@oh-my-matrix/autopilot 3.0.0 → 3.0.3

package/dist/src/state-persister.d.ts

@@ -0,0 +1,117 @@
+import type { AutopilotState } from './types';
+import type { WorkspaceRecord, RetryEntry, WorkflowConfig } from './types';
+export declare function getCheckpointWriteFailureCount(): number;
+export declare function _resetCheckpointFailureCountForTest(): void;
+export declare function _disableCheckpointingForTest(): void;
+export declare function _enableCheckpointingForTest(): void;
+export declare function _isCheckpointingDisabledForTest(): boolean;
+/**
+ * The slim persisted shape. Intentionally a SUBSET of AutopilotState — we do NOT
+ * persist permissionAudit (it has its own JSONL via audit-persister), nor status
+ * (re-derived on load). Large/ephemeral fields (canaryFired, noUsageWarned) are
+ * session-scoped and never persisted.
+ */
+export interface AutopilotCheckpoint {
+    runId: string;
+    sessionKey: string;
+    orchestrationState?: AutopilotState['orchestrationState'];
+    blockedReason?: AutopilotState['blockedReason'];
+    goal?: string;
+    goalSnapshot?: string;
+    progress?: string;
+    progressSnapshot?: string;
+    turnAttempts: number;
+    totalContinuations: number;
+    maxAttemptsPerTurn: number;
+    maxTotalContinuations: number;
+    needsCrossTurnResume: boolean;
+    enabled: boolean;
+    totalTokensUsed: number;
+    tokenBudget?: number;
+    inputTokensUsed?: number;
+    outputTokensUsed?: number;
+    evidenceStatus?: AutopilotState['evidence'] extends infer E ? (E extends {
+        status: infer S;
+    } ? S : undefined) : undefined;
+    startedAt?: number;
+    lastActivityAt?: number;
+    /** Forensic only — loaders overwrite with deriveStatus(). Never trusted. */
+    status?: AutopilotState['status'];
+    workspaceRoot?: string;
+    workspacePath?: string;
+    /** Full workspace record (Reviewer #1 Finding 2a fix): restored runs MUST retain
+     * their permission-containment boundary + checkpoint-root. Persisting flat fields
+     * alone left state.workspace undefined after restore, widening the tool-call
+     * containment to process.cwd() — a security regression. */
+    workspace?: WorkspaceRecord;
+    /** Retry entry (Reviewer #1 Finding 2b fix): without this, restored retry_queued
+     * runs lose state.retry → the stall interval's retry_due guard
+     * (state.retry?.nextRetryAt != null) is never satisfied → the run wedges forever. */
+    retry?: RetryEntry;
+    /** Workflow config (Reviewer #1 Finding 2c fix): restored runs otherwise skip
+     * validation commands, reset stallTimeoutMs, and lose modelRouting. */
+    workflow?: WorkflowConfig;
+    /** Millisecond epoch of the checkpoint write. */
+    savedAt: number;
+}
+/**
+ * Build a slim checkpoint from a full AutopilotState. Extracts only the fields
+ * needed to resume a run; drops the bulky/ephemeral ones.
+ */
+export declare function buildCheckpoint(state: AutopilotState, runId: string, workspaceRoot: string): AutopilotCheckpoint;
+/**
+ * Persist a checkpoint + update the sessionKey→runId index. Fail-silent.
+ * Serialized per-runId so concurrent setState firings don't interleave writes.
+ *
+ * Returns a Promise (rather than sync) because the lock chain is async; callers
+ * that don't need to await (the common case from setState) fire-and-forget via
+ * void. The internal _writeSyncLocked does the actual sync I/O under the lock.
+ */
+export declare function saveCheckpoint(state: AutopilotState, runId: string, workspaceRoot: string): void;
+/**
+ * Load a checkpoint and rebuild an AutopilotState. ADR-016 BLOCKER #1 fix:
+ * `status` is NEVER trusted from the persisted field — always re-derived.
+ *
+ * Returns null if the checkpoint is missing, corrupt, or fails workspace
+ * validation (Review #4 #4: stale-run guard).
