@agimon-ai/doompi-workflow 0.0.1-alpha.76 → 0.0.1-alpha.78

package/dist/src/services/workflowHubApi/index.mjs

@@ -0,0 +1,411 @@
+import { createWorkflowTerminalService } from "../workflowTerminal/index.mjs";
+import apiRoutes_default from "../../types/apiRoutes.mjs";
+import { WORKFLOW_API_BASE_PATH, WORKFLOW_SCREEN_EVENT } from "../../types/webWorkflowTerminal.mjs";
+import fs from "node:fs";
+import path from "node:path";
+import { WorkflowRegistryService, WorkflowTerminalService } from "@agimon-ai/workflow-mcp";
+import { randomUUID } from "node:crypto";
+import { Readable } from "node:stream";
+import { Hono } from "hono";
+import { streamSSE } from "hono/streaming";
+//#region src/services/workflowHubApi/index.ts
+/** Stages a run can be recorded under, newest first: a live run is the common case. */
+const STAGES = [
+	"running",
+	"error",
+	"completed"
+];
+/** Lines of screen the stream sends, which is a terminal's visible height plus room. */
+const SCREEN_LINES = 48;
+/** How often the stream re-reads; the service coalesces, so this is an upper bound. */
+const STREAM_TICK_MS = 500;
+/** How often a settled run is re-checked before the stream closes itself. */
+const SETTLED_POLL_TICKS = 4;
+/** Bytes of one textual artifact returned as JSON; binary previews use a stream. */
+const MAX_ARTIFACT_BYTES = 524288;
+/** Path segments a client supplies are names, never paths. */
+const SAFE_SEGMENT = /^[\w.@-]+$/;
+const ARTIFACT_MIME_TYPES = {
+	".aac": "audio/aac",
+	".bmp": "image/bmp",
+	".css": "text/css",
+	".csv": "text/csv",
+	".gif": "image/gif",
+	".htm": "text/html",
+	".html": "text/html",
+	".ico": "image/x-icon",
+	".jpeg": "image/jpeg",
+	".jpg": "image/jpeg",
+	".js": "text/javascript",
+	".json": "application/json",
+	".jsx": "text/jsx",
+	".m4a": "audio/mp4",
+	".markdown": "text/markdown",
+	".md": "text/markdown",
+	".mov": "video/quicktime",
+	".mp3": "audio/mpeg",
+	".mp4": "video/mp4",
+	".oga": "audio/ogg",
+	".ogg": "audio/ogg",
+	".ogv": "video/ogg",
+	".pdf": "application/pdf",
+	".png": "image/png",
+	".sh": "text/x-shellscript",
+	".svg": "image/svg+xml",
+	".toml": "text/toml",
+	".ts": "text/typescript",
+	".tsv": "text/tab-separated-values",
+	".tsx": "text/tsx",
+	".txt": "text/plain",
+	".wav": "audio/wav",
+	".webm": "video/webm",
+	".webp": "image/webp",
+	".xml": "application/xml",
+	".yaml": "text/yaml",
+	".yml": "text/yaml"
+};
+/**
+* One request's JSON body as a plain record.
+*
+* A body that is absent, malformed, or not an object reads as empty rather
+* than failing the route: every field is checked by the route anyway, and a
+* 400 naming the missing field beats a parse error naming nothing.
+*/
+async function jsonBody(context) {
+	const parsed = await context.req.json().catch(() => void 0);
+	return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+}
+/** Rejects anything that could climb out of the registry before a path is built. */
+function isSafeSegment(value) {
+	return value !== "" && value !== "../adapters" && value !== ".." && SAFE_SEGMENT.test(value);
+}
+/** One run's identity for caches and leases, stable across stage moves. */
+function runIdentityOf(workspace, runKey) {
+	return `${workspace}/${runKey}`;
+}
+/**
+* This package's HTTP surface: one workflow run's terminal, and the files its
+* run directory holds.
+*
+* Mounted in the hub rather than in a session's server, because a run's
+* terminal belongs to its multiplexer rather than to the session that launched
+* it: any process can read a tmux pane, and the session's own server cannot
+* reach anything more. The routes therefore name a run, never a session.
+*/
+function createWorkflowHubApi(options = {}) {
+	const registry = options.registry ?? new WorkflowRegistryService();
+	const facade = options.terminal ?? new WorkflowTerminalService();
+	const terminal = createWorkflowTerminalService({
+		terminal: facade,
+		now: options.now ?? (() => Date.now())
+	});
+	const app = new Hono();
+	/** The record behind a request, whichever stage it now sits in. */
+	const runOf = async (workspace, runKey) => {
+		if (!isSafeSegment(workspace) || !isSafeSegment(runKey)) return void 0;
+		for (const stage of STAGES) try {
+			return await registry.readRunByKey(workspace, stage, runKey);
+		} catch {}
+	};
+	const missing = (workspace, runKey) => ({ error: `No workflow run '${runKey}' in workspace '${workspace}'.` });
+	app.get(apiRoutes_default.screen.path, async (context) => {
+		const workspace = context.req.param("workspace");
+		const runKey = context.req.param("runKey");
+		const record = await runOf(workspace, runKey);
+		if (record === void 0) return context.json(missing(workspace, runKey), 404);
+		const identity = runIdentityOf(workspace, runKey);
+		return streamSSE(context, async (stream) => {
+			let settledTicks = 0;
+			let running = true;
+			stream.onAbort(() => {
+				running = false;
+			});
+			while (running) {
+				const current = await runOf(workspace, runKey) ?? record;
+				const capabilities = terminal.capabilities(current);
+				const lines = capabilities.readable ? await terminal.screen(identity, current, SCREEN_LINES) : [];
+				const settled = current.stage !== "running";
+				if (settled) settledTicks += 1;
+				const ended = settled && settledTicks >= SETTLED_POLL_TICKS;
+				const event = {
+					lines,
+					capabilities,
+					...ended ? { ended: true } : {}
+				};
+				await stream.writeSSE({
+					event: WORKFLOW_SCREEN_EVENT,
+					data: JSON.stringify(event)
+				});
+				if (ended) break;
+				await stream.sleep(STREAM_TICK_MS);
+			}
+			terminal.forget(/* @__PURE__ */ new Set());
+		});
+	});
+	app.post(apiRoutes_default.control.path, async (context) => {
+		const workspace = context.req.param("workspace");
+		const runKey = context.req.param("runKey");
+		const record = await runOf(workspace, runKey);
+		if (record === void 0) return context.json(missing(workspace, runKey), 404);
+		const identity = runIdentityOf(workspace, runKey);
+		const body = await jsonBody(context);
+		const capabilities = terminal.capabilities(record);
+		if (body.release === true) {
+			if (typeof body.token === "string") terminal.releaseControl(identity, body.token);
+			return context.json({ held: false });
+		}
+		if (!capabilities.writable) {
+			const refused = {
+				held: false,
+				reason: capabilities.reason
+			};
+			return context.json(refused, 409);
+		}
+		const token = typeof body.token === "string" && body.token !== "" ? body.token : randomUUID();
+		if (!terminal.takeControl(identity, token)) return context.json({
+			held: false,
+			reason: "Another reader holds the keyboard."
+		}, 409);
+		const held = {
+			held: true,
+			token
+		};
+		return context.json(held);
+	});
+	app.post(apiRoutes_default.keys.path, async (context) => {
+		const workspace = context.req.param("workspace");
+		const runKey = context.req.param("runKey");
+		const record = await runOf(workspace, runKey);
+		if (record === void 0) return context.json(missing(workspace, runKey), 404);
+		const body = await jsonBody(context);
+		if (typeof body.token !== "string" || typeof body.data !== "string") return context.json({ error: "A keystroke needs a control token and its data." }, 400);
+		try {
+			await terminal.write(runIdentityOf(workspace, runKey), record, body.token, body.data);
+		} catch (error) {
+			return context.json({ error: error instanceof Error ? error.message : String(error) }, 409);
+		}
+		return context.body(null, 204);
+	});
+	app.post(apiRoutes_default.resize.path, async (context) => {
+		const workspace = context.req.param("workspace");
+		const runKey = context.req.param("runKey");
+		const record = await runOf(workspace, runKey);
+		if (record === void 0) return context.json(missing(workspace, runKey), 404);
+		const { token, columns, rows } = await jsonBody(context);
+		if (typeof token !== "string" || typeof columns !== "number" || typeof rows !== "number") return context.json({ error: "A resize needs a control token, columns and rows." }, 400);
+		try {
+			const resized = await terminal.resize(runIdentityOf(workspace, runKey), record, token, columns, rows);
+			return context.json({ resized });
+		} catch (error) {
+			return context.json({ error: error instanceof Error ? error.message : String(error) }, 409);
+		}
+	});
+	app.delete(apiRoutes_default.remove.path, async (context) => {
+		const workspace = context.req.param("workspace");
+		const runKey = context.req.param("runKey");
+		const record = await runOf(workspace, runKey);
+		if (record === void 0) return context.json(missing(workspace, runKey), 404);
+		if (record.stage === "running") return context.json({ error: "A running workflow must be stopped before it can be deleted." }, 409);
+		try {
+			fs.rmSync(registry.runDirectoryFor(record), {
+				recursive: true,
+				force: true
+			});
+		} catch (error) {
+			return context.json({ error: error instanceof Error ? error.message : String(error) }, 409);
+		}
+		return context.json({ deleted: true });
+	});
+	app.get(apiRoutes_default.artifacts.path, async (context) => {
+		const workspace = context.req.param("workspace");
+		const runKey = context.req.param("runKey");
+		const record = await runOf(workspace, runKey);
+		if (record === void 0) return context.json(missing(workspace, runKey), 404);
+		const runDir = registry.runDirectoryFor(record);
+		const body = {
+			runDir,
+			description: record.runDirectory?.description ?? "",
+			artifacts: readArtifacts(runDir, record)
+		};
+		return context.json(body);
+	});
+	app.get(apiRoutes_default.artifact.path, async (context) => {
+		const workspace = context.req.param("workspace");
+		const runKey = context.req.param("runKey");
+		const record = await runOf(workspace, runKey);
+		if (record === void 0) return context.json(missing(workspace, runKey), 404);
+		const runDir = registry.runDirectoryFor(record);
+		const requested = context.req.param("name");
+		const resolved = resolveInside(runDir, requested);
+		if (resolved === void 0) return context.json({ error: `'${requested}' is not inside this run.` }, 400);
+		if (context.req.query("raw") === "1") return streamArtifact(resolved, requested, context.req.header("range"), context.req.query("download") === "1") ?? context.json({ error: `'${requested}' has not been written.` }, 404);
+		const body = readArtifact(resolved, requested);
+		if (body === void 0) return context.json({ error: `'${requested}' has not been written.` }, 404);
+		return context.json(body);
+	});
+	return app;
+}
+/**
+* A path inside the run directory, or undefined when it points anywhere else.
