@dsh-enhanced/assistant-automations 0.1.3

package/lib/proposals.js

@@ -0,0 +1,499 @@
+import { createHash } from 'node:crypto';
+import { isAbsolute } from 'node:path';
+import { ApprovalSettlementConflict, validateApprovalSettlement, } from '@dsh-enhanced/assistant-policy';
+import { AutomationDatabaseError, openAutomationDatabase } from './sqlite.js';
+import { AutomationStoreError, normalizeAutomationDefinition, } from './store.js';
+export class AutomationProposalStoreError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'AutomationProposalStoreError';
+    }
+}
+function hash(value) {
+    return createHash('sha256').update(JSON.stringify(value)).digest('hex');
+}
+function id(idempotencyKey) {
+    return `automation-${createHash('sha256').update(idempotencyKey).digest('hex').slice(0, 32)}`;
+}
+function approvalDispatch(value) {
+    if (value === null)
+        return undefined;
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        throw new AutomationProposalStoreError('invalid-state', 'automation proposal dispatch is not valid JSON');
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new AutomationProposalStoreError('invalid-state', 'automation proposal dispatch is invalid');
+    }
+    const route = parsed;
+    if (Object.keys(route).sort().join(',') !== 'bindingId,principal,sourceId,workspace'
+        || typeof route['sourceId'] !== 'string'
+        || !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/u.test(route['sourceId'])
+        || typeof route['bindingId'] !== 'string' || route['bindingId'].trim() === ''
+        || typeof route['workspace'] !== 'string' || !isAbsolute(route['workspace'])
+        || typeof route['principal'] !== 'string' || route['principal'].trim() === '') {
+        throw new AutomationProposalStoreError('invalid-state', 'automation proposal dispatch is invalid');
+    }
+    return Object.freeze({
+        sourceId: route['sourceId'],
+        bindingId: route['bindingId'],
+        workspace: route['workspace'],
+        principal: route['principal'],
+    });
+}
+function stored(row) {
+    if (!Number.isSafeInteger(row.ttl_ms) || row.ttl_ms <= 0) {
+        throw new AutomationProposalStoreError('invalid-state', 'automation proposal TTL is invalid');
+    }
+    return Object.freeze({
+        proposalId: row.id,
+        ...(row.policy_proposal_id === null ? {} : { policyProposalId: row.policy_proposal_id }),
+        idempotencyKey: row.idempotency_key,
+        requester: row.requester,
+        principal: row.principal,
+        ...(row.dispatch_json === null ? {} : { dispatch: approvalDispatch(row.dispatch_json) }),
+        requestHash: row.change_hash,
+        changeHash: hash(JSON.parse(row.change_json)),
+        mutation: Object.freeze(JSON.parse(row.change_json)),
+        status: row.status,
+        expiresAt: row.expires_at,
+        ttlMs: row.ttl_ms,
+        createdAt: row.created_at,
+        version: row.version,
+        ...(row.result_automation_id === null ? {} : { resultAutomationId: row.result_automation_id }),
+    });
+}
+export class AutomationProposalStore {
+    database;
+    now;
+    closed = false;
+    constructor(options) {
+        this.now = options.now ?? Date.now;
+        try {
+            this.database = openAutomationDatabase(options.path);
+        }
+        catch (error) {
+            if (error instanceof AutomationDatabaseError) {
+                throw new AutomationProposalStoreError(error.code, error.message);
+            }
+            throw error;
+        }
+    }
+    close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.database.close();
+    }
+    get(proposalId) {
+        const row = this.database.prepare('SELECT * FROM automation_proposals WHERE id = ?').get(proposalId);
+        return row === undefined ? undefined : stored(row);
+    }
+    /**
+     * List proposals still pending locally, oldest first, so a reconciler can pair
+     * them with their policy decision.
+     */
+    listPending(limit) {
+        if (!Number.isSafeInteger(limit) || limit <= 0 || limit > 1_000) {
+            throw new AutomationProposalStoreError('invalid-input', 'pending proposal limit must be between 1 and 1000');
+        }
+        const rows = this.database.prepare(`
+      SELECT * FROM automation_proposals WHERE status = 'pending'
+      ORDER BY updated_at, id LIMIT ?
