codex-orchestrator 2.0.2 → 2.0.4

package/dist/src/v2/contained-report-operation.d.ts

@@ -0,0 +1,100 @@
+import { type CodeReviewValidationContext } from './code-review-report.js';
+import type { WorkflowExecutionProfile, WorkflowGenerationReceipt, WorkflowOperationPolicy } from './workflow-assets.js';
+import type { RunRecordV1 } from './run-store.js';
+export type ContainedReportOperationId = 'triage' | 'ambiguity-review' | 'code-review';
+export interface ContainedReportOperationInput {
+    operation: ContainedReportOperationId;
+    attemptId: string;
+    runId: string;
+    worktreePath: string;
+    workflowGeneration: WorkflowGenerationReceipt;
+    promptFacts: string[];
+    signal: AbortSignal;
+    reviewContext?: CodeReviewValidationContext;
+    onPrepared?: () => Promise<void>;
+    onLaunched?: (identity: {
+        pid: number;
+        processGroupId: number;
+    }) => Promise<void>;
+}
+export type ContainedReportOperationResult = {
+    status: 'completed';
+    attemptId: string;
+    validatedPayload: unknown;
+    artifactSha256: string;
+} | {
+    status: 'invalid';
+    attemptId: string;
+    findings: string[];
+    repairInput?: {
+        originalReportSha256: string;
+        originalReportBytes: Buffer;
+    };
+} | {
+    status: 'retryable';
+    code: string;
+} | {
+    status: 'safe-halt';
+    process: Omit<NonNullable<RunRecordV1['process']>, 'purpose' | 'resumeLifecycle' | 'resumeReviewStage'>;
+    waitForAbsence(): Promise<void>;
+} | {
+    status: 'cancelled';
+} | {
+    status: 'blocked';
+    kind: 'external' | 'safety';
+    code: string;
+};
+export interface ContainedReportOperation {
+    run(input: ContainedReportOperationInput): Promise<ContainedReportOperationResult>;
+}
+export type ReportOnlyWorktreeSnapshot = NonNullable<RunRecordV1['process']>['baseline'];
+export interface PreparedContainedReportAttempt {
+    operation: ContainedReportOperationId;
+    generationHash: string;
+    policy: WorkflowOperationPolicy;
+    workflowRoot?: string;
+    operationPath?: string;
+    schemaPath?: string;
+    reportPath?: string;
+    toolHome?: string;
+    tmpDir?: string;
+    profile?: WorkflowExecutionProfile;
+}
+export type ContainedReportLaunchResult = {
+    status: 'completed';
+    reportBytes: Buffer;
+} | {
+    status: 'retryable';
+    code: string;
+} | {
+    status: 'safe-halt';
+    pid: number;
+    processGroupId: number;
+    startedAt: string;
+    waitForAbsence(): Promise<void>;
+} | {
+    status: 'cancelled';
+} | {
+    status: 'blocked';
+    kind: 'external' | 'safety';
+    code: string;
+};
+export interface ContainedReportOperationDependencies {
+    prepare(input: {
+        operation: ContainedReportOperationId;
+        attemptId: string;
+        runId: string;
+        workflowGeneration: WorkflowGenerationReceipt;
+    }): Promise<PreparedContainedReportAttempt>;
+    snapshot(worktreePath: string): Promise<unknown>;
+    launch(input: ContainedReportOperationInput & {
+        attempt: PreparedContainedReportAttempt;
+    }): Promise<ContainedReportLaunchResult>;
+}
+export declare class InjectedContainedReportOperation implements ContainedReportOperation {
+    private readonly dependencies;
+    constructor(dependencies: ContainedReportOperationDependencies);
+    run(input: ContainedReportOperationInput): Promise<ContainedReportOperationResult>;
+    private finishWithSnapshot;
+}
+//# sourceMappingURL=contained-report-operation.d.ts.map

package/dist/src/v2/contained-report-operation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contained-report-operation.d.ts","sourceRoot":"","sources":["../../../src/v2/contained-report-operation.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,2BAA2B,EACjC,MAAM,yBAAyB,CAAC;AAOjC,OAAO,KAAK,EACV,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAQlD,MAAM,MAAM,0BAA0B,GAAG,QAAQ,GAAG,kBAAkB,GAAG,aAAa,CAAC;AAEvF,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,0BAA0B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,yBAAyB,CAAC;IAC9C,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,CAAC,EAAE,2BAA2B,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnF;AAED,MAAM,MAAM,8BAA8B,GACtC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC7F;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE;QAAE,oBAAoB,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACzI;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACrC;IACA,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,GAAG,iBAAiB,GAAG,mBAAmB,CAAC,CAAC;IACxG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GACC;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;CACpF;AAED,MAAM,MAAM,0BAA0B,GAAG,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AAEzF,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,0BAA0B,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,uBAAuB,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,wBAAwB,CAAC;CACpC;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GAChH;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE,MAAM,WAAW,oCAAoC;IACnD,OAAO,CAAC,KAAK,EAAE;QACb,SAAS,EAAE,0BAA0B,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,kBAAkB,EAAE,yBAAyB,CAAC;KAC/C,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,6BAA6B,GAAG;QAC5C,OAAO,EAAE,8BAA8B,CAAC;KACzC,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;CAC1C;AAED,qBAAa,gCAAiC,YAAW,wBAAwB;IACnE,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE,oCAAoC;IAEzE,GAAG,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,8BAA8B,CAAC;YA8D1E,kBAAkB;CAoBjC"}

