@codyswann/lisa 2.261.0 → 2.263.0

package/dist/health/contract.d.ts

@@ -0,0 +1,56 @@
+export declare const HEALTH_SCHEDULE_VALUES: readonly ["off", "daily", "weekly"];
+/** Supported unattended health-run cadence. */
+export type HealthSchedule = (typeof HEALTH_SCHEDULE_VALUES)[number];
+/** Origin of one health finding. */
+export type HealthLayer = "deterministic" | "agentic";
+/** Outcome of one health check. */
+export type HealthStatus = "pass" | "warn" | "fail";
+/** Scope executed by a health run. */
+export type HealthMode = "deterministic" | "full";
+/** Canonical aggregate health verdict. */
+export type HealthVerdict = "in band" | "drift detected";
+/** One bounded, attributable health-check result. */
+export interface HealthFinding {
+    readonly check: string;
+    readonly layer: HealthLayer;
+    readonly status: HealthStatus;
+    readonly reason: string;
+}
+/** Derived zero-filled counts and verdict. */
+export interface HealthSummary {
+    readonly verdict: HealthVerdict;
+    readonly counts: Readonly<{
+        pass: number;
+        warn: number;
+        fail: number;
+    }>;
+}
+/** Complete immutable Health v1 result envelope. */
+export interface HealthResult {
+    readonly schemaVersion: 1;
+    readonly runId: string;
+    readonly mode: HealthMode;
+    readonly startedAt: string;
+    readonly completedAt: string;
+    readonly findings: readonly HealthFinding[];
+    readonly summary: HealthSummary;
+}
+/**
+ * Validate a health schedule value.
+ * @param value - Untrusted schedule candidate
+ * @returns Validated closed schedule value
+ */
+export declare function validateHealthSchedule(value: unknown): HealthSchedule;
+/**
+ * Derive zero-filled counts and the canonical verdict.
+ * @param findings - Untrusted finding collection
+ * @returns Frozen canonical summary
+ */
+export declare function summarizeHealthFindings(findings: unknown): HealthSummary;
+/**
+ * Validate untrusted data into a detached, deeply frozen Health v1 result.
+ * @param candidate - Untrusted result envelope
+ * @returns Frozen validated Health v1 result
+ */
+export declare function validateHealthResult(candidate: unknown): HealthResult;
+//# sourceMappingURL=contract.d.ts.map

package/dist/health/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/health/contract.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,sBAAsB,qCAAsC,CAAC;AAC1E,+CAA+C;AAC/C,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,oCAAoC;AACpC,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,SAAS,CAAC;AACtD,mCAAmC;AACnC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AACpD,sCAAsC;AACtC,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,MAAM,CAAC;AAClD,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAEzD,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzE;AAED,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAkBD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAKrE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,OAAO,GAAG,aAAa,CAaxE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,OAAO,GAAG,YAAY,CA6CrE"}

