@scotthuang/agent-knock-knock 0.12.11 → 0.12.13

package/dist/src/terminal-authority-policy.js

@@ -0,0 +1,367 @@
+import { createHash } from "node:crypto";
+import path from "node:path";
+import { executorDefinitionForKind } from "./executors.js";
+import { executorForConversation } from "./protocol.js";
+import { humanObservedHandoffBindingToken, isExactNativeThreadId, managedSessionBindingToken, managedSessionRevision, unmanagedTerminalBindingToken } from "./managed-session.js";
+import { hasCanonicalTerminalEndpoint, sameTerminalControlIncarnation, terminalEndpointFromControlRef, terminalEndpointIdentityKey } from "./terminal-control-ref.js";
+import { candidateSourceRootAuthorityMatches, classifyTerminalBindingConflict, exactRolloutMatches, isCodexStatusCardEvidence, isCompleteNativeRollout, terminalNativeIdentityFence, terminalNativeIdentityMatchesFence } from "./terminal-binding-authority.js";
+import { isRecord, nonBlankString } from "./value-guards.js";
+export { candidateSourceRootAuthorityMatches, classifyTerminalBindingConflict as classifyManagedBindingConflict, isCodexStatusCardEvidence, isCompleteNativeRollout, terminalNativeIdentityFence as codexIdentityFence, terminalNativeIdentityMatchesFence as nativeIdentityMatchesCodexPreMaterialization };
+export function assertSafeTerminalSend(agent, terminalStatus) {
+    const displayName = executorDefinitionForKind(agent).displayName;
+    const approval = isRecord(terminalStatus?.approval_state)
+        ? terminalStatus.approval_state
+        : undefined;
+    if (terminalStatus?.reachable !== true) {
+        throw new Error(`${displayName} terminal status is unavailable`);
+    }
+    if (approval?.blocked === true) {
+        throw new Error(nonBlankString(approval.reason) ??
+            `${displayName} is waiting at a permission dialog`);
+    }
+    if (terminalStatus.activity_state !== "idle") {
+        throw new Error(`${displayName} terminal is ${nonBlankString(terminalStatus.activity_state) ?? "unknown"}, not idle`);
+    }
+}
+export function terminalControlSelectorKey(control) {
+    if (!isRecord(control))
+        return undefined;
+    let endpoint;
+    try {
+        endpoint = terminalEndpointFromControlRef(control);
+    }
+    catch {
+        return undefined;
+    }
+    const processAnchorPid = Number(endpoint.processAnchorPid);
+    if (!Number.isSafeInteger(processAnchorPid) || processAnchorPid <= 1) {
+        return undefined;
+    }
+    return JSON.stringify({
+        identity: terminalEndpointIdentityKey(endpoint),
+        process_anchor_pid: processAnchorPid
+    });
+}
+export function terminalControlsShareIncarnation(left, right) {
+    if (!terminalControlSelectorKey(left) || !terminalControlSelectorKey(right)) {
+        return false;
+    }
+    return sameTerminalControlIncarnation(left, right);
+}
+export function terminalControlAliasMatches(storedTerminalId, storedControl, currentTerminalId, currentControl) {
+    if (!terminalControlsShareIncarnation(storedControl, currentControl)) {
+        return false;
+    }
+    return Boolean(storedControl && typeof storedControl === "object" &&
+        currentControl && typeof currentControl === "object" &&
+        ((hasCanonicalTerminalEndpoint(storedControl) &&
+            hasCanonicalTerminalEndpoint(currentControl)) || nonBlankString(storedTerminalId) ===
+            nonBlankString(currentTerminalId)));
+}
+export function selectRootTerminalProcesses(processes) {
+    const pids = new Set(processes.map((process) => `${process.agent}:${process.pid}`));
+    const roots = processes.filter((process) => !process.ppid || !pids.has(`${process.agent}:${process.ppid}`));
+    const seenTerminalIncarnations = new Set();
+    return roots.filter((process) => {
+        const endpoint = process.terminalControl
+            ? terminalEndpointFromControlRef(process.terminalControl)
+            : undefined;
+        const incarnation = endpoint
+            ? JSON.stringify({
+                agent: process.agent,
+                identity: terminalEndpointIdentityKey(endpoint),
+                process_anchor_pid: endpoint.processAnchorPid ?? null
+            })
+            : undefined;
+        if (!incarnation)
+            return true;
+        if (seenTerminalIncarnations.has(incarnation))
+            return false;
+        seenTerminalIncarnations.add(incarnation);
+        return true;
+    });
+}
+export function childProcessIdsForRoot(root, processes) {
+    return processes
+        .filter((process) => process.agent === root.agent && process.ppid === root.pid)
+        .map((process) => process.pid);
+}
+export function processIncarnationRelationship({ binding, livePid, liveProcessUuid, liveProcessBirth }) {
