taskflow-mcp-core 0.3.0-beta.1.1 → 1.0.0

package/dist/control/schema/policy.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Policy + enforcement capability wire types (🟥 NEW).
+ *
+ * Decisions: P1/P2 (PolicyBundle with explicit inheritance + fail-closed empty
+ * baseline; authorizationContextHash records the decision), P8 (orthogonal
+ * EnforcementCapabilities bound to TE evidence surfaces; `unsupported` host
+ * probe fails closed; 0.3-C does not offer unbound / per-mutation).
+ */
+import { Type } from "typebox";
+export declare const PolicyCeilingSchema: Type.TObject<{
+    maxActiveRuns: Type.TOptional<Type.TInteger>;
+    maxTokens: Type.TOptional<Type.TInteger>;
+    maxUSD: Type.TOptional<Type.TNumber>;
+}>;
+export type PolicyCeiling = {
+    maxActiveRuns?: number;
+    maxTokens?: number;
+    maxUSD?: number;
+};
+export declare const PolicyBundleSchema: Type.TObject<{
+    hostCeiling: Type.TObject<{
+        maxActiveRuns: Type.TOptional<Type.TInteger>;
+        maxTokens: Type.TOptional<Type.TInteger>;
+        maxUSD: Type.TOptional<Type.TNumber>;
+    }>;
+    userCeiling: Type.TOptional<Type.TObject<{
+        maxActiveRuns: Type.TOptional<Type.TInteger>;
+        maxTokens: Type.TOptional<Type.TInteger>;
+        maxUSD: Type.TOptional<Type.TNumber>;
+    }>>;
+    projectCeiling: Type.TOptional<Type.TObject<{
+        maxActiveRuns: Type.TOptional<Type.TInteger>;
+        maxTokens: Type.TOptional<Type.TInteger>;
+        maxUSD: Type.TOptional<Type.TNumber>;
+    }>>;
+    invocationCeiling: Type.TOptional<Type.TObject<{
+        maxActiveRuns: Type.TOptional<Type.TInteger>;
+        maxTokens: Type.TOptional<Type.TInteger>;
+        maxUSD: Type.TOptional<Type.TNumber>;
+    }>>;
+    authorizationContextHash: Type.TString;
+}>;
+export type PolicyBundle = {
+    hostCeiling: PolicyCeiling;
+    userCeiling?: PolicyCeiling;
+    projectCeiling?: PolicyCeiling;
+    invocationCeiling?: PolicyCeiling;
+    authorizationContextHash: string;
+};
+export declare const ResolutionCapabilitySchema: import("typebox").TUnsafe<string>;
+export type ResolutionCapability = "contained" | "unbound";
+export declare const MutationMediationCapabilitySchema: import("typebox").TUnsafe<string>;
+export type MutationMediationCapability = "none" | "brokered";
+export declare const ProcessIsolationCapabilitySchema: import("typebox").TUnsafe<string>;
+export type ProcessIsolationCapability = "none" | "sandboxed";
+export declare const RevocationCapabilitySchema: Type.TUnion<[Type.TLiteral<"admission-only">, Type.TLiteral<"per-mutation">, Type.TObject<{
+    mode: Type.TLiteral<"bounded-latency">;
+    maxLatencyMs: Type.TInteger;
+}>]>;
+export type RevocationCapability = "admission-only" | "per-mutation" | {
+    mode: "bounded-latency";
+    maxLatencyMs: number;
+};
+/**
+ * P8 default capability package (wire-frozen values): resolution contained,
+ * mutationMediation brokered, revocation admission-only, processIsolation
+ * host-probe-derived (no baseline evidence ⇒ resolve-only ⇒ `none`).
+ */
+export declare const DEFAULT_ENFORCEMENT_CAPABILITIES: {
+    readonly resolution: "contained";
+    readonly mutationMediation: "brokered";
+    readonly processIsolation: "none";
+    readonly revocation: "admission-only";
+};
+export declare const EnforcementCapabilitiesSchema: Type.TObject<{
+    resolution: import("typebox").TUnsafe<string>;
+    mutationMediation: import("typebox").TUnsafe<string>;
+    processIsolation: import("typebox").TUnsafe<string>;
+    revocation: Type.TUnion<[Type.TLiteral<"admission-only">, Type.TLiteral<"per-mutation">, Type.TObject<{
+        mode: Type.TLiteral<"bounded-latency">;
+        maxLatencyMs: Type.TInteger;
+    }>]>;
+    baselinePolicyId: Type.TString;
+    hostProbeSha256: Type.TString;
+}>;
+export type EnforcementCapabilities = {
+    resolution: ResolutionCapability;
+    mutationMediation: MutationMediationCapability;
+    processIsolation: ProcessIsolationCapability;
+    revocation: RevocationCapability;
+    baselinePolicyId: string;
+    hostProbeSha256: string;
+};
+/** A flow requesting a capability 0.3-C does not offer → TF_FEATURE_REQUIRED. */
+export declare function capabilityDemandsUnavailable(capabilities: Pick<EnforcementCapabilities, "resolution" | "mutationMediation" | "processIsolation" | "revocation">): boolean;
+//# sourceMappingURL=policy.d.ts.map

