@sema-agent/server 1.185.0

package/dist/runs.js

@@ -0,0 +1,392 @@
+import { runWithVerification, runCascade, defaultTaskRegistry } from "@sema-agent/core";
+import { withPrincipal } from "./observability/principal-context.js";
+import { redactSecrets } from "./trace/redact.js";
+import { toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, appendModelUsageDelta, attachModelUsage } from "./trace/project.js";
+import { emitPendingWorkflowCompletions, taskNotificationInboxEntry } from "./orchestration/workflow-completion-inbox.js";
+export function markChildrenStoppedByUserOnAbort(signal, taskId, principal) {
+    signal.addEventListener("abort", () => {
+        try {
+            defaultTaskRegistry.markStopSourceForOwner({ owner: taskId, scope: principal ?? "default" }, "user", { skipSessionScoped: true });
+        }
+        catch {
+        }
+    }, { once: true });
+}
+export function isSessionConflictResult(result) {
+    if (result.status !== "failed")
+        return false;
+    if (result.errorCode)
+        return result.errorCode === "conflict";
+    return /stale write|concurrent write|conflict/i.test(result.errorMessage ?? "");
+}
+export function resumeAtHttpStatus(result) {
+    if (result.status !== "failed")
+        return undefined;
+    if (result.errorCode === "resume.session_not_found")
+        return 404;
+    if (!(result.errorCode?.startsWith("resume_at.") ?? false))
+        return undefined;
+    return result.errorCode === "resume_at.not_found" ? 404 : 422;
+}
+export class TurnAnchorCapture {
+    capture;
+    onCaptureFail;
+    captureUser;
+    firstTextEventId;
+    turnHadTool = false;
+    constructor(capture, onCaptureFail, captureUser) {
+        this.capture = capture;
+        this.onCaptureFail = onCaptureFail;
+        this.captureUser = captureUser;
+    }
+    async onMessageCommitted(role, entryId) {
+        if (role === "user" && entryId && this.captureUser) {
+            await this.captureUser(entryId).catch(() => this.onCaptureFail?.());
+        }
+    }
+    onText(eventId) {
+        if (this.firstTextEventId === undefined) {
+            this.turnHadTool = false;
+        }
+        this.firstTextEventId ??= eventId;
+    }
+    onTool() {
+        this.turnHadTool = true;
+    }
+    async onTurnEnd() {
+        if (this.firstTextEventId && !this.turnHadTool && this.capture) {
+            await this.capture(this.firstTextEventId).catch(() => this.onCaptureFail?.());
+        }
+        this.firstTextEventId = undefined;
+        this.turnHadTool = false;
+    }
+}
+export function stripCheckpointToken(result) {
+    if (result !== null && typeof result === "object" && !Array.isArray(result) && Object.hasOwn(result, "checkpointToken")) {
+        const { checkpointToken: _drop, ...rest } = result;
+        return rest;
+    }
+    return result;
+}
+export function evictIfConflict(runner, sessionId, result) {
+    if (sessionId && isSessionConflictResult(result)) {
+        runner.sessions.evict?.(sessionId);
+    }
+}
+export async function runInBackground(runner, spec, runStore, taskId, metrics, principal, verifyRounds, cascade, instrumentDegenerate, planCacheProbe, persistThinking = false, inflight, preemptable, steerable, modelUsage, elicitation, elicitOwner, captureTurnAnchor, fleetPublisher, captureUserMessageAnchor, question, workflowCompletionInbox, subagentSteer, completionDiagLog) {
+    const startedAt = Date.now();
+    metrics?.addGauge("runs_active", 1);
+    fleetPublisher?.onStart();
+    const cancelCtrl = new AbortController();
+    inflight?.set(taskId, cancelCtrl);
+    markChildrenStoppedByUserOnAbort(cancelCtrl.signal, taskId, principal);
+    const preemptEligible = verifyRounds === undefined && cascade === undefined;
+    const preemptCtrl = new AbortController();
+    if (preemptEligible)
+        preemptable?.set(taskId, preemptCtrl);
+    const cancelledResult = () => ({ taskId, sessionId: spec.sessionId, status: "failed", errorCode: "cancelled", errorMessage: "cancelled by user", stats: { turns: 0, tokens: 0 } });
+    const recordDone = (result, status) => {
+        metrics?.addGauge("runs_active", -1);
+        metrics?.inc("tasks_total", { status });
+        metrics?.observe("task_duration_seconds", (Date.now() - startedAt) / 1000);
+        if (result?.stats.tokens)
+            metrics?.inc("task_tokens_total", {}, result.stats.tokens);
+        if (result?.stats.cacheHitRate !== undefined)
+            metrics?.observe("task_cache_hit_rate", result.stats.cacheHitRate);
+        if (result)
+            instrumentDegenerate?.(result);
+        planCacheProbe?.record(principal, spec.objective, status === "completed");
+    };
+    const owner = principal ?? null;
+    const heartbeat = setInterval(() => {
+        void runStore.heartbeat(taskId, owner).catch(() => undefined);
+        if (!cancelCtrl.signal.aborted) {
+            void runStore.isCancelRequested(taskId, owner).then((c) => { if (c)
+                cancelCtrl.abort(); }).catch(() => undefined);
+        }
+        if (preemptEligible && !preemptCtrl.signal.aborted) {
+            void runStore.isPreemptRequested(taskId, owner).then((p) => { if (p)
+                preemptCtrl.abort(); }).catch(() => undefined);
+        }
+    }, HEARTBEAT_MS);
+    heartbeat.unref?.();
+    let seq = 0;
+    let text = "";
+    let reasoning = "";
+    const anchor = new TurnAnchorCapture(captureTurnAnchor, () => metrics?.inc("resume_anchor_capture_failed"), captureUserMessageAnchor);
+    let reached;
+    let steerableStreamRef;
+    let legLive = true;
+    const notifiedKeys = new Set();
+    const subagentHandleEvictions = [];
+    const parkNeedsReview = async (res) => {
+        await append("needs_review", { gate: res.checkpointGate ?? null });
+        await flushModelUsage();
+        reached = { kind: "needs_review" };
+        await runStore.setNeedsReview(taskId);
+        metrics?.addGauge("runs_active", -1);
+        metrics?.inc("tasks_total", { status: "needs_review" });
+    };
+    const append = (type, data) => runStore.appendEvent(taskId, ++seq, type, data);
+    const flush = async () => {
+        if (reasoning) {
+            await append("reasoning", { text: redactSecrets(reasoning) });
