@zhin.js/agent 1.1.13 → 1.1.14

package/lib/plugin-runtime/workroom-effect-composition.d.ts

@@ -0,0 +1,37 @@
+import { type Scope } from '@zhin.js/plugin-runtime';
+import { type WorkroomEffectIntent, type WorkroomEffectState } from '../workroom/effect-ledger.js';
+import { FileWorkroomEffectJournal } from '../workroom/file-effect-ledger.js';
+import { FileWorkroomEffectBlockerRepository } from '../workroom/effect-blocker-repository.js';
+import { WorkroomEffectRuntime, type WorkroomEffectBlockerPolicyPort, type WorkroomEffectClockPort } from './workroom-effect-runtime.js';
+export interface WorkroomEffectIntentWriterPort {
+    record(intent: WorkroomEffectIntent): Promise<WorkroomEffectState>;
+}
+export declare const workroomEffectIntentWriterToken: import("@zhin.js/plugin-runtime").Token<WorkroomEffectIntentWriterPort>;
+export declare const workroomEffectRuntimeToken: import("@zhin.js/plugin-runtime").Token<WorkroomEffectRuntime>;
+export interface InstallWorkroomEffectResourcesOptions {
+    readonly projectRoot: string;
+    readonly generation: number;
+    readonly signal: AbortSignal;
+    readonly resources: Pick<Scope, 'has' | 'provide' | 'use'>;
+    readonly projects: Readonly<{
+        listProjectIds(): Promise<readonly string[]>;
+    }>;
+    readonly clock: WorkroomEffectClockPort;
+    readonly blockerPolicy: WorkroomEffectBlockerPolicyPort;
+    readonly intervalMs?: number;
+    readonly onError?: (error: unknown) => void;
+    readonly now?: () => number;
+}
+export interface WorkroomEffectComposition {
+    readonly runtime: WorkroomEffectRuntime;
+    readonly journal: FileWorkroomEffectJournal;
+    readonly blockers: FileWorkroomEffectBlockerRepository;
+    readonly intents: WorkroomEffectIntentWriterPort;
+}
+/**
+ * Standard fail-closed composition. Git/P7 authorities are dynamically read
+ * from the current generation Scope; absence blocks one exact Effect without
+ * preventing the Agent Host generation from starting.
+ */
+export declare function installWorkroomEffectResources(options: InstallWorkroomEffectResourcesOptions): WorkroomEffectComposition;
+//# sourceMappingURL=workroom-effect-composition.d.ts.map

package/lib/plugin-runtime/workroom-effect-composition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-effect-composition.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-effect-composition.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAEL,mCAAmC,EACpC,MAAM,0CAA0C,CAAC;AASlD,OAAO,EACL,qBAAqB,EACrB,KAAK,+BAA+B,EACpC,KAAK,uBAAuB,EAC7B,MAAM,8BAA8B,CAAC;AAMtC,MAAM,WAAW,8BAA8B;IAC7C,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACpE;AAED,eAAO,MAAM,+BAA+B,yEAG3C,CAAC;AAEF,eAAO,MAAM,0BAA0B,gEAGtC,CAAC;AAEF,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC,CAAC;IAC3D,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,cAAc,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IAC9E,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC;IACxD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,mCAAmC,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC;CAClD;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,qCAAqC,GAC7C,yBAAyB,CAmD3B"}

package/lib/plugin-runtime/workroom-effect-composition.js

@@ -0,0 +1,69 @@
+import { join } from 'node:path';
+import { createToken } from '@zhin.js/plugin-runtime';
+import { WorkroomEffectLedger, } from '../workroom/effect-ledger.js';
+import { FileWorkroomEffectJournal } from '../workroom/file-effect-ledger.js';
+import { DurableWorkroomEffectBlockerControl, FileWorkroomEffectBlockerRepository, } from '../workroom/effect-blocker-repository.js';
+import { GenerationOwnedP7EffectAuthorization, ProductionGitWorkroomEffectGateway, workroomGitBranchProtectionAuthorityToken, workroomGitHubCapabilityToken, workroomGitWorkspaceLeaseAuthorityToken, workroomPersistedEffectAuthorizationFactsToken, } from './workroom-effect-production.js';
+import { WorkroomEffectRuntime, } from './workroom-effect-runtime.js';
+import { WorkroomPayloadEffectGatewayRouter, workroomPayloadProcessorRecallProviderToken, } from './workroom-payload-processor-recall.js';
+export const workroomEffectIntentWriterToken = createToken('zhin.agent.workroom-effect-intent-writer', 'Narrow content-addressed Effect Intent producer; never authorizes or executes');
+export const workroomEffectRuntimeToken = createToken('zhin.agent.workroom-effect-runtime', 'Generation-owned durable Effect outbox and reconciliation runtime');
+/**
+ * Standard fail-closed composition. Git/P7 authorities are dynamically read
+ * from the current generation Scope; absence blocks one exact Effect without
+ * preventing the Agent Host generation from starting.
