@geminixiang/mikan 1.0.0-beta.9 → 1.0.0-beta.91

package/dist/office/index.js

@@ -0,0 +1,395 @@
+import { createHash, randomBytes } from "node:crypto";
+import { lstatSync, mkdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { atomicWritePrivateFile, readTextFileIfExists } from "../file-guards.js";
+import { isRecord } from "../unknown-values.js";
+export const OFFICE_LOG_FILENAME = "log.jsonl";
+const OFFICE_SESSIONS_FILENAME = "sessions.db";
+const OFFICE_KEY_VERSION = "v1";
+const OFFICE_KEY_DOMAIN = "office-address-v1";
+const OFFICE_KEY_DIGEST_LENGTH = 16;
+const READABLE_ID_LENGTH = 32;
+const PLATFORM_NAMES = new Set(["slack", "discord", "telegram", "github"]);
+const OFFICE_KEY_PATTERN = /^v1-(slack|discord|telegram|github)-[a-z0-9]+(?:-[a-z0-9]+)*-[a-f0-9]{16}$/;
+export function createOfficeAddress(platform, conversationId) {
+    assertPlatformName(platform);
+    assertConversationId(conversationId);
+    return Object.freeze({ platform, conversationId });
+}
+export function validateOfficeAddress(value) {
+    if (!isRecord(value))
+        throw new Error("Office address must be an object");
+    if (typeof value.platform !== "string") {
+        throw new Error("Office address platform must be a string");
+    }
+    if (typeof value.conversationId !== "string") {
+        throw new Error("Office address conversation id must be a string");
+    }
+    return createOfficeAddress(assertPlatformName(value.platform), value.conversationId);
+}
+function isPlatformName(value) {
+    return typeof value === "string" && PLATFORM_NAMES.has(value);
+}
+export function assertPlatformName(value) {
+    if (!isPlatformName(value))
+        throw new Error(`Unsupported platform: ${JSON.stringify(value)}`);
+    return value;
+}
+function isUnsafeConversationIdChar(character) {
+    const code = character.codePointAt(0) ?? 0;
+    return character === "/" || character === "\\" || code <= 0x1f || (code >= 0x7f && code <= 0x9f);
+}
+export function assertConversationId(value) {
+    if (value.length === 0 || value === "." || value === "..") {
+        throw new Error("Conversation id must be non-empty and not a path marker");
+    }
+    if ([...value].some(isUnsafeConversationIdChar)) {
+        throw new Error("Conversation id must not contain path separators or control characters");
+    }
+    return value;
+}
+export function officeKey(address) {
+    const normalized = validateOfficeAddress(address);
+    const readable = readableConversationId(normalized.conversationId);
+    const digest = createHash("sha256")
+        .update(`${OFFICE_KEY_DOMAIN}\0${normalized.platform}\0${normalized.conversationId}`)
+        .digest("hex")
+        .slice(0, OFFICE_KEY_DIGEST_LENGTH);
+    return `${OFFICE_KEY_VERSION}-${normalized.platform}-${readable}-${digest}`;
+}
+export function officeDir(workspaceRoot, address) {
+    return join(workspaceRoot, officeKey(address));
+}
+export function officeStateDir(stateDir, address) {
+    return join(stateDir, "conversations", officeKey(address));
+}
+export function sameOffice(left, right) {
+    const leftAddress = validateOfficeAddress(left);
+    const rightAddress = validateOfficeAddress(right);
+    return (leftAddress.platform === rightAddress.platform &&
+        leftAddress.conversationId === rightAddress.conversationId);
+}
+function resolveConversationAddress(input) {
+    const address = createOfficeAddress(input.platform, input.conversationId);
+    if (input.address && !sameOffice(address, input.address)) {
+        throw new Error(`Conversation address mismatch for ${JSON.stringify(input.conversationId)} on ${input.platform}`);
+    }
+    return address;
+}
+export function createConversationEvent(input) {
+    const address = resolveConversationAddress(input);
+    const { platform: _platform, conversationId: _conversationId, address: _suppliedAddress, ...event } = input;
+    return { ...event, address };
+}
+export function createConversationMessage(input) {
+    const address = resolveConversationAddress(input);
+    const { platform: _platform, conversationId: _conversationId, address: _suppliedAddress, ...message } = input;
+    return { ...message, address };
+}
+export function buildGithubConversationId(ref) {
+    return `GH_${ref.owner.toLowerCase()}_${ref.repo.toLowerCase()}_${ref.number}`;
+}
+const GITHUB_CONVERSATION_ID_PATTERN = /^GH_([A-Za-z0-9-]+)_(.+)_(\d+)$/;
+export function parseGithubConversationId(conversationId) {
+    const match = GITHUB_CONVERSATION_ID_PATTERN.exec(conversationId);
+    if (!match) {
+        throw new Error(`Not a GitHub conversation id: ${conversationId}`);
+    }
+    const [, owner, repo, number] = match;
+    if (owner === undefined || repo === undefined || number === undefined) {
+        throw new Error(`Not a GitHub conversation id: ${conversationId}`);
+    }
+    return {
+        owner: owner.toLowerCase(),
+        repo: repo.toLowerCase(),
+        number: Number(number),
+    };
+}
+export function isOfficeKey(value) {
+    return typeof value === "string" && OFFICE_KEY_PATTERN.test(value);
+}
+function readableConversationId(conversationId) {
+    const readable = conversationId
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .slice(0, READABLE_ID_LENGTH)
+        .replace(/-+$/g, "");
+    return readable || "conversation";
+}
+export const RESERVED_WORKSPACE_NAMES = Object.freeze(new Set(["skills", "events", "agents", "MEMORY.md"]));
+export function createWorkspace(options) {
+    const { root, stateDir } = options;
+    let registry;
+    const recorded = new Set();
+    const offices = new Map();
+    const workspace = Object.freeze({
+        root,
+        stateDir,
+        memoryPath: join(root, "MEMORY.md"),
+        skillsDir: join(root, "skills"),
+        agentsDir: join(root, "agents"),
+        reservedNames: RESERVED_WORKSPACE_NAMES,
+        office(address) {
+            const normalized = validateOfficeAddress(address);
+            const key = officeKey(normalized);
+            const existing = offices.get(key);
+            if (existing)
+                return existing;
+            const dir = join(root, key);
+            const conversationStateDir = join(stateDir, "conversations", key);
+            const office = Object.freeze({
+                address: normalized,
+                key,
+                dir,
+                memoryPath: join(dir, "MEMORY.md"),
+                skillsDir: join(dir, "skills"),
+                sessionsPath: join(conversationStateDir, OFFICE_SESSIONS_FILENAME),
+                attachmentsDir: join(dir, "attachments"),
+                logPath: join(dir, OFFICE_LOG_FILENAME),
+                stateDir: conversationStateDir,
+                workspace,