+    if (binding.native_process.pid !== livePid)
+        return "different";
+    const comparisons = [];
+    if (binding.native_process.process_uuid && liveProcessUuid) {
+        comparisons.push(binding.native_process.process_uuid === liveProcessUuid);
+    }
+    if (binding.native_process.process_birth && liveProcessBirth) {
+        comparisons.push(binding.native_process.process_birth === liveProcessBirth);
+    }
+    if (comparisons.length === 0)
+        return "unverifiable";
+    if (comparisons.every(Boolean))
+        return "same";
+    if (comparisons.every((value) => !value))
+        return "different";
+    return "unverifiable";
+}
+export function decideManagedBindingConflict(facts) {
+    if (!facts.claimsTerminal || facts.exactBinding)
+        return undefined;
+    if (facts.ownerConclusivelyInactive)
+        return "stale_process_incarnation";
+    return classifyTerminalBindingConflict(facts);
+}
+export function codexCompanionsPresentInOpenRootInventory(companions, inventory) {
+    const present = [companions.primary, ...companions.additional].filter((candidate) => Boolean(candidate && inventory.roots.some((root) => terminalNativeIdentityMatchesFence(root, candidate))));
+    return { primary: present[0], additional: present.slice(1) };
+}
+export function withCodexCompanionFences(runtime, companions) {
+    return {
+        ...runtime,
+        allowedPreMaterializationNativeIdentity: companions.primary,
+        allowedAdditionalNativeIdentities: companions.additional
+    };
+}
+export function codexCompanionsExcludingPreferred(roots, preferredSessionId) {
+    const allowed = [roots.primary, ...roots.additional].filter((candidate) => Boolean(candidate && candidate.sessionId !== preferredSessionId));
+    return { primary: allowed[0], additional: allowed.slice(1) };
+}
+export function nativeIdentityMatchesStoredTurn(facts, currentIdentity) {
+    const strictClaudeTurn = facts.strictNativeIdentity &&
+        facts.agent === "claude";
+    const strictCodexTurn = facts.strictNativeIdentity && facts.agent === "codex";
+    const storedSessionId = facts.storedSessionId;
+    if (facts.strictNativeIdentity &&
+        (!storedSessionId || !currentIdentity?.sessionId))
+        return false;
+    const storedProcessUuid = facts.storedProcessUuid;
+    if (strictClaudeTurn && (!storedProcessUuid || !currentIdentity?.processUuid ||
+        storedProcessUuid !== currentIdentity.processUuid))
+        return false;
+    let storedProcessBirth;
+    let storedRollout;
+    if (strictCodexTurn) {
+        storedProcessBirth = facts.storedProcessBirth;
+        if (!storedProcessUuid || !storedProcessBirth)
+            return false;
+        storedRollout = facts.storedRollout;
+        if (!isCompleteNativeRollout(storedRollout) ||
+            !currentIdentity?.processUuid || !currentIdentity.processBirth ||
+            !isCompleteNativeRollout(currentIdentity.rollout))
+            return false;
+    }
+    if (storedSessionId && storedSessionId !== currentIdentity?.sessionId)
+        return false;
+    if (storedProcessUuid && storedProcessUuid !== currentIdentity?.processUuid)
+        return false;
+    storedProcessBirth = strictCodexTurn
+        ? storedProcessBirth
+        : facts.storedProcessBirth;
+    if (storedProcessBirth && storedProcessBirth !== currentIdentity?.processBirth)
+        return false;
+    storedRollout = strictCodexTurn ? storedRollout : facts.storedRollout;
+    return !storedRollout || sameNativeRolloutFields(storedRollout, currentIdentity?.rollout);
+}
+/** Project one stored Turn into the canonical native-identity matcher. */
+export function nativeAgentIdentityMatchesTurn(conversation, currentIdentity) {
+    const takeover = isRecord(conversation.native_session_takeover)
+        ? conversation.native_session_takeover
+        : undefined;
+    const sessionId = nonBlankString(takeover?.terminal_agent_session_id);
+    const processUuid = nonBlankString(takeover?.terminal_agent_process_uuid);
+    const processBirth = nonBlankString(takeover?.terminal_agent_process_birth);
+    const rollout = takeover?.terminal_agent_rollout;
+    const strict = Number(takeover?.terminal_agent_identity_protocol) === 1;
+    const agent = executorForConversation(conversation).kind;
+    return nativeIdentityMatchesStoredTurn({
+        strictNativeIdentity: strict,
+        agent,
+        storedSessionId: sessionId,
+        storedProcessUuid: processUuid,
+        storedProcessBirth: processBirth,
+        get storedRollout() {
+            return isRecord(rollout)
+                ? {
+                    get fd() {