+ */
+export function installWorkroomEffectResources(options) {
+    const stateRoot = join(options.projectRoot, '.zhin');
+    const journal = new FileWorkroomEffectJournal(join(stateRoot, 'workroom-effect-ledger'));
+    const blockerRepository = new FileWorkroomEffectBlockerRepository(join(stateRoot, 'workroom-effect-blockers'));
+    const authorization = new GenerationOwnedP7EffectAuthorization(() => options.resources.has(workroomPersistedEffectAuthorizationFactsToken)
+        ? options.resources.use(workroomPersistedEffectAuthorizationFactsToken)
+        : undefined);
+    const gitGateway = new ProductionGitWorkroomEffectGateway({
+        generation: options.generation,
+        ...(options.now ? { now: options.now } : {}),
+        resolveLease: () => options.resources.has(workroomGitWorkspaceLeaseAuthorityToken)
+            ? options.resources.use(workroomGitWorkspaceLeaseAuthorityToken)
+            : undefined,
+        resolveProtection: () => options.resources.has(workroomGitBranchProtectionAuthorityToken)
+            ? options.resources.use(workroomGitBranchProtectionAuthorityToken)
+            : undefined,
+        resolveCapability: () => options.resources.has(workroomGitHubCapabilityToken)
+            ? options.resources.use(workroomGitHubCapabilityToken)
+            : undefined,
+    });
+    const gateway = new WorkroomPayloadEffectGatewayRouter({
+        fallback: gitGateway,
+        resolveProcessor: () => options.resources.has(workroomPayloadProcessorRecallProviderToken)
+            ? options.resources.use(workroomPayloadProcessorRecallProviderToken)
+            : undefined,
+    });
+    const runtime = new WorkroomEffectRuntime({
+        journal,
+        authorization,
+        gateway,
+        workerId: `effect-runtime:generation:${options.generation}`,
+        fence: options.generation,
+        projects: options.projects,
+        clock: options.clock,
+        blockers: new DurableWorkroomEffectBlockerControl(blockerRepository, options.now),
+        blockerPolicy: options.blockerPolicy,
+        signal: options.signal,
+        ...(options.intervalMs === undefined ? {} : { intervalMs: options.intervalMs }),
+        ...(options.onError ? { onError: options.onError } : {}),
+        ...(options.now ? { now: options.now } : {}),
+    });
+    const ledger = new WorkroomEffectLedger(journal);
+    const intents = Object.freeze({
+        record: async (intent) => await ledger.recordIntent(intent.projectId, intent),
+    });
+    provideIfAbsent(options.resources, workroomEffectIntentWriterToken, intents);
+    provideIfAbsent(options.resources, workroomEffectRuntimeToken, runtime);
+    return Object.freeze({ runtime, journal, blockers: blockerRepository, intents });
+}
+function provideIfAbsent(resources, token, value) {
+    if (!resources.has(token))
+        resources.provide(token, value);
+}
+//# sourceMappingURL=workroom-effect-composition.js.map

package/lib/plugin-runtime/workroom-effect-composition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-effect-composition.js","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-effect-composition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAc,MAAM,yBAAyB,CAAC;AAClE,OAAO,EACL,oBAAoB,GAGrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EACL,mCAAmC,EACnC,mCAAmC,GACpC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,oCAAoC,EACpC,kCAAkC,EAClC,yCAAyC,EACzC,6BAA6B,EAC7B,uCAAuC,EACvC,8CAA8C,GAC/C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qBAAqB,GAGtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,EAClC,2CAA2C,GAC5C,MAAM,wCAAwC,CAAC;AAMhD,MAAM,CAAC,MAAM,+BAA+B,GAAG,WAAW,CACxD,0CAA0C,EAC1C,+EAA+E,CAChF,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CACnD,oCAAoC,EACpC,mEAAmE,CACpE,CAAC;AAsBF;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAA8C;IAE9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,yBAAyB,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACzF,MAAM,iBAAiB,GAAG,IAAI,mCAAmC,CAC/D,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAC5C,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,oCAAoC,CAAC,GAAG,EAAE,CAClE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,8CAA8C,CAAC;QACnE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,8CAA8C,CAAC;QACvE,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,MAAM,UAAU,GAAG,IAAI,kCAAkC,CAAC;QACxD,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,uCAAuC,CAAC;YAChF,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,uCAAuC,CAAC;YAChE,CAAC,CAAC,SAAS;QACb,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,yCAAyC,CAAC;YACvF,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,yCAAyC,CAAC;YAClE,CAAC,CAAC,SAAS;QACb,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,6BAA6B,CAAC;YAC3E,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,6BAA6B,CAAC;YACtD,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,kCAAkC,CAAC;QACrD,QAAQ,EAAE,UAAU;QACpB,gBAAgB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,2CAA2C,CAAC;YACxF,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,2CAA2C,CAAC;YACpE,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC;QACxC,OAAO;QACP,aAAa;QACb,OAAO;QACP,QAAQ,EAAE,6BAA6B,OAAO,CAAC,UAAU,EAAE;QAC3D,KAAK,EAAE,OAAO,CAAC,UAAU;QACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,IAAI,mCAAmC,CAAC,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC;QACjF,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QAC/E,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAiC;QAC5D,MAAM,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5E,CAAC,CAAC;IACH,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,+BAA+B,EAAE,OAAO,CAAC,CAAC;IAC7E,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,eAAe,CACtB,SAAyC,EACzC,KAAiD,EACjD,KAAQ;IAER,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7D,CAAC"}

package/lib/plugin-runtime/workroom-effect-production.d.ts

@@ -0,0 +1,133 @@
