codex-orchestrator 0.1.51 → 2.0.0

package/dist/src/runner/mission-executor-probe.js

@@ -1,180 +0,0 @@
-import { access, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { discoverMissionExecutorPrerequisites, } from './mission-capability-kernel.js';
-import { runMissionProcess } from './mission-process-executor.js';
-import { buildMissionSandboxInvocation } from './mission-sandbox.js';
-export const missionExecutorRequiredChecks = [
-    'canonical-write-denied',
-    'credential-env-stripped',
-    'denied-read-path-blocked',
-    'descendant-process-terminated',
-    'network-denied',
-    'quarantine-write-allowed',
-];
-export async function probeMissionExecutorCapabilities(input) {
-    const prerequisites = discoverMissionExecutorPrerequisites(input);
-    if (!prerequisites.prerequisitesAvailable || !prerequisites.backend) {
-        return { supported: false, checks: [], failures: prerequisites.missing };
-    }
-    if (prerequisites.backend !== 'macos-sandbox') {
-        return {
-            supported: false,
-            backend: prerequisites.backend,
-            checks: [],
-            failures: ['active-probe-not-implemented:linux-bwrap'],
-        };
-    }
-    const workspace = await mkdtemp(join(tmpdir(), 'mission-probe-workspace-'));
-    const quarantine = await mkdtemp(join(tmpdir(), 'mission-probe-quarantine-'));
-    const checks = [];
-    const failures = [];
-    try {
-        const quarantinePath = join(quarantine, 'allowed.txt');
-        const canonicalPath = join(workspace, 'blocked.txt');
-        const secretPath = join(workspace, '.env');
-        await writeFile(secretPath, 'filesystem-credential-canary', 'utf8');
-        const sandboxInput = {
-            backend: prerequisites.backend,
-            workspaceRoot: workspace,
-            quarantineRoot: quarantine,
-            mode: 'quarantine-write',
-        };
-        const processInput = {
-            cwd: workspace,
-            timeoutMs: 5_000,
-            sourceEnv: { PATH: process.env.PATH, MISSION_SECRET_CANARY: 'credential-env-canary' },
-            allowedEnvKeys: ['PATH', 'MISSION_SECRET_CANARY'],
-        };
-        const quarantineWrite = await runMissionProcess({
-            ...buildMissionSandboxInvocation({
-                ...sandboxInput,
-                command: '/usr/bin/tee',
-                args: [quarantinePath],
-            }),
-            ...processInput,
-            stdin: 'ok',
-        });
-        if (quarantineWrite.exitCode === 0 && (await readFile(quarantinePath, 'utf8').catch(() => '')) === 'ok') {
-            checks.push('quarantine-write-allowed');
-        }
-        else {
-            failures.push('quarantine-write-not-observed');
-        }
-        const canonicalWrite = await runMissionProcess({
-            ...buildMissionSandboxInvocation({
-                ...sandboxInput,
-                command: '/usr/bin/tee',
-                args: [canonicalPath],
-            }),
-            ...processInput,
-            stdin: 'bad',
-        });
-        if (canonicalWrite.exitCode !== 0 && !(await exists(canonicalPath)))
-            checks.push('canonical-write-denied');
-        else
-            failures.push('canonical-write-succeeded');
-        const deniedRead = await runMissionProcess({
-            ...buildMissionSandboxInvocation({
-                ...sandboxInput,
-                mode: 'read-only',
-                command: '/bin/cat',
-                args: [secretPath],
-                deniedReadPaths: [secretPath],
-            }),
-            ...processInput,
-        });
-        if (deniedRead.exitCode !== 0 && !deniedRead.stdout.includes('filesystem-credential-canary'))
-            checks.push('denied-read-path-blocked');
-        else
-            failures.push('denied-read-path-readable');
-        const environment = await runMissionProcess({
-            ...buildMissionSandboxInvocation({
-                ...sandboxInput,
-                mode: 'read-only',
-                command: '/usr/bin/env',
-                args: [],
-            }),
-            ...processInput,
-        });
-        if (!environment.stdout.includes('credential-env-canary'))
-            checks.push('credential-env-stripped');
-        else
-            failures.push('credential-env-visible');
-        const networkInvocation = buildMissionSandboxInvocation({
-            backend: prerequisites.backend,
-            workspaceRoot: workspace,
-            quarantineRoot: quarantine,
-            mode: 'read-only',
-            command: '/usr/bin/perl',
-            args: [
-                '-MSocket',
-                '-MErrno=EPERM',
-                '-e',
-                'socket(my $s, PF_INET, SOCK_STREAM, 0) or die $!; connect($s, sockaddr_in(9, inet_aton("127.0.0.1"))); exit($! == EPERM ? 0 : 30)',
-            ],
-        });
-        const network = await runMissionProcess({
-            ...networkInvocation,
-            cwd: workspace,
-            timeoutMs: 5_000,
-            sourceEnv: { PATH: process.env.PATH },
-            allowedEnvKeys: ['PATH'],
-        });
-        if (network.exitCode === 0)
-            checks.push('network-denied');
-        else
-            failures.push(`network-canary:${network.exitCode}`);
-        const daemonInvocation = buildMissionSandboxInvocation({
-            backend: prerequisites.backend,
-            workspaceRoot: workspace,
-            quarantineRoot: quarantine,
-            mode: 'read-only',
-            command: '/usr/bin/perl',
-            args: [
-                '-MPOSIX=setsid',
-                '-e',
-                'my $pid=fork(); if(!defined $pid){print "fork-denied"; exit 0} if($pid==0){setsid(); exec "/bin/sleep","60"; exit 50} print $pid; waitpid($pid,0); exit 40',
-            ],
-        });
-        const daemon = await runMissionProcess({
-            ...daemonInvocation,
-            cwd: workspace,
-            timeoutMs: 1_000,
-            sourceEnv: { PATH: process.env.PATH },
-            allowedEnvKeys: ['PATH'],
-        });
-        if (!daemon.timedOut && daemon.exitCode === 0 && daemon.stdout.trim() === 'fork-denied') {
-            checks.push('descendant-process-terminated');
-        }
-        else {
-            const descendantPid = Number(daemon.stdout.trim());
-            if (Number.isSafeInteger(descendantPid) && descendantPid > 0) {
-                try {
-                    process.kill(descendantPid, 'SIGKILL');
-                }
-                catch { /* already contained */ }
-            }
-            failures.push(`descendant-fork-not-denied:${daemon.exitCode}`);
-        }
-    }
-    catch (error) {
-        failures.push(`active-probe:${error instanceof Error ? error.message : String(error)}`);
-    }
-    finally {
-        await Promise.all([workspace, quarantine]
-            .map((path) => rm(path, { recursive: true, force: true })));
-    }
-    checks.sort();
-    failures.sort();
-    return {
-        supported: failures.length === 0,
-        backend: prerequisites.backend,
-        checks,
-        failures,
-    };
-}
-async function exists(path) {
-    return access(path).then(() => true, () => false);
-}
-//# sourceMappingURL=mission-executor-probe.js.map

