@sema-ai/core 1.275.1

package/dist/core/checkpoint-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-store.d.ts","sourceRoot":"","sources":["../../src/core/checkpoint-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAE/E,uGAAuG;AACvG,wBAAgB,mBAAmB,IAAI,eAAe,CAErD;AAED;;;;GAIG;AACH;;;;;oGAKoG;AACpG,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;AAE9E;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,yGAAyG;IACzG,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,yGAAyG;IACzG,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B;4GACwG;IACxG,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B;;;mFAG+E;IAC/E,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACpE,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;iHAI6G;IAC7G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;uCAEmC;IACnC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAQnH;AAmBD;;qHAEqH;AACrH,eAAO,MAAM,4BAA4B,MAAM,CAAC;AA8ChD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,6GAA6G;IAC7G,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;qEACiE;IACjE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,cAAc,CAgFjB;AAED,MAAM,MAAM,cAAc;AACxB;;uEAEuE;AACrE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,cAAc,CAAA;CAAE;AACtF;;;;;;;;;+FAS+F;GAC7F;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IAAC,cAAc,CAAC,EAAE,cAAc,CAAA;CAAE;AAC1H;;;0DAG0D;GACxD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE;AACzD;;;;;;;;;;6EAU6E;GAC3E;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC1C;;;;;;;;;;;;;;;;;;kGAkBkG;GAChG;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACzC,yGAAyG;GACvG;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GACrB;IACE,IAAI,EAAE,YAAY,CAAC;IACnB;;;;;;;;;;;OAWG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;;OAaG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,4FAA4F;IAC5F,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACH;;2FAE2F;GACzF;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,UAAU,CAAA;CAAE;AAClD;;;;;;gHAMgH;GAC9G;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,SAAS,GAAG,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AAC7E;;;;;;;;;2GAS2G;GACzG;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACtG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC;AAE9C;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,aAAa,GACrB;IACE,IAAI,EAAE,eAAe,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,IAAI,EAAE,OAAO,CAAC;IACd;;;;;;;OAOG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,+FAA+F;IAC/F,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AACH;gGACgG;GAC9F;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE;AACzD;;;;;6EAK6E;GAC3E;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,kGAAkG;IAClG,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,qGAAqG;IACrG,SAAS,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/C,wGAAwG;IACxG,WAAW,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IACrG,gGAAgG;IAChG,kBAAkB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACzC;8GAC0G;IAC1G,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3C;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,YAAY,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAClD;;;;;;;;;;;;;;OAcG;IACH,sBAAsB,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACnG;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,yBAAyB,GAAG;KAAG,CAAC,IAAI,MAAM,QAAQ,CAAC,eAAe,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC;CAAE,CAAC;AAEvG;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;uEAEuE;AACvE,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;+CAG+C;AAC/C,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAElD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,MAAM,CAE3E;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,4GAA4G;IAC5G,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6FAA6F;IAC7F,aAAa,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;sDAKsD;AACtD,wBAAgB,WAAW,CACzB,KAAK,EAAE,cAAc,GAAG,SAAS,EACjC,KAAK,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAC9D,KAAK,CAAC,EAAE;IAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,EACnE,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,cAAc,CAchB;AAED;;;;;0FAK0F;AAC1F,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAG9F;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,WAAW,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B;2GACuG;IACvG,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,kBAAkB,CAAC;AAE7D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,kBAAkB;IACjC,qGAAqG;IACrG,GAAG,EAAE,MAAM,CAAC;CACb;AAED;gFACgF;AAChF,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,eAAe,CAAC;IACvB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,cAAc,CAAC;IACrB,aAAa,EAAE,aAAa,CAAC;IAC7B,KAAK,EAAE,eAAe,CAAC;IACvB;;;;;;8EAM0E;IAC1E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IACxH;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;;;;;;;OAaG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,KAAK,EAAE,eAAe,CAAC;IACvB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,gHAAgH;IAChH,KAAK,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACjC;;;;6EAIyE;IACzE,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B;;gHAE4G;IAC5G,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0GAA0G;IAC1G,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;oGAEgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;wGACoG;IACpG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;0GAEsG;IACtG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;+DAC2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;+GAK2G;IAC3G,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B;;;wBAGoB;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,UAAU,GAAG,iBAAiB,CAgDrE;AAED,2FAA2F;AAC3F,qBAAa,eAAgB,SAAQ,KAAK;IAEtC,QAAQ,CAAC,IAAI,EACT,2BAA2B,GAC3B,6BAA6B,GAC7B,sBAAsB;IACxB;;+CAE2C;OACzC,0BAA0B;IAC5B;uGACmG;OACjG,4BAA4B;IAC9B;;;;yDAIqD;OACnD,gCAAgC;IAClC;;;;;4FAKwF;OACtF,0BAA0B;IAC5B;;;;;iDAK6C;OAC3C,kCAAkC;IACpC;;;oGAGgG;OAC9F,0BAA0B;gBAnCrB,IAAI,EACT,2BAA2B,GAC3B,6BAA6B,GAC7B,sBAAsB;IACxB;;+CAE2C;OACzC,0BAA0B;IAC5B;uGACmG;OACjG,4BAA4B;IAC9B;;;;yDAIqD;OACnD,gCAAgC;IAClC;;;;;4FAKwF;OACtF,0BAA0B;IAC5B;;;;;iDAK6C;OAC3C,kCAAkC;IACpC;;;oGAGgG;OAC9F,0BAA0B,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,eAAe;IAC9B;uEACmE;IACnE,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACxD;;;;;;;;;;;;;;OAcG;IACH,OAAO,CACL,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,EACtB,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF;;;;;;;;;;;;;;;;;;OAkBG;IACH,eAAe,CACb,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GACxC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;CAC3D;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,aAAa,GAAG,eAAe,GAAG,SAAS,CAOrF;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB,CAyBA;AAED,uGAAuG;AACvG,MAAM,MAAM,mBAAmB;AAC7B;uGACuG;AACrG,sBAAsB;AACxB;mCACmC;GACjC,uBAAuB,CAAC;AAE5B;;;;;GAKG;AACH,qBAAa,uBAAwB,YAAW,eAAe;IAC7D,OAAO,CAAC,GAAG,CAAiC;IAC5C,OAAO,CAAC,KAAK,CAAoC;IAE3C,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1D,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAKvD,OAAO,CACX,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,EACtB,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC;IAoCb,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IAcrF,eAAe,CACnB,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GACxC,OAAO,CAAC,OAAO,CAAC;IAcb,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAW/D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWpD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAW9D,mGAAmG;IACnG,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,GAAG,IAAI;IAIvD,4DAA4D;IAC5D,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/core/checkpoint-store.js

@@ -0,0 +1,514 @@
+import { randomBytes } from "node:crypto";
+import { inlineUntrusted, sanitizeUntrustedText } from "./untrusted-text.js";
+import { ASK_USER_QUESTION_TOOL_NAME } from "./ask-question.js";
+/** Mint a CSPRNG 128-bit checkpoint token (token-as-auth, §6/Q5): unguessable, never logged/in-URL. */
+export function mintCheckpointToken() {
+    return randomBytes(16).toString("hex");
+}
+/**
+ * design/80 §D-E: the DETERMINISTIC severity tier (1..5) for an escalation checkpoint, a PURE function of the
+ * tripped {@link RiskDescriptor.axes} (NO LLM, NO clock/random) so the inbox's sort order is stable and
+ * unit-testable in isolation. The ORDERING is the contract; the absolute numbers map to ToolEmu's 5 tiers:
+ *  - irreversible AND egress → **5** (the most severe — an external, irreversible write)
+ *  - irreversible only       → **4**
+ *  - egress only             → **3**
+ *  - shell-gated tighten     → **3** (a coarse shellGate ask with no explicit egress/irreversible mark — the
+ *                                     command MAY be benign, so it is not auto-graded as high as a marked tool)
+ *  - plain `human` ask       → **2** (no safety axis tripped — a budgetable approval)
+ *  - (1 reserved — least-severe / informational; not expected from these gates.)
