@cleocode/core 2026.6.12 → 2026.6.13

package/dist/selfimprove/replay.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Self-improvement scenario replay via an injected dispatch port (T11889-B).
+ *
+ * `replayScenario` replays a scenario's ordered ops through an injected
+ * {@link ReplayDispatch} port — it captures ONE LAFS envelope per op. CORE owns
+ * the PORT TYPE only; the real adapter (a thin closure over the cleo-resident
+ * `Dispatcher`) is supplied by `packages/cleo` at the call site (dependency
+ * inversion — `core` MUST NOT import the cleo dispatcher, and `dispatchFromCore`
+ * does not exist; see the P5 self-improvement spec §B.0.1).
+ *
+ * This module is PURE — no DB, no native handle, no `cleo` mutation. Tests inject
+ * a mocked `ReplayDispatch`. Import-time side-effect-free: the logger is resolved
+ * lazily on first use.
+ *
+ * Read-only guarantee: in the in-process fallback (no VM isolation) a `mutate` op
+ * could touch a live handle, so {@link replayScenario} HARD-REJECTS any
+ * `gateway:'mutate'` op when `allowMutate` is not explicitly set, throwing
+ * {@link MutateInFallbackError} (code `E_SELFIMPROVE_MUTATE_IN_FALLBACK`). The
+ * canned dogfood scenario is `query`-only, so the default replay never mutates.
+ *
+ * @module @cleocode/core/selfimprove/replay
+ * @epic T11889
+ * @task T11912
+ */
+import type { DispatchResponse } from '@cleocode/contracts/gateway';
+import type { Scenario, ScenarioOp } from './scenario.js';
+/**
+ * The captured envelope shape per replayed op.
+ *
+ * This is the canonical {@link DispatchResponse} the cleo-side `Dispatcher`
+ * returns (a `meta` block + `success` + optional `data`/`error`/`page`/`partial`).
+ * The diff layer (see {@link "./envelope-diff.js"}) normalizes this by stripping
+ * the volatile `meta` fields before comparing against the golden.
+ */
+export type ReplayEnvelope = DispatchResponse;
+/**
+ * Narrow dispatch port the replay engine calls — CORE owns this TYPE, NOT the impl.
+ *
+ * The cleo dispatch handler supplies the concrete adapter by closing over its
+ * already-instantiated `Dispatcher` (`dispatcher.dispatch({ gateway, domain,
+ * operation, params, source, requestId })`, where `source` is a valid
+ * `GatewaySource` — e.g. `'rpc'`) and returning the resulting envelope. Injecting
+ * the port keeps the engine + diff + budget logic
+ * in `core` while the dispatcher binding lives in `cleo` (CORE-first, no
+ * package-boundary inversion).
+ */
+/**
+ * The dispatch coordinate handed to a {@link ReplayDispatch} port for one op.
+ */
+export interface ReplayDispatchOp {
+    /** CQRS gateway. */
+    gateway: ScenarioOp['gateway'];
+    /** Registered domain handler key (plural, e.g. `'tasks'`). */
+    domain: string;
+    /** Operation name within the domain. */
+    operation: string;
+    /** Optional operation parameters. */
+    params?: Record<string, unknown>;
+}
+/**
+ * Dispatch a single op and return its captured envelope.
+ *
+ * @param op - The dispatch coordinate (gateway, domain, operation, params).
+ * @returns The captured {@link ReplayEnvelope}.
+ */
+export type ReplayDispatch = (op: ReplayDispatchOp) => Promise<ReplayEnvelope>;
+/** Options controlling a replay run. */
+export interface ReplayOptions {
+    /**
+     * When `true`, permit `gateway:'mutate'` ops (VM-isolated execution path).
+     *
+     * Defaults to `false`: in the in-process fallback there is no VM boundary, so a
+     * mutate op is HARD-REJECTED with {@link MutateInFallbackError}. The canned
+     * dogfood scenario is `query`-only and never sets this.
+     *
+     * @defaultValue false
+     */
+    allowMutate?: boolean;
+}
+/**
+ * Thrown when a `gateway:'mutate'` op is replayed without `allowMutate`.
+ *
+ * In the in-process fallback the replay runs in the host process, which DOES hold
+ * live-DB handles; a mutate op there could corrupt a live `tasks.db`/`brain.db`
+ * (the T5158 vector). The hard guard ensures no mutate path can fire without an
+ * explicit VM-isolation opt-in.
+ */
+export declare class MutateInFallbackError extends Error {
+    /** Stable machine-readable error code. */
+    readonly code: "E_SELFIMPROVE_MUTATE_IN_FALLBACK";
+    /** The op coordinate (`domain.operation`) that was rejected. */
+    readonly opCoord: string;
+    /**
+     * @param op - The rejected mutate op.
