clearCompletionAck(worker: HarnessWorkerRecord, runId: string): void {\r\n  delete worker.completionReportedAt;\r\n  delete worker.completionOutcome;\r\n  delete worker.completionResponse;\r\n  saveWorker(runId, worker);\r\n}\r\n", "import { hasCompletionAck } from \"../completion-ack.js\";\r\nimport {\r\n  isFinishedWorkerStatus,\r\n  isLandingBlockedWorkerStatus,\r\n  type HarnessWorkerRecord,\r\n  type RawHarnessWorkerStatus,\r\n} from \"../status.js\";\r\nimport type { AutoCompleteAssessment } from \"./monitor.types.js\";\r\n\r\n/**\r\n * Auto-complete may only run when the worker has reached a verified terminal\r\n * condition and no structural blocker is present. Never paper over heartbeat\r\n * blockers, landing gates, or completion replay failures.\r\n */\r\nexport function assessAutoCompleteEligibility(input: {\r\n  worker: HarnessWorkerRecord;\r\n  status: RawHarnessWorkerStatus;\r\n}): AutoCompleteAssessment {\r\n  const { worker, status } = input;\r\n  const blockers: string[] = [];\r\n\r\n  if (worker.localOnly) {\r\n    blockers.push(\"local-only worker (no board linkage)\");\r\n  }\r\n  if (!worker.agentOsId || !worker.taskId) {\r\n    blockers.push(\"missing agentOsId/taskId linkage\");\r\n  }\r\n  if (hasCompletionAck(worker)) {\r\n    blockers.push(\"completion already acknowledged\");\r\n  }\r\n  if (worker.completionBlocker) {\r\n    blockers.push(worker.completionBlocker);\r\n  }\r\n  if (status.heartbeatBlocker && status.alive) {\r\n    blockers.push(`worker heartbeat blocker: ${status.heartbeatBlocker}`);\r\n  }\r\n  if (status.attention.state === \"blocked\") {\r\n    blockers.push(status.attention.reason || \"worker attention blocked\");\r\n  }\r\n  if (isLandingBlockedWorkerStatus(status)) {\r\n    blockers.push(status.attention.reason || \"landing gate blocked\");\r\n  }\r\n\r\n  const terminalVerified = isFinishedWorkerStatus(status);\r\n  let terminalReason: string | undefined;\r\n  if (terminalVerified) {\r\n    if (status.finalResult) terminalReason = \"final_result\";\r\n    else if (!status.alive) terminalReason = \"process_exited\";\r\n    else terminalReason = \"terminal_status\";\r\n  } else {\r\n    blockers.push(\"worker has not reached a terminal condition\");\r\n  }\r\n\r\n  const eligible = terminalVerified && blockers.length === 0;\r\n  return {\r\n    eligible,\r\n    terminalVerified,\r\n    terminalReason,\r\n    blockers,\r\n  };\r\n}\r\n"],
+  "mappings": ";AAAA,SAAS,cAAAA,aAAY,gBAAAC,qBAAoB;;;ACEzC,SAAS,mBAAmB,MAA8C;AACxE,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAQ,WAAW,GAAG,EAAG,QAAO;AACrC,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,OAAO;AAC1C,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,MAA8C;AAC7E,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,SAAS,mBAAmB,OAAO;AACzC,MAAI,OAAQ,QAAO;AAEnB,QAAM,aAAwC,CAAC;AAC/C,QAAM,UAAU;AAChB,MAAI;AACJ,UAAQ,aAAa,QAAQ,KAAK,OAAO,OAAO,MAAM;AACpD,UAAM,YAAY,mBAAmB,WAAW,CAAC,KAAK,EAAE;AACxD,QAAI,UAAW,YAAW,KAAK,SAAS;AAAA,EAC1C;AAEA,QAAM,aAAa,QAAQ,QAAQ,GAAG;AACtC,QAAM,YAAY,QAAQ,YAAY,GAAG;AACzC,MAAI,cAAc,KAAK,YAAY,YAAY;AAC7C,UAAM,QAAQ,mBAAmB,QAAQ,MAAM,YAAY,YAAY,CAAC,CAAC;AACzE,QAAI,MAAO,YAAW,KAAK,KAAK;AAAA,EAClC;AAEA,SAAO,WAAW,SAAS,IAAI,WAAW,WAAW,SAAS,CAAC,IAAK;AACtE;AAMO,SAAS,oCACd,KACS;AACT,QAAM,WAAW,IAAI,eAAe,IAAI;AACxC,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,QAAI,OAAO,aAAa,UAAU;AAChC,YAAMC,YAAW,wBAAwB,QAAQ;AACjD,aAAOA,cAAa,SAAS,KAAK,KAAK;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,QAAQ,KAAK,IAAI;AACvE,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,WAAW,wBAAwB,OAAO;AAChD,MAAI,SAAU,QAAO;AAErB,SAAO;AACT;;;AC/DA,SAAS,YAAY,WAAW,cAAc,aAAa,UAAU,qBAAqB;AAGnF,SAAS,KAAK,SAAwB;AAC3C,UAAQ,MAAM,OAAO;AACrB,UAAQ,KAAK,CAAC;AAChB;AAGO,SAAS,mBAAsD,MAAY;AAChF,MAAI,QAAQ,aAAa,QAAS,QAAO;AACzC,SAAO,EAAE,aAAa,MAAM,GAAG,KAAK;AACtC;AAOO,SAAS,SAAS,MAAuB;AAC9C,MAAI;AACF,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AA2CO,SAAS,SAAS,MAAsB;AAC7C,MAAI;AACF,WAAO,SAAS,IAAI,EAAE;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,UAAU,MAA6B;AACrD,MAAI;AACF,WAAO,SAAS,IAAI,EAAE,MAAM,YAAY;AAAA,EAC1C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,SAAS,MAAc,OAAuB;AAC5D,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,QAAM,OAAO,aAAa,MAAM,MAAM;AACtC,SAAO,KAAK,MAAM,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI;AACjD;AAsBO,SAAS,WAAW,KAAkC;AAC3D,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUO,SAAS,UAAU,QAAyD;AACjF,MAAI,OAAsB;AAC1B,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,QAAI,CAAC,MAAO;AACZ,UAAM,KAAK,KAAK,MAAM,KAAK;AAC3B,QAAI,OAAO,SAAS,EAAE,KAAK,KAAK,QAAQ;AACtC,eAAS;AACT,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,QAAQ,IAAoB;AAC1C,SAAO,KAAK,IAAI,GAAG,KAAK,OAAO,KAAK,IAAI,IAAI,MAAM,GAAI,CAAC;AACzD;;;AFxHA,IAAM,2BAA2B;AAG1B,SAAS,yBAAyB,OAA2C;AAClF,SAAO,UAAU;AACnB;AAOO,SAAS,iCAAiC,WAAqC;AACpF,MAAI,CAAC,yBAAyB,UAAU,kBAAkB,EAAG,QAAO;AACpE,MAAI,UAAU,wBAAwB,UAAa,UAAU,wBAAwB,MAAM;AACzF,WAAO,UAAU;AAAA,EACnB;AACA,QAAM,UAAU,UAAU,sBAAsB,KAAK;AACrD,SAAO,WAAW;AACpB;AAEO,SAAS,eAAe,MAA+B;AAC5D,QAAM,SAA0B;AAAA,IAC9B,gBAAgB;AAAA,IAChB,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,sBAAsB;AAAA,IACtB,qBAAqB;AAAA,IACrB,kBAAkB;AAAA,IAClB,oBAAoB,CAAC;AAAA,IACrB,yBAAyB;AAAA,IACzB,gBAAgB,CAAC;AAAA,EACnB;AACA,MAAI,CAACC,YAAW,IAAI,EAAG,QAAO;AAC9B,QAAM,cAAc,KAAK,IAAI,IAAI;AACjC,QAAM,YAAY,IAAI,KAAK,WAAW,EAAE,YAAY;AACpD,QAAM,QAAQC,cAAa,MAAM,MAAM,EAAE,MAAM,IAAI,EAAE,OAAO,OAAO;AACnE,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,SAAS,IAAI;AAC3B,QAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG;AACjE,UAAM,MAAM;AACZ,WAAO;AACP,QAAI,IAAI,IAAI;AACV,YAAM,KAAK,OAAO,IAAI,EAAE;AACxB,YAAM,OAAO,KAAK,MAAM,EAAE;AAC1B,UAAI,OAAO,SAAS,IAAI,KAAK,OAAO,aAAa;AAC/C,eAAO,mBAAmB,KAAK;AAAA,UAC7B,MAAM;AAAA,UACN,YAAY;AAAA,UACZ;AAAA,QACF,CAAC;AAAA,MACH,OAAO;AACL,eAAO,kBAAkB;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,IAAI,UAAU,UAAa,IAAI,UAAU,KAAM,QAAO,qBAAqB,OAAO,IAAI,KAAK;AAC/F,QAAI,IAAI,YAAY,UAAa,IAAI,YAAY,KAAM,QAAO,uBAAuB,OAAO,IAAI,OAAO;AACvG,QAAI,yBAAyB,OAAO,kBAAkB,GAAG;AACvD,aAAO,sBAAsB,oCAAoC,GAAG;AAAA,IACtE;AACA,WAAO,mBAAmB,IAAI,UAAU,OAAO,IAAI,OAAO,IAAI;AAC9D,QAAI,IAAI,uBAAuB,OAAO,IAAI,wBAAwB,YAAY,CAAC,MAAM,QAAQ,IAAI,mBAAmB,GAAG;AACrH,aAAO,0BAA0B,IAAI;AAAA,IACvC;AACA,QAAI,MAAM,QAAQ,IAAI,UAAU,GAAG;AACjC,aAAO,iBAAiB,IAAI,WAAW;AAAA,QACrC,CAACC,WACC,CAAC,CAACA,UACF,OAAOA,WAAU,YACjB,OAAQA,OAA+C,UAAU;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;;;AGlGA,SAAS,cAAAC,aAAY,gBAAAC,qBAAoB;;;ACOzC,IAAM,cAAc,oBAAI,IAAI,CAAC,MAAM,WAAW,MAAM,CAAC;AACrD,IAAM,qBAAqB,oBAAI,IAAI;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAcD,SAAS,WAAW,OAA0C;AAC5D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,MAAM,MAAM,GAAG,EAAE,IAAI,KAAK;AACvC,SAAO,KAAK,QAAQ,WAAW,EAAE,EAAE,YAAY;AACjD;AAEA,SAAS,gBAAgB,OAAyB;AAChD,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,QAAM,QAAkB,CAAC;AACzB,MAAI,UAAU;AACd,MAAI;AACJ,MAAI,UAAU;AACd,aAAW,QAAQ,OAAO;AACxB,QAAI,SAAS;AACX,iBAAW;AACX,gBAAU;AACV;AAAA,IACF;AACA,QAAI,SAAS,MAAM;AACjB,gBAAU;AACV;AAAA,IACF;AACA,QAAI,OAAO;AACT,UAAI,SAAS,MAAO,SAAQ;AAAA,UACvB,YAAW;AAChB;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR;AAAA,IACF;AACA,QAAI,KAAK,KAAK,IAAI,GAAG;AACnB,UAAI,SAAS;AACX,cAAM,KAAK,OAAO;AAClB,kBAAU;AAAA,MACZ;AACA;AAAA,IACF;AACA,eAAW;AAAA,EACb;AACA,MAAI,QAAS,OAAM,KAAK,OAAO;AAC/B,SAAO;AACT;AAEA,SAAS,SAAS,MAAyB;AACzC,QAAM,MAAM,WAAW,KAAK,CAAC,CAAC;AAC9B,SAAO,QAAQ,OAAO,YAAY,IAAI,GAAG,CAAC;AAC5C;AAEO,SAAS,yBAAyB,QAAqC;AAC5E,MAAI,CAAC,UAAU,OAAO,SAAS,GAAG,KAAK,OAAO,SAAS,GAAG,EAAG,QAAO;AACpE,SAAO,8CAA8C,KAAK,MAAM;AAClE;AAGO,SAAS,uBAAuB,QAAqC;AAC1E,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,IAAI,OAAO,KAAK;AACtB,SAAO,EAAE,WAAW,GAAG,KAAK,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,EAAE,SAAS,KAAK;AACnE;AAEA,SAAS,eAAe,OAAuB;AAC7C,MAAI,CAAC,MAAM,WAAW,SAAS,EAAG,QAAO;AACzC,QAAM,QAAQ,MAAM,MAAM,UAAU,MAAM;AAC1C,MAAI,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,SAAS,KAAK,GAAG;AAC3E,WAAO,UAAU,KAAK;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,MAA0B;AACrD,QAAM,aAAuB,CAAC;AAC9B,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,QAAQ,KAAK,CAAC;AACpB,QAAI,CAAC,MAAO;AACZ,QAAI,UAAU,MAAM;AAClB,iBAAW,KAAK,GAAG,KAAK,MAAM,IAAI,CAAC,CAAC;AACpC;AAAA,IACF;AACA,QAAI,MAAM,WAAW,GAAG,GAAG;AACzB,UAAI,MAAM,SAAS,GAAG,EAAG;AACzB,UAAI,mBAAmB,IAAI,KAAK,EAAG,MAAK;AACxC;AAAA,IACF;AACA,eAAW,KAAK,KAAK;AAAA,EACvB;AACA,SAAO;AACT;AAEO,SAAS,gBAAgB,MAAsD;AACpF,MAAI,UAAU;AACd,QAAM,MAAM,KAAK,IAAI,CAAC,UAAU;AAC9B,UAAM,QAAQ,eAAe,KAAK;AAClC,QAAI,UAAU,MAAO,WAAU;AAC/B,WAAO;AAAA,EACT,CAAC;AACD,QAAM,aAAa,oBAAoB,GAAG;AAC1C,MAAI,WAAW,WAAW,GAAG;AAC3B,UAAM,CAAC,SAAS,MAAM,IAAI;AAC1B,QAAI,yBAAyB,MAAM,GAAG;AACpC,aAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,MAAM,QAAQ,SAAS,GAAG,GAAG,SAAS,KAAK;AAAA,IAC7E;AAAA,EACF;AACA,SAAO,EAAE,MAAM,KAAK,QAAQ;AAC9B;AAEO,SAAS,2BAA2B,SAAwD;AACjG,QAAM,UAAU,QAAQ,KAAK;AAC7B,MAAI,CAAC,QAAS,QAAO,EAAE,SAAS,SAAS,SAAS,MAAM;AACxD,QAAM,SAAS,QAAQ,SAAS,IAAI,IAAI,SAAS,QAAQ,SAAS,IAAI,IAAI,SAAS;AACnF,QAAM,SAAS,QAAQ,MAAM,sBAAsB;AACnD,MAAI,UAAU;AACd,QAAM,mBAAmB,OAAO,IAAI,CAAC,UAAU;AAC7C,UAAM,OAAO,gBAAgB,MAAM,KAAK,CAAC;AACzC,QAAI,CAAC,KAAK,UAAU,CAAC,SAAS,IAAI,EAAG,QAAO;AAC5C,UAAM,aAAa,gBAAgB,IAAI;AACvC,QAAI,WAAW,SAAS;AACtB,gBAAU;AACV,aAAO,WAAW,KAAK,KAAK,GAAG;AAAA,IACjC;AACA,WAAO;AAAA,EACT,CAAC;AACD,MAAI,CAAC,QAAS,QAAO,EAAE,SAAS,SAAS,SAAS,MAAM;AACxD,SAAO,EAAE,SAAS,iBAAiB,KAAK,MAAM,GAAG,SAAS,KAAK;AACjE;AAEO,SAAS,kBAAkB,MAAqD;AACrF,MAAI,CAAC,KAAM,QAAO,CAAC;AACnB,QAAM,gBAAgB,KAAK,MAAM,+CAA+C;AAChF,MAAI,eAAe;AACjB,WAAO,EAAE,SAAS,cAAc,CAAC,GAAG,QAAQ,cAAc,CAAC,GAAG,KAAK,EAAE;AAAA,EACvE;AACA,QAAM,QAAQ,KAAK,MAAM,iCAAiC;AAC1D,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,SAAO,EAAE,SAAS,MAAM,CAAC,GAAG,QAAQ,MAAM,CAAC,GAAG,KAAK,EAAE;AACvD;AAEO,SAAS,uBAAuB,MAAiC;AACtE,QAAM,EAAE,SAAS,OAAO,IAAI,kBAAkB,IAAI;AAClD,MAAI,CAAC,QAAS,QAAO,EAAE,MAAM,kBAAkB;AAC/C,MAAI,uBAAuB,MAAM,GAAG;AAClC,WAAO,EAAE,MAAM,qBAAqB,SAAS,OAAO;AAAA,EACtD;AACA,MAAI,yBAAyB,MAAM,GAAG;AACpC,WAAO,EAAE,MAAM,aAAa,SAAS,OAAO;AAAA