niceeval 0.12.2-canary.31 → 0.13.1

package/dist/runner/gate-lease.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"gate-lease.js","sourceRoot":"","sources":["gate-lease.ts"],"names":[],"mappings":";;;AA0FA,0CAEC;AAKD,oDAKC;AAED,gDAKC;AA4BD,oEAoDC;AA0DD,sDAyDC;AAED,8DAGC;AAED,8DAEC;AAzTD,6DAA6D;AAC7D,2DAA2D;AAC3D,0DAA0D;AAC1D,qEAAqE;AACrE,yBAAyB;AACzB,+CAAoE;AACpE,yCAAiC;AACjC,mCAAuC;AACvC,uEAA2K;AAC3K,uCAA6F;AAwB7F,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACvE,CAAC,CAAC,KAA2C;QAC7C,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC;AACD,SAAS,iBAAiB,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AACjF,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAClF,CAAC;AACD,SAAS,WAAW,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3E,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QACnG,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC;AACD,SAAS,MAAM,CAAI,SAA8C;IAC7D,OAAO,eAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC;AACD,SAAS,YAAY,CAAI,IAAY,EAAE,KAAa,EAAE,GAAsD;IACxG,OAAO,eAAM,CAAC,MAAM,CAAC,eAAM,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,eAAI,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACxK,CAAC;AACD,6CAA6C;AAC7C,SAAS,qBAAqB,CAAC,KAAc,EAAE,WAG3C,EAAE;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS;QACpB,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;QACvC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACpB,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC;QACpC,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC;QAC9B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC;QAC9B,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC;QAChC,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,CAAC;QACtF,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO;QACH,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;KAClC,CAAC;AACN,CAAC;AACD,0BAA0B;AACb,QAAA,gCAAgC,GAAG,yCAA+B,CAAC;AAChF,kDAAkD;AACrC,QAAA,oBAAoB,GAAG,6BAAmB,CAAC;AACxD,SAAgB,eAAe,CAAC,YAAoB;IAChD,OAAO,IAAA,oBAAU,EAAC,YAAY,CAAC,CAAC;AACpC,CAAC;AACD,SAAS,gBAAgB,CAAC,YAAoB,EAAE,IAAY;IACxD,OAAO,IAAA,qCAAe,EAAC,QAAQ,YAAY,IAAI,IAAI,EAAE,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvG,CAAC;AACD,0CAA0C;AAC1C,SAAgB,oBAAoB,CAAC,YAAoB,EAAE,YAAoB;IAC3E,OAAO,IAAA,6CAAuB,EAAC,eAAe,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO;SACpH,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAAC;SACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AACD,2BAA2B;AAC3B,SAAgB,kBAAkB,CAAC,MAAuB,EAAE,KAAa;IACrE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QACzB,OAAO,IAAI,CAAC;IAChB,OAAO,KAAK,GAAG,WAAW,GAAG,4BAAoB,CAAC;AACtD,CAAC;AACD,gCAAgC;AAChC,SAAS,UAAU,CAAC,CAAS;IACzB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AACD,oCAAoC;AACpC,SAAS,kBAAkB,CAAC,cAAsB,EAAE,MAAkC,EAAE,KAAa;IACjG,IAAI,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC;YAChC,SAAS;QACb,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,QAAQ,GAAG,CAAC;YACZ,CAAC,GAAG,QAAQ,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC;AACD,uCAAuC;AACvC,SAAS,8BAA8B,CAAC,GAAW,EAAE,EAAU,EAAE,MAAuB;IACpF,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,gBAAK,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,eAAM,CAAC,QAAQ,CAAC,IAAA,oCAAc,EAAC,GAAG,CAAC,CAAC,EAAE,eAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACjZ,CAAC;AACD,0DAA0D;AAC1D,SAAS,YAAY,CAAC,MAAuB,EAAE,IAAqB;IAChE,OAAO,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC;AACvG,CAAC;AACD,yCAAyC;AACzC,SAAgB,4BAA4B,CAAC,YAAoB,EAAE,YAAoB,EAAE,cAAsB,EAAE,QAGhH,EAAE,KAAa;IACZ,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC1C,OAAO,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvB,MAAM,UAAU,GAAG,kBAAkB,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;QACtH,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,CAAC,IAAY,EAAmB,EAAE,CAAC,CAAC;YAClD,YAAY;YACZ,IAAI;YACJ,SAAS,EAAE,UAAU,CAAC,cAAc,CAAC;YACrC,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,MAAuB,EAAE,OAGxD,EAAoB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACzE,4BAA4B;QAC5B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,CAAC,8BAA8B,CAAC,GAAG,EAAE,gBAAgB,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC3F,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;QACL,CAAC;QACD,wCAAwC;QACxC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,EAAE,GAAG,gBAAgB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAA,yCAAmB,EAAC,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACrH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAA,0CAAoB,EAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACvC,SAAS;gBACb,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,8BAA8B,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;oBACzD,SAAS;gBACb,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC;gBACnC,SAAS;YACb,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAA,0CAAoB,EAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvC,SAAS;YACb,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,8BAA8B,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;gBACzD,SAAS;YACb,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/H,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACP,CAAC;AACD,sCAAsC;AACtC,SAAS,oBAAoB,CAAC,GAAW,EAAE,EAAU,EAAE,IAAqB,EAAE,KAAa,EAAE,UAAyB;IAClH,IAAI,UAAU,EAAE;QACZ,OAAO,eAAM,CAAC,IAAI,CAAC;IACvB,OAAO,IAAA,yCAAmB,EAAC,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/J,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE;YACrE,OAAO,eAAM,CAAC,IAAI,CAAC;QACvB,OAAO,IAAA,0CAAoB,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AACD,SAAS,cAAc,CAAC,MAA+B;IACnD,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;IAC9B,IAAI,MAAM,YAAY,KAAK;QACvB,OAAO,MAAM,CAAC;IAClB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACxE,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;IACxB,OAAO,GAAG,CAAC;AACf,CAAC;AACD,SAAS,UAAU,CAAC,MAA+B;IAC/C,OAAO,eAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE;QACzC,IAAI,MAAM,KAAK,SAAS;YACpB,OAAO;QACX,MAAM,OAAO,GAAG,GAAS,EAAE;YACvB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE;YACvB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,eAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;YACV,OAAO;QACX,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACP,CAAC;AACD,SAAS,kBAAkB,CAAC,EAAU,EAAE,MAA+B;IACnE,IAAI,MAAM,EAAE,OAAO;QACf,OAAO,eAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,OAAO,eAAM,CAAC,SAAS,CAAC,eAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,MAAM,CAAC,CAAC;AACtF,CAAC;AAUD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwC,CAAC;AAC7D,SAAS,OAAO,CAAC,YAAoB,EAAE,EAAU;IAC7C,OAAO,GAAG,YAAY,IAAI,EAAE,EAAE,CAAC;AACnC,CAAC;AACD,yDAAyD;AACzD,SAAgB,qBAAqB,CAAC,YAAoB,EAAE,YAAoB,EAAE,cAAsB,EAAE,QAGzG,EAAE,OAKC,EAAE;IACF,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,IAAI,wCAAgC,CAAC;IACzF,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,mBAAmB,CAAC;IAClE,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,WAAW,GAAG,GAKR,EAAE,CAAC,eAAM,CAAC,OAAO,CAAC,GAAG,EAAE;QAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YACpB,OAAO,eAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,OAAO,4BAA4B,CAAC,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACjI,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;gBAC1B,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,WAAW;gBAC1B,CAAC,CAAC,eAAM,CAAC,IAAI;gBACb,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;oBACf,WAAW,GAAG,IAAI,CAAC;oBACnB,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,CAAC,CAAC,CAAC;YACP,OAAO,UAAU,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,eAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC7H,CAAC,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IACH,OAAO,eAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE;QACrI,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,gBAAgB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,SAAS,GAAG,eAAM,CAAC,OAAO,CAAC,eAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,eAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,eAAM,CAAC,eAAe,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;aAClM,IAAI,CAAC,eAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,oEAAoE;QACpE,mEAAmE;QACnE,sEAAsE;QACtE,kCAAkC;QAClC,OAAO,eAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,OAAO,GAAG,eAAM,CAAC,eAAe,CAAC,eAAM,CAAC,OAAO,CAAC,GAAG,EAAE;gBACvD,IAAI,QAAQ;oBACR,OAAO,eAAM,CAAC,IAAI,CAAC;gBACvB,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjB,OAAO,cAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,IAAA,yCAAmB,EAAC,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,eAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC;oBAClO,CAAC,CAAC,eAAM,CAAC,IAAI;oBACb,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,aAAE,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,IAAA,oCAAc,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClH,CAAC,CAAC,CAAC,CAAC;YACJ,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC9G,CAAC,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AACD,6BAA6B;AAC7B,SAAgB,yBAAyB;IACrC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,OAAO,eAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3H,CAAC;AACD,qCAAqC;AACrC,SAAgB,yBAAyB;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC;AACrB,CAAC","sourcesContent":["// 实验闸租约:把实验级 `maxConcurrency` 的 N 个名额做成跨 Invocation 共用的逐槽租约。\n// 与 ./lock.ts 的用例锁同一套文件纪律(O_EXCL 独占创建、心跳续租、过期判据、rename 接管、\n// 释放即删除),建在 ../shared/entry-file-store.ts 的原语之上,不复制第三份纪律。\n// 契约见 docs/feature/experiments/architecture.md「并发 Invocation:用例锁」末条与\n// docs/runner.md#调度有界并发。\nimport { mkdir, open, rm, type FileHandle } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { Effect, Fiber } from \"effect\";\nimport { claimEntryFileEffect, fsyncDirEffect, readAllEntryFilesEffect, readEntryFileEffect, slugHashEntryId, writeEntryFileEffect, } from \"../shared/entry-file-store.ts\";\nimport { CASE_LOCK_EXPIRY_MS, CASE_LOCK_HEARTBEAT_INTERVAL_MS, locksDirOf } from \"./lock.ts\";\n/** 逐槽租约文件的 JSON 形状。身份的权威在内容,文件名只须无碰撞、不承载解析。 */\nexport interface GateLeaseRecord {\n    experimentId: string;\n    /** 槽位序号,取值 0..N-1。 */\n    slot: number;\n    /** 本持有者 resolved 的名额上限 N。用于 min-N:生效名额取在场声明的最小值。 */\n    declaredN: number;\n    pid: number;\n    host: string;\n    startedAt: string; // ISO\n    heartbeatAt: string; // ISO\n}\ntype GateSlotAcquired = {\n    kind: \"acquired\";\n    slot: number;\n    takenOver: boolean;\n    takenOverFrom?: GateLeaseRecord;\n    record: GateLeaseRecord;\n};\ntype GateSlotAttempt = GateSlotAcquired | {\n    kind: \"full\";\n    holders: GateLeaseRecord[];\n};\nfunction recordOf(value: unknown): globalThis.Record<string, unknown> | undefined {\n    return typeof value === \"object\" && value !== null && !Array.isArray(value)\n        ? value as globalThis.Record<string, unknown>\n        : undefined;\n}\nfunction isPositiveInteger(value: unknown): value is number {\n    return typeof value === \"number\" && Number.isSafeInteger(value) && value > 0;\n}\nfunction isSlot(value: unknown): value is number {\n    return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\nfunction isTimestamp(value: unknown): value is string {\n    return typeof value === \"string\" && Number.isFinite(Date.parse(value));\n}\nfunction errnoCode(cause: unknown): string | undefined {\n    return typeof cause === \"object\" && cause !== null && \"code\" in cause && typeof cause.code === \"string\"\n        ? cause.code\n        : undefined;\n}\nfunction nodeIo<A>(operation: (signal: AbortSignal) => Promise<A>): Effect.Effect<A, unknown> {\n    return Effect.tryPromise({ try: operation, catch: (cause) => cause });\n}\nfunction withOpenFile<A>(path: string, flags: string, use: (handle: FileHandle) => Effect.Effect<A, unknown>): Effect.Effect<A, unknown> {\n    return Effect.scoped(Effect.acquireRelease(nodeIo(() => open(path, flags)), (handle) => nodeIo(() => handle.close()).pipe(Effect.orDie)).pipe(Effect.flatMap(use)));\n}\n/** 验证租约的全部持久字段；按槽读取时还会核对身份，防止错位记录冒充当前持有者。 */\nfunction decodeGateLeaseRecord(value: unknown, expected: {\n    experimentId?: string;\n    slot?: number;\n} = {}): GateLeaseRecord | undefined {\n    const record = recordOf(value);\n    if (record === undefined ||\n        typeof record.experimentId !== \"string\" ||\n        !isSlot(record.slot) ||\n        !isPositiveInteger(record.declaredN) ||\n        !isPositiveInteger(record.pid) ||\n        typeof record.host !== \"string\" ||\n        !isTimestamp(record.startedAt) ||\n        !isTimestamp(record.heartbeatAt) ||\n        (expected.experimentId !== undefined && record.experimentId !== expected.experimentId) ||\n        (expected.slot !== undefined && record.slot !== expected.slot)) {\n        return undefined;\n    }\n    return {\n        experimentId: record.experimentId,\n        slot: record.slot,\n        declaredN: record.declaredN,\n        pid: record.pid,\n        host: record.host,\n        startedAt: record.startedAt,\n        heartbeatAt: record.heartbeatAt,\n    };\n}\n/** 持有者续租心跳的周期。与用例锁同参数。 */\nexport const GATE_LEASE_HEARTBEAT_INTERVAL_MS = CASE_LOCK_HEARTBEAT_INTERVAL_MS;\n/** `heartbeatAt` 落后当前时间超过这个阈值(三个心跳周期)即视为持有者已死。 */\nexport const GATE_LEASE_EXPIRY_MS = CASE_LOCK_EXPIRY_MS;\nexport function gateLeasesDirOf(niceevalRoot: string): string {\n    return locksDirOf(niceevalRoot);\n}\nfunction gateLeaseEntryId(experimentId: string, slot: number): string {\n    return slugHashEntryId(`gate-${experimentId}-${slot}`, [\"gate-lease\", experimentId, String(slot)]);\n}\n/** Effect 主 API:读取该实验当前在场的全部租约记录,无副作用。 */\nexport function readGateLeasesEffect(niceevalRoot: string, experimentId: string): Effect.Effect<GateLeaseRecord[], unknown> {\n    return readAllEntryFilesEffect(gateLeasesDirOf(niceevalRoot), decodeGateLeaseRecord).pipe(Effect.map((entries) => entries\n        .map(({ entry }) => entry)\n        .filter((entry) => entry.experimentId === experimentId)\n        .sort((a, b) => a.slot - b.slot)));\n}\n/** 过期判据:只看心跳时间戳,不看 pid。 */\nexport function isGateLeaseExpired(record: GateLeaseRecord, nowMs: number): boolean {\n    const heartbeatMs = Date.parse(record.heartbeatAt);\n    if (Number.isNaN(heartbeatMs))\n        return true;\n    return nowMs - heartbeatMs > GATE_LEASE_EXPIRY_MS;\n}\n/** 本进程声明的 N:非法值收敛到 1，避免永久满位。 */\nfunction normalizeN(n: number): number {\n    const floored = Math.floor(n);\n    return Number.isFinite(floored) && floored >= 1 ? floored : 1;\n}\n/** min-N:有效名额取自己声明和所有新鲜租约声明的最小值。 */\nfunction effectiveSlotCount(maxConcurrency: number, leases: readonly GateLeaseRecord[], nowMs: number): number {\n    let n = normalizeN(maxConcurrency);\n    for (const lease of leases) {\n        if (isGateLeaseExpired(lease, nowMs))\n            continue;\n        const declared = normalizeN(lease.declaredN);\n        if (declared < n)\n            n = declared;\n    }\n    return n;\n}\n/** O_EXCL 独占创建租约文件;存在时返回 false,不覆盖。 */\nfunction createLeaseFileExclusiveEffect(dir: string, id: string, record: GateLeaseRecord): Effect.Effect<boolean, unknown> {\n    const path = join(dir, `${id}.json`);\n    return nodeIo(() => mkdir(dir, { recursive: true })).pipe(Effect.zipRight(withOpenFile(path, \"wx\", (handle) => nodeIo(() => handle.writeFile(JSON.stringify(record, null, 2), \"utf-8\")).pipe(Effect.zipRight(nodeIo(() => handle.sync()))))), Effect.zipRight(fsyncDirEffect(dir)), Effect.as(true), Effect.catchAll((cause) => errnoCode(cause) === \"EEXIST\" ? Effect.succeed(false) : Effect.fail(cause)));\n}\n/** 同一持有者判定:身份(pid/host)加上取位时刻——接管重建后 `startedAt` 必然不同。 */\nfunction isSameHolder(record: GateLeaseRecord, mine: GateLeaseRecord): boolean {\n    return record.pid === mine.pid && record.host === mine.host && record.startedAt === mine.startedAt;\n}\n/** 一次非阻塞取位:空槽 O_EXCL 创建，满位时只接管过期或损坏槽。 */\nexport function tryAcquireGateSlotOnceEffect(niceevalRoot: string, experimentId: string, maxConcurrency: number, identity: {\n    pid: number;\n    host: string;\n}, nowMs: number): Effect.Effect<GateSlotAttempt, unknown> {\n    const dir = gateLeasesDirOf(niceevalRoot);\n    return Effect.gen(function* () {\n        const effectiveN = effectiveSlotCount(maxConcurrency, yield* readGateLeasesEffect(niceevalRoot, experimentId), nowMs);\n        const stamp = new Date(nowMs).toISOString();\n        const recordFor = (slot: number): GateLeaseRecord => ({\n            experimentId,\n            slot,\n            declaredN: normalizeN(maxConcurrency),\n            pid: identity.pid,\n            host: identity.host,\n            startedAt: stamp,\n            heartbeatAt: stamp,\n        });\n        const acquired = (slot: number, record: GateLeaseRecord, options: {\n            takenOver: boolean;\n            takenOverFrom?: GateLeaseRecord;\n        }): GateSlotAcquired => ({ kind: \"acquired\", slot, record, ...options });\n        // 第一趟不预读占用情况：O_EXCL 本身就是判据。