@canhta/dsh-autopilot 0.1.0-alpha.1

package/lib/providers/webhook-notification/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/providers/webhook-notification/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAOhE,MAAM,CAAC,MAAM,iCAAiC,GAAmC,CAAC,CAAC,MAAM,CAAC;IACxF,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACzB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KACnD,CAAC,CACH;SACA,OAAO,CAAC,EAAE,CAAC;IACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CAC7D,CAAC,CAAA;AAEF,MAAM,UAAU,uBAAuB,CAAC,MAAmC;IACzE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAA;IAClG,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAA;IAC5G,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC9C,yBAAyB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QACzC,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;QAC1F,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QACvB,sBAAsB,CAAC,WAAW,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAA;QAClE,IAAI,WAAW,CAAC,0BAA0B,KAAK,EAAE;YAAE,aAAa,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAA;IAC1G,CAAC;AACH,CAAC"}

package/lib/publication/git.d.ts

@@ -0,0 +1,7 @@
+import type { SubprocessRuntime } from '@deepseek-ai/dsh-subprocess';
+import type { TerminalRun } from '../admission.js';
+import type { CodeHostPublication } from '../code-host.js';
+/** Reconstruct and verify the bounded publication artifact from the exact durable local Git identities. */
+export declare function preparePublication(subprocess: SubprocessRuntime, run: TerminalRun, signal?: AbortSignal): Promise<CodeHostPublication>;
+/** Reconstruct the immutable durable publication identity for read-only remote reconciliation during cleanup. */
+export declare function preparePublicationReconciliation(subprocess: SubprocessRuntime, run: TerminalRun, signal?: AbortSignal): Promise<CodeHostPublication>;