package/dist/src/runner/mission-executor-probe.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-executor-probe.js","sourceRoot":"","sources":["../../../src/runner/mission-executor-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,oCAAoC,GAGrC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AASrE,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,wBAAwB;IACxB,yBAAyB;IACzB,0BAA0B;IAC1B,+BAA+B;IAC/B,gBAAgB;IAChB,0BAA0B;CAClB,CAAC;AAEX,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAAkC;IAElC,MAAM,aAAa,GAAG,oCAAoC,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,aAAa,CAAC,sBAAsB,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QACpE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,aAAa,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QAC9C,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,CAAC,0CAA0C,CAAC;SACvD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,SAAS,CAAC,UAAU,EAAE,8BAA8B,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG;YACnB,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,aAAa,EAAE,SAAS;YACxB,cAAc,EAAE,UAAU;YAC1B,IAAI,EAAE,kBAAkB;SAChB,CAAC;QACX,MAAM,YAAY,GAAG;YACnB,GAAG,EAAE,SAAS;YACd,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,qBAAqB,EAAE,uBAAuB,EAAE;YACrF,cAAc,EAAE,CAAC,MAAM,EAAE,uBAAuB,CAAC;SAClD,CAAC;QACF,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAAC;YAC9C,GAAG,6BAA6B,CAAC;gBAC/B,GAAG,YAAY;gBACf,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,CAAC,cAAc,CAAC;aACvB,CAAC;YACF,GAAG,YAAY;YACf,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,IAAI,eAAe,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACxG,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC;YAC7C,GAAG,6BAA6B,CAAC;gBAC/B,GAAG,YAAY;gBACf,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,CAAC,aAAa,CAAC;aACtB,CAAC;YACF,GAAG,YAAY;YACf,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QACH,IAAI,cAAc,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;;YACtG,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;YACzC,GAAG,6BAA6B,CAAC;gBAC/B,GAAG,YAAY;gBACf,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,eAAe,EAAE,CAAC,UAAU,CAAC;aAC9B,CAAC;YACF,GAAG,YAAY;SAChB,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,8BAA8B,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;;YACjI,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC;YAC1C,GAAG,6BAA6B,CAAC;gBAC/B,GAAG,YAAY;gBACf,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,EAAE;aACT,CAAC;YACF,GAAG,YAAY;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;;YAC7F,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAE7C,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;YACtD,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,aAAa,EAAE,SAAS;YACxB,cAAc,EAAE,UAAU;YAC1B,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE;gBACJ,UAAU;gBACV,eAAe;gBACf,IAAI;gBACJ,mIAAmI;aACpI;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC;YACtC,GAAG,iBAAiB;YACpB,GAAG,EAAE,SAAS;YACd,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;YACrC,cAAc,EAAE,CAAC,MAAM,CAAC;SACzB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;;YACrD,QAAQ,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEzD,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;YACrD,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,aAAa,EAAE,SAAS;YACxB,cAAc,EAAE,UAAU;YAC1B,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE;gBACJ,gBAAgB;gBAChB,IAAI;gBACJ,4JAA4J;aAC7J;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,GAAG,gBAAgB;YACnB,GAAG,EAAE,SAAS;YACd,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;YACrC,cAAc,EAAE,CAAC,MAAM,CAAC;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,aAAa,EAAE,CAAC;YACxF,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;YACnF,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,CAAC,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC;aACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,CAAC;IACd,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChB,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAChC,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC"}

