create-workframe 0.1.17 → 0.1.20

package/workframe-api/turn_overlay.py

@@ -131,9 +131,7 @@ def _set_profile_model_base_url(profile: str, base_url: str) -> tuple[bool, str]
 
 
 def _proxy_fallback_chain(profile: str, billing_provider: str) -> None:
-    """Runtime fallbacks use provider=custom so Hermes keeps the proxy + lease."""
-    if not _srv()._is_runtime_profile_slug(profile):
-        return
+    """Vault-backed fallbacks use provider=custom so Hermes keeps proxy auth."""
     block = _srv()._read_model_block(profile)
     chain = block.get("fallback_chain") or []
     billing = str(billing_provider or "openrouter").strip().lower()
@@ -214,16 +212,17 @@ def _profile_llm_proxy_ready(profile: str, provider: str) -> bool:
     llm_provider = str(provider or "openrouter").strip().lower()
     if str(block.get("base_url") or "").strip() != _llm_proxy_base_url(llm_provider):
         return False
-    if not _srv()._is_runtime_profile_slug(prof):
-        return True
     if str(block.get("provider") or "").strip().lower() != "custom":
         return False
+    valid_fallbacks = 0
     for entry in block.get("fallback_chain") or []:
         prov = str(entry.get("provider", "")).strip().lower()
         model = str(entry.get("model", "")).strip()
+        if model and prov:
+            valid_fallbacks += 1
         if model and prov == llm_provider and prov != "custom":
             return False
-    return True
+    return valid_fallbacks > 0
 
 
 def _ensure_profile_llm_proxy(profile: str, provider: str) -> None:
@@ -232,20 +231,22 @@ def _ensure_profile_llm_proxy(profile: str, provider: str) -> None:
     prof = _srv().safe_profile_slug(profile)
     if _srv()._oauth_llm_provider_spec(llm_provider):
         _srv()._normalize_profile_config_yaml(prof)
-        _srv()._apply_mvp_model_for_provider(prof, llm_provider)
+        current_model = str(_srv()._read_model_block(prof).get("default") or "").strip()
+        if current_model:
+            _srv()._apply_model_for_billing_provider(prof, llm_provider, current_model)
+        else:
+            _srv()._apply_mvp_model_for_provider(prof, llm_provider)
         return
     _srv()._normalize_profile_config_yaml(prof)
     if _profile_llm_proxy_ready(prof, llm_provider):
         _ensure_profile_proxy_headers(prof)
-        if _srv()._is_runtime_profile_slug(prof):
-            _proxy_fallback_chain(prof, llm_provider)
+        _proxy_fallback_chain(prof, llm_provider)
         return
     _coalesce_profile_model_yaml(prof)
     _set_profile_model_base_url(prof, _llm_proxy_base_url(llm_provider))
     _ensure_profile_proxy_headers(prof)
-    if _srv()._is_runtime_profile_slug(prof):
-        _srv()._set_profile_model_provider(prof, "custom")
-        _proxy_fallback_chain(prof, llm_provider)
+    _srv()._set_profile_model_provider(prof, "custom")
+    _proxy_fallback_chain(prof, llm_provider)
 
 
 def _set_profile_model_api_key(profile: str, api_key: str) -> tuple[bool, str]:
@@ -345,6 +346,24 @@ def _read_config_model_api_key(profile: str) -> str:
     return str(_srv()._read_model_block(profile).get("api_key") or "").strip()
 
 
+def _runtime_llm_lease_id(
+    profile: str,
+    user_id: str,
+    workspace_id: str,
+    provider: str,
+) -> str:
+    """Stable DB key for the opaque credential bound to one user runtime."""
+    seed = "\x1f".join(
+        (
+            str(profile or "").strip(),
+            str(user_id or "").strip(),
+            str(workspace_id or "").strip(),
+            str(provider or "openrouter").strip().lower(),
+        ),
+    )
+    return f"runtime-llm:{uuid.uuid5(uuid.NAMESPACE_URL, seed).hex}"
+
+
 
