@archmax-ai/harness 0.0.0

package/dist/workflow/governance.js

@@ -0,0 +1,546 @@
+import { AIMessage, SystemMessage, ToolMessage } from "@langchain/core/messages";
+import { v4 as uuidv4 } from "@langchain/core/utils/uuid";
+import { Command } from "@langchain/langgraph";
+import { ADVANCE_TOOL, entryStateOf, RESET_TOOL, unresolvedArgumentMessage } from "./control-tools.js";
+import { resolveArguments } from "../machine/variables.js";
+import { currentWorkflowState, isReplyOnly, readAuditTrail, readVariables, readWorkflowState, } from "./state.js";
+import { CALLING_STATE_KEY, releaseScopes } from "../sessions/scope.js";
+import { isWorkflowToolName, workflowSlugFromToolName } from "../machine/tool-names.js";
+import { toolOutputPreview } from "../core/tool-telemetry.js";
+import { decide } from "../kernel/kernel.js";
+import { skillPrefixes } from "../core/skills.js";
+import { renderSkillsSection } from "../core/skill-prompt.js";
+import { renderMountsSection } from "../core/mount-prompt.js";
+import { REDACTED_TOOLS, redactDisabledSkills } from "../core/skill-redact.js";
+import { redactHiddenMounts } from "../core/mount-redact.js";
+import { asModelCallResult, asStructuredTools, } from "../core/deepagents.js";
+import { cacheControl, DEFAULT_CACHE_TTL, } from "./prompt-cache.js";
+import { replyOnlyDirective } from "./parks.js";
+import { renderStateGraph } from "./render-prompt.js";
+import { pruneUndisclosedToolSections } from "./prompt-pruning.js";
+import { blockedMessage, createToolService } from "./tool-service.js";
+import { buildRunnableConfig } from "./runtime-config.js";
+export { buildRunnableConfig } from "./runtime-config.js";
+/**
+ * Resolve the name the model called to a registered tool: an exact match, or the
+ * bare action name of a namespaced `<collection>__<action>` id (models routinely
+ * drop the prefix) when that suffix is unambiguous.
+ */
+export function resolveToolName(called, registered) {
+    if (registered.includes(called))
+        return called;
+    const matches = registered.filter((name) => name.endsWith(`__${called}`));
+    return matches.length === 1 ? matches[0] : undefined;
+}
+function unknownToolMessage(called, registered) {
+    const ambiguous = registered.filter((name) => name.endsWith(`__${called}`));
+    const hint = ambiguous.length > 1
+        ? ` Did you mean one of: ${ambiguous.join(", ")}? Call it by its full name.`
+        : "";
+    return (`[workflow] '${called}' is not a tool. Call one of the tools you were given, ` +
+        `by its exact name.${hint}`);
+}
+/**
+ * Whether the run was already sitting in its current state when this turn
+ * opened (the trail's last step is an arrival), as opposed to having
+ * transitioned into it this turn. The terminal directive applies only to the
+ * former; a run routed into a terminal state to do work must not be told to
+ * restart, or it restarts forever.
+ */
+function arrivedInPlace(state) {
+    const trail = readAuditTrail(state);
+    return trail[trail.length - 1]?.kind === "trigger";
+}
+/**
+ * How coarsely the clock is rendered. The line is *quantised*, not merely put in
+ * the volatile block, because "volatile" is not free: the provider's cache key
+ * is a prefix, and LangChain's Anthropic/Bedrock middlewares put their
+ * breakpoint on the last message — so a system block that differs between two
+ * calls costs the cache of the whole transcript behind it, not just its own
+ * bytes. A per-second stamp would therefore re-price every turn at full input
+ * cost on every call.
+ *
+ * Ten minutes is chosen against the cache TTLs (5m default, 1h option): a turn
+ * shorter than the bucket renders one byte-identical line for all its model
+ * calls, and two turns close enough for the previous turn's cache to still be
+ * warm are usually inside one bucket too. What it costs is precision the model
+ * has no use for — a date, a weekday and the time to the ten minutes are what
+ * date arithmetic needs, and a state can always read the exact instant from the
+ * sandbox.
+ */
+const CLOCK_BUCKET_MINUTES = 10;
+/** The host's IANA zone, or `null` when it is UTC or the platform will not say. */
+function hostTimeZone() {
+    try {
+        const zone = Intl.DateTimeFormat().resolvedOptions().timeZone;
+        return zone && zone !== "UTC" && zone !== "Etc/UTC" ? zone : null;
+    }
+    catch {
+        return null;
+    }
+}
+function inZone(at, timeZone, options, 
+// `en-CA` renders a date as `YYYY-MM-DD`, matching the UTC stamp beside it.
