codex-orchestrator 0.1.47 → 0.1.49

package/dist/src/runner/mission-sandbox.js

@@ -0,0 +1,91 @@
+import { realpathSync } from 'node:fs';
+import { homedir, tmpdir } from 'node:os';
+export function buildMissionSandboxInvocation(input) {
+    assertAbsolute(input.workspaceRoot, 'workspaceRoot');
+    assertAbsolute(input.quarantineRoot, 'quarantineRoot');
+    assertAbsolute(input.command, 'command');
+    const workspaceRoot = canonicalExistingPath(input.workspaceRoot);
+    const quarantineRoot = canonicalExistingPath(input.quarantineRoot);
+    if (input.backend === 'macos-sandbox') {
+        const deniedUserRoots = [...new Set([
+                '/Users', homedir(), tmpdir(), '/private/tmp', '/tmp', '/Volumes',
+            ].flatMap((path) => {
+                const canonical = canonicalPathIfPresent(path);
+                return canonical === undefined ? [] : [canonical];
+            }))];
+        const profile = [
+            '(version 1)',
+            '(deny default)',
+            '(deny network*)',
+            '(allow process-exec)',
+            '(allow signal (target self))',
+            '(allow sysctl-read)',
+            '(allow file-read*)',
+            '(allow file-write* (literal "/dev/null"))',
+            `(deny file-read-data ${deniedUserRoots.map((path) => `(subpath ${quoted(path)})`).join(' ')})`,
+            `(allow file-read-data (subpath ${quoted(workspaceRoot)}) (subpath ${quoted(quarantineRoot)}))`,
+            ...(input.deniedReadPaths ?? []).map((path) => {
+                assertAbsolute(path, 'deniedReadPaths entry');
+                const canonical = canonicalExistingPath(path);
+                return `(deny file-read-data (literal ${quoted(canonical)}) (subpath ${quoted(canonical)}))`;
+            }),
+            ...(input.mode === 'quarantine-write'
+                ? [`(allow file-write* (subpath ${quoted(quarantineRoot)}))`]
+                : []),
+        ].join('');
+        return {
+            file: '/usr/bin/sandbox-exec',
+            args: ['-p', profile, input.command, ...input.args],
+        };
+    }
+    const args = [
+        '--die-with-parent',
+        '--new-session',
+        '--unshare-net',
+        '--proc', '/proc',
+        '--dev', '/dev',
+        '--ro-bind', '/usr', '/usr',
+        '--ro-bind', '/bin', '/bin',
+        '--ro-bind', workspaceRoot, workspaceRoot,
+    ];
+    if (input.mode === 'quarantine-write') {
+        args.push('--bind', quarantineRoot, quarantineRoot);
+    }
+    else {
+        args.push('--ro-bind', quarantineRoot, quarantineRoot);
+    }
+    args.push('--chdir', workspaceRoot, input.command, ...input.args);
+    return { file: '/usr/bin/bwrap', args };
+}
+function canonicalExistingPath(value) {
+    try {
+        return realpathSync.native(value);
+    }
+    catch (error) {
+        throw new Error(`Mission sandbox path must resolve to an existing canonical path: ${value}.`, {
+            cause: error,
+        });
+    }
+}
+function canonicalPathIfPresent(value) {
+    try {
+        return realpathSync.native(value);
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === 'ENOENT' || code === 'ENOTDIR')
+            return undefined;
+        throw new Error(`Mission sandbox system path could not be canonicalized: ${value}.`, {
+            cause: error,
+        });
+    }
+}
+function quoted(value) {
+    return `"${value.replaceAll('\\', '\\\\').replaceAll('"', '\\"')}"`;
+}
+function assertAbsolute(value, field) {
+    if (!value.startsWith('/')) {
+        throw new Error(`Mission sandbox ${field} must be absolute.`);
+    }
+}
+//# sourceMappingURL=mission-sandbox.js.map

package/dist/src/runner/mission-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-sandbox.js","sourceRoot":"","sources":["../../../src/runner/mission-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAmB1C,MAAM,UAAU,6BAA6B,CAAC,KAA0B;IACtE,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACrD,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACvD,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QACtC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;gBAClC,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU;aAClE,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBACjB,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBAC/C,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC,CAAC,CAAC;QACL,MAAM,OAAO,GAAG;YACd,aAAa;YACb,gBAAgB;YAChB,iBAAiB;YACjB,sBAAsB;YACtB,8BAA8B;YAC9B,qBAAqB;YACrB,oBAAoB;YACpB,2CAA2C;YAC3C,wBAAwB,