package/dist/src/runner/mission-git-contracts.d.ts

@@ -1,75 +0,0 @@
-export interface MissionGitCommitIdentity {
-    message: string;
-    authorName: string;
-    authorEmail: string;
-    authoredAt: string;
-    committerName: string;
-    committerEmail: string;
-    committedAt: string;
-}
-export interface MissionGitManifestEntry {
-    path: string;
-    operation: 'add' | 'delete' | 'modify';
-    oldMode: string | null;
-    newMode: string | null;
-    beforeBlob: string | null;
-    afterBlob: string | null;
-    beforeSha256: string | null;
-    afterSha256: string | null;
-}
-export interface MissionPatchCandidate {
-    baseCommit: string;
-    baseTree: string;
-    patchSha256: string;
-    treeSha: string;
-    commitSha: string;
-    manifest: MissionGitManifestEntry[];
-}
-export interface MissionApplyPermit {
-    version: 1;
-    missionId: string;
-    actionKey: string;
-    fencingEpoch: number;
-    expiresAt: string;
-    targetRef: string;
-    auditReceiptSha256: string;
-    patchSha256: string;
-    expectedOldCommit: string;
-    expectedOldTree: string;
-    expectedNewCommit: string;
-    expectedNewTree: string;
-    manifest: MissionGitManifestEntry[];
-    commit: MissionGitCommitIdentity;
-}
-export interface MissionApplyIntent {
-    version: 1;
-    permitFingerprint: string;
-    permit: MissionApplyPermit;
-    preparedAt: string;
-}
-export interface MissionApplyReceipt {
-    version: 1;
-    permitFingerprint: string;
-    targetRef: string;
-    oldCommitSha: string;
-    commitSha: string;
-    treeSha: string;
-    recovered: boolean;
-    appliedAt: string;
-}
-export declare function createMissionApplyPermit(input: {
-    missionId: string;
-    actionKey: string;
-    fencingEpoch: number;
-    expiresAt: string;
-    targetRef: string;
-    auditReceiptSha256: string;
-    candidate: MissionPatchCandidate;
-    commit: MissionGitCommitIdentity;
-}): MissionApplyPermit;
-export declare function validateMissionApplyPermit(value: unknown): MissionApplyPermit;
-export declare function missionApplyPermitFingerprint(permit: MissionApplyPermit): string;
-export declare function validateMissionGitCommitIdentity(value: MissionGitCommitIdentity): MissionGitCommitIdentity;
-export declare function assertMissionApplyIntent(value: unknown): asserts value is MissionApplyIntent;
-export declare function assertMissionApplyReceipt(value: unknown): asserts value is MissionApplyReceipt;
-//# sourceMappingURL=mission-git-contracts.d.ts.map

package/dist/src/runner/mission-git-contracts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-git-contracts.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-git-contracts.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,MAAM,EAAE,wBAAwB,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,CAAC;IACX,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,qBAAqB,CAAC;IACjC,MAAM,EAAE,wBAAwB,CAAC;CAClC,GAAG,kBAAkB,CAiBrB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAgC7E;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAGhF;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,wBAAwB,GAAG,wBAAwB,CAG1G;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,kBAAkB,CAQ5F;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAc9F"}

