@archmax-ai/harness 0.0.0

package/dist/workflow/control-tools.js

@@ -0,0 +1,468 @@
+/**
+ * The control tools: `archmax_advance`, `archmax_wait`, `archmax_reset`,
+ * `archmax_get_variables`, `archmax_set_variables`.
+ *
+ * Each is a declaration whose body never runs in a wired assembly: governance
+ * intercepts the call in `wrapToolCall`, where checkpointed state is in hand, and
+ * services it with the handler here. A handler returns the tool message the
+ * model reads and, when the call changed the run, the `Command` committing it.
+ */
+import { ToolMessage } from "@langchain/core/messages";
+import { Command } from "@langchain/langgraph";
+import { tool } from "langchain";
+import { z } from "zod";
+import { spokeSinceLastHumanMessage } from "../core/messages.js";
+import { canonicalizeRelPath } from "../core/workspace.js";
+import { classifyWorkspacePath, NO_MOUNTS, } from "../core/zones.js";
+import { ADVANCE_TOOL, GET_VARIABLES_TOOL, RESET_TOOL, SET_VARIABLES_TOOL, WAIT_TOOL, } from "../machine/tool-names.js";
+import { normalizeTitle, resolvePath, TITLE_VARIABLE, titleWriteError, VARIABLE_NAME_PATTERN, } from "../machine/variables.js";
+import { decisionRecordFor, inputRecordFor } from "./parks.js";
+import { currentWorkflowState, readVariables, readWorkflowState, WORKFLOW_STATUSES, } from "./state.js";
+export { ADVANCE_TOOL, GET_VARIABLES_TOOL, RESET_TOOL, SET_VARIABLES_TOOL, WAIT_TOOL };
+// --- Replies ------------------------------------------------------------------
+function toolReply(name, toolCallId, content) {
+    return new ToolMessage({ content, tool_call_id: toolCallId, name });
+}
+/** The one refusal shape: an error-status tool message, so the model self-corrects and a view classifies it. */
+export function refusal(name, toolCallId, text) {
+    return new ToolMessage({ content: text, tool_call_id: toolCallId, name, status: "error" });
+}
+function commit(update) {
+    return new Command({ update });
+}
+/** A control tool's declaration: a body that only says it is unwired. */
+function declaration(name, description, schema) {
+    return tool(async () => `${name} is unavailable: the workflow middleware is not installed.`, {
+        name,
+        description,
+        schema,
+    });
+}
+function schemaIssues(error) {
+    return error.issues.map((i) => `${i.path.join(".") || "(input)"}: ${i.message}`).join("; ");
+}
+// --- Evidence -----------------------------------------------------------------
+/** Most paths one advance may attach — a bound on what a person is asked to read. */
+export const MAX_ADVANCE_EVIDENCE = 20;
+/** Zones an attached path may address: everything the agent itself can read. */
+const READABLE_ZONES = new Set([
+    "run-open",
+    "run",
+    "authored",
+    "run-offload",
+]);
+/**
+ * Validate attached evidence paths (canonical, deduplicated) or give the reason
+ * the call is refused. Classified through the kernel's classifier and mount
+ * table, so what may be attached cannot drift from what the agent can read.
+ */
+export function validateAdvanceEvidence(paths, mounts = NO_MOUNTS) {
+    if (paths.length > MAX_ADVANCE_EVIDENCE) {
+        return {
+            ok: false,
+            reason: `${paths.length} evidence paths were attached; at most ${MAX_ADVANCE_EVIDENCE} may be. ` +
+                `Attach the artifacts the decision actually rests on.`,
+        };
+    }
+    const out = [];
+    for (const entry of paths) {
+        const raw = String(entry).trim();
+        const { path: rel } = canonicalizeRelPath(raw);
+        const zone = classifyWorkspacePath(raw, mounts);
+        if (zone === "escapes") {
+            return { ok: false, reason: `evidence path '${raw}' points outside the workspace.` };
+        }
+        if (zone === "root" || rel === "") {
+            return { ok: false, reason: `an evidence path is empty — name a file, not the workspace root.` };
+        }
+        if (!READABLE_ZONES.has(zone)) {
+            return {
+                ok: false,
+                reason: `evidence path '${raw}' addresses a runtime-internal area, which is not readable — ` +
+                    `attach what you wrote under 'scratchpad/'.`,
+            };
+        }
+        if (!out.includes(rel))
+            out.push(rel);
+    }
+    return { ok: true, paths: out };
+}
+// --- Schemas and declarations ---------------------------------------------------
+export const advanceSchema = z.object({
+    to: z.string().describe("Target state slug, as declared in the current state's transitions."),
+    reason: z.string().min(1).describe("One sentence: why advance now."),
+    evidence: z
+        .array(z.string())
+        .optional()
+        .describe("Files for the person deciding, when `to` is a human state: workspace-relative paths " +
+        "(e.g. ['scratchpad/refund.json']), shown with that state's own. Refused on any other target."),
+});
+export const waitSchema = z.object({
+    reason: z.string().min(1).describe("One sentence: what the run is waiting for."),
+    until: z
+        .string()
+        .optional()
+        .describe("When to be resumed if nothing arrives sooner: a duration ('30m', '1d') or an " +
+        "ISO-8601 instant."),
+});
+export const resetSchema = z.object({
+    reason: z.string().min(1).describe("One sentence: why the run has to start over."),
+});
+export const getVariablesSchema = z.object({
+    name: z.string().optional().describe("Variable to read; omit or leave empty for all."),
+    path: z
+        .string()
+        .optional()
+        .describe("Dotted path into the value, e.g. 'items.0.sku' or 'items.-1.sku' (last)."),
+});
+export const setVariablesSchema = z.object({
+    variables: z.record(z.string(), z.unknown()).describe("Values keyed by name; whole values only."),
+    lock: z.boolean().optional().describe("Lock them permanently."),
+});
+/**
+ * Every control tool, in registration order. Descriptions are paid for on every
+ * model call, so they say only what the model cannot infer; the advance tool
+ * does not repeat the transition catalog the prompt's graph section renders.