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YAC/F,kCAAkC,MAAM,CAAC,aAAa,CAAC,cAAc,MAAM,CAAC,cAAc,CAAC,IAAI;YAC/F,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC5C,cAAc,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBAC9C,OAAO,iCAAiC,MAAM,CAAC,SAAS,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAC/F,CAAC,CAAC;YACF,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB;gBACnC,CAAC,CAAC,CAAC,+BAA+B,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;gBAC7D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;SACpD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG;QACX,mBAAmB;QACnB,eAAe;QACf,eAAe;QACf,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,MAAM,EAAE,MAAM;QAC3B,WAAW,EAAE,MAAM,EAAE,MAAM;QAC3B,WAAW,EAAE,aAAa,EAAE,aAAa;KAC1C,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,oEAAoE,KAAK,GAAG,EAAE;YAC5F,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,2DAA2D,KAAK,GAAG,EAAE;YACnF,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,oBAAoB,CAAC,CAAC;IAChE,CAAC;AACH,CAAC"}

package/dist/src/runner/mission-scheduler.d.ts

@@ -0,0 +1,57 @@
+import type { MissionEvent, MissionProcessHandle, MissionRecord } from './mission-state-machine.js';
+import type { MissionStateSnapshot, MissionStateStore } from './mission-state-store.js';
+type MissionDeferralEvent = Extract<MissionEvent, {
+    actionKey: string;
+    nextEligibleAt: string;
+}>;
+export interface EligibleMission {
+    missionId: string;
+    revision: number;
+    state: MissionRecord['state'];
+    nextEligibleAt: string;
+    actionKey?: string;
+    recovery: boolean;
+}
+export declare class MissionScheduler {
+    private readonly store;
+    constructor(store: MissionStateStore);
+    defer(input: {
+        expectedGeneration: number;
+        missionId: string;
+        expectedRevision: number;
+        event: MissionDeferralEvent;
+        reason: string;
+        requiredPredicate: string;
+    }): Promise<MissionStateSnapshot>;
+    claim(input: {
+        expectedGeneration: number;
+        missionId: string;
+        expectedRevision: number;
+        now: string;
+        claim: NonNullable<MissionRecord['claim']>;
+    }): Promise<MissionStateSnapshot>;
+    registerProcess(input: {
+        expectedGeneration: number;
+        missionId: string;
+        expectedRevision: number;
+        claimToken: string;
+        process: MissionProcessHandle;
+    }): Promise<MissionStateSnapshot>;
+    completeProcess(input: {
+        expectedGeneration: number;
+        missionId: string;
+        expectedRevision: number;
+        claimToken: string;
+        actionKey: string;
+        pid: number;
+    }): Promise<MissionStateSnapshot>;
+    compactTerminal(input: {
+        expectedGeneration: number;
+        missionId: string;
+        expectedRevision: number;
+        retainedAt: string;
+    }): Promise<MissionStateSnapshot>;
+}
+export declare function listEligibleMissions(snapshot: MissionStateSnapshot, now: string, limit?: number): EligibleMission[];
+export {};
+//# sourceMappingURL=mission-scheduler.d.ts.map

package/dist/src/runner/mission-scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-scheduler.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEpG,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAExF,KAAK,oBAAoB,GAAG,OAAO,CAAC,YAAY,EAAE;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,gBAAgB;IACR,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,iBAAiB;IAErD,KAAK,CAAC,KAAK,EAAE;QAClB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,oBAAoB,CAAC;QAC5B,MAAM,EAAE,MAAM,CAAC;QACf,iBAAiB,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuB1B,KAAK,CAAC,KAAK,EAAE;QAClB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;KAC5C,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2C1B,eAAe,CAAC,KAAK,EAAE;QAC5B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,oBAAoB,CAAC;KAC/B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAe1B,eAAe,CAAC,KAAK,EAAE;QAC5B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;KACb,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAoB1B,eAAe,CAAC,KAAK,EAAE;QAC5B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAiBlC;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,oBAAoB,EAC9B,GAAG,EAAE,MAAM,EACX,KAAK,SAAM,GACV,eAAe,EAAE,CA6BnB"}

package/dist/src/runner/mission-scheduler.js

@@ -0,0 +1,205 @@
+import { terminalMissionStates, transitionMission } from './mission-state-machine.js';
+export class MissionScheduler {
+    store;
+    constructor(store) {
+        this.store = store;
+    }