\n        for (let slot = 0; slot < effectiveN; slot += 1) {\n            const record = recordFor(slot);\n            if (yield* createLeaseFileExclusiveEffect(dir, gateLeaseEntryId(experimentId, slot), record)) {\n                return acquired(slot, record, { takenOver: false });\n            }\n        }\n        // 第二趟只对坏条目或过期条目执行 rename 认领；输掉竞态后继续下一槽。\n        for (let slot = 0; slot < effectiveN; slot += 1) {\n            const id = gateLeaseEntryId(experimentId, slot);\n            const current = yield* readEntryFileEffect(dir, id, (value) => decodeGateLeaseRecord(value, { experimentId, slot }));\n            if (current === undefined) {\n                if (!(yield* claimEntryFileEffect(dir, id)))\n                    continue;\n                const record = recordFor(slot);\n                if (!(yield* createLeaseFileExclusiveEffect(dir, id, record)))\n                    continue;\n                return acquired(slot, record, { takenOver: false });\n            }\n            if (!isGateLeaseExpired(current, nowMs))\n                continue;\n            if (!(yield* claimEntryFileEffect(dir, id)))\n                continue;\n            const record = recordFor(slot);\n            if (!(yield* createLeaseFileExclusiveEffect(dir, id, record)))\n                continue;\n            return acquired(slot, record, { takenOver: true, takenOverFrom: current });\n        }\n        const holders = (yield* readGateLeasesEffect(niceevalRoot, experimentId)).filter((lease) => !isGateLeaseExpired(lease, nowMs));\n        return { kind: \"full\", holders };\n    });\n}\n/** 续租只改 heartbeat；槽被接管后不写、不删别人的租约。 */\nfunction renewHeartbeatEffect(dir: string, id: string, mine: GateLeaseRecord, nowMs: number, isReleased: () => boolean): Effect.Effect<void, unknown> {\n    if (isReleased())\n        return Effect.void;\n    return readEntryFileEffect(dir, id, (value) => decodeGateLeaseRecord(value, { experimentId: mine.experimentId, slot: mine.slot })).pipe(Effect.flatMap((current) => {\n        if (current === undefined || !isSameHolder(current, mine) || isReleased())\n            return Effect.void;\n        return writeEntryFileEffect(dir, id, { ...current, heartbeatAt: new Date(nowMs).toISOString() });\n    }));\n}\nfunction makeAbortError(signal: AbortSignal | undefined): Error {\n    const reason = signal?.reason;\n    if (reason instanceof Error)\n        return reason;\n    const err = new Error(\"aborted while waiting for experiment gate slot\");\n    err.name = \"AbortError\";\n    return err;\n}\nfunction awaitAbort(signal: AbortSignal | undefined): Effect.Effect<never, Error> {\n    return Effect.async((resume, effectSignal) => {\n        if (signal === undefined)\n            return;\n        const cleanup = (): void => {\n            signal.removeEventListener(\"abort\", onAbort);\n            effectSignal.removeEventListener(\"abort\", cleanup);\n        };\n        const onAbort = (): void => {\n            cleanup();\n            resume(Effect.fail(makeAbortError(signal)));\n        };\n        if (signal.aborted) {\n            onAbort();\n            return;\n        }\n        signal.addEventListener(\"abort\", onAbort, { once: true });\n        effectSignal.addEventListener(\"abort\", cleanup, { once: true });\n    });\n}\nfunction delayOrAbortEffect(ms: number, signal: AbortSignal | undefined): Effect.Effect<void, Error> {\n    if (signal?.aborted)\n        return Effect.fail(makeAbortError(signal));\n    return Effect.raceFirst(Effect.sleep(ms), awaitAbort(signal)).pipe(Effect.asVoid);\n}\nexport interface GateLeaseEffectClaim {\n    readonly slot: number;\n    readonly release: Effect.Effect<void, unknown>;\n}\nexport interface AcquireGateSlotEffectResult {\n    claim: GateLeaseEffectClaim;\n    takenOver: boolean;\n    takenOverFrom?: GateLeaseRecord;\n}\nconst held = new Map<string, Effect.Effect<void, unknown>>();\nfunction heldKey(niceevalRoot: string, id: string): string {\n    return `${niceevalRoot} ${id}`;\n}\n/** 高层 Effect 入口:等待可中断；心跳顺序化，release 等正在飞的不可中断续租结束再删除。 */\nexport function acquireGateSlotEffect(niceevalRoot: string, experimentId: string, maxConcurrency: number, identity: {\n    pid: number;\n    host: string;\n}, opts: {\n    signal?: AbortSignal;\n    pollIntervalMs?: number;\n    heartbeatIntervalMs?: number;\n    onWaitStart?: (holders: GateLeaseRecord[]) => void;\n} = {}): Effect.Effect<AcquireGateSlotEffectResult, unknown> {\n    const heartbeatIntervalMs = opts.heartbeatIntervalMs ?? GATE_LEASE_HEARTBEAT_INTERVAL_MS;\n    const pollIntervalMs = opts.pollIntervalMs ?? heartbeatIntervalMs;\n    let waitStarted = false;\n    const acquireLoop = (): Effect.Effect<{\n        slot: number;\n        takenOver: boolean;\n        takenOverFrom?: GateLeaseRecord;\n        record: GateLeaseRecord;\n    }, unknown> => Effect.suspend(() => {\n        if (opts.signal?.aborted)\n            return Effect.fail(makeAbortError(opts.signal));\n        return tryAcquireGateSlotOnceEffect(niceevalRoot, experimentId, maxConcurrency, identity, Date.now()).pipe(Effect.flatMap((result) => {\n            if (result.kind === \"acquired\")\n                return Effect.succeed(result);\n            const reportWait = waitStarted\n                ? Effect.void\n                : Effect.sync(() => {\n                    waitStarted = true;\n                    opts.onWaitStart?.(result.holders);\n                });\n            return reportWait.pipe(Effect.zipRight(delayOrAbortEffect(pollIntervalMs, opts.signal)), Effect.zipRight(acquireLoop()));\n        }));\n    });\n    return Effect.uninterruptibleMask((restore) => restore(acquireLoop()).pipe(Effect.flatMap(({ slot, takenOver, takenOverFrom, record }) => {\n        const dir = gateLeasesDirOf(niceevalRoot);\n        const id = gateLeaseEntryId(experimentId, slot);\n        const key = heldKey(niceevalRoot, id);\n        let released = false;\n        const heartbeat = Effect.forever(Effect.sleep(heartbeatIntervalMs).pipe(Effect.zipRight(Effect.suspend(() => Effect.uninterruptible(renewHeartbeatEffect(dir, id, record, Date.now(), () => released)))\n            .pipe(Effect.ignore))));\n        // A child inherits the parent's interruptibility. This branch still\n        // runs under the acquisition mask, so restore the heartbeat before\n        // forking; otherwise release would wait forever while interrupting an\n        // uninterruptible sleeping fiber.\n        return Effect.forkDaemon(restore(heartbeat)).pipe(Effect.map((fiber) => {\n            const release = Effect.uninterruptible(Effect.suspend(() => {\n                if (released)\n                    return Effect.void;\n                released = true;\n                held.delete(key);\n                return Fiber.interrupt(fiber).pipe(Effect.zipRight(readEntryFileEffect(dir, id, (value) => decodeGateLeaseRecord(value, { experimentId, slot }))), Effect.flatMap((current) => current !== undefined && !isSameHolder(current, record)\n                    ? Effect.void\n                    : nodeIo(() => rm(join(dir, `${id}.json`), { force: true })).pipe(Effect.zipRight(fsyncDirEffect(dir)))));\n            }));\n            held.set(key, release);\n            return { claim: { slot, release }, takenOver, ...(takenOverFrom === undefined ? {} : { takenOverFrom }) };\n        }));\n    })));\n}\n/** 强清兜底:尽力释放当前进程持有的每一条租约。 */\nexport function drainHeldGateLeasesEffect(): Effect.Effect<number> {\n    const releases = [...held.values()];\n    return Effect.forEach(releases, (release) => Effect.exit(release), { discard: true }).pipe(Effect.as(releases.length));\n}\n/** 当前进程仍持有的实验闸租约数量，供退出清理与可观察状态汇总。 */\nexport function pendingHeldGateLeaseCount(): number {\n    return held.size;\n}\n"]}
+{"version":3,"file":"gate-lease.js","sourceRoot":"","sources":["gate-lease.ts"],"names":[],"mappings":";;;AA0FA,0CAEC;AAKD,oDAKC;AAED,gDAKC;AA4BD,oEAoDC;AAuED,sDAwDC;AAED,8DAGC;AAED,8DAEC;AArUD,6DAA6D;AAC7D,2DAA2D;AAC3D,0DAA0D;AAC1D,qEAAqE;AACrE,yBAAyB;AACzB,+CAAoE;AACpE,yCAAiC;AACjC,mCAA8C;AAC9C,uEAA2K;AAC3K,uCAA6F;AAwB7F,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACvE,CAAC,CAAC,KAA2C;QAC7C,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC;AACD,SAAS,iBAAiB,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AACjF,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAClF,CAAC;AACD,SAAS,WAAW,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3E,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QACnG,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC;AACD,SAAS,MAAM,CAAI,SAA8C;IAC7D,OAAO,eAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC;AACD,SAAS,YAAY,CAAI,IAAY,EAAE,KAAa,EAAE,GAAsD;IACxG,OAAO,eAAM,CAAC,MAAM,CAAC,eAAM,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,eAAI,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACxK,CAAC;AACD,6CAA6C;AAC7C,SAAS,qBAAqB,CAAC,KAAc,EAAE,WAG3C,EAAE;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS;QACpB,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;QACvC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACpB,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC;QACpC,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC;QAC9B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC;QAC9B,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC;QAChC,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,CAAC;QACtF,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO;QACH,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;KAClC,CAAC;AACN,CAAC;AACD,0BAA0B;AACb,QAAA,gCAAgC,GAAG,yCAA+B,CAAC;AAChF,kDAAkD;AACrC,QAAA,oBAAoB,GAAG,6BAAmB,CAAC;AACxD,SAAgB,eAAe,CAAC,YAAoB;IAChD,OAAO,IAAA,oBAAU,EAAC,YAAY,CAAC,CAAC;AACpC,CAAC;AACD,SAAS,gBAAgB,CAAC,YAAoB,EAAE,IAAY;IACxD,OAAO,IAAA,qCAAe,EAAC,QAAQ,YAAY,IAAI,IAAI,EAAE,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvG,CAAC;AACD,0CAA0C;AAC1C,SAAgB,oBAAoB,CAAC,YAAoB,EAAE,YAAoB;IAC3E,OAAO,IAAA,6CAAuB,EAAC,eAAe,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO;SACpH,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAAC;SACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AACD,2BAA2B;AAC3B,SAAgB,kBAAkB,CAAC,MAAuB,EAAE,KAAa;IACrE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QACzB,OAAO,IAAI,CAAC;IAChB,OAAO,KAAK,GAAG,WAAW,GAAG,4BAAoB,CAAC;AACtD,CAAC;AACD,gCAAgC;AAChC,SAAS,UAAU,CAAC,CAAS;IACzB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AACD,oCAAoC;AACpC,SAAS,kBAAkB,CAAC,cAAsB,EAAE,MAAkC,EAAE,KAAa;IACjG,IAAI,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC;YAChC,SAAS;QACb,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,QAAQ,GAAG,CAAC;YACZ,CAAC,GAAG,QAAQ,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC;AACD,uCAAuC;AACvC,SAAS,8BAA8B,CAAC,GAAW,EAAE,EAAU,EAAE,MAAuB;IACpF,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,gBAAK,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,eAAM,CAAC,QAAQ,CAAC,IAAA,oCAAc,EAAC,GAAG,CAAC,CAAC,EAAE,eAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACjZ,CAAC;AACD,0DAA0D;AAC1D,SAAS,YAAY,CAAC,MAAuB,EAAE,IAAqB;IAChE,OAAO,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC;AACvG,CAAC;AACD,yCAAyC;AACzC,SAAgB,4BAA4B,CAAC,YAAoB,EAAE,YAAoB,EAAE,cAAsB,EAAE,QAGhH,EAAE,KAAa;IACZ,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC1C,OAAO,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvB,MAAM,UAAU,GAAG,kBAAkB,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;QACtH,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,CAAC,IAAY,EAAmB,EAAE,CAAC,CAAC;YAClD,YAAY;YACZ,IAAI;YACJ,SAAS,EAAE,UAAU,CAAC,cAAc,CAAC;YACrC,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,MAAuB,EAAE,OAGxD,EAAoB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACzE,4BAA4B;QAC5B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,CAAC,8BAA8B,CAAC,GAAG,EAAE,gBAAgB,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC3F,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;QACL,CAAC;QACD,wCAAwC;QACxC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,EAAE,GAAG,gBAAgB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAA,yCAAmB,EAAC,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACrH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAA,0CAAoB,EAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACvC,SAAS;gBACb,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,8BAA8B,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;oBACzD,SAAS;gBACb,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC;gBACnC,SAAS;YACb,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAA,0CAAoB,EAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvC,SAAS;YACb,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,8BAA8B,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;gBACzD,SAAS;YACb,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/H,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACP,CAAC;AACD,sCAAsC;AACtC,SAAS,oBAAoB,CAAC,GAAW,EAAE,EAAU,EAAE,IAAqB,EAAE,KAAa,EAAE,UAAyB;IAClH,IAAI,UAAU,EAAE;QACZ,OAAO,eAAM,CAAC,IAAI,CAAC;IACvB,OAAO,IAAA,yCAAmB,EAAC,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/J,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE;YACrE,OAAO,eAAM,CAAC,IAAI,CAAC;QACvB,OAAO,IAAA,0CAAoB,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AACD,SAAS,cAAc,CAAC,MAA+B;IACnD,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;IAC9B,IAAI,MAAM,YAAY,KAAK;QACvB,OAAO,MAAM,CAAC;IAClB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACxE,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;IACxB,OAAO,GAAG,CAAC;AACf,CAAC;AACD,SAAS,UAAU,CAAC,MAA+B;IAC/C,IAAI,MAAM,KAAK,SAAS;QACpB,OAAO,eAAM,CAAC,KAAK,CAAC;IACxB,OAAO,eAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE;QACzC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,GAAS,EAAE;YACvB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC7D,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAS,EAAE;YACtB,IAAI,SAAS;gBACT,OAAO;YACX,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO,EAAE,CAAC;QACd,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE;YACvB,IAAI,SAAS;gBACT,OAAO;YACX,MAAM,EAAE,CAAC;YACT,MAAM,CAAC,eAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,GAAS,EAAE,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,YAAY,CAAC,OAAO;YACpB,aAAa,EAAE,CAAC;aACf,IAAI,MAAM,CAAC,OAAO;YACnB,OAAO,EAAE,CAAC;QACd,OAAO,eAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC;AACD,SAAS,kBAAkB,CAAC,EAAU,EAAE,MAA+B;IACnE,IAAI,MAAM,EAAE,OAAO;QACf,OAAO,eAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,OAAO,eAAM,CAAC,SAAS,CAAC,eAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,MAAM,CAAC,CAAC;AACtF,CAAC;AAUD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwC,CAAC;AAC7D,SAAS,OAAO,CAAC,YAAoB,EAAE,EAAU;IAC7C,OAAO,GAAG,YAAY,IAAI,EAAE,EAAE,CAAC;AACnC,CAAC;AACD,yDAAyD;AACzD,SAAgB,qBAAqB,CAAC,YAAoB,EAAE,YAAoB,EAAE,cAAsB,EAAE,QAGzG,EAAE,OAKC,EAAE;IACF,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,IAAI,wCAAgC,CAAC;IACzF,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,mBAAmB,CAAC;IAClE,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,WAAW,GAAG,GAKR,EAAE,CAAC,eAAM,CAAC,OAAO,CAAC,GAAG,EAAE;QAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YACpB,OAAO,eAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,OAAO,cAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,4BAA4B,CAAC,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,eAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YAChL,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;gBAC1B,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,WAAW;gBAC1B,CAAC,CAAC,eAAM,CAAC,IAAI;gBACb,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;oBACf,WAAW,GAAG,IAAI,CAAC;oBACnB,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvC,CAAC,CAAC,CAAC;YACP,OAAO,UAAU,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,eAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC7H,CAAC,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IACH,OAAO,eAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE;QACrI,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,gBAAgB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,SAAS,GAAG,eAAM,CAAC,OAAO,CAAC,eAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,eAAM,CAAC,eAAe,CAAC,cAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7P,oEAAoE;QACpE,mEAAmE;QACnE,sEAAsE;QACtE,kCAAkC;QAClC,OAAO,eAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,OAAO,GAAG,eAAM,CAAC,eAAe,CAAC,eAAM,CAAC,OAAO,CAAC,GAAG,EAAE;gBACvD,IAAI,QAAQ;oBACR,OAAO,eAAM,CAAC,IAAI,CAAC;gBACvB,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjB,OAAO,cAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,IAAA,yCAAmB,EAAC,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,eAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC;oBAClO,CAAC,CAAC,eAAM,CAAC,IAAI;oBACb,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,aAAE,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,IAAA,oCAAc,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClH,CAAC,CAAC,CAAC,CAAC;YACJ,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC9G,CAAC,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AACD,6BAA6B;AAC7B,SAAgB,yBAAyB;IACrC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,OAAO,eAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3H,CAAC;AACD,qCAAqC;AACrC,SAAgB,yBAAyB;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC;AACrB,CAAC","sourcesContent":["// 实验闸租约:把实验级 `maxConcurrency` 的 N 个名额做成跨 Invocation 共用的逐槽租约。