@hongmaple0820/scale-engine 0.20.0 → 0.21.0

package/dist/workflow/UpgradeManager.js

@@ -0,0 +1,434 @@
+import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { TOOL_CAPABILITY_CATALOG } from '../tools/ToolCapabilityRegistry.js';
+import { SCALE_ENGINE_VERSION } from '../version.js';
+import { computeGovernanceDrift, readGovernanceLock } from './GovernanceLock.js';
+import { listGovernanceTemplatePacks, resolveGovernanceTemplatePack } from './GovernanceTemplatePacks.js';
+import { writeGovernanceTemplates } from './GovernanceTemplates.js';
+export function createUpgradeCheckReport(options = {}) {
+    const projectDir = resolve(options.projectDir ?? process.cwd());
+    const lock = readGovernanceLock(projectDir);
+    const drift = computeGovernanceDrift(projectDir);
+    const latestScaleVersion = normalizeTargetVersion(options.targetScaleVersion);
+    const pack = lock ? resolveGovernanceTemplatePack(lock.pack) : null;
+    const scaleUpToDate = Boolean(lock && lock.scaleVersion === latestScaleVersion);
+    const packUpToDate = Boolean(lock && pack && lock.packVersion === pack.version);
+    const generatedTotal = drift.clean.length + drift.changed.length + drift.missing.length;
+    const thirdParty = createThirdPartyUpdateReport();
+    const status = resolveUpgradeStatus({
+        hasLock: Boolean(lock),
+        hasLocalChanges: drift.changed.length > 0,
+        hasMissingFiles: drift.missing.length > 0,
+        scaleUpToDate,
+        packUpToDate,
+    });
+    return {
+        version: 1,
+        projectDir,
+        status,
+        scaleEngine: {
+            currentVersion: lock?.scaleVersion ?? null,
+            latestVersion: latestScaleVersion,
+            upToDate: scaleUpToDate,
+        },
+        governanceLock: {
+            exists: Boolean(lock),
+            path: join(projectDir, '.scale', 'governance.lock.json'),
+        },
+        governancePack: {
+            id: lock?.pack ?? null,
+            currentVersion: lock?.packVersion ?? null,
+            latestVersion: pack?.version ?? null,
+            upToDate: packUpToDate,
+        },
+        generatedFiles: {
+            total: generatedTotal,
+            clean: drift.clean.length,
+            changed: drift.changed.length,
+            missing: drift.missing.length,
+        },
+        drift,
+        thirdParty,
+        recommendedCommands: [
+            'scale upgrade plan --dir .',
+            'scale tools outdated --dir .',
+            'scale skill outdated --dir .',
+            'scale preflight --preflight-profile quick',
+        ],
+    };
+}
+export function createUpgradePlanReport(options = {}) {
+    const check = createUpgradeCheckReport(options);
+    const blockers = [];
+    const steps = [];
+    if (!check.governanceLock.exists) {
+        blockers.push({
+            code: 'missing-governance-lock',
+            message: 'No governance lock exists; SCALE cannot determine which generated files are safe to upgrade.',
+        });
+        steps.push({
+            action: 'initialize-governance-lock',
+            risk: 'medium',
+            reason: 'Create a lock before upgrading generated governance assets.',
+            command: 'scale init --governance-pack standard',
+        });
+    }
+    if (!check.scaleEngine.upToDate && check.scaleEngine.currentVersion) {
+        steps.push({
+            action: 'upgrade-scale-engine',
+            risk: 'low',
+            reason: `SCALE Engine changed from ${check.scaleEngine.currentVersion} to ${check.scaleEngine.latestVersion}.`,
+            command: 'npm install -g @hongmaple0820/scale-engine',
+        });
+    }
+    if (!check.governancePack.upToDate && check.governancePack.id) {
+        steps.push({
+            action: 'upgrade-governance-pack',
+            risk: 'medium',
+            reason: `Governance pack ${check.governancePack.id} changed from v${check.governancePack.currentVersion} to v${check.governancePack.latestVersion}.`,
+            command: `scale init --governance-pack ${check.governancePack.id}`,
+        });
+    }
+    for (const entry of check.drift.missing) {
+        steps.push({
+            action: 'restore-missing-generated-file',
+            path: entry.path,
+            risk: 'low',
+            reason: 'The file is tracked by the governance lock but is missing locally.',
+        });
+    }
+    for (const entry of check.drift.changed) {
+        blockers.push({
+            code: 'local-generated-file-changed',
