@tea-agent/loop-agent 0.39.0-beta.2 → 0.39.0-beta.4

package/dist/worker/console/routes.js

@@ -116,6 +116,7 @@ async function handleRecoveryCandidates(_req, res, ctx, url) {
 }
 async function handleSessionPing(req, res, ctx) {
     const failure = evaluateMutationGate(req, {
+        cookieName: ctx.bootToken.cookieName,
         bootToken: ctx.bootToken.value,
         confirmationToken: ctx.bootToken.confirmationToken,
         consoleOrigin: ctx.getConsoleOrigin(),
@@ -130,6 +131,16 @@ async function handleSessionPing(req, res, ctx) {
     }
     sendJson(res, 200, { ok: true, pong: true });
 }
+/**
+ * Actions the inspect-scoped mutation token may dispatch. Deliberately
+ * minimal: the experimental prompt-override rerun tab needs plan preflight +
+ * execution only. Everything else (task creation, runDag, reconcile, chat,
+ * worker actions…) requires the general Console token.
+ */
+export const INSPECT_MUTATION_ALLOWED_ACTIONS = new Set([
+    "dagRerunPlan",
+    "dagRerun",
+]);
 async function handleCreateOperation(req, res, ctx) {
     if (!ctx.operator) {
         sendJson(res, 503, {
@@ -141,12 +152,31 @@ async function handleCreateOperation(req, res, ctx) {
         });
         return;
     }
-    const failure = evaluateMutationGate(req, {
+    const generalGateContext = {
+        cookieName: ctx.bootToken.cookieName,
         bootToken: ctx.bootToken.value,
         confirmationToken: ctx.bootToken.confirmationToken,
         consoleOrigin: ctx.getConsoleOrigin(),
         allowNonLoopbackAccess: ctx.allowNonLoopbackAccess === true,
-    });
+    };
+    let failure = evaluateMutationGate(req, generalGateContext);
+    let inspectScoped = false;
+    if (failure && ctx.inspectBootToken) {
+        // Scoped /inspect credentials: try the inspect gate before failing. The
+        // general gate already rejected, so passing here only ever yields the
+        // allowlisted actions below — never general write capability.
+        const scopedFailure = evaluateMutationGate(req, {
+            cookieName: ctx.inspectBootToken.cookieName,
+            bootToken: ctx.inspectBootToken.value,
+            confirmationToken: ctx.inspectBootToken.confirmationToken,
+            consoleOrigin: ctx.getConsoleOrigin(),
+            allowNonLoopbackAccess: ctx.allowNonLoopbackAccess === true,
+        });
+        if (!scopedFailure) {
+            inspectScoped = true;
+            failure = undefined;
+        }
+    }
     if (failure) {
         sendJson(res, failure.status, {
             ok: false,
@@ -173,6 +203,16 @@ async function handleCreateOperation(req, res, ctx) {
         ? body.actionParams
         : {};
     const clientRequestId = typeof body.clientRequestId === "string" ? body.clientRequestId : undefined;
+    if (inspectScoped && !INSPECT_MUTATION_ALLOWED_ACTIONS.has(action)) {
+        sendJson(res, 403, {
+            ok: false,
+            error: {
+                code: "ACTION_NOT_IN_INSPECT_SCOPE",
+                message: `inspect-scoped token only allows: ${[...INSPECT_MUTATION_ALLOWED_ACTIONS].join(", ")}`,
+            },
+        });
+        return;
+    }
     const result = await dispatchOperatorAction(ctx.operator.actionContext, {
         action,
         actionParams,
@@ -428,6 +468,7 @@ export async function handleConsoleOperatorRequest(req, res, ctx) {
     }
     if (isMutationMethod(method)) {
         const failure = evaluateMutationGate(req, {
+            cookieName: ctx.bootToken.cookieName,
             bootToken: ctx.bootToken.value,
             confirmationToken: ctx.bootToken.confirmationToken,
             consoleOrigin: ctx.getConsoleOrigin(),

