@tangle-network/agent-runtime 0.175.0 → 0.177.0

package/dist/materialization-Ct3I4wu3.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"materialization-Ct3I4wu3.js","names":[],"sources":["../src/runtime/turn-input.ts","../src/runtime/retained-run-binding.ts","../src/runtime/supervise/materialization.ts"],"sourcesContent":["import {\n  AgentExactRunControlRefSchema,\n  type ContextTransferRequest,\n  type InputPart,\n} from '@tangle-network/agent-interface'\nimport type { AgentTurnInput } from '@tangle-network/agent-interface/environment-provider'\nimport type { PromptInputPart, PromptOptions } from '@tangle-network/sandbox'\n\n/**\n * Copy only fields that describe a new provider turn.\n *\n * Session, replay, continuation, and transfer coordinates are runtime-owned\n * and are injected by the caller that owns that lifecycle. Keeping this copy\n * explicit also makes JavaScript callers subject to the same boundary.\n */\nexport function freshTurnInput(\n  input: AgentTurnInput,\n  runtime: {\n    readonly turnId: string\n    readonly detach: true\n    readonly sessionId?: string\n    readonly executionId?: string\n    readonly contextTransfer?: ContextTransferRequest\n  },\n): AgentTurnInput {\n  const fresh: AgentTurnInput = {\n    ...(input.prompt === undefined ? {} : { prompt: input.prompt }),\n    ...(input.parts === undefined ? {} : { parts: input.parts }),\n    ...(input.model === undefined ? {} : { model: input.model }),\n    ...(input.timeoutMs === undefined ? {} : { timeoutMs: input.timeoutMs }),\n    ...(input.context === undefined ? {} : { context: input.context }),\n    ...(input.interactions === undefined ? {} : { interactions: input.interactions }),\n    ...(input.providerOptions === undefined ? {} : { providerOptions: input.providerOptions }),\n    ...(input.signal === undefined ? {} : { signal: input.signal }),\n    turnId: runtime.turnId,\n    detach: runtime.detach,\n    ...(runtime.sessionId === undefined ? {} : { sessionId: runtime.sessionId }),\n    ...(runtime.executionId === undefined ? {} : { executionId: runtime.executionId }),\n    ...(runtime.contextTransfer === undefined ? {} : { contextTransfer: runtime.contextTransfer }),\n  }\n  return fresh\n}\n\n/** Project canonical turn parts onto the Sandbox prompt vocabulary once. */\nexport function promptFromAgentTurnInput(input: AgentTurnInput): string | PromptInputPart[] {\n  if (input.parts !== undefined) return input.parts.map(promptPartFromInputPart)\n  return input.prompt ?? providerMessageText(input.providerOptions) ?? ''\n}\n\n/** Project canonical turn controls onto the Sandbox prompt options once. */\nexport function promptOptionsFromAgentTurnInput(input: AgentTurnInput): PromptOptions {\n  const providerBackend =\n    input.providerOptions?.backend &&\n    typeof input.providerOptions.backend === 'object' &&\n    !Array.isArray(input.providerOptions.backend)\n      ? (input.providerOptions.backend as NonNullable<PromptOptions['backend']>)\n      : undefined\n  const backend = {\n    ...(providerBackend ?? {}),\n    ...(input.interactions === undefined ? {} : { interactions: input.interactions }),\n  }\n  const runControlRef =\n    input.controlRef === undefined\n      ? undefined\n      : AgentExactRunControlRefSchema.parse(input.controlRef)\n  return {\n    ...(input.sessionId === undefined ? {} : { sessionId: input.sessionId }),\n    ...(input.model === undefined ? {} : { model: input.model }),\n    ...(input.timeoutMs === undefined ? {} : { timeoutMs: input.timeoutMs }),\n    ...(input.context === undefined ? {} : { context: input.context }),\n    ...(input.signal === undefined ? {} : { signal: input.signal }),\n    ...(input.executionId === undefined ? {} : { executionId: input.executionId }),\n    ...(input.lastEventId === undefined ? {} : { lastEventId: input.lastEventId }),\n    ...(input.turnId === undefined ? {} : { turnId: input.turnId }),\n    ...(input.detach === undefined ? {} : { detach: input.detach }),\n    ...(runControlRef === undefined ? {} : { runControlRef }),\n    ...(Object.keys(backend).length === 0 ? {} : { backend }),\n  }\n}\n\n/** Read a text fallback from provider-specific conversation options. */\nexport function providerMessageText(\n  providerOptions: Record<string, unknown> | undefined,\n): string | undefined {\n  const messages = providerOptions?.messages\n  if (!Array.isArray(messages)) return undefined\n  for (let index = messages.length - 1; index >= 0; index -= 1) {\n    const message = messages[index]\n    if (!message || typeof message !== 'object' || Array.isArray(message)) continue\n    if (!('role' in message) || message.role !== 'user') continue\n    if (!('content' in message)) continue\n    if (typeof message.content === 'string') return message.content\n  }\n  return undefined\n}\n\nfunction promptPartFromInputPart(part: InputPart): PromptInputPart {\n  if (part.type === 'text' || part.type === 'image') return part\n  if (part.content !== undefined || part.path !== undefined) {\n    throw new Error(\n      'Sandbox file prompt parts require a URL; inline content and local paths are not representable',\n    )\n  }\n  if (!part.filename || !part.url) {\n    throw new Error('Sandbox file prompt parts require both filename and URL')\n  }\n  return {\n    type: 'file',\n    filename: part.filename,\n    ...(part.mediaType === undefined ? {} : { mediaType: part.mediaType }),\n    url: part.url,\n  }\n}\n","import {\n  type AgentExactRunControlRef,\n  AgentExactRunControlRefSchema,\n  type AgentRunCancellationAcknowledgement,\n  AgentRunCancellationAcknowledgementSchema,\n  type AgentRunCancellationRequest,\n  AgentRunCancellationRequestSchema,\n  agentRunCancellationAcknowledgementMatchesRequest,\n  agentRunCancellationRequestDigest,\n  canonicalCandidateDigest,\n  type InteractionResponseCommand,\n  type NativeContextBoundaryProof,\n  type StreamEvent,\n} from '@tangle-network/agent-interface'\nimport type {\n  AgentEnvironment,\n  AgentEnvironmentEvent,\n  AgentSession,\n  AgentSessionStatus,\n  AgentTurnResult,\n} from '@tangle-network/agent-interface/environment-provider'\n\nexport function exactSession(\n  environment: AgentEnvironment,\n  controlRef: AgentExactRunControlRef,\n): { session: AgentSession; controlRef: AgentExactRunControlRef } {\n  if (environment.id !== controlRef.environmentId || environment.provider !== controlRef.provider) {\n    throw new Error('provider reconstructed a different retained environment')\n  }\n  if (!environment.session || !controlRef.sessionId) {\n    throw new Error('retained run control requires a provider session id')\n  }\n  const session = environment.session(controlRef.sessionId, { controlRef })\n  if (session.id !== controlRef.sessionId) {\n    throw new Error('provider reconstructed a different session')\n  }\n  if (session.controlRef === undefined) {\n    throw new Error('provider session did not return its provider-owned run control reference')\n  }\n  const currentControlRef = AgentExactRunControlRefSchema.parse(session.controlRef)\n  if (!sameControlCoordinates(currentControlRef, controlRef)) {\n    throw new Error('provider session reconstructed a different retained session')\n  }\n  if (canonicalCandidateDigest(currentControlRef) !== canonicalCandidateDigest(controlRef)) {\n    throw new Error('provider session did not retain the exact run control reference')\n  }\n  return { session, controlRef: currentControlRef }\n}\n\nexport function sameControlCoordinates(\n  left: AgentExactRunControlRef,\n  right: AgentExactRunControlRef,\n): boolean {\n  return canonicalCandidateDigest(left) === canonicalCandidateDigest(right)\n}\n\nexport function freezeControlRef(controlRef: AgentExactRunControlRef): AgentExactRunControlRef {\n  return Object.freeze({ ...AgentExactRunControlRefSchema.parse(controlRef) })\n}\n\nexport function copyControlRef(controlRef: AgentExactRunControlRef): AgentExactRunControlRef {\n  return { ...controlRef }\n}\n\nexport function exactControlRef(\n  candidate: unknown,\n  expected: { provider: string; environmentId: string; sessionId: string },\n): AgentExactRunControlRef {\n  if (!candidate) throw new Error('provider dispatch returned no durable run control reference')\n  const controlRef = AgentExactRunControlRefSchema.parse(candidate)\n  if (\n    controlRef.provider !== expected.provider ||\n    controlRef.environmentId !== expected.environmentId ||\n    controlRef.sessionId !== expected.sessionId\n  ) {\n    throw new Error('provider dispatch returned control coordinates for another run')\n  }\n  return controlRef\n}\n\nexport function exactContinuedControlRef(\n  candidate: AgentExactRunControlRef,\n  initial: AgentExactRunControlRef,\n): AgentExactRunControlRef {\n  const controlRef = AgentExactRunControlRefSchema.parse(candidate)\n  if (\n    controlRef.provider !== initial.provider ||\n    controlRef.environmentId !== initial.environmentId ||\n    controlRef.sessionId !== initial.sessionId\n  ) {\n    throw new Error('provider continuation advanced to another retained session')\n  }\n  if (controlRef.runId === initial.runId && controlRef.executionId === initial.executionId) {\n    throw new Error('provider continuation did not return a new exact run execution')\n  }\n  return controlRef\n}\n\nexport function assertInteractionBinding(\n  controlRef: AgentExactRunControlRef,\n  command: InteractionResponseCommand,\n): void {\n  // This digest identifies the interaction request, not the retained turn.\n  // The provider validates it against its durable interaction record.\n  if (\n    command.binding.runId !== controlRef.runId ||\n    command.binding.provider !== controlRef.provider ||\n    command.binding.environmentId !== controlRef.environmentId ||\n    command.binding.sessionId !== controlRef.sessionId ||\n    command.binding.executionId !== controlRef.executionId\n  ) {\n    throw new Error('interaction response command does not target this retained run')\n  }\n}\n\nexport function assertBoundaryBinding(\n  controlRef: AgentExactRunControlRef,\n  proof: NativeContextBoundaryProof,\n): void {\n  if (\n    proof.runId !== controlRef.runId ||\n    proof.provider !== controlRef.provider ||\n    proof.environmentId !== controlRef.environmentId ||\n    proof.sessionId !== controlRef.sessionId ||\n    proof.executionId !== controlRef.executionId ||\n    proof.requestDigest !== controlRef.requestDigest\n  ) {\n    throw new Error('native context proof does not identify this retained run')\n  }\n}\n\nexport function assertSequence(value: unknown, label: string): asserts value is number {\n  if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0) {\n    throw new Error(`${label} must be a non-negative safe integer`)\n  }\n}\n\nexport function assertResultBinding(\n  controlRef: AgentExactRunControlRef,\n  result: AgentTurnResult,\n): void {\n  if (result.sessionId !== controlRef.sessionId) {\n    throw new Error('provider returned a result for another retained session')\n  }\n  const metadata = result.metadata\n  if (controlRef.executionId !== undefined && metadata?.executionId !== controlRef.executionId) {\n    throw new Error('provider returned a result for another retained execution')\n  }\n  if (metadata?.runId !== controlRef.runId) {\n    throw new Error('provider returned a result for another retained run')\n  }\n  if (metadata?.requestDigest !== controlRef.requestDigest) {\n    throw new Error('provider returned a result for another retained request')\n  }\n}\n\ninterface ExactCancelOptions {\n  readonly signal?: AbortSignal\n}\n\nexport class RetainedRunProviderContractError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'RetainedRunProviderContractError'\n  }\n}\n\nexport function cancellationRequest(\n  controlRef: AgentExactRunControlRef,\n  operationId: string,\n  reason?: string,\n): AgentRunCancellationRequest {\n  const material = {\n    operationId,\n    run: AgentExactRunControlRefSchema.parse(controlRef),\n    ...(reason === undefined ? {} : { reason }),\n  }\n  return AgentRunCancellationRequestSchema.parse({\n    ...material,\n    requestDigest: agentRunCancellationRequestDigest(material),\n  })\n}\n\nexport async function exactSessionCancel(\n  session: AgentSession,\n  request: AgentRunCancellationRequest,\n  options: ExactCancelOptions,\n): Promise<AgentRunCancellationAcknowledgement> {\n  if (!session.cancelRun) {\n    throw new Error('provider session does not expose durable cancellation operations')\n  }\n  let acknowledgement: unknown\n  try {\n    acknowledgement = await awaitAbortable(\n      Promise.resolve().then(() => session.cancelRun!