+ */
+export function createControlTools() {
+    return [
+        declaration(ADVANCE_TOOL, "Advance the workflow to the next state. Pick `to` from the current state's " +
+            "transitions in the graph section above (a slug, never a title). The runtime " +
+            "validates the edge, runs this state's `after` hook, then unlocks the next " +
+            "state's tools.", advanceSchema),
+        declaration(RESET_TOOL, "Start the workflow over from the state the conversation began in, keeping the " +
+            "conversation and any work already written. Use it when this state cannot serve " +
+            "what was asked: a wrong branch, a path no transition from here reaches, or a " +
+            "follow-up arriving in a terminal state, where the run already finished. Call it " +
+            "before answering, not after.", resetSchema),
+        declaration(WAIT_TOOL, "Pause the run in this state until an external event arrives (a callback, a webhook, " +
+            "a message someone sends in their own time). The run stays open here: when the event " +
+            "is delivered you continue in this same state with what it carried. Use it instead of " +
+            "ending your turn when the work cannot proceed until something reaches you. Set " +
+            "'until' when you are waiting for a time rather than an event; an earlier event still " +
+            "resumes you. This does NOT request a human decision, approval or review: those " +
+            `belong to a human node, which you reach with ${ADVANCE_TOOL} and which the runtime ` +
+            "parks and presents on its own. This tool moves the run nowhere.", waitSchema),
+        declaration(GET_VARIABLES_TOOL, "Read the run's variables. Omit `name` for all of them; pass `path` to drill " +
+            "into a structured value instead of pulling it whole into context.", getVariablesSchema),
+        declaration(SET_VARIABLES_TOOL, "Record facts for the rest of the run; values may be structured. Pass " +
+            "`lock: true` to make one permanent — required for anything a tool guard " +
+            "reads. Writing a locked variable is refused, not ignored. `title` is " +
+            "reserved for a short single-line label naming this run's task: set it " +
+            "early, update it when the task changes, and never lock it.", setVariablesSchema),
+    ];
+}
+/**
+ * Attempt a transition and commit the outcome: `workflowState` and the `agent`
+ * trail step on success, `iterations` always, and — into a human state —
+ * the pending-decision record with the park opened in its closing phase.
+ */
+export async function handleAdvance(opts, request) {
+    const refuse = (text) => ({ message: refusal(ADVANCE_TOOL, request.toolCallId, text) });
+    const parsed = advanceSchema.safeParse(request.args);
+    if (!parsed.success) {
+        return refuse(`${ADVANCE_TOOL} rejected: invalid arguments — ${schemaIssues(parsed.error)}`);
+    }
+    // Evidence is settled before the transition is attempted, so a refused
+    // attachment leaves the run exactly where it was: no hook run, no trail step.
+    const attached = parsed.data.evidence ?? [];
+    let evidence = [];
+    if (attached.length > 0) {
+        if (!opts.machine.isHumanState(parsed.data.to)) {
+            return refuse(`${ADVANCE_TOOL} rejected: evidence can only be attached when advancing into a human ` +
+                `decision state, and '${parsed.data.to}' is not one — nothing would present it. ` +
+                `Call again without 'evidence'.`);
+        }
+        const validated = validateAdvanceEvidence(attached, opts.mountPrefixes);
+        if (!validated.ok)
+            return refuse(`${ADVANCE_TOOL} rejected: ${validated.reason}`);
+        evidence = validated.paths;
+    }
+    const from = currentWorkflowState(request.state, opts.machine.entry);
+    const result = await opts.lifecycle.attemptTransition(from, parsed.data.to, request.ctx, parsed.data.reason, request.callId ? { callId: request.callId } : undefined);
+    if (!result.ok) {
+        // A terminal rejection is committed as `rejected` so the run routes through
+        // `on_error`; a recoverable one keeps the agent in place, replying without
+        // erroring the message so it retries rather than reading a failed run.
