clinkx 0.2.3 → 1.0.0

package/dist/activity-journal.js

@@ -0,0 +1,381 @@
+import { createHash, randomUUID } from "node:crypto";
+import { chmod, mkdir, open, readFile, readdir, rename, rm, stat, } from "node:fs/promises";
+import { join } from "node:path";
+import { ACTIVITY_RESULT_FILENAME, ACTIVITY_STATE_FILENAME, ActivityIdSchema, ActivityStateV1Schema, DEFAULT_ACTIVITY_HEARTBEAT_INTERVAL_MS, DEFAULT_ACTIVITY_MAX_AGE_MS, DEFAULT_MAX_ACTIVITY_ENTRIES, DEFAULT_MAX_ACTIVITY_RESULT_BYTES, DEFAULT_MAX_ACTIVITY_TOTAL_BYTES, MAX_ACTIVITY_STATE_BYTES, } from "../clinkx-workflows/dist/dashboard/activity-contract.js";
+import { createDashboardActivityReader } from "../clinkx-workflows/dist/dashboard/activity-reader.js";
+import { removeSessionLogGeneration } from "../clinkx-workflows/dist/dashboard/session-log-retention.js";
+import { createSessionLogGeneration, readSessionLogGeneration, } from "../clinkx-workflows/dist/dashboard/session-log-identity.js";
+import { logger } from "./logger.js";
+export { ACTIVITY_RESULT_FILENAME, ACTIVITY_STATE_FILENAME, ActivityIdSchema, ActivityKindSchema, ActivityOutcomeKindSchema, ActivityPhaseSchema, ActivityResultReferenceSchema, ActivityStateV1Schema, ActivityTerminalStatusSchema, DEFAULT_ACTIVITY_HEARTBEAT_INTERVAL_MS, DEFAULT_ACTIVITY_MAX_AGE_MS, DEFAULT_MAX_ACTIVITY_ENTRIES, DEFAULT_MAX_ACTIVITY_RESULT_BYTES, DEFAULT_MAX_ACTIVITY_TOTAL_BYTES, MAX_ACTIVITY_STATE_BYTES, } from "../clinkx-workflows/dist/dashboard/activity-contract.js";
+export const ACTIVITY_RETAIN_RESULT_ENV = "CLINKX_DASHBOARD_ACTIVITY_RETAIN_RESULT";
+const SESSION_LOG_GENERATION_FILE_BYTES = 44;
+const NOOP_OBSERVATION = Object.freeze({
+    async transition() { },
+    async complete() { },
+});
+async function writeFileAtomic(filePath, content) {
+    const temporaryPath = `${filePath}.${randomUUID()}.tmp`;
+    const handle = await open(temporaryPath, "wx", 0o600);
+    try {
+        await handle.writeFile(content);
+        await handle.sync();
+        await handle.close();
+        await rename(temporaryPath, filePath);
+        await chmod(filePath, 0o600);
+    }
+    catch (error) {
+        await handle.close().catch(() => undefined);
+        await rm(temporaryPath, { force: true }).catch(() => undefined);
+        throw error;
+    }
+}
+function serializedState(state) {
+    const serialized = `${JSON.stringify(ActivityStateV1Schema.parse(state), null, 2)}\n`;
+    if (Buffer.byteLength(serialized, "utf8") > MAX_ACTIVITY_STATE_BYTES) {
+        throw new Error("activity state exceeds the producer byte cap");
+    }
+    return serialized;
+}
+async function pruneActivities(rootDir, sessionLogRootDir, activityIdentityReader, now, maxAgeMs, maxEntries, maxTotalBytes, reservedBytes) {
+    const entries = await readdir(rootDir, { withFileTypes: true });
+    await Promise.all(entries.map(async (entry) => {
+        if (!entry.isDirectory() || !ActivityIdSchema.safeParse(entry.name).success) {
+            return;
+        }
+        const activityDir = join(rootDir, entry.name);
+        try {
+            const parsed = ActivityStateV1Schema.safeParse(JSON.parse(await readFile(join(activityDir, ACTIVITY_STATE_FILENAME), "utf8")));
+            if (!parsed.success ||
+                parsed.data.phase !== "terminal" ||
+                parsed.data.completedAt === undefined) {
+                return;
+            }
+            if (now.getTime() - Date.parse(parsed.data.completedAt) > maxAgeMs) {
+                await pruneActivityDirectory({
+                    rootDir,
+                    sessionLogRootDir,
+                    activityId: entry.name,
+                    activityDir,
+                    activityIdentityReader,
+                });
+            }
+        }
+        catch (error) {
+            if (error.code !== "ENOENT") {
+                logger.debug({
+                    activity_id: entry.name,
+                    err: error instanceof Error ? error.message : String(error),
+                }, "activity journal could not inspect a retention candidate");
+            }
+        }
+    }));
+    const survivors = await readdir(rootDir, { withFileTypes: true });
+    const terminal = [];
+    let totalBytes = 0;
+    for (const entry of survivors) {
+        if (!entry.isDirectory())
+            continue;
+        const activityDir = join(rootDir, entry.name);
+        let activityBytes = 0;
+        try {
+            for (const child of await readdir(activityDir, { withFileTypes: true })) {
+                if (!child.isFile())
+                    continue;
+                activityBytes += (await stat(join(activityDir, child.name))).size;
+            }
+        }
+        catch {
+            // A concurrent terminal update is reconciled at the next admission.
