@tangle-network/agent-runtime 0.240.0 → 0.247.0

package/dist/profiles.d.ts

@@ -1,5 +1,5 @@
-import { hi as Validator } from "./types-CEma9LKR.js";
-import { _ as CoderTask, a as UiFindingSeverity, c as KnowledgeUpdate, d as ResearchSource, f as ResearchTask, g as researcherProfile, h as multiHarnessResearcherFanout, i as UiFindingScreenshot, l as MultiHarnessResearcherFanoutOptions, m as createResearcherValidator, n as UI_LENSES, o as UiLens, p as ResearcherProfileOptions, r as UiFinding, s as KnowledgeItem, t as UI_FINDING_SEVERITIES, u as ResearchOutput, v as coderTaskToPrompt } from "./substrate-iQOskmQ_.js";
+import { hi as Validator } from "./types-BUhz284C.js";
+import { _ as CoderTask, a as UiFindingSeverity, c as KnowledgeUpdate, d as ResearchSource, f as ResearchTask, g as researcherProfile, h as multiHarnessResearcherFanout, i as UiFindingScreenshot, l as MultiHarnessResearcherFanoutOptions, m as createResearcherValidator, n as UI_LENSES, o as UiLens, p as ResearcherProfileOptions, r as UiFinding, s as KnowledgeItem, t as UI_FINDING_SEVERITIES, u as ResearchOutput, v as coderTaskToPrompt } from "./substrate-CQ0hfewn.js";
 import { SandboxEvent } from "@tangle-network/sandbox";
 //#region src/audit/issue-writer.d.ts
 /** @experimental */

package/dist/{protected-model-port-D5gDcnrH.js → protected-model-port-Dhdi5mDl.js}

@@ -1,5 +1,5 @@
-import { a as canonicalCandidateBytes, f as sha256Bytes, o as canonicalCandidateDigest, u as immutableCandidateValue } from "./protected-redaction-wGo44k2K.js";
-import { E as candidateProfileAgentPaths, R as assertAgentCandidateExecutionRoots, f as sealAgentCandidateModelSettlement, i as candidateKnowledgeExecutionPaths, ot as assertExactObjectKeys, p as usdToNanos } from "./prepare-Dc30WRB0.js";
+import { a as canonicalCandidateBytes, f as sha256Bytes, o as canonicalCandidateDigest, u as immutableCandidateValue } from "./protected-redaction-Fn1ETfJ-.js";
+import { E as candidateProfileAgentPaths, R as assertAgentCandidateExecutionRoots, f as sealAgentCandidateModelSettlement, i as candidateKnowledgeExecutionPaths, ot as assertExactObjectKeys, p as usdToNanos } from "./prepare-CibQrhfi.js";
 import { posix } from "node:path";
 import { isDeepStrictEqual } from "node:util";
 //#region src/candidate-execution/exact-process-executor.ts
@@ -762,4 +762,4 @@ function record(value, label) {
 //#endregion
 export { exactProcessProviderAsCandidateExecutor as n, createProtectedAgentCandidateModelPort as t };
 
-//# sourceMappingURL=protected-model-port-D5gDcnrH.js.map
+//# sourceMappingURL=protected-model-port-Dhdi5mDl.js.map

package/dist/{protected-model-port-D5gDcnrH.js.map → protected-model-port-Dhdi5mDl.js.map}

@@ -1 +1 @@
-{"version":3,"file":"protected-model-port-D5gDcnrH.js","names":["isSha256Digest"],"sources":["../src/candidate-execution/exact-process-executor.ts","../src/candidate-execution/protected-model-port.ts"],"sourcesContent":["import { posix } from 'node:path'\nimport { isDeepStrictEqual } from 'node:util'\n\nimport type { TraceStore } from '@tangle-network/agent-eval'\nimport type { AgentCandidateTermination, Sha256Digest } from '@tangle-network/agent-interface'\nimport type {\n  AgentEnvironmentCapabilities,\n  AgentEnvironmentProvider,\n  AgentExactProcess,\n  AgentExactProcessEnvironment,\n  AgentExactProcessLaunch,\n  AgentExactProcessResources,\n  AgentExactProcessStatus,\n} from '@tangle-network/agent-interface/environment-provider'\nimport {\n  canonicalCandidateBytes,\n  canonicalCandidateDigest,\n  immutableCandidateValue,\n  sha256Bytes,\n} from './digest'\nimport { assertAgentCandidateExecutionRoots } from './execution-roots'\nimport {\n  CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV,\n  CANDIDATE_KNOWLEDGE_ROOT_ENV,\n  candidateKnowledgeExecutionPaths,\n} from './knowledge'\nimport {\n  candidateProfileAgentPaths,\n  PI_CANDIDATE_AGENT_DIR_ENV,\n  PI_CANDIDATE_SESSION_DIR_ENV,\n} from './profile'\nimport type {\n  AgentCandidateExecutorPort,\n  AgentCandidateExecutorRequest,\n  AgentCandidateExecutorStopRequest,\n} from './types'\n\nconst DEFAULT_PROVISION_TIMEOUT_MS = 120_000\nconst DEFAULT_RECOVERY_RETENTION_MS = 15 * 60_000\n\ninterface ExactProcessRunState {\n  environment: AgentExactProcessEnvironment\n  output?: Uint8Array\n  termination?: AgentCandidateTermination\n  runtimeTermination?: AgentCandidateTermination\n  trace?: {\n    runId: string\n    scenarioId: string\n    startedAt: number\n    deadlineAtMs: number\n    timeoutMs: number\n    tags: Record<string, string>\n    written: boolean\n  }\n}\n\nexport interface ExactProcessCandidateExecutorOptions {\n  provider: AgentEnvironmentProvider\n  resources: AgentExactProcessResources\n  provisionTimeoutMs?: number\n  recoveryRetentionMs?: number\n  providerOptions?: Record<string, unknown>\n}\n\n/** Adapt one neutral exact-process provider to Runtime's trusted candidate boundary. */\nexport function exactProcessProviderAsCandidateExecutor(\n  options: ExactProcessCandidateExecutorOptions,\n): AgentCandidateExecutorPort {\n  return new ExactProcessAgentCandidateExecutor(options)\n}\n\nclass ExactProcessAgentCandidateExecutor implements AgentCandidateExecutorPort {\n  private readonly states = new Map<string, ExactProcessRunState>()\n  private readonly exactProcess\n  private readonly resources: AgentExactProcessResources\n  private readonly provisionTimeoutMs: number\n  private readonly recoveryRetentionMs: number\n  private readonly providerOptions?: Record<string, unknown>\n  private capabilitiesPromise?: Promise<AgentEnvironmentCapabilities>\n\n  constructor(private readonly options: ExactProcessCandidateExecutorOptions) {\n    if (!options.provider.exactProcess) {\n      throw new Error(\n        `agent environment provider \"${options.provider.name}\" does not implement exact processes`,\n      )\n    }\n    this.exactProcess = options.provider.exactProcess\n    this.resources = exactResources(options.resources)\n    this.provisionTimeoutMs = positiveInteger(\n      options.provisionTimeoutMs ?? DEFAULT_PROVISION_TIMEOUT_MS,\n      'exact process provision timeout',\n    )\n    this.recoveryRetentionMs = positiveInteger(\n      options.recoveryRetentionMs ?? DEFAULT_RECOVERY_RETENTION_MS,\n      'exact process recovery retention',\n    )\n    this.providerOptions = options.providerOptions\n      ? immutableCandidateValue(options.providerOptions)\n      : undefined\n  }\n\n  async execute(\n    request: AgentCandidateExecutorRequest,\n    context: Parameters<AgentCandidateExecutorPort['execute']>[1],\n  ) {\n    assertSupportedRequest(request)\n    const outcome = request.benchmark.task.outcome\n    if (outcome.kind !== 'output') throw new Error('exact process executor requires an output task')\n    const network = request.executionPlan.value.material.model.access.network\n    const egress =\n      network.mode === 'disabled'\n        ? ({ mode: 'blocked' } as const)\n        : ({ mode: 'strict', allowDomains: [...network.domains] } as const)\n    await this.assertCapability(egress.mode)\n    context.signal.throwIfAborted()\n\n    const key = executionKey(request.executionId, request.executionPlan.value.digest)\n    if (this.states.has(key)) throw new Error('candidate execution environment is already active')\n    const image = exactImage(\n      request.executionPlan.value.material.container.image,\n      request.executionPlan.value.material.container.manifestDigest,\n    )\n    const maxLifetimeMs = environmentLifetimeMs(\n      request.hardLimits.timeoutMs,\n      this.recoveryRetentionMs,\n    )\n    const createMaterial = immutableCandidateValue({\n      kind: 'agent-candidate-exact-process-create',\n      provider: this.options.provider.name,\n      executionId: request.executionId,\n      executionPlanDigest: request.executionPlan.value.digest,\n      image,\n      egress,\n      maxLifetimeMs,\n      provisionTimeoutMs: this.provisionTimeoutMs,\n      resources: this.resources,\n      output: { mediaType: outcome.mediaType, maxBytes: outcome.maxBytes },\n      ...(this.providerOptions ? { providerOptions: this.providerOptions } : {}),\n    })\n    const createInputDigest = canonicalCandidateDigest(createMaterial)\n    const metadata = immutableCandidateValue({\n      kind: 'agent-candidate-execution',\n      provider: this.options.provider.name,\n      executionId: request.executionId,\n      executionPlanDigest: request.executionPlan.value.digest,\n      createInputDigest,\n      outputMediaType: outcome.mediaType,\n      outputMaxBytes: outcome.maxBytes,\n    })\n    const environment = await this.exactProcess.create({\n      image,\n      egress,\n      maxLifetimeMs,\n      provisionTimeoutMs: this.provisionTimeoutMs,\n      resources: this.resources,\n      metadata,\n      idempotencyKey: executionIdempotencyKey(\n        request.executionId,\n        request.executionPlan.value.digest,\n      ),\n      signal: context.signal,\n      ...(this.providerOptions ? { providerOptions: this.providerOptions } : {}),\n    })\n    try {\n      assertExecutionEnvironment(environment, metadata, this.options.provider.name)\n    } catch (error) {\n      try {\n        await environment.destroy()\n      } catch (cleanupError) {\n        throw new AggregateError(\n          [error, cleanupError],\n          'exact process validation and cleanup both failed',\n        )\n      }\n      throw error\n    }\n    const state: ExactProcessRunState = { environment }\n    this.states.set(key, state)\n\n    const existing = await environment.process.list()\n    if (existing.length !== 0) {\n      throw new Error('fresh candidate environment already contains a process')\n    }\n    await materializeRequest(environment, request, context.signal)\n    const launch = exactLaunch(request)\n    const startedAt = Date.now()\n    state.trace = {\n      runId: request.trace.runId,\n      scenarioId: request.benchmark.task.scenario.id,\n      startedAt,\n      deadlineAtMs: context.deadlineAtMs,\n      timeoutMs: request.hardLimits.timeoutMs,\n      tags: {\n        ...request.trace.tags,\n        environmentId: environment.id,\n        environmentProvider: environment.provider,\n      },\n      written: false,\n    }\n    const process = await environment.process.spawn(launch, { signal: context.signal })\n    const outputPromise = collectOutput(process, outcome.maxBytes)\n    void outputPromise.catch(() => undefined)\n    let cancellation: Promise<void> | undefined\n    let processExited = false\n    const cancel = () => {\n      if (!processExited) cancellation ??= stopProcess(process)\n    }\n    context.signal.addEventListener('abort', cancel, { once: true })\n    if (context.signal.aborted) cancel()\n    try {\n      const termination = await process.wait()\n      processExited = true\n      context.signal.removeEventListener('abort', cancel)\n      if (cancellation) await cancellation\n      const status = await process.status()\n      assertTerminalStatus(status, termination)\n      state.output = await awaitOutput(outputPromise, context.signal, context.deadlineAtMs)\n      state.termination = termination\n      await appendExactProcessTrace(state, context.traceStore, status)\n      return { executionId: request.executionId, termination }\n    } finally {\n      context.signal.removeEventListener('abort', cancel)\n    }\n  }\n\n  async stop(\n    request: AgentCandidateExecutorStopRequest,\n    context: Parameters<AgentCandidateExecutorPort['stop']>[1],\n  ): Promise<{ readonly stopped: true }> {\n    await this.assertCapability()\n    context.signal.throwIfAborted()\n    const environment = await this.resolve(request, true)\n    if (!environment) return { stopped: true }\n    let statuses = await environment.process.list()\n    if (statuses.length > 1) {\n      throw new Error('candidate exact process environment contains more than one process')\n    }\n    const status = statuses[0]\n    if (status?.running) {\n      const process = await environment.process.get(status.pid)\n      if (!process) throw new Error('candidate environment lost its running process handle')\n      await stopProcess(process)\n    }\n    context.signal.throwIfAborted()\n    statuses = await environment.process.list()\n    if (statuses.some((entry) => entry.running)) {\n      throw new Error('candidate exact process termination is not proven')\n    }\n    const finalStatus = statuses[0]\n    if (finalStatus) assertTerminalStatus(finalStatus)\n    const state = this.states.get(executionKey(request.executionId, request.executionPlanDigest))\n    if (state) {\n      state.termination = finalStatus?.termination ?? state.termination\n      if (context.reason === 'timeout' && state.trace) {\n        state.runtimeTermination = {\n          kind: 'timeout',\n          timeoutMs: state.trace.timeoutMs,\n        }\n      }\n      await appendExactProcessTrace(state, context.traceStore, finalStatus)\n    }\n    return { stopped: true }\n  }\n\n  async capture(\n    request: AgentCandidateExecutorStopRequest,\n    context: Parameters<AgentCandidateExecutorPort['capture']>[1],\n  ) {\n    await this.assertCapability()\n    context.signal.throwIfAborted()\n    const environment = await this.resolve(request, false)\n    const statuses = await environment.process.list()\n    const status = statuses[0]\n    if (statuses.length !== 1 || !status || status.running) {\n      throw new Error('candidate environment must contain one stopped process before capture')\n    }\n    assertTerminalStatus(status)\n    const process = await environment.process.get(status.pid)\n    if (!process) throw new Error('candidate environment lost its captured process handle')\n    const currentStatus = await process.status()\n    assertTerminalStatus(currentStatus, status.termination)\n    const state = this.states.get(executionKey(request.executionId, request.executionPlanDigest))\n    const output =\n      state?.output ??\n      (await awaitOutput(\n        collectOutput(process, outputSpec(environment).maxBytes),\n        context.signal,\n        Date.now() + this.provisionTimeoutMs,\n      ))\n    context.signal.throwIfAborted()\n    const evidence = canonicalCandidateBytes({\n      kind: 'agent-candidate-exact-process-capture',\n      provider: environment.provider,\n      environmentId: environment.id,\n      executionId: request.executionId,\n      executionPlanDigest: request.executionPlanDigest,\n      createInputDigest: environment.metadata?.createInputDigest,\n      process: {\n        pid: status.pid,\n        exitCode: status.exitCode,\n        ...(status.exitSignal ? { exitSignal: status.exitSignal } : {}),\n        termination: status.termination,\n      },\n      ...(state?.runtimeTermination ? { runtimeTermination: state.runtimeTermination } : {}),\n      output: { sha256: sha256Bytes(output), byteLength: output.byteLength },\n    })\n    return {\n      taskOutcome: { kind: 'output' as const, bytes: output },\n      evidence,\n    }\n  }\n\n  async dispose(\n    request: AgentCandidateExecutorStopRequest,\n    context: { signal: AbortSignal },\n  ): Promise<{ readonly disposed: true }> {\n    await this.assertCapability()\n    context.signal.throwIfAborted()\n    const environment = await this.resolve(request, true)\n    if (!environment) return { disposed: true }\n    let destroyError: unknown\n    try {\n      await environment.destroy()\n    } catch (error) {\n      destroyError = error\n    }\n    const remaining = await this.exactProcess.get(environment.id)\n    if (remaining) {\n      throw new Error('exact process environment disposal is not proven', { cause: destroyError })\n    }\n    context.signal.throwIfAborted()\n    this.states.delete(executionKey(request.executionId, request.executionPlanDigest))\n    return { disposed: true }\n  }\n\n  private async assertCapability(mode?: 'blocked' | 'strict'): Promise<void> {\n    const pending =\n      this.capabilitiesPromise ?? Promise.resolve(this.options.provider.capabilities())\n    this.capabilitiesPromise = pending\n    let capabilities: AgentEnvironmentCapabilities\n    try {\n      capabilities = await pending\n    } catch (error) {\n      if (this.capabilitiesPromise === pending) this.capabilitiesPromise = undefined\n      throw error\n    }\n    const exact = capabilities.exactProcess\n    if (!exact) {\n      throw new Error(\n        `agent environment provider \"${this.options.provider.name}\" does not declare exact process support`,\n      )\n    }\n    if (mode && !exact.egress.includes(mode)) {\n      throw new Error(\n        `agent environment provider \"${this.options.provider.name}\" does not declare ${mode} exact egress`,\n      )\n    }\n  }\n\n  private async resolve(\n    request: AgentCandidateExecutorStopRequest,\n    missingIsDeleted: false,\n  ): Promise<AgentExactProcessEnvironment>\n  private async resolve(\n    request: AgentCandidateExecutorStopRequest,\n    missingIsDeleted: true,\n  ): Promise<AgentExactProcessEnvironment | undefined>\n  private async resolve(\n    request: AgentCandidateExecutorStopRequest,\n    missingIsDeleted: boolean,\n  ): Promise<AgentExactProcessEnvironment | undefined> {\n    const key = executionKey(request.executionId, request.executionPlanDigest)\n    const active = this.states.get(key)?.environment\n    if (active) return active\n    const metadata = {\n      kind: 'agent-candidate-execution',\n      provider: this.options.provider.name,\n      executionId: request.executionId,\n      executionPlanDigest: request.executionPlanDigest,\n    }\n    const listed = await this.exactProcess.list({\n      metadata,\n      ...(this.providerOptions ? { providerOptions: this.providerOptions } : {}),\n    })\n    const matches = listed.filter(\n      (environment) =>\n        environment.provider === this.options.provider.name &&\n        Object.entries(metadata).every(([name, value]) =>\n          isDeepStrictEqual(environment.metadata?.[name], value),\n        ),\n    )\n    if (matches.length > 1) {\n      throw new Error('multiple exact process environments match one candidate execution')\n    }\n    const environment = matches[0]\n    if (!environment) {\n      if (missingIsDeleted) return undefined\n      throw new Error('candidate exact process evidence is unavailable')\n    }\n    if (!isSha256Digest(environment.metadata?.createInputDigest)) {\n      throw new Error('candidate exact process create-input digest is unavailable')\n    }\n    this.states.set(key, { environment })\n    return environment\n  }\n}\n\nasync function appendExactProcessTrace(\n  state: ExactProcessRunState,\n  traceStore: TraceStore,\n  status?: AgentExactProcessStatus,\n): Promise<void> {\n  const trace = state.trace\n  if (!trace || trace.written) return\n  const endedAt = Math.max(trace.startedAt, Math.min(Date.now(), trace.deadlineAtMs))\n  const termination = state.runtimeTermination ?? state.termination ?? status?.termination\n  await traceStore.appendRun({\n    runId: trace.runId,\n    scenarioId: trace.scenarioId,\n    startedAt: trace.startedAt,\n    endedAt,\n    status: termination?.kind === 'exit' && termination.exitCode === 0 ? 'completed' : 'failed',\n    tags: trace.tags,\n  })\n  trace.written = true\n}\n\nfunction assertSupportedRequest(request: AgentCandidateExecutorRequest): void {\n  if (request.benchmark.task.outcome.kind !== 'output') {\n    throw new Error(\n      'exact process candidate executor does not support workspace outcomes; use Pier',\n    )\n  }\n  if (request.executionPlan.value.material.codeKind !== 'disabled' || request.inputs.candidate) {\n    throw new Error('exact process candidate executor does not support code workspaces; use Pier')\n  }\n  if (request.memory.mode !== 'disabled') {\n    throw new Error('exact process candidate executor does not support isolated memory')\n  }\n  const mediaType = request.benchmark.task.outcome.mediaType.toLowerCase()\n  if (\n    !(\n      mediaType.startsWith('text/') ||\n      mediaType === 'application/json' ||\n      mediaType.endsWith('+json')\n    )\n  ) {\n    throw new Error('exact process candidate executor supports only UTF-8 text and JSON outputs')\n  }\n  if (!posix.isAbsolute(request.launch.executable) && !request.launch.env.PATH?.trim()) {\n    throw new Error('exact process candidate executable must be absolute or declare a signed PATH')\n  }\n  if (!request.roots) throw new Error('candidate execution roots are missing')\n  assertAgentCandidateExecutionRoots(request.roots)\n}\n\nasync function materializeRequest(\n  environment: AgentExactProcessEnvironment,\n  request: AgentCandidateExecutorRequest,\n  signal: AbortSignal,\n): Promise<void> {\n  assertAgentCandidateExecutionRoots(request.roots)\n  const knowledgePaths = assertKnowledgeExecutionBinding(request)\n  for (const file of request.inputs.task.files) {\n    await environment.writeFile(beneath(request.roots.taskRoot, file.path), file.bytes, {\n      mode: file.mode,\n      signal,\n    })\n  }\n  for (const file of request.inputs.profile.files) {\n    await environment.writeFile(profileFileExecutionPath(request, file), file.bytes, {\n      mode: file.mode,\n      signal,\n    })\n  }\n  if (request.knowledge && knowledgePaths) {\n    for (const file of request.knowledge.files) {\n      await environment.writeFile(beneath(knowledgePaths.root, file.path), file.bytes, {\n        mode: file.mode,\n        signal,\n      })\n    }\n    if (request.knowledge.retrievalConfig && knowledgePaths.retrievalConfig) {\n      await environment.writeFile(\n        knowledgePaths.retrievalConfig,\n        request.knowledge.retrievalConfig,\n        { mode: 0o644, signal },\n      )\n    }\n  }\n  if (request.instruction.delivery.kind === 'utf8-file') {\n    await environment.writeFile(request.instruction.delivery.path, request.instruction.bytes, {\n      mode: 0o644,\n      signal,\n    })\n  }\n}\n\nfunction assertKnowledgeExecutionBinding(\n  request: AgentCandidateExecutorRequest,\n): ReturnType<typeof candidateKnowledgeExecutionPaths> | undefined {\n  const knowledge = request.knowledge\n  if (!knowledge) {\n    if (\n      request.launch.env[CANDIDATE_KNOWLEDGE_ROOT_ENV] !