package/dist/src/v2/contained-report-operation.js

@@ -0,0 +1,200 @@
+import { canonicalJson, containsCredentialEvidence, sha256 } from './containment.js';
+import { decodeAgentReportForValidation } from './report-envelope.js';
+import { hashCodeReviewReport, validateCodeReviewReport, } from './code-review-report.js';
+import { hashAmbiguityReviewArtifact, hashTriageArtifact, validateAmbiguityReviewArtifact, } from './route-decision.js';
+import { validateTriageRoute } from './triage-route.js';
+const MAX_STRING_LENGTH = 16 * 1024;
+const POLICY_KEYS = [
+    'sandboxMode', 'cwdClass', 'worktreeAccess', 'writableRootClasses', 'runnerPostcondition',
+    'network', 'networkHosts', 'mcpTools', 'approvalCeiling', 'externalWrite',
+];
+export class InjectedContainedReportOperation {
+    dependencies;
+    constructor(dependencies) {
+        this.dependencies = dependencies;
+    }
+    async run(input) {
+        let before;
+        try {
+            before = requireReportSnapshot(await this.dependencies.snapshot(input.worktreePath));
+        }
+        catch {
+            return { status: 'blocked', kind: 'safety', code: 'report-operation-snapshot-failed' };
+        }
+        let attempt;
+        try {
+            attempt = await this.dependencies.prepare({
+                operation: input.operation,
+                attemptId: input.attemptId,
+                runId: input.runId,
+                workflowGeneration: input.workflowGeneration,
+            });
+        }
+        catch {
+            return this.finishWithSnapshot(input.worktreePath, before, {
+                status: 'blocked', kind: 'external', code: 'report-operation-prepare-failed',
+            });
+        }
+        let launchResult;
+        if (!hasExactReadOnlyAuthority(attempt, input)) {
+            launchResult = { status: 'blocked', kind: 'safety', code: 'report-operation-authority-drift' };
+        }
+        else {
+            if (isImplementationReview(input.operation)) {
+                if (!input.reviewContext || !input.onPrepared || !input.onLaunched) {
+                    return this.finishWithSnapshot(input.worktreePath, before, {
+                        status: 'blocked', kind: 'safety', code: 'review-operation-launch-gate-missing',
+                    });
+                }
+                try {
+                    await input.onPrepared();
+                }
+                catch {
+                    return this.finishWithSnapshot(input.worktreePath, before, {
+                        status: 'blocked', kind: 'safety', code: 'review-operation-prepare-persistence-failed',
+                    });
+                }
+            }
+            try {
+                launchResult = await this.dependencies.launch({ ...input, attempt });
+            }
+            catch {
+                launchResult = { status: 'blocked', kind: 'external', code: 'report-operation-launch-failed' };
+            }
+        }
+        if (launchResult.status === 'safe-halt') {
+            return {
+                status: 'safe-halt',
+                process: {
+                    pid: launchResult.pid,
+                    processGroupId: launchResult.processGroupId,
+                    startedAt: launchResult.startedAt,
+                    baseline: structuredClone(before),
+                },
+                waitForAbsence: launchResult.waitForAbsence,
+            };
+        }
+        return this.finishWithSnapshot(input.worktreePath, before, launchResult, input);
+    }
+    async finishWithSnapshot(worktreePath, before, launchResult, input) {
+        let after;
+        try {
+            after = requireReportSnapshot(await this.dependencies.snapshot(worktreePath));
+        }
+        catch {
+            return { status: 'blocked', kind: 'safety', code: 'report-operation-snapshot-failed' };
+        }
+        if (!sameSnapshot(before, after)) {
+            return { status: 'blocked', kind: 'safety', code: 'report-operation-worktree-mutated' };
+        }
+        if (launchResult.status !== 'completed')
+            return launchResult;
+        if (!input)
+            return { status: 'blocked', kind: 'external', code: 'report-operation-prepare-failed' };
+        return validateCompletedReport(input.operation, input.attemptId, launchResult.reportBytes, input.reviewContext);
+    }
+}
+function hasExactReadOnlyAuthority(attempt, input) {
+    const policy = attempt.policy;
+    return attempt.operation === input.operation
+        && attempt.generationHash === input.workflowGeneration.generationHash
+        && hasExactKeys(policy, POLICY_KEYS)
+        && policy.sandboxMode === 'read-only'
+        && policy.cwdClass === 'worktree'
+        && policy.worktreeAccess === 'read-only'
+        && Array.isArray(policy.writableRootClasses)
+        && policy.writableRootClasses.length === 0
+        && policy.runnerPostcondition === 'report-only'
+        && policy.network === 'deny'
+        && Array.isArray(policy.networkHosts)
+        && policy.networkHosts.length === 0
+        && Array.isArray(policy.mcpTools)
+        && policy.mcpTools.length === 0
+        && policy.approvalCeiling === 'never'
+        && policy.externalWrite === false;
+}
+function validateCompletedReport(operation, attemptId, reportBytes, reviewContext) {
+    const rawText = reportBytes.toString('utf8');
+    const repairable = Buffer.from(rawText, 'utf8').equals(reportBytes)
+        && !containsCredentialEvidence(rawText)
+        && reportBytes.length <= 1024 * 1024;
+    try {
+        if (!Buffer.from(rawText, 'utf8').equals(reportBytes) || containsCredentialEvidence(rawText)) {
+            throw new Error('report payload contains forbidden credential material');
+        }
+        const decoded = decodeAgentReportForValidation(reportBytes);
+        let validatedPayload;
+        let artifactSha256;
+        if (operation === 'triage') {
+            validatedPayload = validateTriageRoute(decoded);
+            artifactSha256 = hashTriageArtifact(validatedPayload);
+        }
+        else if (operation === 'ambiguity-review') {
+            validatedPayload = validateAmbiguityReviewArtifact(decoded);
+            artifactSha256 = hashAmbiguityReviewArtifact(validatedPayload);
+        }
+        else {
+            const reviewReport = inputReview(operation, inputReviewContext(reviewContext), decoded);
+            validatedPayload = reviewReport;
+            artifactSha256 = hashCodeReviewReport(reviewReport);
+        }
+        return {
+            status: 'completed',
+            attemptId,
+            validatedPayload,
+            artifactSha256,
+        };
+    }
+    catch (error) {
+        return {
+            status: 'invalid',
+            attemptId,
+            findings: [safeFinding(error)],
+            ...(repairable ? { repairInput: { originalReportSha256: sha256(reportBytes), originalReportBytes: Buffer.from(reportBytes) } } : {}),
+        };
+    }
+}
+function isImplementationReview(operation) {
+    return operation === 'code-review';
+}
+function inputReviewContext(context) {
+    if (!context)
+        throw new Error('implementation review validation context is missing');
+    return context;
+}
+function inputReview(operation, context, decoded) {
+    if (context.operation !== operation)
+        throw new Error('implementation review operation context mismatch');
+    return validateCodeReviewReport(decoded, context);
+}
+function safeFinding(error) {
+    return error instanceof Error && error.message.length > 0
+        ? error.message.slice(0, MAX_STRING_LENGTH)
+        : 'report payload validation failed';
+}
+function sameSnapshot(left, right) {
+    try {
+        return canonicalJson(left) === canonicalJson(right);
+    }
+    catch {
+        return false;
+    }
+}
+function hasExactKeys(value, keys) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const actual = Object.keys(value).sort();
+    const expected = [...keys].sort();
+    return actual.length === expected.length && actual.every((key, index) => key === expected[index]);
+}
+function requireReportSnapshot(value) {
+    const keys = ['headSha', 'indexTreeSha', 'trackedContentSha256', 'untrackedContentSha256', 'worktreeIdentity'];
+    if (!hasExactKeys(value, keys))
+        throw new Error('report-operation snapshot is invalid');
+    for (const key of keys) {
+        if (typeof value[key] !== 'string')
+            throw new Error('report-operation snapshot is invalid');
+    }
+    return value;
+}
+//# sourceMappingURL=contained-report-operation.js.map

