@zhin.js/workroom 0.0.0 → 0.0.2

package/lib/workroom/coding-assignment-executor.js

@@ -0,0 +1,250 @@
+import { spawn } from 'node:child_process';
+import { digestCanonicalWorkroomValue as digest } from './canonical-value.js';
+import { assertAssignmentExecutionEnvelope, } from './assignment-executor.js';
+/** Fixed Docker transport: no bind mounts, inherited environment or networking in the guest. */
+export class DockerCodingAssignmentExecutor {
+    snapshots;
+    objects;
+    reports;
+    dockerBinary;
+    constructor(snapshots, objects, reports, dockerBinary = 'docker') {
+        this.snapshots = snapshots;
+        this.objects = objects;
+        this.reports = reports;
+        this.dockerBinary = dockerBinary;
+    }
+    async *execute(envelope, signal) {
+        assertAssignmentExecutionEnvelope(envelope);
+        signal.throwIfAborted();
+        const snapshot = structuredClone(await this.snapshots.resolve(envelope, signal));
+        const name = `zhin-coding-${envelope.digest.slice(7)}`;
+        let ownsDispatch = false;
+        try {
+            validateSnapshot(snapshot, envelope);
+            const boundedSignal = AbortSignal.any([signal, AbortSignal.timeout(snapshot.timeoutMs)]);
+            await this.snapshots.assertCurrent(envelope, boundedSignal);
+            const prior = await this.reports.find(envelope.digest, boundedSignal);
+            if (prior) {
+                if (prior.digest !== digest(prior.report) || prior.report.envelopeDigest !== envelope.digest || prior.report.baseCommit !== snapshot.baseCommit || typeof prior.report.commit !== 'string')
+                    throw new Error('Coding recovered report authority mismatch');
+                assertSha(prior.report.commit);
+                await this.snapshots.assertCurrent(envelope, boundedSignal);
+                boundedSignal.throwIfAborted();
+                yield { version: 1, type: 'execution_completed', observationId: `${name}/completed`, envelopeDigest: envelope.digest, completion: { report: { ref: prior.ref, digest: prior.digest }, candidate: { ref: `git:${prior.report.commit}`, hash: digest({ baseCommit: snapshot.baseCommit, commit: prior.report.commit }) } } };
+                return;
+            }
+            await this.snapshots.claimExecution(envelope, boundedSignal);
+            ownsDispatch = true;
+            yield { version: 1, type: 'progress', observationId: `${name}/started`, envelopeDigest: envelope.digest, progress: { summary: 'Running pinned coding image in isolated Docker workspace' } };
+            const input = JSON.stringify({ version: 1, envelopeDigest: envelope.digest, baseCommit: snapshot.baseCommit, instruction: snapshot.instruction, files: snapshot.files });
+            if (Buffer.byteLength(input) > snapshot.maxBytes)
+                throw new Error('Coding input exceeds byte budget');
+            const output = await runCodingProcess(this.dockerBinary, codingDockerArgs(snapshot, name), input, boundedSignal, snapshot.maxBytes);
+            // Stop the entire guest before interpreting candidate-controlled output.
+            await this.removeContainer(name);
+            boundedSignal.throwIfAborted();
+            const edits = validateCodingEdits(JSON.parse(output), snapshot);
+            await this.snapshots.assertCurrent(envelope, boundedSignal);
+            const commit = await uploadCodingObjects(snapshot, edits, this.objects, boundedSignal);
+            await this.snapshots.assertCurrent(envelope, boundedSignal);
+            const report = { version: 1, envelopeDigest: envelope.digest, baseCommit: snapshot.baseCommit, commit, editsDigest: digest(edits), paths: edits.map(edit => edit.path), image: snapshot.image };
+            const stored = await this.reports.save(report, boundedSignal);
+            if (stored.digest !== digest(report))
+                throw new Error('Coding report storage digest mismatch');
+            await this.snapshots.assertCurrent(envelope, boundedSignal);
+            boundedSignal.throwIfAborted();
+            yield { version: 1, type: 'execution_completed', observationId: `${name}/completed`, envelopeDigest: envelope.digest, completion: { report: stored, candidate: { ref: `git:${commit}`, hash: digest({ baseCommit: snapshot.baseCommit, commit }) } } };
+        }
+        finally {
+            try {
+                if (ownsDispatch)
+                    await this.removeContainer(name);
+            }
+            finally {
+                if (ownsDispatch)
+                    await this.snapshots.release(envelope);
+            }
+        }
+    }
+    async removeContainer(name) {
+        // rm -f addresses the daemon-side container even when the attached CLI was killed.
+        try {
+            await runCodingProcess(this.dockerBinary, ['rm', '-f', name], '', AbortSignal.timeout(10_000), 16_384);
+        }
+        catch (error) {
+            if (!(error instanceof Error) || !error.message.includes('No such container'))