package/dist/control/schema/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAQ/B,eAAO,MAAM,mBAAmB;;;;EAO/B,CAAC;AACF,MAAM,MAAM,aAAa,GAAG;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5F,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;EAS9B,CAAC;AACF,MAAM,MAAM,YAAY,GAAG;IAC1B,WAAW,EAAE,aAAa,CAAC;IAC3B,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,iBAAiB,CAAC,EAAE,aAAa,CAAC;IAClC,wBAAwB,EAAE,MAAM,CAAC;CACjC,CAAC;AAMF,eAAO,MAAM,0BAA0B,mCAAuC,CAAC;AAC/E,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3D,eAAO,MAAM,iCAAiC,mCAAmC,CAAC;AAClF,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9D,eAAO,MAAM,gCAAgC,mCAAoC,CAAC;AAClF,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,WAAW,CAAC;AAE9D,eAAO,MAAM,0BAA0B;;;IAUrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAC7B,gBAAgB,GAChB,cAAc,GACd;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,gCAAgC;aAC5C,UAAU,EAAE,WAAW;aACvB,iBAAiB,EAAE,UAAU;aAC7B,gBAAgB,EAAE,MAAM;aACxB,UAAU,EAAE,gBAAgB;CACnB,CAAC;AAEX,eAAO,MAAM,6BAA6B;;;;;;;;;;EAWzC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG;IACrC,UAAU,EAAE,oBAAoB,CAAC;IACjC,iBAAiB,EAAE,2BAA2B,CAAC;IAC/C,gBAAgB,EAAE,0BAA0B,CAAC;IAC7C,UAAU,EAAE,oBAAoB,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,iFAAiF;AACjF,wBAAgB,4BAA4B,CAAC,YAAY,EAAE,IAAI,CAAC,uBAAuB,EAAE,YAAY,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,YAAY,CAAC,GAAG,OAAO,CAMzK"}

package/dist/control/schema/policy.js

@@ -0,0 +1,73 @@
+/**
+ * Policy + enforcement capability wire types (🟥 NEW).
+ *
+ * Decisions: P1/P2 (PolicyBundle with explicit inheritance + fail-closed empty
+ * baseline; authorizationContextHash records the decision), P8 (orthogonal
+ * EnforcementCapabilities bound to TE evidence surfaces; `unsupported` host
+ * probe fails closed; 0.3-C does not offer unbound / per-mutation).
+ */
+import { Type } from "typebox";
+import { StringEnum } from "taskflow-core/typebox-helpers";
+import { Sha256HexSchema } from "./common.js";
+// ---------------------------------------------------------------------------
+// PolicyBundle (P1/P2)
+// ---------------------------------------------------------------------------
+export const PolicyCeilingSchema = Type.Object({
+    maxActiveRuns: Type.Optional(Type.Integer({ minimum: 1 })),
+    maxTokens: Type.Optional(Type.Integer({ minimum: 1 })),
+    maxUSD: Type.Optional(Type.Number({ minimum: 0 })),
+}, { additionalProperties: false });
+export const PolicyBundleSchema = Type.Object({
+    hostCeiling: PolicyCeilingSchema,
+    userCeiling: Type.Optional(PolicyCeilingSchema),
+    projectCeiling: Type.Optional(PolicyCeilingSchema),
+    invocationCeiling: Type.Optional(PolicyCeilingSchema),
+    authorizationContextHash: Sha256HexSchema,
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// EnforcementCapabilities (P8) — four orthogonal dimensions + evidence
+// ---------------------------------------------------------------------------
+export const ResolutionCapabilitySchema = StringEnum(["contained", "unbound"]);
+export const MutationMediationCapabilitySchema = StringEnum(["none", "brokered"]);
+export const ProcessIsolationCapabilitySchema = StringEnum(["none", "sandboxed"]);
+export const RevocationCapabilitySchema = Type.Union([
+    Type.Literal("admission-only"),
+    Type.Literal("per-mutation"),
+    Type.Object({
+        mode: Type.Literal("bounded-latency"),
+        maxLatencyMs: Type.Integer({ minimum: 1 }),
+    }, { additionalProperties: false }),
+]);
+/**
+ * P8 default capability package (wire-frozen values): resolution contained,
+ * mutationMediation brokered, revocation admission-only, processIsolation
+ * host-probe-derived (no baseline evidence ⇒ resolve-only ⇒ `none`).
+ */
+export const DEFAULT_ENFORCEMENT_CAPABILITIES = {
+    resolution: "contained",
+    mutationMediation: "brokered",
+    processIsolation: "none",
+    revocation: "admission-only",
+};
+export const EnforcementCapabilitiesSchema = Type.Object({
+    resolution: ResolutionCapabilitySchema,
+    mutationMediation: MutationMediationCapabilitySchema,
+    processIsolation: ProcessIsolationCapabilitySchema,
+    revocation: RevocationCapabilitySchema,
+    // Evidence provenance (P8): baseline policy + host probe digest.
+    baselinePolicyId: Type.String({ minLength: 1 }),
+    hostProbeSha256: Sha256HexSchema,
+}, { additionalProperties: false });
+/** A flow requesting a capability 0.3-C does not offer → TF_FEATURE_REQUIRED. */
+export function capabilityDemandsUnavailable(capabilities) {
+    if (capabilities.resolution === "unbound")
+        return true;
+    if (capabilities.mutationMediation === "none")
+        return true;
+    if (capabilities.processIsolation === "sandboxed")
+        return true; // no approved host baseline in 0.3-C
+    if (capabilities.revocation !== "admission-only")
+        return true;
+    return false;
+}
+//# sourceMappingURL=policy.js.map

