@wudao-org/server 0.0.0-stage → 0.4.21

package/dist/recovery.d.ts

@@ -0,0 +1,199 @@
+/** ω99-242 — the admission start interval (invariant 6: ≥2s). */
+export declare const RECOVERY_INTERVAL_MS = 2000;
+/** ω99-242 — the in-flight recovery ceiling (invariant 6: ≤2). */
+export declare const RECOVERY_CONCURRENCY = 2;
+/** ω99-242 — backlogs at or below this size are observed in full each tick;
+ *  larger ones rotate two per tick so observation stays bounded and fair. */
+export declare const RECOVERY_ROTATION_BOUND = 4;
+/** One journal line. `at` is the coordinator clock (ms). */
+export type RecoveryJournalEntry = {
+    readonly type: "admit";
+    readonly sessionId: string;
+    readonly at: number;
+    readonly user?: boolean;
+} | {
+    readonly type: "checkpoint";
+    readonly sessionId: string;
+    readonly at: number;
+} | {
+    readonly type: "claim";
+    readonly sessionId: string;
+    readonly at: number;
+} | {
+    readonly type: "settle";
+    readonly sessionId: string;
+    readonly at: number;
+    readonly verifiedDone: number;
+    readonly remaining: number;
+} | {
+    readonly type: "cancel";
+    readonly sessionId: string;
+    readonly at: number;
+    readonly reason: string;
+};
+/** The per-session fold of the journal (file order wins; see foldJournal). */
+export interface FoldSessionState {
+    readonly sessionId: string;
+    /** The last admit/checkpoint/claim/settle still stands (no later cancel). */
+    tracked: boolean;
+    /** A shutdown checkpoint stands (the freeze intent is unconsumed). */
+    checkpointed: boolean;
+    /** A recovery claim stands without its settle — the lost-ack marker. */
+    claimPending: boolean;
+    /** Counts carried by the last settle (the web's X/Y source). */
+    verifiedDone?: number;
+    remaining?: number;
+    lastAt: number;
+}
+export interface RecoveryJournalFold {
+    readonly sessions: ReadonlyMap<string, FoldSessionState>;
+    /** Lines that yielded no entry — unparseable, empty, or ill-shaped. */
+    readonly skippedLines: number;
+}
+/** Fold journal lines (file order) into per-session state. Pure: same lines →
+ *  same fold. Semantics per entry type:
+ *  - admit — tracking intent (a run admission happened; `user` marks a manual
+ *    one, which CONSUMES a standing checkpoint: the user's takeover supersedes
+ *    the shutdown freeze);
+ *  - checkpoint — the graceful-shutdown freeze stands;
+ *  - claim — a recovery claim stands, superseding any checkpoint;
+ *  - settle — the admission ACK: clears claim/checkpoint, keeps tracking,
+ *    carries the reconciliation counts;
+ *  - cancel — intent withdrawn (terminal / user-input / admission-failed):
+ *    untracks until a LATER admit re-tracks (file order decides). */
+export declare function foldRecoveryLines(lines: readonly string[]): RecoveryJournalFold;
+export interface RecoveryJournal {
+    readonly path: string;
+    append(entry: RecoveryJournalEntry): Promise<void>;
+    fold(): Promise<RecoveryJournalFold>;
+}
+/** Open (or create) the coordinator journal at `path`. Appends only — the
+ *  file's earlier bytes are never rewritten (append-only law). A missing
+ *  directory is created on first append; a missing/unreadable file folds to
+ *  the empty state (nothing to recover — an honest zero, not an error). */
+export declare function createRecoveryJournal(path: string): RecoveryJournal;
+/** One observation of a candidate session — the port's evidence bundle. */
+export interface RecoveryObservation {
+    /** Another LIVE process holds the session's run lease → active (observe
+     *  only, never re-send into a live engine). */
+    readonly leaseHeldByOther: boolean;
+    /** A permission ask is pending on the session → blocked (may unlock via a
+     *  permission reply — invariant 7's exception). ω99-248: #8 — the evidence
+     *  is now persistent for non-current sessions (the session's own
+     *  permission_ask record) — the verdict survives restarts. */
+    readonly permissionPending: boolean;
+    /** The persisted pending ask's evidence (RECORD-sourced only: a
+     *  cross-restart waiting-for-human marker for the web's morning line).
