@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.1

package/dist/job-run-registry.js

@@ -0,0 +1,312 @@
+/**
+ * Detachable workflow runs.
+ *
+ * The WebSocket runner is per-connection, so before this module existed a
+ * dropped socket killed every in-flight run (`disconnect()` →
+ * `job.session.cancel()` for each entry of `activeJobs`): a laptop lid-close
+ * threw away minutes of paid GPU work, and `reconnect_job` from a fresh
+ * connection — a fresh `UnifiedWebSocketRunner`, with an empty `activeJobs` —
+ * could only read the persisted row, reporting even a completed run as
+ * `job_update failed` with "replay is unavailable". A {@link JobRunSession}
+ * decouples the run from the socket, exactly as {@link ChatTurnSession} does
+ * for a chat turn: every frame the run emits is stamped with a monotonically
+ * increasing `job_seq` and appended to a bounded buffer, and delivery goes to
+ * whichever connection is currently attached — or nowhere, while the client
+ * is away. On reconnect the client sends
+ * `{command: "reconnect_job", data: {job_id, last_seq}}` and gets the missed
+ * tail replayed, followed by live frames if the run is still going.
+ *
+ * Sessions are keyed by user+job in a process-wide registry. Job ids are
+ * unique per run, so — unlike a chat thread — a new run never supersedes an
+ * existing session; {@link JobRunRegistry.open} replacing an entry means the
+ * same job id was started twice, which is a caller bug, not a turn taking
+ * over.
+ *
+ * Two timers bound a session's life:
+ *   - detach grace: a running job nobody is attached to is cancelled after
+ *     `NODETOOL_JOB_DETACH_GRACE_MS` (default 10 min) so an abandoned client
+ *     cannot leave a workflow burning provider spend forever;
+ *   - retention: a finished session is kept for
+ *     `NODETOOL_JOB_REPLAY_RETENTION_MS` (default 5 min) so a client that
+ *     reconnects just after the run ended still gets the tail, then dropped.
+ *
+ * Terminal state is persisted to the `jobs` table independently of this
+ * buffer, so an expired or truncated replay degrades to `reconnect_job`'s
+ * persisted-row fallback — the run's real status, just without its events.
+ */
+import { createLogger } from "@nodetool-ai/config";
+const log = createLogger("nodetool.websocket.job-run-registry");
+function envInt(name, fallback) {
+    const raw = process.env[name];
+    if (!raw)
+        return fallback;
+    const parsed = Number.parseInt(raw, 10);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+}
+const MAX_BUFFERED_EVENTS = () => envInt("NODETOOL_JOB_REPLAY_BUFFER_EVENTS", 2000);
+const DETACH_GRACE_MS = () => envInt("NODETOOL_JOB_DETACH_GRACE_MS", 10 * 60 * 1000);
+const RETENTION_MS = () => envInt("NODETOOL_JOB_REPLAY_RETENTION_MS", 5 * 60 * 1000);
+export class JobRunSession {
+    hooks;
+    onDrop;
+    onFinish;
+    userId;
+    jobId;
+    workflowId;
+    status = "running";
+    /** The run's outcome, once known. Reported in the `job_resumed` header. */
+    terminalStatus = null;
+    seq = 0;
+    buffer = [];
+    /** Highest seq evicted from the bounded buffer (0 = nothing evicted). */
+    evictedThroughSeq = 0;
+    target = null;
+    /**
+     * Serializes delivery: replayed frames enqueue before any live frame that
+     * arrives after attach, so the client always sees seq order. Unbounded —
+     * a slow socket grows the chain rather than applying backpressure to the
+     * run; the buffer above is what bounds memory. Mirrored from the chat
+     * turn's chain.
+     */
+    deliveryChain = Promise.resolve();
+    detachTimer = null;
+    retentionTimer = null;
+    constructor(userId, jobId, workflowId, hooks, onDrop, 
+    /** Told when the run settles, so the registry can answer `drained`. */
+    onFinish = () => { }) {
+        this.hooks = hooks;
+        this.onDrop = onDrop;
+        this.onFinish = onFinish;
+        this.userId = userId;
+        this.jobId = jobId;
+        this.workflowId = workflowId;
+    }
+    get lastSeq() {
+        return this.seq;
+    }
+    /**
+     * Stamp, buffer, and (when a connection is attached) deliver one frame.
