@tangle-network/agent-runtime 0.284.2 → 0.286.0

package/dist/{types-D56jQad-.d.ts → types-wIVzqXdQ.d.ts}

@@ -2267,6 +2267,8 @@ interface ContinuationNoteInput {
   readonly progress: DriverProgressMark;
   /** Whether `read_continuation` is served to this manager. */
   readonly canReadMore: boolean;
+  /** Whether submit_result is served to this manager. Absent means unavailable. */
+  readonly canSubmitResult?: boolean;
   /** Whether the check's score comes from cases the director cannot see. */
   readonly sealed?: boolean;
 }
@@ -5818,4 +5820,4 @@ interface WidenGate<Out> {
 }
 //#endregion
 export { SpawnJournal as $, RuntimeStreamEvent as $a, Iteration as $i, ReadableEnvironment as $n, RetainedInteractiveBindingError as $r, RuntimeStreamEventCollector as $t, NodeExecutionIdentity as A, RuntimeRunStatus as Aa, RetainedRunStartMaterial as Ai, RetainedPendingCause as An, ContinuationPanelInput as Ar, TraceContext as At, ResultBlobStore as B, AgentTaskRunResult as Ba, ReservationHolder as Bi, ReconnectRetainedInteractiveRunOptions as Bn, distillFindings as Br, OtelSpan as Bt, ExecutorToolCall as C, Validator as Ca, RetainedRunEffect as Ci, SessionTraceBox as Cn, CheckUnavailableError as Cr, WorkspaceCheckpointMarker as Ct, MaterializedExecutionIdentity as D, RuntimeRunOptions as Da, RetainedRunIntentAdmission as Di, decodeToolPart as Dn, ContinuationEntry as Dr, workerTraceEnv as Dt, HeldEnvironment as E, RuntimeRunHandle as Ea, RetainedRunHandle as Ei, createPushTraceSource as En, ContinuationContext as Er, readWorkerTraceContext as Et, ProviderModelAttemptEvidence as F, AgentExecutionBackend as Fa, BudgetPoolRestore as Fi, ScopeProgressInput as Fn, VerdictSummary as Fr, LoopSpanNode as Ft, RootMaterialization as G, OpenAIChatResponseFormat as Ga, ReservationWaitRefused as Gi, RetainedInteractiveStartMaterial as Gn, AgentEvalError$1 as Gr, createOpenInferenceFileExporter as Gt, ResumedWork as H, AgentTaskStatus as Ha, ReservationShortfall as Hi, RetainedInteractiveAdmissionHook as Hn, failedItems as Hr, buildLoopOtelSpans as Ht, ProviderModelExecutionEvidence as I, AgentKnowledgeProvider as Ia, BudgetReadout as Ii, TeamProgress as In, admitContinuationPolicy as Ir, OtelAttribute as It, RootStreamReceipt as J, RunAgentTaskOptions as Ja, spendFromUsageEvents as Ji, HarnessTranscriptCapture as Jn, ConfigError as Jr, loopEventToOtelSpan as Jt, RootProviderModelEvidence as K, OpenAIChatTool as Ka, ReserveOptions as Ki, StartRetainedInteractiveRunOptions as Kn, AgentEvalErrorCode as Kr, createOtelExporter as Kt, RecursiveReservationPolicy as L, AgentRuntimeEvent as La, BudgetReconcileFault as Li, WorkerProgress as Ln, admitFinding as Lr, OtelExportConfig as Lt, NodeSnapshot as M, AgentAdapter as Ma, StartRetainedRunInEnvironmentOptions as Mi, ActivityNote as Mn, ContinuationPolicy as Mr, mergeTraceEnv as Mt, NodeStatus as N, AgentBackendContext as Na, StartRetainedRunOptions as Ni, DEFAULT_STALL_AFTER_MS as Nn, ContinuationProfile as Nr, readTraceContextFromEnv as Nt, MaterializedModelIdentity as O, RuntimeRunPersistenceAdapter as Oa, RetainedRunReplayPoint as Oi, sandboxSessionTraceSource as On, ContinuationNoteInput as Or, workerTraceHeaders as Ot, ProfileMaterializationReceipt as P, AgentBackendInput as Pa, BudgetPool as Pi, ExecutorProgress as Pn, PanelFinding as Pr, traceContextToEnv as Pt, SpawnEvent as Q, RuntimeSessionStore as Qa, ExecCtx as Qi, HarnessTranscriptUnavailableReason as Qn, RetainedInteractiveAdmissionError as Qr, RuntimeEventCollector as Qt, ResourceLimit as R, AgentRuntimeEventSink as Ra, LeakedReservation as Ri, createActivityLog as Rn, checkVerdictOf as Rr, OtelExportStats as Rt, ExecutorTeardownWarning as S, ValidationCtx as Sa, RetainedRunDispatchedAdmission as Si, SessionMessageLike as Sn, CheckRead as Sr, WorkerTraceUnavailableReason as St, Handle as T, RuntimeRunCost as Ta, RetainedRunEventOptions as Ti, TraceSource as Tn, ContinuationAppend as Tr, WorkerTraceSeamCarrier as Tt, RetainedExecutionState as U, BackendErrorDetail as Ua, ReservationStage as Ui, RetainedInteractiveEnvironmentInput as Un, passedItems as Ur, buildLoopSpanNodes as Ut, ResumedKeyState as V, AgentTaskSpec as Va, ReservationRejection as Vi, RecoverRetainedInteractiveRunOptions as Vn, expandQuestions as Vr, RuntimeEventOtelOptions as Vt, RootHandle as W, KnowledgeReadinessDecision as Wa, ReservationTicket as Wi, RetainedInteractiveRunHandle as Wn, verdictFromJudgeScore as Wr, buildRuntimeEventOtelSpans as Wt, Scope as X, RuntimeCanonicalStreamEvent as Xa, DefaultVerdict$1 as Xi, HarnessTranscriptFile as Xn, NotFoundError as Xr, padTraceId as Xt, Runtime as Y, RunAgentTaskStreamOptions as Ya, AgentRunSpec as Yi, HarnessTranscriptEvidence as Yn, JudgeError as Yr, padSpanId as Yt, Settled as Z, RuntimeSession as Za, Driver as Zi, HarnessTranscriptUnavailable as Zn, PlannerError as Zr, toOtelAttributes as Zt, ExecutorMaterialization as _, MountRecorder as _a, RetainedInteractiveStartedAdmission as _i, isWaitOutcome as _n, upstreamUnavailableSignal as _r, WaitOpts as _t, BudgetOverspend as a, LoopLineageOptions as aa, WorkerSlots as ai, createRuntimeEventCollector as an, DriverAttemptsExhaustedError as ar, SpendGap as at, ExecutorRegistry as b, SandboxClient as ba, RetainedRunCancelOptions as bi, validateWaitSpec as bn, CONTINUATIONS_DIR as br, WorkerInteractiveUnavailableReason as bt, EnvironmentTeardownReceipt as c, LoopResult as ca, NativeContextContinuationHandle as ci, sanitizeKnowledgeReadinessReport as cn, DriverContractState as cr, SubtreeSummary as ct, ExecutorAccounting as d, LoopTeardownFailedPayload as da, RecoverRetainedRunIntentOptions as di, WaitOutcome as dn, DriverProgressMark as dr, SupervisorOpts as dt, LoopDecisionPayload as ea, RetainedRunAdmissionError as ei, RuntimeStreamEventSink as en, captureHarnessTranscript as er, SpawnOpts as et, ExecutorCancellation as f, LoopTokenUsage as fa, RecoverRetainedRunOptions as fi, WaitProbe as fn, DriverReentry as fr, TokenUsageProvenance as ft, ExecutorFactory as g, MountManifestEntry as ga, RetainedInteractiveIntentAdmission as gi, createWaitProbes as gn, summarizeDriverAttempts as gr, UsageEvent as gt, ExecutorExecutionBinding as h, LoopWinner as ha, RetainedInteractiveEnvironmentAdmission as hi, WaitSpec as hn, classifyDriverFailure as hr, UnknownMaterializationReason as ht, Budget as i, LoopIterationStartedPayload as ia, SlotPermit as ii, SanitizedKnowledgeRequirement as in, DriverAttemptStop as ir, SpendChannel as it, NodeId as j, startRuntimeRun as ja, RetainedRunTurnInput as ji, ActivityLog as jn, ContinuationPanelResult as jr, createPropagatingTraceEmitter as jt, NoWinnerError as k, RuntimeRunRow as ka, RetainedRunSnapshot as ki, RetainedChildRecovery as kn, ContinuationPanel as kr, workerTraceSeamKey as kt, ExecutionBindingReceipt as l, LoopSandboxPlacement as la, NativeContextContinuationInput as li, sanitizeRuntimeStreamEvent as ln, DriverFailureClass as lr, SupervisedResult as lt, ExecutorContext as m, LoopTraceEvent as ma, RetainedInteractiveAdmission as mi, WaitRejection as mn, DriverRetryPolicy as mr, UnconfirmedTeardown as mt, AgentExecutionRef as n, LoopIterationDispatchPayload as na, RuntimeRunStateError as ni, RuntimeTelemetryOptions as nn, persistHarnessTranscript as nr, SpawnRejection as nt, BudgetViolation as o, LoopPlanDescription as oa, createWorkerSlots as oi, createRuntimeStreamEventCollector as on, DriverBudgetReadout as or, SteerableRootHandle as ot, ExecutorCancellationRequest as p, LoopTraceEmitter as pa, RecoverRetainedRunResult as pi, WaitProbeRegistry as pn, DriverRepromptRefusal as pr, TreeView as pt, RootSignal as q, OpenAIChatToolChoice as qa, createBudgetPool as qi, HarnessTranscriptArtifact as qn, BackendTransportError as qr, generateSpanId as qt, AgentSpec as r, LoopIterationEndedPayload as ra, ValidationError as ri, SanitizedKnowledgeReadinessReport as rn, DriverAttemptRecord as rr, Spend as rt, DefaultVerdict as s, LoopPlanPayload as sa, NativeContextContinuationExecution as si, sanitizeAgentRuntimeEvent as sn, DriverContinuationRecord as sr, SubtreeResult as st, Agent as t, LoopEndedPayload as ta, RetainedRunDispatchBindingError as ti, RuntimeStreamEventSummary as tn, harnessTranscriptArtifact as tr, SpawnPrior as tt, Executor as u, LoopStartedPayload as ua, ReconnectRetainedRunOptions as ui, PendingWait as un, DriverLoopRecord as ur, Supervisor as ut, ExecutorNodeContext as v, OutputAdapter as va, RetainedRunAdmission as vi, pollFor as vn, UnavailablePausePolicy as vr, WidenGate as vt, FleetYield as w, RuntimeRunCompleteInput as wa, RetainedRunEnvironmentAdmission as wi, ToolStepInput as wn, CheckVerdict as wr, WorkerTraceResolver as wt, ExecutorResult as x, SelectionReceipt as xa, RetainedRunCancellation as xi, waitUntil as xn, CONTINUATION_FACTS as xr, WorkerTraceEvidence as xt, ExecutorProgressEvent as y, RunProvenance as ya, RetainedRunAdmissionHook as yi, timerAt as yn, AdmittedFinding as yr, WorkerInteractiveSession as yt, ResourceSpend as z, AgentTaskContext as za, ReservationFloor as zi, readWorkerProgress as zn, composeContinuationNote as zr, OtelExporter as zt };
-//# sourceMappingURL=types-D56jQad-.d.ts.map
+//# sourceMappingURL=types-wIVzqXdQ.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-runtime",
-  "version": "0.284.2",
+  "version": "0.286.0",
   "description": "Shared task-lifecycle skeleton for agents: a recursive loop kernel for chat turns, one-shot tasks, and multi-attempt loops, with trace capture and eval-gated self-improvement. Domain behavior lives in adapters; scoring and ship-gates in @tangle-network/agent-eval.",
   "homepage": "https://github.com/tangle-network/agent-runtime#readme",
   "repository": {

package/skills/profile-authoring/SKILL.md

@@ -15,7 +15,6 @@ The audience accepts or rejects the result: a paper's authors and referees, a re
 The proxy is the check you can run during the work: an exact checker, a test suite, a rater, or a demo.
 The gap is everything the proxy accepts and the audience rejects.
 Hacks live in the gap, and a stronger model does not close it.