+            path: entry.path,
+            message: 'Generated governance file has local edits and needs a three-way/manual review before upgrade.',
+        });
+        steps.push({
+            action: 'review-local-change',
+            path: entry.path,
+            risk: 'medium',
+            reason: 'Local edits must be preserved or intentionally replaced.',
+        });
+    }
+    const thirdPartyReview = check.thirdParty.entries.filter(entry => entry.updatePolicy !== 'check-only');
+    for (const entry of thirdPartyReview) {
+        steps.push({
+            action: 'review-third-party-capability',
+            risk: entry.trust === 'high-risk' ? 'high' : 'medium',
+            reason: `${entry.name} updates require ${entry.updatePolicy}; SCALE never auto-installs third-party capabilities.`,
+        });
+    }
+    steps.push({
+        action: 'run-preflight',
+        risk: 'low',
+        reason: 'Validate the project after any accepted upgrade.',
+        command: 'scale preflight --preflight-profile quick',
+    });
+    return {
+        version: 1,
+        projectDir: check.projectDir,
+        status: check.status,
+        applyMode: blockers.length === 0 ? 'safe' : 'manual-review',
+        blockers,
+        steps,
+        check,
+        recommendedCommands: [
+            'scale upgrade check --dir .',
+            'scale upgrade plan --dir . --html',
+            'scale preflight --preflight-profile quick',
+        ],
+    };
+}
+export function applyUpgradePlan(options = {}) {
+    const projectDir = resolve(options.projectDir ?? process.cwd());
+    const plan = createUpgradePlanReport(options);
+    if (!options.confirm) {
+        return upgradeApplyResult(projectDir, plan, false, false, 'Review scale upgrade plan first, then rerun with --confirm.', []);
+    }
+    if (plan.applyMode !== 'safe') {
+        return upgradeApplyResult(projectDir, plan, false, false, 'Upgrade requires manual review because generated files have local changes or the lock is missing.', []);
+    }
+    if (!plan.check.governanceLock.exists || !plan.check.governancePack.id) {
+        return upgradeApplyResult(projectDir, plan, false, false, 'Cannot apply without a governance lock and pack id.', []);
+    }
+    if (!plan.check.governancePack.upToDate) {
+        return upgradeApplyResult(projectDir, plan, false, false, 'Governance pack version changes require manual review before automatic apply.', []);
+    }
+    const missingFiles = plan.check.drift.missing.map(entry => entry.path);
+    const shouldRefreshLock = !plan.check.scaleEngine.upToDate || missingFiles.length > 0;
+    if (!shouldRefreshLock) {
+        return upgradeApplyResult(projectDir, plan, true, false, 'No safe upgrade changes were needed.', []);
+    }
+    const backup = createUpgradeBackup(projectDir, uniqueStrings([...missingFiles, '.scale/governance.lock.json']));
+    const result = writeGovernanceTemplates(projectDir, { pack: plan.check.governancePack.id });
+    const createdFiles = result.created
+        .map(path => normalizeProjectRelativePath(projectDir, path))
+        .filter((path) => Boolean(path));
+    mergeCreatedFilesIntoBackup(backup.manifestPath, createdFiles);
+    const changedFiles = uniqueStrings([
+        ...missingFiles.filter(path => existsSync(join(projectDir, path))),
+        ...createdFiles,
+        '.scale/governance.lock.json',
+    ]);
+    return {
+        version: 1,
+        projectDir,
+        ok: true,
+        applied: changedFiles.length > 0,
+        reason: changedFiles.length > 0 ? 'Safe upgrade changes were applied.' : 'No safe upgrade changes were needed.',
+        changedFiles,
+        backup,
+        plan: createUpgradePlanReport(options),
+    };
+}
+export function rollbackLatestUpgrade(options = {}) {
+    const projectDir = resolve(options.projectDir ?? process.cwd());
+    const backup = latestUpgradeBackup(projectDir);
+    if (!backup) {
+        return {
+            version: 1,
+            projectDir,
+            ok: false,
+            applied: false,
+            reason: 'No SCALE-managed upgrade backup was found.',
+            restoredFiles: [],
+        };
+    }
+    const manifest = JSON.parse(readFileSync(backup.manifestPath, 'utf-8'));
+    const restoredFiles = [];
+    for (const entry of manifest.files) {
+        const target = join(projectDir, entry.path);
+        if (entry.existed && entry.backupPath) {
+            mkdirSync(dirname(target), { recursive: true });