+        }
+        totalBytes += activityBytes;
+        if (!ActivityIdSchema.safeParse(entry.name).success)
+            continue;
+        try {
+            const parsed = ActivityStateV1Schema.safeParse(JSON.parse(await readFile(join(activityDir, ACTIVITY_STATE_FILENAME), "utf8")));
+            if (parsed.success &&
+                parsed.data.phase === "terminal" &&
+                parsed.data.completedAt !== undefined) {
+                terminal.push({
+                    activityId: entry.name,
+                    path: activityDir,
+                    completedAtMs: Date.parse(parsed.data.completedAt),
+                    bytes: activityBytes,
+                });
+            }
+        }
+        catch {
+            // Unreadable entries are not producer-owned retention candidates.
+        }
+    }
+    terminal.sort((left, right) => left.completedAtMs - right.completedAtMs);
+    let entryCount = survivors.filter((entry) => entry.isDirectory()).length;
+    while (entryCount >= maxEntries && terminal.length > 0) {
+        const victim = terminal.shift();
+        if (await pruneActivityDirectory({
+            rootDir,
+            sessionLogRootDir,
+            activityId: victim.activityId,
+            activityDir: victim.path,
+            activityIdentityReader,
+        })) {
+            entryCount -= 1;
+            totalBytes -= victim.bytes;
+        }
+    }
+    while (totalBytes + reservedBytes > maxTotalBytes &&
+        terminal.length > 0) {
+        const victim = terminal.shift();
+        if (await pruneActivityDirectory({
+            rootDir,
+            sessionLogRootDir,
+            activityId: victim.activityId,
+            activityDir: victim.path,
+            activityIdentityReader,
+        })) {
+            entryCount -= 1;
+            totalBytes -= victim.bytes;
+        }
+    }
+    return entryCount < maxEntries && totalBytes + reservedBytes <= maxTotalBytes;
+}
+async function pruneActivityDirectory(input) {
+    const identity = await input.activityIdentityReader.resolveCurrent(input.rootDir, input.activityId);
+    if (identity.kind !== "resolved") {
+        logger.debug({ activity_id: input.activityId }, "activity retention skipped because exact generation was unavailable");
+        return false;
+    }
+    const sessionLogIdentity = await readSessionLogGeneration(input.activityDir);
+    const sessionLogGeneration = sessionLogIdentity.kind === "available"
+        ? sessionLogIdentity.sessionLogGeneration
+        : sessionLogIdentity.kind === "legacy"
+            ? identity.activityGeneration
+            : undefined;
+    await rm(input.activityDir, { recursive: true, force: true });
+    if (sessionLogGeneration === undefined) {
+        logger.warn({ activity_id: input.activityId }, "activity parent pruned but portable session-log identity was unsafe");
+        return true;
+    }
+    try {
+        const cleanup = await removeSessionLogGeneration({
+            rootDir: input.sessionLogRootDir,
+            family: "activity",
+            generation: sessionLogGeneration,
+        });
+        if (cleanup.kind === "unsafe" || cleanup.kind === "unavailable") {
+            logger.warn({ activity_id: input.activityId, cleanup: cleanup.kind }, "activity parent pruned but exact session-log cleanup was unavailable");
+        }
+    }
+    catch {
+        logger.warn({ activity_id: input.activityId }, "activity parent pruned but exact session-log cleanup failed");
+    }
+    return true;
+}
+function truncateUtf8(text, maxBytes) {
+    const source = Buffer.from(text, "utf8");
+    if (source.byteLength <= maxBytes) {
+        return { bytes: source, truncated: false };
+    }
+    const decoder = new TextDecoder("utf-8", { fatal: true });
+    let end = maxBytes;
+    while (end > 0) {
+        const candidate = source.subarray(0, end);
+        try {
+            decoder.decode(candidate);
+            return { bytes: candidate, truncated: true };
+        }
+        catch {
+            end -= 1;
+        }
+    }
+    return { bytes: Buffer.alloc(0), truncated: true };
+}
+class FileActivityObservation {
+    activityDir;
+    options;
+    identity;
+    state;
+    writeChain = Promise.resolve();
+    terminal = false;
+    heartbeat;
+    constructor(activityDir, options, initialState, identity) {
+        this.activityDir = activityDir;
+        this.options = options;
+        this.identity = identity;
+        this.state = initialState;
+        if (options.heartbeatIntervalMs > 0) {
+            this.heartbeat = setInterval(() => {
+                void this.enqueue(async () => {
+                    if (this.terminal)
+                        return;
+                    const timestamp = this.options.now().toISOString();
+                    this.state = {
+                        ...this.state,
+                        stateUpdatedAt: timestamp,
+                        leaseUpdatedAt: timestamp,
+                    };
