agent-embassy 1.0.0 → 1.2.0

package/CHANGELOG.md

@@ -4,6 +4,50 @@ All notable changes to this project are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [Unreleased]
+
+## [1.2.0] - 2026-08-10
+
+Deliverability over everything: a message you send arrives, or tells you loudly why it could not.
+
+### Added
+
+- **Broker-owned provenance envelopes and recipient replies** — every routed body now reaches Codex or Claude inside one deterministic `cross-session-message` textual frame with broker-validated sender attribution. Its first `embassy-reply-hint` carries the full conversation token, the exact recipient alias, and the stdin-based `embassy reply` command, so either participant can continue without reconstructing a token. Codex receives the full token as an outer `conversation` attribute as well; Claude retains its canonical outer shape and receives the token in the hint. Sender aliases over Claude's 64-character display bound use a deterministic hashed label while preserving the exact alias in the hint.
+- **The durable queue** — message bodies persist in the broker's private mode-0600 state under bounded retention. Queued mail survives a broker restart and re-sends exactly once when its route is re-observed; in-flight-at-crash messages settle `ambiguous` — never silently lost, never double-sent. The live dashboard's delivery detail shows each retained body (bounded display), with an honest fallback for deliveries whose body was not retained. Static dashboards remain metadata-only.
+- **Boot reactivation** — after a broker restart, retained Codex routes re-anchor automatically at startup through the same exactly-once `thread/loaded/list` proof, including staged handling when the App Server moved endpoint generations while the broker was down. `register-codex` becomes recovery of last resort; transient replies are never retargeted across a restart.
+- **The deliverability soak** — `npm run soak` drives a seeded, randomized churn of sends through scripted dispatch faults, busy/idle flips, clock jumps, and full restarts, asserting that every accepted message settles exactly once into an explicit terminal outcome with an allowlisted reason.
+
+### Changed
+
+- Message deadlines default to **4 hours** (was 5 minutes; max 24 hours) — agent turns routinely outlive minutes-scale deadlines, and expiry is now rare and explicit rather than routine. Stall notices stay early, within two minutes.
+- Conversation hop budgets exist to stop runaway reply loops, not conversations: the default is **16** (was 2; max 64).
+- Claude-bound dispatch failures carry their exact safe codes, and the broker redispatches bounded retries when the route is observed idle instead of settling terminal on first refusal.
+- Documentation across both languages now states the durable-queue truth: bodies are stored, bounded, and shown; restarts keep queued mail.
+
+### Fixed
+
+- The live dashboard's "Source restarted; view resynchronized" banner appears only on a true source-revision regression; clock-derived field churn no longer masquerades as a restart or triggers a frame broadcast every poll.
+
+### Security
+
+- The envelope is a structural provenance marker, not XML, a cryptographic signature, or authentication against same-UID code. Broker-reserved opening and closing tag shapes inside the untrusted body are neutralized before delivery; framing happens exactly once at the final provider boundary, and invalid metadata or framed-size overflow fails before any write. The full conversation token remains transient and participant-scoped: reply rechecks caller, conversation membership, route, and hop policy, and the token never enters durable state, journals, logs, receipts, public snapshots, events, or dashboards.
+- Body persistence keeps the same trust boundary the product always had: the OS account. Retained bodies live in the mode-0600 state directory and appear only on the loopback live dashboard; raw provider frames stay memory-only.
+
+## [1.1.0] - 2026-08-09
+
+### Added
+
+- **Automatic Codex endpoint reactivation** — when the managed App Server moves from one endpoint generation to another, Embassy freezes the old connector, runs the existing bounded compatibility probe against the replacement, and re-anchors each retained route only after `thread/loaded/list` finds its byte-identical task exactly once. The alias, owner lease, and pair edges survive; the private bounded journal records the generation refresh without projecting the task ID or either endpoint generation.
+- **Bounded stale-registration recovery** — the authenticated live dashboard can request removal of one canonical `codex-*` alias after an explicit confirmation. The broker accepts the operation only for a stale registration whose owning endpoint generation is dead, revalidates and quiesces the exact route, removes its incident pair edges, and records the successful recovery in its private bounded journal. Ready, merely offline, current-generation, and ambiguous routes fail closed.
+
+### Changed
+
+- `CALLER_IDENTITY_CONFLICT` now gives a targeted bilingual recovery hint only when both Codex and Claude identities were inherited: restart the Codex App Server daemon from a normal terminal with `codex app-server daemon restart`. Wrong-principal failures keep the generic fail-closed advice.
+
+### Security
+
+- Endpoint replacement never restores or replays a body, callback, receipt handle, reply capability, conversation capability, or delivery token. An incompatible replacement, a missing or duplicate exact task, or an unclean transition leaves the retained route stale and surfaces bounded compatibility evidence for diagnosis rather than retargeting it.
+
 ## [1.0.0] - 2026-08-09
 
 ### Added

package/README.md

@@ -25,7 +25,14 @@ Embassy is built for one person, one macOS account, and agents you already trust
 
 ## Quickstart
 
-**Requirements:** macOS, Node.js 20+, Claude Code 2.1.226 (still-running 2.1.224–2.1.225 sessions remain discoverable), and Codex desktop configured to use the managed standalone App Server 0.147.0. The Claude session you select as a destination needs [`crossSessionInbound`](docs/CONFIGURATION.md) enabled — that is Claude Code's own setting, configured in Claude Code, not in Embassy.
+**Requirements:** macOS, Node.js 20+, Claude Code 2.1.226 (still-running 2.1.224–2.1.225 sessions remain discoverable), and Codex desktop configured to use the managed standalone App Server 0.147.0:
+
+```bash
+~/.codex/packages/standalone/current/codex app-server daemon start
+/usr/bin/open --env CODEX_APP_SERVER_USE_LOCAL_DAEMON=1 -a ChatGPT
+```
+
+The first command starts the managed daemon if it is not already running (`restart` and `stop` also exist); the second launches the ChatGPT desktop app pointed at it. `CODEX_APP_SERVER_USE_LOCAL_DAEMON` is not documented by OpenAI; it is observed to work with this Desktop build and may change. Run the daemon command from a normal terminal, never from inside an agent session: Codex tasks inherit the daemon's environment, so a daemon started inside a Claude Code session leaks that session's identity into every task and registration fails closed with `CALLER_IDENTITY_CONFLICT` — fix it from a normal terminal with `codex app-server daemon restart`. The Claude session you select as a destination needs [`crossSessionInbound`](docs/CONFIGURATION.md) enabled — that is Claude Code's own setting, configured in Claude Code, not in Embassy.
 
 > **Known limitation:** Embassy can reach Codex tasks only while Desktop uses the managed standalone App Server. In that mode, tasks currently cannot connect to Desktop's built-in in-app browser (`@Browser` loads but does not attach). Switching Desktop back to its default private App Server restores the built-in browser immediately — but makes those tasks unreachable by Embassy. No other capability regressions have been identified, though this was not an exhaustive parity test.
 