package/lib/publication/git.js

@@ -0,0 +1,154 @@
+import { lstat, readFile, realpath } from 'node:fs/promises';
+import { dirname, relative, resolve } from 'node:path';
+import { gitCommand } from '../dispatch/git.js';
+const MAX_FILES = 100;
+const MAX_TREE_ENTRIES = 10_000;
+const MAX_FILE_BYTES = 512 * 1024;
+const MAX_TOTAL_BYTES = 2 * 1024 * 1024;
+/** Reconstruct and verify the bounded publication artifact from the exact durable local Git identities. */
+export async function preparePublication(subprocess, run, signal) {
+    if ((run.state !== 'publishing' && run.state !== 'completed') ||
+        run.outcome.kind !== 'verified' ||
+        run.publication === undefined) {
+        throw new Error('run is not a verified publication candidate');
+    }
+    const intent = run.publication;
+    const worktree = await realpath(run.execution.worktreePath);
+    signal?.throwIfAborted();
+    const root = await realpath((await gitCommand(subprocess, worktree, ['rev-parse', '--show-toplevel'], signal)).trim());
+    if (root !== worktree)
+        throw new Error('publication path is not the recorded Git worktree root');
+    const branch = (await gitCommand(subprocess, worktree, ['rev-parse', '--abbrev-ref', 'HEAD'], signal)).trim();
+    if (branch !== intent.headBranch)
+        throw new Error('publication worktree branch changed after verification');
+    const head = (await gitCommand(subprocess, worktree, ['rev-parse', 'HEAD'], signal)).trim();
+    const baseHead = (await gitCommand(subprocess, worktree, ['rev-parse', intent.baseBranch], signal)).trim();
+    const status = await gitCommand(subprocess, worktree, ['status', '--porcelain'], signal);
+    if (head !== intent.localHead || head !== run.outcome.reportedGit.head || status !== run.outcome.reportedGit.status) {
+        throw new Error('publication Git facts no longer match the verified outcome');
+    }
+    if (status !== '')
+        throw new Error('publication requires a clean worktree');
+    if (baseHead !== intent.baseHead)
+        throw new Error('publication base changed after verification');
+    if (head === baseHead)
+        throw new Error('publication requires at least one committed change');
+    await gitCommand(subprocess, worktree, ['merge-base', '--is-ancestor', baseHead, head], signal);
+    const commitCount = Number((await gitCommand(subprocess, worktree, ['rev-list', '--count', `${baseHead}..${head}`], signal)).trim());
+    if (!Number.isSafeInteger(commitCount) || commitCount < 1 || commitCount > 100) {
+        throw new Error('publication commit range exceeds its safety bound');
+    }
+    if (run.outcome.verification.length === 0 ||
+        run.outcome.verification.some((check) => check.status === 'failed' || (check.status === 'skipped' && check.reason === undefined))) {
+        throw new Error('publication verification results are incomplete or failed');
+    }
+    const changed = parseChangedFiles(await gitCommand(subprocess, worktree, ['diff', '--name-status', '--no-renames', '-z', `${baseHead}..${head}`, '--'], signal));
+    if (changed.length === 0 || changed.length > MAX_FILES)
+        throw new Error('publication file set is empty or too large');
+    if (changed.some((entry) => entry.status !== 'A' && entry.status !== 'M')) {
+        throw new Error('GitHub MCP publication does not support deleted or renamed paths');
+    }
+    if (!run.execution.codeHost.allowWorkflowChanges && changed.some((entry) => isWorkflow(entry.path))) {
+        throw new Error('publication contains a workflow-file change forbidden by deployment policy');
+    }
+    let totalBytes = 0;
+    const decoder = new TextDecoder('utf-8', { fatal: true });
+    const files = [];
+    for (const entry of changed) {
+        signal?.throwIfAborted();
+        const absolute = resolve(worktree, entry.path);
+        if (relative(worktree, absolute).startsWith('..') || dirname(absolute) === absolute) {
+            throw new Error('publication contains an unsafe Git path');
+        }
+        const metadata = await lstat(absolute);
+        if (!metadata.isFile() || metadata.size > MAX_FILE_BYTES) {
+            throw new Error('GitHub MCP publication supports only bounded regular files');
+        }
+        const bytes = await readFile(absolute);
+        totalBytes += bytes.byteLength;
+        if (totalBytes > MAX_TOTAL_BYTES)
+            throw new Error('publication file content exceeds its safety bound');
+        let content;
+        try {
+            content = decoder.decode(bytes);
+        }
+        catch {
+            throw new Error('GitHub MCP publication supports only UTF-8 file content');
+        }
+        files.push({ path: entry.path, content });
+    }
+    const tree = parseTree(await gitCommand(subprocess, worktree, ['ls-tree', '-r', '-z', head], signal));
+    return {
+        bindingId: intent.bindingId,
+        repositoryId: intent.repositoryId,
+        repository: intent.repository,
+        baseBranch: intent.baseBranch,
+        headBranch: intent.headBranch,
+        baseHead: intent.baseHead,
+        localHead: intent.localHead,
+        tree,
+        files,
+        title: intent.title,
+        body: intent.body,
+        marker: intent.marker,
+    };
+}
+/** Reconstruct the immutable durable publication identity for read-only remote reconciliation during cleanup. */
+export async function preparePublicationReconciliation(subprocess, run, signal) {
+    if ((run.state !== 'publishing' && run.state !== 'completed') ||
+        run.outcome.kind !== 'verified' ||
+        run.publication === undefined) {
+        throw new Error('run has no verified publication identity');
+    }
+    const intent = run.publication;
+    const tree = parseTree(await gitCommand(subprocess, run.execution.worktreePath, ['ls-tree', '-r', '-z', intent.localHead], signal));
+    return {
+        bindingId: intent.bindingId,
+        repositoryId: intent.repositoryId,
+        repository: intent.repository,
+        baseBranch: intent.baseBranch,
+        headBranch: intent.headBranch,
+        baseHead: intent.baseHead,
+        localHead: intent.localHead,
+        tree,
+        files: [],
+        title: intent.title,
+        body: intent.body,
+        marker: intent.marker,
+    };
+}
+function parseChangedFiles(value) {
+    const parts = value.split('\0');
+    if (parts.at(-1) === '')
+        parts.pop();
+    if (parts.length % 2 !== 0)
+        throw new Error('Git returned a malformed changed-file list');
+    const result = [];
+    for (let index = 0; index < parts.length; index += 2) {
+        const status = parts[index];
+        const path = parts[index + 1];
+        if (status === undefined || path === undefined || !/^[A-Z]$/.test(status) || path.length === 0) {
+            throw new Error('Git returned a malformed changed-file entry');
+        }
+        result.push({ status, path });
+    }
+    return result;
+}
+function parseTree(value) {
+    const records = value.split('\0');
+    if (records.at(-1) === '')
+        records.pop();
+    if (records.length > MAX_TREE_ENTRIES)
+        throw new Error('publication tree exceeds its safety bound');
+    return records.map((record) => {
+        const match = /^(100644|100755) blob ([a-f0-9]{40})\t(.+)$/.exec(record);
+        if (match?.[1] === undefined || match[2] === undefined || match[3] === undefined) {
+            throw new Error('GitHub MCP publication supports only regular SHA-1 blob entries');
+        }
+        return { mode: match[1], type: 'blob', sha: match[2], path: match[3] };
+    });
+}
+function isWorkflow(path) {
+    return path.startsWith('.github/workflows/') && (path.endsWith('.yml') || path.endsWith('.yaml'));
+}
+//# sourceMappingURL=git.js.map

