@osolmaz/pi-workflows 0.15.3 → 0.16.1

package/README.md

@@ -80,10 +80,16 @@ All live workflow and controller state uses one local database:
 ```
 
 Runs, decisions, queues, claims, controllers, session capture, notifications,
-channel transport state, effects, and large text values all live there.
-Viewers open the database read-only, and every write checks its actor,
-expected revision, and owner lease when required. See
-[SQLite state](docs/SQLITE_STATE.md).
+channel transport state, effects, and large text values all live there. The
+package-owned host is the only production process that opens the active
+database. The extension, CLI, Herdr adapter, and `piw` use the same versioned
+local client protocol. See [SQLite state](docs/SQLITE_STATE.md).
+
+One host-owned workflow-message path handles steps, reminders, resumed work,
+human decisions, notifications, terminal results, and follow-up prompts. The
+shared extension coordinator reports exact Pi branches and model turns, so an
+active workflow turn stays `running`, repeated polling cannot send the same
+message twice, and a terminal result remains visible for 60 seconds.
 
 ## Quick start
 
@@ -128,6 +134,15 @@ A workflow can also expose [settings that change during a
 run](docs/2026-08-25-workflow-settings.md) and queue [normal follow-up work
 after completion](docs/2026-08-25-workflow-follow-ups.md).
 
+Protected human decisions always appear in Pi. To add a private Telegram
+channel, run `/workflow-channel setup` in Pi. Use `/workflow-channel status`
+to inspect configured profiles and uncertain operations, and
+`/workflow-channel reload` after a private configuration change. If an
+external send has an uncertain result, check Telegram first, then use
+`/workflow-channel recover <message-id> confirm|retry`. A retry can duplicate
+a message when Telegram cannot prove the first result. See
+[Human decisions](docs/HUMAN_DECISIONS.md).
+
 Use `expectedOutput: assistantMessage()` when a normal assistant response must
 be a node inside the graph rather than a presentation after the run. Its exact
 visible text becomes the node output after the turn settles. The helper has no
@@ -218,8 +233,9 @@ earlier `autodevise` name, and the old command and export are not retained.
 
 ## Viewers
 
-Runs persist in `~/.pi/agent/workflows/state.sqlite` as they execute. The
-viewer reads that database and re-renders on every state change:
+Runs persist in `~/.pi/agent/workflows/state.sqlite` as they execute. The global
+host is the only process that opens this database. Viewers use the shared client
+protocol and re-render from the host's run view on every state change:
 
 ```bash
 pi-workflows view          # interactive picker, live updates
@@ -254,8 +270,8 @@ Run the same command after a pi-workflows update. `pi-workflows herdr setup`
 remains an alias for existing installations.
 
 When Pi runs inside Herdr, the workflow widget shows a `Ctrl+Shift+R piw`
-shortcut. The shortcut opens the exact SQLite run state and lets you choose a
-split, tab, or new workspace. `/piw` opens the same menu, and `/piw right`,
+shortcut. The shortcut opens the exact host-owned run view and lets you choose
+a split, tab, or new workspace. `/piw` opens the same menu, and `/piw right`,
 `/piw below`, `/piw left`, `/piw above`, `/piw tab`, or `/piw workspace`
 selects a placement directly. If a viewer for that run already exists,
 pi-workflows focuses it instead of opening a duplicate.

package/dist/channels/adapter-entry.d.ts

@@ -0,0 +1,3 @@
+import { type ChannelAdapterLaunch } from "./protocol.js";
+export declare function runChannelAdapter(): Promise<number>;
+export declare function encodeChannelLaunch(launch: ChannelAdapterLaunch): string;