+                throw error;
+        }
+    }
+}
+export function codingDockerArgs(snapshot, name) {
+    return ['run', '--rm', '--pull=never', '--name', name, '--label=dev.zhin.coding-executor=1', `--label=dev.zhin.envelope=${snapshot.envelopeDigest}`, '--network=none', '--read-only', '--cap-drop=ALL', '--security-opt=no-new-privileges', '--pids-limit=128', `--memory=${snapshot.memoryMiB}m`, `--memory-swap=${snapshot.memoryMiB}m`, `--cpus=${snapshot.cpus}`, '--user=65534:65534', '--workdir=/workspace', `--tmpfs=/workspace:rw,nosuid,nodev,size=${snapshot.workspaceMiB}m,mode=1777`, '--tmpfs=/tmp:rw,nosuid,nodev,size=32m,mode=1777', '--entrypoint', snapshot.command[0], '-i', snapshot.image, ...snapshot.command.slice(1)];
+}
+export function validateCodingEdits(value, snapshot) {
+    if (!value || typeof value !== 'object' || Object.keys(value).join() !== 'edits' || !Array.isArray(value.edits))
+        throw new Error('Coding output requires only edits');
+    const edits = value.edits;
+    if (!edits.length || edits.length > 256 || Buffer.byteLength(JSON.stringify(value)) > snapshot.maxBytes)
+        throw new Error('Coding output exceeds change budget or has no edits');
+    const seen = new Set();
+    return edits.map(value => {
+        if (!value || typeof value !== 'object')
+            throw new Error('Invalid coding edit');
+        const edit = value;
+        if (Object.keys(edit).sort().join() !== 'content,path' || typeof edit.path !== 'string' || (edit.content !== null && typeof edit.content !== 'string'))
+            throw new Error('Invalid coding edit');
+        assertPath(edit.path);
+        if (!snapshot.writablePaths.some(path => edit.path === path || (path.endsWith('/') && edit.path.startsWith(path))))
+            throw new Error(`Coding path outside authorized scope: ${edit.path}`);
+        if (seen.has(edit.path))
+            throw new Error('Duplicate coding path');
+        seen.add(edit.path);
+        if (edit.content === null && !snapshot.files.some(file => file.path === edit.path))
+            throw new Error('Cannot delete unknown coding file');
+        return { path: edit.path, content: edit.content };
+    });
+}
+/** Upload unreachable objects only. Ref/PR mutation must still pass the existing Git Gateway. */
+export async function uploadCodingObjects(snapshot, edits, objects, signal) {
+    assertSha(snapshot.baseCommit);
+    assertSha(snapshot.baseTree);
+    const checked = validateCodingEdits({ edits }, snapshot);
+    const entries = [];
+    for (const edit of checked) {
+        signal.throwIfAborted();
+        const sha = edit.content === null ? null : await objects.createBlob(edit.content, signal);
+        if (sha !== null)
+            assertSha(sha);
+        entries.push({ path: edit.path, mode: snapshot.files.find(file => file.path === edit.path)?.mode ?? '100644', type: 'blob', sha });
+    }
+    signal.throwIfAborted();
+    const tree = await objects.createTree(snapshot.baseTree, entries, signal);
+    assertSha(tree);
+    signal.throwIfAborted();
+    const commit = await objects.createCommit(tree, snapshot.baseCommit, `Workroom candidate ${snapshot.envelopeDigest}`, signal);
+    assertSha(commit);
+    return commit;
+}
+function validateSnapshot(snapshot, envelope) {
+    if (snapshot.envelopeDigest !== envelope.digest || snapshot.baseCommit !== envelope.workspace.baseRevision.replace(/^git:/u, ''))
+        throw new Error('Coding snapshot authority mismatch');
+    assertSha(snapshot.baseCommit);
+    assertSha(snapshot.baseTree);
+    if (!/^[a-z0-9][a-z0-9./:_-]*@sha256:[a-f0-9]{64}$/u.test(snapshot.image))
+        throw new Error('Coding image requires immutable digest');
+    if (!snapshot.command.length || snapshot.command.some(arg => !arg || arg.includes('\0')))
+        throw new Error('Coding command is invalid');
+    for (const n of [snapshot.timeoutMs, snapshot.maxBytes, snapshot.memoryMiB, snapshot.workspaceMiB])
+        if (!Number.isSafeInteger(n) || n <= 0)
+            throw new Error('Coding budget must be positive');
+    // Node timers above signed 32-bit delay overflow to 1ms, even where the
+    // AbortSignal API accepts an unsigned 32-bit value. Reject before dispatch.
+    if (snapshot.timeoutMs > 2_147_483_647)
+        throw new Error('Coding timeout exceeds platform timer upper bound');
+    if (!Number.isFinite(snapshot.cpus) || snapshot.cpus <= 0)
+        throw new Error('Coding CPU budget must be positive');
+    for (const path of snapshot.writablePaths)
+        assertPath(path.endsWith('/') ? path.slice(0, -1) : path);
+    const seen = new Set();
+    for (const file of snapshot.files) {
+        assertPath(file.path);
+        if (seen.has(file.path) || !['100644', '100755'].includes(file.mode) || typeof file.content !== 'string')
+            throw new Error('Invalid coding base file');
+        seen.add(file.path);
+    }
+}
