pi-daddy 0.43.0 → 0.44.0

package/dist/executors/child-final.d.ts

@@ -0,0 +1,31 @@
+import { BoundedReadCleanupError, readBoundedBytes } from "../kernel/bounded-read.ts";
+export type ChildFinal = {
+    state: "complete";
+    text: string;
+    sessionId: string;
+    messageId: string;
+    leafId: string;
+    sha256: string;
+} | {
+    state: "unavailable";
+    reason: string;
+    diagnosticText?: string;
+};
+export declare class ChildFinalCapture {
+    private decoder;
+    private buffer;
+    private problem?;
+    private sessionId?;
+    private settled;
+    private active;
+    private final?;
+    private user?;
+    private readonly onText?;
+    private readonly onReadCleanup?;
+    constructor(onText?: (text: string) => void, onReadCleanup?: (error: BoundedReadCleanupError) => void);
+    observe(bytes: Buffer): void;
+    private event;
+    private visible;
+    finish(sessionPath: string, expectedSessionId?: string, readSession?: typeof readBoundedBytes): Promise<ChildFinal>;
+}
+//# sourceMappingURL=child-final.d.ts.map

package/dist/executors/child-final.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-final.d.ts","sourceRoot":"","sources":["../../src/executors/child-final.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAMtF,MAAM,MAAM,UAAU,GAClB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzG;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AACtE,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAA6C;IAC5D,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,KAAK,CAAC,CAAsB;IACpC,OAAO,CAAC,IAAI,CAAC,CAAsB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAA2C;gBAC9D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI;IAIrG,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAgB5B,OAAO,CAAC,KAAK;IAmDb,OAAO,CAAC,OAAO;IAOT,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,WAAW,0BAAmB,GAAG,OAAO,CAAC,UAAU,CAAC;CAqFnH"}

