@tangle-network/agent-runtime 0.349.0 → 0.350.2

package/dist/{bundle-1xaJEgjq.js.map → bundle-Ze8pd07a.js.map}

@@ -1 +1 @@
-{"version":3,"file":"bundle-1xaJEgjq.js","names":["canonicalCandidateDigest"],"sources":["../src/candidate-execution/bundle.ts"],"sourcesContent":["import type { AgentCandidateBundle } from '@tangle-network/agent-interface'\nimport { agentCandidateBundleSchema } from '@tangle-network/agent-interface'\n\nimport { canonicalCandidateDigest, immutableCandidateValue, omitTopLevelDigest } from './digest'\n\n/** Exact candidate wire shape before the runtime computes its canonical digest. */\nexport type AgentCandidateBundleInput = Omit<AgentCandidateBundle, 'digest'>\n\n/** Validate and content-address a candidate bundle before it crosses an approval boundary. */\nexport function sealAgentCandidateBundle(input: AgentCandidateBundleInput): AgentCandidateBundle {\n  const digest = canonicalCandidateDigest(input)\n  const parsed = agentCandidateBundleSchema.parse({ ...input, digest })\n  const parsedDigest = canonicalCandidateDigest(omitTopLevelDigest(parsed))\n  if (parsedDigest !== digest) {\n    throw new Error('candidate bundle changed while validating its canonical wire shape')\n  }\n  return immutableCandidateValue(parsed)\n}\n"],"mappings":";;;;AASA,SAAgB,yBAAyB,OAAwD;CAC/F,MAAM,SAASA,2BAAyB,KAAK;CAC7C,MAAM,SAAS,2BAA2B,MAAM;EAAE,GAAG;EAAO;CAAO,CAAC;CAEpE,IADqBA,2BAAyB,mBAAmB,MAAM,CACxD,MAAM,QACnB,MAAM,IAAI,MAAM,oEAAoE;CAEtF,OAAO,wBAAwB,MAAM;AACvC"}
+{"version":3,"file":"bundle-Ze8pd07a.js","names":["canonicalCandidateDigest"],"sources":["../src/candidate-execution/bundle.ts"],"sourcesContent":["import type { AgentCandidateBundle } from '@tangle-network/agent-interface'\nimport { agentCandidateBundleSchema } from '@tangle-network/agent-interface'\n\nimport { canonicalCandidateDigest, immutableCandidateValue, omitTopLevelDigest } from './digest'\n\n/** Exact candidate wire shape before the runtime computes its canonical digest. */\nexport type AgentCandidateBundleInput = Omit<AgentCandidateBundle, 'digest'>\n\n/** Validate and content-address a candidate bundle before it crosses an approval boundary. */\nexport function sealAgentCandidateBundle(input: AgentCandidateBundleInput): AgentCandidateBundle {\n  const digest = canonicalCandidateDigest(input)\n  const parsed = agentCandidateBundleSchema.parse({ ...input, digest })\n  const parsedDigest = canonicalCandidateDigest(omitTopLevelDigest(parsed))\n  if (parsedDigest !== digest) {\n    throw new Error('candidate bundle changed while validating its canonical wire shape')\n  }\n  return immutableCandidateValue(parsed)\n}\n"],"mappings":";;;;AASA,SAAgB,yBAAyB,OAAwD;CAC/F,MAAM,SAASA,2BAAyB,KAAK;CAC7C,MAAM,SAAS,2BAA2B,MAAM;EAAE,GAAG;EAAO;CAAO,CAAC;CAEpE,IADqBA,2BAAyB,mBAAmB,MAAM,CACxD,MAAM,QACnB,MAAM,IAAI,MAAM,oEAAoE;CAEtF,OAAO,wBAAwB,MAAM;AACvC"}

package/dist/candidate-execution/index.d.ts

@@ -1,9 +1,8 @@
-import { $ as VerifiedAgentCandidate, A as AgentCandidateMemoryResetResult, B as AgentCandidateRepositoryPort, C as AgentCandidateExecutorProfileFile, D as AgentCandidateExecutorWorkspaceFile, E as AgentCandidateExecutorTaskOutcomeCapture, F as AgentCandidateProtectedModelActivation, G as CanonicalCandidateDocument, H as AgentCandidateTaskExecution, I as AgentCandidateProtectedModelReservation, J as PreparedAgentCandidateInstruction, K as PersistedTaskOutcomeEvidence, L as AgentCandidateProtectedModelSettlement, M as AgentCandidateModelPort, N as AgentCandidateOutputArtifactPort, O as AgentCandidateExecutorWorkspaceInput, P as AgentCandidateOutputPurpose, Q as ResolvedAgentCandidateContainer, R as AgentCandidateProtectedModelSettlementCall, S as AgentCandidateExecutorPort, T as AgentCandidateExecutorStopRequest, U as AgentCandidateVerificationPorts, V as AgentCandidateRunFinalization, W as AgentCandidateWorkspacePort, X as PreparedAgentCandidateLaunch, Y as PreparedAgentCandidateKnowledge, Z as PreparedAgentCandidateTrace, _ as AgentCandidateBenchmarkGraderPort, a as captureAgentCandidateWorkspaceTreeToArtifacts, b as AgentCandidateExecutorFinalCapture, c as verifyAgentCandidateWorkspaceTree, d as captureAgentCandidateWorkspaceFiles, et as VerifiedAgentCandidateTaskOutcome, f as CaptureAgentCandidateWorkspaceOptions, g as AgentCandidateArtifactPort, h as createAgentCandidateWorkspacePort, i as captureAgentCandidateWorkspaceToArtifacts, j as AgentCandidateModelLimits, k as AgentCandidateMemoryPort, l as AgentCandidateWorkspaceArchiveLimits, m as captureAgentCandidateWorkspace, n as AgentCandidateWorkspaceTree, o as materializeAgentCandidateWorkspaceFromArtifacts, p as CreateAgentCandidateWorkspacePortOptions, q as PreparedAgentCandidateExecution, r as CaptureAgentCandidateWorkspaceToArtifactsOptions, s as verifyAgentCandidateWorkspaceArtifacts, t as AgentCandidateWorkspaceArtifactsOptions, tt as AgentCandidateExecutionRoots, u as CapturedAgentCandidateWorkspace, v as AgentCandidateContainerPort, w as AgentCandidateExecutorRequest, x as AgentCandidateExecutorMemoryCapture, y as AgentCandidateExecutionPorts, z as AgentCandidateProtectedRunCapture } from "../workspace-streams-BiS4ABah.js";
-import { A as AgentCandidateExecutionTerminalResult, C as AgentCandidateExecutionFinishResult, D as AgentCandidateExecutionRecoveryEvidence, E as AgentCandidateExecutionPhaseResult, M as AgentCandidatePreparationEvidence, O as AgentCandidateExecutionStageResult, S as AgentCandidateExecutionFailureClass, T as AgentCandidateExecutionPhase, _ as AgentCandidateExecutionAttemptRef, a as createProtectedAgentCandidateModelPort, b as AgentCandidateExecutionClaimStore, c as assertCandidateProfileBinding, d as parseExactAgentProfileDiff, g as AgentCandidateExecutionAttemptRecord, h as executePreparedAgentCandidate, i as CreateProtectedAgentCandidateModelPortOptions, j as AgentCandidateRetryRejection, k as AgentCandidateExecutionTerminalRecord, l as freezeGenericAgentCandidateProfile, m as ExecutePreparedAgentCandidateOptions, n as AgentCandidateModelGrantClient, o as agentCandidateProfileAsAgentProfile, p as prepareAgentCandidateExecution, r as AgentCandidateModelGrantReserveInput, s as applyExactAgentProfileDiff, t as AgentCandidateModelGrantActivateInput, v as AgentCandidateExecutionClaim, w as AgentCandidateExecutionLease, x as AgentCandidateExecutionCleanupHandles, y as AgentCandidateExecutionClaimResult } from "../protected-model-port-DVVh-hEk.js";
+import { $ as VerifiedAgentCandidate, A as AgentCandidateMemoryResetResult, B as AgentCandidateRepositoryPort, C as AgentCandidateExecutorProfileFile, D as AgentCandidateExecutorWorkspaceFile, E as AgentCandidateExecutorTaskOutcomeCapture, F as AgentCandidateProtectedModelActivation, G as CanonicalCandidateDocument, H as AgentCandidateTaskExecution, I as AgentCandidateProtectedModelReservation, J as PreparedAgentCandidateInstruction, K as PersistedTaskOutcomeEvidence, L as AgentCandidateProtectedModelSettlement, M as AgentCandidateModelPort, N as AgentCandidateOutputArtifactPort, O as AgentCandidateExecutorWorkspaceInput, P as AgentCandidateOutputPurpose, Q as ResolvedAgentCandidateContainer, R as AgentCandidateProtectedModelSettlementCall, S as AgentCandidateExecutorPort, T as AgentCandidateExecutorStopRequest, U as AgentCandidateVerificationPorts, V as AgentCandidateRunFinalization, W as AgentCandidateWorkspacePort, X as PreparedAgentCandidateLaunch, Y as PreparedAgentCandidateKnowledge, Z as PreparedAgentCandidateTrace, _ as AgentCandidateBenchmarkGraderPort, a as captureAgentCandidateWorkspaceTreeToArtifacts, b as AgentCandidateExecutorFinalCapture, c as verifyAgentCandidateWorkspaceTree, d as captureAgentCandidateWorkspaceFiles, et as VerifiedAgentCandidateTaskOutcome, f as CaptureAgentCandidateWorkspaceOptions, g as AgentCandidateArtifactPort, h as createAgentCandidateWorkspacePort, i as captureAgentCandidateWorkspaceToArtifacts, j as AgentCandidateModelLimits, k as AgentCandidateMemoryPort, l as AgentCandidateWorkspaceArchiveLimits, m as captureAgentCandidateWorkspace, n as AgentCandidateWorkspaceTree, o as materializeAgentCandidateWorkspaceFromArtifacts, p as CreateAgentCandidateWorkspacePortOptions, q as PreparedAgentCandidateExecution, r as CaptureAgentCandidateWorkspaceToArtifactsOptions, s as verifyAgentCandidateWorkspaceArtifacts, t as AgentCandidateWorkspaceArtifactsOptions, tt as AgentCandidateExecutionRoots, u as CapturedAgentCandidateWorkspace, v as AgentCandidateContainerPort, w as AgentCandidateExecutorRequest, x as AgentCandidateExecutorMemoryCapture, y as AgentCandidateExecutionPorts, z as AgentCandidateProtectedRunCapture } from "../workspace-streams-Dq2Fzk3c.js";
+import { A as AgentCandidateExecutionTerminalResult, C as AgentCandidateExecutionFinishResult, D as AgentCandidateExecutionRecoveryEvidence, E as AgentCandidateExecutionPhaseResult, M as AgentCandidatePreparationEvidence, O as AgentCandidateExecutionStageResult, S as AgentCandidateExecutionFailureClass, T as AgentCandidateExecutionPhase, _ as AgentCandidateExecutionAttemptRef, a as createProtectedAgentCandidateModelPort, b as AgentCandidateExecutionClaimStore, c as assertCandidateProfileBinding, d as parseExactAgentProfileDiff, g as AgentCandidateExecutionAttemptRecord, h as executePreparedAgentCandidate, i as CreateProtectedAgentCandidateModelPortOptions, j as AgentCandidateRetryRejection, k as AgentCandidateExecutionTerminalRecord, l as freezeGenericAgentCandidateProfile, m as ExecutePreparedAgentCandidateOptions, n as AgentCandidateModelGrantClient, o as agentCandidateProfileAsAgentProfile, p as prepareAgentCandidateExecution, r as AgentCandidateModelGrantReserveInput, s as applyExactAgentProfileDiff, t as AgentCandidateModelGrantActivateInput, v as AgentCandidateExecutionClaim, w as AgentCandidateExecutionLease, x as AgentCandidateExecutionCleanupHandles, y as AgentCandidateExecutionClaimResult } from "../protected-model-port-IKqhTypD.js";
 import { AgentCandidateArtifactRef, AgentCandidateBundle, AgentCandidateCapturedArtifact, AgentCandidateCodeDisabled, AgentCandidateCodeNoOp, AgentCandidateExecution, AgentCandidateGitHubRepository, AgentCandidateKnowledge, AgentCandidateMemoryPolicy, AgentCandidateProfile, AgentCandidateResolvedModel, AgentCandidateWorkspaceManifestMaterial, AgentCandidateWorkspaceSnapshotEvidence, AgentProfile, AgentProfileDiff, Sha256Digest } from "@tangle-network/agent-interface";
 import { CodeSurface } from "@tangle-network/agent-eval/campaign";
 import { AgentEnvironmentProvider, AgentExactProcessResources } from "@tangle-network/agent-interface/environment-provider";
-//#region src/candidate-execution/artifacts.d.ts
 /** The per-scan caps a bounded capture applies. */
 interface WorkspaceScanLimits {
   readonly maxFiles: number;
@@ -39,21 +38,17 @@ interface WorkspaceScanOptions {
  * returns. Pass `portableTree` to record Git's two file modes instead of exact permission bits, and
  * pass the same flag to every verify that reads the result.
  */
-declare function candidateWorkspaceManifest(files: ReadonlyArray<{
+export declare function candidateWorkspaceManifest(files: ReadonlyArray<{
   path: string;
   mode: number;
   bytes: Uint8Array;
 }>, options?: {
   portableTree?: boolean;
 }): AgentCandidateWorkspaceManifestMaterial;
-//#endregion
-//#region src/candidate-execution/bundle.d.ts
 /** Exact candidate wire shape before the runtime computes its canonical digest. */
 type AgentCandidateBundleInput = Omit<AgentCandidateBundle, 'digest'>;
 /** Validate and content-address a candidate bundle before it crosses an approval boundary. */
-declare function sealAgentCandidateBundle(input: AgentCandidateBundleInput): AgentCandidateBundle;
-//#endregion
-//#region src/candidate-execution/builder.d.ts
+export declare function sealAgentCandidateBundle(input: AgentCandidateBundleInput): AgentCandidateBundle;
 /** A complete profile that can be frozen without losing behavior. */
 type AgentCandidateProfileSource = {
   kind: 'profile';
@@ -93,9 +88,7 @@ interface BuildAgentCandidateBundleInput {
  * deeply immutable; call `verifyAgentCandidateBundle` at the execution boundary
  * to re-read external memory, repository, and workspace artifacts.
  */
-declare function buildAgentCandidateBundle(input: BuildAgentCandidateBundleInput): ReturnType<typeof sealAgentCandidateBundle>;
-//#endregion
-//#region src/candidate-execution/claim-file-store.d.ts
+export declare function buildAgentCandidateBundle(input: BuildAgentCandidateBundleInput): ReturnType<typeof sealAgentCandidateBundle>;
 interface FileAgentCandidateExecutionClaimStoreOptions {
   /** Evaluator-owned directory shared by every process allowed to execute candidates. */
   directory: string;
@@ -103,7 +96,7 @@ interface FileAgentCandidateExecutionClaimStoreOptions {
   now?: () => number;
 }
 /** Cross-process lifecycle implemented as fsynced, create-if-absent records. */
-declare class FileAgentCandidateExecutionClaimStore implements AgentCandidateExecutionClaimStore {
+export declare class FileAgentCandidateExecutionClaimStore implements AgentCandidateExecutionClaimStore {
   private readonly directory;
   private readonly now;
   constructor(options: FileAgentCandidateExecutionClaimStoreOptions);
@@ -121,17 +114,13 @@ declare class FileAgentCandidateExecutionClaimStore implements AgentCandidateExe
   private terminalPath;
   private transitionPath;
 }
-//#endregion
-//#region src/candidate-execution/dispose.d.ts
 interface DisposePreparedAgentCandidateOptions {
   cleanupTimeoutMs?: number;
 }
 /** Revoke reservations held by a prepared candidate that will not be executed. */
-declare function disposePreparedAgentCandidateExecution(prepared: PreparedAgentCandidateExecution, options?: DisposePreparedAgentCandidateOptions): Promise<{
+export declare function disposePreparedAgentCandidateExecution(prepared: PreparedAgentCandidateExecution, options?: DisposePreparedAgentCandidateOptions): Promise<{
   disposed: true;
 }>;
-//#endregion
-//#region src/candidate-execution/exact-process-executor.d.ts
 interface ExactProcessCandidateExecutorOptions {
   provider: AgentEnvironmentProvider;
   resources: AgentExactProcessResources;
@@ -140,9 +129,7 @@ interface ExactProcessCandidateExecutorOptions {
   providerOptions?: Record<string, unknown>;
 }
 /** Adapt one neutral exact-process provider to Runtime's trusted candidate boundary. */
-declare function exactProcessProviderAsCandidateExecutor(options: ExactProcessCandidateExecutorOptions): AgentCandidateExecutorPort;
-//#endregion
-//#region src/candidate-execution/protected-model-grant.d.ts
+export declare function exactProcessProviderAsCandidateExecutor(options: ExactProcessCandidateExecutorOptions): AgentCandidateExecutorPort;
 /** Reservation fields supplied by a caller before Runtime resolves the model. */
 type AgentCandidateModelGrantRunReservationInput = Omit<AgentCandidateModelGrantReserveInput, 'resolved'>;
 /** Values available only while one protected model grant is active. */
@@ -179,13 +166,9 @@ interface RunProtectedAgentCandidateModelGrantResult<TResult> {
  * after activation failure or callback failure, and the callback error is
  * preserved when settlement also fails.
  */
-declare function runProtectedAgentCandidateModelGrant<TResult>(options: RunProtectedAgentCandidateModelGrantOptions<TResult>): Promise<RunProtectedAgentCandidateModelGrantResult<TResult>>;
-//#endregion
-//#region src/candidate-execution/verify.d.ts
+export declare function runProtectedAgentCandidateModelGrant<TResult>(options: RunProtectedAgentCandidateModelGrantOptions<TResult>): Promise<RunProtectedAgentCandidateModelGrantResult<TResult>>;
 /** Verifies every digest, resource, workspace, and Git object in a candidate bundle. */
-declare function verifyAgentCandidateBundle(input: unknown, ports: AgentCandidateVerificationPorts): Promise<VerifiedAgentCandidate>;
-//#endregion
-//#region src/candidate-execution/workspace-transfer.d.ts
+export declare function verifyAgentCandidateBundle(input: unknown, ports: AgentCandidateVerificationPorts): Promise<VerifiedAgentCandidate>;
 /** The canonical workspace evidence without manifest material or embedded file bytes. */
 type AgentCandidateWorkspaceSnapshotReferences = Pick<AgentCandidateWorkspaceSnapshotEvidence, 'kind' | 'digest'> & {
   readonly manifest: AgentCandidateArtifactRef;
@@ -200,7 +183,7 @@ type CaptureAgentWorkspaceSnapshotOptions = Omit<CaptureAgentCandidateWorkspaceO
  * its public source provenance at the SDK boundary. Choose includeRepository and working-tree
  * explicitly when staged, dirty, deleted and unignored untracked Git files must travel.
  */
-declare function captureAgentWorkspaceSnapshot(root: string, options: CaptureAgentWorkspaceSnapshotOptions): Promise<AgentCandidateWorkspaceSnapshotReferences>;
+export declare function captureAgentWorkspaceSnapshot(root: string, options: CaptureAgentWorkspaceSnapshotOptions): Promise<AgentCandidateWorkspaceSnapshotReferences>;
 interface MaterializeAgentWorkspaceSnapshotOptions {
   snapshot: AgentCandidateWorkspaceSnapshotReferences;
   /** Authorizes each immutable reference for the accepted transfer owner; must stream reads. */
@@ -218,9 +201,7 @@ interface MaterializeAgentWorkspaceSnapshotOptions {
  * staging. Destinations present before or during artifact reads are refused. The caller owns
  * the allocation scope against other writers; Node directory rename is not atomic no-replace.
