@yadsh/dsh-qa-surface 0.4.0 → 0.6.0

package/lib/documents/orchestrator/extract-document.js

@@ -0,0 +1,162 @@
+/**
+ * `document_to_markdown` orchestration (§9, §15, §16).
+ *
+ * The tool returns the extracted Markdown, and the bundle keeps it: the model
+ * may only see a truncated view (a 300-page PDF is not a conversation), while
+ * the artifact always carries the full text with its assets and manifest.
+ */
+import path from "node:path";
+import { readPdfFacts } from "../inspect/facts.js";
+import { buildManifest, outputRecord, writeManifest, } from "../artifacts/manifest.js";
+import { sha256Hex } from "../artifacts/store.js";
+import { DocumentError, asDocumentError } from "../errors.js";
+import { normalizeExtractedMarkdown } from "../markdown/normalize.js";
+import { extractWithFallback, selectExtractor } from "../providers/registry.js";
+import { assertCountWithinBudget } from "../security/limits.js";
+import { sanitizeFilename } from "../security/paths.js";
+import { describeUnsupported, mediaTypeFor, sniffDocument, supportedFormatOf, } from "../security/file-types.js";
+import { ensureArtifactRoot, readInputBytes, resolveDocumentScope, resolveInputPath, } from "./scope.js";
+import { withExtractionSlot, withOcrSlot, } from "./runtime-deps.js";
+export async function extractToMarkdown(deps, params, scopeInput, operation) {
+    const config = deps.config;
+    const started = Date.now();
+    const scope = await resolveDocumentScope(config, scopeInput);
+    const signals = scope.signal === undefined ? {} : { signal: scope.signal };
+    await ensureArtifactRoot(scope);
+    const inputPath = await resolveInputPath(config, scope, params.file, "file");
+    const bytes = await readInputBytes(inputPath, config, "file");
+    const sniffed = sniffDocument(bytes, inputPath);
+    const sourceFormat = supportedFormatOf(sniffed);
+    if (sourceFormat === undefined) {
+        throw new DocumentError(sniffed.format === "docm"
+            ? "MACRO_ENABLED_DOCUMENT"
+            : "UNSUPPORTED_FORMAT", describeUnsupported(sniffed, inputPath));
+    }
+    if (sourceFormat === "pdf" && readPdfFacts(bytes).encrypted) {
+        throw new DocumentError("ENCRYPTED_DOCUMENT", "the PDF is encrypted; password-protected documents are not processed");
+    }
+    const mode = params.mode ?? config.extraction.defaultMode;
+    const ocr = params.ocr ?? config.extraction.ocr;
+    const ocrLanguages = params.ocrLanguages ?? config.extraction.ocrLanguages;
+    const selection = selectExtractor(deps.providers, config, mode, sourceFormat);
+    const { artifactId } = await scope.store.create(deps.now().getTime());
+    const workDir = await scope.store.createWorkDir(artifactId);
+    try {
+        if (config.storage.retainInputs) {
+            await scope.store.write(path.join(artifactId, "input", path.basename(inputPath)), bytes);
+        }
+        const assetsDir = await scope.store.ensureDir(path.join(artifactId, "assets"));
+        const runExtraction = async () => await extractWithFallback(selection, {
+            inputPath,
+            workDir,
+            assetsDir,
+            ocr,
+            ocrLanguages,
+            extractImages: params.extractImages ?? config.extraction.extractImages,
+            extractTables: params.extractTables ?? config.extraction.extractTables,
+            preservePageMarkers: params.preservePageMarkers ?? config.extraction.preservePageMarkers,
+            maxPages: config.limits.maxPages,
+            maxImages: config.limits.maxExtractedImages,
+            ...signals,
+        });
+        // OCR is the one stage with its own concurrency slot (§27).
