@provos/ironcurtain 0.10.0 → 0.12.0

package/dist/workflow/run-state-command.js

@@ -0,0 +1,414 @@
+/**
+ * `ironcurtain workflow run-state` — runs a single workflow agent state once
+ * against a pre-staged artifact directory. Reuses the start-time staging and
+ * session-factory seams; deliberately skips the orchestrator, journal,
+ * checkpoint, and transition machinery.
+ */
+import { cpSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { getIronCurtainHome } from '../config/paths.js';
+import { formatHelp } from '../cli-help.js';
+import { createInitialContext } from './machine-builder.js';
+import { resolveWorkflowPath, getWorkflowPackageDir } from './discovery.js';
+import { buildAgentCommand } from './prompt-builder.js';
+import { parseAgentStatus, AgentStatusParseError } from './status-parser.js';
+import { parseArtifactRef } from './validate.js';
+import { stageWorkflowSkillsAtStart } from './orchestrator.js';
+import { parseArgsStrict, runCliPreflightLint } from './cli-shared.js';
+import { WORKFLOW_ARTIFACT_DIR, resolveWorkflowSkillsOptions } from './types.js';
+import { createWorkflowSessionFactory, writeStderr, writeStdout, BOLD, CYAN, DIM, GREEN, RED, RESET, YELLOW, } from './cli-support.js';
+import { captureContainerLogs, captureConversationLogs, resolveCapturePaths, } from './run-state-debug-capture.js';
+import { bundleIdFromSessionId, createAgentConversationId } from '../session/types.js';
+function printCaptureLocations(target, paths) {
+    const write = target === 'stdout' ? writeStdout : writeStderr;
+    write(`${DIM}Container logs: ${paths.containerLogsPath}${RESET}`);
+    write(`${DIM}Conversation logs: ${paths.claudeLogsDir}${RESET}`);
+}
+// ---------------------------------------------------------------------------
+// Help spec
+// ---------------------------------------------------------------------------
+export const runStateSpec = {
+    name: 'ironcurtain workflow run-state',
+    description: 'Run a single workflow agent state once against pre-staged artifacts',
+    usage: ['ironcurtain workflow run-state <name-or-path> <state> --artifacts <dir> [options]'],
+    options: [
+        { flag: 'artifacts', description: 'Directory containing pre-staged artifact subdirs', placeholder: '<dir>' },
+        {
+            flag: 'workspace',
+            description: 'Source tree to stage alongside .workflow/ (excludes top-level .workflow/ from the copy)',
+            placeholder: '<dir>',
+        },
+        { flag: 'directive', description: 'Inline scoping directive from a synthetic prior agent', placeholder: '<text>' },
+        { flag: 'directive-file', description: 'File containing the scoping directive', placeholder: '<path>' },
+        {
+            flag: 'output',
+            description: 'Output dir for staged workspace (default: ~/.ironcurtain/debug-runs/...)',
+            placeholder: '<dir>',
+        },
+        { flag: 'mode', description: 'Override settings.mode (builtin or docker)', placeholder: '<mode>' },
+        {
+            flag: 'task',
+            description: 'Inline task description (overrides artifacts/task/description.md)',
+            placeholder: '<text>',
+        },
+        { flag: 'task-file', description: 'File containing task description', placeholder: '<path>' },
+        { flag: 'model', description: 'Override the agent model', placeholder: '<model-id>' },
+        { flag: 'no-lint', description: 'Skip pre-flight linting' },
+        { flag: 'help', short: 'h', description: 'Show this help message' },
+    ],
+    examples: [
+        'ironcurtain workflow run-state vuln-discovery review --artifacts ~/src/libtiff/.workflow',
+        'ironcurtain workflow run-state vuln-discovery review --workspace ~/src/libtiff --artifacts ~/src/libtiff/.workflow',
+        'ironcurtain workflow run-state vuln-discovery review --artifacts ~/src/libtiff/.workflow --directive "focus on the PIXARLOG finding"',
+        'ironcurtain workflow run-state vuln-discovery review --artifacts ~/src/libtiff/.workflow --mode builtin',
+    ],
+};
+function parseRunStateArgs(args) {
+    const { values, positionals } = parseArgsStrict({
+        args,
+        options: {
+            artifacts: { type: 'string' },
+            workspace: { type: 'string' },
+            directive: { type: 'string' },
+            'directive-file': { type: 'string' },
+            output: { type: 'string' },
+            mode: { type: 'string' },
+            task: { type: 'string' },
+            'task-file': { type: 'string' },
+            model: { type: 'string' },
+            'no-lint': { type: 'boolean' },
+            help: { type: 'boolean', short: 'h' },
+        },
+        allowPositionals: true,
+    });
+    if (values.help)
+        return 'help';
+    const definitionRef = positionals[0];
+    const stateId = positionals[1];
+    if (!definitionRef || !stateId) {
