@mono-agent/agent-app 0.19.1 → 0.20.1

package/dist/process-jobs-context.d.ts

@@ -0,0 +1,24 @@
+import type { AgentRequestBase, AgentResponder } from "@mono-agent/agent-contracts";
+export interface ProcessJobWakeContext {
+    readonly jobId: string;
+    readonly chainDepth: number;
+}
+export type ProcessJobWakeContextResolution = {
+    readonly kind: "none";
+} | {
+    readonly kind: "resolved";
+    readonly context: ProcessJobWakeContext;
+} | {
+    readonly kind: "missed";
+};
+/** Run a genuine channel turn with host-owned fan-out depth attached out of band. */
+export declare function runWithProcessJobWakeContext<T>(context: ProcessJobWakeContext, operation: () => Promise<T>, deliveryKey: string): Promise<T>;
+/**
+ * Capture an admitted host wake on the exact request identity that survives
+ * the responder-to-harness queue boundary. The association remains outside
+ * public/string metadata, prompts, history, traces, and serialized payloads.
+ */
+export declare function bindProcessJobWakeContextToResponder(responder: AgentResponder): AgentResponder;
+/** Resolve only an association previously issued by the app-owned responder seam. */
+export declare function processJobWakeContextForRequest(request: Pick<AgentRequestBase, "metadata">): ProcessJobWakeContextResolution;
+//# sourceMappingURL=process-jobs-context.d.ts.map

package/dist/process-jobs-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-jobs-context.d.ts","sourceRoot":"","sources":["../src/process-jobs-context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,gBAAgB,EAChB,cAAc,EAEf,MAAM,6BAA6B,CAAC;AAErC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAYD,MAAM,MAAM,+BAA+B,GACvC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAgBhC,qFAAqF;AACrF,wBAAsB,4BAA4B,CAAC,CAAC,EAClD,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,CAAC,CAAC,CAgBZ;AAED;;;;GAIG;AACH,wBAAgB,oCAAoC,CAAC,SAAS,EAAE,cAAc,GAAG,cAAc,CAoD9F;AAED,qFAAqF;AACrF,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAC1C,+BAA+B,CAYjC"}

