@cleocode/core 2026.4.41 → 2026.4.43

package/dist/security/input-sanitization.js

@@ -1,326 +0,0 @@
-/**
- * Security Hardening and Input Sanitization (Core)
- *
- * Canonical location for input sanitization and security validation.
- * Self-contained with no dispatch dependencies.
- *
- * Canonical location: src/core/security/input-sanitization.ts
- * Re-exported from: src/dispatch/lib/security.ts (backward compat)
- *
- * @task T3144
- * @task T5706
- * @epic T3125
- */
-import { LIFECYCLE_STAGE_STATUSES, MANIFEST_STATUSES, SESSION_STATUSES, TASK_STATUSES, } from '@cleocode/contracts';
-import { isAbsolute, normalize, relative, resolve } from 'path';
-import { TASK_PRIORITIES } from '../store/tasks-schema.js';
-import { normalizeTaskId } from '../tasks/id-generator.js';
-/**
- * Security validation error thrown when input fails sanitization
- */
-export class SecurityError extends Error {
-    code;
-    field;
-    constructor(message, code = 'E_SECURITY_VIOLATION', field) {
-        super(message);
-        this.code = code;
-        this.field = field;
-        this.name = 'SecurityError';
-    }
-}
-/**
- * Maximum task ID numeric value (prevent absurdly large IDs)
- */
-const MAX_TASK_ID_NUMBER = 999999;
-/**
- * Control character pattern (C0 and C1 control chars, excluding newline/tab/cr)
- */
-const CONTROL_CHAR_PATTERN = /[\x00-\x08\x0B\x0C\x0E-\x1F\x7F-\x9F]/g;
-/**
- * Default maximum content length (64KB)
- */
-const DEFAULT_MAX_CONTENT_LENGTH = 64 * 1024;
-/**
- * Sanitize and validate a task ID
- */
-export function sanitizeTaskId(value) {
-    if (typeof value !== 'string') {
-        throw new SecurityError('Task ID must be a string', 'E_INVALID_TASK_ID', 'taskId');
-    }
-    const normalized = normalizeTaskId(value);
-    if (normalized === null) {
-        throw new SecurityError(`Invalid task ID format: ${value}`, 'E_INVALID_TASK_ID', 'taskId');
-    }
-    const numericPart = parseInt(normalized.slice(1), 10);
-    if (numericPart > MAX_TASK_ID_NUMBER) {
-        throw new SecurityError(`Task ID exceeds maximum value: ${value}`, 'E_INVALID_TASK_ID', 'taskId');
-    }
-    return normalized;
-}
-/**
- * Sanitize and validate a file path
- */
-export function sanitizePath(path, projectRoot) {
-    if (typeof path !== 'string') {
-        throw new SecurityError('Path must be a string', 'E_INVALID_PATH', 'path');
-    }
-    if (typeof projectRoot !== 'string' || projectRoot.length === 0) {
-        throw new SecurityError('Project root must be a non-empty string', 'E_INVALID_PATH', 'projectRoot');
-    }
-    const trimmedPath = path.trim();
-    if (trimmedPath.length === 0) {
-        throw new SecurityError('Path cannot be empty', 'E_INVALID_PATH', 'path');
-    }
-    if (trimmedPath.includes('\0')) {
-        throw new SecurityError('Path contains null bytes', 'E_PATH_TRAVERSAL', 'path');
-    }
-    const normalizedRoot = resolve(projectRoot);
-    let resolvedPath;
-    if (isAbsolute(trimmedPath)) {
-        resolvedPath = normalize(trimmedPath);
-    }
-    else {
-        resolvedPath = resolve(normalizedRoot, trimmedPath);
-    }
-    const relativePath = relative(normalizedRoot, resolvedPath);
-    if (relativePath.startsWith('..') || isAbsolute(relativePath)) {
-        throw new SecurityError(`Path traversal detected: "${path}" resolves outside project root`, 'E_PATH_TRAVERSAL', 'path');
-    }
-    return resolvedPath;
-}
-/**
- * Sanitize content string
- */
-export function sanitizeContent(content, maxLength = DEFAULT_MAX_CONTENT_LENGTH) {
-    if (typeof content !== 'string') {
-        throw new SecurityError('Content must be a string', 'E_INVALID_CONTENT', 'content');
-    }
-    if (content.length > maxLength) {
-        throw new SecurityError(`Content exceeds maximum length (${maxLength} characters): got ${content.length}`, 'E_CONTENT_TOO_LARGE', 'content');
