@tangle-network/agent-runtime 0.94.12 → 0.95.0

package/dist/chunk-D3H7F6L2.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/improvement/agentic-generator.ts"],"sourcesContent":["/**\n *\n * `agenticGenerator` — the full-agentic `CandidateGenerator`: the\n * `shots=N, sandbox=on` setting of the one `improvementDriver`. It runs a real\n * coding harness (claude / codex / opencode) inside the candidate worktree the\n * driver already created, letting the agent read the codebase + the research\n * report and make the change in place. The driver then commits the worktree\n * into a `CodeSurface`.\n *\n * Mechanism: identical to the proven Phase-2.8 in-process executor — spawn the\n * harness as a subprocess with `cwd` = the worktree, on the same filesystem,\n * so edits land in place (no sandbox-mount round-trip). `runLocalHarness` is\n * the verified primitive. The OUTER sandbox is the improvement loop's own\n * execution context; the generator does not nest a second sandbox per\n * candidate (which would reintroduce a host↔sandbox worktree-transport\n * problem that does not need solving here).\n *\n * `maxShots` is the DEPTH dial — a multi-shot verify-in-session loop, NOT the\n * kernel `runLoop`. Each shot runs one full harness session in the (persistent)\n * worktree; between shots the loop refines based on what the last shot produced:\n *   - empty tree   → \"you changed nothing, make the edits\" → retry\n *   - dirty + `verify` fails → feed the verifier's failure into the next shot\n *       (the worktree persists, so the harness RESUMES atop its own failing\n *       edits with the error in hand — no `--resume` session plumbing needed,\n *       and harness-agnostic across claude/codex/opencode)\n *   - dirty + `verify` ok (or no verifier configured) → return the candidate\n * A candidate that never verifies within `maxShots` is discarded (`applied:\n * false`), never shipped — if you configured a verifier, a non-passing tree is\n * not a candidate. With no verifier the legacy behavior holds: first dirty shot\n * is the candidate.\n *\n * @experimental\n */\n\nimport { spawnSync } from 'node:child_process'\nimport { createHash } from 'node:crypto'\nimport { existsSync, readFileSync, rmSync } from 'node:fs'\nimport { join, resolve, sep } from 'node:path'\nimport type {\n  AnalystFinding,\n  CostLedgerHandle,\n  CostReceipt,\n  CostReceiptInput,\n  MaximumCharge,\n} from '@tangle-network/agent-eval'\nimport type { AgentProfile, ReasoningEffort } from '@tangle-network/agent-interface'\nimport {\n  applyWorkspacePlan,\n  materializeProfile,\n  type WorkspacePlan,\n  type WorkspacePlanReceipt,\n} from '@tangle-network/agent-profile-materialize'\nimport {\n  type CodexExecutionEvidence,\n  type CodexTokenUsage,\n  harnessInvocation,\n  type LocalHarness,\n  type LocalHarnessResult,\n  runLocalHarness,\n} from '../mcp/local-harness'\nimport type { CandidateGenerator } from './improvement-driver'\n\nconst RAW_TRACE_ANALYST_ID = 'raw-trace-distiller'\nconst RAW_TRACE_AREA = 'raw-trace-context'\nconst RAW_TRACE_DIAGNOSIS_PATH = '.improve/raw-trace-diagnosis.md'\n\n/** Dedicated ephemeral root for generic author-profile files. Every declared\n * file must live below this root so cleanup cannot alter candidate-owned files. */\nexport const AGENTIC_PROFILE_RESOURCE_ROOT = '.agent-runtime-profile-resources'\n\n/** Outcome of verifying a candidate worktree. `feedback` (compiler errors,\n *  failing test output) is fed into the next shot when `ok` is false. */\nexport interface VerifyResult {\n  ok: boolean\n  feedback?: string\n}\n\n/** Verifies the edited worktree. Sync or async; throws only on a setup fault\n *  (a candidate that fails verification returns `{ok:false}`, it does not\n *  throw). */\nexport type Verifier = (worktreePath: string) => Promise<VerifyResult> | VerifyResult\n\nexport interface AgenticGeneratorShotReceipt {\n  readonly schemaVersion: 1\n  readonly generation: number | null\n  readonly candidateIndex: number | null\n  /** One-based shot number within this candidate. */\n  readonly shot: number\n  readonly maxShots: number\n  readonly harness: LocalHarness\n  readonly model: string | null\n  readonly reasoningEffort: ReasoningEffort | null\n  readonly promptSha256: `sha256:${string}`\n  readonly startedAt: string\n  readonly completedAt: string\n  readonly durationMs: number\n  readonly exitCode: number | null\n  readonly timedOut: boolean\n  readonly killedBySignal: NodeJS.Signals | null\n  readonly stdoutBytes: number | null\n  readonly stdoutSha256: `sha256:${string}` | null\n  readonly stderrBytes: number | null\n  readonly stderrSha256: `sha256:${string}` | null\n  readonly usage: CodexTokenUsage | null\n  /** Digest of the exact profile-file workspace plan applied for this shot. */\n  readonly profileWorkspacePlanDigest: string | null\n  readonly profileWorkspaceFileCount: number\n  /** Shared run-ledger call id for this exact shot. */\n  readonly costCallId: string | null\n  /** Whether dollars came from the provider, the pricing table, or are unknown. */\n  readonly costBasis: 'provider-reported' | 'estimated-pricing' | 'unknown'\n  readonly costUsd: number | null\n  /** True only for a provider-reported amount, never for a pricing estimate. */\n  readonly costUsdKnown: boolean\n  readonly evidence: CodexExecutionEvidence | null\n  readonly error: { readonly name: string; readonly message: string } | null\n}\n\n/** Frozen exact harness result for an author shot: full streams, process state,\n *  token usage, and execution-policy evidence.\n *  The `onShotCompleted` callback receives `null` when execution failed before\n *  the harness returned. */\nexport type AgenticGeneratorShotExecution = Readonly<\n  Omit<LocalHarnessResult, 'usage' | 'evidence'> & {\n    readonly usage?: Readonly<CodexTokenUsage>\n    readonly evidence?: Readonly<Omit<CodexExecutionEvidence, 'readDeniedPaths' | 'policy'>> & {\n      readonly readDeniedPaths: ReadonlyArray<string>\n      readonly policy: Readonly<CodexExecutionEvidence['policy']>\n    }\n  }\n>\n\n/** Worktree decision emitted before a completed shot is retried, accepted, or\n *  discarded. The callback runs while `worktreePath` is still available, so\n *  callers can persist the exact diff. */\nexport type AgenticGeneratorShotDisposition =\n  | {\n      readonly kind: 'clean'\n      readonly worktreePath: string\n    }\n  | {\n      readonly kind: 'rejected'\n      readonly worktreePath: string\n      readonly stage: 'raw-trace-evidence' | 'verification'\n      readonly feedback: string | null\n    }\n  | {\n      readonly kind: 'accepted'\n      readonly worktreePath: string\n      readonly verified: boolean\n    }\n  | {\n      readonly kind: 'setup-error'\n      readonly worktreePath: string\n      readonly stage: 'worktree-inspection' | 'raw-trace-evidence' | 'verification'\n      readonly error: { readonly name: string; readonly message: string }\n    }\n\nexport interface AgenticGeneratorOptions {\n  /** Local coding harness to run in the worktree. Default `claude`. */\n  harness?: LocalHarness\n  /** Author profile rendered through the canonical harness mapper. Required\n   *  for reproducible Codex so model and reasoning settings are explicit. */\n  profile?: AgentProfile\n  /** Run Codex with isolated configuration, exact prompt evidence, and required\n   *  terminal token usage. Requires `harness: 'codex'` and `profile`. */\n  codexReproducible?: boolean\n  /** Absolute paths reproducible Codex must not read. A function can derive\n   *  candidate-specific paths after the driver creates its worktree. */\n  codexReadDeniedPaths?: ReadonlyArray<string> | ((worktreePath: string) => ReadonlyArray<string>)\n  /** Awaited once for every attempted author shot, including process failures.\n   *  The second argument preserves the exact harness result, including stdout\n   *  and stderr, before worktree inspection or verification can reject the\n   *  shot. Throwing aborts the candidate so evidence persistence fails closed. */\n  onShotCompleted?: (\n    receipt: AgenticGeneratorShotReceipt,\n    execution: AgenticGeneratorShotExecution | null,\n  ) => void | Promise<void>\n  /** Awaited after worktree inspection and before the shot is accepted,\n   *  retried, or discarded. Throwing aborts the candidate. */\n  onShotDisposition?: (\n    receipt: AgenticGeneratorShotReceipt,\n    disposition: AgenticGeneratorShotDisposition,\n  ) => void | Promise<void>\n  /** Optional hard upper bound passed to the run-wide CostLedger before each\n   *  author shot. This MUST be enforced by the provider or executor; a planning\n   *  estimate is not an admissible bound. Omit for an uncapped ledger. A capped\n   *  ledger rejects before model dispatch when this is absent. */\n  maximumCharge?: MaximumCharge\n  /** Per-shot wall-clock timeout (ms). Default = `runLocalHarness` default (5m). */\n  timeoutMs?: number\n  /** Build the harness task prompt from the report + findings. Override for\n   *  domain phrasing; the default turns findings into a concrete coder task. */\n  buildPrompt?: (args: { report: unknown; findings: AnalystFinding[] }) => string\n  /** Verify the worktree after each dirtying shot. When set, a candidate that\n   *  fails verification is NOT returned — the failure feeds the next shot\n   *  (verify-in-session), up to `maxShots`; a candidate that never verifies is\n   *  discarded (`applied:false`), never shipped. Omitted ⇒ legacy behavior:\n   *  the first dirty shot is the candidate. See `commandVerifier`. */\n  verify?: Verifier\n  /** Test seam — inject the harness runner (defaults to `runLocalHarness`). */\n  runHarness?: typeof runLocalHarness\n  /** Test seam — inject the worktree-dirty check (defaults to `git status`). */\n  isDirty?: (worktreePath: string) => boolean\n}\n\n/** Full-agentic `CandidateGenerator` (the `shots=N, sandbox=on` setting): run a real coding harness inside the candidate worktree so the agent makes the change in place. */\nexport function agenticGenerator(opts: AgenticGeneratorOptions = {}): CandidateGenerator {\n  const harness = opts.harness ?? 'claude'\n  if (opts.codexReproducible && harness !== 'codex') {\n    throw new Error(\"agenticGenerator: codexReproducible requires harness 'codex'\")\n  }\n  if (opts.codexReproducible && !opts.profile) {\n    throw new Error('agenticGenerator: codexReproducible requires an explicit author profile')\n  }\n  if (opts.codexReadDeniedPaths && !opts.codexReproducible) {\n    throw new Error('agenticGenerator: codexReadDeniedPaths requires codexReproducible')\n  }\n  if (opts.maximumCharge && !opts.codexReproducible) {\n    throw new Error('agenticGenerator: maximumCharge requires codexReproducible')\n  }\n  const profileResourcePlan = opts.codexReproducible\n    ? authorProfileResourcePlan(opts.profile as AgentProfile)\n    : null\n  const buildPrompt = opts.buildPrompt ?? defaultBuildPrompt\n  const run = opts.runHarness ?? runLocalHarness\n  const dirty = opts.isDirty ?? worktreeDirty\n  const verify = opts.verify\n\n  return {\n    kind: `agentic:${harness}`,\n    // The seed repo + (in rawTraceContext mode) the raw-trace filesystem context\n    // are the change signal — an agentic coder proposes from them even when the\n    // distiller yielded zero findings. Without this, the improvementDriver's\n    // empty-findings guard short-circuits and generates ZERO candidates on the\n    // first (and, for a single-generation run, only) proposal round.\n    proposesWithoutFindings: true,\n    async generate({\n      worktreePath,\n      report,\n      findings,\n      maxShots,\n      signal,\n      generation,\n      candidateIndex,\n      costLedger,\n      costPhase,\n    }) {\n      let reproducibleCostLedger: CostLedgerHandle | undefined\n      if (opts.codexReproducible) {\n        if (!costLedger) {\n          throw new Error(\n            'agenticGenerator: reproducible Codex requires the run-wide CostLedger supplied by agent-eval 0.117+',\n          )\n        }\n        reproducibleCostLedger = costLedger\n      }\n      const basePrompt = appendProfileResourcePaths(\n        buildPrompt({ report, findings }),\n        profileResourcePlan,\n      )\n      const needsRawTraceEvidence = requiresRawTraceEvidence(findings)\n      const shots = Math.max(1, maxShots)\n      // Feedback appended to the base prompt for the NEXT shot — empty on shot 0.\n      let attemptNote = ''\n\n      for (let shot = 0; shot < shots; shot++) {\n        if (signal.aborted) break\n        const taskPrompt = attemptNote ? `${basePrompt}\\n\\n${attemptNote}` : basePrompt\n        const invocation = opts.profile\n          ? harnessInvocation(harness, opts.profile, taskPrompt, {\n              dangerouslySkipPermissions: harness === 'claude',\n              ...(opts.codexReproducible ? { codexReproducible: true } : {}),\n            })\n          : undefined\n        const exactPrompt = invocation?.prompt ?? taskPrompt\n        const readDeniedPaths =\n          typeof opts.codexReadDeniedPaths === 'function'\n            ? opts.codexReadDeniedPaths(worktreePath)\n            : opts.codexReadDeniedPaths\n        const startedAt = new Date()\n        let harnessResult: LocalHarnessResult | null = null\n        let profileWorkspaceReceipt: WorkspacePlanReceipt | null = null\n        let costReceipt: CostReceipt | null = null\n        let costCallId: string | null = null\n        let shotError: Error | null = null\n        try {\n          const execute = async (executionSignal: AbortSignal): Promise<LocalHarnessResult> => {\n            harnessResult = await withAuthorProfileResources(\n              profileResourcePlan,\n              worktreePath,\n              async (receipt) => {\n                profileWorkspaceReceipt = receipt\n                const result = await run({\n                  harness,\n                  cwd: worktreePath,\n                  taskPrompt,\n                  ...(invocation\n                    ? { invocation: { command: invocation.command, args: invocation.args } }\n                    : {}),\n                  // The candidate worktree is isolated and must be editable without an\n                  // interactive permission prompt. Other runLocalHarness callers remain\n                  // permission-safe by default.\n                  dangerouslySkipPermissions: harness === 'claude',\n                  ...(opts.codexReproducible ? { codexReproducible: true } : {}),\n                  ...(readDeniedPaths ? { codexReadDeniedPaths: readDeniedPaths } : {}),\n                  timeoutMs: opts.timeoutMs,\n                  signal: executionSignal,\n                })\n                // Assign before profile cleanup so a cleanup failure still\n                // settles the model usage already returned by the harness.\n                harnessResult = result\n                return result\n              },\n            )\n            const failure = shotFailure(harnessResult, exactPrompt, opts.codexReproducible === true)\n            if (failure) throw failure\n            return harnessResult\n          }\n\n          if (reproducibleCostLedger) {\n            const model = opts.profile?.model?.default\n            if (!model) {\n              throw new Error('agenticGenerator: reproducible Codex requires profile.model.default')\n            }\n            const paid = await reproducibleCostLedger.runPaidCall({\n              channel: 'driver',\n              phase: costPhase ?? 'search.proposal',\n              actor: `agentic-generator:${harness}`,\n              model,\n              tags: {\n                generation: String(generation ?? -1),\n                candidateIndex: String(candidateIndex ?? -1),\n                shot: String(shot + 1),\n              },\n              signal,\n              ...(opts.maximumCharge ? { maximumCharge: opts.maximumCharge } : {}),\n              execute,\n              receipt: (result) => costReceiptFromHarness(result, model),\n              receiptFromError: () =>\n                harnessResult?.usage ? costReceiptFromHarness(harnessResult, model) : undefined,\n            })\n            costCallId = paid.callId ?? null\n            costReceipt = paid.receipt ?? null\n            if (!paid.succeeded) throw paid.error\n            harnessResult = paid.value\n          } else {\n            harnessResult = await execute(signal)\n          }\n        } catch (cause) {\n          shotError = cause instanceof Error ? cause : new Error(String(cause))\n        }\n        const execution = shotExecutionSnapshot(harnessResult)\n        const receipt = shotReceipt({\n          generation,\n          candidateIndex,\n          shot,\n          maxShots: shots,\n          harness,\n          profile: opts.profile,\n          prompt: exactPrompt,\n          startedAt,\n          completedAt: new Date(),\n          result: execution,\n          profileWorkspaceReceipt,\n          costCallId,\n          costReceipt,\n          error: shotError,\n        })\n        await emitShotReceipt(opts.onShotCompleted, receipt, execution, shotError)\n\n        if (!execution) {\n          throw new Error('agenticGenerator: author shot completed without a harness result')\n        }\n\n        let worktreeChanged: boolean\n        try {\n          worktreeChanged = dirty(worktreePath)\n        } catch (cause) {\n          return rethrowShotSetupError(\n            opts.onShotDisposition,\n            receipt,\n            worktreePath,\n            'worktree-inspection',\n            cause,\n          )\n        }\n\n        // The worktree IS the signal: no edits ⇒ tell the next shot to act.\n        if (!worktreeChanged) {\n          await emitShotDisposition(opts.onShotDisposition, receipt, {\n            kind: 'clean',\n            worktreePath,\n          })\n          attemptNote = EMPTY_TREE_NOTE\n          continue\n        }\n\n        if (needsRawTraceEvidence) {\n          let problem: string | null\n          try {\n            problem = rawTraceEvidenceProblem(worktreePath, findings)\n          } catch (cause) {\n            return rethrowShotSetupError(\n              opts.onShotDisposition,\n              receipt,\n              worktreePath,\n              'raw-trace-evidence',\n              cause,\n            )\n          }\n          if (problem) {\n            await emitShotDisposition(opts.onShotDisposition, receipt, {\n              kind: 'rejected',\n              worktreePath,\n              stage: 'raw-trace-evidence',\n              feedback: problem,\n            })\n            attemptNote = problem\n            continue\n          }\n        }\n\n        // Dirty: with no verifier the diff IS the candidate (we trust the diff,\n        // not the harness's stdout). With a verifier the candidate must pass it.\n        if (!verify) {\n          await emitShotDisposition(opts.onShotDisposition, receipt, {\n            kind: 'accepted',\n            worktreePath,\n            verified: false,\n          })\n          return { applied: true, summary: summarize(findings) }\n        }\n        let result: VerifyResult\n        try {\n          result = await verify(worktreePath)\n        } catch (cause) {\n          return rethrowShotSetupError(\n            opts.onShotDisposition,\n            receipt,\n            worktreePath,\n            'verification',\n            cause,\n          )\n        }\n        if (result.ok) {\n          await emitShotDisposition(opts.onShotDisposition, receipt, {\n            kind: 'accepted',\n            worktreePath,\n            verified: true,\n          })\n          return { applied: true, summary: summarize(findings) }\n        }\n        await emitShotDisposition(opts.onShotDisposition, receipt, {\n          kind: 'rejected',\n          worktreePath,\n          stage: 'verification',\n          feedback: result.feedback ?? null,\n        })\n        // Dirty but failing — resume next shot atop these edits with the error.\n        attemptNote = failureNote(result.feedback)\n      }\n\n      // Shots exhausted: no verified candidate (or, sans verifier, no edits).\n      return { applied: false, summary: '' }\n    },\n  }\n}\n\nfunction authorProfileResourcePlan(profile: AgentProfile): WorkspacePlan | null {\n  const resources = profile.resources\n  if (!resources) return null\n  const unsupportedKinds = [\n    resources.tools?.length ? 'tools' : null,\n    resources.skills?.length ? 'skills' : null,\n    resources.agents?.length ? 'agents' : null,\n  ].filter((kind): kind is string => kind !== null)\n  if (unsupportedKinds.length > 0) {\n    throw new Error(\n      `agenticGenerator: reproducible Codex author resources support files only; unsupported: ${unsupportedKinds.join(', ')}`,\n    )\n  }\n  if (!resources.files || resources.files.length === 0) return null\n\n  const plan = materializeProfile(\n    {\n      name: profile.name,\n      resources: { files: resources.files },\n    },\n    'codex',\n  )\n  if (plan.unsupported.length > 0) {\n    throw new Error(\n      `agenticGenerator: author profile files could not be materialized: ${plan.unsupported.map((item) => item.reason).join('; ')}`,\n    )\n  }\n  if (Object.keys(plan.env).length > 0 || plan.flags.length > 0) {\n    throw new Error(\n      'agenticGenerator: generic author profile files unexpectedly changed spawn values',\n    )\n  }\n\n  const virtualRoot = resolve('/', AGENTIC_PROFILE_RESOURCE_ROOT)\n  const seen = new Set<string>()\n  for (const file of plan.files) {\n    const target = resolve('/', file.relPath)\n    if (!target.startsWith(`${virtualRoot}${sep}`)) {\n      throw new Error(\n        `agenticGenerator: author profile file must be below ${AGENTIC_PROFILE_RESOURCE_ROOT}: ${file.relPath}`,\n      )\n    }\n    if (seen.has(target)) {\n      throw new Error(`agenticGenerator: duplicate author profile file path: ${file.relPath}`)\n    }\n    seen.add(target)\n  }\n  return plan\n}\n\nfunction appendProfileResourcePaths(prompt: string, plan: WorkspacePlan | null): string {\n  if (!plan) return prompt\n  return [\n    prompt,\n    '',\n    'Profile resource files available for this shot:',\n    ...plan.files.map((file) => `- ${file.relPath}`),\n  ].join('\\n')\n}\n\nasync function withAuthorProfileResources<T>(\n  plan: WorkspacePlan | null,\n  worktreePath: string,\n  run: (receipt: WorkspacePlanReceipt | null) => Promise<T>,\n): Promise<T> {\n  if (!plan) return run(null)\n\n  const rootPath = resolve(worktreePath, AGENTIC_PROFILE_RESOURCE_ROOT)\n  if (existsSync(rootPath)) {\n    throw new Error(\n      `agenticGenerator: ephemeral author profile root already exists: ${AGENTIC_PROFILE_RESOURCE_ROOT}`,\n    )\n  }\n\n  let value: T | undefined\n  let primaryError: unknown\n  try {\n    const receipt = applyWorkspacePlan(plan, worktreePath)\n    value = await run(receipt)\n  } catch (cause) {\n    primaryError = cause\n  }\n\n  let cleanupError: unknown\n  try {\n    rmSync(rootPath, { recursive: true, force: true })\n    if (existsSync(rootPath)) {\n      throw new Error(\n        `agenticGenerator: ephemeral author profile root survived cleanup: ${AGENTIC_PROFILE_RESOURCE_ROOT}`,\n      )\n    }\n  } catch (cause) {\n    cleanupError = cause\n  }\n\n  if (primaryError !== undefined && cleanupError !== undefined) {\n    throw new AggregateError(\n      [primaryError, cleanupError],\n      'agenticGenerator: author shot and profile resource cleanup both failed',\n    )\n  }\n  if (primaryError !== undefined) throw primaryError\n  if (cleanupError !== undefined) throw cleanupError\n  return value as T\n}\n\nasync function emitShotReceipt(\n  callback: AgenticGeneratorOptions['onShotCompleted'],\n  receipt: AgenticGeneratorShotReceipt,\n  execution: AgenticGeneratorShotExecution | null,\n  primaryError: Error | null,\n): Promise<void> {\n  try {\n    await callback?.(receipt, execution)\n  } catch (callbackError) {\n    if (primaryError !== null) {\n      throw new AggregateError(\n        [primaryError, callbackError],\n        'agenticGenerator: author shot failed and its receipt could not be persisted',\n      )\n    }\n    throw callbackError\n  }\n  if (primaryError !== null) throw primaryError\n}\n\nasync function emitShotDisposition(\n  callback: AgenticGeneratorOptions['onShotDisposition'],\n  receipt: AgenticGeneratorShotReceipt,\n  disposition: AgenticGeneratorShotDisposition,\n): Promise<void> {\n  await callback?.