+     * Returns the stamped copy.
+     */
+    emit(message) {
+        this.seq += 1;
+        const stamped = { ...message, job_seq: this.seq };
+        this.buffer.push({ seq: this.seq, message: stamped });
+        const max = MAX_BUFFERED_EVENTS();
+        while (this.buffer.length > max) {
+            const evicted = this.buffer.shift();
+            if (evicted)
+                this.evictedThroughSeq = evicted.seq;
+        }
+        const target = this.target;
+        if (target) {
+            this.enqueueDelivery(() => target.deliver(stamped));
+        }
+        return stamped;
+    }
+    /**
+     * Attach a connection and hand back the frames it missed. Live frames
+     * emitted after this call are delivered to the new target, strictly after
+     * the returned replay is delivered (both ride {@link deliveryChain} when
+     * sent via {@link deliverReplay}).
+     */
+    attach(target, lastSeq) {
+        this.clearDetachTimer();
+        this.target = target;
+        const replay = this.buffer
+            .filter((e) => e.seq > lastSeq)
+            .map((e) => e.message);
+        return { replay, incomplete: lastSeq < this.evictedThroughSeq };
+    }
+    /** Deliver frames on the session's ordered delivery chain. */
+    deliverReplay(target, frames) {
+        for (const frame of frames) {
+            this.enqueueDelivery(() => target.deliver(frame));
+        }
+        return this.deliveryChain;
+    }
+    /**
+     * The attached connection went away. A running job keeps executing and
+     * buffering; if nobody reattaches within the grace window the run is
+     * cancelled so it cannot burn spend unattended forever.
+     */
+    detach(target) {
+        if (target && this.target !== target)
+            return;
+        this.target = null;
+        if (this.status !== "running")
+            return;
+        this.clearDetachTimer();
+        this.detachTimer = setTimeout(() => {
+            log.info("Detached job run expired, cancelling", { jobId: this.jobId });
+            this.cancel();
+        }, DETACH_GRACE_MS());
+        this.detachTimer.unref?.();
+    }
+    /** Cancel the run (client stop, or detach grace elapsed). */
+    cancel() {
+        this.hooks.cancel();
+    }
+    /**
+     * The run reached a terminal state. The session sticks around (still
+     * replayable) for the retention window, then drops out of the registry.
+     */
+    finish(terminalStatus) {
+        if (terminalStatus)
+            this.terminalStatus = terminalStatus;
+        if (this.status === "finished")
+            return;
+        this.status = "finished";
+        this.clearDetachTimer();
+        this.retentionTimer = setTimeout(() => this.onDrop(this), RETENTION_MS());
+        this.retentionTimer.unref?.();
+        this.onFinish();
+    }
+    /** Release timers when the registry drops the session. */
+    dispose() {
+        this.clearDetachTimer();
+        if (this.retentionTimer) {
+            clearTimeout(this.retentionTimer);
+            this.retentionTimer = null;
+        }
+    }
+    clearDetachTimer() {
+        if (this.detachTimer) {
+            clearTimeout(this.detachTimer);
+            this.detachTimer = null;
+        }
+    }
+    enqueueDelivery(fn) {
+        this.deliveryChain = this.deliveryChain.then(fn).catch((err) => {
+            log.warn("Job run delivery failed", {
+                jobId: this.jobId,
+                error: err instanceof Error ? err.message : String(err)
+            });
+        });
+    }
+}
+export class JobRunRegistry {
+    sessions = new Map();
+    /** Resolvers waiting for {@link runningCount} to reach zero. */
+    drainWaiters = new Set();
+    key(userId, jobId) {
+        return `${userId}\u0000${jobId}`;
+    }
+    /**
+     * Open a session for a starting run. Job ids are unique, so an entry that
+     * already exists can only mean the same id was started twice — cancel the
+     * stale run before dropping it. Dropping alone would leave it executing
+     * with nothing that can reach it: no grace timer, no cancel path, no
+     * replay.
+     */