+        const { document: extracted, fellBackFrom } = ocr === "force"
+            ? await withOcrSlot(deps, scope.signal, runExtraction)
+            : await withExtractionSlot(deps, scope.signal, runExtraction);
+        const warnings = [...extracted.warnings];
+        if (fellBackFrom !== undefined) {
+            warnings.push({
+                code: "BACKEND_FALLBACK_USED",
+                message: `${fellBackFrom} was unreachable; the operation continued with ${extracted.backend.provider}`,
+                details: { from: fellBackFrom, to: extracted.backend.provider },
+            });
+        }
+        if (extracted.pages !== undefined) {
+            assertCountWithinBudget(extracted.pages, config.limits.maxPages, "the document's pages");
+        }
+        const normalized = normalizeExtractedMarkdown(extracted.markdown);
+        warnings.push(...normalized.warnings);
+        const markdownName = sanitizeFilename(params.outputFilename, "extracted", ".md");
+        const written = await scope.store.write(path.join(artifactId, markdownName), normalized.markdown);
+        const manifest = buildManifest({
+            artifactId,
+            operation,
+            createdAt: deps.now().toISOString(),
+            input: {
+                format: sourceFormat,
+                sha256: sha256Hex(bytes),
+                filename: path.basename(inputPath),
+                bytes: bytes.length,
+            },
+            outputs: [
+                outputRecord({
+                    format: "md",
+                    path: written.path,
+                    mediaType: mediaTypeFor("md"),
+                    size: written.size,
+                    sha256: written.sha256,
+                    status: "created",
+                }),
+            ],
+            backends: { extract: extracted.backend },
+            warnings,
+            scope: {
+                ...(scope.sessionId === undefined
+                    ? {}
+                    : { sessionId: scope.sessionId }),
+                workspace: scope.workspaceRoot,
+            },
+        });
+        const manifestPath = await writeManifest(scope.store, artifactId, manifest);
+        await scope.store.removeWorkDir(workDir);
+        const inlineLimit = config.extraction.maxInlineChars;
+        const inline = normalized.markdown.length > inlineLimit
+            ? normalized.markdown.slice(0, inlineLimit)
+            : normalized.markdown;
+        if (inline.length < normalized.markdown.length) {
+            warnings.push({
+                code: "MARKDOWN_TRUNCATED",
+                message: `the extracted Markdown is ${normalized.markdown.length} characters; the response carries the first ${inlineLimit} and the artifact keeps the whole text`,
+                details: { chars: normalized.markdown.length, inline: inlineLimit },
+            });
+        }
+        deps.logger.info("documents.extract", {
+            artifactId,
+            operation,
+            format: sourceFormat,
+            backend: extracted.backend.provider,
+            ocr,
+            pages: extracted.pages,
+            durationMs: Date.now() - started,
+            bytes: bytes.length,
+            outBytes: written.size,
+            status: "ok",
+        });
+        return {
+            artifactId,
+            markdown: inline,
+            markdownPath: written.path,
+            ...(extracted.assets.length === 0 ? {} : { assets: extracted.assets }),
+            ...(extracted.pages === undefined ? {} : { pages: extracted.pages }),
+            backend: extracted.backend.provider,
+            warnings,
+            manifestPath,
+        };
+    }
+    catch (error) {
+        await scope.store.removeWorkDir(workDir);
+        const failure = asDocumentError(error, "EXTRACTION_FAILED");
+        deps.logger.error("documents.extract.failed", {
+            artifactId,
+            format: sourceFormat,
+            backend: selection.extractor.name,
+            durationMs: Date.now() - started,
+            code: failure.code,
+        });
+        throw failure;
+    }
+}
+export async function toMarkdown(deps, input, scope) {
+    return await extractToMarkdown(deps, input, scope, "document_to_markdown");
+}
+//# sourceMappingURL=extract-document.js.map

