@winspan/claude-forge 9.2.0 → 9.12.0

package/dist/web/routes/agent-distill.js

@@ -0,0 +1,526 @@
+/**
+ * /api/agent/distill/* + /api/agent/adopt + /api/agent/rollback
+ * — web surface for human-triggered agent template evolution (decision 568a8c53).
+ *
+ * Mirrors `skills-distill.ts` in shape (loopback-only, SSE stream, conflict 409)
+ * but targets the per-agent AgentDistillManager + carries the ONLY web→write
+ * `src/daemon/templates/agents/` path (`POST /api/agent/adopt`).
+ *
+ * 红线 (decision 568a8c53 / core-belief #2): every write action here is reached
+ * ONLY by a human button click; the daemon never invokes these handlers on a
+ * timer. `adopt` is the single new write path and runs SIX hard safety gates:
+ *   1. loopback-only (403)
+ *   2. agent-name whitelist regex (400) — blocks path traversal
+ *   3. confirmedDiff === true (400) — proves the human viewed the diff
+ *   4. draft existence (404)
+ *   5. anchor-guard re-scan (422) — defence-in-depth, draft file may be hand-edited
+ *   6. evolvable-region only + version mechanical bump + byte-identical installed
+ *      copy + write-after self-check (invariant 75344363)
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { logger } from '../../core/utils/logger.js';
+import { findClaudeBin } from '../../core/utils/claude-cli-resolver.js';
+import { SQLiteStorage } from '../../core/storage/sqlite.js';
+import { FORGE_PATHS } from '../../core/constants.js';
+import { resolveAgentTemplatesDir } from '../../core/insights/agent-evolution-sources.js';
+import { parseAgentPatchEnvelope, } from '../../core/insights/agent-distill-spawn.js';
+import { scanAgentPatch } from '../../core/insights/agent-anchor-guard.js';
+import { applyUnifiedDiff, setFrontmatterVersion, PatchApplyError, } from '../../core/insights/agent-patch-apply.js';
+import { buildAgentDistillPreview, runRollback } from '../../cli/commands/agent.js';
+import { syncAgents } from '../../daemon/agent-sync.js';
+import { agentDistillManager, AgentDistillConflictError, AgentDistillCapacityError, } from '../services/agent-distill-manager.js';
+/** Whitelist: lowercase kebab, anchored + length-bounded → blocks `../foo`. */
+const AGENT_NAME_RE = /^[a-z0-9][a-z0-9-]{0,63}$/;
+function isLocalRequest(req) {
+    const ip = req.socket.remoteAddress;
+    if (!ip)
+        return false;
+    return ip === '127.0.0.1' || ip === '::1' || ip === '::ffff:127.0.0.1';
+}
+function enforceLocalOnly(req, res) {
+    if (!isLocalRequest(req)) {
+        res.status(403).json({
+            error: 'forbidden',
+            detail: 'agent/distill is local-only (loopback access required)',
+        });
+        return false;
+    }
+    return true;
+}
+/** Validate `:agent` (or body.agent). Writes 400 + returns null on failure. */
+function validateAgentName(name, res) {
+    if (typeof name !== 'string' || !AGENT_NAME_RE.test(name)) {
+        res.status(400).json({ error: 'invalid_agent_name' });
+        return null;
+    }
+    return name;
+}
+/**
+ * Heuristic cost estimate (量级启发式; user Open-Q3). Agent distill is a single
+ * spawn: input ≈ prompt+template tokens, output ≈ patch tokens. Returns a
+ * rough magnitude so the confirm dialog can warn "this burns LLM".
+ */
+function estimateAgentDistillCost(templateBytes) {
+    // ~4 chars/token; prompt wraps the template + health/drift JSON (~1.5x).
