codex-orchestrator 0.1.46 → 0.1.48

package/dist/src/runner/mission-agent-broker.js

@@ -0,0 +1,182 @@
+import { missionScopeRelationshipKinds, } from './mission-scope-expansion.js';
+export class MissionAgentBroker {
+    transport;
+    constructor(transport) {
+        this.transport = transport;
+    }
+    async diagnose(input) {
+        assertDiagnosisInput(input);
+        const raw = await this.transport.diagnose(structuredClone(input));
+        return parseProposal(raw, input);
+    }
+}
+function parseProposal(raw, input) {
+    const allowed = new Set(input.allowedCapabilities);
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return invalid('expected JSON');
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        return invalid('root must be an object');
+    }
+    const record = parsed;
+    if (record.version !== 1 || typeof record.kind !== 'string') {
+        return invalid('version and kind are required');
+    }
+    if (record.kind === 'observe') {
+        assertExact(record, ['version', 'kind', 'capability', 'paths', 'rationale']);
+        if (record.capability !== 'read-file' && record.capability !== 'git-status') {
+            return invalid('unknown observation capability');
+        }
+        if (!allowed.has(record.capability)) {
+            return invalid('capability is not allowed for this diagnosis');
+        }
+        return {
+            version: 1,
+            kind: 'observe',
+            capability: record.capability,
+            paths: assertSafePaths(record.paths),
+            rationale: assertText(record.rationale, 'rationale'),
+        };
+    }
+    if (record.kind === 'patch') {
+        assertExact(record, ['version', 'kind', 'capability', 'paths', 'patch', 'rationale']);
+        if (record.capability !== 'validate-patch' || !allowed.has('validate-patch')) {
+            return invalid('patch capability is not allowed');
+        }
+        return {
+            version: 1,
+            kind: 'patch',
+            capability: 'validate-patch',
+            paths: assertSafePaths(record.paths),
+            patch: assertText(record.patch, 'patch'),
+            rationale: assertText(record.rationale, 'rationale'),
+        };
+    }
+    if (record.kind === 'runner-action') {
+        assertExact(record, ['version', 'kind', 'executorId', 'findingIds', 'rationale']);
+        const executorId = assertText(record.executorId, 'executorId');
+        if (!(input.allowedRunnerActions ?? []).includes(executorId)) {
+            return invalid('runner action is not allowed for this diagnosis');
+        }
+        const findingIds = assertTextArray(record.findingIds, 'findingIds');
+        if (findingIds.some((id) => !input.findingIds.includes(id))) {
+            return invalid('runner action references an unknown finding');
+        }
+        return {
+            version: 1,
+            kind: 'runner-action',
+            executorId,
+            findingIds,
+            rationale: assertText(record.rationale, 'rationale'),
+        };
+    }
+    if (record.kind === 'scope-expansion') {
+        assertExact(record, [
+            'version', 'kind', 'repository', 'paths', 'evidenceIds', 'relationship', 'rationale',
+        ]);
+        const repository = assertText(record.repository, 'repository');
+        if (!input.repository || repository !== input.repository) {
+            return invalid('scope expansion repository does not match the pinned repository');
+        }
+        const evidenceIds = assertTextArray(record.evidenceIds, 'evidenceIds');
+        const knownEvidence = new Set([...input.findingIds, ...(input.evidenceIds ?? [])]);
+        if (evidenceIds.some((id) => !knownEvidence.has(id))) {
+            return invalid('scope expansion references unknown evidence');
+        }
+        const relationship = parseRelationship(record.relationship);
+        return {
+            version: 1,
+            kind: 'scope-expansion',
+            repository,
+            paths: assertSafePaths(record.paths),
+            evidenceIds,
+            relationship,
+            rationale: assertText(record.rationale, 'rationale'),
+        };
+    }
+    if (record.kind === 'external-input') {
+        assertExact(record, ['version', 'kind', 'evidence', 'resumePredicate']);
+        return {
+            version: 1,
+            kind: 'external-input',
+            evidence: assertTextArray(record.evidence, 'evidence'),
+            resumePredicate: assertText(record.resumePredicate, 'resumePredicate'),
+        };
+    }
+    if (record.kind === 'safety-stop') {
+        assertExact(record, ['version', 'kind', 'evidence', 'invariant']);
+        return {
+            version: 1,
+            kind: 'safety-stop',
+            evidence: assertTextArray(record.evidence, 'evidence'),
+            invariant: assertText(record.invariant, 'invariant'),
+        };
+    }
+    return invalid('unknown kind');
+}
+function assertDiagnosisInput(input) {
+    assertText(input.missionId, 'missionId');
+    assertText(input.snapshotId, 'snapshotId');
+    assertTextArray(input.findingIds, 'findingIds');
+    if (input.allowedCapabilities.length === 0 && (input.allowedRunnerActions?.length ?? 0) === 0) {
+        invalid('at least one allowed capability is required');
+    }
+}
+function parseRelationship(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        return invalid('relationship must be an object');
+    }
+    const record = value;
+    const allowed = new Set(['kind', 'from', 'generatorId']);
+    if (Object.keys(record).some((key) => !allowed.has(key))
+        || !('kind' in record) || !('from' in record)) {
+        return invalid('relationship fields are invalid');
+    }
+    if (typeof record.kind !== 'string'
+        || !missionScopeRelationshipKinds.includes(record.kind)) {
+        return invalid('relationship kind is invalid');
+    }
+    const generatorId = record.generatorId === undefined
+        ? undefined : assertText(record.generatorId, 'generatorId');
+    return {
+        kind: record.kind,
+        from: assertSafePaths([record.from])[0],
+        ...(generatorId ? { generatorId } : {}),
+    };
+}
+function assertSafePaths(value) {
+    const paths = assertTextArray(value, 'paths');
+    if (paths.some((path) => path.startsWith('/') || path.split('/').includes('..')
+        || /(^|\/)\.env(?:\.|$)/iu.test(path) || path === '.git' || path.startsWith('.git/'))) {
+        return invalid('paths contain a secret, Git internal, absolute, or traversal path');
+    }
+    return paths;
+}
+function assertExact(record, fields) {
+    const allowed = new Set(fields);
+    const unexpected = Object.keys(record).find((field) => !allowed.has(field));
+    if (unexpected || fields.some((field) => !(field in record))) {
+        invalid(unexpected ? `unexpected field ${unexpected}` : 'required field is missing');
+    }
+}
+function assertText(value, field) {
+    if (typeof value !== 'string' || value.trim().length === 0) {
+        return invalid(`${field} must be non-empty`);
+    }
+    return value;
+}
+function assertTextArray(value, field) {
+    if (!Array.isArray(value) || value.length === 0
+        || value.some((item) => typeof item !== 'string' || item.trim().length === 0)) {
+        return invalid(`${field} must be a non-empty string array`);
+    }
+    return [...value];
+}
+function invalid(reason) {
+    throw new Error(`Invalid Mission Agent proposal: ${reason}.`);
+}
+//# sourceMappingURL=mission-agent-broker.js.map