+*
+* The client supplies this one verbatim, unlike the run key, so it is resolved
+* and then checked rather than trusted: without the check the route would read
+* any file the hub can reach.
+*/
+function resolveInside(runDir, requested) {
+	const resolved = path.resolve(runDir, requested);
+	const root = path.resolve(runDir);
+	if (resolved !== root && !resolved.startsWith(`${root}${path.sep}`)) return void 0;
+	return resolved;
+}
+/** Size and modification time of one path, or undefined when it is not there. */
+function statOf(target) {
+	try {
+		return fs.statSync(target);
+	} catch {
+		return;
+	}
+}
+function stateOf(stats) {
+	if (stats === void 0) return "pending";
+	if (stats.isDirectory()) return "written";
+	return stats.size === 0 ? "empty" : "written";
+}
+function viewOf(runDir, entry) {
+	const stats = statOf(path.join(runDir, entry.path));
+	return {
+		...entry,
+		state: stateOf(stats),
+		...stats === void 0 ? {} : {
+			size: stats.size,
+			modifiedAt: stats.mtime.toISOString()
+		}
+	};
+}
+/**
+* What the run directory holds: the workflow's own declaration first, then the
+* files nobody declared.
+*
+* The declaration is the point of the folder, so it leads and keeps its order
+* even for entries no job has written yet. The rest follows rather than being
+* hidden: the engine's own context.md and progress log are often exactly what a
+* reader is looking for.
+*/
+function readArtifacts(runDir, record) {
+	const declared = (record.runDirectory?.entries ?? []).map((entry) => viewOf(runDir, {
+		path: entry.path,
+		kind: entry.kind,
+		description: entry.description,
+		producedBy: entry["produced-by"] ?? [],
+		declared: true
+	}));
+	const claimed = new Set(declared.map((entry) => entry.path));
+	let names;
+	try {
+		names = fs.readdirSync(runDir, { withFileTypes: true });
+	} catch {
+		return declared;
+	}
+	const found = names.filter((entry) => !claimed.has(entry.name)).map((entry) => viewOf(runDir, {
+		path: entry.name,
+		kind: entry.isDirectory() ? "directory" : "file",
+		description: "",
+		producedBy: [],
+		declared: false
+	})).sort((left, right) => left.path.localeCompare(right.path));
+	return [...declared, ...found];
+}
+/** Browser content type inferred from a filename without trusting client input. */
+function artifactMimeType(requested) {
+	return ARTIFACT_MIME_TYPES[path.extname(requested).toLowerCase()] ?? "application/octet-stream";
+}
+function isTextArtifact(mimeType) {
+	return mimeType.startsWith("text/") || mimeType === "application/json" || mimeType === "application/xml";
+}
+/** One artifact's metadata and bounded text, or undefined when it is not readable. */
+function readArtifact(resolved, requested) {
+	const stats = statOf(resolved);
+	if (stats === void 0 || stats.isDirectory()) return void 0;
+	const mimeType = artifactMimeType(requested);
+	let text;
+	if (isTextArtifact(mimeType)) try {
+		const handle = fs.openSync(resolved, "r");
+		try {
+			const buffer = Buffer.alloc(Math.min(stats.size, MAX_ARTIFACT_BYTES));
+			fs.readSync(handle, buffer, 0, buffer.length, 0);
+			text = buffer.toString("utf8");
+		} finally {
+			fs.closeSync(handle);
+		}
+	} catch {
+		return;
+	}
+	return {
+		path: requested,
+		size: stats.size,
+		modifiedAt: stats.mtime.toISOString(),
+		mimeType,
+		...text === void 0 ? {} : { text },
+		truncated: text !== void 0 && stats.size > MAX_ARTIFACT_BYTES
+	};
+}
+/** Streams media with byte-range support so browser audio, video, and PDF controls can seek. */
+function streamArtifact(resolved, requested, rangeHeader, download) {
+	const stats = statOf(resolved);
+	if (stats === void 0 || stats.isDirectory()) return void 0;
+	const mimeType = artifactMimeType(requested);
+	let start = 0;
+	let end = Math.max(0, stats.size - 1);
+	let partial = false;
+	const match = rangeHeader?.match(/^bytes=(\d*)-(\d*)$/);
+	if (match !== null && match !== void 0 && stats.size > 0) {
+		const requestedStart = match[1] === "" ? void 0 : Number(match[1]);
+		const requestedEnd = match[2] === "" ? void 0 : Number(match[2]);
+		if (requestedStart === void 0 && requestedEnd !== void 0) start = Math.max(0, stats.size - requestedEnd);
+		else if (requestedStart !== void 0) {
+			start = requestedStart;
+			end = requestedEnd === void 0 ? end : Math.min(requestedEnd, end);
+		}
+		if (start >= stats.size || start > end) return new Response(null, {
+			status: 416,
+			headers: { "content-range": `bytes */${String(stats.size)}` }
+		});
+		partial = true;
+	}
+	const filename = path.basename(requested).replace(/["\\\r\n]/g, "_");
+	const headers = new Headers({
+		"accept-ranges": "bytes",
+		"content-disposition": `${download || mimeType === "text/html" ? "attachment" : "inline"}; filename="${filename}"`,
+		"content-length": String(stats.size === 0 ? 0 : end - start + 1),
+		"content-type": mimeType,
+		"x-content-type-options": "nosniff"
+	});
+	if (partial) headers.set("content-range", `bytes ${String(start)}-${String(end)}/${String(stats.size)}`);
+	if (stats.size === 0) return new Response(null, {
+		status: 200,
+		headers
+	});
+	const body = Readable.toWeb(fs.createReadStream(resolved, {
+		start,
+		end
+	}));
+	return new Response(body, {
+		status: partial ? 206 : 200,
+		headers
+	});
+}
+/** The named export a host imports from this package's built hub entry. */
+const api = {
+	basePath: WORKFLOW_API_BASE_PATH,
+	start(_context) {
+		const app = createWorkflowHubApi();
+		return {
+			fetch: (request) => app.fetch(request),
+			close: () => void 0
+		};
+	}
+};
+//#endregion
+export { api, createWorkflowHubApi };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/workflowHubApi/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":["WorkflowTerminalFacade","routes"],"sources":["../../../../src/services/workflowHubApi/index.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { Readable } from 'node:stream';\n\nimport type { DoomApi, DoomApiContext, DoomApiHandler } from '@agimon-ai/doompi-core/package-api';\nimport {\n  WorkflowRegistryService,\n  WorkflowTerminalService as WorkflowTerminalFacade,\n  type WorkflowRunRecord,\n  type WorkflowStage,\n} from '@agimon-ai/workflow-mcp';\nimport { type Context, Hono } from 'hono';\nimport { streamSSE } from 'hono/streaming';\n\nimport { createWorkflowTerminalService } from '../../services/workflowTerminal';\nimport routes, { ARTIFACT_DOWNLOAD_PARAM, ARTIFACT_RAW_PARAM } from '../../types/apiRoutes';\nimport {\n  WORKFLOW_API_BASE_PATH,\n  WORKFLOW_SCREEN_EVENT,\n  type WorkflowArtifactContentResponse,\n  type WorkflowArtifactsResponse,\n  type WorkflowArtifactView,\n  type WorkflowControlResponse,\n  type WorkflowDeleteResponse,\n  type WorkflowScreenEvent,\n} from '../../types/webWorkflowTerminal';\n\n/** Stages a run can be recorded under, newest first: a live run is the common case. */\nconst STAGES: readonly WorkflowStage[] = ['running', 'error', 'completed'];\n/** Lines of screen the stream sends, which is a terminal's visible height plus room. */\nconst SCREEN_LINES = 48;\n/** How often the stream re-reads; the service coalesces, so this is an upper bound. */\nconst STREAM_TICK_MS = 500;\n/** How often a settled run is re-checked before the stream closes itself. */\nconst SETTLED_POLL_TICKS = 4;\n/** Bytes of one textual artifact returned as JSON; binary previews use a stream. */\nconst MAX_ARTIFACT_BYTES = 512 * 1024;\n/** Path segments a client supplies are names, never paths. */\nconst SAFE_SEGMENT = /^[\\w.