clinkx 0.3.0 → 1.0.0

package/clinkx-workflows/dist/dashboard/auth/credential-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store.js","sourceRoot":"","sources":["../../../src/dashboard/auth/credential-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,KAAK,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,MAAM,EACN,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAC/C,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;AACrD,MAAM,yBAAyB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC7C,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAoB1C,SAAS,kBAAkB,CAAC,KAAa,EAAE,aAAsB;IAC/D,IAAI,KAAK,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAChD,OAAO,CAAC,aAAa,IAAI,IAAI,IAAI,OAAO,CAAC,UAAU,KAAK,aAAa,CAAC;WACjE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC;AAC/C,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CACvC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,EACpC,6BAA6B,CAC9B,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7B,KAAK;IACL,OAAO;IACP,QAAQ;IACR,UAAU;IACV,KAAK;IACL,YAAY;IACZ,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,eAAe;IACnB,SAAS,EAAE,eAAe;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;IAC9C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAC1B,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAC7C,0BAA0B,CAC3B;CACF,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,CAAC,EACxC,qDAAqD,CACtD;IACD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,yBAAyB;gBAClC,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC;aACnC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC,CAAC,CAAC;AAuFH,SAAS,0BAA0B;IACjC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,QAAQ,EAAE;QACpB,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sCAAsC,CACnD,cAAsB;IAEtB,IAAI,GAAW,CAAC;IAChB,IAAI,cAAc,CAAC;IACnB,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IACE,cAAc,CAAC,cAAc,EAAE;WAC5B,CAAC,cAAc,CAAC,MAAM,EAAE;WACxB,CAAC,cAAc,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,SAAS,CAAC;IACpB,CAAC;IACD,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,WAAW,GAAG,WAAW,IAAI,IAAI,CAAC;IACxC,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,OAAO,GAAG,aAAa,CAAC;IAC9E,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC;IACtE,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,0BAA0B,CAC9B,cAAc,EACd,QAAQ,EACR,GAAG,EACH,sCAAsC,CACvC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,mBAAmB,CACvB,cAAc,EACd,WAAW,EACX,QAAQ,EACR,sCAAsC,CACvC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,QAAgB,EAChB,SAA+D;IAE/D,MAAM,cAAc,GAAG,GAAG,QAAQ,UAAU,CAAC;IAC7C,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;IAC5C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,gBAAgB,CAAC;QACrB,IAAI,kBAAiD,CAAC;QACtD,IAAI,uBAAuB,GAAG,KAAK,CAAC;QACpC,IAAI,CAAC;YACH,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC;YACjD,kBAAkB,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;YAClE,MAAM,gBAAgB,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxE,uBAAuB,GAAG,IAAI,CAAC;YAC/B,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC/B,gBAAgB,GAAG,SAAS,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,gBAAgB,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAChD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,IAAI,kBAAkB,IAAI,IAAI,IAAI,uBAAuB,EAAE,CAAC;oBAC1D,MAAM,mBAAmB,CACvB,cAAc,EACd,MAAM,EACN,kBAAkB,EAClB,sCAAsC,CACvC,CAAC,IAAI,CACJ,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EAC5B,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACpB,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IACE,OAAO,GAAG,CAAC;mBACR,CAAC,CAAC,MAAM,sCAAsC,CAAC,cAAc,CAAC,CAAC,EAClE,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,kBAAkB,IAAI,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,cAAiC,CAAC;QACtC,IAAI,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAC5C,IAAI,cAAc,IAAI,IAAI;oBAAE,OAAO;gBACnC,MAAM,mBAAmB,CACvB,cAAc,EACd,MAAM,EACN,kBAAkB,EAClB,sCAAsC,EACtC,GAAG,EAAE,CAAC,cAAc,CACrB,CAAC;gBACF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvC,MAAM,mBAAmB,CACvB,cAAc,EACd,MAAM,EACN,kBAAkB,EAClB,sCAAsC,EACtC,GAAG,EAAE,CAAC,cAAc,CACrB,CAAC;YACJ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC1B,cAAc,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,mBAAmB,CACvB,cAAc,EACd,MAAM,EACN,kBAAkB,EAClB,sCAAsC,EACtC,GAAG,EAAE,CAAC,cAAc,CACrB,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC;gBAC5B,aAAa,EAAE,KAAK,IAAI,EAAE;oBACxB,MAAM,mBAAmB,CACvB,cAAc,EACd,MAAM,EACN,kBAAkB,EAClB,sCAAsC,EACtC,GAAG,EAAE,CAAC,cAAc,CACrB,CAAC;gBACJ,CAAC;gBACD,WAAW,EAAE,CAAS,iBAA+B,EAAU,EAAE;oBAC/D,IAAI,cAAc,IAAI,IAAI;wBAAE,MAAM,cAAc,CAAC;oBACjD,uBAAuB,CACrB,cAAc,EACd,MAAM,EACN,kBAAkB,EAClB,sCAAsC,CACvC,CAAC;oBACF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;oBACrC,uBAAuB,CACrB,cAAc,EACd,MAAM,EACN,kBAAkB,EAClB,sCAAsC,CACvC,CAAC;oBACF,OAAO,iBAAiB,EAAE,CAAC;gBAC7B,CAAC;aACF,CAAC,CAAC;YACH,MAAM,mBAAmB,CACvB,cAAc,EACd,MAAM,EACN,kBAAkB,EAClB,sCAAsC,EACtC,GAAG,EAAE,CAAC,cAAc,CACrB,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,MAAM,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,mBAAmB,CACvB,cAAc,EACd,MAAM,EACN,kBAAkB,EAClB,sCAAsC,EACtC,GAAG,EAAE,CAAC,cAAc,CACrB,CAAC;gBACF,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,QAAqC;IAC1D,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,YAAoB;IACzD,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAgC,CAAC;IACpF,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,uDAAuD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAID,MAAM,wBAAwB,GAC5B,oDAAoD,CAAC;AAEvD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,SAAiB;IAEjB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,KAAK,mBAAmB;eAChD,KAAK,CAAC,IAAI,KAAK,wBAAwB;eACvC,KAAK,CAAC,IAAI,KAAK,GAAG,wBAAwB,UAAU;eACpD,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,8BAA8B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACtD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACxE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,GAAG,yBAAyB,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACF,CAAC;IACjC,OAAO,QAAQ,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,SAAiB;IACpD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,SAAiB,EACjB,YAA+C,EAAE;IAEjD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;IAC5C,IAAI,gBAA+C,CAAC;IACpD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,4BAA4B,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YACzE,IAAI,MAAM,CAAC;YACX,IAAI,QAAuC,CAAC;YAC5C,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC3C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACvC,QAAQ,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;gBACxD,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC9D,aAAa,GAAG,IAAI,CAAC;gBACrB,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,GAAG,SAAS,CAAC;gBACnB,OAAO,QAAQ,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACtC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBACrE,IAAI,QAAQ,IAAI,IAAI,IAAI,aAAa,EAAE,CAAC;oBACtC,MAAM,mBAAmB,CACvB,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,2BAA2B,CAC5B,CAAC,IAAI,CACJ,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EACtB,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACpB,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,KAAK,KAAK,IAAI,UAAU,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;YAC3D,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC;YACpC,MAAM;QACR,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,gCAAgC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC;IAClC,MAAM,mBAAmB,CACvB,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,2BAA2B,CAC5B,CAAC;IACF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,cAAiC,CAAC;IACtC,IAAI,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC5C,IAAI,QAAQ,IAAI,cAAc,IAAI,IAAI;gBAAE,OAAO;YAC/C,MAAM,mBAAmB,CACvB,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,2BAA2B,EAC3B,GAAG,EAAE,CAAC,cAAc,CACrB,CAAC;YACF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACjC,MAAM,mBAAmB,CACvB,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,2BAA2B,EAC3B,GAAG,EAAE,CAAC,cAAc,CACrB,CAAC;QACJ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC1B,cAAc,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACtB,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,OAAO;QACL,aAAa,EAAE,KAAK,IAAI,EAAE;YACxB,MAAM,mBAAmB,CACvB,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,2BAA2B,EAC3B,GAAG,EAAE,CAAC,cAAc,CACrB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;YACvC,IAAI,oBAAoB,GAAG,KAAK,CAAC;YACjC,IAAI,gBAA0D,CAAC;YAC/D,IAAI,UAA8D,CAAC;YACnE,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,4BAA4B,CAC7C,QAAQ,EACR,KAAK,EAAE,eAAe,EAAE,EAAE;oBACxB,MAAM,SAAS,CAAC,gCAAgC,EAAE,EAAE,CAAC;oBACrD,MAAM,eAAe,CAAC,aAAa,EAAE,CAAC;oBACtC,MAAM,mBAAmB,CACvB,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,2BAA2B,EAC3B,GAAG,EAAE,CAAC,cAAc,CACrB,CAAC;oBACF,OAAO,eAAe,CAAC,WAAW,CAAC,GAAG,EAAE;wBACtC,IAAI,cAAc,IAAI,IAAI;4BAAE,MAAM,cAAc,CAAC;wBACjD,SAAS,CAAC,4BAA4B,EAAE,CAAC,oBAAoB,CAAC,CAAC;wBAC/D,uBAAuB,CACrB,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,2BAA2B,CAC5B,CAAC;wBACF,SAAS,CAAC,4BAA4B,EAAE,CAAC,qBAAqB,CAAC,CAAC;wBAChE,gBAAgB,GAAG,2BAA2B,CAC5C,SAAS,EACT,QAAQ,EACR,GAAG,EAAE;4BACH,IAAI,CAAC;gCACH,WAAW,EAAE,CAAC;4BAChB,CAAC;oCAAS,CAAC;gCACT,oBAAoB,GAAG,IAAI,CAAC;4BAC9B,CAAC;wBACH,CAAC,EACD,SAAS,CACV,CAAC;wBACF,OAAO,gBAAgB,CAAC;oBAC1B,CAAC,CAAC,CAAC;gBACL,CAAC,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,oBAAoB;oBAAE,MAAM,KAAK,CAAC;gBACvC,OAAO;oBACL,oBAAoB,EAAE,4BAA4B,CAChD,gBAAgB,EAAE,oBAAoB,EACtC,KAAK,CACN;iBACF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC,KAAqC,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,MAAM,aAAa,CAAC;YACpB,MAAM,mBAAmB,CACvB,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,2BAA2B,EAC3B,GAAG,EAAE,CAAC,cAAc,CACrB,CAAC;YACF,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrF,MAAM,SAAS,GAAG,KAAsC,CAAC;IACzD,OAAO,SAAS,CAAC,OAAO,KAAK,CAAC;WACzB,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC;WAClC,SAAS,CAAC,GAAc,GAAG,CAAC;WAC7B,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;WACtC,SAAS,CAAC,QAAQ,KAAK,EAAE;WACzB,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;WACnC,kBAAkB,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;WACvC,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;WACvC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,MAA4B,EAC5B,QAA2B,EAC3B,KAAa;IAEb,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IACE,KAAK,CAAC,cAAc,EAAE;WACnB,CAAC,KAAK,CAAC,MAAM,EAAE;WACf,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;WAC9B,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;WAC1B,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,QAAgB,EAChB,MAA4B,EAC5B,QAA2B,EAC3B,KAAa,EACb,gBAA0C;IAE1C,MAAM,sBAAsB,GAAG,GAAS,EAAE;QACxC,MAAM,OAAO,GAAG,gBAAgB,EAAE,EAAE,CAAC;QACrC,IAAI,OAAO,IAAI,IAAI;YAAE,MAAM,OAAO,CAAC;IACrC,CAAC,CAAC;IACF,sBAAsB,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IACE,MAAM,CAAC,cAAc,EAAE;eACpB,CAAC,MAAM,CAAC,MAAM,EAAE;eAChB,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;eAC/B,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;eAC3B,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAC9B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,IACE,KAAK,CAAC,cAAc,EAAE;eACnB,CAAC,KAAK,CAAC,MAAM,EAAE;eACf,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;eAC9B,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;eAC1B,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAC7B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,KAAK,oBAAoB,EAAE,CAAC;YAC7E,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,sBAAsB,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,QAAgB,EAChB,QAA2B,EAC3B,WAAmB,EACnB,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IACE,MAAM,CAAC,cAAc,EAAE;eACpB,CAAC,MAAM,CAAC,MAAM,EAAE;eAChB,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;eAC/B,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;eAC3B,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAC9B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