+ * `egress` dominates the shell coarse-grade (an explicitly egress-marked shell tighten is still ≥3). A future
+ * arm may refine this — but only with a stated reason, and the ORDERING must stay monotone in risk.
+ */
+export function riskSeverity(axes) {
+    const egress = axes.egress === true;
+    const irreversible = axes.irreversible === true;
+    if (irreversible && egress)
+        return 5;
+    if (irreversible)
+        return 4;
+    if (egress)
+        return 3;
+    if (axes.shell === true)
+        return 3;
+    return 2;
+}
+/** design/80 §D-E: redaction caps. A shell command preview gets more room (200 cp) than an fs path digest
+ *  (each value 120 cp); at most {@link MAX_TOUCHED_PATHS} paths are listed so a many-arg call can't bloat the
+ *  persisted row / inbox render. All caps applied AFTER {@link inlineUntrusted} (which folds separators +
+ *  defuses break-out tags) — the cap is the bloat ceiling, the neutralizer is the injection ceiling. */
+const SUMMARY_CMD_MAX = 200;
+const SUMMARY_VALUE_MAX = 120;
+const SUMMARY_TOTAL_MAX = 200;
+const PATH_MAX = 200;
+const MAX_TOUCHED_PATHS = 8;
+/** Cap the number of arg keys digested BEFORE reading their values, so a 10k-key object can't drive 10k
+ *  neutralizer calls (codex review: bound the work, not just the joined output). */
+const MAX_DIGEST_KEYS = 16;
+/** Bound the digest's SORT input: only the first this-many keys (enumeration order) are sorted+sliced, so a
+ *  pathological key count can't drive an unbounded sort (codex review Item 1.3) — WITHOUT dropping a normal
+ *  tool's whole summary (codex review Item 4). A real tool call has far fewer args. */
+const MAX_DIGEST_SCAN_KEYS = 256;
+/** design S1e (service [204]): the char cap for the {@link CheckpointSummary.toolInput} BOUNDED raw preview of a
+ *  `tool_approval` pendingAction's `args` (`JSON.stringify`-ed). Caps the `listByScope` payload size; over-cap
+ *  is truncated with a trailing `…`. Bounded raw (NOT neutralized) — redaction is the consumer's job (echo-only). */
+export const MAX_TOOL_INPUT_PREVIEW_CHARS = 512;
+/** True ONLY for a PLAIN data record (not null / array / class-instance / proxy-with-odd-prototype) — the only
+ *  shape we safely digest. Adversarial args (a proxy, a getter that throws) must never crash the mint, so this +
+ *  {@link safeDataValue}/{@link safeKeys} make {@link buildRiskDescriptor} fully TOTAL (codex review Item 1/2). */
+function isPlainRecord(x) {
+    try {
+        if (x === null || typeof x !== "object" || Array.isArray(x))
+            return false; // Array.isArray INSIDE try — a revoked proxy throws here
+        const p = Object.getPrototypeOf(x);
+        return p === Object.prototype || p === null;
+    }
+    catch {
+        return false; // any trap (Array.isArray / getPrototypeOf) throwing ⇒ not safely digestible
+    }
+}
+/** Read `obj[key]` as a DATA property only — NEVER invokes a getter/accessor (so a throwing getter can't escape
+ *  AND a non-deterministic getter can't vary the digest); a trapped descriptor read ⇒ undefined (codex Item 1/2). */
+function safeDataValue(obj, key) {
+    try {
+        const d = Object.getOwnPropertyDescriptor(obj, key);
+        return d && "value" in d ? d.value : undefined; // an accessor (get/set) descriptor ⇒ skipped
+    }
+    catch {
+        return undefined;
+    }
+}
+/** `Object.keys(obj)` swallowing a throwing ownKeys trap (⇒ []). */
+function safeKeys(obj) {
+    try {
+        return Object.keys(obj);
+    }
+    catch {
+        return [];
+    }
+}
+/** Read a string `file_path` (CC 2.1.187) or legacy `path` arg from an fs-tool's args object (Read/Edit/Write) as a
+ *  DATA property, or `undefined`. Pure, TOTAL — never throws on a malformed/adversarial/revoked-proxy args shape.