+            reasoning = "";
+        }
+        if (text) {
+            await append("text", { text, ...(anchor.firstTextEventId ? { eventId: anchor.firstTextEventId } : {}) });
+            text = "";
+        }
+    };
+    const flushModelUsage = () => appendModelUsageDelta(append, modelUsage, taskId);
+    const withModelUsage = (result) => attachModelUsage(result, { append, getEvents: (id, after) => runStore.getEvents(id, after), modelUsage, taskId });
+    modelUsage?.register(taskId);
+    const elicitEmit = (frame) => {
+        const { type, ...rest } = frame;
+        return append(type, rest);
+    };
+    const questionEmit = (frame) => {
+        const { type, ...rest } = frame;
+        return append(type, rest);
+    };
+    try {
+        await emitPendingWorkflowCompletions(workflowCompletionInbox, spec.sessionId, elicitOwner ?? owner, (frame) => {
+            const { type, ...rest } = frame;
+            return append(type, rest);
+        }, completionDiagLog ? { route: "bg-run-start", connection: "durable-append", log: completionDiagLog } : undefined);
+        const runBody = async () => {
+            if (verifyRounds !== undefined) {
+                const result = await runWithVerification(runner, { ...spec, taskId, signal: cancelCtrl.signal }, { maxRounds: verifyRounds });
+                await flush();
+                evictIfConflict(runner, spec.sessionId, result);
+                const safe = await withModelUsage(stripCheckpointToken(result));
+                await append("done", { result: safe });
+                reached = { kind: "done", result: safe };
+                await runStore.setTerminal(taskId, safe.status, safe, safe.errorMessage ?? null);
+                recordDone(safe, safe.status);
+                return;
+            }
+            if (cascade !== undefined) {
+                const result = await runCascade(runner, { ...spec, taskId, signal: cancelCtrl.signal }, cascade);
+                await flush();
+                evictIfConflict(runner, spec.sessionId, result);
+                const safe = await withModelUsage(stripCheckpointToken(result));
+                await append("done", { result: safe });
+                reached = { kind: "done", result: safe };
+                await runStore.setTerminal(taskId, safe.status, safe, safe.errorMessage ?? null);
+                recordDone(safe, safe.status);
+                return;
+            }
+            const fwdInternals = {
+                onForwardEvent: (e) => {
+                    fleetPublisher?.onForwardEvent(e);
+                    const t = e.type;
+                    if (t === "task_progress") {
+                        void append("task_progress", taskProgressEventData(e)).catch(() => undefined);
+                    }
+                    else if (t === "tool_start") {
+                        void append("tool_start", toolStartEventData(e)).catch(() => undefined);
+                    }
+                    else if (t === "tool_end") {
+                        void append("tool_end", toolEndEventData(e)).catch(() => undefined);
+                    }
+                },
+                onTaskNotification: (n) => {
+                    if (n.task_type === "workflow")
+                        return;
+                    const hadRow = fleetPublisher?.onChildTerminal(n.sessionId ?? n.task_id, n.status) ?? false;
+                    const parked = !legLive && Boolean(workflowCompletionInbox && spec.sessionId);
+                    completionDiagLog?.("task_notification_observed", { route: "bg-run-start", taskId: n.task_id, taskType: n.task_type, status: n.status, hadFleetRow: hadRow, legLive, parkedDurable: parked });
+                    if (parked) {
+                        void workflowCompletionInbox.enqueue(taskNotificationInboxEntry(spec.sessionId, elicitOwner ?? owner, n, Date.now(), taskId)).catch((err) => completionDiagLog?.("park_enqueue_failed", { route: "bg-run-start", taskId: n.task_id, err: err instanceof Error ? err.message : String(err) }));
+                    }
+                    else if (legLive) {
+                        const key = `${n.task_id}:${n.status}`;
+                        if (!notifiedKeys.has(key)) {
+                            notifiedKeys.add(key);
+                            void append("task_notification", taskNotificationEventData({ notification: n })).catch(() => undefined);
+                        }
+                    }
+                },
+                ...(subagentSteer
+                    ? {
+                        onSubagentSpawn: (handle) => {
+                            subagentHandleEvictions.push(subagentSteer.register(taskId, handle));
+                        },
+                    }
+                    : {}),
+            };
+            const stream = runner.runTaskStream({ ...spec, taskId, signal: cancelCtrl.signal, preemptSignal: preemptCtrl.signal }, undefined, fwdInternals);
+            steerableStreamRef = stream;
+            steerable?.set(taskId, stream);
+            for await (const ev of stream) {
+                fleetPublisher?.onEvent(ev);
+                switch (ev.type) {
+                    case "text_delta":
+                        text += ev.delta;
+                        anchor.onText(ev.eventId);
+                        break;
+                    case "reasoning_delta":
+                        if (persistThinking)
+                            reasoning += ev.delta;
+                        break;
+                    case "tool_start":
+                        anchor.onTool();
+                        await flush();
+                        await append("tool_start", toolStartEventData(ev));
+                        break;
+                    case "tool_end":
+                        await flush();
+                        await append("tool_end", toolEndEventData(ev));
+                        break;
+                    case "status": {
+                        const st = ev;
+                        metrics?.inc("brain_retry_total", { phase: String(st.phase) });
+                        await flush();
+                        await append("brain_status", brainStatusEventData(st));