+    defer(input) {
+        requireText(input.reason, 'deferral reason');
+        requireText(input.requiredPredicate, 'required predicate');
+        assertTimestamp(input.event.nextEligibleAt, 'nextEligibleAt');
+        return this.store.mutate(input.expectedGeneration, (draft) => {
+            const current = requireMission(draft.missions[input.missionId], input);
+            if ((current.claim?.processes.length ?? 0) > 0) {
+                throw new Error('Mission scheduler cannot defer while live process handles remain.');
+            }
+            const deferred = transitionMission(current, input.event);
+            if (deferred.state !== 'resumable' || !deferred.resumeTarget || !deferred.nextEligibleAt) {
+                throw new Error('Mission scheduler deferral event did not produce resumable state.');
+            }
+            draft.missions[input.missionId] = {
+                ...deferred,
+                resumableReason: input.reason,
+                requiredPredicate: input.requiredPredicate,
+            };
+            draft.nextEligibleAt[input.missionId] = deferred.nextEligibleAt;
+            delete draft.reservations[input.missionId];
+        });
+    }
+    claim(input) {
+        assertTimestamp(input.now, 'claim now');
+        validateClaim(input.claim);
+        if (input.claim.claimedAt !== input.now || input.claim.leaseUntil <= input.now) {
+            throw new Error('Mission scheduler claim timestamps are inconsistent.');
+        }
+        return this.store.mutate(input.expectedGeneration, (draft) => {
+            const current = requireMission(draft.missions[input.missionId], input);
+            const indexedAt = draft.nextEligibleAt[input.missionId];
+            if (!indexedAt || indexedAt > input.now) {
+                throw new Error('Mission scheduler claim is not eligible.');
+            }
+            let claimed;
+            let priorProcesses = [];
+            if (current.state === 'resumable') {
+                if (current.nextEligibleAt !== indexedAt) {
+                    throw new Error('Mission scheduler resumable index does not match the aggregate.');
+                }
+                claimed = transitionMission(current, { type: 'resume-eligible', now: input.now });
+            }
+            else {
+                if (!current.claim || current.claim.leaseUntil !== indexedAt
+                    || current.claim.leaseUntil > input.now) {
+                    throw new Error('Mission scheduler active claim is not expired.');
+                }
+                if (input.claim.fencingEpoch < current.claim.fencingEpoch) {
+                    throw new Error('Mission scheduler claim fencing epoch is stale.');
+                }
+                if (current.claim.hostId !== input.claim.hostId) {
+                    throw new Error('Mission scheduler cannot reclaim a claim from another host.');
+                }
+                priorProcesses = current.claim.bootNonce === input.claim.bootNonce
+                    ? current.claim.processes : [];
+                claimed = { ...current, revision: current.revision + 1 };
+            }
+            claimed.claim = {
+                ...structuredClone(input.claim),
+                processes: mergeProcesses(priorProcesses, input.claim.processes),
+            };
+            draft.missions[input.missionId] = claimed;
+            draft.nextEligibleAt[input.missionId] = input.claim.leaseUntil;
+        });
+    }
+    registerProcess(input) {
+        validateProcess(input.process);
+        return this.store.mutate(input.expectedGeneration, (draft) => {
+            const current = requireMission(draft.missions[input.missionId], input);
+            if (!current.claim || current.claim.token !== input.claimToken) {
+                throw new Error('Mission scheduler claim token mismatch.');
+            }
+            if (current.state === 'cancelling' || terminalMissionStates.has(current.state)) {
+                throw new Error(`Mission scheduler cannot register a process in ${current.state}.`);
+            }
+            current.claim.processes = mergeProcesses(current.claim.processes, [input.process]);
+            current.revision += 1;
+        });
+    }
+    completeProcess(input) {
+        requireText(input.actionKey, 'completed process actionKey');
+        if (!Number.isSafeInteger(input.pid) || input.pid <= 0) {
+            throw new Error('Mission scheduler completed process pid must be a positive integer.');
+        }
