@tangle-network/agent-runtime 0.94.4 → 0.94.6

package/dist/chunk-5BT2NMML.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/candidate-execution/builder.ts","../src/candidate-execution/claim-file-store.ts","../src/candidate-execution/dispose.ts","../src/candidate-execution/protected-model-port.ts","../src/candidate-execution/recover.ts","../src/candidate-execution/workspace-archive.ts"],"sourcesContent":["import type { CodeSurface } from '@tangle-network/agent-eval/campaign'\nimport { verifyCodeSurface } from '@tangle-network/agent-eval/campaign'\nimport type {\n  AgentCandidateCodeDisabled,\n  AgentCandidateCodeNoOp,\n  AgentCandidateExecution,\n  AgentCandidateGitHubRepository,\n  AgentCandidateKnowledge,\n  AgentCandidateLineage,\n  AgentCandidateMemoryPolicy,\n  AgentCandidateProfile,\n  AgentProfile,\n  AgentProfileDiff,\n} from '@tangle-network/agent-interface'\nimport { type AgentCandidateBundleInput, sealAgentCandidateBundle } from './bundle'\nimport { canonicalCandidateDigest, embeddedCandidateArtifact } from './digest'\nimport {\n  applyExactAgentProfileDiff,\n  freezeGenericAgentCandidateProfile,\n  parseExactAgentProfile,\n  parseExactAgentProfileDiff,\n  parseExactCandidateProfile,\n} from './profile'\n\n/** A complete profile that can be frozen without losing behavior. */\nexport type AgentCandidateProfileSource =\n  | {\n      kind: 'profile'\n      profile: AgentProfile\n    }\n  | {\n      kind: 'profile-diffs'\n      base: AgentProfile\n      /** Applied in order. Each exact diff is content-addressed into lineage. */\n      diffs: readonly AgentProfileDiff[]\n    }\n  | {\n      kind: 'candidate-profile'\n      /** Already converted to the closed, secret-free candidate profile contract. */\n      profile: AgentCandidateProfile\n    }\n\n/** The only accepted path from an agent-eval code candidate to executable bytes. */\nexport interface AgentCandidateCodeSurfaceSource {\n  kind: 'code-surface'\n  surface: CodeSurface\n  repository: AgentCandidateGitHubRepository\n  /** Optional parent directory used to resolve a relative `surface.worktreeRef`. */\n  worktreeDir?: string\n}\n\n/** Explicit control/no-op code or one finalized CodeSurface whose bytes must still verify. */\nexport type AgentCandidateCodeSource =\n  | AgentCandidateCodeDisabled\n  | AgentCandidateCodeNoOp\n  | AgentCandidateCodeSurfaceSource\n\n/** Complete measured surfaces and execution policy compiled into one candidate bundle. */\nexport interface BuildAgentCandidateBundleInput {\n  profile: AgentCandidateProfileSource\n  code: AgentCandidateCodeSource\n  execution: AgentCandidateExecution\n  knowledge?: AgentCandidateKnowledge\n  memory: AgentCandidateMemoryPolicy\n  /** `profileDiffIds` is derived from `profile`; callers cannot contradict it. */\n  lineage: Omit<AgentCandidateLineage, 'profileDiffIds'>\n}\n\n/**\n * Compile one measured profile/code candidate into the immutable execution\n * contract. Code bytes are re-read and verified by agent-eval before they are\n * embedded. The returned bundle is schema-validated, canonically digested, and\n * deeply immutable; call `verifyAgentCandidateBundle` at the execution boundary\n * to re-read external knowledge, memory, repository, and workspace artifacts.\n */\nexport function buildAgentCandidateBundle(\n  input: BuildAgentCandidateBundleInput,\n): ReturnType<typeof sealAgentCandidateBundle> {\n  if (Object.hasOwn(input.lineage, 'profileDiffIds')) {\n    throw new Error('profileDiffIds is derived from the profile source and cannot be supplied')\n  }\n  const compiledProfile = compileCandidateProfile(input.profile)\n  const profileDiffIds = compiledProfile.profileDiffIds\n  const bundle: AgentCandidateBundleInput = {\n    schemaVersion: 1,\n    kind: 'agent-candidate-bundle',\n    digestAlgorithm: 'rfc8785-sha256',\n    profile: compiledProfile.profile,\n    code: compileCandidateCode(input.code),\n    execution: input.execution,\n    ...(input.knowledge ? { knowledge: input.knowledge } : {}),\n    memory: input.memory,\n    lineage: {\n      ...input.lineage,\n      ...(profileDiffIds.length > 0 ? { profileDiffIds } : {}),\n    },\n  }\n  return sealAgentCandidateBundle(bundle)\n}\n\nfunction compileCandidateProfile(source: AgentCandidateProfileSource): {\n  profile: AgentCandidateProfile\n  profileDiffIds: string[]\n} {\n  if (source.kind === 'candidate-profile') {\n    return {\n      profile: parseExactCandidateProfile(source.profile),\n      profileDiffIds: [],\n    }\n  }\n\n  if (source.kind === 'profile') {\n    return { profile: freezeGenericAgentCandidateProfile(source.profile), profileDiffIds: [] }\n  }\n\n  if (source.kind !== 'profile-diffs') {\n    throw new Error(\n      `unsupported candidate profile source: ${String((source as { kind?: unknown }).kind)}`,\n    )\n  }\n  if (source.diffs.length === 0) {\n    throw new Error('profile-diffs source requires at least one AgentProfileDiff')\n  }\n  let profile = parseExactAgentProfile(source.base, 'base profile')\n  const profileDiffIds: string[] = []\n  for (const [index, inputDiff] of source.diffs.entries()) {\n    const diff = parseExactAgentProfileDiff(inputDiff, `profile diff ${index}`)\n    profile = applyExactAgentProfileDiff(profile, diff, `profile diff ${index}`)\n    profileDiffIds.push(canonicalCandidateDigest(diff))\n  }\n  return { profile: freezeGenericAgentCandidateProfile(profile), profileDiffIds }\n}\n\nfunction compileCandidateCode(source: AgentCandidateCodeSource): AgentCandidateBundleInput['code'] {\n  if (source.kind === 'disabled' || source.kind === 'no-op') return source\n  if (source.kind !== 'code-surface') {\n    throw new Error(\n      `unsupported candidate code source: ${String((source as { kind?: unknown }).kind)}`,\n    )\n  }\n\n  const verified = verifyCodeSurface(source.surface, source.worktreeDir)\n  const patch = embeddedCandidateArtifact(verified.patchBytes)\n  if (\n    patch.sha256 !== source.surface.patch.sha256 ||\n    patch.byteLength !== source.surface.patch.byteLength\n  ) {\n    throw new Error('verified CodeSurface patch bytes do not match its content identity')\n  }\n  return {\n    kind: 'git-patch',\n    repository: source.repository,\n    baseCommit: source.surface.baseCommit,\n    baseTree: source.surface.baseTree,\n    candidateTree: source.surface.candidateTree,\n    patch: { format: 'git-diff-binary', artifact: patch },\n  }\n}\n","import { randomUUID } from 'node:crypto'\nimport { linkSync } from 'node:fs'\nimport { mkdir, open, unlink } from 'node:fs/promises'\nimport { join } from 'node:path'\nimport type { Sha256Digest } from '@tangle-network/agent-interface'\n\nimport {\n  type AgentCandidateExecutionAttemptRecord,\n  type AgentCandidateExecutionAttemptRef,\n  type AgentCandidateExecutionClaim,\n  type AgentCandidateExecutionClaimResult,\n  type AgentCandidateExecutionClaimStore,\n  type AgentCandidateExecutionFinishResult,\n  type AgentCandidateExecutionLease,\n  type AgentCandidateExecutionPhase,\n  type AgentCandidateExecutionPhaseResult,\n  type AgentCandidateExecutionRecoveryEvidence,\n  type AgentCandidateExecutionStageResult,\n  type AgentCandidateExecutionTerminalRecord,\n  type AgentCandidateExecutionTerminalResult,\n  type AgentCandidateRetryRejection,\n  candidateClaimFileInternals,\n} from './claim'\nimport {\n  CLAIM_FORMAT_VERSION,\n  PENDING_FORMAT_VERSION,\n  PHASE_FORMAT_VERSION,\n  TERMINAL_FORMAT_VERSION,\n} from './claim-file-formats'\nimport {\n  assertRecoveryMatchesStaged,\n  assertTerminalAllowedInPhase,\n  assertTerminalMatchesClaim,\n  assertTerminalMatchesStaged,\n  recoveredTerminalRecord,\n  rejectedFinish,\n  rejectedStage,\n  requireStagedTerminal,\n  sealTerminalDigest,\n  terminalRecord,\n} from './claim-terminal'\nimport { canonicalCandidateBytes } from './digest'\n\nconst {\n  assertExpiredLease,\n  assertLease,\n  assertSameSlot,\n  assertUnexpiredLease,\n  attemptRecord,\n  claimSlot,\n  leaseDigest,\n  newLease,\n  readClaim,\n  readClaimIfPresent,\n  readTerminal,\n  readTerminalIfPresent,\n  readTransitionIfPresent,\n  rejectedExistingClaim,\n  rejectedRetry,\n  retryRejection,\n  sealAttemptRef,\n  sealClaim,\n  sealLease,\n} = candidateClaimFileInternals\n\nexport interface FileAgentCandidateExecutionClaimStoreOptions {\n  /** Evaluator-owned directory shared by every process allowed to execute candidates. */\n  directory: string\n  /** Testable evaluator clock; defaults to `Date.now`. */\n  now?: () => number\n}\n\n/** Cross-process lifecycle implemented as fsynced, create-if-absent records. */\nexport class FileAgentCandidateExecutionClaimStore implements AgentCandidateExecutionClaimStore {\n  private readonly directory: string\n  private readonly now: () => number\n\n  constructor(options: FileAgentCandidateExecutionClaimStoreOptions) {\n    if (options.directory.length === 0) {\n      throw new Error('candidate execution claim directory must not be empty')\n    }\n    this.directory = options.directory\n    this.now = options.now ?? Date.now\n  }\n\n  async tryClaim(\n    requested: AgentCandidateExecutionClaim,\n  ): Promise<AgentCandidateExecutionClaimResult> {\n    const claim = sealClaim(requested)\n    await mkdir(this.directory, { recursive: true })\n    const claimPath = this.claimPath(claim)\n    const existing = await readClaimIfPresent(claimPath)\n    if (existing) {\n      assertSameSlot(existing.claim, claim, claimPath)\n      return rejectedExistingClaim(existing.claim, claim)\n    }\n    assertUnexpiredLease(claim.leaseExpiresAtMs, this.now())\n    const retryFailure = await this.retryFailure(claim)\n    if (retryFailure) return rejectedRetry(claim, retryFailure)\n\n    const lease = newLease(claim)\n    const acquired = await writeRecordIfAbsent(this.directory, claimPath, {\n      version: CLAIM_FORMAT_VERSION,\n      ...claim,\n      phase: 'claimed',\n      leaseDigest: leaseDigest(lease),\n    })\n    if (acquired) return Object.freeze({ acquired: true, claim, lease })\n\n    const winner = await readClaim(claimPath)\n    assertSameSlot(winner.claim, claim, claimPath)\n    return rejectedExistingClaim(winner.claim, claim)\n  }\n\n  async getAttempt(\n    requestedAttempt: AgentCandidateExecutionAttemptRef,\n  ): Promise<AgentCandidateExecutionAttemptRecord | undefined> {\n    return await this.storedAttempt(sealAttemptRef(requestedAttempt))\n  }\n\n  async markCandidateMayRun(\n    requestedLease: AgentCandidateExecutionLease,\n  ): Promise<AgentCandidateExecutionPhaseResult> {\n    const lease = sealLease(requestedLease)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const state = await this.transitionState(stored.claim)\n    if (state.phase === 'candidate-may-run') {\n      return Object.freeze({ marked: false, phase: 'candidate-may-run' })\n    }\n    if (state.staged) {\n      throw new Error('candidate execution terminal was staged before candidate-may-run phase')\n    }\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const marked = await writeRecordIfAbsent(\n      this.directory,\n      this.transitionPath(stored.claim, 1),\n      {\n        version: PHASE_FORMAT_VERSION,\n        kind: 'candidate-execution-phase',\n        executionId: stored.claim.executionId,\n        attempt: stored.claim.attempt,\n        executionPlanDigest: stored.claim.executionPlanDigest,\n        phase: 'candidate-may-run',\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (marked) return Object.freeze({ marked: true, phase: 'candidate-may-run' })\n    const winner = await this.transitionState(stored.claim)\n    if (winner.phase === 'candidate-may-run') {\n      return Object.freeze({ marked: false, phase: 'candidate-may-run' })\n    }\n    throw new Error('candidate execution terminal was staged before candidate-may-run phase')\n  }\n\n  async stageTerminal(\n    requestedLease: AgentCandidateExecutionLease,\n    result: AgentCandidateExecutionTerminalResult,\n  ): Promise<AgentCandidateExecutionStageResult> {\n    const lease = sealLease(requestedLease)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const terminal = terminalRecord(stored.claim, result)\n    const state = await this.transitionState(stored.claim)\n    if (state.staged) return rejectedStage(state.staged, terminal)\n    assertTerminalAllowedInPhase(state.phase, terminal)\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const transition = state.phase === 'claimed' ? 1 : 2\n    const staged = await writeRecordIfAbsent(\n      this.directory,\n      this.transitionPath(stored.claim, transition),\n      {\n        version: PENDING_FORMAT_VERSION,\n        kind: 'candidate-execution-pending-terminal',\n        terminal,\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (staged) return Object.freeze({ staged: true, terminal })\n    const winner = await this.transitionState(stored.claim)\n    if (!winner.staged) {\n      throw new Error('candidate execution phase transition won while staging terminal')\n    }\n    return rejectedStage(winner.staged, terminal)\n  }\n\n  async finish(\n    requestedLease: AgentCandidateExecutionLease,\n    requestedTerminalDigest: Sha256Digest,\n  ): Promise<AgentCandidateExecutionFinishResult> {\n    const lease = sealLease(requestedLease)\n    const terminalDigest = sealTerminalDigest(requestedTerminalDigest)\n    const claimPath = this.claimPath(lease)\n    const stored = await readClaim(claimPath)\n    assertSameSlot(stored.claim, lease, claimPath)\n    assertLease(stored.leaseDigest, stored.claim.leaseExpiresAtMs, lease)\n    const state = await this.transitionState(stored.claim)\n    const staged = requireStagedTerminal(state.staged, terminalDigest)\n    const terminalPath = this.terminalPath(lease)\n    const existing = await readTerminalIfPresent(terminalPath)\n    if (existing) {\n      assertTerminalMatchesClaim(existing, stored.claim, terminalPath)\n      assertTerminalMatchesStaged(existing, staged, terminalPath)\n      return rejectedFinish(existing, terminalDigest)\n    }\n    assertUnexpiredLease(stored.claim.leaseExpiresAtMs, this.now())\n    const finished = await writeRecordIfAbsent(\n      this.directory,\n      terminalPath,\n      {\n        version: TERMINAL_FORMAT_VERSION,\n        terminal: staged,\n      },\n      this.ownerPublication(stored.claim),\n    )\n    if (finished) return Object.freeze({ finished: true, terminal: staged })\n    const winner = await readTerminal(terminalPath)\n    assertSameSlot(winner, lease, terminalPath)\n    assertTerminalMatchesClaim(winner, stored.claim, terminalPath)\n    assertTerminalMatchesStaged(winner, staged, terminalPath)\n    return rejectedFinish(winner, terminalDigest)\n  }\n\n  async recoverExpired(\n    requestedAttempt: AgentCandidateExecutionAttemptRef,\n    evidence: AgentCandidateExecutionRecoveryEvidence,\n  ): Promise<AgentCandidateExecutionFinishResult> {\n    const attempt = sealAttemptRef(requestedAttempt)\n    const record = await this.storedAttempt(attempt)\n    if (!record) throw new Error('candidate execution recovery does not name an acquired attempt')\n    const recovered = recoveredTerminalRecord(record.claim, record.phase, evidence)\n    if (record.staged) assertRecoveryMatchesStaged(record.staged, recovered)\n    const requestedDigest = record.staged?.terminalDigest ?? recovered.terminalDigest\n    if (record.terminal) return rejectedFinish(record.terminal, requestedDigest)\n    assertExpiredLease(record.claim.leaseExpiresAtMs, this.now())\n\n    let staged = record.staged\n    if (!staged) {\n      const transition = record.phase === 'claimed' ? 