+function assertSha(value) { if (!/^[a-f0-9]{40}$/u.test(value))
+    throw new Error('Coding Git object requires exact SHA-1'); }
+function assertPath(path) {
+    if (!path || path.startsWith('/') || path.includes('\\') || path.includes(':') || Array.from(path).some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127) || path.split('/').some(part => !part || part === '.' || part === '..' || part.toLowerCase() === '.git') || (path.toLowerCase() === '.github' || path.toLowerCase().startsWith('.github/')))
+        throw new Error(`Unsafe coding path: ${path}`);
+}
+/** No shell; bounded stdout/stderr; cancellation kills the attached process and waits for exit.
+ * Strict UTF-8 mode validates raw stdout bytes before any lossy decoding. */
+export async function runCodingProcess(binary, args, input, signal, maxBytes, cwd, strictUtf8 = false) {
+    signal.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const child = spawn(binary, [...args], { cwd, env: { PATH: process.env.PATH, HOME: '/nonexistent', GIT_CONFIG_NOSYSTEM: '1', GIT_CONFIG_GLOBAL: '/dev/null', GIT_TERMINAL_PROMPT: '0' }, stdio: 'pipe' });
+        const output = [];
+        const errors = [];
+        let bytes = 0;
+        let failure;
+        const stop = () => { failure ??= new Error('Coding process aborted'); child.kill('SIGKILL'); };
+        const collect = (target) => (chunk) => { bytes += chunk.length; if (bytes > maxBytes) {
+            failure = new Error('Coding process exceeds output budget');
+            child.kill('SIGKILL');
+        }
+        else
+            target.push(chunk); };
+        child.stdout.on('data', collect(output));
+        child.stderr.on('data', collect(errors));
+        child.stdin.on('error', () => { });
+        signal.addEventListener('abort', stop, { once: true });
+        if (signal.aborted)
+            stop();
+        child.once('error', error => { signal.removeEventListener('abort', stop); reject(error); });
+        child.once('close', code => {
+            signal.removeEventListener('abort', stop);
+            if (failure) {
+                reject(failure);
+                return;
+            }
+            if (code !== 0) {
+                reject(new Error(`Coding process exited ${code}: ${Buffer.concat(errors).toString('utf8').slice(0, 1024)}`));
+                return;
+            }
+            try {
+                const bytes = Buffer.concat(output);
+                resolve(strictUtf8 ? new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes) : bytes.toString('utf8'));
+            }
+            catch {
+                reject(new Error('Coding process output requires valid UTF-8'));
+            }
+        });
+        child.stdin.end(input);
+    });
+}
+/** Read-only infrastructure check; image availability does not prove a model/backend integration. */
+export async function inspectCodingDockerReadiness(image, signal, dockerBinary = 'docker') {
+    signal.throwIfAborted();
+    if (!/^[a-z0-9][a-z0-9./:_-]*@sha256:[a-f0-9]{64}$/u.test(image))
+        return { ready: false, blockers: ['coding_image_digest_required'] };
+    try {
+        await runCodingProcess(dockerBinary, ['info', '--format', '{{.ServerVersion}}'], '', signal, 16_384);
+        signal.throwIfAborted();
+    }
+    catch {
+        signal.throwIfAborted();
+        return { ready: false, blockers: ['docker_daemon_unavailable'] };
+    }
+    try {
+        const output = await runCodingProcess(dockerBinary, ['image', 'inspect', '--format', '{{json .RepoDigests}}', image], '', signal, 16_384);
+        signal.throwIfAborted();
+        const digests = JSON.parse(output);
+        if (!Array.isArray(digests) || !digests.includes(image))
+            return { ready: false, blockers: ['coding_image_digest_mismatch'] };
+        return { ready: true, blockers: [] };
+    }
+    catch {
+        signal.throwIfAborted();
+        return { ready: false, blockers: ['coding_image_not_provisioned'] };
+    }
+}
+/** Reconcile daemon leftovers using current assignment authority, without redispatching work. */
+export async function reconcileCodingContainers(isStale, signal, dockerBinary = 'docker') {
+    const output = await runCodingProcess(dockerBinary, ['ps', '-a', '--filter', 'label=dev.zhin.coding-executor=1', '--format', '{{.Names}}'], '', signal, 65_536);
+    const names = output.split('\n').filter(Boolean);
+    const removed = [];
+    for (const name of names) {
+        if (!/^zhin-coding-[a-f0-9]{64}$/u.test(name))
+            throw new Error('Unexpected coding container identity');
+        const envelopeDigest = `sha256:${name.slice('zhin-coding-'.length)}`;
+        if (!await isStale(envelopeDigest, signal))
+            continue;
+        signal.throwIfAborted();
+        await runCodingProcess(dockerBinary, ['rm', '-f', name], '', signal, 16_384);
+        removed.push(name);
+    }
+    return { inspected: names.length, removed };
+}
+//# sourceMappingURL=coding-assignment-executor.js.map

