@sema-ai/core 1.275.1

package/dist/core/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/core/memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAgO5D;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAkB;IACtD,OAAO,CACL,OAAO,KAAK,CAAC,YAAY,KAAK,UAAU;QACxC,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU;QAClC,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,CACnC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAAkB;IAC9D,OAAO,CACL,OAAO,KAAK,CAAC,sBAAsB,KAAK,UAAU;QAClD,OAAO,KAAK,CAAC,sBAAsB,KAAK,UAAU,CACnD,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,oEAAoE;AACpE,+EAA+E;AAC/E,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,sGAAsG;AACtG,qGAAqG;AACrG,uGAAuG;AACvG,4DAA4D;AAC5D,EAAE;AACF,uGAAuG;AACvG,sGAAsG;AACtG,wGAAwG;AACxG,0FAA0F;AAE1F;;;;4FAI4F;AAC5F,MAAM,CAAC,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAEhI,6GAA6G;AAC7G,MAAM,CAAC,MAAM,4BAA4B,GAAmB,SAAS,CAAC;AAYtE;;2CAE2C;AAC3C,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,MAAe;QACvC,+FAA+F;QAC/F,kFAAkF;QAClF,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;sGAEsG;AACtG,SAAS,mBAAmB,CAAC,IAAyB;IACpD,OAAO,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC;AACzC,CAAC;AA6BD;;;;;;;GAOG;AACH,MAAM,eAAe,GAA6B;IAChD,uGAAuG;IACvG,mGAAmG;IACnG,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,sBAAsB,EAAE;IAC1D,4GAA4G;IAC5G,+FAA+F;IAC/F,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,8CAA8C,EAAE;IAC7E,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,kCAAkC,EAAE;IAC5E,uGAAuG;IACvG,wGAAwG;IACxG,uFAAuF;IACvF,wGAAwG;IACxG,qGAAqG;IACrG,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,oDAAoD,EAAE;IACrF,yGAAyG;IACzG,yGAAyG;IACzG,wGAAwG;IACxG,wGAAwG;IACxG,iGAAiG;IACjG,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,0CAA0C,EAAE;IAC9E,oGAAoG;IACpG,uGAAuG;IACvG,sGAAsG;IACtG,mFAAmF;IACnF,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,uDAAuD,EAAE;IACrF,wEAAwE;IACxE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,2BAA2B,EAAE;IAC5D,4GAA4G;IAC5G,6GAA6G;IAC7G,yGAAyG;IACzG,0EAA0E;IAC1E,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,uDAAuD,EAAE;CACtF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,eAAe,CAAC,wBAAwB,EAAE,kCAAkC,KAAK,EAAE,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,+BAA+B,CAAC,IAAyB;IACvE,6FAA6F;IAC7F,uGAAuG;IACvG,wGAAwG;IACxG,0FAA0F;IAC1F,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAyB;IAC1D,IAAI,mBAAmB,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,CAAC,8CAA8C;IAClG,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IAC1F,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAAyB,EACzB,cAAuB,EACvB,WAAyB;IAEzB,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,iBAAiB;QAAE,OAAO,CAAC,oCAAoC;IAChG,4FAA4F;IAC5F,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE,mDAAmD,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,+FAA+F;QAC/F,4DAA4D;QAC5D,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE,4DAA4D,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE,wDAAwD,CAAC,CAAC;IACnH,CAAC;AACH,CAAC;AAED;;;6GAG6G;AAC7G,SAAS,2BAA2B,CAAC,IAAyB;IAC5D,IAAI,IAAI,CAAC,sBAAsB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAkB,EAAE,WAAyB;IAC9E,MAAM,OAAO,GAAgB;QAC3B,qDAAqD;QACrD,IAAI,UAAU;YACZ,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC,kDAAkD;QAC7E,CAAC;QACD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QAEpC,kGAAkG;QAClG,MAAM,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,8DAA8D;YAC5F,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,+DAA+D;QAC/D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACtC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBACd,kGAAkG;gBAClG,6FAA6F;gBAC7F,+BAA+B,CAAC,IAAI,CAAC,CAAC;gBACtC,6FAA6F;gBAC7F,oFAAoF;gBACpF,0BAA0B,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;gBACzD,oGAAoG;gBACpG,+EAA+E;gBAC/E,sGAAsG;gBACtG,iGAAiG;gBACjG,yGAAyG;gBACzG,OAAO,KAAK,CAAC,gBAAiB,CAAC,KAAK,EAAE,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3E,CAAC;YACH,CAAC,CAAC,SAAS;QAEb,6FAA6F;QAC7F,4BAA4B,EAAE,KAAK,CAAC,gBAAgB;YAClD,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBACd,kGAAkG;gBAClG,gGAAgG;gBAChG,uEAAuE;gBACvE,+BAA+B,CAAC,IAAI,CAAC,CAAC;gBACtC,0BAA0B,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;gBACzD,oGAAoG;gBACpG,kEAAkE;gBAClE,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC;gBAC7D,2FAA2F;gBAC3F,oGAAoG;gBACpG,8FAA8F;gBAC9F,mGAAmG;gBACnG,mGAAmG;gBACnG,qGAAqG;gBACrG,iGAAiG;gBACjG,gGAAgG;gBAChG,iGAAiG;gBACjG,gGAAgG;gBAChG,iGAAiG;gBACjG,IAAI,KAAK,CAAC,4BAA4B;oBAAE,OAAO,KAAK,CAAC,4BAA4B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBACrG,OAAO,KAAK,CAAC,gBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACpD,CAAC;YACH,CAAC,CAAC,SAAS;QAEb,iEAAiE;QACjE,gBAAgB,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;YAChD,+FAA+F;YAC/F,qFAAqF;YACrF,+BAA+B,CAAC,IAAI,CAAC,CAAC;YACtC,0BAA0B,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,iCAAiC;YAChG,uGAAuG;YACvG,IAAI,KAAK,CAAC,gBAAgB;gBAAE,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;YACvF,IAAI,KAAK,CAAC,gBAAgB;gBAAE,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAA6B,CAAC;QACpE,CAAC;KACF,CAAC;IACF,wGAAwG;IACxG,+FAA+F;IAC/F,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/F,IAAI,KAAK,CAAC,YAAY;QAAE,OAAO,CAAC,YAAY,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAa,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACjH,IAAI,KAAK,CAAC,MAAM;QACd,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;YACnC,mGAAmG;YACnG,gGAAgG;YAChG,yFAAyF;YACzF,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,OAAO,KAAK,CAAC,MAAO,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC;IACJ,2EAA2E;IAC3E,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,mBAAmB;QAAE,OAAO,CAAC,mBAAmB,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAoB,CAAC,KAAK,CAAC,CAAC;IAC1G,IAAI,KAAK,CAAC,QAAQ;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,QAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACnF,yGAAyG;IACzG,0GAA0G;IAC1G,iFAAiF;IACjF,IAAI,KAAK,CAAC