package/lib/publication/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/publication/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAItD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAE/C,MAAM,SAAS,GAAG,GAAG,CAAA;AACrB,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAC/B,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAA;AACjC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAEvC,2GAA2G;AAC3G,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAA6B,EAC7B,GAAgB,EAChB,MAAoB;IAEpB,IACE,CAAC,GAAG,CAAC,KAAK,KAAK,YAAY,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC;QACzD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;QAC/B,GAAG,CAAC,WAAW,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAA;IAC9B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IAC3D,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACtH,IAAI,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAChG,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7G,IAAI,MAAM,KAAK,MAAM,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3G,MAAM,IAAI,GAAG,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC3F,MAAM,QAAQ,GAAG,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1G,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAA;IACxF,IAAI,IAAI,KAAK,MAAM,CAAC,SAAS,IAAI,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC/E,CAAC;IACD,IAAI,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC3E,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAChG,IAAI,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IAC5F,MAAM,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;IAC/F,MAAM,WAAW,GAAG,MAAM,CACxB,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,QAAQ,KAAK,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CACzG,CAAA;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IACD,IACE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QACrC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CACnG,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAC/B,MAAM,UAAU,CACd,UAAU,EACV,QAAQ,EACR,CAAC,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,QAAQ,KAAK,IAAI,EAAE,EAAE,IAAI,CAAC,EAC7E,MAAM,CACP,CACF,CAAA;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IACrH,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAA;IAC/F,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,MAAM,KAAK,GAAG,EAAE,CAAA;IAChB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC5D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAA;QACtC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACtC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAA;QAC9B,IAAI,UAAU,GAAG,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QACtG,IAAI,OAAe,CAAA;QACnB,IAAI,CAAC;YACH,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;QAC5E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3C,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IACrG,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI;QACJ,KAAK;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAA;AACH,CAAC;AAED,iHAAiH;AACjH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,UAA6B,EAC7B,GAAgB,EAChB,MAAoB;IAEpB,IACE,CAAC,GAAG,CAAC,KAAK,KAAK,YAAY,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC;QACzD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;QAC/B,GAAG,CAAC,WAAW,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAA;IAC9B,MAAM,IAAI,GAAG,SAAS,CACpB,MAAM,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAC5G,CAAA;IACD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI;QACJ,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,CAAA;IACpC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IACzF,MAAM,MAAM,GAAG,EAAE,CAAA;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;QAChE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,CAAC,GAAG,EAAE,CAAA;IACxC,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IACnG,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACxE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;QACpF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAwB,EAAE,IAAI,EAAE,MAAe,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IACxG,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;AACnG,CAAC"}

package/lib/publication/index.d.ts

@@ -0,0 +1 @@
+export { default, Publication } from './service.js';

package/lib/publication/index.js

@@ -0,0 +1,2 @@
+export { default, Publication } from './service.js';
+//# sourceMappingURL=index.js.map

package/lib/publication/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/publication/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA"}

package/lib/publication/service.d.ts

@@ -0,0 +1,27 @@
+import { type Context, Service } from '@deepseek-ai/cordis';
+import type { RunId, TerminalRun } from '../admission.js';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        publication: Publication;
+    }
+}
+/** Sole Host owner of recoverable branch and ready-for-review pull-request publication. */
+export declare class Publication extends Service {
+    static readonly inject: string[];
+    private readonly active;
+    private readonly controller;
+    private accepting;
+    private generation;
+    constructor(ctx: Context);
+    [Service.init](): AsyncGenerator<() => Promise<void>, void, void>;
+    /**
+     * Claim and reconcile one persisted verified intent, revalidate local Git, and create at most one deterministic branch
+     * and ready PR. Ambiguous writes remain `publishing/uncertain`; bounded definite failures end the run as `failed`.
+     */
+    publish(runId: RunId, callerSignal?: AbortSignal): Promise<TerminalRun>;
+    private publishOwned;
+    private reconcileAndPublish;
+    private assertAccepting;
+    private assertGeneration;
+}
+export default Publication;