-    }
-    return content.replace(CONTROL_CHAR_PATTERN, '');
-}
-/**
- * Validate that a value is in an allowed enum set
- */
-export function validateEnum(value, allowed, fieldName) {
-    if (typeof value !== 'string') {
-        throw new SecurityError(`${fieldName} must be a string`, 'E_INVALID_ENUM', fieldName);
-    }
-    const trimmed = value.trim();
-    if (!allowed.includes(trimmed)) {
-        throw new SecurityError(`Invalid ${fieldName}: "${trimmed}". Allowed values: ${allowed.join(', ')}`, 'E_INVALID_ENUM', fieldName);
-    }
-    return trimmed;
-}
-/**
- * Known enum values for CLEO domains
- */
-export const VALID_DOMAINS = [
-    'tasks',
-    'session',
-    'orchestrate',
-    'research',
-    'lifecycle',
-    'validate',
-    'release',
-    'system',
-];
-export const VALID_GATEWAYS = ['query', 'mutate'];
-export const VALID_MANIFEST_STATUSES = MANIFEST_STATUSES;
-export const VALID_LIFECYCLE_STAGE_STATUSES = LIFECYCLE_STAGE_STATUSES;
-export const ALL_VALID_STATUSES = [...TASK_STATUSES, ...MANIFEST_STATUSES];
-export const VALID_PRIORITIES = TASK_PRIORITIES;
-/**
- * Default rate limit configurations per operation type
- */
-export const DEFAULT_RATE_LIMITS = {
-    query: { maxRequests: 100, windowMs: 60_000 },
-    mutate: { maxRequests: 30, windowMs: 60_000 },
-    spawn: { maxRequests: 10, windowMs: 60_000 },
-};
-/**
- * In-memory sliding window rate limiter
- */
-export class RateLimiter {
-    windows = new Map();
-    configs = new Map();
-    constructor(configs) {
-        const effectiveConfigs = configs ?? DEFAULT_RATE_LIMITS;
-        for (const [key, config] of Object.entries(effectiveConfigs)) {
-            this.configs.set(key, config);
-        }
-    }
-    check(key) {
-        const config = this.configs.get(key);
-        if (!config) {
-            return { allowed: true, remaining: Infinity, resetMs: 0, limit: Infinity };
-        }
-        const now = Date.now();
-        const windowStart = now - config.windowMs;
-        let timestamps = this.windows.get(key);
-        if (!timestamps) {
-            timestamps = [];
-            this.windows.set(key, timestamps);
-        }
-        const validTimestamps = timestamps.filter((t) => t > windowStart);
-        this.windows.set(key, validTimestamps);
-        const remaining = Math.max(0, config.maxRequests - validTimestamps.length);
-        const oldestInWindow = validTimestamps.length > 0 ? validTimestamps[0] : now;
-        const resetMs = Math.max(0, oldestInWindow + config.windowMs - now);
-        return {
-            allowed: validTimestamps.length < config.maxRequests,
-            remaining,
-            resetMs,
-            limit: config.maxRequests,
-        };
-    }
-    record(key) {
-        const timestamps = this.windows.get(key) ?? [];
-        timestamps.push(Date.now());
-        this.windows.set(key, timestamps);
-    }
-    consume(key) {
-        const result = this.check(key);
-        if (result.allowed) {
-            this.record(key);
-            result.remaining = Math.max(0, result.remaining - 1);
-        }
-        return result;
-    }
-    reset(key) {
-        if (key) {
-            this.windows.delete(key);
-        }
-        else {
-            this.windows.clear();
-        }
-    }
-    getConfig(key) {
-        return this.configs.get(key);
-    }
-    setConfig(key, config) {
-        this.configs.set(key, config);
-    }
-}
-/**
- * Parameters that expect array values.
- * External clients may send comma-separated strings instead of arrays.
- */
-const ARRAY_PARAMS = new Set([
-    'labels',
-    'addLabels',
-    'removeLabels',
-    'depends',
-    'addDepends',
-    'removeDepends',
-    'files',
-    'acceptance',
-    'findings',
-    'sources',
-    'tasks',
-    'removeTasks',
-    'taskIds',
-]);
-/**
- * Normalize a value to an array of strings.
