@tangle-network/agent-app 0.44.1 → 0.44.3

package/dist/work-product/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/work-product/service.ts","../../src/work-product/provenance.ts","../../src/work-product/tools.ts","../../src/work-product/route.ts"],"sourcesContent":["/**\n * The guarded work-product status machine — the `/missions` service PATTERN\n * (load → validate against a transition table → CAS-write guarded on what was\n * read → audit event) over {@link WorkProductStorePort}. Deliberately NOT a\n * reuse of the mission service: missions' cursor/plan/budget machinery does\n * not apply here, and the six-status review machine is a different contract.\n *\n * Concurrency contract: a scope's draft is driven by a single serialized turn\n * owner, so real contention is rare. The service is the typed guard layer,\n * not a serializer — every mutation re-reads the record and CAS-writes\n * guarded on the `{status, version}` it read. A guard miss surfaces as\n * `{ succeeded: false, conflict: true }` (retryable: re-read and re-apply),\n * never a silent clobber.\n */\n\nimport {\n  unresolvedBlockingExceptions,\n  type EvidenceEntry,\n  type ExceptionEntry,\n  type QualityCheck,\n  type WorkProductArtifact,\n  type WorkProductAuditEvent,\n  type WorkProductPatch,\n  type WorkProductProvenance,\n  type WorkProductRecord,\n  type WorkProductStatus,\n  type WorkProductStorePort,\n  type WorkProductVersionEntry,\n} from './types'\n\n/** Discriminated outcome for guarded operations — `conflict` distinguishes a\n *  lost guarded race (retryable) from a logic rejection (illegal edge,\n *  missing row — deterministic, never retried). */\nexport type WorkProductOutcome<T> =\n  | { succeeded: true; value: T }\n  | { succeeded: false; error: string; conflict: boolean }\n\n// Legal status transitions. A target absent from a source's set is rejected\n// by the guarded helpers. `superseded` is terminal.\nconst WORK_PRODUCT_TRANSITIONS: Record<WorkProductStatus, ReadonlySet<WorkProductStatus>> = {\n  draft: new Set<WorkProductStatus>(['blocked', 'ready']),\n  blocked: new Set<WorkProductStatus>(['draft']),\n  ready: new Set<WorkProductStatus>(['changes_requested', 'approved', 'superseded']),\n  changes_requested: new Set<WorkProductStatus>(['draft', 'superseded']),\n  approved: new Set<WorkProductStatus>(['superseded']),\n  superseded: new Set<WorkProductStatus>(),\n}\n\n/** Whether a legal edge exists from `from` to `to` in the review machine. */\nexport function canTransitionWorkProduct(from: WorkProductStatus, to: WorkProductStatus): boolean {\n  return WORK_PRODUCT_TRANSITIONS[from].has(to)\n}\n\n/** Statuses a work product can never leave. */\nexport function isWorkProductTerminal(status: WorkProductStatus): boolean {\n  return WORK_PRODUCT_TRANSITIONS[status].size === 0\n}\n\n/** Define the input required to create a new draft work product row */\nexport interface CreateWorkProductInput {\n  /** Explicit row id — omit to use the service's generator. The MODEL never\n   *  supplies ids; this is for deterministic server-side creation. */\n  id?: string\n  workspaceId: string\n  threadId: string | null\n  scopeKey: string\n  /** Version this draft will become; default 1. The tool layer passes\n   *  `last reviewed version + 1` when a scope is re-engaged after approval. */\n  version?: number\n  provenance: WorkProductProvenance\n  /** Opaque product-column values handed VERBATIM to the store's insert. */\n  extras?: Record<string, unknown>\n}\n\n/** Payload for the draft→ready submit transition */\nexport interface SubmitWorkProductInput {\n  artifact: WorkProductArtifact\n  checks: QualityCheck[]\n  provenance: WorkProductProvenance\n  /** Frozen snapshot ref of this version's body for the history entry;\n   *  defaults to `artifact.path`. */\n  artifactPath?: string\n}\n\n/** Reviewer verdict payload for the ready→approved / ready→changes_requested transition */\nexport interface WorkProductVerdictInput {\n  verdict: 'approve' | 'request_changes'\n  reviewedBy: string\n  note?: string\n}\n\n/** Guarded mutation surface over the work-product store */\nexport interface WorkProductService {\n  create(input: CreateWorkProductInput): Promise<WorkProductRecord>\n  get(id: string): Promise<WorkProductRecord | null>\n  /** The scope's open accumulator row (`draft`/`blocked`), or null. */\n  openDraft(workspaceId: string, scopeKey: string): Promise<WorkProductRecord | null>\n  /** The scope's `changes_requested` row awaiting its correction turn, or null. */\n  awaitingCorrection(workspaceId: string, scopeKey: string): Promise<WorkProductRecord | null>\n  /** The scope's `ready` row awaiting review, or null. */\n  awaitingReview(workspaceId: string, scopeKey: string): Promise<WorkProductRecord | null>\n  /** `max(version over the scope's approved/superseded rows) + 1` — the\n   *  version a fresh draft for the scope should carry. */\n  nextVersion(workspaceId: string, scopeKey: string): Promise<number>\n  /** Re-open a `changes_requested` row as the next draft: version bumps +1\n   *  and the correction turn accumulates into the same scope row. */\n  reopen(id: string): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** Merge evidence entries by id (same id replaces — the agent can correct\n   *  itself mid-turn). Legal only while `draft`/`blocked`. */\n  upsertEvidence(id: string, entries: readonly EvidenceEntry[]): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** Merge exception entries by id, then reconcile the blocked flag: any\n   *  unresolved blocking entry parks `draft`→`blocked`; resolving the last\n   *  one releases `blocked`→`draft`. */\n  upsertExceptions(id: string, entries: readonly ExceptionEntry[]): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** Persist a checks array without transitioning — how a failed platform\n   *  gate (e.g. evidence_coverage) stays visible on the still-draft row. */\n  recordChecks(id: string, checks: readonly QualityCheck[]): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** The terminal agent call: CAS `draft`→`ready` with artifact + checks +\n   *  provenance, appending the version-history entry. Refuses while an\n   *  unresolved blocking exception exists. */\n  submit(id: string, input: SubmitWorkProductInput): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** Reviewer verdict: CAS `ready`→`approved`/`changes_requested` + history\n   *  entry. Approval also supersedes the scope's prior approved versions so\n   *  exactly one approved version is current per scope. */\n  applyVerdict(id: string, input: WorkProductVerdictInput): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** Explicit replacement: CAS to `superseded` (legal from ready /\n   *  changes_requested / approved). */\n  supersede(id: string): Promise<WorkProductOutcome<WorkProductRecord>>\n}\n\n/** Configuration options for creating a work product service */\nexport interface WorkProductServiceOptions {\n  store: WorkProductStorePort\n  /** Injectable clock (epoch ms). Default `Date.now`. */\n  now?: () => number\n  /** Row-id generator. Default `crypto.randomUUID()`. */\n  generateId?: () => string\n}\n\nfunction rejected<T>(error: string): WorkProductOutcome<T> {\n  return { succeeded: false, error, conflict: false }\n}\n\nfunction lostRace<T>(id: string): WorkProductOutcome<T> {\n  return { succeeded: false, error: `Work product ${id} changed concurrently`, conflict: true }\n}\n\n/** Merge-by-id upsert: existing order preserved, replaced in place, new\n *  entries appended in call order. */\nfunction mergeById<T extends { id: string }>(existing: readonly T[], incoming: readonly T[]): T[] {\n  const merged = existing.slice()\n  const indexById = new Map(merged.map((entry, index) => [entry.id, index] as const))\n  for (const entry of incoming) {\n    const at = indexById.get(entry.id)\n    if (at === undefined) {\n      indexById.set(entry.id, merged.length)\n      merged.push(entry)\n    } else {\n      merged[at] = entry\n    }\n  }\n  return merged\n}\n\n/** Create the guarded work-product service over a store port */\nexport function createWorkProductService(options: WorkProductServiceOptions): WorkProductService {\n  const { store } = options\n  const now = options.now ?? (() => Date.now())\n  const generateId = options.generateId ?? (() => crypto.randomUUID())\n\n  async function appendEvent(\n    record: WorkProductRecord,\n    step: string,\n    message: string,\n    metadata: Record<string, unknown> = {},\n  ): Promise<void> {\n    await store.appendEvent({\n      workProductId: record.id,\n      workspaceId: record.workspaceId,\n      step,\n      message,\n      metadata,\n      at: now(),\n    })\n  }\n\n  // Guarded status transition: load → validate the edge → CAS guarded on the\n  // {status, version} read → audit event. The loser of a racing transition\n  // gets a conflict instead of silently violating the machine.\n  async function transition(\n    id: string,\n    to: WorkProductStatus,\n    patch: Omit<WorkProductPatch, 'status'> = {},\n    eventMeta: Record<string, unknown> = {},\n  ): Promise<WorkProductOutcome<WorkProductRecord>> {\n    const record = await store.load(id)\n    if (!record) return rejected(`Work product ${id} not found`)\n    const from = record.status\n    if (isWorkProductTerminal(from)) {\n      return rejected(`Work product ${id} is terminal (${from}); cannot transition to ${to}`)\n    }\n    if (!canTransitionWorkProduct(from, to)) {\n      return rejected(`Illegal work-product transition ${from} -> ${to} for ${id}`)\n    }\n    const updated = await store.update(\n      id,\n      { status: from, version: record.version },\n      { status: to, updatedAt: now(), ...patch },\n    )\n    if (!updated) return lostRace(id)\n    await appendEvent(updated, `wp.${to}`, `Work product ${from} -> ${to}`, { from, to, ...eventMeta })\n    return { succeeded: true, value: updated }\n  }\n\n  // Merge-style guarded write with no status change (evidence / exceptions /\n  // checks accumulate on the open row).\n  async function guardedMerge(\n    id: string,\n    legalStatuses: readonly WorkProductStatus[],\n    build: (record: WorkProductRecord) => Omit<WorkProductPatch, 'status' | 'version'>,\n    event: { step: string; message: (record: WorkProductRecord) => string; metadata?: (record: WorkProductRecord) => Record<string, unknown> },\n  ): Promise<WorkProductOutcome<WorkProductRecord>> {\n    const record = await store.load(id)\n    if (!record) return rejected(`Work product ${id} not found`)\n    if (!legalStatuses.includes(record.status)) {\n      return rejected(`Work product ${id} is ${record.status}; expected ${legalStatuses.join('/')}`)\n    }\n    const updated = await store.update(\n      id,\n      { status: record.status, version: record.version },\n      { updatedAt: now(), ...build(record) },\n    )\n    if (!updated) return lostRace(id)\n    await appendEvent(updated, event.step, event.message(updated), event.metadata?.(updated) ?? {})\n    return { succeeded: true, value: updated }\n  }\n\n  const create: WorkProductService['create'] = async (input) => {\n    const at = now()\n    const record = await store.insert(\n      {\n        id: input.id ?? generateId(),\n        workspaceId: input.workspaceId,\n        threadId: input.threadId,\n        scopeKey: input.scopeKey,\n        status: 'draft',\n        version: input.version ?? 1,\n        artifact: null,\n        evidence: [],\n        exceptions: [],\n        checks: [],\n        provenance: input.provenance,\n        history: [],\n        createdAt: at,\n        updatedAt: at,\n      },\n      input.extras,\n    )\n    await appendEvent(record, 'wp.created', `Work product draft v${record.version} created for ${record.scopeKey}`, {\n      scopeKey: record.scopeKey,\n      version: record.version,\n      threadId: record.threadId,\n    })\n    return record\n  }\n\n  async function findByScopeAndStatus(\n    workspaceId: string,\n    scopeKey: string,\n    status: WorkProductStatus,\n  ): Promise<WorkProductRecord | null> {\n    const rows = await store.listByWorkspace(workspaceId, { status: [status] })\n    return rows.find((row) => row.scopeKey === scopeKey) ?? null\n  }\n\n  const nextVersion: WorkProductService['nextVersion'] = async (workspaceId, scopeKey) => {\n    const reviewed = await store.listByWorkspace(workspaceId, { status: ['approved', 'superseded'] })\n    const versions = reviewed.filter((row) => row.scopeKey === scopeKey).map((row) => row.version)\n    return versions.length === 0 ? 1 : Math.max(...versions) + 1\n  }\n\n  const reopen: WorkProductService['reopen'] = async (id) => {\n    const record = await store.load(id)\n    if (!record) return rejected(`Work product ${id} not found`)\n    if (record.status !== 'changes_requested') {\n      return rejected(`Work product ${id} is ${record.status}; only changes_requested reopens`)\n    }\n    const updated = await store.update(\n      id,\n      { status: 'changes_requested', version: record.version },\n      { status: 'draft', version: record.version + 1, updatedAt: now() },\n    )\n    if (!updated) return lostRace(id)\n    await appendEvent(updated, 'wp.reopened', `Correction draft v${updated.version} opened`, {\n      from: record.version,\n      to: updated.version,\n    })\n    return { succeeded: true, value: updated }\n  }\n\n  const upsertEvidence: WorkProductService['upsertEvidence'] = (id, entries) =>\n    guardedMerge(\n      id,\n      ['draft', 'blocked'],\n      (record) => ({ evidence: mergeById(record.evidence, entries) }),\n      {\n        step: 'wp.evidence',\n        message: (record) => `Evidence upserted (${entries.length} entries, ${record.evidence.length} total)`,\n        metadata: () => ({ upserted: entries.map((entry) => entry.id) }),\n      },\n    )\n\n  const upsertExceptions: WorkProductService['upsertExceptions'] = async (id, entries) => {\n    const merged = await guardedMerge(\n      id,\n      ['draft', 'blocked'],\n      (record) => ({ exceptions: mergeById(record.exceptions, entries) }),\n      {\n        step: 'wp.exception',\n        message: (record) =>\n          `Exceptions upserted (${entries.length} entries, ${unresolvedBlockingExceptions(record.exceptions).length} blocking unresolved)`,\n        metadata: () => ({ upserted: entries.map((entry) => entry.id) }),\n      },\n    )\n    if (!merged.succeeded) return merged\n    // Reconcile the blocked flag AFTER the merge commits: an unresolved\n    // blocking entry parks the draft; resolving the last one releases it.\n    const record = merged.value\n    const blocking = unresolvedBlockingExceptions(record.exceptions).length\n    if (record.status === 'draft' && blocking > 0) {\n      return transition(id, 'blocked', {}, { blocking })\n    }\n    if (record.status === 'blocked' && blocking === 0) {\n      return transition(id, 'draft', {}, { blocking })\n    }\n    return merged\n  }\n\n  const recordChecks: WorkProductService['recordChecks'] = (id, checks) =>\n    guardedMerge(\n      id,\n      ['draft', 'blocked'],\n      () => ({ checks: checks.slice() }),\n      {\n        step: 'wp.checks',\n        message: () => `Checks recorded (${checks.length}, ${checks.filter((check) => !check.passed).length} failed)`,\n        metadata: () => ({ failed: checks.filter((check) => !check.passed).map((check) => check.name) }),\n      },\n    )\n\n  const submit: WorkProductService['submit'] = async (id, input) => {\n    const record = await store.load(id)\n    if (!record) return rejected(`Work product ${id} not found`)\n    if (record.status !== 'draft') {\n      return rejected(`Work product ${id} is ${record.status}; only a draft submits`)\n    }\n    const blocking = unresolvedBlockingExceptions(record.exceptions)\n    if (blocking.length > 0) {\n      return rejected(\n        `Work product ${id} has ${blocking.length} unresolved blocking exception(s): ${blocking.map((entry) => entry.id).join(', ')}`,\n      )\n    }\n    const artifactPath = input.artifactPath ?? input.artifact.path\n    const entry: WorkProductVersionEntry = {\n      version: record.version,\n      status: 'ready',\n      provenance: input.provenance,\n      ...(artifactPath === undefined ? {} : { artifactPath }),\n      at: now(),\n    }\n    return transition(\n      id,\n      'ready',\n      {\n        artifact: input.artifact,\n        checks: input.checks.slice(),\n        provenance: input.provenance,\n        history: [...record.history, entry],\n      },\n      { version: record.version, failedChecks: input.checks.filter((check) => !check.passed).length },\n    )\n  }\n\n  const applyVerdict: WorkProductService['applyVerdict'] = async (id, input) => {\n    const record = await store.load(id)\n    if (!record) return rejected(`Work product ${id} not found`)\n    if (record.status !== 'ready') {\n      return rejected(`Work product ${id} is ${record.status}; a verdict applies only to ready`)\n    }\n    const to: WorkProductStatus = input.verdict === 'approve' ? 'approved' : 'changes_requested'\n    const entry: WorkProductVersionEntry = {\n      version: record.version,\n      status: to,\n      provenance: record.provenance,\n      ...(record.artifact?.path === undefined ? {} : { artifactPath: record.artifact.path }),\n      reviewedBy: input.reviewedBy,\n      ...(input.note === undefined ? {} : { reviewNote: input.note }),\n      at: now(),\n    }\n    const outcome = await transition(\n      id,\n      to,\n      { history: [...record.history, entry] },\n      { verdict: input.verdict, reviewedBy: input.reviewedBy },\n    )\n    if (!outcome.succeeded || to !== 'approved') return outcome\n    // Exactly one approved version per scope: supersede prior approved rows.\n    const priorApproved = await store.listByWorkspace(record.workspaceId, { status: ['approved'] })\n    for (const prior of priorApproved) {\n      if (prior.id === id || prior.scopeKey !== record.scopeKey) continue\n      await transition(prior.id, 'superseded', {}, { supersededBy: id })\n    }\n    return outcome\n  }\n\n  return {\n    create,\n    get: (id) => store.load(id),\n    openDraft: (workspaceId, scopeKey) => store.findDraft(workspaceId, scopeKey),\n    awaitingCorrection: (workspaceId, scopeKey) => findByScopeAndStatus(workspaceId, scopeKey, 'changes_requested'),\n    awaitingReview: (workspaceId, scopeKey) => findByScopeAndStatus(workspaceId, scopeKey, 'ready'),\n    nextVersion,\n    reopen,\n    upsertEvidence,\n    upsertExceptions,\n    recordChecks,\n    submit,\n    applyVerdict,\n    supersede: (id) => transition(id, 'superseded'),\n  }\n}\n\n// ── in-memory store ──────────────────────────────────────────────────────────\n\n/** In-memory store surface with audit trail access and unguarded direct writes for tests */\nexport interface InMemoryWorkProductStore extends WorkProductStorePort {\n  /** The full audit trail, append order. */\n  events(): WorkProductAuditEvent[]\n  /** Unguarded direct write — simulates a concurrent owner in tests. */\n  put(record: WorkProductRecord): void\n}\n\n/**\n * In-memory {@link WorkProductStorePort} — the portable backend for tests and\n * reference assemblies. Records are deep-copied on every boundary so callers\n * can never mutate stored state around the guards.\n */\nexport function createInMemoryWorkProductStore(): InMemoryWorkProductStore {\n  const rows = new Map<string, WorkProductRecord>()\n  const events: WorkProductAuditEvent[] = []\n\n  return {\n    async load(id) {\n      const record = rows.get(id)\n      return record ? structuredClone(record) : null\n    },\n    async findDraft(workspaceId, scopeKey) {\n      for (const record of rows.values()) {\n        if (\n          record.workspaceId === workspaceId &&\n          record.scopeKey === scopeKey &&\n          (record.status === 'draft' || record.status === 'blocked')\n        ) {\n          return structuredClone(record)\n        }\n      }\n      return null\n    },\n    async listByWorkspace(workspaceId, opts) {\n      const out: WorkProductRecord[] = []\n      for (const record of rows.values()) {\n        if (record.workspaceId !== workspaceId) continue\n        if (opts?.status && !opts.status.includes(record.status)) continue\n        out.push(structuredClone(record))\n      }\n      return out\n    },\n    async insert(record) {\n      if (rows.has(record.id)) throw new Error(`Work product ${record.id} already exists`)\n      rows.set(record.id, structuredClone(record))\n      return structuredClone(record)\n    },\n    async update(id, guard, patch) {\n      const current = rows.get(id)\n      if (!current) return null\n      if (guard.status !== undefined && current.status !== guard.status) return null\n      if (guard.version !== undefined && current.version !== guard.version) return null\n      const next: WorkProductRecord = { ...current }\n      if (patch.status !== undefined) next.status = patch.status\n      if (patch.version !== undefined) next.version = patch.version\n      if (patch.artifact !== undefined) next.artifact = patch.artifact\n      if (patch.evidence !== undefined) next.evidence = patch.evidence\n      if (patch.exceptions !== undefined) next.exceptions = patch.exceptions\n      if (patch.checks !== undefined) next.checks = patch.checks\n      if (patch.provenance !== undefined) next.provenance = patch.provenance\n      if (patch.history !== undefined) next.history = patch.history\n      if (patch.updatedAt !== undefined) next.updatedAt = patch.updatedAt\n      rows.set(id, structuredClone(next))\n      return structuredClone(next)\n    },\n    async appendEvent(event) {\n      events.push(structuredClone(event))\n    },\n    events() {\n      return events.map((event) => structuredClone(event))\n    },\n    put(record) {\n      rows.set(record.id, structuredClone(record))\n    },\n  }\n}\n","/**\n * Provenance stamping — the backtest spine. Every version of every work\n * product carries `profileHash + runId + servingModels`, stamped at the two\n * honest moments:\n *\n *  1. At dispatch, the product route composes the turn's profile and computes\n *     agent-eval's `agentProfileHash(profile)` — the SAME hash that keys the\n *     app's scorecard cells — and closes it (plus runId/sessionId) into the\n *     `provenance` seam `buildWorkProductTools` receives, so the model can\n *     neither omit nor forge it.