+     */
+    constructor(op: ScenarioOp);
+}
+/**
+ * Replay a scenario's ordered ops through the injected dispatch port.
+ *
+ * Captures ONE envelope per op, in op order. Read-only by default: every
+ * `gateway:'mutate'` op is HARD-REJECTED with {@link MutateInFallbackError}
+ * unless `options.allowMutate` is set (the VM-isolation path).
+ *
+ * PURE — no DB, no mutation. The `dispatch` port is the only external dependency;
+ * tests inject a mock.
+ *
+ * @param scenario - The validated scenario whose ops are replayed.
+ * @param dispatch - The injected dispatch port (cleo supplies the real adapter).
+ * @param options - Replay options; see {@link ReplayOptions}.
+ * @returns The captured envelopes, one per op, in scenario order.
+ * @throws {@link MutateInFallbackError} On a `mutate` op without `allowMutate`.
+ *
+ * @example
+ * ```ts
+ * const envelopes = await replayScenario(scenario, dispatch);
+ * // envelopes.length === scenario.ops.length
+ * ```
+ */
+export declare function replayScenario(scenario: Scenario, dispatch: ReplayDispatch, options?: ReplayOptions): Promise<ReplayEnvelope[]>;
+//# sourceMappingURL=replay.d.ts.map

package/dist/selfimprove/replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/selfimprove/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAE9C;;;;;;;;;;GAUG;AACH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB;IACpB,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/B,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,EAAE,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;AAE/E,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,0CAA0C;IAC1C,SAAgB,IAAI,EAAG,kCAAkC,CAAU;IAEnE,gEAAgE;IAChE,SAAgB,OAAO,EAAE,MAAM,CAAC;IAEhC;;OAEG;gBACS,EAAE,EAAE,UAAU;CAS3B;AAuBD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,cAAc,EACxB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,cAAc,EAAE,CAAC,CAwB3B"}

package/dist/selfimprove/replay.js

@@ -0,0 +1,109 @@
+/**
+ * Self-improvement scenario replay via an injected dispatch port (T11889-B).
+ *
+ * `replayScenario` replays a scenario's ordered ops through an injected
+ * {@link ReplayDispatch} port — it captures ONE LAFS envelope per op. CORE owns
+ * the PORT TYPE only; the real adapter (a thin closure over the cleo-resident
+ * `Dispatcher`) is supplied by `packages/cleo` at the call site (dependency
+ * inversion — `core` MUST NOT import the cleo dispatcher, and `dispatchFromCore`
+ * does not exist; see the P5 self-improvement spec §B.0.1).
+ *
+ * This module is PURE — no DB, no native handle, no `cleo` mutation. Tests inject
+ * a mocked `ReplayDispatch`. Import-time side-effect-free: the logger is resolved
+ * lazily on first use.
+ *
+ * Read-only guarantee: in the in-process fallback (no VM isolation) a `mutate` op
+ * could touch a live handle, so {@link replayScenario} HARD-REJECTS any
+ * `gateway:'mutate'` op when `allowMutate` is not explicitly set, throwing
+ * {@link MutateInFallbackError} (code `E_SELFIMPROVE_MUTATE_IN_FALLBACK`). The
+ * canned dogfood scenario is `query`-only, so the default replay never mutates.
+ *
+ * @module @cleocode/core/selfimprove/replay
+ * @epic T11889
+ * @task T11912
+ */
+/**
+ * Thrown when a `gateway:'mutate'` op is replayed without `allowMutate`.
+ *
+ * In the in-process fallback the replay runs in the host process, which DOES hold
+ * live-DB handles; a mutate op there could corrupt a live `tasks.db`/`brain.db`
+ * (the T5158 vector). The hard guard ensures no mutate path can fire without an
+ * explicit VM-isolation opt-in.
+ */
+export class MutateInFallbackError extends Error {
+    /** Stable machine-readable error code. */
+    code = 'E_SELFIMPROVE_MUTATE_IN_FALLBACK';
+    /** The op coordinate (`domain.operation`) that was rejected. */
+    opCoord;
+    /**
+     * @param op - The rejected mutate op.
+     */
+    constructor(op) {
+        const opCoord = `${op.domain}.${op.operation}`;
+        super(`Refusing to replay mutate op '${opCoord}' without VM isolation ` +
+            '(set allowMutate only when running in a sandbox VM)');
+        this.name = 'MutateInFallbackError';
+        this.opCoord = opCoord;
+    }
+}
+/**
+ * Lazily-resolved module logger.
+ *
+ * Resolved on first use rather than at import time so importing this module never
+ * triggers logger initialization. The cached instance is reused across calls.
+ */
+let cachedLogger;
+/**
+ * Resolve the module logger, initializing it lazily on first call.