== undefined ||\n      request.launch.env[CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV] !== undefined\n    ) {\n      throw new Error('candidate launch declares knowledge paths without verified knowledge')\n    }\n    return undefined\n  }\n  const paths = candidateKnowledgeExecutionPaths(\n    request.roots.taskRoot,\n    knowledge.retrievalConfig !== undefined,\n  )\n  if (\n    request.launch.env[CANDIDATE_KNOWLEDGE_ROOT_ENV] !== paths.root ||\n    request.launch.env[CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV] !== paths.retrievalConfig\n  ) {\n    throw new Error('candidate knowledge paths do not match the signed launch environment')\n  }\n  const reserved = [paths.root, paths.retrievalConfig].filter(\n    (value): value is string => value !== undefined,\n  )\n  const otherFiles = [\n    ...request.inputs.task.files.map((file) => beneath(request.roots.taskRoot, file.path)),\n    ...request.inputs.profile.files.map((file) => profileFileExecutionPath(request, file)),\n    ...(request.instruction.delivery.kind === 'utf8-file'\n      ? [request.instruction.delivery.path]\n      : []),\n  ]\n  if (\n    otherFiles.some((path) =>\n      reserved.some(\n        (reservedPath) =>\n          path === reservedPath ||\n          path.startsWith(`${reservedPath}/`) ||\n          reservedPath.startsWith(`${path}/`),\n      ),\n    )\n  ) {\n    throw new Error('candidate knowledge paths overlap other execution inputs')\n  }\n  return paths\n}\n\nfunction profileFileExecutionPath(\n  request: AgentCandidateExecutorRequest,\n  file: AgentCandidateExecutorRequest['inputs']['profile']['files'][number],\n): string {\n  const workspace = request.executionPlan.value.material.profile.targetWorkspace\n  const workspaceRoot = workspace === 'task' ? request.roots.taskRoot : request.roots.candidateRoot\n  if (!workspaceRoot) throw new Error('candidate profile targets a missing workspace')\n  if (file.root !== 'agent') return beneath(workspaceRoot, file.path)\n  const agentDir = profileAgentDirectory(request)\n  return beneath(agentDir, file.path)\n}\n\nfunction profileAgentDirectory(request: AgentCandidateExecutorRequest): string {\n  const paths = candidateProfileAgentPaths(\n    request.profilePlan.value.material,\n    request.roots.profileRoot,\n  )\n  if (!paths) throw new Error('candidate profile agent-root file is missing its private root')\n  if (\n    request.launch.env[PI_CANDIDATE_AGENT_DIR_ENV] !== paths.agentDir ||\n    request.launch.env[PI_CANDIDATE_SESSION_DIR_ENV] !== paths.sessionDir\n  ) {\n    throw new Error('candidate Pi agent-root files do not match the signed launch environment')\n  }\n  return paths.agentDir\n}\n\nfunction exactLaunch(request: AgentCandidateExecutorRequest): AgentExactProcessLaunch {\n  const instruction = new TextDecoder('utf-8', { fatal: true }).decode(request.instruction.bytes)\n  const base = {\n    executable: request.launch.executable,\n    args: request.launch.args,\n    cwd: request.launch.cwd,\n    env: request.launch.env,\n    timeoutMs: 0,\n  }\n  switch (request.instruction.delivery.kind) {\n    case 'argv-append':\n      return { ...base, args: [...base.args, instruction] }\n    case 'stdin-utf8':\n      return { ...base, stdin: instruction }\n    case 'utf8-file':\n      return base\n  }\n}\n\nasync function collectOutput(process: AgentExactProcess, maxBytes: number): Promise<Uint8Array> {\n  const chunks: Buffer[] = []\n  let byteLength = 0\n  for await (const chunk of process.stdout()) {\n    const bytes = Buffer.from(chunk, 'utf8')\n    byteLength += bytes.byteLength\n    if (byteLength > maxBytes) {\n      let stopError: unknown\n      try {\n        await stopProcess(process)\n      } catch (error) {\n        stopError = error\n      }\n      throw new Error(`candidate output exceeds its ${maxBytes}-byte maximum`, {\n        cause: stopError,\n      })\n    }\n    chunks.push(bytes)\n  }\n  return Uint8Array.from(Buffer.concat(chunks, byteLength))\n}\n\nasync function awaitOutput(\n  output: Promise<Uint8Array>,\n  signal: AbortSignal,\n  deadlineAtMs: number,\n): Promise<Uint8Array> {\n  signal.throwIfAborted()\n  const remainingMs = deadlineAtMs - Date.now()\n  if (remainingMs <= 0) throw new Error('candidate output deadline expired')\n  let timer: ReturnType<typeof setTimeout> | undefined\n  let onAbort: (() => void) | undefined\n  try {\n    return await Promise.race([\n      output,\n      new Promise<never>((_resolve, reject) => {\n        onAbort = () => reject(signal.reason ?? new Error('candidate output cancelled'))\n        signal.addEventListener('abort', onAbort, { once: true })\n        timer = setTimeout(\n          () => reject(new Error('candidate output deadline expired')),\n          remainingMs,\n        )\n      }),\n    ])\n  } finally {\n    if (onAbort) signal.removeEventListener('abort', onAbort)\n    if (timer) clearTimeout(timer)\n  }\n}\n\nasync function stopProcess(process: AgentExactProcess): Promise<void> {\n  const before = await process.status()\n  if (!before.running) return\n  try {\n    await process.kill()\n  } catch (error) {\n    if ((await process.status()).running) throw error\n  }\n  const termination = await process.wait()\n  assertTerminalStatus(await process.status(), termination)\n}\n\nfunction assertTerminalStatus(\n  status: AgentExactProcessStatus,\n  expected?: AgentCandidateTermination,\n): asserts status is AgentExactProcessStatus & { termination: AgentCandidateTermination } {\n  if (status.running || !status.termination) {\n    throw new Error('exact process returned no terminal reason after exit')\n  }\n  if (expected && !isDeepStrictEqual(status.termination, expected)) {\n    throw new Error('exact process wait and status returned different terminal reasons')\n  }\n}\n\nfunction assertExecutionEnvironment(\n  environment: AgentExactProcessEnvironment,\n  metadata: Record<string, unknown>,\n  providerName: string,\n): void {\n  if (!environment.id || environment.provider !== providerName) {\n    throw new Error('exact process provider returned the wrong environment identity')\n  }\n  if (\n    !Object.entries(metadata).every(([name, value]) =>\n      isDeepStrictEqual(environment.metadata?.[name], value),\n    )\n  ) {\n    throw new Error('exact process provider did not persist candidate execution metadata')\n  }\n}\n\nfunction outputSpec(environment: AgentExactProcessEnvironment): { maxBytes: number } {\n  const maxBytes = environment.metadata?.outputMaxBytes\n  if (!Number.isSafeInteger(maxBytes) || Number(maxBytes) < 1) {\n    throw new Error('candidate exact process output bound is unavailable')\n  }\n  return { maxBytes: Number(maxBytes) }\n}\n\nfunction executionKey(executionId: string, executionPlanDigest: Sha256Digest): string {\n  return `${executionId}\\0${executionPlanDigest}`\n}\n\nfunction executionIdempotencyKey(executionId: string, executionPlanDigest: Sha256Digest): string {\n  return `candidate-${canonicalCandidateDigest({\n    kind: 'agent-candidate-execution-identity',\n    executionId,\n    executionPlanDigest,\n  }).slice('sha256:'.length)}`\n}\n\nfunction exactImage(image: string, manifestDigest: Sha256Digest): string {\n  if (isSha256Digest(image)) {\n    if (image !== manifestDigest) {\n      throw new Error('candidate container image conflicts with its resolved manifest')\n    }\n    return image\n  }\n  const marker = image.lastIndexOf('@')\n  if (marker < 0) return `${image}@${manifestDigest}`\n  if (image.slice(marker + 1) !== manifestDigest) {\n    throw new Error('candidate container image conflicts with its resolved manifest')\n  }\n  return image\n}\n\nfunction environmentLifetimeMs(timeoutMs: number, retentionMs: number): number {\n  const total = positiveInteger(timeoutMs, 'candidate execution timeout') + retentionMs\n  if (!Number.isSafeInteger(total)) throw new Error('candidate environment lifetime is too large')\n  return Math.ceil(total / 1_000) * 1_000\n}\n\nfunction exactResources(resources: AgentExactProcessResources): AgentExactProcessResources {\n  if (!Number.isFinite(resources.cpu) || resources.cpu <= 0) {\n    throw new Error('exact process CPU must be positive and finite')\n  }\n  return Object.freeze({\n    cpu: resources.cpu,\n    memoryMb: positiveInteger(resources.memoryMb, 'exact process memory'),\n    diskMb: positiveInteger(resources.diskMb, 'exact process disk'),\n  })\n}\n\nfunction positiveInteger(value: number, label: string): number {\n  if (!Number.isSafeInteger(value) || value < 1)\n    throw new Error(`${label} must be a positive integer`)\n  return value\n}\n\nfunction beneath(root: string, relativePath: string): string {\n  if (posix.isAbsolute(relativePath)) throw new Error('candidate input path must be relative')\n  const path = posix.normalize(relativePath)\n  if (path === '..' || path.startsWith('../')) {\n    throw new Error('candidate input path escapes its execution root')\n  }\n  return posix.join(root, path)\n}\n\nfunction isSha256Digest(value: unknown): value is Sha256Digest {\n  return typeof value === 'string' && /^sha256:[a-f0-9]{64}$/.test(value)\n}\n","import type {\n  AgentCandidateModelAccessNetwork,\n  AgentCandidateResolvedModel,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\n\nimport { canonicalCandidateDigest, immutableCandidateValue } from './digest'\nimport { assertExactObjectKeys } from './exact-object'\nimport { sealAgentCandidateModelSettlement, usdToNanos } from './model-settlement'\nimport type {\n  AgentCandidateModelLimits,\n  AgentCandidateModelPort,\n  AgentCandidateProtectedModelActivation,\n  AgentCandidateProtectedModelReservation,\n  AgentCandidateProtectedModelSettlement,\n} from './types'\n\nexport type AgentCandidateModelGrantReserveInput = Parameters<\n  AgentCandidateModelPort['reserveGrant']\n>[0]\nexport type AgentCandidateModelGrantActivateInput = Parameters<\n  AgentCandidateModelPort['activateGrant']\n>[0]\nexport type AgentCandidateModelGrantSettleInput = Parameters<\n  AgentCandidateModelPort['settleGrant']\n>[0]\n\n/** Secret-free response from the service's reservation endpoint. */\nexport type AgentCandidateModelGrantReservation = AgentCandidateProtectedModelReservation\n\n/**\n * Narrow transport contract for a service that owns scoped model credentials\n * and the authoritative per-call usage ledger.\n *\n * An HTTP client can bind these methods to control-plane endpoints. Keeping\n * transport out of the runtime prevents parent credentials, endpoint paths,\n * and retry policy from becoming part of the portable candidate contract.\n */\nexport interface AgentCandidateModelGrantClient {\n  reserve(input: AgentCandidateModelGrantReserveInput): Promise<AgentCandidateModelGrantReservation>\n  activate(\n    input: AgentCandidateModelGrantActivateInput,\n  ): Promise<AgentCandidateProtectedModelActivation>\n  settle(\n    input: AgentCandidateModelGrantSettleInput,\n  ): Promise<AgentCandidateProtectedModelSettlement>\n}\n\nexport interface CreateProtectedAgentCandidateModelPortOptions {\n  client: AgentCandidateModelGrantClient\n  /** Catalog/snapshot resolution stays separate from credential issuance. */\n  resolveModel: AgentCandidateModelPort['resolve']\n  /** The only public DNS name candidate processes may reach for inference. */\n  gatewayDomain: string\n  /** Exact environment names the activation endpoint must return, no more or fewer. */\n  activationEnvNames: readonly string[]\n}\n\ninterface RememberedReservation {\n  requestDigest: Sha256Digest\n  responseDigest: Sha256Digest\n  executionId: string\n  preparationId: string\n  grantDigest: Sha256Digest\n  expiresAtMs: number\n  resolved: AgentCandidateResolvedModel\n  limits: AgentCandidateModelLimits\n  maxCostUsdNanos: number\n  activation: 'reserved' | 'activating' | 'activated'\n  settlementDigest?: Sha256Digest\n  settlementReason?: AgentCandidateModelGrantSettleInput['reason']\n}\n\ninterface RememberedSettlement {\n  settlementDigest: Sha256Digest\n  settlementReason: AgentCandidateModelGrantSettleInput['reason']\n  expiresAtMs: number\n}\n\nconst MAX_RECENT_SETTLEMENTS = 4_096\nconst RECOVERED_SETTLEMENT_RETENTION_MS = 15 * 60 * 1_000\n\n/**\n * Bind a protected model-grant service to the immutable candidate runtime.\n *\n * The service remains the authority for expiry, admission, revocation, and\n * metering. This adapter independently checks every response before allowing\n * it to cross into candidate execution or durable receipt finalization.\n */\nexport function createProtectedAgentCandidateModelPort(\n  options: CreateProtectedAgentCandidateModelPortOptions,\n): AgentCandidateModelPort {\n  const gatewayDomain = assertGatewayDomain(options.gatewayDomain)\n  const activationEnvNames = exactEnvironmentNames(options.activationEnvNames)\n  const reservations = new Map<string, RememberedReservation>()\n  const expiredReservations = new Map<\n    string,\n    { state: RememberedReservation; retainedUntilMs: number }\n  >()\n  const recentSettlements = new Map<string, RememberedSettlement>()\n\n  return {\n    resolve: async (input) => {\n      const request = immutableCandidateValue(input)\n      const resolved = validateResolvedModel(await options.resolveModel(request), request)\n      return immutableCandidateValue(resolved)\n    },\n\n    reserveGrant: async (input) => {\n      pruneExpiredState(reservations, expiredReservations, recentSettlements, Date.now())\n      const request = immutableCandidateValue(input)\n      validateReserveInput(request)\n      const requestDigest = canonicalCandidateDigest(request)\n      const key = reservationKey(request.executionId, request.preparationId)\n      if (recentSettlements.has(key)) {\n        throw new Error('protected model reservation is already settled')\n      }\n      const expired = expiredReservations.get(key)\n      if (expired) throw new Error('protected model reservation has expired')\n      const previous = reservations.get(key)\n      if (previous && previous.requestDigest !== requestDigest) {\n        throw new Error('protected model reservation retry changed immutable input')\n      }\n\n      const reservation = validateReservation(\n        await options.client.reserve(request),\n        request,\n        gatewayDomain,\n      )\n      const responseDigest = canonicalCandidateDigest(reservation)\n      if (recentSettlements.has(key)) {\n        throw new Error('protected model reservation completed after the grant was settled')\n      }\n      const recorded = previous ?? reservations.get(key)\n      if (recorded && recorded.requestDigest !== requestDigest) {\n        throw new Error('protected model reservation retry changed immutable input')\n      }\n      if (recorded && recorded.responseDigest !== responseDigest) {\n        throw new Error('protected model reservation retry returned different evidence')\n      }\n      if (!recorded) {\n        reservations.set(key, {\n          requestDigest,\n          responseDigest,\n          executionId: request.executionId,\n          preparationId: request.preparationId,\n          grantDigest: reservation.digest,\n          expiresAtMs: request.expiresAtMs,\n          resolved: immutableCandidateValue(request.resolved),\n          limits: immutableCandidateValue(request.limits),\n          maxCostUsdNanos: usdToNanos(request.limits.maxCostUsd, 'reserved maxCostUsd'),\n          activation: 'reserved',\n        })\n      }\n      return reservation\n    },\n\n    activateGrant: async (input) => {\n      pruneExpiredState(reservations, expiredReservations, recentSettlements, Date.now())\n      const request = immutableCandidateValue(input)\n      const key = reservationKey(request.executionId, request.preparationId)\n      if (recentSettlements.has(key)) throw new Error('protected model grant is already settled')\n      const state = reservations.get(key)\n      if (!state && expiredReservations.has(key)) {\n        throw new Error('protected model grant reservation has expired')\n      }\n      if (!state) throw new Error('protected model grant was not reserved by this port')\n      assertGrantIdentity(state, request)\n      if (state.settlementDigest) throw new Error('protected model grant is already settled')\n      if (state.activation !== 'reserved') {\n        throw new Error('protected model grant activation is single-use')\n      }\n      if (!Number.isSafeInteger(request.deadlineAtMs) || request.deadlineAtMs <= 0) {\n        throw new Error('protected model activation deadline must be a positive safe integer')\n      }\n      if (request.deadlineAtMs <= Date.now()) {\n        throw new Error('protected model activation deadline must be in the future')\n      }\n      if (request.deadlineAtMs > state.expiresAtMs) {\n        throw new Error('protected model activation deadline exceeds the reserved expiry')\n      }\n      state.activation = 'activating'\n      try {\n        const activation = validateActivation(\n          await options.client.activate(request),\n          state.limits.maxModelCalls === 0 ? [] : activationEnvNames,\n        )\n        if (recentSettlements.has(key) || reservations.get(key) !== state) {\n          throw new Error('protected model grant settled while activation was in flight')\n        }\n        state.activation = 'activated'\n        return activation\n      } catch (error) {\n        state.activation = 'reserved'\n        throw error\n      }\n    },\n\n    settleGrant: async (input) => {\n      const now = Date.now()\n      pruneExpiredState(reservations, expiredReservations, recentSettlements, now)\n      const request = immutableCandidateValue(input)\n      const key = reservationKey(request.executionId, request.preparationId)\n      const state = reservations.get(key) ?? expiredReservations.get(key)?.state\n      if (state) assertGrantIdentity(state, request)\n      const remembered = state ?? recentSettlements.get(key)\n      if (remembered?.settlementReason && remembered.settlementReason !== request.reason) {\n        throw new Error('protected model settlement retry changed the termination reason')\n      }\n\n      const sealed = sealAgentCandidateModelSettlement(await options.client.settle(request), {\n        preparationId: request.preparationId,\n        grantDigest: request.grantDigest,\n        model: request.resolved.model,\n      })\n      if (state) assertWithinReservedLimits(sealed.usage, state)\n\n      const settlementDigest = canonicalCandidateDigest(sealed.value)\n      if (remembered?.settlementDigest && remembered.settlementDigest !== settlementDigest) {\n        throw new Error('protected model settlement retry returned a different final ledger')\n      }\n      if (remembered?.settlementReason && remembered.settlementReason !== request.reason) {\n        throw new Error('protected model settlement retry changed the termination reason')\n      }\n      const expiresAtMs = state?.expiresAtMs ?? now + RECOVERED_SETTLEMENT_RETENTION_MS\n      if (state) {\n        state.settlementDigest = settlementDigest\n        state.settlementReason = request.reason\n      }\n      reservations.delete(key)\n      expiredReservations.delete(key)\n      rememberSettlement(recentSettlements, key, {\n        settlementDigest,\n        settlementReason: request.reason,\n        expiresAtMs,\n      })\n      return sealed.value\n    },\n  }\n}\n\nfunction validateReserveInput(input: AgentCandidateModelGrantReserveInput): void {\n  if (!Number.isSafeInteger(input.expiresAtMs) || input.expiresAtMs <= 0) {\n    throw new Error('protected model reservation expiry must be a positive safe integer')\n  }\n  if (input.expiresAtMs <= Date.now()) {\n    throw new Error('protected model reservation expiry must be in the future')\n  }\n  for (const [name, value] of [\n    ['maxModelCalls', input.limits.maxModelCalls],\n    ['maxInputTokens', input.limits.maxInputTokens],\n    ['maxOutputTokens', input.limits.maxOutputTokens],\n    ['maxTotalTokens', input.limits.maxTotalTokens],\n  ] as const) {\n    if (value === undefined) continue\n    if (!Number.isSafeInteger(value) || value < 0) {\n      throw new Error(`protected model reservation ${name} must be a nonnegative safe integer`)\n    }\n  }\n  usdToNanos(input.limits.maxCostUsd, 'reserved maxCostUsd')\n}\n\nfunction validateReservation(\n  value: unknown,\n  expected: AgentCandidateModelGrantReserveInput,\n  gatewayDomain: string,\n): AgentCandidateModelGrantReservation {\n  const source = exactRecord(\n    value,\n    ['preparationId', 'digest', 'expiresAtMs', 'enforcedLimits', 'network'],\n    'protected model reservation response',\n  )\n  if (source.preparationId !