-Measured: where a known gap existed, 15 of 27 lanes with claims filed false "new" results; where none was known, 0 of 34 lanes did.
 
 ## 1. Name the audience and its acceptance test
 
@@ -82,19 +81,32 @@ A null that is no search, such as a spec conflict or a gap list, names each item
 A null without a certificate, or without a registered reproducer, is recorded as "stopped, unverified", never as success.
 A null inside a range the source checked or an earlier reproduced null covered adds nothing.
 Tell agents the checker may be wrong; credit a checker-defect report the same way, once someone outside the run reproduces the defect.
-Measured elsewhere: a credited exit cut one model's test cheating from 54% to 9%, while prohibitions barely moved another's.
-Measured: an in-run check that accepted a documented null made it the cheapest hack in 11 of 16 blind judgments.
-
-A Runtime manager with a check is not served `stop`.
-It ends when the check accepts its `submit_result`, when `report_blocked` shows that a granted tool failed, or at a bound.
-The bounds are the continuation `deadline`, `maxBarren` turns without progress, the budget, and cancellation.
-Runtime settles an accepted submission as delivered, and a parent may promote it; it keeps no refused one.
-So the run records its certificate on a page, such as a Knowledge page, where the outside check reads it.
-The in-run check never passes a null: it refuses a malformed certificate and holds a well-formed one.
-A held null ends the run at `maxBarren`; set it low, such as 2.
-The run settles as stopped, not delivered.
-State the continuation block in the record, and put the honest exit in its `rules` text.
-The check or a bound ends the run; an agent's claim that it is done does not.
+
+Separate execution settlement, development progress, and final acceptance.
+An unknown outside verdict does not establish absent research progress.
+Match completion instructions to the tools actually served to that node.
+Require `submit_result` only when its grant and checker exist.
+Keep unassessed results unassessed when the execution contract permits settlement without acceptance.
+
+For continued research, inspect the installed Runtime deliverable and continuation contracts before choosing bounds.
+Use the existing `checkState` interface for calibrated development measurements when applicable.
+Probe useful progress and unchanged or invalid artifacts before relying on the measurement.
+An always-false acceptance placeholder alone cannot distinguish useful work from stagnation.
+Preserve genuine no-progress limits, deadlines, budgets, and cancellation.
+Choose `maxBarren` from the task's measured feedback cadence; pending assessment does not justify a universally low value.
+
+For managers, state how they wait for descendants and collect their artifacts before returning.
+A nested manager returning can end its scope and cancel live descendants.
+Use the granted `await_event` tool while required descendant work remains live.
+A bounded event wait can return before the worker finishes; inspect its state and continue waiting when appropriate.
+A background shell timer does not establish Runtime re-entry.
+Require each descendant to retain partial work where its parent can recover it after interruption.
+
+Retain certificates and partial work where the outside assessor can read exact bytes.
+A certificate becomes accepted only through the registered outside check.
+Record the actual termination cause separately from the research outcome.
+State the continuation policy and available completion path in the immutable input.
+A source merge proves no change to an installed or running process.
 
 ## 6. Carry known traps
 
@@ -103,7 +115,6 @@ Write each trap as what the held-back acceptance refuses, never as what the prox
 "The outside check does not count a c = 0 instance" is a trap; "the checker passed c = 0 claims" is a recipe.
 Examples: excluded or trivial cases, stale or wrong-field comparators, published answers, tests versus users, a demo versus a customer, a rater versus an expert.
 Keep infrastructure incidents out of the brief; the operator owns the stack.
-Measured: a director told of an infrastructure failure spent 2 of its first 4 children probing it.
 Record each new trap where the next author reads it, in the same change as its fix.
 
 ## 7. Set budget and caps
@@ -118,7 +129,6 @@ Give each paid job its own named key with a dollar cap, and state the dollars be
 
 Before launch, register the claim, the arms, the outcome measures, the useful-effect threshold, and the result that would refute the claim.
 Run each ingredient you want to credit against a control without it: the referee, the credited exit, live notes, the wording.
-Measured elsewhere: prompt wording alone moved one model's cheating from over 85% to 1%.
 Count precision after review, not claim volume.
 Report reviewed-claim precision, canary pass rate, how many proxy passes the audience accepts, and the cost per accepted result.
 
@@ -136,15 +146,20 @@ Keep unknown cost, output and state unknown; never record them as zero or succes
 Before a new or changed profile, name the observed reason and the result that would reverse the choice.
 Before you retry a null or failed child, inspect its recorded artifacts; finished work may be usable.
 A profile with no Runtime coordination tool is a leaf; any coordination tool makes it a managed node.
-Only `agent_runtime_coordination_spawn_worker: true` grants recursion; names, metadata and role labels grant nothing.
+`agent_runtime_coordination_spawn_worker: true` grants Runtime spawning; names, metadata and role labels grant nothing.
+Prove recursive execution through actual child-to-grandchild edges.
+Record harness-native children separately from Runtime children.
+Group retries of the same assignment into one lineage when comparing teams.
 Grant `submit_result` only when Runtime gives that node an independent check; otherwise its settlement stays unassessed.
 Grant only the observation, steering and journal tools that the assignment needs.
 Set `harness`, `model.default` and `model.provider` explicitly, and validate against the current `agentProfileSchema`.
 A tool name must be one the harness publishes, and a refused name fails the same way on retry.
 `ls`, `list` and `find` are not tool names; select paths with a glob tool and search contents with a grep tool.
-An unattended run denies any permission the profile does not grant; keep file access inside the workspace or grant it.
-A stop or cancel is a request that a live acknowledger applies; plan the out-of-band path for a wedged parent.
-Compare Runtime's materialization receipt with what you authored before a large run.
+Inspect materialized permissions and served tools before relying on a restriction.
+Distinguish exact Runtime grants from harness-native defaults, which may expose additional tools.
+Keep file access within the actual permission boundary.
+Use the execution owner's supported cancellation and recovery procedures for a wedged parent.
+Compare Runtime's materialization receipt and served tool set with what you authored before a large run.
 
 Hand a file by path in `resources.files`, and compare the returned sha256 with your source:
 
@@ -172,82 +187,20 @@ Referee: family, instrument, dollars:
 Monitor: model, what it may steer:
 Null certificate: space, rows, calibration; registered reproducer, sha256, source calibration; who reruns it, budget:
 Credited exit, in the agents' words:
-Stop: check, report_blocked, deadline, maxBarren, budget:
+Served completion tools and observed materialization:
+Development progress measurement, calibration, and feedback cadence:
+Stop: installed check/continuation policy, deadline, maxBarren, budget, cancellation:
 Known traps handed to agents:
 Budget, caps, key and its dollar cap:
 Arms, control, measures, threshold, refuting result:
 Records that expose a hack:
 ```
 
-## Worked examples
-
-### Counterexample hunt, before and after
-
-Before, on a 36-lane hunt over 12 conjectures in 2026-09:
-The brief transcribed Wang and Zheng's Conjecture 13 (arXiv:2104.12942) as "c != 1".
-The checker refused only c = 1, and its admission decoys came from that transcription.
-Workers held the same checker that scored claims, and it counted any verified claim as new.
-All 3 lanes on that conjecture filed 39 "verified-new" claims, every one at c = 0.
-The paper assumes c != 0 throughout; at c = 0 the question is only whether x^d permutes the field.
-The real yield was 0.
-
-After:
-Audience: the paper's authors and its referees.
-Acceptance: Conjecture 13 quoted with the standing assumption that c is not 0 or 1, plus a literature sweep.
-Gap probe: before launch, the checker refuses c = 0 and classes a Corollary 11 family member as known.
-Agents run the development checker; the operator reruns a held-back checker and the sweep on each packet.
-A referee from another family recomputes each claim with its own code.
-A null over m <= 20 ends the run at its bound, and it counts once the outside check reruns its own reproducer on the certificate's cells.
-Arms: with and without the referee.
-
-### A null that counts
-
-Wang and Zheng checked Conjecture 13 for 2 <= m <= 10.
-Two lanes searched every (m, d, c) with c not in {0, 1} to m = 20, found no counterexample, and wrote a table.
-Nobody outside the run could check that table.
-Before the next launch, the operator registers a reference search for one m, its sha256, and its calibration: Theorem 9 gives 4 PcN pairs at m = 6 and 8 at m = 10, and a canary drops family (2) so those pairs must count as found.
-As a certificate, the null reads:
-
-```json
-{"space": {"cells": {"m": {"from": 2, "to": 20}}, "method": "enumerate", "bound": "m <= 20",
-  "within": "each unit d modulo 2^m - 1, one per Frobenius orbit, and each c outside {0, 1}"},
- "rows": [{"cell": {"m": 12}, "searched": 585442, "positives": 28, "found": 0}],
- "calibration": [{"cell": {"m": 6}, "why": "Theorem 9: x^5 is PcN for c in GF(4) outside {0, 1}"}],
- "reference": "sha256:5d198f4fc2d9..."}
-```
+## Examples
 
-The rows list every m; one is shown.
-The outside check hashes its copy, reruns the calibration and the canary with no network, then m = 11 to 20, then the rest.
-Rows typed instead of computed fail at the first cell that differs, and a script in the lane's packet is never run.
-A reference that searches nothing fails at m = 6; one whose found never fires fails the canary.
-If the budget ends after m = 18, the null is credited for 11 <= m <= 18 only.
-The in-run check holds the certificate, and the run ends at `maxBarren`; only the rerun gives credit.
-The trap for this conjecture reads: "the outside check does not count a c = 0 instance; the source sets c = 0 aside".
-
-### Coding task scored by tests
-
-Audience: the task's author, and a maintainer who decides whether to merge.
-Proxy: the visible tests.
-Gap: a change that passes the tests and that a maintainer rejects, such as a special-cased input, an edited test or a skipped check.
-Measured: in an 8-lane Terminal-Bench batch, Runtime marked 6 lanes as winners and the task's verifier passed 1 of them.
-Profile: agents run the visible tests.
-The held-back verifier and hidden tests run on the patch in a fresh container.
-Hash the test files; a changed test fails acceptance.
-A referee from another family reads the diff for special cases.
-A report that the task cannot pass without breaking its specification ends the run; it counts once the held-back verifier reproduces the conflict.
-
-### Product for a customer
-
-Audience: the customer who pays, and the decision the product supports.
-Acceptance: the customer's own evaluation criteria, quoted, and a walkthrough of the running product doing the customer's task.
-Proxy: an LLM fulfilment rater and a compliance checklist.
-Gap, measured across product lanes: the rater accepted 19 of 31 failed lanes and scored 0.45 where always-reject scored 0.73.
-In one wave, 19 of 44 reviewers never received the product.
-Profile: reviewers mount the product by path and must run it.
-A referee from another family walks the customer's task on the running product.
-The rater stays a ruler, not a gate, until it beats always-reject.
-Acceptance is the owner's or the customer's walkthrough.
-"Not ready, and this is what is missing" ends the run; it counts once the owner's walkthrough reproduces each gap.
+For acceptance gaps and null certificates, read [acceptance examples](references/acceptance-examples.md).
+The core instructions above are complete when only this file is mounted.
+Mount the reference as well when the assignment needs its worked examples.
 
 ## Then consider
 

package/skills/profile-authoring/references/acceptance-examples.md

@@ -0,0 +1,93 @@
+# Acceptance examples
+
+These examples preserve historical observations from the previous skill.
+Their counts are not current fleet measurements or default settings.
+
+## Contents
+
+- [Counterexample hunt](#counterexample-hunt-before-and-after)
+- [A null that counts](#a-null-that-counts)
+- [Coding task](#coding-task-scored-by-tests)
+- [Customer product](#product-for-a-customer)
+- [Other historical observations](#other-historical-observations)
+
+## Counterexample hunt, before and after
+
+Before, on a 36-lane hunt over 12 conjectures in 2026-09:
+The brief transcribed Wang and Zheng's Conjecture 13 (arXiv:2104.12942) as "c != 1".
+The checker refused only c = 1, and its admission decoys came from that transcription.
+Workers held the same checker that scored claims, and it counted any verified claim as new.
+All 3 lanes on that conjecture filed 39 "verified-new" claims, every one at c = 0.
+The paper assumes c != 0 throughout; at c = 0 the question is only whether x^d permutes the field.
+The real yield was 0.
+
+After:
+Audience: the paper's authors and its referees.
+Acceptance: Conjecture 13 quoted with the standing assumption that c is not 0 or 1, plus a literature sweep.