+     *  Absent when the session is not record-blocked. Evidence, never
+     *  authorization: nothing auto-allows off it. */
+    readonly pendingAsk?: {
+        readonly toolName: string;
+        readonly summary: string;
+        readonly question: string;
+    };
+    /** A delegated child task is unresolved (父等子) → blocked (the parent is
+     *  not independently recovered). */
+    readonly childPending: boolean;
+    /** The same unfinished turn stands in the session record (half-turn
+     *  evidence: orphaned tool calls, or a trailing user turn with no reply). */
+    readonly turnOpen: boolean;
+    /** The mission ledger is terminal (completed/abandoned/stale) → terminal. */
+    readonly missionTerminal: boolean;
+    /** The mission DAG topological rank of the session's bound task
+     *  (Number.POSITIVE_INFINITY = mission-unbound). */
+    readonly dagRank: number;
+}
+export interface RecoveryClassification {
+    readonly state: "terminal" | "blocked" | "active" | "unfinished";
+    readonly recoverable: boolean;
+}
+/** Classify one observation. Rule order is the judgment discipline:
+ *  1. a standing claim without settle (lost ack) → blocked, never re-admitted
+ *     — even across restarts (invariant 2; trumps every other signal);
+ *  2. another live process owns the session → active (observe only);
+ *  3. the mission ledger is terminal → terminal (untouched);
+ *  4. permission pending / delegated child unresolved → blocked;
+ *  5. our own shutdown checkpoint stands, or the same turn is open →
+ *     unfinished (recoverable) — idle alone is NOT evidence (negative pin);
+ *  6. otherwise terminal. */
+export declare function classifyRecovery(observation: RecoveryObservation, journal: {
+    readonly checkpointed: boolean;
+    readonly claimPending: boolean;
+}): RecoveryClassification;
+/** The admission ACK's counts — the web's reconciliation numbers (R6: counted
+ *  from structured data by the cli projection, never fabricated here). */
+export interface RecoverySettle {
+    readonly verifiedDone: number;
+    readonly remaining: number;
+}
+/** The driver-shaped surface this coordinator speaks to (structural — no CLI
+ *  import, the pet-lane precedent). M24 声明（§二.10）：port.admit 的注入发生
+ *  在 resume 边界=冷转预期（cold turn expected）——恢复注入必然重放历史前
+ *  缀之外的全新 user turn，前缀缓存不命中是本设计的已知代价，轮界时机补
+ *  偿（恢复只在 boot/间隔≥2s 的轮界发生，绝不在运行中打断）。 */
+export interface RecoveryPort {
+    /** Boot-time extra candidates (mission in-flight sessions the disk scan
+     *  names); merged with the journal-tracked set, deduped. */
+    bootCandidates(): Promise<readonly string[]>;
+    /** Observe one session; undefined = the session is gone/unreadable (the
+     *  coordinator cancels its tracking — an honest drop, never a crash). */
+    observe(sessionId: string): Promise<RecoveryObservation | undefined>;
+    /** Resume the session and inject the verify-first recovery prompt (the
+     *  NORMAL permission pipeline — invariant 8; this coordinator never
+     *  bypasses anything). Resolves with the reconciliation counts; a
+     *  rejection means the admission did not land (no settle is written). */
+    admit(sessionId: string): Promise<RecoverySettle>;
+    /** The driver's current session id (manual-input invalidation target). */
+    currentSession(): string | undefined;
+    /** Is a run in flight? (The admission gate — never interrupt a live run.) */
+    busy(): boolean;
+}
+/** One row of the status surface (the recoveryStatus op's reply). */
+export interface RecoveryStatusRow {
+    readonly sessionId: string;
+    readonly state: "blocked" | "active" | "recovering" | "unfinished" | "terminal" | "tracked";
+    readonly verifiedDone?: number;
+    readonly remaining?: number;
+    /** ω99-248 — the waiting-for-human ask's evidence when the row is
+     *  permission-blocked off the persistent record (the web's morning line
+     *  「昨夜停在这里等你授权」; withdrawn once the record settles). */
+    readonly permissionAsk?: {
+        readonly toolName: string;
+        readonly summary: string;
+        readonly question: string;
+    };
+}
+export interface RecoveryCoordinatorOptions {
+    readonly journalPath: string;
+    readonly port: RecoveryPort;
+    /** Clock seam (tests inject a controlled one; default Date.now). */
+    readonly now?: () => number;
+    /** Admission start interval (default RECOVERY_INTERVAL_MS). */
+    readonly intervalMs?: number;
+    /** In-flight ceiling (default RECOVERY_CONCURRENCY). */
+    readonly concurrency?: number;
+    /** Observation rotation bound (default RECOVERY_ROTATION_BOUND). */
+    readonly rotationBound?: number;
+    /** Tick source; tests drive tick() directly and pass a no-op (the timer is
+     *  never installed when this is provided). */
+    readonly setTimer?: ((tick: () => void, intervalMs: number) => void) | undefined;
+}
+export interface RecoveryCoordinator {
+    /** One observe→classify→admit pass (coalesced: a tick while ticking joins
