kiokuko-dsh 0.2.39 → 0.2.41

package/docs/semantic-compaction.md

@@ -2,7 +2,7 @@
 
 ## Model and reasoning handoff
 
-When a user changes the DSH model or reasoning effort, Kiokuko can shorten eligible older tool results with the selected Jev or Laya decision provider and ask DSH's configured summarizer to create one native checkpoint. The checkpoint replaces older model-visible conversation; the original events remain in the append-only session history. The last two completed model steps, pending input, and latest user message remain verbatim. Automatic Enno/Deep routing and delegated children do not trigger a handoff.
+When a user changes the DSH model or reasoning effort, Kiokuko can shorten eligible older tool results with the selected Jev or Laya decision provider and ask DSH's configured summarizer to create one native checkpoint. The checkpoint replaces older model-visible conversation; the original events remain in the append-only session history. The last two completed model steps, pending input, and latest user message remain verbatim. Automatic Deep routing and delegated children do not trigger a handoff.
 
 ```yaml
 modelHandoff:
@@ -35,7 +35,7 @@ If no complete source line fits that excerpt, the result stays full: no new pack
 
 Failures, unknown success, background execution, Lisp and execution-control results are excluded. Bash additionally requires a captured structured foreground exit status of zero, without interruption or sandbox failure, and an exact match to the logged presentation. `isError: false` alone is insufficient. After reload, Bash results without that live proof remain untouched.
 
-The auxiliary native tool is separate from Enno business operations:
+The auxiliary native tool is separate from business operations:
 
 ```ts
 observation_read({ handle, offset: 2000, limit: 2000 })

package/docs/session-history-repair.md

@@ -41,9 +41,9 @@ hooks do not provide those running services.
 For historical v0 logs, the checker also normalizes Kiokuko's old
 `continuation` / `loop-recovery` message sources and serialized diagnostic
 stacks in supported abort causes. The exact old cancellation text
-`kiokuko dsh Enno continuation stopped: continuation_limit` becomes a
+`kiokuko dsh continuation stopped: continuation_limit` becomes a
 `hook` cause retaining that text; other string causes remain unsupported.
-Native Enno cancellations also use structured `hook` causes for new records.
+Native cancellations also use structured `hook` causes for new records.
 It runs the complete native migration in
 isolation, validates the resulting v3 history, then publishes that new
 generation under DSH's write lease. The original v0 file remains unchanged,

package/docs/skill-compiler.md

@@ -18,9 +18,8 @@ Reload the plugin to change modes. `full` is also the rollback setting. Neither
 mode changes native permissions, tool schemas, task selection or the original
 user message. The ordinary Skill catalog is not a claim that every listed Skill
 was loaded. SOUL is automatic; Japanese guidance follows the routed model family;
-Lisp guidance follows explicit enable; Enno contracts follow the current role and
-selected experts; ordinary additional Skills remain available through the native
-Skill tool. Complete supplied runtime guidance needs no full-file reread.
+Lisp guidance follows explicit enable; ordinary additional Skills remain
+available through the native Skill tool. Complete supplied runtime guidance needs no full-file reread.
 
 ## One source, two representations
 
@@ -77,7 +76,6 @@ it never installs into the user's live profile.
 | --- | --- |
 | SOUL, native/explicit/prompt-only entrypoints | Compiled body in adapter-observed request |
 | All nine native Skill lookups | Native tool execution, result rendering, next request |
-| Enno role Skills and selected expert | Real admitted role transitions, retry and persisted resume |
 | Deep Japanese guidance | Every worker's request and budget accounting |
 | Lisp enable and lisp_describe | Real protected SBCL, six-tool surface, next request body |
 | DeepSeek wire serializer | Actual provider serializer; fetch boundary captured before network |

package/docs/tool-exposure.md

@@ -2,7 +2,7 @@
 
 On hosts where the executor supplies schemas after the prompt waterfall, Kiokuko preserves the provider's admitted tools and reports `unsupported_runtime` for presentation reduction. `phase`, `lean`, and `auto` do not claim tool or description savings on that API. Native permissions, task guards, and scoped protocol tools remain authoritative; no older runtime is selected.
 
