@aligndottech/cli 0.49.0 → 0.50.0

package/dist/lib/sync/run-source.js

@@ -0,0 +1,262 @@
+import { isAuthExpiry } from '../errors.js';
+import { SYNC_TIME_BUDGET_MS } from '../import-defaults.js';
+import { describeScopeKey } from '../scope-values.js';
+import { connectorItemKey } from '../source-key.js';
+import { drainGitHub } from './drain.js';
+import { advanceHighWater, beginRun, markNeedsReauth, readRows, recordActivity, saveRun, storedByKey, threadRows, } from './sync-state.js';
+import { HOT_THREAD_DAYS, mergePartialThread, selectHotThreads } from './threads.js';
+import { ascendingByUpdated, finishRun, inheritedWindowSince, later, newestUpdated, nextWindow, PERSISTENT_HOLE_RUNS, plausible } from './window.js';
+const BATCH = 50;
+/**
+ * Which incompleteness is a DATE-ORDERED CUT, per source. A cut is only safe to resume with `until = oldestReached` when the fetcher
+ * read ONE listing, newest first, and stopped: then everything newer than the oldest item it returned was read. Anything else leaves
+ * a gap that no date describes (a space, a team, a channel, a second query, a slice that was never reached), and resuming "below
+ * the oldest item" would skip it for good. Read from the SDK (node_modules/@aligndottech/connector-core/dist/fetchers), verified one by one:
+ *
+ * - jira:   jira.js:52 `ORDER BY updated DESC`, one JQL, one page token chain. Its stops, `time_budget` (:141) and `page_cap` (:146), both say
+ *           "older issues not read". With the item limit it emits no skip at all (:182): a cut with no skip kinds.
+ * - notion: notion.js:171-197 one search sorted last_edited_time descending. `time_budget` (:238) stops it. Its `page_cap` (:158, :235) is a
+ *           page BODY cut, not a listing stop, so it is a hole.
+ * - gitlab: gitlab.js:58-112 one merge-request listing, updated_at descending; `time_budget` (:112) stops it. An unreadable page is an
+ *           `error` skip and is a hole.
+ *
+ * Everything else is a hole, by reading, not by guessing:
+ * - github: github.js:306-329 runs SEVERAL searches (involves, reviewed-by, issues, or repo PRs and issues), each month-sliced newest first
+ *           (githubSearch.js:104-129), then `interleave`s them and trims to the limit (:327). The kept items are a prefix of EACH list, not of
+ *           the merged one, so `oldestReached` is the oldest of the shortest prefix and the longer list's items below it are unread.
+ *           Its `vendor_cap` (githubSearch.js:146) is a per-slice ceiling with older slices still read.
+ * - linear: linear.js:176 two parallel streams (assigned, created); confluence.js:206 one listing per space, `time_budget` ends the loop
+ *           with whole spaces unread; teams.js:211-222 team by team, channel by channel; zoom.js:181 30-day windows; slack walks channels.
+ */
+const CUT_KINDS_BY_SOURCE = {
+    jira: new Set(['time_budget', 'page_cap']),
+    notion: new Set(['time_budget']),
+    gitlab: new Set(['time_budget']),
+};
+/** Platforms whose partial items are threads of messages (Slack hot threads, Teams reply caps). */
+const MERGEABLE = new Set(['slack', 'teams']);
+const none = (source, state, message) => ({ source, state, read: 0, created: 0, updated: 0, skips: [], message });
+export async function syncSource(source, env, 
+/** `minIntervalMs` applies to a background run only: a launch's child that finds the source tried more recently than this stops, so the interval holds across launches. */
+o = { trigger: 'cli' }) {
+    const tokens = env.tokens(source);
+    if (tokens === null || !tokens['token'])
+        return none(source, 'not_connected', `${source} is not connected. Run: align connect ${source}`);
+    // Decision 21: a Teams token lasts about an hour, so a background run would hold a dead one.
+    if (source === 'teams' && o.trigger === 'background')
+        return none(source, 'manual', 'Teams is refreshed by hand: align connect teams');
+    const lock = env.lock(`sync-${source}`);
+    if (!lock.ok)
+        return none(source, 'locked', `already syncing${lock.holder ? ` (started ${lock.holder.started_at.slice(0, 16).replace('T', ' ')} UTC)` : ''}`);
+    try {
+        if (o.trigger === 'background' && o.minIntervalMs !== undefined) {
+            // Re-read AFTER taking the lock: the launcher's decision is older than the 20 s the child waited, and another child may have just finished.
+            const nowMs = env.now().getTime();
+            const tried = readRows(env.dbPath, source).flatMap((r) => [r.last_success_at, r.last_attempt_at])
+                .map((t) => (t === null ? Number.NaN : Date.parse(t))).filter((t) => !Number.isNaN(t) && t <= nowMs);
+            if (tried.length > 0 && nowMs - Math.max(...tried) < o.minIntervalMs)
+                return none(source, 'recent', `${source} was refreshed less than ${Math.round(o.minIntervalMs / 60_000)} minutes ago`);
+        }
+        if (env.backfillRunning(source))
+            return none(source, 'backfill_running', `a backfill of ${source} is running; it is reading the same history`);
+        return await run(source, tokens, env, lock, o);
+    }
+    finally {
+        lock.release();
+    }
+}
+async function run(source, tokens, env, lock, o) {
+    const now = env.now();
+    const nowIso = now.toISOString();
+    let scope = await env.scopeOf(source, { trigger: o.trigger });
+    // A source that must not be read until the person acts (Confluence with no spaces): no request, no row, the command to run.
+    if (scope.blocked !== undefined)
+        return none(source, 'manual', scope.blocked);
+    if (scope.activates && scope.disclosure !== undefined) {
+        // An agent's waiting scope offered to a person: it is read only after an explicit Yes. Anything else reads what was in force.
+        env.announce?.(source, scope.disclosure);