+    open(userId, jobId, workflowId, hooks) {
+        const key = this.key(userId, jobId);
+        const existing = this.sessions.get(key);
+        if (existing) {
+            log.warn("Job session reopened for an id already running", { jobId });
+            if (existing.status === "running")
+                existing.cancel();
+            this.drop(existing);
+        }
+        const session = new JobRunSession(userId, jobId, workflowId, hooks, (s) => this.drop(s), () => this.notifyDrainWaiters());
+        this.sessions.set(key, session);
+        return session;
+    }
+    get(userId, jobId) {
+        return this.sessions.get(this.key(userId, jobId)) ?? null;
+    }
+    /** Every run this process is still executing. The cancel poller's input. */
+    runningSessions() {
+        return [...this.sessions.values()].filter((s) => s.status === "running");
+    }
+    /**
+     * Runs still executing for a user, across every connection. The
+     * concurrency caps count runs, not sockets: a detached run still occupies
+     * a slot, or a client could reconnect its way past the cap simply by
+     * abandoning sockets.
+     */
+    countRunning(userId) {
+        let count = 0;
+        for (const session of this.sessions.values()) {
+            if (session.userId === userId && session.status === "running")
+                count += 1;
+        }
+        return count;
+    }
+    /** Same, narrowed to one workflow — the per-workflow cap's denominator. */
+    countRunningForWorkflow(userId, workflowId) {
+        let count = 0;
+        for (const session of this.sessions.values()) {
+            if (session.userId === userId &&
+                session.workflowId === workflowId &&
+                session.status === "running") {
+                count += 1;
+            }
+        }
+        return count;
+    }
+    /** Runs this process is still executing. What a drain waits on. */
+    runningCount() {
+        return this.runningSessions().length;
+    }
+    /**
+     * Cancel every run still executing, through the same hooks a client's
+     * `cancel_job` reaches. Returns how many were cancelled.
+     */
+    cancelAll() {
+        const running = this.runningSessions();
+        for (const session of running)
+            session.cancel();
+        return running.length;
+    }
+    /** Cancel this process's runs that belong to a project being deleted. */
+    cancelJobs(userId, jobIds) {
+        let count = 0;
+        for (const session of this.runningSessions()) {
+            if (session.userId !== userId || !jobIds.has(session.jobId))
+                continue;
+            session.cancel();
+            count += 1;
+        }
+        return count;
+    }
+    /**
+     * Resolve true once no run is executing, false when `timeoutMs` elapses
+     * first. A run is executing until its terminal `job_update` has been
+     * persisted, which is what `finish` marks.
+     */
+    drained(timeoutMs) {
+        if (this.runningCount() === 0)
+            return Promise.resolve(true);
+        return new Promise((resolve) => {
+            const waiter = () => {
+                if (this.runningCount() > 0)
+                    return;
+                clearTimeout(timer);
+                this.drainWaiters.delete(waiter);
+                resolve(true);
+            };
+            const timer = setTimeout(() => {
+                this.drainWaiters.delete(waiter);
+                resolve(false);
+            }, timeoutMs);
+            timer.unref?.();
+            this.drainWaiters.add(waiter);
+        });
+    }
+    notifyDrainWaiters() {
+        for (const waiter of [...this.drainWaiters])
+            waiter();
+    }
+    drop(session) {
+        const key = this.key(session.userId, session.jobId);
+        if (this.sessions.get(key) === session) {
+            this.sessions.delete(key);
+        }
+        session.dispose();
+        this.notifyDrainWaiters();
+    }
+}
+/** Process-wide registry: sessions survive their originating connection. */
+export const jobRunRegistry = new JobRunRegistry();
+//# sourceMappingURL=job-run-registry.js.map