package/lib/documents/orchestrator/extract-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract-document.js","sourceRoot":"","sources":["../../../src/documents/orchestrator/extract-document.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,aAAa,EACb,YAAY,EACZ,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,aAAa,EACb,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AAQnC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,WAAW,GAEZ,MAAM,mBAAmB,CAAC;AAe3B,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAyB,EACzB,MAA+B,EAC/B,UAAyB,EACzB,SAA8B;IAE9B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC3E,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CACrB,OAAO,CAAC,MAAM,KAAK,MAAM;YACvB,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,oBAAoB,EACxB,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CACxC,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,KAAK,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,IAAI,aAAa,CACrB,oBAAoB,EACpB,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;IAChD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;IAC3E,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IAE9E,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAChC,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CACrB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EACxD,KAAK,CACN,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,CAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAChC,CAAC;QACF,MAAM,aAAa,GAAG,KAAK,IAEzB,EAAE,CACF,MAAM,mBAAmB,CAAC,SAAS,EAAE;YACnC,SAAS;YACT,OAAO;YACP,SAAS;YACT,GAAG;YACH,YAAY;YACZ,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa;YACtE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa;YACtE,mBAAmB,EACjB,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,UAAU,CAAC,mBAAmB;YACrE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YAChC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB;YAC3C,GAAG,OAAO;SACX,CAAC,CAAC;QACL,4DAA4D;QAC5D,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,GACzC,GAAG,KAAK,OAAO;YACb,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC;YACtD,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAsB,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,GAAG,YAAY,kDAAkD,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACtG,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE;aAChE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAClC,uBAAuB,CACrB,SAAS,CAAC,KAAK,EACf,MAAM,CAAC,MAAM,CAAC,QAAQ,EACtB,sBAAsB,CACvB,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,0BAA0B,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEtC,MAAM,YAAY,GAAG,gBAAgB,CACnC,MAAM,CAAC,cAAc,EACrB,WAAW,EACX,KAAK,CACN,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CACrC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EACnC,UAAU,CAAC,QAAQ,CACpB,CAAC;QAEF,MAAM,QAAQ,GAAG,aAAa,CAAC;YAC7B,UAAU;YACV,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC;gBACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAClC,KAAK,EAAE,KAAK,CAAC,MAAM;aACpB;YACD,OAAO,EAAE;gBACP,YAAY,CAAC;oBACX,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC;oBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,SAAS;iBAClB,CAAC;aACH;YACD,QAAQ,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE;YACxC,QAAQ;YACR,KAAK,EAAE;gBACL,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;oBAC/B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;gBACnC,SAAS,EAAE,KAAK,CAAC,aAAa;aAC/B;SACF,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5E,MAAM,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAEzC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC;QACrD,MAAM,MAAM,GACV,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW;YACtC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;YAC3C,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,6BAA6B,UAAU,CAAC,QAAQ,CAAC,MAAM,+CAA+C,WAAW,wCAAwC;gBAClK,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE;aACpE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;YACpC,UAAU;YACV,SAAS;YACT,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ;YACnC,GAAG;YACH,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,QAAQ,EAAE,OAAO,CAAC,IAAI;YACtB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QAEH,OAAO;YACL,UAAU;YACV,QAAQ,EAAE,MAAM;YAChB,YAAY,EAAE,OAAO,CAAC,IAAI;YAC1B,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;YACtE,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;YACpE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ;YACnC,QAAQ;YACR,YAAY;SACb,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YAC5C,UAAU;YACV,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,IAAI;YACjC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QACH,MAAM,OAAO,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAyB,EACzB,KAA8B,EAC9B,KAAoB;IAEpB,OAAO,MAAM,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;AAC7E,CAAC"}

package/lib/documents/orchestrator/inspect-document.js

@@ -0,0 +1,89 @@
+/**
+ * `document_inspect` orchestration (§11).
+ *
+ * A read-only pass over one file: what it is, how big it is, what it says
+ * about itself, and what structure it holds. No artifact is created — the
+ * operation answers a question, it does not make a document.