+        const yes = env.announce !== undefined && env.confirm !== undefined && await env.confirm(source, `Read ${describeScopeKey(source, scope.scopeKey, 'team')} now? No keeps your current scope.`);
+        if (yes)
+            env.markDisclosed?.(source, scope.scopeKey);
+        else
+            scope = await env.scopeOf(source, { trigger: 'background' });
+        if (scope.blocked !== undefined)
+            return none(source, 'manual', scope.blocked);
+    }
+    else if (scope.disclosure !== undefined && env.announce) {
+        env.announce(source, scope.disclosure);
+        env.markDisclosed?.(source, scope.scopeKey);
+    }
+    const key = { source, scopeKey: scope.scopeKey, scope: scope.scope };
+    const rows = readRows(env.dbPath, source);
+    // A new scope inherits the depth the person asked for on this source ("all" stays all).
+    const row = beginRun(env.dbPath, key, inheritedWindowSince(rows, now), nowIso);
+    if (row.status === 'needs_reauth') {
+        return { ...none(source, 'needs_reauth', `${source} needs the person to re-authenticate. Run: align connect ${source}`), scope: scope.scope };
+    }
+    const win = nextWindow(row, now);
+    const skips = [];
+    let hotThreads;
+    if (source === 'slack' && win.since !== undefined) {
+        const sel = selectHotThreads(threadRows(env.dbPath, 'slack'), now);
+        if (sel.hot.length > 0)
+            hotThreads = sel.hot;
+        if (sel.quiet > 0) {
+            skips.push({ kind: 'shape', count: sel.quiet, detail: `threads quiet for more than ${HOT_THREAD_DAYS} days are not re-read, so a late reply to one is not picked up` });
+        }
+    }
+    let fetched;
+    try {
+        fetched = await env.fetch(source, tokens, { ...win, ...(hotThreads ? { hotThreads } : {}) }, scope);
+    }
+    catch (e) {
+        return failed(source, key, row.window_since, env, e);
+    }
+    const { items, report } = fetched;
+    // Only a THROWN refusal of the token (above) marks a source needs_reauth. An auth SKIP is one repo, one channel or one
+    // project the token cannot see: it stays a skip of this scope and blocks nothing else.
+    skips.push(...report.skips);
+    const complete = report.complete === true;
+    // A cut needs ONE newest-first listing AND nothing but cut-kind skips beside it: any error, auth or other skip means
+    // something was unreadable in a place no date describes, and that makes the whole run a hole (see CUT_KINDS_BY_SOURCE).
+    const cutKinds = CUT_KINDS_BY_SOURCE[source];
+    const cut = !complete && cutKinds !== undefined && report.oldestReached !== undefined
+        && report.skips.every((k) => k.kind === 'shape' || (k.kind !== undefined && cutKinds.has(k.kind)));
+    const holeSkips = complete || cut ? [] : report.skips.filter((k) => k.kind !== 'shape');
+    const holeSig = holeSkips.length === 0 ? null : [...new Set(holeSkips.map((k) => `${k.kind}: ${k.detail.replace(/\d+/g, '#')}`))].sort().join(' | ').slice(0, 400);
+    const holeStreak = holeSig === null ? 0 : holeSig === row.hole_sig ? row.hole_streak + 1 : 1;
+    const persistent = holeStreak >= PERSISTENT_HOLE_RUNS;
+    const lostLock = () => none(source, 'locked', 'stopped: another sync took over this source while this one was paused. Nothing more was written.');
+    const size = env.batchSize ?? BATCH;
+    const wholeReads = { deadline: now.getTime() + WHOLE_THREAD_BUDGET_MS, kept: 0 };
+    const ordered = ascendingByUpdated(items);
+    let created = 0;
+    let updated = 0;
+    try {
+        for (let at = 0; at < ordered.length; at += size) {
+            // A holder that slept past the lock's lifetime may no longer be THE holder: check before every batch.
+            if (!lock.owned())
+                return lostLock();
+            const batch = ordered.slice(at, at + size);
+            const texts = await prepareBatch(env, tokens, batch, wholeReads);
+            const { snapshots } = await env.client.ingestBatch(batch.map((item, i) => ({
+                source_url: item.source_url, platform: item.platform, ...texts[i],
+                ...(item.created_at !== undefined ? { created_at: item.created_at } : {}),
+                ...(item.detail_pending === true ? { detail_pending: true } : {}),
+            })), { classify: false, keyed: true });
+            for (const s of snapshots) {
+                if (s.created)
+                    created += 1;
+                else if (s.changed)
+                    updated += 1;
+            }
+            recordActivity(env.dbPath, key.scopeKey, batch.flatMap((item, i) => (plausible(item.updated_at, now) !== undefined && snapshots[i] ? [{ decisionId: snapshots[i].id, platform: item.platform, updatedAt: item.updated_at }] : [])));
+            // Oldest first, so every older item is committed: this stamp is safe to resume from. Only a
+            // complete read may move it; an incomplete one is settled by finishRun once the cycle ends.
+            const committed = newestUpdated(batch, now);
+            if (complete && committed !== undefined)
+                advanceHighWater(env.dbPath, key, committed, now);
+            lock.touch();
+        }
+    }
+    catch (e) {
+        return failed(source, key, row.window_since, env, e, { created, updated, read: items.length });
+    }
+    if (wholeReads.kept > 0) {
+        skips.push({ kind: 'shape', count: wholeReads.kept, detail: `thread${wholeReads.kept === 1 ? '' : 's'} kept as partial and merged by appending: the whole thread could not be re-read (${wholeReads.reason ?? 'unknown'})` });
+    }
+    if (!lock.owned())
+        return lostLock();
+    // The row as it stands now: batches of a complete read have moved high_water already.
+    const current = readRows(env.dbPath, source).find((r) => r.scope_key === key.scopeKey) ?? row;
+    const fin = finishRun({ high_water: current.high_water, pending_until: row.pending_until }, {