(receipt, disposition)\n}\n\nasync function rethrowShotSetupError(\n  callback: AgenticGeneratorOptions['onShotDisposition'],\n  receipt: AgenticGeneratorShotReceipt,\n  worktreePath: string,\n  stage: Extract<AgenticGeneratorShotDisposition, { kind: 'setup-error' }>['stage'],\n  cause: unknown,\n): Promise<never> {\n  const error = cause instanceof Error ? cause : new Error(String(cause))\n  try {\n    await emitShotDisposition(callback, receipt, {\n      kind: 'setup-error',\n      worktreePath,\n      stage,\n      error: { name: error.name, message: error.message },\n    })\n  } catch (callbackError) {\n    throw new AggregateError(\n      [cause, callbackError],\n      'agenticGenerator: shot processing failed and its worktree disposition could not be persisted',\n    )\n  }\n  throw cause\n}\n\nfunction shotExecutionSnapshot(\n  result: LocalHarnessResult | null,\n): AgenticGeneratorShotExecution | null {\n  if (result === null) return null\n  const usage = result.usage ? Object.freeze({ ...result.usage }) : undefined\n  const evidence = result.evidence\n    ? Object.freeze({\n        ...result.evidence,\n        readDeniedPaths: Object.freeze([...result.evidence.readDeniedPaths]),\n        policy: Object.freeze({ ...result.evidence.policy }),\n      })\n    : undefined\n  return Object.freeze({\n    exitCode: result.exitCode,\n    stdout: result.stdout,\n    stderr: result.stderr,\n    killedBySignal: result.killedBySignal,\n    durationMs: result.durationMs,\n    timedOut: result.timedOut,\n    ...(usage ? { usage } : {}),\n    ...(evidence ? { evidence } : {}),\n  })\n}\n\nfunction shotReceipt(input: {\n  readonly generation: number | undefined\n  readonly candidateIndex: number | undefined\n  readonly shot: number\n  readonly maxShots: number\n  readonly harness: LocalHarness\n  readonly profile: AgentProfile | undefined\n  readonly prompt: string\n  readonly startedAt: Date\n  readonly completedAt: Date\n  readonly result: AgenticGeneratorShotExecution | null\n  readonly profileWorkspaceReceipt: WorkspacePlanReceipt | null\n  readonly costCallId: string | null\n  readonly costReceipt: CostReceipt | null\n  readonly error: unknown\n}): AgenticGeneratorShotReceipt {\n  const error = input.error\n    ? {\n        name: input.error instanceof Error ? input.error.name : 'Error',\n        message: input.error instanceof Error ? input.error.message : String(input.error),\n      }\n    : null\n  const result = input.result\n  const costBasis = costBasisFor(input.costReceipt)\n  return {\n    schemaVersion: 1,\n    generation: input.generation ?? null,\n    candidateIndex: input.candidateIndex ?? null,\n    shot: input.shot + 1,\n    maxShots: input.maxShots,\n    harness: input.harness,\n    model: input.profile?.model?.default ?? null,\n    reasoningEffort: input.profile?.model?.reasoningEffort ?? null,\n    promptSha256: sha256(input.prompt),\n    startedAt: input.startedAt.toISOString(),\n    completedAt: input.completedAt.toISOString(),\n    durationMs: result?.durationMs ?? input.completedAt.getTime() - input.startedAt.getTime(),\n    exitCode: result?.exitCode ?? null,\n    timedOut: result?.timedOut ?? false,\n    killedBySignal: result?.killedBySignal ?? null,\n    stdoutBytes: result ? Buffer.byteLength(result.stdout) : null,\n    stdoutSha256: result ? sha256(result.stdout) : null,\n    stderrBytes: result ? Buffer.byteLength(result.stderr) : null,\n    stderrSha256: result ? sha256(result.stderr) : null,\n    usage: result?.usage ? { ...result.usage } : null,\n    profileWorkspacePlanDigest: input.profileWorkspaceReceipt?.workspacePlanDigest ?? null,\n    profileWorkspaceFileCount: input.profileWorkspaceReceipt?.written.length ?? 0,\n    costCallId: input.costCallId,\n    costBasis,\n    costUsd: costBasis === 'unknown' ? null : (input.costReceipt?.costUsd ?? null),\n    costUsdKnown: costBasis === 'provider-reported',\n    evidence: result?.evidence\n      ? {\n          ...result.evidence,\n          readDeniedPaths: [...result.evidence.readDeniedPaths],\n          policy: { ...result.evidence.policy },\n        }\n      : null,\n    error,\n  }\n}\n\nfunction costBasisFor(receipt: CostReceipt | null): AgenticGeneratorShotReceipt['costBasis'] {\n  if (receipt === null || receipt.costUnknown) return 'unknown'\n  return receipt.actualCostUsd === undefined ? 'estimated-pricing' : 'provider-reported'\n}\n\nfunction shotFailure(\n  result: LocalHarnessResult,\n  exactPrompt: string,\n  codexReproducible: boolean,\n): Error | null {\n  if (result.timedOut) {\n    return new Error('agenticGenerator: author shot timed out')\n  }\n  if (result.killedBySignal) {\n    return new Error(`agenticGenerator: author shot was killed by ${result.killedBySignal}`)\n  }\n  if (result.exitCode !== 0) {\n    return new Error(`agenticGenerator: author shot exited with code ${String(result.exitCode)}`)\n  }\n  if (!codexReproducible) return null\n  if (!result.usage || !result.evidence) {\n    return new Error(\n      'agenticGenerator: reproducible Codex shot completed without usage or execution evidence',\n    )\n  }\n  const expectedPromptSha256 = sha256(exactPrompt).slice('sha256:'.length)\n  if (result.evidence.requestedPromptSha256 !== expectedPromptSha256) {\n    return new Error(\n      'agenticGenerator: reproducible Codex prompt evidence does not match the exact authored prompt',\n    )\n  }\n  return null\n}\n\nfunction costReceiptFromHarness(result: LocalHarnessResult, model: string): CostReceiptInput {\n  if (!result.usage) {\n    throw new Error('agenticGenerator: author shot did not report terminal token usage')\n  }\n  return {\n    model,\n    inputTokens: result.usage.inputTokens - result.usage.cachedInputTokens,\n    outputTokens: result.usage.outputTokens,\n    ...(result.usage.cachedInputTokens > 0 ? { cachedTokens: result.usage.cachedInputTokens } : {}),\n  }\n}\n\nfunction sha256(value: string): `sha256:${string}` {\n  return `sha256:${createHash('sha256').update(value).digest('hex')}`\n}\n\n/** Turn the analyst's findings (+ optional report) into a concrete coder task. */\nfunction defaultBuildPrompt(args: { report: unknown; findings: AnalystFinding[] }): string {\n  const lines: string[] = [\n    'You are improving this codebase based on an evaluation analysis.',\n    'Make the smallest set of edits that addresses the findings below, then stop.',\n    'Do not change unrelated code. Do not commit — leave changes in the working tree.',\n    '',\n    'Findings:',\n  ]\n  for (const f of args.findings) {\n    const where = f.subject ? ` [${f.subject}]` : ''\n    lines.push(`- (${f.severity})${where} ${f.claim}`)\n    if (f.recommended_action) lines.push(`    → ${f.recommended_action}`)\n  }\n  if (requiresRawTraceEvidence(args.findings)) {\n    lines.push(\n      '',\n      'Raw trace evidence requirement:',\n      `- Inspect at least one raw trace path named above before editing.`,\n      `- Write ${RAW_TRACE_DIAGNOSIS_PATH} in this worktree.`,\n      '- Include the exact trace path(s) inspected, the failure mechanism, and the code change made.',\n      '- A candidate without this file, or with only this file changed, is discarded.',\n    )\n  }\n  return lines.join('\\n')\n}\n\nconst EMPTY_TREE_NOTE =\n  'NOTE: your previous attempt left the working tree unchanged. Make the concrete file edits now.'\n\n/** Next-shot feedback when the worktree is dirty but failed verification. The\n *  edits persist on disk, so the harness resumes atop them — tell it to fix in\n *  place, not start over. Verifier detail is truncated to keep the prompt bounded. */\nfunction failureNote(feedback?: string): string {\n  const detail = feedback?.trim()\n  return [\n    'NOTE: your edits are in the working tree but verification FAILED.',\n    'Fix the problem in place — build on your existing edits, do not revert them.',\n    detail ? `Verifier output:\\n${truncate(detail, 4000)}` : 'No verifier detail was captured.',\n  ].join('\\n')\n}\n\nfunction rawTraceEvidenceProblem(worktreePath: string, findings: AnalystFinding[]): string | null {\n  const changedPaths = worktreeChangedPaths(worktreePath)\n  const substantive = changedPaths.filter((path) => path !== RAW_TRACE_DIAGNOSIS_PATH)\n  if (substantive.length === 0) {\n    return [\n      `NOTE: raw-trace mode requires a real code/config edit in addition to ${RAW_TRACE_DIAGNOSIS_PATH}.`,\n      'Your previous attempt only changed the diagnosis artifact. Inspect the cited traces and make the causal code change.',\n    ].join('\\n')\n  }\n\n  const diagnosisPath = join(worktreePath, RAW_TRACE_DIAGNOSIS_PATH)\n  if (!existsSync(diagnosisPath)) {\n    return [\n      `NOTE: raw-trace mode requires ${RAW_TRACE_DIAGNOSIS_PATH}.`,\n      'Before retrying, inspect at least one cited spans.jsonl/cached-result.json/artifact path, then write the diagnosis file with the exact path, failure mechanism, and code change.',\n    ].join('\\n')\n  }\n\n  const body = readFileSync(diagnosisPath, 'utf8')\n  const evidencePaths = traceEvidencePaths(findings)\n  if (evidencePaths.length > 0 && !evidencePaths.some((path) => body.includes(path))) {\n    return [\n      `${RAW_TRACE_DIAGNOSIS_PATH} exists, but it does not cite any exact raw trace path from the findings.`,\n      `Cite at least one of these inspected paths exactly: ${evidencePaths.slice(0, 5).join(', ')}`,\n    ].join('\\n')\n  }\n\n  return null\n}\n\nfunction requiresRawTraceEvidence(findings: AnalystFinding[]): boolean {\n  return findings.some((finding) => {\n    const f = finding as unknown as Record<string, unknown>\n    return f.analyst_id === RAW_TRACE_ANALYST_ID || f.area === RAW_TRACE_AREA\n  })\n}\n\nfunction traceEvidencePaths(findings: AnalystFinding[]): string[] {\n  const out: string[] = []\n  for (const finding of findings) {\n    const refs = (finding as unknown as { evidence_refs?: unknown }).evidence_refs\n    if (!Array.isArray(refs)) continue\n    for (const ref of refs) {\n      if (!ref || typeof ref !== 'object') continue\n      const uri = (ref as { uri?: unknown }).uri\n      if (typeof uri === 'string' && uri.length > 0) out.push(uri)\n    }\n  }\n  return [...new Set(out)]\n}\n\n/** A `Verifier` that runs a command in the worktree: exit 0 ⇒ ok, any other\n *  exit ⇒ failed with stdout+stderr as feedback. The common case — verify by\n *  `tsc --noEmit`, `pnpm build`, or a test command. A timeout is treated as a\n *  FAILED candidate (a change that hangs the build is a bad change); a missing\n *  binary or spawn fault throws (a setup bug, not a failed candidate — no\n *  silent fallback). */\nexport function commandVerifier(\n  command: string,\n  args: string[] = [],\n  timeoutMs = 300_000,\n): Verifier {\n  return (worktreePath: string): VerifyResult => {\n    const result = spawnSync(command, args, {\n      cwd: worktreePath,\n      encoding: 'utf-8',\n      timeout: timeoutMs,\n    })\n    if (result.signal) {\n      return {\n        ok: false,\n        feedback: `verifier '${command}' killed by ${result.signal} (likely timeout after ${timeoutMs}ms)`,\n      }\n    }\n    if (result.error) {\n      const code = (result.error as NodeJS.ErrnoException).code\n      if (code === 'ENOENT') {\n        throw new Error(\n          `commandVerifier: '${command}' not found in PATH (setup bug, not a failed candidate)`,\n        )\n      }\n      throw new Error(`commandVerifier: '${command}' failed to spawn: ${result.error.message}`)\n    }\n    if (result.status === 0) return { ok: true }\n    const out = `${result.stdout ?? ''}${result.stderr ?? ''}`.trim()\n    return { ok: false, feedback: out.length > 0 ? out : `exit ${result.status}` }\n  }\n}\n\n/** A one-line summary for the commit message, derived from the findings. */\nfunction summarize(findings: AnalystFinding[]): string {\n  if (findings.length === 0) return 'agentic improvement'\n  if (findings.length === 1) return `agentic: ${truncate(findings[0]!.claim, 64)}`\n  return `agentic: ${findings.length} findings addressed`\n}\n\nfunction truncate(s: string, n: number): string {\n  return s.length <= n ? s : `${s.slice(0, n - 1)}…`\n}\n\n/** Non-empty `git status --porcelain` ⇒ the harness changed the worktree.\n *  Fails loud: the worktree is a fresh checkout, so a git error here means\n *  something is genuinely broken (git missing, corrupt index, killed mid-run).\n *  Folding that into `false` would silently discard a candidate and mask the\n *  real failure — forbidden by the no-silent-fallbacks doctrine. */\nfunction worktreeDirty(worktreePath: string): boolean {\n  return worktreeChangedPaths(worktreePath).length > 0\n}\n\nfunction worktreeChangedPaths(worktreePath: string): string[] {\n  const result = spawnSync('git', ['status', '--porcelain', '--untracked-files=all'], {\n    cwd: worktreePath,\n    encoding: 'utf-8',\n  })\n  if (result.error) {\n    throw new Error(\n      `agenticGenerator: git status failed to spawn in ${worktreePath}: ${result.error.message}`,\n    )\n  }\n  if (result.status !== 0) {\n    throw new Error(\n      `agenticGenerator: git status exited ${result.status} in ${worktreePath}: ${result.stderr.trim()}`,\n    )\n  }\n  return result.stdout\n    .split('\\n')\n    .map((line) => line.trim())\n    .filter((line) => line.length > 0)\n    .map((line) => line.slice(3).trim())\n}\n"],"mappings":";;;;;;AAkCA,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAC3B,SAAS,YAAY,cAAc,cAAc;AACjD,SAAS,MAAM,SAAS,WAAW;AASnC;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAWP,IAAM,uBAAuB;AAC7B,IAAM,iBAAiB;AACvB,IAAM,2BAA2B;AAI1B,IAAM,gCAAgC;AA2ItC,SAAS,iBAAiB,OAAgC,CAAC,GAAuB;AACvF,QAAM,UAAU,KAAK,WAAW;AAChC,MAAI,KAAK,qBAAqB,YAAY,SAAS;AACjD,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AACA,MAAI,KAAK,qBAAqB,CAAC,KAAK,SAAS;AAC3C,UAAM,IAAI,MAAM,yEAAyE;AAAA,EAC3F;AACA,MAAI,KAAK,wBAAwB,CAAC,KAAK,mBAAmB;AACxD,UAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AACA,MAAI,KAAK,iBAAiB,CAAC,KAAK,mBAAmB;AACjD,UAAM,IAAI,MAAM,4DAA4D;AAAA,EAC9E;AACA,QAAM,sBAAsB,KAAK,oBAC7B,0BAA0B,KAAK,OAAuB,IACtD;AACJ,QAAM,cAAc,KAAK,eAAe;AACxC,QAAM,MAAM,KAAK,cAAc;AAC/B,QAAM,QAAQ,KAAK,WAAW;AAC9B,QAAM,SAAS,KAAK;AAEpB,SAAO;AAAA,IACL,MAAM,WAAW,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMxB,yBAAyB;AAAA,IACzB,MAAM,SAAS;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,GAAG;AACD,UAAI;AACJ,UAAI,KAAK,mBAAmB;AAC1B,YAAI,CAAC,YAAY;AACf,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACA,iCAAyB;AAAA,MAC3B;AACA,YAAM,aAAa;AAAA,QACjB,YAAY,EAAE,QAAQ,SAAS,CAAC;AAAA,QAChC;AAAA,MACF;AACA,YAAM,wBAAwB,yBAAyB,QAAQ;AAC/D,YAAM,QAAQ,KAAK,IAAI,GAAG,QAAQ;AAElC,UAAI,cAAc;AAElB,eAAS,OAAO,GAAG,OAAO,OAAO,QAAQ;AACvC,YAAI,OAAO,QAAS;AACpB,cAAM,aAAa,cAAc,GAAG,UAAU;AAAA;AAAA,EAAO,WAAW,KAAK;AACrE,cAAM,aAAa,KAAK,UACpB,kBAAkB,SAAS,KAAK,SAAS,YAAY;AAAA,UACnD,4BAA4B,YAAY;AAAA,UACxC,GAAI,KAAK,oBAAoB,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAAA,QAC9D,CAAC,IACD;AACJ,cAAM,cAAc,YAAY,UAAU;AAC1C,cAAM,kBACJ,OAAO,KAAK,yBAAyB,aACjC,KAAK,qBAAqB,YAAY,IACtC,KAAK;AACX,cAAM,YAAY,oBAAI,KAAK;AAC3B,YAAI,gBAA2C;AAC/C,YAAI,0BAAuD;AAC3D,YAAI,cAAkC;AACtC,YAAI,aAA4B;AAChC,YAAI,YAA0B;AAC9B,YAAI;AACF,gBAAM,UAAU,OAAO,oBAA8D;AACnF,4BAAgB,MAAM;AAAA,cACpB;AAAA,cACA;AAAA,cACA,OAAOA,aAAY;AACjB,0CAA0BA;AAC1B,sBAAMC,UAAS,MAAM,IAAI;AAAA,kBACvB;AAAA,kBACA,KAAK;AAAA,kBACL;AAAA,kBACA,GAAI,aACA,EAAE,YAAY,EAAE,SAAS,WAAW,SAAS,MAAM,WAAW,KAAK,EAAE,IACrE,CAAC;AAAA;AAAA;AAAA;AAAA,kBAIL,4BAA4B,YAAY;AAAA,kBACxC,GAAI,KAAK,oBAAoB,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAAA,kBAC5D,GAAI,kBAAkB,EAAE,sBAAsB,gBAAgB,IAAI,CAAC;AAAA,kBACnE,WAAW,KAAK;AAAA,kBAChB,QAAQ;AAAA,gBACV,CAAC;AAGD,gCAAgBA;AAChB,uBAAOA;AAAA,cACT;AAAA,YACF;AACA,kBAAM,UAAU,YAAY,eAAe,aAAa,KAAK,sBAAsB,IAAI;AACvF,gBAAI,QAAS,OAAM;AACnB,mBAAO;AAAA,UACT;AAEA,cAAI,wBAAwB;AAC1B,kBAAM,QAAQ,KAAK,SAAS,OAAO;AACnC,gBAAI,CAAC,OAAO;AACV,oBAAM,IAAI,MAAM,qEAAqE;AAAA,YACvF;AACA,kBAAM,OAAO,MAAM,uBAAuB,YAAY;AAAA,cACpD,SAAS;AAAA,cACT,OAAO,aAAa;AAAA,cACpB,OAAO,qBAAqB,OAAO;AAAA,cACnC;AAAA,cACA,MAAM;AAAA,gBACJ,YAAY,OAAO,cAAc,EAAE;AAAA,gBACnC,gBAAgB,OAAO,kBAAkB,EAAE;AAAA,gBAC3C,MAAM,OAAO,OAAO,CAAC;AAAA,cACvB;AAAA,cACA;AAAA,cACA,GAAI,KAAK,gBAAgB,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;AAAA,cAClE;AAAA,cACA,SAAS,CAACA,YAAW,uBAAuBA,SAAQ,KAAK;AAAA,cACzD,kBAAkB,MAChB,eAAe,QAAQ,uBAAuB,eAAe,KAAK,IAAI;AAAA,YAC1E,CAAC;AACD,yBAAa,KAAK,UAAU;AAC5B,0BAAc,KAAK,WAAW;AAC9B,gBAAI,CAAC,KAAK,UAAW,OAAM,KAAK;AAChC,4BAAgB,KAAK;AAAA,UACvB,OAAO;AACL,4BAAgB,MAAM,QAAQ,MAAM;AAAA,UACtC;AAAA,QACF,SAAS,OAAO;AACd,sBAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,QACtE;AACA,cAAM,YAAY,sBAAsB,aAAa;AACrD,cAAM,UAAU,YAAY;AAAA,UAC1B;AAAA,UACA;AAAA,UACA;AAAA,UACA,UAAU;AAAA,UACV;AAAA,UACA,SAAS,KAAK;AAAA,UACd,QAAQ;AAAA,UACR;AAAA,UACA,aAAa,oBAAI,KAAK;AAAA,UACtB,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO;AAAA,QACT,CAAC;AACD,cAAM,gBAAgB,KAAK,iBAAiB,SAAS,WAAW,SAAS;AAEzE,YAAI,CAAC,WAAW;AACd,gBAAM,IAAI,MAAM,kEAAkE;AAAA,QACpF;AAEA,YAAI;AACJ,YAAI;AACF,4BAAkB,MAAM,YAAY;AAAA,QACtC,SAAS,OAAO;AACd,iBAAO;AAAA,YACL,KAAK;AAAA,YACL;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAGA,YAAI,CAAC,iBAAiB;AACpB,gBAAM,oBAAoB,KAAK,mBAAmB,SAAS;AAAA,YACzD,MAAM;AAAA,YACN;AAAA,UACF,CAAC;AACD,wBAAc;AACd;AAAA,QACF;AAEA,YAAI,uBAAuB;AACzB,cAAI;AACJ,cAAI;AACF,sBAAU,wBAAwB,cAAc,QAAQ;AAAA,UAC1D,SAAS,OAAO;AACd,mBAAO;AAAA,cACL,KAAK;AAAA,cACL;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,YACF;AAAA,UACF;AACA,cAAI,SAAS;AACX,kBAAM,oBAAoB,KAAK,mBAAmB,SAAS;AAAA,cACzD,MAAM;AAAA,cACN;AAAA,cACA,OAAO;AAAA,cACP,UAAU;AAAA,YACZ,CAAC;AACD,0BAAc;AACd;AAAA,UACF;AAAA,QACF;AAIA,YAAI,CAAC,QAAQ;AACX,gBAAM,oBAAoB,KAAK,mBAAmB,SAAS;AAAA,YACzD,MAAM;AAAA,YACN;AAAA,YACA,UAAU;AAAA,UACZ,CAAC;AACD,iBAAO,EAAE,SAAS,MAAM,SAAS,UAAU,QAAQ,EAAE;AAAA,QACvD;AACA,YAAI;AACJ,YAAI;AACF,mBAAS,MAAM,OAAO,YAAY;AAAA,QACpC,SAAS,OAAO;AACd,iBAAO;AAAA,YACL,KAAK;AAAA,YACL;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,OAAO,IAAI;AACb,gBAAM,oBAAoB,KAAK,mBAAmB,SAAS;AAAA,YACzD,MAAM;AAAA,YACN;AAAA,YACA,UAAU;AAAA,UACZ,CAAC;AACD,iBAAO,EAAE,SAAS,MAAM,SAAS,UAAU,QAAQ,EAAE;AAAA,QACvD;AACA,cAAM,oBAAoB,KAAK,mBAAmB,SAAS;AAAA,UACzD,MAAM;AAAA,UACN;AAAA,UACA,OAAO;AAAA,UACP,UAAU,OAAO,YAAY;AAAA,QAC/B,CAAC;AAED,sBAAc,YAAY,OAAO,QAAQ;AAAA,MAC3C;AAGA,aAAO,EAAE,SAAS,OAAO,SAAS,GAAG;AAAA,IACvC;AAAA,EACF;AACF;AAEA,SAAS,0BAA0B,SAA6C;AAC9E,QAAM,YAAY,QAAQ;AAC1B,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,mBAAmB;AAAA,IACvB,UAAU,OAAO,SAAS,UAAU;AAAA,IACpC,UAAU,QAAQ,SAAS,WAAW;AAAA,IACtC,UAAU,QAAQ,SAAS,WAAW;AAAA,EACxC,EAAE,OAAO,CAAC,SAAyB,SAAS,IAAI;AAChD,MAAI,iBAAiB,SAAS,GAAG;AAC/B,UAAM,IAAI;AAAA,MACR,0FAA0F,iBAAiB,KAAK,IAAI,CAAC;AAAA,IACvH;AAAA,EACF;AACA,MAAI,CAAC,UAAU,SAAS,UAAU,MAAM,WAAW,EAAG,QAAO;AAE7D,QAAM,OAAO;AAAA,IACX;AAAA,MACE,MAAM,QAAQ;AAAA,MACd,WAAW,EAAE,OAAO,UAAU,MAAM;AAAA,IACtC;AAAA,IACA;AAAA,EACF;AACA,MAAI,KAAK,YAAY,SAAS,GAAG;AAC/B,UAAM,IAAI;AAAA,MACR,qEAAqE,KAAK,YAAY,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,IAC7H;AAAA,EACF;AACA,MAAI,OAAO,KAAK,KAAK,GAAG,EAAE,SAAS,KAAK,KAAK,MAAM,SAAS,GAAG;AAC7D,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,cAAc,QAAQ,KAAK,6BAA6B;AAC9D,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,QAAQ,KAAK,OAAO;AAC7B,UAAM,SAAS,QAAQ,KAAK,KAAK,OAAO;AACxC,QAAI,CAAC,OAAO,WAAW,GAAG,WAAW,GAAG,GAAG,EAAE,GAAG;AAC9C,YAAM,IAAI;AAAA,QACR,uDAAuD,6BAA6B,KAAK,KAAK,OAAO;AAAA,MACvG;AAAA,IACF;AACA,QAAI,KAAK,IAAI,MAAM,GAAG;AACpB,YAAM,IAAI,MAAM,yDAAyD,KAAK,OAAO,EAAE;AAAA,IACzF;AACA,SAAK,IAAI,MAAM;AAAA,EACjB;AACA,SAAO;AACT;AAEA,SAAS,2BAA2B,QAAgB,MAAoC;AACtF,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,KAAK,MAAM,IAAI,CAAC,SAAS,KAAK,KAAK,OAAO,EAAE;AAAA,EACjD,EAAE,KAAK,IAAI;AACb;AAEA,eAAe,2BACb,MACA,cACA,KACY;AACZ,MAAI,CAAC,KAAM,QAAO,IAAI,IAAI;AAE1B,QAAM,WAAW,QAAQ,cAAc,6BAA6B;AACpE,MAAI,WAAW,QAAQ,GAAG;AACxB,UAAM,IAAI;AAAA,MACR,mEAAmE,6BAA6B;AAAA,IAClG;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,UAAM,UAAU,mBAAmB,MAAM,YAAY;AACrD,YAAQ,MAAM,IAAI,OAAO;AAAA,EAC3B,SAAS,OAAO;AACd,mBAAe;AAAA,EACjB;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,UAAU,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACjD,QAAI,WAAW,QAAQ,GAAG;AACxB,YAAM,IAAI;AAAA,QACR,qEAAqE,6BAA6B;AAAA,MACpG;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,mBAAe;AAAA,EACjB;AAEA,MAAI,iBAAiB,UAAa,iBAAiB,QAAW;AAC5D,UAAM,IAAI;AAAA,MACR,CAAC,cAAc,YAAY;AAAA,MAC3B;AAAA,IACF;AAAA,EACF;AACA,MAAI,iBAAiB,OAAW,OAAM;AACtC,MAAI,iBAAiB,OAAW,OAAM;AACtC,SAAO;AACT;AAEA,eAAe,gBACb,UACA,SACA,WACA,cACe;AACf,MAAI;AACF,UAAM,WAAW,SAAS,SAAS;AAAA,EACrC,SAAS,eAAe;AACtB,QAAI,iBAAiB,MAAM;AACzB,YAAM,IAAI;AAAA,QACR,CAAC,cAAc,aAAa;AAAA,QAC5B;AAAA,MACF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACA,MAAI,iBAAiB,KAAM,OAAM;AACnC;AAEA,eAAe,oBACb,UACA,SACA,aACe;AACf,QAAM,WAAW,SAAS,WAAW;AACvC;AAEA,eAAe,sBACb,UACA,SACA,cACA,OACA,OACgB;AAChB,QAAM,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACtE,MAAI;AACF,UAAM,oBAAoB,UAAU,SAAS;AAAA,MAC3C,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,OAAO,EAAE,MAAM,MAAM,MAAM,SAAS,MAAM,QAAQ;AAAA,IACpD,CAAC;AAAA,EACH,SAAS,eAAe;AACtB,UAAM,IAAI;AAAA,MACR,CAAC,OAAO,aAAa;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AACA,QAAM;AACR;AAEA,SAAS,sBACP,QACsC;AACtC,MAAI,WAAW,KAAM,QAAO;AAC5B,QAAM,QAAQ,OAAO,QAAQ,OAAO,OAAO,EAAE,GAAG,OAAO,MAAM,CAAC,IAAI;AAClE,QAAM,WAAW,OAAO,WACpB,OAAO,OAAO;AAAA,IACZ,GAAG,OAAO;AAAA,IACV,iBAAiB,OAAO,OAAO,CAAC,GAAG,OAAO,SAAS,eAAe,CAAC;AAAA,IACnE,QAAQ,OAAO,OAAO,EAAE,GAAG,OAAO,SAAS,OAAO,CAAC;AAAA,EACrD,CAAC,IACD;AACJ,SAAO,OAAO,OAAO;AAAA,IACnB,UAAU,OAAO;AAAA,IACjB,QAAQ,OAAO;AAAA,IACf,QAAQ,OAAO;AAAA,IACf,gBAAgB,OAAO;AAAA,IACvB,YAAY,OAAO;AAAA,IACnB,UAAU,OAAO;AAAA,IACjB,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,EACjC,CAAC;AACH;AAEA,SAAS,YAAY,OAeW;AAC9B,QAAM,QAAQ,MAAM,QAChB;AAAA,IACE,MAAM,MAAM,iBAAiB,QAAQ,MAAM,MAAM,OAAO;AAAA,IACxD,SAAS,MAAM,iBAAiB,QAAQ,MAAM,MAAM,UAAU,OAAO,MAAM,KAAK;AAAA,EAClF,IACA;AACJ,QAAM,SAAS,MAAM;AACrB,QAAM,YAAY,aAAa,MAAM,WAAW;AAChD,SAAO;AAAA,IACL,eAAe;AAAA,IACf,YAAY,MAAM,cAAc;AAAA,IAChC,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,MAAM,MAAM,OAAO;AAAA,IACnB,UAAU,MAAM;AAAA,IAChB,SAAS,MAAM;AAAA,IACf,OAAO,MAAM,SAAS,OAAO,WAAW;AAAA,IACxC,iBAAiB,MAAM,SAAS,OAAO,mBAAmB;AAAA,IAC1D,cAAc,OAAO,MAAM,MAAM;AAAA,IACjC,WAAW,MAAM,UAAU,YAAY;AAAA,IACvC,aAAa,MAAM,YAAY,YAAY;AAAA,IAC3C,YAAY,QAAQ,cAAc,MAAM,YAAY,QAAQ,IAAI,MAAM,UAAU,QAAQ;AAAA,IACxF,UAAU,QAAQ,YAAY;AAAA,IAC9B,UAAU,QAAQ,YAAY;AAAA,IAC9B,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,aAAa,SAAS,OAAO,WAAW,OAAO,MAAM,IAAI;AAAA,IACzD,cAAc,SAAS,OAAO,OAAO,MAAM,IAAI;AAAA,IAC/C,aAAa,SAAS,OAAO,WAAW,OAAO,MAAM,IAAI;AAAA,IACzD,cAAc,SAAS,OAAO,OAAO,MAAM,IAAI;AAAA,IAC/C,OAAO,QAAQ,QAAQ,EAAE,GAAG,OAAO,MAAM,IAAI;AAAA,IAC7C,4BAA4B,MAAM,yBAAyB,uBAAuB;AAAA,IAClF,2BAA2B,MAAM,yBAAyB,QAAQ,UAAU;AAAA,IAC5E,YAAY,MAAM;AAAA,IAClB;AAAA,IACA,SAAS,cAAc,YAAY,OAAQ,MAAM,aAAa,WAAW;AAAA,IACzE,cAAc,cAAc;AAAA,IAC5B,UAAU,QAAQ,WACd;AAAA,MACE,GAAG,OAAO;AAAA,MACV,iBAAiB,CAAC,GAAG,OAAO,SAAS,eAAe;AAAA,MACpD,QAAQ,EAAE,GAAG,OAAO,SAAS,OAAO;AAAA,IACtC,IACA;AAAA,IACJ;AAAA,EACF;AACF;AAEA,SAAS,aAAa,SAAuE;AAC3F,MAAI,YAAY,QAAQ,QAAQ,YAAa,QAAO;AACpD,SAAO,QAAQ,kBAAkB,SAAY,sBAAsB;AACrE;AAEA,SAAS,YACP,QACA,aACA,mBACc;AACd,MAAI,OAAO,UAAU;AACnB,WAAO,IAAI,MAAM,yCAAyC;AAAA,EAC5D;AACA,MAAI,OAAO,gBAAgB;AACzB,WAAO,IAAI,MAAM,+CAA+C,OAAO,cAAc,EAAE;AAAA,EACzF;AACA,MAAI,OAAO,aAAa,GAAG;AACzB,WAAO,IAAI,MAAM,kDAAkD,OAAO,OAAO,QAAQ,CAAC,EAAE;AAAA,EAC9F;AACA,MAAI,CAAC,kBAAmB,QAAO;AAC/B,MAAI,CAAC,OAAO,SAAS,CAAC,OAAO,UAAU;AACrC,WAAO,IAAI;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,QAAM,uBAAuB,OAAO,WAAW,EAAE,MAAM,UAAU,MAAM;AACvE,MAAI,OAAO,SAAS,0BAA0B,sBAAsB;AAClE,WAAO,IAAI;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,QAA4B,OAAiC;AAC3F,MAAI,CAAC,OAAO,OAAO;AACjB,UAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AACA,SAAO;AAAA,IACL;AAAA,IACA,aAAa,OAAO,MAAM,cAAc,OAAO,MAAM;AAAA,IACrD,cAAc,OAAO,MAAM;AAAA,IAC3B,GAAI,OAAO,MAAM,oBAAoB,IAAI,EAAE,cAAc,OAAO,MAAM,kBAAkB,IAAI,CAAC;AAAA,EAC/F;AACF;AAEA,SAAS,OAAO,OAAmC;AACjD,SAAO,UAAU,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,CAAC;AACnE;AAGA,SAAS,mBAAmB,MAA+D;AACzF,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,aAAW,KAAK,KAAK,UAAU;AAC7B,UAAM,QAAQ,EAAE,UAAU,KAAK,EAAE,OAAO,MAAM;AAC9C,UAAM,KAAK,MAAM,EAAE,QAAQ,IAAI,KAAK,IAAI,EAAE,KAAK,EAAE;AACjD,QAAI,EAAE,mBAAoB,OAAM,KAAK,cAAS,EAAE,kBAAkB,EAAE;AAAA,EACtE;AACA,MAAI,yBAAyB,KAAK,QAAQ,GAAG;AAC3C,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,wBAAwB;AAAA,MACnC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,IAAM,kBACJ;AAKF,SAAS,YAAY,UAA2B;AAC9C,QAAM,SAAS,UAAU,KAAK;AAC9B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EAAqB,SAAS,QAAQ,GAAI,CAAC,KAAK;AAAA,EAC3D,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,wBAAwB,cAAsB,UAA2C;AAChG,QAAM,eAAe,qBAAqB,YAAY;AACtD,QAAM,cAAc,aAAa,OAAO,CAAC,SAAS,SAAS,wBAAwB;AACnF,MAAI,YAAY,WAAW,GAAG;AAC5B,WAAO;AAAA,MACL,wEAAwE,wBAAwB;AAAA,MAChG;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAEA,QAAM,gBAAgB,KAAK,cAAc,wBAAwB;AACjE,MAAI,CAAC,WAAW,aAAa,GAAG;AAC9B,WAAO;AAAA,MACL,iCAAiC,wBAAwB;AAAA,MACzD;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAEA,QAAM,OAAO,aAAa,eAAe,MAAM;AAC/C,QAAM,gBAAgB,mBAAmB,QAAQ;AACjD,MAAI,cAAc,SAAS,KAAK,CAAC,cAAc,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,GAAG;AAClF,WAAO;AAAA,MACL,GAAG,wBAAwB;AAAA,MAC3B,uDAAuD,cAAc,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,IAC7F,EAAE,KAAK,IAAI;AAAA,EACb;AAEA,SAAO;AACT;AAEA,SAAS,yBAAyB,UAAqC;AACrE,SAAO,SAAS,KAAK,CAAC,YAAY;AAChC,UAAM,IAAI;AACV,WAAO,EAAE,eAAe,wBAAwB,EAAE,SAAS;AAAA,EAC7D,CAAC;AACH;AAEA,SAAS,mBAAmB,UAAsC;AAChE,QAAM,MAAgB,CAAC;AACvB,aAAW,WAAW,UAAU;AAC9B,UAAM,OAAQ,QAAmD;AACjE,QAAI,CAAC,MAAM,QAAQ,IAAI,EAAG;AAC1B,eAAW,OAAO,MAAM;AACtB,UAAI,CAAC,OAAO,OAAO,QAAQ,SAAU;AACrC,YAAM,MAAO,IAA0B;AACvC,UAAI,OAAO,QAAQ,YAAY,IAAI,SAAS,EAAG,KAAI,KAAK,GAAG;AAAA,IAC7D;AAAA,EACF;AACA,SAAO,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC;AACzB;AAQO,SAAS,gBACd,SACA,OAAiB,CAAC,GAClB,YAAY,KACF;AACV,SAAO,CAAC,iBAAuC;AAC7C,UAAM,SAAS,UAAU,SAAS,MAAM;AAAA,MACtC,KAAK;AAAA,MACL,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AACD,QAAI,OAAO,QAAQ;AACjB,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,UAAU,aAAa,OAAO,eAAe,OAAO,MAAM,0BAA0B,SAAS;AAAA,MAC/F;AAAA,IACF;AACA,QAAI,OAAO,OAAO;AAChB,YAAM,OAAQ,OAAO,MAAgC;AACrD,UAAI,SAAS,UAAU;AACrB,cAAM,IAAI;AAAA,UACR,qBAAqB,OAAO;AAAA,QAC9B;AAAA,MACF;AACA,YAAM,IAAI,MAAM,qBAAqB,OAAO,sBAAsB,OAAO,MAAM,OAAO,EAAE;AAAA,IAC1F;AACA,QAAI,OAAO,WAAW,EAAG,QAAO,EAAE,IAAI,KAAK;AAC3C,UAAM,MAAM,GAAG,OAAO,UAAU,EAAE,GAAG,OAAO,UAAU,EAAE,GAAG,KAAK;AAChE,WAAO,EAAE,IAAI,OAAO,UAAU,IAAI,SAAS,IAAI,MAAM,QAAQ,OAAO,MAAM,GAAG;AAAA,EAC/E;AACF;AAGA,SAAS,UAAU,UAAoC;AACrD,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,MAAI,SAAS,WAAW,EAAG,QAAO,YAAY,SAAS,SAAS,CAAC,EAAG,OAAO,EAAE,CAAC;AAC9E,SAAO,YAAY,SAAS,MAAM;AACpC;AAEA,SAAS,SAAS,GAAW,GAAmB;AAC9C,SAAO,EAAE,UAAU,IAAI,IAAI,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;AACjD;AAOA,SAAS,cAAc,cAA+B;AACpD,SAAO,qBAAqB,YAAY,EAAE,SAAS;AACrD;AAEA,SAAS,qBAAqB,cAAgC;AAC5D,QAAM,SAAS,UAAU,OAAO,CAAC,UAAU,eAAe,uBAAuB,GAAG;AAAA,IAClF,KAAK;AAAA,IACL,UAAU;AAAA,EACZ,CAAC;AACD,MAAI,OAAO,OAAO;AAChB,UAAM,IAAI;AAAA,MACR,mDAAmD,YAAY,KAAK,OAAO,MAAM,OAAO;AAAA,IAC1F;AAAA,EACF;AACA,MAAI,OAAO,WAAW,GAAG;AACvB,UAAM,IAAI;AAAA,MACR,uCAAuC,OAAO,MAAM,OAAO,YAAY,KAAK,OAAO,OAAO,KAAK,CAAC;AAAA,IAClG;AAAA,EACF;AACA,SAAO,OAAO,OACX,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAChC,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC;AACvC;","names":["receipt","result"]}