@@ -56,6 +63,8 @@ embassy register-codex --alias codex-reviewer@this-mac
 
 You should see `"accepted":true`. The `codex-` prefix is required for Claude discovery. To retire the task later, run `unregister-codex`.
 
+While the same `embassy serve` broker remains running, a managed App Server restart makes Embassy probe the new endpoint and reattach this alias only when the replacement is compatible and `thread/loaded/list` finds the byte-identical task exactly once. An incompatible endpoint or a missing or duplicate exact task leaves the route stale for diagnosis; Embassy never retargets by alias and never reconstructs or replays a message body across the endpoint-generation boundary. If `embassy serve` itself restarts, the retained route starts stale with `REOBSERVATION_REQUIRED`; until boot-time reactivation is implemented, the exact Codex task must rerun `embassy register-codex --alias codex-reviewer@this-mac` without unregistering first.
+
 ### 3. Select a Claude destination
 
 Pick one name from `availablePeers`:
@@ -83,7 +92,9 @@ You should see a `conv_` conversation token and a `dlv_` delivery token. Because
 
 ### 5. Follow up
 
-Either side can continue the conversation:
+Either participant can continue the conversation with `reply`. The initiating
+CLI receives the full `conv_` token in its accepted result; the recipient gets
+the same token and an exact reply command in the broker-owned message marker:
 
 ```bash
 embassy reply \
@@ -93,10 +104,28 @@ Please expand on the migration risk.
 MSG
 ```
 
+Every routed body reaches either product inside one broker-owned
+`<cross-session-message>` textual frame. It identifies the verified sender
+alias and begins with an `<embassy-reply-hint>` containing the full conversation
+token, the recipient's exact alias, and the corresponding `embassy reply`
+command. Use only that delivered full token and alias; never guess one from a
+suffix or substitute the sender's alias. The CLI still rechecks the caller,
+conversation membership, current route policy, and hop limit, so the hint is
+not a permission bypass.
+
+The frame is a clear provenance marker, not a cryptographic signature or a
+claim that the body is trustworthy. Embassy neutralizes nested occurrences of
+its two reserved framing tags in the untrusted body before provider delivery;
+arbitrary same-user code and all message text remain untrusted input.
+
+`EMBASSY_MAX_HOPS` bounds each conversation against runaway reply loops. The initial send is hop 0 and each routed reply increments the count; the default `16` means a normal conversation never notices it. An attempt past the bound is rejected and recorded as `HOP_LIMIT_EXCEEDED`. Do not retry an exhausted conversation token; start a fresh conversation. The accepted range and other bounds are documented in [Configuration](docs/CONFIGURATION.md).
+
 ### See it live
 
 `embassy dashboard --live` opens a five-tab streaming view in the browser (overview, deliveries, routes, activity, diagnostics). See [Dashboard](docs/DASHBOARD.md) for details.
 
+The live dashboard can also remove an orphaned Codex registration after an explicit confirmation, but only when the broker proves that the registration is stale and its owning endpoint generation is dead. A current, merely offline, or ambiguous generation is never removable through this recovery action.
+
 The broker also publishes mode-0600 static snapshots as `gateway-dashboard.html` and `gateway-dashboard.zh-CN.html`. Live dashboard mutations require the same-origin `X-Embassy-Request` sentinel.
 
 ## How it works
@@ -118,6 +147,12 @@ A pair is one explicit permission edge between one Claude session and one Codex
 
 Messages queue while the Codex task is busy and start an ordinary turn when it goes idle. In the Claude-to-Codex direction only, a body with an exact leading `STEER:` prefix may enter the active turn at the App Server's next tool-call boundary; if that boundary is unavailable, the message returns to the normal queue.
 
+Immediately before the provider write, Embassy gives every routed body one
+broker-owned cross-session marker containing the verified sender alias and a
+recipient reply hint. The full conversation token travels only in the
+initiator's accepted result and the recipient's transient message payload; it
+never enters the dashboard, public snapshot, journal, receipt, or log.
+
 Every settled message produces a receipt. `delivered` means terminal provider evidence was observed — toward Codex, the App Server accepted the turn; toward Claude, the message was released into the session's native queue. Neither means the model read or acted on it. `unconfirmed` and `ambiguous` mean evidence is missing; they are terminal states and never auto-retried. See [Delivery](docs/DELIVERY.md) for the full semantics.
 
 ## The vocabulary
@@ -126,13 +161,22 @@ Four embassy terms name real features:
 
 - **Registration and pairing** are the permission model: a Codex task is explicitly registered, and each pair is one explicit Claude↔Codex edge — only paired ends exchange messages, and many edges can coexist. No edge means `SENDER_NOT_PAIRED`; nothing is ever implicit.
 - **The ledger** is the delivery record: a receipt for every settled message, and a metadata-only dashboard.
-- **The pouch** is transit: bounded bodies, ephemeral inside Embassy, never persisted by it.
+- **The pouch** is transit and the archive: bounded bodies, retained under bounded limits, private to your OS account — sealed against other users, not against you.
 - **Consulates** are the roadmap: the same model extended to Codex tasks on remote hosts over attach-only SSH — designed, and deliberately disabled in v1.
 
 ## For agents
 
 Embassy's operators are often agents themselves: `register-codex` runs inside the Codex task, and the Claude side is driven entirely through native tools. The repo ships [`skills/embassy-peer/SKILL.md`](skills/embassy-peer/SKILL.md) — point your agent at it rather than paraphrasing this README.
 
+The skill ships in the npm package; install it where each agent discovers skills:
+
+```bash
+cp -R "$(npm root -g)/agent-embassy/skills/embassy-peer" ~/.codex/skills/
+cp -R "$(npm root -g)/agent-embassy/skills/embassy-peer" ~/.claude/skills/
+```
+
+Codex tasks can then be prompted with `$embassy-peer`; Claude Code discovers it as a user skill.
+
 ## Commands
 
 | Command | Run by | Purpose |
@@ -148,14 +192,15 @@ Embassy's operators are often agents themselves: `register-codex` runs inside th
 | `select-claude` / `unselect-claude` | operator | One-task shorthand for `pair`/`unpair`: resolves the Codex end only when it is unambiguous (inherited or sole registered task), otherwise fails closed |
 | `send-to-claude` | registered Codex task | Send one bounded message to a paired Claude session |
 | `send-to-codex` | Claude session | Send one bounded message using the inherited native reply identity |
-| `reply` | either provider | Continue an active conversation by its public token |
+| `reply` | conversation-token holder | Continue an active conversation with the full token returned to the initiator or delivered in the recipient's broker-owned reply hint |
 
