@geminixiang/mikan 1.0.0-beta.7 → 1.0.0-beta.71

package/dist/settings/index.js

@@ -0,0 +1,422 @@
+import { Type } from "@sinclair/typebox";
+import { existsSync, lstatSync, readFileSync, rmSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { effectiveStateDir } from "../cli/arg-grammar.js";
+import { readEnv } from "../env-manifest.js";
+import { atomicWritePrivateFile, ensureDirExists, readJsonSchemaFileIfExists, } from "../file-guards.js";
+import * as log from "../log.js";
+export class MissingGlobalSettingsError extends Error {
+    constructor(settingsPath) {
+        super(`Missing global settings file at ${settingsPath}`);
+        this.settingsPath = settingsPath;
+        this.name = "MissingGlobalSettingsError";
+    }
+}
+const ONBOARD_SETTINGS = {
+    llm: {
+        provider: "anthropic",
+        model: "claude-sonnet-4-6",
+        thinkingLevel: "off",
+    },
+    slack: {
+        replyMode: "top-level",
+    },
+    sandbox: {
+        cpus: "0.5",
+        memory: "1g",
+        boost: {
+            cpus: "2",
+            memory: "4g",
+        },
+        // Office visibility is not a setting here: it follows the platform
+        // conversation type (see office/projection resolveOfficeVisibility).
+        defaultSharedVault: "",
+    },
+};
+const SettingsFileSchema = Type.Object({
+    llm: Type.Optional(Type.Object({
+        provider: Type.Optional(Type.String()),
+        model: Type.Optional(Type.String()),
+        thinkingLevel: Type.Optional(Type.Union([
+            Type.Literal("off"),
+            Type.Literal("minimal"),
+            Type.Literal("low"),
+            Type.Literal("medium"),
+            Type.Literal("high"),
+            Type.Literal("xhigh"),
+            Type.Literal("max"),
+        ])),
+    })),
+    sentry: Type.Optional(Type.Object({
+        dsn: Type.Optional(Type.String()),
+    })),
+    slack: Type.Optional(Type.Object({
+        replyMode: Type.Optional(Type.Union([Type.Literal("top-level"), Type.Literal("thread")])),
+    })),
+    /**
+     * Conversation-only office policy. `visibility: "private"` marks a
+     * platform-public conversation as private; nothing can widen visibility
+     * beyond what the platform grants, so "public" is never stored here.
+     */
+    office: Type.Optional(Type.Object({
+        visibility: Type.Optional(Type.Literal("private")),
+    })),
+    sandbox: Type.Optional(Type.Object({
+        cpus: Type.Optional(Type.String()),
+        memory: Type.Optional(Type.String()),
+        boost: Type.Optional(Type.Object({
+            cpus: Type.Optional(Type.String()),
+            memory: Type.Optional(Type.String()),
+        })),
+        /**
+         * Retired door-policy keys (ADR 0008). Still accepted so existing files
+         * load, never copied into AgentConfig, and removed by
+         * `mikan office migrate-door-policy`.
+         */
+        image: Type.Optional(Type.Object({
+            workspaceMount: Type.Optional(Type.Union([Type.Literal("private"), Type.Literal("full")])),
+        })),
+        workspace: Type.Optional(Type.Object({
+            doorPolicy: Type.Optional(Type.Union([Type.Literal("isolated"), Type.Literal("trusted")])),
+            layout: Type.Optional(Type.Union([
+                Type.Literal("conversation"),
+                Type.Literal("shared-support"),
+                Type.Literal("full"),
+            ])),
+            visibility: Type.Optional(Type.Union([Type.Literal("public"), Type.Literal("private")])),
+        })),
+        defaultSharedVault: Type.Optional(Type.String()),
+    })),
+    /**
+     * MCP servers, keyed by name. Merged per key across scopes: a conversation
+     * entry overrides (or, with `disabled: true`, turns off) the same-name
+     * global entry; other global entries stay available. `open-connector` is an
+     * ordinary entry that the host fills in from `OPENCONNECTOR_ENDPOINT` when
+     * neither scope declares it (see `src/harness/open-connector.ts`).
+     */
+    mcpServers: Type.Optional(Type.Record(Type.String(), Type.Object({
+        command: Type.Optional(Type.String()),
+        args: Type.Optional(Type.Array(Type.String())),
+        env: Type.Optional(Type.Record(Type.String(), Type.String())),
+        url: Type.Optional(Type.String()),
+        headers: Type.Optional(Type.Record(Type.String(), Type.String())),
+        disabled: Type.Optional(Type.Boolean()),
+    }))),
+});
+export function loadSettingsFile(settingsPath) {
+    return readJsonSchemaFileIfExists(settingsPath, SettingsFileSchema, (detail) => detail === "unexpected JSON shape"
+        ? `Malformed settings file at ${settingsPath}: expected a JSON object at the top level`
+        : `Malformed settings file at ${settingsPath}: ${detail}`);
+}
+function normalizeSettingsConfig(config) {
+    return {
+        ...(config.llm?.provider !== undefined ? { provider: config.llm.provider } : {}),
+        ...(config.llm?.model !== undefined ? { model: config.llm.model } : {}),
+        ...(config.llm?.thinkingLevel !== undefined ? { thinkingLevel: config.llm.thinkingLevel } : {}),
+        ...(config.sentry?.dsn !== undefined ? { sentryDsn: config.sentry.dsn } : {}),
+        ...(config.sandbox !== undefined ? { sandbox: normalizeSandboxSettings(config.sandbox) } : {}),
+        ...(config.slack !== undefined ? { slack: config.slack } : {}),
+        ...(config.mcpServers !== undefined ? { mcpServers: config.mcpServers } : {}),
+    };
+}
+/**
+ * File shape → in-memory shape for the sandbox group. An empty or
+ * whitespace-only `defaultSharedVault` means "no default" and is dropped;
+ * non-empty values are trimmed. Everything else passes through as-is.
+ */
+function normalizeSandboxSettings(sandbox) {
+    const defaultSharedVault = sandbox.defaultSharedVault?.trim();
+    // Retired `image.workspaceMount` and `workspace` are dropped here: office
+    // visibility comes from the platform (ADR 0008), never from these keys.
+    return {
+        ...(sandbox.cpus !== undefined ? { cpus: sandbox.cpus } : {}),
+        ...(sandbox.memory !== undefined ? { memory: sandbox.memory } : {}),
+        ...(sandbox.boost !== undefined ? { boost: sandbox.boost } : {}),
+        ...(defaultSharedVault ? { defaultSharedVault } : {}),
+    };
+}
+/**
+ * Merge two sandbox settings groups. The merge invariant is LEAF-LEVEL:
+ * an override that only sets `sandbox.memory` keeps the base `sandbox.cpus`,
+ * and an override that only sets `boost.memory` keeps the base `boost.cpus`
+ * (same for `image`). This mirrors how the fields merged when they were
+ * flat top-level keys; a group-level spread would silently drop base leaves.