+ */
+export declare function loadCheckpoint(runId: string, workspaceRoot: string, options?: {
+    validateWorkspace?: boolean;
+}): AutopilotState | null;
+/**
+ * Delete a checkpoint file (Review #4 #6: called on terminal transitions to
+ * prevent done-run file leaks). Fail-silent.
+ */
+export declare function deleteCheckpoint(runId: string, workspaceRoot: string): void;
+/**
+ * Remove a sessionKey→runId entry from the index. Used when a run terminates
+ * so a future session_start for the same sessionKey doesn't resurrect a dead run.
+ */
+export declare function clearSessionIndexEntry(workspaceRoot: string, sessionKey: string): void;
+/**
+ * Look up runId by sessionKey from the durable index. Returns null if the
+ * index is missing, corrupt, or has no entry. This is BLOCKER #2's recovery
+ * path: after a process restart, the in-memory sessionKeyToRunId Map is empty,
+ * so session_start must consult this file to find the checkpoint.
+ */
+export declare function lookupRunIdBySessionKey(workspaceRoot: string, sessionKey: string): string | null;
+/**
+ * Scan the checkpoints directory and return all runIds whose checkpoint is
+ * resumable (orchestrationState in the active family) and whose workspace still
+ * exists. Used by register() at process init to restore ALL resumable runs,
+ * not just the one whose session_start fired (Review #3 multi-run gap).
+ *
+ * Also sweeps terminal checkpoints older than TERMINAL_CHECKPOINT_TTL_MS to
+ * reclaim disk (Review #4 #6c).
+ */
+export declare function listResumableCheckpoints(workspaceRoot: string): string[];
+/** Test-only: clear the write-lock map between tests. */
+export declare function _clearWriteLocksForTest(): void;
+/**
+ * Test-only: deterministically await all in-flight checkpoint writes. Reviewer
+ * #2 Finding 5 fix — replaces the fragile "two setImmediate ticks" drain with
+ * `Promise.all` over the lock map so tests don't flake if the lock chain grows
+ * another async hop.
+ */
+export declare function _flushAllWritesForTest(): Promise<void>;
+//# sourceMappingURL=state-persister.d.ts.map

package/dist/src/state-persister.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-persister.d.ts","sourceRoot":"","sources":["../../src/state-persister.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAQ3E,wBAAgB,8BAA8B,IAAI,MAAM,CAA+B;AACvF,wBAAgB,mCAAmC,IAAI,IAAI,CAA4B;AAWvF,wBAAgB,4BAA4B,IAAI,IAAI,CAA0C;AAC9F,wBAAgB,2BAA2B,IAAI,IAAI,CAA2C;AAC9F,wBAAgB,+BAA+B,IAAI,OAAO,CAA0C;AAwBpG;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,cAAc,CAAC,oBAAoB,CAAC,CAAC;IAC1D,aAAa,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS;QAAE,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IAC1H,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;+DAG2D;IAC3D,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B;;yFAEqF;IACrF,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB;2EACuE;IACvE,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,mBAAmB,CAgChH;AAsBD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAwBhG;AAwBD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE;IAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAE,GACxC,cAAc,GAAG,IAAI,CA8DvB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAW3E;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAWtF;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAShG;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CA6CxE;AAgBD,yDAAyD;AACzD,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE5D"}

package/dist/src/state-persister.js

@@ -0,0 +1,454 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCheckpointWriteFailureCount = getCheckpointWriteFailureCount;
+exports._resetCheckpointFailureCountForTest = _resetCheckpointFailureCountForTest;
+exports._disableCheckpointingForTest = _disableCheckpointingForTest;
+exports._enableCheckpointingForTest = _enableCheckpointingForTest;
+exports._isCheckpointingDisabledForTest = _isCheckpointingDisabledForTest;
+exports.buildCheckpoint = buildCheckpoint;
+exports.saveCheckpoint = saveCheckpoint;
+exports.loadCheckpoint = loadCheckpoint;
+exports.deleteCheckpoint = deleteCheckpoint;
+exports.clearSessionIndexEntry = clearSessionIndexEntry;
+exports.lookupRunIdBySessionKey = lookupRunIdBySessionKey;
+exports.listResumableCheckpoints = listResumableCheckpoints;
+exports._clearWriteLocksForTest = _clearWriteLocksForTest;
+exports._flushAllWritesForTest = _flushAllWritesForTest;
+/**
+ * Crash-recovery checkpoint persistence for autopilot run state.