package/dist/executors/child-final.js

@@ -0,0 +1,197 @@
+/** Pi 1.0.4 current final: JSON settlement plus the exact persisted session active branch. */
+import { createHash } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
+import { join } from "node:path";
+import { readdir } from "node:fs/promises";
+import { SessionManager } from "@earendil-works/pi-coding-agent";
+import { BoundedReadCleanupError, readBoundedBytes } from "../kernel/bounded-read.js";
+const MAX_FINAL_BYTES = 4 * 1024 * 1024, MAX_LINE_BYTES = 32 * 1024 * 1024, MAX_SESSION_BYTES = 64 * 1024 * 1024;
+const object = (x) => !!x && typeof x === "object" && !Array.isArray(x);
+const hash = (s) => createHash("sha256").update(s, "utf8").digest("hex");
+export class ChildFinalCapture {
+    decoder = new TextDecoder("utf-8", { fatal: true });
+    buffer = "";
+    problem;
+    sessionId;
+    settled = false;
+    active = new Set();
+    final;
+    user;
+    onText;
+    onReadCleanup;
+    constructor(onText, onReadCleanup) {
+        this.onText = onText;
+        this.onReadCleanup = onReadCleanup;
+    }
+    observe(bytes) {
+        if (this.problem)
+            return;
+        try {
+            this.buffer += this.decoder.decode(bytes, { stream: true });
+            let end;
+            while ((end = this.buffer.indexOf("\n")) >= 0) {
+                const line = this.buffer.slice(0, end);
+                this.buffer = this.buffer.slice(end + 1);
+                if (Buffer.byteLength(line) > MAX_LINE_BYTES)
+                    throw Error("protocol line exceeds capture bound");
+                if (line.trim())
+                    this.event(JSON.parse(line));
+            }
+            if (Buffer.byteLength(this.buffer) > MAX_LINE_BYTES)
+                throw Error("protocol line exceeds capture bound");
+        }
+        catch (error) {
+            this.problem = String(error);
+        }
+    }
+    event(event) {
+        if (!object(event) || typeof event.type !== "string")
+            throw Error("malformed protocol event");
+        if (event.type === "session") {
+            if (this.sessionId || typeof event.id !== "string" || event.version !== 3)
+                throw Error("ambiguous session header");
+            this.sessionId = event.id;
+            return;
+        }
+        if (!this.sessionId)
+            throw Error("protocol event precedes session identity");
+        if (event.type === "message_update" &&
+            event.assistantMessageEvent?.type === "text_delta" &&
+            typeof event.assistantMessageEvent.delta === "string") {
+            try {
+                this.onText?.(event.assistantMessageEvent.delta);
+            }
+            catch {
+                /* display is observational */
+            }
+        }
+        if (["agent_start", "turn_start", "message_start", "message_update"].includes(event.type)) {
+            this.settled = false;
+            this.final = undefined;
+        }
+        if (event.type === "tool_execution_start") {
+            this.settled = false;
+            this.final = undefined;
+            if (typeof event.toolCallId !== "string" || this.active.has(event.toolCallId))
+                throw Error("ambiguous tool start");
+            this.active.add(event.toolCallId);
+        }
+        if (event.type === "tool_execution_end") {
+            this.settled = false;
+            if (!this.active.delete(event.toolCallId))
+                throw Error("unmatched tool completion");
+        }
+        if (event.type === "message_end") {
+            if (!object(event.message))
+                throw Error("malformed message end");
+            this.settled = false;
+            this.final = undefined;
+            if (event.message.role === "user") {
+                this.user = event.message;
+                this.final = undefined;
+                this.settled = false;
+            }
+            if (event.message.role === "assistant") {
+                this.final = event.message;
+                this.settled = false;
+            }
+        }
+        if (event.type === "agent_settled")
+            this.settled = true;
+    }
+    visible() {
+        if (!Array.isArray(this.final?.content))
+            return "";
+        return this.final.content
+            .filter((b) => object(b) && b.type === "text" && typeof b.text === "string")
+            .map((b) => b.text)
+            .join("");
+    }
+    async finish(sessionPath, expectedSessionId, readSession = readBoundedBytes) {
+        const unavailable = (reason) => ({
+            state: "unavailable",
+            reason,
+            ...(this.visible() ? { diagnosticText: this.visible().slice(0, 8192) } : {}),
+        });
+        try {
+            this.buffer += this.decoder.decode();
+            if (this.buffer.trim())
+                throw Error("unterminated protocol record");
+            if (this.problem)
+                throw Error(this.problem);
+            if (!this.sessionId || (expectedSessionId && this.sessionId !== expectedSessionId))
+                throw Error("session identity mismatch");
+            if (!this.settled || this.active.size)
+                throw Error("current run is not settled");
+            const final = this.final;
+            if (!final ||
+                !this.user ||
+                final.stopReason !== "stop" ||
+                !Array.isArray(final.content) ||
+                final.content.some((b) => !object(b) || !["text", "thinking"].includes(b.type)) ||
+                final.content.some((b) => b.type === "text" && typeof b.text !== "string"))
+                throw Error("no eligible current terminal assistant message");
+            const text = this.visible();
+            if (!text || Buffer.byteLength(text) > MAX_FINAL_BYTES)
+                throw Error("complete final is empty or exceeds capture bound");
+            let path = sessionPath;
+            if (expectedSessionId) {
+                const names = (await readdir(sessionPath)).filter((n) => n.endsWith(`_${expectedSessionId}.jsonl`));
+                if (names.length !== 1)
+                    throw Error("exact fork session is missing or ambiguous");
+                path = join(sessionPath, names[0]);
+            }
+            const read = await readSession(path, { maxBytes: MAX_SESSION_BYTES, timeoutMs: 3000 });
+            if (!read.ok)
+                throw Error(`session read unavailable: ${read.detail}`);
+            const source = new TextDecoder("utf-8", { fatal: true }).decode(read.bytes);
+            if (!source.endsWith("\n"))
+                throw Error("incomplete session record");
+            const entries = source
+                .split("\n")
+                .filter(Boolean)
+                .map((l) => JSON.parse(l));
+            const header = entries[0];
+            if (!object(header) || header.type !== "session" || header.version !== 3 || header.id !== this.sessionId)
+                throw Error("persisted session identity mismatch");
+            const seen = new Set();
+            for (const entry of entries.slice(1)) {
+                if (!object(entry) ||
+                    entry.type === "session" ||
+                    typeof entry.id !== "string" ||
+                    seen.has(entry.id) ||
+                    (entry.parentId !== null && !seen.has(entry.parentId)))
+                    throw Error("ambiguous session tree");
+                seen.add(entry.id);
+            }
+            // Public SDK derives the active branch from the already bounded, validated in-memory bytes.
+            const manager = SessionManager.inMemory(header.cwd, undefined, entries);
+            const branch = manager.getBranch();
+            const messages = branch.filter((e) => e.type === "message");
+            const last = messages.at(-1), currentUser = messages.findLast((e) => e.message.role === "user");
+            if (!last ||
+                last.message.role !== "assistant" ||
+                !isDeepStrictEqual(last.message, final) ||
+                !currentUser ||
+                !isDeepStrictEqual(currentUser.message, this.user))
+                throw Error("stream final does not match the current persisted branch and turn");
+            return {
+                state: "complete",
+                text,
+                sessionId: this.sessionId,
+                messageId: last.id,
+                leafId: manager.getLeafId(),
+                sha256: hash(text),
+            };
+        }
+        catch (error) {
+            if (error instanceof BoundedReadCleanupError) {
+                if (!this.onReadCleanup)
+                    throw error;
+                this.onReadCleanup(error);
+            }
+            return unavailable(String(error));
+        }
+    }
+}
+//# sourceMappingURL=child-final.js.map