@-]+$/;\nconst ARTIFACT_MIME_TYPES: Readonly<Record<string, string>> = {\n  '.aac': 'audio/aac',\n  '.bmp': 'image/bmp',\n  '.css': 'text/css',\n  '.csv': 'text/csv',\n  '.gif': 'image/gif',\n  '.htm': 'text/html',\n  '.html': 'text/html',\n  '.ico': 'image/x-icon',\n  '.jpeg': 'image/jpeg',\n  '.jpg': 'image/jpeg',\n  '.js': 'text/javascript',\n  '.json': 'application/json',\n  '.jsx': 'text/jsx',\n  '.m4a': 'audio/mp4',\n  '.markdown': 'text/markdown',\n  '.md': 'text/markdown',\n  '.mov': 'video/quicktime',\n  '.mp3': 'audio/mpeg',\n  '.mp4': 'video/mp4',\n  '.oga': 'audio/ogg',\n  '.ogg': 'audio/ogg',\n  '.ogv': 'video/ogg',\n  '.pdf': 'application/pdf',\n  '.png': 'image/png',\n  '.sh': 'text/x-shellscript',\n  '.svg': 'image/svg+xml',\n  '.toml': 'text/toml',\n  '.ts': 'text/typescript',\n  '.tsv': 'text/tab-separated-values',\n  '.tsx': 'text/tsx',\n  '.txt': 'text/plain',\n  '.wav': 'audio/wav',\n  '.webm': 'video/webm',\n  '.webp': 'image/webp',\n  '.xml': 'application/xml',\n  '.yaml': 'text/yaml',\n  '.yml': 'text/yaml',\n};\n\n/**\n * One request's JSON body as a plain record.\n *\n * A body that is absent, malformed, or not an object reads as empty rather\n * than failing the route: every field is checked by the route anyway, and a\n * 400 naming the missing field beats a parse error naming nothing.\n */\nasync function jsonBody(context: Context): Promise<Record<string, unknown>> {\n  const parsed: unknown = await context.req.json().catch(() => undefined);\n  return parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed)\n    ? (parsed as Record<string, unknown>)\n    : {};\n}\n\n/** Rejects anything that could climb out of the registry before a path is built. */\nfunction isSafeSegment(value: string): boolean {\n  return value !== '' && value !== '../adapters' && value !== '..' && SAFE_SEGMENT.test(value);\n}\n\n/** One run's identity for caches and leases, stable across stage moves. */\nfunction runIdentityOf(workspace: string, runKey: string): string {\n  return `${workspace}/${runKey}`;\n}\n\nexport interface WorkflowHubApiOptions {\n  registry?: WorkflowRegistryService;\n  terminal?: WorkflowTerminalFacade;\n  now?: () => number;\n}\n\n/**\n * This package's HTTP surface: one workflow run's terminal, and the files its\n * run directory holds.\n *\n * Mounted in the hub rather than in a session's server, because a run's\n * terminal belongs to its multiplexer rather than to the session that launched\n * it: any process can read a tmux pane, and the session's own server cannot\n * reach anything more. The routes therefore name a run, never a session.\n */\nexport function createWorkflowHubApi(options: WorkflowHubApiOptions = {}): Hono {\n  const registry = options.registry ?? new WorkflowRegistryService();\n  const facade = options.terminal ?? new WorkflowTerminalFacade();\n  const terminal = createWorkflowTerminalService<WorkflowRunRecord>({\n    terminal: facade,\n    now: options.now ?? (() => Date.now()),\n  });\n  const app = new Hono();\n\n  /** The record behind a request, whichever stage it now sits in. */\n  const runOf = async (workspace: string, runKey: string): Promise<WorkflowRunRecord | undefined> => {\n    if (!isSafeSegment(workspace) || !isSafeSegment(runKey)) return undefined;\n    for (const stage of STAGES) {\n      try {\n        return await registry.readRunByKey(workspace, stage, runKey);\n      } catch {\n        // Not in this stage. A run moves between them as it settles, so a miss\n        // here is ordinary; only a miss in every stage means no such run.\n      }\n    }\n    return undefined;\n  };\n\n  const missing = (workspace: string, runKey: string): { error: string } => ({\n    error: `No workflow run '${runKey}' in workspace '${workspace}'.`,\n  });\n\n  app.get(routes.screen.path, async (context) => {\n    const workspace = context.req.param('workspace');\n    const runKey = context.req.param('runKey');\n    const record = await runOf(workspace, runKey);\n    if (record === undefined) return context.json(missing(workspace, runKey), 404);\n    const identity = runIdentityOf(workspace, runKey);\n\n    return streamSSE(context, async (stream) => {\n      let settledTicks = 0;\n      let running = true;\n      stream.onAbort(() => {\n        running = false;\n      });\n      while (running) {\n        const current = (await runOf(workspace, runKey)) ?? record;\n        const capabilities = terminal.capabilities(current);\n        const lines = capabilities.readable ? await terminal.screen(identity, current, SCREEN_LINES) : [];\n        // A settled run is read a few more times before the stream closes: the\n        // last thing a failing step printed is what the reader came for, and it\n        // lands after the record has already moved to its final stage.\n        const settled = current.stage !== 'running';\n        if (settled) settledTicks += 1;\n        const ended = settled && settledTicks >= SETTLED_POLL_TICKS;\n        const event: WorkflowScreenEvent = { lines, capabilities, ...(ended ? { ended: true } : {}) };\n        await stream.writeSSE({ event: WORKFLOW_SCREEN_EVENT, data: JSON.stringify(event) });\n        if (ended) break;\n        await stream.sleep(STREAM_TICK_MS);\n      }\n      terminal.forget(new Set());\n    });\n  });\n\n  app.post(routes.control.path, async (context) => {\n    const workspace = context.req.param('workspace');\n    const runKey = context.req.param('runKey');\n    const record = await runOf(workspace, runKey);\n    if (record === undefined) return context.json(missing(workspace, runKey), 404);\n    const identity = runIdentityOf(workspace, runKey);\n    const body = await jsonBody(context);\n    const capabilities = terminal.capabilities(record);\n\n    if (body.release === true) {\n      if (typeof body.token === 'string') terminal.releaseControl(identity, body.token);\n      const released: WorkflowControlResponse = { held: false };\n      return context.json(released);\n    }\n    if (!capabilities.writable) {\n      const refused: WorkflowControlResponse = { held: false, reason: capabilities.reason };\n      return context.json(refused, 409);\n    }\n    const token = typeof body.token === 'string' && body.token !