,IACE,GAAG,KAAK,WAAW;eAChB,KAAK,CAAC,cAAc,EAAE;eACtB,CAAC,KAAK,CAAC,MAAM,EAAE;eACf,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;eAC9B,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;eAC1B,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAC7B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,KAAK,oBAAoB,EAAE,CAAC;YAC7E,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAC,QAAgB;IAC9D,MAAM,UAAU,GAAG,MAAM,4BAA4B,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QACzE,IAAI,GAAW,CAAC;QAChB,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IACE,QAAQ,CAAC,cAAc,EAAE;eACtB,CAAC,QAAQ,CAAC,MAAM,EAAE;eAClB,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EACpC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,GAAG,aAAa,CAAC;QACxE,IAAI,CAAC,iBAAiB;YAAE,OAAO,KAAK,CAAC;QAErC,MAAM,mBAAmB,CACvB,QAAQ,EACR,KAAK,EACL,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,EACxC,2BAA2B,CAC5B,CAAC;QACF,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,QAAgB;IACxD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,yBAAyB,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,SAAiB,EACjB,QAAqC;IAErC,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAgC,CAAC;IACvF,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,yBAAyB,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,IAAI,CACxB,SAAS,EACT,IAAI,mBAAmB,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CACvF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,2BAA2B,CAClC,SAAiB,EACjB,QAAuC,EACvC,WAAuB,EACvB,SAA4C;IAE5C,UAAU,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtD,SAAS,CAAC,4BAA4B,EAAE,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,WAAW,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,SAAS,CAAC,4BAA4B,EAAE,CAAC,cAAc,CAAC,CAAC;IAEzD,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,CAAC,SAAS,CAAC,iBAAiB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAC3E,SAAS,CACV,CAAC;QACF,SAAS,CAAC,4BAA4B,EAAE,CAAC,kBAAkB,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,CAAC,SAAS,CAAC,kBAAkB,IAAI,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC;YACxD,SAAS,CAAC,4BAA4B,EAAE,CAAC,mBAAmB,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,CAAC,SAAS,CAAC,kBAAkB,IAAI,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC;gBACxD,SAAS,CAAC,4BAA4B,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO;QACL,oBAAoB,EAAE,4BAA4B,CAAC,GAAG,MAAM,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,4BAA4B,CACnC,GAAG,MAAwC;IAE3C,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI;QACvD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IAChD,OAAO,IAAI,cAAc,CACvB,SAAS,EACT,wDAAwD,CACzD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAA6B,EAC7B,SAAiB,EACjB,QAAqC,EACrC,WAAuB;IAEvB,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,KAAa;IACzD,OAAO,KAAK;SACT,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;SACf,OAAO,CAAC,qBAAqB,EAAE,YAAY,CAAC;SAC5C,OAAO,CAAC,iCAAiC,EAAE,oBAAoB,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IAIzC,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAChE,CAAC;IACD,OAAO;QACL,IAAI,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,0BAA0B,CAAC;QACnE,OAAO,EAAE,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,KAAK,YAAY,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;aAC7B,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC;aAC/B,GAAG,CAAC,mBAAmB,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CACpC,KAAc,EACd,SAA4C;IAE5C,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,qDAA8D;QACpE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;KAClC,CAAC;IACF,IAAI,CAAC;QACH,IAAI,SAAS,CAAC,2BAA2B,IAAI,IAAI,EAAE,CAAC;YAClD,SAAS,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,KAAK,CACV;YACE,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,EACD,kHAAkH,CACnH,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC;AAED,MAAM,OAAO,wBAAwB;IAC1B,UAAU,CAAS;IACnB,aAAa,CAAS;IACtB,KAAK,CAA0B;IAC/B,UAAU,CAAoC;IACvD,SAAS,CAA8B;IACvC,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9C,uBAAuB,GAAG,KAAK,CAAC;IAChC,OAAO,GAAG,KAAK,CAAC;IAEhB,YACE,OAAwC,EACxC,IAA6B,EAC7B,QAAqC;QAErC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,OAAwC;QAExC,MAAM,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,8BAA8B,CAC/C,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,CAClB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YAC9D,IAAI,QAAqC,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;gBAC3C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACrC,IAAI,GAAG,CAAC,UAAU,GAAG,yBAAyB,EAAE,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBAC1E,CAAC;gBACD,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;YACnF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;gBACpE,QAAQ,GAAG;oBACT,OAAO,EAAE,wBAAwB;oBACjC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;oBACjD,IAAI,EAAE,OAAO,CAAC,YAAY;oBAC1B,WAAW,EAAE,EAAE;iBAChB,CAAC;gBACF,MAAM,WAAW,GAAG,MAAM,eAAe,CACvC,IAAI,EACJ,OAAO,CAAC,SAAS,EACjB,QAAQ,EACR,GAAG,EAAE,GAAE,CAAC,CACT,CAAC;gBACF,IAAI,WAAW,CAAC,oBAAoB,IAAI,IAAI,EAAE,CAAC;oBAC7C,MAAM,WAAW,CAAC,oBAAoB,CAAC;gBACzC,CAAC;YACH,CAAC;YACD,OAAO,IAAI,wBAAwB,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1E,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,CACJ,SAE4C;QAE5C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC1C,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBACjC,MAAM,IAAI,CAAC,4BAA4B,EAAE,CAAC;YAC5C,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAClE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE;gBAChF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,oBAAoB,IAAI,IAAI,EAAE,CAAC;gBAC7C,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;gBACpC,6BAA6B,CAC3B,WAAW,CAAC,oBAAoB,EAChC,IAAI,CAAC,UAAU,CAChB,CAAC;gBACF,MAAM,WAAW,CAAC,oBAAoB,CAAC;YACzC,CAAC;YACD,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,4BAA4B;QAC1B,OAAO,IAAI,KAAK,CACd,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,IAAI,CAAC,UAAU,CAAC;QACtB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF"}

