@wrongstack/core 0.284.0 → 0.285.0

package/dist/storage/cloud-sync.d.ts

@@ -0,0 +1,44 @@
+import type { WstackPaths } from '../utils/wstack-paths.js';
+import type { SyncCategory, SyncConfig } from '../types/config.js';
+export declare const ALL_SYNC_CATEGORIES: SyncCategory[];
+export interface SyncResult {
+    ok: boolean;
+    action: 'push' | 'pull';
+    categories: SyncCategory[];
+    committedAt?: string | undefined;
+    message: string;
+}
+/**
+ * CloudSync — push/pull user-selected ~/.wrongstack categories to a
+ * private GitHub repo. No git CLI needed; uses GitHub REST API via fetch.
+ * The token is stored encrypted via SecretVault (field named `githubToken`
+ * so the vault walker picks it up automatically).
+ */
+export declare class CloudSync {
+    private readonly paths;
+    private readonly getConfig;
+    private readonly setConfig;
+    private readonly statePath;
+    private state;
+    constructor(paths: WstackPaths, getConfig: () => SyncConfig | null, setConfig: (c: SyncConfig) => Promise<void>);
+    status(): Promise<string>;
+    enable(_repo: string, _categories: SyncCategory[]): Promise<string>;
+    disable(): Promise<string>;
+    push(token: string): Promise<SyncResult>;
+    pull(token: string): Promise<SyncResult>;
+    hasLocalChanges(): Promise<boolean>;
+    loadState(): Promise<void>;
+    private githubFetch;
+    private getRef;
+    private updateRef;
+    private getCommit;
+    private getTreeEntries;
+    private createCommit;
+    private createGitTree;
+    private getBlob;
+    private buildLocalTree;
+    private hashLocalCategories;
+    private categoryToPath;
+    private walkDir;
+}
+//# sourceMappingURL=cloud-sync.d.ts.map

package/dist/storage/cloud-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-sync.d.ts","sourceRoot":"","sources":["../../src/storage/cloud-sync.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEnE,eAAO,MAAM,mBAAmB,EAAE,YAAY,EAA2D,CAAC;AAE1G,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;CACjB;AASD;;;;;GAKG;AACH,qBAAa,SAAS;IAKlB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAN5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,KAAK,CAA8B;IAE3C,YACmB,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,MAAM,UAAU,GAAG,IAAI,EAClC,SAAS,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,EAG7D;IAIK,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAa9B;IAEK,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAGxE;IAEK,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAM/B;IAEK,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAqD7C;IAEK,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAyD7C;IAEK,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAMxC;IAEK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAO/B;YAIa,WAAW;YAoCX,MAAM;YAMN,SAAS;YAOT,SAAS;YAOT,cAAc;YAQd,YAAY;YAUZ,aAAa;YAiBb,OAAO;YAOP,cAAc;YAkCd,mBAAmB;IAwBjC,OAAO,CAAC,cAAc;YAYR,OAAO;CAatB"}

package/dist/storage/completed-work-checkpoint.d.ts

@@ -0,0 +1,11 @@
+import type { EventBus } from '../kernel/events.js';
+import type { CompletedWorkEvidence } from '../types/context-evidence.js';
+export interface CompletedWorkCheckpointFile {
+    version: 1;
+    sessionId: string;
+    updatedAt: string;
+    completedWork: CompletedWorkEvidence[];
+}
+export declare function loadCompletedWorkCheckpoint(filePath: string, events?: EventBus, traceId?: string): Promise<CompletedWorkEvidence[] | null>;
+export declare function saveCompletedWorkCheckpoint(filePath: string, sessionId: string, completedWork: readonly CompletedWorkEvidence[], events?: EventBus, traceId?: string): Promise<void>;
+//# sourceMappingURL=completed-work-checkpoint.d.ts.map