== '' ? body.token : randomUUID();\n    if (!terminal.takeControl(identity, token)) {\n      const taken: WorkflowControlResponse = { held: false, reason: 'Another reader holds the keyboard.' };\n      return context.json(taken, 409);\n    }\n    const held: WorkflowControlResponse = { held: true, token };\n    return context.json(held);\n  });\n\n  app.post(routes.keys.path, async (context) => {\n    const workspace = context.req.param('workspace');\n    const runKey = context.req.param('runKey');\n    const record = await runOf(workspace, runKey);\n    if (record === undefined) return context.json(missing(workspace, runKey), 404);\n    const body = await jsonBody(context);\n    if (typeof body.token !== 'string' || typeof body.data !== 'string') {\n      return context.json({ error: 'A keystroke needs a control token and its data.' }, 400);\n    }\n    try {\n      await terminal.write(runIdentityOf(workspace, runKey), record, body.token, body.data);\n    } catch (error) {\n      return context.json({ error: error instanceof Error ? error.message : String(error) }, 409);\n    }\n    return context.body(null, 204);\n  });\n\n  app.post(routes.resize.path, async (context) => {\n    const workspace = context.req.param('workspace');\n    const runKey = context.req.param('runKey');\n    const record = await runOf(workspace, runKey);\n    if (record === undefined) return context.json(missing(workspace, runKey), 404);\n    const body = await jsonBody(context);\n    const { token, columns, rows } = body;\n    if (typeof token !== 'string' || typeof columns !== 'number' || typeof rows !== 'number') {\n      return context.json({ error: 'A resize needs a control token, columns and rows.' }, 400);\n    }\n    try {\n      const resized = await terminal.resize(runIdentityOf(workspace, runKey), record, token, columns, rows);\n      return context.json({ resized });\n    } catch (error) {\n      return context.json({ error: error instanceof Error ? error.message : String(error) }, 409);\n    }\n  });\n\n  app.delete(routes.remove.path, async (context) => {\n    const workspace = context.req.param('workspace');\n    const runKey = context.req.param('runKey');\n    const record = await runOf(workspace, runKey);\n    if (record === undefined) return context.json(missing(workspace, runKey), 404);\n    if (record.stage === 'running') {\n      return context.json({ error: 'A running workflow must be stopped before it can be deleted.' }, 409);\n    }\n    try {\n      fs.rmSync(registry.runDirectoryFor(record), { recursive: true, force: true });\n    } catch (error) {\n      return context.json({ error: error instanceof Error ? error.message : String(error) }, 409);\n    }\n    const response: WorkflowDeleteResponse = { deleted: true };\n    return context.json(response);\n  });\n\n  app.get(routes.artifacts.path, async (context) => {\n    const workspace = context.req.param('workspace');\n    const runKey = context.req.param('runKey');\n    const record = await runOf(workspace, runKey);\n    if (record === undefined) return context.json(missing(workspace, runKey), 404);\n    const runDir = registry.runDirectoryFor(record);\n    const body: WorkflowArtifactsResponse = {\n      runDir,\n      description: record.runDirectory?.description ?? '',\n      artifacts: readArtifacts(runDir, record),\n    };\n    return context.json(body);\n  });\n\n  app.get(routes.artifact.path, async (context) => {\n    const workspace = context.req.param('workspace');\n    const runKey = context.req.param('runKey');\n    const record = await runOf(workspace, runKey);\n    if (record === undefined) return context.json(missing(workspace, runKey), 404);\n    const runDir = registry.runDirectoryFor(record);\n    const requested = context.req.param('name');\n    const resolved = resolveInside(runDir, requested);\n    if (resolved === undefined) return context.json({ error: `'${requested}' is not inside this run.` }, 400);\n    if (context.req.query(ARTIFACT_RAW_PARAM) === '1') {\n      const response = streamArtifact(\n        resolved,\n        requested,\n        context.req.header('range'),\n        context.req.query(ARTIFACT_DOWNLOAD_PARAM) === '1',\n      );\n      return response ?? context.json({ error: `'${requested}' has not been written.` }, 404);\n    }\n    const body = readArtifact(resolved, requested);\n    if (body === undefined) return context.json({ error: `'${requested}' has not been written.` }, 404);\n    return context.json(body);\n  });\n\n  return app;\n}\n\n/**\n * A path inside the run directory, or undefined when it points anywhere else.\n *\n * The client supplies this one verbatim, unlike the run key, so it is resolved\n * and then checked rather than trusted: without the check the route would read\n * any file the hub can reach.\n */\nfunction resolveInside(runDir: string, requested: string): string | undefined {\n  const resolved = path.resolve(runDir, requested);\n  const root = path.resolve(runDir);\n  if (resolved !== root && !resolved.startsWith(`${root}${path.sep}`)) return undefined;\n  return resolved;\n}\n\n/** Size and modification time of one path, or undefined when it is not there. */\nfunction statOf(target: string): fs.Stats | undefined {\n  try {\n    return fs.statSync(target);\n  } catch {\n    return undefined; // Not written yet, which is an ordinary state for an artifact.\n  }\n}\n\nfunction stateOf(stats: fs.Stats | undefined): WorkflowArtifactView['state'] {\n  if (stats === undefined) return 'pending';\n  if (stats.isDirectory()) return 'written';\n  return stats.size === 0 ? 'empty' : 'written';\n}\n\nfunction viewOf(\n  runDir: string,\n  entry: Omit<WorkflowArtifactView, 'state' | 'size' | 'modifiedAt'>,\n): WorkflowArtifactView {\n  const stats = statOf(path.join(runDir, entry.path));\n  return {\n    ...entry,\n    state: stateOf(stats),\n    ...(stats === undefined ? {} : { size: stats.size, modifiedAt: stats.mtime.toISOString() }),\n  };\n}\n\n/**\n * What the run directory holds: the workflow's own declaration first, then the\n * files nobody declared.\n *\n * The declaration is the point of the folder, so it leads and keeps its order\n * even for entries no job has written yet. The rest follows rather than being\n * hidden: the engine's own context.md and progress log are often exactly what a\n * reader is looking for.\n */\nfunction readArtifacts(runDir: string, record: WorkflowRunRecord): WorkflowArtifactView[] {\n  const declared = (record.runDirectory?.entries ?? []).map((entry) =>\n    viewOf(runDir, {\n      path: entry.path,\n      kind: entry.kind,\n      description: entry.description,\n      producedBy: entry['produced-by'] ?? [],\n      declared: true,\n    }),\n  );\n  const claimed = new Set(declared.map((entry) => entry.path));\n  let names: fs.Dirent[];\n  try {\n    names = fs.readdirSync(runDir, { withFileTypes: true });\n  } catch {\n    return declared; // The directory is gone; the declaration is still worth showing.