+import { type WorkroomEffectAuthorization, type WorkroomEffectAuthorizationPort, type WorkroomEffectGatewayReceipt, type WorkroomEffectState } from '../workroom/effect-ledger.js';
+import { type GitWorkspaceCredentialPort, type GitWorkspaceLease, type GitWorkspaceTransportPort } from '../workroom/git-workspace-gateway.js';
+import type { WorkroomEffectGatewayPort } from './workroom-effect-runtime.js';
+export interface WorkroomPersistedEffectAuthorizationFacts {
+    readonly version: 1;
+    readonly projectId: string;
+    readonly runId: string;
+    readonly intentId: string;
+    readonly intentDigest: string;
+    readonly candidateHash: string;
+    readonly risk: Readonly<{
+        assessmentRef: string;
+        assessmentDigest: string;
+    }>;
+    readonly policy: Readonly<{
+        id: string;
+        revision: number;
+        digest: string;
+    }>;
+    readonly policyDecision: Readonly<{
+        ref: string;
+        digest: string;
+    }>;
+    readonly scope: Readonly<{
+        assignmentAttempt: number;
+        workspaceFence: number;
+        workspaceRef: string;
+        workspaceDigest: string;
+        preconditionsDigest: string;
+        deadline: number;
+    }>;
+    readonly sponsor: Readonly<{
+        decision: 'approved';
+        decisionRef: string;
+        decisionDigest: string;
+        principalId: string;
+    }>;
+    readonly authorizationId: string;
+    readonly issuedAt: number;
+    readonly expiresAt: number;
+}
+export interface WorkroomPersistedEffectAuthorizationFactsPort {
+    resolve(input: Readonly<{
+        projectId: string;
+        expectedSequence: number;
+        intentId: string;
+        intentDigest: string;
+    }>): Promise<WorkroomPersistedEffectAuthorizationFacts | null>;
+}
+export declare const workroomPersistedEffectAuthorizationFactsToken: import("@zhin.js/plugin-runtime").Token<WorkroomPersistedEffectAuthorizationFactsPort>;
+/** Generation facade: an Effect caller can never attach its own Sponsor claim. */
+export declare class GenerationOwnedP7EffectAuthorization implements WorkroomEffectAuthorizationPort {
+    readonly resolveFacts: () => WorkroomPersistedEffectAuthorizationFactsPort | undefined;
+    constructor(resolveFacts: () => WorkroomPersistedEffectAuthorizationFactsPort | undefined);
+    authorize(input: Parameters<WorkroomEffectAuthorizationPort['authorize']>[0]): Promise<WorkroomEffectAuthorization>;
+}
+export interface WorkroomGitWorkspaceLeaseAuthorityPort {
+    resolve(input: Readonly<{
+        projectId: string;
+        runId: string;
+        taskKey: string;
+        taskRevision: number;
+        leaseRef: string;
+        leaseDigest: string;
+    }>): Promise<GitWorkspaceLease | null>;
+}
+export declare const workroomGitWorkspaceLeaseAuthorityToken: import("@zhin.js/plugin-runtime").Token<WorkroomGitWorkspaceLeaseAuthorityPort>;
+export interface WorkroomGitBranchProtectionAttestation {
+    readonly version: 1;
+    readonly repositoryId: string;
+    readonly targetRef: string;
+    readonly directPushForbidden: true;
+    readonly forcePushForbidden: true;
+    readonly pullRequestRequired: true;
+    readonly provider: Readonly<{
+        id: string;
+        digest: string;
+    }>;
+    readonly observedAt: number;
+    readonly digest: string;
+}
+export interface WorkroomGitBranchProtectionAuthorityPort {
+    attest(input: Readonly<{
+        projectId: string;
+        leaseDigest: string;
+        repositoryId: string;
+        targetRef: string;
+    }>): Promise<WorkroomGitBranchProtectionAttestation>;
+}
+export declare const workroomGitBranchProtectionAuthorityToken: import("@zhin.js/plugin-runtime").Token<WorkroomGitBranchProtectionAuthorityPort>;
+export interface WorkroomGitHubReconciliationObservation {
+    readonly outcome: 'committed' | 'failed' | 'outcome_unknown';
+    readonly provider: Readonly<{
+        id: string;
+        digest: string;
+    }>;
+    readonly remoteRef: string;
+    readonly remoteDigest: string;
+    readonly observedAt: number;
+    readonly authenticatedBy: string;
+}
+export interface WorkroomGitHubCapabilityPort {
+    readonly provider: Readonly<{
+        id: string;
+        digest: string;
+    }>;
+    readonly credentials: GitWorkspaceCredentialPort;
+    readonly transport: GitWorkspaceTransportPort;
+    reconcile(input: Readonly<{
+        generation: number;
+        state: WorkroomEffectState;
+        lease: GitWorkspaceLease;
+    }>, signal: AbortSignal): Promise<WorkroomGitHubReconciliationObservation>;
+}
+export declare const workroomGitHubCapabilityToken: import("@zhin.js/plugin-runtime").Token<WorkroomGitHubCapabilityPort>;
+export interface ProductionGitWorkroomEffectGatewayOptions {
+    readonly generation: number;
+    readonly now?: () => number;
+    readonly protectionMaxAgeMs?: number;
+    readonly resolveLease: () => WorkroomGitWorkspaceLeaseAuthorityPort | undefined;
+    readonly resolveProtection: () => WorkroomGitBranchProtectionAuthorityPort | undefined;
+    readonly resolveCapability: () => WorkroomGitHubCapabilityPort | undefined;
+}
+/** Exact Effect Intent → Workspace Lease → protected Git provider join. */
+export declare class ProductionGitWorkroomEffectGateway implements WorkroomEffectGatewayPort {
+    #private;
+    readonly options: ProductionGitWorkroomEffectGatewayOptions;
+    constructor(options: ProductionGitWorkroomEffectGatewayOptions);
+    prepare(state: WorkroomEffectState, signal: AbortSignal): Promise<void>;
+    execute(state: WorkroomEffectState, signal: AbortSignal): Promise<WorkroomEffectGatewayReceipt>;
+    reconcile(state: WorkroomEffectState, signal: AbortSignal): Promise<WorkroomEffectGatewayReceipt>;
+}
+//# sourceMappingURL=workroom-effect-production.d.ts.map