package/dist/storage/completed-work-checkpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"completed-work-checkpoint.d.ts","sourceRoot":"","sources":["../../src/storage/completed-work-checkpoint.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAI1E,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,qBAAqB,EAAE,CAAC;CACxC;AAED,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,QAAQ,EACjB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,EAAE,GAAG,IAAI,CAAC,CAuDzC;AAED,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,SAAS,qBAAqB,EAAE,EAC/C,MAAM,CAAC,EAAE,QAAQ,EACjB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAoCf"}

package/dist/storage/config-loader.d.ts

@@ -0,0 +1,104 @@
+import type { EventBus } from '../kernel/events.js';
+import { type Config, type ConfigLoader, type SyncConfig } from '../types/config.js';
+import type { SecretVault } from '../types/secret-vault.js';
+import type { WstackPaths } from '../utils/wstack-paths.js';
+type PartialConfig = Partial<Config> & {
+    providers?: Record<string, {
+        apiKey?: string | undefined;
+        baseUrl?: string | undefined;
+        type?: string | undefined;
+    }>;
+    /** Fields that came from environment variables — must not be persisted. */
+    _envSource?: Set<string> | undefined;
+};
+/**
+ * Assert that the allow-list and deny-list together cover every top-level
+ * field of `Config`. Throws on drift so the failure is loud at test time and
+ * at first boot, not a silent widening of the attack surface. Exported so
+ * tests (and any consumer building tooling on top of this) can call it
+ * explicitly; `stripUnsafeInProjectFields()` also calls it lazily on its
+ * first invocation so the guarantee is structural, not test-only.
+ *
+ * The check is two-sided:
+ *   1. Every key in `KNOWN_CONFIG_TOP_LEVEL_KEYS` is either allowed or
+ *      explicitly documented as denied (catches: "added a new field but
+ *      forgot to decide").
+ *   2. Every entry in `KNOWN_DENIED_IN_PROJECT` actually exists on Config
+ *      (catches: "left a stale denied-field entry behind after a rename").
+ *   3. The two lists are disjoint (catches: "put the same field in both
+ *      lists; allow-list silently wins and the deny docs lie").
+ */
+export declare function assertInProjectAllowListComplete(): void;
+/**
+ * Remove forbidden top-level keys from a repo-committed in-project config
+ * before it is merged. Returns a new object; the original is not mutated.
+ * Emits a warning (and a `config.read` failure-style event) naming the
+ * stripped keys so the behavior is observable rather than silent.
+ *
+ * On first invocation, runs `assertInProjectAllowListComplete()` to verify
+ * the allow-list + deny-list together still cover every top-level field of
+ * `Config`. The check is idempotent and the result is memoized so the cost
+ * is paid at most once per process. The assertion throws on drift, which
+ * surfaces the issue at boot in production and at first test invocation in
+ * CI — both observable, never silent.
+ */
+export declare function stripUnsafeInProjectFields(inProject: PartialConfig, sourcePath: string, warn?: (msg: string) => void): PartialConfig;
+/**
+ * A single config source. Higher priority wins in merges.
+ * Sources are applied in priority order (lowest first), so a source
+ * with priority=10 overrides one with priority=1.
+ */
+export interface ConfigSource {
+    /** Unique name for debugging and error messages. */
+    name: string;
+    /** Lower numbers merge first, higher numbers override lower. Default: 50. */
+    priority?: number | undefined;
+    /**
+     * Read the raw config patch. Return an empty object if unavailable.
+     * Errors are surfaced but do not abort loading — the source is skipped.
+     */
+    read(): Promise<Partial<Config>>;
+}
+export interface ConfigLoaderOptions {
+    paths: WstackPaths;
+    strict?: boolean | undefined;
+    vault?: SecretVault | undefined;
+    /** Extra sources merged after the built-in layers. */
+    sources?: ConfigSource[] | undefined;
+    events?: EventBus;
+    traceId?: string;
+}
+export declare class DefaultConfigLoader implements ConfigLoader {
+    private readonly paths;
+    private readonly strict;
+    private readonly vault;
+    private readonly extraSources;
+    private readonly events;
+    private readonly traceId;
+    private readonly jsonCache;
+    constructor(opts: ConfigLoaderOptions);
+    load(opts?: {
+        cliFlags?: Partial<Config> | undefined;
+        cwd?: string | undefined;
+        skipIdentityValidation?: boolean;
+    }): Promise<Config>;
+    private ensureGlobalDefaults;
+    /**
+     * Persist a sync config to ~/.wrongstack/sync.json, with the token encrypted
+     * by the vault (if provided). The file is isolated from the main config
+     * hierarchy to prevent accidental commits.
+     */
+    persistSyncConfig(cfg: SyncConfig): Promise<void>;
+    /**
+     * Read ~/.wrongstack/sync.json (encrypted GitHub token storage) and decrypt
+     * the token if a vault is available. Returns null if the file doesn't exist.
+     * This is separate from main config loading because sync.json is intentionally
+     * isolated — it should never be part of project-local or env-driven config.
+     */
+    loadSyncConfig(): Promise<SyncConfig | null>;
+    private readJson;
+    private validateBehavior;
+    private validateIdentity;
+}
+export {};
+//# sourceMappingURL=config-loader.d.ts.map

