botmux 2.93.0 → 2.94.0

package/dist/workflows/v3/grill-state.js

@@ -0,0 +1,151 @@
+/**
+ * v3 grill-phase lifecycle state.
+ *
+ * The PRE-runtime "front matter" of a run: the status machine tracking
+ * grill → architect → human approvals, persisted to `<runDir>/grill.state.json`
+ * so a daemon/session restart resumes the right phase without guessing from
+ * chat context (codex review 2026-06-02).  The seam is `dag_approved`: after
+ * it, the v3 runtime takes over with its own journal.ndjson + STATE (execution
+ * truth) and this file stops changing.
+ *
+ * Kept separate from `state.ts` (the runtime run snapshot) on purpose — grill
+ * state is a conversation/orchestration worktable, NOT execution state, and the
+ * grill layer must never write the runtime journal (codex 2026-06-02).
+ *
+ * This module is plain host-side code (CLI/daemon), so `new Date()` is fine —
+ * the `Date.now` ban is only inside Workflow() orchestration scripts.
+ */
+import { writeFileSync, renameSync, readFileSync, existsSync, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+export const GRILL_STATUS_FILE = 'grill.state.json';
+export const GRILL_STATE_SCHEMA_VERSION = 1;
+/**
+ * Legal forward transitions.  Failures / human "改一下" can step BACK to an
+ * earlier phase (so grill can re-converge the spec); you can never skip a gate
+ * forward.  In particular `spec_approved` is the only state from which
+ * `architect_running` is reachable — the backstop for codex assertion 1.
+ *
+ * Two self-loops exist on purpose (codex review 2026-06-02):
+ *  - `spec_ready → spec_ready`: re-running `spec-finalize` to re-validate a
+ *    Gate-1 re-draft in place (the user tweaked the requirement before
+ *    approving) — see `hostSpecFinalize`.
+ *  - `architect_running → architect_running`: crash-recovery re-entry.  If a
+ *    prior `architect` run was killed before it could retreat, the status is
+ *    stuck mid-flight; re-running `architect` resumes from here instead of
+ *    dead-ending behind the `spec_approved`-only guard.
+ */
+const LEGAL = {
+    grilling: ['grilling', 'spec_ready'],
+    spec_ready: ['spec_ready', 'spec_approved', 'grilling'], // 自环=Gate-1 改稿重校验；回 grilling=revise-spec
+    spec_approved: ['architect_running', 'grilling'],
+    architect_running: ['architect_running', 'dag_ready', 'spec_approved', 'grilling'], // 自环=崩溃恢复重入；退回=architect/validate 失败
+    dag_ready: ['dag_approved', 'spec_approved', 'grilling'], // 退回 spec_approved=revise-dag；回 grilling=revise-spec
+    dag_approved: ['dag_approved'], // 终态（交给 runtime）
+};
+export class GrillTransitionError extends Error {
+    from;
+    to;
+    constructor(from, to) {
+        super(`非法 grill 状态转移：${from} → ${to}`);
+        this.from = from;
+        this.to = to;
+        this.name = 'GrillTransitionError';
+    }
+}
+/** Default run root, aligned with `cli-run.ts`'s `~/.botmux/v3-runs`. */
+export function defaultBaseDir() {
+    return join(homedir(), '.botmux', 'v3-runs');
+}
+function statePath(runDir) {
+    return join(runDir, GRILL_STATUS_FILE);
+}
+/** Atomic write (tmp + rename), mirroring state.ts so a crash never leaves a
+ *  half-written grill.state.json. */
+export function writeGrillState(runDir, state) {
+    mkdirSync(runDir, { recursive: true });
+    const p = statePath(runDir);
+    const tmp = `${p}.tmp`;
+    writeFileSync(tmp, JSON.stringify(state, null, 2) + '\n');
+    renameSync(tmp, p);
+}
+/**
+ * Read a run's grill state, or `undefined` if it's missing OR corrupt
+ * (unparseable / mid-write torn JSON).  Defensive-on-purpose (codex review):
+ * cold-attach reconcile scans every runDir, so one corrupt grill.state must not
+ * throw and kill the whole scan — it just makes that run look stateless.