 
 def _sync_profile_model_api_key(profile: str, api_key: str, *, wait_healthy: bool = False) -> None:
@@ -405,8 +424,16 @@ def _apply_turn_credential_lease(
     workspace_id: str,
     provider: str,
     run_id: str,
+    *,
+    wait_healthy: bool = True,
 ) -> str:
-    """Issue per-run lease token into profile env; real secret stays in API vault."""
+    """Bind an opaque LLM broker token to the user runtime.
+
+    ``run_id`` remains part of the public call shape because action credentials
+    really are turn-scoped.  LLM credentials are runtime-scoped: Hermes caches
+    ``model.api_key``, so per-turn rotation/revocation would restart the gateway
+    during normal chat and sever active streams.
+    """
     provider = str(provider or "openrouter").strip().lower()
     prof = _srv().resolve_hermes_profile(profile)
     env_var = _profile_lease_env_var(prof, provider)
@@ -428,9 +455,9 @@ def _apply_turn_credential_lease(
             binding_id=str(lease_meta.get("credential_binding_id") or ""),
         ):
             # ponytail: hot path — skip credential resolve + env rewrite when lease still valid
-            if _srv()._is_runtime_profile_slug(prof) and existing_token:
+            if existing_token:
                 if _read_config_model_api_key(prof) != existing_token:
-                    _sync_profile_model_api_key(prof, existing_token)
+                    _sync_profile_model_api_key(prof, existing_token, wait_healthy=wait_healthy)
             return existing_token
 
     if _srv()._is_runtime_profile_slug(prof):
@@ -442,7 +469,7 @@ def _apply_turn_credential_lease(
         _srv()._sync_oauth_llm_to_profile(prof, user_id, provider)
         if not _srv()._profile_routing_matches_billing(prof, provider):
             current_model = str(_srv()._read_model_from_config(prof)[1] or "").strip()
-            if not _srv()._resolve_billing_provider_for_model(current_model, {provider}):
+            if not current_model:
                 current_model = str(
                     (_srv().PROVIDER_MVP_MODELS.get(provider) or {}).get("primary") or current_model
                 ).strip()
@@ -472,24 +499,27 @@ def _apply_turn_credential_lease(
         provider=provider,
         binding_id=binding_id,
     ):
-        if _srv()._is_runtime_profile_slug(prof) and existing_token:
+        if existing_token:
             if _read_config_model_api_key(prof) != existing_token:
-                _sync_profile_model_api_key(prof, existing_token)
+                _sync_profile_model_api_key(prof, existing_token, wait_healthy=wait_healthy)
         return existing_token
 
+    lease_id = _runtime_llm_lease_id(prof, user_id, workspace_id, provider)
     token = turn_credentials.issue_lease(
-        run_id,
+        lease_id,
         user_id,
         workspace_id,
         provider,
         prof,
         binding_id or None,
+        ttl_seconds=turn_credentials.RUNTIME_TTL,
     )
     if token != existing_token:
         _srv()._upsert_env_secret(_srv()._profile_dir(prof) / ".env", env_var, token)
-    if _srv()._is_runtime_profile_slug(prof):
-        _ensure_profile_llm_proxy(prof, provider)
-        _sync_profile_model_api_key(prof, token)
+    _ensure_profile_llm_proxy(prof, provider)
+    # config.yaml is cached by Hermes. Wait for the reload here; scheduling it
+    # in the background races the request and causes intermittent disconnects.
+    _sync_profile_model_api_key(prof, token, wait_healthy=wait_healthy)
     return token
 
 
@@ -608,20 +638,33 @@ def _apply_action_credential_lease(
 
 
 def _revoke_turn_credential_lease(run_id: str, profile: str) -> None:
-    """Revoke lease in DB; clear stale bearer from runtime profile config/gateway."""
+    """Revoke genuinely turn-scoped action leases after a run.
+
+    The profile's LLM broker token is deliberately retained. It contains no
+    provider secret, is profile-bound by the internal proxy, and is resolved
+    against the owner's current vault binding on every request.
+    """
     run_id = str(run_id or "").strip()
     if not run_id:
         return
-    turn_credentials.revoke_lease(run_id)
     for provider_id, _env_var in _user_action_env_specs():
         turn_credentials.revoke_lease(f"{run_id}::{provider_id}")
-    prof = _srv().resolve_hermes_profile(profile)
-    if not _srv()._is_runtime_profile_slug(prof):
-        return
-    config_key = _read_config_model_api_key(prof)
-    if config_key.startswith(turn_credentials.LEASE_PREFIX):
-        _clear_profile_model_api_key(prof)
-        _srv()._restart_runtime_profile_gateway(prof)
+
+
+def _revoke_runtime_llm_leases(
+    *,
+    payer_user_id: str = "",
+    workspace_id: str = "",
+    provider: str = "",
+    credential_binding_id: str = "",
+) -> int:
+    """Invalidate opaque runtime credentials when vault authority changes."""
+    return turn_credentials.revoke_matching_leases(
+        payer_user_id=payer_user_id,
+        workspace_id=workspace_id,
+        provider=provider,
+        credential_binding_id=credential_binding_id,
+    )
 