package/dist/src/runner/mission-agent-broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-agent-broker.js","sourceRoot":"","sources":["../../../src/runner/mission-agent-broker.ts"],"names":[],"mappings":"AACA,OAAO,EACL,6BAA6B,GAE9B,MAAM,8BAA8B,CAAC;AAwDtC,MAAM,OAAO,kBAAkB;IACO;IAApC,YAAoC,SAAgC;QAAhC,cAAS,GAAT,SAAS,CAAuB;IAAG,CAAC;IAEjE,KAAK,CAAC,QAAQ,CAAC,KAA4B;QAChD,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;CACF;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,KAA4B;IAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACnD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,WAAW,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW,IAAI,MAAM,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;YAC5E,OAAO,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,8CAA8C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;YACpC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;SACrD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,WAAW,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,UAAU,KAAK,gBAAgB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7E,OAAO,OAAO,CAAC,iCAAiC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,gBAAgB;YAC5B,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;YACpC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;YACxC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;SACrD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACpC,WAAW,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7D,OAAO,OAAO,CAAC,iDAAiD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACpE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC5D,OAAO,OAAO,CAAC,6CAA6C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,eAAe;YACrB,UAAU;YACV,UAAU;YACV,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;SACrD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACtC,WAAW,CAAC,MAAM,EAAE;YAClB,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW;SACrF,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;YACzD,OAAO,OAAO,CAAC,iEAAiE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,OAAO,CAAC,6CAA6C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,iBAAiB;YACvB,UAAU;YACV,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;YACpC,WAAW;YACX,YAAY;YACZ,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;SACrD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACrC,WAAW,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACxE,OAAO;YACL,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;YACtD,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,WAAW,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;QAClE,OAAO;YACL,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;YACtD,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;SACrD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA4B;IACxD,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACzC,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC3C,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9F,OAAO,CAAC,6CAA6C,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;WACnD,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;QAChD,OAAO,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;WAC9B,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,IAA6D,CAAC,EAAE,CAAC;QACnH,OAAO,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,SAAS;QAClD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC9D,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAA6D;QAC1E,IAAI,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE;QACxC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC1E,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO,OAAO,CAAC,mEAAmE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,MAA+B,EAAE,MAAgB;IACpE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,OAAO,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;WAC1C,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO,OAAO,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAa,CAAC;AAChC,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,GAAG,CAAC,CAAC;AAChE,CAAC"}