+                        return nonBlankString(rollout.fd);
+                    },
+                    get device() {
+                        return nonBlankString(rollout.device);
+                    },
+                    get inode() {
+                        return nonBlankString(rollout.inode);
+                    },
+                    get path() {
+                        return nonBlankString(rollout.path);
+                    }
+                }
+                : undefined;
+        }
+    }, currentIdentity);
+}
+export function exactBoundCodexSendSource(facts) {
+    const { sourceSession: session, context } = facts;
+    const binding = session.binding;
+    const sourceNativeThreadId = binding?.native_thread_id;
+    const sourceRollout = binding?.native_process.rollout;
+    const sourceRolloutAuthority = facts.sourceRolloutAuthority ?? "present";
+    const exactSourceEvidence = facts.kind === "verified_empty"
+        ? isCompleteNativeRollout(sourceRollout)
+        : facts.kind === "status_card"
+            ? Boolean(binding && !sourceRollout &&
+                isCodexStatusCardEvidence(binding.native_process.evidence))
+            : Boolean(facts.inventory && candidateSourceRootAuthorityMatches(facts.inventory.roots, sourceNativeThreadId, sourceRollout, sourceRolloutAuthority));
+    return Boolean(session.agent === "codex" && session.status === "bound" && binding &&
+        isExactNativeThreadId(sourceNativeThreadId) && exactSourceEvidence &&
+        (facts.kind === "candidate" ||
+            binding.native_process.process_uuid &&
+                binding.native_process.process_birth) &&
+        binding.native_process.pid === context.pid &&
+        terminalControlAliasMatches(binding.terminal_id, binding.terminal_control, context.terminalId, context.terminalControl) &&
+        context.workspace &&
+        path.resolve(session.workspace) === path.resolve(context.workspace) &&
+        processIncarnationRelationship({
+            binding,
+            livePid: context.pid,
+            liveProcessUuid: context.liveProcessUuid,
+            liveProcessBirth: context.liveProcessBirth
+        }) === "same" && (facts.kind !== "candidate" || Boolean(facts.inventory && context.liveProcessUuid && context.liveProcessBirth &&
+        exactCodexCandidateInventoryForDeferredSend({
+            inventory: facts.inventory,
+            sourceSession: session,
+            pid: context.pid,
+            workspace: context.workspace,
+            processUuid: context.liveProcessUuid,
+            processBirth: context.liveProcessBirth,
+            sourceRolloutAuthority
+        }))));
+}
+export function exactCodexCandidateInventoryForDeferredSend({ inventory, sourceSession, pid, workspace, processUuid, processBirth, sourceRolloutAuthority }) {
+    const sourceNativeThreadId = sourceSession.binding?.native_thread_id;
+    const sourceRollout = sourceSession.binding?.native_process.rollout;
+    const sourceRootPresent = Boolean(sourceNativeThreadId &&
+        inventory.roots.some((root) => root.sessionId.toLowerCase() === sourceNativeThreadId.toLowerCase()));
+    const sourceRolloutPresent = Boolean(sourceRollout &&
+        inventory.roots.some((root) => exactRolloutMatches(root.rollout, sourceRollout)));
+    return Boolean(inventory.roots.length > 0 && inventory.pid === pid &&
+        inventory.processUuid === processUuid &&
+        inventory.processBirth === processBirth && inventory.cwd &&
+        path.resolve(inventory.cwd) === path.resolve(workspace) &&
+        /^[0-9a-f]{64}$/u.test(inventory.inventoryFingerprint) &&
+        (sourceRolloutAuthority === "explicitly_abandoned_predecessor"
+            ? isExactNativeThreadId(sourceNativeThreadId) &&
+                isCompleteNativeRollout(sourceRollout) &&
+                !sourceRootPresent && !sourceRolloutPresent
+            : sourceRollout === undefined || sourceRootPresent));
+}
+export function deferredCodexForegroundBindingToken(facts) {
+    const terminalToken = unmanagedTerminalBindingToken({
+        terminalId: facts.terminalId,
+        terminalControl: facts.terminalControl,
+        agent: "codex",
+        pid: facts.pid,
+        workspace: facts.workspace,
+        processUuid: facts.processUuid,
+        processBirth: facts.processBirth
+    });
+    const candidateAuthority = facts.candidateInventory
+        ? {
+            inventory_pid: facts.candidateInventory.pid,
+            inventory_cwd: facts.candidateInventory.cwd,
+            inventory_fingerprint: facts.candidateInventory.inventoryFingerprint,
+            candidate_native_thread_ids: facts.candidateInventory.roots.map((root) => root.sessionId)
+        }