\n  }\n  const found = names\n    .filter((entry) => !claimed.has(entry.name))\n    .map((entry) =>\n      viewOf(runDir, {\n        path: entry.name,\n        kind: entry.isDirectory() ? 'directory' : 'file',\n        description: '',\n        producedBy: [],\n        declared: false,\n      }),\n    )\n    .sort((left, right) => left.path.localeCompare(right.path));\n  return [...declared, ...found];\n}\n\n/** Browser content type inferred from a filename without trusting client input. */\nfunction artifactMimeType(requested: string): string {\n  return ARTIFACT_MIME_TYPES[path.extname(requested).toLowerCase()] ?? 'application/octet-stream';\n}\n\nfunction isTextArtifact(mimeType: string): boolean {\n  return mimeType.startsWith('text/') || mimeType === 'application/json' || mimeType === 'application/xml';\n}\n\n/** One artifact's metadata and bounded text, or undefined when it is not readable. */\nfunction readArtifact(resolved: string, requested: string): WorkflowArtifactContentResponse | undefined {\n  const stats = statOf(resolved);\n  if (stats === undefined || stats.isDirectory()) return undefined;\n  const mimeType = artifactMimeType(requested);\n  let text: string | undefined;\n  if (isTextArtifact(mimeType)) {\n    try {\n      const handle = fs.openSync(resolved, 'r');\n      try {\n        const buffer = Buffer.alloc(Math.min(stats.size, MAX_ARTIFACT_BYTES));\n        fs.readSync(handle, buffer, 0, buffer.length, 0);\n        text = buffer.toString('utf8');\n      } finally {\n        fs.closeSync(handle);\n      }\n    } catch {\n      return undefined;\n    }\n  }\n  return {\n    path: requested,\n    size: stats.size,\n    modifiedAt: stats.mtime.toISOString(),\n    mimeType,\n    ...(text === undefined ? {} : { text }),\n    truncated: text !== undefined && stats.size > MAX_ARTIFACT_BYTES,\n  };\n}\n\n/** Streams media with byte-range support so browser audio, video, and PDF controls can seek. */\nfunction streamArtifact(\n  resolved: string,\n  requested: string,\n  rangeHeader: string | undefined,\n  download: boolean,\n): Response | undefined {\n  const stats = statOf(resolved);\n  if (stats === undefined || stats.isDirectory()) return undefined;\n  const mimeType = artifactMimeType(requested);\n  let start = 0;\n  let end = Math.max(0, stats.size - 1);\n  let partial = false;\n  const match = rangeHeader?.match(/^bytes=(\\d*)-(\\d*)$/);\n  if (match !== null && match !== undefined && stats.size > 0) {\n    const requestedStart = match[1] === '' ? undefined : Number(match[1]);\n    const requestedEnd = match[2] === '' ? undefined : Number(match[2]);\n    if (requestedStart === undefined && requestedEnd !== undefined) {\n      start = Math.max(0, stats.size - requestedEnd);\n    } else if (requestedStart !== undefined) {\n      start = requestedStart;\n      end = requestedEnd === undefined ? end : Math.min(requestedEnd, end);\n    }\n    if (start >= stats.size || start > end) {\n      return new Response(null, { status: 416, headers: { 'content-range': `bytes */${String(stats.size)}` } });\n    }\n    partial = true;\n  }\n  const filename = path.basename(requested).replace(/[\"\\\\\\r\\n]/g, '_');\n  const forceDownload = download || mimeType === 'text/html';\n  const headers = new Headers({\n    'accept-ranges': 'bytes',\n    'content-disposition': `${forceDownload ? 'attachment' : 'inline'}; filename=\"${filename}\"`,\n    'content-length': String(stats.size === 0 ? 0 : end - start + 1),\n    'content-type': mimeType,\n    'x-content-type-options': 'nosniff',\n  });\n  if (partial) headers.set('content-range', `bytes ${String(start)}-${String(end)}/${String(stats.size)}`);\n  if (stats.size === 0) return new Response(null, { status: 200, headers });\n  const body = Readable.toWeb(fs.createReadStream(resolved, { start, end }));\n  return new Response(body, { status: partial ? 206 : 200, headers });\n}\n\n/** The named export a host imports from this package's built hub entry. */\nexport const api: DoomApi = {\n  basePath: WORKFLOW_API_BASE_PATH,\n  start(_context: DoomApiContext): DoomApiHandler {\n    // Hub-scoped: the host hands no session, and these routes want none. A run\n    // is addressed by its registry identity, which is machine-wide.\n    const app = createWorkflowHubApi();\n    return {\n      fetch: (request) => app.fetch(request),\n      // Nothing outlives a request: a stream's loop ends when its own socket\n      // aborts, and the caches it touched are per run rather than per client.\n      close: () => undefined,\n    };\n  },\n};\n"],"mappings":";;;;;;;;;;;;AA6BA,MAAM,SAAmC;CAAC;CAAW;CAAS;AAAW;;AAEzE,MAAM,eAAe;;AAErB,MAAM,iBAAiB;;AAEvB,MAAM,qBAAqB;;AAE3B,MAAM,qBAAqB;;AAE3B,MAAM,eAAe;AACrB,MAAM,sBAAwD;CAC5D,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,OAAO;CACP,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,aAAa;CACb,OAAO;CACP,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,OAAO;CACP,QAAQ;CACR,SAAS;CACT,OAAO;CACP,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,SAAS;CACT,QAAQ;CACR,SAAS;CACT,QAAQ;AACV;;;;;;;;AASA,eAAe,SAAS,SAAoD;CAC1E,MAAM,SAAkB,MAAM,QAAQ,IAAI,KAAK,CAAC,CAAC,YAAY,KAAA,CAAS;CACtE,OAAO,WAAW,QAAQ,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,IACxE,SACD,CAAC;AACP;;AAGA,SAAS,cAAc,OAAwB;CAC7C,OAAO,UAAU,MAAM,UAAU,iBAAiB,UAAU,QAAQ,aAAa,KAAK,KAAK;AAC7F;;AAGA,SAAS,cAAc,WAAmB,QAAwB;CAChE,OAAO,GAAG,UAAU,GAAG;AACzB;;;;;;;;;;AAiBA,SAAgB,qBAAqB,UAAiC,CAAC,GAAS;CAC9E,MAAM,WAAW,QAAQ,YAAY,IAAI,wBAAwB;CACjE,MAAM,SAAS,QAAQ,YAAY,IAAIA,wBAAuB;CAC9D,MAAM,WAAW,8BAAiD;EAChE,UAAU;EACV,KAAK,QAAQ,cAAc,KAAK,IAAI;CACtC,CAAC;CACD,MAAM,MAAM,IAAI,KAAK;;CAGrB,MAAM,QAAQ,OAAO,WAAmB,WAA2D;EACjG,IAAI,CAAC,cAAc,SAAS,KAAK,CAAC,cAAc,MAAM,GAAG,OAAO,KAAA;EAChE,KAAK,MAAM,SAAS,QAClB,IAAI;GACF,OAAO,MAAM,SAAS,aAAa,WAAW,OAAO,MAAM;EAC7D,QAAQ,CAGR;CAGJ;CAEA,MAAM,WAAW,WAAmB,YAAuC,EACzE,OAAO,oBAAoB,OAAO,kBAAkB,UAAU,IAChE;CAEA,IAAI,IAAIC,kBAAO,OAAO,MAAM,OAAO,YAAY;EAC7C,MAAM,YAAY,QAAQ,IAAI,MAAM,WAAW;EAC/C,MAAM,SAAS,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM;EAC5C,IAAI,WAAW,KAAA,GAAW,OAAO,QAAQ,KAAK,QAAQ,WAAW,MAAM,GAAG,GAAG;EAC7E,MAAM,WAAW,cAAc,WAAW,MAAM;EAEhD,OAAO,UAAU,SAAS,OAAO,WAAW;GAC1C,IAAI,eAAe;GACnB,IAAI,UAAU;GACd,OAAO,cAAc;IACnB,UAAU;GACZ,CAAC;GACD,OAAO,SAAS;IACd,MAAM,UAAW,MAAM,MAAM,WAAW,MAAM,KAAM;IACpD,MAAM,eAAe,SAAS,aAAa,OAAO;IAClD,MAAM,QAAQ,aAAa,WAAW,MAAM,SAAS,OAAO,UAAU,SAAS,YAAY,IAAI,CAAC;IAIhG,MAAM,UAAU,QAAQ,UAAU;IAClC,IAAI,SAAS,gBAAgB;IAC7B,MAAM,QAAQ,WAAW,gBAAgB;IACzC,MAAM,QAA6B;KAAE;KAAO;KAAc,GAAI,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IAAG;IAC5F,MAAM,OAAO,SAAS;KAAE,OAAO;KAAuB,MAAM,KAAK,UAAU,KAAK;IAAE,CAAC;IACnF,IAAI,OAAO;IACX,MAAM,OAAO,MAAM,cAAc;GACnC;GACA,SAAS,uBAAO,IAAI,IAAI,CAAC;EAC3B,CAAC;CACH,CAAC;CAED,IAAI,KAAKA,kBAAO,QAAQ,MAAM,OAAO,YAAY;EAC/C,MAAM,YAAY,QAAQ,IAAI,MAAM,WAAW;EAC/C,MAAM,SAAS,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM;EAC5C,IAAI,WAAW,KAAA,GAAW,OAAO,QAAQ,KAAK,QAAQ,WAAW,MAAM,GAAG,GAAG;EAC7E,MAAM,WAAW,cAAc,WAAW,MAAM;EAChD,MAAM,OAAO,MAAM,SAAS,OAAO;EACnC,MAAM,eAAe,SAAS,aAAa,MAAM;EAEjD,IAAI,KAAK,YAAY,MAAM;GACzB,IAAI,OAAO,KAAK,UAAU,UAAU,SAAS,eAAe,UAAU,KAAK,KAAK;GAEhF,OAAO,QAAQ,KAAK,EADwB,MAAM,MACvB,CAAC;EAC9B;EACA,IAAI,CAAC,aAAa,UAAU;GAC1B,MAAM,UAAmC;IAAE,MAAM;IAAO,QAAQ,aAAa;GAAO;GACpF,OAAO,QAAQ,KAAK,SAAS,GAAG;EAClC;EACA,MAAM,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,UAAU,KAAK,KAAK,QAAQ,WAAW;EAC5F,IAAI,CAAC,SAAS,YAAY,UAAU,KAAK,GAEvC,OAAO,QAAQ,KAAK;GADqB,MAAM;GAAO,QAAQ;EACtC,GAAG,GAAG;EAEhC,MAAM,OAAgC;GAAE,MAAM;GAAM;EAAM;EAC1D,OAAO,QAAQ,KAAK,IAAI;CAC1B,CAAC;CAED,IAAI,KAAKA,kBAAO,KAAK,MAAM,OAAO,YAAY;EAC5C,MAAM,YAAY,QAAQ,IAAI,MAAM,WAAW;EAC/C,MAAM,SAAS,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM;EAC5C,IAAI,WAAW,KAAA,GAAW,OAAO,QAAQ,KAAK,QAAQ,WAAW,MAAM,GAAG,GAAG;EAC7E,MAAM,OAAO,MAAM,SAAS,OAAO;EACnC,IAAI,OAAO,KAAK,UAAU,YAAY,OAAO,KAAK,SAAS,UACzD,OAAO,QAAQ,KAAK,EAAE,OAAO,kDAAkD,GAAG,GAAG;EAEvF,IAAI;GACF,MAAM,SAAS,MAAM,cAAc,WAAW,MAAM,GAAG,QAAQ,KAAK,OAAO,KAAK,IAAI;EACtF,SAAS,OAAO;GACd,OAAO,QAAQ,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EAC5F;EACA,OAAO,QAAQ,KAAK,MAAM,GAAG;CAC/B,CAAC;CAED,IAAI,KAAKA,kBAAO,OAAO,MAAM,OAAO,YAAY;EAC9C,MAAM,YAAY,QAAQ,IAAI,MAAM,WAAW;EAC/C,MAAM,SAAS,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM;EAC5C,IAAI,WAAW,KAAA,GAAW,OAAO,QAAQ,KAAK,QAAQ,WAAW,MAAM,GAAG,GAAG;EAE7E,MAAM,EAAE,OAAO,SAAS,SAAS,MADd,SAAS,OAAO;EAEnC,IAAI,OAAO,UAAU,YAAY,OAAO,YAAY,YAAY,OAAO,SAAS,UAC9E,OAAO,QAAQ,KAAK,EAAE,OAAO,oDAAoD,GAAG,GAAG;EAEzF,IAAI;GACF,MAAM,UAAU,MAAM,SAAS,OAAO,cAAc,WAAW,MAAM,GAAG,QAAQ,OAAO,SAAS,IAAI;GACpG,OAAO,QAAQ,KAAK,EAAE,QAAQ,CAAC;EACjC,SAAS,OAAO;GACd,OAAO,QAAQ,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EAC5F;CACF,CAAC;CAED,IAAI,OAAOA,kBAAO,OAAO,MAAM,OAAO,YAAY;EAChD,MAAM,YAAY,QAAQ,IAAI,MAAM,WAAW;EAC/C,MAAM,SAAS,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM;EAC5C,IAAI,WAAW,KAAA,GAAW,OAAO,QAAQ,KAAK,QAAQ,WAAW,MAAM,GAAG,GAAG;EAC7E,IAAI,OAAO,UAAU,WACnB,OAAO,QAAQ,KAAK,EAAE,OAAO,+DAA+D,GAAG,GAAG;EAEpG,IAAI;GACF,GAAG,OAAO,SAAS,gBAAgB,MAAM,GAAG;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;EAC9E,SAAS,OAAO;GACd,OAAO,QAAQ,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EAC5F;EAEA,OAAO,QAAQ,KAAK,EADuB,SAAS,KACzB,CAAC;CAC9B,CAAC;CAED,IAAI,IAAIA,kBAAO,UAAU,MAAM,OAAO,YAAY;EAChD,MAAM,YAAY,QAAQ,IAAI,MAAM,WAAW;EAC/C,MAAM,SAAS,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM;EAC5C,IAAI,WAAW,KAAA,GAAW,OAAO,QAAQ,KAAK,QAAQ,WAAW,MAAM,GAAG,GAAG;EAC7E,MAAM,SAAS,SAAS,gBAAgB,MAAM;EAC9C,MAAM,OAAkC;GACtC;GACA,aAAa,OAAO,cAAc,eAAe;GACjD,WAAW,cAAc,QAAQ,MAAM;EACzC;EACA,OAAO,QAAQ,KAAK,IAAI;CAC1B,CAAC;CAED,IAAI,IAAIA,kBAAO,SAAS,MAAM,OAAO,YAAY;EAC/C,MAAM,YAAY,QAAQ,IAAI,MAAM,WAAW;EAC/C,MAAM,SAAS,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM;EAC5C,IAAI,WAAW,KAAA,GAAW,OAAO,QAAQ,KAAK,QAAQ,WAAW,MAAM,GAAG,GAAG;EAC7E,MAAM,SAAS,SAAS,gBAAgB,MAAM;EAC9C,MAAM,YAAY,QAAQ,IAAI,MAAM,MAAM;EAC1C,MAAM,WAAW,cAAc,QAAQ,SAAS;EAChD,IAAI,aAAa,KAAA,GAAW,OAAO,QAAQ,KAAK,EAAE,OAAO,IAAI,UAAU,2BAA2B,GAAG,GAAG;EACxG,IAAI,QAAQ,IAAI,MAAA,KAAwB,MAAM,KAO5C,OANiB,eACf,UACA,WACA,QAAQ,IAAI,OAAO,OAAO,GAC1B,QAAQ,IAAI,MAAA,UAA6B,MAAM,GAEnC,KAAK,QAAQ,KAAK,EAAE,OAAO,IAAI,UAAU,yBAAyB,GAAG,GAAG;EAExF,MAAM,OAAO,aAAa,UAAU,SAAS;EAC7C,IAAI,SAAS,KAAA,GAAW,OAAO,QAAQ,KAAK,EAAE,OAAO,IAAI,UAAU,yBAAyB,GAAG,GAAG;EAClG,OAAO,QAAQ,KAAK,IAAI;CAC1B,CAAC;CAED,OAAO;AACT;;;;;;;;AASA,SAAS,cAAc,QAAgB,WAAuC;CAC5E,MAAM,WAAW,KAAK,QAAQ,QAAQ,SAAS;CAC/C,MAAM,OAAO,KAAK,QAAQ,MAAM;CAChC,IAAI,aAAa,QAAQ,CAAC,SAAS,WAAW,GAAG,OAAO,KAAK,KAAK,GAAG,OAAO,KAAA;CAC5E,OAAO;AACT;;AAGA,SAAS,OAAO,QAAsC;CACpD,IAAI;EACF,OAAO,GAAG,SAAS,MAAM;CAC3B,QAAQ;EACN;CACF;AACF;AAEA,SAAS,QAAQ,OAA4D;CAC3E,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,IAAI,MAAM,YAAY,GAAG,OAAO;CAChC,OAAO,MAAM,SAAS,IAAI,UAAU;AACtC;AAEA,SAAS,OACP,QACA,OACsB;CACtB,MAAM,QAAQ,OAAO,KAAK,KAAK,QAAQ,MAAM,IAAI,CAAC;CAClD,OAAO;EACL,GAAG;EACH,OAAO,QAAQ,KAAK;EACpB,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI;GAAE,MAAM,MAAM;GAAM,YAAY,MAAM,MAAM,YAAY;EAAE;CAC3F;AACF;;;;;;;;;;AAWA,SAAS,cAAc,QAAgB,QAAmD;CACxF,MAAM,YAAY,OAAO,cAAc,WAAW,CAAC,EAAA,CAAG,KAAK,UACzD,OAAO,QAAQ;EACb,MAAM,MAAM;EACZ,MAAM,MAAM;EACZ,aAAa,MAAM;EACnB,YAAY,MAAM,kBAAkB,CAAC;EACrC,UAAU;CACZ,CAAC,CACH;CACA,MAAM,UAAU,IAAI,IAAI,SAAS,KAAK,UAAU,MAAM,IAAI,CAAC;CAC3D,IAAI;CACJ,IAAI;EACF,QAAQ,GAAG,YAAY,QAAQ,EAAE,eAAe,KAAK,CAAC;CACxD,QAAQ;EACN,OAAO;CACT;CACA,MAAM,QAAQ,MACX,QAAQ,UAAU,CAAC,QAAQ,IAAI,MAAM,IAAI,CAAC,CAAC,CAC3C,KAAK,UACJ,OAAO,QAAQ;EACb,MAAM,MAAM;EACZ,MAAM,MAAM,YAAY,IAAI,cAAc;EAC1C,aAAa;EACb,YAAY,CAAC;EACb,UAAU;CACZ,CAAC,CACH,CAAC,CACA,MAAM,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC;CAC5D,OAAO,CAAC,GAAG,UAAU,GAAG,KAAK;AAC/B;;AAGA,SAAS,iBAAiB,WAA2B;CACnD,OAAO,oBAAoB,KAAK,QAAQ,SAAS,CAAC,CAAC,YAAY,MAAM;AACvE;AAEA,SAAS,eAAe,UAA2B;CACjD,OAAO,SAAS,WAAW,OAAO,KAAK,aAAa,sBAAsB,aAAa;AACzF;;AAGA,SAAS,aAAa,UAAkB,WAAgE;CACtG,MAAM,QAAQ,OAAO,QAAQ;CAC7B,IAAI,UAAU,KAAA,KAAa,MAAM,YAAY,GAAG,OAAO,KAAA;CACvD,MAAM,WAAW,iBAAiB,SAAS;CAC3C,IAAI;CACJ,IAAI,eAAe,QAAQ,GACzB,IAAI;EACF,MAAM,SAAS,GAAG,SAAS,UAAU,GAAG;EACxC,IAAI;GACF,MAAM,SAAS,OAAO,MAAM,KAAK,IAAI,MAAM,MAAM,kBAAkB,CAAC;GACpE,GAAG,SAAS,QAAQ,QAAQ,GAAG,OAAO,QAAQ,CAAC;GAC/C,OAAO,OAAO,SAAS,MAAM;EAC/B,UAAU;GACR,GAAG,UAAU,MAAM;EACrB;CACF,QAAQ;EACN;CACF;CAEF,OAAO;EACL,MAAM;EACN,MAAM,MAAM;EACZ,YAAY,MAAM,MAAM,YAAY;EACpC;EACA,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;EACrC,WAAW,SAAS,KAAA,KAAa,MAAM,OAAO;CAChD;AACF;;AAGA,SAAS,eACP,UACA,WACA,aACA,UACsB;CACtB,MAAM,QAAQ,OAAO,QAAQ;CAC7B,IAAI,UAAU,KAAA,KAAa,MAAM,YAAY,GAAG,OAAO,KAAA;CACvD,MAAM,WAAW,iBAAiB,SAAS;CAC3C,IAAI,QAAQ;CACZ,IAAI,MAAM,KAAK,IAAI,GAAG,MAAM,OAAO,CAAC;CACpC,IAAI,UAAU;CACd,MAAM,QAAQ,aAAa,MAAM,qBAAqB;CACtD,IAAI,UAAU,QAAQ,UAAU,KAAA,KAAa,MAAM,OAAO,GAAG;EAC3D,MAAM,iBAAiB,MAAM,OAAO,KAAK,KAAA,IAAY,OAAO,MAAM,EAAE;EACpE,MAAM,eAAe,MAAM,OAAO,KAAK,KAAA,IAAY,OAAO,MAAM,EAAE;EAClE,IAAI,mBAAmB,KAAA,KAAa,iBAAiB,KAAA,GACnD,QAAQ,KAAK,IAAI,GAAG,MAAM,OAAO,YAAY;OACxC,IAAI,mBAAmB,KAAA,GAAW;GACvC,QAAQ;GACR,MAAM,iBAAiB,KAAA,IAAY,MAAM,KAAK,IAAI,cAAc,GAAG;EACrE;EACA,IAAI,SAAS,MAAM,QAAQ,QAAQ,KACjC,OAAO,IAAI,SAAS,MAAM;GAAE,QAAQ;GAAK,SAAS,EAAE,iBAAiB,WAAW,OAAO,MAAM,IAAI,IAAI;EAAE,CAAC;EAE1G,UAAU;CACZ;CACA,MAAM,WAAW,KAAK,SAAS,SAAS,CAAC,CAAC,QAAQ,cAAc,GAAG;CAEnE,MAAM,UAAU,IAAI,QAAQ;EAC1B,iBAAiB;EACjB,uBAAuB,GAHH,YAAY,aAAa,cAGH,eAAe,SAAS,cAAc,SAAS;EACzF,kBAAkB,OAAO,MAAM,SAAS,IAAI,IAAI,MAAM,QAAQ,CAAC;EAC/D,gBAAgB;EAChB,0BAA0B;CAC5B,CAAC;CACD,IAAI,SAAS,QAAQ,IAAI,iBAAiB,SAAS,OAAO,KAAK,EAAE,GAAG,OAAO,GAAG,EAAE,GAAG,OAAO,MAAM,IAAI,GAAG;CACvG,IAAI,MAAM,SAAS,GAAG,OAAO,IAAI,SAAS,MAAM;EAAE,QAAQ;EAAK;CAAQ,CAAC;CACxE,MAAM,OAAO,SAAS,MAAM,GAAG,iBAAiB,UAAU;EAAE;EAAO;CAAI,CAAC,CAAC;CACzE,OAAO,IAAI,SAAS,MAAM;EAAE,QAAQ,UAAU,MAAM;EAAK;CAAQ,CAAC;AACpE;;AAGA,MAAa,MAAe;CAC1B,UAAU;CACV,MAAM,UAA0C;EAG9C,MAAM,MAAM,qBAAqB;EACjC,OAAO;GACL,QAAQ,YAAY,IAAI,MAAM,OAAO;GAGrC,aAAa,KAAA;EACf;CACF;AACF"}

package/dist/src/services/workflowLaunchCommand/index.cjs

@@ -0,0 +1,121 @@
+//#region src/services/workflowLaunchCommand/index.ts
+/**
+* The `/workflow-launch` line, parsed.