package/dist/job-run-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-run-registry.js","sourceRoot":"","sources":["../src/job-run-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,GAAG,GAAG,YAAY,CAAC,qCAAqC,CAAC,CAAC;AAEhE,SAAS,MAAM,CAAC,IAAY,EAAE,QAAgB;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAED,MAAM,mBAAmB,GAAG,GAAG,EAAE,CAC/B,MAAM,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC;AACpD,MAAM,eAAe,GAAG,GAAG,EAAE,CAC3B,MAAM,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACzD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,MAAM,CAAC,kCAAkC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AA0C5D,MAAM,OAAO,aAAa;IA4Bb,KAAK;IACG,MAAM;IAEN,QAAQ;IA9BlB,MAAM,CAAS;IACf,KAAK,CAAS;IACd,UAAU,CAAgB;IACnC,MAAM,GAA2B,SAAS,CAAC;IAC3C,2EAA2E;IAC3E,cAAc,GAAkB,IAAI,CAAC;IAE7B,GAAG,GAAG,CAAC,CAAC;IACR,MAAM,GAAoB,EAAE,CAAC;IACrC,yEAAyE;IACjE,iBAAiB,GAAG,CAAC,CAAC;IACtB,MAAM,GAAgC,IAAI,CAAC;IACnD;;;;;;OAMG;IACK,aAAa,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IACjD,WAAW,GAA0B,IAAI,CAAC;IAC1C,cAAc,GAA0B,IAAI,CAAC;IAErD,YACE,MAAc,EACd,KAAa,EACb,UAAyB,EAChB,KAA2B,EACnB,MAAwC;IACzD,uEAAuE;IACtD,QAAQ,GAAe,GAAG,EAAE,GAAE,CAAC;qBAHvC,KAAK;sBACG,MAAM;wBAEN,QAAQ;QAEzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,OAAgC;QACnC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,OAAO;gBAAE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAA4B,EAAE,OAAe;QAClD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;aACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,OAAO,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAClE,CAAC;IAED,8DAA8D;IAC9D,aAAa,CACX,MAA4B,EAC5B,MAAsC;QAEtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAA6B;QAClC,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO;QAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACtC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;YACjC,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;IAC7B,CAAC;IAED,6DAA6D;IAC7D,MAAM;QACJ,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,cAAuB;QAC5B,IAAI,cAAc;YAAE,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO;QACvC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;QACzB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED,0DAA0D;IAC1D,OAAO;QACL,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,gBAAgB;QACtB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,EAAuB;QAC7C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC7D,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE;gBAClC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IACjB,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,gEAAgE;IACxD,YAAY,GAAG,IAAI,GAAG,EAAc,CAAC;IAErC,GAAG,CAAC,MAAc,EAAE,KAAa;QACvC,OAAO,GAAG,MAAM,SAAS,KAAK,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CACF,MAAc,EACd,KAAa,EACb,UAAyB,EACzB,KAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,gDAAgD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACtE,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,aAAa,CAC/B,MAAM,EACN,KAAK,EACL,UAAU,EACV,KAAK,EACL,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EACnB,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAChC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,MAAc,EAAE,KAAa;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5D,CAAC;IAED,4EAA4E;IAC5E,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,MAAc;QACzB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,KAAK,IAAI,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2EAA2E;IAC3E,uBAAuB,CAAC,MAAc,EAAE,UAAkB;QACxD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IACE,OAAO,CAAC,MAAM,KAAK,MAAM;gBACzB,OAAO,CAAC,UAAU,KAAK,UAAU;gBACjC,OAAO,CAAC,MAAM,KAAK,SAAS,EAC5B,CAAC;gBACD,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mEAAmE;IACnE,YAAY;QACV,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,SAAS;QACP,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACvC,KAAK,MAAM,OAAO,IAAI,OAAO;YAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAChD,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,yEAAyE;IACzE,UAAU,CAAC,MAAc,EAAE,MAA2B;QACpD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,SAAS;YACtE,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,SAAiB;QACvB,IAAI,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,IAAI,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC;oBAAE,OAAO;gBACpC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjC,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,kBAAkB;QACxB,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;YAAE,MAAM,EAAE,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,OAAsB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC"}

