@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/agentexecution/temporal/config.js

@@ -0,0 +1,106 @@
+/**
+ * Agent-execution Temporal config — ports
+ * pkg/domain/agentexecution/temporal/config.go: the queue names, routing
+ * mode, and default execution target for agent-execution dispatch.
+ *
+ * resolveExecutionTarget is the SINGLE definition of the
+ * UNSPECIFIED-resolution rule (oss#397) — dispatch (the agentexecution
+ * domain, #17/#18) and policy enforcement (the session update pipeline's
+ * execution-target immutability step) must both use it rather than
+ * re-deriving the default, so they can never disagree about where an
+ * execution runs. Mirrors the cloud edition's
+ * AgentExecutionTemporalConfig.resolveExecutionTarget.
+ *
+ * This module is the first resident of the agentexecution domain directory
+ * (the domain itself is a later sub-project); the tree corresponds to Go's,
+ * same precedent as src/domain/mcpserver/enabledtools/.
+ */
+import { ExecutionTarget } from "@stigmer/protos/ai/stigmer/agentic/session/v1/enum_pb";
+/**
+ * Routes all activities to the shared global queue (runnerQueue, default
+ * stigmer_runner) — the default for OSS local development where a single
+ * runner polls one queue for all sessions (Go RoutingGlobal).
+ */
+export const ROUTING_GLOBAL = "global";
+/**
+ * Derives a per-session task queue (session:{session_id}) for each
+ * execution — for deployments where each session has a dedicated runner
+ * (desktop app with embedded runners, or cloud sandboxes; Go
+ * RoutingSession).
+ */
+export const ROUTING_SESSION = "session";
+/**
+ * Resolves UNSPECIFIED to LOCAL — OSS/self-hosted deployments (Go
+ * DefaultExecutionTargetLocal).
+ */
+export const DEFAULT_EXECUTION_TARGET_LOCAL = "local";
+/**
+ * Resolves UNSPECIFIED to CLOUD — the managed cloud service (Go
+ * DefaultExecutionTargetCloud).
+ */
+export const DEFAULT_EXECUTION_TARGET_CLOUD = "cloud";
+/**
+ * Configuration for agent-execution Temporal workers (Go temporal.Config).
+ *
+ * Queue architecture:
+ *   - stigmerQueue: server workflows on agent_execution_stigmer
+ *   - runnerQueue: unified-runner activities on stigmer_runner (global) or
+ *     session:{id} (per-session)
+ */
+export class AgentExecutionTemporalConfig {
+    stigmerQueue;
+    runnerQueue;
+    activityRouting;
+    defaultExecutionTarget;
+    constructor(
+    /** Task queue for server workflows. Default: agent_execution_stigmer. */
+    stigmerQueue, 
+    /**
+     * Default task queue for runner activities (stigmer_runner). In global
+     * routing mode all activities route here; in session routing mode it is
+     * the fallback when the session id is empty.
+     */
+    runnerQueue, 
+    /** ROUTING_GLOBAL or ROUTING_SESSION. */
+    activityRouting, 
+    /**
+     * Resolves EXECUTION_TARGET_UNSPECIFIED on sessions:
+     * DEFAULT_EXECUTION_TARGET_LOCAL (client's runner polls the queue) or
+     * DEFAULT_EXECUTION_TARGET_CLOUD (server provisions a sandbox).
+     */
+    defaultExecutionTarget) {
+        this.stigmerQueue = stigmerQueue;
+        this.runnerQueue = runnerQueue;
+        this.activityRouting = activityRouting;
+        this.defaultExecutionTarget = defaultExecutionTarget;
+    }
+    /**
+     * Resolves a session's execution_target to its effective target:
+     * UNSPECIFIED becomes the configured default (LOCAL on OSS/self-hosted,
+     * CLOUD on the managed cloud service); explicit values pass through
+     * unchanged (Go Config.ResolveExecutionTarget).
+     */
+    resolveExecutionTarget(target) {
+        if (target !== ExecutionTarget.UNSPECIFIED) {
+            return target;
+        }
+        if (this.defaultExecutionTarget === DEFAULT_EXECUTION_TARGET_CLOUD) {
+            return ExecutionTarget.CLOUD;
+        }
+        return ExecutionTarget.LOCAL;
+    }
+}
+/**
+ * Builds the config from environment variables with Go NewConfig's
+ * defaults. Env-derived strings only — no Temporal connection is made
+ * here (the temporal seam stays empty until the execution cluster
+ * sub-projects land).