package/dist/process-jobs-context.js

@@ -0,0 +1,135 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+const wakeContext = new AsyncLocalStorage();
+const PROCESS_JOB_WAKE_DELIVERY_METADATA = Symbol.for("mono-agent.process-job-wake.delivery-key.v1");
+// The metadata object is only an identity key. No string field is added to it,
+// and a wire/user-created object cannot forge membership in this owner-private
+// map or serialize the symbol-keyed adapter fallback below.
+// The responder-to-harness conversion deliberately preserves this object
+// identity even when same-conversation live-session work is queued and cloned.
+const wakeContextByRequestMetadata = new WeakMap();
+// Registered before the channel router is entered and cleared only after that
+// route settles. Slack and Telegram carry this exact durable delivery identity
+// on a non-JSON symbol so a queued adapter callback can recover its own flight
+// without attributing context to unrelated work in the same conversation.
+const wakeFlightsByDeliveryKey = new Map();
+/** Run a genuine channel turn with host-owned fan-out depth attached out of band. */
+export async function runWithProcessJobWakeContext(context, operation, deliveryKey) {
+    const flight = Object.freeze({
+        ...context,
+        token: Object.freeze({}),
+        deliveryKey,
+    });
+    const current = wakeFlightsByDeliveryKey.get(deliveryKey) ?? [];
+    wakeFlightsByDeliveryKey.set(deliveryKey, [...current, flight]);
+    try {
+        return await wakeContext.run(flight, operation);
+    }
+    finally {
+        const active = wakeFlightsByDeliveryKey.get(deliveryKey) ?? [];
+        const remaining = active.filter((candidate) => candidate.token !== flight.token);
+        if (remaining.length === 0)
+            wakeFlightsByDeliveryKey.delete(deliveryKey);
+        else
+            wakeFlightsByDeliveryKey.set(deliveryKey, remaining);
+    }
+}
+/**
+ * Capture an admitted host wake on the exact request identity that survives
+ * the responder-to-harness queue boundary. The association remains outside
+ * public/string metadata, prompts, history, traces, and serialized payloads.
+ */
+export function bindProcessJobWakeContextToResponder(responder) {
+    const dispose = responder.dispose;
+    const startNewSession = responder.startNewSession;
+    return {
+        respond: async (request, stream) => {
+            const context = wakeContext.getStore();
+            let installed;
+            if (context !== undefined) {
+                if (request.metadata === undefined) {
+                    throw new Error("A process-job wake request is missing its host-owned request identity.");
+                }
+                installed = { token: Object.freeze({}), flight: context };
+                const current = wakeContextByRequestMetadata.get(request.metadata) ?? [];
+                wakeContextByRequestMetadata.set(request.metadata, [...current, installed]);
+            }
+            try {
+                return await responder.respond(request, stream);
+            }
+            finally {
+                if (installed !== undefined && request.metadata !== undefined) {
+                    const current = wakeContextByRequestMetadata.get(request.metadata) ?? [];
+                    const remaining = current.filter((candidate) => candidate.token !== installed.token);
+                    // Only the invocation that installed this exact token may remove it.
+                    // Re-entrant calls using the same metadata identity retain their own
+                    // binding until their corresponding responder invocation settles.
+                    if (remaining.length === 0)
+                        wakeContextByRequestMetadata.delete(request.metadata);
+                    else
+                        wakeContextByRequestMetadata.set(request.metadata, remaining);
+                }
+            }
+        },
+        ...(responder.cancel === undefined ? {} : { cancel: responder.cancel.bind(responder) }),
+        ...(responder.offerLiveInput === undefined
+            ? {}
+            : { offerLiveInput: responder.offerLiveInput.bind(responder) }),
+        ...(responder.deliverVerbatim === undefined
+            ? {}
+            : { deliverVerbatim: responder.deliverVerbatim.bind(responder) }),
+        ...(responder.openReplyArtifact === undefined
+            ? {}
+            : { openReplyArtifact: responder.openReplyArtifact.bind(responder) }),
+        ...(responder.loadMcpApp === undefined
+            ? {}
+            : { loadMcpApp: responder.loadMcpApp.bind(responder) }),
+        ...(responder.requestMcpApp === undefined
+            ? {}
+            : { requestMcpApp: responder.requestMcpApp.bind(responder) }),
+        ...(startNewSession === undefined
+            ? {}
+            : { startNewSession: startNewSession.bind(responder) }),
+        ...(dispose === undefined ? {} : { dispose: dispose.bind(responder) }),
+    };
+}
+/** Resolve only an association previously issued by the app-owned responder seam. */
+export function processJobWakeContextForRequest(request) {
+    const bindings = request.metadata === undefined
+        ? []
+        : wakeContextByRequestMetadata.get(request.metadata) ?? [];
+    if (bindings.length > 0) {
+        return resolveFlights(bindings.map((binding) => binding.flight));
+    }
+    const deliveryKey = processJobWakeDeliveryKey(request.metadata);
+    if (deliveryKey === undefined)
+        return { kind: "none" };
+    const flights = wakeFlightsByDeliveryKey.get(deliveryKey) ?? [];
+    if (flights.length === 0)
+        return { kind: "none" };
+    return resolveFlights(flights);
+}
+function processJobWakeDeliveryKey(metadata) {
+    if (metadata === undefined)
+        return undefined;
+    try {
+        const descriptor = Object.getOwnPropertyDescriptor(metadata, PROCESS_JOB_WAKE_DELIVERY_METADATA);
+        return descriptor !== undefined
+            && "value" in descriptor
+            && typeof descriptor.value === "string"
+            ? descriptor.value
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function resolveFlights(flights) {
+    const distinct = [...new Map(flights.map((flight) => [flight.token, flight])).values()];
+    if (distinct.length === 1)
+        return { kind: "resolved", context: publicWakeContext(distinct[0]) };
+    return { kind: "missed" };
+}
+function publicWakeContext(context) {
+    return Object.freeze({ jobId: context.jobId, chainDepth: context.chainDepth });
+}
+//# sourceMappingURL=process-jobs-context.js.map