\n// 与 ./lock.ts 的用例锁同一套文件纪律(O_EXCL 独占创建、心跳续租、过期判据、rename 接管、\n// 释放即删除),建在 ../shared/entry-file-store.ts 的原语之上,不复制第三份纪律。\n// 契约见 docs/feature/experiments/architecture.md「并发 Invocation:用例锁」末条与\n// docs/runner.md#调度有界并发。\nimport { mkdir, open, rm, type FileHandle } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { Clock, Effect, Fiber } from \"effect\";\nimport { claimEntryFileEffect, fsyncDirEffect, readAllEntryFilesEffect, readEntryFileEffect, slugHashEntryId, writeEntryFileEffect, } from \"../shared/entry-file-store.ts\";\nimport { CASE_LOCK_EXPIRY_MS, CASE_LOCK_HEARTBEAT_INTERVAL_MS, locksDirOf } from \"./lock.ts\";\n/** 逐槽租约文件的 JSON 形状。身份的权威在内容,文件名只须无碰撞、不承载解析。 */\nexport interface GateLeaseRecord {\n    experimentId: string;\n    /** 槽位序号,取值 0..N-1。 */\n    slot: number;\n    /** 本持有者 resolved 的名额上限 N。用于 min-N:生效名额取在场声明的最小值。 */\n    declaredN: number;\n    pid: number;\n    host: string;\n    startedAt: string; // ISO\n    heartbeatAt: string; // ISO\n}\ntype GateSlotAcquired = {\n    kind: \"acquired\";\n    slot: number;\n    takenOver: boolean;\n    takenOverFrom?: GateLeaseRecord;\n    record: GateLeaseRecord;\n};\ntype GateSlotAttempt = GateSlotAcquired | {\n    kind: \"full\";\n    holders: GateLeaseRecord[];\n};\nfunction recordOf(value: unknown): globalThis.Record<string, unknown> | undefined {\n    return typeof value === \"object\" && value !== null && !Array.isArray(value)\n        ? value as globalThis.Record<string, unknown>\n        : undefined;\n}\nfunction isPositiveInteger(value: unknown): value is number {\n    return typeof value === \"number\" && Number.isSafeInteger(value) && value > 0;\n}\nfunction isSlot(value: unknown): value is number {\n    return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\nfunction isTimestamp(value: unknown): value is string {\n    return typeof value === \"string\" && Number.isFinite(Date.parse(value));\n}\nfunction errnoCode(cause: unknown): string | undefined {\n    return typeof cause === \"object\" && cause !== null && \"code\" in cause && typeof cause.code === \"string\"\n        ? cause.code\n        : undefined;\n}\nfunction nodeIo<A>(operation: (signal: AbortSignal) => Promise<A>): Effect.Effect<A, unknown> {\n    return Effect.tryPromise({ try: operation, catch: (cause) => cause });\n}\nfunction withOpenFile<A>(path: string, flags: string, use: (handle: FileHandle) => Effect.Effect<A, unknown>): Effect.Effect<A, unknown> {\n    return Effect.scoped(Effect.acquireRelease(nodeIo(() => open(path, flags)), (handle) => nodeIo(() => handle.close()).pipe(Effect.orDie)).pipe(Effect.flatMap(use)));\n}\n/** 验证租约的全部持久字段；按槽读取时还会核对身份，防止错位记录冒充当前持有者。 */\nfunction decodeGateLeaseRecord(value: unknown, expected: {\n    experimentId?: string;\n    slot?: number;\n} = {}): GateLeaseRecord | undefined {\n    const record = recordOf(value);\n    if (record === undefined ||\n        typeof record.experimentId !== \"string\" ||\n        !isSlot(record.slot) ||\n        !isPositiveInteger(record.declaredN) ||\n        !isPositiveInteger(record.pid) ||\n        typeof record.host !== \"string\" ||\n        !isTimestamp(record.startedAt) ||\n        !isTimestamp(record.heartbeatAt) ||\n        (expected.experimentId !== undefined && record.experimentId !== expected.experimentId) ||\n        (expected.slot !== undefined && record.slot !== expected.slot)) {\n        return undefined;\n    }\n    return {\n        experimentId: record.experimentId,\n        slot: record.slot,\n        declaredN: record.declaredN,\n        pid: record.pid,\n        host: record.host,\n        startedAt: record.startedAt,\n        heartbeatAt: record.heartbeatAt,\n    };\n}\n/** 持有者续租心跳的周期。与用例锁同参数。 */\nexport const GATE_LEASE_HEARTBEAT_INTERVAL_MS = CASE_LOCK_HEARTBEAT_INTERVAL_MS;\n/** `heartbeatAt` 落后当前时间超过这个阈值(三个心跳周期)即视为持有者已死。 */\nexport const GATE_LEASE_EXPIRY_MS = CASE_LOCK_EXPIRY_MS;\nexport function gateLeasesDirOf(niceevalRoot: string): string {\n    return locksDirOf(niceevalRoot);\n}\nfunction gateLeaseEntryId(experimentId: string, slot: number): string {\n    return slugHashEntryId(`gate-${experimentId}-${slot}`, [\"gate-lease\", experimentId, String(slot)]);\n}\n/** Effect 主 API:读取该实验当前在场的全部租约记录,无副作用。 */\nexport function readGateLeasesEffect(niceevalRoot: string, experimentId: string): Effect.Effect<GateLeaseRecord[], unknown> {\n    return readAllEntryFilesEffect(gateLeasesDirOf(niceevalRoot), decodeGateLeaseRecord).pipe(Effect.map((entries) => entries\n        .map(({ entry }) => entry)\n        .filter((entry) => entry.experimentId === experimentId)\n        .sort((a, b) => a.slot - b.slot)));\n}\n/** 过期判据:只看心跳时间戳,不看 pid。 */\nexport function isGateLeaseExpired(record: GateLeaseRecord, nowMs: number): boolean {\n    const heartbeatMs = Date.parse(record.heartbeatAt);\n    if (Number.isNaN(heartbeatMs))\n        return true;\n    return nowMs - heartbeatMs > GATE_LEASE_EXPIRY_MS;\n}\n/** 本进程声明的 N:非法值收敛到 1，避免永久满位。 */\nfunction normalizeN(n: number): number {\n    const floored = Math.floor(n);\n    return Number.isFinite(floored) && floored >= 1 ? floored : 1;\n}\n/** min-N:有效名额取自己声明和所有新鲜租约声明的最小值。 */\nfunction effectiveSlotCount(maxConcurrency: number, leases: readonly GateLeaseRecord[], nowMs: number): number {\n    let n = normalizeN(maxConcurrency);\n    for (const lease of leases) {\n        if (isGateLeaseExpired(lease, nowMs))\n            continue;\n        const declared = normalizeN(lease.declaredN);\n        if (declared < n)\n            n = declared;\n    }\n    return n;\n}\n/** O_EXCL 独占创建租约文件;存在时返回 false,不覆盖。 */\nfunction createLeaseFileExclusiveEffect(dir: string, id: string, record: GateLeaseRecord): Effect.Effect<boolean, unknown> {\n    const path = join(dir, `${id}.json`);\n    return nodeIo(() => mkdir(dir, { recursive: true })).pipe(Effect.zipRight(withOpenFile(path, \"wx\", (handle) => nodeIo(() => handle.writeFile(JSON.stringify(record, null, 2), \"utf-8\")).pipe(Effect.zipRight(nodeIo(() => handle.sync()))))), Effect.zipRight(fsyncDirEffect(dir)), Effect.as(true), Effect.catchAll((cause) => errnoCode(cause) === \"EEXIST\" ? Effect.succeed(false) : Effect.fail(cause)));\n}\n/** 同一持有者判定:身份(pid/host)加上取位时刻——接管重建后 `startedAt` 必然不同。 */\nfunction isSameHolder(record: GateLeaseRecord, mine: GateLeaseRecord): boolean {\n    return record.pid === mine.pid && record.host === mine.host && record.startedAt === mine.startedAt;\n}\n/** 一次非阻塞取位:空槽 O_EXCL 创建，满位时只接管过期或损坏槽。 */\nexport function tryAcquireGateSlotOnceEffect(niceevalRoot: string, experimentId: string, maxConcurrency: number, identity: {\n    pid: number;\n    host: string;\n}, nowMs: number): Effect.Effect<GateSlotAttempt, unknown> {\n    const dir = gateLeasesDirOf(niceevalRoot);\n    return Effect.gen(function* () {\n        const effectiveN = effectiveSlotCount(maxConcurrency, yield* readGateLeasesEffect(niceevalRoot, experimentId), nowMs);\n        const stamp = new Date(nowMs).toISOString();\n        const recordFor = (slot: number): GateLeaseRecord => ({\n            experimentId,\n            slot,\n            declaredN: normalizeN(maxConcurrency),\n            pid: identity.pid,\n            host: identity.host,\n            startedAt: stamp,\n            heartbeatAt: stamp,\n        });\n        const acquired = (slot: number, record: GateLeaseRecord, options: {\n            takenOver: boolean;\n            takenOverFrom?: GateLeaseRecord;\n        }): GateSlotAcquired => ({ kind: \"acquired\", slot, record, ...options });\n        // 第一趟不预读占用情况：O_EXCL 本身就是判据。\n        for (let slot = 0; slot < effectiveN; slot += 1) {\n            const record = recordFor(slot);\n            if (yield* createLeaseFileExclusiveEffect(dir, gateLeaseEntryId(experimentId, slot), record)) {\n                return acquired(slot, record, { takenOver: false });\n            }\n        }\n        // 第二趟只对坏条目或过期条目执行 rename 认领；输掉竞态后继续下一槽。\n        for (let slot = 0; slot < effectiveN; slot += 1) {\n            const id = gateLeaseEntryId(experimentId, slot);\n            const current = yield* readEntryFileEffect(dir, id, (value) => decodeGateLeaseRecord(value, { experimentId, slot }));\n            if (current === undefined) {\n                if (!(yield* claimEntryFileEffect(dir, id)))\n                    continue;\n                const record = recordFor(slot);\n                if (!(yield* createLeaseFileExclusiveEffect(dir, id, record)))\n                    continue;\n                return acquired(slot, record, { takenOver: false });\n            }\n            if (!isGateLeaseExpired(current, nowMs))\n                continue;\n            if (!(yield* claimEntryFileEffect(dir, id)))\n                continue;\n            const record = recordFor(slot);\n            if (!(yield* createLeaseFileExclusiveEffect(dir, id, record)))\n                continue;\n            return acquired(slot, record, { takenOver: true, takenOverFrom: current });\n        }\n        const holders = (yield* readGateLeasesEffect(niceevalRoot, experimentId)).filter((lease) => !isGateLeaseExpired(lease, nowMs));\n        return { kind: \"full\", holders };\n    });\n}\n/** 续租只改 heartbeat；槽被接管后不写、不删别人的租约。 */\nfunction renewHeartbeatEffect(dir: string, id: string, mine: GateLeaseRecord, nowMs: number, isReleased: () => boolean): Effect.Effect<void, unknown> {\n    if (isReleased())\n        return Effect.void;\n    return readEntryFileEffect(dir, id, (value) => decodeGateLeaseRecord(value, { experimentId: mine.experimentId, slot: mine.slot })).pipe(Effect.flatMap((current) => {\n        if (current === undefined || !isSameHolder(current, mine) || isReleased())\n            return Effect.void;\n        return writeEntryFileEffect(dir, id, { ...current, heartbeatAt: new Date(nowMs).toISOString() });\n    }));\n}\nfunction makeAbortError(signal: AbortSignal | undefined): Error {\n    const reason = signal?.reason;\n    if (reason instanceof Error)\n        return reason;\n    const err = new Error(\"aborted while waiting for experiment gate slot\");\n    err.name = \"AbortError\";\n    return err;\n}\nfunction awaitAbort(signal: AbortSignal | undefined): Effect.Effect<never, Error> {\n    if (signal === undefined)\n        return Effect.never;\n    return Effect.async((resume, effectSignal) => {\n        let completed = false;\n        const cleanup = (): void => {\n            signal.removeEventListener(\"abort\", onAbort);\n            effectSignal.removeEventListener(\"abort\", onEffectAbort);\n        };\n        const cancel = (): void => {\n            if (completed)\n                return;\n            completed = true;\n            cleanup();\n        };\n        const onAbort = (): void => {\n            if (completed)\n                return;\n            cancel();\n            resume(Effect.fail(makeAbortError(signal)));\n        };\n        const onEffectAbort = (): void => cancel();\n        signal.addEventListener(\"abort\", onAbort, { once: true });\n        effectSignal.addEventListener(\"abort\", onEffectAbort, { once: true });\n        // Both listeners must be live before inspecting either signal: otherwise\n        // an abort between inspection and registration could strand the waiter.\n        if (effectSignal.aborted)\n            onEffectAbort();\n        else if (signal.aborted)\n            onAbort();\n        return Effect.sync(cancel);\n    });\n}\nfunction delayOrAbortEffect(ms: number, signal: AbortSignal | undefined): Effect.Effect<void, Error> {\n    if (signal?.aborted)\n        return Effect.fail(makeAbortError(signal));\n    return Effect.raceFirst(Effect.sleep(ms), awaitAbort(signal)).pipe(Effect.asVoid);\n}\nexport interface GateLeaseEffectClaim {\n    readonly slot: number;\n    readonly release: Effect.Effect<void, unknown>;\n}\nexport interface AcquireGateSlotEffectResult {\n    claim: GateLeaseEffectClaim;\n    takenOver: boolean;\n    takenOverFrom?: GateLeaseRecord;\n}\nconst held = new Map<string, Effect.Effect<void, unknown>>();\nfunction heldKey(niceevalRoot: string, id: string): string {\n    return `${niceevalRoot} ${id}`;\n}\n/** 高层 Effect 入口:等待可中断；心跳顺序化，release 等正在飞的不可中断续租结束再删除。 */\nexport function acquireGateSlotEffect(niceevalRoot: string, experimentId: string, maxConcurrency: number, identity: {\n    pid: number;\n    host: string;\n}, opts: {\n    signal?: AbortSignal;\n    pollIntervalMs?: number;\n    heartbeatIntervalMs?: number;\n    onWaitStart?: (holders: GateLeaseRecord[]) => void;\n} = {}): Effect.Effect<AcquireGateSlotEffectResult, unknown> {\n    const heartbeatIntervalMs = opts.heartbeatIntervalMs ?? GATE_LEASE_HEARTBEAT_INTERVAL_MS;\n    const pollIntervalMs = opts.pollIntervalMs ?? heartbeatIntervalMs;\n    let waitStarted = false;\n    const acquireLoop = (): Effect.Effect<{\n        slot: number;\n        takenOver: boolean;\n        takenOverFrom?: GateLeaseRecord;\n        record: GateLeaseRecord;\n    }, unknown> => Effect.suspend(() => {\n        if (opts.signal?.aborted)\n            return Effect.fail(makeAbortError(opts.signal));\n        return Clock.currentTimeMillis.pipe(Effect.flatMap((nowMs) => tryAcquireGateSlotOnceEffect(niceevalRoot, experimentId, maxConcurrency, identity, nowMs)), Effect.flatMap((result) => {\n            if (result.kind === \"acquired\")\n                return Effect.succeed(result);\n            const reportWait = waitStarted\n                ? Effect.void\n                : Effect.sync(() => {\n                    waitStarted = true;\n                    opts.onWaitStart?.(result.holders);\n                });\n            return reportWait.pipe(Effect.zipRight(delayOrAbortEffect(pollIntervalMs, opts.signal)), Effect.zipRight(acquireLoop()));\n        }));\n    });\n    return Effect.uninterruptibleMask((restore) => restore(acquireLoop()).pipe(Effect.flatMap(({ slot, takenOver, takenOverFrom, record }) => {\n        const dir = gateLeasesDirOf(niceevalRoot);\n        const id = gateLeaseEntryId(experimentId, slot);\n        const key = heldKey(niceevalRoot, id);\n        let released = false;\n        const heartbeat = Effect.forever(Effect.sleep(heartbeatIntervalMs).pipe(Effect.zipRight(Effect.uninterruptible(Clock.currentTimeMillis.pipe(Effect.flatMap((nowMs) => renewHeartbeatEffect(dir, id, record, nowMs, () => released)))).pipe(Effect.ignore))));\n        // A child inherits the parent's interruptibility. This branch still\n        // runs under the acquisition mask, so restore the heartbeat before\n        // forking; otherwise release would wait forever while interrupting an\n        // uninterruptible sleeping fiber.\n        return Effect.forkDaemon(restore(heartbeat)).pipe(Effect.map((fiber) => {\n            const release = Effect.uninterruptible(Effect.suspend(() => {\n                if (released)\n                    return Effect.void;\n                released = true;\n                held.delete(key);\n                return Fiber.interrupt(fiber).pipe(Effect.zipRight(readEntryFileEffect(dir, id, (value) => decodeGateLeaseRecord(value, { experimentId, slot }))), Effect.flatMap((current) => current !== undefined && !isSameHolder(current, record)\n                    ? Effect.void\n                    : nodeIo(() => rm(join(dir, `${id}.json`), { force: true })).pipe(Effect.zipRight(fsyncDirEffect(dir)))));\n            }));\n            held.set(key, release);\n            return { claim: { slot, release }, takenOver, ...(takenOverFrom === undefined ? {} : { takenOverFrom }) };\n        }));\n    })));\n}\n/** 强清兜底:尽力释放当前进程持有的每一条租约。 */\nexport function drainHeldGateLeasesEffect(): Effect.Effect<number> {\n    const releases = [...held.values()];\n    return Effect.forEach(releases, (release) => Effect.exit(release), { discard: true }).pipe(Effect.as(releases.length));\n}\n/** 当前进程仍持有的实验闸租约数量，供退出清理与可观察状态汇总。 */\nexport function pendingHeldGateLeaseCount(): number {\n    return held.size;\n}\n"]}

package/dist/runner/ledger.cjs

@@ -33,6 +33,27 @@ const DEFAULT_EXCLUDES = [
     ".venv",
     "__pycache__",
 ];
+const MAX_POLICY_ENTRIES = 256;
+const MAX_POLICY_ENTRY_UTF8_BYTES = 4096;
+const policyEncoder = new TextEncoder();