+ */
+function mergeSandboxSettings(base, override) {
+    if (!base)
+        return override;
+    if (!override)
+        return base;
+    return {
+        ...base,
+        ...override,
+        ...(base.boost || override.boost ? { boost: { ...base.boost, ...override.boost } } : {}),
+    };
+}
+function getSettingsPath() {
+    return join(effectiveStateDir(), "settings.json");
+}
+function requireGlobalSettings() {
+    const settingsPath = getSettingsPath();
+    const config = loadSettingsFile(settingsPath);
+    if (!config) {
+        throw new MissingGlobalSettingsError(settingsPath);
+    }
+    return config;
+}
+function requireString(value, path) {
+    if (!value) {
+        throw new Error(`Missing required global setting: ${path}. Run \`mikan --onboard\` to create settings.json.`);
+    }
+    return value;
+}
+function toAgentConfig(fromFile) {
+    const provider = requireString(fromFile.provider, "llm.provider");
+    const model = requireString(fromFile.model, "llm.model");
+    const thinkingLevel = requireString(fromFile.thinkingLevel, "llm.thinkingLevel");
+    const sentryDsn = sentryDsnFrom(fromFile.sentryDsn);
+    const sandbox = fromFile.sandbox;
+    const slack = fromFile.slack;
+    const mcpServers = fromFile.mcpServers;
+    return {
+        provider,
+        model,
+        thinkingLevel,
+        sentryDsn,
+        sandbox,
+        slack,
+        mcpServers,
+    };
+}
+function loadRawGlobalSettings() {
+    return normalizeSettingsConfig(requireGlobalSettings());
+}
+export function loadGlobalSettings() {
+    return toAgentConfig(loadRawGlobalSettings());
+}
+/**
+ * Host-authoritative location of a conversation's settings file:
+ * `<office state dir>/settings.json`. The Office value names both the
+ * state-dir key and the legacy pre-host-migration location (its workspace
+ * dir) — the key is never inferred from a directory basename.
+ *
+ * Conversation settings used to live at `<conversationDir>/settings.json`,
+ * but conversation dirs are bind-mounted read-write into sandbox containers
+ * in image mode — code inside the sandbox could edit its own settings.json
+ * and flip `sandbox.image.workspaceMount` to "full", remounting the entire
+ * workspace into its container (cross-conversation access). Settings are an
+ * administrator surface, so they live under the host-only state dir.
+ *
+ * Migration: on first access per conversation, a legacy
+ * `<conversationDir>/settings.json` is moved here. The new file's existence
+ * (an empty `{}` is written when there is nothing to migrate) is the
+ * migration marker — a legacy file (re)appearing later, e.g. planted from
+ * inside the sandbox, is never read again.
+ */
+export function conversationSettingsPath(office) {
+    const hostPath = join(office.stateDir, "settings.json");
+    if (existsSync(hostPath)) {
+        assertSettingsFile(hostPath, "Host conversation settings");
+        return hostPath;
+    }
+    ensureDirExists(dirname(hostPath));
+    const legacyPath = join(office.dir, "settings.json");
+    let content = "{}\n";
+    let migrated = false;
+    if (existsSync(legacyPath)) {
+        assertSettingsFile(legacyPath, "Legacy conversation settings");
+        content = readFileSync(legacyPath, "utf-8");
+        // Validate before moving the file. A malformed legacy file must fail
+        // closed and remain available for an operator to repair.
+        loadSettingsFile(legacyPath);
+        migrated = true;
+    }
+    atomicWritePrivateFile(hostPath, content);
+    if (migrated) {
+        try {
+            rmSync(legacyPath);
+        }
+        catch (err) {
+            log.logWarning(`Could not remove legacy conversation settings: ${legacyPath}`, String(err));
+        }
+        log.logInfo(`Migrated conversation settings to host-only path: ${hostPath}`);
+    }
+    return hostPath;
+}
+function assertSettingsFile(path, label) {
+    let stats;
+    try {
+        stats = lstatSync(path);
+    }
+    catch (err) {
+        throw new Error(`${label} cannot be inspected: ${path}`, { cause: err });
+    }
+    if (stats.isSymbolicLink() || !stats.isFile()) {
+        throw new Error(`${label} must be a regular non-symlink file: ${path}`);
+    }
+}
+const AUTO_REPLY_FILE = "auto-reply";
+const AUTO_REPLY_JEV_FILE = "auto-reply.jev";
+const AUTO_REPLY_MARKERS = {
+    on: AUTO_REPLY_FILE,
+    jev: AUTO_REPLY_JEV_FILE,
+};
+export function slackConversationAutoReplyMode(office) {
+    if (existsSync(join(office.dir, AUTO_REPLY_JEV_FILE)))
+        return "jev";
+    if (existsSync(join(office.dir, AUTO_REPLY_FILE)))
+        return "on";
+    return "off";
+}
+export function setSlackConversationAutoReply(office, mode) {
+    ensureDirExists(office.dir);
+    for (const [markerMode, fileName] of Object.entries(AUTO_REPLY_MARKERS)) {
+        const path = join(office.dir, fileName);
+        if (markerMode === mode) {
+            if (!existsSync(path))
+                atomicWritePrivateFile(path, "");
+        }
+        else if (existsSync(path)) {
+            rmSync(path);
+        }
+    }
+}
+export function resolveConversationSettings(office) {
+    const globalConfig = loadRawGlobalSettings();
+    const conversationConfig = normalizeSettingsConfig(loadSettingsFile(conversationSettingsPath(office)) ?? {});
+    // MCP servers merge per key: a conversation redefines or disables individual
+    // servers without losing the rest of the global set.
+    const mcpServers = { ...globalConfig.mcpServers, ...conversationConfig.mcpServers };
+    // The sandbox group merges at the leaf level (see mergeSandboxSettings):
+    // a conversation that only sets sandbox.memory keeps the global sandbox.cpus.
+    const sandbox = mergeSandboxSettings(globalConfig.sandbox, conversationConfig.sandbox);
+    return toAgentConfig({
+        ...globalConfig,
+        ...conversationConfig,
+        ...(sandbox ? { sandbox } : {}),
+        ...(Object.keys(mcpServers).length > 0 ? { mcpServers } : {}),
+    });
+}
+/** Settings-file DSN wins over SENTRY_DSN env — the rule lives only here. */
+function sentryDsnFrom(fromFile) {
+    return fromFile || readEnv("SENTRY_DSN");
+}
+export function resolveSentryDsn() {
+    const fromFile = normalizeSettingsConfig(loadSettingsFile(getSettingsPath()) ?? {});
+    return sentryDsnFrom(fromFile.sentryDsn);
+}
+export function createGlobalSettingsFile(stateDir, llm) {
+    const settingsPath = join(stateDir, "settings.json");
+    if (existsSync(settingsPath)) {
+        throw new Error(`Global settings already exists at ${settingsPath}`);
+    }
+    ensureDirExists(stateDir);
+    const settings = llm
+        ? {
+            ...ONBOARD_SETTINGS,
+            llm: {
+                ...ONBOARD_SETTINGS.llm,
+                provider: llm.provider,
+                model: llm.model,
+            },
+        }
+        : ONBOARD_SETTINGS;
+    atomicWritePrivateFile(settingsPath, JSON.stringify(settings, null, 2));
+    return settingsPath;
+}
+export function hasDefinedValue(values) {
+    return values !== undefined && Object.values(values).some((value) => value !== undefined);
+}
+export function compactSettingsConfig(config) {
+    return {
+        ...(hasDefinedValue(config.llm) ? { llm: config.llm } : {}),
+        ...(hasDefinedValue(config.sentry) ? { sentry: config.sentry } : {}),
+        ...(hasDefinedValue(config.sandbox) ? { sandbox: config.sandbox } : {}),
+        ...(hasDefinedValue(config.slack) ? { slack: config.slack } : {}),
+        ...(hasDefinedValue(config.office) ? { office: config.office } : {}),
+        // An empty map means "all servers removed".
