@te-river/opencode-team-mode 1.7.1 → 1.7.3

package/dist/tm/ptc/engines.js

@@ -1,454 +0,0 @@
-/**
- * tm_ptc_run — the three engines behind the frozen `PtcEngine` seam.
- * Split out of the former monolithic ptc.ts; behavior unchanged.
- *
- * M1 legacy: InlineSequentialEngine (test-only — runs on the MAIN thread,
- * no sandbox, no timeout; a post-await busy loop blocks the host event loop
- * irrecoverably).
- * M2 primary: WorkerEngine (worker_threads + MessagePort RPC, env:{},
- * resourceLimits, hard `terminate()` wall-clock kill; bootstrap as a
- * build-time string; the program body runs inside a node:vm sandbox —
- * whitelist { tm, console, setTimeout, clearTimeout }, no node globals —
- * with the run's timeoutMs as the in-engine script timeout).
- * M2 fallback: InlineVmEngine (node:vm runInContext — the script timeout
- * kills PRE-await synchronous busy-loops; a POST-await busy loop blocks the
- * host event loop irrecoverably, documented — prefer worker/auto).
- *
- * C1 fix batch: BOTH vm engines now build their `tm` facade IN-CONTEXT via
- * `vm.compileFunction` (parsingContext) and compile the context with
- * `codeGeneration:{strings:false,wasm:false}`, so an injected facade's
- * `.constructor` is the sandbox Function
- * and `tm.read.constructor("return process")()` / `eval` / `new Function` THROW
- * instead of escaping into the worker/plugin realm.  A started worker that
- * then crashes is reported as a program fault (never auto-replayed on the
- * more-privileged inline realm) — see engines WorkerEngine error/exit handling.
- */
-import * as vm from "node:vm";
-import { PtcProgramError, PtcStopSignal } from "./contract.js";
-const vmSandbox = vm;
-/** Build the `tm` facade the program body sees (one method per bridge tool). */
-function makeFacade(bridge) {
-    const one = (tool) => (args) => bridge.call(tool, args && typeof args === "object" ? args : {});
-    return {
-        read: one("tm_read"),
-        grep: one("tm_grep"),
-        bash: one("tm_bash"),
-        fetch: one("tm_fetch"),
-        // T6 web bridges — always present so the program SHAPE is uniform; the
-        // bridge itself rejects the call with a clear error when the web bridge
-        // is off (TM_PTC_WEB_BRIDGE) or the caller's role denies the tool.
-        search: one("tm_search"),
-        webfetch: one("tm_webfetch"),
-    };
-}
-/**
- * C1 (sandbox-escape) containment — the reason a facade is built with
- * `vm.compileFunction` (parsingContext) instead of being injected as a host/worker-realm closure.
- *
- * A function injected into a `vm` context still belongs to the realm that
- * CREATED it, so `tm.read.constructor` used to be the WORKER (or, worse, the
- * plugin ESM) realm's `Function` — `tm.read.constructor("return process")()`
- * escaped the sandbox outright.  Compiling the facade INSIDE the context via
- * `compileFunction`-with-parsingContext makes every injected function a SANDBOX-realm function whose
- * `.constructor` is the sandbox `Function`; combined with
- * `codeGeneration:{strings:false}` on the context that call throws
- * ("Code generation from strings disallowed for this context"), and even
- * without the throw the sandbox `Function` can only compile into the sandbox
- * realm, where `process` / `require` do not exist.
- *
- * The two host callbacks the sandbox needs (`postCall` in the worker,
- * `callBridge` inline) are passed as WRAPPER PARAMETERS, so they live in the
- * closure — unreachable from the program (`Function.prototype.toString`
- * shows only source, never the closed-over values).  And every RPC result is
- * JSON round-tripped IN the sandbox (`JSON.parse(JSON.stringify(raw))`) so a
- * host/worker-realm object (whose `.constructor` would be a host Object →
- * host Function) NEVER crosses into the program: rejected reasons are plain
- * strings too.  Dynamic `import("node:fs")` is unavailable in a `vm` context
- * that supplies no `importModuleDynamically` callback, so it throws by default.
- */
-/** The vm-wrap body (worker engine): builds { tm, console, setTimeout,
- *  clearTimeout } entirely in the sandbox realm from four host callbacks. */
-const TM_SANDBOX_SRC = [
-    '"use strict";',
-    "function mk(tool) {",
-    "  return function(args) {",
-    "    return new Promise(function(resolve, reject) {",
-    // resolve normalizes the host/worker-realm result into a sandbox object.
-    "      postCall(tool, args, function(raw) { resolve(JSON.parse(JSON.stringify(raw))); }, reject);",
-    "    });",
-    "  };",
-    "}",
-    'var tm = { read: mk("tm_read"), grep: mk("tm_grep"), bash: mk("tm_bash"), fetch: mk("tm_fetch"), search: mk("tm_search"), webfetch: mk("tm_webfetch") };',
-    "var console = { log: function() { return callLog(); }, error: function() { return callLog(); }, warn: function() { return callLog(); }, info: function() { return callLog(); }, debug: function() { return callLog(); }, trace: function() { return callLog(); } };",
-    // setTimeout/clearTimeout return a SANDBOX id and keep the worker timer
-    // handle in a closure so no worker object ever surfaces to the program.