+            copyFileSync(join(backup.dir, entry.backupPath), target);
+        }
+        else {
+            rmSync(target, { force: true, recursive: true });
+        }
+        restoredFiles.push(entry.path);
+    }
+    return {
+        version: 1,
+        projectDir,
+        ok: true,
+        applied: true,
+        reason: 'Latest SCALE-managed upgrade backup was rolled back.',
+        backup,
+        restoredFiles: uniqueStrings(restoredFiles),
+    };
+}
+export function createThirdPartyUpdateReport(category) {
+    const selectedCategories = Array.isArray(category) ? new Set(category) : category ? new Set([category]) : undefined;
+    const entries = TOOL_CAPABILITY_CATALOG
+        .filter(tool => !selectedCategories || selectedCategories.has(tool.category))
+        .map(tool => {
+        const trust = classifyThirdPartyTrust(tool.category, tool.source);
+        const updatePolicy = updatePolicyForTrust(trust);
+        return {
+            id: tool.id,
+            name: tool.name,
+            category: tool.category,
+            source: tool.source,
+            trust,
+            updatePolicy,
+            installPolicy: 'never-auto-install',
+            latestVersion: 'unknown',
+            reason: updateReason(tool.category, trust),
+        };
+    });
+    const trusted = entries.filter(entry => entry.trust === 'trusted').length;
+    const community = entries.filter(entry => entry.trust === 'community').length;
+    const highRisk = entries.filter(entry => entry.trust === 'high-risk').length;
+    const blocked = entries.filter(entry => entry.updatePolicy === 'blocked').length;
+    const reviewRequired = entries.filter(entry => entry.updatePolicy !== 'check-only').length;
+    return {
+        version: 1,
+        policy: 'check-only',
+        summary: {
+            total: entries.length,
+            trusted,
+            community,
+            highRisk,
+            reviewRequired,
+            blocked,
+        },
+        reviewRequired,
+        entries,
+    };
+}
+function upgradeApplyResult(projectDir, plan, ok, applied, reason, changedFiles) {
+    return {
+        version: 1,
+        projectDir,
+        ok,
+        applied,
+        reason,
+        changedFiles,
+        plan,
+    };
+}
+function createUpgradeBackup(projectDir, relativePaths) {
+    const id = `upgrade-${new Date().toISOString().replace(/[:.]/g, '-')}`;
+    const dir = join(projectDir, '.scale', 'backups', id);
+    const filesDir = join(dir, 'files');
+    mkdirSync(filesDir, { recursive: true });
+    const manifest = {
+        version: 1,
+        id,
+        createdAt: new Date().toISOString(),
+        projectDir,
+        files: uniqueStrings(relativePaths).map(path => {
+            const target = join(projectDir, path);
+            if (!existsSync(target))
+                return { path, existed: false };
+            const backupPath = join('files', path.replace(/^[\\/]+/, '').replace(/\\/g, '/'));
+            const backupTarget = join(dir, backupPath);
+            mkdirSync(dirname(backupTarget), { recursive: true });
+            copyFileSync(target, backupTarget);
+            return { path, existed: true, backupPath };
+        }),
+    };
+    const manifestPath = join(dir, 'manifest.json');
+    writeFileSync(manifestPath, JSON.stringify(manifest, null, 2) + '\n', 'utf-8');
+    return { id, dir, manifestPath };
+}
+function mergeCreatedFilesIntoBackup(manifestPath, createdFiles) {
+    const manifest = JSON.parse(readFileSync(manifestPath, 'utf-8'));
+    const existing = new Set(manifest.files.map(file => file.path));
+    for (const path of createdFiles) {
+        if (!existing.has(path)) {
+            manifest.files.push({ path, existed: false });
+            existing.add(path);
+        }
+    }
+    writeFileSync(manifestPath, JSON.stringify(manifest, null, 2) + '\n', 'utf-8');
+}
+function latestUpgradeBackup(projectDir) {
+    const backupsDir = join(projectDir, '.scale', 'backups');
+    if (!existsSync(backupsDir))
+        return null;
+    const candidates = readdirSync(backupsDir, { withFileTypes: true })
+        .filter(entry => entry.isDirectory() && entry.name.startsWith('upgrade-'))
+        .map(entry => ({
+        id: entry.name,
+        dir: join(backupsDir, entry.name),
+        manifestPath: join(backupsDir, entry.name, 'manifest.json'),
+    }))
+        .filter(entry => existsSync(entry.manifestPath))
+        .sort((a, b) => a.id.localeCompare(b.id));
