@tea-agent/loop-agent 0.38.3 → 0.38.4

package/dist/worker/console/routes.js

@@ -116,6 +116,7 @@ async function handleRecoveryCandidates(_req, res, ctx, url) {
 }
 async function handleSessionPing(req, res, ctx) {
     const failure = evaluateMutationGate(req, {
+        cookieName: ctx.bootToken.cookieName,
         bootToken: ctx.bootToken.value,
         confirmationToken: ctx.bootToken.confirmationToken,
         consoleOrigin: ctx.getConsoleOrigin(),
@@ -130,6 +131,16 @@ async function handleSessionPing(req, res, ctx) {
     }
     sendJson(res, 200, { ok: true, pong: true });
 }
+/**
+ * Actions the inspect-scoped mutation token may dispatch. Deliberately
+ * minimal: the experimental prompt-override rerun tab needs plan preflight +
+ * execution only. Everything else (task creation, runDag, reconcile, chat,
+ * worker actions…) requires the general Console token.
+ */
+export const INSPECT_MUTATION_ALLOWED_ACTIONS = new Set([
+    "dagRerunPlan",
+    "dagRerun",
+]);
 async function handleCreateOperation(req, res, ctx) {
     if (!ctx.operator) {
         sendJson(res, 503, {
@@ -141,12 +152,31 @@ async function handleCreateOperation(req, res, ctx) {
         });
         return;
     }
-    const failure = evaluateMutationGate(req, {
+    const generalGateContext = {
+        cookieName: ctx.bootToken.cookieName,
         bootToken: ctx.bootToken.value,
         confirmationToken: ctx.bootToken.confirmationToken,
         consoleOrigin: ctx.getConsoleOrigin(),
         allowNonLoopbackAccess: ctx.allowNonLoopbackAccess === true,
-    });
+    };
+    let failure = evaluateMutationGate(req, generalGateContext);
+    let inspectScoped = false;
+    if (failure && ctx.inspectBootToken) {
+        // Scoped /inspect credentials: try the inspect gate before failing. The
+        // general gate already rejected, so passing here only ever yields the
+        // allowlisted actions below — never general write capability.
+        const scopedFailure = evaluateMutationGate(req, {
+            cookieName: ctx.inspectBootToken.cookieName,
+            bootToken: ctx.inspectBootToken.value,
+            confirmationToken: ctx.inspectBootToken.confirmationToken,
+            consoleOrigin: ctx.getConsoleOrigin(),
+            allowNonLoopbackAccess: ctx.allowNonLoopbackAccess === true,
+        });
+        if (!scopedFailure) {
+            inspectScoped = true;
+            failure = undefined;
+        }
+    }
     if (failure) {
         sendJson(res, failure.status, {
             ok: false,
@@ -173,6 +203,16 @@ async function handleCreateOperation(req, res, ctx) {
         ? body.actionParams
         : {};
     const clientRequestId = typeof body.clientRequestId === "string" ? body.clientRequestId : undefined;
+    if (inspectScoped && !INSPECT_MUTATION_ALLOWED_ACTIONS.has(action)) {
+        sendJson(res, 403, {
+            ok: false,
+            error: {
+                code: "ACTION_NOT_IN_INSPECT_SCOPE",
+                message: `inspect-scoped token only allows: ${[...INSPECT_MUTATION_ALLOWED_ACTIONS].join(", ")}`,
+            },
+        });
+        return;
+    }
     const result = await dispatchOperatorAction(ctx.operator.actionContext, {
         action,
         actionParams,
@@ -428,6 +468,7 @@ export async function handleConsoleOperatorRequest(req, res, ctx) {
     }
     if (isMutationMethod(method)) {
         const failure = evaluateMutationGate(req, {
+            cookieName: ctx.bootToken.cookieName,
             bootToken: ctx.bootToken.value,
             confirmationToken: ctx.bootToken.confirmationToken,
             consoleOrigin: ctx.getConsoleOrigin(),

