@cleocode/core 2026.3.66 → 2026.3.67

package/dist/agents/retry.js

@@ -0,0 +1,229 @@
+/**
+ * Self-healing and retry logic for the Agent dimension.
+ *
+ * Provides configurable retry policies with exponential backoff + jitter,
+ * and recovery mechanisms for crashed agents. Error classification
+ * determines whether a retry is appropriate.
+ *
+ * @module agents/retry
+ */
+import { checkAgentHealth, classifyError, listAgentInstances, updateAgentStatus, } from './registry.js';
+/** Default retry policy matching the BRAIN specification. */
+export const DEFAULT_RETRY_POLICY = Object.freeze({
+    maxRetries: 3,
+    baseDelayMs: 1_000,
+    maxDelayMs: 30_000,
+    backoffMultiplier: 2,
+    jitter: true,
+    retryOnUnknown: true,
+});
+/**
+ * Create a retry policy by merging overrides with the default policy.
+ *
+ * @remarks
+ * Unspecified fields fall back to {@link DEFAULT_RETRY_POLICY}.
+ *
+ * @param overrides - Partial policy to merge with defaults
+ * @returns A complete RetryPolicy
+ *
+ * @example
+ * ```ts
+ * const policy = createRetryPolicy({ maxRetries: 5 });
+ * ```
+ */
+export function createRetryPolicy(overrides) {
+    return { ...DEFAULT_RETRY_POLICY, ...overrides };
+}
+/**
+ * Calculate the delay for a given retry attempt using exponential backoff.
+ *
+ * @remarks
+ * Formula: `min(baseDelay * multiplier^attempt, maxDelay) + jitter`.
+ * Jitter adds 0-25% randomness to prevent thundering herd.
+ *
+ * @param attempt - Zero-based attempt index
+ * @param policy - Retry policy with delay configuration
+ * @returns Delay in milliseconds before the next attempt
+ *
+ * @example
+ * ```ts
+ * const delay = calculateDelay(1, createRetryPolicy());
+ * // => ~2000ms (with jitter)
+ * ```
+ */
+export function calculateDelay(attempt, policy) {
+    const exponentialDelay = policy.baseDelayMs * policy.backoffMultiplier ** attempt;
+    const clampedDelay = Math.min(exponentialDelay, policy.maxDelayMs);
+    if (!policy.jitter)
+        return clampedDelay;
+    // Add 0-25% jitter
+    const jitterRange = clampedDelay * 0.25;
+    const jitterValue = Math.random() * jitterRange;
+    return Math.floor(clampedDelay + jitterValue);
+}
+/**
+ * Determine whether an error should be retried based on its classification
+ * and the retry policy.
+ *
+ * @remarks
+ * Permanent errors are never retried. Retriable errors are always retried
+ * (within attempt limits). Unknown errors defer to `policy.retryOnUnknown`.
+ *
+ * @param error - The caught error to classify
+ * @param attempt - Current attempt number (0-based)
+ * @param policy - Retry policy with limits and classification rules
+ * @returns True if the error should be retried
+ *
+ * @example
+ * ```ts
+ * if (shouldRetry(err, attempt, policy)) { /* retry *\/ }
+ * ```
+ */
+export function shouldRetry(error, attempt, policy) {
+    if (attempt >= policy.maxRetries)
+        return false;
+    const classification = classifyError(error);
+    if (classification === 'permanent')
+        return false;
+    if (classification === 'retriable')
+        return true;
+    // 'unknown' classification -- policy determines behavior
+    return policy.retryOnUnknown;
+}
+/**
+ * Wrap an async function with retry logic using configurable exponential backoff.
+ *
+ * @remarks
+ * Agent-specific variant that integrates with error classification from the
+ * agent registry. For a dependency-free generic retry, use `lib/retry.ts`.
