kiokuko-dsh 0.2.8 → 0.2.9

package/dist/dsh/existing-task-intake.js

@@ -0,0 +1,46 @@
+import { LedgerStore } from '../ledger/store.js';
+import { assertCapabilityCatalogBinding } from '../akinator/capability-binding.js';
+import { getAkinatorStateService } from '../akinator/service.js';
+import { readRunIntakeLink } from '../akinator/store.js';
+import { canonicalContentHash } from '../serialization/validate.js';
+import { DshRunIntakeService } from './run-intake-service.js';
+import { readTaskSnapshot } from './task-state.js';
+import { withImmediateTransaction } from '../db/transaction.js';
+/** Continue the existing intake without creating a run or granting execution. */
+export async function continueTaskIntake(db, input) {
+    let revision = input.expectedRevision, generation = input.expectedGeneration;
+    const assertCurrent = () => {
+        input.signal.throwIfAborted();
+        const task = readTaskSnapshot(db, input);
+        if (task.revision !== revision || task.generation !== generation
+            || task.pendingStop || task.state === 'Done' || task.state === 'Ignore')
+            throw new Error('Task intake authority changed');
+        const run = new LedgerStore(db).readRun(input.taskId);
+        if (!run || run.workspace !== input.workspace)
+            throw new Error('Task intake workspace changed');
+        assertCapabilityCatalogBinding(run.metadata, input.capabilities);
+    };
+    assertCurrent();
+    const link = readRunIntakeLink(db, { workspace: input.workspace, runId: input.taskId });
+    let state = await getAkinatorStateService(db, { workspace: input.workspace, sessionId: link.sessionId });
+    while (state.status === 'needs_answer' && state.question && input.answerer) {
+        const question = state.question;
+        const value = await input.answerer.ask(question, input.signal, input.agent);
+        await input.validateCapabilities?.();
+        assertCurrent();
+        withImmediateTransaction(db, () => {
+            new DshRunIntakeService(db).answerIntake({ runId: input.taskId,
+                idempotencyKey: `task-intake:${canonicalContentHash({ runId: input.taskId, generation, question: question.id, value })}`,
+                request: { apiVersion: '1', questionId: question.id, value, capabilities: input.capabilities } }, { assertBeforeAnswer: assertCurrent });
+            // Intake completion can advance the legacy execution status in this same
+            // transaction. Only that committed change refreshes our expected version.
+            const task = readTaskSnapshot(db, input);
+            revision = task.revision;
+            generation = task.generation;
+        });
+        state = await getAkinatorStateService(db, { workspace: input.workspace, sessionId: link.sessionId });
+    }
+    assertCurrent();
+    return { state, link };
+}
+//# sourceMappingURL=existing-task-intake.js.map

package/dist/dsh/existing-task-intake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"existing-task-intake.js","sourceRoot":"","sources":["../../src/dsh/existing-task-intake.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAA;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,EAAE,gBAAgB,EAAqB,MAAM,iBAAiB,CAAA;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AAE/D,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAkB,EAAE,KAK5D;IACC,IAAI,QAAQ,GAAG,KAAK,CAAC,gBAAgB,EAAE,UAAU,GAAG,KAAK,CAAC,kBAAkB,CAAA;IAC5E,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;QAC7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;eAC3D,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAC3H,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAC/F,8BAA8B,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAA;IAClE,CAAC,CAAA;IACD,aAAa,EAAE,CAAA;IACf,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IACvF,IAAI,KAAK,GAAG,MAAM,uBAAuB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;IACxG,OAAO,KAAK,CAAC,MAAM,KAAK,cAAc,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAC/B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QAC3E,MAAM,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAA;QACpC,aAAa,EAAE,CAAA;QACf,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE;YAChC,IAAI,mBAAmB,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM;gBAC5D,cAAc,EAAE,eAAe,oBAAoB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;gBACxH,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,EAChG,EAAE,kBAAkB,EAAE,aAAa,EAAE,CAAC,CAAA;YACxC,yEAAyE;YACzE,0EAA0E;YAC1E,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YACxC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QACxD,CAAC,CAAC,CAAA;QACF,KAAK,GAAG,MAAM,uBAAuB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;IACtG,CAAC;IACD,aAAa,EAAE,CAAA;IACf,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/dsh/finalization-request.d.ts

@@ -2,7 +2,7 @@ import type { DshLlm, PreparedFinalizationLog } from './session-memory-finalizer
 import { type FinalizationInputMode, type EfficiencyObservation } from './efficiency.js';
 export interface FinalizationRequestJob {
     readonly extractionVersion?: 1 | 2;
-    readonly outcome?: 'completed' | 'failed';
+    readonly outcome?: 'completed' | 'failed' | 'cancelled' | 'interrupted';
     readonly runId: string;
     readonly dshSessionId: string;
     readonly sourceStartSeq: number;

package/dist/dsh/finalization-request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"finalization-request.d.ts","sourceRoot":"","sources":["../../src/dsh/finalization-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AACpF,OAAO,EAAe,KAAK,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAGrG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAA;CAC1C;AACD,eAAO,MAAM,8BAA8B,QAAS,CAAA;AACpD,eAAO,MAAM,+BAA+B,QAAS,CAAA;AACrD,eAAO,MAAM,6BAA6B,SAAU,CAAA;AACpD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjD,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAA;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,UAAU,CAAC,CAAA;CACtD;AAsBD,2FAA2F;AAC3F,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,sBAAsB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,WAAW,GAAG,mBAAmB,CAqCjJ"}
+{"version":3,"file":"finalization-request.d.ts","sourceRoot":"","sources":["../../src/dsh/finalization-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AACpF,OAAO,EAAe,KAAK,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAGrG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,aAAa,CAAA;IACvE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAA;CAC1C;AACD,eAAO,MAAM,8BAA8B,QAAS,CAAA;AACpD,eAAO,MAAM,+BAA+B,QAAS,CAAA;AACrD,eAAO,MAAM,6BAA6B,SAAU,CAAA;AACpD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjD,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAA;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,UAAU,CAAC,CAAA;CACtD;AAsBD,2FAA2F;AAC3F,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,sBAAsB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,WAAW,GAAG,mBAAmB,CAqCjJ"}

package/dist/dsh/finalization-request.js

@@ -8,7 +8,7 @@ function finalizationPrompt(evidence, job) {
         ? 'No additional off-surface evidence was selected; use the conversation prefix.'
         : `<weighted-dsh-log-evidence>\n${evidence}\n</weighted-dsh-log-evidence>`;
     return [
-        job.outcome === 'failed' ? 'The DSH task ended with status failed. Produce its durable Kiokuko Memory Capsule.' : 'The DSH task is complete. Produce its durable Kiokuko Memory Capsule.',
+        job.outcome && job.outcome !== 'completed' ? `The DSH source segment ended with status ${job.outcome}. Preserve that outcome without inferring task success. Produce its durable Kiokuko Memory Capsule.` : 'The DSH task is complete. Produce its durable Kiokuko Memory Capsule.',
         `The target run is exactly DSH event seq ${job.sourceStartSeq} through ${job.sourceEndSeq}, inclusive.`,
         'Use the conversation prefix only as context. Store only durable information established, changed, verified, or learned inside the target run.',
         'Use the weighted target-run evidence below as the authoritative extraction window. Never store facts solely because they appear in an earlier conversation prefix.',