+        writeStderr(`${RED}Usage: ironcurtain workflow run-state <name-or-path> <state> --artifacts <dir>${RESET}`);
+        process.exit(2);
+    }
+    const artifactsDir = values.artifacts;
+    if (!artifactsDir) {
+        writeStderr(`${RED}--artifacts <dir> is required${RESET}`);
+        process.exit(2);
+    }
+    if (values.directive != null && values['directive-file'] != null) {
+        writeStderr(`${RED}--directive and --directive-file are mutually exclusive${RESET}`);
+        process.exit(2);
+    }
+    if (values.task != null && values['task-file'] != null) {
+        writeStderr(`${RED}--task and --task-file are mutually exclusive${RESET}`);
+        process.exit(2);
+    }
+    let directive;
+    if (values.directive != null) {
+        directive = values.directive;
+    }
+    else if (values['directive-file'] != null) {
+        const path = resolve(values['directive-file']);
+        directive = readFileWithMessage(path, 'directive file');
+    }
+    let taskDescription;
+    if (values.task != null) {
+        taskDescription = values.task;
+    }
+    else if (values['task-file'] != null) {
+        const path = resolve(values['task-file']);
+        taskDescription = readFileWithMessage(path, 'task file');
+    }
+    const modeRaw = values.mode;
+    let mode;
+    if (modeRaw != null) {
+        if (modeRaw !== 'builtin' && modeRaw !== 'docker') {
+            writeStderr(`${RED}--mode must be "builtin" or "docker" (got "${modeRaw}")${RESET}`);
+            process.exit(2);
+        }
+        mode = modeRaw;
+    }
+    const workspaceRaw = values.workspace;
+    const workspaceSrc = workspaceRaw != null ? resolve(workspaceRaw) : undefined;
+    return {
+        definitionRef,
+        stateId,
+        artifactsDir: resolve(artifactsDir),
+        workspaceSrc,
+        directive,
+        outputDir: values.output != null ? resolve(values.output) : undefined,
+        mode,
+        taskDescription,
+        modelOverride: values.model,
+        noLint: values['no-lint'] === true,
+    };
+}
+function readFileWithMessage(path, label) {
+    try {
+        return readFileSync(path, 'utf-8');
+    }
+    catch {
+        writeStderr(`${RED}${label} not found: ${path}${RESET}`);
+        process.exit(2);
+    }
+}
+function resolveAgentState(parsed) {
+    const definitionPath = resolveWorkflowPath(parsed.definitionRef);
+    if (!definitionPath) {
+        writeStderr(`${RED}Workflow not found: ${parsed.definitionRef}${RESET}`);
+        writeStderr(`${DIM}Looked in bundled and user workflow directories.${RESET}`);
+        process.exit(2);
+    }
+    const lintMode = parsed.noLint ? 'off' : 'warn';
+    const definition = runCliPreflightLint(definitionPath, lintMode);
+    if (!Object.prototype.hasOwnProperty.call(definition.states, parsed.stateId)) {
+        const agentStates = Object.entries(definition.states)
+            .filter(([, s]) => s.type === 'agent')
+            .map(([id]) => id);
+        writeStderr(`${RED}Unknown state: "${parsed.stateId}"${RESET}`);
+        writeStderr(`${DIM}Available agent states: ${agentStates.join(', ')}${RESET}`);
+        process.exit(2);
+    }
+    const stateConfig = definition.states[parsed.stateId];
+    if (stateConfig.type !== 'agent') {
+        writeStderr(`${RED}state "${parsed.stateId}" is type "${stateConfig.type}"; only agent states are runnable${RESET}`);
+        process.exit(2);
+    }
+    return { definition, definitionPath, stateConfig };
+}
+// ---------------------------------------------------------------------------
+// Workspace + artifact staging
+// ---------------------------------------------------------------------------
+function defaultOutputDir(workflowName, stateId) {
+    const ts = new Date().toISOString().replace(/[:.]/g, '-');
+    return resolve(getIronCurtainHome(), 'debug-runs', `${workflowName}-${stateId}-${ts}`);
+}
+function assertDirectory(path, flag) {
+    let stat;
+    try {
+        stat = statSync(path);
+    }
+    catch {
+        writeStderr(`${RED}${flag} is not a directory: ${path}${RESET}`);
+        process.exit(2);
+    }
+    if (!stat.isDirectory()) {
+        writeStderr(`${RED}${flag} is not a directory: ${path}${RESET}`);
+        process.exit(2);
+    }
+}
+/**
+ * Stages the agent's workspace under {@link outputDir}/workspace, copying every
+ * subdirectory of {@link artifactsSrc} whose name matches one of the state's
+ * declared inputs. Required inputs (no `?`) missing on disk produce a
+ * structured exit-2 error listing each missing input and the path it was
+ * looked up at; optional inputs are silently skipped.
+ *
+ * If {@link workspaceSrc} is provided, its contents are copied first into the
+ * staged workspace, EXCLUDING any top-level `.workflow/` directory (which
+ * would conflict with the artifact staging step that runs after). Artifact
+ * staging always wins on conflict.
+ *
+ * The source dirs are never mutated — only read.