+function compareAscii(left, right) {
+    return left === right ? 0 : left < right ? -1 : 1;
+}
+/** Reject an unrecordable policy before the collector starts, then freeze its canonical evidence form. */
+function canonicalPolicyEntries(entries, name) {
+    if (entries.length > MAX_POLICY_ENTRIES) {
+        throw new Error(`defineEval({ diff }).${name} may contain at most ${MAX_POLICY_ENTRIES} entries`);
+    }
+    for (const [index, entry] of entries.entries()) {
+        if (typeof entry !== "string") {
+            throw new TypeError(`defineEval({ diff }).${name}[${index}] must be a string`);
+        }
+        if (policyEncoder.encode(entry).byteLength > MAX_POLICY_ENTRY_UTF8_BYTES) {
+            throw new Error(`defineEval({ diff }).${name}[${index}] exceeds ${MAX_POLICY_ENTRY_UTF8_BYTES} UTF-8 bytes`);
+        }
+    }
+    return Object.freeze([...new Set(entries)].sort(compareAscii));
+}
 /**
  * 单个 send 窗口的证据安全上限。越界必须让 workspace.diff 失败,不能产出误导性的空窗口。
  * 字节预算只数**真正要传输的文本** before/after:二进制与超过单文件阈值的文本不内联内容、
@@ -215,8 +236,9 @@ function gitignorePathspecs(pattern, exclude) {
 }
 /** 打分类账锚点(workspace.baseline 阶段,环境层钩子之后):git init + 冻结排除清单 + 首笔 commit。 */
 async function createChangeLedger(sandbox, opts) {
-    const excludes = [...DEFAULT_EXCLUDES, ...(opts?.ignore ?? [])];
-    const includes = opts?.include ?? [];
+    const includes = canonicalPolicyEntries(opts?.include ?? [], "include");
+    const ignored = canonicalPolicyEntries(opts?.ignore ?? [], "ignore");
+    const excludes = [...DEFAULT_EXCLUDES, ...ignored];
     // 多数 provider 用固定的宿主内私有路径(每实例全新隔离文件系统,天然不冲突);宿主本身即
     // 工作树的 provider(如 local)按 sandboxId 登记专属路径,避免同机多次运行互相踩踏
     // (见 sandbox/ledger-paths.ts —— 这里不认 provider 名,只问登记表)。
@@ -260,9 +282,9 @@ async function createChangeLedger(sandbox, opts) {
     return {
         rootExecutionIdentity: ordinaryUid === "0",
         attribution: Object.freeze({
-            defaultPolicy: "niceeval-default-excludes",
-            include: Object.freeze([...includes]),
-            ignore: Object.freeze([...(opts?.ignore ?? [])]),
+            defaultPolicy: "niceeval.sandbox-ledger/default-excludes/v1",
+            include: includes,
+            ignore: ignored,
         }),
         async commitEvalWindow(label) {
             // 有未记录变化才落这一笔;干净时不产生空的 eval 归因 commit。

package/dist/runner/ledger.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ledger.js","sourceRoot":"","sources":["ledger.ts"],"names":[],"mappings":";;;AAuPA,gDA8EC;AAzTD,sDAAoE;AACpE,gEAAoF;AACpF;;;;;GAKG;AACU,QAAA,cAAc,GAAG,wCAAsB,CAAC;AACrD,sDAAsD;AACtD,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAClD;;oBAEoB;AACpB,MAAM,gBAAgB,GAAG;IACrB,MAAM;IACN,cAAc;IACd,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,WAAW;IACX,UAAU;IACV,QAAQ;IACR,aAAa;IACb,MAAM;IACN,OAAO;IACP,SAAS;IACT,OAAO;IACP,aAAa;CAChB,CAAC;AACF;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,qDAAqD;AACrD,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC;;;;;;;;;;;;;GAaG;AACH,SAAS,iBAAiB,CAAC,SAAiB;IACxC,OAAO;QACH,SAAS;QACT,sEAAsE;QACtE,uDAAuD;QACvD,KAAK,UAAU,CAAC,SAAS,CAAC,EAAE;QAC5B,8BAA8B;QAC9B,mBAAmB;QACnB,YAAY;QACZ,6CAA6C;QAC7C,4DAA4D;QAC5D,iGAAiG;QACjG,mDAAmD;QACnD,6BAA6B;QAC7B,oBAAoB;QACpB,sBAAsB;QACtB,sDAAsD;QACtD,2BAA2B;QAC3B,sEAAsE;QACtE,gEAAgE;QAChE,iCAAiC;QACjC,gBAAgB,gBAAgB,gEAAgE,gBAAgB,GAAG;QACnH,0EAA0E;QAC1E,uDAAuD;QACvD,4FAA4F;QAC5F,8DAA8D;QAC9D,sGAAsG;QACtG,gEAAgE;QAChE,wJAAwJ;QACxJ,+CAA+C;QAC/C,6CAA6C;QAC7C,kBAAkB,mBAAmB,0YAA0Y;QAC/a,+BAA+B;QAC/B,oBAAoB,qBAAqB,+EAA+E,qBAAqB,qDAAqD;QAClM,yDAAyD;QACzD,oEAAoE;QACpE,8EAA8E;QAC9E,uDAAuD;QACvD,8BAA8B;QAC9B,6BAA6B;QAC7B,6BAA6B;QAC7B,6BAA6B;QAC7B,qBAAqB;QACrB,mGAAmG;QACnG,8FAA8F;QAC9F,mBAAmB;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AAwBD,wEAAwE;AACxE,SAAS,MAAM,CAAC,OAAgB,EAAE,MAAc;IAC5C,OAAO;QACH,OAAO,EAAE,MAAM;QACf,aAAa,EAAE,OAAO,CAAC,OAAO;QAC9B,eAAe,EAAE,UAAU;QAC3B,gBAAgB,EAAE,oBAAoB;QACtC,kBAAkB,EAAE,UAAU;QAC9B,mBAAmB,EAAE,oBAAoB;QACzC,qFAAqF;QACrF,mBAAmB,EAAE,GAAG;QACxB,iBAAiB,EAAE,WAAW;QAC9B,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,gBAAgB;QAClC,kBAAkB,EAAE,WAAW;QAC/B,mBAAmB,EAAE,GAAG;QACxB,IAAI,EAAE,MAAM;KACf,CAAC;AACN,CAAC;AACD,SAAS,UAAU,CAAC,CAAS;IACzB,OAAO,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AACD;;;;GAIG;AACH,SAAS,6BAA6B;IAClC,OAAO;QACH,4CAA4C;QAC5C,uDAAuD;QACvD,aAAa;QACb,2CAA2C;QAC3C,YAAY;QACZ,6BAA6B;QAC7B,0BAA0B;QAC1B,gDAAgD;QAChD,oEAAoE;QACpE,sDAAsD;QACtD,uBAAuB;QACvB,+BAA+B;QAC/B,iCAAiC;QACjC,iCAAiC;QACjC,sDAAsD;QACtD,oGAAoG;QACpG,2DAA2D;QAC3D,UAAU;QACV,yBAAyB;QACzB,UAAU;QACV,QAAQ;QACR,iBAAiB;QACjB,6FAA6F;QAC7F,oGAAoG;QACpG,yBAAyB;KAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AACD,SAAS,6BAA6B;IAClC,OAAO;QACH,4CAA4C;QAC5C,aAAa;QACb,+BAA+B;QAC/B,kEAAkE;QAClE,gBAAgB;QAChB,+BAA+B;QAC/B,kCAAkC;QAClC,qDAAqD;QACrD,wEAAwE;QACxE,qCAAqC;QACrC,qDAAqD;QACrD,UAAU;QACV,UAAU;QACV,2BAA2B;QAC3B,IAAI;QACJ,gGAAgG;QAChG,8BAA8B;QAC9B,4EAA4E;QAC5E,gBAAgB;QAChB,sBAAsB;QACtB,4BAA4B;QAC5B,kCAAkC;QAClC,iCAAiC;QACjC,wEAAwE;QACxE,6DAA6D;QAC7D,UAAU;QACV,UAAU;QACV,+BAA+B;QAC/B,IAAI;QACJ,yBAAyB;KAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AACD;;;GAGG;AACH,SAAS,kBAAkB,CAAC,OAAe,EAAE,OAAgB;IACzD,IAAI,UAAU,GAAG,OAAO,CAAC;IACzB,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAC9B,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU;QACX,OAAO,EAAE,CAAC;IACd,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC;AACD,2EAA2E;AACpE,KAAK,UAAU,kBAAkB,CAAC,OAAgB,EAAE,IAAoB;IAC3E,MAAM,QAAQ,GAAG,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IACrC,mDAAmD;IACnD,wDAAwD;IACxD,wDAAwD;IACxD,MAAM,KAAK,GAAG,IAAA,gCAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,sBAAc,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,UAAU,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,IAAA,wCAA2B,EAAC,OAAO,CAAC,CAAC;IAC1D,2DAA2D;IAC3D,2DAA2D;IAC3D,MAAM,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;IAC/E,MAAM,eAAe,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,6BAA6B,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,iBAAiB,GAAG,YAAY,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,WAA+B,CAAC;IACpC,IAAI,YAAY,EAAE,CAAC;QACf,8FAA8F;QAC9F,8EAA8E;QAC9E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,sBAAsB,CAAC,QAAQ,EAAE,6CAA6C,EAAE,KAAK,CAAC,CAAC;QACvF,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,+DAA+D;IAC/D,0EAA0E;IAC1E,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChH,8DAA8D;IAC9D,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjH,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0DAA0D,YAAY,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IAClJ,MAAM,cAAc,GAAG,uGAAuG;QAC1H,uSAAuS,CAAC;IAC5S,MAAM,MAAM,GAAG,sDAAsD,YAAY,GAAG,UAAU,GAAG,cAAc,EAAE,CAAC;IAClH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ;IACrC,2FAA2F;IAC3F,gGAAgG;IAChG,aAAa,UAAU,CAAC,MAAM,CAAC,2BAA2B,UAAU,CAAC,MAAM,CAAC,MAAM;QAC9E,gBAAgB,MAAM,QAAQ,MAAM,iDAAiD;QACrF,+FAA+F;QAC/F,eAAe,EAAE;QACjB,GAAG,cAAc;KACpB,CAAC,CAAC;IACH,sBAAsB,CAAC,MAAM,EAAE,6BAA6B,EAAE,YAAY,CAAC,CAAC;IAC5E,OAAO;QACH,qBAAqB,EAAE,WAAW,KAAK,GAAG;QAC1C,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,aAAa,EAAE,2BAAoC;YACnD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;YACrC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;SACnD,CAAC;QACF,KAAK,CAAC,gBAAgB,CAAC,KAAa;YAChC,uCAAuC;YACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,sDAAsD,UAAU,CAAC,QAAQ,KAAK,EAAE,CAAC,IAAI,iBAAiB,EAAE,EAAE;gBACrJ,GAAG,cAAc;aACpB,CAAC,CAAC;YACH,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,KAAK,EAAE,EAAE,YAAY,CAAC,CAAC;QAChF,CAAC;QACD,KAAK,CAAC,iBAAiB,CAAC,KAAa;YACjC,2DAA2D;YAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,sCAAsC,UAAU,CAAC,SAAS,KAAK,EAAE,CAAC,GAAG,iBAAiB,EAAE,EAAE,cAAc,CAAC,CAAC;YACzJ,sBAAsB,CAAC,MAAM,EAAE,uBAAuB,KAAK,EAAE,EAAE,YAAY,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,aAAa;YACf,OAAO,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAChF,CAAC;QACD,KAAK,CAAC,aAAa;YACf,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,+KAA+K,CAAC,CAAC;YACrM,CAAC;YACD,4FAA4F;YAC5F,2FAA2F;YAC3F,0FAA0F;YAC1F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,+CAA+C;gBACjF,iBAAiB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM;gBACvF,6BAA6B,EAAE,EAAE,cAAc,CAAC,CAAC;YACrD,sBAAsB,CAAC,MAAM,EAAE,wDAAwD,EAAE,YAAY,CAAC,CAAC;QAC3G,CAAC;KACJ,CAAC;AACN,CAAC;AACD,KAAK,UAAU,kBAAkB,CAAC,OAAgB,EAAE,cAGnD,EAAE,SAAiB,EAAE,YAAqB;IACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;IACpF,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;IACnE,OAAO,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AACD,SAAS,sBAAsB,CAAC,MAG/B,EAAE,SAAiB,EAAE,YAAqB,EAAE,kBAA2B;IACpE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QACrB,OAAO;IACX,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,kBAAkB,IAAI,CAAC,YAAY;YAChD,CAAC,CAAC,0IAA0I;YAC5I,CAAC,CAAC,qMAAqM,CAAC,CAAC;QAC7M,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,iBAAiB,MAAM,CAAC,QAAQ,MAAM,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,8DAA8D;IAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,iBAAiB,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC;AACD,8DAA8D;AAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,SAAS,kBAAkB,CAAC,OAAe;IACvC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,QAAQ,GAAG,GAAW,EAAE;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,CAAC,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAU,EAAE;QAC7C,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,iBAAiB,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;QACvD,MAAM,IAAI,MAAM,CAAC;QACjB,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;IACF,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QACjE,MAAM,OAAO,GAA4C,EAAE,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAiB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YACtD,6DAA6D;YAC7D,oCAAoC;YACpC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtH,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtH,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,mBAAmB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,mBAAmB,CAAC;YACtG,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;gBACjE,IAAI,WAAW,KAAK,SAAS;oBACzB,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;gBAC5C,IAAI,UAAU,KAAK,SAAS;oBACxB,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;YAC9C,CAAC;iBACI,CAAC;gBACF,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;oBACxB,MAAM,CAAC,MAAM,GAAG,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;oBAC1B,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QACjC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAOD,2FAA2F;AAC3F,SAAS,aAAa,CAAC,OAAe,EAAE,KAAa;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YACL,SAAS;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,kCAAkC,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QAC9F,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AACD,iEAAiE;AACjE,SAAS,gBAAgB,CAAC,OAAe,EAAE,KAAa;IACpD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,MAAM;YACP,SAAS;QACb,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,kCAAkC,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;YACrF,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,2EAA2E;AAC3E,SAAS,UAAU,CAAC,OAAe,EAAE,KAAa;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,IAAI;YACL,SAAS;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,+CAA+C,CAAC,CAAC;QAC3F,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,0EAA0E;AAC1E,SAAS,cAAc,CAAC,OAAe,EAAE,KAAa;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,CAAC,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,yCAAyC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,yCAAyC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,YAAY,GAAG,IAAI,CAAC;QACvC,IAAI,UAAU,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,0CAA0C,CAAC,CAAC;QACtF,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,MAAM,GAAG,UAAU,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AACD,SAAS,WAAW,CAAC,KAA0B,EAAE,GAAW,EAAE,KAAa,EAAE,IAAY;IACrF,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,2BAA2B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,SAAS,cAAc,CAAC,QAA6B,EAAE,GAAW,EAAE,KAAa,EAAE,IAAY;IAC3F,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,8BAA8B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,OAAO,CAAC;AACnB,CAAC;AACD,SAAS,oBAAoB,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAClF,CAAC","sourcesContent":["// 变更分类账(私有 git ledger):回答「**agent** 改了什么」,不是「workspace 相对空目录变了什么」。\n// 契约见 docs/feature/sandbox/architecture.md「变更归因:send 窗口与分类账」:\n// - ledger 的 git 目录在沙箱内、workdir 外(runner 私有路径),以 workdir 为 work-tree——\n//   workdir 保持素净:agent 看不到 runner 的 .git,eval 需要真实 git repo 时自己 git init,\n//   agent 在 workdir 里的任何 git 操作都碰不到分类账。\n// - 三类 commit 时点:锚点一笔(workspace.baseline);每次 t.send() 进入前 workdir 有未记录\n//   变化就落一笔 eval 归因;t.send() 返回后落一笔 agent 归因(send 窗口内的全部变化)。\n// - 归因排除清单 runner 私有、锚点时冻结:项目自己的 .gitignore 不参与归因判断(add -f 绕过),\n//   排除靠 pathspec,include 显式打洞加回。\n// - agent 归因增量 = 逐窗口 delta 序列(DiffWindow[]),不做跨窗口压缩。\nimport type { DiffArtifact, DiffWindow, Sandbox, WindowChange } from \"../types.ts\";\nimport type { AgentWorkspaceDiffPolicy } from \"../assertions/workspace-diff.ts\";\nimport { sandboxSupportsRootCommands } from \"../sandbox/backend.ts\";\nimport { DEFAULT_LEDGER_GIT_DIR, ledgerPathsFor } from \"../sandbox/ledger-paths.ts\";\n/**\n * ledger 的私有 git 目录:workdir 之外、runner 控制;agent 的工具默认不会去 /tmp 翻它。这是\n * 沙箱内 provider(docker/e2b/vercel)的默认值——每个实例都是全新隔离文件系统,固定路径不会\n * 跨实例踩踏。宿主本身即工作树的 provider(如 local)按 sandboxId 登记专属路径覆盖它\n * (见 sandbox/ledger-paths.ts),避免同机多次运行共享同一个 /tmp。\n */\nexport const LEDGER_GIT_DIR = DEFAULT_LEDGER_GIT_DIR;\n/** 整相导出文件的落点(与 ledger 同前缀,同样是 runner 私有路径;覆盖规则同上)。 */\nconst EXPORT_DIR = \"/tmp/.niceeval-ledger-export\";\n/** 默认归因排除清单(锚点时冻结):依赖、构建产物、包管理器缓存与用户项目里的 .niceeval 记录目录。\n *  框架自己不往 workdir 写任何东西(见 docs/observability.md「宿主侧行为断言:t.o11y」),\n *  所以这里没有框架路径要排。 */\nconst DEFAULT_EXCLUDES = [\n    \".git\",\n    \"node_modules\",\n    \".next\",\n    \"dist\",\n    \"build\",\n    \".turbo\",\n    \".niceeval\",\n    \"coverage\",\n    \".cache\",\n    \".pnpm-store\",\n    \".npm\",\n    \".yarn\",\n    \"*venv*/\",\n    \".venv\",\n    \"__pycache__\",\n];\n/**\n * 单个 send 窗口的证据安全上限。越界必须让 workspace.diff 失败,不能产出误导性的空窗口。\n * 字节预算只数**真正要传输的文本** before/after:二进制与超过单文件阈值的文本不内联内容、\n * 只记字节数(WindowChange.elided),因此不占预算——编译产物型窗口(成百上千个 .o 加几个大\n * 文本)不该因为「按尺寸计」被判越界。\n */\nconst MAX_WINDOW_PATHS = 10000;\nconst MAX_WINDOW_TEXT_BYTES = 64 * 1024 * 1024;\n/** 单个文本 blob 的内联阈值:任一侧超过它,该条目按二进制同款处理(记字节数、内容省略)。 */\nconst MAX_FILE_TEXT_BYTES = 1024 * 1024;\n/**\n * 整相导出:一条 POSIX shell 命令枚举**全部** agent 窗口并把证据写进沙箱内导出文件,宿主随后\n * 经文件通道一次下载——provider 往返数与窗口数、文件数都无关。对沙箱环境的全部要求是 git 与\n * POSIX 工具(sh/awk/wc/sort/grep),不依赖 node、python 等运行时。\n *\n * 沙箱内不组装 JSON:导出文件直接拼接 git 原生输出——每窗口四段,`diff-tree -z`(状态 + 前后\n * blob sha + 路径,NUL 安全)、`numstat -z`(二进制识别)、`cat-file --batch-check`(全部 blob\n * 尺寸)、`cat-file --batch`(要内联的文本 blob 内容,输出自带长度帧)——解析与校验全部在宿主侧完成。\n * 需要在沙箱内做的两个判断都不解析路径列:sha 提取用 awk 取 diff-tree 原始输出的第 3/4 列\n * (路径在其后,含空格也不影响);二进制排除靠 numstat 与 diff-tree 输出的行号对齐。\n * 尺寸核算(--batch-check)先于内容读取(--batch),越界在产出任何内容前失败;预算只累计真正\n * 要传输的文本 blob(二进制与单文件超限文本只出字节数,不进 --batch 请求、不计预算)。\n * 宿主侧从 sizes + numstat 两段就能判出哪些条目内容被省略,沙箱不额外输出一份判定清单。\n */\nfunction buildExportScript(exportDir: string): string {\n    return [\n        \"set -eu\",\n        // shellQuote:多数 provider 的 exportDir 是固定字面量(无空格);local 的 exportDir 来自\n        // mkdtemp(可能落在含空格的自定义 TMPDIR 下),赋值行不加引号会被 shell 拆成多个词。\n        `D=${shellQuote(exportDir)}`,\n        'rm -rf \"$D\" && mkdir -p \"$D\"',\n        'OUT=$D/export.bin',\n        ': > \"$OUT\"',\n        'fail() { printf \"%s\\\\n\" \"$1\" >&2; exit 2; }',\n        // 帧格式:`section <name> <bytes>` 头一行,后跟原始字节;长度前缀让内容里的任意字节都安全。\n        'emit() { printf \"section %s %s\\\\n\" \"$1\" \"$(($(wc -c < \"$2\")))\" >> \"$OUT\"; cat \"$2\" >> \"$OUT\"; }',\n        'git log --reverse --format=\"%H %s\" > \"$D/log.txt\"',\n        \"while IFS= read -r line; do\",\n        '  hash=${line%% *}',\n        '  subject=${line#* }',\n        '  case $subject in \"agent \"*) ;; *) continue ;; esac',\n        '  label=${subject#agent }',\n        // 非 -z 的 diff-tree 把特殊路径引号转义成单行,一行 = 一个条目:wc -l 即路径数,awk 列取 sha 不碰路径。\n        '  git diff-tree -r --no-renames \"$hash^\" \"$hash\" > \"$D/dt.txt\"',\n        '  n=$(($(wc -l < \"$D/dt.txt\")))',\n        `  [ \"$n\" -le ${MAX_WINDOW_PATHS} ] || fail \"niceeval diff window contains $n paths; limit is ${MAX_WINDOW_PATHS}\"`,\n        '  git diff-tree -r --no-renames --numstat \"$hash^\" \"$hash\" > \"$D/ns.txt\"',\n        // 全部 blob 出现次数(before + after,零 sha = 无此侧,排除)→ 逐次尺寸核算。\n        \"  awk '$3 !~ /^0+$/ { print $3 } $4 !