,EAC9C;AACA,SAAO,EAAE,MAAM,mBAAmB,SAAS,OAAO;AACpD;AAEO,SAAS,0BAA0B,MAA4D;AACpG,QAAM,EAAE,SAAS,OAAO,IAAI,kBAAkB,IAAI;AAClD,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,uBAAuB,MAAM,GAAG;AAClC,UAAM,OAAO,GAAG,OAAQ,KAAK,CAAC;AAC9B,WAAO;AAAA,MACL,SAAS,OAAO,OAAO,SAAS,IAAI;AAAA,MACpC,SAAS;AAAA,IACX;AAAA,EACF;AACA,MAAI,UAAU,yBAAyB,MAAM,GAAG;AAC9C,WAAO;AAAA,MACL,SAAS,SAAS,MAAM,KAAK,OAAO;AAAA,MACpC,SAAS;AAAA,IACX;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,KAAuC;AAC9E,MACE,IAAI,SAAS,eACb,IAAI,SAAS,SAAS,kBAAkB,KACxC,IAAI,WAAW,gBACf;AACA,WACE;AAAA,EAGJ;AACA,MAAI,IAAI,SAAS,eAAe,IAAI,WAAW,IAAI,QAAQ;AACzD,WAAO,gBAAgB,IAAI,MAAM,KAAK,IAAI,OAAO,+CAA+C,IAAI,MAAM;AAAA,EAC5G;AACA,MAAI,IAAI,SAAS,uBAAuB,IAAI,SAAS;AACnD,UAAM,OAAO,IAAI,SAAS,GAAG,IAAI,OAAO,KAAK,CAAC,QAAQ;AACtD,WACE,uBAAuB,IAAI,UAAU,eAAe,6CACvC,IAAI,OAAO,SAAS,IAAI;AAAA,EAEzC;AACA,MAAI,IAAI,SAAS,gBAAgB,IAAI,SAAS;AAC5C,WAAO,mBAAmB,IAAI,OAAO,+FAA+F,IAAI,OAAO;AAAA,EACjJ;AACA,SAAO;AACT;AAGO,SAAS,8BAA8B,MAA6B;AACzE,QAAM,QAAQ,KAAK,MAAM,gEAAgE;AACzF,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,WAAW,MAAM,CAAC,CAAC,QAAQ,MAAM,CAAC,GAAG,KAAK,CAAC;AACpD;AAEO,SAAS,0BAA0B,OAIxB;AAChB,QAAM,OACJ,MAAM,MAAM,KAAK,MAChB,MAAM,UAAU,8BAA8B,MAAM,OAAO,IAAI,SAChE;AACF,MAAI,MAAM;AACR,UAAM,MAAM,uBAAuB,IAAI;AACvC,UAAM,WAAW,yBAAyB,GAAG;AAC7C,QAAI,SAAU,QAAO;AACrB,UAAM,aAAa,0BAA0B,IAAI;AACjD,QAAI,YAAY,SAAS;AACvB,aAAO,oDAAoD,WAAW,OAAO;AAAA,IAC/E;AAAA,EACF;AACA,MAAI,MAAM,WAAW,oBAAoB,KAAK,MAAM,OAAO,GAAG;AAC5D,UAAM,aAAa,2BAA2B,MAAM,OAAO;AAC3D,QAAI,WAAW,SAAS;AACtB,aAAO,+CAA+C,WAAW,OAAO;AAAA,IAC1E;AACA,QAAI,MAAM,aAAa,GAAG;AACxB,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;;;ACzOA,IAAM,eAAe;AACrB,IAAM,YAAY;AAClB,IAAM,mBAAmB;AAEzB,SAAS,KAAK,MAAc,MAAM,KAAa;AAC7C,QAAM,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,KAAK;AAC3C,SAAO,IAAI,SAAS,MAAM,GAAG,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,WAAM;AAC1D;AAEA,SAAS,kBAAkB,MAA8B;AACvD,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,QAAQ,WAAW,GAAG,GAAG;AAC3B,QAAI;AACF,aAAO,KAAK,MAAM,OAAO;AAAA,IAC3B,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,QAAQ,QAAQ,QAAQ,GAAG;AACjC,QAAM,MAAM,QAAQ,YAAY,GAAG;AACnC,MAAI,SAAS,KAAK,MAAM,OAAO;AAC7B,QAAI;AACF,aAAO,KAAK,MAAM,QAAQ,MAAM,OAAO,MAAM,CAAC,CAAC;AAAA,IACjD,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEO,SAAS,wBAAwB,QAAyD;AAC/F,QAAM,OAAO,OAAO;AACpB,MAAI,CAAC,SAAS,IAAI,EAAG,QAAO;AAC5B,QAAM,OAAO,KAAK;AAClB,MAAI,CAAC,SAAS,IAAI,EAAG,QAAO;AAC5B,QAAM,MAAM,CAAC,QAAiB,OAAO,KAAK,GAAG,MAAM,WAAW,KAAK,GAAG,IAAI;AAC1E,QAAM,UAA2B;AAAA,IAC/B,MAAM,IAAI,MAAM;AAAA,IAChB,KAAK,IAAI,KAAK;AAAA,IACd,UAAU,IAAI,UAAU;AAAA,IACxB,MAAM,IAAI,MAAM;AAAA,IAChB,UAAU,IAAI,UAAU;AAAA,IACxB,OAAO,IAAI,OAAO;AAAA,EACpB;AACA,MACE,OAAO,KAAK,UAAU,YACtB,CAAC,QAAQ,YACT,CAAC,QAAQ,QACT,CAAC,QAAQ,YACT,CAAC,QAAQ,OACT,CAAC,QAAQ,MACT;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,OAAgC;AAC9D,QAAM,QAAkB,CAAC;AACzB,MAAI,MAAM,SAAU,OAAM,KAAK,GAAG,MAAM,QAAQ,WAAW;AAC3D,MAAI,MAAM,KAAM,OAAM,KAAK,GAAG,MAAM,IAAI,OAAO;AAC/C,MAAI,MAAM,SAAU,OAAM,KAAK,GAAG,MAAM,QAAQ,WAAW;AAC3D,MAAI,MAAM,IAAK,OAAM,KAAK,GAAG,MAAM,GAAG,MAAM;AAC5C,MAAI,MAAM,KAAM,OAAM,KAAK,GAAG,MAAM,IAAI,OAAO;AAC/C,QAAM,YAAY,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI;AACpD,SAAO,cAAc,MAAM,KAAK,gBAAgB,MAAM,UAAU,IAAI,MAAM,KAAK,KAAK,SAAS;AAC/F;AAEA,SAAS,sBAAsB,QAAiC,QAAwB;AACtF,QAAM,MAAM,OAAO;AACnB,MAAI,SAAS,GAAG,GAAG;AACjB,UAAM,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,QAAQ,KAAK,IAAI;AACvE,UAAM,OAAO,OAAO,IAAI,SAAS,WAAW,IAAI,KAAK,KAAK,IAAI;AAC9D,QAAI,QAAS,QAAO,OAAO,GAAG,IAAI,KAAK,OAAO,KAAK;AACnD,QAAI,KAAM,QAAO;AAAA,EACnB;AACA,QAAM,SAAS,OAAO,OAAO,YAAY,WAAW,OAAO,QAAQ,KAAK,IAAI;AAC5E,MAAI,OAAQ,QAAO;AACnB,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,QAAS,QAAO,KAAK,QAAQ,MAAM,IAAI,EAAE,KAAK,OAAO,KAAK,SAAS,GAAG;AAC1E,SAAO;AACT;AAEO,SAAS,wBAAwB,OAIhB;AACtB,QAAM,WAAW,GAAG,MAAM,MAAM;AAAA,EAAK,MAAM,MAAM,GAAG,KAAK;AACzD,QAAM,SAAS,kBAAkB,QAAQ;AAEzC,MAAI,CAAC,UAAU,CAAC,SAAS,MAAM,GAAG;AAChC,UAAM,OAAO,KAAK,YAAY,QAAQ,MAAM,QAAQ,IAAI,GAAG;AAC3D,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU,MAAM;AAAA,MAChB,SAAS,+CAA+C,IAAI;AAAA,MAC5D,YAAY;AAAA,IACd;AAAA,EACF;AAEA,MAAI,SAAS,OAAO,KAAK,GAAG;AAC1B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU,MAAM;AAAA,MAChB,SAAS,6BAA6B,sBAAsB,QAAQ,MAAM,MAAM,CAAC;AAAA,IACnF;AAAA,EACF;AAEA,QAAM,QAAQ,wBAAwB,MAAM;AAC5C,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU,MAAM;AAAA,MAChB,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AAEA,MAAI,MAAM,aAAa,KAAK,MAAM,UAAU,GAAG;AAC7C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU,MAAM;AAAA,IAChB,SAAS,uBAAuB,KAAK;AAAA,IACrC;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,SAA0B;AACnD,SAAO,aAAa,KAAK,OAAO;AAClC;AAEA,SAAS,YAAY,SAA0B;AAC7C,SAAO,UAAU,KAAK,OAAO;AAC/B;AAEA,SAAS,kBAAkB,OAMH;AACtB,QAAM,YAAY,0BAA0B;AAAA,IAC1C,SAAS,MAAM;AAAA,IACf,UAAU,MAAM;AAAA,EAClB,CAAC;AAED,MAAI,MAAM,aAAa,GAAG;AACxB,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX;AAAA,EACF;AAEA,MAAI,MAAM,aAAa,GAAG;AACxB,UAAM,WAAW,MAAM