+                    await this.persistState();
+                });
+            }, options.heartbeatIntervalMs);
+            this.heartbeat.unref();
+        }
+    }
+    async transition(phase) {
+        await this.enqueue(async () => {
+            if (this.terminal)
+                return;
+            const timestamp = this.options.now().toISOString();
+            this.state = {
+                ...this.state,
+                phase,
+                stateUpdatedAt: timestamp,
+                leaseUpdatedAt: timestamp,
+            };
+            await this.persistState();
+        });
+    }
+    async complete(completion) {
+        await this.enqueue(async () => {
+            if (this.terminal)
+                return;
+            this.terminal = true;
+            if (this.heartbeat !== undefined) {
+                clearInterval(this.heartbeat);
+                this.heartbeat = undefined;
+            }
+            let result;
+            try {
+                result = await this.persistResult(completion.resultText);
+            }
+            catch (error) {
+                logger.warn({
+                    activity_id: this.state.activityId,
+                    err: error instanceof Error ? error.message : String(error),
+                }, "activity result persistence failed; committing terminal metadata without content");
+            }
+            const timestamp = this.options.now().toISOString();
+            this.state = {
+                ...this.state,
+                phase: "terminal",
+                status: completion.status,
+                stateUpdatedAt: timestamp,
+                completedAt: timestamp,
+                outcome: { kind: completion.outcomeKind },
+                ...(result === undefined ? {} : { result }),
+            };
+            await this.persistState();
+        });
+    }
+    async enqueue(task) {
+        const next = this.writeChain.then(task, task).catch((error) => {
+            logger.warn({
+                activity_id: this.state.activityId,
+                err: error instanceof Error ? error.message : String(error),
+            }, "activity journal write failed; clink execution remains authoritative");
+        });
+        this.writeChain = next;
+        await next;
+    }
+    async persistResult(resultText) {
+        if (!this.options.retainResult || resultText === undefined)
+            return undefined;
+        const { bytes, truncated } = truncateUtf8(resultText, this.options.maxResultBytes);
+        await writeFileAtomic(join(this.activityDir, ACTIVITY_RESULT_FILENAME), bytes);
+        return {
+            path: ACTIVITY_RESULT_FILENAME,
+            bytes: bytes.byteLength,
+            sha256: createHash("sha256").update(bytes).digest("hex"),
+            truncated,
+        };
+    }
+    async persistState() {
+        await writeFileAtomic(join(this.activityDir, ACTIVITY_STATE_FILENAME), serializedState(this.state));
+    }
+}
+export function createActivityJournal(options) {
+    const activityIdentityReader = createDashboardActivityReader();
+    const sessionLogRootDir = options.sessionLogRootDir ??
+        join(options.rootDir, "..", "session-logs");
+    const now = options.now ?? (() => new Date());
+    const maxResultBytes = Number.isSafeInteger(options.maxResultBytes) &&
+        (options.maxResultBytes ?? 0) > 0
+        ? Math.min(options.maxResultBytes, DEFAULT_MAX_ACTIVITY_RESULT_BYTES)
+        : DEFAULT_MAX_ACTIVITY_RESULT_BYTES;
+    const normalized = {
+        retainResult: options.retainResult ?? false,
+        maxResultBytes,
+        heartbeatIntervalMs: options.heartbeatIntervalMs ?? DEFAULT_ACTIVITY_HEARTBEAT_INTERVAL_MS,
+        now,
+    };
+    const maxAgeMs = options.maxAgeMs ?? DEFAULT_ACTIVITY_MAX_AGE_MS;
+    const maxEntries = options.maxEntries ?? DEFAULT_MAX_ACTIVITY_ENTRIES;
+    const maxTotalBytes = options.maxTotalBytes ?? DEFAULT_MAX_ACTIVITY_TOTAL_BYTES;
+    const reservedBytes = MAX_ACTIVITY_STATE_BYTES +
+        SESSION_LOG_GENERATION_FILE_BYTES +
+        (normalized.retainResult ? normalized.maxResultBytes : 0);
+    let admissionChain = Promise.resolve();
+    async function beginOne(input) {
+        try {
+            const parsed = ActivityIdSchema.parse(input.activityId);
+            await mkdir(options.rootDir, { recursive: true, mode: 0o700 });
+            await chmod(options.rootDir, 0o700);
+            try {
+                const admitted = await pruneActivities(options.rootDir, sessionLogRootDir, activityIdentityReader, now(), maxAgeMs, maxEntries, maxTotalBytes, reservedBytes);
+                if (!admitted) {
+                    logger.warn({ activity_id: input.activityId }, "activity journal capacity is occupied by live or unreadable records; observation disabled");
+                    return NOOP_OBSERVATION;
+                }
+            }
+            catch (error) {
+                logger.warn({
+                    activity_id: input.activityId,