package/dist/lib/app-build-service.d.ts

@@ -0,0 +1,16 @@
+/**
+ * `POST /api/applications/build` — the Fastify-facing half of the app build
+ * service. The engine moved to `@nodetool-ai/agents`
+ * (`src/app-build/build-service.ts`), because `buildApp` lives there. What
+ * stays here is the registry the server bootstraps and the translation of the
+ * service's refusals into API errors.
+ */
+import { type AppBuildDeps, type AppBuildRequest } from "@nodetool-ai/agents";
+import type { HttpApiOptions } from "../http-api.js";
+export type { AppBuildDeps, AppBuildRequest };
+/**
+ * Start a build. Resolves with the `BuildReport` (plus the session id), or —
+ * with `poll: true` — with the session id as soon as the build is under way.
+ */
+export declare function runApplicationBuild(userId: string, body: AppBuildRequest, apiOptions?: HttpApiOptions, deps?: AppBuildDeps): Promise<Record<string, unknown>>;
+//# sourceMappingURL=app-build-service.d.ts.map

package/dist/lib/app-build-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-build-service.d.ts","sourceRoot":"","sources":["../../src/lib/app-build-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAIrD,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;AAa9C;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,eAAe,EACrB,UAAU,GAAE,cAAmB,EAC/B,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAgBlC"}

package/dist/lib/app-build-service.js

@@ -0,0 +1,39 @@
+/**
+ * `POST /api/applications/build` — the Fastify-facing half of the app build
+ * service. The engine moved to `@nodetool-ai/agents`
+ * (`src/app-build/build-service.ts`), because `buildApp` lives there. What
+ * stays here is the registry the server bootstraps and the translation of the
+ * service's refusals into API errors.
+ */
+import { createLogger } from "@nodetool-ai/config";
+import { runApplicationBuild as runApplicationBuildService } from "@nodetool-ai/agents";
+import { AppServiceError } from "@nodetool-ai/execution/service";
+import { ApiErrorCode } from "../error-codes.js";
+import { throwApiError } from "../trpc/error-formatter.js";
+const log = createLogger("nodetool.websocket.app-build");
+let defaultRegistryPromise = null;
+async function getDefaultRegistry() {
+    if (!defaultRegistryPromise) {
+        defaultRegistryPromise = import("../node-registry-setup.js").then((m) => m.bootstrapNodeRegistry({ log }));
+    }
+    return defaultRegistryPromise;
+}
+/**
+ * Start a build. Resolves with the `BuildReport` (plus the session id), or —
+ * with `poll: true` — with the session id as soon as the build is under way.
+ */
+export async function runApplicationBuild(userId, body, apiOptions = {}, deps = {}) {
+    const registry = deps.registry ?? apiOptions.registry ?? (await getDefaultRegistry());
+    try {
+        return await runApplicationBuildService(userId, body, registry, deps);
+    }
+    catch (error) {
+        if (error instanceof AppServiceError) {
+            throwApiError(error.code === "not_found"
+                ? ApiErrorCode.NOT_FOUND
+                : ApiErrorCode.INVALID_INPUT, error.message);
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=app-build-service.js.map

