oh-my-super-agent 0.1.0

package/dist/src/conductor/waiter.js

@@ -0,0 +1,427 @@
+import { join } from "node:path";
+import { assertActorId, assertOpaqueId, assertRecordId, assertTransitionNonce, } from "../domain/records.js";
+import { canonicalTimestamp } from "../queue/model.js";
+import { acquireDirectoryLock } from "../runtime/lock.js";
+import { linuxProcessIdentityIsLive, } from "../runtime/process-identity.js";
+import { createRecordStore, RecordAlreadyExistsError } from "../runtime/record-store.js";
+import { assertSchema, loadJsonSchema } from "../runtime/schema.js";
+import { createStableId } from "../runtime/stable-id.js";
+import { validateExistingDirectory } from "../utils/fs.js";
+import { assertConductorNotificationStore, } from "./notifications.js";
+const WAITER_STORE = Symbol("OMS conductor waiter store");
+const WAITER_STORES = new WeakSet();
+const WAITER_ACTOR = "oms-waiter";
+const WATCHDOG_ACTOR = "oms-watchdog";
+export function createConductorWaiterStore(options) {
+    const recordsRoot = validateExistingDirectory(options.recordsRoot, "conductor waiter records root");
+    const locksRoot = validateExistingDirectory(options.locksRoot, "conductor waiter locks root");
+    if (recordsRoot === locksRoot)
+        throw new Error("waiter records and locks roots must differ");
+    const processIsLive = options.processIsLive ?? linuxProcessIdentityIsLive;
+    const payloadSchema = loadJsonSchema(join(options.packageRoot, "schemas", "conductor-waiter-payload.schema.json"));
+    const records = createRecordStore({
+        recordsRoot,
+        locksRoot,
+        recordValidator(record) {
+            validateWaiterRecord(record, payloadSchema);
+        },
+        createValidator(record) {
+            if (record.record_kind !== "conductor-waiter" || record.version !== 0) {
+                throw new Error("waiter store creates only initial generation records");
+            }
+        },
+        transitionValidator(current, next) {
+            const from = current;
+            const to = next;
+            if (from.state !== "armed" || !["notified", "failed", "superseded"].includes(to.state)) {
+                throw new Error(`illegal conductor waiter transition: ${from.state} -> ${to.state}`);
+            }
+            for (const field of [
+                "waiter_id",
+                "conductor_session_id",
+                "launch_generation",
+                "pane_id",
+                "armed_by",
+                "armed_at",
+            ]) {
+                if (from.payload[field] !== to.payload[field])
+                    throw new Error(`waiter changed immutable ${field}`);
+            }
+            if (JSON.stringify(from.payload.conductor_process) !== JSON.stringify(to.payload.conductor_process)
+                || JSON.stringify(from.payload.waiter_process) !== JSON.stringify(to.payload.waiter_process))
+                throw new Error("waiter changed immutable process identity");
+        },
+    });
+    function read(waiterId) {
+        return records.read(assertRecordId(waiterId, "waiter id"));
+    }
+    function list(sessionId) {
+        const normalizedSession = sessionId === undefined ? undefined : assertOpaqueId(sessionId, "conductor session id");
+        return Object.freeze(records.list()
+            .filter((record) => normalizedSession === undefined || record.payload.conductor_session_id === normalizedSession)
+            .sort(waiterOrder));
+    }
+    function active(sessionId) {
+        const active = list(sessionId).filter((record) => record.state === "armed");
+        if (active.length > 1)
+            throw new Error("multiple armed conductor waiter generations require recovery");
+        return active[0];
+    }
+    const store = Object.freeze({
+        [WAITER_STORE]: true,
+        arm(input) {
+            const normalized = normalizeArm(input);
+            const lock = acquireDirectoryLock({
+                locksRoot,
+                lockId: "conductor-waiter",
+                ownerId: WAITER_ACTOR,
+                note: `arm:${normalized.conductorSessionId}`,
+            });
+            try {
+                const predecessor = active(normalized.conductorSessionId);
+                if (predecessor) {
+                    const live = processIsLive(predecessor.payload.waiter_process);
+                    const terminalState = live ? "superseded" : "failed";
+                    const failureCode = live ? "duplicate-live-waiter" : "dead-waiter-awaits-watchdog";
+                    const duplicate = createGeneration(normalized, terminalState, failureCode);
+                    return Object.freeze({
+                        status: live ? "duplicate" : "recovery-required",
+                        record: duplicate,
+                    });
+                }
+                return Object.freeze({ status: "armed", record: createGeneration(normalized, "armed", null) });
+            }
+            finally {
+                lock.release();
+            }
+        },
+        notify(input) {
+            const waiterProcess = normalizeProcessIdentity(input.waiterProcess, "waiter process");
+            const notificationId = assertOpaqueId(input.notificationId, "waiter notification id");
+            const observedAt = canonicalTimestamp(input.observedAt, "waiter notification timestamp");
+            const current = read(input.waiterId);
+            if (!sameProcess(current.payload.waiter_process, waiterProcess))