package/dist/src/v2/contained-report-operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contained-report-operation.js","sourceRoot":"","sources":["../../../src/v2/contained-report-operation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EACL,oBAAoB,EACpB,wBAAwB,GAEzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAQxD,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,MAAM,WAAW,GAAG;IAClB,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,qBAAqB;IACzF,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,eAAe;CACjE,CAAC;AAoEX,MAAM,OAAO,gCAAgC;IACd;IAA7B,YAA6B,YAAkD;QAAlD,iBAAY,GAAZ,YAAY,CAAsC;IAAG,CAAC;IAEnF,KAAK,CAAC,GAAG,CAAC,KAAoC;QAC5C,IAAI,MAAkC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,qBAAqB,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kCAAkC,EAAE,CAAC;QACzF,CAAC;QAED,IAAI,OAAuC,CAAC;QAC5C,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;gBACxC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;aAC7C,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE;gBACzD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,iCAAiC;aAC7E,CAAC,CAAC;QACL,CAAC;QAED,IAAI,YAAyC,CAAC;QAC9C,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC/C,YAAY,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kCAAkC,EAAE,CAAC;QACjG,CAAC;aAAM,CAAC;YACN,IAAI,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;oBACnE,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE;wBACzD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,sCAAsC;qBAChF,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE;wBACzD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,6CAA6C;qBACvF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC;YACjG,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACxC,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE;oBACP,GAAG,EAAE,YAAY,CAAC,GAAG;oBACrB,cAAc,EAAE,YAAY,CAAC,cAAc;oBAC3C,SAAS,EAAE,YAAY,CAAC,SAAS;oBACjC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC;iBAClC;gBACD,cAAc,EAAE,YAAY,CAAC,cAAc;aAC5C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,YAAoB,EACpB,MAAkC,EAClC,YAA2E,EAC3E,KAAqC;QAErC,IAAI,KAAiC,CAAC;QACtC,IAAI,CAAC;YACH,KAAK,GAAG,qBAAqB,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kCAAkC,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mCAAmC,EAAE,CAAC;QAC1F,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,YAAY,CAAC;QAC7D,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC;QACpG,OAAO,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAClH,CAAC;CACF;AAED,SAAS,yBAAyB,CAChC,OAAuC,EACvC,KAAoC;IAEpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,OAAO,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WACvC,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC,kBAAkB,CAAC,cAAc;WAClE,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC;WACjC,MAAM,CAAC,WAAW,KAAK,WAAW;WAClC,MAAM,CAAC,QAAQ,KAAK,UAAU;WAC9B,MAAM,CAAC,cAAc,KAAK,WAAW;WACrC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;WACzC,MAAM,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;WACvC,MAAM,CAAC,mBAAmB,KAAK,aAAa;WAC5C,MAAM,CAAC,OAAO,KAAK,MAAM;WACzB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;WAClC,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;WAChC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;WAC9B,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;WAC5B,MAAM,CAAC,eAAe,KAAK,OAAO;WAClC,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC;AACtC,CAAC;AAED,SAAS,uBAAuB,CAC9B,SAAqC,EACrC,SAAiB,EACjB,WAAmB,EACnB,aAA2C;IAE3C,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;WAC9D,CAAC,0BAA0B,CAAC,OAAO,CAAC;WACpC,WAAW,CAAC,MAAM,IAAI,IAAI,GAAG,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,OAAO,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,gBAAyB,CAAC;QAC9B,IAAI,cAAsB,CAAC;QAC3B,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,gBAAgB,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAChD,cAAc,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACxD,CAAC;aAAM,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;YAC5C,gBAAgB,GAAG,+BAA+B,CAAC,OAAO,CAAC,CAAC;YAC5D,cAAc,GAAG,2BAA2B,CAAC,gBAAgB,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,WAAW,CAAC,SAAS,EAAE,kBAAkB,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;YACxF,gBAAgB,GAAG,YAAY,CAAC;YAChC,cAAc,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,SAAS;YACT,gBAAgB;YAChB,cAAc;SACf,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,SAAS;YACT,QAAQ,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC9B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,oBAAoB,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAqC;IACnE,OAAO,SAAS,KAAK,aAAa,CAAC;AACrC,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgD;IAC1E,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAClB,SAAwB,EACxB,OAAoC,EACpC,OAAgB;IAEhB,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACzG,OAAO,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACvD,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC;QAC3C,CAAC,CAAC,kCAAkC,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,IAAgC,EAAE,KAAiC;IACvF,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAuB;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,kBAAkB,CAAU,CAAC;IACxH,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAQ,KAAiC,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC3H,CAAC;IACD,OAAO,KAAmC,CAAC;AAC7C,CAAC"}