package/dist/worker/console/security.js

@@ -1,24 +1,78 @@
-import { randomBytes, timingSafeEqual } from "node:crypto";
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 import { isLoopbackHost } from "./loopback.js";
+/** Prefix for instance-scoped Cookie names; not a lookup name. */
 export const BOOT_CAPABILITY_COOKIE = "loop_console_capability";
 /** Custom mutation confirmation header (design §9). JS-readable; not the HttpOnly boot cookie. */
 export const CONFIRMATION_TOKEN_HEADER = "x-loop-console-confirmation";
-/** Issue per-process unguessable boot capability + confirmation tokens. */
-export function issueBootCapabilityToken() {
+function normalizeInstanceScope(scope) {
+    const repoFingerprint = scope.repoFingerprint.trim();
+    if (!repoFingerprint) {
+        throw new Error("console instance scope requires a non-empty repoFingerprint");
+    }
+    const bindHost = scope.bindHost.trim();
+    if (!bindHost) {
+        throw new Error("console instance scope requires a non-empty bindHost");
+    }
+    if (!Number.isInteger(scope.configuredPort) || scope.configuredPort < 0) {
+        throw new Error(`console instance scope configuredPort must be an integer >= 0, got ${String(scope.configuredPort)}`);
+    }
+    const instanceNonce = scope.instanceNonce?.trim();
+    if (scope.configuredPort === 0) {
+        if (!instanceNonce) {
+            throw new Error("console instance scope requires a non-empty instanceNonce when configuredPort is 0");
+        }
+        return {
+            repoFingerprint,
+            bindHost,
+            configuredPort: 0,
+            instanceNonce,
+        };
+    }
+    return {
+        repoFingerprint,
+        bindHost,
+        configuredPort: scope.configuredPort,
+    };
+}
+/** Deterministic Cookie name for one Console instance; never includes repo path or token. */
+export function deriveBootCapabilityCookieName(scope, variant) {
+    const normalized = normalizeInstanceScope(scope);
+    const digest = createHash("sha256")
+        .update("loop-console-capability-v1\0", "utf8")
+        .update(normalized.repoFingerprint, "utf8")
+        .update("\0", "utf8")
+        .update(normalized.bindHost, "utf8")
+        .update("\0", "utf8")
+        .update(String(normalized.configuredPort), "utf8")
+        .update("\0", "utf8")
+        .update(normalized.instanceNonce ?? "", "utf8")
+        .update("\0", "utf8")
+        .update(variant ?? "", "utf8")
+        .digest("hex")
+        .slice(0, 32);
+    return `${BOOT_CAPABILITY_COOKIE}_${digest}`;
+}
+/** Issue per-process unguessable boot capability + confirmation tokens.
+ *  `variant` (e.g. "inspect") derives a separate cookie name so scoped
+ *  credentials cannot be replayed against the general mutation surface. */
+export function issueBootCapabilityToken(scope, options = {}) {
+    const cookieName = deriveBootCapabilityCookieName(scope, options.variant);
     const value = randomBytes(32).toString("base64url");
     const confirmationToken = randomBytes(32).toString("base64url");
     const setCookieHeader = [
-        `${BOOT_CAPABILITY_COOKIE}=${value}`,
+        `${cookieName}=${value}`,
         "HttpOnly",
         "SameSite=Strict",
         "Path=/",
     ].join("; ");
-    return { value, setCookieHeader, confirmationToken };
+    return { cookieName, value, setCookieHeader, confirmationToken };
 }
-/** Inject confirmation token into HTML so the SPA can send the mutation header. */
-export function injectConfirmationTokenScript(html, confirmationToken) {
+/** Inject confirmation token into HTML so the SPA can send the mutation
+ *  header. `varName` separates the general Console token from the scoped
+ *  inspect token on the read-only /inspect surface. */
+export function injectConfirmationTokenScript(html, confirmationToken, varName = "__CONSOLE_CONFIRMATION_TOKEN__") {
     const source = typeof html === "string" ? html : html.toString("utf8");
-    const script = `<script>window.__CONSOLE_CONFIRMATION_TOKEN__=${JSON.stringify(confirmationToken)};</script>`;
+    const script = `<script>window.${varName}=${JSON.stringify(confirmationToken)};</script>`;
     if (source.includes("</head>")) {
         return Buffer.from(source.replace("</head>", `${script}</head>`), "utf8");
     }
@@ -74,7 +128,7 @@ function loopbackOriginMatches(origin, consoleOrigin) {
     return originKey !== null && consoleKey !== null && originKey === consoleKey;
 }
 export function evaluateMutationGate(req, ctx) {
-    const cookieToken = parseCookieHeader(req.headers.cookie, BOOT_CAPABILITY_COOKIE);
+    const cookieToken = parseCookieHeader(req.headers.cookie, ctx.cookieName);
     if (!cookieToken) {
         return {
             status: 403,