package/lib/publication/service.js

@@ -0,0 +1,166 @@
+import { Service } from '@deepseek-ai/cordis';
+import { CodeHostProviderError } from '../code-host.js';
+import { preparePublication } from './git.js';
+/** Sole Host owner of recoverable branch and ready-for-review pull-request publication. */
+export class Publication extends Service {
+    static inject = ['admission', 'codeHost', 'subprocess'];
+    active = new Map();
+    controller = new AbortController();
+    accepting = false;
+    generation = 0;
+    constructor(ctx) {
+        super(ctx, 'publication');
+    }
+    async *[Service.init]() {
+        this.accepting = true;
+        this.generation += 1;
+        yield async () => {
+            this.accepting = false;
+            this.generation += 1;
+            this.controller.abort(new Error('publication owner was disposed'));
+            await Promise.allSettled(this.active.values());
+        };
+    }
+    /**
+     * Claim and reconcile one persisted verified intent, revalidate local Git, and create at most one deterministic branch
+     * and ready PR. Ambiguous writes remain `publishing/uncertain`; bounded definite failures end the run as `failed`.
+     */
+    publish(runId, callerSignal) {
+        this.assertAccepting();
+        const current = this.active.get(runId);
+        if (current !== undefined)
+            return current;
+        const generation = this.generation;
+        const signal = callerSignal === undefined ? this.controller.signal : AbortSignal.any([this.controller.signal, callerSignal]);
+        const operation = this.publishOwned(runId, generation, signal).finally(() => this.active.delete(runId));
+        this.active.set(runId, operation);
+        return operation;
+    }
+    async publishOwned(runId, generation, signal) {
+        const { run, owner } = await this.ctx.admission.claimPublication(runId);
+        try {
+            this.assertGeneration(generation, signal);
+            const publication = await preparePublication(this.ctx.subprocess, run, signal);
+            this.assertGeneration(generation, signal);
+            return await this.ctx.codeHost.withProvider(run.publication?.providerId ?? publicationProviderMissing(), (provider) => this.reconcileAndPublish(runId, owner, provider, publication, generation, signal));
+        }
+        catch (error) {
+            const failure = classifyFailure(error, signal.aborted || generation !== this.generation);
+            try {
+                return await this.ctx.admission.failPublication(runId, owner, error, failure.status, failure.retryAfterMs);
+            }
+            catch (commitError) {
+                throw new AggregateError([error, commitError], 'publication failed and its durable outcome could not be recorded');
+            }
+        }
+    }
+    async reconcileAndPublish(runId, owner, provider, publication, generation, signal) {
+        let observed = await provider.reconcile(publication, signal);
+        this.assertGeneration(generation, signal);
+        assertBaseAndConflict(publication.baseHead, observed);
+        if (observed.pullRequest.kind === 'matching') {
+            assertReadyReceipt(observed.pullRequest.receipt, publication, observed);
+            this.assertGeneration(generation, signal);
+            await this.ctx.admission.recordPublicationBranch(runId, owner, observed.pullRequest.receipt.remoteHead);
+            return await this.ctx.admission.completePublication(runId, owner, observed.pullRequest.receipt);
+        }
+        if (observed.branch.kind === 'missing') {
+            this.ctx.admission.assertPublicationOwner(runId, owner);
+            this.assertGeneration(generation, signal);
+            await provider.createBranch(publication, signal);
+            this.assertGeneration(generation, signal);
+            observed = await provider.reconcile(publication, signal);
+            this.assertGeneration(generation, signal);
+            assertBaseAndConflict(publication.baseHead, observed);
+        }
+        if (observed.branch.kind === 'base') {
+            this.ctx.admission.assertPublicationOwner(runId, owner);
+            this.assertGeneration(generation, signal);
+            await provider.publishChanges(publication, signal);
+            this.assertGeneration(generation, signal);
+            observed = await provider.reconcile(publication, signal);
+            this.assertGeneration(generation, signal);
+            assertBaseAndConflict(publication.baseHead, observed);
+        }
+        if (observed.branch.kind !== 'published') {
+            throw new CodeHostProviderError('conflict', 'code-host branch did not reconcile to the verified tree');
+        }
+        this.assertGeneration(generation, signal);
+        await this.ctx.admission.recordPublicationBranch(runId, owner, observed.branch.remoteHead);
+        if (observed.pullRequest.kind === 'missing') {
+            this.ctx.admission.assertPublicationOwner(runId, owner);
+            this.assertGeneration(generation, signal);
+            const receipt = await provider.createPullRequest(publication, signal);
+            try {
+                this.assertGeneration(generation, signal);
+                assertReadyReceipt(receipt, publication, observed);
+                observed = await provider.reconcile(publication, signal);
+                this.assertGeneration(generation, signal);
+                assertBaseAndConflict(publication.baseHead, observed);
+                if (observed.pullRequest.kind !== 'matching') {
+                    throw new CodeHostProviderError('conflict', 'code-host pull request could not be reconciled by deterministic identity');
+                }
+                assertReadyReceipt(observed.pullRequest.receipt, publication, observed);
+                this.assertGeneration(generation, signal);
+                return await this.ctx.admission.completePublication(runId, owner, observed.pullRequest.receipt);
+            }
+            catch {
+                throw new CodeHostProviderError('ambiguous-acknowledgement', 'pull-request creation succeeded but its durable identity could not be confirmed');
+            }
+        }
+        if (observed.pullRequest.kind !== 'matching') {
+            throw new CodeHostProviderError('conflict', 'code-host pull request could not be reconciled by deterministic identity');
+        }
+        assertReadyReceipt(observed.pullRequest.receipt, publication, observed);
+        this.assertGeneration(generation, signal);
+        return await this.ctx.admission.completePublication(runId, owner, observed.pullRequest.receipt);
+    }
+    assertAccepting() {
+        if (!this.accepting)
+            throw new Error('publication is unavailable while its required services are changing');
+    }
+    assertGeneration(generation, signal) {
+        signal.throwIfAborted();
+        if (!this.accepting || generation !== this.generation)
+            throw new Error('publication owner generation was retired');
+    }
+}
+function assertBaseAndConflict(expectedBase, observed) {
+    if (observed.baseHead !== expectedBase)
+        throw new CodeHostProviderError('conflict', 'remote base changed after verification');
+    if (observed.branch.kind === 'conflict')
+        throw new CodeHostProviderError('conflict', 'deterministic branch is unrelated');
+    if (observed.pullRequest.kind === 'conflict') {
+        throw new CodeHostProviderError('conflict', 'deterministic pull-request identity is unrelated or closed');
+    }
+}
+function assertReadyReceipt(receipt, publication, observed) {
+    const remoteHead = observed.branch.kind === 'missing' ? undefined : observed.branch.remoteHead;
+    if (receipt.state !== 'open' ||
+        receipt.baseBranch !== publication.baseBranch ||
+        receipt.headBranch !== publication.headBranch ||
+        remoteHead === undefined ||
+        receipt.remoteHead !== remoteHead) {
+        throw new CodeHostProviderError('conflict', 'pull request is not a ready open handoff for the published branch');
+    }
+}
+function classifyFailure(error, ownerRetired) {
+    if (ownerRetired)
+        return { status: 'uncertain' };
+    if (error instanceof CodeHostProviderError) {
+        if (['ambiguous-acknowledgement', 'timeout'].includes(error.code))
+            return { status: 'uncertain' };
+        if (['rate-limit', 'transient', 'provider-unavailable'].includes(error.code)) {
+            return {
+                status: 'retryable-failure',
+                ...(error.retryAfterMs === undefined ? {} : { retryAfterMs: error.retryAfterMs }),
+            };
+        }
+    }
+    return { status: 'failed' };
+}
+function publicationProviderMissing() {
+    throw new Error('publication intent has no provider identity');
+}
+export default Publication;
+//# sourceMappingURL=service.js.map