package/lib/plugin-runtime/workroom-effect-production.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-effect-production.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-effect-production.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC/B,MAAM,sCAAsC,CAAC;AAM9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAE9E,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;QACvB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACzB,QAAQ,EAAE,UAAU,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,6CAA6C;IAC5D,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC,GAAG,OAAO,CAAC,yCAAyC,GAAG,IAAI,CAAC,CAAC;CAChE;AAED,eAAO,MAAM,8CAA8C,wFAIxD,CAAC;AAEJ,kFAAkF;AAClF,qBAAa,oCAAqC,YAAW,+BAA+B;IAC9E,QAAQ,CAAC,YAAY,EAAE,MAAM,6CAA6C,GAAG,SAAS;gBAA7E,YAAY,EAAE,MAAM,6CAA6C,GAAG,SAAS;IAE5F,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,+BAA+B,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,2BAA2B,CAAC;CAwB1H;AAED,MAAM,WAAW,sCAAsC;IACrD,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;CACxC;AAED,eAAO,MAAM,uCAAuC,iFAIjD,CAAC;AAEJ,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,IAAI,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wCAAwC;IACvD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,GAAG,OAAO,CAAC,sCAAsC,CAAC,CAAC;CACtD;AAED,eAAO,MAAM,yCAAyC,mFAInD,CAAC;AAEJ,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,iBAAiB,CAAC;IAC7D,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,mBAAmB,CAAC;QAC3B,KAAK,EAAE,iBAAiB,CAAC;KAC1B,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;CAC5E;AAED,eAAO,MAAM,6BAA6B,uEAGzC,CAAC;AAEF,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,sCAAsC,GAAG,SAAS,CAAC;IAChF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,wCAAwC,GAAG,SAAS,CAAC;IACvF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,4BAA4B,GAAG,SAAS,CAAC;CAC5E;AAED,2EAA2E;AAC3E,qBAAa,kCAAmC,YAAW,yBAAyB;;IAItE,QAAQ,CAAC,OAAO,EAAE,yCAAyC;gBAAlD,OAAO,EAAE,yCAAyC;IAKjE,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvE,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAuD/F,SAAS,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAmDxG"}

package/lib/plugin-runtime/workroom-effect-production.js

@@ -0,0 +1,272 @@
+import { createToken } from '@zhin.js/plugin-runtime';
+import { GitWorkspaceGateway, createGitWorkspaceLease, } from '../workroom/git-workspace-gateway.js';
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from '../workroom/canonical-value.js';
+export const workroomPersistedEffectAuthorizationFactsToken = createToken('zhin.agent.workroom-persisted-effect-authorization-facts', 'P7 persisted candidate/risk/policy/Sponsor facts for exact Effect authorization');
+/** Generation facade: an Effect caller can never attach its own Sponsor claim. */
+export class GenerationOwnedP7EffectAuthorization {
+    resolveFacts;
+    constructor(resolveFacts) {
+        this.resolveFacts = resolveFacts;
+    }
+    async authorize(input) {
+        const port = this.resolveFacts();
+        if (!port)
+            throw new Error('P7 persisted Effect Authorization facts are unavailable');
+        const facts = await port.resolve({
+            projectId: input.projectId,
+            expectedSequence: input.expectedSequence,
+            intentId: input.intent.id,
+            intentDigest: input.intent.digest,
+        });
+        if (!facts)
+            throw new Error('P7 has not authorized this exact Effect Intent');
+        assertAuthorizationFacts(facts, input);
+        return deepFreeze({
+            version: 1,
+            authorized: true,
+            intentId: input.intent.id,
+            intentDigest: input.intent.digest,
+            candidateHash: input.intent.candidateHash,
+            authorizationId: facts.authorizationId,
+            authorizationDigest: digest(facts),
+            policy: facts.policy,
+            authorizedBy: `p7-sponsor:${facts.sponsor.principalId}:${facts.sponsor.decisionDigest}`,
+            expiresAt: facts.expiresAt,
+        });
+    }
+}
+export const workroomGitWorkspaceLeaseAuthorityToken = createToken('zhin.agent.workroom-git-workspace-lease-authority', 'Trusted exact Git Workspace Lease resolver');
+export const workroomGitBranchProtectionAuthorityToken = createToken('zhin.agent.workroom-git-branch-protection-authority', 'Trusted Git provider branch-protection attestation');
+export const workroomGitHubCapabilityToken = createToken('zhin.agent.workroom-github-capability', 'Generation-owned GitHub API/credential capability; never exposes a token');
+/** Exact Effect Intent → Workspace Lease → protected Git provider join. */
+export class ProductionGitWorkroomEffectGateway {
+    options;
+    #now;
+    #protectionMaxAgeMs;
+    constructor(options) {
+        this.options = options;
+        this.#now = options.now ?? Date.now;
+        this.#protectionMaxAgeMs = positive(options.protectionMaxAgeMs ?? 60_000, 'protectionMaxAgeMs');
+    }
+    async prepare(state, signal) {
+        await this.#resolve(state, signal, state.intent.operation.kind !== 'git_cancel_remote');
+    }
+    async execute(state, signal) {
+        if (!state.authorization || !state.attempt)
+            throw new Error('Effect execution requires authorized attempt');
+        const { lease, capability } = await this.#resolve(state, signal, state.intent.operation.kind !== 'git_cancel_remote');
+        const gateway = new GitWorkspaceGateway({
+            generation: this.options.generation,
+            credentials: capability.credentials,
+            transport: capability.transport,
+            now: this.#now,
+        });
+        const operation = state.intent.operation;
+        if (operation.kind === 'git_push') {
+            const receipt = await gateway.push({
+                operationId: state.attempt.operationId,
+                lease,
+                fence: lease.fence,
+                ref: operation.parameters.ref,
+                headSha: operation.parameters.headSha,
+                changedPaths: operation.parameters.changedPaths,
+                force: false,
+            }, signal);
+            assertProviderIdentity(receipt.provider, capability.provider);
