@warpgogol/forge 4.1.6 → 4.2.1

package/dist/os/program/handlers/lease.js

@@ -0,0 +1,328 @@
+/*
+<MODULE_CONTRACT>
+<purpose>Command handler for program.packet.lease — manages the exclusive
+local executor lease for a sealed packet. Supports start, heartbeat, release,
+and recover actions (RFC-0856).</purpose>
+<non-goals>
+  <item>Do not store raw lease tokens — only the hash is persisted.</item>
+  <item>Do not commit — lease files are untracked.</item>
+  <item>Do not import from @warpgogol/* — forge must remain dependency-free.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0856: initial lease command handler.</item>
+</CHANGE_SUMMARY>
+*/
+import fs from "node:fs";
+import path from "node:path";
+import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
+import { writeFileAtomic } from "../../../src/utils/fs-atomic.js";
+import { discoverProgram, findPacketEntry, resolvePacketPath, parsePacketFile, gitHead, } from "../discovery.js";
+import { generateLeaseToken, hashLeaseToken, readLease, writeLease, deleteLease, findActiveLeases, isLeaseStale, updateHeartbeat, } from "../lease.js";
+import { validateLeaseStartTransition } from "../state.js";
+const DEFAULT_TIMEOUT_SECONDS = 3600; // 1 hour
+export async function runLease(input, context) {
+    const program = input.flags.program;
+    const packetId = input.flags.packet;
+    const action = input.flags.action;
+    if (!program || !packetId || !action) {
+        return leaseFail(program ?? "<missing>", packetId ?? "<missing>", action ?? "<missing>", [
+            { rule: "PROGRAM-PACKET-01", message: "--program, --packet, and --action are required" },
+        ]);
+    }
+    switch (action) {
+        case "start":
+            return leaseStart(input, context, program, packetId);
+        case "heartbeat":
+            return leaseHeartbeat(context, program, packetId, input);
+        case "release":
+            return leaseRelease(context, program, packetId, input);
+        case "recover":
+            return leaseRecover(input, context, program, packetId);
+        default:
+            return leaseFail(program, packetId, action, [
+                { rule: "PROGRAM-PACKET-01", message: `unknown action: ${action}` },
+            ]);
+    }
+}
+// ---------------------------------------------------------------------------
+// start
+// ---------------------------------------------------------------------------
+async function leaseStart(input, context, program, packetId) {
+    const executor = input.flags.executor;
+    if (!executor) {
+        return leaseFail(program, packetId, "start", [
+            { rule: "PROGRAM-PACKET-01", message: "--executor is required for --action=start" },
+        ]);
+    }
+    const phase = input.flags.phase ?? "execution";
+    const { workspaceRoot } = context;
+    // Discover program
+    let programLocation;
+    try {
+        programLocation = discoverProgram(workspaceRoot, program);
+    }
+    catch (err) {
+        return leaseFail(program, packetId, "start", [
+            { rule: "PROGRAM-PACKET-01", message: String(err.message) },
+        ]);
+    }
+    if (!programLocation) {
+        return leaseFail(program, packetId, "start", [
+            { rule: "PROGRAM-PACKET-01", message: `program ${program} not found` },
+        ]);
+    }
+    const { manifest, programDir } = programLocation;
+    const entry = findPacketEntry(manifest, packetId);
+    if (!entry) {
+        return leaseFail(program, packetId, "start", [
+            { rule: "PROGRAM-PACKET-01", message: `packet ${packetId} not found` },
+        ]);
+    }
+    let packet;
+    try {
+        packet = parsePacketFile(resolvePacketPath(programDir, entry));
+    }
+    catch (err) {
+        return leaseFail(program, packetId, "start", [
+            { rule: "PROGRAM-PACKET-01", message: String(err.message) },
+        ]);
+    }
+    // Check for existing leases
+    const activeLeases = findActiveLeases(workspaceRoot, program);
+    const hasActiveLease = activeLeases.some((l) => l.packetId === packetId && !isLeaseStale(l.lease));
+    let head = "";
+    try {
+        head = gitHead(workspaceRoot);
+    }
+    catch {
+        return leaseFail(program, packetId, "start", [
+            { rule: "PROGRAM-PACKET-02", message: "failed to read git HEAD" },
+        ]);
+    }
+    const violations = validateLeaseStartTransition(manifest, entry, packet, {
+        head,
+        steward: packet.steward,
+        actor: executor,
+        hasActiveLease,
+    });
+    if (violations.length > 0) {
+        return leaseFail(program, packetId, "start", violations);
+    }
+    // Generate lease
+    const rawToken = generateLeaseToken();
+    const tokenHash = hashLeaseToken(rawToken);
+    const now = new Date().toISOString();
+    const lease = {
+        schema: "forge/program-packet-lease@1",
+        program,
+        packetId,
+        phase: phase,
+        actor: executor,
+        baseCommit: head,
+        sealCommit: entry.sealCommit ?? null,
+        tokenHash,
+        startedAt: now,
+        heartbeatAt: now,
+        timeoutSeconds: DEFAULT_TIMEOUT_SECONDS,
+    };
+    writeLease(workspaceRoot, program, lease);
+    // Return raw token ONLY in data.leaseToken — never in logs.