 ## Safety in one minute
 
 - **Local sockets only.** `embassy serve` listens on private Unix-domain sockets and makes no provider API call. The opt-in `embassy dashboard --live` companion is a separate process and the only listener Embassy can create, bound to `127.0.0.1` on an ephemeral port.
 - **Same-UID containment, not authentication.** Caller identity is inherited from the local process environment. Route ownership and generation checks reduce mistakes, but are not a defense against code already running as your OS user.
 - **Native permissions stay native.** Embassy sends no Codex approval or sandbox overrides and answers no approval request. `crossSessionInbound` remains Claude's own control; Embassy cannot override it.
-- **Bodies never persisted.** Message bodies, prompts, replies, and raw provider frames live only in memory. Metadata-only dashboard files are mode 0600 with no JavaScript.
+- **Provenance is marked, not authenticated.** Routed bodies carry one broker-owned cross-session marker with the verified sender alias; it distinguishes the transport path for the receiving model but cannot make untrusted text safe or authenticate against code already running as your OS user.
+- **Bodies stored, bounded, and yours.** Message bodies persist in the broker's private mode-0600 state under bounded retention so the ledger can show you the mail itself; queued mail survives a broker restart and re-sends exactly once. Raw provider frames stay memory-only. The static dashboard files remain metadata-only; the live dashboard shows retained bodies.
 
 See [SECURITY.md](SECURITY.md) for the full boundary and vulnerability-reporting process.
 

package/README.zh-CN.md

@@ -25,7 +25,14 @@ Embassy 专为单人、单一 macOS 账户以及你已信任以该用户身份
 
 ## 快速开始
 
-**前置要求：** macOS、Node.js 20+、Claude Code 2.1.226（仍在运行的 2.1.224–2.1.225 会话保持可发现），以及配置为使用托管独立 App Server 0.147.0 的 Codex 桌面应用。你选择作为目的地的 Claude 会话需要启用 [`crossSessionInbound`](docs/CONFIGURATION.zh-CN.md)——这是 Claude Code 自身的设置，在 Claude Code 中配置，而非在 Embassy 中。
+**前置要求：** macOS、Node.js 20+、Claude Code 2.1.226（仍在运行的 2.1.224–2.1.225 会话保持可发现），以及配置为使用托管独立 App Server 0.147.0 的 Codex 桌面应用：
+
+```bash
+~/.codex/packages/standalone/current/codex app-server daemon start
+/usr/bin/open --env CODEX_APP_SERVER_USE_LOCAL_DAEMON=1 -a ChatGPT
+```
+
+第一条命令在托管守护进程未运行时启动它（也提供 `restart` 与 `stop` 子命令）；第二条以指向该守护进程的方式启动 ChatGPT 桌面应用。`CODEX_APP_SERVER_USE_LOCAL_DAEMON` 未见于 OpenAI 文档；它经验证适用于当前 Desktop 构建，未来可能变化。请在普通终端中运行守护进程命令，切勿在代理会话内运行：Codex 任务会继承守护进程的环境，因此在 Claude Code 会话内启动的守护进程会把该会话的身份泄漏到每个任务中，注册将以 `CALLER_IDENTITY_CONFLICT` 关闭失败——请在普通终端执行 `codex app-server daemon restart` 修复。你选择作为目的地的 Claude 会话需要启用 [`crossSessionInbound`](docs/CONFIGURATION.zh-CN.md)——这是 Claude Code 自身的设置，在 Claude Code 中配置，而非在 Embassy 中。
 
 > **已知限制：** 仅当 Desktop 使用托管独立 App Server 时，Embassy 才能访问 Codex 任务。在该模式下，任务目前无法连接 Desktop 内置的应用内浏览器（`@Browser` 可加载但无法附着）。将 Desktop 切换回其默认的私有 App Server 会立即恢复内置浏览器——但会使这些任务对 Embassy 不可达。目前未发现其他能力回退，但这并非穷尽的能力对比测试。
 
@@ -56,6 +63,8 @@ embassy register-codex --alias codex-reviewer@this-mac
 
 你应看到 `"accepted":true`。`codex-` 前缀是 Claude 发现所必需的。之后若要注销该任务，运行 `unregister-codex`。
 
+仅在同一个 `embassy serve` 代理持续运行期间，托管 App Server 重启后 Embassy 才会自动探测新端点；只有替代端点兼容，且 `thread/loaded/list` 恰好一次找到字节级一致的原任务时，才会重新附着这个别名。端点不兼容，或精确任务缺失、重复，都会使路由保持陈旧以供诊断；Embassy 绝不会按别名改投其他任务，也不会跨端点代际边界重建或重放消息正文。如果 `embassy serve` 本身重启，保留的路由会以 `REOBSERVATION_REQUIRED` 陈旧状态启动；在启动时自动重新激活功能实现之前，必须由同一个 Codex 任务使用同一别名再次运行 `embassy register-codex --alias codex-reviewer@this-mac`，且不要先注销。
+
 ### 3. 选择 Claude 目的地
 
 从 `availablePeers` 中选择一个名称：
@@ -83,7 +92,7 @@ MSG
 
 ### 5. 后续跟进
 
-任一方都可以继续对话：
+任何持有完整 `conv_` 令牌的对话参与方都可以用 `reply` 继续仍然有效的对话。初始发送方从 Embassy 命令结果中获得令牌；接收方则从入站消息的来源封装中获得同一个完整令牌和回复提示：
 
 ```bash
 embassy reply \
@@ -93,10 +102,16 @@ Please expand on the migration risk.
 MSG
 ```
 
+Embassy 会在实际写入提供方之前，为双向路由消息添加一个由代理控制的 `<cross-session-message>` 来源封装。封装标出已经验证的发送方别名，其首个 `<embassy-reply-hint>` 元素包含完整对话令牌、接收方自己的精确别名和可直接使用的 `embassy reply` 命令。朝向 Codex 时，外层标记本身还带有 `conversation="conv_..."`；朝向 Claude 时，为符合 Claude Code 的规范解析格式，完整令牌和回复提示位于封装正文中，而不作为外层属性。请使用收到的完整令牌，切勿猜测或重构它。令牌本身不授予路由权限：每次回复仍会重新检查调用方身份、对话参与关系、实时路由和跳数上限。
+
+`EMBASSY_MAX_HOPS` 限制每个对话的跳数，用于阻止失控的回复循环。初始发送为第 0 跳，此后每次路由回复都会递增；默认值 `16` 意味着正常对话不会触及它。超过上限的尝试会被拒绝，并记录为 `HOP_LIMIT_EXCEEDED`。不要重试已耗尽的对话令牌；请开始新对话。可接受范围及其他边界详见[配置](docs/CONFIGURATION.zh-CN.md)。
+
 ### 实时查看
 
 `embassy dashboard --live` 在浏览器中打开一个五选项卡流式视图（总览、投递、路由、活动、诊断）。详见[仪表盘](docs/DASHBOARD.zh-CN.md)。
 