+ */
+import path from "node:path";
+import { sha256Hex } from "../artifacts/store.js";
+import { DocumentError } from "../errors.js";
+import { mediaTypeOfDetected, readDocxFacts, readDocxMetadata, readPdfFacts, } from "../inspect/facts.js";
+import { markdownStructure } from "../markdown/normalize.js";
+import { sniffDocument } from "../security/file-types.js";
+import { readInputBytes, resolveDocumentScope, resolveInputPath, } from "./scope.js";
+export async function inspectDocument(deps, input, scopeInput) {
+    const config = deps.config;
+    if (typeof input.file !== "string" || input.file.trim() === "") {
+        throw new DocumentError("INVALID_INPUT", "file must be a path");
+    }
+    const scope = await resolveDocumentScope(config, scopeInput);
+    const inputPath = await resolveInputPath(config, scope, input.file, "file");
+    const bytes = await readInputBytes(inputPath, config, "file");
+    const sniffed = sniffDocument(bytes, inputPath);
+    const warnings = [];
+    const result = {
+        filename: path.basename(inputPath),
+        format: sniffed.format,
+        mediaType: sniffed.mediaType === "application/octet-stream" ||
+            sniffed.mediaType === "application/zip"
+            ? mediaTypeOfDetected(sniffed.format)
+            : sniffed.mediaType,
+        size: bytes.length,
+        sha256: sha256Hex(bytes),
+        warnings,
+    };
+    if (sniffed.format === "pdf") {
+        const facts = readPdfFacts(bytes);
+        if (facts.encrypted) {
+            // Reported, not refused: inspect exists to answer "what is this file",
+            // and "an encrypted PDF" is a complete answer (§11).
+            result.encrypted = true;
+        }
+        if (Object.keys(facts.metadata).length > 0) {
+            result.metadata = facts.metadata;
+        }
+        else {
+            warnings.push({
+                code: "METADATA_PARTIALLY_EXTRACTED",
+                message: "the document carries no readable document-information entries",
+            });
+        }
+        result.structure = {
+            ...(facts.pages === undefined ? {} : { pages: facts.pages }),
+            ...(facts.images === undefined ? {} : { images: facts.images }),
+        };
+    }
+    else if (sniffed.format === "docx" || sniffed.format === "docm") {
+        const facts = readDocxFacts(bytes);
+        const metadata = readDocxMetadata(bytes);
+        if (Object.keys(metadata).length > 0) {
+            result.metadata = metadata;
+        }
+        else {
+            warnings.push({
+                code: "METADATA_PARTIALLY_EXTRACTED",
+                message: "the document carries no readable core properties",
+            });
+        }
+        result.structure = { ...facts };
+        if (sniffed.macroEnabled === true)
+            result.macroEnabled = true;
+    }
+    else if (sniffed.format === "markdown") {
+        const text = bytes.toString("utf8");
+        result.structure = markdownStructure(text);
+    }
+    else {
+        warnings.push({
+            code: "METADATA_PARTIALLY_EXTRACTED",
+            message: "the file is not a document format this pipeline recognizes",
+        });
+    }
+    deps.logger.debug("documents.inspect", {
+        format: sniffed.format,
+        bytes: bytes.length,
+    });
+    return result;
+}
+//# sourceMappingURL=inspect-document.js.map

package/lib/documents/orchestrator/inspect-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect-document.js","sourceRoot":"","sources":["../../../src/documents/orchestrator/inspect-document.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,YAAY,GACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAM1D,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,YAAY,CAAC;AAGpB,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAyB,EACzB,KAA2B,EAC3B,UAAyB;IAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,MAAM,GAWR;QACF,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EACP,OAAO,CAAC,SAAS,KAAK,0BAA0B;YAChD,OAAO,CAAC,SAAS,KAAK,iBAAiB;YACrC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;YACrC,CAAC,CAAC,OAAO,CAAC,SAAS;QACvB,IAAI,EAAE,KAAK,CAAC,MAAM;QAClB,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC;QACxB,QAAQ;KACT,CAAC;IAEF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,uEAAuE;YACvE,qDAAqD;YACrD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,8BAA8B;gBACpC,OAAO,EACL,+DAA+D;aAClE,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,SAAS,GAAG;YACjB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,8BAA8B;gBACpC,OAAO,EAAE,kDAAkD;aAC5D,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI;YAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;IAChE,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,4DAA4D;SACtE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;QACrC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,KAAK,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/lib/documents/orchestrator/runtime-deps.js

@@ -0,0 +1,59 @@
+/**
+ * Runtime wiring shared by the four orchestrator operations.