,sBAAsB;QAAE,OAAO,CAAC,sBAAsB,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,sBAAuB,CAAC,KAAK,CAAC,CAAC;IACnH,IAAI,KAAK,CAAC,sBAAsB;QAAE,OAAO,CAAC,sBAAsB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,sBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnI,OAAO,OAAO,CAAC;AACjB,CAAC;AAiBD,sFAAsF;AACtF,SAAS,YAAY,CAAC,CAAc;IAClC,OAAO,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,yFAAyF;AACzF,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,IAAI,GAAG,CACZ,CAAC;SACE,WAAW,EAAE;SACb,KAAK,CAAC,YAAY,CAAC;SACnB,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IACtB,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACnD,gHAAgH;IACxG,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,yFAAyF;IAChF,UAAU,GAAG,SAAkB,CAAC;IAEzC,IAAI,CAAC,KAAa;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,IAAY;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,wCAAwC;QACxF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,GAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,gBAAgB,CAAC,KAAa,EAAE,IAAyB;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC,CAAC,iFAAiF;QACvG,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,GAAgB;YACzB,EAAE,EAAE,MAAM,EAAE;YACZ,IAAI,EAAE,IAAI;YACV,EAAE;YACF,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS,EAAE,gCAAgC;YAC9D,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,+BAA+B;YAC7F,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,0BAA0B;SACrG,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,0EAA0E;IAC9G,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAa,EAAE,KAAa,EAAE,KAAK,GAAG,EAAE;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,OAAO;aACX,GAAG,CAAC,YAAY,CAAC;aACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;aAC3C,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,KAAa,EAAE,KAAa,EAAE,KAAK,GAAG,EAAE;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,KAAK,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;YACtC,MAAM,OAAO,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;YAChD,IAAI,OAAO,KAAK,CAAC;gBAAE,SAAS,CAAC,uCAAuC;YACpE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACrI,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,EAAU,EAAE,IAAY;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,wEAAwE;QAClF,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5C,yGAAyG;QACzG,uGAAuG;QACvG,qGAAqG;QACrG,wDAAwD;QACxD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvF,KAAK,CAAC,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC;QACrB,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kCAAkC;IACxG,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,EAAU;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED;wFACoF;IACpF,mBAAmB,CAAC,KAAa;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9C,iGAAiG;QACjG,sGAAsG;QACtG,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC,CAAC;IACN,CAAC;IAED,iGAAiG;IACjG,sBAAsB,CAAC,KAAa;QAClC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,mEAAmE;IACnE,sBAAsB,CAAC,KAAa,EAAE,MAAc;QAClD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,QAAQ,CAAC,KAAa,EAAE,GAAa;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC,CAAC;IACR,CAAC;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,wGAAwG;IACxG,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,qGAAqG;IACrG,sGAAsG;IACtG,8FAA8F;IAC9F,KAAK,MAAM,KAAK,IAAI,sBAAsB,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAE,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,+DAA+D;IAC7F,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;QACvC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACzB,uGAAuG;QACvG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;yFACyF;AACzF,MAAM,sBAAsB,GAAuC;IACjE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC3D,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;CAC5B,CAAC;AAEF;;;;;GAKG;AACH,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,oBAAoB;IACxF,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;IAC3E,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;IAClG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,0GAA0G;AAC1G,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC;AAsCD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAkC;IACpE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpH,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,iHAAiH;IACjH,IAAI,UAAyB,CAAC;IAC9B,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC9B,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;SAAM,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3E,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,qGAAqG;IACrG,gGAAgG;IAChG,mGAAmG;IACnG,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM;YAAE,aAAa,CAAC,GAAG,CAAC,CAAC;QAC7F,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACvF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;AAClE,CAAC;AAED;;wFAEwF;AACxF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AAE3C;;;;yFAIyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAsB,CAAC,aAAa,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAkC,EAAE,KAAa;IAClF,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,KAAK,GAAG,gBAAgB,EAAE,CAAC;QAC7B,sDAAsD;QACtD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,GAAG,GAAG,gBAAgB,CAAC;QAC3B,oCAAoC;QACpC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,GAAG,EAAE,CAAC;QACR,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnD,OAAO,GAAG,GAAG,IAAI,sBAAsB,KAAK,GAAG,GAAG,GAAG,CAAC;IACxD,CAAC;IACD,wGAAwG;IACxG,wGAAwG;IACxG,wGAAwG;IACxG,kGAAkG;IAClG,OAAO,uBAAuB,KAAK,OAAO,qBAAqB,CAAC,OAAO,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,kBAAkB,CAAC;AACvH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA4E;IAE5E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,SAAS,CAAC,2EAA2E;QACnG,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,KAAK,GAAG,gBAAgB,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACzC,IAAI,GAAG,GAAG,gBAAgB,CAAC;YAC3B,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI;gBAAE,GAAG,EAAE,CAAC;YACpD,OAAO,