(request, options)),\n      options.signal,\n    )\n  } catch (error) {\n    if (error instanceof RetainedRunProviderContractError) throw error\n    throw error\n  }\n  let exactAcknowledgement: AgentRunCancellationAcknowledgement\n  try {\n    exactAcknowledgement = AgentRunCancellationAcknowledgementSchema.parse(acknowledgement)\n  } catch {\n    throw new RetainedRunProviderContractError(\n      'provider returned an invalid retained cancellation acknowledgement',\n    )\n  }\n  if (!agentRunCancellationAcknowledgementMatchesRequest(request, exactAcknowledgement)) {\n    throw new RetainedRunProviderContractError(\n      'provider returned a retained cancellation acknowledgement for another request',\n    )\n  }\n  return exactAcknowledgement\n}\n\nexport function hasDurableCancel(session: AgentSession): boolean {\n  return typeof session.cancelRun === 'function'\n}\n\nexport async function awaitAbortable<T>(\n  work: PromiseLike<T>,\n  signal: AbortSignal | undefined,\n): Promise<T> {\n  if (signal === undefined) return await work\n  if (signal.aborted) {\n    void Promise.resolve(work).catch(() => undefined)\n    throw abortError(signal.reason)\n  }\n  return await new Promise<T>((resolve, reject) => {\n    let settled = false\n    const cleanup = () => signal.removeEventListener('abort', onAbort)\n    const onAbort = () => {\n      queueMicrotask(() => {\n        if (settled) return\n        settled = true\n        cleanup()\n        reject(abortError(signal.reason))\n      })\n    }\n    signal.addEventListener('abort', onAbort, { once: true })\n    Promise.resolve(work).then(\n      (value) => {\n        if (settled) return\n        settled = true\n        cleanup()\n        resolve(value)\n      },\n      (error) => {\n        if (settled) return\n        settled = true\n        cleanup()\n        reject(error)\n      },\n    )\n  })\n}\n\nexport async function exactSessionResult(session: AgentSession): Promise<AgentTurnResult> {\n  return session.result()\n}\n\nexport function assertEventBinding(\n  source: AgentEnvironmentEvent,\n  controlRef: AgentExactRunControlRef,\n): void {\n  const transport = isRecord(source) ? source : undefined\n  const payload = isRecord(source.data) ? source.data : undefined\n  const providerEvent = isRecord(source.providerEvent) ? source.providerEvent : undefined\n  const bindings = [\n    { value: transport, checkSessionId: true },\n    {\n      value: payload,\n      // The canonical session.updated payload identifies the harness-native chat.\n      // It is event content, not the retained provider session coordinate.\n      checkSessionId: source.type !== 'session.updated',\n    },\n    { value: providerEvent, checkSessionId: true },\n  ]\n  for (const { value, checkSessionId } of bindings) {\n    if (value === undefined) continue\n    if (value.runId !== undefined && value.runId !== controlRef.runId) {\n      throw new Error('provider returned an event for another retained run')\n    }\n    if (value.executionId !== undefined && value.executionId !== controlRef.executionId) {\n      throw new Error('provider returned an event for another retained execution')\n    }\n    if (\n      checkSessionId &&\n      value.sessionId !== undefined &&\n      value.sessionId !== controlRef.sessionId\n    ) {\n      throw new Error('provider returned an event for another retained session')\n    }\n  }\n}\n\n/** Validate the nested coordinates carried by a canonical interaction request. */\nexport function assertCanonicalEventBinding(\n  controlRef: AgentExactRunControlRef,\n  event: StreamEvent,\n): void {\n  if (event.type !== 'interaction') return\n  const binding = event.request.binding\n  if (\n    binding.runId !== controlRef.runId ||\n    binding.provider !== controlRef.provider ||\n    binding.environmentId !== controlRef.environmentId ||\n    binding.sessionId !== controlRef.sessionId ||\n    binding.executionId !== controlRef.executionId ||\n    binding.interactionId !== event.request.id\n  ) {\n    throw new Error('provider returned an interaction for another retained execution')\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\nexport function assertStableText(value: string, label: string): void {\n  if (value.length === 0 || value.trim() !== value) {\n    throw new Error(`${label} must be non-empty and have no outer whitespace`)\n  }\n}\n\nexport function abortError(reason: unknown): Error {\n  const error = new Error(\n    reason instanceof Error ? reason.message : reason === undefined ? 'aborted' : String(reason),\n  )\n  error.name = 'AbortError'\n  return error\n}\n\nexport function assertWaitDuration(value: number, label: string): void {\n  if (!Number.isSafeInteger(value) || value < 0) {\n    throw new Error(`${label} must be a non-negative safe integer`)\n  }\n}\n\n/**\n * Whether a session can still change state.\n *\n * Exhaustive over `AgentSessionStatus` by construction: the map below is `satisfies\n * Record<AgentSessionStatus, boolean>`, so a member added upstream fails to compile here instead of\n * being silently classified as non-terminal. Written as a boolean chain, `stopped` was missing —\n * and a `status({ waitMs })` call on an already-stopped session then polled every 25 ms for the\n * whole wait before returning the answer it already had at the first snapshot.\n *\n * `unknown` is deliberately NOT terminal: it says the provider could not tell us, which is the one\n * state where continuing to poll is the point. That differs from\n * `sandboxSessionStatusFromAgentSessionStatus`, which projects `unknown` to `failed` because a run\n * RESULT must never claim success without proof — a different question about the same word.\n */\nconst sessionStatusIsTerminal = {\n  pending: false,\n  provisioning: false,\n  running: false,\n  unknown: false,\n  stopped: true,\n  completed: true,\n  cancelled: true,\n  failed: true,\n  expired: true,\n} satisfies Record<AgentSessionStatus, boolean>\n\nexport function isTerminalSessionStatus(status: AgentSessionStatus | null): boolean {\n  return status !== null && sessionStatusIsTerminal[status]\n}\n\nexport function delay(ms: number, signal?: AbortSignal): Promise<void> {\n  if (signal?.aborted) return Promise.reject(abortError(signal.reason))\n  return new Promise((resolveDelay, rejectDelay) => {\n    const timer = setTimeout(finish, ms)\n    function finish() {\n      signal?.removeEventListener('abort', onAbort)\n      resolveDelay()\n    }\n    function onAbort() {\n      clearTimeout(timer)\n      signal?.removeEventListener('abort', onAbort)\n      rejectDelay(abortError(signal?.reason))\n    }\n    signal?.addEventListener('abort', onAbort, { once: true })\n  })\n}\n","import { randomUUID } from 'node:crypto'\nimport {\n  agentProfileSchema,\n  canonicalAgentProfileDigest,\n  canonicalCandidateDigest,\n  type Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport { ValidationError } from '../../errors'\nimport { detachedSnapshot } from './snapshot'\nimport type {\n  ExecutionBindingReceipt,\n  Executor,\n  ExecutorExecutionBinding,\n  ExecutorMaterialization,\n  ProfileMaterializationReceipt,\n  ProviderModelAttemptEvidence,\n  ProviderModelExecutionEvidence,\n  Runtime,\n  UnknownMaterializationReason,\n} from './types'\n\ntype RuntimeOwnedExecutorMaterialization =\n  | {\n      readonly kind: 'known'\n      readonly declaration: ExecutorMaterialization\n      readonly binding?: ExecutorExecutionBinding\n    }\n  | {\n      /** A Runtime-owned external executor whose exact launch is known, but whose remote\n       * materializer has not yet returned its terminal acknowledgement. This private state lets\n       * Runtime validate the planned authority before execution without presenting it as proof\n       * that the remote process actually used that plan. */\n      readonly kind: 'pending'\n      readonly runtime: Runtime\n      readonly declaration: ExecutorMaterialization\n      readonly binding: ExecutorExecutionBinding\n    }\n  | { readonly kind: 'deferred'; readonly runtime: Runtime }\n\ninterface RuntimeOwnedExecutorMaterializationRef {\n  current: RuntimeOwnedExecutorMaterialization\n}\n\nconst runtimeOwnedExecutorMaterializations = new WeakMap<\n  object,\n  RuntimeOwnedExecutorMaterializationRef\n>()\nconst runtimeOwnedScopeOwners = new WeakMap<object, Runtime>()\nconst runtimeOwnedExecutorProviderEvidenceState = new WeakMap<\n  object,\n  {\n    readonly attempts: Array<{\n      readonly observations: string[]\n      identityConflict?: boolean\n      providerDispatch?: 'not_started'\n    }>\n  }\n>()\nconst runtimeOwnedDriveHarnessProviderEvidenceState = new WeakMap<\n  object,\n  ProviderModelExecutionEvidence\n>()\n\ninterface KnownReceiptInput {\n  readonly authoredProfileDigest: Sha256Digest\n  readonly runtime: Runtime\n  readonly declaration: ExecutorMaterialization\n}\n\ninterface UnknownReceiptInput {\n  readonly authoredProfileDigest?: Sha256Digest\n  readonly runtime: Runtime\n  readonly reason: UnknownMaterializationReason\n}\n\nconst declarationKeys = new Set([\n  'effectiveProfile',\n  'backend',\n  'model',\n  'execution',\n  'materializer',\n  'plan',\n  'platformAttachments',\n])\n\n/**\n * Bind a declaration to a runtime-owned executor without putting an attestable method on the\n * public Executor interface. This module is not a package export: arbitrary caller executors stay\n * unknown even if they add a lookalike `materialization()` property.\n */\nexport function attestRuntimeOwnedExecutor<Out>(\n  executor: Executor<Out>,\n  declaration: ExecutorMaterialization,\n  binding?: ExecutorExecutionBinding,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({\n      kind: 'known',\n      declaration: detachedSnapshot(declaration, 'runtime-owned executor materialization'),\n      ...(binding === undefined\n        ? {}\n        : {\n            binding: detachedSnapshot(binding, 'runtime-owned executor execution binding'),\n          }),\n    }),\n  })\n  ensureProviderEvidenceState(executor)\n  return executor\n}\n\n/** Brand an external Runtime executor whose exact remote materialization is provable only after\n * its terminal protocol acknowledgement. The declaration is a planned authority check, never a\n * known receipt; callers must finalize this same object after validating the acknowledgement. */\nexport function attestRuntimeOwnedPendingExecutor<Out>(\n  executor: Executor<Out>,\n  runtime: Runtime,\n  declaration: ExecutorMaterialization,\n  binding: ExecutorExecutionBinding,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({\n      kind: 'pending',\n      runtime,\n      declaration: detachedSnapshot(declaration, 'pending executor materialization'),\n      binding: detachedSnapshot(binding, 'pending executor execution binding'),\n    }),\n  })\n  return executor\n}\n\n/** Replace a private pending brand with terminally acknowledged evidence. A caller-owned executor\n * cannot enter this path because only this module can create the pending WeakMap entry. */\nexport function finalizeRuntimeOwnedPendingExecutor<Out>(\n  executor: Executor<Out>,\n  declaration: ExecutorMaterialization,\n  binding: ExecutorExecutionBinding,\n): Executor<Out> {\n  const ref = runtimeOwnedExecutorMaterializations.get(executor as object)\n  if (ref?.current.kind !== 'pending' || ref.current.runtime !== executor.runtime) {\n    throw new ValidationError(\n      'executor materialization: terminal acknowledgement has no matching Runtime-owned pending executor',\n    )\n  }\n  ref.current = Object.freeze({\n    kind: 'known',\n    declaration: detachedSnapshot(declaration, 'runtime-owned executor materialization'),\n    binding: detachedSnapshot(binding, 'runtime-owned executor execution binding'),\n  })\n  return executor\n}\n\n/** Mark a runtime-owned orchestration executor whose exact leaf declaration is published through\n * its private nested Scope before the first backend inference. Arbitrary executors cannot opt in. */\nexport function attestRuntimeOwnedDeferredExecutor<Out>(\n  executor: Executor<Out>,\n  runtime: Runtime,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({ kind: 'deferred', runtime }),\n  })\n  return executor\n}\n\n/** Preserve the runtime-owned attestation when a trusted wrapper changes result semantics only. */\nexport function inheritRuntimeOwnedExecutorAttestation<In, Out>(\n  source: Executor<In>,\n  wrapper: Executor<Out>,\n): Executor<Out> {\n  const ref = runtimeOwnedExecutorMaterializations.get(source as object)\n  if (ref !== undefined) {\n    runtimeOwnedExecutorMaterializations.set(wrapper as object, ref)\n  }\n  const providerState = ensureProviderEvidenceState(source)\n  runtimeOwnedExecutorProviderEvidenceState.set(wrapper as object, providerState)\n  return wrapper\n}\n\nfunction ensureProviderEvidenceState<Out>(executor: Executor<Out>): {\n  readonly attempts: Array<{\n    readonly observations: string[]\n    identityConflict?: boolean\n    providerDispatch?: 'not_started'\n  }>\n} {\n  const existing = runtimeOwnedExecutorProviderEvidenceState.get(executor as object)\n  if (existing !