taskflow-mcp-core 0.3.0-beta.1.1 → 1.0.0

package/dist/control/runtime-checkpoint.js

@@ -0,0 +1,39 @@
+/** Exact engine checkpoints; recovery never infers process death from timeouts. */
+import { randomUUID } from "node:crypto";
+import { isQuiescentApprovalCheckpoint, resumeSourceAfterOwnerExit } from "taskflow-core";
+import { defaultProcessIdentity } from "./singleton.js";
+import { ControlError } from "./errors.js";
+export function isWaitingRuntimeCheckpoint(checkpoint) {
+    return !!checkpoint && checkpoint.state.status === "running" &&
+        isQuiescentApprovalCheckpoint(checkpoint.state, checkpoint.state.foregroundOwner?.approvalWait ?? []);
+}
+export function ownRuntimeState(state) {
+    const writer = defaultProcessIdentity();
+    state.foregroundOwner = { version: 1, pid: writer.pid, instanceId: randomUUID(), startedAt: Date.now(),
+        ...(state.foregroundOwner?.approvalWait ? { approvalWait: [...state.foregroundOwner.approvalWait] } : {}) };
+    return writer;
+}
+export function captureRuntimeCheckpoint(state, writer, waiting) {
+    const snapshot = structuredClone(state);
+    const running = Object.values(snapshot.phases).filter(phase => phase.status === "running").map(phase => phase.id).sort();
+    if (snapshot.foregroundOwner) {
+        delete snapshot.foregroundOwner.approvalWait;
+        if (running.length && running.every(id => waiting.has(id)) && isQuiescentApprovalCheckpoint(snapshot, running))
+            snapshot.foregroundOwner.approvalWait = running;
+    }
+    return { state: snapshot, writer: { ...writer } };
+}
+export function recoverRuntimeCheckpoint(checkpoint, cwd) {
+    const state = checkpoint?.state, writer = checkpoint?.writer;
+    if (!state || !writer || !writer.birthToken || !["native", "opaque"].includes(writer.birthTokenKind)
+        || writer.pid !== state.foregroundOwner?.pid || state.status !== "running") {
+        throw new ControlError("TF_RECONCILE_REQUIRED", "runtime has no verifiable approval checkpoint writer");
+    }
+    // Core requires an actual ESRCH process probe. A live reused PID, EPERM,
+    // unavailable OS identity, and every other unknown remain closed. No kill is sent.
+    const source = resumeSourceAfterOwnerExit(state, { cwd });
+    if (!source.ok)
+        throw new ControlError("TF_RECONCILE_REQUIRED", source.errors.join("; "));
+    return structuredClone(state);
+}
+//# sourceMappingURL=runtime-checkpoint.js.map

package/dist/control/runtime-checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-checkpoint.js","sourceRoot":"","sources":["../../../taskflow-control/src/runtime-checkpoint.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,0BAA0B,EAAiB,MAAM,eAAe,CAAC;AACzG,OAAO,EAAE,sBAAsB,EAA4B,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAO3C,MAAM,UAAU,0BAA0B,CAAC,UAAyC;IACnF,OAAO,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;QAC3D,6BAA6B,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,eAAe,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAe;IAC9C,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAC;IACxC,KAAK,CAAC,eAAe,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrG,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7G,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAe,EAAE,MAA2B,EAAE,OAA4B;IAClH,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzH,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC,eAAe,CAAC,YAAY,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,6BAA6B,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,QAAQ,CAAC,eAAe,CAAC,YAAY,GAAG,OAAO,CAAC;IACjK,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAyC,EAAE,GAAW;IAC9F,MAAM,KAAK,GAAG,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,MAAM,CAAC;IAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;WAChG,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,eAAe,EAAE,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7E,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,sDAAsD,CAAC,CAAC;IACzG,CAAC;IACD,yEAAyE;IACzE,mFAAmF;IACnF,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/control/runtime-provider.d.ts

@@ -0,0 +1,100 @@
+import { type Taskflow, type RuntimeDeps, type ApprovalRequest, type ApprovalDecision } from "taskflow-core";
+import type { BoundPlan } from "./schema/plan.ts";
+import type { ExecutionOwner } from "./schema/te-mirrors.ts";
+import type { PrepareResult, ProviderEvent, PollResult, CancelResult, CollectResult, ReconcileResult, SubmitResult } from "./schema/transport.ts";
+import type { ExecutionProvider } from "./te-provider.ts";
+import type { EvidenceDiagnostic } from "./store/evidence-explanation.ts";
+import { type RuntimeCheckpoint } from "./runtime-checkpoint.ts";
+export interface RuntimeExecutionInput {
+    plan: BoundPlan;
+    flow: Taskflow;
+    args: Record<string, unknown>;
+    projectRoot: string;
+    principal: string;
+    owner: ExecutionOwner;
+    controlDomainId: string;
+    beforeDispatch: () => Promise<void>;
+    dispatchFence?: <T>(activate: () => T) => Promise<T>;
+    requestApproval?: (request: ApprovalRequest) => Promise<ApprovalDecision>;
+}
+export interface RuntimeObservation {
+    runId: string;
+    projectId: string;
+    controlDomainId: string;
+    providerJobHandle: string;
+    status: "running" | "completed" | "failed" | "blocked" | "cancelled" | "ambiguous";
+    finalOutput?: string;
+    evidenceCommit: string;
+    noPendingResourceIntents: boolean;
+}
+interface DurableJob {
+    version: 1;
+    runId: string;
+    projectId: string;
+    controlDomainId: string;
+    owner: ExecutionOwner;
+    projectRoot: string;
+    planHash: string;
+    providerJobHandle: string;
+    status: RuntimeObservation["status"];
+    finalOutput?: string;
+    noPendingResourceIntents: boolean;
+    execution?: Pick<RuntimeExecutionInput, "plan" | "flow" | "args" | "projectRoot" | "principal" | "owner" | "controlDomainId">;
+    checkpoint?: RuntimeCheckpoint;
+    digest: string;
+}
+export declare class RuntimeTeExecutionProvider implements ExecutionProvider {
+    #private;
+    readonly kind: "te-resources";
+    readonly directory: string;
+    constructor(directory: string, deps?: Pick<RuntimeDeps, "agents" | "runTask" | "usageAccounting">);
+    probe(): Promise<{
+        outcome: "accepted";
+        capabilities: {
+            processIsolation: "none";
+            resolution: "contained";
+            mutationMediation: "brokered";
+            revocation: "admission-only";
+            baselinePolicyId: string;
+            hostProbeSha256: string;
+        };
+    }>;
+    prepare(): Promise<PrepareResult>;
+    prepareExecution(input: RuntimeExecutionInput): Promise<PrepareResult>;
+    submit(req: {
+        preparationId: string;
+        owner: ExecutionOwner;
+        controlDomainId: string;
+    }): Promise<SubmitResult>;
+    hasLiveExecution(handle: string): boolean;
+    applyApprovalPlan(handle: string, phaseId: string, flow: Taskflow): Promise<void>;
+    /** Read actual persisted execution evidence, including terminal checkpoints.