,UAAU,MAAM,aAAa,KAAK;AACzD,QAAI,WAAW,iBAAiB,KAAK,OAAO,GAAG;AAC7C,YAAMC,QAAO,KAAK,SAAS,GAAG;AAC9B,aAAO;AAAA,QACL,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,aAAa,4BAA4BA,KAAI;AAAA,MACxD;AAAA,IACF;AACA,UAAM,aAAa,2BAA2B,MAAM,OAAO;AAC3D,UAAM,QACJ,WAAW,WAAW,CAAC,YAAY,kBAAkB,WAAW,OAAO,QAAQ;AACjF,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SACE,aACA,gCAAgC,KAAK;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,OAAO,KAAK,MAAM,eAAe,MAAM,UAAU,MAAM,UAAU,QAAQ,MAAM,QAAQ,IAAI,GAAG;AACpG,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU,MAAM;AAAA,IAChB,SAAS,aAAa,wBAAwB,MAAM,QAAQ,MAAM,IAAI;AAAA,EACxE;AACF;AAEO,SAAS,4BAA4B,OAMpB;AACtB,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,cAAc,MAAM,qBAAqB;AAE/C,MAAI,kBAAkB,MAAM,OAAO,GAAG;AACpC,UAAM,OAAO,OAAO,KAAK,KAAK,YAAY,KAAK,KAAK,OAAO,KAAK;AAChE,WAAO,wBAAwB;AAAA,MAC7B,UAAU,MAAM;AAAA,MAChB,QAAQ;AAAA,MACR;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,YAAY,MAAM,OAAO,GAAG;AAC9B,WAAO,kBAAkB;AAAA,MACvB,SAAS,MAAM;AAAA,MACf,UAAU,MAAM;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,kBAAkB,0BAA0B;AAAA,IAChD,SAAS,MAAM;AAAA,IACf,UAAU,MAAM;AAAA,EAClB,CAAC;AACD,MAAI,mBAAmB,MAAM,aAAa,GAAG;AAC3C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU,MAAM;AAAA,MAChB,SAAS;AAAA,IACX;AAAA,EACF;AAEA,MAAI,MAAM,aAAa,GAAG;AACxB,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX;AAAA,EACF;AAEA,QAAM,OAAO,KAAK,eAAe,UAAU,UAAU,QAAQ,MAAM,QAAQ,IAAI,GAAG;AAClF,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU,MAAM;AAAA,IAChB,SAAS,wBAAwB,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC3D;AACF;;;AFjRA,SAAS,kBAAkB,OAAoD;AAC7E,QAAM,OAAO,MAAM;AACnB,SAAQ,MAAM,aAAa,MAAM,OAAO,OAAO,IAAI,KAAK,IAAI,EAAE,YAAY,IAAI;AAGhF;AAGA,SAAS,uBAAuB,UAA8D;AAC5F,MAAI,CAAC,SAAU,QAAO;AACtB,aAAW,OAAO,OAAO,KAAK,QAAQ,GAAG;AACvC,QAAI,IAAI,SAAS,UAAU,GAAG;AAC5B,YAAM,OAAO,IAAI,MAAM,GAAG,CAAC,WAAW,MAAM;AAC5C,aAAO,KAAK,SAAS,OAAO;AAAA,IAC9B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAsB,OAAsC;AACtF,SAAO,cAAc,MAAM,UAAU,MAAM,WAAW,MAAM,mBAAmB;AAC/E,MAAI,MAAM,UAAU;AAClB,WAAO,QAAQ,OAAO,MAAM,UAAU,MAAM,oBAAoB,qBAAqB;AAAA,EACvF;AACF;AAEA,SAAS,4BACP,OACmG;AACnG,MAAI,MAAM,SAAS,eAAe,MAAM,YAAY,YAAa,QAAO;AACxE,QAAM,WACJ,MAAM,aAAa,OAAO,MAAM,cAAc,YAAY,CAAC,MAAM,QAAQ,MAAM,SAAS,IACnF,MAAM,YACP;AACN,QAAM,QAAQ,UAAU;AACxB,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,WAAW;AACjB,QAAM,OAAO,SAAS;AACtB,QAAM,UACJ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,KAAK,OAAQ,KAAiC,YAAY,WAC7G,OAAQ,KAAiC,OAAO,IAChD;AACN,QAAM,SAAS,SAAS;AACxB,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AAC3E,QAAM,OAAQ,OAAmC,WAAY,OAAmC;AAChG,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,QAAM,MAAM;AACZ,QAAM,WAAW,OAAO,IAAI,aAAa,WAAW,IAAI,WAAW;AACnE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAAA,IACtD,QAAQ,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAAA,IACtD,aAAa,OAAO,IAAI,sBAAsB,WAAW,IAAI,oBAAoB;AAAA,EACnF;AACF;AAEA,SAAS,kBAAkB,QAAsB,SAAoC;AACnF,MAAI,QAAQ,SAAS,aAAa,QAAQ,SAAS,oBAAqB;AACxE,SAAO,mBAAmB;AAC5B;AAOO,SAAS,mBAAmB,MAA4B;AAC7D,QAAM,SAAuB;AAAA,IAC3B,cAAc;AAAA,IACd,aAAa;AAAA,IACb,aAAa;AAAA,IACb,aAAa;AAAA,IACb,OAAO;AAAA,IACP,kBAAkB;AAAA,EACpB;AACA,MAAI,CAACC,YAAW,IAAI,EAAG,QAAO;AAC9B,QAAM,QAAQC,cAAa,MAAM,MAAM,EAAE,MAAM,IAAI,EAAE,OAAO,OAAO;AACnE,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,SAAS,IAAI;AAC3B,QAAI,CAAC,MAAO;AACZ,UAAM,KAAK,kBAAkB,KAAK;AAClC,QAAI,IAAI;AACN,aAAO,iBAAiB;AACxB,aAAO,cAAc;AAAA,IACvB;AACA,QACE,MAAM,SAAS,kBACf,MAAM,SACN,OAAO,MAAM,UAAU,YACtB,MAAM,MAAkC,SAAS,uBAClD;AACA,YAAM,QAAS,MAAM,MAAkC;AACvD,UAAI,OAAO,SAAS,WAAY,QAAO,cAAc,OAAO,MAAM,QAAQ,MAAM;AAAA,IAClF;AACA,QAAI,MAAM,SAAS,eAAe,MAAM,WAAW,OAAO,MAAM,YAAY,UAAU;AACpF,YAAM,UAAW,MAAM,QAAoC;AAC3D,UAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,cAAM,OAAO,QAAQ,KAAK,CAAC,SAAS,MAAM,SAAS,UAAU;AAC7D,YAAI,KAAM,QAAO,cAAc,OAAO,KAAK,QAAQ,OAAO,WAAW;AAAA,MACvE;AAAA,IACF;AACA,QAAI,MAAM,SAAS,eAAe,MAAM,YAAY,WAAW;AAC7D,YAAM,WACJ,MAAM,aAAa,OAAO,MAAM,cAAc,YAAY,CAAC,MAAM,QAAQ,MAAM,SAAS,IACnF,MAAM,YACP;AACN,YAAM,OAAO,uBAAuB,QAAQ;AAC5C,UAAI,KAAM,QAAO,cAAc;AAAA,IACjC;AACA,UAAM,QAAQ,4BAA4B,KAAK;AAC/C,QAAI,OAAO;AACT;AAAA,QACE;AAAA,QACA,4BAA4B;AAAA,UAC1B,SAAS,MAAM;AAAA,UACf,UAAU,MAAM;AAAA,UAChB,QAAQ,MAAM;AAAA,UACd,QAAQ,MAAM;AAAA,UACd,mBAAmB,MAAM;AAAA,QAC3B,CAAC;AAAA,MACH;AAAA,IACF;AACA,QAAI,MAAM,SAAS,UAAU;AAC3B,yBAAmB,QAAQ,KAAK;AAAA,IAClC;AAAA,EACF;AACA,SAAO;AACT;;;AGpHA,IAAM,mBAAqC;AAAA,EACzC;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AACF;AAGA,SAASC,MAAK,WAAmB,MAAM,KAAa;AAClD,QAAMC,WAAU,UAAU,QAAQ,QAAQ,GAAG,EAAE,KAAK;AACpD,SAAOA,SAAQ,SAAS,MAAM,GAAGA,SAAQ,MAAM,GAAG,MAAM,CAAC,CAAC,WAAMA;AAClE;AAOO,SAAS,oBACd,WAC2B;AAC3B,QAAM,QAAQ,aAAa,IAAI,KAAK;AACpC,MAAI,CAAC,KAAM,QAAO;AAClB,aAAW,WAAW,kBAAkB;AACtC,QAAI,QAAQ,KAAK,KAAK,IAAI,GAAG;AAC3B,aAAO,EAAE,SAAS,MAAM,QAAQ,GAAG,QAAQ,KAAK,KAAKD,MAAK,IAAI,CAAC,GAAG;AAAA,IACpE;AAAA,EACF;AACA,SAAO;AACT;;;AC/DA,SAAS,WAAW,OAA+B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,UAAU;AACpC;AAEA,SAAS,eAAe,OAAyB;AAC/C,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