+ *
+ * @typeParam T - The resolved type of the async function
+ * @param fn - The async function to execute with retries
+ * @param policy - Retry policy (uses DEFAULT_RETRY_POLICY if not provided)
+ * @returns The result of the operation with retry metadata
+ *
+ * @example
+ * ```ts
+ * const result = await withRetry(() => fetchAgentTask(agentId));
+ * if (!result.success) console.error(result.error);
+ * ```
+ */
+export async function withRetry(fn, policy) {
+    const effectivePolicy = createRetryPolicy(policy);
+    let lastError;
+    let totalDelayMs = 0;
+    for (let attempt = 0; attempt <= effectivePolicy.maxRetries; attempt++) {
+        try {
+            const value = await fn();
+            return {
+                success: true,
+                value,
+                attempts: attempt + 1,
+                totalDelayMs,
+            };
+        }
+        catch (err) {
+            lastError = err instanceof Error ? err : new Error(String(err));
+            if (!shouldRetry(err, attempt, effectivePolicy)) {
+                return {
+                    success: false,
+                    error: lastError,
+                    attempts: attempt + 1,
+                    totalDelayMs,
+                };
+            }
+            // Calculate and apply delay before next attempt
+            if (attempt < effectivePolicy.maxRetries) {
+                const delay = calculateDelay(attempt, effectivePolicy);
+                totalDelayMs += delay;
+                await sleep(delay);
+            }
+        }
+    }
+    return {
+        success: false,
+        error: lastError ?? new Error('Retry exhausted without error'),
+        attempts: effectivePolicy.maxRetries + 1,
+        totalDelayMs,
+    };
+}
+/**
+ * Attempt to recover crashed agents.
+ *
+ * Finds all agents with status 'crashed' and determines if they can be
+ * restarted based on their error history. Agents whose last error was
+ * classified as 'permanent' are abandoned. Agents with retriable errors
+ * are reset to 'starting' for the orchestration layer to re-assign.
+ *
+ * @remarks
+ * Two-phase process: first detects stale agents via heartbeat threshold,
+ * then evaluates each crashed agent's error history for recoverability.
+ *
+ * @param thresholdMs - Heartbeat threshold for crash detection (default: 30000)
+ * @param cwd - Working directory
+ * @returns Recovery results for each crashed agent
+ *
+ * @example
+ * ```ts
+ * const results = await recoverCrashedAgents(60_000);
+ * results.filter(r => r.recovered).forEach(r => console.log(r.agentId));
+ * ```
+ */
+export async function recoverCrashedAgents(thresholdMs = 30_000, cwd) {
+    const results = [];
+    // Step 1: detect stale agents and mark them crashed
+    const staleAgents = await checkAgentHealth(thresholdMs, cwd);
+    for (const agent of staleAgents) {
+        await updateAgentStatus(agent.id, { status: 'crashed', error: 'Heartbeat timeout detected during recovery sweep' }, cwd);
+    }
+    // Step 2: process all crashed agents
+    const crashedAgents = await listAgentInstances({ status: 'crashed' }, cwd);
+    for (const agent of crashedAgents) {
+        // Check error history to determine recovery action
+        const { getAgentErrorHistory } = await import('./registry.js');
+        const errors = await getAgentErrorHistory(agent.id, cwd);
+        const lastError = errors.length > 0 ? errors[errors.length - 1] : null;
+        // Too many errors -- abandon
+        if (agent.errorCount >= 5) {
+            await updateAgentStatus(agent.id, { status: 'stopped' }, cwd);
+            results.push({
+                agentId: agent.id,
+                recovered: false,
+                action: 'abandoned',
+                reason: `Error count (${agent.errorCount}) exceeds threshold (5)`,
+            });
+            continue;
+        }
+        // Last error was permanent -- abandon
+        if (lastError?.errorType === 'permanent') {
+            await updateAgentStatus(agent.id, { status: 'stopped' }, cwd);
+            results.push({
+                agentId: agent.id,
+                recovered: false,
+                action: 'abandoned',
+                reason: `Permanent error: ${lastError.message}`,
+            });
+            continue;
+        }
+        // Retriable or unknown -- attempt restart by resetting to 'starting'
+        await updateAgentStatus(agent.id, { status: 'starting' }, cwd);
+        results.push({
+            agentId: agent.id,
+            recovered: true,
+            action: 'restarted',
+            reason: 'Agent reset to starting for re-assignment',
+        });
+    }
+    return results;
+}
+// ============================================================================
+// Utilities
+// ============================================================================
+/**
+ * Sleep for a given number of milliseconds.