+    return candidates.at(-1) ?? null;
+}
+function normalizeProjectRelativePath(projectDir, path) {
+    const normalizedProject = resolve(projectDir).replace(/\\/g, '/');
+    const normalizedPath = resolve(path).replace(/\\/g, '/');
+    if (!normalizedPath.startsWith(`${normalizedProject}/`))
+        return null;
+    return normalizedPath.slice(normalizedProject.length + 1);
+}
+function uniqueStrings(items) {
+    return [...new Set(items)];
+}
+export function writeUpgradePlanHtml(report, outputPath) {
+    const target = outputPath ?? join(report.projectDir, '.scale', 'reports', 'upgrade-plan.html');
+    mkdirSync(dirname(target), { recursive: true });
+    writeFileSync(target, renderUpgradePlanHtml(report), 'utf-8');
+    return target;
+}
+export function listAvailableGovernancePackVersions() {
+    return listGovernanceTemplatePacks().map(pack => ({ id: pack.id, version: pack.version }));
+}
+function resolveUpgradeStatus(input) {
+    if (!input.hasLock)
+        return 'missing-lock';
+    if (input.hasLocalChanges)
+        return 'local-changes';
+    if (input.hasMissingFiles || !input.scaleUpToDate || !input.packUpToDate)
+        return 'updates-available';
+    return 'clean';
+}
+function normalizeTargetVersion(version) {
+    if (!version || version === 'latest')
+        return SCALE_ENGINE_VERSION;
+    return version;
+}
+function classifyThirdPartyTrust(category, source) {
+    if (category === 'desktop')
+        return 'high-risk';
+    if (!source)
+        return 'community';
+    if (source.includes('anthropics/') ||
+        source.includes('playwright.dev') ||
+        source.includes('openai/') ||
+        source.includes('google-gemini/') ||
+        source.includes('vercel-labs/'))
+        return 'trusted';
+    return 'community';
+}
+function updatePolicyForTrust(trust) {
+    if (trust === 'high-risk')
+        return 'blocked';
+    if (trust === 'community')
+        return 'manual-review';
+    return 'check-only';
+}
+function updateReason(category, trust) {
+    if (trust === 'high-risk')
+        return 'High-privilege desktop automation must be reviewed and confirmed by a human.';
+    if (trust === 'community')
+        return 'Community source requires source, script, and permission review before update.';
+    if (category === 'mcp')
+        return 'MCP updates must still be checked for command and permission changes.';
+    return 'Trusted source; check version and changelog before applying.';
+}
+function renderUpgradePlanHtml(report) {
+    const rows = report.steps.map(step => `
+      <tr>
+        <td>${escapeHtml(step.action)}</td>
+        <td>${escapeHtml(step.path ?? '')}</td>
+        <td>${escapeHtml(step.risk)}</td>
+        <td>${escapeHtml(step.reason)}</td>
+        <td><code>${escapeHtml(step.command ?? '')}</code></td>
+      </tr>`).join('');
+    const blockers = report.blockers.length
+        ? report.blockers.map(blocker => `<li><strong>${escapeHtml(blocker.code)}</strong> ${escapeHtml(blocker.path ?? '')} ${escapeHtml(blocker.message)}</li>`).join('')
+        : '<li>No blockers detected.</li>';
+    return `<!doctype html>
+<html lang="zh-CN">
+<head>
+  <meta charset="utf-8" />
+  <title>SCALE Upgrade Plan</title>
+  <style>
+    body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; margin: 32px; color: #1f2937; }
+    h1 { margin-bottom: 8px; }
+    table { border-collapse: collapse; width: 100%; margin-top: 16px; }
+    th, td { border: 1px solid #d1d5db; padding: 8px; text-align: left; vertical-align: top; }
+    th { background: #f3f4f6; }
+    code { white-space: pre-wrap; }
+    .badge { display: inline-block; padding: 2px 8px; border-radius: 999px; background: #eef2ff; }
+  </style>
+</head>
+<body>
+  <h1>SCALE Upgrade Plan</h1>
+  <p>Project: <code>${escapeHtml(report.projectDir)}</code></p>
+  <p>Status: <span class="badge">${escapeHtml(report.status)}</span> Apply mode: <span class="badge">${escapeHtml(report.applyMode)}</span></p>
+  <h2>Blockers</h2>
+  <ul>${blockers}</ul>
+  <h2>Steps</h2>
+  <table>
+    <thead><tr><th>Action</th><th>Path</th><th>Risk</th><th>Reason</th><th>Command</th></tr></thead>
+    <tbody>${rows}</tbody>
+  </table>
+  <h2>Third-party Policy</h2>
+  <p>Policy: ${escapeHtml(report.check.thirdParty.policy)}. Review required: ${report.check.thirdParty.reviewRequired}.</p>
+</body>
+</html>
+`;
+}
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;');
+}
+//# sourceMappingURL=UpgradeManager.js.map