+ */
+export function readGrillState(runDir) {
+    const p = statePath(runDir);
+    if (!existsSync(p))
+        return undefined;
+    try {
+        return JSON.parse(readFileSync(p, 'utf-8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Slugify a (possibly CJK) goal into a path-safe runId prefix. */
+function slug(goal) {
+    const s = goal.trim().toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 24);
+    return s || 'run';
+}
+function stamp(d) {
+    const p = (n) => String(n).padStart(2, '0');
+    return `${String(d.getFullYear()).slice(2)}${p(d.getMonth() + 1)}${p(d.getDate())}-${p(d.getHours())}${p(d.getMinutes())}`;
+}
+/**
+ * Birth a run: allocate a runId (`<slug>-<yymmdd-hhmm>` unless one is given —
+ * OQ-D), create its runDir, and write the initial `grilling` state.  grill is
+ * the birth point of a run; spec.md and the later dag.json both live in runDir.
+ */
+export function birthRun(opts) {
+    const baseDir = opts.baseDir ?? defaultBaseDir();
+    const now = opts.now ?? new Date();
+    const runId = opts.runId ?? `${slug(opts.goal)}-${stamp(now)}`;
+    const runDir = join(baseDir, runId);
+    const iso = now.toISOString();
+    const state = {
+        schemaVersion: GRILL_STATE_SCHEMA_VERSION,
+        runId,
+        goal: opts.goal,
+        status: 'grilling',
+        createdAt: iso,
+        updatedAt: iso,
+        specPath: join(runDir, 'spec.md'),
+        specJsonPath: join(runDir, 'spec.json'),
+        ...(opts.chatBinding ? { chatBinding: opts.chatBinding } : {}),
+    };
+    writeGrillState(runDir, state);
+    return { runId, runDir, state };
+}
+/**
+ * Read a run's chat binding off disk (from grill.state.json).  The daemon's
+ * run driver + cold-attach recovery use this to know where to post / re-post a
+ * humanGate approval card.  Returns undefined for CLI/dev runs (no binding) or
+ * a missing/unparseable state file.
+ */
+export function readRunChatBinding(runDir) {
+    return readGrillState(runDir)?.chatBinding;
+}
+/**
+ * Apply a status transition with a legality check + field patch, atomically.
+ * Throws `GrillTransitionError` on an illegal transition (the state-machine
+ * backstop behind the friendlier guards the `workflow` subcommands surface).
+ */
+export function transition(runDir, to, patch = {}, now = new Date()) {
+    const cur = readGrillState(runDir);
+    if (!cur)
+        throw new Error(`grill.state.json 不存在于 ${runDir}`);
+    if (!LEGAL[cur.status].includes(to)) {
+        throw new GrillTransitionError(cur.status, to);
+    }
+    const next = { ...cur, ...patch, status: to, updatedAt: now.toISOString() };
+    writeGrillState(runDir, next);
+    return next;
+}
+export function canTransition(from, to) {
+    return LEGAL[from].includes(to);
+}
+//# sourceMappingURL=grill-state.js.map

package/dist/workflows/v3/grill-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grill-state.js","sourceRoot":"","sources":["../../../src/workflows/v3/grill-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAUlC,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AACpD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AA2C5C;;;;;;;;;;;;;;GAcG;AACH,MAAM,KAAK,GAAuC;IAChD,QAAQ,EAAW,CAAC,UAAU,EAAE,YAAY,CAAC;IAC7C,UAAU,EAAS,CAAC,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,yCAAyC;IACzG,aAAa,EAAM,CAAC,mBAAmB,EAAE,UAAU,CAAC;IACpD,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,qCAAqC;IACzH,SAAS,EAAU,CAAC,cAAc,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,qDAAqD;IACvH,YAAY,EAAO,CAAC,cAAc,CAAC,EAA2B,iBAAiB;CAChF,CAAC;AAEF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACjB;IAAmC;IAA/D,YAA4B,IAAiB,EAAkB,EAAe;QAC5E,KAAK,CAAC,iBAAiB,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QADb,SAAI,GAAJ,IAAI,CAAa;QAAkB,OAAE,GAAF,EAAE,CAAa;QAE5E,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AACzC,CAAC;AAED;qCACqC;AACrC,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,KAAiB;IAC/D,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACvB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAe,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrG,OAAO,CAAC,IAAI,KAAK,CAAC;AACpB,CAAC;AAED,SAAS,KAAK,CAAC,CAAO;IACpB,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AAC7H,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,IAOxB;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAe;QACxB,aAAa,EAAE,0BAA0B;QACzC,KAAK;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,UAAU;QAClB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;QACjC,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;IACF,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,cAAc,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,MAAc,EACd,EAAe,EACf,QAAyE,EAAE,EAC3E,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,GAAe,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;IACxF,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAiB,EAAE,EAAe;IAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAClC,CAAC"}

package/dist/workflows/v3/host.d.ts

@@ -0,0 +1,88 @@
+import { type BirthResult, type GrillState, type RunChatBinding } from './grill-state.js';
+import { type RunArchitectInput, type RunArchitectResult } from './architect.js';
+import type { BotSnapshot } from './contract.js';
+export declare function hostNew(opts: {
+    goal: string;
+    baseDir?: string;
+    runId?: string;
+    now?: Date;
+    chatBinding?: RunChatBinding;
+}): BirthResult;
+/**
+ * Read the grill worker's injected env into a chat binding, or undefined when
+ * not running inside a daemon worker (CLI/dev — no card layer).  The worker
+ * sets BOTMUX_CHAT_ID / _LARK_APP_ID / _ROOT_MESSAGE_ID / _SESSION_ID on every
+ * CLI subprocess (worker.ts).  A binding needs at least larkAppId + chatId to
+ * be useful for posting a card; missing either → undefined.