-`toolExposure.mode` controls only which Kiokuko-owned definitions appear in native model requests. The default is `auto`. On all DSH native provider connections, normal chat, research, analysis, writing and review omit the nine Kiokuko model tools. Normal build, debug and devops use lean descriptions with the current phase and `nextAction` policy. An active Enno selection takes precedence over task type and uses that same policy. Native and external tools remain available. Configure explicitly with:
+`toolExposure.mode` controls only which Kiokuko-owned definitions appear in native model requests. The default is `auto`. On all DSH native provider connections, normal chat, research, analysis, writing and review omit the Kiokuko model tools entirely. Normal build, debug and devops requests use full definitions without lean descriptions. Native and external tools remain available. Configure explicitly with:
 
 ```yaml
 config:

package/docs/typed-decisions.md

@@ -1,7 +1,7 @@
 # Typed AI decisions
 
 Kiokuko uses one host-owned decision service for provisional Akinator task types,
-installed Skill relevance, past memory reuse, Zenki draft review, [post-display answer review](answer-review.md), and semantic decisions inside Lisp.
+installed Skill relevance, past memory reuse, [post-display answer review](answer-review.md), and semantic decisions inside Lisp.
 The selected adapter owns its transport protocol and uncertainty policy. Domain
 workflows consume `selected` or `abstained`; they do not depend on model names.
 
@@ -286,14 +286,6 @@ missing configuration, uncertainty and service failures use the existing workflo
 fallback. Identity, revision, permission and integrity failures never authorize
 fallback execution.
 
-Zenki calls `enno_plan_review` with the complete candidate. All atomic checks must
-be answered; otherwise the exact persisted `roles.check` model reviews the full
-candidate in a no-tool stream. Both paths share a 30-second review budget. All
-three contribution slots need dispositions. `enno_plan_submit` accepts only the
-identical reviewed candidate with the same catalog and revisions. A changed draft
-requires review again. If neither reviewer completes, the draft remains
-unsubmitted. Existing confirmation and Goki lease checks still apply. Already
-accepted plans continue normally; old pre-draft advice cannot satisfy review.
 
 In Lisp:
 

package/docs/verification.md

@@ -17,14 +17,21 @@ fixtures remain `prerequisite-missing` for checks that require them.
 
 CI schedules **Linux x64** and **macOS ARM64**. Full selection has 21 jobs:
 selection, two native micro-judge builds, 17 verification lanes and the aggregate.
+Every CI run resolves the latest official DSH `master` before selecting coverage.
+That SHA is an independent input to the plan and its digest: repository-only
+diffs, including prose-only changes, cannot reduce GitHub compatibility coverage.
+All lanes build that run's resolved SHA; the next run resolves upstream again.
+Resolution failure fails the run rather than falling back to a locked fixture.
+A daily GitHub run at 03:17 UTC also checks upstream-only changes. Depot keeps its
+Linux-only coverage, but likewise resolves latest DSH and never skips it for prose.
 Linux ARM64 is not scheduled or claimed as CI coverage. Its runtime/build support
 remains in the native target registry; this workflow does not produce its binary.
 
 The required `verify` aggregate consumes `select`, `micro-judge-native` and `checks`.
 Every selected lane and native artifact must be present, successful, fresh and
 bound to the same selected plan and source. Failure, cancellation, a missing
-selected report, an extra target or an altered artifact fails acceptance. Only
-prose-only selection can legitimately skip both executable job groups. The
+selected report, an extra target or an altered artifact fails acceptance. Local
+diff-only plans without an upstream input may skip prose-only work; CI may not. The
 remaining Linux x64/macOS ARM64 check inventories and their deadlines are unchanged.
 The CI review bundle contains exactly its selected targets; standalone native
 bundle verification still requires the complete supported-target inventory.
@@ -82,7 +89,6 @@ arbitrary stdout or a successful no-op process is insufficient.
 | skill-delivery | main, lisp | `node scripts/run-skill-delivery.mjs` | explicit completion receipt |
 | consumer-npm | main, runtime | `node scripts/verify-agenticreplay-consumer.mjs` | explicit completion receipt |
 | consumer-pnpm | main, runtime | `node scripts/verify-agenticreplay-consumer.mjs --pnpm` | explicit completion receipt |
-| dsh-lifecycle | main, runtime | `node scripts/run-enno-dsh-e2e.mjs` | explicit completion receipt |
 | sqlite-vec | main, semantic | `npm run test:sqlite-vec` | explicit completion receipt |
 | code-provider | code-provider | `node scripts/run-ci-native.mjs code-provider` | Explicit selected native fixture; nonempty official lifecycle without skipped required cases. |
 | p0 | p0 | `node scripts/run-ci-native.mjs p0` | Explicit selected native fixture; nonempty official lifecycle without skipped required cases. |
@@ -112,10 +118,6 @@ Node/ABI or native dependency is reused across platforms.
 Import-only convenience entrypoints remain usable explicitly. Recursive discovery
 excludes these aliases and executes each declared leaf exactly once:
 
-- `tests/dsh/integration/capability.test.ts`: `tests/dsh/integration/akinator-gate.test.ts`, `tests/dsh/integration/pre-step/gate.test.ts`, `tests/dsh/unit/capability-catalog.test.ts`.
-- `tests/dsh/integration/close-resume.test.ts`: `tests/dsh/integration/run-close.test.ts`, `tests/dsh/integration/run-resume.test.ts`, `tests/dsh/integration/run-resume/exact-route.test.ts`.
-- `tests/dsh/integration/enno-turn-stopping.test.ts`: `tests/dsh/integration/turn-stopping-gate.test.ts`, `tests/dsh/integration/enno-role-loop.test.ts`.
-- `tests/dsh/integration/provider.test.ts`: `tests/dsh/integration/skill-provider.test.ts`.
 