+        return {
+            message: commit({
+                iterations: { ...result.corrections },
+                ...(result.terminal ? { rejected: result.reason } : {}),
+                messages: [toolReply(ADVANCE_TOOL, request.toolCallId, `${ADVANCE_TOOL} rejected: ${result.reason}`)],
+            }),
+        };
+    }
+    const fields = readWorkflowState(request.state);
+    const step = { to: result.to, kind: "agent", reason: parsed.data.reason, ts: Date.now() };
+    const moved = {
+        workflowState: result.to,
+        iterations: { ...result.corrections },
+        // The gate ran the target's `before` hook: recorded as done for this visit,
+        // so the target's first model call does not run it a second time.
+        beforeDone: { ...(fields.beforeDone ?? {}), [result.to]: true },
+        // A successful transition clears an earlier rejection marker and starts the target's turn budget afresh.
+        rejected: null,
+        stateTurns: null,
+        auditTrail: [step],
+        messages: [
+            toolReply(ADVANCE_TOOL, request.toolCallId, `Advanced to state '${result.to}'. You may now use the tools allowed in this state.`),
+        ],
+    };
+    if (!opts.machine.isHumanState(result.to)) {
+        return { message: commit(moved), moved: { from, to: result.to } };
+    }
+    // Into a human state: the park record is committed with the transition, so a
+    // process that dies before the closing turn still sees a parked session.
+    const seq = (fields.decisionCount ?? 0) + 1;
+    const park = decisionRecordFor(opts.machine, result.to, seq, evidence);
+    return {
+        message: commit({
+            ...moved,
+            pendingDecision: park,
+            decisionCount: seq,
+            status: WORKFLOW_STATUSES.awaitingDecision,
+            parkPhase: "closing",
+        }),
+        moved: { from, to: result.to, park },
+    };
+}
+// --- archmax_wait ----------------------------------------------------------------
+/** The relative form of `until`: a positive integer and a unit, e.g. `30m`, `1d`. */
+const RELATIVE = /^(\d+)(ms|s|m|h|d)$/;
+const UNIT_MS = { ms: 1, s: 1_000, m: 60_000, h: 3_600_000, d: 86_400_000 };
+/** The accepted `until` forms, quoted verbatim in every rejection. */
+export const WAIT_UNTIL_FORMS = "a relative duration ('30m', '2h', '1d' — integer plus ms|s|m|h|d) or an absolute " +
+    "ISO-8601 instant ('2026-08-13T09:00:00Z')";
+/**
+ * Resolve `until` against `now` (epoch ms) to an absolute instant: the
+ * checkpoint outlives the process, so "1d" read tomorrow means nothing. Fails
+ * closed — an unreadable `until` is refused, because a park that silently loses
+ * its schedule is a run nothing ever wakes. An instant in the past means "due now".
+ */
+export function resolveWaitUntil(until, now) {
+    const value = until.trim();
+    if (value === "")
+        return { error: "'until' is empty." };
+    const relative = RELATIVE.exec(value);
+    if (relative) {
+        const amount = Number(relative[1]);
+        if (amount <= 0)
+            return { error: `'until' must be a positive duration; got '${value}'.` };
+        return { resumeAt: new Date(now + amount * UNIT_MS[relative[2]]).toISOString() };
+    }
+    // Only ISO-8601-shaped input is tried as an instant: `Date.parse` accepts loose, locale-dependent forms.
+    if (/^\d{4}-\d{2}-\d{2}([T ]\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:?\d{2})?)?$/.test(value)) {
+        const parsed = Date.parse(value);
+        if (Number.isFinite(parsed))
+            return { resumeAt: new Date(parsed).toISOString() };
+    }
+    return { error: `'until' value '${value}' is neither a duration nor an instant.` };
+}
+/**
+ * Service a wait call: commit the pending-input record and open the park. The
+ * phase is `closing` when the model has said nothing since the person's last
+ * message (it owes them one), `suspend` when its question already is the
+ * message. An exhausted park budget is committed as `rejected`.
+ */
+export function handleWait(machine, request) {
+    const refuse = (text) => ({ message: refusal(WAIT_TOOL, request.toolCallId, text) });
+    const parsed = waitSchema.safeParse(request.args);
+    if (!parsed.success) {
+        return refuse(`${WAIT_TOOL} rejected: a non-empty 'reason' is required — say what the run is waiting for.`);
+    }
+    const at = Date.now();
+    let resumeAt;
+    if (parsed.data.until !== undefined) {
+        const resolved = resolveWaitUntil(parsed.data.until, at);
+        if (resolved.error) {
+            return refuse(`${WAIT_TOOL} rejected: ${resolved.error} Expected ${WAIT_UNTIL_FORMS}.`);
+        }
+        resumeAt = resolved.resumeAt;
+    }
+    const fields = readWorkflowState(request.state);
+    const slug = currentWorkflowState(request.state, machine.entry);
+    const counts = fields.parkCounts ?? {};
+    const soFar = counts[slug] ?? 0;
+    const maxParks = machine.spec.states[slug]?.budget?.maxParks;
+    if (maxParks != null && soFar + 1 > maxParks) {
+        const reason = `state '${slug}' exhausted its park budget (maxParks: ${maxParks}) — it asked to ` +
+            `wait again for: ${parsed.data.reason}`;
+        return {
+            message: commit({
+                rejected: reason,
+                messages: [refusal(WAIT_TOOL, request.toolCallId, `${WAIT_TOOL} rejected: ${reason}`)],
+            }),
+            exhausted: reason,
+        };
+    }
+    const park = inputRecordFor(machine, slug, parsed.data.reason, resumeAt);
+    const messages = request.state?.messages ?? [];
+    return {
+        message: commit({
+            pendingInput: park,
+            status: WORKFLOW_STATUSES.awaitingInput,
+            parkPhase: spokeSinceLastHumanMessage(messages) ? "suspend" : "closing",
+            replyOnly: null,
+            rejected: null,
+            // Counted at the park that happened: a request the budget refused never becomes a park.
