@sanoma-ai/workflows 0.0.0-stage → 0.2.0

package/dist/call.js

@@ -0,0 +1,417 @@
+import { DBOS, DBOSWorkflowConflictError, Error as DBOSErrors } from "@dbos-inc/dbos-sdk";
+import { awaitApproval } from "./approvals.js";
+import { offsetOf } from "./ast.js";
+import { AllMembers, ApprovalRequestSchema, SleepFor, SleepUntil, scriptPath, } from "./define.js";
+import { causes, errorCode, errorInfo, isFinal, keepCode, parseOrThrow, PolicyDeniedError, SanomaError, } from "./errors.js";
+import { currentGroup, entry, skipped, write, writeFailure } from "./ledger.js";
+import { shown } from "./log.js";
+import { isOp } from "./op.js";
+import { callAt, callName } from "./outline.js";
+import { DecisionSchema, policyOpOf } from "./policy.js";
+import { isChangeOp } from "./resource.js";
+import { APPLY_WORKFLOW, approverLabel, errorMessage, fitsOp } from "./shared.js";
+/** DBOS took the run from this execution: it cancelled the run, or another process took it over. */
+const takenByDbos = (err) => causes(err).some((e) => e instanceof DBOSErrors.DBOSWorkflowCancelledError || e instanceof DBOSWorkflowConflictError);
+/**
+ * True for a failure that is not the run's outcome, so the ledger does not record it: DBOS
+ * cancelled the run or another process took it over, or the run's worker is stopping and the
+ * error has none of our codes. `stop()` marks the worker stopped before DBOS shuts down, so from
+ * then on whatever fails without a code (DBOS's "system database has been shut down", pg's
+ * closed pool) is the shutdown, and the run recovered on the next worker records how it ends.
+ * A coded failure then (a driver's final answer, a denial, a rejection) is still the outcome:
+ * DBOS records the run's error and never runs it again, so the ledger records it too. Narrower
+ * than `isRunControlError`: DBOS's other errors (a run that is not deterministic) end the run
+ * for good, and are recorded.
+ */
+export function isInfrastructureError(err, state) {
+    return takenByDbos(err) || (state.stopped && errorCode(err) === undefined);
+}
+/** The value as the ledger records it: each of the operation's `opaque` fields as `"<name>"`. */
+function recorded(op, value) {
+    if (!op.opaque?.length || typeof value !== "object" || value === null || Array.isArray(value))
+        return value;
+    const out = { ...value };
+    for (const name of op.opaque)
+        if (out[name] !== undefined)
+            out[name] = `<${name}>`;
+    return out;
+}
+/** How many times an idempotent operation is tried. */
+const MAX_ATTEMPTS = 3;
+// Matched by name too, since a workflow's schemas may come from another copy of zod.
+const isSchemaError = (err) => err instanceof Error && err.name === "ZodError";
+/**
+ * Whether DBOS should try an idempotent step again: not when the reply failed the output
+ * schema (it would fail again), and not when the driver said the vendor's answer is final
+ * (a `DriverError` with `retryable: false`, such as a 4xx). Read by code and property, never
+ * `instanceof`: the error may come from another copy of this package.
+ */
+function shouldRetry(err) {
+    if (isSchemaError(err))
+        return false;
+    return !(errorCode(err) === "driver_failed" && isFinal(err));
+}
+/*
+ * A run's ctx calls run one at a time, in program order, even when the workflow starts several
+ * at once (Promise.all). Every DBOS call (a step, now, sleep, setEvent, recv) takes the run's
+ * next function id when it starts, and a replay matches each recorded result to a call by that
+ * id. Calls left to run concurrently would take ids in the order their earlier awaits happened
+ * to resolve, which differs between the first execution and a replay that reads results back
+ * from the database, and so would the ledger's `seq` and the approval ids. Queued, each call
+ * starts once the one before it has settled, so the order is the order the workflow made them.
+ */
+function serial(run, call) {
+    // A failure rejects its caller; the calls queued after it still run, since the workflow may
+    // have caught it. Once the workflow body itself has ended, nothing queued may run. The body
+    // awaits only ctx calls, so one macrotask after the call before settles, the body has either
+    // caught the failure and gone on or ended; the rejection alone reaches it in the same
+    // microtask flush that would start this call.
+    const next = run.tail
+        .then(() => new Promise((r) => setImmediate(r)))
+        .then(() => {
+        refuseIfEnded(run);
+        return call();
+    });
+    // Settled either way, and holding nothing: the queue keeps neither the output nor the error.