1 : 2\n      const didStage = await writeRecordIfAbsent(\n        this.directory,\n        this.transitionPath(record.claim, transition),\n        {\n          version: PENDING_FORMAT_VERSION,\n          kind: 'candidate-execution-pending-terminal',\n          terminal: recovered,\n        },\n      )\n      if (didStage) {\n        staged = recovered\n      } else {\n        const winner = await this.transitionState(record.claim)\n        if (!winner.staged) {\n          throw new Error(\n            'candidate execution recovery lost terminal staging to a phase transition',\n          )\n        }\n        assertRecoveryMatchesStaged(winner.staged, recovered)\n        staged = winner.staged\n      }\n    }\n\n    const terminalPath = this.terminalPath(attempt)\n    const didFinish = await writeRecordIfAbsent(this.directory, terminalPath, {\n      version: TERMINAL_FORMAT_VERSION,\n      terminal: staged,\n    })\n    if (didFinish) return Object.freeze({ finished: true, terminal: staged })\n    const winner = await readTerminal(terminalPath)\n    assertSameSlot(winner, attempt, terminalPath)\n    assertTerminalMatchesClaim(winner, record.claim, terminalPath)\n    assertTerminalMatchesStaged(winner, staged, terminalPath)\n    return rejectedFinish(winner, staged.terminalDigest)\n  }\n\n  private async storedAttempt(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n  ): Promise<AgentCandidateExecutionAttemptRecord | undefined> {\n    const claimPath = this.claimPath(claim)\n    const stored = await readClaimIfPresent(claimPath)\n    if (!stored) return undefined\n    assertSameSlot(stored.claim, claim, claimPath)\n    const state = await this.transitionState(stored.claim)\n    const terminalPath = this.terminalPath(claim)\n    const terminal = await readTerminalIfPresent(terminalPath)\n    if (terminal) {\n      assertTerminalMatchesClaim(terminal, stored.claim, terminalPath)\n      if (!state.staged) {\n        throw new Error(\n          `candidate execution terminal record at ${terminalPath} has no staged outbox`,\n        )\n      }\n      assertTerminalMatchesStaged(terminal, state.staged, terminalPath)\n    }\n    return attemptRecord(stored.claim, state.phase, state.staged, terminal)\n  }\n\n  private async transitionState(claim: AgentCandidateExecutionClaim): Promise<{\n    phase: AgentCandidateExecutionPhase\n    staged?: AgentCandidateExecutionTerminalRecord\n  }> {\n    const firstPath = this.transitionPath(claim, 1)\n    const first = await readTransitionIfPresent(firstPath, claim)\n    if (!first) return { phase: 'claimed' }\n    if (first.kind === 'pending') return { phase: 'claimed', staged: first.terminal }\n    const secondPath = this.transitionPath(claim, 2)\n    const second = await readTransitionIfPresent(secondPath, claim)\n    if (!second) return { phase: 'candidate-may-run' }\n    if (second.kind !== 'pending') {\n      throw new Error(`candidate execution transition at ${secondPath} repeats the phase marker`)\n    }\n    return { phase: 'candidate-may-run', staged: second.terminal }\n  }\n\n  private async retryFailure(\n    claim: AgentCandidateExecutionClaim,\n  ): Promise<AgentCandidateRetryRejection | undefined> {\n    if (claim.attempt === 1) return undefined\n    return retryRejection(\n      claim,\n      await this.storedAttempt({\n        executionId: claim.executionId,\n        attempt: claim.attempt - 1,\n      }),\n    )\n  }\n\n  private ownerPublication(claim: AgentCandidateExecutionClaim): {\n    authorizePublish: () => true\n  } {\n    return {\n      authorizePublish: () => {\n        assertUnexpiredLease(claim.leaseExpiresAtMs, this.now())\n        return true\n      },\n    }\n  }\n\n  private claimPath(claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>): string {\n    return join(this.directory, `${claimSlot(claim)}.claim.json`)\n  }\n\n  private terminalPath(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n  ): string {\n    return join(this.directory, `${claimSlot(claim)}.terminal.json`)\n  }\n\n  private transitionPath(\n    claim: Pick<AgentCandidateExecutionClaim, 'executionId' | 'attempt'>,\n    ordinal: 1 | 2,\n  ): string {\n    return join(this.directory, `${claimSlot(claim)}.transition-${ordinal}.json`)\n  }\n}\n\nasync function writeRecordIfAbsent(\n  directory: string,\n  destination: string,\n  record: object,\n  options: {\n    /** Synchronous authorization checked after temp fsync, immediately before atomic publication. */\n    authorizePublish?: () => true\n  } = {},\n): Promise<boolean> {\n  const temporaryPath = join(directory, `.candidate-execution-${process.pid}-${randomUUID()}.tmp`)\n  const handle = await open(temporaryPath, 'wx', 0o600)\n  try {\n    await handle.writeFile(\n      Buffer.concat([Buffer.from(canonicalCandidateBytes(record)), Buffer.from('\\n')]),\n    )\n    await handle.sync()\n  } finally {\n    await handle.close()\n  }\n\n  let written = false\n  try {\n    if (options.authorizePublish && options.authorizePublish() !== true) {\n      throw new Error('candidate execution record publication was not authorized')\n    }\n    // Authorization and the atomic filesystem call are one synchronous critical\n    // section so the event loop cannot advance an injected lease clock between them.\n    linkSync(temporaryPath, destination)\n    written = true\n    await syncDirectory(directory)\n  } catch (error) {\n    if (!isNodeError(error, 'EEXIST')) throw error\n  } finally {\n    await unlink(temporaryPath).catch((error: unknown) => {\n      if (!isNodeError(error, 'ENOENT')) throw error\n    })\n  }\n  return written\n}\n\nasync function syncDirectory(directory: string): Promise<void> {\n  const handle = await open(directory, 'r')\n  try {\n    await handle.sync()\n  } finally {\n    await handle.close()\n  }\n}\n\nfunction isNodeError(error: unknown, code: string): boolean {\n  return (\n    error !== null &&\n    typeof error === 'object' &&\n    'code' in error &&\n    (error as { code?: unknown }).code === code\n  )\n}\n","import { candidateCleanupDeadline, withinCandidateCleanupDeadline } from './cleanup'\nimport { sealAgentCandidateModelSettlement } from './model-settlement'\nimport {\n  assertPreparedCandidateIntegrity,\n  beginPreparedCandidateDisposal,\n  consumePreparedCandidateExecution,\n} from './prepared-state'\nimport type { PreparedAgentCandidateExecution } from './types'\n\nexport interface DisposePreparedAgentCandidateOptions {\n  cleanupTimeoutMs?: number\n}\n\n/** Revoke reservations held by a prepared candidate that will not be executed. */\nexport async function disposePreparedAgentCandidateExecution(\n  prepared: PreparedAgentCandidateExecution,\n  options: DisposePreparedAgentCandidateOptions = {},\n): Promise<{ disposed: true }> {\n  const initialState = assertPreparedCandidateIntegrity(prepared)\n  const cleanupTimeoutMs = options.cleanupTimeoutMs ?? initialState.cleanupTimeoutMs\n  if (cleanupTimeoutMs > initialState.cleanupTimeoutMs) {\n    throw new Error('disposal cleanup timeout exceeds the frozen preparation bound')\n  }\n  const cleanupDeadlineAtMs = candidateCleanupDeadline(cleanupTimeoutMs)\n  const state = beginPreparedCandidateDisposal(prepared)\n  const cleanup: Array<Promise<unknown>> = []\n\n  if (state.memory.mode === 'isolated') {\n    const reservation = state.memoryReservation\n    if (!reservation) throw new Error('isolated memory reservation is missing')\n    cleanup.push(\n      withinCandidateCleanupDeadline(\n        async () => {\n          const closed = await state.ports.memory.close({\n            executionId: state.executionId,\n            preparationId: reservation.preparationId,\n            accessDigest: reservation.accessDigest,\n            effectiveNamespace: reservation.effectiveNamespace,\n            reason: 'abandoned',\n          })\n          if (closed.closed !== true || Object.keys(closed).some((key) => key !== 'closed')) {\n            throw new Error('abandoned isolated memory access did not acknowledge closure')\n          }\n        },\n        cleanupDeadlineAtMs,\n        'isolated memory disposal',\n      ),\n    )\n  }\n\n  cleanup.push(\n    withinCandidateCleanupDeadline(\n      async () => {\n        const settlement = sealAgentCandidateModelSettlement(\n          await state.ports.models.settleGrant({\n            executionId: state.executionId,\n            preparationId: state.preparationId,\n            grantDigest: state.modelReservation.digest,\n            resolved: state.resolvedModel,\n            reason: 'abandoned',\n          }),\n          {\n            preparationId: state.preparationId,\n            grantDigest: state.modelReservation.digest,\n            model: state.resolvedModel.model,\n          },\n        )\n        if (settlement.usage.modelCalls !== 0) {\n          throw new Error('unexecuted model reservation unexpectedly contains calls')\n        }\n      },\n      cleanupDeadlineAtMs,\n      'model reservation disposal',\n    ),\n  )\n\n  const results = await Promise.allSettled(cleanup)\n  const failures = results\n    .filter((result): result is PromiseRejectedResult => result.status === 'rejected')\n    .map((result) => result.reason)\n  if (failures.length > 0) {\n    consumePreparedCandidateExecution(prepared, 'disposal-failed')\n    throw new AggregateError(failures, 'candidate preparation disposal failed')\n  }\n\n  consumePreparedCandidateExecution(prepared, 'disposed')\n  return Object.freeze({ disposed: true as const })\n}\n","import type {\n  AgentCandidateModelAccessNetwork,\n  AgentCandidateResolvedModel,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\n\nimport { canonicalCandidateDigest, immutableCandidateValue } from './digest'\nimport { assertExactObjectKeys } from './exact-object'\nimport { sealAgentCandidateModelSettlement, usdToNanos } from './model-settlement'\nimport type {\n  AgentCandidateModelLimits,\n  AgentCandidateModelPort,\n  AgentCandidateProtectedModelActivation,\n  AgentCandidateProtectedModelReservation,\n  AgentCandidateProtectedModelSettlement,\n} from './types'\n\nexport type AgentCandidateModelGrantReserveInput = Parameters<\n  AgentCandidateModelPort['reserveGrant']\n>[0]\nexport type AgentCandidateModelGrantActivateInput = Parameters<\n  AgentCandidateModelPort['activateGrant']\n>[0]\nexport type AgentCandidateModelGrantSettleInput = Parameters<\n  AgentCandidateModelPort['settleGrant']\n>[0]\n\n/** Secret-free response from the service's reservation endpoint. */\nexport type AgentCandidateModelGrantReservation = AgentCandidateProtectedModelReservation\n\n/**\n * Narrow transport contract for a service that owns scoped model credentials\n * and the authoritative per-call usage ledger.\n *\n * An HTTP client can bind these methods to control-plane endpoints. Keeping\n * transport out of the runtime prevents parent credentials, endpoint paths,\n * and retry policy from becoming part of the portable candidate contract.\n */\nexport interface AgentCandidateModelGrantClient {\n  reserve(input: AgentCandidateModelGrantReserveInput): Promise<AgentCandidateModelGrantReservation>\n  activate(\n    input: AgentCandidateModelGrantActivateInput,\n  ): Promise<AgentCandidateProtectedModelActivation>\n  settle(\n    input: AgentCandidateModelGrantSettleInput,\n  ): Promise<AgentCandidateProtectedModelSettlement>\n}\n\nexport interface CreateProtectedAgentCandidateModelPortOptions {\n  client: AgentCandidateModelGrantClient\n  /** Catalog/snapshot resolution stays separate from credential issuance. */\n  resolveModel: AgentCandidateModelPort['resolve']\n  /** The only public DNS name candidate processes may reach for inference. */\n  gatewayDomain: string\n  /** Exact environment names the activation endpoint must return, no more or fewer. */\n  activationEnvNames: readonly string[]\n}\n\ninterface RememberedReservation {\n  requestDigest: Sha256Digest\n  responseDigest: Sha256Digest\n  executionId: string\n  preparationId: string\n  grantDigest: Sha256Digest\n  expiresAtMs: number\n  resolved: AgentCandidateResolvedModel\n  limits: AgentCandidateModelLimits\n  maxCostUsdNanos: number\n  activation: 'reserved' | 'activating' | 'activated'\n  settlementDigest?: Sha256Digest\n  settlementReason?: AgentCandidateModelGrantSettleInput['reason']\n}\n\ninterface RememberedSettlement {\n  settlementDigest: Sha256Digest\n  settlementReason: AgentCandidateModelGrantSettleInput['reason']\n  expiresAtMs: number\n}\n\nconst MAX_RECENT_SETTLEMENTS = 4_096\nconst RECOVERED_SETTLEMENT_RETENTION_MS = 15 * 60 * 1_000\n\n/**\n * Bind a protected model-grant service to the immutable candidate runtime.\n *\n * The service remains the authority for expiry, admission, revocation, and\n * metering. This adapter independently checks every response before allowing\n * it to cross into candidate execution or durable receipt finalization.\n */\nexport function createProtectedAgentCandidateModelPort(\n  options: CreateProtectedAgentCandidateModelPortOptions,\n): AgentCandidateModelPort {\n  const gatewayDomain = assertGatewayDomain(options.gatewayDomain)\n  const activationEnvNames = exactEnvironmentNames(options.activationEnvNames)\n  const reservations = new Map<string, RememberedReservation>()\n  const recentSettlements = new Map<string, RememberedSettlement>()\n\n  return {\n    resolve: async (input) => {\n      const request = immutableCandidateValue(input)\n      const resolved = validateResolvedModel(await options.resolveModel(request), request)\n      return immutableCandidateValue(resolved)\n    },\n\n    reserveGrant: async (input) => {\n      pruneExpiredState(reservations, recentSettlements, Date.now())\n      const request = immutableCandidateValue(input)\n      validateReserveInput(request)\n      const requestDigest = canonicalCandidateDigest(request)\n      const key = reservationKey(request.executionId, request.preparationId)\n      if (recentSettlements.has(key)) {\n        throw new Error('protected model reservation is already settled')\n      }\n      const previous = reservations.get(key)\n      if (previous && previous.requestDigest !== requestDigest) {\n        throw new Error('protected model reservation retry changed immutable input')\n      }\n\n      const reservation = validateReservation(\n        await options.client.reserve(request),\n        request,\n        gatewayDomain,\n      )\n      const responseDigest = canonicalCandidateDigest(reservation)\n      if (recentSettlements.has(key)) {\n        throw new Error('protected model reservation completed after the grant was settled')\n      }\n      const recorded = previous ?? reservations.get(key)\n      if (recorded && recorded.requestDigest !== requestDigest) {\n        throw new Error('protected model reservation retry changed immutable input')\n      }\n      if (recorded && recorded.responseDigest !== responseDigest) {\n        throw new Error('protected model reservation retry returned different evidence')\n      }\n      if (!recorded) {\n        reservations.set(key, {\n          requestDigest,\n          responseDigest,\n          executionId: request.executionId,\n          preparationId: request.preparationId,\n          grantDigest: reservation.digest,\n          expiresAtMs: request.expiresAtMs,\n          resolved: immutableCandidateValue(request.resolved),\n          limits: immutableCandidateValue(request.limits),\n          maxCostUsdNanos: usdToNanos(request.limits.maxCostUsd, 'reserved maxCostUsd'),\n          activation: 'reserved',\n        })\n      }\n      return reservation\n    },\n\n    activateGrant: async (input) => {\n      pruneExpiredState(reservations, recentSettlements, Date.now())\n      const request = immutableCandidateValue(input)\n      const key = reservationKey(request.executionId, request.preparationId)\n      if (recentSettlements.has(key)) throw new Error('protected model grant is already settled')\n      const state = reservations.get(key)\n      if (!state) throw new Error('protected model grant was not reserved by this port')\n      assertGrantIdentity(state, request)\n      if (state.settlementDigest) throw new Error('protected model grant is already settled')\n      if (state.activation !== 'reserved') {\n        throw new Error('protected model grant activation is single-use')\n      }\n      if (!Number.isSafeInteger(request.deadlineAtMs) || request.deadlineAtMs <= 0) {\n        throw new Error('protected model activation deadline must be a positive safe integer')\n      }\n      if (request.deadlineAtMs <= Date.now()) {\n        throw new Error('protected model activation deadline must be in the future')\n      }\n      if (request.deadlineAtMs > state.expiresAtMs) {\n        throw new Error('protected model activation deadline exceeds the reserved expiry')\n      }\n      state.activation = 'activating'\n      try {\n        const activation = validateActivation(\n          await options.client.activate(request),\n          state.limits.maxModelCalls === 0 ? [] : activationEnvNames,\n        )\n        if (recentSettlements.has(key) || reservations.get(key) !