+ */
+export declare function chatBindingFromEnv(env?: NodeJS.ProcessEnv): RunChatBinding | undefined;
+export interface SpecFinalizeOutcome {
+    ok: boolean;
+    state?: GrillState;
+    /** Present on failure — the parse/validate problems that BLOCK handoff. */
+    problems?: string[];
+}
+/** Parse + validate spec.md → write spec.json → status=spec_ready.  On a
+ *  SpecValidationError, returns {ok:false, problems} and leaves status untouched
+ *  (grill stays grilling and relays the problems to the user). */
+export declare function hostSpecFinalize(runDir: string, now?: Date): SpecFinalizeOutcome;
+/** gate-1: spec_ready → spec_approved.  Rejects unless status is spec_ready. */
+export declare function hostApproveSpec(runDir: string, now?: Date): GrillState;
+export interface ArchitectDeps {
+    runArchitect: (input: RunArchitectInput) => Promise<RunArchitectResult>;
+    /** Throws on an invalid dag (dag.ts loadDag). */
+    loadDag: (path: string) => unknown;
+    botSnapshot: BotSnapshot;
+    resolveLarkAppSecret: (larkAppId: string) => string | undefined | Promise<string | undefined>;
+    timeoutMs?: number;
+    cancelSignal?: AbortSignal;
+}
+export interface ArchitectOutcome {
+    ok: boolean;
+    state: GrillState;
+    problems?: string[];
+}
+/**
+ * spec_approved → architect_running → runArchitect → host loadDag/validateDag.
+ * Encodes codex's three assertions:
+ *  1. rejects unless status=spec_approved (don't skip gate-1);
+ *  2. runArchitect-fail OR validateDag-fail → retreat to spec_approved with the
+ *     problems recorded in grill.state.json (so grill can fix the spec) — NOT
+ *     dag_ready;
+ *  3. on success → dag_ready records dagPath/notesPath/architectManifestPath so
+ *     approve-dag and the dashboard never re-guess paths.
+ */
+export declare function hostArchitect(runDir: string, deps: ArchitectDeps, now?: Date): Promise<ArchitectOutcome>;
+/** gate-2: dag_ready → dag_approved.  Returns the recorded dagPath for the
+ *  runner.  Rejects unless status is dag_ready. */
+export declare function hostApproveDag(runDir: string, now?: Date): {
+    state: GrillState;
+    dagPath: string;
+};
+/**
+ * 改稿·改需求：把任一 grilling 之后的阶段退回 `grilling`，并清掉已失效的
+ * architect 产物（dagPath/notesPath/architectManifestPath）+ problems，让用户
+ * 重新 grill / 改 spec.md 再 finalize。改需求意味着已编排的 DAG 作废，所以这里
+ * 必须把那些指针清空，否则后续 approve-dag / dashboard 会拿到过期的 dag
+ * (codex review 2026-06-02).  从 `grilling`（无可退）和 `dag_approved`（已交
+ * runtime）拒绝。
+ */
+export declare function hostReviseSpec(runDir: string, now?: Date): GrillState;
+/**
+ * 改稿·只改流程：需求没变、只是 DAG 编得不满意时，从 `dag_ready` 退回
+ * `spec_approved` 并清掉 stale 的 dag 产物，使 `architect` 在同一份已批准 spec
+ * 上重编一张，不必重新 grill。
+ */
+export declare function hostReviseDag(runDir: string, now?: Date): GrillState;
+export declare class HostGuardError extends Error {
+    constructor(message: string);
+}
+/**
+ * `botmux workflow <sub>` host-controller subcommands.  Dispatched from
+ * `cmdWorkflow` for the v3-specific verbs (new/spec-finalize/approve-spec/
+ * architect/approve-dag); v0.2 verbs (run/create/validate/…) stay in workflow.ts.