package/dist/channels/adapter-entry.js

@@ -0,0 +1,203 @@
+import { createInterface } from "node:readline";
+import { fileURLToPath } from "node:url";
+import { canonicalJson } from "../state/json.js";
+import { errorMessage } from "../workflows/errors.js";
+import { CHANNEL_ADAPTER_PROTOCOL_SCHEMA, channelStableMessageId, encodeChannelLine, parseChannelAdapterLaunch, parseChannelAdapterResponse, } from "./protocol.js";
+import { TelegramAdapter } from "./telegram.js";
+class AdapterHostConnection {
+    launch;
+    sequence = 0;
+    revision = 0;
+    lines = createInterface({ input: process.stdin, crlfDelay: Infinity })[Symbol.asyncIterator]();
+    constructor(launch) {
+        this.launch = launch;
+    }
+    async report(message) {
+        this.sequence += 1;
+        const full = {
+            schema: CHANNEL_ADAPTER_PROTOCOL_SCHEMA,
+            adapterEpoch: this.launch.adapterEpoch,
+            profile: this.launch.profile,
+            sequence: this.sequence,
+            expectedRevision: this.revision,
+            ...message,
+        };
+        if (!process.stdout.write(encodeChannelLine(full))) {
+            await new Promise((resolve) => process.stdout.once("drain", resolve));
+        }
+        const next = await this.lines.next();
+        if (next.done)
+            throw new Error("Workflow host closed the channel adapter connection");
+        const response = parseChannelAdapterResponse(Buffer.from(next.value, "utf8"));
+        if (response.sequence !== this.sequence) {
+            throw new Error("Workflow host returned a mismatched channel response");
+        }
+        if (response.outcome !== "accepted") {
+            throw new Error(response.error ?? "Workflow host rejected the channel adapter message");
+        }
+        this.revision = response.revision;
+        return response;
+    }
+}
+export async function runChannelAdapter() {
+    const launch = readLaunch();
+    const host = new AdapterHostConnection(launch);
+    const telegram = new TelegramAdapter({
+        profile: launch.profile,
+        token: launch.token,
+        allowedUserIds: launch.allowedUserIds,
+        allowedChatIds: launch.allowedChatIds,
+        ...(launch.apiBase === undefined ? {} : { apiBase: launch.apiBase }),
+    });
+    let cursor = 0;
+    let controlSequence = 0;
+    const controlId = (kind) => {
+        controlSequence += 1;
+        return channelStableMessageId([
+            launch.adapterEpoch,
+            kind,
+            String(controlSequence),
+            String(cursor),
+        ]);
+    };
+    let stopping = false;
+    process.once("SIGTERM", () => {
+        stopping = true;
+    });
+    process.once("SIGINT", () => {
+        stopping = true;
+    });
+    let response = await host.report({
+        kind: "channel.ready",
+        stableMessageId: controlId("ready"),
+        cursor,
+    });
+    while (!stopping) {
+        const command = response.command;
+        if (command === null) {
+            await new Promise((resolve) => setTimeout(resolve, 100));
+            response = await host.report({
+                kind: "channel.ready",
+                stableMessageId: controlId("ready"),
+                cursor,
+            });
+            continue;
+        }
+        if (command.kind === "channel.stop") {
+            stopping = true;
+            break;
+        }
+        if (command.kind === "channel.present") {
+            try {
+                const messages = await telegram.present(command.request);
+                response = await host.report({
+                    kind: "channel.present",
+                    stableMessageId: command.stableMessageId,
+                    decisionId: command.request.decisionId,
+                    requestDigest: command.request.requestDigest,
+                    attemptId: command.attemptId,
+                    state: "confirmed",
+                    messages,
+                });
+            }
+            catch (error) {
+                response = await host.report({
+                    kind: "channel.present",
+                    stableMessageId: command.stableMessageId,
+                    decisionId: command.request.decisionId,
+                    requestDigest: command.request.requestDigest,
+                    attemptId: command.attemptId,
+                    state: "unknown",
+                    messages: [],
+                    errorCode: errorMessage(error),
+                });
+            }
+            continue;
+        }
+        if (command.kind === "channel.settle") {
+            try {
+                await telegram.settle(command.outcome, command.response, command.messages);
+                response = await host.report({
+                    kind: "channel.settle",
+                    stableMessageId: command.stableMessageId,
+                    decisionId: command.request.decisionId,
+                    requestDigest: command.request.requestDigest,
+                    attemptId: command.attemptId,
+                    state: "confirmed",
+                });
+            }
+            catch (error) {
+                response = await host.report({
+                    kind: "channel.settle",
+                    stableMessageId: command.stableMessageId,
+                    decisionId: command.request.decisionId,
+                    requestDigest: command.request.requestDigest,
+                    attemptId: command.attemptId,
+                    state: "unknown",
+                    errorCode: errorMessage(error),
+                });
+            }
+            continue;
+        }
+        telegram.setRequests(command.requests);
+        const polled = await telegram.poll(command.cursor);
+        cursor = polled.cursor;
+        for (const answer of polled.answers) {
+            await host.report({
+                kind: "channel.answer",
+                stableMessageId: channelStableMessageId([
+                    launch.profile,
+                    answer.request.decisionId,
+                    answer.eventId,
+                ]),
+                decisionId: answer.request.decisionId,
+                requestDigest: answer.request.requestDigest,
+                response: answer.response,
+                actorId: answer.actorId,
+                chatId: answer.chatId,
+                eventId: answer.eventId,
+                idempotencyKey: `telegram:${launch.profile}:${answer.eventId}`,
+                cursor,
+            });
+        }
+        response = await host.report({
+            kind: "channel.ready",
+            stableMessageId: controlId("ready"),
+            cursor,
+        });
+    }
+    await host.report({
+        kind: "channel.exiting",
+        stableMessageId: controlId("exiting"),
+        cursor,
+    });
+    return 0;
+}
+function readLaunch() {
+    const encoded = process.env.PI_WORKFLOWS_CHANNEL_LAUNCH;
+    if (encoded === undefined)
+        throw new Error("Channel adapter launch envelope is missing");
+    let value;
+    try {
+        value = JSON.parse(Buffer.from(encoded, "base64url").toString("utf8"));
+    }
+    catch {
+        throw new Error("Channel adapter launch envelope is invalid");
+    }
+    return parseChannelAdapterLaunch(value);
+}
+async function main() {
+    try {
+        process.exitCode = await runChannelAdapter();
+    }
+    catch (error) {
+        process.stderr.write(`${errorMessage(error)}\n`);
+        process.exitCode = 1;
+    }
+}
+if (process.argv[1] === fileURLToPath(import.meta.url))
+    void main();
+export function encodeChannelLaunch(launch) {
+    return Buffer.from(canonicalJson(launch)).toString("base64url");
+}
+//# sourceMappingURL=adapter-entry.js.map