+ *
+ * @returns The `selfimprove-replay` subsystem logger.
+ */
+async function getModuleLogger() {
+    if (cachedLogger === undefined) {
+        const { getLogger } = await import('../logger.js');
+        cachedLogger = getLogger('selfimprove-replay');
+    }
+    return cachedLogger;
+}
+/**
+ * Replay a scenario's ordered ops through the injected dispatch port.
+ *
+ * Captures ONE envelope per op, in op order. Read-only by default: every
+ * `gateway:'mutate'` op is HARD-REJECTED with {@link MutateInFallbackError}
+ * unless `options.allowMutate` is set (the VM-isolation path).
+ *
+ * PURE — no DB, no mutation. The `dispatch` port is the only external dependency;
+ * tests inject a mock.
+ *
+ * @param scenario - The validated scenario whose ops are replayed.
+ * @param dispatch - The injected dispatch port (cleo supplies the real adapter).
+ * @param options - Replay options; see {@link ReplayOptions}.
+ * @returns The captured envelopes, one per op, in scenario order.
+ * @throws {@link MutateInFallbackError} On a `mutate` op without `allowMutate`.
+ *
+ * @example
+ * ```ts
+ * const envelopes = await replayScenario(scenario, dispatch);
+ * // envelopes.length === scenario.ops.length
+ * ```
+ */
+export async function replayScenario(scenario, dispatch, options = {}) {
+    const allowMutate = options.allowMutate ?? false;
+    const logger = await getModuleLogger();
+    const captured = [];
+    for (const op of scenario.ops) {
+        if (op.gateway === 'mutate' && !allowMutate) {
+            throw new MutateInFallbackError(op);
+        }
+        const envelope = await dispatch({
+            gateway: op.gateway,
+            domain: op.domain,
+            operation: op.operation,
+            ...(op.params !== undefined ? { params: op.params } : {}),
+        });
+        captured.push(envelope);
+    }
+    logger.debug({ scenario: scenario.name, captured: captured.length }, 'replayed self-improvement scenario');
+    return captured;
+}
+//# sourceMappingURL=replay.js.map

package/dist/selfimprove/replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.js","sourceRoot":"","sources":["../../src/selfimprove/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA+DH;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,0CAA0C;IAC1B,IAAI,GAAG,kCAA2C,CAAC;IAEnE,gEAAgE;IAChD,OAAO,CAAS;IAEhC;;OAEG;IACH,YAAY,EAAc;QACxB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;QAC/C,KAAK,CACH,iCAAiC,OAAO,yBAAyB;YAC/D,qDAAqD,CACxD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED;;;;;GAKG;AACH,IAAI,YAAgC,CAAC;AAErC;;;;GAIG;AACH,KAAK,UAAU,eAAe;IAC5B,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACnD,YAAY,GAAG,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAkB,EAClB,QAAwB,EACxB,UAAyB,EAAE;IAE3B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,EAAE,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC;YAC9B,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,KAAK,CACV,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,EACtD,oCAAoC,CACrC,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/selfimprove/run-loop.d.ts

@@ -0,0 +1,148 @@
+/**
+ * Self-improvement loop engine entry (T11889 · T11889-C).
+ *
+ * {@link runSelfImprove} is the CORE engine the thin `cleo selfimprove run` CLI
+ * verb delegates to. It orchestrates the full walking skeleton:
+ *
+ *   1. **boot ONE sandbox** via
+ *      {@link "../llm/pi/resolve-execution-env.js".resolveExecutionEnv} (prefers the
+ *      Gondolin micro-VM; degrades to the in-process `GuardedExecutionEnv` in CI) —
+ *      counted against the `maxWorktrees = 1` budget;
+ *   2. **replay** the canned scenario in-process via the injected
+ *      {@link "./replay.js".ReplayDispatch} port (the cleo handler supplies the real
+ *      adapter; the default scenario is `query`-only so the replay never mutates);
+ *   3. **diff** the captured envelopes vs the golden
+ *      ({@link "./envelope-diff.js".diffEnvelopes}) — zero regressions ⇒ a SILENT,
+ *      no-write green run;
+ *   4. on a regression, **emit ONE DHQ** row via the leased
+ *      {@link "./dhq-adapter.js".DhqAdapter} (UPSERT under
+ *      `withWriterLease('project','bulk',…)`) — ONLY when `execute` is set;
+ *   5. **open ONE DRAFT PR** ({@link "./draft-pr.js".openDraftPr}, dry-run unless
+ *      `execute`) and record its URL back on the DHQ row.
+ *
+ * Self-dogfooding guardrails (NON-NEGOTIABLE, P5 spec §B.7):
+ *   - **Default OFF.** Mutation + egress require `opts.execute === true`. Without
+ *     it the loop runs DRY-RUN: replay + diff + report, NO DB write, NO PR.