package/dist/control/schema/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAC7C;IACC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1D,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACtD,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;CAClD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAGF,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAC5C;IACC,WAAW,EAAE,mBAAmB;IAChC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC/C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAClD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACrD,wBAAwB,EAAE,eAAe;CACzC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AASF,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAG/E,MAAM,CAAC,MAAM,iCAAiC,GAAG,UAAU,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAGlF,MAAM,CAAC,MAAM,gCAAgC,GAAG,UAAU,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAGlF,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC,KAAK,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;IAC5B,IAAI,CAAC,MAAM,CACV;QACC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACrC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;KAC1C,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;CACD,CAAC,CAAC;AAMH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC/C,UAAU,EAAE,WAAW;IACvB,iBAAiB,EAAE,UAAU;IAC7B,gBAAgB,EAAE,MAAM;IACxB,UAAU,EAAE,gBAAgB;CACnB,CAAC;AAEX,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CACvD;IACC,UAAU,EAAE,0BAA0B;IACtC,iBAAiB,EAAE,iCAAiC;IACpD,gBAAgB,EAAE,gCAAgC;IAClD,UAAU,EAAE,0BAA0B;IACtC,iEAAiE;IACjE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC/C,eAAe,EAAE,eAAe;CAChC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAUF,iFAAiF;AACjF,MAAM,UAAU,4BAA4B,CAAC,YAAmH;IAC/J,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,YAAY,CAAC,iBAAiB,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,YAAY,CAAC,gBAAgB,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC,CAAC,qCAAqC;IACrG,IAAI,YAAY,CAAC,UAAU,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/control/schema/run.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Run lifecycle wire types (🟥 NEW).
+ *
+ * Decisions: P5 — RunStatus and RunStage are independent closed enums; only
+ * `completed | failed | blocked | cancelled` are terminal; `unknown` is
+ * non-terminal (D33); RunSnapshot carries status + stage + slot + operator flag.
+ */
+import { Type } from "typebox";
+import { type ExecutionOwner } from "./te-mirrors.ts";
+export declare const RunStatusSchema: import("typebox").TUnsafe<string>;
+export type RunStatus = "running" | "completed" | "failed" | "paused" | "blocked" | "cancelled" | "unknown";
+export declare const TERMINAL_RUN_STATUSES: readonly RunStatus[];
+export declare function isTerminalRunStatus(status: RunStatus): boolean;
+export declare const RunStageSchema: import("typebox").TUnsafe<string>;
+export type RunStage = "received" | "compiled" | "linked" | "queued" | "admitted" | "executing" | "parked" | "reconciling" | "terminal";
+/** Slot state per P16 — how the reservation contributes to maxActiveRuns. */
+export declare const RunSlotStateSchema: import("typebox").TUnsafe<string>;
+export type RunSlotState = "none" | "reserved" | "committed" | "orphan-suspect" | "released";
+export declare const RunSnapshotSchema: Type.TObject<{
+    runId: Type.TString;
+    projectId: Type.TString;
+    controlDomainId: Type.TString;
+    status: import("typebox").TUnsafe<string>;
+    stage: import("typebox").TUnsafe<string>;
+    slot: import("typebox").TUnsafe<string>;
+    needsOperator: Type.TBoolean;
+    runVersion: Type.TInteger;
+    boundPlanHash: Type.TOptional<Type.TString>;
+    boundFragmentHash: Type.TOptional<Type.TString>;
+    reservationId: Type.TOptional<Type.TString>;
+    owner: Type.TOptional<Type.TObject<{
+        runId: Type.TString;
+        phaseId: Type.TString;
+        attemptId: Type.TString;
+        unitId: Type.TString;
+        ancestry: Type.TArray<Type.TString>;
+    }>>;
+    policyHash: Type.TOptional<Type.TString>;
+    authorityEpoch: Type.TOptional<Type.TInteger>;
+    requiresReadmission: Type.TOptional<Type.TBoolean>;
+    projectAdmitCommitSeq: Type.TOptional<Type.TInteger>;
+}>;
+export type RunSnapshot = {
+    runId: string;
+    projectId: string;
+    controlDomainId: string;
+    status: RunStatus;
+    stage: RunStage;
+    slot: RunSlotState;
+    needsOperator: boolean;
+    runVersion: number;
+    boundPlanHash?: string;
+    boundFragmentHash?: string;
+    reservationId?: string;
+    owner?: ExecutionOwner;
+    policyHash?: string;
+    authorityEpoch?: number;
+    requiresReadmission?: boolean;
+    projectAdmitCommitSeq?: number;
+};
+//# sourceMappingURL=run.d.ts.map