package/dist/dsh/finalization-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"finalization-request.js","sourceRoot":"","sources":["../../src/dsh/finalization-request.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAA0D,MAAM,iBAAiB,CAAA;AACrG,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAW5D,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAA;AACpD,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAA;AACrD,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAA;AAOpD,SAAS,kBAAkB,CAAC,QAAgB,EAAE,GAA2B;IACvE,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC3C,CAAC,CAAC,+EAA+E;QACjF,CAAC,CAAC,gCAAgC,QAAQ,gCAAgC,CAAA;IAC5E,OAAO;QACL,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,oFAAoF,CAAC,CAAC,CAAC,uEAAuE;QACzL,2CAA2C,GAAG,CAAC,cAAc,YAAY,GAAG,CAAC,YAAY,cAAc;QACvG,+IAA+I;QAC/I,oKAAoK;QACpK,+OAA+O;QAC/O,wIAAwI;QACxI,wIAAwI;QACxI,0CAA0C;QAC1C,0KAA0K;QAC1K,0JAA0J;QAC1J,eAAe;KAChB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAChB,CAAC;AAGD,2FAA2F;AAC3F,MAAM,UAAU,wBAAwB,CAAC,GAA2B,EAAE,QAAiC,EAAE,MAAmB;IAC1H,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAA;IAC7B,MAAM,aAAa,GAAG,GAAG,CAAC,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC;QAClD,uBAAuB,GAAG,CAAC,OAAO,IAAI,WAAW,sCAAsC;QACvF,uHAAuH;QACvH,yDAAyD;QACzD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,IAAI,EAAE,gCAAgC,EAAE,MAAM,EAAE,kCAAkC,EAAE,OAAO,EAAE,mCAAmC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,iDAAiD,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,2BAA2B,EAAE,QAAQ,EAAE,0BAA0B,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5e,0UAA0U;QAC1U,uXAAuX;QACvX,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;KAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACzG,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;QAC9B,EAAE,EAAE,+BAA+B,GAAG,CAAC,KAAK,EAAE;QAC9C,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC/C,MAAM,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,cAAc,EAAE;KAChE,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK;QACjE,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC;QAChG,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,8BAA8B,EAAE,MAAM;QACjE,SAAS,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,YAAqB,EAAE,CAAA;IAC/D,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,CAAA;IACtE,MAAM,QAAQ,GAAG,CAAC,MAAsD,EAAuB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACpK,IAAI,GAAG,CAAC,SAAS,KAAK,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAA;IAC3F,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,aAAa,IAAI,8BAA8B,GAAG,IAAI;QAAE,OAAO,QAAQ,CAAC,wBAAwB,CAAC,CAAA;IACtJ,IAAI,CAAC,QAAQ,CAAC,eAAe;QAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAChE,MAAM,aAAa,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACtH,OAAO,CAAC,+IAA+I,EACtJ,gHAAgH,CAAC;SAClH,OAAO,CAAC,iFAAiF,EAAE,gGAAgG,CAAC,CAAA;IAC/L,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM;QACzB,MAAM,EAAE,sKAAsK;QAC9K,QAAQ,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAA;IACnC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC,qBAAqB,CAAC,CAAA;IAC7G,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAA;AACnD,CAAC"}
+{"version":3,"file":"finalization-request.js","sourceRoot":"","sources":["../../src/dsh/finalization-request.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAA0D,MAAM,iBAAiB,CAAA;AACrG,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAW5D,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAA;AACpD,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAA;AACrD,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAA;AAOpD,SAAS,kBAAkB,CAAC,QAAgB,EAAE,GAA2B;IACvE,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC3C,CAAC,CAAC,+EAA+E;QACjF,CAAC,CAAC,gCAAgC,QAAQ,gCAAgC,CAAA;IAC5E,OAAO;QACL,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,4CAA4C,GAAG,CAAC,OAAO,qGAAqG,CAAC,CAAC,CAAC,uEAAuE;QACnR,2CAA2C,GAAG,CAAC,cAAc,YAAY,GAAG,CAAC,YAAY,cAAc;QACvG,+IAA+I;QAC/I,oKAAoK;QACpK,+OAA+O;QAC/O,wIAAwI;QACxI,wIAAwI;QACxI,0CAA0C;QAC1C,0KAA0K;QAC1K,0JAA0J;QAC1J,eAAe;KAChB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAChB,CAAC;AAGD,2FAA2F;AAC3F,MAAM,UAAU,wBAAwB,CAAC,GAA2B,EAAE,QAAiC,EAAE,MAAmB;IAC1H,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAA;IAC7B,MAAM,aAAa,GAAG,GAAG,CAAC,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC;QAClD,uBAAuB,GAAG,CAAC,OAAO,IAAI,WAAW,sCAAsC;QACvF,uHAAuH;QACvH,yDAAyD;QACzD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,IAAI,EAAE,gCAAgC,EAAE,MAAM,EAAE,kCAAkC,EAAE,OAAO,EAAE,mCAAmC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,iDAAiD,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,2BAA2B,EAAE,QAAQ,EAAE,0BAA0B,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5e,0UAA0U;QAC1U,uXAAuX;QACvX,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;KAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACzG,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;QAC9B,EAAE,EAAE,+BAA+B,GAAG,CAAC,KAAK,EAAE;QAC9C,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC/C,MAAM,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,cAAc,EAAE;KAChE,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK;QACjE,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC;QAChG,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,8BAA8B,EAAE,MAAM;QACjE,SAAS,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,YAAqB,EAAE,CAAA;IAC/D,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,CAAA;IACtE,MAAM,QAAQ,GAAG,CAAC,MAAsD,EAAuB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACpK,IAAI,GAAG,CAAC,SAAS,KAAK,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAA;IAC3F,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,aAAa,IAAI,8BAA8B,GAAG,IAAI;QAAE,OAAO,QAAQ,CAAC,wBAAwB,CAAC,CAAA;IACtJ,IAAI,CAAC,QAAQ,CAAC,eAAe;QAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAChE,MAAM,aAAa,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACtH,OAAO,CAAC,+IAA+I,EACtJ,gHAAgH,CAAC;SAClH,OAAO,CAAC,iFAAiF,EAAE,gGAAgG,CAAC,CAAA;IAC/L,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM;QACzB,MAAM,EAAE,sKAAsK;QAC9K,QAAQ,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAA;IACnC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC,qBAAqB,CAAC,CAAA;IAC7G,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAA;AACnD,CAAC"}

package/dist/dsh/guardrail/contracts.d.ts

@@ -0,0 +1,85 @@
+import * as z from 'zod/v4';
+import type { TaskLease } from '../task-state.js';
+export declare const ProtocolRecipeSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"bounded-tdd-v1">;
+    unitId: z.ZodString;
+    implementationPaths: z.ZodArray<z.ZodString>;
+    testPaths: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type ProtocolRecipe = z.infer<typeof ProtocolRecipeSchema>;
+export type Manifest = Record<string, string | null>;
+export declare const PROTOCOL_CAPABILITIES: Readonly<{
+    readonly validation: "bounded-cl-v1";
+    readonly ownedEffects: "lease-transactional-v1";
+    readonly nodeTests: "process-only";
+    readonly lispEffects: "protected-required";
+    readonly rollback: false;
+    readonly heapRestoration: false;
+}>;
+export declare const PROTOCOL_ISSUER: "kiokuko-dsh:owned-execution:v1";
+export interface ProtocolObservation {
+    schema: 1;
+    operationId: string;
+    runtimeDigest: string;
+    environmentDigest: string;
+    complete: boolean;
+    tests: number;
+    passed: number;
+    failed: number;
+    assertionFailures: number;
+    otherFailures: number;
+    skipped: number;
+    todo: number;
+    cancelled: number;
+    explicit: number;
+}
+export interface ProtocolReceipt {
+    issuer: typeof PROTOCOL_ISSUER;
+    id: string;
+    task: TaskLease;
+    recipeId: string;
+    generation: number;
+    sourceDigest: string;
+    testDigest: string;
+    commandDigest: string;
+    runtimeDigest: string;
+    environmentDigest: string;
+    ownedReceiptDigest: string;
+    observationDigest: string;
+    outputDigest: string;
+    outcome: 'assertion-failure' | 'passed' | 'setup-error';
+    assertions: number;
+    exit: number;
+    digest: string;
+}
+export interface ProtocolState {
+    schema: 1;
+    recipe: ProtocolRecipe;
+    recipeId: string;
+    scopeVersion: number;
+    generation: number;
+    lease: TaskLease;
+    criterionId: string;
+    methodDigest: string;
+    runtimeDigest: string;
+    command: string;
+    cwd: string;
+    sourcePaths: string[];
+    phase: 'write-tests' | 'verify-red' | 'implement' | 'verify-green' | 'report' | 'blocked';
+    source: Manifest;
+    tests: Manifest;
+    baselineTests: Manifest;
+    edits: string[];
+    red?: ProtocolReceipt;
+    green?: ProtocolReceipt;
+    consumed: string[];
+    pending?: {
+        id: string;
+        kind: 'file' | 'test';
+        requestDigest: string;
+        path?: string;
+        phase: ProtocolState['phase'];
+    };
+    reason?: string;
+}
+//# sourceMappingURL=contracts.d.ts.map

package/dist/dsh/guardrail/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../../src/dsh/guardrail/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAA;AAC3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEjD,eAAO,MAAM,oBAAoB;;;;;kBAG/B,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AACjE,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;AACpD,eAAO,MAAM,qBAAqB;;;;;;;EAA4L,CAAA;AAC9N,eAAO,MAAM,eAAe,EAAG,gCAAyC,CAAA;AACxE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CACzQ;AACD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,eAAe,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAClG,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IACvF,iBAAiB,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,mBAAmB,GAAG,QAAQ,GAAG,aAAa,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAClN;AACD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAChH,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtH,KAAK,EAAE,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC1F,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,aAAa,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAC5E,GAAG,CAAC,EAAE,eAAe,CAAC;IAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnE,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IACrH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/dsh/guardrail/contracts.js