+                throw new Error("waiter process identity mismatch");
+            if (current.state === "notified") {
+                if (current.payload.notification_id !== notificationId)
+                    throw new Error("waiter was notified for another notification");
+                return Object.freeze({ status: "replayed", record: current });
+            }
+            if (current.state !== "armed" || !processIsLive(waiterProcess))
+                throw new Error("only the live armed waiter may notify");
+            const at = afterTimestamp(current.payload.updated_at, observedAt);
+            const transitioned = records.transition({
+                recordId: current.record_id,
+                ownerId: WAITER_ACTOR,
+                expectedVersion: current.version,
+                expectedActor: current.actor,
+                expectedAttempt: 1,
+                expectedLeaseToken: null,
+                nonce: assertTransitionNonce(createStableId("waiter-notify", current.record_id, notificationId)),
+                fromStates: ["armed"],
+                toState: "notified",
+                nextActor: assertActorId(WAITER_ACTOR),
+                updatePayload: (record) => ({
+                    ...record.payload,
+                    notification_id: notificationId,
+                    terminal_at: at,
+                    updated_at: at,
+                }),
+            });
+            return Object.freeze({
+                status: transitioned.status === "applied" ? "notified" : "replayed",
+                record: transitioned.record,
+            });
+        },
+        fail(input) {
+            const waiterProcess = normalizeProcessIdentity(input.waiterProcess, "waiter process");
+            const failureCode = normalizeFailureCode(input.failureCode);
+            const observedAt = canonicalTimestamp(input.observedAt, "waiter failure timestamp");
+            const current = read(input.waiterId);
+            if (!sameProcess(current.payload.waiter_process, waiterProcess))
+                throw new Error("waiter process identity mismatch");
+            if (current.state === "failed")
+                return Object.freeze({ status: "replayed", record: current });
+            if (current.state !== "armed")
+                throw new Error("only an armed waiter may fail");
+            const at = afterTimestamp(current.payload.updated_at, observedAt);
+            const transitioned = records.transition({
+                recordId: current.record_id,
+                ownerId: WAITER_ACTOR,
+                expectedVersion: current.version,
+                expectedActor: current.actor,
+                expectedAttempt: 1,
+                expectedLeaseToken: null,
+                nonce: assertTransitionNonce(createStableId("waiter-fail", current.record_id, failureCode)),
+                fromStates: ["armed"],
+                toState: "failed",
+                nextActor: assertActorId(WAITER_ACTOR),
+                updatePayload: (record) => ({
+                    ...record.payload,
+                    failure_code: failureCode,
+                    terminal_at: at,
+                    updated_at: at,
+                }),
+            });
+            return Object.freeze({
+                status: transitioned.status === "applied" ? "failed" : "replayed",
+                record: transitioned.record,
+            });
+        },
+        supersedeDead(input) {
+            const failureCode = normalizeFailureCode(input.reasonCode);
+            const observedAt = canonicalTimestamp(input.observedAt, "waiter supersede timestamp");
+            const current = read(input.waiterId);
+            if (current.state === "superseded")
+                return Object.freeze({ status: "replayed", record: current });
+            if (current.state !== "armed" || current.version !== input.expectedVersion) {
+                throw new Error("watchdog waiter generation is stale");
+            }
+            if (processIsLive(current.payload.waiter_process) && processIsLive(current.payload.conductor_process)) {
+                throw new Error("watchdog cannot supersede a fully live waiter binding");
+            }
+            const at = afterTimestamp(current.payload.updated_at, observedAt);
+            const transitioned = records.transition({
+                recordId: current.record_id,
+                ownerId: WATCHDOG_ACTOR,
+                expectedVersion: current.version,
+                expectedActor: current.actor,
+                expectedAttempt: 1,
+                expectedLeaseToken: null,
+                nonce: assertTransitionNonce(createStableId("waiter-super", current.record_id, String(current.version))),
+                fromStates: ["armed"],
+                toState: "superseded",
+                nextActor: assertActorId(WATCHDOG_ACTOR),
+                updatePayload: (record) => ({
+                    ...record.payload,
+                    failure_code: failureCode,
+                    terminal_at: at,
+                    updated_at: at,
+                }),
+            });
+            return Object.freeze({
+                status: transitioned.status === "applied" ? "superseded" : "replayed",
+                record: transitioned.record,
+            });
+        },
+        read,
+        list,
+        active,
+    });
+    WAITER_STORES.add(store);
+    return store;