+    run.tail = next.then(noop, noop);
+    return next;
+}
+const noop = () => { };
+/** Throws once the workflow body has returned or thrown: a call left queued must not run then. */
+function refuseIfEnded(run) {
+    if (run.ended) {
+        throw new SanomaError("run_ended", `run ${run.id} has ended; a call queued behind its failure was not made`, {
+            runId: run.id,
+        });
+    }
+}
+/** The step's name the outline gives a call's node: none for a computed op without one, or an approval's title that is no literal. */
+const named = (node) => ("name" in node ? node.name : undefined);
+/**
+ * The run's `ctx`: the operations and built-ins its workflow `uses`, and nothing else. Every
+ * member that writes a record is placed in the outline where the workflow calls it (`placeCall`)
+ * and goes through the run's queue (`serial`), its records carrying the node and the step's
+ * name; `ctx.now()` only reads the clock, queued, and `ctx.runId` is a value. `ctx.all` alone
+ * skips the queue: it makes no DBOS call or record itself, it only calls its members, whose ctx
+ * calls are queued. Queued, it would hold the queue until its members settled, and their calls,
+ * queued behind it, would never start.
+ */
+export function buildCtx(wf, run) {
+    const uses = wf.uses;
+    /** A member placed where it is called, then `call`ed with its node. A refusal rejects, as a member's failure always has. */
+    const placed = (what, call) => async function member(...args) {
+        return call(placeCall(run, member, what), ...args);
+    };
+    const members = {};
+    for (const op of uses.filter(isOp)) {
+        const vendor = (members[op.vendor] ??= {});
+        const resource = (vendor[op.resource] ??= {});
+        resource[op.name] = placed(op.id, (node, input) => serial(run, () => callOp(run, op.id, input, { node: node.path, name: named(node) ?? op.id })));
+    }
+    members.runId = run.id;
+    members.now = () => serial(run, () => DBOS.now());
+    if (uses.includes("approval")) {
+        members.approval = placed("approval", (node, title, req) => serial(run, () => awaitApproval(run, title, checkApproval(title, req), { node: node.path, name: named(node) ?? title })));
+    }
+    if (uses.includes("sleep")) {
+        members.sleep = placed("sleep", (node, req) => 
+        // The outline names every sleep.
+        serial(run, () => sleep(run, req, { node: node.path, name: named(node) })));
+    }
+    if (uses.includes("all"))
+        members.all = placed("all", (node, list) => all(run, list, node.path));
+    return guarded(members, "ctx", wf.name);
+}
+/** `members`, each object in it included, refusing any member not in it (`strict`). */
+function guarded(members, path, workflow) {
+    const out = {};
+    for (const [key, value] of Object.entries(members)) {
+        out[key] =
+            typeof value === "object" && value !== null
+                ? guarded(value, `${path}.${key}`, workflow)
+                : value;
+    }
+    return strict(out, path, workflow);
+}
+/**
+ * The frame above `fn`, the `ctx` member running, read from a stack trace rather than
+ * `util.getCallSites`: a test runner that transforms the source maps the trace back to it, and
+ * Node runs TypeScript stripped in place, so the position is the file's either way. One frame is
+ * captured: the rest would only be formatted and dropped.
+ */
+function callSite(fn) {
+    const holder = {};
+    const limit = Error.stackTraceLimit;
+    Error.stackTraceLimit = 1;
+    try {
+        Error.captureStackTrace(holder, fn);
+    }
+    finally {
+        Error.stackTraceLimit = limit;
+    }
+    // `at run (/dir/file.ts:21:37)`, `at /dir/file.ts:21:37` or `at async run (file:///dir/file.ts:21:37)`.
+    const frame = holder.stack?.split("\n")[1]?.trim();
+    const m = frame === undefined ? null : /^at (?:.*?\()?(.+?):(\d+):(\d+)\)?$/.exec(frame);
+    const file = m && scriptPath(m[1]);
+    return file ? { file, line: Number(m[2]), column: Number(m[3]) } : undefined;
+}
+/**
+ * The outline node the workflow calls a `ctx` member at: the call whose code holds the position
+ * the workflow called from (`callSite`). `what` is the member's path on `ctx` (`ghost.post.create`,
+ * `approval`, `all`). The outline refuses most ways around it before a run (`outlineBody`'s
+ * problems); this is the run's own check, for what reaches a `ctx` member from code the outline
+ * has no node for: another file, a function defined inside `run` the outline does not read,
+ * `arguments`, or a node of another kind. The run fails with `call_not_in_outline`, and every
+ * record the call writes names the node, so a run's steps are the outline's calls and nothing else.
+ */
+function placeCall(run, fn, what) {
+    const { outline, workflow } = run;
+    const site = callSite(fn);
+    if (!site)
+        throw notInOutline(run, what, site, "which the outline cannot place");
+    if (site.file !== outline.file)
+        throw notInOutline(run, what, site, `which is not in ${workflow}'s file ${outline.file}`);
+    const offset = offsetOf(outline.lineStarts, site.line, site.column);
+    const node = offset === undefined ? undefined : callAt(outline.calls, offset);
+    if (!node)
+        throw notInOutline(run, what, site, `which is no ctx call in ${workflow}'s outline`);
+    // The member called is the node's call: `ctx.all` at an `all` or `each`, an operation at its op.