+     * Availability is not a claim that this checkpoint is safe to resume. */
+    readDiagnostic(handle: string): EvidenceDiagnostic | undefined;
+    recoverableExecution(handle: string): NonNullable<DurableJob["execution"]>;
+    resumeExecution(handle: string, input: RuntimeExecutionInput): Promise<SubmitResult>;
+    observe(handle: string): Promise<RuntimeObservation>;
+    quiescence(handle: string): Promise<{
+        proofId: string;
+        quiescent: boolean;
+        noPendingResourceIntents: boolean;
+    }>;
+    poll(req: {
+        providerJobHandle: string;
+    }): Promise<PollResult>;
+    cancel(req: {
+        providerJobHandle: string;
+    }): Promise<CancelResult>;
+    collect(req: {
+        providerJobHandle: string;
+    }): Promise<CollectResult>;
+    reconcile(req: {
+        providerJobHandle: string;
+    }): Promise<ReconcileResult>;
+    watch(req: {
+        providerJobHandle: string;
+    }): AsyncIterable<ProviderEvent>;
+    wait(handle: string): Promise<RuntimeObservation>;
+}
+export {};
+//# sourceMappingURL=runtime-provider.d.ts.map

package/dist/control/runtime-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-provider.d.ts","sourceRoot":"","sources":["../../../taskflow-control/src/runtime-provider.ts"],"names":[],"mappings":"AAOA,OAAO,EAAqG,KAAK,QAAQ,EAAiB,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAG/N,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAClJ,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,OAAO,EAAmG,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAGlK,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IACvG,KAAK,EAAE,cAAc,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAC/C,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,aAAa,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACrD,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC1E;AACD,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IACrF,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;IACnF,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,wBAAwB,EAAE,OAAO,CAAC;CAChF;AACD,UAAU,UAAU;IACnB,OAAO,EAAE,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAC7F,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IACjE,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,wBAAwB,EAAE,OAAO,CAAC;IAC9F,SAAS,CAAC,EAAE,IAAI,CAAC,qBAAqB,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,WAAW,GAAG,OAAO,GAAG,iBAAiB,CAAC,CAAC;IAC9H,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CACf;AAID,qBAAa,0BAA2B,YAAW,iBAAiB;;IACnE,QAAQ,CAAC,IAAI,EAAG,cAAc,CAAU;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAM3B,YAAY,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,SAAS,GAAG,iBAAiB,CAAkB,EAIhH;IACK,KAAK;iBACQ,UAAU;;YAA2B,gBAAgB,EAAE,MAAM;YAAW,UAAU,EAAE,WAAW;YAChH,iBAAiB,EAAE,UAAU;YAAW,UAAU,EAAE,gBAAgB;YAAW,gBAAgB;YAC/F,eAAe;;OAChB;IACK,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,CAA4G;IAC7I,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,CAQ3E;IAYK,MAAM,CAAC,GAAG,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,cAAc,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAOlH;IACD,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAmC;IACtE,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBtF;IACD;6EACyE;IACzE,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAY7D;IACD,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAQzE;IACK,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC,CAQzF;IAgDK,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAMzD;IACK,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,wBAAwB,EAAE,OAAO,CAAA;KAAE,CAAC,CAKpH;IACK,IAAI,CAAC,GAAG,EAAE;QAAE,iBAAiB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAmQ;IAChU,MAAM,CAAC,GAAG,EAAE;QAAE,iBAAiB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAmV;IACpZ,OAAO,CAAC,GAAG,EAAE;QAAE,iBAAiB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAiO;IACpS,SAAS,CAAC,GAAG,EAAE;QAAE,iBAAiB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAA0O;IAChT,KAAK,CAAC,GAAG,EAAE;QAAE,iBAAiB,EAAE,MAAM,CAAA;KAAE,GAAG,aAAa,CAAC,aAAa,CAAC,CAAsS;IAC9W,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAwE;CAC/H"}

package/dist/control/runtime-provider.js

@@ -0,0 +1,258 @@
+/** Concrete TE provider. A durable intent precedes execution; only an awaited
+ * runtime plus settled TE journal can prove terminal state. Restart can continue
+ * an exact approval checkpoint after the old writer is proven dead; every other
+ * lost live handle remains ambiguous and is never re-submitted. */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { randomUUID } from "node:crypto";
+import { executeTaskflow, directoryIdentity, validateTaskflow, validateInvocationArgs, compileTaskflowToIR } from "taskflow-core";
+import { createResolveOnlyWorkspaceSession, WriteIntentJournal } from "taskflow-core/control-execution";
+import { commandRequestHash } from "./schema/commands.js";
+import { writeJsonAtomicHardened } from "./store/store.js";
+import { ControlError } from "./errors.js";
+import { captureRuntimeCheckpoint, isWaitingRuntimeCheckpoint, ownRuntimeState, recoverRuntimeCheckpoint } from "./runtime-checkpoint.js";
+import { validateApprovalPlanEdit } from "./approval-edits.js";
+const unavailable = (message) => ({ outcome: "ambiguous", message });
+export class RuntimeTeExecutionProvider {
+    kind = "te-resources";
+    directory;
+    #identity;
+    #preparations = new Map();
+    #live = new Map();
+    #waiting = new Set();
+    #deps;
+    constructor(directory, deps = { agents: [] }) {
