sealbridge 0.2.1 → 0.3.0

package/dist/packages/runtime/dist/task-journal.js

@@ -1,17 +1,248 @@
 // SPDX-License-Identifier: Apache-2.0
 import { closeSync, constants, fchmodSync, fstatSync, fsyncSync, ftruncateSync, openSync, readFileSync, writeSync, } from 'node:fs';
 import { dirname } from 'node:path';
+import * as fs from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { checkPath, checkStat, readPrivateFile, writePrivateFile } from './local-identity.js';
 import { signPayload, verifySigned } from '../../core/dist/index.js';
-/** Private, fsynced snapshots. A torn final append never erases the preceding checkpoint. */
+/** Private signed checkpoints. Shared callers hold the signer lock for load/reload/save/compact.
+ * A torn final append retains the preceding checkpoint, but is never a reusable cache. */
 export class TaskJournal {
     path;
     owner;
+    maxRecordBytes;
+    durability;
     tasks = new Map();
     loaded = false;
     validBytes = 0;
-    constructor(path, owner) {
+    stamp;
+    writer;
+    // On POSIX, pin a loaded inode so replacement cannot recycle its identity into the cache.
+    reader;
+    retainDescriptors;
+    close() {
+        if (this.writer !== undefined) {
+            closeSync(this.writer);
+            this.writer = undefined;
+        }
+        if (this.reader !== undefined) {
+            closeSync(this.reader);
+            this.reader = undefined;
+        }
+    }
+    constructor(path, owner, maxRecordBytes = Infinity, durability = 'file-sync') {
         this.path = path;
         this.owner = owner;
+        this.maxRecordBytes = maxRecordBytes;
+        this.durability = durability;
+        // Windows replacement can fail while another process retains a journal handle.
+        // Close both readers and writers between operations there; reload fully under the signer lock.
+        this.retainDescriptors = durability === 'process' && process.platform !== 'win32';
+    }
+    fingerprint(stat) {
+        return [stat.dev, stat.ino, stat.size, stat.mode, stat.uid, stat.mtimeNs, stat.ctimeNs].join(':');
+    }
+    reload() {
+        // Under the signer lock, complete journals only grow by append or are replaced by rename.
+        // A retained descriptor pins the inode against reuse after replacement.
+        // A torn tail can instead be repaired to the same size in the same timestamp tick.
+        if (this.retainDescriptors && this.loaded && this.stamp &&
+            (this.reader !== undefined || this.writer !== undefined)) {
+            try {
+                const stat = fs.lstatSync(this.path, { bigint: true });
+                if (BigInt(this.validBytes) === stat.size && this.fingerprint(stat) === this.stamp)
+                    return;
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+        this.close();
+        this.loaded = false;
+        this.stamp = undefined;
+        this.tasks.clear();
+        this.validBytes = 0;
+        this.load();
+    }
+    /** Used only by the gateway's default journal, under its signer lock. */
+    compact(retainedTasks) {
+        this.reload();
+        if (!this.validBytes)
+            return;
+        const retained = [...this.tasks.values()].filter(r => r.phase !== 'terminal' || r.notificationPending || retainedTasks.has(r.taskId));
+        const bytes = Buffer.from(retained.map(r => JSON.stringify(signPayload(r, this.owner)) + '\n').join(''));
+        const temporary = this.path + '.' + randomUUID() + '.tmp';
+        let created = false;
+        try {
+            if (this.durability === 'file-sync') {
+                writePrivateFile(temporary, bytes, fs);
+                created = true;
+            }
+            else {
+                checkPath(temporary, fs);
+                const fd = fs.openSync(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL |
+                    (constants.O_NOFOLLOW ?? 0), 0o600);
+                created = true;
+                try {
+                    checkStat(fs.fstatSync(fd));
+                    fs.writeFileSync(fd, bytes);
+                }
+                finally {
+                    fs.closeSync(fd);
+                }
+            }
+            checkPath(this.path, fs);
+            readPrivateFile(this.path, fs, fs.statSync(this.path).size + 1);
+            this.close();
+            fs.renameSync(temporary, this.path);
+            created = false;
+            if (this.durability === 'file-sync' && process.platform !== 'win32') {
+                const fd = fs.openSync(dirname(this.path), 'r');