package/dist/process-jobs-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-jobs-context.js","sourceRoot":"","sources":["../src/process-jobs-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AA6BrD,MAAM,WAAW,GAAG,IAAI,iBAAiB,EAAwB,CAAC;AAClE,MAAM,kCAAkC,GAAG,MAAM,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;AACrG,+EAA+E;AAC/E,+EAA+E;AAC/E,4DAA4D;AAC5D,yEAAyE;AACzE,+EAA+E;AAC/E,MAAM,4BAA4B,GAAG,IAAI,OAAO,EAAmD,CAAC;AACpG,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,0EAA0E;AAC1E,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAA2C,CAAC;AAEpF,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAA8B,EAC9B,SAA2B,EAC3B,WAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,GAAG,OAAO;QACV,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAChE,wBAAwB,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;QACjF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,wBAAwB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;;YACpE,wBAAwB,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oCAAoC,CAAC,SAAyB;IAC5E,MAAM,OAAO,GAAI,SAAgE,CAAC,OAAO,CAAC;IAC1F,MAAM,eAAe,GAAI,SAEvB,CAAC,eAAe,CAAC;IACnB,OAAO;QACL,OAAO,EAAE,KAAK,EAAE,OAAyB,EAAE,MAA0B,EAA0B,EAAE;YAC/F,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,SAAmD,CAAC;YACxD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACnC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBAC5F,CAAC;gBACD,SAAS,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC1D,MAAM,OAAO,GAAG,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACzE,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,CAAC;oBAAS,CAAC;gBACT,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC9D,MAAM,OAAO,GAAG,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACzE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC;oBACrF,qEAAqE;oBACrE,qEAAqE;oBACrE,kEAAkE;oBAClE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;wBAAE,4BAA4B,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;;wBAC7E,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,SAAS,CAAC,cAAc,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,SAAS,CAAC,eAAe,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,SAAS,CAAC,iBAAiB,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,SAAS,CAAC,UAAU,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,SAAS,CAAC,aAAa,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,eAAe,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;KACrD,CAAC;AACtB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,+BAA+B,CAC7C,OAA2C;IAE3C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS;QAC7C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAClD,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAsC;IACvE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,kCAAkC,CAAC,CAAC;QACjG,OAAO,UAAU,KAAK,SAAS;eAC1B,OAAO,IAAI,UAAU;eACrB,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;YACvC,CAAC,CAAC,UAAU,CAAC,KAAK;YAClB,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,OAAwC;IAExC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACxF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;IACjG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA6B;IACtD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;AACjF,CAAC"}