  */
-declare function materializeAgentWorkspaceSnapshot(input: MaterializeAgentWorkspaceSnapshotOptions): Promise<void>;
-//#endregion
-//#region src/candidate-execution/workspace-tree.d.ts
+export declare function materializeAgentWorkspaceSnapshot(input: MaterializeAgentWorkspaceSnapshotOptions): Promise<void>;
 /**
  * `'tree-v1'` records a file's exact permission bits. `'portable-tree-v1'` records the two modes
  * Git stores — `755` when any execute bit is set, `644` otherwise, and `755` for a directory — so a
@@ -277,6 +258,5 @@ interface SeedWorkspaceTreeInput {
   /** Default `'tree-v1'`; decides only the digest this returns, never the bytes it writes. */
   readonly algorithm?: WorkspaceTreeAlgorithm;
 }
-//#endregion
-export { type AgentCandidateArtifactPort, type AgentCandidateBenchmarkGraderPort, type AgentCandidateBundleInput, type AgentCandidateCodeSource, type AgentCandidateCodeSurfaceSource, type AgentCandidateContainerPort, type AgentCandidateExecutionAttemptRecord, type AgentCandidateExecutionAttemptRef, type AgentCandidateExecutionClaim, type AgentCandidateExecutionClaimResult, type AgentCandidateExecutionClaimStore, type AgentCandidateExecutionCleanupHandles, type AgentCandidateExecutionFailureClass, type AgentCandidateExecutionFinishResult, type AgentCandidateExecutionLease, type AgentCandidateExecutionPhase, type AgentCandidateExecutionPhaseResult, type AgentCandidateExecutionPorts, type AgentCandidateExecutionRecoveryEvidence, type AgentCandidateExecutionRoots, type AgentCandidateExecutionStageResult, type AgentCandidateExecutionTerminalRecord, type AgentCandidateExecutionTerminalResult, type AgentCandidateExecutorFinalCapture, type AgentCandidateExecutorMemoryCapture, type AgentCandidateExecutorPort, type AgentCandidateExecutorProfileFile, type AgentCandidateExecutorRequest, type AgentCandidateExecutorStopRequest, type AgentCandidateExecutorTaskOutcomeCapture, type AgentCandidateExecutorWorkspaceFile, type AgentCandidateExecutorWorkspaceInput, type AgentCandidateMemoryPort, type AgentCandidateMemoryResetResult, type AgentCandidateModelGrantClient, type AgentCandidateModelGrantReserveInput, type AgentCandidateModelGrantRunReservationInput, type AgentCandidateModelLimits, type AgentCandidateModelPort, type AgentCandidateOutputArtifactPort, type AgentCandidateOutputPurpose, type AgentCandidatePreparationEvidence, type AgentCandidateProfileSource, type AgentCandidateProtectedModelActivation, type AgentCandidateProtectedModelReservation, type AgentCandidateProtectedModelSettlement, type AgentCandidateProtectedModelSettlementCall, type AgentCandidateProtectedRunCapture, type AgentCandidateRepositoryPort, type AgentCandidateRetryRejection, type AgentCandidateRunFinalization, type AgentCandidateTaskExecution, type AgentCandidateVerificationPorts, type AgentCandidateWorkspaceArtifactsOptions, type AgentCandidateWorkspacePort, type AgentCandidateWorkspaceSnapshotReferences, type AgentCandidateWorkspaceTree, type BuildAgentCandidateBundleInput, type CanonicalCandidateDocument, type CaptureAgentCandidateWorkspaceOptions, type CaptureAgentCandidateWorkspaceToArtifactsOptions, type CaptureAgentWorkspaceSnapshotOptions, type CapturedAgentCandidateWorkspace, type CreateAgentCandidateWorkspacePortOptions, type CreateProtectedAgentCandidateModelPortOptions, type DescribeWorkspaceTreeOptions, type DisposePreparedAgentCandidateOptions, type ExactProcessCandidateExecutorOptions, type ExecutePreparedAgentCandidateOptions, FileAgentCandidateExecutionClaimStore, type FileAgentCandidateExecutionClaimStoreOptions, type MaterializeAgentWorkspaceSnapshotOptions, type PersistedTaskOutcomeEvidence, type PreparedAgentCandidateExecution, type PreparedAgentCandidateInstruction, type PreparedAgentCandidateKnowledge, type PreparedAgentCandidateLaunch, type PreparedAgentCandidateTrace, type ProtectedAgentCandidateModelGrantContext, type ResolvedAgentCandidateContainer, type RunProtectedAgentCandidateModelGrantOptions, type RunProtectedAgentCandidateModelGrantResult, type SeedWorkspaceTreeInput, type VerifiedAgentCandidate, type VerifiedAgentCandidateTaskOutcome, type WorkspaceScanLimits, type WorkspaceScanOptions, type WorkspaceTreeAlgorithm, type WorkspaceTreeDescriptor, type WorkspaceTreeEntryPolicy, type WorkspaceTreeExclusion, type WorkspaceTreeExclusionReason, agentCandidateProfileAsAgentProfile, applyExactAgentProfileDiff, assertCandidateProfileBinding, buildAgentCandidateBundle, candidateWorkspaceManifest, captureAgentCandidateWorkspace, captureAgentCandidateWorkspaceFiles, captureAgentCandidateWorkspaceToArtifacts, captureAgentCandidateWorkspaceTreeToArtifacts, captureAgentWorkspaceSnapshot, createAgentCandidateWorkspacePort, createProtectedAgentCandidateModelPort, disposePreparedAgentCandidateExecution, exactProcessProviderAsCandidateExecutor, executePreparedAgentCandidate, freezeGenericAgentCandidateProfile, materializeAgentCandidateWorkspaceFromArtifacts, materializeAgentWorkspaceSnapshot, parseExactAgentProfileDiff, prepareAgentCandidateExecution, runProtectedAgentCandidateModelGrant, sealAgentCandidateBundle, verifyAgentCandidateBundle, verifyAgentCandidateWorkspaceArtifacts, verifyAgentCandidateWorkspaceTree };
+export { type AgentCandidateArtifactPort, type AgentCandidateBenchmarkGraderPort, type AgentCandidateBundleInput, type AgentCandidateCodeSource, type AgentCandidateCodeSurfaceSource, type AgentCandidateContainerPort, type AgentCandidateExecutionAttemptRecord, type AgentCandidateExecutionAttemptRef, type AgentCandidateExecutionClaim, type AgentCandidateExecutionClaimResult, type AgentCandidateExecutionClaimStore, type AgentCandidateExecutionCleanupHandles, type AgentCandidateExecutionFailureClass, type AgentCandidateExecutionFinishResult, type AgentCandidateExecutionLease, type AgentCandidateExecutionPhase, type AgentCandidateExecutionPhaseResult, type AgentCandidateExecutionPorts, type AgentCandidateExecutionRecoveryEvidence, type AgentCandidateExecutionRoots, type AgentCandidateExecutionStageResult, type AgentCandidateExecutionTerminalRecord, type AgentCandidateExecutionTerminalResult, type AgentCandidateExecutorFinalCapture, type AgentCandidateExecutorMemoryCapture, type AgentCandidateExecutorPort, type AgentCandidateExecutorProfileFile, type AgentCandidateExecutorRequest, type AgentCandidateExecutorStopRequest, type AgentCandidateExecutorTaskOutcomeCapture, type AgentCandidateExecutorWorkspaceFile, type AgentCandidateExecutorWorkspaceInput, type AgentCandidateMemoryPort, type AgentCandidateMemoryResetResult, type AgentCandidateModelGrantClient, type AgentCandidateModelGrantReserveInput, type AgentCandidateModelGrantRunReservationInput, type AgentCandidateModelLimits, type AgentCandidateModelPort, type AgentCandidateOutputArtifactPort, type AgentCandidateOutputPurpose, type AgentCandidatePreparationEvidence, type AgentCandidateProfileSource, type AgentCandidateProtectedModelActivation, type AgentCandidateProtectedModelReservation, type AgentCandidateProtectedModelSettlement, type AgentCandidateProtectedModelSettlementCall, type AgentCandidateProtectedRunCapture, type AgentCandidateRepositoryPort, type AgentCandidateRetryRejection, type AgentCandidateRunFinalization, type AgentCandidateTaskExecution, type AgentCandidateVerificationPorts, type AgentCandidateWorkspaceArtifactsOptions, type AgentCandidateWorkspacePort, type AgentCandidateWorkspaceSnapshotReferences, type AgentCandidateWorkspaceTree, type BuildAgentCandidateBundleInput, type CanonicalCandidateDocument, type CaptureAgentCandidateWorkspaceOptions, type CaptureAgentCandidateWorkspaceToArtifactsOptions, type CaptureAgentWorkspaceSnapshotOptions, type CapturedAgentCandidateWorkspace, type CreateAgentCandidateWorkspacePortOptions, type CreateProtectedAgentCandidateModelPortOptions, type DescribeWorkspaceTreeOptions, type DisposePreparedAgentCandidateOptions, type ExactProcessCandidateExecutorOptions, type ExecutePreparedAgentCandidateOptions, type FileAgentCandidateExecutionClaimStoreOptions, type MaterializeAgentWorkspaceSnapshotOptions, type PersistedTaskOutcomeEvidence, type PreparedAgentCandidateExecution, type PreparedAgentCandidateInstruction, type PreparedAgentCandidateKnowledge, type PreparedAgentCandidateLaunch, type PreparedAgentCandidateTrace, type ProtectedAgentCandidateModelGrantContext, type ResolvedAgentCandidateContainer, type RunProtectedAgentCandidateModelGrantOptions, type RunProtectedAgentCandidateModelGrantResult, type SeedWorkspaceTreeInput, type VerifiedAgentCandidate, type VerifiedAgentCandidateTaskOutcome, type WorkspaceScanLimits, type WorkspaceScanOptions, type WorkspaceTreeAlgorithm, type WorkspaceTreeDescriptor, type WorkspaceTreeEntryPolicy, type WorkspaceTreeExclusion, type WorkspaceTreeExclusionReason, agentCandidateProfileAsAgentProfile, applyExactAgentProfileDiff, assertCandidateProfileBinding, captureAgentCandidateWorkspace, captureAgentCandidateWorkspaceFiles, captureAgentCandidateWorkspaceToArtifacts, captureAgentCandidateWorkspaceTreeToArtifacts, createAgentCandidateWorkspacePort, createProtectedAgentCandidateModelPort, executePreparedAgentCandidate, freezeGenericAgentCandidateProfile, materializeAgentCandidateWorkspaceFromArtifacts, parseExactAgentProfileDiff, prepareAgentCandidateExecution, verifyAgentCandidateWorkspaceArtifacts, verifyAgentCandidateWorkspaceTree };
 //# sourceMappingURL=index.d.ts.map

package/dist/candidate-execution/index.js

@@ -1,14 +1,14 @@
-import { I as deepFreezeCandidate, L as embeddedCandidateArtifact, N as canonicalCandidateBytes$1, T as candidateWorkspaceManifest, _ as captureAgentCandidateWorkspaceFiles, a as materializeAgentCandidateWorkspaceFromArtifacts, c as verifyAgentCandidateWorkspaceTree, g as verifiedArtifactChunks, i as captureAgentCandidateWorkspaceTreeToArtifacts, l as captureAgentCandidateWorkspace, r as captureAgentCandidateWorkspaceToArtifacts, s as verifyAgentCandidateWorkspaceArtifacts, u as createAgentCandidateWorkspacePort, y as workspaceLimits } from "../sandbox-profile-compat-DtuJWFrM.js";
-import { a as applyExactAgentProfileDiff, b as parseExactCandidateProfile, i as agentCandidateProfileAsAgentProfile, o as assertCandidateProfileBinding, p as freezeGenericAgentCandidateProfile, v as parseExactAgentProfile, y as parseExactAgentProfileDiff } from "../profile-JLJd2wFG.js";
-import { t as sealAgentCandidateBundle } from "../bundle-1xaJEgjq.js";
-import { _ as sealTerminalDigest, a as consumePreparedCandidateExecution, b as sealAgentCandidateModelSettlement, c as withinCandidateCleanupDeadline, d as assertTerminalMatchesClaim, f as assertTerminalMatchesStaged, g as requireStagedTerminal, h as rejectedStage, i as beginPreparedCandidateDisposal, l as assertRecoveryMatchesStaged, m as rejectedFinish, n as executePreparedAgentCandidate, o as candidateClaimFileInternals, p as recoveredTerminalRecord, r as assertPreparedCandidateIntegrity, s as candidateCleanupDeadline, t as prepareAgentCandidateExecution, u as assertTerminalAllowedInPhase, v as terminalRecord, w as verifyAgentCandidateBundle, x as exactProcessProviderAsCandidateExecutor, y as createProtectedAgentCandidateModelPort } from "../prepare-B9wWffjO.js";
+import { I as deepFreezeCandidate, L as embeddedCandidateArtifact, N as canonicalCandidateBytes$1, T as candidateWorkspaceManifest, _ as captureAgentCandidateWorkspaceFiles, a as materializeAgentCandidateWorkspaceFromArtifacts, c as verifyAgentCandidateWorkspaceTree, g as verifiedArtifactChunks, i as captureAgentCandidateWorkspaceTreeToArtifacts, l as captureAgentCandidateWorkspace, r as captureAgentCandidateWorkspaceToArtifacts, s as verifyAgentCandidateWorkspaceArtifacts, u as createAgentCandidateWorkspacePort, y as workspaceLimits } from "../sandbox-profile-compat-BxMQ1VXv.js";
+import { a as applyExactAgentProfileDiff, b as parseExactCandidateProfile, i as agentCandidateProfileAsAgentProfile, o as assertCandidateProfileBinding, p as freezeGenericAgentCandidateProfile, v as parseExactAgentProfile, y as parseExactAgentProfileDiff } from "../profile-CAhZDW2T.js";
+import { t as sealAgentCandidateBundle } from "../bundle-Ze8pd07a.js";
+import { _ as sealTerminalDigest, a as consumePreparedCandidateExecution, b as sealAgentCandidateModelSettlement, c as withinCandidateCleanupDeadline, d as assertTerminalMatchesClaim, f as assertTerminalMatchesStaged, g as requireStagedTerminal, h as rejectedStage, i as beginPreparedCandidateDisposal, l as assertRecoveryMatchesStaged, m as rejectedFinish, n as executePreparedAgentCandidate, o as candidateClaimFileInternals, p as recoveredTerminalRecord, r as assertPreparedCandidateIntegrity, s as candidateCleanupDeadline, t as prepareAgentCandidateExecution, u as assertTerminalAllowedInPhase, v as terminalRecord, w as verifyAgentCandidateBundle, x as exactProcessProviderAsCandidateExecutor, y as createProtectedAgentCandidateModelPort } from "../prepare-DE8TQnLu.js";
 import { agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema } from "@tangle-network/agent-interface";
 import { randomUUID } from "node:crypto";
 import { linkSync } from "node:fs";
 import { isAbsolute, join, resolve } from "node:path";
 import { lstat, mkdir, open, unlink } from "node:fs/promises";
 import { verifyCodeSurface } from "@tangle-network/agent-eval/campaign";
-//#region src/candidate-execution/builder.ts
+// src/candidate-execution/builder.ts
 /**
 * Compile one measured profile/code candidate into the immutable execution
 * contract. Code bytes are re-read and verified by agent-eval before they are
@@ -17,7 +17,7 @@ import { verifyCodeSurface } from "@tangle-network/agent-eval/campaign";
 * to re-read external memory, repository, and workspace artifacts.
 */
 function buildAgentCandidateBundle(input) {
-	return sealAgentCandidateBundle({
+	const bundle = {
 		kind: "agent-candidate-bundle",
 		digestAlgorithm: "rfc8785-sha256",
 		profile: compileCandidateProfile(input.profile),
@@ -25,7 +25,8 @@ function buildAgentCandidateBundle(input) {
 		execution: input.execution,
 		...input.knowledge !== void 0 ? { knowledge: input.knowledge } : {},
 		memory: input.memory
-	});
+	};
+	return sealAgentCandidateBundle(bundle);
 }
 function compileCandidateProfile(source) {
 	if (source.kind === "candidate-profile") return parseExactCandidateProfile(source.profile);
@@ -42,7 +43,8 @@ function compileCandidateProfile(source) {
 function compileCandidateCode(source) {
 	if (source.kind === "disabled" || source.kind === "no-op") return source;
 	if (source.kind !== "code-surface") throw new Error(`unsupported candidate code source: ${String(source.kind)}`);
-	const patch = embeddedCandidateArtifact(verifyCodeSurface(source.surface, source.worktreeDir).patchBytes);
+	const verified = verifyCodeSurface(source.surface, source.worktreeDir);
+	const patch = embeddedCandidateArtifact(verified.patchBytes);
 	if (patch.sha256 !== source.surface.patch.sha256 || patch.byteLength !== source.surface.patch.byteLength) throw new Error("verified CodeSurface patch bytes do not match its content identity");
 	return {
 		kind: "git-patch",
@@ -56,8 +58,7 @@ function compileCandidateCode(source) {
 		}
 	};
 }
-//#endregion
-//#region src/candidate-execution/claim-file-store.ts
+// src/candidate-execution/claim-file-store.ts
 const { assertExpiredLease, assertLease, assertSameSlot, assertUnexpiredLease, attemptRecord, claimSlot, leaseDigest, newLease, readClaim, readClaimIfPresent, readTerminal, readTerminalIfPresent, readTransitionIfPresent, rejectedExistingClaim, rejectedRetry, retryRejection, sealAttemptRef, sealClaim, sealLease } = candidateClaimFileInternals;
 /** Cross-process lifecycle implemented as fsynced, create-if-absent records. */
 var FileAgentCandidateExecutionClaimStore = class {
@@ -156,7 +157,8 @@ var FileAgentCandidateExecutionClaimStore = class {
 		const stored = await readClaim(claimPath);
 		assertSameSlot(stored.claim, lease, claimPath);
 		assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease);
-		const staged = requireStagedTerminal((await this.transitionState(stored.claim)).staged, terminalDigest);
+		const state = await this.transitionState(stored.claim);
+		const staged = requireStagedTerminal(state.staged, terminalDigest);
 		const terminalPath = this.terminalPath(lease);
 		const existing = await readTerminalIfPresent(terminalPath);
 		if (existing) {
@@ -305,8 +307,7 @@ async function syncDirectory(directory) {
 function isNodeError(error, code) {
 	return error !== null && typeof error === "object" && "code" in error && error.code === code;
 }
-//#endregion
-//#region src/candidate-execution/dispose.ts
+// src/candidate-execution/dispose.ts
 /** Revoke reservations held by a prepared candidate that will not be executed. */
 async function disposePreparedAgentCandidateExecution(prepared, options = {}) {
 	const initialState = assertPreparedCandidateIntegrity(prepared);
@@ -350,8 +351,7 @@ async function disposePreparedAgentCandidateExecution(prepared, options = {}) {
 	consumePreparedCandidateExecution(prepared, "disposed");
 	return Object.freeze({ disposed: true });
 }
-//#endregion
-//#region src/candidate-execution/protected-model-grant.ts
+// src/candidate-execution/protected-model-grant.ts
 const SETTLEMENT_RETRY_INITIAL_DELAY_MS = 25;
 const SETTLEMENT_RETRY_MAX_DELAY_MS = 1e3;
 /**
@@ -438,8 +438,7 @@ function isCandidateGrantDrainingError(error) {
 	if (candidate.code === "candidate_grant_draining") return true;
 	return typeof candidate.message === "string" && /\bcandidate_grant_draining\b/u.test(candidate.message);
 }
-//#endregion
-//#region src/candidate-execution/workspace-transfer.ts
+// src/candidate-execution/workspace-transfer.ts
 /**
 * Capture through the canonical archive owner and return references only.