+    const inputTokens = Math.round((templateBytes / 4) * 1.5) + 1500;
+    const outputTokens = 1200; // a patch + rationale envelope
+    return {
+        inputTokens,
+        outputTokens,
+        total: inputTokens + outputTokens,
+        note: '量级估算（单次 spawn）：实际取决于模板大小与改动幅度。生成草案会真烧 LLM。',
+    };
+}
+/**
+ * Read a draft for an agent at a target version. Searches docs/design under the
+ * repo root: `docs/design/<date>/agent-distill/<agent>-v<N>-draft.md`. Picks the
+ * most-recent matching file. Returns null if none.
+ */
+function findDraftPath(agent, targetVersion, repoRoot) {
+    const base = path.join(repoRoot, 'docs', 'design');
+    if (!fs.existsSync(base))
+        return null;
+    const wanted = `${agent}-v${targetVersion}-draft.md`;
+    let dates = [];
+    try {
+        dates = fs
+            .readdirSync(base, { withFileTypes: true })
+            .filter((e) => e.isDirectory())
+            .map((e) => e.name)
+            .sort()
+            .reverse(); // newest date first
+    }
+    catch {
+        return null;
+    }
+    for (const d of dates) {
+        const candidate = path.join(base, d, 'agent-distill', wanted);
+        if (fs.existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+/** Extract the unified-diff patch from a draft markdown (its ```diff block). */
+function extractPatchFromDraft(draftText) {
+    const parsed = parseAgentPatchEnvelope(draftText);
+    if (parsed && parsed.kind === 'patch' && parsed.patch.trim())
+        return parsed.patch;
+    // The draft wraps the patch in a fenced ```diff block (renderDraft); parse
+    // that directly as a fallback.
+    const fence = draftText.match(/```diff\s*\n([\s\S]*?)```/);
+    if (fence && fence[1].trim())
+        return fence[1].trimEnd();
+    return null;
+}
+/**
+ * Adopt core (decision 568a8c53) — the only template-write logic, extracted so
+ * it is testable against a sandbox dir without touching the real repo. Runs the
+ * post-validation safety gates 4-6:
+ *   4. draft existence (404)
+ *   5. anchor-guard re-scan (422)
+ *   6. evolvable-only apply + mechanical version bump + byte-identical installed
+ *      copy + write-after self-check (invariant 75344363).
+ *
+ * Gates 1-3 (loopback / name regex / confirmedDiff) are enforced by the route
+ * before calling this. Pure aside from the fs reads/writes it performs.
+ */
+export function applyAdopt(args) {
+    const { agent, targetVersion, templatesDir, installedDir, repoRoot } = args;
+    const templatePath = path.join(templatesDir, `${agent}.md`);
+    const installedPath = path.join(installedDir, `${agent}.md`);
+    // Gate 4: draft must exist.
+    const draftPath = findDraftPath(agent, targetVersion, repoRoot);
+    if (!draftPath) {
+        return { status: 404, body: { error: 'draft_not_found', agent, targetVersion } };
+    }
+    if (!fs.existsSync(templatePath)) {
+        return { status: 404, body: { error: 'agent_template_not_found', agent } };
+    }
+    let patch;
+    try {
+        patch = extractPatchFromDraft(fs.readFileSync(draftPath, 'utf-8'));
+    }
+    catch (err) {
+        return { status: 500, body: { error: 'draft_read_failed', detail: String(err) } };
+    }
+    if (!patch) {
+        return { status: 422, body: { error: 'draft_has_no_patch', draftPath } };
+    }
+    // Gate 5: anchor-guard re-scan (defence-in-depth).
+    const violations = scanAgentPatch(patch);
+    if (violations.length > 0) {
+        return {
+            status: 422,
+            body: {
+                error: 'anchor_violation',
+                detail: `patch touches ${violations.length} protected region(s) — not written`,
+                violations: violations.map((v) => ({ region: v.region, line: v.line, patchLine: v.patchLine })),
+            },
+        };
+    }
+    // Gate 6: apply + bump + byte-copy + self-check.
