@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/workflowinstance/controller.js

@@ -0,0 +1,387 @@
+import { create, fromBinary } from "@bufbuild/protobuf";
+import { WorkflowInstanceSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/api_pb";
+import { WorkflowInstanceCommandController } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/command_pb";
+import { WorkflowInstanceQueryController } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/query_pb";
+import { WorkflowInstanceSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/spec_pb";
+import { WorkflowInstanceListSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/io_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { restrictListByReadScope } from "../../extensions/list-read-scope.js";
+import { apiResourceKindKey } from "../../pipeline/interceptors/apiresource.js";
+import { internalError, notFoundError } from "../../pipeline/errors.js";
+import { newPipeline } from "../../pipeline/pipeline.js";
+import { callerIdentityOf } from "../../pipeline/interceptors/auth.js";
+import { RequestContext } from "../../pipeline/request-context.js";
+import { newAuthorizeStep } from "../../pipeline/steps/authorize.js";
+import { newGuardReservedLabelsStep } from "../../pipeline/steps/guard-reserved-labels.js";
+import { newAuthorizeVisibilityTransitionStep, newGuardPublicVisibilityStep, } from "../../pipeline/steps/visibility-gates.js";
+import { newBuildNewStateStep, setAuditFieldsForUpdate, } from "../../pipeline/steps/defaults.js";
+import { newBuildUpdateStateStep } from "../../pipeline/steps/build-update-state.js";
+import { newCheckDuplicateStep } from "../../pipeline/steps/duplicate.js";
+import { newDeleteResourceStep, newExtractResourceIdStep, newLoadExistingForDeleteStep, } from "../../pipeline/steps/delete.js";
+import { newDeleteSearchIndexStep, newIndexSearchStep, } from "../../pipeline/steps/index-search.js";
+import { EXISTING_RESOURCE_KEY, newLoadExistingStep, } from "../../pipeline/steps/load-existing.js";
+import { SHOULD_CREATE_KEY, newLoadForApplyStep, withResolvedApplyId, } from "../../pipeline/steps/load-for-apply.js";
+import { newLoadByReferenceStep } from "../../pipeline/steps/load-by-reference.js";
+import { TARGET_RESOURCE_KEY, newLoadTargetStep, } from "../../pipeline/steps/load-target.js";
+import { newNormalizeReferencesStep } from "../../pipeline/steps/references.js";
+import { newCleanupIamPoliciesStep, newCreateAuthorizationTuplesStep, newRecordVisibilityBeforeUpdateStep, newUpdateVisibilityTuplesStep, } from "../../pipeline/steps/authorization-tuples.js";
+import { newPersistStep } from "../../pipeline/steps/persist.js";
+import { newResolveSlugStep } from "../../pipeline/steps/slug.js";
+import { newValidateProtoStep } from "../../pipeline/steps/validation.js";
+import { newValidateVisibilityStep, newValidateVisibilityUpdateStep, } from "../../pipeline/steps/validate-visibility.js";
+import { workflowInstanceSearchExtractor } from "./search-extractor.js";
+import { newLoadParentWorkflowStep, newRejectDefaultWorkflowInstanceVisibilityUpdateStep, newValidateInstanceUpdateStep, newValidateSameOrgBusinessRuleStep, } from "./steps.js";
+/** Registers both workflowinstance services on the router (routes stage). */
+export function registerWorkflowInstanceServices(router, deps) {
+    router.service(WorkflowInstanceCommandController, {
+        apply: (instance, ctx) => apply(deps, instance, ctx),
+        create: (instance, ctx) => createInstance(deps, instance, ctx),
+        update: (instance, ctx) => update(deps, instance, ctx),
+        updateVisibility: (input, ctx) => updateVisibility(deps, input, ctx),
+        updateExecutionVisibility: (input, ctx) => updateExecutionVisibility(deps, input, ctx),
+        delete: (id, ctx) => deleteInstance(deps, id, ctx),
+    });
+    router.service(WorkflowInstanceQueryController, {
+        get: (id, ctx) => get(deps, id, ctx),
+        getByReference: (ref, ctx) => getByReference(deps, ref, ctx),
+        getByWorkflow: (req, ctx) => getByWorkflow(deps, req, ctx),
+    });
+}
+function kindOf(ctx) {
+    return ctx.values.get(apiResourceKindKey);
+}
+// ---------------------------------------------------------------------------
+// Command side
+// ---------------------------------------------------------------------------
+/** Create — chain per Go buildCreatePipeline (9 steps). */
+async function createInstance(deps, instance, ctx) {
+    const reqCtx = new RequestContext(WorkflowInstanceSchema, instance, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("workflow-instance-create", deps.logger)
+        .addStep(newAuthorizeStep(WorkflowInstanceCommandController.method.create, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newValidateVisibilityStep())
+        .addStep(newResolveSlugStep())
+        .addStep(newLoadParentWorkflowStep(deps.parentWorkflowLoader, deps.logger))
+        .addStep(newValidateSameOrgBusinessRuleStep(deps.logger))
+        .addStep(newCheckDuplicateStep(deps.store))
+        .addStep(newBuildNewStateStep())
+        .addStep(newGuardPublicVisibilityStep(deps.authorizer))
+        .addStep(newGuardReservedLabelsStep(deps.authorizer))
+        .addStep(newNormalizeReferencesStep())
+        .addStep(newPersistStep(deps.store))
+        .addStep(newCreateAuthorizationTuplesStep(deps.authorizationLifecycle, deps.logger))
+        .addStep(newIndexSearchStep(deps.store, workflowInstanceSearchExtractor, deps.logger))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.newState;
+}
+/** Update — chain per Go buildUpdatePipeline (#646 immutability guard). */
+async function update(deps, instance, ctx) {
+    const reqCtx = new RequestContext(WorkflowInstanceSchema, instance, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("workflow-instance-update", deps.logger)
+        .addStep(newAuthorizeStep(WorkflowInstanceCommandController.method.update, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newResolveSlugStep())
+        .addStep(newLoadExistingStep(deps.store))
+        .addStep(newValidateInstanceUpdateStep())
+        .addStep(newBuildUpdateStateStep())
+        .addStep(newGuardReservedLabelsStep(deps.authorizer))
+        .addStep(newNormalizeReferencesStep())
+        .addStep(newPersistStep(deps.store))
+        .addStep(newIndexSearchStep(deps.store, workflowInstanceSearchExtractor, deps.logger))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.newState;
+}
+/**
+ * Apply — kubectl-style create-or-update, delegating the ORIGINAL request;
+ * the update arm carries the resolved id via withResolvedApplyId.
