@quickchatai/quickreview 0.0.0-stage → 1.1.0

package/dist/src/ipc/server.js

@@ -0,0 +1,312 @@
+// The daemon's end of the worker socket.
+//
+// Listens on <state>/run/qcr.sock: socket 0600, directory 0700, daemon uid (0660
+// and 0710 where the model's tools run as another uid of the daemon's group, so
+// its shims can dial in; the capability authenticates them). A
+// connection opens with a hello that names a command and presents its
+// capability; every later message is checked again against the daemon's own
+// view of the command, because a capability alone authenticates only WHO is
+// asking. A request is served only when
+//   - the capability is still live (a revoked one closed the connection),
+//   - the command has an active session_commands row,
+//   - the request's generation is the session's CURRENT generation, and
+//   - the PR it names, if any, is the command's PR.
+// The generation is a fence and nothing more: guessing or replaying one
+// authenticates nothing. Handlers get the command's PR, lease and may_post
+// and decide the rest (the post ops check them).
+import { chmodSync, chownSync, lstatSync, unlinkSync } from "node:fs";
+import net from "node:net";
+import { dirname } from "node:path";
+import { ensurePrivateDir } from "./capability.js";
+import { IPC_VERSION, IpcError, LineDecoder, MAX_LINE_BYTES, decodeMessage, encodeMessage, } from "./protocol.js";
+/** chgrp to the tool gid the entrypoint named (QCR_TOOL_GID), owner kept. */
+function shareWithToolGid(paths) {
+    const gid = process.env["QCR_TOOL_GID"];
+    if (gid === undefined || !/^[1-9][0-9]*$/.test(gid) || typeof process.getuid !== "function")
+        return;
+    for (const p of paths)
+        chownSync(p, process.getuid(), Number(gid));
+}
+export class IpcServer {
+    opts;
+    server = null;
+    conns = new Set();
+    unsubscribe = null;
+    ops;
+    constructor(opts) {
+        this.opts = opts;
+        this.ops = { ...opts.ops };
+    }
+    /** Register an op; the post ops add `post.review` and friends this way. */
+    register(op, handler) {
+        this.ops[op] = handler;
+    }
+    async start() {
+        const { socketPath } = this.opts;
+        if (Buffer.byteLength(socketPath) > 100)
+            throw new Error(`socket path is too long for a unix socket: ${socketPath}`);
+        const group = this.opts.groupAccess === true;
+        ensurePrivateDir(dirname(socketPath), { searchable: group });
+        await clearStaleSocket(socketPath);
+        const server = net.createServer((s) => this.accept(s));
+        await new Promise((resolve, reject) => {
+            server.once("error", reject);
+            server.listen(socketPath, () => {
+                server.off("error", reject);
+                resolve();
+            });
+        });
+        chmodSync(socketPath, group ? 0o660 : 0o600);
+        // The tools run in a gid of their own: the run dir and the socket
+        // are handed to it, whatever group they were made in.