+                ensure() {
+                    if (!recorded.has(key)) {
+                        registry ??= new OfficeRegistry(stateDir);
+                        registry.recordOffice(normalized);
+                        recorded.add(key);
+                    }
+                    ensureRegularOfficeDirectory(dir);
+                    return dir;
+                },
+            });
+            offices.set(key, office);
+            return office;
+        },
+    });
+    return workspace;
+}
+function ensureRegularOfficeDirectory(dir) {
+    let stats;
+    try {
+        stats = lstatSync(dir);
+    }
+    catch (err) {
+        if (err.code !== "ENOENT")
+            throw err;
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        return;
+    }
+    if (stats.isSymbolicLink() || !stats.isDirectory()) {
+        throw new Error(`Office directory must be a regular non-symlink directory: ${dir}`);
+    }
+}
+const REGISTRY_VERSION = 1;
+const REGISTRY_FILENAME = "office-registry.json";
+const REGISTRY_LOCK_FILENAME = ".office-registry.lock";
+const REGISTRY_LOCK_RETRY_MS = 25;
+const REGISTRY_LOCK_TIMEOUT_MS = 5_000;
+const REGISTRY_LOCK_STALE_MS = 60_000;
+export class OfficeRegistry {
+    constructor(stateDir, options = {}) {
+        this.stateDir = resolve(stateDir);
+        mkdirSync(this.stateDir, { recursive: true, mode: 0o700 });
+        assertRegularDirectory(this.stateDir, "State directory");
+        this.registryPath = resolve(this.stateDir, REGISTRY_FILENAME);
+        this.lockPath = join(this.stateDir, REGISTRY_LOCK_FILENAME);
+        this.writeState = options.writeState ?? atomicWritePrivateFile;
+        this.lockTimeoutMs = options.lockTimeoutMs ?? REGISTRY_LOCK_TIMEOUT_MS;
+        this.state = this.readState();
+    }
+    recordOffice(address) {
+        const normalized = validateOfficeAddress(address);
+        const existing = this.findOffice(normalized);
+        if (existing)
+            return existing;
+        return this.withExclusiveLease(() => {
+            const found = this.findOffice(normalized);
+            if (found)
+                return found;
+            const record = Object.freeze({
+                platform: normalized.platform,
+                conversationId: normalized.conversationId,
+                recordedAt: new Date().toISOString(),
+            });
+            this.replaceState([...this.state.offices, record]);
+            return record;
+        });
+    }
+    getOffices() {
+        return this.state.offices;
+    }
+    findOffice(address) {
+        return this.state.offices.find((record) => record.platform === address.platform && record.conversationId === address.conversationId);
+    }
+    replaceState(offices) {
+        const candidate = freezeState(offices);
+        this.writeState(this.registryPath, `${JSON.stringify(candidate, null, 2)}\n`);
+        this.state = candidate;
+    }
+    withExclusiveLease(operation) {
+        const release = acquireRegistryLease(this.lockPath, this.lockTimeoutMs);
+        try {
+            this.state = this.readState();
+            return operation();
+        }
+        finally {
+            release();
+        }
+    }
+    readState() {
+        assertRegistryFileSafe(this.registryPath);
+        const raw = readTextFileIfExists(this.registryPath);
+        if (raw === undefined) {
+            return freezeState([]);
+        }
+        let value;
+        try {
+            value = JSON.parse(raw);
+        }
+        catch (error) {
+            throw new Error(`Invalid office registry JSON at ${this.registryPath}`, { cause: error });
+        }
+        return parseState(value, this.registryPath);
+    }
+}
+function freezeState(offices) {
+    return Object.freeze({
+        version: REGISTRY_VERSION,
+        offices: Object.freeze(offices.map((record) => Object.freeze({ ...record }))),
+    });
+}
+function parseState(value, path) {
+    if (!isRecord(value) || value.version !== REGISTRY_VERSION || !Array.isArray(value.offices)) {
+        throw new Error(`Invalid office registry at ${path}`);
+    }
+    const offices = value.offices.map((entry) => parseOfficeRecord(entry, path));
+    if (new Set(offices.map((record) => officeKey(record))).size !== offices.length) {
+        throw new Error(`Duplicate office record in ${path}`);
+    }
+    return freezeState(offices);
+}
+function parseOfficeRecord(value, path) {
+    if (!isRecord(value))
+        throw new Error(`Invalid office record in ${path}`);
+    if (typeof value.platform !== "string" ||
+        typeof value.conversationId !== "string" ||
+        typeof value.recordedAt !== "string") {
+        throw new Error(`Invalid office record fields in ${path}`);
+    }
+    return Object.freeze({
+        platform: assertPlatformName(value.platform),
+        conversationId: assertConversationId(value.conversationId),
+        recordedAt: value.recordedAt,
+    });
+}
+function assertRegularDirectory(path, label) {
+    let stat;
+    try {
+        stat = lstatSync(path);
+    }
+    catch (error) {
+        throw new Error(`${label} does not exist: ${path}`, { cause: error });
+    }
+    if (stat.isSymbolicLink() || !stat.isDirectory()) {
+        throw new Error(`${label} must be a regular directory: ${path}`);
+    }
+}
+function lstatIfExists(path) {
+    try {
+        return lstatSync(path);
+    }
+    catch (error) {
+        if (isErrno(error, "ENOENT"))
+            return undefined;
+        throw error;
+    }
+}
+function assertRegistryFileSafe(path) {
+    const stat = lstatIfExists(path);
+    if (stat && (stat.isSymbolicLink() || !stat.isFile())) {
+        throw new Error(`Office registry must be a regular file: ${path}`);
+    }
+}
+function claimRegistryLock(lockPath, token) {
+    mkdirSync(lockPath, { mode: 0o700 });
+    try {
+        writeFileSync(join(lockPath, "owner"), `${token}\n`, { mode: 0o600 });
+    }
+    catch (error) {
+        rmSync(lockPath, { recursive: true, force: true });
+        throw error;
+    }
+}
+function acquireRegistryLease(lockPath, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    const token = `${process.pid}:${randomBytes(8).toString("hex")}`;
+    for (;;) {
+        try {
+            claimRegistryLock(lockPath, token);
+            return () => releaseRegistryLease(lockPath, token);
+        }
+        catch (error) {
+            awaitFreeRegistryLock(lockPath, deadline, error);
+        }
+    }
+}
+function awaitFreeRegistryLock(lockPath, deadline, error) {
+    if (!isErrno(error, "EEXIST"))
+        throw error;
+    if (registryLockIsStale(lockPath)) {
+        rmSync(lockPath, { recursive: true, force: true });
+        return;
+    }