package/dist/workflow/UpgradeManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpgradeManager.js","sourceRoot":"","sources":["../../src/workflow/UpgradeManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC/G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,uBAAuB,EAA+B,MAAM,oCAAoC,CAAA;AACzG,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAA8B,MAAM,qBAAqB,CAAA;AAC5G,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAyB,MAAM,8BAA8B,CAAA;AAChI,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AAqJnE,MAAM,UAAU,wBAAwB,CAAC,UAAiC,EAAE;IAC1E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAA;IAChD,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACnE,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,kBAAkB,CAAC,CAAA;IAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO,CAAC,CAAA;IAC/E,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;IACvF,MAAM,UAAU,GAAG,4BAA4B,EAAE,CAAA;IACjD,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;QACtB,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACzC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACzC,aAAa;QACb,YAAY;KACb,CAAC,CAAA;IAEF,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU;QACV,MAAM;QACN,WAAW,EAAE;YACX,cAAc,EAAE,IAAI,EAAE,YAAY,IAAI,IAAI;YAC1C,aAAa,EAAE,kBAAkB;YACjC,QAAQ,EAAE,aAAa;SACxB;QACD,cAAc,EAAE;YACd,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,sBAAsB,CAAC;SACzD;QACD,cAAc,EAAE;YACd,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI;YACtB,cAAc,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI;YACzC,aAAa,EAAE,IAAI,EAAE,OAAO,IAAI,IAAI;YACpC,QAAQ,EAAE,YAAY;SACvB;QACD,cAAc,EAAE;YACd,KAAK,EAAE,cAAc;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YACzB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;YAC7B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;SAC9B;QACD,KAAK;QACL,UAAU;QACV,mBAAmB,EAAE;YACnB,4BAA4B;YAC5B,8BAA8B;YAC9B,8BAA8B;YAC9B,2CAA2C;SAC5C;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAiC,EAAE;IACzE,MAAM,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAyB,EAAE,CAAA;IACzC,MAAM,KAAK,GAAsB,EAAE,CAAA;IAEnC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,8FAA8F;SACxG,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,4BAA4B;YACpC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,6DAA6D;YACrE,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,sBAAsB;YAC9B,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,6BAA6B,KAAK,CAAC,WAAW,CAAC,cAAc,OAAO,KAAK,CAAC,WAAW,CAAC,aAAa,GAAG;YAC9G,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,IAAI,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,yBAAyB;YACjC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,mBAAmB,KAAK,CAAC,cAAc,CAAC,EAAE,kBAAkB,KAAK,CAAC,cAAc,CAAC,cAAc,QAAQ,KAAK,CAAC,cAAc,CAAC,aAAa,GAAG;YACpJ,OAAO,EAAE,gCAAgC,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE;SACnE,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,gCAAgC;YACxC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,oEAAoE;SAC7E,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,8BAA8B;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,+FAA+F;SACzG,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,qBAAqB;YAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,0DAA0D;SACnE,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAAC,CAAA;IACtG,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,+BAA+B;YACvC,IAAI,EAAE,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACrD,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,oBAAoB,KAAK,CAAC,YAAY,uDAAuD;SACnH,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC;QACT,MAAM,EAAE,eAAe;QACvB,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,kDAAkD;QAC1D,OAAO,EAAE,2CAA2C;KACrD,CAAC,CAAA;IAEF,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe;QAC3D,QAAQ;QACR,KAAK;QACL,KAAK;QACL,mBAAmB,EAAE;YACnB,6BAA6B;YAC7B,mCAAmC;YACnC,2CAA2C;SAC5C;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAA+B,EAAE;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAA;IAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,6DAA6D,EAAE,EAAE,CAAC,CAAA;IAC9H,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,mGAAmG,EAAE,EAAE,CAAC,CAAA;IACpK,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvE,OAAO,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,qDAAqD,EAAE,EAAE,CAAC,CAAA;IACtH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QACxC,OAAO,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,+EAA+E,EAAE,EAAE,CAAC,CAAA;IAChJ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACtE,MAAM,iBAAiB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAA;IACrF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,sCAAsC,EAAE,EAAE,CAAC,CAAA;IACtG,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,GAAG,YAAY,EAAE,6BAA6B,CAAC,CAAC,CAAC,CAAA;IAC/G,MAAM,MAAM,GAAG,wBAAwB,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3F,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO;SAChC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,4BAA4B,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;SAC3D,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAClD,2BAA2B,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IAE9D,MAAM,YAAY,GAAG,aAAa,CAAC;QACjC,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QAClE,GAAG,YAAY;QACf,6BAA6B;KAC9B,CAAC,CAAA;IAEF,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU;QACV,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC;QAChC,MAAM,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,sCAAsC;QAC/G,YAAY;QACZ,MAAM;QACN,IAAI,EAAE,uBAAuB,CAAC,OAAO,CAAC;KACvC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAiC,EAAE;IACvE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAA;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,CAAC;YACV,UAAU;YACV,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,4CAA4C;YACpD,aAAa,EAAE,EAAE;SAClB,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAA0B,CAAA;IAChG,MAAM,aAAa,GAAa,EAAE,CAAA;IAClC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACtC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/C,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAA;QAC1D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAChC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU;QACV,