\n *  2. At turn completion, the route's existing lifecycle seam calls\n *     {@link finalizeWorkProductProvenance}: serving model and cost come from\n *     the usage receipt, because only the completed turn knows what actually\n *     served. `servingModels` is honestly EMPTY until then.\n *\n * The trust bridge ({@link workProductTrustInputs}) maps judge-sourced\n * quality verdicts into `/eval-campaign`'s `trustVerdicts()` input with\n * type-only imports — products call `trustVerdicts` from\n * `@tangle-network/agent-app/eval-campaign` (which they already import for\n * their ensemble loop). Deliberately NOT a value re-export here: it would put\n * agent-eval's runtime on `/work-product`'s import path and drag the eval\n * engine into every product worker bundle.\n */\n\nimport type { JudgeVerdict } from '@tangle-network/agent-eval'\nimport type { TrustItem } from '../eval-campaign/trust-gate'\nimport type {\n  WorkProductProvenance,\n  WorkProductRecord,\n  WorkProductStorePort,\n} from './types'\n\nexport type { TrustItem }\n\n/** The dispatch-time provenance closure's output: everything the route knows\n *  before the turn completes. */\nexport type WorkProductProvenanceBase = Omit<WorkProductProvenance, 'servingModels' | 'producedAt'>\n\n/** Stamp a full provenance from the dispatch-time base. `servingModels` starts\n *  empty (honestly absent — never guessed) until the completion back-fill. */\nexport function stampProvenance(base: WorkProductProvenanceBase, now: () => number = Date.now): WorkProductProvenance {\n  return { ...base, servingModels: [], producedAt: now() }\n}\n\n/** Completion receipt for one run, from the turn's usage/lifecycle seam. */\nexport interface FinalizeWorkProductProvenanceInput {\n  workspaceId: string\n  /** The chat turnId / mission-step run id the records were stamped with. */\n  runId: string\n  /** What actually served, from the usage receipt / serving-model header. */\n  servingModels: readonly string[]\n  costUsd?: number\n  logger?: Pick<Console, 'warn'>\n}\n\n/**\n * Back-fill `servingModels`/`costUsd` onto every record (and its history\n * entries) stamped with `runId` — wire it into the chat route's existing\n * `lifecycle.onTurnComplete` seam; no new hook. Returns the updated records.\n * A CAS miss on one record is logged and skipped (the next completion or a\n * re-read re-applies); it never throws mid-fleet.\n */\nexport async function finalizeWorkProductProvenance(\n  store: WorkProductStorePort,\n  input: FinalizeWorkProductProvenanceInput,\n): Promise<WorkProductRecord[]> {\n  const rows = await store.listByWorkspace(input.workspaceId)\n  const updated: WorkProductRecord[] = []\n  for (const record of rows) {\n    const recordMatches = record.provenance.runId === input.runId\n    const historyMatches = record.history.some((entry) => entry.provenance.runId === input.runId)\n    if (!recordMatches && !historyMatches) continue\n    const finalize = (provenance: WorkProductProvenance): WorkProductProvenance => ({\n      ...provenance,\n      servingModels: [...input.servingModels],\n      ...(input.costUsd === undefined ? {} : { costUsd: input.costUsd }),\n    })\n    const next = await store.update(\n      record.id,\n      { status: record.status, version: record.version },\n      {\n        ...(recordMatches ? { provenance: finalize(record.provenance) } : {}),\n        history: record.history.map((entry) =>\n          entry.provenance.runId === input.runId ? { ...entry, provenance: finalize(entry.provenance) } : entry,\n        ),\n      },\n    )\n    if (!next) {\n      input.logger?.warn(`[work-product] provenance back-fill lost a race on ${record.id}; skipped`)\n      continue\n    }\n    await store.appendEvent({\n      workProductId: record.id,\n      workspaceId: record.workspaceId,\n      step: 'wp.provenance',\n      message: `Serving models back-filled for run ${input.runId}`,\n      metadata: { runId: input.runId, servingModels: [...input.servingModels], costUsd: input.costUsd ?? null },\n      at: Date.now(),\n    })\n    updated.push(next)\n  }\n  return updated\n}\n\n/**\n * Trust-gate bridge: one `TrustItem` per work product whose production\n * quality was scored by the product's eval-campaign ensemble. `verdictsFor`\n * returns the per-judge raw verdicts the product retained for a record (the\n * same verdicts `aggregateJudgeVerdicts` reduces); records without verdicts\n * are omitted. Feed the result to `/eval-campaign`'s `trustVerdicts()` —\n * an untrusted verdict renders as \"quality: unverified\", never a naked\n * number. Zero statistics code here: pure mapping.\n */\nexport function workProductTrustInputs<D extends string = string>(\n  records: readonly WorkProductRecord[],\n  verdictsFor: (record: WorkProductRecord) => readonly JudgeVerdict<D>[] | undefined,\n): TrustItem<D>[] {\n  const items: TrustItem<D>[] = []\n  for (const record of records) {\n    const verdicts = verdictsFor(record)\n    if (!verdicts || verdicts.length === 0) continue\n    items.push({ itemId: record.id, verdicts })\n  }\n  return items\n}\n","/**\n * The agent-facing work-product side channel — three registry `customTools`\n * built on `/tools`' `defineAppTool`, dispatched through `dispatchAppTool`'s\n * single validation/outcome path (a thrown `ToolInputError` → correctable 4xx\n * back to the model; any other throw → internal error; a call never silently\n * succeeds without its effect). Deliberately NOT new `/tools` built-ins:\n * extending `AppToolHandlers` would break every existing consumer, and the\n * registry seam exists precisely for a product tool family like this.\n *\n * Partial-emission contract across a long turn: the draft ROW is the\n * accumulator. Evidence and exceptions stream in as found via small batched\n * calls; the artifact arrives once at the end. The agent addresses everything\n * by `scopeKey` — the server mints row ids, the model never invents them, and\n * identity (userId/workspaceId/threadId) rides the trusted `AppToolContext`\n * from headers, never model args. A turn that dies mid-emission leaves a\n * consistent draft the next turn resumes by the same scopeKey.\n */\n\nimport { ToolInputError } from '../tools/errors'\nimport { defineAppTool, type AppToolDefinition } from '../tools/registry'\nimport type { AppToolContext } from '../tools/types'\nimport { createWorkProductService, type WorkProductOutcome, type WorkProductService } from './service'\nimport { stampProvenance, type WorkProductProvenanceBase } from './provenance'\nimport {\n  parseAgentCheckInput,\n  parseArtifactInput,\n  parseEvidenceInput,\n  parseExceptionInput,\n  unresolvedBlockingExceptions,\n  type EvidenceEntry,\n  type ExceptionEntry,\n  type QualityCheck,\n  type WorkProductArtifact,\n  type WorkProductRecord,\n  type WorkProductStorePort,\n} from './types'\n\n/** Max entries per `upsert_evidence`/`flag_exception` call — keeps each call a\n *  small batch the model can correct precisely on a named-index failure. */\nexport const MAX_WORK_PRODUCT_BATCH = 50\n\n/** The shell's one generic platform check: every material target has ≥1\n *  evidence row. Recorded as `QualityCheck{source:'platform'}`. */\nexport const EVIDENCE_COVERAGE_CHECK = 'evidence_coverage'\n\n/** Domain seams for the three work-product tools — every domain word is a\n *  parameter; the shell bakes none. */\nexport interface WorkProductToolConfig {\n  store: WorkProductStorePort\n  /** PARAMETER — accepted `artifact.kind` values, validated on submit. */\n  artifactKinds: readonly string[]\n  /** PARAMETER — accepted exception `kind` values. */\n  exceptionKinds: readonly string[]\n  /** Fail-loud source check: resolve an evidence `sourceRef` to existence\n   *  (vault stat / attachment lookup). A dangling ref is a `ToolInputError`\n   *  naming the entry index — lineage can never point at nothing. */\n  resolveSourceRef: (ref: string, ctx: AppToolContext) => Promise<boolean>\n  /** The material targets the platform coverage check requires evidence for.\n   *  Product-owned vocabulary; omit to skip the coverage gate. */\n  materialTargets?: (artifact: WorkProductArtifact) => string[]\n  /** Per-turn provenance closure the ROUTE supplies (profileHash + runId are\n   *  known at dispatch; trusted, never read from model args). */\n  provenance: (ctx: AppToolContext) => WorkProductProvenanceBase\n  /** Called on the draft→ready commit so the route persists the transcript\n   *  anchor part and the queue projection updates. */\n  onReady?: (record: WorkProductRecord, ctx: AppToolContext) => void | Promise<void>\n  /** Injectable clock / id generator (tests, deterministic ids). */\n  now?: () => number\n  generateId?: () => string\n}\n\n/** Unwrap a guarded outcome, retrying ONCE on a lost race (the single\n *  serialized turn owner makes real contention rare; one re-read-and-retry\n *  absorbs the benign case). A deterministic rejection maps to a correctable\n *  `ToolInputError` so the model learns exactly why. */\nasync function unwrap<T>(\n  run: () => Promise<WorkProductOutcome<T>>,\n  code: string,\n): Promise<T> {\n  let outcome = await run()\n  if (!outcome.succeeded && outcome.conflict) outcome = await run()\n  if (!outcome.succeeded) throw new ToolInputError(code, outcome.error, outcome.conflict ? 409 : 400)\n  return outcome.value\n}\n\nfunction requireScopeKey(args: Record<string, unknown>): string {\n  const scopeKey = typeof args.scopeKey === 'string' ? args.scopeKey.trim() : ''\n  if (!scopeKey) throw new ToolInputError('missing_scope_key', 'scopeKey is required — the engagement key this work product belongs to.')\n  return scopeKey\n}\n\nfunction requireBatch(args: Record<string, unknown>, field: string): unknown[] {\n  const raw = args[field]\n  if (!Array.isArray(raw) || raw.length === 0) {\n    throw new ToolInputError('missing_entries', `${field} must be a non-empty array.`)\n  }\n  if (raw.length > MAX_WORK_PRODUCT_BATCH) {\n    throw new ToolInputError('batch_too_large', `${field} accepts at most ${MAX_WORK_PRODUCT_BATCH} entries per call — send smaller batches.`)\n  }\n  return raw\n}\n\n/**\n * Resolve the scope's open draft row, creating or reopening as needed:\n * an open `draft`/`blocked` row resumes; a `changes_requested` row reopens as\n * the correction draft (version +1); a `ready` row refuses — the package is\n * awaiting review and must receive a verdict first; otherwise a fresh draft\n * is created at `last reviewed version + 1` with dispatch-stamped provenance.\n */\nasync function resolveDraft(\n  service: WorkProductService,\n  config: WorkProductToolConfig,\n  scopeKey: string,\n  ctx: AppToolContext,\n): Promise<WorkProductRecord> {\n  const open = await service.openDraft(ctx.workspaceId, scopeKey)\n  if (open) return open\n  const awaitingReview = await service.awaitingReview(ctx.workspaceId, scopeKey)\n  if (awaitingReview) {\n    throw new ToolInputError(\n      'awaiting_review',\n      `Work product for ${scopeKey} (v${awaitingReview.version}) is awaiting review — no further emission until a reviewer verdict.`,\n      409,\n    )\n  }\n  const awaitingCorrection = await service.awaitingCorrection(ctx.workspaceId, scopeKey)\n  if (awaitingCorrection) {\n    return unwrap(() => service.reopen(awaitingCorrection.id), 'reopen_failed')\n  }\n  return service.create({\n    workspaceId: ctx.workspaceId,\n    threadId: ctx.threadId,\n    scopeKey,\n    version: await service.nextVersion(ctx.workspaceId, scopeKey),\n    provenance: stampProvenance(config.provenance(ctx), config.now),\n  })\n}\n\n/** Build the three work-product tools for `customTools` registration on the\n *  MCP server / HTTP handler / runtime executor. */\nexport function buildWorkProductTools(config: WorkProductToolConfig): AppToolDefinition[] {\n  const service = createWorkProductService({\n    store: config.store,\n    ...(config.now ? { now: config.now } : {}),\n    ...(config.generateId ? { generateId: config.generateId } : {}),\n  })\n\n  const upsertEvidence = defineAppTool({\n    name: 'upsert_evidence',\n    description:\n      'Record source→field lineage for the current work product, incrementally as you find it. Each entry links a source document (sourceRef + locator) to one artifact target and states the claim it supports. Re-emitting an entry id replaces that entry. Address the work product by scopeKey; the first call creates the draft.',\n    parameters: {\n      type: 'object',\n      properties: {\n        scopeKey: { type: 'string', description: 'Engagement key for this work product.' },\n        entries: {\n          type: 'array',\n          minItems: 1,\n          maxItems: MAX_WORK_PRODUCT_BATCH,\n          items: {\n            type: 'object',\n            properties: {\n              id: { type: 'string', description: 'Stable entry id — re-emit to replace.' },\n              sourceRef: { type: 'string', description: 'Vault path / attachment id of the SOURCE document.' },\n              locator: {\n                type: 'object',\n                properties: {\n                  page: { type: 'number' },\n                  range: { type: 'string', description: \"Free-form location: 'L120-L134' | 'B7' | '¶4'.\" },\n                  quote: { type: 'string', description: 'Verbatim supporting quote.' },\n                },\n              },\n              target: { type: 'string', description: 'Artifact field/claim this evidence supports.' },\n              claim: { type: 'string', description: 'The value/assertion at the target.' },\n              confidence: { type: 'number', minimum: 0, maximum: 1 },\n            },\n            required: ['id', 'sourceRef', 'target', 'claim'],\n          },\n        },\n      },\n      required: ['scopeKey', 'entries'],\n    },\n    async execute(args: Record<string, unknown>, ctx: AppToolContext) {\n      const scopeKey = requireScopeKey(args)\n      const raw = requireBatch(args, 'entries')\n      const entries: EvidenceEntry[] = []\n      for (let index = 0; index < raw.length; index += 1) {\n        const parsed = parseEvidenceInput(raw[index], `entries[${index}]`)\n        if (!parsed.ok) throw new ToolInputError('invalid_evidence', `${parsed.field}: ${parsed.error}`)\n        entries.push(parsed.value)\n      }\n      // Fail-loud source resolution: lineage can never point at nothing.\n      for (let index = 0; index < entries.length; index += 1) {\n        const entry = entries[index]!\n        if (!(await config.resolveSourceRef(entry.sourceRef, ctx))) {\n          throw new ToolInputError(\n            'unknown_source_ref',\n            `entries[${index}].sourceRef: \"${entry.sourceRef}\" does not resolve to an existing source document.`,\n          )\n        }\n      }\n      const draft = await resolveDraft(service, config, scopeKey, ctx)\n      const record = await unwrap(() => service.upsertEvidence(draft.id, entries), 'evidence_rejected')\n      return { workProductId: record.id, version: record.version, evidenceCount: record.evidence.length }\n    },\n  })\n\n  const flagException = defineAppTool({\n    name: 'flag_exception',\n    description:\n      'Flag problems with the current work product (missing documents, inconsistent sources, …). An unresolved blocking exception parks the work product until it is resolved; re-emit the same id with resolved:true to release it. Address by scopeKey.',\n    parameters: {\n      type: 'object',\n      properties: {\n        scopeKey: { type: 'string', description: 'Engagement key for this work product.' },\n        exceptions: {\n          type: 'array',\n          minItems: 1,\n          maxItems: MAX_WORK_PRODUCT_BATCH,\n          items: {\n            type: 'object',\n            properties: {\n              id: { type: 'string', description: 'Stable entry id — re-emit to replace.' },\n              severity: { type: 'string', enum: ['blocking', 'material', 'advisory'] },\n              kind: { type: 'string', description: 'Exception kind from the product vocabulary.' },\n              message: { type: 'string' },\n              targets: { type: 'array', items: { type: 'string' } },\n              resolved: { type: 'boolean' },\n              resolutionNote: { type: 'string' },\n            },\n            required: ['id', 'severity', 'kind', 'message'],\n          },\n        },\n      },\n      required: ['scopeKey', 'exceptions'],\n    },\n    async execute(args: Record<string, unknown>, ctx: AppToolContext) {\n      const scopeKey = requireScopeKey(args)\n      const raw = requireBatch(args, 'exceptions')\n      const entries: ExceptionEntry[] = []\n      for (let index = 0; index < raw.length; index += 1) {\n        const parsed = parseExceptionInput(raw[index], `exceptions[${index}]`)\n        if (!parsed.ok) throw new ToolInputError('invalid_exception', `${parsed.field}: ${parsed.error}`)\n        if (!config.exceptionKinds.includes(parsed.value.kind)) {\n          throw new ToolInputError(\n            'invalid_exception',\n            `exceptions[${index}].kind: must be one of: ${config.exceptionKinds.join(', ')}`,\n          )\n        }\n        // An agent resolving its own exception is tagged as such; the reviewer\n        // tag is reserved for the verdict route.\n        if (parsed.value.resolved && parsed.value.resolvedBy === undefined) parsed.value.resolvedBy = 'agent'\n        entries.push(parsed.value)\n      }\n      const draft = await resolveDraft(service, config, scopeKey, ctx)\n      const record = await unwrap(() => service.upsertExceptions(draft.id, entries), 'exception_rejected')\n      return {\n        workProductId: record.id,\n        version: record.version,\n        status: record.status,\n        unresolvedBlocking: unresolvedBlockingExceptions(record.exceptions).length,\n      }\n    },\n  })\n\n  const submitWorkProduct = defineAppTool({\n    name: 'submit_work_product',\n    description:\n      'Submit the finished work product for professional review — the terminal call after evidence and exceptions are recorded. Refused while a blocking exception is unresolved, or when a material target lacks evidence. Include your own quality checks in `checks`.',\n    parameters: {\n      type: 'object',\n      properties: {\n        scopeKey: { type: 'string', description: 'Engagement key for this work product.' },\n        artifact: {\n          type: 'object',\n          properties: {\n            kind: { type: 'string', description: 'Artifact kind from the product vocabulary.' },\n            title: { type: 'string' },\n            path: { type: 'string', description: 'Vault/object-store ref of the rendered document.' },\n            content: { type: 'string', description: 'Inline body when small (markdown/JSON).' },\n            mediaType: { type: 'string' },\n            baseline: {\n              type: 'object',\n              properties: { path: { type: 'string' }, content: { type: 'string' } },\n              description: 'For diff-first artifacts: the source document being redlined.',\n            },\n            fields: { type: 'object', description: 'Structured field map lineage targets anchor to.' },\n          },\n          required: ['kind', 'title'],\n        },\n        checks: {\n          type: 'array',\n          items: {\n            type: 'object',\n            properties: {\n              id: { type: 'string' },\n              name: { type: 'string' },\n              passed: { type: 'boolean' },\n              detail: { type: 'string' },\n            },\n            required: ['id', 'name', 'passed'],\n          },\n          description: 'Your own quality self-checks (recorded as agent-sourced).',\n        },\n      },\n      required: ['scopeKey', 'artifact'],\n    },\n    async execute(args: Record<string, unknown>, ctx: AppToolContext) {\n      const scopeKey = requireScopeKey(args)\n      const parsedArtifact = parseArtifactInput(args.artifact)\n      if (!parsedArtifact.ok) throw new ToolInputError('invalid_artifact', `${parsedArtifact.field}: ${parsedArtifact.error}`)\n      const artifact = parsedArtifact.value\n      if (!config.artifactKinds.includes(artifact.kind)) {\n        throw new ToolInputError('invalid_artifact', `artifact.kind: must be one of: ${config.artifactKinds.join(', ')}`)\n      }\n      const agentChecks: QualityCheck[] = []\n      if (args.checks !== undefined) {\n        if (!Array.isArray(args.checks)) throw new ToolInputError('invalid_checks', 'checks must be an array when present.')\n        for (let index = 0; index < args.checks.length; index += 1) {\n          const parsed = parseAgentCheckInput(args.checks[index], `checks[${index}]`)\n          if (!parsed.ok) throw new ToolInputError('invalid_checks', `${parsed.field}: ${parsed.error}`)\n          agentChecks.push({ ...parsed.value, source: 'agent' })\n        }\n      }\n\n      const draft = await resolveDraft(service, config, scopeKey, ctx)\n      const blocking = unresolvedBlockingExceptions(draft.exceptions)\n      if (blocking.length > 0) {\n        throw new ToolInputError(\n          'blocking_exceptions_unresolved',\n          `Cannot submit: ${blocking.length} unresolved blocking exception(s) (${blocking.map((entry) => entry.id).join(', ')}). Resolve each via flag_exception with resolved:true, or downgrade its severity with a resolutionNote justifying why it does not block.`,\n          409,\n        )\n      }\n\n      // The shell's ONE generic platform check: every material target has ≥1\n      // evidence row. A failing coverage check is BOTH recorded on the row\n      // (visible to the queue) and rejected fail-loud — a lineage-free package\n      // can never reach a reviewer.