package/dist/src/runner/mission-cancellation.d.ts

@@ -0,0 +1,77 @@
+import { type MissionProcessHandle, type MissionRecord } from './mission-state-machine.js';
+import { type MissionApplyReceipt } from './mission-git-contracts.js';
+import type { MissionStateStore } from './mission-state-store.js';
+export type MissionProcessTerminationResult = {
+    kind: 'terminated';
+} | {
+    kind: 'already-exited';
+} | {
+    kind: 'transient-failure';
+    reason: string;
+};
+export interface MissionCancellationDependencies {
+    terminate(process: MissionProcessHandle): Promise<MissionProcessTerminationResult>;
+    reconcileApply(mission: MissionRecord): Promise<MissionCancellationApplyReconciliation>;
+    nextEligibleAt(reason: string): string;
+}
+export type MissionCancellationApplyReconciliation = {
+    kind: 'old-identity';
+} | {
+    kind: 'new-identity';
+    receipt: MissionApplyReceipt;
+} | {
+    kind: 'transient-failure';
+    reason: string;
+} | {
+    kind: 'safety-stop';
+    reason: string;
+};
+export type MissionObservedProcessIdentity = 'matching' | 'missing' | 'different';
+export interface MissionProcessGroupTerminatorOptions {
+    hostId: string;
+    bootNonce: string;
+    graceMs: number;
+}
+export interface MissionProcessGroupTerminatorDependencies {
+    observe(process: MissionProcessHandle): Promise<MissionObservedProcessIdentity>;
+    signalProcessGroup(pid: number, signal: NodeJS.Signals): void;
+    wait(milliseconds: number): Promise<void>;
+}
+export declare class MissionProcessGroupTerminator {
+    private readonly options;
+    private readonly dependencies;
+    constructor(options: MissionProcessGroupTerminatorOptions, dependencies: MissionProcessGroupTerminatorDependencies);
+    terminate(process: MissionProcessHandle): Promise<MissionProcessTerminationResult>;
+}
+export type MissionCancellationOutcome = {
+    kind: 'cancelled';
+    missionId: string;
+    state: 'cancelled';
+} | {
+    kind: 'safety-stop';
+    missionId: string;
+    state: 'safety-stop';
+    reason: string;
+} | {
+    kind: 'resumable';
+    missionId: string;
+    state: 'cancelling';
+    reason: string;
+    nextEligibleAt: string;
+};
+export declare class MissionCancellationCoordinator {
+    private readonly store;
+    private readonly dependencies;
+    constructor(store: MissionStateStore, dependencies: MissionCancellationDependencies);
+    cancel(input: {
+        expectedGeneration: number;
+        missionId: string;
+        expectedRevision: number;
+        requestedAt: string;
+        requestedBy: string;
+    }): Promise<MissionCancellationOutcome>;
+    private completeCancellation;
+    private deferCancellation;
+    private persistSafetyStop;
+}
+//# sourceMappingURL=mission-cancellation.d.ts.map