+locale = "en-CA") {
+    return new Intl.DateTimeFormat(locale, { timeZone, ...options }).format(at);
+}
+/**
+ * The wall clock, one line, rendered per model call and never in the cacheable
+ * prefix. UTC leads because that is the zone the park and trail records stamp,
+ * so what the model reads and what the session stores agree; the weekday is
+ * spelled out because it is the part a model cannot derive; the host's zone is
+ * named when it differs, because a workflow that reasons about business hours
+ * runs there. Rounding is stated rather than hidden — a clock that may be ten
+ * minutes behind and says so is usable, one that quietly is not.
+ */
+function renderNow(now) {
+    const bucketMs = CLOCK_BUCKET_MINUTES * 60_000;
+    const at = new Date(Math.floor(now.getTime() / bucketMs) * bucketMs);
+    const utc = at.toISOString().slice(0, 16).replace("T", " ");
+    const weekday = inZone(at, "UTC", { weekday: "long" }, "en-GB");
+    const zone = hostTimeZone();
+    let local = "";
+    if (zone) {
+        const day = inZone(at, zone, { year: "numeric", month: "2-digit", day: "2-digit" });
+        const time = inZone(at, zone, { hour: "2-digit", minute: "2-digit", hourCycle: "h23" });
+        // The local date is repeated only when the zone puts it on the other side of midnight.
+        local = ` Locally that is ${day === utc.slice(0, 10) ? time : `${day} ${time}`} in ${zone}.`;
+    }
+    return (`Current date and time: ${utc} UTC (${weekday}), rounded down to the nearest ` +
+        `${CLOCK_BUCKET_MINUTES} minutes — it can be that much behind.${local}`);
+}
+/** The composed static prompt on a request: `systemMessage`, or the deprecated `systemPrompt`. */
+function staticPromptOf(request) {
+    const message = request.systemMessage;
+    if (message) {
+        if (typeof message.text === "string")
+            return message.text;
+        if (typeof message.content === "string")
+            return message.content;
+    }
+    return typeof request.systemPrompt === "string" ? request.systemPrompt : "";
+}
+/**
+ * Rewrite the system message as `[static, volatile]` blocks, marking the static
+ * block cacheable when a marker is supplied. Only `systemMessage` is written:
+ * changing it and `systemPrompt` in one request is rejected by the agent node.
+ */
+function applySystemMessage(request, staticText, volatileText, marker) {
+    if (!volatileText && !marker && staticText === staticPromptOf(request))
+        return;
+    const blocks = [];
+    if (staticText) {
+        blocks.push({ type: "text", text: staticText, ...(marker ? { cache_control: marker } : {}) });
+    }
+    if (volatileText)
+        blocks.push({ type: "text", text: volatileText });
+    if (blocks.length === 0)
+        return;
+    // `cache_control` is a provider extension the core `ContentBlock` union does not model.
+    request.systemMessage = new SystemMessage({
+        content: blocks,
+    });
+}
+/** Where a model call that ran out of its state's time budget says so. */
+const BUDGET_EXHAUSTED_KEY = "archmax_budget_exhausted";
+/** Where a reply standing in for a model call a `before` hook refused says so. */
+const BEFORE_VETO_KEY = "archmax_before_veto";
+/** The reason kwarg `key` carries on `message`, when it carries one. */
+function markerReason(message, key) {
+    const kwargs = message
+        ?.additional_kwargs;
+    const reason = kwargs?.[key];
+    return typeof reason === "string" ? reason : undefined;
+}
+/** The reason a message stands in for a model call that exceeded its `budget.timeoutMs`, if it does. */
+export function budgetExhaustedReason(message) {
+    return markerReason(message, BUDGET_EXHAUSTED_KEY);
+}
+/**
+ * The reason a `before` hook refused the state this message stands in for, if it
+ * did. The refusal is a fail-closed rejection like any other, so `afterModel`
+ * routes it through `on_error` instead of letting the turn settle as completed
+ * (issue #29) — the marker is how it tells the refusal apart from an ordinary
+ * reply, since the model never ran.
+ */
+export function beforeVetoReason(message) {
+    return markerReason(message, BEFORE_VETO_KEY);
+}
+export function createGovernance(ctx) {
+    const { machine, emit, lifecycle, policyRules, mountPrefixes, skills, ptcGateway, subWorkflows } = ctx;
+    const skillTable = skillPrefixes(skills);
+    const skillSlugs = [...skills.keys()];
+    const enabledSkillsIn = (state) => machine.enabledSkills(state, skillSlugs);
+    const enabledMountsIn = (state) => machine.enabledMounts(state, mountPrefixes.governed);
+    /** Whether any mount of the table can be hidden at all — cheap early exit. */
+    const tableGoverns = mountPrefixes.governed.length > 0 || machine.workflowForbiddenMounts().length > 0;
+    const cacheStrategy = ctx.shaping.cacheStrategy ?? "off";
+    const cacheTtl = ctx.shaping.cacheTtl ?? DEFAULT_CACHE_TTL;
+    // Keyed by session id; a sub-run is its own session.