+ *
+ * Writes a SLIM pointer of AutopilotState to
+ *   {workspaceRoot}/.autopilot/checkpoints/{runId}.json
+ * plus a sessionKey→runId index at
+ *   {workspaceRoot}/.autopilot/checkpoints/session-index.json
+ *
+ * Design (mirrors @oh-my-matrix/permission-policy/src/audit-persister.ts):
+ *   - synchronous file I/O (plugin runs in main process; simplicity > async)
+ *   - fail-silent (never throws; persistence is best-effort recovery, not authoritative)
+ *   - no external dependencies
+ *
+ * ADR-016 invariant (status sole-writer): `status` is NEVER trusted from disk.
+ * On load, status is re-derived via deriveStatus(). We persist a `status` field
+ * only as a forensic hint; loaders MUST overwrite it with the derived value.
+ * This prevents the H1 false-completion class from recurring via stale checkpoints.
+ *
+ * Review #4 BLOCKERs addressed here:
+ *   #1 (status re-derive) — loadCheckpoint re-derives via deriveStatus
+ *   #2 (runId recovery) — session-index.json maps sessionKey→runId durably
+ *   #3 (write concurrency) — per-runId Promise lock serializes writes
+ *   #5 (atomic same-dir write) — tmp written next to target, not os.tmpdir()
+ *   #6 (done-run leak) — deleteCheckpoint called on terminal transitions
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const orchestrator_1 = require("./orchestrator");
+const CHECKPOINT_SUBDIR = path.join('.autopilot', 'checkpoints');
+const SESSION_INDEX_FILE = 'session-index.json';
+const TERMINAL_CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1000; // sweep terminal checkpoints older than 24h
+let _writeFailureCount = 0;
+function getCheckpointWriteFailureCount() { return _writeFailureCount; }
+function _resetCheckpointFailureCountForTest() { _writeFailureCount = 0; }
+/**
+ * Test-only kill switch. When true, saveCheckpoint/deleteCheckpoint/listResumableCheckpoints
+ * become no-ops so the existing 50+ test suite (which runs in the repo root and would
+ * otherwise leak checkpoint files across tests, polluting stateByRun via the
+ * register()-time restore) stays isolated. Production never sets this. Flipped to
+ * true by index.ts _resetForTest(); flipped back false by _enableCheckpointingForTest()
+ * in tests that exercise persistence (state-persister.test.ts).
+ */
+let _checkpointingDisabledForTest = false;
+function _disableCheckpointingForTest() { _checkpointingDisabledForTest = true; }
+function _enableCheckpointingForTest() { _checkpointingDisabledForTest = false; }
+function _isCheckpointingDisabledForTest() { return _checkpointingDisabledForTest; }
+/**
+ * Resolve the checkpoint directory for a workspace root, following symlinks
+ * (S12: same canonical-path discipline as audit-persister).
+ */
+function getCheckpointDir(workspaceRoot) {
+    let resolved = workspaceRoot;
+    try {
+        resolved = fs.realpathSync(workspaceRoot);
+    }
+    catch {
+        // Path may not exist yet (mkdirSync creates it downstream).
+    }
+    return path.join(resolved, CHECKPOINT_SUBDIR);
+}
+function getCheckpointPath(workspaceRoot, runId) {
+    return path.join(getCheckpointDir(workspaceRoot), `${runId}.json`);
+}
+function getSessionIndexPath(workspaceRoot) {
+    return path.join(getCheckpointDir(workspaceRoot), SESSION_INDEX_FILE);
+}
+/**
+ * Build a slim checkpoint from a full AutopilotState. Extracts only the fields
+ * needed to resume a run; drops the bulky/ephemeral ones.