+                    err: error instanceof Error ? error.message : String(error),
+                }, "activity journal pruning failed; observation disabled");
+                return NOOP_OBSERVATION;
+            }
+            const activityDir = join(options.rootDir, parsed);
+            await mkdir(activityDir, { mode: 0o700 });
+            await chmod(activityDir, 0o700);
+            const sessionLogGeneration = await createSessionLogGeneration(activityDir);
+            const timestamp = now().toISOString();
+            const initialState = ActivityStateV1Schema.parse({
+                schemaVersion: "clinkx-dashboard-activity-v1",
+                activityId: parsed,
+                kind: input.kind,
+                phase: "resolving",
+                status: "running",
+                adapter: input.adapter,
+                role: input.role,
+                startedAt: timestamp,
+                stateUpdatedAt: timestamp,
+                leaseUpdatedAt: timestamp,
+                ...(input.projectFolders === undefined || input.projectFolders.length === 0
+                    ? {}
+                    : { projectFolders: [...input.projectFolders] }),
+            });
+            await writeFileAtomic(join(activityDir, ACTIVITY_STATE_FILENAME), serializedState(initialState));
+            const identity = await activityIdentityReader.resolveCurrent(options.rootDir, parsed);
+            if (identity.kind !== "resolved") {
+                throw new Error("activity journal directory identity unavailable");
+            }
+            return new FileActivityObservation(activityDir, normalized, initialState, Object.freeze({
+                activityId: parsed,
+                activityGeneration: sessionLogGeneration,
+            }));
+        }
+        catch (error) {
+            logger.warn({
+                activity_id: input.activityId,
+                err: error instanceof Error ? error.message : String(error),
+            }, "activity journal start failed; clink execution remains authoritative");
+            return NOOP_OBSERVATION;
+        }
+    }
+    return {
+        begin(input) {
+            const next = admissionChain.then(() => beginOne(input), () => beginOne(input));
+            admissionChain = next.then(() => undefined, () => undefined);
+            return next;
+        },
+    };
+}
+//# sourceMappingURL=activity-journal.js.map

package/dist/activity-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-journal.js","sourceRoot":"","sources":["../src/activity-journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,KAAK,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,MAAM,EACN,EAAE,EACF,IAAI,GACL,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,sCAAsC,EACtC,2BAA2B,EAC3B,4BAA4B,EAC5B,iCAAiC,EACjC,gCAAgC,EAChC,wBAAwB,GAMzB,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,6BAA6B,EAAE,MACtC,uDAAuD,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MACnC,6DAA6D,CAAC;AAChE,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,4DAA4D,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,mBAAmB,EACnB,6BAA6B,EAC7B,qBAAqB,EACrB,4BAA4B,EAC5B,sCAAsC,EACtC,2BAA2B,EAC3B,4BAA4B,EAC5B,iCAAiC,EACjC,gCAAgC,EAChC,wBAAwB,GACzB,MAAM,yDAAyD,CAAC;AAoDjE,MAAM,CAAC,MAAM,0BAA0B,GACrC,yCAAyC,CAAC;AAC5C,MAAM,iCAAiC,GAAG,EAAE,CAAC;AAE7C,MAAM,gBAAgB,GAAwB,MAAM,CAAC,MAAM,CAAC;IAC1D,KAAK,CAAC,UAAU,KAAI,CAAC;IACrB,KAAK,CAAC,QAAQ,KAAI,CAAC;CACpB,CAAC,CAAC;AAEH,KAAK,UAAU,eAAe,CAC5B,QAAgB,EAChB,OAAwB;IAExB,MAAM,aAAa,GAAG,GAAG,QAAQ,IAAI,UAAU,EAAE,MAAM,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAsB;IAC7C,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACtF,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,wBAAwB,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAAe,EACf,iBAAyB,EACzB,sBAAwE,EACxE,GAAS,EACT,QAAgB,EAChB,UAAkB,EAClB,aAAqB,EACrB,aAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC5C,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5E,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CACvD,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CACnE,CAAC,CAAC;YACH,IACE,CAAC,MAAM,CAAC,OAAO;gBACf,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU;gBAChC,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,EACrC,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,QAAQ,EAAE,CAAC;gBACnE,MAAM,sBAAsB,CAAC;oBAC3B,OAAO;oBACP,iBAAiB;oBACjB,UAAU,EAAE,KAAK,CAAC,IAAI;oBACtB,WAAW;oBACX,sBAAsB;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,CAAC,KAAK,CACV;oBACE,WAAW,EAAE,KAAK,CAAC,IAAI;oBACvB,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC5D,EACD,0DAA0D,CAC3D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC,CAAC;IAEJ,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAKT,EAAE,CAAC;IACR,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACxE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAAE,SAAS;gBAC9B,aAAa,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACpE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QACD,UAAU,IAAI,aAAa,CAAC;QAC5