botmux 3.10.0 → 3.11.0

package/dist/utils/child-env.js

@@ -205,10 +205,19 @@ export const BOTMUX_INJECTED_ENV_KEYS = [
     // session-scoped, capability-gated routes (v3 workflow relay, vc-agent).
     // A port marker, not a credential — every route authenticates independently.
     'BOTMUX_DAEMON_IPC_PORT',
+    // Fail-closed classification hint for macOS read isolation. This is never
+    // authority; cmdSend also checks the host-owned marker + live challenge.
+    'BOTMUX_READ_ISOLATED',
+    // Unguessable pane/profile authority channel. It selects an exact read carve
+    // but is not sufficient without the daemon-rotated capability inside it.
+    'BOTMUX_ORIGIN_CHANNEL_ID',
     // Keep `botmux bots list` and ready-gated CLIs aligned with daemon config.
     'BOTMUX_LARK_LIST_BOTS_API_ENABLED',
     'BOTMUX_LARK_LIST_BOTS_API_TIMEOUT_MS',
     'BOTMUX_READY_COMMAND',
+    // Path to a one-shot 0600 Codex App control bootstrap. Only the path reaches
+    // the pane; the runner consumes+unlinks the file before app-server starts.
+    'BOTMUX_CODEX_APP_CONTROL_BOOTSTRAP',
     // Hermes profile roots must match the worker-side transcript reader.
     'HERMES_HOME',
     'HERMES_BOTMUX_SOURCE_HOME',

package/dist/utils/child-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"child-env.js","sourceRoot":"","sources":["../../src/utils/child-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,YAAY;IACZ,2BAA2B;IAC3B,wBAAwB;IACxB,wBAAwB;IACxB,sBAAsB;IACtB,YAAY;CACJ,CAAC;AAEX;;;;;;;;;;qBAUqB;AACrB,MAAM,6BAA6B,GAAG,CAAC,eAAe,CAAU,CAAC;AAEjE;;;;;;eAMe;AACf,MAAM,UAAU,2BAA2B,CAAC,GAAsB;IAChE,KAAK,MAAM,GAAG,IAAI,8BAA8B;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,6BAA6B;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,aAAa;IACb,iBAAiB;IACjB,cAAc;IACd,UAAU;IACV,GAAG,8BAA8B;IACjC,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,2EAA2E;IAC3E,gFAAgF;IAChF,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM;IACN,WAAW;IACX,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,8EAA8E;IAC9E,wEAAwE;IACxE,gFAAgF;IAChF,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,6DAA6D;IAC7D,+BAA+B;CACvB,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAU,CAAC;AAEtF;;;iBAGiB;AACjB,MAAM,UAAU,sBAAsB,CAAC,GAAsB;IAC3D,KAAK,MAAM,GAAG,IAAI,yBAAyB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,iBAAiB;IACjB,QAAQ;IACR,kBAAkB;IAClB,YAAY;IACZ,wEAAwE;IACxE,mEAAmE;IACnE,mBAAmB;IACnB,gBAAgB;IAChB,0EAA0E;IAC1E,wEAAwE;IACxE,wCAAwC;IACxC,2BAA2B;IAC3B,6BAA6B;IAC7B,qEAAqE;IACrE,kBAAkB;IAClB,oBAAoB;IACpB,wBAAwB;IACxB,sEAAsE;IACtE,2EAA2E;IAC3E,sBAAsB;IACtB,gBAAgB;IAChB,yBAAyB;IACzB,0EAA0E;IAC1E,sDAAsD;IACtD,oBAAoB;IACpB,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,gFAAgF;IAChF,uEAAuE;IACvE,uBAAuB;IACvB,iBAAiB;IACjB,uDAAuD;IACvD,6EAA6E;IAC7E,qEAAqE;IACrE,sBAAsB;IACtB,4EAA4E;IAC5E,+BAA+B;IAC/B,4EAA4E;IAC5E,uEAAuE;IACvE,yEAAyE;IACzE,6EAA6E;IAC7E,wBAAwB;IACxB,2EAA2E;IAC3E,mCAAmC;IACnC,sCAAsC;IACtC,sBAAsB;IACtB,qEAAqE;IACrE,aAAa;IACb,2BAA2B;IAC3B,6BAA6B;IAC7B,gDAAgD;IAChD,mBAAmB;IACnB,YAAY;IACZ,wDAAwD;IACxD,oCAAoC;IACpC,mBAAmB;CACX,CAAC;AAEX;;;;;;;4DAO4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa;IACxD,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW;CACxC,CAAC;AAEX,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,GAAG,wBAAwB;IAC3B,GAAG,uBAAuB;IAC1B,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,6BAA6B;IAC7B,GAAG,cAAc;CAClB,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACjE,GAAG,wBAAwB;IAC3B,aAAa;IACb,iBAAiB;IACjB,0EAA0E;IAC1E,uEAAuE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,GAAG,8BAA8B;CAClC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CAAC,GAAW;IAC/D,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,6BAA6B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,GAAG,GAAsB,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,uBAAuB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"child-env.js","sourceRoot":"","sources":["../../src/utils/child-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,YAAY;IACZ,2BAA2B;IAC3B,wBAAwB;IACxB,wBAAwB;IACxB,sBAAsB;IACtB,YAAY;CACJ,CAAC;AAEX;;;;;;;;;;qBAUqB;AACrB,MAAM,6BAA6B,GAAG,CAAC,eAAe,CAAU,CAAC;AAEjE;;;;;;eAMe;AACf,MAAM,UAAU,2BAA2B,CAAC,GAAsB;IAChE,KAAK,MAAM,GAAG,IAAI,8BAA8B;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,6BAA6B;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,aAAa;IACb,iBAAiB;IACjB,cAAc;IACd,UAAU;IACV,GAAG,8BAA8B;IACjC,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,2EAA2E;IAC3E,gFAAgF;IAChF,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM;IACN,WAAW;IACX,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,8EAA8E;IAC9E,wEAAwE;IACxE,gFAAgF;IAChF,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,6DAA6D;IAC7D,+BAA+B;CACvB,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAU,CAAC;AAEtF;;;iBAGiB;AACjB,MAAM,UAAU,sBAAsB,CAAC,GAAsB;IAC3D,KAAK,MAAM,GAAG,IAAI,yBAAyB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,iBAAiB;IACjB,QAAQ;IACR,kBAAkB;IAClB,YAAY;IACZ,wEAAwE;IACxE,mEAAmE;IACnE,mBAAmB;IACnB,gBAAgB;IAChB,0EAA0E;IAC1E,wEAAwE;IACxE,wCAAwC;IACxC,2BAA2B;IAC3B,6BAA6B;IAC7B,qEAAqE;IACrE,kBAAkB;IAClB,oBAAoB;IACpB,wBAAwB;IACxB,sEAAsE;IACtE,2EAA2E;IAC3E,sBAAsB;IACtB,gBAAgB;IAChB,yBAAyB;IACzB,0EAA0E;IAC1E,sDAAsD;IACtD,oBAAoB;IACpB,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,gFAAgF;IAChF,uEAAuE;IACvE,uBAAuB;IACvB,iBAAiB;IACjB,uDAAuD;IACvD,6EAA6E;IAC7E,qEAAqE;IACrE,sBAAsB;IACtB,4EAA4E;IAC5E,+BAA+B;IAC/B,4EAA4E;IAC5E,uEAAuE;IACvE,yEAAyE;IACzE,6EAA6E;IAC7E,wBAAwB;IACxB,0EAA0E;IAC1E,yEAAyE;IACzE,sBAAsB;IACtB,6EAA6E;IAC7E,yEAAyE;IACzE,0BAA0B;IAC1B,2EAA2E;IAC3E,mCAAmC;IACnC,sCAAsC;IACtC,sBAAsB;IACtB,6EAA6E;IAC7E,2EAA2E;IAC3E,oCAAoC;IACpC,qEAAqE;IACrE,aAAa;IACb,2BAA2B;IAC3B,6BAA6B;IAC7B,gDAAgD;IAChD,mBAAmB;IACnB,YAAY;IACZ,wDAAwD;IACxD,oCAAoC;IACpC,mBAAmB;CACX,CAAC;AAEX;;;;;;;4DAO4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa;IACxD,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW;CACxC,CAAC;AAEX,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,GAAG,wBAAwB;IAC3B,GAAG,uBAAuB;IAC1B,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,6BAA6B;IAC7B,GAAG,cAAc;CAClB,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACjE,GAAG,wBAAwB;IAC3B,aAAa;IACb,iBAAiB;IACjB,0EAA0E;IAC1E,uEAAuE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,GAAG,8BAA8B;CAClC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CAAC,GAAW;IAC/D,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,6BAA6B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,GAAG,GAAsB,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,uBAAuB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/utils/codex-app-control.d.ts

@@ -0,0 +1,438 @@
+import { type KeyObject } from 'node:crypto';
+import { type SpawnSyncReturns } from 'node:child_process';
+import type { BackendType } from '../adapters/backend/types.js';
+import type { ScreenStatus } from '../types.js';
+/**
+ * The launch boundary carries only a path to an owner-only, read-once file.
+ * That file contains a fresh Ed25519 private key. The runner consumes and
+ * unlinks it before app-server (and therefore model tools) can start. Only the
+ * public key is persisted by the worker.
+ */
+export declare const CODEX_APP_CONTROL_BOOTSTRAP_ENV = "BOTMUX_CODEX_APP_CONTROL_BOOTSTRAP";
+export declare const CODEX_APP_CONTROL_LINE_MAX_BYTES = 4096;
+export declare const CODEX_APP_CONTROL_FINAL_MAX_BYTES = 1048576;
+export declare const CODEX_APP_CONTROL_FINAL_CHUNK_BYTES = 1536;
+/** Keep control bootstrap/proof alive for the worker's existing cold-start cap. */
+export declare const CODEX_APP_CONTROL_STARTUP_TIMEOUT_MS = 90000;
+/** Absolute per-connection challenge/accept deadline; transport activity does not extend it. */
+export declare const CODEX_APP_CONTROL_HANDSHAKE_TIMEOUT_MS = 5000;
+declare const CONTROL_STATE_VERSION: 3;
+declare const CONTROL_WIRE_VERSION: 2;
+declare const CONTROL_LOCATOR_VERSION: 1;
+/**
+ * Arm the shared Codex App startup deadline. Keeping the scheduling in one
+ * helper prevents the runner auth gate, bootstrap cleanup, worker proof gate,
+ * and first-prompt hard cap from silently drifting to different lifetimes.