+                        break;
+                    }
+                    case "compacted":
+                        await flush();
+                        await append("compacted", compactedEventData(ev));
+                        break;
+                    case "diagnostics":
+                        await flush();
+                        await append("diagnostics", diagnosticsEventData(ev));
+                        break;
+                    case "message_committed":
+                        await anchor.onMessageCommitted(ev.role, ev.entryId);
+                        break;
+                    case "task_progress":
+                        await append("task_progress", taskProgressEventData(ev));
+                        break;
+                    case "task_notification": {
+                        await flush();
+                        const tn = ev.notification;
+                        if (tn?.task_id)
+                            notifiedKeys.add(`${tn.task_id}:${tn.status}`);
+                        await append("task_notification", taskNotificationEventData(ev));
+                        break;
+                    }
+                    case "turn_end": {
+                        await flush();
+                        const usage = ev.usage;
+                        await append("turn_end", usage ? { usage } : {});
+                        await flushModelUsage();
+                        await anchor.onTurnEnd();
+                        break;
+                    }
+                    case "done":
+                        await flush();
+                        if (ev.result.status === "suspended") {
+                            await append("suspended", { gate: ev.result.checkpointGate ?? null });
+                            await flushModelUsage();
+                            reached = { kind: "suspended" };
+                            await runStore.setSuspended(taskId);
+                            metrics?.addGauge("runs_active", -1);
+                            metrics?.inc("tasks_total", { status: "suspended" });
+                            break;
+                        }
+                        if (ev.result.status === "needs_review") {
+                            await parkNeedsReview(ev.result);
+                            break;
+                        }
+                        evictIfConflict(runner, spec.sessionId, ev.result);
+                        {
+                            const safe = await withModelUsage(stripCheckpointToken(ev.result));
+                            await append("done", { result: safe });
+                            reached = { kind: "done", result: safe };
+                            await runStore.setTerminal(taskId, safe.status, safe, safe.errorMessage ?? null);
+                            recordDone(safe, safe.status);
+                        }
+                        break;
+                }
+            }
+            if (spec.suggestNextPrompts && reached?.kind === "done" && reached.result.status === "completed") {
+                const suggestions = await stream.suggestions().catch(() => []);
+                if (suggestions.length)
+                    await append("suggestions", { suggestions: suggestions.map((s) => redactSecrets(s)) });
+            }
+        };
+        await withPrincipal(principal, () => {
+            const withElicit = elicitation
+                ? () => elicitation.runWithContext({ taskId, owner: elicitOwner ?? owner, emit: elicitEmit, abortSignal: cancelCtrl.signal }, runBody)
+                : runBody;
+            return question
+                ? question.runWithContext({ taskId, owner: elicitOwner ?? owner, emit: questionEmit, abortSignal: cancelCtrl.signal }, withElicit)
+                : withElicit();
+        });
+        if (!reached && cancelCtrl.signal.aborted) {
+            await flush();
+            const c = cancelledResult();
+            await append("failed", { errorMessage: c.errorMessage ?? "cancelled by user", errorCode: "cancelled" });
+            reached = { kind: "done", result: c };
+            await runStore.setTerminal(taskId, "failed", c, c.errorMessage ?? null);
+            recordDone(c, "cancelled");
+        }
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        try {
+            await flush();
+            if (reached?.kind === "done") {
+                await runStore.setTerminal(taskId, reached.result.status, reached.result, reached.result.errorMessage ?? null);
+            }
+            else if (reached?.kind === "suspended") {
+                await runStore.setSuspended(taskId);
+            }
+            else if (reached?.kind === "needs_review") {
+                await runStore.setNeedsReview(taskId);
+            }
+            else if (cancelCtrl.signal.aborted) {
+                const c = cancelledResult();
+                await append("failed", { errorMessage: c.errorMessage ?? "cancelled by user", errorCode: "cancelled" });
+                await runStore.setTerminal(taskId, "failed", c, c.errorMessage ?? null);
+            }
+            else {
+                const safeMsg = redactSecrets(message);
+                await append("failed", { errorMessage: safeMsg });
+                await runStore.setTerminal(taskId, "failed", null, safeMsg);
+            }
+        }
+        catch {
+        }
+        if (reached?.kind === "done")
+            recordDone(reached.result, reached.result.errorCode === "cancelled" ? "cancelled" : reached.result.status);
+        else if (reached?.kind === "suspended") {
+            metrics?.addGauge("runs_active", -1);
+            metrics?.inc("tasks_total", { status: "suspended" });
+        }
+        else if (cancelCtrl.signal.aborted) {
+            recordDone(null, "cancelled");
+        }
+        else {
+            recordDone(null, "failed");
+        }
+    }
+    finally {
+        legLive = false;
+        if (fleetPublisher) {
+            if (reached?.kind === "done")
+                fleetPublisher.onTerminal(reached.result.errorCode === "cancelled" ? "cancelled" : reached.result.status);
+            else if (reached?.kind === "suspended")