package/dist/channels/adapter-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-entry.js","sourceRoot":"","sources":["../../src/channels/adapter-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,2BAA2B,GAI5B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAQhD,MAAM,qBAAqB;IAOI,MAAM;IAN3B,QAAQ,GAAG,CAAC,CAAC;IACb,QAAQ,GAAG,CAAC,CAAC;IACJ,KAAK,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CACrF,MAAM,CAAC,aAAa,CACrB,EAAE,CAAC;IAEJ,YAA6B,MAA4B;sBAA5B,MAAM;IAAyB,CAAC;IAE7D,KAAK,CAAC,MAAM,CAAC,OAA6B;QACxC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,+BAA+B;YACvC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,gBAAgB,EAAE,IAAI,CAAC,QAAQ;YAC/B,GAAG,OAAO;SACc,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9E,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,oDAAoD,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAClC,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;KACrE,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,SAAS,GAAG,CAAC,IAAyB,EAAE,EAAE;QAC9C,eAAe,IAAI,CAAC,CAAC;QACrB,OAAO,sBAAsB,CAAC;YAC5B,MAAM,CAAC,YAAY;YACnB,IAAI;YACJ,MAAM,CAAC,eAAe,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC;SACf,CAAC,CAAC;IACL,CAAC,CAAC;IACF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;QAC3B,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;QAC1B,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;QAC/B,IAAI,EAAE,eAAe;QACrB,eAAe,EAAE,SAAS,CAAC,OAAO,CAAC;QACnC,MAAM;KACP,CAAC,CAAC;IACH,OAAO,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACzD,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;gBAC3B,IAAI,EAAE,eAAe;gBACrB,eAAe,EAAE,SAAS,CAAC,OAAO,CAAC;gBACnC,MAAM;aACP,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACpC,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACzD,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;oBAC3B,IAAI,EAAE,iBAAiB;oBACvB,eAAe,EAAE,OAAO,CAAC,eAAe;oBACxC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;oBACtC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;oBAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,WAAW;oBAClB,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;oBAC3B,IAAI,EAAE,iBAAiB;oBACvB,eAAe,EAAE,OAAO,CAAC,eAAe;oBACxC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;oBACtC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;oBAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,SAAS;oBAChB,QAAQ,EAAE,EAAE;oBACZ,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC3E,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;oBAC3B,IAAI,EAAE,gBAAgB;oBACtB,eAAe,EAAE,OAAO,CAAC,eAAe;oBACxC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;oBACtC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;oBAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;oBAC3B,IAAI,EAAE,gBAAgB;oBACtB,eAAe,EAAE,OAAO,CAAC,eAAe;oBACxC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;oBACtC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;oBAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,SAAS;oBAChB,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QAED,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,MAAM,CAAC;gBAChB,IAAI,EAAE,gBAAgB;gBACtB,eAAe,EAAE,sBAAsB,CAAC;oBACtC,MAAM,CAAC,OAAO;oBACd,MAAM,CAAC,OAAO,CAAC,UAAU;oBACzB,MAAM,CAAC,OAAO;iBACf,CAAC;gBACF,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;gBACrC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa;gBAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,cAAc,EAAE,YAAY,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE;gBAC9D,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,EAAE,eAAe;YACrB,eAAe,EAAE,SAAS,CAAC,OAAO,CAAC;YACnC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,iBAAiB;QACvB,eAAe,EAAE,SAAS,CAAC,SAAS,CAAC;QACrC,MAAM;KACP,CAAC,CAAC;IACH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACxD,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACzF,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,yBAAyB,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,KAAK,IAAI,EAAE,CAAC;AAEpE,MAAM,UAAU,mBAAmB,CAAC,MAA4B;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClE,CAAC"}