+ * Extracted for testability.
+ */
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=retry.js.map

package/dist/agents/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/agents/retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAsBvB,6DAA6D;AAC7D,MAAM,CAAC,MAAM,oBAAoB,GAA0B,MAAM,CAAC,MAAM,CAAC;IACvE,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,KAAK;IAClB,UAAU,EAAE,MAAM;IAClB,iBAAiB,EAAE,CAAC;IACpB,MAAM,EAAE,IAAI;IACZ,cAAc,EAAE,IAAI;CACrB,CAAC,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAgC;IAChE,OAAO,EAAE,GAAG,oBAAoB,EAAE,GAAG,SAAS,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,MAAmB;IACjE,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,iBAAiB,IAAI,OAAO,CAAC;IAClF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAEnE,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,YAAY,CAAC;IAExC,mBAAmB;IACnB,MAAM,WAAW,GAAG,YAAY,GAAG,IAAI,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,WAAW,CAAC;IAChD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,WAAW,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,OAAe,EAAE,MAAmB;IAC9E,IAAI,OAAO,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAE/C,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAE5C,IAAI,cAAc,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,cAAc,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAEhD,yDAAyD;IACzD,OAAO,MAAM,CAAC,cAAc,CAAC;AAC/B,CAAC;AAeD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAoB,EACpB,MAA6B;IAE7B,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,SAA4B,CAAC;IACjC,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,eAAe,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,EAAE,EAAE,CAAC;YACzB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK;gBACL,QAAQ,EAAE,OAAO,GAAG,CAAC;gBACrB,YAAY;aACb,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAEhE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC;gBAChD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,SAAS;oBAChB,QAAQ,EAAE,OAAO,GAAG,CAAC;oBACrB,YAAY;iBACb,CAAC;YACJ,CAAC;YAED,gDAAgD;YAChD,IAAI,OAAO,GAAG,eAAe,CAAC,UAAU,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;gBACvD,YAAY,IAAI,KAAK,CAAC;gBACtB,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,SAAS,IAAI,IAAI,KAAK,CAAC,+BAA+B,CAAC;QAC9D,QAAQ,EAAE,eAAe,CAAC,UAAU,GAAG,CAAC;QACxC,YAAY;KACb,CAAC;AACJ,CAAC;AAcD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,cAAsB,MAAM,EAC5B,GAAY;IAEZ,MAAM,OAAO,GAA0B,EAAE,CAAC;IAE1C,oDAAoD;IACpD,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,iBAAiB,CACrB,KAAK,CAAC,EAAE,EACR,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,kDAAkD,EAAE,EAChF,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IAE3E,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,mDAAmD;QACnD,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEvE,6BAA6B;QAC7B,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,gBAAgB,KAAK,CAAC,UAAU,yBAAyB;aAClE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,sCAAsC;QACtC,IAAI,SAAS,EAAE,SAAS,KAAK,WAAW,EAAE,CAAC;YACzC,MAAM,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,oBAAoB,SAAS,CAAC,OAAO,EAAE;aAChD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,qEAAqE;QACrE,MAAM,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC;YACX,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,2CAA2C;SACpD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/audit-prune.js

@@ -0,0 +1,94 @@
+/**
+ * Audit log pruning with optional archive-before-delete.
+ *
+ * Prunes audit_log rows older than a configurable retention period.
+ * When archiveBeforePrune is enabled, exports prunable rows to
+ * a gzip-compressed JSONL file before deletion.
+ *
+ * Never throws — logs warnings on failure. Safe for fire-and-forget
+ * startup wiring.
+ *
+ * @task T5339
+ */
+import { createWriteStream, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { Readable } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { createGzip } from 'node:zlib';
+import { getLogger } from './logger.js';
+const log = getLogger('prune');
+/**
+ * Prune old audit_log rows from tasks.db.
+ *
+ * 1. If auditRetentionDays is 0 or undefined, skip age-based pruning.
+ * 2. Compute cutoff timestamp from auditRetentionDays.
+ * 3. If archiveBeforePrune, select rows older than cutoff and write to
+ *    .cleo/backups/logs/audit-YYYY-MM-DD.jsonl.gz.