B,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO;YAAE,SAAS;QAC9D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CACvD,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CACnE,CAAC,CAAC;YACH,IACE,MAAM,CAAC,OAAO;gBACd,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU;gBAChC,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,EACrC,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,UAAU,EAAE,KAAK,CAAC,IAAI;oBACtB,IAAI,EAAE,WAAW;oBACjB,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;oBAClD,KAAK,EAAE,aAAa;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACzE,IAAI,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;IACzE,OAAO,UAAU,IAAI,UAAU,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAG,CAAC;QACjC,IAAI,MAAM,sBAAsB,CAAC;YAC/B,OAAO;YACP,iBAAiB;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,IAAI;YACxB,sBAAsB;SACvB,CAAC,EAAE,CAAC;YACH,UAAU,IAAI,CAAC,CAAC;YAChB,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OACE,UAAU,GAAG,aAAa,GAAG,aAAa;QAC1C,QAAQ,CAAC,MAAM,GAAG,CAAC,EACnB,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAG,CAAC;QACjC,IAAI,MAAM,sBAAsB,CAAC;YAC/B,OAAO;YACP,iBAAiB;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,IAAI;YACxB,sBAAsB;SACvB,CAAC,EAAE,CAAC;YACH,UAAU,IAAI,CAAC,CAAC;YAChB,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,UAAU,GAAG,UAAU,IAAI,UAAU,GAAG,aAAa,IAAI,aAAa,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAMpC;IACA,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,sBAAsB,CAAC,cAAc,CAChE,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,EACjC,qEAAqE,CACtE,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,kBAAkB,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7E,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,IAAI,KAAK,WAAW;QAClE,CAAC,CAAC,kBAAkB,CAAC,oBAAoB;QACzC,CAAC,CAAC,kBAAkB,CAAC,IAAI,KAAK,QAAQ;YACpC,CAAC,CAAC,QAAQ,CAAC,kBAAkB;YAC7B,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,EACjC,qEAAqE,CACtE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC;YAC/C,OAAO,EAAE,KAAK,CAAC,iBAAiB;YAChC,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,oBAAoB;SACjC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EACxD,sEAAsE,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,EACjC,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CACnB,IAAY,EACZ,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,UAAU,IAAI,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,IAAI,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,uBAAuB;IAOR;IACA;IAIR;IAXH,KAAK,CAAkB;IACvB,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9C,QAAQ,GAAG,KAAK,CAAC;IACjB,SAAS,CAA6C;IAE9D,YACmB,WAAmB,EACnB,OAEhB,EACD,YAA6B,EACpB,QAA0B;QALlB,gBAAW,GAAX,WAAW,CAAQ;QACnB,YAAO,GAAP,OAAO,CAEvB;QAEQ,aAAQ,GAAR,QAAQ,CAAkB;QAEnC,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;QAC1B,IAAI,OAAO,CAAC,mBAAmB,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;gBAChC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;oBAC3B,IAAI,IAAI,CAAC,QAAQ;wBAAE,OAAO;oBAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;oBACnD,IAAI,CAAC,KAAK,GAAG;wBACX,GAAG,IAAI,CAAC,KAAK;wBACb,cAAc,EAAE,SAAS;wBACzB,cAAc,EAAE,SAAS;qBAC1B,CAAC;oBACF,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC5B,CAAC,CAAC,CAAC;YACL,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAChC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAAuD;QAEvD,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK,GAAG;gBACX,GAAG,IAAI,CAAC,KAAK;gBACb,KAAK;gBACL,cAAc,EAAE,SAAS;gBACzB,cAAc,EAAE,SAAS;aAC1B,CAAC;YACF,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAA8B;QAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACjC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,CAAC;YACD,IAAI,MAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT;oBACE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;oBAClC,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC5D,EACD,kFAAkF,CACnF,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK,GAAG;gBACX,GAAG,IAAI,CAAC,KAAK;gBACb,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,cAAc,EAAE,SAAS;gBACzB,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,WAAW,EAAE;gBACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC5C,CAAC;YACF,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAyB;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACrE,MAAM,CAAC,IAAI,CACT;gBACE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;gBAClC,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC5D,EACD,sEAAsE,CACvE,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,MAAM,IAAI,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,UAA8B;QAE9B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7E,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,YAAY,CACvC,UAAU,EACV,IAAI,CAAC,OAAO,CAAC,cAAc,CAC5B,CAAC;QACF,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/E,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,KAAK,CAAC,UAAU;YACvB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACxD,SAAS;SACV,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