+实时仪表盘也可以在明确确认后移除孤立的 Codex 注册，但仅限代理已经证明该注册陈旧且其所属端点代际已失效的情况。当前、仅离线或代际状态不明确的注册绝不能通过此恢复操作移除。
+
 代理还会以 mode 0600 发布静态快照 `gateway-dashboard.html` 与 `gateway-dashboard.zh-CN.html`。实时仪表盘的变更操作必须携带同源 `X-Embassy-Request` 哨兵头。
 
 ## 工作原理
@@ -118,6 +133,8 @@ Embassy 将每个已注册的 Codex 任务以各自的 `codex-*` 对等方身份
 
 消息在 Codex 任务忙碌时排队，并在任务空闲后启动普通轮次。仅在 Claude→Codex 方向，正文以精确 `STEER:` 开头的消息可以在 App Server 的下一个工具调用边界进入当前轮次；若该边界不可用，消息会回到普通队列。
 
+每条被路由的消息在接收方看到时都位于 Embassy 生成的跨会话来源封装中，其中包含已验证的发送方别名、完整 `conv_` 令牌和面向该接收方的回复提示。来源封装是模型可见的结构性提示，并非密码学身份认证；消息正文始终应被视为不可信输入。
+
 每条已结算的消息都会产生回执。`delivered` 表示观测到了终端提供方证据——朝向 Codex，意味着 App Server 接受了该轮次；朝向 Claude，意味着消息已释放到会话的原生队列。两者都不意味着模型已读取或执行。`unconfirmed` 和 `ambiguous` 表示证据缺失；它们是终态，从不自动重试。完整语义详见[投递](docs/DELIVERY.zh-CN.md)。
 
 ## 核心术语
@@ -126,13 +143,22 @@ Embassy 将每个已注册的 Codex 任务以各自的 `codex-*` 对等方身份
 
 - **注册与配对**构成权限模型：Codex 任务通过显式注册发布，每个配对是一条显式的 Claude↔Codex 边——只有配对的两端可以交换消息，且多条边可以并存。没有边意味着 `SENDER_NOT_PAIRED`；一切都是显式的。
 - **账簿**是投递记录：每条已结算消息的回执，以及一个仅包含元数据的仪表盘。
-- **信袋**是传输通道：有界的消息体，在 Embassy 内部是临时的，从不被持久化。
+- **信袋**既是传输通道也是档案：有界的消息体，按有界策略保留，只属于你的操作系统账户 — 对其他用户封缄，对你敞开。
 - **领事馆**是路线图：将同一模型通过仅限 attach 的 SSH 扩展到远程主机上的 Codex 任务——已完成设计，但在 v1 中有意禁用。
 
 ## 面向代理
 
 Embassy 的操作者本身往往就是代理：`register-codex` 在 Codex 任务内部运行，而 Claude 端完全通过原生工具驱动。仓库附带 [`skills/embassy-peer/SKILL.md`](skills/embassy-peer/SKILL.md)——请将你的代理指向该技能，而非向它复述本 README。
 
+该技能随 npm 包一同发布；将它安装到各代理发现技能的目录：
+
+```bash
+cp -R "$(npm root -g)/agent-embassy/skills/embassy-peer" ~/.codex/skills/
+cp -R "$(npm root -g)/agent-embassy/skills/embassy-peer" ~/.claude/skills/
+```
+
+之后即可在 Codex 任务中通过 `$embassy-peer` 调用；Claude Code 会将其作为用户技能自动发现。
+
 ## 命令一览
 
 | 命令 | 执行者 | 用途 |
@@ -148,14 +174,15 @@ Embassy 的操作者本身往往就是代理：`register-codex` 在 Codex 任务
 | `select-claude` / `unselect-claude` | 操作员 | `pair`/`unpair` 的单任务简写：仅在 Codex 端无歧义（继承标识或唯一已注册任务）时解析，否则以关闭状态失败 |
 | `send-to-claude` | 已注册的 Codex 任务 | 向已配对的 Claude 会话发送一条有界消息 |
 | `send-to-codex` | Claude 会话 | 使用继承的原生回复标识发送一条有界消息 |
-| `reply` | 任一提供方 | 通过公开令牌继续一个活跃对话 |
+| `reply` | 对话令牌持有方 | 使用初始发送时返回或随入站来源提示收到的完整令牌继续一个活跃对话；路由和跳数限制会重新检查 |
 
 ## 一分钟了解安全性
 
 - **仅限本地套接字。** `embassy serve` 仅监听私有 Unix 域套接字，不发起任何提供商 API 调用。可选启用的 `embassy dashboard --live` 组件是一个独立进程，也是 Embassy 能创建的唯一监听器，绑定到 `127.0.0.1` 上的临时端口。
 - **同 UID 隔离，而非身份认证。** 调用者身份继承自本地进程环境。路由所有权和生成号检查能减少误操作，但不是对已以你的 OS 用户身份运行的代码的防御。
+- **来源标记是提示，不是签名。** Embassy 在提供方写入边界生成跨会话来源封装，让接收模型能够区分代理路由消息及其已验证发送方别名；这不是密码学证明，也不会把不可信正文变成可信指令。
 - **原生权限保持原生。** Embassy 不发送任何 Codex 审批或沙盒覆盖，也不应答任何审批请求。`crossSessionInbound` 仍是 Claude 自身的控制机制；Embassy 无法覆盖它。
-- **消息体从不持久化。** 消息体、提示词、回复和原始提供方帧仅存在于内存中。仅含元数据的仪表盘文件为 mode 0600，不含 JavaScript。
+- **消息体有界保存，属于你。** 消息体以有界保留策略持久化在 broker 的私有 mode-0600 状态中，让台账能够展示邮件本身；排队中的邮件在 broker 重启后幸存并恰好重发一次。原始提供方帧仍仅存于内存。静态仪表盘文件保持仅元数据；实时仪表盘展示保留的正文。
 
 完整的安全边界和漏洞报告流程请参见 [SECURITY.md](SECURITY.md)。
 

package/SECURITY.md

@@ -40,6 +40,11 @@ against other processes running as the same OS user.
   reply capability, not a credential.
 - Aliases are labels. They do not grant authority and are re-resolved against
   the exact private route binding before delivery.
+- Immediately before provider delivery, Embassy places the body inside one
+  broker-owned `cross-session-message` textual frame. Its sender attribution
+  and first-child reply hint come from validated broker metadata, not from the
+  message body. This is a provenance boundary for the receiving model, not a
+  cryptographic signature or authentication against same-UID code.
 - Any process already running as the same OS user may be able to present local
   environment or socket capabilities. Embassy is not a sandbox for untrusted
   same-user code.
@@ -67,10 +72,15 @@ against other processes running as the same OS user.
   path; with an approval-requiring policy, the turn may wait for the user.
 - Claude's native `crossSessionInbound` setting controls messages entering a
   Claude session. Embassy cannot override an accept, hold, or refuse decision.
+- A CLI initiator receives the full conversation token in the accepted control
+  result, and every routed recipient receives it in the broker-owned first
+  `embassy-reply-hint`. The token is a transient participant-scoped locator,
+  not sufficient authority: `reply` rechecks inherited caller identity,
+  conversation membership, current routing policy, and hop count.
 