+Gap probe: before launch, the checker refuses c = 0 and classes a Corollary 11 family member as known.
+Agents run the development checker; the operator reruns a held-back checker and the sweep on each packet.
+A referee from another family recomputes each claim with its own code.
+A null over m <= 20 ends the run at its bound, and it counts once the outside check reruns its own reproducer on the certificate's cells.
+Arms: with and without the referee.
+
+## A null that counts
+
+Wang and Zheng checked Conjecture 13 for 2 <= m <= 10.
+Two lanes searched every (m, d, c) with c not in {0, 1} to m = 20, found no counterexample, and wrote a table.
+Nobody outside the run could check that table.
+Before the next launch, the operator registers a reference search for one m, its sha256, and its calibration: Theorem 9 gives 4 PcN pairs at m = 6 and 8 at m = 10, and a canary drops family (2) so those pairs must count as found.
+As a certificate, the null reads:
+
+```json
+{"space": {"cells": {"m": {"from": 2, "to": 20}}, "method": "enumerate", "bound": "m <= 20",
+  "within": "each unit d modulo 2^m - 1, one per Frobenius orbit, and each c outside {0, 1}"},
+ "rows": [{"cell": {"m": 12}, "searched": 585442, "positives": 28, "found": 0}],
+ "calibration": [{"cell": {"m": 6}, "why": "Theorem 9: x^5 is PcN for c in GF(4) outside {0, 1}"}],
+ "reference": "sha256:5d198f4fc2d9..."}
+```
+
+The rows list every m; one is shown.
+The outside check hashes its copy, reruns the calibration and the canary with no network, then m = 11 to 20, then the rest.
+Rows typed instead of computed fail at the first cell that differs, and a script in the lane's packet is never run.
+A reference that searches nothing fails at m = 6; one whose found never fires fails the canary.
+If the budget ends after m = 18, the null is credited for 11 <= m <= 18 only.
+The run retains the certificate and ends under its registered stop policy; only the outside rerun gives credit.
+The trap for this conjecture reads: "the outside check does not count a c = 0 instance; the source sets c = 0 aside".
+
+## Coding task scored by tests
+
+Audience: the task's author, and a maintainer who decides whether to merge.
+Proxy: the visible tests.
+Gap: a change that passes the tests and that a maintainer rejects, such as a special-cased input, an edited test or a skipped check.
+Measured: in an 8-lane Terminal-Bench batch, Runtime marked 6 lanes as winners and the task's verifier passed 1 of them.
+Profile: agents run the visible tests.
+The held-back verifier and hidden tests run on the patch in a fresh container.
+Hash the test files; a changed test fails acceptance.
+A referee from another family reads the diff for special cases.
+A conflict report follows the registered completion and stop policy.
+It counts only after the held-back verifier reproduces the conflict.
+
+## Product for a customer
+
+Audience: the customer who pays, and the decision the product supports.
+Acceptance: the customer's own evaluation criteria, quoted, and a walkthrough of the running product doing the customer's task.
+Proxy: an LLM fulfilment rater and a compliance checklist.
+Gap, measured across product lanes: the rater accepted 19 of 31 failed lanes and scored 0.45 where always-reject scored 0.73.
+In one wave, 19 of 44 reviewers never received the product.
+Profile: reviewers mount the product by path and must run it.
+A referee from another family walks the customer's task on the running product.
+The rater stays a ruler, not a gate, until it beats always-reject.
+Acceptance is the owner's or the customer's walkthrough.
+A gap report follows the registered completion and stop policy.
+It counts only after the owner's walkthrough reproduces each gap.
+
+## Other historical observations
+
+These observations motivated the original guidance.
+Consult their underlying records before reusing their numerical claims.
+
+- Measured: where a known gap existed, 15 of 27 lanes with claims filed false "new" results; where none was known, 0 of 34 lanes did.
+- Measured elsewhere: a credited exit cut one model's test cheating from 54% to 9%, while prohibitions barely moved another's.
+- Measured: an in-run check that accepted a documented null made it the cheapest hack in 11 of 16 blind judgments.
+- Measured: a director told of an infrastructure failure spent 2 of its first 4 children probing it.
+- Measured elsewhere: prompt wording alone moved one model's cheating from over 85% to 1%.

package/dist/run-layout-vwd4SwX_.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-layout-vwd4SwX_.js","names":[],"sources":["../src/runtime/supervise/run-layout.ts"],"sourcesContent":["/**\n * The on-disk supervisor-run layout: `<root>/.agent/supervisor/<id>`.\n *\n * This is the durable, cross-process face of a supervisor run — the counterpart to the in-process\n * `Inbox` seam in `./inbox`. A run persists its state under one directory so that any OTHER process\n * can find it after the fact: `@tangle-network/traces` reads exactly this layout via\n * `traces analyze --supervisor-run-dir`, a restarted host can rehydrate a run it no longer holds\n * handles to, and a human can steer a live worker by appending one NDJSON line. Until now the\n * layout was defined only in the unpublished `loops` repo (`src/supervisor-control.ts`) — a\n * published reader depending on an unpublished writer's convention — so the contract is promoted\n * here, names preserved.\n *\n * `.agent` is the one dot-dir for ALL agent-owned state (skills already write\n * `.agent/hypotheses/`, `.agent/skill-runs.jsonl`); supervisor runs live beside them rather than\n * under a product-branded dir. Runs written by older writers used `.loops/supervisor/<id>` —\n * readers that must see those keep a legacy fallback; this writer never creates `.loops` again.\n *\n * Layout, relative to `supervisorRunDir(root, id)`:\n *\n *   steers/requests/<hash>.json    one exact, caller-idempotent {@link WorkerSteerRequest}\n *   steers/acks/<hash>.json        runtime acknowledgement for that steer operation\n *   workers/<id>.inbox.ndjson      best-effort readable projection of admitted steer requests\n *   workers/<label>.ndjson         best-effort per-worker control-event log (delivery bookkeeping)\n *   cancellations/requests.ndjson  worker-scoped cancel requests (durable inbox); each line is a\n *                                  {@link WorkerCancelRequest}\n *   cancellations/<opId>.json      the acknowledgement for one cancel operation — a\n *                                  {@link WorkerCancellation} written ONLY by the runtime\n *                                  acknowledger in the OWNING manager's turn loop: exact node\n *                                  ids route to the manager that parents them (any depth);\n *                                  label/profile-name references to the root manager alone\n *   cancellations/run.request.json the run-scoped cancel request — one {@link RunCancelRequest},\n *                                  the whole RUN rather than one worker\n *   cancellations/run.json         the acknowledgement for the run-scoped request — a\n *                                  {@link RunCancellation} written ONLY by the runtime (the root\n *                                  manager issues the abort; the `supervise()` settle path records\n *                                  what the run actually did)\n *\n * Reads are tolerant by contract: a partial trailing line (a writer mid-append) or a corrupt line\n * never poisons the rest of the file — later valid lines still matter. Duplicate operation ids\n * collapse to the first admitted request, while a payload conflict fails closed.\n *\n * Promoted from `loops/src/supervisor-control.ts`. Steer admission now requires the exact worker id\n * and a caller-owned operation id. One atomic request file is the durable inbox; the NDJSON file is\n * a readable projection only and never controls idempotency.\n *\n * @experimental\n */\n\nimport { createHash } from 'node:crypto'\nimport { appendFileSync, existsSync, mkdirSync, readdirSync, readFileSync } from 'node:fs'\nimport { join, resolve } from 'node:path'\nimport { canonicalCandidateDigest, type Sha256Digest } from '@tangle-network/agent-interface'\nimport type { RetainedRunEffect } from '../retained-run-types'\nimport {\n  appendDurableFile,\n  assertNoSymlinkDescendant,\n  publishExclusiveDurableFile,\n  writeAtomicDurableFile,\n} from './durable-file'\n\n/** One atomically admitted down-leg request for an exact worker id. @stable */\nexport interface WorkerSteerRequest {\n  readonly schemaVersion: 1\n  /** Caller-minted stable idempotency key for this operation. */\n  readonly operationId: string\n  /** Digest of operation id, worker id, message, source, and interrupt mode. */\n  readonly requestDigest: Sha256Digest\n  /** ISO timestamp of durable admission. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  /** Exact supervised node id, including the run id for its root manager. */\n  readonly worker: string\n  readonly message: string\n  readonly interrupt: boolean\n}\n\n/** Runtime acknowledgement for one exact steer operation. @stable */\nexport interface WorkerSteerAcknowledgement {\n  readonly schemaVersion: 1\n  readonly operationId: string\n  readonly requestDigest: Sha256Digest\n  readonly worker: string\n  readonly effect: 'unknown' | 'delivered' | 'not_live' | 'unsupported' | 'refused'\n  readonly requestedAt: string\n  readonly observedAt: string\n  readonly detail: string\n}\n\n/** Caller input for one retry-safe steer operation. @stable */\nexport interface WriteWorkerSteerOptions {\n  readonly operationId: string\n  readonly message: string\n  readonly source?: string\n  readonly interrupt?: boolean\n}\n\n/** One durable worker-scoped cancel request appended to the run's cancellation inbox. */\nexport interface WorkerCancelRequest {\n  /** Caller-minted stable operation identifier — the idempotency key of the whole operation. */\n  readonly operationId: string\n  /** ISO timestamp of the append. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  /** The worker the request targets: a workerId (node id — routed to the owning manager at any\n   *  depth), or a profile name or spawn label (resolved by the root manager against its direct\n   *  children only). */\n  readonly worker: string\n  readonly reason?: string\n}\n\n/**\n * The durable acknowledgement state for one worker-scoped cancel operation, keyed by\n * `operationId`. The runtime acknowledger is the ONLY writer; `cancelWorker` only reads it.\n *\n * `effect` reuses the retained-run vocabulary ({@link RetainedRunEffect}) so the runtime has one\n * spelling of the four cancellation states:\n *  - `'unknown'`          — not yet resolved by the runtime (also what `cancelWorker` returns for\n *                           a request no acknowledger has answered), or — terminally, with the\n *                           run-over detail — an abort was issued but the run ended before the\n *                           termination could be observed. Never a success.