,KAAK,EAAE,SAAS;AAC5D,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,SAAS;AAChD,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK,KAAe,EAAE,SAAS;AAC5E,SAAO;AACT;AAEA,SAAS,0BAA0B,UAAyD;AAC1F,MAAI,CAAC,UAAU,QAAS,QAAO;AAC/B,MAAI,SAAS,yBAAyB,MAAO,QAAO;AACpD,SAAO,WAAW,SAAS,IAAI;AACjC;AAEA,SAAS,qBACP,MACA,kBACA,YACQ;AACR,QAAM,QAAkB,CAAC,6BAA6B;AACtD,MAAI,SAAS,iBAAiB,SAAS,QAAQ;AAC7C,UAAM;AAAA,MACJ,GAAG,gBAAgB,sBAAsB,qBAAqB,IAAI,KAAK,GAAG;AAAA,IAC5E;AAAA,EACF;AACA,OAAK,SAAS,qBAAqB,SAAS,WAAW,YAAY;AACjE,UAAM,MAAM,WAAW,SAAS,KAAK,WAAW,MAAM,GAAG,EAAE,IAAI;AAC/D,UAAM,KAAK,UAAU,GAAG,qCAAqC;AAAA,EAC/D;AACA,QAAM,KAAK,qFAAgF;AAC3F,SAAO,MAAM,KAAK,IAAI;AACxB;AAMO,SAAS,0BAA0B,OAMP;AACjC,MAAI,MAAM,SAAS,eAAe,MAAM,WAAW,EAAG,QAAO;AAE7D,QAAM,oBAAoB,MAAM,gBAAgB,CAAC,GAAG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE;AAClF,QAAM,aAAa,WAAW,MAAM,UAAU,KAAK,0BAA0B,MAAM,WAAW;AAC9F,QAAM,iBAAiB,mBAAmB;AAC1C,QAAM,oBAAoB,QAAQ,UAAU;AAE5C,MAAI,CAAC,kBAAkB,CAAC,mBAAmB;AACzC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,aAAa;AAAA,MACb,kBAAkB;AAAA,MAClB,YAAY;AAAA,MACZ,iBAAiB;AAAA,IACnB;AAAA,EACF;AAEA,QAAM,OACJ,kBAAkB,oBAAoB,SAAS,iBAAiB,gBAAgB;AAElF,SAAO;AAAA,IACL;AAAA,IACA,aAAa;AAAA,IACb;AAAA,IACA;AAAA,IACA,iBAAiB,qBAAqB,MAAM,kBAAkB,UAAU;AAAA,EAC1E;AACF;;;ACjGA,SAAS,iBAAiB;;;ACKnB,IAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,oBAAoB,IAAI,IAAY,yBAAyB;;;AD9B5D,SAAS,IAAI,KAAa,MAAgB,UAAsB,CAAC,GAAW;AACjF,QAAM,MAAM;AAAA,IACV;AAAA,IACA;AAAA,IACA,mBAAmB,EAAE,KAAK,UAAU,OAAgB,CAAC;AAAA,EACvD;AACA,MAAI,IAAI,WAAW,KAAK,CAAC,QAAQ,cAAc;AAC7C,UAAM,UAAU,OAAO,KAAK,KAAK,GAAG,CAAC,YAAY,IAAI,UAAU,IAAI,MAAM;AACzE,QAAI,QAAQ,WAAY,OAAM,IAAI,MAAM,OAAO;AAC/C,SAAK,OAAO;AAAA,EACd;AACA,SAAO,IAAI,UAAU;AACvB;AAMO,SAAS,eAAe,cAAgC;AAC7D,SAAO,IAAI,cAAc,CAAC,UAAU,SAAS,GAAG,EAAE,cAAc,KAAK,CAAC,EACnE,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AACnB;AASO,SAAS,WAAW,KAAa,MAAkC;AACxE,MAAI;AACF,UAAM,MAAM;AAAA,MACZ;AAAA,MACA;AAAA,MACA,mBAAmB,EAAE,KAAK,UAAU,OAAgB,CAAC;AAAA,IACvD;AACE,WAAO;AAAA,MACL,QAAQ,IAAI;AAAA,MACZ,QAAQ,IAAI,UAAU;AAAA,MACtB,QAAQ,IAAI,UAAU;AAAA,MACtB,OAAO,IAAI,QAAQ,IAAI,MAAM,UAAU;AAAA,IACzC;AAAA,EACF,SAAS,OAAO;AACd,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,OAAQ,MAAgB;AAAA,IAC1B;AAAA,EACF;AACF;AAEO,SAAS,cACd,KACA,UACA,YACsD;AACtD,QAAM,MAAM,WAAW,KAAK,CAAC,cAAc,iBAAiB,UAAU,UAAU,CAAC;AACjF,MAAI,IAAI,WAAW,EAAG,QAAO,EAAE,YAAY,MAAM,OAAO,KAAK;AAC7D,MAAI,IAAI,WAAW,EAAG,QAAO,EAAE,YAAY,OAAO,OAAO,KAAK;AAC9D,SAAO,EAAE,YAAY,MAAM,OAAO,IAAI,SAAS,IAAI,UAAU,IAAI,UAAU,cAAc,IAAI,MAAM,GAAG;AACxG;AAsBO,SAAS,mBAAmB,cAAsB,gBAA6C,eAA4B;AAChI,QAAM,UACJ,OAAO,kBAAkB,WAAW,EAAE,MAAM,cAAc,IAAI;AAChE,QAAM,YAAY,QAAQ,YAAY,KAAK,KAAK,QAAQ,MAAM,KAAK,KAAK;AACxE,QAAM,mBAAmB,QAAQ,YAAY,KAAK,KAAK;AAEvD,MAAI,CAAC,cAAc;AACjB,WAAO,gBAAgB,WAAW,uBAAuB;AAAA,EAC3D;AAEA,QAAM,OAAO,WAAW,cAAc,CAAC,aAAa,MAAM,CAAC;AAC3D,MAAI,KAAK,WAAW,GAAG;AACrB,WAAO,gBAAgB,WAAW,KAAK,SAAS,KAAK,UAAU,KAAK,UAAU,wBAAwB;AAAA,EACxG;AAEA,MAAI;AACJ,MAAI,kBAAkB;AACpB,cAAU;AAAA,EACZ,OAAO;AACL,UAAM,WAAW,WAAW,cAAc,CAAC,aAAa,SAAS,CAAC;AAClE,QAAI,SAAS,WAAW,GAAG;AACzB,aAAO;AAAA,QACL;AAAA,QACA,SAAS,SAAS,SAAS,UAAU,SAAS,UAAU,qBAAqB,SAAS;AAAA,QACtF,KAAK,OAAO,KAAK;AAAA,MACnB;AAAA,IACF;AACA,cAAU,SAAS,OAAO,KAAK;AAAA,EACjC;AAEA,QAAM,UAAU,KAAK,OAAO,KAAK;AACjC,MAAI,YAAY,SAAS;AACvB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,MAAM;AAAA,MACN,UAAU;AAAA,MACV,sBAAsB;AAAA,MACtB,sBAAsB;AAAA,MACtB,UAAU;AAAA,IACZ;AAAA,EACF;AAEA,QAAM,uBAAuB,cAAc,cAAc,SAAS,OAAO;AACzE,QAAM,uBAAuB,cAAc,cAAc,SAAS,OAAO;AACzE,QAAM,QAAQ,qBAAqB,SAAS,qBAAqB,SAAS;AAC1E,MAAI,qBAAqB,cAAc,QAAQ,qBAAqB,cAAc,MAAM;AACtF,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,MAAM;AAAA,MACN,UAAU;AAAA,MACV,sBAAsB,qBAAqB;AAAA,MAC3C,sBAAsB,qBAAqB;AAAA,MAC3C,UAAU;AAAA,MACV,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,WAAgC,qBAAqB,aACvD,UACA,qBAAqB,aACnB,WACA;AAEN,SAAO;AAAA,IACL,SAAS;AAAA,IACT,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UAAU;AAAA,IACV,sBAAsB,qBAAqB;AAAA,IAC3C,sBAAsB,qBAAqB;AAAA,IAC3C;AAAA,IACA,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,EAC3B;AACF;AAEA,SAAS,gBAAgB,MAAc,OAAe,OAAsB,MAAmB;AAC7F,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV,sBAAsB;AAAA,IACtB,sBAAsB;AAAA,IACtB,UAAU;AAAA,IACV;AAAA,EACF;AACF;;;AEhKA,SAASE,YAAW,OAA+B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,UAAU;AACpC;AAEA,SAASC,gBAAe,OAAyB;AAC/C,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,KAAK,EAAE,SAAS;AAC5D,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,SAAS;AAChD,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK,KAAe,EAAE,SAAS;AAC5E,SAAO;AACT;AAEA,SAAS,uBAAuB,UAA0C;AACxE,MAAID,YAAW,SAAS,UAAU,EAAG,QAAO;AAC5C,MAAIA,YAAW,SAAS,KAAK,EAAG,QAAO;AACvC,MAAIA,YAAW,SAAS,kBAAkB,EAAG,QAAO;AACpD,MAAIA,YAAW,SAAS,SAAS,EAAG,QAAO;AAC3C,QAAM,WAAW,SAAS;AAC1B,MAAI,UAAU,WAAW,SAAS,yBAAyB,SAASA,YAAW,SAAS,IAAI,GAAG;AAC7F,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAMO,SAAS,oBAAoB,UAAuD;AACzF,MAAI,CAACC,gBAAe,SAAS,WAAW,EAAG,QAAO,EAAE,SAAS,MAAM;AACnE,MAAI,SAAS,aAAa,WAAW,