+                fleetPublisher.onTerminal("suspended");
+            else if (reached?.kind === "needs_review")
+                fleetPublisher.onTerminal("needs_review");
+            else
+                fleetPublisher.onTerminal(cancelCtrl.signal.aborted ? "cancelled" : "failed");
+        }
+        if (inflight?.get(taskId) === cancelCtrl)
+            inflight.delete(taskId);
+        if (preemptable?.get(taskId) === preemptCtrl)
+            preemptable.delete(taskId);
+        if (steerableStreamRef !== undefined && steerable?.get(taskId) === steerableStreamRef)
+            steerable.delete(taskId);
+        for (const evict of subagentHandleEvictions)
+            evict();
+        modelUsage?.clear(taskId);
+        clearInterval(heartbeat);
+    }
+}
+export const HEARTBEAT_MS = 30_000;
+//# sourceMappingURL=runs.js.map

package/dist/runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runs.js","sourceRoot":"","sources":["../src/runs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,mBAAmB,EAA8G,MAAM,kBAAkB,CAAC;AAGpM,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAKrO,OAAO,EAAE,8BAA8B,EAAE,0BAA0B,EAAgC,MAAM,8CAA8C,CAAC;AAyBxJ,MAAM,UAAU,gCAAgC,CAAC,MAAmB,EAAE,MAAc,EAAE,SAAoC;IACxH,MAAM,CAAC,gBAAgB,CACrB,OAAO,EACP,GAAG,EAAE;QACH,IAAI,CAAC;YACH,mBAAmB,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACpI,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;IACH,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,uBAAuB,CAAC,MAAqE;IAC3G,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,MAAM,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC;IAC7D,OAAO,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAaD,MAAM,UAAU,kBAAkB,CAAC,MAA8C;IAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,MAAM,CAAC,SAAS,KAAK,0BAA0B;QAAE,OAAO,GAAG,CAAC;IAChE,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7E,OAAO,MAAM,CAAC,SAAS,KAAK,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAChE,CAAC;AAqBD,MAAM,OAAO,iBAAiB;IAKT;IACA;IAQA;IAZnB,gBAAgB,CAAqB;IAC7B,WAAW,GAAG,KAAK,CAAC;IAC5B,YACmB,OAAyD,EACzD,aAA0B,EAQ1B,WAA8D;QAT9D,YAAO,GAAP,OAAO,CAAkD;QACzD,kBAAa,GAAb,aAAa,CAAa;QAQ1B,gBAAW,GAAX,WAAW,CAAmD;IAC9E,CAAC;IAKJ,KAAK,CAAC,kBAAkB,CAAC,IAAwB,EAAE,OAA2B;QAC5E,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM,CAAC,OAA2B;QAChC,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAOxC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,gBAAgB,KAAK,OAAO,CAAC;IACpC,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/D,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;CACF;AAWD,MAAM,UAAU,oBAAoB,CAAI,MAAS;IAG/C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACxH,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAiC,CAAC;QAC9E,OAAO,IAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAGD,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,SAA6B,EAAE,MAAkB;IAC/F,IAAI,SAAS,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,QAA6C,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AA4BD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,IAAc,EACd,QAAkB,EAClB,MAAc,EACd,OAAiB,EACjB,SAAkB,EAClB,YAAqB,EACrB,OAAuB,EACvB,oBAAmD,EACnD,cAAuG,EACvG,eAAe,GAAG,KAAK,EACvB,QAAuC,EACvC,WAA0C,EAC1C,SAAmC,EACnC,UAA8B,EAC9B,WAAoC,EAIpC,WAA2B,EAG3B,iBAAsD,EAKtD,cAAkC,EAGlC,wBAA6D,EAG7D,QAA8B,EAK9B,uBAAiD,EAIjD,aAAoF,EAIpF,iBAAyE;IAEzE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACpC,cAAc,EAAE,OAAO,EAAE,CAAC;IAK1B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAElC,gCAAgC,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAKvE,MAAM,eAAe,GAAG,YAAY,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC;IAC5E,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,IAAI,eAAe;QAAE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,GAAe,EAAE,CACvC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAe,CAAC;IACrK,MAAM,UAAU,GAAG,CAAC,MAAyB,EAAE,MAAc,EAAQ,EAAE;QACrE,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACxC,OAAO,EAAE,OAAO,CAAC,uBAAuB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3E,IAAI,MAAM,EAAE,KAAK,CAAC,MAAM;YAAE,OAAO,EAAE,GAAG,CAAC,mBAAmB,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrF,IAAI,MAAM,EAAE,KAAK,CAAC,YAAY,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAEjH,IAAI,MAAM;YAAE,oBAAoB,EAAE,CAAC,MAAM,CAAC,CAAC;QAG3C,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC;IAC5E,CAAC,CAAC;IAKF,MAAM,KAAK,GAAG,SAAS,IAAI,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,KAAK,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAG9D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,KAAK,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpH,CAAC;QAID,IAAI,eAAe,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACnD,KAAK,QAAQ,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC;gBAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtH,CAAC;IACH,CAAC,EAAE,YAAY,CAAC,CAAC;IACjB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IACpB,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,SAAS,GAAG,EAAE,CAAC;IAKnB,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,8BAA8B,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAKtI,IAAI,OAA4G,CAAC;IAGjH,IAAI,kBAA0C,CAAC;IAG/C,IAAI,OAAO,GAAG,IAAI,CAAC;IAKnB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAGvC,MAAM,uBAAuB,GAAsB,EAAE,CAAC;IAOtD,MAAM,eAAe,GAAG,KAAK,EAAE,GAAe,EAAiB,EAAE;QAC/D,MAAM,MAAM,CAAC,cAAc,EAAE,EAAE,IAAI,EAAG,GAAoC,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC,CAAC;QACrG,MAAM,eAAe,EAAE,CAAC;QACxB,OAAO,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACnC,MAAM,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,IAAa,EAAiB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/G,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;QAGtC,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC9D,SAAS,GAAG,EAAE,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YAET,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACzG,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAKF,MAAM,eAAe,GAAG,GAAkB,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAG/F,MAAM,cAAc,GAAG,CAAuB,MAAS,EAAc,EAAE,CACrE,gBAAgB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IACpH,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAO7B,MAAM,UAAU,GAAG,CAAC,KAAuB,EAAiB,EAAE;QAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAChC,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;IAIF,MAAM,YAAY,GAAG,CAAC,KAAoB,EAAiB,EAAE;QAC3D,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAChC,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,IAAI,CAAC;QAMH,MAAM,8BAA8B,CAClC,uBAAuB,EACvB,IAAI,CAAC,SAAS,EACd,WAAW,IAAI,KAAK,EACpB,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,KAAmD,CAAC;YAC9E,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC,EAED,iBAAiB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,CAChH,CAAC;QAGF,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;YAC1C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAI/B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC9H,MAAM,KAAK,EAAE,CAAC;gBACd,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAGhD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChE,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBACzC,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;gBACjF,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAE1B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;gBACjG,MAAM,KAAK,EAAE,CAAC;gBACd,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAChD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChE,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBACzC,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;gBACjF,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YAYD,MAAM,YAAY,GAAG;gBACnB,cAAc,EAAE,CAAC,CAAqD,EAAE,EAAE;oBACxE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;oBAClC,MAAM,CAAC,GAAI,CAAuB,CAAC,IAAI,CAAC;oBACxC,IAAI,CAAC,KAAK,eAAe,EAAE,CAAC;wBAC1B,KAAK,MAAM,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAA2D,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC1I,CAAC;yBAAM,IAAI,CAAC,KAAK,YAAY,EAAE,CAAC;wBAO9B,KAAK,MAAM,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAwD,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACjI,CAAC;yBAAM,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;wBAC5B,KAAK,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAsD,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC3H,CAAC;gBACH,CAAC;gBASD,kBAAkB,EAAE,CAAC,CAAyJ,EAAE,EAAE;oBAChL,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU;wBAAE,OAAO;oBAIvC,MAAM,MAAM,GAAG,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC;oBAC5F,MAAM,MAAM,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,uBAAuB,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;oBAG9E,iBAAiB,EAAE,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC9L,IAAI,MAAM,EAAE,CAAC;wBAGX,KAAK,uBAAwB,CAAC,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAU,EAAE,WAAW,IAAI,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CACrJ,iBAAiB,EAAE,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAChJ,CAAC;oBACJ,CAAC;yBAAM,IAAI,OAAO,EAAE,CAAC;wBAMnB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;wBACvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC3B,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;4BACtB,KAAK,MAAM,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;wBAC1G,CAAC;oBACH,CAAC;gBACH,CAAC;gBAKD,GAAG,CAAC,aAAa;oBACf,CAAC,CAAC;wBACE,eAAe,EAAE,CAAC,MAA2B,EAAE,EAAE;4BAC/C,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;wBACvE,CAAC;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAChJ,kBAAkB,GAAG,MAAM,CAAC;YAC5B,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/B,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;gBAI9B,cAAc,EAAE,OAAO,CAAC,EAAiD,CAAC,CAAC;gBAC3E,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;oBAChB,KAAK,YAAY;wBACf,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC;wBACjB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;wBAC1B,MAAM;oBACR,KAAK,iBAAiB;wBAGpB,IAAI,eAAe;4BAAE,SAAS,IAAI,EAAE,CAAC,KAAK,CAAC;wBAC3C,MAAM;oBACR,KAAK,YAAY;wBACf,MAAM,CAAC,MAAM,EAAE,CAAC;wBAChB,MAAM,KAAK,EAAE,CAAC;wBAEd,MAAM,MAAM,CAAC,YAAY,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;wBACnD,MAAM;oBACR,KAAK,UAAU;wBACb,MAAM,KAAK,EAAE,CAAC;wBAEd,MAAM,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;wBAC/C,MAAM;oBACR,KAAK,QAAQ,CAAC,CAAC,CAAC;wBAOd,MAAM,EAAE,GAAG,EAAqH,CAAC;wBACjI,OAAO,EAAE,GAAG,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;wBAC/D,MAAM,KAAK,EAAE,CAAC;wBACd,MAAM,MAAM,CAAC,cAAc,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;wBACvD,MAAM;oBACR,CAAC;oBACD,KAAK,WAAW;wBACd,MAAM,KAAK,EAAE,CAAC;wBAId,MAAM,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAA8C,CAAC,CAAC,CAAC;wBAC9F,MAAM;oBACR,KAAK,aAAa;wBAIhB,MAAM,KAAK,EAAE,CAAC;wBACd,MAAM,MAAM,CAAC,aAAa,EAAE,oBAAoB,CAAC,EAA2D,CAAC,CAAC,CAAC;wBAC/G,MAAM;oBACR,KAAK,mBAAmB;wBAKtB,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;wBACrD,MAAM;oBACR,KAAK,eAAe;wBAKlB,MAAM,MAAM,CAAC,eAAe,EAAE,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC;wBACzD,MAAM;oBACR,KAAK,mBAAmB,CAAC,CAAC,CAAC;wBAKzB,MAAM,KAAK,EAAE,CAAC;wBACd,MAAM,EAAE,GAAI,EAA0E,CAAC,YAAY,CAAC;wBACpG,IAAI,EAAE,EAAE,OAAO;4BAAE,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;wBAChE,MAAM,MAAM,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,EAAgE,CAAC,CAAC,CAAC;wBAC/H,MAAM;oBACR,CAAC;oBACD,KAAK,UAAU,CAAC,CAAC,CAAC;wBAChB,MAAM,KAAK,EAAE,CAAC;wBAEd,MAAM,KAAK,GAAI,EAA0B,CAAC,KAAK,CAAC;wBAChD,MAAM,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACjD,MAAM,eAAe,EAAE,CAAC;wBAIxB,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;wBACzB,MAAM;oBACR,CAAC;oBACD,KAAK,MAAM;wBACT,MAAM,KAAK,EAAE,CAAC;wBACd,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;4BAKrC,MAAM,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAG,EAAE,CAAC,MAAuC,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC,CAAC;4BACxG,MAAM,eAAe,EAAE,CAAC;4BACxB,OAAO,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;4BAChC,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;4BACpC,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;4BACrC,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;4BACrD,MAAM;wBACR,CAAC;wBACD,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;4BAGxC,MAAM,eAAe,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;4BACjC,MAAM;wBACR,CAAC;wBAGD,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;wBAGnD,CAAC;4BACC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,oBAAoB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;4BACnE,