+        complete, cut, persistent,
+        ...(report.highWater !== undefined ? { highWater: report.highWater } : {}),
+        ...(report.oldestReached !== undefined ? { oldestReached: report.oldestReached } : {}),
+        // The last run of a cycle a ceiling split: its own highWater is clamped to its `until`, so the
+        // cycle's top comes from THIS scope's own row, never from another scope's items.
+        ...(row.pending_until !== null && row.cycle_top !== null ? { cycleNewest: row.cycle_top } : {}),
+        now,
+    });
+    const cycleTop = cut ? later(row.cycle_top, plausible(report.highWater, now)) : null;
+    const persist = (more) => saveRun(env.dbPath, key, {
+        ...fin, cycle_top: cycleTop, hole_sig: holeSig, hole_streak: holeStreak, items: items.length, skips: [...skips, ...more],
+        attemptAt: env.now().toISOString(),
+        // Success is a COMPLETE read. A partial one is an attempt, and must not make the source look freshly synced.
+        ...(fin.status === 'ok' ? { successAt: env.now().toISOString() } : {}),
+    });
+    persist([]);
+    let drain;
+    if (source === 'github') {
+        const elapsed = env.now().getTime() - now.getTime();
+        const deadlineMs = Math.max(30_000, SYNC_TIME_BUDGET_MS - elapsed);
+        drain = await (env.drain ? env.drain(tokens['token'], deadlineMs) : drainGitHub(env.dbPath, env.client, tokens['token'], { deadlineMs }));
+        if (drain.skips.length > 0)
+            persist(drain.skips);
+    }
+    return {
+        source, state: fin.status, read: items.length, created, updated, skips: [...skips, ...(drain?.skips ?? [])], scope: scope.scope,
+        ...(win.since !== undefined ? { since: win.since } : {}),
+        ...(cut && report.oldestReached !== undefined ? { reachedBack: report.oldestReached } : {}),
+        ...(drain ? { drain } : {}),
+        ...(persistent && holeSig !== null ? { persistentHole: holeSig } : {}),
+        ...(report.scopeNote ? { scopeNote: report.scopeNote } : {}),
+        ...(scope.note !== undefined ? { scopeLine: scope.note } : {}),
+    };
+}
+/** Whole-thread re-reads run three at a time, and all of a run's together get this long, outside the SDK's own budget. */
+const WHOLE_THREAD_CONCURRENCY = 3;
+const WHOLE_THREAD_BUDGET_MS = 90_000;
+async function prepareBatch(env, tokens, batch, whole) {
+    const out = [];
+    for (let at = 0; at < batch.length; at += WHOLE_THREAD_CONCURRENCY) {
+        out.push(...await Promise.all(batch.slice(at, at + WHOLE_THREAD_CONCURRENCY).map((item) => prepared(env, tokens, item, whole))));
+    }
+    return out;
+}
+async function prepared(env, tokens, item, whole) {
+    if (item.partial !== true || !MERGEABLE.has(item.platform))
+        return { raw_text: item.raw_text, title: item.title };
+    const key = item.source_key ?? connectorItemKey(item.platform, item.source_url);
+    const stored = key === undefined ? undefined : storedByKey(env.dbPath, key.startsWith(`${item.platform}|`) ? key : `${item.platform}|${key}`);
+    if (stored === undefined)
+        return { raw_text: item.raw_text, title: item.title };
+    const merge = () => ({ raw_text: mergePartialThread(stored.summary, item.raw_text), title: stored.title });
+    // The text carries no message times or authors, so an EDITED message cannot be told from a new one by
+    // comparing lines. When the thread can be read whole (one or two requests), the whole thread replaces the
+    // stored one; only a thread that cannot be read whole is merged by appending, and every such fallback is counted.
+    if (env.fetchWhole === undefined)
+        return merge();
+    if (env.now().getTime() > whole.deadline) {
+        whole.kept += 1;
+        whole.reason ??= 'the time allowed for re-reading whole threads ran out';
+        return merge();
+    }
+    try {
+        const full = await env.fetchWhole(item.platform, tokens, item.source_url);
+        if (full === undefined)
+            return merge(); // this platform has no whole-thread read: nothing was attempted
+        if (full.partial !== true)
+            return { raw_text: full.raw_text, title: stored.title };
+        whole.kept += 1;
+        whole.reason ??= 'the thread is longer than one read returns';
+    }
+    catch (e) {
+        whole.kept += 1;
+        whole.reason ??= (e instanceof Error ? e.message : String(e)).slice(0, 100);
+    }
+    return merge();
+}
+function failed(source, key, window, env, e, partial) {
+    const message = (e instanceof Error ? e.message : String(e)).slice(0, 200);
+    const row = readRows(env.dbPath, source).find((r) => r.scope_key === key.scopeKey);
+    if (isAuthExpiry(e)) {
+        markNeedsReauth(env.dbPath, key, window, env.now().toISOString());
+        saveRun(env.dbPath, key, { status: 'needs_reauth', high_water: row?.high_water ?? null, pending_until: row?.pending_until ?? null, cycle_top: row?.cycle_top ?? null, hole_sig: row?.hole_sig ?? null, hole_streak: row?.hole_streak ?? 0, attemptAt: env.now().toISOString(), items: 0, skips: [{ kind: 'auth', count: 1, detail: message }] });
+        return { ...none(source, 'needs_reauth', `${source} refused the saved token (${message}). Run: align connect ${source}`), skips: [{ kind: 'auth', count: 1, detail: message }], scope: key.scope };
+    }
+    const skip = { kind: 'error', count: 1, detail: message };
+    saveRun(env.dbPath, key, { status: 'error', high_water: row?.high_water ?? null, pending_until: row?.pending_until ?? null, cycle_top: row?.cycle_top ?? null, hole_sig: row?.hole_sig ?? null, hole_streak: row?.hole_streak ?? 0, attemptAt: env.now().toISOString(), items: partial?.read ?? 0, skips: [skip] });
+    return { source, state: 'error', read: partial?.read ?? 0, created: partial?.created ?? 0, updated: partial?.updated ?? 0, skips: [skip], message, scope: key.scope };
+}
+//# sourceMappingURL=run-source.js.map