+ */
+export function newConfigFromEnv() {
+    return new AgentExecutionTemporalConfig(valueOrDefault(process.env.TEMPORAL_AGENT_EXECUTION_STIGMER_TASK_QUEUE, "agent_execution_stigmer"), valueOrDefault(process.env.TEMPORAL_AGENT_EXECUTION_RUNNER_TASK_QUEUE, "stigmer_runner"), valueOrDefault(process.env.STIGMER_ACTIVITY_ROUTING, ROUTING_GLOBAL), valueOrDefault(process.env.STIGMER_DEFAULT_EXECUTION_TARGET, DEFAULT_EXECUTION_TARGET_LOCAL));
+}
+/** Go's `if v == "" { v = default }` idiom for env reads. */
+function valueOrDefault(value, fallback) {
+    return value === undefined || value === "" ? fallback : value;
+}
+//# sourceMappingURL=config.js.map

package/dist/domain/agentexecution/temporal/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../src/domain/agentexecution/temporal/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,uDAAuD,CAAC;AAExF;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AAEzC;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,OAAO,CAAC;AAEtD;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,OAAO,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IAG5B;IAMA;IAEA;IAMA;IAhBX;IACE,yEAAyE;IAChE,YAAoB;IAC7B;;;;OAIG;IACM,WAAmB;IAC5B,yCAAyC;IAChC,eAAuB;IAChC;;;;OAIG;IACM,sBAA8B;QAd9B,iBAAY,GAAZ,YAAY,CAAQ;QAMpB,gBAAW,GAAX,WAAW,CAAQ;QAEnB,oBAAe,GAAf,eAAe,CAAQ;QAMvB,2BAAsB,GAAtB,sBAAsB,CAAQ;IACtC,CAAC;IAEJ;;;;;OAKG;IACH,sBAAsB,CAAC,MAAuB;QAC5C,IAAI,MAAM,KAAK,eAAe,CAAC,WAAW,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,sBAAsB,KAAK,8BAA8B,EAAE,CAAC;YACnE,OAAO,eAAe,CAAC,KAAK,CAAC;QAC/B,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,4BAA4B,CACrC,cAAc,CACZ,OAAO,CAAC,GAAG,CAAC,2CAA2C,EACvD,yBAAyB,CAC1B,EACD,cAAc,CACZ,OAAO,CAAC,GAAG,CAAC,0CAA0C,EACtD,gBAAgB,CACjB,EACD,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,cAAc,CAAC,EACpE,cAAc,CACZ,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAC5C,8BAA8B,CAC/B,CACF,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,SAAS,cAAc,CAAC,KAAyB,EAAE,QAAgB;IACjE,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAChE,CAAC"}

package/dist/domain/agentexecution/tool-call-settle.d.ts

@@ -0,0 +1,31 @@
+/**
+ * settleInterruptedToolCalls — ports controller/tool_call_settle.go:
+ * settles every non-terminal tool call — PENDING, RUNNING, or
+ * WAITING_APPROVAL — to TOOL_CALL_INTERRUPTED, across the top-level
+ * transcript and every sub-agent transcript, in place. Enforces the
+ * invariant that a terminal execution carries zero non-terminal tool
+ * calls (issue #207): a terminal execution's workflow is gone, so an
+ * in-flight call will never receive its terminal event and a gated call
+ * can never be decided.
+ *
+ * Called by every terminal writer: the updateStatus merge chokepoint (on
+ * a terminal merged phase), the Cancel/Terminate lifecycle transition,
+ * and the stale-workflow reconcilers. Idempotent — settled rows are
+ * terminal and re-running is a no-op.
+ *
+ * The settle is honest, not a hide: args, partial results, and approval
+ * provenance are preserved for the audit trail. Only the status, the
+ * completion timestamp (when empty, so a runner-recorded timestamp
+ * survives), and the streaming marker change — nothing streams on a dead
+ * execution, so a frozen streaming_source must not leave clients
+ * rendering a live stream.
+ *
+ * A gated (WAITING_APPROVAL) call settled here authors NO approval event:
+ * terminal-execution gate-exits are deliberately not modeled as per-call
+ * events (a terminal execution simply projects to zero pending approvals;
+ * RETRACTED is reserved for in-flight withdrawals).
+ */
+import type { AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+/** Returns the number of tool calls settled, for the callers' logs. */
+export declare function settleInterruptedToolCalls(status: AgentExecutionStatus | undefined, completedAt: string): number;
+//# sourceMappingURL=tool-call-settle.d.ts.map

package/dist/domain/agentexecution/tool-call-settle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call-settle.d.ts","sourceRoot":"","sources":["../../../src/domain/agentexecution/tool-call-settle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AAOxG,uEAAuE;AACvE,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,oBAAoB,GAAG,SAAS,EACxC,WAAW,EAAE,MAAM,GAClB,MAAM,CASR"}

package/dist/domain/agentexecution/tool-call-settle.js

@@ -0,0 +1,36 @@
+import { ToolCallStatus, ToolCallStreamingSource, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+/** Returns the number of tool calls settled, for the callers' logs. */
+export function settleInterruptedToolCalls(status, completedAt) {
+    if (status === undefined) {
+        return 0;
+    }
+    let settled = settleInMessages(status.messages, completedAt);
+    for (const sa of status.subAgentExecutions) {
+        settled += settleInMessages(sa.messages, completedAt);
+    }
+    return settled;
+}
+function settleInMessages(messages, completedAt) {
+    let settled = 0;
+    for (const m of messages) {
+        for (const tc of m.toolCalls) {
+            switch (tc.status) {
+                case ToolCallStatus.TOOL_CALL_PENDING:
+                case ToolCallStatus.TOOL_CALL_RUNNING:
+                case ToolCallStatus.TOOL_CALL_WAITING_APPROVAL: {
+                    tc.status = ToolCallStatus.TOOL_CALL_INTERRUPTED;
+                    if (tc.completedAt === "") {
+                        tc.completedAt = completedAt;
+                    }
+                    tc.streamingSource = ToolCallStreamingSource.UNSPECIFIED;
+                    settled++;
+                    break;
+                }
+                default:
+                    break;
+            }
+        }
+    }
+    return settled;
+}
+//# sourceMappingURL=tool-call-settle.js.map