+    const modelContexts = new Map();
+    const pendingBeforeDone = new Map();
+    // Fallback ids for tool calls the model supplied no id for.
+    let generatedCallSeq = 0;
+    const service = createToolService({
+        machine,
+        emit,
+        lifecycle,
+        mountPrefixes,
+        ...(subWorkflows ? { subWorkflows } : {}),
+        lifecycleCtx,
+    });
+    // The static prompt is identical on every call of a run; memoized by incoming
+    // text because a byte difference is a cache miss.
+    const staticPromptCache = new Map();
+    function shapeStaticPrompt(text) {
+        const cached = staticPromptCache.get(text);
+        if (cached !== undefined)
+            return cached;
+        let shaped = text;
+        const withheld = ctx.shaping.withheldBuiltins ?? [];
+        if (withheld.length > 0 && text) {
+            const result = pruneUndisclosedToolSections(text, withheld);
+            shaped = result.text;
+            if (result.missingTools?.length) {
+                emit({
+                    type: "warning",
+                    scope: "workflow",
+                    message: `could not prune the upstream prompt guidance for withheld tool(s) ` +
+                        `(${result.missingTools.join(", ")}); its text is unchanged and still billed ` +
+                        `— the expected section headings may have been reworded upstream`,
+                });
+            }
+        }
+        staticPromptCache.set(text, shaped);
+        return shaped;
+    }
+    /**
+     * Filter a scoped listing (`ls`, `glob`, `grep`) to what the state can reach:
+     * the kernel refuses a path inside a disabled skill bundle or a mount the
+     * state does not have, but a listing names a *scope* the state may reach and
+     * would otherwise hand back everything in it — including a directory the
+     * agent would then be refused, which reads as a broken workspace rather than
+     * as a capability it was not given.
+     *
+     * Skills first, then mounts, then one rebuilt message: the two filters are
+     * independent (a bundle lives inside the `skills/` mount) and both are
+     * identity when they hide nothing.
+     */
+    function redactListings(result, state, toolName) {
+        if (!REDACTED_TOOLS.has(toolName))
+            return result;
+        if (!(result instanceof ToolMessage) || typeof result.content !== "string")
+            return result;
+        let text = result.content;
+        if (skillTable.length > 0) {
+            text = redactDisabledSkills(text, enabledSkillsIn(state), skillTable);
+        }
+        if (tableGoverns) {
+            text = redactHiddenMounts(text, { enabled: enabledMountsIn(state), forbidden: machine.forbiddenMounts(state) }, mountPrefixes);
+        }
+        if (text === result.content)
+            return result;
+        return new ToolMessage({
+            ...(result.status ? { status: result.status } : {}),
+            content: text,
+            tool_call_id: result.tool_call_id,
+            ...(result.id !== undefined ? { id: result.id } : {}),
+            ...(result.name !== undefined ? { name: result.name } : {}),
+            ...(result.artifact !== undefined ? { artifact: result.artifact } : {}),
+            additional_kwargs: result.additional_kwargs,
+            response_metadata: result.response_metadata,
+        });
+    }
+    function lifecycleCtx(sessionId, state, messages) {
+        const context = modelContexts.get(sessionId);
+        const fields = readWorkflowState(state);
+        return {
+            sessionId,
+            tools: context?.tools ?? [],
+            messages,
+            taskTool: context?.taskTool,
+            config: context?.config ?? {},
+            iterations: { ...(fields.iterations ?? {}) },
+            ...(fields.trigger ? { trigger: fields.trigger } : {}),
+            variables: Object.fromEntries(Object.entries(readVariables(state)).map(([name, entry]) => [name, entry.value])),
+            variableStore: readVariables(state),
+        };
+    }
+    /** The volatile prompt section: what the model is told about where the run stands right now. */
+    function volatileSection(request, workflowState, replyOnly) {
+        // First, and outside either heading: the clock is true of the turn, not of
+        // the state the turn is in, so a parked run reads it as well.
+        const clock = renderNow(new Date());
+        if (replyOnly) {
+            return `${clock}\n\n## This run is parked\n\n${replyOnlyDirective(machine, request.state)}`;
+        }
+        const sections = [];
+        if (machine.isTerminal(workflowState) &&
+            workflowState !== entryStateOf(readWorkflowState(request.state), machine) &&
+            arrivedInPlace(request.state)) {
+            // A durable session sits in the terminal state it finished in, so a follow-up
+            // arrives where no transition leads out. Said only where it applies (see
+            // arrivedInPlace); that the state *is* terminal is stated by renderStateGraph
+            // below, so this covers only what is particular to a follow-up landing here.
+            sections.push(`This state is where this run finished. If what is in front of you now is a new message ` +
+                `rather than the work you entered this state to do, that run is over — call ` +
+                `${RESET_TOOL} before answering and before doing any of the work, then go forward ` +
+                `through the graph from the state the conversation began in. Do not answer a follow-up ` +
+                `from here.`);
+        }
+        // A human state's `instructions` address the reviewer, which is why a reply-only turn gets none.