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,sDAAsD;QAC9D,MAAM;QACN,aAAa,EAAE,aAAa,CAAC,aAAa,CAAC;KAC5C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAA4D;IACvG,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACnH,MAAM,OAAO,GAAG,uBAAuB;SACpC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,kBAAkB,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;SAC5E,GAAG,CAAC,IAAI,CAAC,EAAE;QACV,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACjE,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;QAChD,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK;YACL,YAAY;YACZ,aAAa,EAAE,oBAA6B;YAC5C,aAAa,EAAE,SAAkB;YACjC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC;SAC3C,CAAA;IACH,CAAC,CAAC,CAAA;IACJ,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,CAAA;IACzE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,MAAM,CAAA;IAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,MAAM,CAAA;IAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,MAAM,CAAA;IAChF,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC,MAAM,CAAA;IAC1F,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE;YACP,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,OAAO;YACP,SAAS;YACT,QAAQ;YACR,cAAc;YACd,OAAO;SACR;QACD,cAAc;QACd,OAAO;KACR,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,UAAkB,EAClB,IAAuB,EACvB,EAAW,EACX,OAAgB,EAChB,MAAc,EACd,YAAsB;IAEtB,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU;QACV,EAAE;QACF,OAAO;QACP,MAAM;QACN,YAAY;QACZ,IAAI;KACL,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB,EAAE,aAAuB;IACtE,MAAM,EAAE,GAAG,WAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAA;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACnC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,MAAM,QAAQ,GAA0B;QACtC,OAAO,EAAE,CAAC;QACV,EAAE;QACF,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU;QACV,KAAK,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YACrC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;YACxD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;YACjF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;YAC1C,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACrD,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;YAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;QAC5C,CAAC,CAAC;KACH,CAAA;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;IAC/C,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAC9E,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAA;AAClC,CAAC;AAED,SAAS,2BAA2B,CAAC,YAAoB,EAAE,YAAsB;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAA0B,CAAA;IACzF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/D,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;YAC7C,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;IACD,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;IACxD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAChE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;SACzE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACb,EAAE,EAAE,KAAK,CAAC,IAAI;QACd,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC;QACjC,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC;KAC5D,CAAC,CAAC;SACF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;SAC/C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3C,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;AAClC,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAkB,EAAE,IAAY;IACpE,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACjE,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACxD,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACpE,OAAO,cAAc,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAC3D,CAAC;AAED,SAAS,aAAa,CAAC,KAAe;IACpC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAyB,EAAE,UAAmB;IACjF,MAAM,MAAM,GAAG,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAA;IAC9F,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,aAAa,CAAC,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7D,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,mCAAmC;IACjD,OAAO,2BAA2B,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;AAC5F,CAAC;AAED,SAAS,oBAAoB,CAAC,KAM7B;IACC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,cAAc,CAAA;IACzC,IAAI,KAAK,CAAC,eAAe;QAAE,OAAO,eAAe,CAAA;IACjD,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,mBAAmB,CAAA;IACpG,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA2B;IACzD,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,oBAAoB,CAAA;IACjE,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgC,EAAE,MAA0B;IAC3F,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,WAAW,CAAA;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,WAAW,CAAA;IAC/B,IACE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC9B,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC/B,OAAO,SAAS,CAAA;IAClB,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAsB;IAClD,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,SAAS,CAAA;IAC3C,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,eAAe,CAAA;IACjD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,QAAgC,EAAE,KAAsB;IAC5E,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,8EAA8E,CAAA;IAChH,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,gFAAgF,CAAA;IAClH,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,uEAAuE,CAAA;IACtG,OAAO,8DAA8D,CAAA;AACvE,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAyB;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;;cAE1B,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;cACvB,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;cAC3B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;cACrB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;oBACjB,UAAU,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM;QACrC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,eAAe,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACnK,CAAC,CAAC,gCAAgC,CAAA;IACpC,OAAO;;;;;;;;;;;;;;;;;sBAiBa,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC;mCAChB,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,2CAA2C,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;;QAE3H,QAAQ;;;;aAIH,IAAI;;;eAGF,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc;;;CAGpH,CAAA;AACD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC5B,CAAC"}