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,KAAK,GAAG,GAAG,GAAG,CAAC;QACzF,CAAC;QACD,uGAAuG;QACvG,wGAAwG;QACxG,qGAAqG;QACrG,QAAQ,CAAC,IAAI,CACX,gBAAgB,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,MAAM;YAChF,GAAG,qBAAqB,CAAC,OAAO,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,IAAI;YAC/D,UAAU,CACb,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,kBAAkB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;AACjE,CAAC;AAED,MAAM,oBAAoB,GACxB,8FAA8F;IAC9F,4FAA4F;IAC5F,kGAAkG;IAClG,oGAAoG;IACpG,iGAAiG;IACjG,+FAA+F,CAAC;AAElG;;;2FAG2F;AAC3F,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAE,KAAa;IAChE,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,QAAQ,EAAE,6FAA6F;QAC7G,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,6FAA6F;QAClH,WAAW,EACT,2FAA2F;YAC3F,6FAA6F;YAC7F,4FAA4F;YAC5F,sEAAsE;QACxE,MAAM,EAAE,MAAM,EAAE,wGAAwG;QACxH,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,4EAA4E,EAAE,CAAC;SAClH,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,KAAK,GAAG,MAAM,CAAE,IAA4B,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACvE,4FAA4F;YAC5F,yFAAyF;YACzF,6FAA6F;YAC7F,0CAA0C;YAC1C,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;gBACnE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrC,8FAA8F;gBAC9F,2FAA2F;gBAC3F,oEAAoE;gBACpE,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,IAAI;oBAClB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACtG,CAAC,CAAC,EAAE,CAAC;gBACP,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC9F,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,MAAM,mBAAmB,OAAO,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClI,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YAClI,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACzF,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACjD,yFAAyF;YACzF,6FAA6F;YAC7F,2FAA2F;YAC3F,6CAA6C;YAC7C,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB;gBAC1F,2FAA2F;gBAC3F,yFAAyF;gBACzF,4FAA4F;gBAC5F,+EAA+E;gBAC/E,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;aAC1D,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAkB,EAClB,KAAa,EACb,YAA4D;IAE5D,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,UAAU,EAAE,6FAA6F;QAC/G,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,oEAAoE;QAC3F,8GAA8G;QAC9G,oGAAoG;QACpG,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,oBAAoB;QACjC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,+DAA+D,EAAE,CAAC;YACnG,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,6EAA6E,EAAE,CAAC,CAAC;YAChI,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sFAAsF,EAAE,CAAC,CAAC;SACjJ,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,CAAC,GAAG,IAAiE,CAAC;YAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,EAAE,OAAO,EAAE,kCAAkC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;YACjF,CAAC;YACD,mGAAmG;YACnG,iGAAiG;YACjG,6FAA6F;YAC7F,8DAA8D;YAC9D,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,GAAW,EAAsB,EAAE;gBAC9D,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzC,CAAC,CAAC;YACF,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAChD,qGAAqG;YACrG,uGAAuG;YACvG,kGAAkG;YAClG,IAAI,EAAiB,CAAC;YACtB,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,EAAE,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9E,CAAC;iBAAM,CAAC;gBACN,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACvC,CAAC;YACD,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,gGAAgG;YAChG,kGAAkG;YAClG,sGAAsG;YACtG,kGAAkG;YAClG,uGAAuG;YACvG,OAAO;gBACL,OAAO,EAAE,eAAe,IAAI,EAAE;gBAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aAC5H,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/core/message-utils.d.ts

@@ -0,0 +1,7 @@
+import type { AgentMessage } from "../internal/harness.js";
+/** Read the (possibly absent) `role` off an AgentMessage defensively — the union doesn't expose it
+ *  uniformly, so context passes narrow by role with a single cast in one place. */
+export declare function messageRole(m: AgentMessage): string | undefined;
+/** True if the message is a tool-result message (shared by the context-edit and context-guard passes). */
+export declare function isToolResult(m: AgentMessage): boolean;
+//# sourceMappingURL=message-utils.d.ts.map

package/dist/core/message-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-utils.d.ts","sourceRoot":"","sources":["../../src/core/message-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D;mFACmF;AACnF,wBAAgB,WAAW,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED,0GAA0G;AAC1G,wBAAgB,YAAY,CAAC,CAAC,EAAE,YAAY,GAAG,OAAO,CAErD"}

package/dist/core/message-utils.js

@@ -0,0 +1,10 @@
+/** Read the (possibly absent) `role` off an AgentMessage defensively — the union doesn't expose it
+ *  uniformly, so context passes narrow by role with a single cast in one place. */
+export function messageRole(m) {
+    return m.role;
+}
+/** True if the message is a tool-result message (shared by the context-edit and context-guard passes). */
+export function isToolResult(m) {
+    return messageRole(m) === "toolResult";
+}
+//# sourceMappingURL=message-utils.js.map

package/dist/core/message-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-utils.js","sourceRoot":"","sources":["../../src/core/message-utils.ts"],"names":[],"mappings":"AAEA;mFACmF;AACnF,MAAM,UAAU,WAAW,CAAC,CAAe;IACzC,OAAQ,CAAuB,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,YAAY,CAAC,CAAe;IAC1C,OAAO,WAAW,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC;AACzC,CAAC"}

package/dist/core/oracle-isolation.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Gate-1 — oracleIsolation (design/77 §1): the CORE SEAM + assertion for the out-of-process grader boundary,
+ * the 4th auto-promote gate. The whole auto-promote tier is **mandate-OFF** (design/77 §5/§7); this file only
+ * makes the seam EXIST so that auto-accept (`fixed`) becomes implementable once the SERVICE supplies the real
+ * isolated grader environment (an E2B/Kata container). SAFE-tier stays `candidate_only` regardless.