- * Handles external clients sending comma-separated strings where arrays are expected.
- */
-export function ensureArray(value, separator = ',') {
-    if (value === undefined || value === null)
-        return undefined;
-    if (Array.isArray(value))
-        return value.map((v) => (typeof v === 'string' ? v.trim() : String(v)));
-    if (typeof value === 'string')
-        return value
-            .split(separator)
-            .map((s) => s.trim())
-            .filter(Boolean);
-    return [String(value)];
-}
-/**
- * Sanitize all params in a request before routing
- */
-export function sanitizeParams(params, projectRoot, context) {
-    if (!params) {
-        return params;
-    }
-    const sanitized = { ...params };
-    for (const [key, value] of Object.entries(sanitized)) {
-        if (value === undefined || value === null) {
-            continue;
-        }
-        if (typeof value === 'string' &&
-            (key === 'taskId' ||
-                key === 'parent' ||
-                key === 'epicId' ||
-                key === 'parentId' ||
-                key === 'newParentId' ||
-                key === 'relatedId' ||
-                key === 'targetId')) {
-            if (key === 'parent' && value === '') {
-                continue;
-            }
-            sanitized[key] = sanitizeTaskId(value);
-            continue;
-        }
-        if ((key === 'depends' || key === 'addDepends' || key === 'removeDepends') &&
-            Array.isArray(value)) {
-            sanitized[key] = value.map((v) => {
-                if (typeof v === 'string') {
-                    return sanitizeTaskId(v);
-                }
-                return v;
-            });
-            continue;
-        }
-        if (typeof value === 'string' && (key === 'path' || key === 'file') && projectRoot) {
-            // Skip path sanitization for operations that intentionally accept external paths
-            const allowExternalPath = context?.domain === 'nexus' &&
-                (context?.operation === 'register' || context?.operation === 'reconcile');
-            if (!allowExternalPath) {
-                sanitized[key] = sanitizePath(value, projectRoot);
-                continue;
-            }
-        }
-        if (typeof value === 'string' &&
-            (key === 'title' || key === 'description' || key === 'content')) {
-            const maxLen = key === 'title' ? 200 : DEFAULT_MAX_CONTENT_LENGTH;
-            sanitized[key] = sanitizeContent(value, maxLen);
-            continue;
-        }
-        if (key === 'notes') {
-            if (typeof value === 'string') {
-                sanitized[key] = sanitizeContent(value);
-            }
-            else if (Array.isArray(value)) {
-                sanitized[key] = value.map((v) => (typeof v === 'string' ? sanitizeContent(v) : v));
-            }
-            continue;
-        }
-        if (typeof value === 'string' && key === 'status') {
-            const isLifecycleStageStatus = context?.domain === 'pipeline' && context?.operation === 'stage.record';
-            const isAdrStatus = context?.domain === 'admin' && context?.operation?.startsWith('adr.');
-            const isSessionStatus = context?.domain === 'session';
-            sanitized[key] = validateEnum(value, isLifecycleStageStatus
-                ? [...LIFECYCLE_STAGE_STATUSES]
-                : isAdrStatus
-                    ? ['proposed', 'accepted', 'superseded', 'deprecated']
-                    : isSessionStatus
-                        ? [...SESSION_STATUSES]
-                        : [...TASK_STATUSES, ...MANIFEST_STATUSES], 'status');
-            continue;
-        }
-        if (typeof value === 'string' && key === 'priority') {
-            sanitized[key] = validateEnum(value, [...VALID_PRIORITIES], 'priority');
-        }
-    }
-    // Normalize array parameters (external clients may send comma-separated strings)
-    for (const key of Object.keys(sanitized)) {
-        if (ARRAY_PARAMS.has(key) && sanitized[key] !== undefined) {
-            sanitized[key] = ensureArray(sanitized[key]);
-        }
-    }
-    return sanitized;
-}
-//# sourceMappingURL=input-sanitization.js.map

package/dist/security/input-sanitization.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"input-sanitization.js","sourceRoot":"","sources":["../../src/security/input-sanitization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAG7B;IACA;IAHT,YACE,OAAe,EACR,OAAe,sBAAsB,EACrC,KAAc;QAErB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAAiC;QACrC,UAAK,GAAL,KAAK,CAAS;QAGrB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;GAEG;AACH,MAAM,oBAAoB,GAAG,wCAAwC,CAAC;AAEtE;;GAEG;AACH,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,0BAA0B,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,2BAA2B,KAAK,EAAE,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,WAAW,GAAG,kBAAkB,EAAE,CAAC;QACrC,MAAM,IAAI,aAAa,CACrB,kCAAkC,KAAK,EAAE,EACzC,mBAAmB,EACnB,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,WAAmB;IAC5D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,aAAa,CACrB,yCAAyC,EACzC,gBAAgB,EAChB,aAAa,CACd,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAEhC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CAAC,