package/dist/src/runner/mission-git-contracts.js

@@ -1,201 +0,0 @@
-import { createHash } from 'node:crypto';
-export function createMissionApplyPermit(input) {
-    return validateMissionApplyPermit({
-        version: 1,
-        missionId: input.missionId,
-        actionKey: input.actionKey,
-        fencingEpoch: input.fencingEpoch,
-        expiresAt: input.expiresAt,
-        targetRef: input.targetRef,
-        auditReceiptSha256: input.auditReceiptSha256,
-        patchSha256: input.candidate.patchSha256,
-        expectedOldCommit: input.candidate.baseCommit,
-        expectedOldTree: input.candidate.baseTree,
-        expectedNewCommit: input.candidate.commitSha,
-        expectedNewTree: input.candidate.treeSha,
-        manifest: input.candidate.manifest,
-        commit: input.commit,
-    });
-}
-export function validateMissionApplyPermit(value) {
-    const permit = object(value, 'Mission apply permit');
-    exactKeys(permit, [
-        'version', 'missionId', 'actionKey', 'fencingEpoch', 'expiresAt', 'targetRef',
-        'auditReceiptSha256', 'patchSha256', 'expectedOldCommit', 'expectedOldTree',
-        'expectedNewCommit', 'expectedNewTree', 'manifest', 'commit',
-    ], 'Mission apply permit');
-    if (permit.version !== 1)
-        fail('version must be 1');
-    nonEmpty(permit.missionId, 'missionId');
-    nonEmpty(permit.actionKey, 'actionKey');
-    if (!Number.isInteger(permit.fencingEpoch) || permit.fencingEpoch <= 0)
-        fail('fencingEpoch must be positive');
-    timestamp(permit.expiresAt, 'expiresAt');
-    if (!/^refs\/(?:heads|codex-orchestrator)\/[A-Za-z0-9._\/-]+$/u.test(permit.targetRef)
-        || permit.targetRef.includes('..') || permit.targetRef.endsWith('/') || permit.targetRef.includes('//')
-        || permit.targetRef.split('/').some((segment) => segment.startsWith('.') || segment.endsWith('.lock'))) {
-        fail('targetRef must be an allowed full ref');
-    }
-    digest(permit.auditReceiptSha256, 'auditReceiptSha256');
-    digest(permit.patchSha256, 'patchSha256');
-    objectId(permit.expectedOldCommit, 'expectedOldCommit');
-    objectId(permit.expectedOldTree, 'expectedOldTree');
-    objectId(permit.expectedNewCommit, 'expectedNewCommit');
-    objectId(permit.expectedNewTree, 'expectedNewTree');
-    if (!Array.isArray(permit.manifest) || permit.manifest.length === 0)
-        fail('manifest must be non-empty');
-    const paths = new Set();
-    for (const [index, entry] of permit.manifest.entries()) {
-        validateManifestEntry(entry, `manifest[${index}]`);
-        if (paths.has(entry.path))
-            fail(`manifest contains duplicate path ${entry.path}`);
-        paths.add(entry.path);
-    }
-    validateCommitIdentity(permit.commit);
-    return structuredClone(permit);
-}
-export function missionApplyPermitFingerprint(permit) {
-    const valid = validateMissionApplyPermit(permit);
-    return `sha256:${createHash('sha256').update(canonicalJson(valid), 'utf8').digest('hex')}`;
-}
-export function validateMissionGitCommitIdentity(value) {
-    validateCommitIdentity(value);
-    return structuredClone(value);
-}
-export function assertMissionApplyIntent(value) {
-    const intent = object(value, 'Mission apply intent');
-    exactKeys(intent, ['version', 'permitFingerprint', 'permit', 'preparedAt'], 'Mission apply intent');
-    if (intent.version !== 1)
-        fail('apply intent version must be 1');
-    digest(intent.permitFingerprint, 'apply intent permitFingerprint');
-    const permit = validateMissionApplyPermit(intent.permit);
-    if (intent.permitFingerprint !== missionApplyPermitFingerprint(permit))
-        fail('apply intent fingerprint does not match permit');
-    timestamp(intent.preparedAt, 'apply intent preparedAt');
-}
-export function assertMissionApplyReceipt(value) {
-    const receipt = object(value, 'Mission apply receipt');
-    exactKeys(receipt, [
-        'version', 'permitFingerprint', 'targetRef', 'oldCommitSha', 'commitSha',
-        'treeSha', 'recovered', 'appliedAt',
-    ], 'Mission apply receipt');
-    if (receipt.version !== 1)
-        fail('apply receipt version must be 1');
-    digest(receipt.permitFingerprint, 'apply receipt permitFingerprint');
-    nonEmpty(receipt.targetRef, 'apply receipt targetRef');
-    objectId(receipt.oldCommitSha, 'apply receipt oldCommitSha');
-    objectId(receipt.commitSha, 'apply receipt commitSha');
-    objectId(receipt.treeSha, 'apply receipt treeSha');
-    if (typeof receipt.recovered !== 'boolean')
-        fail('apply receipt recovered must be boolean');
-    timestamp(receipt.appliedAt, 'apply receipt appliedAt');
-}
-function validateManifestEntry(entry, path) {
-    const record = object(entry, path);
-    exactKeys(record, [
-        'path', 'operation', 'oldMode', 'newMode', 'beforeBlob', 'afterBlob',
-        'beforeSha256', 'afterSha256',