+            parkCounts: { ...counts, [slug]: soFar + 1 },
+            messages: [
+                toolReply(WAIT_TOOL, request.toolCallId, `Waiting in state '${slug}'. The run is parked here and will continue in ` +
+                    `this same state when an event is delivered; stop working now.` +
+                    (resumeAt
+                        ? ` Nothing is scheduled by the runtime: ${resumeAt} is recorded for whoever ` +
+                            `wakes the run, and an earlier event resumes you just the same.`
+                        : "")),
+            ],
+        }),
+        park,
+    };
+}
+// --- archmax_reset ---------------------------------------------------------------
+/** The state a reset returns to: the recorded entry state, else re-resolved from the trigger (older checkpoints). */
+export function entryStateOf(state, machine) {
+    if (state.entryState)
+        return state.entryState;
+    const triggerId = state.trigger?.id;
+    return (triggerId ? machine.startStateForTrigger(triggerId) : undefined) ?? machine.entry;
+}
+/**
+ * Service a reset: move back to the entry state and clear what gates progress
+ * (correction budgets, `beforeDone`). Evidence — messages, files, variables, the
+ * trail — is left alone: a reset moves the machine, not the history.
+ */
+export function handleReset(machine, request) {
+    const parsed = resetSchema.safeParse(request.args);
+    if (!parsed.success) {
+        return {
+            message: refusal(RESET_TOOL, request.toolCallId, `${RESET_TOOL} rejected: a non-empty 'reason' is required — say why the run has to start over.`),
+        };
+    }
+    const from = currentWorkflowState(request.state, machine.entry);
+    const entry = entryStateOf(readWorkflowState(request.state), machine);
+    return {
+        message: commit({
+            workflowState: entry,
+            iterations: {},
+            beforeDone: {},
+            rejected: null,
+            stateTurns: null,
+            auditTrail: [{ to: entry, kind: "reset", reason: parsed.data.reason, ts: Date.now() }],
+            messages: [
+                toolReply(RESET_TOOL, request.toolCallId, `Reset to state '${entry}'. Correction budgets are cleared and its entry gate runs ` +
+                    `again; earlier work in the conversation and in scratchpad/ is untouched.`),
+            ],
+        }),
+        moved: { from, to: entry },
+    };
+}
+// --- Variables ------------------------------------------------------------------
+/** An optional string argument; `""` or whitespace means "not given", as models often send it. */
+function optionalArg(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed === "" ? undefined : trimmed;
+}
+function known(store) {
+    const names = Object.keys(store).sort();
+    return names.length > 0 ? names.join(", ") : "(none set yet)";
+}
+/** Service an `archmax_get_variables` call against the checkpointed store. */
+export function handleGetVariables(request) {
+    const reply = (content) => toolReply(GET_VARIABLES_TOOL, request.toolCallId, content);
+    const refuse = (text) => refusal(GET_VARIABLES_TOOL, request.toolCallId, text);
+    const parsed = getVariablesSchema.safeParse(request.args);
+    if (!parsed.success)
+        return refuse(`${GET_VARIABLES_TOOL} rejected: invalid arguments.`);
+    const store = readVariables(request.state);
+    const name = optionalArg(parsed.data.name);
+    const path = optionalArg(parsed.data.path);
+    if (name === undefined) {
+        const all = Object.fromEntries(Object.entries(store).map(([key, entry]) => [key, { value: entry.value, locked: entry.locked }]));
+        return reply(JSON.stringify(all, null, 2));
+    }
+    const entry = store[name];
+    if (entry === undefined)
+        return refuse(`Variable '${name}' is not set. Set: ${known(store)}.`);
+    if (path === undefined)
+        return reply(JSON.stringify({ value: entry.value, locked: entry.locked }, null, 2));
+    const resolved = resolvePath(entry.value, path.split("."));
+    // No fallback to the whole value: returning something other than what was asked invites acting on it.