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;4BACvC,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;4BACzC,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;4BACjF,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;wBAChC,CAAC;wBACD,MAAM;gBACV,CAAC;YACH,CAAC;YAOD,IAAI,IAAI,CAAC,kBAAkB,IAAI,OAAO,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACjG,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;gBAC3E,IAAI,WAAW,CAAC,MAAM;oBAAE,MAAM,MAAM,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjH,CAAC;QACD,CAAC,CAAC;QAIF,MAAM,aAAa,CAAC,SAAS,EAAE,GAAG,EAAE;YAClC,MAAM,UAAU,GAAG,WAAW;gBAC5B,CAAC,CAAC,GAAkB,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,IAAI,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC;gBACrJ,CAAC,CAAC,OAAO,CAAC;YACZ,OAAO,QAAQ;gBACb,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,IAAI,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC;gBAClI,CAAC,CAAC,UAAU,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1C,MAAM,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,mBAAmB,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;YACxG,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YACtC,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;YACxE,UAAU,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,KAAK,EAAE,CAAC;YACd,IAAI,OAAO,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;gBAG7B,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;YACjH,CAAC;iBAAM,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzC,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;iBAAM,IAAI,OAAO,EAAE,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC5C,MAAM,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;iBAAM,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAGrC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;gBAC5B,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,mBAAmB,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;gBACxG,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBAIN,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClD,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;QAKD,IAAI,OAAO,EAAE,IAAI,KAAK,MAAM;YAAE,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;aACpI,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;YACvC,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;YACrC,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,OAAO,GAAG,KAAK,CAAC;QAMhB,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,OAAO,EAAE,IAAI,KAAK,MAAM;gBAAE,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;iBACnI,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW;gBAAE,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;iBAC1E,IAAI,OAAO,EAAE,IAAI,KAAK,cAAc;gBAAE,cAAc,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;;gBAChF,cAAc,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrF,CAAC;QAKD,IAAI,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,UAAU;YAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,WAAW;YAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAIzE,IAAI,kBAAkB,KAAK,SAAS,IAAI,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,kBAAkB;YAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChH,KAAK,MAAM,KAAK,IAAI,uBAAuB;YAAE,KAAK,EAAE,CAAC;QACrD,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAID,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC"}

package/dist/runtime-caps-resolver.d.ts

@@ -0,0 +1,32 @@
+import type { RuntimeCaps } from "@sema-agent/core";
+import type { EntitlementRuntimeCaps } from "@sema-agent/registry-core";
+import { fetchPrincipalCaps, type ExecutionRuling } from "./sema-registry.js";
+import type { ScenarioRuling } from "./capabilities/scenarios.js";
+export interface RuntimeCapsResolverOpts {
+    baseUrl: string;
+    token: string;
+    worker?: string;
+    ttlMs?: number;
+    denyTtlMs?: number;
+    fetchImpl?: typeof fetch;
+    fetchCaps?: typeof fetchPrincipalCaps;
+    now?: () => number;
+    onError?: (err: Error, principal: string) => void;
+}
+export declare function toCoreRuntimeCaps(ent: EntitlementRuntimeCaps | null | undefined): RuntimeCaps | undefined;
+export declare function scopedTokenNeedsWorker(token: string, worker: string | undefined): boolean;
+export interface PrincipalCapsClient {
+    resolveRuntimeCaps: (principal: string | undefined) => Promise<RuntimeCaps | undefined>;
+    scenarioRuling: (principal: string | undefined) => Promise<ScenarioRuling | undefined>;
+    executionRuling: (principal: string | undefined) => Promise<ExecutionRuling | undefined>;
+}
+export declare function gateExecutionLane(ruling: ExecutionRuling | undefined, ownLane: string): void;
+export declare function createPrincipalCapsClient(opts: RuntimeCapsResolverOpts): PrincipalCapsClient;
+export declare function createRuntimeCapsResolver(opts: RuntimeCapsResolverOpts): (principal: string | undefined) => Promise<RuntimeCaps | undefined>;
+export type RuntimeCapsResolverFn = (principal: string | undefined) => RuntimeCaps | undefined | Promise<RuntimeCaps | undefined>;
+export declare function applyObserverEnvOptIn(centerResolver: RuntimeCapsResolverFn | undefined, opts: {
+    experimentalObserverAgents: boolean;
+    requirePrincipal: boolean;
+    warn?: (msg: string, fields?: Record<string, unknown>) => void;
+}): RuntimeCapsResolverFn | undefined;
+//# sourceMappingURL=runtime-caps-resolver.d.ts.map

package/dist/runtime-caps-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-caps-resolver.d.ts","sourceRoot":"","sources":["../src/runtime-caps-resolver.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAMlE,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IAId,MAAM,CAAC,EAAE,MAAM,CAAC;IAGhB,KAAK,CAAC,EAAE,MAAM,CAAC;IAGf,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAEnB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CACnD;AAuCD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAezG;AAOD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEzF;AAGD,MAAM,WAAW,mBAAmB;IAElC,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IAIxF,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAIvF,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;CAC1F;AAWD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAQ5F;AASD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,uBAAuB,GAAG,mBAAmB,CA8F5F;AAGD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,uBAAuB,GAC5B,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAErE;AAGD,MAAM,MAAM,qBAAqB,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,KAAK,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;AAoBlI,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,qBAAqB,GAAG,SAAS,EACjD,IAAI,EAAE;IAAE,0BAA0B,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;CAAE,GACvI,qBAAqB,GAAG,SAAS,CAanC"}