EAAG,QAAO,EAAE,SAAS,MAAM;AAChE,MAAI,CAAC,uBAAuB,QAAQ,GAAG;AACrC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,QAAQ,gBAAgB,SAAS,aAAa,MAAM;AAAA,IACtD;AAAA,EACF;AACA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ,gBAAgB,SAAS,aAAa,MAAM;AAAA,EACtD;AACF;AAEO,SAAS,uBAAuB,SAAmD;AACxF,MAAI,CAAC,QAAQ,QAAS,QAAO;AAC7B,SAAO,QAAQ,UAAU,QAAQ,UAAU;AAC7C;;;ACtEA,SAASC,oBAAmB,MAA8C;AACxE,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAQ,WAAW,GAAG,EAAG,QAAO;AACrC,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,OAAO;AAC1C,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,yBAAyB,QAAyC;AACzE,QAAM,MACJ,OAAO,0BACP,OAAO,4BACP,OAAO,aACP,OAAO;AACT,SAAO,MAAM,QAAQ,GAAG,IAAI,IAAI,SAAS;AAC3C;AAEO,SAAS,uCACd,OACgC;AAChC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,SAASA,oBAAmB,OAAO;AACzC,MAAI,OAAQ,QAAO;AAEnB,QAAM,aAAwC,CAAC;AAE/C,QAAM,UAAU;AAChB,MAAI;AACJ,UAAQ,aAAa,QAAQ,KAAK,OAAO,OAAO,MAAM;AACpD,UAAM,YAAYA,oBAAmB,WAAW,CAAC,KAAK,EAAE;AACxD,QAAI,UAAW,YAAW,KAAK,SAAS;AAAA,EAC1C;AAEA,QAAM,aAAa,QAAQ,QAAQ,GAAG;AACtC,QAAM,YAAY,QAAQ,YAAY,GAAG;AACzC,MAAI,cAAc,KAAK,YAAY,YAAY;AAC7C,UAAM,QAAQA,oBAAmB,QAAQ,MAAM,YAAY,YAAY,CAAC,CAAC;AACzE,QAAI,MAAO,YAAW,KAAK,KAAK;AAAA,EAClC;AAEA,MAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,MAAI,OAAO,WAAW,WAAW,SAAS,CAAC;AAC3C,MAAI,YAAY,yBAAyB,IAAI;AAC7C,aAAW,aAAa,YAAY;AAClC,UAAM,QAAQ,yBAAyB,SAAS;AAChD,QAAI,QAAQ,WAAW;AACrB,aAAO;AACP,kBAAY;AAAA,IACd;AAAA,EACF;AACA,SAAO;AACT;;;AC3BA,SAASC,YAAW,OAA+B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,IAAI,MAAM,KAAK;AACrB,SAAO,EAAE,SAAS,IAAI;AACxB;AAEA,SAASC,gBAAe,OAAyB;AAC/C,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,KAAK,EAAE,SAAS;AAC5D,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK,KAAe,EAAE,SAAS;AAC5E,SAAO;AACT;AAEA,SAAS,eAAe,KAA4B;AAClD,QAAM,IAAI,IACP,KAAK,EACL,MAAM,qDAAqD;AAC9D,MAAI,CAAC,EAAG,QAAOD,YAAW,GAAG;AAC7B,SAAO,sBAAsB,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;AAChD;AAEA,SAAS,YAAY,KAAqB;AACxC,QAAM,IAAI,IACP,KAAK,EACL,MAAM,qDAAqD;AAC9D,MAAI,CAAC,EAAG,QAAO,IAAI,KAAK,EAAE,YAAY;AACtC,SAAO,GAAG,EAAE,CAAC,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;AAC3C;AAEA,SAAS,oBAAoB,aAAgD;AAC3E,MAAI,SAAyC;AAC7C,MAAI,OAAO,gBAAgB,UAAU;AACnC,UAAM,WAAW,uCAAuC,WAAW;AACnE,QAAI,SAAU,UAAS;AAAA,EACzB,WAAW,eAAe,OAAO,gBAAgB,YAAY,CAAC,MAAM,QAAQ,WAAW,GAAG;AACxF,aAAS;AAAA,EACX;AACA,MAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,QAAM,MAAM,OAAO,0BAA0B,OAAO;AACpD,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACjC,QAAM,MAAgC,CAAC;AACvC,aAAW,QAAQ,KAAK;AACtB,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG;AAC9D,UAAM,MAAM;AACZ,UAAM,QAAQ,eAAe,OAAO,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;AAClE,UAAM,UAAUA,YAAW,IAAI,OAAO;AACtC,QAAI,CAAC,SAAU,YAAY,YAAY,YAAY,aAAa,YAAY,UAAY;AACxF,QAAI,KAAK;AAAA,MACP;AAAA,MACA;AAAA,MACA,aAAaA,YAAW,IAAI,eAAe,IAAI,YAAY;AAAA,MAC3D,QAAQA,YAAW,IAAI,MAAM;AAAA,IAC/B,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAGA,SAAS,qBAAqB,UAAiC,aAAgC;AAC7F,QAAM,OAAiB,CAAC;AACxB,QAAM,eAAe,eAAeA,YAAW,SAAS,KAAK,KAAK,EAAE;AACpE,MAAI,aAAc,MAAK,KAAK,YAAY;AACxC,MAAI,eAAe,OAAO,gBAAgB,YAAY,CAAC,MAAM,QAAQ,WAAW,GAAG;AACjF,UAAM,SAAS;AACf,UAAM,KAAK,eAAe,OAAO,OAAO,SAAS,OAAO,UAAU,EAAE,CAAC;AACrE,QAAI,GAAI,MAAK,KAAK,EAAE;AAAA,EACtB;AACA,SAAO,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC;AAC1B;AAEO,SAAS,4BAA4B,OAIX;AAC/B,QAAM,EAAE,UAAU,SAAS,IAAI;AAC/B,QAAM,cAAc,MAAM,eAAe,SAAS;AAElD,MACE,CAAC,SAAS,eACV,SAAS,aAAa,WAAW,KACjC,CAAC,SAAS,yBACV;AACA,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AACA,MAAI,CAACC,gBAAe,WAAW,GAAG;AAChC,UAAM,gBACJ,SAAS,mCACR,SAAS,eACR,QAAQ,SAAS,uBAAuB,KACxC,SAAS,aAAa,SAAS;AACnC,QAAI,iBAAiB,SAAS,aAAa,SAAS,GAAG;AACrD,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ,oDAAoD,SAAS,aAAa,KAAK,IAAI,CAAC;AAAA,MAC9F;AAAA,IACF;AACA,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AAEA,QAAM,iCACJ,SAAS,mCACR,SAAS,eACR,QAAQ,SAAS,uBAAuB,KACxC,SAAS,aAAa,SAAS;AAEnC,MAAI,CAAC,kCAAkC,CAAC,SAAS,yBAAyB;AACxE,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AAEA,QAAM,eAAe,SAAS,0BAC1B,eAAeD,YAAW,SAAS,WAAW,KAAK,EAAE,MACpD,SAAS,aAAa,WAAW,IAC9B,eAAe,SAAS,aAAa,CAAC,CAAE,IACxC,QACJ;AACJ,MAAI,cAAc;AAChB,UAAM,YAAY,qBAAqB,UAAU,WAAW;AAC5D,UAAM,aACJ,eACA,OAAO,gBAAgB,YACvB,CAAC,MAAM,QAAQ,WAAW,KACzB,YAAwC,+BAA+B;AAC1E,QAAI,CAAC,YAAY;AACf,iBAAW,MAAM,WAAW;AAC1B,YAAI,OAAO,cAAc;AACvB,iBAAO;AAAA,YACL,SAAS;AAAA,YACT,QAAQ;AAAA,YACR,QAAQ,uCAAuC,EAAE,gCAAgC,YAAY;AAAA,UAC/F;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAME,kBAAiB,oBAAoB,WAAW;AACtD,UAAM,QAAQA,gBAAe,KAAK,CAAC,MAAM,EAAE,UAAU,YAAY;AACjE,QACE,CAAC,SACA,MAAM,YAAY,YACjB,EAAE,MAAM,QAAQ,KAAK,MAAM,MAAM,YAAY,aAAa,MAAM,YAAY,aAC9E;AACA,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ,0CAA0C,YAAY;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,iBAAiB,oBAAoB,WAAW;AACtD,QAAM,QAAQ,IAAI;AAAA,IAChB,eAAe,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,GAAG,CAAC,CAAU;AAAA,EAC9D;AACA,QAAM,YAAY,IAAI;AAAA,IACpB,SAAS,aAAa,IAAI,CAAC,MAAM,YAAY,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