package/dist/channels/config.d.ts

@@ -0,0 +1,43 @@
+export type DecisionChannelConfig = {
+    schema: "pi-workflows.channels.v1";
+    audiences: Record<string, {
+        channels: string[];
+        accept: "first-valid-answer";
+    }>;
+    telegramProfiles?: Record<string, {
+        credential: string;
+        allowedUserIds: string[];
+        allowedChatIds: string[];
+    }>;
+};
+export type DecisionCredentialConfig = {
+    schema: "pi-workflows.credentials.v1";
+    telegram: Record<string, {
+        tokenFile: string;
+    }>;
+};
+export type LoadedDecisionChannelConfig = {
+    channels: DecisionChannelConfig;
+    credentials: Record<string, string>;
+    configDir: string;
+};
+export type TelegramFetch = (input: string, init?: RequestInit) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+export declare function decisionConfigDir(env?: NodeJS.ProcessEnv): string;
+export declare function audienceChannels(config: DecisionChannelConfig | null, audience: string): string[];
+export declare function loadDecisionChannelConfig(configDir?: string): Promise<LoadedDecisionChannelConfig | null>;
+export declare function verifyTelegramTokenFile(tokenFile: string, fetchFn?: TelegramFetch, apiBase?: string): Promise<void>;
+export declare function writeDecisionChannelProfile(options: {
+    configDir?: string;
+    audience: string;
+    profile: string;
+    credential: string;
+    tokenFile: string;
+    allowedUserIds: string[];
+    allowedChatIds: string[];
+}): Promise<void>;
+export declare function parseChannelConfig(value: unknown): DecisionChannelConfig;
+export declare function parseCredentialConfig(value: unknown): DecisionCredentialConfig;