+        : undefined;
+    const sourceTurnHistoryFingerprint = facts.sourceTurnHistory
+        ? sha256(JSON.stringify(facts.sourceTurnHistory))
+        : undefined;
+    return sha256(JSON.stringify({
+        version: candidateAuthority ? 5 : 2,
+        kind: "deferred_codex_foreground_binding",
+        terminal_token: terminalToken,
+        composer_state: "styled_empty",
+        source_session_id: facts.sourceSession.session_id,
+        source_revision: managedSessionRevision(facts.sourceSession),
+        source_binding_token: managedSessionBindingToken(facts.sourceSession),
+        terminal_dispatch_snapshot: facts.dispatchSnapshot,
+        observation: candidateAuthority
+            ? "exact_open_root_inventory"
+            : "verified_absent",
+        ...(sourceTurnHistoryFingerprint
+            ? { source_turn_history_fingerprint: sourceTurnHistoryFingerprint }
+            : {}),
+        ...(candidateAuthority
+            ? { source_rollout_authority: facts.sourceRolloutAuthority ?? "present" }
+            : {}),
+        ...(facts.sourceAbandonmentFingerprint
+            ? { source_abandonment_fingerprint: facts.sourceAbandonmentFingerprint }
+            : {}),
+        ...(candidateAuthority ?? {})
+    }));
+}
+export function verifiedEmptyCodexHandoffToken(facts) {
+    const terminalToken = unmanagedTerminalBindingToken({
+        terminalId: facts.terminalId,
+        terminalControl: facts.terminalControl,
+        agent: "codex",
+        pid: facts.pid,
+        workspace: facts.workspace,
+        processUuid: facts.processUuid,
+        processBirth: facts.processBirth
+    });
+    return sha256(JSON.stringify({
+        version: 1,
+        kind: "verified_empty_codex_handoff",
+        terminal_token: terminalToken,
+        source_session_id: facts.sourceSession.session_id,
+        source_revision: managedSessionRevision(facts.sourceSession),
+        source_binding_token: managedSessionBindingToken(facts.sourceSession),
+        observation: "verified_absent"
+    }));
+}
+export function observedHandoffAuthorityToken(facts) {
+    const terminalToken = unmanagedTerminalBindingToken({
+        terminalId: facts.terminalId,
+        terminalControl: facts.terminalControl,
+        agent: facts.agent,
+        pid: facts.pid,
+        workspace: facts.workspace,
+        nativeThreadId: facts.identity.sessionId,
+        processUuid: facts.identity.processUuid,
+        processBirth: facts.identity.processBirth,
+        rollout: facts.identity.rollout
+    });
+    return humanObservedHandoffBindingToken({
+        terminal_token: terminalToken,
+        source_session_id: facts.sourceSession.session_id,
+        source_revision: managedSessionRevision(facts.sourceSession),
+        source_binding_token: managedSessionBindingToken(facts.sourceSession),
+        target: facts.target
+    });
+}
+export function activeTurnHandoffDecisionToken(facts) {
+    return sha256(JSON.stringify({
+        version: 1,
+        kind: "active_turn_human_handoff",
+        handoff_token: facts.handoffToken,
+        session_id: facts.sessionId,
+        turn_id: facts.turnId,
+        turn_status: facts.turnStatus,
+        turn_updated_at: facts.turnUpdatedAt,
+        current_message_id: facts.currentMessageId,
+        ledger_generation_id: facts.ledgerGenerationId,
+        ledger_message_id: facts.ledgerMessageId,
+        ledger_status: facts.ledgerStatus
+    }));
+}
+function sameNativeRolloutFields(left, right) {
+    return isRecord(left) && isRecord(right) &&
+        nonBlankString(left.fd) === nonBlankString(right.fd) &&
+        nonBlankString(left.device) === nonBlankString(right.device) &&
+        nonBlankString(left.inode) === nonBlankString(right.inode) &&
+        nonBlankString(left.path) === nonBlankString(right.path);
+}
+function sha256(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+//# sourceMappingURL=terminal-authority-policy.js.map

package/dist/src/terminal-authority-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-authority-policy.js","sourceRoot":"","sources":["../../src/terminal-authority-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,yBAAyB,EAE1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EAExB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gCAAgC,EAChC,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,6BAA6B,EAI9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,EAC9B,8BAA8B,EAC9B,2BAA2B,EAE5B,MAAM,2BAA2B,CAAC;AAMnC,OAAO,EACL,mCAAmC,EACnC,+BAA+B,EAC/B,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,EAC3B,kCAAkC,EAMnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE7D,OAAO,EACL,mCAAmC,EACnC,+BAA+B,IAAI,8BAA8B,EACjE