package/dist/lib/sync/run-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-source.js","sourceRoot":"","sources":["../../../src/lib/sync/run-source.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAoB,MAAM,YAAY,CAAC;AAG3D,OAAO,EACL,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAC3F,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAiDrJ,MAAM,KAAK,GAAG,EAAE,CAAC;AACjB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,mBAAmB,GAAwC;IAC/D,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;IAChC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;CACjC,CAAC;AAEF,mGAAmG;AACnG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE9C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,KAAkB,EAAE,OAAe,EAAiB,EAAE,CAClF,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAE3E,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,GAAY;AACZ,2KAA2K;AAC3K,IAA+D,EAAE,OAAO,EAAE,KAAK,EAAE;IAEjF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,yCAAyC,MAAM,EAAE,CAAC,CAAC;IAC1I,6FAA6F;IAC7F,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,iDAAiD,CAAC,CAAC;IAEvI,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,kBAAkB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9J,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAChE,4IAA4I;YAC5I,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;iBAC9F,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;YACvG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,aAAa;gBAAE,OAAO,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,4BAA4B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/L,CAAC;QACD,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,iBAAiB,MAAM,6CAA6C,CAAC,CAAC;QAC/I,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,MAAc,EAAE,MAA8B,EAAE,GAAY,EAAE,IAAiC,EAAE,CAAoC;IACtJ,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9D,4HAA4H;IAC5H,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACtD,8HAA8H;QAC9H,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,oCAAoC,CAAC,CAAC;QAC/L,IAAI,GAAG;YAAE,GAAG,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;;YAChD,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChF,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC1D,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACvC,GAAG,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,wFAAwF;IACxF,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/E,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,4DAA4D,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAChJ,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,IAAI,UAAsC,CAAC;IAC3C,IAAI,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QACnE,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC;QAC7C,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,+BAA+B,eAAe,gEAAgE,EAAE,CAAC,CAAC;QAC1K,CAAC;IACH,CAAC;IAED,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACtG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAClC,uHAAuH;IACvH,uFAAuF;IACvF,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAE5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC1C,qHAAqH;IACrH,wHAAwH;IACxH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,CAAC,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;WAChF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,SAAS,GAAG,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnK,MAAM,UAAU,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,UAAU,GAAG,UAAU,IAAI,oBAAoB,CAAC;IACtD,MAAM,QAAQ,GAAG,GAAkB,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,kGAAkG,CAAC,CAAC;IACjK,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC;IACpC,MAAM,UAAU,GAAe,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,sBAAsB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7F,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;YACjD,sGAAsG;YACtG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;gBAAE,OAAO,QAAQ,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACjE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE;gBAClE,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAAC,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO,IAAI,CAAC,CAAC;qBAAM,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO,IAAI,CAAC,CAAC;YAAC,CAAC;YAC7F,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,UAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACtO,4FAA4F;YAC5F,4FAA4F;YAC5F,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,QAAQ,IAAI,SAAS,KAAK,SAAS;gBAAE,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YAC3F,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,oFAAoF,UAAU,CAAC,MAAM,IAAI,SAAS,GAAG,EAAE,CAAC,CAAC;IAChO,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,QAAQ,EAAE,CAAC;IACrC,sFAAsF;IACtF,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;IAC9F,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,EAAE;QAC1F,QAAQ,EAAE,GAAG,EAAE,UAAU;QACzB,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,+FAA+F;QAC/F,iFAAiF;QACjF,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG;KACJ,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,MAAM,OAAO,GAAG,CAAC,IAA4B,EAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE;QAC/E,GAAG,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QACxH,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAClC,6GAA6G;QAC7G,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,CAAC;IAEZ,IAAI,KAA8B,CAAC;IACnC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,CAAC;QACnE,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAE,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC5I,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IACD,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;QAC/H,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,UAAU,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAQD,0HAA0H;AAC1H,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC,KAAK,UAAU,YAAY,CACzB,GAAY,EAAE,MAA8B,EAAE,KAAkC,EAAE,KAAiB;IAEnG,MAAM,GAAG,GAA2D,EAAE,CAAC;IACvE,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,wBAAwB,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnI,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAY,EAAE,MAA8B,EAAE,IAAyC,EAAE,KAAiB;IAChI,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAClH,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;IAC9I,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,GAAwC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAChJ,sGAAsG;IACtG,0GAA0G;IAC1G,kHAAkH;IAClH,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,EAAE,CAAC;IACjD,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;QAChB,KAAK,CAAC,MAAM,KAAK,uDAAuD,CAAC;QACzE,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1E,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,EAAE,CAAC,CAAC,gEAAgE;QACxG,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACnF,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;QAChB,KAAK,CAAC,MAAM,KAAK,4CAA4C,CAAC;IAChE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;QAChB,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,MAAM,CACb,MAAc,EAAE,GAAkE,EAAE,MAAqB,EAAE,GAAY,EAAE,CAAU,EACnI,OAA4D;IAE5D,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnF,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,IAAI,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACjV,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,6BAA6B,OAAO,yBAAyB,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACrM,CAAC;IACD,MAAM,IAAI,GAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,IAAI,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpT,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AACxK,CAAC"}