\n      const checks: QualityCheck[] = [...agentChecks]\n      if (config.materialTargets) {\n        const targets = config.materialTargets(artifact)\n        const covered = new Set(draft.evidence.map((entry) => entry.target))\n        const missing = targets.filter((target) => !covered.has(target))\n        const coverage: QualityCheck = {\n          id: EVIDENCE_COVERAGE_CHECK,\n          name: EVIDENCE_COVERAGE_CHECK,\n          passed: missing.length === 0,\n          detail:\n            missing.length === 0\n              ? `${targets.length}/${targets.length} material targets evidenced`\n              : `Missing evidence for: ${missing.join(', ')}`,\n          source: 'platform',\n        }\n        checks.unshift(coverage)\n        if (missing.length > 0) {\n          await unwrap(() => service.recordChecks(draft.id, checks), 'checks_rejected')\n          throw new ToolInputError(\n            'evidence_coverage_failed',\n            `Cannot submit: material targets lack evidence: ${missing.join(', ')}. Add upsert_evidence entries targeting each, then resubmit.`,\n          )\n        }\n      }\n\n      const provenance = stampProvenance(config.provenance(ctx), config.now)\n      const record = await unwrap(\n        () => service.submit(draft.id, { artifact, checks, provenance }),\n        'submit_rejected',\n      )\n      await config.onReady?.(record, ctx)\n      return {\n        workProductId: record.id,\n        version: record.version,\n        status: record.status,\n        checks: record.checks.map((check) => ({ name: check.name, passed: check.passed, source: check.source })),\n      }\n    },\n  })\n\n  return [upsertEvidence, flagException, submitWorkProduct]\n}\n","/**\n * Framework-neutral work-product review endpoints — the\n * `createInteractionAnswerRoute` factory pattern: web-standard\n * `Request`/`Response`, ONE product-supplied `authorize` seam (session auth,\n * workspace access, reviewer identity, rate limits), everything behind it\n * mechanism. Server-only and subpath-only: never reachable from a client\n * bundle (enforced by the browser-safety test).\n *\n * The verdict endpoint is deliberately NOT a second approval broker: agent\n * asks stay on `/interactions`; this is the REVIEWER's plain authorized\n * verdict on a ready package — one human-in-the-loop channel per direction.\n * A `request_changes` note re-enters chat as the correction turn via the\n * `onVerdict` seam; chat remains the driver surface.\n */\n\nimport {\n  createWorkProductService,\n  type WorkProductService,\n} from './service'\nimport {\n  workProductToPersistedPart,\n  type WorkProductPersistedPart,\n  type WorkProductRecord,\n  type WorkProductStorePort,\n} from './types'\n\n/** Reviewer verdict wire body for the POST endpoint. */\nexport type WorkProductVerdictBody =\n  | { ok: true; id: string; verdict: 'approve'; note?: string }\n  | { ok: true; id: string; verdict: 'request_changes'; note: string }\n  | { ok: false; error: string }\n\n/** Validate the verdict POST body: `{ id, verdict, note? }`; a\n *  `request_changes` verdict REQUIRES a non-empty note — the note IS the\n *  correction turn the agent works from. */\nexport function validateWorkProductVerdictBody(body: Record<string, unknown>): WorkProductVerdictBody {\n  const id = typeof body.id === 'string' && body.id.trim() ? body.id.trim() : null\n  if (!id) return { ok: false, error: 'Missing work product id' }\n  const verdict = body.verdict\n  if (verdict !== 'approve' && verdict !== 'request_changes') {\n    return { ok: false, error: 'Invalid verdict: expected approve or request_changes' }\n  }\n  const note = body.note === undefined ? undefined : typeof body.note === 'string' ? body.note.trim() : null\n  if (note === null) return { ok: false, error: 'Invalid note: expected a string' }\n  if (verdict === 'request_changes') {\n    if (!note) return { ok: false, error: 'request_changes requires a note — it becomes the correction instruction in chat' }\n    return { ok: true, id, verdict, note }\n  }\n  return note ? { ok: true, id, verdict, note } : { ok: true, id, verdict }\n}\n\n/** The product seam's verdict for one request: authenticated reviewer +\n *  workspace, or a product-authored short-circuit Response (401/403/429…). */\nexport type WorkProductRouteAuthorization =\n  | { ok: true; workspaceId: string; reviewedBy: string }\n  | { ok: false; response: Response }\n\n/** Auth seam arguments carrying the request, the endpoint intent, and the parsed verdict body */\nexport interface WorkProductAuthorizeArgs {\n  request: Request\n  intent: 'list' | 'detail' | 'verdict'\n  /** The parsed, validated POST body (verdict intent only). */\n  body?: Record<string, unknown>\n}\n\n/** Configuration options assembling the review endpoints from the store and product seams */\nexport interface WorkProductRoutesOptions {\n  store: WorkProductStorePort\n  /** Authenticate + authorize the caller; the ONLY product access step. */\n  authorize: (args: WorkProductAuthorizeArgs) => Promise<WorkProductRouteAuthorization>\n  /** Post-verdict product seam: post the `request_changes` note into the\n   *  driving chat thread as the correction turn, notify, etc. Runs after the\n   *  transition commits; a throw is logged, never unwinds the verdict. */\n  onVerdict?: (args: {\n    record: WorkProductRecord\n    verdict: 'approve' | 'request_changes'\n    note?: string\n    reviewedBy: string\n  }) => void | Promise<void>\n  /** Persist/update the transcript anchor part reflecting the new status, so\n   *  the chat card flips with the verdict. */\n  persistAnchorPart?: (part: WorkProductPersistedPart, record: WorkProductRecord) => void | Promise<void>\n  /** Future integration point fired on approval (push to a DMS/CRM/export\n   *  pipeline). A stub seam by design — export itself stays the product's\n   *  signed object-store download. */\n  onExport?: (record: WorkProductRecord) => void | Promise<void>\n  logger?: Pick<Console, 'warn' | 'error'>\n  now?: () => number\n}\n\n/** Assembled review endpoints returning web-standard Responses */\nexport interface WorkProductRoutes {\n  /** GET — the workspace's records for the queue projection. Optional\n   *  `?status=a,b` filter. */\n  list: (request: Request) => Promise<Response>\n  /** GET — one record by id (404 when absent or outside the workspace). */\n  detail: (request: Request, id: string) => Promise<Response>\n  /** POST `{ id, verdict, note? }` — the reviewer verdict: CAS transition +\n   *  history entry + product seams. 409 when the record is no longer ready. */\n  verdict: (request: Request) => Promise<Response>\n}\n\n/** Create the work-product review endpoints over the store port and product seams */\nexport function createWorkProductRoutes(options: WorkProductRoutesOptions): WorkProductRoutes {\n  const logger = options.logger ?? console\n  const service: WorkProductService = createWorkProductService({\n    store: options.store,\n    ...(options.now ? { now: options.now } : {}),\n  })\n\n  async function list(request: Request): Promise<Response> {\n    const auth = await options.authorize({ request, intent: 'list' })\n    if (!auth.ok) return auth.response\n    const url = new URL(request.url)\n    const statusParam = url.searchParams.get('status')\n    const statuses = statusParam\n      ? statusParam.split(',').map((value) => value.trim()).filter(Boolean)\n      : null\n    const workProducts = await options.store.listByWorkspace(\n      auth.workspaceId,\n      statuses ? { status: statuses as WorkProductRecord['status'][] } : undefined,\n    )\n    return Response.json({ workProducts })\n  }\n\n  async function detail(request: Request, id: string): Promise<Response> {\n    const auth = await options.authorize({ request, intent: 'detail' })\n    if (!auth.ok) return auth.response\n    const record = await options.store.load(id)\n    if (!record || record.workspaceId !== auth.workspaceId) {\n      return Response.json({ error: 'Work product not found' }, { status: 404 })\n    }\n    return Response.json({ workProduct: record })\n  }\n\n  async function verdict(request: Request): Promise<Response> {\n    const body = (await request.json().catch(() => null)) as Record<string, unknown> | null\n    if (!body || typeof body !== 'object' || Array.isArray(body)) {\n      return Response.json({ error: 'Invalid JSON body' }, { status: 400 })\n    }\n    const validation = validateWorkProductVerdictBody(body)\n    if (!validation.ok) return Response.json({ error: validation.error }, { status: 400 })\n\n    const auth = await options.authorize({ request, intent: 'verdict', body })\n    if (!auth.ok) return auth.response\n\n    const existing = await options.store.load(validation.id)\n    if (!existing || existing.workspaceId !== auth.workspaceId) {\n      return Response.json({ error: 'Work product not found' }, { status: 404 })\n    }\n\n    const outcome = await service.applyVerdict(validation.id, {\n      verdict: validation.verdict,\n      reviewedBy: auth.reviewedBy,\n      ...(validation.note === undefined ? {} : { note: validation.note }),\n    })\n    if (!outcome.succeeded) {\n      // A lost race and an illegal edge both mean \"the row is no longer the\n      // ready version you looked at\" — 409 so the client re-reads.\n      return Response.json({ code: 'VERDICT_CONFLICT', error: outcome.error }, { status: 409 })\n    }\n    const record = outcome.value\n\n    // Product seams run AFTER the committed transition; their failures are\n    // logged, never unwound — the verdict is durable truth at this point.\n    try {\n      await options.persistAnchorPart?.(workProductToPersistedPart(record), record)\n    } catch (error) {\n      logger.error('[work-product] persistAnchorPart failed:', error)\n    }\n    try {\n      await options.onVerdict?.({\n        record,\n        verdict: validation.verdict,\n        ...(validation.note === undefined ? {} : { note: validation.note }),\n        reviewedBy: auth.reviewedBy,\n      })\n    } catch (error) {\n      logger.error('[work-product] onVerdict failed:', error)\n    }\n    if (validation.verdict === 'approve') {\n      try {\n        await options.onExport?.(record)\n      } catch (error) {\n        logger.error('[work-product] onExport failed:', error)\n      }\n    }\n\n    return Response.json({ ok: true, workProduct: record })\n  }\n\n  return { list, detail, verdict }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuCA,IAAM,2BAAsF;AAAA,EAC1F,OAAO,oBAAI,IAAuB,CAAC,WAAW,OAAO,CAAC;AAAA,EACtD,SAAS,oBAAI,IAAuB,CAAC,OAAO,CAAC;AAAA,EAC7C,OAAO,oBAAI,IAAuB,CAAC,qBAAqB,YAAY,YAAY,CAAC;AAAA,EACjF,mBAAmB,oBAAI,IAAuB,CAAC,SAAS,YAAY,CAAC;AAAA,EACrE,UAAU,oBAAI,IAAuB,CAAC,YAAY,CAAC;AAAA,EACnD,YAAY,oBAAI,IAAuB;AACzC;AAGO,SAAS,yBAAyB,MAAyB,IAAgC;AAChG,SAAO,yBAAyB,IAAI,EAAE,IAAI,EAAE;AAC9C;AAGO,SAAS,sBAAsB,QAAoC;AACxE,SAAO,yBAAyB,MAAM,EAAE,SAAS;AACnD;AAmFA,SAAS,SAAY,OAAsC;AACzD,SAAO,EAAE,WAAW,OAAO,OAAO,UAAU,MAAM;AACpD;AAEA,SAAS,SAAY,IAAmC;AACtD,SAAO,EAAE,WAAW,OAAO,OAAO,gBAAgB,EAAE,yBAAyB,UAAU,KAAK;AAC9F;AAIA,SAAS,UAAoC,UAAwB,UAA6B;AAChG,QAAM,SAAS,SAAS,MAAM;AAC9B,QAAM,YAAY,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,UAAU,CAAC,MAAM,IAAI,KAAK,CAAU,CAAC;AAClF,aAAW,SAAS,UAAU;AAC5B,UAAM,KAAK,UAAU,IAAI,MAAM,EAAE;AACjC,QAAI,OAAO,QAAW;AACpB,gBAAU,IAAI,MAAM,IAAI,OAAO,MAAM;AACrC,aAAO,KAAK,KAAK;AAAA,IACnB,OAAO;AACL,aAAO,EAAE,IAAI;AAAA,IACf;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,yBAAyB,SAAwD;AAC/F,QAAM,EAAE,MAAM,IAAI;AAClB,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAC3C,QAAM,aAAa,QAAQ,eAAe,MAAM,OAAO,WAAW;AAElE,iBAAe,YACb,QACA,MACA,SACA,WAAoC,CAAC,GACtB;AACf,UAAM,MAAM,YAAY;AAAA,MACtB,eAAe,OAAO;AAAA,MACtB,aAAa,OAAO;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA,IAAI,IAAI;AAAA,IACV,CAAC;AAAA,EACH;AAKA,iBAAe,WACb,IACA,IACA,QAA0C,CAAC,GAC3C,YAAqC,CAAC,GACU;AAChD,UAAM,SAAS,MAAM,MAAM,KAAK,EAAE;AAClC,QAAI,CAAC,OAAQ,QAAO,SAAS,gBAAgB,EAAE,YAAY;AAC3D,UAAM,OAAO,OAAO;AACpB,QAAI,sBAAsB,IAAI,GAAG;AAC/B,aAAO,SAAS,gBAAgB,EAAE,iBAAiB,IAAI,2BAA2B,EAAE,EAAE;AAAA,IACxF;AACA,QAAI,CAAC,yBAAyB,MAAM,EAAE,GAAG;AACvC,aAAO,SAAS,mCAAmC,IAAI,OAAO,EAAE,QAAQ,EAAE,EAAE;AAAA,IAC9E;AACA,UAAM,UAAU,MAAM,MAAM;AAAA,MAC1B;AAAA,MACA,EAAE,QAAQ,MAAM,SAAS,OAAO,QAAQ;AAAA,MACxC,EAAE,QAAQ,IAAI,WAAW,IAAI,GAAG,GAAG,MAAM;AAAA,IAC3C;AACA,QAAI,CAAC,QAAS,QAAO,SAAS,EAAE;AAChC,UAAM,YAAY,SAAS,MAAM,EAAE,IAAI,gBAAgB,IAAI,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,GAAG,UAAU,CAAC;AAClG,WAAO,EAAE,WAAW,MAAM,OAAO,QAAQ;AAAA,EAC3C;AAIA,iBAAe,aACb,IACA,eACA,OACA,OACgD;AAChD,UAAM,SAAS,MAAM,MAAM,KAAK,EAAE;AAClC,QAAI,CAAC,OAAQ,QAAO,SAAS,gBAAgB,EAAE,YAAY;AAC3D,QAAI,CAAC,cAAc,SAAS,OAAO,MAAM,GAAG;AAC1C,aAAO,SAAS,gBAAgB,EAAE,OAAO,OAAO,MAAM,cAAc,cAAc,KAAK,GAAG,CAAC,EAAE;AAAA,IAC/F;AACA,UAAM,UAAU,MAAM,MAAM;AAAA,MAC1B;AAAA,MACA,EAAE,QAAQ,OAAO,QAAQ,SAAS,OAAO,QAAQ;AAAA,MACjD,EAAE,WAAW,IAAI,GAAG,GAAG,MAAM,MAAM,EAAE;AAAA,IACvC;AACA,QAAI,CAAC,QAAS,QAAO,SAAS,EAAE;AAChC,UAAM,YAAY,SAAS,MAAM,MAAM,MAAM,QAAQ,OAAO,GAAG,MAAM,WAAW,OAAO,KAAK,CAAC,CAAC;AAC9F,WAAO,EAAE,WAAW,MAAM,OAAO,QAAQ;AAAA,EAC3C;AAEA,QAAM,SAAuC,OAAO,UAAU;AAC5D,UAAM,KAAK,IAAI;AACf,UAAM,SAAS,MAAM,MAAM;AAAA,MACzB;AAAA,QACE,IAAI,MAAM,MAAM,WAAW;AAAA,QAC3B,aAAa,MAAM;AAAA,QACnB,UAAU,MAAM;AAAA,QAChB,UAAU,MAAM;AAAA,QAChB,QAAQ;AAAA,QACR,SAAS,MAAM,WAAW;AAAA,QAC1B,UAAU;AAAA,QACV,UAAU,CAAC;AAAA,QACX,YAAY,CAAC;AAAA,QACb,QAAQ,CAAC;AAAA,QACT,YAAY,MAAM;AAAA,QAClB,SAAS,CAAC;AAAA,QACV,WAAW;AAAA,QACX,WAAW;AAAA,MACb;AAAA,MACA,MAAM;AAAA,IACR;AACA,UAAM,YAAY,QAAQ,cAAc,uBAAuB,OAAO,OAAO,gBAAgB,OAAO,QAAQ,IAAI;AAAA,MAC9G,UAAU,OAAO;AAAA,MACjB,SAAS,OAAO;AAAA,MAChB,UAAU,OAAO;AAAA,IACnB,CAAC;AACD,WAAO;AAAA,EACT;AAEA,iBAAe,qBACb,aACA,UACA,QACmC;AACnC,UAAM,OAAO,MAAM,MAAM,gBAAgB,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC1E,WAAO,KAAK,KAAK,CAAC,QAAQ,IAAI,aAAa,QAAQ,KAAK;AAAA,EAC1D;AAEA,QAAM,cAAiD,OAAO,aAAa,aAAa;AACtF,UAAM,WAAW,MAAM,MAAM,gBAAgB,aAAa,EAAE,QAAQ,CAAC,YAAY,YAAY,EAAE,CAAC;AAChG,UAAM,WAAW,SAAS,OAAO,CAAC,QAAQ,IAAI,aAAa,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO;AAC7F,WAAO,SAAS,WAAW,IAAI,IAAI,KAAK,IAAI,GAAG,QAAQ,IAAI;AAAA,EAC7D;AAEA,QAAM,SAAuC,OAAO,OAAO;AACzD,UAAM,SAAS,MAAM,MAAM,KAAK,EAAE;AAClC,QAAI,CAAC,OAAQ,QAAO,SAAS,gBAAgB,EAAE,YAAY;AAC3D,QAAI,OAAO,WAAW,qBAAqB;AACzC,aAAO,SAAS,gBAAgB,EAAE,OAAO,OAAO,MAAM,kCAAkC;AAAA,IAC1F;AACA,UAAM,UAAU,MAAM,MAAM;AAAA,MAC1B;AAAA,MACA,EAAE,QAAQ,qBAAqB,SAAS,OAAO,QAAQ;AAAA,MACvD,EAAE,QAAQ,SAAS,SAAS,OAAO,UAAU,GAAG,WAAW,IAAI,EAAE;AAAA,IACnE;AACA,QAAI,CAAC,QAAS,QAAO,SAAS,EAAE;AAChC,UAAM,YAAY,SAAS,eAAe,qBAAqB,QAAQ,OAAO,WAAW;AAAA,MACvF,MAAM,OAAO;AAAA,MACb,IAAI,QAAQ;AAAA,IACd,CAAC;AACD,WAAO,EAAE,WAAW,MAAM,OAAO,QAAQ;AAAA,EAC3C;AAEA,QAAM,iBAAuD,CAAC,IAAI,YAChE;AAAA,IACE;AAAA,IACA,CAAC,SAAS,SAAS;AAAA,IACnB,CAAC,YAAY,EAAE,UAAU,UAAU,OAAO,UAAU,OAAO,EAAE;AAAA,IAC7D;AAAA,MACE,MAAM;AAAA,MACN,SAAS,CAAC,WAAW,sBAAsB,QAAQ,MAAM,aAAa,OAAO,SAAS,MAAM;AAAA,MAC5F,UAAU,OAAO,EAAE,UAAU,QAAQ,IAAI,CAAC,UAAU,MAAM,EAAE,EAAE;AAAA,IAChE;AAAA,EACF;AAEF,QAAM,mBAA2D,OAAO,IAAI,YAAY;AACtF,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA,CAAC,SAAS,SAAS;AAAA,MACnB,CAACA,aAAY,EAAE,YAAY,UAAUA,QAAO,YAAY,OAAO,EAAE;AAAA,MACjE;AAAA,QACE,MAAM;AAAA,QACN,SAAS,CAACA,YACR,wBAAwB,QAAQ,MAAM,aAAa,6BAA6BA,QAAO,UAAU,EAAE,MAAM;AAAA,QAC3G,UAAU,OAAO,EAAE,UAAU,QAAQ,IAAI,CAAC,UAAU,MAAM,EAAE,EAAE;AAAA,MAChE;AAAA,IACF;AACA,QAAI,CAAC,OAAO,UAAW,QAAO;AAG9B,UAAM,SAAS,OAAO;AACtB,UAAM,WAAW,6BAA6B,OAAO,UAAU,EAAE;AACjE,QAAI,OAAO,WAAW,WAAW,WAAW,GAAG;AAC7C,aAAO,WAAW,IAAI,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC;AAAA,IACnD;AACA,QAAI,OAAO,WAAW,aAAa,aAAa,GAAG;AACjD,aAAO,WAAW,IAAI,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AAEA,QAAM,eAAmD,CAAC,IAAI,WAC5D;AAAA,IACE;AAAA,IACA,CAAC,SAAS,SAAS;AAAA,IACnB,OAAO,EAAE,QAAQ,OAAO,MAAM,EAAE;AAAA,IAChC;AAAA,MACE,MAAM;AAAA,MACN,SAAS,MAAM,oBAAoB,OAAO,MAAM,KAAK,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,MAAM,EAAE,MAAM;AAAA,MACnG,UAAU,OAAO,EAAE,QAAQ,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,MAAM,EAAE,IAAI,CAAC,UAAU,MAAM,IAAI,EAAE;AAAA,IAChG;AAAA,EACF;AAEF,QAAM,SAAuC,OAAO,IAAI,UAAU;AAChE,UAAM,SAAS,MAAM,MAAM,KAAK,EAAE;AAClC,QAAI,CAAC,OAAQ,QAAO,SAAS,gBAAgB,EAAE,YAAY;AAC3D,QAAI,OAAO,WAAW,SAAS;AAC7B,aAAO,SAAS,gBAAgB,EAAE,OAAO,OAAO,MAAM,wBAAwB;AAAA,IAChF;AACA,UAAM,WAAW,6BAA6B,OAAO,UAAU;AAC/D,QAAI,SAAS,SAAS,GAAG;AACvB,aAAO;AAAA,QACL,gBAAgB,EAAE,QAAQ,SAAS,MAAM,sCAAsC,SAAS,IAAI,CAACC,WAAUA,OAAM,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,MAC7H;AAAA,IACF;AACA,UAAM,eAAe,MAAM,gBAAgB,MAAM,SAAS;AAC1D,UAAM,QAAiC;AAAA,MACrC,SAAS,OAAO;AAAA,MAChB,QAAQ;AAAA,MACR,YAAY,MAAM;AAAA,MAClB,GAAI,iBAAiB,SAAY,CAAC,IAAI,EAAE,aAAa;AAAA,MACrD,IAAI,IAAI;AAAA,IACV;AACA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,QACE,UAAU,MAAM;AAAA,QAChB,QAAQ,MAAM,OAAO,MAAM;AAAA,QAC3B,YAAY,MAAM;AAAA,QAClB,SAAS,CAAC,GAAG,OAAO,SAAS,KAAK;AAAA,MACpC;AAAA,MACA,EAAE,SAAS,OAAO,SAAS,cAAc,MAAM,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,MAAM,EAAE,OAAO;AAAA,IAChG;AAAA,EACF;AAEA,QAAM,eAAmD,OAAO,IAAI,UAAU;AAC5E,UAAM,SAAS,MAAM,MAAM,KAAK,EAAE;AAClC,QAAI,CAAC,OAAQ,QAAO,SAAS,gBAAgB,EAAE,YAAY;AAC3D,QAAI,OAAO,WAAW,SAAS;AAC7B,aAAO,SAAS,gBAAgB,EAAE,OAAO,OAAO,MAAM,mCAAmC;AAAA,IAC3F;AACA,UAAM,KAAwB,MAAM,YAAY,YAAY,aAAa;AACzE,UAAM,QAAiC;AAAA,MACrC,SAAS,OAAO;AAAA,MAChB,QAAQ;AAAA,MACR,YAAY,OAAO;AAAA,MACnB,GAAI,OAAO,UAAU,SAAS,SAAY,CAAC,IAAI,EAAE,cAAc,OAAO,SAAS,KAAK;AAAA,MACpF,YAAY,MAAM;AAAA,MAClB,GAAI,MAAM,SAAS,SAAY,CAAC,IAAI,EAAE,YAAY,MAAM,KAAK;AAAA,MAC7D,IAAI,IAAI;AAAA,IACV;AACA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,EAAE,SAAS,CAAC,GAAG,OAAO,SAAS,KAAK,EAAE;AAAA,MACtC,EAAE,SAAS,MAAM,SAAS,YAAY,MAAM,WAAW;AAAA,IACzD;AACA,QAAI,CAAC,QAAQ,aAAa,OAAO,WAAY,QAAO;AAEpD,UAAM,gBAAgB,MAAM,MAAM,gBAAgB,OAAO,aAAa,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;AAC9F,eAAW,SAAS,eAAe;AACjC,UAAI,MAAM,OAAO,MAAM,MAAM,aAAa,OAAO,SAAU;AAC3D,YAAM,WAAW,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,CAAC;AAAA,IACnE;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL;AAAA,IACA,KAAK,CAAC,OAAO,MAAM,KAAK,EAAE;AAAA,IAC1B,WAAW,CAAC,aAAa,aAAa,MAAM,UAAU,aAAa,QAAQ;AAAA,IAC3E,oBAAoB,CAAC,aAAa,aAAa,qBAAqB,aAAa,UAAU,mBAAmB;AAAA,IAC9G,gBAAgB,CAAC,aAAa,aAAa,qBAAqB,aAAa,UAAU,OAAO;AAAA,IAC9F;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,CAAC,OAAO,WAAW,IAAI,YAAY;AAAA,EAChD;AACF;AAiBO,SAAS,iCAA2D;AACzE,QAAM,OAAO,oBAAI,IAA+B;AAChD,QAAM,SAAkC,CAAC;AAEzC,SAAO;AAAA,IACL,MAAM,KAAK,IAAI;AACb,YAAM,SAAS,KAAK,IAAI,EAAE;AAC1B,aAAO,SAAS,gBAAgB,MAAM,IAAI;AAAA,IAC5C;AAAA,IACA,MAAM,UAAU,aAAa,UAAU;AACrC,iBAAW,UAAU,KAAK,OAAO,GAAG;AAClC,YACE,OAAO,gBAAgB,eACvB,OAAO,aAAa,aACnB,OAAO,WAAW,WAAW,OAAO,WAAW,YAChD;AACA,iBAAO,gBAAgB,MAAM;AAAA,QAC/B;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,gBAAgB,aAAa,MAAM;AACvC,YAAM,MAA2B,CAAC;AAClC,iBAAW,UAAU,KAAK,OAAO,GAAG;AAClC,YAAI,OAAO,gBAAgB,YAAa;AACxC,YAAI,MAAM,UAAU,CAAC,KAAK,OAAO,SAAS,OAAO,MAAM,EAAG;AAC1D,YAAI,KAAK,gBAAgB,MAAM,CAAC;AAAA,MAClC;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,OAAO,QAAQ;AACnB,UAAI,KAAK,IAAI,OAAO,EAAE,EAAG,OAAM,IAAI,MAAM,gBAAgB,OAAO,EAAE,iBAAiB;AACnF,WAAK,IAAI,OAAO,IAAI,gBAAgB,MAAM,CAAC;AAC3C,aAAO,gBAAgB,MAAM;AAAA,IAC/B;AAAA,IACA,MAAM,OAAO,IAAI,OAAO,OAAO;AAC7B,YAAM,UAAU,KAAK,IAAI,EAAE;AAC3B,UAAI,CAAC,QAAS,QAAO;AACrB,UAAI,MAAM,WAAW,UAAa,QAAQ,WAAW,MAAM,OAAQ,QAAO;AAC1E,UAAI,MAAM,YAAY,UAAa,QAAQ,YAAY,MAAM,QAAS,QAAO;AAC7E,YAAM,OAA0B,EAAE,GAAG,QAAQ;AAC7C,UAAI,MAAM,WAAW,OAAW,MAAK,SAAS,MAAM;AACpD,UAAI,MAAM,YAAY,OAAW,MAAK,UAAU,MAAM;AACtD,UAAI,MAAM,aAAa,OAAW,MAAK,WAAW,MAAM;AACxD,UAAI,MAAM,aAAa,OAAW,MAAK,WAAW,MAAM;AACxD,UAAI,MAAM,eAAe,OAAW,MAAK,aAAa,MAAM;AAC5D,UAAI,MAAM,WAAW,OAAW,MAAK,SAAS,MAAM;AACpD,UAAI,MAAM,eAAe,OAAW,MAAK,aAAa,MAAM;AAC5D,UAAI,MAAM,YAAY,OAAW,MAAK,UAAU,MAAM;AACtD,UAAI,MAAM,cAAc,OAAW,MAAK,YAAY,MAAM;AAC1D,WAAK,IAAI,IAAI,gBAAgB,IAAI,CAAC;AAClC,aAAO,gBAAgB,IAAI;AAAA,IAC7B;AAAA,IACA,MAAM,YAAY,OAAO;AACvB,aAAO,KAAK,gBAAgB,KAAK,CAAC;AAAA,IACpC;AAAA,IACA,SAAS;AACP,aAAO,OAAO,IAAI,CAAC,UAAU,gBAAgB,KAAK,CAAC;AAAA,IACrD;AAAA,IACA,IAAI,QAAQ;AACV,WAAK,IAAI,OAAO,IAAI,gBAAgB,MAAM,CAAC;AAAA,IAC7C;AAAA,EACF;AACF;;;ACtdO,SAAS,gBAAgB,MAAiC,MAAoB,KAAK,KAA4B;AACpH,SAAO,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,YAAY,IAAI,EAAE;AACzD;AAoBA,eAAsB,8BACpB,OACA,OAC8B;AAC9B,QAAM,OAAO,MAAM,MAAM,gBAAgB,MAAM,WAAW;AAC1D,QAAM,UAA+B,CAAC;AACtC,aAAW,UAAU,MAAM;AACzB,UAAM,gBAAgB,OAAO,WAAW,UAAU,MAAM;AACxD,UAAM,iBAAiB,OAAO,QAAQ,KAAK,CAAC,UAAU,MAAM,WAAW,UAAU,MAAM,KAAK;AAC5F,QAAI,CAAC,iBAAiB,CAAC,eAAgB;AACvC,UAAM,WAAW,CAAC,gBAA8D;AAAA,MAC9E,GAAG;AAAA,MACH,eAAe,CAAC,GAAG,MAAM,aAAa;AAAA,MACtC,GAAI,MAAM,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,IAClE;AACA,UAAM,OAAO,MAAM,MAAM;AAAA,MACvB,OAAO;AAAA,MACP,EAAE,QAAQ,OAAO,QAAQ,SAAS,OAAO,QAAQ;AAAA,MACjD;AAAA,QACE,GAAI,gBAAgB,EAAE,YAAY,SAAS,OAAO,UAAU,EAAE,IAAI,CAAC;AAAA,QACnE,SAAS,OAAO,QAAQ;AAAA,UAAI,CAAC,UAC3B,MAAM,WAAW,UAAU,MAAM,QAAQ,EAAE,GAAG,OAAO,YAAY,SAAS,MAAM,UAAU,EAAE,IAAI;AAAA,QAClG;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,MAAM;AACT,YAAM,QAAQ,KAAK,sDAAsD,OAAO,EAAE,WAAW;AAC7F;AAAA,IACF;AACA,UAAM,MAAM,YAAY;AAAA,MACtB,eAAe,OAAO;AAAA,MACtB,aAAa,OAAO;AAAA,MACpB,MAAM;AAAA,MACN,SAAS,sCAAsC,MAAM,KAAK;AAAA,MAC1D,UAAU,EAAE,OAAO,MAAM,OAAO,eAAe,CAAC,GAAG,MAAM,aAAa,GAAG,SAAS,MAAM,WAAW,KAAK;AAAA,MACxG,IAAI,KAAK,IAAI;AAAA,IACf,CAAC;AACD,YAAQ,KAAK,IAAI;AAAA,EACnB;AACA,SAAO;AACT;AAWO,SAAS,uBACd,SACA,aACgB;AAChB,QAAM,QAAwB,CAAC;AAC/B,aAAW,UAAU,SAAS;AAC5B,UAAM,WAAW,YAAY,MAAM;AACnC,QAAI,CAAC,YAAY,SAAS,WAAW,EAAG;AACxC,UAAM,KAAK,EAAE,QAAQ,OAAO,IAAI,SAAS,CAAC;AAAA,EAC5C;AACA,SAAO;AACT;;;ACrFO,IAAM,yBAAyB;AAI/B,IAAM,0BAA0B;AAgCvC,eAAe,OACb,KACA,MACY;AACZ,MAAI,UAAU,MAAM,IAAI;AACxB,MAAI,CAAC,QAAQ,aAAa,QAAQ,SAAU,WAAU,MAAM,IAAI;AAChE,MAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,eAAe,MAAM,QAAQ,OAAO,QAAQ,WAAW,MAAM,GAAG;AAClG,SAAO,QAAQ;AACjB;AAEA,SAAS,gBAAgB,MAAuC;AAC9D,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,SAAS,KAAK,IAAI;AAC5E,MAAI,CAAC,SAAU,OAAM,IAAI,eAAe,qBAAqB,8EAAyE;AACtI,SAAO;AACT;AAEA,SAAS,aAAa,MAA+B,OAA0B;AAC7E,QAAM,MAAM,KAAK,KAAK;AACtB,MAAI,CAAC,MAAM,QAAQ,GAAG,KAAK,IAAI,WAAW,GAAG;AAC3C,UAAM,IAAI,eAAe,mBAAmB,GAAG,KAAK,6BAA6B;AAAA,EACnF;AACA,MAAI,IAAI,SAAS,wBAAwB;AACvC,UAAM,IAAI,eAAe,mBAAmB,GAAG,KAAK,oBAAoB,sBAAsB,gDAA2C;AAAA,EAC3I;AACA,SAAO;AACT;AASA,eAAe,aACb,SACA,QACA,UACA,KAC4B;AAC5B,QAAM,OAAO,MAAM,QAAQ,UAAU,IAAI,aAAa,QAAQ;AAC9D,MAAI,KAAM,QAAO;AACjB,QAAM,iBAAiB,MAAM,QAAQ,eAAe,IAAI,aAAa,QAAQ;AAC7E,MAAI,gBAAgB;AAClB,UAAM,IAAI;AAAA,MACR;AAAA,MACA,oBAAoB,QAAQ,MAAM,eAAe,OAAO;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AACA,QAAM,qBAAqB,MAAM,QAAQ,mBAAmB,IAAI,aAAa,QAAQ;AACrF,MAAI,oBAAoB;AACtB,WAAO,OAAO,MAAM,QAAQ,OAAO,mBAAmB,EAAE,GAAG,eAAe;AAAA,EAC5E;AACA,SAAO,QAAQ,OAAO;AAAA,IACpB,aAAa,IAAI;AAAA,IACjB,UAAU,IAAI;AAAA,IACd;AAAA,IACA,SAAS,MAAM,QAAQ,YAAY,IAAI,aAAa,QAAQ;AAAA,IAC5D,YAAY,gBAAgB,OAAO,WAAW,GAAG,GAAG,OAAO,GAAG;AAAA,EAChE,CAAC;AACH;AAIO,SAAS,sBAAsB,QAAoD;AACxF,QAAM,UAAU,yBAAyB;AAAA,IACvC,OAAO,OAAO;AAAA,IACd,GAAI,OAAO,MAAM,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC;AAAA,IACxC,GAAI,OAAO,aAAa,EAAE,YAAY,OAAO,WAAW,IAAI,CAAC;AAAA,EAC/D,CAAC;AAED,QAAM,iBAAiB,cAAc;AAAA,IACnC,MAAM;AAAA,IACN,aACE;AAAA,IACF,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,UAAU,EAAE,MAAM,UAAU,aAAa,wCAAwC;AAAA,QACjF,SAAS;AAAA,UACP,MAAM;AAAA,UACN,UAAU;AAAA,UACV,UAAU;AAAA,UACV,OAAO;AAAA,YACL,MAAM;AAAA,YACN,YAAY;AAAA,cACV,IAAI,EAAE,MAAM,UAAU,aAAa,6CAAwC;AAAA,cAC3E,WAAW,EAAE,MAAM,UAAU,aAAa,qDAAqD;AAAA,cAC/F,SAAS;AAAA,gBACP,MAAM;AAAA,gBACN,YAAY;AAAA,kBACV,MAAM,EAAE,MAAM,SAAS;AAAA,kBACvB,OAAO,EAAE,MAAM,UAAU,aAAa,oDAAiD;AAAA,kBACvF,OAAO,EAAE,MAAM,UAAU,aAAa,6BAA6B;AAAA,gBACrE;AAAA,cACF;AAAA,cACA,QAAQ,EAAE,MAAM,UAAU,aAAa,+CAA+C;AAAA,cACtF,OAAO,EAAE,MAAM,UAAU,aAAa,qCAAqC;AAAA,cAC3E,YAAY,EAAE,MAAM,UAAU,SAAS,GAAG,SAAS,EAAE;AAAA,YACvD;AAAA,YACA,UAAU,CAAC,MAAM,aAAa,UAAU,OAAO;AAAA,UACjD;AAAA,QACF;AAAA,MACF;AAAA,MACA,UAAU,CAAC,YAAY,SAAS;AAAA,IAClC;AAAA,IACA,MAAM,QAAQ,MAA+B,KAAqB;AAChE,YAAM,WAAW,gBAAgB,IAAI;AACrC,YAAM,MAAM,aAAa,MAAM,SAAS;AACxC,YAAM,UAA2B,CAAC;AAClC,eAAS,QAAQ,GAAG,QAAQ,IAAI,QAAQ,SAAS,GAAG;AAClD,cAAM,SAAS,mBAAmB,IAAI,KAAK,GAAG,WAAW,KAAK,GAAG;AACjE,YAAI,CAAC,OAAO,GAAI,OAAM,IAAI,eAAe,oBAAoB,GAAG,OAAO,KAAK,KAAK,OAAO,KAAK,EAAE;AAC/F,gBAAQ,KAAK,OAAO,KAAK;AAAA,MAC3B;AAEA,eAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,cAAM,QAAQ,QAAQ,KAAK;AAC3B,YAAI,CAAE,MAAM,OAAO,iBAAiB,MAAM,WAAW,GAAG,GAAI;AAC1D,gBAAM,IAAI;AAAA,YACR;AAAA,YACA,WAAW,KAAK,iBAAiB,MAAM,SAAS;AAAA,UAClD;AAAA,QACF;AAAA,MACF;AACA,YAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,UAAU,GAAG;AAC/D,YAAM,SAAS,MAAM,OAAO,MAAM,QAAQ,eAAe,MAAM,IAAI,OAAO,GAAG,mBAAmB;AAChG,aAAO,EAAE,eAAe,OAAO,IAAI,SAAS,OAAO,SAAS,eAAe,OAAO,SAAS,OAAO;AAAA,IACpG;AAAA,EACF,CAAC;AAED,QAAM,gBAAgB,cAAc;AAAA,IAClC,MAAM;AAAA,IACN,aACE;AAAA,IACF,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,UAAU,EAAE,MAAM,UAAU,aAAa,wCAAwC;AAAA,QACjF,YAAY;AAAA,UACV,MAAM;AAAA,UACN,UAAU;AAAA,UACV,UAAU;AAAA,UACV,OAAO;AAAA,YACL,MAAM;AAAA,YACN,YAAY;AAAA,cACV,IAAI,EAAE,MAAM,UAAU,aAAa,6CAAwC;AAAA,cAC3E,UAAU,EAAE,MAAM,UAAU,MAAM,CAAC,YAAY,YAAY,UAAU,EAAE;AAAA,cACvE,MAAM,EAAE,MAAM,UAAU,aAAa,8CAA8C;AAAA,cACnF,SAAS,EAAE,MAAM,SAAS;AAAA,cAC1B,SAAS,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,cACpD,UAAU,EAAE,MAAM,UAAU;AAAA,cAC5B,gBAAgB,EAAE,MAAM,SAAS;AAAA,YACnC;AAAA,YACA,UAAU,CAAC,MAAM,YAAY,QAAQ,SAAS;AAAA,UAChD;AAAA,QACF;AAAA,MACF;AAAA,MACA,UAAU,CAAC,YAAY,YAAY;AAAA,IACrC;AAAA,IACA,MAAM,QAAQ,MAA+B,KAAqB;AAChE,YAAM,WAAW,gBAAgB,IAAI;AACrC,YAAM,MAAM,aAAa,MAAM,YAAY;AAC3C,YAAM,UAA4B,CAAC;AACnC,eAAS,QAAQ,GAAG,QAAQ,IAAI,QAAQ,SAAS,GAAG;AAClD,cAAM,SAAS,oBAAoB,IAAI,KAAK,GAAG,cAAc,KAAK,GAAG;AACrE,YAAI,CAAC,OAAO,GAAI,OAAM,IAAI,eAAe,qBAAqB,GAAG,OAAO,KAAK,KAAK,OAAO,KAAK,EAAE;AAChG,YAAI,CAAC,OAAO,eAAe,SAAS,OAAO,MAAM,IAAI,GAAG;AACtD,gBAAM,IAAI;AAAA,YACR;AAAA,YACA,cAAc,KAAK,2BAA2B,OAAO,eAAe,KAAK,IAAI,CAAC;AAAA,UAChF;AAAA,QACF;AAGA,YAAI,OAAO,MAAM,YAAY,OAAO,MAAM,eAAe,OAAW,QAAO,MAAM,aAAa;AAC9F,gBAAQ,KAAK,OAAO,KAAK;AAAA,MAC3B;AACA,YAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,UAAU,GAAG;AAC/D,YAAM,SAAS,MAAM,OAAO,MAAM,QAAQ,iBAAiB,MAAM,IAAI,OAAO,GAAG,oBAAoB;AACnG,aAAO;AAAA,QACL,eAAe,OAAO;AAAA,QACtB,SAAS,OAAO;AAAA,QAChB,QAAQ,OAAO;AAAA,QACf,oBAAoB,6BAA6B,OAAO,UAAU,EAAE;AAAA,MACtE;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,oBAAoB,cAAc;AAAA,IACtC,MAAM;AAAA,IACN,aACE;AAAA,IACF,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,UAAU,EAAE,MAAM,UAAU,aAAa,wCAAwC;AAAA,QACjF,UAAU;AAAA,UACR,MAAM;AAAA,UACN,YAAY;AAAA,YACV,MAAM,EAAE,MAAM,UAAU,aAAa,6CAA6C;AAAA,YAClF,OAAO,EAAE,MAAM,SAAS;AAAA,YACxB,MAAM,EAAE,MAAM,UAAU,aAAa,mDAAmD;AAAA,YACxF,SAAS,EAAE,MAAM,UAAU,aAAa,0CAA0C;AAAA,YAClF,WAAW,EAAE,MAAM,SAAS;AAAA,YAC5B,UAAU;AAAA,cACR,MAAM;AAAA,cACN,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,GAAG,SAAS,EAAE,MAAM,SAAS,EAAE;AAAA,cACpE,aAAa;AAAA,YACf;AAAA,YACA,QAAQ,EAAE,MAAM,UAAU,aAAa,kDAAkD;AAAA,UAC3F;AAAA,UACA,UAAU,CAAC,QAAQ,OAAO;AAAA,QAC5B;AAAA,QACA,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,YACL,MAAM;AAAA,YACN,YAAY;AAAA,cACV,IAAI,EAAE,MAAM,SAAS;AAAA,cACrB,MAAM,EAAE,MAAM,SAAS;AAAA,cACvB,QAAQ,EAAE,MAAM,UAAU;AAAA,cAC1B,QAAQ,EAAE,MAAM,SAAS;AAAA,YAC3B;AAAA,YACA,UAAU,CAAC,MAAM,QAAQ,QAAQ;AAAA,UACnC;AAAA,UACA,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,YAAY,UAAU;AAAA,IACnC;AAAA,IACA,MAAM,QAAQ,MAA+B,KAAqB;AAChE,YAAM,WAAW,gBAAgB,IAAI;AACrC,YAAM,iBAAiB,mBAAmB,KAAK,QAAQ;AACvD,UAAI,CAAC,eAAe,GAAI,OAAM,IAAI,eAAe,oBAAoB,GAAG,eAAe,KAAK,KAAK,eAAe,KAAK,EAAE;AACvH,YAAM,WAAW,eAAe;AAChC,UAAI,CAAC,OAAO,cAAc,SAAS,SAAS,IAAI,GAAG;AACjD,cAAM,IAAI,eAAe,oBAAoB,kCAAkC,OAAO,cAAc,KAAK,IAAI,CAAC,EAAE;AAAA,MAClH;AACA,YAAM,cAA8B,CAAC;AACrC,UAAI,KAAK,WAAW,QAAW;AAC7B,YAAI,CAAC,MAAM,QAAQ,KAAK,MAAM,EAAG,OAAM,IAAI,eAAe,kBAAkB,uCAAuC;AACnH,iBAAS,QAAQ,GAAG,QAAQ,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC1D,gBAAM,SAAS,qBAAqB,KAAK,OAAO,KAAK,GAAG,UAAU,KAAK,GAAG;AAC1E,cAAI,CAAC,OAAO,GAAI,OAAM,IAAI,eAAe,kBAAkB,GAAG,OAAO,KAAK,KAAK,OAAO,KAAK,EAAE;AAC7F,sBAAY,KAAK,EAAE,GAAG,OAAO,OAAO,QAAQ,QAAQ,CAAC;AAAA,QACvD;AAAA,MACF;AAEA,YAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,UAAU,GAAG;AAC/D,YAAM,WAAW,6BAA6B,MAAM,UAAU;AAC9D,UAAI,SAAS,SAAS,GAAG;AACvB,cAAM,IAAI;AAAA,UACR;AAAA,UACA,kBAAkB,SAAS,MAAM,sCAAsC,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,UACnH;AAAA,QACF;AAAA,MACF;AAMA,YAAM,SAAyB,CAAC,GAAG,WAAW;AAC9C,UAAI,OAAO,iBAAiB;AAC1B,cAAM,UAAU,OAAO,gBAAgB,QAAQ;AAC/C,cAAM,UAAU,IAAI,IAAI,MAAM,SAAS,IAAI,CAAC,UAAU,MAAM,MAAM,CAAC;AACnE,cAAM,UAAU,QAAQ,OAAO,CAAC,WAAW,CAAC,QAAQ,IAAI,MAAM,CAAC;AAC/D,cAAM,WAAyB;AAAA,UAC7B,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,QAAQ,QAAQ,WAAW;AAAA,UAC3B,QACE,QAAQ,WAAW,IACf,GAAG,QAAQ,MAAM,IAAI,QAAQ,MAAM,gCACnC,yBAAyB,QAAQ,KAAK,IAAI,CAAC;AAAA,UACjD,QAAQ;AAAA,QACV;AACA,eAAO,QAAQ,QAAQ;AACvB,YAAI,QAAQ,SAAS,GAAG;AACtB,gBAAM,OAAO,MAAM,QAAQ,aAAa,MAAM,IAAI,MAAM,GAAG,iBAAiB;AAC5E,gBAAM,IAAI;AAAA,YACR;AAAA,YACA,kDAAkD,QAAQ,KAAK,IAAI,CAAC;AAAA,UACtE;AAAA,QACF;AAAA,MACF;AAEA,YAAM,aAAa,gBAAgB,OAAO,WAAW,GAAG,GAAG,OAAO,GAAG;AACrE,YAAM,SAAS,MAAM;AAAA,QACnB,MAAM,QAAQ,OAAO,MAAM,IAAI,EAAE,UAAU,QAAQ,WAAW,CAAC;AAAA,QAC/D;AAAA,MACF;AACA,YAAM,OAAO,UAAU,QAAQ,GAAG;AAClC,aAAO;AAAA,QACL,eAAe,OAAO;AAAA,QACtB,SAAS,OAAO;AAAA,QAChB,QAAQ,OAAO;AAAA,QACf,QAAQ,OAAO,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,MAAM,QAAQ,MAAM,QAAQ,QAAQ,MAAM,OAAO,EAAE;AAAA,MACzG;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO,CAAC,gBAAgB,eAAe,iBAAiB;AAC1D;;;ACzVO,SAAS,+BAA+B,MAAuD;AACpG,QAAM,KAAK,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,KAAK,IAAI,KAAK,GAAG,KAAK,IAAI;AAC5E,MAAI,CAAC,GAAI,QAAO,EAAE,IAAI,OAAO,OAAO,0BAA0B;AAC9D,QAAM,UAAU,KAAK;AACrB,MAAI,YAAY,aAAa,YAAY,mBAAmB;AAC1D,WAAO,EAAE,IAAI,OAAO,OAAO,uDAAuD;AAAA,EACpF;AACA,QAAM,OAAO,KAAK,SAAS,SAAY,SAAY,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,KAAK,IAAI;AACtG,MAAI,SAAS,KAAM,QAAO,EAAE,IAAI,OAAO,OAAO,kCAAkC;AAChF,MAAI,YAAY,mBAAmB;AACjC,QAAI,CAAC,KAAM,QAAO,EAAE,IAAI,OAAO,OAAO,uFAAkF;AACxH,WAAO,EAAE,IAAI,MAAM,IAAI,SAAS,KAAK;AAAA,EACvC;AACA,SAAO,OAAO,EAAE,IAAI,MAAM,IAAI,SAAS,KAAK,IAAI,EAAE,IAAI,MAAM,IAAI,QAAQ;AAC1E;AAsDO,SAAS,wBAAwB,SAAsD;AAC5F,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,UAA8B,yBAAyB;AAAA,IAC3D,OAAO,QAAQ;AAAA,IACf,GAAI,QAAQ,MAAM,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC;AAAA,EAC5C,CAAC;AAED,iBAAe,KAAK,SAAqC;AACvD,UAAM,OAAO,MAAM,QAAQ,UAAU,EAAE,SAAS,QAAQ,OAAO,CAAC;AAChE,QAAI,CAAC,KAAK,GAAI,QAAO,KAAK;AAC1B,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,cAAc,IAAI,aAAa,IAAI,QAAQ;AACjD,UAAM,WAAW,cACb,YAAY,MAAM,GAAG,EAAE,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAAE,OAAO,OAAO,IAClE;AACJ,UAAM,eAAe,MAAM,QAAQ,MAAM;AAAA,MACvC,KAAK;AAAA,MACL,WAAW,EAAE,QAAQ,SAA0C,IAAI;AAAA,IACrE;AACA,WAAO,SAAS,KAAK,EAAE,aAAa,CAAC;AAAA,EACvC;AAEA,iBAAe,OAAO,SAAkB,IAA+B;AACrE,UAAM,OAAO,MAAM,QAAQ,UAAU,EAAE,SAAS,QAAQ,SAAS,CAAC;AAClE,QAAI,CAAC,KAAK,GAAI,QAAO,KAAK;AAC1B,UAAM,SAAS,MAAM,QAAQ,MAAM,KAAK,EAAE;AAC1C,QAAI,CAAC,UAAU,OAAO,gBAAgB,KAAK,aAAa;AACtD,aAAO,SAAS,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AACA,WAAO,SAAS,KAAK,EAAE,aAAa,OAAO,CAAC;AAAA,EAC9C;AAEA,iBAAe,QAAQ,SAAqC;AAC1D,UAAM,OAAQ,MAAM,QAAQ,KAAK,EAAE,MAAM,MAAM,IAAI;AACnD,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG;AAC5D,aAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtE;AACA,UAAM,aAAa,+BAA+B,IAAI;AACtD,QAAI,CAAC,WAAW,GAAI,QAAO,SAAS,KAAK,EAAE,OAAO,WAAW,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,UAAM,OAAO,MAAM,QAAQ,UAAU,EAAE,SAAS,QAAQ,WAAW,KAAK,CAAC;AACzE,QAAI,CAAC,KAAK,GAAI,QAAO,KAAK;AAE1B,UAAM,WAAW,MAAM,QAAQ,MAAM,KAAK,WAAW,EAAE;AACvD,QAAI,CAAC,YAAY,SAAS,gBAAgB,KAAK,aAAa;AAC1D,aAAO,SAAS,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAEA,UAAM,UAAU,MAAM,QAAQ,aAAa,WAAW,IAAI;AAAA,MACxD,SAAS,WAAW;AAAA,MACpB,YAAY,KAAK;AAAA,MACjB,GAAI,WAAW,SAAS,SAAY,CAAC,IAAI,EAAE,MAAM,WAAW,KAAK;AAAA,IACnE,CAAC;AACD,QAAI,CAAC,QAAQ,WAAW;AAGtB,aAAO,SAAS,KAAK,EAAE,MAAM,oBAAoB,OAAO,QAAQ,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1F;AACA,UAAM,SAAS,QAAQ;AAIvB,QAAI;AACF,YAAM,QAAQ,oBAAoB,2BAA2B,MAAM,GAAG,MAAM;AAAA,IAC9E,SAAS,OAAO;AACd,aAAO,MAAM,4CAA4C,KAAK;AAAA,IAChE;AACA,QAAI;AACF,YAAM,QAAQ,YAAY;AAAA,QACxB;AAAA,QACA,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,SAAS,SAAY,CAAC,IAAI,EAAE,MAAM,WAAW,KAAK;AAAA,QACjE,YAAY,KAAK;AAAA,MACnB,CAAC;AAAA,IACH,SAAS,OAAO;AACd,aAAO,MAAM,oCAAoC,KAAK;AAAA,IACxD;AACA,QAAI,WAAW,YAAY,WAAW;AACpC,UAAI;AACF,cAAM,QAAQ,WAAW,MAAM;AAAA,MACjC,SAAS,OAAO;AACd,eAAO,MAAM,mCAAmC,KAAK;AAAA,MACvD;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,EAAE,IAAI,MAAM,aAAa,OAAO,CAAC;AAAA,EACxD;AAEA,SAAO,EAAE,MAAM,QAAQ,QAAQ;AACjC;","names":["record","entry"]}
+{"version":3,"sources":["../../src/work-product/service.ts","../../src/work-product/provenance.ts","../../src/work-product/quote.ts","../../src/work-product/tools.ts","../../src/work-product/route.ts"],"sourcesContent":["/**\n * The guarded work-product status machine — the `/missions` service PATTERN\n * (load → validate against a transition table → CAS-write guarded on what was\n * read → audit event) over {@link WorkProductStorePort}. Deliberately NOT a\n * reuse of the mission service: missions' cursor/plan/budget machinery does\n * not apply here, and the six-status review machine is a different contract.\n *\n * Concurrency contract: a scope's draft is driven by a single serialized turn\n * owner, so real contention is rare. The service is the typed guard layer,\n * not a serializer — every mutation re-reads the record and CAS-writes\n * guarded on the `{status, version}` it read. A guard miss surfaces as\n * `{ succeeded: false, conflict: true }` (retryable: re-read and re-apply),\n * never a silent clobber.\n */\n\nimport {\n  unresolvedBlockingExceptions,\n  type EvidenceEntry,\n  type ExceptionEntry,\n  type QualityCheck,\n  type WorkProductArtifact,\n  type WorkProductAuditEvent,\n  type WorkProductPatch,\n  type WorkProductProvenance,\n  type WorkProductRecord,\n  type WorkProductStatus,\n  type WorkProductStorePort,\n  type WorkProductVersionEntry,\n} from './types'\n\n/** Discriminated outcome for guarded operations — `conflict` distinguishes a\n *  lost guarded race (retryable) from a logic rejection (illegal edge,\n *  missing row — deterministic, never retried). */\nexport type WorkProductOutcome<T> =\n  | { succeeded: true; value: T }\n  | { succeeded: false; error: string; conflict: boolean }\n\n// Legal status transitions. A target absent from a source's set is rejected\n// by the guarded helpers. `superseded` is terminal.\nconst WORK_PRODUCT_TRANSITIONS: Record<WorkProductStatus, ReadonlySet<WorkProductStatus>> = {\n  draft: new Set<WorkProductStatus>(['blocked', 'ready']),\n  blocked: new Set<WorkProductStatus>(['draft']),\n  ready: new Set<WorkProductStatus>(['changes_requested', 'approved', 'superseded']),\n  changes_requested: new Set<WorkProductStatus>(['draft', 'superseded']),\n  approved: new Set<WorkProductStatus>(['superseded']),\n  superseded: new Set<WorkProductStatus>(),\n}\n\n/** Whether a legal edge exists from `from` to `to` in the review machine. */\nexport function canTransitionWorkProduct(from: WorkProductStatus, to: WorkProductStatus): boolean {\n  return WORK_PRODUCT_TRANSITIONS[from].has(to)\n}\n\n/** Statuses a work product can never leave. */\nexport function isWorkProductTerminal(status: WorkProductStatus): boolean {\n  return WORK_PRODUCT_TRANSITIONS[status].size === 0\n}\n\n/** Define the input required to create a new draft work product row */\nexport interface CreateWorkProductInput {\n  /** Explicit row id — omit to use the service's generator. The MODEL never\n   *  supplies ids; this is for deterministic server-side creation. */\n  id?: string\n  workspaceId: string\n  threadId: string | null\n  scopeKey: string\n  /** Version this draft will become; default 1. The tool layer passes\n   *  `last reviewed version + 1` when a scope is re-engaged after approval. */\n  version?: number\n  provenance: WorkProductProvenance\n  /** Opaque product-column values handed VERBATIM to the store's insert. */\n  extras?: Record<string, unknown>\n}\n\n/** Payload for the draft→ready submit transition */\nexport interface SubmitWorkProductInput {\n  artifact: WorkProductArtifact\n  checks: QualityCheck[]\n  provenance: WorkProductProvenance\n  /** Frozen snapshot ref of this version's body for the history entry;\n   *  defaults to `artifact.path`. */\n  artifactPath?: string\n}\n\n/** Reviewer verdict payload for the ready→approved / ready→changes_requested transition */\nexport interface WorkProductVerdictInput {\n  verdict: 'approve' | 'request_changes'\n  reviewedBy: string\n  note?: string\n}\n\n/** Guarded mutation surface over the work-product store */\nexport interface WorkProductService {\n  create(input: CreateWorkProductInput): Promise<WorkProductRecord>\n  get(id: string): Promise<WorkProductRecord | null>\n  /** The scope's open accumulator row (`draft`/`blocked`), or null. */\n  openDraft(workspaceId: string, scopeKey: string): Promise<WorkProductRecord | null>\n  /** The scope's `changes_requested` row awaiting its correction turn, or null. */\n  awaitingCorrection(workspaceId: string, scopeKey: string): Promise<WorkProductRecord | null>\n  /** The scope's `ready` row awaiting review, or null. */\n  awaitingReview(workspaceId: string, scopeKey: string): Promise<WorkProductRecord | null>\n  /** `max(version over the scope's approved/superseded rows) + 1` — the\n   *  version a fresh draft for the scope should carry. */\n  nextVersion(workspaceId: string, scopeKey: string): Promise<number>\n  /** Re-open a `changes_requested` row as the next draft: version bumps +1\n   *  and the correction turn accumulates into the same scope row. */\n  reopen(id: string): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** Merge evidence entries by id (same id replaces — the agent can correct\n   *  itself mid-turn). Legal only while `draft`/`blocked`. */\n  upsertEvidence(id: string, entries: readonly EvidenceEntry[]): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** Merge exception entries by id, then reconcile the blocked flag: any\n   *  unresolved blocking entry parks `draft`→`blocked`; resolving the last\n   *  one releases `blocked`→`draft`. */\n  upsertExceptions(id: string, entries: readonly ExceptionEntry[]): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** Persist a checks array without transitioning — how a failed platform\n   *  gate (e.g. evidence_coverage) stays visible on the still-draft row. */\n  recordChecks(id: string, checks: readonly QualityCheck[]): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** The terminal agent call: CAS `draft`→`ready` with artifact + checks +\n   *  provenance, appending the version-history entry. Refuses while an\n   *  unresolved blocking exception exists. */\n  submit(id: string, input: SubmitWorkProductInput): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** Reviewer verdict: CAS `ready`→`approved`/`changes_requested` + history\n   *  entry. Approval also supersedes the scope's prior approved versions so\n   *  exactly one approved version is current per scope. */\n  applyVerdict(id: string, input: WorkProductVerdictInput): Promise<WorkProductOutcome<WorkProductRecord>>\n  /** Explicit replacement: CAS to `superseded` (legal from ready /\n   *  changes_requested / approved). */\n  supersede(id: string): Promise<WorkProductOutcome<WorkProductRecord>>\n}\n\n/** Configuration options for creating a work product service */\nexport interface WorkProductServiceOptions {\n  store: WorkProductStorePort\n  /** Injectable clock (epoch ms). Default `Date.now`. */\n  now?: () => number\n  /** Row-id generator. Default `crypto.randomUUID()`. */\n  generateId?: () => string\n}\n\nfunction rejected<T>(error: string): WorkProductOutcome<T> {\n  return { succeeded: false, error, conflict: false }\n}\n\nfunction lostRace<T>(id: string): WorkProductOutcome<T> {\n  return { succeeded: false, error: `Work product ${id} changed concurrently`, conflict: true }\n}\n\n/** Merge-by-id upsert: existing order preserved, replaced in place, new\n *  entries appended in call order. */\nfunction mergeById<T extends { id: string }>(existing: readonly T[], incoming: readonly T[]): T[] {\n  const merged = existing.slice()\n  const indexById = new Map(merged.map((entry, index) => [entry.id, index] as const))\n  for (const entry of incoming) {\n    const at = indexById.get(entry.id)\n    if (at === undefined) {\n      indexById.set(entry.id, merged.length)\n      merged.push(entry)\n    } else {\n      merged[at] = entry\n    }\n  }\n  return merged\n}\n\n/** Create the guarded work-product service over a store port */\nexport function createWorkProductService(options: WorkProductServiceOptions): WorkProductService {\n  const { store } = options\n  const now = options.now ?? (() => Date.now())\n  const generateId = options.generateId ?? (() => crypto.randomUUID())\n\n  async function appendEvent(\n    record: WorkProductRecord,\n    step: string,\n    message: string,\n    metadata: Record<string, unknown> = {},\n  ): Promise<void> {\n    await store.appendEvent({\n      workProductId: record.id,\n      workspaceId: record.workspaceId,\n      step,\n      message,\n      metadata,\n      at: now(),\n    })\n  }\n\n  // Guarded status transition: load → validate the edge → CAS guarded on the\n  // {status, version} read → audit event. The loser of a racing transition\n  // gets a conflict instead of silently violating the machine.\n  async function transition(\n    id: string,\n    to: WorkProductStatus,\n    patch: Omit<WorkProductPatch, 'status'> = {},\n    eventMeta: Record<string, unknown> = {},\n  ): Promise<WorkProductOutcome<WorkProductRecord>> {\n    const record = await store.load(id)\n    if (!record) return rejected(`Work product ${id} not found`)\n    const from = record.status\n    if (isWorkProductTerminal(from)) {\n      return rejected(`Work product ${id} is terminal (${from}); cannot transition to ${to}`)\n    }\n    if (!canTransitionWorkProduct(from, to)) {\n      return rejected(`Illegal work-product transition ${from} -> ${to} for ${id}`)\n    }\n    const updated = await store.update(\n      id,\n      { status: from, version: record.version },\n      { status: to, updatedAt: now(), ...patch },\n    )\n    if (!updated) return lostRace(id)\n    await appendEvent(updated, `wp.${to}`, `Work product ${from} -> ${to}`, { from, to, ...eventMeta })\n    return { succeeded: true, value: updated }\n  }\n\n  // Merge-style guarded write with no status change (evidence / exceptions /\n  // checks accumulate on the open row).\n  async function guardedMerge(\n    id: string,\n    legalStatuses: readonly WorkProductStatus[],\n    build: (record: WorkProductRecord) => Omit<WorkProductPatch, 'status' | 'version'>,\n    event: { step: string; message: (record: WorkProductRecord) => string; metadata?: (record: WorkProductRecord) => Record<string, unknown> },\n  ): Promise<WorkProductOutcome<WorkProductRecord>> {\n    const record = await store.load(id)\n    if (!record) return rejected(`Work product ${id} not found`)\n    if (!legalStatuses.includes(record.status)) {\n      return rejected(`Work product ${id} is ${record.status}; expected ${legalStatuses.join('/')}`)\n    }\n    const updated = await store.update(\n      id,\n      { status: record.status, version: record.version },\n      { updatedAt: now(), ...build(record) },\n    )\n    if (!updated) return lostRace(id)\n    await appendEvent(updated, event.step, event.message(updated), event.metadata?.(updated) ?? {})\n    return { succeeded: true, value: updated }\n  }\n\n  const create: WorkProductService['create'] = async (input) => {\n    const at = now()\n    const record = await store.insert(\n      {\n        id: input.id ?? generateId(),\n        workspaceId: input.workspaceId,\n        threadId: input.threadId,\n        scopeKey: input.scopeKey,\n        status: 'draft',\n        version: input.version ?? 1,\n        artifact: null,\n        evidence: [],\n        exceptions: [],\n        checks: [],\n        provenance: input.provenance,\n        history: [],\n        createdAt: at,\n        updatedAt: at,\n      },\n      input.extras,\n    )\n    await appendEvent(record, 'wp.created', `Work product draft v${record.version} created for ${record.scopeKey}`, {\n      scopeKey: record.scopeKey,\n      version: record.version,\n      threadId: record.threadId,\n    })\n    return record\n  }\n\n  async function findByScopeAndStatus(\n    workspaceId: string,\n    scopeKey: string,\n    status: WorkProductStatus,\n  ): Promise<WorkProductRecord | null> {\n    const rows = await store.listByWorkspace(workspaceId, { status: [status] })\n    return rows.find((row) => row.scopeKey === scopeKey) ?? null\n  }\n\n  const nextVersion: WorkProductService['nextVersion'] = async (workspaceId, scopeKey) => {\n    const reviewed = await store.listByWorkspace(workspaceId, { status: ['approved', 'superseded'] })\n    const versions = reviewed.filter((row) => row.scopeKey === scopeKey).map((row) => row.version)\n    return versions.length === 0 ? 