package/dist/executors/child-final.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-final.js","sourceRoot":"","sources":["../../src/executors/child-final.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAkB,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACtF,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EACrC,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EACjC,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,MAAM,GAAG,CAAC,CAAU,EAA4B,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3G,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAIjF,MAAM,OAAO,iBAAiB;IACpB,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,GAAG,EAAE,CAAC;IACZ,OAAO,CAAU;IACjB,SAAS,CAAU;IACnB,OAAO,GAAG,KAAK,CAAC;IAChB,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3B,KAAK,CAAuB;IAC5B,IAAI,CAAuB;IAClB,MAAM,CAA0B;IAChC,aAAa,CAA4C;IAC1E,YAAY,MAA+B,EAAE,aAAwD;QACnG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,KAAa;QACnB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,IAAI,GAAW,CAAC;YAChB,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACvC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;gBACzC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc;oBAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBACjG,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,cAAc;gBAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC1G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACO,KAAK,CAAC,KAAc;QAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9F,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,SAAS,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;gBACvE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC1C,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7E,IACE,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAC/B,KAAK,CAAC,qBAAqB,EAAE,IAAI,KAAK,YAAY;YAClD,OAAO,KAAK,CAAC,qBAAqB,CAAC,KAAK,KAAK,QAAQ,EACrD,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1F,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YACvB,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC3E,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;gBAAE,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;gBAAE,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACjE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YACvB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAClC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;gBACvB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACvB,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC3B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACvB,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IAC1D,CAAC;IACO,OAAO;QACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO;aACtB,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;aACpF,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,iBAA0B,EAAE,WAAW,GAAG,gBAAgB;QAC1F,MAAM,WAAW,GAAG,CAAC,MAAc,EAAc,EAAE,CAAC,CAAC;YACnD,KAAK,EAAE,aAAa;YACpB,MAAM;YACN,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACpE,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB,CAAC;gBAChF,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACjF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,IACE,CAAC,KAAK;gBACN,CAAC,IAAI,CAAC,IAAI;gBACV,KAAK,CAAC,UAAU,KAAK,MAAM;gBAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC7B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACxF,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAE/E,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe;gBACpD,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAClE,IAAI,IAAI,GAAG,WAAW,CAAC;YACvB,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,iBAAiB,QAAQ,CAAC,CAAC,CAAC;gBACpG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAClF,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvF,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,MAAM,KAAK,CAAC,6BAA6B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM;iBACnB,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS;gBACtG,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,KAAK,CAAC,IAAI,KAAK,SAAS;oBACxB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;oBAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClB,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAEtD,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBACxC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;YACD,4FAA4F;YAC5F,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,OAAsB,CAAC,CAAC;YACvF,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAC1B,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;YACpE,IACE,CAAC,IAAI;gBACL,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;gBACjC,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;gBACvC,CAAC,WAAW;gBACZ,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;gBAElD,MAAM,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACnF,OAAO;gBACL,KAAK,EAAE,UAAU;gBACjB,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,EAAE;gBAClB,MAAM,EAAE,OAAO,CAAC,SAAS,EAAG;gBAC5B,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;aACnB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,aAAa;oBAAE,MAAM,KAAK,CAAC;gBACrC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;CACF"}

package/dist/executors/executor.d.ts

@@ -24,7 +24,7 @@ export interface ExecutorChoice {
     /** Whether a probe was needed at all — false only for `0`. */
     probed: boolean;
     /**
-     * Set ONLY when herdr was demanded and is unreachable. Every delegation must refuse with this.
+     * Unavailable or unqualified execution. Every delegation must refuse with this.
      *
      * Note that `kind` stays `"herdr"` in that case, deliberately: nothing downstream may mistake a refusing
      * session for a working process-executor one.
@@ -35,5 +35,6 @@ export interface ExecutorChoice {
 }
 /** `0` is the one value that needs no probe: the operator ruled herdr out, so asking is pure cost. */
 export declare function needsProbe(raw: string | undefined): boolean;
+export declare const HERDR_UNQUALIFIED_REASON: string;
 export declare function chooseExecutor(raw: string | undefined, probe: HerdrProbe | null): ExecutorChoice;
 //# sourceMappingURL=executor.d.ts.map

package/dist/executors/executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/executors/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,YAAY,CAAC;IACnB,sEAAsE;IACtE,MAAM,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,sGAAsG;AACtG,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE3D;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,cAAc,CA6EhG"}
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/executors/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,YAAY,CAAC;IACnB,sEAAsE;IACtE,MAAM,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,sGAAsG;AACtG,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE3D;AAED,eAAO,MAAM,wBAAwB,QAE+E,CAAC;AAErH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,cAAc,CAQhG"}