package/dist/lib/sync/safe-read.d.ts

@@ -0,0 +1,4 @@
+export declare function readRegularFile(file: string, maxBytes?: number): string | undefined;
+/** What is at this path: 'none', a regular file, or something else (a directory, a FIFO, a link) that a claim must not be built on. */
+export declare function kindAt(file: string): 'none' | 'file' | 'other';
+//# sourceMappingURL=safe-read.d.ts.map

package/dist/lib/sync/safe-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-read.d.ts","sourceRoot":"","sources":["../../../src/lib/sync/safe-read.ts"],"names":[],"mappings":"AAOA,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAY,GAAG,MAAM,GAAG,SAAS,CActF;AAED,uIAAuI;AACvI,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAO9D"}

package/dist/lib/sync/safe-read.js

@@ -0,0 +1,40 @@
+/**
+ * Read a small file the launch path does not control (the state directory is writable by anything running as the user,
+ * so a FIFO or a link can sit where a file is expected). Opens without following a link and without blocking, requires a
+ * REGULAR file, and caps the size. Anything else reads as "not there": the launcher then does nothing, and never hangs.
+ */
+import fs from 'node:fs';
+export function readRegularFile(file, maxBytes = 1_048_576) {
+    let fd;
+    try {
+        // Read inside the function, not at import: this module is on the launch path.
+        const C = fs.constants;
+        fd = fs.openSync(file, C.O_RDONLY | (C.O_NONBLOCK ?? 0) | (C.O_NOFOLLOW ?? 0));
+        const st = fs.fstatSync(fd);
+        if (!st.isFile() || st.size > maxBytes)
+            return undefined;
+        return fs.readFileSync(fd, 'utf8');
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        if (fd !== undefined) {
+            try {
+                fs.closeSync(fd);
+            }
+            catch { /* nothing to close */ }
+        }
+    }
+}
+/** What is at this path: 'none', a regular file, or something else (a directory, a FIFO, a link) that a claim must not be built on. */
+export function kindAt(file) {
+    try {
+        const st = fs.lstatSync(file);
+        return st.isFile() ? 'file' : 'other';
+    }
+    catch (e) {
+        return e.code === 'ENOENT' ? 'none' : 'other';
+    }
+}
+//# sourceMappingURL=safe-read.js.map

package/dist/lib/sync/safe-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-read.js","sourceRoot":"","sources":["../../../src/lib/sync/safe-read.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,QAAQ,GAAG,SAAS;IAChE,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,8EAA8E;QAC9E,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QACvB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzD,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;QAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,uIAAuI;AACvI,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAQ,CAAuB,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;AACH,CAAC"}

package/dist/lib/sync/should-background-sync.d.ts

@@ -0,0 +1,31 @@
+import type { SyncSummary } from './summary-read.js';
+/** Decision 23: at most one background read per source per 15 minutes. One constant. */
+export declare const SYNC_MIN_INTERVAL_MS: number;
+/** The child waits this long before its first request, so it does not compete with the agent's own start-up. */
+export declare const BACKGROUND_LAUNCH_DELAY_SECONDS = 20;
+/** The "reconnect this source" line is shown at most this often. */
+export declare const REAUTH_LINE_INTERVAL_MS: number;
+export interface BackgroundSyncGates {
+    isTty: boolean;
+    /** Already inside a launched agent (ALIGN_WRAPPED). */
+    wrapped: boolean;
+    /** ALIGN_NO_SYNC. */
+    noSync: boolean;
+    ci: boolean;
+    /** `align sync --off`. */
+    disabled: boolean;
+    summary: SyncSummary | undefined;
+    now: number;
+}
+export interface BackgroundSyncInput extends BackgroundSyncGates {
+    minIntervalMs: number;
+    /** Sources with a sync or a backfill running right now. */
+    busy?: ReadonlySet<string>;
+}
+export declare function shouldBackgroundSync(i: BackgroundSyncInput): string[];
+/** Eligible sources whose token stopped working, when the "reconnect" line is due. Same gates as the spawn. */
+export declare function reauthSources(i: BackgroundSyncGates & {
+    lastShownAt: string | undefined;
+    intervalMs: number;
+}): string[];
+//# sourceMappingURL=should-background-sync.d.ts.map