== undefined) return existing\n  const state = { attempts: [] }\n  runtimeOwnedExecutorProviderEvidenceState.set(executor as object, state)\n  return state\n}\n\n/** Read a declaration only when Runtime itself branded this exact executor object. */\nexport function runtimeOwnedExecutorMaterialization<Out>(\n  executor: Executor<Out>,\n): ExecutorMaterialization | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'known' ? attestation.declaration : undefined\n}\n\n/** Read one attempt binding only from the private brand on this exact executor object. */\nexport function runtimeOwnedExecutorExecutionBinding<Out>(\n  executor: Executor<Out>,\n): ExecutorExecutionBinding | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'known' ? attestation.binding : undefined\n}\n\n/** Read a planned external declaration only for Runtime's private pending brand. This is useful for\n * pre-execution authority checks, but must never be turned into a known durable receipt. */\nexport function runtimeOwnedPendingExecutorMaterialization<Out>(executor: Executor<Out>):\n  | {\n      readonly runtime: Runtime\n      readonly declaration: ExecutorMaterialization\n      readonly binding: ExecutorExecutionBinding\n    }\n  | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'pending'\n    ? {\n        runtime: attestation.runtime,\n        declaration: attestation.declaration,\n        binding: attestation.binding,\n      }\n    : undefined\n}\n\n/** Read the expected leaf runtime only for a privately branded deferred orchestration executor. */\nexport function runtimeOwnedDeferredExecutorRuntime<Out>(\n  executor: Executor<Out>,\n): Runtime | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'deferred' ? attestation.runtime : undefined\n}\n\n/** Propagate trust from a built-in driver adapter to the Agent and recursive executor it owns. */\nexport function attestRuntimeOwnedScopeOwner<T extends object>(owner: T, runtime: Runtime): T {\n  runtimeOwnedScopeOwners.set(owner, runtime)\n  return owner\n}\n\n/** Return a built-in scope owner's expected concrete leaf runtime; caller-owned functions/Agents\n * deliberately have no entry even if they add lookalike fields. */\nexport function runtimeOwnedScopeOwnerRuntime(owner: object): Runtime | undefined {\n  return runtimeOwnedScopeOwners.get(owner)\n}\n\n/** Mark one provider inference attempt on a Runtime-owned executor. */\nexport function recordRuntimeOwnedProviderAttemptStart<Out>(executor: Executor<Out>): void {\n  const state = ensureProviderEvidenceState(executor)\n  state.attempts.push({ observations: [] })\n}\n\n/** Mark the current attempt as rejected before provider dispatch.\n *\n * The caller may use this only after consuming the Router-owned\n * `provider_dispatch: \"not_started\"` fact. Any other error stays an empty,\n * unknown attempt and must not be upgraded here.\n */\nexport function recordRuntimeOwnedProviderDispatchNotStarted<Out>(executor: Executor<Out>): void {\n  const state = ensureProviderEvidenceState(executor)\n  const attempt = state.attempts.at(-1)\n  if (attempt === undefined) {\n    throw new ValidationError('provider dispatch rejection arrived before an attempt started')\n  }\n  if (attempt.observations.length > 0 || attempt.identityConflict === true) {\n    throw new ValidationError(\n      'provider dispatch rejection arrived after provider identity evidence was observed',\n    )\n  }\n  attempt.providerDispatch = 'not_started'\n}\n\n/** Record a trusted served model on the current provider attempt. */\nexport function recordRuntimeOwnedProviderModel<Out>(executor: Executor<Out>, model: string): void {\n  const state = runtimeOwnedExecutorProviderEvidenceState.get(executor as object)\n  const attempt = state?.attempts.at(-1)\n  if (attempt === undefined) {\n    throw new ValidationError('provider model observation arrived before an attempt started')\n  }\n  if (attempt.observations.at(-1) !== model) attempt.observations.push(model)\n}\n\n/** Convert process-local provider observations into a frozen, replayable evidence value. */\nexport function runtimeOwnedExecutorProviderEvidence<Out>(\n  executor: Executor<Out>,\n): ProviderModelExecutionEvidence | undefined {\n  const state = runtimeOwnedExecutorProviderEvidenceState.get(executor as object)\n  if (state === undefined || state.attempts.length === 0) return undefined\n  const attempts: ReadonlyArray<ProviderModelAttemptEvidence> = Object.freeze(\n    state.attempts.map((attempt) =>\n      Object.freeze({\n        observations: Object.freeze([...attempt.observations]),\n        ...(attempt.identityConflict ? { identityConflict: true } : {}),\n        ...(attempt.providerDispatch === 'not_started'\n          ? { providerDispatch: 'not_started' as const }\n          : {}),\n      }),\n    ),\n  )\n  const models = Object.freeze([...new Set(attempts.flatMap((attempt) => attempt.observations))])\n  const missing = attempts.some(\n    (attempt) => attempt.observations.length === 0 && attempt.providerDispatch !== 'not_started',\n  )\n  const conflict = attempts.some((attempt) => attempt.identityConflict === true)\n  const served = attempts.some((attempt) => attempt.observations.length > 0)\n  return Object.freeze(\n    missing || conflict || !served\n      ? {\n          status: 'unknown' as const,\n          attempts,\n          models,\n          reason: conflict\n            ? ('provider-model-conflict' as const)\n            : ('provider-model-missing' as const),\n        }\n      : { status: 'known' as const, attempts, models },\n  )\n}\n\n/** Mark the current provider attempt unusable after conflicting served identity metadata. */\nexport function recordRuntimeOwnedProviderIdentityConflict<Out>(executor: Executor<Out>): void {\n  const state = ensureProviderEvidenceState(executor)\n  const attempt = state.attempts.at(-1)\n  if (attempt === undefined) {\n    throw new ValidationError('provider identity conflict arrived before an attempt started')\n  }\n  attempt.identityConflict = true\n}\n\n/** Attach one executor's provider evidence to a Runtime-owned root drive for final projection. */\nexport function recordRuntimeOwnedDriveHarnessProviderEvidence(\n  owner: object,\n  evidence: ProviderModelExecutionEvidence | undefined,\n): void {\n  if (evidence === undefined) return\n  const prior = runtimeOwnedDriveHarnessProviderEvidenceState.get(owner)\n  if (prior === undefined) {\n    runtimeOwnedDriveHarnessProviderEvidenceState.set(owner, evidence)\n    return\n  }\n  const attempts = Object.freeze([...prior.attempts, ...evidence.attempts])\n  const models = Object.freeze([...new Set([...prior.models, ...evidence.models])])\n  const missing = attempts.some(\n    (attempt) => attempt.observations.length === 0 && attempt.providerDispatch !== 'not_started',\n  )\n  const conflict = attempts.some((attempt) => attempt.identityConflict === true)\n  const served = attempts.some((attempt) => attempt.observations.length > 0)\n  runtimeOwnedDriveHarnessProviderEvidenceState.set(\n    owner,\n    Object.freeze(\n      missing || conflict || !served\n        ? {\n            status: 'unknown' as const,\n            attempts,\n            models,\n            reason: conflict\n              ? ('provider-model-conflict' as const)\n              : ('provider-model-missing' as const),\n          }\n        : { status: 'known' as const, attempts, models },\n    ),\n  )\n}\n\n/** Read provider evidence recorded by a Runtime-owned root drive. */\nexport function runtimeOwnedDriveHarnessProviderEvidence(\n  owner: object,\n): ProviderModelExecutionEvidence | undefined {\n  return runtimeOwnedDriveHarnessProviderEvidenceState.get(owner)\n}\n\n/** Build one kernel-owned known receipt from a data-only executor declaration. */\nexport function knownMaterializationReceipt(\n  input: KnownReceiptInput,\n): ProfileMaterializationReceipt {\n  const declaration = detachedSnapshot(input.declaration, 'executor materialization')\n  assertExactDeclaration(declaration)\n  const effectiveProfile = agentProfileSchema.safeParse(declaration.effectiveProfile)\n  if (!effectiveProfile.success) {\n    throw new ValidationError('executor materialization: effectiveProfile must be an AgentProfile')\n  }\n  assertNonEmpty(declaration.backend, 'backend')\n  assertNonEmpty(declaration.materializer, 'materializer')\n  assertNonEmpty(declaration.execution?.kind, 'execution.kind')\n  assertNonEmpty(declaration.execution?.id, 'execution.id')\n  assertModel(declaration.model)\n\n  let effectiveProfileDigest: Sha256Digest\n  let materializationPlanDigest: Sha256Digest\n  let platformAttachmentsDigest: Sha256Digest | undefined\n  try {\n    effectiveProfileDigest = canonicalAgentProfileDigest(effectiveProfile.data)\n    materializationPlanDigest = canonicalCandidateDigest(jsonWireSnapshot(declaration.plan))\n    platformAttachmentsDigest =\n      declaration.platformAttachments === undefined\n        ? undefined\n        : canonicalCandidateDigest(jsonWireSnapshot(declaration.platformAttachments))\n  } catch (error) {\n    throw new ValidationError(\n      'executor materialization: profile, plan, and attachments must be finite RFC 8785 JSON',\n      { cause: error },\n    )\n  }\n\n  return Object.freeze({\n    status: 'known' as const,\n    authoredProfileDigest: input.authoredProfileDigest,\n    effectiveProfileDigest,\n    materializationPlanDigest,\n    ...(platformAttachmentsDigest === undefined ? {} : { platformAttachmentsDigest }),\n    runtime: input.runtime,\n    backend: declaration.backend,\n    model: declaration.model,\n    execution: declaration.execution,\n    materializer: declaration.materializer,\n  })\n}\n\n/** Build an explicit unknown receipt without fabricating any executor-owned identity. */\nexport function unknownMaterializationReceipt(\n  input: UnknownReceiptInput,\n): ProfileMaterializationReceipt {\n  return Object.freeze({\n    status: 'unknown' as const,\n    ...(input.authoredProfileDigest === undefined\n      ? {}\n      : { authoredProfileDigest: input.authoredProfileDigest }),\n    runtime: input.runtime,\n    reason: input.reason,\n  })\n}\n\n/** Mint a process-unique attempt id before executor construction. */\nexport function newExecutionAttemptId(nodeId: string): string {\n  return `${nodeId}:attempt:${randomUUID()}`\n}\n\n/** Build the immutable safe receipt for a full, transient execution binding. */\nexport function knownExecutionBindingReceipt(\n  materialization: ProfileMaterializationReceipt,\n  bindingInput: ExecutorExecutionBinding,\n): ExecutionBindingReceipt {\n  const binding = detachedSnapshot(bindingInput, 'executor execution binding')\n  assertNonEmpty(binding.attemptId, 'binding.attemptId')\n  assertSafeDescriptor(binding.descriptor)\n  let materializationReceiptDigest: Sha256Digest\n  let bindingDigest: Sha256Digest\n  try {\n    materializationReceiptDigest = canonicalCandidateDigest(materialization)\n    // Bind the exact JSON document a backend receives. Optional AgentProfile fields are represented\n    // as `undefined` in memory but omitted by JSON transport; normalize that one distinction while\n    // rejecting every non-finite/non-data value instead of silently coercing it.\n    bindingDigest = canonicalCandidateDigest(jsonWireSnapshot(binding.binding))\n  } catch (error) {\n    throw new ValidationError('executor binding must be finite RFC 8785 JSON', { cause: error })\n  }\n  return Object.freeze({\n    status: 'known' as const,\n    attemptId: binding.attemptId,\n    materializationReceiptDigest,\n    bindingDigest,\n    descriptor: binding.descriptor,\n  })\n}\n\n/** Preserve an attempt boundary even when its caller-owned transport cannot be attested. */\nexport function unknownExecutionBindingReceipt(\n  materialization: ProfileMaterializationReceipt,\n  attemptId: string,\n  reason: UnknownMaterializationReason,\n): ExecutionBindingReceipt {\n  assertNonEmpty(attemptId, 'binding.attemptId')\n  return Object.freeze({\n    status: 'unknown' as const,\n    attemptId,\n    materializationReceiptDigest: canonicalCandidateDigest(materialization),\n    reason,\n  })\n}\n\n/** Derive an authored-profile digest without turning non-canonical input into a fake identity. */\nexport function authoredProfileDigest(profile: unknown): Sha256Digest | undefined {\n  try {\n    return canonicalAgentProfileDigest(agentProfileSchema.parse(profile))\n  } catch {\n    return undefined\n  }\n}\n\nfunction assertExactDeclaration(value: ExecutorMaterialization): void {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n    throw new ValidationError('executor materialization: declaration must be an object')\n  }\n  const unknown = Object.keys(value).filter((key) => !declarationKeys.has(key))\n  if (unknown.length > 0) {\n    throw new ValidationError(\n      `executor materialization: unknown declaration fields: ${unknown.sort().join(', ')}`,\n    )\n  }\n  if (!Object.hasOwn(value, 'plan')) {\n    throw new ValidationError('executor materialization: plan is required')\n  }\n}\n\nfunction assertModel(model: ExecutorMaterialization['model']): void {\n  if (typeof model !== 'object' || model === null || Array.isArray(model)) {\n    throw new ValidationError('executor materialization: model must be a known/unknown identity')\n  }\n  const keys = Object.keys(model).sort()\n  if (model.status === 'known') {\n    if (keys.join(',') !== 'id,status') {\n      throw new ValidationError('executor materialization: known model accepts only status and id')\n    }\n    assertNonEmpty(model.id, 'model.id')\n    return\n  }\n  if (model.status === 'unknown') {\n    if (keys.join(',') !== 'reason,status') {\n      throw new ValidationError(\n        'executor materialization: unknown model accepts only status and reason',\n      )\n    }\n    assertNonEmpty(model.reason, 'model.reason')\n    return\n  }\n  throw new ValidationError('executor materialization: model.status must be known or unknown')\n}\n\nfunction assertNonEmpty(value: unknown, field: string): asserts value is string {\n  if (typeof value !== 'string' || value.trim().length === 0) {\n    throw new ValidationError(`executor materialization: ${field} must be a non-empty string`)\n  }\n}\n\nfunction assertSafeDescriptor(descriptor: ExecutorExecutionBinding['descriptor']): void {\n  if (typeof descriptor !== 'object' || descriptor === null || Array.isArray(descriptor)) {\n    throw new ValidationError('executor binding: descriptor must be an object')\n  }\n  for (const [key, value] of Object.entries(descriptor)) {\n    if (/(url|uri|token|key|secret|bearer|credential|authorization)/i.test(key)) {\n      throw new ValidationError(`executor binding: unsafe descriptor key ${JSON.stringify(key)}`)\n    }\n    if (\n      value !== null &&\n      typeof value !== 'string' &&\n      typeof value !== 'number' &&\n      typeof value !== 'boolean'\n    ) {\n      throw new ValidationError(\n        `executor binding: descriptor ${JSON.stringify(key)} must be scalar`,\n      )\n    }\n    if (typeof value === 'string' && (value.includes('://') || value.includes('@'))) {\n      throw new ValidationError(\n        `executor binding: descriptor ${JSON.stringify(key)} contains transport or credential text`,\n      )\n    }\n  }\n}\n\nfunction jsonWireSnapshot(value: unknown, path = '$'): unknown {\n  if (value === null || typeof value === 'string' || typeof value === 'boolean') return value\n  if (typeof value === 'number') {\n    if (!Number.isFinite(value)) {\n      throw new ValidationError(`executor binding: ${path} must be finite`)\n    }\n    return value\n  }\n  if (Array.isArray(value)) {\n    return value.map((item, index) => {\n      if (item === undefined) {\n        throw new ValidationError(`executor binding: ${path}[${index}] cannot be undefined`)\n      }\n      return jsonWireSnapshot(item, `${path}[${index}]`)\n    })\n  }\n  if (typeof value !== 'object' || value === null) {\n    throw new ValidationError(`executor binding: ${path} must be JSON data`)\n  }\n  const prototype = Object.getPrototypeOf(value)\n  if (prototype !== Object.prototype && prototype !== null) {\n    throw new ValidationError(`executor binding: ${path} must be a plain object`)\n  }\n  const out: Record<string, unknown> = {}\n  for (const [key, item] of Object.entries(value as Record<string, unknown>)) {\n    if (item === undefined) continue\n    out[key] = jsonWireSnapshot(item, `${path}.${key}`)\n  }\n  return out\n}\n\n/**\n * The provider-identity evidence for ONE attempt, from the served model alone. `unknown` with a\n * `provider-model-missing` reason when the attempt produced no model, because an attempt that\n * cannot name what served it is not evidence that nothing did.\n */\nexport function providerAttemptEvidence(model: string | undefined): ProviderModelExecutionEvidence {\n  const attempts = Object.freeze([\n    Object.freeze({ observations: Object.freeze(model === undefined ? [] : [model]) }),\n  ])\n  const models = Object.freeze(model === undefined ? [] : [model])\n  return Object.freeze(\n    model === undefined\n      ? { status: 'unknown' as const, attempts, models, reason: 'provider-model-missing' as const }\n      : { status: 'known' as const, attempts, models },\n  )\n}\n"],"mappings":";;;;;;;;;;;;AAeA,SAAgB,eACd,OACA,SAOgB;CAgBhB,OAAO;EAdL,GAAI,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;EAC7D,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;EACtE,GAAI,MAAM,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;EAChE,GAAI,MAAM,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa;EAC/E,GAAI,MAAM,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB,MAAM,gBAAgB;EACxF,GAAI,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;EAC7D,QAAQ,QAAQ;EAChB,QAAQ,QAAQ;EAChB,GAAI,QAAQ,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,QAAQ,UAAU;EAC1E,GAAI,QAAQ,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,QAAQ,YAAY;EAChF,GAAI,QAAQ,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB,QAAQ,gBAAgB;CAEnF;AACb;;AAGA,SAAgB,yBAAyB,OAAmD;CAC1F,IAAI,MAAM,UAAU,KAAA,GAAW,OAAO,MAAM,MAAM,IAAI,uBAAuB;CAC7E,OAAO,MAAM,UAAU,oBAAoB,MAAM,eAAe,KAAK;AACvE;;AAGA,SAAgB,gCAAgC,OAAsC;CAOpF,MAAM,UAAU;EACd,IANA,MAAM,iBAAiB,WACvB,OAAO,MAAM,gBAAgB,YAAY,YACzC,CAAC,MAAM,QAAQ,MAAM,gBAAgB,OAAO,IACvC,MAAM,gBAAgB,UACvB,KAAA,MAEmB,CAAC;EACxB,GAAI,MAAM,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa;CACjF;CACA,MAAM,gBACJ,MAAM,eAAe,KAAA,IACjB,KAAA,IACA,8BAA8B,MAAM,MAAM,UAAU;CAC1D,OAAO;EACL,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;EACtE,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC1D,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;EACtE,GAAI,MAAM,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;EAChE,GAAI,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;EAC7D,GAAI,MAAM,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,MAAM,YAAY;EAC5E,GAAI,MAAM,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,MAAM,YAAY;EAC5E,GAAI,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;EAC7D,GAAI,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;EAC7D,GAAI,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc;EACvD,GAAI,OAAO,KAAK,OAAO,CAAC,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,QAAQ;CACzD;AACF;;AAGA,SAAgB,oBACd,iBACoB;CACpB,MAAM,WAAW,iBAAiB;CAClC,IAAI,CAAC,MAAM,QAAQ,QAAQ,GAAG,OAAO,KAAA;CACrC,KAAK,IAAI,QAAQ,SAAS,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;EAC5D,MAAM,UAAU,SAAS;EACzB,IAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAAG;EACvE,IAAI,EAAE,UAAU,YAAY,QAAQ,SAAS,QAAQ;EACrD,IAAI,EAAE,aAAa,UAAU;EAC7B,IAAI,OAAO,QAAQ,YAAY,UAAU,OAAO,QAAQ;CAC1D;AAEF;AAEA,SAAS,wBAAwB,MAAkC;CACjE,IAAI,KAAK,SAAS,UAAU,KAAK,SAAS,SAAS,OAAO;CAC1D,IAAI,KAAK,YAAY,KAAA,KAAa,KAAK,SAAS,KAAA,GAC9C,MAAM,IAAI,MACR,+FACF;CAEF,IAAI,CAAC,KAAK,YAAY,CAAC,KAAK,KAC1B,MAAM,IAAI,MAAM,yDAAyD;CAE3E,OAAO;EACL,MAAM;EACN,UAAU,KAAK;EACf,GAAI,KAAK,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,KAAK,UAAU;EACpE,KAAK,KAAK;CACZ;AACF;;;AC1FA,SAAgB,aACd,aACA,YACgE;CAChE,IAAI,YAAY,OAAO,WAAW,iBAAiB,YAAY,aAAa,WAAW,UACrF,MAAM,IAAI,MAAM,yDAAyD;CAE3E,IAAI,CAAC,YAAY,WAAW,CAAC,WAAW,WACtC,MAAM,IAAI,MAAM,qDAAqD;CAEvE,MAAM,UAAU,YAAY,QAAQ,WAAW,WAAW,EAAE,WAAW,CAAC;CACxE,IAAI,QAAQ,OAAO,WAAW,WAC5B,MAAM,IAAI,MAAM,4CAA4C;CAE9D,IAAI,QAAQ,eAAe,KAAA,GACzB,MAAM,IAAI,MAAM,0EAA0E;CAE5F,MAAM,oBAAoB,8BAA8B,MAAM,QAAQ,UAAU;CAChF,IAAI,CAAC,uBAAuB,mBAAmB,UAAU,GACvD,MAAM,IAAI,MAAM,6DAA6D;CAE/E,IAAI,yBAAyB,iBAAiB,MAAM,yBAAyB,UAAU,GACrF,MAAM,IAAI,MAAM,iEAAiE;CAEnF,OAAO;EAAE;EAAS,YAAY;CAAkB;AAClD;AAEA,SAAgB,uBACd,MACA,OACS;CACT,OAAO,yBAAyB,IAAI,MAAM,yBAAyB,KAAK;AAC1E;AAEA,SAAgB,iBAAiB,YAA8D;CAC7F,OAAO,OAAO,OAAO,EAAE,GAAG,8BAA8B,MAAM,UAAU,EAAE,CAAC;AAC7E;AAEA,SAAgB,eAAe,YAA8D;CAC3F,OAAO,EAAE,GAAG,WAAW;AACzB;AAEA,SAAgB,gBACd,WACA,UACyB;CACzB,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,6DAA6D;CAC7F,MAAM,aAAa,8BAA8B,MAAM,SAAS;CAChE,IACE,WAAW,aAAa,SAAS,YACjC,WAAW,kBAAkB,SAAS,iBACtC,WAAW,cAAc,SAAS,WAElC,MAAM,IAAI,MAAM,gEAAgE;CAElF,OAAO;AACT;AAEA,SAAgB,yBACd,WACA,SACyB;CACzB,MAAM,aAAa,8BAA8B,MAAM,SAAS;CAChE,IACE,WAAW,aAAa,QAAQ,YAChC,WAAW,kBAAkB,QAAQ,iBACrC,WAAW,cAAc,QAAQ,WAEjC,MAAM,IAAI,MAAM,4DAA4D;CAE9E,IAAI,WAAW,UAAU,QAAQ,SAAS,WAAW,gBAAgB,QAAQ,aAC3E,MAAM,IAAI,MAAM,gEAAgE;CAElF,OAAO;AACT;AAEA,SAAgB,yBACd,YACA,SACM;CAGN,IACE,QAAQ,QAAQ,UAAU,WAAW,SACrC,QAAQ,QAAQ,aAAa,WAAW,YACxC,QAAQ,QAAQ,kBAAkB,WAAW,iBAC7C,QAAQ,QAAQ,cAAc,WAAW,aACzC,QAAQ,QAAQ,gBAAgB,WAAW,aAE3C,MAAM,IAAI,MAAM,gEAAgE;AAEpF;AAEA,SAAgB,sBACd,YACA,OACM;CACN,IACE,MAAM,UAAU,WAAW,SAC3B,MAAM,aAAa,WAAW,YAC9B,MAAM,kBAAkB,WAAW,iBACnC,MAAM,cAAc,WAAW,aAC/B,MAAM,gBAAgB,WAAW,eACjC,MAAM,kBAAkB,WAAW,eAEnC,MAAM,IAAI,MAAM,0DAA0D;AAE9E;AAEA,SAAgB,eAAe,OAAgB,OAAwC;CACrF,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GACvE,MAAM,IAAI,MAAM,GAAG,MAAM,qCAAqC;AAElE;AAEA,SAAgB,oBACd,YACA,QACM;CACN,IAAI,OAAO,cAAc,WAAW,WAClC,MAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,WAAW,OAAO;CACxB,IAAI,WAAW,gBAAgB,KAAA,KAAa,UAAU,gBAAgB,WAAW,aAC/E,MAAM,IAAI,MAAM,2DAA2D;CAE7E,IAAI,UAAU,UAAU,WAAW,OACjC,MAAM,IAAI,MAAM,qDAAqD;CAEvE,IAAI,UAAU,kBAAkB,WAAW,eACzC,MAAM,IAAI,MAAM,yDAAyD;AAE7E;AAMA,IAAa,mCAAb,cAAsD,MAAM;CAC1D,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAgB,oBACd,YACA,aACA,QAC6B;CAC7B,MAAM,WAAW;EACf;EACA,KAAK,8BAA8B,MAAM,UAAU;EACnD,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;CAC3C;CACA,OAAO,kCAAkC,MAAM;EAC7C,GAAG;EACH,eAAe,kCAAkC,QAAQ;CAC3D,CAAC;AACH;AAEA,eAAsB,mBACpB,SACA,SACA,SAC8C;CAC9C,IAAI,CAAC,QAAQ,WACX,MAAM,IAAI,MAAM,kEAAkE;CAEpF,IAAI;CACJ,IAAI;EACF,kBAAkB,MAAM,eACtB,QAAQ,QAAQ,CAAC,CAAC,WAAW,QAAQ,UAAW,SAAS,OAAO,CAAC,GACjE,QAAQ,MACV;CACF,SAAS,OAAO;EACd,IAAI,iBAAiB,kCAAkC,MAAM;EAC7D,MAAM;CACR;CACA,IAAI;CACJ,IAAI;EACF,uBAAuB,0CAA0C,MAAM,eAAe;CACxF,QAAQ;EACN,MAAM,IAAI,iCACR,oEACF;CACF;CACA,IAAI,CAAC,kDAAkD,SAAS,oBAAoB,GAClF,MAAM,IAAI,iCACR,+EACF;CAEF,OAAO;AACT;AAEA,SAAgB,iBAAiB,SAAgC;CAC/D,OAAO,OAAO,QAAQ,cAAc;AACtC;AAEA,eAAsB,eACpB,MACA,QACY;CACZ,IAAI,WAAW,KAAA,GAAW,OAAO,MAAM;CACvC,IAAI,OAAO,SAAS;EAClB,QAAa,QAAQ,IAAI,CAAC,CAAC,YAAY,KAAA,CAAS;EAChD,MAAM,WAAW,OAAO,MAAM;CAChC;CACA,OAAO,MAAM,IAAI,SAAY,SAAS,WAAW;EAC/C,IAAI,UAAU;EACd,MAAM,gBAAgB,OAAO,oBAAoB,SAAS,OAAO;EACjE,MAAM,gBAAgB;GACpB,qBAAqB;IACnB,IAAI,SAAS;IACb,UAAU;IACV,QAAQ;IACR,OAAO,WAAW,OAAO,MAAM,CAAC;GAClC,CAAC;EACH;EACA,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;EACxD,QAAQ,QAAQ,IAAI,CAAC,CAAC,MACnB,UAAU;GACT,IAAI,SAAS;GACb,UAAU;GACV,QAAQ;GACR,QAAQ,KAAK;EACf,IACC,UAAU;GACT,IAAI,SAAS;GACb,UAAU;GACV,QAAQ;GACR,OAAO,KAAK;EACd,CACF;CACF,CAAC;AACH;AAEA,eAAsB,mBAAmB,SAAiD;CACxF,OAAO,QAAQ,OAAO;AACxB;AAEA,SAAgB,mBACd,QACA,YACM;CACN,MAAM,YAAY,SAAS,MAAM,IAAI,SAAS,KAAA;CAC9C,MAAM,UAAU,SAAS,OAAO,IAAI,IAAI,OAAO,OAAO,KAAA;CACtD,MAAM,gBAAgB,SAAS,OAAO,aAAa,IAAI,OAAO,gBAAgB,KAAA;CAC9E,MAAM,WAAW;EACf;GAAE,OAAO;GAAW,gBAAgB;EAAK;EACzC;GACE,OAAO;GAGP,gBAAgB,OAAO,SAAS;EAClC;EACA;GAAE,OAAO;GAAe,gBAAgB;EAAK;CAC/C;CACA,KAAK,MAAM,EAAE,OAAO,oBAAoB,UAAU;EAChD,IAAI,UAAU,KAAA,GAAW;EACzB,IAAI,MAAM,UAAU,KAAA,KAAa,MAAM,UAAU,WAAW,OAC1D,MAAM,IAAI,MAAM,qDAAqD;EAEvE,IAAI,MAAM,gBAAgB,KAAA,KAAa,MAAM,gBAAgB,WAAW,aACtE,MAAM,IAAI,MAAM,2DAA2D;EAE7E,IACE,kBACA,MAAM,cAAc,KAAA,KACpB,MAAM,cAAc,WAAW,WAE/B,MAAM,IAAI,MAAM,yDAAyD;CAE7E;AACF;;AAGA,SAAgB,4BACd,YACA,OACM;CACN,IAAI,MAAM,SAAS,eAAe;CAClC,MAAM,UAAU,MAAM,QAAQ;CAC9B,IACE,QAAQ,UAAU,WAAW,SAC7B,QAAQ,aAAa,WAAW,YAChC,QAAQ,kBAAkB,WAAW,iBACrC,QAAQ,cAAc,WAAW,aACjC,QAAQ,gBAAgB,WAAW,eACnC,QAAQ,kBAAkB,MAAM,QAAQ,IAExC,MAAM,IAAI,MAAM,iEAAiE;AAErF;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAgB,iBAAiB,OAAe,OAAqB;CACnE,IAAI,MAAM,WAAW,KAAK,MAAM,KAAK,MAAM,OACzC,MAAM,IAAI,MAAM,GAAG,MAAM,gDAAgD;AAE7E;AAEA,SAAgB,WAAW,QAAwB;CACjD,MAAM,QAAQ,IAAI,MAChB,kBAAkB,QAAQ,OAAO,UAAU,WAAW,KAAA,IAAY,YAAY,OAAO,MAAM,CAC7F;CACA,MAAM,OAAO;CACb,OAAO;AACT;AAEA,SAAgB,mBAAmB,OAAe,OAAqB;CACrE,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAC1C,MAAM,IAAI,MAAM,GAAG,MAAM,qCAAqC;AAElE;;;;;;;;;;;;;;;AAgBA,MAAM,0BAA0B;CAC9B,SAAS;CACT,cAAc;CACd,SAAS;CACT,SAAS;CACT,SAAS;CACT,WAAW;CACX,WAAW;CACX,QAAQ;CACR,SAAS;AACX;AAEA,SAAgB,wBAAwB,QAA4C;CAClF,OAAO,WAAW,QAAQ,wBAAwB;AACpD;AAEA,SAAgB,MAAM,IAAY,QAAqC;CACrE,IAAI,QAAQ,SAAS,OAAO,QAAQ,OAAO,WAAW,OAAO,MAAM,CAAC;CACpE,OAAO,IAAI,SAAS,cAAc,gBAAgB;EAChD,MAAM,QAAQ,WAAW,QAAQ,EAAE;EACnC,SAAS,SAAS;GAChB,QAAQ,oBAAoB,SAAS,OAAO;GAC5C,aAAa;EACf;EACA,SAAS,UAAU;GACjB,aAAa,KAAK;GAClB,QAAQ,oBAAoB,SAAS,OAAO;GAC5C,YAAY,WAAW,QAAQ,MAAM,CAAC;EACxC;EACA,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;CAC3D,CAAC;AACH;;;ACvVA,MAAM,uDAAuC,IAAI,QAG/C;AACF,MAAM,0CAA0B,IAAI,QAAyB;AAC7D,MAAM,4DAA4C,IAAI,QASpD;AACF,MAAM,gEAAgD,IAAI,QAGxD;AAcF,MAAM,kCAAkB,IAAI,IAAI;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;AAOD,SAAgB,2BACd,UACA,aACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EACrB,MAAM;EACN,aAAa,iBAAiB,aAAa,wCAAwC;EACnF,GAAI,YAAY,KAAA,IACZ,CAAC,IACD,EACE,SAAS,iBAAiB,SAAS,0CAA0C,EAC/E;CACN,CAAC,EACH,CAAC;CACD,4BAA4B,QAAQ;CACpC,OAAO;AACT;;;;AAKA,SAAgB,kCACd,UACA,SACA,aACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EACrB,MAAM;EACN;EACA,aAAa,iBAAiB,aAAa,kCAAkC;EAC7E,SAAS,iBAAiB,SAAS,oCAAoC;CACzE,CAAC,EACH,CAAC;CACD,OAAO;AACT;;;AAIA,SAAgB,oCACd,UACA,aACA,SACe;CACf,MAAM,MAAM,qCAAqC,IAAI,QAAkB;CACvE,IAAI,KAAK,QAAQ,SAAS,aAAa,IAAI,QAAQ,YAAY,SAAS,SACtE,MAAM,IAAI,gBACR,mGACF;CAEF,IAAI,UAAU,OAAO,OAAO;EAC1B,MAAM;EACN,aAAa,iBAAiB,aAAa,wCAAwC;EACnF,SAAS,iBAAiB,SAAS,0CAA0C;CAC/E,CAAC;CACD,OAAO;AACT;;;AAIA,SAAgB,mCACd,UACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EAAE,MAAM;EAAY;CAAQ,CAAC,EACtD,CAAC;CACD,OAAO;AACT;;AAGA,SAAgB,uCACd,QACA,SACe;CACf,MAAM,MAAM,qCAAqC,IAAI,MAAgB;CACrE,IAAI,QAAQ,KAAA,GACV,qCAAqC,IAAI,SAAmB,GAAG;CAEjE,MAAM,gBAAgB,4BAA4B,MAAM;CACxD,0CAA0C,IAAI,SAAmB,aAAa;CAC9E,OAAO;AACT;AAEA,SAAS,4BAAiC,UAMxC;CACA,MAAM,WAAW,0CAA0C,IAAI,QAAkB;CACjF,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,MAAM,QAAQ,EAAE,UAAU,CAAC,EAAE;CAC7B,0CAA0C,IAAI,UAAoB,KAAK;CACvE,OAAO;AACT;;AAGA,SAAgB,oCACd,UACqC;CACrC,