+ *
+ * The runtime owns what must outlive a single call — the backend registry, the
+ * concurrency semaphores and the clock — and each operation reads its
+ * configuration and providers from here, so a test can substitute stub
+ * backends without touching a tool definition.
+ */
+import { createSemaphore } from "../security/limits.js";
+/** A logger that drops everything; the default when none is supplied. */
+export const silentDocumentLogger = {
+    debug: () => undefined,
+    info: () => undefined,
+    warn: () => undefined,
+    error: () => undefined,
+};
+export function createRuntimeDeps(options) {
+    return {
+        config: options.config,
+        providers: options.providers,
+        logger: options.logger ?? silentDocumentLogger,
+        now: options.now ?? (() => new Date()),
+        semaphores: {
+            render: createSemaphore(options.config.workers.renderConcurrency),
+            extraction: createSemaphore(options.config.workers.extractionConcurrency),
+            ocr: createSemaphore(options.config.workers.ocrConcurrency),
+        },
+    };
+}
+/** Run `body` with one render slot held, releasing it on every path. */
+export async function withRenderSlot(deps, signal, body) {
+    const release = await deps.semaphores.render.acquire(signal);
+    try {
+        return await body();
+    }
+    finally {
+        release();
+    }
+}
+export async function withExtractionSlot(deps, signal, body) {
+    const release = await deps.semaphores.extraction.acquire(signal);
+    try {
+        return await body();
+    }
+    finally {
+        release();
+    }
+}
+/** OCR runs behind its own, narrower slot (§27: `ocrConcurrency`). */
+export async function withOcrSlot(deps, signal, body) {
+    const release = await deps.semaphores.ocr.acquire(signal);
+    try {
+        return await body();
+    }
+    finally {
+        release();
+    }
+}
+//# sourceMappingURL=runtime-deps.js.map

package/lib/documents/orchestrator/runtime-deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-deps.js","sourceRoot":"","sources":["../../../src/documents/orchestrator/runtime-deps.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,eAAe,EAAkB,MAAM,uBAAuB,CAAC;AAUxE,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;IACtB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;CACvB,CAAC;AAcF,MAAM,UAAU,iBAAiB,CAAC,OAKjC;IACC,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,oBAAoB;QAC9C,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QACtC,UAAU,EAAE;YACV,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;YACjE,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC;YACzE,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;SAC5D;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAyB,EACzB,MAA+B,EAC/B,IAAsB;IAEtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAyB,EACzB,MAA+B,EAC/B,IAAsB;IAEtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAyB,EACzB,MAA+B,EAC/B,IAAsB;IAEtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/lib/documents/orchestrator/scope.js

@@ -0,0 +1,132 @@
+/**
+ * Job scope: where an operation reads from and writes to.
+ *
+ * Artifacts live in the session workspace by default
+ * (`<cwd>/.qa/artifacts/documents/<artifact-id>`), which is what makes a QA
+ * deployment's per-user workspaces isolate document bundles for free (§40).
+ * A deployment may pin `documents.storage.root` to a shared volume instead, in
+ * which case the session workspace stays the only place inputs are read from.
+ * Inputs may additionally come from explicitly configured roots (§26.2).