+    `).all(limit);
+        return rows.map(row => stored(row));
+    }
+    prepare(input) {
+        const existingRow = this.database.prepare('SELECT * FROM automation_proposals WHERE id = ?').get(input.proposalId);
+        if (existingRow !== undefined) {
+            const existing = stored(existingRow);
+            if (existing.idempotencyKey !== input.idempotencyKey || existing.requester !== input.requester
+                || existing.principal !== input.principal || existing.requestHash !== input.requestHash
+                || existing.ttlMs !== input.ttlMs) {
+                throw new AutomationProposalStoreError('idempotency-conflict', 'automation proposal key was reused with different input');
+            }
+            return { proposal: existing, replayed: true };
+        }
+        const now = this.now();
+        this.database.prepare(`
+      INSERT INTO automation_proposals(
+        id, policy_proposal_id, idempotency_key, requester, principal, dispatch_json, change_hash, change_json,
+        status, expires_at, ttl_ms, result_automation_id, created_at, updated_at, version
+      ) VALUES (?, NULL, ?, ?, ?, ?, ?, ?, 'pending', ?, ?, NULL, ?, ?, 1)
+    `).run(input.proposalId, input.idempotencyKey, input.requester, input.principal, input.dispatch === undefined ? null : JSON.stringify(input.dispatch), input.requestHash, JSON.stringify(input.mutation), input.expiresAt, input.ttlMs, now, now);
+        return { proposal: this.get(input.proposalId), replayed: false };
+    }
+    /** Move an inspected, still-pending row behind older peers using a durable monotonic timestamp. */
+    deferPending(proposalId) {
+        const now = this.now();
+        this.database.prepare(`
+      UPDATE automation_proposals
+      SET updated_at = CASE WHEN updated_at >= ? THEN updated_at + 1 ELSE ? END
+      WHERE id = ? AND status = 'pending'
+    `).run(now, now, proposalId);
+    }
+    attachPolicy(proposalId, policyProposalId, expiresAt) {
+        const proposal = this.get(proposalId);
+        if (proposal === undefined)
+            throw new AutomationProposalStoreError('not-found', 'automation proposal was not found');
+        if (proposal.policyProposalId !== undefined && proposal.policyProposalId !== policyProposalId) {
+            throw new AutomationProposalStoreError('idempotency-conflict', 'automation proposal is attached to another policy proposal');
+        }
+        if (proposal.policyProposalId !== undefined && proposal.expiresAt !== expiresAt) {
+            throw new AutomationProposalStoreError('idempotency-conflict', 'automation proposal expiry differs from policy');
+        }
+        this.database.prepare(`
+      UPDATE automation_proposals SET policy_proposal_id = ?, expires_at = ?, updated_at = ? WHERE id = ?
+    `).run(policyProposalId, expiresAt, this.now(), proposalId);
+        return this.get(proposalId);
+    }
+    settle(input) {
+        const current = this.get(input.proposalId);
+        if (current === undefined)
+            throw new AutomationProposalStoreError('not-found', 'automation proposal was not found');
+        if (current.status !== 'pending') {
+            if (current.status !== input.status || current.version !== input.version
+                || current.resultAutomationId !== input.resultAutomationId) {
+                throw new AutomationProposalStoreError('invalid-state', 'automation proposal is already settled differently');
+            }
+            return { proposal: current, replayed: true };
+        }
+        this.database.prepare(`
+      UPDATE automation_proposals
+      SET status = ?, result_automation_id = ?, updated_at = ?, version = ?