package/lib/workroom/coding-assignment-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-assignment-executor.js","sourceRoot":"","sources":["../../src/workroom/coding-assignment-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,4BAA4B,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EACL,iCAAiC,GAIlC,MAAM,0BAA0B,CAAC;AAoDlC,gGAAgG;AAChG,MAAM,OAAO,8BAA8B;IAEtB;IACA;IACA;IACA;IAJnB,YACmB,SAAuC,EACvC,OAA0B,EAC1B,OAAyB,EACzB,eAAe,QAAQ;QAHvB,cAAS,GAAT,SAAS,CAA8B;QACvC,YAAO,GAAP,OAAO,CAAmB;QAC1B,YAAO,GAAP,OAAO,CAAkB;QACzB,iBAAY,GAAZ,YAAY,CAAW;IACvC,CAAC;IAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,QAAqC,EAAE,MAAmB;QACvE,iCAAiC,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,eAAe,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC;YACH,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACrC,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YACtE,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC1P,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/B,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;gBAC5D,aAAa,CAAC,cAAc,EAAE,CAAC;gBAC/B,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,aAAa,EAAE,GAAG,IAAI,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;gBAC3T,OAAO;YACT,CAAC;YACD,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC7D,YAAY,GAAG,IAAI,CAAC;YACpB,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,UAAU,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,0DAA0D,EAAE,EAAE,CAAC;YAC7L,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YACzK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtG,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpI,yEAAyE;YACzE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACjC,aAAa,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;YAChE,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACvF,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;YAChM,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC/F,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC5D,aAAa,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,aAAa,EAAE,GAAG,IAAI,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;QACzP,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,IAAI,YAAY;oBAAE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,IAAI,YAAY;oBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;QACnI,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAAY;QACxC,mFAAmF;QACnF,IAAI,CAAC;YAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAC/G,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC7F,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAkC,EAAE,IAAY;IAC/E,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,oCAAoC,EAAE,6BAA6B,QAAQ,CAAC,cAAc,EAAE,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,kBAAkB,EAAE,YAAY,QAAQ,CAAC,SAAS,GAAG,EAAE,iBAAiB,QAAQ,CAAC,SAAS,GAAG,EAAE,UAAU,QAAQ,CAAC,IAAI,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,2CAA2C,QAAQ,CAAC,YAAY,aAAa,EAAE,iDAAiD,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAClnB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,QAAkC;IACpF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,KAA6B,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC/L,MAAM,KAAK,GAAI,KAA8B,CAAC,KAAK,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAChL,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACvB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,KAAmB,CAAC;QACjC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,cAAc,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC/L,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1L,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACzI,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAkC,EAAE,KAA4B,EAAE,OAA0B,EAAE,MAAmB;IACzJ,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1F,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,QAAiB,EAAE,IAAI,EAAE,MAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IACvJ,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1E,SAAS,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,sBAAsB,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9H,SAAS,CAAC,MAAM,CAAC,CAAC;IAClB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAkC,EAAE,QAAqC;IACjG,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxL,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACrI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACvI,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,YAAY,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC9L,wEAAwE;IACxE,4EAA4E;IAC5E,IAAI,QAAQ,CAAC,SAAS,GAAG,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC7G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjH,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa;QAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtJ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AACD,SAAS,SAAS,CAAC,KAAa,IAAU,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;IAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC,CAAC;AAC1I,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;AACrZ,CAAC;AAED;6EAC6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,IAAuB,EAAE,KAAa,EAAE,MAAmB,EAAE,QAAgB,EAAE,GAAY,EAAE,UAAU,GAAG,KAAK;IACpK,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW,EAAE,mBAAmB,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1M,MAAM,MAAM,GAAa,EAAE,CAAC;QAAC,MAAM,MAAM,GAAa,EAAE,CAAC;QACzD,IAAI,KAAK,GAAG,CAAC,CAAC;QAAC,IAAI,OAA0B,CAAC;QAC9C,MAAM,IAAI,GAAG,GAAS,EAAE,GAAG,OAAO,KAAK,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACrG,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAE,EAAE,CAAC,CAAC,KAAa,EAAQ,EAAE,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;;YAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjO,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACnF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAA6C,CAAC,CAAC,CAAC;QAC7E,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACzB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC7G,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACpC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1H,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;YAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAAa,EAAE,MAAmB,EAAE,YAAY,GAAG,QAAQ;IAC5G,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC;IACtI,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACrG,MAAM,CAAC,cAAc,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,2BAA2B,CAAC,EAAE,CAAC;IAAC,CAAC;IACtG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,uBAAuB,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1I,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC;QAC7H,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC;IAAC,CAAC;AAC3G,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAA0E,EAC1E,MAAmB,EACnB,YAAY,GAAG,QAAQ;IAEvB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,kCAAkC,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAChK,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACvG,MAAM,cAAc,GAAG,UAAU,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC;YAAE,SAAS;QACrD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,gBAAgB,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC"}