,eAAe,CACnB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAC/C,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAC5B,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CACnC,OAA+B;IAE/B,MAAM,sBAAsB,GAAG,6BAA6B,EAAE,CAAC;IAC/D,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB;QACjD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC;QACjE,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAe,EAAE,iCAAiC,CAAC;QACtE,CAAC,CAAC,iCAAiC,CAAC;IACtC,MAAM,UAAU,GAAG;QACjB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,KAAK;QAC3C,cAAc;QACd,mBAAmB,EACjB,OAAO,CAAC,mBAAmB,IAAI,sCAAsC;QACvE,GAAG;KACJ,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,2BAA2B,CAAC;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,4BAA4B,CAAC;IACtE,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa,IAAI,gCAAgC,CAAC;IAC5D,MAAM,aAAa,GACjB,wBAAwB;QACxB,iCAAiC;QACjC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,IAAI,cAAc,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEtD,KAAK,UAAU,QAAQ,CACrB,KAAyB;QAEzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACxD,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,OAAO,CAAC,OAAO,EACf,iBAAiB,EACjB,sBAAsB,EACtB,GAAG,EAAE,EACL,QAAQ,EACR,UAAU,EACV,aAAa,EACb,aAAa,CACd,CAAC;gBACF,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,EACjC,2FAA2F,CAC5F,CAAC;oBACF,OAAO,gBAAgB,CAAC;gBAC1B,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT;oBACE,WAAW,EAAE,KAAK,CAAC,UAAU;oBAC7B,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC5D,EACD,uDAAuD,CACxD,CAAC;gBACF,OAAO,gBAAgB,CAAC;YAC1B,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1C,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAChC,MAAM,oBAAoB,GAAG,MAAM,0BAA0B,CAAC,WAAW,CAAC,CAAC;YAC3E,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC;gBAC/C,aAAa,EAAE,8BAA8B;gBAC7C,UAAU,EAAE,MAAM;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,SAAS;gBACpB,cAAc,EAAE,SAAS;gBACzB,cAAc,EAAE,SAAS;gBACzB,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;oBACzE,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;aACnD,CAAC,CAAC;YACH,MAAM,eAAe,CACnB,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAC1C,eAAe,CAAC,YAAY,CAAC,CAC9B,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,cAAc,CAC1D,OAAO,CAAC,OAAO,EACf,MAAM,CACP,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,OAAO,IAAI,uBAAuB,CAChC,WAAW,EACX,UAAU,EACV,YAAY,EACZ,MAAM,CAAC,MAAM,CAAC;gBACZ,UAAU,EAAE,MAAM;gBAClB,kBAAkB,EAAE,oBAAoB;aACzC,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CACT;gBACE,WAAW,EAAE,KAAK,CAAC,UAAU;gBAC7B,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC5D,EACD,sEAAsE,CACvE,CAAC;YACF,OAAO,gBAAgB,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAC9B,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EACrB,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CACtB,CAAC;YACF,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/allowed-roots.d.ts

@@ -0,0 +1,53 @@
+export type AllowedRootsOptions = {
+    env?: NodeJS.ProcessEnv;
+    cwd?: string;
+    rejectBroadRoots?: boolean;
+    requireExisting?: boolean;
+    includeArtifactOnly?: boolean;
+};
+export declare function parseAllowedRootsEnv(options?: AllowedRootsOptions): string[];
+export declare function serializeAllowedRoots(roots: readonly string[]): string;
+export declare function appendAllowedRootsToEnv(rootsToAppend: readonly string[], options?: AllowedRootsOptions): string;
+/**
+ * Encode `root` as an artifact-only `CLINKX_ALLOWED_ROOTS` entry by appending a
+ * trailing `/.` (or `\.` on Windows) marker.
+ *
+ * An artifact-only entry grants a root for child process I/O and artifact
+ * writes (e.g. state/run dirs producers emit), but MUST NEVER be treated as a
+ * `context_builder` SOURCE root: the `context_builder` source-root validators
+ * skip marked entries so curated bundles can never select from a write/output
+ * root. The marker is an env-string convention only — strip it with
+ * {@link stripArtifactOnlyMarker} before any `path.resolve`/`realpathSync`, or
+ * the canonicalized path silently loses the `/.` and re-enters source roots
+ * (the "realpath-strip trap").
+ */
+export declare function artifactOnlyEnvEntry(root: string): string;
+/**
+ * Return true when `entry` is an artifact-only `CLINKX_ALLOWED_ROOTS` entry
+ * (ends with the `/.` or `\.` marker). Source-root validators use this to skip
+ * artifact-only entries; consumers that need the real directory must call
+ * {@link stripArtifactOnlyMarker} first. The check is purely lexical and does
+ * not touch the filesystem.
+ */
+export declare function isArtifactOnlyAllowedRootEntry(entry: string): boolean;
+/**
+ * Remove the trailing artifact-only `/.` / `\.` marker, returning the real
+ * directory path the entry refers to. No-op for unmarked entries. Filesystem
+ * roots are preserved (`/.` -> `/`, `C:\.` -> `C:\`). Always call this before
+ * resolving/realpath'ing a marked entry to avoid the realpath-strip trap noted
+ * on {@link artifactOnlyEnvEntry}.
