flujo-ai 3.45.1 → 3.45.2

package/.next/server/chunks/5189.js

@@ -1 +1 @@
-"use strict";exports.id=5189,exports.ids=[5189],exports.modules={15837:(a,b,c)=>{c.d(b,{sA:()=>l});var d=c(73024),e=c(76760),f=c.n(e),g=c(77598);function h(a,b,c=!1){let d=f().relative(f().resolve(a),f().resolve(b));return""===d?c:!d.startsWith("..")&&!f().isAbsolute(d)}async function i(a){try{return await d.promises.lstat(a)}catch(a){if("ENOENT"===a.code)return null;throw a}}function j(a,b){if(!a||a.isSymbolicLink()||!a.isDirectory())throw Error(`${b} must be a real directory, not a symbolic link or junction.`)}async function k(a,b,c){let e=f().resolve(a),g=f().resolve(b);if(j(await i(e),"Workspace restore boundary"),!h(e,g,!0))throw Error(`Restore directory escapes workspace boundary: ${g}`);let k=f().relative(e,g),l=e;for(let a of k?k.split(f().sep):[]){l=f().join(l,a);let b=await i(l);if(!b&&c){try{await d.promises.mkdir(l)}catch(a){if("EEXIST"!==a.code)throw a}b=await i(l)}j(b,`Restore path component ${l}`)}if(!h(await d.promises.realpath(e),await d.promises.realpath(g),!0))throw Error(`Restore directory resolves outside workspace boundary: ${g}`)}async function l(a,b,c,e={}){let h=f().dirname(b);await k(a,h,!0);let j=await i(b);if(j?.isSymbolicLink())throw Error(`Refusing to replace symbolic link or junction: ${b}`);if(j&&!j.isFile())throw Error(`Refusing to replace non-file restore target: ${b}`);let m=f().join(h,`.flujo-restore-${(0,g.randomUUID)()}.tmp`),n=!1;try{let f=384|(e.mode??0)&64,g=await d.promises.open(m,d.constants.O_WRONLY|d.constants.O_CREAT|d.constants.O_EXCL,f);n=!0;try{await g.writeFile(c),await g.sync()}finally{await g.close()}await k(a,h,!1);let j=await i(b);if(j?.isSymbolicLink()||j&&!j.isFile())throw Error(`Restore target became unsafe: ${b}`);await d.promises.rename(m,b),n=!1}finally{n&&await d.promises.unlink(m).catch(()=>void 0)}}},87570:(a,b,c)=>{c.r(b),c.d(b,{restoreConfiguredWorkerSnapshot:()=>E,unlockWorkerSnapshot:()=>C,verifyWorkerCodexAuth:()=>A});var d=c(73024),e=c(77598),f=c(76760),g=c.n(f),h=c(48631),i=c.n(h),j=c(30314),k=c(87020),l=c(28461),m=c(16154),n=c(15837),o=c(21242),p=c(92103);let q="snapshot-manifest.json",r=".flujo-worker-snapshot.json",s=/^[a-f0-9]{64}$/;function t(a,b){let c=Number(process.env[a]);return Number.isSafeInteger(c)&&c>0?c:b}function u(a){return"object"==typeof a&&null!==a&&!Array.isArray(a)}function v(a,b){try{return JSON.parse(a)}catch{throw Error(b)}}function w(a,b=!1){let c=b?a.replace(/\/$/,""):a,d=c.split("/");if(!c||c.includes("\\")||c.includes("\0")||d.some(a=>!a||"."===a||".."===a||a.includes(":")||/[. ]$/.test(a)||/^(con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/i.test(a)))throw Error("Snapshot contains an unsafe archive path.");if(c!==q&&".workspace.json"!==c&&!l.WORKSPACE_SUBTREES.includes(d[0]))throw Error("Snapshot contains a file outside the supported workspace roots.");if(b&&(c===q||".workspace.json"===c))throw Error("Snapshot metadata must be a file.");if(!b&&l.WORKSPACE_SUBTREES.includes(c))throw Error("Snapshot workspace roots must be directories.");return c}async function x(a,b=!1){b&&await d.promises.mkdir(a,{recursive:!0,mode:448});let c=await d.promises.lstat(a);if(!c.isDirectory()||c.isSymbolicLink())throw Error("Worker restore destination must be a plain directory.")