== expected.preparationId) {\n    throw new Error('protected model reservation response changed preparation identity')\n  }\n  if (!isSha256Digest(source.digest)) {\n    throw new Error('protected model reservation response has an invalid digest')\n  }\n  if (source.expiresAtMs !== expected.expiresAtMs) {\n    throw new Error('protected model reservation response changed expiry')\n  }\n  exactRecord(\n    source.enforcedLimits,\n    modelLimitKeys(expected.limits),\n    'protected model reservation enforced limits',\n  )\n  if (\n    canonicalCandidateDigest(source.enforcedLimits) !== canonicalCandidateDigest(expected.limits)\n  ) {\n    throw new Error('protected model reservation response changed enforced limits')\n  }\n\n  const network = validateReservationNetwork(\n    source.network,\n    expected.limits.maxModelCalls,\n    gatewayDomain,\n  )\n  return immutableCandidateValue({\n    preparationId: source.preparationId,\n    digest: source.digest,\n    expiresAtMs: source.expiresAtMs,\n    enforcedLimits: source.enforcedLimits,\n    network,\n  }) as AgentCandidateModelGrantReservation\n}\n\nfunction validateReservationNetwork(\n  value: unknown,\n  maxModelCalls: number,\n  gatewayDomain: string,\n): AgentCandidateModelAccessNetwork {\n  if (maxModelCalls === 0) {\n    const source = exactRecord(value, ['mode'], 'protected model reservation network')\n    if (source.mode !== 'disabled') {\n      throw new Error('zero-call protected model reservation must disable gateway access')\n    }\n    return { mode: 'disabled' }\n  }\n\n  const source = exactRecord(value, ['mode', 'domains'], 'protected model reservation network')\n  if (source.mode !== 'gateway-only') {\n    throw new Error('protected model reservation must allow only its model gateway')\n  }\n  if (\n    !Array.isArray(source.domains) ||\n    source.domains.length !== 1 ||\n    source.domains[0] !== gatewayDomain\n  ) {\n    throw new Error('protected model reservation returned an unexpected gateway domain')\n  }\n  return { mode: 'gateway-only', domains: [gatewayDomain] }\n}\n\nfunction validateActivation(\n  value: unknown,\n  expectedNames: readonly string[],\n): AgentCandidateProtectedModelActivation {\n  const source = exactRecord(value, ['env'], 'protected model activation response')\n  const env = record(source.env, 'protected model activation environment')\n  const actualNames = Object.keys(env).sort()\n  if (\n    actualNames.length !== expectedNames.length ||\n    actualNames.some((name, index) => name !== expectedNames[index])\n  ) {\n    throw new Error('protected model activation returned unexpected environment names')\n  }\n  const detached: Record<string, string> = Object.create(null) as Record<string, string>\n  for (const name of expectedNames) {\n    const value = env[name]\n    if (typeof value !== 'string' || value.length < 8 || value.length > 65_536) {\n      throw new Error(`protected model activation ${name} must be a non-empty protected value`)\n    }\n    detached[name] = value\n  }\n  return Object.freeze({ env: Object.freeze(detached) })\n}\n\nfunction validateResolvedModel(\n  value: unknown,\n  expected: Parameters<AgentCandidateModelPort['resolve']>[0],\n): AgentCandidateResolvedModel {\n  const source = exactRecord(\n    value,\n    ['requested', 'provider', 'model', 'snapshot', 'reasoningEffort'],\n    'resolved candidate model',\n  )\n  if (source.requested !== expected.requested) {\n    throw new Error('model resolver changed the evaluator-owned request')\n  }\n  if (source.reasoningEffort !== expected.reasoningEffort) {\n    throw new Error('model resolver changed the evaluator-owned reasoning effort')\n  }\n  for (const name of ['requested', 'provider', 'model', 'snapshot'] as const) {\n    if (typeof source[name] !== 'string' || source[name].length === 0) {\n      throw new Error(`resolved candidate model ${name} must be non-empty`)\n    }\n  }\n  return source as unknown as AgentCandidateResolvedModel\n}\n\nfunction assertGrantIdentity(\n  expected: RememberedReservation,\n  actual: AgentCandidateModelGrantActivateInput | AgentCandidateModelGrantSettleInput,\n): void {\n  if (\n    actual.executionId !== expected.executionId ||\n    actual.preparationId !== expected.preparationId ||\n    actual.grantDigest !== expected.grantDigest ||\n    canonicalCandidateDigest(actual.resolved) !== canonicalCandidateDigest(expected.resolved)\n  ) {\n    throw new Error('protected model grant input does not match its immutable reservation')\n  }\n}\n\nfunction assertWithinReservedLimits(\n  usage: {\n    modelCalls: number\n    inputTokens: number\n    outputTokens: number\n    costUsdNanos: number\n  },\n  reservation: RememberedReservation,\n): void {\n  for (const [name, actual, limit] of [\n    ['model calls', usage.modelCalls, reservation.limits.maxModelCalls],\n    ['input tokens', usage.inputTokens, reservation.limits.maxInputTokens],\n    ['output tokens', usage.outputTokens, reservation.limits.maxOutputTokens],\n    ['cost USD nanos', usage.costUsdNanos, reservation.maxCostUsdNanos],\n  ] as const) {\n    if (actual > limit) {\n      throw new Error(`protected model settlement ${name} ${actual} exceeds reserved ${limit}`)\n    }\n  }\n  const maxTotalTokens = reservation.limits.maxTotalTokens\n  if (maxTotalTokens !== undefined) {\n    const totalTokens = usage.inputTokens + usage.outputTokens\n    if (!Number.isSafeInteger(totalTokens)) {\n      throw new Error('protected model settlement total token usage is incomplete')\n    }\n    if (totalTokens > maxTotalTokens) {\n      throw new Error(\n        `protected model settlement total tokens ${totalTokens} exceeds reserved ${maxTotalTokens}`,\n      )\n    }\n  }\n}\n\nfunction modelLimitKeys(limits: AgentCandidateModelLimits): readonly string[] {\n  return limits.maxTotalTokens === undefined\n    ? ['maxModelCalls', 'maxInputTokens', 'maxOutputTokens', 'maxCostUsd']\n    : ['maxModelCalls', 'maxInputTokens', 'maxOutputTokens', 'maxTotalTokens', 'maxCostUsd']\n}\n\nfunction exactEnvironmentNames(values: readonly string[]): readonly string[] {\n  if (values.length === 0) {\n    throw new Error('protected model activation environment names must not be empty')\n  }\n  const names = [...values].sort()\n  if (new Set(names).size !== names.length) {\n    throw new Error('protected model activation environment names must be unique')\n  }\n  for (const name of names) {\n    if (\n      !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) ||\n      ['__proto__', 'constructor', 'prototype'].includes(name)\n    ) {\n      throw new Error(`protected model activation environment name is invalid: ${name}`)\n    }\n  }\n  return Object.freeze(names)\n}\n\nfunction assertGatewayDomain(value: string): string {\n  if (\n    value.length > 253 ||\n    value !== value.toLowerCase() ||\n    value.endsWith('.') ||\n    value.includes(':') ||\n    value === 'localhost' ||\n    value.endsWith('.localhost') ||\n    value === 'metadata.google' ||\n    value === 'metadata.google.internal'\n  ) {\n    throw new Error('protected model gateway must be an exact lowercase public DNS name')\n  }\n  const labels = value.split('.')\n  if (\n    labels.length < 2 ||\n    !labels.every(\n      (label) =>\n        label.length >= 1 && label.length <= 63 && /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(label),\n    ) ||\n    !/[a-z]/.test(labels.at(-1) ?? '')\n  ) {\n    throw new Error('protected model gateway must be an exact lowercase public DNS name')\n  }\n  return value\n}\n\nfunction reservationKey(executionId: string, preparationId: string): string {\n  return canonicalCandidateDigest({ executionId, preparationId })\n}\n\nfunction pruneExpiredState(\n  reservations: Map<string, RememberedReservation>,\n  expiredReservations: Map<string, { state: RememberedReservation; retainedUntilMs: number }>,\n  settlements: Map<string, RememberedSettlement>,\n  now: number,\n): void {\n  for (const [key, value] of reservations) {\n    if (value.expiresAtMs <= now) {\n      reservations.delete(key)\n      expiredReservations.set(key, {\n        state: value,\n        retainedUntilMs: now + RECOVERED_SETTLEMENT_RETENTION_MS,\n      })\n    }\n  }\n  for (const [key, value] of expiredReservations) {\n    if (value.retainedUntilMs <= now) expiredReservations.delete(key)\n  }\n  for (const [key, value] of settlements) {\n    if (value.expiresAtMs <= now) settlements.delete(key)\n  }\n}\n\nfunction rememberSettlement(\n  settlements: Map<string, RememberedSettlement>,\n  key: string,\n  value: RememberedSettlement,\n): void {\n  settlements.delete(key)\n  settlements.set(key, value)\n  while (settlements.size > MAX_RECENT_SETTLEMENTS) {\n    const oldest = settlements.keys().next().value\n    if (oldest === undefined) return\n    settlements.delete(oldest)\n  }\n}\n\nfunction isSha256Digest(value: unknown): value is Sha256Digest {\n  return typeof value === 'string' && /^sha256:[a-f0-9]{64}$/.test(value)\n}\n\nfunction exactRecord(\n  value: unknown,\n  keys: readonly string[],\n  label: string,\n): Record<string, unknown> {\n  const source = record(value, label)\n  assertExactObjectKeys(source, keys, label)\n  return source\n}\n\nfunction record(value: unknown, label: string): Record<string, unknown> {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error(`${label} must be an object`)\n  }\n  const prototype = Object.getPrototypeOf(value)\n  if (prototype !== Object.prototype && prototype !== null) {\n    throw new Error(`${label} must be a plain object`)\n  }\n  return value as Record<string, unknown>\n}\n"],"mappings":";;;;;AAqCA,MAAM,+BAA+B;AACrC,MAAM,gCAAgC,KAAK;;AA2B3C,SAAgB,wCACd,SAC4B;CAC5B,OAAO,IAAI,mCAAmC,OAAO;AACvD;AAEA,IAAM,qCAAN,MAA+E;CAShD;CAR7B,yBAA0B,IAAI,IAAkC;CAChE;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,SAAgE;EAA/C,KAAA,UAAA;EAC3B,IAAI,CAAC,QAAQ,SAAS,cACpB,MAAM,IAAI,MACR,+BAA+B,QAAQ,SAAS,KAAK,qCACvD;EAEF,KAAK,eAAe,QAAQ,SAAS;EACrC,KAAK,YAAY,eAAe,QAAQ,SAAS;EACjD,KAAK,qBAAqB,gBACxB,QAAQ,sBAAsB,8BAC9B,iCACF;EACA,KAAK,sBAAsB,gBACzB,QAAQ,uBAAuB,+BAC/B,kCACF;EACA,KAAK,kBAAkB,QAAQ,kBAC3B,wBAAwB,QAAQ,eAAe,IAC/C,KAAA;CACN;CAEA,MAAM,QACJ,SACA,SACA;EACA,uBAAuB,OAAO;EAC9B,MAAM,UAAU,QAAQ,UAAU,KAAK;EACvC,IAAI,QAAQ,SAAS,UAAU,MAAM,IAAI,MAAM,gDAAgD;EAC/F,MAAM,UAAU,QAAQ,cAAc,MAAM,SAAS,MAAM,OAAO;EAClE,MAAM,SACJ,QAAQ,SAAS,aACZ,EAAE,MAAM,UAAU,IAClB;GAAE,MAAM;GAAU,cAAc,CAAC,GAAG,QAAQ,OAAO;EAAE;EAC5D,MAAM,KAAK,iBAAiB,OAAO,IAAI;EACvC,QAAQ,OAAO,eAAe;EAE9B,MAAM,MAAM,aAAa,QAAQ,aAAa,QAAQ,cAAc,MAAM,MAAM;EAChF,IAAI,KAAK,OAAO,IAAI,GAAG,GAAG,MAAM,IAAI,MAAM,mDAAmD;EAC7F,MAAM,QAAQ,WACZ,QAAQ,cAAc,MAAM,SAAS,UAAU,OAC/C,QAAQ,cAAc,MAAM,SAAS,UAAU,cACjD;EACA,MAAM,gBAAgB,sBACpB,QAAQ,WAAW,WACnB,KAAK,mBACP;EAcA,MAAM,oBAAoB,yBAbH,wBAAwB;GAC7C,MAAM;GACN,UAAU,KAAK,QAAQ,SAAS;GAChC,aAAa,QAAQ;GACrB,qBAAqB,QAAQ,cAAc,MAAM;GACjD;GACA;GACA;GACA,oBAAoB,KAAK;GACzB,WAAW,KAAK;GAChB,QAAQ;IAAE,WAAW,QAAQ;IAAW,UAAU,QAAQ;GAAS;GACnE,GAAI,KAAK,kBAAkB,EAAE,iBAAiB,KAAK,gBAAgB,IAAI,CAAC;EAC1E,CACgE,CAAC;EACjE,MAAM,WAAW,wBAAwB;GACvC,MAAM;GACN,UAAU,KAAK,QAAQ,SAAS;GAChC,aAAa,QAAQ;GACrB,qBAAqB,QAAQ,cAAc,MAAM;GACjD;GACA,iBAAiB,QAAQ;GACzB,gBAAgB,QAAQ;EAC1B,CAAC;EACD,MAAM,cAAc,MAAM,KAAK,aAAa,OAAO;GACjD;GACA;GACA;GACA,oBAAoB,KAAK;GACzB,WAAW,KAAK;GAChB;GACA,gBAAgB,wBACd,QAAQ,aACR,QAAQ,cAAc,MAAM,MAC9B;GACA,QAAQ,QAAQ;GAChB,GAAI,KAAK,kBAAkB,EAAE,iBAAiB,KAAK,gBAAgB,IAAI,CAAC;EAC1E,CAAC;EACD,IAAI;GACF,2BAA2B,aAAa,UAAU,KAAK,QAAQ,SAAS,IAAI;EAC9E,SAAS,OAAO;GACd,IAAI;IACF,MAAM,YAAY,QAAQ;GAC5B,SAAS,cAAc;IACrB,MAAM,IAAI,eACR,CAAC,OAAO,YAAY,GACpB,kDACF;GACF;GACA,MAAM;EACR;EACA,MAAM,QAA8B,EAAE,YAAY;EAClD,KAAK,OAAO,IAAI,KAAK,KAAK;EAG1B,KAAI,MADmB,YAAY,QAAQ,KAAK,EAAA,CACnC,WAAW,GACtB,MAAM,IAAI,MAAM,wDAAwD;EAE1E,MAAM,mBAAmB,aAAa,SAAS,QAAQ,MAAM;EAC7D,MAAM,SAAS,YAAY,OAAO;EAClC,MAAM,YAAY,KAAK,IAAI;EAC3B,MAAM,QAAQ;GACZ,OAAO,QAAQ,MAAM;GACrB,YAAY,QAAQ,UAAU,KAAK,SAAS;GAC5C;GACA,cAAc,QAAQ;GACtB,WAAW,QAAQ,WAAW;GAC9B,MAAM;IACJ,GAAG,QAAQ,MAAM;IACjB,eAAe,YAAY;IAC3B,qBAAqB,YAAY;GACnC;GACA,SAAS;EACX;EACA,MAAM,UAAU,MAAM,YAAY,QAAQ,MAAM,QAAQ,EAAE,QAAQ,QAAQ,OAAO,CAAC;EAClF,MAAM,gBAAgB,cAAc,SAAS,QAAQ,QAAQ;EAC7D,cAAmB,YAAY,KAAA,CAAS;EACxC,IAAI;EACJ,IAAI,gBAAgB;EACpB,MAAM,eAAe;GACnB,IAAI,CAAC,eAAe,iBAAiB,YAAY,OAAO;EAC1D;EACA,QAAQ,OAAO,iBAAiB,SAAS,QAAQ,EAAE,MAAM,KAAK,CAAC;EAC/D,IAAI,QAAQ,OAAO,SAAS,OAAO;EACnC,IAAI;GACF,MAAM,cAAc,MAAM,QAAQ,KAAK;GACvC,gBAAgB;GAChB,QAAQ,OAAO,oBAAoB,SAAS,MAAM;GAClD,IAAI,cAAc,MAAM;GACxB,MAAM,SAAS,MAAM,QAAQ,OAAO;GACpC,qBAAqB,QAAQ,WAAW;GACxC,MAAM,SAAS,MAAM,YAAY,eAAe,QAAQ,QAAQ,QAAQ,YAAY;GACpF,MAAM,cAAc;GACpB,MAAM,wBAAwB,OAAO,QAAQ,YAAY,MAAM;GAC/D,OAAO;IAAE,aAAa,QAAQ;IAAa;GAAY;EACzD,UAAU;GACR,QAAQ,OAAO,oBAAoB,SAAS,MAAM;EACpD;CACF;CAEA,MAAM,KACJ,SACA,SACqC;EACrC,MAAM,KAAK,iBAAiB;EAC5B,QAAQ,OAAO,eAAe;EAC9B,MAAM,cAAc,MAAM,KAAK,QAAQ,SAAS,IAAI;EACpD,IAAI,CAAC,aAAa,OAAO,EAAE,SAAS,KAAK;EACzC,IAAI,WAAW,MAAM,YAAY,QAAQ,KAAK;EAC9C,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,MAAM,oEAAoE;EAEtF,MAAM,SAAS,SAAS;EACxB,IAAI,QAAQ,SAAS;GACnB,MAAM,UAAU,MAAM,YAAY,QAAQ,IAAI,OAAO,GAAG;GACxD,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,uDAAuD;GACrF,MAAM,YAAY,OAAO;EAC3B;EACA,QAAQ,OAAO,eAAe;EAC9B,WAAW,MAAM,YAAY,QAAQ,KAAK;EAC1C,IAAI,SAAS,MAAM,UAAU,MAAM,OAAO,GACxC,MAAM,IAAI,MAAM,mDAAmD;EAErE,MAAM,cAAc,SAAS;EAC7B,IAAI,aAAa,qBAAqB,WAAW;EACjD,MAAM,QAAQ,KAAK,OAAO,IAAI,aAAa,QAAQ,aAAa,QAAQ,mBAAmB,CAAC;EAC5F,IAAI,OAAO;GACT,MAAM,cAAc,aAAa,eAAe,MAAM;GACtD,IAAI,QAAQ,WAAW,aAAa,MAAM,OACxC,MAAM,qBAAqB;IACzB,MAAM;IACN,WAAW,MAAM,MAAM;GACzB;GAEF,MAAM,wBAAwB,OAAO,QAAQ,YAAY,WAAW;EACtE;EACA,OAAO,EAAE,SAAS,KAAK;CACzB;CAEA,MAAM,QACJ,SACA,SACA;EACA,MAAM,KAAK,iBAAiB;EAC5B,QAAQ,OAAO,eAAe;EAC9B,MAAM,cAAc,MAAM,KAAK,QAAQ,SAAS,KAAK;EACrD,MAAM,WAAW,MAAM,YAAY,QAAQ,KAAK;EAChD,MAAM,SAAS,SAAS;EACxB,IAAI,SAAS,WAAW,KAAK,CAAC,UAAU,OAAO,SAC7C,MAAM,IAAI,MAAM,uEAAuE;EAEzF,qBAAqB,MAAM;EAC3B,MAAM,UAAU,MAAM,YAAY,QAAQ,IAAI,OAAO,GAAG;EACxD,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,wDAAwD;EAEtF,qBAAqB,MADO,QAAQ,OAAO,GACP,OAAO,WAAW;EACtD,MAAM,QAAQ,KAAK,OAAO,IAAI,aAAa,QAAQ,aAAa,QAAQ,mBAAmB,CAAC;EAC5F,MAAM,SACJ,OAAO,UACN,MAAM,YACL,cAAc,SAAS,WAAW,WAAW,CAAC,CAAC,QAAQ,GACvD,QAAQ,QACR,KAAK,IAAI,IAAI,KAAK,kBACpB;EACF,QAAQ,OAAO,eAAe;EAC9B,MAAM,WAAW,wBAAwB;GACvC,MAAM;GACN,UAAU,YAAY;GACtB,eAAe,YAAY;GAC3B,aAAa,QAAQ;GACrB,qBAAqB,QAAQ;GAC7B,mBAAmB,YAAY,UAAU;GACzC,SAAS;IACP,KAAK,OAAO;IACZ,UAAU,OAAO;IACjB,GAAI,OAAO,aAAa,EAAE,YAAY,OAAO,WAAW,IAAI,CAAC;IAC7D,aAAa,OAAO;GACtB;GACA,GAAI,OAAO,qBAAqB,EAAE,oBAAoB,MAAM,mBAAmB,IAAI,CAAC;GACpF,QAAQ;IAAE,QAAQ,YAAY,MAAM;IAAG,YAAY,OAAO;GAAW;EACvE,CAAC;EACD,OAAO;GACL,aAAa;IAAE,MAAM;IAAmB,OAAO;GAAO;GACtD;EACF;CACF;CAEA,MAAM,QACJ,SACA,SACsC;EACtC,MAAM,KAAK,iBAAiB;EAC5B,QAAQ,OAAO,eAAe;EAC9B,MAAM,cAAc,MAAM,KAAK,QAAQ,SAAS,IAAI;EACpD,IAAI,CAAC,aAAa,OAAO,EAAE,UAAU,KAAK;EAC1C,IAAI;EACJ,IAAI;GACF,MAAM,YAAY,QAAQ;EAC5B,SAAS,OAAO;GACd,eAAe;EACjB;EAEA,IAAI,MADoB,KAAK,aAAa,IAAI,YAAY,EAAE,GAE1D,MAAM,IAAI,MAAM,oDAAoD,EAAE,OAAO,aAAa,CAAC;EAE7F,QAAQ,OAAO,eAAe;EAC9B,KAAK,OAAO,OAAO,aAAa,QAAQ,aAAa,QAAQ,mBAAmB,CAAC;EACjF,OAAO,EAAE,UAAU,KAAK;CAC1B;CAEA,MAAc,iBAAiB,MAA4C;EACzE,MAAM,UACJ,KAAK,uBAAuB,QAAQ,QAAQ,KAAK,QAAQ,SAAS,aAAa,CAAC;EAClF,KAAK,sBAAsB;EAC3B,IAAI;EACJ,IAAI;GACF,eAAe,MAAM;EACvB,SAAS,OAAO;GACd,IAAI,KAAK,wBAAwB,SAAS,KAAK,sBAAsB,KAAA;GACrE,MAAM;EACR;EACA,MAAM,QAAQ,aAAa;EAC3B,IAAI,CAAC,OACH,MAAM,IAAI,MACR,+BAA+B,KAAK,QAAQ,SAAS,KAAK,yCAC5D;EAEF,IAAI,QAAQ,CAAC,MAAM,OAAO,SAAS,IAAI,GACrC,MAAM,IAAI,MACR,+BAA+B,KAAK,QAAQ,SAAS,KAAK,qBAAqB,KAAK,cACtF;CAEJ;CAUA,MAAc,QACZ,SACA,kBACmD;EACnD,MAAM,MAAM,aAAa,QAAQ,aAAa,QAAQ,mBAAmB;EACzE,MAAM,SAAS,KAAK,OAAO,IAAI,GAAG,CAAC,EAAE;EACrC,IAAI,QAAQ,OAAO;EACnB,MAAM,WAAW;GACf,MAAM;GACN,UAAU,KAAK,QAAQ,SAAS;GAChC,aAAa,QAAQ;GACrB,qBAAqB,QAAQ;EAC/B;EAKA,MAAM,WAAU,MAJK,KAAK,aAAa,KAAK;GAC1C;GACA,GAAI,KAAK,kBAAkB,EAAE,iBAAiB,KAAK,gBAAgB,IAAI,CAAC;EAC1E,CAAC,EAAA,CACsB,QACpB,gBACC,YAAY,aAAa,KAAK,QAAQ,SAAS,QAC/C,OAAO,QAAQ,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,WACrC,kBAAkB,YAAY,WAAW,OAAO,KAAK,CACvD,CACJ;EACA,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MAAM,mEAAmE;EAErF,MAAM,cAAc,QAAQ;EAC5B,IAAI,CAAC,aAAa;GAChB,IAAI,kBAAkB,OAAO,KAAA;GAC7B,MAAM,IAAI,MAAM,iDAAiD;EACnE;EACA,IAAI,CAACA,iBAAe,YAAY,UAAU,iBAAiB,GACzD,MAAM,IAAI,MAAM,4DAA4D;EAE9E,KAAK,OAAO,IAAI,KAAK,EAAE,YAAY,CAAC;EACpC,OAAO;CACT;AACF;AAEA,eAAe,wBACb,OACA,YACA,QACe;CACf,MAAM,QAAQ,MAAM;CACpB,IAAI,CAAC,SAAS,MAAM,SAAS;CAC7B,MAAM,UAAU,KAAK,IAAI,MAAM,WAAW,KAAK,IAAI,KAAK,IAAI,GAAG,MAAM,YAAY,CAAC;CAClF,MAAM,cAAc,MAAM,sBAAsB,MAAM,eAAe,QAAQ;CAC7E,MAAM,WAAW,UAAU;EACzB,OAAO,MAAM;EACb,YAAY,MAAM;EAClB,WAAW,MAAM;EACjB;EACA,QAAQ,aAAa,SAAS,UAAU,YAAY,aAAa,IAAI,cAAc;EACnF,MAAM,MAAM;CACd,CAAC;CACD,MAAM,UAAU;AAClB;AAEA,SAAS,uBAAuB,SAA8C;CAC5E,IAAI,QAAQ,UAAU,KAAK,QAAQ,SAAS,UAC1C,MAAM,IAAI,MACR,gFACF;CAEF,IAAI,QAAQ,cAAc,MAAM,SAAS,aAAa,cAAc,QAAQ,OAAO,WACjF,MAAM,IAAI,MAAM,6EAA6E;CAE/F,IAAI,QAAQ,OAAO,SAAS,YAC1B,MAAM,IAAI,MAAM,mEAAmE;CAErF,MAAM,YAAY,QAAQ,UAAU,KAAK,QAAQ,UAAU,YAAY;CACvE,IACE,EACE,UAAU,WAAW,OAAO,KAC5B,cAAc,sBACd,UAAU,SAAS,OAAO,IAG5B,MAAM,IAAI,MAAM,4EAA4E;CAE9F,IAAI,CAAC,MAAM,WAAW,QAAQ,OAAO,UAAU,KAAK,CAAC,QAAQ,OAAO,IAAI,MAAM,KAAK,GACjF,MAAM,IAAI,MAAM,8EAA8E;CAEhG,IAAI,CAAC,QAAQ,OAAO,MAAM,IAAI,MAAM,uCAAuC;CAC3E,mCAAmC,QAAQ,KAAK;AAClD;AAEA,eAAe,mBACb,aACA,SACA,QACe;CACf,mCAAmC,QAAQ,KAAK;CAChD,MAAM,iBAAiB,gCAAgC,OAAO;CAC9D,KAAK,MAAM,QAAQ,QAAQ,OAAO,KAAK,OACrC,MAAM,YAAY,UAAU,QAAQ,QAAQ,MAAM,UAAU,KAAK,IAAI,GAAG,KAAK,OAAO;EAClF,MAAM,KAAK;EACX;CACF,CAAC;CAEH,KAAK,MAAM,QAAQ,QAAQ,OAAO,QAAQ,OACxC,MAAM,YAAY,UAAU,yBAAyB,SAAS,IAAI,GAAG,KAAK,OAAO;EAC/E,MAAM,KAAK;EACX;CACF,CAAC;CAEH,IAAI,QAAQ,aAAa,gBAAgB;EACvC,KAAK,MAAM,QAAQ,QAAQ,UAAU,OACnC,MAAM,YAAY,UAAU,QAAQ,eAAe,MAAM,KAAK,IAAI,GAAG,KAAK,OAAO;GAC/E,MAAM,KAAK;GACX;EACF,CAAC;EAEH,IAAI,QAAQ,UAAU,mBAAmB,eAAe,iBACtD,MAAM,YAAY,UAChB,eAAe,iBACf,QAAQ,UAAU,iBAClB;GAAE,MAAM;GAAO;EAAO,CACxB;CAEJ;CACA,IAAI,QAAQ,YAAY,SAAS,SAAS,aACxC,MAAM,YAAY,UAAU,QAAQ,YAAY,SAAS,MAAM,QAAQ,YAAY,OAAO;EACxF,MAAM;EACN;CACF,CAAC;AAEL;AAEA,SAAS,gCACP,SACiE;CACjE,MAAM,YAAY,QAAQ;CAC1B,IAAI,CAAC,WAAW;EACd,IACE,QAAQ,OAAO,IAAA,uCAAsC,KAAA,KACrD,QAAQ,OAAO,IAAA,mDAAkD,KAAA,GAEjE,MAAM,IAAI,MAAM,sEAAsE;EAExF;CACF;CACA,MAAM,QAAQ,iCACZ,QAAQ,MAAM,UACd,UAAU,oBAAoB,KAAA,CAChC;CACA,IACE,QAAQ,OAAO,IAAA,uCAAsC,MAAM,QAC3D,QAAQ,OAAO,IAAA,mDAAkD,MAAM,iBAEvE,MAAM,IAAI,MAAM,sEAAsE;CAExF,MAAM,WAAW,CAAC,MAAM,MAAM,MAAM,eAAe,CAAC,CAAC,QAClD,UAA2B,UAAU,KAAA,CACxC;CAQA,IACE;EAPA,GAAG,QAAQ,OAAO,KAAK,MAAM,KAAK,SAAS,QAAQ,QAAQ,MAAM,UAAU,KAAK,IAAI,CAAC;EACrF,GAAG,QAAQ,OAAO,QAAQ,MAAM,KAAK,SAAS,yBAAyB,SAAS,IAAI,CAAC;EACrF,GAAI,QAAQ,YAAY,SAAS,SAAS,cACtC,CAAC,QAAQ,YAAY,SAAS,IAAI,IAClC,CAAC;CAGI,CAAC,CAAC,MAAM,SACf,SAAS,MACN,iBACC,SAAS,gBACT,KAAK,WAAW,GAAG,aAAa,EAAE,KAClC,aAAa,WAAW,GAAG,KAAK,EAAE,CACtC,CACF,GAEA,MAAM,IAAI,MAAM,0DAA0D;CAE5E,OAAO;AACT;AAEA,SAAS,yBACP,SACA,MACQ;CAER,MAAM,gBADY,QAAQ,cAAc,MAAM,SAAS,QAAQ,oBAC3B,SAAS,QAAQ,MAAM,WAAW,QAAQ,MAAM;CACpF,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,+CAA+C;CACnF,IAAI,KAAK,SAAS,SAAS,OAAO,QAAQ,eAAe,KAAK,IAAI;CAElE,OAAO,QADU,sBAAsB,OACjB,GAAG,KAAK,IAAI;AACpC;AAEA,SAAS,sBAAsB,SAAgD;CAC7E,MAAM,QAAQ,2BACZ,QAAQ,YAAY,MAAM,UAC1B,QAAQ,MAAM,WAChB;CACA,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,+DAA+D;CAC3F,IACE,QAAQ,OAAO,IAAA,2BAAoC,MAAM,YACzD,QAAQ,OAAO,IAAA,mCAAsC,MAAM,YAE3D,MAAM,IAAI,MAAM,0EAA0E;CAE5F,OAAO,MAAM;AACf;AAEA,SAAS,YAAY,SAAiE;CACpF,MAAM,cAAc,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,QAAQ,YAAY,KAAK;CAC9F,MAAM,OAAO;EACX,YAAY,QAAQ,OAAO;EAC3B,MAAM,QAAQ,OAAO;EACrB,KAAK,QAAQ,OAAO;EACpB,KAAK,QAAQ,OAAO;EACpB,WAAW;CACb;CACA,QAAQ,QAAQ,YAAY,SAAS,MAArC;EACE,KAAK,eACH,OAAO;GAAE,GAAG;GAAM,MAAM,CAAC,GAAG,KAAK,MAAM,WAAW;EAAE;EACtD,KAAK,cACH,OAAO;GAAE,GAAG;GAAM,OAAO;EAAY;EACvC,KAAK,aACH,OAAO;CACX;AACF;AAEA,eAAe,cAAc,SAA4B,UAAuC;CAC9F,MAAM,SAAmB,CAAC;CAC1B,IAAI,aAAa;CACjB,WAAW,MAAM,SAAS,QAAQ,OAAO,GAAG;EAC1C,MAAM,QAAQ,OAAO,KAAK,OAAO,MAAM;EACvC,cAAc,MAAM;EACpB,IAAI,aAAa,UAAU;GACzB,IAAI;GACJ,IAAI;IACF,MAAM,YAAY,OAAO;GAC3B,SAAS,OAAO;IACd,YAAY;GACd;GACA,MAAM,IAAI,MAAM,gCAAgC,SAAS,gBAAgB,EACvE,OAAO,UACT,CAAC;EACH;EACA,OAAO,KAAK,KAAK;CACnB;CACA,OAAO,WAAW,KAAK,OAAO,OAAO,QAAQ,UAAU,CAAC;AAC1D;AAEA,eAAe,YACb,QACA,QACA,cACqB;CACrB,OAAO,eAAe;CACtB,MAAM,cAAc,eAAe,KAAK,IAAI;CAC5C,IAAI,eAAe,GAAG,MAAM,IAAI,MAAM,mCAAmC;CACzE,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,QACA,IAAI,SAAgB,UAAU,WAAW;GACvC,gBAAgB,OAAO,OAAO,0BAAU,IAAI,MAAM,4BAA4B,CAAC;GAC/E,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;GACxD,QAAQ,iBACA,uBAAO,IAAI,MAAM,mCAAmC,CAAC,GAC3D,WACF;EACF,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,SAAS,OAAO,oBAAoB,SAAS,OAAO;EACxD,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF;AAEA,eAAe,YAAY,SAA2C;CAEpE,IAAI,EAAC,MADgB,QAAQ,OAAO,EAAA,CACxB,SAAS;CACrB,IAAI;EACF,MAAM,QAAQ,KAAK;CACrB,SAAS,OAAO;EACd,KAAK,MAAM,QAAQ,OAAO,EAAA,CAAG,SAAS,MAAM;CAC9C;CACA,MAAM,cAAc,MAAM,QAAQ,KAAK;CACvC,qBAAqB,MAAM,QAAQ,OAAO,GAAG,WAAW;AAC1D;AAEA,SAAS,qBACP,QACA,UACwF;CACxF,IAAI,OAAO,WAAW,CAAC,OAAO,aAC5B,MAAM,IAAI,MAAM,sDAAsD;CAExE,IAAI,YAAY,CAAC,kBAAkB,OAAO,aAAa,QAAQ,GAC7D,MAAM,IAAI,MAAM,mEAAmE;AAEvF;AAEA,SAAS,2BACP,aACA,UACA,cACM;CACN,IAAI,CAAC,YAAY,MAAM,YAAY,aAAa,cAC9C,MAAM,IAAI,MAAM,gEAAgE;CAElF,IACE,CAAC,OAAO,QAAQ,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,WACtC,kBAAkB,YAAY,WAAW,OAAO,KAAK,CACvD,GAEA,MAAM,IAAI,MAAM,qEAAqE;AAEzF;AAEA,SAAS,WAAW,aAAiE;CACnF,MAAM,WAAW,YAAY,UAAU;CACvC,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,OAAO,QAAQ,IAAI,GACxD,MAAM,IAAI,MAAM,qDAAqD;CAEvE,OAAO,EAAE,UAAU,OAAO,QAAQ,EAAE;