+ *   - **Circuit-breaker** ({@link "./budget.js".CircuitBreaker}) HALTS the run on
+ *     gate-RED, a `require`-mode lease throw (`LeaseUnavailableError`), budget
+ *     overrun, or a DB error from the leased section. It does NOT trip on
+ *     "daemon OFF" (the normal `local`-mode state).
+ *   - **Budget caps** (in-code): `maxTokens` / `maxUsd` / `maxPrs = 1` /
+ *     `maxWorktrees = 1`, checked PRE-FLIGHT before each costed step. `MemoryMax=32G`
+ *     is an operational launch-wrapper, not an in-code cap.
+ *   - **NO autonomous fix-gen, NO auto-merge, NO end-user mode in v1.** The loop
+ *     surfaces regressions as DHQs + draft PRs; a human drives the fix.
+ *
+ * CORE-first: this engine lives in `core` and owns the `ReplayDispatch` port TYPE;
+ * the cleo dispatch handler supplies the concrete adapter (dependency inversion —
+ * `core` never imports the cleo-resident dispatcher). Import-time side-effect-free.
+ *
+ * @module @cleocode/core/selfimprove/run-loop
+ * @epic T11889
+ * @task T11913
+ */
+import { type ExecutionEnvBackend } from '../llm/pi/resolve-execution-env.js';
+import { type ToolGuard } from '../tools/guard.js';
+import { type CircuitBreakerState, DEFAULT_BUDGET, type SelfImproveBudget } from './budget.js';
+import { type DhqAdapter } from './dhq-adapter.js';
+import { type DraftPrResult } from './draft-pr.js';
+import { type DiffEntry } from './envelope-diff.js';
+import { type ReplayDispatch } from './replay.js';
+/** Options for {@link runSelfImprove}. */
+export interface RunSelfImproveOptions {
+    /** The canned scenario name to replay (e.g. `'dhq-replay-find'`). */
+    readonly scenario: string;
+    /**
+     * The injected dispatch port — the cleo handler supplies a closure over its
+     * `Dispatcher`. CORE owns the TYPE; the impl is injected (dependency inversion).
+     */
+    readonly dispatch: ReplayDispatch;
+    /**
+     * When `true`, PERMIT mutation (the leased DHQ UPSERT) + egress (the draft PR).
+     * DEFAULT `false`: the loop runs DRY-RUN (replay + diff + report only). This is
+     * the hard default-OFF gate — nothing is written or pushed without it.
+     *
+     * @defaultValue false
+     */
+    readonly execute?: boolean;
+    /** Project working directory for scope resolution + the fallback workspace root. */
+    readonly cwd?: string;
+    /**
+     * The confinement backend the run prefers. Defaults to `'gondolin'` (degrades to
+     * the in-process guarded env when the VM infra is absent — the CI path).
+     *
+     * @defaultValue 'gondolin'
+     */
+    readonly backend?: ExecutionEnvBackend;
+    /** Disposable seeded-copy mount dir for a booted VM (never the live DBs). */
+    readonly seededCopyDir?: string;
+    /** Optional explicit budget overrides (PRs/worktrees always clamped to 1). */
+    readonly budget?: Partial<SelfImproveBudget>;
+    /**
+     * A pre-flight architectural-gate signal. When this resolves `true` the
+     * circuit-breaker trips with `gateRed` BEFORE any persist/egress (never propose
+     * a fix that itself regresses a gate). Injected so the engine stays pure of the
+     * `cleo check arch` shell-out (the cleo handler supplies it); omitted ⇒ assumed green.
+     */
+    readonly gateRedCheck?: () => Promise<boolean>;
+    /** Test seam: inject a DHQ adapter (defaults to the real leased adapter). */
+    readonly adapter?: DhqAdapter;
+    /** Test seam: inject the guard backing the in-process fallback env. */
+    readonly guard?: ToolGuard;
+    /** Test seam: inject the run id (defaults to a timestamped id). */
+    readonly runId?: string;
+    /** Test seam: inject a clock (defaults to {@link Date.now}). */
+    readonly now?: () => number;
+}
+/** The terminal status of a self-improvement run. */
+export type RunOutcome = 
+/** Replay matched the golden — no regression, no DHQ, no PR. */
+'green'
+/** Regression found; in dry-run mode (no write / no PR). */
+ | 'regression-dry-run'
+/** Regression found; DHQ written + draft PR opened (execute mode). */
+ | 'regression-acted'
+/** The circuit-breaker halted the run. */
+ | 'halted';
+/** The structured result of one {@link runSelfImprove} call. */
+export interface SelfImproveResult {
+    /** The terminal outcome. */
+    readonly outcome: RunOutcome;
+    /** The scenario replayed. */
+    readonly scenario: string;
+    /** The run id (ties any DHQ row to this run). */
+    readonly runId: string;
+    /** Whether mutation/egress was permitted (`execute`). */
+    readonly executed: boolean;
+    /** The detected regressions (empty on a green run). */
+    readonly regressions: readonly DiffEntry[];
+    /** The idempotency `question_hash` for the regression set, or `null` when green. */
+    readonly questionHash: string | null;
+    /** The draft-PR egress result, or `null` when none fired (green / dry-run-no-egress). */
+    readonly draftPr: DraftPrResult | null;
+    /** The final circuit-breaker state. */
+    readonly breaker: CircuitBreakerState;
+}
+/**
+ * Run ONE self-improvement loop iteration.