@@ -0,0 +1,10 @@
+import * as z from 'zod/v4';
+const relative = z.string().min(1).max(512).refine(value => !value.startsWith('/') && !value.includes('\\') && !value.split('/').some(part => !part || part === '.' || part === '..') && !/[\p{Cc}\p{Cf}]/u.test(value));
+export const ProtocolRecipeSchema = z.object({ kind: z.literal('bounded-tdd-v1'), unitId: z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9_.:-]{0,127}$/u), implementationPaths: z.array(relative).min(1).max(32), testPaths: z.array(relative).min(1).max(32) }).strict().superRefine((value, ctx) => {
+    const paths = [...value.implementationPaths, ...value.testPaths];
+    if (new Set(paths).size !== paths.length)
+        ctx.addIssue({ code: 'custom', message: 'Implementation and test paths must be unique and disjoint' });
+});
+export const PROTOCOL_CAPABILITIES = Object.freeze({ validation: 'bounded-cl-v1', ownedEffects: 'lease-transactional-v1', nodeTests: 'process-only', lispEffects: 'protected-required', rollback: false, heapRestoration: false });
+export const PROTOCOL_ISSUER = 'kiokuko-dsh:owned-execution:v1';
+//# sourceMappingURL=contracts.js.map

package/dist/dsh/guardrail/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../../src/dsh/guardrail/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAA;AAE3B,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;AACxN,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sCAAsC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5R,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,mBAAmB,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAA;IAChE,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,GAAG,CAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,2DAA2D,EAAC,CAAC,CAAA;AAC7I,CAAC,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAC,UAAU,EAAC,eAAe,EAAC,YAAY,EAAC,wBAAwB,EAAC,SAAS,EAAC,cAAc,EAAC,WAAW,EAAC,oBAAoB,EAAC,QAAQ,EAAC,KAAK,EAAC,eAAe,EAAC,KAAK,EAAU,CAAC,CAAA;AAC9N,MAAM,CAAC,MAAM,eAAe,GAAG,gCAAyC,CAAA"}

package/dist/dsh/guardrail/engine.d.ts

@@ -0,0 +1,19 @@
+import { spawn } from 'node:child_process';
+import { type HostProcessResult } from '../execution-result.js';
+import { type ProtocolReceipt, type ProtocolState } from './contracts.js';
+export declare function protocolRuntime(): {
+    runner: string;
+    supervisor: string;
+    runtimeDigest: string;
+    binary: string;
+    protocol: string;
+    engineDigest: string;
+    protocolFileDigest: string;
+    manifestDigest: string;
+    version: string;
+    target: string;
+};
+export declare function checkProtocol(state: ProtocolState, receipt: ProtocolReceipt, phase: 'verify-red' | 'verify-green' | 'report', signal?: AbortSignal): Promise<boolean>;
+/** The enrolled path uses this exact host runner, never caller stdout as proof. */
+export declare function runProtocolTests(state: ProtocolState, operationId: string, signal: AbortSignal, timeoutMs: number, onStarted: (() => void) | undefined, authorizeLaunch: (launch: () => ReturnType<typeof spawn>) => ReturnType<typeof spawn>): Promise<HostProcessResult>;
+//# sourceMappingURL=engine.d.ts.map

package/dist/dsh/guardrail/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/dsh/guardrail/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAY,MAAM,oBAAoB,CAAA;AASpD,OAAO,EAAwB,KAAK,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAErF,OAAO,EAA6C,KAAK,eAAe,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAIpH,wBAAgB,eAAe;;;;;;;;;;;EAM9B;AAaD,wBAAsB,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,GAAG,cAAc,GAAG,QAAQ,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAwB3K;AACD,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAC,MAAM,EAAC,SAAS,EAAC,CAAC,MAAI,IAAI,CAAC,GAAC,SAAS,EAAE,eAAe,EAAC,CAAC,MAAM,EAAC,MAAI,UAAU,CAAC,OAAO,KAAK,CAAC,KAAG,UAAU,CAAC,OAAO,KAAK,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAyC7P"}

