open-multi-agent-kit 0.90.8 → 0.91.0

package/dist/core/session-path-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-path-policy.js","sourceRoot":"","sources":["../../src/core/session-path-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,kCAAkC,GAAG,CAAU,CAAC;AACtD,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAClD,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAChD,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AACnD,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AACrD,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAsH5C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACnE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAoB,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAChH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAChF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAErG,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACf,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACf,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACf,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,CAAC;AAAA,CACX,CAAC,EAAE,CAAC;AAEL,MAAM,aAAa,GAAG;IACrB,eAAe;IACf,UAAU;IACV,oBAAoB;IACpB,qBAAqB;IACrB,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,WAAW;IACX,QAAQ;CACC,CAAC;AACX,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAU,CAAC;AACxF,MAAM,WAAW,GAAG,CAAC,SAAS,EAAE,UAAU,CAAU,CAAC;AACrD,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,KAAK,CAAU,CAAC;AAC5C,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AACtE,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,WAAW,CAAU,CAAC;AACrF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAE7G,oGAAoG;AACpG,yDAAyD;AACzD,oGAAoG;AAEpG,SAAS,iBAAiB,CAAC,KAAc,EAAoC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YAClG,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,YAAY,CAAC,KAA8B,EAAE,IAAuB,EAAW;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAmB;IAC5D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CACrE;AAED,SAAS,wBAAwB,CAAC,KAAc,EAAmB;IAClE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC;AAAA,CACpH;AAED,SAAS,UAAU,CAAI,KAAQ,EAAK;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACP,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;YAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5B;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa,EAA4C;IACnG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,uEAAuE,CAAC,CAAC;IACtG,CAAC;AAAA,CACD;AAED,SAAS,eAAe,CAAC,KAA8B,EAAE,IAAuB,EAAE,KAAa,EAAQ;IACtG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,gCAAgC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;AAAA,CACD;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa,EAA2B;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;AAAA,CAChF;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa,EAA4B;IAC/E,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;AAAA,CAClF;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa,EAA2B;IACvF,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAClB,GAAG,KAAK,uGAAuG,CAC/G,CAAC;IACH,CAAC;AAAA,CACD;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,KAAa,EAA2B;IACpF,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;AAAA,CACjH;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa,EAA2B;IACjF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAChF,IAAI,KAAK,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC5C,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,gBAAgB,uBAAuB,gBAAgB,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;AAAA,CAC5G;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa,EAA8B;IAC1F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,IAAI,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5F,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;QACrE,CAAC;IACF,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;QACvF,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,2DAA2D,CAAC,CAAC;QAC1F,CAAC;IACF,CAAC;AAAA,CACD;AAED,oGAAoG;AACpG,sEAAsE;AACtE,oGAAoG;AAEpG,SAAS,aAAa,CAAC,KAAa,EAAY;IAC/C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAAA,CAChE;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAY,EAAE,QAA6B,EAAiB;IACnG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,uBAAuB;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAiB;IACtD,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,OAAO,KAAK,GAAG;YAAE,SAAS;QAC9B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxC,SAAS,CAAC,GAAG,EAAE,CAAC;YAChB,SAAS;QACV,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAAA,CACjC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAiB;IACtD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,GAAG;YAAE,SAAS;QAC9B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxC,SAAS,CAAC,GAAG,EAAE,CAAC;YAChB,SAAS;QACV,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAAA,CAC1C;AAOD,SAAS,cAAc,CAAC,SAAiB,EAAE,QAA6B,EAAyB;IAChG,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa,EAAE,QAA6B,EAAW;IAC1F,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;AAAA,CAC1F;AAED,SAAS,YAAY,CAAC,IAAoB,EAAE,SAAyB,EAAE,QAA6B,EAAW;IAC9G,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;IACpF,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,CAAgB,EAAE,CAAgB,EAAE,QAA6B,EAAW;IACvG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAa,EAAE,SAAkB,EAAE,QAA6B,EAAW;IAC9G,MAAM,aAAa,GAAG,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxE,IAAI,aAAa,KAAK,IAAI,IAAI,kBAAkB,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,SAAS,GAAG,cAAc,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,cAAc,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,SAAS,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,YAAY,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;AAAA,CACzD;AAED,SAAS,cAAc,CACtB,aAAqB,EACrB,eAAuB,EACvB,QAA6B,EACD;IAC5B,MAAM,SAAS,GAAG,cAAc,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,cAAc,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC9D,IAAI,SAAS,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAClE,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC;QAAE,OAAO,UAAU,CAAC;IACvE,IAAI,SAAS,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxG,OAAO,MAAM,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,oGAAoG;AACpG,uEAAuE;AACvE,oGAAoG;AAEpG,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa,EAAmB;IACrE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChC,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACzC,sBAAsB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC;IAClD,sBAAsB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC;IAClD,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;IACnD,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;IACjD,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;IACnD,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;IACjD,sBAAsB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;IACtD,OAAO;QACN,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;KAClB,CAAC;AAAA,CACF;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa,EAAyB;IACjF,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChC,eAAe,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAChD,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;IACpD,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAA+B,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAA+B,EAAE,CAAC;AAAA,CAC7G;AAED,SAAS,gBAAgB,CAAC,QAAiB,EAAuB;IACjE,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxC,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC1F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,QAA+B,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC9D,CAAC;IACD,gBAAgB,CAAC,QAAQ,CAAC,kBAAkB,EAAE,6BAA6B,CAAC,CAAC;IAC7E,gBAAgB,CAAC,QAAQ,CAAC,mBAAmB,EAAE,8BAA8B,CAAC,CAAC;IAE/E,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjE,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IACrE,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IAEvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC1C,IAAI,WAAW,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/E,IAAI,WAAW,GAAG,8BAA8B,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,0DAA0D,8BAA8B,GAAG,CAAC,CAAC;IAClH,CAAC;IACD,sBAAsB,CAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACzD,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,kBAAkB,KAAK,GAAG,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAC5E,IAAI,SAAS,GAA2B,IAAI,CAAC;IAC7C,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QACjC,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACpE,CAAC;IAED,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjE,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IACnE,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAEnE,OAAO;QACN,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,QAAQ,CAAC,QAA+B;QAClD,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;QAC/C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE;QAChF,KAAK;QACL,UAAU;QACV,SAAS;QACT,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE;KAC9D,CAAC;AAAA,CACF;AAED,SAAS,YAAY,CAAC,IAAa,EAA2B;IAC7D,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAA6B,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC7E,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,CAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC7B,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACN,KAAK,EAAE,IAAI,CAAC,KAA6B;QACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;KAC1D,CAAC;AAAA,CACF;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAc,EAAmC;IAC3E,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AAAA,CAC9B;AAED,SAAS,aAAa,CAAC,QAAiB,EAA0B;IACjE,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,QAA+B,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC3D,CAAC;IACD,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC1C,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAA2B,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,6EAA6E,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAyC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5E,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,IAAyC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACpE,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,QAAQ,CAAC,QAA+B;QAClD,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,CAAC,MAA2B;QAC5C,QAAQ;QACR,QAAQ;QACR,IAAI;KACJ,CAAC;AAAA,CACF;AAED,oGAAoG;AACpG,qBAAqB;AACrB,oGAAoG;AAEpG,SAAS,SAAS,CAAC,CAAkB,EAAE,CAAkB,EAAW;IACnE,OAAO,CACN,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG;QACf,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG;QACf,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QACnB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QACjB,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QACnB,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;QACvB,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CACnB,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CAAC,MAYtB,EAAuB;IACvB,MAAM,QAAQ,GAAwB;QACrC,aAAa,EAAE,kCAAkC;QACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,gBAAgB;QAC1C,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;QAC7C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ;QAC/C,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB;QACtD,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,mBAAmB;QACxD,YAAY,EAAE;YACb,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC3B;QACD,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3G,eAAe,EAAE,MAAM,CAAC,eAAe;KACvC,CAAC;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAAA,CAC5B;AAED,SAAS,QAAQ,CAChB,QAA6B,EAC7B,MAAyB,EACzB,MAAyB,EACzB,QAA6B,EAC7B,cAAc,GAA8B,UAAU,EAChC;IACtB,OAAO,aAAa,CAAC;QACpB,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,UAAU;QAClB,MAAM;QACN,cAAc;QACd,QAAQ;QACR,kBAAkB,EAAE,KAAK;QACzB,eAAe,EAAE,KAAK;QACtB,SAAS,EAAE,KAAK;QAChB,cAAc,EAAE,EAAE;QAClB,eAAe,EAAE,CAAC;KAClB,CAAC,CAAC;AAAA,CACH;AAED,SAAS,OAAO,CACf,QAA6B,EAC7B,MAAyB,EACzB,MAAyB,EACzB,QAA6B,EAC7B,cAAyC,EACnB;IACtB,OAAO,aAAa,CAAC;QACpB,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,SAAS;QACjB,MAAM;QACN,cAAc;QACd,QAAQ;QACR,kBAAkB,EAAE,KAAK;QACzB,eAAe,EAAE,KAAK;QACtB,SAAS,EAAE,KAAK;QAChB,cAAc,EAAE,EAAE;QAClB,eAAe,EAAE,CAAC;KAClB,CAAC,CAAC;AAAA,CACH;AAED,SAAS,YAAY,CACpB,QAA6B,EAC7B,MAAyB,EACzB,QAA6B,EAC7B,cAAyC,EACnB;IACtB,OAAO,aAAa,CAAC;QACpB,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,eAAe;QACvB,cAAc;QACd,QAAQ;QACR,kBAAkB,EAAE,IAAI;QACxB,eAAe,EAAE,KAAK;QACtB,SAAS,EAAE,KAAK;QAChB,cAAc,EAAE,EAAE;QAClB,eAAe,EAAE,CAAC;KAClB,CAAC,CAAC;AAAA,CACH;AAED,SAAS,UAAU,CAClB,QAA6B,EAC7B,MAAyB,EACzB,QAA6B,EAC7B,cAAyC,EACzC,eAAwB,EACxB,SAAkB,EAClB,cAAmD,EACnD,eAAuB,EACD;IACtB,OAAO,aAAa,CAAC;QACpB,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,YAAY;QACpB,cAAc;QACd,QAAQ;QACR,kBAAkB,EAAE,IAAI;QACxB,eAAe;QACf,SAAS;QACT,cAAc;QACd,eAAe;KACf,CAAC,CAAC;AAAA,CACH;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,eAAuB,EAAE,cAAsB,EAAE,QAA6B,EAAW;IAC/G,MAAM,WAAW,GAAG,cAAc,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,cAAc,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,WAAW,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,WAAW,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;IAC5F,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED;;;;;;;;;GASG;AACH,SAAS,SAAS,CACjB,QAA6B,EAC7B,aAAqB,EACrB,qBAA6B,EAC7B,eAAuB,EACvB,uBAA+B,EAC/B,QAA6B,EACF;IAC3B,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,qBAAqB,EAAE,QAAQ,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAEpG,MAAM,SAAS,GAAG,cAAc,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,kBAAkB,GAAG,cAAc,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IACrE,IAAI,SAAS,KAAK,IAAI,IAAI,kBAAkB,KAAK,IAAI;QAAE,OAAO,mBAAmB,CAAC;IAElF,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1F,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc;QAAE,OAAO,mBAAmB,CAAC;IAEzE,MAAM,YAAY,GAAG,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChF,IAAI,YAAY,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,mBAAmB,CAAC;IAC5E,IACC,CAAC,kBAAkB,CAAC,YAAY,EAAE,aAAa,EAAE,QAAQ,CAAC;QAC1D,CAAC,kBAAkB,CAAC,SAAS,EAAE,qBAAqB,EAAE,QAAQ,CAAC;QAE/D,OAAO,mBAAmB,CAAC;IAE5B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClE,IACC,CAAC,kBAAkB,CAAC,WAAW,EAAE,eAAe,EAAE,QAAQ,CAAC;QAC3D,CAAC,kBAAkB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,QAAQ,CAAC;QAEhE,OAAO,mBAAmB,CAAC;IAE5B,IAAI,WAAW,GAAG,YAAY,CAAC;IAC/B,IAAI,QAAQ,GAAG,SAAS,CAAC;IACzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,kBAAkB,CAAC;QACzD,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,YAAY,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,mBAAmB,CAAC;QAC5E,MAAM,iBAAiB,GAAG,cAAc,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,iBAAiB,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;YAAE,OAAO,mBAAmB,CAAC;QACtF,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,iBAAiB,EAAE,QAAQ,CAAC;YAAE,OAAO,mBAAmB,CAAC;QACtF,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,CAAC;YAAE,OAAO,kBAAkB,CAAC;QAClF,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC;gBAAE,OAAO,mBAAmB,CAAC;YACpF,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;gBAAE,OAAO,mBAAmB,CAAC;QAC/E,CAAC;QACD,WAAW,GAAG,YAAY,CAAC;QAC3B,QAAQ,GAAG,SAAS,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,IAA6B,EAA4B;IAC9E,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,QAAQ;YACZ,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;QACpF,KAAK,MAAM;YACV,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;QAC7G,KAAK,SAAS;YACb,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC;QACzD,KAAK,OAAO;YACX,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC;QAC9G,KAAK,SAAS;YACb,OAAO,cAAc,CAAC;QACvB;YACC,OAAO,cAAc,CAAC;IACxB,CAAC;AAAA,CACD;AAED,SAAS,qBAAqB,CAAC,IAA6B,EAA8B;IACzF,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QACvD,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,CAAC;AAAA,CACV;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAiB,EAAuB;IAC/E,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAE7F,MAAM,aAAa,GAAG,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClE,IAAI,aAAa,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QACxD,OAAO,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAC7F,MAAM,uBAAuB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3F,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC9F,MAAM,uBAAuB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5F,IACC,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,aAAa,EAAE,QAAQ,CAAC;QACnE,CAAC,kBAAkB,CAAC,uBAAuB,EAAE,eAAe,EAAE,QAAQ,CAAC;QACvE,qBAAqB,KAAK,IAAI;QAC9B,uBAAuB,KAAK,IAAI,EAC/B,CAAC;QACF,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,qBAAqB,GAAG,cAAc,CAAC,aAAa,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,MAAM,KAAK,gBAAgB,CAAC;IAC7C,MAAM,gBAAgB,GAAsB,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzE,IAAI,gBAAgB,KAAK,kBAAkB,EAAE,CAAC;QAC7C,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACxE,CAAC;IAED,mFAAmF;IACnF,IAAI,qBAAqB,KAAK,UAAU,EAAE,CAAC;QAC1C,OAAO,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,qBAAqB,KAAK,MAAM,EAAE,CAAC;QACtC,OAAO,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC;IAED,+EAA+E;IAC/E,mEAAmE;IACnE,MAAM,kBAAkB,GAAG,cAAc,CAAC,qBAAqB,EAAE,uBAAuB,EAAE,QAAQ,CAAC,CAAC;IACpG,IAAI,kBAAkB,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAC5B,QAAQ,EACR,aAAa,EACb,qBAAqB,EACrB,eAAe,EACf,uBAAuB,EACvB,QAAQ,CACR,CAAC;IACF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;QACxG,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxF,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,qBAAqB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,gBAAgB,KAAK,iBAAiB,EAAE,CAAC;QAC5C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC;IAC7D,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;AAAA,CAC3G","sourcesContent":["/**\n * Pure, browser-safe session path security policy (task I34).\n *\n * This module is deliberately dependency-free: no imports, no node:/process/\n * fs/path/Buffer, no timers, no Date.now, no Math.random, no crypto, and no I/O\n * of any kind. Every decision is derived from plain-data evidence that the\n * caller attests. The policy never touches the filesystem and never executes a\n * repair; it only authorizes, denies, or describes what a caller may do.\n *\n * Inputs are validated strictly (plain data, exact keys, accessor-free) and the\n * returned decision is a deep-frozen copy built from primitives, so a caller\n * cannot mutate the decision's internals by mutating the evidence afterwards.\n */\n\nconst SESSION_PATH_POLICY_SCHEMA_VERSION = 1 as const;\nconst SESSION_PATH_MAX_LENGTH = 4096;\n/** Maximum number of entries accepted in an evidence chain (DoS guardrail). */\nexport const MAX_SESSION_PATH_CHAIN_ENTRIES = 256;\nconst CONTROL_CHAR_RE = /[\\u0000-\\u001f\\u007f]/;\nconst CANONICAL_DECIMAL_RE = /^(0|[1-9]\\d{0,19})$/;\nconst WIN_DRIVE_ABSOLUTE_RE = /^([A-Za-z]):\\/+(.*)$/;\nconst WIN_CANONICAL_RE = /^([a-z]):\\/(.*)$/;\n\nexport type SessionPathPlatform = \"posix\" | \"win32\";\nexport type SessionPathIntent = \"inspect_metadata\" | \"inspect_content\" | \"repair\" | \"repair_dry_run\";\nexport type SessionPathLinkKind = \"none\" | \"symlink\" | \"reparse\";\nexport type SessionPathLockState = \"absent\" | \"live\" | \"stale\" | \"foreign\" | \"unknown\";\n\nexport type SessionPathReason =\n\t| \"authorized\"\n\t| \"metadata_only\"\n\t| \"lexical_invalid\"\n\t| \"evidence_mismatch\"\n\t| \"target_external\"\n\t| \"target_is_root\"\n\t| \"identity_required\"\n\t| \"lock_required\"\n\t| \"symlink_in_chain\"\n\t| \"outside_realpath\"\n\t| \"nonregular\"\n\t| \"nlink_not_one\"\n\t| \"owner_mismatch\"\n\t| \"stat_race\"\n\t| \"stat_after_mismatch\"\n\t| \"lock_live\"\n\t| \"lock_foreign\"\n\t| \"lock_unknown\"\n\t| \"lock_stale_ineligible\";\n\nexport type SessionPathStatus = \"authorized\" | \"metadata_only\" | \"rejected\" | \"blocked\";\nexport type SessionPathClassification = \"root\" | \"inside\" | \"external\";\n\nexport interface SessionPathIdentity {\n\treadonly owner: string;\n}\n\nexport interface SessionPathStat {\n\treadonly dev: string;\n\treadonly ino: string;\n\treadonly nlink: number;\n\treadonly size: number;\n\treadonly mtime: number;\n\treadonly regular: boolean;\n\treadonly owner: string;\n}\n\nexport interface SessionPathChainEntry {\n\treadonly lexical: string;\n\treadonly realpath: string;\n\treadonly linkKind: SessionPathLinkKind;\n}\n\nexport interface SessionPathTarget {\n\treadonly lexical: string;\n\treadonly realpath: string;\n}\n\nexport interface SessionPathOpened {\n\treadonly dev: string;\n\treadonly ino: string;\n}\n\nexport interface SessionPathEvidence {\n\treadonly schemaVersion: 1;\n\treadonly platform: SessionPathPlatform;\n\treadonly trustedRootLexical: string;\n\treadonly trustedRootRealpath: string;\n\treadonly target: SessionPathTarget;\n\treadonly chain: readonly SessionPathChainEntry[];\n\treadonly statBefore: SessionPathStat;\n\treadonly statAfter: SessionPathStat | null;\n\treadonly opened: SessionPathOpened;\n}\n\nexport interface SessionPathLockEvidence {\n\treadonly state: SessionPathLockState;\n\treadonly sameHost: boolean;\n\treadonly pidDefinitelyAbsent: boolean;\n\treadonly holderPid: string | null;\n}\n\nexport type SessionPathPlannedAction = {\n\treadonly kind: \"remove_stale_lock\";\n\treadonly holderPid: string | null;\n};\n\nexport interface SessionPathCapabilities {\n\treadonly canInspectMetadata: boolean;\n\treadonly canReadContents: boolean;\n\treadonly canRepair: boolean;\n}\n\nexport interface SessionPathDecision {\n\treadonly schemaVersion: typeof SESSION_PATH_POLICY_SCHEMA_VERSION;\n\treadonly platform: SessionPathPlatform;\n\treadonly intent: SessionPathIntent;\n\treadonly status: SessionPathStatus;\n\treadonly reason: SessionPathReason;\n\treadonly dryRun: boolean;\n\treadonly classification: SessionPathClassification;\n\treadonly targetLexical: string;\n\treadonly targetRealpath: string;\n\treadonly trustedRootLexical: string;\n\treadonly trustedRootRealpath: string;\n\treadonly capabilities: SessionPathCapabilities;\n\treadonly plannedActions: readonly SessionPathPlannedAction[];\n\treadonly scheduledWrites: number;\n}\n\nexport interface SessionPathAccessInput {\n\treadonly platform: SessionPathPlatform;\n\treadonly root: string;\n\treadonly target: string;\n\treadonly intent: SessionPathIntent;\n\treadonly identity?: SessionPathIdentity;\n\treadonly evidence: SessionPathEvidence;\n\treadonly lock?: SessionPathLockEvidence;\n}\n\nconst PLATFORMS = new Set<SessionPathPlatform>([\"posix\", \"win32\"]);\nconst INTENTS = new Set<SessionPathIntent>([\"inspect_metadata\", \"inspect_content\", \"repair\", \"repair_dry_run\"]);\nconst LINK_KINDS = new Set<SessionPathLinkKind>([\"none\", \"symlink\", \"reparse\"]);\nconst LOCK_STATES = new Set<SessionPathLockState>([\"absent\", \"live\", \"stale\", \"foreign\", \"unknown\"]);\n\nconst WIN_RESERVED_NAMES = (() => {\n\tconst set = new Set<string>();\n\tset.add(\"con\");\n\tset.add(\"prn\");\n\tset.add(\"aux\");\n\tset.add(\"nul\");\n\tfor (let i = 1; i <= 9; i++) {\n\t\tset.add(`com${i}`);\n\t\tset.add(`lpt${i}`);\n\t}\n\treturn set;\n})();\n\nconst EVIDENCE_KEYS = [\n\t\"schemaVersion\",\n\t\"platform\",\n\t\"trustedRootLexical\",\n\t\"trustedRootRealpath\",\n\t\"target\",\n\t\"chain\",\n\t\"statBefore\",\n\t\"statAfter\",\n\t\"opened\",\n] as const;\nconst STAT_KEYS = [\"dev\", \"ino\", \"nlink\", \"size\", \"mtime\", \"regular\", \"owner\"] as const;\nconst TARGET_KEYS = [\"lexical\", \"realpath\"] as const;\nconst OPENED_KEYS = [\"dev\", \"ino\"] as const;\nconst CHAIN_ENTRY_KEYS = [\"lexical\", \"realpath\", \"linkKind\"] as const;\nconst LOCK_KEYS = [\"state\", \"sameHost\", \"pidDefinitelyAbsent\", \"holderPid\"] as const;\nconst INPUT_ALLOWED_KEYS = new Set([\"platform\", \"root\", \"target\", \"intent\", \"identity\", \"evidence\", \"lock\"]);\n\n// -------------------------------------------------------------------------------------------------\n// Generic plain-data / exact-key / accessor-free guards.\n// -------------------------------------------------------------------------------------------------\n\nfunction isPlainDataObject(value: unknown): value is Record<string, unknown> {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) return false;\n\tconst proto = Object.getPrototypeOf(value);\n\tif (proto !== null && proto !== Object.prototype) return false;\n\tif (Object.getOwnPropertySymbols(value).length > 0) return false;\n\tfor (const key of Object.keys(value)) {\n\t\tconst desc = Object.getOwnPropertyDescriptor(value, key);\n\t\tif (desc === undefined || desc.get !== undefined || desc.set !== undefined || !(\"value\" in desc)) {\n\t\t\treturn false;\n\t\t}\n\t}\n\treturn true;\n}\n\nfunction hasExactKeys(value: Record<string, unknown>, keys: readonly string[]): boolean {\n\tconst present = Object.keys(value);\n\tif (present.length !== keys.length) return false;\n\tfor (const key of keys) {\n\t\tif (!Object.hasOwn(value, key)) return false;\n\t}\n\treturn true;\n}\n\nfunction isCanonicalDecimal(value: unknown): value is string {\n\treturn typeof value === \"string\" && CANONICAL_DECIMAL_RE.test(value);\n}\n\nfunction isSafeNonNegativeInteger(value: unknown): value is number {\n\treturn typeof value === \"number\" && Number.isFinite(value) && Number.isSafeInteger(value) && (value as number) >= 0;\n}\n\nfunction deepFreeze<T>(value: T): T {\n\tif (typeof value !== \"object\" || value === null || Object.isFrozen(value)) return value;\n\tif (Array.isArray(value)) {\n\t\tfor (const item of value) deepFreeze(item);\n\t} else {\n\t\tfor (const child of Object.values(value as Record<string, unknown>)) deepFreeze(child);\n\t}\n\treturn Object.freeze(value);\n}\n\nfunction assertPlainObject(value: unknown, label: string): asserts value is Record<string, unknown> {\n\tif (!isPlainDataObject(value)) {\n\t\tthrow new TypeError(`${label} must be a plain data object without accessors or a foreign prototype`);\n\t}\n}\n\nfunction assertExactKeys(value: Record<string, unknown>, keys: readonly string[], label: string): void {\n\tif (!hasExactKeys(value, keys)) {\n\t\tthrow new TypeError(`${label} must have exactly the keys: ${keys.join(\", \")}`);\n\t}\n}\n\nfunction assertString(value: unknown, label: string): asserts value is string {\n\tif (typeof value !