+        fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+        if (fs.lstatSync(directory).isSymbolicLink())
+            throw new ControlError("TF_DURABILITY_FAILED", "provider directory cannot be a symbolic link");
+        this.directory = fs.realpathSync(directory);
+        this.#identity = fs.statSync(this.directory);
+        this.#deps = deps;
+    }
+    async probe() {
+        return { outcome: "accepted", capabilities: { processIsolation: "none", resolution: "contained",
+                mutationMediation: "brokered", revocation: "admission-only", baselinePolicyId: "taskflow-resolve-only",
+                hostProbeSha256: commandRequestHash({ backend: "taskflow-resolve-only", platform: process.platform, arch: process.arch, node: process.version, processIsolation: "none" }) } };
+    }
+    async prepare() { throw new ControlError("TF_COMMAND_FAILED", "concrete TE preparation requires linked execution input"); }
+    async prepareExecution(input) {
+        const check = validateTaskflow(input.flow);
+        const errors = [...check.errors, ...validateInvocationArgs(input.flow, input.args)];
+        if (errors.length)
+            throw new ControlError("TF_COMMAND_FAILED", errors.join("; "));
+        await compileTaskflowToIR(input.flow); // real compilation, not a caller-supplied plan claim
+        const preparationId = randomUUID();
+        this.#preparations.set(preparationId, { ...input, plan: structuredClone(input.plan), flow: structuredClone(input.flow), args: structuredClone(input.args) });
+        return { outcome: "accepted", fulfillment: { preparationId, enforcementCapabilities: input.plan.enforcementCapabilities } };
+    }
+    #check() { const st = fs.lstatSync(this.directory); if (!st.isDirectory() || st.dev !== this.#identity.dev || st.ino !== this.#identity.ino)
+        throw new ControlError("TF_DURABILITY_FAILED", "provider directory identity changed"); }
+    #file(handle) { if (!/^[a-f0-9-]{36}$/.test(handle))
+        throw new ControlError("TF_COMMAND_FAILED", "invalid provider handle"); this.#check(); return path.join(this.directory, `${handle}.json`); }
+    #read(handle) {
+        const file = this.#file(handle);
+        let raw;
+        try {
+            if (fs.lstatSync(file).isSymbolicLink())
+                throw new Error("symbolic link");
+            raw = JSON.parse(fs.readFileSync(file, "utf8"));
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return undefined;
+            throw new ControlError("TF_DURABILITY_FAILED", "provider record unavailable or corrupt");
+        }
+        const { digest, ...body } = raw;
+        if (raw.version !== 1 || raw.providerJobHandle !== handle || digest !== commandRequestHash(body))
+            throw new ControlError("TF_DURABILITY_FAILED", "provider record checksum mismatch");
+        this.#check();
+        return raw;
+    }
+    #write(job) { this.#check(); writeJsonAtomicHardened(this.#file(job.providerJobHandle), { ...job, digest: commandRequestHash(job) }); this.#check(); }
+    async submit(req) {
+        const input = this.#preparations.get(req.preparationId);
+        if (!input || commandRequestHash(req.owner) !== commandRequestHash(input.owner) || req.controlDomainId !== input.controlDomainId)
+            throw new ControlError("TF_AUTHORITY_REVOKED", "preparation identity does not match");
+        this.#preparations.delete(req.preparationId); // one-shot even if dispatch fails
+        const handle = input.owner.runId;
+        if (this.#read(handle))
+            return unavailable("existing durable job must be reconciled, never resubmitted");
+        return this.#start(handle, input);
+    }
+    hasLiveExecution(handle) { return this.#live.has(handle); }
+    async applyApprovalPlan(handle, phaseId, flow) {
+        const saved = this.#read(handle);
+        if (!saved?.execution || !saved.checkpoint || !isWaitingRuntimeCheckpoint(saved.checkpoint))
+            throw new ControlError("TF_RECONCILE_REQUIRED", "plan edit requires a durable approval checkpoint");
+        const live = this.#live.get(handle);
+        if (!live)
+            recoverRuntimeCheckpoint(saved.checkpoint, saved.projectRoot);
+        const edit = await validateApprovalPlanEdit(saved.checkpoint.state, phaseId, flow);
+        if (this.#read(handle)?.digest !== saved.digest)
+            throw new ControlError("TF_STALE_VERSION", "checkpoint changed during plan edit validation");
+        const state = live?.state ?? saved.checkpoint.state;
+        // Fixed DAG layers retain these phase objects. Update only validated,
+        // unstarted phase bodies so their next dispatch sees the newly linked plan.
+        for (let i = 0; i < state.def.phases.length; i++) {
+            const phase = state.def.phases[i], next = edit.flow.phases[i];
+            if (commandRequestHash(phase) === commandRequestHash(next))
+                continue;
+            for (const key of Object.keys(phase))
+                delete phase[key];
+            Object.assign(phase, structuredClone(next));
+        }
+        state.flowDefHash = edit.irHash;
+        state.phaseFingerprints = undefined;
+        state.updatedAt = Date.now();
+        if (live) {
+            live.job.execution.flow = state.def;
+            live.persist();
+        }
+        else {
+            const { digest: _digest, ...job } = saved;
+            job.execution.flow = state.def;
+            this.#write(job);
+        }
+    }
+    /** Read actual persisted execution evidence, including terminal checkpoints.