+    const originalSrc = fs.readFileSync(templatePath, 'utf-8');
+    let newTemplate;
+    try {
+        const applied = applyUnifiedDiff(originalSrc, patch);
+        newTemplate = setFrontmatterVersion(applied, targetVersion);
+    }
+    catch (err) {
+        if (err instanceof PatchApplyError) {
+            return { status: 422, body: { error: 'patch_apply_failed', detail: err.message, hunkIndex: err.hunkIndex } };
+        }
+        return { status: 422, body: { error: 'patch_apply_failed', detail: String(err) } };
+    }
+    try {
+        fs.writeFileSync(templatePath, newTemplate, 'utf-8');
+        fs.mkdirSync(path.dirname(installedPath), { recursive: true });
+        fs.writeFileSync(installedPath, newTemplate, 'utf-8');
+    }
+    catch (err) {
+        try {
+            fs.writeFileSync(templatePath, originalSrc, 'utf-8');
+        }
+        catch { /* ignore */ }
+        return { status: 500, body: { error: 'write_failed', detail: String(err) } };
+    }
+    // Write-after self-check: src === installed (invariant 75344363).
+    const srcAfter = fs.readFileSync(templatePath, 'utf-8');
+    const installedAfter = fs.existsSync(installedPath) ? fs.readFileSync(installedPath, 'utf-8') : '';
+    if (srcAfter !== installedAfter) {
+        try {
+            fs.writeFileSync(templatePath, originalSrc, 'utf-8');
+        }
+        catch { /* ignore */ }
+        return {
+            status: 500,
+            body: {
+                error: 'byte_identity_self_check_failed',
+                detail: `src and installed copy diverge after write — rolled back ${templatePath}`,
+            },
+        };
+    }
+    // Sync to ~/.claude/agents/ (best-effort; fail-soft).
+    let synced = false;
+    try {
+        (args.sync ?? syncAgents)();
+        synced = true;
+    }
+    catch (err) {
+        logger.warn(`[agent-distill] syncAgents after adopt failed (non-fatal): ${err}`);
+    }
+    return {
+        status: 200,
+        body: {
+            adopted: true,
+            agent,
+            version: targetVersion,
+            srcPath: templatePath,
+            installedPath,
+            synced,
+            outcomeHint: `采纳完成。该决策已闭环——可手动回填：cf decisions outcome <id> --result success --note "web adopt ${agent} v${targetVersion}"（outcome 永不自动归因）。`,
+        },
+    };
+}
+export function registerAgentDistillRoutes(app, _ctx) {
+    // ── GET /api/agent/distill/status ──────────────────────────────────────────
+    app.get('/api/agent/distill/status', (req, res) => {
+        if (!enforceLocalOnly(req, res))
+            return;
+        try {
+            const claudeBin = findClaudeBin();
+            const last = agentDistillManager.getLastFinished();
+            res.json({
+                isBusy: agentDistillManager.runningCount() > 0,
+                busyAgent: agentDistillManager.getBusyAgent(),
+                runningCount: agentDistillManager.runningCount(),
+                lastRunId: last?.runId ?? null,
+                claudeCliAvailable: claudeBin !== null,
+                claudeCliPath: claudeBin,
+            });
+        }
+        catch (err) {
+            logger.warn(`[agent-distill] /status failed: ${err}`);
+            res.status(500).json({ error: 'status_failed', detail: String(err) });
+        }
+    });
+    // ── GET /api/agent/distill/preview/:agent  (dry-run; FREE, no spawn) ───────
+    app.get('/api/agent/distill/preview/:agent', (req, res) => {
+        if (!enforceLocalOnly(req, res))
+            return;
+        const agent = validateAgentName(req.params.agent, res);
+        if (!agent)
+            return;
+        const days = parseInt(String(req.query.days ?? '30'), 10);
+        const win = Number.isFinite(days) && days >= 1 && days <= 365 ? days : 30;
+        let storage;
+        try {
+            storage = new SQLiteStorage(FORGE_PATHS.database());
+        }
+        catch (err) {
+            res.status(500).json({ error: 'storage_failed', detail: String(err) });
+            return;
+        }
+        try {
+            const preview = buildAgentDistillPreview(agent, { storage, days: win });
+            res.json(preview);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (msg.includes('no agent template found')) {
+                res.status(404).json({ error: 'agent_template_not_found', detail: msg });
+            }
+            else {