== \"string\") throw new TypeError(`${label} must be a string`);\n}\n\nfunction assertBoolean(value: unknown, label: string): asserts value is boolean {\n\tif (typeof value !== \"boolean\") throw new TypeError(`${label} must be a boolean`);\n}\n\nfunction assertCanonicalDecimal(value: unknown, label: string): asserts value is string {\n\tif (!isCanonicalDecimal(value)) {\n\t\tthrow new TypeError(\n\t\t\t`${label} must be a canonical decimal string (\"0\" or a nonzero decimal without leading zeros, up to 20 digits)`,\n\t\t);\n\t}\n}\n\nfunction assertSafeNonNegInt(value: unknown, label: string): asserts value is number {\n\tif (!isSafeNonNegativeInteger(value)) throw new TypeError(`${label} must be a finite safe non-negative integer`);\n}\n\n/**\n * Assert a path-shaped evidence string: a string within the 4096 cap and free\n * of C0/DEL control characters. This caps every lexical/realpath evidence\n * string at validation time (fail-closed) before any canonicalization runs.\n */\nfunction assertPathString(value: unknown, label: string): asserts value is string {\n\tif (typeof value !== \"string\") throw new TypeError(`${label} must be a string`);\n\tif (value.length > SESSION_PATH_MAX_LENGTH) {\n\t\tthrow new TypeError(`${label} exceeds the ${SESSION_PATH_MAX_LENGTH} character cap`);\n\t}\n\tif (CONTROL_CHAR_RE.test(value)) throw new TypeError(`${label} must not contain C0/DEL control characters`);\n}\n\n/**\n * Strictly validate a plain dense array before any indexed value access: it\n * must be a real Array whose prototype is exactly Array.prototype, carry no\n * symbol properties or extra own properties, and expose every index 0..length-1\n * as an own data descriptor (no holes, no getters/setters). Accessor indices are\n * rejected without their getters ever executing. The length is captured once.\n */\nfunction assertStrictPlainArray(value: unknown, label: string): asserts value is unknown[] {\n\tif (typeof value !== \"object\" || value === null || !Array.isArray(value)) {\n\t\tthrow new TypeError(`${label} must be an array`);\n\t}\n\tif (Object.getPrototypeOf(value) !== Array.prototype) {\n\t\tthrow new TypeError(`${label} must use the Array prototype`);\n\t}\n\tif (Object.getOwnPropertySymbols(value).length > 0) {\n\t\tthrow new TypeError(`${label} must not carry symbol properties`);\n\t}\n\tconst length = value.length;\n\tfor (const name of Object.getOwnPropertyNames(value)) {\n\t\tif (name === \"length\") continue;\n\t\tconst index = Number(name);\n\t\tif (!Number.isSafeInteger(index) || index < 0 || index >= length || String(index) !== name) {\n\t\t\tthrow new TypeError(`${label} must not carry extra own properties`);\n\t\t}\n\t}\n\tfor (let i = 0; i < length; i++) {\n\t\tconst descriptor = Object.getOwnPropertyDescriptor(value, String(i));\n\t\tif (descriptor === undefined) throw new TypeError(`${label} must be dense (no holes)`);\n\t\tif (descriptor.get !== undefined || descriptor.set !== undefined || !(\"value\" in descriptor)) {\n\t\t\tthrow new TypeError(`${label} must not expose accessor or non-data element descriptors`);\n\t\t}\n\t}\n}\n\n// -------------------------------------------------------------------------------------------------\n// Stage 1: pure lexical canonicalizer + segment-boundary containment.\n// -------------------------------------------------------------------------------------------------\n\nfunction splitSegments(value: string): string[] {\n\treturn value.split(\"/\").filter((segment) => segment.length > 0);\n}\n\n/**\n * Canonicalize a session path lexically for the given platform without any\n * filesystem access. Returns null (fail-closed) for any disallowed form:\n * non-string, empty, longer than 4096, C0/DEL control characters, POSIX\n * non-absolute or above-root `..`, or any Win32 hazard (namespace prefixes,\n * UNC, drive-relative, non-absolute, ADS colons, trailing dot/space, reserved\n * device names, above-drive-root escape). Drive letters are lower-cased.\n */\nexport function canonicalizeSessionPath(raw: unknown, platform: SessionPathPlatform): string | null {\n\tif (typeof raw !== \"string\") return null;\n\tif (raw.length === 0 || raw.length > SESSION_PATH_MAX_LENGTH) return null;\n\tif (CONTROL_CHAR_RE.test(raw)) return null;\n\tif (platform === \"posix\") return canonicalizePosix(raw);\n\tif (platform === \"win32\") return canonicalizeWin32(raw);\n\treturn null;\n}\n\nfunction canonicalizePosix(raw: string): string | null {\n\tif (raw.charCodeAt(0) !== 47 /* '/' */) return null;\n\tconst collapsed: string[] = [];\n\tfor (const segment of splitSegments(raw)) {\n\t\tif (segment === \".\") continue;\n\t\tif (segment === \"..\") {\n\t\t\tif (collapsed.length === 0) return null;\n\t\t\tcollapsed.pop();\n\t\t\tcontinue;\n\t\t}\n\t\tcollapsed.push(segment);\n\t}\n\treturn `/${collapsed.join(\"/\")}`;\n}\n\nfunction canonicalizeWin32(raw: string): string | null {\n\tconst normalized = raw.replace(/\\\\/g, \"/\");\n\tif (normalized.startsWith(\"//?/\") || normalized.startsWith(\"//./\")) return null;\n\tif (normalized.startsWith(\"//\")) return null;\n\tconst match = WIN_DRIVE_ABSOLUTE_RE.exec(normalized);\n\tif (match === null) return null;\n\tconst drive = match[1].toLowerCase();\n\tconst collapsed: string[] = [];\n\tfor (const segment of splitSegments(match[2])) {\n\t\tif (segment === \".\") continue;\n\t\tif (segment === \"..\") {\n\t\t\tif (collapsed.length === 0) return null;\n\t\t\tcollapsed.pop();\n\t\t\tcontinue;\n\t\t}\n\t\tif (segment.includes(\":\")) return null;\n\t\tif (segment.endsWith(\".\") || segment.endsWith(\" \")) return null;\n\t\tconst stem = segment.split(\".\", 1)[0].toLowerCase();\n\t\tif (WIN_RESERVED_NAMES.has(stem)) return null;\n\t\tcollapsed.push(segment);\n\t}\n\treturn `${drive}:/${collapsed.join(\"/\")}`;\n}\n\ninterface CanonicalParts {\n\treadonly drive: string | null;\n\treadonly segments: readonly string[];\n}\n\nfunction parseCanonical(canonical: string, platform: SessionPathPlatform): CanonicalParts | null {\n\tif (platform === \"posix\") {\n\t\tif (canonical.charCodeAt(0) !== 47) return null;\n\t\treturn { drive: null, segments: splitSegments(canonical) };\n\t}\n\tif (platform === \"win32\") {\n\t\tconst match = WIN_CANONICAL_RE.exec(canonical);\n\t\tif (match === null) return null;\n\t\treturn { drive: match[1], segments: splitSegments(match[2]) };\n\t}\n\treturn null;\n}\n\nfunction segmentEqual(left: string, right: string, platform: SessionPathPlatform): boolean {\n\treturn platform === \"win32\" ? left.toLowerCase() === right.toLowerCase() : left === right;\n}\n\nfunction partsContain(root: CanonicalParts, candidate: CanonicalParts, platform: SessionPathPlatform): boolean {\n\tif (root.drive !== candidate.drive) return false;\n\tif (candidate.segments.length < root.segments.length) return false;\n\tfor (let i = 0; i < root.segments.length; i++) {\n\t\tif (!segmentEqual(root.segments[i], candidate.segments[i], platform)) return false;\n\t}\n\treturn true;\n}\n\n/**\n * Canonical path equality: compares drive and every segment using platform\n * semantics (win32 case-insensitive, posix exact). Returns false if either\n * input is null or non-canonical. Unlike a raw string compare, two win32 paths\n * that differ only in segment case are equal here, so mixed-case evidence binds\n * correctly while the canonical output still preserves segment case.\n */\nfunction canonicalPathEqual(a: string | null, b: string | null, platform: SessionPathPlatform): boolean {\n\tif (a === null || b === null) return false;\n\tconst aParts = parseCanonical(a, platform);\n\tconst bParts = parseCanonical(b, platform);\n\tif (aParts === null || bParts === null) return false;\n\tif (aParts.drive !== bParts.drive) return false;\n\tif (aParts.segments.length !== bParts.segments.length) return false;\n\tfor (let i = 0; i < aParts.segments.length; i++) {\n\t\tif (!segmentEqual(aParts.segments[i], bParts.segments[i], platform)) return false;\n\t}\n\treturn true;\n}\n\n/**\n * True when `candidate` is within `root` at a segment boundary (root may equal\n * candidate). Win32 compares segments case-insensitively; POSIX is exact.\n * Cross-drive and any non-canonical input return false (fail-closed).\n */\nexport function sessionPathContains(root: unknown, candidate: unknown, platform: SessionPathPlatform): boolean {\n\tconst rootCanonical = canonicalizeSessionPath(root, platform);\n\tconst candidateCanonical = canonicalizeSessionPath(candidate, platform);\n\tif (rootCanonical === null || candidateCanonical === null) return false;\n\tconst rootParts = parseCanonical(rootCanonical, platform);\n\tconst candidateParts = parseCanonical(candidateCanonical, platform);\n\tif (rootParts === null || candidateParts === null) return false;\n\treturn partsContain(rootParts, candidateParts, platform);\n}\n\nfunction classifyTarget(\n\trootCanonical: string,\n\ttargetCanonical: string,\n\tplatform: SessionPathPlatform,\n): SessionPathClassification {\n\tconst rootParts = parseCanonical(rootCanonical, platform);\n\tconst targetParts = parseCanonical(targetCanonical, platform);\n\tif (rootParts === null || targetParts === null) return \"external\";\n\tif (!partsContain(rootParts, targetParts, platform)) return \"external\";\n\tif (rootParts.drive === targetParts.drive && rootParts.segments.length === targetParts.segments.length) {\n\t\treturn \"root\";\n\t}\n\treturn \"inside\";\n}\n\n// -------------------------------------------------------------------------------------------------\n// Strict evidence / lock validation. Identity is normalized leniently.\n// -------------------------------------------------------------------------------------------------\n\nfunction validateStat(value: unknown, label: string): SessionPathStat {\n\tassertPlainObject(value, label);\n\tassertExactKeys(value, STAT_KEYS, label);\n\tassertCanonicalDecimal(value.dev, `${label}.dev`);\n\tassertCanonicalDecimal(value.ino, `${label}.ino`);\n\tassertSafeNonNegInt(value.nlink, `${label}.nlink`);\n\tassertSafeNonNegInt(value.size, `${label}.size`);\n\tassertSafeNonNegInt(value.mtime, `${label}.mtime`);\n\tassertBoolean(value.regular, `${label}.regular`);\n\tassertCanonicalDecimal(value.owner, `${label}.owner`);\n\treturn {\n\t\tdev: value.dev,\n\t\tino: value.ino,\n\t\tnlink: value.nlink,\n\t\tsize: value.size,\n\t\tmtime: value.mtime,\n\t\tregular: value.regular,\n\t\towner: value.owner,\n\t};\n}\n\nfunction validateChainEntry(value: unknown, label: string): SessionPathChainEntry {\n\tassertPlainObject(value, label);\n\tassertExactKeys(value, CHAIN_ENTRY_KEYS, label);\n\tassertPathString(value.lexical, `${label}.lexical`);\n\tassertPathString(value.realpath, `${label}.realpath`);\n\tif (!LINK_KINDS.has(value.linkKind as SessionPathLinkKind)) {\n\t\tthrow new TypeError(`${label}.linkKind must be none|symlink|reparse`);\n\t}\n\treturn { lexical: value.lexical, realpath: value.realpath, linkKind: value.linkKind as SessionPathLinkKind };\n}\n\nfunction validateEvidence(evidence: unknown): SessionPathEvidence {\n\tassertPlainObject(evidence, \"evidence\");\n\tassertExactKeys(evidence, EVIDENCE_KEYS, \"evidence\");\n\tif (evidence.schemaVersion !== 1) throw new TypeError(\"evidence.schemaVersion must be 1\");\n\tif (!PLATFORMS.has(evidence.platform as SessionPathPlatform)) {\n\t\tthrow new TypeError(\"evidence.platform must be posix|win32\");\n\t}\n\tassertPathString(evidence.trustedRootLexical, \"evidence.trustedRootLexical\");\n\tassertPathString(evidence.trustedRootRealpath, \"evidence.trustedRootRealpath\");\n\n\tassertPlainObject(evidence.target, \"evidence.target\");\n\tassertExactKeys(evidence.target, TARGET_KEYS, \"evidence.target\");\n\tassertPathString(evidence.target.lexical, \"evidence.target.lexical\");\n\tassertPathString(evidence.target.realpath, \"evidence.target.realpath\");\n\n\tif (!Array.isArray(evidence.chain)) throw new TypeError(\"evidence.chain must be an array\");\n\tconst chainLength = evidence.chain.length;\n\tif (chainLength === 0) throw new TypeError(\"evidence.chain must be non-empty\");\n\tif (chainLength > MAX_SESSION_PATH_CHAIN_ENTRIES) {\n\t\tthrow new TypeError(`evidence.chain exceeds MAX_SESSION_PATH_CHAIN_ENTRIES (${MAX_SESSION_PATH_CHAIN_ENTRIES})`);\n\t}\n\tassertStrictPlainArray(evidence.chain, \"evidence.chain\");\n\tconst chain: SessionPathChainEntry[] = [];\n\tfor (let index = 0; index < chainLength; index++) {\n\t\tchain.push(validateChainEntry(evidence.chain[index], `evidence.chain[${index}]`));\n\t}\n\n\tconst statBefore = validateStat(evidence.statBefore, \"evidence.statBefore\");\n\tlet statAfter: SessionPathStat | null = null;\n\tif (evidence.statAfter !