package/dist/health/contract.js

@@ -0,0 +1,153 @@
+/** Strict executable contract for Health v1 results and scheduling. */
+import { hasUnsafeTextCharacter, readStrictDenseArray, readStrictProperty as read, requireBoundedMachineId, requireCanonicalUtcTimestamp, requireClosedString as requireEnum, requireStrictRecord as requireRecord, } from "./strict-validation.js";
+export const HEALTH_SCHEDULE_VALUES = ["off", "daily", "weekly"];
+const RESULT_FIELDS = [
+    "schemaVersion",
+    "runId",
+    "mode",
+    "startedAt",
+    "completedAt",
+    "findings",
+    "summary",
+];
+const FINDING_FIELDS = ["check", "layer", "status", "reason"];
+const SUMMARY_FIELDS = ["verdict", "counts"];
+const COUNT_FIELDS = ["pass", "warn", "fail"];
+const MAX_FINDINGS = 200;
+const MAX_ID_BYTES = 128;
+const MAX_REASON_BYTES = 2_000;
+/**
+ * Validate a health schedule value.
+ * @param value - Untrusted schedule candidate
+ * @returns Validated closed schedule value
+ */
+export function validateHealthSchedule(value) {
+    if (!HEALTH_SCHEDULE_VALUES.includes(value)) {
+        throw new Error("Invalid health.schedule: expected off, daily, or weekly");
+    }
+    return value;
+}
+/**
+ * Derive zero-filled counts and the canonical verdict.
+ * @param findings - Untrusted finding collection
+ * @returns Frozen canonical summary
+ */
+export function summarizeHealthFindings(findings) {
+    const validated = requireFindings(findings);
+    const counts = validated.reduce((current, finding) => ({
+        ...current,
+        [finding.status]: current[finding.status] + 1,
+    }), { pass: 0, warn: 0, fail: 0 });
+    return Object.freeze({
+        verdict: counts.fail > 0 ? "drift detected" : "in band",
+        counts: Object.freeze(counts),
+    });
+}
+/**
+ * Validate untrusted data into a detached, deeply frozen Health v1 result.
+ * @param candidate - Untrusted result envelope
+ * @returns Frozen validated Health v1 result
+ */
+export function validateHealthResult(candidate) {
+    const input = requireRecord(candidate, RESULT_FIELDS, "HealthResult");
+    if (read(input, "schemaVersion") !== 1) {
+        throw new Error("Invalid schemaVersion: expected 1");
+    }
+    const runId = requireBoundedMachineId(read(input, "runId"), "runId", MAX_ID_BYTES);
+    const mode = requireEnum(read(input, "mode"), ["deterministic", "full"], "mode");
+    const startedAt = requireCanonicalUtcTimestamp(read(input, "startedAt"), "startedAt");
+    const completedAt = requireCanonicalUtcTimestamp(read(input, "completedAt"), "completedAt");
+    if (completedAt < startedAt) {
+        throw new Error("Invalid completedAt: precedes startedAt");
+    }
+    const findings = requireFindings(read(input, "findings"));
+    const supplied = requireSummary(read(input, "summary"));
+    const derived = summarizeHealthFindings(findings);
+    assertModeLayers(mode, findings);
+    if (supplied.verdict !== derived.verdict ||
+        COUNT_FIELDS.some(key => supplied.counts[key] !== derived.counts[key])) {
+        throw new Error("Invalid summary: verdict or counts do not match findings");
+    }
+    return Object.freeze({
+        schemaVersion: 1,
+        runId,
+        mode,
+        startedAt,
+        completedAt,
+        findings: Object.freeze(findings),
+        summary: derived,
+    });
+}
+/**
+ * Validate and detach a non-empty finding list.
+ * @param value - Untrusted finding collection
+ * @returns Detached validated findings
+ */
+function requireFindings(value) {
+    const findings = readStrictDenseArray(value, 1, MAX_FINDINGS, "findings").map((candidate, index) => requireFinding(candidate, index));
+    const checks = findings.map(finding => finding.check);
+    if (new Set(checks).size !== checks.length) {
+        throw new Error("Invalid findings: check identifiers must be unique");
+    }
+    return findings;
+}
+/**
+ * Validate one finding.
+ * @param candidate - Untrusted finding candidate
+ * @param index - Finding index used in validation messages
+ * @returns Frozen validated finding
+ */
+function requireFinding(candidate, index) {
+    const input = requireRecord(candidate, FINDING_FIELDS, `findings[${index}]`);
+    const reason = read(input, "reason");
+    if (typeof reason !== "string" ||
+        reason.trim() !== reason ||
+        reason.length === 0 ||
+        Buffer.byteLength(reason, "utf8") > MAX_REASON_BYTES ||
+        hasUnsafeTextCharacter(reason)) {
+        throw new Error(`Invalid findings[${index}].reason: expected readable text`);
+    }
+    return Object.freeze({
+        check: requireBoundedMachineId(read(input, "check"), `findings[${index}].check`, MAX_ID_BYTES),
+        layer: requireEnum(read(input, "layer"), ["deterministic", "agentic"], `findings[${index}].layer`),
+        status: requireEnum(read(input, "status"), ["pass", "warn", "fail"], `findings[${index}].status`),
+        reason,
+    });
+}
+/**
+ * Validate supplied summary shape and scalar values before comparison.
+ * @param value - Untrusted summary candidate
+ * @returns Frozen validated supplied summary
+ */
+function requireSummary(value) {
+    const summary = requireRecord(value, SUMMARY_FIELDS, "summary");
+    const counts = requireRecord(read(summary, "counts"), COUNT_FIELDS, "summary.counts");
+    const normalizedCounts = Object.fromEntries(COUNT_FIELDS.map(field => {
+        const count = read(counts, field);
+        if (!Number.isSafeInteger(count) || count < 0) {
+            throw new Error(`Invalid summary.counts.${field}: expected a non-negative integer`);
+        }
+        return [field, count];
+    }));
+    return Object.freeze({
+        verdict: requireEnum(read(summary, "verdict"), ["in band", "drift detected"], "summary.verdict"),
+        counts: Object.freeze(normalizedCounts),
+    });
+}
+/**
+ * Enforce mode meaning rather than treating it as decorative metadata.
+ * @param mode - Validated run mode
+ * @param findings - Validated run findings
+ */
+function assertModeLayers(mode, findings) {
+    const layers = new Set(findings.map(finding => finding.layer));
+    if (mode === "deterministic" &&
+        (layers.size !== 1 || !layers.has("deterministic"))) {
+        throw new Error("Invalid findings: deterministic mode permits deterministic findings only");
+    }
+    if (mode === "full" &&
+        (!layers.has("deterministic") || !layers.has("agentic"))) {
+        throw new Error("Invalid findings: full mode requires both deterministic and agentic findings");
+    }
+}
+//# sourceMappingURL=contract.js.map