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,UAAU,YAAY,cAAc,KAAA;AACnE;;AAGA,SAAgB,qCACd,UACsC;CACtC,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,UAAU,YAAY,UAAU,KAAA;AAC/D;;;AAIA,SAAgB,2CAAgD,UAMlD;CACZ,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,YACzB;EACE,SAAS,YAAY;EACrB,aAAa,YAAY;EACzB,SAAS,YAAY;CACvB,IACA,KAAA;AACN;;AAGA,SAAgB,oCACd,UACqB;CACrB,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,aAAa,YAAY,UAAU,KAAA;AAClE;;AAGA,SAAgB,6BAA+C,OAAU,SAAqB;CAC5F,wBAAwB,IAAI,OAAO,OAAO;CAC1C,OAAO;AACT;;;AAIA,SAAgB,8BAA8B,OAAoC;CAChF,OAAO,wBAAwB,IAAI,KAAK;AAC1C;;AAGA,SAAgB,uCAA4C,UAA+B;CAEzF,4BAD0C,QACtC,CAAC,CAAC,SAAS,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;AAC1C;;;;;;;AAQA,SAAgB,6CAAkD,UAA+B;CAE/F,MAAM,UADQ,4BAA4B,QACtB,CAAC,CAAC,SAAS,GAAG,EAAE;CACpC,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,gBAAgB,+DAA+D;CAE3F,IAAI,QAAQ,aAAa,SAAS,KAAK,QAAQ,qBAAqB,MAClE,MAAM,IAAI,gBACR,mFACF;CAEF,QAAQ,mBAAmB;AAC7B;;AAGA,SAAgB,gCAAqC,UAAyB,OAAqB;CAEjG,MAAM,UADQ,0CAA0C,IAAI,QACxC,CAAC,EAAE,SAAS,GAAG,EAAE;CACrC,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,gBAAgB,8DAA8D;CAE1F,IAAI,QAAQ,aAAa,GAAG,EAAE,MAAM,OAAO,QAAQ,aAAa,KAAK,KAAK;AAC5E;;AAGA,SAAgB,qCACd,UAC4C;CAC5C,MAAM,QAAQ,0CAA0C,IAAI,QAAkB;CAC9E,IAAI,UAAU,KAAA,KAAa,MAAM,SAAS,WAAW,GAAG,OAAO,KAAA;CAC/D,MAAM,WAAwD,OAAO,OACnE,MAAM,SAAS,KAAK,YAClB,OAAO,OAAO;EACZ,cAAc,OAAO,OAAO,CAAC,GAAG,QAAQ,YAAY,CAAC;EACrD,GAAI,QAAQ,mBAAmB,EAAE,kBAAkB,KAAK,IAAI,CAAC;EAC7D,GAAI,QAAQ,qBAAqB,gBAC7B,EAAE,kBAAkB,cAAuB,IAC3C,CAAC;CACP,CAAC,CACH,CACF;CACA,MAAM,SAAS,OAAO,OAAO,CAAC,GAAG,IAAI,IAAI,SAAS,SAAS,YAAY,QAAQ,YAAY,CAAC,CAAC,CAAC;CAC9F,MAAM,UAAU,SAAS,MACtB,YAAY,QAAQ,aAAa,WAAW,KAAK,QAAQ,qBAAqB,aACjF;CACA,MAAM,WAAW,SAAS,MAAM,YAAY,QAAQ,qBAAqB,IAAI;CAC7E,MAAM,SAAS,SAAS,MAAM,YAAY,QAAQ,aAAa,SAAS,CAAC;CACzE,OAAO,OAAO,OACZ,WAAW,YAAY,CAAC,SACpB;EACE,QAAQ;EACR;EACA;EACA,QAAQ,WACH,4BACA;CACP,IACA;EAAE,QAAQ;EAAkB;EAAU;CAAO,CACnD;AACF;;AAGA,SAAgB,2CAAgD,UAA+B;CAE7F,MAAM,UADQ,4BAA4B,QACtB,CAAC,CAAC,SAAS,GAAG,EAAE;CACpC,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,gBAAgB,8DAA8D;CAE1F,QAAQ,mBAAmB;AAC7B;;AAGA,SAAgB,+CACd,OACA,UACM;CACN,IAAI,aAAa,KAAA,GAAW;CAC5B,MAAM,QAAQ,8CAA8C,IAAI,KAAK;CACrE,IAAI,UAAU,KAAA,GAAW;EACvB,8CAA8C,IAAI,OAAO,QAAQ;EACjE;CACF;CACA,MAAM,WAAW,OAAO,OAAO,CAAC,GAAG,MAAM,UAAU,GAAG,SAAS,QAAQ,CAAC;CACxE,MAAM,SAAS,OAAO,OAAO,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,MAAM,QAAQ,GAAG,SAAS,MAAM,CAAC,CAAC,CAAC;CAChF,MAAM,UAAU,SAAS,MACtB,YAAY,QAAQ,aAAa,WAAW,KAAK,QAAQ,qBAAqB,aACjF;CACA,MAAM,WAAW,SAAS,MAAM,YAAY,QAAQ,qBAAqB,IAAI;CAC7E,MAAM,SAAS,SAAS,MAAM,YAAY,QAAQ,aAAa,SAAS,CAAC;CACzE,8CAA8C,IAC5C,OACA,OAAO,OACL,WAAW,YAAY,CAAC,SACpB;EACE,QAAQ;EACR;EACA;EACA,QAAQ,WACH,4BACA;CACP,IACA;EAAE,QAAQ;EAAkB;EAAU;CAAO,CACnD,CACF;AACF;;AAGA,SAAgB,yCACd,OAC4C;CAC5C,OAAO,8CAA8C,IAAI,KAAK;AAChE;;AAGA,SAAgB,4BACd,OAC+B;CAC/B,MAAM,cAAc,iBAAiB,MAAM,aAAa,0BAA0B;CAClF,uBAAuB,WAAW;CAClC,MAAM,mBAAmB,mBAAmB,UAAU,YAAY,gBAAgB;CAClF,IAAI,CAAC,iBAAiB,SACpB,MAAM,IAAI,gBAAgB,oEAAoE;CAEhG,eAAe,YAAY,SAAS,SAAS;CAC7C,eAAe,YAAY,cAAc,cAAc;CACvD,eAAe,YAAY,WAAW,MAAM,gBAAgB;CAC5D,eAAe,YAAY,WAAW,IAAI,cAAc;CACxD,YAAY,YAAY,KAAK;CAE7B,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,yBAAyB,4BAA4B,iBAAiB,IAAI;EAC1E,4BAA4B,yBAAyB,iBAAiB,YAAY,IAAI,CAAC;EACvF,4BACE,YAAY,wBAAwB,KAAA,IAChC,KAAA,IACA,yBAAyB,iBAAiB,YAAY,mBAAmB,CAAC;CAClF,SAAS,OAAO;EACd,MAAM,IAAI,gBACR,yFACA,EAAE,OAAO,MAAM,CACjB;CACF;CAEA,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,uBAAuB,MAAM;EAC7B;EACA;EACA,GAAI,8BAA8B,KAAA,IAAY,CAAC,IAAI,EAAE,0BAA0B;EAC/E,SAAS,MAAM;EACf,SAAS,YAAY;EACrB,OAAO,YAAY;EACnB,WAAW,YAAY;EACvB,cAAc,YAAY;CAC5B,CAAC;AACH;;AAGA,SAAgB,8BACd,OAC+B;CAC/B,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,GAAI,MAAM,0BAA0B,KAAA,IAChC,CAAC,IACD,EAAE,uBAAuB,MAAM,sBAAsB;EACzD,SAAS,MAAM;EACf,QAAQ,MAAM;CAChB,CAAC;AACH;;AAGA,SAAgB,sBAAsB,QAAwB;CAC5D,OAAO,GAAG,OAAO,WAAW,WAAW;AACzC;;AAGA,SAAgB,6BACd,iBACA,cACyB;CACzB,MAAM,UAAU,iBAAiB,cAAc,4BAA4B;CAC3E,eAAe,QAAQ,WAAW,mBAAmB;CACrD,qBAAqB,QAAQ,UAAU;CACvC,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,+BAA+B,yBAAyB,eAAe;EAIvE,gBAAgB,yBAAyB,iBAAiB,QAAQ,OAAO,CAAC;CAC5E,SAAS,OAAO;EACd,MAAM,IAAI,gBAAgB,iDAAiD,EAAE,OAAO,MAAM,CAAC;CAC7F;CACA,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,WAAW,QAAQ;EACnB;EACA;EACA,YAAY,QAAQ;CACtB,CAAC;AACH;;AAGA,SAAgB,+BACd,iBACA,WACA,QACyB;CACzB,eAAe,WAAW,mBAAmB;CAC7C,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR;EACA,8BAA8B,yBAAyB,eAAe;EACtE;CACF,CAAC;AACH;;AAGA,SAAgB,sBAAsB,SAA4C;CAChF,IAAI;EACF,OAAO,4BAA4B,mBAAmB,MAAM,OAAO,CAAC;CACtE,QAAQ;EACN;CACF;AACF;AAEA,SAAS,uBAAuB,OAAsC;CACpE,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,gBAAgB,yDAAyD;CAErF,MAAM,UAAU,OAAO,KAAK,KAAK,CAAC,CAAC,QAAQ,QAAQ,CAAC,gBAAgB,IAAI,GAAG,CAAC;CAC5E,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,gBACR,yDAAyD,QAAQ,KAAK,CAAC,CAAC,KAAK,IAAI,GACnF;CAEF,IAAI,CAAC,OAAO,OAAO,OAAO,MAAM,GAC9B,MAAM,IAAI,gBAAgB,4CAA4C;AAE1E;AAEA,SAAS,YAAY,OAA+C;CAClE,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,gBAAgB,kEAAkE;CAE9F,MAAM,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,KAAK;CACrC,IAAI,MAAM,WAAW,SAAS;EAC5B,IAAI,KAAK,KAAK,GAAG,MAAM,aACrB,MAAM,IAAI,gBAAgB,kEAAkE;EAE9F,eAAe,MAAM,IAAI,UAAU;EACnC;CACF;CACA,IAAI,MAAM,WAAW,WAAW;EAC9B,IAAI,KAAK,KAAK,GAAG,MAAM,iBACrB,MAAM,IAAI,gBACR,wEACF;EAEF,eAAe,MAAM,QAAQ,cAAc;EAC3C;CACF;CACA,MAAM,IAAI,gBAAgB,iEAAiE;AAC7F;AAEA,SAAS,eAAe,OAAgB,OAAwC;CAC9E,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,WAAW,GACvD,MAAM,IAAI,gBAAgB,6BAA6B,MAAM,4BAA4B;AAE7F;AAEA,SAAS,qBAAqB,YAA0D;CACtF,IAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,UAAU,GACnF,MAAM,IAAI,gBAAgB,gDAAgD;CAE5E,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GAAG;EACrD,IAAI,8DAA8D,KAAK,GAAG,GACxE,MAAM,IAAI,gBAAgB,2CAA2C,KAAK,UAAU,GAAG,GAAG;EAE5F,IACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAO,UAAU,YACjB,OAAO,UAAU,WAEjB,MAAM,IAAI,gBACR,gCAAgC,KAAK,UAAU,GAAG,EAAE,gBACtD;EAEF,IAAI,OAAO,UAAU,aAAa,MAAM,SAAS,KAAK,KAAK,MAAM,SAAS,GAAG,IAC3E,MAAM,IAAI,gBACR,gCAAgC,KAAK,UAAU,GAAG,EAAE,uCACtD;CAEJ;AACF;AAEA,SAAS,iBAAiB,OAAgB,OAAO,KAAc;CAC7D,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,OAAO;CACtF,IAAI,OAAO,UAAU,UAAU;EAC7B,IAAI,CAAC,OAAO,SAAS,KAAK,GACxB,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,gBAAgB;EAEtE,OAAO;CACT;CACA,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,MAAM,UAAU;EAChC,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,GAAG,MAAM,sBAAsB;EAErF,OAAO,iBAAiB,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE;CACnD,CAAC;CAEH,IAAI,OAAO,UAAU,YAAY,UAAU,MACzC,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,mBAAmB;CAEzE,MAAM,YAAY,OAAO,eAAe,KAAK;CAC7C,IAAI,cAAc,OAAO,aAAa,cAAc,MAClD,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,wBAAwB;CAE9E,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,KAAgC,GAAG;EAC1E,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,OAAO,iBAAiB,MAAM,GAAG,KAAK,GAAG,KAAK;CACpD;CACA,OAAO;AACT;;;;;;AAOA,SAAgB,wBAAwB,OAA2D;CACjG,MAAM,WAAW,OAAO,OAAO,CAC7B,OAAO,OAAO,EAAE,cAAc,OAAO,OAAO,UAAU,KAAA,IAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CACnF,CAAC;CACD,MAAM,SAAS,OAAO,OAAO,UAAU,KAAA,IAAY,CAAC,IAAI,CAAC,KAAK,CAAC;CAC/D,OAAO,OAAO,OACZ,UAAU,KAAA,IACN;EAAE,QAAQ;EAAoB;EAAU;EAAQ,QAAQ;CAAkC,IAC1F;EAAE,QAAQ;EAAkB;EAAU;CAAO,CACnD;AACF"}

package/dist/run-layout-C2jgwsCq.js

@@ -1,393 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { join, resolve } from "node:path";
-import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-//#region src/runtime/supervise/run-layout.ts
-/**
-* The on-disk supervisor-run layout: `<root>/.agent/supervisor/<id>`.
-*
-* This is the durable, cross-process face of a supervisor run — the counterpart to the in-process
-* `Inbox` seam in `./inbox`. A run persists its state under one directory so that any OTHER process
-* can find it after the fact: `@tangle-network/traces` reads exactly this layout via
-* `traces analyze --supervisor-run-dir`, a restarted host can rehydrate a run it no longer holds
-* handles to, and a human can steer a live worker by appending one NDJSON line. Until now the
-* layout was defined only in the unpublished `loops` repo (`src/supervisor-control.ts`) — a
-* published reader depending on an unpublished writer's convention — so the contract is promoted
-* here, names preserved.
-*
-* `.agent` is the one dot-dir for ALL agent-owned state (skills already write
-* `.agent/hypotheses/`, `.agent/skill-runs.jsonl`); supervisor runs live beside them rather than
-* under a product-branded dir. Runs written by older writers used `.loops/supervisor/<id>` —
-* readers that must see those keep a legacy fallback; this writer never creates `.loops` again.
-*
-* Layout, relative to `supervisorRunDir(root, id)`:
-*
-*   workers/<label>.inbox.ndjson   down-leg steer/answer requests for one worker (durable inbox);
-*                                  each line is a {@link WorkerSteerRequest}
-*   workers/<label>.ndjson         best-effort per-worker control-event log (delivery bookkeeping)
-*   cancellations/requests.ndjson  worker-scoped cancel requests (durable inbox); each line is a
-*                                  {@link WorkerCancelRequest}
-*   cancellations/<opId>.json      the acknowledgement for one cancel operation — a
-*                                  {@link WorkerCancellation} written ONLY by the runtime
-*                                  acknowledger in the OWNING manager's turn loop: exact node
-*                                  ids route to the manager that parents them (any depth);
-*                                  label/profile-name references to the root manager alone
-*   cancellations/run.request.json the run-scoped cancel request — one {@link RunCancelRequest},
-*                                  the whole RUN rather than one worker
-*   cancellations/run.json         the acknowledgement for the run-scoped request — a
-*                                  {@link RunCancellation} written ONLY by the runtime (the root
-*                                  manager issues the abort; the `supervise()` settle path records
-*                                  what the run actually did)
-*
-* Reads are tolerant by contract: a partial trailing line (a writer mid-append) or a corrupt line
-* never poisons the rest of the file — later valid lines still matter.
-*
-* Promoted from `loops/src/supervisor-control.ts`. The one deliberate difference: the loops version
-* resolved a worker id to its label through the run journal before writing a steer; that resolution
-* stays with the caller (it is journal-format-specific), so `writeWorkerSteer` here takes the worker
-* LABEL directly.
-*
-* @experimental
-*/
-/** The root every supervisor run of one workspace lives under. */
-function supervisorRunsRoot(rootDir) {
-	return join(resolve(rootDir), ".agent", "supervisor");
-}
-/** The run directory every artifact of one supervisor run lives under. */
-function supervisorRunDir(rootDir, id) {
-	return join(supervisorRunsRoot(rootDir), id);
-}
-/**
-* Where a pre-rename writer put the same run (`<root>/.loops/supervisor/<id>`). Readers that must
-* see historical runs check {@link supervisorRunDir} first and fall back to this; nothing writes
-* here anymore.
-*/
-function legacySupervisorRunDir(rootDir, id) {
-	return join(legacySupervisorRunsRoot(rootDir), id);
-}
-/**
-* The pre-rename runs root (`<root>/.loops/supervisor`). Only readers that ENUMERATE historical
-* runs need this — the per-id form is {@link legacySupervisorRunDir}. Nothing writes here.
-*/
-function legacySupervisorRunsRoot(rootDir) {
-	return join(resolve(rootDir), ".loops", "supervisor");
-}
-/** A worker label reduced to a safe filename stem. Empty labels get a stable fallback. */
-function safeWorkerFile(label) {
-	const safe = label.replace(/[^A-Za-z0-9._-]/g, "_");
-	return safe.length > 0 ? safe : "worker";
-}
-/** The directory holding every per-worker file of one run (inboxes and control-event logs). */
-function supervisorWorkersDir(eventDir) {
-	return join(eventDir, "workers");
-}
-/** The durable inbox file for one worker of one run. */
-function workerInboxFile(rootDir, supervisorId, worker) {
-	return workerInboxFileFromEventDir(supervisorRunDir(rootDir, supervisorId), worker);
-}
-/** Same, addressed from an already-known run directory (the reader's usual entry point). */
-function workerInboxFileFromEventDir(eventDir, worker) {
-	return join(supervisorWorkersDir(eventDir), `${safeWorkerFile(worker)}.inbox.ndjson`);
-}
-/**
-* The best-effort control-event log for one worker (`workers/<label>.ndjson`) — delivery
-* bookkeeping for steers, plus whatever lifecycle events a writer chooses to append. Distinct from
-* the inbox: the inbox is the durable down-leg queue, this is the record of what happened to it.
-*/
-function workerControlLogFile(eventDir, worker) {
-	return join(supervisorWorkersDir(eventDir), `${safeWorkerFile(worker)}.ndjson`);
-}
-/**
-* Durably append one steer request to a worker's inbox and log the delivery attempt.
-*
-* The inbox append is the durable act; the control-event log is best-effort bookkeeping and may
-* silently fail without voiding the steer.