+    function createGeneration(input, state, failureCode) {
+        const waiterId = createStableId("waiter", input.conductorSessionId, String(input.waiterProcess.process_id), input.waiterProcess.boot_id, input.waiterProcess.start_ticks, input.observedAt);
+        const nonce = assertTransitionNonce(createStableId("waiter-create", waiterId, state));
+        const terminal = state === "armed" ? null : input.observedAt;
+        const record = {
+            schema_version: 1,
+            record_id: assertRecordId(waiterId),
+            record_kind: assertOpaqueId("conductor-waiter"),
+            version: 0,
+            state,
+            attempt: 1,
+            max_attempts: 1,
+            actor: assertActorId(WAITER_ACTOR),
+            lease_token: null,
+            transition_nonce: nonce,
+            payload: {
+                waiter_id: waiterId,
+                conductor_session_id: input.conductorSessionId,
+                launch_generation: input.launchGeneration,
+                pane_id: input.paneId,
+                conductor_process: input.conductorProcess,
+                waiter_process: input.waiterProcess,
+                armed_by: input.armedBy,
+                armed_at: input.observedAt,
+                notification_id: null,
+                failure_code: failureCode,
+                terminal_at: terminal,
+                updated_at: input.observedAt,
+            },
+            transition_outcomes: [{
+                    nonce,
+                    version: 0,
+                    state,
+                    attempt: 1,
+                    actor: assertActorId(WAITER_ACTOR),
+                    lease_token: null,
+                }],
+        };
+        try {
+            return records.create(record);
+        }
+        catch (error) {
+            if (!(error instanceof RecordAlreadyExistsError))
+                throw error;
+            const existing = read(waiterId);
+            if (JSON.stringify(existing.payload) !== JSON.stringify(record.payload) || existing.state !== state) {
+                throw new Error("waiter generation replay conflicts with stored authority");
+            }
+            return existing;
+        }
+    }
+}
+export function assertConductorWaiterStore(value) {
+    if (typeof value !== "object" || value === null || !WAITER_STORES.has(value)) {
+        throw new Error("conductor waiter operation requires a real OMS waiter store");
+    }
+    if (!Object.isFrozen(value))
+        throw new Error("conductor waiter store lost its authority boundary");
+}
+export async function waitForConductorNotification(options) {
+    assertConductorWaiterStore(options.waiterStore);
+    assertConductorNotificationStore(options.notificationStore);
+    const armed = options.waiterStore.arm(options.arm);
+    if (armed.status !== "armed")
+        return Object.freeze({ exitCode: 0, notificationId: null });
+    const now = options.now ?? (() => new Date().toISOString());
+    const pause = options.pause ?? (() => new Promise((resolve) => setTimeout(resolve, 250)));
+    const shouldStop = options.shouldStop ?? (() => false);
+    const canDeliver = options.canDeliver ?? (() => true);
+    const conductorIsLive = options.conductorIsLive ?? linuxProcessIdentityIsLive;
+    let claimedNotificationId = null;
+    try {
+        while (!shouldStop()) {
+            if (!conductorIsLive(options.arm.conductorProcess)) {
+                options.waiterStore.fail({
+                    waiterId: armed.record.record_id,
+                    waiterProcess: options.arm.waiterProcess,
+                    failureCode: "conductor-process-dead",
+                    observedAt: now(),
+                });
+                return Object.freeze({ exitCode: 1, notificationId: null });
+            }
+            if (!canDeliver()) {
+                await pause();
+                continue;
+            }
+            const claimedAt = now();
+            const claimed = options.notificationStore.claimNext({
+                sessionId: options.arm.conductorSessionId,
+                observedAt: claimedAt,
+            });
+            if (claimed.record) {
+                claimedNotificationId = claimed.record.record_id;
+                options.onNotificationClaimed?.(claimed.record.record_id, claimedAt);
+                options.waiterStore.notify({
+                    waiterId: armed.record.record_id,
+                    waiterProcess: options.arm.waiterProcess,
+                    notificationId: claimed.record.record_id,
+                    observedAt: now(),
+                });
+                return Object.freeze({ exitCode: 2, notificationId: claimed.record.record_id });
+            }
+            await pause();
+        }
+        options.waiterStore.fail({
+            waiterId: armed.record.record_id,
+            waiterProcess: options.arm.waiterProcess,
+            failureCode: "waiter-stopped",
+            observedAt: now(),
+        });
+        return Object.freeze({ exitCode: 0, notificationId: null });
+    }
+    catch {
+        if (claimedNotificationId !== null) {
+            try {
+                options.notificationStore.releaseDelivery({
+                    notificationId: claimedNotificationId,
+                    sessionId: options.arm.conductorSessionId,
+                });
+            }
+            catch {
+                // The watchdog recovers an exact incomplete wake if immediate release cannot finish.