+ * 4. Delete rows older than cutoff from audit_log.
+ *
+ * Idempotent — safe to call multiple times.
+ * Never throws — returns zero counts on any error.
+ *
+ * @param cleoDir  - Absolute path to .cleo directory
+ * @param config   - LoggingConfig with auditRetentionDays and archiveBeforePrune
+ */
+export async function pruneAuditLog(cleoDir, config) {
+    try {
+        if (!config.auditRetentionDays || config.auditRetentionDays <= 0) {
+            log.debug('auditRetentionDays is 0 or unset; skipping audit prune');
+            return { rowsArchived: 0, rowsDeleted: 0 };
+        }
+        const cutoff = new Date(Date.now() - config.auditRetentionDays * 86_400_000).toISOString();
+        // Derive projectRoot from cleoDir (cleoDir = /path/to/project/.cleo)
+        const projectRoot = join(cleoDir, '..');
+        const { getDb } = await import('./store/sqlite.js');
+        const { auditLog } = await import('./store/tasks-schema.js');
+        const { lt } = await import('drizzle-orm');
+        const db = await getDb(projectRoot);
+        // Select rows to prune
+        const oldRows = await db.select().from(auditLog).where(lt(auditLog.timestamp, cutoff));
+        if (oldRows.length === 0) {
+            log.debug('No audit_log rows older than cutoff; nothing to prune');
+            return { rowsArchived: 0, rowsDeleted: 0 };
+        }
+        let archivePath;
+        let rowsArchived = 0;
+        // Archive before pruning (if enabled)
+        if (config.archiveBeforePrune) {
+            try {
+                const archiveDir = join(cleoDir, 'backups', 'logs');
+                mkdirSync(archiveDir, { recursive: true });
+                const dateStamp = new Date().toISOString().slice(0, 10);
+                archivePath = join(archiveDir, `audit-${dateStamp}.jsonl.gz`);
+                // Build JSONL content: one JSON object per line
+                const lines = oldRows.map((row) => JSON.stringify(row));
+                const jsonlContent = lines.join('\n') + '\n';
+                // Gzip compress and write via streaming pipeline
+                const gzip = createGzip();
+                const outStream = createWriteStream(archivePath);
+                const inStream = Readable.from([jsonlContent]);
+                await pipeline(inStream, gzip, outStream);
+                rowsArchived = oldRows.length;
+                log.info({ archivePath, rowsArchived }, `Archived ${rowsArchived} audit rows to ${archivePath}`);
+            }
+            catch (archiveErr) {
+                // Archive failure must NOT prevent pruning — log and continue
+                log.warn({ err: archiveErr }, 'Failed to archive audit rows; continuing with deletion');
+                archivePath = undefined;
+            }
+        }
+        // Delete prunable rows
+        await db.delete(auditLog).where(lt(auditLog.timestamp, cutoff)).run();
+        log.info({ rowsDeleted: oldRows.length, cutoff }, `Pruned ${oldRows.length} audit_log rows older than ${cutoff}`);
+        return {
+            rowsArchived,
+            rowsDeleted: oldRows.length,
+            archivePath,
+        };
+    }
+    catch (err) {
+        log.warn({ err }, 'audit log pruning failed');
+        return { rowsArchived: 0, rowsDeleted: 0 };
+    }
+}
+//# sourceMappingURL=audit-prune.js.map

package/dist/audit-prune.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-prune.js","sourceRoot":"","sources":["../src/audit-prune.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;AAQ/B;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,MAAqB;IACxE,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,IAAI,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;YACpE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,kBAAkB,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QAE3F,qEAAqE;QACrE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAExC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACpD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC7D,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAE3C,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;QAEpC,uBAAuB;QACvB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAEvF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACnE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QAC7C,CAAC;QAED,IAAI,WAA+B,CAAC;QACpC,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,sCAAsC;QACtC,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBACpD,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAE3C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxD,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,SAAS,WAAW,CAAC,CAAC;gBAE9D,gDAAgD;gBAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBAE7C,iDAAiD;gBACjD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;gBACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;gBAE/C,MAAM,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;gBAE1C,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC9B,GAAG,CAAC,IAAI,CACN,EAAE,WAAW,EAAE,YAAY,EAAE,EAC7B,YAAY,YAAY,kBAAkB,WAAW,EAAE,CACxD,CAAC;YACJ,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,8DAA8D;gBAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,wDAAwD,CAAC,CAAC;gBACxF,WAAW,GAAG,SAAS,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAEtE,GAAG,CAAC,IAAI,CACN,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,EACvC,UAAU,OAAO,CAAC,MAAM,8BAA8B,MAAM,EAAE,CAC/D,CAAC;QAEF,OAAO;YACL,YAAY;YACZ,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,WAAW;SACZ,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAC9C,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/audit.js

@@ -0,0 +1,68 @@
+/**
+ * Core audit types and query functions.