+ */
+function stageWorkspace(outputDir, artifactsSrc, inputs, workspaceSrc) {
+    assertDirectory(artifactsSrc, '--artifacts');
+    if (workspaceSrc != null)
+        assertDirectory(workspaceSrc, '--workspace');
+    let existingEntries = [];
+    try {
+        existingEntries = readdirSync(outputDir);
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === 'ENOTDIR') {
+            writeStderr(`${RED}--output exists but is not a directory: ${outputDir}${RESET}`);
+            process.exit(2);
+        }
+        if (code !== 'ENOENT') {
+            writeStderr(`${RED}Cannot read --output dir ${outputDir}: ${err instanceof Error ? err.message : String(err)}${RESET}`);
+            process.exit(2);
+        }
+    }
+    if (existingEntries.length > 0) {
+        writeStderr(`${RED}Output dir already exists and is not empty: ${outputDir}${RESET}`);
+        writeStderr(`${DIM}Choose a different --output, or remove the existing directory.${RESET}`);
+        process.exit(2);
+    }
+    const workspacePath = resolve(outputDir, 'workspace');
+    const artifactDir = resolve(workspacePath, WORKFLOW_ARTIFACT_DIR);
+    mkdirSync(artifactDir, { recursive: true });
+    if (workspaceSrc != null) {
+        const skip = resolve(workspaceSrc, WORKFLOW_ARTIFACT_DIR);
+        cpSync(workspaceSrc, workspacePath, { recursive: true, filter: (src) => resolve(src) !== skip });
+    }
+    const missing = [];
+    for (const inputRef of inputs) {
+        const { name, isOptional } = parseArtifactRef(inputRef);
+        const srcPath = resolve(artifactsSrc, name);
+        let srcStat;
+        try {
+            srcStat = statSync(srcPath);
+        }
+        catch {
+            if (!isOptional)
+                missing.push(`${name} (looked up at ${srcPath})`);
+            continue;
+        }
+        if (!srcStat.isDirectory()) {
+            if (isOptional) {
+                writeStderr(`${YELLOW}Warning: optional input ${srcPath} is not a directory; skipping.${RESET}`);
+                continue;
+            }
+            writeStderr(`${RED}Required input ${name} at ${srcPath} is not a directory${RESET}`);
+            process.exit(2);
+        }
+        cpSync(srcPath, resolve(artifactDir, name), { recursive: true });
+    }
+    if (missing.length > 0) {
+        writeStderr(`${RED}Missing required inputs:${RESET}`);
+        for (const m of missing)
+            writeStderr(`  ${RED}- ${m}${RESET}`);
+        process.exit(2);
+    }
+    return { outputDir, workspacePath, artifactDir };
+}
+// ---------------------------------------------------------------------------
+// Task description resolution
+// ---------------------------------------------------------------------------
+function resolveTaskDescription(parsed) {
+    if (parsed.taskDescription != null)
+        return parsed.taskDescription.trim();
+    const candidate = resolve(parsed.artifactsDir, 'task', 'description.md');
+    try {
+        return readFileSync(candidate, 'utf-8').trim();
+    }
+    catch {
+        writeStderr(`${YELLOW}Warning: no task description found (tried ${candidate}); using placeholder.${RESET}`);
+        return '(no task description provided)';
+    }
+}
+// ---------------------------------------------------------------------------
+// Context synthesis
+// ---------------------------------------------------------------------------
+function buildContext(definition, taskDescription, stateId, directive) {
+    return {
+        ...createInitialContext(definition),
+        taskDescription,
+        round: 1,
+        maxRounds: 1,
+        previousAgentOutput: directive ?? null,
+        previousStateName: directive != null ? 'debug' : null,
+        visitCounts: { [stateId]: 1 },
+    };
+}
+// ---------------------------------------------------------------------------
+// Mode + session creation
+// ---------------------------------------------------------------------------
+function resolveMode(definition, override) {
+    const settings = definition.settings ?? {};
+    const effective = override ?? settings.mode ?? 'docker';
+    if (effective === 'builtin')
+        return { kind: 'builtin' };
+    return { kind: 'docker', agent: (settings.dockerAgent ?? 'claude-code') };
+}
+// ---------------------------------------------------------------------------
+// Main entry point
+// ---------------------------------------------------------------------------
+export async function runRunState(args) {
+    const parsed = parseRunStateArgs(args);
+    if (parsed === 'help') {
+        process.stderr.write(formatHelp(runStateSpec) + '\n');
+        return;
+    }
+    const { definition, definitionPath, stateConfig } = resolveAgentState(parsed);
+    const outputDir = parsed.outputDir ?? defaultOutputDir(definition.name, parsed.stateId);
+    const staged = stageWorkspace(outputDir, parsed.artifactsDir, stateConfig.inputs, parsed.workspaceSrc);
+    const workflowSkillsDir = stageWorkflowSkillsAtStart(getWorkflowPackageDir(definitionPath), outputDir);
+    const taskDescription = resolveTaskDescription(parsed);
+    const context = buildContext(definition, taskDescription, parsed.stateId, parsed.directive);
+    const command = buildAgentCommand(parsed.stateId, stateConfig, context, definition);
+    const mode = resolveMode(definition, parsed.mode);
+    const settings = definition.settings ?? {};
+    const effectiveModel = stateConfig.model ?? settings.model;
+    const sessionFactory = createWorkflowSessionFactory(parsed.modelOverride);
+    writeStdout(`${BOLD}${CYAN}Running state "${parsed.stateId}" from ${definition.name}${RESET}`);
+    writeStdout(`${DIM}Workspace: ${staged.workspacePath}${RESET}`);
+    writeStdout(`${DIM}Mode: ${mode.kind}${RESET}`);
+    if (parsed.directive)
+        writeStdout(`${DIM}Directive: ${parsed.directive.length} bytes from synthetic "debug" agent${RESET}`);
+    writeStdout('');
+    let session;
+    try {
+        session = await sessionFactory({
+            persona: stateConfig.persona,
+            mode,
+            agentConversationId: createAgentConversationId(),
+            workspacePath: staged.workspacePath,
+            ...(definition.settings?.systemPrompt ? { systemPromptAugmentation: definition.settings.systemPrompt } : {}),
+            ...(effectiveModel != null ? { agentModelOverride: effectiveModel } : {}),
+            ...(settings.maxSessionSeconds != null
+                ? { resourceBudgetOverrides: { maxSessionSeconds: settings.maxSessionSeconds } }
+                : {}),
+            workflow: resolveWorkflowSkillsOptions(stateConfig.skills, workflowSkillsDir),
+        });
+    }
+    catch (err) {
+        writeStderr(`${RED}Session creation failed: ${err instanceof Error ? err.message : String(err)}${RESET}`);
+        process.exit(1);
+    }
+    // bundleIdFromSessionId carries the standalone-mode invariant
+    // (workflow-session-identity §2.1) — see helper in session/types.