package/dist/chunk-FTXM7Q7P.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/candidate-execution/builder.ts","../src/candidate-execution/claim-file-store.ts","../src/candidate-execution/dispose.ts","../src/candidate-execution/protected-model-port.ts","../src/candidate-execution/recover.ts","../src/candidate-execution/workspace-archive.ts"],"sourcesContent":["import type { CodeSurface } from '@tangle-network/agent-eval/campaign'\nimport { verifyCodeSurface } from '@tangle-network/agent-eval/campaign'\nimport type {\n  AgentCandidateCodeDisabled,\n  AgentCandidateCodeNoOp,\n  AgentCandidateExecution,\n  AgentCandidateGitHubRepository,\n  AgentCandidateKnowledge,\n  AgentCandidateLineage,\n  AgentCandidateMemoryPolicy,\n  AgentCandidateProfile,\n  AgentProfile,\n  AgentProfileDiff,\n} from '@tangle-network/agent-interface'\nimport { type AgentCandidateBundleInput, sealAgentCandidateBundle } from './bundle'\nimport { canonicalCandidateDigest, embeddedCandidateArtifact } from './digest'\nimport {\n  applyExactAgentProfileDiff,\n  freezeGenericAgentCandidateProfile,\n  parseExactAgentProfile,\n  parseExactAgentProfileDiff,\n  parseExactCandidateProfile,\n} from './profile'\n\n/** A complete profile that can be frozen without losing behavior. */\nexport type AgentCandidateProfileSource =\n  | {\n      kind: 'profile'\n      profile: AgentProfile\n    }\n  | {\n      kind: 'profile-diffs'\n      base: AgentProfile\n      /** Applied in order. Each exact diff is content-addressed into lineage. */\n      diffs: readonly AgentProfileDiff[]\n    }\n  | {\n      kind: 'candidate-profile'\n      /** Already converted to the closed, secret-free candidate profile contract. */\n      profile: AgentCandidateProfile\n    }\n\n/** The only accepted path from an agent-eval code candidate to executable bytes. */\nexport interface AgentCandidateCodeSurfaceSource {\n  kind: 'code-surface'\n  surface: CodeSurface\n  repository: AgentCandidateGitHubRepository\n  /** Optional parent directory used to resolve a relative `surface.worktreeRef`. */\n  worktreeDir?: string\n}\n\n/** Explicit control/no-op code or one finalized CodeSurface whose bytes must still verify. */\nexport type AgentCandidateCodeSource =\n  | AgentCandidateCodeDisabled\n  | AgentCandidateCodeNoOp\n  | AgentCandidateCodeSurfaceSource\n\n/** Complete measured surfaces and execution policy compiled into one candidate bundle. */\nexport interface BuildAgentCandidateBundleInput {\n  profile: AgentCandidateProfileSource\n  code: AgentCandidateCodeSource\n  execution: AgentCandidateExecution\n  knowledge?: AgentCandidateKnowledge\n  memory: AgentCandidateMemoryPolicy\n  /** `profileDiffIds` is derived from `profile`; callers cannot contradict it. */\n  lineage: Omit<AgentCandidateLineage, 'profileDiffIds'>\n}\n\n/**\n * Compile one measured profile/code candidate into the immutable execution\n * contract. Code bytes are re-read and verified by agent-eval before they are\n * embedded. The returned bundle is schema-validated, canonically digested, and\n * deeply immutable; call `verifyAgentCandidateBundle` at the execution boundary\n * to re-read external knowledge, memory, repository, and workspace artifacts.\n */\nexport function buildAgentCandidateBundle(\n  input: BuildAgentCandidateBundleInput,\n): ReturnType<typeof sealAgentCandidateBundle> {\n  if (Object.hasOwn(input.lineage, 'profileDiffIds')) {\n    throw new Error('profileDiffIds is derived from the profile source and cannot be supplied')\n  }\n  const compiledProfile = compileCandidateProfile(input.profile)\n  const profileDiffIds = compiledProfile.profileDiffIds\n  const bundle: AgentCandidateBundleInput = {\n    schemaVersion: 1,\n    kind: 'agent-candidate-bundle',\n    digestAlgorithm: 'rfc8785-sha256',\n    profile: compiledProfile.profile,\n    code: compileCandidateCode(input.code),\n    execution: input.execution,\n    ...(input.knowledge ? { knowledge: input.knowledge } : {}),\n    memory: input.memory,\n    lineage: {\n      ...input.lineage,\n      ...(profileDiffIds.length > 0 ? { profileDiffIds } : {}),\n    },\n  }\n  return sealAgentCandidateBundle(bundle)\n}\n\nfunction compileCandidateProfile(source: AgentCandidateProfileSource): {\n  profile: AgentCandidateProfile\n  profileDiffIds: string[]\n} {\n  if (source.kind === 'candidate-profile') {\n    return {\n      profile: parseExactCandidateProfile(source.profile),\n      profileDiffIds: [],\n    }\n  }\n\n  if (source.kind === 'profile') {\n    return { profile: freezeGenericAgentCandidateProfile(source.profile), profileDiffIds: [] }\n  }\n\n  if (source.kind !== 'profile-diffs') {\n    throw new Error(\n      `unsupported candidate profile source: ${String((source as { kind?: unknown }).kind)}`,\n    )\n  }\n  if (source.diffs.length === 0) {\n    throw new Error('profile-diffs source requires at least one AgentProfileDiff')\n  }\n  let profile = parseExactAgentProfile(source.base, 'base profile')\n  const profileDiffIds: string[] = []\n  for (const [index, inputDiff] of source.diffs.entries()) {\n    const diff = parseExactAgentProfileDiff(inputDiff, `profile diff ${index}`)\n    profile = applyExactAgentProfileDiff(profile, diff, `profile diff ${index}`)\n    profileDiffIds.push(canonicalCandidateDigest(diff))\n  }\n  return { profile: freezeGenericAgentCandidateProfile(profile), profileDiffIds }\n}\n\nfunction compileCandidateCode(source: AgentCandidateCodeSource): AgentCandidateBundleInput['code'] {\n  if (source.kind === 'disabled' || source.kind === 'no-op') return source\n  if (source.kind !== 'code-surface') {\n    throw new Error(\n      `unsupported candidate code source: ${String((source as { kind?: unknown }).kind)}`,\n    )\n  }\n\n  const verified = verifyCodeSurface(source.surface, source.worktreeDir)\n  const patch = embeddedCandidateArtifact(verified.patchBytes)\n  if (\n    patch.sha256 !== source.surface.patch.sha256 ||\n    patch.byteLength !== source.surface.patch.byteLength\n  ) {\n    throw new Error('verified CodeSurface patch bytes do not match its content identity')\n  }\n  return {\n    kind: 'git-patch',\n    repository: source.repository,\n    baseCommit: source.surface.baseCommit,\n    baseTree: source.surface.baseTree,\n    candidateTree: source.surface.candidateTree,\n    patch: { format: 'git-diff-binary', artifact: patch },\n  }\n}\n","import { randomUUID } from 'node:crypto'\nimport { linkSync } from 'node:fs'\nimport { mkdir, open, unlink } from 'node:fs/promises'\nimport { join } from 'node:path'\nimport type { Sha256Digest } from '@tangle-network/agent-interface'\n\nimport {\n  type AgentCandidateExecutionAttemptRecord,\n  type AgentCandidateExecutionAttemptRef,\n  type AgentCandidateExecutionClaim,\n  type AgentCandidateExecutionClaimResult,\n  type AgentCandidateExecutionClaimStore,\n  type AgentCandidateExecutionFinishResult,\n  type AgentCandidateExecutionLease,\n  type AgentCandidateExecutionPhase,\n  type AgentCandidateExecutionPhaseResult,\n  type AgentCandidateExecutionRecoveryEvidence,\n  type AgentCandidateExecutionStageResult,\n  type AgentCandidateExecutionTerminalRecord,\n  type AgentCandidateExecutionTerminalResult,\n  type AgentCandidateRetryRejection,\n  candidateClaimFileInternals,\n} from './claim'\nimport {\n  CLAIM_FORMAT_VERSION,\n  PENDING_FORMAT_VERSION,\n  PHASE_FORMAT_VERSION,\n  TERMINAL_FORMAT_VERSION,\n} from './claim-file-formats'\nimport {\n  assertRecoveryMatchesStaged,\n  assertTerminalAllowedInPhase,\n  assertTerminalMatchesClaim,\n  assertTerminalMatchesStaged,\n  recoveredTerminalRecord,\n  rejectedFinish,\n  rejectedStage,\n  requireStagedTerminal,\n  sealTerminalDigest,\n  terminalRecord,\n} from './claim-terminal'\nimport { canonicalCandidateBytes } from './digest'\n\nconst {\n  assertExpiredLease,\n  assertLease,\n  assertSameSlot,\n  assertUnexpiredLease,\n  attemptRecord,\n  claimSlot,\n  leaseDigest,\n  newLease,\n  readClaim,\n  readClaimIfPresent,\n  readTerminal,\n  readTerminalIfPresent,\n  readTransitionIfPresent,\n  rejectedExistingClaim,\n  rejectedRetry,\n  retryRejection,\n  sealAttemptRef,\n  sealClaim,\n  sealLease,\n} = candidateClaimFileInternals\n\nexport interface FileAgentCandidateExecutionClaimStoreOptions {\n  /** Evaluator-owned directory shared by every process allowed to execute candidates. */\n  directory: string\n  /** Testable evaluator clock; defaults to `Date.now`. */\n  now?: () => number\n}\n\n/** Cross-process lifecycle implemented as fsynced, create-if-absent records. */\nexport class FileAgentCandidateExecutionClaimStore implements AgentCandidateExecutionClaimStore {\n  private readonly directory: string\n  private readonly now: () => number\n\n  constructor(options: FileAgentCandidateExecutionClaimStoreOptions) {\n    if (options.directory.length === 0) {\n      throw new Error('candidate execution claim directory must not be empty')\n    }\n    this.directory = options.directory\n    this.now = options.now ?? Date.now\n  }\n\n  async tryClaim(\n    requested: AgentCandidateExecutionClaim,\n  ): Promise<AgentCandidateExecutionClaimResult> {\n    const claim = sealClaim(requested)\n    await mkdir(this.directory, { recursive: true })\n    const claimPath = this.claimPath(claim)\n    const existing = await readClaimIfPresent(claimPath)\n    if (existing) {\n      assertSameSlot(existing.claim, claim, claimPath)\n      return rejectedExistingClaim(existing.claim, claim)\n    }\n    assertUnexpiredLease(claim.leaseExpiresAtMs, this.now())\n    const retryFailure = await this.retryFailure(claim)\n    if (retryFailure) return rejectedRetry(claim, retryFailure)\n\n    const lease = newLease(claim)\n    const acquired = await writeRecordIfAbsent(this.directory, claimPath, {\n      version: CLAIM_FORMAT_VERSION,\n      ...claim,\n      phase: 'claimed',\n      leaseDigest: leaseDigest(lease),\n    })\n    if (acquired) return Object.freeze({ acquired: true, claim, lease })\n\n    const winner = await readClaim(claimPath)\n    assertSameSlot(winner.claim, claim, claimPath)\n    return rejectedExistingClaim(winner.claim, claim)\n  }\n\n  async getAttempt(\n    requestedAttempt: AgentCandidateExecutionAttemptRef,\n  ): Promise<AgentCandidateExecutionAttemptRecord | undefined> {\n    return await this.storedAttempt(sealAttemptRef(requestedAttempt))\n  }\n\n  async markCandidateMayRun(\n    requestedLease: AgentCandidateExecutionLease,\n  ): Promise<AgentCandidateExecutionPhaseResult> {\n    const lease = sealLease(requestedLease)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const state = await this.transitionState(stored.claim)\n    if (state.phase === 'candidate-may-run') {\n      return Object.freeze({ marked: false, phase: 'candidate-may-run' })\n    }\n    if (state.staged) {\n      throw new Error('candidate execution terminal was staged before candidate-may-run phase')\n    }\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const marked = await writeRecordIfAbsent(\n      this.directory,\n      this.transitionPath(stored.claim, 1),\n      {\n        version: PHASE_FORMAT_VERSION,\n        kind: 'candidate-execution-phase',\n        executionId: stored.claim.executionId,\n        attempt: stored.claim.attempt,\n        executionPlanDigest: stored.claim.executionPlanDigest,\n        phase: 'candidate-may-run',\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (marked) return Object.freeze({ marked: true, phase: 'candidate-may-run' })\n    const winner = await this.transitionState(stored.claim)\n    if (winner.phase === 'candidate-may-run') {\n      return Object.freeze({ marked: false, phase: 'candidate-may-run' })\n    }\n    throw new Error('candidate execution terminal was staged before candidate-may-run phase')\n  }\n\n  async stageTerminal(\n    requestedLease: AgentCandidateExecutionLease,\n    result: AgentCandidateExecutionTerminalResult,\n  ): Promise<AgentCandidateExecutionStageResult> {\n    const lease = sealLease(requestedLease)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const terminal = terminalRecord(stored.claim, result)\n    const state = await this.transitionState(stored.claim)\n    if (state.staged) return rejectedStage(state.staged, terminal)\n    assertTerminalAllowedInPhase(state.phase, terminal)\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const transition = state.phase === 'claimed' ? 1 : 2\n    const staged = await writeRecordIfAbsent(\n      this.directory,\n      this.transitionPath(stored.claim, transition),\n      {\n        version: PENDING_FORMAT_VERSION,\n        kind: 'candidate-execution-pending-terminal',\n        terminal,\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (staged) return Object.freeze({ staged: true, terminal })\n    const winner = await this.transitionState(stored.claim)\n    if (!winner.staged) {\n      throw new Error('candidate execution phase transition won while staging terminal')\n    }\n    return rejectedStage(winner.staged, terminal)\n  }\n\n  async finish(\n    requestedLease: AgentCandidateExecutionLease,\n    requestedTerminalDigest: Sha256Digest,\n  ): Promise<AgentCandidateExecutionFinishResult> {\n    const lease = sealLease(requestedLease)\n    const terminalDigest = sealTerminalDigest(requestedTerminalDigest)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const state = await this.transitionState(stored.claim)\n    const staged = requireStagedTerminal(state.staged, terminalDigest)\n    const terminalPath = this.terminalPath(lease)\n    const existing = await readTerminalIfPresent(terminalPath)\n    if (existing) {\n      assertTerminalMatchesClaim(existing, stored.claim, terminalPath)\n      assertTerminalMatchesStaged(existing, staged, terminalPath)\n      return rejectedFinish(existing, terminalDigest)\n    }\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const finished = await writeRecordIfAbsent(\n      this.directory,\n      terminalPath,\n      {\n        version: TERMINAL_FORMAT_VERSION,\n        terminal: staged,\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (finished) return Object.freeze({ finished: true, terminal: staged })\n    const winner = await readTerminal(terminalPath)\n    assertSameSlot(winner, lease, terminalPath)\n    assertTerminalMatchesClaim(winner, stored.claim, terminalPath)\n    assertTerminalMatchesStaged(winner, staged, terminalPath)\n    return rejectedFinish(winner, terminalDigest)\n  }\n\n  async recoverExpired(\n    requestedAttempt: AgentCandidateExecutionAttemptRef,\n    evidence: AgentCandidateExecutionRecoveryEvidence,\n  ): Promise<AgentCandidateExecutionFinishResult> {\n    const attempt = sealAttemptRef(requestedAttempt)\n    const record = await this.storedAttempt(attempt)\n    if (!record) throw new Error('candidate execution recovery does not name an acquired attempt')\n    const recovered = recoveredTerminalRecord(record.claim, record.phase, evidence)\n    if (record.staged) assertRecoveryMatchesStaged(record.staged, recovered)\n    const requestedDigest = record.staged?.terminalDigest ?? recovered.terminalDigest\n    if (record.terminal) return rejectedFinish(record.terminal, requestedDigest)\n    assertExpiredLease(record.claim.leaseExpiresAtMs, this.now())\n\n    let staged = record.staged\n    if (!staged) {\n      const transition = record.phase === 'claimed' ? 1 : 2\n      const didStage = await writeRecordIfAbsent(\n        this.directory,\n        this.transitionPath(record.claim, transition),\n        {\n          version: PENDING_FORMAT_VERSION,\n          kind: 'candidate-execution-pending-terminal',\n          terminal: recovered,\n        },\n      )\n      if (didStage) {\n        staged = recovered\n      } else {\n        const winner = await this.transitionState(record.claim)\n        if (!winner.staged) {\n          throw new Error(\n            'candidate execution recovery lost terminal staging to a phase transition',\n          )\n        }\n        assertRecoveryMatchesStaged(winner.staged, recovered)\n        staged = winner.staged\n      }\n    }\n\n    const terminalPath = this.terminalPath(attempt)\n    const didFinish = await writeRecordIfAbsent(this.directory, terminalPath, {\n      version: TERMINAL_FORMAT_VERSION,\n      terminal: staged,\n    })\n    if (didFinish) return Object.freeze({ finished: true, terminal: staged })\n    const winner = await readTerminal(terminalPath)\n    assertSameSlot(winner, attempt, terminalPath)\n    assertTerminalMatchesClaim(winner, record.claim, terminalPath)\n    assertTerminalMatchesStaged(winner, staged, terminalPath)\n    return rejectedFinish(winner, staged.terminalDigest)\n  }\n\n  private async storedAttempt(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n  ): Promise<AgentCandidateExecutionAttemptRecord | undefined> {\n    const claimPath = this.claimPath(claim)\n    const stored = await readClaimIfPresent(claimPath)\n    if (!stored) return undefined\n    assertSameSlot(stored.claim, claim, claimPath)\n    const state = await this.transitionState(stored.claim)\n    const terminalPath = this.terminalPath(claim)\n    const terminal = await readTerminalIfPresent(terminalPath)\n    if (terminal) {\n      assertTerminalMatchesClaim(terminal, stored.claim, terminalPath)\n      if (!state.staged) {\n        throw new Error(\n          `candidate execution terminal record at ${terminalPath} has no staged outbox`,\n        )\n      }\n      assertTerminalMatchesStaged(terminal, state.staged, terminalPath)\n    }\n    return attemptRecord(stored.claim, state.phase, state.staged, terminal)\n  }\n\n  private async transitionState(claim: AgentCandidateExecutionClaim): Promise<{\n    phase: AgentCandidateExecutionPhase\n    staged?: AgentCandidateExecutionTerminalRecord\n  }> {\n    const firstPath = this.transitionPath(claim, 1)\n    const first = await readTransitionIfPresent(firstPath, claim)\n    if (!first) return { phase: 'claimed' }\n    if (first.kind === 'pending') return { phase: 'claimed', staged: first.terminal }\n    const secondPath = this.transitionPath(claim, 2)\n    const second = await readTransitionIfPresent(secondPath, claim)\n    if (!second) return { phase: 'candidate-may-run' }\n    if (second.kind !== 'pending') {\n      throw new Error(`candidate execution transition at ${secondPath} repeats the phase marker`)\n    }\n    return { phase: 'candidate-may-run', staged: second.terminal }\n  }\n\n  private async retryFailure(\n    claim: AgentCandidateExecutionClaim,\n  ): Promise<AgentCandidateRetryRejection | undefined> {\n    if (claim.attempt === 1) return undefined\n    return retryRejection(\n      claim,\n      await this.storedAttempt({\n        executionId: claim.executionId,\n        attempt: claim.attempt - 1,\n      }),\n    )\n  }\n\n  private ownerPublication(claim: AgentCandidateExecutionClaim): {\n    authorizePublish: () => true\n  } {\n    return {\n      authorizePublish: () => {\n        assertUnexpiredLease(claim.leaseExpiresAtMs, this.now())\n        return true\n      },\n    }\n  }\n\n  private claimPath(claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>): string {\n    return join(this.directory, `${claimSlot(claim)}.claim.json`)\n  }\n\n  private terminalPath(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n  ): string {\n    return join(this.directory, `${claimSlot(claim)}.terminal.json`)\n  }\n\n  private transitionPath(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n    ordinal: 1 | 2,\n  ): string {\n    return join(this.directory, `${claimSlot(claim)}.transition-${ordinal}.json`)\n  }\n}\n\nasync function writeRecordIfAbsent(\n  directory: string,\n  destination: string,\n  record: object,\n  options: {\n    /** Synchronous authorization checked after temp fsync, immediately before atomic publication. */\n    authorizePublish?: () => true\n  } = {},\n): Promise<boolean> {\n  const temporaryPath = join(directory, `.candidate-execution-${process.pid}-${randomUUID()}.tmp`)\n  const handle = await open(temporaryPath, 'wx', 0o600)\n  try {\n    await handle.writeFile(\n      Buffer.concat([Buffer.from(canonicalCandidateBytes(record)), Buffer.from('\\n')]),\n    )\n    await handle.sync()\n  } finally {\n    await handle.close()\n  }\n\n  let written = false\n  try {\n    if (options.authorizePublish && options.authorizePublish() !== true) {\n      throw new Error('candidate execution record publication was not authorized')\n    }\n    // Authorization and the atomic filesystem call are one synchronous critical\n    // section so the event loop cannot advance an injected lease clock between them.\n    linkSync(temporaryPath, destination)\n    written = true\n    await syncDirectory(directory)\n  } catch (error) {\n    if (!isNodeError(error, 'EEXIST')) throw error\n  } finally {\n    await unlink(temporaryPath).catch((error: unknown) => {\n      if (!isNodeError(error, 'ENOENT')) throw error\n    })\n  }\n  return written\n}\n\nasync function syncDirectory(directory: string): Promise<void> {\n  const handle = await open(directory, 'r')\n  try {\n    await handle.sync()\n  } finally {\n    await handle.close()\n  }\n}\n\nfunction isNodeError(error: unknown, code: string): boolean {\n  return (\n    error !== null &&\n    typeof error === 'object' &&\n    'code' in error &&\n    (error as { code?: unknown }).code === code\n  )\n}\n","import { candidateCleanupDeadline, withinCandidateCleanupDeadline } from './cleanup'\nimport { sealAgentCandidateModelSettlement } from './model-settlement'\nimport {\n  assertPreparedCandidateIntegrity,\n  beginPreparedCandidateDisposal,\n  consumePreparedCandidateExecution,\n} from './prepared-state'\nimport type { PreparedAgentCandidateExecution } from './types'\n\nexport interface DisposePreparedAgentCandidateOptions {\n  cleanupTimeoutMs?: number\n}\n\n/** Revoke reservations held by a prepared candidate that will not be executed. */\nexport async function disposePreparedAgentCandidateExecution(\n  prepared: PreparedAgentCandidateExecution,\n  options: DisposePreparedAgentCandidateOptions = {},\n): Promise<{ disposed: true }> {\n  const initialState = assertPreparedCandidateIntegrity(prepared)\n  const cleanupTimeoutMs = options.cleanupTimeoutMs ?? initialState.cleanupTimeoutMs\n  if (cleanupTimeoutMs > initialState.cleanupTimeoutMs) {\n    throw new Error('disposal cleanup timeout exceeds the frozen preparation bound')\n  }\n  const cleanupDeadlineAtMs = candidateCleanupDeadline(cleanupTimeoutMs)\n  const state = beginPreparedCandidateDisposal(prepared)\n  const cleanup: Array<Promise<unknown>> = []\n\n  if (state.memory.mode === 'isolated') {\n    const reservation = state.memoryReservation\n    if (!reservation) throw new Error('isolated memory reservation is missing')\n    cleanup.push(\n      withinCandidateCleanupDeadline(\n        async () => {\n          const closed = await state.ports.memory.close({\n            executionId: state.executionId,\n            preparationId: reservation.preparationId,\n            accessDigest: reservation.accessDigest,\n            effectiveNamespace: reservation.effectiveNamespace,\n            reason: 'abandoned',\n          })\n          if (closed.closed !