+                logger.warn(`[agent-distill] /preview failed: ${err}`);
+                res.status(500).json({ error: 'preview_failed', detail: msg });
+            }
+        }
+        finally {
+            try {
+                storage.close();
+            }
+            catch { /* ignore */ }
+        }
+    });
+    // ── GET /api/agent/distill/cost-estimate/:agent ────────────────────────────
+    app.get('/api/agent/distill/cost-estimate/:agent', (req, res) => {
+        if (!enforceLocalOnly(req, res))
+            return;
+        const agent = validateAgentName(req.params.agent, res);
+        if (!agent)
+            return;
+        try {
+            const templatePath = path.join(resolveAgentTemplatesDir(), `${agent}.md`);
+            if (!fs.existsSync(templatePath)) {
+                res.status(404).json({ error: 'agent_template_not_found' });
+                return;
+            }
+            const bytes = fs.statSync(templatePath).size;
+            res.json({ agent, ...estimateAgentDistillCost(bytes) });
+        }
+        catch (err) {
+            logger.warn(`[agent-distill] /cost-estimate failed: ${err}`);
+            res.status(500).json({ error: 'cost_estimate_failed', detail: String(err) });
+        }
+    });
+    // ── GET /api/agent/distill/draft/:agent  (latest draft for diff display) ───
+    app.get('/api/agent/distill/draft/:agent', (req, res) => {
+        if (!enforceLocalOnly(req, res))
+            return;
+        const agent = validateAgentName(req.params.agent, res);
+        if (!agent)
+            return;
+        const tv = parseInt(String(req.query.targetVersion ?? ''), 10);
+        try {
+            const repoRoot = process.cwd();
+            const templatePath = path.join(resolveAgentTemplatesDir(), `${agent}.md`);
+            const currentTemplate = fs.existsSync(templatePath)
+                ? fs.readFileSync(templatePath, 'utf-8')
+                : '';
+            const currentVersion = readVersion(currentTemplate);
+            // If targetVersion not given, default to currentVersion+1 then probe down.
+            const wantedVersions = Number.isFinite(tv) && tv > 0
+                ? [tv]
+                : [currentVersion + 1, currentVersion + 2, currentVersion + 3];
+            let draftPath = null;
+            let targetVersion = 0;
+            for (const v of wantedVersions) {
+                const p = findDraftPath(agent, v, repoRoot);
+                if (p) {
+                    draftPath = p;
+                    targetVersion = v;
+                    break;
+                }
+            }
+            if (!draftPath) {
+                res.status(404).json({ error: 'draft_not_found', agent });
+                return;
+            }
+            const draftText = fs.readFileSync(draftPath, 'utf-8');
+            const patch = extractPatchFromDraft(draftText);
+            res.json({
+                agent,
+                draftPath,
+                currentVersion,
+                targetVersion,
+                patch,
+                currentTemplate,
+                draftMarkdown: draftText,
+            });
+        }
+        catch (err) {
+            logger.warn(`[agent-distill] /draft failed: ${err}`);
+            res.status(500).json({ error: 'draft_failed', detail: String(err) });
+        }
+    });
+    // ── GET /api/agent/distill/run/:runId/stream  (SSE) ────────────────────────
+    app.get('/api/agent/distill/run/:runId/stream', (req, res) => {
+        if (!enforceLocalOnly(req, res))
+            return;
+        const { runId } = req.params;
+        const session = agentDistillManager.getSession(runId);
+        if (!session) {
+            res.status(404).json({ error: 'unknown_run_id' });
+            return;
+        }
+        res.writeHead(200, {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache',
+            Connection: 'keep-alive',
+            'X-Accel-Buffering': 'no',
+        });
+        res.write('event: connected\ndata: {}\n\n');
+        const heartbeatInterval = setInterval(() => {
+            if (!res.writableEnded) {
+                try {
+                    res.write(':heartbeat\n\n');
+                }
+                catch { /* client gone */ }
+            }
+        }, 30_000);
+        heartbeatInterval.unref?.();
+        // Replay accumulated events so a reconnect (page refresh) resumes progress.