 
 def _require_user_provider(user_id: str, workspace_id: str, provider: str) -> dict[str, Any]:
@@ -736,11 +779,20 @@ def _overlay_turn_provider_env(
     workspace_id: str,
     provider: str,
     run_id: str = "",
+    *,
+    wait_healthy: bool = True,
 ) -> str:
-    """Per-run lease into profile env; upstream key resolved only inside workframe-api."""
+    """Runtime broker credential into profile env; raw key stays API-only."""
     run_id = str(run_id or "").strip() or str(uuid.uuid4())
     # ponytail: yaml sync + gateway reload are async on the send path — never block TTFT (~40s).
-    return _apply_turn_credential_lease(profile, user_id, workspace_id, provider, run_id)
+    return _apply_turn_credential_lease(
+        profile,
+        user_id,
+        workspace_id,
+        provider,
+        run_id,
+        wait_healthy=wait_healthy,
+    )
 
 
 def _try_overlay_turn_provider_env(
@@ -749,10 +801,19 @@ def _try_overlay_turn_provider_env(
     workspace_id: str,
     provider: str,
     run_id: str = "",
+    *,
+    wait_healthy: bool = True,
 ) -> bool:
     """Best-effort LLM lease; returns False when the user has no key yet."""
     try:
-        _overlay_turn_provider_env(profile, user_id, workspace_id, provider, run_id)
+        _overlay_turn_provider_env(
+            profile,
+            user_id,
+            workspace_id,
+            provider,
+            run_id,
+            wait_healthy=wait_healthy,
+        )
         return True
     except ValueError as exc:
         if "no_llm_provider_for_user" in str(exc):

package/workframe-api/updates.py

@@ -96,11 +96,13 @@ def prefetch_workframe_npm_tarball(version: str) -> str:
             body = resp.read()
     except (urllib.error.URLError, TimeoutError, OSError) as exc:
         raise ValueError(f"npm_download_failed:{exc}") from exc
-    if integrity.startswith("sha512-"):
-        actual = "sha512-" + base64.b64encode(hashlib.sha512(body).digest()).decode()
-        if actual != integrity:
-            raise ValueError("npm_integrity_mismatch")
+    if not integrity.startswith("sha512-"):
+        raise ValueError("npm_integrity_missing")
+    actual = "sha512-" + base64.b64encode(hashlib.sha512(body).digest()).decode()
+    if actual != integrity:
+        raise ValueError("npm_integrity_mismatch")
     dest.write_bytes(body)
+    dest.with_suffix(dest.suffix + ".sha512").write_text(actual + "\n", encoding="utf-8")
     return _supervisor_tarball_path(pkg, ver)
 
 
@@ -540,7 +542,9 @@ def _run_apply_scripts(target: str, env: dict[str, str]) -> dict[str, Any]:
         )
         logs.append(f"=== {script} (exit {proc.returncode}) ===\n{proc.stdout}\n{proc.stderr}")
         if proc.returncode != 0:
-            raise ValueError(f"update_failed:{Path(script).name}")
+            detail = (proc.stderr or proc.stdout).strip().splitlines()
+            tail = detail[-1].strip() if detail else f"exit_{proc.returncode}"
+            raise ValueError(f"update_failed:{Path(script).name}:{tail[-600:]}")
     return {"ok": True, "target": target, "log": "\n".join(logs)[-12000:]}
 
 
@@ -573,6 +577,11 @@ def apply_update(target: str, *, user_ack: bool = False) -> dict[str, Any]:
 
     if channel == "supervisor":
         body: dict[str, Any] = {"target": target}
+        host_compose_dir = str(os.environ.get("WORKFRAME_HOST_COMPOSE_DIR") or "").strip()
+        host_project_root = str(os.environ.get("WORKFRAME_HOST_PROJECT_ROOT") or "").strip()
+        if host_compose_dir and host_project_root:
+            body["host_compose_dir"] = host_compose_dir
+            body["host_project_root"] = host_project_root
         if workframe_version:
             body["workframe_version"] = workframe_version
         if workframe_tarball:

