clinkx 0.3.0 → 1.1.0

package/clinkx-workflows/dist/dashboard/prompt-builder-library-store.js

@@ -0,0 +1,102 @@
+/**
+ * Bounded sidecar store for the dashboard-private prompt-builder library.
+ *
+ * Lives beside `progress-report-status-overrides.json` under the dashboard
+ * private writable parent. Reads distinguish absent / present / unreadable
+ * and never collapse errors to an empty document. Writes use wx+0o600+rename.
+ */
+import { randomBytes } from "node:crypto";
+import { open, rename, unlink } from "node:fs/promises";
+import { join } from "node:path";
+import { z } from "zod";
+import { ContainedFilePolicyError, ContainedFileTooLargeError, readContainedRelativeFile, } from "../contained-file.js";
+import { MAX_PROMPT_BUILDER_LIBRARY_DOCUMENT_BYTES, MAX_PROMPT_BUILDER_LIBRARY_READ_BYTES, PROMPT_BUILDER_LIBRARY_FILENAME, PROMPT_BUILDER_LIBRARY_SCHEMA_VERSION, PromptBuilderLibraryDocumentSchema, } from "./prompt-builder-library-contract.js";
+export function promptBuilderLibraryFilePath(parentDir) {
+    return join(parentDir, PROMPT_BUILDER_LIBRARY_FILENAME);
+}
+function errnoCode(error) {
+    return error.code;
+}
+export function createPromptBuilderLibraryStore(options = {}) {
+    const now = options.now ?? (() => new Date());
+    let writeChain = Promise.resolve();
+    const read = async (parentDir) => {
+        try {
+            const result = await readContainedRelativeFile(parentDir, PROMPT_BUILDER_LIBRARY_FILENAME, {
+                containerLabel: "prompt-builder library parent",
+                pathLabel: "prompt builder library",
+                maxBytes: MAX_PROMPT_BUILDER_LIBRARY_READ_BYTES,
+                requireRegular: true,
+                requireExactRequestedPath: true,
+                wantContent: true,
+            });
+            if (result.content === undefined) {
+                return { kind: "unreadable", reason: "empty_read" };
+            }
+            const parsed = PromptBuilderLibraryDocumentSchema.safeParse(JSON.parse(result.content));
+            if (!parsed.success) {
+                return { kind: "unreadable", reason: "invalid_document" };
+            }
+            return { kind: "present", document: parsed.data };
+        }
+        catch (error) {
+            if (errnoCode(error) === "ENOENT")
+                return { kind: "absent" };
+            if (error instanceof SyntaxError) {
+                return { kind: "unreadable", reason: "invalid_json" };
+            }
+            if (error instanceof ContainedFileTooLargeError) {
+                return { kind: "unreadable", reason: "too_large" };
+            }
+            if (error instanceof ContainedFilePolicyError) {
+                return { kind: "unreadable", reason: "policy" };
+            }
+            if (error instanceof z.ZodError) {
+                return { kind: "unreadable", reason: "invalid_document" };
+            }
+            return { kind: "unreadable", reason: "read_failed" };
+        }
+    };
+    const publish = async (parentDir, document) => {
+        const filePath = promptBuilderLibraryFilePath(parentDir);
+        const serialized = `${JSON.stringify(document)}\n`;
+        if (Buffer.byteLength(serialized, "utf8") > MAX_PROMPT_BUILDER_LIBRARY_DOCUMENT_BYTES) {
+            return { kind: "too_large" };
+        }
+        const temporaryPath = join(parentDir, `.${PROMPT_BUILDER_LIBRARY_FILENAME}.${String(process.pid)}.${randomBytes(8).toString("hex")}.tmp`);
+        let handle;
+        try {
+            handle = await open(temporaryPath, "wx", 0o600);
+            await handle.writeFile(serialized, "utf8");
+            await handle.sync();
+            await handle.close();
+            handle = undefined;
+            await rename(temporaryPath, filePath);
+            return { kind: "ok", document };
+        }
+        catch (error) {
+            if (handle !== undefined)
+                await handle.close().catch(() => undefined);
+            await unlink(temporaryPath).catch(() => undefined);
+            const code = errnoCode(error);
+            if (code === "EACCES" || code === "EROFS" || code === "ENOENT" || code === "EPERM") {
+                return { kind: "unwritable" };
+            }
+            throw error;
+        }
+    };
+    const write = (parentDir, request) => {
+        const document = {
+            schemaVersion: PROMPT_BUILDER_LIBRARY_SCHEMA_VERSION,
+            updatedAt: now().toISOString(),
+            models: request.models,
+            requests: request.requests,
+            stances: request.stances,
+        };
+        const queued = writeChain.then(() => publish(parentDir, document), () => publish(parentDir, document));
+        writeChain = queued.then(() => undefined, () => undefined);
+        return queued;
+    };
+    return { read, write };
+}
+//# sourceMappingURL=prompt-builder-library-store.js.map