+            }
+        }
+        try {
+            options.waiterStore.fail({
+                waiterId: armed.record.record_id,
+                waiterProcess: options.arm.waiterProcess,
+                failureCode: "waiter-failed",
+                observedAt: now(),
+            });
+        }
+        catch {
+            // The durable record already exposes the incomplete generation to the watchdog.
+        }
+        return Object.freeze({ exitCode: 1, notificationId: null });
+    }
+}
+function normalizeArm(input) {
+    const launchGeneration = input.launchGeneration;
+    if (!Number.isSafeInteger(launchGeneration) || launchGeneration < 1)
+        throw new Error("invalid conductor launch generation");
+    if (!/^%[0-9]{1,10}$/u.test(input.paneId))
+        throw new Error("invalid conductor pane id");
+    if (input.armedBy !== "SessionStart" && input.armedBy !== "Stop")
+        throw new Error("invalid waiter hook event");
+    return Object.freeze({
+        conductorSessionId: assertOpaqueId(input.conductorSessionId, "conductor session id"),
+        launchGeneration,
+        paneId: input.paneId,
+        conductorProcess: normalizeProcessIdentity(input.conductorProcess, "conductor process"),
+        waiterProcess: normalizeProcessIdentity(input.waiterProcess, "waiter process"),
+        armedBy: input.armedBy,
+        observedAt: canonicalTimestamp(input.observedAt, "waiter arm timestamp"),
+    });
+}
+function normalizeProcessIdentity(identity, label) {
+    if (!Number.isSafeInteger(identity.process_id) || identity.process_id < 1)
+        throw new Error(`invalid ${label} id`);
+    if (!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/u.test(identity.boot_id)) {
+        throw new Error(`invalid ${label} boot id`);
+    }
+    if (!/^[1-9][0-9]*$/u.test(identity.start_ticks))
+        throw new Error(`invalid ${label} start ticks`);
+    return Object.freeze({ ...identity });
+}
+function normalizeFailureCode(value) {
+    if (!/^[a-z][a-z0-9-]{0,63}$/u.test(value))
+        throw new Error("invalid waiter failure code");
+    return value;
+}
+function sameProcess(left, right) {
+    return left.process_id === right.process_id && left.boot_id === right.boot_id && left.start_ticks === right.start_ticks;
+}
+function validateWaiterRecord(record, payloadSchema) {
+    if (record.record_kind !== "conductor-waiter")
+        throw new Error("waiter store contains another record kind");
+    if (!["armed", "notified", "failed", "superseded"].includes(record.state))
+        throw new Error("invalid conductor waiter state");
+    if (record.attempt !== 1 || record.max_attempts !== 1 || record.lease_token !== null) {
+        throw new Error("conductor waiter generations do not own attempts or leases");
+    }
+    assertSchema(record.payload, payloadSchema, "conductor waiter payload");
+    const payload = record.payload;
+    if (payload.waiter_id !== record.record_id)
+        throw new Error("waiter payload identity mismatch");
+    canonicalTimestamp(payload.armed_at, "waiter armed timestamp");
+    canonicalTimestamp(payload.updated_at, "waiter update timestamp");
+    if (Date.parse(payload.updated_at) < Date.parse(payload.armed_at))
+        throw new Error("waiter update precedes arm");
+    if (record.state === "armed" && (payload.notification_id !== null || payload.failure_code !== null || payload.terminal_at !== null))
+        throw new Error("armed waiter has terminal fields");
+    if (record.state === "notified" && (payload.notification_id === null || payload.failure_code !== null || payload.terminal_at === null))
+        throw new Error("notified waiter has invalid terminal fields");
+    if ((record.state === "failed" || record.state === "superseded") && (payload.notification_id !== null || payload.failure_code === null || payload.terminal_at === null))
+        throw new Error("failed or superseded waiter has invalid terminal fields");
+    if (payload.terminal_at !== null) {
+        canonicalTimestamp(payload.terminal_at, "waiter terminal timestamp");
+        if (payload.terminal_at !== payload.updated_at || Date.parse(payload.terminal_at) < Date.parse(payload.armed_at)) {
+            throw new Error("waiter terminal timestamp is inconsistent");
+        }
+    }
+}
+function waiterOrder(left, right) {
+    return left.payload.armed_at.localeCompare(right.payload.armed_at)
+        || String(left.record_id).localeCompare(String(right.record_id));
+}
+function afterTimestamp(previous, candidate) {
+    const prior = Date.parse(previous);
+    const next = Date.parse(candidate);
+    if (!Number.isFinite(prior) || !Number.isFinite(next))