\n *  - `'cancel_requested'` — the runtime issued the worker's abort; termination not yet proven.\n *  - `'cancelled'`        — the worker reached a terminal `down` state on the settle path.\n *  - `'not_live'`         — the worker was not live to cancel (already settled, it settled\n *                           `done` despite the abort, or the run ended before the request was\n *                           ever applied). Never a success of THIS operation.\n *\n * Expiry is run end: the owning manager's final pass closes every still-open request it owns\n * (`not_live` never applied, `unknown` issued-but-unproven), so a pending request cannot outlive\n * its run and abort a future spawn that happens to reuse a label.\n */\nexport interface WorkerCancellation {\n  readonly operationId: string\n  /** The worker reference exactly as requested. */\n  readonly worker: string\n  readonly effect: RetainedRunEffect\n  /** ISO timestamp of the original request. */\n  readonly requestedAt: string\n  /** ISO timestamp of the runtime's most recent observation of this operation. */\n  readonly observedAt: string\n  /** The node id the acknowledger resolved `worker` to, once resolved. */\n  readonly workerId?: string\n  /** The caller's reason, carried verbatim from the request. */\n  readonly reason?: string\n  /** The runtime's explanation of how it arrived at `effect`. */\n  readonly detail?: string\n  /**\n   * Every node id this operation PROVED terminated: the requested worker plus each descendant of\n   * its subtree observed to reach a terminal `down`/`cancelled` journal record at or after the\n   * abort was ISSUED — the acknowledger's own `observedAt` on the `cancel_requested` record\n   * (runtime clock), never the client's `requestedAt` (a cancelled lead cascades to its subtree\n   * by design — the scope signal chain — so the acknowledgement names the set, not one id).\n   * Proven at acknowledgement time; post-abort causation is approximate: a descendant that died\n   * of its own cause after the abort is indistinguishable from the cascade and may be included,\n   * a late teardown journal joins the set on a later pass while the manager still runs, and one\n   * still absent at run end is absent from the set. Grows monotonically; empty until termination\n   * is proven.\n   */\n  readonly terminated: ReadonlyArray<string>\n}\n\n/** One durable run-scoped cancel request: cancel the WHOLE run, not one worker. */\nexport interface RunCancelRequest {\n  /** Caller-minted stable operation identifier — the idempotency key of the whole operation. */\n  readonly operationId: string\n  /** ISO timestamp of the write. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  /** Requested observation target, measured by the acknowledgement's deadlineExceeded field.\n   * The observer always cascades eagerly. This does not guarantee scheduler latency or cleanup. */\n  readonly deadlineMs?: number\n  /** Stable operator/requester identity for audit trails. */\n  readonly operator?: string\n  readonly reason?: string\n}\n\n/**\n * The durable acknowledgement state for the run-scoped cancel operation, keyed by `operationId`.\n * The runtime is the ONLY writer; {@link cancelRun} only reads it.\n *\n * `effect` is the same {@link RetainedRunEffect} vocabulary the worker-scoped and retained-run\n * paths use, so the runtime has one spelling of the four cancellation states:\n *  - `'unknown'`          — no runtime has answered yet. Never a success.\n *  - `'cancel_requested'` — the root manager issued the run's cascading abort; the run's terminal\n *                           state is not yet observed.\n *  - `'cancelled'`        — the run reached its terminal cancelled state with confirmed teardown.\n *  - `'not_live'`         — the run was not live to cancel: it settled on its own despite the\n *                           request, or it ended before the request was applied.\n */\nexport interface RunCancellation {\n  /** Runtime path that issued the cascade. */\n  readonly path?: 'observer' | 'turn-boundary' | 'fallback'\n  /** Runtime clock elapsed between request timestamp and cascade application. */\n  readonly appliedAfterMs?: number\n  /** Whether application exceeded the requested deadlineMs; absent when no target was requested. */\n  readonly deadlineExceeded?: boolean\n  readonly operationId: string\n  readonly effect: RetainedRunEffect\n  /** ISO timestamp of the original request. */\n  readonly requestedAt: string\n  /** ISO timestamp of the runtime's most recent observation of this operation. */\n  readonly observedAt: string\n  /** The caller's reason, carried verbatim from the request. */\n  readonly reason?: string\n  /** The caller's operator identity, carried verbatim from the request. */\n  readonly operator?: string\n  /** The runtime's explanation of how it arrived at `effect`. */\n  readonly detail?: string\n}\n\n/** The root every supervisor run of one workspace lives under. */\nexport function supervisorRunsRoot(rootDir: string): string {\n  return join(resolve(rootDir), '.agent', 'supervisor')\n}\n\n/** The run directory every artifact of one supervisor run lives under. */\nexport function supervisorRunDir(rootDir: string, id: string): string {\n  return join(supervisorRunsRoot(rootDir), id)\n}\n\n/**\n * Where a pre-rename writer put the same run (`<root>/.loops/supervisor/<id>`). Readers that must\n * see historical runs check {@link supervisorRunDir} first and fall back to this; nothing writes\n * here anymore.\n */\nexport function legacySupervisorRunDir(rootDir: string, id: string): string {\n  return join(legacySupervisorRunsRoot(rootDir), id)\n}\n\n/**\n * The pre-rename runs root (`<root>/.loops/supervisor`). Only readers that ENUMERATE historical\n * runs need this — the per-id form is {@link legacySupervisorRunDir}. Nothing writes here.\n */\nexport function legacySupervisorRunsRoot(rootDir: string): string {\n  return join(resolve(rootDir), '.loops', 'supervisor')\n}\n\n/** A worker label reduced to a safe filename stem. Empty labels get a stable fallback. */\nexport function safeWorkerFile(label: string): string {\n  const safe = label.replace(/[^A-Za-z0-9._-]/g, '_')\n  return safe.length > 0 ? safe : 'worker'\n}\n\n/** The directory holding every per-worker file of one run (inboxes and control-event logs). */\nexport function supervisorWorkersDir(eventDir: string): string {\n  return join(eventDir, 'workers')\n}\n\n/** The durable inbox file for one worker of one run. */\nexport function workerInboxFile(rootDir: string, supervisorId: string, worker: string): string {\n  return workerInboxFileFromEventDir(supervisorRunDir(rootDir, supervisorId), worker)\n}\n\n/** Same, addressed from an already-known run directory (the reader's usual entry point). */\nexport function workerInboxFileFromEventDir(eventDir: string, worker: string): string {\n  return join(supervisorWorkersDir(eventDir), `${safeWorkerFile(worker)}.inbox.ndjson`)\n}\n\n/**\n * The best-effort control-event log for one worker (`workers/<label>.ndjson`) — delivery\n * bookkeeping for steers, plus whatever lifecycle events a writer chooses to append. Distinct from\n * the inbox: the inbox is the durable down-leg queue, this is the record of what happened to it.\n */\nexport function workerControlLogFile(eventDir: string, worker: string): string {\n  return join(supervisorWorkersDir(eventDir), `${safeWorkerFile(worker)}.ndjson`)\n}\n\n/** Directory containing atomically admitted steer requests and runtime acknowledgements. */\nexport function workerSteersDir(eventDir: string): string {\n  return join(eventDir, 'steers')\n}\n\n/** Directory containing one canonical request file per steer operation. */\nexport function workerSteerRequestsDir(eventDir: string): string {\n  return join(workerSteersDir(eventDir), 'requests')\n}\n\n/** Directory containing one runtime acknowledgement per steer operation. */\nexport function workerSteerAcknowledgementsDir(eventDir: string): string {\n  return join(workerSteersDir(eventDir), 'acks')\n}\n\n/** Canonical request file for one caller-owned steer operation id. */\nexport function workerSteerRequestFile(eventDir: string, operationId: string): string {\n  return join(workerSteerRequestsDir(eventDir), `${operationFileHash(operationId)}.json`)\n}\n\n/** Runtime acknowledgement file for one caller-owned steer operation id. */\nexport function workerSteerAcknowledgementFile(eventDir: string, operationId: string): string {\n  return join(workerSteerAcknowledgementsDir(eventDir), `${operationFileHash(operationId)}.json`)\n}\n\n/**\n * Admit one steer exactly once under a caller-owned operation id.\n *\n * Pass `supervisorId` as `worker` to address the root. Router roots consume requests between\n * turns; native roots use their existing accepting inbox during execution, or acknowledge\n * `unsupported` when none is available. Delivery does not prove model consumption.\n * This filesystem API requires trusted write access to the run directory; it adds no MCP grant.\n *\n * The per-operation request file is linked into place atomically after its bytes reach disk. A\n * same-body retry returns the winner's request. A changed-body retry fails loud. The NDJSON inbox\n * and control log are readable projections written only by the admission winner.\n * @stable\n */\nexport function writeWorkerSteer(\n  rootDir: string,\n  supervisorId: string,\n  worker: string,\n  options: WriteWorkerSteerOptions,\n): {\n  worker: string\n  file: string\n  request: WorkerSteerRequest\n  acknowledgement?: WorkerSteerAcknowledgement\n  replayed: boolean\n} {\n  const workerId = worker.trim()\n  if (!workerId) throw new Error('writeWorkerSteer: worker id is empty')\n  const operationId = options.operationId.trim()\n  if (!operationId) throw new Error('writeWorkerSteer: operationId is empty')\n  const trimmed = options.message.trim()\n  if (!trimmed) throw new Error('steer message is empty')\n  const source = options.source?.trim() || 'human'\n  const interrupt = options.interrupt === true\n  const dir = supervisorRunDir(rootDir, supervisorId)\n  const requestDigest = workerSteerRequestDigest({\n    operationId,\n    worker: workerId,\n    message: trimmed,\n    source,\n    interrupt,\n  })\n  const request: WorkerSteerRequest = {\n    schemaVersion: 1,\n    operationId,\n    requestDigest,\n    at: new Date().toISOString(),\n    source,\n    worker: workerId,\n    message: trimmed,\n    interrupt,\n  }\n  const file = workerSteerRequestFile(dir, operationId)\n  assertNoSymlinkDescendant(dir, file, 'steer request')\n  mkdirSync(workerSteerRequestsDir(dir), { recursive: true })\n  assertNoSymlinkDescendant(dir, file, 'steer request')\n  const admitted = admitSteerRequest(file, request)\n  if (admitted.replayed) {\n    return {\n      worker: admitted.request.worker,\n      file,\n      request: admitted.request,\n      ...(readWorkerSteerAcknowledgement(dir, operationId) === undefined\n        ? {}\n        : { acknowledgement: readWorkerSteerAcknowledgement(dir, operationId) }),\n      replayed: true,\n    }\n  }\n  mkdirSync(supervisorWorkersDir(dir), { recursive: true })\n  const projection = workerInboxFile(rootDir, supervisorId, workerId)\n  try {\n    appendFileSync(projection, `${JSON.stringify(request)}\\n`, 'utf8')\n  } catch {\n    // The atomic operation file is the queue. This projection does not control admission.