+        for (const ev of session.events) {
+            res.write(`event: ${ev.type}\ndata: ${JSON.stringify(ev)}\n\n`);
+        }
+        if (session.doneAt != null) {
+            clearInterval(heartbeatInterval);
+            res.end();
+            return;
+        }
+        const send = (ev) => {
+            try {
+                res.write(`event: ${ev.type}\ndata: ${JSON.stringify(ev)}\n\n`);
+                if (ev.type === 'done' || ev.type === 'error' || ev.type === 'cancelled') {
+                    clearInterval(heartbeatInterval);
+                    res.end();
+                }
+            }
+            catch (err) {
+                clearInterval(heartbeatInterval);
+                logger.warn(`[agent-distill] SSE write failed: ${err}`);
+            }
+        };
+        const unsubscribe = agentDistillManager.subscribe(runId, send);
+        req.on('close', () => {
+            clearInterval(heartbeatInterval);
+            unsubscribe();
+        });
+    });
+    // ── POST /api/agent/distill/run  (kick off; per-agent mutex) ───────────────
+    app.post('/api/agent/distill/run', (req, res) => {
+        if (!enforceLocalOnly(req, res))
+            return;
+        const body = (req.body ?? {});
+        const agent = validateAgentName(body.agent, res);
+        if (!agent)
+            return;
+        const days = typeof body.days === 'number' && body.days >= 1 && body.days <= 365
+            ? Math.floor(body.days) : undefined;
+        const maxFailures = typeof body.maxFailures === 'number' && body.maxFailures >= 0 && body.maxFailures <= 50
+            ? Math.floor(body.maxFailures) : undefined;
+        try {
+            const { runId } = agentDistillManager.start({ agent, days, maxFailures });
+            res.status(202).json({
+                runId,
+                agent,
+                streamUrl: `/api/agent/distill/run/${runId}/stream`,
+            });
+        }
+        catch (err) {
+            if (err instanceof AgentDistillConflictError) {
+                res.status(409).json({ error: 'agent_distill_in_progress', agent: err.agent, detail: err.message });
+                return;
+            }
+            if (err instanceof AgentDistillCapacityError) {
+                res.status(409).json({ error: 'agent_distill_capacity', detail: err.message });
+                return;
+            }
+            logger.warn(`[agent-distill] /run failed: ${err}`);
+            res.status(500).json({ error: 'run_failed', detail: String(err) });
+        }
+    });
+    // ── POST /api/agent/distill/cancel/:runId ──────────────────────────────────
+    app.post('/api/agent/distill/cancel/:runId', (req, res) => {
+        if (!enforceLocalOnly(req, res))
+            return;
+        const { runId } = req.params;
+        const ok = agentDistillManager.cancel(runId);
+        if (!ok) {
+            res.status(404).json({ error: 'unknown_run_id_or_already_finished' });
+            return;
+        }
+        res.json({ cancelled: true, runId });
+    });
+    // ── POST /api/agent/adopt  (THE only web→write template path; 6 gates) ─────
+    app.post('/api/agent/adopt', (req, res) => {
+        // Gate 1: loopback-only.
+        if (!enforceLocalOnly(req, res))
+            return;
+        const body = (req.body ?? {});
+        // Gate 2: agent-name whitelist (blocks path traversal).
+        const agent = validateAgentName(body.agent, res);
+        if (!agent)
+            return;
+        // Gate 3: confirmedDiff must be literally true (human saw the diff).