-*/
-function writeWorkerSteer(rootDir, supervisorId, worker, message, source = "human") {
-	const trimmed = message.trim();
-	if (!trimmed) throw new Error("steer message is empty");
-	const dir = supervisorRunDir(rootDir, supervisorId);
-	mkdirSync(supervisorWorkersDir(dir), { recursive: true });
-	const request = {
-		id: randomUUID(),
-		at: (/* @__PURE__ */ new Date()).toISOString(),
-		source,
-		worker,
-		message: trimmed
-	};
-	const file = workerInboxFile(rootDir, supervisorId, worker);
-	appendFileSync(file, `${JSON.stringify(request)}\n`, "utf8");
-	appendWorkerControlEvent(dir, worker, {
-		kind: "message",
-		direction: "down",
-		source,
-		requestId: request.id,
-		message: trimmed,
-		queued: true,
-		delivered: false
-	});
-	return {
-		worker,
-		file,
-		request
-	};
-}
-/** Read every valid steer request in a worker's inbox. Corrupt or partial lines are skipped. */
-function readWorkerSteerRequests(eventDir, worker) {
-	const file = workerInboxFileFromEventDir(eventDir, worker);
-	if (!existsSync(file)) return [];
-	const out = [];
-	let raw = "";
-	try {
-		raw = readFileSync(file, "utf8");
-	} catch {
-		return out;
-	}
-	for (const line of raw.split("\n")) {
-		const trimmed = line.trim();
-		if (!trimmed) continue;
-		try {
-			const parsed = JSON.parse(trimmed);
-			if (isWorkerSteerRequest(parsed)) out.push(parsed);
-		} catch {}
-	}
-	return out;
-}
-/** The directory holding every cancellation artifact of one run (request inbox + acknowledgements). */
-function workerCancellationsDir(eventDir) {
-	return join(eventDir, "cancellations");
-}
-/** The durable cancel-request inbox of one run — one NDJSON line per {@link WorkerCancelRequest}. */
-function workerCancelRequestsFile(eventDir) {
-	return join(workerCancellationsDir(eventDir), "requests.ndjson");
-}
-/**
-* The acknowledgement file for one cancel operation. The filename is a sanitized stem of the
-* `operationId`; the record inside carries the exact id, and readers verify it so two distinct
-* ids that sanitize to one stem fail loud instead of answering for each other.
-*/
-function workerCancellationFile(eventDir, operationId) {
-	return join(workerCancellationsDir(eventDir), `${safeOperationFile(operationId)}.json`);
-}
-function safeOperationFile(operationId) {
-	const safe = operationId.replace(/[^A-Za-z0-9._-]/g, "_");
-	if (safe.length === 0) throw new Error("cancel operationId is empty");
-	return safe;
-}
-/** Read every valid cancel request in the run's cancellation inbox. Corrupt lines are skipped. */
-function readWorkerCancelRequests(eventDir) {
-	const file = workerCancelRequestsFile(eventDir);
-	if (!existsSync(file)) return [];
-	const out = [];
-	let raw = "";
-	try {
-		raw = readFileSync(file, "utf8");
-	} catch {
-		return out;
-	}
-	for (const line of raw.split("\n")) {
-		const trimmed = line.trim();
-		if (!trimmed) continue;
-		try {
-			const parsed = JSON.parse(trimmed);
-			if (isWorkerCancelRequest(parsed)) out.push(parsed);
-		} catch {}
-	}
-	return out;
-}
-/**
-* Read the acknowledgement for one cancel operation. `undefined` when the runtime has not
-* answered. A record whose stored `operationId` differs from the requested one is a filename
-* collision between two sanitized ids — fail loud rather than return another operation's answer.
-*/
-function readWorkerCancellation(eventDir, operationId) {
-	const file = workerCancellationFile(eventDir, operationId);
-	if (!existsSync(file)) return void 0;
-	const parsed = JSON.parse(readFileSync(file, "utf8"));
-	if (parsed.operationId !== operationId) throw new Error(`cancel acknowledgement collision: '${file}' holds operation '${parsed.operationId}', not '${operationId}' — use operation ids that stay distinct after filename sanitization`);
-	return parsed;
-}
-/**
-* Durably write one acknowledgement record. Write-then-rename, so a concurrent reader sees the
-* prior complete record or the new complete record, never a partial file.
-*
-* @internal The runtime acknowledger is the only intended writer; clients read via
-* {@link readWorkerCancellation} or {@link cancelWorker}.
-*/
-function writeWorkerCancellation(eventDir, record) {
-	mkdirSync(workerCancellationsDir(eventDir), { recursive: true });
-	const file = workerCancellationFile(eventDir, record.operationId);
-	const tmp = `${file}.${randomUUID()}.tmp`;
-	writeFileSync(tmp, `${JSON.stringify(record, null, 2)}\n`, "utf8");
-	renameSync(tmp, file);
-}
-/**
-* Request the cancellation of ONE worker, idempotently, and return the operation's current
-* durable state.
-*
-* The write half of the acknowledged-cancellation contract (`writeWorkerSteer` is the steer
-* analog): append the request to the run's cancellation inbox, where the OWNING manager's
-* acknowledger (its turn loop — the root for label/profile references, the parent manager for an
-* exact node id at any depth) applies it — aborting exactly that worker's subtree and recording
-* what it proved. This function never applies the cancellation itself; writing a
-* request file is not an acknowledgement.
-*
-* Idempotency is a lookup: when an acknowledgement for `operationId` already exists, it is
-* returned AS-IS and nothing is appended — repeating one operation can never apply twice. A
-* request the runtime has not answered yet returns `effect: 'unknown'` (never a success); call
-* again with the same `operationId` — or `readWorkerCancellation` — to read the acknowledged
-* result after a reconnect.
-*/
-function cancelWorker(eventDir, worker, operationId, options = {}) {
-	const ref = worker.trim();
-	if (!ref) throw new Error("cancelWorker: worker reference is empty");
-	const opId = operationId.trim();
-	if (!opId) throw new Error("cancelWorker: operationId is empty");
-	const acknowledged = readWorkerCancellation(eventDir, opId);
-	if (acknowledged) return acknowledged;
-	const source = options.source ?? "human";
-	const pending = readWorkerCancelRequests(eventDir).find((r) => r.operationId === opId);
-	const request = pending ?? {
-		operationId: opId,
-		at: (/* @__PURE__ */ new Date()).toISOString(),
-		source,
-		worker: ref,
-		...options.reason === void 0 ? {} : { reason: options.reason }
-	};
-	if (!pending) {
-		mkdirSync(workerCancellationsDir(eventDir), { recursive: true });
-		appendFileSync(workerCancelRequestsFile(eventDir), `${JSON.stringify(request)}\n`, "utf8");
-		appendWorkerControlEvent(eventDir, ref, {
-			kind: "cancel-request",
-			operationId: opId,
-			source,
-			queued: true,
-			...options.reason === void 0 ? {} : { reason: options.reason }
-		});
-	}
-	return {
-		operationId: opId,
-		worker: request.worker,
-		effect: "unknown",
-		requestedAt: request.at,
-		observedAt: request.at,
-		...request.reason === void 0 ? {} : { reason: request.reason },
-		detail: "request queued; no runtime acknowledger has answered yet",
-		terminated: []
-	};
-}
-/** The run-scoped cancel request file of one run — one {@link RunCancelRequest}. */
-function runCancelRequestFile(eventDir) {
-	return join(workerCancellationsDir(eventDir), "run.request.json");
-}
-/** The run-scoped acknowledgement file of one run — one {@link RunCancellation}. */
-function runCancellationFile(eventDir) {
-	return join(workerCancellationsDir(eventDir), "run.json");
-}
-/** Read the run-scoped cancel request, or `undefined` when none was written. */
-function readRunCancelRequest(eventDir) {
-	const file = runCancelRequestFile(eventDir);
-	if (!existsSync(file)) return void 0;
-	const parsed = JSON.parse(readFileSync(file, "utf8"));
-	if (!isRunCancelRequest(parsed)) throw new Error(`run cancel request '${file}' is not a complete RunCancelRequest`);
-	return parsed;
-}
-/**
-* Read the acknowledgement for the run-scoped cancel operation. `undefined` when the runtime has
-* not answered. A record holding a DIFFERENT `operationId` belongs to another operation on the
-* same run — fail loud rather than answer for it.
-*/
-function readRunCancellation(eventDir, operationId) {
-	const file = runCancellationFile(eventDir);
-	if (!existsSync(file)) return void 0;
-	const parsed = JSON.parse(readFileSync(file, "utf8"));
-	if (parsed.operationId !== operationId) throw new Error(`run cancel acknowledgement '${file}' holds operation '${parsed.operationId}', not '${operationId}' — one run carries one run-scoped cancel operation`);
-	return parsed;
-}
-/**
-* Durably write the run-scoped acknowledgement. Write-then-rename, so a concurrent reader sees the
-* prior complete record or the new complete record, never a partial file.
-*
-* @internal The runtime is the only intended writer; clients read via {@link readRunCancellation}
-* or {@link cancelRun}.
-*/
-function writeRunCancellation(eventDir, record) {
-	mkdirSync(workerCancellationsDir(eventDir), { recursive: true });
-	const file = runCancellationFile(eventDir);
-	const tmp = `${file}.${randomUUID()}.tmp`;
-	writeFileSync(tmp, `${JSON.stringify(record, null, 2)}\n`, "utf8");
-	renameSync(tmp, file);
-}
-/**
-* Request the cancellation of the WHOLE run, idempotently, and return the operation's current
-* durable state.
-*
-* The run-scoped twin of {@link cancelWorker}: write the request into the run's cancellation
-* directory, where the run's own root manager applies it — aborting the root through the one
-* cascade controller the run already has, so every live worker comes down with it. This function
-* never applies the cancellation itself; writing a request file is not an acknowledgement.
-*
-* Idempotency is a lookup: when an acknowledgement for `operationId` already exists it is returned
-* AS-IS and nothing is written. A request the runtime has not answered yet returns
-* `effect: 'unknown'` (never a success); call again with the same `operationId` — or
-* {@link readRunCancellation} — to read the acknowledged result after a reconnect.
-*
-* A run carries ONE run-scoped operation: a second request under a different `operationId` throws
-* rather than silently replacing the pending one, because both would claim the same single abort.
-*/
-function cancelRun(eventDir, operationId, options = {}) {
-	const opId = operationId.trim();
-	if (!opId) throw new Error("cancelRun: operationId is empty");
-	const acknowledged = readRunCancellation(eventDir, opId);
-	if (acknowledged) return acknowledged;
-	const pending = readRunCancelRequest(eventDir);
-	if (pending !== void 0 && pending.operationId !== opId) throw new Error(`cancelRun: run cancel '${pending.operationId}' is already pending for this run; read it with readRunCancellation instead of issuing '${opId}'`);
-	const source = options.source ?? "human";
-	const request = pending ?? {
-		operationId: opId,
-		at: (/* @__PURE__ */ new Date()).toISOString(),
-		source,
-		...options.reason === void 0 ? {} : { reason: options.reason }
-	};
-	if (pending === void 0) {
-		mkdirSync(workerCancellationsDir(eventDir), { recursive: true });
-		writeFileSync(runCancelRequestFile(eventDir), `${JSON.stringify(request, null, 2)}\n`, "utf8");
-		appendWorkerControlEvent(eventDir, "run", {
-			kind: "run-cancel-request",
-			operationId: opId,
-			source,
-			queued: true,
-			...options.reason === void 0 ? {} : { reason: options.reason }
-		});
-	}
-	return {
-		operationId: opId,
-		effect: "unknown",
-		requestedAt: request.at,
-		observedAt: request.at,
-		...request.reason === void 0 ? {} : { reason: request.reason },
-		detail: "request queued; no runtime acknowledger has answered yet"
-	};
-}
-function isRunCancelRequest(value) {
-	return typeof value.operationId === "string" && value.operationId.length > 0 && typeof value.at === "string" && typeof value.source === "string" && (value.reason === void 0 || typeof value.reason === "string");
-}
-function isWorkerCancelRequest(value) {
-	return typeof value.operationId === "string" && value.operationId.length > 0 && typeof value.at === "string" && typeof value.source === "string" && typeof value.worker === "string" && value.worker.length > 0 && (value.reason === void 0 || typeof value.reason === "string");
-}
-function appendWorkerControlEvent(eventDir, label, event) {
-	try {
-		mkdirSync(supervisorWorkersDir(eventDir), { recursive: true });
-		appendFileSync(workerControlLogFile(eventDir, label), `${JSON.stringify({
-			at: (/* @__PURE__ */ new Date()).toISOString(),
-			label,
-			...event
-		})}\n`, "utf8");
-	} catch {}
-}
-function isWorkerSteerRequest(value) {
-	return typeof value.id === "string" && typeof value.at === "string" && typeof value.source === "string" && typeof value.worker === "string" && typeof value.message === "string" && value.message.trim().length > 0;
-}
-//#endregion
-export { writeWorkerCancellation as C, writeRunCancellation as S, workerCancellationFile as _, readRunCancelRequest as a, workerInboxFile as b, readWorkerCancellation as c, runCancellationFile as d, safeWorkerFile as f, workerCancelRequestsFile as g, supervisorWorkersDir as h, legacySupervisorRunsRoot as i, readWorkerSteerRequests as l, supervisorRunsRoot as m, cancelWorker as n, readRunCancellation as o, supervisorRunDir as p, legacySupervisorRunDir as r, readWorkerCancelRequests as s, cancelRun as t, runCancelRequestFile as u, workerCancellationsDir as v, writeWorkerSteer as w, workerInboxFileFromEventDir as x, workerControlLogFile as y };
-
-//# sourceMappingURL=run-layout-C2jgwsCq.js.map