package/dist/domain/agentexecution/tool-call-settle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call-settle.js","sourceRoot":"","sources":["../../../src/domain/agentexecution/tool-call-settle.ts"],"names":[],"mappings":"AA4BA,OAAO,EACL,cAAc,EACd,uBAAuB,GACxB,MAAM,8DAA8D,CAAC;AAGtE,uEAAuE;AACvE,MAAM,UAAU,0BAA0B,CACxC,MAAwC,EACxC,WAAmB;IAEnB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC7D,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC3C,OAAO,IAAI,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAwB,EACxB,WAAmB;IAEnB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAC7B,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC;gBAClB,KAAK,cAAc,CAAC,iBAAiB,CAAC;gBACtC,KAAK,cAAc,CAAC,iBAAiB,CAAC;gBACtC,KAAK,cAAc,CAAC,0BAA0B,CAAC,CAAC,CAAC;oBAC/C,EAAE,CAAC,MAAM,GAAG,cAAc,CAAC,qBAAqB,CAAC;oBACjD,IAAI,EAAE,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;wBAC1B,EAAE,CAAC,WAAW,GAAG,WAAW,CAAC;oBAC/B,CAAC;oBACD,EAAE,CAAC,eAAe,GAAG,uBAAuB,CAAC,WAAW,CAAC;oBACzD,OAAO,EAAE,CAAC;oBACV,MAAM;gBACR,CAAC;gBACD;oBACE,MAAM;YACV,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/domain/agentexecution/update-status.d.ts

@@ -0,0 +1,45 @@
+import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { ExecutionPhase } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import type { AgentExecutionUpdateStatusInput, UpdateStatusResponse } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
+import type { AgentMessage } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
+import type { Logger } from "../../boot/logger.js";
+import type { Authorizer } from "../../extensions/authorizer.js";
+import type { AgentExecutionResponseDecorator, AgentExecutionStatusObserver } from "../../extensions/status-hooks.js";
+import type { CallerIdentity } from "../../extensions/identity.js";
+import type { Store } from "../../store/interface.js";
+import type { StreamBroker } from "./stream-broker.js";
+export interface UpdateStatusDeps {
+    readonly store: Store;
+    readonly logger: Logger;
+    /** The composed authorization seam — the Authorize step at position 1 of every chain calls it (O2, DD-007 §3). */
+    readonly authorizer: Authorizer;
+    readonly broker: StreamBroker;
+    /** The composed status-transition observers (O4, DD-006 §3). */
+    readonly statusObservers: ReadonlyArray<AgentExecutionStatusObserver>;
+    /** The composed reply decorators — the §7 querySignal seam (O4). */
+    readonly responseDecorators: ReadonlyArray<AgentExecutionResponseDecorator>;
+}
+export declare function updateStatus(deps: UpdateStatusDeps, input: AgentExecutionUpdateStatusInput, identity: CallerIdentity): Promise<UpdateStatusResponse>;
+/**
+ * Whether replacing existing with incoming would drop committed
+ * transcript history for a non-terminal execution, plus a short reason
+ * for the rejection log. Enforces the append-only-at-identity invariant:
+ * a non-terminal transcript may grow and reconcile entries in place, but
+ * it may neither shrink nor drop a previously committed tool-call id.
+ * Terminal executions (the TRANSCRIPT terminal set — TERMINATED stays
+ * protected) may be rewritten freely and so are never a regression here.
+ */
+export declare function nonTerminalTranscriptRegression(phase: ExecutionPhase, existing: AgentMessage[], incoming: AgentMessage[]): {
+    reject: boolean;
+    reason: string;
+};
+/**
+ * Merges an incoming status update into the execution in place — the
+ * runner-owns-the-transcript merge rules, exactly update_status.go
+ * applyUpdateStatusMerge. Runs inside the updateResource closure
+ * (synchronous by store contract), so the merge, the approval event
+ * authoring, and the pending_approvals projection all see the same
+ * snapshot that will be persisted.
+ */
+export declare function applyUpdateStatusMerge(execution: AgentExecution, input: AgentExecutionUpdateStatusInput, logger: Logger): void;
+//# sourceMappingURL=update-status.d.ts.map

package/dist/domain/agentexecution/update-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-status.d.ts","sourceRoot":"","sources":["../../../src/domain/agentexecution/update-status.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6DAA6D,CAAC;AAMlG,OAAO,EAEL,cAAc,EACf,MAAM,8DAA8D,CAAC;AACtE,OAAO,KAAK,EACV,+BAA+B,EAC/B,oBAAoB,EACrB,MAAM,4DAA4D,CAAC;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iEAAiE,CAAC;AAGpG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EACV,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,kCAAkC,CAAC;AAO1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAInE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAkBtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kHAAkH;IAClH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACtE,oEAAoE;IACpE,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC,+BAA+B,CAAC,CAAC;CAC7E;AAUD,wBAAsB,YAAY,CAChC,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,+BAA+B,EACtC,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,oBAAoB,CAAC,CAqG/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,cAAc,EACrB,QAAQ,EAAE,YAAY,EAAE,EACxB,QAAQ,EAAE,YAAY,EAAE,GACvB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA8BrC;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,cAAc,EACzB,KAAK,EAAE,+BAA+B,EACtC,MAAM,EAAE,MAAM,GACb,IAAI,CAsQN"}

package/dist/domain/agentexecution/update-status.js

@@ -0,0 +1,381 @@
+/**
+ * UpdateStatus — ports controller/update_status.go: the runner's
+ * progressive status-update RPC and the domain's single merge chokepoint.
+ *
+ * Chain per Go: ValidateUpdateStatusInput → MergeAndPersistExecution →
+ * NotifyStatusObservers → BroadcastToStreams. The merge+persist is ONE
+ * atomic read-modify-write under the store's per-resource write lock
+ * (store.updateResource) — the same discipline SubmitApproval uses,
+ * load-bearing now that the append-only approval_event_stream is the
+ * source of truth for pending_approvals: a non-atomic load-then-save
+ * could drop an approval event a concurrent SubmitApproval appended in
+ * the window between the load and the save.