 * The caller holds its existing private source workspace lease throughout capture, and binds
@@ -517,7 +516,6 @@ async function assertAbsentDestination(destination) {
 	}
 	throw new Error("portable workspace destination already exists");
 }
-//#endregion
 export { FileAgentCandidateExecutionClaimStore, agentCandidateProfileAsAgentProfile, applyExactAgentProfileDiff, assertCandidateProfileBinding, buildAgentCandidateBundle, candidateWorkspaceManifest, captureAgentCandidateWorkspace, captureAgentCandidateWorkspaceFiles, captureAgentCandidateWorkspaceToArtifacts, captureAgentCandidateWorkspaceTreeToArtifacts, captureAgentWorkspaceSnapshot, createAgentCandidateWorkspacePort, createProtectedAgentCandidateModelPort, disposePreparedAgentCandidateExecution, exactProcessProviderAsCandidateExecutor, executePreparedAgentCandidate, freezeGenericAgentCandidateProfile, materializeAgentCandidateWorkspaceFromArtifacts, materializeAgentWorkspaceSnapshot, parseExactAgentProfileDiff, prepareAgentCandidateExecution, runProtectedAgentCandidateModelGrant, sealAgentCandidateBundle, verifyAgentCandidateBundle, verifyAgentCandidateWorkspaceArtifacts, verifyAgentCandidateWorkspaceTree };
 
 //# sourceMappingURL=index.js.map

package/dist/candidate-execution/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["canonicalCandidateBytes","canonicalCandidateBytes"],"sources":["../../src/candidate-execution/builder.ts","../../src/candidate-execution/claim-file-store.ts","../../src/candidate-execution/dispose.ts","../../src/candidate-execution/protected-model-grant.ts","../../src/candidate-execution/workspace-transfer.ts"],"sourcesContent":["import type { CodeSurface } from '@tangle-network/agent-eval/campaign'\nimport { verifyCodeSurface } from '@tangle-network/agent-eval/campaign'\nimport type {\n  AgentCandidateCodeDisabled,\n  AgentCandidateCodeNoOp,\n  AgentCandidateExecution,\n  AgentCandidateGitHubRepository,\n  AgentCandidateKnowledge,\n  AgentCandidateMemoryPolicy,\n  AgentCandidateProfile,\n  AgentProfile,\n  AgentProfileDiff,\n} from '@tangle-network/agent-interface'\nimport { type AgentCandidateBundleInput, sealAgentCandidateBundle } from './bundle'\nimport { embeddedCandidateArtifact } from './digest'\nimport {\n  applyExactAgentProfileDiff,\n  freezeGenericAgentCandidateProfile,\n  parseExactAgentProfile,\n  parseExactAgentProfileDiff,\n  parseExactCandidateProfile,\n} from './profile'\n\n/** A complete profile that can be frozen without losing behavior. */\nexport type AgentCandidateProfileSource =\n  | {\n      kind: 'profile'\n      profile: AgentProfile\n    }\n  | {\n      kind: 'profile-diffs'\n      base: AgentProfile\n      /** Applied in order before the resulting profile is frozen into the bundle. */\n      diffs: readonly AgentProfileDiff[]\n    }\n  | {\n      kind: 'candidate-profile'\n      /** Already converted to the closed, secret-free candidate profile contract. */\n      profile: AgentCandidateProfile\n    }\n\n/** The only accepted path from an agent-eval code candidate to executable bytes. */\nexport interface AgentCandidateCodeSurfaceSource {\n  kind: 'code-surface'\n  surface: CodeSurface\n  repository: AgentCandidateGitHubRepository\n  /** Optional parent directory used to resolve a relative `surface.worktreeRef`. */\n  worktreeDir?: string\n}\n\n/** Explicit control/no-op code or one finalized CodeSurface whose bytes must still verify. */\nexport type AgentCandidateCodeSource =\n  | AgentCandidateCodeDisabled\n  | AgentCandidateCodeNoOp\n  | AgentCandidateCodeSurfaceSource\n\n/** Complete measured surfaces and execution policy compiled into one candidate bundle. */\nexport interface BuildAgentCandidateBundleInput {\n  profile: AgentCandidateProfileSource\n  code: AgentCandidateCodeSource\n  execution: AgentCandidateExecution\n  knowledge?: AgentCandidateKnowledge\n  memory: AgentCandidateMemoryPolicy\n}\n\n/**\n * Compile one measured profile/code candidate into the immutable execution\n * contract. Code bytes are re-read and verified by agent-eval before they are\n * embedded. The returned bundle is schema-validated, canonically digested, and\n * deeply immutable; call `verifyAgentCandidateBundle` at the execution boundary\n * to re-read external memory, repository, and workspace artifacts.\n */\nexport function buildAgentCandidateBundle(\n  input: BuildAgentCandidateBundleInput,\n): ReturnType<typeof sealAgentCandidateBundle> {\n  const bundle: AgentCandidateBundleInput = {\n    kind: 'agent-candidate-bundle',\n    digestAlgorithm: 'rfc8785-sha256',\n    profile: compileCandidateProfile(input.profile),\n    code: compileCandidateCode(input.code),\n    execution: input.execution,\n    ...(input.knowledge !== undefined ? { knowledge: input.knowledge } : {}),\n    memory: input.memory,\n  }\n  return sealAgentCandidateBundle(bundle)\n}\n\nfunction compileCandidateProfile(source: AgentCandidateProfileSource): AgentCandidateProfile {\n  if (source.kind === 'candidate-profile') {\n    return parseExactCandidateProfile(source.profile)\n  }\n\n  if (source.kind === 'profile') {\n    return freezeGenericAgentCandidateProfile(source.profile)\n  }\n\n  if (source.kind !== 'profile-diffs') {\n    throw new Error(\n      `unsupported candidate profile source: ${String((source as { kind?: unknown }).kind)}`,\n    )\n  }\n  if (source.diffs.length === 0) {\n    throw new Error('profile-diffs source requires at least one AgentProfileDiff')\n  }\n  let profile = parseExactAgentProfile(source.base, 'base profile')\n  for (const [index, inputDiff] of source.diffs.entries()) {\n    const diff = parseExactAgentProfileDiff(inputDiff, `profile diff ${index}`)\n    profile = applyExactAgentProfileDiff(profile, diff, `profile diff ${index}`)\n  }\n  return freezeGenericAgentCandidateProfile(profile)\n}\n\nfunction compileCandidateCode(source: AgentCandidateCodeSource): AgentCandidateBundleInput['code'] {\n  if (source.kind === 'disabled' || source.kind === 'no-op') return source\n  if (source.kind !== 'code-surface') {\n    throw new Error(\n      `unsupported candidate code source: ${String((source as { kind?: unknown }).kind)}`,\n    )\n  }\n\n  const verified = verifyCodeSurface(source.surface, source.worktreeDir)\n  const patch = embeddedCandidateArtifact(verified.patchBytes)\n  if (\n    patch.sha256 !== source.surface.patch.sha256 ||\n    patch.byteLength !== source.surface.patch.byteLength\n  ) {\n    throw new Error('verified CodeSurface patch bytes do not match its content identity')\n  }\n  return {\n    kind: 'git-patch',\n    repository: source.repository,\n    baseCommit: source.surface.baseCommit,\n    baseTree: source.surface.baseTree,\n    candidateTree: source.surface.candidateTree,\n    patch: { format: 'git-diff-binary', artifact: patch },\n  }\n}\n","import { randomUUID } from 'node:crypto'\nimport { linkSync } from 'node:fs'\nimport { mkdir, open, unlink } from 'node:fs/promises'\nimport { join } from 'node:path'\nimport type { Sha256Digest } from '@tangle-network/agent-interface'\n\nimport {\n  type AgentCandidateExecutionAttemptRecord,\n  type AgentCandidateExecutionAttemptRef,\n  type AgentCandidateExecutionClaim,\n  type AgentCandidateExecutionClaimResult,\n  type AgentCandidateExecutionClaimStore,\n  type AgentCandidateExecutionFinishResult,\n  type AgentCandidateExecutionLease,\n  type AgentCandidateExecutionPhase,\n  type AgentCandidateExecutionPhaseResult,\n  type AgentCandidateExecutionRecoveryEvidence,\n  type AgentCandidateExecutionStageResult,\n  type AgentCandidateExecutionTerminalRecord,\n  type AgentCandidateExecutionTerminalResult,\n  type AgentCandidateRetryRejection,\n  candidateClaimFileInternals,\n} from './claim'\nimport {\n  assertRecoveryMatchesStaged,\n  assertTerminalAllowedInPhase,\n  assertTerminalMatchesClaim,\n  assertTerminalMatchesStaged,\n  recoveredTerminalRecord,\n  rejectedFinish,\n  rejectedStage,\n  requireStagedTerminal,\n  sealTerminalDigest,\n  terminalRecord,\n} from './claim-terminal'\nimport { canonicalCandidateBytes } from './digest'\n\nconst {\n  assertExpiredLease,\n  assertLease,\n  assertSameSlot,\n  assertUnexpiredLease,\n  attemptRecord,\n  claimSlot,\n  leaseDigest,\n  newLease,\n  readClaim,\n  readClaimIfPresent,\n  readTerminal,\n  readTerminalIfPresent,\n  readTransitionIfPresent,\n  rejectedExistingClaim,\n  rejectedRetry,\n  retryRejection,\n  sealAttemptRef,\n  sealClaim,\n  sealLease,\n} = candidateClaimFileInternals\n\nexport interface FileAgentCandidateExecutionClaimStoreOptions {\n  /** Evaluator-owned directory shared by every process allowed to execute candidates. */\n  directory: string\n  /** Testable evaluator clock; defaults to `Date.now`. */\n  now?: () => number\n}\n\n/** Cross-process lifecycle implemented as fsynced, create-if-absent records. */\nexport class FileAgentCandidateExecutionClaimStore implements AgentCandidateExecutionClaimStore {\n  private readonly directory: string\n  private readonly now: () => number\n\n  constructor(options: FileAgentCandidateExecutionClaimStoreOptions) {\n    if (options.directory.length === 0) {\n      throw new Error('candidate execution claim directory must not be empty')\n    }\n    this.directory = options.directory\n    this.now = options.now ?? Date.now\n  }\n\n  async tryClaim(\n    requested: AgentCandidateExecutionClaim,\n  ): Promise<AgentCandidateExecutionClaimResult> {\n    const claim = sealClaim(requested)\n    await mkdir(this.directory, { recursive: true })\n    const claimPath = this.claimPath(claim)\n    const existing = await readClaimIfPresent(claimPath)\n    if (existing) {\n      assertSameSlot(existing.claim, claim, claimPath)\n      return rejectedExistingClaim(existing.claim, claim)\n    }\n    assertUnexpiredLease(claim.leaseExpiresAtMs, this.now())\n    const retryFailure = await this.retryFailure(claim)\n    if (retryFailure) return rejectedRetry(claim, retryFailure)\n\n    const lease = newLease(claim)\n    const acquired = await writeRecordIfAbsent(this.directory, claimPath, {\n      ...claim,\n      phase: 'claimed',\n      leaseDigest: leaseDigest(lease),\n    })\n    if (acquired) return Object.freeze({ acquired: true, claim, lease })\n\n    const winner = await readClaim(claimPath)\n    assertSameSlot(winner.claim, claim, claimPath)\n    return rejectedExistingClaim(winner.claim, claim)\n  }\n\n  async getAttempt(\n    requestedAttempt: AgentCandidateExecutionAttemptRef,\n  ): Promise<AgentCandidateExecutionAttemptRecord | undefined> {\n    return await this.storedAttempt(sealAttemptRef(requestedAttempt))\n  }\n\n  async markCandidateMayRun(\n    requestedLease: AgentCandidateExecutionLease,\n  ): Promise<AgentCandidateExecutionPhaseResult> {\n    const lease = sealLease(requestedLease)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const state = await this.transitionState(stored.claim)\n    if (state.phase === 'candidate-may-run') {\n      return Object.freeze({ marked: false, phase: 'candidate-may-run' })\n    }\n    if (state.staged) {\n      throw new Error('candidate execution terminal was staged before candidate-may-run phase')\n    }\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const marked = await writeRecordIfAbsent(\n      this.directory,\n      this.transitionPath(stored.claim, 1),\n      {\n        kind: 'candidate-execution-phase',\n        executionId: stored.claim.executionId,\n        attempt: stored.claim.attempt,\n        executionPlanDigest: stored.claim.executionPlanDigest,\n        phase: 'candidate-may-run',\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (marked) return Object.freeze({ marked: true, phase: 'candidate-may-run' })\n    const winner = await this.transitionState(stored.claim)\n    if (winner.phase === 'candidate-may-run') {\n      return Object.freeze({ marked: false, phase: 'candidate-may-run' })\n    }\n    throw new Error('candidate execution terminal was staged before candidate-may-run phase')\n  }\n\n  async stageTerminal(\n    requestedLease: AgentCandidateExecutionLease,\n    result: AgentCandidateExecutionTerminalResult,\n  ): Promise<AgentCandidateExecutionStageResult> {\n    const lease = sealLease(requestedLease)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const terminal = terminalRecord(stored.claim, result)\n    const state = await this.transitionState(stored.claim)\n    if (state.staged) return rejectedStage(state.staged, terminal)\n    assertTerminalAllowedInPhase(state.phase, terminal)\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const transition = state.phase === 'claimed' ? 1 : 2\n    const staged = await writeRecordIfAbsent(\n      this.directory,\n      this.transitionPath(stored.claim, transition),\n      {\n        kind: 'candidate-execution-pending-terminal',\n        terminal,\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (staged) return Object.freeze({ staged: true, terminal })\n    const winner = await this.transitionState(stored.claim)\n    if (!winner.staged) {\n      throw new Error('candidate execution phase transition won while staging terminal')\n    }\n    return rejectedStage(winner.staged, terminal)\n  }\n\n  async finish(\n    requestedLease: AgentCandidateExecutionLease,\n    requestedTerminalDigest: Sha256Digest,\n  ): Promise<AgentCandidateExecutionFinishResult> {\n    const lease = sealLease(requestedLease)\n    const terminalDigest = sealTerminalDigest(requestedTerminalDigest)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const state = await this.transitionState(stored.claim)\n    const staged = requireStagedTerminal(state.staged, terminalDigest)\n    const terminalPath = this.terminalPath(lease)\n    const existing = await readTerminalIfPresent(terminalPath)\n    if (existing) {\n      assertTerminalMatchesClaim(existing, stored.claim, terminalPath)\n      assertTerminalMatchesStaged(existing, staged, terminalPath)\n      return rejectedFinish(existing, terminalDigest)\n    }\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const finished = await writeRecordIfAbsent(\n      this.directory,\n      terminalPath,\n      {\n        terminal: staged,\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (finished) return Object.freeze({ finished: true, terminal: staged })\n    const winner = await readTerminal(terminalPath)\n    assertSameSlot(winner, lease, terminalPath)\n    assertTerminalMatchesClaim(winner, stored.claim, terminalPath)\n    assertTerminalMatchesStaged(winner, staged, terminalPath)\n    return rejectedFinish(winner, terminalDigest)\n  }\n\n  async recoverExpired(\n    requestedAttempt: AgentCandidateExecutionAttemptRef,\n    evidence: AgentCandidateExecutionRecoveryEvidence,\n  ): Promise<AgentCandidateExecutionFinishResult> {\n    const attempt = sealAttemptRef(requestedAttempt)\n    const record = await this.storedAttempt(attempt)\n    if (!record) throw new Error('candidate execution recovery does not name an acquired attempt')\n    const recovered = recoveredTerminalRecord(record.claim, record.phase, evidence)\n    if (record.staged) assertRecoveryMatchesStaged(record.staged, recovered)\n    const requestedDigest = record.staged?.terminalDigest ?? recovered.terminalDigest\n    if (record.terminal) return rejectedFinish(record.terminal, requestedDigest)\n    assertExpiredLease(record.claim.leaseExpiresAtMs, this.now())\n\n    let staged = record.staged\n    if (!staged) {\n      const transition = record.phase === 'claimed' ? 1 : 2\n      const didStage = await writeRecordIfAbsent(\n        this.directory,\n        this.transitionPath(record.claim, transition),\n        {\n          kind: 'candidate-execution-pending-terminal',\n          terminal: recovered,\n        },\n      )\n      if (didStage) {\n        staged = recovered\n      } else {\n        const winner = await this.transitionState(record.claim)\n        if (!winner.staged) {\n          throw new Error(\n            'candidate execution recovery lost terminal staging to a phase transition',\n          )\n        }\n        assertRecoveryMatchesStaged(winner.staged, recovered)\n        staged = winner.staged\n      }\n    }\n\n    const terminalPath = this.terminalPath(attempt)\n    const didFinish = await writeRecordIfAbsent(this.directory, terminalPath, {\n      terminal: staged,\n    })\n    if (didFinish) return Object.freeze({ finished: true, terminal: staged })\n    const winner = await readTerminal(terminalPath)\n    assertSameSlot(winner, attempt, terminalPath)\n    assertTerminalMatchesClaim(winner, record.claim, terminalPath)\n    assertTerminalMatchesStaged(winner, staged, terminalPath)\n    return rejectedFinish(winner, staged.terminalDigest)\n  }\n\n  private async storedAttempt(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n  ): Promise<AgentCandidateExecutionAttemptRecord | undefined> {\n    const claimPath = this.claimPath(claim)\n    const stored = await readClaimIfPresent(claimPath)\n    if (!stored) return undefined\n    assertSameSlot(stored.claim, claim, claimPath)\n    const terminalPath = this.terminalPath(claim)\n    const terminal = await readTerminalIfPresent(terminalPath)\n    // Terminal publication follows its immutable staged outbox, so read that prerequisite later.