+*
+* WHY A VERB AT ALL:
+* A browser can only send a session a prompt frame, so every cockpit action
+* that has to run inside the session travels as a slash line, the way the
+* agent catalog sends `/run`. The workflow tools answer to the agent, not to a
+* page, and the leader board answers to a keyboard, so neither of them can be
+* what the launch dialog sends.
+*
+* THE SHAPE:
+*   /workflow-launch <workflow> [key=value ...] [prompt words]
+*
+* Key-value pairs come first and stop at the first token that is not one, so
+* everything after them is the prompt exactly as it was typed, including any
+* `=` inside it. `runner` is the one reserved key; the rest are the workflow's
+* own `workflow_dispatch` inputs. Values may be double quoted to hold spaces.
+*/
+/** The reserved key: which runner map entry the run executes with. */
+const RUNNER_KEY = "runner";
+const KEY_VALUE = /^([A-Za-z_][\w.-]*)=(.*)$/s;
+function isLaunchParseFailure(value) {
+	return "error" in value;
+}
+/** Strips one layer of surrounding double quotes, which is how a value holds spaces. */
+function unquote(value) {
+	return value.length > 1 && value.startsWith("\"") && value.endsWith("\"") ? value.slice(1, -1) : value;
+}
+/**
+* Splits on whitespace, keeping double-quoted runs together.
+*
+* Returns each token with the offset it started at, so the caller can take the
+* rest of the line verbatim rather than rebuilding it from tokens and losing
+* the spacing a prompt was written with.
+*/
+function tokenize(line) {
+	const tokens = [];
+	let index = 0;
+	while (index < line.length) {
+		while (index < line.length && /\s/.test(line[index])) index += 1;
+		if (index >= line.length) break;
+		const start = index;
+		let quoted = false;
+		while (index < line.length && (quoted || !/\s/.test(line[index]))) {
+			if (line[index] === "\"") quoted = !quoted;
+			index += 1;
+		}
+		tokens.push({
+			text: line.slice(start, index),
+			start
+		});
+	}
+	return tokens;
+}
+function parseWorkflowLaunchCommand(args) {
+	const tokens = tokenize(args.trim());
+	const first = tokens[0];
+	if (first === void 0) return { error: "Usage: /workflow-launch <workflow> [key=value …] [prompt]" };
+	const inputs = {};
+	let runner;
+	let index = 1;
+	for (; index < tokens.length; index += 1) {
+		const token = tokens[index];
+		const match = KEY_VALUE.exec(token.text);
+		if (!match) break;
+		const key = match[1];
+		const value = unquote(match[2]);
+		if (key === RUNNER_KEY) runner = value;
+		else inputs[key] = value;
+	}
+	const rest = tokens[index];
+	const prompt = rest === void 0 ? void 0 : args.trim().slice(rest.start).trim();
+	return {
+		workflow: unquote(first.text),
+		...runner === void 0 ? {} : { runner },
+		inputs,
+		...prompt === void 0 || prompt === "" ? {} : { prompt }
+	};
+}
+/**
+* The workflow a token names: its name, its path in the repository, or the
+* tail of that path. Case-insensitive on the name, because the catalog shows
+* names as their author capitalised them and nobody types that back exactly.
+*/
+function resolveWorkflowEntry(entries, token) {
+	const needle = token.trim();
+	const lower = needle.toLocaleLowerCase();
+	return entries.find((entry) => entry.name.toLocaleLowerCase() === lower) ?? entries.find((entry) => entry.relativePath === needle || entry.path === needle) ?? entries.find((entry) => entry.relativePath.endsWith(`/${needle}`) || entry.path.endsWith(`/${needle}`));
+}
+/** The trigger that makes a prompt mandatory: the run waits for one otherwise. */
+const USER_PROMPT_TRIGGER = "user_prompt";
+/**
+* Everything wrong with a launch, before it is started.
+*
+* Checked here rather than left to the engine because the failure would
+* otherwise be a run that starts and then waits forever for terminal input, or
+* one that dies on a runner its steps never declared. Both read as the launch
+* having worked.
+*/
+function validateWorkflowLaunch(requirements, parsed) {
+	const problems = [];
+	if (requirements.triggers.includes(USER_PROMPT_TRIGGER) && (parsed.prompt ?? "") === "") problems.push("This workflow is triggered by a prompt, so it needs one.");
+	const missing = requirements.inputs.filter((input) => input.required === true && (parsed.inputs[input.name] ?? "") === "").map((input) => input.name);
+	if (missing.length > 0) problems.push(`Missing required input${missing.length > 1 ? "s" : ""}: ${missing.join(", ")}.`);
+	for (const input of requirements.inputs) {
+		const value = parsed.inputs[input.name];
+		if (value === void 0 || input.options === void 0 || input.options.includes(value)) continue;
+		problems.push(`Input ${input.name} must be one of: ${input.options.join(", ")}.`);
+	}
+	const declared = requirements.runners;
+	if (parsed.runner !== void 0 && declared !== void 0 && !declared.includes(parsed.runner)) problems.push(declared.length === 0 ? "This workflow declares no runner its steps agree on." : `Runner ${parsed.runner} is not one this workflow declares: ${declared.join(", ")}.`);
+	return problems;
+}
+//#endregion
+exports.isLaunchParseFailure = isLaunchParseFailure;
+exports.parseWorkflowLaunchCommand = parseWorkflowLaunchCommand;
+exports.resolveWorkflowEntry = resolveWorkflowEntry;
+exports.validateWorkflowLaunch = validateWorkflowLaunch;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/workflowLaunchCommand/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../../src/services/workflowLaunchCommand/index.ts"],"sourcesContent":["/**\n * The `/workflow-launch` line, parsed.\n *\n * WHY A VERB AT ALL:\n * A browser can only send a session a prompt frame, so every cockpit action\n * that has to run inside the session travels as a slash line, the way the\n * agent catalog sends `/run`. The workflow tools answer to the agent, not to a\n * page, and the leader board answers to a keyboard, so neither of them can be\n * what the launch dialog sends.\n *\n * THE SHAPE:\n *   /workflow-launch <workflow> [key=value ...] [prompt words]\n *\n * Key-value pairs come first and stop at the first token that is not one, so\n * everything after them is the prompt exactly as it was typed, including any\n * `=` inside it. `runner` is the one reserved key; the rest are the workflow's\n * own `workflow_dispatch` inputs. Values may be double quoted to hold spaces.\n */\n\n/** The reserved key: which runner map entry the run executes with. */\nconst RUNNER_KEY = 'runner';\nconst KEY_VALUE = /^([A-Za-z_][\\w.-]*)=(.*)$/s;\n\nexport interface ParsedWorkflowLaunch {\n  /** The workflow's name or its path, as typed; resolution belongs to the caller. */\n  workflow: string;\n  runner?: string;\n  inputs: Record<string, string>;\n  prompt?: string;\n}\n\nexport interface WorkflowLaunchParseFailure {\n  error: string;\n}\n\nexport function isLaunchParseFailure(\n  value: ParsedWorkflowLaunch | WorkflowLaunchParseFailure,\n): value is WorkflowLaunchParseFailure {\n  return 'error' in value;\n}\n\n/** Strips one layer of surrounding double quotes, which is how a value holds spaces. */\nfunction unquote(value: string): string {\n  return value.length > 1 && value.startsWith('\"') && value.endsWith('\"') ? value.slice(1, -1) : value;\n}\n\n/**\n * Splits on whitespace, keeping double-quoted runs together.\n *\n * Returns each token with the offset it started at, so the caller can take the\n * rest of the line verbatim rather than rebuilding it from tokens and losing\n * the spacing a prompt was written with.