-    ], path);
-    nonEmpty(entry.path, `${path}.path`);
-    if (entry.path.startsWith('/') || entry.path.split('/').includes('..') || entry.path === '.git' || entry.path.startsWith('.git/')) {
-        fail(`${path}.path is not a repository-relative path`);
-    }
-    if (/[\0\r\n\\]/u.test(entry.path))
-        fail(`${path}.path contains forbidden characters`);
-    if (!['add', 'delete', 'modify'].includes(entry.operation))
-        fail(`${path}.operation is invalid`);
-    nullableMode(entry.oldMode, `${path}.oldMode`);
-    nullableMode(entry.newMode, `${path}.newMode`);
-    nullableObjectId(entry.beforeBlob, `${path}.beforeBlob`);
-    nullableObjectId(entry.afterBlob, `${path}.afterBlob`);
-    nullableDigest(entry.beforeSha256, `${path}.beforeSha256`);
-    nullableDigest(entry.afterSha256, `${path}.afterSha256`);
-    if (entry.operation === 'add' && (entry.oldMode !== null || entry.beforeBlob !== null || entry.beforeSha256 !== null
-        || entry.newMode === null || entry.afterBlob === null || entry.afterSha256 === null))
-        fail(`${path} add must have only a complete new side`);
-    if (entry.operation === 'delete' && (entry.newMode !== null || entry.afterBlob !== null || entry.afterSha256 !== null
-        || entry.oldMode === null || entry.beforeBlob === null || entry.beforeSha256 === null))
-        fail(`${path} delete must have only a complete old side`);
-    if (entry.operation === 'modify' && (entry.oldMode === null || entry.newMode === null
-        || entry.beforeBlob === null || entry.afterBlob === null
-        || entry.beforeSha256 === null || entry.afterSha256 === null))
-        fail(`${path} modify must have both complete sides`);
-}
-function validateCommitIdentity(value) {
-    const identity = object(value, 'Mission commit identity');
-    exactKeys(identity, [
-        'message', 'authorName', 'authorEmail', 'authoredAt', 'committerName',
-        'committerEmail', 'committedAt',
-    ], 'Mission commit identity');
-    for (const field of ['message', 'authorName', 'authorEmail', 'committerName', 'committerEmail']) {
-        nonEmpty(value[field], `commit.${field}`);
-        if (value[field].includes('\0') || value[field].includes('\r'))
-            fail(`commit.${field} contains forbidden characters`);
-    }
-    for (const field of ['authorName', 'authorEmail', 'committerName', 'committerEmail']) {
-        if (value[field].includes('\n'))
-            fail(`commit.${field} contains forbidden characters`);
-    }
-    timestamp(value.authoredAt, 'commit.authoredAt');
-    timestamp(value.committedAt, 'commit.committedAt');
-}
-function canonicalJson(value) {
-    return JSON.stringify(canonicalValue(value));
-}
-function canonicalValue(value) {
-    if (Array.isArray(value))
-        return value.map(canonicalValue);
-    if (typeof value === 'object' && value !== null) {
-        return Object.fromEntries(Object.entries(value)
-            .sort(([left], [right]) => left.localeCompare(right))
-            .map(([key, child]) => [key, canonicalValue(child)]));
-    }
-    return value;
-}
-function object(value, label) {
-    if (typeof value !== 'object' || value === null || Array.isArray(value))
-        throw new Error(`${label} must be an object.`);
-    return value;
-}
-function exactKeys(value, allowed, label) {
-    const allowedSet = new Set(allowed);
-    for (const key of Object.keys(value))
-        if (!allowedSet.has(key))
-            throw new Error(`${label} has unexpected field ${key}.`);
-    for (const key of allowed)
-        if (!(key in value))
-            throw new Error(`${label} is missing field ${key}.`);
-}
-function nonEmpty(value, label) {
-    if (typeof value !== 'string' || value.length === 0)
-        fail(`${label} must be non-empty`);
-}
-function timestamp(value, label) {
-    nonEmpty(value, label);
-    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u.test(value) || Number.isNaN(Date.parse(value)))
-        fail(`${label} must be an ISO timestamp`);
-}
-function digest(value, label) {
-    if (typeof value !== 'string' || !/^sha256:[a-f0-9]{64}$/u.test(value))
-        fail(`${label} must be sha256 hex`);
-}
-function nullableDigest(value, label) {
-    if (value !== null)
-        digest(value, label);
-}
-function objectId(value, label) {
-    if (typeof value !== 'string' || !/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/u.test(value))
-        fail(`${label} must be a Git object ID`);
-}
-function nullableObjectId(value, label) {
-    if (value !== null)
-        objectId(value, label);
-}
-function nullableMode(value, label) {
-    if (value !== null && value !== '100644')
-        fail(`${label} must be 100644 or null`);
-}
-function fail(message) {
-    throw new Error(`Invalid Mission apply contract: ${message}.`);
-}
-//# sourceMappingURL=mission-git-contracts.js.map