package/dist/control/schema/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE5E,eAAO,MAAM,eAAe,mCAQ1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAE5G,eAAO,MAAM,qBAAqB,EAAE,SAAS,SAAS,EAAoD,CAAC;AAE3G,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAE9D;AAED,eAAO,MAAM,cAAc,mCAUzB,CAAC;AACH,MAAM,MAAM,QAAQ,GACjB,UAAU,GACV,UAAU,GACV,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,WAAW,GACX,QAAQ,GACR,aAAa,GACb,UAAU,CAAC;AAEd,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB,mCAA8E,CAAC;AAC9G,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,gBAAgB,GAAG,UAAU,CAAC;AAE7F,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;EAoB7B,CAAC;AACF,MAAM,MAAM,WAAW,GAAG;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,QAAQ,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC"}

package/dist/control/schema/run.js

@@ -0,0 +1,56 @@
+/**
+ * Run lifecycle wire types (🟥 NEW).
+ *
+ * Decisions: P5 — RunStatus and RunStage are independent closed enums; only
+ * `completed | failed | blocked | cancelled` are terminal; `unknown` is
+ * non-terminal (D33); RunSnapshot carries status + stage + slot + operator flag.
+ */
+import { Type } from "typebox";
+import { StringEnum } from "taskflow-core/typebox-helpers";
+import { UuidSchema, Sha256HexSchema } from "./common.js";
+import { ExecutionOwnerSchema } from "./te-mirrors.js";
+export const RunStatusSchema = StringEnum([
+    "running",
+    "completed",
+    "failed",
+    "paused",
+    "blocked",
+    "cancelled",
+    "unknown",
+]);
+export const TERMINAL_RUN_STATUSES = ["completed", "failed", "blocked", "cancelled"];
+export function isTerminalRunStatus(status) {
+    return TERMINAL_RUN_STATUSES.includes(status);
+}
+export const RunStageSchema = StringEnum([
+    "received",
+    "compiled",
+    "linked",
+    "queued",
+    "admitted",
+    "executing",
+    "parked",
+    "reconciling",
+    "terminal",
+]);
+/** Slot state per P16 — how the reservation contributes to maxActiveRuns. */
+export const RunSlotStateSchema = StringEnum(["none", "reserved", "committed", "orphan-suspect", "released"]);
+export const RunSnapshotSchema = Type.Object({
+    runId: UuidSchema,
+    projectId: UuidSchema,
+    controlDomainId: UuidSchema,
+    status: RunStatusSchema,
+    stage: RunStageSchema,
+    slot: RunSlotStateSchema,
+    needsOperator: Type.Boolean(),
+    runVersion: Type.Integer({ minimum: 0 }),
+    boundPlanHash: Type.Optional(Type.String({ minLength: 1 })),
+    boundFragmentHash: Type.Optional(Type.String({ minLength: 1 })),
+    reservationId: Type.Optional(UuidSchema),
+    owner: Type.Optional(ExecutionOwnerSchema),
+    policyHash: Type.Optional(Sha256HexSchema),
+    authorityEpoch: Type.Optional(Type.Integer({ minimum: 0 })),
+    requiresReadmission: Type.Optional(Type.Boolean()),
+    projectAdmitCommitSeq: Type.Optional(Type.Integer({ minimum: 1 })),
+}, { additionalProperties: false });
+//# sourceMappingURL=run.js.map

package/dist/control/schema/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAuB,MAAM,iBAAiB,CAAC;AAE5E,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;IACzC,SAAS;IACT,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,WAAW;IACX,SAAS;CACT,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAyB,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAE3G,MAAM,UAAU,mBAAmB,CAAC,MAAiB;IACpD,OAAQ,qBAA2C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;IACxC,UAAU;IACV,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,WAAW;IACX,QAAQ;IACR,aAAa;IACb,UAAU;CACV,CAAC,CAAC;AAYH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC;AAG9G,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAC3C;IACC,KAAK,EAAE,UAAU;IACjB,SAAS,EAAE,UAAU;IACrB,eAAe,EAAE,UAAU;IAC3B,MAAM,EAAE,eAAe;IACvB,KAAK,EAAE,cAAc;IACrB,IAAI,EAAE,kBAAkB;IACxB,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE;IAC7B,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACxC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/D,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IACxC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC1C,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3D,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAClD,qBAAqB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;CAClE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC"}