+ *
+ * AuditEntry interface and queryAudit function moved here from
+ * src/dispatch/middleware/audit.ts so core modules (session-grade.ts)
+ * can use them without importing from the dispatch layer.
+ *
+ * @task T5715
+ * @epic T5701
+ */
+import { getLogger } from './logger.js';
+const log = getLogger('audit');
+/**
+ * Query audit entries from SQLite audit_log table.
+ * Used by session-grade.ts for behavioral analysis.
+ *
+ * Returns entries ordered chronologically (ASC) to preserve
+ * behavioral sequence for grading analysis.
+ */
+export async function queryAudit(options) {
+    try {
+        const { getDb } = await import('./store/sqlite.js');
+        const { auditLog } = await import('./store/tasks-schema.js');
+        const { and, eq, gte, or } = await import('drizzle-orm');
+        const db = await getDb(process.cwd());
+        const conditions = [];
+        if (options?.sessionId)
+            conditions.push(eq(auditLog.sessionId, options.sessionId));
+        if (options?.domain)
+            conditions.push(eq(auditLog.domain, options.domain));
+        if (options?.operation)
+            conditions.push(or(eq(auditLog.operation, options.operation), eq(auditLog.action, options.operation)));
+        if (options?.taskId)
+            conditions.push(eq(auditLog.taskId, options.taskId));
+        if (options?.since)
+            conditions.push(gte(auditLog.timestamp, options.since));
+        const limit = options?.limit ?? 1000;
+        const rows = await db
+            .select()
+            .from(auditLog)
+            .where(conditions.length > 0 ? and(...conditions) : undefined)
+            .orderBy(auditLog.timestamp)
+            .limit(limit);
+        return rows.map((row) => ({
+            timestamp: row.timestamp,
+            sessionId: row.sessionId,
+            domain: row.domain ?? 'unknown',
+            operation: row.operation ?? row.action,
+            params: row.detailsJson ? JSON.parse(row.detailsJson) : {},
+            result: {
+                success: row.success === 1,
+                exitCode: row.success === 1 ? 0 : 1,
+                duration: row.durationMs ?? 0,
+            },
+            metadata: {
+                taskId: row.taskId !== 'system' && row.taskId !== 'unknown' ? row.taskId : undefined,
+                source: row.source ?? 'mcp',
+                gateway: row.gateway,
+            },
+            error: row.errorMessage ?? undefined,
+        }));
+    }
+    catch (err) {
+        log.warn({ err }, 'Failed to query audit entries from SQLite');
+        return [];
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;AA0B/B;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAOhC;IACC,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACpD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAEzD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAEtC,MAAM,UAAU,GAAG,EAAE,CAAC;QACtB,IAAI,OAAO,EAAE,SAAS;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACnF,IAAI,OAAO,EAAE,MAAM;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,IAAI,OAAO,EAAE,SAAS;YACpB,UAAU,CAAC,IAAI,CACb,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAE,CACvF,CAAC;QACJ,IAAI,OAAO,EAAE,MAAM;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,IAAI,OAAO,EAAE,KAAK;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAE5E,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC;QAErC,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;aAC7D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;aAC3B,KAAK,CAAC,KAAK,CAAC,CAAC;QAEhB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;YAC/B,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM;YACtC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;YAC1D,MAAM,EAAE;gBACN,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;gBAC1B,QAAQ,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnC,QAAQ,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;aAC9B;YACD,QAAQ,EAAE;gBACR,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACpF,MAAM,EAAG,GAAG,CAAC,MAAwB,IAAI,KAAK;gBAC9C,OAAO,EAAE,GAAG,CAAC,OAAyC;aACvD;YACD,KAAK,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;SACrC,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,2CAA2C,CAAC,CAAC;QAC/D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/backfill/index.js

@@ -0,0 +1,229 @@
+/**
+ * Backfill module: retroactively add AC and verification metadata to
+ * existing tasks that were created before T058 (AC enforcement) and
+ * T061 (verification gate auto-init).