package/lib/workroom/coding-git-objects.d.ts

@@ -0,0 +1,17 @@
+import { type CodingFile, type CodingObjectsPort } from './coding-assignment-executor.js';
+/** Reads committed regular UTF-8 files without checking out or running repository code. */
+export declare function readCodingGitSnapshot(repository: string, commit: string, paths: readonly string[], signal: AbortSignal, maxBytes?: number): Promise<{
+    baseCommit: string;
+    baseTree: string;
+    files: CodingFile[];
+}>;
+export interface CodingGitHubObjectsOptions {
+    readonly owner: string;
+    readonly repository: string;
+    /** Must return a short-lived service credential; never sent to the coding image. */
+    readonly token: (signal: AbortSignal) => Promise<string>;
+    readonly fetch?: typeof globalThis.fetch;
+}
+/** Unreachable object creation only; no branches, merges or protection administration. */
+export declare function createCodingGitHubObjectsPort(options: CodingGitHubObjectsOptions): CodingObjectsPort;
+//# sourceMappingURL=coding-git-objects.d.ts.map

package/lib/workroom/coding-git-objects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-git-objects.d.ts","sourceRoot":"","sources":["../../src/workroom/coding-git-objects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAE5G,2FAA2F;AAC3F,wBAAsB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,SAAkB,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC,CAsBjO;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CAC1C;AAED,0FAA0F;AAC1F,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,0BAA0B,GAAG,iBAAiB,CAqBpG"}

package/lib/workroom/coding-git-objects.js

@@ -0,0 +1,68 @@
+import { runCodingProcess } from './coding-assignment-executor.js';
+/** Reads committed regular UTF-8 files without checking out or running repository code. */
+export async function readCodingGitSnapshot(repository, commit, paths, signal, maxBytes = 4 * 1024 * 1024) {
+    if (!/^[a-f0-9]{40}$/u.test(commit))
+        throw new Error('Coding base requires exact SHA-1');
+    if (!paths.length)
+        throw new Error('Coding context paths required');
+    for (const path of paths)
+        assertContextPath(path);
+    const git = (args) => runCodingProcess('git', ['--literal-pathspecs', '--no-replace-objects', '-c', 'core.fsmonitor=false', ...args], '', signal, maxBytes, repository, true);
+    const baseCommit = (await git(['rev-parse', '--verify', `${commit}^{commit}`])).trim();
+    if (baseCommit !== commit)
+        throw new Error('Coding base commit mismatch');
+    const baseTree = (await git(['rev-parse', `${commit}^{tree}`])).trim();
+    const entries = (await git(['ls-tree', '-rz', '--full-tree', commit, '--', ...paths])).split('\0').filter(Boolean);
+    const files = [];
+    let total = 0;
+    for (const entry of entries) {
+        const match = /^(100644|100755) blob ([a-f0-9]{40})\t(.+)$/u.exec(entry);
+        if (!match)
+            throw new Error('Coding context forbids symlinks and submodules');
+        const content = await git(['cat-file', 'blob', match[2]]);
+        // Binary files need a separate, explicit artifact channel.
+        if (content.includes('\0'))
+            throw new Error('Coding context requires UTF-8 text');
+        total += Buffer.byteLength(content);
+        if (total > maxBytes)
+            throw new Error('Coding context exceeds byte budget');
+        files.push({ path: match[3], content, mode: match[1] });
+    }
+    return { baseCommit, baseTree, files };
+}
+/** Unreachable object creation only; no branches, merges or protection administration. */
+export function createCodingGitHubObjectsPort(options) {
+    if (![options.owner, options.repository].every(value => /^[A-Za-z0-9_.-]+$/u.test(value)))
+        throw new Error('Invalid Coding GitHub repository');
+    const request = async (resource, body, signal) => {
+        signal.throwIfAborted();
+        const token = await options.token(signal);
+        signal.throwIfAborted();
+        const response = await (options.fetch ?? globalThis.fetch)(`https://api.github.com/repos/${options.owner}/${options.repository}/git/${resource}`, {
+            method: 'POST', redirect: 'error', signal,
+            headers: { Authorization: `Bearer ${token}`, Accept: 'application/vnd.github+json', 'Content-Type': 'application/json', 'X-GitHub-Api-Version': '2022-11-28' },
+            body: JSON.stringify(body),
+        });
+        if (!response.ok)
+            throw new Error(`Coding GitHub objects ${resource} failed (${response.status})`);
+        const value = await response.json();
+        if (typeof value.sha !== 'string' || !/^[a-f0-9]{40}$/u.test(value.sha))
+            throw new Error('Coding GitHub objects returned invalid SHA');
+        return value.sha;
+    };
+    return {
+        createBlob: (content, signal) => request('blobs', { content, encoding: 'utf-8' }, signal),
+        createTree: (baseTree, tree, signal) => request('trees', { base_tree: baseTree, tree }, signal),
+        createCommit: (tree, parent, message, signal) => request('commits', { tree, parents: [parent], message }, signal),
+    };
+}
+function assertContextPath(path) {
+    if (typeof path !== 'string' || !path || path.startsWith('/') || path.startsWith('-') || path.includes(':') || path.includes('\\')
+        || Array.from(path).some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+        throw new Error('Coding context requires canonical relative paths');
+    const canonical = path.endsWith('/') ? path.slice(0, -1) : path;
+    if (canonical.split('/').some(part => !part || part === '.' || part === '..' || part.toLowerCase() === '.git')
+        || canonical.split('/')[0].toLowerCase() === '.github')
+        throw new Error('Coding context requires canonical relative paths outside protected .github');
+}
+//# sourceMappingURL=coding-git-objects.js.map

package/lib/workroom/coding-git-objects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-git-objects.js","sourceRoot":"","sources":["../../src/workroom/coding-git-objects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAA2C,MAAM,iCAAiC,CAAC;AAE5G,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,MAAc,EAAE,KAAwB,EAAE,MAAmB,EAAE,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;IACvJ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACzF,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACpE,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,sBAAsB,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACxL,MAAM,UAAU,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvF,IAAI,UAAU,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnH,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,8CAA8C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;QAC3D,2DAA2D;QAC3D,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClF,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,KAAK,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAuB,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC;AAUD,0FAA0F;AAC1F,MAAM,UAAU,6BAA6B,CAAC,OAAmC;IAC/E,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC/I,MAAM,OAAO,GAAG,KAAK,EAAE,QAAgB,EAAE,IAAa,EAAE,MAAmB,EAAmB,EAAE;QAC9F,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,gCAAgC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,QAAQ,QAAQ,EAAE,EAAE;YAChJ,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM;YACzC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,cAAc,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,YAAY,EAAE;YAC9J,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,YAAY,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAuB,CAAC;QACzD,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACvI,OAAO,KAAK,CAAC,GAAG,CAAC;IACnB,CAAC,CAAC;IACF,OAAO;QACL,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC;QACzF,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC;QAC/F,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC;KAClH,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC7H,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC/J,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;WACzG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;AAC3J,CAAC"}