package/dist/src/runner/mission-git-contracts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-git-contracts.js","sourceRoot":"","sources":["../../../src/runner/mission-git-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmEzC,MAAM,UAAU,wBAAwB,CAAC,KASxC;IACC,OAAO,0BAA0B,CAAC;QAChC,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW;QACxC,iBAAiB,EAAE,KAAK,CAAC,SAAS,CAAC,UAAU;QAC7C,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ;QACzC,iBAAiB,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS;QAC5C,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO;QACxC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,sBAAsB,CAAkC,CAAC;IACtF,SAAS,CAAC,MAA4C,EAAE;QACtD,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW;QAC7E,oBAAoB,EAAE,aAAa,EAAE,mBAAmB,EAAE,iBAAiB;QAC3E,mBAAmB,EAAE,iBAAiB,EAAE,UAAU,EAAE,QAAQ;KAC7D,EAAE,sBAAsB,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC;QAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC9G,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,0DAA0D,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;WACjF,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;WACpG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACzG,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IACxD,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IACxD,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IACxD,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,qBAAqB,CAAC,KAAK,EAAE,YAAY,KAAK,GAAG,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,oCAAoC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAA0B;IACtE,MAAM,KAAK,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAA+B;IAC9E,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IACrD,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACpG,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACjE,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,iBAAiB,KAAK,6BAA6B,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC/H,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACvD,SAAS,CAAC,OAAO,EAAE;QACjB,SAAS,EAAE,mBAAmB,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW;QACxE,SAAS,EAAE,WAAW,EAAE,WAAW;KACpC,EAAE,uBAAuB,CAAC,CAAC;IAC5B,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC;QAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACnE,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;IACrE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACvD,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;IAC7D,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACvD,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IACnD,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAC5F,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA8B,EAAE,IAAY;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,SAAS,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW;QACpE,cAAc,EAAE,aAAa;KAC9B,EAAE,IAAI,CAAC,CAAC;IACT,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAClI,IAAI,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;IACjG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;IAC/C,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;IAC/C,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;IACzD,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC;IACvD,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,IAAI,eAAe,CAAC,CAAC;IAC3D,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,IAAI,cAAc,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI;WAC/G,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAC;IAC/I,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;WAChH,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;IACpJ,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;WAChF,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;WACrD,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;AACxH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA+B;IAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;IAC1D,SAAS,CAAC,QAAQ,EAAE;QAClB,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe;QACrE,gBAAgB,EAAE,aAAa;KAChC,EAAE,yBAAyB,CAAC,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACzG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,KAAK,gCAAgC,CAAC,CAAC;IACxH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,CAAU,EAAE,CAAC;QAC9F,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,KAAK,gCAAgC,CAAC,CAAC;IACzF,CAAC;IACD,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACjD,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAC5C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACxH,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,OAAiB,EAAE,KAAa;IACjF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,GAAG,GAAG,CAAC,CAAC;IACzH,KAAK,MAAM,GAAG,IAAI,OAAO;QAAE,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,GAAG,GAAG,CAAC,CAAC;AACvG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC,gDAAgD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;AAClJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;AAC7H,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,IAAI,KAAK,KAAK,IAAI;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,QAAQ;QAAE,IAAI,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,GAAG,CAAC,CAAC;AACjE,CAAC"}

package/dist/src/runner/mission-git-runtime-owner-ref.d.ts

@@ -1,13 +0,0 @@
-import type { ProcessExecutor } from '../process/command.js';
-import { type RuntimeOwnerObservation, type RuntimeOwnerRecord, type RuntimeOwnerRefAdapter } from './mission-runtime-owner.js';
-export declare class GitRuntimeOwnerRefAdapter implements RuntimeOwnerRefAdapter {
-    private readonly targetRoot;
-    private readonly execute;
-    private readonly remote;
-    private readonly ownerRef;
-    constructor(targetRoot: string, execute?: ProcessExecutor, remote?: string, ownerRef?: string);
-    read(): Promise<RuntimeOwnerObservation | undefined>;
-    compareAndSwap(expectedSha: string | undefined, record: RuntimeOwnerRecord): Promise<RuntimeOwnerObservation>;
-    private git;
-}
-//# sourceMappingURL=mission-git-runtime-owner-ref.d.ts.map