+        return this.store.mutate(input.expectedGeneration, (draft) => {
+            const current = requireMission(draft.missions[input.missionId], input);
+            if (!current.claim || current.claim.token !== input.claimToken) {
+                throw new Error('Mission scheduler claim token mismatch.');
+            }
+            const before = current.claim.processes.length;
+            current.claim.processes = current.claim.processes.filter((process) => process.actionKey !== input.actionKey || process.pid !== input.pid);
+            if (current.claim.processes.length === before) {
+                throw new Error('Mission scheduler completed process handle is missing.');
+            }
+            current.revision += 1;
+        });
+    }
+    compactTerminal(input) {
+        assertTimestamp(input.retainedAt, 'retainedAt');
+        return this.store.mutate(input.expectedGeneration, (draft) => {
+            const current = requireMission(draft.missions[input.missionId], input);
+            if (!terminalMissionStates.has(current.state)) {
+                throw new Error('Mission scheduler can compact only terminal missions.');
+            }
+            delete draft.missions[input.missionId];
+            delete draft.nextEligibleAt[input.missionId];
+            delete draft.reservations[input.missionId];
+            draft.tombstones[input.missionId] = {
+                kind: 'mission',
+                terminalState: current.state,
+                retainedAt: input.retainedAt,
+            };
+        });
+    }
+}
+export function listEligibleMissions(snapshot, now, limit = 100) {
+    assertTimestamp(now, 'scheduler now');
+    if (!Number.isSafeInteger(limit) || limit <= 0) {
+        throw new Error('Mission scheduler limit must be a positive integer.');
+    }
+    const result = [];
+    const entries = Object.entries(snapshot.nextEligibleAt)
+        .filter(([, nextEligibleAt]) => nextEligibleAt <= now)
+        .sort(([leftId, leftTime], [rightId, rightTime]) => compare(leftTime, rightTime) || compare(leftId, rightId));
+    for (const [missionId, nextEligibleAt] of entries) {
+        if (result.length >= Math.min(limit, 100))
+            break;
+        const mission = snapshot.missions[missionId];
+        if (!mission)
+            continue;
+        const resumable = mission.state === 'resumable'
+            && mission.nextEligibleAt === nextEligibleAt && !mission.claim;
+        const recovery = Boolean(mission.claim && mission.claim.leaseUntil === nextEligibleAt
+            && mission.claim.leaseUntil <= now);
+        if (!resumable && !recovery)
+            continue;
+        result.push({
+            missionId,
+            revision: mission.revision,
+            state: mission.state,
+            nextEligibleAt,
+            ...(mission.actionKey ? { actionKey: mission.actionKey } : {}),
+            recovery,
+        });
+    }
+    return result;
+}
+function requireMission(mission, input) {
+    if (!mission)
+        throw new Error(`Mission scheduler cannot find ${input.missionId}.`);
+    if (mission.revision !== input.expectedRevision) {
+        throw new Error(`Mission scheduler revision conflict for ${input.missionId}.`);
+    }
+    return mission;
+}
+function validateClaim(claim) {
+    if (claim.version !== 1 || !Number.isSafeInteger(claim.fencingEpoch) || claim.fencingEpoch <= 0) {
+        throw new Error('Mission scheduler claim is invalid.');
+    }
+    for (const [value, field] of [
+        [claim.token, 'token'], [claim.daemonId, 'daemonId'], [claim.hostId, 'hostId'],
+        [claim.bootNonce, 'bootNonce'],
+    ])
+        requireText(value, `claim ${field}`);
+    assertTimestamp(claim.claimedAt, 'claim claimedAt');
+    assertTimestamp(claim.leaseUntil, 'claim leaseUntil');
+    claim.processes.forEach(validateProcess);
+}
+function validateProcess(process) {
+    requireText(process.actionKey, 'process actionKey');
+    requireText(process.hostId, 'process hostId');
+    requireText(process.bootNonce, 'process bootNonce');
+    if (!Number.isSafeInteger(process.pid) || process.pid <= 0) {
+        throw new Error('Mission scheduler process pid must be a positive integer.');
+    }
+    assertTimestamp(process.startedAt, 'process startedAt');
+}
+function mergeProcesses(left, right) {
+    const merged = new Map();
+    for (const process of [...left, ...right]) {
+        validateProcess(process);
+        merged.set(`${process.hostId}:${process.bootNonce}:${process.pid}:${process.actionKey}`, structuredClone(process));