package/dist/src/v2/containment.d.ts

@@ -1,3 +1,4 @@
+import type { WorkflowExecutionProfile, WorkflowOperationPolicy } from './workflow-assets.js';
 export declare const CONTAINMENT_CODEX_VERSION: "0.144.4";
 export declare const CONTAINMENT_PLATFORM: "darwin";
 export declare const CONTAINMENT_SCHEMA: "codex-orchestrator.containment";
@@ -27,7 +28,11 @@ export declare function buildContainmentCodexArgs(input: {
     toolHome: string;
     tmpDir: string;
     safePath: string;
+    operationPolicy?: WorkflowOperationPolicy;
+    executionProfile?: Pick<WorkflowExecutionProfile, 'model' | 'reasoningEffort'>;
 }): string[];
+export declare function validateContainmentOperationPolicy(policy: WorkflowOperationPolicy): void;
+export declare function defaultContainmentOperationPolicy(): WorkflowOperationPolicy;
 export declare function buildContainmentCodexEnvironment(input: {
     parentEnv: NodeJS.ProcessEnv;
     parentCodexHome: string;
@@ -42,6 +47,10 @@ export declare function createContainmentCertificate(input: {
     completedAt: string;
 }): ContainmentCertificateV2;
 export declare function validateContainmentCertificate(value: unknown): ContainmentCertificateV2;
+export declare function assertContainmentCertificateMatchesRuntime(certificate: ContainmentCertificateV2, runtime: {
+    codexVersion: string;
+    argvPolicySha256: string;
+}): void;
 export declare function writeContainmentCertificate(path: string, certificate: ContainmentCertificateV2): Promise<void>;
 export declare function readContainmentCertificate(path: string): Promise<ContainmentCertificateV2>;
 export declare function removeMatchingContainmentCertificate(path: string, expected: {
@@ -51,5 +60,6 @@ export declare function removeMatchingContainmentCertificate(path: string, expec
 }): Promise<void>;
 export declare function canonicalJson(value: unknown): string;
 export declare function sha256(value: string | Buffer): string;
+export declare function containsCredentialEvidence(value: string): boolean;
 export declare function parseJsonWithoutDuplicateKeys(source: string): unknown;
 //# sourceMappingURL=containment.d.ts.map

package/dist/src/v2/containment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"containment.d.ts","sourceRoot":"","sources":["../../../src/v2/containment.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,yBAAyB,EAAG,SAAkB,CAAC;AAC5D,eAAO,MAAM,oBAAoB,EAAG,QAAiB,CAAC;AACtD,eAAO,MAAM,kBAAkB,EAAG,gCAAyC,CAAC;AAwB5E,MAAM,WAAW,wBAAwB;IACvC,kBAAkB,EAAE,IAAI,CAAC;IACzB,gBAAgB,EAAE,IAAI,CAAC;IACvB,yBAAyB,EAAE,KAAK,CAAC;IACjC,oBAAoB,EAAE,IAAI,CAAC;IAC3B,0BAA0B,EAAE,KAAK,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,OAAO,kBAAkB,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC;IACX,YAAY,EAAE,OAAO,yBAAyB,CAAC;IAC/C,QAAQ,EAAE,OAAO,oBAAoB,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,WAAW,EAAE,wBAAwB,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,0BAA0B,CACxC,gBAAgB,SAAyF,GACxG,MAAM,CAER;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,EAAE,CAwCX;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUzB;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CASpD;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,WAAW,EAAE,wBAAwB,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,wBAAwB,CAmB3B;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAsCvF;AAED,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,wBAAwB,GACpC,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAIhG;AAED,wBAAsB,oCAAoC,CACxD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,GACnF,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAkBpD;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAErD;AAmDD,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAgFrE"}
+{"version":3,"file":"containment.d.ts","sourceRoot":"","sources":["../../../src/v2/containment.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE9F,eAAO,MAAM,yBAAyB,EAAG,SAAkB,CAAC;AAC5D,eAAO,MAAM,oBAAoB,EAAG,QAAiB,CAAC;AACtD,eAAO,MAAM,kBAAkB,EAAG,gCAAyC,CAAC;AAwB5E,MAAM,WAAW,wBAAwB;IACvC,kBAAkB,EAAE,IAAI,CAAC;IACzB,gBAAgB,EAAE,IAAI,CAAC;IACvB,yBAAyB,EAAE,KAAK,CAAC;IACjC,oBAAoB,EAAE,IAAI,CAAC;IAC3B,0BAA0B,EAAE,KAAK,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,OAAO,kBAAkB,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC;IACX,YAAY,EAAE,OAAO,yBAAyB,CAAC;IAC/C,QAAQ,EAAE,OAAO,oBAAoB,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,WAAW,EAAE,wBAAwB,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,0BAA0B,CACxC,gBAAgB,SAAyF,GACxG,MAAM,CAER;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,gBAAgB,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,OAAO,GAAG,iBAAiB,CAAC,CAAC;CAChF,GAAG,MAAM,EAAE,CA+CX;AAED,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAmBxF;AAED,wBAAgB,iCAAiC,IAAI,uBAAuB,CAK3E;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUzB;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CASpD;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,WAAW,EAAE,wBAAwB,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,wBAAwB,CAmB3B;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAsCvF;AAED,wBAAgB,0CAA0C,CACxD,WAAW,EAAE,wBAAwB,EACrC,OAAO,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,GAC1D,IAAI,CAON;AAED,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,wBAAwB,GACpC,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAIhG;AAED,wBAAsB,oCAAoC,CACxD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,GACnF,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAkBpD;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAMjE;AAmDD,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAgFrE"}