+    if (Date.now() >= deadline) {
+        throw new Error(`Timed out acquiring office registry lock: ${lockPath}`, { cause: error });
+    }
+    sleepSync(REGISTRY_LOCK_RETRY_MS);
+}
+function releaseRegistryLease(lockPath, token) {
+    try {
+        if (readFileSync(join(lockPath, "owner"), "utf8").trim() === token) {
+            rmSync(lockPath, { recursive: true, force: true });
+        }
+    }
+    catch (error) {
+        if (!isErrno(error, "ENOENT"))
+            throw error;
+    }
+}
+function registryLockIsStale(lockPath) {
+    let ownerKnown = false;
+    let ownerAlive = false;
+    try {
+        const owner = readFileSync(join(lockPath, "owner"), "utf8").trim();
+        const pid = Number(owner.split(":", 1)[0]);
+        if (Number.isInteger(pid) && pid > 0) {
+            ownerKnown = true;
+            try {
+                process.kill(pid, 0);
+                ownerAlive = true;
+            }
+            catch (error) {
+                if (isErrno(error, "EPERM"))
+                    ownerAlive = true;
+            }
+        }
+    }
+    catch { }
+    try {
+        const oldEnough = Date.now() - statSync(lockPath).mtimeMs >= REGISTRY_LOCK_STALE_MS;
+        return ownerKnown ? !ownerAlive : oldEnough;
+    }
+    catch {
+        return false;
+    }
+}
+function sleepSync(milliseconds) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, milliseconds);
+}
+export function listRegisteredOffices(stateDir) {
+    return new OfficeRegistry(stateDir).getOffices();
+}
+function isErrno(error, code) {
+    return error instanceof Error && "code" in error && error.code === code;
+}
+//# sourceMappingURL=index.js.map

package/dist/office/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/office/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAW1C,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAC/C,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAC/C,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAC9C,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,cAAc,GAAG,IAAI,GAAG,CAAe,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AACzF,MAAM,kBAAkB,GACtB,4EAA4E,CAAC;AAE/E,MAAM,UAAU,mBAAmB,CAAC,QAAsB,EAAE,cAAsB;IAChF,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7B,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC1E,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,KAAqB,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CAAC,SAAiB;IACnD,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAsB;IAC9C,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,GAAG,iBAAiB,KAAK,UAAU,CAAC,QAAQ,KAAK,UAAU,CAAC,cAAc,EAAE,CAAC;SACpF,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACtC,OAAO,GAAG,kBAAkB,IAAI,UAAU,CAAC,QAAQ,IAAI,QAAQ,IAAI,MAAM,EAAe,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,aAAqB,EAAE,OAAsB;IACrE,OAAO,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAsB;IACrE,OAAO,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAmB,EAAE,KAAoB;IAClE,MAAM,WAAW,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,CACL,WAAW,CAAC,QAAQ,KAAK,YAAY,CAAC,QAAQ;QAC9C,WAAW,CAAC,cAAc,KAAK,YAAY,CAAC,cAAc,CAC3D,CAAC;AACJ,CAAC;AAQD,SAAS,0BAA0B,CAAC,KAAgC;IAClE,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,KAAK,CAAC,QAAQ,EAAE,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAID,MAAM,UAAU,uBAAuB,CACrC,KAAoC;IAEpC,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,EACJ,QAAQ,EAAE,SAAS,EACnB,cAAc,EAAE,eAAe,EAC/B,OAAO,EAAE,gBAAgB,EACzB,GAAG,KAAK,EACT,GAAG,KAAK,CAAC;IACV,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAiD,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAoC;IAEpC,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,EACJ,QAAQ,EAAE,SAAS,EACnB,cAAc,EAAE,eAAe,EAC/B,OAAO,EAAE,gBAAgB,EACzB,GAAG,OAAO,EACX,GAAG,KAAK,CAAC;IACV,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAmD,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAA0B;IAClE,OAAO,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,8BAA8B,GAAG,iCAAiC,CAAC;AAEzE,MAAM,UAAU,yBAAyB,CAAC,cAAsB;IAC9D,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,cAAc,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IACtC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,iCAAiC,cAAc,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;QAC1B,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,sBAAsB,CAAC,cAAsB;IACpD,MAAM,QAAQ,GAAG,cAAc;SAC5B,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC;SAC5B,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,OAAO,QAAQ,IAAI,cAAc,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAwB,MAAM,CAAC,MAAM,CACxE,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CACrD,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,OAA2C;IACzE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACnC,IAAI,QAAoC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1C,MAAM,SAAS,GAAc,MAAM,CAAC,MAAM,CAAC;QACzC,IAAI;QACJ,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QACnC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC/B,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC/B,aAAa,EAAE,wBAAwB;QACvC,MAAM,CAAC,OAAsB;YAC3B,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,MAAM,oBAAoB,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;YAClE,MAAM,MAAM,GAAW,MAAM,CAAC,MAAM,CAAC;gBACnC,OAAO,EAAE,UAAU;gBACnB,GAAG;gBACH,GAAG;gBACH,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;gBAClC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;gBAC9B,YAAY,EAAE,IAAI,CAAC,oBAAoB,EAAE,wBAAwB,CAAC;gBAClE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;gBACxC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC;gBACvC,QAAQ,EAAE,oBAAoB;gBAC9B,SAAS;gBACT,MAAM;oBACJ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACvB,QAAQ,KAAK,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;wBAC1C,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;wBAClC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACpB,CAAC;oBACD,4BAA4B,CAAC,GAAG,CAAC,CAAC;oBAClC,OAAO,GAAG,CAAC;gBACb,CAAC;aACF,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,4BAA4B,CAAC,GAAW;IAC/C,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;QAChE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACjD,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AACvD,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAOtC,MAAM,OAAO,cAAc;IAQzB,YAAY,QAAgB,EAAE,OAAO,GAA0B,EAAE;QAC/D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACzD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,sBAAsB,CAAC;QAC/D,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,wBAAwB,CAAC;QACvE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,CAAC;IAED,YAAY,CAAC,OAAsB;QACjC,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;YACxB,MAAM,MAAM,GAAiB,MAAM,CAAC,MAAM,CAAC;gBACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACnD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5B,CAAC;IAEO,UAAU,CAAC,OAAsB;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAC5B,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,CAC3F,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,OAAgC;QACnD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IAEO,kBAAkB,CAAI,SAAkB;QAC9C,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,SAAS;QACf,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;QAED,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,SAAS,WAAW,CAAC,OAAgC;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,gBAAqB;QAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;KAC9E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,gBAAgB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7E,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAY;IACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IAC1E,IACE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;QACxC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5C,cAAc,EAAE,oBAAoB,CAAC,KAAK,CAAC,cAAc,CAAC;QAC1D,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,KAAa;IACzD,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,KAAa;IACxD,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,SAAiB;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAEjE,SAAS,CAAC;QACR,IAAI,CAAC;YACH,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACnC,OAAO,GAAG,EAAE,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,QAAgB,EAAE,KAAc;IAC/E,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,MAAM,KAAK,CAAC;IAC3C,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,SAAS,CAAC,sBAAsB,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,KAAa;IAC3D,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;YACnE,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,MAAM,KAAK,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACrC,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACrB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;oBAAE,UAAU,GAAG,IAAI,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,IAAI,sBAAsB,CAAC;QACpF,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,YAAoB;IACrC,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY;IAC3C,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAC1E,CAAC","sourcesContent":["import { createHash, randomBytes } from \"node:crypto\";\nimport type { Stats } from \"node:fs\";\nimport { lstatSync, mkdirSync, readFileSync, rmSync, statSync, writeFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport type {\n  ConversationEvent,\n  ConversationMessage,\n  OfficeAddress,\n  OfficeKey,\n  OfficeRecord,\n  OfficeRegistryState,\n  PlatformName,\n} from \"../types.js\";\nimport type { GithubConversationRef, Office, Workspace } from \"./types.js\";\nimport { atomicWritePrivateFile, readTextFileIfExists } from \"../file-guards.js\";\nimport { isRecord } from \"../unknown-values.js\";\n\nexport const OFFICE_LOG_FILENAME = \"log.jsonl\";\nconst OFFICE_SESSIONS_FILENAME = \"sessions.db\";\nconst OFFICE_KEY_VERSION = \"v1\";\nconst OFFICE_KEY_DOMAIN = \"office-address-v1\";\nconst OFFICE_KEY_DIGEST_LENGTH = 16;\nconst READABLE_ID_LENGTH = 32;\nconst PLATFORM_NAMES = new Set<PlatformName>([\"slack\", \"discord\", \"telegram\", \"github\"]);\nconst OFFICE_KEY_PATTERN =\n  /^v1-(slack|discord|telegram|github)-[a-z0-9]+(?:-[a-z0-9]+)*-[a-f0-9]{16}$/;\n\nexport function createOfficeAddress(platform: PlatformName, conversationId: string): OfficeAddress {\n  assertPlatformName(platform);\n  assertConversationId(conversationId);\n  return Object.freeze({ platform, conversationId });\n}\n\nexport function validateOfficeAddress(value: unknown): OfficeAddress {\n  if (!isRecord(value)) throw new Error(\"Office address must be an object\");\n  if (typeof value.platform !== \"string\") {\n    throw new Error(\"Office address platform must be a string\");\n  }\n  if (typeof value.conversationId !== \"string\") {\n    throw new Error(\"Office address conversation id must be a string\");\n  }\n  return createOfficeAddress(assertPlatformName(value.platform), value.conversationId);\n}\n\nfunction isPlatformName(value: unknown): value is PlatformName {\n  return typeof value === \"string\" && PLATFORM_NAMES.has(value as PlatformName);\n}\n\nexport function assertPlatformName(value: string): PlatformName {\n  if (!isPlatformName(value)) throw new Error(`Unsupported platform: ${JSON.stringify(value)}`);\n  return value;\n}\n\nfunction isUnsafeConversationIdChar(character: string): boolean {\n  const code = character.codePointAt(0) ?? 0;\n  return character === \"/\" || character === \"\\\\\" || code <= 0x1f || (code >= 0x7f && code <= 0x9f);\n}\n\nexport function assertConversationId(value: string): string {\n  if (value.length === 0 || value === \".\" || value === \"..\") {\n    throw new Error(\"Conversation id must be non-empty and not a path marker\");\n  }\n  if ([...value].some(isUnsafeConversationIdChar)) {\n    throw new Error(\"Conversation id must not contain path separators or control characters\");\n  }\n  return value;\n}\n\nexport function officeKey(address: OfficeAddress): OfficeKey {\n  const normalized = validateOfficeAddress(address);\n  const readable = readableConversationId(normalized.conversationId);\n  const digest = createHash(\"sha256\")\n    .update(`${OFFICE_KEY_DOMAIN}\\0${normalized.platform}\\0${normalized.conversationId}`)\n    .digest(\"hex\")\n    .slice(0, OFFICE_KEY_DIGEST_LENGTH);\n  return `${OFFICE_KEY_VERSION}-${normalized.platform}-${readable}-${digest}` as OfficeKey;\n}\n\nexport function officeDir(workspaceRoot: string, address: OfficeAddress): string {\n  return join(workspaceRoot, officeKey(address));\n}\n\nexport function officeStateDir(stateDir: string, address: OfficeAddress): string {\n  return join(stateDir, \"conversations\", officeKey(address));\n}\n\nexport function sameOffice(left: OfficeAddress, right: OfficeAddress): boolean {\n  const leftAddress = validateOfficeAddress(left);\n  const rightAddress = validateOfficeAddress(right);\n  return (\n    leftAddress.platform === rightAddress.platform &&\n    leftAddress.conversationId === rightAddress.conversationId\n  );\n}\n\ninterface ConversationIdentityInput {\n  platform: PlatformName;\n  conversationId: string;\n  address?: OfficeAddress;\n}\n\nfunction resolveConversationAddress(input: ConversationIdentityInput): OfficeAddress {\n  const address = createOfficeAddress(input.platform, input.conversationId);\n  if (input.address && !sameOffice(address, input.address)) {\n    throw new Error(\n      `Conversation address mismatch for ${JSON.stringify(input.conversationId)} on ${input.platform}`,\n    );\n  }\n  return address;\n}\n\ntype