+      WHERE id = ? AND status = 'pending'
+    `).run(input.status, input.resultAutomationId ?? null, this.now(), input.version, input.proposalId);
+        return { proposal: this.get(input.proposalId), replayed: false };
+    }
+}
+function validateIdentity(value, field) {
+    if (typeof value !== 'string' || value.trim() === '' || Buffer.byteLength(value, 'utf8') > 500) {
+        throw new AutomationProposalStoreError('invalid-input', `${field} is invalid`);
+    }
+}
+function diff(mutation) {
+    return JSON.stringify(mutation, null, 2);
+}
+function summary(mutation) {
+    return `${mutation.op} automation ${mutation.automationId}`;
+}
+function result(proposal, replayed, automations) {
+    const automation = proposal.resultAutomationId === undefined ? undefined : automations.get(proposal.resultAutomationId);
+    return Object.freeze({
+        proposalId: proposal.proposalId,
+        ...(proposal.policyProposalId === undefined ? {} : { policyProposalId: proposal.policyProposalId }),
+        status: proposal.status,
+        version: proposal.version,
+        expiresAt: proposal.expiresAt,
+        mutation: proposal.mutation,
+        diff: diff(proposal.mutation),
+        summary: summary(proposal.mutation),
+        replayed,
+        ...(automation === undefined ? {} : { automation }),
+    });
+}
+export class AutomationProposalManager {
+    automations;
+    proposals;
+    policy;
+    now;
+    constructor(automations, proposals, policy, now = Date.now) {
+        this.automations = automations;
+        this.proposals = proposals;
+        this.policy = policy;
+        this.now = now;
+    }
+    propose(input) {
+        validateIdentity(input.idempotencyKey, 'idempotencyKey');
+        validateIdentity(input.requester, 'requester');
+        validateIdentity(input.principal, 'principal');
+        if (!Number.isSafeInteger(input.ttlMs) || input.ttlMs <= 0) {
+            throw new AutomationProposalStoreError('invalid-input', 'proposal ttlMs must be positive');
+        }
+        const dispatch = input.dispatch === undefined
+            ? undefined
+            : approvalDispatch(JSON.stringify({
+                sourceId: input.dispatch.sourceId,
+                bindingId: input.dispatch.bindingId,
+                workspace: input.dispatch.workspace,
+                principal: input.dispatch.principal,
+            }));
+        if (dispatch !== undefined && dispatch.principal !== input.principal) {
+            throw new AutomationProposalStoreError('invalid-input', 'approval dispatch belongs to another principal');
+        }
+        let mutation;
+        if (input.mutation.op === 'create') {
+            validateIdentity(input.mutation.automationId, 'automationId');
+            mutation = Object.freeze({
+                op: 'create',
+                automationId: input.mutation.automationId,
+                definition: normalizeAutomationDefinition(input.mutation.definition),
+            });
+        }
+        else {
+            validateIdentity(input.mutation.automationId, 'automationId');
+            if (!Number.isSafeInteger(input.mutation.expectedVersion) || input.mutation.expectedVersion <= 0) {
+                throw new AutomationProposalStoreError('invalid-input', 'expectedVersion must be positive');
+            }
+            mutation = Object.freeze({
+                op: input.mutation.op,
+                automationId: input.mutation.automationId,
+                expectedVersion: input.mutation.expectedVersion,
+            });
+        }
+        const requestHash = hash({
+            idempotencyKey: input.idempotencyKey,
+            requester: input.requester,
+            principal: input.principal,
+            dispatch,
+            ttlMs: input.ttlMs,
+            mutation,
+        });
+        const proposalId = id(input.idempotencyKey);
+        const existing = this.proposals.get(proposalId);
+        let saved;
+        if (existing !== undefined) {
+            if (existing.requestHash !== requestHash) {
+                throw new AutomationProposalStoreError('idempotency-conflict', 'automation proposal key was reused');
+            }
+            saved = { proposal: existing, replayed: true };
+        }
+        else {
+            const current = this.automations.get(mutation.automationId);
+            if (mutation.op === 'create') {
+                if (current !== undefined) {
+                    throw new AutomationProposalStoreError('invalid-state', 'automation id already exists');
+                }
+            }
+            else {
+                if (current === undefined)
+                    throw new AutomationProposalStoreError('not-found', 'automation was not found');
+                if (current.version !== mutation.expectedVersion) {
+                    throw new AutomationProposalStoreError('invalid-state', 'automation version changed before proposal');
+                }
+            }
+            saved = this.proposals.prepare({
+                proposalId,
+                idempotencyKey: input.idempotencyKey,
+                requester: input.requester,
+                principal: input.principal,
+                ...(dispatch === undefined ? {} : { dispatch }),
+                requestHash,
+                mutation,
+                expiresAt: this.now() + input.ttlMs,
+                ttlMs: input.ttlMs,
+            });
+        }
+        if (saved.proposal.status !== 'pending' || saved.proposal.policyProposalId !== undefined) {
+            return result(saved.proposal, true, this.automations);
+        }
+        const recovered = this.recoverOrCreatePolicyProposal(saved.proposal);
+        if (recovered === undefined)
+            return this.settleSecurityConflict(saved.proposal, saved.replayed);
+        if (recovered.status !== 'pending') {
+            return this.settleValidated(recovered.proposal, recovered.snapshot, saved.replayed || recovered.replayed);
+        }
+        return result(recovered.proposal, saved.replayed || recovered.replayed, this.automations);
+    }
+    decide(input) {
+        let proposal = this.proposals.get(input.proposalId);
+        if (proposal === undefined)
+            throw new AutomationProposalStoreError('not-found', 'automation proposal was not found');
+        if (proposal.principal !== input.principal) {
+            throw new AutomationProposalStoreError('unauthorized', 'automation proposal belongs to another principal');
+        }
+        if (proposal.status !== 'pending')
+            return result(proposal, true, this.automations);
+        if (proposal.policyProposalId === undefined) {
+            const recovered = this.recoverOrCreatePolicyProposal(proposal);
+            if (recovered === undefined)
+                return this.settleSecurityConflict(proposal, false);
+            proposal = recovered.proposal;
+            if (recovered.status !== 'pending') {
+                return this.settleValidated(proposal, recovered.snapshot, recovered.replayed);
+            }
+        }
+        const decision = this.policy.decideProposal({
+            proposalId: proposal.policyProposalId,
+            principal: input.principal,
+            expectedVersion: input.expectedVersion,
+            decision: input.decision,
+            reason: input.reason,
+        });
+        if (decision.status === 'pending')
+            throw new AutomationProposalStoreError('invalid-state', 'policy returned pending');
+        const snapshot = this.policy.getProposal(proposal.policyProposalId);
+        return this.settleValidated(proposal, snapshot, decision.replayed);
+    }
+    /**
+     * Commit locally pending proposals whose policy decision already settled
+     * elsewhere, for example on an approval card minutes after the turn ended.