package/dist/channels/config.js

@@ -0,0 +1,234 @@
+import { randomUUID } from "node:crypto";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+const DEFAULT_API_BASE = "https://api.telegram.org";
+const NUMERIC_ID = /^-?[0-9]+$/;
+const SIMPLE_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,199}$/;
+export function decisionConfigDir(env = process.env) {
+    return env.PI_WORKFLOWS_CONFIG_DIR ?? path.join(os.homedir(), ".config", "pi-workflows");
+}
+export function audienceChannels(config, audience) {
+    return [...(config?.audiences[audience]?.channels ?? ["pi"])];
+}
+export async function loadDecisionChannelConfig(configDir = decisionConfigDir()) {
+    const channelPath = path.join(configDir, "channels.json");
+    let channelsRaw;
+    try {
+        channelsRaw = JSON.parse(await fs.readFile(channelPath, "utf8"));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    }
+    await requirePrivateFile(channelPath, "pi-workflows channel profile");
+    const channels = parseChannelConfig(channelsRaw);
+    const profiles = Object.values(channels.telegramProfiles ?? {});
+    if (profiles.length === 0)
+        return { channels, credentials: {}, configDir };
+    const credentialPath = path.join(configDir, "credentials.json");
+    await requirePrivateFile(credentialPath, "pi-workflows credential profile");
+    const credentialsConfig = parseCredentialConfig(JSON.parse(await fs.readFile(credentialPath, "utf8")));
+    const credentials = {};
+    for (const profile of profiles) {
+        const credential = credentialsConfig.telegram[profile.credential];
+        if (credential === undefined) {
+            throw new Error(`Telegram credential ${profile.credential} is not configured`);
+        }
+        if (!path.isAbsolute(credential.tokenFile)) {
+            throw new Error(`Telegram credential ${profile.credential} tokenFile must be absolute`);
+        }
+        await requirePrivateFile(credential.tokenFile, `Telegram credential ${profile.credential} token file`);
+        const token = (await fs.readFile(credential.tokenFile, "utf8")).trim();
+        if (token.length === 0) {
+            throw new Error(`Telegram credential ${profile.credential} token file is empty`);
+        }
+        credentials[profile.credential] = token;
+    }
+    return { channels, credentials, configDir };
+}
+export async function verifyTelegramTokenFile(tokenFile, fetchFn, apiBase = DEFAULT_API_BASE) {
+    const request = fetchFn ?? fetch;
+    if (!path.isAbsolute(tokenFile))
+        throw new Error("Telegram token file path must be absolute");
+    await requirePrivateFile(tokenFile, "Telegram token file");
+    const token = (await fs.readFile(tokenFile, "utf8")).trim();
+    if (token.length === 0)
+        throw new Error("Telegram token file is empty");
+    let response;
+    try {
+        response = await request(`${apiBase}/bot${encodeURIComponent(token)}/getMe`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: "{}",
+        });
+    }
+    catch {
+        throw new Error("Telegram credential verification did not return a response");
+    }
+    if (!response.ok) {
+        throw new Error(`Telegram credential verification failed with HTTP ${response.status}`);
+    }
+    const body = requireRecord(await response.json(), "Telegram credential verification response");
+    if (body.ok !== true)
+        throw new Error("Telegram credential verification was rejected");
+}
+export async function writeDecisionChannelProfile(options) {
+    const configDir = options.configDir ?? decisionConfigDir();
+    requireSimpleId(options.audience, "Decision audience");
+    requireSimpleId(options.profile, "Telegram profile");
+    requireSimpleId(options.credential, "Telegram credential");
+    validateNumericIds(options.allowedUserIds, "Telegram allowed user IDs");
+    validateNumericIds(options.allowedChatIds, "Telegram allowed chat IDs");
+    if (!path.isAbsolute(options.tokenFile)) {
+        throw new Error("Telegram token file path must be absolute");
+    }
+    await requirePrivateFile(options.tokenFile, "Telegram token file");
+    await fs.mkdir(configDir, { recursive: true, mode: 0o700 });
+    const channelPath = path.join(configDir, "channels.json");
+    const credentialPath = path.join(configDir, "credentials.json");
+    const existingChannels = await readOptionalJson(channelPath);
+    const existingCredentials = await readOptionalJson(credentialPath);
+    const channels = existingChannels === null
+        ? { schema: "pi-workflows.channels.v1", audiences: {} }
+        : parseChannelConfig(existingChannels);
+    const credentials = existingCredentials === null
+        ? { schema: "pi-workflows.credentials.v1", telegram: {} }
+        : parseCredentialConfig(existingCredentials);
+    channels.telegramProfiles = {
+        ...channels.telegramProfiles,
+        [options.profile]: {
+            credential: options.credential,
+            allowedUserIds: [...options.allowedUserIds],
+            allowedChatIds: [...options.allowedChatIds],
+        },
+    };
+    const priorAudience = channels.audiences[options.audience];
+    const channelId = `telegram:${options.profile}`;
+    channels.audiences[options.audience] = {
+        channels: [...new Set([...(priorAudience?.channels ?? ["pi"]), channelId])],
+        accept: "first-valid-answer",
+    };
+    credentials.telegram[options.credential] = { tokenFile: options.tokenFile };