package/dist/executors/executor.js

@@ -20,7 +20,19 @@ export { ENV_HERDR } from "../kernel/env-names.js";
 export function needsProbe(raw) {
     return raw === undefined || raw === "1";
 }
+export const HERDR_UNQUALIFIED_REASON = "Herdr governed execution is not qualified for complete current finals and subtree cleanup in this release. " +
+    "Delegation is refused; set PI_DADDY_HERDR=0 explicitly to select captured execution. No backend fallback occurs.";
 export function chooseExecutor(raw, probe) {
+    const choice = selectExecutor(raw, probe);
+    if (choice.kind !== "herdr")
+        return choice;
+    return {
+        ...choice,
+        refusal: [choice.refusal, HERDR_UNQUALIFIED_REASON].filter(Boolean).join(" "),
+        disclosure: `${choice.disclosure} — unqualified; governed delegation will refuse`,
+    };
+}
+function selectExecutor(raw, probe) {
     if (raw === "0") {
         return {
             kind: "process",

package/dist/executors/executor.js.map

@@ -1 +1 @@
-{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/executors/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,cAAc,EAAqB,MAAM,6BAA6B,CAAC;AAEhF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAmBnD,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,GAAuB;IAChD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAuB,EAAE,KAAwB;IAC9E,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,oEAAoE;SACjF,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC;YACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,gCAAgC,EAAE,CAAC;QACrG,CAAC;QACD,yGAAyG;QACzG,yGAAyG;QACzG,yGAAyG;QACzG,uEAAuE;QACvE,MAAM,GAAG,GAAG,KAAK,EAAE,KAAK,IAAI,iCAAiC,CAAC;QAC9D,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,OAAO,EACL,2EAA2E,GAAG,KAAK;gBACnF,kGAAkG;gBAClG,0FAA0F;gBAC1F,2FAA2F;YAC7F,UAAU,EAAE,yCAAyC,GAAG,kCAAkC;SAC3F,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,qGAAqG;QACrG,yGAAyG;QACzG,4FAA4F;QAC5F,oDAAoD;QACpD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK,KAAK,IAAI;YACtB,UAAU,EACR,wFAAwF;gBACxF,4EAA4E;SAC/E,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,2CAA2C,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,wGAAwG;QACxG,4GAA4G;QAC5G,wGAAwG;QACxG,0GAA0G;QAC1G,8BAA8B;QAC9B,EAAE;QACF,2GAA2G;QAC3G,sGAAsG;QACtG,+FAA+F;QAC/F,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,4CAA4C;SACzD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,IAAI;QACZ,kGAAkG;QAClG,yGAAyG;QACzG,UAAU,EACR,mDAAmD,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK;YAC9F,uCAAuC;KAC1C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/executors/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,cAAc,EAAqB,MAAM,6BAA6B,CAAC;AAEhF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAmBnD,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,GAAuB;IAChD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GACnC,6GAA6G;IAC7G,kHAAkH,CAAC;AAErH,MAAM,UAAU,cAAc,CAAC,GAAuB,EAAE,KAAwB;IAC9E,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAC3C,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7E,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,iDAAiD;KAClF,CAAC;AACJ,CAAC;AACD,SAAS,cAAc,CAAC,GAAuB,EAAE,KAAwB;IACvE,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,oEAAoE;SACjF,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC;YACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,gCAAgC,EAAE,CAAC;QACrG,CAAC;QACD,yGAAyG;QACzG,yGAAyG;QACzG,yGAAyG;QACzG,uEAAuE;QACvE,MAAM,GAAG,GAAG,KAAK,EAAE,KAAK,IAAI,iCAAiC,CAAC;QAC9D,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,OAAO,EACL,2EAA2E,GAAG,KAAK;gBACnF,kGAAkG;gBAClG,0FAA0F;gBAC1F,2FAA2F;YAC7F,UAAU,EAAE,yCAAyC,GAAG,kCAAkC;SAC3F,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,qGAAqG;QACrG,yGAAyG;QACzG,4FAA4F;QAC5F,oDAAoD;QACpD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK,KAAK,IAAI;YACtB,UAAU,EACR,wFAAwF;gBACxF,4EAA4E;SAC/E,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,2CAA2C,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,wGAAwG;QACxG,4GAA4G;QAC5G,wGAAwG;QACxG,0GAA0G;QAC1G,8BAA8B;QAC9B,EAAE;QACF,2GAA2G;QAC3G,sGAAsG;QACtG,+FAA+F;QAC/F,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,4CAA4C;SACzD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,IAAI;QACZ,kGAAkG;QAClG,yGAAyG;QACzG,UAAU,EACR,mDAAmD,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK;YAC9F,uCAAuC;KAC1C,CAAC;AACJ,CAAC"}