,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,IAAI,kBAAkB,EACjD,kCAAkC,IAAI,4CAA4C,EACnF,CAAC;AAoBF,MAAM,UAAU,sBAAsB,CACpC,KAAmB,EACnB,cAAgD;IAEhD,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC;IACjE,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;QACvD,CAAC,CAAC,cAAc,CAAC,cAAc;QAC/B,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,cAAc,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,iCAAiC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC7B,GAAG,WAAW,oCAAoC,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,GAAG,WAAW,gBACZ,cAAc,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,SACnD,YAAY,CACb,CAAC;IACJ,CAAC;AACH,CAAC;AAgBD,MAAM,UAAU,0BAA0B,CACxC,OAAgB;IAEhB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,QAA2D,CAAC;IAChE,IAAI,CAAC;QACH,QAAQ,GAAG,8BAA8B,CACvC,OAAwC,CACzC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,QAAQ,EAAE,2BAA2B,CAAC,QAAQ,CAAC;QAC/C,kBAAkB,EAAE,gBAAgB;KACrC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,IAAa,EACb,KAAc;IAEd,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,8BAA8B,CACnC,IAA0B,EAC1B,KAA2B,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,gBAAyB,EACzB,aAAsB,EACtB,iBAA0B,EAC1B,cAAuB;IAEvB,IAAI,CAAC,gCAAgC,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CACZ,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ;QAClD,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ;QACpD,CACE,CACE,4BAA4B,CAAC,aAAmC,CAAC;YACjE,4BAA4B,CAAC,cAAoC,CAAC,CACnE,IAAI,cAAc,CAAC,gBAAgB,CAAC;YACnC,cAAc,CAAC,iBAAiB,CAAC,CACpC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAKxC,SAA6B;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAC9D,CAAC;IACF,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAC/D,CAAC;IACF,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAU,CAAC;IACnD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe;YACtC,CAAC,CAAC,8BAA8B,CAAC,OAAO,CAAC,eAAe,CAAC;YACzD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,WAAW,GAAG,QAAQ;YAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,2BAA2B,CAAC,QAAQ,CAAC;gBAC/C,kBAAkB,EAAE,QAAQ,CAAC,gBAAgB,IAAI,IAAI;aACtD,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5D,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAInC,IAAa,EAAE,SAA6B;IAC7C,OAAO,SAAS;SACb,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAClB,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,CAC1D;SACA,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,EAC7C,OAAO,EACP,OAAO,EACP,eAAe,EACf,gBAAgB,EAMjB;IACC,IAAI,OAAO,CAAC,cAAc,CAAC,GAAG,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC;IAC/D,MAAM,WAAW,GAAc,EAAE,CAAC;IAClC,IAAI,OAAO,CAAC,cAAc,CAAC,YAAY,IAAI,eAAe,EAAE,CAAC;QAC3D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,KAAK,eAAe,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,CAAC,aAAa,IAAI,gBAAgB,EAAE,CAAC;QAC7D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,aAAa,KAAK,gBAAgB,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC;IACpD,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IAC7D,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAS5C;IACC,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,KAAK,CAAC,yBAAyB;QAAE,OAAO,2BAA2B,CAAC;IACxE,OAAO,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,yCAAyC,CACvD,UAAoC,EACpC,SAAwC;IAExC,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CACnE,CAAC,SAAS,EAAgD,EAAE,CAAC,OAAO,CAClE,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,kCAAkC,CAAC,IAAI,EAAE,SAAS,CAAC,CACpD,CACF,CACF,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAgB,EAChB,UAAoC;IAKpC,OAAO;QACL,GAAG,OAAO;QACV,uCAAuC,EAAE,UAAU,CAAC,OAAO;QAC3D,iCAAiC,EAAE,UAAU,CAAC,UAAU;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAA+B,EAC/B,kBAA0B;IAE1B,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CACzD,CAAC,SAAS,EAAgD,EAAE,CAC1D,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,KAAK,kBAAkB,CAAC,CACnE,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAgBD,MAAM,UAAU,+BAA+B,CAC7C,KAAoC,EACpC,eAAmD;IAEnD,MAAM,gBAAgB,GAAG,KAAK,CAAC,oBAAoB;QACjD,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;IAC3B,MAAM,eAAe,GAAG,KAAK,CAAC,oBAAoB,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC;IAC9E,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IAC9C,IACE,KAAK,CAAC,oBAAoB;QAC1B,CAAC,CAAC,eAAe,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAClD,IACE,gBAAgB,IAAI,CAClB,CAAC,iBAAiB,IAAI,CAAC,eAAe,EAAE,WAAW;QACnD,iBAAiB,KAAK,eAAe,CAAC,WAAW,CAClD;QACD,OAAO,KAAK,CAAC;IACf,IAAI,kBAAsC,CAAC;IAC3C,IAAI,aAA6D,CAAC;IAClE,IACE,eAAe,EACf,CAAC;QACD,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAC9C,IAAI,CAAC,iBAAiB,IAAI,CAAC,kBAAkB;YAAE,OAAO,KAAK,CAAC;QAC5D,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QACpC,IACE,CAAC,uBAAuB,CAAC,aAAa,CAAC;YACvC,CAAC,eAAe,EAAE,WAAW,IAAI,CAAC,eAAe,CAAC,YAAY;YAC9D,CAAC,uBAAuB,CAAC,eAAe,CAAC,OAAO,CAAC;YACjD,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IACE,eAAe,IAAI,eAAe,KAAK,eAAe,EAAE,SAAS;QACjE,OAAO,KAAK,CAAC;IACf,IACE,iBAAiB,IAAI,iBAAiB,KAAK,eAAe,EAAE,WAAW;QACvE,OAAO,KAAK,CAAC;IACf,kBAAkB,GAAG,eAAe;QAClC,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAC7B,IACE,kBAAkB,IAAI,kBAAkB,KAAK,eAAe,EAAE,YAAY;QAC1E,OAAO,KAAK,CAAC;IACf,aAAa,GAAG,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IACtE,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAC9C,aAAa,EACb,eAAe,EAAE,OAAO,CACzB,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,8BAA8B,CAC5C,YAA0B,EAC1B,eAAmD;IAEnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,uBAAuB,CAAC;QAC7D,CAAC,CAAC,YAAY,CAAC,uBAAuB;QACtC,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,QAAQ,EAAE,sBAAsB,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC;IACzD,OAAO,+BAA+B,CAAC;QACrC,oBAAoB,EAAE,MAAM;QAC5B,KAAK;QACL,eAAe,EAAE,SAAS;QAC1B,iBAAiB,EAAE,WAAW;QAC9B,kBAAkB,EAAE,YAAY;QAChC,IAAI,aAAa;YACf,OAAO,QAAQ,CAAC,OAAO,CAAC;gBACtB,CAAC,CAAC;oBACE,IAAI,EAAE;wBACJ,OAAO,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACpC,CAAC;oBACD,IAAI,MAAM;wBACR,OAAO,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACxC,CAAC;oBACD,IAAI,KAAK;wBACP,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACvC,CAAC;oBACD,IAAI,IAAI;wBACN,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACtC,CAAC;iBACF;gBACH,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;KACF,EAAE,eAAe,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAMzC;IACC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,oBAAoB,GAAG,OAAO,EAAE,gBAAgB,CAAC;IACvD,MAAM,aAAa,GAAG,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;IACtD,MAAM,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,IAAI,SAAS,CAAC;IACzE,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,KAAK,gBAAgB;QACzD,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC;QACxC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa;YAC5B,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,aAAa;gBAC/B,yBAAyB,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC/D,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,mCAAmC,CAC5D,KAAK,CAAC,SAAS,CAAC,KAAK,EACrB,oBAAoB,EACpB,aAAa,EACb,sBAAsB,CACvB,CAAC,CAAC;IACT,OAAO,OAAO,CACZ,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO;QAClE,qBAAqB,CAAC,oBAAoB,CAAC,IAAI,mBAAmB;QAClE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;YACzB,OAAO,CAAC,cAAc,CAAC,YAAY;gBACnC,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC;QACvC,OAAO,CAAC,cAAc,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;QAC1C,2BAA2B,CACzB,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,eAAe,CACxB;QACD,OAAO,CAAC,SAAS;QACjB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QACnE,8BAA8B,CAAC;YAC7B,OAAO;YACP,OAAO,EAAE,OAAO,CAAC,GAAG;YACpB,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;SAC3C,CAAC,KAAK,MAAM,IAAI,CACf,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CACnC,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,gBAAgB;QACtE,2CAA2C,CAAC;YAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,OAAO;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,eAAe;YACpC,YAAY,EAAE,OAAO,CAAC,gBAAgB;YACtC,sBAAsB;SACvB,CAAC,CACH,CACF,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2CAA2C,CAAC,EAC1D,SAAS,EACT,aAAa,EACb,GAAG,EACH,SAAS,EACT,WAAW,EACX,YAAY,EACZ,sBAAsB,EASvB;IACC,MAAM,oBAAoB,GAAG,aAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACrE,MAAM,aAAa,GAAG,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;IACpE,MAAM,iBAAiB,GAAG,OAAO,CAAC,oBAAoB;QACpD,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5B,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,oBAAoB,CAAC,WAAW,EAAE,CACpE,CAAC,CAAC;IACL,MAAM,oBAAoB,GAAG,OAAO,CAAC,aAAa;QAChD,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5B,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CACjD,CAAC,CAAC;IACL,OAAO,OAAO,CACZ,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,KAAK,GAAG;QACnD,SAAS,CAAC,WAAW,KAAK,WAAW;QACrC,SAAS,CAAC,YAAY,KAAK,YAAY,IAAI,SAAS,CAAC,GAAG;QACxD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACvD,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC;QACtD,CAAC,sBAAsB,KAAK,kCAAkC;YAC5D,CAAC,CAAC,qBAAqB,CAAC,oBAAoB,CAAC;gBAC3C,uBAAuB,CAAC,aAAa,CAAC;gBACtC,CAAC,iBAAiB,IAAI,CAAC,oBAAoB;YAC7C,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,iBAAiB,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,KAanD;IACC,MAAM,aAAa,GAAG,6BAA6B,CAAC;QAClD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB;QACjD,CAAC,CAAC;YACE,aAAa,EAAE,KAAK,CAAC,kBAAkB,CAAC,GAAG;YAC3C,aAAa,EAAE,KAAK,CAAC,kBAAkB,CAAC,GAAG;YAC3C,qBAAqB,EAAE,KAAK,CAAC,kBAAkB,CAAC,oBAAoB;YACpE,2BAA2B,EAAE,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAC7D,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CACzB;SACF;QACH,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,4BAA4B,GAAG,KAAK,CAAC,iBAAiB;QAC1D,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3B,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,EAAE,mCAAmC;QACzC,cAAc,EAAE,aAAa;QAC7B,cAAc,EAAE,cAAc;QAC9B,iBAAiB,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;QACjD,eAAe,EAAE,sBAAsB,CAAC,KAAK,CAAC,aAAa,CAAC;QAC5D,oBAAoB,EAAE,0BAA0B,CAAC,KAAK,CAAC,aAAa,CAAC;QACrE,0BAA0B,EAAE,KAAK,CAAC,gBAAgB;QAClD,WAAW,EAAE,kBAAkB;YAC7B,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,iBAAiB;QACrB,GAAG,CAAC,4BAA4B;YAC9B,CAAC,CAAC,EAAE,+BAA+B,EAAE,4BAA4B,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,kBAAkB;YACpB,CAAC,CAAC,EAAE,wBAAwB,EAAE,KAAK,CAAC,sBAAsB,IAAI,SAAS,EAAE;YACzE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,4BAA4B;YACpC,CAAC,CAAC,EAAE,8BAA8B,EAAE,KAAK,CAAC,4BAA4B,EAAE;YACxE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC;KAC9B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAQ9C;IACC,MAAM,aAAa,GAAG,6BAA6B,CAAC;QAClD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3B,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,8BAA8B;QACpC,cAAc,EAAE,aAAa;QAC7B,iBAAiB,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;QACjD,eAAe,EAAE,sBAAsB,CAAC,KAAK,CAAC,aAAa,CAAC;QAC5D,oBAAoB,EAAE,0BAA0B,CAAC,KAAK,CAAC,aAAa,CAAC;QACrE,WAAW,EAAE,iBAAiB;KAC/B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAS7C;IACC,MAAM,aAAa,GAAG,6BAA6B,CAAC;QAClD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;QACxC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;QACvC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;QACzC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;KAChC,CAAC,CAAC;IACH,OAAO,gCAAgC,CAAC;QACtC,cAAc,EAAE,aAAa;QAC7B,iBAAiB,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;QACjD,eAAe,EAAE,sBAAsB,CAAC,KAAK,CAAC,aAAa,CAAC;QAC5D,oBAAoB,EAAE,0BAA0B,CAAC,KAAK,CAAC,aAAa,CAAC;QACrE,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAU9C;IACC,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3B,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,2BAA2B;QACjC,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,eAAe,EAAE,KAAK,CAAC,aAAa;QACpC,kBAAkB,EAAE,KAAK,CAAC,gBAAgB;QAC1C,oBAAoB,EAAE,KAAK,CAAC,kBAAkB;QAC9C,iBAAiB,EAAE,KAAK,CAAC,eAAe;QACxC,aAAa,EAAE,KAAK,CAAC,YAAY;KAClC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAa,EAAE,KAAc;IAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC;QACtC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5D,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1D,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC"}

package/dist/src/terminal-binding-authority.d.ts

@@ -0,0 +1,118 @@
+import type { ExecutorKind } from "./executors.js";
+import { type ManagedSessionState } from "./managed-session.js";
+export interface TerminalNativeRolloutIdentity {
+    fd: string;
+    device: string;
+    inode: string;
+    path: string;
+}
+export interface TerminalNativeIdentity {
+    sessionId: string;
+    processStartedAt?: number;
+    processUuid?: string;
+    processBirth?: string;
+    rollout?: TerminalNativeRolloutIdentity;
+    evidence: string;
+}
+/** Exact adapter-neutral fence for one materialized native identity. */
+export interface TerminalNativeIdentityFence {
+    sessionId: string;
+    processUuid: string;
+    processBirth: string;
+    rollout: TerminalNativeRolloutIdentity;
+}
+export declare function isCompleteNativeRollout(value: unknown): value is TerminalNativeRolloutIdentity;
+export declare function terminalNativeIdentityFence(identity: TerminalNativeIdentity | undefined): TerminalNativeIdentityFence | undefined;
+export declare function terminalNativeIdentityMatchesFence(identity: TerminalNativeIdentity | TerminalNativeIdentityFence | undefined, expected: TerminalNativeIdentityFence | undefined): boolean;
+export type TerminalNativeIdentityObservation = {
+    status: "resolved";
+    identity: TerminalNativeIdentity;
+} | {
+    status: "verified_absent";
+    evidence?: string;
+} | {
+    status: "unavailable";
+    reason?: string;
+} | {
+    status: "not_observed";
+};
+export interface TerminalCodexOpenRootIdentity {
+    sessionId: string;
+    processUuid: string;
+    processBirth: string;
+    rollout: TerminalNativeRolloutIdentity;
+}
+export interface TerminalCodexOpenRootInventory {
+    pid: number;
+    processUuid: string;
+    processBirth: string;
+    roots: readonly TerminalCodexOpenRootIdentity[];
+}
+/**
+ * One ephemeral observation of a live terminal.