package/clinkx-workflows/dist/dashboard/auth/enrollment-gate.d.ts

@@ -0,0 +1,9 @@
+export declare class DashboardEnrollmentGate {
+    #private;
+    readonly generation: string;
+    private constructor();
+    static create(): DashboardEnrollmentGate;
+    takeCodeForDisplay(): string | undefined;
+    authorizes(candidate: string, generation: string): boolean;
+    seal(generation: string): boolean;
+}

package/clinkx-workflows/dist/dashboard/auth/enrollment-gate.js

@@ -0,0 +1,44 @@
+import { randomBytes, timingSafeEqual } from "node:crypto";
+function decodeEnrollmentCode(candidate) {
+    if (!/^[A-Za-z0-9_-]{32}$/.test(candidate))
+        return undefined;
+    const decoded = Buffer.from(candidate, "base64url");
+    if (decoded.byteLength !== 24
+        || decoded.toString("base64url") !== candidate) {
+        return undefined;
+    }
+    return decoded;
+}
+export class DashboardEnrollmentGate {
+    generation;
+    #code;
+    #displayPending = true;
+    constructor(code, generation) {
+        this.#code = code;
+        this.generation = generation;
+    }
+    static create() {
+        return new DashboardEnrollmentGate(randomBytes(24), randomBytes(16).toString("base64url"));
+    }
+    takeCodeForDisplay() {
+        if (!this.#displayPending || this.#code == null)
+            return undefined;
+        this.#displayPending = false;
+        return this.#code.toString("base64url");
+    }
+    authorizes(candidate, generation) {
+        if (this.#code == null || generation !== this.generation)
+            return false;
+        const decoded = decodeEnrollmentCode(candidate);
+        return decoded != null && timingSafeEqual(this.#code, decoded);
+    }
+    seal(generation) {
+        if (this.#code == null || generation !== this.generation)
+            return false;
+        this.#code.fill(0);
+        this.#code = undefined;
+        this.#displayPending = false;
+        return true;
+    }
+}
+//# sourceMappingURL=enrollment-gate.js.map

package/clinkx-workflows/dist/dashboard/auth/enrollment-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrollment-gate.js","sourceRoot":"","sources":["../../../src/dashboard/auth/enrollment-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE3D,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACpD,IACE,OAAO,CAAC,UAAU,KAAK,EAAE;WACtB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,SAAS,EAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,uBAAuB;IACzB,UAAU,CAAS;IAC5B,KAAK,CAAqB;IAC1B,eAAe,GAAG,IAAI,CAAC;IAEvB,YAAoB,IAAY,EAAE,UAAkB;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,uBAAuB,CAChC,WAAW,CAAC,EAAE,CAAC,EACf,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CACtC,CAAC;IACJ,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QAClE,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,UAAkB;QAC9C,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QACvE,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,OAAO,IAAI,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,CAAC,UAAkB;QACrB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/clinkx-workflows/dist/dashboard/auth/session-store.d.ts

@@ -0,0 +1,17 @@
+export interface DashboardSessionStoreOptions {
+    readonly capacity?: number;
+    readonly ttlMs: number;
+    readonly now?: () => number;
+}
+export declare class DashboardSessionStore {
+    #private;
+    constructor(options: DashboardSessionStoreOptions);
+    create(): string;
+    createWithOriginProof(): Readonly<{
+        originProof: string;
+        sessionId: string;
+    }>;
+    has(sessionId: string, originProof?: string): boolean;
+    delete(sessionId: string): boolean;
+    clear(): void;
+}

package/clinkx-workflows/dist/dashboard/auth/session-store.js

@@ -0,0 +1,77 @@
+import { randomBytes, timingSafeEqual } from "node:crypto";
+const DEFAULT_SESSION_CAPACITY = 64;
+export class DashboardSessionStore {
+    #capacity;
+    #ttlMs;
+    #now;
+    #sessions = new Map();
+    constructor(options) {
+        this.#capacity = options.capacity ?? DEFAULT_SESSION_CAPACITY;
+        this.#ttlMs = options.ttlMs;
+        this.#now = options.now ?? Date.now;
+        if (!Number.isSafeInteger(this.#capacity) || this.#capacity < 1) {
+            throw new Error("dashboard session capacity must be a positive integer");
+        }
+        if (!Number.isSafeInteger(this.#ttlMs) || this.#ttlMs < 1) {
+            throw new Error("dashboard session TTL must be a positive integer");
+        }
+    }
+    create() {
+        return this.#create();
+    }
+    createWithOriginProof() {
+        const originProof = randomBytes(32).toString("base64url");
+        return {
+            originProof,
+            sessionId: this.#create(Buffer.from(originProof, "ascii")),
+        };
+    }
+    #create(originProof) {
+        const now = this.#now();
+        this.#sweep(now);
+        while (this.#sessions.size >= this.#capacity) {
+            const oldest = this.#sessions.keys().next().value;
+            if (oldest == null)
+                break;
+            this.#sessions.delete(oldest);
+        }
+        for (let attempt = 0; attempt < 4; attempt += 1) {
+            const sessionId = randomBytes(32).toString("base64url");
+            if (!this.#sessions.has(sessionId)) {
+                this.#sessions.set(sessionId, {
+                    createdAt: now,
+                    expiresAt: now + this.#ttlMs,
+                    ...(originProof == null ? {} : { originProof }),
+                });
+                return sessionId;
+            }
+        }
+        throw new Error("failed to allocate a unique dashboard session");
+    }
+    has(sessionId, originProof) {
+        this.#sweep(this.#now());
+        const session = this.#sessions.get(sessionId);
+        if (session == null)
+            return false;
+        if (session.originProof == null)
+            return true;
+        if (originProof == null || !/^[A-Za-z0-9_-]{43}$/.test(originProof)) {
+            return false;
+        }
+        return timingSafeEqual(session.originProof, Buffer.from(originProof, "ascii"));
+    }
+    delete(sessionId) {
+        return this.#sessions.delete(sessionId);
+    }
+    clear() {
+        this.#sessions.clear();
+    }
+    #sweep(now) {
+        for (const [sessionId, session] of this.#sessions) {
+            if (session.expiresAt <= now) {
+                this.#sessions.delete(sessionId);
+            }
+        }
+    }
+}
+//# sourceMappingURL=session-store.js.map

package/clinkx-workflows/dist/dashboard/auth/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../../src/dashboard/auth/session-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAc3D,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,MAAM,OAAO,qBAAqB;IACvB,SAAS,CAAS;IAClB,MAAM,CAAS;IACf,IAAI,CAAe;IACnB,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEzD,YAAY,OAAqC;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,wBAAwB,CAAC;QAC9D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,qBAAqB;QAInB,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1D,OAAO;YACL,WAAW;YACX,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,WAAoB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;YACxE,IAAI,MAAM,IAAI,IAAI;gBAAE,MAAM;YAC1B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE;oBAC5B,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM;oBAC5B,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;iBAChD,CAAC,CAAC;gBACH,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,GAAG,CAAC,SAAiB,EAAE,WAAoB;QACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,WAAW,IAAI,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,eAAe,CACpB,OAAO,CAAC,WAAW,EACnB,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAClC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClD,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/clinkx-workflows/dist/dashboard/auth/webauthn-service.d.ts