+ */
+export declare function armCodexAppControlStartupTimeout(onTimeout: () => void, timeoutMs?: number): ReturnType<typeof setTimeout>;
+export declare function armCodexAppControlHandshakeTimeout(onTimeout: () => void, timeoutMs?: number): ReturnType<typeof setTimeout>;
+export type CodexAppSignedStateReadiness = 'invalid' | 'waiting' | 'ready';
+/** Authentication and a signed busy/idle bit are not sufficient readiness.
+ * The runner must explicitly assert that its initialized stdin/app-server path
+ * accepts input. Missing/non-boolean values are protocol violations; `false`
+ * is a valid not-ready state that leaves the absolute proof deadline armed. */
+export declare function codexAppSignedStateReadiness(payload: unknown): CodexAppSignedStateReadiness;
+/** Re-armable proof deadline shared by startup and authenticated disconnects. */
+export declare class CodexAppControlProofDeadline {
+    private timer;
+    arm(onTimeout: () => void, timeoutMs?: number): void;
+    clear(): void;
+    get armed(): boolean;
+}
+/**
+ * Coalesce one signed control record while its worker-side effects are still
+ * awaiting a durable daemon ACK. Endpoint replacement can replay the same
+ * generation/sequence before the replay window is committed; every replay
+ * must observe the first application result instead of running queue or
+ * liveness effects again.
+ *
+ * The caller releases the entry only after committing the replay window (or
+ * after a rejected application). Keeping release outside the promise closes
+ * the resolution -> replay-commit gap.
+ */
+export declare class CodexAppControlRecordApplicationGate {
+    private readonly inFlight;
+    run(generation: string, seq: number, apply: () => boolean | Promise<boolean>): Promise<boolean>;
+    release(generation: string, seq: number, application: Promise<boolean>): void;
+    private key;
+}
+export type CodexAppRuntimeScreenStatus = Exclude<ScreenStatus, 'limited'>;
+/** Authentication alone is not readiness. Until the active generation has
+ * published a signed accepting-input state, an idle screen is fail-closed to
+ * working so reconnect replay cannot expose a false-idle interval. */
+export declare function projectCodexAppControlReadinessStatus(base: CodexAppRuntimeScreenStatus, readiness: {
+    controlProven: boolean;
+    signedStateObserved: boolean;
+    inputReady: boolean;
+}): CodexAppRuntimeScreenStatus;
+export interface CodexAppControlPathOptions {
+    platform?: NodeJS.Platform;
+    localAppData?: string;
+    homeDirectory?: string;
+}
+export interface CodexAppControlFilesystemPolicy {
+    useNoFollow: boolean;
+    verifyUid: boolean;
+    verifyExactMode: boolean;
+    chmodAfterCreate: boolean;
+    verifyPostUnlinkLinkCount: boolean;
+    fsyncDirectory: boolean;
+}
+export declare function codexAppControlFilesystemPolicy(platform?: NodeJS.Platform): CodexAppControlFilesystemPolicy;
+/**
+ * Windows never places control material under SESSION_DATA_DIR: that setting
+ * is bot/user supplied and may point at a shared tree.  The fixed root is
+ * instead anchored in the current Windows profile and hardened before any
+ * secret or locator is created beneath it.
+ */
+export declare function codexAppWindowsControlRoot(options?: CodexAppControlPathOptions): string;
+export declare function parseWindowsCurrentSid(output: string): string | undefined;
+export declare function decodeWindowsAclSnapshot(raw: Buffer): string;
+/** Locale-independent verification of the SDDL emitted by `icacls /save`. */
+export declare function verifyWindowsCodexAppControlDacl(snapshot: string, currentSid: string, kind?: 'directory' | 'file'): boolean;
+export type WindowsControlCommandRunner = (command: string, args: string[]) => Pick<SpawnSyncReturns<string>, 'status' | 'stdout' | 'stderr' | 'error'>;
+/**
+ * Remove inherited ACLs, set the current SID as owner, grant only that SID and
+ * SYSTEM full control, and verify the protected DACL. Unknown explicit ACEs
+ * are retained by icacls but cause exact verification to fail closed.