+     *
+     * Approval is never inferred: the terminal status is read back from the policy
+     * ledger and applied through the same settle path `decide()` uses, so repeated
+     * reconciles are idempotent.
+     */
+    reconcile(limit) {
+        const settled = [];
+        for (const candidate of this.proposals.listPending(limit)) {
+            let pending = candidate;
+            let decision;
+            if (pending.policyProposalId === undefined) {
+                try {
+                    const recovered = this.recoverOrCreatePolicyProposal(pending);
+                    if (recovered === undefined) {
+                        settled.push(this.settleSecurityConflict(pending, false));
+                        continue;
+                    }
+                    pending = recovered.proposal;
+                    decision = recovered.snapshot;
+                }
+                catch {
+                    this.proposals.deferPending(pending.proposalId);
+                    continue;
+                }
+            }
+            if (decision === undefined) {
+                try {
+                    decision = this.policy.getProposal(pending.policyProposalId);
+                }
+                catch {
+                    this.proposals.deferPending(pending.proposalId);
+                    continue;
+                }
+            }
+            if (decision?.status === 'pending') {
+                this.proposals.deferPending(pending.proposalId);
+                continue;
+            }
+            settled.push(this.settleValidated(pending, decision, false));
+        }
+        return settled;
+    }
+    policyIdentity(proposal) {
+        return {
+            idempotencyKey: `assistant-automations:${proposal.idempotencyKey}`,
+            requester: proposal.requester,
+            principal: proposal.principal,
+            action: `automation.${proposal.mutation.op}`,
+            resource: { kind: 'automation', id: proposal.mutation.automationId },
+        };
+    }
+    /**
+     * Atomically recover or create the Policy half under the locally frozen
+     * deadline. An abandoned result is terminal and must never be resurrected.
+     */
+    recoverOrCreatePolicyProposal(proposal) {
+        const recovered = this.policy.recoverOrCreateProposal({
+            ...this.policyIdentity(proposal),
+            diff: diff(proposal.mutation),
+            summary: summary(proposal.mutation),
+            notAfter: proposal.expiresAt,
+            ...(proposal.dispatch === undefined ? {} : { dispatch: proposal.dispatch }),
+        });
+        if (recovered.kind === 'abandoned')
+            return undefined;
+        const policyProposal = recovered.proposal;
+        const attached = this.proposals.attachPolicy(proposal.proposalId, policyProposal.proposalId, policyProposal.expiresAt);
+        return {
+            proposal: attached,
+            status: policyProposal.status,
+            snapshot: policyProposal.status === 'pending'
+                ? undefined
+                : this.policy.getProposal(policyProposal.proposalId),
+            replayed: policyProposal.replayed,
+        };
+    }
+    settleValidated(proposal, snapshot, replayed) {
+        if (proposal.policyProposalId === undefined) {
+            throw new AutomationProposalStoreError('invalid-state', 'automation proposal is not attached to policy');
+        }
+        if (snapshot === undefined)
+            return this.settleSecurityConflict(proposal, replayed);
+        try {
+            const terminal = validateApprovalSettlement(snapshot, {
+                proposalId: proposal.policyProposalId,
+                requester: proposal.requester,
+                principal: proposal.principal,
+                action: `automation.${proposal.mutation.op}`,
+                resource: { kind: 'automation', id: proposal.mutation.automationId },
+                summary: summary(proposal.mutation),
+                diff: diff(proposal.mutation),
+                expiresAt: proposal.expiresAt,
+                expectedVersion: proposal.version,
+            });
+            return this.settleDecided(proposal, terminal.status, terminal.version, replayed);
+        }
+        catch (error) {
+            if (!(error instanceof ApprovalSettlementConflict))
+                throw error;
+            return this.settleSecurityConflict(proposal, replayed);
+        }
+    }
+    settleSecurityConflict(proposal, replayed) {
+        if (proposal.status !== 'pending' || proposal.version >= Number.MAX_SAFE_INTEGER) {
+            throw new AutomationProposalStoreError('invalid-state', 'settled automation proposal failed immutable policy validation');
+        }
+        const settled = this.proposals.settle({
+            proposalId: proposal.proposalId,
+            status: 'conflicted',
+            version: proposal.version + 1,
+        });
+        return result(settled.proposal, replayed || settled.replayed, this.automations);
+    }
+    /**
+     * Apply one already-terminal policy status to a pending automation proposal. A
+     * store conflict downgrades the proposal to `conflicted` instead of losing the
+     * decision, matching the rule that a decision is never re-asked.