+ *  Deliberately uses `safeDataValue` (NOT the raw-access `fileArgPath`): this runs on model-controlled args while
+ *  building the risk descriptor, so it must stay proxy-safe. batch-B: a `file_path` call must still populate
+ *  `riskDescriptor.touchedPaths` (shown to the approver / audit / telemetry) — else it goes empty after the rename. */
+function fsPathArg(args) {
+    if (!isPlainRecord(args))
+        return undefined;
+    const fp = safeDataValue(args, "file_path"); // CC `file_path` first
+    if (typeof fp === "string" && fp.length > 0)
+        return fp;
+    const p = safeDataValue(args, "path"); // legacy alias
+    return typeof p === "string" && p.length > 0 ? p : undefined;
+}
+/**
+ * design/80 §D-E: build the DETERMINISTIC, REDACTED {@link RiskDescriptor} for an escalation checkpoint at
+ * MINT. Pure — a function ONLY of (`toolName`, `args`, the D-2 `safety` axis, the `shellGated` flag); it reads
+ * NO clock/random, so the SAME call ⇒ an IDENTICAL descriptor (pinned by a test).
+ *
+ * **Determinism contract = plain-DATA args** (the real flow: model-JSON / hook-rewritten plain objects). A
+ * Proxy whose `ownKeys` trap returns a DIFFERENT key set per call is OUT OF CONTRACT — JS cannot detect a Proxy
+ * (codex review Item 2), so its (display-only) digest may vary. This NEVER affects a security/budget/mint
+ * decision: `riskDescriptor` is INERT (no core path reads it to gate), so an out-of-contract input can at worst
+ * degrade an inbox preview, never a permission outcome.
+ *
+ * **Redaction is load-bearing** (the `summary`/`touchedPaths` are PERSISTED + surfaced to a human inbox):
+ * every model-controlled value goes through {@link inlineUntrusted} (folds CR/LF/Unicode separators to one
+ * space, defuses `</system-reminder>` variants + `<<<`/`>>>` fence sentinels) AND a length cap, so a
+ * malicious arg carrying a break-out tag / newline / huge string can neither inject into the inbox render nor
+ * bloat the durable row. NEVER dumps full args / env / secrets — only a bash command string or a short
+ * `name=value` digest of the SHOWN args.
+ *
+ * `summary` for a shell gate = the `command` string (capped 200 cp); otherwise a `name=value` digest of the
+ * call's top-level string/number/boolean args (each value capped), omitted when nothing safe to summarize.
+ * `touchedPaths` reads ONLY the obvious fs `path` arg (read_file/edit_file/write_file) — shell parsing is
+ * deliberately NOT attempted (over-reaching a shell parse risks a wrong/forgeable path, so OMIT for bash).
+ */
+export function buildRiskDescriptor(input) {
+    // `toolName`/`safety`/`shellGated` are CORE-constructed at the mint (trusted); only `args` is the model/hook-
+    // controlled adversarial surface. The whole derivation is wrapped in an OUTER net so NOTHING — not even a
+    // pathological args (a revoked proxy, a throwing/varying getter, a bulk array) — can throw out: a throw here
+    // runs AFTER suspendVM, so it would strand the paused env / fall back to a sync deny (codex review Item 1). On
+    // any throw we fail to a minimal safe descriptor rather than abort the in-flight suspend.
+    const { toolName } = input;
+    try {
+        const { args, safety, shellGated } = input;
+        const egress = safety?.egress === true;
+        // A shell-gated bash carries `safety.irreversible` set by the coarse shellGate tighten (NOT an explicit
+        // per-tool mark). Grade it as the dedicated `shell` coarse tier (severity 3), NOT `irreversible` (4): the
+        // command MAY be benign, so it must not outrank an explicitly-irreversible-marked tool. An EXPLICITLY
+        // egress-marked tighten still surfaces `egress` (it dominates the shell coarse-grade in `riskSeverity`).
+        const shell = shellGated === true;
+        const irreversible = !shell && safety?.irreversible === true;
+        const axes = {};
+        if (egress)
+            axes.egress = true;
+        if (irreversible)
+            axes.irreversible = true;
+        if (shell)
+            axes.shell = true;
+        // ── summary (redacted) — DATA-property reads only (`safeDataValue` never invokes a getter ⇒ a throwing or
+        // a varying getter can neither escape nor make the output non-deterministic); `isPlainRecord` rejects
+        // arrays / revoked-proxies; a pathological key count bounds the sort (does not drop the summary). ───────
+        let summary;
+        if (shell || toolName === "Bash") {
+            // A shell gate's risk IS the command — show it (neutralized + capped). Absent/non-string ⇒ no summary.
+            const cmd = isPlainRecord(args) ? safeDataValue(args, "command") : undefined;
+            if (typeof cmd === "string" && cmd.length > 0)
+                summary = inlineUntrusted(cmd, SUMMARY_CMD_MAX);
+            // design/103 #9 (批准语义透明): disclose a background launch — the approver authorizes a PERSISTENT process
+            // (no per-step recheck, up to the deployment's background timeout ceiling), NOT a one-shot ≤foreground-max cmd.
+            const bg = isPlainRecord(args) ? safeDataValue(args, "run_in_background") : undefined;
+            if (bg === true)
+                summary = `[background persistent process — no per-step recheck] ${summary ?? ""}`.trimEnd();
+        }
+        else if (isPlainRecord(args)) {
+            // A brief `name=value` digest of the SHOWN top-level SCALAR DATA args (never nested objects/arrays — bulk
+            // payloads/secrets; never accessors). Take the first `MAX_DIGEST_SCAN_KEYS` in enumeration order, THEN
+            // sort + slice — so a pathological key COUNT bounds the SORT work (codex review Item 1.3) WITHOUT dropping
+            // a normal tool's summary entirely (codex review Item 4: a >256-key tool keeps its first-block preview,
+            // not nothing). Prototype keys skipped; each value neutralized + capped; the whole digest capped again.