CanonicalConversation<T, Shape> = Omit<T, keyof ConversationIdentityInput> & Shape;\n\nexport function createConversationEvent<T extends Omit<ConversationEvent, \"address\">>(\n  input: T & ConversationIdentityInput,\n): CanonicalConversation<T, ConversationEvent> {\n  const address = resolveConversationAddress(input);\n  const {\n    platform: _platform,\n    conversationId: _conversationId,\n    address: _suppliedAddress,\n    ...event\n  } = input;\n  return { ...event, address } as CanonicalConversation<T, ConversationEvent>;\n}\n\nexport function createConversationMessage<T extends Omit<ConversationMessage, \"address\">>(\n  input: T & ConversationIdentityInput,\n): CanonicalConversation<T, ConversationMessage> {\n  const address = resolveConversationAddress(input);\n  const {\n    platform: _platform,\n    conversationId: _conversationId,\n    address: _suppliedAddress,\n    ...message\n  } = input;\n  return { ...message, address } as CanonicalConversation<T, ConversationMessage>;\n}\n\nexport function buildGithubConversationId(ref: GithubConversationRef): string {\n  return `GH_${ref.owner.toLowerCase()}_${ref.repo.toLowerCase()}_${ref.number}`;\n}\n\nconst GITHUB_CONVERSATION_ID_PATTERN = /^GH_([A-Za-z0-9-]+)_(.+)_(\\d+)$/;\n\nexport function parseGithubConversationId(conversationId: string): GithubConversationRef {\n  const match = GITHUB_CONVERSATION_ID_PATTERN.exec(conversationId);\n  if (!match) {\n    throw new Error(`Not a GitHub conversation id: ${conversationId}`);\n  }\n  const [, owner, repo, number] = match;\n  if (owner === undefined || repo === undefined || number === undefined) {\n    throw new Error(`Not a GitHub conversation id: ${conversationId}`);\n  }\n  return {\n    owner: owner.toLowerCase(),\n    repo: repo.toLowerCase(),\n    number: Number(number),\n  };\n}\n\nexport function isOfficeKey(value: unknown): value is OfficeKey {\n  return typeof value === \"string\" && OFFICE_KEY_PATTERN.test(value);\n}\n\nfunction readableConversationId(conversationId: string): string {\n  const readable = conversationId\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\")\n    .slice(0, READABLE_ID_LENGTH)\n    .replace(/-+$/g, \"\");\n  return readable || \"conversation\";\n}\n\nexport const RESERVED_WORKSPACE_NAMES: ReadonlySet<string> = Object.freeze(\n  new Set([\"skills\", \"events\", \"agents\", \"MEMORY.md\"]),\n);\n\nexport function createWorkspace(options: { root: string; stateDir: string }): Workspace {\n  const { root, stateDir } = options;\n  let registry: OfficeRegistry | undefined;\n  const recorded = new Set<string>();\n  const offices = new Map<string, Office>();\n\n  const workspace: Workspace = Object.freeze({\n    root,\n    stateDir,\n    memoryPath: join(root, \"MEMORY.md\"),\n    skillsDir: join(root, \"skills\"),\n    agentsDir: join(root, \"agents\"),\n    reservedNames: RESERVED_WORKSPACE_NAMES,\n    office(address: OfficeAddress): Office {\n      const normalized = validateOfficeAddress(address);\n      const key = officeKey(normalized);\n      const existing = offices.get(key);\n      if (existing) return existing;\n\n      const dir = join(root, key);\n      const conversationStateDir = join(stateDir, \"conversations\", key);\n      const office: Office = Object.freeze({\n        address: normalized,\n        key,\n        dir,\n        memoryPath: join(dir, \"MEMORY.md\"),\n        skillsDir: join(dir, \"skills\"),\n        sessionsPath: join(conversationStateDir, OFFICE_SESSIONS_FILENAME),\n        attachmentsDir: join(dir, \"attachments\"),\n        logPath: join(dir, OFFICE_LOG_FILENAME),\n        stateDir: conversationStateDir,\n        workspace,\n        ensure(): string {\n          if (!recorded.has(key)) {\n            registry ??= new OfficeRegistry(stateDir);\n            registry.recordOffice(normalized);\n            recorded.add(key);\n          }\n          ensureRegularOfficeDirectory(dir);\n          return dir;\n        },\n      });\n      offices.set(key, office);\n      return office;\n    },\n  });\n  return workspace;\n}\n\nfunction ensureRegularOfficeDirectory(dir: string): void {\n  let stats;\n  try {\n    stats = lstatSync(dir);\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n    mkdirSync(dir, { recursive: true, mode: 0o700 });\n    return;\n  }\n  if (stats.isSymbolicLink() || !stats.isDirectory()) {\n    throw new Error(`Office directory must be a regular non-symlink directory: ${dir}`);\n  }\n}\n\nconst REGISTRY_VERSION = 1;\nconst REGISTRY_FILENAME = \"office-registry.json\";\nconst REGISTRY_LOCK_FILENAME = \".office-registry.lock\";\nconst REGISTRY_LOCK_RETRY_MS = 25;\nconst REGISTRY_LOCK_TIMEOUT_MS = 5_000;\nconst REGISTRY_LOCK_STALE_MS = 60_000;\n\ninterface OfficeRegistryOptions {\n  writeState?: (path: string, content: string) => void;\n  lockTimeoutMs?: number;\n}\n\nexport class OfficeRegistry {\n  private readonly stateDir: string;\n  private readonly registryPath: string;\n  private readonly lockPath: string;\n  private readonly writeState: (path: string, content: string) => void;\n  private readonly lockTimeoutMs: number;\n  private state: OfficeRegistryState;\n\n  constructor(stateDir: string, options: OfficeRegistryOptions = {}) {\n    this.stateDir = resolve(stateDir);\n    mkdirSync(this.stateDir, { recursive: true, mode: 0o700 });\n    assertRegularDirectory(this.stateDir, \"State directory\");\n    this.registryPath = resolve(this.stateDir, REGISTRY_FILENAME);\n    this.lockPath = join(this.stateDir, REGISTRY_LOCK_FILENAME);\n    this.writeState = options.writeState ?? atomicWritePrivateFile;\n    this.lockTimeoutMs = options.lockTimeoutMs ?? REGISTRY_LOCK_TIMEOUT_MS;\n    this.state = this.readState();\n  }\n\n  recordOffice(address: OfficeAddress): OfficeRecord {\n    const normalized = validateOfficeAddress(address);\n    const existing = this.findOffice(normalized);\n    if (existing) return existing;\n    return this.withExclusiveLease(() => {\n      const found = this.findOffice(normalized);\n      if (found) return found;\n      const record: OfficeRecord = Object.freeze({\n        platform: normalized.platform,\n        conversationId: normalized.conversationId,\n        recordedAt: new Date().toISOString(),\n      });\n      this.replaceState([...this.state.offices, record]);\n      return record;\n    });\n  }\n\n  getOffices(): readonly OfficeRecord[] {\n    return this.state.offices;\n  }\n\n  private findOffice(address: OfficeAddress): OfficeRecord | undefined {\n    return this.state.offices.find(\n      (record) =>\n        record.platform === address.platform && record.conversationId === address.conversationId,\n    );\n  }\n\n  private replaceState(offices: readonly OfficeRecord[]): void {\n    const