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE5C,IAAI,YAAoB,CAAC;IACzB,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,YAAY,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAE5D,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,aAAa,CACrB,6BAA6B,IAAI,iCAAiC,EAClE,kBAAkB,EAClB,MAAM,CACP,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,YAAoB,0BAA0B;IAE9C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CAAC,0BAA0B,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CACrB,mCAAmC,SAAS,qBAAqB,OAAO,CAAC,MAAM,EAAE,EACjF,qBAAqB,EACrB,SAAS,CACV,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,OAAiB,EAAE,SAAiB;IAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,GAAG,SAAS,mBAAmB,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CACrB,WAAW,SAAS,MAAM,OAAO,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC3E,gBAAgB,EAChB,SAAS,CACV,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO;IACP,SAAS;IACT,aAAa;IACb,UAAU;IACV,WAAW;IACX,UAAU;IACV,SAAS;IACT,QAAQ;CACA,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAE3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CAAC;AAEzD,MAAM,CAAC,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AAEvE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,iBAAiB,CAAU,CAAC;AAEpF,MAAM,CAAC,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAoBhD;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAoC;IAClE,KAAK,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC7C,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC7C,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;CAC7C,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,WAAW;IACd,OAAO,GAA0B,IAAI,GAAG,EAAE,CAAC;IAC3C,OAAO,GAAiC,IAAI,GAAG,EAAE,CAAC;IAE1D,YAAY,OAAyC;QACnD,MAAM,gBAAgB,GAAG,OAAO,IAAI,mBAAmB,CAAC;QACxD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAW;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC7E,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC;QAE1C,IAAI,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAEvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;QAEpE,OAAO;YACL,OAAO,EAAE,eAAe,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW;YACpD,SAAS;YACT,OAAO;YACP,KAAK,EAAE,MAAM,CAAC,WAAW;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC/C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,GAAW;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,GAAY;QAChB,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,SAAS,CAAC,GAAW,EAAE,MAAuB;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,QAAQ;IACR,WAAW;IACX,cAAc;IACd,SAAS;IACT,YAAY;IACZ,eAAe;IACf,OAAO;IACP,YAAY;IACZ,UAAU;IACV,SAAS;IACT,OAAO;IACP,aAAa;IACb,SAAS;CACV,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,SAAS,GAAG,GAAG;IACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3B,OAAO,KAAK;aACT,KAAK,CAAC,SAAS,CAAC;aAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA2C,EAC3C,WAAoB,EACpB,OAAiD;IAEjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;IAEzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,GAAG,KAAK,QAAQ;gBACf,GAAG,KAAK,QAAQ;gBAChB,GAAG,KAAK,QAAQ;gBAChB,GAAG,KAAK,UAAU;gBAClB,GAAG,KAAK,aAAa;gBACrB,GAAG,KAAK,WAAW;gBACnB,GAAG,KAAK,UAAU,CAAC,EACrB,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACrC,SAAS;YACX,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QAED,IACE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,eAAe,CAAC;YACtE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpB,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC/B,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC1B,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;gBAC3B,CAAC;gBACD,OAAO,CAAC,CAAC;YACX,CAAC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YACnF,iFAAiF;YACjF,MAAM,iBAAiB,GACrB,OAAO,EAAE,MAAM,KAAK,OAAO;gBAC3B,CAAC,OAAO,EAAE,SAAS,KAAK,UAAU,IAAI,OAAO,EAAE,SAAS,KAAK,WAAW,CAAC,CAAC;YAC5E,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAClD,SAAS;YACX,CAAC;QACH,CAAC;QAED,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,SAAS,CAAC,EAC/D,CAAC;YACD,MAAM,MAAM,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAClE,SAAS,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,SAAS,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAC1C,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtF,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,sBAAsB,GAC1B,OAAO,EAAE,MAAM,KAAK,UAAU,IAAI,OAAO,EAAE,SAAS,KAAK,cAAc,CAAC;YAC1E,MAAM,WAAW,GAAG,OAAO,EAAE,MAAM,KAAK,OAAO,IAAI,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAC1F,MAAM,eAAe,GAAG,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC;YAEtD,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAC3B,KAAK,EACL,sBAAsB;gBACpB,CAAC,CAAC,CAAC,GAAG,wBAAwB,CAAC;gBAC/B,CAAC,CAAC,WAAW;oBACX,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC;oBACtD,CAAC,CAAC,eAAe;wBACf,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC;wBACvB,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,iBAAiB,CAAC,EAChD,QAAQ,CACT,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACpD,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,GAAG,gBAAgB,CAAC,EAAE,UAAU,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1D,SAAS,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/sequence/index.js

@@ -1,295 +0,0 @@
-/**
- * Task ID sequence management core module.