+        if (group)
+            shareWithToolGid([dirname(socketPath), socketPath]);
+        this.server = server;
+        this.unsubscribe = this.opts.capabilities.onRevoke((id) => this.dropCommand(id));
+    }
+    async stop() {
+        this.unsubscribe?.();
+        this.unsubscribe = null;
+        for (const c of [...this.conns])
+            this.close(c);
+        const server = this.server;
+        this.server = null;
+        if (server)
+            await new Promise((resolve) => server.close(() => resolve()));
+        try {
+            unlinkSync(this.opts.socketPath);
+        }
+        catch {
+            /* already gone */
+        }
+    }
+    /** Send a control message (steer, followUp, abort) to a command's host(s). */
+    push(commandId, kind, body) {
+        let n = 0;
+        for (const c of this.conns) {
+            if (c.hello?.commandId !== commandId || c.hello.role !== "worker")
+                continue;
+            this.send(c, { v: IPC_VERSION, type: "control", kind, body });
+            n++;
+        }
+        return n;
+    }
+    connections() {
+        return this.conns.size;
+    }
+    accept(socket) {
+        const conn = {
+            socket,
+            decoder: new LineDecoder(this.opts.maxLineBytes ?? MAX_LINE_BYTES),
+            hello: null,
+            closed: false,
+        };
+        this.conns.add(conn);
+        const timer = setTimeout(() => {
+            if (conn.hello === null)
+                this.refuse(conn, new IpcError("no_hello", "no hello in time"));
+        }, this.opts.helloTimeoutMs ?? 5_000);
+        timer.unref();
+        socket.on("data", (chunk) => {
+            let lines;
+            try {
+                lines = conn.decoder.push(chunk);
+            }
+            catch (e) {
+                this.refuse(conn, e);
+                return;
+            }
+            for (const line of lines) {
+                if (conn.closed)
+                    return;
+                this.onLine(conn, line);
+            }
+        });
+        socket.on("error", () => this.close(conn));
+        socket.on("close", () => {
+            clearTimeout(timer);
+            this.close(conn);
+        });
+    }
+    onLine(conn, line) {
+        let msg;
+        try {
+            msg = decodeMessage(line);
+        }
+        catch (e) {
+            this.refuse(conn, e);
+            return;
+        }
+        if (conn.hello === null) {
+            if (msg.type !== "hello") {
+                this.refuse(conn, new IpcError("no_hello", "the first message must be a hello"));
+                return;
+            }
+            this.onHello(conn, msg);
+            return;
+        }
+        if (msg.type === "request") {
+            void this.onRequest(conn, msg);
+        }
+        else if (msg.type === "event") {
+            this.onEvent(conn, msg.kind, msg.generation, msg.body);
+        }
+        else {
+            this.refuse(conn, new IpcError("bad_request", `a client may not send ${msg.type}`));
+        }
+    }
+    onHello(conn, hello) {
+        // Unknown command and wrong capability read the same: no oracle.
+        if (!this.opts.capabilities.verify(hello.command_id, hello.capability)) {
+            this.refuse(conn, new IpcError("unauthorized", "the capability is not accepted"));
+            return;
+        }
+        const state = this.opts.commands(hello.command_id);
+        if (state === null || !state.active) {
+            this.refuse(conn, new IpcError("command_inactive", "the command is not active"));
+            return;
+        }
+        conn.hello = { commandId: hello.command_id, role: hello.role, capability: hello.capability };
+        this.send(conn, {
+            v: IPC_VERSION,
+            type: "hello_ok",
+            command_id: hello.command_id,
+            pr: state.pr,
+            generation: state.generation,
+        });
+    }
+    /** The checks every request and event pass; throws a typed error. */
+    authorize(conn, generation, pr) {
+        const hello = conn.hello;
+        if (!this.opts.capabilities.verify(hello.commandId, hello.capability))
+            throw new IpcError("unauthorized", "the capability is no longer live");
+        const state = this.opts.commands(hello.commandId);
+        if (state === null || !state.active)
+            throw new IpcError("command_inactive", "the command is not active");
+        if (generation !== state.generation)
+            throw new IpcError("stale_generation", "the request is for a past generation");
+        const ctx = {
+            commandId: hello.commandId,
+            role: hello.role,
+            pr: state.pr,
+            generation: state.generation,
+            mayPost: state.may_post,
+            answer: state.answer === true,
+            lease: state.lease,
+            requirePr(n) {
+                if (n !== state.pr)
+                    throw new IpcError("wrong_pr", "the request names another PR");
+            },
+        };
+        if (pr !== undefined)
+            ctx.requirePr(pr);
+        return ctx;
+    }
+    async onRequest(conn, req) {
+        try {
+            const ctx = this.authorize(conn, req.generation, req.pr);
+            const op = Object.hasOwn(this.ops, req.op) ? this.ops[req.op] : undefined;
+            if (op === undefined)
+                throw new IpcError("unknown_op", `no such op: ${req.op}`);
+            if (!op.roles.includes(ctx.role))
+                throw new IpcError("forbidden", `role ${ctx.role} may not call ${req.op}`);
+            const body = await op.handle(ctx, req.body);
+            this.send(conn, { v: IPC_VERSION, type: "response", id: req.id, ok: true, body });
+        }
+        catch (e) {
+            this.send(conn, {
+                v: IPC_VERSION,
+                type: "response",
+                id: req.id,
+                ok: false,
+                error: toWireError(e, this.opts.log),
+            });
+        }
+    }
+    onEvent(conn, kind, generation, body) {
+        try {
+            const ctx = this.authorize(conn, generation);
+            if (ctx.role !== "worker")
+                throw new IpcError("forbidden", "only a worker reports events");
+            this.opts.onEvent?.(ctx, kind, body);
+        }
+        catch (e) {
+            // An event has no id to answer: say so unsolicited, and drop it.