AACtC;AAEA,SAAS,aAAa,aAAqB,qBAA2C;CACpF,OAAO,GAAG,YAAY,IAAI;AAC5B;AAEA,SAAS,wBAAwB,aAAqB,qBAA2C;CAC/F,OAAO,aAAa,yBAAyB;EAC3C,MAAM;EACN;EACA;CACF,CAAC,CAAC,CAAC,MAAM,CAAgB;AAC3B;AAEA,SAAS,WAAW,OAAe,gBAAsC;CACvE,IAAIA,iBAAe,KAAK,GAAG;EACzB,IAAI,UAAU,gBACZ,MAAM,IAAI,MAAM,gEAAgE;EAElF,OAAO;CACT;CACA,MAAM,SAAS,MAAM,YAAY,GAAG;CACpC,IAAI,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG;CACnC,IAAI,MAAM,MAAM,SAAS,CAAC,MAAM,gBAC9B,MAAM,IAAI,MAAM,gEAAgE;CAElF,OAAO;AACT;AAEA,SAAS,sBAAsB,WAAmB,aAA6B;CAC7E,MAAM,QAAQ,gBAAgB,WAAW,6BAA6B,IAAI;CAC1E,IAAI,CAAC,OAAO,cAAc,KAAK,GAAG,MAAM,IAAI,MAAM,6CAA6C;CAC/F,OAAO,KAAK,KAAK,QAAQ,GAAK,IAAI;AACpC;AAEA,SAAS,eAAe,WAAmE;CACzF,IAAI,CAAC,OAAO,SAAS,UAAU,GAAG,KAAK,UAAU,OAAO,GACtD,MAAM,IAAI,MAAM,+CAA+C;CAEjE,OAAO,OAAO,OAAO;EACnB,KAAK,UAAU;EACf,UAAU,gBAAgB,UAAU,UAAU,sBAAsB;EACpE,QAAQ,gBAAgB,UAAU,QAAQ,oBAAoB;CAChE,CAAC;AACH;AAEA,SAAS,gBAAgB,OAAe,OAAuB;CAC7D,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAC1C,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CACvD,OAAO;AACT;AAEA,SAAS,QAAQ,MAAc,cAA8B;CAC3D,IAAI,MAAM,WAAW,YAAY,GAAG,MAAM,IAAI,MAAM,uCAAuC;CAC3F,MAAM,OAAO,MAAM,UAAU,YAAY;CACzC,IAAI,SAAS,QAAQ,KAAK,WAAW,KAAK,GACxC,MAAM,IAAI,MAAM,iDAAiD;CAEnE,OAAO,MAAM,KAAK,MAAM,IAAI;AAC9B;AAEA,SAASA,iBAAe,OAAuC;CAC7D,OAAO,OAAO,UAAU,YAAY,wBAAwB,KAAK,KAAK;AACxE;;;ACjqBA,MAAM,yBAAyB;AAC/B,MAAM,oCAAoC,MAAU;;;;;;;;AASpD,SAAgB,uCACd,SACyB;CACzB,MAAM,gBAAgB,oBAAoB,QAAQ,aAAa;CAC/D,MAAM,qBAAqB,sBAAsB,QAAQ,kBAAkB;CAC3E,MAAM,+BAAe,IAAI,IAAmC;CAC5D,MAAM,sCAAsB,IAAI,IAG9B;CACF,MAAM,oCAAoB,IAAI,IAAkC;CAEhE,OAAO;EACL,SAAS,OAAO,UAAU;GACxB,MAAM,UAAU,wBAAwB,KAAK;GAE7C,OAAO,wBADU,sBAAsB,MAAM,QAAQ,aAAa,OAAO,GAAG,OACtC,CAAC;EACzC;EAEA,cAAc,OAAO,UAAU;GAC7B,kBAAkB,cAAc,qBAAqB,mBAAmB,KAAK,IAAI,CAAC;GAClF,MAAM,UAAU,wBAAwB,KAAK;GAC7C,qBAAqB,OAAO;GAC5B,MAAM,gBAAgB,yBAAyB,OAAO;GACtD,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;GACrE,IAAI,kBAAkB,IAAI,GAAG,GAC3B,MAAM,IAAI,MAAM,gDAAgD;GAGlE,IADgB,oBAAoB,IAAI,GAC9B,GAAG,MAAM,IAAI,MAAM,yCAAyC;GACtE,MAAM,WAAW,aAAa,IAAI,GAAG;GACrC,IAAI,YAAY,SAAS,kBAAkB,eACzC,MAAM,IAAI,MAAM,2DAA2D;GAG7E,MAAM,cAAc,oBAClB,MAAM,QAAQ,OAAO,QAAQ,OAAO,GACpC,SACA,aACF;GACA,MAAM,iBAAiB,yBAAyB,WAAW;GAC3D,IAAI,kBAAkB,IAAI,GAAG,GAC3B,MAAM,IAAI,MAAM,mEAAmE;GAErF,MAAM,WAAW,YAAY,aAAa,IAAI,GAAG;GACjD,IAAI,YAAY,SAAS,kBAAkB,eACzC,MAAM,IAAI,MAAM,2DAA2D;GAE7E,IAAI,YAAY,SAAS,mBAAmB,gBAC1C,MAAM,IAAI,MAAM,+DAA+D;GAEjF,IAAI,CAAC,UACH,aAAa,IAAI,KAAK;IACpB;IACA;IACA,aAAa,QAAQ;IACrB,eAAe,QAAQ;IACvB,aAAa,YAAY;IACzB,aAAa,QAAQ;IACrB,UAAU,wBAAwB,QAAQ,QAAQ;IAClD,QAAQ,wBAAwB,QAAQ,MAAM;IAC9C,iBAAiB,WAAW,QAAQ,OAAO,YAAY,qBAAqB;IAC5E,YAAY;GACd,CAAC;GAEH,OAAO;EACT;EAEA,eAAe,OAAO,UAAU;GAC9B,kBAAkB,cAAc,qBAAqB,mBAAmB,KAAK,IAAI,CAAC;GAClF,MAAM,UAAU,wBAAwB,KAAK;GAC7C,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;GACrE,IAAI,kBAAkB,IAAI,GAAG,GAAG,MAAM,IAAI,MAAM,0CAA0C;GAC1F,MAAM,QAAQ,aAAa,IAAI,GAAG;GAClC,IAAI,CAAC,SAAS,oBAAoB,IAAI,GAAG,GACvC,MAAM,IAAI,MAAM,+CAA+C;GAEjE,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,qDAAqD;GACjF,oBAAoB,OAAO,OAAO;GAClC,IAAI,MAAM,kBAAkB,MAAM,IAAI,MAAM,0CAA0C;GACtF,IAAI,MAAM,eAAe,YACvB,MAAM,IAAI,MAAM,gDAAgD;GAElE,IAAI,CAAC,OAAO,cAAc,QAAQ,YAAY,KAAK,QAAQ,gBAAgB,GACzE,MAAM,IAAI,MAAM,qEAAqE;GAEvF,IAAI,QAAQ,gBAAgB,KAAK,IAAI,GACnC,MAAM,IAAI,MAAM,2DAA2D;GAE7E,IAAI,QAAQ,eAAe,MAAM,aAC/B,MAAM,IAAI,MAAM,iEAAiE;GAEnF,MAAM,aAAa;GACnB,IAAI;IACF,MAAM,aAAa,mBACjB,MAAM,QAAQ,OAAO,SAAS,OAAO,GACrC,MAAM,OAAO,kBAAkB,IAAI,CAAC,IAAI,kBAC1C;IACA,IAAI,kBAAkB,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,MAAM,OAC1D,MAAM,IAAI,MAAM,8DAA8D;IAEhF,MAAM,aAAa;IACnB,OAAO;GACT,SAAS,OAAO;IACd,MAAM,aAAa;IACnB,MAAM;GACR;EACF;EAEA,aAAa,OAAO,UAAU;GAC5B,MAAM,MAAM,KAAK,IAAI;GACrB,kBAAkB,cAAc,qBAAqB,mBAAmB,GAAG;GAC3E,MAAM,UAAU,wBAAwB,KAAK;GAC7C,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;GACrE,MAAM,QAAQ,aAAa,IAAI,GAAG,KAAK,oBAAoB,IAAI,GAAG,CAAC,EAAE;GACrE,IAAI,OAAO,oBAAoB,OAAO,OAAO;GAC7C,MAAM,aAAa,SAAS,kBAAkB,IAAI,GAAG;GACrD,IAAI,YAAY,oBAAoB,WAAW,qBAAqB,QAAQ,QAC1E,MAAM,IAAI,MAAM,iEAAiE;GAGnF,MAAM,SAAS,kCAAkC,MAAM,QAAQ,OAAO,OAAO,OAAO,GAAG;IACrF,eAAe,QAAQ;IACvB,aAAa,QAAQ;IACrB,OAAO,QAAQ,SAAS;GAC1B,CAAC;GACD,IAAI,OAAO,2BAA2B,OAAO,OAAO,KAAK;GAEzD,MAAM,mBAAmB,yBAAyB,OAAO,KAAK;GAC9D,IAAI,YAAY,oBAAoB,WAAW,qBAAqB,kBAClE,MAAM,IAAI,MAAM,oEAAoE;GAEtF,IAAI,YAAY,oBAAoB,WAAW,qBAAqB,QAAQ,QAC1E,MAAM,IAAI,MAAM,iEAAiE;GAEnF,MAAM,cAAc,OAAO,eAAe,MAAM;GAChD,IAAI,OAAO;IACT,MAAM,mBAAmB;IACzB,MAAM,mBAAmB,QAAQ;GACnC;GACA,aAAa,OAAO,GAAG;GACvB,oBAAoB,OAAO,GAAG;GAC9B,mBAAmB,mBAAmB,KAAK;IACzC;IACA,kBAAkB,QAAQ;IAC1B;GACF,CAAC;GACD,OAAO,OAAO;EAChB;CACF;AACF;AAEA,SAAS,qBAAqB,OAAmD;CAC/E,IAAI,CAAC,OAAO,cAAc,MAAM,WAAW,KAAK,MAAM,eAAe,GACnE,MAAM,IAAI,MAAM,oEAAoE;CAEtF,IAAI,MAAM,eAAe,KAAK,IAAI,GAChC,MAAM,IAAI,MAAM,0DAA0D;CAE5E,KAAK,MAAM,CAAC,MAAM,UAAU;EAC1B,CAAC,iBAAiB,MAAM,OAAO,aAAa;EAC5C,CAAC,kBAAkB,MAAM,OAAO,cAAc;EAC9C,CAAC,mBAAmB,MAAM,OAAO,eAAe;EAChD,CAAC,kBAAkB,MAAM,OAAO,cAAc;CAChD,GAAY;EACV,IAAI,UAAU,KAAA,GAAW;EACzB,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAC1C,MAAM,IAAI,MAAM,+BAA+B,KAAK,oCAAoC;CAE5F;CACA,WAAW,MAAM,OAAO,YAAY,qBAAqB;AAC3D;AAEA,SAAS,oBACP,OACA,UACA,eACqC;CACrC,MAAM,SAAS,YACb,OACA;EAAC;EAAiB;EAAU;EAAe;EAAkB;CAAS,GACtE,sCACF;CACA,IAAI,OAAO,kBAAkB,SAAS,eACpC,MAAM,IAAI,MAAM,mEAAmE;CAErF,IAAI,CAAC,eAAe,OAAO,MAAM,GAC/B,MAAM,IAAI,MAAM,4DAA4D;CAE9E,IAAI,OAAO,gBAAgB,SAAS,aAClC,MAAM,IAAI,MAAM,qDAAqD;CAEvE,YACE,OAAO,gBACP,eAAe,SAAS,MAAM,GAC9B,6CACF;CACA,IACE,yBAAyB,OAAO,cAAc,MAAM,yBAAyB,SAAS,MAAM,GAE5F,MAAM,IAAI,MAAM,8DAA8D;CAGhF,MAAM,UAAU,2BACd,OAAO,SACP,SAAS,OAAO,eAChB,aACF;CACA,OAAO,wBAAwB;EAC7B,eAAe,OAAO;EACtB,QAAQ,OAAO;EACf,aAAa,OAAO;EACpB,gBAAgB,OAAO;EACvB;CACF,CAAC;AACH;AAEA,SAAS,2BACP,OACA,eACA,eACkC;CAClC,IAAI,kBAAkB,GAAG;EAEvB,IADe,YAAY,OAAO,CAAC,MAAM,GAAG,qCACnC,CAAC,CAAC,SAAS,YAClB,MAAM,IAAI,MAAM,mEAAmE;EAErF,OAAO,EAAE,MAAM,WAAW;CAC5B;CAEA,MAAM,SAAS,YAAY,OAAO,CAAC,QAAQ,SAAS,GAAG,qCAAqC;CAC5F,IAAI,OAAO,SAAS,gBAClB,MAAM,IAAI,MAAM,+DAA+D;CAEjF,IACE,CAAC,MAAM,QAAQ,OAAO,OAAO,KAC7B,OAAO,QAAQ,WAAW,KAC1B,OAAO,QAAQ,OAAO,eAEtB,MAAM,IAAI,MAAM,mEAAmE;CAErF,OAAO;EAAE,MAAM;EAAgB,SAAS,CAAC,aAAa;CAAE;AAC1D;AAEA,SAAS,mBACP,OACA,eACwC;CAExC,MAAM,MAAM,OADG,YAAY,OAAO,CAAC,KAAK,GAAG,qCACnB,CAAC,CAAC,KAAK,wCAAwC;CACvE,MAAM,cAAc,OAAO,KAAK,GAAG,CAAC,CAAC,KAAK;CAC1C,IACE,YAAY,WAAW,cAAc,UACrC,YAAY,MAAM,MAAM,UAAU,SAAS,cAAc,MAAM,GAE/D,MAAM,IAAI,MAAM,kEAAkE;CAEpF,MAAM,WAAmC,OAAO,OAAO,IAAI;CAC3D,KAAK,MAAM,QAAQ,eAAe;EAChC,MAAM,QAAQ,IAAI;EAClB,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,KAAK,MAAM,SAAS,OAClE,MAAM,IAAI,MAAM,8BAA8B,KAAK,qCAAqC;EAE1F,SAAS,QAAQ;CACnB;CACA,OAAO,OAAO,OAAO,EAAE,KAAK,OAAO,OAAO,QAAQ,EAAE,CAAC;AACvD;AAEA,SAAS,sBACP,OACA,UAC6B;CAC7B,MAAM,SAAS,YACb,OACA;EAAC;EAAa;EAAY;EAAS;EAAY;CAAiB,GAChE,0BACF;CACA,IAAI,OAAO,cAAc,SAAS,WAChC,MAAM,IAAI,MAAM,oDAAoD;CAEtE,IAAI,OAAO,oBAAoB,SAAS,iBACtC,MAAM,IAAI,MAAM,6DAA6D;CAE/E,KAAK,MAAM,QAAQ;EAAC;EAAa;EAAY;EAAS;CAAU,GAC9D,IAAI,OAAO,OAAO,UAAU,YAAY,OAAO,KAAK,CAAC,WAAW,GAC9D,MAAM,IAAI,MAAM,4BAA4B,KAAK,mBAAmB;CAGxE,OAAO;AACT;AAEA,SAAS,oBACP,UACA,QACM;CACN,IACE,OAAO,gBAAgB,SAAS,eAChC,OAAO,kBAAkB,SAAS,iBAClC,OAAO,gBAAgB,SAAS,eAChC,yBAAyB,OAAO,QAAQ,MAAM,yBAAyB,SAAS,QAAQ,GAExF,MAAM,IAAI,MAAM,sEAAsE;AAE1F;AAEA,SAAS,2BACP,OAMA,aACM;CACN,KAAK,MAAM,CAAC,MAAM,QAAQ,UAAU;EAClC;GAAC;GAAe,MAAM;GAAY,YAAY,OAAO;EAAa;EAClE;GAAC;GAAgB,MAAM;GAAa,YAAY,OAAO;EAAc;EACrE;GAAC;GAAiB,MAAM;GAAc,YAAY,OAAO;EAAe;EACxE;GAAC;GAAkB,MAAM;GAAc,YAAY;EAAe;CACpE,GACE,IAAI,SAAS,OACX,MAAM,IAAI,MAAM,8BAA8B,KAAK,GAAG,OAAO,oBAAoB,OAAO;CAG5F,MAAM,iBAAiB,YAAY,OAAO;CAC1C,IAAI,mBAAmB,KAAA,GAAW;EAChC,MAAM,cAAc,MAAM,cAAc,MAAM;EAC9C,IAAI,CAAC,OAAO,cAAc,WAAW,GACnC,MAAM,IAAI,MAAM,4DAA4D;EAE9E,IAAI,cAAc,gBAChB,MAAM,IAAI,MACR,2CAA2C,YAAY,oBAAoB,gBAC7E;CAEJ;AACF;AAEA,SAAS,eAAe,QAAsD;CAC5E,OAAO,OAAO,mBAAmB,KAAA,IAC7B;EAAC;EAAiB;EAAkB;EAAmB;CAAY,IACnE;EAAC;EAAiB;EAAkB;EAAmB;EAAkB;CAAY;AAC3F;AAEA,SAAS,sBAAsB,QAA8C;CAC3E,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,MAAM,gEAAgE;CAElF,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK;CAC/B,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,QAChC,MAAM,IAAI,MAAM,6DAA6D;CAE/E,KAAK,MAAM,QAAQ,OACjB,IACE,CAAC,2BAA2B,KAAK,IAAI,KACrC;EAAC;EAAa;EAAe;CAAW,CAAC,CAAC,SAAS,IAAI,GAEvD,MAAM,IAAI,MAAM,2DAA2D,MAAM;CAGrF,OAAO,OAAO,OAAO,KAAK;AAC5B;AAEA,SAAS,oBAAoB,OAAuB;CAClD,IACE,MAAM,SAAS,OACf,UAAU,MAAM,YAAY,KAC5B,MAAM,SAAS,GAAG,KAClB,MAAM,SAAS,GAAG,KAClB,UAAU,eACV,MAAM,SAAS,YAAY,KAC3B,UAAU,qBACV,UAAU,4BAEV,MAAM,IAAI,MAAM,oEAAoE;CAEtF,MAAM,SAAS,MAAM,MAAM,GAAG;CAC9B,IACE,OAAO,SAAS,KAChB,CAAC,OAAO,OACL,UACC,MAAM,UAAU,KAAK,MAAM,UAAU,MAAM,oCAAoC,KAAK,KAAK,CAC7F,KACA,CAAC,QAAQ,KAAK,OAAO,GAAG,EAAE,KAAK,EAAE,GAEjC,MAAM,IAAI,MAAM,oEAAoE;CAEtF,OAAO;AACT;AAEA,SAAS,eAAe,aAAqB,eAA+B;CAC1E,OAAO,yBAAyB;EAAE;EAAa;CAAc,CAAC;AAChE;AAEA,SAAS,kBACP,cACA,qBACA,aACA,KACM;CACN,KAAK,MAAM,CAAC,KAAK,UAAU,cACzB,IAAI,MAAM,eAAe,KAAK;EAC5B,aAAa,OAAO,GAAG;EACvB,oBAAoB,IAAI,KAAK;GAC3B,OAAO;GACP,iBAAiB,MAAM;EACzB,CAAC;CACH;CAEF,KAAK,MAAM,CAAC,KAAK,UAAU,qBACzB,IAAI,MAAM,mBAAmB,KAAK,oBAAoB,OAAO,GAAG;CAElE,KAAK,MAAM,CAAC,KAAK,UAAU,aACzB,IAAI,MAAM,eAAe,KAAK,YAAY,OAAO,GAAG;AAExD;AAEA,SAAS,mBACP,aACA,KACA,OACM;CACN,YAAY,OAAO,GAAG;CACtB,YAAY,IAAI,KAAK,KAAK;CAC1B,OAAO,YAAY,OAAO,wBAAwB;EAChD,MAAM,SAAS,YAAY,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;EACzC,IAAI,WAAW,KAAA,GAAW;EAC1B,YAAY,OAAO,MAAM;CAC3B;AACF;AAEA,SAAS,eAAe,OAAuC;CAC7D,OAAO,OAAO,UAAU,YAAY,wBAAwB,KAAK,KAAK;AACxE;AAEA,SAAS,YACP,OACA,MACA,OACyB;CACzB,MAAM,SAAS,OAAO,OAAO,KAAK;CAClC,sBAAsB,QAAQ,MAAM,KAAK;CACzC,OAAO;AACT;AAEA,SAAS,OAAO,OAAgB,OAAwC;CACtE,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,MAAM,GAAG,MAAM,mBAAmB;CAE9C,MAAM,YAAY,OAAO,eAAe,KAAK;CAC7C,IAAI,cAAc,OAAO,aAAa,cAAc,MAClD,MAAM,IAAI,MAAM,GAAG,MAAM,wBAAwB;CAEnD,OAAO;AACT"}
+{"version":3,"file":"protected-model-port-Dhdi5mDl.js","names":["isSha256Digest"],"sources":["../src/candidate-execution/exact-process-executor.ts","../src/candidate-execution/protected-model-port.ts"],"sourcesContent":["import { posix } from 'node:path'\nimport { isDeepStrictEqual } from 'node:util'\n\nimport type { TraceStore } from '@tangle-network/agent-eval'\nimport type { AgentCandidateTermination, Sha256Digest } from '@tangle-network/agent-interface'\nimport type {\n  AgentEnvironmentCapabilities,\n  AgentEnvironmentProvider,\n  AgentExactProcess,\n  AgentExactProcessEnvironment,\n  AgentExactProcessLaunch,\n  AgentExactProcessResources,\n  AgentExactProcessStatus,\n} from '@tangle-network/agent-interface/environment-provider'\nimport {\n  canonicalCandidateBytes,\n  canonicalCandidateDigest,\n  immutableCandidateValue,\n  sha256Bytes,\n} from './digest'\nimport { assertAgentCandidateExecutionRoots } from './execution-roots'\nimport {\n  CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV,\n  CANDIDATE_KNOWLEDGE_ROOT_ENV,\n  candidateKnowledgeExecutionPaths,\n} from './knowledge'\nimport {\n  candidateProfileAgentPaths,\n  PI_CANDIDATE_AGENT_DIR_ENV,\n  PI_CANDIDATE_SESSION_DIR_ENV,\n} from './profile'\nimport type {\n  AgentCandidateExecutorPort,\n  AgentCandidateExecutorRequest,\n  AgentCandidateExecutorStopRequest,\n} from './types'\n\nconst DEFAULT_PROVISION_TIMEOUT_MS = 120_000\nconst DEFAULT_RECOVERY_RETENTION_MS = 15 * 60_000\n\ninterface ExactProcessRunState {\n  environment: AgentExactProcessEnvironment\n  output?: Uint8Array\n  termination?: AgentCandidateTermination\n  runtimeTermination?: AgentCandidateTermination\n  trace?: {\n    runId: string\n    scenarioId: string\n    startedAt: number\n    deadlineAtMs: number\n    timeoutMs: number\n    tags: Record<string, string>\n    written: boolean\n  }\n}\n\nexport interface ExactProcessCandidateExecutorOptions {\n  provider: AgentEnvironmentProvider\n  resources: AgentExactProcessResources\n  provisionTimeoutMs?: number\n  recoveryRetentionMs?: number\n  providerOptions?: Record<string, unknown>\n}\n\n/** Adapt one neutral exact-process provider to Runtime's trusted candidate boundary. */\nexport function exactProcessProviderAsCandidateExecutor(\n  options: ExactProcessCandidateExecutorOptions,\n): AgentCandidateExecutorPort {\n  return new ExactProcessAgentCandidateExecutor(options)\n}\n\nclass ExactProcessAgentCandidateExecutor implements AgentCandidateExecutorPort {\n  private readonly states = new Map<string, ExactProcessRunState>()\n  private readonly exactProcess\n  private readonly resources: AgentExactProcessResources\n  private readonly provisionTimeoutMs: number\n  private readonly recoveryRetentionMs: number\n  private readonly providerOptions?: Record<string, unknown>\n  private capabilitiesPromise?: Promise<AgentEnvironmentCapabilities>\n\n  constructor(private readonly options: ExactProcessCandidateExecutorOptions) {\n    if (!options.provider.exactProcess) {\n      throw new Error(\n        `agent environment provider \"${options.provider.name}\" does not implement exact processes`,\n      )\n    }\n    this.exactProcess = options.provider.exactProcess\n    this.resources = exactResources(options.resources)\n    this.provisionTimeoutMs = positiveInteger(\n      options.provisionTimeoutMs ?? DEFAULT_PROVISION_TIMEOUT_MS,\n      'exact process provision timeout',\n    )\n    this.recoveryRetentionMs = positiveInteger(\n      options.recoveryRetentionMs ?? DEFAULT_RECOVERY_RETENTION_MS,\n      'exact process recovery retention',\n    )\n    this.providerOptions = options.providerOptions\n      ? immutableCandidateValue(options.providerOptions)\n      : undefined\n  }\n\n  async execute(\n    request: AgentCandidateExecutorRequest,\n    context: Parameters<AgentCandidateExecutorPort['execute']>[1],\n  ) {\n    assertSupportedRequest(request)\n    const outcome = request.benchmark.task.outcome\n    if (outcome.kind !== 'output') throw new Error('exact process executor requires an output task')\n    const network = request.executionPlan.value.material.model.access.network\n    const egress =\n      network.mode === 'disabled'\n        ? ({ mode: 'blocked' } as const)\n        : ({ mode: 'strict', allowDomains: [...network.domains] } as const)\n    await this.assertCapability(egress.mode)\n    context.signal.throwIfAborted()\n\n    const key = executionKey(request.executionId, request.executionPlan.value.digest)\n    if (this.states.has(key)) throw new Error('candidate execution environment is already active')\n    const image = exactImage(\n      request.executionPlan.value.material.container.image,\n      request.executionPlan.value.material.container.manifestDigest,\n    )\n    const maxLifetimeMs = environmentLifetimeMs(\n      request.hardLimits.timeoutMs,\n      this.recoveryRetentionMs,\n    )\n    const createMaterial = immutableCandidateValue({\n      kind: 'agent-candidate-exact-process-create',\n      provider: this.options.provider.name,\n      executionId: request.executionId,\n      executionPlanDigest: request.executionPlan.value.digest,\n      image,\n      egress,\n      maxLifetimeMs,\n      provisionTimeoutMs: this.provisionTimeoutMs,\n      resources: this.resources,\n      output: { mediaType: outcome.mediaType, maxBytes: outcome.maxBytes },\n      ...(this.providerOptions ? { providerOptions: this.providerOptions } : {}),\n    })\n    const createInputDigest = canonicalCandidateDigest(createMaterial)\n    const metadata = immutableCandidateValue({\n      kind: 'agent-candidate-execution',\n      provider: this.options.provider.name,\n      executionId: request.executionId,\n      executionPlanDigest: request.executionPlan.value.digest,\n      createInputDigest,\n      outputMediaType: outcome.mediaType,\n      outputMaxBytes: outcome.maxBytes,\n    })\n    const environment = await this.exactProcess.create({\n      image,\n      egress,\n      maxLifetimeMs,\n      provisionTimeoutMs: this.provisionTimeoutMs,\n      resources: this.resources,\n      metadata,\n      idempotencyKey: executionIdempotencyKey(\n        request.executionId,\n        request.executionPlan.value.digest,\n      ),\n      signal: context.signal,\n      ...(this.providerOptions ? { providerOptions: this.providerOptions } : {}),\n    })\n    try {\n      assertExecutionEnvironment(environment, metadata, this.options.provider.name)\n    } catch (error) {\n      try {\n        await environment.destroy()\n      } catch (cleanupError) {\n        throw new AggregateError(\n          [error, cleanupError],\n          'exact process validation and cleanup both failed',\n        )\n      }\n      throw error\n    }\n    const state: ExactProcessRunState = { environment }\n    this.states.set(key, state)\n\n    const existing = await environment.process.list()\n    if (existing.length !== 0) {\n      throw new Error('fresh candidate environment already contains a process')\n    }\n    await materializeRequest(environment, request, context.signal)\n    const launch = exactLaunch(request)\n    const startedAt = Date.now()\n    state.trace = {\n      runId: request.trace.runId,\n      scenarioId: request.benchmark.task.scenario.id,\n      startedAt,\n      deadlineAtMs: context.deadlineAtMs,\n      timeoutMs: request.hardLimits.timeoutMs,\n      tags: {\n        ...request.trace.tags,\n        environmentId: environment.id,\n        environmentProvider: environment.provider,\n      },\n      written: false,\n    }\n    const process = await environment.process.spawn(launch, { signal: context.signal })\n    const outputPromise = collectOutput(process, outcome.maxBytes)\n    void outputPromise.catch(() => undefined)\n    let cancellation: Promise<void> | undefined\n    let processExited = false\n    const cancel = () => {\n      if (!processExited) cancellation ??= stopProcess(process)\n    }\n    context.signal.addEventListener('abort', cancel, { once: true })\n    if (context.signal.aborted) cancel()\n    try {\n      const termination = await process.wait()\n      processExited = true\n      context.signal.removeEventListener('abort', cancel)\n      if (cancellation) await cancellation\n      const status = await process.status()\n      assertTerminalStatus(status, termination)\n      state.output = await awaitOutput(outputPromise, context.signal, context.deadlineAtMs)\n      state.termination = termination\n      await appendExactProcessTrace(state, context.traceStore, status)\n      return { executionId: request.executionId, termination }\n    } finally {\n      context.signal.removeEventListener('abort', cancel)\n    }\n  }\n\n  async stop(\n    request: AgentCandidateExecutorStopRequest,\n    context: Parameters<AgentCandidateExecutorPort['stop']>[1],\n  ): Promise<{ readonly stopped: true }> {\n    await this.assertCapability()\n    context.signal.throwIfAborted()\n    const environment = await this.resolve(request, true)\n    if (!environment) return { stopped: true }\n    let statuses = await environment.process.list()\n    if (statuses.length > 1) {\n      throw new Error('candidate exact process environment contains more than one process')\n    }\n    const status = statuses[0]\n    if (status?.running) {\n      const process = await environment.process.get(status.pid)\n      if (!process) throw new Error('candidate environment lost its running process handle')\n      await stopProcess(process)\n    }\n    context.signal.throwIfAborted()\n    statuses = await environment.process.list()\n    if (statuses.some((entry) => entry.running)) {\n      throw new Error('candidate exact process termination is not proven')\n    }\n    const finalStatus = statuses[0]\n    if (finalStatus) assertTerminalStatus(finalStatus)\n    const state = this.states.get(executionKey(request.executionId, request.executionPlanDigest))\n    if (state) {\n      state.termination = finalStatus?.termination ?? state.termination\n      if (context.reason === 'timeout' && state.trace) {\n        state.runtimeTermination = {\n          kind: 'timeout',\n          timeoutMs: state.trace.timeoutMs,\n        }\n      }\n      await appendExactProcessTrace(state, context.traceStore, finalStatus)\n    }\n    return { stopped: true }\n  }\n\n  async capture(\n    request: AgentCandidateExecutorStopRequest,\n    context: Parameters<AgentCandidateExecutorPort['capture']>[1],\n  ) {\n    await this.assertCapability()\n    context.signal.throwIfAborted()\n    const environment = await this.resolve(request, false)\n    const statuses = await environment.process.list()\n    const status = statuses[0]\n    if (statuses.length !== 1 || !status || status.running) {\n      throw new Error('candidate environment must contain one stopped process before capture')\n    }\n    assertTerminalStatus(status)\n    const process = await environment.process.get(status.pid)\n    if (!process) throw new Error('candidate environment lost its captured process handle')\n    const currentStatus = await process.status()\n    assertTerminalStatus(currentStatus, status.termination)\n    const state = this.states.get(executionKey(request.executionId, request.executionPlanDigest))\n    const output =\n      state?.output ??\n      (await awaitOutput(\n        collectOutput(process, outputSpec(environment).maxBytes),\n        context.signal,\n        Date.now() + this.provisionTimeoutMs,\n      ))\n    context.signal.throwIfAborted()\n    const evidence = canonicalCandidateBytes({\n      kind: 'agent-candidate-exact-process-capture',\n      provider: environment.provider,\n      environmentId: environment.id,\n      executionId: request.executionId,\n      executionPlanDigest: request.executionPlanDigest,\n      createInputDigest: environment.metadata?.createInputDigest,\n      process: {\n        pid: status.pid,\n        exitCode: status.exitCode,\n        ...