+    const capturePaths = mode.kind === 'docker' ? resolveCapturePaths(bundleIdFromSessionId(session.getInfo().id), outputDir) : undefined;
+    let responseText = '';
+    let invocationFailed = false;
+    let invocationError;
+    try {
+        responseText = await session.sendMessage(command);
+    }
+    catch (err) {
+        invocationFailed = true;
+        invocationError = err;
+    }
+    finally {
+        if (capturePaths)
+            await captureContainerLogs(capturePaths);
+        await session
+            .close()
+            .catch((err) => writeStderr(`[run-state] session.close() failed: ${err instanceof Error ? err.message : String(err)}`));
+        if (capturePaths)
+            captureConversationLogs(capturePaths);
+    }
+    if (invocationFailed) {
+        writeStderr(`${RED}Agent invocation failed: ${invocationError instanceof Error ? invocationError.message : String(invocationError)}${RESET}`);
+        if (capturePaths)
+            printCaptureLocations('stderr', capturePaths);
+        process.exit(1);
+    }
+    // Sidecar — agent response can be megabytes; stderr is inconvenient to recover from CI logs.
+    const outputFile = resolve(outputDir, 'agent-output.md');
+    writeFileSync(outputFile, responseText, 'utf-8');
+    let verdictLine;
+    try {
+        const parsedStatus = parseAgentStatus(responseText);
+        verdictLine = parsedStatus
+            ? `verdict=${parsedStatus.verdict}` + (parsedStatus.notes ? `\nnotes: ${parsedStatus.notes}` : '')
+            : '(no agent_status block)';
+    }
+    catch (err) {
+        if (err instanceof AgentStatusParseError) {
+            verdictLine = `(malformed agent_status: ${err.message})`;
+        }
+        else {
+            throw err;
+        }
+    }
+    writeStdout('');
+    writeStdout(`${BOLD}${GREEN}Result${RESET}`);
+    writeStdout(verdictLine);
+    writeStdout('');
+    writeStdout(`${DIM}Workspace: ${staged.workspacePath}${RESET}`);
+    writeStdout(`${DIM}Agent output: ${outputFile}${RESET}`);
+    if (capturePaths)
+        printCaptureLocations('stdout', capturePaths);
+}
+//# sourceMappingURL=run-state-command.js.map

package/dist/workflow/run-state-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-state-command.js","sourceRoot":"","sources":["../../src/workflow/run-state-command.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAoB,MAAM,gBAAgB,CAAC;AAE9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAEjF,OAAO,EACL,4BAA4B,EAC5B,WAAW,EACX,WAAW,EACX,IAAI,EACJ,IAAI,EACJ,GAAG,EACH,KAAK,EACL,GAAG,EACH,KAAK,EACL,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAIvF,SAAS,qBAAqB,CAAC,MAA2B,EAAE,KAA2B;IACrF,MAAM,KAAK,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IAC9D,KAAK,CAAC,GAAG,GAAG,mBAAmB,KAAK,CAAC,iBAAiB,GAAG,KAAK,EAAE,CAAC,CAAC;IAClE,KAAK,CAAC,GAAG,GAAG,sBAAsB,KAAK,CAAC,aAAa,GAAG,KAAK,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAgB;IACvC,IAAI,EAAE,gCAAgC;IACtC,WAAW,EAAE,qEAAqE;IAClF,KAAK,EAAE,CAAC,mFAAmF,CAAC;IAC5F,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,kDAAkD,EAAE,WAAW,EAAE,OAAO,EAAE;QAC5G;YACE,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,yFAAyF;YACtG,WAAW,EAAE,OAAO;SACrB;QACD,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,uDAAuD,EAAE,WAAW,EAAE,QAAQ,EAAE;QAClH,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,uCAAuC,EAAE,WAAW,EAAE,QAAQ,EAAE;QACvG;YACE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,0EAA0E;YACvF,WAAW,EAAE,OAAO;SACrB;QACD,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,4CAA4C,EAAE,WAAW,EAAE,QAAQ,EAAE;QAClG;YACE,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,mEAAmE;YAChF,WAAW,EAAE,QAAQ;SACtB;QACD,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,kCAAkC,EAAE,WAAW,EAAE,QAAQ,EAAE;QAC7F,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,0BAA0B,EAAE,WAAW,EAAE,YAAY,EAAE;QACrF,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yBAAyB,EAAE;QAC3D,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE;KACpE;IACD,QAAQ,EAAE;QACR,0FAA0F;QAC1F,oHAAoH;QACpH,sIAAsI;QACtI,yGAAyG;KAC1G;CACF,CAAC;AAmBF,SAAS,iBAAiB,CAAC,IAAc;IACvC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC;QAC9C,IAAI;QACJ,OAAO,EAAE;YACP,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;SACtC;QACD,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IAE/B,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,WAAW,CAAC,GAAG,GAAG,iFAAiF,KAAK,EAAE,CAAC,CAAC;QAC5G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,SAA+B,CAAC;IAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,WAAW,CAAC,GAAG,GAAG,gCAAgC,