+ *
+ * O4 (20260827.07) consumes the status-transition hooks here — one of
+ * the five notifying sites (the exhaustive list: status-observers.ts):
+ * observers fire post-persist and before broadcast; the response
+ * decorators run on the reply (the §7 querySignal seam — the cloud
+ * piggybacks its control signal on this response; OSS answers
+ * UNSPECIFIED).
+ *
+ * applyUpdateStatusMerge is the merge body run inside the updateResource
+ * closure (and exercised directly by the guard tests), mirroring the Java
+ * BuildNewStateWithStatusStep strategy: most fields are replaced
+ * wholesale with the runner's latest complete state, while server-owned
+ * fields (approval decisions, the approval_event_stream, the file_review
+ * ledger) are preserved/authored here because the runner never sends
+ * them.
+ *
+ * Versus Stigmer Cloud, OSS excludes the Authorize, PublishToRedis, and
+ * Publish steps (broadcast rides in-memory channels per ADR 011).
+ */
+import { create } from "@bufbuild/protobuf";
+import { AgentExecutionSchema, AgentExecutionStatusSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { AgentExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/command_pb";
+import { ExecutionControlSignal, ExecutionPhase, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { UpdateStatusResponseSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { internalError, invalidArgumentError, notFoundError, } from "../../pipeline/errors.js";
+import { newPipeline } from "../../pipeline/pipeline.js";
+import { RequestContext } from "../../pipeline/request-context.js";
+import { newAuthorizeStep } from "../../pipeline/steps/authorize.js";
+import { ResourceNotFoundError } from "../../store/interface.js";
+import { ensureApprovalRequests } from "./approval/author.js";
+import { preserveApprovalFields } from "./approval/preserve.js";
+import { projectPendingApprovals } from "./approval/project.js";
+import { appendRunnerEvents } from "./filereview/author.js";
+import { autoKeepApprovedCommandSets } from "./filereview/autokeep.js";
+import { projectFileChangeSets } from "./filereview/project.js";
+import { reconcileFileChangeProgress } from "./filereview/progress.js";
+import { isTerminalExecutionPhase, isTranscriptTerminalPhase, } from "./phases.js";
+import { applyResponseDecorators, notifyStatusObservers, } from "./status-observers.js";
+import { settleInterruptedToolCalls } from "./tool-call-settle.js";
+const EXECUTION_KEY = "execution";
+// O4-internal handoff (not a ported Go key): the phase read inside the
+// updateResource closure BEFORE the merge mutates, for the observer step.
+const OLD_PHASE_KEY = "o4OldPhase";
+export async function updateStatus(deps, input, identity) {
+    const reqCtx = new RequestContext(AgentExecutionCommandController.method.updateStatus.input, input, identity, ApiResourceKind.agent_execution);
+    await newPipeline("agentexecution-update-status", deps.logger)
+        .addStep(newAuthorizeStep(AgentExecutionCommandController.method.updateStatus, deps.authorizer))
+        .addStep({
+        name: "ValidateUpdateStatusInput",
+        execute(ctx) {
+            if (ctx.input.executionId === "") {
+                throw invalidArgumentError("execution_id is required");
+            }
+            if (ctx.input.status === undefined) {
+                throw invalidArgumentError("status is required");
+            }
+        },
+    })
+        .addStep({
+        name: "MergeAndPersistExecution",
+        async execute(ctx) {
+            let updated;
+            let oldPhase = ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED;
+            try {
+                updated = await deps.store.updateResource(ApiResourceKind.agent_execution, ctx.input.executionId, AgentExecutionSchema, (execution) => {
+                    oldPhase =
+                        execution.status?.phase ??
+                            ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED;
+                    applyUpdateStatusMerge(execution, ctx.input, deps.logger);
+                });
+            }
+            catch (error) {
+                if (error instanceof ResourceNotFoundError) {
+                    throw notFoundError("AgentExecution", ctx.input.executionId);
+                }
+                throw internalError(error, "failed to update execution status");
+            }
+            // Hand the merged result to the observer + broadcast steps.
+            ctx.set(EXECUTION_KEY, updated);
+            ctx.set(OLD_PHASE_KEY, oldPhase);
+        },
+    })
+        .addStep({
+        name: "NotifyStatusObservers",
+        async execute(ctx) {
+            const execution = ctx.get(EXECUTION_KEY);
+            if (execution === undefined) {
+                return; // BroadcastToStreams answers the missing-key fault below.
+            }
+            await notifyStatusObservers(deps, execution, ctx.get(OLD_PHASE_KEY), execution.status?.phase ?? ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED);
+        },
+    })
+        .addStep({
+        name: "BroadcastToStreams",
+        execute(ctx) {
+            const execution = ctx.get(EXECUTION_KEY);
+            if (execution === undefined) {
+                throw internalError(new Error("execution not found in context"), "execution not found in context");
+            }
+            // Push to active subscribers AFTER the persist commits (ADR 011
+            // write path) — the ordering subscribe's register-before-snapshot
+            // guarantee builds on.
+            deps.broker.broadcast(execution);
+        },
+    })
+        .build()
+        .execute(reqCtx);
+    // The §7 decorator seam: the cloud contributes its control signal to
+    // fields the shared reply schema already carries; the OSS baseline
+    // (UNSPECIFIED) is byte-identical when no decorator is composed.