-    "var __timers = {}; var __tid = 0;",
-    "var setTimeout = function(fn, ms) {",
-    "  var id = ++__tid;",
-    "  __timers[id] = callTimeout(function() { delete __timers[id]; try { fn(); } catch (e) { void e; } }, ms);",
-    "  return id;",
-    "};",
-    "var clearTimeout = function(id) { var h = __timers[id]; if (h) { delete __timers[id]; callClearTimeout(h); } };",
-    "return { tm: tm, console: console, setTimeout: setTimeout, clearTimeout: clearTimeout };",
-].join("\n");
-/** The vm-wrap body (inline-vm engine): builds { tm } in the sandbox realm
- *  from one host `callBridge` callback (rejects hand back a string, never a
- *  host Error, so the program cannot climb `err.constructor`). */
-const TM_INLINE_SRC = [
-    '"use strict";',
-    "function mk(tool) {",
-    "  return function(args) {",
-    "    return new Promise(function(resolve, reject) {",
-    "      callBridge(tool, args, function(raw) { resolve(JSON.parse(JSON.stringify(raw))); }, function(msg) { reject(String(msg)); });",
-    "    });",
-    "  };",
-    "}",
-    'return { read: mk("tm_read"), grep: mk("tm_grep"), bash: mk("tm_bash"), fetch: mk("tm_fetch"), search: mk("tm_search"), webfetch: mk("tm_webfetch") };',
-].join("\n");
-export class InlineSequentialEngine {
-    name = "inline";
-    async run(program, bridge, signal) {
-        // M1 legacy engine, kept test-only: the program runs as a trusted async
-        // function body on the MAIN thread — no sandbox, no timeout, and a
-        // post-await busy loop blocks the host event loop irrecoverably (same
-        // residual as InlineVmEngine).  Production runs WorkerEngine (auto
-        // default) or InlineVmEngine.
-        const AsyncFunction = Object.getPrototypeOf(async function () { }).constructor;
-        const tm = makeFacade(bridge);
-        let abortHandler;
-        const abortP = new Promise((_, rej) => {
-            // The driver only aborts on wall-clock timeout (budget stops flow through
-            // the gate as PtcStopSignal).
-            abortHandler = () => rej(new PtcStopSignal("timeout"));
-            if (signal.aborted)
-                abortHandler();
-            else
-                signal.addEventListener("abort", abortHandler, { once: true });
-        });
-        try {
-            const fn = new AsyncFunction("tm", `"use strict";\n${program}`);
-            return await Promise.race([fn(tm), abortP]);
-        }
-        finally {
-            if (abortHandler)
-                signal.removeEventListener("abort", abortHandler);
-        }
-    }
-}
-// ---------- worker engine (MessagePort RPC over worker_threads) --------------
-export class WorkerEngine {
-    name = "worker";
-    async run(program, bridge, signal, opts) {
-        const { Worker } = await import("node:worker_threads");
-        // Build the worker bootstrap source as a regular string (ts-safe).
-        // The worker receives {program, startDeadlineMs, timeoutMs} via its
-        // first message, creates the tm facade, runs the program, and sends RPC
-        // call requests back to the driver which executes them through the
-        // gate bridge.
-        //
-        // T2 (C1 security): the program body runs inside a node:vm context —
-        // a fresh realm with NO node globals.  The C1 FIX closes the residual
-        // host-function leak the earlier comments conceded: the `tm` facade and
-        // the whitelisted intrinsics (console/setTimeout/clearTimeout) are now
-        // COMPILED INSIDE the context via `vm.compileFunction` + `parsingContext` (see TM_SANDBOX_SRC), so a
-        // facade function's `.constructor` is the sandbox Function, and the
-        // context carries `codeGeneration:{strings:false,wasm:false}` so
-        // `tm.read.constructor("return process")()` / `eval` / `new Function`
-        // all THROW instead of escaping into the worker realm.  RPC results are
-        // JSON round-tripped in the sandbox and rejection reasons are strings,
-        // so no worker-realm object crosses the boundary.  (node:vm is still a
-        // containment layer, not a hard boundary — staticPscan stays the first
-        // gate and terminate() the wall-clock kill — but the trivial
-        // `.constructor` escape that used to make the sandbox porous is gone.)
-        // The bootstrap itself keeps worker powers (it needs require for
-        // node:vm/worker_threads) — ONLY the program loses them.
-        const src = [
-            '"use strict";',
-            'const { parentPort } = require("node:worker_threads");',
-            'const vm = require("node:vm");',
-            "parentPort.on(" + JSON.stringify("message") + ", async function onMsg(msg) {",
-            "  if (msg && msg.t === " + JSON.stringify("run") + ") {",
-            "    const program = msg.program;",
-            "    const callMap = new Map();",
-            "    let nextId = 0;",
-            // The ONLY worker capability the sandbox reaches — passed to the wrapped
-            // facade as a closure parameter, so it is invisible to the program.  A
-            // postMessage clone failure rejects with a STRING (never a worker Error).
-            "    var postCall = function(tool, args, resolve, reject) {",
-            "      const id = nextId++;",
-            "      callMap.set(id, { resolve: resolve, reject: reject });",
-            "      try { parentPort.postMessage({ t: " + JSON.stringify("call") + ", id: id, tool: tool, args: args }); }",
-            "      catch (e) { callMap.delete(id); reject(String(e && e.message ? e.message : e)); }",
-            "    };",
-            "    var callLog = function() {};",
-            "    var callTimeout = function(fn, ms) { return setTimeout(fn, ms); };",
-            "    var callClearTimeout = function(h) { return clearTimeout(h); };",
-            // inner listener: RPC replies resolve pending program calls; abort
-            // rejects are STRINGS (the parent normally hard-terminates on a stop).
-            '    parentPort.on("message", function(inner) {',
-            '      if (inner && inner.t === "result" && callMap.has(inner.id)) {',
-            "        callMap.get(inner.id).resolve(inner.r);",
-            "        callMap.delete(inner.id);",
-            '      } else if (inner && inner.t === "abort") {',
-            "        for (const e of callMap.values()) e.reject(String(" + JSON.stringify("ptc-stop:") + ") + String(inner.reason));",
-            "        callMap.clear();",
-            "      }",
-            "    });",
-            // C1: null-prototype context + codeGeneration OFF, facade built in-realm.