package/workframe-api/user_prefs.py

@@ -192,6 +192,21 @@ def apply_me_profile_updates(user_id: str, body: dict[str, Any]) -> dict[str, An
         platform_ids = parse_user_platform_ids(body.get("platform_ids"))
         conn = _srv()._workframe_db()
         try:
+            current_row = conn.execute(
+                "SELECT platform_ids FROM users WHERE id = ?", (user_id,),
+            ).fetchone()
+            if current_row:
+                try:
+                    current_ids = json.loads(current_row["platform_ids"] or "{}")
+                except (TypeError, json.JSONDecodeError):
+                    current_ids = {}
+                if isinstance(current_ids, dict):
+                    # LLM preferences share this legacy JSON column but are
+                    # not public messaging identities. Preserve them when
+                    # Linked Accounts saves discord/telegram/slack values.
+                    for key in ("llm_primary", "llm_fallback_chain"):
+                        if key in current_ids:
+                            platform_ids[key] = current_ids[key]
             now_ts = str(int(time.time()))
             conn.execute(
                 "UPDATE users SET platform_ids = ?, updated_at = ? WHERE id = ?",

package/workframe-api/workspace_bootstrap.py

@@ -527,6 +527,7 @@ def _ensure_default_workspace() -> bool:
         display_name=native_display,
         role="native",
         is_native=True,
+        preserve_existing_identity=True,
     )
     return True
 

package/workframe-api/workspace_files.py

@@ -3,9 +3,12 @@
 from __future__ import annotations
 
 import base64
+import io
 import mimetypes
+import os
 import threading
 import time
+import zipfile
 from pathlib import Path
 from typing import Any
 
@@ -26,6 +29,8 @@ TREE_SKIP_NAMES = {
 
 PROTECTED_WORKSPACE_FILE_NAMES = {"AGENTS.md", ".hermes.md"}
 PROTECTED_PROFILE_CONFIG_FILE_NAMES = {"config.yaml", "profile.yaml"}
+MAX_FILE_ACTION_COUNT = 500
+MAX_ARCHIVE_BYTES = 100 * 1024 * 1024
 
 _workspace_state_lock = threading.Lock()
 _workspace_state_cache: dict[str, Any] = {
@@ -342,3 +347,122 @@ def file_raw(rel: str) -> tuple[bytes, str]:
         raise ValueError("not found")
     mime, _ = mimetypes.guess_type(str(fp))
     return fp.read_bytes(), mime or "application/octet-stream"
+
+
+def _selected_workspace_paths(paths: list[Any]) -> list[tuple[str, Path]]:
+    if not isinstance(paths, list) or not paths:
+        raise ValueError("select at least one file")
+    if len(paths) > MAX_FILE_ACTION_COUNT:
+        raise ValueError(f"select at most {MAX_FILE_ACTION_COUNT} files")
+
+    selected: list[tuple[str, Path]] = []
+    seen: set[str] = set()
+    for raw in paths:
+        rel = _normalized_workspace_rel(str(raw or "").strip())
+        if not rel:
+            continue
+        reason = workspace_protected_reason(rel)
+        if reason:
+            raise PermissionError(f"protected file: {reason}")
+        path = safe_workspace_path(rel)
+        if path is None or not path.exists():
+            raise ValueError(f"file not found: {rel}")
+        canonical_rel = _workspace_rel(path)
+        if canonical_rel in seen:
+            continue
+        selected.append((canonical_rel, path))
+        seen.add(canonical_rel)
+
+    if not selected:
+        raise ValueError("select at least one file")
+    return selected
+
+
+def _selected_workspace_files(paths: list[Any]) -> list[tuple[str, Path]]:
+    selected = _selected_workspace_paths(paths)
+    for rel, path in selected:
+        if not path.is_file():
+            raise ValueError(f"not a file: {rel}")
+    return selected
+
+
+def _archive_workspace_files(paths: list[Any]) -> list[tuple[str, Path]]:
+    selected = _selected_workspace_paths(paths)
+    files: dict[str, Path] = {}
+
+    def add_file(path: Path) -> None:
+        try:
+            rel = _workspace_rel(path)
+        except ValueError as exc:
+            raise ValueError("selected file is outside the workspace") from exc
+        if workspace_protected_reason(rel):
+            return
+        if any(part in TREE_SKIP_NAMES for part in Path(rel).parts):
+            return
+        files.setdefault(rel, path)
+        if len(files) > MAX_FILE_ACTION_COUNT:
+            raise ValueError(f"select at most {MAX_FILE_ACTION_COUNT} files")
+
+    for rel, path in selected:
+        if path.is_file():
+            add_file(path)
+            continue
+        if not path.is_dir():
+            raise ValueError(f"not a file or folder: {rel}")
+        def on_walk_error(exc: OSError) -> None:
+            raise ValueError(f"could not read folder: {rel}") from exc
+
+        for folder, dirnames, filenames in os.walk(path, followlinks=False, onerror=on_walk_error):
+            folder_path = Path(folder)
+            dirnames[:] = sorted(
+                (
+                    name
+                    for name in dirnames
+                    if name not in TREE_SKIP_NAMES
+                    and not workspace_protected_reason(_workspace_rel(folder_path / name))
+                ),
+                key=str.lower,
+            )
+            for filename in sorted(filenames, key=str.lower):
+                add_file(folder_path / filename)
+
+    if not files:
+        raise ValueError("selected folders do not contain downloadable files")
+    return sorted(files.items(), key=lambda item: item[0].lower())
+
+
+def files_archive(paths: list[Any]) -> bytes:
+    selected = _archive_workspace_files(paths)
+    total_bytes = 0
+    for _, path in selected:
+        try:
+            total_bytes += path.stat().st_size
+        except OSError as exc:
+            raise ValueError("could not read selected file") from exc
+        if total_bytes > MAX_ARCHIVE_BYTES:
+            raise ValueError("selected files exceed the 100 MB download limit")
+
+    output = io.BytesIO()
+    try:
+        with zipfile.ZipFile(output, mode="w", compression=zipfile.ZIP_DEFLATED, compresslevel=6) as archive:
+            for rel, path in selected:
+                archive.write(path, arcname=rel)
+    except OSError as exc:
+        raise ValueError("could not archive selected files") from exc
+    return output.getvalue()
+
+
+def files_delete(paths: list[Any]) -> dict[str, Any]:
+    # Validate the complete batch before mutating anything so a stale or protected
+    # selection cannot produce a partial deletion.
+    selected = _selected_workspace_files(paths)
+    deleted: list[str] = []
+    for rel, path in selected:
+        try:
+            path.unlink()
+        except OSError as exc:
+            raise ValueError(f"could not delete file: {rel}") from exc
+        deleted.append(rel)
+
+    bump_workspace_state(selected[0][1])
+    return {"ok": True, "deleted": deleted, "count": len(deleted)}