+ */
+function buildCheckpoint(state, runId, workspaceRoot) {
+    return {
+        runId,
+        sessionKey: state.sessionKey,
+        orchestrationState: state.orchestrationState,
+        blockedReason: state.blockedReason,
+        goal: state.goal,
+        goalSnapshot: state.goalSnapshot,
+        progress: state.progress,
+        progressSnapshot: state.progressSnapshot,
+        turnAttempts: state.turnAttempts,
+        totalContinuations: state.totalContinuations,
+        maxAttemptsPerTurn: state.maxAttemptsPerTurn,
+        maxTotalContinuations: state.maxTotalContinuations,
+        needsCrossTurnResume: state.needsCrossTurnResume,
+        enabled: state.enabled,
+        totalTokensUsed: state.totalTokensUsed,
+        tokenBudget: state.tokenBudget,
+        inputTokensUsed: state.inputTokensUsed,
+        outputTokensUsed: state.outputTokensUsed,
+        evidenceStatus: state.evidence?.status,
+        startedAt: state.startedAt,
+        lastActivityAt: state.lastActivityAt,
+        // Forensic hint only — loadCheckpoint overwrites this with deriveStatus().
+        status: state.status,
+        workspaceRoot,
+        workspacePath: state.workspace?.path,
+        workspace: state.workspace,
+        retry: state.retry,
+        workflow: state.workflow,
+        savedAt: Date.now(),
+    };
+}
+// ─── Per-runId write lock (Review #4 #3a) ──────────────────────────────
+// Serializes concurrent saveCheckpoint calls for the same runId across the
+// 60s stall timer context and async hook handler contexts. A bare Map<runId,
+// Promise> chain — each write awaits the previous one before starting.
+const writeLocks = new Map();
+/**
+ * Atomic write: tmp file in the SAME directory as the target (NOT os.tmpdir(),
+ * which can be on a different volume on Windows → EXDEV). renameSync is atomic
+ * on POSIX same-filesystem; Node ≥10 overwrites the target.
+ */
+function atomicWriteFileSync(targetPath, data) {
+    const dir = path.dirname(targetPath);
+    fs.mkdirSync(dir, { recursive: true });
+    // PID + random suffix guards against same-dir tmp collisions under concurrency.
+    const tmpPath = `${targetPath}.tmp.${process.pid}.${Math.random().toString(36).slice(2)}`;
+    fs.writeFileSync(tmpPath, data, 'utf-8');
+    fs.renameSync(tmpPath, targetPath);
+}
+/**
+ * Persist a checkpoint + update the sessionKey→runId index. Fail-silent.
+ * Serialized per-runId so concurrent setState firings don't interleave writes.
+ *
+ * Returns a Promise (rather than sync) because the lock chain is async; callers
+ * that don't need to await (the common case from setState) fire-and-forget via
+ * void. The internal _writeSyncLocked does the actual sync I/O under the lock.
+ */
+function saveCheckpoint(state, runId, workspaceRoot) {
+    if (_checkpointingDisabledForTest)
+        return; // test isolation: don't touch disk
+    const checkpoint = buildCheckpoint(state, runId, workspaceRoot);
+    const targetPath = getCheckpointPath(workspaceRoot, runId);
+    // Chain onto any in-flight write for this runId.
+    const prev = writeLocks.get(runId) ?? Promise.resolve();
+    const next = prev.then(() => {
+        try {
+            atomicWriteFileSync(targetPath, JSON.stringify(checkpoint));
+            updateSessionIndex(workspaceRoot, checkpoint.sessionKey, runId);
+        }
+        catch (e) {
+            _writeFailureCount++;
+            try {
+                console.error('[autopilot] checkpoint save failed:', e);
+            }
+            catch { /* noop */ }
+        }
+    }).catch(() => {
+        // Lock chain errors are already logged inside _writeSyncLocked; swallow to
+        // keep the chain alive for the next write.
+    });
+    writeLocks.set(runId, next);
+    // Auto-clean the lock entry once settled so the Map doesn't grow unbounded.
+    void next.then(() => {
+        if (writeLocks.get(runId) === next)
+            writeLocks.delete(runId);
+    });
+}
+/** Update the sessionKey→runId index atomically. Fail-silent. */
+function updateSessionIndex(workspaceRoot, sessionKey, runId) {
+    const indexPath = getSessionIndexPath(workspaceRoot);
+    let index = {};
+    try {
+        if (fs.existsSync(indexPath)) {
+            index = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
+        }
+    }
+    catch {
+        // Corrupt index — start fresh rather than crash.