-            "    var sandbox = Object.create(null);",
-            "    vm.createContext(sandbox, { codeGeneration: { strings: false, wasm: false } });",
-            "    var inject = vm.compileFunction(" + JSON.stringify(TM_SANDBOX_SRC) + ", [" +
-                JSON.stringify("postCall") + ", " + JSON.stringify("callLog") + ", " +
-                JSON.stringify("callTimeout") + ", " + JSON.stringify("callClearTimeout") + "], " +
-                "{ parsingContext: sandbox });",
-            "    var built = inject(postCall, callLog, callTimeout, callClearTimeout);",
-            "    sandbox.tm = built.tm;",
-            "    sandbox.console = built.console;",
-            "    sandbox.setTimeout = built.setTimeout;",
-            "    sandbox.clearTimeout = built.clearTimeout;",
-            "    var vmTimeout = typeof msg.timeoutMs === " + JSON.stringify("number") + " && msg.timeoutMs > 0 ? msg.timeoutMs : 30000;",
-            "    try {",
-            // async-IIFE wrapper (same shape as InlineVmEngine): `return` stays
-            // legal in the body, strict mode applies, and the completion value
-            // IS the program's promise.  The vm timeout kills PRE-await sync
-            // busy-loops in-engine (post-await loops die via the driver-side
-            // abort → terminate()).
-            "      var result = await vm.runInContext(" +
-                JSON.stringify('(async () => {\n"use strict";\n') +
-                " + program + " +
-                JSON.stringify("\n})()") +
-                ", sandbox, { timeout: vmTimeout });",
-            '      parentPort.postMessage({ t: "done", result: result });',
-            "    } catch (err) {",
-            // T5: tag the fault kind — a program throw becomes kind:"program"
-            // so the parent constructs PtcProgramError (status "program-error",
-            // no auto-degrade).  vm-realm Errors are not instanceof the worker
-            // realm's Error — read message/stack structurally.
-            '      parentPort.postMessage({ t: "error", kind: "program", message: (err && err.message) ? String(err.message) : String(err), stack: (err && err.stack) ? String(err.stack) : undefined });',
-            "    }",
-            "  }",
-            "});",
-        ].join("\n");
-        return new Promise((resolve, reject) => {
-            let settled = false;
-            // C1: did the worker thread actually START?  A crash AFTER the thread
-            // came online is a RUNTIME fault (a started program) and must never be
-            // replayed on the inline/ESM realm; only a failure to START at all
-            // (pre-online) is an engine-init fault the driver may degrade from.
-            let online = false;
-            const w = new Worker(src, {
-                eval: true,
-                env: {},
-                resourceLimits: { maxOldGenerationSizeMb: 128, maxYoungGenerationSizeMb: 16 },
-            });
-            function settle(fn) {
-                if (settled)
-                    return;
-                settled = true;
-                fn();
-            }
-            w.on("message", (msg) => {
-                if (!msg || settled)
-                    return;
-                if (msg.t === "done") {
-                    settle(() => {
-                        w.terminate();
-                        resolve(msg.result);
-                    });
-                }
-                else if (msg.t === "error") {
-                    settle(() => {
-                        w.terminate();
-                        const message = typeof msg.message === "string" ? msg.message : "worker error";
-                        // A vm script-timeout text means the program blew its
-                        // in-engine time budget — surface it as the run TIMEOUT so the
-                        // status stays "timeout" whichever watchdog fired first.
-                        if (msg.kind === "program" && /^Script execution timed out/i.test(message)) {
-                            reject(new PtcStopSignal("timeout"));
-                            return;
-                        }
-                        // T5: a tagged program fault → PtcProgramError (the driver maps
-                        // it to "program-error" and never auto-degrades).  An untagged
-                        // error stays a generic engine fault.
-                        if (msg.kind === "program") {
-                            reject(new PtcProgramError(message, typeof msg.stack === "string" ? msg.stack : undefined));
-                            return;
-                        }
-                        const err = new Error(message);
-                        if (typeof msg.stack === "string")
-                            err.stack = msg.stack;
-                        reject(err);
-                    });
-                }
-                else if (msg.t === "call") {
-                    // Driver executes the bridge call through the gate and replies.
-                    const req = msg;
-                    bridge
-                        .call(req.tool, req.args)
-                        .then((r) => {
-                        if (!settled) {
-                            w.postMessage({ t: "result", id: req.id, r });
-                        }
-                    })
-                        .catch((err) => {
-                        // T5 (stop-signal swallow): the gate throws PtcStopSignal on
-                        // budget/time stops — it must TERMINATE the run with the stop
-                        // status instead of being swallowed into a generic per-call
-                        // error (zombie mode: the program kept running past the stop
-                        // on "bridge call failed" replies).
-                        if (err instanceof PtcStopSignal) {
-                            settle(() => {
-                                w.terminate().then(() => reject(err));
-                            });
-                            return;
-                        }
-                        if (!settled) {
-                            w.postMessage({
-                                t: "result",
-                                id: req.id,
-                                r: { ok: false, error: { tool: req.tool, phase: "execute", message: "bridge call failed" } },
-                            });
-                        }
-                    });
-                }
-            });
-            w.on("online", () => {
-                online = true;
-            });
-            w.on("error", (err) => {
-                const msg = err instanceof Error ? err.message : String(err);
-                settle(() => {
-                    if (online) {
-                        // The worker thread had started and then threw at the bootstrap
-                        // level — a runtime crash of a started program.  Tag it as a
-                        // PROGRAM fault so the driver maps to "program-error" and NEVER
-                        // replays the (already-running) program on a more-privileged
-                        // realm.  Do NOT terminate-and-resolve; the run simply fails.
-                        reject(new PtcProgramError(msg, err instanceof Error ? err.stack : undefined));
-                    }
-                    else {
-                        // The worker never came online: an engine-init fault.  This is
-                        // the ONLY case the auto worker→inline degrade may act on.