 ## Explicit optional lanes
 
@@ -143,3 +145,5 @@ Native Lisp integration requires `protected-python3`: a real sandbox subprocess
 probe. An Apple launcher that only reports its version outside the sandbox does
 not satisfy this capability. Local/CI environment preparation must select a real
 installed Python interpreter; the repository never changes the global PATH.
+
+`full` runs unit/integration/e2e through the existing CI ownership split when the protected Lisp lane is required. Lisp and explicitly owned package/Skill cases run in their dedicated checks once. Standalone `main` remains complete. The import-only aliases and manual duplicate suite launchers have been removed; use the canonical check plan.

package/dsh/cordis.legacy.patch.yml

@@ -0,0 +1,7 @@
+# Apply after the Kiokuko bundle only when validating the original plugin mode.
+- id: kiokuko-harness
+  disabled: true
+- id: agent-loop
+  disabled: false
+- id: kiokuko-dsh
+  inject: [skills, systemPrompt, tools, commands, userQuestions, sessions, sessionQuery, sessionPersistence, llm, agents, attachments, subagents, subprocess]

package/dsh/cordis.patch.yml

@@ -3,6 +3,8 @@
 # the stock row automatically.
 - id: session-log-download
   disabled: true
+- id: agent-loop
+  disabled: true
 - insert:
     # Saved model providers must survive a failure of the execution plugin.
     - id: kiokuko-models
@@ -10,7 +12,7 @@
       inject: [llm, commands]
     - id: kiokuko-dsh
       name: 'kiokuko-dsh'
-      inject: [skills, systemPrompt, tools, commands, userQuestions, sessions, sessionQuery, sessionPersistence, llm, agents, attachments, subagents, subprocess]
+      inject: [kiokukoHarness, skills, systemPrompt, tools, commands, userQuestions, sessions, sessionQuery, sessionPersistence, llm, agents, attachments, subagents, subprocess]
       config:
         enabled: true
         agenticReplay:
@@ -21,3 +23,6 @@
           capture:
             content: redacted
             reasoning: false
+    - id: kiokuko-harness
+      name: 'kiokuko-dsh/harness'
+      inject: [agents, sessions, llm, systemPrompt, tools, sessionProjections, sessionPersistence]

package/lisp/supervisor.mjs

@@ -38,12 +38,15 @@ const finish = () => {
   if (!terminal) return
   if (launch.namespaceInfo) {
     if (!namespace) return // Missing ownership evidence never confirms Stop.
-    try {
-      if (sameProcess(namespace.pid, namespace.identity)) {
-        finishTimer ??= setTimeout(() => { finishTimer = undefined; finish() }, 10)
-        return
-      }
-    } catch { unconfirmed('cannot confirm sandbox child termination'); return }
+    let stopped = false
+    try { stopped = !sameProcess(namespace.pid, namespace.identity) }
+    catch (error) { unconfirmed(`cannot confirm sandbox child termination (${error.code ?? 'UNKNOWN'})`) }
+    // Observation can race /proc teardown. Keep ownership until a later positive
+    // confirmation; one failed lookup must not disable the existing polling.
+    if (!stopped) {
+      finishTimer ??= setTimeout(() => { finishTimer = undefined; finish() }, 10)
+      return
+    }
   }
   clearTimeout(finishTimer)
   clearInterval(namespaceLifetime)
@@ -109,7 +112,13 @@ if (launch.namespaceInfo) {
       // The channel is private to bwrap and closed before guest execution.
       // Check kernel parentage while its monitor is alive, then retain the
       // birth fingerprint so a later orphan or PID reuse cannot change scope.
-      if (sameProcess(pid, identity) && (!identity || parentPid(pid) !== child.pid)) throw new Error('not an owned child')
+      if (sameProcess(pid, identity)) {
+        if (!identity) throw new Error('identity unavailable')
+        try { if (parentPid(pid) !== child.pid) throw new Error('not an owned child') }
+        catch (error) {
+          if (!['ENOENT', 'ESRCH'].includes(error.code) || sameProcess(pid, identity)) throw error
+        }
+      }
       namespace = { pid, identity }
       // A dead bwrap monitor cannot donate a still-live namespace runtime.
       reportRuntime(pid)

package/lisp/tools.lisp

@@ -322,7 +322,7 @@ CHOICES contains 1-8 (restart-name description) pairs. No expression replay or a
         (unless (member restart (compute-restarts condition)) (error "RECOVERY_STALE"))
         (invoke-restart restart)))))
 (in-package :kioku.environment)
-(defun status () (kioku.internal:object "generation" kioku.internal:*generation* "sbcl" (lisp-implementation-version) "os" (software-type) "architecture" (machine-type) "scratch" (namestring (kioku.files:scratch)) "executionMode" (or (uiop:getenv "KIOKU_EXECUTION_MODE") "protected") "network" (if (equal (uiop:getenv "KIOKU_EXECUTION_MODE") "development") "normal user environment" yason:false) "hostWrites" (if (equal (uiop:getenv "KIOKU_EXECUTION_MODE") "development") "owned tools and direct Lisp; only host receipts prove observed effects" "proposals only") "libraries" #("yason" "cl-ppcre" "cl-csv")))
+(defun status () (kioku.internal:object "generation" kioku.internal:*generation* "sbcl" (lisp-implementation-version) "os" (software-type) "architecture" (machine-type) "scratch" (namestring (kioku.files:scratch)) "executionMode" (or (uiop:getenv "KIOKU_EXECUTION_MODE") "protected") "network" yason:false "hostWrites" (if (equal (uiop:getenv "KIOKU_EXECUTION_MODE") "development") "host tools and proposals; operation permissions apply" "proposals only") "libraries" #("yason" "cl-ppcre" "cl-csv")))
 (in-package :kioku.tools)
 (defun available-tools () (kioku.internal:rpc "tools-list" (kioku.internal:object)))
 (defun call-tool (name &optional (arguments (kioku.internal:object)))

package/migrations/051_drop_enno.sql

@@ -0,0 +1,19 @@
+-- 051_drop_enno.sql
+-- The Enno (役小角 / enno-oduno) orchestration feature was removed from the
+-- codebase. Its durable tables are dropped here, children first, so existing
+-- databases stay valid and openable after this forward-only migration.
+-- Shared DSH machinery (ledger_runs, dsh_turn_receipts, dsh_boundary_jobs,
+-- dsh_continuation_outbox, dsh_loop_guard_*) is deliberately retained.
+
+DROP TABLE IF EXISTS enno_advisory_contributions;