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,gBAAgB,CAAC,IAAI,IAAI,EAAE,CAAC;QACjE,WAAW,CAAC,GAAG,GAAG,0DAA0D,KAAK,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;QACvD,WAAW,CAAC,GAAG,GAAG,gDAAgD,KAAK,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,SAA6B,CAAC;IAClC,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,SAAS,GAAG,MAAM,CAAC,SAAmB,CAAC;IACzC,CAAC;SAAM,IAAI,MAAM,CAAC,gBAAgB,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAW,CAAC,CAAC;QACzD,SAAS,GAAG,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,eAAmC,CAAC;IACxC,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,eAAe,GAAG,MAAM,CAAC,IAAc,CAAC;IAC1C,CAAC;SAAM,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAW,CAAC,CAAC;QACpD,eAAe,GAAG,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAA0B,CAAC;IAClD,IAAI,IAAsC,CAAC;IAC3C,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YAClD,WAAW,CAAC,GAAG,GAAG,8CAA8C,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,GAAG,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,SAA+B,CAAC;IAC5D,MAAM,YAAY,GAAG,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE9E,OAAO;QACL,aAAa;QACb,OAAO;QACP,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC;QACnC,YAAY;QACZ,SAAS;QACT,SAAS,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,IAAI;QACJ,eAAe;QACf,aAAa,EAAE,MAAM,CAAC,KAA2B;QACjD,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,CAAC,GAAG,GAAG,GAAG,KAAK,eAAe,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAYD,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,MAAM,cAAc,GAAG,mBAAmB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACjE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,WAAW,CAAC,GAAG,GAAG,uBAAuB,MAAM,CAAC,aAAa,GAAG,KAAK,EAAE,CAAC,CAAC;QACzE,WAAW,CAAC,GAAG,GAAG,mDAAmD,KAAK,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAa,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAEjE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7E,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;aAClD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACrB,WAAW,CAAC,GAAG,GAAG,mBAAmB,MAAM,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;QAChE,WAAW,CAAC,GAAG,GAAG,2BAA2B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,GAA4B,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/E,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,WAAW,CACT,GAAG,GAAG,UAAU,MAAM,CAAC,OAAO,cAAc,WAAW,CAAC,IAAI,oCAAoC,KAAK,EAAE,CACxG,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;AACrD,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,YAAoB,EAAE,OAAe;IAC7D,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,YAAY,EAAE,GAAG,YAAY,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC;AAQD,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,CAAC,GAAG,GAAG,GAAG,IAAI,wBAAwB,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,WAAW,CAAC,GAAG,GAAG,GAAG,IAAI,wBAAwB,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,cAAc,CACrB,SAAiB,EACjB,YAAoB,EACpB,MAAyB,EACzB,YAAgC;IAEhC,eAAe,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,YAAY,IAAI,IAAI;QAAE,eAAe,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IACvE,IAAI,eAAe,GAAa,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,eAAe,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,WAAW,CAAC,GAAG,GAAG,2CAA2C,SAAS,GAAG,KAAK,EAAE,CAAC,CAAC;YAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,WAAW,CACT,GAAG,GAAG,4BAA4B,SAAS,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,CAC3G,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,WAAW,CAAC,GAAG,GAAG,+CAA+C,SAAS,GAAG,KAAK,EAAE,CAAC,CAAC;QACtF,WAAW,CAAC,GAAG,GAAG,iEAAiE,KAAK,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAClE,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QAC1D,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC9B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,kBAAkB,OAAO,GAAG,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,IAAI,UAAU,EAAE,CAAC;gBACf,WAAW,CAAC,GAAG,MAAM,2BAA2B,OAAO,iCAAiC,KAAK,EAAE,CAAC,CAAC;gBACjG,SAAS;YACX,CAAC;YACD,WAAW,CAAC,GAAG,GAAG,kBAAkB,IAAI,OAAO,OAAO,sBAAsB,KAAK,EAAE,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,WAAW,CAAC,GAAG,GAAG,2BAA2B,KAAK,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,WAAW,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E,SAAS,sBAAsB,CAAC,MAAkB;IAChD,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI;QAAE,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IAEzE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,CAAC,GAAG,MAAM,6CAA6C,SAAS,wBAAwB,KAAK,EAAE,CAAC,CAAC;QAC5G,OAAO,gCAAgC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