+        ...(config.mcpServers !== undefined ? { mcpServers: config.mcpServers } : {}),
+    };
+}
+function patchSettingsConfig(existing, config) {
+    const patched = {
+        ...existing,
+        llm: {
+            ...existing.llm,
+            ...(config.provider !== undefined ? { provider: config.provider } : {}),
+            ...(config.model !== undefined ? { model: config.model } : {}),
+            ...(config.thinkingLevel !== undefined ? { thinkingLevel: config.thinkingLevel } : {}),
+        },
+        sentry: {
+            ...existing.sentry,
+            ...(config.sentryDsn !== undefined ? { dsn: config.sentryDsn } : {}),
+        },
+        // Leaf-level merge: a patch that only sets sandbox.boost.memory keeps the
+        // existing boost.cpus (and every other existing leaf). compactSettingsConfig
+        // drops the group entirely when it ends up with no defined values.
+        sandbox: mergeSandboxSettings(existing.sandbox, config.sandbox) ?? {},
+        slack: {
+            ...existing.slack,
+            ...config.slack,
+        },
+        // Office visibility has its own writer (setOfficeVisibilityOverride); the
+        // generic patch must not drop it.
+        ...(existing.office !== undefined ? { office: existing.office } : {}),
+        // The portal edits the full MCP map, and
+        // a merge would make removing a server impossible.
+        ...(config.mcpServers !== undefined ? { mcpServers: config.mcpServers } : {}),
+    };
+    return compactSettingsConfig(patched);
+}
+function loadSettingsFileForUpdate(settingsPath, defaultSettings) {
+    if (!existsSync(settingsPath))
+        return defaultSettings;
+    try {
+        return loadSettingsFile(settingsPath) ?? {};
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        const message = detail.startsWith("Malformed settings file")
+            ? detail.replace("Malformed settings file", "Refusing to overwrite malformed settings file")
+            : detail;
+        throw new Error(message, { cause: err });
+    }
+}
+function updateSettingsFile(settingsPath, patch, defaultSettings) {
+    const existing = loadSettingsFileForUpdate(settingsPath, defaultSettings);
+    ensureDirExists(dirname(settingsPath));
+    atomicWritePrivateFile(settingsPath, JSON.stringify(patchSettingsConfig(existing, patch), null, 2));
+}
+export function updateGlobalSettings(patch) {
+    updateSettingsFile(getSettingsPath(), patch, ONBOARD_SETTINGS);
+}
+export function updateConversationSettings(office, patch) {
+    updateSettingsFile(conversationSettingsPath(office), patch, {});
+}
+/**
+ * The two scope-level MCP server maps, unmerged: the portal edits each scope's
+ * own file, so it needs the raw per-scope values, not the effective merge
+ * (`resolveConversationSettings` owns that).
+ */
+export function loadScopeMcpServers(office) {
+    return {
+        global: loadRawGlobalSettings().mcpServers ?? {},
+        conversation: loadSettingsFile(conversationSettingsPath(office))?.mcpServers ?? {},
+    };
+}
+/**
+ * The conversation's own visibility override, or null when it follows the
+ * platform. Only "private" can be stored: an operator may narrow a public
+ * channel, never widen a private one (see ADR 0008).
+ */
+export function loadOfficeVisibilityOverride(office) {
+    return loadSettingsFile(conversationSettingsPath(office))?.office?.visibility ?? null;
+}
+export function setOfficeVisibilityOverride(office, visibility) {
+    const settingsPath = conversationSettingsPath(office);
+    const existing = loadSettingsFileForUpdate(settingsPath, {});
+    const { office: _previous, ...rest } = existing;
+    ensureDirExists(dirname(settingsPath));
+    atomicWritePrivateFile(settingsPath, JSON.stringify(compactSettingsConfig({ ...rest, ...(visibility ? { office: { visibility } } : {}) }), null, 2));
+}
+//# sourceMappingURL=index.js.map

package/dist/settings/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/settings/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AAEjC,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAA4B,YAAoB;QAC9C,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;4BAD/B,YAAY;QAEtC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAQD,MAAM,gBAAgB,GAAuB;IAC3C,GAAG,EAAE;QACH,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,mBAAmB;QAC1B,aAAa,EAAE,KAAK;KACrB;IACD,KAAK,EAAE;QACL,SAAS,EAAE,WAAW;KACvB;IACD,OAAO,EAAE;QACP,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE;YACL,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;SACb;QACD,mEAAmE;QACnE,qEAAqE;QACrE,kBAAkB,EAAE,EAAE;KACvB;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC;IACrC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAChB,IAAI,CAAC,MAAM,CAAC;QACV,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,KAAK,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACvB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;SACpB,CAAC,CACH;KACF,CAAC,CACH;IACD,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACV,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KAClC,CAAC,CACH;IACD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CAAC;QACV,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;KAC1F,CAAC,CACH;IACD;;;;OAIG;IACH,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACV,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;KACnD,CAAC,CACH;IACD,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC;QACV,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACpC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;SACrC,CAAC,CACH;QACD;;;;WAIG;QACH,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CAAC;YACV,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC3B,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAC5D;SACF,CAAC,CACH;QACD,SAAS,EAAE,IAAI,CAAC,QAAQ,CACtB,IAAI,CAAC,MAAM,CAAC;YACV,UAAU,EAAE,IAAI,CAAC,QAAQ,CACvB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAChE;YACD,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,KAAK,CAAC;gBACT,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aACrB,CAAC,CACH;YACD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;SACzF,CAAC,CACH;QACD,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACjD,CAAC,CACH;IACD;;;;;;OAMG;IACH,UAAU,EAAE,IAAI,CAAC,QAAQ,CACvB,IAAI,CAAC,MAAM,CACT,IAAI,CAAC,MAAM,EAAE,EACb,IAAI,CAAC,MAAM,CAAC;QACV,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACrC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KACxC,CAAC,CACH,CACF;CACF,CAAC,CAAC;AAKH,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,OAAO,0BAA0B,CAAC,YAAY,EAAE,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAC7E,MAAM,KAAK,uBAAuB;QAChC,CAAC,CAAC,8BAA8B,YAAY,2CAA2C;QACvF,CAAC,CAAC,8BAA8B,YAAY,KAAK,MAAM,EAAE,CAC5D,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,MAA0B;IACzD,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