candidate = freezeState(offices);\n    this.writeState(this.registryPath, `${JSON.stringify(candidate, null, 2)}\\n`);\n    this.state = candidate;\n  }\n\n  private withExclusiveLease<T>(operation: () => T): T {\n    const release = acquireRegistryLease(this.lockPath, this.lockTimeoutMs);\n    try {\n      this.state = this.readState();\n      return operation();\n    } finally {\n      release();\n    }\n  }\n\n  private readState(): OfficeRegistryState {\n    assertRegistryFileSafe(this.registryPath);\n    const raw = readTextFileIfExists(this.registryPath);\n    if (raw === undefined) {\n      return freezeState([]);\n    }\n\n    let value: unknown;\n    try {\n      value = JSON.parse(raw);\n    } catch (error) {\n      throw new Error(`Invalid office registry JSON at ${this.registryPath}`, { cause: error });\n    }\n    return parseState(value, this.registryPath);\n  }\n}\n\nfunction freezeState(offices: readonly OfficeRecord[]): OfficeRegistryState {\n  return Object.freeze({\n    version: REGISTRY_VERSION as 1,\n    offices: Object.freeze(offices.map((record) => Object.freeze({ ...record }))),\n  });\n}\n\nfunction parseState(value: unknown, path: string): OfficeRegistryState {\n  if (!isRecord(value) || value.version !== REGISTRY_VERSION || !Array.isArray(value.offices)) {\n    throw new Error(`Invalid office registry at ${path}`);\n  }\n  const offices = value.offices.map((entry) => parseOfficeRecord(entry, path));\n  if (new Set(offices.map((record) => officeKey(record))).size !== offices.length) {\n    throw new Error(`Duplicate office record in ${path}`);\n  }\n  return freezeState(offices);\n}\n\nfunction parseOfficeRecord(value: unknown, path: string): OfficeRecord {\n  if (!isRecord(value)) throw new Error(`Invalid office record in ${path}`);\n  if (\n    typeof value.platform !== \"string\" ||\n    typeof value.conversationId !== \"string\" ||\n    typeof value.recordedAt !== \"string\"\n  ) {\n    throw new Error(`Invalid office record fields in ${path}`);\n  }\n  return Object.freeze({\n    platform: assertPlatformName(value.platform),\n    conversationId: assertConversationId(value.conversationId),\n    recordedAt: value.recordedAt,\n  });\n}\n\nfunction assertRegularDirectory(path: string, label: string): void {\n  let stat;\n  try {\n    stat = lstatSync(path);\n  } catch (error) {\n    throw new Error(`${label} does not exist: ${path}`, { cause: error });\n  }\n  if (stat.isSymbolicLink() || !stat.isDirectory()) {\n    throw new Error(`${label} must be a regular directory: ${path}`);\n  }\n}\n\nfunction lstatIfExists(path: string): Stats | undefined {\n  try {\n    return lstatSync(path);\n  } catch (error) {\n    if (isErrno(error, \"ENOENT\")) return undefined;\n    throw error;\n  }\n}\n\nfunction assertRegistryFileSafe(path: string): void {\n  const stat = lstatIfExists(path);\n  if (stat && (stat.isSymbolicLink() || !stat.isFile())) {\n    throw new Error(`Office registry must be a regular file: ${path}`);\n  }\n}\n\nfunction claimRegistryLock(lockPath: string, token: string): void {\n  mkdirSync(lockPath, { mode: 0o700 });\n  try {\n    writeFileSync(join(lockPath, \"owner\"), `${token}\\n`, { mode: 0o600 });\n  } catch (error) {\n    rmSync(lockPath, { recursive: true, force: true });\n    throw error;\n  }\n}\n\nfunction acquireRegistryLease(lockPath: string, timeoutMs: number): () => void {\n  const deadline = Date.now() + timeoutMs;\n  const token = `${process.pid}:${randomBytes(8).toString(\"hex\")}`;\n\n  for (;;) {\n    try {\n      claimRegistryLock(lockPath, token);\n      return () => releaseRegistryLease(lockPath, token);\n    } catch (error) {\n      awaitFreeRegistryLock(lockPath, deadline, error);\n    }\n  }\n}\n\nfunction awaitFreeRegistryLock(lockPath: string, deadline: number, error: unknown): void {\n  if (!isErrno(error, \"EEXIST\")) throw error;\n  if (registryLockIsStale(lockPath)) {\n    rmSync(lockPath, { recursive: true, force: true });\n    return;\n  }\n  if (Date.now() >= deadline) {\n    throw new Error(`Timed out acquiring office registry lock: ${lockPath}`, { cause: error });\n  }\n  sleepSync(REGISTRY_LOCK_RETRY_MS);\n}\n\nfunction releaseRegistryLease(lockPath: string, token: string): void {\n  try {\n    if (readFileSync(join(lockPath, \"owner\"), \"utf8\").trim() === token) {\n      rmSync(lockPath, { recursive: true, force: true });\n    }\n  } catch (error) {\n    if (!isErrno(error, \"ENOENT\")) throw error;\n  }\n}\n\nfunction registryLockIsStale(lockPath: string): boolean {\n  let ownerKnown = false;\n  let ownerAlive = false;\n  try {\n    const owner = readFileSync(join(lockPath, \"owner\"), \"utf8\").trim();\n    const pid = Number(owner.split(\":\", 1)[0]);\n    if (Number.isInteger(pid) && pid > 0) {\n      ownerKnown = true;\n      try {\n        process.kill(pid, 0);\n        ownerAlive = true;\n      } catch (error) {\n        if (isErrno(error, \"EPERM\")) ownerAlive = true;\n      }\n    }\n  } catch {}\n  try {\n    const oldEnough = Date.now() - statSync(lockPath).mtimeMs >= REGISTRY_LOCK_STALE_MS;\n    return ownerKnown ? !ownerAlive : oldEnough;\n  } catch {\n    return false;\n  }\n}\n\nfunction sleepSync(milliseconds: number): void {\n  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, milliseconds);\n}\n\nexport function listRegisteredOffices(stateDir: string): readonly OfficeRecord[] {\n  return new OfficeRegistry(stateDir).getOffices();\n}\n\nfunction isErrno(error: unknown, code: string): error is NodeJS.ErrnoException {\n  return error instanceof Error && \"code\" in error && error.code === code;\n}\n"]}

package/dist/office/projection.d.ts

@@ -0,0 +1,11 @@
+import type { Office, PlatformChannelKind, WorkspaceProjection } from "./types.js";
+import type { WorkspaceVisibility } from "../types.js";
+export declare function recordPlatformChannelKind(office: Office, kind: PlatformChannelKind): void;
+export declare function readPlatformChannelKind(office: Office): PlatformChannelKind | undefined;
+export interface OfficeVisibilityDecision {
+    visibility: WorkspaceVisibility;
+    source: "platform" | "override" | "unknown";
+}
+export declare function resolveOfficeVisibility(office: Office): OfficeVisibilityDecision;
+export declare function resolveWorkspaceProjection(office: Office): WorkspaceProjection;
+//# sourceMappingURL=projection.d.ts.map

package/dist/office/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../src/office/projection.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGnF,OAAO,KAAK,EAAkB,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAWvE,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAIzF;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAiBvF;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,mBAAmB,CAAC;IAChC,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;CAC7C;AAID,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CAUhF;AAcD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAiC9E"}