package/dist/dsh/guardrail/engine.js

@@ -0,0 +1,178 @@
+import { spawn, execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { readFileSync, mkdtempSync, mkdirSync, rmSync } from 'node:fs';
+import { mkdtemp, writeFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { resolveGuardrail } from '../../../scripts/guardrail-artifacts.mjs';
+import { canonicalContentHash } from '../../serialization/validate.js';
+import { observeProcessResult } from '../execution-result.js';
+import { registerStructuredObservation, markUncertainProtocolResult, sha } from './evidence.js';
+import { PROTOCOL_ISSUER } from './contracts.js';
+const exec = promisify(execFile);
+const environmentTemplate = { PATH: '<host-node-directory>:/usr/local/bin:/usr/bin:/bin', LANG: 'C.UTF-8', TZ: 'UTC', HOME: '<fresh-private>/home', TMPDIR: '<fresh-private>/tmp', XDG_CONFIG_HOME: '<fresh-private>/config', XDG_CACHE_HOME: '<fresh-private>/cache' };
+const packageRoot = fileURLToPath(new URL('../../../', import.meta.url));
+export function protocolRuntime() {
+    const engine = resolveGuardrail(packageRoot);
+    const runner = path.join(packageRoot, 'guardrail/node-runner.mjs');
+    const supervisor = path.join(packageRoot, 'lisp/supervisor.mjs');
+    const runtimeDigest = canonicalContentHash({ supervisor: sha(readFileSync(supervisor)), node: sha(readFileSync(process.execPath)), version: process.version, platform: process.platform, arch: process.arch, engine: engine.engineDigest, protocol: engine.protocolFileDigest, runner: sha(readFileSync(runner)), environment: environmentTemplate });
+    return { ...engine, runner, supervisor, runtimeDigest };
+}
+function flat(output, tag) {
+    if (output.length > 8192 || !output.trim().startsWith(`(${tag} `))
+        throw Error('Malformed bounded engine response');
+    const tokens = output.trim().match(/\(|\)|"(?:\\.|[^"\\])*"|[^\s()]+/gu) ?? [];
+    if (tokens[0] !== '(' || tokens[1] !== tag || tokens.at(-1) !== ')' || tokens.length % 2 !== 1)
+        throw Error('Malformed bounded engine fields');
+    const value = {};
+    for (let i = 2; i < tokens.length - 1; i += 2) {
+        const key = tokens[i], text = tokens[i + 1];
+        if (!/^:[a-z0-9-]+$/u.test(key) || key in value)
+            throw Error('Unknown/duplicate engine field');
+        value[key] = text.startsWith('"') ? JSON.parse(text) : text === 't' ? true : text === 'nil' ? false : /^\d+$/u.test(text) ? Number(text) : (() => { throw Error('Invalid bounded engine value'); })();
+    }
+    return value;
+}
+export async function checkProtocol(state, receipt, phase, signal) {
+    const runtime = protocolRuntime();
+    if (runtime.runtimeDigest !== receipt.runtimeDigest || runtime.runtimeDigest !== state.runtimeDigest)
+        throw Error('Protocol runtime changed; rebind the unit');
+    const quote = (value) => JSON.stringify(value), empty = canonicalContentHash({ model: null });
+    const fields = `:source ${quote(receipt.sourceDigest)} :tests ${quote(receipt.testDigest)} :command ${quote(receipt.commandDigest)} :runtime ${quote(receipt.runtimeDigest)}`;
+    const artifact = (name, id, digest, outcome, exit, assertions, status) => `(${name} :id ${quote(id)} :digest ${quote(digest)} :generation ${state.lease.generation} :expected-generation ${state.lease.generation} ${fields} :outcome :${outcome} :exit ${exit} :assertions ${assertions} :status :${status})`;
+    const artifacts = [artifact('test-spec', receipt.id, receipt.digest, receipt.outcome, receipt.exit, receipt.assertions, 'observed')];
+    if (phase !== 'verify-red')
+        artifacts.push(artifact('patch', `patch:${state.recipeId}:${state.generation}`, canonicalContentHash({ edits: state.edits, source: state.source }), 'produced', 0, 0, 'applied'));
+    const captured = `(evidence :schema 1 :authority "kiokuko-dsh" :issuer ${quote(PROTOCOL_ISSUER)} :task ${quote(state.lease.taskId)} :revision ${state.lease.revision} ${fields} :model-provider "none" :model-name "none" :model-parameters ${quote(empty)} :transcript ${quote(empty)} :artifacts (${artifacts.join(' ')}))\n`;
+    const directory = await mkdtemp(path.join(tmpdir(), 'kiokuko-guardrail-'));
+    try {
+        const evidence = path.join(directory, 'evidence.lisp');
+        await writeFile(evidence, captured, { mode: 0o600 });
+        const options = { cwd: directory, env: { LANG: 'C.UTF-8' }, timeout: 10_000, maxBuffer: 16_384, ...(signal ? { signal } : {}) };
+        const validation = flat((await exec(runtime.binary, ['validate', runtime.protocol], options)).stdout, 'protocol');
+        let output, exit = 0;
+        try {
+            output = (await exec(runtime.binary, ['check', runtime.protocol, phase, evidence], options)).stdout;
+        }
+        catch (error) {
+            const failure = error;
+            if (failure.code !== 3 || typeof failure.stdout !== 'string')
+                throw Error(`Protocol engine unavailable or rejected bounded input: ${String(error)}`);
+            exit = 3;
+            output = failure.stdout;
+        }
+        const result = flat(output, 'decision');
+        const expected = [':allow', ':phase', ':next', ':task', ':authority-revision', ':issuer', ':protocol-sha256', ':evidence-sha256', ':engine-version', ':engine-sha256'].sort();
+        if (JSON.stringify(Object.keys(result).sort()) !== JSON.stringify(expected) || result[':allow'] !== (exit === 0) || result[':phase'] !== phase || result[':task'] !== state.lease.taskId || result[':authority-revision'] !== state.lease.revision || result[':issuer'] !== PROTOCOL_ISSUER || result[':protocol-sha256'] !== validation[':protocol-sha256'] || result[':evidence-sha256'] !== sha(captured) || result[':engine-sha256'] !== runtime.engineDigest || result[':engine-version'] !== runtime.version)
+            throw Error('Protocol decision does not bind the captured authority and inputs');
+        const expectedNext = phase === 'verify-red' ? (exit === 0 ? 'implement' : 'write-tests') : phase === 'verify-green' ? (exit === 0 ? 'report' : 'implement') : ':done';
+        if (result[':next'] !== expectedNext)
+            throw Error('Unexpected protocol transition');
+        return exit === 0;
+    }
+    finally {
+        await rm(directory, { recursive: true, force: true });
+    }
+}
+/** The enrolled path uses this exact host runner, never caller stdout as proof. */
+export function runProtocolTests(state, operationId, signal, timeoutMs, onStarted, authorizeLaunch) {
+    const runtime = protocolRuntime(), supervisor = runtime.supervisor;
+    if (runtime.runtimeDigest !== state.runtimeDigest)
+        throw Error('Protocol runtime changed; rebind the unit');
+    signal.throwIfAborted();
+    return new Promise(resolve => {
+        const directory = mkdtempSync(path.join(tmpdir(), 'kiokuko-protocol-env-'));
+        const env = { PATH: path.dirname(process.execPath) + ':/usr/local/bin:/usr/bin:/bin', LANG: 'C.UTF-8', TZ: 'UTC', HOME: path.join(directory, 'home'), TMPDIR: path.join(directory, 'tmp'), XDG_CONFIG_HOME: path.join(directory, 'config'), XDG_CACHE_HOME: path.join(directory, 'cache') };
+        for (const key of ['HOME', 'TMPDIR', 'XDG_CONFIG_HOME', 'XDG_CACHE_HOME'])
+            mkdirSync(env[key], { mode: 0o700 });
+        const environmentDigest = canonicalContentHash(env);
+        const input = { files: state.recipe.testPaths.map(file => path.join(state.lease.repositoryRoot, file)), operationId, runtimeDigest: runtime.runtimeDigest, environmentDigest, timeoutMs };
+        const launch = { command: process.execPath, args: [runtime.runner, JSON.stringify(input)], cwd: state.cwd, group: process.platform !== 'win32', protocol: true, report: true };
+        let spawned, launchError = '';
+        try {
+            authorizeLaunch(() => { spawned = spawn(process.execPath, [supervisor, JSON.stringify(launch)], { cwd: state.cwd, env, stdio: ['pipe', 'pipe', 'pipe', 'pipe', 'pipe'] }); return spawned; });
+        }
+        catch (error) {
+            if (!spawned) {
+                rmSync(directory, { recursive: true, force: true });
+                throw error;
+            }
+            launchError = `Protocol launch transaction outcome is uncertain: ${String(error)}`;
+        }
+        const child = spawned;
+        let terminal = '', channel = '', output = '', timedOut = false, capped = false, error = launchError, started = !!launchError;
+        if (launchError)
+            onStarted?.();
+        const stop = () => { try {
+            child.kill('SIGTERM');
+        }
+        catch { } };
+        const timer = setTimeout(() => { timedOut = true; stop(); }, timeoutMs);
+        const abort = () => stop();
+        signal.addEventListener('abort', abort, { once: true });
+        if (signal.aborted)
+            stop();
+        child.stdio[4]?.on('data', (chunk) => { terminal += chunk.toString(); if (terminal.length > 1024) {
+            capped = true;
+            stop();
+        } if (!started && terminal.includes('"processStarted":true')) {
+            started = true;
+            onStarted?.();
+        } });
+        child.stdio[3]?.on('data', (chunk) => { channel += chunk.toString(); if (channel.length > 65536) {
+            capped = true;
+            stop();
+        } });
+        const collect = (chunk) => { output += chunk.toString(); if (Buffer.byteLength(output) > 4 * 1024 * 1024) {
+            output = output.slice(0, 4 * 1024 * 1024);
+            capped = true;
+            stop();
+        } };
+        child.stdout?.on('data', collect);
+        child.stderr?.on('data', collect);
+        child.on('error', cause => { error = cause.message; });
+        if (launchError) {
+            child.stdin?.end();
+            stop();
+        }
+        child.on('close', () => {
+            clearTimeout(timer);
+            signal.removeEventListener('abort', abort);
+            rmSync(directory, { recursive: true, force: true });
+            let exitCode = null, processSignal = null, processStopped = false, observation;
+            try {
+                const final = JSON.parse(terminal);
+                exitCode = final.exitCode;
+                processSignal = final.signal;
+                if (final.processStarted !== true || !(final.exitCode === null || Number.isInteger(final.exitCode)) || !(final.signal === null || typeof final.signal === 'string'))
+                    throw Error('Not launched');
+                processStopped = true;
+            }
+            catch {
+                error ||= 'Missing terminal observation';
+            }
+            try {
+                const candidate = JSON.parse(channel);
+                const keys = ['tests', 'passed', 'failed', 'assertionFailures', 'otherFailures', 'skipped', 'todo', 'cancelled', 'explicit'];
+                const all = ['schema', 'operationId', 'runtimeDigest', 'environmentDigest', 'complete', ...keys].sort();
+                if (!candidate || JSON.stringify(Object.keys(candidate).sort()) !== JSON.stringify(all) || candidate.schema !== 1 || candidate.operationId !== operationId || candidate.runtimeDigest !== runtime.runtimeDigest || candidate.environmentDigest !== environmentDigest || typeof candidate.complete !== 'boolean' || keys.some(key => !Number.isSafeInteger(candidate[key]) || candidate[key] < 0) || candidate.tests > 100000 || candidate.tests !== candidate.passed + candidate.failed + candidate.skipped + candidate.todo || candidate.assertionFailures + candidate.otherFailures !== candidate.failed || candidate.cancelled > candidate.otherFailures || candidate.explicit > candidate.tests)
+                    throw Error('Invalid observation');
+                observation = candidate;
+            }
+            catch {
+                error ||= 'Missing structured test observation';
+            }
+            const complete = !capped && !error && !timedOut && !signal.aborted && processSignal === null;
+            const summary = observation ? { tests: observation.tests, pass: observation.passed, fail: observation.failed, cancelled: observation.cancelled, skipped: observation.skipped, todo: observation.todo } : undefined;
+            const result = observeProcessResult({ isError: exitCode !== 0 || !complete, value: { exitCode, signal: processSignal, timedOut, aborted: signal.aborted, processStarted: started, processStopped, outputComplete: complete, ...(summary ? { summary } : {}) }, content: [{ type: 'text', text: output + (error ? `\n${error}` : '') }] });
+            if (launchError)
+                markUncertainProtocolResult(result);
+            if (observation && complete)
+                registerStructuredObservation(result, observation);
+            resolve(result);
+        });
+    });
+}
+//# sourceMappingURL=engine.js.map