+     *  the in-flight one — the openwork discipline). */
+    tick(): Promise<void>;
+    /** A manual client submit landed (invariant 7): cancels the pending
+     *  recovery of the session the user took over (permission replies never
+     *  reach this seam — the server wires ONLY the submit op here) and
+     *  re-tracks it for the next crash. Fire-and-forget: journal IO must never
+     *  break the submit path. */
+    noteUserInput(): void;
+    /** Structured rows for the web's reconciliation line. */
+    status(): readonly RecoveryStatusRow[];
+    /** Graceful-shutdown checkpoint (invariant 3): freeze the in-flight
+     *  session BEFORE the engine dies. Must be awaited before the engine's
+     *  close/abort. Idempotent; never checkpoints an idle session. */
+    stop(): Promise<void>;
+}
+export declare function createRecoveryCoordinator(opts: RecoveryCoordinatorOptions): RecoveryCoordinator;
+//# sourceMappingURL=recovery.d.ts.map

package/dist/recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../src/recovery.ts"],"names":[],"mappings":"AA8BA,iEAAiE;AACjE,eAAO,MAAM,oBAAoB,OAAQ,CAAC;AAC1C,kEAAkE;AAClE,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC;6EAC6E;AAC7E,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAMzC,4DAA4D;AAC5D,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACpG;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAChF;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvI;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1G,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,OAAO,EAAE,OAAO,CAAC;IACjB,sEAAsE;IACtE,YAAY,EAAE,OAAO,CAAC;IACtB,wEAAwE;IACxE,YAAY,EAAE,OAAO,CAAC;IACtB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACzD,uEAAuE;IACvE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AA6BD;;;;;;;;;;qEAUqE;AACrE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,mBAAmB,CAsD/E;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACtC;AAED;;;2EAG2E;AAC3E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAwBnE;AAMD,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC;mDAC+C;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC;;;kEAG8D;IAC9D,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC;;;qDAGiD;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF;wCACoC;IACpC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B;iFAC6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC;wDACoD;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,CAAC;IACjE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;;6BAQ6B;AAC7B,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,mBAAmB,EAChC,OAAO,EAAE;IAAE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAAE,GAC1E,sBAAsB,CAOxB;AAMD;0EAC0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;yCAIyC;AACzC,MAAM,WAAW,YAAY;IAC3B;gEAC4D;IAC5D,cAAc,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC7C;6EACyE;IACzE,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IACrE;;;6EAGyE;IACzE,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAClD,0EAA0E;IAC1E,cAAc,IAAI,MAAM,GAAG,SAAS,CAAC;IACrC,6EAA6E;IAC7E,IAAI,IAAI,OAAO,CAAC;CACjB;AAED,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5F,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;4DAEwD;IACxD,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,wDAAwD;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;kDAC8C;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAClF;AAeD,MAAM,WAAW,mBAAmB;IAClC;wDACoD;IACpD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB;;;;iCAI6B;IAC7B,aAAa,IAAI,IAAI,CAAC;IACtB,yDAAyD;IACzD,MAAM,IAAI,SAAS,iBAAiB,EAAE,CAAC;IACvC;;sEAEkE;IAClE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,0BAA0B,GAAG,mBAAmB,CAgO/F"}

package/dist/recovery.js

@@ -0,0 +1,424 @@
+// ω99-242: #2 — 中断任务自动续跑的服务面协调器（重启不丢托付）。北极星=
+// 托付闭环：挂机长任务经得起重启——夜里托付的活，重启后自己验证着续跑，
+// 早上是结果不是一排 todo。参考 openwork/apps/server/src/task-recovery.ts
+// 的判定纪律（观察-分类-认领-限流 + graceful shutdown checkpoint + 丢 ack
+// 永不重试），落在我方的持久资产上（session JSONL 半轮证据 / mission DAG
+// / 跨进程会话租约）。本包不知 CLI：恢复注入走下方 RecoveryPort，由 cli
+// 侧装配（resume + verify-first submit，§三模板在 cli 包）。
+//
+// §二设计不变量的落点（逐条）：
+//  1. journal = append-only JSONL（<workspaceRoot>/.wudao/recovery.jsonl，
+//     单文件协调器日志，绝不进各 session JSONL）；
+//  2. 认领先落盘再 admission；claim 过但无 settle 的条目重启后归 blocked
+//     交用户，永不二次自动 admission（classifyRecovery 规则 1）；
+//  3. 关机 checkpoint：引擎被杀前冻结正在半轮的会话（stop()，shutdown 意
+//     图不被进程被杀产生的 idle/abort 抹掉）；
+//  4. 观察分类四态 terminal/blocked/active/unfinished；idle 本身不是中断
+//     的证据（要求同一未完成轮，或我们自己的 checkpoint）；
+//  5. verify-first 恢复 prompt 由 port.admit 注入（模板在 cli，逐字钉）；
+//  6. 限流：并发恢复 ≤ RECOVERY_CONCURRENCY（2）、启动间隔 ≥
+//     RECOVERY_INTERVAL_MS（2s）、大积压轮转公平；
+//  7. 用户手工输入作废该会话的恢复（noteUserInput；权限回复走
+//     answerPermission——server 的 submit op 才挂这个 seam，例外成立）；
+//  8. 恢复 admission 走正常权限管线（port.admit = resume + submit，cli
+//     侧零旁路——本协调器不做任何权限判断）；
+//  9. 恢复顺序沿 mission DAG 依赖拓扑渐进拉起（dagRank 升序，非轮询序）；