,OAAO;AAAA,EACtF;AACA,QAAM,cAAc,qBAAqB,UAAU,WAAW;AAE9D,MAAI,SAAS,aAAa;AACxB,eAAW,MAAM,aAAa;AAC5B,UAAI,UAAU,OAAO,KAAK,CAAC,UAAU,IAAI,YAAY,EAAE,CAAC,GAAG;AACzD,eAAO;AAAA,UACL,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,QAAQ,6CAA6C,EAAE;AAAA,QACzD;AAAA,MACF;AACA,UAAI,UAAU,SAAS,GAAG;AACxB,eAAO;AAAA,UACL,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,SAAS,aAAa,WAAW,EAAG,QAAO,EAAE,SAAS,MAAM;AAEhE,QAAM,UAAoB,CAAC;AAC3B,aAAW,UAAU,SAAS,cAAc;AAC1C,UAAM,MAAM,YAAY,eAAe,MAAM,KAAK,MAAM;AACxD,UAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,QAAI,CAAC,OAAO;AACV,cAAQ,KAAK,GAAG;AAChB;AAAA,IACF;AACA,QAAI,MAAM,YAAY,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG;AACvD,cAAQ,KAAK,GAAG;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ,QAAQ,MAAM,CAAC,MAAM,MAAM,IAAI,CAAC,CAAC,IACrC,iCACA;AAAA,MACJ,QAAQ,wCAAwC,QAAQ,KAAK,IAAI,CAAC;AAAA,IACpE;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAEO,SAAS,+BACd,SACoB;AACpB,MAAI,CAAC,QAAQ,QAAS,QAAO;AAC7B,SAAO,QAAQ,UAAU,QAAQ;AACnC;;;AChOO,IAAM,cAAc;AACpB,IAAM,WAAW;AAuLjB,SAAS,iBAAiB,OAqBb;AAClB,QAAM,MAAM,KAAK,IAAI;AACrB,MAAI,MAAM,qBAAqB,CAAC,mCAAmC,MAAM,iBAAiB,GAAG;AAC3F,WAAO,EAAE,OAAO,WAAW,QAAQ,MAAM,kBAAkB;AAAA,EAC7D;AACA,MAAI,MAAM,aAAa;AACrB,QAAI,MAAM,aAAa,gCAAgC,MAAM,WAAW,GAAG;AACzE,aAAO,EAAE,OAAO,QAAQ,QAAQ,4CAA4C;AAAA,IAC9E;AACA,UAAM,kBAAkB;AAAA,MACtB,aAAa,MAAM;AAAA,MACnB,cAAc,MAAM,gBAAgB,CAAC;AAAA,MACrC,aAAa,MAAM,eAAe;AAAA,MAClC,OAAO,MAAM,SAAS;AAAA,IACxB;AACA,UAAM,UAAU,oBAAoB,eAAe;AACnD,QAAI,QAAQ,SAAS;AACnB,YAAM,SAAS,uBAAuB,OAAO;AAC7C,aAAO;AAAA,QACL,OAAO;AAAA,QACP,QAAQ,QAAQ,SACZ,oBAAoB,QAAQ,MAAM,MAAM,MAAM,KAC9C,oBAAoB,MAAM;AAAA,MAChC;AAAA,IACF;AACA,QAAI,MAAM,iBAAiB;AACzB,YAAM,kBAAkB,4BAA4B;AAAA,QAClD,UAAU,MAAM;AAAA,QAChB,UAAU;AAAA,QACV,aAAa,MAAM;AAAA,MACrB,CAAC;AACD,YAAM,iBAAiB,+BAA+B,eAAe;AACrE,UAAI,gBAAgB;AAClB,eAAO;AAAA,UACL,OAAO;AAAA,UACP,QAAQ,gBAAgB,SACpB,qBAAqB,gBAAgB,MAAM,MAAM,cAAc,KAC/D,qBAAqB,cAAc;AAAA,QACzC;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,OAAO,QAAQ,QAAQ,wBAAwB;AAAA,EAC1D;AACA,MAAI,CAAC,MAAM,OAAO;AAChB,QAAI,uBAAuB,KAAK,GAAG;AACjC,aAAO,EAAE,OAAO,QAAQ,QAAQ,gCAAgC;AAAA,IAClE;AAIA,UAAM,aAAa,oBAAoB,MAAM,KAAK;AAClD,QAAI,WAAY,QAAO,EAAE,OAAO,WAAW,QAAQ,WAAW,OAAO;AACrE,UAAM,UAAU,0BAA0B;AAAA,MACxC,OAAO;AAAA,MACP,aAAa;AAAA,MACb,cAAc,MAAM;AAAA,MACpB,aAAa,MAAM;AAAA,IACrB,CAAC;AACD,QAAI,SAAS,aAAa;AACxB,YAAMC,QAAO,MAAM,OAAO,KAAK;AAC/B,aAAO;AAAA,QACL,OAAO;AAAA,QACP,QAAQA,QAAO,GAAG,QAAQ,eAAe,KAAKA,KAAI,MAAM,QAAQ;AAAA,MAClE;AAAA,IACF;AACA,UAAM,OAAO,MAAM,OAAO,KAAK;AAC/B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,OACJ,0CAA0C,IAAI,KAC9C,SAAS,mBAAmB;AAAA,IAClC;AAAA,EACF;AACA,MAAI,MAAM,kBAAkB;AAC1B,WAAO,EAAE,OAAO,WAAW,QAAQ,sCAAsC,MAAM,gBAAgB,GAAG;AAAA,EACpG;AACA,QAAM,UAAU,MAAM,YAAY,KAAK,MAAM,MAAM,SAAS,IAAI;AAChE,MACE,CAAC,MAAM,gBACP,MAAM,gBAAgB,KACtB,MAAM,mBAAmB,KACzB,OAAO,SAAS,OAAO,KACvB,MAAM,UAAU,aAChB;AACA,WAAO,EAAE,OAAO,mBAAmB,QAAQ,yBAAyB,QAAQ,OAAO,CAAC,gBAAgB;AAAA,EACtG;AACA,QAAM,QAAQ,MAAM,iBAAiB,KAAK,MAAM,MAAM,cAAc,IAAI;AACxE,MAAI,OAAO,SAAS,KAAK,KAAK,MAAM,QAAQ,UAAU;AACpD,WAAO,EAAE,OAAO,SAAS,QAAQ,uCAAuC,QAAQ,KAAK,CAAC,IAAI;AAAA,EAC5F;AACA,SAAO,EAAE,OAAO,MAAM,QAAQ,kBAAkB;AAClD;AAEA,SAAS,mCAAmC,QAA4C;AACtF,QAAM,OAAO,QAAQ,KAAK;AAC1B,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,kDAAkD,KAAK,IAAI,KAAK,yBAAyB,KAAK,IAAI;AAC3G;AAEA,SAAS,uBAAuB,OAUpB;AACV,MAAI,MAAM,YAAa,QAAO;AAC9B,MAAI,MAAM,UAAU,MAAM,UAAW,QAAO;AAC5C,MAAI,MAAM,cAAc,MAAM,MAAM,eAAe,KAAK,KAAK,MAAM,iBAAiB,EAAG,QAAO;AAC9F,MAAI,MAAM,OAAO,KAAK,EAAG,QAAO;AAChC,OAAK,MAAM,gBAAgB,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,EAAG,QAAO;AACnE,SAAO,qCAAqC,KAAK,MAAM,mBAAmB,EAAE;AAC9E;AAEA,SAAS,gCAAgC,OAAyB;AAChE,MAAI,SAAyC;AAC7C,MAAI,OAAO,UAAU,SAAU,UAAS,uCAAuC,KAAK;AAAA,WAC3E,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,EAAG,UAAS;AAC/E,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,MAAM,OAAO,0BAA0B,OAAO;AACpD,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO;AAChC,SAAO,IAAI,KAAK,CAAC,SAAyC;AACxD,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,WAAO,OAAQ,KAAiC,WAAW,EAAE,EAAE,KAAK,MAAM;AAAA,EAC5E,CAAC;AACH;AAEA,SAAS,mBACP,QACA,mBACA,WACS;AACT,QAAM,cAAc,OAAO,oBAAoB;AAC/C,MAAI,OAAO,wBAAwB,+BAA+B,gBAAgB,UAAa,gBAAgB,MAAM;AACnH,WAAO;AAAA,EACT;AACA,MAAI,kBAAmB,QAAO;AAC9B,MAAI,gBAAgB,UAAa,gBAAgB,KAAM,QAAO;AAC9D,SAAO,iCAAiC,SAAS;AACnD;AAEO,SAAS,oBAAoB,QAA6B,UAA+B,CAAC,GAA2B;AAC1H,QAAM,SAAS,mBAAmB,OAAO,UAAU;AACnD,QAAM,YAAY,eAAe,OAAO,aAAa;AACrD,QAAM,yBACJ,OAAO,OAAO,yBAAyB,YAAY,OAAO,qBAAqB,KAAK,EAAE,SAAS;AACjG,QAAM,cAAc,mBAAmB,QAAQ,OAAO,aAAa,SAAS;AAC5E,QAAM,QAAQ,yBAAyB,QAAQ,WAAW,OAAO,GAAG;AACpE,QAAM,cAAc,SAAS,OAAO,UAAU;AAC9C,QAAM,cAAc,SAAS,OAAO,UAAU;AAC9C,QAAM,iBAAiB,SAAS,OAAO,aAAa;AACpD,QAAM,eAAe,eAAe,OAAO,YAAY;AACvD,QAAM,cAAc,mBAAmB,OAAO,cAAc;AAAA,IAC1D,MAAM,QAAQ;AAAA,IACd,YAAY,QAAQ;AAAA,EACtB,CAAC;AACD,QAAM,iBAAiB,UAAU;AAAA,IAC/B,OAAO;AAAA,IACP,UAAU;AAAA,IACV,UAAU,OAAO,UAAU;AAAA,IAC3B,UAAU,OAAO,UAAU;AAAA,IAC3B,UAAU,OAAO,aAAa;AAAA,EAChC,CAAC;AAID,QAAM,QACJ,OAAO,UACN,CAAC,SAAS,CAAC,cAAc,SAAS,OAAO,YAAY,EAAE,EAAE,KAAK,KAAK,SAAY;AAClF,QAAM,oBACJ,OAAO,OAAO,sBAAsB,YAAY,OAAO,kBAAkB,KAAK,IAC1E,OAAO,kBAAkB,KAAK,IAC9B;AACN,QAAM,6BAA6B,mCAAmC,iBAAiB,IACnF,OACA;AACJ,QAAM,kBAAgD,OAAO,oBACzD;AAAA,IACE,aAAa;AAAA,IACb,cAAc,CAAC,OAAO,iBAAiB;AAAA,IACvC,aAAa,OAAO;AAAA,IACpB,yBAAyB;AAAA,EAC3B,IACA;AAEJ,QAAM,YAAY,iBAAiB;AAAA,IACjC;AAAA,IACA;AAAA,IACA,cAAc,OAAO;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB,UAAU;AAAA,IAC5B,WAAW,OAAO;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB;AAAA,IACA,OAAO,OAAO,qBAAqB,OAAO,aAAa;AAAA,IACvD,WAAW,OAAO,cAAc;AAAA,IAChC,QAAQ,OAAO,UAAU;AAAA,IACzB,WAAW,OAAO,aAAa;AAAA,IAC/B,iBAAiB,OAAO,mBAAmB;AAAA,EAC7C,CAAC;AACD,QAAM,oBACJ,8BAA8B,UAAU,UAAU,YAC9C,YACA,0BAA0B,UAAU,UAAU,SAC5C,SACA,cACE,WACA,QACE,YACA;AACZ,SAAO;AAAA,IACL,OAAO,OAAO;AAAA,IACd,QAAQ,OAAO;AAAA,IACf,KAAK,OAAO;AAAA,IACZ;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ,OAAO;AAAA,IACf,cAAc,OAAO;AAAA,IACrB,YAAY,OAAO;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc,OAAO;AAAA,IACrB,aAAa,OAAO;AAAA,IACpB;AAAA,IACA,aAAa,yBAAyB,OAAO,OAAO;AAAA,IACpD,gBAAgB,UAAU;AAAA,IAC1B,iBAAiB,UAAU;AAAA,IAC3B,oBAAoB,UAAU;AAAA,IAC9B,sBAAsB,UAAU;AAAA,IAChC,kBAAkB,UAAU;AAAA,IAC5B,oBAAoB,UAAU;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,8BAA8B,OAAO,gCAAgC;AAAA,IACrE,2BAA2B,OAAO,6BAA6B;AAAA,EACjE;AACF;AAEO,SAAS,uBAAuB,QAAyC;AAC9E,MAAI,OAAO,YAAa,QAAO;AAC/B,MAAI,OAAO,UAAU,MAAO,QAAO;AACnC,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,OAAQ,QAAO;AACnE,SAAO;AACT;AAGO,SAAS,6BAA6B,QAAyC;AACpF,MAAI,CAAC,OAAO,YAAa,QAAO;AAChC,SAAO,OAAO,UAAU,UAAU,qBAAqB,OAAO,UAAU,UAAU;AACpF;;;AC1eA,IAAM,uBAAuB;AAC7B,IAAM,gBAAgB;AAEtB,SAASC,YAAW,OAAiD;AACnE,MAAI,CAAC,OAAO,KAAK,EAAG,QAAO;AAC3B,SAAO,MAAM,KAAK;AACpB;AAGO,SAAS,uBAAuB,YAAsD;AAC3F,QAAM,QAAQA,YAAW,UAAU;AACnC,MAAI,CAAC,OAAO,WAAW,oBAAoB,EAAG,QAAO;AACrD,QAAM,OAAO,MAAM,MAAM,qBAAqB,MAAM;AACpD,QAAM,WAAW,KAAK,QAAQ,aAAa;AAC3C,MAAI,YAAY,EAAG,QAAO,KAAK,MAAM,GAAG,QAAQ,EAAE,KAAK,KAAK;AAC5D,SAAO,KAAK,KAAK,KAAK;AACxB;AAkBO,SAAS,4BACd,YACA,OACS;AACT,QAAM,cAAcC,YAAW,KAAK;AACpC,MAAI,CAAC,YAAa,QAAO;AACzB,SAAO,uBAAuB,UAAU,MAAM;AAChD;;;AC3BO,SAAS,qBAAqB,OAIN;AAC7B,QAAM,EAAE,QAAQ,QAAQ,UAAU,IAAI;AACtC,QAAM,aAAa,WAAW,cAAc;AAE5C,MAAI,OAAO,cAAc,WAAW;AAClC,QACE,UAAU,WAAW,aACrB,cACA,CAAC,4BAA4B,YAAY,OAAO,KAAK,GACrD;AACA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,sBAAsB,UAAU,0BAA0B,OAAO,KAAK;AAAA,MAChF;AAAA,IACF;AACA,QAAI,UAAU,WAAW,aAAa,CAAC,OAAO,SAAS,CAAC,OAAO,aAAa;AAC1E,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAEA,MAAI,OAAO,WAAW,aAAa,CAAC,OAAO,SAAS,CAAC,OAAO,aAAa;AACvE,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,MAAI,OAAO,UAAU,UAAU,SAAS;AACtC,WAAO,EAAE,QAAQ,SAAS,QAAQ,OAAO,UAAU,OAAO;AAAA,EAC5D;AAEA,QAAM,OAAO,OAAO,kBAAkB,KAAK,MAAM,OAAO,eAAe,IAAI;AAC3E,MAAI,OAAO,SAAS,OAAO,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,UAAU;AACzE,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,wBAAwB,KAAK,MAAM,WAAW,GAAI,CAAC;AAAA,IAC7D;AAAA,EACF;AAEA,MAAI,OAAO,SAAS,OAAO,OAAO,CAAC,WAAW,OAAO,GAAG,GAAG;AACzD,WAAO,EAAE,QAAQ,YAAY,QAAQ,wCAAwC;AAAA,EAC/E;AAEA,MAAI,WAAW,WAAW,aAAa,CAAC,OAAO,SAAS,OAAO,aAAa;AAC1E,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,QAAQ,OAAO,UAAU,UAAU;AAAA,EACrC;AACF;;;AC1EA,SAAS,WAAAC,gBAAe;AACxB,OAAOC,WAAU;;;ACDjB,SAAS,SAAS,gBAAgB;AAClC,OAAO,UAAU;;;ACaV,IAAM,mCAAmC,KAAK,OAAO,OAAO;AAI5D,IAAM,uCAAuC,KAAK,OAAO,OAAO;;;ACXvE,IAAM,0BAA0B,KAAK,OAAO,OAAO;AACnD,IAAM,8BAA8B,KAAK,OAAO,OAAO;;;ACShD,IAAM,+BAA+B,MAAM,OAAO;AAGlD,IAAM,4BAA4B,IAAI,OAAO,OAAO;;;AHkB3D,IAAM,aAAa,KAAK,KAAK,QAAQ,GAAG,SAAS;AACjD,IAAM,cAAc,KAAK,KAAK,YAAY,aAAa;AACvD,IAAM,mBAAmB,KAAK,KAAK,YAAY,aAAa;AAoF5D,IAAM,6BAA6B,MAAM,OAAO;AAChD,IAAM,0BAA0B,IAAI,OAAO,OAAO;;;ADvHlD,IAAM,cAAcC,MAAK,KAAKC,SAAQ,GAAG,aAAa,SAAS;;;AKIxD,SAAS,iBAAiB,QAAsC;AACrE,SAAO,QAAQ,OAAO,sBAAsB,KAAK,CAAC;AACpD;;;ACCO,SAAS,8BAA8B,OAGnB;AACzB,QAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,QAAM,WAAqB,CAAC;AAE5B,MAAI,OAAO,WAAW;AACpB,aAAS,KAAK,sCAAsC;AAAA,EACtD;AACA,MAAI,CAAC,OAAO,aAAa,CAAC,OAAO,QAAQ;AACvC,aAAS,KAAK,kCAAkC;AAAA,EAClD;AACA,MAAI,iBAAiB,MAAM,GAAG;AAC5B,aAAS,KAAK,iCAAiC;AAAA,EACjD;AACA,MAAI,OAAO,mBAAmB;AAC5B,aAAS,KAAK,OAAO,iBAAiB;AAAA,EACxC;AACA,MAAI,OAAO,oBAAoB,OAAO,OAAO;AAC3C,aAAS,KAAK,6BAA6B,OAAO,gBAAgB,EAAE;AAAA,EACtE;AACA,MAAI,OAAO,UAAU,UAAU,WAAW;AACxC,aAAS,KAAK,OAAO,UAAU,UAAU,0BAA0B;AAAA,EACrE;AACA,MAAI,6BAA6B,MAAM,GAAG;AACxC,aAAS,KAAK,OAAO,UAAU,UAAU,sBAAsB;AAAA,EACjE;AAEA,QAAM,mBAAmB,uBAAuB,MAAM;AACtD,MAAI;AACJ,MAAI,kBAAkB;AACpB,QAAI,OAAO,YAAa,kBAAiB;AAAA,aAChC,CAAC,OAAO,MAAO,kBAAiB;AAAA,QACpC,kBAAiB;AAAA,EACxB,OAAO;AACL,aAAS,KAAK,6CAA6C;AAAA,EAC7D;AAEA,QAAM,WAAW,oBAAoB,SAAS,WAAW;AACzD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
   "names": ["existsSync", "readFileSync", "embedded", "existsSync", "readFileSync", "entry", "existsSync", "readFileSync", "tail", "existsSync", "readFileSync", "tidy", "oneLine", "trimOrNull", "hasFinalResult", "tryParseJsonObject", "trimOrNull", "hasFinalResult", "reconciliation", "tail", "trimOrNull", "trimOrNull", "homedir", "path", "path", "homedir"]
 }