}async function y(a){try{return await d.promises.lstat(a)}catch(a){if("ENOENT"===a.code)return null;throw a}}async function z(a){await x(a);let b=await d.promises.readdir(a,{withFileTypes:!0});for(let c of b)if(!l.WORKSPACE_SUBTREES.includes(c.name)||!c.isDirectory()||c.isSymbolicLink()||0!==(await d.promises.readdir(g().join(a,c.name))).length)throw Error("Worker snapshot restore refuses to overwrite an existing workspace.");for(let c of b)await d.promises.rmdir(g().join(a,c.name));await d.promises.rmdir(a)}async function A(a,b=(0,l.getWorkspaceDir)(a.workspace)){if("chatgpt"!==a.codexAuth)return;let c=g().join(b,"db","codex-runtime");for(let a of["auth.json","flujo-auth-source.json"]){let b=await d.promises.lstat(g().join(c,a));if(!b.isFile()||b.isSymbolicLink()||b.nlink>1||b.size>1048576)throw Error("Worker Codex authentication is not a valid workspace credential file.")}let e=await d.promises.readFile(g().join(c,"auth.json")),f=v(await d.promises.readFile(g().join(c,"flujo-auth-source.json"),"utf8"),"Worker Codex authentication marker is invalid.");if(!(0,m.eK)(e)||!u(f)||1!==f.version||"workspace"!==f.source)throw Error("Worker Codex ChatGPT authentication is missing or invalid.")}async function B(a,b=(0,l.getWorkspaceDir)(a.workspace)){if("user"!==a.encryption)return null;let c=g().join(b,"db","worker-bootstrap-secrets.json"),e=await d.promises.lstat(c);if(!e.isFile()||e.isSymbolicLink()||e.nlink>1||e.size>4096)throw Error("Worker workspace encryption requires valid bootstrap credentials.");if("win32"!==process.platform&&(63&e.mode)!=0)throw Error("Worker workspace encryption credentials must be owner-only.");let f=v(await d.promises.readFile(c,"utf8"),"Worker workspace encryption bootstrap credentials are invalid.");if(!u(f)||1!==f.version||"string"!=typeof f.workspaceDek||!/^[a-f0-9]{16}$/.test(f.workspaceDek))throw Error("Worker workspace encryption bootstrap credentials are invalid.");return f.workspaceDek}async function C(a){if((0,l.getCurrentWorkspace)()!==a.workspace)throw Error("Worker encryption unlock workspace mismatch.");let b=await B(a);b&&(0,k.YM)(b)}async function D(a,b){let c;(0,p.Vv)({state:"restoring",archiveSha256:b,error:void 0});let f=t("FLUJO_SNAPSHOT_MAX_FILE_BYTES",0x10000000),h=t("FLUJO_SNAPSHOT_MAX_BYTES",0x40000000),k=!!process.env.FLUJO_WORKER_SNAPSHOT_KEY,m=h+8388608,C=k?Math.ceil(4*m/3)+4096:m,D=await d.promises.lstat(a);if(!D.isFile()||D.isSymbolicLink()||D.size>C)throw Error("Worker snapshot must be an ordinary ZIP file within the size limit.");let E=await d.promises.open(a,d.constants.O_RDONLY|(d.constants.O_NOFOLLOW||0));try{let a=await E.stat();if(!a.isFile()||a.dev!==D.dev||a.ino!==D.ino||a.size!==D.size)throw Error("Worker snapshot changed while it was opened.");c=await E.readFile()}finally{await E.close()}if(c.length>C)throw Error("Worker snapshot exceeds the size limit.");if(k&&(c=function(a,b){try{let c=JSON.parse(a.toString("utf8"));if(!u(c)||"flujo-workspace-encrypted"!==c.format||1!==c.version)throw Error();let d=a=>{if("string"!=typeof a||!/^[A-Za-z0-9+/]*={0,2}$/.test(a))throw Error();let b=Buffer.from(a,"base64");if(b.toString("base64")!==a)throw Error();return b},f=d(process.env.FLUJO_WORKER_SNAPSHOT_KEY),g=d(c.iv),h=d(c.tag),i=d(c.data);if(32!==f.length||12!==g.length||16!==h.length||i.length>b)throw Error();let j=(0,e.createDecipheriv)("aes-256-gcm",f,g);return j.setAuthTag(h),Buffer.concat([j.update(i),j.final()])}catch{throw Error("Worker snapshot decryption failed. Check the encrypted archive and its key.")