+// 10. M24 声明：恢复注入发生在 resume 边界=冷转预期（cold turn expected），
+//     代码注释（本文件 + cli/recovery-admission.ts）+ 报告双声明。
+import { appendFile, mkdir, readFile } from "node:fs/promises";
+import { dirname } from "node:path";
+/** ω99-242 — the admission start interval (invariant 6: ≥2s). */
+export const RECOVERY_INTERVAL_MS = 2_000;
+/** ω99-242 — the in-flight recovery ceiling (invariant 6: ≤2). */
+export const RECOVERY_CONCURRENCY = 2;
+/** ω99-242 — backlogs at or below this size are observed in full each tick;
+ *  larger ones rotate two per tick so observation stays bounded and fair. */
+export const RECOVERY_ROTATION_BOUND = 4;
+const ENTRY_TYPES = new Set(["admit", "checkpoint", "claim", "settle", "cancel"]);
+/** Shape gate for one parsed line — the journal is machine-written; anything
+ *  else is a skipped line, never a crash (R1's honest-skip law). */
+function validEntry(v) {
+    if (typeof v !== "object" || v === null)
+        return undefined;
+    const e = v;
+    if (typeof e.type !== "string" || !ENTRY_TYPES.has(e.type))
+        return undefined;
+    if (typeof e.sessionId !== "string" || e.sessionId === "")
+        return undefined;
+    if (typeof e.at !== "number" || !Number.isFinite(e.at))
+        return undefined;
+    switch (e.type) {
+        case "admit":
+            if (e.user !== undefined && typeof e.user !== "boolean")
+                return undefined;
+            break;
+        case "settle":
+            if (typeof e.verifiedDone !== "number" || !Number.isInteger(e.verifiedDone) || e.verifiedDone < 0)
+                return undefined;
+            if (typeof e.remaining !== "number" || !Number.isInteger(e.remaining) || e.remaining < 0)
+                return undefined;
+            break;
+        case "cancel":
+            if (typeof e.reason !== "string" || e.reason === "")
+                return undefined;
+            break;
+        default:
+            break;
+    }
+    return e;
+}
+/** Fold journal lines (file order) into per-session state. Pure: same lines →
+ *  same fold. Semantics per entry type:
+ *  - admit — tracking intent (a run admission happened; `user` marks a manual
+ *    one, which CONSUMES a standing checkpoint: the user's takeover supersedes
+ *    the shutdown freeze);
+ *  - checkpoint — the graceful-shutdown freeze stands;
+ *  - claim — a recovery claim stands, superseding any checkpoint;
+ *  - settle — the admission ACK: clears claim/checkpoint, keeps tracking,
+ *    carries the reconciliation counts;
+ *  - cancel — intent withdrawn (terminal / user-input / admission-failed):
+ *    untracks until a LATER admit re-tracks (file order decides). */
+export function foldRecoveryLines(lines) {
+    const sessions = new Map();
+    let skippedLines = 0;
+    for (const raw of lines) {
+        if (raw.trim() === "") {
+            skippedLines += 1; // honest count: the line yielded no entry
+            continue;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            skippedLines += 1;
+            continue;
+        }
+        const entry = validEntry(parsed);
+        if (entry === undefined) {
+            skippedLines += 1;
+            continue;
+        }
+        const s = sessions.get(entry.sessionId) ?? {
+            sessionId: entry.sessionId, tracked: false, checkpointed: false, claimPending: false, lastAt: 0,
+        };
+        switch (entry.type) {
+            case "admit":
+                s.tracked = true;
+                if (entry.user === true)
+                    s.checkpointed = false;
+                break;
+            case "checkpoint":
+                s.tracked = true;
+                s.checkpointed = true;
+                break;
+            case "claim":
+                s.tracked = true;
+                s.claimPending = true;
+                s.checkpointed = false;
+                break;
+            case "settle":
+                s.tracked = true;
+                s.claimPending = false;
+                s.checkpointed = false;
+                s.verifiedDone = entry.verifiedDone;
+                s.remaining = entry.remaining;
+                break;
+            case "cancel":
+                s.tracked = false;
+                s.checkpointed = false;
+                s.claimPending = false;
+                break;
+        }
+        s.lastAt = entry.at;
+        sessions.set(entry.sessionId, s);
+    }
+    return { sessions, skippedLines };
+}
+/** Open (or create) the coordinator journal at `path`. Appends only — the
+ *  file's earlier bytes are never rewritten (append-only law). A missing
+ *  directory is created on first append; a missing/unreadable file folds to
+ *  the empty state (nothing to recover — an honest zero, not an error). */
+export function createRecoveryJournal(path) {
+    let queue = Promise.resolve();
+    const append = (entry) => {
+        // Serialized: the claim→settle (or cancel) ordering of one recovery must
+        // land in the order it happened.