+ */
+async function apply(deps, instance, ctx) {
+    const reqCtx = new RequestContext(WorkflowInstanceSchema, instance, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("workflow-instance-apply", deps.logger)
+        .addStep(newAuthorizeStep(WorkflowInstanceCommandController.method.apply, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newResolveSlugStep())
+        .addStep(newLoadForApplyStep(deps.store))
+        .build()
+        .execute(reqCtx);
+    const shouldCreate = reqCtx.get(SHOULD_CREATE_KEY);
+    if (typeof shouldCreate !== "boolean") {
+        throw internalError(new Error("apply pipeline did not set shouldCreate flag"), "apply operation failed to determine create vs update");
+    }
+    return shouldCreate
+        ? createInstance(deps, instance, ctx)
+        : update(deps, withResolvedApplyId(WorkflowInstanceSchema, instance, reqCtx), ctx);
+}
+/**
+ * Delete — NO execution cascade (oss#582: run history survives its
+ * instance; executions carry a denormalized workflow_id and remain
+ * viewable). Returns the deleted instance.
+ */
+async function deleteInstance(deps, instanceId, ctx) {
+    const reqCtx = new RequestContext(WorkflowInstanceCommandController.method.delete.input, instanceId, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("workflow-instance-delete", deps.logger)
+        .addStep(newAuthorizeStep(WorkflowInstanceCommandController.method.delete, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newExtractResourceIdStep())
+        .addStep(newLoadExistingForDeleteStep(deps.store, WorkflowInstanceSchema))
+        .addStep(newDeleteResourceStep(deps.store))
+        .addStep(newCleanupIamPoliciesStep(deps.authorizationLifecycle, deps.logger))
+        .addStep(newDeleteSearchIndexStep(deps.store, deps.logger))
+        .build()
+        .execute(reqCtx);
+    const deleted = reqCtx.get(EXISTING_RESOURCE_KEY);
+    if (deleted === undefined) {
+        throw internalError(new Error("deleted workflow instance not found in context"), "deleted workflow instance not found in context");
+    }
+    return deleted;
+}
+// ---------------------------------------------------------------------------
+// updateVisibility — update_visibility.go: targeted metadata update with
+// the default-instance guard FIRST (FAILED_PRECONDITION wins over the
+// level check, as in Cloud), then the level check (after load: NOT_FOUND
+// wins, as in Cloud).
+// ---------------------------------------------------------------------------
+const UPDATE_VISIBILITY_INSTANCE_KEY = "updateVisibilityInstance";
+async function updateVisibility(deps, input, ctx) {
+    const reqCtx = new RequestContext(WorkflowInstanceCommandController.method.updateVisibility.input, input, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("workflow-instance-update-visibility", deps.logger)
+        .addStep(newAuthorizeStep(WorkflowInstanceCommandController.method.updateVisibility, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadInstanceStep(deps.store, UPDATE_VISIBILITY_INSTANCE_KEY, "LoadInstanceForVisibilityUpdate", (c) => c.input.resourceId))
+        .addStep(newRecordVisibilityBeforeUpdateStep(UPDATE_VISIBILITY_INSTANCE_KEY))
+        .addStep(newRejectDefaultWorkflowInstanceVisibilityUpdateStep(deps.store, UPDATE_VISIBILITY_INSTANCE_KEY))
+        .addStep(newValidateVisibilityUpdateStep())
+        .addStep(newAuthorizeVisibilityTransitionStep(UPDATE_VISIBILITY_INSTANCE_KEY, deps.authorizer))
+        .addStep(newSetInstanceVisibilityStep())
+        .addStep(newPersistInstanceStep(deps.store, UPDATE_VISIBILITY_INSTANCE_KEY, "PersistInstanceForVisibilityUpdate"))
+        .addStep(newUpdateVisibilityTuplesStep(deps.authorizationLifecycle, UPDATE_VISIBILITY_INSTANCE_KEY))
+        .addStep(newIndexInstanceStep(deps.store, deps.logger, UPDATE_VISIBILITY_INSTANCE_KEY, "IndexInstanceAfterVisibilityUpdate"))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(UPDATE_VISIBILITY_INSTANCE_KEY);
+}
+/** Sets metadata.visibility and refreshes the status-audit fields. */
+function newSetInstanceVisibilityStep() {
+    return {
+        name: "SetInstanceVisibility",
+        execute(ctx) {
+            const input = ctx.input;
+            const instance = ctx.get(UPDATE_VISIBILITY_INSTANCE_KEY);
+            instance.metadata.visibility = input.visibility;
+            try {
+                setAuditFieldsForUpdate(WorkflowInstanceSchema, instance, "status_audit", ctx.callerIdentity);
+            }
+            catch (error) {
+                throw new Error(`failed to set audit fields: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            ctx.set(UPDATE_VISIBILITY_INSTANCE_KEY, instance);
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// updateExecutionVisibility — update_execution_visibility.go: a targeted
+// spec update (only spec.execution_visibility changes). In this edition
+// there is a single local user and no fine-grained authorization engine,
+// so run observability has no multi-user effect: the setting persists
+// faithfully (the shared web/desktop UI reads it back) with no
+// authorization tuples. Deliberately NOT guarded for default instances —
+// cloud allows it on them too; do not "fix" that.