package/dist/storage/config-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../src/storage/config-loader.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EACL,KAAK,MAAM,EACX,KAAK,YAAY,EAEjB,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAc5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAK5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AA6O5D,KAAK,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG;IACrC,SAAS,CAAC,EAAE,MAAM,CAChB,MAAM,EACN;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CACzF,CAAC;IACF,2EAA2E;IAC3E,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;CACtC,CAAC;AA4MF;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gCAAgC,IAAI,IAAI,CAyCvD;AAID;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,aAAa,EACxB,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAiC,GACvD,aAAa,CAuHf;AAyCD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;OAGG;IACH,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,sDAAsD;IACtD,OAAO,CAAC,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC;IACrC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAOD,qBAAa,mBAAoB,YAAW,YAAY;IACtD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2C;IAErE,YAAY,IAAI,EAAE,mBAAmB,EAOpC;IAEK,IAAI,CACR,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;KAAO,GAChH,OAAO,CAAC,MAAM,CAAC,CA6HjB;YAEa,oBAAoB;IAmFlC;;;;OAIG;IACG,iBAAiB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCtD;IAED;;;;;OAKG;IACG,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAoEjD;YAEa,QAAQ;IA4FtB,OAAO,CAAC,gBAAgB;IA4DxB,OAAO,CAAC,gBAAgB;CAgBzB"}