+ *
+ * Usage:
+ *   backfillTasks(root, { dryRun: true })   -- preview only
+ *   backfillTasks(root, {})                  -- apply changes
+ *   backfillTasks(root, { rollback: true })  -- revert backfill
+ *
+ * @packageDocumentation
+ * @epic T056
+ * @task T066
+ */
+import { getAccessor } from '../store/data-accessor.js';
+import { buildDefaultVerification } from '../tasks/add.js';
+// ---------------------------------------------------------------------------
+// AC generation (heuristic — no LLM)
+// ---------------------------------------------------------------------------
+/**
+ * Generate 3 baseline acceptance criteria from a task description.
+ * Uses simple text analysis — no LLM required.
+ *
+ * @remarks
+ * Extracts action verbs from the title + description to produce contextually
+ * relevant criteria. Falls back to generic criteria when no verbs match.
+ *
+ * @param title - The task title
+ * @param description - The task description
+ * @returns Array of 3 acceptance criteria strings
+ *
+ * @example
+ * ```ts
+ * generateAcFromDescription('Fix login bug', 'Users cannot log in');
+ * // => ['The defect is resolved...', 'No breaking changes...', 'Changes verified...']
+ * ```
+ */
+export function generateAcFromDescription(title, description) {
+    const text = `${title} ${description}`.toLowerCase();
+    // Extract action verbs from the task description to build specific criteria
+    const actionPatterns = [
+        {
+            pattern: /\b(implement|create|build|add|write)\b/,
+            criterion: 'Implementation is complete and matches the described requirements',
+        },
+        {
+            pattern: /\b(test|spec|verify|check|validate)\b/,
+            criterion: 'All tests pass and edge cases are covered',
+        },
+        {
+            pattern: /\b(fix|repair|resolve|patch|correct)\b/,
+            criterion: 'The defect is resolved and does not regress',
+        },
+        {
+            pattern: /\b(refactor|clean|reorganize|restructure)\b/,
+            criterion: 'Refactoring does not change observable behaviour',
+        },
+        {
+            pattern: /\b(document|doc|spec|describe)\b/,
+            criterion: 'Documentation is accurate and complete',
+        },
+        {
+            pattern: /\b(migrate|move|transfer|convert)\b/,
+            criterion: 'Migration is complete and data integrity is preserved',
+        },
+        {
+            pattern: /\b(update|upgrade|bump|change)\b/,
+            criterion: 'Update is applied correctly with no breaking changes',
+        },
+        {
+            pattern: /\b(delete|remove|drop|clean)\b/,
+            criterion: 'Removal is complete and no orphaned references remain',
+        },
+    ];
+    const specific = [];
+    for (const { pattern, criterion } of actionPatterns) {
+        if (pattern.test(text) && !specific.includes(criterion)) {
+            specific.push(criterion);
+            if (specific.length >= 1)
+                break; // use the first match for a specific criterion
+        }
+    }
+    // Always include two generic safety criteria
+    const generic = [
+        'Implementation matches the task description with no unintended side effects',
+        'No breaking changes introduced to dependent code or workflows',
+        'Changes verified manually or via automated tests',
+    ];
+    // Merge: one specific (if found) + two generic, total 3
+    if (specific.length > 0) {
+        return [specific[0], generic[1], generic[2]];
+    }
+    return generic;
+}
+// ---------------------------------------------------------------------------
+// Rollback marker detection
+// ---------------------------------------------------------------------------
+const BACKFILL_NOTE_MARKER = '[T066-backfill]';
+function isBackfilledNote(note) {
+    return note.includes(BACKFILL_NOTE_MARKER);
+}
+function isBackfilledTask(task) {
+    return (task.notes ?? []).some(isBackfilledNote);
+}
+// ---------------------------------------------------------------------------
+// Core backfill logic
+// ---------------------------------------------------------------------------
+/**
+ * Retroactively populate AC and verification metadata for tasks that lack them.