- * @task T4538
- * @epic T4454
- */
-import { existsSync, readFileSync, renameSync } from 'node:fs';
-import { join } from 'node:path';
-import { ExitCode } from '@cleocode/contracts';
-import { CleoError } from '../errors.js';
-import { createDataAccessor } from '../store/data-accessor.js';
-import { setMetaValue } from '../store/sqlite-data-accessor.js';
-import { schemaMeta } from '../store/tasks-schema.js';
-const SEQUENCE_META_KEY = 'task_id_sequence';
-function getLegacySequenceJsonPath(cwd) {
-    return join(cwd ?? process.cwd(), '.cleo', '.sequence.json');
-}
-function getLegacySequencePath(cwd) {
-    return join(cwd ?? process.cwd(), '.cleo', '.sequence');
-}
-function isValidSequenceState(value) {
-    if (!value || typeof value !== 'object')
-        return false;
-    const seq = value;
-    return (typeof seq.counter === 'number' &&
-        typeof seq.lastId === 'string' &&
-        typeof seq.checksum === 'string');
-}
-function isSeedSequence(value) {
-    return value.counter === 0 && value.lastId === 'T000' && value.checksum === 'seed';
-}
-function readLegacySequenceFile(path) {
-    if (!existsSync(path))
-        return null;
-    try {
-        const parsed = JSON.parse(readFileSync(path, 'utf-8'));
-        return isValidSequenceState(parsed) ? parsed : null;
-    }
-    catch {
-        return null;
-    }
-}
-function renameLegacyFile(path) {
-    if (!existsSync(path))
-        return;
-    const migratedPath = `${path}.migrated`;
-    try {
-        if (!existsSync(migratedPath)) {
-            renameSync(path, migratedPath);
-            return;
-        }
-        renameSync(path, `${migratedPath}.${Date.now()}`);
-    }
-    catch {
-        // Non-fatal; sequence data has already been persisted in SQLite.
-    }
-}
-async function readSequenceFromDb(cwd, accessor) {
-    if (accessor) {
-        const value = await accessor.getMetaValue(SEQUENCE_META_KEY);
-        return isValidSequenceState(value) ? value : null;
-    }
-    const { getDb } = await import('../store/sqlite.js');
-    const { eq } = await import('drizzle-orm');
-    const db = await getDb(cwd);
-    const rows = await db
-        .select()
-        .from(schemaMeta)
-        .where(eq(schemaMeta.key, SEQUENCE_META_KEY))
-        .all();
-    const raw = rows[0]?.value;
-    if (!raw)
-        return null;
-    try {
-        const parsed = JSON.parse(raw);
-        return isValidSequenceState(parsed) ? parsed : null;
-    }
-    catch {
-        return null;
-    }
-}
-async function writeSequenceToDb(state, cwd, accessor) {
-    if (accessor) {
-        await accessor.setMetaValue(SEQUENCE_META_KEY, state);
-        return;
-    }
-    await setMetaValue(cwd, SEQUENCE_META_KEY, state);
-}
-async function maybeMigrateLegacySequence(dbState, cwd, accessor) {
-    const legacyJsonPath = getLegacySequenceJsonPath(cwd);
-    const legacyPath = getLegacySequencePath(cwd);
-    const candidates = [
-        readLegacySequenceFile(legacyJsonPath),
-        readLegacySequenceFile(legacyPath),
-    ].filter((value) => value !== null);
-    if (candidates.length === 0) {
-        return dbState;
-    }
-    const preferredLegacy = candidates.reduce((best, current) => current.counter > best.counter ? current : best);
-    const shouldMigrate = !dbState || isSeedSequence(dbState) || preferredLegacy.counter > dbState.counter;
-    if (shouldMigrate) {
-        await writeSequenceToDb(preferredLegacy, cwd, accessor);
-    }
-    // Legacy files are obsolete once validated. Rename to prevent drift.