+    if (!fitsOp(callName(node), what))
+        throw notInOutline(run, what, site, `where the outline has ctx.${callName(node)}`);
+    return node;
+}
+function notInOutline(run, what, site, why) {
+    const where = site ? `${site.file}:${site.line}:${site.column}` : "a place the stack does not show";
+    return new SanomaError("call_not_in_outline", `ctx.${what} was called from ${where}, ${why}: call ctx directly in run, not from a helper or a function ` +
+        "defined inside run (inline it), so the run's graph shows the call", { call: `ctx.${what}`, site: where, workflow: run.workflow });
+}
+/** Refuses anything not declared in `uses`, with a message that says so. */
+function strict(obj, path, workflow) {
+    return new Proxy(obj, {
+        get(target, key, receiver) {
+            if (typeof key === "symbol" || key === "then" || key in target)
+                return Reflect.get(target, key, receiver);
+            throw new Error(`${path}.${key} is not available: add it to \`uses\` in workflow "${workflow}"`);
+        },
+    });
+}
+/** Checks a policy's answer, and copies it so nothing else the policy returned is recorded. */
+function checkDecision(decision, opId) {
+    const parsed = DecisionSchema.safeParse(decision);
+    if (parsed.success)
+        return parsed.data;
+    const why = parsed.error.issues[0]?.message ?? "not a decision";
+    throw new Error(`The policy returned ${shown(decision)} for ${opId}: ${why}; use allow(), deny(reason) or approve(approver)`);
+}
+/** The resource instance the call acts on, from the operation's `target`, when it declares one. */
+function targetOf(op, input) {
+    if (!op.target)
+        return {};
+    const target = op.target(input);
+    if (typeof target !== "string") {
+        throw new Error(`${op.id}: \`target\` returned ${typeof target}, not a string`);
+    }
+    return { target };
+}
+/** Asks the policy about one call, and checks its answer. Runs inside a step, so it must have no side effects of its own. */
+export async function decide(run, op, input) {
+    const call = {
+        op: policyOpOf(op),
+        effect: op.effect,
+        ...targetOf(op, input),
+        input,
+        actor: run.actor,
+        run: { id: run.id, workflow: run.workflow, approvals: structuredClone(run.approvals) },
+    };
+    let answer;
+    try {
+        answer = await run.state.policy(call);
+    }
+    catch (err) {
+        // Named here, so the run's error and the ledger say which call the policy failed on, with
+        // the code the policy's error had.
+        if (isInfrastructureError(err, run.state))
+            throw err;
+        throw keepCode(new Error(`The policy failed deciding ${op.id}: ${errorMessage(err)}`, { cause: err }), err);
+    }
+    const decision = checkDecision(answer, op.id);
+    const policyVersion = run.state.policy.version;
+    return policyVersion === undefined ? decision : { ...decision, policyVersion };
+}
+async function callOp(run, id, input, place) {
+    // The worker's declaration, never the workflow's: its effect, schemas and retry setting.
+    const op = run.state.ops.get(id);
+    // A sandbox run calls its own fakes, never a vendor.
+    const fn = run.sandbox === undefined ? run.state.drivers.get(id) : run.fakeDrivers?.get(id);
+    if (!op || !fn) {
+        throw new Error(run.sandbox === undefined
+            ? `No connector or driver for ${id} in this worker`
+            : `No connector or fake for ${id} in this worker: no fake its connectors attach implements it`);
+    }
+    // Only apply changes a declared resource; `resolveConfig` refuses any other workflow that uses such an operation.
+    if (isChangeOp(op, run.state.types) && run.workflow !== APPLY_WORKFLOW) {
+        throw new SanomaError("invalid_input", `${op.id} changes a declared resource, which only ${APPLY_WORKFLOW} does`, {
+            op: op.id,
+            workflow: run.workflow,
+        });
+    }
+    const parsed = parseOrThrow(op.input, input, `The input to ${op.id} does not match its schema`, { op: op.id });
+    // The call's identity (its ledger seq and id, and the driver's idempotency key) is taken
+    // before the first await, so it depends only on the order the workflow made its calls. A
+    // replay skips the step bodies but counts the same way. A call held for an approval is
+    // numbered before the approval's records, so its op.called sorts ahead of them.
+    const seq = run.seq++;
+    // The decision is recorded as a step, so a replay reuses it instead of asking a policy
+    // that may have changed since. The policy must still be deterministic: a run that fails
+    // before the step is recorded asks again.
+    const decision = await DBOS.runStep(() => decide(run, op, parsed), { name: `policy:${op.id}` });
+    const logged = recorded(op, parsed);
+    const call = { type: "op.called", op: op.id, ...place, effect: op.effect, input: logged, decision };
+    if (decision.kind === "deny") {
+        const err = new PolicyDeniedError(op.id, decision.reason);
+        await writeFailure(run, entry(run, { ...call, error: errorInfo(err), durationMs: 0 }, { seq }), err);
+        throw err;
+    }
+    if (decision.kind === "approve") {
+        const title = decision.title ?? `${op.id} needs ${approverLabel(decision.approver)}`;
+        // A hold covers the call it held, and any other operations the policy named.