+ */
+export declare function cmdWorkflowHost(sub: string, rest: string[]): Promise<void>;
+/** True when `sub` is a v3 host-controller verb (so cmdWorkflow routes here). */
+export declare function isHostSub(sub: string): boolean;
+//# sourceMappingURL=host.d.ts.map

package/dist/workflows/v3/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/host.ts"],"names":[],"mappings":"AAqBA,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAoC,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAInH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAIjD,wBAAgB,OAAO,CAAC,IAAI,EAAE;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B,GAAG,WAAW,CAEd;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,GAAG,SAAS,CAUnG;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;kEAEkE;AAClE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,mBAAmB,CAsB5F;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,UAAU,CAMlF;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxE,iDAAiD;IACjD,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,WAAW,EAAE,WAAW,CAAC;IACzB,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,GAAE,IAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6D1H;AAED;mDACmD;AACnD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAQ7G;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,UAAU,CAcjF;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,UAAU,CAWhF;AAED,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAuBD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqEhF;AAED,iFAAiF;AACjF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE9C"}

package/dist/workflows/v3/host.js

@@ -0,0 +1,349 @@
+/**
+ * v3 grill host controller.
+ *
+ * The thin orchestration layer that drives a run through the grill → architect
+ * → human-approval pipeline.  It is NOT the v3 runtime and NOT the ephemeral
+ * pool — it is the `botmux workflow <sub>` command surface the grill skill
+ * shells out to, plus the grill.state.json status machine (grill-state.ts).
+ *
+ *   workflow new "<goal>"        → birth run (runId/runDir), status=grilling
+ *   workflow spec-finalize <id>  → parse+validate spec.md → spec.json → spec_ready
+ *   workflow approve-spec <id>   → gate-1: spec_ready → spec_approved
+ *   workflow architect <id>      → spec_approved → architect_running → (runArchitect
+ *                                  + host validateDag) → dag_ready | retreat
+ *   workflow approve-dag <id>    → gate-2: dag_ready → dag_approved → kick `v3 run`
+ *
+ * The CORE operations below take injected deps so they unit-test without a real
+ * worker; the CLI wrapper resolves real bot/secret + codex's `runArchitect` +
+ * dag.ts's `loadDag`.  grill state is a conversation worktable — it does NOT
+ * write the runtime journal (codex 2026-06-02).
+ */
+import { resolve, sep } from 'node:path';
+import { birthRun, readGrillState, transition, defaultBaseDir, } from './grill-state.js';
+import { finalizeSpec, SpecValidationError } from './spec.js';
+import { runArchitect as realRunArchitect } from './architect.js';
+import { loadDag } from './dag.js';
+import { isValidRunId } from './ops-projection.js';
+import { botToSnapshot } from './bot-resolve.js';
+// ─── Core operations (dep-injected, pure of CLI / process concerns) ─────────
+export function hostNew(opts) {
+    return birthRun(opts);
+}
+/**
+ * Read the grill worker's injected env into a chat binding, or undefined when
+ * not running inside a daemon worker (CLI/dev — no card layer).  The worker
+ * sets BOTMUX_CHAT_ID / _LARK_APP_ID / _ROOT_MESSAGE_ID / _SESSION_ID on every
+ * CLI subprocess (worker.ts).  A binding needs at least larkAppId + chatId to
+ * be useful for posting a card; missing either → undefined.
+ */
+export function chatBindingFromEnv(env = process.env) {
+    const larkAppId = env.BOTMUX_LARK_APP_ID;
+    const chatId = env.BOTMUX_CHAT_ID;
+    if (!larkAppId || !chatId)
+        return undefined;
+    return {
+        larkAppId,
+        chatId,
+        ...(env.BOTMUX_ROOT_MESSAGE_ID ? { rootMessageId: env.BOTMUX_ROOT_MESSAGE_ID } : {}),
+        ...(env.BOTMUX_SESSION_ID ? { sessionId: env.BOTMUX_SESSION_ID } : {}),
+    };
+}
+/** Parse + validate spec.md → write spec.json → status=spec_ready.  On a
+ *  SpecValidationError, returns {ok:false, problems} and leaves status untouched
+ *  (grill stays grilling and relays the problems to the user). */
+export function hostSpecFinalize(runDir, now = new Date()) {
+    const cur = mustRead(runDir);
+    // Guard the status BEFORE finalizeSpec writes spec.json — otherwise an
+    // illegal-state call (e.g. re-finalizing after the spec was approved /
+    // architected) would overwrite spec.json and only THEN hit the rejected
+    // transition, leaving state ⇄ canonical-spec inconsistent (codex review).