+                try {
+                    fs.fsyncSync(fd);
+                }
+                finally {
+                    fs.closeSync(fd);
+                }
+            }
+            this.loaded = false;
+            this.reload();
+        }
+        finally {
+            if (created)
+                fs.unlinkSync(temporary);
+        }
+    }
+    /** Default gateway maintenance prepares snapshots without blocking relay polling. */
+    async compactInBackground(retainedTasks, commit, signal) {
+        signal.throwIfAborted();
+        const stamp = (s) => [s.dev, s.ino, s.size, s.mode, s.uid, s.mtimeNs, s.ctimeNs].join(':');
+        checkPath(this.path, fs);
+        const before = await fs.promises.lstat(this.path, { bigint: true });
+        if (!before.isFile())
+            throw new Error('INVALID_TASK_JOURNAL');
+        const handle = await fs.promises.open(this.path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
+        const tasks = new Map();
+        const sourceChunks = [];
+        let validBytes = 0;
+        try {
+            checkStat(await handle.stat());
+            if (stamp(await handle.stat({ bigint: true })) !== stamp(before))
+                return;
+            const chunk = Buffer.alloc(64 * 1024);
+            let tail = Buffer.alloc(0);
+            for (;;) {
+                signal.throwIfAborted();
+                const { bytesRead } = await handle.read(chunk);
+                if (!bytesRead)
+                    break;
+                sourceChunks.push(Buffer.from(chunk.subarray(0, bytesRead)));
+                const block = Buffer.concat([tail, chunk.subarray(0, bytesRead)]);
+                let start = 0, end;
+                while ((end = block.indexOf(10, start)) !== -1) {
+                    await new Promise(resolve => setImmediate(resolve));
+                    signal.throwIfAborted();
+                    const line = block.subarray(start, end).toString('utf8');
+                    if (line) {
+                        const record = this.decode(line);
+                        tasks.set(record.taskId, record);
+                    }
+                    validBytes += end - start + 1;
+                    start = end + 1;
+                }
+                tail = Buffer.from(block.subarray(start));
+                if (tail.length > this.maxRecordBytes)
+                    throw new Error('INVALID_TASK_JOURNAL');
+            }
+            if (stamp(await handle.stat({ bigint: true })) !== stamp(before))
+                return;
+        }
+        finally {
+            await handle.close();
+        }
+        if (!validBytes)
+            return;
+        const source = Buffer.concat(sourceChunks);
+        const temporary = this.path + '.' + randomUUID() + '.tmp';
+        let created = false;
+        try {
+            checkPath(temporary, fs);
+            const target = await fs.promises.open(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL |
+                (constants.O_NOFOLLOW ?? 0), 0o600);
+            created = true;
+            let compactedBytes = 0;
+            try {
+                checkStat(await target.stat());
+                for (const [id, record] of tasks) {
+                    await new Promise(resolve => setImmediate(resolve));
+                    signal.throwIfAborted();
+                    if (record.phase === 'terminal' && !record.notificationPending && !retainedTasks.has(id)) {
+                        tasks.delete(id);
+                        continue;
+                    }
+                    const line = JSON.stringify(signPayload(record, this.owner)) + '\n';
+                    await target.writeFile(line);
+                    compactedBytes += Buffer.byteLength(line);
+                }
+                if (this.durability === 'file-sync')
+                    await target.sync();
+            }
+            finally {
+                await target.close();
+            }
+            signal.throwIfAborted();
+            commit(() => {
+                checkPath(this.path, fs);
+                // Stat is only an early rejection: same-size tail repair can preserve the fingerprint.
+                if (stamp(fs.lstatSync(this.path, { bigint: true })) !== stamp(before))
+                    return;
+                const fd = fs.openSync(this.path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
+                try {
+                    checkStat(fs.fstatSync(fd));
+                    // Include the incomplete tail. Compare under the signer lock before publishing the cache.