package/dist/lib/app-build-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-build-service.js","sourceRoot":"","sources":["../../src/lib/app-build-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,mBAAmB,IAAI,0BAA0B,EAGlD,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG3D,MAAM,GAAG,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAIzD,IAAI,sBAAsB,GAAiC,IAAI,CAAC;AAEhE,KAAK,UAAU,kBAAkB;IAC/B,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,sBAAsB,GAAG,MAAM,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtE,CAAC,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CACjC,CAAC;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,IAAqB,EACrB,UAAU,GAAmB,EAAE,EAC/B,IAAI,GAAiB,EAAE;IAEvB,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,OAAO,MAAM,0BAA0B,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;YACrC,aAAa,CACX,KAAK,CAAC,IAAI,KAAK,WAAW;gBACxB,CAAC,CAAC,YAAY,CAAC,SAAS;gBACxB,CAAC,CAAC,YAAY,CAAC,aAAa,EAC9B,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/app-debug-service.d.ts

@@ -0,0 +1,16 @@
+/**
+ * `POST /api/applications/debug` — the Fastify-facing half of the app debug
+ * service. The engine moved to `@nodetool-ai/execution/service`, so the agent
+ * `debug_app` tool runs the same simulation in-process instead of over HTTP;
+ * what stays here is the registry the server bootstraps and the translation of
+ * the service's refusals into API errors.
+ */
+import type { AppDebugDeps, AppDebugRequest } from "@nodetool-ai/execution/service";
+import type { HttpApiOptions } from "../http-api.js";
+export type { AppDebugDeps, AppDebugRequest };
+/**
+ * Debug an app. Resolves with the compacted report (plus the session id), or —
+ * with `poll: true` — with the session id as soon as the run is under way.
+ */
+export declare function runApplicationDebug(userId: string, body: AppDebugRequest, apiOptions?: HttpApiOptions, deps?: AppDebugDeps): Promise<Record<string, unknown>>;
+//# sourceMappingURL=app-debug-service.d.ts.map

package/dist/lib/app-debug-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-debug-service.d.ts","sourceRoot":"","sources":["../../src/lib/app-debug-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EAChB,MAAM,gCAAgC,CAAC;AAKxC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAIrD,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;AAa9C;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,eAAe,EACrB,UAAU,GAAE,cAAmB,EAC/B,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAuBlC"}

package/dist/lib/app-debug-service.js

@@ -0,0 +1,48 @@
+/**
+ * `POST /api/applications/debug` — the Fastify-facing half of the app debug
+ * service. The engine moved to `@nodetool-ai/execution/service`, so the agent
+ * `debug_app` tool runs the same simulation in-process instead of over HTTP;
+ * what stays here is the registry the server bootstraps and the translation of
+ * the service's refusals into API errors.
+ */
+import { createLogger } from "@nodetool-ai/config";
+import { createJsScriptAppRunner } from "@nodetool-ai/agents";
+import { getSecret } from "@nodetool-ai/models";
+import { AppServiceError, runApplicationDebug as runApplicationDebugService } from "@nodetool-ai/execution/service";
+import { ApiErrorCode } from "../error-codes.js";
+import { getAssetAdapter } from "./storage.js";
+import { throwApiError } from "../trpc/error-formatter.js";
+const log = createLogger("nodetool.websocket.app-debug");
+let defaultRegistryPromise = null;
+async function getDefaultRegistry() {
+    if (!defaultRegistryPromise) {
+        defaultRegistryPromise = import("../node-registry-setup.js").then((m) => m.bootstrapNodeRegistry({ log }));
+    }
+    return defaultRegistryPromise;
+}
+/**
+ * Debug an app. Resolves with the compacted report (plus the session id), or —
+ * with `poll: true` — with the session id as soon as the run is under way.
+ */
+export async function runApplicationDebug(userId, body, apiOptions = {}, deps = {}) {
+    const registry = deps.registry ?? apiOptions.registry ?? (await getDefaultRegistry());
+    try {
+        return await runApplicationDebugService(userId, body, registry, {
+            // A script operation runs the QuickJS sandbox, which lives above the
+            // execution package — the server is where both are in reach.
+            runScript: createJsScriptAppRunner(userId, { secretResolver: getSecret }),
+            // Same store the workflow run path reads `asset://<id>` inputs through.
+            assetStorage: getAssetAdapter(),
+            ...deps
+        });
+    }
+    catch (error) {
+        if (error instanceof AppServiceError) {
+            throwApiError(error.code === "not_found"
+                ? ApiErrorCode.NOT_FOUND
+                : ApiErrorCode.INVALID_INPUT, error.message);
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=app-debug-service.js.map