\n    const state = await this.transitionState(stored.claim)\n    if (terminal) {\n      assertTerminalMatchesClaim(terminal, stored.claim, terminalPath)\n      if (!state.staged) {\n        throw new Error(\n          `candidate execution terminal record at ${terminalPath} has no staged outbox`,\n        )\n      }\n      assertTerminalMatchesStaged(terminal, state.staged, terminalPath)\n    }\n    return attemptRecord(stored.claim, state.phase, state.staged, terminal)\n  }\n\n  private async transitionState(claim: AgentCandidateExecutionClaim): Promise<{\n    phase: AgentCandidateExecutionPhase\n    staged?: AgentCandidateExecutionTerminalRecord\n  }> {\n    const firstPath = this.transitionPath(claim, 1)\n    const first = await readTransitionIfPresent(firstPath, claim)\n    if (!first) return { phase: 'claimed' }\n    if (first.kind === 'pending') return { phase: 'claimed', staged: first.terminal }\n    const secondPath = this.transitionPath(claim, 2)\n    const second = await readTransitionIfPresent(secondPath, claim)\n    if (!second) return { phase: 'candidate-may-run' }\n    if (second.kind !== 'pending') {\n      throw new Error(`candidate execution transition at ${secondPath} repeats the phase marker`)\n    }\n    return { phase: 'candidate-may-run', staged: second.terminal }\n  }\n\n  private async retryFailure(\n    claim: AgentCandidateExecutionClaim,\n  ): Promise<AgentCandidateRetryRejection | undefined> {\n    if (claim.attempt === 1) return undefined\n    return retryRejection(\n      claim,\n      await this.storedAttempt({\n        executionId: claim.executionId,\n        attempt: claim.attempt - 1,\n      }),\n    )\n  }\n\n  private ownerPublication(claim: AgentCandidateExecutionClaim): {\n    authorizePublish: () => true\n  } {\n    return {\n      authorizePublish: () => {\n        assertUnexpiredLease(claim.leaseExpiresAtMs, this.now())\n        return true\n      },\n    }\n  }\n\n  private claimPath(claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>): string {\n    return join(this.directory, `${claimSlot(claim)}.claim.json`)\n  }\n\n  private terminalPath(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n  ): string {\n    return join(this.directory, `${claimSlot(claim)}.terminal.json`)\n  }\n\n  private transitionPath(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n    ordinal: 1 | 2,\n  ): string {\n    return join(this.directory, `${claimSlot(claim)}.transition-${ordinal}.json`)\n  }\n}\n\n/**\n * Candidate records keep this async writer because lease authorization must run after the\n * asynchronous temp-file fsync and immediately before synchronous link publication. The\n * supervisor durability helper is synchronous and has no lease hook, so combining them would\n * either move authorization earlier or add an async race to the claim boundary.\n */\nasync function writeRecordIfAbsent(\n  directory: string,\n  destination: string,\n  record: object,\n  options: {\n    /** Synchronous authorization checked after temp fsync, immediately before atomic publication. */\n    authorizePublish?: () => true\n  } = {},\n): Promise<boolean> {\n  const temporaryPath = join(directory, `.candidate-execution-${process.pid}-${randomUUID()}.tmp`)\n  const handle = await open(temporaryPath, 'wx', 0o600)\n  try {\n    await handle.writeFile(\n      Buffer.concat([Buffer.from(canonicalCandidateBytes(record)), Buffer.from('\\n')]),\n    )\n    await handle.sync()\n  } finally {\n    await handle.close()\n  }\n\n  let written = false\n  try {\n    if (options.authorizePublish && options.authorizePublish() !== true) {\n      throw new Error('candidate execution record publication was not authorized')\n    }\n    // Authorization and the atomic filesystem call are one synchronous critical\n    // section so the event loop cannot advance an injected lease clock between them.\n    linkSync(temporaryPath, destination)\n    written = true\n    await syncDirectory(directory)\n  } catch (error) {\n    if (!isNodeError(error, 'EEXIST')) throw error\n  } finally {\n    await unlink(temporaryPath).catch((error: unknown) => {\n      if (!isNodeError(error, 'ENOENT')) throw error\n    })\n  }\n  return written\n}\n\nasync function syncDirectory(directory: string): Promise<void> {\n  const handle = await open(directory, 'r')\n  try {\n    await handle.sync()\n  } finally {\n    await handle.close()\n  }\n}\n\nfunction isNodeError(error: unknown, code: string): boolean {\n  return (\n    error !== null &&\n    typeof error === 'object' &&\n    'code' in error &&\n    (error as { code?: unknown }).code === code\n  )\n}\n","import { candidateCleanupDeadline, withinCandidateCleanupDeadline } from './cleanup'\nimport { sealAgentCandidateModelSettlement } from './model-settlement'\nimport {\n  assertPreparedCandidateIntegrity,\n  beginPreparedCandidateDisposal,\n  consumePreparedCandidateExecution,\n} from './prepared-state'\nimport type { PreparedAgentCandidateExecution } from './types'\n\nexport interface DisposePreparedAgentCandidateOptions {\n  cleanupTimeoutMs?: number\n}\n\n/** Revoke reservations held by a prepared candidate that will not be executed. */\nexport async function disposePreparedAgentCandidateExecution(\n  prepared: PreparedAgentCandidateExecution,\n  options: DisposePreparedAgentCandidateOptions = {},\n): Promise<{ disposed: true }> {\n  const initialState = assertPreparedCandidateIntegrity(prepared)\n  const cleanupTimeoutMs = options.cleanupTimeoutMs ?? initialState.cleanupTimeoutMs\n  if (cleanupTimeoutMs > initialState.cleanupTimeoutMs) {\n    throw new Error('disposal cleanup timeout exceeds the frozen preparation bound')\n  }\n  const cleanupDeadlineAtMs = candidateCleanupDeadline(cleanupTimeoutMs)\n  const state = beginPreparedCandidateDisposal(prepared)\n  const cleanup: Array<Promise<unknown>> = []\n\n  if (state.memory.mode === 'isolated') {\n    const reservation = state.memoryReservation\n    if (!reservation) throw new Error('isolated memory reservation is missing')\n    cleanup.push(\n      withinCandidateCleanupDeadline(\n        async () => {\n          const closed = await state.ports.memory.close({\n            executionId: state.executionId,\n            preparationId: reservation.preparationId,\n            accessDigest: reservation.accessDigest,\n            effectiveNamespace: reservation.effectiveNamespace,\n            reason: 'abandoned',\n          })\n          if (closed.closed !== true || Object.keys(closed).some((key) => key !== 'closed')) {\n            throw new Error('abandoned isolated memory access did not acknowledge closure')\n          }\n        },\n        cleanupDeadlineAtMs,\n        'isolated memory disposal',\n      ),\n    )\n  }\n\n  cleanup.push(\n    withinCandidateCleanupDeadline(\n      async () => {\n        const settlement = sealAgentCandidateModelSettlement(\n          await state.ports.models.settleGrant({\n            executionId: state.executionId,\n            preparationId: state.preparationId,\n            grantDigest: state.modelReservation.digest,\n            resolved: state.resolvedModel,\n            reason: 'abandoned',\n          }),\n          {\n            preparationId: state.preparationId,\n            grantDigest: state.modelReservation.digest,\n            model: state.resolvedModel.model,\n          },\n        )\n        if (settlement.usage.modelCalls !== 0) {\n          throw new Error('unexecuted model reservation unexpectedly contains calls')\n        }\n      },\n      cleanupDeadlineAtMs,\n      'model reservation disposal',\n    ),\n  )\n\n  const results = await Promise.allSettled(cleanup)\n  const failures = results\n    .filter((result): result is PromiseRejectedResult => result.status === 'rejected')\n    .map((result) => result.reason)\n  if (failures.length > 0) {\n    consumePreparedCandidateExecution(prepared, 'disposal-failed')\n    throw new AggregateError(failures, 'candidate preparation disposal failed')\n  }\n\n  consumePreparedCandidateExecution(prepared, 'disposed')\n  return Object.freeze({ disposed: true as const })\n}\n","import type { AgentCandidateResolvedModel } from '@tangle-network/agent-interface'\n\nimport type {\n  AgentCandidateModelGrantActivateInput,\n  AgentCandidateModelGrantReserveInput,\n  AgentCandidateModelGrantSettleInput,\n} from './protected-model-port'\nimport type {\n  AgentCandidateModelPort,\n  AgentCandidateProtectedModelActivation,\n  AgentCandidateProtectedModelReservation,\n  AgentCandidateProtectedModelSettlement,\n} from './types'\n\n/** Reservation fields supplied by a caller before Runtime resolves the model. */\nexport type AgentCandidateModelGrantRunReservationInput = Omit<\n  AgentCandidateModelGrantReserveInput,\n  'resolved'\n>\n\n/** Values available only while one protected model grant is active. */\nexport interface ProtectedAgentCandidateModelGrantContext {\n  readonly activation: AgentCandidateProtectedModelActivation\n  readonly reservation: AgentCandidateProtectedModelReservation\n  readonly resolved: AgentCandidateResolvedModel\n}\n\n/** Inputs for one protected grant scoped to one bounded caller unit. */\nexport interface RunProtectedAgentCandidateModelGrantOptions<TResult> {\n  /** Runtime port that validates and settles the evaluator-owned grant. */\n  readonly port: AgentCandidateModelPort\n  /** Provider-neutral model request resolved before any grant is reserved. */\n  readonly resolve: Parameters<AgentCandidateModelPort['resolve']>[0]\n  /** One bounded unit's immutable identity, attempt, expiry, and limits. */\n  readonly reserve: AgentCandidateModelGrantRunReservationInput\n  /** Must be no later than the reservation expiry. */\n  readonly deadlineAtMs: AgentCandidateModelGrantActivateInput['deadlineAtMs']\n  /** Execute exactly one bounded unit while the activated environment is valid. */\n  readonly execute: (context: ProtectedAgentCandidateModelGrantContext) => Promise<TResult>\n}\n\n/** Result and sealed settlement returned after one protected grant closes. */\nexport interface RunProtectedAgentCandidateModelGrantResult<TResult> {\n  readonly value: TResult\n  readonly resolved: AgentCandidateResolvedModel\n  readonly reservation: AgentCandidateProtectedModelReservation\n  readonly settlement: AgentCandidateProtectedModelSettlement\n}\n\nconst SETTLEMENT_RETRY_INITIAL_DELAY_MS = 25\nconst SETTLEMENT_RETRY_MAX_DELAY_MS = 1_000\n\n/**\n * Run one bounded unit under a protected model grant.\n *\n * Runtime owns the grant lifecycle; callers own the unit boundary and any\n * durable scheduling or accounting around it. A reserved grant is settled\n * after activation failure or callback failure, and the callback error is\n * preserved when settlement also fails.\n */\nexport async function runProtectedAgentCandidateModelGrant<TResult>(\n  options: RunProtectedAgentCandidateModelGrantOptions<TResult>,\n): Promise<RunProtectedAgentCandidateModelGrantResult<TResult>> {\n  if (typeof options.execute !== 'function') {\n    throw new TypeError('protected model grant execute callback is required')\n  }\n\n  const resolved = await options.port.resolve(options.resolve)\n  const reservation = await options.port.reserveGrant({\n    ...options.reserve,\n    resolved,\n  })\n\n  let value!: TResult\n  let executionError: unknown\n  let executionFailed = false\n  let activated = false\n  let reason: AgentCandidateModelGrantSettleInput['reason'] = 'preparation-failed'\n\n  try {\n    const activation = await options.port.activateGrant({\n      executionId: options.reserve.executionId,\n      preparationId: options.reserve.preparationId,\n      grantDigest: reservation.digest,\n      resolved,\n      deadlineAtMs: options.deadlineAtMs,\n    })\n    activated = true\n    value = await options.execute({ activation, reservation, resolved })\n    reason = 'completed'\n  } catch (error) {\n    executionError = error\n    executionFailed = true\n    if (activated) reason = 'failed'\n  }\n\n  let settlement: AgentCandidateProtectedModelSettlement\n  try {\n    settlement = await settleProtectedModelGrant(options, {\n      executionId: options.reserve.executionId,\n      preparationId: options.reserve.preparationId,\n      grantDigest: reservation.digest,\n      resolved,\n      reason,\n    })\n  } catch (settlementError) {\n    if (executionFailed) {\n      throw new AggregateError(\n        [executionError, settlementError],\n        'protected model execution failed and its grant did not settle',\n      )\n    }\n    throw settlementError\n  }\n\n  if (executionFailed) throw executionError\n  return { value, resolved, reservation, settlement }\n}\n\nasync function settleProtectedModelGrant<TResult>(\n  options: RunProtectedAgentCandidateModelGrantOptions<TResult>,\n  input: AgentCandidateModelGrantSettleInput,\n): Promise<AgentCandidateProtectedModelSettlement> {\n  let delayMs = SETTLEMENT_RETRY_INITIAL_DELAY_MS\n  for (;;) {\n    try {\n      return await options.port.settleGrant(input)\n    } catch (error) {\n      if (!isCandidateGrantDrainingError(error)) throw error\n      const remainingMs = options.deadlineAtMs - Date.now()\n      if (remainingMs <= 0) throw error\n      await waitForSettlementRetry(Math.min(delayMs, remainingMs))\n      if (Date.now() >= options.deadlineAtMs) throw error\n      delayMs = Math.min(delayMs * 2, SETTLEMENT_RETRY_MAX_DELAY_MS)\n    }\n  }\n}\n\nfunction waitForSettlementRetry(delayMs: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, delayMs))\n}\n\n/** Only the gateway's explicit draining state is retryable; auth and ledger errors fail closed. */\nfunction isCandidateGrantDrainingError(error: unknown): boolean {\n  if (typeof error !== 'object' || error === null) return false\n  const candidate = error as { code?: unknown; message?: unknown }\n  if (candidate.code === 'candidate_grant_draining') return true\n  return (\n    typeof candidate.message === 'string' && /\\bcandidate_grant_draining\\b/u.test(candidate.message)\n  )\n}\n","import { lstat } from 'node:fs/promises'\nimport { isAbsolute, resolve } from 'node:path'\nimport {\n  type AgentCandidateArtifactRef,\n  type AgentCandidateWorkspaceSnapshotEvidence,\n  agentCandidateArtifactRefSchema,\n  agentCandidateWorkspaceManifestMaterialSchema,\n  agentCandidateWorkspaceSnapshotEvidenceSchema,\n} from '@tangle-network/agent-interface'\nimport { verifiedArtifactChunks } from './artifact-streams'\nimport { canonicalCandidateBytes, deepFreezeCandidate } from './digest'\nimport type { AgentCandidateArtifactPort } from './types'\nimport { type AgentCandidateWorkspaceArchiveLimits, workspaceLimits } from './workspace-archive'\nimport {\n  type CaptureAgentCandidateWorkspaceOptions,\n  captureAgentCandidateWorkspace,\n  createAgentCandidateWorkspacePort,\n} from './workspace-archive-local'\n\n/** The canonical workspace evidence without manifest material or embedded file bytes. */\nexport type AgentCandidateWorkspaceSnapshotReferences = Pick<\n  AgentCandidateWorkspaceSnapshotEvidence,\n  'kind' | 'digest'\n> & {\n  readonly manifest: AgentCandidateArtifactRef\n  readonly archive: AgentCandidateArtifactRef\n}\n\nexport type CaptureAgentWorkspaceSnapshotOptions = Omit<\n  CaptureAgentCandidateWorkspaceOptions,\n  'artifactPersistence'\n> & {\n  artifactPersistence: NonNullable<CaptureAgentCandidateWorkspaceOptions['artifactPersistence']>\n}\n\n/**\n * Capture through the canonical archive owner and return references only.\n * The caller holds its existing private source workspace lease throughout capture, and binds\n * its public source provenance at the SDK boundary. Choose includeRepository and working-tree\n * explicitly when staged, dirty, deleted and unignored untracked Git files must travel.\n */\nexport async function captureAgentWorkspaceSnapshot(\n  root: string,\n  options: CaptureAgentWorkspaceSnapshotOptions,\n): Promise<AgentCandidateWorkspaceSnapshotReferences> {\n  if (!options?.artifactPersistence) {\n    throw new Error('portable workspace capture requires artifactPersistence')\n  }\n  const captured = await captureAgentCandidateWorkspace(root, {\n    ...options,\n    ...