+        queue = queue.catch(() => { }).then(async () => {
+            await mkdir(dirname(path), { recursive: true });
+            await appendFile(path, `${JSON.stringify(entry)}\n`, "utf8");
+        });
+        return queue;
+    };
+    return {
+        path,
+        append,
+        fold: async () => {
+            let text;
+            try {
+                text = await readFile(path, "utf8");
+            }
+            catch {
+                return { sessions: new Map(), skippedLines: 0 };
+            }
+            return foldRecoveryLines(text.split("\n"));
+        },
+    };
+}
+/** Classify one observation. Rule order is the judgment discipline:
+ *  1. a standing claim without settle (lost ack) → blocked, never re-admitted
+ *     — even across restarts (invariant 2; trumps every other signal);
+ *  2. another live process owns the session → active (observe only);
+ *  3. the mission ledger is terminal → terminal (untouched);
+ *  4. permission pending / delegated child unresolved → blocked;
+ *  5. our own shutdown checkpoint stands, or the same turn is open →
+ *     unfinished (recoverable) — idle alone is NOT evidence (negative pin);
+ *  6. otherwise terminal. */
+export function classifyRecovery(observation, journal) {
+    if (journal.claimPending)
+        return { state: "blocked", recoverable: false };
+    if (observation.leaseHeldByOther)
+        return { state: "active", recoverable: false };
+    if (observation.missionTerminal)
+        return { state: "terminal", recoverable: false };
+    if (observation.permissionPending || observation.childPending)
+        return { state: "blocked", recoverable: false };
+    if (journal.checkpointed || observation.turnOpen)
+        return { state: "unfinished", recoverable: true };
+    return { state: "terminal", recoverable: false };
+}
+export function createRecoveryCoordinator(opts) {
+    const now = opts.now ?? (() => Date.now());
+    const intervalMs = opts.intervalMs ?? RECOVERY_INTERVAL_MS;
+    const concurrency = opts.concurrency ?? RECOVERY_CONCURRENCY;
+    const rotationBound = opts.rotationBound ?? RECOVERY_ROTATION_BOUND;
+    const journal = createRecoveryJournal(opts.journalPath);
+    const mem = new Map();
+    let booted = false;
+    let stopped = false;
+    let ticking;
+    let nextLaunch = 0;
+    let cursor = 0;
+    const recOf = (sessionId) => {
+        const existing = mem.get(sessionId);
+        if (existing !== undefined)
+            return existing;
+        const fresh = {
+            sessionId, tracked: false, checkpointed: false, claimPending: false, lastAt: 0, admitted: false, userOwned: false,
+        };
+        mem.set(sessionId, fresh);
+        return fresh;
+    };
+    const boot = async () => {
+        booted = true;
+        const fold = await journal.fold();
+        for (const s of fold.sessions.values()) {
+            const rec = recOf(s.sessionId);
+            rec.tracked = s.tracked;
+            rec.checkpointed = s.checkpointed;
+            rec.claimPending = s.claimPending;
+            rec.verifiedDone = s.verifiedDone;
+            rec.remaining = s.remaining;
+            rec.lastAt = s.lastAt;
+        }
+        // ω99-242 §四: v1 recovers 「checkpoint 过的半轮 + mission in-flight」—
+        // the disk scan names mission-bound sessions the journal never saw (the
+        // pre-feature crash path). Deduped against the journal-tracked set.
+        const extra = await opts.port.bootCandidates().catch(() => []);
+        for (const id of extra)
+            if (id !== "" && !mem.has(id))
+                recOf(id).tracked = true;
+    };
+    /** Cancel + untrack. `reason` is the honest cause (journal-visible). */
+    const remove = async (sessionId, reason) => {
+        await journal.append({ type: "cancel", sessionId, at: now(), reason });
+        const rec = mem.get(sessionId);
+        if (rec !== undefined) {
+            rec.tracked = false;
+            rec.checkpointed = false;
+            rec.claimPending = false;
+            rec.admitted = false;
+        }
+    };
+    const check = async (sessionId) => {
+        const rec = mem.get(sessionId);
+        if (rec === undefined || !rec.tracked)
+            return;
+        const observation = await opts.port.observe(sessionId);
+        if (observation === undefined) {
+            await remove(sessionId, "gone");
+            return;
+        }
+        const cls = classifyRecovery(observation, rec);
+        rec.lastState = cls.state;
+        rec.lastObs = observation;
+        if (cls.state === "active" || cls.state === "blocked")
+            return; // hold — observe only
+        if (cls.state === "terminal") {
+            await remove(sessionId, rec.admitted ? "settled" : "terminal");
+            return;
+        }
+        // unfinished: recoverable — the admission phase below decides when.