+            this.send(conn, { v: IPC_VERSION, type: "error", error: toWireError(e, this.opts.log) });
+        }
+    }
+    send(conn, msg) {
+        if (conn.closed)
+            return;
+        try {
+            conn.socket.write(encodeMessage(msg, this.opts.maxResponseBytes ?? this.opts.maxLineBytes));
+        }
+        catch (e) {
+            // A response too large to send: the caller gets a typed error instead.
+            if (msg.type === "response" && e instanceof IpcError)
+                conn.socket.write(encodeMessage({
+                    v: IPC_VERSION,
+                    type: "response",
+                    id: msg.id,
+                    ok: false,
+                    error: { code: e.code, message: e.message },
+                }));
+        }
+    }
+    /** A protocol-level failure: say what went wrong, then hang up. */
+    refuse(conn, e) {
+        if (conn.closed)
+            return;
+        try {
+            conn.socket.write(encodeMessage({ v: IPC_VERSION, type: "error", error: toWireError(e, this.opts.log) }), () => conn.socket.destroy());
+        }
+        catch {
+            conn.socket.destroy();
+        }
+        this.close(conn);
+    }
+    close(conn) {
+        if (conn.closed)
+            return;
+        conn.closed = true;
+        this.conns.delete(conn);
+        conn.socket.destroy();
+    }
+    dropCommand(commandId) {
+        for (const c of [...this.conns])
+            if (c.hello?.commandId === commandId)
+                this.close(c);
+    }
+}
+function toWireError(e, log) {
+    if (e instanceof IpcError)
+        return { code: e.code, message: e.message };
+    // Anything else is a bug in a handler: log it, tell the caller nothing more.
+    log?.(`ipc handler failed: ${e instanceof Error ? (e.stack ?? e.message) : String(e)}`);
+    return { code: "internal", message: "internal error" };
+}
+/** A leftover socket from a daemon that died is removed; one that answers is a
+ * live daemon, and starting a second would steal its callers. */
+async function clearStaleSocket(path) {
+    let st;
+    try {
+        st = lstatSync(path);
+    }
+    catch {
+        return; // nothing there
+    }
+    if (!st.isSocket())
+        throw new Error(`${path} exists and is not a socket`);
+    const live = await new Promise((resolve) => {
+        const probe = net.connect(path);
+        probe.once("connect", () => {
+            probe.destroy();
+            resolve(true);
+        });
+        probe.once("error", () => resolve(false));
+    });
+    if (live)
+        throw new Error(`another daemon is already listening on ${path}`);
+    unlinkSync(path);
+}
+//# sourceMappingURL=server.js.map

package/dist/src/ipc/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/ipc/server.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,+DAA+D;AAC/D,sEAAsE;AACtE,4EAA4E;AAC5E,4EAA4E;AAC5E,wCAAwC;AACxC,0EAA0E;AAC1E,sDAAsD;AACtD,wEAAwE;AACxE,oDAAoD;AACpD,wEAAwE;AACxE,2EAA2E;AAC3E,iDAAiD;AACjD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAwB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EASL,WAAW,EACX,QAAQ,EACR,WAAW,EACX,cAAc,EACd,aAAa,EACb,aAAa,GACd,MAAM,eAAe,CAAC;AAqDvB,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,KAAwB;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;QACzF,OAAO;IACT,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,OAAO,SAAS;IAMS;IALrB,MAAM,GAAsB,IAAI,CAAC;IACxB,KAAK,GAAG,IAAI,GAAG,EAAQ,CAAC;IACjC,WAAW,GAAwB,IAAI,CAAC;IACxC,GAAG,CAA4B;IAEvC,YAA6B,IAAsB;QAAtB,SAAI,GAAJ,IAAI,CAAkB;QACjD,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED,2EAA2E;IAC3E,QAAQ,CAAC,EAAU,EAAE,OAAkB;QACrC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACjC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,GAAG;YACrC,MAAM,IAAI,KAAK,CAAC,8CAA8C,UAAU,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC;QAC7C,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE;gBAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC5B,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC7C,kEAAkE;QAClE,sDAAsD;QACtD,IAAI,KAAK;YAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,MAAM;YAAE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,SAAiB,EAAE,IAAY,EAAE,IAAc;QAClD,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAC5E,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,CAAC,EAAE,CAAC;QACN,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAEO,MAAM