+        const covers = [...new Set([op.id, ...(decision.covers ?? [])])];
+        try {
+            await awaitApproval(run, title, { approver: decision.approver, covers }, place, {
+                op: op.id,
+                seq,
+                input: logged,
+            });
+        }
+        catch (err) {
+            if (errorCode(err) === "approval_rejected") {
+                const approval = err.data.approvalId;
+                const record = entry(run, { ...call, approval, error: errorInfo(err), durationMs: 0 }, { seq });
+                await writeFailure(run, record, err);
+            }
+            throw err;
+        }
+    }
+    const started = Date.now();
+    // The try DBOS is on, as it passes it to the step. The last try's error is not retried, so
+    // DBOS records and throws it as the vendor gave it, never wrapped with the others.
+    let attempt;
+    let result;
+    try {
+        result = await DBOS.runStep(async () => {
+            const at = Date.now();
+            attempt = DBOS.stepStatus?.currentAttempt ?? 1;
+            const secrets = run.sandbox === undefined ? run.state.secrets : run.fakeSecrets;
+            const context = {
+                idempotencyKey: `${run.id}:${seq}`,
+                runId: run.id,
+                opId: op.id,
+                attempt,
+                secrets,
+            };
+            // A live driver's `env` is checked here, inside the step, by the guard `indexDrivers` put
+            // on its function: the refusal is the call's failure, recorded and never retried.
+            const output = op.output.parse(await fn(parsed, context));
+            return { output, at, durationMs: Date.now() - at, attempt };
+        }, {
+            name: op.id,
+            retriesAllowed: op.idempotent,
+            maxAttempts: MAX_ATTEMPTS,
+            shouldRetry: (e) => shouldRetry(e) && (attempt ?? 1) < MAX_ATTEMPTS,
+        });
+    }
+    catch (err) {
+        // The step failed for good; on replay DBOS rethrows the recorded error, and this record
+        // gets the same id. A success record would too, so a call has one op.called at most.
+        const record = entry(run, { ...call, error: errorInfo(err), durationMs: Date.now() - started, ...(attempt ? { attempt } : {}) }, { seq, at: started });
+        if (isInfrastructureError(err, run.state))
+            skipped(record, `the call was interrupted (${errorMessage(err)})`);
+        else
+            await writeFailure(run, record, err);
+        throw err;
+    }
+    const { output, at, durationMs } = result;
+    try {
+        await write(run, entry(run, { ...call, output: recorded(op, output), durationMs, attempt: result.attempt }, { seq, at }));
+    }
+    catch (err) {
+        // The vendor acted, and nothing records it. A workflow that caught this and called again
+        // would repeat the side effect under a new key, so the run makes no further calls.
+        run.ended = true;
+        throw new Error(`${op.id} succeeded, but the ledger could not record it: ${errorMessage(err)}`, { cause: err });
+    }
+    return output;
+}
+/**
+ * Checks a `ctx.approval` request before any DBOS call, so a bad one fails the run with
+ * `invalid_input`: who may decide it, and the operations it covers, as ids (none unless named).
+ */
+function checkApproval(title, req) {
+    const checked = parseOrThrow(ApprovalRequestSchema, req, `ctx.approval("${title}")`, { title });
+    return { ...checked, covers: checked.covers ?? [] };
+}
+/** Checks a sleep request before any DBOS call, so a bad one fails the run with `invalid_input`. */
+function checkSleep(req) {
+    const timed = typeof req === "object" && req !== null && "until" in req;
+    return parseOrThrow(timed ? SleepUntil : SleepFor, req, `ctx.sleep(${shown(req)})`);
+}
+/**
+ * Calls the members one after another, each awaited before the next starts, each inside its
+ * group (`currentGroup`), so every record its calls write carries it. The first failure stops
+ * the group and is rethrown as it is. The id is the run's next `seq` when ctx.all begins, which
+ * depends only on the calls made before it, so a replay names the group the same.
+ */
+async function all(run, list, node) {
+    const outer = currentGroup.getStore();
+    if (outer) {
+        throw new SanomaError("invalid_input", "ctx.all cannot be nested: a member of a ctx.all called ctx.all", {
+            group: outer.id,
+        });
+    }
+    // Two groups' calls would interleave on the run's queue, and neither would read as one fan-out.
+    if (run.inAll)
+        throw new SanomaError("invalid_input", "a ctx.all is already running: await it before the next");
+    const members = parseOrThrow(AllMembers, list, "ctx.all");
+    const id = `all:${run.seq}`;
+    const outputs = [];
+    run.inAll = true;
+    try {
+        for (const [index, member] of members.entries()) {
+            outputs.push(await currentGroup.run({ id, index, size: members.length, node }, member));
+        }
+    }
+    finally {
+        run.inAll = false;
+    }
+    return outputs;
+}
+/**
+ * Waits, durably, until the time or for the duration the request names, and records when it
+ * ends. For a duration that is the time the sleep started plus the duration, as the runtime saw
+ * it (`Date.now()`, which adds no DBOS call): a replay may compute another, but the store keeps
+ * the first record with the id, so the record says what the first execution waited for.