+ */
+export declare function hardenWindowsCodexAppControlDirectory(directory: string, runner?: WindowsControlCommandRunner): void;
+/** Validate/harden a pre-existing fixed-name state file before trusting it. */
+export declare function hardenWindowsCodexAppControlFile(path: string, runner?: WindowsControlCommandRunner): void;
+/** Create/validate a non-symlink owner-only directory. */
+export declare function ensureCodexAppControlDirectory(directory: string, platform?: NodeJS.Platform): void;
+export declare function codexAppControlStatePath(sessionDataDir: string, sessionId: string): string;
+export declare function codexAppControlStatePathForPlatform(sessionDataDir: string, sessionId: string, options?: CodexAppControlPathOptions): string;
+export declare function codexAppControlSocketPath(directory: string, sessionId: string): string;
+export declare function codexAppPosixControlRoot(uid?: number | undefined): string;
+export declare function codexAppPosixOwnerLeaseDirectory(controlRoot: string, sessionId: string): string;
+export declare function generateCodexAppPosixSocketEndpoint(socketDirectory: string): string;
+export declare function codexAppControlLocatorPath(controlRoot: string, sessionId: string, platform?: NodeJS.Platform): string;
+export declare function generateCodexAppWindowsPipeEndpoint(): string;
+/**
+ * A fixed coordination pipe is held for the lifetime of one Windows worker
+ * process. It is not a control endpoint and is never put in a runner locator.
+ * Its only purpose is to serialize locator publishers across the daemon's
+ * kill-then-fork overlap window. The OS releases it if the old worker is
+ * terminated, avoiding a crash-stale filesystem lock.
+ */
+export declare function codexAppWindowsOwnerPipeEndpoint(sessionId: string): string;
+export interface CodexAppControlOwnerLeaseOptions<T> {
+    bind: () => Promise<T>;
+    timeoutMs?: number;
+    retryDelayMs?: number;
+    now?: () => number;
+    wait?: (delayMs: number) => Promise<void>;
+}
+/** Retry only a competing bind; every other owner-lease error fails closed. */
+export declare function acquireCodexAppControlOwnerLease<T>(options: CodexAppControlOwnerLeaseOptions<T>): Promise<T>;
+export type CodexAppOwnerProcessStatus = 'alive' | 'dead' | 'unknown';
+export interface CodexAppPosixOwnerLease {
+    directory: string;
+    ownerRecordPath: string;
+    isOwned(): boolean;
+    release(): void;
+}
+export interface CodexAppPosixOwnerLeaseOptions {
+    controlRoot: string;
+    sessionId: string;
+    platform?: NodeJS.Platform;
+    timeoutMs?: number;
+    retryDelayMs?: number;
+    initializationGraceMs?: number;
+    pid?: number;
+    processStartToken?: string;
+    now?: () => number;
+    wait?: (delayMs: number) => Promise<void>;
+    inspectOwner?: (pid: number, processStartToken: string) => CodexAppOwnerProcessStatus;
+    /** Deterministic handoff-race seam: invoked after mkdir(EEXIST), before observation. */
+    onContended?: () => void;
+    /** Deterministic crash-resume seam: invoked after this creator pins the new directory inode. */
+    onOwnerDirectoryCreated?: (directory: string) => void | Promise<void>;
+    /** Deterministic crash-window seam: pauses after owner publication, before the directory CAS. */
+    onOwnerRecordPublished?: (directory: string, ownerRecordPath: string) => void | Promise<void>;
+    /** Deterministic replacement seam: pauses after a stale owner is pinned, before reaper publication. */
+    onBeforeReaperRecordPublished?: (directory: string) => void | Promise<void>;
+    /** Deterministic crash-window seam: pauses after reaper publication, before the directory CAS. */
+    onReaperRecordPublished?: (directory: string, reaperRecordPath: string) => void | Promise<void>;
+}
+export declare function codexAppPosixProcessProbeEnv(base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function readCodexAppProcessStartToken(pid: number, platform?: NodeJS.Platform): string | undefined;
+/**
+ * Process-lifetime publisher lease for POSIX.
+ *
+ * Both owners and stale cleaners publish complete, random-name actor records.
+ * An actor record is written to `.pending`, synced, and atomically renamed to
+ * `.json`, so SIGKILL cannot create a partial authoritative record. Existing
+ * partial records remain recoverable after a grace interval. Every complete
+ * actor is bound to the exact directory dev+ino it intended to mutate; reapers
+ * additionally bind the exact owner-record inode/process tuple. A cleaner moves
+ * the exact observed random-name inode out of the authority directory before
+ * deleting it; that rename is the CAS boundary which prevents a delayed actor
+ * from poisoning or deleting a successor's record after path replacement.
+ */
+export declare function acquireCodexAppPosixOwnerLease(options: CodexAppPosixOwnerLeaseOptions): Promise<CodexAppPosixOwnerLease>;
+export declare function generateCodexAppControlEpoch(): string;
+export interface CodexAppControlLocator {
+    version: typeof CONTROL_LOCATOR_VERSION;
+    sessionId: string;
+    epoch: string;
+    endpoint: string;
+}
+export declare function isValidCodexAppWindowsPipeEndpoint(endpoint: unknown): endpoint is string;
+export interface CodexAppControlLocatorValidationOptions {
+    platform?: NodeJS.Platform;
+    locatorPath?: string;
+    /** Trusted, worker-owned root; never derive this authority from locatorPath. */
+    expectedControlRoot?: string;
+}
+export declare function validateCodexAppControlLocator(value: unknown, expectedSessionId: string, options?: CodexAppControlLocatorValidationOptions): CodexAppControlLocator | undefined;
+export interface CodexAppControlIdentity {
+    generation: string;
+    publicKey: string;
+    createdAtMs: number;
+}
+/**
+ * pending may contain an old live identity plus a fresh spawn candidate. The
+ * first identity that answers this worker's fresh socket challenge is atomically
+ * collapsed to the sole active identity. No private material is persisted.