+            return effectReceipt(state, 'committed', receipt.provider, receipt.externalReceiptRef, receipt.externalReceiptDigest, this.#now(), capability.provider.id);
+        }
+        if (operation.kind === 'git_open_pr') {
+            const receipt = await gateway.openPullRequest({
+                operationId: state.attempt.operationId,
+                lease,
+                fence: lease.fence,
+                headRef: operation.parameters.headRef,
+                baseRef: operation.parameters.baseRef,
+                headSha: operation.parameters.headSha,
+            }, signal);
+            assertProviderIdentity(receipt.provider, capability.provider);
+            return effectReceipt(state, 'committed', receipt.provider, receipt.prRef, receipt.externalReceiptDigest, this.#now(), capability.provider.id);
+        }
+        if (operation.kind === 'git_cancel_remote') {
+            const receipt = await gateway.cancel({
+                operationId: state.attempt.operationId,
+                lease,
+                fence: lease.fence,
+                remoteOperationId: operation.parameters.remoteOperationId,
+            }, signal);
+            assertProviderIdentity(receipt.provider, capability.provider);
+            return effectReceipt(state, receipt.acknowledged ? 'committed' : 'outcome_unknown', receipt.provider, receipt.externalReceiptRef, receipt.externalReceiptDigest, this.#now(), capability.provider.id);
+        }
+        throw new Error('Compensation requires a separately registered typed capability');
+    }
+    async reconcile(state, signal) {
+        if (!state.authorization || !state.attempt)
+            throw new Error('Effect reconciliation requires authorized attempt');
+        const { lease, capability } = await this.#resolve(state, signal, false);
+        const observation = await capability.reconcile({
+            generation: this.options.generation,
+            state,
+            lease,
+        }, signal);
+        if (canonicalWorkroomJson(observation.provider) !== canonicalWorkroomJson(capability.provider)) {
+            throw new Error('GitHub reconciliation provider identity drift');
+        }
+        return effectReceipt(state, observation.outcome, observation.provider, observation.remoteRef, observation.remoteDigest, observation.observedAt, observation.authenticatedBy);
+    }
+    async #resolve(state, signal, requireProtection) {
+        signal.throwIfAborted();
+        if (state.intent.operation.kind === 'processor_recall') {
+            throw new Error('Processor recall requires its separately registered typed capability');
+        }
+        const authority = this.options.resolveLease();
+        if (!authority)
+            throw new Error('Trusted Git Workspace Lease authority is unavailable');
+        const lease = await authority.resolve({
+            projectId: state.intent.projectId,
+            runId: state.intent.runId,
+            taskKey: state.intent.taskKey,
+            taskRevision: state.intent.taskRevision,
+            leaseRef: state.intent.target.ref,
+            leaseDigest: state.intent.target.digest,
+        });
+        if (!lease)
+            throw new Error('Exact Git Workspace Lease is unavailable');
+        const canonical = createGitWorkspaceLease(lease);
+        assertLeaseJoin(canonical, state);
+        const capability = this.options.resolveCapability();
+        if (!capability)
+            throw new Error('Generation-owned GitHub capability is unavailable');
+        requireProvider(capability.provider);
+        if (requireProtection) {
+            const protection = this.options.resolveProtection();
+            if (!protection)
+                throw new Error('Git branch-protection authority is unavailable');
+            assertProtection(await protection.attest({
+                projectId: state.intent.projectId,
+                leaseDigest: canonical.digest,
+                repositoryId: canonical.repository.id,
+                targetRef: canonical.targetRef,
+            }), canonical, capability.provider, this.#now(), this.#protectionMaxAgeMs);
+        }
+        return { lease: canonical, capability };
+    }
+}
+function assertAuthorizationFacts(facts, input) {
+    if (facts.version !== 1 || facts.projectId !== input.projectId || facts.runId !== input.intent.runId
+        || facts.intentId !== input.intent.id || facts.intentDigest !== input.intent.digest
+        || facts.candidateHash !== input.intent.candidateHash
+        || facts.risk.assessmentRef !== input.intent.risk.assessmentRef
+        || facts.risk.assessmentDigest !== input.intent.risk.assessmentDigest
+        || facts.scope.workspaceRef !== input.intent.target.ref
+        || facts.scope.workspaceDigest !== input.intent.target.digest
+        || facts.scope.preconditionsDigest !== digest(input.intent.preconditions)
+        || facts.sponsor.decision !== 'approved' || facts.expiresAt <= input.now
+        || facts.issuedAt > input.now || facts.expiresAt > facts.scope.deadline) {
+        throw new Error('P7 persisted Effect Authorization fact binding drift');
+    }
+    required(facts.authorizationId, 'authorizationId');
+    required(facts.policy.id, 'policy id');
+    positive(facts.policy.revision, 'policy revision');
+    requiredDigest(facts.policy.digest, 'policy digest');
+    required(facts.policyDecision.ref, 'policy decision ref');
+    requiredDigest(facts.policyDecision.digest, 'policy decision digest');
+    positive(facts.scope.assignmentAttempt, 'Assignment attempt');
+    positive(facts.scope.workspaceFence, 'Workspace fence');
+    positive(facts.scope.deadline, 'authorization deadline');
+    required(facts.sponsor.decisionRef, 'Sponsor decision ref');
+    requiredDigest(facts.sponsor.decisionDigest, 'Sponsor decision digest');
+    required(facts.sponsor.principalId, 'Sponsor principal');
+    positive(facts.issuedAt, 'authorization issuedAt');