package/dist/worker/console/server.js

@@ -1,11 +1,12 @@
 import { randomBytes } from "node:crypto";
 import { existsSync } from "node:fs";
+import { rm } from "node:fs/promises";
 import { createServer } from "node:http";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { LoopAgentClient } from "../loop-agent/loop-agent-client.js";
 import { DAG_ABSOLUTE_MAX_WALL_CLOCK_MS } from "../../shared/timeout-policy.js";
-import { openConsoleAppData } from "./app-data.js";
+import { openConsoleAppData, sha256Json, writeSecureJson } from "./app-data.js";
 import { DagConfirmationStore } from "./dag-confirmation.js";
 import { DagExecutionReceiptStore } from "./dag-execution-receipt.js";
 import { DraftStore } from "./draft-store.js";
@@ -19,10 +20,14 @@ import { ConsolePiRuntime } from "./chat/pi-runtime.js";
 import { handleChatRequest, recoverDeferredTurns, } from "./chat/routes.js";
 import { createOperationEventStore, } from "./operation-sse.js";
 import { OperationStore } from "./operation-store.js";
+import { createFrontendSplitOperationAdapter, } from "./frontend-split-operation-adapter.js";
+import { createFrontendHumanDecisionAdapter } from "./frontend-human-decision-adapter.js";
+import { FrontendSplitTaskMaterializer, } from "../materialize/frontend-split-task-materializer.js";
 import { probePiReadiness, } from "./pi-readiness.js";
 import { handleConsoleHealthRequest, handleConsoleOperatorRequest, sendJson, serveConsoleStatic, } from "./routes.js";
-import { issueBootCapabilityToken } from "./security.js";
+import { issueBootCapabilityToken, injectConfirmationTokenScript, } from "./security.js";
 import { resolveSiblingLoopAgentBin } from "./sibling-controller.js";
+import { isDagRerunPromptOverrideEnabled } from "../../shared/dag-prompt-override.js";
 import { NightAuxTicker } from "./night-aux-ticker.js";
 import { deriveObserveRouteCapabilities } from "../observe/health.js";
 import { createObserveRouteContext, defaultObserveStaticDir, handleMatchedObserveRoute, matchObserveGetRoute, ROUTES, serveObserveStatic, } from "../observe/routes.js";
@@ -66,7 +71,7 @@ export async function createConsoleServer(options) {
         process.stderr.write(`console: binding non-loopback host ${host} (Operator mutations enabled; no network auth — expose only on trusted networks)\n`);
     }
     const repoRoot = path.resolve(options.repoRoot);
-    const port = options.port ?? 8790;
+    const configuredPort = options.port ?? 8790;
     const debug = options.debug === true;
     const keepAliveTimeoutMs = options.keepAliveTimeoutMs ?? 65_000;
     const staticDir = options.staticDir ?? defaultConsoleStaticDir();
@@ -74,16 +79,135 @@ export async function createConsoleServer(options) {
     const observeRouteContext = createObserveRouteContext(repoRoot, {
         staticDir: inspectStaticDir,
     });
-    const bootToken = issueBootCapabilityToken();
     const operatorSessionId = `sess_${randomBytes(16).toString("hex")}`;
     const appData = openConsoleAppData({
         repoRoot,
         appDataRoot: options.appDataRoot,
     });
+    const instanceNonce = configuredPort === 0 ? randomBytes(16).toString("hex") : undefined;
+    const bootToken = issueBootCapabilityToken({
+        repoFingerprint: appData.fingerprint,
+        bindHost: host,
+        configuredPort,
+        ...(instanceNonce ? { instanceNonce } : {}),
+    });
+    // Scoped credentials for the experimental /inspect prompt-override rerun:
+    // separate cookie name + confirmation token so the read-only inspect page
+    // can never replay them against the general Console mutation surface.
+    const inspectBootToken = issueBootCapabilityToken({
+        repoFingerprint: appData.fingerprint,
+        bindHost: host,
+        configuredPort,
+        ...(instanceNonce ? { instanceNonce } : {}),
+    }, { variant: "inspect" });
     const operations = new OperationStore(appData);
     const events = createOperationEventStore({
         persistenceDir: path.join(appData.operations, "events"),
     });
+    // Frontend split production wiring (C): deterministic, idempotent
+    // materialization backend over OperationStore + canonical orchestrator
+    // adapter. runtimeSupportsSplit stays false here (Task AB owns the real
+    // runner); schedule records a durable idempotent intent fact instead of