+     * Availability is not a claim that this checkpoint is safe to resume. */
+    readDiagnostic(handle) {
+        const job = this.#read(handle);
+        if (!job?.checkpoint)
+            return undefined;
+        const state = job.checkpoint.state;
+        if (!state || job.runId !== handle || state.runId !== handle || !/^[a-f0-9-]{36}$/.test(job.projectId)
+            || job.execution && (job.execution.plan.projectId !== job.projectId || job.execution.plan.controlDomainId !== job.controlDomainId
+                || job.execution.controlDomainId !== job.controlDomainId || job.execution.plan.boundPlanHash !== job.planHash
+                || job.execution.projectRoot !== job.projectRoot || commandRequestHash(job.execution.flow) !== commandRequestHash(state.def))) {
+            throw new ControlError("TF_DURABILITY_FAILED", "diagnostic checkpoint execution identity mismatch");
+        }
+        return { runId: job.runId, projectId: job.projectId, controlDomainId: job.controlDomainId, state: structuredClone(state),
+            controlDirectory: path.join(this.directory, "resources", job.projectId), projectRoot: job.projectRoot };
+    }
+    recoverableExecution(handle) {
+        const job = this.#read(handle);
+        if (!job || job.status !== "running" || !job.execution || this.#live.has(handle))
+            throw new ControlError("TF_RECONCILE_REQUIRED", "runtime is not a recoverable orphan");
+        recoverRuntimeCheckpoint(job.checkpoint, job.projectRoot);
+        if (job.execution.plan.boundPlanHash !== job.planHash || job.execution.plan.projectId !== job.projectId
+            || job.execution.controlDomainId !== job.controlDomainId || job.checkpoint?.state.runId !== handle
+            || commandRequestHash(job.execution.flow) !== commandRequestHash(job.checkpoint.state.def))
+            throw new ControlError("TF_DURABILITY_FAILED", "checkpoint execution identity mismatch");
+        return structuredClone(job.execution);
+    }
+    async resumeExecution(handle, input) {
+        const execution = this.recoverableExecution(handle), job = this.#read(handle);
+        if (input.owner.runId !== handle || commandRequestHash(execution.plan) !== commandRequestHash(input.plan)
+            || commandRequestHash(execution.flow) !== commandRequestHash(input.flow) || commandRequestHash(execution.args) !== commandRequestHash(input.args)
+            || execution.projectRoot !== input.projectRoot || execution.controlDomainId !== input.controlDomainId)
+            throw new ControlError("TF_AUTHORITY_REVOKED", "resume cannot alter the linked execution");
+        const quiet = await this.quiescence(handle);
+        if (!quiet.quiescent)
+            throw new ControlError("TF_RECONCILE_REQUIRED", "checkpoint has unresolved TE effects");
+        return this.#start(handle, input, job);
+    }
+    async #start(handle, input, previous) {
+        const abort = new AbortController();
+        const controlDirectory = path.join(this.directory, "resources", input.plan.projectId);
+        const session = await createResolveOnlyWorkspaceSession({ invocationRoot: input.projectRoot, controlDirectory, principalId: input.principal, signal: abort.signal });
+        const binding = await session.bindPhase({ invocationRoot: input.projectRoot, runId: input.owner.runId, phaseId: input.owner.phaseId, argDefinitions: input.flow.args ?? {}, argValues: input.args });
+        await input.beforeDispatch();
+        const activate = () => {
+            const current = this.#read(handle);
+            if (this.#live.has(handle) || (previous ? current?.digest !== previous.digest : !!current))
+                throw new ControlError("TF_RECONCILE_REQUIRED", "runtime writer changed before dispatch");
+            const state = previous ? recoverRuntimeCheckpoint(previous.checkpoint, input.projectRoot)
+                : { runId: input.owner.runId, flowName: input.flow.name, def: input.flow, args: input.args, status: "running", phases: {}, createdAt: Date.now(), updatedAt: Date.now(), cwd: input.projectRoot, invocationRootSnapshot: directoryIdentity(input.projectRoot) };
+            const writer = ownRuntimeState(state), waiting = new Set();
+            const job = { version: 1, runId: input.owner.runId, projectId: input.plan.projectId, controlDomainId: input.controlDomainId,
+                owner: input.owner, projectRoot: input.projectRoot, planHash: input.plan.boundPlanHash, providerJobHandle: handle, status: "running", noPendingResourceIntents: false,
+                execution: { plan: input.plan, flow: input.flow, args: input.args, projectRoot: input.projectRoot, principal: input.principal, owner: input.owner, controlDomainId: input.controlDomainId } };
+            const persist = () => { job.checkpoint = captureRuntimeCheckpoint(state, writer, waiting); this.#write(job); };
+            // Claim the checkpoint before execution. Any crash after this intent and before
+            // the next verified wait is ambiguous, so a retry cannot duplicate dispatch.