+// ---------------------------------------------------------------------------
+const UPDATE_EXECUTION_VISIBILITY_INSTANCE_KEY = "updateExecutionVisibilityInstance";
+async function updateExecutionVisibility(deps, input, ctx) {
+    const reqCtx = new RequestContext(WorkflowInstanceCommandController.method.updateExecutionVisibility.input, input, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("workflow-instance-update-execution-visibility", deps.logger)
+        .addStep(newAuthorizeStep(WorkflowInstanceCommandController.method.updateExecutionVisibility, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadInstanceStep(deps.store, UPDATE_EXECUTION_VISIBILITY_INSTANCE_KEY, "LoadInstanceForExecutionVisibilityUpdate", (c) => c.input.resourceId))
+        .addStep(newSetInstanceExecutionVisibilityStep())
+        .addStep(newPersistInstanceStep(deps.store, UPDATE_EXECUTION_VISIBILITY_INSTANCE_KEY, "PersistInstanceForExecutionVisibilityUpdate"))
+        .addStep(newIndexInstanceStep(deps.store, deps.logger, UPDATE_EXECUTION_VISIBILITY_INSTANCE_KEY, "IndexInstanceAfterExecutionVisibilityUpdate"))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(UPDATE_EXECUTION_VISIBILITY_INSTANCE_KEY);
+}
+/** Sets spec.execution_visibility and refreshes the status-audit fields. */
+function newSetInstanceExecutionVisibilityStep() {
+    return {
+        name: "SetInstanceExecutionVisibility",
+        execute(ctx) {
+            const input = ctx.input;
+            const instance = ctx.get(UPDATE_EXECUTION_VISIBILITY_INSTANCE_KEY);
+            instance.spec ??= create(WorkflowInstanceSpecSchema);
+            instance.spec.executionVisibility = input.executionVisibility;
+            try {
+                setAuditFieldsForUpdate(WorkflowInstanceSchema, instance, "status_audit", ctx.callerIdentity);
+            }
+            catch (error) {
+                throw new Error(`failed to set audit fields: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            ctx.set(UPDATE_EXECUTION_VISIBILITY_INSTANCE_KEY, instance);
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// Shared targeted-update plumbing (the load/persist/index trio both
+// targeted updates use; Go duplicates these per pipeline — one generic
+// definition per concern suffices here since the bodies are identical).
+// ---------------------------------------------------------------------------
+/**
+ * Loads the instance by resource_id; ANY load failure → NotFound. The
+ * accessor keeps the input shape compiler-checked (both targeted-update
+ * inputs carry resource_id, but the compiler should prove it, not a cast).
+ */
+function newLoadInstanceStep(store, instanceKey, stepName, resourceIdOf) {
+    return {
+        name: stepName,
+        async execute(ctx) {
+            const resourceId = resourceIdOf(ctx);
+            let instance;
+            try {
+                instance = await store.getResource(ApiResourceKind.workflow_instance, resourceId, WorkflowInstanceSchema);
+            }
+            catch {
+                throw notFoundError("workflow instance", resourceId);
+            }
+            ctx.set(instanceKey, instance);
+        },
+    };
+}
+function newPersistInstanceStep(store, instanceKey, stepName) {
+    return {
+        name: stepName,
+        async execute(ctx) {
+            const instance = ctx.get(instanceKey);
+            try {
+                await store.saveResource(ApiResourceKind.workflow_instance, instance.metadata?.id ?? "", WorkflowInstanceSchema, instance);
+            }
+            catch (error) {
+                throw internalError(error, "failed to save workflow instance");
+            }
+        },
+    };
+}
+/** Best-effort reindex after a targeted update (Go warns, never fails). */
+function newIndexInstanceStep(store, logger, instanceKey, stepName) {
+    return {
+        name: stepName,
+        async execute(ctx) {
+            const instance = ctx.get(instanceKey);
+            const entry = workflowInstanceSearchExtractor.getSearchIndexEntry(instance);
+            if (entry === undefined) {
+                logger.warn(`${stepName}: extractor returned nil, skipping`, {
+                    id: instance.metadata?.id ?? "",
+                });
+                return;
+            }
+            try {
+                await store.upsertSearchIndex(ApiResourceKind.workflow_instance, instance.metadata?.id ?? "", entry);
+            }
+            catch (error) {
+                logger.warn(`${stepName}: failed (best-effort)`, {
+                    error: error instanceof Error ? error.message : String(error),
+                    id: instance.metadata?.id ?? "",
+                });
+            }
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// Query side
+// ---------------------------------------------------------------------------
+async function get(deps, instanceId, ctx) {
+    const reqCtx = new RequestContext(WorkflowInstanceQueryController.method.get.input, instanceId, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("workflow-instance-get", deps.logger)
+        .addStep(newAuthorizeStep(WorkflowInstanceQueryController.method.get, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadTargetStep(deps.store, WorkflowInstanceSchema))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+async function getByReference(deps, ref, ctx) {
+    const reqCtx = new RequestContext(WorkflowInstanceQueryController.method.getByReference.input, ref, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("workflow-instance-get-by-reference", deps.logger)
+        .addStep(newAuthorizeStep(WorkflowInstanceQueryController.method.getByReference, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadByReferenceStep(deps.store, WorkflowInstanceSchema))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+/**
+ * getByWorkflow — query.go: all instances of a workflow (the
+ * auto-provisioned default included), filtered in-memory by
+ * spec.workflow_id and — when the request carries one — by metadata.org
+ * (a multi-org caller asking for one org's instances must not see another
+ * org's instances of the same workflow). Cloud runs a combined
+ * MongoDB/authorized-ids query; the in-memory sweep is this edition's
+ * documented posture.