package/lib/publication/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/publication/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAE3D,OAAO,EAAE,qBAAqB,EAAmD,MAAM,iBAAiB,CAAA;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAQ7C,2FAA2F;AAC3F,MAAM,OAAO,WAAY,SAAQ,OAAO;IACtC,MAAM,CAAU,MAAM,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;IAC/C,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAA;IAC/C,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IAC3C,SAAS,GAAG,KAAK,CAAA;IACjB,UAAU,GAAG,CAAC,CAAA;IAEtB,YAAY,GAAY;QACtB,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAA;QACpB,MAAM,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,SAAS,GAAG,KAAK,CAAA;YACtB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAA;YACpB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA;YAClE,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QAChD,CAAC,CAAA;IACH,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAY,EAAE,YAA0B;QAC9C,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACtC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAA;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QAClC,MAAM,MAAM,GACV,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;QAC/G,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACvG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;QACjC,OAAO,SAAS,CAAA;IAClB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAY,EAAE,UAAkB,EAAE,MAAmB;QAC9E,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzC,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;YAC9E,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzC,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CACzC,GAAG,CAAC,WAAW,EAAE,UAAU,IAAI,0BAA0B,EAAE,EAC3D,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAChG,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,CAAA;YACxF,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;YAC5G,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,WAAW,CAAC,EACpB,kEAAkE,CACnE,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,KAAY,EACZ,KAAa,EACb,QAA2B,EAC3B,WAA2D,EAC3D,UAAkB,EAClB,MAAmB;QAEnB,IAAI,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC5D,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QACzC,qBAAqB,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACrD,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7C,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;YACvE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YACvG,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;QACjG,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACvD,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzC,MAAM,QAAQ,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YAChD,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzC,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YACxD,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzC,qBAAqB,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACvD,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzC,MAAM,QAAQ,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YAClD,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzC,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YACxD,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzC,qBAAqB,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACzC,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,yDAAyD,CAAC,CAAA;QACxG,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QACzC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAE1F,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACvD,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YACrE,IAAI,CAAC;gBACH,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;gBACzC,kBAAkB,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;gBAClD,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;gBACxD,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;gBACzC,qBAAqB,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBACrD,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC7C,MAAM,IAAI,qBAAqB,CAC7B,UAAU,EACV,0EAA0E,CAC3E,CAAA;gBACH,CAAC;gBACD,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;gBACvE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;gBACzC,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;YACjG,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,qBAAqB,CAC7B,2BAA2B,EAC3B,iFAAiF,CAClF,CAAA;YACH,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7C,MAAM,IAAI,qBAAqB,CAC7B,UAAU,EACV,0EAA0E,CAC3E,CAAA;QACH,CAAC;QACD,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;QACvE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QACzC,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;IACjG,CAAC;IAEO,eAAe;QACrB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;IAC7G,CAAC;IAEO,gBAAgB,CAAC,UAAkB,EAAE,MAAmB;QAC9D,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IACpH,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,YAAoB,EACpB,QAA6D;IAE7D,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY;QACpC,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,wCAAwC,CAAC,CAAA;IACvF,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;QACrC,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAA;IAClF,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,4DAA4D,CAAC,CAAA;IAC3G,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA2B,EAC3B,WAA2D,EAC3D,QAA6D;IAE7D,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAA;IAC9F,IACE,OAAO,CAAC,KAAK,KAAK,MAAM;QACxB,OAAO,CAAC,UAAU,KAAK,WAAW,CAAC,UAAU;QAC7C,OAAO,CAAC,UAAU,KAAK,WAAW,CAAC,UAAU;QAC7C,UAAU,KAAK,SAAS;QACxB,OAAO,CAAC,UAAU,KAAK,UAAU,EACjC,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,mEAAmE,CAAC,CAAA;IAClH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,YAAqB;IAErB,IAAI,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;IAChD,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAC3C,IAAI,CAAC,2BAA2B,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;QACjG,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,OAAO;gBACL,MAAM,EAAE,mBAAmB;gBAC3B,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;aAClF,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAC7B,CAAC;AAED,SAAS,0BAA0B;IACjC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;AAChE,CAAC;AAED,eAAe,WAAW,CAAA"}