-                        reject(err instanceof Error ? err : new Error(msg));
-                    }
-                });
-            });
-            // C1: an unexpected exit while the run is still open.  Post-online this
-            // is a crash (e.g. a bootstrap-level process.exit) → program-error, no
-            // replay; pre-online it is an init failure → engine-error (degradable).
-            w.on("exit", (code) => {
-                if (code === 0 || settled)
-                    return;
-                settle(() => {
-                    if (online)
-                        reject(new PtcProgramError(`worker crashed (exit ${code})`));
-                    else
-                        reject(new Error(`worker failed to start (exit ${code})`));
-                });
-            });
-            // Wire signal abort → terminate the worker.
-            const onAbort = () => {
-                settle(() => {
-                    w.terminate().then(() => reject(new PtcStopSignal("timeout")));
-                });
-            };
-            if (signal.aborted)
-                onAbort();
-            else
-                signal.addEventListener("abort", onAbort, { once: true });
-            // Send the run request — timeoutMs feeds the in-engine vm script
-            // timeout (complementary to the driver-side abort→terminate).
-            w.postMessage({
-                t: "run",
-                program,
-                startDeadlineMs: opts?.startDeadlineMs ?? 0,
-                timeoutMs: opts?.timeoutMs,
-            });
-        });
-    }
-}
-// ---------- inline-vm fallback engine (node:vm with script timeout) ----------
-export class InlineVmEngine {
-    name = "inline";
-    /** Script execution timeout in ms (kills pre-await synchronous
-     *  busy-loops).  Injectable so tests can pin the kill fast. */
-    compileTimeoutMs;
-    constructor(compileTimeoutMs = 30_000) {
-        this.compileTimeoutMs = compileTimeoutMs;
-    }
-    async run(program, bridge, signal) {
-        // C1: build the facade INSIDE the sandbox (vm.compileFunction + parsingContext) and compile the
-        // context with codeGeneration OFF.  This engine runs in the PLUGIN ESM
-        // realm (historically the WORST leak: an escaped `Function` could then
-        // `import("node:fs" | "node:child_process")` → arbitrary file read incl.
-        // .env, bypassing R6/P2).  Wrapping the injected functions into the
-        // sandbox realm is what closes it: `tm.read.constructor` is the sandbox
-        // Function, codeGeneration:{strings:false} blocks compiling any new
-        // string, and dynamic `import(...)` has no callback in a vm context so it
-        // throws.  The plugin-realm `bridge` is passed as a WRAPPER PARAMETER
-        // (closure, unreachable from the program); RPC results are JSON
-        // round-tripped into the sandbox and rejection reasons are plain strings,
-        // so no host-realm object (with a host `.constructor`) ever crosses in.
-        const callBridge = (tool, args, resolve, reject) => {
-            let p;
-            try {
-                p = bridge.call(tool, args && typeof args === "object" ? args : {});
-            }
-            catch (e) {
-                reject(e instanceof Error ? e.message : String(e));
-                return;
-            }
-            Promise.resolve(p).then((r) => resolve(r), (e) => reject(e instanceof Error ? e.message : String(e)));
-        };
-        const sandbox = Object.create(null);
-        vmSandbox.createContext(sandbox, { codeGeneration: { strings: false, wasm: false } });
-        // TM_INLINE_SRC returns the { read, grep, bash, fetch, search, webfetch }
-        // facade directly (this context carries only `tm`, no console/timers).
-        const inject = vmSandbox.compileFunction(TM_INLINE_SRC, ["callBridge"], {
-            parsingContext: sandbox,
-        });
-        sandbox.tm = inject(callBridge);
-        let abortHandler;
-        const abortP = new Promise((_, rej) => {
-            abortHandler = () => rej(new PtcStopSignal("timeout"));
-            if (signal.aborted)
-                abortHandler();
-            else
-                signal.addEventListener("abort", abortHandler, { once: true });
-        });
-        try {
-            // The async-IIFE is the program wrapper: `return` stays legal in the
-            // body, the `tm` facade rides the context globals, and the script's
-            // completion value IS the program's promise.  The timeout kills
-            // pre-await synchronous busy-loops (see the module doc).
-            let promise;
-            try {
-                promise = vmSandbox.runInContext(`(async () => {\n"use strict";\n${program}\n})()`, sandbox, { timeout: this.compileTimeoutMs });
-            }
-            catch (err) {
-                // a SYNCHRONOUS vm throw (script timeout) is an engine-side kill —
-                // generic Error → engine-error semantics (pinned by §9j).
-                throw err;
-            }
-            try {
-                return await Promise.race([promise, abortP]);
-            }
-            catch (err) {
-                if (err instanceof PtcStopSignal)
-                    throw err;
-                // T5: the program body REJECTED — tag it so the driver maps to
-                // status "program-error" instead of auto-degrading.  A vm-realm
-                // Error is not instanceof the host Error — read message/stack
-                // structurally.