-    renameLegacyFile(legacyJsonPath);
-    renameLegacyFile(legacyPath);
-    return shouldMigrate ? preferredLegacy : dbState;
-}
-async function readSequence(cwd, accessor) {
-    const fromDb = await readSequenceFromDb(cwd, accessor);
-    return maybeMigrateLegacySequence(fromDb, cwd, accessor);
-}
-function getMaxIdFromTasks(tasks) {
-    let max = 0;
-    for (const t of tasks) {
-        const match = t.id.match(/^T(\d+)$/);
-        if (match) {
-            const num = parseInt(match[1], 10);
-            if (num > max)
-                max = num;
-        }
-    }
-    return max;
-}
-/** Show current sequence state. */
-export async function showSequence(cwd) {
-    const seq = await readSequence(cwd);
-    if (!seq) {
-        throw new CleoError(ExitCode.NOT_FOUND, 'Sequence state not found in SQLite schema_meta');
-    }
-    return {
-        counter: seq.counter,
-        lastId: seq.lastId,
-        checksum: seq.checksum,
-        nextId: `T${String(seq.counter + 1).padStart(3, '0')}`,
-    };
-}
-async function loadAllTasks(cwd, accessor) {
-    let localAccessor = null;
-    const activeAccessor = accessor ?? (await createDataAccessor(undefined, cwd));
-    if (!accessor) {
-        localAccessor = activeAccessor;
-    }
-    try {
-        const { tasks: activeTasks } = await activeAccessor.queryTasks({});
-        const archiveData = await activeAccessor.loadArchive();
-        return [...(activeTasks ?? []), ...(archiveData?.archivedTasks ?? [])];
-    }
-    finally {
-        if (localAccessor) {
-            await localAccessor.close();
-        }
-    }
-}
-/** Check sequence integrity. */
-export async function checkSequence(cwd, accessor) {
-    const seq = await readSequence(cwd, accessor);
-    if (!seq) {
-        // File missing — return invalid state so callers trigger auto-repair instead of crashing.
-        // repairSequence() handles null state and will initialize the counter from task data.
-        return { valid: false, counter: 0, maxIdInData: 0, missing: true };
-    }
-    const allTasks = await loadAllTasks(cwd, accessor);
-    const maxId = getMaxIdFromTasks(allTasks);
-    const valid = seq.counter >= maxId;
-    return {
-        counter: seq.counter,
-        maxIdInData: maxId,
-        valid,
-        ...(valid
-            ? {}
-            : {
-                issue: `Counter (${seq.counter}) is behind max ID (T${maxId})`,
-                fix: 'Run cleo sequence repair',
-            }),
-    };
-}
-/** Repair sequence if behind. */
-export async function repairSequence(cwd, accessor) {
-    const seq = await readSequence(cwd, accessor);
-    const allTasks = await loadAllTasks(cwd, accessor);
-    const maxId = getMaxIdFromTasks(allTasks);
-    const oldCounter = seq?.counter ?? 0;
-    if (!seq) {
-        const initialized = {
-            counter: maxId,
-            lastId: `T${maxId}`,
-            checksum: `seed-${Date.now()}`,
-        };
-        await writeSequenceToDb(initialized, cwd, accessor);
-        return {
-            repaired: true,
-            counter: initialized.counter,
-            oldCounter,
-            newCounter: initialized.counter,
-            message: `Sequence initialized at ${initialized.counter}`,
-        };
-    }
-    if (oldCounter >= maxId) {
-        return {
-            repaired: false,
-            message: 'Sequence already valid',
-            counter: oldCounter,
-            oldCounter,
-            newCounter: oldCounter,
-        };
-    }
-    const newCounter = maxId;
-    const newSeq = {
-        counter: newCounter,
-        lastId: `T${newCounter}`,
-        checksum: `repair-${Date.now()}`,
-    };
-    await writeSequenceToDb(newSeq, cwd, accessor);
-    return {
-        repaired: true,
-        counter: newCounter,
-        oldCounter,
-        newCounter,
-        message: `Sequence repaired: ${oldCounter} -> ${newCounter}`,
-    };
-}
-/** Maximum retries for allocateNextTaskId when collision detected. */
-const MAX_ALLOC_RETRIES = 3;
-/**
- * Atomically allocate the next task ID via SQLite.