+    };
+    const admitOne = async (rec) => {
+        // ω99-242 invariant 2: claim durably BEFORE admission. A lost
+        // acknowledgement is never retried — including across another restart
+        // (the fold reads this claim back as claimPending → blocked).
+        const at = now();
+        await journal.append({ type: "claim", sessionId: rec.sessionId, at });
+        rec.claimPending = true;
+        rec.checkpointed = false;
+        rec.admitted = true;
+        nextLaunch = at + intervalMs;
+        try {
+            const settle = await opts.port.admit(rec.sessionId);
+            rec.claimPending = false;
+            rec.verifiedDone = settle.verifiedDone;
+            rec.remaining = settle.remaining;
+            await journal.append({
+                type: "settle", sessionId: rec.sessionId, at: now(),
+                verifiedDone: settle.verifiedDone, remaining: settle.remaining,
+            });
+        }
+        catch (err) {
+            // The admission did not land (resume refused / submit refused). The
+            // claim discipline still holds — never silently retry: an honest cancel
+            // with the cause, one stderr line for the operator, gone this boot.
+            await remove(rec.sessionId, "admission-failed");
+            process.stderr.write(`wudao-recovery: 恢复 admission 失败（${rec.sessionId}，本进程不再重试）：${err instanceof Error ? err.message : String(err)}\n`);
+        }
+    };
+    const tick = () => {
+        if (stopped)
+            return Promise.resolve();
+        if (ticking !== undefined)
+            return ticking;
+        ticking = (async () => {
+            try {
+                if (!booted)
+                    await boot();
+                const tracked = [...mem.values()].filter((r) => r.tracked);
+                // Fairness (invariant 6): small backlogs observe in full; larger ones
+                // rotate two per tick so background reads stay bounded and everyone
+                // gets a turn.
+                let selected;
+                if (tracked.length <= rotationBound) {
+                    selected = tracked;
+                }
+                else {
+                    const a = tracked[cursor % tracked.length];
+                    const b = tracked[(cursor + 1) % tracked.length];
+                    cursor += concurrency;
+                    selected = a !== undefined && b !== undefined ? [...new Set([a, b])] : tracked.slice(0, 2);
+                }
+                await Promise.all([...new Set(selected)].map((rec) => check(rec.sessionId).catch(() => {
+                    // An unavailable/ambiguous observation never grants permission to
+                    // admit — the record keeps its state for the next tick.
+                })));
+                // Admission phase — SEQUENTIAL, mission-DAG-topological (invariant
+                // 9), never while a run is in flight, capped, interval-spaced.
+                const recoverable = [...mem.values()]
+                    .filter((r) => r.tracked && !r.admitted && !r.userOwned && r.lastState === "unfinished" && r.lastObs !== undefined)
+                    .sort((a, b) => (a.lastObs?.dagRank ?? Number.POSITIVE_INFINITY) - (b.lastObs?.dagRank ?? Number.POSITIVE_INFINITY) || a.lastAt - b.lastAt);
+                for (const rec of recoverable) {
+                    if (opts.port.busy())
+                        break; // never interrupt a live run
+                    const inFlight = [...mem.values()].filter((r) => r.tracked && r.admitted).length;
+                    if (inFlight >= concurrency)
+                        break; // the in-flight ceiling
+                    if (now() < nextLaunch)
+                        break; // the start interval
+                    await admitOne(rec);
+                }
+            }
+            finally {
+                ticking = undefined;
+            }
+        })();
+        return ticking;
+    };
+    const install = opts.setTimer === undefined
+        ? (cb, ms) => {
+            const t = setInterval(cb, ms);
+            t.unref?.();
+        }
+        : opts.setTimer;
+    install(() => void tick(), intervalMs);
+    return {
+        tick,
+        noteUserInput: () => {
+            if (stopped)
+                return;
+            const id = opts.port.currentSession();
+            if (id === undefined)
+                return;
+            void (async () => {
+                try {
+                    const rec = mem.get(id);
+                    // Invariant 7: the user's manual input voids THIS session's pending
+                    // recovery (a standing claim must not poison the next boot as a
+                    // lost ack — the takeover cancels it). The session STAYS tracked:
+                    // the user is driving entrusted work, and its next crash recovers.
+                    if (rec !== undefined && (rec.claimPending || rec.admitted || rec.checkpointed)) {
+                        await journal.append({ type: "cancel", sessionId: id, at: now(), reason: "user-input" });
+                        rec.claimPending = false;
+                        rec.admitted = false;
+                        rec.checkpointed = false;
+                        rec.tracked = true;
+                    }
+                    await journal.append({ type: "admit", sessionId: id, at: now(), user: true });
+                    const target = rec ?? recOf(id);
+                    target.tracked = true;
+                    target.lastAt = now();
+                    target.userOwned = true;
+                }
+                catch {
+                    // Journal IO is best-effort here — never break the submit path.