+DROP TABLE IF EXISTS enno_advisory_rounds;
+DROP TABLE IF EXISTS enno_execution_leases;
+DROP TABLE IF EXISTS enno_resume_tokens;
+DROP TABLE IF EXISTS enno_dsh_continuations;
+DROP TABLE IF EXISTS enno_operation_receipts;
+DROP TABLE IF EXISTS enno_verifier_runs;
+DROP TABLE IF EXISTS enno_work_units;
+DROP TABLE IF EXISTS enno_plan_drafts;
+DROP TABLE IF EXISTS dsh_enno_delegations;
+DROP TABLE IF EXISTS dsh_enno_memory_refresh;
+DROP TABLE IF EXISTS enno_contracts;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kiokuko-dsh",
-  "version": "0.2.39",
+  "version": "0.2.41",
   "description": "Kiokuko plugin for DeepSeek Harness",
   "type": "module",
   "license": "MIT",
@@ -22,7 +22,7 @@
     "dist/",
     "migrations/",
     "skills/",
-    "dsh/cordis.patch.yml",
+    "dsh/",
     "docs/",
     "scripts/prepare-build.mjs",
     "scripts/backfill-akinator-memory.mjs",
@@ -70,9 +70,9 @@
       "types": "./dist/dsh/core/index.d.ts",
       "default": "./dist/dsh/core/index.js"
     },
-    "./modules/enno": {
-      "types": "./dist/dsh/modules/enno.d.ts",
-      "default": "./dist/dsh/modules/enno.js"
+    "./harness": {
+      "types": "./dist/dsh/harness/index.d.ts",
+      "default": "./dist/dsh/harness/index.js"
     },
     "./modules/lisp": {
       "types": "./dist/dsh/modules/lisp.d.ts",
@@ -187,14 +187,12 @@
     "test:evaluation:memory-reuse": "node --import tsx scripts/run-memory-reuse-evaluation.mjs",
     "probe:lisp:p0": "node --import tsx scripts/probe-lisp-p0.ts",
     "test:integration": "node scripts/run-tests.mjs tests/dsh/integration",
-    "test:memory:admission": "node scripts/run-tests.mjs tests/dsh/integration/memory-application.test.ts tests/dsh/integration/on-demand-native.test.ts tests/dsh/unit/on-demand-review-regressions.test.ts",
     "test:integration:tool-exposure": "node scripts/run-tests.mjs tests/dsh/integration/tool-exposure-native.test.ts",
     "test:sqlite-vec": "node --import tsx tests/ci/sqlite-vec-package-smoke.ts",
     "test:evaluation": "npm run build && node scripts/run-retrieval-evaluation.mjs",
     "test:benchmark": "npm run build && node scripts/run-retrieval-benchmark.mjs",
     "test:benchmark:dsh-log": "npm run build && node scripts/run-dsh-million-event-benchmark.mjs",
     "test:efficiency": "node --import tsx scripts/run-token-efficiency-evaluation.mjs",
-    "test:e2e:dsh": "npm run build && node scripts/run-enno-dsh-e2e.mjs",
     "test:cli-profile": "node scripts/verify-cli-profile.mjs",
     "verify:prepare": "node scripts/verify-prepare-reproducibility.mjs",
     "sampledb:generate": "node --import tsx tests/fixtures/sample-database.ts tests/sampledb/kiokuko-dsh.sqlite3",
@@ -214,9 +212,6 @@
     "test:benchmark:akinator": "npm run build && node scripts/run-akinator-memory-benchmark.mjs",
     "test:continuity": "node scripts/run-tests.mjs tests/dsh/unit/continuity tests/dsh/integration/continuity",
     "test:evaluation:continuity": "node --import tsx scripts/run-continuity-evaluation.mjs",
-    "test:enno-memory": "node scripts/run-tests.mjs tests/dsh/unit/enno-memory tests/dsh/integration/enno-memory",
-    "test:benchmark:enno-memory": "node --import tsx scripts/run-enno-memory-benchmark.ts",
-    "test:evaluation:enno-memory": "node scripts/run-enno-memory-evaluation.mjs",
     "verify:lisp:vendor": "node scripts/verify-lisp-vendor.mjs",
     "test:packages:live": "KIOKUKO_REQUIRE_LISP_RUNTIME=1 KIOKUKO_PACKAGE_LIVE=1 node scripts/run-tests.mjs tests/dsh/integration/lisp/packages-live.test.ts",
     "test:packages": "KIOKUKO_REQUIRE_LISP_RUNTIME=1 node scripts/run-tests.mjs tests/dsh/unit/lisp/packages.test.ts tests/dsh/integration/lisp/packages-runtime.test.ts tests/dsh/integration/lisp/packages-update.test.ts",
@@ -251,13 +246,9 @@
     "test:ci:e2e": "node scripts/run-ci-native.mjs e2e",
     "test:ci:metadata": "npm run publint",
     "test:ci:e2e:core": "node scripts/run-ci-native.mjs e2e-core",
-    "test:ci:e2e:agent": "node scripts/run-ci-native.mjs e2e-agent",
     "test:ci:e2e:repeated": "node scripts/run-ci-native.mjs e2e-repeated",
     "test:ci:repeated:deep": "node scripts/run-ci-native.mjs e2e-repeated-deep",
     "test:ci:repeated:normal": "node scripts/run-ci-native.mjs e2e-repeated-normal",
-    "test:ci:repeated:enno": "node scripts/run-ci-native.mjs e2e-repeated-enno",
-    "test:ci:repeated:enno:prefix": "node scripts/run-ci-native.mjs e2e-repeated-enno-prefix",
-    "test:ci:repeated:enno:bounded": "node scripts/run-ci-native.mjs e2e-repeated-enno-bounded",
     "test:ci:lisp": "node scripts/run-ci-native.mjs lisp",
     "test:ci:prepare": "npm run verify:prepare",
     "test:ci:embedding": "node scripts/run-local-embedding-smoke.mjs --offline",

package/scripts/session-history-codec.mjs

@@ -156,7 +156,7 @@ function repairLegacyAbortRecord(value) {
   const record = objectRecord(value), data = objectRecord(record?.data)
   const reason = objectRecord(data?.reason)
   if (record?.type !== 'turn/end' || reason?.kind !== 'aborted') return value
-  if (reason.reason === 'kiokuko dsh Enno continuation stopped: continuation_limit') {
+  if (reason.reason === 'kiokuko dsh continuation stopped: continuation_limit') {
     return { ...record, data: { ...data, reason: { ...reason, reason: { kind: 'hook', reason: reason.reason } } } }
   }
   const cause = objectRecord(reason.reason)

package/skills/coding-ideal-routine-skill/SKILL.md

@@ -45,7 +45,7 @@ description: コードを書く、変更するすべての依頼で使用する
 
 ## 2. 部品ではなく、つながった利用経路を見る
 
-DSH の実装タスクで明示的な coding workflow を使う場合は、初回の変更前に `coding_workflow status` を読む。`applicable:false` は通常チャットに workflow がないという観測であり、エラーや通常操作の禁止ではない。準備済みのタスクでは、`propose` で Goal・依存関係付きの全項目・各項目の観測可能な条件・別の最終 Goal 条件を原子的に登録する。先に必要な読取調査を行ってよい。元依頼の権限と対象を広げない。Enno では既存 ideal・plan を提出し、その共通表示を使う。別の Goal を提案しない。
+DSH の実装タスクで明示的な coding workflow を使う場合は、初回の変更前に `coding_workflow status` を読む。`applicable:false` は通常チャットに workflow がないという観測であり、エラーや通常操作の禁止ではない。準備済みのタスクでは、`propose` で Goal・依存関係付きの全項目・各項目の観測可能な条件・別の最終 Goal 条件を原子的に登録する。先に必要な読取調査を行ってよい。元依頼の権限と対象を広げない。既に登録された Goal と検証条件があれば再利用する。
 