package/workframe-supervisor/server.py

@@ -60,7 +60,14 @@ def _exec_targets_runtime_profile_secrets(cmd: list[str], acting_profile: str =
     return exec_blocked_for_profile(cmd, acting_profile)
 
 
-def _stack_apply(target: str, *, workframe_version: str = "", workframe_tarball: str = "") -> dict[str, Any]:
+def _stack_apply(
+    target: str,
+    *,
+    workframe_version: str = "",
+    workframe_tarball: str = "",
+    host_compose_dir: str = "",
+    host_project_root: str = "",
+) -> dict[str, Any]:
     target = str(target or "all").strip().lower()
     if target == "gateway-restart":
         script = SCRIPTS_DIR / "restart-gateway-hermes.sh"
@@ -94,6 +101,9 @@ def _stack_apply(target: str, *, workframe_version: str = "", workframe_tarball:
     version = str(workframe_version or "").strip()
     tarball = str(workframe_tarball or "").strip()
     env["WORKFRAME_UPDATE_FROM_SUPERVISOR"] = "1"
+    if host_compose_dir and host_project_root:
+        env["WORKFRAME_HOST_COMPOSE_DIR"] = str(host_compose_dir).strip()
+        env["WORKFRAME_HOST_PROJECT_ROOT"] = str(host_project_root).strip()
     if tarball and target in {"workframe", "all"}:
         env["WORKFRAME_UPDATE_TARBALL"] = tarball
         if version:
@@ -113,7 +123,9 @@ def _stack_apply(target: str, *, workframe_version: str = "", workframe_tarball:
         )
         logs.append(f"=== {script} (exit {proc.returncode}) ===\n{proc.stdout}\n{proc.stderr}")
         if proc.returncode != 0:
-            raise ValueError(f"update_failed:{script.name}")
+            detail = (proc.stderr or proc.stdout).strip().splitlines()
+            tail = detail[-1].strip() if detail else f"exit_{proc.returncode}"
+            raise ValueError(f"update_failed:{script.name}:{tail[-600:]}")
     return {"ok": True, "target": target, "log": "\n".join(logs)[-12000:]}
 