(options.limits ? { limits: { ...options.limits } } : {}),\n    artifactPersistence: { ...options.artifactPersistence },\n  })\n  return workspaceReferences(captured.snapshot)\n}\n\nexport interface MaterializeAgentWorkspaceSnapshotOptions {\n  snapshot: AgentCandidateWorkspaceSnapshotReferences\n  /** Authorizes each immutable reference for the accepted transfer owner; must stream reads. */\n  artifacts: AgentCandidateArtifactPort\n  /** Absent destination inside a caller-owned private allocation scope. */\n  destination: string\n  limits?: Partial<AgentCandidateWorkspaceArchiveLimits>\n  signal?: AbortSignal\n}\n\n/**\n * Restore canonical workspace references before an agent starts.\n * The SDK boundary validates source provenance and the accepted snapshot digest before this\n * byte-level composition runs. Artifact references identify content; the injected port owns\n * authorization. The archive owner verifies all files and Git state before publishing fresh\n * staging. Destinations present before or during artifact reads are refused. The caller owns\n * the allocation scope against other writers; Node directory rename is not atomic no-replace.\n */\nexport async function materializeAgentWorkspaceSnapshot(\n  input: MaterializeAgentWorkspaceSnapshotOptions,\n): Promise<void> {\n  input.signal?.throwIfAborted()\n  const snapshot = workspaceReferences(input.snapshot)\n  const limits = workspaceLimits(input.limits)\n  if (!input.artifacts.readStream) {\n    throw new Error('portable workspace restore requires an authorized readStream')\n  }\n  if (!isAbsolute(input.destination)) {\n    throw new Error('portable workspace destination must be absolute')\n  }\n  const destination = resolve(input.destination)\n  await assertAbsentDestination(destination)\n  for (const artifact of [snapshot.manifest, snapshot.archive]) {\n    if (artifact.byteLength > limits.maxArchiveBytes) {\n      throw new Error('portable workspace artifact exceeds maxArchiveBytes')\n    }\n  }\n  const manifest = await readArtifact(snapshot.manifest, input.artifacts, input.signal)\n  const material = agentCandidateWorkspaceManifestMaterialSchema.parse(\n    JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(manifest)),\n  )\n  if (!Buffer.from(canonicalCandidateBytes(material)).equals(manifest)) {\n    throw new Error('workspace manifest artifact is not the exact canonical manifest material')\n  }\n  const evidence = agentCandidateWorkspaceSnapshotEvidenceSchema.parse({ ...snapshot, material })\n  const archive = await readArtifact(snapshot.archive, input.artifacts, input.signal)\n  input.signal?.throwIfAborted()\n  // The artifact resolver may await remote storage. A destination that appeared while waiting\n  // belongs to its creator, even when it is empty.\n  await assertAbsentDestination(destination)\n  input.signal?.throwIfAborted()\n  await createAgentCandidateWorkspacePort({ limits }).materialize({\n    role: 'task',\n    snapshot: evidence,\n    archive,\n    destination,\n    ...(input.signal ? { signal: input.signal } : {}),\n  })\n}\n\nfunction workspaceReferences(\n  snapshot: Pick<\n    AgentCandidateWorkspaceSnapshotEvidence,\n    'kind' | 'digest' | 'manifest' | 'archive'\n  >,\n): AgentCandidateWorkspaceSnapshotReferences {\n  if (snapshot.kind !== 'agent-candidate-workspace-snapshot') {\n    throw new Error('portable workspace snapshot kind is invalid')\n  }\n  const manifest = agentCandidateArtifactRefSchema.parse(snapshot.manifest)\n  const archive = agentCandidateArtifactRefSchema.parse(snapshot.archive)\n  for (const artifact of [manifest, archive]) {\n    if (!Number.isSafeInteger(artifact.byteLength) || artifact.byteLength < 1) {\n      throw new Error('portable workspace artifacts require positive safe byte lengths')\n    }\n  }\n  if (snapshot.digest !== manifest.sha256) {\n    throw new Error('workspace digest must equal the canonical manifest hash')\n  }\n  return deepFreezeCandidate({ kind: snapshot.kind, digest: snapshot.digest, manifest, archive })\n}\n\nasync function readArtifact(\n  reference: AgentCandidateArtifactRef,\n  artifacts: AgentCandidateArtifactPort,\n  signal?: AbortSignal,\n): Promise<Buffer> {\n  const chunks: Buffer[] = []\n  for await (const chunk of verifiedArtifactChunks(reference, artifacts, signal)) {\n    chunks.push(Buffer.from(chunk))\n  }\n  return Buffer.concat(chunks)\n}\n\nasync function assertAbsentDestination(destination: string): Promise<void> {\n  try {\n    await lstat(destination)\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return\n    throw error\n  }\n  throw new Error('portable workspace destination already exists')\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwEA,SAAgB,0BACd,OAC6C;CAU7C,OAAO,yBAAyB;EAR9B,MAAM;EACN,iBAAiB;EACjB,SAAS,wBAAwB,MAAM,OAAO;EAC9C,MAAM,qBAAqB,MAAM,IAAI;EACrC,WAAW,MAAM;EACjB,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;EACtE,QAAQ,MAAM;CAEqB,CAAC;AACxC;AAEA,SAAS,wBAAwB,QAA4D;CAC3F,IAAI,OAAO,SAAS,qBAClB,OAAO,2BAA2B,OAAO,OAAO;CAGlD,IAAI,OAAO,SAAS,WAClB,OAAO,mCAAmC,OAAO,OAAO;CAG1D,IAAI,OAAO,SAAS,iBAClB,MAAM,IAAI,MACR,yCAAyC,OAAQ,OAA8B,IAAI,GACrF;CAEF,IAAI,OAAO,MAAM,WAAW,GAC1B,MAAM,IAAI,MAAM,6DAA6D;CAE/E,IAAI,UAAU,uBAAuB,OAAO,MAAM,cAAc;CAChE,KAAK,MAAM,CAAC,OAAO,cAAc,OAAO,MAAM,QAAQ,GAAG;EACvD,MAAM,OAAO,2BAA2B,WAAW,gBAAgB,OAAO;EAC1E,UAAU,2BAA2B,SAAS,MAAM,gBAAgB,OAAO;CAC7E;CACA,OAAO,mCAAmC,OAAO;AACnD;AAEA,SAAS,qBAAqB,QAAqE;CACjG,IAAI,OAAO,SAAS,cAAc,OAAO,SAAS,SAAS,OAAO;CAClE,IAAI,OAAO,SAAS,gBAClB,MAAM,IAAI,MACR,sCAAsC,OAAQ,OAA8B,IAAI,GAClF;CAIF,MAAM,QAAQ,0BADG,kBAAkB,OAAO,SAAS,OAAO,WACX,CAAC,CAAC,UAAU;CAC3D,IACE,MAAM,WAAW,OAAO,QAAQ,MAAM,UACtC,MAAM,eAAe,OAAO,QAAQ,MAAM,YAE1C,MAAM,IAAI,MAAM,oEAAoE;CAEtF,OAAO;EACL,MAAM;EACN,YAAY,OAAO;EACnB,YAAY,OAAO,QAAQ;EAC3B,UAAU,OAAO,QAAQ;EACzB,eAAe,OAAO,QAAQ;EAC9B,OAAO;GAAE,QAAQ;GAAmB,UAAU;EAAM;CACtD;AACF;;;ACnGA,MAAM,EACJ,oBACA,aACA,gBACA,sBACA,eACA,WACA,aACA,UACA,WACA,oBACA,cACA,uBACA,yBACA,uBACA,eACA,gBACA,gBACA,WACA,cACE;;AAUJ,IAAa,wCAAb,MAAgG;CAC9F;CACA;CAEA,YAAY,SAAuD;EACjE,IAAI,QAAQ,UAAU,WAAW,GAC/B,MAAM,IAAI,MAAM,uDAAuD;EAEzE,KAAK,YAAY,QAAQ;EACzB,KAAK,MAAM,QAAQ,OAAO,KAAK;CACjC;CAEA,MAAM,SACJ,WAC6C;EAC7C,MAAM,QAAQ,UAAU,SAAS;EACjC,MAAM,MAAM,KAAK,WAAW,EAAE,WAAW,KAAK,CAAC;EAC/C,MAAM,YAAY,KAAK,UAAU,KAAK;EACtC,MAAM,WAAW,MAAM,mBAAmB,SAAS;EACnD,IAAI,UAAU;GACZ,eAAe,SAAS,OAAO,OAAO,SAAS;GAC/C,OAAO,sBAAsB,SAAS,OAAO,KAAK;EACpD;EACA,qBAAqB,MAAM,kBAAkB,KAAK,IAAI,CAAC;EACvD,MAAM,eAAe,MAAM,KAAK,aAAa,KAAK;EAClD,IAAI,cAAc,OAAO,cAAc,OAAO,YAAY;EAE1D,MAAM,QAAQ,SAAS,KAAK;EAM5B,IAAI,MALmB,oBAAoB,KAAK,WAAW,WAAW;GACpE,GAAG;GACH,OAAO;GACP,aAAa,YAAY,KAAK;EAChC,CAAC,GACa,OAAO,OAAO,OAAO;GAAE,UAAU;GAAM;GAAO;EAAM,CAAC;EAEnE,MAAM,SAAS,MAAM,UAAU,SAAS;EACxC,eAAe,OAAO,OAAO,OAAO,SAAS;EAC7C,OAAO,sBAAsB,OAAO,OAAO,KAAK;CAClD;CAEA,MAAM,WACJ,kBAC2D;EAC3D,OAAO,MAAM,KAAK,cAAc,eAAe,gBAAgB,CAAC;CAClE;CAEA,MAAM,oBACJ,gBAC6C;EAC7C,MAAM,QAAQ,UAAU,cAAc;EACtC,MAAM,YAAY,KAAK,UAAU,KAAK;EACtC,MAAM,SAAS,MAAM,UAAU,SAAS;EACxC,eAAe,OAAO,OAAO,OAAO,SAAS;EAC7C,YAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;EACpE,MAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;EACrD,IAAI,MAAM,UAAU,qBAClB,OAAO,OAAO,OAAO;GAAE,QAAQ;GAAO,OAAO;EAAoB,CAAC;EAEpE,IAAI,MAAM,QACR,MAAM,IAAI,MAAM,wEAAwE;EAE1F,qBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;EAa9D,IAAI,MAZiB,oBACnB,KAAK,WACL,KAAK,eAAe,OAAO,OAAO,CAAC,GACnC;GACE,MAAM;GACN,aAAa,OAAO,MAAM;GAC1B,SAAS,OAAO,MAAM;GACtB,qBAAqB,OAAO,MAAM;GAClC,OAAO;EACT,GACA,KAAK,iBAAiB,OAAO,KAAK,CACpC,GACY,OAAO,OAAO,OAAO;GAAE,QAAQ;GAAM,OAAO;EAAoB,CAAC;EAE7E,KAAI,MADiB,KAAK,gBAAgB,OAAO,KAAK,EAAA,CAC3C,UAAU,qBACnB,OAAO,OAAO,OAAO;GAAE,QAAQ;GAAO,OAAO;EAAoB,CAAC;EAEpE,MAAM,IAAI,MAAM,wEAAwE;CAC1F;CAEA,MAAM,cACJ,gBACA,QAC6C;EAC7C,MAAM,QAAQ,UAAU,cAAc;EACtC,MAAM,YAAY,KAAK,UAAU,KAAK;EACtC,MAAM,SAAS,MAAM,UAAU,SAAS;EACxC,eAAe,OAAO,OAAO,OAAO,SAAS;EAC7C,YAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;EACpE,MAAM,WAAW,eAAe,OAAO,OAAO,MAAM;EACpD,MAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;EACrD,IAAI,MAAM,QAAQ,OAAO,cAAc,MAAM,QAAQ,QAAQ;EAC7D,6BAA6B,MAAM,OAAO,QAAQ;EAClD,qBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;EAC9D,MAAM,aAAa,MAAM,UAAU,YAAY,IAAI;EAUnD,IAAI,MATiB,oBACnB,KAAK,WACL,KAAK,eAAe,OAAO,OAAO,UAAU,GAC5C;GACE,MAAM;GACN;EACF,GACA,KAAK,iBAAiB,OAAO,KAAK,CACpC,GACY,OAAO,OAAO,OAAO;GAAE,QAAQ;GAAM;EAAS,CAAC;EAC3D,MAAM,SAAS,MAAM,KAAK,gBAAgB,OAAO,KAAK;EACtD,IAAI,CAAC,OAAO,QACV,MAAM,IAAI,MAAM,iEAAiE;EAEnF,OAAO,cAAc,OAAO,QAAQ,QAAQ;CAC9C;CAEA,MAAM,OACJ,gBACA,yBAC8C;EAC9C,MAAM,QAAQ,UAAU,cAAc;EACtC,MAAM,iBAAiB,mBAAmB,uBAAuB;EACjE,MAAM,YAAY,KAAK,UAAU,KAAK;EACtC,MAAM,SAAS,MAAM,UAAU,SAAS;EACxC,eAAe,OAAO,OAAO,OAAO,SAAS;EAC7C,YAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;EAEpE,MAAM,SAAS,uBAAsB,MADjB,KAAK,gBAAgB,OAAO,KAAK,EAAA,CACV,QAAQ,cAAc;EACjE,MAAM,eAAe,KAAK,aAAa,KAAK;EAC5C,MAAM,WAAW,MAAM,sBAAsB,YAAY;EACzD,IAAI,UAAU;GACZ,2BAA2B,UAAU,OAAO,OAAO,YAAY;GAC/D,4BAA4B,UAAU,QAAQ,YAAY;GAC1D,OAAO,eAAe,UAAU,cAAc;EAChD;EACA,qBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;EAS9D,IAAI,MARmB,oBACrB,KAAK,WACL,cACA,EACE,UAAU,OACZ,GACA,KAAK,iBAAiB,OAAO,KAAK,CACpC,GACc,OAAO,OAAO,OAAO;GAAE,UAAU;GAAM,UAAU;EAAO,CAAC;EACvE,MAAM,SAAS,MAAM,aAAa,YAAY;EAC9C,eAAe,QAAQ,OAAO,YAAY;EAC1C,2BAA2B,QAAQ,OAAO,OAAO,YAAY;EAC7D,4BAA4B,QAAQ,QAAQ,YAAY;EACxD,OAAO,eAAe,QAAQ,cAAc;CAC9C;CAEA,MAAM,eACJ,kBACA,UAC8C;EAC9C,MAAM,UAAU,eAAe,gBAAgB;EAC/C,MAAM,SAAS,MAAM,KAAK,cAAc,OAAO;EAC/C,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,gEAAgE;EAC7F,MAAM,YAAY,wBAAwB,OAAO,OAAO,OAAO,OAAO,QAAQ;EAC9E,IAAI,OAAO,QAAQ,4BAA4B,OAAO,QAAQ,SAAS;EACvE,MAAM,kBAAkB,OAAO,QAAQ,kBAAkB,UAAU;EACnE,IAAI,OAAO,UAAU,OAAO,eAAe,OAAO,UAAU,eAAe;EAC3E,mBAAmB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;EAE5D,IAAI,SAAS,OAAO;EACpB,IAAI,CAAC,QAAQ;GACX,MAAM,aAAa,OAAO,UAAU,YAAY,IAAI;GASpD,IAAI,MARmB,oBACrB,KAAK,WACL,KAAK,eAAe,OAAO,OAAO,UAAU,GAC5C;IACE,MAAM;IACN,UAAU;GACZ,CACF,GAEE,SAAS;QACJ;IACL,MAAM,SAAS,MAAM,KAAK,gBAAgB,OAAO,KAAK;IACtD,IAAI,CAAC,OAAO,QACV,MAAM,IAAI,MACR,0EACF;IAEF,4BAA4B,OAAO,QAAQ,SAAS;IACpD,SAAS,OAAO;GAClB;EACF;EAEA,MAAM,eAAe,KAAK,aAAa,OAAO;EAI9C,IAAI,MAHoB,oBAAoB,KAAK,WAAW,cAAc,EACxE,UAAU,OACZ,CAAC,GACc,OAAO,OAAO,OAAO;GAAE,UAAU;GAAM,UAAU;EAAO,CAAC;EACxE,MAAM,SAAS,MAAM,aAAa,YAAY;EAC9C,eAAe,QAAQ,SAAS,YAAY;EAC5C,2BAA2B,QAAQ,OAAO,OAAO,YAAY;EAC7D,4BAA4B,QAAQ,QAAQ,YAAY;EACxD,OAAO,eAAe,QAAQ,OAAO,cAAc;CACrD;CAEA,MAAc,cACZ,OAC2D;EAC3D,MAAM,YAAY,KAAK,UAAU,KAAK;EACtC,MAAM,SAAS,MAAM,mBAAmB,SAAS;EACjD,IAAI,CAAC,QAAQ,OAAO,KAAA;EACpB,eAAe,OAAO,OAAO,OAAO,SAAS;EAC7C,MAAM,eAAe,KAAK,aAAa,KAAK;EAC5C,MAAM,WAAW,MAAM,sBAAsB,YAAY;EAEzD,MAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;EACrD,IAAI,UAAU;GACZ,2BAA2B,UAAU,OAAO,OAAO,YAAY;GAC/D,IAAI,CAAC,MAAM,QACT,MAAM,IAAI,MACR,0CAA0C,aAAa,sBACzD;GAEF,4BAA4B,UAAU,MAAM,QAAQ,YAAY;EAClE;EACA,OAAO,cAAc,OAAO,OAAO,MAAM,OAAO,MAAM,QAAQ,QAAQ;CACxE;CAEA,MAAc,gBAAgB,OAG3B;EACD,MAAM,YAAY,KAAK,eAAe,OAAO,CAAC;EAC9C,MAAM,QAAQ,MAAM,wBAAwB,WAAW,KAAK;EAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,OAAO,UAAU;EACtC,IAAI,MAAM,SAAS,WAAW,OAAO;GAAE,OAAO;GAAW,QAAQ,MAAM;EAAS;EAChF,MAAM,aAAa,KAAK,eAAe,OAAO,CAAC;EAC/C,MAAM,SAAS,MAAM,wBAAwB,YAAY,KAAK;EAC9D,IAAI,CAAC,QAAQ,OAAO,EAAE,OAAO,oBAAoB;EACjD,IAAI,OAAO,SAAS,WAClB,MAAM,IAAI,MAAM,qCAAqC,WAAW,0BAA0B;EAE5F,OAAO;GAAE,OAAO;GAAqB,QAAQ,OAAO;EAAS;CAC/D;CAEA,MAAc,aACZ,OACmD;EACnD,IAAI,MAAM,YAAY,GAAG,OAAO,KAAA;EAChC,OAAO,eACL,OACA,MAAM,KAAK,cAAc;GACvB,aAAa,MAAM;GACnB,SAAS,MAAM,UAAU;EAC3B,CAAC,CACH;CACF;CAEA,iBAAyB,OAEvB;EACA,OAAO,EACL,wBAAwB;GACtB,qBAAqB,MAAM,kBAAkB,KAAK,IAAI,CAAC;GACvD,OAAO;EACT,EACF;CACF;CAEA,UAAkB,OAA8E;EAC9F,OAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,EAAE,YAAY;CAC9D;CAEA,aACE,OACQ;EACR,OAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,EAAE,eAAe;CACjE;CAEA,eACE,OACA,SACQ;EACR,OAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,EAAE,cAAc,QAAQ,MAAM;CAC9E;AACF;;;;;;;AAQA,eAAe,oBACb,WACA,aACA,QACA,UAGI,CAAC,GACa;CAClB,MAAM,gBAAgB,KAAK,WAAW,wBAAwB,QAAQ,IAAI,GAAG,WAAW,EAAE,KAAK;CAC/F,MAAM,SAAS,MAAM,KAAK,eAAe,MAAM,GAAK;CACpD,IAAI;EACF,MAAM,OAAO,UACX,OAAO,OAAO,CAAC,OAAO,KAAKA,0BAAwB,MAAM,CAAC,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CACjF;EACA,MAAM,OAAO,KAAK;CACpB,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;CAEA,IAAI,UAAU;CACd,IAAI;EACF,IAAI,QAAQ,oBAAoB,QAAQ,iBAAiB,MAAM,MAC7D,MAAM,IAAI,MAAM,2DAA2D;EAI7E,SAAS,eAAe,WAAW;EACnC,UAAU;EACV,MAAM,cAAc,SAAS;CAC/B,SAAS,OAAO;EACd,IAAI,CAAC,YAAY,OAAO,QAAQ,GAAG,MAAM;CAC3C,UAAU;EACR,MAAM,OAAO,aAAa,CAAC,CAAC,OAAO,UAAmB;GACpD,IAAI,CAAC,YAAY,OAAO,QAAQ,GAAG,MAAM;EAC3C,CAAC;CACH;CACA,OAAO;AACT;AAEA,eAAe,cAAc,WAAkC;CAC7D,MAAM,SAAS,MAAM,KAAK,WAAW,GAAG;CACxC,IAAI;EACF,MAAM,OAAO,KAAK;CACpB,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;AAEA,SAAS,YAAY,OAAgB,MAAuB;CAC1D,OACE,UAAU,QACV,OAAO,UAAU,YACjB,UAAU,SACT,MAA6B,SAAS;AAE3C;;;;AC7YA,eAAsB,uCACpB,UACA,UAAgD,CAAC,GACpB;CAC7B,MAAM,eAAe,iCAAiC,QAAQ;CAC9D,MAAM,mBAAmB,QAAQ,oBAAoB,aAAa;CAClE,IAAI,mBAAmB,aAAa,kBAClC,MAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,sBAAsB,yBAAyB,gBAAgB;CACrE,MAAM,QAAQ,+BAA+B,QAAQ;CACrD,MAAM,UAAmC,CAAC;CAE1C,IAAI,MAAM,OAAO,SAAS,YAAY;EACpC,MAAM,cAAc,MAAM;EAC1B,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,wCAAwC;EAC1E,QAAQ,KACN,+BACE,YAAY;GACV,MAAM,SAAS,MAAM,MAAM,MAAM,OAAO,MAAM;IAC5C,aAAa,MAAM;IACnB,eAAe,YAAY;IAC3B,cAAc,YAAY;IAC1B,oBAAoB,YAAY;IAChC,QAAQ;GACV,CAAC;GACD,IAAI,OAAO,WAAW,QAAQ,OAAO,KAAK,MAAM,CAAC,CAAC,MAAM,QAAQ,QAAQ,QAAQ,GAC9E,MAAM,IAAI,MAAM,8DAA8D;EAElF,GACA,qBACA,0BACF,CACF;CACF;CAEA,QAAQ,KACN,+BACE,YAAY;EAeV,IAdmB,kCACjB,MAAM,MAAM,MAAM,OAAO,YAAY;GACnC,aAAa,MAAM;GACnB,eAAe,MAAM;GACrB,aAAa,MAAM,iBAAiB;GACpC,UAAU,MAAM;GAChB,QAAQ;EACV,CAAC,GACD;GACE,eAAe,MAAM;GACrB,aAAa,MAAM,iBAAiB;GACpC,OAAO,MAAM,cAAc;EAC7B,CAEW,CAAC,CAAC,MAAM,eAAe,GAClC,MAAM,IAAI,MAAM,0DAA0D;CAE9E,GACA,qBACA,4BACF,CACF;CAGA,MAAM,YAAW,MADK,QAAQ,WAAW,OAAO,EAAA,CAE7C,QAAQ,WAA4C,OAAO,WAAW,UAAU,CAAC,CACjF,KAAK,WAAW,OAAO,MAAM;CAChC,IAAI,SAAS,SAAS,GAAG;EACvB,kCAAkC,UAAU,iBAAiB;EAC7D,MAAM,IAAI,eAAe,UAAU,uCAAuC;CAC5E;CAEA,kCAAkC,UAAU,UAAU;CACtD,OAAO,OAAO,OAAO,EAAE,UAAU,KAAc,CAAC;AAClD;;;ACtCA,MAAM,oCAAoC;AAC1C,MAAM,gCAAgC;;;;;;;;;AAUtC,eAAsB,qCACpB,SAC8D;CAC9D,IAAI,OAAO,QAAQ,YAAY,YAC7B,MAAM,IAAI,UAAU,oDAAoD;CAG1E,MAAM,WAAW,MAAM,QAAQ,KAAK,QAAQ,QAAQ,OAAO;CAC3D,MAAM,cAAc,MAAM,QAAQ,KAAK,aAAa;EAClD,GAAG,QAAQ;EACX;CACF,CAAC;CAED,IAAI;CACJ,IAAI;CACJ,IAAI,kBAAkB;CACtB,IAAI,YAAY;CAChB,IAAI,SAAwD;CAE5D,IAAI;EACF,MAAM,aAAa,MAAM,QAAQ,KAAK,cAAc;GAClD,aAAa,QAAQ,QAAQ;GAC7B,eAAe,QAAQ,QAAQ;GAC/B,aAAa,YAAY;GACzB;GACA,cAAc,QAAQ;EACxB,CAAC;EACD,YAAY;EACZ,QAAQ,MAAM,QAAQ,QAAQ;GAAE;GAAY;GAAa;EAAS,CAAC;EACnE,SAAS;CACX,SAAS,OAAO;EACd,iBAAiB;EACjB,kBAAkB;EAClB,IAAI,WAAW,SAAS;CAC1B;CAEA,IAAI;CACJ,IAAI;EACF,aAAa,MAAM,0BAA0B,SAAS;GACpD,aAAa,QAAQ,QAAQ;GAC7B,eAAe,QAAQ,QAAQ;GAC/B,aAAa,YAAY;GACzB;GACA;EACF,CAAC;CACH,SAAS,iBAAiB;EACxB,IAAI,iBACF,MAAM,IAAI,eACR,CAAC,gBAAgB,eAAe,GAChC,+DACF;EAEF,MAAM;CACR;CAEA,IAAI,iBAAiB,MAAM;CAC3B,OAAO;EAAE;EAAO;EAAU;EAAa;CAAW;AACpD;AAEA,eAAe,0BACb,SACA,OACiD;CACjD,IAAI,UAAU;CACd,SACE,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,YAAY,KAAK;CAC7C,SAAS,OAAO;EACd,IAAI,CAAC,8BAA8B,KAAK,GAAG,MAAM;EACjD,MAAM,cAAc,QAAQ,eAAe,KAAK,IAAI;EACpD,IAAI,eAAe,GAAG,MAAM;EAC5B,MAAM,uBAAuB,KAAK,IAAI,SAAS,WAAW,CAAC;EAC3D,IAAI,KAAK,IAAI,KAAK,QAAQ,cAAc,MAAM;EAC9C,UAAU,KAAK,IAAI,UAAU,GAAG,6BAA6B;CAC/D;AAEJ;AAEA,SAAS,uBAAuB,SAAgC;CAC9D,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,OAAO,CAAC;AAC9D;;AAGA,SAAS,8BAA8B,OAAyB;CAC9D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,YAAY;CAClB,IAAI,UAAU,SAAS,4BAA4B,OAAO;CAC1D,OACE,OAAO,UAAU,YAAY,YAAY,gCAAgC,KAAK,UAAU,OAAO;AAEnG;;;;;;;;;AC7GA,eAAsB,8BACpB,MACA,SACoD;CACpD,IAAI,CAAC,SAAS,qBACZ,MAAM,IAAI,MAAM,yDAAyD;CAO3E,OAAO,qBAAoB,MALJ,+BAA+B,MAAM;EAC1D,GAAG;EACH,GAAI,QAAQ,SAAS,EAAE,QAAQ,EAAE,GAAG,QAAQ,OAAO,EAAE,IAAI,CAAC;EAC1D,qBAAqB,EAAE,GAAG,QAAQ,oBAAoB;CACxD,CAAC,EAAA,CACmC,QAAQ;AAC9C;;;;;;;;;AAoBA,eAAsB,kCACpB,OACe;CACf,MAAM,QAAQ,eAAe;CAC7B,MAAM,WAAW,oBAAoB,MAAM,QAAQ;CACnD,MAAM,SAAS,gBAAgB,MAAM,MAAM;CAC3C,IAAI,CAAC,MAAM,UAAU,YACnB,MAAM,IAAI,MAAM,8DAA8D;CAEhF,IAAI,CAAC,WAAW,MAAM,WAAW,GAC/B,MAAM,IAAI,MAAM,iDAAiD;CAEnE,MAAM,cAAc,QAAQ,MAAM,WAAW;CAC7C,MAAM,wBAAwB,WAAW;CACzC,KAAK,MAAM,YAAY,CAAC,SAAS,UAAU,SAAS,OAAO,GACzD,IAAI,SAAS,aAAa,OAAO,iBAC/B,MAAM,IAAI,MAAM,qDAAqD;CAGzE,MAAM,WAAW,MAAM,aAAa,SAAS,UAAU,MAAM,WAAW,MAAM,MAAM;CACpF,MAAM,WAAW,8CAA8C,MAC7D,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,CACvE;CACA,IAAI,CAAC,OAAO,KAAKC,0BAAwB,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,GACjE,MAAM,IAAI,MAAM,0EAA0E;CAE5F,MAAM,WAAW,8CAA8C,MAAM;EAAE,GAAG;EAAU;CAAS,CAAC;CAC9F,MAAM,UAAU,MAAM,aAAa,SAAS,SAAS,MAAM,WAAW,MAAM,MAAM;CAClF,MAAM,QAAQ,eAAe;CAG7B,MAAM,wBAAwB,WAAW;CACzC,MAAM,QAAQ,eAAe;CAC7B,MAAM,kCAAkC,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY;EAC9D,MAAM;EACN,UAAU;EACV;EACA;EACA,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;CACjD,CAAC;AACH;AAEA,SAAS,oBACP,UAI2C;CAC3C,IAAI,SAAS,SAAS,sCACpB,MAAM,IAAI,MAAM,6CAA6C;CAE/D,MAAM,WAAW,gCAAgC,MAAM,SAAS,QAAQ;CACxE,MAAM,UAAU,gCAAgC,MAAM,SAAS,OAAO;CACtE,KAAK,MAAM,YAAY,CAAC,UAAU,OAAO,GACvC,IAAI,CAAC,OAAO,cAAc,SAAS,UAAU,KAAK,SAAS,aAAa,GACtE,MAAM,IAAI,MAAM,iEAAiE;CAGrF,IAAI,SAAS,WAAW,SAAS,QAC/B,MAAM,IAAI,MAAM,yDAAyD;CAE3E,OAAO,oBAAoB;EAAE,MAAM,SAAS;EAAM,QAAQ,SAAS;EAAQ;EAAU;CAAQ,CAAC;AAChG;AAEA,eAAe,aACb,WACA,WACA,QACiB;CACjB,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,uBAAuB,WAAW,WAAW,MAAM,GAC3E,OAAO,KAAK,OAAO,KAAK,KAAK,CAAC;CAEhC,OAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,eAAe,wBAAwB,aAAoC;CACzE,IAAI;EACF,MAAM,MAAM,WAAW;CACzB,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU;EACxD,MAAM;CACR;CACA,MAAM,IAAI,MAAM,+CAA+C;AACjE"}