+    positive(facts.expiresAt, 'authorization expiresAt');
+}
+function assertLeaseJoin(lease, state) {
+    const operation = state.intent.operation;
+    if (operation.kind === 'compensation') {
+        throw new Error('Compensation is not a Git Workspace publication operation');
+    }
+    if (operation.kind === 'processor_recall') {
+        throw new Error('Processor recall is not a Git Workspace publication operation');
+    }
+    if (lease.leaseRef !== state.intent.target.ref || lease.digest !== state.intent.target.digest
+        || lease.projectId !== state.intent.projectId || lease.runId !== state.intent.runId
+        || lease.taskKey !== state.intent.taskKey || lease.taskRevision !== state.intent.taskRevision
+        || lease.repository.id !== operation.parameters.repositoryId) {
+        throw new Error('Effect Intent and Git Workspace Lease binding drift');
+    }
+    if (operation.kind === 'git_push'
+        && (operation.parameters.ref !== lease.attemptBranch
+            || !operation.parameters.changedPaths.every(path => lease.pathScopes.some(scope => path === scope || (scope.endsWith('/') && path.startsWith(scope)))))) {
+        throw new Error('Git push Effect exceeds Workspace Lease');
+    }
+    if (operation.kind === 'git_open_pr'
+        && (operation.parameters.headRef !== lease.attemptBranch
+            || operation.parameters.baseRef !== lease.targetRef)) {
+        throw new Error('Git Pull Request Effect exceeds Workspace Lease');
+    }
+}
+function assertProtection(value, lease, provider, now, maxAgeMs) {
+    positive(value.observedAt, 'branch protection observedAt');
+    const body = deepFreeze({
+        version: 1,
+        repositoryId: value.repositoryId,
+        targetRef: value.targetRef,
+        directPushForbidden: value.directPushForbidden,
+        forcePushForbidden: value.forcePushForbidden,
+        pullRequestRequired: value.pullRequestRequired,
+        provider: value.provider,
+        observedAt: value.observedAt,
+    });
+    if (value.repositoryId !== lease.repository.id || value.targetRef !== lease.targetRef
+        || value.directPushForbidden !== true || value.forcePushForbidden !== true
+        || value.pullRequestRequired !== true
+        || canonicalWorkroomJson(value.provider) !== canonicalWorkroomJson(provider)
+        || value.observedAt > now || value.observedAt < now - maxAgeMs
+        || value.digest !== digest(body)) {
+        throw new Error('Git branch-protection attestation drift');
+    }
+}
+function effectReceipt(state, outcome, provider, remoteRef, remoteDigest, observedAt, authenticatedBy) {
+    if (!state.authorization || !state.attempt)
+        throw new Error('Effect receipt requires authorized attempt');
+    requireProvider(provider);
+    return deepFreeze({
+        version: 1,
+        receiptId: `effect-receipt:${state.attempt.id}:${remoteDigest}`,
+        intentId: state.intent.id,
+        intentDigest: state.intent.digest,
+        authorizationDigest: state.authorization.authorizationDigest,
+        attemptId: state.attempt.id,
+        fence: state.attempt.fence,
+        provider,
+        outcome,
+        remoteRef: required(remoteRef, 'remoteRef'),
+        remoteDigest: requiredDigest(remoteDigest, 'remoteDigest'),
+        observedAt: positive(observedAt, 'observedAt'),
+        authenticatedBy: required(authenticatedBy, 'authenticatedBy'),
+    });
+}
+function requireProvider(value) {
+    required(value?.id, 'provider id');
+    requiredDigest(value?.digest, 'provider digest');
+}
+function assertProviderIdentity(actual, expected) {
+    if (canonicalWorkroomJson(actual) !== canonicalWorkroomJson(expected)) {
+        throw new Error('GitHub provider receipt identity drift');
+    }
+}
+function required(value, label) {
+    if (typeof value !== 'string' || !value.trim() || value !== value.trim())
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function requiredDigest(value, label) {
+    if (typeof value !== 'string' || !/^sha256:[a-f0-9]{64}$/u.test(value))
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function positive(value, label) {
+    if (!Number.isSafeInteger(value) || Number(value) < 1)
+        throw new Error(`${label} is invalid`);
+    return Number(value);
+}
+//# sourceMappingURL=workroom-effect-production.js.map

package/lib/plugin-runtime/workroom-effect-production.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-effect-production.js","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-effect-production.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAOtD,OAAO,EACL,mBAAmB,EACnB,uBAAuB,GAIxB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,IAAI,MAAM,GACvC,MAAM,gCAAgC,CAAC;AAyCxC,MAAM,CAAC,MAAM,8CAA8C,GACzD,WAAW,CACT,0DAA0D,EAC1D,iFAAiF,CAClF,CAAC;AAEJ,kFAAkF;AAClF,MAAM,OAAO,oCAAoC;IAC1B;IAArB,YAAqB,YAA6E;QAA7E,iBAAY,GAAZ,YAAY,CAAiE;IAAG,CAAC;IAEtG,KAAK,CAAC,SAAS,CAAC,KAAkE;QAChF,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;YACzB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC9E,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO,UAAU,CAAC;YAChB,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;YACzB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YACjC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa;YACzC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,cAAc,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE;YACvF,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;CACF;AAaD,MAAM,CAAC,MAAM,uCAAuC,GAClD,WAAW,CACT,mDAAmD,EACnD,4CAA4C,CAC7C,CAAC;AAuBJ,MAAM,CAAC,MAAM,yCAAyC,GACpD,WAAW,CACT,qDAAqD,EACrD,oDAAoD,CACrD,CAAC;AAsBJ,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAW,CACtD,uCAAuC,EACvC,0EAA0E,CAC3E,CAAC;AAWF,2EAA2E;AAC3E,MAAM,OAAO,kCAAkC;IAIxB;IAHZ,IAAI,CAAe;IACnB,mBAAmB,CAAS;IAErC,YAAqB,OAAkD;QAAlD,YAAO,GAAP,OAAO,CAA2C;QACrE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,mBAAmB,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,IAAI,