-                const message = err?.message;
-                const stack = err?.stack;
-                throw new PtcProgramError(typeof message === "string" && message ? message : String(err ?? "program error"), typeof stack === "string" ? stack : undefined);
-            }
-        }
-        finally {
-            if (abortHandler)
-                signal.removeEventListener("abort", abortHandler);
-        }
-    }
-}
-//# sourceMappingURL=engines.js.map

package/dist/tm/ptc/engines.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"engines.js","sourceRoot":"","sources":["../../../src/tm/ptc/engines.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAE7B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AA4B9D,MAAM,SAAS,GAAG,EAA6B,CAAA;AAE/C,gFAAgF;AAChF,SAAS,UAAU,CACjB,MAAiB;IAEjB,MAAM,GAAG,GACP,CAAC,IAAY,EAAE,EAAE,CACjB,CAAC,IAA6B,EAAoB,EAAE,CAClD,MAAM,CAAC,IAAI,CAAC,IAAa,EAAE,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAC5E,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC;QACtB,uEAAuE;QACvE,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;QACxB,QAAQ,EAAE,GAAG,CAAC,aAAa,CAAC;KAC7B,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;6EAC6E;AAC7E,MAAM,cAAc,GAAG;IACrB,eAAe;IACf,qBAAqB;IACrB,2BAA2B;IAC3B,oDAAoD;IACpD,yEAAyE;IACzE,kGAAkG;IAClG,SAAS;IACT,MAAM;IACN,GAAG;IACH,0JAA0J;IAC1J,qQAAqQ;IACrQ,wEAAwE;IACxE,wEAAwE;IACxE,mCAAmC;IACnC,qCAAqC;IACrC,qBAAqB;IACrB,4GAA4G;IAC5G,cAAc;IACd,IAAI;IACJ,iHAAiH;IACjH,0FAA0F;CAC3F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ;;kEAEkE;AAClE,MAAM,aAAa,GAAG;IACpB,eAAe;IACf,qBAAqB;IACrB,2BAA2B;IAC3B,oDAAoD;IACpD,oIAAoI;IACpI,SAAS;IACT,MAAM;IACN,GAAG;IACH,wJAAwJ;CACzJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ,MAAM,OAAO,sBAAsB;IACxB,IAAI,GAAkB,QAAQ,CAAA;IACvC,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,MAAiB,EAAE,MAAmB;QAC/D,wEAAwE;QACxE,mEAAmE;QACnE,sEAAsE;QACtE,mEAAmE;QACnE,8BAA8B;QAC9B,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,eAAc,CAAC,CAAC,CAAC,WAExB,CAAA;QAC1C,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;QAC7B,IAAI,YAAsC,CAAA;QAC1C,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YAC3C,0EAA0E;YAC1E,8BAA8B;YAC9B,YAAY,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;YACtD,IAAI,MAAM,CAAC,OAAO;gBAAE,YAAY,EAAE,CAAA;;gBAC7B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;QACF,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,kBAAkB,OAAO,EAAE,CAAC,CAAA;YAC/D,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;QAC7C,CAAC;gBAAS,CAAC;YACT,IAAI,YAAY;gBAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QACrE,CAAC;IACH,CAAC;CACF;AAED,gFAAgF;AAEhF,MAAM,OAAO,YAAY;IACd,IAAI,GAAkB,QAAQ,CAAA;IAEvC,KAAK,CAAC,GAAG,CACP,OAAe,EACf,MAAiB,EACjB,MAAmB,EACnB,IAAuB;QAEvB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAA;QACtD,mEAAmE;QACnE,oEAAoE;QACpE,wEAAwE;QACxE,mEAAmE;QACnE,eAAe;QACf,EAAE;QACF,qEAAqE;QACrE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,qGAAqG;QACrG,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,6DAA6D;QAC7D,uEAAuE;QACvE,iEAAiE;QACjE,yDAAyD;QACzD,MAAM,GAAG,GAAG;YACV,eAAe;YACf,wDAAwD;YACxD,gCAAgC;YAChC,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,+BAA+B;YAC9E,yBAAyB,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK;YACzD,kCAAkC;YAClC,gCAAgC;YAChC,qBAAqB;YACrB,yEAAyE;YACzE,uEAAuE;YACvE,0EAA0E;YAC1E,4DAA4D;YAC5D,4BAA4B;YAC5B,8DAA8D;YAC9D,0CAA0C,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,wCAAwC;YAC9G,yFAAyF;YACzF,QAAQ;YACR,kCAAkC;YAClC,wEAAwE;YACxE,qEAAqE;YACrE,mEAAmE;YACnE,uEAAuE;YACvE,gDAAgD;YAChD,qEAAqE;YACrE,iDAAiD;YACjD,mCAAmC;YACnC,kDAAkD;YAClD,4DAA4D,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,4BAA4B;YACzH,0BAA0B;YAC1B,SAAS;YACT,SAAS;YACT,0EAA0E;YAC1E,wCAAwC;YACxC,qFAAqF;YACrF,sCAAsC,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,KAAK;gBAC7E,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI;gBACpE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,GAAG,KAAK;gBACjF,+BAA+B;YACjC,2EAA2E;YAC3E,4BAA4B;YAC5B,sCAAsC;YACtC,4CAA4C;YAC5C,gDAAgD;YAChD,+CAA+C,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,gDAAgD;YAC7H,WAAW;YACX,oEAAoE;YACpE,mEAAmE;YACnE,iEAAiE;YACjE,iEAAiE;YACjE,wBAAwB;YACxB,2CAA2C;gBACzC,IAAI,CAAC,SAAS,CAAC,iCAAiC,CAAC;gBACjD,eAAe;gBACf,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;gBACxB,qCAAqC;YACvC,8DAA8D;YAC9D,qBAAqB;YACrB,kEAAkE;YAClE,oEAAoE;YACpE,mEAAmE;YACnE,mDAAmD;YACnD,8LAA8L;YAC9L,OAAO;YACP,KAAK;YACL,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACZ,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,sEAAsE;YACtE,uEAAuE;YACvE,mEAAmE;YACnE,oEAAoE;YACpE,IAAI,MAAM,GAAG,KAAK,CAAA;YAClB,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE;gBACxB,IAAI,EAAE,IAAI;gBACV,GAAG,EAAE,EAAE;gBACP,cAAc,EAAE,EAAE,sBAAsB,EAAE,GAAG,EAAE,wBAAwB,EAAE,EAAE,EAAE;aAC9E,CAAC,CAAA;YAEF,SAAS,MAAM,CAAC,EAAc;gBAC5B,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,EAAE,EAAE,CAAA;YACN,CAAC;YAED,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAwC,EAAE,EAAE;gBAC3D,IAAI,CAAC,GAAG,IAAI,OAAO;oBAAE,OAAM;gBAC3B,IAAI,GAAG,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;oBACrB,MAAM,CAAC,GAAG,EAAE;wBACV,CAAC,CAAC,SAAS,EAAE,CAAA;wBACb,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;oBACrB,CAAC,CAAC,CAAA;gBACJ,CAAC;qBAAM,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;oBAC7B,MAAM,CAAC,GAAG,EAAE;wBACV,CAAC,CAAC,SAAS,EAAE,CAAA;wBACb,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAA;wBAC9E,sDAAsD;wBACtD,+DAA+D;wBAC/D,yDAAyD;wBACzD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;4BAC3E,MAAM,