package/clinkx-workflows/dist/dashboard/prompt-builder-library-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-builder-library-store.js","sourceRoot":"","sources":["../../src/dashboard/prompt-builder-library-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,yCAAyC,EACzC,qCAAqC,EACrC,+BAA+B,EAC/B,qCAAqC,EACrC,kCAAkC,GAGnC,MAAM,sCAAsC,CAAC;AAoB9C,MAAM,UAAU,4BAA4B,CAAC,SAAiB;IAC5D,OAAO,IAAI,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAQ,KAA+B,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,UAEK,EAAE;IAEP,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,UAAU,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAErD,MAAM,IAAI,GAAG,KAAK,EAChB,SAAiB,EACwB,EAAE;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C,SAAS,EACT,+BAA+B,EAC/B;gBACE,cAAc,EAAE,+BAA+B;gBAC/C,SAAS,EAAE,wBAAwB;gBACnC,QAAQ,EAAE,qCAAqC;gBAC/C,cAAc,EAAE,IAAI;gBACpB,yBAAyB,EAAE,IAAI;gBAC/B,WAAW,EAAE,IAAI;aAClB,CACF,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YACtD,CAAC;YACD,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CACzD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAY,CACtC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;YAC5D,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC7D,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;gBACjC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YACxD,CAAC;YACD,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;gBAChD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACrD,CAAC;YACD,IAAI,KAAK,YAAY,wBAAwB,EAAE,CAAC;gBAC9C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAClD,CAAC;YACD,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAChC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;YAC5D,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACvD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,EACnB,SAAiB,EACjB,QAAsC,EACK,EAAE;QAC7C,MAAM,QAAQ,GAAG,4BAA4B,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,yCAAyC,EAAE,CAAC;YACtF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CACxB,SAAS,EACT,IAAI,+BAA+B,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CACnG,CAAC;QACF,IAAI,MAAoD,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,GAAG,SAAS,CAAC;YACnB,MAAM,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YACtC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtE,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACnF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAChC,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CACZ,SAAiB,EACjB,OAAwC,EACG,EAAE;QAC7C,MAAM,QAAQ,GAAiC;YAC7C,aAAa,EAAE,qCAAqC;YACpD,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;QACF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAC5B,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,EAClC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CACnC,CAAC;QACF,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC"}

package/clinkx-workflows/dist/dashboard/read-model.d.ts

@@ -0,0 +1,86 @@
+import { type FileHandle } from "node:fs/promises";
+import { readContainedRelativeFile, type ContainedFileFingerprint, type OpenedDescriptorPathVerifier } from "../contained-file.js";
+import { type DashboardRunState } from "./contracts.js";
+export declare const DEFAULT_DASHBOARD_MAX_STATE_BYTES = 16777216;
+export interface DashboardAdmissionFileSystem {
+    readonly realpath: (path: string) => Promise<string>;
+    readonly open: (path: string, flags: number) => Promise<FileHandle>;
+}
+export interface DashboardDirectoryIdentity {
+    readonly dev: bigint;
+    readonly ino: bigint;
+    readonly birthtimeNs: bigint;
+}
+export interface DashboardAdmissionHookContext {
+    readonly attempt: 1 | 2;
+    readonly canonicalRunsRoot: string;
+    readonly runId: string;
+}
+export interface DashboardAdmissionHooks {
+    readonly afterDirectoryAdmission?: (context: DashboardAdmissionHookContext) => void | Promise<void>;
+    readonly beforeCommitVerification?: (context: DashboardAdmissionHookContext) => void | Promise<void>;
+}
+export interface DashboardRunReaderOptions {
+    readonly fileSystem?: DashboardAdmissionFileSystem | undefined;
+    readonly descriptorPathVerifier?: OpenedDescriptorPathVerifier | undefined;
+    readonly readStateFile?: typeof readContainedRelativeFile | undefined;
+    readonly generateRunGeneration?: (() => string) | undefined;
+    readonly maxStateBytes?: number | undefined;
+    readonly hooks?: DashboardAdmissionHooks | undefined;
+    readonly includeUnavailableAdmissionMetadata?: boolean | undefined;
+}
+export type DashboardRunUnavailableReason = "state_unreadable" | "state_invalid" | "too_large_for_dashboard" | "too_complex_for_dashboard" | "path_rejected" | "identity_mismatch" | "run_generation_race";
+export interface AdmittedDashboardRun {
+    readonly kind: "admitted";
+    readonly runId: string;
+    readonly runGeneration: string;
+    readonly state: DashboardRunState;
+    readonly sourceBytes: number;
+    readonly stateFingerprint: ContainedFileFingerprint;
+    readonly directoryIdentity: DashboardDirectoryIdentity;
+    readonly rootIdentity: DashboardDirectoryIdentity;
+}
+export interface DashboardUnavailableAdmission {
+    readonly runGeneration: string;
+    readonly sourceBytes: number;
+    readonly stateFingerprint?: ContainedFileFingerprint | undefined;
+    readonly directoryIdentity: DashboardDirectoryIdentity;
+    readonly rootIdentity: DashboardDirectoryIdentity;
+}
+export type DashboardRunReadResult = AdmittedDashboardRun | {
+    readonly kind: "missing";
+    readonly runId: string;
+} | {