+            persist();
+            const live = { abort, promise: Promise.resolve(), state, job, persist };
+            this.#live.set(handle, live);
+            live.promise = (async () => {
+                try {
+                    const result = await executeTaskflow(state, { ...this.#deps, cwd: input.projectRoot, signal: abort.signal,
+                        workspaceSession: session, workspaceControlDirectory: controlDirectory, cwdBridgeMode: "resolve-only",
+                        _workspaceBinding: binding, _cwdBoundary: input.projectRoot, _disableCache: true,
+                        ...(previous ? { _approvalCheckpointContinuation: { runId: state.runId } } : {}),
+                        persist: () => { try {
+                            persist();
+                        }
+                        catch (error) {
+                            abort.abort();
+                            throw error;
+                        } },
+                        requestApproval: input.requestApproval ? async (request) => {
+                            waiting.add(request.phaseId);
+                            this.#waiting.add(handle);
+                            try {
+                                persist();
+                                return await input.requestApproval(request);
+                            }
+                            finally {
+                                waiting.delete(request.phaseId);
+                                if (!waiting.size)
+                                    this.#waiting.delete(handle);
+                                persist();
+                            }
+                        } : undefined });
+                    const intents = await new WriteIntentJournal({ directory: controlDirectory, journalEpoch: 1 }).listIntents();
+                    const clean = !intents.some(intent => intent.owner.runId === input.owner.runId && ["pending", "dirty-unknown"].includes(intent.status));
+                    const status = !clean ? "ambiguous" : abort.signal.aborted ? "cancelled" : result.state.status === "paused" ? "ambiguous" : result.state.status;
+                    this.#write({ ...job, status, finalOutput: result.finalOutput, noPendingResourceIntents: clean });
+                }
+                catch {
+                    this.#write({ ...job, status: "ambiguous", noPendingResourceIntents: false });
+                }
+                finally {
+                    this.#live.delete(handle);
+                }
+            })();
+            return { outcome: "accepted", providerJobHandle: handle };
+        };
+        return input.dispatchFence ? input.dispatchFence(activate) : activate();
+    }
+    #recoverable(job) {
+        if (job.status !== "running" || !job.execution)
+            return false;
+        try {
+            recoverRuntimeCheckpoint(job.checkpoint, job.projectRoot);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async observe(handle) {
+        const job = this.#read(handle);
+        if (!job)
+            throw new ControlError("TF_RECONCILE_REQUIRED", "provider has no durable execution evidence");
+        const status = job.status === "running" && !this.#live.has(handle) && !this.#recoverable(job) ? "ambiguous" : job.status;
+        return { runId: job.runId, projectId: job.projectId, controlDomainId: job.controlDomainId, providerJobHandle: handle, status,
+            finalOutput: job.finalOutput, evidenceCommit: job.digest, noPendingResourceIntents: job.noPendingResourceIntents };
+    }
+    async quiescence(handle) {
+        const job = this.#read(handle);
+        if (!job)
+            return { proofId: "unobserved", quiescent: false, noPendingResourceIntents: false };
+        const intents = await new WriteIntentJournal({ directory: path.join(this.directory, "resources", job.projectId), journalEpoch: 1 }).listIntents();
+        const clean = !intents.some(intent => intent.owner.runId === job.runId && ["pending", "dirty-unknown"].includes(intent.status));
+        return { proofId: commandRequestHash({ digest: job.digest, intents }), quiescent: clean && (this.#waiting.has(handle) && isWaitingRuntimeCheckpoint(job.checkpoint) || !this.#live.has(handle) && (this.#recoverable(job) || !["running", "ambiguous"].includes(job.status))), noPendingResourceIntents: clean };
+    }
+    async poll(req) { const s = await this.observe(req.providerJobHandle); return s.status === "ambiguous" ? unavailable("runtime outcome is not proven") : { outcome: "accepted", status: s.status === "running" ? "running" : s.status === "completed" ? "completed" : "failed" }; }
+    async cancel(req) { const live = this.#live.get(req.providerJobHandle); if (live) {
+        live.abort.abort();
+        await live.promise;
+    } const s = await this.observe(req.providerJobHandle); return s.status === "ambiguous" || s.status === "running" ? unavailable("quiescent cancellation is not proven") : { outcome: "accepted", cancelled: s.status === "cancelled" }; }
+    async collect(req) { const s = await this.observe(req.providerJobHandle); return ["running", "ambiguous"].includes(s.status) ? unavailable("runtime output is not terminal") : { outcome: "accepted", providerJobHandle: req.providerJobHandle }; }
+    async reconcile(req) { const s = await this.observe(req.providerJobHandle); return s.status === "ambiguous" ? { outcome: "accepted", providerState: "exhausted" } : { outcome: "accepted", providerState: s.status === "running" ? "running" : "terminal" }; }
+    async *watch(req) { const live = this.#live.get(req.providerJobHandle); if (live)
+        await live.promise; const s = await this.observe(req.providerJobHandle); yield { kind: "terminal", outcome: s.status === "completed" ? "completed" : s.status === "ambiguous" || s.status === "running" ? "ambiguous" : "failed" }; }
+    async wait(handle) { await this.#live.get(handle)?.promise; return this.observe(handle); }
+}
+//# sourceMappingURL=runtime-provider.js.map

package/dist/control/runtime-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-provider.js","sourceRoot":"","sources":["../../../taskflow-control/src/runtime-provider.ts"],"names":[],"mappings":"AAAA;;;mEAGmE;AACnE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,mBAAmB,EAA+F,MAAM,eAAe,CAAC;AAC/N,OAAO,EAAE,iCAAiC,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAK1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,eAAe,EAAE,wBAAwB,EAA0B,MAAM,yBAAyB,CAAC;AAClK,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAuB/D,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;AAEtF,MAAM,OAAO,0BAA0B;IAC7B,IAAI,GAAG,cAAuB,CAAC;IAC/B,SAAS,CAAS;IAClB,SAAS,CAA+B;IACxC,aAAa,GAAG,IAAI,GAAG,EAAiC,CAAC;IACzD,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;IACnC,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7B,KAAK,CAA8D;IAC5E,YAAY,SAAiB,EAAE,IAAI,GAAgE,EAAE,MAAM,EAAE,EAAE,EAAE;QAChH,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,8CAA8C,CAAC,CAAC;QAC7I,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAAC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IAC9G,CAAC;IACD,KAAK,CAAC,KAAK;QACV,OAAO,EAAE,OAAO,EAAE,UAAmB,EAAE,YAAY,EAAE,EAAE,gBAAgB,EAAE,MAAe,EAAE,UAAU,EAAE,WAAoB;gBACzH,iBAAiB,EAAE,UAAmB,EAAE,UAAU,EAAE,gBAAyB,EAAE,gBAAgB,EAAE,uBAAuB;gBACxH,eAAe,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;IACjL,CAAC;IACD,KAAK,CAAC,OAAO,KAA6B,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,yDAAyD,CAAC,CAAC,CAAC,CAAC;IACnJ,KAAK,CAAC,gBAAgB,CAAC,KAA4B;QAClD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpF,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClF,MAAM,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,qDAAqD;QAC5F,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7J,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,uBAAuB,EAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,CAAC;IAC7H,CAAC;IACD,MAAM,KAAK,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG;QAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,qCAAqC,CAAC,CAAC,CAAC,CAAC;IACrO,KAAK,CAAC,MAAc,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IACzM,KAAK,CAAC,MAAc;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