package/dist/dsh/guardrail/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/dsh/guardrail/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AACtE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAA;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,EAAE,oBAAoB,EAA0B,MAAM,wBAAwB,CAAA;AACrF,OAAO,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAC/F,OAAO,EAAE,eAAe,EAAsE,MAAM,gBAAgB,CAAA;AACpH,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;AAChC,MAAM,mBAAmB,GAAG,EAAC,IAAI,EAAC,oDAAoD,EAAC,IAAI,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,sBAAsB,EAAC,MAAM,EAAC,qBAAqB,EAAC,eAAe,EAAC,wBAAwB,EAAC,cAAc,EAAC,uBAAuB,EAAC,CAAA;AACxP,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACxE,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAA;IAClE,MAAM,UAAU,GAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAC,qBAAqB,CAAC,CAAA;IAC7D,MAAM,aAAa,GAAG,oBAAoB,CAAC,EAAC,UAAU,EAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,EAAC,IAAI,EAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,EAAC,IAAI,EAAC,OAAO,CAAC,IAAI,EAAC,MAAM,EAAC,MAAM,CAAC,YAAY,EAAC,QAAQ,EAAC,MAAM,CAAC,kBAAkB,EAAC,MAAM,EAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAC,WAAW,EAAC,mBAAmB,EAAC,CAAC,CAAA;IAClU,OAAO,EAAC,GAAG,MAAM,EAAC,MAAM,EAAC,UAAU,EAAC,aAAa,EAAC,CAAA;AACpD,CAAC;AACD,SAAS,IAAI,CAAC,MAAc,EAAE,GAAW;IACvC,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACnH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,oCAAoC,CAAC,IAAI,EAAE,CAAA;IAC9E,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAC9I,MAAM,KAAK,GAAyC,EAAE,CAAA;IACtD,KAAK,IAAI,CAAC,GAAC,CAAC,EAAC,CAAC,GAAC,MAAM,CAAC,MAAM,GAAC,CAAC,EAAC,CAAC,IAAE,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAC,MAAM,CAAC,CAAC,CAAE,EAAE,IAAI,GAAC,MAAM,CAAC,CAAC,GAAC,CAAC,CAAE,CAAA;QACvC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,KAAK;YAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAC9F,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAE,EAAE,GAAC,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAA,CAAA,CAAC,CAAC,EAAE,CAAA;IAClM,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAoB,EAAE,OAAwB,EAAE,KAA+C,EAAE,MAAoB;IACvJ,MAAM,OAAO,GAAC,eAAe,EAAE,CAAA;IAC/B,IAAG,OAAO,CAAC,aAAa,KAAG,OAAO,CAAC,aAAa,IAAE,OAAO,CAAC,aAAa,KAAG,KAAK,CAAC,aAAa;QAAC,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAA;IACtJ,MAAM,KAAK,GAAC,CAAC,KAAY,EAAC,EAAE,CAAA,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,GAAC,oBAAoB,CAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAA;IAC3F,MAAM,MAAM,GAAC,WAAW,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAA;IAC3K,MAAM,QAAQ,GAAC,CAAC,IAAW,EAAC,EAAS,EAAC,MAAa,EAAC,OAAc,EAAC,IAAW,EAAC,UAAiB,EAAC,MAAa,EAAC,EAAE,CAAA,IAAI,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC,YAAY,KAAK,CAAC,MAAM,CAAC,gBAAgB,KAAK,CAAC,KAAK,CAAC,UAAU,yBAAyB,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,cAAc,OAAO,UAAU,IAAI,gBAAgB,UAAU,aAAa,MAAM,GAAG,CAAA;IACrV,MAAM,SAAS,GAAC,CAAC,QAAQ,CAAC,WAAW,EAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,MAAM,EAAC,OAAO,CAAC,OAAO,EAAC,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,UAAU,EAAC,UAAU,CAAC,CAAC,CAAA;IAC5H,IAAG,KAAK,KAAG,YAAY;QAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAC,SAAS,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,EAAE,EAAC,oBAAoB,CAAC,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,CAAC,EAAE,UAAU,EAAC,CAAC,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC,CAAA;IAC/L,MAAM,QAAQ,GAAC,wDAAwD,KAAK,CAAC,eAAe,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,gEAAgE,KAAK,CAAC,KAAK,CAAC,gBAAgB,KAAK,CAAC,KAAK,CAAC,gBAAgB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAA;IAC7T,MAAM,SAAS,GAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAC,oBAAoB,CAAC,CAAC,CAAA;IACvE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAC,eAAe,CAAC,CAAC;QAAA,MAAM,SAAS,CAAC,QAAQ,EAAC,QAAQ,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAA;QACnG,MAAM,OAAO,GAAC,EAAC,GAAG,EAAC,SAAS,EAAC,GAAG,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,EAAC,OAAO,EAAC,MAAM,EAAC,SAAS,EAAC,MAAM,EAAC,GAAG,CAAC,MAAM,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAA;QAC1G,MAAM,UAAU,GAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAC,CAAC,UAAU,EAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAC,UAAU,CAAC,CAAA;QAC3G,IAAI,MAAa,EAAC,IAAI,GAAC,CAAC,CAAA;QACxB,IAAG,CAAC;YAAA,MAAM,GAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAC,CAAC,OAAO,EAAC,OAAO,CAAC,QAAQ,EAAC,KAAK,EAAC,QAAQ,CAAC,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;QAAA,CAAC;QACjG,OAAM,KAAK,EAAC,CAAC;YAAA,MAAM,OAAO,GAAC,KAAwC,CAAC;YAAA,IAAG,OAAO,CAAC,IAAI,KAAG,CAAC,IAAE,OAAO,OAAO,CAAC,MAAM,KAAG,QAAQ;gBAAC,MAAM,KAAK,CAAC,0DAA0D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAA,IAAI,GAAC,CAAC,CAAC;YAAA,MAAM,GAAC,OAAO,CAAC,MAAM,CAAA;QAAA,CAAC;QAC9O,MAAM,MAAM,GAAC,IAAI,CAAC,MAAM,EAAC,UAAU,CAAC,CAAA;QACpC,MAAM,QAAQ,GAAC,CAAC,QAAQ,EAAC,QAAQ,EAAC,OAAO,EAAC,OAAO,EAAC,qBAAqB,EAAC,SAAS,EAAC,kBAAkB,EAAC,kBAAkB,EAAC,iBAAiB,EAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAA;QAClK,IAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAE,MAAM,CAAC,QAAQ,CAAC,KAAG,CAAC,IAAI,KAAG,CAAC,CAAC,IAAE,MAAM,CAAC,QAAQ,CAAC,KAAG,KAAK,IAAE,MAAM,CAAC,OAAO,CAAC,KAAG,KAAK,CAAC,KAAK,CAAC,MAAM,IAAE,MAAM,CAAC,qBAAqB,CAAC,KAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,IAAE,MAAM,CAAC,SAAS,CAAC,KAAG,eAAe,IAAE,MAAM,CAAC,kBAAkB,CAAC,KAAG,UAAU,CAAC,kBAAkB,CAAC,IAAE,MAAM,CAAC,kBAAkB,CAAC,KAAG,GAAG,CAAC,QAAQ,CAAC,IAAE,MAAM,CAAC,gBAAgB,CAAC,KAAG,OAAO,CAAC,YAAY,IAAE,MAAM,CAAC,iBAAiB,CAAC,KAAG,OAAO,CAAC,OAAO;YAAC,MAAM,KAAK,CAAC,mEAAmE,CAAC,CAAA;QAC1hB,MAAM,YAAY,GAAC,KAAK,KAAG,YAAY,CAAA,CAAC,CAAA,CAAC,IAAI,KAAG,CAAC,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,aAAa,CAAC,CAAA,CAAC,CAAA,KAAK,KAAG,cAAc,CAAA,CAAC,CAAA,CAAC,IAAI,KAAG,CAAC,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,WAAW,CAAC,CAAA,CAAC,CAAA,OAAO,CAAA;QAC3I,IAAG,MAAM,CAAC,OAAO,CAAC,KAAG,YAAY;YAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAC/E,OAAO,IAAI,KAAG,CAAC,CAAA;IACjB,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAA;IAAC,CAAC;AAC/D,CAAC;AACD,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,KAAoB,EAAE,WAAmB,EAAE,MAAmB,EAAE,SAAgB,EAAC,SAA8B,EAAE,eAA+E;IAC/N,MAAM,OAAO,GAAC,eAAe,EAAE,EAAE,UAAU,GAAC,OAAO,CAAC,UAAU,CAAA;IAC9D,IAAG,OAAO,CAAC,aAAa,KAAG,KAAK,CAAC,aAAa;QAAC,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAA;IACvG,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAA,EAAE;QAC1B,MAAM,SAAS,GAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAC,uBAAuB,CAAC,CAAC,CAAA;QACxE,MAAM,GAAG,GAAC,EAAC,IAAI,EAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAC,+BAA+B,EAAC,IAAI,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAC,MAAM,CAAC,EAAC,MAAM,EAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAC,KAAK,CAAC,EAAC,eAAe,EAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAC,QAAQ,CAAC,EAAC,cAAc,EAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAC,OAAO,CAAC,EAAC,CAAA;QACpQ,KAAI,MAAM,GAAG,IAAI,CAAC,MAAM,EAAC,QAAQ,EAAC,iBAAiB,EAAC,gBAAgB,CAAU;YAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAA;QAC/G,MAAM,iBAAiB,GAAC,oBAAoB,CAAC,GAAG,CAAC,CAAA;QACjD,MAAM,KAAK,GAAC,EAAC,KAAK,EAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAC,IAAI,CAAC,CAAC,EAAC,WAAW,EAAC,aAAa,EAAC,OAAO,CAAC,aAAa,EAAC,iBAAiB,EAAC,SAAS,EAAC,CAAA;QAC5K,MAAM,MAAM,GAAC,EAAC,OAAO,EAAC,OAAO,CAAC,QAAQ,EAAC,IAAI,EAAC,CAAC,OAAO,CAAC,MAAM,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAC,GAAG,EAAC,KAAK,CAAC,GAAG,EAAC,KAAK,EAAC,OAAO,CAAC,QAAQ,KAAG,OAAO,EAAC,QAAQ,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,CAAA;QAC5J,IAAI,OAA0C,EAAC,WAAW,GAAC,EAAE,CAAA;QAC7D,IAAI,CAAC;YAAC,eAAe,CAAC,GAAE,EAAE,GAAC,OAAO,GAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAC,CAAC,UAAU,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAC,EAAC,GAAG,EAAC,KAAK,CAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,CAAC,EAAC,CAAC,CAAC,CAAA,OAAO,OAAO,CAAA,CAAA,CAAC,CAAC,CAAA;QAAC,CAAC;QAChL,OAAM,KAAK,EAAC,CAAC;YACX,IAAG,CAAC,OAAO,EAAC,CAAC;gBAAA,MAAM,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;gBAAA,MAAM,KAAK,CAAA;YAAA,CAAC;YACvE,WAAW,GAAC,qDAAqD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;QAClF,CAAC;QACD,MAAM,KAAK,GAAC,OAAQ,CAAA;QACpB,IAAI,QAAQ,GAAC,EAAE,EAAC,OAAO,GAAC,EAAE,EAAC,MAAM,GAAC,EAAE,EAAC,QAAQ,GAAC,KAAK,EAAC,MAAM,GAAC,KAAK,EAAC,KAAK,GAAC,WAAW,EAAC,OAAO,GAAC,CAAC,CAAC,WAAW,CAAA;QACxG,IAAG,WAAW;YAAC,SAAS,EAAE,EAAE,CAAA;QAC5B,MAAM,IAAI,GAAC,GAAE,EAAE,GAAC,IAAG,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAAA,CAAC;QAAA,MAAK,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA;QAClD,MAAM,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,GAAC,QAAQ,GAAC,IAAI,CAAC,CAAA,IAAI,EAAE,CAAA,CAAA,CAAC,EAAC,SAAS,CAAC,CAAA;QAC5D,MAAM,KAAK,GAAC,GAAE,EAAE,CAAA,IAAI,EAAE,CAAC;QAAA,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QAAA,IAAG,MAAM,CAAC,OAAO;YAAC,IAAI,EAAE,CAAA;QAClG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,EAAC,CAAC,KAAY,EAAC,EAAE,GAAC,QAAQ,IAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA,IAAG,QAAQ,CAAC,MAAM,GAAC,IAAI,EAAC,CAAC;YAAA,MAAM,GAAC,IAAI,CAAC;YAAA,IAAI,EAAE,CAAA;QAAA,CAAC,CAAA,IAAG,CAAC,OAAO,IAAE,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAC,CAAC;YAAA,OAAO,GAAC,IAAI,CAAC;YAAA,SAAS,EAAE,EAAE,CAAA;QAAA,CAAC,CAAA,CAAC,CAAC,CAAA;QACxM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,EAAC,CAAC,KAAY,EAAC,EAAE,GAAC,OAAO,IAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA,IAAG,OAAO,CAAC,MAAM,GAAC,KAAK,EAAC,CAAC;YAAA,MAAM,GAAC,IAAI,CAAC;YAAA,IAAI,EAAE,CAAA;QAAA,CAAC,CAAA,CAAC,CAAC,CAAA;QACnH,MAAM,OAAO,GAAC,CAAC,KAAY,EAAC,EAAE,GAAC,MAAM,IAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA,IAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAC,CAAC,GAAC,IAAI,GAAC,IAAI,EAAC,CAAC;YAAA,MAAM,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC,GAAC,IAAI,GAAC,IAAI,CAAC,CAAC;YAAA,MAAM,GAAC,IAAI,CAAC;YAAA,IAAI,EAAE,CAAA;QAAA,CAAC,CAAA,CAAC,CAAA;QACzJ,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAC,OAAO,CAAC,CAAC;QAAA,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAC,OAAO,CAAC,CAAC;QAAA,KAAK,CAAC,EAAE,CAAC,OAAO,EAAC,KAAK,CAAA,EAAE,GAAC,KAAK,GAAC,KAAK,CAAC,OAAO,CAAA,CAAA,CAAC,CAAC,CAAA;QAChH,IAAG,WAAW,EAAC,CAAC;YAAA,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;YAAA,IAAI,EAAE,CAAA;QAAA,CAAC;QAC1C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAC,GAAE,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;YAAA,MAAM,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAA;YAC3G,IAAI,QAAQ,GAAa,IAAI,EAAC,aAAa,GAAa,IAAI,EAAC,cAAc,GAAC,KAAK,EAAC,WAAyC,CAAA;YAC3H,IAAG,CAAC;gBAAA,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAAA,QAAQ,GAAC,KAAK,CAAC,QAAQ,CAAC;gBAAA,aAAa,GAAC,KAAK,CAAC,MAAM,CAAC;gBAAA,IAAG,KAAK,CAAC,cAAc,KAAG,IAAI,IAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAG,IAAI,IAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAE,CAAC,CAAC,KAAK,CAAC,MAAM,KAAG,IAAI,IAAE,OAAO,KAAK,CAAC,MAAM,KAAG,QAAQ,CAAC;oBAAC,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;gBAAA,cAAc,GAAC,IAAI,CAAA;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,KAAK,KAAG,8BAA8B,CAAA;YAAA,CAAC;YACxU,IAAG,CAAC;gBAAA,MAAM,SAAS,GAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAAA,MAAM,IAAI,GAAC,CAAC,OAAO,EAAC,QAAQ,EAAC,QAAQ,EAAC,mBAAmB,EAAC,eAAe,EAAC,SAAS,EAAC,MAAM,EAAC,WAAW,EAAC,UAAU,CAAC,CAAC;gBAAA,MAAM,GAAG,GAAC,CAAC,QAAQ,EAAC,aAAa,EAAC,eAAe,EAAC,mBAAmB,EAAC,UAAU,EAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAA,IAAG,CAAC,SAAS,IAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,KAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAE,SAAS,CAAC,MAAM,KAAG,CAAC,IAAE,SAAS,CAAC,WAAW,KAAG,WAAW,IAAE,SAAS,CAAC,aAAa,KAAG,OAAO,CAAC,aAAa,IAAE,SAAS,CAAC,iBAAiB,KAAG,iBAAiB,IAAE,OAAO,SAAS,CAAC,QAAQ,KAAG,SAAS,IAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAE,SAAS,CAAC,GAAG,CAAC,GAAC,CAAC,CAAC,IAAE,SAAS,CAAC,KAAK,GAAC,MAAM,IAAE,SAAS,CAAC,KAAK,KAAG,SAAS,CAAC,MAAM,GAAC,SAAS,CAAC,MAAM,GAAC,SAAS,CAAC,OAAO,GAAC,SAAS,CAAC,IAAI,IAAE,SAAS,CAAC,iBAAiB,GAAC,SAAS,CAAC,aAAa,KAAG,SAAS,CAAC,MAAM,IAAE,SAAS,CAAC,SAAS,GAAC,SAAS,CAAC,aAAa,IAAE,SAAS,CAAC,QAAQ,GAAC,SAAS,CAAC,KAAK;oBAAC,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBAAA,WAAW,GAAC,SAAS,CAAA;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,KAAK,KAAG,qCAAqC,CAAA;YAAA,CAAC;YACh9B,MAAM,QAAQ,GAAC,CAAC,MAAM,IAAE,CAAC,KAAK,IAAE,CAAC,QAAQ,IAAE,CAAC,MAAM,CAAC,OAAO,IAAE,aAAa,KAAG,IAAI,CAAA;YAChF,MAAM,OAAO,GAAC,WAAW,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,WAAW,CAAC,KAAK,EAAC,IAAI,EAAC,WAAW,CAAC,MAAM,EAAC,IAAI,EAAC,WAAW,CAAC,MAAM,EAAC,SAAS,EAAC,WAAW,CAAC,SAAS,EAAC,OAAO,EAAC,WAAW,CAAC,OAAO,EAAC,IAAI,EAAC,WAAW,CAAC,IAAI,EAAC,CAAA,CAAC,CAAA,SAAS,CAAA;YAC/L,MAAM,MAAM,GAAC,oBAAoB,CAAC,EAAC,OAAO,EAAC,QAAQ,KAAG,CAAC,IAAE,CAAC,QAAQ,EAAC,KAAK,EAAC,EAAC,QAAQ,EAAC,MAAM,EAAC,aAAa,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,cAAc,EAAC,OAAO,EAAC,cAAc,EAAC,cAAc,EAAC,QAAQ,EAAC,GAAG,CAAC,OAAO,CAAA,CAAC,CAAA,EAAC,OAAO,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,EAAC,OAAO,EAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,GAAC,CAAC,KAAK,CAAA,CAAC,CAAA,KAAK,KAAK,EAAE,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,EAAC,CAAC,CAAA;YAC9R,IAAG,WAAW;gBAAC,2BAA2B,CAAC,MAAM,CAAC,CAAA;YAClD,IAAG,WAAW,IAAE,QAAQ;gBAAC,6BAA6B,CAAC,MAAM,EAAC,WAAW,CAAC,CAAA;YAC1E,OAAO,CAAC,MAAM,CAAC,CAAA;QACjB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/dsh/guardrail/evidence.d.ts