+ *
+ * **What core owns vs what the service owns** (mirrors {@link import("./remote-env.js").RemoteExecutionEnv} —
+ * core owns the seam shape; service owns the backend):
+ * - CORE: the {@link GraderEnv} provenance contract, the {@link assertOracleIsolation} assertion (3 fail-closed
+ *   checks), and the {@link OracleIsolationVerdict}.isolationClass tiering that CAPS a non-isolated grader at
+ *   `candidate_only` (never auto-accept).
+ * - SERVICE: the actually-isolated grader env (E2B microVM with `capabilities.isolation === true`), minted by
+ *   the trusted control plane through {@link import("./types.js").RunnerDeps.graderEnvFactory}.
+ *
+ * 🔴 **Honest residual (design/77 §1 Residual + §9):** the bash write-probe is point-in-time and
+ * necessary-not-sufficient — core, running *inside the worker*, cannot prove a mount is truly immutable (it
+ * only observes that one write failed once; a candidate can `mount -o remount,rw` after the probe). And
+ * `capabilities.isolation` is self-declared by the adapter (a lying adapter can claim `true`). The REAL
+ * protection is the OUT-OF-PROCESS structural boundary (check B) on a control-plane-provisioned adapter — which
+ * is exactly why auto-promote stays mandate-OFF until the deployment contract is verified end-to-end (Slice-3).
+ */
+import type { ExecutionEnv } from "../internal/harness.js";
+/**
+ * The verdict of {@link assertOracleIsolation}. `protected` is the fail-closed AND of all three checks
+ * (identity ∧ structural-class-acceptable ∧ write-probe). `isolationClass` is the load-bearing tiering that the
+ * (OFF) auto-accept path consults:
+ * - `"out_of_process"` — the grader is a real isolated sandbox (a remote env with `capabilities.isolation ===
+ *   true`). ONLY this class is eligible for auto-accept (still mandate-OFF).
+ * - `"in_process_probe_only"` — the grader is non-remote or non-isolated; the bash write-probe is the only
+ *   signal and it is necessary-not-sufficient → this CAPS the run at `candidate_only`, NEVER auto-accept (the
+ *   2-of-3 asymmetry, design/77 §1/§6: the oracle axis's real protection is the out-of-process boundary).
+ */
+export interface OracleIsolationVerdict {
+    protected: boolean;
+    isolationClass: "out_of_process" | "in_process_probe_only";
+    /** Set when `protected:false` (or when the class is downgraded) — the fail-closed reason, for observability. */
+    reason?: string;
+}
+/**
+ * The isolated grader environment, provisioned by the trusted control plane. `provenance` is settable ONLY at
+ * the {@link import("./types.js").RunnerDeps.graderEnvFactory} call site — it is NEVER reconstructed from
+ * worker-visible state (a worker that could mint a `{provenance:'control_plane'}` object would defeat the whole
+ * gate). `immutableOraclePaths` are the paths the oracle/spec is supposed to live behind (e.g. a hidden held-out
+ * test dir) that the worker must not be able to corrupt; the bash write-probe (check C) targets them.
+ */
+export interface GraderEnv {
+    /** The isolated env the oracle grades in (service-provisioned; a {@link import("./remote-env.js").RemoteExecutionEnv} in production). */
+    env: ExecutionEnv;
+    /** Paths the oracle must be protected behind — probed for writability through the WORKER's bash bypass surface. */
+    immutableOraclePaths: string[];
+    /** Provenance brand — ONLY the control-plane factory sets this. Never derived from worker state. */
+    provenance: "control_plane";
+}
+/** Options for {@link assertOracleIsolation}. */
+export interface AssertOracleIsolationOptions {
+    /** Abort the write-probe(s); an abort/timeout during the probe is fail-closed (protected:false). */
+    signal?: AbortSignal;
+}
+/**
+ * Assert that the grader env is isolated from the worker env so a positive oracle verdict is trustworthy
+ * (design/77 §1, the 4th auto-promote gate). THREE fail-closed checks — ANY failure ⇒ `protected:false`:
+ *
+ * **(A) IDENTITY** — `grader.env !== workerEnv` (reference inequality); when BOTH are remote envs, also require
+ * distinct `workspaceHandle().sandboxId`. A grader that IS the worker env (or the same sandbox) is grading in
+ * the very env the worker can corrupt.
+ *
+ * **(B) STRUCTURAL CLASS (the real protection)** — when `grader.env` is a {@link import("./remote-env.js").RemoteExecutionEnv}
+ * with `capabilities.isolation === true` ({@link isIsolated}, fail-closed default false) → `isolationClass =
+ * "out_of_process"` (the only class the OFF auto-accept path may consider). A non-remote / non-isolated grader →
+ * `"in_process_probe_only"`, which CAPS the run at `candidate_only` — never auto-accept. Note: a non-isolated
+ * grader is NOT itself a `protected:false` (the probe can still pass and the run can still be a legitimate
+ * `candidate_only`); the class is what gates auto-accept (the 2-of-3 asymmetry).