package/docs/README.md

@@ -25,6 +25,7 @@
 | [CODE_INTELLIGENCE.md](CODE_INTELLIGENCE.md) | CodeGraph、Graphify 和显式 fallback 的代码智能与探索 ROI |
 | [WORKFLOW_EVAL.md](WORKFLOW_EVAL.md) | Workflow Eval、pass@k 指标、Failure Replay 和改进候选 |
 | [SKILL_RADAR.md](SKILL_RADAR.md) | Skill Radar、能力置信度、证据要求和供应链安全检查 |
+| [UPGRADE_MANAGEMENT.md](UPGRADE_MANAGEMENT.md) | SCALE CLI、governance pack、skills、MCP 和 CLI 工具的安全升级流程 |
 | [GOVERNANCE_DASHBOARD.md](GOVERNANCE_DASHBOARD.md) | Runtime、eval、memory、resource、HTML artifact 的统一治理面板 |
 | [RELEASE_READINESS.md](RELEASE_READINESS.md) | 发版前质量门槛、官方 demo 和真实项目落地验收 |
 | [SKILL-REPOSITORY.md](SKILL-REPOSITORY.md) | 受治理 skill repository 和安装安全策略 |

package/docs/start/README.md

@@ -13,7 +13,10 @@
 3. 回到根目录 [README](../../README.md)
    理解 SCALE Engine 的核心能力和 governance pack 选择。
 
-4. 查看 [文档地图](../README.md)
+4. [升级管理](../UPGRADE_MANAGEMENT.md)
+   理解工作流更新、第三方 skills/MCP/CLI 更新时如何先检查、生成计划、避免覆盖本地改动。
+
+5. 查看 [文档地图](../README.md)
    区分哪些文档是用户指南、哪些是参考资料、哪些是历史规划和过程记录。
 
 ## 你应该先看到什么
@@ -39,4 +42,5 @@
 | Go 多服务后端 | `scale init --governance-pack go-service-matrix` |
 | 多仓库/MOE 工作区 | `scale init --governance-pack moe-workspace` |
 | 文档、报告、截图、脚本混乱 | `scale init --governance-pack resource-governance` |
+| 工作流或第三方能力要升级 | `scale upgrade check && scale upgrade plan --html` |
 

package/examples/demo-projects/agent-governance-demo/CONTEXT.md

@@ -0,0 +1,14 @@
+# CONTEXT.md
+
+Project: Agent Governance Demo
+
+| Term | Definition | Examples | Aliases | Source |
+|------|------------|----------|---------|--------|
+| OAuth state | One-time callback correlation value that binds authorization return traffic to a user session | `state-123` | callback state | `src/oauth-state.ts` |
+| Consumed state | A state record that has already been used and must not be accepted again | `consumedAt: 900` | replayed state | `tests/oauth-state.test.ts` |
+| Evidence | A command result or artifact that proves what was verified | `npm test`, eval report, dashboard | verification proof | SCALE workflow |
+
+## Rejected Meanings
+
+- Do not treat an expired state as recoverable without a new authorization flow.
+- Do not treat a dashboard or eval report as a substitute for the business test.

package/examples/demo-projects/agent-governance-demo/README.md

@@ -1,37 +1,48 @@
 # Agent Governance Demo
 
-这是 SCALE Engine 的最小官方 demo 项目，用来演示 Agent 如何在治理工作流下完成一个安全敏感任务。
+这是 SCALE Engine 的最小官方 demo 项目，用一个 OAuth state 校验场景展示 Agent 工程治理如何落到真实代码、测试、证据和报告里。
 
-业务场景：OAuth callback 必须拒绝过期、已消费或不匹配的 state。
+业务目标很小：OAuth callback 必须拒绝缺失、过期、已消费或不匹配的 state。
 
-## 运行
+治理目标更重要：Agent 不能只说“我完成了”，必须留下可验证证据。
+
+## 快速运行
 
 ```bash
 npm install
 npm test
 ```
 