+        index = {};
+    }
+    if (index[sessionKey] === runId)
+        return; // no-op if unchanged
+    index[sessionKey] = runId;
+    try {
+        atomicWriteFileSync(indexPath, JSON.stringify(index));
+    }
+    catch (e) {
+        _writeFailureCount++;
+        try {
+            console.error('[autopilot] session-index update failed:', e);
+        }
+        catch { /* noop */ }
+    }
+}
+/**
+ * Load a checkpoint and rebuild an AutopilotState. ADR-016 BLOCKER #1 fix:
+ * `status` is NEVER trusted from the persisted field — always re-derived.
+ *
+ * Returns null if the checkpoint is missing, corrupt, or fails workspace
+ * validation (Review #4 #4: stale-run guard).
+ */
+function loadCheckpoint(runId, workspaceRoot, options) {
+    const cpPath = getCheckpointPath(workspaceRoot, runId);
+    let cp;
+    try {
+        const raw = fs.readFileSync(cpPath, 'utf-8');
+        cp = JSON.parse(raw);
+    }
+    catch {
+        return null; // missing or corrupt — nothing to resume
+    }
+    // Review #4 #4: stale-run guard. If the workspace path recorded at checkpoint
+    // time no longer exists (deleted between crash and restart), refuse to resume
+    // rather than resurrecting a run against a vanished workspace.
+    if (options?.validateWorkspace !== false && cp.workspacePath) {
+        try {
+            const stat = fs.statSync(cp.workspacePath);
+            if (!stat.isDirectory())
+                return null;
+        }
+        catch {
+            return null;
+        }
+    }
+    // Rebuild a minimal AutopilotState. Many fields have safe defaults; the
+    // load-bearing ones (orchestrationState, blockedReason, goal, counters,
+    // workspace, retry, workflow) come from the checkpoint.
+    const partial = {
+        sessionKey: cp.sessionKey,
+        runId: cp.runId,
+        orchestrationState: cp.orchestrationState,
+        blockedReason: cp.blockedReason,
+        goal: cp.goal,
+        goalSnapshot: cp.goalSnapshot,
+        progress: cp.progress,
+        progressSnapshot: cp.progressSnapshot,
+        turnAttempts: cp.turnAttempts,
+        totalContinuations: cp.totalContinuations,
+        maxAttemptsPerTurn: cp.maxAttemptsPerTurn,
+        maxTotalContinuations: cp.maxTotalContinuations,
+        maxConcurrentAutopilot: 5, // default; per-run override not persisted
+        needsCrossTurnResume: cp.needsCrossTurnResume,
+        enabled: cp.enabled,
+        totalTokensUsed: cp.totalTokensUsed,
+        tokenBudget: cp.tokenBudget,
+        inputTokensUsed: cp.inputTokensUsed,
+        outputTokensUsed: cp.outputTokensUsed,
+        startedAt: cp.startedAt,
+        lastActivityAt: cp.lastActivityAt,
+        degraded: true, // mark resumed runs — operators can tell a restored run
+        toolErrorCount: 0,
+        toolErrorThreshold: 5,
+        // Reviewer #1 Finding 2a/2b/2c fixes: restore the three load-bearing
+        // objects the original "slim pointer" design dropped. Without workspace,
+        // the permission containment boundary widens to process.cwd(); without
+        // retry, retry_queued runs wedge; without workflow, validation is skipped.
+        workspace: cp.workspace,
+        retry: cp.retry,
+        workflow: cp.workflow,
+    };
+    // BLOCKER #1: re-derive status. Never trust cp.status.
+    const derivedStatus = (0, orchestrator_1.deriveStatus)(partial);
+    return { ...partial, status: derivedStatus };
+}
+/**
+ * Delete a checkpoint file (Review #4 #6: called on terminal transitions to
+ * prevent done-run file leaks). Fail-silent.