 Every routed message is untrusted input capable of steering the receiving
-agent. Registration and selection control reachability; they do not make the
-message content trustworthy.
+agent. Registration and routing control reachability; the provenance marker
+does not make the message content or asserted intent trustworthy.
 
 The literal leading `STEER:` prefix is a protocol instruction, not proof of a
 trusted author or safe intent. Any exact same-UID Claude sender already allowed
@@ -114,6 +124,11 @@ broker.
 - Queues, frames, bodies, callbacks, deadlines, hop counts, deduplication,
   rate limits, and transient conversations are bounded. Ambiguous writes are
   never retried automatically.
+- Raw-body classification and accounting happen before framing. In the
+  untrusted body only, Embassy case-insensitively neutralizes boundary-shaped
+  opening or closing copies of `cross-session-message` and
+  `embassy-reply-hint` before composing the real outer frame. Framing or size
+  failure occurs before provider write and is never an ambiguous write.
 - The only network listener Embassy can create belongs to the opt-in
   `embassy dashboard --live` companion, described under "Live companion
   boundary". Everything enumerated above concerns `embassy serve`.
@@ -161,6 +176,15 @@ Message bodies, prompts, replies, raw provider frames, tool data, stderr,
 callback addresses, and socket paths remain memory-only. They are discarded on
 restart and never replayed.
 
+The full `conv_` token exposed to a CLI initiator or routed recipient travels
+only inside the accepted CLI result or transient provider payload. It is never
+persisted, journaled, logged, placed in a receipt, projected through public
+events or snapshots, or rendered on either dashboard; public metadata may
+retain only an existing non-reconstructable suffix. Broker-owned marker fields
+introduce no socket paths, Codex thread IDs, Claude session UUIDs, endpoint
+generations, or private route handles. The untrusted body remains opaque text
+and may itself contain sender-provided strings.
+
 The closed private binding store may retain the exact Codex thread ID and Claude
 session UUID required for ownership and endpoint re-observation. Native IDs are
 forbidden from public snapshots, normalized events, the dashboard, aliases,

package/assets/live-dashboard/app.css

@@ -766,7 +766,6 @@ button:not(:disabled):hover { opacity: .92; }
   align-items: baseline;
   flex-wrap: wrap;
   border: 1px solid var(--hairline);
-  border-left-width: 3px;
   border-radius: var(--radius-sm);
   padding: 12px 16px;
   font-size: 13px;
@@ -775,17 +774,14 @@ button:not(:disabled):hover { opacity: .92; }
 }
 .notice[data-tone="info"] {
   border-color: var(--border-light);
-  border-left-color: var(--action-blue);
   background: var(--pale-blue);
 }
 .notice[data-tone="warning"] {
   border-color: var(--coral-soft);
-  border-left-color: var(--coral);
   background: var(--coral-wash-soft);
 }
 .notice[data-tone="error"] {
   border-color: var(--coral-soft);
-  border-left-color: var(--error);
   background: var(--error-tint);
 }
 .notice__label {
@@ -1167,7 +1163,7 @@ button:not(:disabled):hover { opacity: .92; }
   border: 1px solid var(--hairline);
   background: var(--surface-card);
 }
-.watch-card[data-phase="episode"] { border-left: 3px solid var(--coral); }
+.watch-card[data-phase="episode"] { border-color: var(--coral-soft); background: var(--coral-wash-soft); }
 .watch-card__head { display: flex; justify-content: space-between; gap: 12px; align-items: center; }
 .watch-card > strong { display: block; margin-top: 10px; overflow-wrap: anywhere; }
 .watch-card__facts { display: grid; grid-template-columns: 1fr 1fr; gap: 10px; margin: 14px 0 0; }
@@ -1236,6 +1232,19 @@ button:not(:disabled):hover { opacity: .92; }
 }
 .detail-pane__head { display: grid; gap: 6px; }
 .detail-pane__sub { font-size: 13px; color: var(--muted); }
+.detail-pane__message-body {
+  margin: 6px 0 0;
+  padding: 10px 12px;
+  max-height: 240px;
+  overflow: auto;
+  font-family: var(--mono);
+  font-size: 12.5px;
+  line-height: 1.55;
+  white-space: pre-wrap;
+  overflow-wrap: anywhere;
+  border: 1px solid var(--hairline);
+  background: var(--surface-warm);
+}
 .detail-pane__empty {
   font-size: 14px;
   color: var(--muted);

package/dist/src/gateway/claude-helper-protocol.d.ts

@@ -38,6 +38,9 @@ export type ClaudeNativeHelperCommand = Readonly<{
     binding: PrivateRouteBinding;
     authorization: "selected_route" | "native_reply";
     messageId: string;
+    sourceAlias: string;
+    targetAlias: string;
+    conversationId: string;
     text: string;
     expectsReply: boolean;
     deadlineAt: string;

package/dist/src/gateway/claude-helper-protocol.js

@@ -1,11 +1,15 @@
 export const CLAUDE_NATIVE_HELPER_PROTOCOL_VERSION = 1;
-export const CLAUDE_NATIVE_HELPER_MAX_IPC_BYTES = 32 * 1024;
+// A valid raw 16 KiB dispatch can expand to nearly 96 KiB when JSON escapes
+// control characters. Keep the private IPC frame bounded while carrying that
+// exact reviewed raw-body maximum without changing the provider wire limit.
+export const CLAUDE_NATIVE_HELPER_MAX_IPC_BYTES = 128 * 1024;
 export const CLAUDE_NATIVE_HELPER_MAX_REQUESTS = 64;
 const SAFE_CODE = /^[A-Z][A-Z0-9_]{0,95}$/;
 const REQUEST_ID = /^[A-Za-z0-9_-]{16,64}$/;
 const GENERATION = /^[A-Za-z0-9_-]{1,32}$/;
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 const ALIAS = /^[a-z][a-z0-9_-]{0,31}@[a-z0-9](?:[a-z0-9.-]{0,61}[a-z0-9])?$/;
+const CONVERSATION_ID = /^conv_[A-Za-z0-9_-]{16,64}$/;
 const ROUTE = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/;
 function record(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value);
@@ -100,6 +104,9 @@ function command(value) {
                 "binding",
                 "authorization",
                 "messageId",
+                "sourceAlias",
+                "targetAlias",
+                "conversationId",
                 "text",
                 "expectsReply",
                 "deadlineAt",
@@ -108,6 +115,13 @@ function command(value) {
                 (value.authorization === "selected_route" ||
                     value.authorization === "native_reply") &&
                 boundedString(value.messageId, 256) &&
+                typeof value.sourceAlias === "string" &&
+                ALIAS.test(value.sourceAlias) &&
+                value.sourceAlias.startsWith("codex-") &&
+                typeof value.targetAlias === "string" &&
+                ALIAS.test(value.targetAlias) &&
+                typeof value.conversationId === "string" &&
+                CONVERSATION_ID.test(value.conversationId) &&
                 typeof value.text === "string" &&
                 Buffer.byteLength(value.text, "utf8") <= 16 * 1024 &&
                 typeof value.expectsReply === "boolean" &&