+    // Legal from `grilling` (first finalize) and `spec_ready` (Gate-1 re-draft,
+    // re-validate in place).  To revise after spec_approved/dag_ready, step back
+    // with `revise-spec` first.
+    if (cur.status !== 'grilling' && cur.status !== 'spec_ready') {
+        throw new HostGuardError(`spec-finalize 需要 status=grilling 或 spec_ready，当前 ${cur.status}（先 revise-spec 退回改稿）`);
+    }
+    try {
+        finalizeSpec(cur.specPath, cur.specJsonPath, cur.runId);
+    }
+    catch (err) {
+        if (err instanceof SpecValidationError)
+            return { ok: false, problems: err.problems };
+        throw err;
+    }
+    const state = transition(runDir, 'spec_ready', { problems: undefined }, now);
+    return { ok: true, state };
+}
+/** gate-1: spec_ready → spec_approved.  Rejects unless status is spec_ready. */
+export function hostApproveSpec(runDir, now = new Date()) {
+    const cur = mustRead(runDir);
+    if (cur.status !== 'spec_ready') {
+        throw new HostGuardError(`approve-spec 需要 status=spec_ready，当前 ${cur.status}`);
+    }
+    return transition(runDir, 'spec_approved', {}, now);
+}
+/**
+ * spec_approved → architect_running → runArchitect → host loadDag/validateDag.
+ * Encodes codex's three assertions:
+ *  1. rejects unless status=spec_approved (don't skip gate-1);
+ *  2. runArchitect-fail OR validateDag-fail → retreat to spec_approved with the
+ *     problems recorded in grill.state.json (so grill can fix the spec) — NOT
+ *     dag_ready;
+ *  3. on success → dag_ready records dagPath/notesPath/architectManifestPath so
+ *     approve-dag and the dashboard never re-guess paths.
+ */
+export async function hostArchitect(runDir, deps, now = new Date()) {
+    const cur = mustRead(runDir);
+    // Accept `spec_approved` (the normal entry) AND `architect_running`
+    // (crash-recovery): a prior architect run can be killed AFTER it persisted
+    // `architect_running` but BEFORE it could retreat to spec_approved, leaving
+    // the status stuck mid-flight.  Without this, the only path out of
+    // `architect_running` would be a manual edit — re-running architect would
+    // dead-end behind a spec_approved-only guard (codex review 2026-06-02).
+    if (cur.status !== 'spec_approved' && cur.status !== 'architect_running') {
+        throw new HostGuardError(`architect 需要 status=spec_approved（先 approve-spec），当前 ${cur.status}`);
+    }
+    transition(runDir, 'architect_running', { problems: undefined }, now);
+    let res;
+    try {
+        res = await deps.runArchitect({
+            runId: cur.runId,
+            runDir,
+            specPath: cur.specPath,
+            specJsonPath: cur.specJsonPath,
+            botSnapshot: deps.botSnapshot,
+            resolveLarkAppSecret: deps.resolveLarkAppSecret,
+            timeoutMs: deps.timeoutMs,
+            cancelSignal: deps.cancelSignal,
+        });
+    }
+    catch (err) {
+        const problems = [err instanceof Error ? err.message : String(err)];
+        const state = transition(runDir, 'spec_approved', { problems }, now);
+        return { ok: false, state, problems };
+    }
+    if (res.status !== 'ok' || !res.dagPath || !res.notesPath) {
+        const problems = res.problems ?? [
+            !res.dagPath ? 'architect 未产出 dag.json' : undefined,
+            !res.notesPath ? 'architect 未产出 architect-notes.md' : undefined,
+        ].filter((p) => Boolean(p));
+        const state = transition(runDir, 'spec_approved', { problems }, now);
+        return { ok: false, state, problems };
+    }
+    // Assertion 2: do NOT trust architect's self-claim — host validates the dag.