,GAAe,CAAC;QAAC,IAAI,CAAC;YAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QACxJ,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAAC,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,wCAAwC,CAAC,CAAC;QAAC,CAAC;QACrL,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QAChC,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,GAAG,CAAC,iBAAiB,KAAK,MAAM,IAAI,MAAM,KAAK,kBAAkB,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,mCAAmC,CAAC,CAAC;QACtL,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,OAAO,GAAG,CAAC;IAC3B,CAAC;IACD,MAAM,CAAC,GAA+B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClL,KAAK,CAAC,MAAM,CAAC,GAA8E;QAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;YAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,qCAAqC,CAAC,CAAC;QACxN,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,kCAAkC;QAChF,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QACjC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,WAAW,CAAC,4DAA4D,CAAC,CAAC;QACzG,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,gBAAgB,CAAC,MAAc,IAAa,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5E,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,OAAe,EAAE,IAAc;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,kDAAkD,CAAC,CAAC;QACjM,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,wBAAwB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,gDAAgD,CAAC,CAAC;QAC9I,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACpD,sEAAsE;QACtE,4EAA4E;QAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;YAChE,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,kBAAkB,CAAC,IAAI,CAAC;gBAAE,SAAS;YACrE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAQ,KAAiC,CAAC,GAAG,CAAC,CAAC;YACrF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;QAAC,KAAK,CAAC,iBAAiB,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnG,IAAI,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,SAAU,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC;YAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;aAC9D,CAAC;YAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC;YAAC,GAAG,CAAC,SAAU,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACvG,CAAC;IACD;6EACyE;IACzE,cAAc,CAAC,MAAc;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,UAAU;YAAE,OAAO,SAAS,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;eAClG,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe;mBAC7H,GAAG,CAAC,SAAS,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,KAAK,GAAG,CAAC,QAAQ;mBAC1G,GAAG,CAAC,SAAS,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW,IAAI,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACjI,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,mDAAmD,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;YACvH,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;IAC1G,CAAC;IACD,oBAAoB,CAAC,MAAc;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,qCAAqC,CAAC,CAAC;QACzK,wBAAwB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,KAAK,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS;eACnG,GAAG,CAAC,SAAS,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,KAAK,MAAM;eAC/F,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,wCAAwC,CAAC,CAAC;QACtL,OAAO,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,KAA4B;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC;QAC/E,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC;eACrG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC;eAC9I,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,SAAS,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;YAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,0CAA0C,CAAC,CAAC;QACnM,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,sCAAsC,CAAC,CAAC;QAC9G,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,KAA4B,EAAE,QAAqB;QAC/E,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrK,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACrM,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAiB,EAAE;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,wCAAwC,CAAC,CAAC;YACtL,MAAM,KAAK,GAAa,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC;gBAClG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACjQ,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;YACnE,MAAM,GAAG,GAA+B,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtJ,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,wBAAwB,EAAE,KAAK;gBACrK,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC;YAC/L,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,GAAG,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/G,gFAAgF;YAChF,6EAA6E;YAC7E,OAAO,EAAE,CAAC;YACV,MAAM,IAAI,GAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/G,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC1B,IAAI,CAAC;oBACJ,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;wBACxG,gBAAgB,EAAE,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc;wBACrG,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,IAAI;wBAChF,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,+BAA+B,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChF,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;4BAAC,OAAO,EAAE,CAAC;wBAAC,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BAAC,KAAK,CAAC,KAAK,EAAE,CAAC;4BAAC,MAAM,KAAK,CAAC;wBAAC,CAAC,CAAC,CAAC;wBACnF,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;4BACxD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;4BAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;4BACxD,IAAI,CAAC;gCAAC,OAAO,EAAE,CAAC;gCAAC,OAAO,MAAM,KAAK,CAAC,eAAgB,CAAC,OAAO,CAAC,CAAC;4BAAC,CAAC;oCACxD,CAAC;gCAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gCAAC,IAAI,CAAC,OAAO,CAAC,IAAI;oCAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gCAAC,OAAO,EAAE,CAAC;4BAAC,CAAC;wBACzG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;oBAClB,MAAM,OAAO,GAAG,MAAM,IAAI,kBAAkB,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC7G,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;oBACxI,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;oBAChJ,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnG,CAAC;gBAAC,MAAM,CAAC;oBAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,CAAC;gBAAC,CAAC;wBAClF,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;YACvC,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC3D,CAAC,CAAC;QACF,OAAO,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzE,CAAC;IACD,YAAY,CAAC,GAAe;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7D,IAAI,CAAC;YAAC,wBAAwB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IACxG,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,MAAc;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,4CAA4C,CAAC,CAAC;QACxG,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACzH,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM;YAC3H,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,EAAE,GAAG,CAAC,wBAAwB,EAAE,CAAC;IACrH,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,MAAc;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC;QAC9H,MAAM,OAAO,GAAG,MAAM,IAAI,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClJ,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAChI,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,0BAA0B,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC;IAClT,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAkC,IAAyB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACtU,KAAK,CAAC,MAAM,CAAC,GAAkC,IAA2B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,OAAO,CAAC;IAAC,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,sCAAsC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC;IAC1Z,KAAK,CAAC,OAAO,CAAC,GAAkC,IAA4B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAC1S,KAAK,CAAC,SAAS,CAAC,GAAkC,IAA8B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACvT,KAAK,CAAC,CAAC,KAAK,CAAC,GAAkC,IAAkC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,IAAI;QAAE,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACpX,KAAK,CAAC,IAAI,CAAC,MAAc,IAAiC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;CAC/H"}

package/dist/control/schema/approval.d.ts

@@ -0,0 +1,108 @@
+/**
+ * Approval wire types (🟥 NEW) — 0.2.4 protocol upgrade per P15.