+    return {
+        data: {
+            command: "program.packet.lease",
+            status: "pass",
+            program,
+            packetId,
+            action: "start",
+            leaseToken: rawToken,
+            violations: [],
+        },
+        exitCode: 0,
+        summary: `program.packet.lease: ${packetId} lease started for ${executor}`,
+        nextSteps: [
+            {
+                action: `Implement the packet, then complete: pnpm exec forge run program.packet.complete --packet ${packetId}`,
+                kind: "optional",
+            },
+        ],
+    };
+}
+// ---------------------------------------------------------------------------
+// heartbeat
+// ---------------------------------------------------------------------------
+async function leaseHeartbeat(context, program, packetId, input) {
+    const leaseToken = input.flags["lease-token"];
+    if (!leaseToken) {
+        return leaseFail(program, packetId, "heartbeat", [
+            { rule: "PROGRAM-PACKET-01", message: "--lease-token is required for --action=heartbeat" },
+        ]);
+    }
+    const { workspaceRoot } = context;
+    const existing = readLease(workspaceRoot, program, packetId);
+    if (!existing) {
+        return leaseFail(program, packetId, "heartbeat", [
+            { rule: "PROGRAM-PACKET-05", message: "no lease found" },
+        ]);
+    }
+    const tokenHash = hashLeaseToken(leaseToken);
+    if (tokenHash !== existing.tokenHash) {
+        return leaseFail(program, packetId, "heartbeat", [
+            { rule: "PROGRAM-PACKET-11", message: "token mismatch" },
+        ]);
+    }
+    updateHeartbeat(workspaceRoot, program, packetId);
+    return {
+        data: {
+            command: "program.packet.lease",
+            status: "pass",
+            program,
+            packetId,
+            action: "heartbeat",
+            violations: [],
+        },
+        exitCode: 0,
+        summary: `program.packet.lease: ${packetId} heartbeat updated`,
+    };
+}
+// ---------------------------------------------------------------------------
+// release
+// ---------------------------------------------------------------------------
+async function leaseRelease(context, program, packetId, input) {
+    const leaseToken = input.flags["lease-token"];
+    if (!leaseToken) {
+        return leaseFail(program, packetId, "release", [
+            { rule: "PROGRAM-PACKET-01", message: "--lease-token is required for --action=release" },
+        ]);
+    }
+    const { workspaceRoot } = context;
+    const existing = readLease(workspaceRoot, program, packetId);
+    if (!existing) {
+        return leaseFail(program, packetId, "release", [
+            { rule: "PROGRAM-PACKET-05", message: "no lease found" },
+        ]);
+    }
+    const tokenHash = hashLeaseToken(leaseToken);
+    if (tokenHash !== existing.tokenHash) {
+        return leaseFail(program, packetId, "release", [
+            { rule: "PROGRAM-PACKET-11", message: "token mismatch" },
+        ]);
+    }
+    deleteLease(workspaceRoot, program, packetId);
+    return {
+        data: {
+            command: "program.packet.lease",
+            status: "pass",
+            program,
+            packetId,
+            action: "release",
+            violations: [],
+        },
+        exitCode: 0,
+        summary: `program.packet.lease: ${packetId} lease released`,
+    };
+}
+// ---------------------------------------------------------------------------
+// recover
+// ---------------------------------------------------------------------------
+async function leaseRecover(input, context, program, packetId) {
+    const steward = input.flags.steward;
+    const reason = input.flags.reason;
+    if (!steward || !reason) {
+        return leaseFail(program, packetId, "recover", [
+            {
+                rule: "PROGRAM-PACKET-01",
+                message: "--steward and --reason are required for --action=recover",
+            },
+        ]);
+    }
+    const { workspaceRoot } = context;
+    const existing = readLease(workspaceRoot, program, packetId);
+    if (!existing) {
+        return leaseFail(program, packetId, "recover", [
+            { rule: "PROGRAM-PACKET-05", message: "no lease to recover" },
+        ]);
+    }
+    // Only recover stale leases
+    if (!isLeaseStale(existing)) {
+        return leaseFail(program, packetId, "recover", [
+            { rule: "PROGRAM-PACKET-05", message: "lease is not stale — cannot recover active lease" },
+        ]);
+    }
+    // Write recovery record
+    const recoveryDir = path.join(workspaceRoot, "docs", "plans", programLocationDir(workspaceRoot, program), "recoveries");
+    fs.mkdirSync(recoveryDir, { recursive: true });
+    const head = gitHead(workspaceRoot);