+    if (resolved === undefined)
+        return refuse(`Path '${path}' does not resolve against variable '${name}'.`);
+    return reply(JSON.stringify({ value: resolved }, null, 2));
+}
+/** Service an `archmax_set_variables` call. Atomic: one rejected key refuses the whole call. */
+export function handleSetVariables(request) {
+    const refuse = (text) => ({ message: refusal(SET_VARIABLES_TOOL, request.toolCallId, text) });
+    const parsed = setVariablesSchema.safeParse(request.args);
+    if (!parsed.success) {
+        return refuse(`${SET_VARIABLES_TOOL} rejected: invalid arguments — ${schemaIssues(parsed.error)}`);
+    }
+    const store = readVariables(request.state);
+    const { variables, lock } = parsed.data;
+    const names = Object.keys(variables);
+    if (names.length === 0)
+        return refuse(`${SET_VARIABLES_TOOL} rejected: no variables given.`);
+    for (const name of names) {
+        if (!VARIABLE_NAME_PATTERN.test(name)) {
+            const hint = name.includes(".") ? " Variables are written whole — there is no sub-path write." : "";
+            return refuse(`${SET_VARIABLES_TOOL} rejected: '${name}' is not a valid variable name (lowercase ` +
+                `letters, digits and underscores, starting with a letter).${hint} Nothing was written.`);
+        }
+        if (store[name]?.locked) {
+            return refuse(`${SET_VARIABLES_TOOL} rejected: '${name}' is locked and cannot be changed ` +
+                `(current value: ${JSON.stringify(store[name]?.value)}). Nothing was written.`);
+        }
+        if (name === TITLE_VARIABLE) {
+            // Refused, not silently dropped: an agent that believes it locked the title must not be lied to.
+            if (lock === true) {
+                return refuse(`${SET_VARIABLES_TOOL} rejected: '${TITLE_VARIABLE}' is never locked — it names the ` +
+                    `task this run is doing, and it has to stay correctable when the task changes. ` +
+                    `Retry without \`lock\`. Nothing was written.`);
+            }
+            const problem = titleWriteError(variables[name]);
+            if (problem)
+                return refuse(`${SET_VARIABLES_TOOL} rejected: ${problem} Nothing was written.`);
+        }
+    }
+    const locked = lock === true;
+    const delta = {};
+    for (const [name, value] of Object.entries(variables)) {
+        delta[name] =
+            name === TITLE_VARIABLE
+                ? { value: normalizeTitle(value), locked: false }
+                : { value, locked };
+    }
+    return {
+        message: toolReply(SET_VARIABLES_TOOL, request.toolCallId, `Set ${names.join(", ")}${locked ? " (locked)" : ""}.`),
+        delta,
+        written: names,
+        locked,
+    };
+}
+/** Wrap an `archmax_set_variables` outcome as the update that commits its delta. */
+export function setVariablesCommand(outcome) {
+    if (!outcome.delta)
+        return outcome.message;
+    return commit({ variables: outcome.delta, messages: [outcome.message] });
+}
+/** The variables a state still owes before it may be left — its `requires` minus what is set. */
+export function unmetRequirements(required, store) {
+    return required.filter((name) => store[name] === undefined);
+}
+/**
+ * The wording for a `${{…}}` reference in the agent's own tool arguments that
+ * could not be resolved: a correctable refusal carrying the two fixes it might
+ * need — discover what is set, or escape a reference meant as literal text.
+ */
+export function unresolvedArgumentMessage(failure) {
+    // A function replacer: `$$` in a string replacement is itself an escape for `$`.
+    const escaped = failure.reference.replace("${{", () => "$${{");
+    return (`Call refused before it ran: the argument reference ${failure.reference} could not be ` +
+        `resolved — ${failure.detail}. Nothing was called and no partial value was delivered. ` +
+        `Check what is set with \`${GET_VARIABLES_TOOL}\`, then retry with a reference that ` +
+        `resolves — or, if you meant the literal text, write it as ${escaped}.`);
+}
+//# sourceMappingURL=control-tools.js.map

package/dist/workflow/control-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-tools.js","sourceRoot":"","sources":["../../src/workflow/control-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EACL,qBAAqB,EACrB,SAAS,GAGV,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,kBAAkB,EAClB,SAAS,GACV,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,cAAc,EACd,WAAW,EACX,cAAc,EACd,eAAe,EACf,qBAAqB,GAGtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,GAMlB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC;AAEvF,iFAAiF;AAEjF,SAAS,SAAS,CAAC,IAAY,EAAE,UAAkB,EAAE,OAAe;IAClE,OAAO,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,UAAkB,EAAE,IAAY;IACpE,OAAO,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,MAAM,CAAC,MAAsB;IACpC,OAAO,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,yEAAyE;AACzE,SAAS,WAAW,CAAC,IAAY,EAAE,WAAmB,EAAE,MAAoB;IAC1E,OAAO,