,CAAC,MAAkB;QAC/B,MAAM,IAAI,GAAS;YACjB,MAAM;YACN,OAAO,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC;YAClE,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,KAAK;SACd,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC3F,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC;QACtC,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,KAAe,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,IAAU,EAAE,IAAY;QACrC,IAAI,GAAe,CAAC;QACpB,IAAI,CAAC;YACH,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC,CAAC;gBACjF,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,aAAa,EAAE,yBAAyB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,IAAU,EAAE,KAAmB;QAC7C,iEAAiE;QACjE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,kBAAkB,EAAE,2BAA2B,CAAC,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QAC7F,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IAC7D,SAAS,CAAC,IAAU,EAAE,UAAkB,EAAE,EAAW;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;YACnE,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;YACjC,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,2BAA2B,CAAC,CAAC;QACtE,IAAI,UAAU,KAAK,KAAK,CAAC,UAAU;YACjC,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,sCAAsC,CAAC,CAAC;QACjF,MAAM,GAAG,GAAmB;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,KAAK,CAAC,QAAQ;YACvB,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI;YAC7B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,CAAC,CAAU;gBAClB,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE;oBAAE,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;YACrF,CAAC;SACF,CAAC;QACF,IAAI,EAAE,KAAK,SAAS;YAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAU,EAAE,GAAmB;QACrD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACzD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,IAAI,EAAE,KAAK,SAAS;gBAAE,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,eAAe,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC9B,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,QAAQ,GAAG,CAAC,IAAI,iBAAiB,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBACd,CAAC,EAAE,WAAW;gBACd,IAAI,EAAE,UAAU;gBAChB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,IAAU,EAAE,IAAkB,EAAE,UAAkB,EAAE,IAAa;QAC/E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;YAC3F,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,iEAAiE;YACjE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,IAAU,EAAE,GAAe;QACtC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,uEAAuE;YACvE,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,YAAY,QAAQ;gBAClD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,aAAa,CAAC;oBACZ,CAAC,EAAE,WAAW;oBACd,IAAI,EAAE,UAAU;oBAChB,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;iBAC5C,CAAC,CACH,CAAC;QACN,CAAC;IACH,CAAC;IAED,mEAAmE;IAC3D,MAAM,CAAC,IAAU,EAAE,CAAU;QACnC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,aAAa,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EACtF,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAC5B,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,IAAU;QACtB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAEO,WAAW,CAAC,SAAiB;QACnC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;CACF;AAED,SAAS,WAAW,CAAC,CAAU,EAAE,GAA2B;IAC1D,IAAI,CAAC,YAAY,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACvE,6EAA6E;IAC7E,GAAG,EAAE,CAAC,uBAAuB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AACzD,CAAC;AAED;iEACiE;AACjE,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,gBAAgB;IAC1B,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YACzB,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,IAAI,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;IAC5E,UAAU,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC"}

package/dist/src/ipc/workerspec.js

@@ -0,0 +1,148 @@
+// What a round worker asks the daemon for over the socket, and what the daemon
+// answers. Neutral, like the rest of src/ipc/: shapes and a validator,
+// no engine, no pi, no state store.
+//
+// A worker never opens state.db. Everything it needs to know about its command
+// arrives through `worker.spec`, and the held wakes through `wakes.take` and
+// `wakes.ack`; everything it records goes back as events (protocol.ts). The
+// daemon side of the three ops is the WorkerSupervisor's, serving the
+// wakes through HeldWakeHandoff (src/wakes.ts); the worker treats a daemon
+// that does not know `wakes.take` as one holding no wakes.