+ *
+ * Boots one sandbox, replays the scenario, diffs vs the golden, and — ONLY when
+ * `opts.execute` is set AND a regression is found AND the circuit-breaker is closed —
+ * emits one leased DHQ row and opens one draft PR. Honors the budget caps and the
+ * circuit-breaker throughout (a tripped breaker short-circuits persist + egress to
+ * a no-op report).
+ *
+ * @param opts - See {@link RunSelfImproveOptions}.
+ * @returns The structured {@link SelfImproveResult}.
+ *
+ * @example
+ * ```ts
+ * // dry-run (default): replay + diff + report, no write, no PR
+ * const res = await runSelfImprove({ scenario: 'dhq-replay-find', dispatch });
+ * // execute: write a leased DHQ + open ONE draft PR on regression
+ * const acted = await runSelfImprove({ scenario: 'dhq-replay-find', dispatch, execute: true });
+ * ```
+ */
+export declare function runSelfImprove(opts: RunSelfImproveOptions): Promise<SelfImproveResult>;
+export { DEFAULT_BUDGET };
+//# sourceMappingURL=run-loop.d.ts.map

package/dist/selfimprove/run-loop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-loop.d.ts","sourceRoot":"","sources":["../../src/selfimprove/run-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAGH,OAAO,EAAE,KAAK,mBAAmB,EAAuB,MAAM,oCAAoC,CAAC;AAGnG,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAGL,KAAK,mBAAmB,EACxB,cAAc,EAEd,KAAK,iBAAiB,EACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,KAAK,aAAa,EAAe,MAAM,eAAe,CAAC;AAChE,OAAO,EAAuB,KAAK,SAAS,EAAiB,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,KAAK,cAAc,EAAkB,MAAM,aAAa,CAAC;AAGlE,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;IAC9B,uEAAuE;IACvE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,qDAAqD;AACrD,MAAM,MAAM,UAAU;AACpB,gEAAgE;AAC9D,OAAO;AACT,4DAA4D;GAC1D,oBAAoB;AACtB,sEAAsE;GACpE,kBAAkB;AACpB,0CAA0C;GACxC,QAAQ,CAAC;AAEb,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,4BAA4B;IAC5B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,6BAA6B;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,uDAAuD;IACvD,QAAQ,CAAC,WAAW,EAAE,SAAS,SAAS,EAAE,CAAC;IAC3C,oFAAoF;IACpF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,yFAAyF;IACzF,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IACvC,uCAAuC;IACvC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;CACvC;AAcD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8J5F;AA2CD,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/selfimprove/run-loop.js

@@ -0,0 +1,240 @@
+/**
+ * Self-improvement loop engine entry (T11889 · T11889-C).
+ *
+ * {@link runSelfImprove} is the CORE engine the thin `cleo selfimprove run` CLI
+ * verb delegates to. It orchestrates the full walking skeleton:
+ *
+ *   1. **boot ONE sandbox** via
+ *      {@link "../llm/pi/resolve-execution-env.js".resolveExecutionEnv} (prefers the
+ *      Gondolin micro-VM; degrades to the in-process `GuardedExecutionEnv` in CI) —
+ *      counted against the `maxWorktrees = 1` budget;
+ *   2. **replay** the canned scenario in-process via the injected
+ *      {@link "./replay.js".ReplayDispatch} port (the cleo handler supplies the real
+ *      adapter; the default scenario is `query`-only so the replay never mutates);
+ *   3. **diff** the captured envelopes vs the golden
+ *      ({@link "./envelope-diff.js".diffEnvelopes}) — zero regressions ⇒ a SILENT,
+ *      no-write green run;
+ *   4. on a regression, **emit ONE DHQ** row via the leased
+ *      {@link "./dhq-adapter.js".DhqAdapter} (UPSERT under
+ *      `withWriterLease('project','bulk',…)`) — ONLY when `execute` is set;
+ *   5. **open ONE DRAFT PR** ({@link "./draft-pr.js".openDraftPr}, dry-run unless
+ *      `execute`) and record its URL back on the DHQ row.