 
@@ -796,6 +808,8 @@ class Handler(BaseHTTPRequestHandler):
                 target = str(body.get("target") or "all").strip().lower()
                 workframe_version = str(body.get("workframe_version") or "").strip()
                 workframe_tarball = str(body.get("workframe_tarball") or "").strip()
+                host_compose_dir = str(body.get("host_compose_dir") or "").strip()
+                host_project_root = str(body.get("host_project_root") or "").strip()
                 try:
                     return self._json(
                         200,
@@ -803,6 +817,8 @@ class Handler(BaseHTTPRequestHandler):
                             target,
                             workframe_version=workframe_version,
                             workframe_tarball=workframe_tarball,
+                            host_compose_dir=host_compose_dir,
+                            host_project_root=host_project_root,
                         ),
                     )
                 except ValueError as exc:

package/workframe-ui/public/assets/{arc-esSBm9C_.js → arc-BkATcoqt.js}

@@ -1 +1 @@
-import{n as e,t}from"./path-BWPyau1x.js";import{a as n,c as r,d as i,f as a,i as o,l as s,m as c,n as l,o as u,p as d,r as f,u as p}from"./dist-ubrEgQyZ.js";function m(e){return e.innerRadius}function h(e){return e.outerRadius}function g(e){return e.startAngle}function _(e){return e.endAngle}function v(e){return e&&e.padAngle}function y(e,t,n,r,i,a,o,s){var c=n-e,l=r-t,u=o-i,d=s-a,f=d*c-u*l;if(!(f*f<1e-12))return f=(u*(t-a)-d*(e-i))/f,[e+f*c,t+f*l]}function b(e,t,n,r,i,a,o){var c=e-n,l=t-r,u=(o?a:-a)/d(c*c+l*l),f=u*l,p=-u*c,m=e+f,h=t+p,g=n+f,_=r+p,v=(m+g)/2,y=(h+_)/2,b=g-m,x=_-h,S=b*b+x*x,C=i-a,w=m*_-g*h,T=(x<0?-1:1)*d(s(0,C*C*S-w*w)),E=(w*x-b*T)/S,D=(-w*b-x*T)/S,O=(w*x+b*T)/S,k=(-w*b+x*T)/S,A=E-v,j=D-y,M=O-v,N=k-y;return A*A+j*j>M*M+N*N&&(E=O,D=k),{cx:E,cy:D,x01:-f,y01:-p,x11:E*(i/C-1),y11:D*(i/C-1)}}function x(){var s=m,x=h,S=e(0),C=null,w=g,T=_,E=v,D=null,O=t(k);function k(){var e,t,m=+s.apply(this,arguments),h=+x.apply(this,arguments),g=w.apply(this,arguments)-r,_=T.apply(this,arguments)-r,v=l(_-g),k=_>g;if(D||=e=O(),h<m&&(t=h,h=m,m=t),!(h>1e-12))D.moveTo(0,0);else if(v>c-1e-12)D.moveTo(h*u(g),h*a(g)),D.arc(0,0,h,g,_,!k),m>1e-12&&(D.moveTo(m*u(_),m*a(_)),D.arc(0,0,m,_,g,k));else{var A=g,j=_,M=g,N=_,P=v,F=v,I=E.apply(this,arguments)/2,L=I>1e-12&&(C?+C.apply(this,arguments):d(m*m+h*h)),R=p(l(h-m)/2,+S.apply(this,arguments)),z=R,B=R,V,H;if(L>1e-12){var U=o(L/m*a(I)),W=o(L/h*a(I));(P-=U*2)>1e-12?(U*=k?1:-1,M+=U,N-=U):(P=0,M=N=(g+_)/2),(F-=W*2)>1e-12?