== true || Object.keys(closed).some((key) => key !== 'closed')) {\n            throw new Error('abandoned isolated memory access did not acknowledge closure')\n          }\n        },\n        cleanupDeadlineAtMs,\n        'isolated memory disposal',\n      ),\n    )\n  }\n\n  cleanup.push(\n    withinCandidateCleanupDeadline(\n      async () => {\n        const settlement = sealAgentCandidateModelSettlement(\n          await state.ports.models.settleGrant({\n            executionId: state.executionId,\n            preparationId: state.preparationId,\n            grantDigest: state.modelReservation.digest,\n            resolved: state.resolvedModel,\n            reason: 'abandoned',\n          }),\n          {\n            preparationId: state.preparationId,\n            grantDigest: state.modelReservation.digest,\n            model: state.resolvedModel.model,\n          },\n        )\n        if (settlement.usage.modelCalls !== 0) {\n          throw new Error('unexecuted model reservation unexpectedly contains calls')\n        }\n      },\n      cleanupDeadlineAtMs,\n      'model reservation disposal',\n    ),\n  )\n\n  const results = await Promise.allSettled(cleanup)\n  const failures = results\n    .filter((result): result is PromiseRejectedResult => result.status === 'rejected')\n    .map((result) => result.reason)\n  if (failures.length > 0) {\n    consumePreparedCandidateExecution(prepared, 'disposal-failed')\n    throw new AggregateError(failures, 'candidate preparation disposal failed')\n  }\n\n  consumePreparedCandidateExecution(prepared, 'disposed')\n  return Object.freeze({ disposed: true as const })\n}\n","import type {\n  AgentCandidateModelAccessNetwork,\n  AgentCandidateResolvedModel,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\n\nimport { canonicalCandidateDigest, immutableCandidateValue } from './digest'\nimport { assertExactObjectKeys } from './exact-object'\nimport { sealAgentCandidateModelSettlement, usdToNanos } from './model-settlement'\nimport type {\n  AgentCandidateModelLimits,\n  AgentCandidateModelPort,\n  AgentCandidateProtectedModelActivation,\n  AgentCandidateProtectedModelReservation,\n  AgentCandidateProtectedModelSettlement,\n} from './types'\n\nexport type AgentCandidateModelGrantReserveInput = Parameters<\n  AgentCandidateModelPort['reserveGrant']\n>[0]\nexport type AgentCandidateModelGrantActivateInput = Parameters<\n  AgentCandidateModelPort['activateGrant']\n>[0]\nexport type AgentCandidateModelGrantSettleInput = Parameters<\n  AgentCandidateModelPort['settleGrant']\n>[0]\n\n/** Secret-free response from the service's reservation endpoint. */\nexport type AgentCandidateModelGrantReservation = AgentCandidateProtectedModelReservation\n\n/**\n * Narrow transport contract for a service that owns scoped model credentials\n * and the authoritative per-call usage ledger.\n *\n * An HTTP client can bind these methods to control-plane endpoints. Keeping\n * transport out of the runtime prevents parent credentials, endpoint paths,\n * and retry policy from becoming part of the portable candidate contract.\n */\nexport interface AgentCandidateModelGrantClient {\n  reserve(input: AgentCandidateModelGrantReserveInput): Promise<AgentCandidateModelGrantReservation>\n  activate(\n    input: AgentCandidateModelGrantActivateInput,\n  ): Promise<AgentCandidateProtectedModelActivation>\n  settle(\n    input: AgentCandidateModelGrantSettleInput,\n  ): Promise<AgentCandidateProtectedModelSettlement>\n}\n\nexport interface CreateProtectedAgentCandidateModelPortOptions {\n  client: AgentCandidateModelGrantClient\n  /** Catalog/snapshot resolution stays separate from credential issuance. */\n  resolveModel: AgentCandidateModelPort['resolve']\n  /** The only public DNS name candidate processes may reach for inference. */\n  gatewayDomain: string\n  /** Exact environment names the activation endpoint must return, no more or fewer. */\n  activationEnvNames: readonly string[]\n}\n\ninterface RememberedReservation {\n  requestDigest: Sha256Digest\n  responseDigest: Sha256Digest\n  executionId: string\n  preparationId: string\n  grantDigest: Sha256Digest\n  expiresAtMs: number\n  resolved: AgentCandidateResolvedModel\n  limits: AgentCandidateModelLimits\n  maxCostUsdNanos: number\n  activation: 'reserved' | 'activating' | 'activated'\n  settlementDigest?: Sha256Digest\n  settlementReason?: AgentCandidateModelGrantSettleInput['reason']\n}\n\ninterface RememberedSettlement {\n  settlementDigest: Sha256Digest\n  settlementReason: AgentCandidateModelGrantSettleInput['reason']\n  expiresAtMs: number\n}\n\nconst MAX_RECENT_SETTLEMENTS = 4_096\nconst RECOVERED_SETTLEMENT_RETENTION_MS = 15 * 60 * 1_000\n\n/**\n * Bind a protected model-grant service to the immutable candidate runtime.\n *\n * The service remains the authority for expiry, admission, revocation, and\n * metering. This adapter independently checks every response before allowing\n * it to cross into candidate execution or durable receipt finalization.\n */\nexport function createProtectedAgentCandidateModelPort(\n  options: CreateProtectedAgentCandidateModelPortOptions,\n): AgentCandidateModelPort {\n  const gatewayDomain = assertGatewayDomain(options.gatewayDomain)\n  const activationEnvNames = exactEnvironmentNames(options.activationEnvNames)\n  const reservations = new Map<string, RememberedReservation>()\n  const recentSettlements = new Map<string, RememberedSettlement>()\n\n  return {\n    resolve: async (input) => {\n      const request = immutableCandidateValue(input)\n      const resolved = validateResolvedModel(await options.resolveModel(request), request)\n      return immutableCandidateValue(resolved)\n    },\n\n    reserveGrant: async (input) => {\n      pruneExpiredState(reservations, recentSettlements, Date.now())\n      const request = immutableCandidateValue(input)\n      validateReserveInput(request)\n      const requestDigest = canonicalCandidateDigest(request)\n      const key = reservationKey(request.executionId, request.preparationId)\n      if (recentSettlements.has(key)) {\n        throw new Error('protected model reservation is already settled')\n      }\n      const previous = reservations.get(key)\n      if (previous && previous.requestDigest !== requestDigest) {\n        throw new Error('protected model reservation retry changed immutable input')\n      }\n\n      const reservation = validateReservation(\n        await options.client.reserve(request),\n        request,\n        gatewayDomain,\n      )\n      const responseDigest = canonicalCandidateDigest(reservation)\n      if (recentSettlements.has(key)) {\n        throw new Error('protected model reservation completed after the grant was settled')\n      }\n      const recorded = previous ?? reservations.get(key)\n      if (recorded && recorded.requestDigest !== requestDigest) {\n        throw new Error('protected model reservation retry changed immutable input')\n      }\n      if (recorded && recorded.responseDigest !== responseDigest) {\n        throw new Error('protected model reservation retry returned different evidence')\n      }\n      if (!recorded) {\n        reservations.set(key, {\n          requestDigest,\n          responseDigest,\n          executionId: request.executionId,\n          preparationId: request.preparationId,\n          grantDigest: reservation.digest,\n          expiresAtMs: request.expiresAtMs,\n          resolved: immutableCandidateValue(request.resolved),\n          limits: immutableCandidateValue(request.limits),\n          maxCostUsdNanos: usdToNanos(request.limits.maxCostUsd, 'reserved maxCostUsd'),\n          activation: 'reserved',\n        })\n      }\n      return reservation\n    },\n\n    activateGrant: async (input) => {\n      pruneExpiredState(reservations, recentSettlements, Date.now())\n      const request = immutableCandidateValue(input)\n      const key = reservationKey(request.executionId, request.preparationId)\n      if (recentSettlements.has(key)) throw new Error('protected model grant is already settled')\n      const state = reservations.get(key)\n      if (!state) throw new Error('protected model grant was not reserved by this port')\n      assertGrantIdentity(state, request)\n      if (state.settlementDigest) throw new Error('protected model grant is already settled')\n      if (state.activation !== 'reserved') {\n        throw new Error('protected model grant activation is single-use')\n      }\n      if (!Number.isSafeInteger(request.deadlineAtMs) || request.deadlineAtMs <= 0) {\n        throw new Error('protected model activation deadline must be a positive safe integer')\n      }\n      if (request.deadlineAtMs <= Date.now()) {\n        throw new Error('protected model activation deadline must be in the future')\n      }\n      if (request.deadlineAtMs > state.expiresAtMs) {\n        throw new Error('protected model activation deadline exceeds the reserved expiry')\n      }\n      state.activation = 'activating'\n      try {\n        const activation = validateActivation(\n          await options.client.activate(request),\n          state.limits.maxModelCalls === 0 ? [] : activationEnvNames,\n        )\n        if (recentSettlements.has(key) || reservations.get(key) !== state) {\n          throw new Error('protected model grant settled while activation was in flight')\n        }\n        state.activation = 'activated'\n        return activation\n      } catch (error) {\n        state.activation = 'reserved'\n        throw error\n      }\n    },\n\n    settleGrant: async (input) => {\n      const now = Date.now()\n      pruneExpiredState(reservations, recentSettlements, now)\n      const request = immutableCandidateValue(input)\n      const key = reservationKey(request.executionId, request.preparationId)\n      const state = reservations.get(key)\n      if (state) assertGrantIdentity(state, request)\n      const remembered = state ?? recentSettlements.get(key)\n      if (remembered?.settlementReason && remembered.settlementReason !== request.reason) {\n        throw new Error('protected model settlement retry changed the termination reason')\n      }\n\n      const sealed = sealAgentCandidateModelSettlement(await options.client.settle(request), {\n        preparationId: request.preparationId,\n        grantDigest: request.grantDigest,\n        model: request.resolved.model,\n      })\n      if (state) assertWithinReservedLimits(sealed.fixedUsage, state)\n\n      const settlementDigest = canonicalCandidateDigest(sealed.value)\n      if (remembered?.settlementDigest && remembered.settlementDigest !== settlementDigest) {\n        throw new Error('protected model settlement retry returned a different final ledger')\n      }\n      if (remembered?.settlementReason && remembered.settlementReason !== request.reason) {\n        throw new Error('protected model settlement retry changed the termination reason')\n      }\n      const expiresAtMs = state?.expiresAtMs ?? now + RECOVERED_SETTLEMENT_RETENTION_MS\n      if (state) {\n        state.settlementDigest = settlementDigest\n        state.settlementReason = request.reason\n      }\n      reservations.delete(key)\n      rememberSettlement(recentSettlements, key, {\n        settlementDigest,\n        settlementReason: request.reason,\n        expiresAtMs,\n      })\n      return sealed.value\n    },\n  }\n}\n\nfunction validateReserveInput(input: AgentCandidateModelGrantReserveInput): void {\n  if (!Number.isSafeInteger(input.expiresAtMs) || input.expiresAtMs <= 0) {\n    throw new Error('protected model reservation expiry must be a positive safe integer')\n  }\n  if (input.expiresAtMs <= Date.now()) {\n    throw new Error('protected model reservation expiry must be in the future')\n  }\n  for (const [name, value] of [\n    ['maxModelCalls', input.limits.maxModelCalls],\n    ['maxInputTokens', input.limits.maxInputTokens],\n    ['maxOutputTokens', input.limits.maxOutputTokens],\n  ] as const) {\n    if (!Number.isSafeInteger(value) || value < 0) {\n      throw new Error(`protected model reservation ${name} must be a nonnegative safe integer`)\n    }\n  }\n  usdToNanos(input.limits.maxCostUsd, 'reserved maxCostUsd')\n}\n\nfunction validateReservation(\n  value: unknown,\n  expected: AgentCandidateModelGrantReserveInput,\n  gatewayDomain: string,\n): AgentCandidateModelGrantReservation {\n  const source = exactRecord(\n    value,\n    ['preparationId', 'digest', 'expiresAtMs', 'enforcedLimits', 'network'],\n    'protected model reservation response',\n  )\n  if (source.preparationId !== expected.preparationId) {\n    throw new Error('protected model reservation response changed preparation identity')\n  }\n  if (!isSha256Digest(source.digest)) {\n    throw new Error('protected model reservation response has an invalid digest')\n  }\n  if (source.expiresAtMs !== expected.expiresAtMs) {\n    throw new Error('protected model reservation response changed expiry')\n  }\n  exactRecord(\n    source.enforcedLimits,\n    ['maxModelCalls', 'maxInputTokens', 'maxOutputTokens', 'maxCostUsd'],\n    'protected model reservation enforced limits',\n  )\n  if (\n    canonicalCandidateDigest(source.enforcedLimits) !== canonicalCandidateDigest(expected.limits)\n  ) {\n    throw new Error('protected model reservation response changed enforced limits')\n  }\n\n  const network = validateReservationNetwork(\n    source.network,\n    expected.limits.maxModelCalls,\n    gatewayDomain,\n  )\n  return immutableCandidateValue({\n    preparationId: source.preparationId,\n    digest: source.digest,\n    expiresAtMs: source.expiresAtMs,\n    enforcedLimits: source.enforcedLimits,\n    network,\n  }) as AgentCandidateModelGrantReservation\n}\n\nfunction validateReservationNetwork(\n  value: unknown,\n  maxModelCalls: number,\n  gatewayDomain: string,\n): AgentCandidateModelAccessNetwork {\n  if (maxModelCalls === 0) {\n    const source = exactRecord(value, ['mode'], 'protected model reservation network')\n    if (source.mode !== 'disabled') {\n      throw new Error('zero-call protected model reservation must disable gateway access')\n    }\n    return { mode: 'disabled' }\n  }\n\n  const source = exactRecord(value, ['mode', 'domains'], 'protected model reservation network')\n  if (source.mode !== 'gateway-only') {\n    throw new Error('protected model reservation must allow only its model gateway')\n  }\n  if (\n    !Array.isArray(source.domains) ||\n    source.domains.length !== 1 ||\n    source.domains[0] !== gatewayDomain\n  ) {\n    throw new Error('protected model reservation returned an unexpected gateway domain')\n  }\n  return { mode: 'gateway-only', domains: [gatewayDomain] }\n}\n\nfunction validateActivation(\n  value: unknown,\n  expectedNames: readonly string[],\n): AgentCandidateProtectedModelActivation {\n  const source = exactRecord(value, ['env'], 'protected model activation response')\n  const env = record(source.env, 'protected model activation environment')\n  const actualNames = Object.keys(env).sort()\n  if (\n    actualNames.length !== expectedNames.length ||\n    actualNames.some((name, index) => name !== expectedNames[index])\n  ) {\n    throw new Error('protected model activation returned unexpected environment names')\n  }\n  const detached: Record<string, string> = Object.create(null) as Record<string, string>\n  for (const name of expectedNames) {\n    const value = env[name]\n    if (typeof value !== 'string' || value.length < 8 || value.length > 65_536) {\n      throw new Error(`protected model activation ${name} must be a non-empty protected value`)\n    }\n    detached[name] = value\n  }\n  return Object.freeze({ env: Object.freeze(detached) })\n}\n\nfunction validateResolvedModel(\n  value: unknown,\n  expected: Parameters<AgentCandidateModelPort['resolve']>[0],\n): AgentCandidateResolvedModel {\n  const source = exactRecord(\n    value,\n    ['requested', 'provider', 'model', 'snapshot', 'reasoningEffort'],\n    'resolved candidate model',\n  )\n  if (source.requested !== expected.requested) {\n    throw new Error('model resolver changed the evaluator-owned request')\n  }\n  if (source.reasoningEffort !== expected.reasoningEffort) {\n    throw new Error('model resolver changed the evaluator-owned reasoning effort')\n  }\n  for (const name of ['requested', 'provider', 'model', 'snapshot'] as const) {\n    if (typeof source[name] !== 'string' || source[name].length === 0) {\n      throw new Error(`resolved candidate model ${name} must be non-empty`)\n    }\n  }\n  return source as unknown as AgentCandidateResolvedModel\n}\n\nfunction assertGrantIdentity(\n  expected: RememberedReservation,\n  actual: AgentCandidateModelGrantActivateInput | AgentCandidateModelGrantSettleInput,\n): void {\n  if (\n    actual.executionId !== expected.executionId ||\n    actual.preparationId !== expected.preparationId ||\n    actual.grantDigest !== expected.grantDigest ||\n    canonicalCandidateDigest(actual.resolved) !== canonicalCandidateDigest(expected.resolved)\n  ) {\n    throw new Error('protected model grant input does not match its immutable reservation')\n  }\n}\n\nfunction assertWithinReservedLimits(\n  usage: {\n    modelCalls: number\n    inputTokens: number\n    outputTokens: number\n    costUsdNanos: number\n  },\n  reservation: RememberedReservation,\n): void {\n  for (const [name, actual, limit] of [\n    ['model calls', usage.modelCalls, reservation.limits.maxModelCalls],\n    ['input tokens', usage.inputTokens, reservation.limits.maxInputTokens],\n    ['output tokens', usage.outputTokens, reservation.limits.maxOutputTokens],\n    ['cost USD nanos', usage.costUsdNanos, reservation.maxCostUsdNanos],\n  ] as const) {\n    if (actual > limit) {\n      throw new Error(`protected model settlement ${name} ${actual} exceeds reserved ${limit}`)\n    }\n  }\n}\n\nfunction exactEnvironmentNames(values: readonly string[]): readonly string[] {\n  if (values.length === 0) {\n    throw new Error('protected model activation environment names must not be empty')\n  }\n  const names = [...values].sort()\n  if (new Set(names).size !== names.length) {\n    throw new Error('protected model activation environment names must be unique')\n  }\n  for (const name of names) {\n    if (\n      !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) ||\n      ['__proto__', 'constructor', 'prototype'].includes(name)\n    ) {\n      throw new Error(`protected model activation environment name is invalid: ${name}`)\n    }\n  }\n  return Object.freeze(names)\n}\n\nfunction assertGatewayDomain(value: string): string {\n  if (\n    value.length > 253 ||\n    value !== value.toLowerCase() ||\n    value.endsWith('.') ||\n    value.includes(':') ||\n    value === 'localhost' ||\n    value.endsWith('.localhost') ||\n    value === 'metadata.google' ||\n    value === 'metadata.google.internal'\n  ) {\n    throw new Error('protected model gateway must be an exact lowercase public DNS name')\n  }\n  const labels = value.split('.')\n  if (\n    labels.length < 2 ||\n    !labels.every(\n      (label) =>\n        label.length >= 1 && label.length <= 63 && /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(label),\n    ) ||\n    !/[a-z]/.test(labels.at(-1) ?? '')\n  ) {\n    throw new Error('protected model gateway must be an exact lowercase public DNS name')\n  }\n  return value\n}\n\nfunction reservationKey(executionId: string, preparationId: string): string {\n  return canonicalCandidateDigest({ executionId, preparationId })\n}\n\nfunction pruneExpiredState(\n  reservations: Map<string, RememberedReservation>,\n  settlements: Map<string, RememberedSettlement>,\n  now: number,\n): void {\n  for (const [key, value] of reservations) {\n    if (value.expiresAtMs <= now) reservations.delete(key)\n  }\n  for (const [key, value] of settlements) {\n    if (value.expiresAtMs <= now) settlements.delete(key)\n  }\n}\n\nfunction rememberSettlement(\n  settlements: Map<string, RememberedSettlement>,\n  key: string,\n  value: RememberedSettlement,\n): void {\n  settlements.delete(key)\n  settlements.set(key, value)\n  while (settlements.size > MAX_RECENT_SETTLEMENTS) {\n    const oldest = settlements.keys().next().value\n    if (oldest === undefined) return\n    settlements.delete(oldest)\n  }\n}\n\nfunction isSha256Digest(value: unknown): value is Sha256Digest {\n  return typeof value === 'string' && /^sha256:[a-f0-9]{64}$/.test(value)\n}\n\nfunction exactRecord(\n  value: unknown,\n  keys: readonly string[],\n  label: string,\n): Record<string, unknown> {\n  const source = record(value, label)\n  assertExactObjectKeys(source, keys, label)\n  return source\n}\n\nfunction record(value: unknown, label: string): Record<string, unknown> {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error(`${label} must be an object`)\n  }\n  const prototype = Object.getPrototypeOf(value)\n  if (prototype !== Object.prototype && prototype !== null) {\n    throw new Error(`${label} must be a plain object`)\n  }\n  return value as Record<string, unknown>\n}\n","import type { TraceStore } from '@tangle-network/agent-eval'\n\nimport type {\n  AgentCandidateExecutionAttemptRef,\n  AgentCandidateExecutionClaimStore,\n  AgentCandidateExecutionFinishResult,\n} from './claim'\nimport {\n  candidateCleanupDeadline,\n  candidateCleanupTimeout,\n  withinCandidateCleanupDeadline,\n} from './cleanup'\nimport { sealAgentCandidateExecutorFinalCapture } from './executor-capture'\nimport { sealAgentCandidateModelSettlement } from './model-settlement'\nimport { persistCandidateModelSettlementEvidence } from './outcome-evidence'\nimport { RecoveryAgentCandidateTraceStore } from './protected-trace-store'\nimport type {\n  AgentCandidateExecutionPorts,\n  AgentCandidateExecutorPort,\n  AgentCandidateOutputArtifactPort,\n} from './types'\n\nexport interface RecoverExpiredAgentCandidateOptions {\n  attempt: AgentCandidateExecutionAttemptRef\n  claimStore: AgentCandidateExecutionClaimStore\n  executor: AgentCandidateExecutorPort\n  traceStore: TraceStore\n  ports: Pick<AgentCandidateExecutionPorts, 'models' | 'memory'>\n  outputArtifacts: AgentCandidateOutputArtifactPort\n  cleanupTimeoutMs?: number\n  /** Evaluator clock; must be the same clock used by the claim store. */\n  now?: () => number\n}\n\n/** Close an expired crashed attempt from persisted non-secret handles, then record failure. */\nexport async function recoverExpiredAgentCandidateExecution(\n  options: RecoverExpiredAgentCandidateOptions,\n): Promise<AgentCandidateExecutionFinishResult> {\n  const record = await options.claimStore.getAttempt(options.attempt)\n  if (!record) throw new Error('candidate execution recovery attempt is missing')\n  if (record.terminal) {\n    return Object.freeze({ finished: false, terminal: record.terminal, exactReplay: true })\n  }\n  const cleanupTimeoutMs = candidateCleanupTimeout(\n    options.cleanupTimeoutMs ?? record.claim.cleanup.cleanupTimeoutMs,\n  )\n  if (cleanupTimeoutMs > record.claim.cleanup.cleanupTimeoutMs) {\n    throw new Error('recovery cleanup timeout exceeds the frozen preparation bound')\n  }\n\n  const now = options.now ?? Date.now\n  if (now() < record.claim.leaseExpiresAtMs) {\n    throw new Error('candidate execution lease has not expired')\n  }\n\n  const cleanupDeadlineAtMs = candidateCleanupDeadline(cleanupTimeoutMs)\n  const controller = new AbortController()\n  controller.abort(new Error('recovering an expired candidate execution'))\n  const recoveryTraceStore = new RecoveryAgentCandidateTraceStore(options.traceStore)\n  const processClosure = withinCandidateCleanupDeadline(\n    async () => {\n      const stopped = await options.executor.stopAndCapture(\n        {\n          executionId: record.claim.executionId,\n          executionPlanDigest: record.claim.executionPlanDigest,\n        },\n        {\n          traceStore: recoveryTraceStore,\n          reason: 'failed',\n          signal: controller.signal,\n          deadlineAtMs: record.claim.leaseExpiresAtMs,\n        },\n      )\n      sealAgentCandidateExecutorFinalCapture(stopped)\n      return { stopped: true as const }\n    },\n    cleanupDeadlineAtMs,\n    'expired candidate process termination',\n  )\n\n  const modelClosure = withinCandidateCleanupDeadline(\n    async () =>\n      sealAgentCandidateModelSettlement(\n        await options.ports.models.settleGrant({\n          executionId: record.claim.executionId,\n          preparationId: record.claim.cleanup.preparationId,\n          grantDigest: record.claim.cleanup.modelGrantDigest,\n          resolved: record.claim.cleanup.resolvedModel,\n          reason: 'failed',\n        }),\n        {\n          preparationId: record.claim.cleanup.preparationId,\n          grantDigest: record.claim.cleanup.modelGrantDigest,\n          model: record.claim.cleanup.resolvedModel.model,\n        },\n      ),\n    cleanupDeadlineAtMs,\n    'expired candidate model settlement',\n  )\n\n  const memoryClosure = record.claim.cleanup.memory\n    ? withinCandidateCleanupDeadline(\n        async () => {\n          const memory = record.claim.cleanup.memory\n          if (!memory) throw new Error('expired candidate memory handle is missing')\n          const closed = await options.ports.memory.close({\n            executionId: record.claim.executionId,\n            preparationId: record.claim.cleanup.preparationId,\n            accessDigest: memory.accessDigest,\n            effectiveNamespace: memory.effectiveNamespace,\n            reason: 'failed',\n          })\n          if (closed.closed !