,OAA4B;IAC5D,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAC9D,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAC3B,IAAiC,EACjC,QAAqC;IAErC,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC3B,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO;QACL,GAAG,IAAI;QACP,GAAG,QAAQ;QACX,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,iBAAiB,EAAE,EAAE,eAAe,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,0BAA0B,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,IAAY;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,oCAAoC,IAAI,oDAAoD,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,QAA8B;IACnD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAkB,CAAC;IAClG,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IAEvC,OAAO;QACL,QAAQ;QACR,KAAK;QACL,aAAa;QACb,SAAS;QACT,OAAO;QACP,KAAK;QACL,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,uBAAuB,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,aAAa,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,kBAAkB,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QAC3D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,kBAAkB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QAC/D,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5C,qEAAqE;QACrE,yDAAyD;QACzD,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,UAAU,CAAC,kDAAkD,UAAU,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,qDAAqD,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa;IACrD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAWD,MAAM,eAAe,GAAG,YAAY,CAAC;AACrC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAC7C,MAAM,kBAAkB,GAAuD;IAC7E,EAAE,EAAE,eAAe;IACnB,GAAG,EAAE,mBAAmB;CACzB,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAAC,MAAc;IAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAc,EAAE,IAAwB;IACpF,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,sBAAsB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACxD,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,kBAAkB,GAAG,uBAAuB,CAChD,gBAAgB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CACzD,CAAC;IACF,6EAA6E;IAC7E,qDAAqD;IACrD,MAAM,UAAU,GAAG,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,GAAG,kBAAkB,CAAC,UAAU,EAAE,CAAC;IACpF,yEAAyE;IACzE,8EAA8E;IAC9E,MAAM,OAAO,GAAG,oBAAoB,CAAC,YAAY,CAAC,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACvF,OAAO,aAAa,CAAC;QACnB,GAAG,YAAY;QACf,GAAG,kBAAkB;QACrB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,QAA4B;IACjD,OAAO,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,OAAO,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,GAAsB;IAC/E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,YAAY,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAuB,GAAG;QACtC,CAAC,CAAC;YACE,GAAG,gBAAgB;YACnB,GAAG,EAAE;gBACH,GAAG,gBAAgB,CAAC,GAAG;gBACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB;SACF;QACH,CAAC,CAAC,gBAAgB,CAAC;IACrB,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAA2C;IACzE,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAA0B;IAC9D,OAAO;QACL,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,4CAA4C;QAC5C,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA4B,EAC5B,MAA4B;IAE5B,MAAM,OAAO,GAAuB;QAClC,GAAG,QAAQ;QACX,GAAG,EAAE;YACH,GAAG,QAAQ,CAAC,GAAG;YACf,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF;QACD,MAAM,EAAE;YACN,GAAG,QAAQ,CAAC,MAAM;YAClB,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE;QACD,0EAA0E;QAC1E,6EAA6E;QAC7E,mEAAmE;QACnE,OAAO,EAAE,oBAAoB,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;QACrE,KAAK,EAAE;YACL,GAAG,QAAQ,CAAC,KAAK;YACjB,GAAG,MAAM,CAAC,KAAK;SAChB;QACD,0EAA0E;QAC1E,kCAAkC;QAClC,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,yCAAyC;QACzC,mDAAmD;QACnD,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;IACF,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,yBAAyB,CAChC,YAAoB,EACpB,eAAmC;IAEnC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,eAAe,CAAC;IACtD,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,+CAA+C,CAAC;YAC5F,CAAC,CAAC,MAAM,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,YAAoB,EACpB,KAA2B,EAC3B,eAAmC;IAEnC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1E,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACvC,sBAAsB,CACpB,YAAY,EACZ,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAA2B;IAC9D,kBAAkB,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAc,EAAE,KAA2B;IACpF,kBAAkB,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAIhD,OAAO;QACL,MAAM,EAAE,qBAAqB,EAAE,CAAC,UAAU,IAAI,EAAE;QAChD,YAAY,EAAE,gBAAgB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,IAAI,EAAE;KACnF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAc;IACzD,OAAO,gBAAgB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,UAA4B;IACtF,MAAM,YAAY,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;IAChD,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACvC,sBAAsB,CACpB,YAAY,EACZ,IAAI,CAAC,SAAS,CACZ,qBAAqB,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EACrF,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { Type, type Static } from \"@sinclair/typebox\";\nimport { existsSync, lstatSync, readFileSync, rmSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { effectiveStateDir } from \"../cli/arg-grammar.js\";\nimport { readEnv } from \"../env-manifest.js\";\nimport {\n  atomicWritePrivateFile,\n  ensureDirExists,\n  readJsonSchemaFileIfExists,\n} from \"../file-guards.js\";\nimport * as log from \"../log.js\";\n\nexport class MissingGlobalSettingsError extends Error {\n  constructor(public readonly settingsPath: string) {\n    super(`Missing global settings file at ${settingsPath}`);\n    this.name = \"MissingGlobalSettingsError\";\n  }\n}\n\nexport type { AgentConfig, SandboxSettings } from \"../types.js\";\nimport type { AgentConfig, SandboxSettings } from \"../types.js\";\nimport type { McpServerConfig } from \"../harness/types.js\";\nimport type { OnboardLlmChoice } from \"../types.js\";\nimport type { Office } from \"../office/index.js\";\n\nconst ONBOARD_SETTINGS: SettingsFileConfig = {\n  llm: {\n    provider: \"anthropic\",\n    model: \"claude-sonnet-4-6\",\n    thinkingLevel: \"off\",\n  },\n  slack: {\n    replyMode: \"top-level\",\n  },\n  sandbox: {\n    cpus: \"0.5\",\n    memory: \"1g\",\n    boost: {\n      cpus: \"2\",\n      memory: \"4g\",\n    },\n    // Office visibility is not a setting here: it follows the platform\n    // conversation type (see office/projection resolveOfficeVisibility).