+    }
+    return [...merged.values()].sort((a, b) => compare(a.actionKey, b.actionKey) || a.pid - b.pid);
+}
+function assertTimestamp(value, field) {
+    const milliseconds = Date.parse(value);
+    if (!Number.isFinite(milliseconds) || new Date(milliseconds).toISOString() !== value) {
+        throw new Error(`Mission scheduler ${field} must be an exact UTC ISO timestamp.`);
+    }
+}
+function requireText(value, field) {
+    if (value.trim().length === 0)
+        throw new Error(`Mission scheduler ${field} must be non-empty.`);
+}
+function compare(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+//# sourceMappingURL=mission-scheduler.js.map

package/dist/src/runner/mission-scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-scheduler.js","sourceRoot":"","sources":["../../../src/runner/mission-scheduler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAiBtF,MAAM,OAAO,gBAAgB;IACS;IAApC,YAAoC,KAAwB;QAAxB,UAAK,GAAL,KAAK,CAAmB;IAAG,CAAC;IAEzD,KAAK,CAAC,KAOZ;QACC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC7C,WAAW,CAAC,KAAK,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;QAC3D,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBACzF,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG;gBAChC,GAAG,QAAQ;gBACX,eAAe,EAAE,KAAK,CAAC,MAAM;gBAC7B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;aAC3C,CAAC;YACF,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC;YAChE,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,KAMZ;QACC,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACxC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;YACvE,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,CAAC,SAAS,IAAI,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,OAAsB,CAAC;YAC3B,IAAI,cAAc,GAA2B,EAAE,CAAC;YAChD,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAClC,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACzC,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;gBACrF,CAAC;gBACD,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACpF,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;uBACvD,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;oBAC1C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBACpE,CAAC;gBACD,IAAI,KAAK,CAAC,KAAK,CAAC,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;oBAC1D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBAChD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;gBACjF,CAAC;gBACD,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC,SAAS;oBAChE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YAC3D,CAAC;YACD,OAAO,CAAC,KAAK,GAAG;gBACd,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC/B,SAAS,EAAE,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACjE,CAAC;YACF,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;YAC1C,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,eAAe,CAAC,KAMtB;QACC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/E,MAAM,IAAI,KAAK,CAAC,kDAAkD,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACnF,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,eAAe,CAAC,KAOtB;QACC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;YAC9C,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CACnE,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC;YACtE,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,eAAe,CAAC,KAKtB;QACC,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3C,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG;gBAClC,IAAI,EAAE,SAAS;gBACf,aAAa,EAAE,OAAO,CAAC,KAAK;gBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAClC,QAA8B,EAC9B,GAAW,EACX,KAAK,GAAG,GAAG;IAEX,eAAe,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;SACpD,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,cAAc,IAAI,GAAG,CAAC;SACrD,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,CACjD,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,IAAI,OAAO,EAAE,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,MAAM;QACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,KAAK,WAAW;eAC1C,OAAO,CAAC,cAAc,KAAK,cAAc,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,cAAc;eAChF,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;YAAE,SAAS;QACtC,MAAM,CAAC,IAAI,CAAC;YACV,SAAS;YACT,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc;YACd,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CACrB,OAAkC,EAClC,KAAsD;IAEtD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAA0C;IAC/D,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI;QAC3B,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;QAC9E,