+    return applyResponseDecorators(deps.responseDecorators, deps.logger, reqCtx.get(EXECUTION_KEY), create(UpdateStatusResponseSchema, {
+        signal: ExecutionControlSignal.UNSPECIFIED,
+    }));
+}
+/**
+ * Whether replacing existing with incoming would drop committed
+ * transcript history for a non-terminal execution, plus a short reason
+ * for the rejection log. Enforces the append-only-at-identity invariant:
+ * a non-terminal transcript may grow and reconcile entries in place, but
+ * it may neither shrink nor drop a previously committed tool-call id.
+ * Terminal executions (the TRANSCRIPT terminal set — TERMINATED stays
+ * protected) may be rewritten freely and so are never a regression here.
+ */
+export function nonTerminalTranscriptRegression(phase, existing, incoming) {
+    if (isTranscriptTerminalPhase(phase)) {
+        return { reject: false, reason: "" };
+    }
+    if (incoming.length < existing.length) {
+        return { reject: true, reason: "would shrink the message transcript" };
+    }
+    const incomingToolCallIds = new Set();
+    for (const m of incoming) {
+        for (const tc of m.toolCalls) {
+            if (tc.id !== "") {
+                incomingToolCallIds.add(tc.id);
+            }
+        }
+    }
+    for (const m of existing) {
+        for (const tc of m.toolCalls) {
+            if (tc.id === "") {
+                continue;
+            }
+            if (!incomingToolCallIds.has(tc.id)) {
+                return {
+                    reject: true,
+                    reason: "would drop a previously-committed tool call",
+                };
+            }
+        }
+    }
+    return { reject: false, reason: "" };
+}
+/**
+ * Merges an incoming status update into the execution in place — the
+ * runner-owns-the-transcript merge rules, exactly update_status.go
+ * applyUpdateStatusMerge. Runs inside the updateResource closure
+ * (synchronous by store contract), so the merge, the approval event
+ * authoring, and the pending_approvals projection all see the same
+ * snapshot that will be persisted.
+ */
+export function applyUpdateStatusMerge(execution, input, logger) {
+    if (execution.status === undefined) {
+        execution.status = create(AgentExecutionStatusSchema);
+    }
+    const status = execution.status;
+    const requestStatus = input.status;
+    if (requestStatus === undefined) {
+        // Unreachable through the RPC (the validate step refuses); the
+        // direct-call guard keeps the merge total.
+        return;
+    }
+    // Snapshot the pre-merge transcript before any replacement: the
+    // regression guard compares against the persisted messages, and
+    // preserveApprovalFields copies the SubmitApproval-owned decision
+    // fields from these existing messages onto the incoming ones.
+    // Reassigning status.messages below does not mutate these references.
+    const existingMessages = status.messages;
+    const existingSubAgents = status.subAgentExecutions;
+    const existingPhase = status.phase;
+    // Merge messages (replace with latest from request), guarding against
+    // any update that would drop committed transcript history for a
+    // non-terminal execution. The runner owns the transcript and only ever
+    // GROWS it in flight; two regressions are rejected at this single
+    // persistence chokepoint:
+    //  1. A strictly SHORTER transcript — the classic partial write.
+    //  2. A transcript that DROPS a committed tool-call id while appending
+    //     enough later turns to keep the count equal-or-greater
+    //     (front-truncation, invisible to a count-only check; tool-call
+    //     ids are the only stable identity in the transcript).
+    // Content is deliberately NOT compared: legitimate updates both grow
+    // it (streaming) and blank it in place (the Cursor runner's
+    // post-denial narration redaction), so a content check would reject
+    // valid writes.
+    if (requestStatus.messages.length > 0) {
+        const { reject, reason } = nonTerminalTranscriptRegression(existingPhase, existingMessages, requestStatus.messages);
+        if (reject) {
+            logger.warn("Rejected status update that would drop committed transcript history for a non-terminal execution; keeping existing messages", {
+                executionId: input.executionId,
+                existingMessages: existingMessages.length,
+                incomingMessages: requestStatus.messages.length,
+                reason,
+            });
+        }
+        else {
+            status.messages = requestStatus.messages;
+        }
+    }
+    // Wholesale presence-guarded replacements (latest from request).
+    if (requestStatus.subAgentExecutions.length > 0) {
+        status.subAgentExecutions = requestStatus.subAgentExecutions;
+    }
+    // todos is a map field; Go's len() counts entries.
+    if (Object.keys(requestStatus.todos).length > 0) {
+        status.todos = requestStatus.todos;
+    }
+    // Artifacts are published by agents via publish_artifact during
+    // execution; the runner persists them through this RPC.
+    if (requestStatus.artifacts.length > 0) {
+        status.artifacts = requestStatus.artifacts;
+    }
+    // Write-backs are populated during post-execution processing when the
+    // platform detects git changes and creates PRs.
+    if (requestStatus.workspaceWriteBacks.length > 0) {
+        status.workspaceWriteBacks = requestStatus.workspaceWriteBacks;
+    }
+    // Preserve approval fields (approval_action, approval_decided_at,
+    // approved_by) atomically recorded by SubmitApproval — the runner
+    // always sends UNSPECIFIED, so the wholesale replacement above would
+    // otherwise erase user decisions.
+    preserveApprovalFields(status.messages, status.subAgentExecutions, existingMessages, existingSubAgents);
+    // Update phase (if provided) — latched once terminal. A terminal phase
+    // is final by contract, but a runner activity can outlive its
+    // workflow's termination, so a straggler streaming persist can arrive
+    // carrying IN_PROGRESS after Terminate already wrote TERMINATED.
+    // Without the latch that persist resurrects the phase — and the
+    // execution is stuck live forever, because the workflow that would
+    // re-terminalize it is gone. Recover is the one sanctioned
+    // un-terminalizer and runs through its own lifecycle step, never this
+    // merge.