~ /^0+$/ { print $4 }' \\\"$D/dt.txt\\\" > \\\"$D/occ.txt\\\"\",\n        '  git cat-file --batch-check < \"$D/occ.txt\" > \"$D/sizes.txt\"',\n        '  if grep -q \" missing$\" \"$D/sizes.txt\"; then fail \"niceeval ledger export: blob object missing\"; fi',\n        // 逐条目分类:numstat 第 1 列为 \"-\" 的行是二进制,按行号对齐标 B,其余标 T,后跟前后 blob sha。\n        '  awk \\'NR==FNR { bin[FNR] = ($1 == \"-\"); next } { printf \"%s %s %s\\\\n\", (bin[FNR] ? \"B\" : \"T\"), $3, $4 }\\' \"$D/ns.txt\" \"$D/dt.txt\" > \"$D/entries.txt\"',\n        // 要内联的文本 blob(去重):二进制条目与任一侧超过单文件阈值的文本条目都不请求内容,\n        // 也不计入窗口预算——它们只出字节数(宿主据同一份 sizes 判成 elided)。\n        `  awk -v LIMIT=${MAX_FILE_TEXT_BYTES} -v TOTAL=\"$D/total.txt\" 'NR==FNR { sz[$1] = $3; next } $1 == \"T\" { b = $2; a = $3; if (b !~ /^0+$/ && sz[b] > LIMIT) next; if (a !~ /^0+$/ && sz[a] > LIMIT) next; if (b !~ /^0+$/ && !(b in seen)) { seen[b] = 1; total += sz[b]; print b } if (a !~ /^0+$/ && !(a in seen)) { seen[a] = 1; total += sz[a]; print a } } END { print total+0 > TOTAL }' \"$D/sizes.txt\" \"$D/entries.txt\" > \"$D/text.txt\"`,\n        '  bytes=$(cat \"$D/total.txt\")',\n        `  [ \"$bytes\" -le ${MAX_WINDOW_TEXT_BYTES} ] || fail \"niceeval diff window transfers $bytes text blob bytes; limit is ${MAX_WINDOW_TEXT_BYTES}; narrow defineEval({ diff }) include/ignore rules\"`,\n        '  git cat-file --batch < \"$D/text.txt\" > \"$D/blobs.bin\"',\n        '  git diff-tree -r --no-renames -z \"$hash^\" \"$hash\" > \"$D/dtz.bin\"',\n        '  git diff-tree -r --no-renames --numstat -z \"$hash^\" \"$hash\" > \"$D/nsz.bin\"',\n        '  printf \"window %s %s\\\\n\" \"$hash\" \"$label\" >> \"$OUT\"',\n        '  emit difftree \"$D/dtz.bin\"',\n        '  emit numstat \"$D/nsz.bin\"',\n        '  emit sizes \"$D/sizes.txt\"',\n        '  emit blobs \"$D/blobs.bin\"',\n        'done < \"$D/log.txt\"',\n        // root ledger commands may create the private export with a restrictive umask. The file is outside\n        // workdir; making only this runner artifact readable lets the provider file channel fetch it.\n        'chmod 0644 \"$OUT\"',\n    ].join(\"\\n\");\n}\nexport interface ChangeLedger {\n    /** send 进入前:workdir 有未记录变化就落一笔 eval 归因(fixture / setup / runCommand 副作用)。 */\n    commitEvalWindow(label: string): Promise<void>;\n    /** send 返回后:落一笔 agent 归因——这个 send 窗口内的全部 workspace 变化(无变化也落空窗口)。 */\n    commitAgentWindow(label: string): Promise<void>;\n    /** workspace.diff 阶段:从分类账导出每个 send 窗口自己的 before/after,按时序。 */\n    exportWindows(): Promise<DiffArtifact>;\n    /** 回到创建时的题间锚点，并保留归因排除清单排除的动态环境。 */\n    resetToAnchor(): Promise<void>;\n    /**\n     * 建账时探测到的执行身份是否为 root(仅当 provider 支持 root ledger 命令时才探测得到,\n     * 否则恒为 false)。sandboxReuse 复用池据此在实例进池前拒绝(见 docs/feature/sandbox/reuse.md);\n     * `resetToAnchor()` 内的同款判断作纵深防御保留。\n     */\n    readonly rootExecutionIdentity: boolean;\n    /** Frozen semantic identity consumed by the Attempt-owned diff Attachment. */\n    readonly attribution: AgentWorkspaceDiffPolicy;\n}\ninterface LedgerOptions {\n    /** defineEval({ diff }) 的归因调整:ignore 追加排除,include 打洞加回(优先级最高)。 */\n    include?: string[];\n    ignore?: string[];\n}\n/** 每条 git 命令都带上私有 GIT_DIR + workdir work-tree;项目/全局 gitignore 一律不参与。 */\nfunction gitEnv(sandbox: Sandbox, gitDir: string): globalThis.Record<string, string> {\n    return {\n        GIT_DIR: gitDir,\n        GIT_WORK_TREE: sandbox.workdir,\n        GIT_AUTHOR_NAME: \"niceeval\",\n        GIT_AUTHOR_EMAIL: \"niceeval@localhost\",\n        GIT_COMMITTER_NAME: \"niceeval\",\n        GIT_COMMITTER_EMAIL: \"niceeval@localhost\",\n        // Internal root Git must never consume configuration or hooks writable by the Agent.\n        GIT_CONFIG_NOSYSTEM: \"1\",\n        GIT_CONFIG_GLOBAL: \"/dev/null\",\n        GIT_CONFIG_COUNT: \"1\",\n        GIT_CONFIG_KEY_0: \"core.hooksPath\",\n        GIT_CONFIG_VALUE_0: \"/dev/null\",\n        GIT_TERMINAL_PROMPT: \"0\",\n        HOME: \"/tmp\",\n    };\n}\nfunction shellQuote(s: string): string {\n    return `'${s.replaceAll(\"'\", `'\\\\''`)}'`;\n}\n/**\n * Root Git can faithfully restore bytes but would otherwise recreate ordinary fixture files as root.\n * Keep a content-free metadata mirror inside the private (0700) ledger and reapply uid/gid/mode after\n * reset. The batched xargs loops preserve arbitrary Git path bytes without exposing objects to the Agent.\n */\nfunction captureBaselineMetadataScript(): string {\n    return [\n        'META=\"$GIT_DIR/niceeval-baseline-metadata\"',\n        'rm -rf \"$META\" && mkdir -p \"$META/files\" \"$META/dirs\"',\n        \"export META\",\n        \"git ls-files -z | xargs -0 -n 100 sh -c '\",\n        \"  for p do\",\n        '    src=\"$GIT_WORK_TREE/$p\"',\n        '    ref=\"$META/files/$p\"',\n        '    mkdir -p \"$(dirname \"$ref\")\" && : > \"$ref\"',\n        '    owner=$(stat -c \"%u:%g\" \"$src\") && mode=$(stat -c \"%a\" \"$src\")',\n        '    chown -h \"$owner\" \"$ref\" && chmod \"$mode\" \"$ref\"',\n        '    d=$(dirname \"$p\")',\n        '    while [ \"$d\" != \".\" ]; do',\n        '      dref=\"$META/dirs/$d/.ref\"',\n        '      if [ ! -e \"$dref\" ]; then',\n        '        mkdir -p \"$(dirname \"$dref\")\" && : > \"$dref\"',\n        '        downer=$(stat -c \"%u:%g\" \"$GIT_WORK_TREE/$d\") && dmode=$(stat -c \"%a\" \"$GIT_WORK_TREE/$d\")',\n        '        chown \"$downer\" \"$dref\" && chmod \"$dmode\" \"$dref\"',\n        \"      fi\",\n        '      d=$(dirname \"$d\")',\n        \"    done\",\n        \"  done\",\n        \"' niceeval-meta\",\n        // Agent and any background process share the ordinary sandbox uid. Keep both objects and the\n        // metadata mirror root-private for the whole attempt; reset never opens this directory to that uid.\n        'chmod go-rwx \"$GIT_DIR\"',\n    ].join(\"\\n\");\n}\nfunction restoreBaselineMetadataScript(): string {\n    return [\n        'META=\"$GIT_DIR/niceeval-baseline-metadata\"',\n        \"export META\",\n        'if [ -d \"$META/files\" ]; then',\n        \"  find \\\"$META/files\\\" -type f -print0 | xargs -0 -n 100 sh -c '\",\n        \"    for ref do\",\n        '      p=${ref#\"$META/files/\"}',\n        '      target=\"$GIT_WORK_TREE/$p\"',\n        '      if [ -e \"$target\" ] || [ -L \"$target\" ]; then',\n        '        owner=$(stat -c \"%u:%g\" \"$ref\") && mode=$(stat -c \"%a\" \"$ref\")',\n        '        chown -h \"$owner\" \"$target\"',\n        '        [ -L \"$target\" ] || chmod \"$mode\" \"$target\"',\n        \"      fi\",\n        \"    done\",\n        \"  ' niceeval-meta-restore\",\n        \"fi\",\n        // Apply directory metadata last so restrictive parent modes cannot interfere with child repair.\n        'if [ -d \"$META/dirs\" ]; then',\n        \"  find \\\"$META/dirs\\\" -type f -name .ref -print0 | xargs -0 -n 100 sh -c '\",\n        \"    for ref do\",\n        '      d=${ref%/.ref}',\n        '      p=${d#\"$META/dirs/\"}',\n        '      target=\"$GIT_WORK_TREE/$p\"',\n        '      if [ -d \"$target\" ]; then',\n        '        owner=$(stat -c \"%u:%g\" \"$ref\") && mode=$(stat -c \"%a\" \"$ref\")',\n        '        chown \"$owner\" \"$target\" && chmod \"$mode\" \"$target\"',\n        \"      fi\",\n        \"    done\",\n        \"  ' niceeval-dir-meta-restore\",\n        \"fi\",\n        'chmod go-rwx \"$GIT_DIR\"',\n    ].join(\"\\n\");\n}\n/**\n * 把仓库根语义的 gitignore 风格规则编译成 ledger pathspec。\n * 无斜杠的名字匹配任意深度；有斜杠的规则相对 workdir 根；目录本身与后代一起处理。\n */\nfunction gitignorePathspecs(pattern: string, exclude: boolean): string[] {\n    let normalized = pattern;\n    while (normalized.startsWith(\"./\"))\n        normalized = normalized.slice(2);\n    if (normalized.startsWith(\"/\"))\n        normalized = normalized.slice(1);\n    normalized = normalized.replace(/\\/+$/, \"\");\n    if (!normalized)\n        return [];\n    const glob = normalized.includes(\"/\") ? normalized : `**/${normalized}`;\n    const globs = exclude && !glob.endsWith(\"/**\") ? [glob, `${glob}/**`] : [glob];\n    const magic = exclude ? \":(glob,exclude)\" : \":(glob)\";\n    return [...new Set(globs)].map((value) => `${magic}${value}`);\n}\n/** 打分类账锚点(workspace.baseline 阶段,环境层钩子之后):git init + 冻结排除清单 + 首笔 commit。 */\nexport async function createChangeLedger(sandbox: Sandbox, opts?: LedgerOptions): Promise<ChangeLedger> {\n    const excludes = [...DEFAULT_EXCLUDES, ...(opts?.ignore ?? [])];\n    const includes = opts?.include ?? [];\n    // 多数 provider 用固定的宿主内私有路径(每实例全新隔离文件系统,天然不冲突);宿主本身即\n    // 工作树的 provider(如 local)按 sandboxId 登记专属路径,避免同机多次运行互相踩踏\n    // (见 sandbox/ledger-paths.ts —— 这里不认 provider 名,只问登记表)。\n    const paths = ledgerPathsFor(sandbox.sandboxId);\n    const gitDir = paths?.gitDir ?? LEDGER_GIT_DIR;\n    const exportDir = paths?.exportDir ?? EXPORT_DIR;\n    const env = gitEnv(sandbox, gitDir);\n    const rootCommands = sandboxSupportsRootCommands(sandbox);\n    // 只给 runner 私有 ledger 命令提权，以便读取题目故意设置的受限文件。脚本不 chmod/chown\n    // workdir，Agent 命令仍沿标准非 root 身份；不支持提权的 provider 保持既有用户态路径。\n    const commandOptions = rootCommands ? { env, user: \"root\" as const } : { env };\n    const captureMetadata = rootCommands ? ` && ${captureBaselineMetadataScript()}` : \"\";\n    const lockPrivateLedger = rootCommands ? ' && chmod go-rwx \"$GIT_DIR\"' : \"\";\n    let ordinaryUid: string | undefined;\n    if (rootCommands) {\n        // Capture before Agent setup/send can mutate the VM. A post-attempt `id` probe would not be a\n        // trustworthy boundary when the configured execution identity itself is root.\n        const identity = await sandbox.runShell(\"command -p id -u\", { env });\n        ensureCommandSucceeded(identity, \"detect sandbox execution identity for reuse\", false);\n        ordinaryUid = identity.stdout.trim();\n    }\n    // add -A -f:绕过项目自己的 .gitignore(项目 ignore 的文件照常记录);排除靠 pathspec\n    // (runner 私有清单,agent / fixture 写 .gitignore 影响不了它);include 用第二次 add 打洞加回。\n    const excludeSpecs = excludes.flatMap((pattern) => gitignorePathspecs(pattern, true)).map(shellQuote).join(\" \");\n    // include 打洞:路径此刻可能还不存在(如 agent 之后才写),unmatched pathspec 不算错。\n    const includeSpecs = includes.flatMap((pattern) => gitignorePathspecs(pattern, false)).map(shellQuote).join(\" \");\n    const includeAdd = includeSpecs.length > 0 ? ` && { git -c advice.addEmbeddedRepo=false add -A -f -- ${includeSpecs} 2>/dev/null || true; }` : \"\";\n    const rejectGitlinks = \" && nested=$(git ls-files --stage | awk '$1 == \\\"160000\\\" { sub(/^[^\\\\t]*\\\\t/, \\\"\\\"); print; exit }')\" +\n        ' && if [ -n \"$nested\" ]; then printf \\'%s\\\\n\\' \"niceeval ledger cannot track nested Git repository $nested as file-level evidence; move the checkout to sandbox.workdir root, or add the whole path to defineEval({ diff: { ignore: [...] } }) when it is intentionally out of scope\" >&2; exit 2; fi';\n    const addAll = `git -c advice.addEmbeddedRepo=false add -A -f -- . ${excludeSpecs}${includeAdd}${rejectGitlinks}`;\n    const anchor = await sandbox.runShell(\n    // The path is predictable inside an isolated VM. Remove any image/prepare-time occupant or\n    // symlink, then recreate the exact runner-private directory as root 0700 before Git touches it.\n    `rm -rf -- ${shellQuote(gitDir)} && mkdir -p -m 0700 -- ${shellQuote(gitDir)} && ` +\n        `git init -q \"${gitDir}\" && ${addAll} && git commit -q --allow-empty -m \"anchor\" && ` +\n        `(git rev-parse -q --verify niceeval-reuse-anchor >/dev/null || git tag niceeval-reuse-anchor)` +\n        captureMetadata, {\n        ...commandOptions,\n    });\n    ensureCommandSucceeded(anchor, \"create change ledger anchor\", rootCommands);\n    return {\n        rootExecutionIdentity: ordinaryUid === \"0\",\n        attribution: Object.freeze({\n            defaultPolicy: \"niceeval-default-excludes\" as const,\n            include: Object.freeze([...includes]),\n            ignore: Object.freeze([...(opts?.ignore ?? [])]),\n        }),\n        async commitEvalWindow(label: string): Promise<void> {\n            // 有未记录变化才落这一笔;干净时不产生空的 eval 归因 commit。\n            const result = await sandbox.runShell(`${addAll} && (git diff --cached --quiet || git commit -q -m ${shellQuote(`eval ${label}`)})${lockPrivateLedger}`, {\n                ...commandOptions,\n            });\n            ensureCommandSucceeded(result, `commit eval window ${label}`, rootCommands);\n        },\n        async commitAgentWindow(label: string): Promise<void> {\n            // 窗口内没有变化时也落一条(--allow-empty),diff.json 里该窗口 changes 为空对象。\n            const result = await sandbox.runShell(`${addAll} && git commit -q --allow-empty -m ${shellQuote(`agent ${label}`)}${lockPrivateLedger}`, commandOptions);\n            ensureCommandSucceeded(result, `commit agent window ${label}`, rootCommands);\n        },\n        async exportWindows(): Promise<DiffArtifact> {\n            return exportAgentWindows(sandbox, commandOptions, exportDir, rootCommands);\n        },\n        async resetToAnchor(): Promise<void> {\n            if (ordinaryUid === \"0\") {\n                throw new Error(\"sandboxReuse cannot safely reuse a root-agent sandbox: the Agent could read private ledger objects from prior attempts; use a non-root execution user or disable sandboxReuse\");\n            }\n            // Root performs the byte reset, then reapplies the content-free baseline metadata mirror so\n            // ordinary files return to their original uid/gid/mode instead of becoming root-owned. The\n            // private object database stays 0700 throughout; no Agent/background process can read it.\n            const result = await sandbox.runShell(`git reset -q --hard niceeval-reuse-anchor && ` +\n                `git clean -fd ${excludes.map((pattern) => `-e ${shellQuote(pattern)}`).join(\" \")} && ` +\n                restoreBaselineMetadataScript(), commandOptions);\n            ensureCommandSucceeded(result, \"reset reusable sandbox to anchor and restore ownership\", rootCommands);\n        },\n    };\n}\nasync function exportAgentWindows(sandbox: Sandbox, commandOptions: {\n    readonly env: globalThis.Record<string, string>;\n    readonly user?: \"root\";\n}, exportDir: string, rootCommands: boolean): Promise<DiffArtifact> {\n    const result = await sandbox.runShell(buildExportScript(exportDir), commandOptions);\n    ensureCommandSucceeded(result, \"export agent windows\", rootCommands);\n    const payload = await sandbox.readBytes(`${exportDir}/export.bin`);\n    return parseExportPayload(Buffer.from(payload));\n}\nfunction ensureCommandSucceeded(result: {\n    exitCode: number;\n    stderr: string;\n}, operation: string, rootCommands: boolean, permissionGuidance?: string): void {\n    if (result.exitCode === 0)\n        return;\n    const lines = result.stderr.trim().split(\"\\n\").filter(Boolean);\n    const permission = lines.find((line) => /permission denied|operation not permitted/i.test(line));\n    if (permission !== undefined) {\n        const guidance = permissionGuidance ?? (rootCommands\n            ? \"the provider declared root command support, but root ledger execution still could not read the workspace; check its root command mapping\"\n            : \"this sandbox provider does not support root ledger commands; use a root-capable provider for tasks that intentionally start with unreadable files instead of chmod/chowning away the task condition\");\n        throw new Error(`${operation} failed (exit ${result.exitCode}): ${permission}; ${guidance}`);\n    }\n    // git 可能先输出 advisory warning，再输出 niceeval 的可操作诊断；最后一行最接近失败根因。\n    const detail = lines.at(-1);\n    throw new Error(`${operation} failed (exit ${result.exitCode})${detail ? `: ${detail}` : \"\"}`);\n}\n// ---------- 导出文件的宿主侧解析(严格校验:帧、git 输出形状、尺寸与内容的完备性) ----------\nconst ZERO_SHA = /^0+$/;\nfunction parseExportPayload(payload: Buffer): DiffArtifact {\n    const windows: DiffWindow[] = [];\n    let offset = 0;\n    const readLine = (): string => {\n        const newline = payload.indexOf(0x0a, offset);\n        if (newline === -1)\n            throw new Error(\"niceeval ledger export: truncated header\");\n        const line = payload.subarray(offset, newline).toString(\"utf8\");\n        offset = newline + 1;\n        return line;\n    };\n    const readSection = (expected: string): Buffer => {\n        const header = readLine().split(\" \");\n        if (header.length !== 3 || header[0] !== \"section\" || header[1] !