@@ -0,0 +1,16 @@
+import type { SqliteDatabase } from '../../db/adapter.js';
+import { type HostProcessResult } from '../execution-result.js';
+import type { ExecutionReceipt } from '../owned-execution.js';
+import { type Manifest, type ProtocolObservation, type ProtocolReceipt, type ProtocolState } from './contracts.js';
+export declare const sha: (value: string | Buffer) => string;
+export declare function manifest(root: string, paths: readonly string[]): Manifest;
+export declare const manifestDigest: (value: Manifest) => string;
+export declare const equalManifest: (a: Manifest, b: Manifest) => boolean;
+export declare function markUncertainProtocolResult(result: HostProcessResult): void;
+export declare function protocolReceiptUncertain(receipt: ExecutionReceipt): boolean;
+/** Only the host runner calls this. There is no tool or JSON registration path. */
+export declare function registerStructuredObservation(result: HostProcessResult, observation: ProtocolObservation): void;
+export declare function retainProtocolResult(receipt: ExecutionReceipt, result: HostProcessResult): void;
+export declare function issueProtocolReceipt(db: SqliteDatabase, state: ProtocolState, receipt: ExecutionReceipt, runtimeDigest: string): ProtocolReceipt;
+export declare function validateProtocolReceipt(db: SqliteDatabase, state: ProtocolState, receipt: ProtocolReceipt): void;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/dsh/guardrail/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../../src/dsh/guardrail/evidence.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEzD,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAEtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAmB,KAAK,QAAQ,EAAE,KAAK,mBAAmB,EAAE,KAAK,eAAe,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACnI,eAAO,MAAM,GAAG,GAAI,OAAO,MAAM,GAAG,MAAM,WAAqD,CAAA;AAC/F,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,QAAQ,CAwBzE;AACD,eAAO,MAAM,cAAc,GAAI,OAAO,QAAQ,WAAgC,CAAA;AAC9E,eAAO,MAAM,aAAa,GAAI,GAAG,QAAQ,EAAE,GAAG,QAAQ,YAA4C,CAAA;AAGlG,wBAAgB,2BAA2B,CAAC,MAAM,EAAC,iBAAiB,GAAE,IAAI,CAA6G;AACvL,wBAAgB,wBAAwB,CAAC,OAAO,EAAC,gBAAgB,GAAE,OAAO,CAAyF;AAEnK,mFAAmF;AACnF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,iBAAiB,EAAE,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAA6I;AAC7P,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAA2E;AAC3K,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,GAAG,eAAe,CAgBhJ;AACD,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAMhH"}