+ */
+const WORKFLOW_INSTANCE_LIST_KEY = "workflow_instance_list";
+async function getByWorkflow(deps, request, ctx) {
+    const reqCtx = new RequestContext(WorkflowInstanceQueryController.method.getByWorkflow.input, request, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("workflow-instance-get-by-workflow", deps.logger)
+        .addStep(newAuthorizeStep(WorkflowInstanceQueryController.method.getByWorkflow, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadByWorkflowStep(deps.store, deps.logger, deps.listReadScope))
+        .build()
+        .execute(reqCtx);
+    const list = reqCtx.get(WORKFLOW_INSTANCE_LIST_KEY);
+    if (list === undefined) {
+        return create(WorkflowInstanceListSchema);
+    }
+    return list;
+}
+function newLoadByWorkflowStep(store, logger, listReadScope) {
+    return {
+        name: "LoadByWorkflow",
+        async execute(ctx) {
+            const request = ctx.input;
+            const workflowId = request.workflowId;
+            let rows;
+            try {
+                rows = await store.listResources(ctx.apiResourceKind);
+            }
+            catch (error) {
+                logger.error("failed to list workflow instances", {
+                    error: error instanceof Error ? error.message : String(error),
+                    workflowId,
+                });
+                throw internalError(error, "failed to list workflow instances");
+            }
+            const decoded = [];
+            for (const data of rows) {
+                try {
+                    decoded.push(fromBinary(WorkflowInstanceSchema, data));
+                }
+                catch (error) {
+                    logger.warn("failed to unmarshal workflow instance, skipping", {
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    continue;
+                }
+            }
+            // 20260830.01 census lane 20: the scope narrows the decoded scan;
+            // the org/workflow filters below are contract parity in both editions.
+            const visible = await restrictListByReadScope(listReadScope, ctx.callerIdentity, ApiResourceKind.workflow_instance, decoded, "");
+            const filtered = [];
+            for (const instance of visible) {
+                if (instance.spec?.workflowId !== workflowId) {
+                    continue;
+                }
+                if (request.org !== "" && instance.metadata?.org !== request.org) {
+                    continue;
+                }
+                filtered.push(instance);
+            }
+            logger.info("found workflow instances for workflow", {
+                workflowId,
+                count: filtered.length,
+            });
+            ctx.set(WORKFLOW_INSTANCE_LIST_KEY, create(WorkflowInstanceListSchema, { entries: filtered }));
+        },
+    };
+}
+//# sourceMappingURL=controller.js.map

package/dist/domain/workflowinstance/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../src/domain/workflowinstance/controller.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+DAA+D,CAAC;AAEvG,OAAO,EAAE,iCAAiC,EAAE,MAAM,mEAAmE,CAAC;AACtH,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAKlH,OAAO,EAAE,0BAA0B,EAAE,MAAM,gEAAgE,CAAC;AAC5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,8DAA8D,CAAC;AAK1G,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAStH,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EACL,oCAAoC,EACpC,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AACnF,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EACL,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EACL,yBAAyB,EACzB,oDAAoD,EACpD,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,YAAY,CAAC;AAmBpB,6EAA6E;AAC7E,MAAM,UAAU,gCAAgC,CAC9C,MAAqB,EACrB,IAAoC;IAEpC,MAAM,CAAC,OAAO,CAAC,iCAAiC,EAAE;QAChD,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC;QACpD,MAAM,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC;QAC9D,MAAM,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC;QACtD,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QACpE,yBAAyB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CACxC,yBAAyB,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QAC7C,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;KACnD,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,CAAC,+BAA+B,EAAE;QAC9C,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;QACpC,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QAC5D,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,GAAmB;IACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,2DAA2D;AAC3D,KAAK,UAAU,cAAc,CAC3B,IAAoC,EACpC,QAA0B,EAC1B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,sBAAsB,EACtB,QAAQ,EACR,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,0BAA0B,EAC1B,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,iCAAiC,CAAC,MAAM,CAAC,MAAM,EAC/C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,yBAAyB,EAAE,CAAC;SACpC,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,yBAAyB,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC1E,OAAO,CAAC,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACxD,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC1C,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACtD,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACpD,OAAO,CAAC,0BAA0B,EAAE,CAAC;SACrC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACnC,OAAO,CACN,gCAAgC,CAC9B,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,MAAM,CACZ,CACF;SACA,OAAO,CACN,kBAAkB,CAChB,IAAI,CAAC,KAAK,EACV,+BAA+B,EAC/B,IAAI,CAAC,MAAM,CACZ,CACF;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,MAAM,CACnB,IAAoC,EACpC,QAA0B,EAC1B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,sBAAsB,EACtB,QAAQ,EACR,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,0BAA0B,EAC1B,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,iCAAiC,CAAC,MAAM,CAAC,MAAM,EAC/C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACxC,OAAO,CAAC,6BAA6B,EAAE,CAAC;SACxC,OAAO,CAAC,uBAAuB,EAAE,CAAC;SAClC,