+        throw new Error("invalid waiter timestamp");
+    return new Date(Math.max(prior + 1, next)).toISOString();
+}
+//# sourceMappingURL=waiter.js.map

package/dist/src/conductor/waiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"waiter.js","sourceRoot":"","sources":["../../../src/conductor/waiter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,aAAa,EACb,cAAc,EACd,cAAc,EACd,qBAAqB,GAEtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EACL,0BAA0B,GAE3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,gCAAgC,GAEjC,MAAM,oBAAoB,CAAC;AAE5B,MAAM,YAAY,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAC1D,MAAM,aAAa,GAAG,IAAI,OAAO,EAAU,CAAC;AAC5C,MAAM,YAAY,GAAG,YAAY,CAAC;AAClC,MAAM,cAAc,GAAG,cAAc,CAAC;AA4DtC,MAAM,UAAU,0BAA0B,CAAC,OAK1C;IACC,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;IACpG,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;IAC9F,IAAI,WAAW,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC7F,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,0BAA0B,CAAC;IAC1E,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,sCAAsC,CAAC,CAAC,CAAC;IACnH,MAAM,OAAO,GAAG,iBAAiB,CAAC;QAChC,WAAW;QACX,SAAS;QACT,eAAe,CAAC,MAAM;YACpB,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC9C,CAAC;QACD,eAAe,CAAC,MAAM;YACpB,IAAI,MAAM,CAAC,WAAW,KAAK,kBAAkB,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QACD,mBAAmB,CAAC,OAAO,EAAE,IAAI;YAC/B,MAAM,IAAI,GAAG,OAAgC,CAAC;YAC9C,MAAM,EAAE,GAAG,IAA6B,CAAC;YACzC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvF,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,KAAK,MAAM,KAAK,IAAI;gBAClB,WAAW;gBACX,sBAAsB;gBACtB,mBAAmB;gBACnB,SAAS;gBACT,UAAU;gBACV,UAAU;aACF,EAAE,CAAC;gBACX,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;YACtG,CAAC;YACD,IACE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;mBAC5F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;KACF,CAAC,CAAC;IAEH,SAAS,IAAI,CAAC,QAAgB;QAC5B,OAAO,OAAO,CAAC,IAAI,CAA+C,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3G,CAAC;IAED,SAAS,IAAI,CAAC,SAAkB;QAC9B,MAAM,iBAAiB,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;QAClH,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAgD;aAC9E,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,KAAK,iBAAiB,CAAC;aAChH,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,SAAS,MAAM,CAAC,SAAiB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACvG,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAyB,MAAM,CAAC,MAAM,CAAC;QAChD,CAAC,YAAY,CAAC,EAAE,IAAa;QAE7B,GAAG,CAAC,KAA8B;YAChC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,oBAAoB,CAAC;gBAChC,SAAS;gBACT,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EAAE,YAAY;gBACrB,IAAI,EAAE,OAAO,UAAU,CAAC,kBAAkB,EAAE;aAC7C,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;gBAC1D,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;oBAC/D,MAAM,aAAa,GAAyB,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,6BAA6B,CAAC;oBACnF,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;oBAC3E,OAAO,MAAM,CAAC,MAAM,CAAC;wBACnB,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,WAAoB,CAAC,CAAC,CAAC,mBAA4B;wBAClE,MAAM,EAAE,SAAS;qBAClB,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAgB,EAAE,MAAM,EAAE,gBAAgB,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1G,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,MAAM,CAAC,KAKN;YACC,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;YACtF,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;YACtF,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;YACzF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,aAAa,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACrH,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,OAAO,CAAC,eAAe,KAAK,cAAc;oBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBACxH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzH,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAClE,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAA+C;gBACpF,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC3B,OAAO,EAAE,YAAY;gBACrB,eAAe,EAAE,OAAO,CAAC,OAAO;gBAChC,aAAa,EAAE,OAAO,CAAC,KAAK;gBAC5B,eAAe,EAAE,CAAC;gBAClB,kBAAkB,EAAE,IAAI;gBACxB,KAAK,EAAE,qBAAqB,CAAC,cAAc,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBAChG,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,OAAO,EAAE,UAAU;gBACnB,SAAS,EAAE,aAAa,CAAC,YAAY,CAAC;gBACtC,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAC1B,GAAG,MAAM,CAAC,OAAO;oBACjB,eAAe,EAAE,cAAc;oBAC/B,WAAW,EAAE,EAAE;oBACf,UAAU,EAAE,EAAE;iBACf,CAAC;aACH,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAmB,CAAC,CAAC,CAAC,UAAmB;gBACrF,MAAM,EAAE,YAAY,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,KAKJ;YACC,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;YACtF,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC5D,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;YACpF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,aAAa,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACrH,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACvG,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAChF,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAClE,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAA+C;gBACpF,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC3B,OAAO,EAAE,YAAY;gBACrB,eAAe,EAAE,OAAO,CAAC,OAAO;gBAChC,aAAa,EAAE,OAAO,CAAC,KAAK;gBAC5B,eAAe,EAAE,CAAC;gBAClB,kBAAkB,EAAE,IAAI;gBACxB,KAAK,EAAE,qBAAqB,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC3F,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,OAAO,EAAE,QAAQ;gBACjB,SAAS,EAAE,aAAa,CAAC,YAAY,CAAC;gBACtC,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAC1B,GAAG,MAAM,CAAC,OAAO;oBACjB,YAAY,EAAE,WAAW;oBACzB,WAAW,EAAE,EAAE;oBACf,UAAU,EAAE,EAAE;iBACf,CAAC;aACH,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,UAAmB;gBACnF,MAAM,EAAE,YAAY,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,aAAa,CAAC,KAKb;YACC,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;YACtF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3G,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACtG,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAClE,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAA+C;gBACpF,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC3B,OAAO,EAAE,cAAc;gBACvB,eAAe,EAAE,OAAO,CAAC,OAAO;gBAChC,aAAa,EAAE,OAAO,CAAC,KAAK;gBAC5B,eAAe,EAAE,CAAC;gBAClB,kBAAkB,EAAE,IAAI;gBACxB,KAAK,EAAE,qBAAqB,CAAC,cAAc,CAAC,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACxG,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,OAAO,EAAE,YAAY;gBACrB,SAAS,EAAE,aAAa,CAAC,cAAc,CAAC;gBACxC,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAC1B,GAAG,MAAM,CAAC,OAAO;oBACjB,YAAY,EAAE,WAAW;oBACzB,WAAW,EAAE,EAAE;oBACf,UAAU,EAAE,EAAE;iBACf,CAAC;aACH,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,YAAqB,CAAC,CAAC,CAAC,UAAmB;gBACvF,MAAM,EAAE,YAAY,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,IAAI;QACJ,IAAI;QACJ,MAAM;KACP,CAAC,CAAC;IACH,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC;IAEb,SAAS,gBAAgB,CACvB,KAAsC,EACtC,KAA2B,EAC3B,WAA0B;QAE1B,MAAM,QAAQ,GAAG,cAAc,CAC7B,QAAQ,EACR,KAAK,CAAC,kBAAkB,EACxB,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,EACtC,KAAK,CAAC,aAAa,CAAC,OAAO,EAC3B,KAAK,CAAC,aAAa,CAAC,WAAW,EAC/B,KAAK,CAAC,UAAU,CACjB,CAAC;QACF,MAAM,KAAK,GAAG,qBAAqB,CAAC,cAAc,CAAC,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;QAC7D,MAAM,MAAM,GAA0B;YACpC,cAAc,EAAE,CAAC;YACjB,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC;YACnC,WAAW,EAAE,cAAc,CAAC,kBAAkB,CAAC;YAC/C,OAAO,EAAE,CAAC;YACV,KAAK;YACL,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,CAAC;YACf,KAAK,EAAE,aAAa,CAAC,YAAY,CAAC;YAClC,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,KAAK;YACvB,OAAO,EAAE;gBACP,SAAS,EAAE,QAAQ;gBACnB,oBAAoB,EAAE,KAAK,CAAC,kBAAkB;gBAC9C,iBAAiB,EAAE,KAAK,CAAC,gBAAgB;gBACzC,OAAO,EAAE,KAAK,CAAC,MAAM;gBACrB,iBAAiB,EAAE,KAAK,CAAC,gBAAgB;gBACzC,cAAc,EAAE,KAAK,CAAC,aAAa;gBACnC,QAAQ,EAAE,KAAK,CAAC,OAAO;gBACvB,QAAQ,EAAE,KAAK,CAAC,UAAU;gBAC1B,eAAe,EAAE,IAAI;gBACrB,YAAY,EAAE,WAAW;gBACzB,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;YACD,mBAAmB,EAAE,CAAC;oBACpB,KAAK;oBACL,OAAO,EAAE,CAAC;oBACV,KAAK;oBACL,OAAO,EAAE,CAAC;oBACV,KAAK,EAAE,aAAa,CAAC,YAAY,CAAC;oBAClC,WAAW,EAAE,IAAI;iBAClB,CAAC;SACH,CAAC;QACF,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,wBAAwB,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBACpG,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAUlD;IACC,0BAA0B,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAChD,gCAAgC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACnG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,0BAA0B,CAAC;IAC9E,IAAI,qBAAqB,GAAkB,IAAI,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YACrB,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;oBACvB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;oBAChC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;oBACxC,WAAW,EAAE,wBAAwB;oBACrC,UAAU,EAAE,GAAG,EAAE;iBAClB,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;gBAClB,MAAM,KAAK,EAAE,CAAC;gBACd,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC;gBAClD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;gBACzC,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;gBACjD,OAAO,CAAC,qBAAqB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBACrE,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC;oBACzB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;oBAChC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;oBACxC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;oBACxC,UAAU,EAAE,GAAG,EAAE;iBAClB,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAU,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,KAAK,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;YACvB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;YAChC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;YACxC,WAAW,EAAE,gBAAgB;YAC7B,UAAU,EAAE,GAAG,EAAE;SAClB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,qBAAqB,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,CAAC,iBAAiB,CAAC,eAAe,CAAC;oBACxC,cAAc,EAAE,qBAAqB;oBACrC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;iBAC1C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,qFAAqF;YACvF,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;gBACvB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;gBAChC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;gBACxC,WAAW,EAAE,eAAe;gBAC5B,UAAU,EAAE,GAAG,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;QAClF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5H,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/G,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,kBAAkB,EAAE,cAAc,CAAC,KAAK,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;QACpF,gBAAgB;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,wBAAwB,CAAC,KAAK,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;QACvF,aAAa,EAAE,wBAAwB,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,CAAC;QAC9E,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,sBAAsB,CAAC;KACzE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,QAA8B,EAAE,KAAa;IAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;IAClH,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,cAAc,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,IAA0B,EAAE,KAA2B;IAC1E,OAAO,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC;AAC1H,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAqB,EAAE,aAAgD;IACnG,IAAI,MAAM,CAAC,WAAW,KAAK,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC7H,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAiC,CAAC;IACzD,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAChG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IAC/D,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACjH,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,CAC9B,OAAO,CAAC,eAAe,KAAK,IAAI,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,CAClG;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,CACjC,OAAO,CAAC,eAAe,KAAK,IAAI,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,CAClG;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,YAAY,CAAC,IAAI,CAClE,OAAO,CAAC,eAAe,KAAK,IAAI,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,CAClG;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACjC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjH,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAA2B,EAAE,KAA4B;IAC5E,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;WAC7D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,SAAiB;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACnG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3D,CAAC"}

package/dist/src/config.d.ts

@@ -0,0 +1,9 @@
+import { type RolePolicyConfig } from "./domain/role-policy.js";
+export interface OmsConfig extends RolePolicyConfig {
+    unattended: {
+        enabled: boolean;
+    };
+}
+export declare function readOmsConfig(root: string): OmsConfig;
+export declare function validateUnattendedAuth(config: OmsConfig): string[];
+export declare function unattendedRoles(config: OmsConfig): string[];

package/dist/src/config.js

@@ -0,0 +1,40 @@
+import { join } from "node:path";
+import { getUnattendedRoles, migrateLegacyOmsConfig, readLegacyOmsConfigV1, readRolePolicyConfig, } from "./domain/role-policy.js";
+import { isRecord, readJsonFile } from "./utils/fs.js";
+export function readOmsConfig(root) {
+    const path = join(root, ".agents", "config", "oms-config.json");
+    const value = readJsonFile(path);
+    if (!isRecord(value) || typeof value.version !== "number")
+        throw new Error(`invalid config: ${path}`);
+    if (value.version === 2)
+        return withDerivedUnattended(readRolePolicyConfig(value, path));
+    if (value.version === 1)
+        return withDerivedUnattended(migrateLegacyOmsConfig(readLegacyOmsConfigV1(value, path)));
+    throw new Error(`invalid config: ${path}`);
+}
+export function validateUnattendedAuth(config) {
+    const errors = [];
+    for (const [role, row] of Object.entries(config.roles)) {