package/lib/workroom/database-project-knowledge-journal.d.ts

@@ -0,0 +1,62 @@
+import { type ProjectKnowledgeEvent, type ProjectKnowledgeJournal } from './project-knowledge-registry.js';
+export interface ProjectKnowledgeDatabaseModel {
+    select(...fields: string[]): {
+        where(query: Record<string, unknown>): Promise<Record<string, unknown>[]>;
+    };
+}
+export interface ProjectKnowledgeDatabaseTransaction {
+    select(table: string): {
+        where(query: Record<string, unknown>): Promise<Record<string, unknown>[]>;
+    };
+    insertMany(table: string, rows: Record<string, unknown>[]): Promise<unknown>;
+}
+export interface ProjectKnowledgeDatabase {
+    transaction<T>(operation: (transaction: ProjectKnowledgeDatabaseTransaction) => Promise<T>, options: {
+        isolationLevel: 'SERIALIZABLE';
+    }): Promise<T>;
+}
+/** Publishes no writer until every requested Project has migrated and reread exactly. */
+export declare class ActivatableProjectKnowledgeJournal implements ProjectKnowledgeJournal {
+    #private;
+    activate(delegate: ProjectKnowledgeJournal, projectIds: readonly string[], source?: ProjectKnowledgeJournal): Promise<void>;
+    read(projectId: string): Promise<readonly ProjectKnowledgeEvent[]>;
+    append(projectId: string, expectedRevision: number, event: ProjectKnowledgeEvent): Promise<ProjectKnowledgeEvent>;
+}
+export declare class DatabaseProjectKnowledgeJournal implements ProjectKnowledgeJournal {
+    readonly database: ProjectKnowledgeDatabase;
+    readonly model: ProjectKnowledgeDatabaseModel;
+    constructor(database: ProjectKnowledgeDatabase, model: ProjectKnowledgeDatabaseModel);
+    read(projectId: string): Promise<readonly ProjectKnowledgeEvent[]>;
+    append(projectId: string, expectedRevision: number, event: ProjectKnowledgeEvent): Promise<ProjectKnowledgeEvent>;
+}
+export declare const WORKROOM_PROJECT_KNOWLEDGE_MODEL: {
+    id: {
+        type: "text";
+        primary: boolean;
+        nullable: boolean;
+    };
+    project_id: {
+        type: "text";
+        nullable: boolean;
+    };
+    revision: {
+        type: "integer";
+        nullable: boolean;
+    };
+    operation_id: {
+        type: "text";
+        nullable: boolean;
+    };
+    event_digest: {
+        type: "text";
+        nullable: boolean;
+    };
+    event_json: {
+        type: "text";
+        nullable: boolean;
+    };
+};
+export declare function defineProjectKnowledgeDatabaseModel(database: Readonly<{
+    define(name: string, definition: unknown): void;
+}>): void;
+//# sourceMappingURL=database-project-knowledge-journal.d.ts.map

package/lib/workroom/database-project-knowledge-journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-project-knowledge-journal.d.ts","sourceRoot":"","sources":["../../src/workroom/database-project-knowledge-journal.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC7B,MAAM,iCAAiC,CAAC;AAGzC,MAAM,WAAW,6BAA6B;IAC5C,MAAM,CAAC,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG;QAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;KAAE,CAAC;CAC5G;AAED,MAAM,WAAW,mCAAmC;IAClD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;KAAE,CAAC;IACrG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9E;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,CAAC,CAAC,EACX,SAAS,EAAE,CAAC,WAAW,EAAE,mCAAmC,KAAK,OAAO,CAAC,CAAC,CAAC,EAC3E,OAAO,EAAE;QAAE,cAAc,EAAE,cAAc,CAAA;KAAE,GAC1C,OAAO,CAAC,CAAC,CAAC,CAAC;CACf;AAED,yFAAyF;AACzF,qBAAa,kCAAmC,YAAW,uBAAuB;;IAG1E,QAAQ,CACZ,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,MAAM,CAAC,EAAE,uBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC;IAsBhB,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC;IAIlE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAQlH;AAED,qBAAa,+BAAgC,YAAW,uBAAuB;IAE3E,QAAQ,CAAC,QAAQ,EAAE,wBAAwB;IAC3C,QAAQ,CAAC,KAAK,EAAE,6BAA6B;gBADpC,QAAQ,EAAE,wBAAwB,EAClC,KAAK,EAAE,6BAA6B;IAGzC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC;IAKlE,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,qBAAqB,CAAC;CAgClC;AAED,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;CAO5C,CAAC;AAEF,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,QAAQ,CAAC;IAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,IAAI,CAAA;CAAE,CAAC,GACtE,IAAI,CAEN"}