+ *
+ * **(C) BASH WRITE-PROBE (necessary-not-sufficient, cheap early signal)** — for each `immutableOraclePath`, run
+ * a write probe through the WORKER env's `exec` (the bash bypass surface — see {@link probeCommand}), against
+ * the path canonicalized via {@link canonicalizeTarget}. The probe PASSES only if the write returns a non-zero
+ * exit code or an exec error (read-only mount / permission denied / not supported). Any SUCCESS (RC 0) ⇒ the
+ * oracle dir is writable from the worker ⇒ `protected:false`. A probe THROW / abort / timeout ⇒ fail-closed
+ * (`protected:false`).
+ *
+ * The verdict is fail-closed: the function itself never throws — a thrown probe is caught and mapped to
+ * `protected:false` (so a flaky env can't turn into a silent pass).
+ */
+export declare function assertOracleIsolation(workerEnv: ExecutionEnv, grader: GraderEnv, opts?: AssertOracleIsolationOptions): Promise<OracleIsolationVerdict>;
+//# sourceMappingURL=oracle-isolation.d.ts.map

package/dist/core/oracle-isolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oracle-isolation.d.ts","sourceRoot":"","sources":["../../src/core/oracle-isolation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAI3D;;;;;;;;;GASG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,gBAAgB,GAAG,uBAAuB,CAAC;IAC3D,gHAAgH;IAChH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,yIAAyI;IACzI,GAAG,EAAE,YAAY,CAAC;IAClB,mHAAmH;IACnH,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,oGAAoG;IACpG,UAAU,EAAE,eAAe,CAAC;CAC7B;AAED,iDAAiD;AACjD,MAAM,WAAW,4BAA4B;IAC3C,oGAAoG;IACpG,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAmBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,YAAY,EACvB,MAAM,EAAE,SAAS,EACjB,IAAI,CAAC,EAAE,4BAA4B,GAClC,OAAO,CAAC,sBAAsB,CAAC,CAwDjC"}

package/dist/core/oracle-isolation.js

@@ -0,0 +1,121 @@
+/**
+ * Gate-1 — oracleIsolation (design/77 §1): the CORE SEAM + assertion for the out-of-process grader boundary,
+ * the 4th auto-promote gate. The whole auto-promote tier is **mandate-OFF** (design/77 §5/§7); this file only
+ * makes the seam EXIST so that auto-accept (`fixed`) becomes implementable once the SERVICE supplies the real
+ * isolated grader environment (an E2B/Kata container). SAFE-tier stays `candidate_only` regardless.
+ *
+ * **What core owns vs what the service owns** (mirrors {@link import("./remote-env.js").RemoteExecutionEnv} —
+ * core owns the seam shape; service owns the backend):
+ * - CORE: the {@link GraderEnv} provenance contract, the {@link assertOracleIsolation} assertion (3 fail-closed
+ *   checks), and the {@link OracleIsolationVerdict}.isolationClass tiering that CAPS a non-isolated grader at
+ *   `candidate_only` (never auto-accept).
+ * - SERVICE: the actually-isolated grader env (E2B microVM with `capabilities.isolation === true`), minted by
+ *   the trusted control plane through {@link import("./types.js").RunnerDeps.graderEnvFactory}.
+ *
+ * 🔴 **Honest residual (design/77 §1 Residual + §9):** the bash write-probe is point-in-time and
+ * necessary-not-sufficient — core, running *inside the worker*, cannot prove a mount is truly immutable (it
+ * only observes that one write failed once; a candidate can `mount -o remount,rw` after the probe). And
+ * `capabilities.isolation` is self-declared by the adapter (a lying adapter can claim `true`). The REAL
+ * protection is the OUT-OF-PROCESS structural boundary (check B) on a control-plane-provisioned adapter — which
+ * is exactly why auto-promote stays mandate-OFF until the deployment contract is verified end-to-end (Slice-3).
+ */
+import { isRemoteExecutionEnv, isIsolated } from "./remote-env.js";
+import { canonicalizeTarget } from "../tools/fs/safety.js";
+/**
+ * The literal text a write probe runs through the WORKER's bash path against an immutable oracle path. We
+ * deliberately route the write through `exec` (a shell), NOT `writeFile`, because the design/72 §2.1
+ * sensitive-path policy guards the typed fs tools but does NOT guard `bash` — bash is the bypass surface a
+ * compromised worker would use, so it is the surface the probe must test. `: >> "<path>/.oracle-probe"` is a
+ * no-content append-create: it FAILS (non-zero RC) on a read-only mount / permission-denied dir, and SUCCEEDS
+ * (RC 0) on a writable one. We clean the probe file up best-effort in the same command (`; rm -f ...`) but the
+ * VERDICT is taken from the WRITE's exit, which we capture separately by `&&`-chaining nothing after it.
+ */
+function probeCommand(canonOraclePath) {
+    // Single-quote the path for the shell; a single quote inside a path is escaped as '\'' (POSIX). Oracle paths
+    // are control-plane data, but defend anyway so a crafted path can't break out of the quoting.
+    const q = `'${canonOraclePath.replace(/'/g, `'\\''`)}'`;
+    // `2>/dev/null` so a permission-denied message doesn't pollute the captured output; the EXIT CODE is the signal.
+    return `touch -- ${q}/.oracle-isolation-probe 2>/dev/null`;
+}
+/**
+ * Assert that the grader env is isolated from the worker env so a positive oracle verdict is trustworthy
+ * (design/77 §1, the 4th auto-promote gate). THREE fail-closed checks — ANY failure ⇒ `protected:false`:
+ *
+ * **(A) IDENTITY** — `grader.env !== workerEnv` (reference inequality); when BOTH are remote envs, also require
+ * distinct `workspaceHandle().sandboxId`. A grader that IS the worker env (or the same sandbox) is grading in
+ * the very env the worker can corrupt.