== null) {\n\t\tstatAfter = validateStat(evidence.statAfter, \"evidence.statAfter\");\n\t}\n\n\tassertPlainObject(evidence.opened, \"evidence.opened\");\n\tassertExactKeys(evidence.opened, OPENED_KEYS, \"evidence.opened\");\n\tassertCanonicalDecimal(evidence.opened.dev, \"evidence.opened.dev\");\n\tassertCanonicalDecimal(evidence.opened.ino, \"evidence.opened.ino\");\n\n\treturn {\n\t\tschemaVersion: 1,\n\t\tplatform: evidence.platform as SessionPathPlatform,\n\t\ttrustedRootLexical: evidence.trustedRootLexical,\n\t\ttrustedRootRealpath: evidence.trustedRootRealpath,\n\t\ttarget: { lexical: evidence.target.lexical, realpath: evidence.target.realpath },\n\t\tchain,\n\t\tstatBefore,\n\t\tstatAfter,\n\t\topened: { dev: evidence.opened.dev, ino: evidence.opened.ino },\n\t};\n}\n\nfunction validateLock(lock: unknown): SessionPathLockEvidence {\n\tassertPlainObject(lock, \"lock\");\n\tassertExactKeys(lock, LOCK_KEYS, \"lock\");\n\tif (!LOCK_STATES.has(lock.state as SessionPathLockState)) {\n\t\tthrow new TypeError(\"lock.state must be absent|live|stale|foreign|unknown\");\n\t}\n\tassertBoolean(lock.sameHost, \"lock.sameHost\");\n\tassertBoolean(lock.pidDefinitelyAbsent, \"lock.pidDefinitelyAbsent\");\n\tif (lock.holderPid !== null) {\n\t\tassertCanonicalDecimal(lock.holderPid, \"lock.holderPid\");\n\t}\n\treturn {\n\t\tstate: lock.state as SessionPathLockState,\n\t\tsameHost: lock.sameHost,\n\t\tpidDefinitelyAbsent: lock.pidDefinitelyAbsent,\n\t\tholderPid: lock.holderPid === null ? null : lock.holderPid,\n\t};\n}\n\n/**\n * Identity is normalized leniently: a missing or structurally incomplete\n * identity yields undefined, which the policy treats as \"not provided\". This\n * matches the requirement that missing/incomplete identity *blocks* privileged\n * intents rather than throwing.\n */\nfunction normalizeIdentity(value: unknown): SessionPathIdentity | undefined {\n\tif (!isPlainDataObject(value)) return undefined;\n\tif (!hasExactKeys(value, [\"owner\"])) return undefined;\n\tif (!isCanonicalDecimal(value.owner)) return undefined;\n\treturn { owner: value.owner };\n}\n\nfunction validateInput(rawInput: unknown): SessionPathAccessInput {\n\tassertPlainObject(rawInput, \"input\");\n\tfor (const key of Object.keys(rawInput)) {\n\t\tif (!INPUT_ALLOWED_KEYS.has(key)) throw new TypeError(`input has an unknown key: ${key}`);\n\t}\n\tif (!PLATFORMS.has(rawInput.platform as SessionPathPlatform)) {\n\t\tthrow new TypeError(\"input.platform must be posix|win32\");\n\t}\n\tassertString(rawInput.root, \"input.root\");\n\tassertString(rawInput.target, \"input.target\");\n\tif (!INTENTS.has(rawInput.intent as SessionPathIntent)) {\n\t\tthrow new TypeError(\"input.intent must be inspect_metadata|inspect_content|repair|repair_dry_run\");\n\t}\n\tif (!Object.hasOwn(rawInput, \"evidence\")) {\n\t\tthrow new TypeError(\"input.evidence is required\");\n\t}\n\tconst evidence = validateEvidence(rawInput.evidence);\n\tlet identity: SessionPathIdentity | undefined;\n\tif (Object.hasOwn(rawInput, \"identity\") && rawInput.identity !== undefined) {\n\t\tidentity = normalizeIdentity(rawInput.identity);\n\t}\n\tlet lock: SessionPathLockEvidence | undefined;\n\tif (Object.hasOwn(rawInput, \"lock\") && rawInput.lock !== undefined) {\n\t\tlock = validateLock(rawInput.lock);\n\t}\n\treturn {\n\t\tplatform: rawInput.platform as SessionPathPlatform,\n\t\troot: rawInput.root,\n\t\ttarget: rawInput.target,\n\t\tintent: rawInput.intent as SessionPathIntent,\n\t\tidentity,\n\t\tevidence,\n\t\tlock,\n\t};\n}\n\n// -------------------------------------------------------------------------------------------------\n// Decision assembly.\n// -------------------------------------------------------------------------------------------------\n\nfunction statEqual(a: SessionPathStat, b: SessionPathStat): boolean {\n\treturn (\n\t\ta.dev === b.dev &&\n\t\ta.ino === b.ino &&\n\t\ta.nlink === b.nlink &&\n\t\ta.size === b.size &&\n\t\ta.mtime === b.mtime &&\n\t\ta.regular === b.regular &&\n\t\ta.owner === b.owner\n\t);\n}\n\nfunction buildDecision(fields: {\n\tplatform: SessionPathPlatform;\n\tintent: SessionPathIntent;\n\tstatus: SessionPathStatus;\n\treason: SessionPathReason;\n\tclassification: SessionPathClassification;\n\tevidence: SessionPathEvidence;\n\tcanInspectMetadata: boolean;\n\tcanReadContents: boolean;\n\tcanRepair: boolean;\n\tplannedActions: readonly SessionPathPlannedAction[];\n\tscheduledWrites: number;\n}): SessionPathDecision {\n\tconst decision: SessionPathDecision = {\n\t\tschemaVersion: SESSION_PATH_POLICY_SCHEMA_VERSION,\n\t\tplatform: fields.platform,\n\t\tintent: fields.intent,\n\t\tstatus: fields.status,\n\t\treason: fields.reason,\n\t\tdryRun: fields.intent === \"repair_dry_run\",\n\t\tclassification: fields.classification,\n\t\ttargetLexical: fields.evidence.target.lexical,\n\t\ttargetRealpath: fields.evidence.target.realpath,\n\t\ttrustedRootLexical: fields.evidence.trustedRootLexical,\n\t\ttrustedRootRealpath: fields.evidence.trustedRootRealpath,\n\t\tcapabilities: {\n\t\t\tcanInspectMetadata: fields.canInspectMetadata,\n\t\t\tcanReadContents: fields.canReadContents,\n\t\t\tcanRepair: fields.canRepair,\n\t\t},\n\t\tplannedActions: fields.plannedActions.map((action) => ({ kind: action.kind, holderPid: action.holderPid })),\n\t\tscheduledWrites: fields.scheduledWrites,\n\t};\n\treturn deepFreeze(decision);\n}\n\nfunction rejected(\n\tplatform: SessionPathPlatform,\n\tintent: SessionPathIntent,\n\treason: SessionPathReason,\n\tevidence: SessionPathEvidence,\n\tclassification: SessionPathClassification = \"external\",\n): SessionPathDecision {\n\treturn buildDecision({\n\t\tplatform,\n\t\tintent,\n\t\tstatus: \"rejected\",\n\t\treason,\n\t\tclassification,\n\t\tevidence,\n\t\tcanInspectMetadata: false,\n\t\tcanReadContents: false,\n\t\tcanRepair: false,\n\t\tplannedActions: [],\n\t\tscheduledWrites: 0,\n\t});\n}\n\nfunction blocked(\n\tplatform: SessionPathPlatform,\n\tintent: SessionPathIntent,\n\treason: SessionPathReason,\n\tevidence: SessionPathEvidence,\n\tclassification: SessionPathClassification,\n): SessionPathDecision {\n\treturn buildDecision({\n\t\tplatform,\n\t\tintent,\n\t\tstatus: \"blocked\",\n\t\treason,\n\t\tclassification,\n\t\tevidence,\n\t\tcanInspectMetadata: false,\n\t\tcanReadContents: false,\n\t\tcanRepair: false,\n\t\tplannedActions: [],\n\t\tscheduledWrites: 0,\n\t});\n}\n\nfunction metadataOnly(\n\tplatform: SessionPathPlatform,\n\tintent: SessionPathIntent,\n\tevidence: SessionPathEvidence,\n\tclassification: SessionPathClassification,\n): SessionPathDecision {\n\treturn buildDecision({\n\t\tplatform,\n\t\tintent,\n\t\tstatus: \"metadata_only\",\n\t\treason: \"metadata_only\",\n\t\tclassification,\n\t\tevidence,\n\t\tcanInspectMetadata: true,\n\t\tcanReadContents: false,\n\t\tcanRepair: false,\n\t\tplannedActions: [],\n\t\tscheduledWrites: 0,\n\t});\n}\n\nfunction authorized(\n\tplatform: SessionPathPlatform,\n\tintent: SessionPathIntent,\n\tevidence: SessionPathEvidence,\n\tclassification: SessionPathClassification,\n\tcanReadContents: boolean,\n\tcanRepair: boolean,\n\tplannedActions: readonly SessionPathPlannedAction[],\n\tscheduledWrites: number,\n): SessionPathDecision {\n\treturn buildDecision({\n\t\tplatform,\n\t\tintent,\n\t\tstatus: \"authorized\",\n\t\treason: \"authorized\",\n\t\tclassification,\n\t\tevidence,\n\t\tcanInspectMetadata: true,\n\t\tcanReadContents,\n\t\tcanRepair,\n\t\tplannedActions,\n\t\tscheduledWrites,\n\t});\n}\n\n/**\n * True when `childCanonical` is exactly one segment deeper than\n * `parentCanonical` and shares its entire prefix (a direct child at a segment\n * boundary). Win32 compares segments case-insensitively.\n */\nfunction isDirectChild(parentCanonical: string, childCanonical: string, platform: SessionPathPlatform): boolean {\n\tconst parentParts = parseCanonical(parentCanonical, platform);\n\tconst childParts = parseCanonical(childCanonical, platform);\n\tif (parentParts === null || childParts === null) return false;\n\tif (parentParts.drive !== childParts.drive) return false;\n\tif (childParts.segments.length !== parentParts.segments.length + 1) return false;\n\tfor (let i = 0; i < parentParts.segments.length; i++) {\n\t\tif (!segmentEqual(parentParts.segments[i], childParts.segments[i], platform)) return false;\n\t}\n\treturn true;\n}\n\n/**\n * Strict chain binding (P3). The configured root is conservative (no symlinks),\n * so its lexical and real canonical forms must be identical. The chain must\n * start at the roots, end at the target lexical/real, have exactly the lexical\n * depth-delta plus one entries, and every adjacent lexical path and realpath\n * must be a direct child at a segment boundary. Every entry's lexical path must\n * stay inside the lexical root and every realpath inside the real root. Any\n * linkKind other than \"none\" blocks. Returns the first closed reason, or null\n * when the chain is fully bound.\n */\nfunction bindChain(\n\tevidence: SessionPathEvidence,\n\trootCanonical: string,\n\trootRealpathCanonical: string,\n\ttargetCanonical: string,\n\ttargetRealpathCanonical: string,\n\tplatform: SessionPathPlatform,\n): SessionPathReason | null {\n\tif (!canonicalPathEqual(rootCanonical, rootRealpathCanonical, platform)) return \"evidence_mismatch\";\n\n\tconst rootParts = parseCanonical(rootCanonical, platform);\n\tconst targetLexicalParts = parseCanonical(targetCanonical, platform);\n\tif (rootParts === null || targetLexicalParts === null) return \"evidence_mismatch\";\n\n\tconst expectedLength = targetLexicalParts.segments.length - rootParts.segments.length + 1;\n\tif (evidence.chain.length !== expectedLength) return \"evidence_mismatch\";\n\n\tconst firstLexical = canonicalizeSessionPath(evidence.chain[0].lexical, platform);\n\tconst firstReal = canonicalizeSessionPath(evidence.chain[0].realpath, platform);\n\tif (firstLexical === null || firstReal === null) return \"evidence_mismatch\";\n\tif (\n\t\t!canonicalPathEqual(firstLexical, rootCanonical, platform) ||\n\t\t!canonicalPathEqual(firstReal, rootRealpathCanonical, platform)\n\t)\n\t\treturn \"evidence_mismatch\";\n\n\tconst last = evidence.chain[evidence.chain.length - 1];\n\tconst lastLexical = canonicalizeSessionPath(last.lexical, platform);\n\tconst lastReal = canonicalizeSessionPath(last.realpath, platform);\n\tif (\n\t\t!canonicalPathEqual(lastLexical, targetCanonical, platform) ||\n\t\t!canonicalPathEqual(lastReal, targetRealpathCanonical, platform)\n\t)\n\t\treturn \"evidence_mismatch\";\n\n\tlet prevLexical = firstLexical;\n\tlet prevReal = firstReal;\n\tfor (let index = 0; index < evidence.chain.length; index++) {\n\t\tconst entry = evidence.chain[index];\n\t\tif (entry.linkKind !== \"none\") return \"symlink_in_chain\";\n\t\tconst entryLexical = canonicalizeSessionPath(entry.lexical, platform);\n\t\tconst entryReal = canonicalizeSessionPath(entry.realpath, platform);\n\t\tif (entryLexical === null || entryReal === null) return \"evidence_mismatch\";\n\t\tconst entryLexicalParts = parseCanonical(entryLexical, platform);\n\t\tconst entryRealParts = parseCanonical(entryReal, platform);\n\t\tif (entryLexicalParts === null || entryRealParts === null) return \"evidence_mismatch\";\n\t\tif (!partsContain(rootParts, entryLexicalParts, platform)) return \"evidence_mismatch\";\n\t\tif (!partsContain(rootParts, entryRealParts, platform)) return \"outside_realpath\";\n\t\tif (index > 0) {\n\t\t\tif (!isDirectChild(prevLexical, entryLexical, platform)) return \"evidence_mismatch\";\n\t\t\tif (!isDirectChild(prevReal, entryReal, platform)) return \"evidence_mismatch\";\n\t\t}\n\t\tprevLexical = entryLexical;\n\t\tprevReal = entryReal;\n\t}\n\treturn null;\n}\n\n/**\n * Lock coherence, fail-closed (P5). Each state is only meaningful with the\n * field values that justify it; a self-contradictory lock is treated as\n * untrustworthy and closed. `absent` and an eligible `stale` return null\n * (proceed); every other state (including any contradiction) returns a closed\n * reason rather than throwing.\n */\nfunction evaluateLock(lock: SessionPathLockEvidence): SessionPathReason | null {\n\tswitch (lock.state) {\n\t\tcase \"absent\":\n\t\t\treturn lock.holderPid === null && lock.pidDefinitelyAbsent ? null : \"lock_unknown\";\n\t\tcase \"live\":\n\t\t\treturn lock.sameHost && lock.holderPid !== null && !lock.pidDefinitelyAbsent ? \"lock_live\" : \"lock_unknown\";\n\t\tcase \"foreign\":\n\t\t\treturn !lock.sameHost ? \"lock_foreign\" : \"lock_unknown\";\n\t\tcase \"stale\":\n\t\t\treturn lock.sameHost && lock.holderPid !== null && lock.pidDefinitelyAbsent ? null : \"lock_stale_ineligible\";\n\t\tcase \"unknown\":\n\t\t\treturn \"lock_unknown\";\n\t\tdefault:\n\t\t\treturn \"lock_unknown\";\n\t}\n}\n\nfunction plannedActionsForLock(lock: SessionPathLockEvidence): SessionPathPlannedAction[] {\n\tif (lock.state === \"stale\" && lock.holderPid !== null) {\n\t\treturn [{ kind: \"remove_stale_lock\", holderPid: lock.holderPid }];\n\t}\n\treturn [];\n}\n\n/**\n * Decide session path access from attested plain-data evidence. Pure: never\n * performs I/O and never executes a repair. The returned decision is a\n * deep-frozen copy.\n *\n * Classification precedence (P0): the lexical classification of the request\n * root/target is computed first and is authoritative for privileged intents.\n * `inspect_metadata` always resolves to metadata_only after lexical/evidence\n * binding. For `inspect_content`/`repair`/`repair_dry_run` the lexical target\n * must be strictly inside the root (external => target_external, root =>\n * target_is_root) before identity, and the realpath classification must\n * independently be inside; an injected realpath can never upgrade an external\n * lexical target. `repair_dry_run` shares repair's eligibility, status, reason,\n * and planned actions, but reports canRepair=false and zero scheduled writes.