}}(c,m)),(0,e.createHash)("sha256").update(c).digest("hex")!==b)throw Error("Worker snapshot SHA-256 mismatch.");let F=function(a,b,c){let d=-1;for(let b=a.length-22;b>=Math.max(0,a.length-65557);b--)if(0x6054b50===a.readUInt32LE(b)&&b+22+a.readUInt16LE(b+20)===a.length){d=b;break}if(d<0)throw Error("Invalid snapshot ZIP directory.");let e=a.readUInt16LE(d+10),f=a.readUInt32LE(d+12),g=a.readUInt32LE(d+16);if(0!==a.readUInt16LE(d+4)||0!==a.readUInt16LE(d+6)||a.readUInt16LE(d+8)!==e||65535===e||e>1e5||g+f!==d)throw Error("Unsupported snapshot ZIP structure.");let h=new Map,i=[],j=0;for(let f=0;f<e;f++){if(g+46>d||0x2014b50!==a.readUInt32LE(g))throw Error("Invalid snapshot ZIP member.");let e=a.readUInt16LE(g+8),f=a.readUInt16LE(g+10),k=a.readUInt32LE(g+24),l=a.readUInt16LE(g+28),m=a.readUInt16LE(g+30),n=a.readUInt16LE(g+32),o=g+46+l+m+n;if((1&e)!=0||![0,8].includes(f)||o>d||0xffffffff===a.readUInt32LE(g+20)||0xffffffff===k)throw Error("Unsupported snapshot ZIP member encoding.");let p=new TextDecoder("utf-8",{fatal:!0}).decode(a.subarray(g+46,g+46+l)),r=p.endsWith("/"),s=w(p,r).normalize("NFC").toLowerCase();if(h.has(s))throw Error("Snapshot contains duplicate or case-aliased archive paths.");h.set(s,r);let t=a.readUInt32LE(g+38)>>>16,u=61440&t;if(0!==u&&u!==(r?16384:32768))throw Error("Snapshot links and special files are unsupported.");if(k>(p===q?8388608:b)||r&&0!==k)throw Error("Snapshot file exceeds the restore size limit.");if((j+=k)>c+8388608)throw Error("Snapshot exceeds the restore size limit.");i.push({name:p,directory:r,size:k,mode:t}),g=o}if(g!==d)throw Error("Invalid snapshot ZIP directory length.");for(let{name:a,directory:b}of i){let c=w(a,b).split("/");for(let a=1;a<c.length;a++)if(!1===h.get(c.slice(0,a).join("/").normalize("NFC").toLowerCase()))throw Error("Snapshot contains a file/directory path conflict.")}return i}(c,f,h),G=await i().loadAsync(c),H=G.file(q);if(!H)throw Error("Worker snapshot manifest is missing.");let I=function(a){if(!u(a)||2!==a.formatVersion||a.layoutVersion!==o.q||!1!==a.externalRootsIncluded||!u(a.source)||"3.45.1"!==a.source.version||"string"!=typeof a.source.platform||!u(a.runtime)||!u(a.runtime.mcpTransfer)||1!==a.runtime.mcpTransfer.formatVersion||"string"!=typeof a.runtime.mcpTransfer.sourceWorkspaceRoot||!Array.isArray(a.runtime.mcpTransfer.servers)||!["chatgpt","none"].includes(a.runtime.codexAuth)||!["default","user"].includes(a.runtime.encryption)||!Array.isArray(a.files)||!Array.isArray(a.subtrees)||a.subtrees.length!==l.WORKSPACE_SUBTREES.length||l.WORKSPACE_SUBTREES.some(b=>!a.subtrees.includes(b)))throw Error("Snapshot format, FLUJO version, layout, or portable runtime metadata is incompatible.");return(0,l.assertValidWorkspaceName)(a.workspace),a}(v(await H.async("string"),"Worker snapshot manifest is invalid JSON.")),J={workspace:I.workspace,archiveSha256:b,mcpTransfer:I.runtime.mcpTransfer,codexAuth:I.runtime.codexAuth,encryption:I.runtime.encryption};(0,p.Vv)({workspace:J.workspace});let K=new Map,L=0;for(let a of I.files){if(!u(a)||"string"!=typeof a.path||a.path===q||!Number.isSafeInteger(a.size)||a.size<0||a.size>f||"string"!=typeof a.sha256||!s.test(a.sha256))throw Error("Invalid snapshot manifest member.");if(w(a.path),K.has(a.path))throw Error("Snapshot manifest has duplicate members.");if((L+=a.size)>h)throw Error("Snapshot manifest exceeds the restore size limit.");K.set(a.path,a)}let M=[];for(let a of F){if(a.directory||a.name===q)continue;let b=K.get(a.name);if(!b||b.size!