1 : Math.max(...versions) + 1\n  }\n\n  const reopen: WorkProductService['reopen'] = async (id) => {\n    const record = await store.load(id)\n    if (!record) return rejected(`Work product ${id} not found`)\n    if (record.status !== 'changes_requested') {\n      return rejected(`Work product ${id} is ${record.status}; only changes_requested reopens`)\n    }\n    const updated = await store.update(\n      id,\n      { status: 'changes_requested', version: record.version },\n      { status: 'draft', version: record.version + 1, updatedAt: now() },\n    )\n    if (!updated) return lostRace(id)\n    await appendEvent(updated, 'wp.reopened', `Correction draft v${updated.version} opened`, {\n      from: record.version,\n      to: updated.version,\n    })\n    return { succeeded: true, value: updated }\n  }\n\n  const upsertEvidence: WorkProductService['upsertEvidence'] = (id, entries) =>\n    guardedMerge(\n      id,\n      ['draft', 'blocked'],\n      (record) => ({ evidence: mergeById(record.evidence, entries) }),\n      {\n        step: 'wp.evidence',\n        message: (record) => `Evidence upserted (${entries.length} entries, ${record.evidence.length} total)`,\n        metadata: () => ({ upserted: entries.map((entry) => entry.id) }),\n      },\n    )\n\n  const upsertExceptions: WorkProductService['upsertExceptions'] = async (id, entries) => {\n    const merged = await guardedMerge(\n      id,\n      ['draft', 'blocked'],\n      (record) => ({ exceptions: mergeById(record.exceptions, entries) }),\n      {\n        step: 'wp.exception',\n        message: (record) =>\n          `Exceptions upserted (${entries.length} entries, ${unresolvedBlockingExceptions(record.exceptions).length} blocking unresolved)`,\n        metadata: () => ({ upserted: entries.map((entry) => entry.id) }),\n      },\n    )\n    if (!merged.succeeded) return merged\n    // Reconcile the blocked flag AFTER the merge commits: an unresolved\n    // blocking entry parks the draft; resolving the last one releases it.\n    const record = merged.value\n    const blocking = unresolvedBlockingExceptions(record.exceptions).length\n    if (record.status === 'draft' && blocking > 0) {\n      return transition(id, 'blocked', {}, { blocking })\n    }\n    if (record.status === 'blocked' && blocking === 0) {\n      return transition(id, 'draft', {}, { blocking })\n    }\n    return merged\n  }\n\n  const recordChecks: WorkProductService['recordChecks'] = (id, checks) =>\n    guardedMerge(\n      id,\n      ['draft', 'blocked'],\n      () => ({ checks: checks.slice() }),\n      {\n        step: 'wp.checks',\n        message: () => `Checks recorded (${checks.length}, ${checks.filter((check) => !check.passed).length} failed)`,\n        metadata: () => ({ failed: checks.filter((check) => !check.passed).map((check) => check.name) }),\n      },\n    )\n\n  const submit: WorkProductService['submit'] = async (id, input) => {\n    const record = await store.load(id)\n    if (!record) return rejected(`Work product ${id} not found`)\n    if (record.status !== 'draft') {\n      return rejected(`Work product ${id} is ${record.status}; only a draft submits`)\n    }\n    const blocking = unresolvedBlockingExceptions(record.exceptions)\n    if (blocking.length > 0) {\n      return rejected(\n        `Work product ${id} has ${blocking.length} unresolved blocking exception(s): ${blocking.map((entry) => entry.id).join(', ')}`,\n      )\n    }\n    const artifactPath = input.artifactPath ?? input.artifact.path\n    const entry: WorkProductVersionEntry = {\n      version: record.version,\n      status: 'ready',\n      provenance: input.provenance,\n      ...(artifactPath === undefined ? {} : { artifactPath }),\n      at: now(),\n    }\n    return transition(\n      id,\n      'ready',\n      {\n        artifact: input.artifact,\n        checks: input.checks.slice(),\n        provenance: input.provenance,\n        history: [...record.history, entry],\n      },\n      { version: record.version, failedChecks: input.checks.filter((check) => !check.passed).length },\n    )\n  }\n\n  const applyVerdict: WorkProductService['applyVerdict'] = async (id, input) => {\n    const record = await store.load(id)\n    if (!record) return rejected(`Work product ${id} not found`)\n    if (record.status !== 'ready') {\n      return rejected(`Work product ${id} is ${record.status}; a verdict applies only to ready`)\n    }\n    const to: WorkProductStatus = input.verdict === 'approve' ? 'approved' : 'changes_requested'\n    const entry: WorkProductVersionEntry = {\n      version: record.version,\n      status: to,\n      provenance: record.provenance,\n      ...(record.artifact?.path === undefined ? {} : { artifactPath: record.artifact.path }),\n      reviewedBy: input.reviewedBy,\n      ...(input.note === undefined ? {} : { reviewNote: input.note }),\n      at: now(),\n    }\n    const outcome = await transition(\n      id,\n      to,\n      { history: [...record.history, entry] },\n      { verdict: input.verdict, reviewedBy: input.reviewedBy },\n    )\n    if (!outcome.succeeded || to !== 'approved') return outcome\n    // Exactly one approved version per scope: supersede prior approved rows.\n    const priorApproved = await store.listByWorkspace(record.workspaceId, { status: ['approved'] })\n    for (const prior of priorApproved) {\n      if (prior.id === id || prior.scopeKey !== record.scopeKey) continue\n      await transition(prior.id, 'superseded', {}, { supersededBy: id })\n    }\n    return outcome\n  }\n\n  return {\n    create,\n    get: (id) => store.load(id),\n    openDraft: (workspaceId, scopeKey) => store.findDraft(workspaceId, scopeKey),\n    awaitingCorrection: (workspaceId, scopeKey) => findByScopeAndStatus(workspaceId, scopeKey, 'changes_requested'),\n    awaitingReview: (workspaceId, scopeKey) => findByScopeAndStatus(workspaceId, scopeKey, 'ready'),\n    nextVersion,\n    reopen,\n    upsertEvidence,\n    upsertExceptions,\n    recordChecks,\n    submit,\n    applyVerdict,\n    supersede: (id) => transition(id, 'superseded'),\n  }\n}\n\n// ── in-memory store ──────────────────────────────────────────────────────────\n\n/** In-memory store surface with audit trail access and unguarded direct writes for tests */\nexport interface InMemoryWorkProductStore extends WorkProductStorePort {\n  /** The full audit trail, append order. */\n  events(): WorkProductAuditEvent[]\n  /** Unguarded direct write — simulates a concurrent owner in tests. */\n  put(record: WorkProductRecord): void\n}\n\n/**\n * In-memory {@link WorkProductStorePort} — the portable backend for tests and\n * reference assemblies. Records are deep-copied on every boundary so callers\n * can never mutate stored state around the guards.\n */\nexport function createInMemoryWorkProductStore(): InMemoryWorkProductStore {\n  const rows = new Map<string, WorkProductRecord>()\n  const events: WorkProductAuditEvent[] = []\n\n  return {\n    async load(id) {\n      const record = rows.get(id)\n      return record ? structuredClone(record) : null\n    },\n    async findDraft(workspaceId, scopeKey) {\n      for (const record of rows.values()) {\n        if (\n          record.workspaceId === workspaceId &&\n          record.scopeKey === scopeKey &&\n          (record.status === 'draft' || record.status === 'blocked')\n        ) {\n          return structuredClone(record)\n        }\n      }\n      return null\n    },\n    async listByWorkspace(workspaceId, opts) {\n      const out: WorkProductRecord[] = []\n      for (const record of rows.values()) {\n        if (record.workspaceId !== workspaceId) continue\n        if (opts?.status && !opts.status.includes(record.status)) continue\n        out.push(structuredClone(record))\n      }\n      return out\n    },\n    async insert(record) {\n      if (rows.has(record.id)) throw new Error(`Work product ${record.id} already exists`)\n      rows.set(record.id, structuredClone(record))\n      return structuredClone(record)\n    },\n    async update(id, guard, patch) {\n      const current = rows.get(id)\n      if (!current) return null\n      if (guard.status !== undefined && current.status !== guard.status) return null\n      if (guard.version !== undefined && current.version !== guard.version) return null\n      const next: WorkProductRecord = { ...current }\n      if (patch.status !== undefined) next.status = patch.status\n      if (patch.version !== undefined) next.version = patch.version\n      if (patch.artifact !== undefined) next.artifact = patch.artifact\n      if (patch.evidence !== undefined) next.evidence = patch.evidence\n      if (patch.exceptions !== undefined) next.exceptions = patch.exceptions\n      if (patch.checks !== undefined) next.checks = patch.checks\n      if (patch.provenance !== undefined) next.provenance = patch.provenance\n      if (patch.history !== undefined) next.history = patch.history\n      if (patch.updatedAt !== undefined) next.updatedAt = patch.updatedAt\n      rows.set(id, structuredClone(next))\n      return structuredClone(next)\n    },\n    async appendEvent(event) {\n      events.push(structuredClone(event))\n    },\n    events() {\n      return events.map((event) => structuredClone(event))\n    },\n    put(record) {\n      rows.set(record.id, structuredClone(record))\n    },\n  }\n}\n","/**\n * Provenance stamping — the backtest spine. Every version of every work\n * product carries `profileHash + runId + servingModels`, stamped at the two\n * honest moments:\n *\n *  1. At dispatch, the product route composes the turn's profile and computes\n *     agent-eval's `agentProfileHash(profile)` — the SAME hash that keys the\n *     app's scorecard cells — and closes it (plus runId/sessionId) into the\n *     `provenance` seam `buildWorkProductTools` receives, so the model can\n *     neither omit nor forge it.\n *  2. At turn completion, the route's existing lifecycle seam calls\n *     {@link finalizeWorkProductProvenance}: serving model and cost come from\n *     the usage receipt, because only the completed turn knows what actually\n *     served. `servingModels` is honestly EMPTY until then.\n *\n * The trust bridge ({@link workProductTrustInputs}) maps judge-sourced\n * quality verdicts into `/eval-campaign`'s `trustVerdicts()` input with\n * type-only imports — products call `trustVerdicts` from\n * `@tangle-network/agent-app/eval-campaign` (which they already import for\n * their ensemble loop). Deliberately NOT a value re-export here: it would put\n * agent-eval's runtime on `/work-product`'s import path and drag the eval\n * engine into every product worker bundle.\n */\n\nimport type { JudgeVerdict } from '@tangle-network/agent-eval'\nimport type { TrustItem } from '../eval-campaign/trust-gate'\nimport type {\n  WorkProductProvenance,\n  WorkProductRecord,\n  WorkProductStorePort,\n} from './types'\n\nexport type { TrustItem }\n\n/** The dispatch-time provenance closure's output: everything the route knows\n *  before the turn completes. */\nexport type WorkProductProvenanceBase = Omit<WorkProductProvenance, 'servingModels' | 'producedAt'>\n\n/** Stamp a full provenance from the dispatch-time base. `servingModels` starts\n *  empty (honestly absent — never guessed) until the completion back-fill. */\nexport function stampProvenance(base: WorkProductProvenanceBase, now: () => number = Date.now): WorkProductProvenance {\n  return { ...base, servingModels: [], producedAt: now() }\n}\n\n/** Completion receipt for one run, from the turn's usage/lifecycle seam. */\nexport interface FinalizeWorkProductProvenanceInput {\n  workspaceId: string\n  /** The chat turnId / mission-step run id the records were stamped with. */\n  runId: string\n  /** What actually served, from the usage receipt / serving-model header. */\n  servingModels: readonly string[]\n  costUsd?: number\n  logger?: Pick<Console, 'warn'>\n}\n\n/**\n * Back-fill `servingModels`/`costUsd` onto every record (and its history\n * entries) stamped with `runId` — wire it into the chat route's existing\n * `lifecycle.onTurnComplete` seam; no new hook. Returns the updated records.\n * A CAS miss on one record is logged and skipped (the next completion or a\n * re-read re-applies); it never throws mid-fleet.\n */\nexport async function finalizeWorkProductProvenance(\n  store: WorkProductStorePort,\n  input: FinalizeWorkProductProvenanceInput,\n): Promise<WorkProductRecord[]> {\n  const rows = await store.listByWorkspace(input.workspaceId)\n  const updated: WorkProductRecord[] = []\n  for (const record of rows) {\n    const recordMatches = record.provenance.runId === input.runId\n    const historyMatches = record.history.some((entry) => entry.provenance.runId === input.runId)\n    if (!recordMatches && !historyMatches) continue\n    const finalize = (provenance: WorkProductProvenance): WorkProductProvenance => ({\n      ...provenance,\n      servingModels: [...input.servingModels],\n      ...(input.costUsd === undefined ? {} : { costUsd: input.costUsd }),\n    })\n    const next = await store.update(\n      record.id,\n      { status: record.status, version: record.version },\n      {\n        ...(recordMatches ? { provenance: finalize(record.provenance) } : {}),\n        history: record.history.map((entry) =>\n          entry.provenance.runId === input.runId ? { ...entry, provenance: finalize(entry.provenance) } : entry,\n        ),\n      },\n    )\n    if (!next) {\n      input.logger?.warn(`[work-product] provenance back-fill lost a race on ${record.id}; skipped`)\n      continue\n    }\n    await store.appendEvent({\n      workProductId: record.id,\n      workspaceId: record.workspaceId,\n      step: 'wp.provenance',\n      message: `Serving models back-filled for run ${input.runId}`,\n      metadata: { runId: input.runId, servingModels: [...input.servingModels], costUsd: input.costUsd ?? null },\n      at: Date.now(),\n    })\n    updated.push(next)\n  }\n  return updated\n}\n\n/**\n * Trust-gate bridge: one `TrustItem` per work product whose production\n * quality was scored by the product's eval-campaign ensemble. `verdictsFor`\n * returns the per-judge raw verdicts the product retained for a record (the\n * same verdicts `aggregateJudgeVerdicts` reduces); records without verdicts\n * are omitted. Feed the result to `/eval-campaign`'s `trustVerdicts()` —\n * an untrusted verdict renders as \"quality: unverified\", never a naked\n * number. Zero statistics code here: pure mapping.\n */\nexport function workProductTrustInputs<D extends string = string>(\n  records: readonly WorkProductRecord[],\n  verdictsFor: (record: WorkProductRecord) => readonly JudgeVerdict<D>[] | undefined,\n): TrustItem<D>[] {\n  const items: TrustItem<D>[] = []\n  for (const record of records) {\n    const verdicts = verdictsFor(record)\n    if (!verdicts || verdicts.length === 0) continue\n    items.push({ itemId: record.id, verdicts })\n  }\n  return items\n}\n","/**\n * Verbatim quote verification — the lineage gate.\n *\n * An evidence `locator.quote` is the reviewer's click target: it must land on\n * text that is actually in the document the entry names. Nothing here is\n * fuzzy. The only latitude is representational — the same characters written\n * differently by a PDF extractor, a text transcription, or a model repeating\n * what it read: Unicode compatibility forms, curly quotes, the several dash\n * codepoints, non-breaking spaces, and run-length whitespace. A quote that\n * still does not occur after that is not a formatting difference; it is text\n * the document does not contain.\n *\n * Deliberately NOT tolerated, because each one re-opens the hole this closes:\n * case (a quote is a quote), token subsets, edit distance, word-overlap\n * scoring, and \"the numbers match\" heuristics. A fabricated quote and a real\n * one differ by exactly the thing a fuzzy matcher forgives.\n */\n\n/** Whitespace folded to a single ASCII space: the Unicode space separators\n *  (`\\p{Zs}`), the line/paragraph separators, and the zero-width characters a\n *  PDF text layer leaves behind (ZWSP / ZWNJ / ZWJ / BOM). */\nconst WHITESPACE = /[\\s\\p{Zs}\\u2028\\u2029\\u200b-\\u200d\\ufeff]+/gu\n\n/** Dash-like codepoints that render alike but differ by byte: non-breaking\n *  hyphen, figure / en / em / horizontal dash, minus sign, small and fullwidth\n *  forms. */\nconst DASHES = /[\\u2010-\\u2015\\u2212\\ufe58\\ufe63\\uff0d]/gu\n\n/** Curly, prime and grave apostrophes folded to ASCII `'`. */\nconst SINGLE_QUOTES = /[\\u2018\\u2019\\u201a\\u201b\\u2032\\u2035\\u00b4`]/gu\n\n/** Curly, low, prime and guillemet double quotes folded to ASCII `\"`. */\nconst DOUBLE_QUOTES = /[\\u201c\\u201d\\u201e\\u201f\\u2033\\u2036\\u00ab\\u00bb]/gu\n\n/**\n * Fold a string to the form both sides of a quote comparison are measured in.\n * Composition and presentation only: NFKC, one dash, one apostrophe, one\n * double quote, runs of any whitespace to a single space, trimmed. Case is\n * PRESERVED — lowercasing would let \"Box 1\" match \"box 1\", and a citation\n * that cannot reproduce capitalization did not read the document.\n */\nexport function normalizeQuoteText(value: string): string {\n  return value\n    .normalize('NFKC')\n    .replace(DASHES, '-')\n    .replace(SINGLE_QUOTES, \"'\")\n    .replace(DOUBLE_QUOTES, '\"')\n    .replace(WHITESPACE, ' ')\n    .trim()\n}\n\n/**\n * Does `quote` occur in `sourceText`? Exact substring first (the common case,\n * and free); the normalized comparison second, for the representational\n * differences above. Nothing else.\n *\n * An empty or whitespace-only quote is NOT a match — it would otherwise be a\n * substring of every document and pass the gate vacuously.\n */\nexport function sourceContainsQuote(sourceText: string, quote: string): boolean {\n  const trimmed = quote.trim()\n  if (trimmed.length === 0) return false\n  if (sourceText.includes(trimmed)) return true\n  const normalizedQuote = normalizeQuoteText(quote)\n  if (normalizedQuote.length === 0) return false\n  return normalizeQuoteText(sourceText).includes(normalizedQuote)\n}\n","/**\n * The agent-facing work-product side channel — three registry `customTools`\n * built on `/tools`' `defineAppTool`, dispatched through `dispatchAppTool`'s\n * single validation/outcome path (a thrown `ToolInputError` → correctable 4xx\n * back to the model; any other throw → internal error; a call never silently\n * succeeds without its effect). Deliberately NOT new `/tools` built-ins:\n * extending `AppToolHandlers` would break every existing consumer, and the\n * registry seam exists precisely for a product tool family like this.\n *\n * Partial-emission contract across a long turn: the draft ROW is the\n * accumulator. Evidence and exceptions stream in as found via small batched\n * calls; the artifact arrives once at the end. The agent addresses everything\n * by `scopeKey` — the server mints row ids, the model never invents them, and\n * identity (userId/workspaceId/threadId) rides the trusted `AppToolContext`\n * from headers, never model args. A turn that dies mid-emission leaves a\n * consistent draft the next turn resumes by the same scopeKey.\n */\n\nimport { ToolInputError } from '../tools/errors'\nimport { defineAppTool, type AppToolDefinition } from '../tools/registry'\nimport type { AppToolContext } from '../tools/types'\nimport { createWorkProductService, type WorkProductOutcome, type WorkProductService } from './service'\nimport { stampProvenance, type WorkProductProvenanceBase } from './provenance'\nimport { sourceContainsQuote } from './quote'\nimport {\n  parseAgentCheckInput,\n  parseArtifactInput,\n  parseEvidenceInput,\n  parseExceptionInput,\n  unresolvedBlockingExceptions,\n  type EvidenceEntry,\n  type ExceptionEntry,\n  type QualityCheck,\n  type WorkProductArtifact,\n  type WorkProductRecord,\n  type WorkProductStorePort,\n} from './types'\n\n/** Max entries per `upsert_evidence`/`flag_exception` call — keeps each call a\n *  small batch the model can correct precisely on a named-index failure. */\nexport const MAX_WORK_PRODUCT_BATCH = 50\n\n/** Platform check: every material target has ≥1 evidence row. Recorded as\n *  `QualityCheck{source:'platform'}`. */\nexport const EVIDENCE_COVERAGE_CHECK = 'evidence_coverage'\n\n/** Platform check: how many evidence entries carry a quote the shell PROVED\n *  occurs in the source it names. Recorded when `readSourceText` is wired, so\n *  a reviewer reads the strength of the lineage off the row itself rather than\n *  trusting that a quote was checked. */\nexport const QUOTE_VERIFICATION_CHECK = 'quote_verification'\n\n/** Domain seams for the three work-product tools — every domain word is a\n *  parameter; the shell bakes none. */\nexport interface WorkProductToolConfig {\n  store: WorkProductStorePort\n  /** PARAMETER — accepted `artifact.kind` values, validated on submit. */\n  artifactKinds: readonly string[]\n  /** PARAMETER — accepted exception `kind` values. */\n  exceptionKinds: readonly string[]\n  /** Fail-loud source check: resolve an evidence `sourceRef` to existence\n   *  (vault stat / attachment lookup). A dangling ref is a `ToolInputError`\n   *  naming the entry index — lineage can never point at nothing. */\n  resolveSourceRef: (ref: string, ctx: AppToolContext) => Promise<boolean>\n  /** Fail-loud QUOTE verification: return the source document's TEXT for a\n   *  ref so the shell can prove each `locator.quote` occurs in it verbatim.\n   *  Wiring this turns the gate ON — a quote that does not occur is a\n   *  `ToolInputError` naming the entry index, so the model re-extracts from\n   *  the document instead of persisting invented lineage.\n   *\n   *  Return `null` ONLY when the ref genuinely has no extractable text (an\n   *  image scan, an opaque blob). The gate is fail-CLOSED on `null`: a quote\n   *  that cannot be checked is refused, because \"unverifiable\" and \"verified\"\n   *  must never look the same to a reviewer. Such an entry is still recordable\n   *  without `locator.quote` — `claim` carries the assertion.