package/dist/health/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/health/contract.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,IAAI,IAAI,EAC1B,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,IAAI,WAAW,EAClC,mBAAmB,IAAI,aAAa,GACrC,MAAM,wBAAwB,CAAC;AAEhC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAqC1E,MAAM,aAAa,GAAG;IACpB,eAAe;IACf,OAAO;IACP,MAAM;IACN,WAAW;IACX,aAAa;IACb,UAAU;IACV,SAAS;CACD,CAAC;AACX,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AACvE,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAU,CAAC;AACtD,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AACvD,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAuB,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAuB,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAiB;IACvD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAC7B,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACrB,GAAG,OAAO;QACV,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;KAC9C,CAAC,EACF,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAC9B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QACvD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAkB;IACrD,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,KAAK,GAAG,uBAAuB,CACnC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EACpB,OAAO,EACP,YAAY,CACb,CAAC;IACF,MAAM,IAAI,GAAG,WAAW,CACtB,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EACnB,CAAC,eAAe,EAAE,MAAM,CAAU,EAClC,MAAM,CACP,CAAC;IACF,MAAM,SAAS,GAAG,4BAA4B,CAC5C,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,EACxB,WAAW,CACZ,CAAC;IACF,MAAM,WAAW,GAAG,4BAA4B,CAC9C,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,EAC1B,aAAa,CACd,CAAC;IACF,IAAI,WAAW,GAAG,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClD,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjC,IACE,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QACpC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EACtE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,CAAC;QAChB,KAAK;QACL,IAAI;QACJ,SAAS;QACT,WAAW;QACX,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,GAAG,CAC3E,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CACvD,CAAC;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,SAAkB,EAAE,KAAa;IACvD,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,KAAK,GAAG,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrC,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM;QACxB,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB;QACpD,sBAAsB,CAAC,MAAM,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oBAAoB,KAAK,kCAAkC,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,uBAAuB,CAC5B,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EACpB,YAAY,KAAK,SAAS,EAC1B,YAAY,CACb;QACD,KAAK,EAAE,WAAW,CAChB,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EACpB,CAAC,eAAe,EAAE,SAAS,CAAU,EACrC,YAAY,KAAK,SAAS,CAC3B;QACD,MAAM,EAAE,WAAW,CACjB,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EACrB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,EACjC,YAAY,KAAK,UAAU,CAC5B;QACD,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,aAAa,CAC1B,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EACvB,YAAY,EACZ,gBAAgB,CACjB,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,CACzC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,mCAAmC,CACnE,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC,CAC6C,CAAC;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,WAAW,CAClB,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EACxB,CAAC,SAAS,EAAE,gBAAgB,CAAU,EACtC,iBAAiB,CAClB;QACD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CACvB,IAAgB,EAChB,QAAkC;IAElC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,IACE,IAAI,KAAK,eAAe;QACxB,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EACnD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,IACE,IAAI,KAAK,MAAM;QACf,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/health/directory-sync.d.ts