+    const recovery = {
+        schema: "forge/program-packet-recovery@1",
+        program,
+        packetId,
+        previousLeaseDigest: existing.tokenHash,
+        reason,
+        actor: steward,
+        observedHead: head,
+        target: "blocked",
+        recoveredAt: new Date().toISOString(),
+    };
+    const recoveryPath = path.join(recoveryDir, `${packetId}-${Date.now()}.json`);
+    writeFileAtomic(recoveryPath, JSON.stringify(recovery, null, 2) + "\n");
+    // Delete the stale lease
+    deleteLease(workspaceRoot, program, packetId);
+    // Update manifest: packet state → blocked
+    const manifestPath = path.join(workspaceRoot, "docs", "plans", programLocationDir(workspaceRoot, program), "program.yaml");
+    const manifestRaw = fs.readFileSync(manifestPath, "utf8");
+    const manifestParsed = parseYaml(manifestRaw);
+    const idx = manifestParsed.packets.findIndex((p) => p.packetId === packetId);
+    if (idx !== -1) {
+        manifestParsed.packets[idx].state = "blocked";
+        writeFileAtomic(manifestPath, stringifyYaml(manifestParsed));
+    }
+    return {
+        data: {
+            command: "program.packet.lease",
+            status: "pass",
+            program,
+            packetId,
+            action: "recover",
+            violations: [],
+        },
+        exitCode: 0,
+        summary: `program.packet.lease: ${packetId} recovered (stale lease cleared, recovery record written)`,
+    };
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function programLocationDir(workspaceRoot, program) {
+    // Find the directory name under docs/plans/ that contains this program
+    const plansDir = path.join(workspaceRoot, "docs", "plans");
+    if (!fs.existsSync(plansDir))
+        return program;
+    for (const entry of fs.readdirSync(plansDir, { withFileTypes: true })) {
+        if (!entry.isDirectory())
+            continue;
+        const manifestPath = path.join(plansDir, entry.name, "program.yaml");
+        if (!fs.existsSync(manifestPath))
+            continue;
+        const raw = fs.readFileSync(manifestPath, "utf8");
+        const parsed = parseYaml(raw);
+        if (parsed.program === program)
+            return entry.name;
+    }
+    return program;
+}
+function leaseFail(program, packetId, action, violations) {
+    return {
+        data: {
+            command: "program.packet.lease",
+            status: "fail",
+            program,
+            packetId,
+            action,
+            violations,
+        },
+        exitCode: 1,
+        summary: `program.packet.lease: ${packetId} ${action} failed with ${violations.length} violation${violations.length === 1 ? "" : "s"}`,
+    };
+}
+//# sourceMappingURL=lease.js.map

package/dist/os/program/handlers/lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.js","sourceRoot":"","sources":["../../../../os/program/handlers/lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AAEF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAMtE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,OAAO,GACR,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,SAAS,EACT,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,4BAA4B,EAAwB,MAAM,aAAa,CAAC;AAajF,MAAM,uBAAuB,GAAG,IAAI,CAAC,CAAC,SAAS;AAE/C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAwB,EACxB,OAA4B;IAE5B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAA6B,CAAC;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAA4B,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAA4B,CAAC;IAExD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,OAAO,IAAI,WAAW,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,IAAI,WAAW,EAAE;YACvF,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,gDAAgD,EAAE;SACzF,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvD,KAAK,WAAW;YACd,OAAO,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3D,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzD,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzD;YACE,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;gBAC1C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,mBAAmB,MAAM,EAAE,EAAE;aACpE,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,KAAK,UAAU,UAAU,CACvB,KAAwB,EACxB,OAA4B,EAC5B,OAAe,EACf,QAAgB;IAEhB,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,QAA8B,CAAC;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE;YAC3C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,2CAA2C,EAAE;SACpF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAI,KAAK,CAAC,KAAK,CAAC,KAA4B,IAAI,WAAW,CAAC;IAEvE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAElC,mBAAmB;IACnB,IAAI,eAAe,CAAC;IACpB,IAAI,CAAC;QACH,eAAe,GAAG,eAAe,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE;YAC3C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE;YAC3C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,WAAW,OAAO,YAAY,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC;IACjD,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE;YAC3C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,UAAU,QAAQ,YAAY,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE;YAC3C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,4BAA4B;IAC5B,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CACzD,CAAC;IAEF,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE;YAC3C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,yBAAyB,EAAE;SAClE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE;QACvE,IAAI;QACJ,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,QAAuC;QAC9C,cAAc;KACf,CAAC,CAAC;IAEH,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED,iBAAiB;IACjB,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,KAAK,GAAuB;QAChC,MAAM,EAAE,8BAA8B;QACtC,OAAO;QACP,QAAQ;QACR,KAAK,EAAE,KAAoC;QAC3C,KAAK,EAAE,QAAuC;QAC9C,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACpC,SAAS;QACT,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,GAAG;QAChB,cAAc,EAAE,uBAAuB;KACxC,CAAC;IAEF,UAAU,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAE1C,4DAA4D;IAC5D,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,sBAAsB;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,QAAQ;YACR,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,EAAE;SACf;QACD,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,yBAAyB,QAAQ,sBAAsB,QAAQ,EAAE;QAC1E,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,6FAA6F,QAAQ,EAAE;gBAC/G,IAAI,EAAE,UAAU;aACjB;SACF;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,KAAK,UAAU,cAAc,CAC3B,OAA4B,EAC5B,OAAe,EACf,QAAgB,EAChB,KAAwB;IAExB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAuB,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;YAC/C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,kDAAkD,EAAE;SAC3F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;YAC/C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;YAC/C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAElD,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,sBAAsB;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,QAAQ;YACR,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,EAAE;SACf;QACD,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,yBAAyB,QAAQ,oBAAoB;KAC/D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,KAAK,UAAU,YAAY,CACzB,OAA4B,EAC5B,OAAe,EACf,QAAgB,EAChB,KAAwB;IAExB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAuB,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC7C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,gDAAgD,EAAE;SACzF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC7C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC7C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE9C,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,sBAAsB;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,QAAQ;YACR,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,EAAE;SACf;QACD,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,yBAAyB,QAAQ,iBAAiB;KAC5D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,KAAK,UAAU,YAAY,CACzB,KAAwB,EACxB,OAA4B,EAC5B,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAA6B,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAA4B,CAAC;IACxD,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC7C;gBACE,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,0DAA0D;aACpE;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC7C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,qBAAqB,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC7C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,kDAAkD,EAAE;SAC3F,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB;IACxB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAC3B,aAAa,EACb,MAAM,EACN,OAAO,EACP,kBAAkB,CAAC,aAAa,EAAE,OAAO,CAAC,EAC1C,YAAY,CACb,CAAC;IACF,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAmB;QAC/B,MAAM,EAAE,iCAAiC;QACzC,OAAO;QACP,QAAQ;QACR,mBAAmB,EAAE,QAAQ,CAAC,SAAS;QACvC,MAAM;QACN,KAAK,EAAE,OAAkC;QACzC,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IAEF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9E,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAExE,yBAAyB;IACzB,WAAW,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE9C,0CAA0C;IAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAC5B,aAAa,EACb,MAAM,EACN,OAAO,EACP,kBAAkB,CAAC,aAAa,EAAE,OAAO,CAAC,EAC1C,cAAc,CACf,CAAC;IACF,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,CAAoB,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC7E,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,SAAS,CAAC;QAC9C,eAAe,CAAC,YAAY,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,sBAAsB;