,YAAY,CACnB,UAA8B,EAC9B,eAAuB,EACvB,OAAe,EACf,SAA6B;IAE7B,OAAO;QACL,GAAG,oBAAoB,CAAC,UAAU,CAAC;QACnC,eAAe;QACf,KAAK,EAAE,CAAC;QACR,SAAS,EAAE,CAAC;QACZ,mBAAmB,EAAE,SAAS,IAAI,IAAI;QACtC,iBAAiB,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACrD,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,SAAS,WAAW,CAAC,UAA8B,EAAE,QAA0C;IAC7F,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,QAAQ,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC;IACxD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,WAAW,IAAI,aAAa,CAAY,EAAE,CAAC;AACvF,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE9E,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAEvG,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,qBAAqB,CAAC,cAAc,CAAC,EAAE,SAAS,CAAC,CAAC;IAEvG,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAEpF,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC;IAE3D,MAAM,cAAc,GAAG,4BAA4B,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAE1E,WAAW,CAAC,GAAG,IAAI,GAAG,IAAI,kBAAkB,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;IAC/F,WAAW,CAAC,GAAG,GAAG,cAAc,MAAM,CAAC,aAAa,GAAG,KAAK,EAAE,CAAC,CAAC;IAChE,WAAW,CAAC,GAAG,GAAG,SAAS,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,SAAS;QAClB,WAAW,CAAC,GAAG,GAAG,cAAc,MAAM,CAAC,SAAS,CAAC,MAAM,sCAAsC,KAAK,EAAE,CAAC,CAAC;IACxG,WAAW,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,cAAc,CAAC;YAC7B,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,IAAI;YACJ,mBAAmB,EAAE,yBAAyB,EAAE;YAChD,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5G,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,QAAQ,CAAC,iBAAiB,IAAI,IAAI;gBACpC,CAAC,CAAC,EAAE,uBAAuB,EAAE,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,EAAE;gBAChF,CAAC,CAAC,EAAE,CAAC;YACP,QAAQ,EAAE,4BAA4B,CAAC,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,GAAG,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QAC1G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,8DAA8D;IAC9D,kEAAkE;IAClE,MAAM,YAAY,GAChB,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnH,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,eAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gBAAgB,GAAG,IAAI,CAAC;QACxB,eAAe,GAAG,GAAG,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,IAAI,YAAY;YAAE,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC3D,MAAM,OAAO;aACV,KAAK,EAAE;aACP,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CACtB,WAAW,CAAC,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CACvG,CAAC;QACJ,IAAI,YAAY;YAAE,uBAAuB,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,WAAW,CACT,GAAG,GAAG,4BAA4B,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,CACjI,CAAC;QACF,IAAI,YAAY;YAAE,qBAAqB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,6FAA6F;IAC7F,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACzD,aAAa,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAEjD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpD,WAAW,GAAG,YAAY;YACxB,CAAC,CAAC,WAAW,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClG,CAAC,CAAC,yBAAyB,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;YACzC,WAAW,GAAG,4BAA4B,GAAG,CAAC,OAAO,GAAG,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,WAAW,CAAC,EAAE,CAAC,CAAC;IAChB,WAAW,CAAC,GAAG,IAAI,GAAG,KAAK,SAAS,KAAK,EAAE,CAAC,CAAC;IAC7C,WAAW,CAAC,WAAW,CAAC,CAAC;IACzB,WAAW,CAAC,EAAE,CAAC,CAAC;IAChB,WAAW,CAAC,GAAG,GAAG,cAAc,MAAM,CAAC,aAAa,GAAG,KAAK,EAAE,CAAC,CAAC;IAChE,WAAW,CAAC,GAAG,GAAG,iBAAiB,UAAU,GAAG,KAAK,EAAE,CAAC,CAAC;IACzD,IAAI,YAAY;QAAE,qBAAqB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AAClE,CAAC"}

package/dist/workflow/run-state-debug-capture.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Debug-capture helpers for `ironcurtain workflow run-state`.
+ *
+ * Two artifacts are extracted into the run's `--output` dir so each test
+ * run owns a self-contained record of what the in-container agent saw and
+ * what the container reported.
+ *
+ * Lifecycle notes that aren't obvious from the code:
+ *   - `captureContainerLogs` MUST run BEFORE `session.close()`: the
+ *     container is force-removed on close, after which `docker logs`
+ *     returns "no such container".
+ *   - `captureConversationLogs` runs AFTER `session.close()`: the
+ *     bundle teardown only removes the runtime sockets dir, not the
+ *     bind-mounted `claude-state/` tree under the session dir.
+ *
+ * Both are best-effort: missing/empty inputs and Docker-side failures are
+ * logged to stderr but never propagated. The agent run's success/failure
+ * is reported through the existing `agent-output.md` + verdict path.