@@ -0,0 +1,17 @@
+/** Minimal directory handle used by the production opener and focused tests. */
+export interface DirectorySyncHandle {
+    readonly sync: () => Promise<void>;
+    readonly close: () => Promise<void>;
+}
+/** Injectable directory opener. */
+export type OpenDirectory = (directory: string, flags: string) => Promise<DirectorySyncHandle>;
+/**
+ * Flush a containing directory when the host filesystem supports it.
+ * Atomic rename protects ordinary crashes. A successful directory sync adds
+ * power-loss durability; known platform-level lack of support is best effort.
+ * Permission, device, and other real I/O failures remain fatal.
+ * @param directory - Directory containing the renamed target
+ * @param openDirectory - Injectable opener used by focused fault tests
+ */
+export declare function syncContainingDirectory(directory: string, openDirectory?: OpenDirectory): Promise<void>;
+//# sourceMappingURL=directory-sync.d.ts.map

package/dist/health/directory-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-sync.d.ts","sourceRoot":"","sources":["../../src/health/directory-sync.ts"],"names":[],"mappings":"AAGA,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,mCAAmC;AACnC,MAAM,MAAM,aAAa,GAAG,CAC1B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAiBlC;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EACjB,aAAa,GAAE,aAAoB,GAClC,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/health/directory-sync.js

@@ -0,0 +1,69 @@
+/** Best-effort directory durability without hiding genuine I/O failures. */
+import { open } from "node:fs/promises";
+const OPEN_UNSUPPORTED = new Set([
+    "EISDIR",
+    "EINVAL",
+    "ENOTSUP",
+    "EOPNOTSUPP",
+    "ENOSYS",
+]);
+const SYNC_UNSUPPORTED = new Set([
+    "EBADF",
+    "EINVAL",
+    "ENOTSUP",
+    "EOPNOTSUPP",
+    "ENOSYS",
+]);
+/**
+ * Flush a containing directory when the host filesystem supports it.
+ * Atomic rename protects ordinary crashes. A successful directory sync adds
+ * power-loss durability; known platform-level lack of support is best effort.
+ * Permission, device, and other real I/O failures remain fatal.
+ * @param directory - Directory containing the renamed target
+ * @param openDirectory - Injectable opener used by focused fault tests
+ */
+export async function syncContainingDirectory(directory, openDirectory = open) {
+    const handle = await tryOpenDirectory(directory, openDirectory);
+    if (handle === undefined)
+        return;
+    try {
+        await handle.sync();
+    }
+    catch (error) {
+        if (!hasCode(error, SYNC_UNSUPPORTED))
+            throw error;
+    }
+    finally {
+        await handle.close();
+    }
+}
+/**
+ * Open a directory or identify a host that does not expose directory opens.
+ * @param directory - Directory to open
+ * @param openDirectory - Platform directory opener
+ * @returns Open handle, or undefined when directory opens are unsupported
+ */
+async function tryOpenDirectory(directory, openDirectory) {
+    try {
+        return await openDirectory(directory, "r");
+    }
+    catch (error) {
+        if (hasCode(error, OPEN_UNSUPPORTED))
+            return undefined;
+        throw error;
+    }
+}
+/**
+ * Match a Node-style error code against a closed unsupported-code set.
+ * @param error - Candidate Node-style error
+ * @param codes - Closed set of recognized codes
+ * @returns Whether the error carries a recognized code
+ */
+function hasCode(error, codes) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "code" in error &&
+        typeof error.code === "string" &&
+        codes.has(error.code));
+}
+//# sourceMappingURL=directory-sync.js.map

package/dist/health/directory-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-sync.js","sourceRoot":"","sources":["../../src/health/directory-sync.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAcxC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,QAAQ;CACT,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,OAAO;IACP,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,QAAQ;CACT,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EACjB,gBAA+B,IAAI;IAEnC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAChE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC;YAAE,MAAM,KAAK,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,SAAiB,EACjB,aAA4B;IAE5B,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC;YAAE,OAAO,SAAS,CAAC;QACvD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,KAAc,EAAE,KAA0B;IACzD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CACtB,CAAC;AACJ,CAAC"}