package/dist/lib/sync/should-background-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"should-background-sync.d.ts","sourceRoot":"","sources":["../../../src/lib/sync/should-background-sync.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAiB,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEpE,wFAAwF;AACxF,eAAO,MAAM,oBAAoB,QAAc,CAAC;AAChD,gHAAgH;AAChH,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAClD,oEAAoE;AACpE,eAAO,MAAM,uBAAuB,QAAiB,CAAC;AAKtD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,uDAAuD;IACvD,OAAO,EAAE,OAAO,CAAC;IACjB,qBAAqB;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;IACZ,0BAA0B;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC9D,aAAa,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC5B;AA4BD,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAcrE;AAED,+GAA+G;AAC/G,wBAAgB,aAAa,CAAC,CAAC,EAAE,mBAAmB,GAAG;IAAE,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAKxH"}

package/dist/lib/sync/should-background-sync.js

@@ -0,0 +1,69 @@
+/**
+ * L6 (Decisions 8, 9, 23): the launch decision, pure. It reads nothing itself: the caller hands in
+ * what `sync-summary.json` said, so the launch path opens no database, makes no network call and
+ * loads no fetcher to decide. Every gate fails toward "do not start anything".
+ */
+import { isKnownSource } from './source-ids.js';
+/** Decision 23: at most one background read per source per 15 minutes. One constant. */
+export const SYNC_MIN_INTERVAL_MS = 15 * 60_000;
+/** The child waits this long before its first request, so it does not compete with the agent's own start-up. */
+export const BACKGROUND_LAUNCH_DELAY_SECONDS = 20;
+/** The "reconnect this source" line is shown at most this often. */
+export const REAUTH_LINE_INTERVAL_MS = 24 * 3_600_000;
+/** What reaches argv. The summary is a file on disk, so an id must be one of the sources a sync reads (which also rules out a flag or a second word). */
+const SAFE_SOURCE_ID = { test: isKnownSource };
+function gatesClosed(i) {
+    return !i.isTty || i.wrapped || i.noSync || i.ci || i.disabled || !i.summary;
+}
+function parsed(iso) {
+    if (iso === undefined)
+        return undefined;
+    const t = Date.parse(iso);
+    return Number.isNaN(t) ? undefined : t;
+}
+/**
+ * The latest moment this source was tried, or undefined when no readable timestamp exists. A stamp
+ * LATER than now is ignored (a clock that moved back, or a damaged file): otherwise it would read
+ * as "tried in the future" and, with the age negative, make the source due on every launch. When
+ * every stamp is in the future the source counts as tried when the summary was written, so it is
+ * retried once the interval has passed, not on every launch.
+ */
+function lastTried(s, now, generatedAt) {
+    const all = [parsed(s.lastSuccessAt), parsed(s.lastAttemptAt)].filter((t) => t !== undefined);
+    const past = all.filter((t) => t <= now);
+    if (past.length > 0)
+        return Math.max(...past);
+    if (all.length === 0)
+        return undefined;
+    const written = parsed(generatedAt);
+    return written !== undefined && written <= now ? written : undefined;
+}
+export function shouldBackgroundSync(i) {
+    if (gatesClosed(i))
+        return [];
+    const due = new Set();
+    for (const s of i.summary.sources) {
+        // `never`: connected but never read by a person (no manual sync or backfill yet), so nothing is read unattended for it.
+        // `manual` and `not_connected`: a run cannot get further until a person acts, and writes no timestamp, so it would respawn every interval.
+        if (!s.backgroundEligible || s.status === 'needs_reauth' || s.status === 'never' || s.status === 'manual' || s.status === 'not_connected')
+            continue;
+        if (!SAFE_SOURCE_ID.test(s.id) || i.busy?.has(s.id))
+            continue;
+        const tried = lastTried(s, i.now, i.summary.generated_at);
+        // No readable timestamp: stale, never fresh.
+        const age = tried === undefined ? Number.POSITIVE_INFINITY : i.now - tried;
+        if (age >= i.minIntervalMs)
+            due.add(s.id);
+    }
+    return [...due];
+}
+/** Eligible sources whose token stopped working, when the "reconnect" line is due. Same gates as the spawn. */
+export function reauthSources(i) {
+    if (gatesClosed(i))
+        return [];
+    const shown = parsed(i.lastShownAt);
+    if (shown !== undefined && i.now - shown >= 0 && i.now - shown < i.intervalMs)
+        return [];
+    return [...new Set(i.summary.sources.filter((s) => s.backgroundEligible && s.status === 'needs_reauth' && SAFE_SOURCE_ID.test(s.id)).map((s) => s.id))];
+}
+//# sourceMappingURL=should-background-sync.js.map