+ *
+ * This module is run-state-only by design. Production workflow runs go
+ * through the orchestrator, which has its own diagnostics; bind-mounting
+ * agent state into long-lived workflow runs would cross privacy/state
+ * boundaries.
+ */
+import { type BundleId } from '../session/types.js';
+export interface RunStateCapturePaths {
+    readonly containerLogsPath: string;
+    readonly claudeLogsDir: string;
+    readonly claudeProjectsSrc: string;
+    readonly containerName: string;
+}
+export declare function resolveCapturePaths(bundleId: BundleId, outputDir: string): RunStateCapturePaths;
+/**
+ * Streams `docker logs <container>` (combined stdout/stderr) to the
+ * capture path. Streaming avoids the 10 MB `maxBuffer` data-loss failure
+ * mode of `execFile` -- crashlooping/OOM containers, the very ones we
+ * want to diagnose, are exactly the ones likely to overflow.
+ */
+export declare function captureContainerLogs(paths: RunStateCapturePaths): Promise<void>;
+export declare function captureConversationLogs(paths: RunStateCapturePaths): void;

package/dist/workflow/run-state-debug-capture.js

@@ -0,0 +1,101 @@
+/**
+ * Debug-capture helpers for `ironcurtain workflow run-state`.
+ *
+ * Two artifacts are extracted into the run's `--output` dir so each test
+ * run owns a self-contained record of what the in-container agent saw and
+ * what the container reported.
+ *
+ * Lifecycle notes that aren't obvious from the code:
+ *   - `captureContainerLogs` MUST run BEFORE `session.close()`: the
+ *     container is force-removed on close, after which `docker logs`
+ *     returns "no such container".
+ *   - `captureConversationLogs` runs AFTER `session.close()`: the
+ *     bundle teardown only removes the runtime sockets dir, not the
+ *     bind-mounted `claude-state/` tree under the session dir.
+ *
+ * Both are best-effort: missing/empty inputs and Docker-side failures are
+ * logged to stderr but never propagated. The agent run's success/failure
+ * is reported through the existing `agent-output.md` + verdict path.
+ *
+ * This module is run-state-only by design. Production workflow runs go
+ * through the orchestrator, which has its own diagnostics; bind-mounting
+ * agent state into long-lived workflow runs would cross privacy/state
+ * boundaries.
+ */
+import { spawn } from 'node:child_process';
+import { createWriteStream, existsSync, readdirSync, cpSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { getSessionDir } from '../config/paths.js';
+import { getBundleShortId } from '../session/types.js';
+export function resolveCapturePaths(bundleId, outputDir) {
+    const bundleSlug = getBundleShortId(bundleId);
+    return {
+        containerLogsPath: resolve(outputDir, 'container-logs.txt'),
+        claudeLogsDir: resolve(outputDir, 'claude-session-logs'),
+        claudeProjectsSrc: resolve(getSessionDir(bundleId), 'claude-state', 'projects'),
+        containerName: `ironcurtain-${bundleSlug}`,
+    };
+}
+/**
+ * Streams `docker logs <container>` (combined stdout/stderr) to the
+ * capture path. Streaming avoids the 10 MB `maxBuffer` data-loss failure
+ * mode of `execFile` -- crashlooping/OOM containers, the very ones we
+ * want to diagnose, are exactly the ones likely to overflow.
+ */
+export async function captureContainerLogs(paths) {
+    const out = createWriteStream(paths.containerLogsPath);
+    const proc = spawn('docker', ['logs', paths.containerName], {
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    proc.stdout.pipe(out, { end: false });
+    proc.stderr.pipe(out, { end: false });
+    await new Promise((res) => {
+        let resolved = false;
+        const done = () => {
+            if (resolved)
+                return;
+            resolved = true;
+            res();
+        };
+        // Resolve only after the file write stream has flushed to disk.
+        // `out.on('finish')` fires after `out.end()` has drained the buffer.
+        out.on('finish', done);
+        out.on('error', (err) => {
+            process.stderr.write(`[run-state] container-log write failed: ${err.message}\n`);
+            proc.kill();
+            done();
+        });
+        // `close` (vs. `exit`) waits for the child's stdio to fully drain,
+        // so any data still piping into `out` has been written by the time
+        // we call `out.end()`. Resolving on `exit` could truncate large logs.
+        proc.on('close', (code, signal) => {
+            if (code !== 0) {
+                process.stderr.write(`[run-state] docker logs ${paths.containerName} exited ${code ?? signal}\n`);
+            }
+            out.end();
+        });
+        proc.on('error', (err) => {
+            process.stderr.write(`[run-state] docker logs failed: ${err.message}\n`);
+            out.end();
+        });
+    });
+}
+export function captureConversationLogs(paths) {
+    if (!existsSync(paths.claudeProjectsSrc))
+        return;
+    try {
+        // Skip empty source dir: an empty `claude-session-logs/` would
+        // misleadingly suggest the agent ran silently when in reality it
+        // crashed before writing the first JSONL frame.