+    readonly kind: "unavailable";
+    readonly runId: string;
+    readonly reason: DashboardRunUnavailableReason;
+    readonly admission?: DashboardUnavailableAdmission | undefined;
+};
+export interface DashboardRunReader {
+    read(runsRoot: string, runId: string): Promise<DashboardRunReadResult>;
+    inspectDirectoryIdentity?(runsRoot: string, runId: string): Promise<{
+        readonly kind: "present";
+        readonly directoryIdentity: DashboardDirectoryIdentity;
+        readonly rootIdentity: DashboardDirectoryIdentity;
+    } | {
+        readonly kind: "missing";
+    }>;
+    inspectGeneration?(runsRoot: string, runId: string): Promise<{
+        readonly kind: "present";
+        readonly runGeneration: string;
+    } | {
+        readonly kind: "missing";
+    }>;
+    forget(runsRoot: string, runId: string): void;
+}
+export type DashboardOptionalContentResult<T> = {
+    readonly kind: "available";
+    readonly value: T;
+} | {
+    readonly kind: "unavailable";
+    readonly reason: "not_found";
+};
+/** Map optional-content deletion without reclassifying the enclosing run. */
+export declare function readDashboardOptionalContent<T>(read: () => Promise<T>): Promise<DashboardOptionalContentResult<T>>;
+export declare function createDashboardRunReader(options?: DashboardRunReaderOptions): DashboardRunReader;
+export declare function readDashboardRun(runsRoot: string, runId: string): Promise<DashboardRunReadResult>;

package/clinkx-workflows/dist/dashboard/read-model.js

@@ -0,0 +1,440 @@
+import { constants as fsConstants } from "node:fs";
+import { open, realpath } from "node:fs/promises";
+import { isAbsolute, relative, resolve, sep } from "node:path";
+import { ContainedFileChangedError, ContainedFilePolicyError, ContainedFileTooLargeError, readContainedRelativeFile, resolveOpenedDescriptorPath, } from "../contained-file.js";
+import { validateRunId } from "../run-id.js";
+import { logger } from "../logger.js";
+import { DEFAULT_DASHBOARD_MAX_STATE_BYTES as CONFIGURED_DEFAULT_DASHBOARD_MAX_STATE_BYTES } from "../config.js";
+import { parseDashboardRunState, } from "./contracts.js";
+import { deriveWorkflowRunGeneration } from "./generation.js";
+export const DEFAULT_DASHBOARD_MAX_STATE_BYTES = CONFIGURED_DEFAULT_DASHBOARD_MAX_STATE_BYTES;
+class DashboardGenerationRaceError extends Error {
+}
+const defaultFileSystem = { open, realpath };
+function hasErrorCode(error, code) {
+    return error?.code === code;
+}
+/** Map optional-content deletion without reclassifying the enclosing run. */
+export async function readDashboardOptionalContent(read) {
+    try {
+        return { kind: "available", value: await read() };
+    }
+    catch (error) {
+        if (hasErrorCode(error, "ENOENT")) {
+            return { kind: "unavailable", reason: "not_found" };
+        }
+        throw error;
+    }
+}
+function directoryIdentity(stats) {
+    return {
+        dev: stats.dev,
+        ino: stats.ino,
+        birthtimeNs: stats.birthtimeNs,
+    };
+}
+function directoryIdentitiesEqual(left, right) {
+    return left.dev === right.dev &&
+        left.ino === right.ino &&
+        left.birthtimeNs === right.birthtimeNs;
+}
+function isProperDescendant(root, candidate) {
+    const pathFromRoot = relative(root, candidate);
+    return pathFromRoot !== "" &&
+        pathFromRoot !== ".." &&
+        !pathFromRoot.startsWith(`..${sep}`) &&
+        !isAbsolute(pathFromRoot);
+}
+async function inspectOpenedDirectory(handle) {
+    const stats = await handle.stat({ bigint: true });
+    if (!stats.isDirectory() ||
+        stats.nlink === 0n) {
+        throw new DashboardGenerationRaceError();
+    }
+    return directoryIdentity(stats);
+}
+async function verifyCurrentDirectoryIdentity(fileSystem, path, flags, expected) {
+    let current;
+    try {
+        // Opening the exact path with O_NOFOLLOW proves the current directory entry
+        // still names a real directory; comparing the opened identity to the
+        // transaction's live handle detects rename/recycle without a Darwin `lsof`
+        // subprocess. Directory hard links are not available to unprivileged callers,
+        // while the state-file descriptor retains its stricter initial/final
+        // authoritative path checks.
+        current = await fileSystem.open(path, flags);
+    }
+    catch {
+        throw new DashboardGenerationRaceError();
+    }
+    try {
+        const identity = await inspectOpenedDirectory(current);
+        if (!directoryIdentitiesEqual(identity, expected)) {
+            throw new DashboardGenerationRaceError();
+        }
+    }
+    finally {
+        await current.close();
+    }
+}
+function generationFor(cache, runId, identity, generate) {
+    const current = cache.generations.get(runId);
+    if (current !== undefined && directoryIdentitiesEqual(current.identity, identity)) {
+        return current.generation;
+    }
+    const generation = generate();
+    cache.generations.set(runId, { identity, generation });
+    return generation;
+}
+export function createDashboardRunReader(options = {}) {
+    const fileSystem = options.fileSystem ?? defaultFileSystem;
+    const verifyDescriptorPath = options.descriptorPathVerifier ??