package/dist/lib/sync/should-background-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"should-background-sync.js","sourceRoot":"","sources":["../../../src/lib/sync/should-background-sync.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,wFAAwF;AACxF,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,MAAM,CAAC;AAChD,gHAAgH;AAChH,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAClD,oEAAoE;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,SAAS,CAAC;AAEtD,yJAAyJ;AACzJ,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AAqB/C,SAAS,WAAW,CAAC,CAAsB;IACzC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/E,CAAC;AAED,SAAS,MAAM,CAAC,GAAuB;IACrC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,CAAgB,EAAE,GAAW,EAAE,WAAmB;IACnE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACpC,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,CAAsB;IACzD,IAAI,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAQ,CAAC,OAAO,EAAE,CAAC;QACnC,wHAAwH;QACxH,2IAA2I;QAC3I,IAAI,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,MAAM,KAAK,cAAc,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe;YAAE,SAAS;QACpJ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,SAAS;QAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAQ,CAAC,YAAY,CAAC,CAAC;QAC3D,6CAA6C;QAC7C,MAAM,GAAG,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC;QAC3E,IAAI,GAAG,IAAI,CAAC,CAAC,aAAa;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,aAAa,CAAC,CAAgF;IAC5G,IAAI,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IACzF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,MAAM,KAAK,cAAc,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3J,CAAC"}

package/dist/lib/sync/source-ids.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The sources a sync can read, in a module with no imports so the launch path may name them
+ * (mcp-backfill.ts re-exports it; localConnectorIds() equals it by test). One list: the launcher
+ * filters a summary file's ids against it, and the sync command refuses (or, in the background,
+ * skips) anything else.
+ */
+export declare const KNOWN_SOURCES: readonly ["github", "jira", "confluence", "slack", "teams", "gitlab", "linear", "notion"];
+export type KnownSource = (typeof KNOWN_SOURCES)[number];
+export declare const isKnownSource: (id: string) => id is KnownSource;
+//# sourceMappingURL=source-ids.d.ts.map

package/dist/lib/sync/source-ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-ids.d.ts","sourceRoot":"","sources":["../../../src/lib/sync/source-ids.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,aAAa,2FAA4F,CAAC;AACvH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AACzD,eAAO,MAAM,aAAa,GAAI,IAAI,MAAM,KAAG,EAAE,IAAI,WAAgE,CAAC"}

package/dist/lib/sync/source-ids.js

@@ -0,0 +1,9 @@
+/**
+ * The sources a sync can read, in a module with no imports so the launch path may name them
+ * (mcp-backfill.ts re-exports it; localConnectorIds() equals it by test). One list: the launcher
+ * filters a summary file's ids against it, and the sync command refuses (or, in the background,
+ * skips) anything else.
+ */
+export const KNOWN_SOURCES = ['github', 'jira', 'confluence', 'slack', 'teams', 'gitlab', 'linear', 'notion'];
+export const isKnownSource = (id) => KNOWN_SOURCES.includes(id);
+//# sourceMappingURL=source-ids.js.map

package/dist/lib/sync/source-ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-ids.js","sourceRoot":"","sources":["../../../src/lib/sync/source-ids.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAEvH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAU,EAAqB,EAAE,CAAE,aAAmC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC"}

package/dist/lib/sync/sources.d.ts

@@ -0,0 +1,33 @@
+/**
+ * L5: how a sync reads one source. The connectors that `align connect` already knows how to read
+ * keep their one definition in setup.ts (`buildSources`): this file only adds the two things a
+ * sync needs that connect does not, a scope key per source and GitHub's items-only list read.
+ * Imported only by the sync command (it pulls setup.ts in); the MCP server never loads it.
+ */
+import type { CaptureFetchResult } from '../fetchers/capture.js';
+import { type ResolvedScope, type ScopeDeps } from '../scope.js';
+/**
+ * The scope a run reads a source under (L4: scope.ts decides). `blocked` means do not read at all; `note` is worth saying to the
+ * person; `disclosure` is the one-time team-scope line, set only for a foreground run (the sync prints it before the first request).
+ */
+export type SyncScope = Pick<ResolvedScope, 'scopeKey' | 'scope'> & Partial<Pick<ResolvedScope, 'repo' | 'extras' | 'blocked' | 'note' | 'disclosure' | 'activates'>>;
+/** The scope this machine reads a source under, decided before the fetch so its watermark can be found. Chosen scopes, the folder's
+ *  repo (GitHub, GitLab) and the "yours" fallbacks are all scope.ts's: the same answer `align connect` and `align_scope` give. */
+export declare function scopeOf(source: string, o?: {
+    trigger: 'cli' | 'background';
+}, deps?: ScopeDeps): Promise<SyncScope>;
+export interface SourceWindow {
+    since?: string;
+    until?: string;
+    hotThreads?: Array<{
+        channel: string;
+        ts: string;
+    }>;
+}
+export declare function fetchSource(source: string, tokens: Record<string, string>, win: SourceWindow, scope: SyncScope): Promise<CaptureFetchResult>;
+/**
+ * Re-read one stored thread whole, for merging a partial Slack re-read without guessing which lines are new.
+ * The URL comes from a stored row, never from a person or an agent; Slack's fetchOne also holds it to a slack.com host.
+ */
+export declare function fetchWhole(source: string, tokens: Record<string, string>, url: string): Promise<CaptureFetchResult['items'][number] | undefined>;
+//# sourceMappingURL=sources.d.ts.map

package/dist/lib/sync/sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../../src/lib/sync/sources.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,EAAE,KAAK,aAAa,EAAgB,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAI/E;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC;AAEtK;kIACkI;AAClI,wBAAsB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAE;IAAE,OAAO,EAAE,KAAK,GAAG,YAAY,CAAA;CAAuB,EAAE,IAAI,GAAE,SAAoC,GAAG,OAAO,CAAC,SAAS,CAAC,CAEvK;AAED,MAAM,WAAW,YAAY;IAAG,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE;AAErH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAWlJ;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAOtJ"}