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA0B,EAAE,MAAmB;QAC3D,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA0B,EAAE,MAAmB;QAC3D,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC5G,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC/C,KAAK,EACL,MAAM,EACN,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,mBAAmB,CACpD,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;YACtC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YACnC,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,GAAG,EAAE,IAAI,CAAC,IAAI;SACf,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;QACzC,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;gBACtC,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG;gBAC7B,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,OAAO;gBACrC,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,YAAY;gBAC/C,KAAK,EAAE,KAAK;aACb,EAAE,MAAM,CAAC,CAAC;YACX,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC9D,OAAO,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,kBAAkB,EACnF,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC;gBAC5C,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;gBACtC,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,OAAO;gBACrC,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,OAAO;gBACrC,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,OAAO;aACtC,EAAE,MAAM,CAAC,CAAC;YACX,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC9D,OAAO,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EACtE,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;gBACtC,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,iBAAiB,EAAE,SAAS,CAAC,UAAU,CAAC,iBAAiB;aAC1D,EAAE,MAAM,CAAC,CAAC;YACX,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC9D,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,CAAC,QAAQ,EAClG,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAA0B,EAAE,MAAmB;QAC7D,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACjH,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC;YAC7C,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YACnC,KAAK;YACL,KAAK;SACN,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,qBAAqB,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,SAAS,EAC1F,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,eAAe,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA0B,EAAE,MAAmB,EAAE,iBAA0B;QAIxF,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC9C,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;YACpC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;YACjC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;YACzB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;YAC7B,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;YACvC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;YACjC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACjD,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACtF,eAAe,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACpD,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACnF,gBAAgB,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC;gBACvC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;gBACjC,WAAW,EAAE,SAAS,CAAC,MAAM;gBAC7B,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE;gBACrC,SAAS,EAAE,SAAS,CAAC,SAAS;aAC/B,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IAC1C,CAAC;CACF;AAED,SAAS,wBAAwB,CAC/B,KAAgD,EAChD,KAAkE;IAElE,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK;WAC/F,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM;WAChF,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,MAAM,CAAC,aAAa;WAClD,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa;WAC5D,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB;WAClE,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;WACpD,KAAK,CAAC,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;WAC1D,KAAK,CAAC,KAAK,CAAC,mBAAmB,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;WACtE,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG;WACrE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACnD,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACnD,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACrD,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC1D,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACtE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACxD,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IAC5D,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC;IACxE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IACnD,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,KAAwB,EAAE,KAA0B;IAC3E,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;IACzC,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;WACxF,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK;WAChF,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,YAAY;WAC1F,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,SAAS,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU;WAC5B,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,aAAa;eAC/C,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACjD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa;WAC/B,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,KAAK,KAAK,CAAC,aAAa;eACnD,SAAS,CAAC,UAAU,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,KAA6C,EAC7C,KAAwB,EACxB,QAAkD,EAClD,GAAW,EACX,QAAgB;IAEhB,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,OAAO,EAAE,CAAU;QACnB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WAChF,KAAK,CAAC,mBAAmB,KAAK,IAAI,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI;WACvE,KAAK,CAAC,mBAAmB,KAAK,IAAI;WAClC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,QAAQ,CAAC;WACzE,KAAK,CAAC,UAAU,GAAG,GAAG,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG,GAAG,QAAQ;WAC3D,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,KAA0B,EAC1B,OAAgD,EAChD,QAAkD,EAClD,SAAiB,EACjB,YAAoB,EACpB,UAAkB,EAClB,eAAuB;IAEvB,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC1G,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