+ */
+export interface CodexAppControlState {
+    version: typeof CONTROL_STATE_VERSION;
+    status: 'pending' | 'active';
+    identities: CodexAppControlIdentity[];
+    updatedAtMs: number;
+    activatedAtMs?: number;
+}
+export declare function readCodexAppControlState(path: string, platform?: NodeJS.Platform): CodexAppControlState | undefined;
+/** Symlink-safe atomic state replacement inside a private directory. */
+export declare function writeCodexAppControlState(path: string, state: CodexAppControlState): void;
+export declare function writeCodexAppControlStateForPlatform(path: string, state: CodexAppControlState, platform: NodeJS.Platform): void;
+export declare function readCodexAppControlLocator(path: string, expectedSessionId: string, platform?: NodeJS.Platform, expectedControlRoot?: string | undefined): CodexAppControlLocator | undefined;
+export declare function writeCodexAppControlLocator(path: string, locator: CodexAppControlLocator, platform?: NodeJS.Platform, expectedControlRoot?: string | undefined): void;
+/**
+ * The ordering contract is security-sensitive on every platform: the random
+ * pipe/socket must already be bound before its locator becomes visible.
+ */
+export declare function bindThenPublishCodexAppControlLocator(input: {
+    sessionId: string;
+    epoch: string;
+    endpoint: string;
+    listen: (endpoint: string) => Promise<void>;
+    publish: (locator: CodexAppControlLocator) => void;
+    platform?: NodeJS.Platform;
+    locatorPath?: string;
+    expectedControlRoot?: string;
+    isCurrent?: () => boolean;
+    retire?: () => void;
+}): Promise<CodexAppControlLocator | undefined>;
+export declare function shouldFailCodexAppControlChannel(input: {
+    channelId: number;
+    currentChannelId: number;
+    stopping: boolean;
+}): boolean;
+/**
+ * Runner-side endpoint policy for locator rotations. A never-accepted
+ * locator may be retried (the independently random, protected epoch is still
+ * required for acceptance) until the shared startup deadline. Once accepted,
+ * the pipe name is permanently burned and only a newly published endpoint can
+ * be used.
+ */
+export declare class CodexAppControlEndpointTracker {
+    private readonly attemptsByEndpoint;
+    private readonly acceptedEndpoints;
+    take(locator: CodexAppControlLocator): string | undefined;
+    noteAccepted(endpoint: string): void;
+    wasAttempted(endpoint: string): boolean;
+    attemptCount(endpoint: string): number;
+    wasAccepted(endpoint: string): boolean;
+}
+/** Read and select one locator endpoint; missing/corrupt files are a poll miss. */
+export declare function takeCodexAppControlLocatorEndpoint(input: {
+    locatorPath: string;
+    sessionId: string;
+    tracker: CodexAppControlEndpointTracker;
+    platform?: NodeJS.Platform;
+    expectedControlRoot?: string;
+}): {
+    endpoint: string;
+    epoch: string;
+} | undefined;
+/** Missing/corrupt/legacy generations cannot prove a warm reattach. */
+export declare function shouldColdStartCodexAppReattach(input: {
+    cliId?: string;
+    backendType: BackendType;
+    isReattach: boolean;
+    persistedState?: CodexAppControlState;
+}): boolean;
+export interface CodexAppControlBootstrap {
+    path: string;
+    identity: CodexAppControlIdentity;
+}
+export interface ConsumedCodexAppControlBootstrap {
+    generation: string;
+    privateKey: KeyObject;
+    socketPath?: string;
+    locatorPath?: string;
+}
+export type CodexAppControlBootstrapTarget = {
+    kind: 'endpoint';
+    socketPath: string;
+} | {
+    kind: 'locator';
+    locatorPath: string;
+};
+/** Create a fresh asymmetric candidate and one O_EXCL private bootstrap. */
+export declare function createCodexAppControlBootstrap(directory: string, sessionId: string, target?: string | CodexAppControlBootstrapTarget, platform?: NodeJS.Platform): CodexAppControlBootstrap;
+/** Remove crash-orphaned one-shot files for exactly one session generation. */
+export declare function cleanupStaleCodexAppControlBootstraps(directory: string, sessionId: string, platform?: NodeJS.Platform): void;
+/**
+ * One-shot consume on one O_NOFOLLOW fd. The file is unlinked before its bytes
+ * are read and the post-unlink link count must be zero. The private key is
+ * imported here so callers do not retain or forward its encoded form.