 通常 native 実装依頼ではモデル要求前に Lisp を提案し、ON 済みならその経路を使う。Goal 準備は同じ依頼の人間の回答を再利用する。全ての goal.criterionIds を、実装を担当する少なくとも1つの items[].goalCriterionIds に対応付ける。未対応 ID の診断では該当 item を自分で選んで修正し、最終条件を消したり対応を捏造しない。
 

package/skills/kiokuko-lisp/SKILL.md

@@ -14,11 +14,11 @@ Coding: coding_workflow defines Goal/items/checks before the task Lisp choice. P
 
 
 
-Persistent: coding choice or /kioku-lisp enable. Task: /kioku-lisp enable-task, fresh workers per call. ON selects Lisp computation/orchestration; direct Bash/zsh/PowerShell is rejected, even reads. Run Git/gh/builds/tests through kioku.process:run / start-job. Read/search/Skill and owned file tools remain available. Failure requires recovery or explicit /kioku-lisp disable; no silent shell fallback. Never spoof host-bound session/agent/directory/generation.
+Persistent: coding choice or /kioku-lisp enable. /kioku-lisp enable-task optionally selects disposable scratch evaluations. lisp_define, lisp_call and lisp_observe need no task-mode switch or Working task. Compose functions by exact dependency refs; reuse only your own protected worker, otherwise compute in private protected scratch with no repository mount or host RPC. Schemas never prove arbitrary Lisp safe. A child inherits only capabilities visible in its native scope, not the parent's task lease, heap, or result refs. Shared publication and real effects retain their approval and authority checks. ON selects Lisp computation/orchestration; direct Bash/zsh/PowerShell is rejected, even reads. Run Git/gh/builds/tests through kioku.process:run / start-job. Read/search/Skill and owned file tools remain available. Failure requires recovery or explicit /kioku-lisp disable; no silent shell fallback. Never spoof host-bound session/agent/directory/generation.
 
 Owned kioku_read/write/edit/remove/exec/result retain development receipts. Ordinary commands, investigation, builds/tests, edits and disposable artifacts need no routine confirmation. Source/data deletion and durable user DB mutation require concrete review; declare destructiveTargets. Arbitrary code effects are not exhaustively classified. Organize memory only after completion and permission; save only the exact approved content.
 
-Foreground kioku.process:run retains native Bash sandbox/approval/Stop without a memory task/Goal. Protected coding requires prototype/result inspection. Admitted workflows, owned tools and async jobs keep task/protocol authority. Use kioku.tools:call-tool/broker receipts; direct Lisp/FFI or generated passed fields prove no verification. Bind task_completion conditions/source paths before checks; collect async receipts with kioku_result. Cancellation/ownership remain authoritative. Plan permits read/search/status until human approval exits at the next boundary.
+Foreground kioku.process:run retains native Bash sandbox/approval/Stop without a memory task/Goal. Protected coding requires prototype/result inspection. Admitted workflows, owned tools and async jobs keep task/protocol authority. Use kioku.tools:call-tool/broker receipts. All workers are OS-isolated; direct Lisp/FFI cannot access workspace files or inherited credentials. Generated passed fields prove no verification. Bind task_completion conditions/source paths before checks; collect async receipts with kioku_result. Cancellation/ownership remain authoritative. Plan permits read/search/status until human approval exits at the next boundary.
 
 Schemas define arguments; never guess. `lisp_describe` without a symbol gives the
 API/verifier map, even during recovery. Persistent `lisp_eval`: declared inputs;
@@ -86,9 +86,15 @@ approval never authorizes writes; only host changes receipts establish APPLIED/U
 
 ## Evidence, recovery and adapters
 
-Idle suspension: five minutes/slot pressure, never during turns/evaluations/approvals/jobs.
-Use auto-starts, status does not. WORKER_RESUMED ran no code: rebuild state, never
-effects. Abnormal stops require recovery.
+Workers persist by default; configured idle suspension never interrupts turns/evaluations/approvals/jobs.
+Routed children keep separate persistent heaps/scratch; reuse definitions per generation.
+Return results via native delivery; never borrow parent authority or foreign refs.
+Failed startup blocks admission; disposal stops only that child. Effects retain session
+permissions/tool restrictions. The host owns startup, capacity and exit. With settled
+journals, clean restart/idle exit auto-starts on next admission, never status; no manual
+recovery prompt. Fault replacements: 2/owner/minute. WORKER_RESUMED ran no code:
+rebuild state, never effects. Cancellation, unknown effects, unconfirmed stop or restart
+limit require inspection/recovery.
 Results: 16 KiB, no source echoes/duplicates. Page journaled evidence, never rerun/fetch
 all history. Fix missing paths with native reads; input errors need no recovery. Report
 observed errors/recovery; missing results never prove deletion/restoration.

package/skills/kiokuko-single-purpose-functions/SKILL.md

@@ -50,7 +50,7 @@ to check the complete workflow. An isolated edit needs no additional audit.
 
 For each new or materially changed function, or for the smallest WorkUnit owning one cohesive use case: classify the dominant risk, select one expert below, add at most two more only when the same contract genuinely crosses those risks, record a concrete reason for each, and read the selected files before implementation or review. A different expert set or reason to change means a separate WorkUnit or a separate function contract inside it.
 
-Enno-Oduno plans bind `expertRefs` to the WorkUnit revision: a `code` route requires at least one `code.*`, a `ui` route requires `code.*` and `ui.*`, and `test`, `docs`, and `operations` routes inherit neither. Outside Enno-Oduno, keep the same mapping in the working plan or review notes:
+Code changes select `code.*` expertise; interactive UI changes also select `ui.*`. Tests, documentation and operations select expertise for their actual risks. Keep the mapping in the working plan or review notes:
 