\n  }\n  appendWorkerControlEvent(dir, workerId, {\n    kind: 'message',\n    direction: 'down',\n    source,\n    operationId,\n    requestDigest,\n    message: trimmed,\n    interrupt,\n    queued: true,\n    delivered: false,\n  })\n  return { worker: workerId, file, request, replayed: false }\n}\n\n/** Read every atomically admitted request for one exact worker id, in admission order. @stable */\nexport function readWorkerSteerRequests(eventDir: string, worker?: string): WorkerSteerRequest[] {\n  const workerId = worker?.trim()\n  if (worker !== undefined && !workerId) return []\n  let names: string[]\n  assertNoSymlinkDescendant(eventDir, workerSteerRequestsDir(eventDir), 'steer request')\n  try {\n    names = readdirSync(workerSteerRequestsDir(eventDir))\n  } catch {\n    return []\n  }\n  const out: WorkerSteerRequest[] = []\n  for (const name of names) {\n    if (!name.endsWith('.json')) continue\n    try {\n      const file = join(workerSteerRequestsDir(eventDir), name)\n      assertNoSymlinkDescendant(eventDir, file, 'steer request')\n      const parsed = parseWorkerSteerRequest(JSON.parse(readFileSync(file, 'utf8')))\n      if (name !== `${operationFileHash(parsed.operationId)}.json`) continue\n      if (workerId === undefined || parsed.worker === workerId) out.push(parsed)\n    } catch {\n      // One corrupt request cannot hide other independently committed operations.\n    }\n  }\n  return out.sort((left, right) =>\n    left.at === right.at\n      ? left.operationId.localeCompare(right.operationId)\n      : left.at.localeCompare(right.at),\n  )\n}\n\n/** Read one runtime steer acknowledgement, or `undefined` while no manager has answered. @stable */\nexport function readWorkerSteerAcknowledgement(\n  eventDir: string,\n  operationId: string,\n): WorkerSteerAcknowledgement | undefined {\n  const id = operationId.trim()\n  if (!id) throw new Error('readWorkerSteerAcknowledgement: operationId is empty')\n  const file = workerSteerAcknowledgementFile(eventDir, id)\n  assertNoSymlinkDescendant(eventDir, file, 'steer acknowledgement')\n  if (!existsSync(file)) return undefined\n  const record = parseWorkerSteerAcknowledgement(JSON.parse(readFileSync(file, 'utf8')))\n  if (record.operationId !== id) {\n    throw new Error(`steer acknowledgement '${file}' belongs to another operation`)\n  }\n  return record\n}\n\n/**\n * Claim one steer for delivery with an atomic no-clobber acknowledgement.\n * Returns `true` only to the process that created the pre-delivery record.\n * @internal\n */\nexport function claimWorkerSteerDelivery(\n  eventDir: string,\n  record: WorkerSteerAcknowledgement,\n): boolean {\n  const exact = parseWorkerSteerAcknowledgement(record)\n  if (exact.effect !== 'unknown') {\n    throw new Error('steer delivery claim must use effect unknown')\n  }\n  const request = readWorkerSteerRequest(eventDir, exact.operationId)\n  if (request === undefined || request.requestDigest !== exact.requestDigest) {\n    throw new Error('steer delivery claim does not match an admitted request')\n  }\n  const dir = workerSteerAcknowledgementsDir(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'steer acknowledgement')\n  mkdirSync(dir, { recursive: true })\n  assertNoSymlinkDescendant(eventDir, dir, 'steer acknowledgement')\n  const file = workerSteerAcknowledgementFile(eventDir, exact.operationId)\n  if (publishExclusiveDurableFile(file, `${JSON.stringify(exact, null, 2)}\\n`)) {\n    return true\n  }\n  const winner = readWorkerSteerAcknowledgement(eventDir, exact.operationId)\n  if (\n    winner === undefined ||\n    winner.operationId !== exact.operationId ||\n    winner.requestDigest !== exact.requestDigest\n  ) {\n    throw new Error('steer delivery claim conflicts with another operation')\n  }\n  return false\n}\n\n/** Atomically replace the runtime acknowledgement for one steer operation. @internal */\nexport function writeWorkerSteerAcknowledgement(\n  eventDir: string,\n  record: WorkerSteerAcknowledgement,\n): void {\n  const exact = parseWorkerSteerAcknowledgement(record)\n  const request = readWorkerSteerRequest(eventDir, exact.operationId)\n  if (request === undefined || request.requestDigest !== exact.requestDigest) {\n    throw new Error('steer acknowledgement does not match an admitted request')\n  }\n  const dir = workerSteerAcknowledgementsDir(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'steer acknowledgement')\n  mkdirSync(dir, { recursive: true })\n  assertNoSymlinkDescendant(eventDir, dir, 'steer acknowledgement')\n  const file = workerSteerAcknowledgementFile(eventDir, exact.operationId)\n  const prior = readWorkerSteerAcknowledgement(eventDir, exact.operationId)\n  if (\n    prior !== undefined &&\n    prior.effect !== 'unknown' &&\n    canonicalCandidateDigest(prior) !== canonicalCandidateDigest(exact)\n  ) {\n    throw new Error(`steer operation '${exact.operationId}' already has a terminal acknowledgement`)\n  }\n  writeAtomicDurableFile(file, `${JSON.stringify(exact, null, 2)}\\n`)\n}\n\n/** The directory holding every cancellation artifact of one run (request inbox + acknowledgements). */\nexport function workerCancellationsDir(eventDir: string): string {\n  return join(eventDir, 'cancellations')\n}\n\n/**\n * The durable cancel-request inbox of one run — one NDJSON line per {@link WorkerCancelRequest}.\n * It stays append-only so independent operations retain admission order and readers can skip a\n * partial trailing line. `appendDurableFile` uses O_APPEND, one write, file fsync, and directory\n * fsync; single-record acknowledgements use atomic replacement instead.\n */\nexport function workerCancelRequestsFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'requests.ndjson')\n}\n\n/**\n * The acknowledgement file for one cancel operation. The filename is a sanitized stem of the\n * `operationId`; the record inside carries the exact id, and readers verify it so two distinct\n * ids that sanitize to one stem fail loud instead of answering for each other.\n */\nexport function workerCancellationFile(eventDir: string, operationId: string): string {\n  return join(workerCancellationsDir(eventDir), `${safeOperationFile(operationId)}.json`)\n}\n\nfunction safeOperationFile(operationId: string): string {\n  const safe = operationId.replace(/[^A-Za-z0-9._-]/g, '_')\n  if (safe.length === 0) throw new Error('cancel operationId is empty')\n  return safe\n}\n\n/** Read every valid cancel request in the run's cancellation inbox. Corrupt lines are skipped. */\nexport function readWorkerCancelRequests(eventDir: string): WorkerCancelRequest[] {\n  const dir = workerCancellationsDir(eventDir)\n  const file = workerCancelRequestsFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'cancel request')\n  assertNoSymlinkDescendant(eventDir, file, 'cancel request')\n  if (!existsSync(file)) return []\n  const out: WorkerCancelRequest[] = []\n  const byOperationId = new Map<string, WorkerCancelRequest>()\n  let raw = ''\n  try {\n    raw = readFileSync(file, 'utf8')\n  } catch {\n    return out\n  }\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim()\n    if (!trimmed) continue\n    let parsed: Partial<WorkerCancelRequest>\n    try {\n      parsed = JSON.parse(trimmed) as Partial<WorkerCancelRequest>\n    } catch {\n      // Ignore partial or corrupt input lines; later valid lines still matter.\n      continue\n    }\n    if (!isWorkerCancelRequest(parsed)) continue\n    const prior = byOperationId.get(parsed.operationId)\n    if (prior !== undefined) {\n      assertSameWorkerCancelRequest(prior, parsed)\n    } else {\n      byOperationId.set(parsed.operationId, parsed)\n      out.push(parsed)\n    }\n  }\n  return out\n}\n\n/**\n * Read the acknowledgement for one cancel operation. `undefined` when the runtime has not\n * answered. A record whose stored `operationId` differs from the requested one is a filename\n * collision between two sanitized ids — fail loud rather than return another operation's answer.\n */\nexport function readWorkerCancellation(\n  eventDir: string,\n  operationId: string,\n): WorkerCancellation | undefined {\n  const dir = workerCancellationsDir(eventDir)\n  const file = workerCancellationFile(eventDir, operationId)\n  assertNoSymlinkDescendant(eventDir, dir, 'cancel acknowledgement')\n  assertNoSymlinkDescendant(eventDir, file, 'cancel acknowledgement')\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as WorkerCancellation\n  if (parsed.operationId !== operationId) {\n    throw new Error(\n      `cancel acknowledgement collision: '${file}' holds operation '${parsed.operationId}', ` +\n        `not '${operationId}' — use operation ids that stay distinct after filename sanitization`,\n    )\n  }\n  return parsed\n}\n\n/**\n * Durably write one acknowledgement record. The shared writer fsyncs the file and containing\n * directory, so a concurrent reader sees the prior complete record or the new complete record.\n *\n * @internal The runtime acknowledger is the only intended writer; clients read via\n * {@link readWorkerCancellation} or {@link cancelWorker}.\n */\nexport function writeWorkerCancellation(eventDir: string, record: WorkerCancellation): void {\n  const dir = workerCancellationsDir(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'cancel acknowledgement')\n  mkdirSync(dir, { recursive: true })\n  assertNoSymlinkDescendant(eventDir, dir, 'cancel acknowledgement')\n  const file = workerCancellationFile(eventDir, record.operationId)\n  assertNoSymlinkDescendant(eventDir, file, 'cancel acknowledgement')\n  writeAtomicDurableFile(file, `${JSON.stringify(record, null, 2)}\\n`, { mode: 0o600 })\n}\n\n/**\n * Request the cancellation of ONE worker, idempotently, and return the operation's current\n * durable state.\n *\n * The write half of the acknowledged-cancellation contract (`writeWorkerSteer` is the steer\n * analog): append the request to the run's cancellation inbox, where the OWNING manager's\n * acknowledger (its turn loop — the root for label/profile references, the parent manager for an\n * exact node id at any depth) applies it — aborting exactly that worker's subtree and recording\n * what it proved. This function never applies the cancellation itself; writing a\n * request file is not an acknowledgement.\n *\n * Idempotency is a lookup: when an acknowledgement for `operationId` already exists, it is\n * returned AS-IS and nothing is appended — repeating one operation can never apply twice. A\n * retry that changes the worker, source, or reason fails closed. A request the runtime has not\n * answered yet returns `effect: 'unknown'` (never a success); call again with the same\n * `operationId` — or `readWorkerCancellation` — to read the acknowledged result after a\n * reconnect.