\n    defaultSharedVault: \"\",\n  },\n};\n\nconst SettingsFileSchema = Type.Object({\n  llm: Type.Optional(\n    Type.Object({\n      provider: Type.Optional(Type.String()),\n      model: Type.Optional(Type.String()),\n      thinkingLevel: Type.Optional(\n        Type.Union([\n          Type.Literal(\"off\"),\n          Type.Literal(\"minimal\"),\n          Type.Literal(\"low\"),\n          Type.Literal(\"medium\"),\n          Type.Literal(\"high\"),\n          Type.Literal(\"xhigh\"),\n          Type.Literal(\"max\"),\n        ]),\n      ),\n    }),\n  ),\n  sentry: Type.Optional(\n    Type.Object({\n      dsn: Type.Optional(Type.String()),\n    }),\n  ),\n  slack: Type.Optional(\n    Type.Object({\n      replyMode: Type.Optional(Type.Union([Type.Literal(\"top-level\"), Type.Literal(\"thread\")])),\n    }),\n  ),\n  /**\n   * Conversation-only office policy. `visibility: \"private\"` marks a\n   * platform-public conversation as private; nothing can widen visibility\n   * beyond what the platform grants, so \"public\" is never stored here.\n   */\n  office: Type.Optional(\n    Type.Object({\n      visibility: Type.Optional(Type.Literal(\"private\")),\n    }),\n  ),\n  sandbox: Type.Optional(\n    Type.Object({\n      cpus: Type.Optional(Type.String()),\n      memory: Type.Optional(Type.String()),\n      boost: Type.Optional(\n        Type.Object({\n          cpus: Type.Optional(Type.String()),\n          memory: Type.Optional(Type.String()),\n        }),\n      ),\n      /**\n       * Retired door-policy keys (ADR 0008). Still accepted so existing files\n       * load, never copied into AgentConfig, and removed by\n       * `mikan office migrate-door-policy`.\n       */\n      image: Type.Optional(\n        Type.Object({\n          workspaceMount: Type.Optional(\n            Type.Union([Type.Literal(\"private\"), Type.Literal(\"full\")]),\n          ),\n        }),\n      ),\n      workspace: Type.Optional(\n        Type.Object({\n          doorPolicy: Type.Optional(\n            Type.Union([Type.Literal(\"isolated\"), Type.Literal(\"trusted\")]),\n          ),\n          layout: Type.Optional(\n            Type.Union([\n              Type.Literal(\"conversation\"),\n              Type.Literal(\"shared-support\"),\n              Type.Literal(\"full\"),\n            ]),\n          ),\n          visibility: Type.Optional(Type.Union([Type.Literal(\"public\"), Type.Literal(\"private\")])),\n        }),\n      ),\n      defaultSharedVault: Type.Optional(Type.String()),\n    }),\n  ),\n  /**\n   * MCP servers, keyed by name. Merged per key across scopes: a conversation\n   * entry overrides (or, with `disabled: true`, turns off) the same-name\n   * global entry; other global entries stay available. `open-connector` is an\n   * ordinary entry that the host fills in from `OPENCONNECTOR_ENDPOINT` when\n   * neither scope declares it (see `src/harness/open-connector.ts`).\n   */\n  mcpServers: Type.Optional(\n    Type.Record(\n      Type.String(),\n      Type.Object({\n        command: Type.Optional(Type.String()),\n        args: Type.Optional(Type.Array(Type.String())),\n        env: Type.Optional(Type.Record(Type.String(), Type.String())),\n        url: Type.Optional(Type.String()),\n        headers: Type.Optional(Type.Record(Type.String(), Type.String())),\n        disabled: Type.Optional(Type.Boolean()),\n      }),\n    ),\n  ),\n});\n\nexport type SettingsFileConfig = Static<typeof SettingsFileSchema>;\nexport type SandboxFileSettings = NonNullable<SettingsFileConfig[\"sandbox\"]>;\n\nexport function loadSettingsFile(settingsPath: string): SettingsFileConfig | undefined {\n  return readJsonSchemaFileIfExists(settingsPath, SettingsFileSchema, (detail) =>\n    detail === \"unexpected JSON shape\"\n      ? `Malformed settings file at ${settingsPath}: expected a JSON object at the top level`\n      : `Malformed settings file at ${settingsPath}: ${detail}`,\n  );\n}\n\nfunction normalizeSettingsConfig(config: SettingsFileConfig): Partial<AgentConfig> {\n  return {\n    ...(config.llm?.provider !== undefined ? { provider: config.llm.provider } : {}),\n    ...(config.llm?.model !== undefined ? { model: config.llm.model } : {}),\n    ...(config.llm?.thinkingLevel !== undefined ? { thinkingLevel: config.llm.thinkingLevel } : {}),\n    ...(config.sentry?.dsn !== undefined ? { sentryDsn: config.sentry.dsn } : {}),\n    ...(config.sandbox !== undefined ? { sandbox: normalizeSandboxSettings(config.sandbox) } : {}),\n    ...(config.slack !== undefined ? { slack: config.slack } : {}),\n    ...(config.mcpServers !== undefined ? { mcpServers: config.mcpServers } : {}),\n  };\n}\n\n/**\n * File shape → in-memory shape for the sandbox group. An empty or\n * whitespace-only `defaultSharedVault` means \"no default\" and is dropped;\n * non-empty values are trimmed. Everything else passes through as-is.\n */\nfunction normalizeSandboxSettings(sandbox: SandboxFileSettings): SandboxSettings {\n  const defaultSharedVault = sandbox.defaultSharedVault?.trim();\n  // Retired `image.workspaceMount` and `workspace` are dropped here: office\n  // visibility comes from the platform (ADR 0008), never from these keys.\n  return {\n    ...(sandbox.cpus !== undefined ? { cpus: sandbox.cpus } : {}),\n    ...(sandbox.memory !== undefined ? { memory: sandbox.memory } : {}),\n    ...(sandbox.boost !== undefined ? { boost: sandbox.boost } : {}),\n    ...(defaultSharedVault ? { defaultSharedVault } : {}),\n  };\n}\n\n/**\n * Merge two sandbox settings groups. The merge invariant is LEAF-LEVEL:\n * an override that only sets `sandbox.memory` keeps the base `sandbox.cpus`,\n * and an override that only sets `boost.memory` keeps the base `boost.cpus`\n * (same for `image`). This mirrors how the fields merged when they were\n * flat top-level keys; a group-level spread would silently drop base leaves.\n */\nfunction mergeSandboxSettings(\n  base: SandboxSettings | undefined,\n  override: SandboxSettings | undefined,\n): SandboxSettings | undefined {\n  if (!base) return override;\n  if (!override) return base;\n  return {\n    ...base,\n    ...override,\n    ...(base.boost || override.boost ? { boost: { ...base.boost, ...override.boost } } : {}),\n  };\n}\n\nfunction getSettingsPath(): string {\n  return join(effectiveStateDir(), \"settings.json\");\n}\n\nfunction requireGlobalSettings(): SettingsFileConfig {\n  const settingsPath = getSettingsPath();\n  const config = loadSettingsFile(settingsPath);\n  if (!config) {\n    throw new MissingGlobalSettingsError(settingsPath);\n  }\n  return config;\n}\n\nfunction requireString(value: string | undefined, path: string): string {\n  if (!value) {\n    throw new Error(\n      `Missing required global setting: ${path}. Run \\`mikan --onboard\\` to create settings.json.