1B,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,kBAAkB,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,YAAY,EAAE;QAC/D,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;QACzB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;QACjC,mBAAmB,EAAE,KAAK,CAAC,aAAa,CAAC,mBAAmB;QAC5D,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QAC3B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;QAC1B,QAAQ;QACR,OAAO;QACP,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;QAC3C,YAAY,EAAE,cAAc,CAAC,YAAY,EAAE,cAAc,CAAC;QAC1D,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;QAC9C,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAA+C;IACtE,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;IACnC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAgD,EAChD,QAAkD;IAElD,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACjH,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC/G,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/lib/plugin-runtime/workroom-effect-runtime.d.ts

@@ -0,0 +1,72 @@
+import { type WorkroomEffectAuthorizationPort, type WorkroomEffectGatewayReceipt, type WorkroomEffectJournal, type WorkroomEffectState } from '../workroom/effect-ledger.js';
+export interface WorkroomEffectGatewayPort {
+    /** Side-effect-free authority/readiness probe performed before an attempt exists. */
+    prepare?(state: WorkroomEffectState, signal: AbortSignal): Promise<void>;
+    /** Dispatch exactly once with the already-durable attempt/idempotency key. */
+    execute(state: WorkroomEffectState, signal: AbortSignal): Promise<WorkroomEffectGatewayReceipt>;
+    /** Observe the same attempt without issuing a second side effect. */
+    reconcile(state: WorkroomEffectState, signal: AbortSignal): Promise<WorkroomEffectGatewayReceipt>;
+}
+export declare class WorkroomEffectOutcomeUnknownError extends Error {
+    readonly receipt: WorkroomEffectGatewayReceipt;
+    constructor(receipt: WorkroomEffectGatewayReceipt);
+}
+export interface WorkroomEffectRuntimeOptions {
+    readonly journal: WorkroomEffectJournal;
+    readonly authorization: WorkroomEffectAuthorizationPort;
+    readonly gateway: WorkroomEffectGatewayPort;
+    readonly workerId: string;
+    readonly fence: number;
+    readonly now?: () => number;
+    readonly clock?: WorkroomEffectClockPort;
+    readonly projects?: Readonly<{
+        listProjectIds(): Promise<readonly string[]>;
+    }>;
+    readonly blockers?: WorkroomEffectBlockerControlPort;
+    readonly blockerPolicy?: WorkroomEffectBlockerPolicyPort;
+    readonly intervalMs?: number;
+    readonly signal?: AbortSignal;
+    readonly onError?: (error: unknown) => void;
+}
+export interface WorkroomEffectBlockerInput {
+    readonly projectId: string;
+    readonly effectId: string;
+    readonly owner: string;
+    readonly policy: Readonly<{
+        kind: 'pinned_profile' | 'root_emergency_fallback';
+        ref: string;
+        digest: string;
+    }>;
+    readonly reason: string;
+    readonly deadline: number;
+    readonly allowedSuccessors: readonly ('retry' | 'reconcile' | 'cancel')[];
+}
+export interface WorkroomEffectBlockerControlPort {
+    block(input: WorkroomEffectBlockerInput): Promise<void>;
+    recover(projectId: string, effectId: string): Promise<void>;
+}
+export interface WorkroomEffectBlockerPolicyPort {
+    resolve(input: Readonly<{
+        state: WorkroomEffectState;
+        phase: 'prepare_or_authorize' | 'reconcile';
+        reason: string;
+    }>): Promise<Pick<WorkroomEffectBlockerInput, 'owner' | 'policy' | 'deadline' | 'allowedSuccessors'>>;
+}
+export interface WorkroomEffectClockPort {
+    read(state: WorkroomEffectState): Promise<number>;
+}
+/**
+ * Restart-safe outbox worker. The Effect Journal is the outbox: an attempt is
+ * durable before dispatch. A recovered attempt is reconciled, never executed
+ * again blindly.
+ */
+export declare class WorkroomEffectRuntime {
+    #private;
+    readonly options: WorkroomEffectRuntimeOptions;
+    constructor(options: WorkroomEffectRuntimeOptions);
+    start(): void;
+    drain(signal?: AbortSignal): Promise<readonly WorkroomEffectState[]>;
+    dispose(): Promise<void>;
+    runOnce(projectId: string, signal: AbortSignal): Promise<readonly WorkroomEffectState[]>;
+}
+//# sourceMappingURL=workroom-effect-runtime.d.ts.map

package/lib/plugin-runtime/workroom-effect-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-effect-runtime.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-effect-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,+BAA+B,EACpC,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,WAAW,yBAAyB;IACxC,qFAAqF;IACrF,OAAO,CAAC,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,8EAA8E;IAC9E,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAChG,qEAAqE;IACrE,SAAS,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;CACnG;AAED,qBAAa,iCAAkC,SAAQ,KAAK;IAC9C,QAAQ,CAAC,OAAO,EAAE,4BAA4B;gBAArC,OAAO,EAAE,4BAA4B;CAO3D;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;QAAE,cAAc,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,gCAAgC,CAAC;IACrD,QAAQ,CAAC,aAAa,CAAC,EAAE,+BAA+B,CAAC;IACzD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QACxB,IAAI,EAAE,gBAAgB,GAAG,yBAAyB,CAAC;QACnD,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,OAAO,GAAG,WAAW,GAAG,QAAQ,CAAC,EAAE,CAAC;CAC3E;AAED,MAAM,WAAW,gCAAgC;IAC/C,KAAK,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QACtB,KAAK,EAAE,mBAAmB,CAAC;QAC3B,KAAK,EAAE,sBAAsB,GAAG,WAAW,CAAC;QAC5C,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,mBAAmB,CAAC,CAAC,CAAC;CACvG;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnD;AAED;;;;GAIG;AACH,qBAAa,qBAAqB;;IAQpB,QAAQ,CAAC,OAAO,EAAE,4BAA4B;gBAArC,OAAO,EAAE,4BAA4B;IAc1D,KAAK,IAAI,IAAI;IAMP,KAAK,CAAC,MAAM,cAAsD,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IAa5G,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAOxB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;CAyG/F"}