package/dist/src/runner/mission-cancellation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-cancellation.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-cancellation.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,aAAa,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,MAAM,+BAA+B,GACvC;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GACtB;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD,MAAM,WAAW,+BAA+B;IAC9C,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACnF,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACxF,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CACxC;AAED,MAAM,MAAM,sCAAsC,GAC9C;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,MAAM,MAAM,8BAA8B,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AAElF,MAAM,WAAW,oCAAoC;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yCAAyC;IACxD,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAChF,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9D,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,qBAAa,6BAA6B;IAEtC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBADZ,OAAO,EAAE,oCAAoC,EAC7C,YAAY,EAAE,yCAAyC;IAS7D,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,+BAA+B,CAAC;CAsBhG;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChF;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEN,qBAAa,8BAA8B;IAEvC,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBADZ,KAAK,EAAE,iBAAiB,EACxB,YAAY,EAAE,+BAA+B;IAGnD,MAAM,CAAC,KAAK,EAAE;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IA2DvC,OAAO,CAAC,oBAAoB;YAuBd,iBAAiB;YA2BjB,iBAAiB;CAoBhC"}

package/dist/src/runner/mission-cancellation.js

@@ -0,0 +1,180 @@
+import { transitionMission, } from './mission-state-machine.js';
+import { assertMissionApplyReceipt, missionApplyPermitFingerprint, } from './mission-git-contracts.js';
+export class MissionProcessGroupTerminator {
+    options;
+    dependencies;
+    constructor(options, dependencies) {
+        this.options = options;
+        this.dependencies = dependencies;
+        requireText(options.hostId, 'terminator hostId');
+        requireText(options.bootNonce, 'terminator bootNonce');
+        if (!Number.isSafeInteger(options.graceMs) || options.graceMs < 0) {
+            throw new Error('Mission cancellation terminator graceMs must be a non-negative integer.');
+        }
+    }
+    async terminate(process) {
+        if (process.hostId !== this.options.hostId) {
+            return { kind: 'transient-failure', reason: 'process-owned-by-different-host' };
+        }
+        if (process.bootNonce !== this.options.bootNonce) {
+            return { kind: 'already-exited' };
+        }
+        if (await this.dependencies.observe(process) !== 'matching') {
+            return { kind: 'already-exited' };
+        }
+        this.dependencies.signalProcessGroup(process.pid, 'SIGTERM');
+        await this.dependencies.wait(this.options.graceMs);
+        if (await this.dependencies.observe(process) !== 'matching') {
+            return { kind: 'terminated' };
+        }
+        this.dependencies.signalProcessGroup(process.pid, 'SIGKILL');
+        await this.dependencies.wait(this.options.graceMs);
+        if (await this.dependencies.observe(process) !== 'matching') {
+            return { kind: 'terminated' };
+        }
+        return { kind: 'transient-failure', reason: 'process-group-still-live-after-sigkill' };
+    }
+}
+export class MissionCancellationCoordinator {
+    store;
+    dependencies;
+    constructor(store, dependencies) {
+        this.store = store;
+        this.dependencies = dependencies;
+    }
+    async cancel(input) {
+        assertTimestamp(input.requestedAt, 'requestedAt');
+        requireText(input.requestedBy, 'requestedBy');
+        const cancelling = await this.store.mutate(input.expectedGeneration, (draft) => {
+            const current = draft.missions[input.missionId];
+            if (!current)
+                throw new Error(`Mission cancellation cannot find ${input.missionId}.`);
+            if (current.revision !== input.expectedRevision) {
+                throw new Error(`Mission cancellation revision conflict for ${input.missionId}.`);
+            }
+            const next = current.state === 'cancelling'
+                ? { ...current, revision: current.revision + 1 }
+                : transitionMission(current, { type: 'cancel-requested' });
+            draft.missions[input.missionId] = {
+                ...next,
+                cancellation: {
+                    requestedAt: current.cancellation?.requestedAt ?? input.requestedAt,
+                    requestedBy: current.cancellation?.requestedBy ?? input.requestedBy,
+                },
+            };
+        });
+        const mission = cancelling.missions[input.missionId];
+        for (const process of mission.claim?.processes ?? []) {
+            const termination = await this.dependencies.terminate(process);
+            if (termination.kind === 'transient-failure') {
+                return this.deferCancellation(cancelling.generation, input.missionId, mission.revision, termination.reason);
+            }
+        }
+        let reconciledReceipt;
+        if (mission.applyIntent || mission.applyReceipt) {
+            const reconciliation = await this.dependencies.reconcileApply(structuredClone(mission));