package/lib/workroom/database-project-knowledge-journal.js

@@ -0,0 +1,161 @@
+import { createHash } from 'node:crypto';
+import { ProjectKnowledgeRevisionConflictError, replayProjectKnowledge, } from './project-knowledge-registry.js';
+import { canonicalWorkroomJson } from './canonical-value.js';
+/** Publishes no writer until every requested Project has migrated and reread exactly. */
+export class ActivatableProjectKnowledgeJournal {
+    #delegate;
+    async activate(delegate, projectIds, source) {
+        if (this.#delegate)
+            throw new Error('Project Knowledge storage is already active');
+        const ids = canonicalIds(projectIds);
+        for (const projectId of ids) {
+            const sourceEvents = source ? await source.read(projectId) : Object.freeze([]);
+            let targetEvents = await delegate.read(projectId);
+            replayProjectKnowledge(projectId, sourceEvents);
+            replayProjectKnowledge(projectId, targetEvents);
+            assertSharedPrefix(sourceEvents, targetEvents);
+            for (const event of sourceEvents.slice(targetEvents.length)) {
+                await delegate.append(projectId, event.revision - 1, event);
+            }
+            targetEvents = await delegate.read(projectId);
+            if (targetEvents.length < sourceEvents.length) {
+                throw new Error('Project Knowledge target did not durably replay the File source');
+            }
+            assertSharedPrefix(sourceEvents, targetEvents);
+        }
+        if (this.#delegate)
+            throw new Error('Project Knowledge storage is already active');
+        this.#delegate = delegate;
+    }
+    read(projectId) {
+        return this.#require().read(projectId);
+    }
+    append(projectId, expectedRevision, event) {
+        return this.#require().append(projectId, expectedRevision, event);
+    }
+    #require() {
+        if (!this.#delegate)
+            throw new Error('Project Knowledge storage is not active');
+        return this.#delegate;
+    }
+}
+export class DatabaseProjectKnowledgeJournal {
+    database;
+    model;
+    constructor(database, model) {
+        this.database = database;
+        this.model = model;
+    }
+    async read(projectId) {
+        const id = required(projectId, 'projectId');
+        return parseRows(id, await this.model.select().where({ project_id: id }));
+    }
+    async append(projectId, expectedRevision, event) {
+        const id = required(projectId, 'projectId');
+        if (event.projectId !== id || event.revision !== expectedRevision + 1) {
+            throw new Error('Project Knowledge database append scope drift');
+        }
+        try {
+            return await this.database.transaction(async (transaction) => {
+                const current = parseRows(id, await transaction.select('workroom_project_knowledge')
+                    .where({ project_id: id }));
+                const replay = current.find(value => value.operationId === event.operationId);
+                if (replay) {
+                    if (replay.commandDigest !== event.commandDigest)
+                        throw new Error('Project Knowledge operation identity drift');
+                    return replay;
+                }
+                const actual = current.at(-1)?.revision ?? -1;
+                if (actual !== expectedRevision)
+                    throw new ProjectKnowledgeRevisionConflictError(id, expectedRevision, actual);
+                replayProjectKnowledge(id, [...current, event]);
+                await transaction.insertMany('workroom_project_knowledge', [toRow(event)]);
+                return event;
+            }, { isolationLevel: 'SERIALIZABLE' });
+        }
+        catch (error) {
+            if (error instanceof ProjectKnowledgeRevisionConflictError)
+                throw error;
+            const winner = await this.read(id);
+            const replay = winner.find(value => value.operationId === event.operationId);
+            if (replay && replay.commandDigest === event.commandDigest)
+                return replay;
+            const occupied = winner[event.revision];
+            if (occupied && canonicalWorkroomJson(occupied) === canonicalWorkroomJson(event))
+                return occupied;
+            const actual = winner.at(-1)?.revision ?? -1;
+            if (actual !== expectedRevision)
+                throw new ProjectKnowledgeRevisionConflictError(id, expectedRevision, actual);
+            throw error;
+        }
+    }
+}
+export const WORKROOM_PROJECT_KNOWLEDGE_MODEL = {
+    id: { type: 'text', primary: true, nullable: false },
+    project_id: { type: 'text', nullable: false },
+    revision: { type: 'integer', nullable: false },
+    operation_id: { type: 'text', nullable: false },
+    event_digest: { type: 'text', nullable: false },
+    event_json: { type: 'text', nullable: false },
+};
+export function defineProjectKnowledgeDatabaseModel(database) {
+    database.define('workroom_project_knowledge', WORKROOM_PROJECT_KNOWLEDGE_MODEL);
+}
+function parseRows(projectId, rows) {
+    const sorted = [...rows].sort((left, right) => integer(left.revision) - integer(right.revision));
+    const events = sorted.map((row, revision) => {
+        exactRow(row);
+        if (row.project_id !== projectId || integer(row.revision) !== revision || typeof row.event_json !== 'string') {
+            throw new Error('Project Knowledge database row binding drift');
+        }
+        const event = JSON.parse(row.event_json);
+        if (event.revision !== revision || row.operation_id !== event.operationId || row.event_digest !== event.digest
+            || canonicalWorkroomJson(event) !== row.event_json) {
+            throw new Error('Project Knowledge database event drift');
+        }
+        return event;
+    });
+    replayProjectKnowledge(projectId, events);
+    return Object.freeze(events);
+}
+function toRow(event) {
+    return {
+        id: `${createHash('sha256').update(event.projectId).digest('hex')}:${event.revision}`,
+        project_id: event.projectId,
+        revision: event.revision,
+        operation_id: event.operationId,
+        event_digest: event.digest,
+        event_json: canonicalWorkroomJson(event),
+    };
+}
+function exactRow(row) {
+    const keys = ['id', 'project_id', 'revision', 'operation_id', 'event_digest', 'event_json'];
+    if (Object.keys(row).length !== keys.length || keys.some(key => !Object.hasOwn(row, key))) {
+        throw new Error('Project Knowledge database row exact schema drift');
+    }
+}
+function canonicalIds(values) {
+    const ids = values.map(value => required(value, 'projectId')).sort();
+    if (new Set(ids).size !== ids.length)
+        throw new Error('Project Knowledge activation contains duplicate Project ids');
+    return ids;
+}
+function assertSharedPrefix(source, target) {
+    const shared = Math.min(source.length, target.length);
+    for (let index = 0; index < shared; index += 1) {
+        if (canonicalWorkroomJson(source[index]) !== canonicalWorkroomJson(target[index])) {
+            throw new Error('Project Knowledge File/Database handoff diverged');
+        }
+    }
+}
+function required(value, label) {
+    if (typeof value !== 'string' || !value.trim() || value !== value.trim())
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function integer(value) {
+    if (!Number.isSafeInteger(value) || Number(value) < 0)
+        throw new Error('revision is invalid');
+    return Number(value);
+}
+//# sourceMappingURL=database-project-knowledge-journal.js.map