+ *
+ * The native identity and process incarnation are deliberately separate. A
+ * list scan may supplement process-incarnation evidence without upgrading the
+ * coding-agent identity returned by its native resolver. Callers must build a
+ * fresh observation at each mutation boundary; this value is never durable
+ * authorization.
+ */
+export interface TerminalObservation {
+    agent: ExecutorKind;
+    pid: number;
+    nativeIdentity: TerminalNativeIdentityObservation;
+    processIncarnation: {
+        processUuid?: string;
+        processBirth?: string;
+    };
+    statusCardNativeThreadId?: string;
+    codexOpenRootInventory?: TerminalCodexOpenRootInventory;
+}
+/** Build the list-side observation without importing CLI orchestration. */
+export declare function terminalObservationFromListEntry(terminal: Record<string, unknown>, agent: ExecutorKind): TerminalObservation;
+/** Build the mutation-side observation from evidence freshly read under lock. */
+export declare function terminalObservationFromResolvedIdentity({ agent, pid, identity, processIncarnation }: {
+    agent: ExecutorKind;
+    pid: number;
+    identity: TerminalNativeIdentity | undefined;
+    processIncarnation: TerminalObservation["processIncarnation"];
+}): TerminalObservation;
+export interface TerminalBindingMatchEvidence {
+    /** Result of the existing canonical/legacy terminal alias fence. */
+    terminalAliasMatches: boolean;
+    /** Result of the existing realpath-backed workspace fence. */
+    workspaceMatches: boolean;
+    /**
+     * Store-backed committed-transition evidence. This is false until the
+     * caller has performed that read at the same point as the legacy path.
+     */
+    codexLingeringBeforeMatches?: boolean;
+}
+export type ManagedBindingConflictKind = "stale_process_incarnation" | "live_external_thread_change" | "provisional_orphan" | "unverifiable";
+export declare function classifyTerminalBindingConflict(facts: {
+    session: ManagedSessionState;
+    processRelationship: "same" | "different" | "unverifiable";
+    liveNativeThreadId?: string;
+    statusCardNativeThreadId?: string;
+    managedTurnCount?: number;
+}): ManagedBindingConflictKind;
+export type AuthorityDecision = {
+    state: "unrelated";
+    reason: "session_not_bound" | "missing_binding" | "agent_mismatch" | "pid_mismatch" | "terminal_alias_mismatch" | "workspace_mismatch";
+} | {
+    state: "exact";
+    basis: "native_identity" | "codex_open_root_rollout" | "codex_status_card_process" | "codex_lingering_before";
+} | {
+    state: "not_exact";
+    reason: "status_card_thread_mismatch" | "native_identity_absent" | "native_identity_mismatch";
+};
+/**
+ * Pure exact-binding policy shared by read-only projection and mutation
+ * preparation. Store, process and filesystem evidence is gathered by the
+ * caller and supplied explicitly so this function cannot widen authorization
+ * or change I/O ordering.
+ */
+export declare function decideTerminalBindingMatch(session: ManagedSessionState, observation: TerminalObservation, evidence: TerminalBindingMatchEvidence): AuthorityDecision;
+export declare function exactRolloutMatches(left: unknown, right: TerminalNativeRolloutIdentity | undefined): boolean;
+export declare function candidateSourceRootAuthorityMatches(roots: readonly TerminalCodexOpenRootIdentity[], sourceThreadId: string | undefined, sourceRollout: TerminalNativeRolloutIdentity | undefined, authority: "present" | "explicitly_abandoned_predecessor"): boolean;
+export declare function isCodexStatusCardEvidence(evidence: string): boolean;