+            if (reconciliation.kind === 'transient-failure') {
+                return this.deferCancellation(cancelling.generation, input.missionId, mission.revision, reconciliation.reason);
+            }
+            if (reconciliation.kind === 'safety-stop') {
+                return this.persistSafetyStop(cancelling.generation, input.missionId, mission.revision, reconciliation.reason);
+            }
+            if (reconciliation.kind === 'old-identity') {
+                if (mission.applyReceipt) {
+                    return this.persistSafetyStop(cancelling.generation, input.missionId, mission.revision, 'receipt-ref-mismatch');
+                }
+            }
+            else if (!validReconciledReceipt(mission, reconciliation.receipt)) {
+                return this.persistSafetyStop(cancelling.generation, input.missionId, mission.revision, 'apply-reconciliation-receipt-mismatch');
+            }
+            else {
+                reconciledReceipt = reconciliation.receipt;
+            }
+        }
+        const completed = await this.completeCancellation(cancelling.generation, input.missionId, mission.revision, reconciledReceipt);
+        if (completed.missions[input.missionId]?.state !== 'cancelled') {
+            throw new Error('Mission cancellation did not reach cancelled state.');
+        }
+        return { kind: 'cancelled', missionId: input.missionId, state: 'cancelled' };
+    }
+    completeCancellation(expectedGeneration, missionId, expectedRevision, receipt) {
+        return this.store.mutate(expectedGeneration, (draft) => {
+            const current = draft.missions[missionId];
+            if (!current || current.revision !== expectedRevision || current.state !== 'cancelling') {
+                throw new Error(`Mission cancellation reconciliation conflict for ${missionId}.`);
+            }
+            if (receipt && !current.applyHistory?.some((entry) => entry.permitFingerprint === receipt.permitFingerprint)) {
+                current.applyHistory = [...(current.applyHistory ?? []), structuredClone(receipt)];
+            }
+            draft.missions[missionId] = transitionMission(current, {
+                type: 'cancellation-reconciled',
+            });
+            delete draft.nextEligibleAt[missionId];
+            delete draft.reservations[missionId];
+        });
+    }
+    async deferCancellation(expectedGeneration, missionId, expectedRevision, reason) {
+        const nextEligibleAt = this.dependencies.nextEligibleAt(reason);
+        assertTimestamp(nextEligibleAt, 'nextEligibleAt');
+        await this.store.mutate(expectedGeneration, (draft) => {
+            const current = draft.missions[missionId];
+            if (!current || current.revision !== expectedRevision || current.state !== 'cancelling'
+                || !current.claim) {
+                throw new Error(`Mission cancellation retry cannot fence ${missionId}.`);
+            }
+            current.claim.leaseUntil = nextEligibleAt;
+            current.revision += 1;
+            draft.nextEligibleAt[missionId] = nextEligibleAt;
+        });
+        return {
+            kind: 'resumable',
+            missionId,
+            state: 'cancelling',
+            reason,
+            nextEligibleAt,
+        };
+    }
+    async persistSafetyStop(expectedGeneration, missionId, expectedRevision, reason) {
+        requireText(reason, 'safety-stop reason');
+        await this.store.mutate(expectedGeneration, (draft) => {
+            const current = draft.missions[missionId];
+            if (!current || current.revision !== expectedRevision || current.state !== 'cancelling') {
+                throw new Error(`Mission cancellation safety-stop cannot fence ${missionId}.`);
+            }
+            draft.missions[missionId] = transitionMission(current, {
+                type: 'apply-reconciled-third-identity',
+            });
+            delete draft.nextEligibleAt[missionId];
+            delete draft.reservations[missionId];
+        });
+        return { kind: 'safety-stop', missionId, state: 'safety-stop', reason };
+    }
+}
+function validReconciledReceipt(mission, receipt) {
+    try {
+        assertMissionApplyReceipt(receipt);
+    }
+    catch {
+        return false;
+    }
+    const permit = mission.applyPermit;
+    const intent = mission.applyIntent;
+    return Boolean(permit && intent
+        && intent.permitFingerprint === missionApplyPermitFingerprint(permit)
+        && receipt.permitFingerprint === intent.permitFingerprint
+        && receipt.targetRef === permit.targetRef
+        && receipt.oldCommitSha === permit.expectedOldCommit
+        && receipt.commitSha === permit.expectedNewCommit
+        && receipt.treeSha === permit.expectedNewTree);
+}
+function assertTimestamp(value, field) {
+    const milliseconds = Date.parse(value);
+    if (!Number.isFinite(milliseconds) || new Date(milliseconds).toISOString() !== value) {
+        throw new Error(`Mission cancellation ${field} must be an exact UTC ISO timestamp.`);
+    }
+}
+function requireText(value, field) {
+    if (value.trim().length === 0)
+        throw new Error(`Mission cancellation ${field} must be non-empty.`);
+}
+//# sourceMappingURL=mission-cancellation.js.map