package/dist/process-jobs-protection.d.ts

@@ -0,0 +1,33 @@
+import { type MonoAgentConfig } from "@mono-agent/config";
+import type { ProcessJobsSettings } from "./process-jobs-config.js";
+import type { ProcessJobsRootRegistrySnapshot } from "./process-jobs-root-registry.js";
+export declare const PROCESS_JOBS_UNSAFE_HOST_WARNING = "UNSAFE: ProcessJobs state and operator secret are model-accessible.";
+export type ProcessJobsProtectionKind = "inactive" | "srt-protected" | "unsafe-unprotected" | "unavailable";
+/** App-private authority; deliberately absent from every package-root factory. */
+export interface ProcessJobsProtectionPosture {
+    readonly kind: ProcessJobsProtectionKind;
+    readonly retainedRoots: boolean;
+    readonly requiresPiNative: boolean;
+    readonly suppressSyntheticSandbox: boolean;
+    readonly unsafeAllowUnprotectedState: boolean;
+    readonly warning?: string;
+}
+export interface ProcessJobsProtectionStatus {
+    readonly protection: ProcessJobsProtectionKind;
+    readonly retainedRoots: boolean;
+    readonly unsafeAllowUnprotectedState: boolean;
+    readonly warning?: string;
+}
+/**
+ * Resolve one posture after the registry snapshot has been strictly loaded and
+ * attested by its owner. Registry failure wins over every unsafe opt-in check.
+ */
+export declare function resolveProcessJobsProtectionPosture(input: {
+    readonly settings: Pick<ProcessJobsSettings, "enabled" | "unsafeAllowUnprotectedState">;
+    readonly registry: ProcessJobsRootRegistrySnapshot;
+    readonly coreConfig: MonoAgentConfig;
+}): ProcessJobsProtectionPosture;
+export declare function processJobsProtectionStatus(posture: ProcessJobsProtectionPosture): ProcessJobsProtectionStatus;
+/** Preserve safe-default operator output byte-for-byte; project only the opt-in warning. */
+export declare function unsafeProcessJobsProtectionStatus(posture: ProcessJobsProtectionPosture | undefined): ProcessJobsProtectionStatus | undefined;
+//# sourceMappingURL=process-jobs-protection.d.ts.map

package/dist/process-jobs-protection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-jobs-protection.d.ts","sourceRoot":"","sources":["../src/process-jobs-protection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEhF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAGvF,eAAO,MAAM,gCAAgC,wEAC0B,CAAC;AAExE,MAAM,MAAM,yBAAyB,GACjC,UAAU,GACV,eAAe,GACf,oBAAoB,GACpB,aAAa,CAAC;AAElB,kFAAkF;AAClF,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,6BAA6B,CAAC,CAAC;IACxF,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC;IACnD,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;CACtC,GAAG,4BAA4B,CAoD/B;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,GACpC,2BAA2B,CAO7B;AAED,4FAA4F;AAC5F,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,4BAA4B,GAAG,SAAS,GAChD,2BAA2B,GAAG,SAAS,CAIzC"}