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;KACtB;QAAE,WAAW,CAAC,KAAK,EAAE,SAAS,KAAK,EAAE,CAAC,CAAC;IACjD,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACpD,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACtD,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,eAAe,CAAC,OAA6B;IACpD,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACpD,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC9C,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,IAA4B,EAAE,KAA6B;IACjF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;IACvD,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAC1C,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,SAAS,EAAE,EACrF,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACxC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,sCAAsC,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa;IAC/C,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,qBAAqB,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa;IAC1C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/src/runner/mission-scope-expansion.d.ts

@@ -0,0 +1,47 @@
+export declare const missionScopeRelationshipKinds: readonly ["imports", "imported-by", "test-for", "implementation-for", "config-consumer", "generated-from", "acceptance-artifact-owner"];
+export type MissionScopeRelationshipKind = (typeof missionScopeRelationshipKinds)[number];
+export interface MissionScopeRelationship {
+    kind: MissionScopeRelationshipKind;
+    from: string;
+    to: string;
+    evidenceId: string;
+    generatorId?: string;
+}
+export interface MissionScopeExpansionProposal {
+    version: 1;
+    repository: string;
+    paths: string[];
+    evidenceIds: string[];
+    relationship: {
+        kind: MissionScopeRelationshipKind;
+        from: string;
+        generatorId?: string;
+    };
+}
+export interface MissionScopeExpansionContext {
+    repository: string;
+    repositoryPaths: string[];
+    grantedPaths: string[];
+    evidenceIds: string[];
+    relationships: MissionScopeRelationship[];
+    allowlistedGeneratorIds: string[];
+    deniedPaths: string[];
+    maxExpandedPaths: number;
+}
+export type MissionScopeExpansionDecision = {
+    kind: 'allowed';
+    repository: string;
+    paths: string[];
+    relationship: MissionScopeRelationshipKind;
+    evidenceIds: string[];
+} | {
+    kind: 'rejected-recoverable';
+    reason: string;
+    alternatives: string[];
+} | {
+    kind: 'safety-stop';
+    reason: string;
+    evidence: string[];
+};
+export declare function authorizeMissionScopeExpansion(context: MissionScopeExpansionContext, proposal: MissionScopeExpansionProposal): MissionScopeExpansionDecision;
+//# sourceMappingURL=mission-scope-expansion.d.ts.map

package/dist/src/runner/mission-scope-expansion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-scope-expansion.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-scope-expansion.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,6BAA6B,yIAQhC,CAAC;AAEX,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1F,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,4BAA4B,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE;QACZ,IAAI,EAAE,4BAA4B,CAAC;QACnC,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,wBAAwB,EAAE,CAAC;IAC1C,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,6BAA6B,GACrC;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,EAAE,4BAA4B,CAAC;IAC3C,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACD;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,GACD;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEN,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,4BAA4B,EACrC,QAAQ,EAAE,6BAA6B,GACtC,6BAA6B,CAgF/B"}

package/dist/src/runner/mission-scope-expansion.js

@@ -0,0 +1,147 @@
+import { globMatches, normalizePath, uniqueSortedPaths } from '../path-policy.js';
+import { missionPathDenied } from './mission-path-language.js';
+export const missionScopeRelationshipKinds = [
+    'imports',
+    'imported-by',
+    'test-for',
+    'implementation-for',
+    'config-consumer',
+    'generated-from',
+    'acceptance-artifact-owner',
+];
+export function authorizeMissionScopeExpansion(context, proposal) {
+    assertContext(context);
+    if (proposal.version !== 1) {
+        return rejected('unsupported-proposal-version', ['submit a version 1 scope proposal']);
+    }
+    const expectedRepository = normalizeRepository(context.repository);
+    const receivedRepository = normalizeRepository(proposal.repository);
+    if (receivedRepository !== expectedRepository) {