+    // invoking scheduleOperation, and child/integration terminal states arrive
+    // via childCallback / integrationCallback.
+    const splitScheduleDir = path.join(appData.root, "frontend-split-schedule");
+    const splitAuditDir = path.join(appData.root, "frontend-split-audit");
+    const splitAggregateDir = path.join(appData.root, "frontend-split-aggregate");
+    const splitMaterializationBackend = {
+        async ensureTask({ taskId }) {
+            // Child/integration identity is already validated by the materializer
+            // request schema; Console keeps no separate durable task record.
+            return { taskId, complete: true };
+        },
+        async ensureOperation({ taskId, operationId, payloadDigest, request }) {
+            const action = request.kind === "child" ? "frontendSplitChild" : "frontendSplitIntegration";
+            const { operation } = await operations.ensureSplitMaterializedOperation({
+                operationId,
+                taskId,
+                action,
+                actionParams: request,
+                payloadHash: payloadDigest,
+            });
+            return {
+                taskId: operation.taskId ?? taskId,
+                operationId: operation.operationId,
+                complete: true,
+            };
+        },
+    };
+    const materializer = new FrontendSplitTaskMaterializer(splitMaterializationBackend);
+    const schedule = async (input) => {
+        const fact = {
+            schemaVersion: 1,
+            kind: "frontend-split-schedule-intent",
+            operationId: input.operationId,
+            generation: input.generation,
+            bindingDigest: input.bindingDigest,
+            recordedAt: new Date().toISOString(),
+        };
+        const name = `${sha256Json({
+            operationId: input.operationId,
+            generation: input.generation,
+            bindingDigest: input.bindingDigest,
+        })}.json`;
+        await writeSecureJson(path.join(splitScheduleDir, name), fact);
+    };
+    const auditStale = async (input) => {
+        const fact = {
+            schemaVersion: 1,
+            kind: "frontend-split-stale-audit",
+            operationId: input.operationId,
+            reason: input.reason,
+            fact: input.fact,
+            recordedAt: new Date().toISOString(),
+        };
+        const name = `${sha256Json(fact)}.json`;
+        await writeSecureJson(path.join(splitAuditDir, name), fact);
+    };
+    const prepareAggregate = async ({ operationId, aggregate, }) => {
+        const before = await operations.get(operationId);
+        if (!before) {
+            throw new Error(`cannot prepare aggregate: parent operation not found: ${operationId}`);
+        }
+        const aggregateFile = path.join(splitAggregateDir, `${aggregate.digest}.json`);
+        let parentRecordPath = "";
+        let wroteAggregate = false;
+        let wroteParent = false;
+        return {
+            committedRef: {
+                ref: aggregateFile,
+                digest: aggregate.digest,
+                commitState: "committed",
+            },
+            async commit(input) {
+                parentRecordPath = input.parentRecordPath;
+                await writeSecureJson(aggregateFile, {
+                    schemaVersion: 1,
+                    kind: "frontend-split-aggregate-closeout",
+                    operationId,
+                    aggregate,
+                });
+                wroteAggregate = true;
+                await writeSecureJson(input.parentRecordPath, input.parentRecord);
+                wroteParent = true;
+            },
+            async rollback() {
+                if (wroteAggregate)
+                    await rm(aggregateFile, { force: true });
+                if (wroteParent && parentRecordPath) {
+                    await writeSecureJson(parentRecordPath, before);
+                }
+            },
+        };
+    };
+    const splitOrchestrator = createFrontendSplitOperationAdapter({
+        store: operations,
+        materializer,
+        schedule,
+        auditStale,
+        prepareAggregate,
+    });
+    const humanDecisionAdapter = createFrontendHumanDecisionAdapter(operations);
     const drafts = new DraftStore(appData);
     const confirmations = new DagConfirmationStore(appData, bootToken.confirmationToken);