package/dist/office/projection.js

@@ -0,0 +1,145 @@
+import { dirname, join } from "node:path";
+import { lstatSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { atomicWritePrivateFile, ensureDirExists } from "../file-guards.js";
+import { loadOfficeVisibilityOverride } from "../settings/index.js";
+import { listRegisteredOffices } from "./index.js";
+import * as log from "../log.js";
+import { guestPublicOfficePath, guestWorkspacePath } from "../sandbox/layout.js";
+import { errorMessage } from "../unknown-values.js";
+const CHANNEL_KIND_FILE = "channel-kind";
+const CHANNEL_KINDS = [
+    "public_channel",
+    "private_channel",
+    "im",
+    "external",
+];
+export function recordPlatformChannelKind(office, kind) {
+    if (readPlatformChannelKind(office) === kind)
+        return;
+    ensureDirExists(office.stateDir);
+    atomicWritePrivateFile(join(office.stateDir, CHANNEL_KIND_FILE), kind + "\n");
+}
+export function readPlatformChannelKind(office) {
+    const path = join(office.stateDir, CHANNEL_KIND_FILE);
+    let raw;
+    try {
+        raw = readFileSync(path, "utf-8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return undefined;
+        log.logWarning("Could not read platform channel kind; treating the office as private", `${path}: ${errorMessage(err)}`);
+        return undefined;
+    }
+    const value = raw.trim();
+    return CHANNEL_KINDS.includes(value)
+        ? value
+        : undefined;
+}
+const PUBLIC_CAPABLE_PLATFORMS = new Set(["slack"]);
+export function resolveOfficeVisibility(office) {
+    if (loadOfficeVisibilityOverride(office) === "private") {
+        return { visibility: "private", source: "override" };
+    }
+    if (!PUBLIC_CAPABLE_PLATFORMS.has(office.address.platform)) {
+        return { visibility: "private", source: "platform" };
+    }
+    const kind = readPlatformChannelKind(office);
+    if (kind === undefined)
+        return { visibility: "private", source: "unknown" };
+    return { visibility: kind === "public_channel" ? "public" : "private", source: "platform" };
+}
+function publicOfficeMounts(self) {
+    const { workspace } = self;
+    const mounts = [];
+    for (const record of listRegisteredOffices(workspace.stateDir)) {
+        const other = workspace.office(record);
+        if (other.key === self.key || !exists(other.dir))
+            continue;
+        if (resolveOfficeVisibility(other).visibility !== "public")
+            continue;
+        mounts.push({ source: other.dir, target: guestPublicOfficePath(other.key), readOnly: true });
+    }
+    return mounts.toSorted((a, b) => a.target.localeCompare(b.target));
+}
+export function resolveWorkspaceProjection(office) {
+    const { workspace } = office;
+    const decision = resolveOfficeVisibility(office);
+    const readOnlyKnowledge = decision.visibility === "private";
+    assertDirectory(workspace.root, "Host workspace root");
+    office.ensure();
+    ensureRegularFile(workspace.memoryPath, "Workspace memory");
+    ensureDirectoryRoot(workspace.skillsDir, "Workspace skills");
+    return {
+        ...decision,
+        mounts: [
+            { source: office.dir, target: guestWorkspacePath(office.key) },
+            {
+                source: workspace.memoryPath,
+                target: guestWorkspacePath("MEMORY.md"),
+                readOnly: readOnlyKnowledge ? true : undefined,
+            },
+            {
+                source: workspace.skillsDir,
+                target: guestWorkspacePath("skills"),
+                readOnly: readOnlyKnowledge ? true : undefined,
+            },
+            ...publicOfficeMounts(office),
+        ],
+        promptSources: {
+            conversationMemoryPath: office.memoryPath,
+            conversationSkillsDir: office.skillsDir,
+            globalMemoryPath: workspace.memoryPath,
+            globalSkillsDir: workspace.skillsDir,
+            globalKnowledgeReadOnly: readOnlyKnowledge ? true : undefined,
+        },
+    };
+}
+function ensureDirectoryRoot(path, label) {
+    if (!exists(path)) {
+        mkdirSync(path, { recursive: true, mode: 0o700 });
+        return;
+    }
+    assertDirectory(path, label);
+}
+function ensureRegularFile(path, label) {
+    if (!exists(path)) {
+        ensureDirExists(dirname(path));
+        writeFileSync(path, "", { mode: 0o600, flag: "wx" });
+        return;
+    }
+    let stats;
+    try {
+        stats = lstatSync(path);
+    }
+    catch (err) {
+        throw new Error(`${label} cannot be inspected: ${path}`, { cause: err });
+    }
+    if (stats.isSymbolicLink() || !stats.isFile()) {
+        throw new Error(`${label} must be a regular non-symlink file: ${path}`);
+    }
+}
+function assertDirectory(path, label) {
+    let stats;
+    try {
+        stats = lstatSync(path);
+    }
+    catch (err) {
+        throw new Error(`${label} cannot be inspected: ${path}`, { cause: err });
+    }
+    if (stats.isSymbolicLink() || !stats.isDirectory()) {
+        throw new Error(`${label} must be a regular non-symlink directory: ${path}`);
+    }
+}
+function exists(path) {
+    try {
+        lstatSync(path);
+        return true;
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return false;
+        throw err;
+    }
+}
+//# sourceMappingURL=projection.js.map

package/dist/office/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/office/projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,iBAAiB,GAAG,cAAc,CAAC;AACzC,MAAM,aAAa,GAAmC;IACpD,gBAAgB;IAChB,iBAAiB;IACjB,IAAI;IACJ,UAAU;CACX,CAAC;AAEF,MAAM,UAAU,yBAAyB,CAAC,MAAc,EAAE,IAAyB;IACjF,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,OAAO;IACrD,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACtD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACvE,GAAG,CAAC,UAAU,CACZ,sEAAsE,EACtE,GAAG,IAAI,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAChC,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,OAAQ,aAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACzD,CAAC,CAAE,KAA6B;QAChC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAOD,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAEzE,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,IAAI,4BAA4B,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QACvD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC5E,OAAO,EAAE,UAAU,EAAE,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3D,IAAI,uBAAuB,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK,QAAQ;YAAE,SAAS;QACrE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC7B