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACpD,OAAO,CAAC,0BAA0B,EAAE,CAAC;SACrC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACnC,OAAO,CACN,kBAAkB,CAChB,IAAI,CAAC,KAAK,EACV,+BAA+B,EAC/B,IAAI,CAAC,MAAM,CACZ,CACF;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,KAAK,CAClB,IAAoC,EACpC,QAA0B,EAC1B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,sBAAsB,EACtB,QAAQ,EACR,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,yBAAyB,EACzB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,iCAAiC,CAAC,MAAM,CAAC,KAAK,EAC9C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACxC,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,OAAO,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,8CAA8C,CAAC,EACzD,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,YAAY;QACjB,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC;QACrC,CAAC,CAAC,MAAM,CACJ,IAAI,EACJ,mBAAmB,CAAC,sBAAsB,EAAE,QAAQ,EAAE,MAAM,CAAC,EAC7D,GAAG,CACJ,CAAC;AACR,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAoC,EACpC,UAA8B,EAC9B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,iCAAiC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EACrD,UAAU,EACV,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAEf,0BAA0B,EAAE,IAAI,CAAC,MAAM,CAAC;SACvC,OAAO,CACN,gBAAgB,CACd,iCAAiC,CAAC,MAAM,CAAC,MAAM,EAC/C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,wBAAwB,EAAE,CAAC;SACnC,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;SACzE,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC1C,OAAO,CACN,yBAAyB,CAAC,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,MAAM,CAAC,CACpE;SACA,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC1D,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,gDAAgD,CAAC,EAC3D,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,OAAO,OAA2B,CAAC;AACrC,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,sEAAsE;AACtE,yEAAyE;AACzE,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,8BAA8B,GAAG,0BAA0B,CAAC;AAKlE,KAAK,UAAU,gBAAgB,CAC7B,IAAoC,EACpC,KAA4B,EAC5B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,iCAAiC,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAC/D,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,qCAAqC,EACrC,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,iCAAiC,CAAC,MAAM,CAAC,gBAAgB,EACzD,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CACN,mBAAmB,CACjB,IAAI,CAAC,KAAK,EACV,8BAA8B,EAC9B,iCAAiC,EACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAC1B,CACF;SACA,OAAO,CACN,mCAAmC,CAAC,8BAA8B,CAAC,CACpE;SACA,OAAO,CACN,oDAAoD,CAClD,IAAI,CAAC,KAAK,EACV,8BAA8B,CAC/B,CACF;SACA,OAAO,CAAC,+BAA+B,EAAE,CAAC;SAC1C,OAAO,CACN,oCAAoC,CAClC,8BAA8B,EAC9B,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,4BAA4B,EAAE,CAAC;SACvC,OAAO,CACN,sBAAsB,CACpB,IAAI,CAAC,KAAK,EACV,8BAA8B,EAC9B,oCAAoC,CACrC,CACF;SACA,OAAO,CACN,6BAA6B,CAC3B,IAAI,CAAC,sBAAsB,EAC3B,8BAA8B,CAC/B,CACF;SACA,OAAO,CACN,oBAAoB,CAClB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,MAAM,EACX,8BAA8B,EAC9B,oCAAoC,CACrC,CACF;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,OAAO,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAqB,CAAC;AACxE,CAAC;AAED,sEAAsE;AACtE,SAAS,4BAA4B;IACnC,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,OAAO,CAAC,GAAyC;YAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CACtB,8BAA8B,CACX,CAAC;YAEtB,QAAQ,CAAC,QAAS,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;YAEjD,IAAI,CAAC;gBACH,uBAAuB,CACrB,sBAAsB,EACtB,QAAQ,EACR,cAAc,EACd,GAAG,CAAC,cAAc,CACnB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;YACJ,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,wEAAwE;AACxE,yEAAyE;AACzE,sEAAsE;AACtE,+DAA+D;AAC/D,yEAAyE;AACzE,kDAAkD;AAClD,8EAA8E;AAE9E,MAAM,wCAAwC,GAC5C,mCAAmC,CAAC;AAKtC,KAAK,UAAU,yBAAyB,CACtC,IAAoC,EACpC,KAAqC,EACrC,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,iCAAiC,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,EACxE,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,+CAA+C,EAC/C,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,iCAAiC,CAAC,MAAM,CAAC,yBAAyB,EAClE,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CACN,mBAAmB,CACjB,IAAI,CAAC,KAAK,EACV,wCAAwC,EACxC,0CAA0C,EAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAC1B,CACF;SACA,OAAO,CAAC,qCAAqC,EAAE,CAAC;SAChD,OAAO,CACN,sBAAsB,CACpB,IAAI,CAAC,KAAK,EACV,wCAAwC,EACxC,6CAA6C,CAC9C,CACF;SACA,OAAO,CACN,oBAAoB,CAClB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,MAAM,EACX,wCAAwC,EACxC,6CAA6C,CAC9C,CACF;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,OAAO,MAAM,CAAC,GAAG,CACf,wCAAwC,CACrB,CAAC;AACxB,CAAC;AAED,4EAA4E;AAC5E,SAAS,qCAAqC;IAC5C,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,OAAO,CAAC,GAAkD;YACxD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CACtB,wCAAwC,CACrB,CAAC;YAEtB,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;YAE9D,IAAI,CAAC;gBACH,uBAAuB,CACrB,sBAAsB,EACtB,QAAQ,EACR,cAAc,EACd,GAAG,CAAC,cAAc,CACnB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;YACJ,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,wCAAwC,EAAE,QAAQ,CAAC,CAAC;QAC9D,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oEAAoE;AACpE,uEAAuE;AACvE,wEAAwE;AACxE,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,KAAY,EACZ,WAAmB,EACnB,QAAgB,EAChB,YAAmD;IAEnD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,QAA0B,CAAC;YAC/B,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAChC,eAAe,CAAC,iBAAiB,EACjC,UAAU,EACV,sBAAsB,CACvB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,aAAa,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;YACvD,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAY,EACZ,WAAmB,EACnB,QAAgB;IAEhB,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAqB,CAAC;YAC1D,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,CACtB,eAAe,CAAC,iBAAiB,EACjC,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAC3B,sBAAsB,EACtB,QAAQ,CACT,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,oBAAoB,CAC3B,KAAY,EACZ,MAAc,EACd,WAAmB,EACnB,QAAgB;IAEhB,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAqB,CAAC;YAC1D,MAAM,KAAK,GACT,+BAA+B,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,oCAAoC,EAAE;oBAC3D,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;iBAChC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,iBAAiB,CAC3B,eAAe,CAAC,iBAAiB,EACjC,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAC3B,KAAK,CACN,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,wBAAwB,EAAE;oBAC/C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC7D,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,KAAK,UAAU,GAAG,CAChB,IAAoC,EACpC,UAA8B,EAC9B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,+BAA+B,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAChD,UAAU,EACV,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,uBAAuB,EACvB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,+BAA+B,CAAC,MAAM,CAAC,GAAG,EAC1C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;SAC9D,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAqB,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAoC,EACpC,GAAyB,EACzB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,+BAA+B,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EAC3D,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAEf,oCAAoC,EAAE,IAAI,CAAC,MAAM,CAAC;SACjD,OAAO,CACN,gBAAgB,CACd,+BAA+B,CAAC,MAAM,CAAC,cAAc,EACrD,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;SACnE,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAqB,CAAC;AAC7D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAK5D,KAAK,UAAU,aAAa,CAC1B,IAAoC,EACpC,OAA8C,EAC9C,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,+BAA+B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAC1D,OAAO,EACP,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,mCAAmC,EACnC,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,+BAA+B,CAAC,MAAM,CAAC,aAAa,EACpD,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CACN,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CACnE;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAA4B,CAAC;AACtC,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAY,EACZ,MAAc,EACd,aAAwC;IAExC,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,KAAK,CAAC,OAAO,CAAC,GAAsC;YAClD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;YAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAEtC,IAAI,IAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;oBAChD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC7D,UAAU;iBACX,CAAC,CAAC;gBACH,MAAM,aAAa,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,OAAO,GAAuB,EAAE,CAAC;YACvC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC,CAAC;gBACzD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;wBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;YACH,CAAC;YACD,kEAAkE;YAClE,uEAAuE;YACvE,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAC3C,aAAa,EACb,GAAG,CAAC,cAAc,EAClB,eAAe,CAAC,iBAAiB,EACjC,OAAO,EACP,EAAE,CACH,CAAC;YAEF,MAAM,QAAQ,GAAuB,EAAE,CAAC;YACxC,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;gBAC/B,IAAI,QAAQ,CAAC,IAAI,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;oBAC7C,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,CAAC,GAAG,KAAK,EAAE,IAAI,QAAQ,CAAC,QAAQ,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;oBACjE,SAAS;gBACX,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;gBACnD,UAAU;gBACV,KAAK,EAAE,QAAQ,CAAC,MAAM;aACvB,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,CACL,0BAA0B,EAC1B,MAAM,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAC1D,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domain/workflowinstance/defaultinstance.d.ts

@@ -0,0 +1,23 @@
+import type { WorkflowInstance } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/api_pb";
+import type { ApiResourceMetadata } from "@stigmer/protos/ai/stigmer/commons/apiresource/metadata_pb";
+/**
+ * The deterministic slug of a workflow's default instance
+ * (<workflow-slug>-default) — the single source of the naming convention,
+ * used by workflow create and by workflow-execution create's self-heal
+ * lookup when a legacy workflow lacks status.default_instance_id.
+ */
+export declare function defaultWorkflowInstanceSlug(workflowSlug: string): string;
+/**
+ * Builds the WorkflowInstance proto for a default-instance creation request
+ * from the parent workflow's metadata. Callers hand it to the
+ * workflowinstance in-process client (createAsSystem), which owns
+ * persistence and validation.
+ *
+ * Takes the metadata rather than loose strings for the same reason as the
+ * agentinstance twin: the instance is named from the workflow's SLUG (the
+ * identity defaultWorkflowInstanceSlug reconstructs for fallback lookups),
+ * never the free-form display name — reading it at this single source makes
+ * the wrong-field mistake unwritable (oss#355).
+ */
+export declare function buildDefaultWorkflowInstanceRequest(workflow: ApiResourceMetadata): WorkflowInstance;
+//# sourceMappingURL=defaultinstance.d.ts.map

package/dist/domain/workflowinstance/defaultinstance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultinstance.d.ts","sourceRoot":"","sources":["../../../src/domain/workflowinstance/defaultinstance.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+DAA+D,CAAC;AACtG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AActG;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAExE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,mBAAmB,GAC5B,gBAAgB,CAiBlB"}

package/dist/domain/workflowinstance/defaultinstance.js

@@ -0,0 +1,58 @@
+/**
+ * Default-instance factory — ports
+ * pkg/domain/workflowinstance/defaultinstance: the canonical
+ * WorkflowInstance request for per-workflow default instances, the workflow
+ * twin of the agentinstance defaultinstance module and the OSS twin of the
+ * cloud edition's DefaultWorkflowInstanceFactory. See the agentinstance
+ * twin's header for the full rationale (naming single-sourcing, no
+ * visibility of their own, reserved-label markers vs the authoritative
+ * status.default_instance_id pointer); the two modules must stay in
+ * lockstep.