+        if (body.confirmedDiff !== true) {
+            res.status(400).json({ error: 'diff_not_confirmed', detail: 'confirmedDiff must be true (human must view the diff first)' });
+            return;
+        }
+        const targetVersion = typeof body.targetVersion === 'number'
+            ? Math.floor(body.targetVersion) : NaN;
+        if (!Number.isFinite(targetVersion) || targetVersion < 2) {
+            res.status(400).json({ error: 'invalid_target_version', detail: 'targetVersion must be an integer ≥ 2' });
+            return;
+        }
+        const repoRoot = process.cwd();
+        const result = applyAdopt({
+            agent,
+            targetVersion,
+            templatesDir: resolveAgentTemplatesDir(),
+            installedDir: path.join(repoRoot, '.claude', 'agents'),
+            repoRoot,
+        });
+        res.status(result.status).json(result.body);
+    });
+    // ── POST /api/agent/rollback  (mirrors `cf agent rollback --write`) ────────
+    app.post('/api/agent/rollback', (req, res) => {
+        if (!enforceLocalOnly(req, res))
+            return;
+        const body = (req.body ?? {});
+        const agent = validateAgentName(body.agent, res);
+        if (!agent)
+            return;
+        if (body.confirmed !== true) {
+            res.status(400).json({ error: 'not_confirmed', detail: 'confirmed must be true' });
+            return;
+        }
+        const toVersion = typeof body.toVersion === 'number' ? Math.floor(body.toVersion) : NaN;
+        if (!Number.isFinite(toVersion) || toVersion < 1) {
+            res.status(400).json({ error: 'invalid_to_version' });
+            return;
+        }
+        // Reuse the CLI's --write path verbatim (HEAD blob + version-match heuristic;
+        // byte-identity self-check built in). Capture its log/error via deps.io.
+        const logs = [];
+        const errs = [];
+        const code = runRollback(agent, { to: String(toVersion), write: true }, { io: { log: (m) => logs.push(m), error: (m) => errs.push(m) } });
+        if (code !== 0) {
+            const detail = errs.join('\n');
+            // A version mismatch from the heuristic → 422 (matches CLI semantics; user
+            // must checkout the ref carrying that version).
+            const status = /version|blob/i.test(detail) ? 422 : 500;
+            res.status(status).json({ error: 'rollback_failed', detail, logs });
+            return;
+        }
+        res.json({ rolledBack: true, agent, version: toVersion, logs });
+    });
+}
+/** Parse a `version: N` frontmatter line (default 1). */
+function readVersion(templateText) {
+    const fenceEnd = templateText.indexOf('\n---', 4);
+    const head = fenceEnd > 0 ? templateText.slice(0, fenceEnd) : templateText;
+    const m = head.match(/^version:\s*([0-9]+)\s*$/m);
+    return m ? parseInt(m[1], 10) : 1;
+}
+//# sourceMappingURL=agent-distill.js.map

package/dist/web/routes/agent-distill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-distill.js","sourceRoot":"","sources":["../../../src/web/routes/agent-distill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EACL,uBAAuB,GACxB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,GAChB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,GAE1B,MAAM,sCAAsC,CAAC;AAG9C,+EAA+E;AAC/E,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAElD,SAAS,cAAc,CAAC,GAAY;IAClC,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;IACpC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,OAAO,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,kBAAkB,CAAC;AACzE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY,EAAE,GAAa;IACnD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,wDAAwD;SACjE,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,SAAS,iBAAiB,CAAC,IAAa,EAAE,GAAa;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,aAAqB;IAMrD,yEAAyE;IACzE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;IACjE,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,+BAA+B;IAC1D,OAAO;QACL,WAAW;QACX,YAAY;QACZ,KAAK,EAAE,WAAW,GAAG,YAAY;QACjC,IAAI,EAAE,4CAA4C;KACnD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,aAAqB,EAAE,QAAgB;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,GAAG,KAAK,KAAK,aAAa,WAAW,CAAC;IACrD,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE;aACP,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,EAAE;aACN,OAAO,EAAE,CAAC,CAAC,oBAAoB;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAClF,2EAA2E;IAC3E,+BAA+B;IAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC3D,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CAAC,IAQ1B;IACC,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;IAE7D,4BAA4B;IAC5B,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