\n */\nfunction tokenize(line: string): { text: string; start: number }[] {\n  const tokens: { text: string; start: number }[] = [];\n  let index = 0;\n  while (index < line.length) {\n    while (index < line.length && /\\s/.test(line[index] as string)) index += 1;\n    if (index >= line.length) break;\n    const start = index;\n    let quoted = false;\n    while (index < line.length && (quoted || !/\\s/.test(line[index] as string))) {\n      if (line[index] === '\"') quoted = !quoted;\n      index += 1;\n    }\n    tokens.push({ text: line.slice(start, index), start });\n  }\n  return tokens;\n}\n\nexport function parseWorkflowLaunchCommand(args: string): ParsedWorkflowLaunch | WorkflowLaunchParseFailure {\n  const tokens = tokenize(args.trim());\n  const first = tokens[0];\n  if (first === undefined) return { error: 'Usage: /workflow-launch <workflow> [key=value …] [prompt]' };\n\n  const inputs: Record<string, string> = {};\n  let runner: string | undefined;\n  let index = 1;\n  for (; index < tokens.length; index += 1) {\n    const token = tokens[index] as { text: string; start: number };\n    const match = KEY_VALUE.exec(token.text);\n    if (!match) break;\n    const key = match[1] as string;\n    const value = unquote(match[2] as string);\n    if (key === RUNNER_KEY) runner = value;\n    else inputs[key] = value;\n  }\n\n  const rest = tokens[index];\n  const prompt = rest === undefined ? undefined : args.trim().slice(rest.start).trim();\n  return {\n    workflow: unquote(first.text),\n    ...(runner === undefined ? {} : { runner }),\n    inputs,\n    ...(prompt === undefined || prompt === '' ? {} : { prompt }),\n  };\n}\n\n/** The line the cockpit sends, built from what its dialog collected. */\nexport function workflowLaunchCommand(request: ParsedWorkflowLaunch): string {\n  const quote = (value: string): string => (/\\s/.test(value) ? `\"${value}\"` : value);\n  const pairs = [\n    ...(request.runner === undefined ? [] : [`${RUNNER_KEY}=${quote(request.runner)}`]),\n    ...Object.entries(request.inputs).map(([key, value]) => `${key}=${quote(value)}`),\n  ];\n  const prompt = request.prompt?.trim();\n  return ['/workflow-launch', quote(request.workflow), ...pairs, ...(prompt ? [prompt] : [])].join(' ');\n}\n\n/** One catalog row, as much of it as resolution needs. */\nexport interface LaunchResolvableWorkflow {\n  name: string;\n  path: string;\n  relativePath: string;\n}\n\n/**\n * The workflow a token names: its name, its path in the repository, or the\n * tail of that path. Case-insensitive on the name, because the catalog shows\n * names as their author capitalised them and nobody types that back exactly.\n */\nexport function resolveWorkflowEntry<T extends LaunchResolvableWorkflow>(\n  entries: readonly T[],\n  token: string,\n): T | undefined {\n  const needle = token.trim();\n  const lower = needle.toLocaleLowerCase();\n  return (\n    entries.find((entry) => entry.name.toLocaleLowerCase() === lower) ??\n    entries.find((entry) => entry.relativePath === needle || entry.path === needle) ??\n    entries.find((entry) => entry.relativePath.endsWith(`/${needle}`) || entry.path.endsWith(`/${needle}`))\n  );\n}\n\n/** What a workflow declares, as much of it as a launch has to satisfy. */\nexport interface LaunchRequirements {\n  triggers: readonly string[];\n  inputs: readonly { name: string; required?: boolean; options?: readonly string[] }[];\n  /** Absent means the workflow names no runner map, so any runner will do. */\n  runners?: readonly string[];\n}\n\n/** The trigger that makes a prompt mandatory: the run waits for one otherwise. */\nconst USER_PROMPT_TRIGGER = 'user_prompt';\n\n/**\n * Everything wrong with a launch, before it is started.\n *\n * Checked here rather than left to the engine because the failure would\n * otherwise be a run that starts and then waits forever for terminal input, or\n * one that dies on a runner its steps never declared. Both read as the launch\n * having worked.\n */\nexport function validateWorkflowLaunch(\n  requirements: LaunchRequirements,\n  parsed: Pick<ParsedWorkflowLaunch, 'inputs' | 'prompt' | 'runner'>,\n): string[] {\n  const problems: string[] = [];\n  if (requirements.triggers.includes(USER_PROMPT_TRIGGER) && (parsed.prompt ?? '') === '') {\n    problems.push('This workflow is triggered by a prompt, so it needs one.');\n  }\n  const missing = requirements.inputs\n    .filter((input) => input.required === true && (parsed.inputs[input.name] ?? '') === '')\n    .map((input) => input.name);\n  if (missing.length > 0)\n    problems.push(`Missing required input${missing.length > 1 ? 's' : ''}: ${missing.join(', ')}.`);\n  for (const input of requirements.inputs) {\n    const value = parsed.inputs[input.name];\n    if (value === undefined || input.options === undefined || input.options.includes(value)) continue;\n    problems.push(`Input ${input.name} must be one of: ${input.options.join(', ')}.`);\n  }\n  const declared = requirements.runners;\n  if (parsed.runner !== undefined && declared !== undefined && !declared.includes(parsed.runner)) {\n    problems.push(\n      declared.length === 0\n        ? 'This workflow declares no runner its steps agree on.'\n        : `Runner ${parsed.runner} is not one this workflow declares: ${declared.join(', ')}.`,\n    );\n  }\n  return problems;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAoBA,MAAM,aAAa;AACnB,MAAM,YAAY;AAclB,SAAgB,qBACd,OACqC;CACrC,OAAO,WAAW;AACpB;;AAGA,SAAS,QAAQ,OAAuB;CACtC,OAAO,MAAM,SAAS,KAAK,MAAM,WAAW,IAAG,KAAK,MAAM,SAAS,IAAG,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI;AACjG;;;;;;;;AASA,SAAS,SAAS,MAAiD;CACjE,MAAM,SAA4C,CAAC;CACnD,IAAI,QAAQ;CACZ,OAAO,QAAQ,KAAK,QAAQ;EAC1B,OAAO,QAAQ,KAAK,UAAU,KAAK,KAAK,KAAK,MAAgB,GAAG,SAAS;EACzE,IAAI,SAAS,KAAK,QAAQ;EAC1B,MAAM,QAAQ;EACd,IAAI,SAAS;EACb,OAAO,QAAQ,KAAK,WAAW,UAAU,CAAC,KAAK,KAAK,KAAK,MAAgB,IAAI;GAC3E,IAAI,KAAK,WAAW,MAAK,SAAS,CAAC;GACnC,SAAS;EACX;EACA,OAAO,KAAK;GAAE,MAAM,KAAK,MAAM,OAAO,KAAK;GAAG;EAAM,CAAC;CACvD;CACA,OAAO;AACT;AAEA,SAAgB,2BAA2B,MAAiE;CAC1G,MAAM,SAAS,SAAS,KAAK,KAAK,CAAC;CACnC,MAAM,QAAQ,OAAO;CACrB,IAAI,UAAU,KAAA,GAAW,OAAO,EAAE,OAAO,4DAA4D;CAErG,MAAM,SAAiC,CAAC;CACxC,IAAI;CACJ,IAAI,QAAQ;CACZ,OAAO,QAAQ,OAAO,QAAQ,SAAS,GAAG;EACxC,MAAM,QAAQ,OAAO;EACrB,MAAM,QAAQ,UAAU,KAAK,MAAM,IAAI;EACvC,IAAI,CAAC,OAAO;EACZ,MAAM,MAAM,MAAM;EAClB,MAAM,QAAQ,QAAQ,MAAM,EAAY;EACxC,IAAI,QAAQ,YAAY,SAAS;OAC5B,OAAO,OAAO;CACrB;CAEA,MAAM,OAAO,OAAO;CACpB,MAAM,SAAS,SAAS,KAAA,IAAY,KAAA,IAAY,KAAK,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,KAAK;CACnF,OAAO;EACL,UAAU,QAAQ,MAAM,IAAI;EAC5B,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;EACzC;EACA,GAAI,WAAW,KAAA,KAAa,WAAW,KAAK,CAAC,IAAI,EAAE,OAAO;CAC5D;AACF;;;;;;AAyBA,SAAgB,qBACd,SACA,OACe;CACf,MAAM,SAAS,MAAM,KAAK;CAC1B,MAAM,QAAQ,OAAO,kBAAkB;CACvC,OACE,QAAQ,MAAM,UAAU,MAAM,KAAK,kBAAkB,MAAM,KAAK,KAChE,QAAQ,MAAM,UAAU,MAAM,iBAAiB,UAAU,MAAM,SAAS,MAAM,KAC9E,QAAQ,MAAM,UAAU,MAAM,aAAa,SAAS,IAAI,QAAQ,KAAK,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC;AAE1G;;AAWA,MAAM,sBAAsB;;;;;;;;;AAU5B,SAAgB,uBACd,cACA,QACU;CACV,MAAM,WAAqB,CAAC;CAC5B,IAAI,aAAa,SAAS,SAAS,mBAAmB,MAAM,OAAO,UAAU,QAAQ,IACnF,SAAS,KAAK,0DAA0D;CAE1E,MAAM,UAAU,aAAa,OAC1B,QAAQ,UAAU,MAAM,aAAa,SAAS,OAAO,OAAO,MAAM,SAAS,QAAQ,EAAE,CAAC,CACtF,KAAK,UAAU,MAAM,IAAI;CAC5B,IAAI,QAAQ,SAAS,GACnB,SAAS,KAAK,yBAAyB,QAAQ,SAAS,IAAI,MAAM,GAAG,IAAI,QAAQ,KAAK,IAAI,EAAE,EAAE;CAChG,KAAK,MAAM,SAAS,aAAa,QAAQ;EACvC,MAAM,QAAQ,OAAO,OAAO,MAAM;EAClC,IAAI,UAAU,KAAA,KAAa,MAAM,YAAY,KAAA,KAAa,MAAM,QAAQ,SAAS,KAAK,GAAG;EACzF,SAAS,KAAK,SAAS,MAAM,KAAK,mBAAmB,MAAM,QAAQ,KAAK,IAAI,EAAE,EAAE;CAClF;CACA,MAAM,WAAW,aAAa;CAC9B,IAAI,OAAO,WAAW,KAAA,KAAa,aAAa,KAAA,KAAa,CAAC,SAAS,SAAS,OAAO,MAAM,GAC3F,SAAS,KACP,SAAS,WAAW,IAChB,yDACA,UAAU,OAAO,OAAO,sCAAsC,SAAS,KAAK,IAAI,EAAE,EACxF;CAEF,OAAO;AACT"}