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;4BACpC,OAAM;wBACR,CAAC;wBACD,gEAAgE;wBAChE,+DAA+D;wBAC/D,sCAAsC;wBACtC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;4BAC3B,MAAM,CACJ,IAAI,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CACpF,CAAA;4BACD,OAAM;wBACR,CAAC;wBACD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;wBAC9B,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;4BAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAA;wBACxD,MAAM,CAAC,GAAG,CAAC,CAAA;oBACb,CAAC,CAAC,CAAA;gBACJ,CAAC;qBAAM,IAAI,GAAG,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;oBAC5B,gEAAgE;oBAChE,MAAM,GAAG,GAAG,GAA+B,CAAA;oBAC3C,MAAM;yBACH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;yBACxB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;wBACV,IAAI,CAAC,OAAO,EAAE,CAAC;4BACb,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAoB,CAAC,CAAA;wBACjE,CAAC;oBACH,CAAC,CAAC;yBACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;wBACtB,6DAA6D;wBAC7D,8DAA8D;wBAC9D,4DAA4D;wBAC5D,6DAA6D;wBAC7D,oCAAoC;wBACpC,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;4BACjC,MAAM,CAAC,GAAG,EAAE;gCACV,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;4BACvC,CAAC,CAAC,CAAA;4BACF,OAAM;wBACR,CAAC;wBACD,IAAI,CAAC,OAAO,EAAE,CAAC;4BACb,CAAC,CAAC,WAAW,CAAC;gCACZ,CAAC,EAAE,QAAQ;gCACX,EAAE,EAAE,GAAG,CAAC,EAAE;gCACV,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE;6BAC3E,CAAC,CAAA;wBACtB,CAAC;oBACH,CAAC,CAAC,CAAA;gBACN,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAClB,MAAM,GAAG,IAAI,CAAA;YACf,CAAC,CAAC,CAAA;YAEF,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC3B,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAC5D,MAAM,CAAC,GAAG,EAAE;oBACV,IAAI,MAAM,EAAE,CAAC;wBACX,gEAAgE;wBAChE,6DAA6D;wBAC7D,gEAAgE;wBAChE,6DAA6D;wBAC7D,8DAA8D;wBAC9D,MAAM,CAAC,IAAI,eAAe,CAAC,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;oBAChF,CAAC;yBAAM,CAAC;wBACN,+DAA+D;wBAC/D,2DAA2D;wBAC3D,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;oBACrD,CAAC;gBACH,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;YAEF,wEAAwE;YACxE,uEAAuE;YACvE,wEAAwE;YACxE,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBAC5B,IAAI,IAAI,KAAK,CAAC,IAAI,OAAO;oBAAE,OAAM;gBACjC,MAAM,CAAC,GAAG,EAAE;oBACV,IAAI,MAAM;wBAAE,MAAM,CAAC,IAAI,eAAe,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAC,CAAA;;wBACnE,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,IAAI,GAAG,CAAC,CAAC,CAAA;gBACjE,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;YAEF,4CAA4C;YAC5C,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,MAAM,CAAC,GAAG,EAAE;oBACV,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;gBAChE,CAAC,CAAC,CAAA;YACJ,CAAC,CAAA;YACD,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAA;;gBACxB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAE9D,iEAAiE;YACjE,8DAA8D;YAC9D,CAAC,CAAC,WAAW,CAAC;gBACZ,CAAC,EAAE,KAAK;gBACR,OAAO;gBACP,eAAe,EAAE,IAAI,EAAE,eAAe,IAAI,CAAC;gBAC3C,SAAS,EAAE,IAAI,EAAE,SAAS;aAChB,CAAC,CAAA;QACf,CAAC,CAAC,CAAA;IACJ,CAAC;CACF;AAED,gFAAgF;AAEhF,MAAM,OAAO,cAAc;IAChB,IAAI,GAAkB,QAAQ,CAAA;IACvC;mEAC+D;IAC9C,gBAAgB,CAAQ;IACzC,YAAY,gBAAgB,GAAG,MAAM;QACnC,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,MAAiB,EAAE,MAAmB;QAC/D,gGAAgG;QAChG,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,oEAAoE;QACpE,wEAAwE;QACxE,oEAAoE;QACpE,0EAA0E;QAC1E,sEAAsE;QACtE,gEAAgE;QAChE,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,IAAa,EACb,OAA6B,EAC7B,MAA2B,EACrB,EAAE;YACR,IAAI,CAAmB,CAAA;YACvB,IAAI,CAAC;gBACH,CAAC,GAAG,MAAM,CAAC,IAAI,CACb,IAAa,EACb,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,EAAE,CAC1E,CAAA;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;gBAClD,OAAM;YACR,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CACrB,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EACjB,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAC1D,CAAA;QACH,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAA;QAC9D,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;QACrF,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE;YACtE,cAAc,EAAE,OAAO;SACxB,CAAuD,CAAA;QACxD,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,CAAA;QAC/B,IAAI,YAAsC,CAAA;QAC1C,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YAC3C,YAAY,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;YACtD,IAAI,MAAM,CAAC,OAAO;gBAAE,YAAY,EAAE,CAAA;;gBAC7B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;QACF,IAAI,CAAC;YACH,qEAAqE;YACrE,oEAAoE;YACpE,gEAAgE;YAChE,yDAAyD;YACzD,IAAI,OAAyB,CAAA;YAC7B,IAAI,CAAC;gBACH,OAAO,GAAG,SAAS,CAAC,YAAY,CAC9B,kCAAkC,OAAO,QAAQ,EACjD,OAAO,EACP,EAAE,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,CACf,CAAA;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mEAAmE;gBACnE,0DAA0D;gBAC1D,MAAM,GAAG,CAAA;YACX,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;YAC9C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,aAAa;oBAAE,MAAM,GAAG,CAAA;gBAC3C,+DAA+D;gBAC/D,gEAAgE;gBAChE,8DAA8D;gBAC9D,gBAAgB;gBAChB,MAAM,OAAO,GAAI,GAAgD,EAAE,OAAO,CAAA;gBAC1E,MAAM,KAAK,GAAI,GAA8C,EAAE,KAAK,CAAA;gBACpE,MAAM,IAAI,eAAe,CACvB,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,EACjF,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC9C,CAAA;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,YAAY;gBAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QACrE,CAAC;IACH,CAAC;CACF"}

package/dist/tm/ptc/gate.d.ts

@@ -1,28 +0,0 @@
-/**
- * tm_ptc_run — the StepGate.  All budget/retry/step-id/trajectory logic lives
- * ONLY here (outside the engines), per design §3 ("决策进代码").  Split out
- * of the former monolithic ptc.ts; behavior unchanged.