+                    if (!readFileSync(fd).equals(source))
+                        return;
+                }
+                finally {
+                    fs.closeSync(fd);
+                }
+                this.close();
+                fs.renameSync(temporary, this.path);
+                created = false;
+                this.tasks.clear();
+                for (const [id, record] of tasks)
+                    this.tasks.set(id, record);
+                this.validBytes = compactedBytes;
+                this.loaded = true;
+                this.stamp = this.fingerprint(fs.lstatSync(this.path, { bigint: true }));
+            });
+            if (!created && this.durability === 'file-sync' && process.platform !== 'win32') {
+                const directory = await fs.promises.open(dirname(this.path), constants.O_RDONLY);
+                try {
+                    await directory.sync();
+                }
+                finally {
+                    await directory.close();
+                }
+            }
+        }
+        finally {
+            if (created)
+                await fs.promises.unlink(temporary);
+        }
+    }
+    decode(line) {
+        if (Buffer.byteLength(line) + 1 > this.maxRecordBytes)
+            throw new Error('INVALID_TASK_JOURNAL');
+        const signed = JSON.parse(line), record = signed.payload;
+        if (!verifySigned(signed, this.owner.did) || record.version !== 1 ||
+            typeof record.taskId !== 'string' || typeof record.requesterDid !== 'string' ||
+            typeof record.envelopeId !== 'string' || typeof record.proposalDigest !== 'string' ||
+            !['received', 'accepted', 'running', 'delivered', 'terminal'].includes(record.phase) ||
+            !Array.isArray(record.invocations) || (record.phase === 'terminal' && !record.outcome))
+            throw new Error('INVALID_TASK_JOURNAL');
+        return record;
     }
     open(flags) {
         const platformFlags = process.platform === 'win32' ? 0
@@ -45,31 +276,41 @@ export class TaskJournal {
         try {
             const bytes = readFileSync(fd);
             const end = bytes.lastIndexOf(10) + 1;
+            const tasks = new Map();
             for (const line of bytes.subarray(0, end).toString('utf8').split('\n').filter(Boolean)) {
-                const signed = JSON.parse(line);
-                const record = signed.payload;
-                if (!verifySigned(signed, this.owner.did) || record.version !== 1 ||
-                    typeof record.taskId !== 'string' || typeof record.requesterDid !== 'string' ||
-                    typeof record.envelopeId !== 'string' || typeof record.proposalDigest !== 'string' ||
-                    !['received', 'accepted', 'running', 'delivered', 'terminal'].includes(record.phase) ||
-                    !Array.isArray(record.invocations) || (record.phase === 'terminal' && !record.outcome))
-                    throw new Error('INVALID_TASK_JOURNAL');
-                this.tasks.set(record.taskId, record);
+                const record = this.decode(line);
+                tasks.set(record.taskId, record);
             }
+            this.stamp = end === bytes.length ? this.fingerprint(fs.fstatSync(fd, { bigint: true })) : undefined;
+            this.tasks.clear();
+            for (const [id, record] of tasks)
+                this.tasks.set(id, record);
             this.validBytes = end;
-            this.loaded = true;
+            this.loaded = end === bytes.length;
+            if (this.loaded && this.retainDescriptors)
+                this.reader = fd;
         }
         finally {
-            closeSync(fd);
+            if (this.reader !== fd)
+                closeSync(fd);
         }
     }
     save(record) {
         this.load();
         const snapshot = JSON.parse(JSON.stringify(record));
         const line = Buffer.from(JSON.stringify(signPayload(snapshot, this.owner)) + '\n');
-        const fd = this.open(constants.O_WRONLY | constants.O_CREAT);
+        if (line.length > this.maxRecordBytes)
+            throw new Error('OUTBOX_FULL');
+        const fd = this.writer ?? this.open(constants.O_WRONLY | constants.O_CREAT);
+        if (this.retainDescriptors) {
+            this.writer = fd;
+            if (this.reader !== undefined) {
+                closeSync(this.reader);
+                this.reader = undefined;
+            }
+        }
         try {
-            // Only one worker may own these persistence paths at a time.
+            // Explicit paths have one writer; gateway journals use the signer lock.