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,QAAQ;YACR,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,EAAE;SACf;QACD,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,yBAAyB,QAAQ,2DAA2D;KACtG,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,kBAAkB,CAAC,aAAqB,EAAE,OAAe;IAChE,uEAAuE;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACrE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QAC3C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAA4B,CAAC;QACzD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IACpD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAChB,OAAe,EACf,QAAgB,EAChB,MAAc,EACd,UAA6B;IAE7B,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,sBAAsB;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,QAAQ;YACR,MAAM;YACN,UAAU;SACX;QACD,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,yBAAyB,QAAQ,IAAI,MAAM,gBAAgB,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;KACvI,CAAC;AACJ,CAAC"}

package/dist/os/program/handlers/seal.d.ts

@@ -0,0 +1,12 @@
+import type { ForgeCommandInput, ForgeCommandResult, ForgeRuntimeContext } from "../../../src/types.ts";
+import { type PacketViolation } from "../state.ts";
+export interface SealResultData {
+    command: string;
+    status: "pass" | "fail";
+    program: string;
+    packetId: string;
+    filesModified: string[];
+    violations: PacketViolation[];
+}
+export declare function runSeal(input: ForgeCommandInput, context: ForgeRuntimeContext): Promise<ForgeCommandResult<SealResultData>>;
+//# sourceMappingURL=seal.d.ts.map

package/dist/os/program/handlers/seal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.d.ts","sourceRoot":"","sources":["../../../../os/program/handlers/seal.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAa/B,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAG3E,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B;AAED,wBAAsB,OAAO,CAC3B,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAsL7C"}

package/dist/os/program/handlers/seal.js

@@ -0,0 +1,277 @@
+/*
+<MODULE_CONTRACT>
+<purpose>Command handler for program.packet.seal — Steward finalizes a packet
+against the predecessor's completion commit, updates packet state from draft
+to sealed, and records the seal in the program manifest (RFC-0856).</purpose>
+<non-goals>
+  <item>Do not commit — seal writes files only; canonical commit is separate.</item>
+  <item>Do not import from @warpgogol/* — forge must remain dependency-free.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0856: initial seal command handler.</item>
+  <item>RFC-0857: reciprocal specRef/materializedAs mapping verification for spec-node packets (AC-7).</item>
+</CHANGE_SUMMARY>
+*/
+import fs from "node:fs";
+import path from "node:path";
+import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
+import { writeFileAtomic } from "../../../src/utils/fs-atomic.js";
+import { discoverProgram, findPacketEntry, resolvePacketPath, parsePacketFile, verifyNormativeSources, gitBranch, gitHead, gitIsClean, } from "../discovery.js";
+import { findActiveLeases, isLeaseStale } from "../lease.js";
+import { validateSealTransition } from "../state.js";
+export async function runSeal(input, context) {
+    const program = input.flags.program;
+    const packetId = input.flags.packet;
+    const steward = input.flags.steward;
+    const _idempotencyKey = input.flags["idempotency-key"];
+    if (!program || !packetId || !steward) {
+        return {
+            data: {
+                command: "program.packet.seal",
+                status: "fail",
+                program: program ?? "<missing>",
+                packetId: packetId ?? "<missing>",
+                filesModified: [],
+                violations: [
+                    {
+                        rule: "PROGRAM-PACKET-01",
+                        message: "--program, --packet, and --steward are required",
+                    },
+                ],
+            },
+            exitCode: 1,
+            summary: "program.packet.seal: missing required flags",
+        };
+    }
+    const { workspaceRoot } = context;
+    // Discover program
+    let programLocation;
+    try {
+        programLocation = discoverProgram(workspaceRoot, program);
+    }
+    catch (err) {
+        return sealFail(program, packetId, [
+            { rule: "PROGRAM-PACKET-01", message: String(err.message) },
+        ]);
+    }
+    if (!programLocation) {
+        return sealFail(program, packetId, [
+            { rule: "PROGRAM-PACKET-01", message: `program ${program} not found` },
+        ]);
+    }
+    const { manifest, manifestPath, programDir } = programLocation;
+    // Find packet entry
+    const entry = findPacketEntry(manifest, packetId);
+    if (!entry) {
+        return sealFail(program, packetId, [