package/dist/dsh/guardrail/evidence.js

@@ -0,0 +1,101 @@
+import { createHash } from 'node:crypto';
+import { lstatSync, readFileSync, realpathSync, openSync, closeSync, fstatSync, constants } from 'node:fs';
+import path from 'node:path';
+import { canonicalContentHash } from '../../serialization/validate.js';
+import { isHostExecutionResult } from '../execution-result.js';
+import { authorizeTaskLease, recordTaskEvidence } from '../task-state.js';
+import { PROTOCOL_ISSUER } from './contracts.js';
+export const sha = (value) => createHash('sha256').update(value).digest('hex');
+export function manifest(root, paths) {
+    if (realpathSync(root) !== root || paths.length > 64)
+        throw Error('Protocol source root/manifest is invalid');
+    const result = {};
+    let bytes = 0;
+    for (const relative of [...paths].sort()) {
+        if (path.isAbsolute(relative) || relative.includes('\\') || relative.split('/').some(part => !part || part === '.' || part === '..'))
+            throw Error('Protocol path escapes its scope');
+        let current = root;
+        for (const [index, part] of relative.split('/').entries()) {
+            current = path.join(current, part);
+            let st;
+            try {
+                st = lstatSync(current);
+            }
+            catch (error) {
+                if (error.code === 'ENOENT') {
+                    if (index !== relative.split('/').length - 1)
+                        throw Error('Create protocol parent directories before binding');
+                    result[relative] = null;
+                    break;
+                }
+                throw error;
+            }
+            if (st.isSymbolicLink())
+                throw Error('Protocol paths cannot contain symlinks');
+            if (index < relative.split('/').length - 1) {
+                if (!st.isDirectory())
+                    throw Error('Protocol parent is not a directory');
+                continue;
+            }
+            if (!st.isFile() || st.nlink !== 1 || st.size > 8 * 1024 * 1024)
+                throw Error('Protocol input must be a bounded regular single-link file');
+            const fd = openSync(current, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+            try {
+                const actual = fstatSync(fd);
+                if (actual.dev !== st.dev || actual.ino !== st.ino || !actual.isFile() || actual.nlink !== 1)
+                    throw Error('Protocol source changed while opening');
+                const data = readFileSync(fd);
+                bytes += data.length;
+                if (bytes > 64 * 1024 * 1024)
+                    throw Error('Protocol manifest byte limit');
+                result[relative] = canonicalContentHash({ bytes: sha(data), mode: actual.mode & 0o7777 });
+            }
+            finally {
+                closeSync(fd);
+            }
+        }
+    }
+    return result;
+}
+export const manifestDigest = (value) => canonicalContentHash(value);
+export const equalManifest = (a, b) => manifestDigest(a) === manifestDigest(b);
+const structured = new WeakMap();
+const uncertainResults = new WeakSet();
+export function markUncertainProtocolResult(result) { if (!isHostExecutionResult(result))
+    throw Error('Missing host result identity'); uncertainResults.add(result); }
+export function protocolReceiptUncertain(receipt) { const result = processResults.get(receipt); return !!result && uncertainResults.has(result); }
+const processResults = new WeakMap();
+/** Only the host runner calls this. There is no tool or JSON registration path. */
+export function registerStructuredObservation(result, observation) { if (!isHostExecutionResult(result))
+    throw Error('Missing host result identity'); structured.set(result, Object.freeze({ ...observation })); }
+export function retainProtocolResult(receipt, result) { if (isHostExecutionResult(result))
+    processResults.set(receipt, result); }
+export function issueProtocolReceipt(db, state, receipt, runtimeDigest) {
+    authorizeTaskLease(db, state.lease);
+    const result = processResults.get(receipt), observation = result && structured.get(result);
+    const stored = db.prepare("SELECT receipt_json FROM dsh_owned_operations WHERE operation_id=? AND run_id=? AND state='completed'").get(receipt.operationId, state.lease.taskId);
+    if (!stored || !result || !observation || canonicalContentHash(JSON.parse(stored.receipt_json)) !== canonicalContentHash(receipt) || receipt.authority !== 'current' || receipt.taskAuthority?.revision !== state.lease.revision || receipt.taskAuthority?.generation !== state.lease.generation)
+        throw Error('Protocol receipt lacks current host-owned provenance');
+    if (observation.operationId !== receipt.operationId || observation.runtimeDigest !== runtimeDigest || runtimeDigest !== state.runtimeDigest || !observation.complete || !result.value.outputComplete || !result.value.processStarted || result.value.timedOut || result.value.aborted || result.value.signal !== null)
+        throw Error('Protocol test observation is incomplete, cancelled or stale');
+    if (!equalManifest(state.source, manifest(state.lease.repositoryRoot, state.sourcePaths)) || !equalManifest(state.tests, manifest(state.lease.repositoryRoot, state.recipe.testPaths)))
+        throw Error('Protocol source/tests changed during test execution; explicitly amend the unit');
+    const eligible = observation.explicit > 0 && observation.tests > 0 && observation.skipped === 0 && observation.todo === 0 && observation.cancelled === 0 && observation.otherFailures === 0;
+    const outcome = eligible && observation.failed > 0 && observation.assertionFailures === observation.failed && result.value.exitCode === 1 ? 'assertion-failure'
+        : eligible && observation.failed === 0 && observation.passed === observation.tests && result.value.exitCode === 0 ? 'passed' : 'setup-error';
+    const value = { issuer: PROTOCOL_ISSUER, id: receipt.operationId, task: { ...state.lease }, recipeId: state.recipeId, generation: state.generation,
+        sourceDigest: manifestDigest(state.source), testDigest: manifestDigest(state.tests), commandDigest: sha(state.command), runtimeDigest,
+        environmentDigest: observation.environmentDigest, ownedReceiptDigest: canonicalContentHash(receipt), observationDigest: canonicalContentHash(observation), outputDigest: sha(result.content.map(block => block.text).join('\n')), outcome, assertions: outcome === 'assertion-failure' ? observation.assertionFailures : outcome === 'passed' ? observation.passed : 0, exit: result.value.exitCode ?? 70 };
+    const proof = { ...value, digest: canonicalContentHash(value) };
+    recordTaskEvidence(db, state.lease, { ref: `protocol-observation:${proof.id}`, kind: 'verification', generation: state.lease.generation, verified: false, details: proof });
+    return proof;
+}
+export function validateProtocolReceipt(db, state, receipt) {
+    authorizeTaskLease(db, state.lease);
+    const { digest, ...body } = receipt;
+    const witness = db.prepare("SELECT details_json FROM ledger_task_evidence WHERE run_id=? AND evidence_ref=? AND generation=? AND verified=0 AND kind='verification'").get(state.lease.taskId, `protocol-observation:${receipt.id}`, state.lease.generation);
+    const owned = db.prepare("SELECT receipt_json FROM dsh_owned_operations WHERE operation_id=? AND run_id=? AND state='completed'").get(receipt.id, state.lease.taskId);
+    if (!owned || canonicalContentHash(JSON.parse(owned.receipt_json)) !== receipt.ownedReceiptDigest || receipt.issuer !== PROTOCOL_ISSUER || receipt.runtimeDigest !== state.runtimeDigest || receipt.recipeId !== state.recipeId || receipt.generation !== state.generation || canonicalContentHash(receipt.task) !== canonicalContentHash(state.lease) || receipt.commandDigest !== sha(state.command) || receipt.testDigest !== manifestDigest(state.tests) || digest !== canonicalContentHash(body) || !witness || canonicalContentHash(JSON.parse(witness.details_json)) !== canonicalContentHash(receipt))
+        throw Error('Protocol receipt issuer, task, revision, generation or binding is invalid');
+}
+//# sourceMappingURL=evidence.js.map