+                }
+            })();
+        },
+        status: () => {
+            const rows = [];
+            for (const rec of mem.values()) {
+                if (!rec.tracked)
+                    continue; // removed/terminal records report nothing
+                const state = rec.claimPending
+                    ? "blocked"
+                    : rec.admitted
+                        ? "recovering"
+                        : rec.lastState === "active" || rec.lastState === "blocked" || rec.lastState === "unfinished" || rec.lastState === "terminal"
+                            ? rec.lastState
+                            : "tracked";
+                rows.push({
+                    sessionId: rec.sessionId,
+                    state,
+                    ...(rec.verifiedDone !== undefined ? { verifiedDone: rec.verifiedDone } : {}),
+                    ...(rec.remaining !== undefined ? { remaining: rec.remaining } : {}),
+                    // ω99-248 — thread the record-sourced ask evidence into the row (the
+                    // morning line's data source); the latest observation owns it and it
+                    // disappears the moment the record settles (落定不复活).
+                    ...(rec.lastObs?.pendingAsk !== undefined ? { permissionAsk: rec.lastObs.pendingAsk } : {}),
+                });
+            }
+            return rows;
+        },
+        stop: async () => {
+            if (stopped)
+                return;
+            stopped = true;
+            // Invariant 3: freeze BEFORE engines are killed, so the kill's own
+            // idle/abort can never erase the recovery intent. Only a session with
+            // a run actually in flight is checkpointed — idle is not intent.
+            const id = opts.port.currentSession();
+            if (id !== undefined && opts.port.busy()) {
+                await journal.append({ type: "checkpoint", sessionId: id, at: now() });
+                const rec = mem.get(id);
+                if (rec !== undefined) {
+                    rec.checkpointed = true;
+                    rec.tracked = true;
+                }
+            }
+        },
+    };
+}
+//# sourceMappingURL=recovery.js.map

package/dist/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../src/recovery.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,sCAAsC;AACtC,8DAA8D;AAC9D,2DAA2D;AAC3D,oDAAoD;AACpD,iDAAiD;AACjD,iDAAiD;AACjD,EAAE;AACF,kBAAkB;AAClB,yEAAyE;AACzE,oCAAoC;AACpC,wDAAwD;AACxD,mDAAmD;AACnD,qDAAqD;AACrD,iCAAiC;AACjC,4DAA4D;AAC5D,uCAAuC;AACvC,2DAA2D;AAC3D,+CAA+C;AAC/C,wCAAwC;AACxC,yCAAyC;AACzC,4DAA4D;AAC5D,4DAA4D;AAC5D,2BAA2B;AAC3B,mDAAmD;AACnD,yDAAyD;AACzD,oDAAoD;AACpD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,iEAAiE;AACjE,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAC1C,kEAAkE;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC;6EAC6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAmCzC,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEvG;oEACoE;AACpE,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7E,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5E,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,OAAO;YACV,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC1E,MAAM;QACR,KAAK,QAAQ;YACX,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACpH,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC3G,MAAM;QACR,KAAK,QAAQ;YACX,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;gBAAE,OAAO,SAAS,CAAC;YACtE,MAAM;QACR;YACE,MAAM;IACV,CAAC;IACD,OAAO,CAAoC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;qEAUqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IACrD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtB,YAAY,IAAI,CAAC,CAAC,CAAC,0CAA0C;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,YAAY,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI;YACzC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SAChG,CAAC;QACF,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,OAAO;gBACV,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;gBACjB,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;oBAAE,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC;gBAChD,MAAM;YACR,KAAK,YAAY;gBACf,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC;gBACtB,MAAM;YACR,KAAK,OAAO;gBACV,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC;gBACvB,MAAM;YACR,KAAK,QAAQ;gBACX,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC;gBACvB,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC;gBACvB,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;gBACpC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;gBAC9B,MAAM;YACR,KAAK,QAAQ;gBACX,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC;gBACvB,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC;gBACvB,MAAM;QACV,CAAC;QACD,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC;QACpB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAQD;;;2EAG2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,CAAC,KAA2B,EAAiB,EAAE;QAC5D,yEAAyE;QACzE,iCAAiC;QACjC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC5C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO;QACL,IAAI;QACJ,MAAM;QACN,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,EAA4B,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;YAC5E,CAAC;YACD,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC;AA2CD;;;;;;;;6BAQ6B;AAC7B,MAAM,UAAU,gBAAgB,CAC9B,WAAgC,EAChC,OAA2E;IAE3E,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC1E,IAAI,WAAW,CAAC,gBAAgB;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACjF,IAAI,WAAW,CAAC,eAAe;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAClF,IAAI,WAAW,CAAC,iBAAiB,IAAI,WAAW,CAAC,YAAY;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC/G,IAAI,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACpG,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAmGD,MAAM,UAAU,yBAAyB,CAAC,IAAgC;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACpE,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAqB,CAAC;IACzC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAkC,CAAC;IACvC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAa,EAAE;QAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,KAAK,GAAc