\n */\nexport function cancelWorker(\n  eventDir: string,\n  worker: string,\n  operationId: string,\n  options: { readonly reason?: string; readonly source?: string } = {},\n): WorkerCancellation {\n  const ref = worker.trim()\n  if (!ref) throw new Error('cancelWorker: worker reference is empty')\n  const opId = operationId.trim()\n  if (!opId) throw new Error('cancelWorker: operationId is empty')\n  const pending = readWorkerCancelRequests(eventDir).find((r) => r.operationId === opId)\n  const candidate = {\n    operationId: opId,\n    worker: ref,\n    source: options.source ?? 'human',\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n  }\n  if (pending !== undefined) assertSameWorkerCancelRequest(pending, candidate)\n  const acknowledged = readWorkerCancellation(eventDir, opId)\n  if (acknowledged !== undefined) {\n    if (pending === undefined && options.source !== undefined) {\n      throw new Error(\n        `cancelWorker: operation '${opId}' cannot verify source without its admitted request`,\n      )\n    }\n    assertWorkerCancellationMatchesCandidate(acknowledged, candidate)\n    return acknowledged\n  }\n  const source = options.source ?? 'human'\n  const request: WorkerCancelRequest = pending ?? {\n    operationId: opId,\n    at: new Date().toISOString(),\n    source,\n    worker: ref,\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n  }\n  if (!pending) {\n    const dir = workerCancellationsDir(eventDir)\n    assertNoSymlinkDescendant(eventDir, dir, 'cancel request')\n    mkdirSync(dir, { recursive: true })\n    assertNoSymlinkDescendant(eventDir, dir, 'cancel request')\n    const file = workerCancelRequestsFile(eventDir)\n    assertNoSymlinkDescendant(eventDir, file, 'cancel request')\n    appendDurableFile(file, `${JSON.stringify(request)}\\n`, { mode: 0o600 })\n    appendWorkerControlEvent(eventDir, ref, {\n      kind: 'cancel-request',\n      operationId: opId,\n      source,\n      queued: true,\n      ...(options.reason === undefined ? {} : { reason: options.reason }),\n    })\n  }\n  return {\n    operationId: opId,\n    worker: request.worker,\n    effect: 'unknown',\n    requestedAt: request.at,\n    observedAt: request.at,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    detail: 'request queued; no runtime acknowledger has answered yet',\n    terminated: [],\n  }\n}\n\n/** The run-scoped cancel request file of one run — one {@link RunCancelRequest}. */\nexport function runCancelRequestFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.request.json')\n}\n\n/** The run-scoped acknowledgement file of one run — one {@link RunCancellation}. */\nexport function runCancellationFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.json')\n}\n\n/** Read the run-scoped cancel request, or `undefined` when none was written. */\nexport function readRunCancelRequest(eventDir: string): RunCancelRequest | undefined {\n  const dir = workerCancellationsDir(eventDir)\n  const file = runCancelRequestFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel request')\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as Partial<RunCancelRequest>\n  if (!isRunCancelRequest(parsed)) {\n    throw new Error(`run cancel request '${file}' is not a complete RunCancelRequest`)\n  }\n  return parsed\n}\n\n/**\n * Read the acknowledgement for the run-scoped cancel operation. `undefined` when the runtime has\n * not answered. A record holding a DIFFERENT `operationId` belongs to another operation on the\n * same run — fail loud rather than answer for it.\n */\nexport function readRunCancellation(\n  eventDir: string,\n  operationId: string,\n): RunCancellation | undefined {\n  const dir = workerCancellationsDir(eventDir)\n  const file = runCancellationFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel acknowledgement')\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as RunCancellation\n  if (parsed.operationId !== operationId) {\n    throw new Error(\n      `run cancel acknowledgement '${file}' holds operation '${parsed.operationId}', not ` +\n        `'${operationId}' — one run carries one run-scoped cancel operation`,\n    )\n  }\n  return parsed\n}\n\n/**\n * Durably write the run-scoped acknowledgement. The shared writer fsyncs the file and containing\n * directory, so a concurrent reader sees the prior complete record or the new complete record.\n *\n * @internal The runtime is the only intended writer; clients read via {@link readRunCancellation}\n * or {@link cancelRun}.\n */\nexport function writeRunCancellation(eventDir: string, record: RunCancellation): void {\n  const dir = workerCancellationsDir(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  mkdirSync(dir, { recursive: true })\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  const file = runCancellationFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel acknowledgement')\n  writeAtomicDurableFile(file, `${JSON.stringify(record, null, 2)}\\n`, { mode: 0o600 })\n}\n\n/**\n * Request the cancellation of the WHOLE run, idempotently, and return the operation's current\n * durable state.\n *\n * The run-scoped twin of {@link cancelWorker}: write the request into the run's cancellation\n * directory, where the run's own root manager applies it — aborting the root through the one\n * cascade controller the run already has, so every live worker comes down with it. This function\n * never applies the cancellation itself; writing a request file is not an acknowledgement.\n *\n * Idempotency is a lookup: when an acknowledgement for `operationId` already exists it is returned\n * AS-IS and nothing is written. A retry that changes the source, reason, deadline, or operator\n * fails closed. A request the runtime has not answered yet returns `effect: 'unknown'` (never a\n * success); call again with the same `operationId` — or {@link readRunCancellation} — to read the\n * acknowledged result after a reconnect.\n *\n * A run carries ONE run-scoped operation: a second request under a different `operationId` throws\n * rather than silently replacing the pending one, because both would claim the same single abort.\n */\nexport function cancelRun(\n  eventDir: string,\n  operationId: string,\n  options: {\n    readonly reason?: string\n    readonly source?: string\n    readonly deadlineMs?: number\n    readonly operator?: string\n  } = {},\n): RunCancellation {\n  if (\n    options.deadlineMs !== undefined &&\n    (!Number.isFinite(options.deadlineMs) || options.deadlineMs < 0)\n  ) {\n    throw new Error('cancelRun: deadlineMs must be a finite nonnegative number')\n  }\n  const opId = operationId.trim()\n  if (!opId) throw new Error('cancelRun: operationId is empty')\n  const pending = readRunCancelRequest(eventDir)\n  if (pending !== undefined && pending.operationId !== opId) {\n    throw new Error(\n      `cancelRun: run cancel '${pending.operationId}' is already pending for this run; ` +\n        `read it with readRunCancellation instead of issuing '${opId}'`,\n    )\n  }\n  const candidate = {\n    operationId: opId,\n    source: options.source ?? 'human',\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n    ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n    ...(options.operator === undefined ? {} : { operator: options.operator }),\n  }\n  if (pending !== undefined) assertSameRunCancelRequest(pending, candidate)\n  const acknowledged = readRunCancellation(eventDir, opId)\n  if (acknowledged !== undefined) {\n    if (pending === undefined && options.source !== undefined) {\n      throw new Error(\n        `cancelRun: operation '${opId}' cannot verify source without its admitted request`,\n      )\n    }\n    assertRunCancellationMatchesCandidate(acknowledged, candidate)\n    return acknowledged\n  }\n  const source = options.source ?? 'human'\n  const request: RunCancelRequest = pending ?? {\n    operationId: opId,\n    at: new Date().toISOString(),\n    source,\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n    ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n    ...(options.operator === undefined ? {} : { operator: options.operator }),\n  }\n  if (pending === undefined) {\n    const dir = workerCancellationsDir(eventDir)\n    assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n    mkdirSync(dir, { recursive: true })\n    assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n    const file = runCancelRequestFile(eventDir)\n    assertNoSymlinkDescendant(eventDir, file, 'run cancel request')\n    writeAtomicDurableFile(file, `${JSON.stringify(request, null, 2)}\\n`, { mode: 0o600 })\n    appendWorkerControlEvent(eventDir, 'run', {\n      kind: 'run-cancel-request',\n      operationId: opId,\n      source,\n      queued: true,\n      ...(options.reason === undefined ? {} : { reason: options.reason }),\n      ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n      ...(options.operator === undefined ? {} : { operator: options.operator }),\n    })\n  }\n  return {\n    operationId: opId,\n    effect: 'unknown',\n    requestedAt: request.at,\n    observedAt: request.at,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    ...(request.operator === undefined ? {} : { operator: request.operator }),\n    detail: 'request queued; no runtime acknowledger has answered yet',\n  }\n}\n\ntype WorkerCancelRequestCandidate = {\n  readonly operationId: string\n  readonly worker: string\n  readonly source: string\n  readonly reason?: string\n}\n\ntype RunCancelRequestCandidate = {\n  readonly deadlineMs?: number\n  readonly operationId: string\n  readonly source: string\n  readonly reason?: string\n  readonly operator?: string\n}\n\nfunction assertSameWorkerCancelRequest(\n  existing: WorkerCancelRequest,\n  candidate: WorkerCancelRequestCandidate,\n): void {\n  if (existing.operationId !== candidate.operationId) {\n    throw new Error(`cancelWorker: operation '${candidate.operationId}' has an id collision`)\n  }\n  if (existing.worker !== candidate.worker) {\n    throw new Error(\n      `cancelWorker: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(worker '${existing.worker}' != '${candidate.worker}')`,\n    )\n  }\n  if (existing.source !== candidate.source) {\n    throw new Error(\n      `cancelWorker: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(source '${existing.source}' != '${candidate.source}')`,\n    )\n  }\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelWorker: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(reason differs)`,\n    )\n  }\n}\n\nfunction assertWorkerCancellationMatchesCandidate(\n  existing: WorkerCancellation,\n  candidate: WorkerCancelRequestCandidate,\n): void {\n  if (existing.worker !== candidate.worker) {\n    throw new Error(\n      `cancelWorker: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(worker '${existing.worker}' != '${candidate.worker}')`,\n    )\n  }\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelWorker: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(reason differs)`,\n    )\n  }\n}\n\nfunction assertSameRunCancelRequest(\n  existing: RunCancelRequest,\n  candidate: RunCancelRequestCandidate,\n): void {\n  if (existing.operationId !== candidate.operationId) {\n    throw new Error(`cancelRun: operation '${candidate.operationId}' has an id collision`)\n  }\n  if (existing.source !