+ */
+function deleteCheckpoint(runId, workspaceRoot) {
+    if (_checkpointingDisabledForTest)
+        return; // test isolation: don't touch disk
+    const cpPath = getCheckpointPath(workspaceRoot, runId);
+    try {
+        if (fs.existsSync(cpPath))
+            fs.unlinkSync(cpPath);
+    }
+    catch (e) {
+        try {
+            console.error('[autopilot] checkpoint delete failed:', e);
+        }
+        catch { /* noop */ }
+    }
+    // Best-effort index cleanup — leave stale sessionKey→runId entries; they're
+    // cheap and the index is rewritten on every save. A full GC pass would risk
+    // racing an in-flight save for a different runId.
+}
+/**
+ * Remove a sessionKey→runId entry from the index. Used when a run terminates
+ * so a future session_start for the same sessionKey doesn't resurrect a dead run.
+ */
+function clearSessionIndexEntry(workspaceRoot, sessionKey) {
+    const indexPath = getSessionIndexPath(workspaceRoot);
+    try {
+        if (!fs.existsSync(indexPath))
+            return;
+        const index = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
+        if (!(sessionKey in index))
+            return;
+        delete index[sessionKey];
+        atomicWriteFileSync(indexPath, JSON.stringify(index));
+    }
+    catch {
+        // fail-silent
+    }
+}
+/**
+ * Look up runId by sessionKey from the durable index. Returns null if the
+ * index is missing, corrupt, or has no entry. This is BLOCKER #2's recovery
+ * path: after a process restart, the in-memory sessionKeyToRunId Map is empty,
+ * so session_start must consult this file to find the checkpoint.
+ */
+function lookupRunIdBySessionKey(workspaceRoot, sessionKey) {
+    const indexPath = getSessionIndexPath(workspaceRoot);
+    try {
+        if (!fs.existsSync(indexPath))
+            return null;
+        const index = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
+        return index[sessionKey] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Scan the checkpoints directory and return all runIds whose checkpoint is
+ * resumable (orchestrationState in the active family) and whose workspace still
+ * exists. Used by register() at process init to restore ALL resumable runs,
+ * not just the one whose session_start fired (Review #3 multi-run gap).
+ *
+ * Also sweeps terminal checkpoints older than TERMINAL_CHECKPOINT_TTL_MS to
+ * reclaim disk (Review #4 #6c).
+ */
+function listResumableCheckpoints(workspaceRoot) {
+    if (_checkpointingDisabledForTest)
+        return []; // test isolation: don't read disk
+    const dir = getCheckpointDir(workspaceRoot);
+    if (!fs.existsSync(dir))
+        return [];
+    let files;
+    try {
+        files = fs.readdirSync(dir).filter(f => f.endsWith('.json') && f !== SESSION_INDEX_FILE);
+    }
+    catch {
+        return [];
+    }
+    const resumable = [];
+    const now = Date.now();
+    for (const f of files) {
+        const runId = f.replace(/\.json$/, '');
+        const fullPath = path.join(dir, f);
+        try {
+            const cp = JSON.parse(fs.readFileSync(fullPath, 'utf-8'));
+            const orch = cp.orchestrationState;
+            const isResumable = orch === 'running' || orch === 'claimed' || orch === 'retry_queued' || orch === 'released' || orch === 'unclaimed';
+            const isTerminal = orch === 'done' || (orch === 'blocked' && cp.blockedReason && !isResumableBlockedReason(cp.blockedReason));
+            if (isTerminal) {
+                // Review #4 #6c: sweep stale terminal checkpoints.
+                if (cp.savedAt && (now - cp.savedAt) > TERMINAL_CHECKPOINT_TTL_MS) {
+                    try {
+                        fs.unlinkSync(fullPath);
+                    }
+                    catch { /* fail-silent */ }
+                }
+                continue;
+            }
+            if (isResumable) {
+                // Validate workspace still exists before offering to resume.
+                if (cp.workspacePath) {
+                    try {
+                        const stat = fs.statSync(cp.workspacePath);
+                        if (!stat.isDirectory())
+                            continue;
+                    }
+                    catch {
+                        continue; // workspace gone — skip
+                    }
+                }
+                resumable.push(runId);
+            }
+        }
+        catch {
+            // corrupt checkpoint — skip
+        }
+    }
+    return resumable;
+}
+// Mirror of RESUMABLE_BLOCKED_REASONS from orchestrator.ts (kept local to avoid
+// a circular import: orchestrator.ts imports nothing from this module, and we
+// don't want to widen its dep surface). If the set in orchestrator.ts changes,
+// update this too. (Documented linkage, not duplication-for-its-own-sake.)