+{"version":3,"file":"index.js","names":["canonicalCandidateBytes","canonicalCandidateBytes"],"sources":["../../src/candidate-execution/builder.ts","../../src/candidate-execution/claim-file-store.ts","../../src/candidate-execution/dispose.ts","../../src/candidate-execution/protected-model-grant.ts","../../src/candidate-execution/workspace-transfer.ts"],"sourcesContent":["import type { CodeSurface } from '@tangle-network/agent-eval/campaign'\nimport { verifyCodeSurface } from '@tangle-network/agent-eval/campaign'\nimport type {\n  AgentCandidateCodeDisabled,\n  AgentCandidateCodeNoOp,\n  AgentCandidateExecution,\n  AgentCandidateGitHubRepository,\n  AgentCandidateKnowledge,\n  AgentCandidateMemoryPolicy,\n  AgentCandidateProfile,\n  AgentProfile,\n  AgentProfileDiff,\n} from '@tangle-network/agent-interface'\nimport { type AgentCandidateBundleInput, sealAgentCandidateBundle } from './bundle'\nimport { embeddedCandidateArtifact } from './digest'\nimport {\n  applyExactAgentProfileDiff,\n  freezeGenericAgentCandidateProfile,\n  parseExactAgentProfile,\n  parseExactAgentProfileDiff,\n  parseExactCandidateProfile,\n} from './profile'\n\n/** A complete profile that can be frozen without losing behavior. */\nexport type AgentCandidateProfileSource =\n  | {\n      kind: 'profile'\n      profile: AgentProfile\n    }\n  | {\n      kind: 'profile-diffs'\n      base: AgentProfile\n      /** Applied in order before the resulting profile is frozen into the bundle. */\n      diffs: readonly AgentProfileDiff[]\n    }\n  | {\n      kind: 'candidate-profile'\n      /** Already converted to the closed, secret-free candidate profile contract. */\n      profile: AgentCandidateProfile\n    }\n\n/** The only accepted path from an agent-eval code candidate to executable bytes. */\nexport interface AgentCandidateCodeSurfaceSource {\n  kind: 'code-surface'\n  surface: CodeSurface\n  repository: AgentCandidateGitHubRepository\n  /** Optional parent directory used to resolve a relative `surface.worktreeRef`. */\n  worktreeDir?: string\n}\n\n/** Explicit control/no-op code or one finalized CodeSurface whose bytes must still verify. */\nexport type AgentCandidateCodeSource =\n  | AgentCandidateCodeDisabled\n  | AgentCandidateCodeNoOp\n  | AgentCandidateCodeSurfaceSource\n\n/** Complete measured surfaces and execution policy compiled into one candidate bundle. */\nexport interface BuildAgentCandidateBundleInput {\n  profile: AgentCandidateProfileSource\n  code: AgentCandidateCodeSource\n  execution: AgentCandidateExecution\n  knowledge?: AgentCandidateKnowledge\n  memory: AgentCandidateMemoryPolicy\n}\n\n/**\n * Compile one measured profile/code candidate into the immutable execution\n * contract. Code bytes are re-read and verified by agent-eval before they are\n * embedded. The returned bundle is schema-validated, canonically digested, and\n * deeply immutable; call `verifyAgentCandidateBundle` at the execution boundary\n * to re-read external memory, repository, and workspace artifacts.\n */\nexport function buildAgentCandidateBundle(\n  input: BuildAgentCandidateBundleInput,\n): ReturnType<typeof sealAgentCandidateBundle> {\n  const bundle: AgentCandidateBundleInput = {\n    kind: 'agent-candidate-bundle',\n    digestAlgorithm: 'rfc8785-sha256',\n    profile: compileCandidateProfile(input.profile),\n    code: compileCandidateCode(input.code),\n    execution: input.execution,\n    ...(input.knowledge !== undefined ? { knowledge: input.knowledge } : {}),\n    memory: input.memory,\n  }\n  return sealAgentCandidateBundle(bundle)\n}\n\nfunction compileCandidateProfile(source: AgentCandidateProfileSource): AgentCandidateProfile {\n  if (source.kind === 'candidate-profile') {\n    return parseExactCandidateProfile(source.profile)\n  }\n\n  if (source.kind === 'profile') {\n    return freezeGenericAgentCandidateProfile(source.profile)\n  }\n\n  if (source.kind !== 'profile-diffs') {\n    throw new Error(\n      `unsupported candidate profile source: ${String((source as { kind?: unknown }).kind)}`,\n    )\n  }\n  if (source.diffs.length === 0) {\n    throw new Error('profile-diffs source requires at least one AgentProfileDiff')\n  }\n  let profile = parseExactAgentProfile(source.base, 'base profile')\n  for (const [index, inputDiff] of source.diffs.entries()) {\n    const diff = parseExactAgentProfileDiff(inputDiff, `profile diff ${index}`)\n    profile = applyExactAgentProfileDiff(profile, diff, `profile diff ${index}`)\n  }\n  return freezeGenericAgentCandidateProfile(profile)\n}\n\nfunction compileCandidateCode(source: AgentCandidateCodeSource): AgentCandidateBundleInput['code'] {\n  if (source.kind === 'disabled' || source.kind === 'no-op') return source\n  if (source.kind !== 'code-surface') {\n    throw new Error(\n      `unsupported candidate code source: ${String((source as { kind?: unknown }).kind)}`,\n    )\n  }\n\n  const verified = verifyCodeSurface(source.surface, source.worktreeDir)\n  const patch = embeddedCandidateArtifact(verified.patchBytes)\n  if (\n    patch.sha256 !== source.surface.patch.sha256 ||\n    patch.byteLength !== source.surface.patch.byteLength\n  ) {\n    throw new Error('verified CodeSurface patch bytes do not match its content identity')\n  }\n  return {\n    kind: 'git-patch',\n    repository: source.repository,\n    baseCommit: source.surface.baseCommit,\n    baseTree: source.surface.baseTree,\n    candidateTree: source.surface.candidateTree,\n    patch: { format: 'git-diff-binary', artifact: patch },\n  }\n}\n","import { randomUUID } from 'node:crypto'\nimport { linkSync } from 'node:fs'\nimport { mkdir, open, unlink } from 'node:fs/promises'\nimport { join } from 'node:path'\nimport type { Sha256Digest } from '@tangle-network/agent-interface'\n\nimport {\n  type AgentCandidateExecutionAttemptRecord,\n  type AgentCandidateExecutionAttemptRef,\n  type AgentCandidateExecutionClaim,\n  type AgentCandidateExecutionClaimResult,\n  type AgentCandidateExecutionClaimStore,\n  type AgentCandidateExecutionFinishResult,\n  type AgentCandidateExecutionLease,\n  type AgentCandidateExecutionPhase,\n  type AgentCandidateExecutionPhaseResult,\n  type AgentCandidateExecutionRecoveryEvidence,\n  type AgentCandidateExecutionStageResult,\n  type AgentCandidateExecutionTerminalRecord,\n  type AgentCandidateExecutionTerminalResult,\n  type AgentCandidateRetryRejection,\n  candidateClaimFileInternals,\n} from './claim'\nimport {\n  assertRecoveryMatchesStaged,\n  assertTerminalAllowedInPhase,\n  assertTerminalMatchesClaim,\n  assertTerminalMatchesStaged,\n  recoveredTerminalRecord,\n  rejectedFinish,\n  rejectedStage,\n  requireStagedTerminal,\n  sealTerminalDigest,\n  terminalRecord,\n} from './claim-terminal'\nimport { canonicalCandidateBytes } from './digest'\n\nconst {\n  assertExpiredLease,\n  assertLease,\n  assertSameSlot,\n  assertUnexpiredLease,\n  attemptRecord,\n  claimSlot,\n  leaseDigest,\n  newLease,\n  readClaim,\n  readClaimIfPresent,\n  readTerminal,\n  readTerminalIfPresent,\n  readTransitionIfPresent,\n  rejectedExistingClaim,\n  rejectedRetry,\n  retryRejection,\n  sealAttemptRef,\n  sealClaim,\n  sealLease,\n} = candidateClaimFileInternals\n\nexport interface FileAgentCandidateExecutionClaimStoreOptions {\n  /** Evaluator-owned directory shared by every process allowed to execute candidates. */\n  directory: string\n  /** Testable evaluator clock; defaults to `Date.now`. */\n  now?: () => number\n}\n\n/** Cross-process lifecycle implemented as fsynced, create-if-absent records. */\nexport class FileAgentCandidateExecutionClaimStore implements AgentCandidateExecutionClaimStore {\n  private readonly directory: string\n  private readonly now: () => number\n\n  constructor(options: FileAgentCandidateExecutionClaimStoreOptions) {\n    if (options.directory.length === 0) {\n      throw new Error('candidate execution claim directory must not be empty')\n    }\n    this.directory = options.directory\n    this.now = options.now ?? Date.now\n  }\n\n  async tryClaim(\n    requested: AgentCandidateExecutionClaim,\n  ): Promise<AgentCandidateExecutionClaimResult> {\n    const claim = sealClaim(requested)\n    await mkdir(this.directory, { recursive: true })\n    const claimPath = this.claimPath(claim)\n    const existing = await readClaimIfPresent(claimPath)\n    if (existing) {\n      assertSameSlot(existing.claim, claim, claimPath)\n      return rejectedExistingClaim(existing.claim, claim)\n    }\n    assertUnexpiredLease(claim.leaseExpiresAtMs, this.now())\n    const retryFailure = await this.retryFailure(claim)\n    if (retryFailure) return rejectedRetry(claim, retryFailure)\n\n    const lease = newLease(claim)\n    const acquired = await writeRecordIfAbsent(this.directory, claimPath, {\n      ...claim,\n      phase: 'claimed',\n      leaseDigest: leaseDigest(lease),\n    })\n    if (acquired) return Object.freeze({ acquired: true, claim, lease })\n\n    const winner = await readClaim(claimPath)\n    assertSameSlot(winner.claim, claim, claimPath)\n    return rejectedExistingClaim(winner.claim, claim)\n  }\n\n  async getAttempt(\n    requestedAttempt: AgentCandidateExecutionAttemptRef,\n  ): Promise<AgentCandidateExecutionAttemptRecord | undefined> {\n    return await this.storedAttempt(sealAttemptRef(requestedAttempt))\n  }\n\n  async markCandidateMayRun(\n    requestedLease: AgentCandidateExecutionLease,\n  ): Promise<AgentCandidateExecutionPhaseResult> {\n    const lease = sealLease(requestedLease)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const state = await this.transitionState(stored.claim)\n    if (state.phase === 'candidate-may-run') {\n      return Object.freeze({ marked: false, phase: 'candidate-may-run' })\n    }\n    if (state.staged) {\n      throw new Error('candidate execution terminal was staged before candidate-may-run phase')\n    }\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const marked = await writeRecordIfAbsent(\n      this.directory,\n      this.transitionPath(stored.claim, 1),\n      {\n        kind: 'candidate-execution-phase',\n        executionId: stored.claim.executionId,\n        attempt: stored.claim.attempt,\n        executionPlanDigest: stored.claim.executionPlanDigest,\n        phase: 'candidate-may-run',\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (marked) return Object.freeze({ marked: true, phase: 'candidate-may-run' })\n    const winner = await this.transitionState(stored.claim)\n    if (winner.phase === 'candidate-may-run') {\n      return Object.freeze({ marked: false, phase: 'candidate-may-run' })\n    }\n    throw new Error('candidate execution terminal was staged before candidate-may-run phase')\n  }\n\n  async stageTerminal(\n    requestedLease: AgentCandidateExecutionLease,\n    result: AgentCandidateExecutionTerminalResult,\n  ): Promise<AgentCandidateExecutionStageResult> {\n    const lease = sealLease(requestedLease)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const terminal = terminalRecord(stored.claim, result)\n    const state = await this.transitionState(stored.claim)\n    if (state.staged) return rejectedStage(state.staged, terminal)\n    assertTerminalAllowedInPhase(state.phase, terminal)\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const transition = state.phase === 'claimed' ? 1 : 2\n    const staged = await writeRecordIfAbsent(\n      this.directory,\n      this.transitionPath(stored.claim, transition),\n      {\n        kind: 'candidate-execution-pending-terminal',\n        terminal,\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (staged) return Object.freeze({ staged: true, terminal })\n    const winner = await this.transitionState(stored.claim)\n    if (!winner.staged) {\n      throw new Error('candidate execution phase transition won while staging terminal')\n    }\n    return rejectedStage(winner.staged, terminal)\n  }\n\n  async finish(\n    requestedLease: AgentCandidateExecutionLease,\n    requestedTerminalDigest: Sha256Digest,\n  ): Promise<AgentCandidateExecutionFinishResult> {\n    const lease = sealLease(requestedLease)\n    const terminalDigest = sealTerminalDigest(requestedTerminalDigest)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const state = await this.transitionState(stored.claim)\n    const staged = requireStagedTerminal(state.staged, terminalDigest)\n    const terminalPath = this.terminalPath(lease)\n    const existing = await readTerminalIfPresent(terminalPath)\n    if (existing) {\n      assertTerminalMatchesClaim(existing, stored.claim, terminalPath)\n      assertTerminalMatchesStaged(existing, staged, terminalPath)\n      return rejectedFinish(existing, terminalDigest)\n    }\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const finished = await writeRecordIfAbsent(\n      this.directory,\n      terminalPath,\n      {\n        terminal: staged,\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (finished) return Object.freeze({ finished: true, terminal: staged })\n    const winner = await readTerminal(terminalPath)\n    assertSameSlot(winner, lease, terminalPath)\n    assertTerminalMatchesClaim(winner, stored.claim, terminalPath)\n    assertTerminalMatchesStaged(winner, staged, terminalPath)\n    return rejectedFinish(winner, terminalDigest)\n  }\n\n  async recoverExpired(\n    requestedAttempt: AgentCandidateExecutionAttemptRef,\n    evidence: AgentCandidateExecutionRecoveryEvidence,\n  ): Promise<AgentCandidateExecutionFinishResult> {\n    const attempt = sealAttemptRef(requestedAttempt)\n    const record = await this.storedAttempt(attempt)\n    if (!record) throw new Error('candidate execution recovery does not name an acquired attempt')\n    const recovered = recoveredTerminalRecord(record.claim, record.phase, evidence)\n    if (record.staged) assertRecoveryMatchesStaged(record.staged, recovered)\n    const requestedDigest = record.staged?.terminalDigest ?? recovered.terminalDigest\n    if (record.terminal) return rejectedFinish(record.terminal, requestedDigest)\n    assertExpiredLease(record.claim.leaseExpiresAtMs, this.now())\n\n    let staged = record.staged\n    if (!staged) {\n      const transition = record.phase === 'claimed' ? 1 : 2\n      const didStage = await writeRecordIfAbsent(\n        this.directory,\n        this.transitionPath(record.claim, transition),\n        {\n          kind: 'candidate-execution-pending-terminal',\n          terminal: recovered,\n        },\n      )\n      if (didStage) {\n        staged = recovered\n      } else {\n        const winner = await this.transitionState(record.claim)\n        if (!winner.staged) {\n          throw new Error(\n            'candidate execution recovery lost terminal staging to a phase transition',\n          )\n        }\n        assertRecoveryMatchesStaged(winner.staged, recovered)\n        staged = winner.staged\n      }\n    }\n\n    const terminalPath = this.terminalPath(attempt)\n    const didFinish = await writeRecordIfAbsent(this.directory, terminalPath, {\n      terminal: staged,\n    })\n    if (didFinish) return Object.freeze({ finished: true, terminal: staged })\n    const winner = await readTerminal(terminalPath)\n    assertSameSlot(winner, attempt, terminalPath)\n    assertTerminalMatchesClaim(winner, record.claim, terminalPath)\n    assertTerminalMatchesStaged(winner, staged, terminalPath)\n    return rejectedFinish(winner, staged.terminalDigest)\n  }\n\n  private async storedAttempt(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n  ): Promise<AgentCandidateExecutionAttemptRecord | undefined> {\n    const claimPath = this.claimPath(claim)\n    const stored = await readClaimIfPresent(claimPath)\n    if (!stored) return undefined\n    assertSameSlot(stored.claim, claim, claimPath)\n    const terminalPath = this.terminalPath(claim)\n    const terminal = await readTerminalIfPresent(terminalPath)\n    // Terminal publication follows its immutable staged outbox, so read that prerequisite later.