- *
- * Uses BEGIN IMMEDIATE to guarantee no two concurrent callers
- * receive the same ID, even across processes (WAL mode).
- *
- * Falls back to repair+retry if the sequence counter is behind
- * the actual max task ID (e.g., stale counter from installations
- * that never incremented it).
- *
- * @task T5184
- */
-export async function allocateNextTaskId(cwd, retryCount = 0) {
-    // Ensure DB is initialized (triggers migrations, seeds sequence counter)
-    const { getDb, getNativeDb } = await import('../store/sqlite.js');
-    await getDb(cwd);
-    const nativeDb = getNativeDb();
-    if (!nativeDb) {
-        throw new CleoError(ExitCode.FILE_ERROR, 'Native database not available for atomic ID allocation');
-    }
-    // Atomic transaction: increment counter and read new value
-    nativeDb.prepare('BEGIN IMMEDIATE').run();
-    try {
-        // Increment counter atomically
-        nativeDb
-            .prepare(`
-      UPDATE schema_meta
-      SET value = json_set(value,
-        '$.counter', json_extract(value, '$.counter') + 1,
-        '$.lastId', 'T' || printf('%03d', json_extract(value, '$.counter') + 1),
-        '$.checksum', 'alloc-' || strftime('%s','now')
-      )
-      WHERE key = 'task_id_sequence'
-    `)
-            .run();
-        // Read new counter value
-        const row = nativeDb
-            .prepare(`
-      SELECT json_extract(value, '$.counter') AS counter
-      FROM schema_meta WHERE key = 'task_id_sequence'
-    `)
-            .get();
-        if (!row) {
-            throw new CleoError(ExitCode.FILE_ERROR, 'Sequence counter not found after increment');
-        }
-        const newId = `T${String(row.counter).padStart(3, '0')}`;
-        // Collision check: verify no existing task with this ID
-        const existing = nativeDb.prepare('SELECT id FROM tasks WHERE id = ?').get(newId);
-        if (existing) {
-            // Counter was behind actual data — rollback, repair, and retry
-            nativeDb.prepare('ROLLBACK').run();
-            if (retryCount >= MAX_ALLOC_RETRIES) {
-                throw new CleoError(ExitCode.ID_COLLISION, `Failed to allocate unique task ID after ${MAX_ALLOC_RETRIES} retries (last attempted: ${newId})`);
-            }
-            await repairSequence(cwd);
-            return allocateNextTaskId(cwd, retryCount + 1);
-        }
-        nativeDb.prepare('COMMIT').run();
-        return newId;
-    }
-    catch (err) {
-        // Ensure transaction is rolled back on any error
-        try {
-            nativeDb.prepare('ROLLBACK').run();
-        }
-        catch {
-            /* ignore rollback errors */
-        }
-        throw err;
-    }
-}
-//# sourceMappingURL=index.js.map

package/dist/sequence/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sequence/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAqB,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C,SAAS,yBAAyB,CAAC,GAAY;IAC7C,OAAO,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY;IACzC,OAAO,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAC1D,CAAC;AAQD,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,KAA+B,CAAC;IAC5C,OAAO,CACL,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAC/B,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAC9B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC1C,OAAO,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;AACrF,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAC9B,MAAM,YAAY,GAAG,GAAG,IAAI,WAAW,CAAC;IACxC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,GAAG,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,GAAY,EACZ,QAAuB;IAEvB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAU,iBAAiB,CAAC,CAAC;QACtE,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;SAC5C,GAAG,EAAE,CAAC;IACT,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,KAAoB,EACpB,GAAY,EACZ,QAAuB;IAEvB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,YAAY,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IACD,MAAM,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,OAA6B,EAC7B,GAAY,EACZ,QAAuB;IAEvB,MAAM,cAAc,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAE9C,MAAM,UAAU,GAAG;QACjB,sBAAsB,CAAC,cAAc,CAAC;QACtC,sBAAsB,CAAC,UAAU,CAAC;KACnC,CAAC,MAAM,CAAC,CAAC,KAAK,EAA0B,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAE5D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAC1D,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAChD,CAAC;IAEF,MAAM,aAAa,GACjB,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACnF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,iBAAiB,CAAC,eAAe,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;IAED,qEAAqE;IACrE,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACjC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAE7B,OAAO,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,QAAuB;IAC/D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvD,OAAO,0BAA0B,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA8B;IACvD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI,GAAG,GAAG,GAAG;gBAAE,GAAG,GAAG,GAAG,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mCAAmC;AACnC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAY;IAC7C,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,gDAAgD,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;KACvD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAY,EACZ,QAAuB;IAEvB,IAAI,aAAa,GAAwB,IAAI,CAAC;IAC9C,MAAM,cAAc,GAAG,QAAQ,IAAI,CAAC,MAAM,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,aAAa,GAAG,cAAc,CAAC;IACjC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,WAAW,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;YAAS,CAAC;QACT,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAED,gCAAgC;AAChC,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAY,EACZ,QAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,0FAA0F;QAC1F,sFAAsF;QACtF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IAEnC,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,KAAK;QAClB,KAAK;QACL,GAAG,CAAC,KAAK;YACP,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,EAAE,YAAY,GAAG,CAAC,OAAO,wBAAwB,KAAK,GAAG;gBAC9D,GAAG,EAAE,0BAA0B;aAChC,CAAC;KACP,CAAC;AACJ,CAAC;AAWD,iCAAiC;AACjC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAY,EAAE,QAAuB;IACxE,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;IAErC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,WAAW,GAAkB;YACjC,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI,KAAK,EAAE;YACnB,QAAQ,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;SAC/B,CAAC;QACF,MAAM,iBAAiB,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpD,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,UAAU;YACV,UAAU,EAAE,WAAW,CAAC,OAAO;YAC/B,OAAO,EAAE,2BAA2B,WAAW,CAAC,OAAO,EAAE;SAC1D,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,wBAAwB;YACjC,OAAO,EAAE,UAAU;YACnB,UAAU;YACV,UAAU,EAAE,UAAU;SACvB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC;IACzB,MAAM,MAAM,GAAkB;QAC5B,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE,IAAI,UAAU,EAAE;QACxB,QAAQ,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE;KACjC,CAAC;IACF,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE/C,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,UAAU;QACnB,UAAU;QACV,UAAU;QACV,OAAO,EAAE,sBAAsB,UAAU,OAAO,UAAU,EAAE;KAC7D,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,UAAU,GAAG,CAAC;IACnE,yEAAyE;IACzE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAClE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACjB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,UAAU,EACnB,wDAAwD,CACzD,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,+BAA+B;QAC/B,QAAQ;aACL,OAAO,CAAC;;;;;;;;KAQV,CAAC;aACC,GAAG,EAAE,CAAC;QAET,yBAAyB;QACzB,MAAM,GAAG,GAAG,QAAQ;aACjB,OAAO,CAAC;;;KAGV,CAAC;aACC,GAAG,EAAqC,CAAC;QAE5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,4CAA4C,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAEzD,wDAAwD;QACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,GAAG,CAAC,KAAK,CAEnE,CAAC;QAEd,IAAI,QAAQ,EAAE,CAAC;YACb,+DAA+D;YAC/D,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC;YAEnC,IAAI,UAAU,IAAI,iBAAiB,EAAE,CAAC;gBACpC,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,YAAY,EACrB,2CAA2C,iBAAiB,6BAA6B,KAAK,GAAG,CAClG,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,kBAAkB,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iDAAiD;QACjD,IAAI,CAAC;YACH,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}