+    if (requestStatus.phase !== ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED) {
+        if (isTerminalExecutionPhase(existingPhase) &&
+            requestStatus.phase !== existingPhase) {
+            logger.warn("Ignored phase change on a terminal execution; terminal phases are final (Recover is the sanctioned un-terminalizer)", {
+                executionId: input.executionId,
+                storedPhase: ExecutionPhase[existingPhase],
+                ignoredPhase: ExecutionPhase[requestStatus.phase],
+            });
+        }
+        else {
+            status.phase = requestStatus.phase;
+        }
+    }
+    if (requestStatus.error !== "") {
+        status.error = requestStatus.error;
+    }
+    if (requestStatus.startedAt !== "") {
+        status.startedAt = requestStatus.startedAt;
+    }
+    if (requestStatus.completedAt !== "") {
+        status.completedAt = requestStatus.completedAt;
+    }
+    // Defense-in-depth: completed_at must not be set for non-terminal
+    // phases. The runner clears completed_at on resume, but the
+    // empty-string merge above cannot propagate the clear — this guard
+    // prevents the contradictory state (completed_at set +
+    // phase=WAITING_FOR_APPROVAL) observed in production.
+    if (status.phase === ExecutionPhase.EXECUTION_IN_PROGRESS ||
+        status.phase === ExecutionPhase.EXECUTION_WAITING_FOR_APPROVAL ||
+        status.phase === ExecutionPhase.EXECUTION_PENDING) {
+        status.completedAt = "";
+    }
+    // Terminal invariant (issue #207): a terminal execution carries zero
+    // non-terminal tool calls. Settling here — at the single merge
+    // chokepoint — covers every updateStatus writer without any of them
+    // having to remember it, and composes with the phase latch into a
+    // self-healing pair: a straggler persist that reintroduces RUNNING rows
+    // cannot move the terminal phase, so its rows are re-settled in the
+    // same merge. Runs before ensureApprovalRequests so a gated call on a
+    // dead execution never seeds a REQUESTED approval event.
+    if (isTerminalExecutionPhase(status.phase)) {
+        let settledAt = status.completedAt;
+        if (settledAt === "") {
+            settledAt = new Date().toISOString().replace(/\.\d{3}Z$/, "Z");
+        }
+        const settled = settleInterruptedToolCalls(status, settledAt);
+        if (settled > 0) {
+            logger.info("Settled in-flight tool calls to TOOL_CALL_INTERRUPTED on terminal execution", {
+                executionId: input.executionId,
+                phase: ExecutionPhase[status.phase],
+                settledToolCalls: settled,
+            });
+        }
+    }
+    // Author REQUESTED events for any tool call now in the approval gate
+    // (seeding the persisted stream the first time it is touched). The
+    // runner never sends this server-only field; it is carried over from
+    // the loaded resource and mutated in place here. Decisions are authored
+    // separately by SubmitApproval. Because this runs inside the
+    // updateResource write lock on the freshly-loaded stream, the events it
+    // appends can never clobber a decision a concurrent SubmitApproval
+    // appended.
+    ensureApprovalRequests(status, input.executionId);
+    // Compute pending_approvals from the authored event stream, via the
+    // single projection seam (returns the event-stream projection and runs
+    // the scan parity cross-check).
+    status.pendingApprovals = projectPendingApprovals(status.phase, status.messages, status.subAgentExecutions, status.approvalEventStream, logger);
+    // Fold the runner-authored capture/reconcile events (carried on the
+    // request payload) into the server-owned ledger: append-only,
+    // idempotent by event_id, FILE_DECIDED dropped (server-authored by
+    // SubmitFileDecision).
+    appendRunnerEvents(status, input.executionId, requestStatus);
+    // Approved-command auto-keep (DD-28): a candidate whose provenance
+    // verifies against the server-authored approval record is decided by
+    // policy IN THE SAME WRITE that folded it, so the gate never arms for a
+    // set the user already consented to via the command approval.
+    autoKeepApprovedCommandSets(status, input.executionId, execution.spec?.autoApproveAll ?? false, logger);
+    // Recompute file_change_sets from the append-only ledger via its single
+    // projection seam — always derived, never merged, so it cannot go
+    // stale.
+    status.fileChangeSets = projectFileChangeSets(status.phase, status.fileReviewEventStream);
+    // Mid-run live capture (DD-32): merge the runner-owned transient
+    // progress snapshot (presence-guarded replace, like streaming_usage
+    // below), then clear it unless its change set is still CAPTURING — run
+    // here so it sees the freshly-projected file_change_sets.
+    if (requestStatus.fileChangeProgress !== undefined) {
+        status.fileChangeProgress = requestStatus.fileChangeProgress;
+    }
+    status.fileChangeProgress = reconcileFileChangeProgress(status.fileChangeSets, status.fileChangeProgress);
+    // Merge streaming_usage (replace with latest from request): a
+    // display-only fallback when proxy-reported usage is unavailable.
+    if (requestStatus.streamingUsage !== undefined) {
+        status.streamingUsage = requestStatus.streamingUsage;
+    }
+    // Merge recalled_memories_report: runner-owned, written at most once
+    // per execution at prompt build (DD-008 D5). Later persists omit it, so
+    // this presence guard is what preserves the stored report across the
+    // execution's remaining status writes.