package/dist/src/gateway/claude-helper-protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-helper-protocol.js","sourceRoot":"","sources":["../../../src/gateway/claude-helper-protocol.ts"],"names":[],"mappings":"AAUA,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAU,CAAC;AAChE,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,CAAC;AA4LpD,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAC3C,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAC3C,MAAM,IAAI,GAAG,4EAA4E,CAAC;AAC1F,MAAM,KAAK,GAAG,+DAA+D,CAAC;AAC9E,MAAM,KAAK,GAAG,qCAAqC,CAAC;AAEpD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,KAAK,CACZ,KAA8B,EAC9B,QAA2B,EAC3B,WAA8B,EAAE;IAEhC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,OAAe;IACpD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,OAAO;QACvB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,CACL,MAAM,CAAC,KAAK,CAAC;QACb,KAAK,CAAC,KAAK,EAAE;YACX,UAAU;YACV,QAAQ;YACR,aAAa;YACb,YAAY;YACZ,oBAAoB;SACrB,CAAC;QACF,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC3D,KAAK,CAAC,MAAM,KAAK,UAAU;QAC3B,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAC7B,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC;QACpC,aAAa,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,CACL,MAAM,CAAC,KAAK,CAAC;QACb,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACvB,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;QAChC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QACzB,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK;QACzB,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,CACL,MAAM,CAAC,KAAK,CAAC;QACb,KAAK,CAAC,KAAK,EAAE;YACX,kBAAkB;YAClB,mBAAmB;YACnB,aAAa;YACb,WAAW;SACZ,CAAC;QACF,aAAa,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC;QAC5C,KAAK,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC;QACtC,aAAa,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAC1C,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC;QACvC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;QACjC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC;QACrC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrE,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClC,KAAK,mBAAmB,CAAC;QACzB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,iBAAiB,CAAC;QACvB,KAAK,mBAAmB,CAAC;QACzB,KAAK,kBAAkB,CAAC;QACxB,KAAK,0BAA0B;YAC7B,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACtC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;gBACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAClC,CAAC;QACJ,KAAK,iBAAiB;YACpB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;gBAC7D,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;gBAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBACvB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;gBACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC5B,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC;gBACrC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAChC,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;gBACvC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;gBACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAC7B,CAAC;QACJ,KAAK,UAAU;YACb,OAAO,CACL,KAAK,CAAC,KAAK,EAAE;gBACX,QAAQ;gBACR,SAAS;gBACT,eAAe;gBACf,WAAW;gBACX,MAAM;gBACN,cAAc;gBACd,YAAY;aACb,CAAC;gBACF,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtB,CAAC,KAAK,CAAC,aAAa,KAAK,gBAAgB;oBACvC,KAAK,CAAC,aAAa,KAAK,cAAc,CAAC;gBACzC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;gBACnC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC9B,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI;gBAClD,OAAO,KAAK,CAAC,YAAY,KAAK,SAAS;gBACvC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CACtB,CAAC;QACJ,KAAK,uBAAuB;YAC1B,OAAO,CACL,KAAK,CACH,KAAK,EACL,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAC,EACrC,CAAC,gBAAgB,CAAC,CACnB;gBACD,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC;gBACvC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CACrB;gBACD,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;oBACjC,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;wBACvC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAC3C,CAAC;QACJ,KAAK,yBAAyB;YAC5B,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;gBACrD,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC;gBACvC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACtB,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;gBACxD,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;gBAC/B;oBACE,YAAY;oBACZ,mBAAmB;oBACnB,mBAAmB;oBACnB,4BAA4B;iBAC7B,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACzC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAChD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CACxC,CAAC;QACJ,KAAK,yBAAyB;YAC5B,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;gBACzC,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CACxC,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC3C,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;gBAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBACvB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAC3D,CAAC;QACJ,KAAK,aAAa;YAChB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACjC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;gBAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CACxB,CAAC;QACJ,KAAK,oBAAoB;YACvB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;gBACtD,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBACpD,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;gBACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAClC,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE;gBACX,QAAQ;gBACR,mBAAmB;gBACnB,oBAAoB;aACrB,CAAC;gBACF,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;gBAC3C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBACxC,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ;gBAC5C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAC1C,CAAC;QACJ,KAAK,mBAAmB;YACtB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE;gBACX,QAAQ;gBACR,oBAAoB;gBACpB,kBAAkB;aACnB,CAAC;gBACF,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ;gBAC5C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;gBACzC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;gBAC1C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CACxC,CAAC;QACJ,KAAK,mBAAmB;YACtB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE;gBACX,QAAQ;gBACR,mBAAmB;gBACnB,2BAA2B;aAC5B,CAAC;gBACF,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;gBAC3C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBACxC,OAAO,KAAK,CAAC,yBAAyB,KAAK,QAAQ;gBACnD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CACjD,CAAC;QACJ;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChC,OAAO,CACL,KAAK,CAAC,KAAK,EAAE;YACX,iBAAiB;YACjB,MAAM;YACN,WAAW;YACX,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,iBAAiB;YACjB,oBAAoB;YACpB,cAAc;SACf,CAAC;YACF,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YACtB,KAAK,CAAC,MAAM,KAAK,UAAU;YAC3B,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC;YACnD,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACtE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,KAAK;YACzC,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CACjC,CAAC;IACJ,CAAC;IACD,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,KAAK,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAc;IAEd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,CACL,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;gBAC1E,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;gBACzC;oBACE,qBAAqB;oBACrB,mBAAmB;oBACnB,MAAM;oBACN,UAAU;oBACV,aAAa;oBACb,QAAQ;oBACR,SAAS;oBACT,WAAW;oBACX,WAAW;oBACX,QAAQ;oBACR,WAAW;iBACZ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrC,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;oBACtC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,QAAQ;wBAC5C,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC/C,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;oBAClC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ;wBACxC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YACnC,OAAO,CACL,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;gBAClC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACpC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;YACrC,OAAO,CACL,KAAK,CACH,KAAK,CAAC,KAAK,EACX,CAAC,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,EACrD,CAAC,eAAe,CAAC,CAClB;gBACD,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;gBAClC,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;gBACnC,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;gBACnC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACpC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI;gBACxD,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;oBACtC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CACjD,CAAC;QACJ,CAAC;QACD,OAAO,CACL,KAAK,CAAC,KAAK,KAAK,iBAAiB;YACjC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;YACpC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CACjC,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QACjC,OAAO,KAAK,CAAC,EAAE,KAAK,SAAS,EAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAC3B,CAAC;IACJ,CAAC;IACD,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QACnB,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;QACpC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;QAChC,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAC7C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,IACE,KAAK,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3D,IACE,KAAK,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,CAAC;QAC7B,CAAC,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,QAAQ,CAChD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAC1B,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EACzB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,KAAK,CAAC,KAAK,EAAE;QACX,YAAY;QACZ,yBAAyB;QACzB,iBAAiB;QACjB,eAAe;QACf,mBAAmB;QACnB,yBAAyB;QACzB,wBAAwB;QACxB,4BAA4B;QAC5B,OAAO;KACR,CAAC,EACF,CAAC;QACD,OAAO,CACL,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;YACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YACjC;gBACE,KAAK,CAAC,uBAAuB;gBAC7B,KAAK,CAAC,eAAe;gBACrB,KAAK,CAAC,aAAa;gBACnB,KAAK,CAAC,iBAAiB;gBACvB,KAAK,CAAC,KAAK;aACZ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,SAAS,CAAC;YAC9C;gBACE,KAAK,CAAC,uBAAuB;gBAC7B,KAAK,CAAC,sBAAsB;gBAC5B,KAAK,CAAC,0BAA0B;aACjC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CACJ,KAAK,EACL,CAAC,OAAO,CAAC,EACT,CAAC,eAAe,EAAE,WAAW,CAAC,CAC/B;QACD,CAAC;YACC,SAAS;YACT,UAAU;YACV,UAAU;YACV,WAAW;YACX,QAAQ;YACR,WAAW;YACX,WAAW;SACZ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YAChC,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACtC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1C,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;gBAClC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,EAC5D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,KAAK,CAAC,KAAK,KAAK,SAAS;QACzB,KAAK,CAAC,KAAK,KAAK,UAAU;QAC1B,KAAK,CAAC,KAAK,KAAK,UAAU,EAC1B,CAAC;QACD,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,IACE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAChD,kCAAkC,EAClC,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}