+            {
+                const parts = [];
+                for (const key of safeKeys(args).slice(0, MAX_DIGEST_SCAN_KEYS).sort().slice(0, MAX_DIGEST_KEYS)) {
+                    if (key === "__proto__" || key === "constructor" || key === "prototype")
+                        continue;
+                    const v = safeDataValue(args, key);
+                    if (typeof v === "string" || typeof v === "number" || typeof v === "boolean") {
+                        // threat G (+ codex residual): a forged `key=value` pair needs BOTH the `=` separator AND the ` `
+                        // pair-joiner (`parts.join(" ")` below) — and inlineUntrusted folds-but-KEEPS single spaces and does
+                        // not escape `=`. So a value `Acme amount=5` forges `amount=5`, AND a key `zzz auto_approved` (a space,
+                        // no `=`) forges `auto_approved=true`. Percent-encode `%`,`=`,` ` (% FIRST, to avoid double-encoding)
+                        // in BOTH key and value so neither structural char can masquerade as a real separator/joiner. Minimal
+                        // + INERT (display-only; severity/axes recompute from trusted axes, never from this digest string).
+                        const encDigest = (s) => s.replace(/%/g, "%25").replace(/=/g, "%3D").replace(/ /g, "%20");
+                        const k = encDigest(inlineUntrusted(key, 40));
+                        const val = encDigest(inlineUntrusted(String(v), SUMMARY_VALUE_MAX));
+                        parts.push(`${k}=${val}`);
+                    }
+                }
+                if (parts.length > 0)
+                    summary = inlineUntrusted(parts.join(" "), SUMMARY_TOTAL_MAX);
+            }
+        }
+        // ── touchedPaths (redacted; fs path DATA args only — NO shell parse) ─────────────────────────────────
+        const touched = [];
+        if (!shell && toolName !== "Bash") {
+            const p = fsPathArg(args);
+            if (p !== undefined)
+                touched.push(inlineUntrusted(p, PATH_MAX));
+        }
+        const touchedPaths = touched.length > 0 ? touched.slice(0, MAX_TOUCHED_PATHS) : undefined;
+        return {
+            severity: riskSeverity(axes),
+            axes,
+            toolName,
+            ...(summary !== undefined ? { summary } : {}),
+            ...(touchedPaths !== undefined ? { touchedPaths } : {}),
+        };
+    }
+    catch {
+        // Unreachable in practice (args is fully guarded above); the outer net guarantees no throw aborts the mint.
+        return { severity: 2, axes: {}, toolName: typeof toolName === "string" ? toolName : "" };
+    }
+}
+/**
+ * The current {@link Checkpoint} schema version a v1.5 suspend stamps, and the highest a resume here
+ * accepts (design/49 §3, code-ready council round-2). Bump together with `MAX_SUPPORTED_CHECKPOINT_VERSION`
+ * only when this worker can also *read* the new shape. A future v2 worker raises MAX to 2 and still reads a
+ * v1 checkpoint — forward-compatible by `<=`, never `=== `.
+ */
+export const CURRENT_CHECKPOINT_VERSION = 1;
+/** design/74 R3-B: the schema version a `resource_limit` suspend stamps (v2 — it adds `resourceLedger` and a
+ *  `resource_limit` `pendingAction`/`gate` an old worker can't handle). An old worker (`MAX_SUPPORTED`=1)
+ *  rejects it pre-CAS (stays `pending`, retryable on a new worker). */
+export const RESOURCE_CHECKPOINT_VERSION = 2;
+/**
+ * design/80 D-1 (version-skew downgrade fix): the schema version a **binding-bearing** human/irreversible_ask
+ * `tool_approval` suspend stamps. These checkpoints carry the decision-action binding (`boundCallId` +
+ * `boundInputHash`) whose enforcement lives ENTIRELY in the resuming worker's resume path. A pre-D-1 worker
+ * (released 1.100.0: `MAX_SUPPORTED`=2, and its resume code has ZERO binding logic) would otherwise resume a
+ * D-1-minted v1 checkpoint and execute the pending tool with NO decision-action verification — the exact
+ * "approve vendor-A $5 → execute vendor-B $5000" bypass the binding exists to prevent (council BLOCKER #1).
+ * Stamping these at **v3 (> the old worker's MAX of 2)** forces a pre-D-1 worker to reject them PRE-CAS
+ * (`unsupported_version`, stays `pending`, retried on a binding-enforcing worker) instead of silently voiding
+ * the binding. A resource_limit suspend keeps stamping v2; a pre-binding (legacy 1.100.0) checkpoint is v1.
+ */
+export const BINDING_CHECKPOINT_VERSION = 3;
+/** The highest {@link Checkpoint.version} `runner.resume` will act on; a higher one is rejected pre-CAS with
+ *  {@link CheckpointError} `unsupported_version` (the checkpoint stays `pending`, retryable on a newer worker).
+ *  Raised to 3 for design/80 D-1 binding checkpoints — this worker reads v1 (legacy human), v2 (resource),
+ *  and v3 (binding human/irreversible_ask). */
+export const MAX_SUPPORTED_CHECKPOINT_VERSION = 3;
+/**
+ * Read a checkpoint's schema version, defaulting an absent field to **legacy `0`** (a 1.67-era checkpoint
+ * written before the field existed — it carries no `workspaceHandle`, so resuming it the v1 way is safe).
+ * Compare with `<= MAX_SUPPORTED_CHECKPOINT_VERSION`, never `=== CURRENT_CHECKPOINT_VERSION` (design/49 §3).
+ */
+export function checkpointVersionOf(cp) {
+    return cp.version ?? 0;
+}
+/** design/74 Slice 4: accumulate ONE slice's spend into the ledger — called when a `resource_limit` suspend
+ *  commits its checkpoint (debit-at-`put`, so the persisted ledger always reflects everything spent up to and
+ *  including the slice being suspended). Pure. The FIRST slice (no prior ledger) seeds the human totals from
+ *  `total`; every later slice keeps the ledger's own totals (authoritative — a resumed slice must not be able
+ *  to silently raise its own ceiling). Negative slice figures are clamped to 0 (a misreported usage can never
+ *  REFUND the cumulative spend and reopen budget). */
+export function debitLedger(prior, slice, total, opts) {
+    return {
+        // Totals are set once (first slice) and then frozen on the ledger; `prior` wins so a resume can't widen them.