+ *
+ * Self-dogfooding guardrails (NON-NEGOTIABLE, P5 spec §B.7):
+ *   - **Default OFF.** Mutation + egress require `opts.execute === true`. Without
+ *     it the loop runs DRY-RUN: replay + diff + report, NO DB write, NO PR.
+ *   - **Circuit-breaker** ({@link "./budget.js".CircuitBreaker}) HALTS the run on
+ *     gate-RED, a `require`-mode lease throw (`LeaseUnavailableError`), budget
+ *     overrun, or a DB error from the leased section. It does NOT trip on
+ *     "daemon OFF" (the normal `local`-mode state).
+ *   - **Budget caps** (in-code): `maxTokens` / `maxUsd` / `maxPrs = 1` /
+ *     `maxWorktrees = 1`, checked PRE-FLIGHT before each costed step. `MemoryMax=32G`
+ *     is an operational launch-wrapper, not an in-code cap.
+ *   - **NO autonomous fix-gen, NO auto-merge, NO end-user mode in v1.** The loop
+ *     surfaces regressions as DHQs + draft PRs; a human drives the fix.
+ *
+ * CORE-first: this engine lives in `core` and owns the `ReplayDispatch` port TYPE;
+ * the cleo dispatch handler supplies the concrete adapter (dependency inversion —
+ * `core` never imports the cleo-resident dispatcher). Import-time side-effect-free.
+ *
+ * @module @cleocode/core/selfimprove/run-loop
+ * @epic T11889
+ * @task T11913
+ */
+import { resolveExecutionEnv } from '../llm/pi/resolve-execution-env.js';
+import { resolveOrCwd } from '../paths.js';
+import { LeaseUnavailableError } from '../store/writer-lease.js';
+import { createToolGuard } from '../tools/guard.js';
+import { CircuitBreaker, DEFAULT_BUDGET, resolveBudget, } from './budget.js';
+import { createDhqAdapter } from './dhq-adapter.js';
+import { openDraftPr } from './draft-pr.js';
+import { computeQuestionHash, diffEnvelopes } from './envelope-diff.js';
+import { replayScenario } from './replay.js';
+import { loadScenario } from './scenario.js';
+/**
+ * Lazily-resolved module logger (import-time side-effect-free).
+ */
+let cachedLogger;
+async function getModuleLogger() {
+    if (cachedLogger === undefined) {
+        const { getLogger } = await import('../logger.js');
+        cachedLogger = getLogger('selfimprove-run-loop');
+    }
+    return cachedLogger;
+}
+/**
+ * Run ONE self-improvement loop iteration.
+ *
+ * Boots one sandbox, replays the scenario, diffs vs the golden, and — ONLY when
+ * `opts.execute` is set AND a regression is found AND the circuit-breaker is closed —
+ * emits one leased DHQ row and opens one draft PR. Honors the budget caps and the
+ * circuit-breaker throughout (a tripped breaker short-circuits persist + egress to
+ * a no-op report).
+ *
+ * @param opts - See {@link RunSelfImproveOptions}.
+ * @returns The structured {@link SelfImproveResult}.
+ *
+ * @example
+ * ```ts
+ * // dry-run (default): replay + diff + report, no write, no PR
+ * const res = await runSelfImprove({ scenario: 'dhq-replay-find', dispatch });
+ * // execute: write a leased DHQ + open ONE draft PR on regression
+ * const acted = await runSelfImprove({ scenario: 'dhq-replay-find', dispatch, execute: true });
+ * ```
+ */
+export async function runSelfImprove(opts) {
+    const logger = await getModuleLogger();
+    const execute = opts.execute === true;
+    const backend = opts.backend ?? 'gondolin';
+    const now = opts.now ?? (() => Date.now());
+    const runId = opts.runId ?? `selfimprove-${now()}`;
+    const budget = resolveBudget(opts.budget ?? {});
+    const breaker = new CircuitBreaker(budget);
+    const adapter = opts.adapter ?? createDhqAdapter({ cwd: opts.cwd, now });
+    const halted = (scenario, regressions, questionHash) => ({
+        outcome: 'halted',
+        scenario,
+        runId,
+        executed: execute,
+        regressions,
+        questionHash,
+        draftPr: null,
+        breaker: breaker.state,
+    });
+    // ── 1. boot ONE sandbox (counts against maxWorktrees=1) ─────────────────────
+    let loaded;
+    try {
+        breaker.chargeOrTrip({ worktrees: 1 });
+        loaded = await loadScenario(opts.scenario);
+    }
+    catch (err) {
+        return tripFromError(breaker, err, logger, opts.scenario, runId, execute);
+    }
+    const guard = opts.guard ?? createToolGuard({ mode: 'enforce' });
+    const workspaceRoot = resolveOrCwd(opts.cwd);
+    const env = await resolveExecutionEnv({
+        backend,
+        guard,
+        workspaceRoot,
+        ...(opts.seededCopyDir !== undefined ? { seededCopyDir: opts.seededCopyDir } : {}),
+    });
+    try {
+        // ── 2. replay (query-only default — no mutate path fires) ─────────────────
+        const replayed = await replayScenario(loaded.scenario, opts.dispatch);
+        // ── 3. diff vs golden ─────────────────────────────────────────────────────
+        const diff = diffEnvelopes(loaded.scenario.ops, replayed, loaded.golden.envelopes);
+        if (diff.regressions.length === 0) {
+            logger.debug({ scenario: opts.scenario, runId }, 'self-improve run green — no regression');
+            return {
+                outcome: 'green',
+                scenario: opts.scenario,
+                runId,
+                executed: execute,
+                regressions: [],
+                questionHash: null,
+                draftPr: null,
+                breaker: breaker.state,
+            };
+        }
+        const questionHash = computeQuestionHash(diff);
+        // Pre-flight gate check — never act on a fix that would itself regress a gate.