,KAAK,EAAE,EAAE,CAAC;IAC7E,CAAC;IAED,IAAI,KAAoB,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,qBAAqB,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,mDAAmD;IACnD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,iBAAiB,UAAU,CAAC,MAAM,oCAAoC;gBAC9E,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;aAChG;SACF,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACrD,WAAW,GAAG,qBAAqB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;YACnC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC;QAC/G,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACrF,CAAC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACrD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACpF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC/E,CAAC;IAED,kEAAkE;IAClE,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChC,IAAI,CAAC;YAAC,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACpF,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,iCAAiC;gBACxC,MAAM,EAAE,4DAA4D,YAAY,EAAE;aACnF;SACF,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,CAAC,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,8DAA8D,GAAG,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI;YACb,KAAK;YACL,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,YAAY;YACrB,aAAa;YACb,MAAM;YACN,WAAW,EACT,mFAAmF,KAAK,KAAK,aAAa,oBAAoB;SACjI;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAgB,EAAE,IAAkB;IAC7E,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACxC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,mBAAmB,CAAC,eAAe,EAAE,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,mBAAmB,CAAC,YAAY,EAAE,GAAG,CAAC;gBAC9C,SAAS,EAAE,mBAAmB,CAAC,YAAY,EAAE;gBAC7C,YAAY,EAAE,mBAAmB,CAAC,YAAY,EAAE;gBAChD,SAAS,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI;gBAC9B,kBAAkB,EAAE,SAAS,KAAK,IAAI;gBACtC,aAAa,EAAE,SAAS;aACzB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;YACtD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,mCAAmC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACxC,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAE1E,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACxE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;gBACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,yCAAyC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9D,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACxC,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;YAC1E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,0CAA0C,GAAG,EAAE,CAAC,CAAC;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACxC,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;YAC1E,MAAM,eAAe,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;gBACjD,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC;gBACxC,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,cAAc,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;YAEpD,2EAA2E;YAC3E,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;gBAClD,CAAC,CAAC,CAAC,EAAE,CAAC;gBACN,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,EAAE,cAAc,GAAG,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC;YACjE,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC5C,IAAI,CAAC,EAAE,CAAC;oBAAC,SAAS,GAAG,CAAC,CAAC;oBAAC,aAAa,GAAG,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;YACrD,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK;gBACL,SAAS;gBACT,cAAc;gBACd,aAAa;gBACb,KAAK;gBACL,eAAe;gBACf,aAAa,EAAE,SAAS;aACzB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,sCAAsC,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC9E,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACxC,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAA2B,CAAC;QAClD,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAE5C,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE;YACzC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBACvB,IAAI,CAAC;oBAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC;QAE5B,4EAA4E;QAC5E,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAChC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;YAC3B,aAAa,CAAC,iBAAiB,CAAC,CAAC;YACjC,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,EAAqB,EAAE,EAAE;YACrC,IAAI,CAAC;gBACH,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;gBAChE,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,EAAE,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACzE,aAAa,CAAC,iBAAiB,CAAC,CAAC;oBACjC,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,aAAa,CAAC,iBAAiB,CAAC,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,qCAAqC,GAAG,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,aAAa,CAAC,iBAAiB,CAAC,CAAC;YACjC,WAAW,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACxC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA+D,CAAC;QAC5F,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG;YAC9E,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtC,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE;YACzG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC1E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK;gBACL,KAAK;gBACL,SAAS,EAAE,0BAA0B,KAAK,SAAS;aACpD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpG,OAAO;YACT,CAAC;YACD,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC/E,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACxC,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAA2B,CAAC;QAClD,MAAM,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxC,yBAAyB;QACzB,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACxC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAI3B,CAAC;QACF,wDAAwD;QACxD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,qEAAqE;QACrE,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC,CAAC;YAC7H,OAAO;QACT,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;YAC1D,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAC1G,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,KAAK;YACL,aAAa;YACb,YAAY,EAAE,wBAAwB,EAAE;YACxC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;YACtD,QAAQ;SACT,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACxC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAkE,CAAC;QAC/F,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACxF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,8EAA8E;QAC9E,yEAAyE;QACzE,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EACL,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EACtC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACjE,CAAC;QACF,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,2EAA2E;YAC3E,gDAAgD;YAChD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yDAAyD;AACzD,SAAS,WAAW,CAAC,YAAoB;IACvC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC3E,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAClD,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC"}

package/dist/web/routes/config.d.ts

@@ -0,0 +1,56 @@
+/**
+ * /api/config — 可写运行时配置端点（Arco Phase 4a, decision 29688066）
+ *
+ * 唯一硬后端缺口：设置页要可写。读全量供回显（GET），白名单 + 范围/类型校验
+ * 后写单个 forge_config 行（POST）。校验模式镜像 `insights.ts` 的 tuning/apply：
+ *   - 硬性白名单 CONFIG_WRITE_WHITELIST（只允许预定义的可写 key）
+ *   - 每个 key 自带类型（bool|int）+ 数值范围 + 治理标记
+ *   - 命中走 storage.writeConfig(key, value)（INSERT OR REPLACE + updated_at）
+ *
+ * 鉴权：server.ts 已对所有 `/api` 非 GET → requireAuth（Bearer），POST 天然受保护。
+ *
+ * 治理类 key（needsRestart=true）写入后返回 `needsRestart: true` + 提示，
+ * 前端据此显示「需 restart daemon 生效」（Q2，用户拍板）。
+ *
+ * 安全（Risk R5）：严禁开放任意 key 写入——白名单是硬约束，未命中直接 400
+ * INVALID_KEY，绝不写 storage。schema 相关 / 运行时常量类 key（KB 注入 threshold
+ * 是 knowledge 常量、非 forge_config，TASK_SWITCH_MINUTES 同理）不暴露为可写。
+ */
+import type { Application } from 'express';
+import type { RouteContext } from './types.js';
+/** 可写 key 的类型 + 校验规约。 */
+interface ConfigSpec {
+    /** 'bool' → 只接受 'true'|'false'；'int' → 整数字符串 + [min,max] 区间。 */
+    type: 'bool' | 'int';
+    /** int 类型的闭区间下界（含）。 */
+    min?: number;
+    /** int 类型的闭区间上界（含）。 */
+    max?: number;
+    /**
+     * 治理类 key —— 写入 forge_config 后 daemon 需重启才会重新 seed/读取生效。
+     * 命中则响应 needsRestart=true（镜像 tuning/apply 的 enable_cmd 提示语义）。
+     */
+    governance: boolean;
+    /** UI 标签（设置页表单回显用）。 */
+    label: string;
+    /** UI 说明（设置页表单回显用）。 */
+    description: string;
+    /** 分组（设置页分组卡）。 */
+    group: 'threshold' | 'governance' | 'retention';
+}
+/**
+ * 硬性白名单：设置页唯一可写的 key 集合。每个 key 必须真实存在于
+ * forge_config（由 daemon `DEFAULT_FLAGS` seed），绝不编造不存在的 key。
+ *
+ * 故意排除：
+ *   - KB 注入 threshold（25）—— 是 `src/knowledge/constants.ts` 常量，不是
+ *     forge_config 行，写了 daemon 也不读。
+ *   - TASK_SWITCH_MINUTES / MAX_BUFFER_SIZE —— 同为编译期常量（task-segmenter.ts /
+ *     server.ts），无 config 回路，不暴露为可写（防误导用户改一个不生效的值）。
+ *   - `pre_tool_intercept.disabled_project_prefixes` —— 自由文本路径列表，
+ *     范围校验难、误改风险高，本轮不开放。
+ */
+export declare const CONFIG_WRITE_WHITELIST: Readonly<Record<string, ConfigSpec>>;
+export declare function registerConfigRoutes(app: Application, ctx: RouteContext): void;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/web/routes/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/web/routes/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM/C,yBAAyB;AACzB,UAAU,UAAU;IAClB,gEAAgE;IAChE,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,uBAAuB;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB,uBAAuB;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,KAAK,EAAE,WAAW,GAAG,YAAY,GAAG,WAAW,CAAC;CACjD;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAgEtE,CAAC;AAuCH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAmH9E"}