             const size = fstatSync(fd).size;
             if (size < this.validBytes)
                 throw new Error('INVALID_TASK_JOURNAL');
@@ -83,8 +324,9 @@ export class TaskJournal {
                     throw new Error('TASK_JOURNAL_WRITE_FAILED');
                 offset += written;
             }
-            fsyncSync(fd);
-            if (process.platform !== 'win32') {
+            if (this.durability === 'file-sync')
+                fsyncSync(fd);
+            if (this.durability === 'file-sync' && process.platform !== 'win32') {
                 const directory = openSync(dirname(this.path), constants.O_RDONLY);
                 try {
                     fsyncSync(directory);
@@ -93,11 +335,22 @@ export class TaskJournal {
                     closeSync(directory);
                 }
             }
+            this.stamp = this.fingerprint(fs.fstatSync(fd, { bigint: true }));
             this.validBytes += line.length;
             this.tasks.set(record.taskId, snapshot);
+            this.loaded = true;
+        }
+        catch (error) {
+            this.close();
+            this.loaded = false;
+            this.stamp = undefined;
+            this.validBytes = 0;
+            this.tasks.clear();
+            throw error;
         }
         finally {
-            closeSync(fd);
+            if (!this.retainDescriptors)
+                closeSync(fd);
         }
     }
 }

package/dist/packages/runtime/dist/task-journal.js.map

@@ -1 +1 @@
-{"version":3,"file":"task-journal.js","sourceRoot":"","sources":["../src/task-journal.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EACtD,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,GACjD,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAsBtD,6FAA6F;AAC7F,MAAM,OAAO,WAAW;IAID;IAA+B;IAH3C,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC3C,MAAM,GAAG,KAAK,CAAC;IACf,UAAU,GAAG,CAAC,CAAC;IACvB,YAAqB,IAAY,EAAmB,KAAc;QAA7C,SAAI,GAAJ,IAAI,CAAQ;QAAmB,UAAK,GAAL,KAAK,CAAS;IAAG,CAAC;IAE9D,IAAI,CAAC,KAAa;QACxB,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACjD,CAAC;IACD,IAAI;QACF,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAC3C,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YACtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2B,CAAC;gBAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;gBAC9B,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;oBAC7D,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;oBAC5E,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;oBAClF,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;oBACpF,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;oBACxF,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;YACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,MAAsB;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAmB,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACnF,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,6DAA6D;YAC7D,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;YAChC,IAAI,IAAI,GAAG,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACpE,wFAAwF;YACxF,IAAI,IAAI,GAAG,IAAI,CAAC,UAAU;gBAAE,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/D,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC;gBAC5F,IAAI,OAAO,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAChE,MAAM,IAAI,OAAO,CAAC;YACpB,CAAC;YACD,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACnE,IAAI,CAAC;oBAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9B,CAAC;CACF"}
+{"version":3,"file":"task-journal.js","sourceRoot":"","sources":["../src/task-journal.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EACtD,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,GACjD,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAsBtD;0FAC0F;AAC1F,MAAM,OAAO,WAAW;IAaD;IAA+B;IAAiC;IAClE;IAbV,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC3C,MAAM,GAAG,KAAK,CAAC;IACf,UAAU,GAAG,CAAC,CAAC;IACf,KAAK,CAAU;IACf,MAAM,CAAU;IACxB,0FAA0F;IAClF,MAAM,CAAU;IACP,iBAAiB,CAAU;IAC5C,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAAC,CAAC;QACnF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAAC,CAAC;IACrF,CAAC;IACD,YAAqB,IAAY,EAAmB,KAAc,EAAmB,iBAAiB,QAAQ,EAC3F,aAAsC,WAAW;QAD/C,SAAI,GAAJ,IAAI,CAAQ;QAAmB,UAAK,GAAL,KAAK,CAAS;QAAmB,mBAAc,GAAd,cAAc,CAAW;QAC3F,eAAU,GAAV,UAAU,CAAuC;QAClE,+EAA+E;QAC/E,+FAA+F;QAC/F,IAAI,CAAC,iBAAiB,GAAG,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IACpF,CAAC;IACO,WAAW,CAAC,IAAoB;QACtC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpG,CAAC;IACD,MAAM;QACJ,0FAA0F;QAC1F,wEAAwE;QACxE,mFAAmF;QACnF,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK;YACnD,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;oBAAE,OAAO;YAC7F,CAAC;YACD,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACpG,CAAC;IACD,yEAAyE;IACzE,OAAO,CAAC,aAAkC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QAC7B,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,mBAAmB,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtI,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;QAC1D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;gBAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;YAAC,CAAC;iBAC3F,CAAC;gBACJ,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACzB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM;oBACzF,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBACtC,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC;oBAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;oBAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;YACjG,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAC1F,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,GAAG,KAAK,CAAC;YACrD,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAAC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;gBAAC,IAAI,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;YAAC,CAAC;YACjL,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACrC,CAAC;gBAAS,CAAC;YAAC,IAAI,OAAO;gBAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;IACtD,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,mBAAmB,CAAC,aAAkC,EAAE,MAAoC,EAAE,MAAmB;QACrH,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3G,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QACjI,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;QAChD,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,SAAS,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC;gBAAE,OAAO;YACzE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;YACtC,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,SAAS,CAAC;gBACR,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC/C,IAAI,CAAC,SAAS;oBAAE,MAAM;gBACtB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;gBAClE,IAAI,KAAK,GAAG,CAAC,EAAE,GAAW,CAAC;gBAC3B,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC/C,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC1D,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACzD,IAAI,IAAI,EAAE,CAAC;wBAAC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAAC,CAAC;oBACjF,UAAU,IAAI,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC;oBAC9B,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC;gBAClB,CAAC;gBACD,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1C,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc;oBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACjF,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC;gBAAE,OAAO;QAC3E,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACnC,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;QAC1D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM;gBACxG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACtC,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,cAAc,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC;gBACH,SAAS,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC/B,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACjC,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC1D,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;wBAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBACzH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;oBACpE,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBAC7B,cAAc,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC5C,CAAC;gBACD,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW;oBAAE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3D,CAAC;oBAAS,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YACnC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,EAAE;gBACV,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACzB,uFAAuF;gBACvF,IAAI,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC;oBAAE,OAAO;gBAC/E,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClH,IAAI,CAAC;oBACH,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC5B,0FAA0F;oBAC1F,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;wBAAE,OAAO;gBAC/C,CAAC;wBAAS,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;gBACrD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,KAAK;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACjF,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC;gBAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACrD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3E,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAChF,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACjF,IAAI,CAAC;oBAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;YACtE,CAAC;QACH,CAAC;gBAAS,CAAC;YAAC,IAAI,OAAO;gBAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;IACjE,CAAC;IACO,MAAM,CAAC,IAAY;QACzB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2B,EAAE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;QACnF,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAC7D,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YAC5E,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;YAClF,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;YACpF,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,IAAI,CAAC,KAAa;QACxB,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACjD,CAAC;IACD,IAAI;QACF,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAC3C,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;YAChD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACjC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACrG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAAC,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,KAAK;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACjF,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;YACtB,IAAI,CAAC,MAAM,GAAG,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,iBAAiB;gBAAE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QAC9D,CAAC;gBAAS,CAAC;YAAC,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;gBAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,MAAsB;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAmB,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACtE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAAC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC;YACH,wEAAwE;YACxE,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;YAChC,IAAI,IAAI,GAAG,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACpE,wFAAwF;YACxF,IAAI,IAAI,GAAG,IAAI,CAAC,UAAU;gBAAE,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/D,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC;gBAC5F,IAAI,OAAO,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAChE,MAAM,IAAI,OAAO,CAAC;YACpB,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW;gBAAE,SAAS,CAAC,EAAE,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACpE,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACnE,IAAI,CAAC;oBAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAClE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACrF,MAAM,KAAK,CAAC;QACd,CAAC;gBACO,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;gBAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/packages/runtime/dist/verifier.d.ts

@@ -1,5 +1,5 @@
-import type { Json, KeyPair, Signed, SignedEnvelope, TaskContract, ApprovalReceipt, UsageReceipt } from '@acp/core';
-import type { SandboxBoundaryMetadata } from '@acp/sandbox';
+import type { Json, KeyPair, Signed, SignedEnvelope, TaskContract, ApprovalReceipt, UsageReceipt } from '../../core/dist/index.js';
+import type { SandboxBoundaryMetadata } from '../../sandbox/dist/index.js';
 import { ApprovalGate } from './policy.js';
 export interface ContentArtifact {
     type: 'Artifact';
@@ -60,5 +60,6 @@ export declare class VerificationEngine {
     verifyDeliverable(input: VerifyDeliverableInput): Promise<VerificationResult>;
     verify(contract: TaskContract, envelope: SignedEnvelope, gate: ApprovalGate, approval?: ApprovalReceipt | (() => Promise<ApprovalReceipt>), recipient?: KeyPair, verifyOptions?: {
         allowUnencryptedEnvelopes?: boolean;
+        onVerifiedDelivery?: () => void;
     }): Promise<VerificationResult>;
 }

package/dist/packages/runtime/dist/verifier.js

@@ -97,6 +97,7 @@ export class VerificationEngine {
                     throw new Error('DETERMINISTIC_CHECK_FAILED');
             }
             stages.push('schema_isolated_check');
+            verifyOptions?.onVerifiedDelivery?.();
             gate.require(m.taskId, 'final_verification', d, typeof approval === 'function' ? await approval() : approval);
             stages.push('owner_approval');
             return { accepted: true, event: 'VERIFY_ACCEPT', stages };

package/dist/packages/runtime/dist/verifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,8EAA8E;AAC9E,OAAO,EACL,MAAM,EACN,0BAA0B,EAC1B,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,WAAW,CAAC;AAUnB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA6BzC,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,cAAsB,EACtB,IAAU,EACV,KAAmB,EACnB,MAAe,EACf,SAA0F;IAE1F,MAAM,QAAQ,GAAG,WAAW,CAC1B,EAAE,IAAI,EAAE,UAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EACtF,MAAM,CACP,CAAC;IACF,OAAO;QACL,QAAQ;QACR,KAAK;QACL,WAAW,EAAE,WAAW,CACtB;YACE,IAAI,EAAE,sBAAsB;YAC5B,MAAM;YACN,cAAc;YACd,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;YACvC,GAAG,CAAC,SAAS,EAAE,uBAAuB;gBACpC,CAAC,CAAC,EAAE,uBAAuB,EAAE,SAAS,CAAC,uBAAuB,EAAE;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF,EACD,MAAM,CACP;KACF,CAAC;AACJ,CAAC;AAoBD,MAAM,OAAO,kBAAkB;IAEA;IADrB,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,YAA6B,UAAqC,EAAE;QAAvC,YAAO,GAAP,OAAO,CAAgC;IAAG,CAAC;IACxE,qBAAqB,CAAC,MAAc,EAAE,IAAY;QAChD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,iBAAiB,CAAC,KAA6B;QAC7C,OAAO,IAAI,CAAC,MAAM,CAChB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,yBAAyB,KAAK,SAAS;YAC3C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,EAAE,CACnE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,MAAM,CACV,QAAsB,EACtB,QAAwB,EACxB,IAAkB,EAClB,QAA6D,EAC7D,SAAmB,EACnB,aAAuD;QAEvD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACnE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EACzB,MAAM,GAAG,CAAC,CAAC,MAAO,CAAC,QAAQ,CAAC;YAC9B,IACE,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC/C,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,MAAM;gBACrC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBACpC,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;gBACxC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAEnC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,MAAM,gBAAgB,GACpB,aAAa,EAAE,yBAAyB,IAAI,IAAI,CAAC,OAAO,CAAC,yBAAyB,KAAK,IAAI,CAAC;YAC9F,IAAI,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS;gBACpE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB;gBAC5E,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC7D,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAU,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;gBAChE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAwB,CAAC;YACrD,IACE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC;gBACjC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;gBACtC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBACtC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAC7D,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC;gBACpC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,KAAK,sBAAsB;gBACrD,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBACzC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