+        totalBudgetMicroUsd: prior?.totalBudgetMicroUsd ?? total?.totalBudgetMicroUsd,
+        totalWalltimeSec: prior?.totalWalltimeSec ?? total?.totalWalltimeSec,
+        spentMicroUsd: (prior?.spentMicroUsd ?? 0) + Math.max(0, slice.costMicroUsd),
+        spentTokens: (prior?.spentTokens ?? 0) + Math.max(0, slice.tokens),
+        spentTurns: (prior?.spentTurns ?? 0) + Math.max(0, slice.turns),
+        // design/80 D-E-core (codex review #1): `sliceCount` is the RESOURCE-slice / `maxSlices` counter — only a
+        // real `resource_limit` mint advances it. An APPROVAL suspend rides this ledger purely for the `req.budget`
+        // READ (`countSlice:false`), so it must NOT consume a resource slice (else a human pause before slice 1
+        // could trip the resource `suspend.loop` / `maxSlices` cap).
+        sliceCount: (prior?.sliceCount ?? 0) + (opts?.countSlice === false ? 0 : 1),
+    };
+}
+/** design/74 Slice 4: the $ budget (micro-USD) the NEXT slice may still spend = `totalBudgetMicroUsd -
+ *  spentMicroUsd`, never negative. `undefined` when no total $ ceiling is set (the run is bounded only by the
+ *  per-slice window / walltime). A resumed slice's effective `maxCostUsd` is `min(window, this)`. NB: `0` is a
+ *  VALID, exhausted ceiling — NOT "unlimited" (only `undefined` is unlimited). Any spend then immediately trips
+ *  `overBudget`, and the run loop fails an exhausted resume fast (runtask). Never falsy-test this value (a
+ *  `if (remaining)` would skip a legitimate 0 ceiling and silently bypass the budget). */
+export function remainingBudgetMicroUsd(ledger) {
+    if (ledger?.totalBudgetMicroUsd === undefined)
+        return undefined;
+    return Math.max(0, ledger.totalBudgetMicroUsd - ledger.spentMicroUsd);
+}
+/**
+ * design/80 assistant-scheduler seam #1: project a single PENDING {@link Checkpoint} to its lightweight
+ * {@link CheckpointSummary}. Shared by every {@link CheckpointStore} impl so the projection is IDENTICAL
+ * across the in-memory, file, and durable backends (the anti-drift guard) — `severity` always derives from the
+ * gate's {@link RiskDescriptor} via the single {@link riskSeverity} helper, `spentMicroUsd` always reads
+ * {@link ResourceLedger.spentMicroUsd}. Pure; reads no clock/random.
+ */
+export function summarizeCheckpoint(cp) {
+    // `severity` only exists for the approval escalations (`human`/`irreversible_ask`), which alone carry a
+    // riskDescriptor; recompute it from the descriptor's axes via the shared helper (single source of truth — it
+    // equals the descriptor's own `severity`, never re-derived independently). Absent gate/descriptor ⇒ omitted.
+    const riskDescriptor = cp.gate.kind === "human" || cp.gate.kind === "irreversible_ask" ? cp.gate.riskDescriptor : undefined;
+    const severity = riskDescriptor !== undefined ? riskSeverity(riskDescriptor.axes) : undefined;
+    // design S1d (source-tag): project the pending tool call's id/name from the `tool_approval` pendingAction so
+    // an inbox shows WHICH call awaits a decision without an N+1 getCheckpoint. Branch on `kind` FIRST — a
+    // resource_limit / plan_review / task_done pendingAction has no tool fields (PendingAction contract).
+    const tool = cp.pendingAction.kind === "tool_approval" ? cp.pendingAction : undefined;
+    // design S1e (service [204]): a BOUNDED, UNREDACTED raw preview of the pending tool call's args (so the inbox
+    // shows WHAT awaits a decision without an N+1 getCheckpoint). Only for a tool_approval pendingAction; capped to
+    // MAX_TOOL_INPUT_PREVIEW_CHARS with a trailing `…` when over. ECHO-ONLY (no gate/CAS/resume reads it — same as
+    // sourceTaskId); redaction is the CONSUMER's job. JSON.stringify can be undefined (e.g. args === undefined) or
+    // throw (a circular ref); guard both so a pathological args never aborts the projection — omit the preview then.
+    let toolInput;
+    if (tool !== undefined) {
+        try {
+            const raw = JSON.stringify(tool.args);
+            if (typeof raw === "string") {
+                toolInput = raw.length > MAX_TOOL_INPUT_PREVIEW_CHARS ? `${raw.slice(0, MAX_TOOL_INPUT_PREVIEW_CHARS)}…` : raw;
+            }
+        }
+        catch {
+            toolInput = undefined; // un-serializable args → omit the preview (no new exposure, just no preview)
+        }
+    }
+    return {
+        token: cp.token,
+        sessionId: cp.sessionId,
+        scope: cp.scope,
+        gateKind: cp.gate.kind,
+        ...(severity !== undefined ? { severity } : {}),
+        ...(cp.resourceLedger !== undefined ? { spentMicroUsd: cp.resourceLedger.spentMicroUsd } : {}),
+        ...(cp.deadline !== undefined ? { deadline: cp.deadline } : {}),
+        // design S1e (service [204]): createdAt is ALWAYS present (a Checkpoint always has one) — projected for
+        // oldest-first inbox triage in one listByScope call.
+        createdAt: cp.createdAt,
+        // design S1d (source-tag): echo-only attribution fields, projected from the persisted Checkpoint so
+        // listByScope returns full triage attribution in one call. Omitted when absent (non-ask gate / legacy).
+        ...(cp.sourceTaskId !== undefined ? { sourceTaskId: cp.sourceTaskId } : {}),
+        ...(cp.principal !== undefined ? { principal: cp.principal } : {}),
+        ...(tool !== undefined ? { toolCallId: tool.toolCallId, toolName: tool.toolName } : {}),
+        // design/99 MF-14: typed content-gate discriminant — the reserved AskUserQuestion tool gating a question.
+        ...(tool?.toolName === ASK_USER_QUESTION_TOOL_NAME ? { contentKind: "content_ask" } : {}),
+        // design S1e (service [204]): bounded raw args preview — only for a tool_approval pendingAction (omitted otherwise).
+        ...(toolInput !== undefined ? { toolInput } : {}),
+    };
+}
+/** A typed checkpoint-store error so callers branch on `code` (mirrors `SessionError`). */
+export class CheckpointError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "CheckpointError";
+    }
+}
+/**
+ * design/80 D-1 (persist-winner): derive the durable {@link ResolvedOutcome} winner from a resume
+ * `outcome`, or `undefined` when the outcome binds to no pending action. Only a `policy_ask` resume names
+ * a specific tool call (`boundCallId`) + decision worth recording; `resource_limit` / `dry_run_review` /
+ * `task_done` have nothing to bind, so they record no winner. Shared by every {@link CheckpointStore} impl
+ * so the persisted winner is identical across the in-memory and durable backends.