- */
-import type { RunStore } from "../store.js";
-import type { PtcBridge, PtcStepRecord } from "./contract.js";
-import type { PtcBudgets } from "./budgets.js";
-export interface GateState {
-    calls: number;
-    errors: number;
-    retries: number;
-    steps: PtcStepRecord[];
-    stopReason?: "timeout" | "error-budget" | "call-budget";
-}
-/**
- * Wrap a raw bridge with the StepGate.  Every call: enforce time/call budget
- * (throw a stop that unwinds the program), assign a composite step id
- * `parent.kNN`, retry ≤1 on idempotent phases, record + persist errors, and
- * trip the error budget.
- */
-export declare function createGateBridge(raw: PtcBridge, parent: string, budgets: PtcBudgets, state: GateState, opts: {
-    now: () => number;
-    deadlineAt: number;
-    store?: RunStore;
-    trajectoryParent?: string;
-}): PtcBridge;
-//# sourceMappingURL=gate.d.ts.map

package/dist/tm/ptc/gate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../src/tm/ptc/gate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,KAAK,EAAc,SAAS,EAAiB,aAAa,EAAE,MAAM,eAAe,CAAA;AAExF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAE9C,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,aAAa,EAAE,CAAA;IACtB,UAAU,CAAC,EAAE,SAAS,GAAG,cAAc,GAAG,aAAa,CAAA;CACxD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,SAAS,EACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3F,SAAS,CAkGX"}

package/dist/tm/ptc/gate.js

@@ -1,130 +0,0 @@
-/**
- * tm_ptc_run — the StepGate.  All budget/retry/step-id/trajectory logic lives
- * ONLY here (outside the engines), per design §3 ("决策进代码").  Split out
- * of the former monolithic ptc.ts; behavior unchanged.
- */
-import { estimateTokens, shorten } from "../config.js";
-import { buildRef } from "../refs.js";
-import { PtcStopSignal, RETRYABLE_PHASES, shortRefCode } from "./contract.js";
-/**
- * Wrap a raw bridge with the StepGate.  Every call: enforce time/call budget
- * (throw a stop that unwinds the program), assign a composite step id
- * `parent.kNN`, retry ≤1 on idempotent phases, record + persist errors, and
- * trip the error budget.
- */
-export function createGateBridge(raw, parent, budgets, state, opts) {
-    const { now, deadlineAt, store } = opts;
-    const ptcTag = opts.trajectoryParent ?? parent;
-    let seq = 0;
-    const traj = (e) => store?.appendTrajectory(e);
-    return {
-        async call(tool, args) {
-            if (state.stopReason)
-                throw new PtcStopSignal(state.stopReason);
-            // time budget checked BEFORE the call so a run cannot start a call it
-            // has no time left for.
-            if (now() >= deadlineAt) {
-                state.stopReason = "timeout";
-                throw new PtcStopSignal("timeout");
-            }
-            // call budget: only `maxCalls` bridged calls may be dispatched.
-            if (state.calls >= budgets.maxCalls) {
-                state.stopReason = "call-budget";
-                throw new PtcStopSignal("call-budget");
-            }
-            state.calls++;
-            seq++;
-            const composite = `${parent}.k${String(seq).padStart(2, "0")}`;
-            traj({ tool, step_id: composite, event: "call", ptc: ptcTag });
-            const t0 = now();
-            let res = await raw.call(tool, args);
-            let retried = false;
-            // ≤1 retry on idempotent phases — but never PAST the deadline: a
-            // retryable failure at the wire must not buy extra wall-clock time.
-            // The retry still rides the same budget unit (one call = one unit).