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,IAAI,4DAA4D,EAAE;QAC3F,IAAI;QACJ,WAAW;QACX,MAAM;KACP,CAA8B,CAAC;AAClC,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB;IACrC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9F,CAAC;AAED,iFAAiF;AAEjF,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEvC,gFAAgF;AAChF,MAAM,cAAc,GAA+B,IAAI,GAAG,CAAgB;IACxE,UAAU;IACV,KAAK;IACL,UAAU;IACV,aAAa;CACd,CAAC,CAAC;AAIH;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAwB,EACxB,SAAwB,SAAS;IAEjC,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACxC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,GAAG,KAAK,CAAC,MAAM,0CAA0C,oBAAoB,WAAW;gBACxF,sDAAsD;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,GAAG,iCAAiC,EAAE,CAAC;QACvF,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kEAAkE,EAAE,CAAC;QACnG,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EACJ,kBAAkB,GAAG,+DAA+D;oBACpF,4CAA4C;aAC/C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC;AAED,mFAAmF;AAEnF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC7F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACpE,QAAQ,EAAE,CAAC;SACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACP,sFAAsF;QACpF,8FAA8F,CACjG;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IAChF,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+EAA+E;QAC7E,mBAAmB,CACtB;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;CACnF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACtF,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,0EAA0E,CAAC;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACjG,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CAChE,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,WAAW,CACT,YAAY,EACZ,6EAA6E;YAC3E,8EAA8E;YAC9E,4EAA4E;YAC5E,gBAAgB,EAClB,aAAa,CACd;QACD,WAAW,CACT,UAAU,EACV,gFAAgF;YAC9E,iFAAiF;YACjF,+EAA+E;YAC/E,kFAAkF;YAClF,8BAA8B,EAChC,WAAW,CACZ;QACD,WAAW,CACT,SAAS,EACT,sFAAsF;YACpF,sFAAsF;YACtF,uFAAuF;YACvF,iFAAiF;YACjF,uFAAuF;YACvF,iFAAiF;YACjF,gDAAgD,YAAY,yBAAyB;YACrF,iEAAiE,EACnE,UAAU,CACX;QACD,WAAW,CACT,kBAAkB,EAClB,8EAA8E;YAC5E,mEAAmE,EACrE,kBAAkB,CACnB;QACD,WAAW,CACT,kBAAkB,EAClB,uEAAuE;YACrE,0EAA0E;YAC1E,uEAAuE;YACvE,wEAAwE;YACxE,4DAA4D,EAC9D,kBAAkB,CACnB;KACF,CAAC;AACJ,CAAC;AA0BD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAA6F,EAC7F,OAAuB;IAEvB,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAEhG,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,GAAG,YAAY,kCAAkC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,uEAAuE;IACvE,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC5C,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/C,OAAO,MAAM,CACX,GAAG,YAAY,uEAAuE;gBACpF,wBAAwB,MAAM,CAAC,IAAI,CAAC,EAAE,2CAA2C;gBACjF,gCAAgC,CACnC,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,YAAY,cAAc,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACnD,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,EAAE,EACd,OAAO,CAAC,GAAG,EACX,MAAM,CAAC,IAAI,CAAC,MAAM,EAClB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,4EAA4E;QAC5E,2EAA2E;QAC3E,uEAAuE;QACvE,OAAO;YACL,OAAO,EAAE,MAAM,CAAC;gBACd,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE;gBACrC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,QAAQ,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,YAAY,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;aACtG,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,IAAI,GAAc,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACrG,MAAM,KAAK,GAAmB;QAC5B,aAAa,EAAE,MAAM,CAAC,EAAE;QACxB,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE;QACrC,4EAA4E;QAC5E,kEAAkE;QAClE,UAAU,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE;QAC/D,yGAAyG;QACzG,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,CAAC,IAAI,CAAC;QAClB,QAAQ,EAAE;YACR,SAAS,CACP,YAAY,EACZ,OAAO,CAAC,UAAU,EAClB,sBAAsB,MAAM,CAAC,EAAE,qDAAqD,CACrF;SACF;KACF,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IAED,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvE,OAAO;QACL,OAAO,EAAE,MAAM,CAAC;YACd,GAAG,KAAK;YACR,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,GAAG;YAClB,MAAM,EAAE,iBAAiB,CAAC,gBAAgB;YAC1C,SAAS,EAAE,SAAS;SACrB,CAAC;QACF,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,oFAAoF;AAEpF,qFAAqF;AACrF,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAEvC,MAAM,OAAO,GAA2B,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;AAEpG,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAC3B,mFAAmF;IACnF,2CAA2C,CAAC;AAM9C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,GAAW;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,6CAA6C,KAAK,IAAI,EAAE,CAAC;QAC1F,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACrF,CAAC;IACD,yGAAyG;IACzG,IAAI,6EAA6E,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,kBAAkB,KAAK,yCAAyC,EAAE,CAAC;AACrF,CAAC;AAeD;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,OAAwB,EAAE,OAAoB;IACvE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,CACX,GAAG,SAAS,gFAAgF,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,IAAI,QAA4B,CAAC;IACjC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