+ */
+export function winnerFromOutcome(outcome) {
+    if (outcome.gate !== "policy_ask")
+        return undefined;
+    // `updatedInput` is only set when the operator rewrote the call (design/37 allow-rewrite); omit it
+    // otherwise so a later equality check (env_failed replay) does not falsely diverge on `undefined`.
+    return outcome.updatedInput === undefined
+        ? { boundCallId: outcome.boundCallId, decision: outcome.decision }
+        : { boundCallId: outcome.boundCallId, decision: outcome.decision, updatedInput: outcome.updatedInput };
+}
+/**
+ * design/80 D-A: the persist-time validation every {@link CheckpointStore.setPendingSteer} impl runs so the
+ * reject is IDENTICAL across the in-memory and durable backends. A `steer.text` carrying a `</system-reminder>`
+ * close tag would escape the model-facing `<system-reminder>` wrapper a trusted steer rides on resume — reject
+ * fail-closed (`steering.invalid_content`) so a dirty steer NEVER enters {@link CheckpointState} (§3 inv #2).
+ * Applied for BOTH `trusted` values: the durable record must be clean on either path (the untrusted resume
+ * path ALSO sanitizes as untrusted data, but the close tag must never reach the persisted state at all).
+ * Returns a frozen-trust copy (`{ text, trusted }` only) so no extra caller field leaks into the row.
+ */
+export function validatePendingSteer(steer) {
+    // §3 inv #2: a system-reminder break-out tag must NEVER enter CheckpointState. Detect via the codebase's
+    // canonical neutralizer (sanitizeUntrustedText changes the text IFF it contains a break-out sequence) — NOT a
+    // narrow literal `includes("</system-reminder>")`, which misses the case/whitespace/attribute variants the
+    // `SYSTEM_REMINDER` regex (untrusted-text.ts) treats as equivalent close tags (e.g. `</ system-reminder>`,
+    // `</SYSTEM-REMINDER>`, `</system-reminder >`). The TRUSTED resume path rides a `<system-reminder>` via
+    // `formatHookFeedback` with NO second sanitize, so this persist-time reject is the SOLE guard for that path; a
+    // variant tag would otherwise close the reminder framing early (review-council MAJOR).
+    if (sanitizeUntrustedText(steer.text) !== steer.text) {
+        throw new CheckpointError("steering.invalid_content", "steering text must not contain a system-reminder break-out tag");
+    }
+    // Cross-backend consistency (review-council): a C0 control char — NUL especially — is stored fine by the
+    // in-memory backend but REJECTED by Postgres text/jsonb, so a steer that persisted on one backend would fail
+    // on the other. Reject control chars here (allow only the ordinary `\t` / `\n` / `\r` whitespace).
+    if (/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/.test(steer.text)) {
+        throw new CheckpointError("steering.invalid_content", "steering text must not contain control characters");
+    }
+    // Freeze trust verbatim (§3 inv #1); copy only the two fields so a caller object's extras never persist.
+    return { text: steer.text, trusted: steer.trusted };
+}
+/**
+ * Default in-process {@link CheckpointStore}. Single-instance / tests only — it does NOT survive a
+ * restart or span replicas, so it cannot deliver the cross-process guarantee a durable backend does.
+ * Single-threaded JS already serializes `resolve`, so the CAS is trivially atomic here;
+ * {@link testInjectFault} simulates the crash-recovery races a real backend must survive.
+ */
+export class InMemoryCheckpointStore {
+    cps = new Map();
+    fault = null;
+    async put(token, cp) {
+        if (this.cps.has(token)) {
+            throw new CheckpointError("checkpoint.already_exists", `checkpoint token already exists`);
+        }
+        // Store a defensive copy so a later mutation of the caller's object can't corrupt the persisted row.
+        this.cps.set(token, structuredClone(cp));
+    }
+    async get(token) {
+        const cp = this.cps.get(token);
+        return cp ? structuredClone(cp) : null;
+    }
+    async resolve(token, scope, outcome, expect) {
+        if (this.fault === "resolve-before-commit") {
+            this.fault = null;
+            throw new Error("injected fault: resolve before commit");
+        }
+        const cp = this.cps.get(token);
+        // Scope in the WHERE: a wrong-scope resolve never wins (multi-tenant isolation, §2.1).
+        if (!cp || cp.scope !== scope || cp.status !== "pending") {
+            return false;
+        }
+        // design/80 D-1 (atomicity fix): optimistic-concurrency guard, evaluated atomically with the CAS. The
+        // caller validated its reopen-by-reason guard against a get() snapshot; if a concurrent resolve/reopen
+        // cycle changed the monotonic `rev` in the get→resolve window, that validation is stale → lose the CAS
+        // (fail-closed), forcing a re-get + re-validate. (Single-threaded JS makes this check + the flip below
+        // trivially atomic here; a durable backend folds it into the CAS WHERE clause.) `rev` (not `reopenReason`)
+        // because a 2-valued enum can ABA back to a prior value while the winner changed (round-2 BLOCKER fix).
+        if (expect !== undefined && (cp.rev ?? 0) !== expect.rev) {
+            return false;
+        }
+        cp.status = "resolved"; // CAS commit (single-threaded → atomic)
+        cp.rev = (cp.rev ?? 0) + 1; // monotonic bump — the OCC key for any later resume
+        // design/80 D-1 (persist-winner): record the winning binding ON the row, atomically with the status
+        // flip, so a later reopen → re-resume can be validated against the approved decision. Only a
+        // `policy_ask` resolve binds to an action; others record no winner (winnerFromOutcome → undefined).
+        const winner = winnerFromOutcome(outcome);
+        if (winner)
+            cp.resolvedOutcome = structuredClone(winner);
+        // design/80 D-1 (MINOR-12): a freshly-resolved row carries no stale reopen reason — a subsequent reopen
+        // writes its own fresh reason.