package/dist/dsh/guardrail/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/dsh/guardrail/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC1G,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,EAAE,qBAAqB,EAA0B,MAAM,wBAAwB,CAAA;AACtF,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAEzE,OAAO,EAAE,eAAe,EAAqF,MAAM,gBAAgB,CAAA;AACnI,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAAsB,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/F,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAwB;IAC7D,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7G,MAAM,MAAM,GAAa,EAAE,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,CAAA;IAC1C,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;YAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACpL,IAAI,OAAO,GAAG,IAAI,CAAA;QAClB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1D,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAClC,IAAI,EAAE,CAAA;YACN,IAAI,CAAC;gBAAC,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAAC,IAAI,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;wBAAE,MAAM,KAAK,CAAC,mDAAmD,CAAC,CAAC;oBAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;oBAAC,MAAK;gBAAC,CAAC;gBAAC,MAAM,KAAK,CAAA;YAAC,CAAC;YACxQ,IAAI,EAAE,CAAC,cAAc,EAAE;gBAAE,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAA;YAC9E,IAAI,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE;oBAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAClI,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,KAAK,CAAC,2DAA2D,CAAC,CAAA;YACzI,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAA;YAC9E,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;gBAC5B,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAA;gBAClJ,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;gBAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAA;gBACnD,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;oBAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAA;gBACzE,MAAM,CAAC,QAAQ,CAAC,GAAG,oBAAoB,CAAC,EAAC,KAAK,EAAC,GAAG,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,MAAM,CAAC,IAAI,GAAG,MAAM,EAAC,CAAC,CAAA;YACtF,CAAC;oBAAS,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAA;YAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AACD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAW,EAAE,CAAW,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,CAAA;AAClG,MAAM,UAAU,GAAG,IAAI,OAAO,EAA+B,CAAA;AAC7D,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAAU,CAAA;AAC9C,MAAM,UAAU,2BAA2B,CAAC,MAAwB,IAAQ,IAAG,CAAC,qBAAqB,CAAC,MAAM,CAAC;IAAC,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAA,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA,CAAA,CAAC;AACvL,MAAM,UAAU,wBAAwB,CAAC,OAAwB,IAAW,MAAM,MAAM,GAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA,OAAO,CAAC,CAAC,MAAM,IAAE,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA,CAAA,CAAC;AACnK,MAAM,cAAc,GAAG,IAAI,OAAO,EAA6B,CAAA;AAC/D,mFAAmF;AACnF,MAAM,UAAU,6BAA6B,CAAC,MAAyB,EAAE,WAAgC,IAAU,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;IAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,WAAW,EAAC,CAAC,CAAC,CAAA,CAAC,CAAC;AAC7P,MAAM,UAAU,oBAAoB,CAAC,OAAyB,EAAE,MAAyB,IAAU,IAAI,qBAAqB,CAAC,MAAM,CAAC;IAAE,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA,CAAC,CAAC;AAC3K,MAAM,UAAU,oBAAoB,CAAC,EAAkB,EAAE,KAAoB,EAAE,OAAyB,EAAE,aAAqB;IAC7H,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1F,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAC,GAAG,CAAwB,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACtM,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,oBAAoB,CAAC,OAAc,CAAC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,EAAE,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,aAAa,EAAE,UAAU,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU;QAAE,MAAM,KAAK,CAAC,sDAAsD,CAAC,CAAA;IAC5W,IAAI,WAAW,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC,aAAa,KAAK,aAAa,IAAI,aAAa,KAAK,KAAK,CAAC,aAAa,IAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,6DAA6D,CAAC,CAAA;IACjY,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,KAAK,CAAC,gFAAgF,CAAC,CAAA;IACrR,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,GAAG,CAAC,IAAI,WAAW,CAAC,KAAK,GAAG,CAAC,IAAI,WAAW,CAAC,OAAO,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,WAAW,CAAC,SAAS,KAAK,CAAC,IAAI,WAAW,CAAC,aAAa,KAAK,CAAC,CAAA;IAC3L,MAAM,OAAO,GAAG,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,iBAAiB,KAAK,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB;QAC7J,CAAC,CAAC,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAA;IAC9I,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;QAC9I,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,aAAa;QACrI,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,OAAc,CAAC,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,WAAkB,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,KAAK,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAW,CAAA;IACla,MAAM,KAAK,GAAoB,EAAC,GAAG,KAAK,EAAC,MAAM,EAAC,oBAAoB,CAAC,KAAY,CAAC,EAAC,CAAA;IACnF,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,EAAC,GAAG,EAAC,wBAAwB,KAAK,CAAC,EAAE,EAAE,EAAC,IAAI,EAAC,cAAc,EAAC,UAAU,EAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAC,QAAQ,EAAC,KAAK,EAAC,OAAO,EAAC,KAAY,EAAC,CAAC,CAAA;IACvK,OAAO,KAAK,CAAA;AACd,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,EAAkB,EAAE,KAAoB,EAAE,OAAwB;IACxG,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACnC,MAAM,EAAC,MAAM,EAAC,GAAG,IAAI,EAAC,GAAC,OAAO,CAAA;IAC9B,MAAM,OAAO,GAAC,EAAE,CAAC,OAAO,CAAC,yIAAyI,CAAC,CAAC,GAAG,CAAwB,KAAK,CAAC,KAAK,CAAC,MAAM,EAAC,wBAAwB,OAAO,CAAC,EAAE,EAAE,EAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC9Q,MAAM,KAAK,GAAC,EAAE,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAC,GAAG,CAAwB,OAAO,CAAC,EAAE,EAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACzL,IAAG,CAAC,KAAK,IAAE,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAG,OAAO,CAAC,kBAAkB,IAAE,OAAO,CAAC,MAAM,KAAG,eAAe,IAAI,OAAO,CAAC,aAAa,KAAG,KAAK,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,KAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAG,KAAK,CAAC,UAAU,IAAI,oBAAoB,CAAC,OAAO,CAAC,IAAW,CAAC,KAAG,oBAAoB,CAAC,KAAK,CAAC,KAAY,CAAC,IAAI,OAAO,CAAC,aAAa,KAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,KAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,KAAG,oBAAoB,CAAC,IAAW,CAAC,IAAI,CAAC,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,KAAG,oBAAoB,CAAC,OAAc,CAAC;QAAE,MAAM,KAAK,CAAC,2EAA2E,CAAC,CAAA;AAC5qB,CAAC"}