+ */
+export declare function stripArtifactOnlyMarker(entry: string): string;
+/**
+ * Append `rootsToAppend` to `CLINKX_ALLOWED_ROOTS` as artifact-only entries
+ * ({@link artifactOnlyEnvEntry}). Used by producers to widen the child's
+ * write/artifact boundary without widening the `context_builder` source
+ * surface: appended roots are usable as child I/O / artifact-write roots but
+ * never as a context_builder source root. Broad/filesystem roots are rejected,
+ * and entries already present (marked or not) are de-duplicated by resolved
+ * path.
+ */
+export declare function appendArtifactOnlyRootsToEnv(rootsToAppend: readonly string[], options?: AllowedRootsOptions): string;
+export declare function isPathWithinAllowedRoots(resolvedPath: string, roots: readonly string[]): boolean;
+export declare function isSamePathOrDescendant(child: string, parent: string): boolean;
+export declare function isFilesystemRoot(resolved: string): boolean;

package/dist/allowed-roots.js

@@ -0,0 +1,216 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { InvalidParamsError } from "./errors.js";
+const ALLOWED_ROOTS_ENV = "CLINKX_ALLOWED_ROOTS";
+export function parseAllowedRootsEnv(options = {}) {
+    const env = options.env ?? process.env;
+    const cwd = options.cwd ?? process.cwd();
+    const raw = rawAllowedRoots(env[ALLOWED_ROOTS_ENV], cwd);
+    const roots = [];
+    const seen = new Set();
+    for (const entry of raw) {
+        if (options.includeArtifactOnly === false &&
+            isArtifactOnlyAllowedRootEntry(entry)) {
+            continue;
+        }
+        const resolved = resolveAllowedRoot(isArtifactOnlyAllowedRootEntry(entry)
+            ? stripArtifactOnlyMarker(entry)
+            : entry, {
+            cwd,
+            requireExisting: options.requireExisting ?? false,
+        });
+        if (options.rejectBroadRoots === true) {
+            rejectBroadAllowedRoot(resolved);
+        }
+        if (!seen.has(resolved)) {
+            seen.add(resolved);
+            roots.push(resolved);
+        }
+    }
+    return roots;
+}
+export function serializeAllowedRoots(roots) {
+    return roots.join(",");
+}
+export function appendAllowedRootsToEnv(rootsToAppend, options = {}) {
+    const env = options.env ?? process.env;
+    const cwd = options.cwd ?? process.cwd();
+    const parseOptions = { env, cwd };
+    if (options.rejectBroadRoots !== undefined) {
+        parseOptions.rejectBroadRoots = options.rejectBroadRoots;
+    }
+    if (options.requireExisting !== undefined) {
+        parseOptions.requireExisting = options.requireExisting;
+    }
+    if (options.includeArtifactOnly !== undefined) {
+        parseOptions.includeArtifactOnly = options.includeArtifactOnly;
+    }
+    const roots = normalizeAllowedRootEntriesForAppend(parseOptions);
+    const seen = new Set(roots
+        .filter((root) => !isArtifactOnlyAllowedRootEntry(root))
+        .map((root) => resolveAllowedRootBestEffort(root, cwd)));
+    for (const root of rootsToAppend) {
+        const resolved = resolveAllowedRoot(root, {
+            cwd,
+            requireExisting: options.requireExisting ?? true,
+        });
+        if (options.rejectBroadRoots === true) {
+            rejectBroadAllowedRoot(resolved);
+        }
+        if (!seen.has(resolved)) {
+            seen.add(resolved);
+            roots.push(resolved);
+        }
+    }
+    const serialized = serializeAllowedRoots(roots);
+    env[ALLOWED_ROOTS_ENV] = serialized;
+    return serialized;
+}
+/**
+ * Encode `root` as an artifact-only `CLINKX_ALLOWED_ROOTS` entry by appending a
+ * trailing `/.` (or `\.` on Windows) marker.
+ *
+ * An artifact-only entry grants a root for child process I/O and artifact
+ * writes (e.g. state/run dirs producers emit), but MUST NEVER be treated as a
+ * `context_builder` SOURCE root: the `context_builder` source-root validators
+ * skip marked entries so curated bundles can never select from a write/output
+ * root. The marker is an env-string convention only — strip it with
+ * {@link stripArtifactOnlyMarker} before any `path.resolve`/`realpathSync`, or
+ * the canonicalized path silently loses the `/.` and re-enters source roots
+ * (the "realpath-strip trap").
+ */
+export function artifactOnlyEnvEntry(root) {
+    return root.endsWith(path.sep) ? `${root}.` : `${root}${path.sep}.`;
+}
+/**
+ * Return true when `entry` is an artifact-only `CLINKX_ALLOWED_ROOTS` entry
+ * (ends with the `/.` or `\.` marker). Source-root validators use this to skip
+ * artifact-only entries; consumers that need the real directory must call
+ * {@link stripArtifactOnlyMarker} first. The check is purely lexical and does
+ * not touch the filesystem.