+        const instructions = machine.spec.states[workflowState]?.instructions?.trim();
+        if (instructions)
+            sections.push(instructions);
+        const skillsSection = renderSkillsSection(enabledSkillsIn(workflowState), skills);
+        if (skillsSection)
+            sections.push(skillsSection);
+        // Beside the skills section, and volatile for the same reason: which mounts
+        // a state reaches varies, and the cacheable prefix does not.
+        const mountsSection = renderMountsSection(enabledMountsIn(workflowState), mountPrefixes, (name) => machine.mountWritable(workflowState, name, mountPrefixes));
+        if (mountsSection)
+            sections.push(mountsSection);
+        // Names, never values: one can hold a whole event payload.
+        const variables = readVariables(request.state);
+        const variableNames = Object.keys(variables).sort();
+        sections.push(variableNames.length > 0
+            ? `Run variables set: ${variableNames.join(", ")}. Read one with archmax_get_variables.`
+            : "Run variables: none set.");
+        const argConstraints = machine.describeArgConstraints(workflowState, variables);
+        if (argConstraints.length > 0) {
+            sections.push([
+                "Enforced tool argument constraints in this state (a call with any other value is blocked):",
+                ...argConstraints,
+            ].join("\n"));
+        }
+        // Last, immediately before the model acts: choosing the edge is the decision
+        // the turn ends on. This is the only place the graph is disclosed at all.
+        const graph = renderStateGraph(machine, workflowState, {
+            trigger: readWorkflowState(request.state).trigger?.id,
+        });
+        if (graph)
+            sections.push(graph);
+        // The heading asserts itself over the transcript: a durable session carries
+        // earlier turns' advance results, which a model would otherwise read as current.
+        return `${clock}\n\n## Current state: ${workflowState}\n\nThis is the state you are in now; it overrides any state movement recorded earlier in this conversation.${sections.length > 0 ? `\n\n${sections.join("\n\n")}` : ""}`;
+    }
+    async function wrapModelCall(request, handler) {
+        const sessionId = ctx.sessionIdOf(request.runtime);
+        const tools = asStructuredTools(request.tools);
+        const workflowState = currentWorkflowState(request.state, machine.entry);
+        const config = buildRunnableConfig(request.runtime ?? {});
+        const replyOnly = isReplyOnly(request.state);
+        // Point every wrapped PTC tool at the state, config and variables in force
+        // now; the state rides on the config so a script's delegation names it, and
+        // the variables are what a script call's `${{name}}` guards resolve against.
+        ptcGateway?.refresh(sessionId, {
+            state: workflowState,
+            config: {
+                ...config,
+                configurable: { ...(config.configurable ?? {}), [CALLING_STATE_KEY]: workflowState },
+            },
+            replyOnly,
+            variables: readVariables(request.state),
+        });
+        // Captured from the UNFILTERED surface: lifecycle hooks keep full access
+        // regardless of what the model is shown.
+        const lifecycleTools = lifecycle.resolvePtcTools(tools);
+        modelContexts.set(sessionId, {
+            tools: ptcGateway
+                ? ptcGateway.wrap(lifecycleTools, { origin: "lifecycle", sessionId })
+                : lifecycleTools,
+            taskTool: tools.find((t) => t.name === "task"),
+            config,
+            messages: request.messages ?? [],
+            toolNames: tools.map((t) => t.name),
+        });
+        // Progressive disclosure: the active state's surface in registration order (a
+        // byte-identical cacheable prefix); a reply-only turn is handed nothing.
+        if (replyOnly)
+            request.tools = [];
+        else {
+            const disclosed = machine.disclosedTools(workflowState);
+            request.tools = tools.filter((t) => disclosed.has(t.name));
+        }
+        // The model this state declared, if it declared one. Set here because this
+        // is where the machine's position is known: a session moves inside a turn,
+        // so a state's model cannot be chosen when the graph is built. A reply-only
+        // turn is made in the state the session is parked at, so the handoff message
+        // runs on that state's model too.
+        const stateModel = ctx.stateModels?.modelFor(workflowState);
+        if (stateModel)
+            request.model = stateModel;
+        // The breakpoint belongs to the model that is about to be called, not to the
+        // assembly: a state on Claude behind an OpenAI-compatible endpoint needs it
+        // whatever the workflow's own model is.
+        const strategy = ctx.stateModels?.cacheStrategyFor(workflowState) ?? cacheStrategy;
+        applySystemMessage(request, shapeStaticPrompt(staticPromptOf(request)), volatileSection(request, workflowState, replyOnly), strategy === "anthropic-compat" ? cacheControl(cacheTtl) : undefined);
+        // A reply-only turn enters nothing, so no `before` hook gates it.