 ```text
 target -> responsibility -> expert IDs -> focused verifier

package/skills/kiokuko-ui-design-soul/SKILL.md

@@ -39,9 +39,9 @@ When requirements compete, prioritize safety and data preservation, accessibilit
 
 ## Expert selection
 
-Select one dominant expert for each UI component or cohesive flow, add at most two more only when the same WorkUnit genuinely crosses those risks, and record a concrete reason for each. On an Enno-Oduno `ui` route the WorkUnit also carries `code.*` expertise, because UI behavior is code behavior; sibling `test`, `docs`, and `operations` units inherit neither.
+Select one dominant expert for each UI component or cohesive flow, add at most two more only when the same WorkUnit genuinely crosses those risks, and record a concrete reason for each. Interactive UI changes also select `code.*` expertise. Tests, documentation and operations select expertise for their actual risks.
 
-Do not read every UI reference “for completeness.” If implementation exposes a new risk, return the WorkUnit for an explicit selection or update the non-Enno working plan before reading the additional fragment.
+Do not read every UI reference “for completeness.” If implementation exposes a new risk, update the working plan and expert selection before reading the additional fragment.
 
 ## Expert index
 

package/skills/one-shot-software-completion/SKILL.md

@@ -81,13 +81,10 @@ invalidated by review edits; repeating a checklist proves nothing.
 In Kiokuko, enter through `kiokuko-soul`; also apply
 `kiokuko-single-purpose-functions` for code and the applicable UI/workflow Skills.
 Reuse their contract, plan and evidence rather than generating duplicate plans
-or checklists. In DSH, the host owns intake, model routing, delegation and
-continuation. Respect the current role/WorkUnit scope; this Skill neither creates
-an Enno run nor authorizes extra agents, retries, publication or deployment.
-
-Assign Frame/Trace/Bound/Implement/Verify/Finish to the admitted role: Zenki
-plans, Goki implements/verifies its WorkUnit, Enno accepts the run. A WorkUnit
-report is not final acceptance. Normal work adds no orchestration approval.
+or checklists. In DSH, Kiokuko owns the model/tool loop and preserves native
+session and tool contracts. Complete the observable request within the user's
+scope and permissions. This Skill does not authorize extra agents, retries,
+publication or deployment. Passing an intermediate check is not final acceptance.
 
 For admitted Lisp, follow its Skill, with prototype-driven-planning for
 coding/plans: native reads, scratch → proposals → host confirmation → durable

package/skills/one-shot-software-completion/references/boundaries-and-lifecycle.md

@@ -57,11 +57,9 @@ rollout/restart ordering when old and new versions can coexist.
 