== true || Object.keys(closed).some((key) => key !== 'closed')) {\n            throw new Error('expired candidate memory did not acknowledge closure')\n          }\n          return { closed: true as const }\n        },\n        cleanupDeadlineAtMs,\n        'expired candidate memory closure',\n      )\n    : undefined\n\n  const operations = [processClosure, modelClosure, ...(memoryClosure ? [memoryClosure] : [])]\n  const outcomes = await Promise.allSettled(operations)\n  const failures = outcomes\n    .filter((outcome): outcome is PromiseRejectedResult => outcome.status === 'rejected')\n    .map((outcome) => outcome.reason)\n  if (failures.length > 0) {\n    throw new AggregateError(failures, 'expired candidate cleanup could not be proven')\n  }\n\n  const model = await modelClosure\n  const modelSettlement = await withinCandidateCleanupDeadline(\n    () =>\n      persistCandidateModelSettlementEvidence(\n        {\n          executionId: record.claim.executionId,\n          executionPlanDigest: record.claim.executionPlanDigest,\n          resolvedModel: record.claim.cleanup.resolvedModel,\n        },\n        model,\n        options.outputArtifacts,\n      ),\n    cleanupDeadlineAtMs,\n    'expired candidate model-settlement persistence',\n  )\n  const memory = record.claim.cleanup.memory\n  return await options.claimStore.recoverExpired(options.attempt, {\n    failureClass:\n      record.phase === 'claimed' && model.fixedUsage.modelCalls === 0\n        ? 'pre-model-infrastructure'\n        : 'unknown',\n    usage: model.fixedUsage,\n    modelSettlement: modelSettlement.artifact,\n    process: {\n      stopped: true,\n      executionPlanDigest: record.claim.executionPlanDigest,\n    },\n    model: {\n      closed: true,\n      preparationId: record.claim.cleanup.preparationId,\n      grantDigest: record.claim.cleanup.modelGrantDigest,\n    },\n    ...(memory\n      ? {\n          memory: {\n            closed: true,\n            preparationId: record.claim.cleanup.preparationId,\n            accessDigest: memory.accessDigest,\n            effectiveNamespace: memory.effectiveNamespace,\n          },\n        }\n      : {}),\n  })\n}\n","import { randomUUID } from 'node:crypto'\nimport { constants as fsConstants } from 'node:fs'\nimport {\n  lstat,\n  mkdir,\n  mkdtemp,\n  open,\n  readdir,\n  readFile,\n  realpath,\n  rename,\n  rm,\n  writeFile,\n} from 'node:fs/promises'\nimport { tmpdir } from 'node:os'\nimport { dirname, isAbsolute, join, resolve, sep, win32 } from 'node:path'\nimport { isAnyArrayBuffer, isSharedArrayBuffer } from 'node:util/types'\n\nimport type {\n  AgentCandidateCapturedArtifact,\n  AgentCandidateWorkspaceManifestMaterialV1,\n  AgentCandidateWorkspaceSnapshotEvidence,\n} from '@tangle-network/agent-interface'\nimport { type Entry, extract, type Pack, pack } from 'tar-stream'\n\nimport { captureMaterializedWorkspace, verifyBytes, verifyMaterializedWorkspace } from './artifacts'\nimport {\n  canonicalCandidateBytes,\n  canonicalCandidateDigest,\n  deepFreezeCandidate,\n  embeddedCandidateArtifact,\n  sha256Bytes,\n} from './digest'\nimport {\n  assertNoGitIndirection,\n  readCandidateGitTreeFiles,\n  runCandidateGit,\n} from './git-materialize'\nimport { persistCandidateOutputArtifact } from './output-artifacts'\nimport type {\n  AgentCandidateExecutorWorkspaceFile,\n  AgentCandidateOutputArtifactPort,\n  AgentCandidateWorkspacePort,\n} from './types'\n\nconst archiveKind = 'agent-candidate-workspace-archive' as const\nconst workspaceEntryPrefix = 'workspace/'\nconst repositoryMetadataEntry = 'metadata/repository.json'\nconst repositoryBundleEntry = 'metadata/repository.bundle'\nconst fixedTarTime = new Date(0)\n\nexport interface AgentCandidateWorkspaceArchiveLimits {\n  maxArchiveBytes: number\n  maxEmbeddedArtifactBytes: number\n  maxFiles: number\n  maxFileBytes: number\n  maxTotalFileBytes: number\n  maxPathBytes: number\n  maxRepositoryBundleBytes: number\n}\n\nconst defaultLimits: AgentCandidateWorkspaceArchiveLimits = Object.freeze({\n  maxArchiveBytes: 512 * 1024 * 1024,\n  maxEmbeddedArtifactBytes: 1024 * 1024,\n  maxFiles: 50_000,\n  maxFileBytes: 128 * 1024 * 1024,\n  maxTotalFileBytes: 256 * 1024 * 1024,\n  maxPathBytes: 4_096,\n  maxRepositoryBundleBytes: 128 * 1024 * 1024,\n})\n\ninterface WorkspaceArchiveRepositoryV1 {\n  headCommit: string\n  headTree: string\n  bundle: {\n    sha256: `sha256:${string}`\n    byteLength: number\n    bytes: Uint8Array\n  }\n}\n\ninterface WorkspaceArchiveRepositoryMetadataV1 {\n  schemaVersion: 1\n  kind: typeof archiveKind\n  headCommit: string\n  headTree: string\n  bundle: {\n    sha256: `sha256:${string}`\n    byteLength: number\n  }\n}\n\ninterface DecodedWorkspaceArchive {\n  files: Array<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>\n  repository?: WorkspaceArchiveRepositoryV1\n}\n\nexport interface CaptureAgentCandidateWorkspaceOptions {\n  /** Include Git HEAD so task preparation can prove its exact commit and tree. */\n  includeRepository?: boolean\n  limits?: Partial<AgentCandidateWorkspaceArchiveLimits>\n  /** Use the evaluator-owned artifact store when manifest or archive bytes should not be embedded. */\n  artifactPersistence?: {\n    executionId: string\n    outputArtifacts: AgentCandidateOutputArtifactPort\n    signal?: AbortSignal\n  }\n}\n\nexport interface CreateAgentCandidateWorkspacePortOptions {\n  limits?: Partial<AgentCandidateWorkspaceArchiveLimits>\n}\n\nexport interface CapturedAgentCandidateWorkspace {\n  readonly snapshot: AgentCandidateWorkspaceSnapshotEvidence\n  /** Caller-owned bytes accepted by createAgentCandidateWorkspacePort. */\n  readonly archive: Uint8Array\n}\n\n/** Capture one exact regular-file workspace for immutable candidate execution. */\nexport async function captureAgentCandidateWorkspace(\n  rootInput: string,\n  options: CaptureAgentCandidateWorkspaceOptions = {},\n): Promise<CapturedAgentCandidateWorkspace> {\n  const root = resolve(rootInput)\n  const limits = workspaceLimits(options.limits)\n  const captured = options.includeRepository\n    ? await captureRepository(root, limits)\n    : await captureMaterializedWorkspace(root, {\n        limits: {\n          maxFiles: limits.maxFiles,\n          maxFileBytes: limits.maxFileBytes,\n          maxTotalFileBytes: limits.maxTotalFileBytes,\n        },\n      })\n  assertWorkspaceFilesWithinLimits(captured.files, limits)\n  const repository = 'repository' in captured ? captured.repository : undefined\n  return captureWorkspaceFiles(captured.files, repository, limits, options.artifactPersistence)\n}\n\n/** Capture detached files returned by a remote executor into the standard archive. */\nexport async function captureAgentCandidateWorkspaceFiles(\n  input: readonly AgentCandidateExecutorWorkspaceFile[],\n  options: Omit<CaptureAgentCandidateWorkspaceOptions, 'includeRepository'> = {},\n): Promise<CapturedAgentCandidateWorkspace> {\n  const limits = workspaceLimits(options.limits)\n  return captureWorkspaceFiles(\n    normalizeWorkspaceFiles(input, limits),\n    undefined,\n    limits,\n    options.artifactPersistence,\n  )\n}\n\nasync function captureWorkspaceFiles(\n  files: readonly AgentCandidateExecutorWorkspaceFile[],\n  repository: WorkspaceArchiveRepositoryV1 | undefined,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n  artifactPersistence: CaptureAgentCandidateWorkspaceOptions['artifactPersistence'],\n): Promise<CapturedAgentCandidateWorkspace> {\n  const material = workspaceManifest(files)\n  const manifest = canonicalCandidateBytes(material)\n  const archive = await encodeWorkspaceArchive(files, repository, limits.maxArchiveBytes)\n  if (\n    !artifactPersistence &&\n    (manifest.byteLength > limits.maxEmbeddedArtifactBytes ||\n      archive.byteLength > limits.maxEmbeddedArtifactBytes)\n  ) {\n    throw new Error(\n      'candidate workspace artifacts exceed maxEmbeddedArtifactBytes; artifactPersistence is required',\n    )\n  }\n  const manifestArtifact = await captureWorkspaceArtifact('manifest', manifest, artifactPersistence)\n  const archiveArtifact = await captureWorkspaceArtifact('archive', archive, artifactPersistence)\n  const snapshot = deepFreezeCandidate({\n    schemaVersion: 1,\n    kind: 'agent-candidate-workspace-snapshot',\n    digest: canonicalCandidateDigest(material),\n    material,\n    manifest: manifestArtifact,\n    archive: archiveArtifact,\n  } satisfies AgentCandidateWorkspaceSnapshotEvidence)\n  return Object.freeze({ snapshot, archive })\n}\n\nasync function captureWorkspaceArtifact(\n  kind: 'manifest' | 'archive',\n  bytes: Uint8Array,\n  persistence: CaptureAgentCandidateWorkspaceOptions['artifactPersistence'],\n): Promise<AgentCandidateCapturedArtifact> {\n  if (!persistence) return embeddedCandidateArtifact(bytes)\n  if (!persistence.executionId.trim()) {\n    throw new Error('candidate workspace artifact persistence requires an executionId')\n  }\n  return persistCandidateOutputArtifact(persistence.outputArtifacts, {\n    executionId: persistence.executionId,\n    purpose: kind === 'manifest' ? 'candidate-workspace-manifest' : 'candidate-workspace-archive',\n    bytes,\n    ...(persistence.signal ? { signal: persistence.signal } : {}),\n  })\n}\n\n/** Create the standard bounded materializer for candidate execution ports. */\nexport function createAgentCandidateWorkspacePort(\n  options: CreateAgentCandidateWorkspacePortOptions = {},\n): AgentCandidateWorkspacePort {\n  const limits = workspaceLimits(options.limits)\n  const port: AgentCandidateWorkspacePort = {\n    materialize: async ({ role, snapshot, archive, destination }) => {\n      await materializeAgentCandidateWorkspace({\n        role,\n        snapshot,\n        archive,\n        destination,\n        limits,\n      })\n    },\n  }\n  return Object.freeze(port)\n}\n\nasync function materializeAgentCandidateWorkspace(input: {\n  role: 'task' | 'candidate' | 'memory'\n  snapshot: AgentCandidateWorkspaceSnapshotEvidence\n  archive: Uint8Array\n  destination: string\n  limits: AgentCandidateWorkspaceArchiveLimits\n}): Promise<void> {\n  verifyBytes(\n    input.archive,\n    input.snapshot.archive.sha256,\n    input.snapshot.archive.byteLength,\n    'candidate workspace archive',\n  )\n  const decoded = await parseWorkspaceArchive(input.archive, input.limits)\n  if (decoded.repository && input.role !== 'task') {\n    throw new Error('only task workspaces may carry a Git repository')\n  }\n  assertArchiveMatchesSnapshot(decoded.files, input.snapshot)\n  const destination = resolve(input.destination)\n  await prepareEmptyDestination(destination)\n  const staging = await mkdtemp(`${destination}.materializing-`)\n  try {\n    await writeWorkspaceFiles(staging, decoded.files)\n    if (decoded.repository) {\n      await materializeRepository(decoded.repository, staging)\n    }\n    await verifyMaterializedWorkspace(staging, input.snapshot.material, {\n      ignoredProtectedRootEntries: decoded.repository ? ['.git'] : [],\n    })\n    await rename(staging, destination)\n  } catch (error) {\n    await rm(staging, { recursive: true, force: true })\n    await rm(destination, { recursive: true, force: true })\n    throw error\n  }\n}\n\nasync function captureRepository(\n  root: string,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): Promise<{\n  files: Array<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>\n  repository: WorkspaceArchiveRepositoryV1\n}> {\n  const stats = await lstat(root)\n  if (!stats.isDirectory() || stats.isSymbolicLink() || (await realpath(root)) !== root) {\n    throw new Error('candidate repository root must be a real directory')\n  }\n  const topLevel = (await runCandidateGit(root, ['rev-parse', '--show-toplevel'])).stdout\n    .toString('utf8')\n    .trim()\n  if (resolve(topLevel) !== root) {\n    throw new Error('candidate repository capture must start at the Git worktree root')\n  }\n  const gitDir = resolve(\n    (await runCandidateGit(root, ['rev-parse', '--absolute-git-dir'])).stdout\n      .toString('utf8')\n      .trim(),\n  )\n  if ((await realpath(gitDir)) !== gitDir || gitDir.includes(':')) {\n    throw new Error('candidate repository Git object store has an unsupported path')\n  }\n  await assertNoGitIndirection(root, gitDir, 'candidate repository')\n  const headCommit = (await runCandidateGit(root, ['rev-parse', 'HEAD'])).stdout\n    .toString('utf8')\n    .trim()\n  const headTree = (await runCandidateGit(root, ['rev-parse', 'HEAD^{tree}'])).stdout\n    .toString('utf8')\n    .trim()\n  assertGitObjectId(headCommit, 'HEAD')\n  assertGitObjectId(headTree, 'HEAD tree')\n  if (headCommit.length !== headTree.length) {\n    throw new Error('candidate repository HEAD and tree use different object formats')\n  }\n  const files = await readCandidateGitTreeFiles(root, headTree, {}, limits)\n  assertWorkspaceFilesWithinLimits(files, limits)\n  const reachableBytesText = (\n    await runCandidateGit(root, ['rev-list', '--disk-usage', '--objects', 'HEAD'])\n  ).stdout\n    .toString('utf8')\n    .trim()\n  const reachableBytes = Number(reachableBytesText)\n  if (!Number.isSafeInteger(reachableBytes) || reachableBytes < 0) {\n    throw new Error('candidate repository reachable size is invalid')\n  }\n  if (reachableBytes > limits.maxRepositoryBundleBytes) {\n    throw new Error('candidate repository exceeds maxRepositoryBundleBytes')\n  }\n  const temporary = await mkdtemp(join(tmpdir(), 'agent-candidate-workspace-bundle-'))\n  const bundlePath = join(temporary, `${randomUUID()}.bundle`)\n  try {\n    await runCandidateGit(root, ['bundle', 'create', bundlePath, 'HEAD'])\n    const bundle = Uint8Array.from(await readFile(bundlePath))\n    if (bundle.byteLength > limits.maxRepositoryBundleBytes) {\n      throw new Error('candidate repository bundle exceeds maxRepositoryBundleBytes')\n    }\n    return {\n      files,\n      repository: {\n        headCommit,\n        headTree,\n        bundle: {\n          sha256: sha256Bytes(bundle),\n          byteLength: bundle.byteLength,\n          bytes: bundle,\n        },\n      },\n    }\n  } finally {\n    await rm(temporary, { recursive: true, force: true })\n  }\n}\n\nasync function encodeWorkspaceArchive(\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n  repository: WorkspaceArchiveRepositoryV1 | undefined,\n  maxArchiveBytes: number,\n): Promise<Uint8Array> {\n  const archive = pack()\n  const output = collectStream(archive, maxArchiveBytes, 'candidate workspace archive')\n  try {\n    await writeWorkspaceArchiveEntries(archive, files, repository)\n    archive.finalize()\n    return await output\n  } catch (error) {\n    archive.destroy(error instanceof Error ? error : new Error(String(error)))\n    await output.catch(() => undefined)\n    throw error\n  }\n}\n\nasync function verifyCanonicalWorkspaceArchive(\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n  repository: WorkspaceArchiveRepositoryV1 | undefined,\n  expected: Uint8Array,\n  maxArchiveBytes: number,\n): Promise<void> {\n  const archive = pack()\n  const comparison = streamEqualsBytes(\n    archive,\n    expected,\n    maxArchiveBytes,\n    'candidate workspace archive',\n  )\n  try {\n    await writeWorkspaceArchiveEntries(archive, files, repository)\n    archive.finalize()\n    if (!(await comparison)) throw new Error('candidate workspace tar is not canonical')\n  } catch (error) {\n    archive.destroy(error instanceof Error ? error : new Error(String(error)))\n    await comparison.catch(() => undefined)\n    throw error\n  }\n}\n\nasync function writeWorkspaceArchiveEntries(\n  archive: Pack,\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n  repository: WorkspaceArchiveRepositoryV1 | undefined,\n): Promise<void> {\n  for (const file of files) {\n    await writeTarEntry(archive, `${workspaceEntryPrefix}${file.path}`, file.mode, file.bytes)\n  }\n  if (!repository) return\n  const metadata = canonicalCandidateBytes({\n    schemaVersion: 1,\n    kind: archiveKind,\n    headCommit: repository.headCommit,\n    headTree: repository.headTree,\n    bundle: {\n      sha256: repository.bundle.sha256,\n      byteLength: repository.bundle.byteLength,\n    },\n  } satisfies WorkspaceArchiveRepositoryMetadataV1)\n  await writeTarEntry(archive, repositoryMetadataEntry, 0o600, metadata)\n  await writeTarEntry(archive, repositoryBundleEntry, 0o600, repository.bundle.bytes)\n}\n\nasync function parseWorkspaceArchive(\n  bytes: Uint8Array,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): Promise<DecodedWorkspaceArchive> {\n  if (bytes.byteLength > limits.maxArchiveBytes) {\n    throw new Error('candidate workspace archive exceeds maxArchiveBytes')\n  }\n  const parser = extract()\n  const files: DecodedWorkspaceArchive['files'] = []\n  const observedEntryNames = new Set<string>()\n  const observedPaths = new Set<string>()\n  let totalBytes = 0\n  let retainedEntryBytes = 0\n  let previousPath: string | undefined\n  let repositoryMetadata: WorkspaceArchiveRepositoryMetadataV1 | undefined\n  let repositoryBundle: Uint8Array | undefined\n  const decoded = (async () => {\n    for await (const entry of parser) {\n      const name = entry.header.name\n      if (\n        entry.header.type !== 'file' ||\n        typeof name !== 'string' ||\n        observedEntryNames.has(name)\n      ) {\n        throw new Error('candidate workspace tar contains an invalid entry')\n      }\n      observedEntryNames.add(name)\n      if (name.startsWith(workspaceEntryPrefix)) {\n        if (files.length >= limits.maxFiles) {\n          throw new Error('candidate workspace archive has an invalid file count')\n        }\n        const path = safeArchivePath(name.slice(workspaceEntryPrefix.length), limits.maxPathBytes)\n        if (entry.header.mode !== 0o644 && entry.header.mode !== 0o755) {\n          throw new Error(`candidate workspace archive has an unsupported mode: ${path}`)\n        }\n        assertRetainedArchiveSize(bytes.byteLength, retainedEntryBytes, entry.header.size, limits)\n        const fileBytes = await readTarEntry(entry, limits.maxFileBytes, `workspace file ${path}`)\n        retainedEntryBytes += fileBytes.byteLength\n        assertWorkspacePathOrder(\n          path,\n          previousPath,\n          observedPaths,\n          'candidate workspace archive paths must be unique and sorted',\n        )\n        previousPath = path\n        if (fileBytes.byteLength > limits.maxTotalFileBytes - totalBytes) {\n          throw new Error('candidate workspace archive exceeds maxTotalFileBytes')\n        }\n        totalBytes += fileBytes.byteLength\n        files.push({ path, mode: entry.header.mode, bytes: fileBytes })\n      } else if (name === repositoryMetadataEntry) {\n        if (entry.header.mode !== 0o600 || repositoryMetadata) {\n          throw new Error('candidate workspace archive repository metadata is invalid')\n        }\n        assertRetainedArchiveSize(bytes.byteLength, retainedEntryBytes, entry.header.size, limits)\n        const metadataBytes = await readTarEntry(\n          entry,\n          limits.maxPathBytes,\n          'candidate repository metadata',\n        )\n        retainedEntryBytes += metadataBytes.byteLength\n        repositoryMetadata = parseRepositoryMetadata(metadataBytes, limits.maxRepositoryBundleBytes)\n      } else if (name === repositoryBundleEntry) {\n        if (entry.header.mode !== 0o600 || repositoryBundle) {\n          throw new Error('candidate workspace archive repository bundle is invalid')\n        }\n        assertRetainedArchiveSize(bytes.byteLength, retainedEntryBytes, entry.header.size, limits)\n        repositoryBundle = await readTarEntry(\n          entry,\n          limits.maxRepositoryBundleBytes,\n          'candidate Git bundle',\n        )\n        retainedEntryBytes += repositoryBundle.byteLength\n      } else {\n        throw new Error(`candidate workspace tar contains an unsupported entry: ${name}`)\n      }\n    }\n    if (Boolean(repositoryMetadata) !== Boolean(repositoryBundle)) {\n      throw new Error('candidate workspace archive repository evidence is incomplete')\n    }\n    const repository =\n      repositoryMetadata && repositoryBundle\n        ? repositoryFromTar(repositoryMetadata, repositoryBundle)\n        : undefined\n    return { files, ...(repository ? { repository } : {}) }\n  })()\n  parser.end(Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength))\n  const result = await decoded\n  await verifyCanonicalWorkspaceArchive(\n    result.files,\n    result.repository,\n    bytes,\n    limits.maxArchiveBytes,\n  )\n  return result\n}\n\nfunction assertRetainedArchiveSize(\n  archiveBytes: number,\n  retainedEntryBytes: number,\n  entryBytes: number | undefined,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): void {\n  if (\n    !Number.isSafeInteger(entryBytes) ||\n    entryBytes === undefined ||\n    entryBytes < 0 ||\n    entryBytes > limits.maxArchiveBytes - archiveBytes - retainedEntryBytes\n  ) {\n    throw new Error('candidate workspace archive exceeds maxArchiveBytes while decoding')\n  }\n}\n\nfunction parseRepositoryMetadata(\n  bytes: Uint8Array,\n  maxBundleBytes: number,\n): WorkspaceArchiveRepositoryMetadataV1 {\n  let value: unknown\n  try {\n    value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes))\n  } catch (error) {\n    throw new Error('candidate workspace archive repository metadata is invalid', { cause: error })\n  }\n  if (\n    !isRecord(value) ||\n    Object.keys(value).sort().join(',') !== 'bundle,headCommit,headTree,kind,schemaVersion' ||\n    value.schemaVersion !== 1 ||\n    value.kind !== archiveKind ||\n    typeof value.headCommit !== 'string' ||\n    typeof value.headTree !== 'string' ||\n    !isRecord(value.bundle) ||\n    Object.keys(value.bundle).sort().join(',') !== 'byteLength,sha256' ||\n    typeof value.bundle.sha256 !== 'string' ||\n    !/^sha256:[a-f0-9]{64}$/.test(value.bundle.sha256) ||\n    !Number.isSafeInteger(value.bundle.byteLength) ||\n    (value.bundle.byteLength as number) <= 0 ||\n    (value.bundle.byteLength as number) > maxBundleBytes\n  ) {\n    throw new Error('candidate workspace archive repository is invalid')\n  }\n  if (!Buffer.from(canonicalCandidateBytes(value)).equals(Buffer.from(bytes))) {\n    throw new Error('candidate workspace archive repository metadata is not canonical')\n  }\n  assertGitObjectId(value.headCommit, 'repository HEAD')\n  assertGitObjectId(value.headTree, 'repository HEAD tree')\n  if (value.headCommit.length !