;YACvB,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK;SAClH,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,MAAM,GAAG,IAAI,CAAC;QACd,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC/B,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YACxB,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;YAClC,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;YAClC,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;YAClC,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;YAC5B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACxB,CAAC;QACD,iEAAiE;QACjE,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,GAAsB,EAAE,CAAC,EAAE,CAAC,CAAC;QAClF,KAAK,MAAM,EAAE,IAAI,KAAK;YAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;IAClF,CAAC,CAAC;IAEF,wEAAwE;IACxE,MAAM,MAAM,GAAG,KAAK,EAAE,SAAiB,EAAE,MAAc,EAAiB,EAAE;QACxE,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC;YACpB,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;YACzB,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;YACzB,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;QACvD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO;QAC9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC/C,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;QAC1B,GAAG,CAAC,OAAO,GAAG,WAAW,CAAC;QAC1B,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,sBAAsB;QACrF,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,oEAAoE;IACtE,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAc,EAAiB,EAAE;QACvD,8DAA8D;QAC9D,sEAAsE;QACtE,8DAA8D;QAC9D,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;QACjB,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;QACxB,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;QACzB,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;QACpB,UAAU,GAAG,EAAE,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpD,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;YACzB,GAAG,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YACvC,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YACjC,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnB,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE;gBACnD,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;aAC/D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC,GAAG,CAAC,SAAS,aAAa,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAClH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,GAAkB,EAAE;QAC/B,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YACpB,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC3D,sEAAsE;gBACtE,oEAAoE;gBACpE,eAAe;gBACf,IAAI,QAA8B,CAAC;gBACnC,IAAI,OAAO,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;oBACpC,QAAQ,GAAG,OAAO,CAAC;gBACrB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC3C,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;oBACjD,MAAM,IAAI,WAAW,CAAC;oBACtB,QAAQ,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC7F,CAAC;gBACD,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBACpF,kEAAkE;oBAClE,wDAAwD;gBAC1D,CAAC,CAAC,CAAC,CAAC,CAAC;gBACL,mEAAmE;gBACnE,+DAA+D;gBAC/D,MAAM,WAAW,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;qBAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,YAAY,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC;qBAClH,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC9I,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;oBAC9B,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;wBAAE,MAAM,CAAC,6BAA6B;oBAC1D,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;oBACjF,IAAI,QAAQ,IAAI,WAAW;wBAAE,MAAM,CAAC,wBAAwB;oBAC5D,IAAI,GAAG,EAAE,GAAG,UAAU;wBAAE,MAAM,CAAC,qBAAqB;oBACpD,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS;QACzC,CAAC,CAAC,CAAC,EAAc,EAAE,EAAU,EAAQ,EAAE;YACnC,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACd,CAAC;QACH,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IAClB,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IAEvC,OAAO;QACL,IAAI;QACJ,aAAa,EAAE,GAAS,EAAE;YACxB,IAAI,OAAO;gBAAE,OAAO;YACpB,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACtC,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO;YAC7B,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACxB,oEAAoE;oBACpE,gEAAgE;oBAChE,kEAAkE;oBAClE,mEAAmE;oBACnE,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;wBAChF,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;wBACzF,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;wBACzB,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;wBACrB,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;wBACzB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;oBACrB,CAAC;oBACD,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC9E,MAAM,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;oBAChC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;oBACtB,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBACtB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,gEAAgE;gBAClE,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,MAAM,EAAE,GAAiC,EAAE;YACzC,MAAM,IAAI,GAAwB,EAAE,CAAC;YACrC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/B,IAAI,CAAC,GAAG,CAAC,OAAO;oBAAE,SAAS,CAAC,0CAA0C;gBACtE,MAAM,KAAK,GAA+B,GAAG,CAAC,YAAY;oBACxD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,GAAG,CAAC,QAAQ;wBACZ,CAAC,CAAC,YAAY;wBACd,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,YAAY,IAAI,GAAG,CAAC,SAAS,KAAK,UAAU;4BAC3H,CAAC,CAAC,GAAG,CAAC,SAAS;4BACf,CAAC,CAAC,SAAS,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC;oBACR,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,KAAK;oBACL,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7E,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,qEAAqE;oBACrE,qEAAqE;oBACrE,oDAAoD;oBACpD,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5F,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,EAAE,KAAK,IAAmB,EAAE;YAC9B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,mEAAmE;YACnE,sEAAsE;YACtE,iEAAiE;YACjE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACtC,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACzC,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;oBACtB,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;oBACxB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}