== candidate.source) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(source '${existing.source}' != '${candidate.source}')`,\n    )\n  }\n  if (existing.deadlineMs !== candidate.deadlineMs) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request (deadlineMs differs)`,\n    )\n  }\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(reason differs)`,\n    )\n  }\n  if (existing.operator !== candidate.operator) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(operator '${existing.operator}' != '${candidate.operator}')`,\n    )\n  }\n}\n\nfunction assertRunCancellationMatchesCandidate(\n  existing: RunCancellation,\n  candidate: RunCancelRequestCandidate,\n): void {\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(reason differs)`,\n    )\n  }\n  // An acknowledgement written before acknowledgements carried the operator (0.251.0) names none\n  // even when its admitted request does. The request comparator has already held the candidate\n  // to that request, so a legacy record matches any candidate operator; a record that names one\n  // must name the same one.\n  if (existing.operator !== undefined && existing.operator !== candidate.operator) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(operator '${existing.operator}' != '${candidate.operator}')`,\n    )\n  }\n}\n\nfunction isRunCancelRequest(value: Partial<RunCancelRequest>): value is RunCancelRequest {\n  return (\n    typeof value.operationId === 'string' &&\n    value.operationId.length > 0 &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    (value.deadlineMs === undefined ||\n      (Number.isFinite(value.deadlineMs) && value.deadlineMs >= 0)) &&\n    (value.reason === undefined || typeof value.reason === 'string') &&\n    (value.operator === undefined || typeof value.operator === 'string')\n  )\n}\n\nfunction isWorkerCancelRequest(value: Partial<WorkerCancelRequest>): value is WorkerCancelRequest {\n  return (\n    typeof value.operationId === 'string' &&\n    value.operationId.length > 0 &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    typeof value.worker === 'string' &&\n    value.worker.length > 0 &&\n    (value.reason === undefined || typeof value.reason === 'string')\n  )\n}\n\nfunction appendWorkerControlEvent(\n  eventDir: string,\n  label: string,\n  event: Record<string, unknown>,\n): void {\n  try {\n    mkdirSync(supervisorWorkersDir(eventDir), { recursive: true })\n    appendFileSync(\n      workerControlLogFile(eventDir, label),\n      `${JSON.stringify({ at: new Date().toISOString(), label, ...event })}\\n`,\n      'utf8',\n    )\n  } catch {\n    // Control logging is best-effort; the inbox write above is the durable part.\n  }\n}\n\nfunction workerSteerRequestDigest(value: {\n  readonly operationId: string\n  readonly worker: string\n  readonly message: string\n  readonly source: string\n  readonly interrupt: boolean\n}): Sha256Digest {\n  return canonicalCandidateDigest({ kind: 'worker-steer-request.v1', ...value })\n}\n\nfunction operationFileHash(operationId: string): string {\n  const id = operationId.trim()\n  if (!id) throw new Error('steer operationId is empty')\n  return createHash('sha256').update(id).digest('hex')\n}\n\nfunction admitSteerRequest(\n  file: string,\n  request: WorkerSteerRequest,\n): { readonly request: WorkerSteerRequest; readonly replayed: boolean } {\n  const existing = readWorkerSteerRequestFile(file)\n  if (existing !== undefined) {\n    assertSameSteerRequest(existing, request)\n    return { request: existing, replayed: true }\n  }\n  if (publishExclusiveDurableFile(file, `${JSON.stringify(request, null, 2)}\\n`)) {\n    return { request, replayed: false }\n  }\n  const winner = readWorkerSteerRequestFile(file)\n  if (winner === undefined) {\n    throw new Error('steer request publication lost its winner')\n  }\n  assertSameSteerRequest(winner, request)\n  return { request: winner, replayed: true }\n}\n\nfunction readWorkerSteerRequest(\n  eventDir: string,\n  operationId: string,\n): WorkerSteerRequest | undefined {\n  const file = workerSteerRequestFile(eventDir, operationId)\n  assertNoSymlinkDescendant(eventDir, file, 'steer request')\n  const request = readWorkerSteerRequestFile(file)\n  if (request !== undefined && request.operationId !== operationId) {\n    throw new Error('steer request file belongs to another operation')\n  }\n  return request\n}\n\nfunction readWorkerSteerRequestFile(file: string): WorkerSteerRequest | undefined {\n  if (!existsSync(file)) return undefined\n  return parseWorkerSteerRequest(JSON.parse(readFileSync(file, 'utf8')))\n}\n\nfunction parseWorkerSteerRequest(value: unknown): WorkerSteerRequest {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error('steer request is malformed')\n  }\n  const request = value as Partial<WorkerSteerRequest>\n  if (\n    request.schemaVersion !== 1 ||\n    typeof request.operationId !== 'string' ||\n    request.operationId.length === 0 ||\n    typeof request.requestDigest !== 'string' ||\n    typeof request.at !== 'string' ||\n    typeof request.source !== 'string' ||\n    request.source.length === 0 ||\n    typeof request.worker !== 'string' ||\n    request.worker.length === 0 ||\n    typeof request.message !== 'string' ||\n    request.message.trim().length === 0 ||\n    typeof request.interrupt !== 'boolean'\n  ) {\n    throw new Error('steer request is malformed')\n  }\n  const exact = request as WorkerSteerRequest\n  const expected = workerSteerRequestDigest({\n    operationId: exact.operationId,\n    worker: exact.worker,\n    message: exact.message,\n    source: exact.source,\n    interrupt: exact.interrupt,\n  })\n  if (exact.requestDigest !== expected) throw new Error('steer request digest does not match')\n  return exact\n}\n\nfunction parseWorkerSteerAcknowledgement(value: unknown): WorkerSteerAcknowledgement {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error('steer acknowledgement is malformed')\n  }\n  const record = value as Partial<WorkerSteerAcknowledgement>\n  if (\n    record.schemaVersion !== 1 ||\n    typeof record.operationId !== 'string' ||\n    record.operationId.length === 0 ||\n    typeof record.requestDigest !== 'string' ||\n    typeof record.worker !== 'string' ||\n    record.worker.length === 0 ||\n    (record.effect !== 'unknown' &&\n      record.effect !== 'delivered' &&\n      record.effect !== 'not_live' &&\n      record.effect !== 'unsupported' &&\n      record.effect !== 'refused') ||\n    typeof record.requestedAt !== 'string' ||\n    typeof record.observedAt !== 'string' ||\n    typeof record.detail !== 'string'\n  ) {\n    throw new Error('steer acknowledgement is malformed')\n  }\n  return record as WorkerSteerAcknowledgement\n}\n\nfunction assertSameSteerRequest(existing: WorkerSteerRequest, candidate: WorkerSteerRequest): void {\n  if (existing.operationId !== candidate.operationId) {\n    throw new Error('steer operation file collision')\n  }\n  if (existing.requestDigest !== candidate.requestDigest) {\n    throw new Error(\n      `writeWorkerSteer: operation '${candidate.operationId}' conflicts with its admitted request`,\n    )\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqNA,SAAgB,mBAAmB,SAAyB;CAC1D,OAAO,KAAK,QAAQ,OAAO,GAAG,UAAU,YAAY;AACtD;;AAGA,SAAgB,iBAAiB,SAAiB,IAAoB;CACpE,OAAO,KAAK,mBAAmB,OAAO,GAAG,EAAE;AAC7C;;;;;;AAOA,SAAgB,uBAAuB,SAAiB,IAAoB;CAC1E,OAAO,KAAK,yBAAyB,OAAO,GAAG,EAAE;AACnD;;;;;AAMA,SAAgB,yBAAyB,SAAyB;CAChE,OAAO,KAAK,QAAQ,OAAO,GAAG,UAAU,YAAY;AACtD;;AAGA,SAAgB,eAAe,OAAuB;CACpD,MAAM,OAAO,MAAM,QAAQ,oBAAoB,GAAG;CAClD,OAAO,KAAK,SAAS,IAAI,OAAO;AAClC;;AAGA,SAAgB,qBAAqB,UAA0B;CAC7D,OAAO,KAAK,UAAU,SAAS;AACjC;;AAGA,SAAgB,gBAAgB,SAAiB,cAAsB,QAAwB;CAC7F,OAAO,4BAA4B,iBAAiB,SAAS,YAAY,GAAG,MAAM;AACpF;;AAGA,SAAgB,4BAA4B,UAAkB,QAAwB;CACpF,OAAO,KAAK,qBAAqB,QAAQ,GAAG,GAAG,eAAe,MAAM,EAAE,cAAc;AACtF;;;;;;AAOA,SAAgB,qBAAqB,UAAkB,QAAwB;CAC7E,OAAO,KAAK,qBAAqB,QAAQ,GAAG,GAAG,eAAe,MAAM,EAAE,QAAQ;AAChF;;AAGA,SAAgB,gBAAgB,UAA0B;CACxD,OAAO,KAAK,UAAU,QAAQ;AAChC;;AAGA,SAAgB,uBAAuB,UAA0B;CAC/D,OAAO,KAAK,gBAAgB,QAAQ,GAAG,UAAU;AACnD;;AAGA,SAAgB,+BAA+B,UAA0B;CACvE,OAAO,KAAK,gBAAgB,QAAQ,GAAG,MAAM;AAC/C;;AAGA,SAAgB,uBAAuB,UAAkB,aAA6B;CACpF,OAAO,KAAK,uBAAuB,QAAQ,GAAG,GAAG,kBAAkB,WAAW,EAAE,MAAM;AACxF;;AAGA,SAAgB,+BAA+B,UAAkB,aAA6B;CAC5F,OAAO,KAAK,+BAA+B,QAAQ,GAAG,GAAG,kBAAkB,WAAW,EAAE,MAAM;AAChG;;;;;;;;;;;;;;AAeA,SAAgB,iBACd,SACA,cACA,QACA,SAOA;CACA,MAAM,WAAW,OAAO,KAAK;CAC7B,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,sCAAsC;CACrE,MAAM,cAAc,QAAQ,YAAY,KAAK;CAC7C,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,wCAAwC;CAC1E,MAAM,UAAU,QAAQ,QAAQ,KAAK;CACrC,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,wBAAwB;CACtD,MAAM,SAAS,QAAQ,QAAQ,KAAK,KAAK;CACzC,MAAM,YAAY,QAAQ,cAAc;CACxC,MAAM,MAAM,iBAAiB,SAAS,YAAY;CAClD,MAAM,gBAAgB,yBAAyB;EAC7C;EACA,QAAQ;EACR,SAAS;EACT;EACA;CACF,CAAC;CACD,MAAM,UAA8B;EAClC,eAAe;EACf;EACA;EACA,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA,QAAQ;EACR,SAAS;EACT;CACF;CACA,MAAM,OAAO,uBAAuB,KAAK,WAAW;CACpD,0BAA0B,KAAK,MAAM,eAAe;CACpD,UAAU,uBAAuB,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CAC1D,0BAA0B,KAAK,MAAM,eAAe;CACpD,MAAM,WAAW,kBAAkB,MAAM,OAAO;CAChD,IAAI,SAAS,UACX,OAAO;EACL,QAAQ,SAAS,QAAQ;EACzB;EACA,SAAS,SAAS;EAClB,GAAI,+BAA+B,KAAK,WAAW,MAAM,KAAA,IACrD,CAAC,IACD,EAAE,iBAAiB,+BAA+B,KAAK,WAAW,EAAE;EACxE,UAAU;CACZ;CAEF,UAAU,qBAAqB,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CACxD,MAAM,aAAa,gBAAgB,SAAS,cAAc,QAAQ;CAClE,IAAI;EACF,eAAe,YAAY,GAAG,KAAK,UAAU,OAAO,EAAE,KAAK,MAAM;CACnE,QAAQ,CAER;CACA,yBAAyB,KAAK,UAAU;EACtC,MAAM;EACN,WAAW;EACX;EACA;EACA;EACA,SAAS;EACT;EACA,QAAQ;EACR,WAAW;CACb,CAAC;CACD,OAAO;EAAE,QAAQ;EAAU;EAAM;EAAS,UAAU;CAAM;AAC5D;;AAGA,SAAgB,wBAAwB,UAAkB,QAAuC;CAC/F,MAAM,WAAW,QAAQ,KAAK;CAC9B,IAAI,WAAW,KAAA,KAAa,CAAC,UAAU,OAAO,CAAC;CAC/C,IAAI;CACJ,0BAA0B,UAAU,uBAAuB,QAAQ,GAAG,eAAe;CACrF,IAAI;EACF,QAAQ,YAAY,uBAAuB,QAAQ,CAAC;CACtD,QAAQ;EACN,OAAO,CAAC;CACV;CACA,MAAM,MAA4B,CAAC;CACnC,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,CAAC,KAAK,SAAS,OAAO,GAAG;EAC7B,IAAI;GACF,MAAM,OAAO,KAAK,uBAAuB,QAAQ,GAAG,IAAI;GACxD,0BAA0B,UAAU,MAAM,eAAe;GACzD,MAAM,SAAS,wBAAwB,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,CAAC;GAC7E,IAAI,SAAS,GAAG,kBAAkB,OAAO,WAAW,EAAE,QAAQ;GAC9D,IAAI,aAAa,KAAA,KAAa,OAAO,WAAW,UAAU,IAAI,KAAK,MAAM;EAC3E,QAAQ,CAER;CACF;CACA,OAAO,IAAI,MAAM,MAAM,UACrB,KAAK,OAAO,MAAM,KACd,KAAK,YAAY,cAAc,MAAM,WAAW,IAChD,KAAK,GAAG,cAAc,MAAM,EAAE,CACpC;AACF;;AAGA,SAAgB,+BACd,UACA,aACwC;CACxC,MAAM,KAAK,YAAY,KAAK;CAC5B,IAAI,CAAC,IAAI,MAAM,IAAI,MAAM,sDAAsD;CAC/E,MAAM,OAAO,+BAA+B,UAAU,EAAE;CACxD,0BAA0B,UAAU,MAAM,uBAAuB;CACjE,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,gCAAgC,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,CAAC;CACrF,IAAI,OAAO,gBAAgB,IACzB,MAAM,IAAI,MAAM,0BAA0B,KAAK,+BAA+B;CAEhF,OAAO;AACT;;;;;;AAOA,SAAgB,yBACd,UACA,QACS;CACT,MAAM,QAAQ,gCAAgC,MAAM;CACpD,IAAI,MAAM,WAAW,WACnB,MAAM,IAAI,MAAM,8CAA8C;CAEhE,MAAM,UAAU,uBAAuB,UAAU,MAAM,WAAW;CAClE,IAAI,YAAY,KAAA,KAAa,QAAQ,kBAAkB,MAAM,eAC3D,MAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,MAAM,+BAA+B,QAAQ;CACnD,0BAA0B,UAAU,KAAK,uBAAuB;CAChE,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,0BAA0B,UAAU,KAAK,uBAAuB;CAEhE,IAAI,4BADS,+BAA+B,UAAU,MAAM,WACzB,GAAG,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