+    try {
+        deps.loadDag(res.dagPath);
+    }
+    catch (err) {
+        const problems = err.problems ?? [err instanceof Error ? err.message : String(err)];
+        const state = transition(runDir, 'spec_approved', { problems }, now);
+        return { ok: false, state, problems };
+    }
+    const state = transition(runDir, 'dag_ready', {
+        dagPath: res.dagPath,
+        notesPath: res.notesPath,
+        architectManifestPath: res.manifestPath,
+        problems: undefined,
+    }, now);
+    return { ok: true, state };
+}
+/** gate-2: dag_ready → dag_approved.  Returns the recorded dagPath for the
+ *  runner.  Rejects unless status is dag_ready. */
+export function hostApproveDag(runDir, now = new Date()) {
+    const cur = mustRead(runDir);
+    if (cur.status !== 'dag_ready') {
+        throw new HostGuardError(`approve-dag 需要 status=dag_ready，当前 ${cur.status}`);
+    }
+    if (!cur.dagPath)
+        throw new Error('dag_ready 状态缺 dagPath（内部不一致）');
+    const state = transition(runDir, 'dag_approved', {}, now);
+    return { state, dagPath: cur.dagPath };
+}
+/**
+ * 改稿·改需求：把任一 grilling 之后的阶段退回 `grilling`，并清掉已失效的
+ * architect 产物（dagPath/notesPath/architectManifestPath）+ problems，让用户
+ * 重新 grill / 改 spec.md 再 finalize。改需求意味着已编排的 DAG 作废，所以这里
+ * 必须把那些指针清空，否则后续 approve-dag / dashboard 会拿到过期的 dag
+ * (codex review 2026-06-02).  从 `grilling`（无可退）和 `dag_approved`（已交
+ * runtime）拒绝。
+ */
+export function hostReviseSpec(runDir, now = new Date()) {
+    const cur = mustRead(runDir);
+    if (cur.status === 'grilling') {
+        throw new HostGuardError('当前已在 grilling，直接改 spec.md 再 spec-finalize 即可');
+    }
+    if (cur.status === 'dag_approved') {
+        throw new HostGuardError('DAG 已批准并交给 runtime，无法再 revise（如需改动请新建 run）');
+    }
+    return transition(runDir, 'grilling', { dagPath: undefined, notesPath: undefined, architectManifestPath: undefined, problems: undefined }, now);
+}
+/**
+ * 改稿·只改流程：需求没变、只是 DAG 编得不满意时，从 `dag_ready` 退回
+ * `spec_approved` 并清掉 stale 的 dag 产物，使 `architect` 在同一份已批准 spec
+ * 上重编一张，不必重新 grill。
+ */
+export function hostReviseDag(runDir, now = new Date()) {
+    const cur = mustRead(runDir);
+    if (cur.status !== 'dag_ready') {
+        throw new HostGuardError(`revise-dag 需要 status=dag_ready，当前 ${cur.status}`);
+    }
+    return transition(runDir, 'spec_approved', { dagPath: undefined, notesPath: undefined, architectManifestPath: undefined, problems: undefined }, now);
+}
+export class HostGuardError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'HostGuardError';
+    }
+}
+function mustRead(runDir) {
+    const s = readGrillState(runDir);
+    if (!s)
+        throw new Error(`grill.state.json 不存在于 ${runDir}`);
+    return s;
+}
+// ─── CLI dispatch (resolves real deps) ──────────────────────────────────────
+function runDirFor(runId, baseDir) {
+    // runId is already validated by `requireRunId` (isValidRunId rejects `/` and
+    // a leading `.`, so traversal can't get this far) — this resolve()+prefix
+    // check is a defense-in-depth backstop so a runDir can never escape baseDir
+    // even if a caller bypasses requireRunId (codex review 2026-06-02).
+    const base = resolve(baseDir);
+    const dir = resolve(base, runId);
+    if (dir !== base && !dir.startsWith(base + sep)) {
+        throw new Error(`runId 越界 baseDir：${runId}`);
+    }
+    return dir;
+}
+/**
+ * `botmux workflow <sub>` host-controller subcommands.  Dispatched from
+ * `cmdWorkflow` for the v3-specific verbs (new/spec-finalize/approve-spec/
+ * architect/approve-dag); v0.2 verbs (run/create/validate/…) stay in workflow.ts.