package/dist/src/runner/mission-git-runtime-owner-ref.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-git-runtime-owner-ref.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-git-runtime-owner-ref.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAIL,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC5B,MAAM,4BAA4B,CAAC;AAKpC,qBAAa,yBAA0B,YAAW,sBAAsB;IAEpE,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAHR,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,eAAwC,EACjD,MAAM,SAAW,EACjB,QAAQ,SAAkB;IAGhC,IAAI,IAAI,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC;IAiCpD,cAAc,CACzB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,uBAAuB,CAAC;YAyCrB,GAAG;CAelB"}

package/dist/src/runner/mission-git-runtime-owner-ref.js

@@ -1,111 +0,0 @@
-import { randomUUID } from 'node:crypto';
-import { defaultProcessExecutor } from '../process/command.js';
-import { canonicalRuntimeOwnerRecord, parseRuntimeOwnerRecord, RuntimeOwnerConflictError, } from './mission-runtime-owner.js';
-const defaultOwnerRef = 'refs/codex-orchestrator/runtime-owner-v1';
-const ownerFile = 'codex-orchestrator-runtime-owner-v1.json';
-export class GitRuntimeOwnerRefAdapter {
-    targetRoot;
-    execute;
-    remote;
-    ownerRef;
-    constructor(targetRoot, execute = defaultProcessExecutor, remote = 'origin', ownerRef = defaultOwnerRef) {
-        this.targetRoot = targetRoot;
-        this.execute = execute;
-        this.remote = remote;
-        this.ownerRef = ownerRef;
-    }
-    async read() {
-        const listed = await this.git(['ls-remote', '--refs', this.remote, this.ownerRef]);
-        const lines = listed.stdout.trim().length === 0
-            ? []
-            : listed.stdout.trim().split(/\r?\n/u);
-        if (lines.length === 0) {
-            return undefined;
-        }
-        if (lines.length !== 1) {
-            throw new RuntimeOwnerConflictError('remote owner ref is ambiguous');
-        }
-        const match = /^([a-f0-9]{40}(?:[a-f0-9]{24})?)\s+(.+)$/u.exec(lines[0] ?? '');
-        if (!match || match[2] !== this.ownerRef) {
-            throw new RuntimeOwnerConflictError('remote owner ref response is malformed');
-        }
-        const sha = match[1];
-        const observedRef = `refs/codex-orchestrator/observed/${process.pid}-${randomUUID()}`;
-        await this.git(['fetch', '--no-tags', this.remote, `+${this.ownerRef}:${observedRef}`]);
-        try {
-            const fetchedSha = objectId(await this.git(['rev-parse', observedRef]), 'observed owner');
-            if (fetchedSha !== sha) {
-                throw new RuntimeOwnerConflictError('owner ref moved between listing and fetch');
-            }
-            const shown = await this.git(['show', `${observedRef}:${ownerFile}`]);
-            return {
-                sha,
-                record: parseRuntimeOwnerRecord(shown.stdout.replace(/\r?\n$/u, '')),
-            };
-        }
-        finally {
-            await this.git(['update-ref', '-d', observedRef]);
-        }
-    }
-    async compareAndSwap(expectedSha, record) {
-        const canonical = canonicalRuntimeOwnerRecord(record);
-        const blob = objectId(await this.git(['hash-object', '-w', '--stdin'], canonical), 'blob');
-        const tree = objectId(await this.git(['mktree'], `100644 blob ${blob}\t${ownerFile}\n`), 'tree');
-        const commit = objectId(await this.git(['commit-tree', tree, '-m', `codex-orchestrator runtime owner epoch ${record.fencingEpoch}`], undefined, fixedGitIdentityEnv()), 'commit');
-        const lease = `--force-with-lease=${this.ownerRef}:${expectedSha ?? ''}`;
-        const pushed = await this.execute('git', [
-            'push',
-            lease,
-            this.remote,
-            `${commit}:${this.ownerRef}`,
-        ], { cwd: this.targetRoot });
-        if (pushed.exitCode !== 0) {
-            try {
-                const reconciled = await this.read();
-                if (reconciled?.sha === commit
-                    && canonicalRuntimeOwnerRecord(reconciled.record) === canonical) {
-                    return reconciled;
-                }
-            }
-            catch {
-                // Preserve the compare-and-swap failure below when reconciliation is unavailable.
-            }
-            throw new RuntimeOwnerConflictError(`compare-and-swap failed${pushed.stderr.trim() ? `: ${pushed.stderr.trim()}` : ''}`);
-        }
-        const observed = await this.read();
-        if (!observed || observed.sha !== commit
-            || canonicalRuntimeOwnerRecord(observed.record) !== canonical) {
-            throw new RuntimeOwnerConflictError('post-push owner ref does not match the requested record');
-        }
-        return observed;
-    }
-    async git(args, stdin, env) {
-        const result = await this.execute('git', args, {
-            cwd: this.targetRoot,
-            ...(stdin === undefined ? {} : { stdin }),
-            ...(env === undefined ? {} : { env }),
-        });
-        if (result.exitCode !== 0) {
-            throw new Error(`Git runtime-owner command failed: git ${args.join(' ')}: ${result.stderr.trim()}`);
-        }
-        return result;
-    }
-}
-function objectId(result, kind) {
-    const id = result.stdout.trim();
-    if (!/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/u.test(id)) {
-        throw new Error(`Git runtime-owner ${kind} command returned an invalid object ID.`);
-    }
-    return id;
-}
-function fixedGitIdentityEnv() {
-    return {
-        ...(process.env.PATH ? { PATH: process.env.PATH } : {}),
-        ...(process.env.HOME ? { HOME: process.env.HOME } : {}),
-        GIT_AUTHOR_NAME: 'codex-orchestrator',
-        GIT_AUTHOR_EMAIL: 'codex-orchestrator@localhost',
-        GIT_COMMITTER_NAME: 'codex-orchestrator',
-        GIT_COMMITTER_EMAIL: 'codex-orchestrator@localhost',
-    };
-}
-//# sourceMappingURL=mission-git-runtime-owner-ref.js.map