+    await writePrivateJson(channelPath, channels);
+    await writePrivateJson(credentialPath, credentials);
+}
+export function parseChannelConfig(value) {
+    const input = requireRecord(value, "Decision channel configuration");
+    if (input.schema !== "pi-workflows.channels.v1") {
+        throw new Error("Decision channel configuration schema is invalid");
+    }
+    const audiencesInput = requireRecord(input.audiences, "Decision channel audiences");
+    const audiences = {};
+    for (const [audience, raw] of Object.entries(audiencesInput)) {
+        requireSimpleId(audience, "Decision audience");
+        const record = requireRecord(raw, `Decision audience ${audience}`);
+        const channels = stringArray(record.channels, `Decision audience ${audience} channels`);
+        if (channels.length === 0)
+            throw new Error(`Decision audience ${audience} has no channels`);
+        if (record.accept !== "first-valid-answer") {
+            throw new Error(`Decision audience ${audience} accept policy is invalid`);
+        }
+        audiences[audience] = { channels, accept: "first-valid-answer" };
+    }
+    const telegramProfiles = {};
+    if (input.telegramProfiles !== undefined) {
+        const profiles = requireRecord(input.telegramProfiles, "Telegram profiles");
+        for (const [name, raw] of Object.entries(profiles)) {
+            requireSimpleId(name, "Telegram profile");
+            const profile = requireRecord(raw, `Telegram profile ${name}`);
+            const credential = requireSimpleId(profile.credential, `Telegram profile ${name} credential`);
+            const allowedUserIds = stringArray(profile.allowedUserIds, `Telegram profile ${name} allowedUserIds`);
+            const allowedChatIds = stringArray(profile.allowedChatIds, `Telegram profile ${name} allowedChatIds`);
+            validateNumericIds(allowedUserIds, `Telegram profile ${name} allowedUserIds`);
+            validateNumericIds(allowedChatIds, `Telegram profile ${name} allowedChatIds`);
+            if (allowedUserIds.length === 0 || allowedChatIds.length === 0) {
+                throw new Error(`Telegram profile ${name} must allow at least one user and chat`);
+            }
+            telegramProfiles[name] = { credential, allowedUserIds, allowedChatIds };
+        }
+    }
+    for (const [audience, rule] of Object.entries(audiences)) {
+        for (const channel of rule.channels) {
+            if (channel === "pi")
+                continue;
+            if (!channel.startsWith("telegram:") ||
+                telegramProfiles[channel.slice("telegram:".length)] === undefined) {
+                throw new Error(`Decision audience ${audience} references unknown channel ${channel}`);
+            }
+        }
+    }
+    return {
+        schema: "pi-workflows.channels.v1",
+        audiences,
+        ...(Object.keys(telegramProfiles).length === 0 ? {} : { telegramProfiles }),
+    };
+}
+export function parseCredentialConfig(value) {
+    const input = requireRecord(value, "Decision credential configuration");
+    if (input.schema !== "pi-workflows.credentials.v1") {
+        throw new Error("Decision credential configuration schema is invalid");
+    }
+    const telegramInput = requireRecord(input.telegram, "Telegram credentials");
+    const telegram = {};
+    for (const [name, raw] of Object.entries(telegramInput)) {
+        requireSimpleId(name, "Telegram credential");
+        const credential = requireRecord(raw, `Telegram credential ${name}`);
+        telegram[name] = { tokenFile: requireString(credential.tokenFile, "Telegram tokenFile") };
+    }
+    return { schema: "pi-workflows.credentials.v1", telegram };
+}
+async function requirePrivateFile(filePath, label) {
+    const stat = await fs.stat(filePath);
+    if (!stat.isFile())
+        throw new Error(`${label} must be a file`);
+    if ((stat.mode & 0o077) !== 0)
+        throw new Error(`${label} permissions must be 0600`);
+}
+async function readOptionalJson(filePath) {
+    try {
+        return JSON.parse(await fs.readFile(filePath, "utf8"));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    }
+}
+async function writePrivateJson(filePath, value) {
+    const temporary = `${filePath}.${process.pid}.${randomUUID()}.tmp`;
+    await fs.writeFile(temporary, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
+    await fs.rename(temporary, filePath);
+    await fs.chmod(filePath, 0o600);
+}
+function validateNumericIds(values, label) {
+    if (values.some((value) => !NUMERIC_ID.test(value))) {
+        throw new Error(`${label} must contain only numeric IDs`);
+    }
+}
+function requireSimpleId(value, label) {
+    const text = requireString(value, label);
+    if (!SIMPLE_ID.test(text))
+        throw new Error(`${label} is invalid`);
+    return text;
+}
+function requireString(value, label) {
+    if (typeof value !== "string" || value.trim().length === 0) {
+        throw new Error(`${label} must be a non-empty string`);
+    }
+    return value.trim();
+}
+function stringArray(value, label) {
+    if (!Array.isArray(value) || value.some((item) => typeof item !== "string")) {
+        throw new Error(`${label} must be an array of strings`);
+    }
+    return [...value];
+}
+function requireRecord(value, label) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+    return value;
+}
+//# sourceMappingURL=config.js.map