package/dist/executors/owned-worker.d.ts

@@ -0,0 +1,18 @@
+import type { ChildRunRequest, ChildRunResult } from "../kernel/run-child.ts";
+import type { CapturedWorkerCleanup, CapturedWorkerIdentity } from "../kernel/captured-worker-contract.ts";
+export type { CapturedWorkerCleanup, CapturedWorkerIdentity } from "../kernel/captured-worker-contract.ts";
+export interface OwnedChildRunRequest extends ChildRunRequest {
+    executionId: string;
+    /** Fresh, caller-private directory. Existing directories are refused rather than overwritten. */
+    ownershipDir: string;
+    onOwnership?: (identity: CapturedWorkerIdentity) => Promise<void> | void;
+    /** JSON protocol consumers observe all bytes without capturing enormous replay streams as answer text. */
+    captureStdout?: boolean;
+    /** Bounded diagnostics may truncate without stopping independently captured primary output. */
+    stopOnOutputLimit?: boolean;
+}
+export interface OwnedChildRunResult extends ChildRunResult {
+    cleanup: CapturedWorkerCleanup;
+}
+export declare function runOwnedChild(request: OwnedChildRunRequest): Promise<OwnedChildRunResult>;
+//# sourceMappingURL=owned-worker.d.ts.map

package/dist/executors/owned-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owned-worker.d.ts","sourceRoot":"","sources":["../../src/executors/owned-worker.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE9E,OAAO,KAAK,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAM3G,YAAY,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAE3G,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,sBAAsB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzE,0GAA0G;IAC1G,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AACD,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,OAAO,EAAE,qBAAqB,CAAC;CAChC;AACD,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAgS/F"}