package/dist/storage/config-migration.d.ts

@@ -0,0 +1,87 @@
+/**
+ * L2-D: Config version migration framework. Pure functions, decoupled
+ * from disk/CLI — caller passes a parsed JSON object and gets back the
+ * up-to-date `Config` shape (or a structured error explaining why
+ * migration failed).
+ *
+ * Migrations are registered as `{ from, to, migrate }` triples and run
+ * sequentially. Each migration is independently testable. Adding a new
+ * version means appending one migration; existing user configs are
+ * upgraded in place at load time.
+ */
+export interface MigrationContext {
+    /**
+     * Original on-disk version of the input. Migrations may use this to
+     * decide between in-place patches and rewrites.
+     */
+    fromVersion: number;
+    /**
+     * Set when the migration writes back to disk. Callers persist the
+     * migrated config when this is true so the user doesn't see the same
+     * migration banner on every boot.
+     */
+    shouldPersist: boolean;
+}
+export interface ConfigMigration {
+    /** Version of the input this migration accepts. */
+    from: number;
+    /** Version of the output it produces. */
+    to: number;
+    /** Pure transform — no I/O. */
+    migrate(input: Record<string, unknown>, ctx: MigrationContext): Record<string, unknown>;
+    /** Optional human-readable description for migration logs / banners. */
+    describe?: string | undefined;
+}
+export interface MigrationResult {
+    /** Final config (still typed as `unknown`-keyed — caller validates). */
+    config: Record<string, unknown>;
+    /** Ordered list of `from→to` versions that ran. */
+    applied: string[];
+    /** True when at least one migration produced changes worth persisting. */
+    shouldPersist: boolean;
+}
+export declare class ConfigMigrationError extends Error {
+    readonly fromVersion: number;
+    readonly targetVersion: number;
+    readonly missingStep: number | null;
+    constructor(opts: {
+        message: string;
+        fromVersion: number;
+        targetVersion: number;
+        missingStep: number | null;
+    });
+}
+/**
+ * Run registered migrations until the input reaches `targetVersion`.
+ *
+ * Resolution rules:
+ * 1. If `input.version === targetVersion`, no migrations run; `shouldPersist`
+ *    is false.
+ * 2. Otherwise walk the migration chain from `input.version` upward,
+ *    picking the migration whose `from` matches the current version.
+ * 3. Stop when `current.version === targetVersion`.
+ * 4. If no migration matches at some point, throw `ConfigMigrationError`
+ *    with the missing step recorded for diagnostics.
+ *
+ * Migrations may be downward (e.g. for staged rollouts), but `targetVersion`
+ * must be reachable strictly via the registered chain — there's no implicit
+ * "skip" or transitive resolution.
+ */
+export declare function runConfigMigrations(input: Record<string, unknown>, targetVersion: number, migrations: readonly ConfigMigration[]): MigrationResult;
+/**
+ * Default empty migration registry. Real migrations are appended as new
+ * Config versions are introduced. Example (when v2 lands):
+ *
+ *   export const CONFIG_MIGRATIONS: readonly ConfigMigration[] = [
+ *     {
+ *       from: 1, to: 2, describe: 'rename `apiKey` → `auth.apiKey`',
+ *       migrate(cfg) {
+ *         const apiKey = cfg.apiKey;
+ *         delete cfg.apiKey;
+ *         return { ...cfg, auth: { ...(cfg.auth ?? {}), apiKey } };
+ *       },
+ *     },
+ *   ];
+ */
+export declare const DEFAULT_CONFIG_MIGRATIONS: readonly ConfigMigration[];
+//# sourceMappingURL=config-migration.d.ts.map

package/dist/storage/config-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-migration.d.ts","sourceRoot":"","sources":["../../src/storage/config-migration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,+BAA+B;IAC/B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxF,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAEpC,YAAY,IAAI,EAAE;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,EAMA;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,SAAS,eAAe,EAAE,GACrC,eAAe,CAuCjB;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,eAAe,EAAO,CAAC"}

package/dist/storage/config-store.d.ts

@@ -0,0 +1,22 @@
+import type { Config, ConfigStore } from '../types/config.js';
+/**
+ * Reference implementation of `ConfigStore`. Stores a single frozen Config
+ * and notifies watchers synchronously on every update. Updates use a deep
+ * clone so callers can mutate their `partial` argument freely without
+ * tainting state.
+ *
+ * For the CLI: instantiate once at boot, pass the store (not the Config)
+ * to subsystems that care about runtime changes (provider switching,
+ * extension reload).
+ */
+export declare class DefaultConfigStore implements ConfigStore {
+    private current;
+    private watchers;
+    constructor(initial: Config);
+    get(): Readonly<Config>;
+    getSection<K extends keyof Config>(key: K): Readonly<Config[K]>;
+    getExtension(pluginName: string): Readonly<Record<string, unknown>>;
+    update(partial: Partial<Config>): Readonly<Config>;
+    watch(cb: (next: Readonly<Config>, prev: Readonly<Config>) => void): () => void;
+}
+//# sourceMappingURL=config-store.d.ts.map

package/dist/storage/config-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/storage/config-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAqB9D;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,YAAW,WAAW;IACpD,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,QAAQ,CAAuE;IAEvF,YAAY,OAAO,EAAE,MAAM,EAE1B;IAED,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAEtB;IAED,UAAU,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAE9D;IAED,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAGlE;IAED,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAwCjD;IAED,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAG9E;CACF"}