+            { rule: "PROGRAM-PACKET-01", message: `packet ${packetId} not found` },
+        ]);
+    }
+    // Parse packet file
+    let packet;
+    try {
+        packet = parsePacketFile(resolvePacketPath(programDir, entry));
+    }
+    catch (err) {
+        return sealFail(program, packetId, [
+            { rule: "PROGRAM-PACKET-01", message: String(err.message) },
+        ]);
+    }
+    // Verify normative source hashes
+    const hashViolations = verifyNormativeSources(workspaceRoot, packet);
+    if (hashViolations.length > 0) {
+        return sealFail(program, packetId, hashViolations.map((v) => ({
+            rule: "PROGRAM-PACKET-07",
+            path: v.path,
+            message: `normative source hash mismatch: expected ${v.expected}, got ${v.actual}`,
+        })));
+    }
+    // Git state
+    let branch = "";
+    let head = "";
+    try {
+        branch = gitBranch(workspaceRoot);
+        head = gitHead(workspaceRoot);
+    }
+    catch {
+        return sealFail(program, packetId, [
+            { rule: "PROGRAM-PACKET-02", message: "failed to read git state" },
+        ]);
+    }
+    // Check for active leases
+    const activeLeases = findActiveLeases(workspaceRoot, program);
+    const hasActiveLease = activeLeases.some((l) => l.packetId === packetId && !isLeaseStale(l.lease));
+    let isClean = false;
+    try {
+        isClean = gitIsClean(workspaceRoot);
+    }
+    catch {
+        // ignore
+    }
+    // Validate transition
+    const violations = validateSealTransition(manifest, entry, packet, {
+        branch,
+        head,
+        isClean,
+        hasActiveLease,
+    });
+    if (violations.length > 0) {
+        return sealFail(program, packetId, violations);
+    }
+    // RFC-0857 AC-7: For spec-node packets, verify reciprocal specRef/materializedAs mapping
+    if (entry.decisionKind === "spec-node" && entry.resolvedRfc) {
+        const specViolation = verifySpecNodeMapping(workspaceRoot, entry);
+        if (specViolation) {
+            return sealFail(program, packetId, [specViolation]);
+        }
+    }
+    // --- Perform seal ---
+    const filesModified = [];
+    // 1. Update packet file: state → sealed, baseCommit → head (for non-bootstrap)
+    const packetPath = resolvePacketPath(programDir, entry);
+    const packetRaw = fs.readFileSync(packetPath, "utf8");
+    const packetFmMatch = packetRaw.match(/^---\n([\s\S]*?)\n---/);
+    if (!packetFmMatch) {
+        return sealFail(program, packetId, [
+            { rule: "PROGRAM-PACKET-01", message: "missing frontmatter in packet file" },
+        ]);
+    }
+    const packetFm = parseYaml(packetFmMatch[1]);
+    packetFm.state = "sealed";
+    if (entry.dependsOnPacket === null) {
+        // Bootstrap packet: baseCommit stays null (set by completion)
+    }
+    else {
+        packetFm.baseCommit = head;
+    }
+    const newPacketFm = stringifyYaml(packetFm);
+    const newPacketRaw = `---\n${newPacketFm}---\n${packetRaw.slice(packetFmMatch[0].length)}`;
+    writeFileAtomic(packetPath, newPacketRaw);
+    filesModified.push(path.relative(workspaceRoot, packetPath));
+    // 2. Update program manifest: packet state → sealed
+    const manifestRaw = fs.readFileSync(manifestPath, "utf8");
+    const manifestParsed = parseYaml(manifestRaw);
+    const packetIdx = manifestParsed.packets.findIndex((p) => p.packetId === packetId);
+    if (packetIdx === -1) {
+        return sealFail(program, packetId, [
+            { rule: "PROGRAM-PACKET-01", message: "packet not found in manifest" },
+        ]);
+    }
+    manifestParsed.packets[packetIdx].state = "sealed";
+    if (entry.dependsOnPacket !== null) {
+        manifestParsed.packets[packetIdx].baseCommit = head;
+    }
+    const newManifestRaw = stringifyYaml(manifestParsed);
+    writeFileAtomic(manifestPath, newManifestRaw);
+    filesModified.push(path.relative(workspaceRoot, manifestPath));
+    return {
+        data: {
+            command: "program.packet.seal",
+            status: "pass",
+            program,
+            packetId,
+            filesModified,
+            violations: [],
+        },
+        exitCode: 0,
+        summary: `program.packet.seal: ${packetId} sealed on ${branch}@${head.slice(0, 8)}`,
+        nextSteps: [
+            {
+                action: `Start the lease: pnpm exec forge run program.packet.lease --packet ${packetId} --action start --executor <executor>`,
+                kind: "optional",
+            },
+        ],
+    };
+}
+function sealFail(program, packetId, violations) {
+    return {
+        data: {
+            command: "program.packet.seal",
+            status: "fail",
+            program,
+            packetId,
+            filesModified: [],
+            violations,