package/dist/health/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./contract.js";
+export * from "./storage.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/health/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/health/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}

package/dist/health/index.js

@@ -0,0 +1,3 @@
+export * from "./contract.js";
+export * from "./storage.js";
+//# sourceMappingURL=index.js.map

package/dist/health/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/health/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}

package/dist/health/storage.d.ts

@@ -0,0 +1,39 @@
+import { type HealthResult } from "./contract.js";
+export declare const HEALTH_RESULT_PATH = ".lisa/health/latest.json";
+export declare const MAX_HEALTH_RESULT_BYTES: number;
+/** Non-throwing read outcome for persisted runtime health state. */
+export type HealthReadResult = {
+    readonly status: "available";
+    readonly result: HealthResult;
+    readonly lastRun: string;
+} | {
+    readonly status: "never-run";
+} | {
+    readonly status: "unreadable";
+    readonly reason: string;
+};
+/** Atomic write or monotonic no-op outcome. */
+export type HealthWriteResult = {
+    readonly status: "written";
+    readonly path: string;
+    readonly result: HealthResult;
+} | {
+    readonly status: "unchanged";
+    readonly path: string;
+    readonly result: HealthResult;
+};
+/**
+ * Read the canonical latest result without throwing for runtime-state faults.
+ * @param projectRoot - Project containing runtime health state
+ * @returns Available, never-run, or unreadable outcome
+ */
+export declare function readLatestHealthResult(projectRoot: string): Promise<HealthReadResult>;
+/**
+ * Validate and atomically publish a completed result. Writes are serialized,
+ * and an older or equal completion timestamp cannot replace a newer result.
+ * @param projectRoot - Project receiving runtime health state
+ * @param candidate - Untrusted completed result candidate
+ * @returns Written or monotonic unchanged outcome
+ */
+export declare function writeLatestHealthResult(projectRoot: string, candidate: unknown): Promise<HealthWriteResult>;
+//# sourceMappingURL=storage.d.ts.map

package/dist/health/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/health/storage.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,YAAY,EAAwB,MAAM,eAAe,CAAC;AAGxE,eAAO,MAAM,kBAAkB,6BAA6B,CAAC;AAC7D,eAAO,MAAM,uBAAuB,QAAa,CAAC;AAElD,oEAAoE;AACpE,MAAM,MAAM,gBAAgB,GACxB;IACE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,+CAA+C;AAC/C,MAAM,MAAM,iBAAiB,GACzB;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B,CAAC;AAEN;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAkB3B;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,iBAAiB,CAAC,CA4C5B"}