+        const beforeDone = {
+            ...(readWorkflowState(request.state).beforeDone ?? {}),
+            ...(pendingBeforeDone.get(sessionId) ?? {}),
+        };
+        if (!replyOnly && !beforeDone[workflowState]) {
+            const veto = await lifecycle.runPhase(workflowState, "before", lifecycleCtx(sessionId, request.state, request.messages ?? []));
+            if (veto) {
+                // The refusal is the person's answer *and* a rejection: the text is the
+                // reply, the marker is what `afterModel` routes on.
+                return new AIMessage({
+                    content: `Request rejected before the '${workflowState}' state could run: ${veto.reason}`,
+                    additional_kwargs: { [BEFORE_VETO_KEY]: veto.reason },
+                });
+            }
+            pendingBeforeDone.set(sessionId, { ...beforeDone, [workflowState]: true });
+        }
+        // Narrowed rather than forwarded blind: this middleware is innermost, so the
+        // agent node blames it for whatever the handler returned.
+        const call = async () => asModelCallResult(await handler(request), `state '${workflowState}'`);
+        // `budget.timeoutMs`: the call races a timer. On expiry an empty marker message
+        // stands in for the answer so `afterModel` can route through `on_error`; the
+        // in-flight request itself is not cancelled (the framework exposes no per-call signal).
+        const timeoutMs = machine.spec.states[workflowState]?.budget?.timeoutMs;
+        if (timeoutMs == null)
+            return call();
+        let timer;
+        const expiry = new Promise((resolve) => {
+            timer = setTimeout(() => resolve(new AIMessage({
+                content: "",
+                id: `budget_${uuidv4()}`,
+                additional_kwargs: {
+                    [BUDGET_EXHAUSTED_KEY]: `state '${workflowState}' exceeded its time budget (timeoutMs: ${timeoutMs})`,
+                },
+            })), timeoutMs);
+        });
+        try {
+            return await Promise.race([call(), expiry]);
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+    async function wrapToolCall(request, handler) {
+        const called = request.toolCall?.name ?? "";
+        const sessionId = ctx.sessionIdOf(request.runtime);
+        const workflowState = currentWorkflowState(request.state, machine.entry);
+        const callId = request.toolCall?.id || `tool-${++generatedCallSeq}`;
+        const toolCallId = request.toolCall?.id ?? "";
+        // A bare action name of a namespaced id resolves to its target; the rest is
+        // refused as unknown, a different mistake from a governance denial. The control
+        // tools never reach the tool node, so they are registered by definition.
+        const registeredNames = modelContexts.get(sessionId)?.toolNames;
+        const resolved = request.tool !== undefined || registeredNames === undefined || called === ADVANCE_TOOL
+            ? called
+            : resolveToolName(called, registeredNames);
+        if (resolved === undefined) {
+            return new ToolMessage({
+                content: unknownToolMessage(called, registeredNames ?? []),
+                tool_call_id: toolCallId,
+                name: called,
+                status: "error",
+            });
+        }
+        const toolName = resolved;
+        if (toolName !== called) {
+            request = { ...request, toolCall: { ...request.toolCall, name: toolName } };
+        }
+        const call = { sessionId, workflowState, toolName, callId, toolCallId };
+        const block = (reason, args) => {
+            emit({ type: "tool-blocked", state: workflowState, tool: toolName, reason, callId, args });
+            return blockedMessage(toolName, toolCallId, reason);
+        };
+        // Variable substitution is the FIRST stage, ahead of the kernel, so a guard and
+        // an argument referencing the same variable agree by construction. Delegation
+        // tools are exempt: their params go through `resolveParams`.
+        const variables = readVariables(request.state);
+        let args = (request.toolCall?.args ?? {});
+        if (!isWorkflowToolName(toolName)) {
+            const substituted = resolveArguments(args, variables);
+            if (!substituted.ok)
+                return block(unresolvedArgumentMessage(substituted), args);
+            args = substituted.args;
+            request = { ...request, toolCall: { ...request.toolCall, args } };
+        }
+        const verdict = decide(machine, {
+            kind: "tool-call",
+            state: workflowState,
+            tool: toolName,
+            args,
+            // A reply-only turn is handed no tools, so a call here was invented from transcript context.
+            ...(isReplyOnly(request.state) ? { replyOnly: true } : {}),
+        }, policyRules, mountPrefixes, variables, skillTable);
+        if (verdict.decision === "block") {
+            const message = verdict.reason ?? "";
+            if (verdict.warn) {
+                emit({ type: "tool-blocked", state: workflowState, tool: toolName, reason: message, callId, args });
+            }
+            const blocked = blockedMessage(toolName, toolCallId, message);
+            // A terminal verdict (an unevaluable guard) cannot be corrected by the agent:
+            // committed as `rejected`, so the run routes through `on_error` rather than looping.