(W*=k?1:-1,A+=W,j-=W):(F=0,A=j=(g+_)/2)}var G=h*u(A),K=h*a(A),q=m*u(N),J=m*a(N);if(R>1e-12){var Y=h*u(j),X=h*a(j),Z=m*u(M),Q=m*a(M),$;if(v<i)if($=y(G,K,Z,Q,Y,X,q,J)){var ee=G-$[0],te=K-$[1],ne=Y-$[0],re=X-$[1],ie=1/a(f((ee*ne+te*re)/(d(ee*ee+te*te)*d(ne*ne+re*re)))/2),ae=d($[0]*$[0]+$[1]*$[1]);z=p(R,(m-ae)/(ie-1)),B=p(R,(h-ae)/(ie+1))}else z=B=0}F>1e-12?B>1e-12?(V=b(Z,Q,G,K,h,B,k),H=b(Y,X,q,J,h,B,k),D.moveTo(V.cx+V.x01,V.cy+V.y01),B<R?D.arc(V.cx,V.cy,B,n(V.y01,V.x01),n(H.y01,H.x01),!k):(D.arc(V.cx,V.cy,B,n(V.y01,V.x01),n(V.y11,V.x11),!k),D.arc(0,0,h,n(V.cy+V.y11,V.cx+V.x11),n(H.cy+H.y11,H.cx+H.x11),!k),D.arc(H.cx,H.cy,B,n(H.y11,H.x11),n(H.y01,H.x01),!k))):(D.moveTo(G,K),D.arc(0,0,h,A,j,!k)):D.moveTo(G,K),!(m>1e-12)||!(P>1e-12)?D.lineTo(q,J):z>1e-12?(V=b(q,J,Y,X,m,-z,k),H=b(G,K,Z,Q,m,-z,k),D.lineTo(V.cx+V.x01,V.cy+V.y01),z<R?D.arc(V.cx,V.cy,z,n(V.y01,V.x01),n(H.y01,H.x01),!k):(D.arc(V.cx,V.cy,z,n(V.y01,V.x01),n(V.y11,V.x11),!k),D.arc(0,0,m,n(V.cy+V.y11,V.cx+V.x11),n(H.cy+H.y11,H.cx+H.x11),k),D.arc(H.cx,H.cy,z,n(H.y11,H.x11),n(H.y01,H.x01),!k))):D.arc(0,0,m,N,M,k)}if(D.closePath(),e)return D=null,e+``||null}return k.centroid=function(){var e=(+s.apply(this,arguments)+ +x.apply(this,arguments))/2,t=(+w.apply(this,arguments)+ +T.apply(this,arguments))/2-i/2;return[u(t)*e,a(t)*e]},k.innerRadius=function(t){return arguments.length?(s=typeof t==`function`?t:e(+t),k):s},k.outerRadius=function(t){return arguments.length?(x=typeof t==`function`?t:e(+t),k):x},k.cornerRadius=function(t){return arguments.length?(S=typeof t==`function`?t:e(+t),k):S},k.padRadius=function(t){return arguments.length?(C=t==null?null:typeof t==`function`?t:e(+t),k):C},k.startAngle=function(t){return arguments.length?(w=typeof t==`function`?t:e(+t),k):w},k.endAngle=function(t){return arguments.length?(T=typeof t==`function`?t:e(+t),k):T},k.padAngle=function(t){return arguments.length?(E=typeof t==`function`?t:e(+t),k):E},k.context=function(e){return arguments.length?(D=e??null,k):D},k}export{x as t};
+import{n as e,t}from"./path-BWPyau1x.js";import{a as n,c as r,d as i,f as a,i as o,l as s,m as c,n as l,o as u,p as d,r as f,u as p}from"./dist-C9bxMexz.js";function m(e){return e.innerRadius}function h(e){return e.outerRadius}function g(e){return e.startAngle}function _(e){return e.endAngle}function v(e){return e&&e.padAngle}function y(e,t,n,r,i,a,o,s){var c=n-e,l=r-t,u=o-i,d=s-a,f=d*c-u*l;if(!(f*f<1e-12))return f=(u*(t-a)-d*(e-i))/f,[e+f*c,t+f*l]}function b(e,t,n,r,i,a,o){var c=e-n,l=t-r,u=(o?a:-a)/d(c*c+l*l),f=u*l,p=-u*c,m=e+f,h=t+p,g=n+f,_=r+p,v=(m+g)/2,y=(h+_)/2,b=g-m,x=_-h,S=b*b+x*x,C=i-a,w=m*_-g*h,T=(x<0?-1:1)*d(s(0,C*C*S-w*w)),E=(w*x-b*T)/S,D=(-w*b-x*T)/S,O=(w*x+b*T)/S,k=(-w*b+x*T)/S,A=E-v,j=D-y,M=O-v,N=k-y;return A*A+j*j>M*M+N*N&&(E=O,D=k),{cx:E,cy:D,x01:-f,y01:-p,x11:E*(i/C-1),y11:D*(i/C-1)}}function x(){var s=m,x=h,S=e(0),C=null,w=g,T=_,E=v,D=null,O=t(k);function k(){var e,t,m=+s.apply(this,arguments),h=+x.apply(this,arguments),g=w.apply(this,arguments)-r,_=T.apply(this,arguments)-r,v=l(_-g),k=_>g;if(D||=e=O(),h<m&&(t=h,h=m,m=t),!