+    if (requestStatus.recalledMemoriesReport !== undefined) {
+        status.recalledMemoriesReport = requestStatus.recalledMemoriesReport;
+    }
+    if (requestStatus.contextInfo !== undefined) {
+        status.contextInfo = requestStatus.contextInfo;
+    }
+    if (requestStatus.setupProgress !== undefined) {
+        status.setupProgress = requestStatus.setupProgress;
+    }
+    // Clear setup_progress when phase leaves PENDING (defense-in-depth):
+    // the worker stops sending it once streaming begins, but an explicit
+    // clear prevents stale data if the phase transitions via a different
+    // code path.
+    if (status.phase !== ExecutionPhase.EXECUTION_PENDING) {
+        status.setupProgress = undefined;
+    }
+    // Merge structured_output: populated by the runner on COMPLETED when
+    // ExecutionConfig had structured_output_schema; immutable after first
+    // population.
+    if (requestStatus.structuredOutput !== undefined) {
+        status.structuredOutput = requestStatus.structuredOutput;
+    }
+    logger.debug("Merged status fields", {
+        executionId: input.executionId,
+        phase: ExecutionPhase[status.phase],
+        messagesCount: status.messages.length,
+        pendingApprovalsCount: status.pendingApprovals.length,
+    });
+}
+//# sourceMappingURL=update-status.js.map

package/dist/domain/agentexecution/update-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-status.js","sourceRoot":"","sources":["../../../src/domain/agentexecution/update-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EACL,sBAAsB,EACtB,cAAc,GACf,MAAM,8DAA8D,CAAC;AAKtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AAExG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAQtH,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAkBnE,MAAM,aAAa,GAAG,WAAW,CAAC;AAClC,uEAAuE;AACvE,0EAA0E;AAC1E,MAAM,aAAa,GAAG,YAAY,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAsB,EACtB,KAAsC,EACtC,QAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,+BAA+B,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EACzD,KAAK,EACL,QAAQ,EACR,eAAe,CAAC,eAAe,CAChC,CAAC;IACF,MAAM,WAAW,CACf,8BAA8B,EAC9B,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,+BAA+B,CAAC,MAAM,CAAC,YAAY,EACnD,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC;QACP,IAAI,EAAE,2BAA2B;QACjC,OAAO,CAAC,GAAG;YACT,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;gBACjC,MAAM,oBAAoB,CAAC,0BAA0B,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;KACF,CAAC;SACD,OAAO,CAAC;QACP,IAAI,EAAE,0BAA0B;QAChC,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,IAAI,OAAuB,CAAC;YAC5B,IAAI,QAAQ,GAAG,cAAc,CAAC,2BAA2B,CAAC;YAC1D,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CACvC,eAAe,CAAC,eAAe,EAC/B,GAAG,CAAC,KAAK,CAAC,WAAW,EACrB,oBAAoB,EACpB,CAAC,SAAS,EAAE,EAAE;oBACZ,QAAQ;wBACN,SAAS,CAAC,MAAM,EAAE,KAAK;4BACvB,cAAc,CAAC,2BAA2B,CAAC;oBAC7C,sBAAsB,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5D,CAAC,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;oBAC3C,MAAM,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,aAAa,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;YAClE,CAAC;YACD,4DAA4D;YAC5D,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YAChC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;SACD,OAAO,CAAC;QACP,IAAI,EAAE,uBAAuB;QAC7B,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAA+B,CAAC;YACvE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,0DAA0D;YACpE,CAAC;YACD,MAAM,qBAAqB,CACzB,IAAI,EACJ,SAAS,EACT,GAAG,CAAC,GAAG,CAAC,aAAa,CAAmB,EACxC,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,cAAc,CAAC,2BAA2B,CACtE,CAAC;QACJ,CAAC;KACF,CAAC;SACD,OAAO,CAAC;QACP,IAAI,EAAE,oBAAoB;QAC1B,OAAO,CAAC,GAAG;YACT,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACzC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,gCAAgC,CAAC,EAC3C,gCAAgC,CACjC,CAAC;YACJ,CAAC;YACD,gEAAgE;YAChE,kEAAkE;YAClE,uBAAuB;YACvB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAA2B,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;SACD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,qEAAqE;IACrE,mEAAmE;IACnE,iEAAiE;IACjE,OAAO,uBAAuB,CAC5B,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,EACX,MAAM,CAAC,GAAG,CAAC,aAAa,CAAmB,EAC3C,MAAM,CAAC,0BAA0B,EAAE;QACjC,MAAM,EAAE,sBAAsB,CAAC,WAAW;KAC3C,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAC7C,KAAqB,EACrB,QAAwB,EACxB,QAAwB;IAExB,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAC7B,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACjB,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAC7B,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpC,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,6CAA6C;iBACtD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAyB,EACzB,KAAsC,EACtC,MAAc;IAEd,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACnC,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;IACnC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,+DAA+D;QAC/D,2CAA2C;QAC3C,OAAO;IACT,CAAC;IAED,gEAAgE;IAChE,gEAAgE;IAChE,kEAAkE;IAClE,8DAA8D;IAC9D,sEAAsE;