,MAAM,CAAC,GAAG,SAAS,cAAc,QAAQ,CAAC,KAAK,aAAa,gBAAgB,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC7D,IAAI,QAAQ,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,GAAG,QAAQ,EAAE,CAAC;QAC7C,MAAM,MAAM,GACV,UAAU,IAAI,0CAA0C,QAAQ,kBAAkB;YAClF,mBAAmB,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,MAAM,CAAC;gBACd,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,SAAS,cAAc,MAAM,EAAE,CAAC,CAAC;aACvF,CAAC;YACF,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAe,OAAO,CAAC,KAAkC,EAAE,QAAQ,IAAI,EAAE,CAAC;IACxF,OAAO;QACL,OAAO,EAAE,MAAM,CAAC;YACd,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,iBAAiB,CAAC,aAAa;YACvC,SAAS,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACvE,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,IAAI;YACd,wFAAwF;YACxF,UAAU,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;YAC5C,QAAQ,EAAE;gBACR,SAAS,CACP,SAAS,EACT,OAAO,CAAC,UAAU,EAClB,qBAAqB,IAAI,iDAAiD;oBACxE,+DAA+D;oBAC/D,CAAC,QAAQ;wBACP,CAAC,CAAC,yCAAyC,QAAQ,2BAA2B;4BAC5E,gEAAgE;wBAClE,CAAC,CAAC,EAAE,CAAC,CACV;aACF;SACF,CAAC;QACF,IAAI;KACL,CAAC;AACJ,CAAC;AAED,oFAAoF;AAEpF,qHAAqH;AACrH,MAAM,UAAU,YAAY,CAC1B,KAA0D,EAC1D,OAAwB;IAExB,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC,UAAU,CAAC;IAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACpC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC;AAC5F,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAwB,EAAE,OAAqB;IACzE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,OAAO,CACd,UAAU,EACV,OAAO,CAAC,UAAU,EAClB,GAAG,UAAU,kFAAkF,CAChG;SACF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IACtE,OAAO;QACL,OAAO,EAAE,MAAM,CAAC;YACd,aAAa,EAAE,KAAK;YACpB,UAAU,EAAE,EAAE;YACd,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAsB,CAAC;YAC1G,QAAQ,EAAE;gBACR,SAAS,CACP,UAAU,EACV,OAAO,CAAC,UAAU,EAClB,mBAAmB,KAAK,4DAA4D;oBAClF,0EAA0E,CAC7E;aACF;SACF,CAAC;QACF,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE;KAC3B,CAAC;AACJ,CAAC;AAED,mFAAmF;AAEnF,kGAAkG;AAClG,SAAS,WAAW,CAAC,KAAgC;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,SAAS,KAAK,CAAC,KAAoB;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAChE,CAAC;AAQD,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,SAAS,CAAC,kBAAkB,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,GAAG,kBAAkB,+BAA+B,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAC5B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CACjG,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,aAAa,IAAI,sBAAsB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/F,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE5G,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,sGAAsG;IACtG,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,IAAI,wCAAwC,IAAI,IAAI,CAAC,CAAC;IACzG,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAWD,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,GAAG,kBAAkB,kCAAkC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,kBAAkB,gCAAgC,CAAC,CAAC;IAE7F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,EAAE,CAAC;YACpG,OAAO,MAAM,CACX,GAAG,kBAAkB,eAAe,IAAI,4CAA4C;gBAClF,4DAA4D,IAAI,uBAAuB,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;YACxB,OAAO,MAAM,CACX,GAAG,kBAAkB,eAAe,IAAI,oCAAoC;gBAC1E,mBAAmB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,yBAAyB,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,iGAAiG;YACjG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,OAAO,MAAM,CACX,GAAG,kBAAkB,eAAe,cAAc,mCAAmC;oBACnF,gFAAgF;oBAChF,8CAA8C,CACjD,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACjD,IAAI,OAAO;gBAAE,OAAO,MAAM,CAAC,GAAG,kBAAkB,cAAc,OAAO,uBAAuB,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC7B,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,KAAK,cAAc;gBACrB,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,KAAe,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;gBAC3D,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO;QACL,OAAO,EAAE,SAAS,CAChB,kBAAkB,EAClB,OAAO,CAAC,UAAU,EAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,CACvD;QACD,KAAK;QACL,OAAO,EAAE,KAAK;QACd,MAAM;KACP,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,OAA4B;IAC9D,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC3C,OAAO,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,QAAkB,EAAE,KAAoB;IACxE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAuB;IAC/D,iFAAiF;IACjF,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO,CACL,sDAAsD,OAAO,CAAC,SAAS,gBAAgB;QACvF,cAAc,OAAO,CAAC,MAAM,2DAA2D;QACvF,4BAA4B,kBAAkB,uCAAuC;QACrF,6DAA6D,OAAO,GAAG,CACxE,CAAC;AACJ,CAAC"}

package/dist/workflow/governance.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Governance of the two calls the model makes: `wrapModelCall` shapes the
+ * payload (per-state tool disclosure, the volatile prompt section, the cache
+ * breakpoint, the `before` hook, the time budget) and `wrapToolCall` decides
+ * every tool call (variable substitution, the kernel's verdict, the calls the
+ * runtime services itself, telemetry, skill redaction). The hooks that wire
+ * these into the agent live in `middleware.ts`.