+        resolveOpenedDescriptorPath;
+    const readStateFile = options.readStateFile ?? readContainedRelativeFile;
+    const generateRunGeneration = options.generateRunGeneration;
+    const maxStateBytes = options.maxStateBytes ?? DEFAULT_DASHBOARD_MAX_STATE_BYTES;
+    const rootCache = new Map();
+    const directoryFlags = fsConstants.O_RDONLY |
+        (fsConstants.O_DIRECTORY ?? 0) |
+        (fsConstants.O_NOFOLLOW ?? 0);
+    function runGeneration(cache, runId, rootIdentity, directoryIdentity) {
+        if (generateRunGeneration === undefined) {
+            return deriveWorkflowRunGeneration(runId, rootIdentity, directoryIdentity);
+        }
+        return generationFor(cache, runId, directoryIdentity, generateRunGeneration);
+    }
+    /**
+     * `runPath` is the exact canonical path `handle` was opened on — the CHILD run
+     * directory, never `canonicalRoot`. Passing it lets the darwin verifier take
+     * its fast `realpath`+`fstat`/`lstat` path instead of falling through to the
+     * `lsof` subprocess, which is both slower and hardlink-blind. Passing
+     * `canonicalRoot` here would compare two different inodes and reject every run.
+     * `canonicalRoot` is still required for the containment re-assert below, which
+     * is the upgrade the fast path relies on.
+     */
+    async function inspectInitiallyOpenedRunDirectory(handle, canonicalRoot, runPath) {
+        const identity = await inspectOpenedDirectory(handle);
+        let descriptorPath;
+        try {
+            descriptorPath = await verifyDescriptorPath(handle.fd, runPath);
+        }
+        catch {
+            throw new DashboardGenerationRaceError();
+        }
+        if (descriptorPath === undefined ||
+            !isProperDescendant(canonicalRoot, descriptorPath)) {
+            throw new DashboardGenerationRaceError();
+        }
+        return identity;
+    }
+    async function inspectCurrentDirectoryIdentity(configuredRoot, runId) {
+        try {
+            const canonicalRoot = await fileSystem.realpath(configuredRoot);
+            const rootHandle = await fileSystem.open(canonicalRoot, directoryFlags);
+            try {
+                const rootIdentity = await inspectOpenedDirectory(rootHandle);
+                const runPath = resolve(canonicalRoot, runId);
+                const runHandle = await fileSystem.open(runPath, directoryFlags);
+                try {
+                    const runIdentity = await inspectInitiallyOpenedRunDirectory(runHandle, canonicalRoot, runPath);
+                    await verifyCurrentDirectoryIdentity(fileSystem, runPath, directoryFlags, runIdentity);
+                    await verifyCurrentDirectoryIdentity(fileSystem, canonicalRoot, directoryFlags, rootIdentity);
+                    return {
+                        kind: "present",
+                        directoryIdentity: runIdentity,
+                        rootIdentity,
+                    };
+                }
+                finally {
+                    await runHandle.close();
+                }
+            }
+            finally {
+                await rootHandle.close();
+            }
+        }
+        catch {
+            return { kind: "missing" };
+        }
+    }
+    function unavailable(runId, reason, admission) {
+        return {
+            kind: "unavailable",
+            runId,
+            reason,
+            ...(options.includeUnavailableAdmissionMetadata === true && admission !== undefined
+                ? { admission }
+                : {}),
+        };
+    }
+    async function admitUnavailableDirectory(configuredRoot, runId) {
+        try {
+            const cacheKey = resolve(configuredRoot);
+            const canonicalRoot = await fileSystem.realpath(configuredRoot);
+            const rootHandle = await fileSystem.open(canonicalRoot, directoryFlags);
+            try {
+                const rootIdentity = await inspectOpenedDirectory(rootHandle);
+                let cache = rootCache.get(cacheKey);
+                if (cache === undefined ||
+                    cache.canonicalRoot !== canonicalRoot ||
+                    !directoryIdentitiesEqual(cache.identity, rootIdentity)) {
+                    cache = {
+                        canonicalRoot,
+                        identity: rootIdentity,
+                        generations: new Map(),
+                    };
+                    rootCache.set(cacheKey, cache);
+                }
+                const runPath = resolve(canonicalRoot, runId);
+                const runHandleA = await fileSystem.open(runPath, directoryFlags);
+                try {
+                    const identityA = await inspectInitiallyOpenedRunDirectory(runHandleA, canonicalRoot, runPath);
+                    const runHandleB = await fileSystem.open(runPath, directoryFlags);
+                    try {
+                        const identityB = await inspectOpenedDirectory(runHandleB);
+                        if (!directoryIdentitiesEqual(identityA, identityB))
+                            return undefined;
+                        await verifyCurrentDirectoryIdentity(fileSystem, canonicalRoot, directoryFlags, rootIdentity);
+                        return {
+                            runGeneration: runGeneration(cache, runId, rootIdentity, identityA),
+                            sourceBytes: 0,
+                            directoryIdentity: identityA,
+                            rootIdentity,
+                        };
+                    }
+                    finally {
+                        await runHandleB.close();
+                    }
+                }
+                finally {
+                    await runHandleA.close();