package/dist/lib/sync/sources.js

@@ -0,0 +1,37 @@
+import { fetchGitHubItemsOnly } from '../fetchers/github.js';
+import { resolveScope } from '../scope.js';
+import { realScopeDeps } from '../scope-real.js';
+import { fetchWindow, windowExtras } from '../since.js';
+/** The scope this machine reads a source under, decided before the fetch so its watermark can be found. Chosen scopes, the folder's
+ *  repo (GitHub, GitLab) and the "yours" fallbacks are all scope.ts's: the same answer `align connect` and `align_scope` give. */
+export async function scopeOf(source, o = { trigger: 'cli' }, deps = realScopeDeps(undefined)) {
+    return resolveScope(source, deps, { foreground: o.trigger === 'cli' });
+}
+export async function fetchSource(source, tokens, win, scope) {
+    if (source === 'github') {
+        return fetchGitHubItemsOnly({
+            token: tokens['token'], ...fetchWindow('github', win.since !== undefined ? { since: win.since } : {}), ...windowExtras(win),
+            ...(scope.repo ? { repo: scope.repo, scope: scope.scope } : {}),
+        });
+    }
+    const { buildSources } = await import('../../commands/setup.js');
+    const def = buildSources(false).find((s) => s.id === source);
+    if (!def)
+        throw new Error(`align sync does not know how to read "${source}".`);
+    return def.fetch(tokens, win.since !== undefined ? { since: win.since } : {}, { ...windowExtras(win), ...windowExtras(scope.extras) });
+}
+/**
+ * Re-read one stored thread whole, for merging a partial Slack re-read without guessing which lines are new.
+ * The URL comes from a stored row, never from a person or an agent; Slack's fetchOne also holds it to a slack.com host.
+ */
+export async function fetchWhole(source, tokens, url) {
+    if (source !== 'slack')
+        return undefined;
+    const { SlackFetcher } = await import('@aligndottech/connector-core');
+    const r = await new SlackFetcher().fetchOne(url, { token: tokens['token'] });
+    // A skip (429, 404, a channel it cannot see, time) is a reason the caller counts, never a silent "no".
+    if (!r.item)
+        throw new Error(r.skip?.detail ?? 'the thread could not be read');
+    return r.item;
+}
+//# sourceMappingURL=sources.js.map

package/dist/lib/sync/sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../../src/lib/sync/sources.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAsB,YAAY,EAAkB,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQxD;kIACkI;AAClI,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,IAAuC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAkB,aAAa,CAAC,SAAS,CAAC;IACjJ,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC;AACzE,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,MAA8B,EAAE,GAAiB,EAAE,KAAgB;IACnH,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,oBAAoB,CAAC;YAC1B,KAAK,EAAE,MAAM,CAAC,OAAO,CAAE,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC;YAC5H,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,IAAI,CAAC,CAAC;IAC/E,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzI,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,MAA8B,EAAE,GAAW;IAC1F,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IACtE,MAAM,CAAC,GAAG,MAAM,IAAI,YAAY,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAE,EAAE,CAAC,CAAC;IAC9E,uGAAuG;IACvG,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,IAAI,8BAA8B,CAAC,CAAC;IAC/E,OAAO,CAAC,CAAC,IAAI,CAAC;AAChB,CAAC"}

package/dist/lib/sync/spawn-background.d.ts

@@ -0,0 +1,27 @@
+import { type ChildCaller, startBackfillChild } from '../backfill-state.js';
+/** `--delay 0`: an on-demand run (the person or their agent just asked) has no agent start-up to stay out of the way of. */
+export declare function syncChildArgv(sources: readonly string[], o?: {
+    delaySeconds?: number;
+}): string[];
+/**
+ * The ALIGN_* names a sync child reads, and nothing else (checked against src/ by a parity test).
+ * No ALIGN_LLM_*, ALIGN_TOKEN or provider setting: a sync makes no LLM call and takes connector tokens from the config file.
+ */
+export declare const SYNC_CHILD_ALIGN_NAMES: readonly ["ALIGN_ENV", "ALIGN_GATEWAY_URL", "ALIGN_MODEL_CACHE", "ALIGN_TELEMETRY", "ALIGN_INGEST_CONCURRENCY", "ALIGN_DEBUG"];
+/**
+ * The environment a background sync child gets: an allow-list, not a copy, and the one list of
+ * value rules is mcp-child-env.ts's (so a credentialed proxy URL or a relative certificate path is
+ * dropped here exactly as it is for an MCP server). A name that is not listed is not passed, and
+ * an empty value is omitted.
+ */
+export declare function syncChildEnv(env: Record<string, string | undefined>): Record<string, string>;
+export declare function startSyncChild(sources: readonly string[], o?: {
+    delaySeconds?: number;
+    start?: typeof startBackfillChild;
+    env?: Record<string, string | undefined>;
+    caller?: ChildCaller;
+}): Promise<{
+    ok: boolean;
+    pid?: number;
+}>;
+//# sourceMappingURL=spawn-background.d.ts.map

package/dist/lib/sync/spawn-background.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-background.d.ts","sourceRoot":"","sources":["../../../src/lib/sync/spawn-background.ts"],"names":[],"mappings":"AAaA,OAAO,EAAwB,KAAK,WAAW,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAKlG,4HAA4H;AAC5H,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,CAAC,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,MAAM,EAAE,CAErG;AAUD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,gIAAiI,CAAC;AAKrK;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAU5F;AAED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,CAAC,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,kBAAkB,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GACnI,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAKxC"}