+import { join } from "node:path";
+import { IpcError } from "./protocol.js";
+export const WORKER_SPEC_OP = "worker.spec";
+export const WAKES_TAKE_OP = "wakes.take";
+export const WAKES_ACK_OP = "wakes.ack";
+export const WORKER_MODES = ["round", "answer"];
+function isRecord(x) {
+    return typeof x === "object" && x !== null && !Array.isArray(x);
+}
+function bad(why) {
+    throw new IpcError("bad_request", `worker spec: ${why}`);
+}
+function str(o, key) {
+    const x = o[key];
+    if (typeof x !== "string" || x === "")
+        return bad(`\`${key}\` must be a non-empty string`);
+    return x;
+}
+function abs(o, key) {
+    const x = str(o, key);
+    if (!x.startsWith("/"))
+        return bad(`\`${key}\` must be an absolute path`);
+    return x;
+}
+function nat(o, key) {
+    const x = o[key];
+    if (typeof x !== "number" || !Number.isSafeInteger(x) || x < 0)
+        return bad(`\`${key}\` must be a non-negative integer`);
+    return x;
+}
+/** The daemon's answer to `worker.spec`, checked. Throws a typed `bad_request`:
+ * a worker that cannot trust its spec does nothing. */
+export function parseWorkerSpec(raw) {
+    if (!isRecord(raw))
+        return bad("not an object");
+    const mode = raw["mode"];
+    if (!WORKER_MODES.includes(mode))
+        return bad("`mode` must be round or answer");
+    const session = str(raw, "session");
+    const pr = nat(raw, "pr");
+    if (session !== `pr-${pr}`)
+        return bad("`session` is not pr-<pr>");
+    const sha = str(raw, "payload_sha256");
+    if (!/^[a-f0-9]{64}$/.test(sha))
+        return bad("`payload_sha256` is not a sha256");
+    const envRaw = raw["env"];
+    if (!isRecord(envRaw))
+        return bad("`env` must be an object");
+    const env = {};
+    for (const [k, v] of Object.entries(envRaw)) {
+        if (typeof v !== "string")
+            return bad(`env.${k} must be a string`);
+        env[k] = v;
+    }
+    const round = raw["round_no"];
+    if (round !== null &&
+        round !== undefined &&
+        (!Number.isSafeInteger(round) || round < 0))
+        return bad("`round_no` must be a non-negative integer or null");
+    const wall = nat(raw, "wall_clock_ms");
+    if (wall === 0)
+        return bad("`wall_clock_ms` must be positive");
+    const spec = {
+        mode: mode,
+        command_id: str(raw, "command_id"),
+        pr,
+        session,
+        round_no: round ?? null,
+        payload_path: abs(raw, "payload_path"),
+        payload_sha256: sha,
+        root: abs(raw, "root"),
+        cwd: abs(raw, "cwd"),
+        agent_dir: abs(raw, "agent_dir"),
+        session_dir: abs(raw, "session_dir"),
+        system_prompt_file: abs(raw, "system_prompt_file"),
+        model: str(raw, "model"),
+        env,
+        events_file: abs(raw, "events_file"),
+        stderr_file: abs(raw, "stderr_file"),
+        wall_clock_ms: wall,
+        planned_wave: raw["planned_wave"] === true,
+    };
+    if (raw["cap_usd"] !== undefined) {
+        const cap = raw["cap_usd"];
+        if (typeof cap !== "number" || !Number.isFinite(cap) || cap < 0)
+            return bad("`cap_usd` must be a non-negative number");
+        spec.cap_usd = cap;
+    }
+    if (raw["lens_dir"] !== undefined)
+        spec.lens_dir = abs(raw, "lens_dir");
+    if (raw["compact"] !== undefined) {
+        if (typeof raw["compact"] !== "boolean")
+            return bad("`compact` must be a boolean");
+        spec.compact = raw["compact"];
+    }
+    if (raw["heartbeat_ms"] !== undefined) {
+        const beat = nat(raw, "heartbeat_ms");
+        if (beat === 0)
+            return bad("`heartbeat_ms` must be positive");
+        spec.heartbeat_ms = beat;
+    }
+    if (raw["live_round"] !== undefined)
+        spec.live_round = nat(raw, "live_round");
+    if (raw["may_post"] !== undefined) {
+        if (typeof raw["may_post"] !== "boolean")
+            return bad("`may_post` must be a boolean");
+        spec.may_post = raw["may_post"];
+    }
+    return spec;
+}
+/** The daemon's answer to `wakes.take`, checked. */
+export function parseWakesTaken(raw) {
+    if (!isRecord(raw) || !Array.isArray(raw["batches"]))
+        throw new IpcError("bad_request", "wakes.take: `batches` must be a list");
+    const batches = [];
+    for (const b of raw["batches"]) {
+        if (!isRecord(b))
+            throw new IpcError("bad_request", "wakes.take: a batch is not an object");