== state) {\n          throw new Error('protected model grant settled while activation was in flight')\n        }\n        state.activation = 'activated'\n        return activation\n      } catch (error) {\n        state.activation = 'reserved'\n        throw error\n      }\n    },\n\n    settleGrant: async (input) => {\n      const now = Date.now()\n      pruneExpiredState(reservations, recentSettlements, now)\n      const request = immutableCandidateValue(input)\n      const key = reservationKey(request.executionId, request.preparationId)\n      const state = reservations.get(key)\n      if (state) assertGrantIdentity(state, request)\n      const remembered = state ?? recentSettlements.get(key)\n      if (remembered?.settlementReason && remembered.settlementReason !== request.reason) {\n        throw new Error('protected model settlement retry changed the termination reason')\n      }\n\n      const sealed = sealAgentCandidateModelSettlement(await options.client.settle(request), {\n        preparationId: request.preparationId,\n        grantDigest: request.grantDigest,\n        model: request.resolved.model,\n      })\n      if (state) assertWithinReservedLimits(sealed.fixedUsage, state)\n\n      const settlementDigest = canonicalCandidateDigest(sealed.value)\n      if (remembered?.settlementDigest && remembered.settlementDigest !== settlementDigest) {\n        throw new Error('protected model settlement retry returned a different final ledger')\n      }\n      if (remembered?.settlementReason && remembered.settlementReason !== request.reason) {\n        throw new Error('protected model settlement retry changed the termination reason')\n      }\n      const expiresAtMs = state?.expiresAtMs ?? now + RECOVERED_SETTLEMENT_RETENTION_MS\n      if (state) {\n        state.settlementDigest = settlementDigest\n        state.settlementReason = request.reason\n      }\n      reservations.delete(key)\n      rememberSettlement(recentSettlements, key, {\n        settlementDigest,\n        settlementReason: request.reason,\n        expiresAtMs,\n      })\n      return sealed.value\n    },\n  }\n}\n\nfunction validateReserveInput(input: AgentCandidateModelGrantReserveInput): void {\n  if (!Number.isSafeInteger(input.expiresAtMs) || input.expiresAtMs <= 0) {\n    throw new Error('protected model reservation expiry must be a positive safe integer')\n  }\n  if (input.expiresAtMs <= Date.now()) {\n    throw new Error('protected model reservation expiry must be in the future')\n  }\n  for (const [name, value] of [\n    ['maxModelCalls', input.limits.maxModelCalls],\n    ['maxInputTokens', input.limits.maxInputTokens],\n    ['maxOutputTokens', input.limits.maxOutputTokens],\n  ] as const) {\n    if (!Number.isSafeInteger(value) || value < 0) {\n      throw new Error(`protected model reservation ${name} must be a nonnegative safe integer`)\n    }\n  }\n  usdToNanos(input.limits.maxCostUsd, 'reserved maxCostUsd')\n}\n\nfunction validateReservation(\n  value: unknown,\n  expected: AgentCandidateModelGrantReserveInput,\n  gatewayDomain: string,\n): AgentCandidateModelGrantReservation {\n  const source = exactRecord(\n    value,\n    ['preparationId', 'digest', 'expiresAtMs', 'enforcedLimits', 'network'],\n    'protected model reservation response',\n  )\n  if (source.preparationId !== expected.preparationId) {\n    throw new Error('protected model reservation response changed preparation identity')\n  }\n  if (!isSha256Digest(source.digest)) {\n    throw new Error('protected model reservation response has an invalid digest')\n  }\n  if (source.expiresAtMs !== expected.expiresAtMs) {\n    throw new Error('protected model reservation response changed expiry')\n  }\n  exactRecord(\n    source.enforcedLimits,\n    ['maxModelCalls', 'maxInputTokens', 'maxOutputTokens', 'maxCostUsd'],\n    'protected model reservation enforced limits',\n  )\n  if (\n    canonicalCandidateDigest(source.enforcedLimits) !== canonicalCandidateDigest(expected.limits)\n  ) {\n    throw new Error('protected model reservation response changed enforced limits')\n  }\n\n  const network = validateReservationNetwork(\n    source.network,\n    expected.limits.maxModelCalls,\n    gatewayDomain,\n  )\n  return immutableCandidateValue({\n    preparationId: source.preparationId,\n    digest: source.digest,\n    expiresAtMs: source.expiresAtMs,\n    enforcedLimits: source.enforcedLimits,\n    network,\n  }) as AgentCandidateModelGrantReservation\n}\n\nfunction validateReservationNetwork(\n  value: unknown,\n  maxModelCalls: number,\n  gatewayDomain: string,\n): AgentCandidateModelAccessNetwork {\n  if (maxModelCalls === 0) {\n    const source = exactRecord(value, ['mode'], 'protected model reservation network')\n    if (source.mode !== 'disabled') {\n      throw new Error('zero-call protected model reservation must disable gateway access')\n    }\n    return { mode: 'disabled' }\n  }\n\n  const source = exactRecord(value, ['mode', 'domains'], 'protected model reservation network')\n  if (source.mode !== 'gateway-only') {\n    throw new Error('protected model reservation must allow only its model gateway')\n  }\n  if (\n    !Array.isArray(source.domains) ||\n    source.domains.length !== 1 ||\n    source.domains[0] !== gatewayDomain\n  ) {\n    throw new Error('protected model reservation returned an unexpected gateway domain')\n  }\n  return { mode: 'gateway-only', domains: [gatewayDomain] }\n}\n\nfunction validateActivation(\n  value: unknown,\n  expectedNames: readonly string[],\n): AgentCandidateProtectedModelActivation {\n  const source = exactRecord(value, ['env'], 'protected model activation response')\n  const env = record(source.env, 'protected model activation environment')\n  const actualNames = Object.keys(env).sort()\n  if (\n    actualNames.length !== expectedNames.length ||\n    actualNames.some((name, index) => name !== expectedNames[index])\n  ) {\n    throw new Error('protected model activation returned unexpected environment names')\n  }\n  const detached: Record<string, string> = Object.create(null) as Record<string, string>\n  for (const name of expectedNames) {\n    const value = env[name]\n    if (typeof value !== 'string' || value.length < 8 || value.length > 65_536) {\n      throw new Error(`protected model activation ${name} must be a non-empty protected value`)\n    }\n    detached[name] = value\n  }\n  return Object.freeze({ env: Object.freeze(detached) })\n}\n\nfunction validateResolvedModel(\n  value: unknown,\n  expected: Parameters<AgentCandidateModelPort['resolve']>[0],\n): AgentCandidateResolvedModel {\n  const source = exactRecord(\n    value,\n    ['requested', 'provider', 'model', 'snapshot', 'reasoningEffort'],\n    'resolved candidate model',\n  )\n  if (source.requested !== expected.requested) {\n    throw new Error('model resolver changed the evaluator-owned request')\n  }\n  if (source.reasoningEffort !== expected.reasoningEffort) {\n    throw new Error('model resolver changed the evaluator-owned reasoning effort')\n  }\n  for (const name of ['requested', 'provider', 'model', 'snapshot'] as const) {\n    if (typeof source[name] !== 'string' || source[name].length === 0) {\n      throw new Error(`resolved candidate model ${name} must be non-empty`)\n    }\n  }\n  return source as unknown as AgentCandidateResolvedModel\n}\n\nfunction assertGrantIdentity(\n  expected: RememberedReservation,\n  actual: AgentCandidateModelGrantActivateInput | AgentCandidateModelGrantSettleInput,\n): void {\n  if (\n    actual.executionId !== expected.executionId ||\n    actual.preparationId !== expected.preparationId ||\n    actual.grantDigest !== expected.grantDigest ||\n    canonicalCandidateDigest(actual.resolved) !== canonicalCandidateDigest(expected.resolved)\n  ) {\n    throw new Error('protected model grant input does not match its immutable reservation')\n  }\n}\n\nfunction assertWithinReservedLimits(\n  usage: {\n    modelCalls: number\n    inputTokens: number\n    outputTokens: number\n    costUsdNanos: number\n  },\n  reservation: RememberedReservation,\n): void {\n  for (const [name, actual, limit] of [\n    ['model calls', usage.modelCalls, reservation.limits.maxModelCalls],\n    ['input tokens', usage.inputTokens, reservation.limits.maxInputTokens],\n    ['output tokens', usage.outputTokens, reservation.limits.maxOutputTokens],\n    ['cost USD nanos', usage.costUsdNanos, reservation.maxCostUsdNanos],\n  ] as const) {\n    if (actual > limit) {\n      throw new Error(`protected model settlement ${name} ${actual} exceeds reserved ${limit}`)\n    }\n  }\n}\n\nfunction exactEnvironmentNames(values: readonly string[]): readonly string[] {\n  if (values.length === 0) {\n    throw new Error('protected model activation environment names must not be empty')\n  }\n  const names = [...values].sort()\n  if (new Set(names).size !== names.length) {\n    throw new Error('protected model activation environment names must be unique')\n  }\n  for (const name of names) {\n    if (\n      !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) ||\n      ['__proto__', 'constructor', 'prototype'].includes(name)\n    ) {\n      throw new Error(`protected model activation environment name is invalid: ${name}`)\n    }\n  }\n  return Object.freeze(names)\n}\n\nfunction assertGatewayDomain(value: string): string {\n  if (\n    value.length > 253 ||\n    value !== value.toLowerCase() ||\n    value.endsWith('.') ||\n    value.includes(':') ||\n    value === 'localhost' ||\n    value.endsWith('.localhost') ||\n    value === 'metadata.google' ||\n    value === 'metadata.google.internal'\n  ) {\n    throw new Error('protected model gateway must be an exact lowercase public DNS name')\n  }\n  const labels = value.split('.')\n  if (\n    labels.length < 2 ||\n    !labels.every(\n      (label) =>\n        label.length >= 1 && label.length <= 63 && /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(label),\n    ) ||\n    !/[a-z]/.test(labels.at(-1) ?? '')\n  ) {\n    throw new Error('protected model gateway must be an exact lowercase public DNS name')\n  }\n  return value\n}\n\nfunction reservationKey(executionId: string, preparationId: string): string {\n  return canonicalCandidateDigest({ executionId, preparationId })\n}\n\nfunction pruneExpiredState(\n  reservations: Map<string, RememberedReservation>,\n  settlements: Map<string, RememberedSettlement>,\n  now: number,\n): void {\n  for (const [key, value] of reservations) {\n    if (value.expiresAtMs <= now) reservations.delete(key)\n  }\n  for (const [key, value] of settlements) {\n    if (value.expiresAtMs <= now) settlements.delete(key)\n  }\n}\n\nfunction rememberSettlement(\n  settlements: Map<string, RememberedSettlement>,\n  key: string,\n  value: RememberedSettlement,\n): void {\n  settlements.delete(key)\n  settlements.set(key, value)\n  while (settlements.size > MAX_RECENT_SETTLEMENTS) {\n    const oldest = settlements.keys().next().value\n    if (oldest === undefined) return\n    settlements.delete(oldest)\n  }\n}\n\nfunction isSha256Digest(value: unknown): value is Sha256Digest {\n  return typeof value === 'string' && /^sha256:[a-f0-9]{64}$/.test(value)\n}\n\nfunction exactRecord(\n  value: unknown,\n  keys: readonly string[],\n  label: string,\n): Record<string, unknown> {\n  const source = record(value, label)\n  assertExactObjectKeys(source, keys, label)\n  return source\n}\n\nfunction record(value: unknown, label: string): Record<string, unknown> {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error(`${label} must be an object`)\n  }\n  const prototype = Object.getPrototypeOf(value)\n  if (prototype !== Object.prototype && prototype !== null) {\n    throw new Error(`${label} must be a plain object`)\n  }\n  return value as Record<string, unknown>\n}\n","import type { TraceStore } from '@tangle-network/agent-eval'\n\nimport type {\n  AgentCandidateExecutionAttemptRef,\n  AgentCandidateExecutionClaimStore,\n  AgentCandidateExecutionFinishResult,\n} from './claim'\nimport {\n  candidateCleanupDeadline,\n  candidateCleanupTimeout,\n  withinCandidateCleanupDeadline,\n} from './cleanup'\nimport { sealAgentCandidateExecutorFinalCapture } from './executor-capture'\nimport { sealAgentCandidateModelSettlement } from './model-settlement'\nimport { persistCandidateModelSettlementEvidence } from './outcome-evidence'\nimport { RecoveryAgentCandidateTraceStore } from './protected-trace-store'\nimport type {\n  AgentCandidateExecutionPorts,\n  AgentCandidateExecutorPort,\n  AgentCandidateOutputArtifactPort,\n} from './types'\n\nexport interface RecoverExpiredAgentCandidateOptions {\n  attempt: AgentCandidateExecutionAttemptRef\n  claimStore: AgentCandidateExecutionClaimStore\n  executor: AgentCandidateExecutorPort\n  traceStore: TraceStore\n  ports: Pick<AgentCandidateExecutionPorts, 'models' | 'memory'>\n  outputArtifacts: AgentCandidateOutputArtifactPort\n  cleanupTimeoutMs?: number\n  /** Evaluator clock; must be the same clock used by the claim store. */\n  now?: () => number\n}\n\n/** Close an expired crashed attempt from persisted non-secret handles, then record failure. */\nexport async function recoverExpiredAgentCandidateExecution(\n  options: RecoverExpiredAgentCandidateOptions,\n): Promise<AgentCandidateExecutionFinishResult> {\n  const record = await options.claimStore.getAttempt(options.attempt)\n  if (!record) throw new Error('candidate execution recovery attempt is missing')\n  if (record.terminal) {\n    return Object.freeze({ finished: false, terminal: record.terminal, exactReplay: true })\n  }\n  const cleanupTimeoutMs = candidateCleanupTimeout(\n    options.cleanupTimeoutMs ?? record.claim.cleanup.cleanupTimeoutMs,\n  )\n  if (cleanupTimeoutMs > record.claim.cleanup.cleanupTimeoutMs) {\n    throw new Error('recovery cleanup timeout exceeds the frozen preparation bound')\n  }\n\n  const now = options.now ?? Date.now\n  if (now() < record.claim.leaseExpiresAtMs) {\n    throw new Error('candidate execution lease has not expired')\n  }\n\n  const cleanupDeadlineAtMs = candidateCleanupDeadline(cleanupTimeoutMs)\n  const controller = new AbortController()\n  controller.abort(new Error('recovering an expired candidate execution'))\n  const recoveryTraceStore = new RecoveryAgentCandidateTraceStore(options.traceStore)\n  const processClosure = withinCandidateCleanupDeadline(\n    async () => {\n      const stopped = await options.executor.stopAndCapture(\n        {\n          executionId: record.claim.executionId,\n          executionPlanDigest: record.claim.executionPlanDigest,\n        },\n        {\n          traceStore: recoveryTraceStore,\n          reason: 'failed',\n          signal: controller.signal,\n          deadlineAtMs: record.claim.leaseExpiresAtMs,\n        },\n      )\n      sealAgentCandidateExecutorFinalCapture(stopped)\n      return { stopped: true as const }\n    },\n    cleanupDeadlineAtMs,\n    'expired candidate process termination',\n  )\n\n  const modelClosure = withinCandidateCleanupDeadline(\n    async () =>\n      sealAgentCandidateModelSettlement(\n        await options.ports.models.settleGrant({\n          executionId: record.claim.executionId,\n          preparationId: record.claim.cleanup.preparationId,\n          grantDigest: record.claim.cleanup.modelGrantDigest,\n          resolved: record.claim.cleanup.resolvedModel,\n          reason: 'failed',\n        }),\n        {\n          preparationId: record.claim.cleanup.preparationId,\n          grantDigest: record.claim.cleanup.modelGrantDigest,\n          model: record.claim.cleanup.resolvedModel.model,\n        },\n      ),\n    cleanupDeadlineAtMs,\n    'expired candidate model settlement',\n  )\n\n  const memoryClosure = record.claim.cleanup.memory\n    ? withinCandidateCleanupDeadline(\n        async () => {\n          const memory = record.claim.cleanup.memory\n          if (!memory) throw new Error('expired candidate memory handle is missing')\n          const closed = await options.ports.memory.close({\n            executionId: record.claim.executionId,\n            preparationId: record.claim.cleanup.preparationId,\n            accessDigest: memory.accessDigest,\n            effectiveNamespace: memory.effectiveNamespace,\n            reason: 'failed',\n          })\n          if (closed.closed !