-## 接入 SCALE
+## 一键治理烟测
+
+```bash
+npm run workflow:smoke
+```
+
+这个命令会依次运行：
+
+- `npm test`：验证业务行为。
+- `scale eval run --dir .`：运行工作流基线评测。
+- `scale context budget --dir .`：检查上下文预算，避免无节制读取。
+- `scale artifact dashboard --dir . --lang zh`：生成本地治理 HTML 看板。
+
+## 适合演示的 SCALE 命令
 
 ```bash
-scale init --governance-pack node-library
-scale preflight --preflight-profile quick
-scale context init --name "Agent Governance Demo"
-scale runtime start --session-id 2026-05-18-oauth-state --task-id 2026-05-18-oauth-state --level M --agent codex
-scale context grill --task-id 2026-05-18-oauth-state --task "加固 OAuth state 校验"
-scale diagnose plan --task-id 2026-05-18-oauth-state --symptom "OAuth callback 在 state 过期或不匹配时行为不明确"
-scale tdd slice --task-id 2026-05-18-oauth-state --behavior "拒绝过期、已消费或不匹配的 OAuth state" --public-interface "verifyOAuthState(record, providedState, now)" --failing-test "expired, consumed, mismatched state should return ok=false" --test-file tests/oauth-state.test.ts --impl-files src/oauth-state.ts
-scale runtime record --title "demo business tests" --kind command --status passed --command "npm test" --exit-code 0 --summary "official demo OAuth state tests passed"
-scale runtime final-check --task-id 2026-05-18-oauth-state --session-id 2026-05-18-oauth-state --level M
-scale memory pack --task-id 2026-05-18-oauth-state --session-id 2026-05-18-oauth-state --task "加固 OAuth state 校验" --level M --budget 4000
-scale memory settle --task-id 2026-05-18-oauth-state --session-id 2026-05-18-oauth-state --task "加固 OAuth state 校验" --level M
-scale artifact render --task-id 2026-05-18-oauth-state --artifact-dir docs/worklog/tasks/2026-05-18-oauth-state
-scale artifact doctor --artifact-dir docs/worklog/tasks/2026-05-18-oauth-state
+scale governance mode --task "修复 OAuth state 校验绕过问题" --files "src/oauth-state.ts,tests/oauth-state.test.ts"
+scale skill radar --dir . --task "修复 OAuth state 校验绕过问题" --phase verify --level M --files "src/oauth-state.ts,tests/oauth-state.test.ts"
+scale codegraph status --dir .
+scale eval run --dir .
+scale artifact dashboard --dir . --lang zh
 ```
 
-## 看点
+## 观察点
+
+- `src/oauth-state.ts` 保持很小，便于核对 Agent 是否过度设计。
+- `tests/oauth-state.test.ts` 覆盖成功、缺失、过期、已消费和不匹配 state。
+- `CONTEXT.md` 和 `docs/CONTEXT-MAP.md` 只提供必要上下文，避免 demo 自己变成 token 污染源。
+- `.scale/evals/suites/workflow-baseline.json` 可由 `scale eval init --dir .` 重新生成。
 
-- 业务逻辑很小，但风险边界明确。
-- 测试覆盖成功、过期、已消费、不匹配和缺失记录。
-- SCALE 命令会生成任务证据、运行证据、记忆候选和 HTML 交付视图，避免 Agent 只口头说“已完成”。
+## 这不是业务模板
 
+这个 demo 不是 OAuth 产品模板，而是治理闭环模板。真实项目接入时，应保留 SCALE 的证据、评测、上下文预算和看板机制，再替换成自己的业务代码、服务矩阵和验证脚本。

package/examples/demo-projects/agent-governance-demo/docs/CONTEXT-MAP.md

@@ -0,0 +1,14 @@
+# CONTEXT-MAP.md
+
+Project: Agent Governance Demo
+
+| Module | Owner | Product Doc | Architecture Doc |
+| --- | --- | --- | --- |
+| OAuth state verifier | SCALE demo | `README.md` | `src/oauth-state.ts` |
+| Workflow evidence | SCALE demo | `README.md` | `.scale/evals/suites/workflow-baseline.json` |
+
+## Cross-Module Rules
+
+- Behavior changes in `src/oauth-state.ts` must update `tests/oauth-state.test.ts`.
+- Workflow command changes must update `README.md`.
+- Generated reports under `.scale/reports/` are review artifacts, not source of truth.

package/examples/demo-projects/agent-governance-demo/package.json

@@ -6,9 +6,14 @@
   "scripts": {
     "build": "tsc --noEmit --module NodeNext --moduleResolution NodeNext --target ES2022 src/oauth-state.ts tests/oauth-state.test.ts",
     "lint": "tsc --noEmit --module NodeNext --moduleResolution NodeNext --target ES2022 src/oauth-state.ts tests/oauth-state.test.ts",
-    "test": "vitest run"
+    "test": "vitest run",
+    "scale:eval": "scale eval run --dir .",
+    "scale:budget": "scale context budget --dir .",
+    "scale:dashboard": "scale artifact dashboard --dir . --lang zh",
+    "workflow:smoke": "npm test && npm run scale:eval && npm run scale:budget && npm run scale:dashboard"
   },
   "devDependencies": {
+    "@hongmaple0820/scale-engine": "^0.20.0",
     "typescript": "^5.5.0",
     "vitest": "^2.1.9"
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hongmaple0820/scale-engine",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Executable AI agent governance with workflow gates, evidence, skill/tool orchestration, and traceable HTML artifacts",
   "type": "module",
   "bin": {