+ *
+ * **(B) STRUCTURAL CLASS (the real protection)** — when `grader.env` is a {@link import("./remote-env.js").RemoteExecutionEnv}
+ * with `capabilities.isolation === true` ({@link isIsolated}, fail-closed default false) → `isolationClass =
+ * "out_of_process"` (the only class the OFF auto-accept path may consider). A non-remote / non-isolated grader →
+ * `"in_process_probe_only"`, which CAPS the run at `candidate_only` — never auto-accept. Note: a non-isolated
+ * grader is NOT itself a `protected:false` (the probe can still pass and the run can still be a legitimate
+ * `candidate_only`); the class is what gates auto-accept (the 2-of-3 asymmetry).
+ *
+ * **(C) BASH WRITE-PROBE (necessary-not-sufficient, cheap early signal)** — for each `immutableOraclePath`, run
+ * a write probe through the WORKER env's `exec` (the bash bypass surface — see {@link probeCommand}), against
+ * the path canonicalized via {@link canonicalizeTarget}. The probe PASSES only if the write returns a non-zero
+ * exit code or an exec error (read-only mount / permission denied / not supported). Any SUCCESS (RC 0) ⇒ the
+ * oracle dir is writable from the worker ⇒ `protected:false`. A probe THROW / abort / timeout ⇒ fail-closed
+ * (`protected:false`).
+ *
+ * The verdict is fail-closed: the function itself never throws — a thrown probe is caught and mapped to
+ * `protected:false` (so a flaky env can't turn into a silent pass).
+ */
+export async function assertOracleIsolation(workerEnv, grader, opts) {
+    // ── (B) STRUCTURAL CLASS first (it decides the auto-accept ceiling regardless of the probe outcome). A
+    // remote+isolated grader is "out_of_process"; anything else is "in_process_probe_only" (caps candidate_only).
+    const isolationClass = isIsolated(grader.env)
+        ? "out_of_process"
+        : "in_process_probe_only";
+    // ── (A) IDENTITY: reference inequality, plus distinct sandboxId when both are remote.
+    if (grader.env === workerEnv) {
+        return { protected: false, isolationClass, reason: "grader.env is the SAME object as workerEnv (no isolation)" };
+    }
+    if (isRemoteExecutionEnv(grader.env) && isRemoteExecutionEnv(workerEnv)) {
+        let graderId;
+        let workerId;
+        try {
+            graderId = grader.env.workspaceHandle().sandboxId;
+            workerId = workerEnv.workspaceHandle().sandboxId;
+        }
+        catch (e) {
+            // workspaceHandle() should be synchronous data the env already holds; if it throws, fail-closed.
+            return { protected: false, isolationClass, reason: `workspaceHandle() threw during identity check: ${String(e?.message ?? e)}` };
+        }
+        if (graderId === workerId) {
+            return { protected: false, isolationClass, reason: `grader and worker share sandboxId "${graderId}" (no isolation)` };
+        }
+    }
+    // ── (C) BASH WRITE-PROBE: run a write against each immutable oracle path through the WORKER's bash bypass
+    // surface (NOT writeFile — sensitive-path-policy doesn't guard bash). PASS only on non-zero RC / exec error.
+    for (const oraclePath of grader.immutableOraclePaths) {
+        if (opts?.signal?.aborted) {
+            return { protected: false, isolationClass, reason: "isolation probe aborted before completing" };
+        }
+        let writable;
+        try {
+            // Canonicalize via the WORKER env (the path is probed as the worker would reach it — resolves symlinks so
+            // a symlinked oracle dir can't hide a writable real target). A canonicalization failure is fail-closed.
+            const canon = await canonicalizeTarget(workerEnv, oraclePath, opts?.signal);
+            if (!canon.ok) {
+                return { protected: false, isolationClass, reason: `cannot canonicalize oracle path "${oraclePath}": ${canon.message}` };
+            }
+            const res = await workerEnv.exec(probeCommand(canon.key), { abortSignal: opts?.signal });
+            // The oracle dir is WRITABLE iff the probe ran AND exited 0. An exec error (could not run / timeout /
+            // transport) or a non-zero exit means the write was refused → that path is protected (for this check).
+            writable = res.ok && res.value.exitCode === 0;
+        }
+        catch (e) {
+            // A throw is NOT a pass — fail-closed (a flaky/hung env must never silently become "protected").
+            return { protected: false, isolationClass, reason: `isolation probe threw for "${oraclePath}": ${String(e?.message ?? e)}` };
+        }
+        if (writable) {
+            return { protected: false, isolationClass, reason: `oracle path "${oraclePath}" is WRITABLE from the worker env (probe wrote it)` };
+        }
+    }
+    // All three checks passed. `protected:true`; the isolationClass still gates whether auto-accept (OFF) is even
+    // eligible — `in_process_probe_only` is a legitimate `protected:true` but caps the run at candidate_only.
+    return { protected: true, isolationClass };
+}
+//# sourceMappingURL=oracle-isolation.js.map

package/dist/core/oracle-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oracle-isolation.js","sourceRoot":"","sources":["../../src/core/oracle-isolation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAyC3D;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,eAAuB;IAC3C,6GAA6G;IAC7G,8FAA8F;IAC9F,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IACxD,iHAAiH;IACjH,OAAO,YAAY,CAAC,sCAAsC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAuB,EACvB,MAAiB,EACjB,IAAmC;IAEnC,wGAAwG;IACxG,8GAA8G;IAC9G,MAAM,cAAc,GAA6C,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;QACrF,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,uBAAuB,CAAC;IAE5B,uFAAuF;IACvF,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,2DAA2D,EAAE,CAAC;IACnH,CAAC;IACD,IAAI,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;QACxE,IAAI,QAA4B,CAAC;QACjC,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC;YAClD,QAAQ,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC;QACnD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,iGAAiG;YACjG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,kDAAkD,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9I,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,sCAAsC,QAAQ,kBAAkB,EAAE,CAAC;QACxH,CAAC;IACH,CAAC;IAED,2GAA2G;IAC3G,6GAA6G;IAC7G,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACrD,IAAI,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;QACnG,CAAC;QACD,IAAI,QAAiB,CAAC;QACtB,IAAI,CAAC;YACH,0GAA0G;YAC1G,wGAAwG;YACxG,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,oCAAoC,UAAU,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3H,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACzF,sGAAsG;YACtG,uGAAuG;YACvG,QAAQ,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,iGAAiG;YACjG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,8BAA8B,UAAU,MAAM,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1I,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,UAAU,oDAAoD,EAAE,CAAC;QACtI,CAAC;IACH,CAAC;IAED,8GAA8G;IAC9G,0GAA0G;IAC1G,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAC7C,CAAC"}

package/dist/core/permission-rules.d.ts

@@ -0,0 +1,102 @@
+/**
+ * design/127 — **参数级权限规则 DSL**(CC 2.1.201 追平批 γ)。声明式规则字符串 → {@link ToolPolicy}
+ * 编译器:`"Tool"`(裸)/ `"Tool(param:pattern)"`(参数级,`*` 通配全串锚定)。CC ground truth
+ * 行号级:解析 `Lh` :55214 · 通配 `ZMr` :55196 · 参数级 matcher `gnn` :595123 · 评估序 `G1e` :595272。
+ *
+ * 架构边界(design/127 §0,重判过的「core 不长 rule interpreter」):这是纯函数式、opt-in、零
+ * run-loop 介入的「声明式数据→ToolPolicy」工厂(`createCoarseCommandNamePolicy` 同形态先例)。
+ * core 不读设置文件、不管 source 层级合并 —— Settings-loader 把各层合并成**单一规则表**后编译
+ * **一个** policy(不要按层各编译再组合:combinePolicies 的 fold 里 ask 胜 allow,跨 policy 的
+ * 显式 allow 规则会被另一 policy 的 ask 吞掉 —— codex 127 审 B3)。
+ *
+ * 🔴 与 CC 的三处有意差(design/127 r2):
+ *  - CC 参数级 generic 道无 allow lane(gnn 只有 deny/ask)—— 我们同样:`allow` + 参数级 content =
+ *    无效规则;auto-allow 只来自裸工具规则。
+ *  - CC 对尾缀垃圾静默降级为裸名(Lh `n !== len-1`)—— `parsePermissionRule` 保持 CC parity,但
+ *    **工厂 validator strict**:降级即 invalid(fail-fast 世界观,写错的规则不能静默变宽)。
+ *  - 已知主字段参数规则(如 `Bash(command:…)`)默认 **reject**:通配是 trim 后**整串 lexical**
+ *    匹配,不是 shell AST / 前缀 lane —— `Bash(command:git push*)` 匹配不了 `cd /x && git push`,
+ *    「以为挡住了」比没挡更危险(codex 127 审 M2)。`primaryFieldGeneric:"allow-lexical"` 显式解锁。
+ */
+import type { ToolPolicy } from "./tool-policy.js";
+/** [K-PLATFORM-SWEEP] MINOR#11: Bash's REAL non-primary arg names, accepted as generic param rules
+ *  (`Bash(timeout:...)`). Exported SOLELY so a lockstep test can assert it against the live Bash tool
+ *  schema — a schema param added without updating this set would compile to silently-never-matching
+ *  rules (the exact drift class the Opus 复审 m note warned about). */
+export declare const BASH_GENERIC_PARAMS: ReadonlySet<string>;
+export interface PermissionRule {
+    /** CC 语法:`"Tool"` 或 `"Tool(param:pattern)"`。`Tool()`/`Tool(*)` 归一为裸规则;括号可 `\(`/`\)` 转义。 */
+    rule: string;
+    behavior: "deny" | "ask" | "allow";
+    /** Provenance(codex 127 审 M7):进 deny/ask 的 message 供审计(e.g. `"policySettings"`)。层级
+     *  优先级/tighten-only 语义在 Settings-loader,不在这里。 */
+    source?: string;
+}
+/** Parse result — CC `Lh` parity (INCLUDING the silent bare-name downgrade on malformed parens; the
+ *  factory validator is strict on top of this, see module doc). */
+export interface ParsedPermissionRule {
+    toolName: string;
+    ruleContent?: string;
+}
+export interface PermissionRuleIssue {
+    rule: string;
+    /** `invalid.*` = 语法/语义错;`unsupported.*` = CC 合法但 v1 不支持的 lane(codex 127 审 B5:独立
+     *  分类,绝不静默 no-op —— `Bash(npm run:*)` 被当 generic 参数规则接受后永不匹配是最危险的失败形态)。 */
+    code: "invalid.empty_tool" | "invalid.paren" | "invalid.param_split" | "invalid.allow_param_rule" | "invalid.primary_field" | "invalid.cap_exceeded" | "unsupported.bash_prefix" | "unsupported.file_glob" | "unsupported.mcp_paren";
+    message: string;
+}
+export interface PermissionRuleCaps {
+    maxRules: number;
+    maxRuleLength: number;