+        if (readdirSync(paths.claudeProjectsSrc).length === 0) {
+            process.stderr.write('[run-state] no conversation log captured (claude-state/projects empty -- agent likely crashed before first message)\n');
+            return;
+        }
+        cpSync(paths.claudeProjectsSrc, paths.claudeLogsDir, { recursive: true });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`[run-state] conversation-log capture failed: ${message}\n`);
+    }
+}
+//# sourceMappingURL=run-state-debug-capture.js.map

package/dist/workflow/run-state-debug-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-state-debug-capture.js","sourceRoot":"","sources":["../../src/workflow/run-state-debug-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAiB,MAAM,qBAAqB,CAAC;AAStE,MAAM,UAAU,mBAAmB,CAAC,QAAkB,EAAE,SAAiB;IACvE,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO;QACL,iBAAiB,EAAE,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC;QAC3D,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,qBAAqB,CAAC;QACxD,iBAAiB,EAAE,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,UAAU,CAAC;QAC/E,aAAa,EAAE,eAAe,UAAU,EAAE;KAC3C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAA2B;IACpE,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;QAC1D,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACtC,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE;QAC9B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,GAAG,EAAE,CAAC;QACR,CAAC,CAAC;QACF,gEAAgE;QAChE,qEAAqE;QACrE,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACjF,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,mEAAmE;QACnE,mEAAmE;QACnE,sEAAsE;QACtE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,KAAK,CAAC,aAAa,WAAW,IAAI,IAAI,MAAM,IAAI,CAAC,CAAC;YACpG,CAAC;YACD,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACzE,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAA2B;IACjE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAAE,OAAO;IACjD,IAAI,CAAC;QACH,+DAA+D;QAC/D,iEAAiE;QACjE,gDAAgD;QAChD,IAAI,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uHAAuH,CACxH,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,OAAO,IAAI,CAAC,CAAC;IACpF,CAAC;AACH,CAAC"}

package/dist/workflow/status-parser.d.ts

@@ -0,0 +1,68 @@
+import type { AgentOutput, AgentTransitionDefinition } from './types.js';
+export declare class AgentStatusParseError extends Error {
+    readonly rawBlock: string;
+    constructor(message: string, rawBlock: string);
+}
+/**
+ * Extracts and parses an agent_status YAML block from response text.
+ *
+ * @returns parsed AgentOutput, or undefined if no status block found
+ * @throws {AgentStatusParseError} if block found but malformed
+ */
+export declare function parseAgentStatus(responseText: string): AgentOutput | undefined;
+/**
+ * Removes the fenced agent_status block from the end of the response text.
+ * The status block is already parsed into AgentOutput by `parseAgentStatus`,
+ * so passing it as raw text to the next agent is redundant noise.
+ *
+ * @returns text with the trailing status block removed and whitespace trimmed
+ */
+export declare function stripStatusBlock(responseText: string): string;
+/** Minimal status instructions for unconditional transitions (no guards, no when clauses). */
+export declare const MINIMAL_STATUS_INSTRUCTIONS: string;
+/**
+ * Extracts verdict values from `when` clauses that match on the `verdict` key.
+ * Returns deduplicated values in definition order.
+ */
+export declare function extractVerdictValues(transitions: readonly AgentTransitionDefinition[]): string[];
+/**
+ * Builds context-sensitive status block instructions for states with
+ * conditional transitions (`when` clauses or `guard` functions).
+ *
+ * Two modes:
+ * - **Verdict-routed**: transitions have `when` clauses keyed on verdict.
+ *   Instructions list the valid verdict values and explain they control routing.
+ * - **Guard-only**: transitions use only `guard` functions (no `when` clauses).
+ *   Verdict is informational — instructions make this clear to avoid confusion.
+ *
+ * @param transitions - the state's transition definitions
+ * @param guardLabels - human-readable labels for named guard conditions
+ */
+export declare function buildConditionalStatusInstructions(transitions: readonly AgentTransitionDefinition[], guardLabels: Readonly<Record<string, string>>): string;
+/**
+ * Returns the re-prompt message when the agent's response is missing or
+ * malformed. Passing `parseError` switches the wording to the malformed-block
+ * form and includes the validation detail. Passing `statusInstructions`
+ * overrides the default template (e.g. to list state-specific verdicts).
+ */
+export declare function buildStatusBlockReprompt(statusInstructions?: string, parseError?: AgentStatusParseError): string;
+/**
+ * Determines whether a state's transitions require verdict validation
+ * and, if so, returns the set of valid verdict strings.
+ *
+ * Validation is skipped (returns `undefined`) when:
+ * - No transitions have `when` clauses (pure guard-based or unconditional)
+ * - Any transition is unconditional (no `guard` and no `when`), meaning
+ *   it acts as a fallthrough that accepts any verdict
+ *
+ * @returns set of valid verdict strings, or undefined if validation should be skipped
+ */
+export declare function getValidVerdicts(transitions: readonly AgentTransitionDefinition[]): ReadonlySet<string> | undefined;
+/**
+ * Builds the re-prompt message when the agent's verdict doesn't match
+ * any valid transition for the current state.
+ *
+ * @param invalidVerdict - the verdict the agent returned
+ * @param transitions - the state's transition definitions (valid verdicts and targets derived from `when` clauses)
+ */
+export declare function buildInvalidVerdictReprompt(invalidVerdict: string, transitions: readonly AgentTransitionDefinition[]): string;