;gBAChE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAClE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;gBAEjD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,2EAA2E;YAC3E,uEAAuE;YACvE,qEAAqE;YACrE,IACE,CAAC,CAAC,aAAa,CAAC,cAAc,KAAK,eAAe;gBAClD,CAAC,CAAC,YAAY,CAAC,2BAA2B;gBAC1C,CAAC,CAAC,aAAa,CAAC,uBAAuB,KAAK,IAAI;gBAChD,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,uBAAuB,KAAK,eAAe;gBAEjE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC7B,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YACnC,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBAChD,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACnF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,IAAI,CAAC,IAAI;oBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACtD,mEAAmE;gBACnE,iEAAiE;gBACjE,8EAA8E;gBAC9E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;oBAC9B,IAAI;oBACJ,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;oBAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;oBAC9D,MAAM,EAAE,KAAK,IAAI,EAAE;wBACjB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBACrD,CAAC;iBACF,CAAC,CAAC;gBACH,IAAI,MAAM,KAAK,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO,CACV,CAAC,CAAC,MAAM,EACR,oBAAoB,EACpB,CAAC,EACD,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAC7D,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;QAC5D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,8EAA8E;AAC9E,OAAO,EACL,MAAM,EACN,0BAA0B,EAC1B,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,WAAW,CAAC;AAUnB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA6BzC,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,cAAsB,EACtB,IAAU,EACV,KAAmB,EACnB,MAAe,EACf,SAA0F;IAE1F,MAAM,QAAQ,GAAG,WAAW,CAC1B,EAAE,IAAI,EAAE,UAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EACtF,MAAM,CACP,CAAC;IACF,OAAO;QACL,QAAQ;QACR,KAAK;QACL,WAAW,EAAE,WAAW,CACtB;YACE,IAAI,EAAE,sBAAsB;YAC5B,MAAM;YACN,cAAc;YACd,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;YACvC,GAAG,CAAC,SAAS,EAAE,uBAAuB;gBACpC,CAAC,CAAC,EAAE,uBAAuB,EAAE,SAAS,CAAC,uBAAuB,EAAE;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF,EACD,MAAM,CACP;KACF,CAAC;AACJ,CAAC;AAoBD,MAAM,OAAO,kBAAkB;IAEA;IADrB,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,YAA6B,UAAqC,EAAE;QAAvC,YAAO,GAAP,OAAO,CAAgC;IAAG,CAAC;IACxE,qBAAqB,CAAC,MAAc,EAAE,IAAY;QAChD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,iBAAiB,CAAC,KAA6B;QAC7C,OAAO,IAAI,CAAC,MAAM,CAChB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,yBAAyB,KAAK,SAAS;YAC3C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,EAAE,CACnE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,MAAM,CACV,QAAsB,EACtB,QAAwB,EACxB,IAAkB,EAClB,QAA6D,EAC7D,SAAmB,EACnB,aAAwF;QAExF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACnE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EACzB,MAAM,GAAG,CAAC,CAAC,MAAO,CAAC,QAAQ,CAAC;YAC9B,IACE,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC/C,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,MAAM;gBACrC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBACpC,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;gBACxC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAEnC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,MAAM,gBAAgB,GACpB,aAAa,EAAE,yBAAyB,IAAI,IAAI,CAAC,OAAO,CAAC,yBAAyB,KAAK,IAAI,CAAC;YAC9F,IAAI,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS;gBACpE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB;gBAC5E,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC7D,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAU,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;gBAChE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAwB,CAAC;YACrD,IACE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC;gBACjC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;gBACtC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBACtC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAC7D,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC;gBACpC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,KAAK,sBAAsB;gBACrD,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBACzC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;gBAChE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAClE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;gBAEjD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,2EAA2E;YAC3E,uEAAuE;YACvE,qEAAqE;YACrE,IACE,CAAC,CAAC,aAAa,CAAC,cAAc,KAAK,eAAe;gBAClD,CAAC,CAAC,YAAY,CAAC,2BAA2B;gBAC1C,CAAC,CAAC,aAAa,CAAC,uBAAuB,KAAK,IAAI;gBAChD,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,uBAAuB,KAAK,eAAe;gBAEjE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC7B,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YACnC,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBAChD,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACnF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,IAAI,CAAC,IAAI;oBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACtD,mEAAmE;gBACnE,iEAAiE;gBACjE,8EAA8E;gBAC9E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;oBAC9B,IAAI;oBACJ,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;oBAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;oBAC9D,MAAM,EAAE,KAAK,IAAI,EAAE;wBACjB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBACrD,CAAC;iBACF,CAAC,CAAC;gBACH,IAAI,MAAM,KAAK,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrC,aAAa,EAAE,kBAAkB,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,CACV,CAAC,CAAC,MAAM,EACR,oBAAoB,EACpB,CAAC,EACD,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAC7D,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;QAC5D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;CACF"}