package/dist/channels/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/channels/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AACpD,MAAM,UAAU,GAAG,YAAY,CAAC;AAChC,MAAM,SAAS,GAAG,oCAAoC,CAAC;AA+BvD,MAAM,UAAU,iBAAiB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACpE,OAAO,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAoC,EAAE,QAAgB;IACrF,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAS,GAAG,iBAAiB,EAAE;IAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC1D,IAAI,WAAoB,CAAC;IACzB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAY,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,kBAAkB,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;IAE3E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAChE,MAAM,kBAAkB,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;IAC5E,MAAM,iBAAiB,GAAG,qBAAqB,CAC7C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAY,CACjE,CAAC;IACF,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,UAAU,oBAAoB,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,UAAU,6BAA6B,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,kBAAkB,CACtB,UAAU,CAAC,SAAS,EACpB,uBAAuB,OAAO,CAAC,UAAU,aAAa,CACvD,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,UAAU,sBAAsB,CAAC,CAAC;QACnF,CAAC;QACD,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EACjB,OAAuB,EACvB,OAAO,GAAG,gBAAgB;IAE1B,MAAM,OAAO,GAAG,OAAO,IAAK,KAAuB,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9F,MAAM,kBAAkB,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACxE,IAAI,QAA4C,CAAC;IACjD,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,OAAO,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC3E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,2CAA2C,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAQjD;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,iBAAiB,EAAE,CAAC;IAC3D,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACvD,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACrD,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAC3D,kBAAkB,CAAC,OAAO,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IACxE,kBAAkB,CAAC,OAAO,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IACxE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACnE,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE5D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC7D,MAAM,mBAAmB,GAAG,MAAM,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACnE,MAAM,QAAQ,GACZ,gBAAgB,KAAK,IAAI;QACvB,CAAC,CAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,EAAE,EAAmC;QACzF,CAAC,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAC3C,MAAM,WAAW,GACf,mBAAmB,KAAK,IAAI;QAC1B,CAAC,CAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,QAAQ,EAAE,EAAE,EAAsC;QAC9F,CAAC,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IAEjD,QAAQ,CAAC,gBAAgB,GAAG;QAC1B,GAAG,QAAQ,CAAC,gBAAgB;QAC5B,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACjB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;YAC3C,cAAc,EAAE,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;SAC5C;KACF,CAAC;IACF,MAAM,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,YAAY,OAAO,CAAC,OAAO,EAAE,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG;QACrC,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,MAAM,EAAE,oBAAoB;KAC7B,CAAC;IACF,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IAC5E,MAAM,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,gBAAgB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;IACpF,MAAM,SAAS,GAAuC,EAAE,CAAC;IACzD,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7D,eAAe,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,qBAAqB,QAAQ,WAAW,CAAC,CAAC;QACxF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,kBAAkB,CAAC,CAAC;QAC5F,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,2BAA2B,CAAC,CAAC;QAC5E,CAAC;QACD,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,gBAAgB,GAA2D,EAAE,CAAC;IACpF,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;QAC5E,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,eAAe,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,oBAAoB,IAAI,aAAa,CAAC,CAAC;YAC9F,MAAM,cAAc,GAAG,WAAW,CAChC,OAAO,CAAC,cAAc,EACtB,oBAAoB,IAAI,iBAAiB,CAC1C,CAAC;YACF,MAAM,cAAc,GAAG,WAAW,CAChC,OAAO,CAAC,cAAc,EACtB,oBAAoB,IAAI,iBAAiB,CAC1C,CAAC;YACF,kBAAkB,CAAC,cAAc,EAAE,oBAAoB,IAAI,iBAAiB,CAAC,CAAC;YAC9E,kBAAkB,CAAC,cAAc,EAAE,oBAAoB,IAAI,iBAAiB,CAAC,CAAC;YAC9E,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,wCAAwC,CAAC,CAAC;YACpF,CAAC;YACD,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,OAAO,KAAK,IAAI;gBAAE,SAAS;YAC/B,IACE,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC;gBAChC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,SAAS,EACjE,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,+BAA+B,OAAO,EAAE,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,0BAA0B;QAClC,SAAS;QACT,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,MAAM,KAAK,6BAA6B,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAyC,EAAE,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,eAAe,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,uBAAuB,IAAI,EAAE,CAAC,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,UAAU,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,QAAQ,EAAE,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,KAAa;IAC/D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,KAAc;IAC9D,MAAM,SAAS,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACnE,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAyB,EAAE,KAAa;IAClE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACpD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAa,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC"}