== value.headTree.length) {\n    throw new Error('candidate repository HEAD and tree use different object formats')\n  }\n  return {\n    schemaVersion: 1,\n    kind: archiveKind,\n    headCommit: value.headCommit,\n    headTree: value.headTree,\n    bundle: {\n      sha256: value.bundle.sha256 as `sha256:${string}`,\n      byteLength: value.bundle.byteLength as number,\n    },\n  }\n}\n\nfunction repositoryFromTar(\n  metadata: WorkspaceArchiveRepositoryMetadataV1,\n  bundle: Uint8Array,\n): WorkspaceArchiveRepositoryV1 {\n  verifyBytes(bundle, metadata.bundle.sha256, metadata.bundle.byteLength, 'candidate Git bundle')\n  return {\n    headCommit: metadata.headCommit,\n    headTree: metadata.headTree,\n    bundle: { ...metadata.bundle, bytes: bundle },\n  }\n}\n\nasync function writeTarEntry(\n  archive: Pack,\n  name: string,\n  mode: 0o600 | 0o644 | 0o755,\n  bytes: Uint8Array,\n): Promise<void> {\n  await new Promise<void>((resolveEntry, rejectEntry) => {\n    archive.entry(\n      {\n        name,\n        mode,\n        uid: 0,\n        gid: 0,\n        size: bytes.byteLength,\n        mtime: fixedTarTime,\n        type: 'file',\n        uname: '',\n        gname: '',\n      },\n      Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength),\n      (error) => (error ? rejectEntry(error) : resolveEntry()),\n    )\n  })\n}\n\nasync function readTarEntry(entry: Entry, maxBytes: number, label: string): Promise<Uint8Array> {\n  const size = entry.header.size\n  if (!Number.isSafeInteger(size) || size === undefined || size < 0 || size > maxBytes) {\n    throw new Error(`${label} has an invalid tar size`)\n  }\n  const bytes = await collectStream(entry, maxBytes, label)\n  if (bytes.byteLength !== size) throw new Error(`${label} differs from its tar size`)\n  return bytes\n}\n\nasync function collectStream(\n  stream: AsyncIterable<Uint8Array>,\n  maxBytes: number,\n  label: string,\n): Promise<Uint8Array> {\n  const chunks: Buffer[] = []\n  let totalBytes = 0\n  for await (const chunk of stream) {\n    if (chunk.byteLength > maxBytes - totalBytes) {\n      const error = new Error(`${label} exceeds its size limit`)\n      if ('destroy' in stream && typeof stream.destroy === 'function') stream.destroy(error)\n      throw error\n    }\n    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)\n    chunks.push(bytes)\n    totalBytes += bytes.byteLength\n  }\n  return Buffer.concat(chunks, totalBytes)\n}\n\nasync function streamEqualsBytes(\n  stream: AsyncIterable<Uint8Array>,\n  expected: Uint8Array,\n  maxBytes: number,\n  label: string,\n): Promise<boolean> {\n  const expectedBuffer = Buffer.from(expected.buffer, expected.byteOffset, expected.byteLength)\n  let equal = true\n  let offset = 0\n  for await (const chunk of stream) {\n    if (chunk.byteLength > maxBytes - offset) {\n      const error = new Error(`${label} exceeds its size limit`)\n      if ('destroy' in stream && typeof stream.destroy === 'function') stream.destroy(error)\n      throw error\n    }\n    const observed = Buffer.from(chunk.buffer, chunk.byteOffset, chunk.byteLength)\n    if (\n      offset + observed.byteLength > expectedBuffer.byteLength ||\n      !observed.equals(expectedBuffer.subarray(offset, offset + observed.byteLength))\n    ) {\n      equal = false\n    }\n    offset += observed.byteLength\n  }\n  return equal && offset === expectedBuffer.byteLength\n}\n\nasync function prepareEmptyDestination(destination: string): Promise<void> {\n  await mkdir(destination, { recursive: true, mode: 0o700 })\n  const stats = await lstat(destination)\n  if (\n    !stats.isDirectory() ||\n    stats.isSymbolicLink() ||\n    (await realpath(destination)) !== destination\n  ) {\n    throw new Error('candidate workspace destination must be a real directory')\n  }\n  if ((await readdir(destination)).length > 0) {\n    throw new Error('candidate workspace destination must be empty')\n  }\n}\n\nasync function writeWorkspaceFiles(\n  destination: string,\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n): Promise<void> {\n  for (const file of files) {\n    const path = workspacePath(destination, file.path)\n    await mkdir(dirname(path), { recursive: true, mode: 0o700 })\n    const descriptor = await open(\n      path,\n      fsConstants.O_WRONLY |\n        fsConstants.O_CREAT |\n        fsConstants.O_EXCL |\n        (typeof fsConstants.O_NOFOLLOW === 'number' ? fsConstants.O_NOFOLLOW : 0),\n      0o600,\n    )\n    try {\n      await descriptor.writeFile(file.bytes)\n      const stats = await descriptor.stat()\n      if (!stats.isFile() || stats.nlink !== 1) {\n        throw new Error(`candidate workspace file identity changed while writing: ${file.path}`)\n      }\n      await descriptor.chmod(file.mode)\n    } finally {\n      await descriptor.close()\n    }\n  }\n}\n\nasync function materializeRepository(\n  repository: WorkspaceArchiveRepositoryV1,\n  destination: string,\n): Promise<void> {\n  const temporary = await mkdtemp(join(tmpdir(), 'agent-candidate-workspace-bundle-'))\n  const bundlePath = join(temporary, `${randomUUID()}.bundle`)\n  try {\n    await writeFile(bundlePath, repository.bundle.bytes, { flag: 'wx', mode: 0o600 })\n    await runCandidateGit(destination, [\n      'init',\n      '--quiet',\n      '--initial-branch=candidate',\n      `--object-format=${repository.headCommit.length === 64 ? 'sha256' : 'sha1'}`,\n    ])\n    await runCandidateGit(destination, ['bundle', 'verify', bundlePath])\n    await runCandidateGit(destination, ['bundle', 'unbundle', bundlePath])\n    const objectType = (\n      await runCandidateGit(destination, ['cat-file', '-t', repository.headCommit])\n    ).stdout\n      .toString('utf8')\n      .trim()\n    if (objectType !== 'commit') throw new Error('candidate repository HEAD is not a commit')\n    const observedTree = (\n      await runCandidateGit(destination, ['rev-parse', `${repository.headCommit}^{tree}`])\n    ).stdout\n      .toString('utf8')\n      .trim()\n    if (observedTree !== repository.headTree) {\n      throw new Error('candidate repository bundle HEAD tree changed')\n    }\n    await runCandidateGit(destination, ['update-ref', '--no-deref', 'HEAD', repository.headCommit])\n    await runCandidateGit(destination, ['read-tree', repository.headTree])\n    const status = (\n      await runCandidateGit(destination, ['status', '--porcelain=v1', '--untracked-files=all'])\n    ).stdout\n      .toString('utf8')\n      .trim()\n    if (status) throw new Error('candidate repository files do not exactly match HEAD')\n  } finally {\n    await rm(temporary, { recursive: true, force: true })\n  }\n}\n\nfunction workspaceManifest(\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n): AgentCandidateWorkspaceManifestMaterialV1 {\n  return {\n    schemaVersion: 1,\n    kind: 'agent-candidate-workspace-manifest',\n    files: files.map((file) => ({\n      path: file.path,\n      mode: file.mode,\n      sha256: sha256Bytes(file.bytes),\n      byteLength: file.bytes.byteLength,\n    })),\n  }\n}\n\nfunction assertArchiveMatchesSnapshot(\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n  snapshot: AgentCandidateWorkspaceSnapshotEvidence,\n): void {\n  const material = workspaceManifest(files)\n  const materialBytes = canonicalCandidateBytes(material)\n  verifyBytes(\n    materialBytes,\n    snapshot.manifest.sha256,\n    snapshot.manifest.byteLength,\n    'candidate workspace manifest',\n  )\n  if (\n    canonicalCandidateDigest(material) !== snapshot.digest ||\n    !Buffer.from(materialBytes).equals(Buffer.from(canonicalCandidateBytes(snapshot.material)))\n  ) {\n    throw new Error('candidate workspace archive does not match its snapshot manifest')\n  }\n}\n\nfunction assertWorkspaceFilesWithinLimits(\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): void {\n  if (files.length > limits.maxFiles) {\n    throw new Error('candidate workspace exceeds maxFiles')\n  }\n  let totalBytes = 0\n  let previousPath: string | undefined\n  const observedPaths = new Set<string>()\n  for (const file of files) {\n    const path = safeArchivePath(file.path, limits.maxPathBytes)\n    assertWorkspacePathOrder(\n      path,\n      previousPath,\n      observedPaths,\n      'candidate workspace paths must be unique and sorted',\n    )\n    previousPath = path\n    if (file.mode !== 0o644 && file.mode !== 0o755) {\n      throw new Error(`candidate workspace file has unsupported mode: ${path}`)\n    }\n    if (file.bytes.byteLength > limits.maxFileBytes) {\n      throw new Error(`candidate workspace file exceeds maxFileBytes: ${path}`)\n    }\n    totalBytes += file.bytes.byteLength\n    if (totalBytes > limits.maxTotalFileBytes) {\n      throw new Error('candidate workspace exceeds maxTotalFileBytes')\n    }\n  }\n}\n\nfunction normalizeWorkspaceFiles(\n  input: readonly AgentCandidateExecutorWorkspaceFile[],\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): AgentCandidateExecutorWorkspaceFile[] {\n  if (!Array.isArray(input)) {\n    throw new Error('candidate workspace files must be an array')\n  }\n  const fileCount = input.length\n  if (fileCount > limits.maxFiles) {\n    throw new Error('candidate workspace exceeds maxFiles')\n  }\n  let totalBytes = 0\n  const files: AgentCandidateExecutorWorkspaceFile[] = []\n  for (let index = 0; index < fileCount; index++) {\n    const inputFile = input[index]\n    if (!isRecord(inputFile) || Object.keys(inputFile).sort().join(',') !== 'bytes,mode,path') {\n      throw new Error(`candidate workspace file ${index} is invalid`)\n    }\n    const descriptors = Object.getOwnPropertyDescriptors(inputFile)\n    if (\n      !('value' in (descriptors.path ?? {})) ||\n      !('value' in (descriptors.mode ?? {})) ||\n      !('value' in (descriptors.bytes ?? {}))\n    ) {\n      throw new Error(`candidate workspace file ${index} must use fixed values`)\n    }\n    const path = safeArchivePath(descriptors.path?.value, limits.maxPathBytes)\n    const mode = descriptors.mode?.value\n    const inputBytes = descriptors.bytes?.value\n    if (mode !== 0o644 && mode !== 0o755) {\n      throw new Error(`candidate workspace file has unsupported mode: ${path}`)\n    }\n    const view = inspectWorkspaceBytes(inputBytes, path)\n    if (view.byteLength > limits.maxFileBytes) {\n      throw new Error(`candidate workspace file exceeds maxFileBytes: ${path}`)\n    }\n    if (view.byteLength > limits.maxTotalFileBytes - totalBytes) {\n      throw new Error('candidate workspace exceeds maxTotalFileBytes')\n    }\n    if (view.byteLength > Math.max(0, limits.maxArchiveBytes - 1024)) {\n      throw new Error('candidate workspace archive exceeds maxArchiveBytes')\n    }\n    totalBytes += view.byteLength\n    files.push({ path, mode, bytes: detachWorkspaceBytes(view) })\n  }\n  files.sort((left, right) => (left.path < right.path ? -1 : left.path > right.path ? 1 : 0))\n  assertWorkspaceFilesWithinLimits(files, limits)\n  return files\n}\n\nfunction workspaceLimits(\n  overrides: Partial<AgentCandidateWorkspaceArchiveLimits> | undefined,\n): AgentCandidateWorkspaceArchiveLimits {\n  const limits = { ...defaultLimits, ...overrides }\n  for (const [name, value] of Object.entries(limits)) {\n    if (!Number.isSafeInteger(value) || value <= 0) {\n      throw new Error(`candidate workspace ${name} must be a positive safe integer`)\n    }\n  }\n  return Object.freeze(limits)\n}\n\nfunction safeArchivePath(value: unknown, maxPathBytes: number): string {\n  if (\n    typeof value !== 'string' ||\n    !value ||\n    !isWellFormedUnicode(value) ||\n    Buffer.byteLength(value, 'utf8') > maxPathBytes ||\n    isAbsolute(value) ||\n    win32.isAbsolute(value) ||\n    value.includes('\\\\') ||\n    value.includes('\\0') ||\n    hasControlCharacter(value) ||\n    value.split('/').some((part) => !part || part === '.' || part === '..') ||\n    ['.git', '.sidecar'].includes(value.split('/')[0]?.toLowerCase() ?? '')\n  ) {\n    throw new Error(`candidate workspace archive contains an unsafe path: ${String(value)}`)\n  }\n  return value\n}\n\nfunction assertWorkspacePathOrder(\n  path: string,\n  previousPath: string | undefined,\n  observedPaths: Set<string>,\n  errorMessage: string,\n): void {\n  if (previousPath !== undefined && previousPath >= path) throw new Error(errorMessage)\n  for (let slash = path.indexOf('/'); slash !== -1; slash = path.indexOf('/', slash + 1)) {\n    if (observedPaths.has(path.slice(0, slash))) throw new Error(errorMessage)\n  }\n  observedPaths.add(path)\n}\n\nfunction inspectWorkspaceBytes(\n  input: unknown,\n  path: string,\n): { buffer: ArrayBuffer; byteOffset: number; byteLength: number } {\n  let buffer: ArrayBufferLike\n  let byteOffset: number\n  let byteLength: number\n  try {\n    buffer = typedArrayBufferGetter.call(input as Uint8Array) as ArrayBufferLike\n    byteOffset = typedArrayByteOffsetGetter.call(input as Uint8Array) as number\n    byteLength = typedArrayByteLengthGetter.call(input as Uint8Array) as number\n  } catch {\n    throw new Error(`candidate workspace file bytes are invalid: ${path}`)\n  }\n  if (isSharedArrayBuffer(buffer)) {\n    throw new Error(`candidate workspace file uses shared bytes: ${path}`)\n  }\n  if (!isAnyArrayBuffer(buffer)) {\n    throw new Error(`candidate workspace file bytes are invalid: ${path}`)\n  }\n  return { buffer, byteOffset, byteLength }\n}\n\nfunction detachWorkspaceBytes(input: {\n  buffer: ArrayBuffer\n  byteOffset: number\n  byteLength: number\n}): Uint8Array {\n  const { buffer, byteOffset, byteLength } = input\n  const copy = new Uint8Array(byteLength)\n  Uint8Array.prototype.set.call(copy, new Uint8Array(buffer, byteOffset, byteLength))\n  return copy\n}\n\nfunction isWellFormedUnicode(value: string): boolean {\n  for (let index = 0; index < value.length; index++) {\n    const code = value.charCodeAt(index)\n    if (code >= 0xd800 && code <= 0xdbff) {\n      const next = value.charCodeAt(index + 1)\n      if (!(next >= 0xdc00 && next <= 0xdfff)) return false\n      index++\n    } else if (code >= 0xdc00 && code <= 0xdfff) {\n      return false\n    }\n  }\n  return true\n}\n\nfunction workspacePath(root: string, relativePath: string): string {\n  const path = resolve(root, relativePath)\n  if (!path.startsWith(`${root}${sep}`)) {\n    throw new Error(`candidate workspace archive path escapes its destination: ${relativePath}`)\n  }\n  return path\n}\n\nfunction assertGitObjectId(value: string, label: string): void {\n  if (!/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(value)) {\n    throw new Error(`candidate repository ${label} is not a Git object id`)\n  }\n}\n\nfunction hasControlCharacter(value: string): boolean {\n  for (let index = 0; index < value.length; index++) {\n    const code = value.charCodeAt(index)\n    if (code < 0x20 || code === 0x7f) return true\n  }\n  return false\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\ntype TypedArrayGetter = (this: Uint8Array) => unknown\n\nfunction requireTypedArrayGetter(name: 'buffer' | 'byteOffset' | 'byteLength'): TypedArrayGetter {\n  const typedArrayPrototype = Object.getPrototypeOf(Uint8Array.prototype) as object\n  const getter = Object.getOwnPropertyDescriptor(typedArrayPrototype, name)?.get\n  if (!getter) throw new Error(`typed array intrinsic ${name} accessor is unavailable`)\n  return getter\n}\n\nconst typedArrayBufferGetter = requireTypedArrayGetter('buffer')\nconst typedArrayByteOffsetGetter = requireTypedArrayGetter('byteOffset')\nconst typedArrayByteLengthGetter = requireTypedArrayGetter('byteLength')\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,SAAS,yBAAyB;AA0E3B,SAAS,0BACd,OAC6C;AAC7C,MAAI,OAAO,OAAO,MAAM,SAAS,gBAAgB,GAAG;AAClD,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AACA,QAAM,kBAAkB,wBAAwB,MAAM,OAAO;AAC7D,QAAM,iBAAiB,gBAAgB;AACvC,QAAM,SAAoC;AAAA,IACxC,eAAe;AAAA,IACf,MAAM;AAAA,IACN,iBAAiB;AAAA,IACjB,SAAS,gBAAgB;AAAA,IACzB,MAAM,qBAAqB,MAAM,IAAI;AAAA,IACrC,WAAW,MAAM;AAAA,IACjB,GAAI,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,IACxD,QAAQ,MAAM;AAAA,IACd,SAAS;AAAA,MACP,GAAG,MAAM;AAAA,MACT,GAAI,eAAe,SAAS,IAAI,EAAE,eAAe,IAAI,CAAC;AAAA,IACxD;AAAA,EACF;AACA,SAAO,yBAAyB,MAAM;AACxC;AAEA,SAAS,wBAAwB,QAG/B;AACA,MAAI,OAAO,SAAS,qBAAqB;AACvC,WAAO;AAAA,MACL,SAAS,2BAA2B,OAAO,OAAO;AAAA,MAClD,gBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,OAAO,SAAS,WAAW;AAC7B,WAAO,EAAE,SAAS,mCAAmC,OAAO,OAAO,GAAG,gBAAgB,CAAC,EAAE;AAAA,EAC3F;AAEA,MAAI,OAAO,SAAS,iBAAiB;AACnC,UAAM,IAAI;AAAA,MACR,yCAAyC,OAAQ,OAA8B,IAAI,CAAC;AAAA,IACtF;AAAA,EACF;AACA,MAAI,OAAO,MAAM,WAAW,GAAG;AAC7B,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,MAAI,UAAU,uBAAuB,OAAO,MAAM,cAAc;AAChE,QAAM,iBAA2B,CAAC;AAClC,aAAW,CAAC,OAAO,SAAS,KAAK,OAAO,MAAM,QAAQ,GAAG;AACvD,UAAM,OAAO,2BAA2B,WAAW,gBAAgB,KAAK,EAAE;AAC1E,cAAU,2BAA2B,SAAS,MAAM,gBAAgB,KAAK,EAAE;AAC3E,mBAAe,KAAK,yBAAyB,IAAI,CAAC;AAAA,EACpD;AACA,SAAO,EAAE,SAAS,mCAAmC,OAAO,GAAG,eAAe;AAChF;AAEA,SAAS,qBAAqB,QAAqE;AACjG,MAAI,OAAO,SAAS,cAAc,OAAO,SAAS,QAAS,QAAO;AAClE,MAAI,OAAO,SAAS,gBAAgB;AAClC,UAAM,IAAI;AAAA,MACR,sCAAsC,OAAQ,OAA8B,IAAI,CAAC;AAAA,IACnF;AAAA,EACF;AAEA,QAAM,WAAW,kBAAkB,OAAO,SAAS,OAAO,WAAW;AACrE,QAAM,QAAQ,0BAA0B,SAAS,UAAU;AAC3D,MACE,MAAM,WAAW,OAAO,QAAQ,MAAM,UACtC,MAAM,eAAe,OAAO,QAAQ,MAAM,YAC1C;AACA,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,YAAY,OAAO;AAAA,IACnB,YAAY,OAAO,QAAQ;AAAA,IAC3B,UAAU,OAAO,QAAQ;AAAA,IACzB,eAAe,OAAO,QAAQ;AAAA,IAC9B,OAAO,EAAE,QAAQ,mBAAmB,UAAU,MAAM;AAAA,EACtD;AACF;;;AC7JA,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,OAAO,MAAM,cAAc;AACpC,SAAS,YAAY;AAwCrB,IAAM;AAAA,EACJ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,IAAI;AAUG,IAAM,wCAAN,MAAyF;AAAA,EAC7E;AAAA,EACA;AAAA,EAEjB,YAAY,SAAuD;AACjE,QAAI,QAAQ,UAAU,WAAW,GAAG;AAClC,YAAM,IAAI,MAAM,uDAAuD;AAAA,IACzE;AACA,SAAK,YAAY,QAAQ;AACzB,SAAK,MAAM,QAAQ,OAAO,KAAK;AAAA,EACjC;AAAA,EAEA,MAAM,SACJ,WAC6C;AAC7C,UAAM,QAAQ,UAAU,SAAS;AACjC,UAAM,MAAM,KAAK,WAAW,EAAE,WAAW,KAAK,CAAC;AAC/C,UAAM,YAAY,KAAK,UAAU,KAAK;AACtC,UAAM,WAAW,MAAM,mBAAmB,SAAS;AACnD,QAAI,UAAU;AACZ,qBAAe,SAAS,OAAO,OAAO,SAAS;AAC/C,aAAO,sBAAsB,SAAS,OAAO,KAAK;AAAA,IACpD;AACA,yBAAqB,MAAM,kBAAkB,KAAK,IAAI,CAAC;AACvD,UAAM,eAAe,MAAM,KAAK,aAAa,KAAK;AAClD,QAAI,aAAc,QAAO,cAAc,OAAO,YAAY;AAE1D,UAAM,QAAQ,SAAS,KAAK;AAC5B,UAAM,WAAW,MAAM,oBAAoB,KAAK,WAAW,WAAW;AAAA,MACpE,SAAS;AAAA,MACT,GAAG;AAAA,MACH,OAAO;AAAA,MACP,aAAa,YAAY,KAAK;AAAA,IAChC,CAAC;AACD,QAAI,SAAU,QAAO,OAAO,OAAO,EAAE,UAAU,MAAM,OAAO,MAAM,CAAC;AAEnE,UAAM,SAAS,MAAM,UAAU,SAAS;AACxC,mBAAe,OAAO,OAAO,OAAO,SAAS;AAC7C,WAAO,sBAAsB,OAAO,OAAO,KAAK;AAAA,EAClD;AAAA,EAEA,MAAM,WACJ,kBAC2D;AAC3D,WAAO,MAAM,KAAK,cAAc,eAAe,gBAAgB,CAAC;AAAA,EAClE;AAAA,EAEA,MAAM,oBACJ,gBAC6C;AAC7C,UAAM,QAAQ,UAAU,cAAc;AACtC,UAAM,YAAY,KAAK,UAAU,KAAK;AACtC,UAAM,SAAS,MAAM,UAAU,SAAS;AACxC,mBAAe,OAAO,OAAO,OAAO,SAAS;AAC7C,gBAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;AACpE,UAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACrD,QAAI,MAAM,UAAU,qBAAqB;AACvC,aAAO,OAAO,OAAO,EAAE,QAAQ,OAAO,OAAO,oBAAoB,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,QAAQ;AAChB,YAAM,IAAI,MAAM,wEAAwE;AAAA,IAC1F;AACA,yBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;AAC9D,UAAM,SAAS,MAAM;AAAA,MACnB,KAAK;AAAA,MACL,KAAK,eAAe,OAAO,OAAO,CAAC;AAAA,MACnC;AAAA,QACE,SAAS;AAAA,QACT,MAAM;AAAA,QACN,aAAa,OAAO,MAAM;AAAA,QAC1B,SAAS,OAAO,MAAM;AAAA,QACtB,qBAAqB,OAAO,MAAM;AAAA,QAClC,OAAO;AAAA,MACT;AAAA,MACA,KAAK,iBAAiB,OAAO,KAAK;AAAA,IACpC;AACA,QAAI,OAAQ,QAAO,OAAO,OAAO,EAAE,QAAQ,MAAM,OAAO,oBAAoB,CAAC;AAC7E,UAAM,SAAS,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACtD,QAAI,OAAO,UAAU,qBAAqB;AACxC,aAAO,OAAO,OAAO,EAAE,QAAQ,OAAO,OAAO,oBAAoB,CAAC;AAAA,IACpE;AACA,UAAM,IAAI,MAAM,wEAAwE;AAAA,EAC1F;AAAA,EAEA,MAAM,cACJ,gBACA,QAC6C;AAC7C,UAAM,QAAQ,UAAU,cAAc;AACtC,UAAM,YAAY,KAAK,UAAU,KAAK;AACtC,UAAM,SAAS,MAAM,UAAU,SAAS;AACxC,mBAAe,OAAO,OAAO,OAAO,SAAS;AAC7C,gBAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;AACpE,UAAM,WAAW,eAAe,OAAO,OAAO,MAAM;AACpD,UAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACrD,QAAI,MAAM,OAAQ,QAAO,cAAc,MAAM,QAAQ,QAAQ;AAC7D,iCAA6B,MAAM,OAAO,QAAQ;AAClD,yBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;AAC9D,UAAM,aAAa,MAAM,UAAU,YAAY,IAAI;AACnD,UAAM,SAAS,MAAM;AAAA,MACnB,KAAK;AAAA,MACL,KAAK,eAAe,OAAO,OAAO,UAAU;AAAA,MAC5C;AAAA,QACE,SAAS;AAAA,QACT,MAAM;AAAA,QACN;AAAA,MACF;AAAA,MACA,KAAK,iBAAiB,OAAO,KAAK;AAAA,IACpC;AACA,QAAI,OAAQ,QAAO,OAAO,OAAO,EAAE,QAAQ,MAAM,SAAS,CAAC;AAC3D,UAAM,SAAS,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACtD,QAAI,CAAC,OAAO,QAAQ;AAClB,YAAM,IAAI,MAAM,iEAAiE;AAAA,IACnF;AACA,WAAO,cAAc,OAAO,QAAQ,QAAQ;AAAA,EAC9C;AAAA,EAEA,MAAM,OACJ,gBACA,yBAC8C;AAC9C,UAAM,QAAQ,UAAU,cAAc;AACtC,UAAM,iBAAiB,mBAAmB,uBAAuB;AACjE,UAAM,YAAY,KAAK,UAAU,KAAK;AACtC,UAAM,SAAS,MAAM,UAAU,SAAS;AACxC,mBAAe,OAAO,OAAO,OAAO,SAAS;AAC7C,gBAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;AACpE,UAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACrD,UAAM,SAAS,sBAAsB,MAAM,QAAQ,cAAc;AACjE,UAAM,eAAe,KAAK,aAAa,KAAK;AAC5C,UAAM,WAAW,MAAM,sBAAsB,YAAY;AACzD,QAAI,UAAU;AACZ,iCAA2B,UAAU,OAAO,OAAO,YAAY;AAC/D,kCAA4B,UAAU,QAAQ,YAAY;AAC1D,aAAO,eAAe,UAAU,cAAc;AAAA,IAChD;AACA,yBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;AAC9D,UAAM,WAAW,MAAM;AAAA,MACrB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,QACE,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,KAAK,iBAAiB,OAAO,KAAK;AAAA,IACpC;AACA,QAAI,SAAU,QAAO,OAAO,OAAO,EAAE,UAAU,MAAM,UAAU,OAAO,CAAC;AACvE,UAAM,SAAS,MAAM,aAAa,YAAY;AAC9C,mBAAe,QAAQ,OAAO,YAAY;AAC1C,+BAA2B,QAAQ,OAAO,OAAO,YAAY;AAC7D,gCAA4B,QAAQ,QAAQ,YAAY;AACxD,WAAO,eAAe,QAAQ,cAAc;AAAA,EAC9C;AAAA,EAEA,MAAM,eACJ,kBACA,UAC8C;AAC9C,UAAM,UAAU,eAAe,gBAAgB;AAC/C,UAAMA,UAAS,MAAM,KAAK,cAAc,OAAO;AAC/C,QAAI,CAACA,QAAQ,OAAM,IAAI,MAAM,gEAAgE;AAC7F,UAAM,YAAY,wBAAwBA,QAAO,OAAOA,QAAO,OAAO,QAAQ;AAC9E,QAAIA,QAAO,OAAQ,6BAA4BA,QAAO,QAAQ,SAAS;AACvE,UAAM,kBAAkBA,QAAO,QAAQ,kBAAkB,UAAU;AACnE,QAAIA,QAAO,SAAU,QAAO,eAAeA,QAAO,UAAU,eAAe;AAC3E,uBAAmBA,QAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;AAE5D,QAAI,SAASA,QAAO;AACpB,QAAI,CAAC,QAAQ;AACX,YAAM,aAAaA,QAAO,UAAU,YAAY,IAAI;AACpD,YAAM,WAAW,MAAM;AAAA,QACrB,KAAK;AAAA,QACL,KAAK,eAAeA,QAAO,OAAO,UAAU;AAAA,QAC5C;AAAA,UACE,SAAS;AAAA,UACT,MAAM;AAAA,UACN,UAAU;AAAA,QACZ;AAAA,MACF;AACA,UAAI,UAAU;AACZ,iBAAS;AAAA,MACX,OAAO;AACL,cAAMC,UAAS,MAAM,KAAK,gBAAgBD,QAAO,KAAK;AACtD,YAAI,CAACC,QAAO,QAAQ;AAClB,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACA,oCAA4BA,QAAO,QAAQ,SAAS;AACpD,iBAASA,QAAO;AAAA,MAClB;AAAA,IACF;AAEA,UAAM,eAAe,KAAK,aAAa,OAAO;AAC9C,UAAM,YAAY,MAAM,oBAAoB,KAAK,WAAW,cAAc;AAAA,MACxE,SAAS;AAAA,MACT,UAAU;AAAA,IACZ,CAAC;AACD,QAAI,UAAW,QAAO,OAAO,OAAO,EAAE,UAAU,MAAM,UAAU,OAAO,CAAC;AACxE,UAAM,SAAS,MAAM,aAAa,YAAY;AAC9C,mBAAe,QAAQ,SAAS,YAAY;AAC5C,+BAA2B,QAAQD,QAAO,OAAO,YAAY;AAC7D,gCAA4B,QAAQ,QAAQ,YAAY;AACxD,WAAO,eAAe,QAAQ,OAAO,cAAc;AAAA,EACrD;AAAA,EAEA,MAAc,cACZ,OAC2D;AAC3D,UAAM,YAAY,KAAK,UAAU,KAAK;AACtC,UAAM,SAAS,MAAM,mBAAmB,SAAS;AACjD,QAAI,CAAC,OAAQ,QAAO;AACpB,mBAAe,OAAO,OAAO,OAAO,SAAS;AAC7C,UAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACrD,UAAM,eAAe,KAAK,aAAa,KAAK;AAC5C,UAAM,WAAW,MAAM,sBAAsB,YAAY;AACzD,QAAI,UAAU;AACZ,iCAA2B,UAAU,OAAO,OAAO,YAAY;AAC/D,UAAI,CAAC,MAAM,QAAQ;AACjB,cAAM,IAAI;AAAA,UACR,0CAA0C,YAAY;AAAA,QACxD;AAAA,MACF;AACA,kCAA4B,UAAU,MAAM,QAAQ,YAAY;AAAA,IAClE;AACA,WAAO,cAAc,OAAO,OAAO,MAAM,OAAO,MAAM,QAAQ,QAAQ;AAAA,EACxE;AAAA,EAEA,MAAc,gBAAgB,OAG3B;AACD,UAAM,YAAY,KAAK,eAAe,OAAO,CAAC;AAC9C,UAAM,QAAQ,MAAM,wBAAwB,WAAW,KAAK;AAC5D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,UAAU;AACtC,QAAI,MAAM,SAAS,UAAW,QAAO,EAAE,OAAO,WAAW,QAAQ,MAAM,SAAS;AAChF,UAAM,aAAa,KAAK,eAAe,OAAO,CAAC;AAC/C,UAAM,SAAS,MAAM,wBAAwB,YAAY,KAAK;AAC9D,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,oBAAoB;AACjD,QAAI,OAAO,SAAS,WAAW;AAC7B,YAAM,IAAI,MAAM,qCAAqC,UAAU,2BAA2B;AAAA,IAC5F;AACA,WAAO,EAAE,OAAO,qBAAqB,QAAQ,OAAO,SAAS;AAAA,EAC/D;AAAA,EAEA,MAAc,aACZ,OACmD;AACnD,QAAI,MAAM,YAAY,EAAG,QAAO;AAChC,WAAO;AAAA,MACL;AAAA,MACA,MAAM,KAAK,cAAc;AAAA,QACvB,aAAa,MAAM;AAAA,QACnB,SAAS,MAAM,UAAU;AAAA,MAC3B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,iBAAiB,OAEvB;AACA,WAAO;AAAA,MACL,kBAAkB,MAAM;AACtB,6BAAqB,MAAM,kBAAkB,KAAK,IAAI,CAAC;AACvD,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,UAAU,OAA8E;AAC9F,WAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,CAAC,aAAa;AAAA,EAC9D;AAAA,EAEQ,aACN,OACQ;AACR,WAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,CAAC,gBAAgB;AAAA,EACjE;AAAA,EAEQ,eACN,OACA,SACQ;AACR,WAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,CAAC,eAAe,OAAO,OAAO;AAAA,EAC9E;AACF;AAEA,eAAe,oBACb,WACA,aACAA,SACA,UAGI,CAAC,GACa;AAClB,QAAM,gBAAgB,KAAK,WAAW,wBAAwB,QAAQ,GAAG,IAAI,WAAW,CAAC,MAAM;AAC/F,QAAM,SAAS,MAAM,KAAK,eAAe,MAAM,GAAK;AACpD,MAAI;AACF,UAAM,OAAO;AAAA,MACX,OAAO,OAAO,CAAC,OAAO,KAAK,wBAAwBA,OAAM,CAAC,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC;AAAA,IACjF;AACA,UAAM,OAAO,KAAK;AAAA,EACpB,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AAEA,MAAI,UAAU;AACd,MAAI;AACF,QAAI,QAAQ,oBAAoB,QAAQ,iBAAiB,MAAM,MAAM;AACnE,YAAM,IAAI,MAAM,2DAA2D;AAAA,IAC7E;AAGA,aAAS,eAAe,WAAW;AACnC,cAAU;AACV,UAAM,cAAc,SAAS;AAAA,EAC/B,SAAS,OAAO;AACd,QAAI,CAAC,YAAY,OAAO,QAAQ,EAAG,OAAM;AAAA,EAC3C,UAAE;AACA,UAAM,OAAO,aAAa,EAAE,MAAM,CAAC,UAAmB;AACpD,UAAI,CAAC,YAAY,OAAO,QAAQ,EAAG,OAAM;AAAA,IAC3C,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,eAAe,cAAc,WAAkC;AAC7D,QAAM,SAAS,MAAM,KAAK,WAAW,GAAG;AACxC,MAAI;AACF,UAAM,OAAO,KAAK;AAAA,EACpB,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;AAEA,SAAS,YAAY,OAAgB,MAAuB;AAC1D,SACE,UAAU,QACV,OAAO,UAAU,YACjB,UAAU,SACT,MAA6B,SAAS;AAE3C;;;AClZA,eAAsB,uCACpB,UACA,UAAgD,CAAC,GACpB;AAC7B,QAAM,eAAe,iCAAiC,QAAQ;AAC9D,