+        if (!row.unattended_eligible)
+            continue;
+        if (row.engine === "codex" && row.auth_mode !== "api_key" && row.auth_mode !== "enterprise_access_token") {
+            errors.push(`role ${role} unattended auth fails closed: ${row.auth_mode}`);
+        }
+        if (row.engine === "claude" && row.auth_mode !== "api_key" && row.auth_mode !== "cloud_provider") {
+            errors.push(`role ${role} unattended auth fails closed: ${row.auth_mode}`);
+        }
+    }
+    return errors;
+}
+export function unattendedRoles(config) {
+    return getUnattendedRoles(config);
+}
+function withDerivedUnattended(config) {
+    return {
+        ...config,
+        unattended: {
+            enabled: getUnattendedRoles(config).length > 0,
+        },
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/src/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAQvD,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAEjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IACtG,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAC,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACzF,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAClH,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAiB;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,GAAG,CAAC,mBAAmB;YAAE,SAAS;QACvC,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,yBAAyB,EAAE,CAAC;YACzG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,kCAAkC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACjG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,kCAAkC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAwB;IACrD,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE;YACV,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;SAC/C;KACF,CAAC;AACJ,CAAC"}

package/dist/src/dispatch/advice-source.d.ts

@@ -0,0 +1,61 @@
+import { type LiveContactReference } from "../live/contact-journal.js";
+import { type CodexStructuredResult } from "../providers/codex-exec.js";
+import { type CanonicalDispatchIntent, type CapturedDispatchIntent } from "./intent.js";
+export type ProtectedAdvisorSource = CodexStructuredResult<Record<string, unknown>>;
+export interface ProtectedAdvisorSourceIdentity {
+    readonly role_id: "oms.exec-advisor";
+    readonly request_id: string;
+    readonly fresh_session_id: string;
+    readonly output: Readonly<Record<string, unknown>>;
+}
+export interface AdvisorProviderRequest {
+    readonly schema_version: 1;
+    readonly request_id: string;
+    readonly role_id: "oms.exec-advisor";
+    readonly evidence_schema: "advisor-output.v1";
+    readonly dispatch_intent_sha256: string;
+    readonly canonical_intent: CanonicalDispatchIntent;
+    readonly advice_authorization_id: string;
+}
+declare const PROTECTED_ADVISOR_PROVENANCE: unique symbol;
+export interface ProtectedAdvisorProvenance {
+    readonly [PROTECTED_ADVISOR_PROVENANCE]: true;
+}
+export interface ProtectedAdvisorProvenanceIdentity extends ProtectedAdvisorSourceIdentity {
+    readonly evidence_id: string;
+    readonly ticket_id: string;
+    readonly dispatch_intent_sha256: string;
+    readonly contact_reference: LiveContactReference;
+    readonly advice_authorization_id: string;
+}
+export interface DurableAdvisorEvidence {
+    readonly evidence_id: string;
+    readonly evidence_kind: string;
+    readonly ticket_id: string | null;
+    readonly producer_role: string;
+    readonly payload: Record<string, unknown>;
+}
+export declare function captureProtectedAdvisorSource(source: ProtectedAdvisorSource): ProtectedAdvisorSourceIdentity;
+export declare function createAdvisorProviderRequest(options: {
+    readonly requestId: string;
+    readonly intent: CapturedDispatchIntent;
+    readonly adviceAuthorizationId: string;
+}): AdvisorProviderRequest;
+export declare function captureProtectedAdvisorProvenance(options: {
+    readonly stateRoot: string;
+    readonly source: ProtectedAdvisorSource;
+    readonly request: AdvisorProviderRequest;
+    readonly contactReference: LiveContactReference;
+}): ProtectedAdvisorProvenance;
+export declare function protectedAdvisorProvenanceIdentity(value: unknown): ProtectedAdvisorProvenanceIdentity;
+export declare function assertDurableAdvisorEvidenceProvenance(options: {
+    readonly stateRoot: string;
+    readonly evidence: DurableAdvisorEvidence;
+    readonly intent: CapturedDispatchIntent;
+}): void;
+export declare function assertStoredAdvisorEvidenceProvenance(options: {
+    readonly stateRoot: string;
+    readonly evidence: DurableAdvisorEvidence;
+    readonly intent: CapturedDispatchIntent;
+}): void;
+export {};