package/dist/control/schema/te-mirrors.d.ts

@@ -0,0 +1,145 @@
+/**
+ * TE wire mirrors (🟩 REUSE per wire-freeze §3.1).
+ *
+ * The wire-freeze reuses eleven Trusted Effects shapes. Most of them are
+ * importable from `taskflow-core`'s package surface (`effects/*`, `flowir/*`);
+ * the `resources/*` shapes are deliberately NOT exported by taskflow-core
+ * (the workspace-capability freeze blocks `taskflow-core/resources/*` — see
+ * scripts/smoke-packed-packages.mjs), so this module carries closed TypeBox
+ * mirrors of exactly those shapes. TE remains the authority that produces and
+ * consumes these values; 0.3-C only references them as evidence.
+ *
+ * Mirrors are kept field-for-field identical to the TE interfaces; any drift
+ * fails the closed-contract tests in this package.
+ */
+import { Type, type Static } from "typebox";
+export declare const WorkspaceAccessSchema: Type.TUnion<[Type.TLiteral<"read-only">, Type.TLiteral<"read-write">]>;
+export type WorkspaceAccess = "read-only" | "read-write";
+export declare const PathIntentSchema: Type.TUnion<[Type.TLiteral<"existing-file">, Type.TLiteral<"existing-directory">, Type.TLiteral<"create-file">, Type.TLiteral<"create-directory">, Type.TLiteral<"executable">]>;
+export type PathIntent = "existing-file" | "existing-directory" | "create-file" | "create-directory" | "executable";
+export declare const PathRefSchema: Type.TUnion<[Type.TObject<{
+    subpath: Type.TOptional<Type.TUnion<[Type.TObject<{
+        literalPath: Type.TString;
+        argPath: Type.TOptional<Type.TNever>;
+        segments: Type.TOptional<Type.TNever>;
+    }>, Type.TObject<{
+        argPath: Type.TString;
+        literalPath: Type.TOptional<Type.TNever>;
+        segments: Type.TOptional<Type.TNever>;
+    }>, Type.TObject<{
+        segments: Type.TArray<Type.TUnion<[Type.TObject<{
+            segment: Type.TString;
+            argSegment: Type.TOptional<Type.TNever>;
+        }>, Type.TObject<{
+            argSegment: Type.TString;
+            segment: Type.TOptional<Type.TNever>;
+        }>]>>;
+        literalPath: Type.TOptional<Type.TNever>;
+        argPath: Type.TOptional<Type.TNever>;
+    }>]>>;
+    access: Type.TOptional<Type.TUnion<[Type.TLiteral<"read-only">, Type.TLiteral<"read-write">]>>;
+    maxLifetime: Type.TOptional<Type.TUnion<Type.TObject<{
+        scope: Type.TLiteral<"external" | "phase" | "run">;
+    }>[]>>;
+    intent: Type.TUnion<[Type.TLiteral<"existing-file">, Type.TLiteral<"existing-directory">, Type.TLiteral<"create-file">, Type.TLiteral<"create-directory">, Type.TLiteral<"executable">]>;
+    workspace: Type.TString;
+    handle: Type.TOptional<Type.TNever>;
+}>, Type.TObject<{
+    subpath: Type.TOptional<Type.TUnion<[Type.TObject<{
+        literalPath: Type.TString;
+        argPath: Type.TOptional<Type.TNever>;
+        segments: Type.TOptional<Type.TNever>;
+    }>, Type.TObject<{
+        argPath: Type.TString;
+        literalPath: Type.TOptional<Type.TNever>;
+        segments: Type.TOptional<Type.TNever>;
+    }>, Type.TObject<{
+        segments: Type.TArray<Type.TUnion<[Type.TObject<{
+            segment: Type.TString;
+            argSegment: Type.TOptional<Type.TNever>;
+        }>, Type.TObject<{
+            argSegment: Type.TString;
+            segment: Type.TOptional<Type.TNever>;
+        }>]>>;
+        literalPath: Type.TOptional<Type.TNever>;
+        argPath: Type.TOptional<Type.TNever>;
+    }>]>>;
+    access: Type.TOptional<Type.TUnion<[Type.TLiteral<"read-only">, Type.TLiteral<"read-write">]>>;
+    maxLifetime: Type.TOptional<Type.TUnion<Type.TObject<{
+        scope: Type.TLiteral<"external" | "phase" | "run">;
+    }>[]>>;
+    intent: Type.TUnion<[Type.TLiteral<"existing-file">, Type.TLiteral<"existing-directory">, Type.TLiteral<"create-file">, Type.TLiteral<"create-directory">, Type.TLiteral<"executable">]>;
+    handle: Type.TObject<{
+        producerPhaseId: Type.TString;
+        exportName: Type.TString;
+    }>;
+    workspace: Type.TOptional<Type.TNever>;
+}>]>;
+export type PathRef = Static<typeof PathRefSchema>;
+export declare const BoundCapabilityLifetimeSchema: Type.TUnion<[Type.TObject<{
+    scope: Type.TLiteral<"phase">;
+    runId: Type.TString;
+    phaseId: Type.TString;
+    attemptId: Type.TString;
+}>, Type.TObject<{
+    scope: Type.TLiteral<"run">;
+    runId: Type.TString;
+}>, Type.TObject<{
+    scope: Type.TLiteral<"external">;
+    bindingId: Type.TString;
+    providerInstanceId: Type.TOptional<Type.TString>;
+}>]>;
+export type BoundCapabilityLifetime = Static<typeof BoundCapabilityLifetimeSchema>;
+export declare const ExecutionOwnerSchema: Type.TObject<{
+    runId: Type.TString;
+    phaseId: Type.TString;
+    attemptId: Type.TString;
+    unitId: Type.TString;
+    ancestry: Type.TArray<Type.TString>;
+}>;
+export type ExecutionOwner = Static<typeof ExecutionOwnerSchema>;
+export declare const ScopedContentEvidenceSchema: Type.TObject<{
+    canonicalPrefix: Type.TString;
+    scopeDigest: Type.TString;
+    effectId: Type.TOptional<Type.TString>;
+    capabilityBindingId: Type.TOptional<Type.TString>;
+    beforeContentId: Type.TOptional<Type.TString>;
+    afterContentId: Type.TOptional<Type.TString>;
+}>;
+export declare const WriteIntentStatusSchema: import("typebox").TUnsafe<string>;
+export type WriteIntentStatus = "pending" | "committed-content" | "committed-generation" | "aborted-restored" | "dirty-unknown" | "reconciled";
+export declare const WriteIntentRecordSchema: Type.TObject<{
+    journalVersion: Type.TLiteral<1>;
+    intentId: Type.TString;
+    resourceDomainId: Type.TString;
+    providerInstanceId: Type.TOptional<Type.TString>;
+    scopes: Type.TArray<Type.TObject<{
+        canonicalPrefix: Type.TString;
+        scopeDigest: Type.TString;
+        effectId: Type.TOptional<Type.TString>;
+        capabilityBindingId: Type.TOptional<Type.TString>;
+        beforeContentId: Type.TOptional<Type.TString>;
+        afterContentId: Type.TOptional<Type.TString>;
+    }>>;
+    owner: Type.TObject<{
+        runId: Type.TString;
+        phaseId: Type.TString;
+        attemptId: Type.TString;
+        unitId: Type.TString;
+        ancestry: Type.TArray<Type.TString>;
+    }>;
+    beforeGeneration: Type.TInteger;
+    intentSequence: Type.TInteger;
+    commitGeneration: Type.TOptional<Type.TInteger>;
+    journalEpoch: Type.TInteger;
+    commitMode: import("typebox").TUnsafe<string>;
+    externalMutation: import("typebox").TUnsafe<string>;
+    status: import("typebox").TUnsafe<string>;
+    restorableSnapshotArtifactIds: Type.TOptional<Type.TArray<Type.TString>>;
+    terminalReason: Type.TOptional<Type.TString>;
+    authorizationPrincipalId: Type.TOptional<Type.TString>;
+    authorizationScopeRoot: Type.TOptional<Type.TString>;
+}>;
+export declare const HostProbeClassificationSchema: import("typebox").TUnsafe<string>;
+export type HostProbeClassification = "sandboxed-single-root" | "sandboxed-multi-root" | "resolve-only" | "unsupported";
+//# sourceMappingURL=te-mirrors.d.ts.map