+        cp.reopenReason = undefined;
+        if (this.fault === "resolve-after-commit") {
+            this.fault = null;
+            throw new Error("injected fault: resolve after commit");
+        }
+        return true;
+    }
+    async reopen(token, scope, reason) {
+        const cp = this.cps.get(token);
+        // CAS resolved→pending (inverse of resolve); scope in the WHERE, like resolve (multi-tenant isolation).
+        if (!cp || cp.scope !== scope || cp.status !== "resolved") {
+            return false;
+        }
+        cp.status = "pending"; // un-consume so a retry can win `resolve` again and re-resume the same work
+        cp.rev = (cp.rev ?? 0) + 1; // monotonic bump — makes a stale resume's OCC fail (ABA-proof, round-2 fix)
+        // design/80 D-1 (reopen-by-reason): record WHY it was reopened so re-resume validates per reason;
+        // PRESERVE the persisted winner (resolvedOutcome) — an env_failed re-resume must replay it.
+        cp.reopenReason = reason;
+        return true;
+    }
+    async setPendingSteer(token, scope, steer) {
+        // design/80 D-A: validate FIRST (before the row lookup) so a dirty steer is rejected (typed error) even
+        // when the checkpoint is missing/resolved — a forged close tag never reaches the persisted state (§3 inv #2).
+        const clean = validatePendingSteer(steer);
+        const cp = this.cps.get(token);
+        // Scope in the WHERE (multi-tenant isolation) + only a still-`pending` checkpoint can be steered (a
+        // resolved/expired one can't — §3 inv #6). No status flip: a steer is GUIDANCE, never an approval (§3 inv #4).
+        if (!cp || cp.scope !== scope || cp.status !== "pending") {
+            return false;
+        }
+        cp.state.pendingSteer = clean; // last-writer-wins on a still-pending row (idempotent-safe)
+        return true;
+    }
+    async expire(token, scope) {
+        const cp = this.cps.get(token);
+        // Scope in the WHERE (multi-tenant isolation) + only a `pending` row flips → mutually exclusive with
+        // `resolve` on the same row (single-threaded JS already serializes; a real backend's CAS does the same).
+        if (!cp || cp.scope !== scope || cp.status !== "pending") {
+            return false;
+        }
+        cp.status = "expired"; // CAS commit (single-threaded → atomic)
+        return true;
+    }
+    async reap(scope, cutoff) {
+        let n = 0;
+        for (const cp of this.cps.values()) {
+            if (cp.scope === scope && cp.status === "pending" && cp.deadline !== undefined && cp.deadline <= cutoff) {
+                cp.status = "expired";
+                n++;
+            }
+        }
+        return n;
+    }
+    async listByScope(scope) {
+        // design/80 assistant-scheduler seam #1: PENDING-only projection. The predicate is byte-for-byte the
+        // resolve CAS's (`cp.scope === scope && cp.status === 'pending'`), so the list is exactly the still-resumable
+        // rows. Read-only — no mutation, no CAS, no fault hook; `summarizeCheckpoint` is the shared projection.
+        const out = [];
+        for (const cp of this.cps.values()) {
+            if (cp.scope === scope && cp.status === "pending")
+                out.push(summarizeCheckpoint(cp));
+        }
+        return out;
+    }
+    /** Arm a one-shot fault on the next `resolve` (council #5: makes crash-recovery unit-testable). */
+    testInjectFault(mode) {
+        this.fault = mode;
+    }
+    /** Test/inspection helper: number of stored checkpoints. */
+    get size() {
+        return this.cps.size;
+    }
+}
+//# sourceMappingURL=checkpoint-store.js.map

package/dist/core/checkpoint-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-store.js","sourceRoot":"","sources":["../../src/core/checkpoint-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAsChE,uGAAuG;AACvG,MAAM,UAAU,mBAAmB;IACjC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAoB,CAAC;AAC5D,CAAC;AA6DD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,IAAmE;IAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IACpC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC;IAChD,IAAI,YAAY,IAAI,MAAM;QAAE,OAAO,CAAC,CAAC;IACrC,IAAI,YAAY;QAAE,OAAO,CAAC,CAAC;IAC3B,IAAI,MAAM;QAAE,OAAO,CAAC,CAAC;IACrB,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;wGAGwG;AACxG,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B;oFACoF;AACpF,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B;;uFAEuF;AACvF,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC;;qHAEqH;AACrH,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEhD;;mHAEmH;AACnH,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,yDAAyD;QACpI,MAAM,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,6EAA6E;IAC7F,CAAC;AACH,CAAC;AACD;qHACqH;AACrH,SAAS,aAAa,CAAC,GAA4B,EAAE,GAAW;IAC9D,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,6CAA6C;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AACD,oEAAoE;AACpE,SAAS,QAAQ,CAAC,GAA4B;IAC5C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;uHAIuH;AACvH,SAAS,SAAS,CAAC,IAAa;IAC9B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,uBAAuB;IACpE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe;IACtD,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAQnC;IACC,8GAA8G;IAC9G,0GAA0G;IAC1G,6GAA6G;IAC7G,+GAA+G;IAC/G,0FAA0F;IAC1F,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;QACvC,wGAAwG;QACxG,0GAA0G;QAC1G,sGAAsG;QACtG,yGAAyG;QACzG,MAAM,KAAK,GAAG,UAAU,KAAK,IAAI,CAAC;QAClC,MAAM,YAAY,GAAG,CAAC,KAAK,IAAI,MAAM,EAAE,YAAY,KAAK,IAAI,CAAC;QAC7D,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAC/B,IAAI,YAAY;YAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3C,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAE7B,2GAA2G;QAC3G,sGAAsG;QACtG,0GAA0G;QAC1G,IAAI,OAA2B,CAAC;QAChC,IAAI,KAAK,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACjC,uGAAuG;YACvG,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,GAAG,eAAe,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YAC/F,sGAAsG;YACtG,gHAAgH;YAChH,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,GAAG,yDAAyD,OAAO,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC;QAChH,CAAC;aAAM,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,0GAA0G;YAC1G,uGAAuG;YACvG,2GAA2G;YAC3G,wGAAwG;YACxG,wGAAwG;YACxG,CAAC;gBACC,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,CAAC;oBACjG,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW;wBAAE,SAAS;oBAClF,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBACnC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;wBAC7E,kGAAkG;wBAClG,qGAAqG;wBACrG,wGAAwG;wBACxG,sGAAsG;wBACtG,sGAAsG;wBACtG,oGAAoG;wBACpG,