package/dist/lib/app-debug-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-debug-service.js","sourceRoot":"","sources":["../../src/lib/app-debug-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EACL,eAAe,EACf,mBAAmB,IAAI,0BAA0B,EAClD,MAAM,gCAAgC,CAAC;AAMxC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG3D,MAAM,GAAG,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAIzD,IAAI,sBAAsB,GAAiC,IAAI,CAAC;AAEhE,KAAK,UAAU,kBAAkB;IAC/B,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,sBAAsB,GAAG,MAAM,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtE,CAAC,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CACjC,CAAC;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,IAAqB,EACrB,UAAU,GAAmB,EAAE,EAC/B,IAAI,GAAiB,EAAE;IAEvB,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,OAAO,MAAM,0BAA0B,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9D,qEAAqE;YACrE,6DAA6D;YAC7D,SAAS,EAAE,uBAAuB,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;YACzE,wEAAwE;YACxE,YAAY,EAAE,eAAe,EAAE;YAC/B,GAAG,IAAI;SACR,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;YACrC,aAAa,CACX,KAAK,CAAC,IAAI,KAAK,WAAW;gBACxB,CAAC,CAAC,YAAY,CAAC,SAAS;gBACxB,CAAC,CAAC,YAAY,CAAC,aAAa,EAC9B,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/app-deployment-service.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Serving a mini app from a hidden URL, with no login.
+ *
+ * Two audiences, kept apart on purpose. The **owner** deploys and withdraws
+ * the link through their authenticated session, and is the only one who ever
+ * sees the token. The **visitor** presents the token and gets exactly two
+ * things: the app's released snapshot, and a short-lived session token that
+ * may run that release and nothing else.
+ *
+ * Every failure a visitor can reach answers the same way — 404, "This app is
+ * not available" — whether the token was never minted, was revoked, names an
+ * app that has since been deleted, or names one that has published nothing.
+ * Distinguishing them would turn the hidden URL into an oracle for guessing
+ * the rest of them.
+ *
+ * The whole surface is production-only (`isAppDeploymentEnabled`). A local
+ * install already answers loopback as user "1" without credentials, so there
+ * a "no login needed" link is a second door onto an open house; production is
+ * where auth is enforced, where asset bytes come back as signed URLs a
+ * logged-out browser can load, and where the app's spend budget is what
+ * stands between a shared link and the owner's provider bill.
+ */
+import { type OperationBinding } from "@nodetool-ai/app-runtime";
+import { type ApplicationDeploymentSchema, type ApplicationReleaseResponse, type PublicApplication, type PublicApplicationSession } from "@nodetool-ai/protocol/api-schemas/applications.js";
+/** Whether this server offers public app deployments at all. */
+export declare function appDeploymentsEnabled(env?: NodeJS.ProcessEnv): boolean;
+type PublicReleaseDocument = {
+    operations: ReadonlyArray<Pick<OperationBinding, "id" | "name" | "workflowId" | "workflowVersion" | "target">>;
+    resources: ReadonlyArray<unknown>;
+};
+/**
+ * Why a release cannot be served over a public link, or null when it can.
+ *
+ * A public visitor reaches exactly two things: the release payload and the
+ * websocket. Everything else — the tRPC library, the script store, the asset
+ * routes — is refused at the door, on purpose. A workflow operation is fine:
+ * the release carries its pinned graph, so nothing has to be fetched. A script
+ * operation is not: its body lives behind an authenticated call the visitor
+ * cannot make, and a run that silently did nothing would be worse than a
+ * refusal.
+ */
+export declare function releaseBlockedReason(release: ApplicationReleaseResponse): string | null;
+/** Document-level restrictions shared by draft publish and released rollback. */
+export declare function publicReleaseDocumentBlockedReason(document: PublicReleaseDocument): string | null;
+/** Return the reason a candidate cannot replace a live public release. */
+export declare function publicReleasePreflight(applicationId: string, candidate: ApplicationReleaseResponse | {
+    document: PublicReleaseDocument;
+}): Promise<string | null>;
+/** The app's live deployment, or null when it has none. Owner only. */
+export declare function getApplicationDeployment(userId: string, applicationId: string): Promise<ApplicationDeploymentSchema | null>;
+/**
+ * Deploy the app, returning the link — the one already out there when it has
+ * one, so re-deploying never invalidates a URL somebody pasted somewhere.
+ *
+ * An app with nothing released is refused rather than deployed dark: the
+ * public page serves the release, so a deployment without one is a link that
+ * resolves to nothing, and the owner should hear that now instead of from
+ * whoever they sent it to.
+ */
+export declare function deployApplication(userId: string, applicationId: string): Promise<ApplicationDeploymentSchema>;
+/**
+ * Withdraw the link. Sessions already minted keep running until they expire —
+ * they are signed, not stored — so this stops new visitors rather than
+ * interrupting one mid-run.
+ */
+export declare function undeployApplication(userId: string, applicationId: string): Promise<{
+    ok: true;
+}>;
+/** What the public page renders: the app's identity and the release to run. */
+export declare function getPublicApplication(token: string): Promise<PublicApplication>;
+/**
+ * Mint the credential the public page runs on.
+ *
+ * It authenticates as the app's owner — their graphs, their keys, their
+ * budget — and carries the application id, which is what every consumer
+ * narrows on. Nothing about the visitor is recorded: a session is derived
+ * from the deployment and the clock, so it needs no row and revoking the
+ * deployment is the only state there is to change.
+ */
+export declare function createPublicApplicationSession(token: string, signingKey: Buffer | string): Promise<PublicApplicationSession>;
+export {};
+//# sourceMappingURL=app-deployment-service.d.ts.map