+ */
+async function sleep(run, raw, at) {
+    const req = checkSleep(raw);
+    const seq = run.seq++;
+    let until;
+    let ms;
+    if ("until" in req) {
+        until = typeof req.until === "number" ? req.until : Date.parse(req.until);
+        ms = until - (await DBOS.now());
+    }
+    else {
+        ms =
+            (req.ms ?? 0) +
+                (req.seconds ?? 0) * 1_000 +
+                (req.minutes ?? 0) * 60_000 +
+                (req.hours ?? 0) * 3_600_000 +
+                (req.days ?? 0) * 86_400_000;
+        until = Date.now() + ms;
+    }
+    await write(run, entry(run, { type: "sleep.started", ...at, until }, { seq }));
+    // A time already past waits not at all, and adds no step. A sandbox run never waits.
+    if (ms > 0 && run.sandbox === undefined)
+        await DBOS.sleep(ms);
+}
+//# sourceMappingURL=call.js.map

package/dist/call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.js","sourceRoot":"","sources":["../src/call.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAwB,MAAM,gBAAgB,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EACL,UAAU,EAEV,qBAAqB,EACrB,QAAQ,EAER,UAAU,EACV,UAAU,GAGX,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,MAAM,EACN,SAAS,EACT,SAAS,EACT,OAAO,EACP,QAAQ,EACR,YAAY,EACZ,iBAAiB,EACjB,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EAAoB,IAAI,EAAW,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAiB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAmB,UAAU,EAAyB,MAAM,aAAa,CAAC;AAEjG,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAElF,oGAAoG;AACpG,MAAM,WAAW,GAAG,CAAC,GAAY,EAAE,EAAE,CACnC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,UAAU,CAAC,0BAA0B,IAAI,CAAC,YAAY,yBAAyB,CAAC,CAAC;AAExH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAY,EAAE,KAAmC;IACrF,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC;AAC7E,CAAC;AAED,iGAAiG;AACjG,SAAS,QAAQ,CAAC,EAAM,EAAE,KAAc;IACtC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5G,MAAM,GAAG,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,MAAM;QAAE,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC;IACnF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uDAAuD;AACvD,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB,qFAAqF;AACrF,MAAM,aAAa,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC;AAExF;;;;;GAKG;AACH,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,MAAM,CAAI,GAAQ,EAAE,IAAsB;IACjD,4FAA4F;IAC5F,4FAA4F;IAC5F,6FAA6F;IAC7F,sFAAsF;IACtF,8CAA8C;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI;SAClB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;SAC/C,IAAI,CAAC,GAAG,EAAE;QACT,aAAa,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IACL,6FAA6F;IAC7F,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,IAAI,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;AAEtB,kGAAkG;AAClG,SAAS,aAAa,CAAC,GAAQ;IAC7B,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,OAAO,GAAG,CAAC,EAAE,2DAA2D,EAAE;YAC3G,KAAK,EAAE,GAAG,CAAC,EAAE;SACd,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAYD,sIAAsI;AACtI,MAAM,KAAK,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAE3E;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAgC,EAAE,GAAQ;IACjE,MAAM,IAAI,GAAG,EAAE,CAAC,IAAsB,CAAC;IACvC,4HAA4H;IAC5H,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,IAA0D,EAAE,EAAE,CAC1F,KAAK,UAAU,MAAM,CAAC,GAAG,IAAe;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC;IACJ,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9C,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAChD,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;IACvB,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,KAAa,EAAE,GAAoB,EAAE,EAAE,CAClF,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CACf,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CACtG,CACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC5C,iCAAiC;QACjC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAE,EAAE,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,uFAAuF;AACvF,SAAS,OAAO,CAAC,OAAgC,EAAE,IAAY,EAAE,QAAgB;IAC/E,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC;YACN,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBACzC,CAAC,CAAC,OAAO,CAAC,KAAgC,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,QAAQ,CAAC;gBACvE,CAAC,CAAC,KAAK,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AASD;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,EAAY;IAC5B,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,CAAC;IACpC,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC;IAChC,CAAC;IACD,wGAAwG;IACxG,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,CAAC,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,GAAQ,EAAE,EAAY,EAAE,IAAY;IACrD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,gCAAgC,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;QAC5B,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,QAAQ,WAAW,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9E,IAAI,CAAC,IAAI;QAAE,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,2BAA2B,QAAQ,YAAY,CAAC,CAAC;IAChG,iGAAiG;IACjG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;QAAE,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,6BAA6B,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,GAAQ,EAAE,IAAY,EAAE,IAA0B,EAAE,GAAW;IACnF,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,iCAAiC,CAAC;IACpG,OAAO,IAAI,WAAW,CACpB,qBAAqB,EACrB,OAAO,IAAI,oBAAoB,KAAK,KAAK,GAAG,8DAA8D;QACxG,mEAAmE,EACrE,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAC7D,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,MAAM,CAAmB,GAAM,EAAE,IAAY,EAAE,QAAgB;IACtE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE;QACpB,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ;YACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,IAAI,MAAM;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1G,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,GAAG,sDAAsD,QAAQ,GAAG,CAAC,CAAC;QACnG,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,+FAA+F;AAC/F,SAAS,aAAa,CAAC,QAAiB,EAAE,IAAY;IACpD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,gBAAgB,CAAC;IAChE,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,CAAC,QAAQ,CAAC,QAAQ,IAAI,KAAK,GAAG,kDAAkD,CAC7G,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,SAAS,QAAQ,CAAC,EAAM,EAAE,KAAc;IACtC,IAAI,CAAC,EAAE,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAY,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,yBAAyB,OAAO,MAAM,gBAAgB,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,6HAA6H;AAC7H,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAQ,EAAE,EAAM,EAAE,KAAc;IAC3D,MAAM,IAAI,GAAe;QACvB,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;QAClB,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;QACtB,KAAK;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;KACvF,CAAC;IACF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0FAA0F;QAC1F,mCAAmC;QACnC,IAAI,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,GAAG,CAAC;QACrD,MAAM,QAAQ,CAAC,IAAI,KAAK,CAAC,8BAA8B,EAAE,CAAC,EAAE,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;IAC/C,OAAO,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAQ,EAAE,EAAU,EAAE,KAAc,EAAE,KAAa;IACvE,yFAAyF;IACzF,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjC,qDAAqD;IACrD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5F,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,GAAG,CAAC,OAAO,KAAK,SAAS;YACvB,CAAC,CAAC,8BAA8B,EAAE,iBAAiB;YACnD,CAAC,CAAC,4BAA4B,EAAE,8DAA8D,CACjG,CAAC;IACJ,CAAC;IACD,kHAAkH;IAClH,IAAI,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QACvE,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,EAAE,4CAA4C,cAAc,OAAO,EAAE;YAChH,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE,4BAA4B,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/G,yFAAyF;IACzF,yFAAyF;IACzF,uFAAuF;IACvF,gFAAgF;IAChF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;IACtB,uFAAuF;IACvF,wFAAwF;IACxF,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;IAE7G,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACrG,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,EAAE,UAAU,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrF,6EAA6E;QAC7E,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE;gBAC9E,EAAE,EAAE,EAAE,CAAC,EAAE;gBACT,GAAG;gBACH,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,mBAAmB,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAI,GAAmB,CAAC,IAAI,CAAC,UAAoB,CAAC;gBAChE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChG,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,2FAA2F;IAC3F,mFAAmF;IACnF,IAAI,OAA2B,CAAC;IAChC,IAAI,MAA4E,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CACzB,KAAK,IAAI,EAAE;YACT,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,IAAI,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAY,CAAC;YACjF,MAAM,OAAO,GAAgB;gBAC3B,cAAc,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE;gBAClC,KAAK,EAAE,GAAG,CAAC,EAAE;gBACb,IAAI,EAAE,EAAE,CAAC,EAAE;gBACX,OAAO;gBACP,OAAO;aACR,CAAC;YACF,0FAA0F;YAC1F,kFAAkF;YAClF,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC;QAC9D,CAAC,EACD;YACE,IAAI,EAAE,EAAE,CAAC,EAAE;YACX,cAAc,EAAE,EAAE,CAAC,UAAU;YAC7B,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,YAAY;SACpE,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wFAAwF;QACxF,qFAAqF;QACrF,MAAM,MAAM,GAAG,KAAK,CAClB,GAAG,EACH,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACrG,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,CACrB,CAAC;QACF,IAAI,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,EAAE,6BAA6B,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;YACzG,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,CACT,GAAG,EACH,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CACxG,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yFAAyF;QACzF,mFAAmF;QACnF,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,mDAAmD,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,GAAoB;IACxD,MAAM,OAAO,GAAG,YAAY,CAAC,qBAAqB,EAAE,GAAG,EAAE,iBAAiB,KAAK,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,oGAAoG;AACpG,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,IAAI,GAAG,CAAC;IACxE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACtF,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,GAAG,CAAC,GAAQ,EAAE,IAAa,EAAE,IAAY;IACtD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;IACtC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,gEAAgE,EAAE;YACvG,KAAK,EAAE,KAAK,CAAC,EAAE;SAChB,CAAC,CAAC;IACL,CAAC;IACD,gGAAgG;IAChG,IAAI,GAAG,CAAC,KAAK;QAAE,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,wDAAwD,CAAC,CAAC;IAChH,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,KAAK,CAAC,GAAQ,EAAE,GAAY,EAAE,EAAU;IACrD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;IACtB,IAAI,KAAa,CAAC;IAClB,IAAI,EAAU,CAAC;IACf,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1E,EAAE,GAAG,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,EAAE;YACA,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;gBACb,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,KAAK;gBAC1B,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,MAAM;gBAC3B,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,SAAS;gBAC5B,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC;QAC/B,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC/E,qFAAqF;IACrF,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAChE,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,203 @@
+import { type WorkflowStatusString } from "@dbos-inc/dbos-sdk";
+import { z } from "zod";
+import { ApprovalMessage } from "./approvals.ts";
+import { type SanomaConfig } from "./config.ts";
+import { type CredentialStatus } from "./env.ts";
+import { type ApprovalState, Principal, type WorkflowDefinition } from "./define.ts";
+import { type ApplyInput, type ApplyReport } from "./apply.ts";
+import { type DriftReport } from "./drift.ts";
+import { type LedgerRecord } from "./ledger.ts";
+import { type RunStatus } from "./shared.ts";
+/** A run's status from DBOS's, and whether it has an approval pending. */
+export declare function runStatus(dbosStatus: string, approvals: readonly ApprovalState[]): RunStatus;
+/** The DBOS statuses the run statuses come from; `running` and `waiting` both come from PENDING. */
+export declare const dbosStatusesOf: (...statuses: RunStatus[]) => WorkflowStatusString[];
+/**
+ * The first `limit` items `keep` accepts, read a page of `pageSize` at a time from `list`, in
+ * its order, until there are enough or a page comes back short (the last one).