package/dist/packages/runtime/dist/worker-trust-store.d.ts

@@ -0,0 +1,111 @@
+import * as fs from 'node:fs';
+import type { KeyPair, TaskManifest, Json } from '../../core/dist/index.js';
+import type { LocalIdentityOptions } from './local-identity.js';
+import type { ConnectionData, ConnectionState, ConnectionStatus, ConnectionTrust, ConnectionRecord, ConnectionPeer, PriorApprovedPeer, RecordIncomingConnection, RecordOutgoingConnection, ApproveConnectionInput, ApplyConnectionAcceptedInput, BindInviteFirstUseInput, ConnectionOutboxRecord, ConnectionPersistence } from './connection-records.js';
+import type { StoredControlRecord } from './connection-persistence.js';
+export type PeerTrust = 'unknown' | 'limited' | 'trusted' | 'denied';
+export interface IntakeRequest {
+    id: string;
+    requesterOwnerDid: string;
+    requesterAgentDid: string;
+    taskId: string;
+    digest: string;
+    title?: string;
+    description?: string;
+    scope: {
+        skillId?: string;
+        taskType?: string;
+    };
+    budget: TaskManifest['budget'];
+    capabilities: number;
+    receivedAt: number;
+    expiresAt: number;
+    state: 'pending' | 'approved' | 'denied' | 'expired';
+    trust?: 'limited' | 'trusted';
+}
+interface LegacyTrustState {
+    version: 1;
+    workerOwnerDid: string;
+    requests: IntakeRequest[];
+    grants: Array<{
+        did: string;
+        trust: 'limited' | 'trusted';
+        expiresAt: number;
+        origin?: 'explicit-legacy';
+    }>;
+    denials: string[];
+}
+export type ConnectionTrustState = Omit<LegacyTrustState, 'version'> & ConnectionData & {
+    version: 2;
+    controls?: StoredControlRecord[];
+};
+export interface WorkerIntakeStore {
+    level(did: string): PeerTrust;
+    connectionState?(did: string): ConnectionState;
+    enqueue(manifest: TaskManifest, input: Json): void;
+    pendingTask(did: string, taskId: string, proposalDigest: string): boolean;
+}
+export declare const PENDING_MESSAGE = "The worker owner must review this requester. No task was accepted. Do not retry automatically.";
+export declare function workerIntakePath(ownerDid: string, options?: LocalIdentityOptions): string;
+export declare class WorkerTrustStore implements WorkerIntakeStore, ConnectionPersistence {
+    private readonly owner;
+    private readonly options;
+    private state;
+    private times;
+    private readonly io;
+    private readonly platform;
+    private readonly now;
+    constructor(owner: KeyPair, options?: {
+        path?: string;
+        fs?: typeof fs;
+        platform?: NodeJS.Platform;
+        now?: () => number;
+    });
+    private read;
+    private mutate;
+    get ownerDid(): string;
+    controlSnapshot(): StoredControlRecord[];
+    updateControls<T>(change: (state: ConnectionTrustState) => T): T;
+    level(did: string): PeerTrust;
+    hasExplicitLegacyGrant(did: string): boolean;
+    hasTrustedGrant(): boolean;
+    list(): IntakeRequest[];
+    pendingTask(did: string, taskId: string, _proposalDigest: string): boolean;
+    /** Connection projection is separate from level(), which retains legacy grant semantics. */
+    connectionState(peerOwnerDid: string): ConnectionState;
+    connectionLevel(peerOwnerDid: string): ConnectionTrust;
+    /** Read one local snapshot without polling, writing, pruning or changing consent. */
+    connectionStatus(peerOwnerDid: string): ConnectionStatus;
+    listConnections(): Array<(ConnectionRecord | {
+        peerOwnerDid: string;
+        peerDisplayName?: string;
+    }) & {
+        state: Exclude<ConnectionState, 'none'>;
+    }>;
+    listPriorApprovedPeers(): PriorApprovedPeer[];
+    private mutateConnections;
+    private assertAvailable;
+    private recordOffer;
+    recordOutgoing(input: RecordOutgoingConnection): void;
+    recordIncoming(input: RecordIncomingConnection): void;
+    private queueAcceptance;
+    approveConnection(input: ApproveConnectionInput): void;
+    applyAccepted(input: ApplyConnectionAcceptedInput): void;
+    rejectConnection(peerOwnerDid: string): void;
+    private removeConnection;
+    withdrawConnection(peerOwnerDid: string, requestId: string): void;
+    finishRequestReview(id: string, discard?: boolean): void;
+    disconnect(peerOwnerDid: string): void;
+    block(peerOwnerDid: string): void;
+    unblock(peerOwnerDid: string): void;
+    /** A validated task can redeem inviter consent without granting execution or recipient consent. */
+    redeemTaskInvite(invite: import('../../core/dist/index.js').Invite, peer: ConnectionPeer, connectionId: string): 'first' | 'same' | 'other' | 'inactive';
+    bindInviteFirstUse(input: BindInviteFirstUseInput): 'first' | 'same' | 'other';
+    listConnectionOutbox(): ConnectionOutboxRecord[];
+    markConnectionEventDelivered(eventId: string): void;
+    /** One process-local limiter shared by task and connection intake on this store. */
+    consumeAdmission(did: string, id: string): void;
+    enqueue(manifest: TaskManifest, input: Json): void;
+    decide(id: string, decision: 'approve' | 'deny', trust?: 'limited' | 'trusted'): void;
+}
+export {};