+ */
+import { readFile, stat } from "node:fs/promises";
+import path from "node:path";
+import { ArtifactStore } from "../artifacts/store.js";
+import { DocumentError, asDocumentError } from "../errors.js";
+import { assertBytesWithinBudget } from "../security/limits.js";
+import { canonicalizeForContainment, isInsideRoot, resolveInsideRoot, } from "../security/paths.js";
+import { loadTemplateRegistry, } from "../templates/registry.js";
+/** Artifact root of one workspace: configured root, else the workspace itself. */
+export function defaultArtifactRoot(config, workspaceRoot) {
+    return (config.storage.root ??
+        path.join(workspaceRoot, ".qa", "artifacts", "documents"));
+}
+async function probeManifest(candidate) {
+    const details = await stat(path.join(candidate, "manifest.yml")).catch(() => undefined);
+    return details?.isFile() === true;
+}
+/**
+ * Template roots to probe, in order. An explicitly configured root is
+ * authoritative; a deployment that configures none gets the two conventional
+ * workspace directories.
+ */
+export function templateCandidateRoots(config, workspaceRoot) {
+    if (config.templates.root !== null)
+        return [config.templates.root];
+    return [
+        path.join(workspaceRoot, "document-templates"),
+        path.join(workspaceRoot, "templates"),
+    ];
+}
+/** Load the first candidate root that carries a registry manifest. */
+export async function loadScopeTemplates(config, workspaceRoot) {
+    for (const candidate of templateCandidateRoots(config, workspaceRoot)) {
+        if (await probeManifest(candidate))
+            return await loadTemplateRegistry(candidate);
+    }
+    return await loadTemplateRegistry(undefined);
+}
+export async function resolveDocumentScope(config, scope) {
+    if (typeof scope.workspaceRoot !== "string" ||
+        scope.workspaceRoot.trim() === "") {
+        // Fail closed: an empty root would silently resolve to the host process's
+        // working directory and grant artifacts access to it.
+        throw new DocumentError("INVALID_INPUT", "the document scope requires a session working directory");
+    }
+    const workspaceRoot = await canonicalizeForContainment(scope.workspaceRoot);
+    const artifactRoot = await canonicalizeForContainment(defaultArtifactRoot(config, workspaceRoot));
+    return {
+        workspaceRoot,
+        artifactRoot,
+        ...(scope.sessionId === undefined ? {} : { sessionId: scope.sessionId }),
+        ...(scope.signal === undefined ? {} : { signal: scope.signal }),
+        store: new ArtifactStore({ root: artifactRoot }),
+        templates: await loadScopeTemplates(config, workspaceRoot),
+    };
+}
+/** Roots an input file may be read from, most specific first. */
+export function allowedInputRoots(config, scope) {
+    return [
+        scope.workspaceRoot,
+        scope.artifactRoot,
+        ...config.storage.allowedInputRoots,
+    ];
+}
+/**
+ * Resolve a caller-supplied input path. The file must exist inside one of the
+ * allowed roots — traversal, symlinks out of the root and absolute paths to
+ * unrelated directories are all refused (§26.2).