+    maxPatternLength: number;
+    maxStars: number;
+    /** Scalar arg values longer than this are NOT matched textually — the rule **fail-closes** to its
+     *  lane (a deny rule targeting an oversized value denies; an ask rule asks). 租户规则 × 模型巨串
+     *  的热路径成本上界(codex 127 审 M6)。 */
+    maxScalarValueChars: number;
+}
+export interface PermissionRulePolicyOptions {
+    /** Invalid/unsupported rules: `"throw"`(default — 部署作者写错要立刻知道)aggregates ALL issues
+     *  into one error; `"skip"` drops them (pair with {@link validatePermissionRules} for a report, and/or
+     *  supply {@link onIssue}). Exception(codex 实现审 M3):`invalid.cap_exceeded` on the WHOLE rule set
+     *  (maxRules) throws EVEN under `"skip"` — skipping it would compile an EMPTY table and fail-open. */
+    onInvalidRule?: "throw" | "skip";
+    /** Called once per dropped rule under `"skip"` (audit surface — silent drops are how a deployment
+     *  discovers, months later, that its deny never existed). Default: one aggregated `console.warn`. */
+    onIssue?: (issue: PermissionRuleIssue) => void;
+    /** What the policy returns when NO rule matches. Default `"allow"` = 本 policy 无意见(组合语义)。
+     *  default-closed 部署用 `"ask"`/`"deny"` —— 必须在这 INSIDE the policy(codex 127 审 B3:链尾
+     *  ask policy 会在 fold 里吞掉本 policy 的显式 allow)。 */
+    defaultAction?: "allow" | "ask" | "deny";
+    /** 已知主字段参数规则(`Bash(command:…)` 等)的处置。默认 `"reject"`(整串 lexical ≠ 前缀/AST,
+     *  假安全感);`"allow-lexical"` 显式接受并按 generic 语义匹配。 */
+    primaryFieldGeneric?: "reject" | "allow-lexical";
+    caps?: Partial<PermissionRuleCaps>;
+}
+/**
+ * Parse one rule string — CC `Lh` :55214 parity, including its lenient downgrades (malformed parens /
+ * trailing garbage ⇒ the WHOLE string becomes the bare tool name). The strict complement lives in
+ * {@link validatePermissionRules} — use that (or the factory) to refuse the downgrades.
+ */
+export declare function parsePermissionRule(rule: string): ParsedPermissionRule;
+/**
+ * Linear-time `*` glob match (design/127 M6: NOT a RegExp — patterns may come from tenant-supplied
+ * Settings layers; the classic two-pointer walk has zero ReDoS surface and the same semantics as CC's
+ * anchored `^…$`+dotAll construction: every non-`*` char is literal, `*` spans anything incl. newlines).
+ */
+export declare function wildcardMatch(pattern: string, value: string): boolean;
+/** Dry-run 校验/迁移报告(codex 127 审 B5):不 throw,返回全部 issues(含 `unsupported.*` 分类,
+ *  供从 CC settings 迁移的部署逐条对照)。 */
+export declare function validatePermissionRules(rules: PermissionRule[], opts?: Pick<PermissionRulePolicyOptions, "primaryFieldGeneric" | "caps">): PermissionRuleIssue[];
+/**
+ * Compile declarative permission rules into ONE {@link ToolPolicy} (design/127). Evaluation order
+ * inside the policy (CC `G1e` :595272 isomorph): bare deny → param deny → bare ask → param ask →
+ * bare allow → `defaultAction`. `check()` is idempotent and side-effect-free (combinePolicies 契约);
+ * all parsing/validation happens HERE, the hot path never re-parses.
+ *
+ * ⚠️ Composition note (codex 127 审 B3): an `allow` from this policy is "no objection", NOT a
+ * cross-policy override — another policy's ask/deny still outranks it in the combinePolicies fold.
+ * Express default-closed via `defaultAction`, never via a trailing always-ask policy.
+ */
+export declare function createPermissionRulePolicy(rules: PermissionRule[], opts?: PermissionRulePolicyOptions): ToolPolicy;
+//# sourceMappingURL=permission-rules.d.ts.map

package/dist/core/permission-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-rules.d.ts","sourceRoot":"","sources":["../../src/core/permission-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAqC,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGtF;;;qEAGqE;AACrE,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAuE,CAAC;AAM5H,MAAM,WAAW,cAAc;IAC7B,2FAA2F;IAC3F,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;IACnC;qDACiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;mEACmE;AACnE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb;+EAC2E;IAC3E,IAAI,EACA,oBAAoB,GACpB,eAAe,GACf,qBAAqB,GACrB,0BAA0B,GAC1B,uBAAuB,GACvB,sBAAsB,GACtB,yBAAyB,GACzB,uBAAuB,GACvB,uBAAuB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB;;oCAEgC;IAChC,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAUD,MAAM,WAAW,2BAA2B;IAC1C;;;0GAGsG;IACtG,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC;yGACqG;IACrG,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC/C;;qDAEiD;IACjD,aAAa,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IACzC;uDACmD;IACnD,mBAAmB,CAAC,EAAE,QAAQ,GAAG,eAAe,CAAC;IACjD,IAAI,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACpC;AAiCD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAWtE;AAMD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAqBrE;AAgKD;iCACiC;AACjC,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,cAAc,EAAE,EACvB,IAAI,CAAC,EAAE,IAAI,CAAC,2BAA2B,EAAE,qBAAqB,GAAG,MAAM,CAAC,GACvE,mBAAmB,EAAE,CAGvB;AAoCD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,IAAI,CAAC,EAAE,2BAA2B,GAAG,UAAU,CA4DlH"}