package/dist/executors/owned-worker.js

@@ -0,0 +1,295 @@
+/** Captured Linux execution with a gated, independently settling native subreaper owner. */
+import { constants as fsConstants } from "node:fs";
+import { spawn } from "node:child_process";
+import { createHash, randomUUID } from "node:crypto";
+import { lstat, mkdir, open, realpath } from "node:fs/promises";
+import { join } from "node:path";
+import { constants as osConstants } from "node:os";
+import { fileURLToPath } from "node:url";
+import { StringDecoder } from "node:string_decoder";
+import { WORKER_SHA256 } from "./worker-artifact.js";
+import { takeBytes, DEFAULT_MAX_OUTPUT_BYTES, DEFAULT_TIMEOUT_MS, DEFAULT_KILL_GRACE_MS } from "../kernel/run-child.js";
+import { isCapturedWorkerIdentity, readCapturedWorkerReceipt, validateLiveWorker, } from "../governance/captured-worker-record.js";
+export async function runOwnedChild(request) {
+    const notStarted = (reason, aborted = false) => ({
+        code: null,
+        text: "",
+        truncated: false,
+        timedOut: false,
+        aborted,
+        ...(!aborted ? { spawnError: reason } : {}),
+        cleanup: { state: "not-started", reason },
+    });
+    if (request.hardDeadlineAt !== undefined && request.hardDeadlineAt <= Date.now())
+        return { ...notStarted("deadline elapsed before helper launch"), timedOut: true };
+    if (request.signal?.aborted)
+        return notStarted("cancelled before helper launch", true);
+    if (process.platform !== "linux" || process.arch !== "x64")
+        return notStarted("captured worker requires qualified Linux x64 helper");
+    let helper, root, hash;
+    const nonce = randomUUID();
+    let binary;
+    try {
+        helper = fileURLToPath(new URL("../../native/linux-x64/worker", import.meta.url));
+        const info = await lstat(helper);
+        if (!info.isFile() || info.isSymbolicLink() || !(info.mode & 0o111))
+            throw new Error("packaged worker helper is not an ordinary executable");
+        binary = await open(helper, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+        const pinned = await binary.stat();
+        if (pinned.dev !== info.dev || pinned.ino !== info.ino)
+            throw new Error("worker helper changed before pinning");
+        hash = WORKER_SHA256;
+        if (!/^[a-f0-9]{64}$/.test(hash) ||
+            createHash("sha256")
+                .update(await binary.readFile())
+                .digest("hex") !== hash)
+            throw new Error("packaged worker helper hash mismatch");
+        root = await realpath(request.cwd);
+        if (!request.executionId || request.executionId.length > 512)
+            throw new Error("executionId must be bounded and nonempty");
+        await mkdir(request.ownershipDir, { mode: 0o700 });
+        if ((await realpath(request.ownershipDir)) !== request.ownershipDir)
+            throw new Error("ownershipDir must be a canonical absolute path");
+    }
+    catch (error) {
+        await binary?.close();
+        return notStarted(String(error));
+    }
+    return new Promise((resolve) => {
+        const grace = Math.min(request.killGraceMs ?? DEFAULT_KILL_GRACE_MS, 60000);
+        const cleanupCeiling = grace + 5000;
+        const child = spawn("/proc/self/fd/5", [
+            request.executionId,
+            nonce,
+            root,
+            hash,
+            request.ownershipDir,
+            String(grace),
+            String(cleanupCeiling),
+            "--",
+            request.command,
+            ...request.args,
+        ], {
+            cwd: root,
+            env: request.env,
+            stdio: ["ignore", "pipe", "pipe", "pipe", "pipe", binary.fd],
+            detached: true,
+        });
+        void binary.close();
+        const control = child.stdio[3];
+        const status = child.stdio[4];
+        let identity;
+        let text = "", count = 0, truncated = false, timedOut = false, aborted = false, idle = false;
+        let failure, done = false, stopping = false, ready = "";
+        let stopWatchdog, idleTimer;
+        const decoders = { stdout: new StringDecoder("utf8"), stderr: new StringDecoder("utf8") };
+        const timers = [];
+        const observe = (stream, bytes) => {
+            armIdle();
+            try {
+                request.onObservation?.(stream, bytes);
+            }
+            catch {
+                /* observer owns its own incomplete/error state */
+            }
+            if (stream === "stdout" && request.captureStdout === false)
+                return;
+            const chunk = decoders[stream].write(bytes);
+            const kept = takeBytes(chunk, Math.max(0, (request.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES) - count));
+            count += Buffer.byteLength(kept);
+            text += kept;
+            try {
+                if (kept)
+                    request.onOutput?.(kept);
+            }
+            catch {
+                /* display only */
+            }
+            if (kept.length < chunk.length) {
+                truncated = true;
+                if (request.stopOnOutputLimit !== false)
+                    stop();
+            }
+        };
+        const stop = (hard = false) => {
+            if (hard && !done && control.writable)
+                control.write("K");
+            if (done || stopping)
+                return;
+            stopping = true;
+            if (control.writable)
+                control.write("C");
+            stopWatchdog = setTimeout(() => {
+                failure ??= "worker helper failed to establish cleanup before its bound";
+                child.kill("SIGKILL");
+                child.stdout?.destroy();
+                child.stderr?.destroy();
+                status.destroy();
+            }, cleanupCeiling + 1000);
+        };
+        function armIdle() {
+            if (!request.idleTimeoutMs || done || stopping)
+                return;
+            if (idleTimer)
+                clearTimeout(idleTimer);
+            idleTimer = setTimeout(() => {
+                timedOut = true;
+                idle = true;
+                stop();
+            }, request.idleTimeoutMs);
+        }
+        child.stdout?.on("data", (bytes) => observe("stdout", bytes));
+        child.stderr?.on("data", (bytes) => observe("stderr", bytes));