package/lib/publication.d.ts

@@ -0,0 +1,2 @@
+export * from './publication/index.js';
+export { default } from './publication/index.js';

package/lib/publication.js

@@ -0,0 +1,3 @@
+export * from './publication/index.js';
+export { default } from './publication/index.js';
+//# sourceMappingURL=publication.js.map

package/lib/publication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication.js","sourceRoot":"","sources":["../src/publication.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA"}

package/lib/reconciliation/index.d.ts

@@ -0,0 +1,3 @@
+export * from './ingress.js';
+export * from './service.js';
+export { default } from './service.js';

package/lib/reconciliation/index.js

@@ -0,0 +1,4 @@
+export * from './ingress.js';
+export * from './service.js';
+export { default } from './service.js';
+//# sourceMappingURL=index.js.map

package/lib/reconciliation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/reconciliation/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA"}

package/lib/reconciliation/ingress.d.ts

@@ -0,0 +1,21 @@
+import { type Context, Service } from '@deepseek-ai/cordis';
+/** Exact Host route that accepts provider-authenticated tracker deliveries. */
+export declare const TRACKER_INGRESS_PATH = "/dsh-autopilot/tracker";
+/**
+ * Own the bounded Host HTTP adapter for provider-authenticated durable reconciliation.
+ *
+ * Mounting registers one exact route. Disposal first unregisters it, then aborts partial body reads and drains every
+ * active handler, so a retired route cannot call a replacement reconciliation owner. Responses expose only bounded
+ * status text; provider, admission, and reconciliation details remain in sanitized operator diagnostics.
+ */
+export declare class Ingress extends Service {
+    static readonly inject: string[];
+    private readonly controller;
+    private readonly activeHandlers;
+    private stopping;
+    constructor(ctx: Context);
+    [Service.init](): AsyncGenerator<() => Promise<void>, void, void>;
+    private dispatch;
+    private handle;
+}
+export default Ingress;