== true || Object.keys(closed).some((key) => key !== 'closed')) {\n            throw new Error('expired candidate memory did not acknowledge closure')\n          }\n          return { closed: true as const }\n        },\n        cleanupDeadlineAtMs,\n        'expired candidate memory closure',\n      )\n    : undefined\n\n  const operations = [processClosure, modelClosure, ...(memoryClosure ? [memoryClosure] : [])]\n  const outcomes = await Promise.allSettled(operations)\n  const failures = outcomes\n    .filter((outcome): outcome is PromiseRejectedResult => outcome.status === 'rejected')\n    .map((outcome) => outcome.reason)\n  if (failures.length > 0) {\n    throw new AggregateError(failures, 'expired candidate cleanup could not be proven')\n  }\n\n  const model = await modelClosure\n  const modelSettlement = await withinCandidateCleanupDeadline(\n    () =>\n      persistCandidateModelSettlementEvidence(\n        {\n          executionId: record.claim.executionId,\n          executionPlanDigest: record.claim.executionPlanDigest,\n          resolvedModel: record.claim.cleanup.resolvedModel,\n        },\n        model,\n        options.outputArtifacts,\n      ),\n    cleanupDeadlineAtMs,\n    'expired candidate model-settlement persistence',\n  )\n  const memory = record.claim.cleanup.memory\n  return await options.claimStore.recoverExpired(options.attempt, {\n    failureClass:\n      record.phase === 'claimed' && model.fixedUsage.modelCalls === 0\n        ? 'pre-model-infrastructure'\n        : 'unknown',\n    usage: model.fixedUsage,\n    modelSettlement: modelSettlement.artifact,\n    process: {\n      stopped: true,\n      executionPlanDigest: record.claim.executionPlanDigest,\n    },\n    model: {\n      closed: true,\n      preparationId: record.claim.cleanup.preparationId,\n      grantDigest: record.claim.cleanup.modelGrantDigest,\n    },\n    ...(memory\n      ? {\n          memory: {\n            closed: true,\n            preparationId: record.claim.cleanup.preparationId,\n            accessDigest: memory.accessDigest,\n            effectiveNamespace: memory.effectiveNamespace,\n          },\n        }\n      : {}),\n  })\n}\n","import { randomUUID } from 'node:crypto'\nimport { constants as fsConstants } from 'node:fs'\nimport {\n  lstat,\n  mkdir,\n  mkdtemp,\n  open,\n  readdir,\n  readFile,\n  realpath,\n  rename,\n  rm,\n  writeFile,\n} from 'node:fs/promises'\nimport { tmpdir } from 'node:os'\nimport { dirname, isAbsolute, join, resolve, sep, win32 } from 'node:path'\nimport { isAnyArrayBuffer, isSharedArrayBuffer } from 'node:util/types'\n\nimport type {\n  AgentCandidateCapturedArtifact,\n  AgentCandidateWorkspaceManifestMaterialV1,\n  AgentCandidateWorkspaceSnapshotEvidence,\n} from '@tangle-network/agent-interface'\nimport { type Entry, extract, type Pack, pack } from 'tar-stream'\n\nimport { captureMaterializedWorkspace, verifyBytes, verifyMaterializedWorkspace } from './artifacts'\nimport {\n  canonicalCandidateBytes,\n  canonicalCandidateDigest,\n  deepFreezeCandidate,\n  embeddedCandidateArtifact,\n  sha256Bytes,\n} from './digest'\nimport {\n  assertNoGitIndirection,\n  readCandidateGitTreeFiles,\n  runCandidateGit,\n} from './git-materialize'\nimport { persistCandidateOutputArtifact } from './output-artifacts'\nimport type {\n  AgentCandidateExecutorWorkspaceFile,\n  AgentCandidateOutputArtifactPort,\n  AgentCandidateWorkspacePort,\n} from './types'\n\nconst archiveKind = 'agent-candidate-workspace-archive' as const\nconst workspaceEntryPrefix = 'workspace/'\nconst repositoryMetadataEntry = 'metadata/repository.json'\nconst repositoryBundleEntry = 'metadata/repository.bundle'\nconst fixedTarTime = new Date(0)\n\nexport interface AgentCandidateWorkspaceArchiveLimits {\n  maxArchiveBytes: number\n  maxEmbeddedArtifactBytes: number\n  maxFiles: number\n  maxFileBytes: number\n  maxTotalFileBytes: number\n  maxPathBytes: number\n  maxRepositoryBundleBytes: number\n}\n\nconst defaultLimits: AgentCandidateWorkspaceArchiveLimits = Object.freeze({\n  maxArchiveBytes: 512 * 1024 * 1024,\n  maxEmbeddedArtifactBytes: 1024 * 1024,\n  maxFiles: 50_000,\n  maxFileBytes: 128 * 1024 * 1024,\n  maxTotalFileBytes: 256 * 1024 * 1024,\n  maxPathBytes: 4_096,\n  maxRepositoryBundleBytes: 128 * 1024 * 1024,\n})\n\ninterface WorkspaceArchiveRepositoryV1 {\n  headCommit: string\n  headTree: string\n  bundle: {\n    sha256: `sha256:${string}`\n    byteLength: number\n    bytes: Uint8Array\n  }\n}\n\ninterface WorkspaceArchiveRepositoryMetadataV1 {\n  schemaVersion: 1\n  kind: typeof archiveKind\n  headCommit: string\n  headTree: string\n  bundle: {\n    sha256: `sha256:${string}`\n    byteLength: number\n  }\n}\n\ninterface DecodedWorkspaceArchive {\n  files: Array<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>\n  repository?: WorkspaceArchiveRepositoryV1\n}\n\nexport interface CaptureAgentCandidateWorkspaceOptions {\n  /** Include Git HEAD so task preparation can prove its exact commit and tree. */\n  includeRepository?: boolean\n  limits?: Partial<AgentCandidateWorkspaceArchiveLimits>\n  /** Use the evaluator-owned artifact store when manifest or archive bytes should not be embedded. */\n  artifactPersistence?: {\n    executionId: string\n    outputArtifacts: AgentCandidateOutputArtifactPort\n    signal?: AbortSignal\n  }\n}\n\nexport interface CreateAgentCandidateWorkspacePortOptions {\n  limits?: Partial<AgentCandidateWorkspaceArchiveLimits>\n}\n\nexport interface CapturedAgentCandidateWorkspace {\n  readonly snapshot: AgentCandidateWorkspaceSnapshotEvidence\n  /** Caller-owned bytes accepted by createAgentCandidateWorkspacePort. */\n  readonly archive: Uint8Array\n}\n\n/** Capture one exact regular-file workspace for immutable candidate execution. */\nexport async function captureAgentCandidateWorkspace(\n  rootInput: string,\n  options: CaptureAgentCandidateWorkspaceOptions = {},\n): Promise<CapturedAgentCandidateWorkspace> {\n  const root = resolve(rootInput)\n  const limits = workspaceLimits(options.limits)\n  const captured = options.includeRepository\n    ? await captureRepository(root, limits)\n    : await captureMaterializedWorkspace(root, {\n        limits: {\n          maxFiles: limits.maxFiles,\n          maxFileBytes: limits.maxFileBytes,\n          maxTotalFileBytes: limits.maxTotalFileBytes,\n        },\n      })\n  assertWorkspaceFilesWithinLimits(captured.files, limits)\n  const repository = 'repository' in captured ? captured.repository : undefined\n  return captureWorkspaceFiles(captured.files, repository, limits, options.artifactPersistence)\n}\n\n/** Capture detached files returned by a remote executor into the standard archive. */\nexport async function captureAgentCandidateWorkspaceFiles(\n  input: readonly AgentCandidateExecutorWorkspaceFile[],\n  options: Omit<CaptureAgentCandidateWorkspaceOptions, 'includeRepository'> = {},\n): Promise<CapturedAgentCandidateWorkspace> {\n  const limits = workspaceLimits(options.limits)\n  return captureWorkspaceFiles(\n    normalizeWorkspaceFiles(input, limits),\n    undefined,\n    limits,\n    options.artifactPersistence,\n  )\n}\n\nasync function captureWorkspaceFiles(\n  files: readonly AgentCandidateExecutorWorkspaceFile[],\n  repository: WorkspaceArchiveRepositoryV1 | undefined,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n  artifactPersistence: CaptureAgentCandidateWorkspaceOptions['artifactPersistence'],\n): Promise<CapturedAgentCandidateWorkspace> {\n  const material = workspaceManifest(files)\n  const manifest = canonicalCandidateBytes(material)\n  const archive = await encodeWorkspaceArchive(files, repository, limits.maxArchiveBytes)\n  if (\n    !artifactPersistence &&\n    (manifest.byteLength > limits.maxEmbeddedArtifactBytes ||\n      archive.byteLength > limits.maxEmbeddedArtifactBytes)\n  ) {\n    throw new Error(\n      'candidate workspace artifacts exceed maxEmbeddedArtifactBytes; artifactPersistence is required',\n    )\n  }\n  const manifestArtifact = await captureWorkspaceArtifact('manifest', manifest, artifactPersistence)\n  const archiveArtifact = await captureWorkspaceArtifact('archive', archive, artifactPersistence)\n  const snapshot = deepFreezeCandidate({\n    schemaVersion: 1,\n    kind: 'agent-candidate-workspace-snapshot',\n    digest: canonicalCandidateDigest(material),\n    material,\n    manifest: manifestArtifact,\n    archive: archiveArtifact,\n  } satisfies AgentCandidateWorkspaceSnapshotEvidence)\n  return Object.freeze({ snapshot, archive })\n}\n\nasync function captureWorkspaceArtifact(\n  kind: 'manifest' | 'archive',\n  bytes: Uint8Array,\n  persistence: CaptureAgentCandidateWorkspaceOptions['artifactPersistence'],\n): Promise<AgentCandidateCapturedArtifact> {\n  if (!persistence) return embeddedCandidateArtifact(bytes)\n  if (!persistence.executionId.trim()) {\n    throw new Error('candidate workspace artifact persistence requires an executionId')\n  }\n  return persistCandidateOutputArtifact(persistence.outputArtifacts, {\n    executionId: persistence.executionId,\n    purpose: kind === 'manifest' ? 'candidate-workspace-manifest' : 'candidate-workspace-archive',\n    bytes,\n    ...(persistence.signal ? { signal: persistence.signal } : {}),\n  })\n}\n\n/** Create the standard bounded materializer for candidate execution ports. */\nexport function createAgentCandidateWorkspacePort(\n  options: CreateAgentCandidateWorkspacePortOptions = {},\n): AgentCandidateWorkspacePort {\n  const limits = workspaceLimits(options.limits)\n  const port: AgentCandidateWorkspacePort = {\n    materialize: async ({ role, snapshot, archive, destination }) => {\n      await materializeAgentCandidateWorkspace({\n        role,\n        snapshot,\n        archive,\n        destination,\n        limits,\n      })\n    },\n  }\n  return Object.freeze(port)\n}\n\nasync function materializeAgentCandidateWorkspace(input: {\n  role: 'task' | 'candidate' | 'memory'\n  snapshot: AgentCandidateWorkspaceSnapshotEvidence\n  archive: Uint8Array\n  destination: string\n  limits: AgentCandidateWorkspaceArchiveLimits\n}): Promise<void> {\n  verifyBytes(\n    input.archive,\n    input.snapshot.archive.sha256,\n    input.snapshot.archive.byteLength,\n    'candidate workspace archive',\n  )\n  const decoded = await parseWorkspaceArchive(input.archive, input.limits)\n  if (decoded.repository && input.role !== 'task') {\n    throw new Error('only task workspaces may carry a Git repository')\n  }\n  assertArchiveMatchesSnapshot(decoded.files, input.snapshot)\n  const destination = resolve(input.destination)\n  await prepareEmptyDestination(destination)\n  const staging = await mkdtemp(`${destination}.materializing-`)\n  try {\n    await writeWorkspaceFiles(staging, decoded.files)\n    if (decoded.repository) {\n      await materializeRepository(decoded.repository, staging)\n    }\n    await verifyMaterializedWorkspace(staging, input.snapshot.material, {\n      ignoredProtectedRootEntries: decoded.repository ? ['.git'] : [],\n    })\n    await rename(staging, destination)\n  } catch (error) {\n    await rm(staging, { recursive: true, force: true })\n    await rm(destination, { recursive: true, force: true })\n    throw error\n  }\n}\n\nasync function captureRepository(\n  root: string,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): Promise<{\n  files: Array<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>\n  repository: WorkspaceArchiveRepositoryV1\n}> {\n  const stats = await lstat(root)\n  if (!stats.isDirectory() || stats.isSymbolicLink() || (await realpath(root)) !== root) {\n    throw new Error('candidate repository root must be a real directory')\n  }\n  const topLevel = (await runCandidateGit(root, ['rev-parse', '--show-toplevel'])).stdout\n    .toString('utf8')\n    .trim()\n  if (resolve(topLevel) !== root) {\n    throw new Error('candidate repository capture must start at the Git worktree root')\n  }\n  const gitDir = resolve(\n    (await runCandidateGit(root, ['rev-parse', '--absolute-git-dir'])).stdout\n      .toString('utf8')\n      .trim(),\n  )\n  if ((await realpath(gitDir)) !== gitDir || gitDir.includes(':')) {\n    throw new Error('candidate repository Git object store has an unsupported path')\n  }\n  await assertNoGitIndirection(root, gitDir, 'candidate repository')\n  const headCommit = (await runCandidateGit(root, ['rev-parse', 'HEAD'])).stdout\n    .toString('utf8')\n    .trim()\n  const headTree = (await runCandidateGit(root, ['rev-parse', 'HEAD^{tree}'])).stdout\n    .toString('utf8')\n    .trim()\n  assertGitObjectId(headCommit, 'HEAD')\n  assertGitObjectId(headTree, 'HEAD tree')\n  if (headCommit.length !== headTree.length) {\n    throw new Error('candidate repository HEAD and tree use different object formats')\n  }\n  const files = await readCandidateGitTreeFiles(root, headTree, {}, limits)\n  assertWorkspaceFilesWithinLimits(files, limits)\n  const reachableBytesText = (\n    await runCandidateGit(root, ['rev-list', '--disk-usage', '--objects', 'HEAD'])\n  ).stdout\n    .toString('utf8')\n    .trim()\n  const reachableBytes = Number(reachableBytesText)\n  if (!Number.isSafeInteger(reachableBytes) || reachableBytes < 0) {\n    throw new Error('candidate repository reachable size is invalid')\n  }\n  if (reachableBytes > limits.maxRepositoryBundleBytes) {\n    throw new Error('candidate repository exceeds maxRepositoryBundleBytes')\n  }\n  const temporary = await mkdtemp(join(tmpdir(), 'agent-candidate-workspace-bundle-'))\n  const bundlePath = join(temporary, `${randomUUID()}.bundle`)\n  try {\n    await runCandidateGit(root, ['bundle', 'create', bundlePath, 'HEAD'])\n    const bundle = Uint8Array.from(await readFile(bundlePath))\n    if (bundle.byteLength > limits.maxRepositoryBundleBytes) {\n      throw new Error('candidate repository bundle exceeds maxRepositoryBundleBytes')\n    }\n    return {\n      files,\n      repository: {\n        headCommit,\n        headTree,\n        bundle: {\n          sha256: sha256Bytes(bundle),\n          byteLength: bundle.byteLength,\n          bytes: bundle,\n        },\n      },\n    }\n  } finally {\n    await rm(temporary, { recursive: true, force: true })\n  }\n}\n\nasync function encodeWorkspaceArchive(\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n  repository: WorkspaceArchiveRepositoryV1 | undefined,\n  maxArchiveBytes: number,\n): Promise<Uint8Array> {\n  const archive = pack()\n  const output = collectStream(archive, maxArchiveBytes, 'candidate workspace archive')\n  try {\n    await writeWorkspaceArchiveEntries(archive, files, repository)\n    archive.finalize()\n    return await output\n  } catch (error) {\n    archive.destroy(error instanceof Error ? error : new Error(String(error)))\n    await output.catch(() => undefined)\n    throw error\n  }\n}\n\nasync function verifyCanonicalWorkspaceArchive(\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n  repository: WorkspaceArchiveRepositoryV1 | undefined,\n  expected: Uint8Array,\n  maxArchiveBytes: number,\n): Promise<void> {\n  const archive = pack()\n  const comparison = streamEqualsBytes(\n    archive,\n    expected,\n    maxArchiveBytes,\n    'candidate workspace archive',\n  )\n  try {\n    await writeWorkspaceArchiveEntries(archive, files, repository)\n    archive.finalize()\n    if (!