package/dist/{director-state-CMS_bMs4.d.ts → storage/director-state.d.ts}

@@ -7,7 +7,7 @@
  * triggers an atomic-write of the whole file — small payloads (typically
  * < 10 KB even with dozens of subagents) make this cheap.
  */
-interface DirectorSubagentState {
+export interface DirectorSubagentState {
     id: string;
     name?: string | undefined;
     role?: string | undefined;
@@ -15,7 +15,7 @@ interface DirectorSubagentState {
     model?: string | undefined;
     spawnedAt: string;
 }
-interface DirectorTaskState {
+export interface DirectorTaskState {
     taskId: string;
     subagentId?: string | undefined;
     description?: string | undefined;
@@ -28,7 +28,7 @@ interface DirectorTaskState {
     error?: string | undefined;
     worktree?: DirectorTaskWorktreeState | undefined;
 }
-interface DirectorTaskWorktreeState {
+export interface DirectorTaskWorktreeState {
     taskId: string;
     subagentId: string;
     handleId: string;
@@ -40,7 +40,7 @@ interface DirectorTaskWorktreeState {
     conflictFiles?: string[] | undefined;
     error?: string | undefined;
 }
-interface DirectorStateSnapshot {
+export interface DirectorStateSnapshot {
     version: 1;
     directorRunId: string;
     updatedAt: string;
@@ -57,7 +57,28 @@ interface DirectorStateSnapshot {
     /** Aggregated usage snapshot. Optional — populated by the Director on save when available. */
     usage?: unknown | undefined;
 }
-declare function loadDirectorState(filePath: string): Promise<DirectorStateSnapshot | null>;
+export declare function loadDirectorState(filePath: string): Promise<DirectorStateSnapshot | null>;
+/**
+ * Lock file entry written when a director starts. Prevents two directors
+ * from resuming the same run — the second one sees the lock and refuses
+ * rather than corrupting the checkpoint by writing concurrently.
+ */
+export interface DirectorStateLock {
+    pid: number;
+    hostname: string;
+    startedAt: string;
+}
+/**
+ * Write a lock file to claim this checkpoint. Returns false if the lock
+ * is already held by a live process; returns true if the lock was acquired
+ * (either the file didn't exist, or the previous holder is dead).
+ */
+export declare function acquireDirectorStateLock(lockPath: string, processId?: number): Promise<boolean>;
+/**
+ * Remove the lock file. Call this on graceful Director.shutdown() so the
+ * next director run can claim the checkpoint without stale-lock checks.
+ */
+export declare function releaseDirectorStateLock(lockPath: string): Promise<void>;
 /**
  * In-memory accumulator with atomic-write checkpoint. The Director keeps
  * an instance, mutates it on every spawn/assign/complete/fail event, and
@@ -69,7 +90,7 @@ declare function loadDirectorState(filePath: string): Promise<DirectorStateSnaps
  * re-attach to a fleet mid-flight. The lock mechanism ensures no two
  * directors can claim the same checkpoint.
  */
-declare class DirectorStateCheckpoint {
+export declare class DirectorStateCheckpoint {
     private snapshot;
     private readonly filePath;
     private readonly lockPath;
@@ -120,5 +141,4 @@ declare class DirectorStateCheckpoint {
     private schedule;
     private persist;
 }
-
-export { type DirectorStateSnapshot as D, DirectorStateCheckpoint as a, type DirectorSubagentState as b, type DirectorTaskState as c, loadDirectorState as l };
+//# sourceMappingURL=director-state.d.ts.map