+ */
+import type { BaseChatModel } from "@langchain/core/language_models/chat_models";
+import { ToolMessage } from "@langchain/core/messages";
+import { Command } from "@langchain/langgraph";
+import type { PtcToolGateway } from "../sandbox/ptc-gateway.js";
+import type { LifecycleContext, LifecycleRunner } from "../lifecycle/runner.js";
+import type { WorkflowMachine } from "../machine/machine.js";
+import type { WorkflowEventEmitter } from "../core/events.js";
+import { type PendingDecision } from "./state.js";
+import type { SubWorkflowDispatcher } from "./sub-workflow.js";
+import { type GovernanceRule } from "../kernel/kernel.js";
+import type { MountPrefixes } from "../core/mounts.js";
+import { type SkillRegistry } from "../core/skills.js";
+import { asModelCallResult, type ModelCallHandler, type ModelCallRequest, type WorkflowToolCallHandler, type WorkflowToolCallRequest } from "../core/deepagents.js";
+import { type CacheTtl, type PromptCacheStrategy } from "./prompt-cache.js";
+export { buildRunnableConfig } from "./runtime-config.js";
+/**
+ * Payload shaping resolved once at assembly and applied on every model call.
+ * Presentation only — which bytes the model sees and which prefix is marked
+ * cacheable; none of it widens what the kernel permits.
+ */
+/**
+ * Which model a state's calls run on, and the prompt-cache mechanism that model
+ * uses. Resolved once per composition (`resolveStateModels`) from what the spec
+ * declares; a state with nothing of its own is absent from `modelFor`, so the
+ * graph's own model — the workflow's — is what runs.
+ */
+export interface StateModels {
+    /** The model this state's calls run on, or `undefined` for the composition's own. */
+    modelFor(state: string): BaseChatModel | undefined;
+    /** The cache strategy of the model in force for this state. */
+    cacheStrategyFor(state: string): PromptCacheStrategy;
+    /**
+     * The **id** of the model in force for this state — read from the model the
+     * assembly will actually run, not from what the spec declares, so it is
+     * answered the same way whether the model came from a declared id, the
+     * environment, an explicit `model` or a `modelFactory`. `undefined` when the
+     * model exposes no id.
+     *
+     * Used to price a call whose response names no model: an OpenAI-compatible
+     * endpoint is not obliged to echo one back, and without this the runtime would
+     * hold the id it asked for and still report no cost.
+     */
+    idFor(state: string): string | undefined;
+}
+export interface PromptShaping {
+    cacheStrategy?: PromptCacheStrategy;
+    cacheTtl?: CacheTtl;
+    /** Conditional built-ins this assembly withholds; their upstream prompt guidance is pruned. */
+    withheldBuiltins?: string[];
+}
+export interface GovernanceContext {
+    machine: WorkflowMachine;
+    emit: WorkflowEventEmitter;
+    lifecycle: LifecycleRunner;
+    policyRules: GovernanceRule[];
+    mountPrefixes: MountPrefixes;
+    skills: SkillRegistry;
+    shaping: PromptShaping;
+    /** Per-state models; omitted, every call runs on the graph's own model. */
+    stateModels?: StateModels;
+    ptcGateway?: PtcToolGateway;
+    subWorkflows?: SubWorkflowDispatcher;
+    sessionIdOf(runtime: unknown): string;
+}
+export interface Governance {
+    wrapModelCall(request: ModelCallRequest, handler: ModelCallHandler): Promise<ReturnType<typeof asModelCallResult>>;
+    wrapToolCall(request: WorkflowToolCallRequest, handler: WorkflowToolCallHandler): Promise<Command | ToolMessage>;
+    /** A hook context for one request, from the model context captured for the session. */
+    lifecycleCtx(sessionId: string, state: unknown, messages: unknown[]): LifecycleContext;
+    reportMove(sessionId: string, moved: {
+        from: string;
+        to: string;
+        park?: PendingDecision;
+    }): void;
+    /** End the session's turn: drop its model context and return the `beforeDone` entries staged this turn. */
+    endTurn(sessionId: string): Record<string, boolean> | undefined;
+    /** Release the session and every sub-run scope nested beneath it; returns the scopes released. */
+    release(sessionId: string): string[];
+}
+/**
+ * Resolve the name the model called to a registered tool: an exact match, or the
+ * bare action name of a namespaced `<collection>__<action>` id (models routinely
+ * drop the prefix) when that suffix is unambiguous.
+ */
+export declare function resolveToolName(called: string, registered: string[]): string | undefined;
+/** The reason a message stands in for a model call that exceeded its `budget.timeoutMs`, if it does. */
+export declare function budgetExhaustedReason(message: unknown): string | undefined;
+/**
+ * The reason a `before` hook refused the state this message stands in for, if it
+ * did. The refusal is a fail-closed rejection like any other, so `afterModel`
+ * routes it through `on_error` instead of letting the turn settle as completed
+ * (issue #29) — the marker is how it tells the refusal apart from an ordinary
+ * reply, since the model never ran.
+ */
+export declare function beforeVetoReason(message: unknown): string | undefined;
+export declare function createGovernance(ctx: GovernanceContext): Governance;