package/dist/src/v2/containment.js

@@ -32,13 +32,16 @@ export function containmentCertificatePath(orchestratorHome = resolve(process.en
     return join(orchestratorHome, 'v2', 'certifications', CERTIFICATE_FILE);
 }
 export function buildContainmentCodexArgs(input) {
+    const operationPolicy = input.operationPolicy ?? defaultContainmentOperationPolicy();
+    validateContainmentOperationPolicy(operationPolicy);
     return [
         'exec',
         '--strict-config',
         '--ignore-user-config',
         '--ignore-rules',
+        '--skip-git-repo-check',
         '--sandbox',
-        'workspace-write',
+        operationPolicy.sandboxMode,
         '--output-schema',
         input.schemaPath,
         '--output-last-message',
@@ -53,6 +56,10 @@ export function buildContainmentCodexArgs(input) {
         'features.apps=false',
         '-c',
         'sandbox_workspace_write.network_access=false',
+        ...(input.executionProfile ? [
+            '-c', `model=${tomlString(input.executionProfile.model)}`,
+            '-c', `model_reasoning_effort=${tomlString(input.executionProfile.reasoningEffort)}`,
+        ] : []),
         '-c',
         'shell_environment_policy.inherit="none"',
         '-c',
@@ -72,6 +79,32 @@ export function buildContainmentCodexArgs(input) {
         '-',
     ];
 }
+export function validateContainmentOperationPolicy(policy) {
+    if (!['read-only', 'workspace-write'].includes(policy.sandboxMode)
+        || !['worktree', 'target-state'].includes(policy.cwdClass)
+        || !['read-only', 'write'].includes(policy.worktreeAccess)
+        || policy.network !== 'deny' || policy.networkHosts.length !== 0 || policy.mcpTools.length !== 0
+        || policy.approvalCeiling !== 'never' || policy.externalWrite !== false) {
+        throw new Error('operation policy exceeds containment authority');
+    }
+    if (policy.sandboxMode === 'read-only') {
+        if (policy.worktreeAccess !== 'read-only' || policy.writableRootClasses.length !== 0 || policy.runnerPostcondition !== 'report-only') {
+            throw new Error('read-only operation policy is inconsistent');
+        }
+        return;
+    }
+    if (policy.worktreeAccess !== 'write' || policy.writableRootClasses.length !== 1
+        || policy.writableRootClasses[0] !== policy.cwdClass
+        || !['change-set', 'proof-only', 'spec-only'].includes(policy.runnerPostcondition)) {
+        throw new Error('write operation policy is inconsistent');
+    }
+}
+export function defaultContainmentOperationPolicy() {
+    return {
+        sandboxMode: 'workspace-write', cwdClass: 'worktree', worktreeAccess: 'write', writableRootClasses: ['worktree'],
+        runnerPostcondition: 'change-set', network: 'deny', networkHosts: [], mcpTools: [], approvalCeiling: 'never', externalWrite: false,
+    };
+}
 export function buildContainmentCodexEnvironment(input) {
     const env = {
         PATH: input.safePath,
@@ -156,6 +189,14 @@ export function validateContainmentCertificate(value) {
     }
     return value;
 }
+export function assertContainmentCertificateMatchesRuntime(certificate, runtime) {
+    if (certificate.argvPolicySha256 !== runtime.argvPolicySha256) {
+        throw new Error('containment argv policy mismatch');
+    }
+    if (runtime.codexVersion !== `codex-cli ${certificate.codexVersion}`) {
+        throw new Error('Codex version does not match the containment certificate');
+    }
+}
 export async function writeContainmentCertificate(path, certificate) {
     validateContainmentCertificate(certificate);
     await writeDurableAtomicFile(path, `${canonicalJson(certificate)}\n`);
@@ -208,6 +249,13 @@ export function canonicalJson(value) {
 export function sha256(value) {
     return createHash('sha256').update(value).digest('hex');
 }
+export function containsCredentialEvidence(value) {
+    return [
+        /-----BEGIN [A-Z ]*PRIVATE KEY-----/iu,
+        /["']?authorization["']?\s*[:=]\s*["']?(?:bearer|basic)\s+/iu,
+        /["']?(?:api[_-]?key|access[_-]?token|refresh[_-]?token|password|secret)["']?\s*[:=]\s*["']?[A-Za-z0-9_./+=-]{8,}/iu,
+    ].some((pattern) => pattern.test(value));
+}
 function validateProbeResult(value, field) {
     assertExactObject(value, [
         'parentAuthReadable',