package/dist/storage/director-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"director-state.d.ts","sourceRoot":"","sources":["../../src/storage/director-state.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAC/E,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EACF,WAAW,GACX,UAAU,GACV,WAAW,GACX,QAAQ,GACR,MAAM,GACN,UAAU,GACV,UAAU,GACV,QAAQ,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,CAAC,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EACX;QACE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAChC,GACD,SAAS,CAAC;IACd,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,8FAA8F;IAC9F,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC7B;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAc/F;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAChB,SAAS,SAAc,GACtB,OAAO,CAAC,OAAO,CAAC,CAgClB;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM9E;AAED;;;;;;;;;;GAUG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAwB;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,gBAAgB,CAAS;IAEjC,YACE,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;QACJ,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,CAAC,EACX;YACE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAChC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;SAChC,GACD,SAAS,CAAC;KACf,EACD,UAAU,SAAM,EAkBjB;IAED;;;;OAIG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAEpC;IAED;;;;OAIG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAEjC;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAE5C;IAED,OAAO,IAAI,qBAAqB,CAE/B;IAED,WAAW,CAAC,GAAG,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAQhE;IAED,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAUhD;IAED,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG;QAAE,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAA;KAAE,GAC1E,IAAI,CAON;IAED,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,yBAAyB,GAAG,IAAI,CAkB5E;IAED,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAI7B;IAED,+DAA+D;IACzD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAe3B;IAED,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,QAAQ;YAQF,OAAO;CAgCtB"}