(status.exitSignal ? { exitSignal: status.exitSignal } : {}),\n        termination: status.termination,\n      },\n      ...(state?.runtimeTermination ? { runtimeTermination: state.runtimeTermination } : {}),\n      output: { sha256: sha256Bytes(output), byteLength: output.byteLength },\n    })\n    return {\n      taskOutcome: { kind: 'output' as const, bytes: output },\n      evidence,\n    }\n  }\n\n  async dispose(\n    request: AgentCandidateExecutorStopRequest,\n    context: { signal: AbortSignal },\n  ): Promise<{ readonly disposed: true }> {\n    await this.assertCapability()\n    context.signal.throwIfAborted()\n    const environment = await this.resolve(request, true)\n    if (!environment) return { disposed: true }\n    let destroyError: unknown\n    try {\n      await environment.destroy()\n    } catch (error) {\n      destroyError = error\n    }\n    const remaining = await this.exactProcess.get(environment.id)\n    if (remaining) {\n      throw new Error('exact process environment disposal is not proven', { cause: destroyError })\n    }\n    context.signal.throwIfAborted()\n    this.states.delete(executionKey(request.executionId, request.executionPlanDigest))\n    return { disposed: true }\n  }\n\n  private async assertCapability(mode?: 'blocked' | 'strict'): Promise<void> {\n    const pending =\n      this.capabilitiesPromise ?? Promise.resolve(this.options.provider.capabilities())\n    this.capabilitiesPromise = pending\n    let capabilities: AgentEnvironmentCapabilities\n    try {\n      capabilities = await pending\n    } catch (error) {\n      if (this.capabilitiesPromise === pending) this.capabilitiesPromise = undefined\n      throw error\n    }\n    const exact = capabilities.exactProcess\n    if (!exact) {\n      throw new Error(\n        `agent environment provider \"${this.options.provider.name}\" does not declare exact process support`,\n      )\n    }\n    if (mode && !exact.egress.includes(mode)) {\n      throw new Error(\n        `agent environment provider \"${this.options.provider.name}\" does not declare ${mode} exact egress`,\n      )\n    }\n  }\n\n  private async resolve(\n    request: AgentCandidateExecutorStopRequest,\n    missingIsDeleted: false,\n  ): Promise<AgentExactProcessEnvironment>\n  private async resolve(\n    request: AgentCandidateExecutorStopRequest,\n    missingIsDeleted: true,\n  ): Promise<AgentExactProcessEnvironment | undefined>\n  private async resolve(\n    request: AgentCandidateExecutorStopRequest,\n    missingIsDeleted: boolean,\n  ): Promise<AgentExactProcessEnvironment | undefined> {\n    const key = executionKey(request.executionId, request.executionPlanDigest)\n    const active = this.states.get(key)?.environment\n    if (active) return active\n    const metadata = {\n      kind: 'agent-candidate-execution',\n      provider: this.options.provider.name,\n      executionId: request.executionId,\n      executionPlanDigest: request.executionPlanDigest,\n    }\n    const listed = await this.exactProcess.list({\n      metadata,\n      ...(this.providerOptions ? { providerOptions: this.providerOptions } : {}),\n    })\n    const matches = listed.filter(\n      (environment) =>\n        environment.provider === this.options.provider.name &&\n        Object.entries(metadata).every(([name, value]) =>\n          isDeepStrictEqual(environment.metadata?.[name], value),\n        ),\n    )\n    if (matches.length > 1) {\n      throw new Error('multiple exact process environments match one candidate execution')\n    }\n    const environment = matches[0]\n    if (!environment) {\n      if (missingIsDeleted) return undefined\n      throw new Error('candidate exact process evidence is unavailable')\n    }\n    if (!isSha256Digest(environment.metadata?.createInputDigest)) {\n      throw new Error('candidate exact process create-input digest is unavailable')\n    }\n    this.states.set(key, { environment })\n    return environment\n  }\n}\n\nasync function appendExactProcessTrace(\n  state: ExactProcessRunState,\n  traceStore: TraceStore,\n  status?: AgentExactProcessStatus,\n): Promise<void> {\n  const trace = state.trace\n  if (!trace || trace.written) return\n  const endedAt = Math.max(trace.startedAt, Math.min(Date.now(), trace.deadlineAtMs))\n  const termination = state.runtimeTermination ?? state.termination ?? status?.termination\n  await traceStore.appendRun({\n    runId: trace.runId,\n    scenarioId: trace.scenarioId,\n    startedAt: trace.startedAt,\n    endedAt,\n    status: termination?.kind === 'exit' && termination.exitCode === 0 ? 'completed' : 'failed',\n    tags: trace.tags,\n  })\n  trace.written = true\n}\n\nfunction assertSupportedRequest(request: AgentCandidateExecutorRequest): void {\n  if (request.benchmark.task.outcome.kind !== 'output') {\n    throw new Error(\n      'exact process candidate executor does not support workspace outcomes; use Pier',\n    )\n  }\n  if (request.executionPlan.value.material.codeKind !== 'disabled' || request.inputs.candidate) {\n    throw new Error('exact process candidate executor does not support code workspaces; use Pier')\n  }\n  if (request.memory.mode !== 'disabled') {\n    throw new Error('exact process candidate executor does not support isolated memory')\n  }\n  const mediaType = request.benchmark.task.outcome.mediaType.toLowerCase()\n  if (\n    !(\n      mediaType.startsWith('text/') ||\n      mediaType === 'application/json' ||\n      mediaType.endsWith('+json')\n    )\n  ) {\n    throw new Error('exact process candidate executor supports only UTF-8 text and JSON outputs')\n  }\n  if (!posix.isAbsolute(request.launch.executable) && !request.launch.env.PATH?.trim()) {\n    throw new Error('exact process candidate executable must be absolute or declare a signed PATH')\n  }\n  if (!request.roots) throw new Error('candidate execution roots are missing')\n  assertAgentCandidateExecutionRoots(request.roots)\n}\n\nasync function materializeRequest(\n  environment: AgentExactProcessEnvironment,\n  request: AgentCandidateExecutorRequest,\n  signal: AbortSignal,\n): Promise<void> {\n  assertAgentCandidateExecutionRoots(request.roots)\n  const knowledgePaths = assertKnowledgeExecutionBinding(request)\n  for (const file of request.inputs.task.files) {\n    await environment.writeFile(beneath(request.roots.taskRoot, file.path), file.bytes, {\n      mode: file.mode,\n      signal,\n    })\n  }\n  for (const file of request.inputs.profile.files) {\n    await environment.writeFile(profileFileExecutionPath(request, file), file.bytes, {\n      mode: file.mode,\n      signal,\n    })\n  }\n  if (request.knowledge && knowledgePaths) {\n    for (const file of request.knowledge.files) {\n      await environment.writeFile(beneath(knowledgePaths.root, file.path), file.bytes, {\n        mode: file.mode,\n        signal,\n      })\n    }\n    if (request.knowledge.retrievalConfig && knowledgePaths.retrievalConfig) {\n      await environment.writeFile(\n        knowledgePaths.retrievalConfig,\n        request.knowledge.retrievalConfig,\n        { mode: 0o644, signal },\n      )\n    }\n  }\n  if (request.instruction.delivery.kind === 'utf8-file') {\n    await environment.writeFile(request.instruction.delivery.path, request.instruction.bytes, {\n      mode: 0o644,\n      signal,\n    })\n  }\n}\n\nfunction assertKnowledgeExecutionBinding(\n  request: AgentCandidateExecutorRequest,\n): ReturnType<typeof candidateKnowledgeExecutionPaths> | undefined {\n  const knowledge = request.knowledge\n  if (!knowledge) {\n    if (\n      request.launch.env[CANDIDATE_KNOWLEDGE_ROOT_ENV] !== undefined ||\n      request.launch.env[CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV] !== undefined\n    ) {\n      throw new Error('candidate launch declares knowledge paths without verified knowledge')\n    }\n    return undefined\n  }\n  const paths = candidateKnowledgeExecutionPaths(\n    request.roots.taskRoot,\n    knowledge.retrievalConfig !== undefined,\n  )\n  if (\n    request.launch.env[CANDIDATE_KNOWLEDGE_ROOT_ENV] !== paths.root ||\n    request.launch.env[CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV] !== paths.retrievalConfig\n  ) {\n    throw new Error('candidate knowledge paths do not match the signed launch environment')\n  }\n  const reserved = [paths.root, paths.retrievalConfig].filter(\n    (value): value is string => value !== undefined,\n  )\n  const otherFiles = [\n    ...request.inputs.task.files.map((file) => beneath(request.roots.taskRoot, file.path)),\n    ...request.inputs.profile.files.map((file) => profileFileExecutionPath(request, file)),\n    ...(request.instruction.delivery.kind === 'utf8-file'\n      ? [request.instruction.delivery.path]\n      : []),\n  ]\n  if (\n    otherFiles.some((path) =>\n      reserved.some(\n        (reservedPath) =>\n          path === reservedPath ||\n          path.startsWith(`${reservedPath}/`) ||\n          reservedPath.startsWith(`${path}/`),\n      ),\n    )\n  ) {\n    throw new Error('candidate knowledge paths overlap other execution inputs')\n  }\n  return paths\n}\n\nfunction profileFileExecutionPath(\n  request: AgentCandidateExecutorRequest,\n  file: AgentCandidateExecutorRequest['inputs']['profile']['files'][number],\n): string {\n  const workspace = request.executionPlan.value.material.profile.targetWorkspace\n  const workspaceRoot = workspace === 'task' ? request.roots.taskRoot : request.roots.candidateRoot\n  if (!workspaceRoot) throw new Error('candidate profile targets a missing workspace')\n  if (file.root !== 'agent') return beneath(workspaceRoot, file.path)\n  const agentDir = profileAgentDirectory(request)\n  return beneath(agentDir, file.path)\n}\n\nfunction profileAgentDirectory(request: AgentCandidateExecutorRequest): string {\n  const paths = candidateProfileAgentPaths(\n    request.profilePlan.value.material,\n    request.roots.profileRoot,\n  )\n  if (!paths) throw new Error('candidate profile agent-root file is missing its private root')\n  if (\n    request.launch.env[PI_CANDIDATE_AGENT_DIR_ENV] !== paths.agentDir ||\n    request.launch.env[PI_CANDIDATE_SESSION_DIR_ENV] !== paths.sessionDir\n  ) {\n    throw new Error('candidate Pi agent-root files do not match the signed launch environment')\n  }\n  return paths.agentDir\n}\n\nfunction exactLaunch(request: AgentCandidateExecutorRequest): AgentExactProcessLaunch {\n  const instruction = new TextDecoder('utf-8', { fatal: true }).decode(request.instruction.bytes)\n  const base = {\n    executable: request.launch.executable,\n    args: request.launch.args,\n    cwd: request.launch.cwd,\n    env: request.launch.env,\n    timeoutMs: 0,\n  }\n  switch (request.instruction.delivery.kind) {\n    case 'argv-append':\n      return { ...base, args: [...base.args, instruction] }\n    case 'stdin-utf8':\n      return { ...base, stdin: instruction }\n    case 'utf8-file':\n      return base\n  }\n}\n\nasync function collectOutput(process: AgentExactProcess, maxBytes: number): Promise<Uint8Array> {\n  const chunks: Buffer[] = []\n  let byteLength = 0\n  for await (const chunk of process.stdout()) {\n    const bytes = Buffer.from(chunk, 'utf8')\n    byteLength += bytes.byteLength\n    if (byteLength > maxBytes) {\n      let stopError: unknown\n      try {\n        await stopProcess(process)\n      } catch (error) {\n        stopError = error\n      }\n      throw new Error(`candidate output exceeds its ${maxBytes}-byte maximum`, {\n        cause: stopError,\n      })\n    }\n    chunks.push(bytes)\n  }\n  return Uint8Array.from(Buffer.concat(chunks, byteLength))\n}\n\nasync function awaitOutput(\n  output: Promise<Uint8Array>,\n  signal: AbortSignal,\n  deadlineAtMs: number,\n): Promise<Uint8Array> {\n  signal.throwIfAborted()\n  const remainingMs = deadlineAtMs - Date.now()\n  if (remainingMs <= 0) throw new Error('candidate output deadline expired')\n  let timer: ReturnType<typeof setTimeout> | undefined\n  let onAbort: (() => void) | undefined\n  try {\n    return await Promise.race([\n      output,\n      new Promise<never>((_resolve, reject) => {\n        onAbort = () => reject(signal.reason ?? new Error('candidate output cancelled'))\n        signal.addEventListener('abort', onAbort, { once: true })\n        timer = setTimeout(\n          () => reject(new Error('candidate output deadline expired')),\n          remainingMs,\n        )\n      }),\n    ])\n  } finally {\n    if (onAbort) signal.removeEventListener('abort', onAbort)\n    if (timer) clearTimeout(timer)\n  }\n}\n\nasync function stopProcess(process: AgentExactProcess): Promise<void> {\n  const before = await process.status()\n  if (!before.running) return\n  try {\n    await process.kill()\n  } catch (error) {\n    if ((await process.status()).running) throw error\n  }\n  const termination = await process.wait()\n  assertTerminalStatus(await process.status(), termination)\n}\n\nfunction assertTerminalStatus(\n  status: AgentExactProcessStatus,\n  expected?: AgentCandidateTermination,\n): asserts status is AgentExactProcessStatus & { termination: AgentCandidateTermination } {\n  if (status.running || !status.termination) {\n    throw new Error('exact process returned no terminal reason after exit')\n  }\n  if (expected && !isDeepStrictEqual(status.termination, expected)) {\n    throw new Error('exact process wait and status returned different terminal reasons')\n  }\n}\n\nfunction assertExecutionEnvironment(\n  environment: AgentExactProcessEnvironment,\n  metadata: Record<string, unknown>,\n  providerName: string,\n): void {\n  if (!environment.id || environment.provider !== providerName) {\n    throw new Error('exact process provider returned the wrong environment identity')\n  }\n  if (\n    !Object.entries(metadata).every(([name, value]) =>\n      isDeepStrictEqual(environment.metadata?.[name], value),\n    )\n  ) {\n    throw new Error('exact process provider did not persist candidate execution metadata')\n  }\n}\n\nfunction outputSpec(environment: AgentExactProcessEnvironment): { maxBytes: number } {\n  const maxBytes = environment.metadata?.outputMaxBytes\n  if (!Number.isSafeInteger(maxBytes) || Number(maxBytes) < 1) {\n    throw new Error('candidate exact process output bound is unavailable')\n  }\n  return { maxBytes: Number(maxBytes) }\n}\n\nfunction executionKey(executionId: string, executionPlanDigest: Sha256Digest): string {\n  return `${executionId}\\0${executionPlanDigest}`\n}\n\nfunction executionIdempotencyKey(executionId: string, executionPlanDigest: Sha256Digest): string {\n  return `candidate-${canonicalCandidateDigest({\n    kind: 'agent-candidate-execution-identity',\n    executionId,\n    executionPlanDigest,\n  }).slice('sha256:'.length)}`\n}\n\nfunction exactImage(image: string, manifestDigest: Sha256Digest): string {\n  if (isSha256Digest(image)) {\n    if (image !== manifestDigest) {\n      throw new Error('candidate container image conflicts with its resolved manifest')\n    }\n    return image\n  }\n  const marker = image.lastIndexOf('@')\n  if (marker < 0) return `${image}@${manifestDigest}`\n  if (image.slice(marker + 1) !== manifestDigest) {\n    throw new Error('candidate container image conflicts with its resolved manifest')\n  }\n  return image\n}\n\nfunction environmentLifetimeMs(timeoutMs: number, retentionMs: number): number {\n  const total = positiveInteger(timeoutMs, 'candidate execution timeout') + retentionMs\n  if (!Number.isSafeInteger(total)) throw new Error('candidate environment lifetime is too large')\n  return Math.ceil(total / 1_000) * 1_000\n}\n\nfunction exactResources(resources: AgentExactProcessResources): AgentExactProcessResources {\n  if (!Number.isFinite(resources.cpu) || resources.cpu <= 0) {\n    throw new Error('exact process CPU must be positive and finite')\n  }\n  return Object.freeze({\n    cpu: resources.cpu,\n    memoryMb: positiveInteger(resources.memoryMb, 'exact process memory'),\n    diskMb: positiveInteger(resources.diskMb, 'exact process disk'),\n  })\n}\n\nfunction positiveInteger(value: number, label: string): number {\n  if (!Number.isSafeInteger(value) || value < 1)\n    throw new Error(`${label} must be a positive integer`)\n  return value\n}\n\nfunction beneath(root: string, relativePath: string): string {\n  if (posix.isAbsolute(relativePath)) throw new Error('candidate input path must be relative')\n  const path = posix.normalize(relativePath)\n  if (path === '..' || path.startsWith('../')) {\n    throw new Error('candidate input path escapes its execution root')\n  }\n  return posix.join(root, path)\n}\n\nfunction isSha256Digest(value: unknown): value is Sha256Digest {\n  return typeof value === 'string' && /^sha256:[a-f0-9]{64}$/.test(value)\n}\n","import type {\n  AgentCandidateModelAccessNetwork,\n  AgentCandidateResolvedModel,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\n\nimport { canonicalCandidateDigest, immutableCandidateValue } from './digest'\nimport { assertExactObjectKeys } from './exact-object'\nimport { sealAgentCandidateModelSettlement, usdToNanos } from './model-settlement'\nimport type {\n  AgentCandidateModelLimits,\n  AgentCandidateModelPort,\n  AgentCandidateProtectedModelActivation,\n  AgentCandidateProtectedModelReservation,\n  AgentCandidateProtectedModelSettlement,\n} from './types'\n\nexport type AgentCandidateModelGrantReserveInput = Parameters<\n  AgentCandidateModelPort['reserveGrant']\n>[0]\nexport type AgentCandidateModelGrantActivateInput = Parameters<\n  AgentCandidateModelPort['activateGrant']\n>[0]\nexport type AgentCandidateModelGrantSettleInput = Parameters<\n  AgentCandidateModelPort['settleGrant']\n>[0]\n\n/** Secret-free response from the service's reservation endpoint. */\nexport type AgentCandidateModelGrantReservation = AgentCandidateProtectedModelReservation\n\n/**\n * Narrow transport contract for a service that owns scoped model credentials\n * and the authoritative per-call usage ledger.\n *\n * An HTTP client can bind these methods to control-plane endpoints. Keeping\n * transport out of the runtime prevents parent credentials, endpoint paths,\n * and retry policy from becoming part of the portable candidate contract.\n */\nexport interface AgentCandidateModelGrantClient {\n  reserve(input: AgentCandidateModelGrantReserveInput): Promise<AgentCandidateModelGrantReservation>\n  activate(\n    input: AgentCandidateModelGrantActivateInput,\n  ): Promise<AgentCandidateProtectedModelActivation>\n  settle(\n    input: AgentCandidateModelGrantSettleInput,\n  ): Promise<AgentCandidateProtectedModelSettlement>\n}\n\nexport interface CreateProtectedAgentCandidateModelPortOptions {\n  client: AgentCandidateModelGrantClient\n  /** Catalog/snapshot resolution stays separate from credential issuance. */\n  resolveModel: AgentCandidateModelPort['resolve']\n  /** The only public DNS name candidate processes may reach for inference. */\n  gatewayDomain: string\n  /** Exact environment names the activation endpoint must return, no more or fewer. */\n  activationEnvNames: readonly string[]\n}\n\ninterface RememberedReservation {\n  requestDigest: Sha256Digest\n  responseDigest: Sha256Digest\n  executionId: string\n  preparationId: string\n  grantDigest: Sha256Digest\n  expiresAtMs: number\n  resolved: AgentCandidateResolvedModel\n  limits: AgentCandidateModelLimits\n  maxCostUsdNanos: number\n  activation: 'reserved' | 'activating' | 'activated'\n  settlementDigest?: Sha256Digest\n  settlementReason?: AgentCandidateModelGrantSettleInput['reason']\n}\n\ninterface RememberedSettlement {\n  settlementDigest: Sha256Digest\n  settlementReason: AgentCandidateModelGrantSettleInput['reason']\n  expiresAtMs: number\n}\n\nconst MAX_RECENT_SETTLEMENTS = 4_096\nconst RECOVERED_SETTLEMENT_RETENTION_MS = 15 * 60 * 1_000\n\n/**\n * Bind a protected model-grant service to the immutable candidate runtime.\n *\n * The service remains the authority for expiry, admission, revocation, and\n * metering. This adapter independently checks every response before allowing\n * it to cross into candidate execution or durable receipt finalization.\n */\nexport function createProtectedAgentCandidateModelPort(\n  options: CreateProtectedAgentCandidateModelPortOptions,\n): AgentCandidateModelPort {\n  const gatewayDomain = assertGatewayDomain(options.gatewayDomain)\n  const activationEnvNames = exactEnvironmentNames(options.activationEnvNames)\n  const reservations = new Map<string, RememberedReservation>()\n  const expiredReservations = new Map<\n    string,\n    { state: RememberedReservation; retainedUntilMs: number }\n  >()\n  const recentSettlements = new Map<string, RememberedSettlement>()\n\n  return {\n    resolve: async (input) => {\n      const request = immutableCandidateValue(input)\n      const resolved = validateResolvedModel(await options.resolveModel(request), request)\n      return immutableCandidateValue(resolved)\n    },\n\n    reserveGrant: async (input) => {\n      pruneExpiredState(reservations, expiredReservations, recentSettlements, Date.now())\n      const request = immutableCandidateValue(input)\n      validateReserveInput(request)\n      const requestDigest = canonicalCandidateDigest(request)\n      const key = reservationKey(request.executionId, request.preparationId)\n      if (recentSettlements.has(key)) {\n        throw new Error('protected model reservation is already settled')\n      }\n      const expired = expiredReservations.get(key)\n      if (expired) throw new Error('protected model reservation has expired')\n      const previous = reservations.get(key)\n      if (previous && previous.requestDigest !