+ */
+import { create } from "@bufbuild/protobuf";
+import { WorkflowInstanceSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/api_pb";
+import { DEFAULT_INSTANCE_LABEL, RESERVED_LABEL_TRUE, SYSTEM_MANAGED_LABEL, } from "../../pipeline/apiresource-labels.js";
+const API_VERSION = "agentic.stigmer.ai/v1";
+const KIND = "WorkflowInstance";
+const SLUG_SUFFIX = "-default";
+const DESCRIPTION = "Default instance (auto-created, no custom configuration)";
+/**
+ * The deterministic slug of a workflow's default instance
+ * (<workflow-slug>-default) — the single source of the naming convention,
+ * used by workflow create and by workflow-execution create's self-heal
+ * lookup when a legacy workflow lacks status.default_instance_id.
+ */
+export function defaultWorkflowInstanceSlug(workflowSlug) {
+    return workflowSlug + SLUG_SUFFIX;
+}
+/**
+ * Builds the WorkflowInstance proto for a default-instance creation request
+ * from the parent workflow's metadata. Callers hand it to the
+ * workflowinstance in-process client (createAsSystem), which owns
+ * persistence and validation.
+ *
+ * Takes the metadata rather than loose strings for the same reason as the
+ * agentinstance twin: the instance is named from the workflow's SLUG (the
+ * identity defaultWorkflowInstanceSlug reconstructs for fallback lookups),
+ * never the free-form display name — reading it at this single source makes
+ * the wrong-field mistake unwritable (oss#355).
+ */
+export function buildDefaultWorkflowInstanceRequest(workflow) {
+    return create(WorkflowInstanceSchema, {
+        apiVersion: API_VERSION,
+        kind: KIND,
+        metadata: {
+            name: defaultWorkflowInstanceSlug(workflow.slug),
+            org: workflow.org,
+            labels: {
+                [DEFAULT_INSTANCE_LABEL]: RESERVED_LABEL_TRUE,
+                [SYSTEM_MANAGED_LABEL]: RESERVED_LABEL_TRUE,
+            },
+        },
+        spec: {
+            workflowId: workflow.id,
+            description: DESCRIPTION,
+        },
+    });
+}
+//# sourceMappingURL=defaultinstance.js.map

package/dist/domain/workflowinstance/defaultinstance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultinstance.js","sourceRoot":"","sources":["../../../src/domain/workflowinstance/defaultinstance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,+DAA+D,CAAC;AAIvG,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,sCAAsC,CAAC;AAE9C,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAC5C,MAAM,IAAI,GAAG,kBAAkB,CAAC;AAEhC,MAAM,WAAW,GAAG,UAAU,CAAC;AAC/B,MAAM,WAAW,GAAG,0DAA0D,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,YAAoB;IAC9D,OAAO,YAAY,GAAG,WAAW,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mCAAmC,CACjD,QAA6B;IAE7B,OAAO,MAAM,CAAC,sBAAsB,EAAE;QACpC,UAAU,EAAE,WAAW;QACvB,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE;YACR,IAAI,EAAE,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC;YAChD,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,MAAM,EAAE;gBACN,CAAC,sBAAsB,CAAC,EAAE,mBAAmB;gBAC7C,CAAC,oBAAoB,CAAC,EAAE,mBAAmB;aAC5C;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,WAAW,EAAE,WAAW;SACzB;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/domain/workflowinstance/search-extractor.d.ts

@@ -0,0 +1,3 @@
+import type { SearchableExtractor } from "../../query/search/extractor.js";
+export declare const workflowInstanceSearchExtractor: SearchableExtractor;
+//# sourceMappingURL=search-extractor.d.ts.map

package/dist/domain/workflowinstance/search-extractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-extractor.d.ts","sourceRoot":"","sources":["../../../src/domain/workflowinstance/search-extractor.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,eAAO,MAAM,+BAA+B,EAAE,mBA2C7C,CAAC"}

package/dist/domain/workflowinstance/search-extractor.js

@@ -0,0 +1,44 @@
+import { WorkflowInstanceSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/api_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
+import { buildSearchResult } from "../../query/search/extractor.js";
+export const workflowInstanceSearchExtractor = {
+    kind: ApiResourceKind.workflow_instance,
+    schema: WorkflowInstanceSchema,
+    getSearchSummary(resource) {
+        // Go WorkflowInstanceExtractor.GetSearchSummary: spec.description.
+        const instance = resource;
+        return instance.spec?.description ?? "";
+    },
+    toSearchResult(resource, score) {
+        const instance = resource;
+        return buildSearchResult({
+            kind: ApiResourceKind.workflow_instance,
+            metadata: instance.metadata,
+            summary: instance.spec?.description ?? "",
+            score,
+            createdAt: instance.status?.audit?.specAudit?.createdAt,
+            updatedAt: instance.status?.audit?.specAudit?.updatedAt,
+        });
+    },
+    getSearchIndexEntry(resource) {
+        const instance = resource;
+        const metadata = instance.metadata;
+        if (metadata === undefined) {
+            return undefined;
+        }
+        return {
+            name: metadata.name,
+            // Go WorkflowInstanceExtractor.GetSearchSummary: spec.description.
+            description: instance.spec?.description ?? "",
+            // Tags join space-separated — the index entry carries one tags
+            // string (Go extractor.JoinTags).
+            tags: metadata.tags.join(" "),
+            org: metadata.org,
+            // The enum NAME string, exactly Go's visibility.String().