package/dist/src/v2/containment.js.map

@@ -1 +1 @@
-{"version":3,"file":"containment.js","sourceRoot":"","sources":["../../../src/v2/containment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAE3E,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAkB,CAAC;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAiB,CAAC;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAG,gCAAyC,CAAC;AAC5E,MAAM,gBAAgB,GAAG,qBAAqB,yBAAyB,OAAO,CAAC;AAC/E,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,oBAAoB,GAAG;IAC3B,UAAU;IACV,cAAc;IACd,eAAe;IACf,aAAa;IACb,aAAa;IACb,eAAe;IACf,WAAW;IACX,iBAAiB;IACjB,uBAAuB;IACvB,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,aAAa;IACb,gCAAgC;IAChC,iBAAiB;IACjB,kBAAkB;IAClB,qBAAqB;CACb,CAAC;AAuBX,MAAM,UAAU,0BAA0B,CACxC,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAEzG,OAAO,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAMzC;IACC,OAAO;QACL,MAAM;QACN,iBAAiB;QACjB,sBAAsB;QACtB,gBAAgB;QAChB,WAAW;QACX,iBAAiB;QACjB,iBAAiB;QACjB,KAAK,CAAC,UAAU;QAChB,uBAAuB;QACvB,KAAK,CAAC,UAAU;QAChB,IAAI;QACJ,yBAAyB;QACzB,IAAI;QACJ,mCAAmC;QACnC,IAAI;QACJ,uBAAuB;QACvB,IAAI;QACJ,qBAAqB;QACrB,IAAI;QACJ,8CAA8C;QAC9C,IAAI;QACJ,yCAAyC;QACzC,IAAI;QACJ,qCAAqC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;QACjE,IAAI;QACJ,qCAAqC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;QACjE,IAAI;QACJ,uCAAuC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;QACjE,IAAI;QACJ,6CAA6C;QAC7C,IAAI;QACJ,+CAA+C;QAC/C,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACvC,IAAI;YACJ,gCAAgC,GAAG,KAAK;SACzC,CAAC;QACF,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAIhD;IACC,MAAM,GAAG,GAA2B;QAClC,IAAI,EAAE,KAAK,CAAC,QAAQ;QACpB,UAAU,EAAE,KAAK,CAAC,eAAe;QACjC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,EAAE;QACvC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS;QACvC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS;QAC3C,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,MAAM;KACzC,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,MAAM,IAAI,GAAG,yBAAyB,CAAC;QACrC,UAAU,EAAE,mBAAmB;QAC/B,UAAU,EAAE,kBAAkB;QAC9B,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,mBAAmB;KAC9B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAM5C;IACC,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC7D,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACzD,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtD,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,CAAC,aAAa,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,CAAU;QACnB,YAAY,EAAE,yBAAyB;QACvC,QAAQ,EAAE,oBAAoB;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IACF,OAAO,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,iBAAiB,CAAC,KAAK,EAAE;QACvB,QAAQ;QACR,SAAS;QACT,cAAc;QACd,UAAU;QACV,gBAAgB;QAChB,kBAAkB;QAClB,MAAM;QACN,aAAa;QACb,aAAa;QACb,cAAc;KACf,EAAE,yBAAyB,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,YAAY,KAAK,yBAAyB;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC3G,IAAI,KAAK,CAAC,QAAQ,KAAK,oBAAoB;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC7F,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC7D,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACzD,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtD,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACtC,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IACF,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAA4C,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,WAAqC;IAErC,8BAA8B,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,sBAAsB,CAAC,IAAI,EAAE,GAAG,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY;IAC3D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACnG,OAAO,8BAA8B,CAAC,6BAA6B,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,IAAY,EACZ,QAAoF;IAEpF,IAAI,WAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,OAAO;IACT,CAAC;IACD,IACE,WAAW,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;WAC/C,WAAW,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;WACtD,WAAW,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EAC7D,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAC5E,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAsB;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,KAAa;IACxD,iBAAiB,CAAC,KAAK,EAAE;QACvB,oBAAoB;QACpB,kBAAkB;QAClB,2BAA2B;QAC3B,sBAAsB;QACtB,4BAA4B;KAC7B,EAAE,KAAK,CAAC,CAAC;IACV,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;IACnG,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC/F,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IACvG,KAAK,MAAM,GAAG,IAAI,CAAC,2BAA2B,EAAE,4BAA4B,CAAU,EAAE,CAAC;QACvF,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,gBAAgB,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,YAAsB,EAAE,KAAa;IAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACvH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,UAAU,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAClH,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG;IACb,aAAa;QACX,IAAI,QAAQ,EAAE,KAAK,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACtG,CAAC;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAc;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,MAAM,cAAc,GAAG,GAAG,EAAE;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,GAAY,EAAE;QAC/B,cAAc,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,WAAW,EAAE,CAAC;QAC1C,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,UAAU,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,WAAW,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAClE,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACpE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACxF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;QAC7D,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAAW,EAAE;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBAClC,KAAK,IAAI,CAAC,CAAC;gBACX,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAW,CAAC;YAC1D,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;;gBAC9C,OAAO,GAAG,KAAK,CAAC;YACrB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAA4B,EAAE;QAChD,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,cAAc,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACzD,OAAO,IAAI,EAAE,CAAC;YACZ,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACxF,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,CAAC;YAC3B,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,KAAK,IAAI,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;YACzD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC1F,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,GAAc,EAAE;QACjC,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,cAAc,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACzD,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC1B,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,KAAK,IAAI,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;YACzD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACzF,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,cAAc,EAAE,CAAC;IACjB,IAAI,KAAK,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"containment.js","sourceRoot":"","sources":["../../../src/v2/containment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAG3E,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAkB,CAAC;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAiB,CAAC;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAG,gCAAyC,CAAC;AAC5E,MAAM,gBAAgB,GAAG,qBAAqB,yBAAyB,OAAO,CAAC;AAC/E,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,oBAAoB,GAAG;IAC3B,UAAU;IACV,cAAc;IACd,eAAe;IACf,aAAa;IACb,aAAa;IACb,eAAe;IACf,WAAW;IACX,iBAAiB;IACjB,uBAAuB;IACvB,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,aAAa;IACb,gCAAgC;IAChC,iBAAiB;IACjB,kBAAkB;IAClB,qBAAqB;CACb,CAAC;AAuBX,MAAM,UAAU,0BAA0B,CACxC,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAEzG,OAAO,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAQzC;IACC,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,iCAAiC,EAAE,CAAC;IACrF,kCAAkC,CAAC,eAAe,CAAC,CAAC;IACpD,OAAO;QACL,MAAM;QACN,iBAAiB;QACjB,sBAAsB;QACtB,gBAAgB;QAChB,uBAAuB;QACvB,WAAW;QACX,eAAe,CAAC,WAAW;QAC3B,iBAAiB;QACjB,KAAK,CAAC,UAAU;QAChB,uBAAuB;QACvB,KAAK,CAAC,UAAU;QAChB,IAAI;QACJ,yBAAyB;QACzB,IAAI;QACJ,mCAAmC;QACnC,IAAI;QACJ,uBAAuB;QACvB,IAAI;QACJ,qBAAqB;QACrB,IAAI;QACJ,8CAA8C;QAC9C,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC3B,IAAI,EAAE,SAAS,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE;YACzD,IAAI,EAAE,0BAA0B,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE;SACrF,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,IAAI;QACJ,yCAAyC;QACzC,IAAI;QACJ,qCAAqC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;QACjE,IAAI;QACJ,qCAAqC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;QACjE,IAAI;QACJ,uCAAuC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;QACjE,IAAI;QACJ,6CAA6C;QAC7C,IAAI;QACJ,+CAA+C;QAC/C,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACvC,IAAI;YACJ,gCAAgC,GAAG,KAAK;SACzC,CAAC;QACF,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,MAA+B;IAChF,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;WAC7D,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;WACvD,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;WACvD,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;WAC7F,MAAM,CAAC,eAAe,KAAK,OAAO,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,cAAc,KAAK,WAAW,IAAI,MAAM,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,mBAAmB,KAAK,aAAa,EAAE,CAAC;YACrI,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,OAAO,IAAI,MAAM,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;WAC3E,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,QAAQ;WACjD,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,OAAO;QACL,WAAW,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,UAAU,CAAC;QAChH,mBAAmB,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK;KACnI,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAIhD;IACC,MAAM,GAAG,GAA2B;QAClC,IAAI,EAAE,KAAK,CAAC,QAAQ;QACpB,UAAU,EAAE,KAAK,CAAC,eAAe;QACjC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,EAAE;QACvC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS;QACvC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS;QAC3C,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,MAAM;KACzC,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,MAAM,IAAI,GAAG,yBAAyB,CAAC;QACrC,UAAU,EAAE,mBAAmB;QAC/B,UAAU,EAAE,kBAAkB;QAC9B,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,mBAAmB;KAC9B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAM5C;IACC,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC7D,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACzD,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtD,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,CAAC,aAAa,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,CAAU;QACnB,YAAY,EAAE,yBAAyB;QACvC,QAAQ,EAAE,oBAAoB;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IACF,OAAO,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,iBAAiB,CAAC,KAAK,EAAE;QACvB,QAAQ;QACR,SAAS;QACT,cAAc;QACd,UAAU;QACV,gBAAgB;QAChB,kBAAkB;QAClB,MAAM;QACN,aAAa;QACb,aAAa;QACb,cAAc;KACf,EAAE,yBAAyB,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,YAAY,KAAK,yBAAyB;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC3G,IAAI,KAAK,CAAC,QAAQ,KAAK,oBAAoB;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC7F,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC7D,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACzD,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtD,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACtC,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IACF,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAA4C,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,WAAqC,EACrC,OAA2D;IAE3D,IAAI,WAAW,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,aAAa,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,WAAqC;IAErC,8BAA8B,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,sBAAsB,CAAC,IAAI,EAAE,GAAG,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY;IAC3D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACnG,OAAO,8BAA8B,CAAC,6BAA6B,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,IAAY,EACZ,QAAoF;IAEpF,IAAI,WAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,OAAO;IACT,CAAC;IACD,IACE,WAAW,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;WAC/C,WAAW,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;WACtD,WAAW,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EAC7D,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAC5E,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAsB;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACtD,OAAO;QACL,sCAAsC;QACtC,6DAA6D;QAC7D,oHAAoH;KACrH,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,KAAa;IACxD,iBAAiB,CAAC,KAAK,EAAE;QACvB,oBAAoB;QACpB,kBAAkB;QAClB,2BAA2B;QAC3B,sBAAsB;QACtB,4BAA4B;KAC7B,EAAE,KAAK,CAAC,CAAC;IACV,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;IACnG,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC/F,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IACvG,KAAK,MAAM,GAAG,IAAI,CAAC,2BAA2B,EAAE,4BAA4B,CAAU,EAAE,CAAC;QACvF,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,gBAAgB,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,YAAsB,EAAE,KAAa;IAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACvH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,UAAU,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAClH,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG;IACb,aAAa;QACX,IAAI,QAAQ,EAAE,KAAK,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACtG,CAAC;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAc;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,MAAM,cAAc,GAAG,GAAG,EAAE;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,GAAY,EAAE;QAC/B,cAAc,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,WAAW,EAAE,CAAC;QAC1C,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,UAAU,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,WAAW,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAClE,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACpE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACxF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;QAC7D,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAAW,EAAE;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBAClC,KAAK,IAAI,CAAC,CAAC;gBACX,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAW,CAAC;YAC1D,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;;gBAC9C,OAAO,GAAG,KAAK,CAAC;YACrB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAA4B,EAAE;QAChD,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,cAAc,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACzD,OAAO,IAAI,EAAE,CAAC;YACZ,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACxF,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,CAAC;YAC3B,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,KAAK,IAAI,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;YACzD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC1F,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,GAAc,EAAE;QACjC,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,cAAc,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACzD,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC1B,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,KAAK,IAAI,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;YACzD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACzF,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,cAAc,EAAE,CAAC;IACjB,IAAI,KAAK,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/v2/direct-delivery.d.ts