+        },
+        exitCode: 1,
+        summary: `program.packet.seal: ${packetId} failed with ${violations.length} violation${violations.length === 1 ? "" : "s"}`,
+        nextSteps: [
+            {
+                action: `Fix the ${violations.length} violation${violations.length === 1 ? "" : "s"} above, then re-run: pnpm exec forge run program.packet.seal --packet ${packetId}`,
+                kind: "required",
+            },
+        ],
+    };
+}
+// ---------------------------------------------------------------------------
+// RFC-0857 AC-7: Reciprocal specRef/materializedAs mapping verification
+// ---------------------------------------------------------------------------
+function verifySpecNodeMapping(workspaceRoot, entry) {
+    const governingDecision = entry.governingDecision;
+    const slashIdx = governingDecision.indexOf("/");
+    if (slashIdx === -1) {
+        return {
+            rule: "PROGRAM-PACKET-12",
+            message: `spec-node governingDecision "${governingDecision}" is not in <spec-id>/<node-id> format`,
+        };
+    }
+    const specId = governingDecision.slice(0, slashIdx);
+    const nodeId = governingDecision.slice(slashIdx + 1);
+    // Check forge-spec.yaml for materializedAs matching resolvedRfc
+    const specPath = path.join(workspaceRoot, "docs", "specs", specId, "forge-spec.yaml");
+    if (!fs.existsSync(specPath)) {
+        return {
+            rule: "PROGRAM-PACKET-12",
+            message: `spec file not found: docs/specs/${specId}/forge-spec.yaml`,
+        };
+    }
+    const specRaw = fs.readFileSync(specPath, "utf8");
+    const specParsed = parseYaml(specRaw);
+    const specNode = specParsed.rfcs?.find((r) => r.id === nodeId);
+    if (!specNode) {
+        return {
+            rule: "PROGRAM-PACKET-12",
+            message: `spec node ${nodeId} not found in docs/specs/${specId}/forge-spec.yaml`,
+        };
+    }
+    if (specNode.materializedAs !== entry.resolvedRfc) {
+        return {
+            rule: "PROGRAM-PACKET-12",
+            message: `materializedAs (${specNode.materializedAs ?? "null"}) does not match resolvedRfc (${entry.resolvedRfc}) for ${nodeId}`,
+        };
+    }
+    // Check RFC file for reciprocal specRef
+    const rfcPath = path.join(workspaceRoot, "docs", "rfcs", `${entry.resolvedRfc.toLowerCase()}.md`);
+    if (!fs.existsSync(rfcPath)) {
+        return {
+            rule: "PROGRAM-PACKET-12",
+            message: `RFC file not found: docs/rfcs/${entry.resolvedRfc.toLowerCase()}.md`,
+        };
+    }
+    const rfcRaw = fs.readFileSync(rfcPath, "utf8");
+    const rfcFmMatch = rfcRaw.match(/^---\n([\s\S]*?)\n---/);
+    if (!rfcFmMatch) {
+        return {
+            rule: "PROGRAM-PACKET-12",
+            message: `missing frontmatter in ${entry.resolvedRfc}`,
+        };
+    }
+    const rfcFm = parseYaml(rfcFmMatch[1]);
+    const expectedSpecRef = `${specId}/${nodeId}`;
+    if (rfcFm.specRef !== expectedSpecRef) {
+        return {
+            rule: "PROGRAM-PACKET-12",
+            message: `specRef (${rfcFm.specRef ?? "null"}) does not match expected ${expectedSpecRef} in ${entry.resolvedRfc}`,
+        };
+    }
+    // RFC must be accepted or implemented
+    if (rfcFm.status !== "accepted" && rfcFm.status !== "implemented") {
+        return {
+            rule: "PROGRAM-PACKET-12",
+            message: `${entry.resolvedRfc} status is "${rfcFm.status}", expected "accepted" or "implemented"`,
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=seal.js.map

package/dist/os/program/handlers/seal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.js","sourceRoot":"","sources":["../../../../os/program/handlers/seal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AAEF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAMtE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,SAAS,EACT,OAAO,EACP,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAwB,MAAM,aAAa,CAAC;AAY3E,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,KAAwB,EACxB,OAA4B;IAE5B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAA6B,CAAC;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAA4B,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAA6B,CAAC;IAC1D,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAuB,CAAC;IAE7E,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,qBAAqB;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,OAAO,IAAI,WAAW;gBAC/B,QAAQ,EAAE,QAAQ,IAAI,WAAW;gBACjC,aAAa,EAAE,EAAE;gBACjB,UAAU,EAAE;oBACV;wBACE,IAAI,EAAE,mBAAmB;wBACzB,OAAO,EAAE,iDAAiD;qBAC3D;iBACF;aACF;YACD,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,6CAA6C;SACvD,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAElC,mBAAmB;IACnB,IAAI,eAAe,CAAC;IACpB,IAAI,CAAC;QACH,eAAe,GAAG,eAAe,