+ */
+export async function cmdWorkflowHost(sub, rest) {
+    const baseDir = argValue(rest, '--base-dir') ?? defaultBaseDir();
+    switch (sub) {
+        case 'new': {
+            const goal = firstPositional(rest);
+            if (!goal)
+                throw new Error('用法: botmux workflow new "<目标>" [--base-dir <dir>]');
+            // grill 经 daemon worker 出生时，env 带话题上下文 → 落 chatBinding，供后续
+            // daemon humanGate 发审批卡用（CLI/dev 出生无 env → undefined，不影响）。
+            const chatBinding = chatBindingFromEnv();
+            const { runId, runDir, state } = hostNew({ goal, baseDir, chatBinding });
+            console.log(JSON.stringify({
+                runId, runDir, status: state.status, specPath: state.specPath,
+                chatBound: !!chatBinding,
+            }, null, 2));
+            return;
+        }
+        case 'spec-finalize': {
+            const runId = requireRunId(rest);
+            const out = hostSpecFinalize(runDirFor(runId, baseDir));
+            if (!out.ok) {
+                console.error(`spec 校验失败（先修 spec.md 再 finalize）:\n  - ${out.problems.join('\n  - ')}`);
+                process.exitCode = 1;
+                return;
+            }
+            console.log(JSON.stringify({ runId, status: out.state.status, specJsonPath: out.state.specJsonPath }, null, 2));
+            return;
+        }
+        case 'approve-spec': {
+            const runId = requireRunId(rest);
+            const state = hostApproveSpec(runDirFor(runId, baseDir));
+            console.log(JSON.stringify({ runId, status: state.status }, null, 2));
+            return;
+        }
+        case 'revise-spec': {
+            const runId = requireRunId(rest);
+            const state = hostReviseSpec(runDirFor(runId, baseDir));
+            console.log(JSON.stringify({ runId, status: state.status }, null, 2));
+            console.log('\n↩️  已退回 grilling，可改 spec.md 再 spec-finalize（原 DAG 产物已作废）。');
+            return;
+        }
+        case 'revise-dag': {
+            const runId = requireRunId(rest);
+            const state = hostReviseDag(runDirFor(runId, baseDir));
+            console.log(JSON.stringify({ runId, status: state.status }, null, 2));
+            console.log('\n↩️  已退回 spec_approved，可直接重跑 architect 重编 DAG（需求不变）。');
+            return;
+        }
+        case 'architect': {
+            const runId = requireRunId(rest);
+            const out = await runArchitectCli(runId, baseDir, rest);
+            if (!out.ok) {
+                console.error(`architect/validateDag 失败（已退回 spec_approved，可修 spec 重跑）:\n  - ${out.problems.join('\n  - ')}`);
+                process.exitCode = 1;
+                return;
+            }
+            console.log(JSON.stringify({ runId, status: out.state.status, dagPath: out.state.dagPath, notesPath: out.state.notesPath }, null, 2));
+            return;
+        }
+        case 'approve-dag': {
+            const runId = requireRunId(rest);
+            const { state, dagPath } = hostApproveDag(runDirFor(runId, baseDir));
+            console.log(JSON.stringify({ runId, status: state.status, dagPath }, null, 2));
+            console.log(`\n✅ DAG 已批准。开跑：botmux v3 run ${dagPath}`);
+            return;
+        }
+        default:
+            throw new Error(`未知 workflow 子命令: ${sub}`);
+    }
+}
+/** True when `sub` is a v3 host-controller verb (so cmdWorkflow routes here). */
+export function isHostSub(sub) {
+    return ['new', 'spec-finalize', 'approve-spec', 'revise-spec', 'architect', 'revise-dag', 'approve-dag'].includes(sub);
+}
+/** Resolve real bot/secret deps and run the architect step. */
+async function runArchitectCli(runId, baseDir, rest) {
+    const { loadBotConfigs } = await import('../../bot-registry.js');
+    const bots = loadBotConfigs();
+    if (bots.length === 0)
+        throw new Error('没有可用 bot 配置（bots.json 为空）');
+    const selector = argValue(rest, '--bot');
+    const bot = selector
+        ? bots.find((b) => b.larkAppId === selector || b.name === selector)
+        : bots[0];
+    if (!bot)
+        throw new Error(`找不到 bot "${selector}"`);
+    const secretById = new Map(bots.map((b) => [b.larkAppId, b.larkAppSecret]));
+    // Use the authoritative BotConfig → BotSnapshot constructor so restricted bots
+    // keep `disableCliBypass` here too — a hand-rolled snapshot that drops it would
+    // let the architect goal-worker (writes files / runs commands / produces the
+    // dag.json that drives the whole run) silently start with --dangerously-skip-
+    // permissions, violating the "downgrade-only" capability invariant.
+    const botSnapshot = botToSnapshot(bot, argValue(rest, '--working-dir'));
+    return hostArchitect(runDirFor(runId, baseDir), {
+        runArchitect: realRunArchitect,
+        loadDag,
+        botSnapshot,
+        resolveLarkAppSecret: (id) => secretById.get(id),
+    });
+}
+// ─── Local arg parsers ──────────────────────────────────────────────────────
+function argValue(args, flag) {
+    const i = args.indexOf(flag);
+    return i >= 0 && i + 1 < args.length ? args[i + 1] : undefined;
+}
+function firstPositional(args) {
+    for (let i = 0; i < args.length; i++) {
+        if (args[i].startsWith('--')) {
+            i++;
+            continue;
+        }
+        return args[i];
+    }
+    return undefined;
+}
+function requireRunId(rest) {
+    const runId = firstPositional(rest);
+    if (!runId)
+        throw new Error('用法: botmux workflow <sub> <runId> [--base-dir <dir>]');
+    // Reject anything that could escape baseDir (path separators, `..`, leading
+    // dot) — these verbs are skill-driven shell commands, so harden the runId
+    // before it reaches join/resolve (codex review 2026-06-02).