+            if (verdict.terminal)
+                return new Command({ update: { rejected: message, messages: [blocked] } });
+            return blocked;
+        }
+        if (subWorkflows && isWorkflowToolName(toolName)) {
+            return service.serviceDelegation(request, subWorkflows, call, args);
+        }
+        const serviced = await service.serviceControlTool(request, call, args);
+        if (serviced)
+            return serviced;
+        // Governed call telemetry. A rubric dispatch is *not* bracketed here: only
+        // the runtime reaches `task`, through the bridge, which emits its own
+        // `rubric-start`/`rubric-result` pair — an agent-initiated call never gets
+        // this far, because the kernel refuses it.
+        service.emitToolCalled(workflowState, toolName, callId, args);
+        const startedAt = Date.now();
+        const settle = (status, preview) => {
+            const durationMs = Date.now() - startedAt;
+            emit({ type: "tool-result", state: workflowState, tool: toolName, callId, status, durationMs, ...preview });
+        };
+        try {
+            const result = redactListings(await handler(request), workflowState, toolName);
+            const failed = result instanceof ToolMessage && result.status === "error";
+            settle(failed ? "error" : "ok", toolOutputPreview(result));
+            const steps = service.dispatchSteps(sessionId, workflowState);
+            // A delegation the tool body ran itself (no dispatcher wired): recorded from its result.
+            if (steps.length === 0 && isWorkflowToolName(toolName) && result instanceof ToolMessage) {
+                steps.push({
+                    to: workflowState,
+                    kind: "sub-workflow",
+                    workflow: workflowSlugFromToolName(toolName),
+                    status: failed ? "error" : "ok",
+                    ...(failed ? { reason: String(result.content).slice(0, 500) } : {}),
+                    ts: Date.now(),
+                });
+            }
+            return result instanceof ToolMessage ? service.withDispatchSteps(result, steps) : result;
+        }
+        catch (err) {
+            settle("error", toolOutputPreview(err?.message ?? String(err)));
+            throw err;
+        }
+    }
+    return {
+        wrapModelCall,
+        wrapToolCall,
+        lifecycleCtx,
+        reportMove: service.reportMove,
+        endTurn(sessionId) {
+            const staged = pendingBeforeDone.get(sessionId);
+            modelContexts.delete(sessionId);
+            pendingBeforeDone.delete(sessionId);
+            service.releaseSession(sessionId);
+            return staged;
+        },
+        release(sessionId) {
+            const scopes = [
+                ...releaseScopes(modelContexts, sessionId),
+                ...releaseScopes(pendingBeforeDone, sessionId),
+            ];
+            for (const scope of new Set([...scopes, sessionId]))
+                service.releaseSession(scope);
+            return scopes;
+        },
+    };
+}
+//# sourceMappingURL=governance.js.map

package/dist/workflow/governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.js","sourceRoot":"","sources":["../../src/workflow/governance.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAK/C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AACvG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,aAAa,EACb,iBAAiB,GAElB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAuB,MAAM,qBAAqB,CAAC;AAElE,OAAO,EAAE,aAAa,EAAsB,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EACL,iBAAiB,EACjB,iBAAiB,GAMlB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,YAAY,EACZ,iBAAiB,GAIlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAsF1D;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,UAAoB;IAClE,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc,EAAE,UAAoB;IAC9D,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,IAAI,GACR,SAAS,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,CAAC,yBAAyB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B;QAC5E,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,CACL,eAAe,MAAM,yDAAyD;QAC9E,qBAAqB,IAAI,EAAE,CAC5B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,KAA2B;IACjD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,mFAAmF;AACnF,SAAS,YAAY;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;QAC9D,OAAO,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CACb,EAAQ,EACR,QAAgB,EAChB,OAAmC;AACnC,4EAA4E;AAC5E,MAAM,GAAG,OAAO;IAEhB,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,GAAS;IAC1B,MAAM,QAAQ,GAAG,oBAAoB,GAAG,MAAM,CAAC;IAC/C,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,uFAAuF;QACvF,KAAK,GAAG,oBAAoB,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC;IAC/F,CAAC;IACD,OAAO,CACL,0BAA0B,GAAG,SAAS,OAAO,iCAAiC;QAC9E,GAAG,oBAAoB,yCAAyC,KAAK,EAAE,CACxE,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,SAAS,cAAc,CAAC,OAGvB;IACC,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC;QAC1D,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,OAA4D,EAC5D,UAAkB,EAClB,YAAoB,EACpB,MAA2B;IAE3B,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,IAAI,UAAU,KAAK,cAAc,CAAC,OAAgB,CAAC;QAAE,OAAO;IACxF,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,wFAAwF;IACxF,OAAO,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC;QACxC,OAAO,EAAE,MAA6C;KACvD,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAExD,kFAAkF;AAClF,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C,wEAAwE;AACxE,SAAS,YAAY,CAAC,OAAgB,EAAE,GAAW;IACjD,