\n    const state = await this.transitionState(stored.claim)\n    if (terminal) {\n      assertTerminalMatchesClaim(terminal, stored.claim, terminalPath)\n      if (!state.staged) {\n        throw new Error(\n          `candidate execution terminal record at ${terminalPath} has no staged outbox`,\n        )\n      }\n      assertTerminalMatchesStaged(terminal, state.staged, terminalPath)\n    }\n    return attemptRecord(stored.claim, state.phase, state.staged, terminal)\n  }\n\n  private async transitionState(claim: AgentCandidateExecutionClaim): Promise<{\n    phase: AgentCandidateExecutionPhase\n    staged?: AgentCandidateExecutionTerminalRecord\n  }> {\n    const firstPath = this.transitionPath(claim, 1)\n    const first = await readTransitionIfPresent(firstPath, claim)\n    if (!first) return { phase: 'claimed' }\n    if (first.kind === 'pending') return { phase: 'claimed', staged: first.terminal }\n    const secondPath = this.transitionPath(claim, 2)\n    const second = await readTransitionIfPresent(secondPath, claim)\n    if (!second) return { phase: 'candidate-may-run' }\n    if (second.kind !== 'pending') {\n      throw new Error(`candidate execution transition at ${secondPath} repeats the phase marker`)\n    }\n    return { phase: 'candidate-may-run', staged: second.terminal }\n  }\n\n  private async retryFailure(\n    claim: AgentCandidateExecutionClaim,\n  ): Promise<AgentCandidateRetryRejection | undefined> {\n    if (claim.attempt === 1) return undefined\n    return retryRejection(\n      claim,\n      await this.storedAttempt({\n        executionId: claim.executionId,\n        attempt: claim.attempt - 1,\n      }),\n    )\n  }\n\n  private ownerPublication(claim: AgentCandidateExecutionClaim): {\n    authorizePublish: () => true\n  } {\n    return {\n      authorizePublish: () => {\n        assertUnexpiredLease(claim.leaseExpiresAtMs, this.now())\n        return true\n      },\n    }\n  }\n\n  private claimPath(claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>): string {\n    return join(this.directory, `${claimSlot(claim)}.claim.json`)\n  }\n\n  private terminalPath(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n  ): string {\n    return join(this.directory, `${claimSlot(claim)}.terminal.json`)\n  }\n\n  private transitionPath(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n    ordinal: 1 | 2,\n  ): string {\n    return join(this.directory, `${claimSlot(claim)}.transition-${ordinal}.json`)\n  }\n}\n\n/**\n * Candidate records keep this async writer because lease authorization must run after the\n * asynchronous temp-file fsync and immediately before synchronous link publication. The\n * supervisor durability helper is synchronous and has no lease hook, so combining them would\n * either move authorization earlier or add an async race to the claim boundary.\n */\nasync function writeRecordIfAbsent(\n  directory: string,\n  destination: string,\n  record: object,\n  options: {\n    /** Synchronous authorization checked after temp fsync, immediately before atomic publication. */\n    authorizePublish?: () => true\n  } = {},\n): Promise<boolean> {\n  const temporaryPath = join(directory, `.candidate-execution-${process.pid}-${randomUUID()}.tmp`)\n  const handle = await open(temporaryPath, 'wx', 0o600)\n  try {\n    await handle.writeFile(\n      Buffer.concat([Buffer.from(canonicalCandidateBytes(record)), Buffer.from('\\n')]),\n    )\n    await handle.sync()\n  } finally {\n    await handle.close()\n  }\n\n  let written = false\n  try {\n    if (options.authorizePublish && options.authorizePublish() !== true) {\n      throw new Error('candidate execution record publication was not authorized')\n    }\n    // Authorization and the atomic filesystem call are one synchronous critical\n    // section so the event loop cannot advance an injected lease clock between them.\n    linkSync(temporaryPath, destination)\n    written = true\n    await syncDirectory(directory)\n  } catch (error) {\n    if (!isNodeError(error, 'EEXIST')) throw error\n  } finally {\n    await unlink(temporaryPath).catch((error: unknown) => {\n      if (!isNodeError(error, 'ENOENT')) throw error\n    })\n  }\n  return written\n}\n\nasync function syncDirectory(directory: string): Promise<void> {\n  const handle = await open(directory, 'r')\n  try {\n    await handle.sync()\n  } finally {\n    await handle.close()\n  }\n}\n\nfunction isNodeError(error: unknown, code: string): boolean {\n  return (\n    error !== null &&\n    typeof error === 'object' &&\n    'code' in error &&\n    (error as { code?: unknown }).code === code\n  )\n}\n","import { candidateCleanupDeadline, withinCandidateCleanupDeadline } from './cleanup'\nimport { sealAgentCandidateModelSettlement } from './model-settlement'\nimport {\n  assertPreparedCandidateIntegrity,\n  beginPreparedCandidateDisposal,\n  consumePreparedCandidateExecution,\n} from './prepared-state'\nimport type { PreparedAgentCandidateExecution } from './types'\n\nexport interface DisposePreparedAgentCandidateOptions {\n  cleanupTimeoutMs?: number\n}\n\n/** Revoke reservations held by a prepared candidate that will not be executed. */\nexport async function disposePreparedAgentCandidateExecution(\n  prepared: PreparedAgentCandidateExecution,\n  options: DisposePreparedAgentCandidateOptions = {},\n): Promise<{ disposed: true }> {\n  const initialState = assertPreparedCandidateIntegrity(prepared)\n  const cleanupTimeoutMs = options.cleanupTimeoutMs ?? initialState.cleanupTimeoutMs\n  if (cleanupTimeoutMs > initialState.cleanupTimeoutMs) {\n    throw new Error('disposal cleanup timeout exceeds the frozen preparation bound')\n  }\n  const cleanupDeadlineAtMs = candidateCleanupDeadline(cleanupTimeoutMs)\n  const state = beginPreparedCandidateDisposal(prepared)\n  const cleanup: Array<Promise<unknown>> = []\n\n  if (state.memory.mode === 'isolated') {\n    const reservation = state.memoryReservation\n    if (!reservation) throw new Error('isolated memory reservation is missing')\n    cleanup.push(\n      withinCandidateCleanupDeadline(\n        async () => {\n          const closed = await state.ports.memory.close({\n            executionId: state.executionId,\n            preparationId: reservation.preparationId,\n            accessDigest: reservation.accessDigest,\n            effectiveNamespace: reservation.effectiveNamespace,\n            reason: 'abandoned',\n          })\n          if (closed.closed !== true || Object.keys(closed).some((key) => key !== 'closed')) {\n            throw new Error('abandoned isolated memory access did not acknowledge closure')\n          }\n        },\n        cleanupDeadlineAtMs,\n        'isolated memory disposal',\n      ),\n    )\n  }\n\n  cleanup.push(\n    withinCandidateCleanupDeadline(\n      async () => {\n        const settlement = sealAgentCandidateModelSettlement(\n          await state.ports.models.settleGrant({\n            executionId: state.executionId,\n            preparationId: state.preparationId,\n            grantDigest: state.modelReservation.digest,\n            resolved: state.resolvedModel,\n            reason: 'abandoned',\n          }),\n          {\n            preparationId: state.preparationId,\n            grantDigest: state.modelReservation.digest,\n            model: state.resolvedModel.model,\n          },\n        )\n        if (settlement.usage.modelCalls !== 0) {\n          throw new Error('unexecuted model reservation unexpectedly contains calls')\n        }\n      },\n      cleanupDeadlineAtMs,\n      'model reservation disposal',\n    ),\n  )\n\n  const results = await Promise.allSettled(cleanup)\n  const failures = results\n    .filter((result): result is PromiseRejectedResult => result.status === 'rejected')\n    .map((result) => result.reason)\n  if (failures.length > 0) {\n    consumePreparedCandidateExecution(prepared, 'disposal-failed')\n    throw new AggregateError(failures, 'candidate preparation disposal failed')\n  }\n\n  consumePreparedCandidateExecution(prepared, 'disposed')\n  return Object.freeze({ disposed: true as const })\n}\n","import type { AgentCandidateResolvedModel } from '@tangle-network/agent-interface'\n\nimport type {\n  AgentCandidateModelGrantActivateInput,\n  AgentCandidateModelGrantReserveInput,\n  AgentCandidateModelGrantSettleInput,\n} from './protected-model-port'\nimport type {\n  AgentCandidateModelPort,\n  AgentCandidateProtectedModelActivation,\n  AgentCandidateProtectedModelReservation,\n  AgentCandidateProtectedModelSettlement,\n} from './types'\n\n/** Reservation fields supplied by a caller before Runtime resolves the model. */\nexport type AgentCandidateModelGrantRunReservationInput = Omit<\n  AgentCandidateModelGrantReserveInput,\n  'resolved'\n>\n\n/** Values available only while one protected model grant is active. */\nexport interface ProtectedAgentCandidateModelGrantContext {\n  readonly activation: AgentCandidateProtectedModelActivation\n  readonly reservation: AgentCandidateProtectedModelReservation\n  readonly resolved: AgentCandidateResolvedModel\n}\n\n/** Inputs for one protected grant scoped to one bounded caller unit. */\nexport interface RunProtectedAgentCandidateModelGrantOptions<TResult> {\n  /** Runtime port that validates and settles the evaluator-owned grant. */\n  readonly port: AgentCandidateModelPort\n  /** Provider-neutral model request resolved before any grant is reserved. */\n  readonly resolve: Parameters<AgentCandidateModelPort['resolve']>[0]\n  /** One bounded unit's immutable identity, attempt, expiry, and limits. */\n  readonly reserve: AgentCandidateModelGrantRunReservationInput\n  /** Must be no later than the reservation expiry. */\n  readonly deadlineAtMs: AgentCandidateModelGrantActivateInput['deadlineAtMs']\n  /** Execute exactly one bounded unit while the activated environment is valid. */\n  readonly execute: (context: ProtectedAgentCandidateModelGrantContext) => Promise<TResult>\n}\n\n/** Result and sealed settlement returned after one protected grant closes. */\nexport interface RunProtectedAgentCandidateModelGrantResult<TResult> {\n  readonly value: TResult\n  readonly resolved: AgentCandidateResolvedModel\n  readonly reservation: AgentCandidateProtectedModelReservation\n  readonly settlement: AgentCandidateProtectedModelSettlement\n}\n\nconst SETTLEMENT_RETRY_INITIAL_DELAY_MS = 25\nconst SETTLEMENT_RETRY_MAX_DELAY_MS = 1_000\n\n/**\n * Run one bounded unit under a protected model grant.\n *\n * Runtime owns the grant lifecycle; callers own the unit boundary and any\n * durable scheduling or accounting around it. A reserved grant is settled\n * after activation failure or callback failure, and the callback error is\n * preserved when settlement also fails.\n */\nexport async function runProtectedAgentCandidateModelGrant<TResult>(\n  options: RunProtectedAgentCandidateModelGrantOptions<TResult>,\n): Promise<RunProtectedAgentCandidateModelGrantResult<TResult>> {\n  if (typeof options.execute !== 'function') {\n    throw new TypeError('protected model grant execute callback is required')\n  }\n\n  const resolved = await options.port.resolve(options.resolve)\n  const reservation = await options.port.reserveGrant({\n    ...options.reserve,\n    resolved,\n  })\n\n  let value!: TResult\n  let executionError: unknown\n  let executionFailed = false\n  let activated = false\n  let reason: AgentCandidateModelGrantSettleInput['reason'] = 'preparation-failed'\n\n  try {\n    const activation = await options.port.activateGrant({\n      executionId: options.reserve.executionId,\n      preparationId: options.reserve.preparationId,\n      grantDigest: reservation.digest,\n      resolved,\n      deadlineAtMs: options.deadlineAtMs,\n    })\n    activated = true\n    value = await options.execute({ activation, reservation, resolved })\n    reason = 'completed'\n  } catch (error) {\n    executionError = error\n    executionFailed = true\n    if (activated) reason = 'failed'\n  }\n\n  let settlement: AgentCandidateProtectedModelSettlement\n  try {\n    settlement = await settleProtectedModelGrant(options, {\n      executionId: options.reserve.executionId,\n      preparationId: options.reserve.preparationId,\n      grantDigest: reservation.digest,\n      resolved,\n      reason,\n    })\n  } catch (settlementError) {\n    if (executionFailed) {\n      throw new AggregateError(\n        [executionError, settlementError],\n        'protected model execution failed and its grant did not settle',\n      )\n    }\n    throw settlementError\n  }\n\n  if (executionFailed) throw executionError\n  return { value, resolved, reservation, settlement }\n}\n\nasync function settleProtectedModelGrant<TResult>(\n  options: RunProtectedAgentCandidateModelGrantOptions<TResult>,\n  input: AgentCandidateModelGrantSettleInput,\n): Promise<AgentCandidateProtectedModelSettlement> {\n  let delayMs = SETTLEMENT_RETRY_INITIAL_DELAY_MS\n  for (;;) {\n    try {\n      return await options.port.settleGrant(input)\n    } catch (error) {\n      if (!isCandidateGrantDrainingError(error)) throw error\n      const remainingMs = options.deadlineAtMs - Date.now()\n      if (remainingMs <= 0) throw error\n      await waitForSettlementRetry(Math.min(delayMs, remainingMs))\n      if (Date.now() >= options.deadlineAtMs) throw error\n      delayMs = Math.min(delayMs * 2, SETTLEMENT_RETRY_MAX_DELAY_MS)\n    }\n  }\n}\n\nfunction waitForSettlementRetry(delayMs: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, delayMs))\n}\n\n/** Only the gateway's explicit draining state is retryable; auth and ledger errors fail closed. */\nfunction isCandidateGrantDrainingError(error: unknown): boolean {\n  if (typeof error !== 'object' || error === null) return false\n  const candidate = error as { code?: unknown; message?: unknown }\n  if (candidate.code === 'candidate_grant_draining') return true\n  return (\n    typeof candidate.message === 'string' && /\\bcandidate_grant_draining\\b/u.test(candidate.message)\n  )\n}\n","import { lstat } from 'node:fs/promises'\nimport { isAbsolute, resolve } from 'node:path'\nimport {\n  type AgentCandidateArtifactRef,\n  type AgentCandidateWorkspaceSnapshotEvidence,\n  agentCandidateArtifactRefSchema,\n  agentCandidateWorkspaceManifestMaterialSchema,\n  agentCandidateWorkspaceSnapshotEvidenceSchema,\n} from '@tangle-network/agent-interface'\nimport { verifiedArtifactChunks } from './artifact-streams'\nimport { canonicalCandidateBytes, deepFreezeCandidate } from './digest'\nimport type { AgentCandidateArtifactPort } from './types'\nimport { type AgentCandidateWorkspaceArchiveLimits, workspaceLimits } from './workspace-archive'\nimport {\n  type CaptureAgentCandidateWorkspaceOptions,\n  captureAgentCandidateWorkspace,\n  createAgentCandidateWorkspacePort,\n} from './workspace-archive-local'\n\n/** The canonical workspace evidence without manifest material or embedded file bytes. */\nexport type AgentCandidateWorkspaceSnapshotReferences = Pick<\n  AgentCandidateWorkspaceSnapshotEvidence,\n  'kind' | 'digest'\n> & {\n  readonly manifest: AgentCandidateArtifactRef\n  readonly archive: AgentCandidateArtifactRef\n}\n\nexport type CaptureAgentWorkspaceSnapshotOptions = Omit<\n  CaptureAgentCandidateWorkspaceOptions,\n  'artifactPersistence'\n> & {\n  artifactPersistence: NonNullable<CaptureAgentCandidateWorkspaceOptions['artifactPersistence']>\n}\n\n/**\n * Capture through the canonical archive owner and return references only.\n * The caller holds its existing private source workspace lease throughout capture, and binds\n * its public source provenance at the SDK boundary. Choose includeRepository and working-tree\n * explicitly when staged, dirty, deleted and unignored untracked Git files must travel.\n */\nexport async function captureAgentWorkspaceSnapshot(\n  root: string,\n  options: CaptureAgentWorkspaceSnapshotOptions,\n): Promise<AgentCandidateWorkspaceSnapshotReferences> {\n  if (!options?.artifactPersistence) {\n    throw new Error('portable workspace capture requires artifactPersistence')\n  }\n  const captured = await captureAgentCandidateWorkspace(root, {\n    ...options,\n    ...(options.limits ? { limits: { ...options.limits } } : {}),\n    artifactPersistence: { ...options.artifactPersistence },\n  })\n  return workspaceReferences(captured.snapshot)\n}\n\nexport interface MaterializeAgentWorkspaceSnapshotOptions {\n  snapshot: AgentCandidateWorkspaceSnapshotReferences\n  /** Authorizes each immutable reference for the accepted transfer owner; must stream reads. */\n  artifacts: AgentCandidateArtifactPort\n  /** Absent destination inside a caller-owned private allocation scope. */\n  destination: string\n  limits?: Partial<AgentCandidateWorkspaceArchiveLimits>\n  signal?: AbortSignal\n}\n\n/**\n * Restore canonical workspace references before an agent starts.