+ */
+export async function resolveInputPath(config, scope, requested, label) {
+    let lastError;
+    for (const root of allowedInputRoots(config, scope)) {
+        try {
+            const resolved = await resolveInsideRoot(root, requested, label);
+            const details = await stat(resolved).catch(() => undefined);
+            if (details === undefined || !details.isFile()) {
+                throw new DocumentError("FILE_NOT_FOUND", `${label} does not exist`);
+            }
+            return resolved;
+        }
+        catch (error) {
+            lastError = error;
+            if (error instanceof DocumentError && error.code === "FILE_NOT_FOUND")
+                continue;
+            if (error instanceof DocumentError && error.code === "PATH_NOT_ALLOWED")
+                continue;
+            throw error;
+        }
+    }
+    if (lastError instanceof DocumentError) {
+        throw new DocumentError("FILE_NOT_FOUND", `${label} is not a file inside the session workspace or a configured document root`, { details: { label } });
+    }
+    throw asDocumentError(lastError, "FILE_NOT_FOUND");
+}
+/** Read an input file under a byte budget. */
+export async function readInputBytes(filePath, config, label) {
+    const details = await stat(filePath).catch(() => undefined);
+    if (details === undefined) {
+        throw new DocumentError("FILE_NOT_FOUND", `${label} does not exist`);
+    }
+    assertBytesWithinBudget(details.size, config.limits.maxInputBytes, label);
+    const bytes = await readFile(filePath).catch((error) => {
+        throw asDocumentError(error, "FILE_NOT_FOUND", label);
+    });
+    assertBytesWithinBudget(bytes.length, config.limits.maxInputBytes, label);
+    return bytes;
+}
+/** Ensure the artifact root exists and is writable, failing with a clear code. */
+export async function ensureArtifactRoot(scope) {
+    try {
+        await scope.store.ensureDir(".");
+    }
+    catch (error) {
+        throw asDocumentError(error, "ARTIFACT_WRITE_FAILED");
+    }
+}
+export function assertInsideArtifactRoot(scope, target, label) {
+    if (!isInsideRoot(scope.artifactRoot, path.resolve(target))) {
+        throw new DocumentError("PATH_NOT_ALLOWED", `${label} is outside the artifact root`);
+    }
+    return target;
+}
+//# sourceMappingURL=scope.js.map

package/lib/documents/orchestrator/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../src/documents/orchestrator/scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EACL,0BAA0B,EAC1B,YAAY,EACZ,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oBAAoB,GAErB,MAAM,0BAA0B,CAAC;AAkBlC,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CACjC,MAAiC,EACjC,aAAqB;IAErB,OAAO,CACL,MAAM,CAAC,OAAO,CAAC,IAAI;QACnB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,CACpE,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,OAAO,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAiC,EACjC,aAAqB;IAErB,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAiC,EACjC,aAAqB;IAErB,KAAK,MAAM,SAAS,IAAI,sBAAsB,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QACtE,IAAI,MAAM,aAAa,CAAC,SAAS,CAAC;YAChC,OAAO,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAiC,EACjC,KAAoB;IAEpB,IACE,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACvC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EACjC,CAAC;QACD,0EAA0E;QAC1E,sDAAsD;QACtD,MAAM,IAAI,aAAa,CACrB,eAAe,EACf,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC5E,MAAM,YAAY,GAAG,MAAM,0BAA0B,CACnD,mBAAmB,CAAC,MAAM,EAAE,aAAa,CAAC,CAC3C,CAAC;IACF,OAAO;QACL,aAAa;QACb,YAAY;QACZ,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/D,KAAK,EAAE,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChD,SAAS,EAAE,MAAM,kBAAkB,CAAC,MAAM,EAAE,aAAa,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAC/B,MAAiC,EACjC,KAA4B;IAE5B,OAAO;QACL,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,YAAY;QAClB,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB;KACpC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAiC,EACjC,KAA4B,EAC5B,SAAiB,EACjB,KAAa;IAEb,IAAI,SAAkB,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5D,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/C,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBACnE,SAAS;YACX,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;gBACrE,SAAS;YACX,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,SAAS,YAAY,aAAa,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CACrB,gBAAgB,EAChB,GAAG,KAAK,2EAA2E,EACnF,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CACvB,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;AACrD,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,MAAiC,EACjC,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;IACvE,CAAC;IACD,uBAAuB,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9D,MAAM,eAAe,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,uBAAuB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA4B;IAE5B,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAA4B,EAC5B,MAAc,EACd,KAAa;IAEb,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,aAAa,CACrB,kBAAkB,EAClB,GAAG,KAAK,+BAA+B,CACxC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}