+                }
+            }
+            finally {
+                await rootHandle.close();
+            }
+        }
+        catch {
+            return undefined;
+        }
+    }
+    async function readAttempt(configuredRoot, runId, attempt) {
+        const cacheKey = resolve(configuredRoot);
+        let canonicalRoot;
+        try {
+            canonicalRoot = await fileSystem.realpath(configuredRoot);
+        }
+        catch (error) {
+            if (hasErrorCode(error, "ENOENT")) {
+                rootCache.delete(cacheKey);
+                return { kind: "missing", runId };
+            }
+            logger.debug({ err: error, runId }, "dashboard runs root could not be canonicalized");
+            return { kind: "unavailable", runId, reason: "state_unreadable" };
+        }
+        let rootHandle;
+        try {
+            rootHandle = await fileSystem.open(canonicalRoot, directoryFlags);
+        }
+        catch (error) {
+            if (hasErrorCode(error, "ENOENT")) {
+                rootCache.delete(cacheKey);
+                return { kind: "missing", runId };
+            }
+            logger.debug({ err: error, runId }, "dashboard runs root could not be opened");
+            return { kind: "unavailable", runId, reason: "path_rejected" };
+        }
+        try {
+            const rootIdentity = await inspectOpenedDirectory(rootHandle);
+            let cache = rootCache.get(cacheKey);
+            if (cache === undefined ||
+                cache.canonicalRoot !== canonicalRoot ||
+                !directoryIdentitiesEqual(cache.identity, rootIdentity)) {
+                cache = {
+                    canonicalRoot,
+                    identity: rootIdentity,
+                    generations: new Map(),
+                };
+                rootCache.set(cacheKey, cache);
+            }
+            const runPath = resolve(canonicalRoot, runId);
+            let runHandle;
+            try {
+                runHandle = await fileSystem.open(runPath, directoryFlags);
+            }
+            catch (error) {
+                if (hasErrorCode(error, "ENOENT")) {
+                    cache.generations.delete(runId);
+                    return { kind: "missing", runId };
+                }
+                logger.debug({ err: error, runId }, "dashboard run directory could not be opened");
+                return { kind: "unavailable", runId, reason: "path_rejected" };
+            }
+            try {
+                const identityA = await inspectInitiallyOpenedRunDirectory(runHandle, canonicalRoot, runPath);
+                const hookContext = { attempt, canonicalRunsRoot: canonicalRoot, runId };
+                await options.hooks?.afterDirectoryAdmission?.(hookContext);
+                const verifyCurrentDirectory = async () => {
+                    let currentRunHandle;
+                    try {
+                        currentRunHandle = await fileSystem.open(runPath, directoryFlags);
+                    }
+                    catch {
+                        throw new DashboardGenerationRaceError();
+                    }
+                    try {
+                        const identityB = await inspectOpenedDirectory(currentRunHandle);
+                        if (!directoryIdentitiesEqual(identityA, identityB)) {
+                            throw new DashboardGenerationRaceError();
+                        }
+                    }
+                    finally {
+                        await currentRunHandle.close();
+                    }
+                };
+                const verifyStateBeforeClose = async (stateHandle) => {
+                    await options.hooks?.beforeCommitVerification?.(hookContext);
+                    await verifyCurrentDirectory();
+                    const currentStatePath = await stateHandle.resolveRealPath();
+                    if (stateHandle.fingerprint.nlink === 0n ||
+                        currentStatePath !== resolve(runPath, "state.json")) {
+                        throw new DashboardGenerationRaceError();
+                    }
+                };
+                const verifyRootStillCurrent = async () => {
+                    await verifyCurrentDirectoryIdentity(fileSystem, canonicalRoot, directoryFlags, rootIdentity);
+                };
+                const unavailableAdmission = (sourceBytes, stateFingerprint) => ({
+                    runGeneration: runGeneration(cache, runId, rootIdentity, identityA),
+                    sourceBytes,
+                    ...(stateFingerprint === undefined ? {} : { stateFingerprint }),
+                    directoryIdentity: identityA,
+                    rootIdentity,
+                });
+                let stateRead;
+                try {
+                    stateRead = await readStateFile(canonicalRoot, `${runId}/state.json`, {
+                        wantBytes: true,
+                        requireRegular: true,
+                        maxBytes: maxStateBytes,
+                        descriptorPathVerifier: verifyDescriptorPath,
+                        requireExactRequestedPath: true,
+                        beforeClose: verifyStateBeforeClose,
+                    });
+                }
+                catch (error) {
+                    if (error instanceof DashboardGenerationRaceError)
+                        throw error;
+                    if (error instanceof ContainedFileChangedError) {
+                        throw new DashboardGenerationRaceError();
+                    }
+                    if (hasErrorCode(error, "ENOENT")) {
+                        return { kind: "missing", runId };
+                    }