(await comparison)) throw new Error('candidate workspace tar is not canonical')\n  } catch (error) {\n    archive.destroy(error instanceof Error ? error : new Error(String(error)))\n    await comparison.catch(() => undefined)\n    throw error\n  }\n}\n\nasync function writeWorkspaceArchiveEntries(\n  archive: Pack,\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n  repository: WorkspaceArchiveRepositoryV1 | undefined,\n): Promise<void> {\n  for (const file of files) {\n    await writeTarEntry(archive, `${workspaceEntryPrefix}${file.path}`, file.mode, file.bytes)\n  }\n  if (!repository) return\n  const metadata = canonicalCandidateBytes({\n    schemaVersion: 1,\n    kind: archiveKind,\n    headCommit: repository.headCommit,\n    headTree: repository.headTree,\n    bundle: {\n      sha256: repository.bundle.sha256,\n      byteLength: repository.bundle.byteLength,\n    },\n  } satisfies WorkspaceArchiveRepositoryMetadataV1)\n  await writeTarEntry(archive, repositoryMetadataEntry, 0o600, metadata)\n  await writeTarEntry(archive, repositoryBundleEntry, 0o600, repository.bundle.bytes)\n}\n\nasync function parseWorkspaceArchive(\n  bytes: Uint8Array,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): Promise<DecodedWorkspaceArchive> {\n  if (bytes.byteLength > limits.maxArchiveBytes) {\n    throw new Error('candidate workspace archive exceeds maxArchiveBytes')\n  }\n  const parser = extract()\n  const files: DecodedWorkspaceArchive['files'] = []\n  const observedEntryNames = new Set<string>()\n  const observedPaths = new Set<string>()\n  let totalBytes = 0\n  let retainedEntryBytes = 0\n  let previousPath: string | undefined\n  let repositoryMetadata: WorkspaceArchiveRepositoryMetadataV1 | undefined\n  let repositoryBundle: Uint8Array | undefined\n  const decoded = (async () => {\n    for await (const entry of parser) {\n      const name = entry.header.name\n      if (\n        entry.header.type !== 'file' ||\n        typeof name !== 'string' ||\n        observedEntryNames.has(name)\n      ) {\n        throw new Error('candidate workspace tar contains an invalid entry')\n      }\n      observedEntryNames.add(name)\n      if (name.startsWith(workspaceEntryPrefix)) {\n        if (files.length >= limits.maxFiles) {\n          throw new Error('candidate workspace archive has an invalid file count')\n        }\n        const path = safeArchivePath(name.slice(workspaceEntryPrefix.length), limits.maxPathBytes)\n        if (entry.header.mode !== 0o644 && entry.header.mode !== 0o755) {\n          throw new Error(`candidate workspace archive has an unsupported mode: ${path}`)\n        }\n        assertRetainedArchiveSize(bytes.byteLength, retainedEntryBytes, entry.header.size, limits)\n        const fileBytes = await readTarEntry(entry, limits.maxFileBytes, `workspace file ${path}`)\n        retainedEntryBytes += fileBytes.byteLength\n        assertWorkspacePathOrder(\n          path,\n          previousPath,\n          observedPaths,\n          'candidate workspace archive paths must be unique and sorted',\n        )\n        previousPath = path\n        if (fileBytes.byteLength > limits.maxTotalFileBytes - totalBytes) {\n          throw new Error('candidate workspace archive exceeds maxTotalFileBytes')\n        }\n        totalBytes += fileBytes.byteLength\n        files.push({ path, mode: entry.header.mode, bytes: fileBytes })\n      } else if (name === repositoryMetadataEntry) {\n        if (entry.header.mode !== 0o600 || repositoryMetadata) {\n          throw new Error('candidate workspace archive repository metadata is invalid')\n        }\n        assertRetainedArchiveSize(bytes.byteLength, retainedEntryBytes, entry.header.size, limits)\n        const metadataBytes = await readTarEntry(\n          entry,\n          limits.maxPathBytes,\n          'candidate repository metadata',\n        )\n        retainedEntryBytes += metadataBytes.byteLength\n        repositoryMetadata = parseRepositoryMetadata(metadataBytes, limits.maxRepositoryBundleBytes)\n      } else if (name === repositoryBundleEntry) {\n        if (entry.header.mode !== 0o600 || repositoryBundle) {\n          throw new Error('candidate workspace archive repository bundle is invalid')\n        }\n        assertRetainedArchiveSize(bytes.byteLength, retainedEntryBytes, entry.header.size, limits)\n        repositoryBundle = await readTarEntry(\n          entry,\n          limits.maxRepositoryBundleBytes,\n          'candidate Git bundle',\n        )\n        retainedEntryBytes += repositoryBundle.byteLength\n      } else {\n        throw new Error(`candidate workspace tar contains an unsupported entry: ${name}`)\n      }\n    }\n    if (Boolean(repositoryMetadata) !== Boolean(repositoryBundle)) {\n      throw new Error('candidate workspace archive repository evidence is incomplete')\n    }\n    const repository =\n      repositoryMetadata && repositoryBundle\n        ? repositoryFromTar(repositoryMetadata, repositoryBundle)\n        : undefined\n    return { files, ...(repository ? { repository } : {}) }\n  })()\n  parser.end(Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength))\n  const result = await decoded\n  await verifyCanonicalWorkspaceArchive(\n    result.files,\n    result.repository,\n    bytes,\n    limits.maxArchiveBytes,\n  )\n  return result\n}\n\nfunction assertRetainedArchiveSize(\n  archiveBytes: number,\n  retainedEntryBytes: number,\n  entryBytes: number | undefined,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): void {\n  if (\n    !Number.isSafeInteger(entryBytes) ||\n    entryBytes === undefined ||\n    entryBytes < 0 ||\n    entryBytes > limits.maxArchiveBytes - archiveBytes - retainedEntryBytes\n  ) {\n    throw new Error('candidate workspace archive exceeds maxArchiveBytes while decoding')\n  }\n}\n\nfunction parseRepositoryMetadata(\n  bytes: Uint8Array,\n  maxBundleBytes: number,\n): WorkspaceArchiveRepositoryMetadataV1 {\n  let value: unknown\n  try {\n    value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes))\n  } catch (error) {\n    throw new Error('candidate workspace archive repository metadata is invalid', { cause: error })\n  }\n  if (\n    !isRecord(value) ||\n    Object.keys(value).sort().join(',') !== 'bundle,headCommit,headTree,kind,schemaVersion' ||\n    value.schemaVersion !== 1 ||\n    value.kind !== archiveKind ||\n    typeof value.headCommit !== 'string' ||\n    typeof value.headTree !== 'string' ||\n    !isRecord(value.bundle) ||\n    Object.keys(value.bundle).sort().join(',') !== 'byteLength,sha256' ||\n    typeof value.bundle.sha256 !== 'string' ||\n    !/^sha256:[a-f0-9]{64}$/.test(value.bundle.sha256) ||\n    !Number.isSafeInteger(value.bundle.byteLength) ||\n    (value.bundle.byteLength as number) <= 0 ||\n    (value.bundle.byteLength as number) > maxBundleBytes\n  ) {\n    throw new Error('candidate workspace archive repository is invalid')\n  }\n  if (!Buffer.from(canonicalCandidateBytes(value)).equals(Buffer.from(bytes))) {\n    throw new Error('candidate workspace archive repository metadata is not canonical')\n  }\n  assertGitObjectId(value.headCommit, 'repository HEAD')\n  assertGitObjectId(value.headTree, 'repository HEAD tree')\n  if (value.headCommit.length !== value.headTree.length) {\n    throw new Error('candidate repository HEAD and tree use different object formats')\n  }\n  return {\n    schemaVersion: 1,\n    kind: archiveKind,\n    headCommit: value.headCommit,\n    headTree: value.headTree,\n    bundle: {\n      sha256: value.bundle.sha256 as `sha256:${string}`,\n      byteLength: value.bundle.byteLength as number,\n    },\n  }\n}\n\nfunction repositoryFromTar(\n  metadata: WorkspaceArchiveRepositoryMetadataV1,\n  bundle: Uint8Array,\n): WorkspaceArchiveRepositoryV1 {\n  verifyBytes(bundle, metadata.bundle.sha256, metadata.bundle.byteLength, 'candidate Git bundle')\n  return {\n    headCommit: metadata.headCommit,\n    headTree: metadata.headTree,\n    bundle: { ...metadata.bundle, bytes: bundle },\n  }\n}\n\nasync function writeTarEntry(\n  archive: Pack,\n  name: string,\n  mode: 0o600 | 0o644 | 0o755,\n  bytes: Uint8Array,\n): Promise<void> {\n  await new Promise<void>((resolveEntry, rejectEntry) => {\n    archive.entry(\n      {\n        name,\n        mode,\n        uid: 0,\n        gid: 0,\n        size: bytes.byteLength,\n        mtime: fixedTarTime,\n        type: 'file',\n        uname: '',\n        gname: '',\n      },\n      Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength),\n      (error) => (error ? rejectEntry(error) : resolveEntry()),\n    )\n  })\n}\n\nasync function readTarEntry(entry: Entry, maxBytes: number, label: string): Promise<Uint8Array> {\n  const size = entry.header.size\n  if (!Number.isSafeInteger(size) || size === undefined || size < 0 || size > maxBytes) {\n    throw new Error(`${label} has an invalid tar size`)\n  }\n  const bytes = await collectStream(entry, maxBytes, label)\n  if (bytes.byteLength !== size) throw new Error(`${label} differs from its tar size`)\n  return bytes\n}\n\nasync function collectStream(\n  stream: AsyncIterable<Uint8Array>,\n  maxBytes: number,\n  label: string,\n): Promise<Uint8Array> {\n  const chunks: Buffer[] = []\n  let totalBytes = 0\n  for await (const chunk of stream) {\n    if (chunk.byteLength > maxBytes - totalBytes) {\n      const error = new Error(`${label} exceeds its size limit`)\n      if ('destroy' in stream && typeof stream.destroy === 'function') stream.destroy(error)\n      throw error\n    }\n    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)\n    chunks.push(bytes)\n    totalBytes += bytes.byteLength\n  }\n  return Buffer.concat(chunks, totalBytes)\n}\n\nasync function streamEqualsBytes(\n  stream: AsyncIterable<Uint8Array>,\n  expected: Uint8Array,\n  maxBytes: number,\n  label: string,\n): Promise<boolean> {\n  const expectedBuffer = Buffer.from(expected.buffer, expected.byteOffset, expected.byteLength)\n  let equal = true\n  let offset = 0\n  for await (const chunk of stream) {\n    if (chunk.byteLength > maxBytes - offset) {\n      const error = new Error(`${label} exceeds its size limit`)\n      if ('destroy' in stream && typeof stream.destroy === 'function') stream.destroy(error)\n      throw error\n    }\n    const observed = Buffer.from(chunk.buffer, chunk.byteOffset, chunk.byteLength)\n    if (\n      offset + observed.byteLength > expectedBuffer.byteLength ||\n      !observed.equals(expectedBuffer.subarray(offset, offset + observed.byteLength))\n    ) {\n      equal = false\n    }\n    offset += observed.byteLength\n  }\n  return equal && offset === expectedBuffer.byteLength\n}\n\nasync function prepareEmptyDestination(destination: string): Promise<void> {\n  await mkdir(destination, { recursive: true, mode: 0o700 })\n  const stats = await lstat(destination)\n  if (\n    !stats.isDirectory() ||\n    stats.isSymbolicLink() ||\n    (await realpath(destination)) !== destination\n  ) {\n    throw new Error('candidate workspace destination must be a real directory')\n  }\n  if ((await readdir(destination)).length > 0) {\n    throw new Error('candidate workspace destination must be empty')\n  }\n}\n\nasync function writeWorkspaceFiles(\n  destination: string,\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n): Promise<void> {\n  for (const file of files) {\n    const path = workspacePath(destination, file.path)\n    await mkdir(dirname(path), { recursive: true, mode: 0o700 })\n    const descriptor = await open(\n      path,\n      fsConstants.O_WRONLY |\n        fsConstants.O_CREAT |\n        fsConstants.O_EXCL |\n        (typeof fsConstants.O_NOFOLLOW === 'number' ? fsConstants.O_NOFOLLOW : 0),\n      0o600,\n    )\n    try {\n      await descriptor.writeFile(file.bytes)\n      const stats = await descriptor.stat()\n      if (!stats.isFile() || stats.nlink !== 1) {\n        throw new Error(`candidate workspace file identity changed while writing: ${file.path}`)\n      }\n      await descriptor.chmod(file.mode)\n    } finally {\n      await descriptor.close()\n    }\n  }\n}\n\nasync function materializeRepository(\n  repository: WorkspaceArchiveRepositoryV1,\n  destination: string,\n): Promise<void> {\n  const temporary = await mkdtemp(join(tmpdir(), 'agent-candidate-workspace-bundle-'))\n  const bundlePath = join(temporary, `${randomUUID()}.bundle`)\n  try {\n    await writeFile(bundlePath, repository.bundle.bytes, { flag: 'wx', mode: 0o600 })\n    await runCandidateGit(destination, [\n      'init',\n      '--quiet',\n      '--initial-branch=candidate',\n      `--object-format=${repository.headCommit.length === 64 ? 'sha256' : 'sha1'}`,\n    ])\n    await runCandidateGit(destination, ['bundle', 'verify', bundlePath])\n    await runCandidateGit(destination, ['bundle', 'unbundle', bundlePath])\n    const objectType = (\n      await runCandidateGit(destination, ['cat-file', '-t', repository.headCommit])\n    ).stdout\n      .toString('utf8')\n      .trim()\n    if (objectType !== 'commit') throw new Error('candidate repository HEAD is not a commit')\n    const observedTree = (\n      await runCandidateGit(destination, ['rev-parse', `${repository.headCommit}^{tree}`])\n    ).stdout\n      .toString('utf8')\n      .trim()\n    if (observedTree !== repository.headTree) {\n      throw new Error('candidate repository bundle HEAD tree changed')\n    }\n    await runCandidateGit(destination, ['update-ref', '--no-deref', 'HEAD', repository.headCommit])\n    await runCandidateGit(destination, ['read-tree', repository.headTree])\n    const status = (\n      await runCandidateGit(destination, ['status', '--porcelain=v1', '--untracked-files=all'])\n    ).stdout\n      .toString('utf8')\n      .trim()\n    if (status) throw new Error('candidate repository files do not exactly match HEAD')\n  } finally {\n    await rm(temporary, { recursive: true, force: true })\n  }\n}\n\nfunction workspaceManifest(\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n): AgentCandidateWorkspaceManifestMaterialV1 {\n  return {\n    schemaVersion: 1,\n    kind: 'agent-candidate-workspace-manifest',\n    files: files.map((file) => ({\n      path: file.path,\n      mode: file.mode,\n      sha256: sha256Bytes(file.bytes),\n      byteLength: file.bytes.byteLength,\n    })),\n  }\n}\n\nfunction assertArchiveMatchesSnapshot(\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n  snapshot: AgentCandidateWorkspaceSnapshotEvidence,\n): void {\n  const material = workspaceManifest(files)\n  const materialBytes = canonicalCandidateBytes(material)\n  verifyBytes(\n    materialBytes,\n    snapshot.manifest.sha256,\n    snapshot.manifest.byteLength,\n    'candidate workspace manifest',\n  )\n  if (\n    canonicalCandidateDigest(material) !== snapshot.digest ||\n    !Buffer.from(materialBytes).equals(Buffer.from(canonicalCandidateBytes(snapshot.material)))\n  ) {\n    throw new Error('candidate workspace archive does not match its snapshot manifest')\n  }\n}\n\nfunction assertWorkspaceFilesWithinLimits(\n  files: ReadonlyArray<{ path: string; mode: 0o644 | 0o755; bytes: Uint8Array }>,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): void {\n  if (files.length > limits.maxFiles) {\n    throw new Error('candidate workspace exceeds maxFiles')\n  }\n  let totalBytes = 0\n  let previousPath: string | undefined\n  const observedPaths = new Set<string>()\n  for (const file of files) {\n    const path = safeArchivePath(file.path, limits.maxPathBytes)\n    assertWorkspacePathOrder(\n      path,\n      previousPath,\n      observedPaths,\n      'candidate workspace paths must be unique and sorted',\n    )\n    previousPath = path\n    if (file.mode !== 0o644 && file.mode !== 0o755) {\n      throw new Error(`candidate workspace file has unsupported mode: ${path}`)\n    }\n    if (file.bytes.byteLength > limits.maxFileBytes) {\n      throw new Error(`candidate workspace file exceeds maxFileBytes: ${path}`)\n    }\n    totalBytes += file.bytes.byteLength\n    if (totalBytes > limits.maxTotalFileBytes) {\n      throw new Error('candidate workspace exceeds maxTotalFileBytes')\n    }\n  }\n}\n\nfunction normalizeWorkspaceFiles(\n  input: readonly AgentCandidateExecutorWorkspaceFile[],\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): AgentCandidateExecutorWorkspaceFile[] {\n  if (!Array.isArray(input)) {\n    throw new Error('candidate workspace files must be an array')\n  }\n  const fileCount = input.length\n  if (fileCount > limits.maxFiles) {\n    throw new Error('candidate workspace exceeds maxFiles')\n  }\n  let totalBytes = 0\n  const files: AgentCandidateExecutorWorkspaceFile[] = []\n  for (let index = 0; index < fileCount; index++) {\n    const inputFile = input[index]\n    if (!isRecord(inputFile) || Object.keys(inputFile).sort().join(',') !== 'bytes,mode,path') {\n      throw new Error(`candidate workspace file ${index} is invalid`)\n    }\n    const descriptors = Object.getOwnPropertyDescriptors(inputFile)\n    if (\n      !