+        return {
+            kind: 'safety-stop',
+            reason: 'repository-identity-mismatch',
+            evidence: [`expected:${expectedRepository}`, `received:${receivedRepository}`],
+        };
+    }
+    const evidenceIds = uniqueText(proposal.evidenceIds);
+    if (evidenceIds.length === 0 || evidenceIds.some((id) => !context.evidenceIds.includes(id))) {
+        return rejected('evidence-not-pinned', ['collect evidence from the pinned Mission snapshot']);
+    }
+    const source = normalizeConcretePath(proposal.relationship.from);
+    if (!context.grantedPaths.some((grant) => globMatches(grant, source))) {
+        return rejected('relationship-source-outside-current-scope', [
+            'anchor the relationship in an already granted path',
+        ]);
+    }
+    if (!context.repositoryPaths.map(normalizeConcretePath).includes(source)) {
+        return rejected('relationship-source-not-in-pinned-tree', [
+            'anchor the relationship in a path from the pinned tree',
+        ]);
+    }
+    const expanded = expandFinitePaths(proposal.paths, context.repositoryPaths);
+    if (expanded.length === 0) {
+        return rejected('scope-pattern-matched-no-pinned-paths', [
+            'request an exact path present in the pinned tree',
+        ]);
+    }
+    if (expanded.length > context.maxExpandedPaths) {
+        return rejected('scope-expansion-limit-exceeded', [
+            `request at most ${context.maxExpandedPaths} related paths`,
+        ]);
+    }
+    const denied = expanded.filter((path) => missionPathDenied(path, context.deniedPaths));
+    if (denied.length > 0) {
+        return {
+            kind: 'safety-stop',
+            reason: 'scope-expansion-denied-path',
+            evidence: denied,
+        };
+    }
+    if (proposal.relationship.kind === 'generated-from') {
+        const generatorId = proposal.relationship.generatorId?.trim();
+        if (!generatorId || !context.allowlistedGeneratorIds.includes(generatorId)) {
+            return rejected('generator-not-allowlisted', [
+                'use an allowlisted deterministic generator',
+                'choose a non-generated related path',
+            ]);
+        }
+    }
+    const relationships = expanded.map((target) => context.relationships.find((relationship) => relationship.kind === proposal.relationship.kind
+        && normalizeConcretePath(relationship.from) === source
+        && normalizeConcretePath(relationship.to) === target
+        && evidenceIds.includes(relationship.evidenceId)
+        && (relationship.kind !== 'generated-from'
+            || relationship.generatorId === proposal.relationship.generatorId)));
+    if (relationships.some((relationship) => relationship === undefined)) {
+        const knownKinds = uniqueText(context.relationships
+            .filter((relationship) => normalizeConcretePath(relationship.from) === source)
+            .map((relationship) => relationship.kind));
+        return rejected('relationship-not-proven', [
+            ...knownKinds.map((kind) => `request a path linked by ${kind}`),
+            'collect new pinned relationship evidence',
+        ]);
+    }
+    return {
+        kind: 'allowed',
+        repository: expectedRepository,
+        paths: expanded,
+        relationship: proposal.relationship.kind,
+        evidenceIds,
+    };
+}
+function expandFinitePaths(patterns, repositoryPaths) {
+    const normalizedPatterns = uniqueText(patterns.map(normalizePattern));
+    const normalizedPaths = uniqueSortedPaths(repositoryPaths.map(normalizeConcretePath));
+    return normalizedPaths.filter((path) => normalizedPatterns.some((pattern) => globMatches(pattern, path)));
+}
+function normalizeRepository(value) {
+    const normalized = value.trim().normalize('NFC');
+    if (!/^[^/\s]+\/[^/\s]+$/u.test(normalized)) {
+        throw new Error('Mission scope repository must be owner/name.');
+    }
+    return normalized;
+}
+function normalizePattern(value) {
+    const normalized = normalizePath(value).normalize('NFC');
+    if (normalized.length === 0 || normalized.startsWith('/')
+        || normalized.split('/').some((segment) => segment.length === 0 || segment === '..')) {
+        throw new Error('Mission scope path must be repository-relative.');
+    }
+    return normalized;
+}
+function normalizeConcretePath(value) {
+    const normalized = normalizePattern(value);
+    if (normalized.includes('*')) {
+        throw new Error('Mission scope relationship paths must be concrete.');