IACtE,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC;IACzC,MAAM,iBAAiB,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACpD,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;IAEnC,sEAAsE;IACtE,gEAAgE;IAChE,uEAAuE;IACvE,kEAAkE;IAClE,0BAA0B;IAC1B,iEAAiE;IACjE,uEAAuE;IACvE,4DAA4D;IAC5D,oEAAoE;IACpE,2DAA2D;IAC3D,qEAAqE;IACrE,4DAA4D;IAC5D,oEAAoE;IACpE,gBAAgB;IAChB,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,+BAA+B,CACxD,aAAa,EACb,gBAAgB,EAChB,aAAa,CAAC,QAAQ,CACvB,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CACT,6HAA6H,EAC7H;gBACE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,gBAAgB,EAAE,gBAAgB,CAAC,MAAM;gBACzC,gBAAgB,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM;gBAC/C,MAAM;aACP,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,IAAI,aAAa,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,kBAAkB,GAAG,aAAa,CAAC,kBAAkB,CAAC;IAC/D,CAAC;IACD,mDAAmD;IACnD,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC;IACrC,CAAC;IACD,gEAAgE;IAChE,wDAAwD;IACxD,IAAI,aAAa,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC;IAC7C,CAAC;IACD,sEAAsE;IACtE,gDAAgD;IAChD,IAAI,aAAa,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,mBAAmB,GAAG,aAAa,CAAC,mBAAmB,CAAC;IACjE,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,qEAAqE;IACrE,kCAAkC;IAClC,sBAAsB,CACpB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,kBAAkB,EACzB,gBAAgB,EAChB,iBAAiB,CAClB,CAAC;IAEF,uEAAuE;IACvE,8DAA8D;IAC9D,sEAAsE;IACtE,iEAAiE;IACjE,gEAAgE;IAChE,mEAAmE;IACnE,2DAA2D;IAC3D,sEAAsE;IACtE,SAAS;IACT,IAAI,aAAa,CAAC,KAAK,KAAK,cAAc,CAAC,2BAA2B,EAAE,CAAC;QACvE,IACE,wBAAwB,CAAC,aAAa,CAAC;YACvC,aAAa,CAAC,KAAK,KAAK,aAAa,EACrC,CAAC;YACD,MAAM,CAAC,IAAI,CACT,qHAAqH,EACrH;gBACE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW,EAAE,cAAc,CAAC,aAAa,CAAC;gBAC1C,YAAY,EAAE,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC;aAClD,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,aAAa,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC;IACrC,CAAC;IACD,IAAI,aAAa,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC;IAC7C,CAAC;IACD,IAAI,aAAa,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;IACjD,CAAC;IAED,kEAAkE;IAClE,4DAA4D;IAC5D,mEAAmE;IACnE,uDAAuD;IACvD,sDAAsD;IACtD,IACE,MAAM,CAAC,KAAK,KAAK,cAAc,CAAC,qBAAqB;QACrD,MAAM,CAAC,KAAK,KAAK,cAAc,CAAC,8BAA8B;QAC9D,MAAM,CAAC,KAAK,KAAK,cAAc,CAAC,iBAAiB,EACjD,CAAC;QACD,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED,qEAAqE;IACrE,+DAA+D;IAC/D,oEAAoE;IACpE,kEAAkE;IAClE,wEAAwE;IACxE,oEAAoE;IACpE,sEAAsE;IACtE,yDAAyD;IACzD,IAAI,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC;QACnC,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YACrB,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CACT,6EAA6E,EAC7E;gBACE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC;gBACnC,gBAAgB,EAAE,OAAO;aAC1B,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,mEAAmE;IACnE,qEAAqE;IACrE,wEAAwE;IACxE,6DAA6D;IAC7D,wEAAwE;IACxE,mEAAmE;IACnE,YAAY;IACZ,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAElD,oEAAoE;IACpE,uEAAuE;IACvE,gCAAgC;IAChC,MAAM,CAAC,gBAAgB,GAAG,uBAAuB,CAC/C,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,mBAAmB,EAC1B,MAAM,CACP,CAAC;IAEF,oEAAoE;IACpE,8DAA8D;IAC9D,mEAAmE;IACnE,uBAAuB;IACvB,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAE7D,mEAAmE;IACnE,qEAAqE;IACrE,wEAAwE;IACxE,8DAA8D;IAC9D,2BAA2B,CACzB,MAAM,EACN,KAAK,CAAC,WAAW,EACjB,SAAS,CAAC,IAAI,EAAE,cAAc,IAAI,KAAK,EACvC,MAAM,CACP,CAAC;IAEF,wEAAwE;IACxE,kEAAkE;IAClE,SAAS;IACT,MAAM,CAAC,cAAc,GAAG,qBAAqB,CAC3C,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,qBAAqB,CAC7B,CAAC;IAEF,iEAAiE;IACjE,oEAAoE;IACpE,uEAAuE;IACvE,0DAA0D;IAC1D,IAAI,aAAa,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,CAAC,kBAAkB,GAAG,aAAa,CAAC,kBAAkB,CAAC;IAC/D,CAAC;IACD,MAAM,CAAC,kBAAkB,GAAG,2BAA2B,CACrD,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,kBAAkB,CAC1B,CAAC;IAEF,8DAA8D;IAC9D,kEAAkE;IAClE,IAAI,aAAa,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,CAAC,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC;IACvD,CAAC;IAED,qEAAqE;IACrE,wEAAwE;IACxE,qEAAqE;IACrE,uCAAuC;IACvC,IAAI,aAAa,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QACvD,MAAM,CAAC,sBAAsB,GAAG,aAAa,CAAC,sBAAsB,CAAC;IACvE,CAAC;IAED,IAAI,aAAa,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,CAAC,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;IACjD,CAAC;IAED,IAAI,aAAa,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;IACrD,CAAC;IACD,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,aAAa;IACb,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc,CAAC,iBAAiB,EAAE,CAAC;QACtD,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC;IACnC,CAAC;IAED,qEAAqE;IACrE,sEAAsE;IACtE,cAAc;IACd,IAAI,aAAa,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjD,MAAM,CAAC,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;IAC3D,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;QACnC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QACrC,qBAAqB,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM;KACtD,CAAC,CAAC;AACL,CAAC"}