== expected) {\n            throw new Error(`niceeval ledger export: expected section ${expected}, got ${JSON.stringify(header.join(\" \"))}`);\n        }\n        const length = Number(header[2]);\n        if (!isNonNegativeInteger(length) || offset + length > payload.length) {\n            throw new Error(`niceeval ledger export: invalid ${expected} section length`);\n        }\n        const body = payload.subarray(offset, offset + length);\n        offset += length;\n        return body;\n    };\n    while (offset < payload.length) {\n        const header = readLine();\n        if (!header.startsWith(\"window \"))\n            throw new Error(`niceeval ledger export: expected window header, got ${JSON.stringify(header)}`);\n        const rest = header.slice(\"window \".length);\n        const space = rest.indexOf(\" \");\n        const label = space === -1 ? \"\" : rest.slice(space + 1);\n        const entries = parseDiffTree(readSection(\"difftree\"), label);\n        const binaryPaths = parseBinaryPaths(readSection(\"numstat\"), label);\n        const sizeBySha = parseSizes(readSection(\"sizes\"), label);\n        const contentBySha = parseBlobBatch(readSection(\"blobs\"), label);\n        const changes: globalThis.Record<string, WindowChange> = {};\n        for (const entry of entries) {\n            const change: WindowChange = { status: entry.status };\n            // 沙箱侧决定「哪些文本 blob 进 --batch」的两条判据在宿主侧同样成立(binary 段 + sizes 段\n            // 都在导出文件里),所以这里独立重算,不需要沙箱再输出一份省略清单。\n            const beforeBytes = entry.status === \"added\" ? undefined : requireSize(sizeBySha, entry.beforeSha, label, entry.path);\n            const afterBytes = entry.status === \"deleted\" ? undefined : requireSize(sizeBySha, entry.afterSha, label, entry.path);\n            const binary = binaryPaths.has(entry.path);\n            const oversized = (beforeBytes ?? 0) > MAX_FILE_TEXT_BYTES || (afterBytes ?? 0) > MAX_FILE_TEXT_BYTES;\n            if (binary || oversized) {\n                change.elided = { reason: binary ? \"binary\" : \"oversized-text\" };\n                if (beforeBytes !== undefined)\n                    change.elided.beforeBytes = beforeBytes;\n                if (afterBytes !== undefined)\n                    change.elided.afterBytes = afterBytes;\n            }\n            else {\n                if (entry.status !== \"added\")\n                    change.before = requireContent(contentBySha, entry.beforeSha, label, entry.path);\n                if (entry.status !== \"deleted\")\n                    change.after = requireContent(contentBySha, entry.afterSha, label, entry.path);\n            }\n            changes[entry.path] = change;\n        }\n        windows.push({ window: label, changes });\n    }\n    return windows;\n}\ninterface DiffTreeEntry {\n    path: string;\n    status: WindowChange[\"status\"];\n    beforeSha: string;\n    afterSha: string;\n}\n/** `git diff-tree -r --no-renames -z` 原始输出:`:mode mode sha sha status NUL path NUL` 重复。 */\nfunction parseDiffTree(section: Buffer, label: string): DiffTreeEntry[] {\n    const parts = section.toString(\"utf8\").split(\"\\0\");\n    const entries: DiffTreeEntry[] = [];\n    for (let i = 0; i < parts.length;) {\n        const meta = parts[i++];\n        if (!meta)\n            continue;\n        const path = parts[i++];\n        const fields = meta.split(\" \");\n        if (path === undefined || fields.length !== 5 || !fields[0]!.startsWith(\":\")) {\n            throw new Error(`export window ${label}: malformed git diff-tree output`);\n        }\n        const code = fields[4]!;\n        const status = code.startsWith(\"A\") ? \"added\" : code.startsWith(\"D\") ? \"deleted\" : \"modified\";\n        entries.push({ path, status, beforeSha: fields[2]!, afterSha: fields[3]! });\n    }\n    return entries;\n}\n/** `git diff-tree --numstat -z`:二进制条目的 added/removed 计数是 `-`。 */\nfunction parseBinaryPaths(section: Buffer, label: string): Set<string> {\n    const paths = new Set<string>();\n    for (const record of section.toString(\"utf8\").split(\"\\0\")) {\n        if (!record)\n            continue;\n        const firstTab = record.indexOf(\"\\t\");\n        const secondTab = record.indexOf(\"\\t\", firstTab + 1);\n        if (firstTab === -1 || secondTab === -1)\n            throw new Error(`export window ${label}: malformed git --numstat output`);\n        if (record.slice(0, firstTab) === \"-\" && record.slice(firstTab + 1, secondTab) === \"-\") {\n            paths.add(record.slice(secondTab + 1));\n        }\n    }\n    return paths;\n}\n/** `git cat-file --batch-check`:每行 `sha type size`(输入是逐出现次数的 sha,重复无害)。 */\nfunction parseSizes(section: Buffer, label: string): Map<string, number> {\n    const sizes = new Map<string, number>();\n    for (const line of section.toString(\"utf8\").split(\"\\n\")) {\n        if (!line)\n            continue;\n        const fields = line.split(\" \");\n        const size = Number(fields[fields.length - 1]);\n        if (fields.length < 3 || !isNonNegativeInteger(size)) {\n            throw new Error(`export window ${label}: malformed git cat-file --batch-check output`);\n        }\n        sizes.set(fields[0]!, size);\n    }\n    return sizes;\n}\n/** `git cat-file --batch`:自带长度帧——`sha type size\\n` + size 字节内容 + `\\n`。 */\nfunction parseBlobBatch(section: Buffer, label: string): Map<string, string> {\n    const contents = new Map<string, string>();\n    let offset = 0;\n    while (offset < section.length) {\n        const newline = section.indexOf(0x0a, offset);\n        if (newline === -1)\n            throw new Error(`export window ${label}: malformed git cat-file --batch header`);\n        const fields = section.subarray(offset, newline).toString(\"utf8\").split(\" \");\n        const size = Number(fields[fields.length - 1]);\n        if (fields.length < 3 || !isNonNegativeInteger(size)) {\n            throw new Error(`export window ${label}: malformed git cat-file --batch header`);\n        }\n        const contentStart = newline + 1;\n        const contentEnd = contentStart + size;\n        if (contentEnd >= section.length || section[contentEnd] !== 0x0a) {\n            throw new Error(`export window ${label}: truncated git cat-file --batch content`);\n        }\n        contents.set(fields[0]!, section.subarray(contentStart, contentEnd).toString(\"utf8\"));\n        offset = contentEnd + 1;\n    }\n    return contents;\n}\nfunction requireSize(sizes: Map<string, number>, sha: string, label: string, path: string): number {\n    const size = sizes.get(sha);\n    if (size === undefined || ZERO_SHA.test(sha))\n        throw new Error(`export window ${label}: missing blob size for ${JSON.stringify(path)}`);\n    return size;\n}\nfunction requireContent(contents: Map<string, string>, sha: string, label: string, path: string): string {\n    const content = contents.get(sha);\n    if (content === undefined || ZERO_SHA.test(sha))\n        throw new Error(`export window ${label}: missing blob content for ${JSON.stringify(path)}`);\n    return content;\n}\nfunction isNonNegativeInteger(value: unknown): value is number {\n    return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n"]}
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["ledger.ts"],"names":[],"mappings":";;;AA4QA,gDA+EC;AA/UD,sDAAoE;AACpE,gEAAoF;AACpF;;;;;GAKG;AACU,QAAA,cAAc,GAAG,wCAAsB,CAAC;AACrD,sDAAsD;AACtD,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAClD;;oBAEoB;AACpB,MAAM,gBAAgB,GAAG;IACrB,MAAM;IACN,cAAc;IACd,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,WAAW;IACX,UAAU;IACV,QAAQ;IACR,aAAa;IACb,MAAM;IACN,OAAO;IACP,SAAS;IACT,OAAO;IACP,aAAa;CAChB,CAAC;AACF,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,2BAA2B,GAAG,IAAI,CAAC;AACzC,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC;AACxC,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa;IAC7C,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AACD,0GAA0G;AAC1G,SAAS,sBAAsB,CAAC,OAA0B,EAAE,IAA0B;IAClF,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,wBAAwB,kBAAkB,UAAU,CAAC,CAAC;IACtG,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,wBAAwB,IAAI,IAAI,KAAK,oBAAoB,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,2BAA2B,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,IAAI,KAAK,aAAa,2BAA2B,cAAc,CAAC,CAAC;QACjH,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AACnE,CAAC;AACD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,qDAAqD;AACrD,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC;;;;;;;;;;;;;GAaG;AACH,SAAS,iBAAiB,CAAC,SAAiB;IACxC,OAAO;QACH,SAAS;QACT,sEAAsE;QACtE,uDAAuD;QACvD,KAAK,UAAU,CAAC,SAAS,CAAC,EAAE;QAC5B,8BAA8B;QAC9B,mBAAmB;QACnB,YAAY;QACZ,6CAA6C;QAC7C,4DAA4D;QAC5D,iGAAiG;QACjG,mDAAmD;QACnD,6BAA6B;QAC7B,oBAAoB;QACpB,sBAAsB;QACtB,sDAAsD;QACtD,2BAA2B;QAC3B,sEAAsE;QACtE,gEAAgE;QAChE,iCAAiC;QACjC,gBAAgB,gBAAgB,gEAAgE,gBAAgB,GAAG;QACnH,0EAA0E;QAC1E,uDAAuD;QACvD,4FAA4F;QAC5F,8DAA8D;QAC9D,sGAAsG;QACtG,gEAAgE;QAChE,wJAAwJ;QACxJ,+CAA+C;QAC/C,6CAA6C;QAC7C,kBAAkB,mBAAmB,0YAA0Y;QAC/a,+BAA+B;QAC/B,oBAAoB,qBAAqB,+EAA+E,qBAAqB,qDAAqD;QAClM,yDAAyD;QACzD,oEAAoE;QACpE,8EAA8E;QAC9E,uDAAuD;QACvD,8BAA8B;QAC9B,6BAA6B;QAC7B,6BAA6B;QAC7B,6BAA6B;QAC7B,qBAAqB;QACrB,mGAAmG;QACnG,8FAA8F;QAC9F,mBAAmB;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AAwBD,wEAAwE;AACxE,SAAS,MAAM,CAAC,OAAgB,EAAE,MAAc;IAC5C,OAAO;QACH,OAAO,EAAE,MAAM;QACf,aAAa,EAAE,OAAO,CAAC,OAAO;QAC9B,eAAe,EAAE,UAAU;QAC3B,gBAAgB,EAAE,oBAAoB;QACtC,kBAAkB,EAAE,UAAU;QAC9B,mBAAmB,EAAE,oBAAoB;QACzC,qFAAqF;QACrF,mBAAmB,EAAE,GAAG;QACxB,iBAAiB,EAAE,WAAW;QAC9B,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,gBAAgB;QAClC,kBAAkB,EAAE,WAAW;QAC/B,mBAAmB,EAAE,GAAG;QACxB,IAAI,EAAE,MAAM;KACf,CAAC;AACN,CAAC;AACD,SAAS,UAAU,CAAC,CAAS;IACzB,OAAO,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AACD;;;;GAIG;AACH,SAAS,6BAA6B;IAClC,OAAO;QACH,4CAA4C;QAC5C,uDAAuD;QACvD,aAAa;QACb,2CAA2C;QAC3C,YAAY;QACZ,6BAA6B;QAC7B,0BAA0B;QAC1B,gDAAgD;QAChD,oEAAoE;QACpE,sDAAsD;QACtD,uBAAuB;QACvB,+BAA+B;QAC/B,iCAAiC;QACjC,iCAAiC;QACjC,sDAAsD;QACtD,oGAAoG;QACpG,2DAA2D;QAC3D,UAAU;QACV,yBAAyB;QACzB,UAAU;QACV,QAAQ;QACR,iBAAiB;QACjB,6FAA6F;QAC7F,oGAAoG;QACpG,yBAAyB;KAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AACD,SAAS,6BAA6B;IAClC,OAAO;QACH,4CAA4C;QAC5C,aAAa;QACb,+BAA+B;QAC/B,kEAAkE;QAClE,gBAAgB;QAChB,+BAA+B;QAC/B,kCAAkC;QAClC,qDAAqD;QACrD,wEAAwE;QACxE,qCAAqC;QACrC,qDAAqD;QACrD,UAAU;QACV,UAAU;QACV,2BAA2B;QAC3B,IAAI;QACJ,gGAAgG;QAChG,8BAA8B;QAC9B,4EAA4E;QAC5E,gBAAgB;QAChB,sBAAsB;QACtB,4BAA4B;QAC5B,kCAAkC;QAClC,iCAAiC;QACjC,wEAAwE;QACxE,6DAA6D;QAC7D,UAAU;QACV,UAAU;QACV,+BAA+B;QAC/B,IAAI;QACJ,yBAAyB;KAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AACD;;;GAGG;AACH,SAAS,kBAAkB,CAAC,OAAe,EAAE,OAAgB;IACzD,IAAI,UAAU,GAAG,OAAO,CAAC;IACzB,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAC9B,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU;QACX,OAAO,EAAE,CAAC;IACd,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC;AACD,2EAA2E;AACpE,KAAK,UAAU,kBAAkB,CAAC,OAAgB,EAAE,IAAoB;IAC3E,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,CAAC,GAAG,gBAAgB,EAAE,GAAG,OAAO,CAAC,CAAC;IACnD,mDAAmD;IACnD,wDAAwD;IACxD,wDAAwD;IACxD,MAAM,KAAK,GAAG,IAAA,gCAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,sBAAc,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,UAAU,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,IAAA,wCAA2B,EAAC,OAAO,CAAC,CAAC;IAC1D,2DAA2D;IAC3D,2DAA2D;IAC3D,MAAM,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;IAC/E,MAAM,eAAe,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,6BAA6B,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,iBAAiB,GAAG,YAAY,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,WAA+B,CAAC;IACpC,IAAI,YAAY,EAAE,CAAC;QACf,8FAA8F;QAC9F,8EAA8E;QAC9E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,sBAAsB,CAAC,QAAQ,EAAE,6CAA6C,EAAE,KAAK,CAAC,CAAC;QACvF,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,+DAA+D;IAC/D,0EAA0E;IAC1E,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChH,8DAA8D;IAC9D,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjH,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0DAA0D,YAAY,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IAClJ,MAAM,cAAc,GAAG,uGAAuG;QAC1H,uSAAuS,CAAC;IAC5S,MAAM,MAAM,GAAG,sDAAsD,YAAY,GAAG,UAAU,GAAG,cAAc,EAAE,CAAC;IAClH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ;IACrC,2FAA2F;IAC3F,gGAAgG;IAChG,aAAa,UAAU,CAAC,MAAM,CAAC,2BAA2B,UAAU,CAAC,MAAM,CAAC,MAAM;QAC9E,gBAAgB,MAAM,QAAQ,MAAM,iDAAiD;QACrF,+FAA+F;QAC/F,eAAe,EAAE;QACjB,GAAG,cAAc;KACpB,CAAC,CAAC;IACH,sBAAsB,CAAC,MAAM,EAAE,6BAA6B,EAAE,YAAY,CAAC,CAAC;IAC5E,OAAO;QACH,qBAAqB,EAAE,WAAW,KAAK,GAAG;QAC1C,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,aAAa,EAAE,6CAAsD;YACrE,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,OAAO;SAClB,CAAC;QACF,KAAK,CAAC,gBAAgB,CAAC,KAAa;YAChC,uCAAuC;YACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,sDAAsD,UAAU,CAAC,QAAQ,KAAK,EAAE,CAAC,IAAI,iBAAiB,EAAE,EAAE;gBACrJ,GAAG,cAAc;aACpB,CAAC,CAAC;YACH,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,KAAK,EAAE,EAAE,YAAY,CAAC,CAAC;QAChF,CAAC;QACD,KAAK,CAAC,iBAAiB,CAAC,KAAa;YACjC,2DAA2D;YAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,sCAAsC,UAAU,CAAC,SAAS,KAAK,EAAE,CAAC,GAAG,iBAAiB,EAAE,EAAE,cAAc,CAAC,CAAC;YACzJ,sBAAsB,CAAC,MAAM,EAAE,uBAAuB,KAAK,EAAE,EAAE,YAAY,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,aAAa;YACf,OAAO,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAChF,CAAC;QACD,KAAK,CAAC,aAAa;YACf,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,+KAA+K,CAAC,CAAC;YACrM,CAAC;YACD,4FAA4F;YAC5F,2FAA2F;YAC3F,0FAA0F;YAC1F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,+CAA+C;gBACjF,iBAAiB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM;gBACvF,6BAA6B,EAAE,EAAE,cAAc,CAAC,CAAC;YACrD,sBAAsB,CAAC,MAAM,EAAE,wDAAwD,EAAE,YAAY,CAAC,CAAC;QAC3G,CAAC;KACJ,CAAC;AACN,CAAC;AACD,KAAK,UAAU,kBAAkB,CAAC,OAAgB,EAAE,cAGnD,EAAE,SAAiB,EAAE,YAAqB;IACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;IACpF,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;IACnE,OAAO,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AACD,SAAS,sBAAsB,CAAC,MAG/B,EAAE,SAAiB,EAAE,YAAqB,EAAE,kBAA2B;IACpE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QACrB,OAAO;IACX,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,kBAAkB,IAAI,CAAC,YAAY;YAChD,CAAC,CAAC,0IAA0I;YAC5I,CAAC,CAAC,qMAAqM,CAAC,CAAC;QAC7M,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,iBAAiB,MAAM,CAAC,QAAQ,MAAM,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,8DAA8D;IAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,iBAAiB,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC;AACD,8DAA8D;AAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,SAAS,kBAAkB,CAAC,OAAe;IACvC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,QAAQ,GAAG,GAAW,EAAE;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,CAAC,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAU,EAAE;QAC7C,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,iBAAiB,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;QACvD,MAAM,IAAI,MAAM,CAAC;QACjB,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;IACF,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QACjE,MAAM,OAAO,GAA4C,EAAE,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAiB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YACtD,6DAA6D;YAC7D,oCAAoC;YACpC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtH,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtH,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,mBAAmB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,mBAAmB,CAAC;YACtG,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;gBACjE,IAAI,WAAW,KAAK,SAAS;oBACzB,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;gBAC5C,IAAI,UAAU,KAAK,SAAS;oBACxB,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;YAC9C,CAAC;iBACI,CAAC;gBACF,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;oBACxB,MAAM,CAAC,MAAM,GAAG,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;oBAC1B,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QACjC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAOD,2FAA2F;AAC3F,SAAS,aAAa,CAAC,OAAe,EAAE,KAAa;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YACL,SAAS;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,kCAAkC,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QAC9F,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AACD,iEAAiE;AACjE,SAAS,gBAAgB,CAAC,OAAe,EAAE,KAAa;IACpD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,MAAM;YACP,SAAS;QACb,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,kCAAkC,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;YACrF,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,2EAA2E;AAC3E,SAAS,UAAU,CAAC,OAAe,EAAE,KAAa;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,IAAI;YACL,SAAS;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,+CAA+C,CAAC,CAAC;QAC3F,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,0EAA0E;AAC1E,SAAS,cAAc,CAAC,OAAe,EAAE,KAAa;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,CAAC,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,yCAAyC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,yCAAyC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,YAAY,GAAG,IAAI,CAAC;QACvC,IAAI,UAAU,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,0CAA0C,CAAC,CAAC;QACtF,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,MAAM,GAAG,UAAU,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AACD,SAAS,WAAW,CAAC,KAA0B,EAAE,GAAW,EAAE,KAAa,EAAE,IAAY;IACrF,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,2BAA2B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,SAAS,cAAc,CAAC,QAA6B,EAAE,GAAW,EAAE,KAAa,EAAE,IAAY;IAC3F,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,8BAA8B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,OAAO,CAAC;AACnB,CAAC;AACD,SAAS,oBAAoB,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAClF,CAAC","sourcesContent":["// 变更分类账(私有 git ledger):回答「**agent** 改了什么」,不是「workspace 相对空目录变了什么」。