+    if (!isValidRunId(runId)) {
+        throw new Error(`非法 runId（只允许字母数字与 . _ -、不得含路径分隔符）：${runId}`);
+    }
+    return runId;
+}
+//# sourceMappingURL=host.js.map

package/dist/workflows/v3/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../../src/workflows/v3/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EACL,QAAQ,EACR,cAAc,EACd,UAAU,EACV,cAAc,GAIf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAmD,MAAM,gBAAgB,CAAC;AACnH,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGjD,+EAA+E;AAE/E,MAAM,UAAU,OAAO,CAAC,IAMvB;IACC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,MAAM,SAAS,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACzC,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC;IAClC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO;QACL,SAAS;QACT,MAAM;QACN,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AASD;;kEAEkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAY,IAAI,IAAI,EAAE;IACrE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,4BAA4B;IAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAC7D,MAAM,IAAI,cAAc,CACtB,oDAAoD,GAAG,CAAC,MAAM,sBAAsB,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,mBAAmB;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrF,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,MAAY,IAAI,IAAI,EAAE;IACpE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,cAAc,CAAC,wCAAwC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC;AAkBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,IAAmB,EAAE,MAAY,IAAI,IAAI,EAAE;IAC7F,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,oEAAoE;IACpE,2EAA2E;IAC3E,4EAA4E;IAC5E,mEAAmE;IACnE,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACzE,MAAM,IAAI,cAAc,CAAC,wDAAwD,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,UAAU,CAAC,MAAM,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IAEtE,IAAI,GAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;YAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM;YACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI;YAC/B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS;YACnD,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,SAAS;SAChE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,GAAI,GAA+B,CAAC,QAAQ,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACjH,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CACtB,MAAM,EACN,WAAW,EACX;QACE,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,qBAAqB,EAAE,GAAG,CAAC,YAAY;QACvC,QAAQ,EAAE,SAAS;KACpB,EACD,GAAG,CACJ,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;mDACmD;AACnD,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,MAAY,IAAI,IAAI,EAAE;IACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,cAAc,CAAC,sCAAsC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,MAAY,IAAI,IAAI,EAAE;IACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,cAAc,CAAC,8CAA8C,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CAAC,4CAA4C,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,UAAU,CACf,MAAM,EACN,UAAU,EACV,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,EACnG,GAAG,CACJ,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,MAAY,IAAI,IAAI,EAAE;IAClE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,cAAc,CAAC,qCAAqC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,UAAU,CACf,MAAM,EACN,eAAe,EACf,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,EACnG,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,+EAA+E;AAE/E,SAAS,SAAS,CAAC,KAAa,EAAE,OAAe;IAC/C,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,IAAc;IAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,cAAc,EAAE,CAAC;IAEjE,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAChF,2DAA2D;YAC3D,2DAA2D;YAC3D,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;YACzC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBAC7D,SAAS,EAAE,CAAC,CAAC,WAAW;aACzB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,0CAA0C,GAAG,CAAC,QAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACxF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,KAAM,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,KAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAClH,OAAO;QACT,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACxD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,gEAAgE,GAAG,CAAC,QAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC9G,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACtI,OAAO;QACT,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/E,OAAO,CAAC,GAAG,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACzH,CAAC;AAED,+DAA+D;AAC/D,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,OAAe,EAAE,IAAc;IAC3E,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,QAAQ;QAClB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;QACnE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,QAAQ,GAAG,CAAC,CAAC;IAEnD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC5E,+EAA+E;IAC/E,gFAAgF;IAChF,6EAA6E;IAC7E,8EAA8E;IAC9E,oEAAoE;IACpE,MAAM,WAAW,GAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;IAErF,OAAO,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;QAC9C,YAAY,EAAE,gBAAgB;QAC9B,OAAO;QACP,WAAW;QACX,oBAAoB,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,SAAS,QAAQ,CAAC,IAAc,EAAE,IAAY;IAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,IAAc;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAChD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,IAAc;IAClC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACpF,4EAA4E;IAC5E,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}