+ *
+ * @remarks
+ * In dry-run mode, computes changes without writing to the database.
+ * Backfilled tasks are tagged with a note so they can be identified and
+ * optionally rolled back later.
+ *
+ * @param projectRoot - Project root directory (cwd for CLEO operations)
+ * @param options     - Backfill options (dryRun, rollback, taskIds)
+ * @returns Summary of changes applied (or previewed in dry-run mode)
+ *
+ * @example
+ * ```ts
+ * const result = await backfillTasks('/my/project', { dryRun: true });
+ * console.log(result.changed); // number of tasks that would be modified
+ * ```
+ */
+export async function backfillTasks(projectRoot, options = {}) {
+    const { dryRun = false, rollback = false, taskIds } = options;
+    const now = new Date().toISOString();
+    const accessor = await getAccessor(projectRoot);
+    const { tasks } = await accessor.queryTasks({});
+    // Filter to requested task IDs (if supplied)
+    const candidates = taskIds ? tasks.filter((t) => taskIds.includes(t.id)) : tasks;
+    const changes = [];
+    let acAdded = 0;
+    let verificationAdded = 0;
+    for (const task of candidates) {
+        if (rollback) {
+            // --- Rollback mode: undo what backfill added ---
+            if (!isBackfilledTask(task))
+                continue;
+            const rolledBack = [];
+            const updates = { updatedAt: now };
+            // Remove backfill notes
+            const cleanedNotes = (task.notes ?? []).filter((n) => !isBackfilledNote(n));
+            if (cleanedNotes.length !== (task.notes ?? []).length) {
+                updates.notesJson = JSON.stringify(cleanedNotes);
+                rolledBack.push('note');
+            }
+            // If task has the backfill-generated AC marker in notes, we can infer the
+            // AC was auto-generated. We clear it back to empty to revert.
+            // NOTE: We only clear AC if it was added by backfill (the note marker is present).
+            if ((task.acceptance ?? []).length > 0) {
+                updates.acceptanceJson = JSON.stringify([]);
+                rolledBack.push('ac');
+            }
+            // Clear verification if it was set by backfill
+            if (task.verification) {
+                updates.verificationJson = null;
+                rolledBack.push('verification');
+            }
+            if (rolledBack.length > 0) {
+                changes.push({
+                    taskId: task.id,
+                    title: task.title,
+                    addedAc: false,
+                    generatedAc: [],
+                    addedVerification: false,
+                    addedNote: false,
+                    rolledBack,
+                });
+                if (!dryRun) {
+                    await accessor.updateTaskFields(task.id, updates);
+                }
+            }
+            continue;
+        }
+        // --- Forward mode: fill missing AC and verification ---
+        const needsAc = !task.acceptance || task.acceptance.length === 0;
+        const needsVerification = !task.verification;
+        if (!needsAc && !needsVerification)
+            continue;
+        const change = {
+            taskId: task.id,
+            title: task.title,
+            addedAc: false,
+            generatedAc: [],
+            addedVerification: false,
+            addedNote: false,
+        };
+        const updates = { updatedAt: now };
+        if (needsAc) {
+            const generated = generateAcFromDescription(task.title, task.description ?? '');
+            updates.acceptanceJson = JSON.stringify(generated);
+            change.addedAc = true;
+            change.generatedAc = generated;
+            acAdded++;
+        }
+        if (needsVerification) {
+            const verification = buildDefaultVerification(now);
+            updates.verificationJson = JSON.stringify(verification);
+            change.addedVerification = true;
+            verificationAdded++;
+        }
+        // Add a backfill note so rollback can identify what was changed
+        const existingNotes = task.notes ?? [];
+        const backfillNote = `${BACKFILL_NOTE_MARKER} auto-backfilled at ${now}: ${[
+            needsAc ? 'ac' : null,
+            needsVerification ? 'verification' : null,