+        if (opts.gateRedCheck !== undefined && (await opts.gateRedCheck())) {
+            breaker.trip('gateRed', 'cleo check arch --strict reported RED before persist/egress');
+            logger.warn({ scenario: opts.scenario, runId }, 'self-improve halted: architectural gate RED');
+            return halted(opts.scenario, diff.regressions, questionHash);
+        }
+        // ── default-OFF gate: no write / no PR without --execute ───────────────────
+        if (!execute) {
+            logger.info({ scenario: opts.scenario, runId, regressions: diff.regressions.length }, 'self-improve regression detected (DRY-RUN — no DHQ write, no PR; pass --execute to act)');
+            return {
+                outcome: 'regression-dry-run',
+                scenario: opts.scenario,
+                runId,
+                executed: false,
+                regressions: diff.regressions,
+                questionHash,
+                draftPr: null,
+                breaker: breaker.state,
+            };
+        }
+        // ── 4. emit ONE leased DHQ (require-mode lease throw ⇒ breaker trip) ────────
+        try {
+            await adapter.upsertOpenDhq({
+                dhqId: `DHQ-${questionHash.slice(0, 8)}`,
+                scenario: opts.scenario,
+                questionHash,
+                title: `selfimprove regression in '${opts.scenario}' (${diff.regressions.length} path(s))`,
+                regressionJson: JSON.stringify(diff),
+                severity: null,
+                runId,
+            });
+        }
+        catch (err) {
+            return tripFromError(breaker, err, logger, opts.scenario, runId, execute, diff.regressions, questionHash);
+        }
+        // ── 5. open ONE DRAFT PR (counts against maxPrs=1) + record url back ────────
+        let draftPr = null;
+        try {
+            breaker.chargeOrTrip({ prs: 1 });
+            draftPr = await openDraftPr({
+                scenario: opts.scenario,
+                diffPath: `selfimprove-${opts.scenario}.patch`,
+                title: `fix(selfimprove): ${opts.scenario} regression`,
+                body: `Auto-detected regression in the \`${opts.scenario}\` dogfood scenario (run ${runId}).`,
+                execute,
+                ...(opts.cwd !== undefined ? { cwd: opts.cwd } : {}),
+            });
+            if (draftPr.kind === 'ok') {
+                await adapter.recordPrUrl(questionHash, draftPr.prUrl);
+            }
+        }
+        catch (err) {
+            return tripFromError(breaker, err, logger, opts.scenario, runId, execute, diff.regressions, questionHash);
+        }
+        return {
+            outcome: 'regression-acted',
+            scenario: opts.scenario,
+            runId,
+            executed: true,
+            regressions: diff.regressions,
+            questionHash,
+            draftPr,
+            breaker: breaker.state,
+        };
+    }
+    finally {
+        await env.cleanup();
+    }
+}
+/**
+ * Trip the breaker from a thrown error, classifying the reason, and return a
+ * `halted` result. A {@link LeaseUnavailableError} maps to `leaseUnavailable`; a
+ * {@link "./budget.js".BudgetExceededError} (already self-trips) maps to
+ * `budgetOverrun`; everything else from a write path maps to `dbError`.