+const RESUMABLE_BLOCKED_LOCAL = new Set([
+    'stalled',
+    'validation_failed',
+    'evidence_missing',
+    'injection_rejected',
+]);
+function isResumableBlockedReason(reason) {
+    return RESUMABLE_BLOCKED_LOCAL.has(reason);
+}
+/** Test-only: clear the write-lock map between tests. */
+function _clearWriteLocksForTest() {
+    writeLocks.clear();
+}
+/**
+ * Test-only: deterministically await all in-flight checkpoint writes. Reviewer
+ * #2 Finding 5 fix — replaces the fragile "two setImmediate ticks" drain with
+ * `Promise.all` over the lock map so tests don't flake if the lock chain grows
+ * another async hop.
+ */
+async function _flushAllWritesForTest() {
+    await Promise.all([...writeLocks.values()]);
+}
+//# sourceMappingURL=state-persister.js.map

package/dist/src/state-persister.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-persister.js","sourceRoot":"","sources":["../../src/state-persister.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,wEAAuF;AACvF,kFAAuF;AAWvF,oEAA8F;AAC9F,kEAA8F;AAC9F,0EAAoG;AA4EpG,0CAgCC;AA8BD,wCAwBC;AA+BD,wCAkEC;AAMD,4CAWC;AAMD,wDAWC;AAQD,0DASC;AAWD,4DA6CC;AAiBD,0DAEC;AAQD,wDAEC;AA7bD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,uCAAyB;AACzB,2CAA6B;AAG7B,iDAA8C;AAE9C,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;AACjE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,4CAA4C;AAEpG,IAAI,kBAAkB,GAAG,CAAC,CAAC;AAC3B,SAAgB,8BAA8B,KAAa,OAAO,kBAAkB,CAAC,CAAC,CAAC;AACvF,SAAgB,mCAAmC,KAAW,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC;AAEvF;;;;;;;GAOG;AACH,IAAI,6BAA6B,GAAG,KAAK,CAAC;AAC1C,SAAgB,4BAA4B,KAAW,6BAA6B,GAAG,IAAI,CAAC,CAAC,CAAC;AAC9F,SAAgB,2BAA2B,KAAW,6BAA6B,GAAG,KAAK,CAAC,CAAC,CAAC;AAC9F,SAAgB,+BAA+B,KAAc,OAAO,6BAA6B,CAAC,CAAC,CAAC;AAEpG;;;GAGG;AACH,SAAS,gBAAgB,CAAC,aAAqB;IAC7C,IAAI,QAAQ,GAAG,aAAa,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,aAAqB,EAAE,KAAa;IAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAqB;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACxE,CAAC;AAkDD;;;GAGG;AACH,SAAgB,eAAe,CAAC,KAAqB,EAAE,KAAa,EAAE,aAAqB;IACzF,OAAO;QACL,KAAK;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,2EAA2E;QAC3E,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,aAAa;QACb,aAAa,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;KACpB,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,uEAAuE;AACvE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEpD;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,UAAkB,EAAE,IAAY;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,gFAAgF;IAChF,MAAM,OAAO,GAAG,GAAG,UAAU,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,KAAqB,EAAE,KAAa,EAAE,aAAqB;IACxF,IAAI,6BAA6B;QAAE,OAAO,CAAC,mCAAmC;IAC9E,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,iBAAiB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAE3D,iDAAiD;IACjD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;QAC1B,IAAI,CAAC;YACH,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5D,kBAAkB,CAAC,aAAa,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,kBAAkB,EAAE,CAAC;YACrB,IAAI,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACvF,CAAC;IACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACZ,2EAA2E;QAC3E,2CAA2C;IAC7C,CAAC,CAAC,CAAC;IACH,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5B,4EAA4E;IAC5E,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;QAClB,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,SAAS,kBAAkB,CAAC,aAAqB,EAAE,UAAkB,EAAE,KAAa;IAClF,MAAM,SAAS,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,KAAK,GAA2B,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAA2B,CAAC;QACpF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;QACjD,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK;QAAE,OAAO,CAAC,qBAAqB;IAC9D,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,kBAAkB,EAAE,CAAC;QACrB,IAAI,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAC5B,KAAa,EACb,aAAqB,EACrB,OAAyC;IAEzC,MAAM,MAAM,GAAG,iBAAiB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,EAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,yCAAyC;IACxD,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,+DAA+D;IAC/D,IAAI,OAAO,EAAE,iBAAiB,KAAK,KAAK,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO,IAAI,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,wDAAwD;IACxD,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,kBAAkB,EAAE,EAAE,CAAC,kBAAkB;QACzC,aAAa,EAAE,EAAE,CAAC,aAAa;QAC/B,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,YAAY,EAAE,EAAE,CAAC,YAAY;QAC7B,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,gBAAgB,EAAE,EAAE,CAAC,gBAAgB;QACrC,YAAY,EAAE,EAAE,CAAC,YAAY;QAC7B,kBAAkB,EAAE,EAAE,CAAC,kBAAkB;QACzC,kBAAkB,EAAE,EAAE,CAAC,kBAAkB;QACzC,qBAAqB,EAAE,EAAE,CAAC,qBAAqB;QAC/C,sBAAsB,EAAE,CAAC,EAAE,0CAA0C;QACrE,oBAAoB,EAAE,EAAE,CAAC,oBAAoB;QAC7C,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,eAAe,EAAE,EAAE,CAAC,eAAe;QACnC,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,eAAe,EAAE,EAAE,CAAC,eAAe;QACnC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB;QACrC,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,cAAc,EAAE,EAAE,CAAC,cAAc;QACjC,QAAQ,EAAE,IAAI,EAAE,wDAAwD;QACxE,cAAc,EAAE,CAAC;QACjB,kBAAkB,EAAE,CAAC;QACrB,qEAAqE;QACrE,yEAAyE;QACzE,uEAAuE;QACvE,2EAA2E;QAC3E,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,QAAQ,EAAE,EAAE,CAAC,QAAQ;KACJ,CAAC;IAEpB,uDAAuD;IACvD,MAAM,aAAa,GAAG,IAAA,2BAAY,EAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,KAAa,EAAE,aAAqB;IACnE,IAAI,6BAA6B;QAAE,OAAO,CAAC,mCAAmC;IAC9E,MAAM,MAAM,GAAG,iBAAiB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IACzF,CAAC;IACD,4EAA4E;IAC5E,4EAA4E;IAC5E,kDAAkD;AACpD,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,aAAqB,EAAE,UAAkB;IAC9E,MAAM,SAAS,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAA2B,CAAC;QACxF,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;YAAE,OAAO;QACnC,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC;QACzB,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,uBAAuB,CAAC,aAAqB,EAAE,UAAkB;IAC/E,MAAM,SAAS,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAA2B,CAAC;QACxF,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,wBAAwB,CAAC,aAAqB;IAC5D,IAAI,6BAA6B;QAAE,OAAO,EAAE,CAAC,CAAC,kCAAkC;IAChF,MAAM,GAAG,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAwB,CAAC;YACjF,MAAM,IAAI,GAAG,EAAE,CAAC,kBAAkB,CAAC;YACnC,MAAM,WAAW,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,WAAW,CAAC;YACvI,MAAM,UAAU,GAAG,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,aAAa,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;YAE9H,IAAI,UAAU,EAAE,CAAC;gBACf,mDAAmD;gBACnD,IAAI,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,0BAA0B,EAAE,CAAC;oBAClE,IAAI,CAAC;wBAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;gBAC9D,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,6DAA6D;gBAC7D,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC;oBACrB,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;wBAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;4BAAE,SAAS;oBACpC,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS,CAAC,wBAAwB;oBACpC,CAAC;gBACH,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAC3D,SAAS;IACT,mBAAmB;IACnB,kBAAkB;IAClB,oBAAoB;CACrB,CAAC,CAAC;AACH,SAAS,wBAAwB,CAAC,MAAc;IAC9C,OAAO,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,yDAAyD;AACzD,SAAgB,uBAAuB;IACrC,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,sBAAsB;IAC1C,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC"}