`,\n    );\n  }\n  return value;\n}\n\nfunction toAgentConfig(fromFile: Partial<AgentConfig>): AgentConfig {\n  const provider = requireString(fromFile.provider, \"llm.provider\");\n  const model = requireString(fromFile.model, \"llm.model\");\n  const thinkingLevel = requireString(fromFile.thinkingLevel, \"llm.thinkingLevel\") as ThinkingLevel;\n  const sentryDsn = sentryDsnFrom(fromFile.sentryDsn);\n  const sandbox = fromFile.sandbox;\n  const slack = fromFile.slack;\n  const mcpServers = fromFile.mcpServers;\n\n  return {\n    provider,\n    model,\n    thinkingLevel,\n    sentryDsn,\n    sandbox,\n    slack,\n    mcpServers,\n  };\n}\n\nfunction loadRawGlobalSettings(): Partial<AgentConfig> {\n  return normalizeSettingsConfig(requireGlobalSettings());\n}\n\nexport function loadGlobalSettings(): AgentConfig {\n  return toAgentConfig(loadRawGlobalSettings());\n}\n\n/**\n * Host-authoritative location of a conversation's settings file:\n * `<office state dir>/settings.json`. The Office value names both the\n * state-dir key and the legacy pre-host-migration location (its workspace\n * dir) — the key is never inferred from a directory basename.\n *\n * Conversation settings used to live at `<conversationDir>/settings.json`,\n * but conversation dirs are bind-mounted read-write into sandbox containers\n * in image mode — code inside the sandbox could edit its own settings.json\n * and flip `sandbox.image.workspaceMount` to \"full\", remounting the entire\n * workspace into its container (cross-conversation access). Settings are an\n * administrator surface, so they live under the host-only state dir.\n *\n * Migration: on first access per conversation, a legacy\n * `<conversationDir>/settings.json` is moved here. The new file's existence\n * (an empty `{}` is written when there is nothing to migrate) is the\n * migration marker — a legacy file (re)appearing later, e.g. planted from\n * inside the sandbox, is never read again.\n */\nexport function conversationSettingsPath(office: Office): string {\n  const hostPath = join(office.stateDir, \"settings.json\");\n  if (existsSync(hostPath)) {\n    assertSettingsFile(hostPath, \"Host conversation settings\");\n    return hostPath;\n  }\n\n  ensureDirExists(dirname(hostPath));\n  const legacyPath = join(office.dir, \"settings.json\");\n  let content = \"{}\\n\";\n  let migrated = false;\n  if (existsSync(legacyPath)) {\n    assertSettingsFile(legacyPath, \"Legacy conversation settings\");\n    content = readFileSync(legacyPath, \"utf-8\");\n    // Validate before moving the file. A malformed legacy file must fail\n    // closed and remain available for an operator to repair.\n    loadSettingsFile(legacyPath);\n    migrated = true;\n  }\n  atomicWritePrivateFile(hostPath, content);\n  if (migrated) {\n    try {\n      rmSync(legacyPath);\n    } catch (err) {\n      log.logWarning(`Could not remove legacy conversation settings: ${legacyPath}`, String(err));\n    }\n    log.logInfo(`Migrated conversation settings to host-only path: ${hostPath}`);\n  }\n  return hostPath;\n}\n\nfunction assertSettingsFile(path: string, label: string): void {\n  let stats;\n  try {\n    stats = lstatSync(path);\n  } catch (err) {\n    throw new Error(`${label} cannot be inspected: ${path}`, { cause: err });\n  }\n  if (stats.isSymbolicLink() || !stats.isFile()) {\n    throw new Error(`${label} must be a regular non-symlink file: ${path}`);\n  }\n}\n\n/**\n * Auto-reply is tri-state: `off` (default, must mention mikan), `on`\n * (every message in the channel is addressed), `jev` (Jev decides per\n * message whether it addresses mikan). Exactly one marker file exists at a\n * time; its absence means `off`. Markers are mutually exclusive so callers\n * cannot read a self-contradictory state.\n */\nexport type SlackAutoReplyMode = \"off\" | \"on\" | \"jev\";\n\nconst AUTO_REPLY_FILE = \"auto-reply\";\nconst AUTO_REPLY_JEV_FILE = \"auto-reply.jev\";\nconst AUTO_REPLY_MARKERS: Record<Exclude<SlackAutoReplyMode, \"off\">, string> = {\n  on: AUTO_REPLY_FILE,\n  jev: AUTO_REPLY_JEV_FILE,\n};\n\nexport function slackConversationAutoReplyMode(office: Office): SlackAutoReplyMode {\n  if (existsSync(join(office.dir, AUTO_REPLY_JEV_FILE))) return \"jev\";\n  if (existsSync(join(office.dir, AUTO_REPLY_FILE))) return \"on\";\n  return \"off\";\n}\n\nexport function setSlackConversationAutoReply(office: Office, mode: SlackAutoReplyMode): void {\n  ensureDirExists(office.dir);\n  for (const [markerMode, fileName] of Object.entries(AUTO_REPLY_MARKERS)) {\n    const path = join(office.dir, fileName);\n    if (markerMode === mode) {\n      if (!existsSync(path)) atomicWritePrivateFile(path, \"\");\n    } else if (existsSync(path)) {\n      rmSync(path);\n    }\n  }\n}\n\nexport function resolveConversationSettings(office: Office): AgentConfig {\n  const globalConfig = loadRawGlobalSettings();\n  const conversationConfig = normalizeSettingsConfig(\n    loadSettingsFile(conversationSettingsPath(office)) ?? {},\n  );\n  // MCP servers merge per key: a conversation redefines or disables individual\n  // servers without losing the rest of the global set.\n  const mcpServers = { ...globalConfig.mcpServers, ...conversationConfig.mcpServers };\n  // The sandbox group merges at the leaf level (see mergeSandboxSettings):\n  // a conversation that only sets sandbox.memory keeps the global sandbox.cpus.\n  const sandbox = mergeSandboxSettings(globalConfig.sandbox, conversationConfig.sandbox);\n  return toAgentConfig({\n    ...globalConfig,\n    ...conversationConfig,\n    ...(sandbox ? { sandbox } : {}),\n    ...(Object.keys(mcpServers).length > 0 ? { mcpServers } : {}),\n  });\n}\n\n/** Settings-file DSN wins over SENTRY_DSN env — the rule lives only here. */\nfunction sentryDsnFrom(fromFile: string | undefined): string | undefined {\n  return fromFile || readEnv(\"SENTRY_DSN\");\n}\n\nexport function resolveSentryDsn(): string | undefined {\n  const fromFile = normalizeSettingsConfig(loadSettingsFile(getSettingsPath()) ?? {});\n  return sentryDsnFrom(fromFile.sentryDsn);\n}\n\nexport function createGlobalSettingsFile(stateDir: string, llm?: OnboardLlmChoice): string {\n  const settingsPath = join(stateDir, \"settings.json\");\n  if (existsSync(settingsPath)) {\n    throw new Error(`Global settings already exists at ${settingsPath}`);\n  }\n  ensureDirExists(stateDir);\n  const settings: SettingsFileConfig = llm\n    ? {\n        ...ONBOARD_SETTINGS,\n        llm: {\n          ...ONBOARD_SETTINGS.llm,\n          provider: llm.provider,\n          model: llm.model,\n        },\n      }\n    : ONBOARD_SETTINGS;\n  atomicWritePrivateFile(settingsPath, JSON.stringify(settings, null, 2));\n  return settingsPath;\n}\n\nexport function hasDefinedValue(values: Record<string, unknown> | undefined): boolean {\n  return values !== undefined && Object.values(values).some((value) => value !== undefined);\n}\n\nexport function compactSettingsConfig(config: SettingsFileConfig): SettingsFileConfig {\n  return {\n    ...(hasDefinedValue(config.llm) ? { llm: config.llm } : {}),\n    ...(hasDefinedValue(config.sentry) ? { sentry: config.sentry } : {}),\n    ...(hasDefinedValue(config.sandbox) ? { sandbox: config.sandbox } : {}),\n    ...