package/dist/src/runner/mission-cancellation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-cancellation.js","sourceRoot":"","sources":["../../../src/runner/mission-cancellation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,GAGlB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,yBAAyB,EACzB,6BAA6B,GAE9B,MAAM,4BAA4B,CAAC;AAkCpC,MAAM,OAAO,6BAA6B;IAErB;IACA;IAFnB,YACmB,OAA6C,EAC7C,YAAuD;QADvD,YAAO,GAAP,OAAO,CAAsC;QAC7C,iBAAY,GAAZ,YAAY,CAA2C;QAExE,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjD,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,OAA6B;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IACzF,CAAC;CACF;AAaD,MAAM,OAAO,8BAA8B;IAEtB;IACA;IAFnB,YACmB,KAAwB,EACxB,YAA6C;QAD7C,UAAK,GAAL,KAAK,CAAmB;QACxB,iBAAY,GAAZ,YAAY,CAAiC;IAC7D,CAAC;IAEG,KAAK,CAAC,MAAM,CAAC,KAMnB;QACC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAClD,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACtF,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,KAAK,YAAY;gBACzC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE;gBAChD,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC7D,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG;gBAChC,GAAG,IAAI;gBACP,YAAY,EAAE;oBACZ,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,IAAI,KAAK,CAAC,WAAW;oBACnE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,IAAI,KAAK,CAAC,WAAW;iBACpE;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC;QACtD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;YACrD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/D,IAAI,WAAW,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAClE,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,IAAI,iBAAkD,CAAC;QACvD,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAChD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YACxF,IAAI,cAAc,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAChD,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAClE,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,cAAc,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAClE,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,cAAc,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC3C,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;oBACzB,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAClE,OAAO,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpE,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAClE,OAAO,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,iBAAiB,GAAG,cAAc,CAAC,OAAO,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EACtF,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACvC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC/E,CAAC;IAEO,oBAAoB,CAC1B,kBAA0B,EAC1B,SAAiB,EACjB,gBAAwB,EACxB,OAA6B;QAE7B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YACrD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,oDAAoD,SAAS,GAAG,CAAC,CAAC;YACpF,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACnD,KAAK,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACzD,OAAO,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,iBAAiB,CAAC,OAAO,EAAE;gBACrD,IAAI,EAAE,yBAAyB;aAChC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,kBAA0B,EAC1B,SAAiB,EACjB,gBAAwB,EACxB,MAAc;QAEd,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAChE,eAAe,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY;mBAClF,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,2CAA2C,SAAS,GAAG,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,cAAc,CAAC;YAC1C,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;YACtB,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,KAAK,EAAE,YAAY;YACnB,MAAM;YACN,cAAc;SACf,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,kBAA0B,EAC1B,SAAiB,EACjB,gBAAwB,EACxB,MAAc;QAEd,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,iDAAiD,SAAS,GAAG,CAAC,CAAC;YACjF,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,iBAAiB,CAAC,OAAO,EAAE;gBACrD,IAAI,EAAE,iCAAiC;aACxC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IAC1E,CAAC;CACF;AAED,SAAS,sBAAsB,CAAC,OAAsB,EAAE,OAA4B;IAClF,IAAI,CAAC;QACH,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IACnC,OAAO,OAAO,CAAC,MAAM,IAAI,MAAM;WAC1B,MAAM,CAAC,iBAAiB,KAAK,6BAA6B,CAAC,MAAM,CAAC;WAClE,OAAO,CAAC,iBAAiB,KAAK,MAAM,CAAC,iBAAiB;WACtD,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;WACtC,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,iBAAiB;WACjD,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,iBAAiB;WAC9C,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,eAAe,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,sCAAsC,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa;IAC/C,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,qBAAqB,CAAC,CAAC;AACrG,CAAC"}