 ## Admitted execution paths
 
-Frame/Trace/Bound/Implement/Verify/Finish are responsibilities assigned to the
-current role. Zenki plans; Goki implements and verifies only its approved
-WorkUnit; Enno owns final acceptance. A WorkUnit report is not run completion.
-Normal execution completes the observable request with the available native
-permissions; it adds no orchestration approval.
+Trace the request through Kiokuko's model/tool loop to the observable result.
+Native permissions apply at each operation. Intermediate reports and passing
+checks do not establish completion of the whole request.
 
 When the host admits protected Lisp, use its Skill and current state: native
 read/glob/grep/skill remain subject to existing permissions; workspace mutation

package/dist/dsh/advisory-runner.d.ts

@@ -1,32 +0,0 @@
-import { type AdvisoryContext, type AdvisoryContribution, type AdvisoryFanoutDirective, type AdvisoryPhase, type AdvisorySlotId } from '../enno-oduno/types.js';
-export interface DshAdvisoryCall {
-    readonly phase: AdvisoryPhase;
-    readonly slotId: AdvisorySlotId;
-    readonly rank: number;
-    readonly role: string;
-    readonly instructions: string;
-    readonly context: AdvisoryContext;
-    readonly tools: readonly [];
-    readonly signal: AbortSignal;
-}
-export interface DshAdvisoryRunnerDependencies {
-    readonly execute: (call: DshAdvisoryCall) => Promise<unknown>;
-    readonly verifyReadOnly: (call: DshAdvisoryCall) => boolean | PromiseLike<boolean>;
-    readonly timeoutMs?: number;
-}
-export interface DshAdvisoryRoundResult {
-    readonly phase: AdvisoryPhase;
-    readonly inputDigest: string;
-    readonly contributions: readonly AdvisoryContribution[];
-    readonly degraded: boolean;
-}
-/** Execute exactly the current phase's fixed three slots with no advisor authority. */
-export declare class DshAdvisoryRunner {
-    #private;
-    constructor(dependencies: DshAdvisoryRunnerDependencies);
-    run(input: {
-        readonly directive: AdvisoryFanoutDirective;
-        readonly signal?: AbortSignal;
-    }): Promise<DshAdvisoryRoundResult>;
-}
-//# sourceMappingURL=advisory-runner.d.ts.map

package/dist/dsh/advisory-runner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"advisory-runner.d.ts","sourceRoot":"","sources":["../../src/dsh/advisory-runner.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAA;AAE/B,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC7B;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7D,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IAClF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACvD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC3B;AAmFD,uFAAuF;AACvF,qBAAa,iBAAiB;;gBAGhB,YAAY,EAAE,6BAA6B;IAMjD,GAAG,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAA;QAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAC9B,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAuBpC"}

package/dist/dsh/advisory-runner.js

@@ -1,116 +0,0 @@
-import { canonicalJson, canonicalContentHash } from '../serialization/validate.js';
-import { findSecretInValue } from '../memory/secrets.js';
-import { advisorySlotDefinitions, normalizeAdvisoryContributions, advisoryRoundAggregate } from '../enno-oduno/advisory.js';
-import { advisoryContributionSchemaPublic } from '../enno-oduno/schemas.js';
-import { ADVISORY_MAX_ROUND_BYTES, ADVISORY_MAX_SLOT_BYTES, } from '../enno-oduno/types.js';
-function failure(slotId, reasonCode) {
-    return { slotId, outcome: reasonCode === 'host_timeout' ? 'timeout' : reasonCode === 'host_read_only_unavailable' ? 'unavailable' : 'failed', reasonCode };
-}
-function boundedOutput(slotId, value) {
-    if (findSecretInValue(value) !== undefined)
-        return failure(slotId, 'unsafe_output');
-    if (Buffer.byteLength(canonicalJson(value), 'utf8') > ADVISORY_MAX_SLOT_BYTES)
-        return failure(slotId, 'invalid_response');
-    const parsed = advisoryContributionSchemaPublic.safeParse(value);
-    return parsed.success && parsed.data.slotId === slotId ? parsed.data : failure(slotId, 'invalid_response');
-}
-function linkAbort(parent, child) {
-    if (parent.aborted)
-        child.abort(parent.reason);
-    const abort = () => child.abort(parent.reason);
-    parent.addEventListener('abort', abort, { once: true });
-    return () => parent.removeEventListener('abort', abort);
-}
-async function runSlot(directive, slot, context, dependencies, parentSignal) {
-    const controller = new AbortController();
-    const unlink = linkAbort(parentSignal, controller);
-    const call = {
-        phase: directive.phase,
-        slotId: slot.slotId,
-        rank: slot.rank,
-        role: slot.role,
-        instructions: slot.instructions,
-        context,
-        tools: [],
-        signal: controller.signal,
-    };
-    try {
-        try {
-            if (!(await dependencies.verifyReadOnly(call)))
-                return failure(slot.slotId, 'host_read_only_unavailable');
-        }
-        catch {
-            return failure(slot.slotId, 'host_execution_failed');
-        }
-        if (parentSignal.aborted)
-            return failure(slot.slotId, 'host_execution_failed');
-        const timeoutMs = dependencies.timeoutMs ?? 30_000;
-        let timer;
-        const timeout = new Promise((_, reject) => {
-            timer = setTimeout(() => {
-                controller.abort(new Error('advisory timeout'));
-                reject(new Error('advisory timeout'));
-            }, timeoutMs);
-        });
-        let unlinkParentAbort;
-        const aborted = new Promise((_, reject) => {
-            if (parentSignal.aborted)
-                reject(new Error('advisory aborted'));
-            else {
-                const onAbort = () => reject(new Error('advisory aborted'));
-                parentSignal.addEventListener('abort', onAbort, { once: true });
-                unlinkParentAbort = () => parentSignal.removeEventListener('abort', onAbort);
-            }
-        });
-        try {
-            const output = await Promise.race([dependencies.execute(call), timeout, aborted]);
-            try {
-                return boundedOutput(slot.slotId, output);
-            }
-            catch {
-                return failure(slot.slotId, 'invalid_response');
-            }
-        }
-        catch (error) {
-            return error instanceof Error && error.message === 'advisory timeout'
-                ? failure(slot.slotId, 'host_timeout')
-                : failure(slot.slotId, 'host_execution_failed');
-        }
-        finally {
-            if (timer !== undefined)
-                clearTimeout(timer);
-            unlinkParentAbort?.();
-        }
-    }
-    finally {
-        unlink();
-    }
-}
-/** Execute exactly the current phase's fixed three slots with no advisor authority. */
-export class DshAdvisoryRunner {
-    #dependencies;
-    constructor(dependencies) {
-        this.#dependencies = dependencies;
-        const timeoutMs = dependencies.timeoutMs ?? 30_000;
-        if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 120_000)
-            throw new Error('advisory timeoutMs must be between 1 and 120000');
-    }
-    async run(input) {
-        const expected = advisorySlotDefinitions(input.directive.phase);
-        if (input.directive.slots.length !== expected.length || input.directive.slots.some((slot, index) => (slot.slotId !== expected[index]?.slotId || slot.rank !== expected[index]?.rank || slot.role !== expected[index]?.role)))
-            throw new Error('Advisory directive slots do not match the fixed core slot set');
-        const signal = input.signal ?? new AbortController().signal;
-        const contributions = await Promise.all(input.directive.slots.map((slot) => runSlot(input.directive, slot, input.directive.context, this.#dependencies, signal)));
-        const normalized = normalizeAdvisoryContributions(input.directive.phase, contributions);
-        if (Buffer.byteLength(canonicalJson(normalized), 'utf8') > ADVISORY_MAX_ROUND_BYTES)
-            throw new Error('Advisory round exceeds the safety limit');
-        const aggregate = advisoryRoundAggregate(normalized);
-        return Object.freeze({
-            phase: input.directive.phase,
-            inputDigest: canonicalContentHash({ phase: input.directive.phase, slots: expected, context: input.directive.context }),
-            contributions: Object.freeze(aggregate.contributions),
-            degraded: aggregate.degraded,
-        });
-    }
-}
-//# sourceMappingURL=advisory-runner.js.map