-            if (!res.ok && RETRYABLE_PHASES.includes(res.error.phase) && now() < deadlineAt) {
-                retried = true;
-                state.retries++;
-                res = await raw.call(tool, args);
-            }
-            const ms = now() - t0;
-            if (res.ok) {
-                const { tokens, dest, ref } = describeOk(res.data);
-                state.steps.push({ n: seq, tool, ok: true, ms, tokens, dest, ref });
-                traj({
-                    tool,
-                    step_id: composite,
-                    event: "result",
-                    offloaded: Boolean(ref),
-                    tokens,
-                    ptc: ptcTag,
-                    ...(ref ? { ref } : {}),
-                });
-                return res;
-            }
-            // error path — full text persists to steps/sXXXX.kNN/ (design §4.1)
-            state.errors++;
-            const err = res.error;
-            let errorRef;
-            if (store) {
-                try {
-                    store.writeResult(composite, {
-                        tool,
-                        content: JSON.stringify({ error: err }, null, 2),
-                        tokens: estimateTokens(JSON.stringify(err)),
-                        contentType: "json",
-                        preview: shorten(err.message, 120),
-                        expireAt: Date.now() + 24 * 60 * 60 * 1000,
-                    });
-                    errorRef = buildRef(store.runId, composite);
-                }
-                catch {
-                    /* error persistence is best-effort; never mask the original error */
-                }
-            }
-            state.steps.push({
-                n: seq,
-                tool,
-                ok: false,
-                ms,
-                tokens: 0,
-                dest: "err",
-                phase: err.phase,
-                line: err.line,
-                retry: retried,
-                message: err.message,
-                errorRef,
-            });
-            traj({
-                tool,
-                step_id: composite,
-                event: "error",
-                phase: err.phase,
-                ...(typeof err.line === "number" ? { line: err.line } : {}),
-                retry: retried,
-                ptc: ptcTag,
-                ...(errorRef ? { ref: errorRef } : {}),
-            });
-            if (state.errors >= budgets.maxErrors) {
-                state.stopReason = "error-budget";
-                throw new PtcStopSignal("error-budget");
-            }
-            return res;
-        },
-    };
-}
-/** Describe an ok bridge result for the success table (inline vs handle). */
-function describeOk(data) {
-    if (data && typeof data === "object" && data.offloaded === true) {
-        const o = data;
-        const ref = typeof o.ref === "string" ? o.ref : null;
-        return {
-            tokens: typeof o.tokens === "number" ? o.tokens : 0,
-            dest: ref ? `ref:${shortRefCode(ref)}` : "ref",
-            ref,
-        };
-    }
-    const text = typeof data === "string" ? data : JSON.stringify(data ?? "");
-    return { tokens: estimateTokens(text), dest: "inline", ref: null };
-}
-//# sourceMappingURL=gate.js.map

package/dist/tm/ptc/gate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../src/tm/ptc/gate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAGrC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAW7E;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAc,EACd,MAAc,EACd,OAAmB,EACnB,KAAgB,EAChB,IAA4F;IAE5F,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,IAAI,MAAM,CAAA;IAC9C,IAAI,GAAG,GAAG,CAAC,CAAA;IACX,MAAM,IAAI,GAAG,CAAC,CAA0B,EAAE,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;IACvE,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI;YACnB,IAAI,KAAK,CAAC,UAAU;gBAAE,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YAC/D,sEAAsE;YACtE,wBAAwB;YACxB,IAAI,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC;gBACxB,KAAK,CAAC,UAAU,GAAG,SAAS,CAAA;gBAC5B,MAAM,IAAI,aAAa,CAAC,SAAS,CAAC,CAAA;YACpC,CAAC;YACD,gEAAgE;YAChE,IAAI,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACpC,KAAK,CAAC,UAAU,GAAG,aAAa,CAAA;gBAChC,MAAM,IAAI,aAAa,CAAC,aAAa,CAAC,CAAA;YACxC,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,CAAA;YACb,GAAG,EAAE,CAAA;YACL,MAAM,SAAS,GAAG,GAAG,MAAM,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;YAC9D,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;YAC9D,MAAM,EAAE,GAAG,GAAG,EAAE,CAAA;YAChB,IAAI,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACpC,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,iEAAiE;YACjE,oEAAoE;YACpE,oEAAoE;YACpE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;gBAChF,OAAO,GAAG,IAAI,CAAA;gBACd,KAAK,CAAC,OAAO,EAAE,CAAA;gBACf,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAClC,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,CAAA;YACrB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBAClD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;gBACnE,IAAI,CAAC;oBACH,IAAI;oBACJ,OAAO,EAAE,SAAS;oBAClB,KAAK,EAAE,QAAQ;oBACf,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC;oBACvB,MAAM;oBACN,GAAG,EAAE,MAAM;oBACX,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxB,CAAC,CAAA;gBACF,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,oEAAoE;YACpE,KAAK,CAAC,MAAM,EAAE,CAAA;YACd,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAA;YACrB,IAAI,QAA4B,CAAA;YAChC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE;wBAC3B,IAAI;wBACJ,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;wBAChD,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBAC3C,WAAW,EAAE,MAAM;wBACnB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC;wBAClC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;qBAC3C,CAAC,CAAA;oBACF,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;gBAC7C,CAAC;gBAAC,MAAM,CAAC;oBACP,qEAAqE;gBACvE,CAAC;YACH,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;gBACf,CAAC,EAAE,GAAG;gBACN,IAAI;gBACJ,EAAE,EAAE,KAAK;gBACT,EAAE;gBACF,MAAM,EAAE,CAAC;gBACT,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ;aACT,CAAC,CAAA;YACF,IAAI,CAAC;gBACH,IAAI;gBACJ,OAAO,EAAE,SAAS;gBAClB,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,GAAG,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,KAAK,EAAE,OAAO;gBACd,GAAG,EAAE,MAAM;gBACX,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvC,CAAC,CAAA;YACF,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtC,KAAK,CAAC,UAAU,GAAG,cAAc,CAAA;gBACjC,MAAM,IAAI,aAAa,CAAC,cAAc,CAAC,CAAA;YACzC,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;KACF,CAAA;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAK,IAAgC,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC7F,MAAM,CAAC,GAAG,IAA2C,CAAA;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QACpD,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK;YAC9C,GAAG;SACJ,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACzE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;AACpE,CAAC"}