+     */
+    settleDecided(proposal, policyStatus, policyVersion, replayed) {
+        let status = policyStatus;
+        let automationId;
+        if (policyStatus === 'approved') {
+            try {
+                if (proposal.mutation.op === 'create') {
+                    this.automations.createApproved({
+                        automationId: proposal.mutation.automationId,
+                        idempotencyKey: `proposal:${proposal.proposalId}`,
+                        definition: proposal.mutation.definition,
+                    });
+                }
+                else {
+                    this.automations.changeApproved({
+                        automationId: proposal.mutation.automationId,
+                        operation: proposal.mutation.op,
+                        expectedVersion: proposal.mutation.expectedVersion,
+                        idempotencyKey: `proposal:${proposal.proposalId}`,
+                    });
+                }
+                automationId = proposal.mutation.automationId;
+            }
+            catch (error) {
+                if (error instanceof AutomationStoreError
+                    && ['idempotency-conflict', 'invalid-state', 'not-found', 'version-conflict'].includes(error.code)) {
+                    status = 'conflicted';
+                }
+                else {
+                    throw error;
+                }
+            }
+        }
+        const settled = this.proposals.settle({
+            proposalId: proposal.proposalId,
+            status,
+            version: policyVersion,
+            ...(automationId === undefined ? {} : { resultAutomationId: automationId }),
+        });
+        return result(settled.proposal, replayed || settled.replayed, this.automations);
+    }
+    get(proposalId) {
+        const proposal = this.proposals.get(proposalId);
+        return proposal === undefined ? undefined : result(proposal, true, this.automations);
+    }
+}
+//# sourceMappingURL=proposals.js.map

package/lib/proposals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposals.js","sourceRoot":"","sources":["../src/proposals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEtC,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,gCAAgC,CAAA;AASvC,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAC7E,OAAO,EACL,oBAAoB,EACpB,6BAA6B,GAE9B,MAAM,YAAY,CAAA;AAmBnB,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAChC;IAArB,YAAqB,IAAsC,EAAE,OAAe;QAC1E,KAAK,CAAC,OAAO,CAAC,CAAA;QADK,SAAI,GAAJ,IAAI,CAAkC;QAEzD,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;IAC5C,CAAC;CACF;AAyBD,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzE,CAAC;AAED,SAAS,EAAE,CAAC,cAAsB;IAChC,OAAO,cAAc,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAC/F,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoB;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,gDAAgD,CAAC,CAAA;IAC3G,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,yCAAyC,CAAC,CAAA;IACpG,CAAC;IACD,MAAM,KAAK,GAAG,MAAiC,CAAA;IAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,wCAAwC;WAC/E,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;WACrC,CAAC,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;WAC/D,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;WAC1E,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;WACzE,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChF,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,yCAAyC,CAAC,CAAA;IACpG,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC;QAC3B,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC;QAC7B,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC;QAC7B,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC;KAC9B,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,GAAgB;IAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAO,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,oCAAoC,CAAC,CAAA;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,GAAG,CAAC,EAAE;QAClB,GAAG,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACxF,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAE,EAAE,CAAC;QACzF,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAuB,CAAC;QAC1E,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,KAAK,EAAE,GAAG,CAAC,MAAO;QAClB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,CAAC,GAAG,CAAC,oBAAoB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC;KAC/F,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,OAAO,uBAAuB;IACjB,QAAQ,CAAc;IACtB,GAAG,CAAc;IAC1B,MAAM,GAAG,KAAK,CAAA;IAEtB,YAAY,OAA6C;QACvD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;QAClC,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,MAAM,IAAI,4BAA4B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YACnE,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;IACvB,CAAC;IAED,GAAG,CAAC,UAAkB;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,UAAU,CAA4B,CAAA;QAC/H,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACpD,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,KAAa;QACvB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;YAChE,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,mDAAmD,CAAC,CAAA;QAC9G,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;KAGlC,CAAC,CAAC,GAAG,CAAC,KAAK,CAA6B,CAAA;QACzC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IACrC,CAAC;IAED,OAAO,CAAC,KAUP;QACC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAA4B,CAAA;QAC7I,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAA;YACpC,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;mBACzF,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;mBACpF,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpC,MAAM,IAAI,4BAA4B,CAAC,sBAAsB,EAAE,yDAAyD,CAAC,CAAA;YAC3H,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAC/C,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;;KAKrB,CAAC,CAAC,GAAG,CACJ,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EACxE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,WAAW,EACvF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CACvE,CAAA;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IACnE,CAAC;IAED,mGAAmG;IACnG,YAAY,CAAC,UAAkB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;KAIrB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAA;IAC9B,CAAC;IAED,YAAY,CAAC,UAAkB,EAAE,gBAAwB,EAAE,SAAiB;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACrC,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,4BAA4B,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAA;QACpH,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,IAAI,QAAQ,CAAC,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;YAC9F,MAAM,IAAI,4BAA4B,CAAC,sBAAsB,EAAE,4DAA4D,CAAC,CAAA;QAC9H,CAAC;QACD,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAChF,MAAM,IAAI,4BAA4B,CAAC,sBAAsB,EAAE,gDAAgD,CAAC,CAAA;QAClH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;KAErB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAA;QAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAE,CAAA;IAC9B,CAAC;IAED,MAAM,CAAC,KAKN;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QAC1C,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,4BAA4B,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAA;QACnH,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;mBACnE,OAAO,CAAC,kBAAkB,KAAK,KAAK,CAAC,kBAAkB,EAAE,CAAC;gBAC7D,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAA;YAC/G,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAC9C,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;;;;KAIrB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;QACnG,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IACnE,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAa;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAC/F,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,GAAG,KAAK,aAAa,CAAC,CAAA;IAChF,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,QAA4B;IACxC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,OAAO,CAAC,QAA4B;IAC3C,OAAO,GAAG,QAAQ,CAAC,EAAE,eAAe,QAAQ,CAAC,YAAY,EAAE,CAAA;AAC7D,CAAC;AAED,SAAS,MAAM,CACb,QAAkC,EAClC,QAAiB,EACjB,WAA4B;IAE5B,MAAM,UAAU,GAAG,QAAQ,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACvH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,GAAG,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACnG,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACnC,QAAQ;QACR,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;KACpD,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,OAAO,yBAAyB;IAEjB;IACA;IACA;IACA;IAJnB,YACmB,WAA4B,EAC5B,SAAkC,EAClC,MAAgC,EAChC,MAAoB,IAAI,CAAC,GAAG;QAH5B,gBAAW,GAAX,WAAW,CAAiB;QAC5B,cAAS,GAAT,SAAS,CAAyB;QAClC,WAAM,GAAN,MAAM,CAA0B;QAChC,QAAG,GAAH,GAAG,CAAyB;IAC5C,CAAC;IAEJ,OAAO,CAAC,KAA8B;QACpC,gBAAgB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;QACxD,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QAC9C,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,iCAAiC,CAAC,CAAA;QAC5F,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC3C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;gBACjC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;gBACnC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;gBACnC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;aACpC,CAAC,CAAC,CAAA;QACP,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YACrE,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,gDAAgD,CAAC,CAAA;QAC3G,CAAC;QACD,IAAI,QAA4B,CAAA;QAChC,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;YAC7D,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;gBACvB,EAAE,EAAE,QAAQ;gBACZ,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;gBACzC,UAAU,EAAE,6BAA6B,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;aACrE,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;YAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,IAAI,CAAC,EAAE,CAAC;gBACjG,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAA;YAC7F,CAAC;YACD,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;gBACvB,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;gBACrB,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;gBACzC,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,eAAe;aAChD,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC;YACvB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ;YACR,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ;SACT,CAAC,CAAA;QACF,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC/C,IAAI,KAAgE,CAAA;QACpE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBACzC,MAAM,IAAI,4BAA4B,CAAC,sBAAsB,EAAE,oCAAoC,CAAC,CAAA;YACtG,CAAC;YACD,KAAK,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;YAC3D,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC7B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAA;gBACzF,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,OAAO,KAAK,SAAS;oBAAE,MAAM,IAAI,4BAA4B,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAA;gBAC1G,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,eAAe,EAAE,CAAC;oBACjD,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,4CAA4C,CAAC,CAAA;gBACvG,CAAC;YACH,CAAC;YACD,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC3B,UAAU;gBACV,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;gBAC/C,WAAW;gBACX,QAAQ;gBACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK;gBACnC,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAA;QACN,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACzF,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;QACvD,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACpE,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC/F,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,eAAe,CACzB,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,QAAQ,EAClB,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,QAAQ,CACrC,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IAC3F,CAAC;IAED,MAAM,CAAC,KAAsC;QAC3C,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,4BAA4B,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAA;QACpH,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,4BAA4B,CAAC,cAAc,EAAE,kDAAkD,CAAC,CAAA;QAC5G,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;QAClF,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAA;YAC9D,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAChF,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAA;YAC7B,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC/E,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC1C,UAAU,EAAE,QAAQ,CAAC,gBAAiB;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAA;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAA;QACrH,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAiB,CAAC,CAAA;QACpE,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACpE,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,CAAC,KAAa;QACrB,MAAM,OAAO,GAA+B,EAAE,CAAA;QAC9C,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,OAAO,GAAG,SAAS,CAAA;YACvB,IAAI,QAA8C,CAAA;YAClD,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,IAAI,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAA;oBAC7D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;wBACzD,SAAQ;oBACV,CAAC;oBACD,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAA;oBAC5B,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAA;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;oBAC/C,SAAQ;gBACV,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,gBAAiB,CAAC,CAAA;gBAC/D,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;oBAC/C,SAAQ;gBACV,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;gBAC/C,SAAQ;YACV,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;QAC9D,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAEO,cAAc,CAAC,QAAkC;QAIvD,OAAO;YACL,cAAc,EAAE,yBAAyB,QAAQ,CAAC,cAAc,EAAE;YAClE,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM,EAAE,cAAc,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC5C,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE;SACrE,CAAA;IACH,CAAC;IAED;;;OAGG;IACK,6BAA6B,CAAC,QAAkC;QAMtE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;YACpD,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;YAChC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnC,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;SAC5E,CAAC,CAAA;QACF,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,SAAS,CAAA;QACpD,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAA;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAC1C,QAAQ,CAAC,UAAU,EACnB,cAAc,CAAC,UAAU,EACzB,cAAc,CAAC,SAAS,CACzB,CAAA;QACD,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,QAAQ,EAAE,cAAc,CAAC,MAAM,KAAK,SAAS;gBAC3C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC;YACtD,QAAQ,EAAE,cAAc,CAAC,QAAQ;SAClC,CAAA;IACH,CAAC;IAEO,eAAe,CACrB,QAAkC,EAClC,QAA8C,EAC9C,QAAiB;QAEjB,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,4BAA4B,CAAC,eAAe,EAAE,+CAA+C,CAAC,CAAA;QAC1G,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAClF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,EAAE;gBACpD,UAAU,EAAE,QAAQ,CAAC,gBAAgB;gBACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,MAAM,EAAE,cAAc,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAC5C,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE;gBACpE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACnC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,eAAe,EAAE,QAAQ,CAAC,OAAO;aAClC,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,0BAA0B,CAAC;gBAAE,MAAM,KAAK,CAAA;YAC/D,OAAO,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACxD,CAAC;IACH,CAAC;IAEO,sBAAsB,CAC5B,QAAkC,EAClC,QAAiB;QAEjB,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjF,MAAM,IAAI,4BAA4B,CACpC,eAAe,EACf,gEAAgE,CACjE,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACpC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,QAAQ,CAAC,OAAO,GAAG,CAAC;SAC9B,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IACjF,CAAC;IAED;;;;OAIG;IACK,aAAa,CACnB,QAAkC,EAClC,YAAyE,EACzE,aAAqB,EACrB,QAAiB;QAEjB,IAAI,MAAM,GAAiD,YAAY,CAAA;QACvE,IAAI,YAAgC,CAAA;QACpC,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACtC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC;wBAC9B,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY;wBAC5C,cAAc,EAAE,YAAY,QAAQ,CAAC,UAAU,EAAE;wBACjD,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU;qBACzC,CAAC,CAAA;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC;wBAC9B,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY;wBAC5C,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;wBAC/B,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,eAAe;wBAClD,cAAc,EAAE,YAAY,QAAQ,CAAC,UAAU,EAAE;qBAClD,CAAC,CAAA;gBACJ,CAAC;gBACD,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAA;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,oBAAoB;uBACpC,CAAC,sBAAsB,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrG,MAAM,GAAG,YAAY,CAAA;gBACvB,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,CAAA;gBACb,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACpC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,MAAM;YACN,OAAO,EAAE,aAAa;YACtB,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,YAAY,EAAE,CAAC;SAC5E,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IACjF,CAAC;IAED,GAAG,CAAC,UAAkB;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC/C,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IACtF,CAAC;CACF"}

package/lib/runner.d.ts

@@ -0,0 +1,34 @@
+import type { Context } from '@deepseek-ai/cordis';
+import type { AssistantPolicyService, PolicyBudgetConfig } from '@dsh-enhanced/assistant-policy';
+import { type AutomationRunner, type AutomationRunnerInput, type AutomationRunnerResult } from './coordinator.js';
+export declare class AutomationBudgetReplayError extends Error {
+    readonly reservationStatus: 'finalized' | 'released' | 'reserved';
+    readonly code: "automation-budget-reservation-replayed";
+    constructor(reservationStatus: 'finalized' | 'released' | 'reserved');
+}
+export declare const AUTOMATION_RUN_BUDGET_METRIC = "automation-runs";
+/** Prove the configured Policy budget uses the fixed per-run unit before reservation. */
+export declare function assertAutomationRunBudget(policy: Pick<AssistantPolicyService, 'getBudgetConfig'>, budgetId: string): Readonly<PolicyBudgetConfig>;
+export interface DshAutomationRunnerOptions {
+    /** Explicit escape hatch for deployments whose unattended routes have no configured Policy budget. */
+    readonly allowUnbudgetedExecution?: boolean;
+    /** Audited native-tool routes whose upstream adapters do not publish registry metadata yet. */
+    readonly toolCapableProviders?: readonly string[];
+    /**
+     * How to admit a route that publishes no tool-call capability at all. The DSH
+     * `generate` contract accepts `tools` for every adapter, so `allow` matches
+     * that baseline; `deny` opts a deployment into strict allowlisting. A
+     * provider-owned `none` declaration always fails closed either way.
+     */
+    readonly unknownRouteToolCalls?: 'allow' | 'deny';
+}
+export declare class DshAutomationRunner implements AutomationRunner {
+    private readonly ctx;
+    private readonly policy;
+    private readonly allowUnbudgetedExecution;
+    private readonly toolCapableProviders;
+    private readonly unknownRouteToolCalls;
+    constructor(ctx: Context, policy: AssistantPolicyService, options?: DshAutomationRunnerOptions);
+    run(input: AutomationRunnerInput): Promise<AutomationRunnerResult>;
+}
+//# sourceMappingURL=runner.d.ts.map

package/lib/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AASlD,OAAO,KAAK,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AAEhG,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAA;AA2CzB,qBAAa,2BAA4B,SAAQ,KAAK;IAGxC,QAAQ,CAAC,iBAAiB,EAAE,WAAW,GAAG,UAAU,GAAG,UAAU;IAF7E,QAAQ,CAAC,IAAI,EAAG,wCAAwC,CAAS;gBAE5C,iBAAiB,EAAE,WAAW,GAAG,UAAU,GAAG,UAAU;CAI9E;AAED,eAAO,MAAM,4BAA4B,oBAAoB,CAAA;AAE7D,yFAAyF;AACzF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,IAAI,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,EACvD,QAAQ,EAAE,MAAM,GACf,QAAQ,CAAC,kBAAkB,CAAC,CAW9B;AAED,MAAM,WAAW,0BAA0B;IACzC,sGAAsG;IACtG,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAC3C,+FAA+F;IAC/F,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjD;;;;;OAKG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;CAClD;AA4BD,qBAAa,mBAAoB,YAAW,gBAAgB;IAMxD,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IANzB,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAS;IAClD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAkB;gBAGrC,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,sBAAsB,EAC/C,OAAO,GAAE,0BAA+B;IAOpC,GAAG,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAiLzE"}