package/dist/worker/console/security.js

@@ -1,24 +1,78 @@
-import { randomBytes, timingSafeEqual } from "node:crypto";
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 import { isLoopbackHost } from "./loopback.js";
+/** Prefix for instance-scoped Cookie names; not a lookup name. */
 export const BOOT_CAPABILITY_COOKIE = "loop_console_capability";
 /** Custom mutation confirmation header (design §9). JS-readable; not the HttpOnly boot cookie. */
 export const CONFIRMATION_TOKEN_HEADER = "x-loop-console-confirmation";
-/** Issue per-process unguessable boot capability + confirmation tokens. */
-export function issueBootCapabilityToken() {
+function normalizeInstanceScope(scope) {
+    const repoFingerprint = scope.repoFingerprint.trim();
+    if (!repoFingerprint) {
+        throw new Error("console instance scope requires a non-empty repoFingerprint");
+    }
+    const bindHost = scope.bindHost.trim();
+    if (!bindHost) {
+        throw new Error("console instance scope requires a non-empty bindHost");
+    }
+    if (!Number.isInteger(scope.configuredPort) || scope.configuredPort < 0) {
+        throw new Error(`console instance scope configuredPort must be an integer >= 0, got ${String(scope.configuredPort)}`);
+    }
+    const instanceNonce = scope.instanceNonce?.trim();
+    if (scope.configuredPort === 0) {
+        if (!instanceNonce) {
+            throw new Error("console instance scope requires a non-empty instanceNonce when configuredPort is 0");
+        }
+        return {
+            repoFingerprint,
+            bindHost,
+            configuredPort: 0,
+            instanceNonce,
+        };
+    }
+    return {
+        repoFingerprint,
+        bindHost,
+        configuredPort: scope.configuredPort,
+    };
+}
+/** Deterministic Cookie name for one Console instance; never includes repo path or token. */
+export function deriveBootCapabilityCookieName(scope, variant) {
+    const normalized = normalizeInstanceScope(scope);
+    const digest = createHash("sha256")
+        .update("loop-console-capability-v1\0", "utf8")
+        .update(normalized.repoFingerprint, "utf8")
+        .update("\0", "utf8")
+        .update(normalized.bindHost, "utf8")
+        .update("\0", "utf8")
+        .update(String(normalized.configuredPort), "utf8")
+        .update("\0", "utf8")
+        .update(normalized.instanceNonce ?? "", "utf8")
+        .update("\0", "utf8")
+        .update(variant ?? "", "utf8")
+        .digest("hex")
+        .slice(0, 32);
+    return `${BOOT_CAPABILITY_COOKIE}_${digest}`;
+}
+/** Issue per-process unguessable boot capability + confirmation tokens.
+ *  `variant` (e.g. "inspect") derives a separate cookie name so scoped
+ *  credentials cannot be replayed against the general mutation surface. */
+export function issueBootCapabilityToken(scope, options = {}) {
+    const cookieName = deriveBootCapabilityCookieName(scope, options.variant);
     const value = randomBytes(32).toString("base64url");
     const confirmationToken = randomBytes(32).toString("base64url");
     const setCookieHeader = [
-        `${BOOT_CAPABILITY_COOKIE}=${value}`,
+        `${cookieName}=${value}`,
         "HttpOnly",
         "SameSite=Strict",
         "Path=/",
     ].join("; ");
-    return { value, setCookieHeader, confirmationToken };
+    return { cookieName, value, setCookieHeader, confirmationToken };
 }
-/** Inject confirmation token into HTML so the SPA can send the mutation header. */
-export function injectConfirmationTokenScript(html, confirmationToken) {
+/** Inject confirmation token into HTML so the SPA can send the mutation
+ *  header. `varName` separates the general Console token from the scoped
+ *  inspect token on the read-only /inspect surface. */
+export function injectConfirmationTokenScript(html, confirmationToken, varName = "__CONSOLE_CONFIRMATION_TOKEN__") {
     const source = typeof html === "string" ? html : html.toString("utf8");
-    const script = `<script>window.__CONSOLE_CONFIRMATION_TOKEN__=${JSON.stringify(confirmationToken)};</script>`;
+    const script = `<script>window.${varName}=${JSON.stringify(confirmationToken)};</script>`;
     if (source.includes("</head>")) {
         return Buffer.from(source.replace("</head>", `${script}</head>`), "utf8");
     }
@@ -74,7 +128,7 @@ function loopbackOriginMatches(origin, consoleOrigin) {
     return originKey !== null && consoleKey !== null && originKey === consoleKey;
 }
 export function evaluateMutationGate(req, ctx) {
-    const cookieToken = parseCookieHeader(req.headers.cookie, BOOT_CAPABILITY_COOKIE);
+    const cookieToken = parseCookieHeader(req.headers.cookie, ctx.cookieName);
     if (!cookieToken) {
         return {
             status: 403,