\n * The SDK boundary validates source provenance and the accepted snapshot digest before this\n * byte-level composition runs. Artifact references identify content; the injected port owns\n * authorization. The archive owner verifies all files and Git state before publishing fresh\n * staging. Destinations present before or during artifact reads are refused. The caller owns\n * the allocation scope against other writers; Node directory rename is not atomic no-replace.\n */\nexport async function materializeAgentWorkspaceSnapshot(\n  input: MaterializeAgentWorkspaceSnapshotOptions,\n): Promise<void> {\n  input.signal?.throwIfAborted()\n  const snapshot = workspaceReferences(input.snapshot)\n  const limits = workspaceLimits(input.limits)\n  if (!input.artifacts.readStream) {\n    throw new Error('portable workspace restore requires an authorized readStream')\n  }\n  if (!isAbsolute(input.destination)) {\n    throw new Error('portable workspace destination must be absolute')\n  }\n  const destination = resolve(input.destination)\n  await assertAbsentDestination(destination)\n  for (const artifact of [snapshot.manifest, snapshot.archive]) {\n    if (artifact.byteLength > limits.maxArchiveBytes) {\n      throw new Error('portable workspace artifact exceeds maxArchiveBytes')\n    }\n  }\n  const manifest = await readArtifact(snapshot.manifest, input.artifacts, input.signal)\n  const material = agentCandidateWorkspaceManifestMaterialSchema.parse(\n    JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(manifest)),\n  )\n  if (!Buffer.from(canonicalCandidateBytes(material)).equals(manifest)) {\n    throw new Error('workspace manifest artifact is not the exact canonical manifest material')\n  }\n  const evidence = agentCandidateWorkspaceSnapshotEvidenceSchema.parse({ ...snapshot, material })\n  const archive = await readArtifact(snapshot.archive, input.artifacts, input.signal)\n  input.signal?.throwIfAborted()\n  // The artifact resolver may await remote storage. A destination that appeared while waiting\n  // belongs to its creator, even when it is empty.\n  await assertAbsentDestination(destination)\n  input.signal?.throwIfAborted()\n  await createAgentCandidateWorkspacePort({ limits }).materialize({\n    role: 'task',\n    snapshot: evidence,\n    archive,\n    destination,\n    ...(input.signal ? { signal: input.signal } : {}),\n  })\n}\n\nfunction workspaceReferences(\n  snapshot: Pick<\n    AgentCandidateWorkspaceSnapshotEvidence,\n    'kind' | 'digest' | 'manifest' | 'archive'\n  >,\n): AgentCandidateWorkspaceSnapshotReferences {\n  if (snapshot.kind !== 'agent-candidate-workspace-snapshot') {\n    throw new Error('portable workspace snapshot kind is invalid')\n  }\n  const manifest = agentCandidateArtifactRefSchema.parse(snapshot.manifest)\n  const archive = agentCandidateArtifactRefSchema.parse(snapshot.archive)\n  for (const artifact of [manifest, archive]) {\n    if (!Number.isSafeInteger(artifact.byteLength) || artifact.byteLength < 1) {\n      throw new Error('portable workspace artifacts require positive safe byte lengths')\n    }\n  }\n  if (snapshot.digest !== manifest.sha256) {\n    throw new Error('workspace digest must equal the canonical manifest hash')\n  }\n  return deepFreezeCandidate({ kind: snapshot.kind, digest: snapshot.digest, manifest, archive })\n}\n\nasync function readArtifact(\n  reference: AgentCandidateArtifactRef,\n  artifacts: AgentCandidateArtifactPort,\n  signal?: AbortSignal,\n): Promise<Buffer> {\n  const chunks: Buffer[] = []\n  for await (const chunk of verifiedArtifactChunks(reference, artifacts, signal)) {\n    chunks.push(Buffer.from(chunk))\n  }\n  return Buffer.concat(chunks)\n}\n\nasync function assertAbsentDestination(destination: string): Promise<void> {\n  try {\n    await lstat(destination)\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return\n    throw error\n  }\n  throw new Error('portable workspace destination already exists')\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwEA,SAAgB,0BACd,OAC6C;CAC7C,MAAM,SAAoC;EACxC,MAAM;EACN,iBAAiB;EACjB,SAAS,wBAAwB,MAAM,OAAO;EAC9C,MAAM,qBAAqB,MAAM,IAAI;EACrC,WAAW,MAAM;EACjB,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;EACtE,QAAQ,MAAM;CAChB;CACA,OAAO,yBAAyB,MAAM;AACxC;AAEA,SAAS,wBAAwB,QAA4D;CAC3F,IAAI,OAAO,SAAS,qBAClB,OAAO,2BAA2B,OAAO,OAAO;CAGlD,IAAI,OAAO,SAAS,WAClB,OAAO,mCAAmC,OAAO,OAAO;CAG1D,IAAI,OAAO,SAAS,iBAClB,MAAM,IAAI,MACR,yCAAyC,OAAQ,OAA8B,IAAI,GACrF;CAEF,IAAI,OAAO,MAAM,WAAW,GAC1B,MAAM,IAAI,MAAM,6DAA6D;CAE/E,IAAI,UAAU,uBAAuB,OAAO,MAAM,cAAc;CAChE,KAAK,MAAM,CAAC,OAAO,cAAc,OAAO,MAAM,QAAQ,GAAG;EACvD,MAAM,OAAO,2BAA2B,WAAW,gBAAgB,OAAO;EAC1E,UAAU,2BAA2B,SAAS,MAAM,gBAAgB,OAAO;CAC7E;CACA,OAAO,mCAAmC,OAAO;AACnD;AAEA,SAAS,qBAAqB,QAAqE;CACjG,IAAI,OAAO,SAAS,cAAc,OAAO,SAAS,SAAS,OAAO;CAClE,IAAI,OAAO,SAAS,gBAClB,MAAM,IAAI,MACR,sCAAsC,OAAQ,OAA8B,IAAI,GAClF;CAGF,MAAM,WAAW,kBAAkB,OAAO,SAAS,OAAO,WAAW;CACrE,MAAM,QAAQ,0BAA0B,SAAS,UAAU;CAC3D,IACE,MAAM,WAAW,OAAO,QAAQ,MAAM,UACtC,MAAM,eAAe,OAAO,QAAQ,MAAM,YAE1C,MAAM,IAAI,MAAM,oEAAoE;CAEtF,OAAO;EACL,MAAM;EACN,YAAY,OAAO;EACnB,YAAY,OAAO,QAAQ;EAC3B,UAAU,OAAO,QAAQ;EACzB,eAAe,OAAO,QAAQ;EAC9B,OAAO;GAAE,QAAQ;GAAmB,UAAU;EAAM;CACtD;AACF;;ACnGA,MAAM,EACJ,oBACA,aACA,gBACA,sBACA,eACA,WACA,aACA,UACA,WACA,oBACA,cACA,uBACA,yBACA,uBACA,eACA,gBACA,gBACA,WACA,cACE;;AAUJ,IAAa,wCAAb,MAAgG;CAC9F;CACA;CAEA,YAAY,SAAuD;EACjE,IAAI,QAAQ,UAAU,WAAW,GAC/B,MAAM,IAAI,MAAM,uDAAuD;EAEzE,KAAK,YAAY,QAAQ;EACzB,KAAK,MAAM,QAAQ,OAAO,KAAK;CACjC;CAEA,MAAM,SACJ,WAC6C;EAC7C,MAAM,QAAQ,UAAU,SAAS;EACjC,MAAM,MAAM,KAAK,WAAW,EAAE,WAAW,KAAK,CAAC;EAC/C,MAAM,YAAY,KAAK,UAAU,KAAK;EACtC,MAAM,WAAW,MAAM,mBAAmB,SAAS;EACnD,IAAI,UAAU;GACZ,eAAe,SAAS,OAAO,OAAO,SAAS;GAC/C,OAAO,sBAAsB,SAAS,OAAO,KAAK;EACpD;EACA,qBAAqB,MAAM,kBAAkB,KAAK,IAAI,CAAC;EACvD,MAAM,eAAe,MAAM,KAAK,aAAa,KAAK;EAClD,IAAI,cAAc,OAAO,cAAc,OAAO,YAAY;EAE1D,MAAM,QAAQ,SAAS,KAAK;EAM5B,IAAI,MALmB,oBAAoB,KAAK,WAAW,WAAW;GACpE,GAAG;GACH,OAAO;GACP,aAAa,YAAY,KAAK;EAChC,CAAC,GACa,OAAO,OAAO,OAAO;GAAE,UAAU;GAAM;GAAO;EAAM,CAAC;EAEnE,MAAM,SAAS,MAAM,UAAU,SAAS;EACxC,eAAe,OAAO,OAAO,OAAO,SAAS;EAC7C,OAAO,sBAAsB,OAAO,OAAO,KAAK;CAClD;CAEA,MAAM,WACJ,kBAC2D;EAC3D,OAAO,MAAM,KAAK,cAAc,eAAe,gBAAgB,CAAC;CAClE;CAEA,MAAM,oBACJ,gBAC6C;EAC7C,MAAM,QAAQ,UAAU,cAAc;EACtC,MAAM,YAAY,KAAK,UAAU,KAAK;EACtC,MAAM,SAAS,MAAM,UAAU,SAAS;EACxC,eAAe,OAAO,OAAO,OAAO,SAAS;EAC7C,YAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;EACpE,MAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;EACrD,IAAI,MAAM,UAAU,qBAClB,OAAO,OAAO,OAAO;GAAE,QAAQ;GAAO,OAAO;EAAoB,CAAC;EAEpE,IAAI,MAAM,QACR,MAAM,IAAI,MAAM,wEAAwE;EAE1F,qBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;EAa9D,IAAI,MAZiB,oBACnB,KAAK,WACL,KAAK,eAAe,OAAO,OAAO,CAAC,GACnC;GACE,MAAM;GACN,aAAa,OAAO,MAAM;GAC1B,SAAS,OAAO,MAAM;GACtB,qBAAqB,OAAO,MAAM;GAClC,OAAO;EACT,GACA,KAAK,iBAAiB,OAAO,KAAK,CACpC,GACY,OAAO,OAAO,OAAO;GAAE,QAAQ;GAAM,OAAO;EAAoB,CAAC;EAE7E,KAAI,MADiB,KAAK,gBAAgB,OAAO,KAAK,EAAA,CAC3C,UAAU,qBACnB,OAAO,OAAO,OAAO;GAAE,QAAQ;GAAO,OAAO;EAAoB,CAAC;EAEpE,MAAM,IAAI,MAAM,wEAAwE;CAC1F;CAEA,MAAM,cACJ,gBACA,QAC6C;EAC7C,MAAM,QAAQ,UAAU,cAAc;EACtC,MAAM,YAAY,KAAK,UAAU,KAAK;EACtC,MAAM,SAAS,MAAM,UAAU,SAAS;EACxC,eAAe,OAAO,OAAO,OAAO,SAAS;EAC7C,YAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;EACpE,MAAM,WAAW,eAAe,OAAO,OAAO,MAAM;EACpD,MAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;EACrD,IAAI,MAAM,QAAQ,OAAO,cAAc,MAAM,QAAQ,QAAQ;EAC7D,6BAA6B,MAAM,OAAO,QAAQ;EAClD,qBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;EAC9D,MAAM,aAAa,MAAM,UAAU,YAAY,IAAI;EAUnD,IAAI,MATiB,oBACnB,KAAK,WACL,KAAK,eAAe,OAAO,OAAO,UAAU,GAC5C;GACE,MAAM;GACN;EACF,GACA,KAAK,iBAAiB,OAAO,KAAK,CACpC,GACY,OAAO,OAAO,OAAO;GAAE,QAAQ;GAAM;EAAS,CAAC;EAC3D,MAAM,SAAS,MAAM,KAAK,gBAAgB,OAAO,KAAK;EACtD,IAAI,CAAC,OAAO,QACV,MAAM,IAAI,MAAM,iEAAiE;EAEnF,OAAO,cAAc,OAAO,QAAQ,QAAQ;CAC9C;CAEA,MAAM,OACJ,gBACA,yBAC8C;EAC9C,MAAM,QAAQ,UAAU,cAAc;EACtC,MAAM,iBAAiB,mBAAmB,uBAAuB;EACjE,MAAM,YAAY,KAAK,UAAU,KAAK;EACtC,MAAM,SAAS,MAAM,UAAU,SAAS;EACxC,eAAe,OAAO,OAAO,OAAO,SAAS;EAC7C,YAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;EACpE,MAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;EACrD,MAAM,SAAS,sBAAsB,MAAM,QAAQ,cAAc;EACjE,MAAM,eAAe,KAAK,aAAa,KAAK;EAC5C,MAAM,WAAW,MAAM,sBAAsB,YAAY;EACzD,IAAI,UAAU;GACZ,2BAA2B,UAAU,OAAO,OAAO,YAAY;GAC/D,4BAA4B,UAAU,QAAQ,YAAY;GAC1D,OAAO,eAAe,UAAU,cAAc;EAChD;EACA,qBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;EAS9D,IAAI,MARmB,oBACrB,KAAK,WACL,cACA,EACE,UAAU,OACZ,GACA,KAAK,iBAAiB,OAAO,KAAK,CACpC,GACc,OAAO,OAAO,OAAO;GAAE,UAAU;GAAM,UAAU;EAAO,CAAC;EACvE,MAAM,SAAS,MAAM,aAAa,YAAY;EAC9C,eAAe,QAAQ,OAAO,YAAY;EAC1C,2BAA2B,QAAQ,OAAO,OAAO,YAAY;EAC7D,4BAA4B,QAAQ,QAAQ,YAAY;EACxD,OAAO,eAAe,QAAQ,cAAc;CAC9C;CAEA,MAAM,eACJ,kBACA,UAC8C;EAC9C,MAAM,UAAU,eAAe,gBAAgB;EAC/C,MAAM,SAAS,MAAM,KAAK,cAAc,OAAO;EAC/C,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,gEAAgE;EAC7F,MAAM,YAAY,wBAAwB,OAAO,OAAO,OAAO,OAAO,QAAQ;EAC9E,IAAI,OAAO,QAAQ,4BAA4B,OAAO,QAAQ,SAAS;EACvE,MAAM,kBAAkB,OAAO,QAAQ,kBAAkB,UAAU;EACnE,IAAI,OAAO,UAAU,OAAO,eAAe,OAAO,UAAU,eAAe;EAC3E,mBAAmB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;EAE5D,IAAI,SAAS,OAAO;EACpB,IAAI,CAAC,QAAQ;GACX,MAAM,aAAa,OAAO,UAAU,YAAY,IAAI;GASpD,IAAI,MARmB,oBACrB,KAAK,WACL,KAAK,eAAe,OAAO,OAAO,UAAU,GAC5C;IACE,MAAM;IACN,UAAU;GACZ,CACF,GAEE,SAAS;QACJ;IACL,MAAM,SAAS,MAAM,KAAK,gBAAgB,OAAO,KAAK;IACtD,IAAI,CAAC,OAAO,QACV,MAAM,IAAI,MACR,0EACF;IAEF,4BAA4B,OAAO,QAAQ,SAAS;IACpD,SAAS,OAAO;GAClB;EACF;EAEA,MAAM,eAAe,KAAK,aAAa,OAAO;EAI9C,IAAI,MAHoB,oBAAoB,KAAK,WAAW,cAAc,EACxE,UAAU,OACZ,CAAC,GACc,OAAO,OAAO,OAAO;GAAE,UAAU;GAAM,UAAU;EAAO,CAAC;EACxE,MAAM,SAAS,MAAM,aAAa,YAAY;EAC9C,eAAe,QAAQ,SAAS,YAAY;EAC5C,2BAA2B,QAAQ,OAAO,OAAO,YAAY;EAC7D,4BAA4B,QAAQ,QAAQ,YAAY;EACxD,OAAO,eAAe,QAAQ,OAAO,cAAc;CACrD;CAEA,MAAc,cACZ,OAC2D;EAC3D,MAAM,YAAY,KAAK,UAAU,KAAK;EACtC,MAAM,SAAS,MAAM,mBAAmB,SAAS;EACjD,IAAI,CAAC,QAAQ,OAAO,KAAA;EACpB,eAAe,OAAO,OAAO,OAAO,SAAS;EAC7C,MAAM,eAAe,KAAK,aAAa,KAAK;EAC5C,MAAM,WAAW,MAAM,sBAAsB,YAAY;EAEzD,MAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;EACrD,IAAI,UAAU;GACZ,2BAA2B,UAAU,OAAO,OAAO,YAAY;GAC/D,IAAI,CAAC,MAAM,QACT,MAAM,IAAI,MACR,0CAA0C,aAAa,sBACzD;GAEF,4BAA4B,UAAU,MAAM,QAAQ,YAAY;EAClE;EACA,OAAO,cAAc,OAAO,OAAO,MAAM,OAAO,MAAM,QAAQ,QAAQ;CACxE;CAEA,MAAc,gBAAgB,OAG3B;EACD,MAAM,YAAY,KAAK,eAAe,OAAO,CAAC;EAC9C,MAAM,QAAQ,MAAM,wBAAwB,WAAW,KAAK;EAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,OAAO,UAAU;EACtC,IAAI,MAAM,SAAS,WAAW,OAAO;GAAE,OAAO;GAAW,QAAQ,MAAM;EAAS;EAChF,MAAM,aAAa,KAAK,eAAe,OAAO,CAAC;EAC/C,MAAM,SAAS,MAAM,wBAAwB,YAAY,KAAK;EAC9D,IAAI,CAAC,QAAQ,OAAO,EAAE,OAAO,oBAAoB;EACjD,IAAI,OAAO,SAAS,WAClB,MAAM,IAAI,MAAM,qCAAqC,WAAW,0BAA0B;EAE5F,OAAO;GAAE,OAAO;GAAqB,QAAQ,OAAO;EAAS;CAC/D;CAEA,MAAc,aACZ,OACmD;EACnD,IAAI,MAAM,YAAY,GAAG,OAAO,KAAA;EAChC,OAAO,eACL,OACA,MAAM,KAAK,cAAc;GACvB,aAAa,MAAM;GACnB,SAAS,MAAM,UAAU;EAC3B,CAAC,CACH;CACF;CAEA,iBAAyB,OAEvB;EACA,OAAO,EACL,wBAAwB;GACtB,qBAAqB,MAAM,kBAAkB,KAAK,IAAI,CAAC;GACvD,OAAO;EACT,EACF;CACF;CAEA,UAAkB,OAA8E;EAC9F,OAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,EAAE,YAAY;CAC9D;CAEA,aACE,OACQ;EACR,OAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,EAAE,eAAe;CACjE;CAEA,eACE,OACA,SACQ;EACR,OAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,EAAE,cAAc,QAAQ,MAAM;CAC9E;AACF;;;;;;;AAQA,eAAe,oBACb,WACA,aACA,QACA,UAGI,CAAC,GACa;CAClB,MAAM,gBAAgB,KAAK,WAAW,wBAAwB,QAAQ,IAAI,GAAG,WAAW,EAAE,KAAK;CAC/F,MAAM,SAAS,MAAM,KAAK,eAAe,MAAM,GAAK;CACpD,IAAI;EACF,MAAM,OAAO,UACX,OAAO,OAAO,CAAC,OAAO,KAAKA,0BAAwB,MAAM,CAAC,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CACjF;EACA,MAAM,OAAO,KAAK;CACpB,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;CAEA,IAAI,UAAU;CACd,IAAI;EACF,IAAI,QAAQ,oBAAoB,QAAQ,iBAAiB,MAAM,MAC7D,MAAM,IAAI,MAAM,2DAA2D;EAI7E,SAAS,eAAe,WAAW;EACnC,UAAU;EACV,MAAM,cAAc,SAAS;CAC/B,SAAS,OAAO;EACd,IAAI,CAAC,YAAY,OAAO,QAAQ,GAAG,MAAM;CAC3C,UAAU;EACR,MAAM,OAAO,aAAa,CAAC,CAAC,OAAO,UAAmB;GACpD,IAAI,CAAC,YAAY,OAAO,QAAQ,GAAG,MAAM;EAC3C,CAAC;CACH;CACA,OAAO;AACT;AAEA,eAAe,cAAc,WAAkC;CAC7D,MAAM,SAAS,MAAM,KAAK,WAAW,GAAG;CACxC,IAAI;EACF,MAAM,OAAO,KAAK;CACpB,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;AAEA,SAAS,YAAY,OAAgB,MAAuB;CAC1D,OACE,UAAU,QACV,OAAO,UAAU,YACjB,UAAU,SACT,MAA6B,SAAS;AAE3C;;;AC7YA,eAAsB,uCACpB,UACA,UAAgD,CAAC,GACpB;CAC7B,MAAM,eAAe,iCAAiC,QAAQ;CAC9D,MAAM,mBAAmB,QAAQ,oBAAoB,aAAa;CAClE,IAAI,mBAAmB,aAAa,kBAClC,MAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,sBAAsB,yBAAyB,gBAAgB;CACrE,MAAM,QAAQ,+BAA+B,QAAQ;CACrD,MAAM,UAAmC,CAAC;CAE1C,IAAI,MAAM,OAAO,SAAS,YAAY;EACpC,MAAM,cAAc,MAAM;EAC1B,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,wCAAwC;EAC1E,QAAQ,KACN,+BACE,YAAY;GACV,MAAM,SAAS,MAAM,MAAM,MAAM,OAAO,MAAM;IAC5C,aAAa,MAAM;IACnB,eAAe,YAAY;IAC3B,cAAc,YAAY;IAC1B,oBAAoB,YAAY;IAChC,QAAQ;GACV,CAAC;GACD,IAAI,OAAO,WAAW,QAAQ,OAAO,KAAK,MAAM,CAAC,CAAC,MAAM,QAAQ,QAAQ,QAAQ,GAC9E,MAAM,IAAI,MAAM,8DAA8D;EAElF,GACA,qBACA,0BACF,CACF;CACF;CAEA,QAAQ,KACN,+BACE,YAAY;EAeV,IAdmB,kCACjB,MAAM,MAAM,MAAM,OAAO,YAAY;GACnC,aAAa,MAAM;GACnB,eAAe,MAAM;GACrB,aAAa,MAAM,iBAAiB;GACpC,UAAU,MAAM;GAChB,QAAQ;EACV,CAAC,GACD;GACE,eAAe,MAAM;GACrB,aAAa,MAAM,iBAAiB;GACpC,OAAO,MAAM,cAAc;EAC7B,CAEW,CAAC,CAAC,MAAM,eAAe,GAClC,MAAM,IAAI,MAAM,0DAA0D;CAE9E,GACA,qBACA,4BACF,CACF;CAGA,MAAM,YAAW,MADK,QAAQ,WAAW,OAAO,EAAA,CAE7C,QAAQ,WAA4C,OAAO,WAAW,UAAU,CAAC,CACjF,KAAK,WAAW,OAAO,MAAM;CAChC,IAAI,SAAS,SAAS,GAAG;EACvB,kCAAkC,UAAU,iBAAiB;EAC7D,MAAM,IAAI,eAAe,UAAU,uCAAuC;CAC5E;CAEA,kCAAkC,UAAU,UAAU;CACtD,OAAO,OAAO,OAAO,EAAE,UAAU,KAAc,CAAC;AAClD;;ACtCA,MAAM,oCAAoC;AAC1C,MAAM,gCAAgC;;;;;;;;;AAUtC,eAAsB,qCACpB,SAC8D;CAC9D,IAAI,OAAO,QAAQ,YAAY,YAC7B,MAAM,IAAI,UAAU,oDAAoD;CAG1E,MAAM,WAAW,MAAM,QAAQ,KAAK,QAAQ,QAAQ,OAAO;CAC3D,MAAM,cAAc,MAAM,QAAQ,KAAK,aAAa;EAClD,GAAG,QAAQ;EACX;CACF,CAAC;CAED,IAAI;CACJ,IAAI;CACJ,IAAI,kBAAkB;CACtB,IAAI,YAAY;CAChB,IAAI,SAAwD;CAE5D,IAAI;EACF,MAAM,aAAa,MAAM,QAAQ,KAAK,cAAc;GAClD,aAAa,QAAQ,QAAQ;GAC7B,eAAe,QAAQ,QAAQ;GAC/B,aAAa,YAAY;GACzB;GACA,cAAc,QAAQ;EACxB,CAAC;EACD,YAAY;EACZ,QAAQ,MAAM,QAAQ,QAAQ;GAAE;GAAY;GAAa;EAAS,CAAC;EACnE,SAAS;CACX,SAAS,OAAO;EACd,iBAAiB;EACjB,kBAAkB;EAClB,IAAI,WAAW,SAAS;CAC1B;CAEA,IAAI;CACJ,IAAI;EACF,aAAa,MAAM,0BAA0B,SAAS;GACpD,aAAa,QAAQ,QAAQ;GAC7B,eAAe,QAAQ,QAAQ;GAC/B,aAAa,YAAY;GACzB;GACA;EACF,CAAC;CACH,SAAS,iBAAiB;EACxB,IAAI,iBACF,MAAM,IAAI,eACR,CAAC,gBAAgB,eAAe,GAChC,+DACF;EAEF,MAAM;CACR;CAEA,IAAI,iBAAiB,MAAM;CAC3B,OAAO;EAAE;EAAO;EAAU;EAAa;CAAW;AACpD;AAEA,eAAe,0BACb,SACA,OACiD;CACjD,IAAI,UAAU;CACd,SACE,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,YAAY,KAAK;CAC7C,SAAS,OAAO;EACd,IAAI,CAAC,8BAA8B,KAAK,GAAG,MAAM;EACjD,MAAM,cAAc,QAAQ,eAAe,KAAK,IAAI;EACpD,IAAI,eAAe,GAAG,MAAM;EAC5B,MAAM,uBAAuB,KAAK,IAAI,SAAS,WAAW,CAAC;EAC3D,IAAI,KAAK,IAAI,KAAK,QAAQ,cAAc,MAAM;EAC9C,UAAU,KAAK,IAAI,UAAU,GAAG,6BAA6B;CAC/D;AAEJ;AAEA,SAAS,uBAAuB,SAAgC;CAC9D,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,OAAO,CAAC;AAC9D;;AAGA,SAAS,8BAA8B,OAAyB;CAC9D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,YAAY;CAClB,IAAI,UAAU,SAAS,4BAA4B,OAAO;CAC1D,OACE,OAAO,UAAU,YAAY,YAAY,gCAAgC,KAAK,UAAU,OAAO;AAEnG;;;;;;;;AC7GA,eAAsB,8BACpB,MACA,SACoD;CACpD,IAAI,CAAC,SAAS,qBACZ,MAAM,IAAI,MAAM,yDAAyD;CAO3E,OAAO,qBAAoB,MALJ,+BAA+B,MAAM;EAC1D,GAAG;EACH,GAAI,QAAQ,SAAS,EAAE,QAAQ,EAAE,GAAG,QAAQ,OAAO,EAAE,IAAI,CAAC;EAC1D,qBAAqB,EAAE,GAAG,QAAQ,oBAAoB;CACxD,CAAC,EAAA,CACmC,QAAQ;AAC9C;;;;;;;;;AAoBA,eAAsB,kCACpB,OACe;CACf,MAAM,QAAQ,eAAe;CAC7B,MAAM,WAAW,oBAAoB,MAAM,QAAQ;CACnD,MAAM,SAAS,gBAAgB,MAAM,MAAM;CAC3C,IAAI,CAAC,MAAM,UAAU,YACnB,MAAM,IAAI,MAAM,8DAA8D;CAEhF,IAAI,CAAC,WAAW,MAAM,WAAW,GAC/B,MAAM,IAAI,MAAM,iDAAiD;CAEnE,MAAM,cAAc,QAAQ,MAAM,WAAW;CAC7C,MAAM,wBAAwB,WAAW;CACzC,KAAK,MAAM,YAAY,CAAC,SAAS,UAAU,SAAS,OAAO,GACzD,IAAI,SAAS,aAAa,OAAO,iBAC/B,MAAM,IAAI,MAAM,qDAAqD;CAGzE,MAAM,WAAW,MAAM,aAAa,SAAS,UAAU,MAAM,WAAW,MAAM,MAAM;CACpF,MAAM,WAAW,8CAA8C,MAC7D,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,CACvE;CACA,IAAI,CAAC,OAAO,KAAKC,0BAAwB,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,GACjE,MAAM,IAAI,MAAM,0EAA0E;CAE5F,MAAM,WAAW,8CAA8C,MAAM;EAAE,GAAG;EAAU;CAAS,CAAC;CAC9F,MAAM,UAAU,MAAM,aAAa,SAAS,SAAS,MAAM,WAAW,MAAM,MAAM;CAClF,MAAM,QAAQ,eAAe;CAG7B,MAAM,wBAAwB,WAAW;CACzC,MAAM,QAAQ,eAAe;CAC7B,MAAM,kCAAkC,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY;EAC9D,MAAM;EACN,UAAU;EACV;EACA;EACA,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;CACjD,CAAC;AACH;AAEA,SAAS,oBACP,UAI2C;CAC3C,IAAI,SAAS,SAAS,sCACpB,MAAM,IAAI,MAAM,6CAA6C;CAE/D,MAAM,WAAW,gCAAgC,MAAM,SAAS,QAAQ;CACxE,MAAM,UAAU,gCAAgC,MAAM,SAAS,OAAO;CACtE,KAAK,MAAM,YAAY,CAAC,UAAU,OAAO,GACvC,IAAI,CAAC,OAAO,cAAc,SAAS,UAAU,KAAK,SAAS,aAAa,GACtE,MAAM,IAAI,MAAM,iEAAiE;CAGrF,IAAI,SAAS,WAAW,SAAS,QAC/B,MAAM,IAAI,MAAM,yDAAyD;CAE3E,OAAO,oBAAoB;EAAE,MAAM,SAAS;EAAM,QAAQ,SAAS;EAAQ;EAAU;CAAQ,CAAC;AAChG;AAEA,eAAe,aACb,WACA,WACA,QACiB;CACjB,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,uBAAuB,WAAW,WAAW,MAAM,GAC3E,OAAO,KAAK,OAAO,KAAK,KAAK,CAAC;CAEhC,OAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,eAAe,wBAAwB,aAAoC;CACzE,IAAI;EACF,MAAM,MAAM,WAAW;CACzB,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU;EACxD,MAAM;CACR;CACA,MAAM,IAAI,MAAM,+CAA+C;AACjE"}