+        for (const stream of ["stdout", "stderr"])
+            child[stream]?.on("end", () => {
+                const tail = decoders[stream].end();
+                if (tail && !(stream === "stdout" && request.captureStdout === false)) {
+                    const kept = takeBytes(tail, Math.max(0, (request.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES) - count));
+                    text += kept;
+                    count += Buffer.byteLength(kept);
+                }
+                try {
+                    request.onStreamEnd?.(stream);
+                }
+                catch {
+                    /* observer only */
+                }
+            });
+        control.on("error", () => {
+            /* helper close is evaluated against independent receipt */
+        });
+        status.on("data", (bytes) => {
+            if (identity)
+                return;
+            ready += bytes.toString("utf8");
+            if (ready.length > 16384) {
+                failure = "oversized worker readiness";
+                stop();
+                return;
+            }
+            if (!ready.includes("\n"))
+                return;
+            void (async () => {
+                try {
+                    const value = JSON.parse(ready.trim());
+                    if (!isCapturedWorkerIdentity(value) ||
+                        value.executionId !== request.executionId ||
+                        value.nonce !== nonce ||
+                        value.root !== root ||
+                        value.helperPid !== child.pid ||
+                        value.helperSha256 !== hash ||
+                        value.ownershipPath !== join(request.ownershipDir, "ownership.json"))
+                        throw new Error("wrong worker readiness identity");
+                    identity = value;
+                    await validateLiveWorker(identity, helper);
+                    await request.onOwnership?.(identity);
+                    if (request.hardDeadlineAt !== undefined && request.hardDeadlineAt <= Date.now()) {
+                        timedOut = true;
+                        stop(true);
+                    }
+                    if (!stopping && !done) {
+                        request.onSpawn?.(identity.workerPid);
+                        control.write("S");
+                    }
+                }
+                catch (error) {
+                    failure = String(error);
+                    stop();
+                }
+            })();
+        });
+        // Startup is bounded by the caller's timeout/deadline too. A separate readiness cutoff can
+        // discard a valid delayed ownership record and prevent later exact receipt reconciliation.
+        timers.push(setTimeout(() => {
+            timedOut = true;
+            stop();
+        }, request.timeoutMs ?? DEFAULT_TIMEOUT_MS));
+        if (request.hardDeadlineAt !== undefined)
+            timers.push(setTimeout(() => {
+                timedOut = true;
+                stop(true);
+            }, Math.max(0, request.hardDeadlineAt - Date.now())));
+        armIdle();
+        if (request.activityProbe && request.idleTimeoutMs) {
+            let previous, probing = false;
+            timers.push(setInterval(() => {
+                if (probing || done)
+                    return;
+                probing = true;
+                Promise.resolve()
+                    .then(() => request.activityProbe())
+                    .then((value) => {
+                    if (value !== undefined && value !== previous) {
+                        previous = value;
+                        armIdle();
+                    }
+                })
+                    .catch(() => undefined)
+                    .finally(() => {
+                    probing = false;
+                });
+            }, request.activityProbeIntervalMs ?? 2000));
+        }
+        const onAbort = () => {
+            aborted = true;
+            stop();
+        };
+        request.signal?.addEventListener("abort", onAbort, { once: true });
+        if (request.hardDeadlineAt !== undefined && request.hardDeadlineAt <= Date.now()) {
+            timedOut = true;
+            stop(true);
+        }
+        if (request.signal?.aborted)
+            onAbort();
+        child.on("error", (error) => {
+            failure = String(error);
+        });
+        child.on("exit", () => {
+            void (async () => {
+                if (!identity || !(await readCapturedWorkerReceipt(identity))) {
+                    failure ??= "helper exited without an independent settlement receipt";
+                    child.stdout?.destroy();
+                    child.stderr?.destroy();
+                    status.destroy();
+                }
+            })();
+        });
+        child.on("close", () => {
+            if (done)
+                return;
+            done = true;
+            timers.forEach(clearTimeout);
+            if (idleTimer)
+                clearTimeout(idleTimer);
+            if (stopWatchdog)
+                clearTimeout(stopWatchdog);
+            request.signal?.removeEventListener("abort", onAbort);
+            control.destroy();
+            void (async () => {
+                const receipt = identity ? await readCapturedWorkerReceipt(identity) : null;
+                const cleanup = receipt && identity
+                    ? { state: "settled", identity, receipt }
+                    : {
+                        state: "unknown",
+                        ...(identity ? { identity } : {}),
+                        reason: failure ?? "helper closed without matching durable settlement receipt",
+                    };
+                const signal = receipt?.workerSignal
+                    ? Object.entries(osConstants.signals).find(([, value]) => value === receipt.workerSignal)?.[0]
+                    : null;
+                resolve({
+                    code: receipt?.workerCode ?? null,
+                    signal,
+                    text,
+                    truncated,
+                    timedOut,
+                    ...(idle ? { idle: true } : {}),
+                    aborted,
+                    ...(failure ? { spawnError: failure } : {}),
+                    cleanup,
+                });
+            })();
+        });
+    });
+}
+//# sourceMappingURL=owned-worker.js.map