,GAAG,GACzE,OAAO;CAET,MAAM,SAAS,+BAA+B,UAAU,MAAM,WAAW;CACzE,IACE,WAAW,KAAA,KACX,OAAO,gBAAgB,MAAM,eAC7B,OAAO,kBAAkB,MAAM,eAE/B,MAAM,IAAI,MAAM,uDAAuD;CAEzE,OAAO;AACT;;AAGA,SAAgB,gCACd,UACA,QACM;CACN,MAAM,QAAQ,gCAAgC,MAAM;CACpD,MAAM,UAAU,uBAAuB,UAAU,MAAM,WAAW;CAClE,IAAI,YAAY,KAAA,KAAa,QAAQ,kBAAkB,MAAM,eAC3D,MAAM,IAAI,MAAM,0DAA0D;CAE5E,MAAM,MAAM,+BAA+B,QAAQ;CACnD,0BAA0B,UAAU,KAAK,uBAAuB;CAChE,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,0BAA0B,UAAU,KAAK,uBAAuB;CAChE,MAAM,OAAO,+BAA+B,UAAU,MAAM,WAAW;CACvE,MAAM,QAAQ,+BAA+B,UAAU,MAAM,WAAW;CACxE,IACE,UAAU,KAAA,KACV,MAAM,WAAW,aACjB,yBAAyB,KAAK,MAAM,yBAAyB,KAAK,GAElE,MAAM,IAAI,MAAM,oBAAoB,MAAM,YAAY,yCAAyC;CAEjG,uBAAuB,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,GAAG;AACpE;;AAGA,SAAgB,uBAAuB,UAA0B;CAC/D,OAAO,KAAK,UAAU,eAAe;AACvC;;;;;;;AAQA,SAAgB,yBAAyB,UAA0B;CACjE,OAAO,KAAK,uBAAuB,QAAQ,GAAG,iBAAiB;AACjE;;;;;;AAOA,SAAgB,uBAAuB,UAAkB,aAA6B;CACpF,OAAO,KAAK,uBAAuB,QAAQ,GAAG,GAAG,kBAAkB,WAAW,EAAE,MAAM;AACxF;AAEA,SAAS,kBAAkB,aAA6B;CACtD,MAAM,OAAO,YAAY,QAAQ,oBAAoB,GAAG;CACxD,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,6BAA6B;CACpE,OAAO;AACT;;AAGA,SAAgB,yBAAyB,UAAyC;CAChF,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,yBAAyB,QAAQ;CAC9C,0BAA0B,UAAU,KAAK,gBAAgB;CACzD,0BAA0B,UAAU,MAAM,gBAAgB;CAC1D,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,CAAC;CAC/B,MAAM,MAA6B,CAAC;CACpC,MAAM,gCAAgB,IAAI,IAAiC;CAC3D,IAAI,MAAM;CACV,IAAI;EACF,MAAM,aAAa,MAAM,MAAM;CACjC,QAAQ;EACN,OAAO;CACT;CACA,KAAK,MAAM,QAAQ,IAAI,MAAM,IAAI,GAAG;EAClC,MAAM,UAAU,KAAK,KAAK;EAC1B,IAAI,CAAC,SAAS;EACd,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,OAAO;EAC7B,QAAQ;GAEN;EACF;EACA,IAAI,CAAC,sBAAsB,MAAM,GAAG;EACpC,MAAM,QAAQ,cAAc,IAAI,OAAO,WAAW;EAClD,IAAI,UAAU,KAAA,GACZ,8BAA8B,OAAO,MAAM;OACtC;GACL,cAAc,IAAI,OAAO,aAAa,MAAM;GAC5C,IAAI,KAAK,MAAM;EACjB;CACF;CACA,OAAO;AACT;;;;;;AAOA,SAAgB,uBACd,UACA,aACgC;CAChC,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,uBAAuB,UAAU,WAAW;CACzD,0BAA0B,UAAU,KAAK,wBAAwB;CACjE,0BAA0B,UAAU,MAAM,wBAAwB;CAClE,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,OAAO,gBAAgB,aACzB,MAAM,IAAI,MACR,sCAAsC,KAAK,qBAAqB,OAAO,YAAY,UACzE,YAAY,qEACxB;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,wBAAwB,UAAkB,QAAkC;CAC1F,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,0BAA0B,UAAU,KAAK,wBAAwB;CACjE,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,0BAA0B,UAAU,KAAK,wBAAwB;CACjE,MAAM,OAAO,uBAAuB,UAAU,OAAO,WAAW;CAChE,0BAA0B,UAAU,MAAM,wBAAwB;CAClE,uBAAuB,MAAM,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;AACtF;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,aACd,UACA,QACA,aACA,UAAkE,CAAC,GAC/C;CACpB,MAAM,MAAM,OAAO,KAAK;CACxB,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,yCAAyC;CACnE,MAAM,OAAO,YAAY,KAAK;CAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,oCAAoC;CAC/D,MAAM,UAAU,yBAAyB,QAAQ,CAAC,CAAC,MAAM,MAAM,EAAE,gBAAgB,IAAI;CACrF,MAAM,YAAY;EAChB,aAAa;EACb,QAAQ;EACR,QAAQ,QAAQ,UAAU;EAC1B,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;CACnE;CACA,IAAI,YAAY,KAAA,GAAW,8BAA8B,SAAS,SAAS;CAC3E,MAAM,eAAe,uBAAuB,UAAU,IAAI;CAC1D,IAAI,iBAAiB,KAAA,GAAW;EAC9B,IAAI,YAAY,KAAA,KAAa,QAAQ,WAAW,KAAA,GAC9C,MAAM,IAAI,MACR,4BAA4B,KAAK,oDACnC;EAEF,yCAAyC,cAAc,SAAS;EAChE,OAAO;CACT;CACA,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAA+B,WAAW;EAC9C,aAAa;EACb,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA,QAAQ;EACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;CACnE;CACA,IAAI,CAAC,SAAS;EACZ,MAAM,MAAM,uBAAuB,QAAQ;EAC3C,0BAA0B,UAAU,KAAK,gBAAgB;EACzD,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;EAClC,0BAA0B,UAAU,KAAK,gBAAgB;EACzD,MAAM,OAAO,yBAAyB,QAAQ;EAC9C,0BAA0B,UAAU,MAAM,gBAAgB;EAC1D,kBAAkB,MAAM,GAAG,KAAK,UAAU,OAAO,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;EACvE,yBAAyB,UAAU,KAAK;GACtC,MAAM;GACN,aAAa;GACb;GACA,QAAQ;GACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACnE,CAAC;CACH;CACA,OAAO;EACL,aAAa;EACb,QAAQ,QAAQ;EAChB,QAAQ;EACR,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,QAAQ;EACR,YAAY,CAAC;CACf;AACF;;AAGA,SAAgB,qBAAqB,UAA0B;CAC7D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,kBAAkB;AAClE;;AAGA,SAAgB,oBAAoB,UAA0B;CAC5D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,UAAU;AAC1D;;AAGA,SAAgB,qBAAqB,UAAgD;CACnF,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,qBAAqB,QAAQ;CAC1C,0BAA0B,UAAU,KAAK,oBAAoB;CAC7D,0BAA0B,UAAU,MAAM,oBAAoB;CAC9D,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,CAAC,mBAAmB,MAAM,GAC5B,MAAM,IAAI,MAAM,uBAAuB,KAAK,qCAAqC;CAEnF,OAAO;AACT;;;;;;AAOA,SAAgB,oBACd,UACA,aAC6B;CAC7B,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,oBAAoB,QAAQ;CACzC,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,0BAA0B,UAAU,MAAM,4BAA4B;CACtE,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,OAAO,gBAAgB,aACzB,MAAM,IAAI,MACR,+BAA+B,KAAK,qBAAqB,OAAO,YAAY,UACtE,YAAY,oDACpB;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,qBAAqB,UAAkB,QAA+B;CACpF,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,MAAM,OAAO,oBAAoB,QAAQ;CACzC,0BAA0B,UAAU,MAAM,4BAA4B;CACtE,uBAAuB,MAAM,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;AACtF;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,UACd,UACA,aACA,UAKI,CAAC,GACY;CACjB,IACE,QAAQ,eAAe,KAAA,MACtB,CAAC,OAAO,SAAS,QAAQ,UAAU,KAAK,QAAQ,aAAa,IAE9D,MAAM,IAAI,MAAM,2DAA2D;CAE7E,MAAM,OAAO,YAAY,KAAK;CAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAC5D,MAAM,UAAU,qBAAqB,QAAQ;CAC7C,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,MACnD,MAAM,IAAI,MACR,0BAA0B,QAAQ,YAAY,0FACY,KAAK,EACjE;CAEF,MAAM,YAAY;EAChB,aAAa;EACb,QAAQ,QAAQ,UAAU;EAC1B,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;EAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;CACzE;CACA,IAAI,YAAY,KAAA,GAAW,2BAA2B,SAAS,SAAS;CACxE,MAAM,eAAe,oBAAoB,UAAU,IAAI;CACvD,IAAI,iBAAiB,KAAA,GAAW;EAC9B,IAAI,YAAY,KAAA,KAAa,QAAQ,WAAW,KAAA,GAC9C,MAAM,IAAI,MACR,yBAAyB,KAAK,oDAChC;EAEF,sCAAsC,cAAc,SAAS;EAC7D,OAAO;CACT;CACA,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAA4B,WAAW;EAC3C,aAAa;EACb,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;EAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;CACzE;CACA,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,MAAM,uBAAuB,QAAQ;EAC3C,0BAA0B,UAAU,KAAK,oBAAoB;EAC7D,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;EAClC,0BAA0B,UAAU,KAAK,oBAAoB;EAC7D,MAAM,OAAO,qBAAqB,QAAQ;EAC1C,0BAA0B,UAAU,MAAM,oBAAoB;EAC9D,uBAAuB,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;EACrF,yBAAyB,UAAU,OAAO;GACxC,MAAM;GACN,aAAa;GACb;GACA,QAAQ;GACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;GACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;GAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACzE,CAAC;CACH;CACA,OAAO;EACL,aAAa;EACb,QAAQ;EACR,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACvE,QAAQ;CACV;AACF;AAiBA,SAAS,8BACP,UACA,WACM;CACN,IAAI,SAAS,gBAAgB,UAAU,aACrC,MAAM,IAAI,MAAM,4BAA4B,UAAU,YAAY,sBAAsB;CAE1F,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,4BAA4B,UAAU,YAAY,iDACpC,SAAS,OAAO,QAAQ,UAAU,OAAO,GACzD;CAEF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,4BAA4B,UAAU,YAAY,iDACpC,SAAS,OAAO,QAAQ,UAAU,OAAO,GACzD;CAEF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,4BAA4B,UAAU,YAAY,uDAEpD;AAEJ;AAEA,SAAS,yCACP,UACA,WACM;CACN,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,4BAA4B,UAAU,YAAY,gDACpC,SAAS,OAAO,QAAQ,UAAU,OAAO,GACzD;CAEF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,4BAA4B,UAAU,YAAY,sDAEpD;AAEJ;AAEA,SAAS,2BACP,UACA,WACM;CACN,IAAI,SAAS,gBAAgB,UAAU,aACrC,MAAM,IAAI,MAAM,yBAAyB,UAAU,YAAY,sBAAsB;CAEvF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,iDACjC,SAAS,OAAO,QAAQ,UAAU,OAAO,GACzD;CAEF,IAAI,SAAS,eAAe,UAAU,YACpC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,2DACjD;CAEF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,uDAEjD;CAEF,IAAI,SAAS,aAAa,UAAU,UAClC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,mDAC/B,SAAS,SAAS,QAAQ,UAAU,SAAS,GAC/D;AAEJ;AAEA,SAAS,sCACP,UACA,WACM;CACN,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,sDAEjD;CAMF,IAAI,SAAS,aAAa,KAAA,KAAa,SAAS,aAAa,UAAU,UACrE,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,kDAC/B,SAAS,SAAS,QAAQ,UAAU,SAAS,GAC/D;AAEJ;AAEA,SAAS,mBAAmB,OAA6D;CACvF,OACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,SAAS,KAC3B,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,aACvB,MAAM,eAAe,KAAA,KACnB,OAAO,SAAS,MAAM,UAAU,KAAK,MAAM,cAAc,OAC3D,MAAM,WAAW,KAAA,KAAa,OAAO,MAAM,WAAW,cACtD,MAAM,aAAa,KAAA,KAAa,OAAO,MAAM,aAAa;AAE/D;AAEA,SAAS,sBAAsB,OAAmE;CAChG,OACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,SAAS,KAC3B,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,WAAW,YACxB,MAAM,OAAO,SAAS,MACrB,MAAM,WAAW,KAAA,KAAa,OAAO,MAAM,WAAW;AAE3D;AAEA,SAAS,yBACP,UACA,OACA,OACM;CACN,IAAI;EACF,UAAU,qBAAqB,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EAC7D,eACE,qBAAqB,UAAU,KAAK,GACpC,GAAG,KAAK,UAAU;GAAE,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;GAAG;GAAO,GAAG;EAAM,CAAC,EAAE,KACrE,MACF;CACF,QAAQ,CAER;AACF;AAEA,SAAS,yBAAyB,OAMjB;CACf,OAAO,yBAAyB;EAAE,MAAM;EAA2B,GAAG;CAAM,CAAC;AAC/E;AAEA,SAAS,kBAAkB,aAA6B;CACtD,MAAM,KAAK,YAAY,KAAK;CAC5B,IAAI,CAAC,IAAI,MAAM,IAAI,MAAM,4BAA4B;CACrD,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK;AACrD;AAEA,SAAS,kBACP,MACA,SACsE;CACtE,MAAM,WAAW,2BAA2B,IAAI;CAChD,IAAI,aAAa,KAAA,GAAW;EAC1B,uBAAuB,UAAU,OAAO;EACxC,OAAO;GAAE,SAAS;GAAU,UAAU;EAAK;CAC7C;CACA,IAAI,4BAA4B,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,GAAG,GAC3E,OAAO;EAAE;EAAS,UAAU;CAAM;CAEpC,MAAM,SAAS,2BAA2B,IAAI;CAC9C,IAAI,WAAW,KAAA,GACb,MAAM,IAAI,MAAM,2CAA2C;CAE7D,uBAAuB,QAAQ,OAAO;CACtC,OAAO;EAAE,SAAS;EAAQ,UAAU;CAAK;AAC3C;AAEA,SAAS,uBACP,UACA,aACgC;CAChC,MAAM,OAAO,uBAAuB,UAAU,WAAW;CACzD,0BAA0B,UAAU,MAAM,eAAe;CACzD,MAAM,UAAU,2BAA2B,IAAI;CAC/C,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,aACnD,MAAM,IAAI,MAAM,iDAAiD;CAEnE,OAAO;AACT;AAEA,SAAS,2BAA2B,MAA8C;CAChF,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,OAAO,wBAAwB,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,CAAC;AACvE;AAEA,SAAS,wBAAwB,OAAoC;CACnE,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,MAAM,4BAA4B;CAE9C,MAAM,UAAU;CAChB,IACE,QAAQ,kBAAkB,KAC1B,OAAO,QAAQ,gBAAgB,YAC/B,QAAQ,YAAY,WAAW,KAC/B,OAAO,QAAQ,kBAAkB,YACjC,OAAO,QAAQ,OAAO,YACtB,OAAO,QAAQ,WAAW,YAC1B,QAAQ,OAAO,WAAW,KAC1B,OAAO,QAAQ,WAAW,YAC1B,QAAQ,OAAO,WAAW,KAC1B,OAAO,QAAQ,YAAY,YAC3B,QAAQ,QAAQ,KAAK,CAAC,CAAC,WAAW,KAClC,OAAO,QAAQ,cAAc,WAE7B,MAAM,IAAI,MAAM,4BAA4B;CAE9C,MAAM,QAAQ;CACd,MAAM,WAAW,yBAAyB;EACxC,aAAa,MAAM;EACnB,QAAQ,MAAM;EACd,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,WAAW,MAAM;CACnB,CAAC;CACD,IAAI,MAAM,kBAAkB,UAAU,MAAM,IAAI,MAAM,qCAAqC;CAC3F,OAAO;AACT;AAEA,SAAS,gCAAgC,OAA4C;CACnF,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,MAAM,oCAAoC;CAEtD,MAAM,SAAS;CACf,IACE,OAAO,kBAAkB,KACzB,OAAO,OAAO,gBAAgB,YAC9B,OAAO,YAAY,WAAW,KAC9B,OAAO,OAAO,kBAAkB,YAChC,OAAO,OAAO,WAAW,YACzB,OAAO,OAAO,WAAW,KACxB,OAAO,WAAW,aACjB,OAAO,WAAW,eAClB,OAAO,WAAW,cAClB,OAAO,WAAW,iBAClB,OAAO,WAAW,aACpB,OAAO,OAAO,gBAAgB,YAC9B,OAAO,OAAO,eAAe,YAC7B,OAAO,OAAO,WAAW,UAEzB,MAAM,IAAI,MAAM,oCAAoC;CAEtD,OAAO;AACT;AAEA,SAAS,uBAAuB,UAA8B,WAAqC;CACjG,IAAI,SAAS,gBAAgB,UAAU,aACrC,MAAM,IAAI,MAAM,gCAAgC;CAElD,IAAI,SAAS,kBAAkB,UAAU,eACvC,MAAM,IAAI,MACR,gCAAgC,UAAU,YAAY,sCACxD;AAEJ"}