package/dist/dsh/advisory-runner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"advisory-runner.js","sourceRoot":"","sources":["../../src/dsh/advisory-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAC3H,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GAMxB,MAAM,wBAAwB,CAAA;AA0B/B,SAAS,OAAO,CAAC,MAAsB,EAAE,UAA0H;IACjK,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,KAAK,4BAA4B,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAA;AAC5J,CAAC;AAED,SAAS,aAAa,CAAC,MAAsB,EAAE,KAAc;IAC3D,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACnF,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,GAAG,uBAAuB;QAAE,OAAO,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IACzH,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAChE,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;AACpI,CAAC;AAED,SAAS,SAAS,CAAC,MAAmB,EAAE,KAAsB;IAC5D,IAAI,MAAM,CAAC,OAAO;QAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC9C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACvD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;AACzD,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,SAAkC,EAClC,IAA8C,EAC9C,OAAwB,EACxB,YAA2C,EAC3C,YAAyB;IAEzB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IAClD,MAAM,IAAI,GAAoB;QAC5B,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO;QACP,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAA;IACD,IAAI,CAAC;QACH,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAA;QAC3G,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,YAAY,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;QAC9E,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,IAAI,MAAM,CAAA;QAClD,IAAI,KAAgD,CAAA;QACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtB,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA;gBAC/C,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA;YACvC,CAAC,EAAE,SAAS,CAAC,CAAA;QACf,CAAC,CAAC,CAAA;QACF,IAAI,iBAA2C,CAAA;QAC/C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/C,IAAI,YAAY,CAAC,OAAO;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA;iBAC1D,CAAC;gBACJ,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA;gBAC3D,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC/D,iBAAiB,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC,CAAC,CAAA;QACF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;YACjF,IAAI,CAAC;gBACH,OAAO,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;YACjD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,kBAAkB;gBACnE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC;gBACtC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;QACnD,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC5C,iBAAiB,EAAE,EAAE,CAAA;QACvB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAA;IACV,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,OAAO,iBAAiB;IACnB,aAAa,CAA+B;IAErD,YAAY,YAA2C;QACrD,IAAI,CAAC,aAAa,GAAG,YAAY,CAAA;QACjC,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,IAAI,MAAM,CAAA;QAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IAClJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAGT;QACC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC/D,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAClG,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CACtH,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;QACpF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,CAAA;QAC3D,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CACjF,KAAK,CAAC,SAAS,EACf,IAAI,EACJ,KAAK,CAAC,SAAS,CAAC,OAAO,EACvB,IAAI,CAAC,aAAa,EAClB,MAAM,CACP,CAAC,CAAC,CAAA;QACH,MAAM,UAAU,GAAG,8BAA8B,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;QACvF,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,GAAG,wBAAwB;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC/I,MAAM,SAAS,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAA;QACpD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK;YAC5B,WAAW,EAAE,oBAAoB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACtH,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC;YACrD,QAAQ,EAAE,SAAS,CAAC,QAAQ;SAC7B,CAAC,CAAA;IACJ,CAAC;CACF"}