package/dist/process-jobs-protection.js

@@ -0,0 +1,74 @@
+import { MonoAgentConfigError } from "@mono-agent/config";
+import { configuredProcessJobsRoutesOnlyPiNative } from "./runtime-routes.js";
+export const PROCESS_JOBS_UNSAFE_HOST_WARNING = "UNSAFE: ProcessJobs state and operator secret are model-accessible.";
+/**
+ * Resolve one posture after the registry snapshot has been strictly loaded and
+ * attested by its owner. Registry failure wins over every unsafe opt-in check.
+ */
+export function resolveProcessJobsProtectionPosture(input) {
+    const retainedRoots = input.registry.kind === "ready";
+    if (input.registry.kind === "failed") {
+        return {
+            kind: "unavailable",
+            retainedRoots: false,
+            requiresPiNative: true,
+            suppressSyntheticSandbox: false,
+            unsafeAllowUnprotectedState: false,
+        };
+    }
+    if (!input.settings.unsafeAllowUnprotectedState) {
+        return retainedRoots
+            ? {
+                kind: "srt-protected",
+                retainedRoots: true,
+                requiresPiNative: true,
+                suppressSyntheticSandbox: false,
+                unsafeAllowUnprotectedState: false,
+            }
+            : {
+                kind: "inactive",
+                retainedRoots: false,
+                requiresPiNative: false,
+                suppressSyntheticSandbox: false,
+                unsafeAllowUnprotectedState: false,
+            };
+    }
+    if (!input.settings.enabled && !retainedRoots) {
+        throw unsafePostureConfigError("processJobs.unsafeAllowUnprotectedState requires processJobs.enabled=true or retained ProcessJobs roots.");
+    }
+    if (input.coreConfig.sandbox?.mode !== "off") {
+        throw unsafePostureConfigError("processJobs.unsafeAllowUnprotectedState requires an explicit sandbox.mode of off.");
+    }
+    if (!configuredProcessJobsRoutesOnlyPiNative(input.coreConfig)) {
+        throw unsafePostureConfigError("processJobs.unsafeAllowUnprotectedState requires every configured primary, fallback, Agent child, and agent-host memory route to be Pi-native.");
+    }
+    return {
+        kind: "unsafe-unprotected",
+        retainedRoots,
+        requiresPiNative: true,
+        suppressSyntheticSandbox: true,
+        unsafeAllowUnprotectedState: true,
+        warning: PROCESS_JOBS_UNSAFE_HOST_WARNING,
+    };
+}
+export function processJobsProtectionStatus(posture) {
+    return {
+        protection: posture.kind,
+        retainedRoots: posture.retainedRoots,
+        unsafeAllowUnprotectedState: posture.unsafeAllowUnprotectedState,
+        ...(posture.warning === undefined ? {} : { warning: posture.warning }),
+    };
+}
+/** Preserve safe-default operator output byte-for-byte; project only the opt-in warning. */
+export function unsafeProcessJobsProtectionStatus(posture) {
+    return posture?.kind === "unsafe-unprotected"
+        ? processJobsProtectionStatus(posture)
+        : undefined;
+}
+function unsafePostureConfigError(message) {
+    return new MonoAgentConfigError("invalid_json", message, {
+        path: "processJobs.unsafeAllowUnprotectedState",
+        reason: message,
+    });
+}
+//# sourceMappingURL=process-jobs-protection.js.map

package/dist/process-jobs-protection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-jobs-protection.js","sourceRoot":"","sources":["../src/process-jobs-protection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAwB,MAAM,oBAAoB,CAAC;AAIhF,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAC;AAE9E,MAAM,CAAC,MAAM,gCAAgC,GAC3C,qEAAqE,CAAC;AAyBxE;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CAAC,KAInD;IACC,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC;IACtD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,aAAa,EAAE,KAAK;YACpB,gBAAgB,EAAE,IAAI;YACtB,wBAAwB,EAAE,KAAK;YAC/B,2BAA2B,EAAE,KAAK;SACnC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,2BAA2B,EAAE,CAAC;QAChD,OAAO,aAAa;YAClB,CAAC,CAAC;gBACE,IAAI,EAAE,eAAe;gBACrB,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,IAAI;gBACtB,wBAAwB,EAAE,KAAK;gBAC/B,2BAA2B,EAAE,KAAK;aACnC;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,UAAU;gBAChB,aAAa,EAAE,KAAK;gBACpB,gBAAgB,EAAE,KAAK;gBACvB,wBAAwB,EAAE,KAAK;gBAC/B,2BAA2B,EAAE,KAAK;aACnC,CAAC;IACR,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,wBAAwB,CAC5B,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;QAC7C,MAAM,wBAAwB,CAC5B,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,uCAAuC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,MAAM,wBAAwB,CAC5B,gJAAgJ,CACjJ,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,aAAa;QACb,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,IAAI;QAC9B,2BAA2B,EAAE,IAAI;QACjC,OAAO,EAAE,gCAAgC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAAqC;IAErC,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,IAAI;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,2BAA2B,EAAE,OAAO,CAAC,2BAA2B;QAChE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iCAAiC,CAC/C,OAAiD;IAEjD,OAAO,OAAO,EAAE,IAAI,KAAK,oBAAoB;QAC3C,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC;QACtC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,OAAO,IAAI,oBAAoB,CAAC,cAAc,EAAE,OAAO,EAAE;QACvD,IAAI,EAAE,yCAAyC;QAC/C,MAAM,EAAE,OAAO;KAChB,CAAC,CAAC;AACL,CAAC"}