package/dist/executors/owned-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owned-worker.js","sourceRoot":"","sources":["../../src/executors/owned-worker.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAExH,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,yCAAyC,CAAC;AAgBjD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAC/D,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,OAAO,GAAG,KAAK,EAAuB,EAAE,CAAC,CAAC;QAC5E,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,EAAE;QACR,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,KAAK;QACf,OAAO;QACP,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE;KAC1C,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE;QAC9E,OAAO,EAAE,GAAG,UAAU,CAAC,uCAAuC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpF,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,UAAU,CAAC,gCAAgC,EAAE,IAAI,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QACxD,OAAO,UAAU,CAAC,qDAAqD,CAAC,CAAC;IAC3E,IAAI,MAAc,EAAE,IAAY,EAAE,IAAY,CAAC;IAC/C,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,IAAI,MAAyD,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAChH,IAAI,GAAG,aAAa,CAAC;QACrB,IACE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5B,UAAU,CAAC,QAAQ,CAAC;iBACjB,MAAM,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;iBAC/B,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI;YAEzB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG;YAC1D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,KAAK,OAAO,CAAC,YAAY;YACjE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;QACtB,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC5E,MAAM,cAAc,GAAG,KAAK,GAAG,IAAI,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK,CACjB,iBAAiB,EACjB;YACE,OAAO,CAAC,WAAW;YACnB,KAAK;YACL,IAAI;YACJ,IAAI;YACJ,OAAO,CAAC,YAAY;YACpB,MAAM,CAAC,KAAK,CAAC;YACb,MAAM,CAAC,cAAc,CAAC;YACtB,IAAI;YACJ,OAAO,CAAC,OAAO;YACf,GAAG,OAAO,CAAC,IAAI;SAChB,EACD;YACE,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAO,CAAC,EAAE,CAAC;YAC7D,QAAQ,EAAE,IAAI;SACf,CACF,CAAC;QACF,KAAK,MAAO,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAiC,CAAC;QAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAmC,CAAC;QAChE,IAAI,QAA4C,CAAC;QACjD,IAAI,IAAI,GAAG,EAAE,EACX,KAAK,GAAG,CAAC,EACT,SAAS,GAAG,KAAK,EACjB,QAAQ,GAAG,KAAK,EAChB,OAAO,GAAG,KAAK,EACf,IAAI,GAAG,KAAK,CAAC;QACf,IAAI,OAA2B,EAC7B,IAAI,GAAG,KAAK,EACZ,QAAQ,GAAG,KAAK,EAChB,KAAK,GAAG,EAAE,CAAC;QACb,IAAI,YAAwC,EAAE,SAAqC,CAAC;QACpF,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,MAA2B,EAAE,KAAa,EAAE,EAAE;YAC7D,OAAO,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;YACD,IAAI,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK;gBAAE,OAAO;YACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;YACzG,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,IAAI,IAAI,CAAC;YACb,IAAI,CAAC;gBACH,IAAI,IAAI;oBAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC/B,SAAS,GAAG,IAAI,CAAC;gBACjB,IAAI,OAAO,CAAC,iBAAiB,KAAK,KAAK;oBAAE,IAAI,EAAE,CAAC;YAClD,CAAC;QACH,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG,KAAK,EAAE,EAAE;YAC5B,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ;gBAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1D,IAAI,IAAI,IAAI,QAAQ;gBAAE,OAAO;YAC7B,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,OAAO,CAAC,QAAQ;gBAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,OAAO,KAAK,4DAA4D,CAAC;gBACzE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACxB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,SAAS,OAAO;YACd,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI,IAAI,QAAQ;gBAAE,OAAO;YACvD,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,GAAG,IAAI,CAAC;gBACZ,IAAI,EAAE,CAAC;YACT,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9D,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU;YAChD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;gBACpC,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,EAAE,CAAC;oBACtE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;oBACxG,IAAI,IAAI,IAAI,CAAC;oBACb,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBACnC,CAAC;gBACD,IAAI,CAAC;oBACH,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBACP,mBAAmB;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,2DAA2D;QAC7D,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,IAAI,QAAQ;gBAAE,OAAO;YACrB,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;gBACzB,OAAO,GAAG,4BAA4B,CAAC;gBACvC,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO;YAClC,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;oBAChD,IACE,CAAC,wBAAwB,CAAC,KAAK,CAAC;wBAChC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;wBACzC,KAAK,CAAC,KAAK,KAAK,KAAK;wBACrB,KAAK,CAAC,IAAI,KAAK,IAAI;wBACnB,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,GAAG;wBAC7B,KAAK,CAAC,YAAY,KAAK,IAAI;wBAC3B,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,gBAAgB,CAAC;wBAEpE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBACrD,QAAQ,GAAG,KAAK,CAAC;oBACjB,MAAM,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAC3C,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC;oBACtC,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBACjF,QAAQ,GAAG,IAAI,CAAC;wBAChB,IAAI,CAAC,IAAI,CAAC,CAAC;oBACb,CAAC;oBACD,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;wBACvB,OAAO,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;wBACtC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxB,IAAI,EAAE,CAAC;gBACT,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,CAAC,CAAC;QACH,2FAA2F;QAC3F,2FAA2F;QAC3F,MAAM,CAAC,IAAI,CACT,UAAU,CAAC,GAAG,EAAE;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,EAAE,CAAC;QACT,CAAC,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAC5C,CAAC;QACF,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YACtC,MAAM,CAAC,IAAI,CACT,UAAU,CACR,GAAG,EAAE;gBACH,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CACjD,CACF,CAAC;QACJ,OAAO,EAAE,CAAC;QACV,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YACnD,IAAI,QAAiB,EACnB,OAAO,GAAG,KAAK,CAAC;YAClB,MAAM,CAAC,IAAI,CACT,WAAW,CAAC,GAAG,EAAE;gBACf,IAAI,OAAO,IAAI,IAAI;oBAAE,OAAO;gBAC5B,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,OAAO,EAAE;qBACd,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,aAAc,EAAE,CAAC;qBACpC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;oBACd,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;wBAC9C,QAAQ,GAAG,KAAK,CAAC;wBACjB,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;qBACtB,OAAO,CAAC,GAAG,EAAE;oBACZ,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC,CAAC,CAAC;YACP,CAAC,EAAE,OAAO,CAAC,uBAAuB,IAAI,IAAI,CAAC,CAC5C,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACjF,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;QACvC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACpB,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;oBAC9D,OAAO,KAAK,yDAAyD,CAAC;oBACtE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;oBACxB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;oBACxB,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC7B,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,YAAY;gBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YAC7C,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC5E,MAAM,OAAO,GACX,OAAO,IAAI,QAAQ;oBACjB,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE;oBACzC,CAAC,CAAC;wBACE,KAAK,EAAE,SAAS;wBAChB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjC,MAAM,EAAE,OAAO,IAAI,2DAA2D;qBAC/E,CAAC;gBACR,MAAM,MAAM,GAAG,OAAO,EAAE,YAAY;oBAClC,CAAC,CAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,OAAO,CAAC,YAAY,CAC9C,EAAE,CAAC,CAAC,CAAoB;oBAC3B,CAAC,CAAC,IAAI,CAAC;gBACT,OAAO,CAAC;oBACN,IAAI,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;oBACjC,MAAM;oBACN,IAAI;oBACJ,SAAS;oBACT,QAAQ;oBACR,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxC,OAAO;oBACP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3C,OAAO;iBACR,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}