+    }
+    return normalized;
+}
+function rejected(reason, alternatives) {
+    return {
+        kind: 'rejected-recoverable',
+        reason,
+        alternatives: uniqueInOrder(alternatives),
+    };
+}
+function uniqueText(values) {
+    return Array.from(new Set(values.map((value) => value.trim()).filter(Boolean))).sort();
+}
+function uniqueInOrder(values) {
+    return Array.from(new Set(values.map((value) => value.trim()).filter(Boolean)));
+}
+function assertContext(context) {
+    normalizeRepository(context.repository);
+    if (!Number.isSafeInteger(context.maxExpandedPaths) || context.maxExpandedPaths <= 0) {
+        throw new Error('Mission scope maxExpandedPaths must be a positive integer.');
+    }
+    context.repositoryPaths.forEach(normalizeConcretePath);
+    context.relationships.forEach((relationship) => {
+        normalizeConcretePath(relationship.from);
+        normalizeConcretePath(relationship.to);
+        if (!missionScopeRelationshipKinds.includes(relationship.kind)
+            || relationship.evidenceId.trim().length === 0) {
+            throw new Error('Mission scope relationship is invalid.');
+        }
+    });
+}
+//# sourceMappingURL=mission-scope-expansion.js.map

package/dist/src/runner/mission-scope-expansion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-scope-expansion.js","sourceRoot":"","sources":["../../../src/runner/mission-scope-expansion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,SAAS;IACT,aAAa;IACb,UAAU;IACV,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;IAChB,2BAA2B;CACnB,CAAC;AAsDX,MAAM,UAAU,8BAA8B,CAC5C,OAAqC,EACrC,QAAuC;IAEvC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC,8BAA8B,EAAE,CAAC,mCAAmC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,kBAAkB,KAAK,kBAAkB,EAAE,CAAC;QAC9C,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,8BAA8B;YACtC,QAAQ,EAAE,CAAC,YAAY,kBAAkB,EAAE,EAAE,YAAY,kBAAkB,EAAE,CAAC;SAC/E,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5F,OAAO,QAAQ,CAAC,qBAAqB,EAAE,CAAC,mDAAmD,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,QAAQ,CAAC,2CAA2C,EAAE;YAC3D,oDAAoD;SACrD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzE,OAAO,QAAQ,CAAC,wCAAwC,EAAE;YACxD,wDAAwD;SACzD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC,uCAAuC,EAAE;YACvD,kDAAkD;SACnD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC/C,OAAO,QAAQ,CAAC,gCAAgC,EAAE;YAChD,mBAAmB,OAAO,CAAC,gBAAgB,gBAAgB;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,6BAA6B;YACrC,QAAQ,EAAE,MAAM;SACjB,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAC9D,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3E,OAAO,QAAQ,CAAC,2BAA2B,EAAE;gBAC3C,4CAA4C;gBAC5C,qCAAqC;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CACzF,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,YAAY,CAAC,IAAI;WAC7C,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,MAAM;WACnD,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,MAAM;WACjD,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC;WAC7C,CAAC,YAAY,CAAC,IAAI,KAAK,gBAAgB;eACrC,YAAY,CAAC,WAAW,KAAK,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,KAAK,SAAS,CAAC,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa;aAChD,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC;aAC7E,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,OAAO,QAAQ,CAAC,yBAAyB,EAAE;YACzC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,4BAA4B,IAAI,EAAE,CAAC;YAC/D,0CAA0C;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,kBAAkB;QAC9B,KAAK,EAAE,QAAQ;QACf,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI;QACxC,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAkB,EAAE,eAAyB;IACtE,MAAM,kBAAkB,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtE,MAAM,eAAe,GAAG,iBAAiB,CAAC,eAAe,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACtF,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;WACpD,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,YAAsB;IACtD,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,MAAM;QACN,YAAY,EAAE,aAAa,CAAC,YAAY,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAgB;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,aAAa,CAAC,MAAgB;IACrC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,OAAqC;IAC1D,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACvD,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;QAC7C,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACzC,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC;eACzD,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}