package/dist/process-jobs-root-registry.d.ts

@@ -0,0 +1,115 @@
+import { type AgentRootCoordinator, type AgentRootProtectionGeneration } from "./agent-root-coordinator.js";
+export declare const PROCESS_JOBS_ROOT_REGISTRY_SCHEMA = "mono-agent.process-jobs-roots.v1";
+export declare const PROCESS_JOBS_ROOT_REGISTRY_DIRECTORY = "process-jobs-roots-v1";
+export declare const PROCESS_JOBS_ROOT_REGISTRY_FILE = "registry.json";
+export declare const PROCESS_JOBS_ROOT_REGISTRY_RECOVERY_DIRECTORY = "process-jobs-roots-v1.recovery";
+export declare const PROCESS_JOBS_ROOT_REGISTRY_STAGING_FILE = "registry.staging.json";
+export declare const PROCESS_JOBS_ROOT_REGISTRY_PREVIOUS_FILE = "registry.previous.json";
+export declare const PROCESS_JOBS_ROOT_REGISTRY_FAILED_FILE = "registry.failed.json";
+export declare const PROCESS_JOBS_ROOT_REGISTRY_MAX_RECOVERY_ENTRIES = 3;
+export declare const PROCESS_JOBS_ROOT_REGISTRY_MAX_ROOTS = 64;
+export declare const PROCESS_JOBS_ROOT_REGISTRY_MAX_SEGMENTS = 64;
+export declare const PROCESS_JOBS_ROOT_REGISTRY_MAX_SEGMENT_BYTES = 255;
+export declare const PROCESS_JOBS_ROOT_REGISTRY_MAX_ROOT_BYTES: number;
+export declare const PROCESS_JOBS_ROOT_REGISTRY_MAX_BYTES: number;
+export declare const PROCESS_JOBS_REGISTRY_UNAVAILABLE_ERROR = "Process-job private-state protection is unavailable.";
+declare const REGISTRATION_PROOF: unique symbol;
+interface FileIdentity {
+    readonly dev: bigint;
+    readonly ino: bigint;
+}
+export interface RegisteredProcessJobsRoot {
+    readonly segments: readonly string[];
+    readonly key: string;
+    readonly lexicalPath: string;
+    readonly canonicalPath: string;
+    readonly protectedPaths: readonly string[];
+}
+export interface EmptyProcessJobsRootRegistrySnapshot {
+    readonly kind: "empty";
+    readonly agentRoot: string;
+    readonly registryDir: string;
+    readonly recoveryDir: string;
+    readonly manifestPath: string;
+    readonly mutationLockPath: string;
+    readonly generation: AgentRootProtectionGeneration;
+    readonly roots: readonly [];
+    readonly protectedRoots: readonly [];
+}
+export interface ReadyProcessJobsRootRegistrySnapshot {
+    readonly kind: "ready";
+    readonly agentRoot: string;
+    readonly registryDir: string;
+    readonly recoveryDir: string;
+    readonly manifestPath: string;
+    readonly mutationLockPath: string;
+    readonly generation: AgentRootProtectionGeneration;
+    readonly roots: readonly RegisteredProcessJobsRoot[];
+    readonly protectedRoots: readonly string[];
+    readonly manifestIdentity: FileIdentity;
+    readonly manifestContents: Buffer;
+}
+export interface FailedProcessJobsRootRegistrySnapshot {
+    readonly kind: "failed";
+    readonly agentRoot: string;
+    readonly registryDir: string;
+    readonly recoveryDir: string;
+    readonly manifestPath: string;
+    readonly mutationLockPath: string;
+    readonly generation: AgentRootProtectionGeneration;
+    readonly roots: readonly [];
+    readonly protectedRoots: readonly string[];
+    readonly error: string;
+}
+export type ProcessJobsRootRegistrySnapshot = EmptyProcessJobsRootRegistrySnapshot | ReadyProcessJobsRootRegistrySnapshot | FailedProcessJobsRootRegistrySnapshot;
+export interface ProcessJobsRootRegistrationProof {
+    readonly snapshot: ReadyProcessJobsRootRegistrySnapshot;
+    readonly rootKey: string;
+    readonly [REGISTRATION_PROOF]: true;
+}