(h>1e-12))D.moveTo(0,0);else if(v>c-1e-12)D.moveTo(h*u(g),h*a(g)),D.arc(0,0,h,g,_,!k),m>1e-12&&(D.moveTo(m*u(_),m*a(_)),D.arc(0,0,m,_,g,k));else{var A=g,j=_,M=g,N=_,P=v,F=v,I=E.apply(this,arguments)/2,L=I>1e-12&&(C?+C.apply(this,arguments):d(m*m+h*h)),R=p(l(h-m)/2,+S.apply(this,arguments)),z=R,B=R,V,H;if(L>1e-12){var U=o(L/m*a(I)),W=o(L/h*a(I));(P-=U*2)>1e-12?(U*=k?1:-1,M+=U,N-=U):(P=0,M=N=(g+_)/2),(F-=W*2)>1e-12?(W*=k?1:-1,A+=W,j-=W):(F=0,A=j=(g+_)/2)}var G=h*u(A),K=h*a(A),q=m*u(N),J=m*a(N);if(R>1e-12){var Y=h*u(j),X=h*a(j),Z=m*u(M),Q=m*a(M),$;if(v<i)if($=y(G,K,Z,Q,Y,X,q,J)){var ee=G-$[0],te=K-$[1],ne=Y-$[0],re=X-$[1],ie=1/a(f((ee*ne+te*re)/(d(ee*ee+te*te)*d(ne*ne+re*re)))/2),ae=d($[0]*$[0]+$[1]*$[1]);z=p(R,(m-ae)/(ie-1)),B=p(R,(h-ae)/(ie+1))}else z=B=0}F>1e-12?B>1e-12?(V=b(Z,Q,G,K,h,B,k),H=b(Y,X,q,J,h,B,k),D.moveTo(V.cx+V.x01,V.cy+V.y01),B<R?D.arc(V.cx,V.cy,B,n(V.y01,V.x01),n(H.y01,H.x01),!k):(D.arc(V.cx,V.cy,B,n(V.y01,V.x01),n(V.y11,V.x11),!k),D.arc(0,0,h,n(V.cy+V.y11,V.cx+V.x11),n(H.cy+H.y11,H.cx+H.x11),!k),D.arc(H.cx,H.cy,B,n(H.y11,H.x11),n(H.y01,H.x01),!k))):(D.moveTo(G,K),D.arc(0,0,h,A,j,!k)):D.moveTo(G,K),!(m>1e-12)||!(P>1e-12)?D.lineTo(q,J):z>1e-12?(V=b(q,J,Y,X,m,-z,k),H=b(G,K,Z,Q,m,-z,k),D.lineTo(V.cx+V.x01,V.cy+V.y01),z<R?D.arc(V.cx,V.cy,z,n(V.y01,V.x01),n(H.y01,H.x01),!k):(D.arc(V.cx,V.cy,z,n(V.y01,V.x01),n(V.y11,V.x11),!k),D.arc(0,0,m,n(V.cy+V.y11,V.cx+V.x11),n(H.cy+H.y11,H.cx+H.x11),k),D.arc(H.cx,H.cy,z,n(H.y11,H.x11),n(H.y01,H.x01),!k))):D.arc(0,0,m,N,M,k)}if(D.closePath(),e)return D=null,e+``||null}return k.centroid=function(){var e=(+s.apply(this,arguments)+ +x.apply(this,arguments))/2,t=(+w.apply(this,arguments)+ +T.apply(this,arguments))/2-i/2;return[u(t)*e,a(t)*e]},k.innerRadius=function(t){return arguments.length?(s=typeof t==`function`?t:e(+t),k):s},k.outerRadius=function(t){return arguments.length?(x=typeof t==`function`?t:e(+t),k):x},k.cornerRadius=function(t){return arguments.length?(S=typeof t==`function`?t:e(+t),k):S},k.padRadius=function(t){return arguments.length?(C=t==null?null:typeof t==`function`?t:e(+t),k):C},k.startAngle=function(t){return arguments.length?(w=typeof t==`function`?t:e(+t),k):w},k.endAngle=function(t){return arguments.length?(T=typeof t==`function`?t:e(+t),k):T},k.padAngle=function(t){return arguments.length?(E=typeof t==`function`?t:e(+t),k):E},k.context=function(e){return arguments.length?(D=e??null,k):D},k}export{x as t};

package/workframe-ui/public/assets/architecture-7EHR7CIX-yusDFKmK.js

@@ -0,0 +1 @@
+import"./chunk-NNHCCRGN-DlpIbxXb.js";import{x as e}from"./mermaid-parser.core-D6IqqDSH.js";export{e as createArchitectureServices};