\n */\nexport function decideSessionPathAccess(rawInput: unknown): SessionPathDecision {\n\tconst { platform, root, target, intent, identity, evidence, lock } = validateInput(rawInput);\n\n\tconst rootCanonical = canonicalizeSessionPath(root, platform);\n\tconst targetCanonical = canonicalizeSessionPath(target, platform);\n\tif (rootCanonical === null || targetCanonical === null) {\n\t\treturn rejected(platform, intent, \"lexical_invalid\", evidence);\n\t}\n\n\tif (evidence.platform !== platform) {\n\t\treturn blocked(platform, intent, \"evidence_mismatch\", evidence, \"external\");\n\t}\n\tconst evidenceRootCanonical = canonicalizeSessionPath(evidence.trustedRootLexical, platform);\n\tconst evidenceTargetCanonical = canonicalizeSessionPath(evidence.target.lexical, platform);\n\tconst rootRealpathCanonical = canonicalizeSessionPath(evidence.trustedRootRealpath, platform);\n\tconst targetRealpathCanonical = canonicalizeSessionPath(evidence.target.realpath, platform);\n\tif (\n\t\t!canonicalPathEqual(evidenceRootCanonical, rootCanonical, platform) ||\n\t\t!canonicalPathEqual(evidenceTargetCanonical, targetCanonical, platform) ||\n\t\trootRealpathCanonical === null ||\n\t\ttargetRealpathCanonical === null\n\t) {\n\t\treturn blocked(platform, intent, \"evidence_mismatch\", evidence, \"external\");\n\t}\n\n\tconst lexicalClassification = classifyTarget(rootCanonical, targetCanonical, platform);\n\tconst isDryRun = intent === \"repair_dry_run\";\n\tconst privilegedIntent: SessionPathIntent = isDryRun ? \"repair\" : intent;\n\n\tif (privilegedIntent === \"inspect_metadata\") {\n\t\treturn metadataOnly(platform, intent, evidence, lexicalClassification);\n\t}\n\n\t// inspect_content, repair, repair_dry_run: lexical classification is primary (P0).\n\tif (lexicalClassification === \"external\") {\n\t\treturn rejected(platform, intent, \"target_external\", evidence, \"external\");\n\t}\n\tif (lexicalClassification === \"root\") {\n\t\treturn rejected(platform, intent, \"target_is_root\", evidence, \"root\");\n\t}\n\n\t// P0: independently require the realpath classification to be strictly inside;\n\t// an injected realpath can never upgrade an inside lexical target.\n\tconst realClassification = classifyTarget(rootRealpathCanonical, targetRealpathCanonical, platform);\n\tif (realClassification !== \"inside\") {\n\t\treturn blocked(platform, intent, \"outside_realpath\", evidence, \"inside\");\n\t}\n\n\tif (identity === undefined) {\n\t\treturn blocked(platform, intent, \"identity_required\", evidence, \"inside\");\n\t}\n\tif (lock === undefined) {\n\t\treturn blocked(platform, intent, \"lock_required\", evidence, \"inside\");\n\t}\n\n\tconst chainReason = bindChain(\n\t\tevidence,\n\t\trootCanonical,\n\t\trootRealpathCanonical,\n\t\ttargetCanonical,\n\t\ttargetRealpathCanonical,\n\t\tplatform,\n\t);\n\tif (chainReason !== null) {\n\t\treturn blocked(platform, intent, chainReason, evidence, \"inside\");\n\t}\n\tif (!evidence.statBefore.regular) {\n\t\treturn blocked(platform, intent, \"nonregular\", evidence, \"inside\");\n\t}\n\tif (evidence.statBefore.nlink !== 1) {\n\t\treturn blocked(platform, intent, \"nlink_not_one\", evidence, \"inside\");\n\t}\n\tif (identity.owner !== evidence.statBefore.owner) {\n\t\treturn blocked(platform, intent, \"owner_mismatch\", evidence, \"inside\");\n\t}\n\tif (evidence.opened.dev !== evidence.statBefore.dev || evidence.opened.ino !== evidence.statBefore.ino) {\n\t\treturn blocked(platform, intent, \"stat_race\", evidence, \"inside\");\n\t}\n\tif (evidence.statAfter === null || !statEqual(evidence.statBefore, evidence.statAfter)) {\n\t\treturn blocked(platform, intent, \"stat_after_mismatch\", evidence, \"inside\");\n\t}\n\n\tconst lockBlock = evaluateLock(lock);\n\tif (lockBlock !== null) {\n\t\treturn blocked(platform, intent, lockBlock, evidence, \"inside\");\n\t}\n\n\tif (privilegedIntent === \"inspect_content\") {\n\t\treturn authorized(platform, intent, evidence, \"inside\", true, false, [], 0);\n\t}\n\n\tconst plannedActions = plannedActionsForLock(lock);\n\tconst scheduledWrites = isDryRun ? 0 : plannedActions.length;\n\treturn authorized(platform, intent, evidence, \"inside\", false, !isDryRun, plannedActions, scheduledWrites);\n}\n"]}

package/dist/core/session-repair-plan.d.ts

@@ -0,0 +1,49 @@
+import type { ToolResultMessage } from "omk-ai";
+import type { SessionByteDigest, SessionCompletePrefix, SessionIntegrityReasonCode, SessionIntegrityReport } from "./session-integrity.ts";
+export declare const SESSION_REPAIR_PLAN_SCHEMA_VERSION: 1;
+export type SessionRepairReason = "resume_recovery" | "doctor_repair";
+export type SessionRepairPlanStatus = "not_needed" | "repairable" | "blocked";
+export type SessionRepairBlockerReason = "integrity_finding" | "inspection_incomplete" | "ambiguous_transcript" | "inconsistent_report";
+export interface CreateSessionRepairPlanOptions {
+    readonly repairId: string;
+    readonly reason: SessionRepairReason;
+    /** Deterministic caller-provided epoch milliseconds for synthetic messages. */
+    readonly timestamp: number;
+}
+export interface SessionRepairPrecondition {
+    readonly source: SessionByteDigest;
+    readonly completePrefix: SessionCompletePrefix;
+    readonly activeLeafId: string | null;
+}
+export interface SessionRepairBlocker {
+    readonly reason: SessionRepairBlockerReason;
+    readonly findingReason?: SessionIntegrityReasonCode;
+    readonly entryId?: string;
+    readonly toolCallId?: string;
+}
+export type SessionRepairAction = {
+    readonly kind: "quarantine_trailing_fragment";
+    readonly fragment: SessionByteDigest;
+    readonly retainPrefix: SessionCompletePrefix;
+} | {
+    readonly kind: "append_synthetic_tool_result";
+    readonly sequence: number;
+    readonly toolCallId: string;
+    readonly toolName: string;
+    readonly message: Readonly<ToolResultMessage>;
+};
+export interface SessionRepairPlan {
+    readonly schemaVersion: typeof SESSION_REPAIR_PLAN_SCHEMA_VERSION;
+    readonly repairId: string;
+    readonly reason: SessionRepairReason;
+    readonly status: SessionRepairPlanStatus;
+    readonly precondition: SessionRepairPrecondition;
+    readonly actions: readonly SessionRepairAction[];
+    readonly blockers: readonly SessionRepairBlocker[];
+}
+/**
+ * Derive a deterministic repair plan without writing, truncating, quarantining,
+ * or mutating the inspected session. Ambiguous integrity states fail closed.
+ */
+export declare function createSessionRepairPlan(report: SessionIntegrityReport, options: CreateSessionRepairPlanOptions): SessionRepairPlan;
+//# sourceMappingURL=session-repair-plan.d.ts.map

package/dist/core/session-repair-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-repair-plan.d.ts","sourceRoot":"","sources":["../../src/core/session-repair-plan.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAY,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,KAAK,EACX,iBAAiB,EACjB,qBAAqB,EAErB,0BAA0B,EAC1B,sBAAsB,EACtB,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,kCAAkC,GAAa,CAAC;AAE7D,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG,eAAe,CAAC;AACtE,MAAM,MAAM,uBAAuB,GAAG,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC;AAC9E,MAAM,MAAM,0BAA0B,GACnC,mBAAmB,GACnB,uBAAuB,GACvB,sBAAsB,GACtB,qBAAqB,CAAC;AAEzB,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,aAAa,CAAC,EAAE,0BAA0B,CAAC;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,mBAAmB,GAC5B;IACA,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;CAC5C,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;CAC7C,CAAC;AAEL,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,aAAa,EAAE,OAAO,kCAAkC,CAAC;IAClE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACnD;AAyLD;;;GAGG;AACH,wBAAgB,uBAAuB,CACtC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,8BAA8B,GACrC,iBAAiB,CAoDnB","sourcesContent":["import {\n\ttype AgentMessage,\n\tcreateSyntheticToolResult,\n\tinspectTranscriptIntegrity,\n\ttype TranscriptIntegrityIssueKind,\n} from \"omk-agent-core\";\nimport type { ToolCall, ToolResultMessage } from \"omk-ai\";\nimport type {\n\tSessionByteDigest,\n\tSessionCompletePrefix,\n\tSessionIntegrityFinding,\n\tSessionIntegrityReasonCode,\n\tSessionIntegrityReport,\n} from \"./session-integrity.ts\";\n\nexport const SESSION_REPAIR_PLAN_SCHEMA_VERSION = 1 as const;\n\nexport type SessionRepairReason = \"resume_recovery\" | \"doctor_repair\";\nexport type SessionRepairPlanStatus = \"not_needed\" | \"repairable\" | \"blocked\";\nexport type SessionRepairBlockerReason =\n\t| \"integrity_finding\"\n\t| \"inspection_incomplete\"\n\t| \"ambiguous_transcript\"\n\t| \"inconsistent_report\";\n\nexport interface CreateSessionRepairPlanOptions {\n\treadonly repairId: string;\n\treadonly reason: SessionRepairReason;\n\t/** Deterministic caller-provided epoch milliseconds for synthetic messages. */\n\treadonly timestamp: number;\n}\n\nexport interface SessionRepairPrecondition {\n\treadonly source: SessionByteDigest;\n\treadonly completePrefix: SessionCompletePrefix;\n\treadonly activeLeafId: string | null;\n}\n\nexport interface SessionRepairBlocker {\n\treadonly reason: SessionRepairBlockerReason;\n\treadonly findingReason?: SessionIntegrityReasonCode;\n\treadonly entryId?: string;\n\treadonly toolCallId?: string;\n}\n\nexport type SessionRepairAction =\n\t| {\n\t\t\treadonly kind: \"quarantine_trailing_fragment\";\n\t\t\treadonly fragment: SessionByteDigest;\n\t\t\treadonly retainPrefix: SessionCompletePrefix;\n\t  }\n\t| {\n\t\t\treadonly kind: \"append_synthetic_tool_result\";\n\t\t\treadonly sequence: number;\n\t\t\treadonly toolCallId: string;\n\t\t\treadonly toolName: string;\n\t\t\treadonly message: Readonly<ToolResultMessage>;\n\t  };\n\nexport interface SessionRepairPlan {\n\treadonly schemaVersion: typeof SESSION_REPAIR_PLAN_SCHEMA_VERSION;\n\treadonly repairId: string;\n\treadonly reason: SessionRepairReason;\n\treadonly status: SessionRepairPlanStatus;\n\treadonly precondition: SessionRepairPrecondition;\n\treadonly actions: readonly SessionRepairAction[];\n\treadonly blockers: readonly SessionRepairBlocker[];\n}\n\nconst REPAIRABLE_FINDINGS = new Set<SessionIntegrityReasonCode>([\"trailing_fragment\", \"transcript_missing_result\"]);\nconst TRANSCRIPT_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"transcript_missing_result\",\n\t\"transcript_duplicate_result\",\n\t\"transcript_orphan_result\",\n\t\"transcript_duplicate_call_id\",\n\t\"transcript_interleaved_non_result\",\n]);\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\nfunction isToolCall(value: unknown): value is ToolCall {\n\treturn (\n\t\tisRecord(value) && value.type === \"toolCall\" && typeof value.id === \"string\" && typeof value.name === \"string\"\n\t);\n}\n\nfunction deepFreeze<T>(value: T): T {\n\tif (typeof value !== \"object\" || value === null || Object.isFrozen(value)) return value;\n\tfor (const child of Object.values(value)) deepFreeze(child);\n\treturn Object.freeze(value);\n}\n\nfunction repairText(reason: SessionRepairReason): string {\n\treturn reason === \"resume_recovery\"\n\t\t? \"Tool result missing; synthesized during session resume recovery\"\n\t\t: \"Tool result missing; synthesized by session doctor repair\";\n}\n\nfunction transcriptFindingReason(kind: TranscriptIntegrityIssueKind): SessionIntegrityReasonCode {\n\treturn `transcript_${kind}`;\n}\n\nfunction sameIdentityMultiset(left: readonly string[], right: readonly string[]): boolean {\n\tif (left.length !== right.length) return false;\n\tconst counts = new Map<string, number>();\n\tfor (const key of left) counts.set(key, (counts.get(key) ?? 0) + 1);\n\tfor (const key of right) {\n\t\tconst count = counts.get(key);\n\t\tif (count === undefined) return false;\n\t\tif (count === 1) counts.delete(key);\n\t\telse counts.set(key, count - 1);\n\t}\n\treturn counts.size === 0;\n}\n\nfunction reportIsConsistent(report: SessionIntegrityReport): boolean {\n\tif (report.ok !== (report.findings.length === 0)) return false;\n\tconst trailingFindings = report.findings.filter((finding) => finding.reason === \"trailing_fragment\");\n\tif (\n\t\ttrailingFindings.length !== (report.trailingFragment === null ? 0 : 1) ||\n\t\ttrailingFindings.some((finding) => Object.keys(finding).length !== 1)\n\t) {\n\t\treturn false;\n\t}\n\n\tconst transcriptFindings = report.findings.filter((finding) => TRANSCRIPT_FINDING_REASONS.has(finding.reason));\n\tif (!report.transcript) return transcriptFindings.length === 0;\n\tif (\n\t\treport.findings.some(\n\t\t\t(finding) => finding.reason !== \"trailing_fragment\" && !TRANSCRIPT_FINDING_REASONS.has(finding.reason),\n\t\t)\n\t) {\n\t\treturn false;\n\t}\n\n\tconst inspected = inspectTranscriptIntegrity(report.activeMessages);\n\tif (\n\t\treport.transcript.ok !== inspected.ok ||\n\t\treport.transcript.ok !