@@ -0,0 +1,25 @@
+import { type AuthenticationResponseJSON, type PublicKeyCredentialCreationOptionsJSON, type PublicKeyCredentialRequestOptionsJSON, type RegistrationResponseJSON } from "@simplewebauthn/server";
+import type { DashboardStoredCredential } from "./credential-store.js";
+export interface DashboardWebAuthnConfig {
+    readonly rpName: string;
+    readonly expectedOrigin: string;
+    readonly expectedRPID: string;
+}
+export interface DashboardRegistrationOptionsInput {
+    readonly userHandle: string;
+    readonly credentials: readonly DashboardStoredCredential[];
+}
+export interface DashboardWebAuthn {
+    registrationOptions(input: DashboardRegistrationOptionsInput): Promise<PublicKeyCredentialCreationOptionsJSON>;
+    verifyRegistration(response: RegistrationResponseJSON, expectedChallenge: string): Promise<DashboardStoredCredential | undefined>;
+    authenticationOptions(credentials: readonly DashboardStoredCredential[]): Promise<PublicKeyCredentialRequestOptionsJSON>;
+    verifyAuthentication(response: AuthenticationResponseJSON, expectedChallenge: string, credential: DashboardStoredCredential): Promise<number | undefined>;
+}
+export declare class DashboardWebAuthnService implements DashboardWebAuthn {
+    #private;
+    constructor(config: DashboardWebAuthnConfig);
+    registrationOptions(input: DashboardRegistrationOptionsInput): Promise<PublicKeyCredentialCreationOptionsJSON>;
+    verifyRegistration(response: RegistrationResponseJSON, expectedChallenge: string): Promise<DashboardStoredCredential | undefined>;
+    authenticationOptions(credentials: readonly DashboardStoredCredential[]): Promise<PublicKeyCredentialRequestOptionsJSON>;
+    verifyAuthentication(response: AuthenticationResponseJSON, expectedChallenge: string, credential: DashboardStoredCredential): Promise<number | undefined>;
+}

package/clinkx-workflows/dist/dashboard/auth/webauthn-service.js

@@ -0,0 +1,71 @@
+import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse, } from "@simplewebauthn/server";
+export class DashboardWebAuthnService {
+    #config;
+    constructor(config) {
+        this.#config = config;
+    }
+    registrationOptions(input) {
+        return generateRegistrationOptions({
+            rpName: this.#config.rpName,
+            rpID: this.#config.expectedRPID,
+            userName: "clinkx-dashboard",
+            userDisplayName: "ClinkX Dashboard User",
+            userID: new Uint8Array(Buffer.from(input.userHandle, "base64url")),
+            attestationType: "none",
+            authenticatorSelection: {
+                residentKey: "preferred",
+                userVerification: "required",
+            },
+            excludeCredentials: input.credentials.map((credential) => ({
+                id: credential.id,
+                transports: [...credential.transports],
+            })),
+        });
+    }
+    async verifyRegistration(response, expectedChallenge) {
+        const result = await verifyRegistrationResponse({
+            response,
+            expectedChallenge,
+            expectedOrigin: this.#config.expectedOrigin,
+            expectedRPID: this.#config.expectedRPID,
+            requireUserVerification: true,
+        });
+        if (!result.verified)
+            return undefined;
+        const transports = response.response.transports ?? result.registrationInfo.credential.transports ?? [];
+        return {
+            id: result.registrationInfo.credential.id,
+            publicKey: Buffer.from(result.registrationInfo.credential.publicKey).toString("base64url"),
+            counter: result.registrationInfo.credential.counter,
+            transports: [...transports],
+            createdAt: new Date().toISOString(),
+        };
+    }
+    authenticationOptions(credentials) {
+        return generateAuthenticationOptions({
+            rpID: this.#config.expectedRPID,
+            userVerification: "required",
+            allowCredentials: credentials.map((credential) => ({
+                id: credential.id,
+                transports: [...credential.transports],
+            })),
+        });
+    }
+    async verifyAuthentication(response, expectedChallenge, credential) {
+        const result = await verifyAuthenticationResponse({
+            response,
+            expectedChallenge,
+            expectedOrigin: this.#config.expectedOrigin,
+            expectedRPID: this.#config.expectedRPID,
+            requireUserVerification: true,
+            credential: {
+                id: credential.id,
+                publicKey: new Uint8Array(Buffer.from(credential.publicKey, "base64url")),
+                counter: credential.counter,
+                transports: [...credential.transports],
+            },
+        });
+        return result.verified ? result.authenticationInfo.newCounter : undefined;
+    }
+}
+//# sourceMappingURL=webauthn-service.js.map