package/dist/runtime-caps-resolver.js

@@ -0,0 +1,134 @@
+import { fetchPrincipalCaps } from "./sema-registry.js";
+import { HttpError } from "./security.js";
+import { createLogger } from "./observability/logger.js";
+const defaultLogger = createLogger();
+export function toCoreRuntimeCaps(ent) {
+    if (!ent)
+        return undefined;
+    const autoMode = ent.autoMode;
+    const badCap = (v) => v !== undefined && typeof v !== "boolean";
+    if (badCap(ent.allowWorkflows) || badCap(ent.forceDurableGate) || badCap(ent.allowFork) || badCap(ent.allowObservers) || badCap(autoMode)) {
+        throw new Error("runtimeCaps from center carries a non-boolean cap (contract breach — fail closed)");
+    }
+    const caps = {};
+    if (typeof ent.allowWorkflows === "boolean")
+        caps.allowWorkflows = ent.allowWorkflows;
+    if (typeof ent.forceDurableGate === "boolean")
+        caps.forceDurableGate = ent.forceDurableGate;
+    if (typeof ent.allowFork === "boolean")
+        caps.allowFork = ent.allowFork;
+    if (typeof ent.allowObservers === "boolean")
+        caps.allowObservers = ent.allowObservers;
+    if (typeof autoMode === "boolean")
+        caps.autoMode = autoMode;
+    return Object.keys(caps).length ? caps : undefined;
+}
+export function scopedTokenNeedsWorker(token, worker) {
+    return token.startsWith("wpt_") && !worker;
+}
+export function gateExecutionLane(ruling, ownLane) {
+    if (!ruling?.required)
+        return;
+    if (!ruling.allowedLanes.includes(ownLane)) {
+        throw new HttpError(403, `this worker's execution lane "${ownLane}" is not permitted for this principal (execution policy)`, {
+            code: "execution_lane_not_allowed",
+            extra: { allowedLanes: ruling.allowedLanes, lane: ownLane },
+        });
+    }
+}
+export function createPrincipalCapsClient(opts) {
+    const ttlMs = opts.ttlMs ?? 60_000;
+    const denyTtlMs = opts.denyTtlMs ?? Math.min(ttlMs, 10_000);
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    const fetchCaps = opts.fetchCaps ?? fetchPrincipalCaps;
+    const now = opts.now ?? (() => Date.now());
+    const onError = opts.onError ?? ((err, principal) => defaultLogger.warn("runtime_caps_resolve_failed", { principal, err: String(err) }));
+    const cache = new Map();
+    const inflight = new Map();
+    const MAX_CACHE = 10_000;
+    const putCache = (key, entry) => {
+        if (cache.size >= MAX_CACHE) {
+            const t = now();
+            for (const [k, v] of cache)
+                if (v.expiresAt <= t)
+                    cache.delete(k);
+        }
+        cache.set(key, entry);
+    };
+    async function load(principal) {
+        const cached = cache.get(principal);
+        if (cached && cached.expiresAt > now())
+            return cached;
+        const dup = inflight.get(principal);
+        if (dup)
+            return dup;
+        const p = (async () => {
+            try {
+                const r = await fetchCaps(opts.baseUrl, opts.token, principal, cached?.etag, fetchImpl, opts.worker);
+                if (r === null) {
+                    const entry = {
+                        caps: cached?.caps,
+                        ...(cached?.scenario ? { scenario: cached.scenario } : {}),
+                        ...(cached?.execution ? { execution: cached.execution } : {}),
+                        ...(cached?.etag ? { etag: cached.etag } : {}),
+                        expiresAt: now() + ttlMs,
+                    };
+                    putCache(principal, entry);
+                    return entry;
+                }
+                if (r.executionDrift) {
+                    try {
+                        onError(new Error(`execution ruling wire drift: ${r.executionDrift}`), principal);
+                    }
+                    catch { }
+                }
+                const entry = {
+                    caps: toCoreRuntimeCaps(r.runtimeCaps),
+                    ...(r.scenario ? { scenario: r.scenario } : {}),
+                    ...(r.execution ? { execution: r.execution } : {}),
+                    ...(r.etag ? { etag: r.etag } : {}),
+                    expiresAt: now() + ttlMs,
+                };
+                putCache(principal, entry);
+                return entry;
+            }
+            catch (err) {
+                const e = err instanceof Error ? err : new Error(String(err));
+                const entry = { caps: { allowWorkflows: false, allowFork: false }, expiresAt: now() + denyTtlMs };
+                putCache(principal, entry);
+                try {
+                    onError(e, principal);
+                }
+                catch { }
+                return entry;
+            }
+            finally {
+                inflight.delete(principal);
+            }
+        })();
+        inflight.set(principal, p);
+        return p;
+    }
+    return {
+        resolveRuntimeCaps: async (principal) => (principal ? (await load(principal)).caps : undefined),
+        scenarioRuling: async (principal) => (principal ? (await load(principal)).scenario : undefined),
+        executionRuling: async (principal) => (principal ? (await load(principal)).execution : undefined),
+    };
+}
+export function createRuntimeCapsResolver(opts) {
+    return createPrincipalCapsClient(opts).resolveRuntimeCaps;
+}
+export function applyObserverEnvOptIn(centerResolver, opts) {
+    if (!opts.experimentalObserverAgents)
+        return centerResolver;
+    if (opts.requirePrincipal) {
+        opts.warn?.("observer_env_opt_in_ignored", {
+            reason: "EXPERIMENTAL_OBSERVER_AGENTS=true is single-user only; a multi-tenant deployment (REQUIRE_PRINCIPAL=true) honors ONLY center caps allowObservers — env ignored, behavior unchanged",