package/dist/src/runner/mission-canonical-path.d.ts

@@ -0,0 +1,34 @@
+export interface CanonicalFileIdentity {
+    repositoryPath: string;
+    canonicalPath: string;
+    dev: number;
+    ino: number;
+    mode: number;
+    size: number;
+    mtimeMs: number;
+    sha256: string;
+}
+export interface CanonicalFileInspectionDependencies {
+    beforeRead?: () => Promise<void>;
+}
+export declare function readCanonicalText(input: {
+    root: string;
+    path: string;
+    grantedPaths: string[];
+    deniedPaths: string[];
+    maxBytes: number;
+}): Promise<{
+    text: string;
+    identity: CanonicalFileIdentity;
+}>;
+export declare function inspectCanonicalFile(input: {
+    root: string;
+    path: string;
+    deniedPaths: string[];
+    maxBytes?: number;
+    missing?: 'allow' | 'reject';
+}, dependencies?: CanonicalFileInspectionDependencies): Promise<{
+    identity: CanonicalFileIdentity;
+    content: Buffer;
+} | undefined>;
+//# sourceMappingURL=mission-canonical-path.d.ts.map

package/dist/src/runner/mission-canonical-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-canonical-path.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-canonical-path.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mCAAmC;IAClD,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,qBAAqB,CAAA;CAAE,CAAC,CAiB7D;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC9B,EAAE,YAAY,GAAE,mCAAwC,GAAG,OAAO,CAAC;IAClE,QAAQ,EAAE,qBAAqB,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,SAAS,CAAC,CAkEb"}