package/dist/health/storage.js

@@ -0,0 +1,262 @@
+/** Confined, bounded, atomic storage for the latest completed Health v1 run. */
+import * as fse from "fs-extra";
+import { lstat, open, realpath, rename, rm } from "node:fs/promises";
+import path from "node:path";
+import { withFileTargetLock } from "../core/learnings-lock.js";
+import { validateHealthResult } from "./contract.js";
+import { syncContainingDirectory } from "./directory-sync.js";
+export const HEALTH_RESULT_PATH = ".lisa/health/latest.json";
+export const MAX_HEALTH_RESULT_BYTES = 256 * 1024;
+/**
+ * Read the canonical latest result without throwing for runtime-state faults.
+ * @param projectRoot - Project containing runtime health state
+ * @returns Available, never-run, or unreadable outcome
+ */
+export async function readLatestHealthResult(projectRoot) {
+    try {
+        const target = await resolveReadTarget(projectRoot);
+        const payload = await readBoundedRegularFile(target);
+        if (payload === undefined)
+            return Object.freeze({ status: "never-run" });
+        const parsed = JSON.parse(payload);
+        const result = validateHealthResult(parsed);
+        return Object.freeze({
+            status: "available",
+            result,
+            lastRun: result.completedAt,
+        });
+    }
+    catch (error) {
+        return Object.freeze({
+            status: "unreadable",
+            reason: safeReadReason(error),
+        });
+    }
+}
+/**
+ * Validate and atomically publish a completed result. Writes are serialized,
+ * and an older or equal completion timestamp cannot replace a newer result.
+ * @param projectRoot - Project receiving runtime health state
+ * @param candidate - Untrusted completed result candidate
+ * @returns Written or monotonic unchanged outcome
+ */
+export async function writeLatestHealthResult(projectRoot, candidate) {
+    const result = validateHealthResult(candidate);
+    const serialized = serializeHealthResult(result);
+    const { directory, target } = await resolveWriteTarget(projectRoot);
+    return withFileTargetLock(target, async () => {
+        await assertSafeTarget(target);
+        const current = await readLatestHealthResult(projectRoot);
+        if (current.status === "available") {
+            const samePayload = serializeHealthResult(current.result) === serialized;
+            if (current.result.runId === result.runId) {
+                if (!samePayload) {
+                    throw new Error("Health result conflict: runId was reused");
+                }
+                return unchanged(target, current.result);
+            }
+            if (current.result.completedAt === result.completedAt) {
+                throw new Error("Health result conflict: completedAt is shared by different runs");
+            }
+            if (current.result.completedAt > result.completedAt) {
+                return unchanged(target, current.result);
+            }
+        }
+        const temporary = path.join(directory, `.${path.basename(target)}.${process.pid}.${crypto.randomUUID()}.tmp`);
+        try {
+            const handle = await open(temporary, "wx", 0o600);
+            try {
+                await handle.writeFile(serialized, "utf8");
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            await assertSafeTarget(target);
+            await rename(temporary, target);
+            await syncContainingDirectory(directory);
+        }
+        finally {
+            await rm(temporary, { force: true });
+        }
+        return Object.freeze({ status: "written", path: target, result });
+    });
+}
+/**
+ * Serialize once and reject over-budget output before filesystem mutation.
+ * @param result - Validated result
+ * @returns Canonical bounded JSON payload
+ */
+function serializeHealthResult(result) {
+    const serialized = `${JSON.stringify(result, null, 2)}\n`;
+    if (Buffer.byteLength(serialized, "utf8") > MAX_HEALTH_RESULT_BYTES) {
+        throw new Error("Health result exceeds 256 KiB");
+    }
+    return serialized;
+}
+/**
+ * Return the canonical idempotent no-write result.
+ * @param target - Canonical result path
+ * @param result - Existing persisted result
+ * @returns Frozen unchanged outcome
+ */
+function unchanged(target, result) {
+    return Object.freeze({ status: "unchanged", path: target, result });
+}
+/**
+ * Resolve an existing project root and canonical read target.
+ * @param projectRoot - Project containing runtime health state
+ * @returns Confined canonical target
+ */
+async function resolveReadTarget(projectRoot) {
+    const root = await requireProjectRoot(projectRoot);
+    const lisaDirectory = path.join(root, ".lisa");
+    const healthDirectory = path.join(lisaDirectory, "health");
+    if ((await statPath(lisaDirectory)) !== undefined) {
+        await assertConfinedDirectory(root, lisaDirectory);
+    }
+    if ((await statPath(healthDirectory)) !== undefined) {
+        await assertConfinedDirectory(root, healthDirectory);
+    }
+    return path.join(root, HEALTH_RESULT_PATH);
+}
+/**
+ * Create safe canonical parent directories and return write paths.
+ * @param projectRoot - Project receiving runtime health state
+ * @returns Confined parent directory and target
+ */
+async function resolveWriteTarget(projectRoot) {
+    const root = await requireProjectRoot(projectRoot);
+    const lisaDirectory = path.join(root, ".lisa");
+    const directory = path.join(lisaDirectory, "health");
+    await ensureSafeDirectory(root, lisaDirectory);
+    await ensureSafeDirectory(root, directory);
+    return { directory, target: path.join(directory, "latest.json") };
+}
+/**
+ * Resolve and verify a real directory root.
+ * @param projectRoot - Project-root candidate
+ * @returns Canonical real project root
+ */
+async function requireProjectRoot(projectRoot) {
+    const resolved = path.resolve(projectRoot);
+    const root = await realpath(resolved);
+    const metadata = await lstat(root);
+    if (!metadata.isDirectory()) {