MAAM,MAAM,GAAI,OAAuE;QACrF,EAAE,iBAAiB,CAAC;IACtB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO,YAAY,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAsB;IACrD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC;IACvG,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,eAAe,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACpF,MAAM,eAAe,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChG,8EAA8E;IAC9E,MAAM,YAAY,GAChB,aAAa,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACpF,MAAM,aAAa,GAAwB,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;IAC9E,MAAM,QAAQ,GAAa,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IAErE,qDAAqD;IACrD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAwB,CAAC;IACtD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAmC,CAAC;IACrE,4DAA4D;IAC5D,IAAI,gBAAgB,GAAG,CAAC,CAAC;IAEzB,MAAM,OAAO,GAAG,iBAAiB,CAAC;QAChC,OAAO;QACP,IAAI;QACJ,SAAS;QACT,aAAa;QACb,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,YAAY;KACb,CAAC,CAAC;IAEH,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,SAAS,iBAAiB,CAAC,IAAY;QACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;QACpD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,4BAA4B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC5D,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;YACrB,IAAI,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,UAAU;oBACjB,OAAO,EACL,oEAAoE;wBACpE,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,4CAA4C;wBAC9E,iEAAiE;iBACpE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,SAAS,cAAc,CAAI,MAAS,EAAE,KAAa,EAAE,QAAgB;QACnE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,MAAM,CAAC;QACjD,IAAI,CAAC,CAAC,MAAM,YAAY,WAAW,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC1F,IAAI,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,GAAG,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,GAAG,kBAAkB,CACvB,IAAI,EACJ,EAAE,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,EAC9E,aAAa,CACd,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAC3C,OAAO,IAAI,WAAW,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAM,CAAC;IACV,CAAC;IAED,SAAS,YAAY,CAAC,SAAiB,EAAE,KAAc,EAAE,QAAmB;QAC1E,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO;YACL,SAAS;YACT,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;YAC3B,QAAQ;YACR,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,EAAE;YAC7B,UAAU,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;YAC5C,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,SAAS,EAAE,MAAM,CAAC,WAAW,CAC3B,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CACjF;YACD,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,SAAS,eAAe,CAAC,OAAyB,EAAE,aAAqB,EAAE,SAAkB;QAC3F,2EAA2E;QAC3E,8DAA8D;QAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACpC,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,GAAG,KAAK,gCAAgC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9F,CAAC;QACD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IACE,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC;YACjC,aAAa,KAAK,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;YACzE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAC7B,CAAC;YACD,8EAA8E;YAC9E,yEAAyE;YACzE,8EAA8E;YAC9E,6EAA6E;YAC7E,QAAQ,CAAC,IAAI,CACX,yFAAyF;gBACvF,6EAA6E;gBAC7E,GAAG,UAAU,sEAAsE;gBACnF,wFAAwF;gBACxF,YAAY,CACf,CAAC;QACJ,CAAC;QACD,iGAAiG;QACjG,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC9E,IAAI,YAAY;YAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,mBAAmB,CAAC,eAAe,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QAClF,IAAI,aAAa;YAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChD,4EAA4E;QAC5E,6DAA6D;QAC7D,MAAM,aAAa,GAAG,mBAAmB,CACvC,eAAe,CAAC,aAAa,CAAC,EAC9B,aAAa,EACb,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,aAAa,CAAC,CACpE,CAAC;QACF,IAAI,aAAa;YAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChD,2DAA2D;QAC3D,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,CAAC,sBAAsB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC;YACxF,CAAC,CAAC,0BAA0B,CAC/B,CAAC;QACF,MAAM,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAChF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CACX;gBACE,4FAA4F;gBAC5F,GAAG,cAAc;aAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QACD,6EAA6E;QAC7E,0EAA0E;QAC1E,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE;YACrD,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;SACtD,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,4EAA4E;QAC5E,iFAAiF;QACjF,OAAO,GAAG,KAAK,yBAAyB,aAAa,+GACnD,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EACzD,EAAE,CAAC;IACL,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,OAAyB,EAAE,OAAyB;QAC/E,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,KAAK,GAAqB,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAE7C,2EAA2E;QAC3E,4EAA4E;QAC5E,6EAA6E;QAC7E,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE;YAC7B,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE;gBACN,GAAG,MAAM;gBACT,YAAY,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,aAAa,EAAE;aACrF;YACD,SAAS;YACT,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC;SACxC,CAAC,CAAC;QAEH,yEAAyE;QACzE,yCAAyC;QACzC,MAAM,cAAc,GAAG,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACxD,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE;YAC3B,KAAK,EAAE,UAAU;gBACf,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;gBACrE,CAAC,CAAC,cAAc;YAClB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;YAC9C,MAAM;YACN,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAChC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACpC,CAAC,CAAC;