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC;IAE5D,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IACvD,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,iBAAiB,CAAC,SAAS,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC5D,mBAAmB,CAAC,SAAS,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC7D,OAAO;QACL,GAAG,QAAQ;QACX,MAAM,EAAE;YACN,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAC9D;gBACE,MAAM,EAAE,SAAS,CAAC,UAAU;gBAC5B,MAAM,EAAE,kBAAkB,CAAC,WAAW,CAAC;gBACvC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAC/C;YACD;gBACE,MAAM,EAAE,SAAS,CAAC,SAAS;gBAC3B,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC;gBACpC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAC/C;YACD,GAAG,kBAAkB,CAAC,MAAM,CAAC;SAC9B;QACD,aAAa,EAAE;YACb,sBAAsB,EAAE,MAAM,CAAC,UAAU;YACzC,qBAAqB,EAAE,MAAM,CAAC,SAAS;YACvC,gBAAgB,EAAE,SAAS,CAAC,UAAU;YACtC,eAAe,EAAE,SAAS,CAAC,SAAS;YACpC,uBAAuB,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC9D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/B,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6CAA6C,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import { dirname, join } from \"node:path\";\nimport { lstatSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { atomicWritePrivateFile, ensureDirExists } from \"../file-guards.js\";\nimport { loadOfficeVisibilityOverride } from \"../settings/index.js\";\nimport { listRegisteredOffices } from \"./index.js\";\nimport type { Office, PlatformChannelKind, WorkspaceProjection } from \"./types.js\";\nimport * as log from \"../log.js\";\nimport { guestPublicOfficePath, guestWorkspacePath } from \"../sandbox/layout.js\";\nimport type { ContainerMount, WorkspaceVisibility } from \"../types.js\";\nimport { errorMessage } from \"../unknown-values.js\";\n\nconst CHANNEL_KIND_FILE = \"channel-kind\";\nconst CHANNEL_KINDS: readonly PlatformChannelKind[] = [\n  \"public_channel\",\n  \"private_channel\",\n  \"im\",\n  \"external\",\n];\n\nexport function recordPlatformChannelKind(office: Office, kind: PlatformChannelKind): void {\n  if (readPlatformChannelKind(office) === kind) return;\n  ensureDirExists(office.stateDir);\n  atomicWritePrivateFile(join(office.stateDir, CHANNEL_KIND_FILE), kind + \"\\n\");\n}\n\nexport function readPlatformChannelKind(office: Office): PlatformChannelKind | undefined {\n  const path = join(office.stateDir, CHANNEL_KIND_FILE);\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf-8\");\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return undefined;\n    log.logWarning(\n      \"Could not read platform channel kind; treating the office as private\",\n      `${path}: ${errorMessage(err)}`,\n    );\n    return undefined;\n  }\n  const value = raw.trim();\n  return (CHANNEL_KINDS as readonly string[]).includes(value)\n    ? (value as PlatformChannelKind)\n    : undefined;\n}\n\nexport interface OfficeVisibilityDecision {\n  visibility: WorkspaceVisibility;\n  source: \"platform\" | \"override\" | \"unknown\";\n}\n\nconst PUBLIC_CAPABLE_PLATFORMS: ReadonlySet<string> = new Set([\"slack\"]);\n\nexport function resolveOfficeVisibility(office: Office): OfficeVisibilityDecision {\n  if (loadOfficeVisibilityOverride(office) === \"private\") {\n    return { visibility: \"private\", source: \"override\" };\n  }\n  if (!PUBLIC_CAPABLE_PLATFORMS.has(office.address.platform)) {\n    return { visibility: \"private\", source: \"platform\" };\n  }\n  const kind = readPlatformChannelKind(office);\n  if (kind === undefined) return { visibility: \"private\", source: \"unknown\" };\n  return { visibility: kind === \"public_channel\" ? \"public\" : \"private\", source: \"platform\" };\n}\n\nfunction publicOfficeMounts(self: Office): ContainerMount[] {\n  const { workspace } = self;\n  const mounts: ContainerMount[] = [];\n  for (const record of listRegisteredOffices(workspace.stateDir)) {\n    const other = workspace.office(record);\n    if (other.key === self.key || !exists(other.dir)) continue;\n    if (resolveOfficeVisibility(other).visibility !== \"public\") continue;\n    mounts.push({ source: other.dir, target: guestPublicOfficePath(other.key), readOnly: true });\n  }\n  return mounts.toSorted((a, b) => a.target.localeCompare(b.target));\n}\n\nexport function resolveWorkspaceProjection(office: Office): WorkspaceProjection {\n  const { workspace } = office;\n  const decision = resolveOfficeVisibility(office);\n  const readOnlyKnowledge = decision.visibility === \"private\";\n\n  assertDirectory(workspace.root, \"Host workspace root\");\n  office.ensure();\n  ensureRegularFile(workspace.memoryPath, \"Workspace memory\");\n  ensureDirectoryRoot(workspace.skillsDir, \"Workspace skills\");\n  return {\n    ...decision,\n    mounts: [\n      { source: office.dir, target: guestWorkspacePath(office.key) },\n      {\n        source: workspace.memoryPath,\n        target: guestWorkspacePath(\"MEMORY.md\"),\n        readOnly: readOnlyKnowledge ? true : undefined,\n      },\n      {\n        source: workspace.skillsDir,\n        target: guestWorkspacePath(\"skills\"),\n        readOnly: readOnlyKnowledge ? true : undefined,\n      },\n      ...publicOfficeMounts(office),\n    ],\n    promptSources: {\n      conversationMemoryPath: office.memoryPath,\n      conversationSkillsDir: office.skillsDir,\n      globalMemoryPath: workspace.memoryPath,\n      globalSkillsDir: workspace.skillsDir,\n      globalKnowledgeReadOnly: readOnlyKnowledge ? true : undefined,\n    },\n  };\n}\n\nfunction ensureDirectoryRoot(path: string, label: string): void {\n  if (!exists(path)) {\n    mkdirSync(path, { recursive: true, mode: 0o700 });\n    return;\n  }\n  assertDirectory(path, label);\n}\n\nfunction ensureRegularFile(path: string, label: string): void {\n  if (!exists(path)) {\n    ensureDirExists(dirname(path));\n    writeFileSync(path, \"\", { mode: 0o600, flag: \"wx\" });\n    return;\n  }\n  let stats;\n  try {\n    stats = lstatSync(path);\n  } catch (err) {\n    throw new Error(`${label} cannot be inspected: ${path}`, { cause: err });\n  }\n  if (stats.isSymbolicLink() || !stats.isFile()) {\n    throw new Error(`${label} must be a regular non-symlink file: ${path}`);\n  }\n}\n\nfunction assertDirectory(path: string, label: string): void {\n  let stats;\n  try {\n    stats = lstatSync(path);\n  } catch (err) {\n    throw new Error(`${label} cannot be inspected: ${path}`, { cause: err });\n  }\n  if (stats.isSymbolicLink() || !stats.isDirectory()) {\n    throw new Error(`${label} must be a regular non-symlink directory: ${path}`);\n  }\n}\n\nfunction exists(path: string): boolean {\n  try {\n    lstatSync(path);\n    return true;\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return false;\n    throw err;\n  }\n}\n"]}