== requestDigest) {\n        throw new Error('protected model reservation retry changed immutable input')\n      }\n\n      const reservation = validateReservation(\n        await options.client.reserve(request),\n        request,\n        gatewayDomain,\n      )\n      const responseDigest = canonicalCandidateDigest(reservation)\n      if (recentSettlements.has(key)) {\n        throw new Error('protected model reservation completed after the grant was settled')\n      }\n      const recorded = previous ?? reservations.get(key)\n      if (recorded && recorded.requestDigest !== requestDigest) {\n        throw new Error('protected model reservation retry changed immutable input')\n      }\n      if (recorded && recorded.responseDigest !== responseDigest) {\n        throw new Error('protected model reservation retry returned different evidence')\n      }\n      if (!recorded) {\n        reservations.set(key, {\n          requestDigest,\n          responseDigest,\n          executionId: request.executionId,\n          preparationId: request.preparationId,\n          grantDigest: reservation.digest,\n          expiresAtMs: request.expiresAtMs,\n          resolved: immutableCandidateValue(request.resolved),\n          limits: immutableCandidateValue(request.limits),\n          maxCostUsdNanos: usdToNanos(request.limits.maxCostUsd, 'reserved maxCostUsd'),\n          activation: 'reserved',\n        })\n      }\n      return reservation\n    },\n\n    activateGrant: async (input) => {\n      pruneExpiredState(reservations, expiredReservations, recentSettlements, Date.now())\n      const request = immutableCandidateValue(input)\n      const key = reservationKey(request.executionId, request.preparationId)\n      if (recentSettlements.has(key)) throw new Error('protected model grant is already settled')\n      const state = reservations.get(key)\n      if (!state && expiredReservations.has(key)) {\n        throw new Error('protected model grant reservation has expired')\n      }\n      if (!state) throw new Error('protected model grant was not reserved by this port')\n      assertGrantIdentity(state, request)\n      if (state.settlementDigest) throw new Error('protected model grant is already settled')\n      if (state.activation !== 'reserved') {\n        throw new Error('protected model grant activation is single-use')\n      }\n      if (!Number.isSafeInteger(request.deadlineAtMs) || request.deadlineAtMs <= 0) {\n        throw new Error('protected model activation deadline must be a positive safe integer')\n      }\n      if (request.deadlineAtMs <= Date.now()) {\n        throw new Error('protected model activation deadline must be in the future')\n      }\n      if (request.deadlineAtMs > state.expiresAtMs) {\n        throw new Error('protected model activation deadline exceeds the reserved expiry')\n      }\n      state.activation = 'activating'\n      try {\n        const activation = validateActivation(\n          await options.client.activate(request),\n          state.limits.maxModelCalls === 0 ? [] : activationEnvNames,\n        )\n        if (recentSettlements.has(key) || reservations.get(key) !== state) {\n          throw new Error('protected model grant settled while activation was in flight')\n        }\n        state.activation = 'activated'\n        return activation\n      } catch (error) {\n        state.activation = 'reserved'\n        throw error\n      }\n    },\n\n    settleGrant: async (input) => {\n      const now = Date.now()\n      pruneExpiredState(reservations, expiredReservations, recentSettlements, now)\n      const request = immutableCandidateValue(input)\n      const key = reservationKey(request.executionId, request.preparationId)\n      const state = reservations.get(key) ?? expiredReservations.get(key)?.state\n      if (state) assertGrantIdentity(state, request)\n      const remembered = state ?? recentSettlements.get(key)\n      if (remembered?.settlementReason && remembered.settlementReason !== request.reason) {\n        throw new Error('protected model settlement retry changed the termination reason')\n      }\n\n      const sealed = sealAgentCandidateModelSettlement(await options.client.settle(request), {\n        preparationId: request.preparationId,\n        grantDigest: request.grantDigest,\n        model: request.resolved.model,\n      })\n      if (state) assertWithinReservedLimits(sealed.usage, state)\n\n      const settlementDigest = canonicalCandidateDigest(sealed.value)\n      if (remembered?.settlementDigest && remembered.settlementDigest !== settlementDigest) {\n        throw new Error('protected model settlement retry returned a different final ledger')\n      }\n      if (remembered?.settlementReason && remembered.settlementReason !== request.reason) {\n        throw new Error('protected model settlement retry changed the termination reason')\n      }\n      const expiresAtMs = state?.expiresAtMs ?? now + RECOVERED_SETTLEMENT_RETENTION_MS\n      if (state) {\n        state.settlementDigest = settlementDigest\n        state.settlementReason = request.reason\n      }\n      reservations.delete(key)\n      expiredReservations.delete(key)\n      rememberSettlement(recentSettlements, key, {\n        settlementDigest,\n        settlementReason: request.reason,\n        expiresAtMs,\n      })\n      return sealed.value\n    },\n  }\n}\n\nfunction validateReserveInput(input: AgentCandidateModelGrantReserveInput): void {\n  if (!Number.isSafeInteger(input.expiresAtMs) || input.expiresAtMs <= 0) {\n    throw new Error('protected model reservation expiry must be a positive safe integer')\n  }\n  if (input.expiresAtMs <= Date.now()) {\n    throw new Error('protected model reservation expiry must be in the future')\n  }\n  for (const [name, value] of [\n    ['maxModelCalls', input.limits.maxModelCalls],\n    ['maxInputTokens', input.limits.maxInputTokens],\n    ['maxOutputTokens', input.limits.maxOutputTokens],\n    ['maxTotalTokens', input.limits.maxTotalTokens],\n  ] as const) {\n    if (value === undefined) continue\n    if (!Number.isSafeInteger(value) || value < 0) {\n      throw new Error(`protected model reservation ${name} must be a nonnegative safe integer`)\n    }\n  }\n  usdToNanos(input.limits.maxCostUsd, 'reserved maxCostUsd')\n}\n\nfunction validateReservation(\n  value: unknown,\n  expected: AgentCandidateModelGrantReserveInput,\n  gatewayDomain: string,\n): AgentCandidateModelGrantReservation {\n  const source = exactRecord(\n    value,\n    ['preparationId', 'digest', 'expiresAtMs', 'enforcedLimits', 'network'],\n    'protected model reservation response',\n  )\n  if (source.preparationId !== expected.preparationId) {\n    throw new Error('protected model reservation response changed preparation identity')\n  }\n  if (!isSha256Digest(source.digest)) {\n    throw new Error('protected model reservation response has an invalid digest')\n  }\n  if (source.expiresAtMs !== expected.expiresAtMs) {\n    throw new Error('protected model reservation response changed expiry')\n  }\n  exactRecord(\n    source.enforcedLimits,\n    modelLimitKeys(expected.limits),\n    'protected model reservation enforced limits',\n  )\n  if (\n    canonicalCandidateDigest(source.enforcedLimits) !== canonicalCandidateDigest(expected.limits)\n  ) {\n    throw new Error('protected model reservation response changed enforced limits')\n  }\n\n  const network = validateReservationNetwork(\n    source.network,\n    expected.limits.maxModelCalls,\n    gatewayDomain,\n  )\n  return immutableCandidateValue({\n    preparationId: source.preparationId,\n    digest: source.digest,\n    expiresAtMs: source.expiresAtMs,\n    enforcedLimits: source.enforcedLimits,\n    network,\n  }) as AgentCandidateModelGrantReservation\n}\n\nfunction validateReservationNetwork(\n  value: unknown,\n  maxModelCalls: number,\n  gatewayDomain: string,\n): AgentCandidateModelAccessNetwork {\n  if (maxModelCalls === 0) {\n    const source = exactRecord(value, ['mode'], 'protected model reservation network')\n    if (source.mode !== 'disabled') {\n      throw new Error('zero-call protected model reservation must disable gateway access')\n    }\n    return { mode: 'disabled' }\n  }\n\n  const source = exactRecord(value, ['mode', 'domains'], 'protected model reservation network')\n  if (source.mode !== 'gateway-only') {\n    throw new Error('protected model reservation must allow only its model gateway')\n  }\n  if (\n    !Array.isArray(source.domains) ||\n    source.domains.length !== 1 ||\n    source.domains[0] !== gatewayDomain\n  ) {\n    throw new Error('protected model reservation returned an unexpected gateway domain')\n  }\n  return { mode: 'gateway-only', domains: [gatewayDomain] }\n}\n\nfunction validateActivation(\n  value: unknown,\n  expectedNames: readonly string[],\n): AgentCandidateProtectedModelActivation {\n  const source = exactRecord(value, ['env'], 'protected model activation response')\n  const env = record(source.env, 'protected model activation environment')\n  const actualNames = Object.keys(env).sort()\n  if (\n    actualNames.length !== expectedNames.length ||\n    actualNames.some((name, index) => name !== expectedNames[index])\n  ) {\n    throw new Error('protected model activation returned unexpected environment names')\n  }\n  const detached: Record<string, string> = Object.create(null) as Record<string, string>\n  for (const name of expectedNames) {\n    const value = env[name]\n    if (typeof value !== 'string' || value.length < 8 || value.length > 65_536) {\n      throw new Error(`protected model activation ${name} must be a non-empty protected value`)\n    }\n    detached[name] = value\n  }\n  return Object.freeze({ env: Object.freeze(detached) })\n}\n\nfunction validateResolvedModel(\n  value: unknown,\n  expected: Parameters<AgentCandidateModelPort['resolve']>[0],\n): AgentCandidateResolvedModel {\n  const source = exactRecord(\n    value,\n    ['requested', 'provider', 'model', 'snapshot', 'reasoningEffort'],\n    'resolved candidate model',\n  )\n  if (source.requested !== expected.requested) {\n    throw new Error('model resolver changed the evaluator-owned request')\n  }\n  if (source.reasoningEffort !== expected.reasoningEffort) {\n    throw new Error('model resolver changed the evaluator-owned reasoning effort')\n  }\n  for (const name of ['requested', 'provider', 'model', 'snapshot'] as const) {\n    if (typeof source[name] !== 'string' || source[name].length === 0) {\n      throw new Error(`resolved candidate model ${name} must be non-empty`)\n    }\n  }\n  return source as unknown as AgentCandidateResolvedModel\n}\n\nfunction assertGrantIdentity(\n  expected: RememberedReservation,\n  actual: AgentCandidateModelGrantActivateInput | AgentCandidateModelGrantSettleInput,\n): void {\n  if (\n    actual.executionId !== expected.executionId ||\n    actual.preparationId !== expected.preparationId ||\n    actual.grantDigest !== expected.grantDigest ||\n    canonicalCandidateDigest(actual.resolved) !== canonicalCandidateDigest(expected.resolved)\n  ) {\n    throw new Error('protected model grant input does not match its immutable reservation')\n  }\n}\n\nfunction assertWithinReservedLimits(\n  usage: {\n    modelCalls: number\n    inputTokens: number\n    outputTokens: number\n    costUsdNanos: number\n  },\n  reservation: RememberedReservation,\n): void {\n  for (const [name, actual, limit] of [\n    ['model calls', usage.modelCalls, reservation.limits.maxModelCalls],\n    ['input tokens', usage.inputTokens, reservation.limits.maxInputTokens],\n    ['output tokens', usage.outputTokens, reservation.limits.maxOutputTokens],\n    ['cost USD nanos', usage.costUsdNanos, reservation.maxCostUsdNanos],\n  ] as const) {\n    if (actual > limit) {\n      throw new Error(`protected model settlement ${name} ${actual} exceeds reserved ${limit}`)\n    }\n  }\n  const maxTotalTokens = reservation.limits.maxTotalTokens\n  if (maxTotalTokens !== undefined) {\n    const totalTokens = usage.inputTokens + usage.outputTokens\n    if (!Number.isSafeInteger(totalTokens)) {\n      throw new Error('protected model settlement total token usage is incomplete')\n    }\n    if (totalTokens > maxTotalTokens) {\n      throw new Error(\n        `protected model settlement total tokens ${totalTokens} exceeds reserved ${maxTotalTokens}`,\n      )\n    }\n  }\n}\n\nfunction modelLimitKeys(limits: AgentCandidateModelLimits): readonly string[] {\n  return limits.maxTotalTokens === undefined\n    ? ['maxModelCalls', 'maxInputTokens', 'maxOutputTokens', 'maxCostUsd']\n    : ['maxModelCalls', 'maxInputTokens', 'maxOutputTokens', 'maxTotalTokens', 'maxCostUsd']\n}\n\nfunction exactEnvironmentNames(values: readonly string[]): readonly string[] {\n  if (values.length === 0) {\n    throw new Error('protected model activation environment names must not be empty')\n  }\n  const names = [...values].sort()\n  if (new Set(names).size !== names.length) {\n    throw new Error('protected model activation environment names must be unique')\n  }\n  for (const name of names) {\n    if (\n      !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) ||\n      ['__proto__', 'constructor', 'prototype'].includes(name)\n    ) {\n      throw new Error(`protected model activation environment name is invalid: ${name}`)\n    }\n  }\n  return Object.freeze(names)\n}\n\nfunction assertGatewayDomain(value: string): string {\n  if (\n    value.length > 253 ||\n    value !== value.toLowerCase() ||\n    value.endsWith('.') ||\n    value.includes(':') ||\n    value === 'localhost' ||\n    value.endsWith('.localhost') ||\n    value === 'metadata.google' ||\n    value === 'metadata.google.internal'\n  ) {\n    throw new Error('protected model gateway must be an exact lowercase public DNS name')\n  }\n  const labels = value.split('.')\n  if (\n    labels.length < 2 ||\n    !labels.every(\n      (label) =>\n        label.length >= 1 && label.length <= 63 && /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(label),\n    ) ||\n    !/[a-z]/.test(labels.at(-1) ?? '')\n  ) {\n    throw new Error('protected model gateway must be an exact lowercase public DNS name')\n  }\n  return value\n}\n\nfunction reservationKey(executionId: string, preparationId: string): string {\n  return canonicalCandidateDigest({ executionId, preparationId })\n}\n\nfunction pruneExpiredState(\n  reservations: Map<string, RememberedReservation>,\n  expiredReservations: Map<string, { state: RememberedReservation; retainedUntilMs: number }>,\n  settlements: Map<string, RememberedSettlement>,\n  now: number,\n): void {\n  for (const [key, value] of reservations) {\n    if (value.expiresAtMs <= now) {\n      reservations.delete(key)\n      expiredReservations.set(key, {\n        state: value,\n        retainedUntilMs: now + RECOVERED_SETTLEMENT_RETENTION_MS,\n      })\n    }\n  }\n  for (const [key, value] of expiredReservations) {\n    if (value.retainedUntilMs <= now) expiredReservations.delete(key)\n  }\n  for (const [key, value] of settlements) {\n    if (value.expiresAtMs <= now) settlements.delete(key)\n  }\n}\n\nfunction rememberSettlement(\n  settlements: Map<string, RememberedSettlement>,\n  key: string,\n  value: RememberedSettlement,\n): void {\n  settlements.delete(key)\n  settlements.set(key, value)\n  while (settlements.size > MAX_RECENT_SETTLEMENTS) {\n    const oldest = settlements.keys().next().value\n    if (oldest === undefined) return\n    settlements.delete(oldest)\n  }\n}\n\nfunction isSha256Digest(value: unknown): value is Sha256Digest {\n  return typeof value === 'string' && /^sha256:[a-f0-9]{64}$/.test(value)\n}\n\nfunction exactRecord(\n  value: unknown,\n  keys: readonly string[],\n  label: string,\n): Record<string, unknown> {\n  const source = record(value, label)\n  assertExactObjectKeys(source, keys, label)\n  return source\n}\n\nfunction record(value: unknown, label: string): Record<string, unknown> {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error(`${label} must be an object`)\n  }\n  const prototype = Object.getPrototypeOf(value)\n  if (prototype !== Object.prototype && prototype !== null) {\n    throw new Error(`${label} must be a plain object`)\n  }\n  return value as Record<string, unknown>\n}\n"],"mappings":";;;;;AAqCA,MAAM,+BAA+B;AACrC,MAAM,gCAAgC,KAAK;;AA2B3C,SAAgB,wCACd,SAC4B;CAC5B,OAAO,IAAI,mCAAmC,OAAO;AACvD;AAEA,IAAM,qCAAN,MAA+E;CAShD;CAR7B,yBAA0B,IAAI,IAAkC;CAChE;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,SAAgE;EAA/C,KAAA,UAAA;EAC3B,IAAI,CAAC,QAAQ,SAAS,cACpB,MAAM,IAAI,MACR,+BAA+B,QAAQ,SAAS,KAAK,qCACvD;EAEF,KAAK,eAAe,QAAQ,SAAS;EACrC,KAAK,YAAY,eAAe,QAAQ,SAAS;EACjD,KAAK,qBAAqB,gBACxB,QAAQ,sBAAsB,8BAC9B,iCACF;EACA,KAAK,sBAAsB,gBACzB,QAAQ,uBAAuB,+BAC/B,kCACF;EACA,KAAK,kBAAkB,QAAQ,kBAC3B,wBAAwB,QAAQ,eAAe,IAC/C,KAAA;CACN;CAEA,MAAM,QACJ,SACA,SACA;EACA,uBAAuB,OAAO;EAC9B,MAAM,UAAU,QAAQ,UAAU,KAAK;EACvC,IAAI,QAAQ,SAAS,UAAU,MAAM,IAAI,MAAM,gDAAgD;EAC/F,MAAM,UAAU,QAAQ,cAAc,MAAM,SAAS,MAAM,OAAO;EAClE,MAAM,SACJ,QAAQ,SAAS,aACZ,EAAE,MAAM,UAAU,IAClB;GAAE,MAAM;GAAU,cAAc,CAAC,GAAG,QAAQ,OAAO;EAAE;EAC5D,MAAM,KAAK,iBAAiB,OAAO,IAAI;EACvC,QAAQ,OAAO,eAAe;EAE9B,MAAM,MAAM,aAAa,QAAQ,aAAa,QAAQ,cAAc,MAAM,MAAM;EAChF,IAAI,KAAK,OAAO,IAAI,GAAG,GAAG,MAAM,IAAI,MAAM,mDAAmD;EAC7F,MAAM,QAAQ,WACZ,QAAQ,cAAc,MAAM,SAAS,UAAU,OAC/C,QAAQ,cAAc,MAAM,SAAS,UAAU,cACjD;EACA,MAAM,gBAAgB,sBACpB,QAAQ,WAAW,WACnB,KAAK,mBACP;EAcA,MAAM,oBAAoB,yBAbH,wBAAwB;GAC7C,MAAM;GACN,UAAU,KAAK,QAAQ,SAAS;GAChC,aAAa,QAAQ;GACrB,qBAAqB,QAAQ,cAAc,MAAM;GACjD;GACA;GACA;GACA,oBAAoB,KAAK;GACzB,WAAW,KAAK;GAChB,QAAQ;IAAE,WAAW,QAAQ;IAAW,UAAU,QAAQ;GAAS;GACnE,GAAI,KAAK,kBAAkB,EAAE,iBAAiB,KAAK,gBAAgB,IAAI,CAAC;EAC1E,CACgE,CAAC;EACjE,MAAM,WAAW,wBAAwB;GACvC,MAAM;GACN,UAAU,KAAK,QAAQ,SAAS;GAChC,aAAa,QAAQ;GACrB,qBAAqB,QAAQ,cAAc,MAAM;GACjD;GACA,iBAAiB,QAAQ;GACzB,gBAAgB,QAAQ;EAC1B,CAAC;EACD,MAAM,cAAc,MAAM,KAAK,aAAa,OAAO;GACjD;GACA;GACA;GACA,oBAAoB,KAAK;GACzB,WAAW,KAAK;GAChB;GACA,gBAAgB,wBACd,QAAQ,aACR,QAAQ,cAAc,MAAM,MAC9B;GACA,QAAQ,QAAQ;GAChB,GAAI,KAAK,kBAAkB,EAAE,iBAAiB,KAAK,gBAAgB,IAAI,CAAC;EAC1E,CAAC;EACD,IAAI;GACF,2BAA2B,aAAa,UAAU,KAAK,QAAQ,SAAS,IAAI;EAC9E,SAAS,OAAO;GACd,IAAI;IACF,MAAM,YAAY,QAAQ;GAC5B,SAAS,cAAc;IACrB,MAAM,IAAI,eACR,CAAC,OAAO,YAAY,GACpB,kDACF;GACF;GACA,MAAM;EACR;EACA,MAAM,QAA8B,EAAE,YAAY;EAClD,KAAK,OAAO,IAAI,KAAK,KAAK;EAG1B,KAAI,MADmB,YAAY,QAAQ,KAAK,EAAA,CACnC,WAAW,GACtB,MAAM,IAAI,MAAM,wDAAwD;EAE1E,MAAM,mBAAmB,aAAa,SAAS,QAAQ,MAAM;EAC7D,MAAM,SAAS,YAAY,OAAO;EAClC,MAAM,YAAY,KAAK,IAAI;EAC3B,MAAM,QAAQ;GACZ,OAAO,QAAQ,MAAM;GACrB,YAAY,QAAQ,UAAU,KAAK,SAAS;GAC5C;GACA,cAAc,QAAQ;GACtB,WAAW,QAAQ,WAAW;GAC9B,MAAM;IACJ,GAAG,QAAQ,MAAM;IACjB,eAAe,YAAY;IAC3B,qBAAqB,YAAY;GACnC;GACA,SAAS;EACX;EACA,MAAM,UAAU,MAAM,YAAY,QAAQ,MAAM,QAAQ,EAAE,QAAQ,QAAQ,OAAO,CAAC;EAClF,MAAM,gBAAgB,cAAc,SAAS,QAAQ,QAAQ;EAC7D,cAAmB,YAAY,KAAA,CAAS;EACxC,IAAI;EACJ,IAAI,gBAAgB;EACpB,MAAM,eAAe;GACnB,IAAI,CAAC,eAAe,iBAAiB,YAAY,OAAO;EAC1D;EACA,QAAQ,OAAO,iBAAiB,SAAS,QAAQ,EAAE,MAAM,KAAK,CAAC;EAC/D,IAAI,QAAQ,OAAO,SAAS,OAAO;EACnC,IAAI;GACF,MAAM,cAAc,MAAM,QAAQ,KAAK;GACvC,gBAAgB;GAChB,QAAQ,OAAO,oBAAoB,SAAS,MAAM;GAClD,IAAI,cAAc,MAAM;GACxB,MAAM,SAAS,MAAM,QAAQ,OAAO;GACpC,qBAAqB,QAAQ,WAAW;GACxC,MAAM,SAAS,MAAM,YAAY,eAAe,QAAQ,QAAQ,QAAQ,YAAY;GACpF,MAAM,cAAc;GACpB,MAAM,wBAAwB,OAAO,QAAQ,YAAY,MAAM;GAC/D,OAAO;IAAE,aAAa,QAAQ;IAAa;GAAY;EACzD,UAAU;GACR,QAAQ,OAAO,oBAAoB,SAAS,MAAM;EACpD;CACF;CAEA,MAAM,KACJ,SACA,SACqC;EACrC,MAAM,KAAK,iBAAiB;EAC5B,QAAQ,OAAO,eAAe;EAC9B,MAAM,cAAc,MAAM,KAAK,QAAQ,SAAS,IAAI;EACpD,IAAI,CAAC,aAAa,OAAO,EAAE,SAAS,KAAK;EACzC,IAAI,WAAW,MAAM,YAAY,QAAQ,KAAK;EAC9C,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,MAAM,oEAAoE;EAEtF,MAAM,SAAS,SAAS;EACxB,IAAI,QAAQ,SAAS;GACnB,MAAM,UAAU,MAAM,YAAY,QAAQ,IAAI,OAAO,GAAG;GACxD,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,uDAAuD;GACrF,MAAM,YAAY,OAAO;EAC3B;EACA,QAAQ,OAAO,eAAe;EAC9B,WAAW,MAAM,YAAY,QAAQ,KAAK;EAC1C,IAAI,SAAS,MAAM,UAAU,MAAM,OAAO,GACxC,MAAM,IAAI,MAAM,mDAAmD;EAErE,MAAM,cAAc,SAAS;EAC7B,IAAI,aAAa,qBAAqB,WAAW;EACjD,MAAM,QAAQ,KAAK,OAAO,IAAI,aAAa,QAAQ,aAAa,QAAQ,mBAAmB,CAAC;EAC5F,IAAI,OAAO;GACT,MAAM,cAAc,aAAa,eAAe,MAAM;GACtD,IAAI,QAAQ,WAAW,aAAa,MAAM,OACxC,MAAM,qBAAqB;IACzB,MAAM;IACN,WAAW,MAAM,MAAM;GACzB;GAEF,MAAM,wBAAwB,OAAO,QAAQ,YAAY,WAAW;EACtE;EACA,OAAO,EAAE,SAAS,KAAK;CACzB;CAEA,MAAM,QACJ,SACA,SACA;EACA,MAAM,KAAK,iBAAiB;EAC5B,QAAQ,OAAO,eAAe;EAC9B,MAAM,cAAc,MAAM,KAAK,QAAQ,SAAS,KAAK;EACrD,MAAM,WAAW,MAAM,YAAY,QAAQ,KAAK;EAChD,MAAM,SAAS,SAAS;EACxB,IAAI,SAAS,WAAW,KAAK,CAAC,UAAU,OAAO,SAC7C,MAAM,IAAI,MAAM,uEAAuE;EAEzF,qBAAqB,MAAM;EAC3B,MAAM,UAAU,MAAM,YAAY,QAAQ,IAAI,OAAO,GAAG;EACxD,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,wDAAwD;EAEtF,qBAAqB,MADO,QAAQ,OAAO,GACP,OAAO,WAAW;EACtD,MAAM,QAAQ,KAAK,OAAO,IAAI,aAAa,QAAQ,aAAa,QAAQ,mBAAmB,CAAC;EAC5F,MAAM,SACJ,OAAO,UACN,MAAM,YACL,cAAc,SAAS,WAAW,WAAW,CAAC,CAAC,QAAQ,GACvD,QAAQ,QACR,KAAK,IAAI,IAAI,KAAK,kBACpB;EACF,QAAQ,OAAO,eAAe;EAC9B,MAAM,WAAW,wBAAwB;GACvC,MAAM;GACN,UAAU,YAAY;GACtB,eAAe,YAAY;GAC3B,aAAa,QAAQ;GACrB,qBAAqB,QAAQ;GAC7B,mBAAmB,YAAY,UAAU;GACzC,SAAS;IACP,KAAK,OAAO;IACZ,UAAU,OAAO;IACjB,GAAI,OAAO,aAAa,EAAE,YAAY,OAAO,WAAW,IAAI,CAAC;IAC7D,aAAa,OAAO;GACtB;GACA,GAAI,OAAO,qBAAqB,EAAE,oBAAoB,MAAM,mBAAmB,IAAI,