+        throw new Error("Health project root is not a directory");
+    }
+    return root;
+}
+/**
+ * Create one directory only after its nearest existing parent stays confined.
+ * @param root - Canonical project root
+ * @param directory - Intended child directory
+ */
+async function ensureSafeDirectory(root, directory) {
+    if ((await statPath(directory)) !== undefined) {
+        await assertConfinedDirectory(root, directory);
+        return;
+    }
+    await assertConfinedDirectory(root, path.dirname(directory));
+    await fse.ensureDir(directory);
+    await assertConfinedDirectory(root, directory);
+}
+/**
+ * Reject symlinked, special, or root-escaping storage parents.
+ * @param root - Canonical project root
+ * @param directory - Existing storage parent
+ */
+async function assertConfinedDirectory(root, directory) {
+    const metadata = await lstat(directory);
+    if (!metadata.isDirectory() || metadata.isSymbolicLink()) {
+        throw new Error("Unsafe health storage parent");
+    }
+    const actual = await realpath(directory);
+    if (actual !== root && !actual.startsWith(`${root}${path.sep}`)) {
+        throw new Error("Unsafe health storage parent escapes project root");
+    }
+}
+/**
+ * Reject an existing target unless it is a regular non-symlink file.
+ * @param target - Canonical result target
+ */
+async function assertSafeTarget(target) {
+    try {
+        const metadata = await lstat(target);
+        if (!metadata.isFile() || metadata.isSymbolicLink()) {
+            throw new Error("Unsafe health result target");
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+}
+/**
+ * Read a bounded stable regular-file inode.
+ * @param target - Canonical result target
+ * @returns Strict UTF-8 payload, or undefined when absent
+ */
+async function readBoundedRegularFile(target) {
+    try {
+        const before = await lstat(target);
+        if (!before.isFile() || before.isSymbolicLink()) {
+            throw new Error("Unsafe health result target");
+        }
+        if (before.size > MAX_HEALTH_RESULT_BYTES) {
+            throw new Error("Health result exceeds 256 KiB");
+        }
+        const handle = await open(target, "r");
+        try {
+            const opened = await handle.stat();
+            if (!opened.isFile() ||
+                opened.dev !== before.dev ||
+                opened.ino !== before.ino ||
+                opened.size > MAX_HEALTH_RESULT_BYTES) {
+                throw new Error("Health result changed during read");
+            }
+            const bytes = await handle.readFile();
+            return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
+/**
+ * Read path metadata without following symlinks.
+ * @param filePath - Filesystem path
+ * @returns Metadata, or undefined when absent
+ */
+async function statPath(filePath) {
+    try {
+        return await lstat(filePath);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
+/**
+ * Reduce runtime-state failures to a non-sensitive operator-readable reason.
+ * @param error - Read failure
+ * @returns Stable operator-facing reason
+ */
+function safeReadReason(error) {
+    const message = error instanceof Error ? error.message : "unknown error";
+    if (message.includes("schemaVersion"))
+        return "unsupported health result schema";
+    if (message.includes("256 KiB"))
+        return "health result exceeds size limit";
+    if (message.includes("Unsafe") || message.includes("changed during read")) {
+        return "unsafe health result storage";
+    }
+    return "malformed health result";
+}
+//# sourceMappingURL=storage.js.map

package/dist/health/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/health/storage.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAqB,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAC7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,CAAC;AAyBlD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC9C,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,WAAW;SAC5B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,SAAkB;IAElB,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACpE,OAAO,kBAAkB,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC;YACzE,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpD,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,SAAS,EACT,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,CACtE,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC3C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YACD,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,MAAoB;IACjD,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,uBAAuB,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,MAAoB;IACrD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IAClD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,uBAAuB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,uBAAuB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAC/B,WAAmB;IAEnB,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,mBAAmB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC/C,MAAM,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAY,EACZ,SAAiB;IAEjB,IAAI,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CACpC,IAAY,EACZ,SAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAAC,MAAc;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CACnC,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,GAAG,uBAAuB,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;gBAChB,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBACzB,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBACzB,MAAM,CAAC,IAAI,GAAG,uBAAuB,EACrC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,QAAQ,CACrB,QAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACzE,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QACnC,OAAO,kCAAkC,CAAC;IAC5C,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,kCAAkC,CAAC;IAC3E,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC1E,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,OAAO,yBAAyB,CAAC;AACnC,CAAC"}