+                    if (error instanceof ContainedFileTooLargeError) {
+                        if (error.size !== undefined && error.fingerprint !== undefined) {
+                            await verifyRootStillCurrent();
+                            return unavailable(runId, "too_large_for_dashboard", unavailableAdmission(error.size, error.fingerprint));
+                        }
+                        await verifyCurrentDirectory();
+                        await verifyRootStillCurrent();
+                        return unavailable(runId, "state_unreadable", unavailableAdmission(0));
+                    }
+                    if (error instanceof ContainedFilePolicyError) {
+                        await verifyCurrentDirectory();
+                        await verifyRootStillCurrent();
+                        return unavailable(runId, "path_rejected", unavailableAdmission(0));
+                    }
+                    logger.debug({ err: error, runId }, "dashboard state could not be read");
+                    await verifyCurrentDirectory();
+                    await verifyRootStillCurrent();
+                    return unavailable(runId, "state_unreadable", unavailableAdmission(0));
+                }
+                await verifyRootStillCurrent();
+                let rawState;
+                try {
+                    rawState = JSON.parse(stateRead.bytes.toString("utf-8"));
+                }
+                catch {
+                    return unavailable(runId, "state_invalid", unavailableAdmission(stateRead.size, stateRead.fingerprint));
+                }
+                const decoded = parseDashboardRunState(rawState, runId);
+                if (!decoded.ok) {
+                    return unavailable(runId, decoded.reason, unavailableAdmission(stateRead.size, stateRead.fingerprint));
+                }
+                return {
+                    kind: "admitted",
+                    runId,
+                    runGeneration: runGeneration(cache, runId, rootIdentity, identityA),
+                    state: decoded.state,
+                    sourceBytes: stateRead.size,
+                    stateFingerprint: stateRead.fingerprint,
+                    directoryIdentity: identityA,
+                    rootIdentity,
+                };
+            }
+            finally {
+                await runHandle.close();
+            }
+        }
+        finally {
+            await rootHandle.close();
+        }
+    }
+    return {
+        async read(runsRoot, runId) {
+            try {
+                validateRunId(runId);
+            }
+            catch {
+                return { kind: "unavailable", runId, reason: "path_rejected" };
+            }
+            for (const attempt of [1, 2]) {
+                try {
+                    return await readAttempt(runsRoot, runId, attempt);
+                }
+                catch (error) {
+                    if (!(error instanceof DashboardGenerationRaceError)) {
+                        logger.warn({ err: error, runId }, "dashboard run admission failed unexpectedly");
+                        return { kind: "unavailable", runId, reason: "state_unreadable" };
+                    }
+                    if (attempt === 2) {
+                        return unavailable(runId, "run_generation_race", options.includeUnavailableAdmissionMetadata === true
+                            ? await admitUnavailableDirectory(runsRoot, runId)
+                            : undefined);
+                    }
+                }
+            }
+            return { kind: "unavailable", runId, reason: "run_generation_race" };
+        },
+        async inspectDirectoryIdentity(runsRoot, runId) {
+            try {
+                validateRunId(runId);
+            }
+            catch {
+                return { kind: "missing" };
+            }
+            return await inspectCurrentDirectoryIdentity(runsRoot, runId);
+        },
+        async inspectGeneration(runsRoot, runId) {
+            try {
+                validateRunId(runId);
+            }
+            catch {
+                return { kind: "missing" };
+            }
+            const admission = await admitUnavailableDirectory(runsRoot, runId);
+            return admission === undefined
+                ? { kind: "missing" }
+                : { kind: "present", runGeneration: admission.runGeneration };
+        },
+        forget(runsRoot, runId) {
+            rootCache.get(resolve(runsRoot))?.generations.delete(runId);
+        },
+    };
+}
+const defaultDashboardRunReader = createDashboardRunReader();
+export async function readDashboardRun(runsRoot, runId) {
+    return await defaultDashboardRunReader.read(runsRoot, runId);
+}
+//# sourceMappingURL=read-model.js.map

package/clinkx-workflows/dist/dashboard/read-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-model.js","sourceRoot":"","sources":["../../src/dashboard/read-model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,WAAW,EAAoB,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAmB,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,2BAA2B,GAG5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,iCAAiC,IAAI,4CAA4C,EAAE,MAAM,cAAc,CAAC;AACjH,OAAO,EACL,sBAAsB,GAEvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAE9D,MAAM,CAAC,MAAM,iCAAiC,GAAG,4CAA4C,CAAC;AAgH9F,MAAM,4BAA6B,SAAQ,KAAK;CAAG;AAEnD,MAAM,iBAAiB,GAAiC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAE3E,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY;IAChD,OAAQ,KAA+B,EAAE,IAAI,KAAK,IAAI,CAAC;AACzD,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACtD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAkB;IAC3C,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAAgC,EAChC,KAAiC;IAEjC,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QAC3B,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACtB,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,SAAiB;IACzD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/C,OAAO,YAAY,KAAK,EAAE;QACxB,YAAY,KAAK,IAAI;QACrB,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;QACpC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,MAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IACE,CAAC,KAAK,CAAC,WAAW,EAAE;QACpB,KAAK,CAAC,KAAK,KAAK,EAAE,EAClB,CAAC;QACD,MAAM,IAAI,4BAA4B,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,UAAwC,EACxC,IAAY,EACZ,KAAa,EACb,QAAoC;IAEpC,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,4EAA4E;QAC5E,qEAAqE;QACrE,2EAA2E;QAC3E,8EAA8E;QAC9E,qEAAqE;QACrE,6BAA6B;QAC7B,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,4BAA4B,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,4BAA4B,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,KAAqB,EACrB,KAAa,EACb,QAAoC,EACpC,QAAsB;IAEtB,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,OAAO,KAAK,SAAS,IAAI,wBAAwB,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC,UAAU,CAAC;IAC5B,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,EAAE,CAAC;IAC9B,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,UAAqC,EAAE;IAEvC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;IAC3D,MAAM,oBAAoB,GAAG,OAAO,CAAC,sBAAsB;QACzD,2BAA2B,CAAC;IAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,yBAAyB,CAAC;IACzE,MAAM,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAC5D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,iCAAiC,CAAC;IACjF,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ;QACzC,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,CAAC;QAC9B,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;IAEhC,SAAS,aAAa,CACpB,KAAqB,EACrB,KAAa,EACb,YAAwC,EACxC,iBAA6C;QAE7C,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,2BAA2B,CAChC,KAAK,EACL,YAAY,EACZ,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAClB,KAAK,EACL,KAAK,EACL,iBAAiB,EACjB,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,UAAU,kCAAkC,CAC/C,MAAkB,EAClB,aAAqB,EACrB,OAAe;QAEf,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,cAAkC,CAAC;QACvC,IAAI,CAAC;YACH,cAAc,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAA4B,EAAE,CAAC;QAC3C,CAAC;QACD,IACE,cAAc,KAAK,SAAS;YAC5B,CAAC,kBAAkB,CAAC,aAAa,EAAE,cAAc,CAAC,EAClD,CAAC;YACD,MAAM,IAAI,4BAA4B,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,UAAU,+BAA+B,CAC5C,cAAsB,EACtB,KAAa;QASb,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YAChE,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;gBAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBACjE,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,MAAM,kCAAkC,CAC1D,SAAS,EACT,aAAa,EACb,OAAO,CACR,CAAC;oBACF,MAAM,8BAA8B,CAClC,UAAU,EACV,OAAO,EACP,cAAc,EACd,WAAW,CACZ,CAAC;oBACF,MAAM,8BAA8B,CAClC,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,CACb,CAAC;oBACF,OAAO;wBACL,IAAI,EAAE,SAAS;wBACf,iBAAiB,EAAE,WAAW;wBAC9B,YAAY;qBACb,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;gBAC1B,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,SAAS,WAAW,CAClB,KAAa,EACb,MAAqC,EACrC,SAAyC;QAEzC,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,KAAK;YACL,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,mCAAmC,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS;gBACjF,CAAC,CAAC,EAAE,SAAS,EAAE;gBACf,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,yBAAyB,CACtC,cAAsB,EACtB,KAAa;QAEb,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;YACzC,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YAChE,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;gBAC9D,IAAI,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACpC,IACE,KAAK,KAAK,SAAS;oBACnB,KAAK,CAAC,aAAa,KAAK,aAAa;oBACrC,CAAC,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,EACvD,CAAC;oBACD,KAAK,GAAG;wBACN,aAAa;wBACb,QAAQ,EAAE,YAAY;wBACtB,WAAW,EAAE,IAAI,GAAG,EAAE;qBACvB,CAAC;oBACF,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACjC,CAAC;gBAED,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;gBAC9C,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBAClE,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,MAAM,kCAAkC,CACxD,UAAU,EACV,aAAa,EACb,OAAO,CACR,CAAC;oBACF,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;oBAClE,IAAI,CAAC;wBACH,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;wBAC3D,IACE,CAAC,wBAAwB,CAAC,SAAS,EAAE,SAAS,CAAC;4BAC/C,OAAO,SAAS,CAAC;wBACnB,MAAM,8BAA8B,CAClC,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,CACb,CAAC;wBACF,OAAO;4BACL,aAAa,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC;4BACnE,WAAW,EAAE,CAAC;4BACd,iBAAiB,EAAE,SAAS;4BAC5B,YAAY;yBACb,CAAC;oBACJ,CAAC;4BAAS,CAAC;wBACT,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;oBAC3B,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,cAAsB,EACtB,KAAa,EACb,OAAc;QAEd,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,IAAI,aAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAClC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC3B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACpC,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,gDAAgD,CAAC,CAAC;YACtF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACpE,CAAC;QAED,IAAI,UAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAClC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC3B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACpC,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,yCAAyC,CAAC,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACjE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;YAC9D,IAAI,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,IACE,KAAK,KAAK,SAAS;gBACnB,KAAK,CAAC,aAAa,KAAK,aAAa;gBACrC,CAAC,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,EACvD,CAAC;gBACD,KAAK,GAAG;oBACN,aAAa;oBACb,QAAQ,EAAE,YAAY;oBACtB,WAAW,EAAE,IAAI,GAAG,EAAE;iBACvB,CAAC;gBACF,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC9C,IAAI,SAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAClC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;gBACpC,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,6CAA6C,CAAC,CAAC;gBACnF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YACjE,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,kCAAkC,CACxD,SAAS,EACT,aAAa,EACb,OAAO,CACR,CAAC;gBACF,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;gBACzE,MAAM,OAAO,CAAC,KAAK,EAAE,uBAAuB,EAAE,CAAC,WAAW,CAAC,CAAC;gBAE5D,MAAM,sBAAsB,GAAG,KAAK,IAAmB,EAAE;oBACvD,IAAI,gBAA4B,CAAC;oBACjC,IAAI,CAAC;wBACH,gBAAgB,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;oBACpE,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,IAAI,4BAA4B,EAAE,CAAC;oBAC3C,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;wBACjE,IAAI,CAAC,wBAAwB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;4BACpD,MAAM,IAAI,4BAA4B,EAAE,CAAC;wBAC3C,CAAC;oBACH,CAAC;4BAAS,CAAC;wBACT,MAAM,gBAAgB,CAAC,KAAK,EAAE,CAAC;oBACjC,CAAC;gBACH,CAAC,CAAC;gBAEF,MAAM,sBAAsB,GAAG,KAAK,EAClC,WAA4H,EAC7G,EAAE;oBACjB,MAAM,OAAO,CAAC,KAAK,EAAE,wBAAwB,EAAE,CAAC,WAAW,CAAC,CAAC;oBAC7D,MAAM,sBAAsB,EAAE,CAAC;oBAC/B,MAAM,gBAAgB,GAAG,MAAM,WAAW,CAAC,eAAe,EAAE,CAAC;oBAC7D,IACE,WAAW,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE;wBACpC,gBAAgB,KAAK,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,EACnD,CAAC;wBACD,MAAM,IAAI,4BAA4B,EAAE,CAAC;oBAC3C,CAAC;gBACH,CAAC,CAAC;gBAEF,MAAM,sBAAsB,GAAG,KAAK,IAAmB,EAAE;oBACvD,MAAM,8BAA8B,CAClC,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,CACb,CAAC;gBACJ,CAAC,CAAC;gBAEF,MAAM,oBAAoB,GAAG,CAC3B,WAAmB,EACnB,gBAA2C,EACZ,EAAE,CAAC,CAAC;oBACnC,aAAa,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC;oBACnE,WAAW;oBACX,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;oBAC/D,iBAAiB,EAAE,SAAS;oBAC5B,YAAY;iBACb,CAAC,CAAC;gBAEH,IAAI,SAAS,CAAC;gBACd,IAAI,CAAC;oBACH,SAAS,GAAG,MAAM,aAAa,CAAC,aAAa,EAAE,GAAG,KAAK,aAAa,EAAE;wBACpE,SAAS,EAAE,IAAI;wBACf,cAAc,EAAE,IAAI;wBACpB,QAAQ,EAAE,aAAa;wBACvB,sBAAsB,EAAE,oBAAoB;wBAC5C,yBAAyB,EAAE,IAAI;wBAC/B,WAAW,EAAE,sBAAsB;qBACpC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,4BAA4B;wBAAE,MAAM,KAAK,CAAC;oBAC/D,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;wBAC/C,MAAM,IAAI,4BAA4B,EAAE,CAAC;oBAC3C,CAAC;oBACD,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;wBAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;oBACpC,CAAC;oBACD,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;wBAChD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;4BAChE,MAAM,sBAAsB,EAAE,CAAC;4BAC/B,OAAO,WAAW,CAChB,KAAK,EACL,yBAAyB,EACzB,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CACpD,CAAC;wBACJ,CAAC;wBACD,MAAM,sBAAsB,EAAE,CAAC;wBAC/B,MAAM,sBAAsB,EAAE,CAAC;wBAC/B,OAAO,WAAW,CAAC,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzE,CAAC;oBACD,IAAI,KAAK,YAAY,wBAAwB,EAAE,CAAC;wBAC9C,MAAM,sBAAsB,EAAE,CAAC;wBAC/B,MAAM,sBAAsB,EAAE,CAAC;wBAC/B,OAAO,WAAW,CAAC,KAAK,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtE,CAAC;oBACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,mCAAmC,CAAC,CAAC;oBACzE,MAAM,sBAAsB,EAAE,CAAC;oBAC/B,MAAM,sBAAsB,EAAE,CAAC;oBAC/B,OAAO,WAAW,CAAC,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzE,CAAC;gBAED,MAAM,sBAAsB,EAAE,CAAC;gBAE/B,IAAI,QAAiB,CAAC;gBACtB,IAAI,CAAC;oBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,WAAW,CAChB,KAAK,EACL,eAAe,EACf,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,CAC5D,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACxD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAChB,OAAO,WAAW,CAChB,KAAK,EACL,OAAO,CAAC,MAAM,EACd,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,CAC5D,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,KAAK;oBACL,aAAa,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC;oBACnE,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,WAAW,EAAE,SAAS,CAAC,IAAI;oBAC3B,gBAAgB,EAAE,SAAS,CAAC,WAAW;oBACvC,iBAAiB,EAAE,SAAS;oBAC5B,YAAY;iBACb,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK;YACxB,IAAI,CAAC;gBACH,aAAa,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YACjE,CAAC;YAED,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,CAAU,EAAE,CAAC;gBACtC,IAAI,CAAC;oBACH,OAAO,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBACrD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,4BAA4B,CAAC,EAAE,CAAC;wBACrD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,6CAA6C,CAAC,CAAC;wBAClF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;oBACpE,CAAC;oBACD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;wBAClB,OAAO,WAAW,CAChB,KAAK,EACL,qBAAqB,EACrB,OAAO,CAAC,mCAAmC,KAAK,IAAI;4BAClD,CAAC,CAAC,MAAM,yBAAyB,CAAC,QAAQ,EAAE,KAAK,CAAC;4BAClD,CAAC,CAAC,SAAS,CACd,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,wBAAwB,CAAC,QAAQ,EAAE,KAAK;YAC5C,IAAI,CAAC;gBACH,aAAa,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC7B,CAAC;YACD,OAAO,MAAM,+BAA+B,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;QACD,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK;YACrC,IAAI,CAAC;gBACH,aAAa,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC7B,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACnE,OAAO,SAAS,KAAK,SAAS;gBAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;gBACrB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC;QAClE,CAAC;QACD,MAAM,CAAC,QAAQ,EAAE,KAAK;YACpB,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,yBAAyB,GAAG,wBAAwB,EAAE,CAAC;AAE7D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,KAAa;IAEb,OAAO,MAAM,yBAAyB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC"}