== (report.transcript.issues.length === 0) ||\n\t\t!sameIdentityMultiset(\n\t\t\treport.transcript.issues.map((issue) =>\n\t\t\t\tJSON.stringify([issue.kind, issue.toolCallId, issue.toolName ?? null]),\n\t\t\t),\n\t\t\tinspected.issues.map((issue) => JSON.stringify([issue.kind, issue.toolCallId, issue.toolName ?? null])),\n\t\t)\n\t) {\n\t\treturn false;\n\t}\n\n\treturn sameIdentityMultiset(\n\t\ttranscriptFindings.map((finding) =>\n\t\t\tJSON.stringify([\n\t\t\t\tfinding.reason,\n\t\t\t\tfinding.line ?? null,\n\t\t\t\tfinding.entryId ?? null,\n\t\t\t\tfinding.parentId ?? null,\n\t\t\t\tfinding.cycleEntryIds ?? null,\n\t\t\t\tfinding.toolCallId ?? null,\n\t\t\t\tfinding.toolName ?? null,\n\t\t\t]),\n\t\t),\n\t\tinspected.issues.map((issue) =>\n\t\t\tJSON.stringify([\n\t\t\t\ttranscriptFindingReason(issue.kind),\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tissue.toolCallId,\n\t\t\t\tissue.toolName ?? null,\n\t\t\t]),\n\t\t),\n\t);\n}\n\nfunction validateOptions(options: CreateSessionRepairPlanOptions): void {\n\tif (\n\t\t!isRecord(options) ||\n\t\ttypeof options.repairId !== \"string\" ||\n\t\toptions.repairId.length === 0 ||\n\t\toptions.repairId.length > 128 ||\n\t\t/[\\u0000-\\u001f\\u007f]/.test(options.repairId)\n\t) {\n\t\tthrow new TypeError(\"repairId must be non-empty bounded text without C0 or DEL control characters\");\n\t}\n\tif (options.reason !== \"resume_recovery\" && options.reason !== \"doctor_repair\") {\n\t\tthrow new TypeError(\"reason must be resume_recovery or doctor_repair\");\n\t}\n\tif (!Number.isSafeInteger(options.timestamp) || options.timestamp < 0) {\n\t\tthrow new TypeError(\"timestamp must be a non-negative epoch-millisecond safe integer\");\n\t}\n}\n\nfunction blockerForFinding(finding: SessionIntegrityFinding): SessionRepairBlocker {\n\treturn Object.freeze({\n\t\treason: \"integrity_finding\",\n\t\tfindingReason: finding.reason,\n\t\t...(finding.entryId === undefined ? {} : { entryId: finding.entryId }),\n\t\t...(finding.toolCallId === undefined ? {} : { toolCallId: finding.toolCallId }),\n\t});\n}\n\nfunction missingTailCalls(report: SessionIntegrityReport): ToolCall[] | null {\n\tif (!report.transcript || report.transcript.issues.length === 0) return [];\n\tif (report.transcript.issues.some((issue) => issue.kind !== \"missing_result\")) return null;\n\n\tlet lastAssistantIndex = -1;\n\tfor (let index = report.activeMessages.length - 1; index >= 0; index--) {\n\t\tif (report.activeMessages[index]?.role === \"assistant\") {\n\t\t\tlastAssistantIndex = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (lastAssistantIndex === -1) return null;\n\tconst assistant = report.activeMessages[lastAssistantIndex];\n\tif (!assistant || assistant.role !== \"assistant\") return null;\n\tconst tailCalls = assistant.content.filter(isToolCall);\n\tconst tailCallIds = new Set(tailCalls.map((call) => call.id));\n\tconst missingIds = new Set(report.transcript.issues.map((issue) => issue.toolCallId));\n\tif ([...missingIds].some((id) => !tailCallIds.has(id))) return null;\n\n\tfor (let index = lastAssistantIndex + 1; index < report.activeMessages.length; index++) {\n\t\tconst message: AgentMessage | undefined = report.activeMessages[index];\n\t\tif (!message || message.role !== \"toolResult\" || !tailCallIds.has(message.toolCallId)) return null;\n\t}\n\treturn tailCalls.filter((call) => missingIds.has(call.id));\n}\n\nfunction basePlan(\n\treport: SessionIntegrityReport,\n\toptions: CreateSessionRepairPlanOptions,\n\tstatus: SessionRepairPlanStatus,\n\tactions: readonly SessionRepairAction[],\n\tblockers: readonly SessionRepairBlocker[],\n): SessionRepairPlan {\n\treturn Object.freeze({\n\t\tschemaVersion: SESSION_REPAIR_PLAN_SCHEMA_VERSION,\n\t\trepairId: options.repairId,\n\t\treason: options.reason,\n\t\tstatus,\n\t\tprecondition: Object.freeze({\n\t\t\tsource: Object.freeze({ ...report.source }),\n\t\t\tcompletePrefix: Object.freeze({ ...report.completePrefix }),\n\t\t\tactiveLeafId: report.activeLeafId,\n\t\t}),\n\t\tactions: Object.freeze(actions),\n\t\tblockers: Object.freeze(blockers),\n\t});\n}\n\n/**\n * Derive a deterministic repair plan without writing, truncating, quarantining,\n * or mutating the inspected session. Ambiguous integrity states fail closed.\n */\nexport function createSessionRepairPlan(\n\treport: SessionIntegrityReport,\n\toptions: CreateSessionRepairPlanOptions,\n): SessionRepairPlan {\n\tvalidateOptions(options);\n\tif (!reportIsConsistent(report)) {\n\t\treturn basePlan(report, options, \"blocked\", [], [Object.freeze({ reason: \"inconsistent_report\" })]);\n\t}\n\tconst blockers = report.findings\n\t\t.filter((finding) => !REPAIRABLE_FINDINGS.has(finding.reason))\n\t\t.map(blockerForFinding);\n\tif (blockers.length > 0) return basePlan(report, options, \"blocked\", [], blockers);\n\tif (!report.transcript) {\n\t\treturn basePlan(report, options, \"blocked\", [], [Object.freeze({ reason: \"inspection_incomplete\" })]);\n\t}\n\n\tconst missingFindings = report.findings.filter((finding) => finding.reason === \"transcript_missing_result\");\n\tconst missingIssues = report.transcript.issues.filter((issue) => issue.kind === \"missing_result\");\n\tif (\n\t\tmissingFindings.length !== missingIssues.length ||\n\t\treport.transcript.issues.some((issue) => issue.kind !== \"missing_result\")\n\t) {\n\t\treturn basePlan(report, options, \"blocked\", [], [Object.freeze({ reason: \"inconsistent_report\" })]);\n\t}\n\n\tconst missingCalls = missingTailCalls(report);\n\tif (missingCalls === null) {\n\t\treturn basePlan(report, options, \"blocked\", [], [Object.freeze({ reason: \"ambiguous_transcript\" })]);\n\t}\n\n\tconst actions: SessionRepairAction[] = [];\n\tif (report.trailingFragment) {\n\t\tactions.push(\n\t\t\tObject.freeze({\n\t\t\t\tkind: \"quarantine_trailing_fragment\",\n\t\t\t\tfragment: Object.freeze({ ...report.trailingFragment }),\n\t\t\t\tretainPrefix: Object.freeze({ ...report.completePrefix }),\n\t\t\t}),\n\t\t);\n\t}\n\tconst text = repairText(options.reason);\n\tfor (let index = 0; index < missingCalls.length; index++) {\n\t\tconst call = missingCalls[index];\n\t\tactions.push(\n\t\t\tObject.freeze({\n\t\t\t\tkind: \"append_synthetic_tool_result\",\n\t\t\t\tsequence: index,\n\t\t\t\ttoolCallId: call.id,\n\t\t\t\ttoolName: call.name,\n\t\t\t\tmessage: deepFreeze(createSyntheticToolResult(call.id, call.name, text, options.timestamp)),\n\t\t\t}),\n\t\t);\n\t}\n\n\treturn basePlan(report, options, actions.length === 0 ? \"not_needed\" : \"repairable\", actions, []);\n}\n"]}

package/dist/core/session-repair-plan.js

@@ -0,0 +1,202 @@
+import { createSyntheticToolResult, inspectTranscriptIntegrity, } from "omk-agent-core";
+export const SESSION_REPAIR_PLAN_SCHEMA_VERSION = 1;
+const REPAIRABLE_FINDINGS = new Set(["trailing_fragment", "transcript_missing_result"]);
+const TRANSCRIPT_FINDING_REASONS = new Set([
+    "transcript_missing_result",
+    "transcript_duplicate_result",
+    "transcript_orphan_result",
+    "transcript_duplicate_call_id",
+    "transcript_interleaved_non_result",
+]);
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+function isToolCall(value) {
+    return (isRecord(value) && value.type === "toolCall" && typeof value.id === "string" && typeof value.name === "string");
+}
+function deepFreeze(value) {
+    if (typeof value !== "object" || value === null || Object.isFrozen(value))
+        return value;
+    for (const child of Object.values(value))
+        deepFreeze(child);
+    return Object.freeze(value);
+}
+function repairText(reason) {
+    return reason === "resume_recovery"
+        ? "Tool result missing; synthesized during session resume recovery"
+        : "Tool result missing; synthesized by session doctor repair";
+}
+function transcriptFindingReason(kind) {
+    return `transcript_${kind}`;
+}
+function sameIdentityMultiset(left, right) {
+    if (left.length !== right.length)
+        return false;
+    const counts = new Map();
+    for (const key of left)
+        counts.set(key, (counts.get(key) ?? 0) + 1);
+    for (const key of right) {
+        const count = counts.get(key);
+        if (count === undefined)
+            return false;
+        if (count === 1)
+            counts.delete(key);
+        else
+            counts.set(key, count - 1);
+    }
+    return counts.size === 0;
+}
+function reportIsConsistent(report) {
+    if (report.ok !== (report.findings.length === 0))
+        return false;
+    const trailingFindings = report.findings.filter((finding) => finding.reason === "trailing_fragment");
+    if (trailingFindings.length !== (report.trailingFragment === null ? 0 : 1) ||
+        trailingFindings.some((finding) => Object.keys(finding).length !== 1)) {
+        return false;
+    }
+    const transcriptFindings = report.findings.filter((finding) => TRANSCRIPT_FINDING_REASONS.has(finding.reason));
+    if (!report.transcript)
+        return transcriptFindings.length === 0;
+    if (report.findings.some((finding) => finding.reason !== "trailing_fragment" && !TRANSCRIPT_FINDING_REASONS.has(finding.reason))) {
+        return false;
+    }
+    const inspected = inspectTranscriptIntegrity(report.activeMessages);
+    if (report.transcript.ok !== inspected.ok ||
+        report.transcript.ok !== (report.transcript.issues.length === 0) ||
+        !sameIdentityMultiset(report.transcript.issues.map((issue) => JSON.stringify([issue.kind, issue.toolCallId, issue.toolName ?? null])), inspected.issues.map((issue) => JSON.stringify([issue.kind, issue.toolCallId, issue.toolName ?? null])))) {
+        return false;
+    }
+    return sameIdentityMultiset(transcriptFindings.map((finding) => JSON.stringify([
+        finding.reason,
+        finding.line ?? null,
+        finding.entryId ?? null,
+        finding.parentId ?? null,
+        finding.cycleEntryIds ?? null,
+        finding.toolCallId ?? null,
+        finding.toolName ?? null,
+    ])), inspected.issues.map((issue) => JSON.stringify([
+        transcriptFindingReason(issue.kind),
+        null,
+        null,
+        null,
+        null,
+        issue.toolCallId,
+        issue.toolName ?? null,
+    ])));
+}
+function validateOptions(options) {
+    if (!isRecord(options) ||
+        typeof options.repairId !== "string" ||
+        options.repairId.length === 0 ||
+        options.repairId.length > 128 ||
+        /[\u0000-\u001f\u007f]/.test(options.repairId)) {
+        throw new TypeError("repairId must be non-empty bounded text without C0 or DEL control characters");
+    }
+    if (options.reason !== "resume_recovery" && options.reason !== "doctor_repair") {
+        throw new TypeError("reason must be resume_recovery or doctor_repair");
+    }
+    if (!Number.isSafeInteger(options.timestamp) || options.timestamp < 0) {
+        throw new TypeError("timestamp must be a non-negative epoch-millisecond safe integer");
+    }
+}
+function blockerForFinding(finding) {
+    return Object.freeze({
+        reason: "integrity_finding",
+        findingReason: finding.reason,
+        ...(finding.entryId === undefined ? {} : { entryId: finding.entryId }),
+        ...(finding.toolCallId === undefined ? {} : { toolCallId: finding.toolCallId }),
+    });
+}
+function missingTailCalls(report) {
+    if (!report.transcript || report.transcript.issues.length === 0)
+        return [];
+    if (report.transcript.issues.some((issue) => issue.kind !== "missing_result"))
+        return null;
+    let lastAssistantIndex = -1;
+    for (let index = report.activeMessages.length - 1; index >= 0; index--) {
+        if (report.activeMessages[index]?.role === "assistant") {
+            lastAssistantIndex = index;
+            break;
+        }
+    }
+    if (lastAssistantIndex === -1)
+        return null;
+    const assistant = report.activeMessages[lastAssistantIndex];
+    if (!assistant || assistant.role !== "assistant")
+        return null;
+    const tailCalls = assistant.content.filter(isToolCall);
+    const tailCallIds = new Set(tailCalls.map((call) => call.id));
+    const missingIds = new Set(report.transcript.issues.map((issue) => issue.toolCallId));
+    if ([...missingIds].some((id) => !tailCallIds.has(id)))
+        return null;
+    for (let index = lastAssistantIndex + 1; index < report.activeMessages.length; index++) {
+        const message = report.activeMessages[index];
+        if (!message || message.role !== "toolResult" || !tailCallIds.has(message.toolCallId))
+            return null;
+    }
+    return tailCalls.filter((call) => missingIds.has(call.id));
+}
+function basePlan(report, options, status, actions, blockers) {
+    return Object.freeze({
+        schemaVersion: SESSION_REPAIR_PLAN_SCHEMA_VERSION,
+        repairId: options.repairId,
+        reason: options.reason,
+        status,
+        precondition: Object.freeze({
+            source: Object.freeze({ ...report.source }),
+            completePrefix: Object.freeze({ ...report.completePrefix }),
+            activeLeafId: report.activeLeafId,
+        }),
+        actions: Object.freeze(actions),
+        blockers: Object.freeze(blockers),
+    });
+}
+/**
+ * Derive a deterministic repair plan without writing, truncating, quarantining,
+ * or mutating the inspected session. Ambiguous integrity states fail closed.