@@ -0,0 +1,96 @@
+import { type CodeReviewDefectV1, type CodeReviewReportV1, type ReviewMode, type ReviewOperation } from './code-review-report.js';
+export type DirectReviewStage = 'review-full' | 'review-repair' | 'review-closure';
+export interface ReviewInvocationV1 {
+    attemptId: string;
+    operation: ReviewOperation;
+    mode: ReviewMode;
+    reviewerSessionId: string;
+    targetRevision: number;
+    targetFingerprint: string;
+    closureRequestSha256: string | null;
+    status: 'prepared' | 'launched' | 'abandoned';
+    pid: number | null;
+    processGroupId: number | null;
+}
+export interface ReviewTrackV1 {
+    version: 1;
+    disposition: 'active' | 'clear';
+    profile: 'simple' | 'medium' | 'high';
+    reviewerSessionId: string | null;
+    mode: ReviewMode | null;
+    reportRepairs: 0 | 1;
+    transportRetries: 0 | 1;
+    coverage: string[];
+    defects: CodeReviewDefectV1[];
+    affectedDefectIds: string[];
+    acceptedReportSha256: string | null;
+}
+export interface DirectRepairFindingV1 {
+    id: string;
+    provenance: 'code-review' | 'check' | 'proof';
+    sourceId: string;
+    targetRevision: number;
+    summary: string;
+    affectedContracts: string[];
+    status: 'open' | 'fixed' | 'verified' | 'reopened';
+}
+export interface DirectReviewV1 {
+    version: 1;
+    status: 'active' | 'clear' | 'terminal';
+    stage: DirectReviewStage | null;
+    targetRevision: number;
+    targetFingerprint: string;
+    review: ReviewTrackV1;
+    invocation?: ReviewInvocationV1;
+    repairFindings: DirectRepairFindingV1[];
+    terminalOutcome?: {
+        status: 'blocked';
+        kind: 'external' | 'safety' | 'exhausted';
+    } | {
+        status: 'transport-failed' | 'cancelled' | 'internal-error';
+    };
+}
+export interface DirectReviewValidationContext {
+    lifecycle: string;
+    terminalOutcome?: DirectReviewV1['terminalOutcome'];
+    process?: {
+        purpose: 'route' | 'implementation' | 'code-review' | 'proof';
+        resumeLifecycle: string;
+        resumeReviewStage: DirectReviewStage | null;
+    };
+}
+export declare function directReviewTargetFingerprint(input: {
+    snapshot: {
+        headSha: string;
+        indexTreeSha: string;
+        trackedContentSha256: string;
+        untrackedContentSha256: string;
+        worktreeIdentity: string;
+    };
+    changedFiles: string[];
+    routeDecisionSha256: string;
+    workflowGenerationHash: string;
+    cycle: number;
+    frozenCriteria: unknown[];
+}): string;
+export declare function prepareDirectReviewInvocation(state: DirectReviewV1, invocation: Omit<ReviewInvocationV1, 'status' | 'pid' | 'processGroupId'>): DirectReviewV1;
+export declare function launchDirectReviewInvocation(state: DirectReviewV1, input: {
+    attemptId: string;
+    pid: number;
+    processGroupId: number;
+}): DirectReviewV1;
+export declare function acceptApprovedDirectReview(state: DirectReviewV1, report: CodeReviewReportV1, artifactSha256: string): DirectReviewV1;
+export declare function acceptNeedsWorkDirectReview(state: DirectReviewV1, report: CodeReviewReportV1, artifactSha256: string): DirectReviewV1;
+export declare function beginDirectReviewRepair(state: DirectReviewV1, findings: DirectRepairFindingV1[]): DirectReviewV1;
+export declare function prepareDirectReviewClosure(state: DirectReviewV1, targetFingerprint: string): {
+    state: DirectReviewV1;
+    closureRequestSha256: string;
+};
+export declare function directReviewClosureRequestSha256(state: DirectReviewV1): string;
+export declare function projectTerminalDirectReview(state: DirectReviewV1, terminalOutcome: NonNullable<DirectReviewV1['terminalOutcome']>): DirectReviewV1;
+export declare function createInitialDirectReview(input: {
+    targetFingerprint: string;
+    codeReviewerSessionId: string;
+}): DirectReviewV1;
+export declare function validateDirectReview(value: unknown, context: DirectReviewValidationContext): DirectReviewV1;
+//# sourceMappingURL=direct-delivery.d.ts.map