package/dist/control/schema/te-mirrors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"te-mirrors.d.ts","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/te-mirrors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAO5C,eAAO,MAAM,qBAAqB,wEAGhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,YAAY,CAAC;AAEzD,eAAO,MAAM,gBAAgB,kLAM3B,CAAC;AACH,MAAM,MAAM,UAAU,GACnB,eAAe,GACf,oBAAoB,GACpB,aAAa,GACb,kBAAkB,GAClB,YAAY,CAAC;AAuDhB,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmBxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAMnD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;IAsBxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAMnF,eAAO,MAAM,oBAAoB;;;;;;EAShC,CAAC;AACF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMjE,eAAO,MAAM,2BAA2B;;;;;;;EAUvC,CAAC;AAMF,eAAO,MAAM,uBAAuB,mCAOlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAC1B,SAAS,GACT,mBAAmB,GACnB,sBAAsB,GACtB,kBAAkB,GAClB,eAAe,GACf,YAAY,CAAC;AAEhB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBnC,CAAC;AAMF,eAAO,MAAM,6BAA6B,mCAKxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAChC,uBAAuB,GACvB,sBAAsB,GACtB,cAAc,GACd,aAAa,CAAC"}

package/dist/control/schema/te-mirrors.js

@@ -0,0 +1,145 @@
+/**
+ * TE wire mirrors (🟩 REUSE per wire-freeze §3.1).
+ *
+ * The wire-freeze reuses eleven Trusted Effects shapes. Most of them are
+ * importable from `taskflow-core`'s package surface (`effects/*`, `flowir/*`);
+ * the `resources/*` shapes are deliberately NOT exported by taskflow-core
+ * (the workspace-capability freeze blocks `taskflow-core/resources/*` — see
+ * scripts/smoke-packed-packages.mjs), so this module carries closed TypeBox
+ * mirrors of exactly those shapes. TE remains the authority that produces and
+ * consumes these values; 0.3-C only references them as evidence.
+ *
+ * Mirrors are kept field-for-field identical to the TE interfaces; any drift
+ * fails the closed-contract tests in this package.
+ */
+import { Type } from "typebox";
+import { StringEnum } from "taskflow-core/typebox-helpers";
+// ---------------------------------------------------------------------------
+// PathRef (resources/schema.ts) — literalPath/argPath/segments + PathIntent
+// ---------------------------------------------------------------------------
+export const WorkspaceAccessSchema = Type.Union([
+    Type.Literal("read-only"),
+    Type.Literal("read-write"),
+]);
+export const PathIntentSchema = Type.Union([
+    Type.Literal("existing-file"),
+    Type.Literal("existing-directory"),
+    Type.Literal("create-file"),
+    Type.Literal("create-directory"),
+    Type.Literal("executable"),
+]);
+const LiteralPathExprSchema = Type.Object({
+    literalPath: Type.String({ minLength: 1 }),
+    argPath: Type.Optional(Type.Never()),
+    segments: Type.Optional(Type.Never()),
+}, { additionalProperties: false });
+const ArgPathExprSchema = Type.Object({
+    argPath: Type.String({ minLength: 1 }),
+    literalPath: Type.Optional(Type.Never()),
+    segments: Type.Optional(Type.Never()),
+}, { additionalProperties: false });
+const SegmentExprSchema = Type.Union([
+    Type.Object({ segment: Type.String({ minLength: 1 }), argSegment: Type.Optional(Type.Never()) }, { additionalProperties: false }),
+    Type.Object({ argSegment: Type.String({ minLength: 1 }), segment: Type.Optional(Type.Never()) }, { additionalProperties: false }),
+]);
+const SegmentsExprSchema = Type.Object({
+    segments: Type.Array(SegmentExprSchema, { minItems: 1 }),
+    literalPath: Type.Optional(Type.Never()),
+    argPath: Type.Optional(Type.Never()),
+}, { additionalProperties: false });
+const RelativePathExprSchema = Type.Union([LiteralPathExprSchema, ArgPathExprSchema, SegmentsExprSchema]);
+const pathRefBase = {
+    subpath: Type.Optional(RelativePathExprSchema),
+    access: Type.Optional(WorkspaceAccessSchema),
+    maxLifetime: Type.Optional(Type.Union(["phase", "run", "external"].map((scope) => Type.Object({ scope: Type.Literal(scope) }, { additionalProperties: false })))),
+    intent: PathIntentSchema,
+};
+export const PathRefSchema = Type.Union([
+    Type.Object({ ...pathRefBase, workspace: Type.String({ minLength: 1 }), handle: Type.Optional(Type.Never()) }, { additionalProperties: false }),