     const dagExecutionReceipts = new DagExecutionReceiptStore(appData);
@@ -123,6 +247,9 @@ export async function createConsoleServer(options) {
         client,
         operations,
         events,
+        splitOrchestrator,
+        humanDecisionAdapter,
+        materializer,
         drafts,
         confirmations,
         dagExecutionReceipts,
@@ -137,7 +264,7 @@ export async function createConsoleServer(options) {
         getConsoleOrigin: () => `http://${boundHost}:${boundPort}`,
     };
     let boundHost = host;
-    let boundPort = port;
+    let boundPort = configuredPort;
     const getConsoleOrigin = () => `http://${boundHost}:${boundPort}`;
     // Phase 4: General Operator Chat runtime. The actionContext is forwarded so
     // custom-tool execute() calls dispatch into the operator action layer (Gate 3).
@@ -188,6 +315,7 @@ export async function createConsoleServer(options) {
         repoRoot,
         staticDir,
         bootToken,
+        inspectBootToken,
         getConsoleOrigin,
         allowNonLoopbackAccess: !loopbackBind,
         inspect: {
@@ -277,8 +405,22 @@ export async function createConsoleServer(options) {
                 }
             }
             if (pathname.startsWith("/inspect")) {
+                // Experimental prompt-override rerun: only while the internal switch
+                // is enabled do we hand the inspect page SCOPED mutation
+                // credentials (separate cookie + token, only strong enough for
+                // INSPECT_MUTATION_ALLOWED_ACTIONS — see routes.ts). Default stays
+                // strictly read-only: no token, no cookie, no tab.
+                const htmlEnhancer = isDagRerunPromptOverrideEnabled()
+                    ? (html) => ({
+                        content: injectConfirmationTokenScript(html, routeContext.inspectBootToken?.confirmationToken ??
+                            routeContext.bootToken.confirmationToken, "__INSPECT_MUTATION_TOKEN__"),
+                        setCookie: routeContext.inspectBootToken?.setCookieHeader ??
+                            routeContext.bootToken.setCookieHeader,
+                    })
+                    : undefined;
                 await serveObserveStatic(req, res, inspectStaticDir, {
                     urlPrefix: "/inspect",
+                    ...(htmlEnhancer ? { htmlEnhancer } : {}),
                 });
                 return;
             }
@@ -289,7 +431,7 @@ export async function createConsoleServer(options) {
             await serveConsoleStatic(req, res, routeContext);
         }
         server.on("error", reject);
-        server.listen(port, host, () => {
+        server.listen(configuredPort, host, () => {
             const addr = server.address();
             if (!addr || typeof addr === "string") {
                 reject(new Error("Failed to get console server address"));
@@ -311,6 +453,9 @@ export async function createConsoleServer(options) {
                 appData,
                 operations,
                 events,
+                splitOrchestrator,
+                humanDecisionAdapter,
+                materializer,
                 getReadiness,
                 operatorSessionId,
                 close: () => new Promise((closeResolve, closeReject) => {

package/dist/worker/console/static/assets/{abnfDiagram-N423BO3Z-C4kVYweA.js → abnfDiagram-N423BO3Z-zsNyvGaH.js}

@@ -1 +1 @@
-import{g as p,r as u,d as a}from"./chunk-6Q2QTUOP-DZtolir7.js";import{p as f}from"./chunk-JWPE2WC7-NgHc6V37.js";import{_ as n,l as o}from"./mermaid.core-BVjAT9b8.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-BwT_xKrE.js";import"./index-DTZOKgAn.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};
+import{g as p,r as u,d as a}from"./chunk-6Q2QTUOP-Dz29Ye_f.js";import{p as f}from"./chunk-JWPE2WC7-CIoGkxdu.js";import{_ as n,l as o}from"./mermaid.core-C-D3ZRUa.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-BSCtQpD7.js";import"./index-D5zGX6fG.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};

package/dist/worker/console/static/assets/{arc-Bj2M8iO5.js → arc-BDjZ5kE1.js}

@@ -1 +1 @@
-import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-BVjAT9b8.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};
+import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-C-D3ZRUa.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};