package/lib/reconciliation/ingress.js

@@ -0,0 +1,168 @@
+import { Service } from '@deepseek-ai/cordis';
+import { AdmissionIngressError } from '../admission.js';
+import { TrackerProviderError } from '../tracker.js';
+import { ReconciliationError } from './service.js';
+/** Exact Host route that accepts provider-authenticated tracker deliveries. */
+export const TRACKER_INGRESS_PATH = '/dsh-autopilot/tracker';
+const MAX_INGRESS_BODY_BYTES = 256 * 1024;
+const MAX_CONCURRENT_INGRESS_HANDLERS = 32;
+class PayloadTooLargeError extends Error {
+}
+/**
+ * Own the bounded Host HTTP adapter for provider-authenticated durable reconciliation.
+ *
+ * Mounting registers one exact route. Disposal first unregisters it, then aborts partial body reads and drains every
+ * active handler, so a retired route cannot call a replacement reconciliation owner. Responses expose only bounded
+ * status text; provider, admission, and reconciliation details remain in sanitized operator diagnostics.
+ */
+export class Ingress extends Service {
+    static inject = ['autopilotReconciliation', 'webServer'];
+    controller = new AbortController();
+    activeHandlers = new Set();
+    stopping = false;
+    constructor(ctx) {
+        super(ctx, 'autopilotIngress');
+    }
+    async *[Service.init]() {
+        const unregister = this.ctx.webServer.register({
+            kind: 'exact',
+            path: TRACKER_INGRESS_PATH,
+            handler: (request, response) => this.dispatch(request, response),
+        });
+        yield async () => {
+            this.stopping = true;
+            unregister();
+            this.controller.abort(new Error('tracker ingress route was disposed'));
+            await Promise.allSettled(this.activeHandlers);
+        };
+    }
+    dispatch(request, response) {
+        if (this.stopping) {
+            writeResponse(response, 503);
+            return Promise.resolve();
+        }
+        if (this.activeHandlers.size >= MAX_CONCURRENT_INGRESS_HANDLERS) {
+            writeResponse(response, 429, 1);
+            return Promise.resolve();
+        }
+        let active;
+        active = this.handle(request, response).finally(() => {
+            this.activeHandlers.delete(active);
+        });
+        this.activeHandlers.add(active);
+        return active;
+    }
+    async handle(request, response) {
+        try {
+            const body = await readBoundedBody(request, this.controller.signal);
+            await this.ctx.autopilotReconciliation.acceptIngress({
+                method: request.method ?? '',
+                headers: rawHeaders(request),
+                body,
+            }, this.controller.signal);
+            writeResponse(response, 204);
+        }
+        catch (error) {
+            if (response.destroyed || response.writableEnded)
+                return;
+            const { status, retryAfterSeconds } = httpFailure(error);
+            writeResponse(response, status, retryAfterSeconds);
+        }
+    }
+}
+async function readBoundedBody(request, signal) {
+    signal.throwIfAborted();
+    const declared = request.headers['content-length'];
+    if (declared !== undefined) {
+        const length = Number(declared);
+        if (!Number.isSafeInteger(length) || length < 0)
+            throw new TrackerProviderError('invalid-response', 'invalid body');
+        if (length > MAX_INGRESS_BODY_BYTES)
+            throw new PayloadTooLargeError();
+    }
+    const chunks = [];
+    let total = 0;
+    const abort = () => {
+        request.destroy(signal.reason instanceof Error ? signal.reason : new Error('tracker ingress body read was aborted'));
+    };
+    signal.addEventListener('abort', abort, { once: true });
+    try {
+        for await (const chunk of request) {
+            signal.throwIfAborted();
+            const bytes = typeof chunk === 'string' ? new TextEncoder().encode(chunk) : new Uint8Array(chunk);
+            total += bytes.byteLength;
+            if (total > MAX_INGRESS_BODY_BYTES)
+                throw new PayloadTooLargeError();
+            chunks.push(bytes);
+        }
+        signal.throwIfAborted();
+    }
+    finally {
+        signal.removeEventListener('abort', abort);
+    }
+    const body = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        body.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return body;
+}
+function rawHeaders(request) {
+    const headers = [];
+    for (let index = 0; index < request.rawHeaders.length; index += 2) {
+        const name = request.rawHeaders[index];
+        const value = request.rawHeaders[index + 1];
+        if (name !== undefined && value !== undefined)
+            headers.push({ name: name.toLowerCase(), value });
+    }
+    return headers;
+}
+function httpFailure(error) {
+    if (error instanceof PayloadTooLargeError)
+        return { status: 413 };
+    if (error instanceof AdmissionIngressError) {
+        return error.code === 'queue-capacity' ? { status: 429, retryAfterSeconds: 1 } : { status: 503 };
+    }
+    if (error instanceof ReconciliationError) {
+        return error.code === 'overloaded' ? { status: 429, retryAfterSeconds: 1 } : { status: 503 };
+    }
+    if (!(error instanceof TrackerProviderError))
+        return { status: 503 };
+    switch (error.code) {
+        case 'authentication':
+            return { status: 401 };
+        case 'permission':
+            return { status: 403 };
+        case 'invalid-response':
+            return { status: 400 };
+        case 'conflict':
+        case 'ambiguous-acknowledgement':
+            return { status: 409 };
+        case 'rate-limit':
+            return {
+                status: 429,
+                ...(error.retryAfterMs === undefined ? {} : { retryAfterSeconds: Math.ceil(error.retryAfterMs / 1000) }),
+            };
+        case 'timeout':
+            return { status: 504 };
+        case 'invalid-configuration':
+        case 'not-found':
+        case 'transient':
+        case 'unsupported-capability':
+        case 'provider-unavailable':
+            return { status: 503 };
+    }
+}
+function writeResponse(response, status, retryAfterSeconds) {
+    if (response.destroyed || response.writableEnded)
+        return;
+    response.writeHead(status, {
+        'cache-control': 'no-store',
+        ...(status === 204 ? {} : { 'content-type': 'text/plain; charset=utf-8' }),
+        ...(retryAfterSeconds === undefined ? {} : { 'retry-after': String(retryAfterSeconds) }),
+    });
+    response.end(status === 204 ? undefined : status === 401 ? 'unauthorized' : 'webhook rejected');
+}
+export default Ingress;
+//# sourceMappingURL=ingress.js.map