+ */
+export declare function firstMatching<T>(list: (page: {
+    limit: number;
+    offset: number;
+}) => Promise<T[]>, keep: (item: T) => boolean, limit: number, pageSize: number): Promise<T[]>;
+/** Which runs `SanomaClient.runs` lists. */
+export interface RunsFilter {
+    /** At most this many, newest first. Defaults to 20. */
+    limit?: number;
+    /** Only runs with this status. */
+    status?: RunStatus;
+    /** Only runs of the workflow of this name. */
+    workflow?: string;
+}
+export interface RunSummary {
+    runId: string;
+    workflow: string;
+    status: RunStatus;
+    /** Who started the run, as passed to `start`. */
+    startedBy?: Principal;
+    createdAt: number;
+    updatedAt?: number;
+    approvals: ApprovalState[];
+    error?: string;
+    /** For a sandbox run, the scenario it was seeded from. */
+    sandbox?: string;
+}
+export interface StartOptions {
+    /** Recorded as the run's actor in the ledger and passed to the policy. */
+    startedBy: Principal;
+    /**
+     * Use this run id instead of a new one, so a retried start makes one run. Starting an id
+     * that exists returns it, without starting another, when the workflow, the input (compared
+     * as JSON), `startedBy` and `sandbox` are the same, and throws `invalid_input` naming what differs
+     * when they are not. Of two starts racing with one new id, the first's run stands.
+     */
+    runId?: string;
+    /**
+     * Start a sandbox run, seeded from the config's scenario of this name: it calls its own fakes,
+     * made for it by its connectors' makers, instead of the drivers, and does not wait on sleeps.
+     * Sandbox runs go on the app's queue like any run, so several run at once.
+     */
+    sandbox?: string;
+}
+/** Talks to the runtime from another process (the app, a script), through the shared Postgres. */
+export declare class SanomaClient {
+    private readonly dbos;
+    private readonly config;
+    private readonly drivers;
+    /** The config's own ledger store, or a Postgres one made for this client, which `close` then closes. */
+    private readonly audit;
+    /** On the config's database, for the credentials table: opened on first use. */
+    private readonly credentialsPool;
+    private constructor();
+    /**
+     * Connects to the runtime's Postgres for the config's app. Checks the config first and throws
+     * what the worker would refuse. Reads ledgers from the config's ledger store, or from the
+     * Postgres store on its database when it has none.
+     */
+    static connect(config: SanomaConfig): Promise<SanomaClient>;
+    /**
+     * Checks the input against the workflow's schema, then queues a run for the worker. The run
+     * gets the input as sent, not as the schema parsed it: the worker parses it once, so a schema
+     * with a `.transform` or a default sees the caller's value, and `run.started` records it.
+     * `workflow` is a definition, or the name of one in the config's `workflows`.
+     */
+    start<S extends z.ZodType>(workflow: WorkflowDefinition<any, S> | string, input: z.input<S>, options: StartOptions): Promise<string>;
+    /** The run's audit record, in order, from the ledger store. */
+    ledger(runId: string): Promise<LedgerRecord[]>;
+    /**
+     * The app's runs, newest first: the latest `limit`, or the latest `limit` with a `status`.
+     * Only the approvals tell `running` from `waiting`, so those read PENDING runs a page at a
+     * time until `limit` have that status.
+     */
+    runs({ limit, status, workflow }?: RunsFilter): Promise<RunSummary[]>;
+    run(runId: string): Promise<RunSummary | undefined>;
+    approvals(runId: string): Promise<ApprovalState[]>;
+    /**
+     * Sends a decision on the run's pending approval (or the one named), as `message.by`, and
+     * waits for the run to read it. Returns the approval as decided. Throws without sending when
+     * it is decided already (`already_decided`), when the run has finished, failed or been
+     * cancelled (`run_ended`), when there is nothing to decide (`no_pending_approval`,
+     * `run_not_found`), or when `by` may not decide it (`not_approver`); and throws
+     * `already_decided` too when another decision reached the run first, and `not_approver` when
+     * the run read this one and refused it.