package/dist/src/v2/direct-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-delivery.d.ts","sourceRoot":"","sources":["../../../src/v2/direct-delivery.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiD,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,KAAK,UAAU,EAAE,KAAK,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAKjL,MAAM,MAAM,iBAAiB,GACzB,aAAa,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEvD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,eAAe,CAAC;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;IAC9C,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC;IAChC,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACtC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,gBAAgB,EAAE,CAAC,GAAG,CAAC,CAAC;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;CACpD;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;IACxC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,cAAc,EAAE,qBAAqB,EAAE,CAAC;IACxC,eAAe,CAAC,EACZ;QAAE,MAAM,EAAE,SAAS,CAAC;QAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAA;KAAE,GAChE;QAAE,MAAM,EAAE,kBAAkB,GAAG,WAAW,GAAG,gBAAgB,CAAA;KAAE,CAAC;CACrE;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,cAAc,CAAC,iBAAiB,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE;QACR,OAAO,EAAE,OAAO,GAAG,gBAAgB,GAAG,aAAa,GAAG,OAAO,CAAC;QAC9D,eAAe,EAAE,MAAM,CAAC;QACxB,iBAAiB,EAAE,iBAAiB,GAAG,IAAI,CAAC;KAC7C,CAAC;CACH;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,EAAE;QACR,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,EAAE,CAAC;CAC3B,GAAG,MAAM,CAaT;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,cAAc,EACrB,UAAU,EAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,KAAK,GAAG,gBAAgB,CAAC,GACxE,cAAc,CAWhB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAChE,cAAc,CAShB;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,kBAAkB,EAC1B,cAAc,EAAE,MAAM,GACrB,cAAc,CAiChB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,kBAAkB,EAC1B,cAAc,EAAE,MAAM,GACrB,cAAc,CA8BhB;AAqCD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,cAAc,EACrB,QAAQ,EAAE,qBAAqB,EAAE,GAChC,cAAc,CAWhB;AAkBD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,cAAc,EACrB,iBAAiB,EAAE,MAAM,GACxB;IAAE,KAAK,EAAE,cAAc,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAA;CAAE,CAgCzD;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAa9E;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,cAAc,EACrB,eAAe,EAAE,WAAW,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,GAC9D,cAAc,CAIhB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;CAC/B,GAAG,cAAc,CAYjB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,6BAA6B,GAAG,cAAc,CAyC3G"}