+ */
+export declare function consumeCodexAppControlBootstrap(path: string, expectedSessionId?: string, platform?: NodeJS.Platform): ConsumedCodexAppControlBootstrap;
+export declare function mergeCodexAppControlCandidate(existing: CodexAppControlState | undefined, candidate: CodexAppControlIdentity, nowMs?: number): CodexAppControlState;
+export declare function activateCodexAppControlIdentity(state: CodexAppControlState, generation: string, nowMs?: number): CodexAppControlState;
+export declare function generateCodexAppControlChallenge(): string;
+export interface CodexAppControlChallenge {
+    version: typeof CONTROL_WIRE_VERSION;
+    type: 'challenge';
+    sessionId: string;
+    challenge: string;
+}
+export interface CodexAppControlAuth {
+    version: typeof CONTROL_WIRE_VERSION;
+    type: 'auth';
+    sessionId: string;
+    generation: string;
+    challenge: string;
+    signature: string;
+}
+export interface CodexAppControlAccepted {
+    version: typeof CONTROL_WIRE_VERSION;
+    type: 'accepted';
+    sessionId: string;
+    generation: string;
+    challenge: string;
+    endpointEpoch?: string;
+}
+export interface CodexAppControlAck {
+    version: typeof CONTROL_WIRE_VERSION;
+    type: 'ack';
+    sessionId: string;
+    generation: string;
+    challenge: string;
+    seq: number;
+}
+export interface CodexAppSignedControlMarker {
+    version: typeof CONTROL_WIRE_VERSION;
+    type: 'marker';
+    sessionId: string;
+    generation: string;
+    challenge: string;
+    seq: number;
+    kind: string;
+    payload: Record<string, unknown>;
+    signature: string;
+}
+export type CodexAppControlWireRecord = CodexAppControlChallenge | CodexAppControlAuth | CodexAppControlAccepted | CodexAppControlAck | CodexAppSignedControlMarker;
+export declare function encodeCodexAppControlChallenge(sessionId: string, challenge: string): string;
+export declare function encodeCodexAppControlAccepted(sessionId: string, generation: string, challenge: string, endpointEpoch?: string): string;
+export declare function encodeCodexAppControlAck(sessionId: string, generation: string, challenge: string, seq: number): string;
+export declare function encodeCodexAppControlAuth(privateKey: KeyObject, sessionId: string, generation: string, challenge: string): string;
+export declare function encodeCodexAppSignedControlMarker(privateKey: KeyObject, sessionId: string, generation: string, challenge: string, seq: number, kind: string, payload: Record<string, unknown>): string;
+export declare function parseCodexAppControlWireRecord(line: string): CodexAppControlWireRecord | undefined;
+export type CodexAppControlRunnerHandshakeAction = {
+    type: 'authenticate';
+    challenge: string;
+} | {
+    type: 'accepted';
+    challenge: string;
+} | {
+    type: 'ack';
+    seq: number;
+} | {
+    type: 'reject';
+};
+/**
+ * Pure runner-side handshake state machine. Keeping the phase checks here
+ * makes repeated challenges, wrong locator epochs, and out-of-order ACKs
+ * executable in unit tests instead of relying on source-string assertions.
+ */
+export declare class CodexAppControlRunnerHandshake {
+    private readonly expectedSessionId;
+    private readonly expectedGeneration;
+    private readonly expectedEndpointEpoch?;
+    private phase;
+    private challengeValue;
+    constructor(expectedSessionId: string, expectedGeneration: string, expectedEndpointEpoch?: string | undefined);
+    handle(record: CodexAppControlWireRecord | undefined, sentThrough: number): CodexAppControlRunnerHandshakeAction;
+    get active(): boolean;
+}
+export declare function verifyCodexAppControlAuth(auth: CodexAppControlAuth, publicKey: string): boolean;
+export declare function authenticateCodexAppControlCandidate(input: {
+    state: CodexAppControlState | undefined;
+    auth: CodexAppControlAuth;
+    sessionId: string;
+    challenge: string;
+}): CodexAppControlIdentity | undefined;
+export declare function verifyCodexAppSignedControlMarker(marker: CodexAppSignedControlMarker, publicKey: string): boolean;
+/**
+ * Marker sequences may begin above one after a worker replacement, but every
+ * record on one authenticated connection must then be contiguous. This keeps
+ * a skipped final fragment from being hidden by a later cumulative ACK.
+ */
+export declare class CodexAppControlSequenceFence {
+    private previous;
+    accept(seq: number): boolean;
+}
+export type CodexAppFinalAssemblyResult = {
+    status: 'not-final';
+} | {
+    status: 'accepted';
+} | {
+    status: 'complete';
+    payload: Record<string, unknown>;
+} | {
+    status: 'reject';
+    reason: string;
+};
+/**
+ * Per-connection final transaction assembler. Start and chunks deliberately
+ * remain unacknowledged; only a valid, complete end record is eligible for the
+ * cumulative ACK. Any gap or interleaving rejects the connection, so the
+ * runner must re-sign and replay the complete transaction under a new
+ * challenge.
+ */
+export declare class CodexAppControlFinalAssembler {
+    private active;
+    accept(kind: string, payload: Record<string, unknown>): CodexAppFinalAssemblyResult;
+    clear(): void;
+    private reject;
+}
+/**
+ * Per-worker replay window for authenticated runner generations. A runner may
+ * reconnect after losing an ACK and legitimately re-sign the same sequence
+ * under the new connection challenge; the worker ACKs that retry without
+ * applying its lifecycle/final side effects twice.