package/dist/storage/file-session-writer.d.ts

@@ -0,0 +1,169 @@
+import * as fsp from 'node:fs/promises';
+import type { EventBus } from '../kernel/events.js';
+import type { FileSnapshot, SessionEvent, SessionMetadata, SessionSummary, SessionWriter } from '../types/session.js';
+import type { SecretScrubber } from '../types/secret-scrubber.js';
+import type { SessionCheckpointCas } from './session-checkpoint-cas.js';
+/**
+ * Append-mode JSONL session writer with batched writes, write serialization,
+ * and enriched summary tracking.
+ *
+ * Extracted from session-store.ts to keep each module focused: this class
+ * owns the per-session write path (append/flush/close/checkpoint/truncate),
+ * while `DefaultSessionStore` owns the store-level read/list/index/delete path.
+ */
+export declare class FileSessionWriter implements SessionWriter {
+    readonly id: string;
+    private handle;
+    private readonly startedAt;
+    private readonly meta;
+    private readonly events?;
+    private closed;
+    private closePromise;
+    private manifestFile;
+    private summary;
+    private tokenIn;
+    private tokenOut;
+    private readonly filePath;
+    get transcriptPath(): string | undefined;
+    /**
+     * Lazy session_start/session_resumed init, shared by all appenders.
+     * A single promise (not a boolean) so a second append racing the first
+     * can't push its event into the buffer BEFORE the first append's event —
+     * every appender awaits the same init and resumes in FIFO call order.
+     */
+    private initPromise;
+    private ensureInit;
+    private readonly resumed;
+    private appendFailCount;
+    private lastAppendWarnAt;
+    private readonly secretScrubber?;
+    private readonly checkpointCas?;
+    private readonly onCloseCb?;
+    /** Implements SessionWriter.traceId — propagated from ContextInit.traceId. */
+    traceId: string | undefined;
+    private writeBuffer;
+    private flushTimer;
+    private static readonly FLUSH_INTERVAL_MS;
+    private static readonly FLUSH_SIZE;
+    private writeChain;
+    private flushChain;
+    /** Enqueue a write on the FIFO chain. Resolves/rejects with that write. */
+    private enqueueWrite;
+    private iterationCount;
+    private toolCallCount;
+    private toolErrorCount;
+    private toolBreakdown;
+    private fileChangeCount;
+    private compactionCount;
+    private outcome;
+    /**
+     * Scrub secrets out of conversation-turn events before they are observed
+     * for the summary, written to the JSONL log, or surfaced on resume. Only
+     * `user_input`, `llm_response`, and `context_snapshot` carry free-form
+     * user/model text; other event types either have no secret-bearing content
+     * or are already scrubbed upstream (tool results). Snapshot normalization
+     * also strips transient token-cache fields even when no scrubber is set.
+     */
+    private scrubEvent;
+    private pendingFileSnapshots;
+    /** Prompt whose tool work is currently executing. Set by writeCheckpoint. */
+    private activePromptIndex;
+    /** Tracks open tool_use IDs during the current run to serialize on close for resume. */
+    private openToolUses;
+    /**
+     * Buffer an event from a synchronous Context callback. ensureInit() starts
+     * by pushing the lifecycle preamble synchronously, so session_start always
+     * precedes observations even though these callbacks cannot await append().
+     */
+    private bufferSynchronousEvent;
+    recordFileChange(input: {
+        path: string;
+        action: 'created' | 'modified' | 'deleted';
+        before: string | null;
+        after: string | null;
+    }): void;
+    recordFileObservation(input: {
+        path: string;
+        hash: string;
+        mtimeMs: number;
+        source: 'user' | 'write';
+    }): void;
+    recordSideEffect(input: {
+        toolUseId: string;
+        toolName: string;
+        input: Record<string, unknown>;
+        outcome?: string | undefined;
+        risk: 'fs.write' | 'shell' | 'package' | 'network' | 'config';
+    }): void;
+    constructor(id: string, handle: fsp.FileHandle, startedAt: string, meta: Omit<SessionMetadata, 'startedAt'>, events?: EventBus | undefined, opts?: {
+        resumed?: boolean | undefined;
+        dir?: string | undefined;
+        filePath?: string | undefined;
+        secretScrubber?: SecretScrubber | undefined;
+        checkpointCas?: SessionCheckpointCas | undefined;
+        /** Called on close() with the finalized summary for index/sidecar writes. */
+        onClose?: (((summary: SessionSummary) => void | Promise<void>)) | undefined;
+    }, traceId?: string | undefined);
+    get pendingToolUses(): string[];
+    private writeSessionStartLazy;
+    append(event: SessionEvent): Promise<void>;
+    appendBatch(events: SessionEvent[]): Promise<void>;
+    /**
+     * Flush buffered events to disk immediately. Critical events
+     * (user_input, llm_response) call this so they survive SIGKILL/crash
+     * instead of sitting in the in-memory buffer for up to 500ms.
+     *
+     * Idempotent — cancels any pending timer, writes whatever has accumulated,
+     * then asks the OS to synchronize the file data before resolving. Even an
+     * empty-buffer flush synchronizes any earlier timer-driven append.
+     */
+    flush(): Promise<void>;
+    /**
+     * Last-gasp synchronous drain for hard-exit paths (process.exit after
+     * rapid Ctrl+C). The async write chain cannot be awaited when the process
+     * is about to die, but whatever still sits in the in-memory buffer CAN be
+     * saved with a blocking append. Best-effort: an in-flight async write may
+     * be cut off by the exit regardless; errors here are swallowed.
+     */
+    flushSync(): void;
+    /** Schedule a deferred flush. No-op if a timer is already pending. */
+    private scheduleFlush;
+    /**
+     * Flush all buffered events to disk as a single appendFile call.
+     * Concurrent callers join a FIFO flush chain. On failure the drained batch
+     * is prepended to the live buffer, preserving chronology and allowing the
+     * next timer/boundary flush to retry it. Warnings retain the existing
+     * throttled behavior.
+     */
+    private flushBuffer;
+    private flushBufferOnce;
+    private observeForSummary;
+    close(): Promise<void>;
+    private doClose;
+    writeCheckpoint(promptIndex: number, promptPreview: string): Promise<void>;
+    writeFileSnapshot(promptIndex: number, files: FileSnapshot[]): Promise<void>;
+    /**
+     * Truncate the session file to the checkpoint with the given promptIndex,
+     * removing all events that follow it. Uses a single-pass byte-offset scan
+     * so post-checkpoint content is never read or parsed — O(1) memory instead
+     * of O(N) JSON.parse calls over the full file.
+     */
+    truncateToCheckpoint(targetPromptIndex: number): Promise<number>;
+    clearSession(): Promise<void>;
+    /**
+     * Write an in-flight marker. The agent loop should call
+     * this at the start of each long-running operation; a matching
+     * `clearInFlightMarker` follows on clean exit. A stale marker
+     * (no end) is what `SessionRecovery.detectStale` looks for.
+     */
+    writeInFlightMarker(context: string): Promise<void>;
+    /**
+     * Close the in-flight marker. Idempotent in spirit
+     * (you can call it after a successful iteration even if you
+     * didn't open one this round) — but the session log records
+     * every call so postmortem tooling can see "the agent finished
+     * cleanly X times, then died without finishing Y".
+     */
+    clearInFlightMarker(reason: 'clean' | 'aborted' | 'recovered'): Promise<void>;
+}
+//# sourceMappingURL=file-session-writer.d.ts.map