package/dist/worker/console/server.js

@@ -21,8 +21,9 @@ import { createOperationEventStore, } from "./operation-sse.js";
 import { OperationStore } from "./operation-store.js";
 import { probePiReadiness, } from "./pi-readiness.js";
 import { handleConsoleHealthRequest, handleConsoleOperatorRequest, sendJson, serveConsoleStatic, } from "./routes.js";
-import { issueBootCapabilityToken } from "./security.js";
+import { issueBootCapabilityToken, injectConfirmationTokenScript, } from "./security.js";
 import { resolveSiblingLoopAgentBin } from "./sibling-controller.js";
+import { isDagRerunPromptOverrideEnabled } from "../../shared/dag-prompt-override.js";
 import { NightAuxTicker } from "./night-aux-ticker.js";
 import { deriveObserveRouteCapabilities } from "../observe/health.js";
 import { createObserveRouteContext, defaultObserveStaticDir, handleMatchedObserveRoute, matchObserveGetRoute, ROUTES, serveObserveStatic, } from "../observe/routes.js";
@@ -66,7 +67,7 @@ export async function createConsoleServer(options) {
         process.stderr.write(`console: binding non-loopback host ${host} (Operator mutations enabled; no network auth — expose only on trusted networks)\n`);
     }
     const repoRoot = path.resolve(options.repoRoot);
-    const port = options.port ?? 8790;
+    const configuredPort = options.port ?? 8790;
     const debug = options.debug === true;
     const keepAliveTimeoutMs = options.keepAliveTimeoutMs ?? 65_000;
     const staticDir = options.staticDir ?? defaultConsoleStaticDir();
@@ -74,12 +75,27 @@ export async function createConsoleServer(options) {
     const observeRouteContext = createObserveRouteContext(repoRoot, {
         staticDir: inspectStaticDir,
     });
-    const bootToken = issueBootCapabilityToken();
     const operatorSessionId = `sess_${randomBytes(16).toString("hex")}`;
     const appData = openConsoleAppData({
         repoRoot,
         appDataRoot: options.appDataRoot,
     });
+    const instanceNonce = configuredPort === 0 ? randomBytes(16).toString("hex") : undefined;
+    const bootToken = issueBootCapabilityToken({
+        repoFingerprint: appData.fingerprint,
+        bindHost: host,
+        configuredPort,
+        ...(instanceNonce ? { instanceNonce } : {}),
+    });
+    // Scoped credentials for the experimental /inspect prompt-override rerun:
+    // separate cookie name + confirmation token so the read-only inspect page
+    // can never replay them against the general Console mutation surface.
+    const inspectBootToken = issueBootCapabilityToken({
+        repoFingerprint: appData.fingerprint,
+        bindHost: host,
+        configuredPort,
+        ...(instanceNonce ? { instanceNonce } : {}),
+    }, { variant: "inspect" });
     const operations = new OperationStore(appData);
     const events = createOperationEventStore({
         persistenceDir: path.join(appData.operations, "events"),
@@ -137,7 +153,7 @@ export async function createConsoleServer(options) {
         getConsoleOrigin: () => `http://${boundHost}:${boundPort}`,
     };
     let boundHost = host;
-    let boundPort = port;
+    let boundPort = configuredPort;
     const getConsoleOrigin = () => `http://${boundHost}:${boundPort}`;
     // Phase 4: General Operator Chat runtime. The actionContext is forwarded so
     // custom-tool execute() calls dispatch into the operator action layer (Gate 3).
@@ -188,6 +204,7 @@ export async function createConsoleServer(options) {
         repoRoot,
         staticDir,
         bootToken,
+        inspectBootToken,
         getConsoleOrigin,
         allowNonLoopbackAccess: !loopbackBind,
         inspect: {
@@ -277,8 +294,22 @@ export async function createConsoleServer(options) {
                 }
             }
             if (pathname.startsWith("/inspect")) {
+                // Experimental prompt-override rerun: only while the internal switch
+                // is enabled do we hand the inspect page SCOPED mutation
+                // credentials (separate cookie + token, only strong enough for
+                // INSPECT_MUTATION_ALLOWED_ACTIONS — see routes.ts). Default stays
+                // strictly read-only: no token, no cookie, no tab.
+                const htmlEnhancer = isDagRerunPromptOverrideEnabled()
+                    ? (html) => ({
+                        content: injectConfirmationTokenScript(html, routeContext.inspectBootToken?.confirmationToken ??
+                            routeContext.bootToken.confirmationToken, "__INSPECT_MUTATION_TOKEN__"),
+                        setCookie: routeContext.inspectBootToken?.setCookieHeader ??
+                            routeContext.bootToken.setCookieHeader,
+                    })
+                    : undefined;
                 await serveObserveStatic(req, res, inspectStaticDir, {
                     urlPrefix: "/inspect",
+                    ...(htmlEnhancer ? { htmlEnhancer } : {}),
                 });
                 return;
             }
@@ -289,7 +320,7 @@ export async function createConsoleServer(options) {
             await serveConsoleStatic(req, res, routeContext);
         }
         server.on("error", reject);
-        server.listen(port, host, () => {
+        server.listen(configuredPort, host, () => {
             const addr = server.address();
             if (!addr || typeof addr === "string") {
                 reject(new Error("Failed to get console server address"));

package/dist/worker/console/static/assets/{abnfDiagram-N423BO3Z-C4kVYweA.js → abnfDiagram-N423BO3Z-gauhD9kD.js}

@@ -1 +1 @@
-import{g as p,r as u,d as a}from"./chunk-6Q2QTUOP-DZtolir7.js";import{p as f}from"./chunk-JWPE2WC7-NgHc6V37.js";import{_ as n,l as o}from"./mermaid.core-BVjAT9b8.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-BwT_xKrE.js";import"./index-DTZOKgAn.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};
+import{g as p,r as u,d as a}from"./chunk-6Q2QTUOP-B1JriSjm.js";import{p as f}from"./chunk-JWPE2WC7-BsNKEC_r.js";import{_ as n,l as o}from"./mermaid.core-CcWKn6tS.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-DiyymT2D.js";import"./index-DEbyrEfW.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};

package/dist/worker/console/static/assets/{arc-Bj2M8iO5.js → arc-pm3c2Rsl.js}

@@ -1 +1 @@
-import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-BVjAT9b8.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};
+import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-CcWKn6tS.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};