QAEH,8EAA8E;QAC9E,yEAAyE;QACzE,IAAI,SAAS;YAAE,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC;aAC7B,CAAC;YACJ,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YACxD,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,CAAC;QAED,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,6EAA6E;QAC7E,kCAAkC;QAClC,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC5D,IAAI,UAAU;YAAE,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC;QAE3C,6EAA6E;QAC7E,4EAA4E;QAC5E,wCAAwC;QACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC;QAEnF,kBAAkB,CAChB,OAAO,EACP,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,EAC1C,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,EAClD,QAAQ,KAAK,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CACrE,CAAC;QAEF,kEAAkE;QAClE,MAAM,UAAU,GAAG;YACjB,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;YACtD,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;SAC5C,CAAC;QACF,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CACnC,aAAa,EACb,QAAQ,EACR,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAC/D,CAAC;YACF,IAAI,IAAI,EAAE,CAAC;gBACT,wEAAwE;gBACxE,oDAAoD;gBACpD,OAAO,IAAI,SAAS,CAAC;oBACnB,OAAO,EAAE,gCAAgC,aAAa,sBAAsB,IAAI,CAAC,MAAM,EAAE;oBACzF,iBAAiB,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE;iBACtD,CAAC,CAAC;YACL,CAAC;YACD,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,UAAU,EAAE,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,6EAA6E;QAC7E,0DAA0D;QAC1D,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,iBAAiB,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,aAAa,GAAG,CAAC,CAAC;QAC/F,gFAAgF;QAChF,6EAA6E;QAC7E,wFAAwF;QACxF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC;QACxE,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,EAAE,CAAC;QACrC,IAAI,KAAgD,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;YAChD,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CACH,OAAO,CACL,IAAI,SAAS,CAAC;gBACZ,OAAO,EAAE,EAAE;gBACX,EAAE,EAAE,UAAU,MAAM,EAAE,EAAE;gBACxB,iBAAiB,EAAE;oBACjB,CAAC,oBAAoB,CAAC,EAAE,UAAU,aAAa,0CAA0C,SAAS,GAAG;iBACtG;aACF,CAAC,CACH,EACH,SAAS,CACV,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,KAAK,UAAU,YAAY,CACzB,OAAgC,EAChC,OAAgC;QAEhC,MAAM,MAAM,GAAW,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,MAAM,GAAW,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,QAAQ,EAAE,gBAAgB,EAAE,CAAC;QAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;QAE9C,4EAA4E;QAC5E,gFAAgF;QAChF,yEAAyE;QACzE,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;QAChE,MAAM,QAAQ,GACZ,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY;YACpF,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,IAAI,WAAW,CAAC;gBACrB,OAAO,EAAE,kBAAkB,CAAC,MAAM,EAAE,eAAe,IAAI,EAAE,CAAC;gBAC1D,YAAY,EAAE,UAAU;gBACxB,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC;QAC1B,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,IAA6B,EAAE,EAAE;YAC9D,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3F,OAAO,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC,CAAC;QAEF,gFAAgF;QAChF,8EAA8E;QAC9E,6DAA6D;QAC7D,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAA4B,CAAC;QACrE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACtD,IAAI,CAAC,WAAW,CAAC,EAAE;gBAAE,OAAO,KAAK,CAAC,yBAAyB,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;YAChF,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;YACxB,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;QACpE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CACpB,OAAO,EACP;YACE,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,6FAA6F;YAC7F,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,EACD,WAAW,EACX,aAAa,EACb,SAAS,EACT,UAAU,CACX,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACtG,CAAC;YACD,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAC9D,8EAA8E;YAC9E,qFAAqF;YACrF,IAAI,OAAO,CAAC,QAAQ;gBAAE,OAAO,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YACjG,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,YAAY,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,OAAO,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,2EAA2E;QAC3E,sEAAsE;QACtE,2EAA2E;QAC3E,2CAA2C;QAC3C,OAAO,CAAC,cAAc,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,MAAsB,EAAE,OAA+C,EAAE,EAAE;YACzF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC9G,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,MAAM,YAAY,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC;YAC1E,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAC9D,yFAAyF;YACzF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,MAAM,YAAY,WAAW,EAAE,CAAC;gBACxF,KAAK,CAAC,IAAI,CAAC;oBACT,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,cAAc;oBACpB,QAAQ,EAAE,wBAAwB,CAAC,QAAQ,CAAE;oBAC7C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;oBAC/B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;iBACf,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,YAAY,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAE,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3E,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa;QACb,YAAY;QACZ,YAAY;QACZ,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,OAAO,CAAC,SAAS;YACf,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChD,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,CAAC,SAAS;YACf,MAAM,MAAM,GAAG;gBACb,GAAG,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC;gBAC1C,GAAG,aAAa,CAAC,iBAAiB,EAAE,SAAS,CAAC;aAC/C,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,SAAS,CAAC,CAAC;gBAAE,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACnF,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}