\n   *\n   *  Omit the seam entirely and no quote is checked. */\n  readSourceText?: (ref: string, ctx: AppToolContext) => Promise<string | null>\n  /** The material targets the platform coverage check requires evidence for.\n   *  Product-owned vocabulary; omit to skip the coverage gate. */\n  materialTargets?: (artifact: WorkProductArtifact) => string[]\n  /** Per-turn provenance closure the ROUTE supplies (profileHash + runId are\n   *  known at dispatch; trusted, never read from model args). */\n  provenance: (ctx: AppToolContext) => WorkProductProvenanceBase\n  /** Called on the draft→ready commit so the route persists the transcript\n   *  anchor part and the queue projection updates. */\n  onReady?: (record: WorkProductRecord, ctx: AppToolContext) => void | Promise<void>\n  /** Injectable clock / id generator (tests, deterministic ids). */\n  now?: () => number\n  generateId?: () => string\n}\n\n/** Unwrap a guarded outcome, retrying ONCE on a lost race (the single\n *  serialized turn owner makes real contention rare; one re-read-and-retry\n *  absorbs the benign case). A deterministic rejection maps to a correctable\n *  `ToolInputError` so the model learns exactly why. */\nasync function unwrap<T>(\n  run: () => Promise<WorkProductOutcome<T>>,\n  code: string,\n): Promise<T> {\n  let outcome = await run()\n  if (!outcome.succeeded && outcome.conflict) outcome = await run()\n  if (!outcome.succeeded) throw new ToolInputError(code, outcome.error, outcome.conflict ? 409 : 400)\n  return outcome.value\n}\n\nfunction requireScopeKey(args: Record<string, unknown>): string {\n  const scopeKey = typeof args.scopeKey === 'string' ? args.scopeKey.trim() : ''\n  if (!scopeKey) throw new ToolInputError('missing_scope_key', 'scopeKey is required — the engagement key this work product belongs to.')\n  return scopeKey\n}\n\nfunction requireBatch(args: Record<string, unknown>, field: string): unknown[] {\n  const raw = args[field]\n  if (!Array.isArray(raw) || raw.length === 0) {\n    throw new ToolInputError('missing_entries', `${field} must be a non-empty array.`)\n  }\n  if (raw.length > MAX_WORK_PRODUCT_BATCH) {\n    throw new ToolInputError('batch_too_large', `${field} accepts at most ${MAX_WORK_PRODUCT_BATCH} entries per call — send smaller batches.`)\n  }\n  return raw\n}\n\n/**\n * Resolve the scope's open draft row, creating or reopening as needed:\n * an open `draft`/`blocked` row resumes; a `changes_requested` row reopens as\n * the correction draft (version +1); a `ready` row refuses — the package is\n * awaiting review and must receive a verdict first; otherwise a fresh draft\n * is created at `last reviewed version + 1` with dispatch-stamped provenance.\n */\nasync function resolveDraft(\n  service: WorkProductService,\n  config: WorkProductToolConfig,\n  scopeKey: string,\n  ctx: AppToolContext,\n): Promise<WorkProductRecord> {\n  const open = await service.openDraft(ctx.workspaceId, scopeKey)\n  if (open) return open\n  const awaitingReview = await service.awaitingReview(ctx.workspaceId, scopeKey)\n  if (awaitingReview) {\n    throw new ToolInputError(\n      'awaiting_review',\n      `Work product for ${scopeKey} (v${awaitingReview.version}) is awaiting review — no further emission until a reviewer verdict.`,\n      409,\n    )\n  }\n  const awaitingCorrection = await service.awaitingCorrection(ctx.workspaceId, scopeKey)\n  if (awaitingCorrection) {\n    return unwrap(() => service.reopen(awaitingCorrection.id), 'reopen_failed')\n  }\n  return service.create({\n    workspaceId: ctx.workspaceId,\n    threadId: ctx.threadId,\n    scopeKey,\n    version: await service.nextVersion(ctx.workspaceId, scopeKey),\n    provenance: stampProvenance(config.provenance(ctx), config.now),\n  })\n}\n\n/**\n * Prove every supplied `locator.quote` occurs in the source it names, or\n * throw the correctable error that sends the model back to the document.\n *\n * Source texts are read once per distinct `sourceRef` in the batch — a\n * 50-entry batch citing three documents is three reads, not fifty.\n *\n * No-op when `readSourceText` is not wired: the product has not given the\n * shell a way to see its documents, and inventing a weaker check here would\n * report unverified lineage as verified.\n */\nasync function assertQuotesOccurInSources(\n  config: WorkProductToolConfig,\n  entries: readonly EvidenceEntry[],\n  ctx: AppToolContext,\n): Promise<void> {\n  const readSourceText = config.readSourceText\n  if (!readSourceText) return\n  const texts = new Map<string, string | null>()\n  for (let index = 0; index < entries.length; index += 1) {\n    const entry = entries[index]!\n    const quote = entry.locator.quote\n    if (quote === undefined || quote.trim().length === 0) continue\n    if (!texts.has(entry.sourceRef)) texts.set(entry.sourceRef, await readSourceText(entry.sourceRef, ctx))\n    const text = texts.get(entry.sourceRef)\n    if (text === null || text === undefined) {\n      throw new ToolInputError(\n        'unverifiable_quote',\n        `entries[${index}].locator.quote: \"${entry.sourceRef}\" has no readable text, so the quote cannot be verified. Record the entry without locator.quote and state the basis in claim.`,\n      )\n    }\n    if (!sourceContainsQuote(text, quote)) {\n      throw new ToolInputError(\n        'quote_not_found',\n        `entries[${index}].locator.quote: ${JSON.stringify(quote)} does not occur in \"${entry.sourceRef}\". Copy the supporting line character-for-character out of that document, or — if this value is COMPUTED rather than read — omit locator.quote and state the computation in claim.`,\n      )\n    }\n  }\n}\n\n/** Re-verify every persisted quote at submit time. The upsert gate stops new\n *  fabrication; this stops a package whose evidence was written BEFORE the\n *  gate existed (or under a since-corrected document) from reaching a\n *  reviewer. Entries with no quote are neither verified nor failures — they\n *  are lineage with no click target, counted separately so the recorded check\n *  states how much of the package is quote-backed. */\nasync function summarizeQuoteVerification(\n  config: WorkProductToolConfig,\n  evidence: readonly EvidenceEntry[],\n  ctx: AppToolContext,\n): Promise<{ verified: number; withoutQuote: number; failed: string[] } | undefined> {\n  const readSourceText = config.readSourceText\n  if (!readSourceText) return undefined\n  const texts = new Map<string, string | null>()\n  let verified = 0\n  let withoutQuote = 0\n  const failed: string[] = []\n  for (const entry of evidence) {\n    const quote = entry.locator.quote\n    if (quote === undefined || quote.trim().length === 0) {\n      withoutQuote += 1\n      continue\n    }\n    if (!texts.has(entry.sourceRef)) texts.set(entry.sourceRef, await readSourceText(entry.sourceRef, ctx))\n    const text = texts.get(entry.sourceRef)\n    if (typeof text === 'string' && sourceContainsQuote(text, quote)) verified += 1\n    else failed.push(entry.id)\n  }\n  return { verified, withoutQuote, failed }\n}\n\n/** Build the three work-product tools for `customTools` registration on the\n *  MCP server / HTTP handler / runtime executor. */\nexport function buildWorkProductTools(config: WorkProductToolConfig): AppToolDefinition[] {\n  const service = createWorkProductService({\n    store: config.store,\n    ...(config.now ? { now: config.now } : {}),\n    ...(config.generateId ? { generateId: config.generateId } : {}),\n  })\n\n  const upsertEvidence = defineAppTool({\n    name: 'upsert_evidence',\n    description:\n      'Record source→field lineage for the current work product, incrementally as you find it. Each entry links a source document (sourceRef + locator) to one artifact target and states the claim it supports. Re-emitting an entry id replaces that entry. Address the work product by scopeKey; the first call creates the draft.',\n    parameters: {\n      type: 'object',\n      properties: {\n        scopeKey: { type: 'string', description: 'Engagement key for this work product.' },\n        entries: {\n          type: 'array',\n          minItems: 1,\n          maxItems: MAX_WORK_PRODUCT_BATCH,\n          items: {\n            type: 'object',\n            properties: {\n              id: { type: 'string', description: 'Stable entry id — re-emit to replace.' },\n              sourceRef: { type: 'string', description: 'Vault path / attachment id of the SOURCE document.' },\n              locator: {\n                type: 'object',\n                properties: {\n                  page: { type: 'number' },\n                  range: { type: 'string', description: \"Free-form location: 'L120-L134' | 'B7' | '¶4'.\" },\n                  quote: {\n                    type: 'string',\n                    description:\n                      'Verbatim supporting quote — copied character-for-character out of the source, not retyped, reformatted, or summarised. The platform checks it occurs in the document and REFUSES the entry if it does not. For a value you COMPUTED rather than read, omit this field and state the computation in claim.',\n                  },\n                },\n              },\n              target: { type: 'string', description: 'Artifact field/claim this evidence supports.' },\n              claim: { type: 'string', description: 'The value/assertion at the target.' },\n              confidence: { type: 'number', minimum: 0, maximum: 1 },\n            },\n            required: ['id', 'sourceRef', 'target', 'claim'],\n          },\n        },\n      },\n      required: ['scopeKey', 'entries'],\n    },\n    async execute(args: Record<string, unknown>, ctx: AppToolContext) {\n      const scopeKey = requireScopeKey(args)\n      const raw = requireBatch(args, 'entries')\n      const entries: EvidenceEntry[] = []\n      for (let index = 0; index < raw.length; index += 1) {\n        const parsed = parseEvidenceInput(raw[index], `entries[${index}]`)\n        if (!parsed.ok) throw new ToolInputError('invalid_evidence', `${parsed.field}: ${parsed.error}`)\n        entries.push(parsed.value)\n      }\n      // Fail-loud source resolution: lineage can never point at nothing.\n      for (let index = 0; index < entries.length; index += 1) {\n        const entry = entries[index]!\n        if (!(await config.resolveSourceRef(entry.sourceRef, ctx))) {\n          throw new ToolInputError(\n            'unknown_source_ref',\n            `entries[${index}].sourceRef: \"${entry.sourceRef}\" does not resolve to an existing source document.`,\n          )\n        }\n      }\n      // Fail-loud quote verification: a quote must occur in the document the\n      // entry names. Rejected BEFORE the draft is resolved, so a batch with a\n      // fabricated quote persists nothing — the model corrects and re-sends\n      // rather than leaving a half-written row behind.\n      await assertQuotesOccurInSources(config, entries, ctx)\n      const draft = await resolveDraft(service, config, scopeKey, ctx)\n      const record = await unwrap(() => service.upsertEvidence(draft.id, entries), 'evidence_rejected')\n      return { workProductId: record.id, version: record.version, evidenceCount: record.evidence.length }\n    },\n  })\n\n  const flagException = defineAppTool({\n    name: 'flag_exception',\n    description:\n      'Flag problems with the current work product (missing documents, inconsistent sources, …). An unresolved blocking exception parks the work product until it is resolved; re-emit the same id with resolved:true to release it. Address by scopeKey.',\n    parameters: {\n      type: 'object',\n      properties: {\n        scopeKey: { type: 'string', description: 'Engagement key for this work product.' },\n        exceptions: {\n          type: 'array',\n          minItems: 1,\n          maxItems: MAX_WORK_PRODUCT_BATCH,\n          items: {\n            type: 'object',\n            properties: {\n              id: { type: 'string', description: 'Stable entry id — re-emit to replace.' },\n              severity: { type: 'string', enum: ['blocking', 'material', 'advisory'] },\n              kind: { type: 'string', description: 'Exception kind from the product vocabulary.' },\n              message: { type: 'string' },\n              targets: { type: 'array', items: { type: 'string' } },\n              resolved: { type: 'boolean' },\n              resolutionNote: { type: 'string' },\n            },\n            required: ['id', 'severity', 'kind', 'message'],\n          },\n        },\n      },\n      required: ['scopeKey', 'exceptions'],\n    },\n    async execute(args: Record<string, unknown>, ctx: AppToolContext) {\n      const scopeKey = requireScopeKey(args)\n      const raw = requireBatch(args, 'exceptions')\n      const entries: ExceptionEntry[] = []\n      for (let index = 0; index < raw.length; index += 1) {\n        const parsed = parseExceptionInput(raw[index], `exceptions[${index}]`)\n        if (!parsed.ok) throw new ToolInputError('invalid_exception', `${parsed.field}: ${parsed.error}`)\n        if (!config.exceptionKinds.includes(parsed.value.kind)) {\n          throw new ToolInputError(\n            'invalid_exception',\n            `exceptions[${index}].kind: must be one of: ${config.exceptionKinds.join(', ')}`,\n          )\n        }\n        // An agent resolving its own exception is tagged as such; the reviewer\n        // tag is reserved for the verdict route.\n        if (parsed.value.resolved && parsed.value.resolvedBy === undefined) parsed.value.resolvedBy = 'agent'\n        entries.push(parsed.value)\n      }\n      const draft = await resolveDraft(service, config, scopeKey, ctx)\n      const record = await unwrap(() => service.upsertExceptions(draft.id, entries), 'exception_rejected')\n      return {\n        workProductId: record.id,\n        version: record.version,\n        status: record.status,\n        unresolvedBlocking: unresolvedBlockingExceptions(record.exceptions).length,\n      }\n    },\n  })\n\n  const submitWorkProduct = defineAppTool({\n    name: 'submit_work_product',\n    description:\n      'Submit the finished work product for professional review — the terminal call after evidence and exceptions are recorded. Refused while a blocking exception is unresolved, or when a material target lacks evidence. Include your own quality checks in `checks`.',\n    parameters: {\n      type: 'object',\n      properties: {\n        scopeKey: { type: 'string', description: 'Engagement key for this work product.' },\n        artifact: {\n          type: 'object',\n          properties: {\n            kind: { type: 'string', description: 'Artifact kind from the product vocabulary.' },\n            title: { type: 'string' },\n            path: { type: 'string', description: 'Vault/object-store ref of the rendered document.' },\n            content: { type: 'string', description: 'Inline body when small (markdown/JSON).' },\n            mediaType: { type: 'string' },\n            baseline: {\n              type: 'object',\n              properties: { path: { type: 'string' }, content: { type: 'string' } },\n              description: 'For diff-first artifacts: the source document being redlined.',\n            },\n            fields: { type: 'object', description: 'Structured field map lineage targets anchor to.' },\n          },\n          required: ['kind', 'title'],\n        },\n        checks: {\n          type: 'array',\n          items: {\n            type: 'object',\n            properties: {\n              id: { type: 'string' },\n              name: { type: 'string' },\n              passed: { type: 'boolean' },\n              detail: { type: 'string' },\n            },\n            required: ['id', 'name', 'passed'],\n          },\n          description: 'Your own quality self-checks (recorded as agent-sourced).',\n        },\n      },\n      required: ['scopeKey', 'artifact'],\n    },\n    async execute(args: Record<string, unknown>, ctx: AppToolContext) {\n      const scopeKey = requireScopeKey(args)\n      const parsedArtifact = parseArtifactInput(args.artifact)\n      if (!parsedArtifact.ok) throw new ToolInputError('invalid_artifact', `${parsedArtifact.field}: ${parsedArtifact.error}`)\n      const artifact = parsedArtifact.value\n      if (!config.artifactKinds.includes(artifact.kind)) {\n        throw new ToolInputError('invalid_artifact', `artifact.kind: must be one of: ${config.artifactKinds.join(', ')}`)\n      }\n      const agentChecks: QualityCheck[] = []\n      if (args.checks !== undefined) {\n        if (!Array.isArray(args.checks)) throw new ToolInputError('invalid_checks', 'checks must be an array when present.')\n        for (let index = 0; index < args.checks.length; index += 1) {\n          const parsed = parseAgentCheckInput(args.checks[index], `checks[${index}]`)\n          if (!parsed.ok) throw new ToolInputError('invalid_checks', `${parsed.field}: ${parsed.error}`)\n          agentChecks.push({ ...parsed.value, source: 'agent' })\n        }\n      }\n\n      const draft = await resolveDraft(service, config, scopeKey, ctx)\n      const blocking = unresolvedBlockingExceptions(draft.exceptions)\n      if (blocking.length > 0) {\n        throw new ToolInputError(\n          'blocking_exceptions_unresolved',\n          `Cannot submit: ${blocking.length} unresolved blocking exception(s) (${blocking.map((entry) => entry.id).join(', ')}). Resolve each via flag_exception with resolved:true, or downgrade its severity with a resolutionNote justifying why it does not block.`,\n          409,\n        )\n      }\n\n      // Platform check one: every persisted quote still occurs in the source\n      // it names. The upsert gate stops NEW fabrication; this stops a package\n      // whose evidence predates the gate from reaching a reviewer. Recorded on\n      // the row AND rejected fail-loud — the same discipline as coverage.\n      const checks: QualityCheck[] = [...agentChecks]\n      const quotes = await summarizeQuoteVerification(config, draft.evidence, ctx)\n      if (quotes) {\n        const quoted = quotes.verified + quotes.failed.length\n        checks.unshift({\n          id: QUOTE_VERIFICATION_CHECK,\n          name: QUOTE_VERIFICATION_CHECK,\n          passed: quotes.failed.length === 0,\n          detail:\n            quotes.failed.length === 0\n              ? `${quotes.verified}/${quoted} quoted evidence entries verified against their source; ${quotes.withoutQuote} recorded without a quote`\n              : `Unverifiable quotes on: ${quotes.failed.join(', ')}`,\n          source: 'platform',\n        })\n        if (quotes.failed.length > 0) {\n          await unwrap(() => service.recordChecks(draft.id, checks), 'checks_rejected')\n          throw new ToolInputError(\n            'quote_verification_failed',\n            `Cannot submit: ${quotes.failed.length} evidence entr${quotes.failed.length === 1 ? 'y quotes' : 'ies quote'} text that does not occur in the source named (${quotes.failed.join(', ')}). Re-emit each with a quote copied character-for-character from that document, or without locator.quote if the value is computed.`,\n          )\n        }\n      }\n\n      // Platform check two: every material target has ≥1 evidence row. A\n      // failing coverage check is BOTH recorded on the row (visible to the\n      // queue) and rejected fail-loud — a lineage-free package can never reach\n      // a reviewer.\n      if (config.materialTargets) {\n        const targets = config.materialTargets(artifact)\n        const covered = new Set(draft.evidence.map((entry) => entry.target))\n        const missing = targets.filter((target) => !covered.has(target))\n        const coverage: QualityCheck = {\n          id: EVIDENCE_COVERAGE_CHECK,\n          name: EVIDENCE_COVERAGE_CHECK,\n          passed: missing.length === 0,\n          detail:\n            missing.length === 0\n              ? `${targets.length}/${targets.length} material targets evidenced`\n              : `Missing evidence for: ${missing.join(', ')}`,\n          source: 'platform',\n        }\n        checks.unshift(coverage)\n        if (missing.length > 0) {\n          await unwrap(() => service.recordChecks(draft.id, checks), 'checks_rejected')\n          throw new ToolInputError(\n            'evidence_coverage_failed',\n            `Cannot submit: material targets lack evidence: ${missing.join(', ')}. Add upsert_evidence entries targeting each, then resubmit.`,\n          )\n        }\n      }\n\n      const provenance = stampProvenance(config.provenance(ctx), config.now)\n      const record = await unwrap(\n        () => service.submit(draft.id, { artifact, checks, provenance }),\n        'submit_rejected',\n      )\n      await config.onReady?.(record, ctx)\n      return {\n        workProductId: record.id,\n        version: record.version,\n        status: record.status,\n        checks: record.checks.map((check) => ({ name: check.name, passed: check.passed, source: check.source })),\n      }\n    },\n  })\n\n  return [upsertEvidence, flagException, submitWorkProduct]\n}\n","/**\n * Framework-neutral work-product review endpoints — the\n * `createInteractionAnswerRoute` factory pattern: web-standard\n * `Request`/`Response`, ONE product-supplied `authorize` seam (session auth,\n * workspace access, reviewer identity, rate limits), everything behind it\n * mechanism. Server-only and subpath-only: never reachable from a client\n * bundle (enforced by the browser-safety test).\n *\n * The verdict endpoint is deliberately NOT a second approval broker: agent\n * asks stay on `/interactions`; this is the REVIEWER's plain authorized\n * verdict on a ready package — one human-in-the-loop channel per direction.\n * A `request_changes` note re-enters chat as the correction turn via the\n * `onVerdict` seam; chat remains the driver surface.