+        });
+        return centerResolver;
+    }
+    if (!centerResolver)
+        return () => ({ allowObservers: true });
+    return async (principal) => ({ allowObservers: true, ...(await centerResolver(principal)) });
+}
+//# sourceMappingURL=runtime-caps-resolver.js.map

package/dist/runtime-caps-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-caps-resolver.js","sourceRoot":"","sources":["../src/runtime-caps-resolver.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,kBAAkB,EAAwB,MAAM,oBAAoB,CAAC;AAE9E,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,MAAM,aAAa,GAAG,YAAY,EAAE,CAAC;AA4DrC,MAAM,UAAU,iBAAiB,CAAC,GAA8C;IAC9E,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,MAAM,QAAQ,GAAI,GAA8B,CAAC,QAAQ,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,SAAS,CAAC;IAClF,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1I,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;IACtF,IAAI,OAAO,GAAG,CAAC,gBAAgB,KAAK,SAAS;QAAE,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;IAC5F,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACvE,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;IACtF,IAAI,OAAO,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAOD,MAAM,UAAU,sBAAsB,CAAC,KAAa,EAAE,MAA0B;IAC9E,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;AAC7C,CAAC;AAyBD,MAAM,UAAU,iBAAiB,CAAC,MAAmC,EAAE,OAAe;IACpF,IAAI,CAAC,MAAM,EAAE,QAAQ;QAAE,OAAO;IAC9B,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iCAAiC,OAAO,0DAA0D,EAAE;YAC3H,IAAI,EAAE,4BAA4B;YAClC,KAAK,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;SAC5D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AASD,MAAM,UAAU,yBAAyB,CAAC,IAA6B;IACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,GAAU,EAAE,SAAiB,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1I,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IAKxD,MAAM,SAAS,GAAG,MAAM,CAAC;IACzB,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,KAAiB,EAAQ,EAAE;QACxD,IAAI,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;YAChB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK;gBAAE,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC;oBAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC;IAGF,KAAK,UAAU,IAAI,CAAC,SAAiB;QACnC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE;YAAE,OAAO,MAAM,CAAC;QAGtD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QAEpB,MAAM,CAAC,GAAG,CAAC,KAAK,IAAyB,EAAE;YACzC,IAAI,CAAC;gBAKH,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBAGf,MAAM,KAAK,GAAe;wBACxB,IAAI,EAAE,MAAM,EAAE,IAAI;wBAClB,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1D,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7D,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9C,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK;qBACzB,CAAC;oBACF,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;oBAC3B,OAAO,KAAK,CAAC;gBACf,CAAC;gBAID,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;oBACrB,IAAI,CAAC;wBAAC,OAAO,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAA+C,CAAC;gBACpJ,CAAC;gBACD,MAAM,KAAK,GAAe;oBACxB,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC;oBACtC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK;iBACzB,CAAC;gBACF,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC3B,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAO9D,MAAM,KAAK,GAAe,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;gBAC9G,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC3B,IAAI,CAAC;oBAAC,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAA2D,CAAC;gBAClG,OAAO,KAAK,CAAC;YACf,CAAC;oBAAS,CAAC;gBACT,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO;QAGL,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;KAClG,CAAC;AACJ,CAAC;AAGD,MAAM,UAAU,yBAAyB,CACvC,IAA6B;IAE7B,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,kBAAkB,CAAC;AAC5D,CAAC;AAuBD,MAAM,UAAU,qBAAqB,CACnC,cAAiD,EACjD,IAAwI;IAExI,IAAI,CAAC,IAAI,CAAC,0BAA0B;QAAE,OAAO,cAAc,CAAC;IAC5D,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE1B,IAAI,CAAC,IAAI,EAAE,CAAC,6BAA6B,EAAE;YACzC,MAAM,EACJ,oLAAoL;SACvL,CAAC,CAAC;QACH,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,cAAc;QAAE,OAAO,GAAG,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7D,OAAO,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC"}

package/dist/runtime-governance.d.ts

@@ -0,0 +1,18 @@
+import { type TaskSpec, type ToolPolicy } from "@sema-agent/core";
+export type CommandRule = {
+    command: string;
+    decision: "allow" | "ask" | "deny";
+};
+export declare function isDelegationToolName(name: string): boolean;
+export declare function stripDelegationTools<T extends {
+    name: string;
+}>(tools: readonly T[]): T[];
+export type Autonomy = "read-only" | "ask" | "plan" | "auto";
+export declare function validateCommandRules(rules: CommandRule[]): string[];
+export declare function compileCommandPolicy(rules: CommandRule[] | undefined): ToolPolicy | undefined;
+export declare function autonomyOverrides(autonomy: Autonomy | undefined): Partial<TaskSpec>;
+export declare function applyRuntimeGovernance(base: TaskSpec, governance: {
+    autonomy?: Autonomy;
+    commandPolicy?: CommandRule[];
+}): TaskSpec;
+//# sourceMappingURL=runtime-governance.d.ts.map

package/dist/runtime-governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-governance.d.ts","sourceRoot":"","sources":["../src/runtime-governance.ts"],"names":[],"mappings":"AAyBA,OAAO,EAOL,KAAK,QAAQ,EACb,KAAK,UAAU,EAGhB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,MAAM,WAAW,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;CAAE,CAAC;AASlF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG1D;AAOD,wBAAgB,oBAAoB,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAGzF;AAGD,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AA2D7D,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,CAoBnE;AAuBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CA4B7F;AAWD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAWnF;AAUD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,QAAQ,EACd,UAAU,EAAE;IAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAAC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAA;CAAE,GACjE,QAAQ,CAQV"}