package/dist/src/runner/mission-canonical-path.js

@@ -0,0 +1,121 @@
+import { createHash } from 'node:crypto';
+import { constants } from 'node:fs';
+import { lstat, open, realpath, stat } from 'node:fs/promises';
+import { isAbsolute, join, relative } from 'node:path';
+import { globMatches, normalizePath } from '../path-policy.js';
+import { missionPathDenied } from './mission-path-language.js';
+export async function readCanonicalText(input) {
+    const normalized = assertRepositoryRelativePath(input.path);
+    if (!input.grantedPaths.some((pattern) => globMatches(pattern, normalized))) {
+        throw new Error(`Mission observation path is outside granted scope: ${input.path}.`);
+    }
+    const inspected = await inspectCanonicalFile({
+        root: input.root,
+        path: input.path,
+        deniedPaths: input.deniedPaths,
+        maxBytes: input.maxBytes,
+        missing: 'reject',
+    });
+    if (!inspected)
+        throw new Error(`Mission observation file is missing: ${input.path}.`);
+    if (inspected.content.includes(0)) {
+        throw new Error(`Mission observation refuses binary file: ${input.path}.`);
+    }
+    return { text: inspected.content.toString('utf8'), identity: inspected.identity };
+}
+export async function inspectCanonicalFile(input, dependencies = {}) {
+    const normalized = assertRepositoryRelativePath(input.path);
+    if (missionPathDenied(normalized, input.deniedPaths)) {
+        throw new Error(`Mission canonical path is denied: ${normalized}.`);
+    }
+    const canonicalRoot = await realpath(input.root);
+    let current = canonicalRoot;
+    for (const segment of normalized.split('/')) {
+        current = join(current, segment);
+        let info;
+        try {
+            info = await lstat(current);
+        }
+        catch (error) {
+            if (error instanceof Error && 'code' in error && error.code === 'ENOENT'
+                && input.missing !== 'reject')
+                return undefined;
+            throw error;
+        }
+        if (info.isSymbolicLink()) {
+            throw new Error(`Mission canonical path refuses symbolic link: ${normalized}.`);
+        }
+    }
+    const canonicalTarget = await realpath(current);
+    const canonicalRelative = normalizePath(relative(canonicalRoot, canonicalTarget));
+    if (canonicalRelative.startsWith('../') || canonicalRelative === '..' || isAbsolute(canonicalRelative)) {
+        throw new Error(`Mission canonical path escapes repository root: ${normalized}.`);
+    }
+    if (missionPathDenied(canonicalRelative, input.deniedPaths)) {
+        throw new Error(`Mission canonical path is denied: ${canonicalRelative}.`);
+    }
+    const expected = await stat(canonicalTarget, { bigint: true });
+    assertRegularSingleLink(expected, normalized);
+    const handle = await open(current, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const opened = await handle.stat({ bigint: true });
+        assertSameIdentity(expected, opened, normalized);
+        assertStableMetadata(expected, opened, normalized);
+        assertRegularSingleLink(opened, normalized);
+        const maxBytes = input.maxBytes ?? 64 * 1024 * 1024;
+        if (!Number.isSafeInteger(maxBytes) || maxBytes <= 0 || opened.size > BigInt(maxBytes)) {
+            throw new Error(`Mission canonical path size limit exceeded: ${opened.size} > ${maxBytes}.`);
+        }
+        await dependencies.beforeRead?.();
+        const content = await handle.readFile();
+        const after = await handle.stat({ bigint: true });
+        assertSameIdentity(opened, after, normalized);
+        assertStableMetadata(opened, after, normalized);
+        assertRegularSingleLink(after, normalized);
+        if (after.size !== BigInt(content.byteLength)) {
+            throw new Error(`Mission canonical path changed length during read: ${normalized}.`);
+        }
+        return {
+            content,
+            identity: {
+                repositoryPath: canonicalRelative,
+                canonicalPath: canonicalTarget,
+                dev: Number(after.dev),
+                ino: Number(after.ino),
+                mode: Number(after.mode),
+                size: Number(after.size),
+                mtimeMs: Number(after.mtimeNs) / 1_000_000,
+                sha256: createHash('sha256').update(content).digest('hex'),
+            },
+        };
+    }
+    finally {
+        await handle.close();
+    }
+}
+function assertRepositoryRelativePath(path) {
+    const normalized = normalizePath(path);
+    if (isAbsolute(path) || normalized.length === 0
+        || normalized.split('/').some((segment) => segment.length === 0 || segment === '..')) {
+        throw new Error('Mission canonical path must be repository-relative without empty segments.');
+    }
+    return normalized;
+}
+function assertRegularSingleLink(info, path) {
+    if (!info.isFile() || (typeof info.nlink === 'bigint' ? info.nlink !== 1n : info.nlink !== 1)) {
+        throw new Error(`Mission canonical path refuses non-regular or hard-linked file: ${path}.`);
+    }
+}
+function assertSameIdentity(expected, actual, path) {
+    if (expected.dev !== actual.dev || expected.ino !== actual.ino) {
+        throw new Error(`Mission canonical path changed during authorization: ${path}.`);
+    }
+}
+function assertStableMetadata(expected, actual, path) {
+    if (expected.mode !== actual.mode || expected.nlink !== actual.nlink
+        || expected.size !== actual.size || expected.mtimeNs !== actual.mtimeNs
+        || expected.ctimeNs !== actual.ctimeNs) {
+        throw new Error(`Mission canonical path changed during read: ${path}.`);
+    }
+}
+//# sourceMappingURL=mission-canonical-path.js.map

package/dist/src/runner/mission-canonical-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-canonical-path.js","sourceRoot":"","sources":["../../../src/runner/mission-canonical-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAiB/D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAMvC;IACC,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,sDAAsD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC;QAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,QAAQ;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IACvF,IAAI,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAM1C,EAAE,eAAoD,EAAE;IAIvD,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,OAAO,GAAG,aAAa,CAAC;IAC5B,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;mBACnE,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAClD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,UAAU,GAAG,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,iBAAiB,GAAG,aAAa,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;IAClF,IAAI,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,iBAAiB,KAAK,IAAI,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,qCAAqC,iBAAiB,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,uBAAuB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACjD,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACnD,uBAAuB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,CAAC,IAAI,MAAM,QAAQ,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC9C,oBAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAChD,uBAAuB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,sDAAsD,UAAU,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,OAAO;YACL,OAAO;YACP,QAAQ,EAAE;gBACR,cAAc,EAAE,iBAAiB;gBACjC,aAAa,EAAE,eAAe;gBAC9B,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;gBACtB,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;gBACtB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBACxB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBACxB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,SAAS;gBAC1C,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC3D;SACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAY;IAChD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;WAC1C,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAAmD,EACnD,IAAY;IAEZ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,mEAAmE,IAAI,GAAG,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAwD,EACxD,MAAsD,EACtD,IAAY;IAEZ,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,GAAG,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAMC,EACD,MAMC,EACD,IAAY;IAEZ,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;WAC/D,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;WACpE,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,GAAG,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC"}