\n// 契约见 docs/feature/sandbox/architecture.md「变更归因:send 窗口与分类账」:\n// - ledger 的 git 目录在沙箱内、workdir 外(runner 私有路径),以 workdir 为 work-tree——\n//   workdir 保持素净:agent 看不到 runner 的 .git,eval 需要真实 git repo 时自己 git init,\n//   agent 在 workdir 里的任何 git 操作都碰不到分类账。\n// - 三类 commit 时点:锚点一笔(workspace.baseline);每次 t.send() 进入前 workdir 有未记录\n//   变化就落一笔 eval 归因;t.send() 返回后落一笔 agent 归因(send 窗口内的全部变化)。\n// - 归因排除清单 runner 私有、锚点时冻结:项目自己的 .gitignore 不参与归因判断(add -f 绕过),\n//   排除靠 pathspec,include 显式打洞加回。\n// - agent 归因增量 = 逐窗口 delta 序列(DiffWindow[]),不做跨窗口压缩。\nimport type { DiffArtifact, DiffWindow, Sandbox, WindowChange } from \"../types.ts\";\nimport type { AgentWorkspaceDiffPolicy } from \"../assertions/workspace-diff.ts\";\nimport { sandboxSupportsRootCommands } from \"../sandbox/backend.ts\";\nimport { DEFAULT_LEDGER_GIT_DIR, ledgerPathsFor } from \"../sandbox/ledger-paths.ts\";\n/**\n * ledger 的私有 git 目录:workdir 之外、runner 控制;agent 的工具默认不会去 /tmp 翻它。这是\n * 沙箱内 provider(docker/e2b/vercel)的默认值——每个实例都是全新隔离文件系统,固定路径不会\n * 跨实例踩踏。宿主本身即工作树的 provider(如 local)按 sandboxId 登记专属路径覆盖它\n * (见 sandbox/ledger-paths.ts),避免同机多次运行共享同一个 /tmp。\n */\nexport const LEDGER_GIT_DIR = DEFAULT_LEDGER_GIT_DIR;\n/** 整相导出文件的落点(与 ledger 同前缀,同样是 runner 私有路径;覆盖规则同上)。 */\nconst EXPORT_DIR = \"/tmp/.niceeval-ledger-export\";\n/** 默认归因排除清单(锚点时冻结):依赖、构建产物、包管理器缓存与用户项目里的 .niceeval 记录目录。\n *  框架自己不往 workdir 写任何东西(见 docs/observability.md「宿主侧行为断言:t.o11y」),\n *  所以这里没有框架路径要排。 */\nconst DEFAULT_EXCLUDES = [\n    \".git\",\n    \"node_modules\",\n    \".next\",\n    \"dist\",\n    \"build\",\n    \".turbo\",\n    \".niceeval\",\n    \"coverage\",\n    \".cache\",\n    \".pnpm-store\",\n    \".npm\",\n    \".yarn\",\n    \"*venv*/\",\n    \".venv\",\n    \"__pycache__\",\n];\nconst MAX_POLICY_ENTRIES = 256;\nconst MAX_POLICY_ENTRY_UTF8_BYTES = 4096;\nconst policyEncoder = new TextEncoder();\nfunction compareAscii(left: string, right: string): number {\n    return left === right ? 0 : left < right ? -1 : 1;\n}\n/** Reject an unrecordable policy before the collector starts, then freeze its canonical evidence form. */\nfunction canonicalPolicyEntries(entries: readonly string[], name: \"include\" | \"ignore\"): readonly string[] {\n    if (entries.length > MAX_POLICY_ENTRIES) {\n        throw new Error(`defineEval({ diff }).${name} may contain at most ${MAX_POLICY_ENTRIES} entries`);\n    }\n    for (const [index, entry] of entries.entries()) {\n        if (typeof entry !== \"string\") {\n            throw new TypeError(`defineEval({ diff }).${name}[${index}] must be a string`);\n        }\n        if (policyEncoder.encode(entry).byteLength > MAX_POLICY_ENTRY_UTF8_BYTES) {\n            throw new Error(`defineEval({ diff }).${name}[${index}] exceeds ${MAX_POLICY_ENTRY_UTF8_BYTES} UTF-8 bytes`);\n        }\n    }\n    return Object.freeze([...new Set(entries)].sort(compareAscii));\n}\n/**\n * 单个 send 窗口的证据安全上限。越界必须让 workspace.diff 失败,不能产出误导性的空窗口。\n * 字节预算只数**真正要传输的文本** before/after:二进制与超过单文件阈值的文本不内联内容、\n * 只记字节数(WindowChange.elided),因此不占预算——编译产物型窗口(成百上千个 .o 加几个大\n * 文本)不该因为「按尺寸计」被判越界。\n */\nconst MAX_WINDOW_PATHS = 10000;\nconst MAX_WINDOW_TEXT_BYTES = 64 * 1024 * 1024;\n/** 单个文本 blob 的内联阈值:任一侧超过它,该条目按二进制同款处理(记字节数、内容省略)。 */\nconst MAX_FILE_TEXT_BYTES = 1024 * 1024;\n/**\n * 整相导出:一条 POSIX shell 命令枚举**全部** agent 窗口并把证据写进沙箱内导出文件,宿主随后\n * 经文件通道一次下载——provider 往返数与窗口数、文件数都无关。对沙箱环境的全部要求是 git 与\n * POSIX 工具(sh/awk/wc/sort/grep),不依赖 node、python 等运行时。\n *\n * 沙箱内不组装 JSON:导出文件直接拼接 git 原生输出——每窗口四段,`diff-tree -z`(状态 + 前后\n * blob sha + 路径,NUL 安全)、`numstat -z`(二进制识别)、`cat-file --batch-check`(全部 blob\n * 尺寸)、`cat-file --batch`(要内联的文本 blob 内容,输出自带长度帧)——解析与校验全部在宿主侧完成。\n * 需要在沙箱内做的两个判断都不解析路径列:sha 提取用 awk 取 diff-tree 原始输出的第 3/4 列\n * (路径在其后,含空格也不影响);二进制排除靠 numstat 与 diff-tree 输出的行号对齐。\n * 尺寸核算(--batch-check)先于内容读取(--batch),越界在产出任何内容前失败;预算只累计真正\n * 要传输的文本 blob(二进制与单文件超限文本只出字节数,不进 --batch 请求、不计预算)。\n * 宿主侧从 sizes + numstat 两段就能判出哪些条目内容被省略,沙箱不额外输出一份判定清单。\n */\nfunction buildExportScript(exportDir: string): string {\n    return [\n        \"set -eu\",\n        // shellQuote:多数 provider 的 exportDir 是固定字面量(无空格);local 的 exportDir 来自\n        // mkdtemp(可能落在含空格的自定义 TMPDIR 下),赋值行不加引号会被 shell 拆成多个词。\n        `D=${shellQuote(exportDir)}`,\n        'rm -rf \"$D\" && mkdir -p \"$D\"',\n        'OUT=$D/export.bin',\n        ': > \"$OUT\"',\n        'fail() { printf \"%s\\\\n\" \"$1\" >&2; exit 2; }',\n        // 帧格式:`section <name> <bytes>` 头一行,后跟原始字节;长度前缀让内容里的任意字节都安全。\n        'emit() { printf \"section %s %s\\\\n\" \"$1\" \"$(($(wc -c < \"$2\")))\" >> \"$OUT\"; cat \"$2\" >> \"$OUT\"; }',\n        'git log --reverse --format=\"%H %s\" > \"$D/log.txt\"',\n        \"while IFS= read -r line; do\",\n        '  hash=${line%% *}',\n        '  subject=${line#* }',\n        '  case $subject in \"agent \"*) ;; *) continue ;; esac',\n        '  label=${subject#agent }',\n        // 非 -z 的 diff-tree 把特殊路径引号转义成单行,一行 = 一个条目:wc -l 即路径数,awk 列取 sha 不碰路径。\n        '  git diff-tree -r --no-renames \"$hash^\" \"$hash\" > \"$D/dt.txt\"',\n        '  n=$(($(wc -l < \"$D/dt.txt\")))',\n        `  [ \"$n\" -le ${MAX_WINDOW_PATHS} ] || fail \"niceeval diff window contains $n paths; limit is ${MAX_WINDOW_PATHS}\"`,\n        '  git diff-tree -r --no-renames --numstat \"$hash^\" \"$hash\" > \"$D/ns.txt\"',\n        // 全部 blob 出现次数(before + after,零 sha = 无此侧,排除)→ 逐次尺寸核算。\n        \"  awk '$3 !~ /^0+$/ { print $3 } $4 !~ /^0+$/ { print $4 }' \\\"$D/dt.txt\\\" > \\\"$D/occ.txt\\\"\",\n        '  git cat-file --batch-check < \"$D/occ.txt\" > \"$D/sizes.txt\"',\n        '  if grep -q \" missing$\" \"$D/sizes.txt\"; then fail \"niceeval ledger export: blob object missing\"; fi',\n        // 逐条目分类:numstat 第 1 列为 \"-\" 的行是二进制,按行号对齐标 B,其余标 T,后跟前后 blob sha。\n        '  awk \\'NR==FNR { bin[FNR] = ($1 == \"-\"); next } { printf \"%s %s %s\\\\n\", (bin[FNR] ? \"B\" : \"T\"), $3, $4 }\\' \"$D/ns.txt\" \"$D/dt.txt\" > \"$D/entries.txt\"',\n        // 要内联的文本 blob(去重):二进制条目与任一侧超过单文件阈值的文本条目都不请求内容,\n        // 也不计入窗口预算——它们只出字节数(宿主据同一份 sizes 判成 elided)。\n        `  awk -v LIMIT=${MAX_FILE_TEXT_BYTES} -v TOTAL=\"$D/total.txt\" 'NR==FNR { sz[$1] = $3; next } $1 == \"T\" { b = $2; a = $3; if (b !~ /^0+$/ && sz[b] > LIMIT) next; if (a !~ /^0+$/ && sz[a] > LIMIT) next; if (b !~ /^0+$/ && !(b in seen)) { seen[b] = 1; total += sz[b]; print b } if (a !~ /^0+$/ && !(a in seen)) { seen[a] = 1; total += sz[a]; print a } } END { print total+0 > TOTAL }' \"$D/sizes.txt\" \"$D/entries.txt\" > \"$D/text.txt\"`,\n        '  bytes=$(cat \"$D/total.txt\")',\n        `  [ \"$bytes\" -le ${MAX_WINDOW_TEXT_BYTES} ] || fail \"niceeval diff window transfers $bytes text blob bytes; limit is ${MAX_WINDOW_TEXT_BYTES}; narrow defineEval({ diff }) include/ignore rules\"`,\n        '  git cat-file --batch < \"$D/text.txt\" > \"$D/blobs.bin\"',\n        '  git diff-tree -r --no-renames -z \"$hash^\" \"$hash\" > \"$D/dtz.bin\"',\n        '  git diff-tree -r --no-renames --numstat -z \"$hash^\" \"$hash\" > \"$D/nsz.bin\"',\n        '  printf \"window %s %s\\\\n\" \"$hash\" \"$label\" >> \"$OUT\"',\n        '  emit difftree \"$D/dtz.bin\"',\n        '  emit numstat \"$D/nsz.bin\"',\n        '  emit sizes \"$D/sizes.txt\"',\n        '  emit blobs \"$D/blobs.bin\"',\n        'done < \"$D/log.txt\"',\n        // root ledger commands may create the private export with a restrictive umask. The file is outside\n        // workdir; making only this runner artifact readable lets the provider file channel fetch it.\n        'chmod 0644 \"$OUT\"',\n    ].join(\"\\n\");\n}\nexport interface ChangeLedger {\n    /** send 进入前:workdir 有未记录变化就落一笔 eval 归因(fixture / setup / runCommand 副作用)。 */\n    commitEvalWindow(label: string): Promise<void>;\n    /** send 返回后:落一笔 agent 归因——这个 send 窗口内的全部 workspace 变化(无变化也落空窗口)。 */\n    commitAgentWindow(label: string): Promise<void>;\n    /** workspace.diff 阶段:从分类账导出每个 send 窗口自己的 before/after,按时序。 */\n    exportWindows(): Promise<DiffArtifact>;\n    /** 回到创建时的题间锚点，并保留归因排除清单排除的动态环境。 */\n    resetToAnchor(): Promise<void>;\n    /**\n     * 建账时探测到的执行身份是否为 root(仅当 provider 支持 root ledger 命令时才探测得到,\n     * 否则恒为 false)。sandboxReuse 复用池据此在实例进池前拒绝(见 docs/feature/sandbox/reuse.md);\n     * `resetToAnchor()` 内的同款判断作纵深防御保留。\n     */\n    readonly rootExecutionIdentity: boolean;\n    /** Frozen semantic identity consumed by the Attempt-owned diff Attachment. */\n    readonly attribution: AgentWorkspaceDiffPolicy;\n}\ninterface LedgerOptions {\n    /** defineEval({ diff }) 的归因调整:ignore 追加排除,include 打洞加回(优先级最高)。 */\n    include?: string[];\n    ignore?: string[];\n}\n/** 每条 git 命令都带上私有 GIT_DIR + workdir work-tree;项目/全局 gitignore 一律不参与。 */\nfunction gitEnv(sandbox: Sandbox, gitDir: string): globalThis.Record<string, string> {\n    return {\n        GIT_DIR: gitDir,\n        GIT_WORK_TREE: sandbox.workdir,\n        GIT_AUTHOR_NAME: \"niceeval\",\n        GIT_AUTHOR_EMAIL: \"niceeval@localhost\",\n        GIT_COMMITTER_NAME: \"niceeval\",\n        GIT_COMMITTER_EMAIL: \"niceeval@localhost\",\n        // Internal root Git must never consume configuration or hooks writable by the Agent.\n        GIT_CONFIG_NOSYSTEM: \"1\",\n        GIT_CONFIG_GLOBAL: \"/dev/null\",\n        GIT_CONFIG_COUNT: \"1\",\n        GIT_CONFIG_KEY_0: \"core.hooksPath\",\n        GIT_CONFIG_VALUE_0: \"/dev/null\",\n        GIT_TERMINAL_PROMPT: \"0\",\n        HOME: \"/tmp\",\n    };\n}\nfunction shellQuote(s: string): string {\n    return `'${s.replaceAll(\"'\", `'\\\\''`)}'`;\n}\n/**\n * Root Git can faithfully restore bytes but would otherwise recreate ordinary fixture files as root.\n * Keep a content-free metadata mirror inside the private (0700) ledger and reapply uid/gid/mode after\n * reset. The batched xargs loops preserve arbitrary Git path bytes without exposing objects to the Agent.\n */\nfunction captureBaselineMetadataScript(): string {\n    return [\n        'META=\"$GIT_DIR/niceeval-baseline-metadata\"',\n        'rm -rf \"$META\" && mkdir -p \"$META/files\" \"$META/dirs\"',\n        \"export META\",\n        \"git ls-files -z | xargs -0 -n 100 sh -c '\",\n        \"  for p do\",\n        '    src=\"$GIT_WORK_TREE/$p\"',\n        '    ref=\"$META/files/$p\"',\n        '    mkdir -p \"$(dirname \"$ref\")\" && : > \"$ref\"',\n        '    owner=$(stat -c \"%u:%g\" \"$src\") && mode=$(stat -c \"%a\" \"$src\")',\n        '    chown -h \"$owner\" \"$ref\" && chmod \"$mode\" \"$ref\"',\n        '    d=$(dirname \"$p\")',\n        '    while [ \"$d\" != \".\" ]; do',\n        '      dref=\"$META/dirs/$d/.ref\"',\n        '      if [ ! -e \"$dref\" ]; then',\n        '        mkdir -p \"$(dirname \"$dref\")\" && : > \"$dref\"',\n        '        downer=$(stat -c \"%u:%g\" \"$GIT_WORK_TREE/$d\") && dmode=$(stat -c \"%a\" \"$GIT_WORK_TREE/$d\")',\n        '        chown \"$downer\" \"$dref\" && chmod \"$dmode\" \"$dref\"',\n        \"      fi\",\n        '      d=$(dirname \"$d\")',\n        \"    done\",\n        \"  done\",\n        \"' niceeval-meta\",\n        // Agent and any background process share the ordinary sandbox uid. Keep both objects and the\n        // metadata mirror root-private for the whole attempt; reset never opens this directory to that uid.\n        'chmod go-rwx \"$GIT_DIR\"',\n    ].join(\"\\n\");\n}\nfunction restoreBaselineMetadataScript(): string {\n    return [\n        'META=\"$GIT_DIR/niceeval-baseline-metadata\"',\n        \"export META\",\n        'if [ -d \"$META/files\" ]; then',\n        \"  find \\\"$META/files\\\" -type f -print0 | xargs -0 -n 100 sh -c '\",\n        \"    for ref do\",\n        '      p=${ref#\"$META/files/\"}',\n        '      target=\"$GIT_WORK_TREE/$p\"',\n        '      if [ -e \"$target\" ] || [ -L \"$target\" ]; then',\n        '        owner=$(stat -c \"%u:%g\" \"$ref\") && mode=$(stat -c \"%a\" \"$ref\")',\n        '        chown -h \"$owner\" \"$target\"',\n        '        [ -L \"$target\" ] || chmod \"$mode\" \"$target\"',\n        \"      fi\",\n        \"    done\",\n        \"  ' niceeval-meta-restore\",\n        \"fi\",\n        // Apply directory metadata last so restrictive parent modes cannot interfere with child repair.\n        'if [ -d \"$META/dirs\" ]; then',\n        \"  find \\\"$META/dirs\\\" -type f -name .ref -print0 | xargs -0 -n 100 sh -c '\",\n        \"    for ref do\",\n        '      d=${ref%/.ref}',\n        '      p=${d#\"$META/dirs/\"}',\n        '      target=\"$GIT_WORK_TREE/$p\"',\n        '      if [ -d \"$target\" ]; then',\n        '        owner=$(stat -c \"%u:%g\" \"$ref\") && mode=$(stat -c \"%a\" \"$ref\")',\n        '        chown \"$owner\" \"$target\" && chmod \"$mode\" \"$target\"',\n        \"      fi\",\n        \"    done\",\n        \"  ' niceeval-dir-meta-restore\",\n        \"fi\",\n        'chmod go-rwx \"$GIT_DIR\"',\n    ].join(\"\\n\");\n}\n/**\n * 把仓库根语义的 gitignore 风格规则编译成 ledger pathspec。\n * 无斜杠的名字匹配任意深度；有斜杠的规则相对 workdir 根；目录本身与后代一起处理。\n */\nfunction gitignorePathspecs(pattern: string, exclude: boolean): string[] {\n    let normalized = pattern;\n    while (normalized.startsWith(\"./\"))\n        normalized = normalized.slice(2);\n    if (normalized.startsWith(\"/\"))\n        normalized = normalized.slice(1);\n    normalized = normalized.replace(/\\/+$/, \"\");\n    if (!normalized)\n        return [];\n    const glob = normalized.includes(\"/\") ? normalized : `**/${normalized}`;\n    const globs = exclude && !glob.endsWith(\"/**\") ? [glob, `${glob}/**`] : [glob];\n    const magic = exclude ? \":(glob,exclude)\" : \":(glob)\";\n    return [...new Set(globs)].map((value) => `${magic}${value}`);\n}\n/** 打分类账锚点(workspace.baseline 阶段,环境层钩子之后):git init + 冻结排除清单 + 首笔 commit。 */\nexport async function createChangeLedger(sandbox: Sandbox, opts?: LedgerOptions): Promise<ChangeLedger> {\n    const includes = canonicalPolicyEntries(opts?.include ?? [], \"include\");\n    const ignored = canonicalPolicyEntries(opts?.ignore ?? [], \"ignore\");\n    const excludes = [...DEFAULT_EXCLUDES, ...ignored];\n    // 多数 provider 用固定的宿主内私有路径(每实例全新隔离文件系统,天然不冲突);宿主本身即\n    // 工作树的 provider(如 local)按 sandboxId 登记专属路径,避免同机多次运行互相踩踏\n    // (见 sandbox/ledger-paths.ts —— 这里不认 provider 名,只问登记表)。\n    const paths = ledgerPathsFor(sandbox.sandboxId);\n    const gitDir = paths?.gitDir ?? LEDGER_GIT_DIR;\n    const exportDir = paths?.exportDir ?? EXPORT_DIR;\n    const env = gitEnv(sandbox, gitDir);\n    const rootCommands = sandboxSupportsRootCommands(sandbox);\n    // 只给 runner 私有 ledger 命令提权，以便读取题目故意设置的受限文件。脚本不 chmod/chown\n    // workdir，Agent 命令仍沿标准非 root 身份；不支持提权的 provider 保持既有用户态路径。\n    const commandOptions = rootCommands ? { env, user: \"root\" as const } : { env };\n    const captureMetadata = rootCommands ? ` && ${captureBaselineMetadataScript()}` : \"\";\n    const lockPrivateLedger = rootCommands ? ' && chmod go-rwx \"$GIT_DIR\"' : \"\";\n    let ordinaryUid: string | undefined;\n    if (rootCommands) {\n        // Capture before Agent setup/send can mutate the VM. A post-attempt `id` probe would not be a\n        // trustworthy boundary when the configured execution identity itself is root.\n        const identity = await sandbox.runShell(\"command -p id -u\", { env });\n        ensureCommandSucceeded(identity, \"detect sandbox execution identity for reuse\", false);\n        ordinaryUid = identity.stdout.trim();\n    }\n    // add -A -f:绕过项目自己的 .gitignore(项目 ignore 的文件照常记录);排除靠 pathspec\n    // (runner 私有清单,agent / fixture 写 .gitignore 影响不了它);include 用第二次 add 打洞加回。\n    const excludeSpecs = excludes.flatMap((pattern) => gitignorePathspecs(pattern, true)).map(shellQuote).join(\" \");\n    // include 打洞:路径此刻可能还不存在(如 agent 之后才写),unmatched pathspec 不算错。