package/dist/lib/app-deployment-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-deployment-service.d.ts","sourceRoot":"","sources":["../../src/lib/app-deployment-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,0BAA0B,CAAC;AAYlC,OAAO,EAKL,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC9B,MAAM,mDAAmD,CAAC;AAS3D,gEAAgE;AAChE,wBAAgB,qBAAqB,CACnC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAET;AAoCD,KAAK,qBAAqB,GAAG;IAC3B,UAAU,EAAE,aAAa,CACvB,IAAI,CAAC,gBAAgB,EAAE,IAAI,GAAG,MAAM,GAAG,YAAY,GAAG,iBAAiB,GAAG,QAAQ,CAAC,CACpF,CAAC;IACF,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,0BAA0B,GAClC,MAAM,GAAG,IAAI,CAiBf;AAED,iFAAiF;AACjF,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,qBAAqB,GAC9B,MAAM,GAAG,IAAI,CAsBf;AAED,0EAA0E;AAC1E,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,MAAM,EACrB,SAAS,EACL,0BAA0B,GAC1B;IAAE,QAAQ,EAAE,qBAAqB,CAAA;CAAE,GACtC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxB;AA8BD,uEAAuE;AACvE,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAS7C;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,2BAA2B,CAAC,CAyBtC;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAKvB;AAmDD,+EAA+E;AAC/E,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,CAAC,CAyB5B;AAED;;;;;;;;GAQG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GAAG,MAAM,GAC1B,OAAO,CAAC,wBAAwB,CAAC,CAiBnC"}