package/lib/workroom/database-project-knowledge-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-project-knowledge-journal.js","sourceRoot":"","sources":["../../src/workroom/database-project-knowledge-journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,qCAAqC,EACrC,sBAAsB,GAGvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAkB7D,yFAAyF;AACzF,MAAM,OAAO,kCAAkC;IAC7C,SAAS,CAA2B;IAEpC,KAAK,CAAC,QAAQ,CACZ,QAAiC,EACjC,UAA6B,EAC7B,MAAgC;QAEhC,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACrC,KAAK,MAAM,SAAS,IAAI,GAAG,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/E,IAAI,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClD,sBAAsB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAChD,sBAAsB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAChD,kBAAkB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5D,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9D,CAAC;YACD,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,YAAY,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;YACD,kBAAkB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACnF,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,SAAiB;QACpB,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,gBAAwB,EAAE,KAA4B;QAC9E,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AAED,MAAM,OAAO,+BAA+B;IAE/B;IACA;IAFX,YACW,QAAkC,EAClC,KAAoC;QADpC,aAAQ,GAAR,QAAQ,CAA0B;QAClC,UAAK,GAAL,KAAK,CAA+B;IAC5C,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5C,OAAO,SAAS,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,gBAAwB,EACxB,KAA4B;QAE5B,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,SAAS,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,GAAG,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAC,WAAW,EAAC,EAAE;gBACzD,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,4BAA4B,CAAC;qBACjF,KAAK,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC9E,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;wBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;oBAChH,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;gBAC9C,IAAI,MAAM,KAAK,gBAAgB;oBAAE,MAAM,IAAI,qCAAqC,CAAC,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;gBAC/G,sBAAsB,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;gBAChD,MAAM,WAAW,CAAC,UAAU,CAAC,4BAA4B,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3E,OAAO,KAAK,CAAC;YACf,CAAC,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,qCAAqC;gBAAE,MAAM,KAAK,CAAC;YACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC,CAAC;YAC7E,IAAI,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;gBAAE,OAAO,MAAM,CAAC;YAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,QAAQ,IAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,KAAK,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAClG,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;YAC7C,IAAI,MAAM,KAAK,gBAAgB;gBAAE,MAAM,IAAI,qCAAqC,CAAC,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;YAC/G,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,EAAE,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC7D,UAAU,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtD,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,QAAQ,EAAE,KAAK,EAAE;IACvD,YAAY,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IACxD,YAAY,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IACxD,UAAU,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;CACvD,CAAC;AAEF,MAAM,UAAU,mCAAmC,CACjD,QAAuE;IAEvE,QAAQ,CAAC,MAAM,CAAC,4BAA4B,EAAE,gCAAgC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB,EAAE,IAAwC;IAC5E,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;QAC1C,QAAQ,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC7G,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAA0B,CAAC;QAClE,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,KAAK,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM;eACzG,qBAAqB,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,UAAU,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,sBAAsB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,KAAK,CAAC,KAA4B;IACzC,OAAO;QACL,EAAE,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE;QACrF,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,YAAY,EAAE,KAAK,CAAC,MAAM;QAC1B,UAAU,EAAE,qBAAqB,CAAC,KAAK,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAA4B;IAC5C,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;IAC5F,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACrH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAwC,EACxC,MAAwC;IAExC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACjH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/lib/workroom/durable-file-store.d.ts

@@ -0,0 +1,2 @@
+export * from '../data-governance/durable-file-store.js';
+//# sourceMappingURL=durable-file-store.d.ts.map

package/lib/workroom/durable-file-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable-file-store.d.ts","sourceRoot":"","sources":["../../src/workroom/durable-file-store.ts"],"names":[],"mappings":"AAAA,cAAc,0CAA0C,CAAC"}