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBAC1G,MAAM,CAAC,GAAG,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;wBAC9C,MAAM,GAAG,GAAG,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;wBACrE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,wGAAwG;QACxG,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1F,OAAO;YACL,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC;YAC5B,IAAI;YACJ,QAAQ;YACR,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4GAA4G;QAC5G,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC3F,CAAC;AACH,CAAC;AAgSD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C;;uEAEuE;AACvE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAE7C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C;;;+CAG+C;AAC/C,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAElD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAA+B;IACjE,OAAO,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC;AACzB,CAAC;AAyBD;;;;;sDAKsD;AACtD,MAAM,UAAU,WAAW,CACzB,KAAiC,EACjC,KAA8D,EAC9D,KAAmE,EACnE,IAA+B;IAE/B,OAAO;QACL,8GAA8G;QAC9G,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,IAAI,KAAK,EAAE,mBAAmB;QAC7E,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,IAAI,KAAK,EAAE,gBAAgB;QACpE,aAAa,EAAE,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC;QAC5E,WAAW,EAAE,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC;QAClE,UAAU,EAAE,CAAC,KAAK,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC;QAC/D,0GAA0G;QAC1G,4GAA4G;QAC5G,wGAAwG;QACxG,6DAA6D;QAC7D,UAAU,EAAE,CAAC,KAAK,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED;;;;;0FAK0F;AAC1F,MAAM,UAAU,uBAAuB,CAAC,MAAkC;IACxE,IAAI,MAAM,EAAE,mBAAmB,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAChE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;AACxE,CAAC;AAiQD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAc;IAChD,wGAAwG;IACxG,6GAA6G;IAC7G,6GAA6G;IAC7G,MAAM,cAAc,GAClB,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,MAAM,QAAQ,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,6GAA6G;IAC7G,uGAAuG;IACvG,sGAAsG;IACtG,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,8GAA8G;IAC9G,gHAAgH;IAChH,+GAA+G;IAC/G,+GAA+G;IAC/G,iHAAiH;IACjH,IAAI,SAA6B,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,SAAS,GAAG,GAAG,CAAC,MAAM,GAAG,4BAA4B,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,4BAA4B,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACjH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,SAAS,CAAC,CAAC,6EAA6E;QACtG,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI;QACtB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,EAAE,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,wGAAwG;QACxG,qDAAqD;QACrD,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,oGAAoG;QACpG,wGAAwG;QACxG,GAAG,CAAC,EAAE,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,0GAA0G;QAC1G,GAAG,CAAC,IAAI,EAAE,QAAQ,KAAK,2BAA2B,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,aAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,qHAAqH;QACrH,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAE7B;IADX,YACW,IAmCqB,EAC9B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAtCN,SAAI,GAAJ,IAAI,CAmCiB;QAI9B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AA+ID;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAsB;IACtD,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,SAAS,CAAC;IACpD,mGAAmG;IACnG,mGAAmG;IACnG,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;QACvC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;QAClE,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;AAC3G,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAyC;IAI5E,yGAAyG;IACzG,8GAA8G;IAC9G,2GAA2G;IAC3G,2GAA2G;IAC3G,wGAAwG;IACxG,+GAA+G;IAC/G,uFAAuF;IACvF,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,eAAe,CACvB,0BAA0B,EAC1B,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,yGAAyG;IACzG,6GAA6G;IAC7G,mGAAmG;IACnG,IAAI,gDAAgD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,eAAe,CACvB,0BAA0B,EAC1B,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,yGAAyG;IACzG,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;AACtD,CAAC;AAWD;;;;;GAKG;AACH,MAAM,OAAO,uBAAuB;IAC1B,GAAG,GAAG,IAAI,GAAG,EAAsB,CAAC;IACpC,KAAK,GAA+B,IAAI,CAAC;IAEjD,KAAK,CAAC,GAAG,CAAC,KAAsB,EAAE,EAAc;QAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE,iCAAiC,CAAC,CAAC;QAC5F,CAAC;QACD,qGAAqG;QACrG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAsB;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,KAAsB,EACtB,KAAa,EACb,OAAsB,EACtB,MAA2B;QAE3B,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,uFAAuF;QACvF,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,sGAAsG;QACtG,uGAAuG;QACvG,uGAAuG;QACvG,uGAAuG;QACvG,2GAA2G;QAC3G,wGAAwG;QACxG,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,EAAE,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,wCAAwC;QAChE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,oDAAoD;QAChF,oGAAoG;QACpG,6FAA6F;QAC7F,oGAAoG;QACpG,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,MAAM;YAAE,EAAE,CAAC,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACzD,wGAAwG;QACxG,+BAA+B;QAC/B,EAAE,CAAC,YAAY,GAAG,SAAS,CAAC;QAC5B,IAAI,IAAI,CAAC,KAAK,KAAK,sBAAsB,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAsB,EAAE,KAAa,EAAE,MAAoB;QACtE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,wGAAwG;QACxG,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,4EAA4E;QACnG,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,4EAA4E;QACxG,kGAAkG;QAClG,4FAA4F;QAC5F,EAAE,CAAC,YAAY,GAAG,MAAM,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,KAAsB,EACtB,KAAa,EACb,KAAyC;QAEzC,wGAAwG;QACxG,8GAA8G;QAC9G,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,oGAAoG;QACpG,+GAA+G;QAC/G,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,EAAE,CAAC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,4DAA4D;QAC3F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAsB,EAAE,KAAa;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,qGAAqG;QACrG,yGAAyG;QACzG,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,wCAAwC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,MAAc;QACtC,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,EAAE,CAAC,KAAK,KAAK,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;gBACxG,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC;gBACtB,CAAC,EAAE,CAAC;YACN,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,qGAAqG;QACrG,8GAA8G;QAC9G,wGAAwG;QACxG,MAAM,GAAG,GAAwB,EAAE,CAAC;QACpC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,EAAE,CAAC,KAAK,KAAK,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mGAAmG;IACnG,eAAe,CAAC,IAAgC;QAC9C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACvB,CAAC;CACF"}