+        ]
+            .filter(Boolean)
+            .join(', ')}`;
+        updates.notesJson = JSON.stringify([...existingNotes, backfillNote]);
+        change.addedNote = true;
+        changes.push(change);
+        if (!dryRun) {
+            await accessor.updateTaskFields(task.id, updates);
+        }
+    }
+    return {
+        dryRun,
+        rollback,
+        tasksScanned: candidates.length,
+        tasksChanged: changes.length,
+        acAdded: rollback ? 0 : acAdded,
+        verificationAdded: rollback ? 0 : verificationAdded,
+        changes,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/backfill/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backfill/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAuC3D,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAa,EAAE,WAAmB;IAC1E,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,WAAW,EAAE,CAAC,WAAW,EAAE,CAAC;IAErD,4EAA4E;IAC5E,MAAM,cAAc,GAAkD;QACpE;YACE,OAAO,EAAE,wCAAwC;YACjD,SAAS,EAAE,mEAAmE;SAC/E;QACD;YACE,OAAO,EAAE,uCAAuC;YAChD,SAAS,EAAE,2CAA2C;SACvD;QACD;YACE,OAAO,EAAE,wCAAwC;YACjD,SAAS,EAAE,6CAA6C;SACzD;QACD;YACE,OAAO,EAAE,6CAA6C;YACtD,SAAS,EAAE,kDAAkD;SAC9D;QACD;YACE,OAAO,EAAE,kCAAkC;YAC3C,SAAS,EAAE,wCAAwC;SACpD;QACD;YACE,OAAO,EAAE,qCAAqC;YAC9C,SAAS,EAAE,uDAAuD;SACnE;QACD;YACE,OAAO,EAAE,kCAAkC;YAC3C,SAAS,EAAE,sDAAsD;SAClE;QACD;YACE,OAAO,EAAE,gCAAgC;YACzC,SAAS,EAAE,uDAAuD;SACnE;KACF,CAAC;IAEF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,cAAc,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzB,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC;gBAAE,MAAM,CAAC,+CAA+C;QAClF,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,OAAO,GAAG;QACd,6EAA6E;QAC7E,+DAA+D;QAC/D,kDAAkD;KACnD,CAAC;IAEF,wDAAwD;IACxD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAE/C,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAU;IAClC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,UAA2B,EAAE;IAE7B,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,QAAQ,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAEhD,6CAA6C;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAEjF,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,QAAQ,EAAE,CAAC;YACb,kDAAkD;YAClD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEtC,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,OAAO,GAIT,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YAEvB,wBAAwB;YACxB,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;gBACtD,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBACjD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;YAED,0EAA0E;YAC1E,8DAA8D;YAC9D,mFAAmF;YACnF,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC5C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;YAED,+CAA+C;YAC/C,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;gBAChC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,EAAE;oBACf,iBAAiB,EAAE,KAAK;oBACxB,SAAS,EAAE,KAAK;oBAChB,UAAU;iBACX,CAAC,CAAC;gBAEH,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YAED,SAAS;QACX,CAAC;QAED,yDAAyD;QACzD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;QACjE,MAAM,iBAAiB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;QAE7C,IAAI,CAAC,OAAO,IAAI,CAAC,iBAAiB;YAAE,SAAS;QAE7C,MAAM,MAAM,GAAuB;YACjC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,KAAK;YACxB,SAAS,EAAE,KAAK;SACjB,CAAC;QAEF,MAAM,OAAO,GAIT,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QAEvB,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YAChF,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,YAAY,GAAqB,wBAAwB,CAAC,GAAG,CAAC,CAAC;YACrE,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACxD,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAChC,iBAAiB,EAAE,CAAC;QACtB,CAAC;QAED,gEAAgE;QAChE,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,GAAG,oBAAoB,uBAAuB,GAAG,KAAK;YACzE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YACrB,iBAAiB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;SAC1C;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QAExB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAErB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,QAAQ;QACR,YAAY,EAAE,UAAU,CAAC,MAAM;QAC/B,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;QAC/B,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;QACnD,OAAO;KACR,CAAC;AACJ,CAAC"}