(hasDefinedValue(config.slack) ? { slack: config.slack } : {}),\n    ...(hasDefinedValue(config.office) ? { office: config.office } : {}),\n    // An empty map means \"all servers removed\".\n    ...(config.mcpServers !== undefined ? { mcpServers: config.mcpServers } : {}),\n  };\n}\n\nfunction patchSettingsConfig(\n  existing: SettingsFileConfig,\n  config: Partial<AgentConfig>,\n): SettingsFileConfig {\n  const patched: SettingsFileConfig = {\n    ...existing,\n    llm: {\n      ...existing.llm,\n      ...(config.provider !== undefined ? { provider: config.provider } : {}),\n      ...(config.model !== undefined ? { model: config.model } : {}),\n      ...(config.thinkingLevel !== undefined ? { thinkingLevel: config.thinkingLevel } : {}),\n    },\n    sentry: {\n      ...existing.sentry,\n      ...(config.sentryDsn !== undefined ? { dsn: config.sentryDsn } : {}),\n    },\n    // Leaf-level merge: a patch that only sets sandbox.boost.memory keeps the\n    // existing boost.cpus (and every other existing leaf). compactSettingsConfig\n    // drops the group entirely when it ends up with no defined values.\n    sandbox: mergeSandboxSettings(existing.sandbox, config.sandbox) ?? {},\n    slack: {\n      ...existing.slack,\n      ...config.slack,\n    },\n    // Office visibility has its own writer (setOfficeVisibilityOverride); the\n    // generic patch must not drop it.\n    ...(existing.office !== undefined ? { office: existing.office } : {}),\n    // The portal edits the full MCP map, and\n    // a merge would make removing a server impossible.\n    ...(config.mcpServers !== undefined ? { mcpServers: config.mcpServers } : {}),\n  };\n  return compactSettingsConfig(patched);\n}\n\nfunction loadSettingsFileForUpdate(\n  settingsPath: string,\n  defaultSettings: SettingsFileConfig,\n): SettingsFileConfig {\n  if (!existsSync(settingsPath)) return defaultSettings;\n  try {\n    return loadSettingsFile(settingsPath) ?? {};\n  } catch (err) {\n    const detail = err instanceof Error ? err.message : String(err);\n    const message = detail.startsWith(\"Malformed settings file\")\n      ? detail.replace(\"Malformed settings file\", \"Refusing to overwrite malformed settings file\")\n      : detail;\n    throw new Error(message, { cause: err });\n  }\n}\n\nfunction updateSettingsFile(\n  settingsPath: string,\n  patch: Partial<AgentConfig>,\n  defaultSettings: SettingsFileConfig,\n): void {\n  const existing = loadSettingsFileForUpdate(settingsPath, defaultSettings);\n  ensureDirExists(dirname(settingsPath));\n  atomicWritePrivateFile(\n    settingsPath,\n    JSON.stringify(patchSettingsConfig(existing, patch), null, 2),\n  );\n}\n\nexport function updateGlobalSettings(patch: Partial<AgentConfig>): void {\n  updateSettingsFile(getSettingsPath(), patch, ONBOARD_SETTINGS);\n}\n\nexport function updateConversationSettings(office: Office, patch: Partial<AgentConfig>): void {\n  updateSettingsFile(conversationSettingsPath(office), patch, {});\n}\n\n/**\n * The two scope-level MCP server maps, unmerged: the portal edits each scope's\n * own file, so it needs the raw per-scope values, not the effective merge\n * (`resolveConversationSettings` owns that).\n */\nexport function loadScopeMcpServers(office: Office): {\n  global: Record<string, McpServerConfig>;\n  conversation: Record<string, McpServerConfig>;\n} {\n  return {\n    global: loadRawGlobalSettings().mcpServers ?? {},\n    conversation: loadSettingsFile(conversationSettingsPath(office))?.mcpServers ?? {},\n  };\n}\n\n/**\n * The conversation's own visibility override, or null when it follows the\n * platform. Only \"private\" can be stored: an operator may narrow a public\n * channel, never widen a private one (see ADR 0008).\n */\nexport function loadOfficeVisibilityOverride(office: Office): \"private\" | null {\n  return loadSettingsFile(conversationSettingsPath(office))?.office?.visibility ?? null;\n}\n\nexport function setOfficeVisibilityOverride(office: Office, visibility: \"private\" | null): void {\n  const settingsPath = conversationSettingsPath(office);\n  const existing = loadSettingsFileForUpdate(settingsPath, {});\n  const { office: _previous, ...rest } = existing;\n  ensureDirExists(dirname(settingsPath));\n  atomicWritePrivateFile(\n    settingsPath,\n    JSON.stringify(\n      compactSettingsConfig({ ...rest, ...(visibility ? { office: { visibility } } : {}) }),\n      null,\n      2,\n    ),\n  );\n}\n"]}

package/dist/settings/migrate.d.ts

@@ -0,0 +1,21 @@
+import { type Workspace } from "../office/index.js";
+import type { OfficeKey } from "../types.js";
+export interface DoorPolicyMigrationReport {
+    /** Retired keys removed from the global settings file. */
+    global: string[];
+    conversations: {
+        key: OfficeKey;
+        removed: string[];
+        visibility?: "private";
+    }[];
+    skipped: {
+        key: OfficeKey | "global";
+        reason: string;
+    }[];
+}
+/**
+ * One-time removal of the retired door-policy settings from the global file
+ * and every registered office (ADR 0008). Run with the daemon stopped.
+ */
+export declare function migrateLegacyDoorPolicy(workspace: Workspace): DoorPolicyMigrationReport;
+//# sourceMappingURL=migrate.d.ts.map

package/dist/settings/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/settings/migrate.ts"],"names":[],"mappings":"AAOA,OAAO,EAAyB,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAS7C,MAAM,WAAW,yBAAyB;IACxC,0DAA0D;IAC1D,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,SAAS,CAAA;KAAE,EAAE,CAAC;IAC/E,OAAO,EAAE;QAAE,GAAG,EAAE,SAAS,GAAG,QAAQ,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC1D;AA8CD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,SAAS,GAAG,yBAAyB,CA4BvF"}

package/dist/settings/migrate.js

@@ -0,0 +1,86 @@
+/**
+ * One-time settings migrations run by `mikan office …` with the daemon
+ * stopped. Runtime code never imports this file.
+ */
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { atomicWritePrivateFile } from "../file-guards.js";
+import { listRegisteredOffices } from "../office/index.js";
+import { compactSettingsConfig, hasDefinedValue, loadSettingsFile, } from "./index.js";
+const RETIRED_KEYS = {
+    image: "sandbox.image.workspaceMount",
+    workspace: "sandbox.workspace",
+};
+/**
+ * Strip the retired door-policy keys from one settings file. Returns the
+ * removed key paths, or an empty list when nothing had to change (the file is
+ * then left byte-for-byte alone, which also preserves `{}` migration markers).
+ * The only value carried forward is an explicit shared-support `private`
+ * visibility, which maps onto `office.visibility` (ADR 0008). Every other
+ * retired combination — `full`, `isolated`, legacy `private` — is dropped
+ * without deriving a grant.