+        const id = b["id"];
+        const message = b["message"];
+        if (typeof id !== "string" || !/^[A-Za-z0-9_.:-]{1,128}$/.test(id))
+            throw new IpcError("bad_request", "wakes.take: a batch id has an invalid shape");
+        if (typeof message !== "string" || message.trim() === "")
+            throw new IpcError("bad_request", "wakes.take: a batch has no message");
+        batches.push({ id, message });
+    }
+    return { batches };
+}
+/** The round's pass directory: its task files and its context pack. */
+export function roundPassesDir(spec, round) {
+    return join(spec.root, "state", `pr-${spec.pr}-round-${round}-passes`);
+}
+/** Where this round's lens ledger and lens JSONLs go: the spec's own override, else
+ * state/lens/<session>/r<round>. */
+export function lensDirOf(spec) {
+    return spec.lens_dir ?? join(spec.root, "state", "lens", spec.session, `r${spec.round_no ?? 0}`);
+}
+//# sourceMappingURL=workerspec.js.map

package/dist/src/ipc/workerspec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerspec.js","sourceRoot":"","sources":["../../../src/ipc/workerspec.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,uEAAuE;AACvE,oCAAoC;AACpC,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,sEAAsE;AACtE,2EAA2E;AAC3E,2DAA2D;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC;AAC1C,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC;AAExC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAyEzD,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,gBAAgB,GAAG,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,GAAG,CAAC,CAA0B,EAAE,GAAW;IAClD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,+BAA+B,CAAC,CAAC;IAC3F,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,GAAG,CAAC,CAA0B,EAAE,GAAW;IAClD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,6BAA6B,CAAC,CAAC;IAC1E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,GAAG,CAAC,CAA0B,EAAE,GAAW;IAClD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5D,OAAO,GAAG,CAAC,KAAK,GAAG,mCAAmC,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC;AACX,CAAC;AAED;uDACuD;AACvD,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAkB,CAAC;QAAE,OAAO,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,MAAM,EAAE,EAAE;QAAE,OAAO,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACvC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC7D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACnE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,IACE,KAAK,KAAK,IAAI;QACd,KAAK,KAAK,SAAS;QACnB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,CAAC;QAEvD,OAAO,GAAG,CAAC,mDAAmD,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAe;QACvB,IAAI,EAAE,IAAkB;QACxB,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC;QAClC,EAAE;QACF,OAAO;QACP,QAAQ,EAAG,KAAmC,IAAI,IAAI;QACtD,YAAY,EAAE,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC;QACtC,cAAc,EAAE,GAAG;QACnB,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC;QACtB,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;QACpB,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC;QAChC,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC;QACpC,kBAAkB,EAAE,GAAG,CAAC,GAAG,EAAE,oBAAoB,CAAC;QAClD,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;QACxB,GAAG;QACH,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC;QACpC,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC;QACpC,aAAa,EAAE,IAAI;QACnB,YAAY,EAAE,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI;KAC3C,CAAC;IACF,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;YAC7D,OAAO,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;IACrB,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACxE,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,6BAA6B,CAAC,CAAC;QACnF,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC9D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC9E,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,8BAA8B,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAc,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;QAC5F,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,6CAA6C,CAAC,CAAC;QACnF,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;YACtD,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,cAAc,CAAC,IAAqC,EAAE,KAAa;IACjF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC;AACzE,CAAC;AAED;oCACoC;AACpC,MAAM,UAAU,SAAS,CACvB,IAAoE;IAEpE,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,CAAC;AACnG,CAAC"}