QAAM,mBAAmB,QAAQ,oBAAoB,aAAa;AAClE,MAAI,mBAAmB,aAAa,kBAAkB;AACpD,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AACA,QAAM,sBAAsB,yBAAyB,gBAAgB;AACrE,QAAM,QAAQ,+BAA+B,QAAQ;AACrD,QAAM,UAAmC,CAAC;AAE1C,MAAI,MAAM,OAAO,SAAS,YAAY;AACpC,UAAM,cAAc,MAAM;AAC1B,QAAI,CAAC,YAAa,OAAM,IAAI,MAAM,wCAAwC;AAC1E,YAAQ;AAAA,MACN;AAAA,QACE,YAAY;AACV,gBAAM,SAAS,MAAM,MAAM,MAAM,OAAO,MAAM;AAAA,YAC5C,aAAa,MAAM;AAAA,YACnB,eAAe,YAAY;AAAA,YAC3B,cAAc,YAAY;AAAA,YAC1B,oBAAoB,YAAY;AAAA,YAChC,QAAQ;AAAA,UACV,CAAC;AACD,cAAI,OAAO,WAAW,QAAQ,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,QAAQ,QAAQ,QAAQ,GAAG;AACjF,kBAAM,IAAI,MAAM,8DAA8D;AAAA,UAChF;AAAA,QACF;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,UAAQ;AAAA,IACN;AAAA,MACE,YAAY;AACV,cAAM,aAAa;AAAA,UACjB,MAAM,MAAM,MAAM,OAAO,YAAY;AAAA,YACnC,aAAa,MAAM;AAAA,YACnB,eAAe,MAAM;AAAA,YACrB,aAAa,MAAM,iBAAiB;AAAA,YACpC,UAAU,MAAM;AAAA,YAChB,QAAQ;AAAA,UACV,CAAC;AAAA,UACD;AAAA,YACE,eAAe,MAAM;AAAA,YACrB,aAAa,MAAM,iBAAiB;AAAA,YACpC,OAAO,MAAM,cAAc;AAAA,UAC7B;AAAA,QACF;AACA,YAAI,WAAW,MAAM,eAAe,GAAG;AACrC,gBAAM,IAAI,MAAM,0DAA0D;AAAA,QAC5E;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,QAAQ,WAAW,OAAO;AAChD,QAAM,WAAW,QACd,OAAO,CAAC,WAA4C,OAAO,WAAW,UAAU,EAChF,IAAI,CAAC,WAAW,OAAO,MAAM;AAChC,MAAI,SAAS,SAAS,GAAG;AACvB,sCAAkC,UAAU,iBAAiB;AAC7D,UAAM,IAAI,eAAe,UAAU,uCAAuC;AAAA,EAC5E;AAEA,oCAAkC,UAAU,UAAU;AACtD,SAAO,OAAO,OAAO,EAAE,UAAU,KAAc,CAAC;AAClD;;;ACRA,IAAM,yBAAyB;AAC/B,IAAM,oCAAoC,KAAK,KAAK;AAS7C,SAAS,uCACd,SACyB;AACzB,QAAM,gBAAgB,oBAAoB,QAAQ,aAAa;AAC/D,QAAM,qBAAqB,sBAAsB,QAAQ,kBAAkB;AAC3E,QAAM,eAAe,oBAAI,IAAmC;AAC5D,QAAM,oBAAoB,oBAAI,IAAkC;AAEhE,SAAO;AAAA,IACL,SAAS,OAAO,UAAU;AACxB,YAAM,UAAU,wBAAwB,KAAK;AAC7C,YAAM,WAAW,sBAAsB,MAAM,QAAQ,aAAa,OAAO,GAAG,OAAO;AACnF,aAAO,wBAAwB,QAAQ;AAAA,IACzC;AAAA,IAEA,cAAc,OAAO,UAAU;AAC7B,wBAAkB,cAAc,mBAAmB,KAAK,IAAI,CAAC;AAC7D,YAAM,UAAU,wBAAwB,KAAK;AAC7C,2BAAqB,OAAO;AAC5B,YAAM,gBAAgB,yBAAyB,OAAO;AACtD,YAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;AACrE,UAAI,kBAAkB,IAAI,GAAG,GAAG;AAC9B,cAAM,IAAI,MAAM,gDAAgD;AAAA,MAClE;AACA,YAAM,WAAW,aAAa,IAAI,GAAG;AACrC,UAAI,YAAY,SAAS,kBAAkB,eAAe;AACxD,cAAM,IAAI,MAAM,2DAA2D;AAAA,MAC7E;AAEA,YAAM,cAAc;AAAA,QAClB,MAAM,QAAQ,OAAO,QAAQ,OAAO;AAAA,QACpC;AAAA,QACA;AAAA,MACF;AACA,YAAM,iBAAiB,yBAAyB,WAAW;AAC3D,UAAI,kBAAkB,IAAI,GAAG,GAAG;AAC9B,cAAM,IAAI,MAAM,mEAAmE;AAAA,MACrF;AACA,YAAM,WAAW,YAAY,aAAa,IAAI,GAAG;AACjD,UAAI,YAAY,SAAS,kBAAkB,eAAe;AACxD,cAAM,IAAI,MAAM,2DAA2D;AAAA,MAC7E;AACA,UAAI,YAAY,SAAS,mBAAmB,gBAAgB;AAC1D,cAAM,IAAI,MAAM,+DAA+D;AAAA,MACjF;AACA,UAAI,CAAC,UAAU;AACb,qBAAa,IAAI,KAAK;AAAA,UACpB;AAAA,UACA;AAAA,UACA,aAAa,QAAQ;AAAA,UACrB,eAAe,QAAQ;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB,aAAa,QAAQ;AAAA,UACrB,UAAU,wBAAwB,QAAQ,QAAQ;AAAA,UAClD,QAAQ,wBAAwB,QAAQ,MAAM;AAAA,UAC9C,iBAAiB,WAAW,QAAQ,OAAO,YAAY,qBAAqB;AAAA,UAC5E,YAAY;AAAA,QACd,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT;AAAA,IAEA,eAAe,OAAO,UAAU;AAC9B,wBAAkB,cAAc,mBAAmB,KAAK,IAAI,CAAC;AAC7D,YAAM,UAAU,wBAAwB,KAAK;AAC7C,YAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;AACrE,UAAI,kBAAkB,IAAI,GAAG,EAAG,OAAM,IAAI,MAAM,0CAA0C;AAC1F,YAAM,QAAQ,aAAa,IAAI,GAAG;AAClC,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,qDAAqD;AACjF,0BAAoB,OAAO,OAAO;AAClC,UAAI,MAAM,iBAAkB,OAAM,IAAI,MAAM,0CAA0C;AACtF,UAAI,MAAM,eAAe,YAAY;AACnC,cAAM,IAAI,MAAM,gDAAgD;AAAA,MAClE;AACA,UAAI,CAAC,OAAO,cAAc,QAAQ,YAAY,KAAK,QAAQ,gBAAgB,GAAG;AAC5E,cAAM,IAAI,MAAM,qEAAqE;AAAA,MACvF;AACA,UAAI,QAAQ,gBAAgB,KAAK,IAAI,GAAG;AACtC,cAAM,IAAI,MAAM,2DAA2D;AAAA,MAC7E;AACA,UAAI,QAAQ,eAAe,MAAM,aAAa;AAC5C,cAAM,IAAI,MAAM,iEAAiE;AAAA,MACnF;AACA,YAAM,aAAa;AACnB,UAAI;AACF,cAAM,aAAa;AAAA,UACjB,MAAM,QAAQ,OAAO,SAAS,OAAO;AAAA,UACrC,MAAM,OAAO,kBAAkB,IAAI,CAAC,IAAI;AAAA,QAC1C;AACA,YAAI,kBAAkB,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,MAAM,OAAO;AACjE,gBAAM,IAAI,MAAM,8DAA8D;AAAA,QAChF;AACA,cAAM,aAAa;AACnB,eAAO;AAAA,MACT,SAAS,OAAO;AACd,cAAM,aAAa;AACnB,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IAEA,aAAa,OAAO,UAAU;AAC5B,YAAM,MAAM,KAAK,IAAI;AACrB,wBAAkB,cAAc,mBAAmB,GAAG;AACtD,YAAM,UAAU,wBAAwB,KAAK;AAC7C,YAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;AACrE,YAAM,QAAQ,aAAa,IAAI,GAAG;AAClC,UAAI,MAAO,qBAAoB,OAAO,OAAO;AAC7C,YAAM,aAAa,SAAS,kBAAkB,IAAI,GAAG;AACrD,UAAI,YAAY,oBAAoB,WAAW,qBAAqB,QAAQ,QAAQ;AAClF,cAAM,IAAI,MAAM,iEAAiE;AAAA,MACnF;AAEA,YAAM,SAAS,kCAAkC,MAAM,QAAQ,OAAO,OAAO,OAAO,GAAG;AAAA,QACrF,eAAe,QAAQ;AAAA,QACvB,aAAa,QAAQ;AAAA,QACrB,OAAO,QAAQ,SAAS;AAAA,MAC1B,CAAC;AACD,UAAI,MAAO,4BAA2B,OAAO,YAAY,KAAK;AAE9D,YAAM,mBAAmB,yBAAyB,OAAO,KAAK;AAC9D,UAAI,YAAY,oBAAoB,WAAW,qBAAqB,kBAAkB;AACpF,cAAM,IAAI,MAAM,oEAAoE;AAAA,MACtF;AACA,UAAI,YAAY,oBAAoB,WAAW,qBAAqB,QAAQ,QAAQ;AAClF,cAAM,IAAI,MAAM,iEAAiE;AAAA,MACnF;AACA,YAAM,cAAc,OAAO,eAAe,MAAM;AAChD,UAAI,OAAO;AACT,cAAM,mBAAmB;AACzB,cAAM,mBAAmB,QAAQ;AAAA,MACnC;AACA,mBAAa,OAAO,GAAG;AACvB,yBAAmB,mBAAmB,KAAK;AAAA,QACzC;AAAA,QACA,kBAAkB,QAAQ;AAAA,QAC1B;AAAA,MACF,CAAC;AACD,aAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,OAAmD;AAC/E,MAAI,CAAC,OAAO,cAAc,MAAM,WAAW,KAAK,MAAM,eAAe,GAAG;AACtE,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,MAAI,MAAM,eAAe,KAAK,IAAI,GAAG;AACnC,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,aAAW,CAAC,MAAM,KAAK,KAAK;AAAA,IAC1B,CAAC,iBAAiB,MAAM,OAAO,aAAa;AAAA,IAC5C,CAAC,kBAAkB,MAAM,OAAO,cAAc;AAAA,IAC9C,CAAC,mBAAmB,MAAM,OAAO,eAAe;AAAA,EAClD,GAAY;AACV,QAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAAG;AAC7C,YAAM,IAAI,MAAM,+BAA+B,IAAI,qCAAqC;AAAA,IAC1F;AAAA,EACF;AACA,aAAW,MAAM,OAAO,YAAY,qBAAqB;AAC3D;AAEA,SAAS,oBACP,OACA,UACA,eACqC;AACrC,QAAM,SAAS;AAAA,IACb;AAAA,IACA,CAAC,iBAAiB,UAAU,eAAe,kBAAkB,SAAS;AAAA,IACtE;AAAA,EACF;AACA,MAAI,OAAO,kBAAkB,SAAS,eAAe;AACnD,UAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AACA,MAAI,CAAC,eAAe,OAAO,MAAM,GAAG;AAClC,UAAM,IAAI,MAAM,4DAA4D;AAAA,EAC9E;AACA,MAAI,OAAO,gBAAgB,SAAS,aAAa;AAC/C,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA;AAAA,IACE,OAAO;AAAA,IACP,CAAC,iBAAiB,kBAAkB,mBAAmB,YAAY;AAAA,IACnE;AAAA,EACF;AACA,MACE,yBAAyB,OAAO,cAAc,MAAM,yBAAyB,SAAS,MAAM,GAC5F;AACA,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AAEA,QAAM,UAAU;AAAA,IACd,OAAO;AAAA,IACP,SAAS,OAAO;AAAA,IAChB;AAAA,EACF;AACA,SAAO,wBAAwB;AAAA,IAC7B,eAAe,OAAO;AAAA,IACtB,QAAQ,OAAO;AAAA,IACf,aAAa,OAAO;AAAA,IACpB,gBAAgB,OAAO;AAAA,IACvB;AAAA,EACF,CAAC;AACH;AAEA,SAAS,2BACP,OACA,eACA,eACkC;AAClC,MAAI,kBAAkB,GAAG;AACvB,UAAME,UAAS,YAAY,OAAO,CAAC,MAAM,GAAG,qCAAqC;AACjF,QAAIA,QAAO,SAAS,YAAY;AAC9B,YAAM,IAAI,MAAM,mEAAmE;AAAA,IACrF;AACA,WAAO,EAAE,MAAM,WAAW;AAAA,EAC5B;AAEA,QAAM,SAAS,YAAY,OAAO,CAAC,QAAQ,SAAS,GAAG,qCAAqC;AAC5F,MAAI,OAAO,SAAS,gBAAgB;AAClC,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AACA,MACE,CAAC,MAAM,QAAQ,OAAO,OAAO,KAC7B,OAAO,QAAQ,WAAW,KAC1B,OAAO,QAAQ,CAAC,MAAM,eACtB;AACA,UAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AACA,SAAO,EAAE,MAAM,gBAAgB,SAAS,CAAC,aAAa,EAAE;AAC1D;AAEA,SAAS,mBACP,OACA,eACwC;AACxC,QAAM,SAAS,YAAY,OAAO,CAAC,KAAK,GAAG,qCAAqC;AAChF,QAAM,MAAM,OAAO,OAAO,KAAK,wCAAwC;AACvE,QAAM,cAAc,OAAO,KAAK,GAAG,EAAE,KAAK;AAC1C,MACE,YAAY,WAAW,cAAc,UACrC,YAAY,KAAK,CAAC,MAAM,UAAU,SAAS,cAAc,KAAK,CAAC,GAC/D;AACA,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,QAAM,WAAmC,uBAAO,OAAO,IAAI;AAC3D,aAAW,QAAQ,eAAe;AAChC,UAAMC,SAAQ,IAAI,IAAI;AACtB,QAAI,OAAOA,WAAU,YAAYA,OAAM,SAAS,KAAKA,OAAM,SAAS,OAAQ;AAC1E,YAAM,IAAI,MAAM,8BAA8B,IAAI,sCAAsC;AAAA,IAC1F;AACA,aAAS,IAAI,IAAIA;AAAA,EACnB;AACA,SAAO,OAAO,OAAO,EAAE,KAAK,OAAO,OAAO,QAAQ,EAAE,CAAC;AACvD;AAEA,SAAS,sBACP,OACA,UAC6B;AAC7B,QAAM,SAAS;AAAA,IACb;AAAA,IACA,CAAC,aAAa,YAAY,SAAS,YAAY,iBAAiB;AAAA,IAChE;AAAA,EACF;AACA,MAAI,OAAO,cAAc,SAAS,WAAW;AAC3C,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,MAAI,OAAO,oBAAoB,SAAS,iBAAiB;AACvD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,aAAW,QAAQ,CAAC,aAAa,YAAY,SAAS,UAAU,GAAY;AAC1E,QAAI,OAAO,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,EAAE,WAAW,GAAG;AACjE,YAAM,IAAI,MAAM,4BAA4B,IAAI,oBAAoB;AAAA,IACtE;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBACP,UACA,QACM;AACN,MACE,OAAO,gBAAgB,SAAS,eAChC,OAAO,kBAAkB,SAAS,iBAClC,OAAO,gBAAgB,SAAS,eAChC,yBAAyB,OAAO,QAAQ,MAAM,yBAAyB,SAAS,QAAQ,GACxF;AACA,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACF;AAEA,SAAS,2BACP,OAMA,aACM;AACN,aAAW,CAAC,MAAM,QAAQ,KAAK,KAAK;AAAA,IAClC,CAAC,eAAe,MAAM,YAAY,YAAY,OAAO,aAAa;AAAA,IAClE,CAAC,gBAAgB,MAAM,aAAa,YAAY,OAAO,cAAc;AAAA,IACrE,CAAC,iBAAiB,MAAM,cAAc,YAAY,OAAO,eAAe;AAAA,IACxE,CAAC,kBAAkB,MAAM,cAAc,YAAY,eAAe;AAAA,EACpE,GAAY;AACV,QAAI,SAAS,OAAO;AAClB,YAAM,IAAI,MAAM,8BAA8B,IAAI,IAAI,MAAM,qBAAqB,KAAK,EAAE;AAAA,IAC1F;AAAA,EACF;AACF;AAEA,SAAS,sBAAsB,QAA8C;AAC3E,MAAI,OAAO,WAAW,GAAG;AACvB,UAAM,IAAI,MAAM,gEAAgE;AAAA,EAClF;AACA,QAAM,QAAQ,CAAC,GAAG,MAAM,EAAE,KAAK;AAC/B,MAAI,IAAI,IAAI,KAAK,EAAE,SAAS,MAAM,QAAQ;AACxC,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,aAAW,QAAQ,OAAO;AACxB,QACE,CAAC,2BAA2B,KAAK,IAAI,KACrC,CAAC,aAAa,eAAe,WAAW,EAAE,SAAS,IAAI,GACvD;AACA,YAAM,IAAI,MAAM,2DAA2D,IAAI,EAAE;AAAA,IACnF;AAAA,EACF;AACA,SAAO,OAAO,OAAO,KAAK;AAC5B;AAEA,SAAS,oBAAoB,OAAuB;AAClD,MACE,MAAM,SAAS,OACf,UAAU,MAAM,YAAY,KAC5B,MAAM,SAAS,GAAG,KAClB,MAAM,SAAS,GAAG,KAClB,UAAU,eACV,MAAM,SAAS,YAAY,KAC3B,UAAU,qBACV,UAAU,4BACV;AACA,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,QAAM,SAAS,MAAM,MAAM,GAAG;AAC9B,MACE,OAAO,SAAS,KAChB,CAAC,OAAO;AAAA,IACN,CAAC,UACC,MAAM,UAAU,KAAK,MAAM,UAAU,MAAM,oCAAoC,KAAK,KAAK;AAAA,EAC7F,KACA,CAAC,QAAQ,KAAK,OAAO,GAAG,EAAE,KAAK,EAAE,GACjC;AACA,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,aAAqB,eAA+B;AAC1E,SAAO,yBAAyB,EAAE,aAAa,cAAc,CAAC;AAChE;AAEA,SAAS,kBACP,cACA,aACA,KACM;AACN,aAAW,CAAC,KAAK,KAAK,KAAK,cAAc;AACvC,QAAI,MAAM,eAAe,IAAK,cAAa,OAAO,GAAG;AAAA,EACvD;AACA,aAAW,CAAC,KAAK,KAAK,KAAK,aAAa;AACtC,QAAI,MAAM,eAAe,IAAK,aAAY,OAAO,GAAG;AAAA,EACtD;AACF;AAEA,SAAS,mBACP,aACA,KACA,OACM;AACN,cAAY,OAAO,GAAG;AACtB,cAAY,IAAI,KAAK,KAAK;AAC1B,SAAO,YAAY,OAAO,wBAAwB;AAChD,UAAM,SAAS,YAAY,KAAK,EAAE,KAAK,EAAE;AACzC,QAAI,WAAW,OAAW;AAC1B,gBAAY,OAAO,MAAM;AAAA,EAC3B;AACF;AAEA,SAAS,eAAe,OAAuC;AAC7D,SAAO,OAAO,UAAU,YAAY,wBAAwB,KAAK,KAAK;AACxE;AAEA,SAAS,YACP,OACA,MACA,OACyB;AACzB,QAAM,SAAS,OAAO,OAAO,KAAK;AAClC,wBAAsB,QAAQ,MAAM,KAAK;AACzC,SAAO;AACT;AAEA,SAAS,OAAO,OAAgB,OAAwC;AACtE,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AACvE,UAAM,IAAI,MAAM,GAAG,KAAK,oBAAoB;AAAA,EAC9C;AACA,QAAM,YAAY,OAAO,eAAe,KAAK;AAC7C,MAAI,cAAc,OAAO,aAAa,cAAc,MAAM;AACxD,UAAM,IAAI,MAAM,GAAG,KAAK,yBAAyB;AAAA,EACnD;AACA,SAAO;AACT;;;ACpdA,eAAsB,sCACpB,SAC8C;AAC9C,QAAMC,UAAS,MAAM,QAAQ,WAAW,WAAW,QAAQ,OAAO;AAClE,MAAI,CAACA,QAAQ,OAAM,IAAI,MAAM,iDAAiD;AAC9E,MAAIA,QAAO,UAAU;AACnB,WAAO,OAAO,OAAO,EAAE,UAAU,OAAO,UAAUA,QAAO,UAAU,aAAa,KAAK,CAAC;AAAA,EACxF;AACA,QAAM,mBAAmB;AAAA,IACvB,QAAQ,oBAAoBA,QAAO,MAAM,QAAQ;AAAA,EACnD;AACA,MAAI,mBAAmBA,QAAO,MAAM,QAAQ,kBAAkB;AAC5D,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AAEA,QAAM,MAAM,QAAQ,OAAO,KAAK;AAChC,MAAI,IAAI,IAAIA,QAAO,MAAM,kBAAkB;AACzC,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AAEA,QAAM,sBAAsB,yBAAyB,gBAAgB;AACrE,QAAM,aAAa,IAAI,gBAAgB;AACvC,aAAW,MAAM,IAAI,MAAM,2CAA2C,CAAC;AACvE,QAAM,qBAAqB,IAAI,iCAAiC,QAAQ,UAAU;AAClF,QAAM,iBAAiB;AAAA,IACrB,YAAY;AACV,YAAM,UAAU,MAAM,QAAQ,SAAS;AAAA,QACrC;AAAA,UACE,aAAaA,QAAO,MAAM;AAAA,UAC1B,qBAAqBA,QAAO,MAAM;AAAA,QACpC;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,QAAQ;AAAA,UACR,QAAQ,WAAW;AAAA,UACnB,cAAcA,QAAO,MAAM;AAAA,QAC7B;AAAA,MACF;AACA,6CAAuC,OAAO;AAC9C,aAAO,EAAE,SAAS,KAAc;AAAA,IAClC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,eAAe;AAAA,IACnB,YACE;AAAA,MACE,MAAM,QAAQ,MAAM,OAAO,YAAY;AAAA,QACrC,aAAaA,QAAO,MAAM;AAAA,QAC1B,eAAeA,QAAO,MAAM,QAAQ;AAAA,QACpC,aAAaA,QAAO,MAAM,QAAQ;AAAA,QAClC,UAAUA,QAAO,MAAM,QAAQ;AAAA,QAC/B,QAAQ;AAAA,MACV,CAAC;AAAA,MACD;AAAA,QACE,eAAeA,QAAO,MAAM,QAAQ;AAAA,QACpC,aAAaA,QAAO,MAAM,QAAQ;AAAA,QAClC,OAAOA,QAAO,MAAM,QAAQ,cAAc;AAAA,MAC5C;AAAA,IACF;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAEA,QAAM,gBAAgBA,QAAO,MAAM,QAAQ,SACvC;AAAA,IACE,YAAY;AACV,YAAMC,UAASD,QAAO,MAAM,QAAQ;AACpC,UAAI,CAACC,QAAQ,OAAM,IAAI,MAAM,4CAA4C;AACzE,YAAM,SAAS,MAAM,QAAQ,MAAM,OAAO,MAAM;AAAA,QAC9C,aAAaD,QAAO,MAAM;AAAA,QAC1B,eAAeA,QAAO,MAAM,QAAQ;AAAA,QACpC,cAAcC,QAAO;AAAA,QACrB,oBAAoBA,QAAO;AAAA,QAC3B,QAAQ;AAAA,MACV,CAAC;AACD,UAAI,OAAO,WAAW,QAAQ,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,QAAQ,QAAQ,QAAQ,GAAG;AACjF,cAAM,IAAI,MAAM,sDAAsD;AAAA,MACxE;AACA,aAAO,EAAE,QAAQ,KAAc;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,EACF,IACA;AAEJ,QAAM,aAAa,CAAC,gBAAgB,cAAc,GAAI,gBAAgB,CAAC,aAAa,IAAI,CAAC,CAAE;AAC3F,QAAM,WAAW,MAAM,QAAQ,WAAW,UAAU;AACpD,QAAM,WAAW,SACd,OAAO,CAAC,YAA8C,QAAQ,WAAW,UAAU,EACnF,IAAI,CAAC,YAAY,QAAQ,MAAM;AAClC,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,IAAI,eAAe,UAAU,+CAA+C;AAAA,EACpF;AAEA,QAAM,QAAQ,MAAM;AACpB,QAAM,kBAAkB,MAAM;AAAA,IAC5B,MACE;AAAA,MACE;AAAA,QACE,aAAaD,QAAO,MAAM;AAAA,QAC1B,qBAAqBA,QAAO,MAAM;AAAA,QAClC,eAAeA,QAAO,MAAM,QAAQ;AAAA,MACtC;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACA,QAAM,SAASA,QAAO,MAAM,QAAQ;AACpC,SAAO,MAAM,QAAQ,WAAW,eAAe,QAAQ,SAAS;AAAA,IAC9D,cACEA,QAAO,UAAU,aAAa,MAAM,WAAW,eAAe,IAC1D,6BACA;AAAA,IACN,OAAO,MAAM;AAAA,IACb,iBAAiB,gBAAgB;AAAA,IACjC,SAAS;AAAA,MACP,SAAS;AAAA,MACT,qBAAqBA,QAAO,MAAM;AAAA,IACpC;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,eAAeA,QAAO,MAAM,QAAQ;AAAA,MACpC,aAAaA,QAAO,MAAM,QAAQ;AAAA,IACpC;AAAA,IACA,GAAI,SACA;AAAA,MACE,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,eAAeA,QAAO,MAAM,QAAQ;AAAA,QACpC,cAAc,OAAO;AAAA,QACrB,oBAAoB,OAAO;AAAA,MAC7B;AAAA,IACF,IACA,CAAC;AAAA,EACP,CAAC;AACH;;;AC9KA,SAAS,cAAAE,mBAAkB;AAC3B,SAAS,aAAa,mBAAmB;AACzC;AAAA,EACE;AAAA,EACA,SAAAC;AAAA,EACA;AAAA,EACA,QAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AACvB,SAAS,SAAS,YAAY,QAAAC,OAAM,SAAS,KAAK,aAAa;AAC/D,SAAS,kBAAkB,2BAA2B;AAOtD,SAAqB,SAAoB,YAAY;AAsBrD,IAAM,cAAc;AACpB,IAAM,uBAAuB;AAC7B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAC9B,IAAM,eAAe,oBAAI,KAAK,CAAC;AAY/B,IAAM,gBAAsD,OAAO,OAAO;AAAA,EACxE,iBAAiB,MAAM,OAAO;AAAA,EAC9B,0BAA0B,OAAO;AAAA,EACjC,UAAU;AAAA,EACV,cAAc,MAAM,OAAO;AAAA,EAC3B,mBAAmB,MAAM,OAAO;AAAA,EAChC,cAAc;AAAA,EACd,0BAA0B,MAAM,OAAO;AACzC,CAAC;AAmDD,eAAsB,+BACpB,WACA,UAAiD,CAAC,GACR;AAC1C,QAAM,OAAO,QAAQ,SAAS;AAC9B,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,QAAM,WAAW,QAAQ,oBACrB,MAAM,kBAAkB,MAAM,MAAM,IACpC,MAAM,6BAA6B,MAAM;AAAA,IACvC,QAAQ;AAAA,MACN,UAAU,OAAO;AAAA,MACjB,cAAc,OAAO;AAAA,MACrB,mBAAmB,OAAO;AAAA,IAC5B;AAAA,EACF,CAAC;AACL,mCAAiC,SAAS,OAAO,MAAM;AACvD,QAAM,aAAa,gBAAgB,WAAW,SAAS,aAAa;AACpE,SAAO,sBAAsB,SAAS,OAAO,YAAY,QAAQ,QAAQ,mBAAmB;AAC9F;AAGA,eAAsB,oCACpB,OACA,UAA4E,CAAC,GACnC;AAC1C,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,SAAO;AAAA,IACL,wBAAwB,OAAO,MAAM;AAAA,IACrC;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV;AACF;AAEA,eAAe,sBACb,OACA,YACA,QACA,qBAC0C;AAC1C,QAAM,WAAW,kBAAkB,KAAK;AACxC,QAAM,WAAW,wBAAwB,QAAQ;AACjD,QAAM,UAAU,MAAM,uBAAuB,OAAO,YAAY,OAAO,eAAe;AACtF,MACE,CAAC,wBACA,SAAS,aAAa,OAAO,4BAC5B,QAAQ,aAAa,OAAO,2BAC9B;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,mBAAmB,MAAM,yBAAyB,YAAY,UAAU,mBAAmB;AACjG,QAAM,kBAAkB,MAAM,yBAAyB,WAAW,SAAS,mBAAmB;AAC9F,QAAM,WAAW,oBAAoB;AAAA,IACnC,eAAe;AAAA,IACf,MAAM;AAAA,IACN,QAAQ,yBAAyB,QAAQ;AAAA,IACzC;AAAA,IACA,UAAU;AAAA,IACV,SAAS;AAAA,EACX,CAAmD;AACnD,SAAO,OAAO,OAAO,EAAE,UAAU,QAAQ,CAAC;AAC5C;AAEA,eAAe,yBACb,MACA,OACA,aACyC;AACzC,MAAI,CAAC,YAAa,QAAO,0BAA0B,KAAK;AACxD,MAAI,CAAC,YAAY,YAAY,KAAK,GAAG;AACnC,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,SAAO,+BAA+B,YAAY,iBAAiB;AAAA,IACjE,aAAa,YAAY;AAAA,IACzB,SAAS,SAAS,aAAa,iCAAiC;AAAA,IAChE;AAAA,IACA,GAAI,YAAY,SAAS,EAAE,QAAQ,YAAY,OAAO,IAAI,CAAC;AAAA,EAC7D,CAAC;AACH;AAGO,SAAS,kCACd,UAAoD,CAAC,GACxB;AAC7B,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,QAAM,OAAoC;AAAA,IACxC,aAAa,OAAO,EAAE,MAAM,UAAU,SAAS,YAAY,MAAM;AAC/D,YAAM,mCAAmC;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO,OAAO,OAAO,IAAI;AAC3B;AAEA,eAAe,mCAAmC,OAMhC;AAChB;AAAA,IACE,MAAM;AAAA,IACN,MAAM,SAAS,QAAQ;AAAA,IACvB,MAAM,SAAS,QAAQ;AAAA,IACvB;AAAA,EACF;AACA,QAAM,UAAU,MAAM,sBAAsB,MAAM,SAAS,MAAM,MAAM;AACvE,MAAI,QAAQ,cAAc,MAAM,SAAS,QAAQ;AAC/C,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,+BAA6B,QAAQ,OAAO,MAAM,QAAQ;AAC1D,QAAM,cAAc,QAAQ,MAAM,WAAW;AAC7C,QAAM,wBAAwB,WAAW;AACzC,QAAM,UAAU,MAAM,QAAQ,GAAG,WAAW,iBAAiB;AAC7D,MAAI;AACF,UAAM,oBAAoB,SAAS,QAAQ,KAAK;AAChD,QAAI,QAAQ,YAAY;AACtB,YAAM,sBAAsB,QAAQ,YAAY,OAAO;AAAA,IACzD;AACA,UAAM,4BAA4B,SAAS,MAAM,SAAS,UAAU;AAAA,MAClE,6BAA6B,QAAQ,aAAa,CAAC,MAAM,IAAI,CAAC;AAAA,IAChE,CAAC;AACD,UAAM,OAAO,SAAS,WAAW;AAAA,EACnC,SAAS,OAAO;AACd,UAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAClD,UAAM,GAAG,aAAa,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACtD,UAAM;AAAA,EACR;AACF;AAEA,eAAe,kBACb,MACA,QAIC;AACD,QAAM,QAAQ,MAAM,MAAM,IAAI;AAC9B,MAAI,CAAC,MAAM,YAAY,KAAK,MAAM,eAAe,KAAM,MAAM,SAAS,IAAI,MAAO,MAAM;AACrF,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,QAAM,YAAY,MAAM,gBAAgB,MAAM,CAAC,aAAa,iBAAiB,CAAC,GAAG,OAC9E,SAAS,MAAM,EACf,KAAK;AACR,MAAI,QAAQ,QAAQ,MAAM,MAAM;AAC9B,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,QAAM,SAAS;AAAA,KACZ,MAAM,gBAAgB,MAAM,CAAC,aAAa,oBAAoB,CAAC,GAAG,OAChE,SAAS,MAAM,EACf,KAAK;AAAA,EACV;AACA,MAAK,MAAM,SAAS,MAAM,MAAO,UAAU,OAAO,SAAS,GAAG,GAAG;AAC/D,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AACA,QAAM,uBAAuB,MAAM,QAAQ,sBAAsB;AACjE,QAAM,cAAc,MAAM,gBAAgB,MAAM,CAAC,aAAa,MAAM,CAAC,GAAG,OACrE,SAAS,MAAM,EACf,KAAK;AACR,QAAM,YAAY,MAAM,gBAAgB,MAAM,CAAC,aAAa,aAAa,CAAC,GAAG,OAC1E,SAAS,MAAM,EACf,KAAK;AACR,oBAAkB,YAAY,MAAM;AACpC,oBAAkB,UAAU,WAAW;AACvC,MAAI,WAAW,WAAW,SAAS,QAAQ;AACzC,UAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AACA,QAAM,QAAQ,MAAM,0BAA0B,MAAM,UAAU,CAAC,GAAG,MAAM;AACxE,mCAAiC,OAAO,MAAM;AAC9C,QAAM,sBACJ,MAAM,gBAAgB,MAAM,CAAC,YAAY,gBAAgB,aAAa,MAAM,CAAC,GAC7E,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAM,iBAAiB,OAAO,kBAAkB;AAChD,MAAI,CAAC,OAAO,cAAc,cAAc,KAAK,iBAAiB,GAAG;AAC/D,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,MAAI,iBAAiB,OAAO,0BAA0B;AACpD,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,QAAM,YAAY,MAAM,QAAQC,MAAK,OAAO,GAAG,mCAAmC,CAAC;AACnF,QAAM,aAAaA,MAAK,WAAW,GAAGC,YAAW,CAAC,SAAS;AAC3D,MAAI;AACF,UAAM,gBAAgB,MAAM,CAAC,UAAU,UAAU,YAAY,MAAM,CAAC;AACpE,UAAM,SAAS,WAAW,KAAK,MAAM,SAAS,UAAU,CAAC;AACzD,QAAI,OAAO,aAAa,OAAO,0BAA0B;AACvD,YAAM,IAAI,MAAM,8DAA8D;AAAA,IAChF;AACA,WAAO;AAAA,MACL;AAAA,MACA,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ,YAAY,MAAM;AAAA,UAC1B,YAAY,OAAO;AAAA,UACnB,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF,UAAE;AACA,UAAM,GAAG,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACtD;AACF;AAEA,eAAe,uBACb,OACA,YACA,iBACqB;AACrB,QAAM,UAAU,KAAK;AACrB,QAAM,SAAS,cAAc,SAAS,iBAAiB,6BAA6B;AACpF,MAAI;AACF,UAAM,6BAA6B,SAAS,OAAO,UAAU;AAC7D,YAAQ,SAAS;AACjB,WAAO,MAAM;AAAA,EACf,SAAS,OAAO;AACd,YAAQ,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AACzE,UAAM,OAAO,MAAM,MAAM,MAAS;AAClC,UAAM;AAAA,EACR;AACF;AAEA,eAAe,gCACb,OACA,YACA,UACA,iBACe;AACf,QAAM,UAAU,KAAK;AACrB,QAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI;AACF,UAAM,6BAA6B,SAAS,OAAO,UAAU;AAC7D,YAAQ,SAAS;AACjB,QAAI,CAAE,MAAM,WAAa,OAAM,IAAI,MAAM,0CAA0C;AAAA,EACrF,SAAS,OAAO;AACd,YAAQ,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AACzE,UAAM,WAAW,MAAM,MAAM,MAAS;AACtC,UAAM;AAAA,EACR;AACF;AAEA,eAAe,6BACb,SACA,OACA,YACe;AACf,aAAW,QAAQ,OAAO;AACxB,UAAM,cAAc,SAAS,GAAG,oBAAoB,GAAG,KAAK,IAAI,IAAI,KAAK,MAAM,KAAK,KAAK;AAAA,EAC3F;AACA,MAAI,CAAC,WAAY;AACjB,QAAM,WAAW,wBAAwB;AAAA,IACvC,eAAe;AAAA,IACf,MAAM;AAAA,IACN,YAAY,WAAW;AAAA,IACvB,UAAU,WAAW;AAAA,IACrB,QAAQ;AAAA,MACN,QAAQ,WAAW,OAAO;AAAA,MAC1B,YAAY,WAAW,OAAO;AAAA,IAChC;AAAA,EACF,CAAgD;AAChD,QAAM,cAAc,SAAS,yBAAyB,KAAO,QAAQ;AACrE,QAAM,cAAc,SAAS,uBAAuB,KAAO,WAAW,OAAO,KAAK;AACpF;AAEA,eAAe,sBACb,OACA,QACkC;AAClC,MAAI,MAAM,aAAa,OAAO,iBAAiB;AAC7C,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA,QAAM,SAAS,QAAQ;AACvB,QAAM,QAA0C,CAAC;AACjD,QAAM,qBAAqB,oBAAI,IAAY;AAC3C,QAAM,gBAAgB,oBAAI,IAAY;AACtC,MAAI,aAAa;AACjB,MAAI,qBAAqB;AACzB,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,QAAM,WAAW,YAAY;AAC3B,qBAAiB,SAAS,QAAQ;AAChC,YAAM,OAAO,MAAM,OAAO;AAC1B,UACE,MAAM,OAAO,SAAS,UACtB,OAAO,SAAS,YAChB,mBAAmB,IAAI,IAAI,GAC3B;AACA,cAAM,IAAI,MAAM,mDAAmD;AAAA,MACrE;AACA,yBAAmB,IAAI,IAAI;AAC3B,UAAI,KAAK,WAAW,oBAAoB,GAAG;AACzC,YAAI,MAAM,UAAU,OAAO,UAAU;AACnC,gBAAM,IAAI,MAAM,uDAAuD;AAAA,QACzE;AACA,cAAM,OAAO,gBAAgB,KAAK,MAAM,qBAAqB,MAAM,GAAG,OAAO,YAAY;AACzF,YAAI,MAAM,OAAO,SAAS,OAAS,MAAM,OAAO,SAAS,KAAO;AAC9D,gBAAM,IAAI,MAAM,wDAAwD,IAAI,EAAE;AAAA,QAChF;AACA,kCAA0B,MAAM,YAAY,oBAAoB,MAAM,OAAO,MAAM,MAAM;AACzF,cAAM,YAAY,MAAM,aAAa,OAAO,OAAO,cAAc,kBAAkB,IAAI,EAAE;AACzF,8BAAsB,UAAU;AAChC;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,uBAAe;AACf,YAAI,UAAU,aAAa,OAAO,oBAAoB,YAAY;AAChE,gBAAM,IAAI,MAAM,uDAAuD;AAAA,QACzE;AACA,sBAAc,UAAU;AACxB,cAAM,KAAK,EAAE,MAAM,MAAM,MAAM,OAAO,MAAM,OAAO,UAAU,CAAC;AAAA,MAChE,WAAW,SAAS,yBAAyB;AAC3C,YAAI,MAAM,OAAO,SAAS,OAAS,oBAAoB;AACrD,gBAAM,IAAI,MAAM,4DAA4D;AAAA,QAC9E;AACA,kCAA0B,MAAM,YAAY,oBAAoB,MAAM,OAAO,MAAM,MAAM;AACzF,cAAM,gBAAgB,MAAM;AAAA,UAC1B;AAAA,UACA,OAAO;AAAA,UACP;AAAA,QACF;AACA,8BAAsB,cAAc;AACpC,6BAAqB,wBAAwB,eAAe,OAAO,wBAAwB;AAAA,MAC7F,WAAW,SAAS,uBAAuB;AACzC,YAAI,MAAM,OAAO,SAAS,OAAS,kBAAkB;AACnD,gBAAM,IAAI,MAAM,0DAA0D;AAAA,QAC5E;AACA,kCAA0B,MAAM,YAAY,oBAAoB,MAAM,OAAO,MAAM,MAAM;AACzF,2BAAmB,MAAM;AAAA,UACvB;AAAA,UACA,OAAO;AAAA,UACP;AAAA,QACF;AACA,8BAAsB,iBAAiB;AAAA,MACzC,OAAO;AACL,cAAM,IAAI,MAAM,0DAA0D,IAAI,EAAE;AAAA,MAClF;AAAA,IACF;AACA,QAAI,QAAQ,kBAAkB,MAAM,QAAQ,gBAAgB,GAAG;AAC7D,YAAM,IAAI,MAAM,+DAA+D;AAAA,IACjF;AACA,UAAM,aACJ,sBAAsB,mBAClB,kBAAkB,oBAAoB,gBAAgB,IACtD;AACN,WAAO,EAAE,OAAO,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC,EAAG;AAAA,EACxD,GAAG;AACH,SAAO,IAAI,OAAO,KAAK,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,CAAC;AACxE,QAAM,SAAS,MAAM;AACrB,QAAM;AAAA,IACJ,OAAO;AAAA,IACP,OAAO;AAAA,IACP;AAAA,IACA,OAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,0BACP,cACA,oBACA,YACA,QACM;AACN,MACE,CAAC,OAAO,cAAc,UAAU,KAChC,eAAe,UACf,aAAa,KACb,aAAa,OAAO,kBAAkB,eAAe,oBACrD;AACA,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACF;AAEA,SAAS,wBACP,OACA,gBACsC;AACtC,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;AAAA,EAC5E,SAAS,OAAO;AACd,UAAM,IAAI,MAAM,8DAA8D,EAAE,OAAO,MAAM,CAAC;AAAA,EAChG;AACA,MACE,CAAC,SAAS,KAAK,KACf,OAAO,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,mDACxC,MAAM,kBAAkB,KACxB,MAAM,SAAS,eACf,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,aAAa,YAC1B,CAAC,SAAS,MAAM,MAAM,KACtB,OAAO,KAAK,MAAM,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,uBAC/C,OAAO,MAAM,OAAO,WAAW,YAC/B,CAAC,wBAAwB,KAAK,MAAM,OAAO,MAAM,KACjD,CAAC,OAAO,cAAc,MAAM,OAAO,UAAU,KAC5C,MAAM,OAAO,cAAyB,KACtC,MAAM,OAAO,aAAwB,gBACtC;AACA,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,MAAI,CAAC,OAAO,KAAK,wBAAwB,KAAK,CAAC,EAAE,OAAO,OAAO,KAAK,KAAK,CAAC,GAAG;AAC3E,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,oBAAkB,MAAM,YAAY,iBAAiB;AACrD,oBAAkB,MAAM,UAAU,sBAAsB;AACxD,MAAI,MAAM,WAAW,WAAW,MAAM,SAAS,QAAQ;AACrD,UAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,MAAM;AAAA,IACN,YAAY,MAAM;AAAA,IAClB,UAAU,MAAM;AAAA,IAChB,QAAQ;AAAA,MACN,QAAQ,MAAM,OAAO;AAAA,MACrB,YAAY,MAAM,OAAO;AAAA,IAC3B;AAAA,EACF;AACF;AAEA,SAAS,kBACP,UACA,QAC8B;AAC9B,cAAY,QAAQ,SAAS,OAAO,QAAQ,SAAS,OAAO,YAAY,sBAAsB;AAC9F,SAAO;AAAA,IACL,YAAY,SAAS;AAAA,IACrB,UAAU,SAAS;AAAA,IACnB,QAAQ,EAAE,GAAG,SAAS,QAAQ,OAAO,OAAO;AAAA,EAC9C;AACF;AAEA,eAAe,cACb,SACA,MACA,MACA,OACe;AACf,QAAM,IAAI,QAAc,CAAC,cAAc,gBAAgB;AACrD,YAAQ;AAAA,MACN;AAAA,QACE;AAAA,QACA;AAAA,QACA,KAAK;AAAA,QACL,KAAK;AAAA,QACL,MAAM,MAAM;AAAA,QACZ,OAAO;AAAA,QACP,MAAM;AAAA,QACN,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AAAA,MACA,OAAO,KAAK,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;AAAA,MAC5D,CAAC,UAAW,QAAQ,YAAY,KAAK,IAAI,aAAa;AAAA,IACxD;AAAA,EACF,CAAC;AACH;AAEA,eAAe,aAAa,OAAc,UAAkB,OAAoC;AAC9F,QAAM,OAAO,MAAM,OAAO;AAC1B,MAAI,CAAC,OAAO,cAAc,IAAI,KAAK,SAAS,UAAa,OAAO,KAAK,OAAO,UAAU;AACpF,UAAM,IAAI,MAAM,GAAG,KAAK,0BAA0B;AAAA,EACpD;AACA,QAAM,QAAQ,MAAM,cAAc,OAAO,UAAU,KAAK;AACxD,MAAI,MAAM,eAAe,KAAM,OAAM,IAAI,MAAM,GAAG,KAAK,4BAA4B;AACnF,SAAO;AACT;AAEA,eAAe,cACb,QACA,UACA,OACqB;AACrB,QAAM,SAAmB,CAAC;AAC1B,MAAI,aAAa;AACjB,mBAAiB,SAAS,QAAQ;AAChC,QAAI,MAAM,aAAa,WAAW,YAAY;AAC5C,YAAM,QAAQ,IAAI,MAAM,GAAG,KAAK,yBAAyB;AACzD,UAAI,aAAa,UAAU,OAAO,OAAO,YAAY,WAAY,QAAO,QAAQ,KAAK;AACrF,YAAM;AAAA,IACR;AACA,UAAM,QAAQ,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK;AAChE,WAAO,KAAK,KAAK;AACjB,kBAAc,MAAM;AAAA,EACtB;AACA,SAAO,OAAO,OAAO,QAAQ,UAAU;AACzC;AAEA,eAAe,kBACb,QACA,UACA,UACA,OACkB;AAClB,QAAM,iBAAiB,OAAO,KAAK,SAAS,QAAQ,SAAS,YAAY,SAAS,UAAU;AAC5F,MAAI,QAAQ;AACZ,MAAI,SAAS;AACb,mBAAiB,SAAS,QAAQ;AAChC,QAAI,MAAM,aAAa,WAAW,QAAQ;AACxC,YAAM,QAAQ,IAAI,MAAM,GAAG,KAAK,yBAAyB;AACzD,UAAI,aAAa,UAAU,OAAO,OAAO,YAAY,WAAY,QAAO,QAAQ,KAAK;AACrF,YAAM;AAAA,IACR;AACA,UAAM,WAAW,OAAO,KAAK,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;AAC7E,QACE,SAAS,SAAS,aAAa,eAAe,cAC9C,CAAC,SAAS,OAAO,eAAe,SAAS,QAAQ,SAAS,SAAS,UAAU,CAAC,GAC9E;AACA,cAAQ;AAAA,IACV;AACA,cAAU,SAAS;AAAA,EACrB;AACA,SAAO,SAAS,WAAW,eAAe;AAC5C;AAEA,eAAe,wBAAwB,aAAoC;AACzE,QAAMC,OAAM,aAAa,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACzD,QAAM,QAAQ,MAAM,MAAM,WAAW;AACrC,MACE,CAAC,MAAM,YAAY,KACnB,MAAM,eAAe,KACpB,MAAM,SAAS,WAAW,MAAO