+ */
+export function isArtifactOnlyAllowedRootEntry(entry) {
+    return entry.endsWith("/.") || entry.endsWith("\\.");
+}
+/**
+ * Remove the trailing artifact-only `/.` / `\.` marker, returning the real
+ * directory path the entry refers to. No-op for unmarked entries. Filesystem
+ * roots are preserved (`/.` -> `/`, `C:\.` -> `C:\`). Always call this before
+ * resolving/realpath'ing a marked entry to avoid the realpath-strip trap noted
+ * on {@link artifactOnlyEnvEntry}.
+ */
+export function stripArtifactOnlyMarker(entry) {
+    if (!isArtifactOnlyAllowedRootEntry(entry)) {
+        return entry;
+    }
+    const stripped = entry.slice(0, -2);
+    if (stripped === "") {
+        return entry.endsWith("/.") ? "/" : "\\";
+    }
+    if (entry.endsWith("\\.") && stripped.endsWith(":")) {
+        return `${stripped}\\`;
+    }
+    return stripped;
+}
+/**
+ * Append `rootsToAppend` to `CLINKX_ALLOWED_ROOTS` as artifact-only entries
+ * ({@link artifactOnlyEnvEntry}). Used by producers to widen the child's
+ * write/artifact boundary without widening the `context_builder` source
+ * surface: appended roots are usable as child I/O / artifact-write roots but
+ * never as a context_builder source root. Broad/filesystem roots are rejected,
+ * and entries already present (marked or not) are de-duplicated by resolved
+ * path.
+ */
+export function appendArtifactOnlyRootsToEnv(rootsToAppend, options = {}) {
+    const env = options.env ?? process.env;
+    const cwd = options.cwd ?? process.cwd();
+    const entries = rawAllowedRoots(env[ALLOWED_ROOTS_ENV], cwd);
+    const seen = new Set(entries.map((entry) => resolveAllowedRootBestEffort(isArtifactOnlyAllowedRootEntry(entry)
+        ? stripArtifactOnlyMarker(entry)
+        : entry, cwd)));
+    for (const root of rootsToAppend) {
+        const resolved = resolveAllowedRoot(root, {
+            cwd,
+            requireExisting: options.requireExisting ?? true,
+        });
+        rejectBroadAllowedRoot(resolved);
+        if (!seen.has(resolved)) {
+            seen.add(resolved);
+            entries.push(artifactOnlyEnvEntry(resolved));
+        }
+    }
+    const serialized = serializeAllowedRoots(entries);
+    env[ALLOWED_ROOTS_ENV] = serialized;
+    return serialized;
+}
+export function isPathWithinAllowedRoots(resolvedPath, roots) {
+    return roots.some((root) => isSamePathOrDescendant(resolvedPath, root));
+}
+export function isSamePathOrDescendant(child, parent) {
+    const relation = path.relative(parent, child);
+    return relation === "" || (!relation.startsWith("..") && !path.isAbsolute(relation));
+}
+export function isFilesystemRoot(resolved) {
+    return resolved === path.parse(resolved).root;
+}
+function rawAllowedRoots(envValue, cwd) {
+    if (envValue != null && envValue.length > 0) {
+        return envValue
+            .split(",")
+            .map((root) => root.trim())
+            .filter((root) => root.length > 0);
+    }
+    return [cwd];
+}
+function resolveAllowedRoot(root, input) {
+    const lexical = path.resolve(input.cwd, root);
+    try {
+        return fs.realpathSync(lexical);
+    }
+    catch {
+        if (input.requireExisting) {
+            throw new InvalidParamsError(`Allowed root does not exist or is not accessible: ${root}`);
+        }
+        return lexical;
+    }
+}
+function resolveAllowedRootBestEffort(root, cwd) {
+    const lexical = path.resolve(cwd, root);
+    try {
+        return fs.realpathSync(lexical);
+    }
+    catch {
+        return lexical;
+    }
+}
+function normalizeAllowedRootEntriesForAppend(options) {
+    const raw = rawAllowedRoots(options.env[ALLOWED_ROOTS_ENV], options.cwd);
+    const roots = [];
+    const seen = new Set();
+    for (const entry of raw) {
+        if (isArtifactOnlyAllowedRootEntry(entry)) {
+            if (options.includeArtifactOnly !== false) {
+                roots.push(entry);
+            }
+            continue;
+        }
+        const resolved = resolveAllowedRoot(entry, {
+            cwd: options.cwd,
+            requireExisting: options.requireExisting ?? false,
+        });
+        if (options.rejectBroadRoots === true) {
+            rejectBroadAllowedRoot(resolved);
+        }
+        if (!seen.has(resolved)) {
+            seen.add(resolved);
+            roots.push(resolved);
+        }
+    }
+    return roots;
+}
+function rejectBroadAllowedRoot(root) {
+    if (isFilesystemRoot(root)) {
+        throw new InvalidParamsError(`Allowed root must not be a filesystem root: ${root}`);
+    }
+}
+//# sourceMappingURL=allowed-roots.js.map