+ */
+export declare class CodexAppControlReplayWindow {
+    private readonly highWaterByGeneration;
+    highWater(generation: string): number;
+    hasSeen(generation: string, seq: number): boolean;
+    commit(generation: string, seq: number): void;
+    retainOnly(generation: string): void;
+}
+/** Bounded newline decoder; oversized attacker input is discarded until resync. */
+export declare class CodexAppControlLineDecoder {
+    private pending;
+    private droppingOversized;
+    push(chunk: Buffer): {
+        lines: string[];
+        droppedMalformed: boolean;
+    };
+    clear(): void;
+}
+export {};
+//# sourceMappingURL=codex-app-control.d.ts.map

package/dist/utils/codex-app-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-app-control.d.ts","sourceRoot":"","sources":["../../src/utils/codex-app-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAQL,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAa,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAuBtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,uCAAuC,CAAC;AAEpF,eAAO,MAAM,gCAAgC,OAAQ,CAAC;AACtD,eAAO,MAAM,iCAAiC,UAAY,CAAC;AAC3D,eAAO,MAAM,mCAAmC,OAAQ,CAAC;AACzD,mFAAmF;AACnF,eAAO,MAAM,oCAAoC,QAAS,CAAC;AAC3D,gGAAgG;AAChG,eAAO,MAAM,sCAAsC,OAAQ,CAAC;AAE5D,QAAA,MAAM,qBAAqB,EAAG,CAAU,CAAC;AACzC,QAAA,MAAM,oBAAoB,EAAG,CAAU,CAAC;AAExC,QAAA,MAAM,uBAAuB,EAAG,CAAU,CAAC;AAiB3C;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,SAAS,EAAE,MAAM,IAAI,EACrB,SAAS,SAAuC,GAC/C,UAAU,CAAC,OAAO,UAAU,CAAC,CAE/B;AAED,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,MAAM,IAAI,EACrB,SAAS,SAAyC,GACjD,UAAU,CAAC,OAAO,UAAU,CAAC,CAE/B;AAED,MAAM,MAAM,4BAA4B,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE3E;;;+EAG+E;AAC/E,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,OAAO,GAAG,4BAA4B,CAK3F;AAED,iFAAiF;AACjF,qBAAa,4BAA4B;IACvC,OAAO,CAAC,KAAK,CAA4C;IAEzD,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,SAAS,SAAuC,GAAG,IAAI;IASlF,KAAK,IAAI,IAAI;IAKb,IAAI,KAAK,IAAI,OAAO,CAEnB;CACF;AAED;;;;;;;;;;GAUG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuC;IAEhE,GAAG,CACD,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GACtC,OAAO,CAAC,OAAO,CAAC;IASnB,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI;IAK7E,OAAO,CAAC,GAAG;CAGZ;AAED,MAAM,MAAM,2BAA2B,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AAE3E;;sEAEsE;AACtE,wBAAgB,qCAAqC,CACnD,IAAI,EAAE,2BAA2B,EACjC,SAAS,EAAE;IACT,aAAa,EAAE,OAAO,CAAC;IACvB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC;CACrB,GACA,2BAA2B,CAO7B;AAQD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,yBAAyB,EAAE,OAAO,CAAC;IACnC,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,wBAAgB,+BAA+B,CAC7C,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,+BAA+B,CAmBjC;AAmCD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,GAAE,0BAA+B,GACvC,MAAM,CAkBR;AAkCD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOzE;AAWD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM5D;AAoCD,6EAA6E;AAC7E,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,WAAW,GAAG,MAAoB,GACvC,OAAO,CAyBT;AAED,MAAM,MAAM,2BAA2B,GAAG,CACxC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,KACX,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC,CAAC;AAsH9E;;;;GAIG;AACH,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,2BAAgE,GACvE,IAAI,CAEN;AAED,+EAA+E;AAC/E,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,2BAAgE,GACvE,IAAI,CAEN;AAED,0DAA0D;AAC1D,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,IAAI,CAqCN;AAMD,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAK1F;AAED,wBAAgB,mCAAmC,CACjD,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,0BAA+B,GACvC,MAAM,CAMR;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAItF;AAED,wBAAgB,wBAAwB,CAAC,GAAG,qBAAqB,GAAG,MAAM,CAEzE;AAED,wBAAgB,gCAAgC,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/F;AAED,wBAAgB,mCAAmC,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAER;AAED,wBAAgB,mCAAmC,IAAI,MAAM,CAE5D;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,MAAM,WAAW,gCAAgC,CAAC,CAAC;IACjD,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,+EAA+E;AAC/E,wBAAsB,gCAAgC,CAAC,CAAC,EACtD,OAAO,EAAE,gCAAgC,CAAC,CAAC,CAAC,GAC3C,OAAO,CAAC,CAAC,CAAC,CAqBZ;AA8BD,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,IAAI,OAAO,CAAC;IACnB,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,8BAA8B;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,KAAK,0BAA0B,CAAC;IACtF,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB,gGAAgG;IAChG,uBAAuB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,iGAAiG;IACjG,sBAAsB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9F,uGAAuG;IACvG,6BAA6B,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,kGAAkG;IAClG,uBAAuB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjG;AASD,wBAAgB,4BAA4B,CAC1C,IAAI,GAAE,MAAM,CAAC,UAAwB,GACpC,MAAM,CAAC,UAAU,CAKnB;AAED,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,GAAG,SAAS,CAgBpB;AAkiBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,uBAAuB,CAAC,CA6iBlC;AAED,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,uBAAuB,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,IAAI,MAAM,CAGxF;AA6BD,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,EACd,iBAAiB,EAAE,MAAM,EACzB,OAAO,GAAE,uCAA4C,GACpD,sBAAsB,GAAG,SAAS,CAkBpC;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