+            visibility: ApiResourceVisibility[metadata.visibility] ?? "",
+            createdAt: Number(instance.status?.audit?.specAudit?.createdAt?.seconds ?? 0n),
+        };
+    },
+};
+//# sourceMappingURL=search-extractor.js.map

package/dist/domain/workflowinstance/search-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-extractor.js","sourceRoot":"","sources":["../../../src/domain/workflowinstance/search-extractor.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+DAA+D,CAAC;AAEvG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AAI/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGpE,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,IAAI,EAAE,eAAe,CAAC,iBAAiB;IACvC,MAAM,EAAE,sBAAsB;IAE9B,gBAAgB,CAAC,QAAiB;QAChC,mEAAmE;QACnE,MAAM,QAAQ,GAAG,QAAuC,CAAC;QACzD,OAAO,QAAQ,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,cAAc,CAAC,QAAiB,EAAE,KAAa;QAC7C,MAAM,QAAQ,GAAG,QAAuC,CAAC;QACzD,OAAO,iBAAiB,CAAC;YACvB,IAAI,EAAE,eAAe,CAAC,iBAAiB;YACvC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;YACzC,KAAK;YACL,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;YACvD,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;SACxD,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,QAAiB;QACnC,MAAM,QAAQ,GAAG,QAAuC,CAAC;QACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACnC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,mEAAmE;YACnE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;YAC7C,+DAA+D;YAC/D,kCAAkC;YAClC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,0DAA0D;YAC1D,UAAU,EAAE,qBAAqB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE;YAC5D,SAAS,EAAE,MAAM,CACf,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,IAAI,EAAE,CAC5D;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/domain/workflowinstance/steps.d.ts

@@ -0,0 +1,57 @@
+import type { DescMessage } from "@bufbuild/protobuf";
+import type { Workflow } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/api_pb";
+import { WorkflowInstanceSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/api_pb";
+import type { Logger } from "../../boot/logger.js";
+import type { PipelineStep } from "../../pipeline/pipeline.js";
+import type { Store } from "../../store/interface.js";
+type InstanceDesc = typeof WorkflowInstanceSchema;
+/** Context key for the loaded parent workflow (Go ParentWorkflowKey). */
+export declare const PARENT_WORKFLOW_KEY = "parent_workflow";
+export interface ParentWorkflowLoader {
+    get(workflowId: string): Promise<Workflow>;
+}
+/** Lazy provider — the cycle-break closure (DD-002). */
+export type ParentWorkflowLoaderProvider = () => ParentWorkflowLoader;
+/**
+ * LoadParentWorkflow — create.go: loads the workflow the instance
+ * materializes and stashes it for the same-org rule. ANY load failure maps
+ * to NotFound("Workflow", id) — Go folds every client error into that arm
+ * (capital-W copy is the wire contract).
+ */
+export declare function newLoadParentWorkflowStep(loaderProvider: ParentWorkflowLoaderProvider, logger: Logger): PipelineStep<InstanceDesc>;
+/**
+ * ValidateSameOrgBusinessRule — create.go: instances must live in the same
+ * organization as the parent workflow; cross-org instances could leak
+ * configuration/secrets. The message is the cross-edition wire contract.
+ */
+export declare function newValidateSameOrgBusinessRuleStep(logger: Logger): PipelineStep<InstanceDesc>;
+/**
+ * ValidateInstanceUpdate — update.go: spec.workflow_id is immutable. An
+ * instance is a configured materialization OF one workflow — repointing it
+ * would silently change what its executions run while keeping the
+ * instance's identity, history, and references intact; create a new
+ * instance instead (oss#646).
+ *
+ * Rejecting (rather than silently preserving, as BuildUpdateState does for
+ * metadata.visibility) is deliberate: visibility has a legitimate second
+ * door — the guarded updateVisibility RPC — so stale manifests carrying an
+ * old level are routine and must not fail the update. The parent ref has
+ * NO other door; a differing value is always a client error and deserves a
+ * loud failure. Same posture as the AgentChannel/Schedule guards and the
+ * cloud edition's twin step. Runs after LoadExisting; Apply delegates to
+ * Update, so this guard covers the apply door too.
+ */
+export declare function newValidateInstanceUpdateStep(): PipelineStep<InstanceDesc>;
+/**
+ * RejectDefaultInstanceVisibilityUpdate — update_visibility.go: rejects
+ * visibility updates on a workflow's system-managed default instance — the
+ * workflow twin of the agentinstance guard (oss#556). Keyed on the
+ * reserved label OR the parent's authoritative status.default_instance_id
+ * pointer (covers pre-label legacy rows without a backfill migration; the
+ * pointer cannot be dropped by a client update the way the label can). A
+ * missing parent passes through; any other store failure is INTERNAL — a
+ * transient fault must not silently open the guard.
+ */
+export declare function newRejectDefaultWorkflowInstanceVisibilityUpdateStep<Desc extends DescMessage>(store: Store, instanceKey: string): PipelineStep<Desc>;
+export {};
+//# sourceMappingURL=steps.d.ts.map

package/dist/domain/workflowinstance/steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.d.ts","sourceRoot":"","sources":["../../../src/domain/workflowinstance/steps.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uDAAuD,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+DAA+D,CAAC;AAIvG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAQnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAEtD,KAAK,YAAY,GAAG,OAAO,sBAAsB,CAAC;AAElD,yEAAyE;AACzE,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAQrD,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC5C;AAED,wDAAwD;AACxD,MAAM,MAAM,4BAA4B,GAAG,MAAM,oBAAoB,CAAC;AAEtE;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,cAAc,EAAE,4BAA4B,EAC5C,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,YAAY,CAAC,CAsB5B;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,YAAY,CAAC,CA4B5B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,6BAA6B,IAAI,YAAY,CAAC,YAAY,CAAC,CAqB1E;AAED;;;;;;;;;GASG;AACH,wBAAgB,oDAAoD,CAClE,IAAI,SAAS,WAAW,EACxB,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAmCvD"}