+interface ProcessJobsRootRegistrationHooks {
+    /** @internal Deterministic failure seam after first-directory creation and before manifest staging. */
+    readonly afterRegistryDirectoryCreated?: () => void | Promise<void>;
+    /** @internal Deterministic publication and recovery seams for crash-matrix tests. */
+    readonly afterManifestPublish?: () => void | Promise<void>;
+    readonly beforeManifestRestore?: () => void | Promise<void>;
+    readonly beforeRegistryRecovery?: () => void | Promise<void>;
+}
+export interface ProcessJobsRootRegistryFreeze {
+    readonly snapshot: EmptyProcessJobsRootRegistrySnapshot | ReadyProcessJobsRootRegistrySnapshot;
+    reattest(workspace: string): Promise<EmptyProcessJobsRootRegistrySnapshot | ReadyProcessJobsRootRegistrySnapshot>;
+    release(): Promise<void>;
+}
+export declare function processJobsRootRegistryPaths(agentRoot: string): {
+    readonly registryDir: string;
+    readonly recoveryDir: string;
+    readonly manifestPath: string;
+    readonly stagingPath: string;
+    readonly previousPath: string;
+    readonly failedPath: string;
+    readonly mutationLockPath: string;
+};
+/** Load a strict snapshot; malformed or unsafe durable state becomes a provider-zero state. */
+export declare function loadProcessJobsRootRegistryProtection(agentRoot: string, workspace: string): Promise<ProcessJobsRootRegistrySnapshot>;
+export declare function failedProcessJobsRootRegistryProtection(canonicalAgentRoot: string): FailedProcessJobsRootRegistrySnapshot;
+/** Re-read and identity-prove the captured manifest at a request/destructive boundary. */
+export declare function attestProcessJobsRootRegistrySnapshot(snapshot: ProcessJobsRootRegistrySnapshot, workspace: string): Promise<EmptyProcessJobsRootRegistrySnapshot | ReadyProcessJobsRootRegistrySnapshot>;
+/** Fsync a monotonic registration before any ProcessJobs root creation/open. */
+export declare function registerProcessJobsRoot(options: {
+    readonly agentRoot: string;
+    readonly workspace: string;
+    readonly stateDir: string;
+    readonly coordinator: AgentRootCoordinator;
+    readonly hooks?: ProcessJobsRootRegistrationHooks;
+}): Promise<ProcessJobsRootRegistrationProof>;
+/** Hold the registry mutation lock across clear-sessions preflight and first rename. */
+export declare function freezeProcessJobsRootRegistry(agentRoot: string, workspace: string): Promise<ProcessJobsRootRegistryFreeze>;
+/** Prove a supplied state directory remains in the exact registered generation. */
+export declare function attestProcessJobsRootRegistration(proofValue: ProcessJobsRootRegistrationProof, workspace: string, stateDir: string): Promise<ReadyProcessJobsRootRegistrySnapshot>;
+/** All state roots must remain disjoint from every destructive/control path. */
+export declare function assertProcessJobsRegistryDisjointFromPaths(snapshot: EmptyProcessJobsRootRegistrySnapshot | ReadyProcessJobsRootRegistrySnapshot, paths: readonly string[]): void;
+export declare function processJobsProtectionPolicyRoots(snapshot: ProcessJobsRootRegistrySnapshot): readonly string[];
+export declare function processJobsRootForKey(snapshot: ProcessJobsRootRegistrySnapshot, key: string): RegisteredProcessJobsRoot | undefined;
+export declare function processJobsRegistryGeneration(snapshot: ProcessJobsRootRegistrySnapshot): AgentRootProtectionGeneration;
+export {};
+//# sourceMappingURL=process-jobs-root-registry.d.ts.map