package/clinkx-workflows/dist/dashboard/auth/webauthn-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn-service.js","sourceRoot":"","sources":["../../../src/dashboard/auth/webauthn-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,GAK3B,MAAM,wBAAwB,CAAC;AAkChC,MAAM,OAAO,wBAAwB;IAC1B,OAAO,CAA0B;IAE1C,YAAY,MAA+B;QACzC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,mBAAmB,CACjB,KAAwC;QAExC,OAAO,2BAA2B,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YAC/B,QAAQ,EAAE,kBAAkB;YAC5B,eAAe,EAAE,uBAAuB;YACxC,MAAM,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAClE,eAAe,EAAE,MAAM;YACvB,sBAAsB,EAAE;gBACtB,WAAW,EAAE,WAAW;gBACxB,gBAAgB,EAAE,UAAU;aAC7B;YACD,kBAAkB,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACzD,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC;aACvC,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,QAAkC,EAClC,iBAAyB;QAEzB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,QAAQ;YACR,iBAAiB;YACjB,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YAC3C,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,uBAAuB,EAAE,IAAI;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,IAAI,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC;QACvG,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE;YACzC,SAAS,EAAE,MAAM,CAAC,IAAI,CACpB,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAC7C,CAAC,QAAQ,CAAC,WAAW,CAAC;YACvB,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO;YACnD,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED,qBAAqB,CACnB,WAAiD;QAEjD,OAAO,6BAA6B,CAAC;YACnC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YAC/B,gBAAgB,EAAE,UAAU;YAC5B,gBAAgB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACjD,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC;aACvC,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,QAAoC,EACpC,iBAAyB,EACzB,UAAqC;QAErC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC;YAChD,QAAQ;YACR,iBAAiB;YACjB,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YAC3C,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,uBAAuB,EAAE,IAAI;YAC7B,UAAU,EAAE;gBACV,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,SAAS,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBACzE,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC;aACvC;SACF,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC;CACF"}

package/clinkx-workflows/dist/dashboard/context-run-liveness.d.ts

@@ -0,0 +1,37 @@
+import { type ContextBuilderLifecyclePhase, type ContextBuilderLifecycleStatus } from "../context-builder-lifecycle-contract.js";
+/**
+ * Write-like phases have no long-running subprocess. Matches the producer
+ * mutation-lock stale window (`CONTEXT_BUILDER_STALE_MUTATION_LOCK_MS` in
+ * `src/context-builder/storage.ts`) — duplicated here because the dashboard
+ * package does not import the producer.
+ */
+export declare const CONTEXT_RUN_WRITE_STALE_AFTER_MS: number;
+/** Any other active phase uses the contract duration ceiling. */
+export declare const CONTEXT_RUN_ACTIVE_STALE_AFTER_MS = 86400000;
+export type ContextRunLiveness = "live" | "orphaned" | "unknown";
+export type ContextRunLivenessOverlay = Readonly<{
+    orphaned: boolean;
+    liveness: ContextRunLiveness;
+}>;
+/**
+ * Read-time liveness overlay. Never persist the result.
+ *
+ * Terminal / missing lifecycle → `unknown` (never death). Active
+ * (`pending`/`running`) with a missing or unparseable `updatedAt` → `unknown`.
+ * Active with a parseable `updatedAt` uses a phase-aware age: write-like
+ * phases stale after 10 minutes, every other active phase after 24h. A
+ * producer clock slightly ahead (negative age) stays `live`.
+ */
+export declare function classifyContextRunLiveness(input: Readonly<{
+    status?: ContextBuilderLifecycleStatus | null;
+    phase?: ContextBuilderLifecyclePhase | null;
+    updatedAt?: string | null;
+    nowMs: number;
+}>): ContextRunLivenessOverlay;
+export declare function isContextRunLivePin(row: Readonly<{
+    orphaned?: boolean;
+    liveness?: ContextRunLiveness;
+    lifecycle?: Readonly<{
+        status: string;
+    }> | null;
+}>): boolean;

package/clinkx-workflows/dist/dashboard/context-run-liveness.js

@@ -0,0 +1,49 @@
+import { MAX_CONTEXT_BUILDER_LIFECYCLE_DURATION_MS, } from "../context-builder-lifecycle-contract.js";
+/**
+ * Write-like phases have no long-running subprocess. Matches the producer
+ * mutation-lock stale window (`CONTEXT_BUILDER_STALE_MUTATION_LOCK_MS` in
+ * `src/context-builder/storage.ts`) — duplicated here because the dashboard
+ * package does not import the producer.
+ */
+export const CONTEXT_RUN_WRITE_STALE_AFTER_MS = 10 * 60 * 1_000;
+/** Any other active phase uses the contract duration ceiling. */
+export const CONTEXT_RUN_ACTIVE_STALE_AFTER_MS = MAX_CONTEXT_BUILDER_LIFECYCLE_DURATION_MS;
+const WRITE_LIKE_PHASES = new Set([
+    "writing",
+    "committing",
+    "materializing",
+]);
+/**
+ * Read-time liveness overlay. Never persist the result.
+ *
+ * Terminal / missing lifecycle → `unknown` (never death). Active
+ * (`pending`/`running`) with a missing or unparseable `updatedAt` → `unknown`.
+ * Active with a parseable `updatedAt` uses a phase-aware age: write-like
+ * phases stale after 10 minutes, every other active phase after 24h. A
+ * producer clock slightly ahead (negative age) stays `live`.
+ */
+export function classifyContextRunLiveness(input) {
+    if (input.status !== "pending" && input.status !== "running") {
+        return { orphaned: false, liveness: "unknown" };
+    }
+    if (input.updatedAt == null) {
+        return { orphaned: false, liveness: "unknown" };
+    }
+    const updatedMs = Date.parse(input.updatedAt);
+    if (!Number.isFinite(updatedMs)) {
+        return { orphaned: false, liveness: "unknown" };
+    }
+    const thresholdMs = input.phase != null && WRITE_LIKE_PHASES.has(input.phase)
+        ? CONTEXT_RUN_WRITE_STALE_AFTER_MS
+        : CONTEXT_RUN_ACTIVE_STALE_AFTER_MS;
+    if (input.nowMs - updatedMs <= thresholdMs) {
+        return { orphaned: false, liveness: "live" };
+    }
+    return { orphaned: true, liveness: "orphaned" };
+}
+export function isContextRunLivePin(row) {
+    const status = row.lifecycle?.status;
+    return ((status === "pending" || status === "running") &&
+        row.liveness === "live");
+}
+//# sourceMappingURL=context-run-liveness.js.map