+    Type.Object({
+        ...pathRefBase,
+        handle: Type.Object({
+            producerPhaseId: Type.String({ minLength: 1 }),
+            exportName: Type.String({ minLength: 1 }),
+        }, { additionalProperties: false }),
+        workspace: Type.Optional(Type.Never()),
+    }, { additionalProperties: false }),
+]);
+// ---------------------------------------------------------------------------
+// BoundCapabilityLifetime (resources/schema.ts)
+// ---------------------------------------------------------------------------
+export const BoundCapabilityLifetimeSchema = Type.Union([
+    Type.Object({
+        scope: Type.Literal("phase"),
+        runId: Type.String({ minLength: 1 }),
+        phaseId: Type.String({ minLength: 1 }),
+        attemptId: Type.String({ minLength: 1 }),
+    }, { additionalProperties: false }),
+    Type.Object({ scope: Type.Literal("run"), runId: Type.String({ minLength: 1 }) }, { additionalProperties: false }),
+    Type.Object({
+        scope: Type.Literal("external"),
+        bindingId: Type.String({ minLength: 1 }),
+        providerInstanceId: Type.Optional(Type.String({ minLength: 1 })),
+    }, { additionalProperties: false }),
+]);
+// ---------------------------------------------------------------------------
+// ExecutionOwner (resources/types.ts)
+// ---------------------------------------------------------------------------
+export const ExecutionOwnerSchema = Type.Object({
+    runId: Type.String({ minLength: 1 }),
+    phaseId: Type.String({ minLength: 1 }),
+    attemptId: Type.String({ minLength: 1 }),
+    unitId: Type.String({ minLength: 1 }),
+    ancestry: Type.Array(Type.String()),
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// ScopedContentEvidence (resources/types.ts)
+// ---------------------------------------------------------------------------
+export const ScopedContentEvidenceSchema = Type.Object({
+    canonicalPrefix: Type.String({ minLength: 1 }),
+    scopeDigest: Type.String({ minLength: 1 }),
+    effectId: Type.Optional(Type.String({ minLength: 1 })),
+    capabilityBindingId: Type.Optional(Type.String({ minLength: 1 })),
+    beforeContentId: Type.Optional(Type.String({ minLength: 1 })),
+    afterContentId: Type.Optional(Type.String({ minLength: 1 })),
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// WriteIntentRecord / WriteIntentStatus (resources/journal.ts)
+// ---------------------------------------------------------------------------
+export const WriteIntentStatusSchema = StringEnum([
+    "pending",
+    "committed-content",
+    "committed-generation",
+    "aborted-restored",
+    "dirty-unknown",
+    "reconciled",
+]);
+export const WriteIntentRecordSchema = Type.Object({
+    journalVersion: Type.Literal(1),
+    intentId: Type.String({ minLength: 1 }),
+    resourceDomainId: Type.String({ minLength: 1 }),
+    providerInstanceId: Type.Optional(Type.String({ minLength: 1 })),
+    scopes: Type.Array(ScopedContentEvidenceSchema),
+    owner: ExecutionOwnerSchema,
+    beforeGeneration: Type.Integer({ minimum: 0 }),
+    intentSequence: Type.Integer({ minimum: 1 }),
+    commitGeneration: Type.Optional(Type.Integer({ minimum: 0 })),
+    journalEpoch: Type.Integer({ minimum: 1 }),
+    commitMode: StringEnum(["content-snapshot", "generation-only", "unavailable"]),
+    externalMutation: StringEnum(["taskflow-managed", "externally-mutable"]),
+    status: WriteIntentStatusSchema,
+    restorableSnapshotArtifactIds: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
+    terminalReason: Type.Optional(Type.String()),
+    authorizationPrincipalId: Type.Optional(Type.String({ minLength: 1 })),
+    authorizationScopeRoot: Type.Optional(Type.String({ minLength: 1 })),
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// HostProbeClassification (resources/baseline.ts) — enforcement evidence
+// ---------------------------------------------------------------------------
+export const HostProbeClassificationSchema = StringEnum([
+    "sandboxed-single-root",
+    "sandboxed-multi-root",
+    "resolve-only",
+    "unsupported",
+]);
+//# sourceMappingURL=te-mirrors.js.map