+ */
+export function createSessionRepairPlan(report, options) {
+    validateOptions(options);
+    if (!reportIsConsistent(report)) {
+        return basePlan(report, options, "blocked", [], [Object.freeze({ reason: "inconsistent_report" })]);
+    }
+    const blockers = report.findings
+        .filter((finding) => !REPAIRABLE_FINDINGS.has(finding.reason))
+        .map(blockerForFinding);
+    if (blockers.length > 0)
+        return basePlan(report, options, "blocked", [], blockers);
+    if (!report.transcript) {
+        return basePlan(report, options, "blocked", [], [Object.freeze({ reason: "inspection_incomplete" })]);
+    }
+    const missingFindings = report.findings.filter((finding) => finding.reason === "transcript_missing_result");
+    const missingIssues = report.transcript.issues.filter((issue) => issue.kind === "missing_result");
+    if (missingFindings.length !== missingIssues.length ||
+        report.transcript.issues.some((issue) => issue.kind !== "missing_result")) {
+        return basePlan(report, options, "blocked", [], [Object.freeze({ reason: "inconsistent_report" })]);
+    }
+    const missingCalls = missingTailCalls(report);
+    if (missingCalls === null) {
+        return basePlan(report, options, "blocked", [], [Object.freeze({ reason: "ambiguous_transcript" })]);
+    }
+    const actions = [];
+    if (report.trailingFragment) {
+        actions.push(Object.freeze({
+            kind: "quarantine_trailing_fragment",
+            fragment: Object.freeze({ ...report.trailingFragment }),
+            retainPrefix: Object.freeze({ ...report.completePrefix }),
+        }));
+    }
+    const text = repairText(options.reason);
+    for (let index = 0; index < missingCalls.length; index++) {
+        const call = missingCalls[index];
+        actions.push(Object.freeze({
+            kind: "append_synthetic_tool_result",
+            sequence: index,
+            toolCallId: call.id,
+            toolName: call.name,
+            message: deepFreeze(createSyntheticToolResult(call.id, call.name, text, options.timestamp)),
+        }));
+    }
+    return basePlan(report, options, actions.length === 0 ? "not_needed" : "repairable", actions, []);
+}
+//# sourceMappingURL=session-repair-plan.js.map

package/dist/core/session-repair-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-repair-plan.js","sourceRoot":"","sources":["../../src/core/session-repair-plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,yBAAyB,EACzB,0BAA0B,GAE1B,MAAM,gBAAgB,CAAC;AAUxB,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAU,CAAC;AAsD7D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAA6B,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC,CAAC;AACpH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAA6B;IACtE,2BAA2B;IAC3B,6BAA6B;IAC7B,0BAA0B;IAC1B,8BAA8B;IAC9B,mCAAmC;CACnC,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AAAA,CACnD;AAED,SAAS,UAAU,CAAC,KAAc,EAAqB;IACtD,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAC9G,CAAC;AAAA,CACF;AAED,SAAS,UAAU,CAAI,KAAQ,EAAK;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5B;AAED,SAAS,UAAU,CAAC,MAA2B,EAAU;IACxD,OAAO,MAAM,KAAK,iBAAiB;QAClC,CAAC,CAAC,iEAAiE;QACnE,CAAC,CAAC,2DAA2D,CAAC;AAAA,CAC/D;AAED,SAAS,uBAAuB,CAAC,IAAkC,EAA8B;IAChG,OAAO,cAAc,IAAI,EAAE,CAAC;AAAA,CAC5B;AAED,SAAS,oBAAoB,CAAC,IAAuB,EAAE,KAAwB,EAAW;IACzF,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,KAAK,KAAK,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;;YAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;AAAA,CACzB;AAED,SAAS,kBAAkB,CAAC,MAA8B,EAAW;IACpE,IAAI,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;IACrG,IACC,gBAAgB,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EACpE,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/G,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAC;IAC/D,IACC,MAAM,CAAC,QAAQ,CAAC,IAAI,CACnB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,mBAAmB,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CACtG,EACA,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,0BAA0B,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACpE,IACC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE;QACrC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;QAChE,CAAC,oBAAoB,CACpB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACtC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CACtE,EACD,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,CACvG,EACA,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO,oBAAoB,CAC1B,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAClC,IAAI,CAAC,SAAS,CAAC;QACd,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,IAAI,IAAI,IAAI;QACpB,OAAO,CAAC,OAAO,IAAI,IAAI;QACvB,OAAO,CAAC,QAAQ,IAAI,IAAI;QACxB,OAAO,CAAC,aAAa,IAAI,IAAI;QAC7B,OAAO,CAAC,UAAU,IAAI,IAAI;QAC1B,OAAO,CAAC,QAAQ,IAAI,IAAI;KACxB,CAAC,CACF,EACD,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,IAAI,CAAC,SAAS,CAAC;QACd,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC;QACnC,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,QAAQ,IAAI,IAAI;KACtB,CAAC,CACF,CACD,CAAC;AAAA,CACF;AAED,SAAS,eAAe,CAAC,OAAuC,EAAQ;IACvE,IACC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAClB,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG;QAC7B,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAC7C,CAAC;QACF,MAAM,IAAI,SAAS,CAAC,8EAA8E,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAChF,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;IACxF,CAAC;AAAA,CACD;AAED,SAAS,iBAAiB,CAAC,OAAgC,EAAwB;IAClF,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,mBAAmB;QAC3B,aAAa,EAAE,OAAO,CAAC,MAAM;QAC7B,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;KAC/E,CAAC,CAAC;AAAA,CACH;AAED,SAAS,gBAAgB,CAAC,MAA8B,EAAqB;IAC5E,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3F,IAAI,kBAAkB,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACxE,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;YACxD,kBAAkB,GAAG,KAAK,CAAC;YAC3B,MAAM;QACP,CAAC;IACF,CAAC;IACD,IAAI,kBAAkB,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAC5D,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpE,KAAK,IAAI,KAAK,GAAG,kBAAkB,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACxF,MAAM,OAAO,GAA6B,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;IACpG,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAAA,CAC3D;AAED,SAAS,QAAQ,CAChB,MAA8B,EAC9B,OAAuC,EACvC,MAA+B,EAC/B,OAAuC,EACvC,QAAyC,EACrB;IACpB,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,kCAAkC;QACjD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM;QACN,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3C,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3D,YAAY,EAAE,MAAM,CAAC,YAAY;SACjC,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KACjC,CAAC,CAAC;AAAA,CACH;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACtC,MAA8B,EAC9B,OAAuC,EACnB;IACpB,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ;SAC9B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SAC7D,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IACnF,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,CAAC;IACvG,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,2BAA2B,CAAC,CAAC;IAC5G,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IAClG,IACC,eAAe,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;QAC/C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,EACxE,CAAC;QACF,OAAO,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;YACb,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACvD,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;SACzD,CAAC,CACF,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;YACb,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,OAAO,EAAE,UAAU,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;SAC3F,CAAC,CACF,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAAA,CAClG","sourcesContent":["import {\n\ttype AgentMessage,\n\tcreateSyntheticToolResult,\n\tinspectTranscriptIntegrity,\n\ttype TranscriptIntegrityIssueKind,\n} from \"omk-agent-core\";\nimport type { ToolCall, ToolResultMessage } from \"omk-ai\";\nimport type {\n\tSessionByteDigest,\n\tSessionCompletePrefix,\n\tSessionIntegrityFinding,\n\tSessionIntegrityReasonCode,\n\tSessionIntegrityReport,\n} from \"./session-integrity.ts\";\n\nexport const SESSION_REPAIR_PLAN_SCHEMA_VERSION = 1 as const;\n\nexport type SessionRepairReason = \"resume_recovery\" | \"doctor_repair\";\nexport type SessionRepairPlanStatus = \"not_needed\" | \"repairable\" | \"blocked\";\nexport type SessionRepairBlockerReason =\n\t| \"integrity_finding\"\n\t| \"inspection_incomplete\"\n\t| \"ambiguous_transcript\"\n\t| \"inconsistent_report\";\n\nexport interface CreateSessionRepairPlanOptions {\n\treadonly repairId: string;\n\treadonly reason: SessionRepairReason;\n\t/** Deterministic caller-provided epoch milliseconds for synthetic messages. */\n\treadonly timestamp: number;\n}\n\nexport interface SessionRepairPrecondition {\n\treadonly source: SessionByteDigest;\n\treadonly completePrefix: SessionCompletePrefix;\n\treadonly activeLeafId: string | null;\n}\n\nexport interface SessionRepairBlocker {\n\treadonly reason: SessionRepairBlockerReason;\n\treadonly findingReason?: SessionIntegrityReasonCode;\n\treadonly entryId?: string;\n\treadonly toolCallId?: string;\n}\n\nexport type SessionRepairAction =\n\t| {\n\t\t\treadonly kind: \"quarantine_trailing_fragment\";\n\t\t\treadonly fragment: SessionByteDigest;\n\t\t\treadonly retainPrefix: SessionCompletePrefix;\n\t  }\n\t| {\n\t\t\treadonly kind: \"append_synthetic_tool_result\";\n\t\t\treadonly sequence: number;\n\t\t\treadonly toolCallId: string;\n\t\t\treadonly toolName: string;\n\t\t\treadonly message: Readonly<ToolResultMessage>;\n\t  };\n\nexport interface SessionRepairPlan {\n\treadonly schemaVersion: typeof SESSION_REPAIR_PLAN_SCHEMA_VERSION;\n\treadonly repairId: string;\n\treadonly reason: SessionRepairReason;\n\treadonly status: SessionRepairPlanStatus;\n\treadonly precondition: SessionRepairPrecondition;\n\treadonly actions: readonly SessionRepairAction[];\n\treadonly blockers: readonly SessionRepairBlocker[];\n}\n\nconst REPAIRABLE_FINDINGS = new Set<SessionIntegrityReasonCode>([\"trailing_fragment\", \"transcript_missing_result\"]);\nconst TRANSCRIPT_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"transcript_missing_result\",\n\t\"transcript_duplicate_result\",\n\t\"transcript_orphan_result\",\n\t\"transcript_duplicate_call_id\",\n\t\"transcript_interleaved_non_result\",\n]);\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\nfunction isToolCall(value: unknown): value is ToolCall {\n\treturn (\n\t\tisRecord(value) && value.type === \"toolCall\" && typeof value.id === \"string\" && typeof value.name === \"string\"\n\t);\n}\n\nfunction deepFreeze<T>(value: T): T {\n\tif (typeof value !== \"object\" || value === null || Object.isFrozen(value)) return value;\n\tfor (const child of Object.values(value)) deepFreeze(child);\n\treturn Object.freeze(value);\n}\n\nfunction repairText(reason: SessionRepairReason): string {\n\treturn reason === \"resume_recovery\"\n\t\t? \"Tool result missing; synthesized during session resume recovery\"\n\t\t: \"Tool result missing; synthesized by session doctor repair\";\n}\n\nfunction transcriptFindingReason(kind: TranscriptIntegrityIssueKind): SessionIntegrityReasonCode {\n\treturn `transcript_${kind}`;\n}\n\nfunction sameIdentityMultiset(left: readonly string[], right: readonly string[]): boolean {\n\tif (left.length !== right.length) return false;\n\tconst counts = new Map<string, number>();\n\tfor (const key of left) counts.set(key, (counts.get(key) ?? 0) + 1);\n\tfor (const key of right) {\n\t\tconst count = counts.get(key);\n\t\tif (count === undefined) return false;\n\t\tif (count === 1) counts.delete(key);\n\t\telse counts.set(key, count - 1);\n\t}\n\treturn counts.size === 0;\n}\n\nfunction reportIsConsistent(report: SessionIntegrityReport): boolean {\n\tif (report.ok !== (report.findings.length === 0)) return false;\n\tconst trailingFindings = report.findings.filter((finding) => finding.reason === \"trailing_fragment\");\n\tif (\n\t\ttrailingFindings.length !== (report.trailingFragment === null ? 0 : 1) ||\n\t\ttrailingFindings.some((finding) => Object.keys(finding).length !== 1)\n\t) {\n\t\treturn false;\n\t}\n\n\tconst transcriptFindings = report.findings.filter((finding) => TRANSCRIPT_FINDING_REASONS.has(finding.reason));\n\tif (!report.transcript) return transcriptFindings.length === 0;\n\tif (\n\t\treport.findings.some(\n\t\t\t(finding) => finding.reason !