package/clinkx-workflows/dist/dashboard/context-run-liveness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-run-liveness.js","sourceRoot":"","sources":["../../src/dashboard/context-run-liveness.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yCAAyC,GAG1C,MAAM,0CAA0C,CAAC;AAElD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAEhE,iEAAiE;AACjE,MAAM,CAAC,MAAM,iCAAiC,GAC5C,yCAAyC,CAAC;AAE5C,MAAM,iBAAiB,GAA8C,IAAI,GAAG,CAAC;IAC3E,SAAS;IACT,YAAY;IACZ,eAAe;CAChB,CAAC,CAAC;AASH;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAKzC;IACA,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QAC5B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAC3E,CAAC,CAAC,gCAAgC;QAClC,CAAC,CAAC,iCAAiC,CAAC;IACtC,IAAI,KAAK,CAAC,KAAK,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC3C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAIlC;IACA,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC;IACrC,OAAO,CACL,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC;QAC9C,GAAG,CAAC,QAAQ,KAAK,MAAM,CACxB,CAAC;AACJ,CAAC"}

package/clinkx-workflows/dist/dashboard/context-run-reader.d.ts

@@ -0,0 +1,222 @@
+/**
+ * Bounded dashboard reader for the standalone / refine Context Run journal.
+ *
+ * This module enumerates and directly resolves stable row identities without
+ * exposing raw lifecycle state or manifest content.
+ *
+ * Two sources feed one projected row type:
+ *   1. `.context-runs/<contextRunId>/state.json` — authoritative live/terminal
+ *      H0 lifecycle snapshots written by the producer journal. Validated back
+ *      through the frozen schema; malformed rows are dropped.
+ *   2. Historical artifact run directories carrying `manifest.json` — a
+ *      terminal lifecycle row is SYNTHESIZED from the manifest for the exact
+ *      legacy 7-key and current 8-key artifact shapes; a 9-key (or larger)
+ *      manifest is surfaced as `compatibility: "legacy_unsupported"` with no
+ *      fabricated detail.
+ *
+ * Safety invariants:
+ *   - Every read goes through {@link readContainedRelativeFile} (no-follow,
+ *     containment-checked, size-capped). Symlinked entries and traversal names
+ *     are skipped or rejected.
+ *   - Workflow-owned records (`wfpre*` / `wfctx*`) are excluded from both
+ *     sources.
+ *   - Only safe scalar/enum/numeric fields are projected. Tasks, raw context,
+ *     full manifests, provider output, raw error strings, and arbitrary JSON are
+ *     NEVER read into a row. The single, deliberate path carve-out is the
+ *     top-level project-folder root: `roots[].path` is projected verbatim into
+ *     `ContextRunRow.projectFolders` (historical_manifest rows only) so the
+ *     detail page can show the folder the run was created for. Selected-context
+ *     file paths, task text, and all other manifest content stay private.
+ *
+ * Carve-out — bounded artifact-body reads (`readArtifact`): the invariant above
+ * applies to projected ROWS, which stay scalar-only. `readArtifact` is a
+ * separate, opt-in side channel that serves a single artifact file body
+ * (e.g. `bundle.md`) for an already-resolved run identity. It is allowlisted to
+ * the fixed artifact-key set, size-capped at the manifest ceiling, generation-
+ * pinned, and goes through the same no-follow containment read as rows. It does
+ * not enrich rows and is reached only via the dedicated HTTP route, never inline
+ * in list/detail projection.
+ */
+import { type FileHandle } from "node:fs/promises";
+import { type ContextBuilderLifecycleStateV1, type ContextBuilderOperationKind } from "../context-builder-lifecycle-contract.js";
+import { readContainedRelativeFile, type OpenedDescriptorPathVerifier } from "../contained-file.js";
+import { type ContextRunLiveness } from "./context-run-liveness.js";
+/**
+ * Artifact key → on-disk filename. Duplicated from the producer
+ * (`src/context-builder/storage.ts`) by convention — the dashboard package does
+ * not import the producer. A parity test pins this copy to the producer export.
+ * `manifest_json` lives at `<runDir>/manifest.json`; every other key lives at
+ * `<runDir>/artifacts/<filename>` (see producer `resolveContextBuilderRunPaths`).
+ */
+export declare const CONTEXT_RUN_ARTIFACT_FILE_NAMES: Readonly<{
+    readonly manifest_json: "manifest.json";
+    readonly bundle_md: "bundle.md";
+    readonly selected_context_jsonl: "selected-context.jsonl";
+    readonly tree_json: "tree.json";
+    readonly search_jsonl: "search.jsonl";
+    readonly slices_jsonl: "slices.jsonl";
+    readonly codemap_jsonl: "codemap.jsonl";
+    readonly summary_json: "summary.json";
+}>;
+export type ContextRunArtifactKey = keyof typeof CONTEXT_RUN_ARTIFACT_FILE_NAMES;
+export declare const CONTEXT_RUN_ARTIFACT_KEYS: readonly ContextRunArtifactKey[];
+export declare const DEFAULT_CONTEXT_RUN_READER_MAX_ROWS = 500;
+export declare const DEFAULT_CONTEXT_RUN_READER_MAX_DIR_ENTRIES = 5000;
+export declare const DEFAULT_CONTEXT_RUN_READER_MAX_STATE_BYTES: number;
+export declare const DEFAULT_CONTEXT_RUN_READER_MAX_MANIFEST_BYTES: number;
+/**
+ * Per-artifact-body cap for {@link readArtifact}. Sized above the producer's
+ * `max_total_bytes` ceiling (5_000_000, src/context-builder/schema.ts) so a
+ * producer-legal `bundle.md` / `selected-context.jsonl` is served rather than
+ * 413'd, while still bounding the body endpoint. Distinct from the manifest
+ * cap so each can move independently.
+ */
+export declare const DEFAULT_CONTEXT_RUN_READER_MAX_ARTIFACT_BYTES: number;
+export type ContextRunSource = "journal" | "historical_manifest";
+export type ContextRunCompatibility = "current" | "legacy_synthesized" | "legacy_unsupported";
+export interface ContextRunCounts {
+    readonly filesSeen: number;
+    readonly filesConsidered: number;
+    readonly filesSelected: number;
+    readonly filesOmitted: number;
+    readonly searchResults: number;
+    readonly bytesRead: number;
+    readonly bytesWritten: number;
+}
+export interface ContextRunCoverage {
+    readonly policy: ContextBuilderLifecycleStateV1["coverage"]["policy"];
+    readonly status: ContextBuilderLifecycleStateV1["coverage"]["status"];