package/dist/src/runner/mission-git-runtime-owner-ref.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-git-runtime-owner-ref.js","sourceRoot":"","sources":["../../../src/runner/mission-git-runtime-owner-ref.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,GAI1B,MAAM,4BAA4B,CAAC;AAEpC,MAAM,eAAe,GAAG,0CAA0C,CAAC;AACnE,MAAM,SAAS,GAAG,0CAA0C,CAAC;AAE7D,MAAM,OAAO,yBAAyB;IAEjB;IACA;IACA;IACA;IAJnB,YACmB,UAAkB,EAClB,UAA2B,sBAAsB,EACjD,SAAS,QAAQ,EACjB,WAAW,eAAe;QAH1B,eAAU,GAAV,UAAU,CAAQ;QAClB,YAAO,GAAP,OAAO,CAA0C;QACjD,WAAM,GAAN,MAAM,CAAW;QACjB,aAAQ,GAAR,QAAQ,CAAkB;IAC1C,CAAC;IAEG,KAAK,CAAC,IAAI;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAC7C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,CAAC,+BAA+B,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,KAAK,GAAG,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,MAAM,IAAI,yBAAyB,CAAC,wCAAwC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;QAC/B,MAAM,WAAW,GAAG,oCAAoC,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;QACtF,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;YAC1F,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,yBAAyB,CAAC,2CAA2C,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO;gBACL,GAAG;gBACH,MAAM,EAAE,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;aACrE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,cAAc,CACzB,WAA+B,EAC/B,MAA0B;QAE1B,MAAM,SAAS,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,CAClC,CAAC,QAAQ,CAAC,EACV,eAAe,IAAI,KAAK,SAAS,IAAI,CACtC,EAAE,MAAM,CAAC,CAAC;QACX,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,CACpC,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,0CAA0C,MAAM,CAAC,YAAY,EAAE,CAAC,EAC5F,SAAS,EACT,mBAAmB,EAAE,CACtB,EAAE,QAAQ,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,sBAAsB,IAAI,CAAC,QAAQ,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YACvC,MAAM;YACN,KAAK;YACL,IAAI,CAAC,MAAM;YACX,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE;SAC7B,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrC,IAAI,UAAU,EAAE,GAAG,KAAK,MAAM;uBACzB,2BAA2B,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;oBAClE,OAAO,UAAU,CAAC;gBACpB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kFAAkF;YACpF,CAAC;YACD,MAAM,IAAI,yBAAyB,CACjC,0BAA0B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACpF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM;eACnC,2BAA2B,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;YAChE,MAAM,IAAI,yBAAyB,CAAC,yDAAyD,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,GAAG,CACf,IAAc,EACd,KAAc,EACd,GAA4B;QAE5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE;YAC7C,GAAG,EAAE,IAAI,CAAC,UAAU;YACpB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;SACtC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,MAA0B,EAAE,IAAY;IACxD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,yCAAyC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,eAAe,EAAE,oBAAoB;QACrC,gBAAgB,EAAE,8BAA8B;QAChD,kBAAkB,EAAE,oBAAoB;QACxC,mBAAmB,EAAE,8BAA8B;KACpD,CAAC;AACJ,CAAC"}