('value' in (descriptors.path ?? {})) ||\n      !('value' in (descriptors.mode ?? {})) ||\n      !('value' in (descriptors.bytes ?? {}))\n    ) {\n      throw new Error(`candidate workspace file ${index} must use fixed values`)\n    }\n    const path = safeArchivePath(descriptors.path?.value, limits.maxPathBytes)\n    const mode = descriptors.mode?.value\n    const inputBytes = descriptors.bytes?.value\n    if (mode !== 0o644 && mode !== 0o755) {\n      throw new Error(`candidate workspace file has unsupported mode: ${path}`)\n    }\n    const view = inspectWorkspaceBytes(inputBytes, path)\n    if (view.byteLength > limits.maxFileBytes) {\n      throw new Error(`candidate workspace file exceeds maxFileBytes: ${path}`)\n    }\n    if (view.byteLength > limits.maxTotalFileBytes - totalBytes) {\n      throw new Error('candidate workspace exceeds maxTotalFileBytes')\n    }\n    if (view.byteLength > Math.max(0, limits.maxArchiveBytes - 1024)) {\n      throw new Error('candidate workspace archive exceeds maxArchiveBytes')\n    }\n    totalBytes += view.byteLength\n    files.push({ path, mode, bytes: detachWorkspaceBytes(view) })\n  }\n  files.sort((left, right) => (left.path < right.path ? -1 : left.path > right.path ? 1 : 0))\n  assertWorkspaceFilesWithinLimits(files, limits)\n  return files\n}\n\nfunction workspaceLimits(\n  overrides: Partial<AgentCandidateWorkspaceArchiveLimits> | undefined,\n): AgentCandidateWorkspaceArchiveLimits {\n  const limits = { ...defaultLimits, ...overrides }\n  for (const [name, value] of Object.entries(limits)) {\n    if (!Number.isSafeInteger(value) || value <= 0) {\n      throw new Error(`candidate workspace ${name} must be a positive safe integer`)\n    }\n  }\n  return Object.freeze(limits)\n}\n\nfunction safeArchivePath(value: unknown, maxPathBytes: number): string {\n  if (\n    typeof value !== 'string' ||\n    !value ||\n    !isWellFormedUnicode(value) ||\n    Buffer.byteLength(value, 'utf8') > maxPathBytes ||\n    isAbsolute(value) ||\n    win32.isAbsolute(value) ||\n    value.includes('\\\\') ||\n    value.includes('\\0') ||\n    hasControlCharacter(value) ||\n    value.split('/').some((part) => !part || part === '.' || part === '..') ||\n    ['.git', '.sidecar'].includes(value.split('/')[0]?.toLowerCase() ?? '')\n  ) {\n    throw new Error(`candidate workspace archive contains an unsafe path: ${String(value)}`)\n  }\n  return value\n}\n\nfunction assertWorkspacePathOrder(\n  path: string,\n  previousPath: string | undefined,\n  observedPaths: Set<string>,\n  errorMessage: string,\n): void {\n  if (previousPath !== undefined && previousPath >= path) throw new Error(errorMessage)\n  for (let slash = path.indexOf('/'); slash !== -1; slash = path.indexOf('/', slash + 1)) {\n    if (observedPaths.has(path.slice(0, slash))) throw new Error(errorMessage)\n  }\n  observedPaths.add(path)\n}\n\nfunction inspectWorkspaceBytes(\n  input: unknown,\n  path: string,\n): { buffer: ArrayBuffer; byteOffset: number; byteLength: number } {\n  let buffer: ArrayBufferLike\n  let byteOffset: number\n  let byteLength: number\n  try {\n    buffer = typedArrayBufferGetter.call(input as Uint8Array) as ArrayBufferLike\n    byteOffset = typedArrayByteOffsetGetter.call(input as Uint8Array) as number\n    byteLength = typedArrayByteLengthGetter.call(input as Uint8Array) as number\n  } catch {\n    throw new Error(`candidate workspace file bytes are invalid: ${path}`)\n  }\n  if (isSharedArrayBuffer(buffer)) {\n    throw new Error(`candidate workspace file uses shared bytes: ${path}`)\n  }\n  if (!isAnyArrayBuffer(buffer)) {\n    throw new Error(`candidate workspace file bytes are invalid: ${path}`)\n  }\n  return { buffer, byteOffset, byteLength }\n}\n\nfunction detachWorkspaceBytes(input: {\n  buffer: ArrayBuffer\n  byteOffset: number\n  byteLength: number\n}): Uint8Array {\n  const { buffer, byteOffset, byteLength } = input\n  const copy = new Uint8Array(byteLength)\n  Uint8Array.prototype.set.call(copy, new Uint8Array(buffer, byteOffset, byteLength))\n  return copy\n}\n\nfunction isWellFormedUnicode(value: string): boolean {\n  for (let index = 0; index < value.length; index++) {\n    const code = value.charCodeAt(index)\n    if (code >= 0xd800 && code <= 0xdbff) {\n      const next = value.charCodeAt(index + 1)\n      if (!(next >= 0xdc00 && next <= 0xdfff)) return false\n      index++\n    } else if (code >= 0xdc00 && code <= 0xdfff) {\n      return false\n    }\n  }\n  return true\n}\n\nfunction workspacePath(root: string, relativePath: string): string {\n  const path = resolve(root, relativePath)\n  if (!path.startsWith(`${root}${sep}`)) {\n    throw new Error(`candidate workspace archive path escapes its destination: ${relativePath}`)\n  }\n  return path\n}\n\nfunction assertGitObjectId(value: string, label: string): void {\n  if (!/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(value)) {\n    throw new Error(`candidate repository ${label} is not a Git object id`)\n  }\n}\n\nfunction hasControlCharacter(value: string): boolean {\n  for (let index = 0; index < value.length; index++) {\n    const code = value.charCodeAt(index)\n    if (code < 0x20 || code === 0x7f) return true\n  }\n  return false\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\ntype TypedArrayGetter = (this: Uint8Array) => unknown\n\nfunction requireTypedArrayGetter(name: 'buffer' | 'byteOffset' | 'byteLength'): TypedArrayGetter {\n  const typedArrayPrototype = Object.getPrototypeOf(Uint8Array.prototype) as object\n  const getter = Object.getOwnPropertyDescriptor(typedArrayPrototype, name)?.get\n  if (!getter) throw new Error(`typed array intrinsic ${name} accessor is unavailable`)\n  return getter\n}\n\nconst typedArrayBufferGetter = requireTypedArrayGetter('buffer')\nconst typedArrayByteOffsetGetter = requireTypedArrayGetter('byteOffset')\nconst typedArrayByteLengthGetter = requireTypedArrayGetter('byteLength')\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,SAAS,yBAAyB;AA0E3B,SAAS,0BACd,OAC6C;AAC7C,MAAI,OAAO,OAAO,MAAM,SAAS,gBAAgB,GAAG;AAClD,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AACA,QAAM,kBAAkB,wBAAwB,MAAM,OAAO;AAC7D,QAAM,iBAAiB,gBAAgB;AACvC,QAAM,SAAoC;AAAA,IACxC,eAAe;AAAA,IACf,MAAM;AAAA,IACN,iBAAiB;AAAA,IACjB,SAAS,gBAAgB;AAAA,IACzB,MAAM,qBAAqB,MAAM,IAAI;AAAA,IACrC,WAAW,MAAM;AAAA,IACjB,GAAI,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,IACxD,QAAQ,MAAM;AAAA,IACd,SAAS;AAAA,MACP,GAAG,MAAM;AAAA,MACT,GAAI,eAAe,SAAS,IAAI,EAAE,eAAe,IAAI,CAAC;AAAA,IACxD;AAAA,EACF;AACA,SAAO,yBAAyB,MAAM;AACxC;AAEA,SAAS,wBAAwB,QAG/B;AACA,MAAI,OAAO,SAAS,qBAAqB;AACvC,WAAO;AAAA,MACL,SAAS,2BAA2B,OAAO,OAAO;AAAA,MAClD,gBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,OAAO,SAAS,WAAW;AAC7B,WAAO,EAAE,SAAS,mCAAmC,OAAO,OAAO,GAAG,gBAAgB,CAAC,EAAE;AAAA,EAC3F;AAEA,MAAI,OAAO,SAAS,iBAAiB;AACnC,UAAM,IAAI;AAAA,MACR,yCAAyC,OAAQ,OAA8B,IAAI,CAAC;AAAA,IACtF;AAAA,EACF;AACA,MAAI,OAAO,MAAM,WAAW,GAAG;AAC7B,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,MAAI,UAAU,uBAAuB,OAAO,MAAM,cAAc;AAChE,QAAM,iBAA2B,CAAC;AAClC,aAAW,CAAC,OAAO,SAAS,KAAK,OAAO,MAAM,QAAQ,GAAG;AACvD,UAAM,OAAO,2BAA2B,WAAW,gBAAgB,KAAK,EAAE;AAC1E,cAAU,2BAA2B,SAAS,MAAM,gBAAgB,KAAK,EAAE;AAC3E,mBAAe,KAAK,yBAAyB,IAAI,CAAC;AAAA,EACpD;AACA,SAAO,EAAE,SAAS,mCAAmC,OAAO,GAAG,eAAe;AAChF;AAEA,SAAS,qBAAqB,QAAqE;AACjG,MAAI,OAAO,SAAS,cAAc,OAAO,SAAS,QAAS,QAAO;AAClE,MAAI,OAAO,SAAS,gBAAgB;AAClC,UAAM,IAAI;AAAA,MACR,sCAAsC,OAAQ,OAA8B,IAAI,CAAC;AAAA,IACnF;AAAA,EACF;AAEA,QAAM,WAAW,kBAAkB,OAAO,SAAS,OAAO,WAAW;AACrE,QAAM,QAAQ,0BAA0B,SAAS,UAAU;AAC3D,MACE,MAAM,WAAW,OAAO,QAAQ,MAAM,UACtC,MAAM,eAAe,OAAO,QAAQ,MAAM,YAC1C;AACA,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,YAAY,OAAO;AAAA,IACnB,YAAY,OAAO,QAAQ;AAAA,IAC3B,UAAU,OAAO,QAAQ;AAAA,IACzB,eAAe,OAAO,QAAQ;AAAA,IAC9B,OAAO,EAAE,QAAQ,mBAAmB,UAAU,MAAM;AAAA,EACtD;AACF;;;AC7JA,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,OAAO,MAAM,cAAc;AACpC,SAAS,YAAY;AAwCrB,IAAM;AAAA,EACJ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,IAAI;AAUG,IAAM,wCAAN,MAAyF;AAAA,EAC7E;AAAA,EACA;AAAA,EAEjB,YAAY,SAAuD;AACjE,QAAI,QAAQ,UAAU,WAAW,GAAG;AAClC,YAAM,IAAI,MAAM,uDAAuD;AAAA,IACzE;AACA,SAAK,YAAY,QAAQ;AACzB,SAAK,MAAM,QAAQ,OAAO,KAAK;AAAA,EACjC;AAAA,EAEA,MAAM,SACJ,WAC6C;AAC7C,UAAM,QAAQ,UAAU,SAAS;AACjC,UAAM,MAAM,KAAK,WAAW,EAAE,WAAW,KAAK,CAAC;AAC/C,UAAM,YAAY,KAAK,UAAU,KAAK;AACtC,UAAM,WAAW,MAAM,mBAAmB,SAAS;AACnD,QAAI,UAAU;AACZ,qBAAe,SAAS,OAAO,OAAO,SAAS;AAC/C,aAAO,sBAAsB,SAAS,OAAO,KAAK;AAAA,IACpD;AACA,yBAAqB,MAAM,kBAAkB,KAAK,IAAI,CAAC;AACvD,UAAM,eAAe,MAAM,KAAK,aAAa,KAAK;AAClD,QAAI,aAAc,QAAO,cAAc,OAAO,YAAY;AAE1D,UAAM,QAAQ,SAAS,KAAK;AAC5B,UAAM,WAAW,MAAM,oBAAoB,KAAK,WAAW,WAAW;AAAA,MACpE,SAAS;AAAA,MACT,GAAG;AAAA,MACH,OAAO;AAAA,MACP,aAAa,YAAY,KAAK;AAAA,IAChC,CAAC;AACD,QAAI,SAAU,QAAO,OAAO,OAAO,EAAE,UAAU,MAAM,OAAO,MAAM,CAAC;AAEnE,UAAM,SAAS,MAAM,UAAU,SAAS;AACxC,mBAAe,OAAO,OAAO,OAAO,SAAS;AAC7C,WAAO,sBAAsB,OAAO,OAAO,KAAK;AAAA,EAClD;AAAA,EAEA,MAAM,WACJ,kBAC2D;AAC3D,WAAO,MAAM,KAAK,cAAc,eAAe,gBAAgB,CAAC;AAAA,EAClE;AAAA,EAEA,MAAM,oBACJ,gBAC6C;AAC7C,UAAM,QAAQ,UAAU,cAAc;AACtC,UAAM,YAAY,KAAK,UAAU,KAAK;AACtC,UAAM,SAAS,MAAM,UAAU,SAAS;AACxC,mBAAe,OAAO,OAAO,OAAO,SAAS;AAC7C,gBAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;AACpE,UAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACrD,QAAI,MAAM,UAAU,qBAAqB;AACvC,aAAO,OAAO,OAAO,EAAE,QAAQ,OAAO,OAAO,oBAAoB,CAAC;AAAA,IACpE;AACA,QAAI,MAAM,QAAQ;AAChB,YAAM,IAAI,MAAM,wEAAwE;AAAA,IAC1F;AACA,yBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;AAC9D,UAAM,SAAS,MAAM;AAAA,MACnB,KAAK;AAAA,MACL,KAAK,eAAe,OAAO,OAAO,CAAC;AAAA,MACnC;AAAA,QACE,SAAS;AAAA,QACT,MAAM;AAAA,QACN,aAAa,OAAO,MAAM;AAAA,QAC1B,SAAS,OAAO,MAAM;AAAA,QACtB,qBAAqB,OAAO,MAAM;AAAA,QAClC,OAAO;AAAA,MACT;AAAA,MACA,KAAK,iBAAiB,OAAO,KAAK;AAAA,IACpC;AACA,QAAI,OAAQ,QAAO,OAAO,OAAO,EAAE,QAAQ,MAAM,OAAO,oBAAoB,CAAC;AAC7E,UAAM,SAAS,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACtD,QAAI,OAAO,UAAU,qBAAqB;AACxC,aAAO,OAAO,OAAO,EAAE,QAAQ,OAAO,OAAO,oBAAoB,CAAC;AAAA,IACpE;AACA,UAAM,IAAI,MAAM,wEAAwE;AAAA,EAC1F;AAAA,EAEA,MAAM,cACJ,gBACA,QAC6C;AAC7C,UAAM,QAAQ,UAAU,cAAc;AACtC,UAAM,YAAY,KAAK,UAAU,KAAK;AACtC,UAAM,SAAS,MAAM,UAAU,SAAS;AACxC,mBAAe,OAAO,OAAO,OAAO,SAAS;AAC7C,gBAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;AACpE,UAAM,WAAW,eAAe,OAAO,OAAO,MAAM;AACpD,UAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACrD,QAAI,MAAM,OAAQ,QAAO,cAAc,MAAM,QAAQ,QAAQ;AAC7D,iCAA6B,MAAM,OAAO,QAAQ;AAClD,yBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;AAC9D,UAAM,aAAa,MAAM,UAAU,YAAY,IAAI;AACnD,UAAM,SAAS,MAAM;AAAA,MACnB,KAAK;AAAA,MACL,KAAK,eAAe,OAAO,OAAO,UAAU;AAAA,MAC5C;AAAA,QACE,SAAS;AAAA,QACT,MAAM;AAAA,QACN;AAAA,MACF;AAAA,MACA,KAAK,iBAAiB,OAAO,KAAK;AAAA,IACpC;AACA,QAAI,OAAQ,QAAO,OAAO,OAAO,EAAE,QAAQ,MAAM,SAAS,CAAC;AAC3D,UAAM,SAAS,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACtD,QAAI,CAAC,OAAO,QAAQ;AAClB,YAAM,IAAI,MAAM,iEAAiE;AAAA,IACnF;AACA,WAAO,cAAc,OAAO,QAAQ,QAAQ;AAAA,EAC9C;AAAA,EAEA,MAAM,OACJ,gBACA,yBAC8C;AAC9C,UAAM,QAAQ,UAAU,cAAc;AACtC,UAAM,iBAAiB,mBAAmB,uBAAuB;AACjE,UAAM,YAAY,KAAK,UAAU,KAAK;AACtC,UAAM,SAAS,MAAM,UAAU,SAAS;AACxC,mBAAe,OAAO,OAAO,OAAO,SAAS;AAC7C,gBAAY,OAAO,aAAa,OAAO,MAAM,kBAAkB,KAAK;AACpE,UAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACrD,UAAM,SAAS,sBAAsB,MAAM,QAAQ,cAAc;AACjE,UAAM,eAAe,KAAK,aAAa,KAAK;AAC5C,UAAM,WAAW,MAAM,sBAAsB,YAAY;AACzD,QAAI,UAAU;AACZ,iCAA2B,UAAU,OAAO,OAAO,YAAY;AAC/D,kCAA4B,UAAU,QAAQ,YAAY;AAC1D,aAAO,eAAe,UAAU,cAAc;AAAA,IAChD;AACA,yBAAqB,OAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;AAC9D,UAAM,WAAW,MAAM;AAAA,MACrB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,QACE,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AAAA,MACA,KAAK,iBAAiB,OAAO,KAAK;AAAA,IACpC;AACA,QAAI,SAAU,QAAO,OAAO,OAAO,EAAE,UAAU,MAAM,UAAU,OAAO,CAAC;AACvE,UAAM,SAAS,MAAM,aAAa,YAAY;AAC9C,mBAAe,QAAQ,OAAO,YAAY;AAC1C,+BAA2B,QAAQ,OAAO,OAAO,YAAY;AAC7D,gCAA4B,QAAQ,QAAQ,YAAY;AACxD,WAAO,eAAe,QAAQ,cAAc;AAAA,EAC9C;AAAA,EAEA,MAAM,eACJ,kBACA,UAC8C;AAC9C,UAAM,UAAU,eAAe,gBAAgB;AAC/C,UAAMA,UAAS,MAAM,KAAK,cAAc,OAAO;AAC/C,QAAI,CAACA,QAAQ,OAAM,IAAI,MAAM,gEAAgE;AAC7F,UAAM,YAAY,wBAAwBA,QAAO,OAAOA,QAAO,OAAO,QAAQ;AAC9E,QAAIA,QAAO,OAAQ,6BAA4BA,QAAO,QAAQ,SAAS;AACvE,UAAM,kBAAkBA,QAAO,QAAQ,kBAAkB,UAAU;AACnE,QAAIA,QAAO,SAAU,QAAO,eAAeA,QAAO,UAAU,eAAe;AAC3E,uBAAmBA,QAAO,MAAM,kBAAkB,KAAK,IAAI,CAAC;AAE5D,QAAI,SAASA,QAAO;AACpB,QAAI,CAAC,QAAQ;AACX,YAAM,aAAaA,QAAO,UAAU,YAAY,IAAI;AACpD,YAAM,WAAW,MAAM;AAAA,QACrB,KAAK;AAAA,QACL,KAAK,eAAeA,QAAO,OAAO,UAAU;AAAA,QAC5C;AAAA,UACE,SAAS;AAAA,UACT,MAAM;AAAA,UACN,UAAU;AAAA,QACZ;AAAA,MACF;AACA,UAAI,UAAU;AACZ,iBAAS;AAAA,MACX,OAAO;AACL,cAAMC,UAAS,MAAM,KAAK,gBAAgBD,QAAO,KAAK;AACtD,YAAI,CAACC,QAAO,QAAQ;AAClB,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACA,oCAA4BA,QAAO,QAAQ,SAAS;AACpD,iBAASA,QAAO;AAAA,MAClB;AAAA,IACF;AAEA,UAAM,eAAe,KAAK,aAAa,OAAO;AAC9C,UAAM,YAAY,MAAM,oBAAoB,KAAK,WAAW,cAAc;AAAA,MACxE,SAAS;AAAA,MACT,UAAU;AAAA,IACZ,CAAC;AACD,QAAI,UAAW,QAAO,OAAO,OAAO,EAAE,UAAU,MAAM,UAAU,OAAO,CAAC;AACxE,UAAM,SAAS,MAAM,aAAa,YAAY;AAC9C,mBAAe,QAAQ,SAAS,YAAY;AAC5C,+BAA2B,QAAQD,QAAO,OAAO,YAAY;AAC7D,gCAA4B,QAAQ,QAAQ,YAAY;AACxD,WAAO,eAAe,QAAQ,OAAO,cAAc;AAAA,EACrD;AAAA,EAEA,MAAc,cACZ,OAC2D;AAC3D,UAAM,YAAY,KAAK,UAAU,KAAK;AACtC,UAAM,SAAS,MAAM,mBAAmB,SAAS;AACjD,QAAI,CAAC,OAAQ,QAAO;AACpB,mBAAe,OAAO,OAAO,OAAO,SAAS;AAC7C,UAAM,QAAQ,MAAM,KAAK,gBAAgB,OAAO,KAAK;AACrD,UAAM,eAAe,KAAK,aAAa,KAAK;AAC5C,UAAM,WAAW,MAAM,sBAAsB,YAAY;AACzD,QAAI,UAAU;AACZ,iCAA2B,UAAU,OAAO,OAAO,YAAY;AAC/D,UAAI,CAAC,MAAM,QAAQ;AACjB,cAAM,IAAI;AAAA,UACR,0CAA0C,YAAY;AAAA,QACxD;AAAA,MACF;AACA,kCAA4B,UAAU,MAAM,QAAQ,YAAY;AAAA,IAClE;AACA,WAAO,cAAc,OAAO,OAAO,MAAM,OAAO,MAAM,QAAQ,QAAQ;AAAA,EACxE;AAAA,EAEA,MAAc,gBAAgB,OAG3B;AACD,UAAM,YAAY,KAAK,eAAe,OAAO,CAAC;AAC9C,UAAM,QAAQ,MAAM,wBAAwB,WAAW,KAAK;AAC5D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,UAAU;AACtC,QAAI,MAAM,SAAS,UAAW,QAAO,EAAE,OAAO,WAAW,QAAQ,MAAM,SAAS;AAChF,UAAM,aAAa,KAAK,eAAe,OAAO,CAAC;AAC/C,UAAM,SAAS,MAAM,wBAAwB,YAAY,KAAK;AAC9D,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,oBAAoB;AACjD,QAAI,OAAO,SAAS,WAAW;AAC7B,YAAM,IAAI,MAAM,qCAAqC,UAAU,2BAA2B;AAAA,IAC5F;AACA,WAAO,EAAE,OAAO,qBAAqB,QAAQ,OAAO,SAAS;AAAA,EAC/D;AAAA,EAEA,MAAc,aACZ,OACmD;AACnD,QAAI,MAAM,YAAY,EAAG,QAAO;AAChC,WAAO;AAAA,MACL;AAAA,MACA,MAAM,KAAK,cAAc;AAAA,QACvB,aAAa,MAAM;AAAA,QACnB,SAAS,MAAM,UAAU;AAAA,MAC3B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,iBAAiB,OAEvB;AACA,WAAO;AAAA,MACL,kBAAkB,MAAM;AACtB,6BAAqB,MAAM,kBAAkB,KAAK,IAAI,CAAC;AACvD,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,UAAU,OAA8E;AAC9F,WAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,CAAC,aAAa;AAAA,EAC9D;AAAA,EAEQ,aACN,OACQ;AACR,WAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,CAAC,gBAAgB;AAAA,EACjE;AAAA,EAEQ,eACN,OACA,SACQ;AACR,WAAO,KAAK,KAAK,WAAW,GAAG,UAAU,KAAK,CAAC,eAAe,OAAO,OAAO;AAAA,EAC9E;AACF;AAEA,eAAe,oBACb,WACA,aACAA,SACA,UAGI,CAAC,GACa;AAClB,QAAM,gBAAgB,KAAK,WAAW,wBAAwB,QAAQ,GAAG,IAAI,WAAW,CAAC,MAAM;AAC/F,QAAM,SAAS,MAAM,KAAK,eAAe,MAAM,GAAK;AACpD,MAAI;AACF,UAAM,OAAO;AAAA,MACX,OAAO,OAAO,CAAC,OAAO,KAAK,wBAAwBA,OAAM,CAAC,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC;AAAA,IACjF;AACA,UAAM,OAAO,KAAK;AAAA,EACpB,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AAEA,MAAI,UAAU;AACd,MAAI;AACF,QAAI,QAAQ,oBAAoB,QAAQ,iBAAiB,MAAM,MAAM;AACnE,YAAM,IAAI,MAAM,2DAA2D;AAAA,IAC7E;AAGA,aAAS,eAAe,WAAW;AACnC,cAAU;AACV,UAAM,cAAc,SAAS;AAAA,EAC/B,SAAS,OAAO;AACd,QAAI,CAAC,YAAY,OAAO,QAAQ,EAAG,OAAM;AAAA,EAC3C,UAAE;AACA,UAAM,OAAO,aAAa,EAAE,MAAM,CAAC,UAAmB;AACpD,UAAI,CAAC,YAAY,OAAO,QAAQ,EAAG,OAAM;AAAA,IAC3C,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,eAAe,cAAc,WAAkC;AAC7D,QAAM,SAAS,MAAM,KAAK,WAAW,GAAG;AACxC,MAAI;AACF,UAAM,OAAO,KAAK;AAAA,EACpB,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;AAEA,SAAS,YAAY,OAAgB,MAAuB;AAC1D,SACE,UAAU,QACV,OAAO,UAAU,YACjB,UAAU,SACT,MAA6B,SAAS;AAE3C;;;AClZA,eAAsB,uCACpB,UACA,UAAgD,CAAC,GACpB;AAC7B,QAAM,eAAe,iCAAiC,QAAQ;AAC9D,QAAM,mBAAmB,QAAQ,oBAAoB,aAAa;AAClE,MAAI,mBAAmB,aAAa,kBAAkB;AACpD,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AACA,QAAM,sBAAsB,yBAAyB,gBAAgB;AACrE,QAAM,QAAQ,+BAA+B,QAAQ;AACrD,QAAM,UAAmC,CAAC;AAE1C,MAAI,MAAM,OAAO,SAAS,YAAY;AACpC,UAAM,cAAc,MAAM;AAC1B,QAAI,CAAC,YAAa,OAAM,IAAI,MAAM,wCAAwC;AAC1E,YAAQ;AAAA,MACN;AAAA,QACE,YAAY;AACV,gBAAM,SAAS,MAAM,MAAM,MAAM,OAAO,MAAM;AAAA,YAC5C,aAAa,MAAM;AAAA,YACnB,eAAe,YAAY;AAAA,YAC3B,cAAc,YAAY;AAAA,YAC1B,oBAAoB,YAAY;AAAA,YAChC,QAAQ;AAAA,UACV,CAAC;AACD,cAAI,OAAO,WAAW,QAAQ,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,QAAQ,QAAQ,QAAQ,GAAG;AACjF,kBAAM,IAAI,MAAM,8DAA8D;AAAA,UAChF;AAAA,QACF;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,UAAQ;AAAA,IACN;AAAA,MACE,YAAY;AACV,cAAM,aAAa;AAAA,UACjB,MAAM,MAAM,MAAM,OAAO,YAAY;AAAA,YACnC,aAAa,MAAM;AAAA,YACnB,eAAe,MAAM;AAAA,YACrB,aAAa,MAAM,iBAAiB;AAAA,YACpC,UAAU,MAAM;AAAA,YAChB,QAAQ;AAAA,UACV,CAAC;AAAA,UACD;AAAA,YACE,eAAe,MAAM;AAAA,YACrB,aAAa,MAAM,iBAAiB;AAAA,YACpC,OAAO,MAAM,cAAc;AAAA,UAC7B;AAAA,QACF;AACA,YAAI,WAAW,MAAM,eAAe,GAAG;AACrC,gBAAM,IAAI,MAAM,0DAA0D;AAAA,QAC5E;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,QAAQ,WAAW,OAAO;AAChD,QAAM,WAAW,QACd,OAAO,CAAC,WAA4C,OAAO,WAAW,UAAU,EAChF,IAAI,CAAC,WAAW,OAAO,MAAM;AAChC,MAAI,SAAS,SAAS,GAAG;AACvB,sCAAkC,UAAU,iBAAiB;AAC7D,UAAM,IAAI,eAAe,UAAU,uCAAuC;AAAA,EAC5E;AAEA,oCAAkC,UAAU,UAAU;AACtD,SAAO,OAAO,OAAO,EAAE,UAAU,KAAc,CAAC;AAClD;;;ACRA,IAAM,yBAAyB;AAC/B,IAAM,oCAAoC,KAAK,KAAK;AAS7C,SAAS,uCACd,SACyB;AACzB,QAAM,gBAAgB,oBAAoB,QAAQ,aAAa;AAC/D,QAAM,qBAAqB,sBAAsB,QAAQ,kBAAkB;AAC3E,QAAM,eAAe,oBAAI,IAAmC;AAC5D,QAAM,oBAAoB,oBAAI,IAAkC;AAEhE,SAAO;AAAA,IACL,SAAS,OAAO,UAAU;AACxB,YAAM,UAAU,wBAAwB,KAAK;AAC7C,YAAM,WAAW,sBAAsB,MAAM,QAAQ,aAAa,OAAO,GAAG,OAAO;AACnF,aAAO,wBAAwB,QAAQ;AAAA,IACzC;AAAA,IAEA,cAAc,OAAO,UAAU;AAC7B,wBAAkB,cAAc,mBAAmB,KAAK,IAAI,CAAC;AAC7D,YAAM,UAAU,wBAAwB,KAAK;AAC7C,2BAAqB,OAAO;AAC5B,YAAM,gBAAgB,yBAAyB,OAAO;AACtD,YAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;AACrE,UAAI,kBAAkB,IAAI,GAAG,GAAG;AAC9B,cAAM,IAAI,MAAM,gDAAgD;AAAA,MAClE;AACA,YAAM,WAAW,aAAa,IAAI,GAAG;AACrC,UAAI,YAAY,SAAS,kBAAkB,eAAe;AACxD,cAAM,IAAI,MAAM,2DAA2D;AAAA,MAC7E;AAEA,YAAM,cAAc;AAAA,QAClB,MAAM,QAAQ,OAAO,QAAQ,OAAO;AAAA,QACpC;AAAA,QACA;AAAA,MACF;AACA,YAAM,iBAAiB,yBAAyB,WAAW;AAC3D,UAAI,kBAAkB,IAAI,GAAG,GAAG;AAC9B,cAAM,IAAI,MAAM,mEAAmE;AAAA,MACrF;AACA,YAAM,WAAW,YAAY,aAAa,IAAI,GAAG;AACjD,UAAI,YAAY,SAAS,kBAAkB,eAAe;AACxD,cAAM,IAAI,MAAM,2DAA2D;AAAA,MAC7E;AACA,UAAI,YAAY,SAAS,mBAAmB,gBAAgB;AAC1D,cAAM,IAAI,MAAM,+DAA+D;AAAA,MACjF;AACA,UAAI,CAAC,UAAU;AACb,qBAAa,IAAI,KAAK;AAAA,UACpB;AAAA,UACA;AAAA,UACA,aAAa,QAAQ;AAAA,UACrB,eAAe,QAAQ;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB,aAAa,QAAQ;AAAA,UACrB,UAAU,wBAAwB,QAAQ,QAAQ;AAAA,UAClD,QAAQ,wBAAwB,QAAQ,MAAM;AAAA,UAC9C,iBAAiB,WAAW,QAAQ,OAAO,YAAY,qBAAqB;AAAA,UAC5E,YAAY;AAAA,QACd,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT;AAAA,IAEA,eAAe,OAAO,UAAU;AAC9B,wBAAkB,cAAc,mBAAmB,KAAK,IAAI,CAAC;AAC7D,YAAM,UAAU,wBAAwB,KAAK;AAC7C,YAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;AACrE,UAAI,kBAAkB,IAAI,GAAG,EAAG,OAAM,IAAI,MAAM,0CAA0C;AAC1F,YAAM,QAAQ,aAAa,IAAI,GAAG;AAClC,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,qDAAqD;AACjF,0BAAoB,OAAO,OAAO;AAClC,UAAI,MAAM,iBAAkB,OAAM,IAAI,MAAM,0CAA0C;AACtF,UAAI,MAAM,eAAe,YAAY;AACnC,cAAM,IAAI,MAAM,gDAAgD;AAAA,MAClE;AACA,UAAI,CAAC,OAAO,cAAc,QAAQ,YAAY,KAAK,QAAQ,gBAAgB,GAAG;AAC5E,cAAM,IAAI,MAAM,qEAAqE;AAAA,MACvF;AACA,UAAI,QAAQ,gBAAgB,KAAK,IAAI,GAAG;AACtC,cAAM,IAAI,MAAM,2DAA2D;AAAA,MAC7E;AACA,UAAI,QAAQ,eAAe,MAAM,aAAa;AAC5C,cAAM,IAAI,MAAM,iEAAiE;AAAA,MACnF;AACA,YAAM,aAAa;AACnB,UAAI;AACF,cAAM,aAAa;AAAA,UACjB,MAAM,QAAQ,OAAO,SAAS,OAAO;AAAA,UACrC,MAAM,OAAO,kBAAkB,IAAI,CAAC,IAAI;AAAA,QAC1C;AACA,YAAI,kBAAkB,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,MAAM,OAAO;AACjE,gBAAM,IAAI,MAAM,8DAA8D;AAAA,QAChF;AACA,cAAM,aAAa;AACnB,eAAO;AAAA,MACT,SAAS,OAAO;AACd,cAAM,aAAa;AACnB,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IAEA,aAAa,OAAO,UAAU;AAC5B,YAAM,MAAM,KAAK,IAAI;AACrB,wBAAkB,cAAc,mBAAmB,GAAG;AACtD,YAAM,UAAU,wBAAwB,KAAK;AAC7C,YAAM,MAAM,eAAe,QAAQ,aAAa,QAAQ,aAAa;AACrE,YAAM,QAAQ,aAAa,IAAI,GAAG;AAClC,UAAI,MAAO,qBAAoB,OAAO,OAAO;AAC7C,YAAM,aAAa,SAAS,kBAAkB,IAAI,GAAG;AACrD,UAAI,YAAY,oBAAoB,WAAW,qBAAqB,QAAQ,QAAQ;AAClF,cAAM,IAAI,MAAM,iEAAiE;AAAA,MACnF;AAEA,YAAM,SAAS,kCAAkC,MAAM,QAAQ,OAAO,OAAO,OAAO,GAAG;AAAA,QACrF,eAAe,QAAQ;AAAA,QACvB,aAAa,QAAQ;AAAA,QACrB,OAAO,QAAQ,SAAS;AAAA,MAC1B,CAAC;AACD,UAAI,MAAO,4BAA2B,OAAO,YAAY,KAAK;AAE9D,YAAM,mBAAmB,yBAAyB,OAAO,KAAK;AAC9D,UAAI,YAAY,oBAAoB,WAAW,qBAAqB,kBAAkB;AACpF,cAAM,IAAI,MAAM,oEAAoE;AAAA,MACtF;AACA,UAAI,YAAY,oBAAoB,WAAW,qBAAqB,QAAQ,QAAQ;AAClF,cAAM,IAAI,MAAM,iEAAiE;AAAA,MACnF;AACA,YAAM,cAAc,OAAO,eAAe,MAAM;AAChD,UAAI,OAAO;AACT,cAAM,mBAAmB;AACzB,cAAM,mBAAmB,QAAQ;AAAA,MACnC;AACA,mBAAa,OAAO,GAAG;AACvB,yBAAmB,mBAAmB,KAAK;AAAA,QACzC;AAAA,QACA,kBAAkB,QAAQ;AAAA,QAC1B;AAAA,MACF,CAAC;AACD,aAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,OAAmD;AAC/E,MAAI,CAAC,OAAO,cAAc,MAAM,WAAW,KAAK,MAAM,eAAe,GAAG;AACtE,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,MAAI,MAAM,eAAe,KAAK,IAAI,GAAG;AACnC,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,aAAW,CAAC,MAAM,KAAK,KAAK;AAAA,IAC1B,CAAC,iBAAiB,MAAM,OAAO,aAAa;AAAA,IAC5C,CAAC,kBAAkB,MAAM,OAAO,cAAc;AAAA,IAC9C,CAAC,mBAAmB,MAAM,OAAO,eAAe;AAAA,EAClD,GAAY;AACV,QAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAAG;AAC7C,YAAM,IAAI,MAAM,+BAA+B,IAAI,qCAAqC;AAAA,IAC1F;AAAA,EACF;AACA,aAAW,MAAM,OAAO,YAAY,qBAAqB;AAC3D;AAEA,SAAS,oBACP,OACA,UACA,eACqC;AACrC,QAAM,SAAS;AAAA,IACb;AAAA,IACA,CAAC,iBAAiB,UAAU,eAAe,kBAAkB,SAAS;AAAA,IACtE;AAAA,EACF;AACA,MAAI,OAAO,kBAAkB,SAAS,eAAe;AACnD,UAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AACA,MAAI,CAAC,eAAe,OAAO,MAAM,GAAG;AAClC,UAAM,IAAI,MAAM,4DAA4D;AAAA,EAC9E;AACA,MAAI,OAAO,gBAAgB,SAAS,aAAa;AAC/C,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA;AAAA,IACE,OAAO;AAAA,IACP,CAAC,iBAAiB,kBAAkB,mBAAmB,YAAY;AAAA,IACnE;AAAA,EACF;AACA,MACE,yBAAyB,OAAO,cAAc,MAAM,yBAAyB,SAAS,MAAM,GAC5F;AACA,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AAEA,QAAM,UAAU;AAAA,IACd,OAAO;AAAA,IACP,SAAS,OAAO;AAAA,IAChB;AAAA,EACF;AACA,SAAO,wBAAwB;AAAA,IAC7B,eAAe,OAAO;AAAA,IACtB,QAAQ,OAAO;AAAA,IACf,aAAa,OAAO;AAAA,IACpB,gBAAgB,OAAO;AAAA,IACvB;AAAA,EACF,CAAC;AACH;AAEA,SAAS,2BACP,OACA,eACA,eACkC;AAClC,MAAI,kBAAkB,GAAG;AACvB,UAAME,UAAS,YAAY,OAAO,CAAC,MAAM,GAAG,qCAAqC;AACjF,QAAIA,QAAO,SAAS,YAAY;AAC9B,YAAM,IAAI,MAAM,mEAAmE;AAAA,IACrF;AACA,WAAO,EAAE,MAAM,WAAW;AAAA,EAC5B;AAEA,QAAM,SAAS,YAAY,OAAO,CAAC,QAAQ,SAAS,GAAG,qCAAqC;AAC5F,MAAI,OAAO,SAAS,gBAAgB;AAClC,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AACA,MACE,CAAC,MAAM,QAAQ,OAAO,OAAO,KAC7B,OAAO,QAAQ,WAAW,KAC1B,OAAO,QAAQ,CAAC,MAAM,eACtB;AACA,UAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AACA,SAAO,EAAE,MAAM,gBAAgB,SAAS,CAAC,aAAa,EAAE;AAC1D;AAEA,SAAS,mBACP,OACA,eACwC;AACxC,QAAM,SAAS,YAAY,OAAO,CAAC,KAAK,GAAG,qCAAqC;AAChF,QAAM,MAAM,OAAO,OAAO,KAAK,wCAAwC;AACvE,QAAM,cAAc,OAAO,KAAK,GAAG,EAAE,KAAK;AAC1C,MACE,YAAY,WAAW,cAAc,UACrC,YAAY,KAAK,CAAC,MAAM,UAAU,SAAS,cAAc,KAAK,CAAC,GAC/D;AACA,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,QAAM,WAAmC,uBAAO,OAAO,IAAI;AAC3D,aAAW,QAAQ,eAAe;AAChC,UAAMC,SAAQ,IAAI,IAAI;AACtB,QAAI,OAAOA,WAAU,YAAYA,OAAM,SAAS,KAAKA,OAAM,SAAS,OAAQ;AAC1E,YAAM,IAAI,MAAM,8BAA8B,IAAI,sCAAsC;AAAA,IAC1F;AACA,aAAS,IAAI,IAAIA;AAAA,EACnB;AACA,SAAO,OAAO,OAAO,EAAE,KAAK,OAAO,OAAO,QAAQ,EAAE,CAAC;AACvD;AAEA,SAAS,sBACP,OACA,UAC6B;AAC7B,QAAM,SAAS;AAAA,IACb;AAAA,IACA,CAAC,aAAa,YAAY,SAAS,YAAY,iBAAiB;AAAA,IAChE;AAAA,EACF;AACA,MAAI,OAAO,cAAc,SAAS,WAAW;AAC3C,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,MAAI,OAAO,oBAAoB,SAAS,iBAAiB;AACvD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,aAAW,QAAQ,CAAC,aAAa,YAAY,SAAS,UAAU,GAAY;AAC1E,QAAI,OAAO,OAAO,IAAI,MAAM,YAAY,OAAO,IAAI,EAAE,WAAW,GAAG;AACjE,YAAM,IAAI,MAAM,4BAA4B,IAAI,oBAAoB;AAAA,IACtE;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBACP,UACA,QACM;AACN,MACE,OAAO,gBAAgB,SAAS,eAChC,OAAO,kBAAkB,SAAS,iBAClC,OAAO,gBAAgB,SAAS,eAChC,yBAAyB,OAAO,QAAQ,MAAM,yBAAyB,SAAS,QAAQ,GACxF;AACA,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACF;AAEA,SAAS,2BACP,OAMA,aACM;AACN,aAAW,CAAC,MAAM,QAAQ,KAAK,KAAK;AAAA,IAClC,CAAC,eAAe,MAAM,YAAY,YAAY,OAAO,aAAa;AAAA,IAClE,CAAC,gBAAgB,MAAM,aAAa,YAAY,OAAO,cAAc;AAAA,IACrE,CAAC,iBAAiB,MAAM,cAAc,YAAY,OAAO,eAAe;AAAA,IACxE,CAAC,kBAAkB,MAAM,cAAc,YAAY,eAAe;AAAA,EACpE,GAAY;AACV,QAAI,SAAS,OAAO;AAClB,YAAM,IAAI,MAAM,8BAA8B,IAAI,IAAI,MAAM,qBAAqB,KAAK,EAAE;AAAA,IAC1F;AAAA,EACF;AACF;AAEA,SAAS,sBAAsB,QAA8C;AAC3E,MAAI,OAAO,WAAW,GAAG;AACvB,UAAM,IAAI,MAAM,gEAAgE;AAAA,EAClF;AACA,QAAM,QAAQ,CAAC,GAAG,MAAM,EAAE,KAAK;AAC/B,MAAI,IAAI,IAAI,KAAK,EAAE,SAAS,MAAM,QAAQ;AACxC,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,aAAW,QAAQ,OAAO;AACxB,QACE,CAAC,2BAA2B,KAAK,IAAI,KACrC,CAAC,aAAa,eAAe,WAAW,EAAE,SAAS,IAAI,GACvD;AACA,YAAM,IAAI,MAAM,2DAA2D,IAAI,EAAE;AAAA,IACnF;AAAA,EACF;AACA,SAAO,OAAO,OAAO,KAAK;AAC5B;AAEA,SAAS,oBAAoB,OAAuB;AAClD,MACE,MAAM,SAAS,OACf,UAAU,MAAM,YAAY,KAC5B,MAAM,SAAS,GAAG,KAClB,MAAM,SAAS,GAAG,KAClB,UAAU,eACV,MAAM,SAAS,YAAY,KAC3B,UAAU,qBACV,UAAU,4BACV;AACA,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,QAAM,SAAS,MAAM,MAAM,GAAG;AAC9B,MACE,OAAO,SAAS,KAChB,CAAC,OAAO;AAAA,IACN,CAAC,UACC,MAAM,UAAU,KAAK,MAAM,UAAU,MAAM,oCAAoC,KAAK,KAAK;AAAA,EAC7F,KACA,CAAC,QAAQ,KAAK,OAAO,GAAG,EAAE,KAAK,EAAE,GACjC;AACA,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,aAAqB,eAA+B;AAC1E,SAAO,yBAAyB,EAAE,aAAa,cAAc,CAAC;AAChE;AAEA,SAAS,kBACP,cACA,aACA,KACM;AACN,aAAW,CAAC,KAAK,KAAK,KAAK,cAAc;AACvC,QAAI,MAAM,eAAe,IAAK,cAAa,OAAO,GAAG;AAAA,EACvD;AACA,aAAW,CAAC,KAAK,KAAK,KAAK,aAAa;AACtC,QAAI,MAAM,eAAe,IAAK,aAAY,OAAO,GAAG;AAAA,EACtD;AACF;AAEA,SAAS,mBACP,aACA,KACA,OACM;AACN,cAAY,OAAO,GAAG;AACtB,cAAY,IAAI,KAAK,KAAK;AAC1B,SAAO,YAAY,OAAO,wBAAwB;AAChD,UAAM,SAAS,YAAY,KAAK,EAAE,KAAK,EAAE;AACzC,QAAI,WAAW,OAAW;AAC1B,gBAAY,OAAO,MAAM;AAAA,EAC3B;AACF;AAEA,SAAS,eAAe,OAAuC;AAC7D,SAAO,OAAO,UAAU,YAAY,wBAAwB,KAAK,KAAK;AACxE;AAEA,SAAS,YACP,OACA,MACA,OACyB;AACzB,QAAM,SAAS,OAAO,OAAO,KAAK;AAClC,wBAAsB,QAAQ,MAAM,KAAK;AACzC,SAAO;AACT;AAEA,SAAS,OAAO,OAAgB,OAAwC;AACtE,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AACvE,UAAM,IAAI,MAAM,GAAG,KAAK,oBAAoB;AAAA,EAC9C;AACA,QAAM,YAAY,OAAO,eAAe,KAAK;AAC7C,MAAI,cAAc,OAAO,aAAa,cAAc,MAAM;AACxD,UAAM,IAAI,MAAM,GAAG,KAAK,yBAAyB;AAAA,EACnD;AACA,SAAO;AACT;;;ACpdA,eAAsB,sCACpB,SAC8C;AAC9C,QAAMC,UAAS,MAAM,QAAQ,WAAW,WAAW,QAAQ,OAAO;AAClE,MAAI,CAACA,QAAQ,OAAM,IAAI,MAAM,iDAAiD;AAC9E,MAAIA,QAAO,UAAU;AACnB,WAAO,OAAO,OAAO,EAAE,UAAU,OAAO,UAAUA,QAAO,UAAU,aAAa,KAAK,CAAC;AAAA,EACxF;AACA,QAAM,mBAAmB;AAAA,IACvB,QAAQ,oBAAoBA,QAAO,MAAM,QAAQ;AAAA,EACnD;AACA,MAAI,mBAAmBA,QAAO,MAAM,QAAQ,kBAAkB;AAC5D,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AAEA,QAAM,MAAM,QAAQ,OAAO,KAAK;AAChC,MAAI,IAAI,IAAIA,QAAO,MAAM,kBAAkB;AACzC,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AAEA,QAAM,sBAAsB,yBAAyB,gBAAgB;AACrE,QAAM,aAAa,IAAI,gBAAgB;AACvC,aAAW,MAAM,IAAI,MAAM,2CAA2C,CAAC;AACvE,QAAM,qBAAqB,IAAI,iCAAiC,QAAQ,UAAU;AAClF,QAAM,iBAAiB;AAAA,IACrB,YAAY;AACV,YAAM,UAAU,MAAM,QAAQ,SAAS;AAAA,QACrC;AAAA,UACE,aAAaA,QAAO,MAAM;AAAA,UAC1B,qBAAqBA,QAAO,MAAM;AAAA,QACpC;AAAA,QACA;AAAA,UACE,YAAY;AAAA,UACZ,QAAQ;AAAA,UACR,QAAQ,WAAW;AAAA,UACnB,cAAcA,QAAO,MAAM;AAAA,QAC7B;AAAA,MACF;AACA,6CAAuC,OAAO;AAC9C,aAAO,EAAE,SAAS,KAAc;AAAA,IAClC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,eAAe;AAAA,IACnB,YACE;AAAA,MACE,MAAM,QAAQ,MAAM,OAAO,YAAY;AAAA,QACrC,aAAaA,QAAO,MAAM;AAAA,QAC1B,eAAeA,QAAO,MAAM,QAAQ;AAAA,QACpC,aAAaA,QAAO,MAAM,QAAQ;AAAA,QAClC,UAAUA,QAAO,MAAM,QAAQ;AAAA,QAC/B,QAAQ;AAAA,MACV,CAAC;AAAA,MACD;AAAA,QACE,eAAeA,QAAO,MAAM,QAAQ;AAAA,QACpC,aAAaA,QAAO,MAAM,QAAQ;AAAA,QAClC,OAAOA,QAAO,MAAM,QAAQ,cAAc;AAAA,MAC5C;AAAA,IACF;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAEA,QAAM,gBAAgBA,QAAO,MAAM,QAAQ,SACvC;AAAA,IACE,YAAY;AACV,YAAMC,UAASD,QAAO,MAAM,QAAQ;AACpC,UAAI,CAACC,QAAQ,OAAM,IAAI,MAAM,4CAA4C;AACzE,YAAM,SAAS,MAAM,QAAQ,MAAM,OAAO,MAAM;AAAA,QAC9C,aAAaD,QAAO,MAAM;AAAA,QAC1B,eAAeA,QAAO,MAAM,QAAQ;AAAA,QACpC,cAAcC,QAAO;AAAA,QACrB,oBAAoBA,QAAO;AAAA,QAC3B,QAAQ;AAAA,MACV,CAAC;AACD,UAAI,OAAO,WAAW,QAAQ,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,QAAQ,QAAQ,QAAQ,GAAG;AACjF,cAAM,IAAI,MAAM,sDAAsD;AAAA,MACxE;AACA,aAAO,EAAE,QAAQ,KAAc;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,EACF,IACA;AAEJ,QAAM,aAAa,CAAC,gBAAgB,cAAc,GAAI,gBAAgB,CAAC,aAAa,IAAI,CAAC,CAAE;AAC3F,QAAM,WAAW,MAAM,QAAQ,WAAW,UAAU;AACpD,QAAM,WAAW,SACd,OAAO,CAAC,YAA8C,QAAQ,WAAW,UAAU,EACnF,IAAI,CAAC,YAAY,QAAQ,MAAM;AAClC,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,IAAI,eAAe,UAAU,+CAA+C;AAAA,EACpF;AAEA,QAAM,QAAQ,MAAM;AACpB,QAAM,kBAAkB,MAAM;AAAA,IAC5B,MACE;AAAA,MACE;AAAA,QACE,aAAaD,QAAO,MAAM;AAAA,QAC1B,qBAAqBA,QAAO,MAAM;AAAA,QAClC,eAAeA,QAAO,MAAM,QAAQ;AAAA,MACtC;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACA,QAAM,SAASA,QAAO,MAAM,QAAQ;AACpC,SAAO,MAAM,QAAQ,WAAW,eAAe,QAAQ,SAAS;AAAA,IAC9D,cACEA,QAAO,UAAU,aAAa,MAAM,WAAW,eAAe,IAC1D,6BACA;AAAA,IACN,OAAO,MAAM;AAAA,IACb,iBAAiB,gBAAgB;AAAA,IACjC,SAAS;AAAA,MACP,SAAS;AAAA,MACT,qBAAqBA,QAAO,MAAM;AAAA,IACpC;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,eAAeA,QAAO,MAAM,QAAQ;AAAA,MACpC,aAAaA,QAAO,MAAM,QAAQ;AAAA,IACpC;AAAA,IACA,GAAI,SACA;AAAA,MACE,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,eAAeA,QAAO,MAAM,QAAQ;AAAA,QACpC,cAAc,OAAO;AAAA,QACrB,oBAAoB,OAAO;AAAA,MAC7B;AAAA,IACF,IACA,CAAC;AAAA,EACP,CAAC;AACH;;;AC9KA,SAAS,cAAAE,mBAAkB;AAC3B,SAAS,aAAa,mBAAmB;AACzC;AAAA,EACE;AAAA,EACA,SAAAC;AAAA,EACA;AAAA,EACA,QAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AACvB,SAAS,SAAS,YAAY,QAAAC,OAAM,SAAS,KAAK,aAAa;AAC/D,SAAS,kBAAkB,2BAA2B;AAOtD,SAAqB,SAAoB,YAAY;AAsBrD,IAAM,cAAc;AACpB,IAAM,uBAAuB;AAC7B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAC9B,IAAM,eAAe,oBAAI,KAAK,CAAC;AAY/B,IAAM,gBAAsD,OAAO,OAAO;AAAA,EACxE,iBAAiB,MAAM,OAAO;AAAA,EAC9B,0BAA0B,OAAO;AAAA,EACjC,UAAU;AAAA,EACV,cAAc,MAAM,OAAO;AAAA,EAC3B,mBAAmB,MAAM,OAAO;AAAA,EAChC,cAAc;AAAA,EACd,0BAA0B,MAAM,OAAO;AACzC,CAAC;AAmDD,eAAsB,+BACpB,WACA,UAAiD,CAAC,GACR;AAC1C,QAAM,OAAO,QAAQ,SAAS;AAC9B,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,QAAM,WAAW,QAAQ,oBACrB,MAAM,kBAAkB,MAAM,MAAM,IACpC,MAAM,6BAA6B,MAAM;AAAA,IACvC,QAAQ;AAAA,MACN,UAAU,OAAO;AAAA,MACjB,cAAc,OAAO;AAAA,MACrB,mBAAmB,OAAO;AAAA,IAC5B;AAAA,EACF,CAAC;AACL,mCAAiC,SAAS,OAAO,MAAM;AACvD,QAAM,aAAa,gBAAgB,WAAW,SAAS,aAAa;AACpE,SAAO,sBAAsB,SAAS,OAAO,YAAY,QAAQ,QAAQ,mBAAmB;AAC9F;AAGA,eAAsB,oCACpB,OACA,UAA4E,CAAC,GACnC;AAC1C,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,SAAO;AAAA,IACL,wBAAwB,OAAO,MAAM;AAAA,IACrC;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV;AACF;AAEA,eAAe,sBACb,OACA,YACA,QACA,qBAC0C;AAC1C,QAAM,WAAW,kBAAkB,KAAK;AACxC,QAAM,WAAW,wBAAwB,QAAQ;AACjD,QAAM,UAAU,MAAM,uBAAuB,OAAO,YAAY,OAAO,eAAe;AACtF,MACE,CAAC,wBACA,SAAS,aAAa,OAAO,4BAC5B,QAAQ,aAAa,OAAO,2BAC9B;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,mBAAmB,MAAM,yBAAyB,YAAY,UAAU,mBAAmB;AACjG,QAAM,kBAAkB,MAAM,yBAAyB,WAAW,SAAS,mBAAmB;AAC9F,QAAM,WAAW,oBAAoB;AAAA,IACnC,eAAe;AAAA,IACf,MAAM;AAAA,IACN,QAAQ,yBAAyB,QAAQ;AAAA,IACzC;AAAA,IACA,UAAU;AAAA,IACV,SAAS;AAAA,EACX,CAAmD;AACnD,SAAO,OAAO,OAAO,EAAE,UAAU,QAAQ,CAAC;AAC5C;AAEA,eAAe,yBACb,MACA,OACA,aACyC;AACzC,MAAI,CAAC,YAAa,QAAO,0BAA0B,KAAK;AACxD,MAAI,CAAC,YAAY,YAAY,KAAK,GAAG;AACnC,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,SAAO,+BAA+B,YAAY,iBAAiB;AAAA,IACjE,aAAa,YAAY;AAAA,IACzB,SAAS,SAAS,aAAa,iCAAiC;AAAA,IAChE;AAAA,IACA,GAAI,YAAY,SAAS,EAAE,QAAQ,YAAY,OAAO,IAAI,CAAC;AAAA,EAC7D,CAAC;AACH;AAGO,SAAS,kCACd,UAAoD,CAAC,GACxB;AAC7B,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,QAAM,OAAoC;AAAA,IACxC,aAAa,OAAO,EAAE,MAAM,UAAU,SAAS,YAAY,MAAM;AAC/D,YAAM,mCAAmC;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO,OAAO,OAAO,IAAI;AAC3B;AAEA,eAAe,mCAAmC,OAMhC;AAChB;AAAA,IACE,MAAM;AAAA,IACN,MAAM,SAAS,QAAQ;AAAA,IACvB,MAAM,SAAS,QAAQ;AAAA,IACvB;AAAA,EACF;AACA,QAAM,UAAU,MAAM,sBAAsB,MAAM,SAAS,MAAM,MAAM;AACvE,MAAI,QAAQ,cAAc,MAAM,SAAS,QAAQ;AAC/C,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,+BAA6B,QAAQ,OAAO,MAAM,QAAQ;AAC1D,QAAM,cAAc,QAAQ,MAAM,WAAW;AAC7C,QAAM,wBAAwB,WAAW;AACzC,QAAM,UAAU,MAAM,QAAQ,GAAG,WAAW,iBAAiB;AAC7D,MAAI;AACF,UAAM,oBAAoB,SAAS,QAAQ,KAAK;AAChD,QAAI,QAAQ,YAAY;AACtB,YAAM,sBAAsB,QAAQ,YAAY,OAAO;AAAA,IACzD;AACA,UAAM,4BAA4B,SAAS,MAAM,SAAS,UAAU;AAAA,MAClE,6BAA6B,QAAQ,aAAa,CAAC,MAAM,IAAI,CAAC;AAAA,IAChE,CAAC;AACD,UAAM,OAAO,SAAS,WAAW;AAAA,EACnC,SAAS,OAAO;AACd,UAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAClD,UAAM,GAAG,aAAa,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACtD,UAAM;AAAA,EACR;AACF;AAEA,eAAe,kBACb,MACA,QAIC;AACD,QAAM,QAAQ,MAAM,MAAM,IAAI;AAC9B,MAAI,CAAC,MAAM,YAAY,KAAK,MAAM,eAAe,KAAM,MAAM,SAAS,IAAI,MAAO,MAAM;AACrF,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,QAAM,YAAY,MAAM,gBAAgB,MAAM,CAAC,aAAa,iBAAiB,CAAC,GAAG,OAC9E,SAAS,MAAM,EACf,KAAK;AACR,MAAI,QAAQ,QAAQ,MAAM,MAAM;AAC9B,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,QAAM,SAAS;AAAA,KACZ,MAAM,gBAAgB,MAAM,CAAC,aAAa,oBAAoB,CAAC,GAAG,OAChE,SAAS,MAAM,EACf,KAAK;AAAA,EACV;AACA,MAAK,MAAM,SAAS,MAAM,MAAO,UAAU,OAAO,SAAS,GAAG,GAAG;AAC/D,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AACA,QAAM,uBAAuB,MAAM,QAAQ,sBAAsB;AACjE,QAAM,cAAc,MAAM,gBAAgB,MAAM,CAAC,aAAa,MAAM,CAAC,GAAG,OACrE,SAAS,MAAM,EACf,KAAK;AACR,QAAM,YAAY,MAAM,gBAAgB,MAAM,CAAC,aAAa,aAAa,CAAC,GAAG,OAC1E,SAAS,MAAM,EACf,KAAK;AACR,oBAAkB,YAAY,MAAM;AACpC,oBAAkB,UAAU,WAAW;AACvC,MAAI,WAAW,WAAW,SAAS,QAAQ;AACzC,UAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AACA,QAAM,QAAQ,MAAM,0BAA0B,MAAM,UAAU,CAAC,GAAG,MAAM;AACxE,mCAAiC,OAAO,MAAM;AAC9C,QAAM,sBACJ,MAAM,gBAAgB,MAAM,CAAC,YAAY,gBAAgB,aAAa,MAAM,CAAC,GAC7E,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAM,iBAAiB,OAAO,kBAAkB;AAChD,MAAI,CAAC,OAAO,cAAc,cAAc,KAAK,iBAAiB,GAAG;AAC/D,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,MAAI,iBAAiB,OAAO,0BAA0B;AACpD,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,QAAM,YAAY,MAAM,QAAQC,MAAK,OAAO,GAAG,mCAAmC,CAAC;AACnF,QAAM,aAAaA,MAAK,WAAW,GAAGC,YAAW,CAAC,SAAS;AAC3D,MAAI;AACF,UAAM,gBAAgB,MAAM,CAAC,UAAU,UAAU,YAAY,MAAM,CAAC;AACpE,UAAM,SAAS,WAAW,KAAK,MAAM,SAAS,UAAU,CAAC;AACzD,QAAI,OAAO,aAAa,OAAO,0BAA0B;AACvD,YAAM,IAAI,MAAM,8DAA8D;AAAA,IAChF;AACA,WAAO;AAAA,MACL;AAAA,MACA,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ,YAAY,MAAM;AAAA,UAC1B,YAAY,OAAO;AAAA,UACnB,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF,UAAE;AACA,UAAM,GAAG,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACtD;AACF;AAEA,eAAe,uBACb,OACA,YACA,iBACqB;AACrB,QAAM,UAAU,KAAK;AACrB,QAAM,SAAS,cAAc,SAAS,iBAAiB,6BAA6B;AACpF,MAAI;AACF,UAAM,6BAA6B,SAAS,OAAO,UAAU;AAC7D,YAAQ,SAAS;AACjB,WAAO,MAAM;AAAA,EACf,SAAS,OAAO;AACd,YAAQ,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AACzE,UAAM,OAAO,MAAM,MAAM,MAAS;AAClC,UAAM;AAAA,EACR;AACF;AAEA,eAAe,gCACb,OACA,YACA,UACA,iBACe;AACf,QAAM,UAAU,KAAK;AACrB,QAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI;AACF,UAAM,6BAA6B,SAAS,OAAO,UAAU;AAC7D,YAAQ,SAAS;AACjB,QAAI,CAAE,MAAM,WAAa,OAAM,IAAI,MAAM,0CAA0C;AAAA,EACrF,SAAS,OAAO;AACd,YAAQ,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AACzE,UAAM,WAAW,MAAM,MAAM,MAAS;AACtC,UAAM;AAAA,EACR;AACF;AAEA,eAAe,6BACb,SACA,OACA,YACe;AACf,aAAW,QAAQ,OAAO;AACxB,UAAM,cAAc,SAAS,GAAG,oBAAoB,GAAG,KAAK,IAAI,IAAI,KAAK,MAAM,KAAK,KAAK;AAAA,EAC3F;AACA,MAAI,CAAC,WAAY;AACjB,QAAM,WAAW,wBAAwB;AAAA,IACvC,eAAe;AAAA,IACf,MAAM;AAAA,IACN,YAAY,WAAW;AAAA,IACvB,UAAU,WAAW;AAAA,IACrB,QAAQ;AAAA,MACN,QAAQ,WAAW,OAAO;AAAA,MAC1B,YAAY,WAAW,OAAO;AAAA,IAChC;AAAA,EACF,CAAgD;AAChD,QAAM,cAAc,SAAS,yBAAyB,KAAO,QAAQ;AACrE,QAAM,cAAc,SAAS,uBAAuB,KAAO,WAAW,OAAO,KAAK;AACpF;AAEA,eAAe,sBACb,OACA,QACkC;AAClC,MAAI,MAAM,aAAa,OAAO,iBAAiB;AAC7C,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA,QAAM,SAAS,QAAQ;AACvB,QAAM,QAA0C,CAAC;AACjD,QAAM,qBAAqB,oBAAI,IAAY;AAC3C,QAAM,gBAAgB,oBAAI,IAAY;AACtC,MAAI,aAAa;AACjB,MAAI,qBAAqB;AACzB,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,QAAM,WAAW,YAAY;AAC3B,qBAAiB,SAAS,QAAQ;AAChC,YAAM,OAAO,MAAM,OAAO;AAC1B,UACE,MAAM,OAAO,SAAS,UACtB,OAAO,SAAS,YAChB,mBAAmB,IAAI,IAAI,GAC3B;AACA,cAAM,IAAI,MAAM,mDAAmD;AAAA,MACrE;AACA,yBAAmB,IAAI,IAAI;AAC3B,UAAI,KAAK,WAAW,oBAAoB,GAAG;AACzC,YAAI,MAAM,UAAU,OAAO,UAAU;AACnC,gBAAM,IAAI,MAAM,uDAAuD;AAAA,QACzE;AACA,cAAM,OAAO,gBAAgB,KAAK,MAAM,qBAAqB,MAAM,GAAG,OAAO,YAAY;AACzF,YAAI,MAAM,OAAO,SAAS,OAAS,MAAM,OAAO,SAAS,KAAO;AAC9D,gBAAM,IAAI,MAAM,wDAAwD,IAAI,EAAE;AAAA,QAChF;AACA,kCAA0B,MAAM,YAAY,oBAAoB,MAAM,OAAO,MAAM,MAAM;AACzF,cAAM,YAAY,MAAM,aAAa,OAAO,OAAO,cAAc,kBAAkB,IAAI,EAAE;AACzF,8BAAsB,UAAU;AAChC;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,uBAAe;AACf,YAAI,UAAU,aAAa,OAAO,oBAAoB,YAAY;AAChE,gBAAM,IAAI,MAAM,uDAAuD;AAAA,QACzE;AACA,sBAAc,UAAU;AACxB,cAAM,KAAK,EAAE,MAAM,MAAM,MAAM,OAAO,MAAM,OAAO,UAAU,CAAC;AAAA,MAChE,WAAW,SAAS,yBAAyB;AAC3C,YAAI,MAAM,OAAO,SAAS,OAAS,oBAAoB;AACrD,gBAAM,IAAI,MAAM,4DAA4D;AAAA,QAC9E;AACA,kCAA0B,MAAM,YAAY,oBAAoB,MAAM,OAAO,MAAM,MAAM;AACzF,cAAM,gBAAgB,MAAM;AAAA,UAC1B;AAAA,UACA,OAAO;AAAA,UACP;AAAA,QACF;AACA,8BAAsB,cAAc;AACpC,6BAAqB,wBAAwB,eAAe,OAAO,wBAAwB;AAAA,MAC7F,WAAW,SAAS,uBAAuB;AACzC,YAAI,MAAM,OAAO,SAAS,OAAS,kBAAkB;AACnD,gBAAM,IAAI,MAAM,0DAA0D;AAAA,QAC5E;AACA,kCAA0B,MAAM,YAAY,oBAAoB,MAAM,OAAO,MAAM,MAAM;AACzF,2BAAmB,MAAM;AAAA,UACvB;AAAA,UACA,OAAO;AAAA,UACP;AAAA,QACF;AACA,8BAAsB,iBAAiB;AAAA,MACzC,OAAO;AACL,cAAM,IAAI,MAAM,0DAA0D,IAAI,EAAE;AAAA,MAClF;AAAA,IACF;AACA,QAAI,QAAQ,kBAAkB,MAAM,QAAQ,gBAAgB,GAAG;AAC7D,YAAM,IAAI,MAAM,+DAA+D;AAAA,IACjF;AACA,UAAM,aACJ,sBAAsB,mBAClB,kBAAkB,oBAAoB,gBAAgB,IACtD;AACN,WAAO,EAAE,OAAO,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC,EAAG;AAAA,EACxD,GAAG;AACH,SAAO,IAAI,OAAO,KAAK,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,CAAC;AACxE,QAAM,SAAS,MAAM;AACrB,QAAM;AAAA,IACJ,OAAO;AAAA,IACP,OAAO;AAAA,IACP;AAAA,IACA,OAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,0BACP,cACA,oBACA,YACA,QACM;AACN,MACE,CAAC,OAAO,cAAc,UAAU,KAChC,eAAe,UACf,aAAa,KACb,aAAa,OAAO,kBAAkB,eAAe,oBACrD;AACA,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACF;AAEA,SAAS,wBACP,OACA,gBACsC;AACtC,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;AAAA,EAC5E,SAAS,OAAO;AACd,UAAM,IAAI,MAAM,8DAA8D,EAAE,OAAO,MAAM,CAAC;AAAA,EAChG;AACA,MACE,CAAC,SAAS,KAAK,KACf,OAAO,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,mDACxC,MAAM,kBAAkB,KACxB,MAAM,SAAS,eACf,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,aAAa,YAC1B,CAAC,SAAS,MAAM,MAAM,KACtB,OAAO,KAAK,MAAM,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,uBAC/C,OAAO,MAAM,OAAO,WAAW,YAC/B,CAAC,wBAAwB,KAAK,MAAM,OAAO,MAAM,KACjD,CAAC,OAAO,cAAc,MAAM,OAAO,UAAU,KAC5C,MAAM,OAAO,cAAyB,KACtC,MAAM,OAAO,aAAwB,gBACtC;AACA,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,MAAI,CAAC,OAAO,KAAK,wBAAwB,KAAK,CAAC,EAAE,OAAO,OAAO,KAAK,KAAK,CAAC,GAAG;AAC3E,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,oBAAkB,MAAM,YAAY,iBAAiB;AACrD,oBAAkB,MAAM,UAAU,sBAAsB;AACxD,MAAI,MAAM,WAAW,WAAW,MAAM,SAAS,QAAQ;AACrD,UAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,MAAM;AAAA,IACN,YAAY,MAAM;AAAA,IAClB,UAAU,MAAM;AAAA,IAChB,QAAQ;AAAA,MACN,QAAQ,MAAM,OAAO;AAAA,MACrB,YAAY,MAAM,OAAO;AAAA,IAC3B;AAAA,EACF;AACF;AAEA,SAAS,kBACP,UACA,QAC8B;AAC9B,cAAY,QAAQ,SAAS,OAAO,QAAQ,SAAS,OAAO,YAAY,sBAAsB;AAC9F,SAAO;AAAA,IACL,YAAY,SAAS;AAAA,IACrB,UAAU,SAAS;AAAA,IACnB,QAAQ,EAAE,GAAG,SAAS,QAAQ,OAAO,OAAO;AAAA,EAC9C;AACF;AAEA,eAAe,cACb,SACA,MACA,MACA,OACe;AACf,QAAM,IAAI,QAAc,CAAC,cAAc,gBAAgB;AACrD,YAAQ;AAAA,MACN;AAAA,QACE;AAAA,QACA;AAAA,QACA,KAAK;AAAA,QACL,KAAK;AAAA,QACL,MAAM,MAAM;AAAA,QACZ,OAAO;AAAA,QACP,MAAM;AAAA,QACN,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AAAA,MACA,OAAO,KAAK,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;AAAA,MAC5D,CAAC,UAAW,QAAQ,YAAY,KAAK,IAAI,aAAa;AAAA,IACxD;AAAA,EACF,CAAC;AACH;AAEA,eAAe,aAAa,OAAc,UAAkB,OAAoC;AAC9F,QAAM,OAAO,MAAM,OAAO;AAC1B,MAAI,CAAC,OAAO,cAAc,IAAI,KAAK,SAAS,UAAa,OAAO,KAAK,OAAO,UAAU;AACpF,UAAM,IAAI,MAAM,GAAG,KAAK,0BAA0B;AAAA,EACpD;AACA,QAAM,QAAQ,MAAM,cAAc,OAAO,UAAU,KAAK;AACxD,MAAI,MAAM,eAAe,KAAM,OAAM,IAAI,MAAM,GAAG,KAAK,4BAA4B;AACnF,SAAO;AACT;AAEA,eAAe,cACb,QACA,UACA,OACqB;AACrB,QAAM,SAAmB,CAAC;AAC1B,MAAI,aAAa;AACjB,mBAAiB,SAAS,QAAQ;AAChC,QAAI,MAAM,aAAa,WAAW,YAAY;AAC5C,YAAM,QAAQ,IAAI,MAAM,GAAG,KAAK,yBAAyB;AACzD,UAAI,aAAa,UAAU,OAAO,OAAO,YAAY,WAAY,QAAO,QAAQ,KAAK;AACrF,YAAM;AAAA,IACR;AACA,UAAM,QAAQ,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK;AAChE,WAAO,KAAK,KAAK;AACjB,kBAAc,MAAM;AAAA,EACtB;AACA,SAAO,OAAO,OAAO,QAAQ,UAAU;AACzC;AAEA,eAAe,kBACb,QACA,UACA,UACA,OACkB;AAClB,QAAM,iBAAiB,OAAO,KAAK,SAAS,QAAQ,SAAS,YAAY,SAAS,UAAU;AAC5F,MAAI,QAAQ;AACZ,MAAI,SAAS;AACb,mBAAiB,SAAS,QAAQ;AAChC,QAAI,MAAM,aAAa,WAAW,QAAQ;AACxC,YAAM,QAAQ,IAAI,MAAM,GAAG,KAAK,yBAAyB;AACzD,UAAI,aAAa,UAAU,OAAO,OAAO,YAAY,WAAY,QAAO,QAAQ,KAAK;AACrF,YAAM;AAAA,IACR;AACA,UAAM,WAAW,OAAO,KAAK,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;AAC7E,QACE,SAAS,SAAS,aAAa,eAAe,cAC9C,CAAC,SAAS,OAAO,eAAe,SAAS,QAAQ,SAAS,SAAS,UAAU,CAAC,GAC9E;AACA,cAAQ;AAAA,IACV;AACA,cAAU,SAAS;AAAA,EACrB;AACA,SAAO,SAAS,WAAW,eAAe;AAC5C;AAEA,eAAe,wBAAwB,aAAoC;AACzE,QAAMC,OAAM,aAAa,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACzD,QAAM,QAAQ,MAAM,MAAM,WAAW;AACrC,MACE,CAAC,MAAM,YAAY,KACnB,MAAM,eAAe,KACpB,MAAM,SAAS,WAAW,MAAO,aAClC;AACA,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,OAAK,MAAM,QAAQ,WAAW,GAAG,SAAS,GAAG;AAC3C,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACF;AAEA,eAAe,oBACb,aACA,OACe;AACf,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,cAAc,aAAa,KAAK,IAAI;AACjD,UAAMA,OAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC3D,UAAM,aAAa,MAAMC;AAAA,MACvB;AAAA,MACA,YAAY,WACV,YAAY,UACZ,YAAY,UACX,OAAO,YAAY,eAAe,WAAW,YAAY,aAAa;AAAA,MACzE;AAAA,IACF;AACA,QAAI;AACF,YAAM,WAAW,UAAU,KAAK,KAAK;AACrC,YAAM,QAAQ,MAAM,WAAW,KAAK;AACpC,UAAI,CAAC,MAAM,OAAO,KAAK,MAAM,UAAU,GAAG;AACxC,cAAM,IAAI,MAAM,4DAA4D,KAAK,IAAI,EAAE;AAAA,MACzF;AACA,YAAM,WAAW,MAAM,KAAK,IAAI;AAAA,IAClC,UAAE;AACA,YAAM,WAAW,MAAM;AAAA,IACzB;AAAA,EACF;AACF;AAEA,eAAe,sBACb,YACA,aACe;AACf,QAAM,YAAY,MAAM,QAAQH,MAAK,OAAO,GAAG,mCAAmC,CAAC;AACnF,QAAM,aAAaA,MAAK,WAAW,GAAGC,YAAW,CAAC,SAAS;AAC3D,MAAI;AACF,UAAM,UAAU,YAAY,WAAW,OAAO,OAAO,EAAE,MAAM,MAAM,MAAM,IAAM,CAAC;AAChF,UAAM,gBAAgB,aAAa;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA,mBAAmB,WAAW,WAAW,WAAW,KAAK,WAAW,MAAM;AAAA,IAC5E,CAAC;AACD,UAAM,gBAAgB,aAAa,CAAC,UAAU,UAAU,UAAU,CAAC;AACnE,UAAM,gBAAgB,aAAa,CAAC,UAAU,YAAY,UAAU,CAAC;AACrE,UAAM,cACJ,MAAM,gBAAgB,aAAa,CAAC,YAAY,MAAM,WAAW,UAAU,CAAC,GAC5E,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAI,eAAe,SAAU,OAAM,IAAI,MAAM,2CAA2C;AACxF,UAAM,gBACJ,MAAM,gBAAgB,aAAa,CAAC,aAAa,GAAG,WAAW,UAAU,SAAS,CAAC,GACnF,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAI,iBAAiB,WAAW,UAAU;AACxC,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,UAAM,gBAAgB,aAAa,CAAC,cAAc,cAAc,QAAQ,WAAW,UAAU,CAAC;AAC9F,UAAM,gBAAgB,aAAa,CAAC,aAAa,WAAW,QAAQ,CAAC;AACrE,UAAM,UACJ,MAAM,gBAAgB,aAAa,CAAC,UAAU,kBAAkB,uBAAuB,CAAC,GACxF,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAI,OAAQ,OAAM,IAAI,MAAM,sDAAsD;AAAA,EACpF,UAAE;AACA,UAAM,GAAG,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACtD;AACF;AAEA,SAAS,kBACP,OAC2C;AAC3C,SAAO;AAAA,IACL,eAAe;AAAA,IACf,MAAM;AAAA,IACN,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,MAC1B,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,QAAQ,YAAY,KAAK,KAAK;AAAA,MAC9B,YAAY,KAAK,MAAM;AAAA,IACzB,EAAE;AAAA,EACJ;AACF;AAEA,SAAS,6BACP,OACA,UACM;AACN,QAAM,WAAW,kBAAkB,KAAK;AACxC,QAAM,gBAAgB,wBAAwB,QAAQ;AACtD;AAAA,IACE;AAAA,IACA,SAAS,SAAS;AAAA,IAClB,SAAS,SAAS;AAAA,IAClB;AAAA,EACF;AACA,MACE,yBAAyB,QAAQ,MAAM,SAAS,UAChD,CAAC,OAAO,KAAK,aAAa,EAAE,OAAO,OAAO,KAAK,wBAAwB,SAAS,QAAQ,CAAC,CAAC,GAC1F;AACA,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACF;AAEA,SAAS,iCACP,OACA,QACM;AACN,MAAI,MAAM,SAAS,OAAO,UAAU;AAClC,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI,aAAa;AACjB,MAAI;AACJ,QAAM,gBAAgB,oBAAI,IAAY;AACtC,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,gBAAgB,KAAK,MAAM,OAAO,YAAY;AAC3D;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,mBAAe;AACf,QAAI,KAAK,SAAS,OAAS,KAAK,SAAS,KAAO;AAC9C,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,QAAI,KAAK,MAAM,aAAa,OAAO,cAAc;AAC/C,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,kBAAc,KAAK,MAAM;AACzB,QAAI,aAAa,OAAO,mBAAmB;AACzC,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AAAA,EACF;AACF;AAEA,SAAS,wBACP,OACA,QACuC;AACvC,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,QAAM,YAAY,MAAM;AACxB,MAAI,YAAY,OAAO,UAAU;AAC/B,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI,aAAa;AACjB,QAAM,QAA+C,CAAC;AACtD,WAAS,QAAQ,GAAG,QAAQ,WAAW,SAAS;AAC9C,UAAM,YAAY,MAAM,KAAK;AAC7B,QAAI,CAAC,SAAS,SAAS,KAAK,OAAO,KAAK,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,mBAAmB;AACzF,YAAM,IAAI,MAAM,4BAA4B,KAAK,aAAa;AAAA,IAChE;AACA,UAAM,cAAc,OAAO,0BAA0B,SAAS;AAC9D,QACE,EAAE,YAAY,YAAY,QAAQ,CAAC,OACnC,EAAE,YAAY,YAAY,QAAQ,CAAC,OACnC,EAAE,YAAY,YAAY,SAAS,CAAC,KACpC;AACA,YAAM,IAAI,MAAM,4BAA4B,KAAK,wBAAwB;AAAA,IAC3E;AACA,UAAM,OAAO,gBAAgB,YAAY,MAAM,OAAO,OAAO,YAAY;AACzE,UAAM,OAAO,YAAY,MAAM;AAC/B,UAAM,aAAa,YAAY,OAAO;AACtC,QAAI,SAAS,OAAS,SAAS,KAAO;AACpC,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,UAAM,OAAO,sBAAsB,YAAY,IAAI;AACnD,QAAI,KAAK,aAAa,OAAO,cAAc;AACzC,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,QAAI,KAAK,aAAa,OAAO,oBAAoB,YAAY;AAC3D,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,QAAI,KAAK,aAAa,KAAK,IAAI,GAAG,OAAO,kBAAkB,IAAI,GAAG;AAChE,YAAM,IAAI,MAAM,qDAAqD;AAAA,IACvE;AACA,kBAAc,KAAK;AACnB,UAAM,KAAK,EAAE,MAAM,MAAM,OAAO,qBAAqB,IAAI,EAAE,CAAC;AAAA,EAC9D;AACA,QAAM,KAAK,CAAC,MAAM,UAAW,KAAK,OAAO,MAAM,OAAO,KAAK,KAAK,OAAO,MAAM,OAAO,IAAI,CAAE;AAC1F,mCAAiC,OAAO,MAAM;AAC9C,SAAO;AACT;AAEA,SAAS,gBACP,WACsC;AACtC,QAAM,SAAS,EAAE,GAAG,eAAe,GAAG,UAAU;AAChD,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,QAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,GAAG;AAC9C,YAAM,IAAI,MAAM,uBAAuB,IAAI,kCAAkC;AAAA,IAC/E;AAAA,EACF;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAAS,gBAAgB,OAAgB,cAA8B;AACrE,MACE,OAAO,UAAU,YACjB,CAAC,SACD,CAAC,oBAAoB,KAAK,KAC1B,OAAO,WAAW,OAAO,MAAM,IAAI,gBACnC,WAAW,KAAK,KAChB,MAAM,WAAW,KAAK,KACtB,MAAM,SAAS,IAAI,KACnB,MAAM,SAAS,IAAI,KACnB,oBAAoB,KAAK,KACzB,MAAM,MAAM,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,SAAS,OAAO,SAAS,IAAI,KACtE,CAAC,QAAQ,UAAU,EAAE,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,YAAY,KAAK,EAAE,GACtE;AACA,UAAM,IAAI,MAAM,wDAAwD,OAAO,KAAK,CAAC,EAAE;AAAA,EACzF;AACA,SAAO;AACT;AAEA,SAAS,yBACP,MACA,cACA,eACA,cACM;AACN,MAAI,iBAAiB,UAAa,gBAAgB,KAAM,OAAM,IAAI,MAAM,YAAY;AACpF,WAAS,QAAQ,KAAK,QAAQ,GAAG,GAAG,UAAU,IAAI,QAAQ,KAAK,QAAQ,KAAK,QAAQ,CAAC,GAAG;AACtF,QAAI,cAAc,IAAI,KAAK,MAAM,GAAG,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,YAAY;AAAA,EAC3E;AACA,gBAAc,IAAI,IAAI;AACxB;AAEA,SAAS,sBACP,OACA,MACiE;AACjE,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,aAAS,uBAAuB,KAAK,KAAmB;AACxD,iBAAa,2BAA2B,KAAK,KAAmB;AAChE,iBAAa,2BAA2B,KAAK,KAAmB;AAAA,EAClE,QAAQ;AACN,UAAM,IAAI,MAAM,+CAA+C,IAAI,EAAE;AAAA,EACvE;AACA,MAAI,oBAAoB,MAAM,GAAG;AAC/B,UAAM,IAAI,MAAM,+CAA+C,IAAI,EAAE;AAAA,EACvE;AACA,MAAI,CAAC,iBAAiB,MAAM,GAAG;AAC7B,UAAM,IAAI,MAAM,+CAA+C,IAAI,EAAE;AAAA,EACvE;AACA,SAAO,EAAE,QAAQ,YAAY,WAAW;AAC1C;AAEA,SAAS,qBAAqB,OAIf;AACb,QAAM,EAAE,QAAQ,YAAY,WAAW,IAAI;AAC3C,QAAM,OAAO,IAAI,WAAW,UAAU;AACtC,aAAW,UAAU,IAAI,KAAK,MAAM,IAAI,WAAW,QAAQ,YAAY,UAAU,CAAC;AAClF,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;AACjD,UAAM,OAAO,MAAM,WAAW,KAAK;AACnC,QAAI,QAAQ,SAAU,QAAQ,OAAQ;AACpC,YAAM,OAAO,MAAM,WAAW,QAAQ,CAAC;AACvC,UAAI,EAAE,QAAQ,SAAU,QAAQ,OAAS,QAAO;AAChD;AAAA,IACF,WAAW,QAAQ,SAAU,QAAQ,OAAQ;AAC3C,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,MAAc,cAA8B;AACjE,QAAM,OAAO,QAAQ,MAAM,YAAY;AACvC,MAAI,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,GAAG,EAAE,GAAG;AACrC,UAAM,IAAI,MAAM,6DAA6D,YAAY,EAAE;AAAA,EAC7F;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,OAAe,OAAqB;AAC7D,MAAI,CAAC,kCAAkC,KAAK,KAAK,GAAG;AAClD,UAAM,IAAI,MAAM,wBAAwB,KAAK,yBAAyB;AAAA,EACxE;AACF;AAEA,SAAS,oBAAoB,OAAwB;AACnD,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;AACjD,UAAM,OAAO,MAAM,WAAW,KAAK;AACnC,QAAI,OAAO,MAAQ,SAAS,IAAM,QAAO;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAIA,SAAS,wBAAwB,MAAgE;AAC/F,QAAM,sBAAsB,OAAO,eAAe,WAAW,SAAS;AACtE,QAAM,SAAS,OAAO,yBAAyB,qBAAqB,IAAI,GAAG;AAC3E,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,yBAAyB,IAAI,0BAA0B;AACpF,SAAO;AACT;AAEA,IAAM,yBAAyB,wBAAwB,QAAQ;AAC/D,IAAM,6BAA6B,wBAAwB,YAAY;AACvE,IAAM,6BAA6B,wBAAwB,YAAY;","names":["record","winner","source","value","record","memory","randomUUID","mkdir","open","join","join","randomUUID","mkdir","open"]}

package/dist/{chunk-QUYOHVN7.js → chunk-63TIZHMI.js}

@@ -5,13 +5,13 @@ import {
   definePersona,
   runPersonified,
   worktreeFanout
-} from "./chunk-SDR45ZQB.js";
+} from "./chunk-GKZ6DFDN.js";
 import {
   runAnalystLoop
 } from "./chunk-ZQZX77MM.js";
 import {
   createExecutorRegistry
-} from "./chunk-MDJJHYNQ.js";
+} from "./chunk-LWNMCOEA.js";
 import {
   ConfigError
 } from "./chunk-YEJR7IXO.js";
@@ -196,4 +196,4 @@ export {
   runLoopRunnerCli,
   parseLoopRunnerArgv
 };
-//# sourceMappingURL=chunk-QUYOHVN7.js.map
+//# sourceMappingURL=chunk-63TIZHMI.js.map

package/dist/{chunk-SDR45ZQB.js → chunk-GKZ6DFDN.js}

@@ -13,7 +13,7 @@ import {
   settledToIteration,
   supervise,
   withDriverExecutor
-} from "./chunk-MDJJHYNQ.js";
+} from "./chunk-LWNMCOEA.js";
 import {
   InMemoryResultBlobStore,
   InMemorySpawnJournal
@@ -6339,4 +6339,4 @@ export {
   computeFindingId,
   makeFinding2 as makeFinding
 };
-//# sourceMappingURL=chunk-SDR45ZQB.js.map
+//# sourceMappingURL=chunk-GKZ6DFDN.js.map