+    readonly required: number;
+    readonly selected: number;
+    readonly missing: number;
+}
+export interface ContextRunLifecycleProjection {
+    readonly status: ContextBuilderLifecycleStateV1["status"];
+    readonly phase: ContextBuilderLifecycleStateV1["phase"];
+    readonly createdAt: string | null;
+    readonly updatedAt: string | null;
+    readonly startedAt: string | null;
+    readonly completedAt: string | null;
+    readonly durationMs: number | null;
+    readonly curator: {
+        readonly status: ContextBuilderLifecycleStateV1["curator"]["execution_status"];
+        readonly score: number | null;
+    };
+    readonly finalizer: {
+        readonly status: ContextBuilderLifecycleStateV1["finalizer"]["execution_status"];
+        readonly score: number | null;
+    };
+    readonly cache: {
+        readonly lookup: ContextBuilderLifecycleStateV1["cache"]["lookup"];
+        readonly write: ContextBuilderLifecycleStateV1["cache"]["write"];
+    };
+    readonly fallback: {
+        readonly status: ContextBuilderLifecycleStateV1["fallback"]["status"];
+    };
+    readonly counts: ContextRunCounts;
+    readonly coverage: ContextRunCoverage;
+    readonly reasonCodes: ContextBuilderLifecycleStateV1["reason_codes"];
+    readonly artifactRunId: string | null;
+}
+export interface ContextRunRow {
+    /** Operation ID for journal rows; artifact run_id for historical rows. */
+    readonly id: string;
+    /** Opaque identity for the current source-directory incarnation. */
+    readonly contextGeneration: string;
+    readonly source: ContextRunSource;
+    readonly compatibility: ContextRunCompatibility;
+    readonly operationKind: ContextBuilderOperationKind;
+    /** Null only when the shape is `legacy_unsupported`. */
+    readonly lifecycle: ContextRunLifecycleProjection | null;
+    /**
+     * Project folder(s) the context run operated on, from the manifest
+     * `roots[].path`. A narrow, deliberate exception to the "no paths in a row"
+     * rule: historical_manifest rows carry the persisted roots verbatim, while
+     * journal (`current`) rows report `[]` (their lifecycle state lives apart
+     * from the manifest and reading it per detail fetch is not worth the cost).
+     */
+    readonly projectFolders: readonly string[];
+    /**
+     * Read-time overlay. Never persisted. Terminal / unsupported rows are
+     * `liveness: "unknown"`; a stale active journal is `orphaned`.
+     */
+    readonly orphaned: boolean;
+    readonly liveness: ContextRunLiveness;
+}
+export interface ContextRunReadResult {
+    readonly rows: readonly ContextRunRow[];
+    /** A directory / row cap was hit; the listing is not exhaustive. */
+    readonly truncated: boolean;
+}
+export interface ContextRunReaderOptions {
+    readonly runsDir: string;
+    readonly maxRows?: number;
+    readonly maxDirEntries?: number;
+    readonly maxStateBytes?: number;
+    readonly maxManifestBytes?: number;
+    readonly maxArtifactBytes?: number;
+}
+export type ContextRunDetailResult = Readonly<{
+    kind: "available";
+    row: ContextRunRow;
+}> | Readonly<{
+    kind: "missing";
+}> | Readonly<{
+    kind: "context_generation_changed";
+}> | Readonly<{
+    kind: "unavailable";
+    reason: "context_generation_race";
+}>;
+/**
+ * Result of a bounded artifact-body read. The `artifactRunId` is the directory
+ * the body was actually read from (the journal row's linked artifact run, or the
+ * historical row's own id); callers re-confirm via readDetail to close a
+ * journal-state-swap TOCTOU. `contextGeneration` is the generation pinned to the
+ * artifact directory at read time.
+ */
+export type ContextRunArtifactResult = Readonly<{
+    kind: "available";
+    content: string;
+    artifactRunId: string;
+    contextGeneration: string;
+}> | Readonly<{
+    kind: "missing";
+}> | Readonly<{
+    kind: "context_generation_changed";
+}> | Readonly<{
+    kind: "content_too_large";
+}> | Readonly<{
+    kind: "unavailable";
+    reason: "context_generation_race";
+}>;
+export interface ContextRunReader {
+    readonly list: (options: ContextRunReaderOptions) => Promise<ContextRunReadResult>;
+    readonly readDetail: (options: ContextRunReaderOptions, id: string, contextGeneration?: string) => Promise<ContextRunDetailResult>;
+    readonly readArtifact: (options: ContextRunReaderOptions, id: string, artifactKey: ContextRunArtifactKey, contextGeneration?: string) => Promise<ContextRunArtifactResult>;
+}
+interface ContextRunAuthorityFileSystem {
+    readonly open: (path: string, flags: number) => Promise<FileHandle>;
+    readonly realpath: (path: string) => Promise<string>;
+}
+export interface ContextRunReaderAuthorityOptions {
+    readonly fileSystem?: ContextRunAuthorityFileSystem | undefined;
+    readonly descriptorPathVerifier?: OpenedDescriptorPathVerifier | undefined;
+    readonly readContainedFile?: typeof readContainedRelativeFile | undefined;
+    /** Deterministic race-injection seam; never used by production callers. */
+    readonly beforeCommitVerification?: ((identity: Readonly<{
+        id: string;
+        source: ContextRunSource;
+    }>) => void | Promise<void>) | undefined;
+    /** Injectable clock for the read-time liveness overlay. */
+    readonly now?: () => Date;
+}
+export declare class ContextRunSourceUnavailableError extends Error {
+    constructor();
+}
+export declare function createContextRunReader(options?: ContextRunReaderAuthorityOptions): ContextRunReader;
+export declare function readContextRuns(options: ContextRunReaderOptions): Promise<ContextRunReadResult>;
+export declare function readContextRunArtifact(options: ContextRunReaderOptions, id: string, artifactKey: ContextRunArtifactKey, contextGeneration?: string): Promise<ContextRunArtifactResult>;
+/** Resolve one stable row identity directly, independent of list limits/order. */
+export declare function readContextRun(options: ContextRunReaderOptions, id: string, contextGeneration?: string): Promise<ContextRunDetailResult>;
+export declare function projectContextRunLifecycleState(state: ContextBuilderLifecycleStateV1): ContextRunLifecycleProjection;
+export {};