package/dist/storage/file-session-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-session-writer.d.ts","sourceRoot":"","sources":["../../src/storage/file-session-writer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,GAAG,MAAM,kBAAkB,CAAC;AAExC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EACV,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,cAAc,EACd,aAAa,EAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAGlE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGxE;;;;;;;GAOG;AACH,qBAAa,iBAAkB,YAAW,aAAa;aAqNnC,EAAE,EAAE,MAAM;IAC1B,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAxN1B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,IAAI,cAAc,IAAI,MAAM,GAAG,SAAS,CAEvC;IACD;;;;;OAKG;IACH,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAA6B;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAmC;IAClE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAoE;IAC/F,8EAA8E;IAC9E,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAS5B,OAAO,CAAC,WAAW,CAAsB;IACzC,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAO;IAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAM;IAYxC,OAAO,CAAC,UAAU,CAAoC;IACtD,OAAO,CAAC,UAAU,CAAoC;IAEtD,2EAA2E;IAC3E,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,OAAO,CAAwC;IAEvD;;;;;;;OAOG;IACH,OAAO,CAAC,UAAU;IA+BlB,OAAO,CAAC,oBAAoB,CAKpB;IACR,6EAA6E;IAC7E,OAAO,CAAC,iBAAiB,CAAuB;IAChD,wFAAwF;IACxF,OAAO,CAAC,YAAY,CAAqB;IAEzC;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAkB9B,gBAAgB,CAAC,KAAK,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;QAC3C,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,GAAG,IAAI,CAqBP;IAED,qBAAqB,CAAC,KAAK,EAAE;QAC3B,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;KAC1B,GAAG,IAAI,CAUP;IAED,gBAAgB,CAAC,KAAK,EAAE;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;KAC/D,GAAG,IAAI,CAWP;IAED,YACkB,EAAE,EAAE,MAAM,EAClB,MAAM,EAAE,GAAG,CAAC,UAAU,EACb,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,EACxC,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,EAC9C,IAAI,GAAE;QACJ,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;QAC5C,aAAa,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;QACjD,6EAA6E;QAC7E,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;KACxE,EACN,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,EAuB7B;IAED,IAAI,eAAe,IAAI,MAAM,EAAE,CAE9B;YAEa,qBAAqB;IAc7B,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B/C;IAEK,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBvD;IAED;;;;;;;;OAQG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAS3B;IAED;;;;;;OAMG;IACH,SAAS,IAAI,IAAI,CAwBhB;IAED,sEAAsE;IACtE,OAAO,CAAC,aAAa;IAarB;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;YASL,eAAe;IA+C7B,OAAO,CAAC,iBAAiB;IA4CnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAc3B;YAEa,OAAO;IA+Ff,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC/E;IAEK,iBAAiB,CACrB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,YAAY,EAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CAOf;IAED;;;;;OAKG;IACG,oBAAoB,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA8NrE;IAEK,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CA4BlC;IAED;;;;;OAKG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUxD;IAED;;;;;;OAMG;IACG,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAclF;CACF"}