+ */
+function stripRetiredDoorPolicy(settingsPath, allowVisibilityCarry) {
+    const existing = loadSettingsFile(settingsPath);
+    if (!existing?.sandbox)
+        return { removed: [] };
+    const { image, workspace, ...sandboxRest } = existing.sandbox;
+    const removed = [];
+    if (image?.workspaceMount !== undefined)
+        removed.push(RETIRED_KEYS.image);
+    if (workspace !== undefined)
+        removed.push(RETIRED_KEYS.workspace);
+    if (removed.length === 0)
+        return { removed };
+    const carry = allowVisibilityCarry &&
+        workspace?.doorPolicy === "trusted" &&
+        workspace.layout !== "full" &&
+        workspace.visibility === "private";
+    const { workspaceMount: _mount, ...imageRest } = image ?? {};
+    const sandbox = {
+        ...sandboxRest,
+        ...(hasDefinedValue(imageRest) ? { image: imageRest } : {}),
+    };
+    const next = {
+        ...existing,
+        sandbox,
+        ...(carry ? { office: { ...existing.office, visibility: "private" } } : {}),
+    };
+    atomicWritePrivateFile(settingsPath, JSON.stringify(compactSettingsConfig(next), null, 2));
+    return { removed, ...(carry ? { visibility: "private" } : {}) };
+}
+/**
+ * One-time removal of the retired door-policy settings from the global file
+ * and every registered office (ADR 0008). Run with the daemon stopped.
+ */
+export function migrateLegacyDoorPolicy(workspace) {
+    const report = { global: [], conversations: [], skipped: [] };
+    try {
+        report.global = stripRetiredDoorPolicy(join(workspace.stateDir, "settings.json"), false).removed;
+    }
+    catch (error) {
+        report.skipped.push({
+            key: "global",
+            reason: error instanceof Error ? error.message : String(error),
+        });
+    }
+    for (const record of listRegisteredOffices(workspace.stateDir)) {
+        const office = workspace.office(record);
+        const settingsPath = join(office.stateDir, "settings.json");
+        if (!existsSync(settingsPath))
+            continue;
+        try {
+            const result = stripRetiredDoorPolicy(settingsPath, true);
+            if (result.removed.length > 0)
+                report.conversations.push({ key: office.key, ...result });
+        }
+        catch (error) {
+            report.skipped.push({
+                key: office.key,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    return report;
+}
+//# sourceMappingURL=migrate.js.map

package/dist/settings/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/settings/migrate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAkB,MAAM,oBAAoB,CAAC;AAE3E,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,gBAAgB,GAGjB,MAAM,YAAY,CAAC;AASpB,MAAM,YAAY,GAAG;IACnB,KAAK,EAAE,8BAA8B;IACrC,SAAS,EAAE,mBAAmB;CACtB,CAAC;AAEX;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAC7B,YAAoB,EACpB,oBAA6B;IAE7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC/C,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC9D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,EAAE,cAAc,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,KAAK,GACT,oBAAoB;QACpB,SAAS,EAAE,UAAU,KAAK,SAAS;QACnC,SAAS,CAAC,MAAM,KAAK,MAAM;QAC3B,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC;IACrC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAwB;QACnC,GAAG,WAAW;QACd,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;IACF,MAAM,IAAI,GAAuB;QAC/B,GAAG,QAAQ;QACX,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,SAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrF,CAAC;IACF,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAoB;IAC1D,MAAM,MAAM,GAA8B,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzF,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,GAAG,sBAAsB,CACpC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,eAAe,CAAC,EACzC,KAAK,CACN,CAAC,OAAO,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAClB,GAAG,EAAE,QAAQ;YACb,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBAClB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC/D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * One-time settings migrations run by `mikan office …` with the daemon\n * stopped. Runtime code never imports this file.\n */\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { atomicWritePrivateFile } from \"../file-guards.js\";\nimport { listRegisteredOffices, type Workspace } from \"../office/index.js\";\nimport type { OfficeKey } from \"../types.js\";\nimport {\n  compactSettingsConfig,\n  hasDefinedValue,\n  loadSettingsFile,\n  type SandboxFileSettings,\n  type SettingsFileConfig,\n} from \"./index.js\";\n\nexport interface DoorPolicyMigrationReport {\n  /** Retired keys removed from the global settings file. */\n  global: string[];\n  conversations: { key: OfficeKey; removed: string[]; visibility?: \"private\" }[];\n  skipped: { key: OfficeKey | \"global\"; reason: string }[];\n}\n\nconst RETIRED_KEYS = {\n  image: \"sandbox.image.workspaceMount\",\n  workspace: \"sandbox.workspace\",\n} as const;\n\n/**\n * Strip the retired door-policy keys from one settings file. Returns the\n * removed key paths, or an empty list when nothing had to change (the file is\n * then left byte-for-byte alone, which also preserves `{}` migration markers).\n * The only value carried forward is an explicit shared-support `private`\n * visibility, which maps onto `office.visibility` (ADR 0008). Every other\n * retired combination — `full`, `isolated`, legacy `private` — is dropped\n * without deriving a grant.\n */\nfunction stripRetiredDoorPolicy(\n  settingsPath: string,\n  allowVisibilityCarry: boolean,\n): { removed: string[]; visibility?: \"private\" } {\n  const existing = loadSettingsFile(settingsPath);\n  if (!existing?.sandbox) return { removed: [] };\n  const { image, workspace, ...sandboxRest } = existing.sandbox;\n  const removed: string[] = [];\n  if (image?.workspaceMount !== undefined) removed.push(RETIRED_KEYS.image);\n  if (workspace !== undefined) removed.push(RETIRED_KEYS.workspace);\n  if (removed.length === 0) return { removed };\n  const carry =\n    allowVisibilityCarry &&\n    workspace?.doorPolicy === \"trusted\" &&\n    workspace.layout !== \"full\" &&\n    workspace.visibility === \"private\";\n  const { workspaceMount: _mount, ...imageRest } = image ?? {};\n  const sandbox: SandboxFileSettings = {\n    ...sandboxRest,\n    ...(hasDefinedValue(imageRest) ? { image: imageRest } : {}),\n  };\n  const next: SettingsFileConfig = {\n    ...existing,\n    sandbox,\n    ...(carry ? { office: { ...existing.office, visibility: \"private\" as const } } : {}),\n  };\n  atomicWritePrivateFile(settingsPath, JSON.stringify(compactSettingsConfig(next), null, 2));\n  return { removed, ...(carry ? { visibility: \"private\" as const } : {}) };\n}\n\n/**\n * One-time removal of the retired door-policy settings from the global file\n * and every registered office (ADR 0008). Run with the daemon stopped.\n */\nexport function migrateLegacyDoorPolicy(workspace: Workspace): DoorPolicyMigrationReport {\n  const report: DoorPolicyMigrationReport = { global: [], conversations: [], skipped: [] };\n  try {\n    report.global = stripRetiredDoorPolicy(\n      join(workspace.stateDir, \"settings.json\"),\n      false,\n    ).removed;\n  } catch (error) {\n    report.skipped.push({\n      key: \"global\",\n      reason: error instanceof Error ? error.message : String(error),\n    });\n  }\n  for (const record of listRegisteredOffices(workspace.stateDir)) {\n    const office = workspace.office(record);\n    const settingsPath = join(office.stateDir, \"settings.json\");\n    if (!existsSync(settingsPath)) continue;\n    try {\n      const result = stripRetiredDoorPolicy(settingsPath, true);\n      if (result.removed.length > 0) report.conversations.push({ key: office.key, ...result });\n    } catch (error) {\n      report.skipped.push({\n        key: office.key,\n        reason: error instanceof Error ? error.message : String(error),\n      });\n    }\n  }\n  return report;\n}\n"]}