== \"trailing_fragment\" && !TRANSCRIPT_FINDING_REASONS.has(finding.reason),\n\t\t)\n\t) {\n\t\treturn false;\n\t}\n\n\tconst inspected = inspectTranscriptIntegrity(report.activeMessages);\n\tif (\n\t\treport.transcript.ok !== inspected.ok ||\n\t\treport.transcript.ok !== (report.transcript.issues.length === 0) ||\n\t\t!sameIdentityMultiset(\n\t\t\treport.transcript.issues.map((issue) =>\n\t\t\t\tJSON.stringify([issue.kind, issue.toolCallId, issue.toolName ?? null]),\n\t\t\t),\n\t\t\tinspected.issues.map((issue) => JSON.stringify([issue.kind, issue.toolCallId, issue.toolName ?? null])),\n\t\t)\n\t) {\n\t\treturn false;\n\t}\n\n\treturn sameIdentityMultiset(\n\t\ttranscriptFindings.map((finding) =>\n\t\t\tJSON.stringify([\n\t\t\t\tfinding.reason,\n\t\t\t\tfinding.line ?? null,\n\t\t\t\tfinding.entryId ?? null,\n\t\t\t\tfinding.parentId ?? null,\n\t\t\t\tfinding.cycleEntryIds ?? null,\n\t\t\t\tfinding.toolCallId ?? null,\n\t\t\t\tfinding.toolName ?? null,\n\t\t\t]),\n\t\t),\n\t\tinspected.issues.map((issue) =>\n\t\t\tJSON.stringify([\n\t\t\t\ttranscriptFindingReason(issue.kind),\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tissue.toolCallId,\n\t\t\t\tissue.toolName ?? null,\n\t\t\t]),\n\t\t),\n\t);\n}\n\nfunction validateOptions(options: CreateSessionRepairPlanOptions): void {\n\tif (\n\t\t!isRecord(options) ||\n\t\ttypeof options.repairId !== \"string\" ||\n\t\toptions.repairId.length === 0 ||\n\t\toptions.repairId.length > 128 ||\n\t\t/[\\u0000-\\u001f\\u007f]/.test(options.repairId)\n\t) {\n\t\tthrow new TypeError(\"repairId must be non-empty bounded text without C0 or DEL control characters\");\n\t}\n\tif (options.reason !== \"resume_recovery\" && options.reason !== \"doctor_repair\") {\n\t\tthrow new TypeError(\"reason must be resume_recovery or doctor_repair\");\n\t}\n\tif (!Number.isSafeInteger(options.timestamp) || options.timestamp < 0) {\n\t\tthrow new TypeError(\"timestamp must be a non-negative epoch-millisecond safe integer\");\n\t}\n}\n\nfunction blockerForFinding(finding: SessionIntegrityFinding): SessionRepairBlocker {\n\treturn Object.freeze({\n\t\treason: \"integrity_finding\",\n\t\tfindingReason: finding.reason,\n\t\t...(finding.entryId === undefined ? {} : { entryId: finding.entryId }),\n\t\t...(finding.toolCallId === undefined ? {} : { toolCallId: finding.toolCallId }),\n\t});\n}\n\nfunction missingTailCalls(report: SessionIntegrityReport): ToolCall[] | null {\n\tif (!report.transcript || report.transcript.issues.length === 0) return [];\n\tif (report.transcript.issues.some((issue) => issue.kind !== \"missing_result\")) return null;\n\n\tlet lastAssistantIndex = -1;\n\tfor (let index = report.activeMessages.length - 1; index >= 0; index--) {\n\t\tif (report.activeMessages[index]?.role === \"assistant\") {\n\t\t\tlastAssistantIndex = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (lastAssistantIndex === -1) return null;\n\tconst assistant = report.activeMessages[lastAssistantIndex];\n\tif (!assistant || assistant.role !== \"assistant\") return null;\n\tconst tailCalls = assistant.content.filter(isToolCall);\n\tconst tailCallIds = new Set(tailCalls.map((call) => call.id));\n\tconst missingIds = new Set(report.transcript.issues.map((issue) => issue.toolCallId));\n\tif ([...missingIds].some((id) => !tailCallIds.has(id))) return null;\n\n\tfor (let index = lastAssistantIndex + 1; index < report.activeMessages.length; index++) {\n\t\tconst message: AgentMessage | undefined = report.activeMessages[index];\n\t\tif (!message || message.role !== \"toolResult\" || !tailCallIds.has(message.toolCallId)) return null;\n\t}\n\treturn tailCalls.filter((call) => missingIds.has(call.id));\n}\n\nfunction basePlan(\n\treport: SessionIntegrityReport,\n\toptions: CreateSessionRepairPlanOptions,\n\tstatus: SessionRepairPlanStatus,\n\tactions: readonly SessionRepairAction[],\n\tblockers: readonly SessionRepairBlocker[],\n): SessionRepairPlan {\n\treturn Object.freeze({\n\t\tschemaVersion: SESSION_REPAIR_PLAN_SCHEMA_VERSION,\n\t\trepairId: options.repairId,\n\t\treason: options.reason,\n\t\tstatus,\n\t\tprecondition: Object.freeze({\n\t\t\tsource: Object.freeze({ ...report.source }),\n\t\t\tcompletePrefix: Object.freeze({ ...report.completePrefix }),\n\t\t\tactiveLeafId: report.activeLeafId,\n\t\t}),\n\t\tactions: Object.freeze(actions),\n\t\tblockers: Object.freeze(blockers),\n\t});\n}\n\n/**\n * Derive a deterministic repair plan without writing, truncating, quarantining,\n * or mutating the inspected session. Ambiguous integrity states fail closed.\n */\nexport function createSessionRepairPlan(\n\treport: SessionIntegrityReport,\n\toptions: CreateSessionRepairPlanOptions,\n): SessionRepairPlan {\n\tvalidateOptions(options);\n\tif (!reportIsConsistent(report)) {\n\t\treturn basePlan(report, options, \"blocked\", [], [Object.freeze({ reason: \"inconsistent_report\" })]);\n\t}\n\tconst blockers = report.findings\n\t\t.filter((finding) => !REPAIRABLE_FINDINGS.has(finding.reason))\n\t\t.map(blockerForFinding);\n\tif (blockers.length > 0) return basePlan(report, options, \"blocked\", [], blockers);\n\tif (!report.transcript) {\n\t\treturn basePlan(report, options, \"blocked\", [], [Object.freeze({ reason: \"inspection_incomplete\" })]);\n\t}\n\n\tconst missingFindings = report.findings.filter((finding) => finding.reason === \"transcript_missing_result\");\n\tconst missingIssues = report.transcript.issues.filter((issue) => issue.kind === \"missing_result\");\n\tif (\n\t\tmissingFindings.length !== missingIssues.length ||\n\t\treport.transcript.issues.some((issue) => issue.kind !== \"missing_result\")\n\t) {\n\t\treturn basePlan(report, options, \"blocked\", [], [Object.freeze({ reason: \"inconsistent_report\" })]);\n\t}\n\n\tconst missingCalls = missingTailCalls(report);\n\tif (missingCalls === null) {\n\t\treturn basePlan(report, options, \"blocked\", [], [Object.freeze({ reason: \"ambiguous_transcript\" })]);\n\t}\n\n\tconst actions: SessionRepairAction[] = [];\n\tif (report.trailingFragment) {\n\t\tactions.push(\n\t\t\tObject.freeze({\n\t\t\t\tkind: \"quarantine_trailing_fragment\",\n\t\t\t\tfragment: Object.freeze({ ...report.trailingFragment }),\n\t\t\t\tretainPrefix: Object.freeze({ ...report.completePrefix }),\n\t\t\t}),\n\t\t);\n\t}\n\tconst text = repairText(options.reason);\n\tfor (let index = 0; index < missingCalls.length; index++) {\n\t\tconst call = missingCalls[index];\n\t\tactions.push(\n\t\t\tObject.freeze({\n\t\t\t\tkind: \"append_synthetic_tool_result\",\n\t\t\t\tsequence: index,\n\t\t\t\ttoolCallId: call.id,\n\t\t\t\ttoolName: call.name,\n\t\t\t\tmessage: deepFreeze(createSyntheticToolResult(call.id, call.name, text, options.timestamp)),\n\t\t\t}),\n\t\t);\n\t}\n\n\treturn basePlan(report, options, actions.length === 0 ? \"not_needed\" : \"repairable\", actions, []);\n}\n"]}

package/dist/core/session-termination.d.ts

@@ -0,0 +1,106 @@
+export declare const SESSION_TERMINATION_SCHEMA_VERSION: 1;
+export declare const MAX_SESSION_TERMINATION_MESSAGE_LENGTH = 512;
+/**
+ * Canonical list of termination kinds. The run-journal validator derives its
+ * runtime bounds from this tuple so a newly added kind can never crash
+ * journaling with "termination kind is out of bounds" again.
+ */
+export declare const SESSION_TERMINATION_KIND_VALUES: readonly ["completed", "user_abort", "provider_abort", "provider_auth", "provider_rate_limit", "provider_network", "provider_protocol", "provider_refusal", "context_overflow", "transcript_invalid", "tool_timeout", "tool_fatal", "compaction", "persistence", "process_signal", "process_crash", "configuration", "internal_error"];
+export type SessionTerminationKind = (typeof SESSION_TERMINATION_KIND_VALUES)[number];
+export type SessionTerminationPhase = "completed" | "control" | "preflight" | "provider" | "tool" | "compaction" | "persistence" | "process" | "resume";
+export type SessionTerminationSource = "observed" | "inferred_on_resume";
+export type SessionSideEffects = "none" | "possible" | "confirmed";
+export type SessionProcessSignal = "SIGINT" | "SIGTERM" | "SIGHUP" | "SIGQUIT";
+export type ProviderTerminationCauseCode = "abort" | "auth" | "rate_limit" | "network" | "protocol" | "refusal" | "context_overflow";
+export type ToolTerminationCauseCode = "timeout" | "fatal";
+export type CompactionTerminationCauseCode = "aborted" | "failed" | "stale";
+export type PersistenceTerminationCauseCode = "read_failed" | "append_failed" | "replace_failed" | "fsync_failed" | "lock_failed";
+export type TranscriptTerminationCauseCode = "missing_result" | "duplicate_result" | "orphan_result" | "duplicate_call_id" | "interleaved_non_result" | "invalid_jsonl" | "invalid_tree" | "unsupported_version" | "trailing_fragment";
+export type SessionTerminationCauseCode = "session.completed" | "session.user_abort" | `provider.${ProviderTerminationCauseCode}` | `tool.${ToolTerminationCauseCode}` | `compaction.${CompactionTerminationCauseCode}` | `persistence.${PersistenceTerminationCauseCode}` | "process.signal" | "process.crash" | `transcript.${TranscriptTerminationCauseCode}` | "configuration.invalid" | "internal.unclassified";
+export type SessionTerminationCause = {
+    readonly area: "completed";
+} | {
+    readonly area: "user";
+    readonly code: "abort";
+} | {
+    readonly area: "provider";
+    readonly code: ProviderTerminationCauseCode;
+} | {
+    readonly area: "tool";
+    readonly code: ToolTerminationCauseCode;
+} | {
+    readonly area: "compaction";
+    readonly code: CompactionTerminationCauseCode;
+} | {
+    readonly area: "persistence";
+    readonly code: PersistenceTerminationCauseCode;
+} | {
+    readonly area: "process";
+    readonly code: "signal";
+    readonly signal: SessionProcessSignal;
+} | {
+    readonly area: "process";
+    readonly code: "crash";
+} | {
+    readonly area: "transcript";
+    readonly code: TranscriptTerminationCauseCode;
+} | {
+    readonly area: "configuration";
+    readonly code: "invalid";
+} | {
+    readonly area: "internal";
+    readonly code: "unclassified";
+};
+export interface ClassifySessionTerminationInput {
+    readonly sessionId: string;
+    readonly runId: string;
+    /** Deterministic caller-provided ISO-8601 timestamp. */
+    readonly timestamp: string;
+    readonly source: SessionTerminationSource;
+    /** Caller-supplied, pre-redacted diagnostic text. */
+    readonly message: string;
+    readonly cause: SessionTerminationCause;
+    readonly sideEffects: SessionSideEffects;
+    readonly retryAfterMs?: number;
+    readonly provider?: string;
+    readonly model?: string;
+    readonly toolCallId?: string;
+    readonly toolName?: string;
+}
+export interface SessionTermination {
+    readonly schemaVersion: typeof SESSION_TERMINATION_SCHEMA_VERSION;
+    readonly sessionId: string;
+    readonly runId: string;
+    readonly kind: SessionTerminationKind;
+    readonly phase: SessionTerminationPhase;
+    readonly source: SessionTerminationSource;
+    readonly message: string;
+    readonly causeCode: SessionTerminationCauseCode;
+    /** Stable operator guidance suitable for print, JSON, RPC, and TUI surfaces. */
+    readonly nextAction: string;
+    readonly retryable: boolean;
+    readonly safeToAutoRetry: boolean;
+    readonly sideEffects: SessionSideEffects;
+    readonly timestamp: string;
+    readonly retryAfterMs?: number;
+    readonly provider?: string;
+    readonly model?: string;
+    readonly toolCallId?: string;
+    readonly toolName?: string;
+    readonly processSignal?: SessionProcessSignal;
+    readonly transcriptIssue?: TranscriptTerminationCauseCode;
+}
+export declare class SessionTerminationError extends Error {
+    readonly termination: SessionTermination;
+    constructor(message: string, termination: SessionTermination);
+}
+/** Validate text at the termination trust boundary without attempting redaction. */
+export declare function assertPreRedactedTerminationMessage(message: string): void;
+/** Concise actionable rendering shared by non-JSON and TUI surfaces. */
+export declare function formatSessionTermination(termination: SessionTermination): string;
+/**
+ * Classify a bounded, structured termination cause. This intentionally accepts
+ * no raw Error value, stack, provider body, or arbitrary cause code.
+ */
+export declare function classifySessionTermination(input: ClassifySessionTerminationInput): SessionTermination;
+//# sourceMappingURL=session-termination.d.ts.map