,qBAAqB,CAAC;IACtC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA2FD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,oBAAoB,GAAG,SAAS,CAYlC;AA4CD,wEAAwE;AACxE,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAEzF;AAED,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,oBAAoB,EAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ,GACxB,IAAI,CAwBN;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,iBAAiB,EAAE,MAAM,EACzB,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,mBAAmB,GAAE,MAAM,GAAG,SAEA,GAC7B,sBAAsB,GAAG,SAAS,CAgBpC;AAED,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,mBAAmB,GAAE,MAAM,GAAG,SAEA,GAC7B,IAAI,CA+BN;AAED;;;GAGG;AACH,wBAAsB,qCAAqC,CAAC,KAAK,EAAE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,IAAI,CAAC;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;CACrB,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAwB9C;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;CACnB,GAAG,OAAO,CAEV;AAED;;;;;;GAMG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAChE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IAEvD,IAAI,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,GAAG,SAAS;IAOzD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAOpC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIvC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAItC,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,mFAAmF;AACnF,wBAAgB,kCAAkC,CAAC,KAAK,EAAE;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,8BAA8B,CAAC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAWlD;AAID,uEAAuE;AACvE,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACvC,GAAG,OAAO,CAKV;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,uBAAuB,CAAC;CACnC;AAED,MAAM,WAAW,gCAAgC;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,SAAS,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,8BAA8B,GACtC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,4EAA4E;AAC5E,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAAM,GAAG,8BAAgF,EACjG,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,wBAAwB,CAmC1B;AAED,+EAA+E;AAC/E,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,IAAI,CAQN;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,MAAM,EACZ,iBAAiB,CAAC,EAAE,MAAM,EAC1B,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,gCAAgC,CAqElC;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,oBAAoB,GAAG,SAAS,EAC1C,SAAS,EAAE,uBAAuB,EAClC,KAAK,SAAa,GACjB,oBAAoB,CAatB;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,oBAAoB,EAC3B,UAAU,EAAE,MAAM,EAClB,KAAK,SAAa,GACjB,oBAAoB,CAUtB;AAED,wBAAgB,gCAAgC,IAAI,MAAM,CAEzD;AAgDD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,oBAAoB,CAAC;IACrC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,oBAAoB,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,oBAAoB,CAAC;IACrC,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,oBAAoB,CAAC;IACrC,IAAI,EAAE,KAAK,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,oBAAoB,CAAC;IACrC,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,yBAAyB,GACjC,wBAAwB,GACxB,mBAAmB,GACnB,uBAAuB,GACvB,kBAAkB,GAClB,2BAA2B,CAAC;AAEhC,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,GACrB,MAAM,CAeR;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,MAAM,CAaR;AAMD,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,SAAS,EACrB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAWR;AAaD,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,SAAS,EACrB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,CAYR;AAED,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,yBAAyB,GAAG,SAAS,CAkClG;AAED,MAAM,MAAM,oCAAoC,GAC5C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEvB;;;;GAIG;AACH,qBAAa,8BAA8B;IAKvC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IANzC,OAAO,CAAC,KAAK,CAAoD;IACjE,OAAO,CAAC,cAAc,CAAqB;gBAGxB,iBAAiB,EAAE,MAAM,EACzB,kBAAkB,EAAE,MAAM,EAC1B,qBAAqB,CAAC,EAAE,MAAM,YAAA;IAGjD,MAAM,CACJ,MAAM,EAAE,yBAAyB,GAAG,SAAS,EAC7C,WAAW,EAAE,MAAM,GAClB,oCAAoC;IA2BvC,IAAI,MAAM,IAAI,OAAO,CAEpB;CACF;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAO/F;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,KAAK,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACxC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,uBAAuB,GAAG,SAAS,CAUtC;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,2BAA2B,EACnC,SAAS,EAAE,MAAM,GAChB,OAAO,CAcT;AAED;;;;GAIG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAqB;IAErC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;CAM7B;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACxD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAazC;;;;;;GAMG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,MAAM,CAAyC;IAEvD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,2BAA2B;IAqEnF,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,MAAM;CAIf;AAED;;;;;GAKG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA6B;IAEnE,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAIrC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAIjD,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAO7C,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;CAKrC;AAED,mFAAmF;AACnF,qBAAa,0BAA0B;IACrC,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,iBAAiB,CAAS;IAElC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE;IA+BnE,KAAK,IAAI,IAAI;CAId"}