+{"version":3,"file":"claude-helper-protocol.js","sourceRoot":"","sources":["../../../src/gateway/claude-helper-protocol.ts"],"names":[],"mappings":"AAUA,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAU,CAAC;AAChE,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,GAAG,IAAI,CAAC;AAC7D,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,CAAC;AA+LpD,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAC3C,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAC3C,MAAM,IAAI,GAAG,4EAA4E,CAAC;AAC1F,MAAM,KAAK,GAAG,+DAA+D,CAAC;AAC9E,MAAM,eAAe,GAAG,6BAA6B,CAAC;AACtD,MAAM,KAAK,GAAG,qCAAqC,CAAC;AAEpD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,KAAK,CACZ,KAA8B,EAC9B,QAA2B,EAC3B,WAA8B,EAAE;IAEhC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,OAAe;IACpD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,OAAO;QACvB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,CACL,MAAM,CAAC,KAAK,CAAC;QACb,KAAK,CAAC,KAAK,EAAE;YACX,UAAU;YACV,QAAQ;YACR,aAAa;YACb,YAAY;YACZ,oBAAoB;SACrB,CAAC;QACF,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC3D,KAAK,CAAC,MAAM,KAAK,UAAU;QAC3B,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAC7B,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC;QACpC,aAAa,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,CACL,MAAM,CAAC,KAAK,CAAC;QACb,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACvB,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;QAChC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QACzB,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK;QACzB,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,CACL,MAAM,CAAC,KAAK,CAAC;QACb,KAAK,CAAC,KAAK,EAAE;YACX,kBAAkB;YAClB,mBAAmB;YACnB,aAAa;YACb,WAAW;SACZ,CAAC;QACF,aAAa,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC;QAC5C,KAAK,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC;QACtC,aAAa,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAC1C,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC;QACvC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;QACjC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC;QACrC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrE,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClC,KAAK,mBAAmB,CAAC;QACzB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,iBAAiB,CAAC;QACvB,KAAK,mBAAmB,CAAC;QACzB,KAAK,kBAAkB,CAAC;QACxB,KAAK,0BAA0B;YAC7B,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACtC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;gBACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAClC,CAAC;QACJ,KAAK,iBAAiB;YACpB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;gBAC7D,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;gBAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBACvB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;gBACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC5B,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC;gBACrC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAChC,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;gBACvC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;gBACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAC7B,CAAC;QACJ,KAAK,UAAU;YACb,OAAO,CACL,KAAK,CAAC,KAAK,EAAE;gBACX,QAAQ;gBACR,SAAS;gBACT,eAAe;gBACf,WAAW;gBACX,aAAa;gBACb,aAAa;gBACb,gBAAgB;gBAChB,MAAM;gBACN,cAAc;gBACd,YAAY;aACb,CAAC;gBACF,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtB,CAAC,KAAK,CAAC,aAAa,KAAK,gBAAgB;oBACvC,KAAK,CAAC,aAAa,KAAK,cAAc,CAAC;gBACzC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;gBACnC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;gBACrC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC7B,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACtC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;gBACrC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC7B,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;gBACxC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAC1C,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC9B,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI;gBAClD,OAAO,KAAK,CAAC,YAAY,KAAK,SAAS;gBACvC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CACtB,CAAC;QACJ,KAAK,uBAAuB;YAC1B,OAAO,CACL,KAAK,CACH,KAAK,EACL,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAC,EACrC,CAAC,gBAAgB,CAAC,CACnB;gBACD,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC;gBACvC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CACrB;gBACD,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;oBACjC,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;wBACvC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAC3C,CAAC;QACJ,KAAK,yBAAyB;YAC5B,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;gBACrD,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC;gBACvC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACtB,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;gBACxD,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;gBAC/B;oBACE,YAAY;oBACZ,mBAAmB;oBACnB,mBAAmB;oBACnB,4BAA4B;iBAC7B,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACzC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAChD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CACxC,CAAC;QACJ,KAAK,yBAAyB;YAC5B,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;gBACzC,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CACxC,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC3C,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;gBAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBACvB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAC3D,CAAC;QACJ,KAAK,aAAa;YAChB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACjC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;gBAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CACxB,CAAC;QACJ,KAAK,oBAAoB;YACvB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;gBACtD,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBACpD,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;gBACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAClC,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE;gBACX,QAAQ;gBACR,mBAAmB;gBACnB,oBAAoB;aACrB,CAAC;gBACF,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;gBAC3C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBACxC,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ;gBAC5C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAC1C,CAAC;QACJ,KAAK,mBAAmB;YACtB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE;gBACX,QAAQ;gBACR,oBAAoB;gBACpB,kBAAkB;aACnB,CAAC;gBACF,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ;gBAC5C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;gBACzC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;gBAC1C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CACxC,CAAC;QACJ,KAAK,mBAAmB;YACtB,OAAO,CACL,KAAK,CAAC,KAAK,EAAE;gBACX,QAAQ;gBACR,mBAAmB;gBACnB,2BAA2B;aAC5B,CAAC;gBACF,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;gBAC3C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBACxC,OAAO,KAAK,CAAC,yBAAyB,KAAK,QAAQ;gBACnD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CACjD,CAAC;QACJ;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChC,OAAO,CACL,KAAK,CAAC,KAAK,EAAE;YACX,iBAAiB;YACjB,MAAM;YACN,WAAW;YACX,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,iBAAiB;YACjB,oBAAoB;YACpB,cAAc;SACf,CAAC;YACF,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YACtB,KAAK,CAAC,MAAM,KAAK,UAAU;YAC3B,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC;YACnD,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACtE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,KAAK;YACzC,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CACjC,CAAC;IACJ,CAAC;IACD,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,KAAK,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAc;IAEd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,CACL,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;gBAC1E,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;gBACzC;oBACE,qBAAqB;oBACrB,mBAAmB;oBACnB,MAAM;oBACN,UAAU;oBACV,aAAa;oBACb,QAAQ;oBACR,SAAS;oBACT,WAAW;oBACX,WAAW;oBACX,QAAQ;oBACR,WAAW;iBACZ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrC,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;oBACtC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,QAAQ;wBAC5C,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC/C,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;oBAClC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ;wBACxC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YACnC,OAAO,CACL,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;gBAClC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACpC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;YACrC,OAAO,CACL,KAAK,CACH,KAAK,CAAC,KAAK,EACX,CAAC,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,EACrD,CAAC,eAAe,CAAC,CAClB;gBACD,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;gBAClC,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;gBACnC,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;gBACnC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACpC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI;gBACxD,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;oBACtC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CACjD,CAAC;QACJ,CAAC;QACD,OAAO,CACL,KAAK,CAAC,KAAK,KAAK,iBAAiB;YACjC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;YACpC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CACjC,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QACjC,OAAO,KAAK,CAAC,EAAE,KAAK,SAAS,EAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAC3B,CAAC;IACJ,CAAC;IACD,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QACnB,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;QACpC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;QAChC,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAC7C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,IACE,KAAK,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3D,IACE,KAAK,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,CAAC;QAC7B,CAAC,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,QAAQ,CAChD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAC1B,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EACzB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,KAAK,CAAC,KAAK,EAAE;QACX,YAAY;QACZ,yBAAyB;QACzB,iBAAiB;QACjB,eAAe;QACf,mBAAmB;QACnB,yBAAyB;QACzB,wBAAwB;QACxB,4BAA4B;QAC5B,OAAO;KACR,CAAC,EACF,CAAC;QACD,OAAO,CACL,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;YACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YACjC;gBACE,KAAK,CAAC,uBAAuB;gBAC7B,KAAK,CAAC,eAAe;gBACrB,KAAK,CAAC,aAAa;gBACnB,KAAK,CAAC,iBAAiB;gBACvB,KAAK,CAAC,KAAK;aACZ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,SAAS,CAAC;YAC9C;gBACE,KAAK,CAAC,uBAAuB;gBAC7B,KAAK,CAAC,sBAAsB;gBAC5B,KAAK,CAAC,0BAA0B;aACjC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CACJ,KAAK,EACL,CAAC,OAAO,CAAC,EACT,CAAC,eAAe,EAAE,WAAW,CAAC,CAC/B;QACD,CAAC;YACC,SAAS;YACT,UAAU;YACV,UAAU;YACV,WAAW;YACX,QAAQ;YACR,WAAW;YACX,WAAW;SACZ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YAChC,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACtC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1C,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;gBAClC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,EAC5D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,KAAK,CAAC,KAAK,KAAK,SAAS;QACzB,KAAK,CAAC,KAAK,KAAK,UAAU;QAC1B,KAAK,CAAC,KAAK,KAAK,UAAU,EAC1B,CAAC;QACD,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,IACE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAChD,kCAAkC,EAClC,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/src/gateway/claude-helper-supervisor.d.ts