package/dist/run-layout-C2jgwsCq.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-layout-C2jgwsCq.js","names":[],"sources":["../src/runtime/supervise/run-layout.ts"],"sourcesContent":["/**\n * The on-disk supervisor-run layout: `<root>/.agent/supervisor/<id>`.\n *\n * This is the durable, cross-process face of a supervisor run — the counterpart to the in-process\n * `Inbox` seam in `./inbox`. A run persists its state under one directory so that any OTHER process\n * can find it after the fact: `@tangle-network/traces` reads exactly this layout via\n * `traces analyze --supervisor-run-dir`, a restarted host can rehydrate a run it no longer holds\n * handles to, and a human can steer a live worker by appending one NDJSON line. Until now the\n * layout was defined only in the unpublished `loops` repo (`src/supervisor-control.ts`) — a\n * published reader depending on an unpublished writer's convention — so the contract is promoted\n * here, names preserved.\n *\n * `.agent` is the one dot-dir for ALL agent-owned state (skills already write\n * `.agent/hypotheses/`, `.agent/skill-runs.jsonl`); supervisor runs live beside them rather than\n * under a product-branded dir. Runs written by older writers used `.loops/supervisor/<id>` —\n * readers that must see those keep a legacy fallback; this writer never creates `.loops` again.\n *\n * Layout, relative to `supervisorRunDir(root, id)`:\n *\n *   workers/<label>.inbox.ndjson   down-leg steer/answer requests for one worker (durable inbox);\n *                                  each line is a {@link WorkerSteerRequest}\n *   workers/<label>.ndjson         best-effort per-worker control-event log (delivery bookkeeping)\n *   cancellations/requests.ndjson  worker-scoped cancel requests (durable inbox); each line is a\n *                                  {@link WorkerCancelRequest}\n *   cancellations/<opId>.json      the acknowledgement for one cancel operation — a\n *                                  {@link WorkerCancellation} written ONLY by the runtime\n *                                  acknowledger in the OWNING manager's turn loop: exact node\n *                                  ids route to the manager that parents them (any depth);\n *                                  label/profile-name references to the root manager alone\n *   cancellations/run.request.json the run-scoped cancel request — one {@link RunCancelRequest},\n *                                  the whole RUN rather than one worker\n *   cancellations/run.json         the acknowledgement for the run-scoped request — a\n *                                  {@link RunCancellation} written ONLY by the runtime (the root\n *                                  manager issues the abort; the `supervise()` settle path records\n *                                  what the run actually did)\n *\n * Reads are tolerant by contract: a partial trailing line (a writer mid-append) or a corrupt line\n * never poisons the rest of the file — later valid lines still matter.\n *\n * Promoted from `loops/src/supervisor-control.ts`. The one deliberate difference: the loops version\n * resolved a worker id to its label through the run journal before writing a steer; that resolution\n * stays with the caller (it is journal-format-specific), so `writeWorkerSteer` here takes the worker\n * LABEL directly.\n *\n * @experimental\n */\n\nimport { randomUUID } from 'node:crypto'\nimport {\n  appendFileSync,\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  renameSync,\n  writeFileSync,\n} from 'node:fs'\nimport { join, resolve } from 'node:path'\nimport type { RetainedRunEffect } from '../retained-run-types'\n\n/** One durable down-leg request appended to a worker's inbox file. */\nexport interface WorkerSteerRequest {\n  readonly id: string\n  /** ISO timestamp of the append. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  /** The worker LABEL the request targets (already resolved by the caller). */\n  readonly worker: string\n  readonly message: string\n}\n\n/** One durable worker-scoped cancel request appended to the run's cancellation inbox. */\nexport interface WorkerCancelRequest {\n  /** Caller-minted stable operation identifier — the idempotency key of the whole operation. */\n  readonly operationId: string\n  /** ISO timestamp of the append. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  /** The worker the request targets: a workerId (node id — routed to the owning manager at any\n   *  depth), or a profile name or spawn label (resolved by the root manager against its direct\n   *  children only). */\n  readonly worker: string\n  readonly reason?: string\n}\n\n/**\n * The durable acknowledgement state for one worker-scoped cancel operation, keyed by\n * `operationId`. The runtime acknowledger is the ONLY writer; `cancelWorker` only reads it.\n *\n * `effect` reuses the retained-run vocabulary ({@link RetainedRunEffect}) so the runtime has one\n * spelling of the four cancellation states:\n *  - `'unknown'`          — not yet resolved by the runtime (also what `cancelWorker` returns for\n *                           a request no acknowledger has answered), or — terminally, with the\n *                           run-over detail — an abort was issued but the run ended before the\n *                           termination could be observed. Never a success.\n *  - `'cancel_requested'` — the runtime issued the worker's abort; termination not yet proven.\n *  - `'cancelled'`        — the worker reached a terminal `down` state on the settle path.\n *  - `'not_live'`         — the worker was not live to cancel (already settled, it settled\n *                           `done` despite the abort, or the run ended before the request was\n *                           ever applied). Never a success of THIS operation.\n *\n * Expiry is run end: the owning manager's final pass closes every still-open request it owns\n * (`not_live` never applied, `unknown` issued-but-unproven), so a pending request cannot outlive\n * its run and abort a future spawn that happens to reuse a label.\n */\nexport interface WorkerCancellation {\n  readonly operationId: string\n  /** The worker reference exactly as requested. */\n  readonly worker: string\n  readonly effect: RetainedRunEffect\n  /** ISO timestamp of the original request. */\n  readonly requestedAt: string\n  /** ISO timestamp of the runtime's most recent observation of this operation. */\n  readonly observedAt: string\n  /** The node id the acknowledger resolved `worker` to, once resolved. */\n  readonly workerId?: string\n  /** The caller's reason, carried verbatim from the request. */\n  readonly reason?: string\n  /** The runtime's explanation of how it arrived at `effect`. */\n  readonly detail?: string\n  /**\n   * Every node id this operation PROVED terminated: the requested worker plus each descendant of\n   * its subtree observed to reach a terminal `down`/`cancelled` journal record at or after the\n   * abort was ISSUED — the acknowledger's own `observedAt` on the `cancel_requested` record\n   * (runtime clock), never the client's `requestedAt` (a cancelled lead cascades to its subtree\n   * by design — the scope signal chain — so the acknowledgement names the set, not one id).\n   * Proven at acknowledgement time; post-abort causation is approximate: a descendant that died\n   * of its own cause after the abort is indistinguishable from the cascade and may be included,\n   * a late teardown journal joins the set on a later pass while the manager still runs, and one\n   * still absent at run end is absent from the set. Grows monotonically; empty until termination\n   * is proven.\n   */\n  readonly terminated: ReadonlyArray<string>\n}\n\n/** One durable run-scoped cancel request: cancel the WHOLE run, not one worker. */\nexport interface RunCancelRequest {\n  /** Caller-minted stable operation identifier — the idempotency key of the whole operation. */\n  readonly operationId: string\n  /** ISO timestamp of the write. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  readonly reason?: string\n}\n\n/**\n * The durable acknowledgement state for the run-scoped cancel operation, keyed by `operationId`.\n * The runtime is the ONLY writer; {@link cancelRun} only reads it.\n *\n * `effect` is the same {@link RetainedRunEffect} vocabulary the worker-scoped and retained-run\n * paths use, so the runtime has one spelling of the four cancellation states:\n *  - `'unknown'`          — no runtime has answered yet. Never a success.\n *  - `'cancel_requested'` — the root manager issued the run's cascading abort; the run's terminal\n *                           state is not yet observed.\n *  - `'cancelled'`        — the run reached its terminal state ABORTED after that request.\n *  - `'not_live'`         — the run was not live to cancel: it settled on its own despite the\n *                           request, or it ended before the request was applied.\n */\nexport interface RunCancellation {\n  readonly operationId: string\n  readonly effect: RetainedRunEffect\n  /** ISO timestamp of the original request. */\n  readonly requestedAt: string\n  /** ISO timestamp of the runtime's most recent observation of this operation. */\n  readonly observedAt: string\n  /** The caller's reason, carried verbatim from the request. */\n  readonly reason?: string\n  /** The runtime's explanation of how it arrived at `effect`. */\n  readonly detail?: string\n}\n\n/** The root every supervisor run of one workspace lives under. */\nexport function supervisorRunsRoot(rootDir: string): string {\n  return join(resolve(rootDir), '.agent', 'supervisor')\n}\n\n/** The run directory every artifact of one supervisor run lives under. */\nexport function supervisorRunDir(rootDir: string, id: string): string {\n  return join(supervisorRunsRoot(rootDir), id)\n}\n\n/**\n * Where a pre-rename writer put the same run (`<root>/.loops/supervisor/<id>`). Readers that must\n * see historical runs check {@link supervisorRunDir} first and fall back to this; nothing writes\n * here anymore.\n */\nexport function legacySupervisorRunDir(rootDir: string, id: string): string {\n  return join(legacySupervisorRunsRoot(rootDir), id)\n}\n\n/**\n * The pre-rename runs root (`<root>/.loops/supervisor`). Only readers that ENUMERATE historical\n * runs need this — the per-id form is {@link legacySupervisorRunDir}. Nothing writes here.\n */\nexport function legacySupervisorRunsRoot(rootDir: string): string {\n  return join(resolve(rootDir), '.loops', 'supervisor')\n}\n\n/** A worker label reduced to a safe filename stem. Empty labels get a stable fallback. */\nexport function safeWorkerFile(label: string): string {\n  const safe = label.replace(/[^A-Za-z0-9._-]/g, '_')\n  return safe.length > 0 ? safe : 'worker'\n}\n\n/** The directory holding every per-worker file of one run (inboxes and control-event logs). */\nexport function supervisorWorkersDir(eventDir: string): string {\n  return join(eventDir, 'workers')\n}\n\n/** The durable inbox file for one worker of one run. */\nexport function workerInboxFile(rootDir: string, supervisorId: string, worker: string): string {\n  return workerInboxFileFromEventDir(supervisorRunDir(rootDir, supervisorId), worker)\n}\n\n/** Same, addressed from an already-known run directory (the reader's usual entry point). */\nexport function workerInboxFileFromEventDir(eventDir: string, worker: string): string {\n  return join(supervisorWorkersDir(eventDir), `${safeWorkerFile(worker)}.inbox.ndjson`)\n}\n\n/**\n * The best-effort control-event log for one worker (`workers/<label>.ndjson`) — delivery\n * bookkeeping for steers, plus whatever lifecycle events a writer chooses to append. Distinct from\n * the inbox: the inbox is the durable down-leg queue, this is the record of what happened to it.\n */\nexport function workerControlLogFile(eventDir: string, worker: string): string {\n  return join(supervisorWorkersDir(eventDir), `${safeWorkerFile(worker)}.ndjson`)\n}\n\n/**\n * Durably append one steer request to a worker's inbox and log the delivery attempt.\n *\n * The inbox append is the durable act; the control-event log is best-effort bookkeeping and may\n * silently fail without voiding the steer.\n */\nexport function writeWorkerSteer(\n  rootDir: string,\n  supervisorId: string,\n  worker: string,\n  message: string,\n  source = 'human',\n): { worker: string; file: string; request: WorkerSteerRequest } {\n  const trimmed = message.trim()\n  if (!trimmed) throw new Error('steer message is empty')\n  const dir = supervisorRunDir(rootDir, supervisorId)\n  mkdirSync(supervisorWorkersDir(dir), { recursive: true })\n  const request: WorkerSteerRequest = {\n    id: randomUUID(),\n    at: new Date().toISOString(),\n    source,\n    worker,\n    message: trimmed,\n  }\n  const file = workerInboxFile(rootDir, supervisorId, worker)\n  appendFileSync(file, `${JSON.stringify(request)}\\n`, 'utf8')\n  appendWorkerControlEvent(dir, worker, {\n    kind: 'message',\n    direction: 'down',\n    source,\n    requestId: request.id,\n    message: trimmed,\n    queued: true,\n    delivered: false,\n  })\n  return { worker, file, request }\n}\n\n/** Read every valid steer request in a worker's inbox. Corrupt or partial lines are skipped. */\nexport function readWorkerSteerRequests(eventDir: string, worker: string): WorkerSteerRequest[] {\n  const file = workerInboxFileFromEventDir(eventDir, worker)\n  if (!existsSync(file)) return []\n  const out: WorkerSteerRequest[] = []\n  let raw = ''\n  try {\n    raw = readFileSync(file, 'utf8')\n  } catch {\n    return out\n  }\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim()\n    if (!trimmed) continue\n    try {\n      const parsed = JSON.parse(trimmed) as Partial<WorkerSteerRequest>\n      if (isWorkerSteerRequest(parsed)) out.push(parsed)\n    } catch {\n      // Ignore partial or corrupt input lines; later valid lines still matter.\n    }\n  }\n  return out\n}\n\n/** The directory holding every cancellation artifact of one run (request inbox + acknowledgements). */\nexport function workerCancellationsDir(eventDir: string): string {\n  return join(eventDir, 'cancellations')\n}\n\n/** The durable cancel-request inbox of one run — one NDJSON line per {@link WorkerCancelRequest}. */\nexport function workerCancelRequestsFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'requests.ndjson')\n}\n\n/**\n * The acknowledgement file for one cancel operation. The filename is a sanitized stem of the\n * `operationId`; the record inside carries the exact id, and readers verify it so two distinct\n * ids that sanitize to one stem fail loud instead of answering for each other.\n */\nexport function workerCancellationFile(eventDir: string, operationId: string): string {\n  return join(workerCancellationsDir(eventDir), `${safeOperationFile(operationId)}.json`)\n}\n\nfunction safeOperationFile(operationId: string): string {\n  const safe = operationId.replace(/[^A-Za-z0-9._-]/g, '_')\n  if (safe.length === 0) throw new Error('cancel operationId is empty')\n  return safe\n}\n\n/** Read every valid cancel request in the run's cancellation inbox. Corrupt lines are skipped. */\nexport function readWorkerCancelRequests(eventDir: string): WorkerCancelRequest[] {\n  const file = workerCancelRequestsFile(eventDir)\n  if (!existsSync(file)) return []\n  const out: WorkerCancelRequest[] = []\n  let raw = ''\n  try {\n    raw = readFileSync(file, 'utf8')\n  } catch {\n    return out\n  }\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim()\n    if (!trimmed) continue\n    try {\n      const parsed = JSON.parse(trimmed) as Partial<WorkerCancelRequest>\n      if (isWorkerCancelRequest(parsed)) out.push(parsed)\n    } catch {\n      // Ignore partial or corrupt input lines; later valid lines still matter.\n    }\n  }\n  return out\n}\n\n/**\n * Read the acknowledgement for one cancel operation. `undefined` when the runtime has not\n * answered. A record whose stored `operationId` differs from the requested one is a filename\n * collision between two sanitized ids — fail loud rather than return another operation's answer.\n */\nexport function readWorkerCancellation(\n  eventDir: string,\n  operationId: string,\n): WorkerCancellation | undefined {\n  const file = workerCancellationFile(eventDir, operationId)\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as WorkerCancellation\n  if (parsed.operationId !== operationId) {\n    throw new Error(\n      `cancel acknowledgement collision: '${file}' holds operation '${parsed.operationId}', ` +\n        `not '${operationId}' — use operation ids that stay distinct after filename sanitization`,\n    )\n  }\n  return parsed\n}\n\n/**\n * Durably write one acknowledgement record. Write-then-rename, so a concurrent reader sees the\n * prior complete record or the new complete record, never a partial file.\n *\n * @internal The runtime acknowledger is the only intended writer; clients read via\n * {@link readWorkerCancellation} or {@link cancelWorker}.\n */\nexport function writeWorkerCancellation(eventDir: string, record: WorkerCancellation): void {\n  const dir = workerCancellationsDir(eventDir)\n  mkdirSync(dir, { recursive: true })\n  const file = workerCancellationFile(eventDir, record.operationId)\n  const tmp = `${file}.${randomUUID()}.tmp`\n  writeFileSync(tmp, `${JSON.stringify(record, null, 2)}\\n`, 'utf8')\n  renameSync(tmp, file)\n}\n\n/**\n * Request the cancellation of ONE worker, idempotently, and return the operation's current\n * durable state.