,aAClC;AACA,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,OAAK,MAAM,QAAQ,WAAW,GAAG,SAAS,GAAG;AAC3C,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACF;AAEA,eAAe,oBACb,aACA,OACe;AACf,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,cAAc,aAAa,KAAK,IAAI;AACjD,UAAMA,OAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC3D,UAAM,aAAa,MAAMC;AAAA,MACvB;AAAA,MACA,YAAY,WACV,YAAY,UACZ,YAAY,UACX,OAAO,YAAY,eAAe,WAAW,YAAY,aAAa;AAAA,MACzE;AAAA,IACF;AACA,QAAI;AACF,YAAM,WAAW,UAAU,KAAK,KAAK;AACrC,YAAM,QAAQ,MAAM,WAAW,KAAK;AACpC,UAAI,CAAC,MAAM,OAAO,KAAK,MAAM,UAAU,GAAG;AACxC,cAAM,IAAI,MAAM,4DAA4D,KAAK,IAAI,EAAE;AAAA,MACzF;AACA,YAAM,WAAW,MAAM,KAAK,IAAI;AAAA,IAClC,UAAE;AACA,YAAM,WAAW,MAAM;AAAA,IACzB;AAAA,EACF;AACF;AAEA,eAAe,sBACb,YACA,aACe;AACf,QAAM,YAAY,MAAM,QAAQH,MAAK,OAAO,GAAG,mCAAmC,CAAC;AACnF,QAAM,aAAaA,MAAK,WAAW,GAAGC,YAAW,CAAC,SAAS;AAC3D,MAAI;AACF,UAAM,UAAU,YAAY,WAAW,OAAO,OAAO,EAAE,MAAM,MAAM,MAAM,IAAM,CAAC;AAChF,UAAM,gBAAgB,aAAa;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA,mBAAmB,WAAW,WAAW,WAAW,KAAK,WAAW,MAAM;AAAA,IAC5E,CAAC;AACD,UAAM,gBAAgB,aAAa,CAAC,UAAU,UAAU,UAAU,CAAC;AACnE,UAAM,gBAAgB,aAAa,CAAC,UAAU,YAAY,UAAU,CAAC;AACrE,UAAM,cACJ,MAAM,gBAAgB,aAAa,CAAC,YAAY,MAAM,WAAW,UAAU,CAAC,GAC5E,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAI,eAAe,SAAU,OAAM,IAAI,MAAM,2CAA2C;AACxF,UAAM,gBACJ,MAAM,gBAAgB,aAAa,CAAC,aAAa,GAAG,WAAW,UAAU,SAAS,CAAC,GACnF,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAI,iBAAiB,WAAW,UAAU;AACxC,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,UAAM,gBAAgB,aAAa,CAAC,cAAc,cAAc,QAAQ,WAAW,UAAU,CAAC;AAC9F,UAAM,gBAAgB,aAAa,CAAC,aAAa,WAAW,QAAQ,CAAC;AACrE,UAAM,UACJ,MAAM,gBAAgB,aAAa,CAAC,UAAU,kBAAkB,uBAAuB,CAAC,GACxF,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAI,OAAQ,OAAM,IAAI,MAAM,sDAAsD;AAAA,EACpF,UAAE;AACA,UAAM,GAAG,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACtD;AACF;AAEA,SAAS,kBACP,OAC2C;AAC3C,SAAO;AAAA,IACL,eAAe;AAAA,IACf,MAAM;AAAA,IACN,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,MAC1B,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,QAAQ,YAAY,KAAK,KAAK;AAAA,MAC9B,YAAY,KAAK,MAAM;AAAA,IACzB,EAAE;AAAA,EACJ;AACF;AAEA,SAAS,6BACP,OACA,UACM;AACN,QAAM,WAAW,kBAAkB,KAAK;AACxC,QAAM,gBAAgB,wBAAwB,QAAQ;AACtD;AAAA,IACE;AAAA,IACA,SAAS,SAAS;AAAA,IAClB,SAAS,SAAS;AAAA,IAClB;AAAA,EACF;AACA,MACE,yBAAyB,QAAQ,MAAM,SAAS,UAChD,CAAC,OAAO,KAAK,aAAa,EAAE,OAAO,OAAO,KAAK,wBAAwB,SAAS,QAAQ,CAAC,CAAC,GAC1F;AACA,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACF;AAEA,SAAS,iCACP,OACA,QACM;AACN,MAAI,MAAM,SAAS,OAAO,UAAU;AAClC,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI,aAAa;AACjB,MAAI;AACJ,QAAM,gBAAgB,oBAAI,IAAY;AACtC,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,gBAAgB,KAAK,MAAM,OAAO,YAAY;AAC3D;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,mBAAe;AACf,QAAI,KAAK,SAAS,OAAS,KAAK,SAAS,KAAO;AAC9C,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,QAAI,KAAK,MAAM,aAAa,OAAO,cAAc;AAC/C,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,kBAAc,KAAK,MAAM;AACzB,QAAI,aAAa,OAAO,mBAAmB;AACzC,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AAAA,EACF;AACF;AAEA,SAAS,wBACP,OACA,QACuC;AACvC,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,QAAM,YAAY,MAAM;AACxB,MAAI,YAAY,OAAO,UAAU;AAC/B,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI,aAAa;AACjB,QAAM,QAA+C,CAAC;AACtD,WAAS,QAAQ,GAAG,QAAQ,WAAW,SAAS;AAC9C,UAAM,YAAY,MAAM,KAAK;AAC7B,QAAI,CAAC,SAAS,SAAS,KAAK,OAAO,KAAK,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,mBAAmB;AACzF,YAAM,IAAI,MAAM,4BAA4B,KAAK,aAAa;AAAA,IAChE;AACA,UAAM,cAAc,OAAO,0BAA0B,SAAS;AAC9D,QACE,EAAE,YAAY,YAAY,QAAQ,CAAC,OACnC,EAAE,YAAY,YAAY,QAAQ,CAAC,OACnC,EAAE,YAAY,YAAY,SAAS,CAAC,KACpC;AACA,YAAM,IAAI,MAAM,4BAA4B,KAAK,wBAAwB;AAAA,IAC3E;AACA,UAAM,OAAO,gBAAgB,YAAY,MAAM,OAAO,OAAO,YAAY;AACzE,UAAM,OAAO,YAAY,MAAM;AAC/B,UAAM,aAAa,YAAY,OAAO;AACtC,QAAI,SAAS,OAAS,SAAS,KAAO;AACpC,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,UAAM,OAAO,sBAAsB,YAAY,IAAI;AACnD,QAAI,KAAK,aAAa,OAAO,cAAc;AACzC,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,QAAI,KAAK,aAAa,OAAO,oBAAoB,YAAY;AAC3D,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,QAAI,KAAK,aAAa,KAAK,IAAI,GAAG,OAAO,kBAAkB,IAAI,GAAG;AAChE,YAAM,IAAI,MAAM,qDAAqD;AAAA,IACvE;AACA,kBAAc,KAAK;AACnB,UAAM,KAAK,EAAE,MAAM,MAAM,OAAO,qBAAqB,IAAI,EAAE,CAAC;AAAA,EAC9D;AACA,QAAM,KAAK,CAAC,MAAM,UAAW,KAAK,OAAO,MAAM,OAAO,KAAK,KAAK,OAAO,MAAM,OAAO,IAAI,CAAE;AAC1F,mCAAiC,OAAO,MAAM;AAC9C,SAAO;AACT;AAEA,SAAS,gBACP,WACsC;AACtC,QAAM,SAAS,EAAE,GAAG,eAAe,GAAG,UAAU;AAChD,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,QAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,GAAG;AAC9C,YAAM,IAAI,MAAM,uBAAuB,IAAI,kCAAkC;AAAA,IAC/E;AAAA,EACF;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAAS,gBAAgB,OAAgB,cAA8B;AACrE,MACE,OAAO,UAAU,YACjB,CAAC,SACD,CAAC,oBAAoB,KAAK,KAC1B,OAAO,WAAW,OAAO,MAAM,IAAI,gBACnC,WAAW,KAAK,KAChB,MAAM,WAAW,KAAK,KACtB,MAAM,SAAS,IAAI,KACnB,MAAM,SAAS,IAAI,KACnB,oBAAoB,KAAK,KACzB,MAAM,MAAM,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,SAAS,OAAO,SAAS,IAAI,KACtE,CAAC,QAAQ,UAAU,EAAE,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,YAAY,KAAK,EAAE,GACtE;AACA,UAAM,IAAI,MAAM,wDAAwD,OAAO,KAAK,CAAC,EAAE;AAAA,EACzF;AACA,SAAO;AACT;AAEA,SAAS,yBACP,MACA,cACA,eACA,cACM;AACN,MAAI,iBAAiB,UAAa,gBAAgB,KAAM,OAAM,IAAI,MAAM,YAAY;AACpF,WAAS,QAAQ,KAAK,QAAQ,GAAG,GAAG,UAAU,IAAI,QAAQ,KAAK,QAAQ,KAAK,QAAQ,CAAC,GAAG;AACtF,QAAI,cAAc,IAAI,KAAK,MAAM,GAAG,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,YAAY;AAAA,EAC3E;AACA,gBAAc,IAAI,IAAI;AACxB;AAEA,SAAS,sBACP,OACA,MACiE;AACjE,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,aAAS,uBAAuB,KAAK,KAAmB;AACxD,iBAAa,2BAA2B,KAAK,KAAmB;AAChE,iBAAa,2BAA2B,KAAK,KAAmB;AAAA,EAClE,QAAQ;AACN,UAAM,IAAI,MAAM,+CAA+C,IAAI,EAAE;AAAA,EACvE;AACA,MAAI,oBAAoB,MAAM,GAAG;AAC/B,UAAM,IAAI,MAAM,+CAA+C,IAAI,EAAE;AAAA,EACvE;AACA,MAAI,CAAC,iBAAiB,MAAM,GAAG;AAC7B,UAAM,IAAI,MAAM,+CAA+C,IAAI,EAAE;AAAA,EACvE;AACA,SAAO,EAAE,QAAQ,YAAY,WAAW;AAC1C;AAEA,SAAS,qBAAqB,OAIf;AACb,QAAM,EAAE,QAAQ,YAAY,WAAW,IAAI;AAC3C,QAAM,OAAO,IAAI,WAAW,UAAU;AACtC,aAAW,UAAU,IAAI,KAAK,MAAM,IAAI,WAAW,QAAQ,YAAY,UAAU,CAAC;AAClF,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;AACjD,UAAM,OAAO,MAAM,WAAW,KAAK;AACnC,QAAI,QAAQ,SAAU,QAAQ,OAAQ;AACpC,YAAM,OAAO,MAAM,WAAW,QAAQ,CAAC;AACvC,UAAI,EAAE,QAAQ,SAAU,QAAQ,OAAS,QAAO;AAChD;AAAA,IACF,WAAW,QAAQ,SAAU,QAAQ,OAAQ;AAC3C,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,MAAc,cAA8B;AACjE,QAAM,OAAO,QAAQ,MAAM,YAAY;AACvC,MAAI,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,GAAG,EAAE,GAAG;AACrC,UAAM,IAAI,MAAM,6DAA6D,YAAY,EAAE;AAAA,EAC7F;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,OAAe,OAAqB;AAC7D,MAAI,CAAC,kCAAkC,KAAK,KAAK,GAAG;AAClD,UAAM,IAAI,MAAM,wBAAwB,KAAK,yBAAyB;AAAA,EACxE;AACF;AAEA,SAAS,oBAAoB,OAAwB;AACnD,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;AACjD,UAAM,OAAO,MAAM,WAAW,KAAK;AACnC,QAAI,OAAO,MAAQ,SAAS,IAAM,QAAO;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAIA,SAAS,wBAAwB,MAAgE;AAC/F,QAAM,sBAAsB,OAAO,eAAe,WAAW,SAAS;AACtE,QAAM,SAAS,OAAO,yBAAyB,qBAAqB,IAAI,GAAG;AAC3E,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,yBAAyB,IAAI,0BAA0B;AACpF,SAAO;AACT;AAEA,IAAM,yBAAyB,wBAAwB,QAAQ;AAC/D,IAAM,6BAA6B,wBAAwB,YAAY;AACvE,IAAM,6BAA6B,wBAAwB,YAAY;","names":["record","winner","source","value","record","memory","randomUUID","mkdir","open","join","join","randomUUID","mkdir","open"]}

package/dist/chunk-HGRW27YY.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/knowledge/improvement-job.ts","../src/knowledge/supervised-update.ts"],"sourcesContent":["import {\n  type BuildEvalKnowledgeBundleOptions,\n  evaluateKnowledgeBaseReadiness,\n  improveKnowledgeBase,\n  type KnowledgeBaseQualityOptions,\n  type KnowledgeImprovementOptions,\n  type KnowledgeImprovementResult,\n  type KnowledgeReadinessSpec,\n} from '@tangle-network/agent-knowledge'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport type { SuperviseOptions } from '../runtime/supervise/supervise'\nimport type { SupervisorProfile } from '../runtime/supervise/supervisor-agent'\nimport type { Budget, SupervisedResult } from '../runtime/supervise/types'\nimport {\n  createSupervisedKnowledgeUpdater,\n  type KnowledgeReadinessCheck,\n  type KnowledgeReadinessCheckResult,\n  type SupervisedKnowledgeUpdateOptions,\n} from './supervised-update'\n\nexport interface RunKnowledgeImprovementJobOptions\n  extends Omit<KnowledgeImprovementOptions, 'updateKnowledge'> {\n  budget: Budget\n  readinessCheck?: KnowledgeReadinessCheck\n  backend?: ExecutorConfig\n  makeWorkerAgent?: SuperviseOptions['makeWorkerAgent']\n  harness?: string\n  supervisorModel?: string\n  supervisorSystemPrompt?: string\n  superviseOptions?: Partial<\n    Omit<\n      SuperviseOptions,\n      'budget' | 'backend' | 'deliverable' | 'makeWorkerAgent' | 'allowedModels'\n    >\n  >\n  allowedModels?: readonly string[]\n  runSupervised?: (\n    profile: SupervisorProfile,\n    task: unknown,\n    opts: SuperviseOptions,\n  ) => Promise<SupervisedResult<unknown>>\n  onMeasurement?: (measurement: KnowledgeImprovementJobMeasurement) => Promise<void> | void\n}\n\nexport interface KnowledgeImprovementJobMeasurement {\n  startedAt: string\n  finishedAt: string\n  durationMs: number\n  updateCalls: number\n  updateDurationMs: number\n  supervisedSpent: {\n    iterations: number\n    inputTokens: number\n    outputTokens: number\n    usd: number\n    ms: number\n  }\n}\n\nexport interface KnowledgeImprovementJobResult {\n  improvement: KnowledgeImprovementResult\n  measurement: KnowledgeImprovementJobMeasurement\n  promoted: boolean\n  blocked: boolean\n}\n\nexport interface AgentKnowledgeReadinessCheckOptions {\n  goal: string\n  readinessSpecs?: readonly KnowledgeReadinessSpec[]\n  readinessTaskId?: string\n  readiness?: Omit<BuildEvalKnowledgeBundleOptions, 'taskId' | 'index' | 'specs'>\n  strict?: boolean\n  kbQuality?: KnowledgeBaseQualityOptions\n}\n\n/** Build the default readiness check backed by `@tangle-network/agent-knowledge` validation and scoring. */\nexport function createAgentKnowledgeReadinessCheck(\n  options: AgentKnowledgeReadinessCheckOptions,\n): KnowledgeReadinessCheck {\n  return async (input): Promise<KnowledgeReadinessCheckResult> => {\n    const readiness = await evaluateKnowledgeBaseReadiness({\n      root: input.root,\n      goal: input.goal ?? options.goal,\n      readinessSpecs:\n        (input.readinessSpecs as readonly KnowledgeReadinessSpec[] | undefined) ??\n        options.readinessSpecs,\n      readinessTaskId: input.readinessTaskId ?? options.readinessTaskId,\n      readiness:\n        (input.readiness as AgentKnowledgeReadinessCheckOptions['readiness'] | undefined) ??\n        options.readiness,\n      strict: options.strict,\n      kbQuality: options.kbQuality,\n    })\n    return {\n      ready: readiness.ready,\n      summary: readiness.summary,\n      metadata: {\n        dimensions: readiness.dimensions,\n        validationOk: readiness.validation.ok,\n        kbQualityOk: readiness.kbQuality.ok,\n        blockingMissing: readiness.readiness?.report.blockingMissingRequirements.length ?? 0,\n      },\n    }\n  }\n}\n\n/** Run the full KB improvement job: candidate workspace, runtime supervisor update, readiness check, and promotion. */\nexport async function runKnowledgeImprovementJob(\n  options: RunKnowledgeImprovementJobOptions,\n): Promise<KnowledgeImprovementJobResult> {\n  const {\n    allowedModels,\n    backend,\n    budget,\n    harness,\n    makeWorkerAgent,\n    onMeasurement,\n    readinessCheck,\n    runSupervised,\n    supervisorModel,\n    supervisorSystemPrompt,\n    superviseOptions,\n    ...knowledgeOptions\n  } = options\n  const startedAtMs = Date.now()\n  const startedAt = new Date(startedAtMs).toISOString()\n  const supervisedSpent = emptySpent()\n  let updateCalls = 0\n  let updateDurationMs = 0\n\n  const readiness = readinessCheck ?? createAgentKnowledgeReadinessCheck(options)\n  const updateKnowledge = createSupervisedKnowledgeUpdater({\n    root: options.root,\n    goal: options.goal,\n    readiness,\n    readinessSpecs: options.readinessSpecs,\n    readinessTaskId: options.readinessTaskId,\n    readinessOptions: options.readiness,\n    budget,\n    backend,\n    makeWorkerAgent,\n    harness,\n    supervisorModel,\n    supervisorSystemPrompt,\n    superviseOptions,\n    allowedModels,\n    runSupervised,\n  } satisfies SupervisedKnowledgeUpdateOptions)\n\n  const resolvedImprovement = await improveKnowledgeBase({\n    ...knowledgeOptions,\n    updateKnowledge: async (input) => {\n      const updateStartedAt = Date.now()\n      updateCalls += 1\n      const result = await updateKnowledge(input)\n      updateDurationMs += Date.now() - updateStartedAt\n      addSpent(supervisedSpent, result.supervised)\n      return result\n    },\n  } as KnowledgeImprovementOptions)\n  const finishedAtMs = Date.now()\n  const measurement: KnowledgeImprovementJobMeasurement = {\n    startedAt,\n    finishedAt: new Date(finishedAtMs).toISOString(),\n    durationMs: finishedAtMs - startedAtMs,\n    updateCalls,\n    updateDurationMs,\n    supervisedSpent,\n  }\n  await onMeasurement?.(measurement)\n  return {\n    improvement: resolvedImprovement,\n    measurement,\n    promoted: resolvedImprovement.promoted,\n    blocked: resolvedImprovement.blocked,\n  }\n}\n\nfunction emptySpent(): KnowledgeImprovementJobMeasurement['supervisedSpent'] {\n  return { iterations: 0, inputTokens: 0, outputTokens: 0, usd: 0, ms: 0 }\n}\n\nfunction addSpent(\n  target: KnowledgeImprovementJobMeasurement['supervisedSpent'],\n  result: SupervisedResult<unknown>,\n): void {\n  const spent = result.spentTotal\n  target.iterations += spent.iterations ?? 0\n  target.inputTokens += spent.tokens?.input ?? 0\n  target.outputTokens += spent.tokens?.output ?? 0\n  target.usd += spent.usd ?? 0\n  target.ms += spent.ms ?? 0\n}\n","import { researcherProfile } from '../profiles/researcher'\nimport type { DeliverableSpec } from '../runtime/supervise/completion-gate'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport { type SuperviseOptions, supervise } from '../runtime/supervise/supervise'\nimport type { SupervisorProfile } from '../runtime/supervise/supervisor-agent'\nimport type { Budget, SupervisedResult } from '../runtime/supervise/types'\n\n/** Standing prompt for a supervisor that grows a shared knowledge base through spawned researchers. */\nexport const RESEARCH_SUPERVISOR_SYSTEM_PROMPT = [\n  'You are a research supervisor. You do not answer the research question yourself.',\n  'You create and manage researcher workers that improve one shared knowledge base until it is ready.',\n  '',\n  'Each round:',\n  '1. Read the goal and the gaps the readiness check still reports.',\n  '2. Decompose the open work into independent sub-topics.',\n  '3. Spawn one researcher per sub-topic; split by sub-topic, never duplicate work.',\n  '4. Wait for researchers to settle, steer or re-spawn thin sub-topics, then stop when the check passes.',\n  '',\n  'Conserve the shared budget. Prefer a small number of well-scoped researchers over a large fanout that re-covers the same ground.',\n].join('\\n')\n\nexport interface KnowledgeReadinessCheckInput {\n  root: string\n  goal: string\n  readinessSpecs?: readonly unknown[]\n  readinessTaskId?: string\n  readiness?: unknown\n}\n\nexport type KnowledgeReadinessCheckResult =\n  | boolean\n  | {\n      ready: boolean\n      summary?: string\n      metadata?: Record<string, unknown>\n    }\n\nexport type KnowledgeReadinessCheck = (\n  input: KnowledgeReadinessCheckInput,\n) => Promise<KnowledgeReadinessCheckResult> | KnowledgeReadinessCheckResult\n\nexport interface SupervisedKnowledgeUpdateInput {\n  goal?: string\n  root?: string\n  candidateRoot?: string\n  findings?: readonly unknown[]\n  metadata?: Record<string, unknown>\n}\n\nexport interface SupervisedKnowledgeUpdateResult {\n  applied: boolean\n  summary: string\n  supervised: SupervisedResult<unknown>\n  metadata: Record<string, unknown>\n}\n\nexport interface SupervisedKnowledgeUpdateOptions {\n  root: string\n  goal: string\n  readiness: KnowledgeReadinessCheck\n  readinessSpecs?: readonly unknown[]\n  readinessTaskId?: string\n  readinessOptions?: unknown\n  findings?: readonly unknown[]\n  metadata?: Record<string, unknown>\n  budget: Budget\n  backend?: ExecutorConfig\n  makeWorkerAgent?: SuperviseOptions['makeWorkerAgent']\n  harness?: string\n  supervisorModel?: string\n  supervisorSystemPrompt?: string\n  superviseOptions?: Partial<\n    Omit<\n      SuperviseOptions,\n      'budget' | 'backend' | 'deliverable' | 'makeWorkerAgent' | 'allowedModels'\n    >\n  >\n  allowedModels?: readonly string[]\n  runSupervised?: (\n    profile: SupervisorProfile,\n    task: unknown,\n    opts: SuperviseOptions,\n  ) => Promise<SupervisedResult<unknown>>\n}\n\nexport type SupervisedKnowledgeUpdater = (\n  input: SupervisedKnowledgeUpdateInput,\n) => Promise<SupervisedKnowledgeUpdateResult>\n\n/** Build the completion check a supervised KB update uses to stop only when the KB is ready. */\nexport function knowledgeReadinessDeliverable(\n  options: Pick<\n    SupervisedKnowledgeUpdateOptions,\n    'root' | 'goal' | 'readiness' | 'readinessSpecs' | 'readinessTaskId' | 'readinessOptions'\n  >,\n): DeliverableSpec<unknown> {\n  return {\n    describe: `knowledge base at ${options.root} is ready for: ${options.goal}`,\n    async check() {\n      const result = await options.readiness({\n        root: options.root,\n        goal: options.goal,\n        readinessSpecs: options.readinessSpecs,\n        readinessTaskId: options.readinessTaskId,\n        readiness: options.readinessOptions,\n      })\n      return typeof result === 'boolean' ? result : result.ready\n    },\n  }\n}\n\n/** Create an `improveKnowledgeBase` update callback backed by runtime supervision. */\nexport function createSupervisedKnowledgeUpdater(\n  options: SupervisedKnowledgeUpdateOptions,\n): SupervisedKnowledgeUpdater {\n  return (input) =>\n    runSupervisedKnowledgeUpdate({\n      ...options,\n      root: input.candidateRoot ?? input.root ?? options.root,\n      goal: input.goal ?? options.goal,\n      findings: input.findings ?? options.findings,\n      metadata: { ...options.metadata, ...input.metadata },\n    })\n}\n\n/** Run a runtime supervisor that updates one candidate knowledge base and stops on readiness. */\nexport async function runSupervisedKnowledgeUpdate(\n  options: SupervisedKnowledgeUpdateOptions,\n): Promise<SupervisedKnowledgeUpdateResult> {\n  const { profile: workerProfile } = researcherProfile({ harness: options.harness })\n  const baseInstructions = options.supervisorSystemPrompt ?? RESEARCH_SUPERVISOR_SYSTEM_PROMPT\n  const workerContract = workerProfile.prompt?.systemPrompt\n  const systemPrompt = workerContract\n    ? `${baseInstructions}\\n\\nEach researcher worker you spawn follows this contract:\\n${workerContract}`\n    : baseInstructions\n\n  const profile: SupervisorProfile = {\n    name: 'knowledge-research-supervisor',\n    model: options.supervisorModel,\n    systemPrompt,\n  }\n  const run = options.runSupervised ?? supervise\n  const task = formatSupervisedKnowledgeTask(options)\n  const supervised = await run(profile, task, {\n    ...options.superviseOptions,\n    budget: options.budget,\n    backend: options.backend,\n    deliverable: knowledgeReadinessDeliverable(options),\n    makeWorkerAgent: options.makeWorkerAgent,\n    allowedModels: options.allowedModels,\n  })\n  return {\n    applied: supervised.kind === 'winner',\n    summary:\n      supervised.kind === 'winner'\n        ? 'research supervisor completed and the knowledge base passed readiness'\n        : `research supervisor stopped without a ready knowledge base: ${supervised.reason}`,\n    supervised,\n    metadata: {\n      supervised: true,\n      root: options.root,\n      goal: options.goal,\n      result: supervised.kind,\n    },\n  }\n}\n\n/** Format the supervisor task with the KB root, readiness requirements, current findings, and metadata. */\nexport function formatSupervisedKnowledgeTask(\n  options: Pick<\n    SupervisedKnowledgeUpdateOptions,\n    'root' | 'goal' | 'readinessSpecs' | 'readinessTaskId' | 'findings' | 'metadata'\n  >,\n): string {\n  const sections = [\n    `Goal: ${options.goal}`,\n    `Knowledge base root: ${options.root}`,\n    options.readinessTaskId ? `Readiness task id: ${options.readinessTaskId}` : undefined,\n    options.readinessSpecs?.length\n      ? `Readiness specs:\\n${JSON.stringify(options.readinessSpecs, null, 2)}`\n      : undefined,\n    options.findings?.length\n      ? `Current findings:\\n${JSON.stringify(options.findings, null, 2)}`\n      : undefined,\n    options.metadata && Object.keys(options.metadata).length > 0\n      ? `Metadata:\\n${JSON.stringify(options.metadata, null, 2)}`\n      : undefined,\n  ].filter((section): section is string => Boolean(section))\n  return `${sections.join('\\n\\n')}\\n\\nUpdate files under the knowledge base root only. Stop when the readiness check passes.`\n}\n"],"mappings":";;;;;;;;AAAA;AAAA,EAEE;AAAA,EACA;AAAA,OAKK;;;ACAA,IAAM,oCAAoC;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAuEJ,SAAS,8BACd,SAI0B;AAC1B,SAAO;AAAA,IACL,UAAU,qBAAqB,QAAQ,IAAI,kBAAkB,QAAQ,IAAI;AAAA,IACzE,MAAM,QAAQ;AACZ,YAAM,SAAS,MAAM,QAAQ,UAAU;AAAA,QACrC,MAAM,QAAQ;AAAA,QACd,MAAM,QAAQ;AAAA,QACd,gBAAgB,QAAQ;AAAA,QACxB,iBAAiB,QAAQ;AAAA,QACzB,WAAW,QAAQ;AAAA,MACrB,CAAC;AACD,aAAO,OAAO,WAAW,YAAY,SAAS,OAAO;AAAA,IACvD;AAAA,EACF;AACF;AAGO,SAAS,iCACd,SAC4B;AAC5B,SAAO,CAAC,UACN,6BAA6B;AAAA,IAC3B,GAAG;AAAA,IACH,MAAM,MAAM,iBAAiB,MAAM,QAAQ,QAAQ;AAAA,IACnD,MAAM,MAAM,QAAQ,QAAQ;AAAA,IAC5B,UAAU,MAAM,YAAY,QAAQ;AAAA,IACpC,UAAU,EAAE,GAAG,QAAQ,UAAU,GAAG,MAAM,SAAS;AAAA,EACrD,CAAC;AACL;AAGA,eAAsB,6BACpB,SAC0C;AAC1C,QAAM,EAAE,SAAS,cAAc,IAAI,kBAAkB,EAAE,SAAS,QAAQ,QAAQ,CAAC;AACjF,QAAM,mBAAmB,QAAQ,0BAA0B;AAC3D,QAAM,iBAAiB,cAAc,QAAQ;AAC7C,QAAM,eAAe,iBACjB,GAAG,gBAAgB;AAAA;AAAA;AAAA,EAAgE,cAAc,KACjG;AAEJ,QAAM,UAA6B;AAAA,IACjC,MAAM;AAAA,IACN,OAAO,QAAQ;AAAA,IACf;AAAA,EACF;AACA,QAAM,MAAM,QAAQ,iBAAiB;AACrC,QAAM,OAAO,8BAA8B,OAAO;AAClD,QAAM,aAAa,MAAM,IAAI,SAAS,MAAM;AAAA,IAC1C,GAAG,QAAQ;AAAA,IACX,QAAQ,QAAQ;AAAA,IAChB,SAAS,QAAQ;AAAA,IACjB,aAAa,8BAA8B,OAAO;AAAA,IAClD,iBAAiB,QAAQ;AAAA,IACzB,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO;AAAA,IACL,SAAS,WAAW,SAAS;AAAA,IAC7B,SACE,WAAW,SAAS,WAChB,0EACA,+DAA+D,WAAW,MAAM;AAAA,IACtF;AAAA,IACA,UAAU;AAAA,MACR,YAAY;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,QAAQ,WAAW;AAAA,IACrB;AAAA,EACF;AACF;AAGO,SAAS,8BACd,SAIQ;AACR,QAAM,WAAW;AAAA,IACf,SAAS,QAAQ,IAAI;AAAA,IACrB,wBAAwB,QAAQ,IAAI;AAAA,IACpC,QAAQ,kBAAkB,sBAAsB,QAAQ,eAAe,KAAK;AAAA,IAC5E,QAAQ,gBAAgB,SACpB;AAAA,EAAqB,KAAK,UAAU,QAAQ,gBAAgB,MAAM,CAAC,CAAC,KACpE;AAAA,IACJ,QAAQ,UAAU,SACd;AAAA,EAAsB,KAAK,UAAU,QAAQ,UAAU,MAAM,CAAC,CAAC,KAC/D;AAAA,IACJ,QAAQ,YAAY,OAAO,KAAK,QAAQ,QAAQ,EAAE,SAAS,IACvD;AAAA,EAAc,KAAK,UAAU,QAAQ,UAAU,MAAM,CAAC,CAAC,KACvD;AAAA,EACN,EAAE,OAAO,CAAC,YAA+B,QAAQ,OAAO,CAAC;AACzD,SAAO,GAAG,SAAS,KAAK,MAAM,CAAC;AAAA;AAAA;AACjC;;;ADjHO,SAAS,mCACd,SACyB;AACzB,SAAO,OAAO,UAAkD;AAC9D,UAAM,YAAY,MAAM,+BAA+B;AAAA,MACrD,MAAM,MAAM;AAAA,MACZ,MAAM,MAAM,QAAQ,QAAQ;AAAA,MAC5B,gBACG,MAAM,kBACP,QAAQ;AAAA,MACV,iBAAiB,MAAM,mBAAmB,QAAQ;AAAA,MAClD,WACG,MAAM,aACP,QAAQ;AAAA,MACV,QAAQ,QAAQ;AAAA,MAChB,WAAW,QAAQ;AAAA,IACrB,CAAC;AACD,WAAO;AAAA,MACL,OAAO,UAAU;AAAA,MACjB,SAAS,UAAU;AAAA,MACnB,UAAU;AAAA,QACR,YAAY,UAAU;AAAA,QACtB,cAAc,UAAU,WAAW;AAAA,QACnC,aAAa,UAAU,UAAU;AAAA,QACjC,iBAAiB,UAAU,WAAW,OAAO,4BAA4B,UAAU;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;AAGA,eAAsB,2BACpB,SACwC;AACxC,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EACL,IAAI;AACJ,QAAM,cAAc,KAAK,IAAI;AAC7B,QAAM,YAAY,IAAI,KAAK,WAAW,EAAE,YAAY;AACpD,QAAM,kBAAkB,WAAW;AACnC,MAAI,cAAc;AAClB,MAAI,mBAAmB;AAEvB,QAAM,YAAY,kBAAkB,mCAAmC,OAAO;AAC9E,QAAM,kBAAkB,iCAAiC;AAAA,IACvD,MAAM,QAAQ;AAAA,IACd,MAAM,QAAQ;AAAA,IACd;AAAA,IACA,gBAAgB,QAAQ;AAAA,IACxB,iBAAiB,QAAQ;AAAA,IACzB,kBAAkB,QAAQ;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAA4C;AAE5C,QAAM,sBAAsB,MAAM,qBAAqB;AAAA,IACrD,GAAG;AAAA,IACH,iBAAiB,OAAO,UAAU;AAChC,YAAM,kBAAkB,KAAK,IAAI;AACjC,qBAAe;AACf,YAAM,SAAS,MAAM,gBAAgB,KAAK;AAC1C,0BAAoB,KAAK,IAAI,IAAI;AACjC,eAAS,iBAAiB,OAAO,UAAU;AAC3C,aAAO;AAAA,IACT;AAAA,EACF,CAAgC;AAChC,QAAM,eAAe,KAAK,IAAI;AAC9B,QAAM,cAAkD;AAAA,IACtD;AAAA,IACA,YAAY,IAAI,KAAK,YAAY,EAAE,YAAY;AAAA,IAC/C,YAAY,eAAe;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,gBAAgB,WAAW;AACjC,SAAO;AAAA,IACL,aAAa;AAAA,IACb;AAAA,IACA,UAAU,oBAAoB;AAAA,IAC9B,SAAS,oBAAoB;AAAA,EAC/B;AACF;AAEA,SAAS,aAAoE;AAC3E,SAAO,EAAE,YAAY,GAAG,aAAa,GAAG,cAAc,GAAG,KAAK,GAAG,IAAI,EAAE;AACzE;AAEA,SAAS,SACP,QACA,QACM;AACN,QAAM,QAAQ,OAAO;AACrB,SAAO,cAAc,MAAM,cAAc;AACzC,SAAO,eAAe,MAAM,QAAQ,SAAS;AAC7C,SAAO,gBAAgB,MAAM,QAAQ,UAAU;AAC/C,SAAO,OAAO,MAAM,OAAO;AAC3B,SAAO,MAAM,MAAM,MAAM;AAC3B;","names":[]}