\n    const includeSpecs = includes.flatMap((pattern) => gitignorePathspecs(pattern, false)).map(shellQuote).join(\" \");\n    const includeAdd = includeSpecs.length > 0 ? ` && { git -c advice.addEmbeddedRepo=false add -A -f -- ${includeSpecs} 2>/dev/null || true; }` : \"\";\n    const rejectGitlinks = \" && nested=$(git ls-files --stage | awk '$1 == \\\"160000\\\" { sub(/^[^\\\\t]*\\\\t/, \\\"\\\"); print; exit }')\" +\n        ' && if [ -n \"$nested\" ]; then printf \\'%s\\\\n\\' \"niceeval ledger cannot track nested Git repository $nested as file-level evidence; move the checkout to sandbox.workdir root, or add the whole path to defineEval({ diff: { ignore: [...] } }) when it is intentionally out of scope\" >&2; exit 2; fi';\n    const addAll = `git -c advice.addEmbeddedRepo=false add -A -f -- . ${excludeSpecs}${includeAdd}${rejectGitlinks}`;\n    const anchor = await sandbox.runShell(\n    // The path is predictable inside an isolated VM. Remove any image/prepare-time occupant or\n    // symlink, then recreate the exact runner-private directory as root 0700 before Git touches it.\n    `rm -rf -- ${shellQuote(gitDir)} && mkdir -p -m 0700 -- ${shellQuote(gitDir)} && ` +\n        `git init -q \"${gitDir}\" && ${addAll} && git commit -q --allow-empty -m \"anchor\" && ` +\n        `(git rev-parse -q --verify niceeval-reuse-anchor >/dev/null || git tag niceeval-reuse-anchor)` +\n        captureMetadata, {\n        ...commandOptions,\n    });\n    ensureCommandSucceeded(anchor, \"create change ledger anchor\", rootCommands);\n    return {\n        rootExecutionIdentity: ordinaryUid === \"0\",\n        attribution: Object.freeze({\n            defaultPolicy: \"niceeval.sandbox-ledger/default-excludes/v1\" as const,\n            include: includes,\n            ignore: ignored,\n        }),\n        async commitEvalWindow(label: string): Promise<void> {\n            // 有未记录变化才落这一笔;干净时不产生空的 eval 归因 commit。\n            const result = await sandbox.runShell(`${addAll} && (git diff --cached --quiet || git commit -q -m ${shellQuote(`eval ${label}`)})${lockPrivateLedger}`, {\n                ...commandOptions,\n            });\n            ensureCommandSucceeded(result, `commit eval window ${label}`, rootCommands);\n        },\n        async commitAgentWindow(label: string): Promise<void> {\n            // 窗口内没有变化时也落一条(--allow-empty),diff.json 里该窗口 changes 为空对象。\n            const result = await sandbox.runShell(`${addAll} && git commit -q --allow-empty -m ${shellQuote(`agent ${label}`)}${lockPrivateLedger}`, commandOptions);\n            ensureCommandSucceeded(result, `commit agent window ${label}`, rootCommands);\n        },\n        async exportWindows(): Promise<DiffArtifact> {\n            return exportAgentWindows(sandbox, commandOptions, exportDir, rootCommands);\n        },\n        async resetToAnchor(): Promise<void> {\n            if (ordinaryUid === \"0\") {\n                throw new Error(\"sandboxReuse cannot safely reuse a root-agent sandbox: the Agent could read private ledger objects from prior attempts; use a non-root execution user or disable sandboxReuse\");\n            }\n            // Root performs the byte reset, then reapplies the content-free baseline metadata mirror so\n            // ordinary files return to their original uid/gid/mode instead of becoming root-owned. The\n            // private object database stays 0700 throughout; no Agent/background process can read it.\n            const result = await sandbox.runShell(`git reset -q --hard niceeval-reuse-anchor && ` +\n                `git clean -fd ${excludes.map((pattern) => `-e ${shellQuote(pattern)}`).join(\" \")} && ` +\n                restoreBaselineMetadataScript(), commandOptions);\n            ensureCommandSucceeded(result, \"reset reusable sandbox to anchor and restore ownership\", rootCommands);\n        },\n    };\n}\nasync function exportAgentWindows(sandbox: Sandbox, commandOptions: {\n    readonly env: globalThis.Record<string, string>;\n    readonly user?: \"root\";\n}, exportDir: string, rootCommands: boolean): Promise<DiffArtifact> {\n    const result = await sandbox.runShell(buildExportScript(exportDir), commandOptions);\n    ensureCommandSucceeded(result, \"export agent windows\", rootCommands);\n    const payload = await sandbox.readBytes(`${exportDir}/export.bin`);\n    return parseExportPayload(Buffer.from(payload));\n}\nfunction ensureCommandSucceeded(result: {\n    exitCode: number;\n    stderr: string;\n}, operation: string, rootCommands: boolean, permissionGuidance?: string): void {\n    if (result.exitCode === 0)\n        return;\n    const lines = result.stderr.trim().split(\"\\n\").filter(Boolean);\n    const permission = lines.find((line) => /permission denied|operation not permitted/i.test(line));\n    if (permission !== undefined) {\n        const guidance = permissionGuidance ?? (rootCommands\n            ? \"the provider declared root command support, but root ledger execution still could not read the workspace; check its root command mapping\"\n            : \"this sandbox provider does not support root ledger commands; use a root-capable provider for tasks that intentionally start with unreadable files instead of chmod/chowning away the task condition\");\n        throw new Error(`${operation} failed (exit ${result.exitCode}): ${permission}; ${guidance}`);\n    }\n    // git 可能先输出 advisory warning，再输出 niceeval 的可操作诊断；最后一行最接近失败根因。\n    const detail = lines.at(-1);\n    throw new Error(`${operation} failed (exit ${result.exitCode})${detail ? `: ${detail}` : \"\"}`);\n}\n// ---------- 导出文件的宿主侧解析(严格校验:帧、git 输出形状、尺寸与内容的完备性) ----------\nconst ZERO_SHA = /^0+$/;\nfunction parseExportPayload(payload: Buffer): DiffArtifact {\n    const windows: DiffWindow[] = [];\n    let offset = 0;\n    const readLine = (): string => {\n        const newline = payload.indexOf(0x0a, offset);\n        if (newline === -1)\n            throw new Error(\"niceeval ledger export: truncated header\");\n        const line = payload.subarray(offset, newline).toString(\"utf8\");\n        offset = newline + 1;\n        return line;\n    };\n    const readSection = (expected: string): Buffer => {\n        const header = readLine().split(\" \");\n        if (header.length !== 3 || header[0] !== \"section\" || header[1] !== expected) {\n            throw new Error(`niceeval ledger export: expected section ${expected}, got ${JSON.stringify(header.join(\" \"))}`);\n        }\n        const length = Number(header[2]);\n        if (!isNonNegativeInteger(length) || offset + length > payload.length) {\n            throw new Error(`niceeval ledger export: invalid ${expected} section length`);\n        }\n        const body = payload.subarray(offset, offset + length);\n        offset += length;\n        return body;\n    };\n    while (offset < payload.length) {\n        const header = readLine();\n        if (!header.startsWith(\"window \"))\n            throw new Error(`niceeval ledger export: expected window header, got ${JSON.stringify(header)}`);\n        const rest = header.slice(\"window \".length);\n        const space = rest.indexOf(\" \");\n        const label = space === -1 ? \"\" : rest.slice(space + 1);\n        const entries = parseDiffTree(readSection(\"difftree\"), label);\n        const binaryPaths = parseBinaryPaths(readSection(\"numstat\"), label);\n        const sizeBySha = parseSizes(readSection(\"sizes\"), label);\n        const contentBySha = parseBlobBatch(readSection(\"blobs\"), label);\n        const changes: globalThis.Record<string, WindowChange> = {};\n        for (const entry of entries) {\n            const change: WindowChange = { status: entry.status };\n            // 沙箱侧决定「哪些文本 blob 进 --batch」的两条判据在宿主侧同样成立(binary 段 + sizes 段\n            // 都在导出文件里),所以这里独立重算,不需要沙箱再输出一份省略清单。\n            const beforeBytes = entry.status === \"added\" ? undefined : requireSize(sizeBySha, entry.beforeSha, label, entry.path);\n            const afterBytes = entry.status === \"deleted\" ? undefined : requireSize(sizeBySha, entry.afterSha, label, entry.path);\n            const binary = binaryPaths.has(entry.path);\n            const oversized = (beforeBytes ?? 0) > MAX_FILE_TEXT_BYTES || (afterBytes ?? 0) > MAX_FILE_TEXT_BYTES;\n            if (binary || oversized) {\n                change.elided = { reason: binary ? \"binary\" : \"oversized-text\" };\n                if (beforeBytes !== undefined)\n                    change.elided.beforeBytes = beforeBytes;\n                if (afterBytes !== undefined)\n                    change.elided.afterBytes = afterBytes;\n            }\n            else {\n                if (entry.status !== \"added\")\n                    change.before = requireContent(contentBySha, entry.beforeSha, label, entry.path);\n                if (entry.status !== \"deleted\")\n                    change.after = requireContent(contentBySha, entry.afterSha, label, entry.path);\n            }\n            changes[entry.path] = change;\n        }\n        windows.push({ window: label, changes });\n    }\n    return windows;\n}\ninterface DiffTreeEntry {\n    path: string;\n    status: WindowChange[\"status\"];\n    beforeSha: string;\n    afterSha: string;\n}\n/** `git diff-tree -r --no-renames -z` 原始输出:`:mode mode sha sha status NUL path NUL` 重复。 */\nfunction parseDiffTree(section: Buffer, label: string): DiffTreeEntry[] {\n    const parts = section.toString(\"utf8\").split(\"\\0\");\n    const entries: DiffTreeEntry[] = [];\n    for (let i = 0; i < parts.length;) {\n        const meta = parts[i++];\n        if (!meta)\n            continue;\n        const path = parts[i++];\n        const fields = meta.split(\" \");\n        if (path === undefined || fields.length !== 5 || !fields[0]!.startsWith(\":\")) {\n            throw new Error(`export window ${label}: malformed git diff-tree output`);\n        }\n        const code = fields[4]!;\n        const status = code.startsWith(\"A\") ? \"added\" : code.startsWith(\"D\") ? \"deleted\" : \"modified\";\n        entries.push({ path, status, beforeSha: fields[2]!, afterSha: fields[3]! });\n    }\n    return entries;\n}\n/** `git diff-tree --numstat -z`:二进制条目的 added/removed 计数是 `-`。 */\nfunction parseBinaryPaths(section: Buffer, label: string): Set<string> {\n    const paths = new Set<string>();\n    for (const record of section.toString(\"utf8\").split(\"\\0\")) {\n        if (!record)\n            continue;\n        const firstTab = record.indexOf(\"\\t\");\n        const secondTab = record.indexOf(\"\\t\", firstTab + 1);\n        if (firstTab === -1 || secondTab === -1)\n            throw new Error(`export window ${label}: malformed git --numstat output`);\n        if (record.slice(0, firstTab) === \"-\" && record.slice(firstTab + 1, secondTab) === \"-\") {\n            paths.add(record.slice(secondTab + 1));\n        }\n    }\n    return paths;\n}\n/** `git cat-file --batch-check`:每行 `sha type size`(输入是逐出现次数的 sha,重复无害)。 */\nfunction parseSizes(section: Buffer, label: string): Map<string, number> {\n    const sizes = new Map<string, number>();\n    for (const line of section.toString(\"utf8\").split(\"\\n\")) {\n        if (!line)\n            continue;\n        const fields = line.split(\" \");\n        const size = Number(fields[fields.length - 1]);\n        if (fields.length < 3 || !isNonNegativeInteger(size)) {\n            throw new Error(`export window ${label}: malformed git cat-file --batch-check output`);\n        }\n        sizes.set(fields[0]!, size);\n    }\n    return sizes;\n}\n/** `git cat-file --batch`:自带长度帧——`sha type size\\n` + size 字节内容 + `\\n`。 */\nfunction parseBlobBatch(section: Buffer, label: string): Map<string, string> {\n    const contents = new Map<string, string>();\n    let offset = 0;\n    while (offset < section.length) {\n        const newline = section.indexOf(0x0a, offset);\n        if (newline === -1)\n            throw new Error(`export window ${label}: malformed git cat-file --batch header`);\n        const fields = section.subarray(offset, newline).toString(\"utf8\").split(\" \");\n        const size = Number(fields[fields.length - 1]);\n        if (fields.length < 3 || !isNonNegativeInteger(size)) {\n            throw new Error(`export window ${label}: malformed git cat-file --batch header`);\n        }\n        const contentStart = newline + 1;\n        const contentEnd = contentStart + size;\n        if (contentEnd >= section.length || section[contentEnd] !== 0x0a) {\n            throw new Error(`export window ${label}: truncated git cat-file --batch content`);\n        }\n        contents.set(fields[0]!, section.subarray(contentStart, contentEnd).toString(\"utf8\"));\n        offset = contentEnd + 1;\n    }\n    return contents;\n}\nfunction requireSize(sizes: Map<string, number>, sha: string, label: string, path: string): number {\n    const size = sizes.get(sha);\n    if (size === undefined || ZERO_SHA.test(sha))\n        throw new Error(`export window ${label}: missing blob size for ${JSON.stringify(path)}`);\n    return size;\n}\nfunction requireContent(contents: Map<string, string>, sha: string, label: string, path: string): string {\n    const content = contents.get(sha);\n    if (content === undefined || ZERO_SHA.test(sha))\n        throw new Error(`export window ${label}: missing blob content for ${JSON.stringify(path)}`);\n    return content;\n}\nfunction isNonNegativeInteger(value: unknown): value is number {\n    return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n"]}

package/dist/runner/lock.cjs

@@ -145,23 +145,36 @@ function makeAbortError(signal) {
     return err;
 }
 function awaitAbort(signal) {
+    if (signal === undefined)
+        return effect_1.Effect.never;
     return effect_1.Effect.async((resume, effectSignal) => {
-        if (signal === undefined)
-            return;
+        let completed = false;
         const cleanup = () => {
             signal.removeEventListener("abort", onAbort);
-            effectSignal.removeEventListener("abort", cleanup);
+            effectSignal.removeEventListener("abort", onEffectAbort);
         };
-        const onAbort = () => {
+        const cancel = () => {
+            if (completed)
+                return;
+            completed = true;
             cleanup();
+        };
+        const onAbort = () => {
+            if (completed)
+                return;
+            cancel();
             resume(effect_1.Effect.fail(makeAbortError(signal)));
         };
-        if (signal.aborted) {
-            onAbort();
-            return;
-        }
+        const onEffectAbort = () => cancel();
         signal.addEventListener("abort", onAbort, { once: true });
-        effectSignal.addEventListener("abort", cleanup, { once: true });
+        effectSignal.addEventListener("abort", onEffectAbort, { once: true });
+        // Both listeners must be live before inspecting either signal: otherwise
+        // an abort between inspection and registration could strand the waiter.
+        if (effectSignal.aborted)
+            onEffectAbort();
+        else if (signal.aborted)
+            onAbort();
+        return effect_1.Effect.sync(cancel);
     });
 }
 /** 可被外部 AbortSignal 或 Effect interruption 立刻打断的轮询延时。 */
@@ -186,7 +199,7 @@ function acquireCaseLockEffect(niceevalRoot, experimentId, evalId, identity, opt
     const acquire = () => effect_1.Effect.suspend(() => {
         if (opts.signal?.aborted)
             return effect_1.Effect.fail(makeAbortError(opts.signal));
-        return tryAcquireCaseLockOnceEffect(niceevalRoot, experimentId, evalId, identity, Date.now()).pipe(effect_1.Effect.flatMap((result) => {
+        return effect_1.Clock.currentTimeMillis.pipe(effect_1.Effect.flatMap((nowMs) => tryAcquireCaseLockOnceEffect(niceevalRoot, experimentId, evalId, identity, nowMs)), effect_1.Effect.flatMap((result) => {
             if (result.kind === "acquired")
                 return effect_1.Effect.succeed({ takenOver: result.takenOver });
             const reportWait = waitStarted
@@ -206,7 +219,7 @@ function acquireCaseLockEffect(niceevalRoot, experimentId, evalId, identity, opt
         const heartbeat = effect_1.Effect.forever(effect_1.Effect.sleep(heartbeatIntervalMs).pipe(effect_1.Effect.zipRight(
         // File-system promises do not guarantee AbortSignal support. Keep one renewal uninterruptible so
         // Fiber.interrupt below waits for any started write before rm can make the path reusable.
-        effect_1.Effect.suspend(() => effect_1.Effect.uninterruptible(renewHeartbeatEffect(niceevalRoot, experimentId, evalId, Date.now(), () => released))).pipe(effect_1.Effect.ignore))));
+        effect_1.Effect.uninterruptible(effect_1.Clock.currentTimeMillis.pipe(effect_1.Effect.flatMap((nowMs) => renewHeartbeatEffect(niceevalRoot, experimentId, evalId, nowMs, () => released)))).pipe(effect_1.Effect.ignore))));
         // A child inherits the parent's interruptibility. This branch still
         // runs under the acquisition mask, so restore the heartbeat before
         // forking; otherwise release would wait forever while interrupting an