package/dist/process-jobs-root-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-jobs-root-registry.d.ts","sourceRoot":"","sources":["../src/process-jobs-root-registry.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,6BAA6B,EACnC,MAAM,6BAA6B,CAAC;AAMrC,eAAO,MAAM,iCAAiC,qCAAqC,CAAC;AACpF,eAAO,MAAM,oCAAoC,0BAA0B,CAAC;AAC5E,eAAO,MAAM,+BAA+B,kBAAkB,CAAC;AAC/D,eAAO,MAAM,6CAA6C,mCAAmC,CAAC;AAC9F,eAAO,MAAM,uCAAuC,0BAA0B,CAAC;AAC/E,eAAO,MAAM,wCAAwC,2BAA2B,CAAC;AACjF,eAAO,MAAM,sCAAsC,yBAAyB,CAAC;AAC7E,eAAO,MAAM,+CAA+C,IAAI,CAAC;AACjE,eAAO,MAAM,oCAAoC,KAAK,CAAC;AACvD,eAAO,MAAM,uCAAuC,KAAK,CAAC;AAC1D,eAAO,MAAM,4CAA4C,MAAM,CAAC;AAChE,eAAO,MAAM,yCAAyC,QAAW,CAAC;AAClE,eAAO,MAAM,oCAAoC,QAAa,CAAC;AAE/D,eAAO,MAAM,uCAAuC,yDACI,CAAC;AAKzD,QAAA,MAAM,kBAAkB,eAAiD,CAAC;AAQ1E,UAAU,YAAY;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAeD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACrD,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,+BAA+B,GACvC,oCAAoC,GACpC,oCAAoC,GACpC,qCAAqC,CAAC;AAE1C,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,oCAAoC,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC;CACrC;AAED,UAAU,gCAAgC;IACxC,uGAAuG;IACvG,QAAQ,CAAC,6BAA6B,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,qFAAqF;IACrF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,oCAAoC,GAAG,oCAAoC,CAAC;IAC/F,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oCAAoC,GAAG,oCAAoC,CAAC,CAAC;IAClH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG;IAC/D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC,CAaA;AAED,+FAA+F;AAC/F,wBAAsB,qCAAqC,CACzD,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,+BAA+B,CAAC,CAO1C;AAED,wBAAgB,uCAAuC,CACrD,kBAAkB,EAAE,MAAM,GACzB,qCAAqC,CAevC;AAED,0FAA0F;AAC1F,wBAAsB,qCAAqC,CACzD,QAAQ,EAAE,+BAA+B,EACzC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,oCAAoC,GAAG,oCAAoC,CAAC,CAgBtF;AAED,gFAAgF;AAChF,wBAAsB,uBAAuB,CAAC,OAAO,EAAE;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,gCAAgC,CAAC;CACnD,GAAG,OAAO,CAAC,gCAAgC,CAAC,CA2E5C;AAED,wFAAwF;AACxF,wBAAsB,6BAA6B,CACjD,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,6BAA6B,CAAC,CAoBxC;AAED,mFAAmF;AACnF,wBAAsB,iCAAiC,CACrD,UAAU,EAAE,gCAAgC,EAC5C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,oCAAoC,CAAC,CAW/C;AAED,gFAAgF;AAChF,wBAAgB,0CAA0C,CACxD,QAAQ,EAAE,oCAAoC,GAAG,oCAAoC,EACrF,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,IAAI,CAWN;AAED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,+BAA+B,GAAG,SAAS,MAAM,EAAE,CAE7G;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,+BAA+B,EACzC,GAAG,EAAE,MAAM,GACV,yBAAyB,GAAG,SAAS,CAEvC;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,+BAA+B,GACxC,6BAA6B,CAE/B"}