CAAC;GACpF,QAAQ;IAAE,QAAQ,YAAY,MAAM;IAAG,YAAY,OAAO;GAAW;EACvE,CAAC;EACD,OAAO;GACL,aAAa;IAAE,MAAM;IAAmB,OAAO;GAAO;GACtD;EACF;CACF;CAEA,MAAM,QACJ,SACA,SACsC;EACtC,MAAM,KAAK,iBAAiB;EAC5B,QAAQ,OAAO,eAAe;EAC9B,MAAM,cAAc,MAAM,KAAK,QAAQ,SAAS,IAAI;EACpD,IAAI,CAAC,aAAa,OAAO,EAAE,UAAU,KAAK;EAC1C,IAAI;EACJ,IAAI;GACF,MAAM,YAAY,QAAQ;EAC5B,SAAS,OAAO;GACd,eAAe;EACjB;EAEA,IAAI,MADoB,KAAK,aAAa,IAAI,YAAY,EAAE,GAE1D,MAAM,IAAI,MAAM,oDAAoD,EAAE,OAAO,aAAa,CAAC;EAE7F,QAAQ,OAAO,eAAe;EAC9B,KAAK,OAAO,OAAO,aAAa,QAAQ,aAAa,QAAQ,mBAAmB,CAAC;EACjF,OAAO,EAAE,UAAU,KAAK;CAC1B;CAEA,MAAc,iBAAiB,MAA4C;EACzE,MAAM,UACJ,KAAK,uBAAuB,QAAQ,QAAQ,KAAK,QAAQ,SAAS,aAAa,CAAC;EAClF,KAAK,sBAAsB;EAC3B,IAAI;EACJ,IAAI;GACF,eAAe,MAAM;EACvB,SAAS,OAAO;GACd,IAAI,KAAK,wBAAwB,SAAS,KAAK,sBAAsB,KAAA;GACrE,MAAM;EACR;EACA,MAAM,QAAQ,aAAa;EAC3B,IAAI,CAAC,OACH,MAAM,IAAI,MACR,+BAA+B,KAAK,QAAQ,SAAS,KAAK,yCAC5D;EAEF,IAAI,QAAQ,CAAC,MAAM,OAAO,SAAS,IAAI,GACrC,MAAM,IAAI,MACR,+BAA+B,KAAK,QAAQ,SAAS,KAAK,qBAAqB,KAAK,cACtF;CAEJ;CAUA,MAAc,QACZ,SACA,kBACmD;EACnD,MAAM,MAAM,aAAa,QAAQ,aAAa,QAAQ,mBAAmB;EACzE,MAAM,SAAS,KAAK,OAAO,IAAI,GAAG,CAAC,EAAE;EACrC,IAAI,QAAQ,OAAO;EACnB,MAAM,WAAW;GACf,MAAM;GACN,UAAU,KAAK,QAAQ,SAAS;GAChC,aAAa,QAAQ;GACrB,qBAAqB,QAAQ;EAC/B;EAKA,MAAM,WAAU,MAJK,KAAK,aAAa,KAAK;GAC1C;GACA,GAAI,KAAK,kBAAkB,EAAE,iBAAiB,KAAK,gBAAgB,IAAI,CAAC;EAC1E,CAAC,EAAA,CACsB,QACpB,gBACC,YAAY,aAAa,KAAK,QAAQ,SAAS,QAC/C,OAAO,QAAQ,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,WACrC,kBAAkB,YAAY,WAAW,OAAO,KAAK,CACvD,CACJ;EACA,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MAAM,mEAAmE;EAErF,MAAM,cAAc,QAAQ;EAC5B,IAAI,CAAC,aAAa;GAChB,IAAI,kBAAkB,OAAO,KAAA;GAC7B,MAAM,IAAI,MAAM,iDAAiD;EACnE;EACA,IAAI,CAACA,iBAAe,YAAY,UAAU,iBAAiB,GACzD,MAAM,IAAI,MAAM,4DAA4D;EAE9E,KAAK,OAAO,IAAI,KAAK,EAAE,YAAY,CAAC;EACpC,OAAO;CACT;AACF;AAEA,eAAe,wBACb,OACA,YACA,QACe;CACf,MAAM,QAAQ,MAAM;CACpB,IAAI,CAAC,SAAS,MAAM,SAAS;CAC7B,MAAM,UAAU,KAAK,IAAI,MAAM,WAAW,KAAK,IAAI,KAAK,IAAI,GAAG,MAAM,YAAY,CAAC;CAClF,MAAM,cAAc,MAAM,sBAAsB,MAAM,eAAe,QAAQ;CAC7E,MAAM,WAAW,UAAU;EACzB,OAAO,MAAM;EACb,YAAY,MAAM;EAClB,WAAW,MAAM;EACjB;EACA,QAAQ,aAAa,SAAS,UAAU,YAAY,aAAa,IAAI,cAAc;EACnF,MAAM,MAAM;CACd,CAAC;CACD,MAAM,UAAU;AAClB;AAEA,SAAS,uBAAuB,SAA8C;CAC5E,IAAI,QAAQ,UAAU,KAAK,QAAQ,SAAS,UAC1C,MAAM,IAAI,MACR,gFACF;CAEF,IAAI,QAAQ,cAAc,MAAM,SAAS,aAAa,cAAc,QAAQ,OAAO,WACjF,MAAM,IAAI,MAAM,6EAA6E;CAE/F,IAAI,QAAQ,OAAO,SAAS,YAC1B,MAAM,IAAI,MAAM,mEAAmE;CAErF,MAAM,YAAY,QAAQ,UAAU,KAAK,QAAQ,UAAU,YAAY;CACvE,IACE,EACE,UAAU,WAAW,OAAO,KAC5B,cAAc,sBACd,UAAU,SAAS,OAAO,IAG5B,MAAM,IAAI,MAAM,4EAA4E;CAE9F,IAAI,CAAC,MAAM,WAAW,QAAQ,OAAO,UAAU,KAAK,CAAC,QAAQ,OAAO,IAAI,MAAM,KAAK,GACjF,MAAM,IAAI,MAAM,8EAA8E;CAEhG,IAAI,CAAC,QAAQ,OAAO,MAAM,IAAI,MAAM,uCAAuC;CAC3E,mCAAmC,QAAQ,KAAK;AAClD;AAEA,eAAe,mBACb,aACA,SACA,QACe;CACf,mCAAmC,QAAQ,KAAK;CAChD,MAAM,iBAAiB,gCAAgC,OAAO;CAC9D,KAAK,MAAM,QAAQ,QAAQ,OAAO,KAAK,OACrC,MAAM,YAAY,UAAU,QAAQ,QAAQ,MAAM,UAAU,KAAK,IAAI,GAAG,KAAK,OAAO;EAClF,MAAM,KAAK;EACX;CACF,CAAC;CAEH,KAAK,MAAM,QAAQ,QAAQ,OAAO,QAAQ,OACxC,MAAM,YAAY,UAAU,yBAAyB,SAAS,IAAI,GAAG,KAAK,OAAO;EAC/E,MAAM,KAAK;EACX;CACF,CAAC;CAEH,IAAI,QAAQ,aAAa,gBAAgB;EACvC,KAAK,MAAM,QAAQ,QAAQ,UAAU,OACnC,MAAM,YAAY,UAAU,QAAQ,eAAe,MAAM,KAAK,IAAI,GAAG,KAAK,OAAO;GAC/E,MAAM,KAAK;GACX;EACF,CAAC;EAEH,IAAI,QAAQ,UAAU,mBAAmB,eAAe,iBACtD,MAAM,YAAY,UAChB,eAAe,iBACf,QAAQ,UAAU,iBAClB;GAAE,MAAM;GAAO;EAAO,CACxB;CAEJ;CACA,IAAI,QAAQ,YAAY,SAAS,SAAS,aACxC,MAAM,YAAY,UAAU,QAAQ,YAAY,SAAS,MAAM,QAAQ,YAAY,OAAO;EACxF,MAAM;EACN;CACF,CAAC;AAEL;AAEA,SAAS,gCACP,SACiE;CACjE,MAAM,YAAY,QAAQ;CAC1B,IAAI,CAAC,WAAW;EACd,IACE,QAAQ,OAAO,IAAA,uCAAsC,KAAA,KACrD,QAAQ,OAAO,IAAA,mDAAkD,KAAA,GAEjE,MAAM,IAAI,MAAM,sEAAsE;EAExF;CACF;CACA,MAAM,QAAQ,iCACZ,QAAQ,MAAM,UACd,UAAU,oBAAoB,KAAA,CAChC;CACA,IACE,QAAQ,OAAO,IAAA,uCAAsC,MAAM,QAC3D,QAAQ,OAAO,IAAA,mDAAkD,MAAM,iBAEvE,MAAM,IAAI,MAAM,sEAAsE;CAExF,MAAM,WAAW,CAAC,MAAM,MAAM,MAAM,eAAe,CAAC,CAAC,QAClD,UAA2B,UAAU,KAAA,CACxC;CAQA,IACE;EAPA,GAAG,QAAQ,OAAO,KAAK,MAAM,KAAK,SAAS,QAAQ,QAAQ,MAAM,UAAU,KAAK,IAAI,CAAC;EACrF,GAAG,QAAQ,OAAO,QAAQ,MAAM,KAAK,SAAS,yBAAyB,SAAS,IAAI,CAAC;EACrF,GAAI,QAAQ,YAAY,SAAS,SAAS,cACtC,CAAC,QAAQ,YAAY,SAAS,IAAI,IAClC,CAAC;CAGI,CAAC,CAAC,MAAM,SACf,SAAS,MACN,iBACC,SAAS,gBACT,KAAK,WAAW,GAAG,aAAa,EAAE,KAClC,aAAa,WAAW,GAAG,KAAK,EAAE,CACtC,CACF,GAEA,MAAM,IAAI,MAAM,0DAA0D;CAE5E,OAAO;AACT;AAEA,SAAS,yBACP,SACA,MACQ;CAER,MAAM,gBADY,QAAQ,cAAc,MAAM,SAAS,QAAQ,oBAC3B,SAAS,QAAQ,MAAM,WAAW,QAAQ,MAAM;CACpF,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,+CAA+C;CACnF,IAAI,KAAK,SAAS,SAAS,OAAO,QAAQ,eAAe,KAAK,IAAI;CAElE,OAAO,QADU,sBAAsB,OACjB,GAAG,KAAK,IAAI;AACpC;AAEA,SAAS,sBAAsB,SAAgD;CAC7E,MAAM,QAAQ,2BACZ,QAAQ,YAAY,MAAM,UAC1B,QAAQ,MAAM,WAChB;CACA,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,+DAA+D;CAC3F,IACE,QAAQ,OAAO,IAAA,2BAAoC,MAAM,YACzD,QAAQ,OAAO,IAAA,mCAAsC,MAAM,YAE3D,MAAM,IAAI,MAAM,0EAA0E;CAE5F,OAAO,MAAM;AACf;AAEA,SAAS,YAAY,SAAiE;CACpF,MAAM,cAAc,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,QAAQ,YAAY,KAAK;CAC9F,MAAM,OAAO;EACX,YAAY,QAAQ,OAAO;EAC3B,MAAM,QAAQ,OAAO;EACrB,KAAK,QAAQ,OAAO;EACpB,KAAK,QAAQ,OAAO;EACpB,WAAW;CACb;CACA,QAAQ,QAAQ,YAAY,SAAS,MAArC;EACE,KAAK,eACH,OAAO;GAAE,GAAG;GAAM,MAAM,CAAC,GAAG,KAAK,MAAM,WAAW;EAAE;EACtD,KAAK,cACH,OAAO;GAAE,GAAG;GAAM,OAAO;EAAY;EACvC,KAAK,aACH,OAAO;CACX;AACF;AAEA,eAAe,cAAc,SAA4B,UAAuC;CAC9F,MAAM,SAAmB,CAAC;CAC1B,IAAI,aAAa;CACjB,WAAW,MAAM,SAAS,QAAQ,OAAO,GAAG;EAC1C,MAAM,QAAQ,OAAO,KAAK,OAAO,MAAM;EACvC,cAAc,MAAM;EACpB,IAAI,aAAa,UAAU;GACzB,IAAI;GACJ,IAAI;IACF,MAAM,YAAY,OAAO;GAC3B,SAAS,OAAO;IACd,YAAY;GACd;GACA,MAAM,IAAI,MAAM,gCAAgC,SAAS,gBAAgB,EACvE,OAAO,UACT,CAAC;EACH;EACA,OAAO,KAAK,KAAK;CACnB;CACA,OAAO,WAAW,KAAK,OAAO,OAAO,QAAQ,UAAU,CAAC;AAC1D;AAEA,eAAe,YACb,QACA,QACA,cACqB;CACrB,OAAO,eAAe;CACtB,MAAM,cAAc,eAAe,KAAK,IAAI;CAC5C,IAAI,eAAe,GAAG,MAAM,IAAI,MAAM,mCAAmC;CACzE,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,QACA,IAAI,SAAgB,UAAU,WAAW;GACvC,gBAAgB,OAAO,OAAO,0BAAU,IAAI,MAAM,4BAA4B,CAAC;GAC/E,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;GACxD,QAAQ,iBACA,uBAAO,IAAI,MAAM,mCAAmC,CAAC,GAC3D,WACF;EACF,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,SAAS,OAAO,oBAAoB,SAAS,OAAO;EACxD,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF;AAEA,eAAe,YAAY,SAA2C;CAEpE,IAAI,EAAC,MADgB,QAAQ,OAAO,EAAA,CACxB,SAAS;CACrB,IAAI;EACF,MAAM,QAAQ,KAAK;CACrB,SAAS,OAAO;EACd,KAAK,MAAM,QAAQ,OAAO,EAAA,CAAG,SAAS,MAAM;CAC9C;CACA,MAAM,cAAc,MAAM,QAAQ,KAAK;CACvC,qBAAqB,MAAM,QAAQ,OAAO,GAAG,WAAW;AAC1D;AAEA,SAAS,qBACP,QACA,UACwF;CACxF,IAAI,OAAO,WAAW,CAAC,OAAO,aAC5B,MAAM,IAAI,MAAM,sDAAsD;CAExE,IAAI,YAAY,CAAC,kBAAkB,OAAO,aAAa,QAAQ,GAC7D,MAAM,IAAI,MAAM,mEAAmE;AAEvF;AAEA,SAAS,2BACP,aACA,UACA,cACM;CACN,IAAI,CAAC,YAAY,MAAM,YAAY,aAAa,cAC9C,MAAM,IAAI,MAAM,gEAAgE;CAElF,IACE,CAAC,OAAO,QAAQ,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,WACtC,kBAAkB,YAAY,WAAW,OAAO,KAAK,CACvD,GAEA,MAAM,IAAI,MAAM,qEAAqE;AAEzF;AAEA,SAAS,WAAW,aAAiE;CACnF,MAAM,WAAW,YAAY,UAAU;CACvC,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,OAAO,QAAQ,IAAI,GACxD,MAAM,IAAI,MAAM,qDAAqD;CAEvE,OAAO,EAAE,UAAU,OAAO,QAAQ,EAAE;AACtC;AAEA,SAAS,aAAa,aAAqB,qBAA2C;CACpF,OAAO,GAAG,YAAY,IAAI;AAC5B;AAEA,SAAS,wBAAwB,aAAqB,qBAA2C;CAC/F,OAAO,aAAa,yBAAyB;EAC3C,MAAM;EACN;EACA;CACF,CAAC,CAAC,CAAC,MAAM,CAAgB;AAC3B;AAEA,SAAS,WAAW,OAAe,gBAAsC;CACvE,IAAIA,iBAAe,KAAK,GAAG;EACzB,IAAI,UAAU,gBACZ,MAAM,IAAI,MAAM,gEAAgE;EAElF,OAAO;CACT;CACA,MAAM,SAAS,MAAM,YAAY,GAAG;CACpC,IAAI,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG;CACnC,IAAI,MAAM,MAAM,SAAS,CAAC,MAAM,gBAC9B,MAAM,IAAI,MAAM,gEAAgE;CAElF,OAAO;AACT;AAEA,SAAS,sBAAsB,WAAmB,aAA6B;CAC7E,MAAM,QAAQ,gBAAgB,WAAW,6BAA6B,IAAI;CAC1E,IAAI,CAAC,OAAO,cAAc,KAAK,GAAG,MAAM,IAAI,MAAM,6CAA6C;CAC/F,OAAO,KAAK,KAAK,QAAQ,GAAK,IAAI;AACpC;AAEA,SAAS,eAAe,WAAmE;CACzF,IAAI,CAAC,OAAO,SAAS,UAAU,GAAG,KAAK,UAAU,OAAO,GACtD,MAAM,IAAI,MAAM,+CAA+C;CAEjE,OAAO,OAAO,OAAO;EACnB,KAAK,UAAU;EACf,UAAU,gBAAgB,UAAU,UAAU,sBAAsB;EACpE,QAAQ,gBAAgB,UAAU,QAAQ,oBAAoB;CAChE,CAAC;AACH;AAEA,SAAS,gBAAgB,OAAe,OAAuB;CAC7D,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAC1C,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CACvD,OAAO;AACT;AAEA,SAAS,QAAQ,MAAc,cAA8B;CAC3D,IAAI,MAAM,WAAW,YAAY,GAAG,MAAM,IAAI,MAAM,uCAAuC;CAC3F,MAAM,OAAO,MAAM,UAAU,YAAY;CACzC,IAAI,SAAS,QAAQ,KAAK,WAAW,KAAK,GACxC,MAAM,IAAI,MAAM,iDAAiD;CAEnE,OAAO,MAAM,KAAK,MAAM,IAAI;AAC9B;AAEA,SAASA,iBAAe,OAAuC;CAC7D,OAAO,OAAO,UAAU,YAAY,wBAAwB,KAAK,KAAK;AACxE;;;ACjqBA,MAAM,yBAAyB;AAC/B,MAAM,oCAAoC,MAAU;;;;;;;;AASpD,SAAgB,uCACd,SACyB;CACzB,MAAM,gBAAgB,oBAAoB,QAAQ,aAAa;CAC/D,MAAM,qBAAqB,sBAAsB,QAAQ,kBAAkB;CAC3E,MAAM,+BAAe,IAAI,IAAmC;CAC5D,MAAM,sCAAsB,IAAI,IAG9B;CACF,MAAM,oCAAoB,IAAI,IAAkC;CAEhE,OAAO;EACL,SAAS,OAAO,UAAU;GACxB,MAAM,UAAU,wBAAwB,KAAK;GAE7C,OAAO,wBADU,sBAAsB,MAAM,QAAQ,aAAa,OAAO,GAAG,OACtC,CAAC;EACzC;EAEA,cAAc,OAAO,UAAU;GAC7B,kBAAkB,cAAc,qBAAqB,mBAAmB,KAAK,IAAI,CAAC;GAClF,MAAM,UAAU,wBAAwB,KAAK;GAC7C,qBAAqB,OAAO;GAC5B,MAAM,gBAAgB,yBAAyB,OAAO;GACtD,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;GACrE,IAAI,kBAAkB,IAAI,GAAG,GAC3B,MAAM,IAAI,MAAM,gDAAgD;GAGlE,IADgB,oBAAoB,IAAI,GAC9B,GAAG,MAAM,IAAI,MAAM,yCAAyC;GACtE,MAAM,WAAW,aAAa,IAAI,GAAG;GACrC,IAAI,YAAY,SAAS,kBAAkB,eACzC,MAAM,IAAI,MAAM,2DAA2D;GAG7E,MAAM,cAAc,oBAClB,MAAM,QAAQ,OAAO,QAAQ,OAAO,GACpC,SACA,aACF;GACA,MAAM,iBAAiB,yBAAyB,WAAW;GAC3D,IAAI,kBAAkB,IAAI,GAAG,GAC3B,MAAM,IAAI,MAAM,mEAAmE;GAErF,MAAM,WAAW,YAAY,aAAa,IAAI,GAAG;GACjD,IAAI,YAAY,SAAS,kBAAkB,eACzC,MAAM,IAAI,MAAM,2DAA2D;GAE7E,IAAI,YAAY,SAAS,mBAAmB,gBAC1C,MAAM,IAAI,MAAM,+DAA+D;GAEjF,IAAI,CAAC,UACH,aAAa,IAAI,KAAK;IACpB;IACA;IACA,aAAa,QAAQ;IACrB,eAAe,QAAQ;IACvB,aAAa,YAAY;IACzB,aAAa,QAAQ;IACrB,UAAU,wBAAwB,QAAQ,QAAQ;IAClD,QAAQ,wBAAwB,QAAQ,MAAM;IAC9C,iBAAiB,WAAW,QAAQ,OAAO,YAAY,qBAAqB;IAC5E,YAAY;GACd,CAAC;GAEH,OAAO;EACT;EAEA,eAAe,OAAO,UAAU;GAC9B,kBAAkB,cAAc,qBAAqB,mBAAmB,KAAK,IAAI,CAAC;GAClF,MAAM,UAAU,wBAAwB,KAAK;GAC7C,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;GACrE,IAAI,kBAAkB,IAAI,GAAG,GAAG,MAAM,IAAI,MAAM,0CAA0C;GAC1F,MAAM,QAAQ,aAAa,IAAI,GAAG;GAClC,IAAI,CAAC,SAAS,oBAAoB,IAAI,GAAG,GACvC,MAAM,IAAI,MAAM,+CAA+C;GAEjE,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,qDAAqD;GACjF,oBAAoB,OAAO,OAAO;GAClC,IAAI,MAAM,kBAAkB,MAAM,IAAI,MAAM,0CAA0C;GACtF,IAAI,MAAM,eAAe,YACvB,MAAM,IAAI,MAAM,gDAAgD;GAElE,IAAI,CAAC,OAAO,cAAc,QAAQ,YAAY,KAAK,QAAQ,gBAAgB,GACzE,MAAM,IAAI,MAAM,qEAAqE;GAEvF,IAAI,QAAQ,gBAAgB,KAAK,IAAI,GACnC,MAAM,IAAI,MAAM,2DAA2D;GAE7E,IAAI,QAAQ,eAAe,MAAM,aAC/B,MAAM,IAAI,MAAM,iEAAiE;GAEnF,MAAM,aAAa;GACnB,IAAI;IACF,MAAM,aAAa,mBACjB,MAAM,QAAQ,OAAO,SAAS,OAAO,GACrC,MAAM,OAAO,kBAAkB,IAAI,CAAC,IAAI,kBAC1C;IACA,IAAI,kBAAkB,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,MAAM,OAC1D,MAAM,IAAI,MAAM,8DAA8D;IAEhF,MAAM,aAAa;IACnB,OAAO;GACT,SAAS,OAAO;IACd,MAAM,aAAa;IACnB,MAAM;GACR;EACF;EAEA,aAAa,OAAO,UAAU;GAC5B,MAAM,MAAM,KAAK,IAAI;GACrB,kBAAkB,cAAc,qBAAqB,mBAAmB,GAAG;GAC3E,MAAM,UAAU,wBAAwB,KAAK;GAC7C,MAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;GACrE,MAAM,QAAQ,aAAa,IAAI,GAAG,KAAK,oBAAoB,IAAI,GAAG,CAAC,EAAE;GACrE,IAAI,OAAO,oBAAoB,OAAO,OAAO;GAC7C,MAAM,aAAa,SAAS,kBAAkB,IAAI,GAAG;GACrD,IAAI,YAAY,oBAAoB,WAAW,qBAAqB,QAAQ,QAC1E,MAAM,IAAI,MAAM,iEAAiE;GAGnF,MAAM,SAAS,kCAAkC,MAAM,QAAQ,OAAO,OAAO,OAAO,GAAG;IACrF,eAAe,QAAQ;IACvB,aAAa,QAAQ;IACrB,OAAO,QAAQ,SAAS;GAC1B,CAAC;GACD,IAAI,OAAO,2BAA2B,OAAO,OAAO,KAAK;GAEzD,MAAM,mBAAmB,yBAAyB,OAAO,KAAK;GAC9D,IAAI,YAAY,oBAAoB,WAAW,qBAAqB,kBAClE,MAAM,IAAI,MAAM,oEAAoE;GAEtF,IAAI,YAAY,oBAAoB,WAAW,qBAAqB,QAAQ,QAC1E,MAAM,IAAI,MAAM,iEAAiE;GAEnF,MAAM,cAAc,OAAO,eAAe,MAAM;GAChD,IAAI,OAAO;IACT,MAAM,mBAAmB;IACzB,MAAM,mBAAmB,QAAQ;GACnC;GACA,aAAa,OAAO,GAAG;GACvB,oBAAoB,OAAO,GAAG;GAC9B,mBAAmB,mBAAmB,KAAK;IACzC;IACA,kBAAkB,QAAQ;IAC1B;GACF,CAAC;GACD,OAAO,OAAO;EAChB;CACF;AACF;AAEA,SAAS,qBAAqB,OAAmD;CAC/E,IAAI,CAAC,OAAO,cAAc,MAAM,WAAW,KAAK,MAAM,eAAe,GACnE,MAAM,IAAI,MAAM,oEAAoE;CAEtF,IAAI,MAAM,eAAe,KAAK,IAAI,GAChC,MAAM,IAAI,MAAM,0DAA0D;CAE5E,KAAK,MAAM,CAAC,MAAM,UAAU;EAC1B,CAAC,iBAAiB,MAAM,OAAO,aAAa;EAC5C,CAAC,kBAAkB,MAAM,OAAO,cAAc;EAC9C,CAAC,mBAAmB,MAAM,OAAO,eAAe;EAChD,CAAC,kBAAkB,MAAM,OAAO,cAAc;CAChD,GAAY;EACV,IAAI,UAAU,KAAA,GAAW;EACzB,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAC1C,MAAM,IAAI,MAAM,+BAA+B,KAAK,oCAAoC;CAE5F;CACA,WAAW,MAAM,OAAO,YAAY,qBAAqB;AAC3D;AAEA,SAAS,oBACP,OACA,UACA,eACqC;CACrC,MAAM,SAAS,YACb,OACA;EAAC;EAAiB;EAAU;EAAe;EAAkB;CAAS,GACtE,sCACF;CACA,IAAI,OAAO,kBAAkB,SAAS,eACpC,MAAM,IAAI,MAAM,mEAAmE;CAErF,IAAI,CAAC,eAAe,OAAO,MAAM,GAC/B,MAAM,IAAI,MAAM,4DAA4D;CAE9E,IAAI,OAAO,gBAAgB,SAAS,aAClC,MAAM,IAAI,MAAM,qDAAqD;CAEvE,YACE,OAAO,gBACP,eAAe,SAAS,MAAM,GAC9B,6CACF;CACA,IACE,yBAAyB,OAAO,cAAc,MAAM,yBAAyB,SAAS,MAAM,GAE5F,MAAM,IAAI,MAAM,8DAA8D;CAGhF,MAAM,UAAU,2BACd,OAAO,SACP,SAAS,OAAO,eAChB,aACF;CACA,OAAO,wBAAwB;EAC7B,eAAe,OAAO;EACtB,QAAQ,OAAO;EACf,aAAa,OAAO;EACpB,gBAAgB,OAAO;EACvB;CACF,CAAC;AACH;AAEA,SAAS,2BACP,OACA,eACA,eACkC;CAClC,IAAI,kBAAkB,GAAG;EAEvB,IADe,YAAY,OAAO,CAAC,MAAM,GAAG,qCACnC,CAAC,CAAC,SAAS,YAClB,MAAM,IAAI,MAAM,mEAAmE;EAErF,OAAO,EAAE,MAAM,WAAW;CAC5B;CAEA,MAAM,SAAS,YAAY,OAAO,CAAC,QAAQ,SAAS,GAAG,qCAAqC;CAC5F,IAAI,OAAO,SAAS,gBAClB,MAAM,IAAI,MAAM,+DAA+D;CAEjF,IACE,CAAC,MAAM,QAAQ,OAAO,OAAO,KAC7B,OAAO,QAAQ,WAAW,KAC1B,OAAO,QAAQ,OAAO,eAEtB,MAAM,IAAI,MAAM,mEAAmE;CAErF,OAAO;EAAE,MAAM;EAAgB,SAAS,CAAC,aAAa;CAAE;AAC1D;AAEA,SAAS,mBACP,OACA,eACwC;CAExC,MAAM,MAAM,OADG,YAAY,OAAO,CAAC,KAAK,GAAG,qCACnB,CAAC,CAAC,KAAK,wCAAwC;CACvE,MAAM,cAAc,OAAO,KAAK,GAAG,CAAC,CAAC,KAAK;CAC1C,IACE,YAAY,WAAW,cAAc,UACrC,YAAY,MAAM,MAAM,UAAU,SAAS,cAAc,MAAM,GAE/D,MAAM,IAAI,MAAM,kEAAkE;CAEpF,MAAM,WAAmC,OAAO,OAAO,IAAI;CAC3D,KAAK,MAAM,QAAQ,eAAe;EAChC,MAAM,QAAQ,IAAI;EAClB,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,KAAK,MAAM,SAAS,OAClE,MAAM,IAAI,MAAM,8BAA8B,KAAK,qCAAqC;EAE1F,SAAS,QAAQ;CACnB;CACA,OAAO,OAAO,OAAO,EAAE,KAAK,OAAO,OAAO,QAAQ,EAAE,CAAC;AACvD;AAEA,SAAS,sBACP,OACA,UAC6B;CAC7B,MAAM,SAAS,YACb,OACA;EAAC;EAAa;EAAY;EAAS;EAAY;CAAiB,GAChE,0BACF;CACA,IAAI,OAAO,cAAc,SAAS,WAChC,MAAM,IAAI,MAAM,oDAAoD;CAEtE,IAAI,OAAO,oBAAoB,SAAS,iBACtC,MAAM,IAAI,MAAM,6DAA6D;CAE/E,KAAK,MAAM,QAAQ;EAAC;EAAa;EAAY;EAAS;CAAU,GAC9D,IAAI,OAAO,OAAO,UAAU,YAAY,OAAO,KAAK,CAAC,WAAW,GAC9D,MAAM,IAAI,MAAM,4BAA4B,KAAK,mBAAmB;CAGxE,OAAO;AACT;AAEA,SAAS,oBACP,UACA,QACM;CACN,IACE,OAAO,gBAAgB,SAAS,eAChC,OAAO,kBAAkB,SAAS,iBAClC,OAAO,gBAAgB,SAAS,eAChC,yBAAyB,OAAO,QAAQ,MAAM,yBAAyB,SAAS,QAAQ,GAExF,MAAM,IAAI,MAAM,sEAAsE;AAE1F;AAEA,SAAS,2BACP,OAMA,aACM;CACN,KAAK,MAAM,CAAC,MAAM,QAAQ,UAAU;EAClC;GAAC;GAAe,MAAM;GAAY,YAAY,OAAO;EAAa;EAClE;GAAC;GAAgB,MAAM;GAAa,YAAY,OAAO;EAAc;EACrE;GAAC;GAAiB,MAAM;GAAc,YAAY,OAAO;EAAe;EACxE;GAAC;GAAkB,MAAM;GAAc,YAAY;EAAe;CACpE,GACE,IAAI,SAAS,OACX,MAAM,IAAI,MAAM,8BAA8B,KAAK,GAAG,OAAO,oBAAoB,OAAO;CAG5F,MAAM,iBAAiB,YAAY,OAAO;CAC1C,IAAI,mBAAmB,KAAA,GAAW;EAChC,MAAM,cAAc,MAAM,cAAc,MAAM;EAC9C,IAAI,CAAC,OAAO,cAAc,WAAW,GACnC,MAAM,IAAI,MAAM,4DAA4D;EAE9E,IAAI,cAAc,gBAChB,MAAM,IAAI,MACR,2CAA2C,YAAY,oBAAoB,gBAC7E;CAEJ;AACF;AAEA,SAAS,eAAe,QAAsD;CAC5E,OAAO,OAAO,mBAAmB,KAAA,IAC7B;EAAC;EAAiB;EAAkB;EAAmB;CAAY,IACnE;EAAC;EAAiB;EAAkB;EAAmB;EAAkB;CAAY;AAC3F;AAEA,SAAS,sBAAsB,QAA8C;CAC3E,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,MAAM,gEAAgE;CAElF,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK;CAC/B,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,QAChC,MAAM,IAAI,MAAM,6DAA6D;CAE/E,KAAK,MAAM,QAAQ,OACjB,IACE,CAAC,2BAA2B,KAAK,IAAI,KACrC;EAAC;EAAa;EAAe;CAAW,CAAC,CAAC,SAAS,IAAI,GAEvD,MAAM,IAAI,MAAM,2DAA2D,MAAM;CAGrF,OAAO,OAAO,OAAO,KAAK;AAC5B;AAEA,SAAS,oBAAoB,OAAuB;CAClD,IACE,MAAM,SAAS,OACf,UAAU,MAAM,YAAY,KAC5B,MAAM,SAAS,GAAG,KAClB,MAAM,SAAS,GAAG,KAClB,UAAU,eACV,MAAM,SAAS,YAAY,KAC3B,UAAU,qBACV,UAAU,4BAEV,MAAM,IAAI,MAAM,oEAAoE;CAEtF,MAAM,SAAS,MAAM,MAAM,GAAG;CAC9B,IACE,OAAO,SAAS,KAChB,CAAC,OAAO,OACL,UACC,MAAM,UAAU,KAAK,MAAM,UAAU,MAAM,oCAAoC,KAAK,KAAK,CAC7F,KACA,CAAC,QAAQ,KAAK,OAAO,GAAG,EAAE,KAAK,EAAE,GAEjC,MAAM,IAAI,MAAM,oEAAoE;CAEtF,OAAO;AACT;AAEA,SAAS,eAAe,aAAqB,eAA+B;CAC1E,OAAO,yBAAyB;EAAE;EAAa;CAAc,CAAC;AAChE;AAEA,SAAS,kBACP,cACA,qBACA,aACA,KACM;CACN,KAAK,MAAM,CAAC,KAAK,UAAU,cACzB,IAAI,MAAM,eAAe,KAAK;EAC5B,aAAa,OAAO,GAAG;EACvB,oBAAoB,IAAI,KAAK;GAC3B,OAAO;GACP,iBAAiB,MAAM;EACzB,CAAC;CACH;CAEF,KAAK,MAAM,CAAC,KAAK,UAAU,qBACzB,IAAI,MAAM,mBAAmB,KAAK,oBAAoB,OAAO,GAAG;CAElE,KAAK,MAAM,CAAC,KAAK,UAAU,aACzB,IAAI,MAAM,eAAe,KAAK,YAAY,OAAO,GAAG;AAExD;AAEA,SAAS,mBACP,aACA,KACA,OACM;CACN,YAAY,OAAO,GAAG;CACtB,YAAY,IAAI,KAAK,KAAK;CAC1B,OAAO,YAAY,OAAO,wBAAwB;EAChD,MAAM,SAAS,YAAY,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;EACzC,IAAI,WAAW,KAAA,GAAW;EAC1B,YAAY,OAAO,MAAM;CAC3B;AACF;AAEA,SAAS,eAAe,OAAuC;CAC7D,OAAO,OAAO,UAAU,YAAY,wBAAwB,KAAK,KAAK;AACxE;AAEA,SAAS,YACP,OACA,MACA,OACyB;CACzB,MAAM,SAAS,OAAO,OAAO,KAAK;CAClC,sBAAsB,QAAQ,MAAM,KAAK;CACzC,OAAO;AACT;AAEA,SAAS,OAAO,OAAgB,OAAwC;CACtE,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,MAAM,GAAG,MAAM,mBAAmB;CAE9C,MAAM,YAAY,OAAO,eAAe,KAAK;CAC7C,IAAI,cAAc,OAAO,aAAa,cAAc,MAClD,MAAM,IAAI,MAAM,GAAG,MAAM,wBAAwB;CAEnD,OAAO;AACT"}

package/dist/{protected-redaction-wGo44k2K.js → protected-redaction-Fn1ETfJ-.js}

@@ -1,4 +1,4 @@
-import { canonicalCandidateBytes } from "@tangle-network/agent-interface";
+import { canonicalCandidateBytes as canonicalCandidateBytes$1 } from "@tangle-network/agent-interface";
 import { DEFAULT_REDACTION_RULES, REDACTION_VERSION, redactString } from "@tangle-network/agent-eval";
 import { createHash, createHmac, randomBytes } from "node:crypto";
 //#region src/candidate-execution/digest.ts
@@ -7,14 +7,14 @@ function sha256Bytes(bytes) {
 	return `sha256:${createHash("sha256").update(bytes).digest("hex")}`;
 }
 function canonicalCandidateDigest$1(value) {
-	return sha256Bytes(canonicalCandidateBytes(value));
+	return sha256Bytes(canonicalCandidateBytes$1(value));
 }
 /** Returns a detached, deeply frozen JSON value with canonical number normalization. */
 function immutableCandidateValue(value) {
-	return deepFreezeCandidate(JSON.parse(Buffer.from(canonicalCandidateBytes(value)).toString("utf8")));
+	return deepFreezeCandidate(JSON.parse(Buffer.from(canonicalCandidateBytes$1(value)).toString("utf8")));
 }
 function canonicalCandidateDocument(valueWithoutDigest) {
-	const bytes = canonicalCandidateBytes(valueWithoutDigest);
+	const bytes = canonicalCandidateBytes$1(valueWithoutDigest);
 	const digest = sha256Bytes(bytes);
 	const value = deepFreezeCandidate({
 		...JSON.parse(Buffer.from(bytes).toString("utf8")),
@@ -246,6 +246,6 @@ function escapeRegularExpression(value) {
 	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 //#endregion
-export { canonicalCandidateBytes as a, deepFreezeCandidate as c, omitTopLevelDigest as d, sha256Bytes as f, redactProtectedValue as i, embeddedCandidateArtifact as l, createProtectedRecordRedactor as n, canonicalCandidateDigest$1 as o, verifyCanonicalCandidateDocument as p, redactProtectedReason as r, canonicalCandidateDocument as s, assertNoProtectedBytes as t, immutableCandidateValue as u };
+export { canonicalCandidateBytes$1 as a, deepFreezeCandidate as c, omitTopLevelDigest as d, sha256Bytes as f, redactProtectedValue as i, embeddedCandidateArtifact as l, createProtectedRecordRedactor as n, canonicalCandidateDigest$1 as o, verifyCanonicalCandidateDocument as p, redactProtectedReason as r, canonicalCandidateDocument as s, assertNoProtectedBytes as t, immutableCandidateValue as u };
 
-//# sourceMappingURL=protected-redaction-wGo44k2K.js.map
+//# sourceMappingURL=protected-redaction-Fn1ETfJ-.js.map