+ *
+ * Decisions: P15 — decision is a CommandRecord (kind approval.decide) with
+ * expectedRunVersion CAS (first commit wins); timeout → request `expired` and
+ * Run → `blocked` (never permanent paused); three durability modes; edit
+ * output → OutputContract check; edit plan → re-Link.
+ */
+import { Type } from "typebox";
+import { type ArtifactRef } from "./evidence.ts";
+export declare const ApprovalModeSchema: import("typebox").TUnsafe<string>;
+export type ApprovalMode = "compat-auto-reject" | "durable-optional" | "durable-required";
+export declare const ApprovalDecisionSchema: import("typebox").TUnsafe<string>;
+export type ApprovalDecision = "approve" | "reject" | "edit";
+export declare const ApprovalRequestStatusSchema: import("typebox").TUnsafe<string>;
+export type ApprovalRequestStatus = "pending" | "approved" | "rejected" | "edited" | "expired" | "cancelled";
+export declare const ApprovalRequestSchema: Type.TObject<{
+    approvalRequestId: Type.TString;
+    runId: Type.TString;
+    nodeInstanceId: Type.TString;
+    boundPlanHash: Type.TOptional<Type.TString>;
+    boundFragmentHash: Type.TOptional<Type.TString>;
+    expectedRunVersion: Type.TInteger;
+    allowedDecisions: Type.TArray<import("typebox").TUnsafe<string>>;
+    owner: Type.TString;
+    audience: Type.TOptional<Type.TArray<Type.TString>>;
+    requiredPrincipals: Type.TOptional<Type.TArray<Type.TString>>;
+    deadline: Type.TInteger;
+    timeoutPolicy: import("typebox").TUnsafe<string>;
+    status: import("typebox").TUnsafe<string>;
+    createdAt: Type.TInteger;
+    decidedAt: Type.TOptional<Type.TInteger>;
+    decisionCommandId: Type.TOptional<Type.TString>;
+    decisionEventId: Type.TOptional<Type.TString>;
+    decisionCommitSeq: Type.TOptional<Type.TInteger>;
+    editArtifactRef: Type.TOptional<Type.TObject<{
+        digest: Type.TString;
+        size: Type.TInteger;
+        mediaType: Type.TString;
+        storageClass: Type.TString;
+        redactionClass: Type.TString;
+    }>>;
+    editKind: Type.TOptional<import("typebox").TUnsafe<string>>;
+}>;
+export type ApprovalRequest = {
+    approvalRequestId: string;
+    runId: string;
+    nodeInstanceId: string;
+    boundPlanHash?: string;
+    boundFragmentHash?: string;
+    expectedRunVersion: number;
+    allowedDecisions: ApprovalDecision[];
+    owner: string;
+    audience?: string[];
+    requiredPrincipals?: string[];
+    deadline: number;
+    timeoutPolicy: "auto-reject" | "block" | "durable-expire";
+    status: ApprovalRequestStatus;
+    createdAt: number;
+    decidedAt?: number;
+    decisionCommandId?: string;
+    decisionEventId?: string;
+    decisionCommitSeq?: number;
+    editArtifactRef?: ArtifactRef;
+    editKind?: "output" | "plan";
+};
+/**
+ * ApprovalDecisionCommand (P15) = CommandRecord.kind "approval.decide" plus
+ * decision + expectedRunVersion CAS. A decision is a command; disclosure is
+ * re-authorized live (P12). First commit wins on expectedRunVersion.
+ */
+export declare const ApprovalDecisionCommandSchema: Type.TObject<{
+    commandId: Type.TString;
+    kind: Type.TLiteral<"approval.decide">;
+    requestHash: Type.TString;
+    callerPrincipal: Type.TString;
+    projectId: Type.TString;
+    controlDomainId: Type.TString;
+    approvalRequestId: Type.TString;
+    runId: Type.TString;
+    expectedRunVersion: Type.TInteger;
+    decision: import("typebox").TUnsafe<string>;
+    editArtifactRef: Type.TOptional<Type.TObject<{
+        digest: Type.TString;
+        size: Type.TInteger;
+        mediaType: Type.TString;
+        storageClass: Type.TString;
+        redactionClass: Type.TString;
+    }>>;
+    editKind: Type.TOptional<import("typebox").TUnsafe<string>>;
+    recordedAt: Type.TInteger;
+}>;
+export type ApprovalDecisionCommand = {
+    commandId: string;
+    kind: "approval.decide";
+    requestHash: string;
+    callerPrincipal: string;
+    projectId: string;
+    controlDomainId: string;
+    approvalRequestId: string;
+    runId: string;
+    expectedRunVersion: number;
+    decision: ApprovalDecision;
+    editArtifactRef?: ArtifactRef;
+    editKind?: "output" | "plan";
+    recordedAt: number;
+};
+//# sourceMappingURL=approval.d.ts.map

package/dist/control/schema/approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/approval.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAEpE,eAAO,MAAM,kBAAkB,mCAA6E,CAAC;AAC7G,MAAM,MAAM,YAAY,GAAG,oBAAoB,GAAG,kBAAkB,GAAG,kBAAkB,CAAC;AAE1F,eAAO,MAAM,sBAAsB,mCAA4C,CAAC;AAChF,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE7D,eAAO,MAAM,2BAA2B,mCAOtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAE7G,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwBjC,CAAC;AACF,MAAM,MAAM,eAAe,GAAG;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,aAAa,GAAG,OAAO,GAAG,gBAAgB,CAAC;IAC1D,MAAM,EAAE,qBAAqB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;CAC7B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;EAiBzC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,iBAAiB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,eAAe,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/dist/control/schema/approval.js

@@ -0,0 +1,65 @@
+/**
+ * Approval wire types (🟥 NEW) — 0.2.4 protocol upgrade per P15.