\n */\n\nimport {\n  createWorkProductService,\n  type WorkProductService,\n} from './service'\nimport {\n  workProductToPersistedPart,\n  type WorkProductPersistedPart,\n  type WorkProductRecord,\n  type WorkProductStorePort,\n} from './types'\n\n/** Reviewer verdict wire body for the POST endpoint. */\nexport type WorkProductVerdictBody =\n  | { ok: true; id: string; verdict: 'approve'; note?: string }\n  | { ok: true; id: string; verdict: 'request_changes'; note: string }\n  | { ok: false; error: string }\n\n/** Validate the verdict POST body: `{ id, verdict, note? }`; a\n *  `request_changes` verdict REQUIRES a non-empty note — the note IS the\n *  correction turn the agent works from. */\nexport function validateWorkProductVerdictBody(body: Record<string, unknown>): WorkProductVerdictBody {\n  const id = typeof body.id === 'string' && body.id.trim() ? body.id.trim() : null\n  if (!id) return { ok: false, error: 'Missing work product id' }\n  const verdict = body.verdict\n  if (verdict !== 'approve' && verdict !== 'request_changes') {\n    return { ok: false, error: 'Invalid verdict: expected approve or request_changes' }\n  }\n  const note = body.note === undefined ? undefined : typeof body.note === 'string' ? body.note.trim() : null\n  if (note === null) return { ok: false, error: 'Invalid note: expected a string' }\n  if (verdict === 'request_changes') {\n    if (!note) return { ok: false, error: 'request_changes requires a note — it becomes the correction instruction in chat' }\n    return { ok: true, id, verdict, note }\n  }\n  return note ? { ok: true, id, verdict, note } : { ok: true, id, verdict }\n}\n\n/** The product seam's verdict for one request: authenticated reviewer +\n *  workspace, or a product-authored short-circuit Response (401/403/429…). */\nexport type WorkProductRouteAuthorization =\n  | { ok: true; workspaceId: string; reviewedBy: string }\n  | { ok: false; response: Response }\n\n/** Auth seam arguments carrying the request, the endpoint intent, and the parsed verdict body */\nexport interface WorkProductAuthorizeArgs {\n  request: Request\n  intent: 'list' | 'detail' | 'verdict'\n  /** The parsed, validated POST body (verdict intent only). */\n  body?: Record<string, unknown>\n}\n\n/** Configuration options assembling the review endpoints from the store and product seams */\nexport interface WorkProductRoutesOptions {\n  store: WorkProductStorePort\n  /** Authenticate + authorize the caller; the ONLY product access step. */\n  authorize: (args: WorkProductAuthorizeArgs) => Promise<WorkProductRouteAuthorization>\n  /** Post-verdict product seam: post the `request_changes` note into the\n   *  driving chat thread as the correction turn, notify, etc. Runs after the\n   *  transition commits; a throw is logged, never unwinds the verdict. */\n  onVerdict?: (args: {\n    record: WorkProductRecord\n    verdict: 'approve' | 'request_changes'\n    note?: string\n    reviewedBy: string\n  }) => void | Promise<void>\n  /** Persist/update the transcript anchor part reflecting the new status, so\n   *  the chat card flips with the verdict. */\n  persistAnchorPart?: (part: WorkProductPersistedPart, record: WorkProductRecord) => void | Promise<void>\n  /** Future integration point fired on approval (push to a DMS/CRM/export\n   *  pipeline). A stub seam by design — export itself stays the product's\n   *  signed object-store download. */\n  onExport?: (record: WorkProductRecord) => void | Promise<void>\n  logger?: Pick<Console, 'warn' | 'error'>\n  now?: () => number\n}\n\n/** Assembled review endpoints returning web-standard Responses */\nexport interface WorkProductRoutes {\n  /** GET — the workspace's records for the queue projection. Optional\n   *  `?status=a,b` filter. */\n  list: (request: Request) => Promise<Response>\n  /** GET — one record by id (404 when absent or outside the workspace). */\n  detail: (request: Request, id: string) => Promise<Response>\n  /** POST `{ id, verdict, note? }` — the reviewer verdict: CAS transition +\n   *  history entry + product seams. 409 when the record is no longer ready. */\n  verdict: (request: Request) => Promise<Response>\n}\n\n/** Create the work-product review endpoints over the store port and product seams */\nexport function createWorkProductRoutes(options: WorkProductRoutesOptions): WorkProductRoutes {\n  const logger = options.logger ?? console\n  const service: WorkProductService = createWorkProductService({\n    store: options.store,\n    ...(options.now ? { now: options.now } : {}),\n  })\n\n  async function list(request: Request): Promise<Response> {\n    const auth = await options.authorize({ request, intent: 'list' })\n    if (!auth.ok) return auth.response\n    const url = new URL(request.url)\n    const statusParam = url.searchParams.get('status')\n    const statuses = statusParam\n      ? statusParam.split(',').map((value) => value.trim()).filter(Boolean)\n      : null\n    const workProducts = await options.store.listByWorkspace(\n      auth.workspaceId,\n      statuses ? { status: statuses as WorkProductRecord['status'][] } : undefined,\n    )\n    return Response.json({ workProducts })\n  }\n\n  async function detail(request: Request, id: string): Promise<Response> {\n    const auth = await options.authorize({ request, intent: 'detail' })\n    if (!auth.ok) return auth.response\n    const record = await options.store.load(id)\n    if (!record || record.workspaceId !== auth.workspaceId) {\n      return Response.json({ error: 'Work product not found' }, { status: 404 })\n    }\n    return Response.json({ workProduct: record })\n  }\n\n  async function verdict(request: Request): Promise<Response> {\n    const body = (await request.json().catch(() => null)) as Record<string, unknown> | null\n    if (!body || typeof body !== 'object' || Array.isArray(body)) {\n      return Response.json({ error: 'Invalid JSON body' }, { status: 400 })\n    }\n    const validation = validateWorkProductVerdictBody(body)\n    if (!validation.ok) return Response.json({ error: validation.error }, { status: 400 })\n\n    const auth = await options.authorize({ request, intent: 'verdict', body })\n    if (!auth.ok) return auth.response\n\n    const existing = await options.store.load(validation.id)\n    if (!existing || existing.workspaceId !== auth.workspaceId) {\n      return Response.json({ error: 'Work product not found' }, { status: 404 })\n    }\n\n    const outcome = await service.applyVerdict(validation.id, {\n      verdict: validation.verdict,\n      reviewedBy: auth.reviewedBy,\n      ...(validation.note === undefined ? {} : { note: validation.note }),\n    })\n    if (!outcome.succeeded) {\n      // A lost race and an illegal edge both mean \"the row is no longer the\n      // ready version you looked at\" — 409 so the client re-reads.\n      return Response.json({ code: 'VERDICT_CONFLICT', error: outcome.error }, { status: 409 })\n    }\n    const record = outcome.value\n\n    // Product seams run AFTER the committed transition; their failures are\n    // logged, never unwound — the verdict is durable truth at this point.\n    try {\n      await options.persistAnchorPart?.(workProductToPersistedPart(record), record)\n    } catch (error) {\n      logger.error('[work-product] persistAnchorPart failed:', error)\n    }\n    try {\n      await options.onVerdict?.({\n        record,\n        verdict: validation.verdict,\n        ...(validation.note === undefined ? {} : { note: validation.note }),\n        reviewedBy: auth.reviewedBy,\n      })\n    } catch (error) {\n      logger.error('[work-product] onVerdict failed:', error)\n    }\n    if (validation.verdict === 'approve') {\n      try {\n        await options.onExport?.(record)\n      } catch (error) {\n        logger.error('[work-product] onExport failed:', error)\n      }\n    }\n\n    return Response.json({ ok: true, workProduct: record })\n  }\n\n  return { list, detail, verdict }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuCA,IAAM,2BAAsF;AAAA,EAC1F,OAAO,oBAAI,IAAuB,CAAC,WAAW,OAAO,CAAC;AAAA,EACtD,SAAS,oBAAI,IAAuB,CAAC,OAAO,CAAC;AAAA,EAC7C,OAAO,oBAAI,IAAuB,CAAC,qBAAqB,YAAY,YAAY,CAAC;AAAA,EACjF,mBAAmB,oBAAI,IAAuB,CAAC,SAAS,YAAY,CAAC;AAAA,EACrE,UAAU,oBAAI,IAAuB,CAAC,YAAY,CAAC;AAAA,EACnD,YAAY,oBAAI,IAAuB;AACzC;AAGO,SAAS,yBAAyB,MAAyB,IAAgC;AAChG,SAAO,yBAAyB,IAAI,EAAE,IAAI,EAAE;AAC9C;AAGO,SAAS,sBAAsB,QAAoC;AACxE,SAAO,yBAAyB,MAAM,EAAE,SAAS;AACnD;AAmFA,SAAS,SAAY,OAAsC;AACzD,SAAO,EAAE,WAAW,OAAO,OAAO,UAAU,MAAM;AACpD;AAEA,SAAS,SAAY,IAAmC;AACtD,SAAO,EAAE,WAAW,OAAO,OAAO,gBAAgB,EAAE,yBAAyB,UAAU,KAAK;AAC9F;AAIA,SAAS,UAAoC,UAAwB,UAA6B;AAChG,QAAM,SAAS,SAAS,MAAM;AAC9B,QAAM,YAAY,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,UAAU,CAAC,MAAM,IAAI,KAAK,CAAU,CAAC;AAClF,aAAW,SAAS,UAAU;AAC5B,UAAM,KAAK,UAAU,IAAI,MAAM,EAAE;AACjC,QAAI,OAAO,QAAW;AACpB,gBAAU,IAAI,MAAM,IAAI,OAAO,MAAM;AACrC,aAAO,KAAK,KAAK;AAAA,IACnB,OAAO;AACL,aAAO,EAAE,IAAI;AAAA,IACf;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,yBAAyB,SAAwD;AAC/F,QAAM,EAAE,MAAM,IAAI;AAClB,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAC3C,QAAM,aAAa,QAAQ,eAAe,MAAM,OAAO,WAAW;AAElE,iBAAe,YACb,QACA,MACA,SACA,WAAoC,CAAC,GACtB;AACf,UAAM,MAAM,YAAY;AAAA,MACtB,eAAe,OAAO;AAAA,MACtB,aAAa,OAAO;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA,IAAI,IAAI;AAAA,IACV,CAAC;AAAA,EACH;AAKA,iBAAe,WACb,IACA,IACA,QAA0C,CAAC,GAC3C,YAAqC,CAAC,GACU;AAChD,UAAM,SAAS,MAAM,MAAM,KAAK,EAAE;AAClC,QAAI,CAAC,OAAQ,QAAO,SAAS,gBAAgB,EAAE,YAAY;AAC3D,UAAM,OAAO,OAAO;AACpB,QAAI,sBAAsB,IAAI,GAAG;AAC/B,aAAO,SAAS,gBAAgB,EAAE,iBAAiB,IAAI,2BAA2B,EAAE,EAAE;AAAA,IACxF;AACA,QAAI,CAAC,yBAAyB,MAAM,EAAE,GAAG;AACvC,aAAO,SAAS,mCAAmC,IAAI,OAAO,EAAE,QAAQ,EAAE,EAAE;AAAA,IAC9E;AACA,UAAM,UAAU,MAAM,MAAM;AAAA,MAC1B;AAAA,MACA,EAAE,QAAQ,MAAM,SAAS,OAAO,QAAQ;AAAA,MACxC,EAAE,QAAQ,IAAI,WAAW,IAAI,GAAG,GAAG,MAAM;AAAA,IAC3C;AACA,QAAI,CAAC,QAAS,QAAO,SAAS,EAAE;AAChC,UAAM,YAAY,SAAS,MAAM,EAAE,IAAI,gBAAgB,IAAI,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,GAAG,UAAU,CAAC;AAClG,WAAO,EAAE,WAAW,MAAM,OAAO,QAAQ;AAAA,EAC3C;AAIA,iBAAe,aACb,IACA,eACA,OACA,OACgD;AAChD,UAAM,SAAS,MAAM,MAAM,KAAK,EAAE;AAClC,QAAI,CAAC,OAAQ,QAAO,SAAS,gBAAgB,EAAE,YAAY;AAC3D,QAAI,CAAC,cAAc,SAAS,OAAO,MAAM,GAAG;AAC1C,aAAO,SAAS,gBAAgB,EAAE,OAAO,OAAO,MAAM,cAAc,cAAc,KAAK,GAAG,CAAC,EAAE;AAAA,IAC/F;AACA,UAAM,UAAU,MAAM,MAAM;AAAA,MAC1B;AAAA,MACA,EAAE,QAAQ,OAAO,QAAQ,SAAS,OAAO,QAAQ;AAAA,MACjD,EAAE,WAAW,IAAI,GAAG,GAAG,MAAM,MAAM,EAAE;AAAA,IACvC;AACA,QAAI,CAAC,QAAS,QAAO,SAAS,EAAE;AAChC,UAAM,YAAY,SAAS,MAAM,MAAM,MAAM,QAAQ,OAAO,GAAG,MAAM,WAAW,OAAO,KAAK,CAAC,CAAC;AAC9F,WAAO,EAAE,WAAW,MAAM,OAAO,QAAQ;AAAA,EAC3C;AAEA,QAAM,SAAuC,OAAO,UAAU;AAC5D,UAAM,KAAK,IAAI;AACf,UAAM,SAAS,MAAM,MAAM;AAAA,MACzB;AAAA,QACE,IAAI,MAAM,MAAM,WAAW;AAAA,QAC3B,aAAa,MAAM;AAAA,QACnB,UAAU,MAAM;AAAA,QAChB,UAAU,MAAM;AAAA,QAChB,QAAQ;AAAA,QACR,SAAS,MAAM,WAAW;AAAA,QAC1B,UAAU;AAAA,QACV,UAAU,CAAC;AAAA,QACX,YAAY,CAAC;AAAA,QACb,QAAQ,CAAC;AAAA,QACT,YAAY,MAAM;AAAA,QAClB,SAAS,CAAC;AAAA,QACV,WAAW;AAAA,QACX,WAAW;AAAA,MACb;AAAA,MACA,MAAM;AAAA,IACR;AACA,UAAM,YAAY,QAAQ,cAAc,uBAAuB,OAAO,OAAO,gBAAgB,OAAO,QAAQ,IAAI;AAAA,MAC9G,UAAU,OAAO;AAAA,MACjB,SAAS,OAAO;AAAA,MAChB,UAAU,OAAO;AAAA,IACnB,CAAC;AACD,WAAO;AAAA,EACT;AAEA,iBAAe,qBACb,aACA,UACA,QACmC;AACnC,UAAM,OAAO,MAAM,MAAM,gBAAgB,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC1E,WAAO,KAAK,KAAK,CAAC,QAAQ,IAAI,aAAa,QAAQ,KAAK;AAAA,EAC1D;AAEA,QAAM,cAAiD,OAAO,aAAa,aAAa;AACtF,UAAM,WAAW,MAAM,MAAM,gBAAgB,aAAa,EAAE,QAAQ,CAAC,YAAY,YAAY,EAAE,CAAC;AAChG,UAAM,WAAW,SAAS,OAAO,CAAC,QAAQ,IAAI,aAAa,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO;AAC7F,WAAO,SAAS,WAAW,IAAI,IAAI,KAAK,IAAI,GAAG,QAAQ,IAAI;AAAA,EAC7D;AAEA,QAAM,SAAuC,OAAO,OAAO;AACzD,UAAM,SAAS,MAAM,MAAM,KAAK,EAAE;AAClC,QAAI,CAAC,OAAQ,QAAO,SAAS,gBAAgB,EAAE,YAAY;AAC3D,QAAI,OAAO,WAAW,qBAAqB;AACzC,aAAO,SAAS,gBAAgB,EAAE,OAAO,OAAO,MAAM,kCAAkC;AAAA,IAC1F;AACA,UAAM,UAAU,MAAM,MAAM;AAAA,MAC1B;AAAA,MACA,EAAE,QAAQ,qBAAqB,SAAS,OAAO,QAAQ;AAAA,MACvD,EAAE,QAAQ,SAAS,SAAS,OAAO,UAAU,GAAG,WAAW,IAAI,EAAE;AAAA,IACnE;AACA,QAAI,CAAC,QAAS,QAAO,SAAS,EAAE;AAChC,UAAM,YAAY,SAAS,eAAe,qBAAqB,QAAQ,OAAO,WAAW;AAAA,MACvF,MAAM,OAAO;AAAA,MACb,IAAI,QAAQ;AAAA,IACd,CAAC;AACD,WAAO,EAAE,WAAW,MAAM,OAAO,QAAQ;AAAA,EAC3C;AAEA,QAAM,iBAAuD,CAAC,IAAI,YAChE;AAAA,IACE;AAAA,IACA,CAAC,SAAS,SAAS;AAAA,IACnB,CAAC,YAAY,EAAE,UAAU,UAAU,OAAO,UAAU,OAAO,EAAE;AAAA,IAC7D;AAAA,MACE,MAAM;AAAA,MACN,SAAS,CAAC,WAAW,sBAAsB,QAAQ,MAAM,aAAa,OAAO,SAAS,MAAM;AAAA,MAC5F,UAAU,OAAO,EAAE,UAAU,QAAQ,IAAI,CAAC,UAAU,MAAM,EAAE,EAAE;AAAA,IAChE;AAAA,EACF;AAEF,QAAM,mBAA2D,OAAO,IAAI,YAAY;AACtF,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA,CAAC,SAAS,SAAS;AAAA,MACnB,CAACA,aAAY,EAAE,YAAY,UAAUA,QAAO,YAAY,OAAO,EAAE;AAAA,MACjE;AAAA,QACE,MAAM;AAAA,QACN,SAAS,CAACA,YACR,wBAAwB,QAAQ,MAAM,aAAa,6BAA6BA,QAAO,UAAU,EAAE,MAAM;AAAA,QAC3G,UAAU,OAAO,EAAE,UAAU,QAAQ,IAAI,CAAC,UAAU,MAAM,EAAE,EAAE;AAAA,MAChE;AAAA,IACF;AACA,QAAI,CAAC,OAAO,UAAW,QAAO;AAG9B,UAAM,SAAS,OAAO;AACtB,UAAM,WAAW,6BAA6B,OAAO,UAAU,EAAE;AACjE,QAAI,OAAO,WAAW,WAAW,WAAW,GAAG;AAC7C,aAAO,WAAW,IAAI,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC;AAAA,IACnD;AACA,QAAI,OAAO,WAAW,aAAa,aAAa,GAAG;AACjD,aAAO,WAAW,IAAI,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AAEA,QAAM,eAAmD,CAAC,IAAI,WAC5D;AAAA,IACE;AAAA,IACA,CAAC,SAAS,SAAS;AAAA,IACnB,OAAO,EAAE,QAAQ,OAAO,MAAM,EAAE;AAAA,IAChC;AAAA,MACE,MAAM;AAAA,MACN,SAAS,MAAM,oBAAoB,OAAO,MAAM,KAAK,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,MAAM,EAAE,MAAM;AAAA,MACnG,UAAU,OAAO,EAAE,QAAQ,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,MAAM,EAAE,IAAI,CAAC,UAAU,MAAM,IAAI,EAAE;AAAA,IAChG;AAAA,EACF;AAEF,QAAM,SAAuC,OAAO,IAAI,UAAU;AAChE,UAAM,SAAS,MAAM,MAAM,KAAK,EAAE;AAClC,QAAI,CAAC,OAAQ,QAAO,SAAS,gBAAgB,EAAE,YAAY;AAC3D,QAAI,OAAO,WAAW,SAAS;AAC7B,aAAO,SAAS,gBAAgB,EAAE,OAAO,OAAO,MAAM,wBAAwB;AAAA,IAChF;AACA,UAAM,WAAW,6BAA6B,OAAO,UAAU;AAC/D,QAAI,SAAS,SAAS,GAAG;AACvB,aAAO;AAAA,QACL,gBAAgB,EAAE,QAAQ,SAAS,MAAM,sCAAsC,SAAS,IAAI,CAACC,WAAUA,OAAM,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,MAC7H;AAAA,IACF;AACA,UAAM,eAAe,MAAM,gBAAgB,MAAM,SAAS;AAC1D,UAAM,QAAiC;AAAA,MACrC,SAAS,OAAO;AAAA,MAChB,QAAQ;AAAA,MACR,YAAY,MAAM;AAAA,MAClB,GAAI,iBAAiB,SAAY,CAAC,IAAI,EAAE,aAAa;AAAA,MACrD,IAAI,IAAI;AAAA,IACV;AACA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,QACE,UAAU,MAAM;AAAA,QAChB,QAAQ,MAAM,OAAO,MAAM;AAAA,QAC3B,YAAY,MAAM;AAAA,QAClB,SAAS,CAAC,GAAG,OAAO,SAAS,KAAK;AAAA,MACpC;AAAA,MACA,EAAE,SAAS,OAAO,SAAS,cAAc,MAAM,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,MAAM,EAAE,OAAO;AAAA,IAChG;AAAA,EACF;AAEA,QAAM,eAAmD,OAAO,IAAI,UAAU;AAC5E,UAAM,SAAS,MAAM,MAAM,KAAK,EAAE;AAClC,QAAI,CAAC,OAAQ,QAAO,SAAS,gBAAgB,EAAE,YAAY;AAC3D,QAAI,OAAO,WAAW,SAAS;AAC7B,aAAO,SAAS,gBAAgB,EAAE,OAAO,OAAO,MAAM,mCAAmC;AAAA,IAC3F;AACA,UAAM,KAAwB,MAAM,YAAY,YAAY,aAAa;AACzE,UAAM,QAAiC;AAAA,MACrC,SAAS,OAAO;AAAA,MAChB,QAAQ;AAAA,MACR,YAAY,OAAO;AAAA,MACnB,GAAI,OAAO,UAAU,SAAS,SAAY,CAAC,IAAI,EAAE,cAAc,OAAO,SAAS,KAAK;AAAA,MACpF,YAAY,MAAM;AAAA,MAClB,GAAI,MAAM,SAAS,SAAY,CAAC,IAAI,EAAE,YAAY,MAAM,KAAK;AAAA,MAC7D,IAAI,IAAI;AAAA,IACV;AACA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,EAAE,SAAS,CAAC,GAAG,OAAO,SAAS,KAAK,EAAE;AAAA,MACtC,EAAE,SAAS,MAAM,SAAS,YAAY,MAAM,WAAW;AAAA,IACzD;AACA,QAAI,CAAC,QAAQ,aAAa,OAAO,WAAY,QAAO;AAEpD,UAAM,gBAAgB,MAAM,MAAM,gBAAgB,OAAO,aAAa,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;AAC9F,eAAW,SAAS,eAAe;AACjC,UAAI,MAAM,OAAO,MAAM,MAAM,aAAa,OAAO,SAAU;AAC3D,YAAM,WAAW,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,CAAC;AAAA,IACnE;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL;AAAA,IACA,KAAK,CAAC,OAAO,MAAM,KAAK,EAAE;AAAA,IAC1B,WAAW,CAAC,aAAa,aAAa,MAAM,UAAU,aAAa,QAAQ;AAAA,IAC3E,oBAAoB,CAAC,aAAa,aAAa,qBAAqB,aAAa,UAAU,mBAAmB;AAAA,IAC9G,gBAAgB,CAAC,aAAa,aAAa,qBAAqB,aAAa,UAAU,OAAO;AAAA,IAC9F;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,CAAC,OAAO,WAAW,IAAI,YAAY;AAAA,EAChD;AACF;AAiBO,SAAS,iCAA2D;AACzE,QAAM,OAAO,oBAAI,IAA+B;AAChD,QAAM,SAAkC,CAAC;AAEzC,SAAO;AAAA,IACL,MAAM,KAAK,IAAI;AACb,YAAM,SAAS,KAAK,IAAI,EAAE;AAC1B,aAAO,SAAS,gBAAgB,MAAM,IAAI;AAAA,IAC5C;AAAA,IACA,MAAM,UAAU,aAAa,UAAU;AACrC,iBAAW,UAAU,KAAK,OAAO,GAAG;AAClC,YACE,OAAO,gBAAgB,eACvB,OAAO,aAAa,aACnB,OAAO,WAAW,WAAW,OAAO,WAAW,YAChD;AACA,iBAAO,gBAAgB,MAAM;AAAA,QAC/B;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,gBAAgB,aAAa,MAAM;AACvC,YAAM,MAA2B,CAAC;AAClC,iBAAW,UAAU,KAAK,OAAO,GAAG;AAClC,YAAI,OAAO,gBAAgB,YAAa;AACxC,YAAI,MAAM,UAAU,CAAC,KAAK,OAAO,SAAS,OAAO,MAAM,EAAG;AAC1D,YAAI,KAAK,gBAAgB,MAAM,CAAC;AAAA,MAClC;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,OAAO,QAAQ;AACnB,UAAI,KAAK,IAAI,OAAO,EAAE,EAAG,OAAM,IAAI,MAAM,gBAAgB,OAAO,EAAE,iBAAiB;AACnF,WAAK,IAAI,OAAO,IAAI,gBAAgB,MAAM,CAAC;AAC3C,aAAO,gBAAgB,MAAM;AAAA,IAC/B;AAAA,IACA,MAAM,OAAO,IAAI,OAAO,OAAO;AAC7B,YAAM,UAAU,KAAK,IAAI,EAAE;AAC3B,UAAI,CAAC,QAAS,QAAO;AACrB,UAAI,MAAM,WAAW,UAAa,QAAQ,WAAW,MAAM,OAAQ,QAAO;AAC1E,UAAI,MAAM,YAAY,UAAa,QAAQ,YAAY,MAAM,QAAS,QAAO;AAC7E,YAAM,OAA0B,EAAE,GAAG,QAAQ;AAC7C,UAAI,MAAM,WAAW,OAAW,MAAK,SAAS,MAAM;AACpD,UAAI,MAAM,YAAY,OAAW,MAAK,UAAU,MAAM;AACtD,UAAI,MAAM,aAAa,OAAW,MAAK,WAAW,MAAM;AACxD,UAAI,MAAM,aAAa,OAAW,MAAK,WAAW,MAAM;AACxD,UAAI,MAAM,eAAe,OAAW,MAAK,aAAa,MAAM;AAC5D,UAAI,MAAM,WAAW,OAAW,MAAK,SAAS,MAAM;AACpD,UAAI,MAAM,eAAe,OAAW,MAAK,aAAa,MAAM;AAC5D,UAAI,MAAM,YAAY,OAAW,MAAK,UAAU,MAAM;AACtD,UAAI,MAAM,cAAc,OAAW,MAAK,YAAY,MAAM;AAC1D,WAAK,IAAI,IAAI,gBAAgB,IAAI,CAAC;AAClC,aAAO,gBAAgB,IAAI;AAAA,IAC7B;AAAA,IACA,MAAM,YAAY,OAAO;AACvB,aAAO,KAAK,gBAAgB,KAAK,CAAC;AAAA,IACpC;AAAA,IACA,SAAS;AACP,aAAO,OAAO,IAAI,CAAC,UAAU,gBAAgB,KAAK,CAAC;AAAA,IACrD;AAAA,IACA,IAAI,QAAQ;AACV,WAAK,IAAI,OAAO,IAAI,gBAAgB,MAAM,CAAC;AAAA,IAC7C;AAAA,EACF;AACF;;;ACtdO,SAAS,gBAAgB,MAAiC,MAAoB,KAAK,KAA4B;AACpH,SAAO,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,YAAY,IAAI,EAAE;AACzD;AAoBA,eAAsB,8BACpB,OACA,OAC8B;AAC9B,QAAM,OAAO,MAAM,MAAM,gBAAgB,MAAM,WAAW;AAC1D,QAAM,UAA+B,CAAC;AACtC,aAAW,UAAU,MAAM;AACzB,UAAM,gBAAgB,OAAO,WAAW,UAAU,MAAM;AACxD,UAAM,iBAAiB,OAAO,QAAQ,KAAK,CAAC,UAAU,MAAM,WAAW,UAAU,MAAM,KAAK;AAC5F,QAAI,CAAC,iBAAiB,CAAC,eAAgB;AACvC,UAAM,WAAW,CAAC,gBAA8D;AAAA,MAC9E,GAAG;AAAA,MACH,eAAe,CAAC,GAAG,MAAM,aAAa;AAAA,MACtC,GAAI,MAAM,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,IAClE;AACA,UAAM,OAAO,MAAM,MAAM;AAAA,MACvB,OAAO;AAAA,MACP,EAAE,QAAQ,OAAO,QAAQ,SAAS,OAAO,QAAQ;AAAA,MACjD;AAAA,QACE,GAAI,gBAAgB,EAAE,YAAY,SAAS,OAAO,UAAU,EAAE,IAAI,CAAC;AAAA,QACnE,SAAS,OAAO,QAAQ;AAAA,UAAI,CAAC,UAC3B,MAAM,WAAW,UAAU,MAAM,QAAQ,EAAE,GAAG,OAAO,YAAY,SAAS,MAAM,UAAU,EAAE,IAAI;AAAA,QAClG;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,MAAM;AACT,YAAM,QAAQ,KAAK,sDAAsD,OAAO,EAAE,WAAW;AAC7F;AAAA,IACF;AACA,UAAM,MAAM,YAAY;AAAA,MACtB,eAAe,OAAO;AAAA,MACtB,aAAa,OAAO;AAAA,MACpB,MAAM;AAAA,MACN,SAAS,sCAAsC,MAAM,KAAK;AAAA,MAC1D,UAAU,EAAE,OAAO,MAAM,OAAO,eAAe,CAAC,GAAG,MAAM,aAAa,GAAG,SAAS,MAAM,WAAW,KAAK;AAAA,MACxG,IAAI,KAAK,IAAI;AAAA,IACf,CAAC;AACD,YAAQ,KAAK,IAAI;AAAA,EACnB;AACA,SAAO;AACT;AAWO,SAAS,uBACd,SACA,aACgB;AAChB,QAAM,QAAwB,CAAC;AAC/B,aAAW,UAAU,SAAS;AAC5B,UAAM,WAAW,YAAY,MAAM;AACnC,QAAI,CAAC,YAAY,SAAS,WAAW,EAAG;AACxC,UAAM,KAAK,EAAE,QAAQ,OAAO,IAAI,SAAS,CAAC;AAAA,EAC5C;AACA,SAAO;AACT;;;ACvGA,IAAM,aAAa;AAKnB,IAAM,SAAS;AAGf,IAAM,gBAAgB;AAGtB,IAAM,gBAAgB;AASf,SAAS,mBAAmB,OAAuB;AACxD,SAAO,MACJ,UAAU,MAAM,EAChB,QAAQ,QAAQ,GAAG,EACnB,QAAQ,eAAe,GAAG,EAC1B,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,GAAG,EACvB,KAAK;AACV;AAUO,SAAS,oBAAoB,YAAoB,OAAwB;AAC9E,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,MAAI,WAAW,SAAS,OAAO,EAAG,QAAO;AACzC,QAAM,kBAAkB,mBAAmB,KAAK;AAChD,MAAI,gBAAgB,WAAW,EAAG,QAAO;AACzC,SAAO,mBAAmB,UAAU,EAAE,SAAS,eAAe;AAChE;;;AC1BO,IAAM,yBAAyB;AAI/B,IAAM,0BAA0B;AAMhC,IAAM,2BAA2B;AA8CxC,eAAe,OACb,KACA,MACY;AACZ,MAAI,UAAU,MAAM,IAAI;AACxB,MAAI,CAAC,QAAQ,aAAa,QAAQ,SAAU,WAAU,MAAM,IAAI;AAChE,MAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,eAAe,MAAM,QAAQ,OAAO,QAAQ,WAAW,MAAM,GAAG;AAClG,SAAO,QAAQ;AACjB;AAEA,SAAS,gBAAgB,MAAuC;AAC9D,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,SAAS,KAAK,IAAI;AAC5E,MAAI,CAAC,SAAU,OAAM,IAAI,eAAe,qBAAqB,8EAAyE;AACtI,SAAO;AACT;AAEA,SAAS,aAAa,MAA+B,OAA0B;AAC7E,QAAM,MAAM,KAAK,KAAK;AACtB,MAAI,CAAC,MAAM,QAAQ,GAAG,KAAK,IAAI,WAAW,GAAG;AAC3C,UAAM,IAAI,eAAe,mBAAmB,GAAG,KAAK,6BAA6B;AAAA,EACnF;AACA,MAAI,IAAI,SAAS,wBAAwB;AACvC,UAAM,IAAI,eAAe,mBAAmB,GAAG,KAAK,oBAAoB,sBAAsB,gDAA2C;AAAA,EAC3I;AACA,SAAO;AACT;AASA,eAAe,aACb,SACA,QACA,UACA,KAC4B;AAC5B,QAAM,OAAO,MAAM,QAAQ,UAAU,IAAI,aAAa,QAAQ;AAC9D,MAAI,KAAM,QAAO;AACjB,QAAM,iBAAiB,MAAM,QAAQ,eAAe,IAAI,aAAa,QAAQ;AAC7E,MAAI,gBAAgB;AAClB,UAAM,IAAI;AAAA,MACR;AAAA,MACA,oBAAoB,QAAQ,MAAM,eAAe,OAAO;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AACA,QAAM,qBAAqB,MAAM,QAAQ,mBAAmB,IAAI,aAAa,QAAQ;AACrF,MAAI,oBAAoB;AACtB,WAAO,OAAO,MAAM,QAAQ,OAAO,mBAAmB,EAAE,GAAG,eAAe;AAAA,EAC5E;AACA,SAAO,QAAQ,OAAO;AAAA,IACpB,aAAa,IAAI;AAAA,IACjB,UAAU,IAAI;AAAA,IACd;AAAA,IACA,SAAS,MAAM,QAAQ,YAAY,IAAI,aAAa,QAAQ;AAAA,IAC5D,YAAY,gBAAgB,OAAO,WAAW,GAAG,GAAG,OAAO,GAAG;AAAA,EAChE,CAAC;AACH;AAaA,eAAe,2BACb,QACA,SACA,KACe;AACf,QAAM,iBAAiB,OAAO;AAC9B,MAAI,CAAC,eAAgB;AACrB,QAAM,QAAQ,oBAAI,IAA2B;AAC7C,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,QAAQ,QAAQ,KAAK;AAC3B,UAAM,QAAQ,MAAM,QAAQ;AAC5B,QAAI,UAAU,UAAa,MAAM,KAAK,EAAE,WAAW,EAAG;AACtD,QAAI,CAAC,MAAM,IAAI,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,WAAW,MAAM,eAAe,MAAM,WAAW,GAAG,CAAC;AACtG,UAAM,OAAO,MAAM,IAAI,MAAM,SAAS;AACtC,QAAI,SAAS,QAAQ,SAAS,QAAW;AACvC,YAAM,IAAI;AAAA,QACR;AAAA,QACA,WAAW,KAAK,qBAAqB,MAAM,SAAS;AAAA,MACtD;AAAA,IACF;AACA,QAAI,CAAC,oBAAoB,MAAM,KAAK,GAAG;AACrC,YAAM,IAAI;AAAA,QACR;AAAA,QACA,WAAW,KAAK,oBAAoB,KAAK,UAAU,KAAK,CAAC,uBAAuB,MAAM,SAAS;AAAA,MACjG;AAAA,IACF;AAAA,EACF;AACF;AAQA,eAAe,2BACb,QACA,UACA,KACmF;AACnF,QAAM,iBAAiB,OAAO;AAC9B,MAAI,CAAC,eAAgB,QAAO;AAC5B,QAAM,QAAQ,oBAAI,IAA2B;AAC7C,MAAI,WAAW;AACf,MAAI,eAAe;AACnB,QAAM,SAAmB,CAAC;AAC1B,aAAW,SAAS,UAAU;AAC5B,UAAM,QAAQ,MAAM,QAAQ;AAC5B,QAAI,UAAU,UAAa,MAAM,KAAK,EAAE,WAAW,GAAG;AACpD,sBAAgB;AAChB;AAAA,IACF;AACA,QAAI,CAAC,MAAM,IAAI,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,WAAW,MAAM,eAAe,MAAM,WAAW,GAAG,CAAC;AACtG,UAAM,OAAO,MAAM,IAAI,MAAM,SAAS;AACtC,QAAI,OAAO,SAAS,YAAY,oBAAoB,MAAM,KAAK,EAAG,aAAY;AAAA,QACzE,QAAO,KAAK,MAAM,EAAE;AAAA,EAC3B;AACA,SAAO,EAAE,UAAU,cAAc,OAAO;AAC1C;AAIO,SAAS,sBAAsB,QAAoD;AACxF,QAAM,UAAU,yBAAyB;AAAA,IACvC,OAAO,OAAO;AAAA,IACd,GAAI,OAAO,MAAM,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC;AAAA,IACxC,GAAI,OAAO,aAAa,EAAE,YAAY,OAAO,WAAW,IAAI,CAAC;AAAA,EAC/D,CAAC;AAED,QAAM,iBAAiB,cAAc;AAAA,IACnC,MAAM;AAAA,IACN,aACE;AAAA,IACF,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,UAAU,EAAE,MAAM,UAAU,aAAa,wCAAwC;AAAA,QACjF,SAAS;AAAA,UACP,MAAM;AAAA,UACN,UAAU;AAAA,UACV,UAAU;AAAA,UACV,OAAO;AAAA,YACL,MAAM;AAAA,YACN,YAAY;AAAA,cACV,IAAI,EAAE,MAAM,UAAU,aAAa,6CAAwC;AAAA,cAC3E,WAAW,EAAE,MAAM,UAAU,aAAa,qDAAqD;AAAA,cAC/F,SAAS;AAAA,gBACP,MAAM;AAAA,gBACN,YAAY;AAAA,kBACV,MAAM,EAAE,MAAM,SAAS;AAAA,kBACvB,OAAO,EAAE,MAAM,UAAU,aAAa,oDAAiD;AAAA,kBACvF,OAAO;AAAA,oBACL,MAAM;AAAA,oBACN,aACE;AAAA,kBACJ;AAAA,gBACF;AAAA,cACF;AAAA,cACA,QAAQ,EAAE,MAAM,UAAU,aAAa,+CAA+C;AAAA,cACtF,OAAO,EAAE,MAAM,UAAU,aAAa,qCAAqC;AAAA,cAC3E,YAAY,EAAE,MAAM,UAAU,SAAS,GAAG,SAAS,EAAE;AAAA,YACvD;AAAA,YACA,UAAU,CAAC,MAAM,aAAa,UAAU,OAAO;AAAA,UACjD;AAAA,QACF;AAAA,MACF;AAAA,MACA,UAAU,CAAC,YAAY,SAAS;AAAA,IAClC;AAAA,IACA,MAAM,QAAQ,MAA+B,KAAqB;AAChE,YAAM,WAAW,gBAAgB,IAAI;AACrC,YAAM,MAAM,aAAa,MAAM,SAAS;AACxC,YAAM,UAA2B,CAAC;AAClC,eAAS,QAAQ,GAAG,QAAQ,IAAI,QAAQ,SAAS,GAAG;AAClD,cAAM,SAAS,mBAAmB,IAAI,KAAK,GAAG,WAAW,KAAK,GAAG;AACjE,YAAI,CAAC,OAAO,GAAI,OAAM,IAAI,eAAe,oBAAoB,GAAG,OAAO,KAAK,KAAK,OAAO,KAAK,EAAE;AAC/F,gBAAQ,KAAK,OAAO,KAAK;AAAA,MAC3B;AAEA,eAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,cAAM,QAAQ,QAAQ,KAAK;AAC3B,YAAI,CAAE,MAAM,OAAO,iBAAiB,MAAM,WAAW,GAAG,GAAI;AAC1D,gBAAM,IAAI;AAAA,YACR;AAAA,YACA,WAAW,KAAK,iBAAiB,MAAM,SAAS;AAAA,UAClD;AAAA,QACF;AAAA,MACF;AAKA,YAAM,2BAA2B,QAAQ,SAAS,GAAG;AACrD,YAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,UAAU,GAAG;AAC/D,YAAM,SAAS,MAAM,OAAO,MAAM,QAAQ,eAAe,MAAM,IAAI,OAAO,GAAG,mBAAmB;AAChG,aAAO,EAAE,eAAe,OAAO,IAAI,SAAS,OAAO,SAAS,eAAe,OAAO,SAAS,OAAO;AAAA,IACpG;AAAA,EACF,CAAC;AAED,QAAM,gBAAgB,cAAc;AAAA,IAClC,MAAM;AAAA,IACN,aACE;AAAA,IACF,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,UAAU,EAAE,MAAM,UAAU,aAAa,wCAAwC;AAAA,QACjF,YAAY;AAAA,UACV,MAAM;AAAA,UACN,UAAU;AAAA,UACV,UAAU;AAAA,UACV,OAAO;AAAA,YACL,MAAM;AAAA,YACN,YAAY;AAAA,cACV,IAAI,EAAE,MAAM,UAAU,aAAa,6CAAwC;AAAA,cAC3E,UAAU,EAAE,MAAM,UAAU,MAAM,CAAC,YAAY,YAAY,UAAU,EAAE;AAAA,cACvE,MAAM,EAAE,MAAM,UAAU,aAAa,8CAA8C;AAAA,cACnF,SAAS,EAAE,MAAM,SAAS;AAAA,cAC1B,SAAS,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,cACpD,UAAU,EAAE,MAAM,UAAU;AAAA,cAC5B,gBAAgB,EAAE,MAAM,SAAS;AAAA,YACnC;AAAA,YACA,UAAU,CAAC,MAAM,YAAY,QAAQ,SAAS;AAAA,UAChD;AAAA,QACF;AAAA,MACF;AAAA,MACA,UAAU,CAAC,YAAY,YAAY;AAAA,IACrC;AAAA,IACA,MAAM,QAAQ,MAA+B,KAAqB;AAChE,YAAM,WAAW,gBAAgB,IAAI;AACrC,YAAM,MAAM,aAAa,MAAM,YAAY;AAC3C,YAAM,UAA4B,CAAC;AACnC,eAAS,QAAQ,GAAG,QAAQ,IAAI,QAAQ,SAAS,GAAG;AAClD,cAAM,SAAS,oBAAoB,IAAI,KAAK,GAAG,cAAc,KAAK,GAAG;AACrE,YAAI,CAAC,OAAO,GAAI,OAAM,IAAI,eAAe,qBAAqB,GAAG,OAAO,KAAK,KAAK,OAAO,KAAK,EAAE;AAChG,YAAI,CAAC,OAAO,eAAe,SAAS,OAAO,MAAM,IAAI,GAAG;AACtD,gBAAM,IAAI;AAAA,YACR;AAAA,YACA,cAAc,KAAK,2BAA2B,OAAO,eAAe,KAAK,IAAI,CAAC;AAAA,UAChF;AAAA,QACF;AAGA,YAAI,OAAO,MAAM,YAAY,OAAO,MAAM,eAAe,OAAW,QAAO,MAAM,aAAa;AAC9F,gBAAQ,KAAK,OAAO,KAAK;AAAA,MAC3B;AACA,YAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,UAAU,GAAG;AAC/D,YAAM,SAAS,MAAM,OAAO,MAAM,QAAQ,iBAAiB,MAAM,IAAI,OAAO,GAAG,oBAAoB;AACnG,aAAO;AAAA,QACL,eAAe,OAAO;AAAA,QACtB,SAAS,OAAO;AAAA,QAChB,QAAQ,OAAO;AAAA,QACf,oBAAoB,6BAA6B,OAAO,UAAU,EAAE;AAAA,MACtE;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,oBAAoB,cAAc;AAAA,IACtC,MAAM;AAAA,IACN,aACE;AAAA,IACF,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,UAAU,EAAE,MAAM,UAAU,aAAa,wCAAwC;AAAA,QACjF,UAAU;AAAA,UACR,MAAM;AAAA,UACN,YAAY;AAAA,YACV,MAAM,EAAE,MAAM,UAAU,aAAa,6CAA6C;AAAA,YAClF,OAAO,EAAE,MAAM,SAAS;AAAA,YACxB,MAAM,EAAE,MAAM,UAAU,aAAa,mDAAmD;AAAA,YACxF,SAAS,EAAE,MAAM,UAAU,aAAa,0CAA0C;AAAA,YAClF,WAAW,EAAE,MAAM,SAAS;AAAA,YAC5B,UAAU;AAAA,cACR,MAAM;AAAA,cACN,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,GAAG,SAAS,EAAE,MAAM,SAAS,EAAE;AAAA,cACpE,aAAa;AAAA,YACf;AAAA,YACA,QAAQ,EAAE,MAAM,UAAU,aAAa,kDAAkD;AAAA,UAC3F;AAAA,UACA,UAAU,CAAC,QAAQ,OAAO;AAAA,QAC5B;AAAA,QACA,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,YACL,MAAM;AAAA,YACN,YAAY;AAAA,cACV,IAAI,EAAE,MAAM,SAAS;AAAA,cACrB,MAAM,EAAE,MAAM,SAAS;AAAA,cACvB,QAAQ,EAAE,MAAM,UAAU;AAAA,cAC1B,QAAQ,EAAE,MAAM,SAAS;AAAA,YAC3B;AAAA,YACA,UAAU,CAAC,MAAM,QAAQ,QAAQ;AAAA,UACnC;AAAA,UACA,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,YAAY,UAAU;AAAA,IACnC;AAAA,IACA,MAAM,QAAQ,MAA+B,KAAqB;AAChE,YAAM,WAAW,gBAAgB,IAAI;AACrC,YAAM,iBAAiB,mBAAmB,KAAK,QAAQ;AACvD,UAAI,CAAC,eAAe,GAAI,OAAM,IAAI,eAAe,oBAAoB,GAAG,eAAe,KAAK,KAAK,eAAe,KAAK,EAAE;AACvH,YAAM,WAAW,eAAe;AAChC,UAAI,CAAC,OAAO,cAAc,SAAS,SAAS,IAAI,GAAG;AACjD,cAAM,IAAI,eAAe,oBAAoB,kCAAkC,OAAO,cAAc,KAAK,IAAI,CAAC,EAAE;AAAA,MAClH;AACA,YAAM,cAA8B,CAAC;AACrC,UAAI,KAAK,WAAW,QAAW;AAC7B,YAAI,CAAC,MAAM,QAAQ,KAAK,MAAM,EAAG,OAAM,IAAI,eAAe,kBAAkB,uCAAuC;AACnH,iBAAS,QAAQ,GAAG,QAAQ,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC1D,gBAAM,SAAS,qBAAqB,KAAK,OAAO,KAAK,GAAG,UAAU,KAAK,GAAG;AAC1E,cAAI,CAAC,OAAO,GAAI,OAAM,IAAI,eAAe,kBAAkB,GAAG,OAAO,KAAK,KAAK,OAAO,KAAK,EAAE;AAC7F,sBAAY,KAAK,EAAE,GAAG,OAAO,OAAO,QAAQ,QAAQ,CAAC;AAAA,QACvD;AAAA,MACF;AAEA,YAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,UAAU,GAAG;AAC/D,YAAM,WAAW,6BAA6B,MAAM,UAAU;AAC9D,UAAI,SAAS,SAAS,GAAG;AACvB,cAAM,IAAI;AAAA,UACR;AAAA,UACA,kBAAkB,SAAS,MAAM,sCAAsC,SAAS,IAAI,CAAC,UAAU,MAAM,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,UACnH;AAAA,QACF;AAAA,MACF;AAMA,YAAM,SAAyB,CAAC,GAAG,WAAW;AAC9C,YAAM,SAAS,MAAM,2BAA2B,QAAQ,MAAM,UAAU,GAAG;AAC3E,UAAI,QAAQ;AACV,cAAM,SAAS,OAAO,WAAW,OAAO,OAAO;AAC/C,eAAO,QAAQ;AAAA,UACb,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,QAAQ,OAAO,OAAO,WAAW;AAAA,UACjC,QACE,OAAO,OAAO,WAAW,IACrB,GAAG,OAAO,QAAQ,IAAI,MAAM,2DAA2D,OAAO,YAAY,8BAC1G,2BAA2B,OAAO,OAAO,KAAK,IAAI,CAAC;AAAA,UACzD,QAAQ;AAAA,QACV,CAAC;AACD,YAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,gBAAM,OAAO,MAAM,QAAQ,aAAa,MAAM,IAAI,MAAM,GAAG,iBAAiB;AAC5E,gBAAM,IAAI;AAAA,YACR;AAAA,YACA,kBAAkB,OAAO,OAAO,MAAM,iBAAiB,OAAO,OAAO,WAAW,IAAI,aAAa,WAAW,kDAAkD,OAAO,OAAO,KAAK,IAAI,CAAC;AAAA,UACxL;AAAA,QACF;AAAA,MACF;AAMA,UAAI,OAAO,iBAAiB;AAC1B,cAAM,UAAU,OAAO,gBAAgB,QAAQ;AAC/C,cAAM,UAAU,IAAI,IAAI,MAAM,SAAS,IAAI,CAAC,UAAU,MAAM,MAAM,CAAC;AACnE,cAAM,UAAU,QAAQ,OAAO,CAAC,WAAW,CAAC,QAAQ,IAAI,MAAM,CAAC;AAC/D,cAAM,WAAyB;AAAA,UAC7B,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,QAAQ,QAAQ,WAAW;AAAA,UAC3B,QACE,QAAQ,WAAW,IACf,GAAG,QAAQ,MAAM,IAAI,QAAQ,MAAM,gCACnC,yBAAyB,QAAQ,KAAK,IAAI,CAAC;AAAA,UACjD,QAAQ;AAAA,QACV;AACA,eAAO,QAAQ,QAAQ;AACvB,YAAI,QAAQ,SAAS,GAAG;AACtB,gBAAM,OAAO,MAAM,QAAQ,aAAa,MAAM,IAAI,MAAM,GAAG,iBAAiB;AAC5E,gBAAM,IAAI;AAAA,YACR;AAAA,YACA,kDAAkD,QAAQ,KAAK,IAAI,CAAC;AAAA,UACtE;AAAA,QACF;AAAA,MACF;AAEA,YAAM,aAAa,gBAAgB,OAAO,WAAW,GAAG,GAAG,OAAO,GAAG;AACrE,YAAM,SAAS,MAAM;AAAA,QACnB,MAAM,QAAQ,OAAO,MAAM,IAAI,EAAE,UAAU,QAAQ,WAAW,CAAC;AAAA,QAC/D;AAAA,MACF;AACA,YAAM,OAAO,UAAU,QAAQ,GAAG;AAClC,aAAO;AAAA,QACL,eAAe,OAAO;AAAA,QACtB,SAAS,OAAO;AAAA,QAChB,QAAQ,OAAO;AAAA,QACf,QAAQ,OAAO,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,MAAM,QAAQ,MAAM,QAAQ,QAAQ,MAAM,OAAO,EAAE;AAAA,MACzG;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO,CAAC,gBAAgB,eAAe,iBAAiB;AAC1D;;;ACxdO,SAAS,+BAA+B,MAAuD;AACpG,QAAM,KAAK,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,KAAK,IAAI,KAAK,GAAG,KAAK,IAAI;AAC5E,MAAI,CAAC,GAAI,QAAO,EAAE,IAAI,OAAO,OAAO,0BAA0B;AAC9D,QAAM,UAAU,KAAK;AACrB,MAAI,YAAY,aAAa,YAAY,mBAAmB;AAC1D,WAAO,EAAE,IAAI,OAAO,OAAO,uDAAuD;AAAA,EACpF;AACA,QAAM,OAAO,KAAK,SAAS,SAAY,SAAY,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,KAAK,IAAI;AACtG,MAAI,SAAS,KAAM,QAAO,EAAE,IAAI,OAAO,OAAO,kCAAkC;AAChF,MAAI,YAAY,mBAAmB;AACjC,QAAI,CAAC,KAAM,QAAO,EAAE,IAAI,OAAO,OAAO,uFAAkF;AACxH,WAAO,EAAE,IAAI,MAAM,IAAI,SAAS,KAAK;AAAA,EACvC;AACA,SAAO,OAAO,EAAE,IAAI,MAAM,IAAI,SAAS,KAAK,IAAI,EAAE,IAAI,MAAM,IAAI,QAAQ;AAC1E;AAsDO,SAAS,wBAAwB,SAAsD;AAC5F,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,UAA8B,yBAAyB;AAAA,IAC3D,OAAO,QAAQ;AAAA,IACf,GAAI,QAAQ,MAAM,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC;AAAA,EAC5C,CAAC;AAED,iBAAe,KAAK,SAAqC;AACvD,UAAM,OAAO,MAAM,QAAQ,UAAU,EAAE,SAAS,QAAQ,OAAO,CAAC;AAChE,QAAI,CAAC,KAAK,GAAI,QAAO,KAAK;AAC1B,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,cAAc,IAAI,aAAa,IAAI,QAAQ;AACjD,UAAM,WAAW,cACb,YAAY,MAAM,GAAG,EAAE,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAAE,OAAO,OAAO,IAClE;AACJ,UAAM,eAAe,MAAM,QAAQ,MAAM;AAAA,MACvC,KAAK;AAAA,MACL,WAAW,EAAE,QAAQ,SAA0C,IAAI;AAAA,IACrE;AACA,WAAO,SAAS,KAAK,EAAE,aAAa,CAAC;AAAA,EACvC;AAEA,iBAAe,OAAO,SAAkB,IAA+B;AACrE,UAAM,OAAO,MAAM,QAAQ,UAAU,EAAE,SAAS,QAAQ,SAAS,CAAC;AAClE,QAAI,CAAC,KAAK,GAAI,QAAO,KAAK;AAC1B,UAAM,SAAS,MAAM,QAAQ,MAAM,KAAK,EAAE;AAC1C,QAAI,CAAC,UAAU,OAAO,gBAAgB,KAAK,aAAa;AACtD,aAAO,SAAS,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AACA,WAAO,SAAS,KAAK,EAAE,aAAa,OAAO,CAAC;AAAA,EAC9C;AAEA,iBAAe,QAAQ,SAAqC;AAC1D,UAAM,OAAQ,MAAM,QAAQ,KAAK,EAAE,MAAM,MAAM,IAAI;AACnD,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG;AAC5D,aAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtE;AACA,UAAM,aAAa,+BAA+B,IAAI;AACtD,QAAI,CAAC,WAAW,GAAI,QAAO,SAAS,KAAK,EAAE,OAAO,WAAW,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,UAAM,OAAO,MAAM,QAAQ,UAAU,EAAE,SAAS,QAAQ,WAAW,KAAK,CAAC;AACzE,QAAI,CAAC,KAAK,GAAI,QAAO,KAAK;AAE1B,UAAM,WAAW,MAAM,QAAQ,MAAM,KAAK,WAAW,EAAE;AACvD,QAAI,CAAC,YAAY,SAAS,gBAAgB,KAAK,aAAa;AAC1D,aAAO,SAAS,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAEA,UAAM,UAAU,MAAM,QAAQ,aAAa,WAAW,IAAI;AAAA,MACxD,SAAS,WAAW;AAAA,MACpB,YAAY,KAAK;AAAA,MACjB,GAAI,WAAW,SAAS,SAAY,CAAC,IAAI,EAAE,MAAM,WAAW,KAAK;AAAA,IACnE,CAAC;AACD,QAAI,CAAC,QAAQ,WAAW;AAGtB,aAAO,SAAS,KAAK,EAAE,MAAM,oBAAoB,OAAO,QAAQ,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1F;AACA,UAAM,SAAS,QAAQ;AAIvB,QAAI;AACF,YAAM,QAAQ,oBAAoB,2BAA2B,MAAM,GAAG,MAAM;AAAA,IAC9E,SAAS,OAAO;AACd,aAAO,MAAM,4CAA4C,KAAK;AAAA,IAChE;AACA,QAAI;AACF,YAAM,QAAQ,YAAY;AAAA,QACxB;AAAA,QACA,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,SAAS,SAAY,CAAC,IAAI,EAAE,MAAM,WAAW,KAAK;AAAA,QACjE,YAAY,KAAK;AAAA,MACnB,CAAC;AAAA,IACH,SAAS,OAAO;AACd,aAAO,MAAM,oCAAoC,KAAK;AAAA,IACxD;AACA,QAAI,WAAW,YAAY,WAAW;AACpC,UAAI;AACF,cAAM,QAAQ,WAAW,MAAM;AAAA,MACjC,SAAS,OAAO;AACd,eAAO,MAAM,mCAAmC,KAAK;AAAA,MACvD;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,EAAE,IAAI,MAAM,aAAa,OAAO,CAAC;AAAA,EACxD;AAEA,SAAO,EAAE,MAAM,QAAQ,QAAQ;AACjC;","names":["record","entry"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-app",
-  "version": "0.44.1",
+  "version": "0.44.3",
   "packageManager": "pnpm@10.33.4",
   "description": "Application-shell framework for Tangle agent products: a bounded tool loop, the structured agent→app tool side channel, integration-hub client, per-workspace billing, and crypto — composed over the Tangle agent substrate through typed seams.",
   "keywords": [

package/dist/chunk-KFTRTOT2.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/model-resolution/failover.ts"],"sourcesContent":["/**\n * Model failover — the answer to \"one upstream hit a quota wall and the customer\n * got a Bad Gateway even though the router had abundant healthy capacity\".\n *\n * This is deliberately NOT a health probe. Probing before every turn buys a\n * round-trip of latency on the happy path and still races the outage (a model\n * healthy at probe time can 502 a second later). Failover is REACTIVE: run the\n * preferred model, and on an upstream-outage signal move to the next model in\n * the chain. Zero added latency when the preferred model works.\n *\n * Two facts drive the design, both measured against a live box during the\n * 2026-07-25 Anthropic/DeepSeek outage:\n *\n * 1. An outage is NOT always a thrown error. The sandbox resolves with a\n *    payload — `{ success: false, errorCode: 'provider_inference_unavailable' }`\n *    — so a classifier that only inspects `catch` misses the customer-visible\n *    case entirely. `isUpstreamUnavailable` inspects resolved values too.\n * 2. Catalog membership is NOT liveness. The router's `/v1/models` still listed\n *    every dead model during the outage, so `validateChatModelId` admitted\n *    `claude-sonnet-4-6` while every call to it returned 502. Nothing upstream\n *    of the actual call can be trusted to tell you a model is serving.\n *\n * Substrate-free: the caller injects `run`, so this composes with a sandbox\n * turn, a router chat completion, or a test fake without importing any of them.\n */\n\n/**\n * Error codes that mean \"this model's upstream is unavailable — a different\n * model may still work\". Deliberately excludes codes that would fail identically\n * on every model (bad request, auth, content filter): retrying those down a\n * chain burns latency and money to reach the same failure.\n */\nexport const UPSTREAM_UNAVAILABLE_CODES: readonly string[] = [\n  'provider_inference_unavailable',\n  'upstream_unavailable',\n  'insufficient_quota',\n  'model_not_available',\n  'server_error',\n  'bad_gateway',\n  'service_unavailable',\n]\n\n/** HTTP statuses that indicate an upstream capacity/availability problem. */\nexport const UPSTREAM_UNAVAILABLE_STATUSES: readonly number[] = [429, 500, 502, 503, 504]\n\n/**\n * Message fragments emitted by real upstreams during this class of outage.\n * Matched case-insensitively as a last resort, after code and status.\n */\nconst UPSTREAM_UNAVAILABLE_MESSAGES: readonly string[] = [\n  'bad gateway',\n  'service unavailable',\n  'inference temporarily unavailable',\n  'provider inference is unavailable',\n  'insufficient balance',\n  'usage limits',\n  'quota exceeded',\n  'rate limit',\n  'overloaded',\n  'temporarily unavailable',\n]\n\nfunction readString(source: Record<string, unknown>, key: string): string | undefined {\n  const value = source[key]\n  return typeof value === 'string' && value.trim().length > 0 ? value : undefined\n}\n\n/**\n * True when `signal` — a thrown error OR a resolved result payload — indicates\n * the model's upstream is unavailable and another model is worth trying.\n *\n * Checked in order of decreasing confidence: explicit code, HTTP status, then\n * message text. A resolved payload only counts as a failure when it carries an\n * explicit failure marker (`success: false`, or an `error`/`errorCode` field) —\n * a successful result is never misread as an outage.\n */\nexport function isUpstreamUnavailable(signal: unknown): boolean {\n  if (signal === null || typeof signal !== 'object') return false\n  const record = signal as Record<string, unknown>\n\n  // A resolved payload that explicitly reports success is never an outage.\n  if (record.success === true) return false\n\n  const nested = record.error\n  const nestedRecord = nested !== null && typeof nested === 'object' ? (nested as Record<string, unknown>) : undefined\n\n  const code =\n    readString(record, 'errorCode') ??\n    readString(record, 'code') ??\n    (nestedRecord ? (readString(nestedRecord, 'code') ?? readString(nestedRecord, 'type')) : undefined)\n  if (code && UPSTREAM_UNAVAILABLE_CODES.includes(code)) return true\n\n  for (const key of ['status', 'statusCode', 'httpStatus']) {\n    const value = record[key]\n    if (typeof value === 'number' && UPSTREAM_UNAVAILABLE_STATUSES.includes(value)) return true\n  }\n\n  const message =\n    readString(record, 'message') ??\n    readString(record, 'error') ??\n    (nestedRecord ? readString(nestedRecord, 'message') : undefined)\n  if (!message) return false\n  const lowered = message.toLowerCase()\n  return UPSTREAM_UNAVAILABLE_MESSAGES.some((fragment) => lowered.includes(fragment))\n}\n\n/** One model tried, and how it went. */\nexport interface ModelFailoverAttempt {\n  model: string\n  ok: boolean\n  /** Why this model was abandoned. Absent when `ok`. */\n  reason?: string\n}\n\n/** The outcome of a failover run: the value plus the full attempt trail. */\nexport interface ModelFailoverResult<T> {\n  value: T\n  /** The model that actually produced `value`. */\n  model: string\n  attempts: ModelFailoverAttempt[]\n  /** True when the preferred (first) model did not serve the request. */\n  usedFallback: boolean\n}\n\n/** Every model in the chain failed; carries the trail for logging. */\nexport class ModelFailoverExhaustedError extends Error {\n  readonly attempts: ModelFailoverAttempt[]\n  constructor(attempts: ModelFailoverAttempt[]) {\n    const trail = attempts.map((a) => `${a.model}: ${a.reason ?? 'failed'}`).join(' | ')\n    super(`All ${attempts.length} model(s) failed. ${trail}`)\n    this.name = 'ModelFailoverExhaustedError'\n    this.attempts = attempts\n  }\n}\n\n/** Inputs to {@link runWithModelFailover}. */\nexport interface RunWithModelFailoverInput<T> {\n  /** Preferred model first, then fallbacks in descending preference. */\n  models: readonly string[]\n  /** Executes one turn with the given model. */\n  run: (model: string) => Promise<T>\n  /**\n   * Classifies a resolved result as an upstream outage. Defaults to\n   * {@link isUpstreamUnavailable}, which understands the sandbox's\n   * `{ success: false, errorCode }` payload.\n   */\n  isUnavailableResult?: (result: T) => boolean\n  /** Classifies a thrown error. Defaults to {@link isUpstreamUnavailable}. */\n  isUnavailableError?: (error: unknown) => boolean\n  /** Observability hook fired each time a model is abandoned. */\n  onFallback?: (attempt: ModelFailoverAttempt, nextModel: string) => void\n}\n\nfunction describe(signal: unknown): string {\n  if (signal instanceof Error) return signal.message\n  if (signal !== null && typeof signal === 'object') {\n    const record = signal as Record<string, unknown>\n    const message = readString(record, 'error') ?? readString(record, 'message') ?? readString(record, 'errorCode')\n    if (message) return message\n  }\n  return String(signal)\n}\n\n/**\n * Run `run` against the first model in `models` that does not report an upstream\n * outage, falling through the chain in order.\n *\n * A non-outage failure (bad request, auth, content filter) is re-thrown\n * immediately rather than retried down the chain — those fail identically on\n * every model, so walking the chain would only multiply latency and spend.\n *\n * @throws ModelFailoverExhaustedError when every model reports an outage.\n */\nexport async function runWithModelFailover<T>(\n  input: RunWithModelFailoverInput<T>,\n): Promise<ModelFailoverResult<T>> {\n  const models = input.models.map((m) => m.trim()).filter((m) => m.length > 0)\n  if (models.length === 0) throw new Error('runWithModelFailover requires at least one model')\n\n  const isUnavailableResult = input.isUnavailableResult ?? ((r: T) => isUpstreamUnavailable(r))\n  const isUnavailableError = input.isUnavailableError ?? isUpstreamUnavailable\n  const attempts: ModelFailoverAttempt[] = []\n\n  for (let index = 0; index < models.length; index += 1) {\n    const model = models[index]!\n    let result: T\n    try {\n      result = await input.run(model)\n    } catch (error) {\n      if (!isUnavailableError(error)) throw error\n      const attempt: ModelFailoverAttempt = { model, ok: false, reason: describe(error) }\n      attempts.push(attempt)\n      const next = models[index + 1]\n      if (next) input.onFallback?.(attempt, next)\n      continue\n    }\n\n    if (isUnavailableResult(result)) {\n      const attempt: ModelFailoverAttempt = { model, ok: false, reason: describe(result) }\n      attempts.push(attempt)\n      const next = models[index + 1]\n      if (next) input.onFallback?.(attempt, next)\n      continue\n    }\n\n    attempts.push({ model, ok: true })\n    return { value: result, model, attempts, usedFallback: index > 0 }\n  }\n\n  throw new ModelFailoverExhaustedError(attempts)\n}\n\n/**\n * Build a failover chain: the preferred model first, then `fallbacks`, with\n * duplicates removed so a model is never retried twice in one turn.\n */\nexport function buildModelChain(preferred: string, fallbacks: readonly string[]): string[] {\n  const chain: string[] = []\n  for (const model of [preferred, ...fallbacks]) {\n    const cleaned = typeof model === 'string' ? model.trim() : ''\n    if (cleaned.length > 0 && !chain.includes(cleaned)) chain.push(cleaned)\n  }\n  return chain\n}\n"],"mappings":";AAgCO,IAAM,6BAAgD;AAAA,EAC3D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,gCAAmD,CAAC,KAAK,KAAK,KAAK,KAAK,GAAG;AAMxF,IAAM,gCAAmD;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,WAAW,QAAiC,KAAiC;AACpF,QAAM,QAAQ,OAAO,GAAG;AACxB,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,QAAQ;AACxE;AAWO,SAAS,sBAAsB,QAA0B;AAC9D,MAAI,WAAW,QAAQ,OAAO,WAAW,SAAU,QAAO;AAC1D,QAAM,SAAS;AAGf,MAAI,OAAO,YAAY,KAAM,QAAO;AAEpC,QAAM,SAAS,OAAO;AACtB,QAAM,eAAe,WAAW,QAAQ,OAAO,WAAW,WAAY,SAAqC;AAE3G,QAAM,OACJ,WAAW,QAAQ,WAAW,KAC9B,WAAW,QAAQ,MAAM,MACxB,eAAgB,WAAW,cAAc,MAAM,KAAK,WAAW,cAAc,MAAM,IAAK;AAC3F,MAAI,QAAQ,2BAA2B,SAAS,IAAI,EAAG,QAAO;AAE9D,aAAW,OAAO,CAAC,UAAU,cAAc,YAAY,GAAG;AACxD,UAAM,QAAQ,OAAO,GAAG;AACxB,QAAI,OAAO,UAAU,YAAY,8BAA8B,SAAS,KAAK,EAAG,QAAO;AAAA,EACzF;AAEA,QAAM,UACJ,WAAW,QAAQ,SAAS,KAC5B,WAAW,QAAQ,OAAO,MACzB,eAAe,WAAW,cAAc,SAAS,IAAI;AACxD,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,UAAU,QAAQ,YAAY;AACpC,SAAO,8BAA8B,KAAK,CAAC,aAAa,QAAQ,SAAS,QAAQ,CAAC;AACpF;AAqBO,IAAM,8BAAN,cAA0C,MAAM;AAAA,EAC5C;AAAA,EACT,YAAY,UAAkC;AAC5C,UAAM,QAAQ,SAAS,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,EAAE,UAAU,QAAQ,EAAE,EAAE,KAAK,KAAK;AACnF,UAAM,OAAO,SAAS,MAAM,qBAAqB,KAAK,EAAE;AACxD,SAAK,OAAO;AACZ,SAAK,WAAW;AAAA,EAClB;AACF;AAoBA,SAAS,SAAS,QAAyB;AACzC,MAAI,kBAAkB,MAAO,QAAO,OAAO;AAC3C,MAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AACjD,UAAM,SAAS;AACf,UAAM,UAAU,WAAW,QAAQ,OAAO,KAAK,WAAW,QAAQ,SAAS,KAAK,WAAW,QAAQ,WAAW;AAC9G,QAAI,QAAS,QAAO;AAAA,EACtB;AACA,SAAO,OAAO,MAAM;AACtB;AAYA,eAAsB,qBACpB,OACiC;AACjC,QAAM,SAAS,MAAM,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAC3E,MAAI,OAAO,WAAW,EAAG,OAAM,IAAI,MAAM,kDAAkD;AAE3F,QAAM,sBAAsB,MAAM,wBAAwB,CAAC,MAAS,sBAAsB,CAAC;AAC3F,QAAM,qBAAqB,MAAM,sBAAsB;AACvD,QAAM,WAAmC,CAAC;AAE1C,WAAS,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACrD,UAAM,QAAQ,OAAO,KAAK;AAC1B,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,MAAM,IAAI,KAAK;AAAA,IAChC,SAAS,OAAO;AACd,UAAI,CAAC,mBAAmB,KAAK,EAAG,OAAM;AACtC,YAAM,UAAgC,EAAE,OAAO,IAAI,OAAO,QAAQ,SAAS,KAAK,EAAE;AAClF,eAAS,KAAK,OAAO;AACrB,YAAM,OAAO,OAAO,QAAQ,CAAC;AAC7B,UAAI,KAAM,OAAM,aAAa,SAAS,IAAI;AAC1C;AAAA,IACF;AAEA,QAAI,oBAAoB,MAAM,GAAG;AAC/B,YAAM,UAAgC,EAAE,OAAO,IAAI,OAAO,QAAQ,SAAS,MAAM,EAAE;AACnF,eAAS,KAAK,OAAO;AACrB,YAAM,OAAO,OAAO,QAAQ,CAAC;AAC7B,UAAI,KAAM,OAAM,aAAa,SAAS,IAAI;AAC1C;AAAA,IACF;AAEA,aAAS,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC;AACjC,WAAO,EAAE,OAAO,QAAQ,OAAO,UAAU,cAAc,QAAQ,EAAE;AAAA,EACnE;AAEA,QAAM,IAAI,4BAA4B,QAAQ;AAChD;AAMO,SAAS,gBAAgB,WAAmB,WAAwC;AACzF,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,CAAC,WAAW,GAAG,SAAS,GAAG;AAC7C,UAAM,UAAU,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AAC3D,QAAI,QAAQ,SAAS,KAAK,CAAC,MAAM,SAAS,OAAO,EAAG,OAAM,KAAK,OAAO;AAAA,EACxE;AACA,SAAO;AACT;","names":[]}