package/dist/protected-redaction-Fn1ETfJ-.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-redaction-Fn1ETfJ-.js","names":["canonicalCandidateDigest","canonicalCandidateBytes"],"sources":["../src/candidate-execution/digest.ts","../src/candidate-execution/protected-redaction.ts"],"sourcesContent":["import { createHash } from 'node:crypto'\nimport {\n  type AgentCandidateEmbeddedArtifact,\n  canonicalCandidateBytes,\n  type Sha256Digest,\n} from '@tangle-network/agent-interface'\n\nimport type { CanonicalCandidateDocument } from './types'\n\nexport { canonicalCandidateBytes }\n\n/** Use native hashing for workspace archives. */\nexport function sha256Bytes(bytes: Uint8Array): Sha256Digest {\n  return `sha256:${createHash('sha256').update(bytes).digest('hex')}`\n}\n\nexport function canonicalCandidateDigest(value: unknown): Sha256Digest {\n  return sha256Bytes(canonicalCandidateBytes(value))\n}\n\n/** Returns a detached, deeply frozen JSON value with canonical number normalization. */\nexport function immutableCandidateValue<T>(value: T): T {\n  return deepFreezeCandidate(\n    JSON.parse(Buffer.from(canonicalCandidateBytes(value)).toString('utf8')) as T,\n  )\n}\n\nexport function canonicalCandidateDocument<T extends { digest: Sha256Digest }>(\n  valueWithoutDigest: Omit<T, 'digest'>,\n): CanonicalCandidateDocument<T> {\n  const bytes = canonicalCandidateBytes(valueWithoutDigest)\n  const digest = sha256Bytes(bytes)\n  const value = deepFreezeCandidate({\n    ...JSON.parse(Buffer.from(bytes).toString('utf8')),\n    digest,\n  }) as T\n  return Object.freeze({\n    value,\n    get bytes(): Uint8Array {\n      return Uint8Array.from(bytes)\n    },\n    digest,\n  })\n}\n\nexport function verifyCanonicalCandidateDocument<T extends { digest: Sha256Digest }>(\n  value: T,\n  label: string,\n): T {\n  if (canonicalCandidateDigest(omitTopLevelDigest(value)) !== value.digest) {\n    throw new Error(`${label} digest does not match`)\n  }\n  return immutableCandidateValue(value)\n}\n\nexport function embeddedCandidateArtifact(bytes: Uint8Array): AgentCandidateEmbeddedArtifact {\n  return {\n    encoding: 'base64',\n    content: Buffer.from(bytes).toString('base64'),\n    sha256: sha256Bytes(bytes),\n    byteLength: bytes.byteLength,\n  }\n}\n\nexport function omitTopLevelDigest<T extends { digest: Sha256Digest }>(\n  value: T,\n): Omit<T, 'digest'> {\n  const { digest: _digest, ...rest } = value\n  return rest\n}\n\nexport function deepFreezeCandidate<T>(value: T, seen = new Set<object>()): T {\n  if (\n    value === null ||\n    typeof value !== 'object' ||\n    ArrayBuffer.isView(value) ||\n    seen.has(value as object)\n  ) {\n    return value\n  }\n  seen.add(value as object)\n  for (const child of Object.values(value as Record<string, unknown>)) {\n    deepFreezeCandidate(child, seen)\n  }\n  return Object.freeze(value)\n}\n","import { createHmac, randomBytes } from 'node:crypto'\n\nimport {\n  DEFAULT_REDACTION_RULES,\n  REDACTION_VERSION,\n  type RedactionRule,\n  redactString,\n} from '@tangle-network/agent-eval'\n\nexport interface ProtectedRedactionReport {\n  version: string\n  redactionCount: number\n  byRule: Record<string, number>\n}\n\nexport interface ProtectedTraceIdentity {\n  readonly runId: string\n  readonly tags: Readonly<Record<string, string>>\n}\n\nexport interface ProtectedRecordRedactor {\n  record<T>(value: T): T\n  query<T>(value: T): T\n  identifier(value: string): string\n  traceIdentity(trace: ProtectedTraceIdentity): ProtectedTraceIdentity\n  report(): ProtectedRedactionReport\n}\n\n/** Create one execution-local namespace for identifiers changed by redaction. */\nexport function createProtectedRecordRedactor(\n  protectedValues: readonly string[],\n): ProtectedRecordRedactor {\n  const identityKey = randomBytes(32)\n  const aggregate: ProtectedRedactionReport = {\n    version: REDACTION_VERSION,\n    redactionCount: 0,\n    byRule: {},\n  }\n\n  const mergeReport = (report: ProtectedRedactionReport): void => {\n    aggregate.version = report.version\n    aggregate.redactionCount += report.redactionCount\n    for (const [rule, count] of Object.entries(report.byRule)) {\n      aggregate.byRule[rule] = (aggregate.byRule[rule] ?? 0) + count\n    }\n  }\n\n  const redactScalar = <T>(value: T, record: boolean): T => {\n    const redacted = redactProtectedValue(value, protectedValues)\n    if (record) mergeReport(redacted.report)\n    return redacted.value\n  }\n\n  const identifier = (value: string, record: boolean): string => {\n    const redacted = redactScalar(value, record)\n    if (redacted === value) return value\n    const digest = createHmac('sha256', identityKey).update(value).digest('hex')\n    return `${redacted}:hmac-sha256:${digest}`\n  }\n\n  const transform = <T>(value: T, record: boolean): T => {\n    const transformed = transformProtectedRecord(\n      value,\n      undefined,\n      record,\n      redactScalar,\n      identifier,\n    ) as T\n    assertNoProtectedEvidence(transformed, protectedValues)\n    return transformed\n  }\n\n  return Object.freeze({\n    record: <T>(value: T): T => transform(value, true),\n    query: <T>(value: T): T => transform(value, false),\n    identifier: (value: string): string => identifier(value, false),\n    traceIdentity: (trace: ProtectedTraceIdentity): ProtectedTraceIdentity =>\n      transform(trace, false),\n    report: (): ProtectedRedactionReport => ({\n      version: aggregate.version,\n      redactionCount: aggregate.redactionCount,\n      byRule: { ...aggregate.byRule },\n    }),\n  })\n}\n\n/** Redact protected values at the first persistence boundary, including object keys and bytes. */\nexport function redactProtectedValue<T>(\n  value: T,\n  protectedValues: readonly string[],\n): { value: T; report: ProtectedRedactionReport } {\n  const report: ProtectedRedactionReport = {\n    version: REDACTION_VERSION,\n    redactionCount: 0,\n    byRule: {},\n  }\n  const rules = protectedRedactionRules(protectedValues)\n  const redacted = redactNode(value, protectedValues, rules, report) as T\n  assertNoProtectedEvidence(redacted, protectedValues)\n  return { value: redacted, report }\n}\n\nexport function redactProtectedReason(reason: string, protectedValues: readonly string[]): string {\n  try {\n    return redactProtectedValue(reason, protectedValues).value\n  } catch {\n    return 'candidate execution failed with a protected error'\n  }\n}\n\nexport function assertNoProtectedEvidence(\n  value: unknown,\n  protectedValues: readonly string[],\n): void {\n  if (value instanceof Uint8Array) {\n    assertNoProtectedBytes(value, protectedValues)\n    return\n  }\n  if (typeof value === 'string') {\n    for (const protectedValue of protectedValueVariants(protectedValues)) {\n      if (value.includes(protectedValue)) {\n        throw new Error('protected value survived candidate evidence redaction')\n      }\n    }\n    if (decodedBase64ContainsProtectedValue(value, protectedValues)) {\n      throw new Error('base64 protected value survived candidate evidence redaction')\n    }\n    return\n  }\n  if (Array.isArray(value)) {\n    for (const entry of value) assertNoProtectedEvidence(entry, protectedValues)\n    return\n  }\n  if (value && typeof value === 'object') {\n    for (const [key, entry] of Object.entries(value)) {\n      assertNoProtectedEvidence(key, protectedValues)\n      assertNoProtectedEvidence(entry, protectedValues)\n    }\n  }\n}\n\nexport function assertNoProtectedBytes(\n  bytes: Uint8Array,\n  protectedValues: readonly string[],\n): void {\n  if (containsProtectedBytes(bytes, protectedValues)) {\n    throw new Error('protected value survived candidate evidence byte redaction')\n  }\n}\n\nfunction redactNode(\n  value: unknown,\n  protectedValues: readonly string[],\n  rules: readonly RedactionRule[],\n  report: ProtectedRedactionReport,\n): unknown {\n  if (value instanceof Uint8Array) {\n    if (containsProtectedBytes(value, protectedValues)) {\n      recordRedaction(report, 'candidate-access-binary', 1)\n      return Uint8Array.from(Buffer.from('[redacted:candidate-access-binary]', 'utf8'))\n    }\n    return Uint8Array.from(value)\n  }\n  if (typeof value === 'string') {\n    if (decodedBase64ContainsProtectedValue(value, protectedValues)) {\n      recordRedaction(report, 'candidate-access-binary', 1)\n      return '[redacted:candidate-access-binary]'\n    }\n    const redacted = redactString(value, [...rules])\n    for (const [rule, count] of Object.entries(redacted.report.byRule)) {\n      recordRedaction(report, rule, count)\n    }\n    return redacted.output\n  }\n  if (Array.isArray(value)) {\n    return value.map((entry) => redactNode(entry, protectedValues, rules, report))\n  }\n  if (value && typeof value === 'object') {\n    const entries: Array<[string, unknown]> = []\n    const seenKeys = new Set<string>()\n    for (const [key, entry] of Object.entries(value)) {\n      const redactedKey = redactNode(key, protectedValues, rules, report)\n      if (typeof redactedKey !== 'string' || seenKeys.has(redactedKey)) {\n        throw new Error('protected evidence redaction produced an ambiguous object key')\n      }\n      seenKeys.add(redactedKey)\n      entries.push([redactedKey, redactNode(entry, protectedValues, rules, report)])\n    }\n    return Object.fromEntries(entries)\n  }\n  return value\n}\n\nfunction transformProtectedRecord(\n  value: unknown,\n  fieldName: string | undefined,\n  record: boolean,\n  redactScalar: <T>(value: T, record: boolean) => T,\n  redactIdentifier: (value: string, record: boolean) => string,\n): unknown {\n  if (value instanceof Uint8Array) return redactScalar(value, record)\n  if (typeof value === 'string') {\n    return fieldName && isIdentifierFieldName(fieldName)\n      ? redactIdentifier(value, record)\n      : redactScalar(value, record)\n  }\n  if (Array.isArray(value)) {\n    return value.map((entry) =>\n      transformProtectedRecord(entry, fieldName, record, redactScalar, redactIdentifier),\n    )\n  }\n  if (!value || typeof value !== 'object') return value\n\n  if (fieldName === 'tags') {\n    return transformTagMap(value, record, redactScalar, redactIdentifier)\n  }\n  if (fieldName === 'tag') {\n    return transformTagFilter(value, record, redactScalar, redactIdentifier)\n  }\n\n  const entries: Array<[string, unknown]> = []\n  const seenKeys = new Set<string>()\n  for (const [key, entry] of Object.entries(value)) {\n    const redactedKey = redactScalar(key, record)\n    if (seenKeys.has(redactedKey)) {\n      throw new Error('protected evidence redaction produced an ambiguous object key')\n    }\n    seenKeys.add(redactedKey)\n    entries.push([\n      redactedKey,\n      transformProtectedRecord(entry, key, record, redactScalar, redactIdentifier),\n    ])\n  }\n  return Object.fromEntries(entries)\n}\n\nfunction transformTagMap(\n  value: object,\n  record: boolean,\n  redactScalar: <T>(value: T, record: boolean) => T,\n  redactIdentifier: (value: string, record: boolean) => string,\n): Record<string, unknown> {\n  const entries: Array<[string, unknown]> = []\n  const seenKeys = new Set<string>()\n  for (const [key, entry] of Object.entries(value)) {\n    const redactedKey = redactIdentifier(key, record)\n    if (seenKeys.has(redactedKey)) {\n      throw new Error('protected evidence redaction produced an ambiguous trace tag')\n    }\n    seenKeys.add(redactedKey)\n    entries.push([\n      redactedKey,\n      typeof entry === 'string'\n        ? redactIdentifier(entry, record)\n        : transformProtectedRecord(entry, key, record, redactScalar, redactIdentifier),\n    ])\n  }\n  return Object.fromEntries(entries)\n}\n\nfunction transformTagFilter(\n  value: object,\n  record: boolean,\n  redactScalar: <T>(value: T, record: boolean) => T,\n  redactIdentifier: (value: string, record: boolean) => string,\n): Record<string, unknown> {\n  const output: Record<string, unknown> = {}\n  for (const [key, entry] of Object.entries(value)) {\n    const redactedKey = redactScalar(key, record)\n    output[redactedKey] =\n      (key === 'key' || key === 'value') && typeof entry === 'string'\n        ? redactIdentifier(entry, record)\n        : transformProtectedRecord(entry, key, record, redactScalar, redactIdentifier)\n  }\n  return output\n}\n\nfunction isIdentifierFieldName(name: string): boolean {\n  return /ids?$/i.test(name)\n}\n\nfunction protectedRedactionRules(protectedValues: readonly string[]): RedactionRule[] {\n  const exactRules = protectedValueVariants(protectedValues)\n    .sort((left, right) => right.length - left.length || left.localeCompare(right))\n    .map((value, index) => ({\n      id: `candidate-access-${index}`,\n      pattern: new RegExp(escapeRegularExpression(value), 'g'),\n      replacement: '[redacted:candidate-access]',\n    }))\n  return [...exactRules, ...DEFAULT_REDACTION_RULES]\n}\n\nfunction recordRedaction(report: ProtectedRedactionReport, rule: string, count: number): void {\n  if (count <= 0) return\n  report.redactionCount += count\n  report.byRule[rule] = (report.byRule[rule] ?? 0) + count\n}\n\nfunction containsProtectedBytes(bytes: Uint8Array, protectedValues: readonly string[]): boolean {\n  const source = Buffer.from(bytes)\n  return protectedValueVariants(protectedValues).some((value) =>\n    source.includes(Buffer.from(value, 'utf8')),\n  )\n}\n\nfunction decodedBase64ContainsProtectedValue(\n  value: string,\n  protectedValues: readonly string[],\n): boolean {\n  if (value.length < 4 || value.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(value)) {\n    return false\n  }\n  try {\n    return containsProtectedBytes(Buffer.from(value, 'base64'), protectedValues)\n  } catch {\n    return false\n  }\n}\n\nfunction protectedValueVariants(protectedValues: readonly string[]): string[] {\n  const variants = new Set<string>()\n  for (const value of normalizedProtectedValues(protectedValues)) {\n    variants.add(value)\n    variants.add(Buffer.from(value, 'utf8').toString('base64'))\n    variants.add(Buffer.from(value, 'utf8').toString('base64url'))\n    variants.add(encodeURIComponent(value))\n  }\n  return [...variants]\n}\n\nfunction normalizedProtectedValues(values: readonly string[]): string[] {\n  return [...new Set(values.filter((value) => value.length > 0))]\n}\n\nfunction escapeRegularExpression(value: string): string {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n}\n"],"mappings":";;;;;AAYA,SAAgB,YAAY,OAAiC;CAC3D,OAAO,UAAU,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AAClE;AAEA,SAAgBA,2BAAyB,OAA8B;CACrE,OAAO,YAAYC,0BAAwB,KAAK,CAAC;AACnD;;AAGA,SAAgB,wBAA2B,OAAa;CACtD,OAAO,oBACL,KAAK,MAAM,OAAO,KAAKA,0BAAwB,KAAK,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,CACzE;AACF;AAEA,SAAgB,2BACd,oBAC+B;CAC/B,MAAM,QAAQA,0BAAwB,kBAAkB;CACxD,MAAM,SAAS,YAAY,KAAK;CAChC,MAAM,QAAQ,oBAAoB;EAChC,GAAG,KAAK,MAAM,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC;EACjD;CACF,CAAC;CACD,OAAO,OAAO,OAAO;EACnB;EACA,IAAI,QAAoB;GACtB,OAAO,WAAW,KAAK,KAAK;EAC9B;EACA;CACF,CAAC;AACH;AAEA,SAAgB,iCACd,OACA,OACG;CACH,IAAID,2BAAyB,mBAAmB,KAAK,CAAC,MAAM,MAAM,QAChE,MAAM,IAAI,MAAM,GAAG,MAAM,uBAAuB;CAElD,OAAO,wBAAwB,KAAK;AACtC;AAEA,SAAgB,0BAA0B,OAAmD;CAC3F,OAAO;EACL,UAAU;EACV,SAAS,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,QAAQ;EAC7C,QAAQ,YAAY,KAAK;EACzB,YAAY,MAAM;CACpB;AACF;AAEA,SAAgB,mBACd,OACmB;CACnB,MAAM,EAAE,QAAQ,SAAS,GAAG,SAAS;CACrC,OAAO;AACT;AAEA,SAAgB,oBAAuB,OAAU,uBAAO,IAAI,IAAY,GAAM;CAC5E,IACE,UAAU,QACV,OAAO,UAAU,YACjB,YAAY,OAAO,KAAK,KACxB,KAAK,IAAI,KAAe,GAExB,OAAO;CAET,KAAK,IAAI,KAAe;CACxB,KAAK,MAAM,SAAS,OAAO,OAAO,KAAgC,GAChE,oBAAoB,OAAO,IAAI;CAEjC,OAAO,OAAO,OAAO,KAAK;AAC5B;;;;ACxDA,SAAgB,8BACd,iBACyB;CACzB,MAAM,cAAc,YAAY,EAAE;CAClC,MAAM,YAAsC;EAC1C,SAAS;EACT,gBAAgB;EAChB,QAAQ,CAAC;CACX;CAEA,MAAM,eAAe,WAA2C;EAC9D,UAAU,UAAU,OAAO;EAC3B,UAAU,kBAAkB,OAAO;EACnC,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,OAAO,MAAM,GACtD,UAAU,OAAO,SAAS,UAAU,OAAO,SAAS,KAAK;CAE7D;CAEA,MAAM,gBAAmB,OAAU,WAAuB;EACxD,MAAM,WAAW,qBAAqB,OAAO,eAAe;EAC5D,IAAI,QAAQ,YAAY,SAAS,MAAM;EACvC,OAAO,SAAS;CAClB;CAEA,MAAM,cAAc,OAAe,WAA4B;EAC7D,MAAM,WAAW,aAAa,OAAO,MAAM;EAC3C,IAAI,aAAa,OAAO,OAAO;EAE/B,OAAO,GAAG,SAAS,eADJ,WAAW,UAAU,WAAW,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAC/B;CACzC;CAEA,MAAM,aAAgB,OAAU,WAAuB;EACrD,MAAM,cAAc,yBAClB,OACA,KAAA,GACA,QACA,cACA,UACF;EACA,0BAA0B,aAAa,eAAe;EACtD,OAAO;CACT;CAEA,OAAO,OAAO,OAAO;EACnB,SAAY,UAAgB,UAAU,OAAO,IAAI;EACjD,QAAW,UAAgB,UAAU,OAAO,KAAK;EACjD,aAAa,UAA0B,WAAW,OAAO,KAAK;EAC9D,gBAAgB,UACd,UAAU,OAAO,KAAK;EACxB,eAAyC;GACvC,SAAS,UAAU;GACnB,gBAAgB,UAAU;GAC1B,QAAQ,EAAE,GAAG,UAAU,OAAO;EAChC;CACF,CAAC;AACH;;AAGA,SAAgB,qBACd,OACA,iBACgD;CAChD,MAAM,SAAmC;EACvC,SAAS;EACT,gBAAgB;EAChB,QAAQ,CAAC;CACX;CAEA,MAAM,WAAW,WAAW,OAAO,iBADrB,wBAAwB,eACkB,GAAG,MAAM;CACjE,0BAA0B,UAAU,eAAe;CACnD,OAAO;EAAE,OAAO;EAAU;CAAO;AACnC;AAEA,SAAgB,sBAAsB,QAAgB,iBAA4C;CAChG,IAAI;EACF,OAAO,qBAAqB,QAAQ,eAAe,CAAC,CAAC;CACvD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,0BACd,OACA,iBACM;CACN,IAAI,iBAAiB,YAAY;EAC/B,uBAAuB,OAAO,eAAe;EAC7C;CACF;CACA,IAAI,OAAO,UAAU,UAAU;EAC7B,KAAK,MAAM,kBAAkB,uBAAuB,eAAe,GACjE,IAAI,MAAM,SAAS,cAAc,GAC/B,MAAM,IAAI,MAAM,uDAAuD;EAG3E,IAAI,oCAAoC,OAAO,eAAe,GAC5D,MAAM,IAAI,MAAM,8DAA8D;EAEhF;CACF;CACA,IAAI,MAAM,QAAQ,KAAK,GAAG;EACxB,KAAK,MAAM,SAAS,OAAO,0BAA0B,OAAO,eAAe;EAC3E;CACF;CACA,IAAI,SAAS,OAAO,UAAU,UAC5B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;EAChD,0BAA0B,KAAK,eAAe;EAC9C,0BAA0B,OAAO,eAAe;CAClD;AAEJ;AAEA,SAAgB,uBACd,OACA,iBACM;CACN,IAAI,uBAAuB,OAAO,eAAe,GAC/C,MAAM,IAAI,MAAM,4DAA4D;AAEhF;AAEA,SAAS,WACP,OACA,iBACA,OACA,QACS;CACT,IAAI,iBAAiB,YAAY;EAC/B,IAAI,uBAAuB,OAAO,eAAe,GAAG;GAClD,gBAAgB,QAAQ,2BAA2B,CAAC;GACpD,OAAO,WAAW,KAAK,OAAO,KAAK,sCAAsC,MAAM,CAAC;EAClF;EACA,OAAO,WAAW,KAAK,KAAK;CAC9B;CACA,IAAI,OAAO,UAAU,UAAU;EAC7B,IAAI,oCAAoC,OAAO,eAAe,GAAG;GAC/D,gBAAgB,QAAQ,2BAA2B,CAAC;GACpD,OAAO;EACT;EACA,MAAM,WAAW,aAAa,OAAO,CAAC,GAAG,KAAK,CAAC;EAC/C,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,SAAS,OAAO,MAAM,GAC/D,gBAAgB,QAAQ,MAAM,KAAK;EAErC,OAAO,SAAS;CAClB;CACA,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,UAAU,WAAW,OAAO,iBAAiB,OAAO,MAAM,CAAC;CAE/E,IAAI,SAAS,OAAO,UAAU,UAAU;EACtC,MAAM,UAAoC,CAAC;EAC3C,MAAM,2BAAW,IAAI,IAAY;EACjC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;GAChD,MAAM,cAAc,WAAW,KAAK,iBAAiB,OAAO,MAAM;GAClE,IAAI,OAAO,gBAAgB,YAAY,SAAS,IAAI,WAAW,GAC7D,MAAM,IAAI,MAAM,+DAA+D;GAEjF,SAAS,IAAI,WAAW;GACxB,QAAQ,KAAK,CAAC,aAAa,WAAW,OAAO,iBAAiB,OAAO,MAAM,CAAC,CAAC;EAC/E;EACA,OAAO,OAAO,YAAY,OAAO;CACnC;CACA,OAAO;AACT;AAEA,SAAS,yBACP,OACA,WACA,QACA,cACA,kBACS;CACT,IAAI,iBAAiB,YAAY,OAAO,aAAa,OAAO,MAAM;CAClE,IAAI,OAAO,UAAU,UACnB,OAAO,aAAa,sBAAsB,SAAS,IAC/C,iBAAiB,OAAO,MAAM,IAC9B,aAAa,OAAO,MAAM;CAEhC,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,UAChB,yBAAyB,OAAO,WAAW,QAAQ,cAAc,gBAAgB,CACnF;CAEF,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAEhD,IAAI,cAAc,QAChB,OAAO,gBAAgB,OAAO,QAAQ,cAAc,gBAAgB;CAEtE,IAAI,cAAc,OAChB,OAAO,mBAAmB,OAAO,QAAQ,cAAc,gBAAgB;CAGzE,MAAM,UAAoC,CAAC;CAC3C,MAAM,2BAAW,IAAI,IAAY;CACjC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;EAChD,MAAM,cAAc,aAAa,KAAK,MAAM;EAC5C,IAAI,SAAS,IAAI,WAAW,GAC1B,MAAM,IAAI,MAAM,+DAA+D;EAEjF,SAAS,IAAI,WAAW;EACxB,QAAQ,KAAK,CACX,aACA,yBAAyB,OAAO,KAAK,QAAQ,cAAc,gBAAgB,CAC7E,CAAC;CACH;CACA,OAAO,OAAO,YAAY,OAAO;AACnC;AAEA,SAAS,gBACP,OACA,QACA,cACA,kBACyB;CACzB,MAAM,UAAoC,CAAC;CAC3C,MAAM,2BAAW,IAAI,IAAY;CACjC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;EAChD,MAAM,cAAc,iBAAiB,KAAK,MAAM;EAChD,IAAI,SAAS,IAAI,WAAW,GAC1B,MAAM,IAAI,MAAM,8DAA8D;EAEhF,SAAS,IAAI,WAAW;EACxB,QAAQ,KAAK,CACX,aACA,OAAO,UAAU,WACb,iBAAiB,OAAO,MAAM,IAC9B,yBAAyB,OAAO,KAAK,QAAQ,cAAc,gBAAgB,CACjF,CAAC;CACH;CACA,OAAO,OAAO,YAAY,OAAO;AACnC;AAEA,SAAS,mBACP,OACA,QACA,cACA,kBACyB;CACzB,MAAM,SAAkC,CAAC;CACzC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;EAChD,MAAM,cAAc,aAAa,KAAK,MAAM;EAC5C,OAAO,gBACJ,QAAQ,SAAS,QAAQ,YAAY,OAAO,UAAU,WACnD,iBAAiB,OAAO,MAAM,IAC9B,yBAAyB,OAAO,KAAK,QAAQ,cAAc,gBAAgB;CACnF;CACA,OAAO;AACT;AAEA,SAAS,sBAAsB,MAAuB;CACpD,OAAO,SAAS,KAAK,IAAI;AAC3B;AAEA,SAAS,wBAAwB,iBAAqD;CAQpF,OAAO,CAAC,GAPW,uBAAuB,eAAe,CAAC,CACvD,MAAM,MAAM,UAAU,MAAM,SAAS,KAAK,UAAU,KAAK,cAAc,KAAK,CAAC,CAAC,CAC9E,KAAK,OAAO,WAAW;EACtB,IAAI,oBAAoB;EACxB,SAAS,IAAI,OAAO,wBAAwB,KAAK,GAAG,GAAG;EACvD,aAAa;CACf,EACkB,GAAG,GAAG,uBAAuB;AACnD;AAEA,SAAS,gBAAgB,QAAkC,MAAc,OAAqB;CAC5F,IAAI,SAAS,GAAG;CAChB,OAAO,kBAAkB;CACzB,OAAO,OAAO,SAAS,OAAO,OAAO,SAAS,KAAK;AACrD;AAEA,SAAS,uBAAuB,OAAmB,iBAA6C;CAC9F,MAAM,SAAS,OAAO,KAAK,KAAK;CAChC,OAAO,uBAAuB,eAAe,CAAC,CAAC,MAAM,UACnD,OAAO,SAAS,OAAO,KAAK,OAAO,MAAM,CAAC,CAC5C;AACF;AAEA,SAAS,oCACP,OACA,iBACS;CACT,IAAI,MAAM,SAAS,KAAK,MAAM,SAAS,MAAM,KAAK,CAAC,yBAAyB,KAAK,KAAK,GACpF,OAAO;CAET,IAAI;EACF,OAAO,uBAAuB,OAAO,KAAK,OAAO,QAAQ,GAAG,eAAe;CAC7E,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,uBAAuB,iBAA8C;CAC5E,MAAM,2BAAW,IAAI,IAAY;CACjC,KAAK,MAAM,SAAS,0BAA0B,eAAe,GAAG;EAC9D,SAAS,IAAI,KAAK;EAClB,SAAS,IAAI,OAAO,KAAK,OAAO,MAAM,CAAC,CAAC,SAAS,QAAQ,CAAC;EAC1D,SAAS,IAAI,OAAO,KAAK,OAAO,MAAM,CAAC,CAAC,SAAS,WAAW,CAAC;EAC7D,SAAS,IAAI,mBAAmB,KAAK,CAAC;CACxC;CACA,OAAO,CAAC,GAAG,QAAQ;AACrB;AAEA,SAAS,0BAA0B,QAAqC;CACtE,OAAO,CAAC,GAAG,IAAI,IAAI,OAAO,QAAQ,UAAU,MAAM,SAAS,CAAC,CAAC,CAAC;AAChE;AAEA,SAAS,wBAAwB,OAAuB;CACtD,OAAO,MAAM,QAAQ,uBAAuB,MAAM;AACpD"}

package/dist/{provision-supervisor-DoSrqsM7.js → provision-supervisor-BgQx2Avp.js}

@@ -1,8 +1,8 @@
-import { $ as startRetainedInteractiveRun, $n as contentAddress, $r as attestRuntimeOwnedPendingExecutor, Bn as linkAbort, J as readWorkerInteractiveBinding, Kn as retainedCreateMaterial, Mn as sandboxClientAsProvider, Ui as sleep, Ut as taskToPrompt, W as interactiveAdmissionSeamKey, _i as executableAgentProfileSnapshot, bi as detachedSnapshot, ea as abortError, et as destroyInteractiveEnvironment, n as createSupervisor, ni as finalizeRuntimeOwnedPendingExecutor, oi as newExecutionAttemptId, qt as createInbox, ra as armDeadlineTimer, t as createRootHandle, zn as abortError$1 } from "./supervisor-CFSPj8rx.js";
+import { $ as startRetainedInteractiveRun, $n as contentAddress, Bn as linkAbort, J as readWorkerInteractiveBinding, Kn as retainedCreateMaterial, Mn as sandboxClientAsProvider, Ut as taskToPrompt, W as interactiveAdmissionSeamKey, Wi as sleep, ei as attestRuntimeOwnedPendingExecutor, et as destroyInteractiveEnvironment, ia as armDeadlineTimer, n as createSupervisor, qt as createInbox, ri as finalizeRuntimeOwnedPendingExecutor, si as newExecutionAttemptId, t as createRootHandle, ta as abortError, vi as executableAgentProfileSnapshot, xi as detachedSnapshot, zn as abortError$1 } from "./supervisor-BIBWUFUr.js";
 import { a as concreteProfileModel } from "./model-policy-BbSCSak0.js";
-import { i as writeAtomicDurableFile } from "./durable-file-D24y9zg7.js";
-import { O as createCoordinationTools, n as createSteerAcknowledger, t as createCancelAcknowledger, v as createFileRunContext } from "./coordination-driver-CMprWr0k.js";
-import { h as supervisorRunDir } from "./run-layout-hZREkcfu.js";
+import { a as writeAtomicDurableFile } from "./durable-file-DWQA4ooo.js";
+import { O as createCoordinationTools, n as createSteerAcknowledger, t as createCancelAcknowledger, v as createFileRunContext } from "./coordination-driver-BV4AAUns.js";
+import { h as supervisorRunDir } from "./run-layout-hKAJGF4g.js";
 import { agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopRequestDigest, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest } from "@tangle-network/agent-interface";
 import { randomUUID } from "node:crypto";
 import { mkdirSync } from "node:fs";
@@ -1008,4 +1008,4 @@ function writeState(path, state) {
 //#endregion
 export { workerFromInteractiveProvider as n, claimRetainedInteractiveControl as r, provisionSupervisor as t };
 
-//# sourceMappingURL=provision-supervisor-DoSrqsM7.js.map
+//# sourceMappingURL=provision-supervisor-BgQx2Avp.js.map