package/lib/reconciliation/ingress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingress.js","sourceRoot":"","sources":["../../src/reconciliation/ingress.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAE3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAA6B,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAA;AAC5D,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,CAAA;AACzC,MAAM,+BAA+B,GAAG,EAAE,CAAA;AAE1C,MAAM,oBAAqB,SAAQ,KAAK;CAAG;AAE3C;;;;;;GAMG;AACH,MAAM,OAAO,OAAQ,SAAQ,OAAO;IAClC,MAAM,CAAU,MAAM,GAAG,CAAC,yBAAyB,EAAE,WAAW,CAAC,CAAA;IAEhD,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IAClC,cAAc,GAAG,IAAI,GAAG,EAAiB,CAAA;IAClD,QAAQ,GAAG,KAAK,CAAA;IAExB,YAAY,GAAY;QACtB,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC7C,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;SACjE,CAAC,CAAA;QACF,MAAM,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;YACpB,UAAU,EAAE,CAAA;YACZ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAA;YACtE,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC/C,CAAC,CAAA;IACH,CAAC;IAEO,QAAQ,CAAC,OAAwB,EAAE,QAAwB;QACjE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;YAC5B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,+BAA+B,EAAE,CAAC;YAChE,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;YAC/B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;QACD,IAAI,MAAqB,CAAA;QACzB,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACnD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC/B,OAAO,MAAM,CAAA;IACf,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,OAAwB,EAAE,QAAwB;QACrE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACnE,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,aAAa,CAClD;gBACE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;gBAC5B,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC;gBAC5B,IAAI;aACL,EACD,IAAI,CAAC,UAAU,CAAC,MAAM,CACvB,CAAA;YACD,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa;gBAAE,OAAM;YACxD,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;YACxD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAA;QACpD,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,eAAe,CAAC,OAAwB,EAAE,MAAmB;IAC1E,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;QACnH,IAAI,MAAM,GAAG,sBAAsB;YAAE,MAAM,IAAI,oBAAoB,EAAE,CAAA;IACvE,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAA;IACtH,CAAC,CAAA;IACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAClC,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;YACjG,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;YACzB,IAAI,KAAK,GAAG,sBAAsB;gBAAE,MAAM,IAAI,oBAAoB,EAAE,CAAA;YACpE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAA;IACzB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACvB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;IAC5B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,UAAU,CAAC,OAAwB;IAC1C,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAClG,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,oBAAoB;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IACjE,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAClG,CAAC;IACD,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,YAAY,oBAAoB,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IACpE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACxB,KAAK,YAAY;YACf,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACxB,KAAK,kBAAkB;YACrB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACxB,KAAK,UAAU,CAAC;QAChB,KAAK,2BAA2B;YAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACxB,KAAK,YAAY;YACf,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC;aACzG,CAAA;QACH,KAAK,SAAS;YACZ,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACxB,KAAK,uBAAuB,CAAC;QAC7B,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,wBAAwB,CAAC;QAC9B,KAAK,sBAAsB;YACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAwB,EAAE,MAAc,EAAE,iBAA0B;IACzF,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa;QAAE,OAAM;IACxD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,eAAe,EAAE,UAAU;QAC3B,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC;QAC1E,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;KACzF,CAAC,CAAA;IACF,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAA;AACjG,CAAC;AAED,eAAe,OAAO,CAAA"}