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,WAAW,OAAO,YAAY,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC;IAE/D,oBAAoB;IACpB,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,UAAU,QAAQ,YAAY,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB;IACpB,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,MAAM,cAAc,GAAG,sBAAsB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACrE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,QAAQ,CACb,OAAO,EACP,QAAQ,EACR,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,4CAA4C,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,MAAM,EAAE;SACnF,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,YAAY;IACZ,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;QAClC,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,0BAA0B,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;IAED,0BAA0B;IAC1B,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CACzD,CAAC;IAEF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,sBAAsB;IACtB,MAAM,UAAU,GAAG,sBAAsB,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE;QACjE,MAAM;QACN,IAAI;QACJ,OAAO;QACP,cAAc;KACf,CAAC,CAAC;IAEH,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,yFAAyF;IACzF,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC5D,MAAM,aAAa,GAAG,qBAAqB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,+EAA+E;IAC/E,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC/D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,oCAAoC,EAAE;SAC7E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAA4B,CAAC;IACxE,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC;IAC1B,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACnC,8DAA8D;IAChE,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;IAC7B,CAAC;IACD,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,QAAQ,WAAW,QAAQ,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3F,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC1C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;IAE7D,oDAAoD;IACpD,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,CAAoB,CAAC;IACjE,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACnF,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,8BAA8B,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IACD,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC;IACnD,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACnC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC;IACtD,CAAC;IACD,MAAM,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;IACrD,eAAe,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;IAE/D,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,QAAQ;YACR,aAAa;YACb,UAAU,EAAE,EAAE;SACf;QACD,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,wBAAwB,QAAQ,cAAc,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QACnF,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,sEAAsE,QAAQ,uCAAuC;gBAC7H,IAAI,EAAE,UAAU;aACjB;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,OAAe,EACf,QAAgB,EAChB,UAA6B;IAE7B,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,QAAQ;YACR,aAAa,EAAE,EAAE;YACjB,UAAU;SACX;QACD,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,wBAAwB,QAAQ,gBAAgB,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;QAC3H,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,WAAW,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,yEAAyE,QAAQ,EAAE;gBACtK,IAAI,EAAE,UAAU;aACjB;SACF;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAE9E,SAAS,qBAAqB,CAC5B,aAAqB,EACrB,KAA8B;IAE9B,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAClD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,gCAAgC,iBAAiB,wCAAwC;SACnG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAErD,gEAAgE;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,mCAAmC,MAAM,kBAAkB;SACrE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAEnC,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,aAAa,MAAM,4BAA4B,MAAM,kBAAkB;SACjF,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QAClD,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,mBAAmB,QAAQ,CAAC,cAAc,IAAI,MAAM,iCAAiC,KAAK,CAAC,WAAW,SAAS,MAAM,EAAE;SACjI,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAClG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,iCAAiC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK;SAC/E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,0BAA0B,KAAK,CAAC,WAAW,EAAE;SACvD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAA0C,CAAC;IAChF,MAAM,eAAe,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,YAAY,KAAK,CAAC,OAAO,IAAI,MAAM,6BAA6B,eAAe,OAAO,KAAK,CAAC,WAAW,EAAE;SACnH,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClE,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,GAAG,KAAK,CAAC,WAAW,eAAe,KAAK,CAAC,MAAM,yCAAyC;SAClG,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}