package/dist/control/schema/te-mirrors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"te-mirrors.js","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/te-mirrors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,IAAI,EAAe,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAE3D,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,KAAK,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;IACzB,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;CAC1B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;IAC3B,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;CAC1B,CAAC,CAAC;AAQH,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,CACxC;IACC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC1C,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;CACrC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CACpC;IACC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;CACrC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC;IACpC,IAAI,CAAC,MAAM,CACV,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EACnF,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;IACD,IAAI,CAAC,MAAM,CACV,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EACnF,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;CACD,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CACrC;IACC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACxC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;CACpC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,qBAAqB,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAE1G,MAAM,WAAW,GAAG;IACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAC9C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAC5C,WAAW,EAAE,IAAI,CAAC,QAAQ,CACzB,IAAI,CAAC,KAAK,CACT,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAqC,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAC5G,CACD,CACD;IACD,MAAM,EAAE,gBAAgB;CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC;IACvC,IAAI,CAAC,MAAM,CACV,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EACjG,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;IACD,IAAI,CAAC,MAAM,CACV;QACC,GAAG,WAAW;QACd,MAAM,EAAE,IAAI,CAAC,MAAM,CAClB;YACC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YAC9C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;SACzC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;QACD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;KACtC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;CACD,CAAC,CAAC;AAGH,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,KAAK,CAAC;IACvD,IAAI,CAAC,MAAM,CACV;QACC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACtC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;KACxC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;IACD,IAAI,CAAC,MAAM,CACV,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,EACpE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;IACD,IAAI,CAAC,MAAM,CACV;QACC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACxC,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;KAChE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;CACD,CAAC,CAAC;AAGH,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAC9C;IACC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACpC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACrC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACnC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAGF,8EAA8E;AAC9E,6CAA6C;AAC7C,8EAA8E;AAE9E,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CACrD;IACC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC9C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACtD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7D,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;CAC5D,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAEF,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,UAAU,CAAC;IACjD,SAAS;IACT,mBAAmB;IACnB,sBAAsB;IACtB,kBAAkB;IAClB,eAAe;IACf,YAAY;CACZ,CAAC,CAAC;AASH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CACjD;IACC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACvC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC/C,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAChE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC;IAC/C,KAAK,EAAE,oBAAoB;IAC3B,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC9C,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC5C,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7D,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC1C,UAAU,EAAE,UAAU,CAAC,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAC9E,gBAAgB,EAAE,UAAU,CAAC,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IACxE,MAAM,EAAE,uBAAuB;IAC/B,6BAA6B,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5C,wBAAwB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACtE,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;CACpE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAEF,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,6BAA6B,GAAG,UAAU,CAAC;IACvD,uBAAuB;IACvB,sBAAsB;IACtB,cAAc;IACd,aAAa;CACb,CAAC,CAAC"}