+     *
+     * If the run does not read the decision within `timeoutSeconds` (30 by default; the worker
+     * may be down), returns the approval as it stands, still `pending`: the decision stays
+     * queued for the run, which reads it when it next runs.
+     */
+    decide(runId: string, message: ApprovalMessage, approvalId?: string, options?: {
+        timeoutSeconds?: number;
+    }): Promise<ApprovalState>;
+    /**
+     * The run's output once it ends, or its error. Throws `run_running` when it has not ended
+     * within `timeoutMs`; the run goes on.
+     */
+    result(runId: string, timeoutMs?: number): Promise<unknown>;
+    /**
+     * Starts the built-in drift workflow, which reads the config's data files itself: `start`
+     * with its input, `{}`. Returns the run id; `driftReport` waits for its report. Throws
+     * `invalid_input` when the config's connectors declare no resource types, so it has none.
+     */
+    drift(options: StartOptions): Promise<string>;
+    /** The report of a drift run once it ends: as `applyReport` for apply. */
+    driftReport(runId: string): Promise<DriftReport>;
+    /**
+     * Starts the built-in apply workflow, which reads the config's data files itself, with `input`
+     * (`only`, `bind`, `answers`; `{}` for all). Returns the run id; `applyReport` waits for its
+     * report. Throws `invalid_input` when the config's connectors declare no resource types.
+     */
+    apply(input: ApplyInput, options: StartOptions): Promise<string>;
+    /**
+     * The report of an apply run once it ends. Throws `run_not_found`, `invalid_input` for another
+     * workflow's run, the run's error when it failed, and `run_running` when it has not ended
+     * within 30 s.
+     */
+    applyReport(runId: string): Promise<ApplyReport>;
+    /** The built-in workflow `name`; `invalid_input` when the config has none, as its connectors declare no resource types. */
+    private builtIn;
+    /** The output of a run of the built-in `workflow` once it ends. */
+    private reportOf;
+    /**
+     * Stores a value for a variable a driver's `env` declares, as `by`, and tells the workers: each
+     * loads it into its environment, unless its environment sets the variable itself. Refuses
+     * (`invalid_input`) a name no driver declares, and a value the variable's schema refuses, with
+     * the schema's reason and never the value; an empty value too (`clearCredential` unsets one).
+     * Nothing records the value but its row, which records `by` and when.
+     */
+    setCredential(name: string, value: string, options: {
+        by: string;
+    }): Promise<void>;
+    /**
+     * Deletes the stored value of a declared variable, and tells the workers, which unset it unless
+     * their environment sets it. `by` is who asks; nothing records it once the row is gone.
+     * Refuses (`invalid_input`) a name no driver declares.
+     */
+    clearCredential(name: string, options: {
+        by: string;
+    }): Promise<void>;
+    /**
+     * Stores a secret as `by`, and tells the workers: a value under any variable's name, declared by
+     * a driver or not, such as a data file's `secret("NAME")` or the app's own (its GitHub App's
+     * keys). A name a driver declares is checked as `setCredential` checks it; any other name must
+     * look like a variable's, and the value must not be empty (`invalid_input`, never the value).
+     */
+    setSecret(name: string, value: string, options: {
+        by: string;
+    }): Promise<void>;
+    /**
+     * The values of these secrets, as a driver's `secrets.get` reads them: this process's
+     * environment, which wins, else the stored value, with who set it and when. A name with neither
+     * is left out. For server code: a page is told whether one is set, never its value.
+     */
+    secrets(names: readonly string[]): Promise<Map<string, StoredSecret>>;
+    /**
+     * Each vendor's declared variables and their statuses now: from this process's environment,
+     * which wins, else from the stored credentials, with `source` saying which (a value equal to
+     * the stored one, as a worker in this process loads it, is `stored`), and who set a stored one
+     * and when. Never a value.
+     */
+    credentials(): Promise<Map<string, CredentialStatus[]>>;
+    close(): Promise<void>;
+    /**
+     * The name's statuses with `lookup`'s value, one per vendor whose drivers declare it, or
+     * `invalid_input` when none does.
+     */
+    private declared;
+    /** The pool the credentials are read and written with, on the database once it is prepared. */
+    private credentialsDb;
+    /** Refuses a run id whose run, as stored, was started with another input, by someone else, or in another sandbox. */
+    private mustMatch;
+    /** The run's status row, read without its input (and its output, unless asked), or `run_not_found`. */
+    private mustExist;
+    /** The run's output once it ends, or its error, polled every 100 ms; `run_running` after `timeoutMs`. */
+    private awaitResult;
+    private summarize;
+}
+/** A secret's value as `SanomaClient.secrets` reads it, and where from. */
+export interface StoredSecret {
+    value: string;
+    source: "environment" | "stored";
+    /** Who stored it (`setSecret`'s `by`), and when, as an ISO 8601 time. */
+    setBy?: string;
+    setAt?: string;
+}