\n *\n * The write half of the acknowledged-cancellation contract (`writeWorkerSteer` is the steer\n * analog): append the request to the run's cancellation inbox, where the OWNING manager's\n * acknowledger (its turn loop — the root for label/profile references, the parent manager for an\n * exact node id at any depth) applies it — aborting exactly that worker's subtree and recording\n * what it proved. This function never applies the cancellation itself; writing a\n * request file is not an acknowledgement.\n *\n * Idempotency is a lookup: when an acknowledgement for `operationId` already exists, it is\n * returned AS-IS and nothing is appended — repeating one operation can never apply twice. A\n * request the runtime has not answered yet returns `effect: 'unknown'` (never a success); call\n * again with the same `operationId` — or `readWorkerCancellation` — to read the acknowledged\n * result after a reconnect.\n */\nexport function cancelWorker(\n  eventDir: string,\n  worker: string,\n  operationId: string,\n  options: { readonly reason?: string; readonly source?: string } = {},\n): WorkerCancellation {\n  const ref = worker.trim()\n  if (!ref) throw new Error('cancelWorker: worker reference is empty')\n  const opId = operationId.trim()\n  if (!opId) throw new Error('cancelWorker: operationId is empty')\n  const acknowledged = readWorkerCancellation(eventDir, opId)\n  if (acknowledged) return acknowledged\n  const source = options.source ?? 'human'\n  const pending = readWorkerCancelRequests(eventDir).find((r) => r.operationId === opId)\n  const request: WorkerCancelRequest = pending ?? {\n    operationId: opId,\n    at: new Date().toISOString(),\n    source,\n    worker: ref,\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n  }\n  if (!pending) {\n    mkdirSync(workerCancellationsDir(eventDir), { recursive: true })\n    appendFileSync(workerCancelRequestsFile(eventDir), `${JSON.stringify(request)}\\n`, 'utf8')\n    appendWorkerControlEvent(eventDir, ref, {\n      kind: 'cancel-request',\n      operationId: opId,\n      source,\n      queued: true,\n      ...(options.reason === undefined ? {} : { reason: options.reason }),\n    })\n  }\n  return {\n    operationId: opId,\n    worker: request.worker,\n    effect: 'unknown',\n    requestedAt: request.at,\n    observedAt: request.at,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    detail: 'request queued; no runtime acknowledger has answered yet',\n    terminated: [],\n  }\n}\n\n/** The run-scoped cancel request file of one run — one {@link RunCancelRequest}. */\nexport function runCancelRequestFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.request.json')\n}\n\n/** The run-scoped acknowledgement file of one run — one {@link RunCancellation}. */\nexport function runCancellationFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.json')\n}\n\n/** Read the run-scoped cancel request, or `undefined` when none was written. */\nexport function readRunCancelRequest(eventDir: string): RunCancelRequest | undefined {\n  const file = runCancelRequestFile(eventDir)\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as Partial<RunCancelRequest>\n  if (!isRunCancelRequest(parsed)) {\n    throw new Error(`run cancel request '${file}' is not a complete RunCancelRequest`)\n  }\n  return parsed\n}\n\n/**\n * Read the acknowledgement for the run-scoped cancel operation. `undefined` when the runtime has\n * not answered. A record holding a DIFFERENT `operationId` belongs to another operation on the\n * same run — fail loud rather than answer for it.\n */\nexport function readRunCancellation(\n  eventDir: string,\n  operationId: string,\n): RunCancellation | undefined {\n  const file = runCancellationFile(eventDir)\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as RunCancellation\n  if (parsed.operationId !== operationId) {\n    throw new Error(\n      `run cancel acknowledgement '${file}' holds operation '${parsed.operationId}', not ` +\n        `'${operationId}' — one run carries one run-scoped cancel operation`,\n    )\n  }\n  return parsed\n}\n\n/**\n * Durably write the run-scoped acknowledgement. Write-then-rename, so a concurrent reader sees the\n * prior complete record or the new complete record, never a partial file.\n *\n * @internal The runtime is the only intended writer; clients read via {@link readRunCancellation}\n * or {@link cancelRun}.\n */\nexport function writeRunCancellation(eventDir: string, record: RunCancellation): void {\n  const dir = workerCancellationsDir(eventDir)\n  mkdirSync(dir, { recursive: true })\n  const file = runCancellationFile(eventDir)\n  const tmp = `${file}.${randomUUID()}.tmp`\n  writeFileSync(tmp, `${JSON.stringify(record, null, 2)}\\n`, 'utf8')\n  renameSync(tmp, file)\n}\n\n/**\n * Request the cancellation of the WHOLE run, idempotently, and return the operation's current\n * durable state.\n *\n * The run-scoped twin of {@link cancelWorker}: write the request into the run's cancellation\n * directory, where the run's own root manager applies it — aborting the root through the one\n * cascade controller the run already has, so every live worker comes down with it. This function\n * never applies the cancellation itself; writing a request file is not an acknowledgement.\n *\n * Idempotency is a lookup: when an acknowledgement for `operationId` already exists it is returned\n * AS-IS and nothing is written. A request the runtime has not answered yet returns\n * `effect: 'unknown'` (never a success); call again with the same `operationId` — or\n * {@link readRunCancellation} — to read the acknowledged result after a reconnect.\n *\n * A run carries ONE run-scoped operation: a second request under a different `operationId` throws\n * rather than silently replacing the pending one, because both would claim the same single abort.\n */\nexport function cancelRun(\n  eventDir: string,\n  operationId: string,\n  options: { readonly reason?: string; readonly source?: string } = {},\n): RunCancellation {\n  const opId = operationId.trim()\n  if (!opId) throw new Error('cancelRun: operationId is empty')\n  const acknowledged = readRunCancellation(eventDir, opId)\n  if (acknowledged) return acknowledged\n  const pending = readRunCancelRequest(eventDir)\n  if (pending !== undefined && pending.operationId !== opId) {\n    throw new Error(\n      `cancelRun: run cancel '${pending.operationId}' is already pending for this run; ` +\n        `read it with readRunCancellation instead of issuing '${opId}'`,\n    )\n  }\n  const source = options.source ?? 'human'\n  const request: RunCancelRequest = pending ?? {\n    operationId: opId,\n    at: new Date().toISOString(),\n    source,\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n  }\n  if (pending === undefined) {\n    mkdirSync(workerCancellationsDir(eventDir), { recursive: true })\n    writeFileSync(runCancelRequestFile(eventDir), `${JSON.stringify(request, null, 2)}\\n`, 'utf8')\n    appendWorkerControlEvent(eventDir, 'run', {\n      kind: 'run-cancel-request',\n      operationId: opId,\n      source,\n      queued: true,\n      ...(options.reason === undefined ? {} : { reason: options.reason }),\n    })\n  }\n  return {\n    operationId: opId,\n    effect: 'unknown',\n    requestedAt: request.at,\n    observedAt: request.at,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    detail: 'request queued; no runtime acknowledger has answered yet',\n  }\n}\n\nfunction isRunCancelRequest(value: Partial<RunCancelRequest>): value is RunCancelRequest {\n  return (\n    typeof value.operationId === 'string' &&\n    value.operationId.length > 0 &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    (value.reason === undefined || typeof value.reason === 'string')\n  )\n}\n\nfunction isWorkerCancelRequest(value: Partial<WorkerCancelRequest>): value is WorkerCancelRequest {\n  return (\n    typeof value.operationId === 'string' &&\n    value.operationId.length > 0 &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    typeof value.worker === 'string' &&\n    value.worker.length > 0 &&\n    (value.reason === undefined || typeof value.reason === 'string')\n  )\n}\n\nfunction appendWorkerControlEvent(\n  eventDir: string,\n  label: string,\n  event: Record<string, unknown>,\n): void {\n  try {\n    mkdirSync(supervisorWorkersDir(eventDir), { recursive: true })\n    appendFileSync(\n      workerControlLogFile(eventDir, label),\n      `${JSON.stringify({ at: new Date().toISOString(), label, ...event })}\\n`,\n      'utf8',\n    )\n  } catch {\n    // Control logging is best-effort; the inbox write above is the durable part.\n  }\n}\n\nfunction isWorkerSteerRequest(value: Partial<WorkerSteerRequest>): value is WorkerSteerRequest {\n  return (\n    typeof value.id === 'string' &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    typeof value.worker === 'string' &&\n    typeof value.message === 'string' &&\n    value.message.trim().length > 0\n  )\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8KA,SAAgB,mBAAmB,SAAyB;CAC1D,OAAO,KAAK,QAAQ,OAAO,GAAG,UAAU,YAAY;AACtD;;AAGA,SAAgB,iBAAiB,SAAiB,IAAoB;CACpE,OAAO,KAAK,mBAAmB,OAAO,GAAG,EAAE;AAC7C;;;;;;AAOA,SAAgB,uBAAuB,SAAiB,IAAoB;CAC1E,OAAO,KAAK,yBAAyB,OAAO,GAAG,EAAE;AACnD;;;;;AAMA,SAAgB,yBAAyB,SAAyB;CAChE,OAAO,KAAK,QAAQ,OAAO,GAAG,UAAU,YAAY;AACtD;;AAGA,SAAgB,eAAe,OAAuB;CACpD,MAAM,OAAO,MAAM,QAAQ,oBAAoB,GAAG;CAClD,OAAO,KAAK,SAAS,IAAI,OAAO;AAClC;;AAGA,SAAgB,qBAAqB,UAA0B;CAC7D,OAAO,KAAK,UAAU,SAAS;AACjC;;AAGA,SAAgB,gBAAgB,SAAiB,cAAsB,QAAwB;CAC7F,OAAO,4BAA4B,iBAAiB,SAAS,YAAY,GAAG,MAAM;AACpF;;AAGA,SAAgB,4BAA4B,UAAkB,QAAwB;CACpF,OAAO,KAAK,qBAAqB,QAAQ,GAAG,GAAG,eAAe,MAAM,EAAE,cAAc;AACtF;;;;;;AAOA,SAAgB,qBAAqB,UAAkB,QAAwB;CAC7E,OAAO,KAAK,qBAAqB,QAAQ,GAAG,GAAG,eAAe,MAAM,EAAE,QAAQ;AAChF;;;;;;;AAQA,SAAgB,iBACd,SACA,cACA,QACA,SACA,SAAS,SACsD;CAC/D,MAAM,UAAU,QAAQ,KAAK;CAC7B,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,wBAAwB;CACtD,MAAM,MAAM,iBAAiB,SAAS,YAAY;CAClD,UAAU,qBAAqB,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CACxD,MAAM,UAA8B;EAClC,IAAI,WAAW;EACf,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA;EACA,SAAS;CACX;CACA,MAAM,OAAO,gBAAgB,SAAS,cAAc,MAAM;CAC1D,eAAe,MAAM,GAAG,KAAK,UAAU,OAAO,EAAE,KAAK,MAAM;CAC3D,yBAAyB,KAAK,QAAQ;EACpC,MAAM;EACN,WAAW;EACX;EACA,WAAW,QAAQ;EACnB,SAAS;EACT,QAAQ;EACR,WAAW;CACb,CAAC;CACD,OAAO;EAAE;EAAQ;EAAM;CAAQ;AACjC;;AAGA,SAAgB,wBAAwB,UAAkB,QAAsC;CAC9F,MAAM,OAAO,4BAA4B,UAAU,MAAM;CACzD,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,CAAC;CAC/B,MAAM,MAA4B,CAAC;CACnC,IAAI,MAAM;CACV,IAAI;EACF,MAAM,aAAa,MAAM,MAAM;CACjC,QAAQ;EACN,OAAO;CACT;CACA,KAAK,MAAM,QAAQ,IAAI,MAAM,IAAI,GAAG;EAClC,MAAM,UAAU,KAAK,KAAK;EAC1B,IAAI,CAAC,SAAS;EACd,IAAI;GACF,MAAM,SAAS,KAAK,MAAM,OAAO;GACjC,IAAI,qBAAqB,MAAM,GAAG,IAAI,KAAK,MAAM;EACnD,QAAQ,CAER;CACF;CACA,OAAO;AACT;;AAGA,SAAgB,uBAAuB,UAA0B;CAC/D,OAAO,KAAK,UAAU,eAAe;AACvC;;AAGA,SAAgB,yBAAyB,UAA0B;CACjE,OAAO,KAAK,uBAAuB,QAAQ,GAAG,iBAAiB;AACjE;;;;;;AAOA,SAAgB,uBAAuB,UAAkB,aAA6B;CACpF,OAAO,KAAK,uBAAuB,QAAQ,GAAG,GAAG,kBAAkB,WAAW,EAAE,MAAM;AACxF;AAEA,SAAS,kBAAkB,aAA6B;CACtD,MAAM,OAAO,YAAY,QAAQ,oBAAoB,GAAG;CACxD,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,6BAA6B;CACpE,OAAO;AACT;;AAGA,SAAgB,yBAAyB,UAAyC;CAChF,MAAM,OAAO,yBAAyB,QAAQ;CAC9C,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,CAAC;CAC/B,MAAM,MAA6B,CAAC;CACpC,IAAI,MAAM;CACV,IAAI;EACF,MAAM,aAAa,MAAM,MAAM;CACjC,QAAQ;EACN,OAAO;CACT;CACA,KAAK,MAAM,QAAQ,IAAI,MAAM,IAAI,GAAG;EAClC,MAAM,UAAU,KAAK,KAAK;EAC1B,IAAI,CAAC,SAAS;EACd,IAAI;GACF,MAAM,SAAS,KAAK,MAAM,OAAO;GACjC,IAAI,sBAAsB,MAAM,GAAG,IAAI,KAAK,MAAM;EACpD,QAAQ,CAER;CACF;CACA,OAAO;AACT;;;;;;AAOA,SAAgB,uBACd,UACA,aACgC;CAChC,MAAM,OAAO,uBAAuB,UAAU,WAAW;CACzD,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,OAAO,gBAAgB,aACzB,MAAM,IAAI,MACR,sCAAsC,KAAK,qBAAqB,OAAO,YAAY,UACzE,YAAY,qEACxB;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,wBAAwB,UAAkB,QAAkC;CAE1F,UADY,uBAAuB,QACvB,GAAG,EAAE,WAAW,KAAK,CAAC;CAClC,MAAM,OAAO,uBAAuB,UAAU,OAAO,WAAW;CAChE,MAAM,MAAM,GAAG,KAAK,GAAG,WAAW,EAAE;CACpC,cAAc,KAAK,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,KAAK,MAAM;CACjE,WAAW,KAAK,IAAI;AACtB;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,aACd,UACA,QACA,aACA,UAAkE,CAAC,GAC/C;CACpB,MAAM,MAAM,OAAO,KAAK;CACxB,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,yCAAyC;CACnE,MAAM,OAAO,YAAY,KAAK;CAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,oCAAoC;CAC/D,MAAM,eAAe,uBAAuB,UAAU,IAAI;CAC1D,IAAI,cAAc,OAAO;CACzB,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAAU,yBAAyB,QAAQ,CAAC,CAAC,MAAM,MAAM,EAAE,gBAAgB,IAAI;CACrF,MAAM,UAA+B,WAAW;EAC9C,aAAa;EACb,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA,QAAQ;EACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;CACnE;CACA,IAAI,CAAC,SAAS;EACZ,UAAU,uBAAuB,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EAC/D,eAAe,yBAAyB,QAAQ,GAAG,GAAG,KAAK,UAAU,OAAO,EAAE,KAAK,MAAM;EACzF,yBAAyB,UAAU,KAAK;GACtC,MAAM;GACN,aAAa;GACb;GACA,QAAQ;GACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACnE,CAAC;CACH;CACA,OAAO;EACL,aAAa;EACb,QAAQ,QAAQ;EAChB,QAAQ;EACR,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,QAAQ;EACR,YAAY,CAAC;CACf;AACF;;AAGA,SAAgB,qBAAqB,UAA0B;CAC7D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,kBAAkB;AAClE;;AAGA,SAAgB,oBAAoB,UAA0B;CAC5D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,UAAU;AAC1D;;AAGA,SAAgB,qBAAqB,UAAgD;CACnF,MAAM,OAAO,qBAAqB,QAAQ;CAC1C,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,CAAC,mBAAmB,MAAM,GAC5B,MAAM,IAAI,MAAM,uBAAuB,KAAK,qCAAqC;CAEnF,OAAO;AACT;;;;;;AAOA,SAAgB,oBACd,UACA,aAC6B;CAC7B,MAAM,OAAO,oBAAoB,QAAQ;CACzC,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,OAAO,gBAAgB,aACzB,MAAM,IAAI,MACR,+BAA+B,KAAK,qBAAqB,OAAO,YAAY,UACtE,YAAY,oDACpB;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,qBAAqB,UAAkB,QAA+B;CAEpF,UADY,uBAAuB,QACvB,GAAG,EAAE,WAAW,KAAK,CAAC;CAClC,MAAM,OAAO,oBAAoB,QAAQ;CACzC,MAAM,MAAM,GAAG,KAAK,GAAG,WAAW,EAAE;CACpC,cAAc,KAAK,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,KAAK,MAAM;CACjE,WAAW,KAAK,IAAI;AACtB;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,UACd,UACA,aACA,UAAkE,CAAC,GAClD;CACjB,MAAM,OAAO,YAAY,KAAK;CAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAC5D,MAAM,eAAe,oBAAoB,UAAU,IAAI;CACvD,IAAI,cAAc,OAAO;CACzB,MAAM,UAAU,qBAAqB,QAAQ;CAC7C,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,MACnD,MAAM,IAAI,MACR,0BAA0B,QAAQ,YAAY,0FACY,KAAK,EACjE;CAEF,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAA4B,WAAW;EAC3C,aAAa;EACb,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;CACnE;CACA,IAAI,YAAY,KAAA,GAAW;EACzB,UAAU,uBAAuB,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EAC/D,cAAc,qBAAqB,QAAQ,GAAG,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK,MAAM;EAC7F,yBAAyB,UAAU,OAAO;GACxC,MAAM;GACN,aAAa;GACb;GACA,QAAQ;GACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACnE,CAAC;CACH;CACA,OAAO;EACL,aAAa;EACb,QAAQ;EACR,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,QAAQ;CACV;AACF;AAEA,SAAS,mBAAmB,OAA6D;CACvF,OACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,SAAS,KAC3B,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,aACvB,MAAM,WAAW,KAAA,KAAa,OAAO,MAAM,WAAW;AAE3D;AAEA,SAAS,sBAAsB,OAAmE;CAChG,OACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,SAAS,KAC3B,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,WAAW,YACxB,MAAM,OAAO,SAAS,MACrB,MAAM,WAAW,KAAA,KAAa,OAAO,MAAM,WAAW;AAE3D;AAEA,SAAS,yBACP,UACA,OACA,OACM;CACN,IAAI;EACF,UAAU,qBAAqB,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EAC7D,eACE,qBAAqB,UAAU,KAAK,GACpC,GAAG,KAAK,UAAU;GAAE,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;GAAG;GAAO,GAAG;EAAM,CAAC,EAAE,KACrE,MACF;CACF,QAAQ,CAER;AACF;AAEA,SAAS,qBAAqB,OAAiE;CAC7F,OACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,YAAY,YACzB,MAAM,QAAQ,KAAK,CAAC,CAAC,SAAS;AAElC"}