@@ -28,6 +28,8 @@ export declare class ClaudeNativeHelperSupervisor {
     unadvertise(alias: string): Promise<void>;
     dispatch(input: Readonly<{
         sourceAlias: string;
+        targetAlias: string;
+        conversationId: string;
         selectedAlias?: string;
         stateRoot?: string;
         binding: PrivateRouteBinding;

package/dist/src/gateway/claude-helper-supervisor.js

@@ -11,6 +11,9 @@ const TERMINAL_DELIVERY_STATES = new Set([
     "failed",
     "cancelled",
 ]);
+const PUBLIC_ALIAS = /^[a-z][a-z0-9_-]{0,31}@[a-z0-9](?:[a-z0-9.-]{0,61}[a-z0-9])?$/;
+const CONVERSATION_ID = /^conv_[A-Za-z0-9_-]{16,64}$/;
+const MAX_RAW_BODY_BYTES = 16 * 1024;
 function fault(code, recoverable = false) {
     return new BridgeError(code, "The supervised native Claude advertisement could not complete its bounded operation.", recoverable);
 }
@@ -138,12 +141,30 @@ export class ClaudeNativeHelperSupervisor {
             throw failure;
     }
     async dispatch(input) {
+        if (typeof input.sourceAlias !== "string" ||
+            !PUBLIC_ALIAS.test(input.sourceAlias) ||
+            !input.sourceAlias.startsWith("codex-") ||
+            typeof input.targetAlias !== "string" ||
+            !PUBLIC_ALIAS.test(input.targetAlias) ||
+            typeof input.conversationId !== "string" ||
+            !CONVERSATION_ID.test(input.conversationId) ||
+            typeof input.text !== "string") {
+            return { state: "failed", safeErrorCode: "PROVENANCE_ENVELOPE_INVALID" };
+        }
+        if (Buffer.byteLength(input.text, "utf8") > MAX_RAW_BODY_BYTES) {
+            return {
+                state: "failed",
+                safeErrorCode: "PROVENANCE_ENVELOPE_TOO_LARGE",
+            };
+        }
         const helper = this.#helpersByAlias.get(input.sourceAlias);
         if (helper === undefined || helper.closing) {
             return { state: "failed", safeErrorCode: "CLAUDE_NATIVE_HELPER_UNAVAILABLE" };
         }
         if (input.authorization === "selected_route") {
-            if (input.selectedAlias === undefined || input.stateRoot === undefined) {
+            if (input.selectedAlias === undefined ||
+                input.selectedAlias !== input.targetAlias ||
+                input.stateRoot === undefined) {
                 return { state: "failed", safeErrorCode: "CLAUDE_ROUTE_UNAVAILABLE" };
             }
             const authority = `${input.selectedAlias}\0${input.stateRoot}`;
@@ -167,6 +188,9 @@ export class ClaudeNativeHelperSupervisor {
                 binding: input.binding,
                 authorization: input.authorization,
                 messageId: input.messageId,
+                sourceAlias: helper.activeAlias,
+                targetAlias: input.targetAlias,
+                conversationId: input.conversationId,
                 text: input.text,
                 expectsReply: input.expectsReply,
                 deadlineAt: input.deadlineAt,