+ *
+ * Decisions: P15 — decision is a CommandRecord (kind approval.decide) with
+ * expectedRunVersion CAS (first commit wins); timeout → request `expired` and
+ * Run → `blocked` (never permanent paused); three durability modes; edit
+ * output → OutputContract check; edit plan → re-Link.
+ */
+import { Type } from "typebox";
+import { StringEnum } from "taskflow-core/typebox-helpers";
+import { Sha256HexSchema, UuidSchema } from "./common.js";
+import { ArtifactRefSchema } from "./evidence.js";
+export const ApprovalModeSchema = StringEnum(["compat-auto-reject", "durable-optional", "durable-required"]);
+export const ApprovalDecisionSchema = StringEnum(["approve", "reject", "edit"]);
+export const ApprovalRequestStatusSchema = StringEnum([
+    "pending",
+    "approved",
+    "rejected",
+    "edited",
+    "expired",
+    "cancelled",
+]);
+export const ApprovalRequestSchema = Type.Object({
+    approvalRequestId: UuidSchema,
+    runId: UuidSchema,
+    nodeInstanceId: Type.String({ minLength: 1 }),
+    boundPlanHash: Type.Optional(Type.String({ minLength: 1 })),
+    boundFragmentHash: Type.Optional(Type.String({ minLength: 1 })),
+    expectedRunVersion: Type.Integer({ minimum: 0 }),
+    allowedDecisions: Type.Array(ApprovalDecisionSchema, { minItems: 1 }),
+    owner: Type.String({ minLength: 1 }),
+    audience: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
+    requiredPrincipals: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
+    deadline: Type.Integer({ minimum: 0 }),
+    timeoutPolicy: StringEnum(["auto-reject", "block", "durable-expire"]),
+    status: ApprovalRequestStatusSchema,
+    createdAt: Type.Integer({ minimum: 0 }),
+    decidedAt: Type.Optional(Type.Integer({ minimum: 0 })),
+    decisionCommandId: Type.Optional(UuidSchema),
+    decisionEventId: Type.Optional(UuidSchema),
+    decisionCommitSeq: Type.Optional(Type.Integer({ minimum: 1 })),
+    editArtifactRef: Type.Optional(ArtifactRefSchema),
+    editKind: Type.Optional(StringEnum(["output", "plan"])),
+}, { additionalProperties: false });
+/**
+ * ApprovalDecisionCommand (P15) = CommandRecord.kind "approval.decide" plus
+ * decision + expectedRunVersion CAS. A decision is a command; disclosure is
+ * re-authorized live (P12). First commit wins on expectedRunVersion.
+ */
+export const ApprovalDecisionCommandSchema = Type.Object({
+    commandId: UuidSchema,
+    kind: Type.Literal("approval.decide"),
+    requestHash: Sha256HexSchema,
+    callerPrincipal: Type.String({ minLength: 1 }),
+    projectId: UuidSchema,
+    controlDomainId: UuidSchema,
+    approvalRequestId: UuidSchema,
+    runId: UuidSchema,
+    expectedRunVersion: Type.Integer({ minimum: 0 }),
+    decision: ApprovalDecisionSchema,
+    editArtifactRef: Type.Optional(ArtifactRefSchema),
+    editKind: Type.Optional(StringEnum(["output", "plan"])),
+    recordedAt: Type.Integer({ minimum: 0 }),
+}, { additionalProperties: false });
+//# sourceMappingURL=approval.js.map

package/dist/control/schema/approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/approval.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAoB,MAAM,eAAe,CAAC;AAEpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAC,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAG7G,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAGhF,MAAM,CAAC,MAAM,2BAA2B,GAAG,UAAU,CAAC;IACrD,SAAS;IACT,UAAU;IACV,UAAU;IACV,QAAQ;IACR,SAAS;IACT,WAAW;CACX,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAC/C;IACC,iBAAiB,EAAE,UAAU;IAC7B,KAAK,EAAE,UAAU;IACjB,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC7C,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/D,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAChD,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACrE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtC,aAAa,EAAE,UAAU,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACrE,MAAM,EAAE,2BAA2B;IACnC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACvC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACtD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC5C,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC1C,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9D,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACjD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;CACvD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAwBF;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CACvD;IACC,SAAS,EAAE,UAAU;IACrB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACrC,WAAW,EAAE,eAAe;IAC5B,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC9C,SAAS,EAAE,UAAU;IACrB,eAAe,EAAE,UAAU;IAC3B,iBAAiB,EAAE,UAAU;IAC7B,KAAK,EAAE,UAAU;IACjB,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAChD,QAAQ,EAAE,sBAAsB;IAChC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACjD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;CACxC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC"}