+ */
+function tripFromError(breaker, err, logger, scenario, runId, executed, regressions = [], questionHash = null) {
+    let reason = 'dbError';
+    if (err instanceof LeaseUnavailableError) {
+        reason = 'leaseUnavailable';
+    }
+    else if (err !== null &&
+        typeof err === 'object' &&
+        err.code === 'E_SELFIMPROVE_BUDGET_EXCEEDED') {
+        reason = 'budgetOverrun';
+    }
+    const detail = err instanceof Error ? err.message : String(err);
+    breaker.trip(reason, detail);
+    logger.warn({ scenario, runId, reason, detail }, 'self-improve circuit-breaker tripped');
+    return {
+        outcome: 'halted',
+        scenario,
+        runId,
+        executed,
+        regressions,
+        questionHash,
+        draftPr: null,
+        breaker: breaker.state,
+    };
+}
+export { DEFAULT_BUDGET };
+//# sourceMappingURL=run-loop.js.map

package/dist/selfimprove/run-loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-loop.js","sourceRoot":"","sources":["../../src/selfimprove/run-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAGH,OAAO,EAA4B,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAkB,MAAM,mBAAmB,CAAC;AACpE,OAAO,EACL,cAAc,EAGd,cAAc,EACd,aAAa,GAEd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAmB,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAsB,WAAW,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAkB,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAuB,cAAc,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAuB,YAAY,EAAE,MAAM,eAAe,CAAC;AAgFlE;;GAEG;AACH,IAAI,YAAgC,CAAC;AACrC,KAAK,UAAU,eAAe;IAC5B,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACnD,YAAY,GAAG,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAA2B;IAC9D,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,eAAe,GAAG,EAAE,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAG,CACb,QAAgB,EAChB,WAAiC,EACjC,YAA2B,EACR,EAAE,CAAC,CAAC;QACvB,OAAO,EAAE,QAAQ;QACjB,QAAQ;QACR,KAAK;QACL,QAAQ,EAAE,OAAO;QACjB,WAAW;QACX,YAAY;QACZ,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,OAAO,CAAC,KAAK;KACvB,CAAC,CAAC;IAEH,+EAA+E;IAC/E,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC;QACpC,OAAO;QACP,KAAK;QACL,aAAa;QACb,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEtE,6EAA6E;QAC7E,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,wCAAwC,CAAC,CAAC;YAC3F,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK;gBACL,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,EAAE;gBACf,YAAY,EAAE,IAAI;gBAClB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO,CAAC,KAAK;aACvB,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE/C,+EAA+E;QAC/E,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,6DAA6D,CAAC,CAAC;YACvF,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,EAClC,6CAA6C,CAC9C,CAAC;YACF,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC/D,CAAC;QAED,8EAA8E;QAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EACxE,yFAAyF,CAC1F,CAAC;YACF,OAAO;gBACL,OAAO,EAAE,oBAAoB;gBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK;gBACL,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO,CAAC,KAAK;aACvB,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1B,KAAK,EAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY;gBACZ,KAAK,EAAE,8BAA8B,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,WAAW;gBAC1F,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBACpC,QAAQ,EAAE,IAAI;gBACd,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAClB,OAAO,EACP,GAAG,EACH,MAAM,EACN,IAAI,CAAC,QAAQ,EACb,KAAK,EACL,OAAO,EACP,IAAI,CAAC,WAAW,EAChB,YAAY,CACb,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,IAAI,OAAO,GAAyB,IAAI,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACjC,OAAO,GAAG,MAAM,WAAW,CAAC;gBAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,eAAe,IAAI,CAAC,QAAQ,QAAQ;gBAC9C,KAAK,EAAE,qBAAqB,IAAI,CAAC,QAAQ,aAAa;gBACtD,IAAI,EAAE,qCAAqC,IAAI,CAAC,QAAQ,4BAA4B,KAAK,IAAI;gBAC7F,OAAO;gBACP,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,MAAM,OAAO,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAClB,OAAO,EACP,GAAG,EACH,MAAM,EACN,IAAI,CAAC,QAAQ,EACb,KAAK,EACL,OAAO,EACP,IAAI,CAAC,WAAW,EAChB,YAAY,CACb,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK;YACL,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY;YACZ,OAAO;YACP,OAAO,EAAE,OAAO,CAAC,KAAK;SACvB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,OAAuB,EACvB,GAAY,EACZ,MAAc,EACd,QAAgB,EAChB,KAAa,EACb,QAAiB,EACjB,cAAoC,EAAE,EACtC,eAA8B,IAAI;IAElC,IAAI,MAAM,GAAyB,SAAS,CAAC;IAC7C,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;QACzC,MAAM,GAAG,kBAAkB,CAAC;IAC9B,CAAC;SAAM,IACL,GAAG,KAAK,IAAI;QACZ,OAAO,GAAG,KAAK,QAAQ;QACtB,GAAyB,CAAC,IAAI,KAAK,+BAA+B,EACnE,CAAC;QACD,MAAM,GAAG,eAAe,CAAC;IAC3B,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,sCAAsC,CAAC,CAAC;IACzF,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,QAAQ;QACR,KAAK;QACL,QAAQ;QACR,WAAW;QACX,YAAY;QACZ,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,OAAO,CAAC,KAAK;KACvB,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}