==a.size)throw Error("Snapshot archive does not match its manifest.");let c=await G.file(a.name).async("nodebuffer");if(c.length!==b.size||(0,e.createHash)("sha256").update(c).digest("hex")!==b.sha256)throw Error("Snapshot member integrity check failed.");K.delete(a.name),M.push({name:a.name,content:c,mode:73&a.mode?448:384})}if(K.size)throw Error("Snapshot archive is missing a manifest member.");await x((0,j.ok)(),!0),await x((0,l.getWorkspacesDir)(),!0);let N=(0,l.getWorkspaceDir)(J.workspace);if((await d.promises.readdir((0,l.getWorkspacesDir)())).filter(a=>a.toLowerCase()===J.workspace.toLowerCase()).some(a=>a!==J.workspace))throw Error("Worker workspace has a case-alias conflict.");let O=await y(N);if(O){await x(N);let a=g().join(N,r);if(await y(a)){let c=await d.promises.lstat(a);if(!c.isFile()||c.isSymbolicLink()||c.nlink>1||c.size>4096)throw Error("Invalid worker restore marker.");let e=v(await d.promises.readFile(a,"utf8"),"Worker restore marker is invalid.");if(!u(e)||1!==e.formatVersion||e.archiveSha256!==b||e.workspace!==J.workspace)throw Error("Worker snapshot does not match the existing workspace.");return await A(J),await B(J),J}}let P=await d.promises.mkdtemp(g().join((0,l.getWorkspacesDir)(),".worker-restore-")),Q=!1;try{for(let a of(await d.promises.chmod(P,448),l.WORKSPACE_SUBTREES))await d.promises.mkdir(g().join(P,a),{mode:448});for(let a of F.filter(a=>a.directory))await d.promises.mkdir(g().join(P,...w(a.name,!0).split("/")),{recursive:!0,mode:448});for(let a of M){let b=".workspace.json"===a.name?Buffer.from('{"roots":[]}\n'):a.content;await (0,n.sA)(P,g().join(P,...a.name.split("/")),b,{mode:a.mode})}if(await A(J,P),await B(J,P),await (0,n.sA)(P,g().join(P,r),Buffer.from(JSON.stringify({formatVersion:1,workspace:J.workspace,archiveSha256:b}))),O)await z(N);else if(await y(N))throw Error("Worker restore destination was created concurrently.");return await d.promises.rename(P,N),Q=!0,await A(J),J}finally{Q||await d.promises.rm(P,{recursive:!0,force:!0})}}function E(){if(!(0,p.ye)())return Promise.resolve(null);let a=process.env.FLUJO_WORKER_SNAPSHOT?.trim(),b=process.env.FLUJO_WORKER_SNAPSHOT_SHA256?.trim().toLowerCase();if(!a||!b||!s.test(b)||!g().isAbsolute(a)){let a="Worker mode requires an absolute FLUJO_WORKER_SNAPSHOT path and FLUJO_WORKER_SNAPSHOT_SHA256.";return(0,p.Vv)({state:"error",error:a}),Promise.reject(Error(a))}let c=(0,e.createHash)("sha256").update(process.env.FLUJO_WORKER_SNAPSHOT_KEY??"").digest("hex"),d=`${(0,l.getWorkspacesDir)()}\0${a}\0${b}\0${c}`;if(global.__flujo_worker_snapshot_restore?.key===d)return global.__flujo_worker_snapshot_restore.promise;let f=D(a,b).catch(a=>{throw(0,p.Vv)({state:"error",error:a instanceof Error?a.message:"Worker restore failed."}),global.__flujo_worker_snapshot_restore?.promise===f&&(global.__flujo_worker_snapshot_restore=void 0),a});return global.__flujo_worker_snapshot_restore={key:d,promise:f},f}}};
+"use strict";exports.id=5189,exports.ids=[5189],exports.modules={15837:(a,b,c)=>{c.d(b,{sA:()=>l});var d=c(73024),e=c(76760),f=c.n(e),g=c(77598);function h(a,b,c=!1){let d=f().relative(f().resolve(a),f().resolve(b));return""===d?c:!d.startsWith("..")&&!f().isAbsolute(d)}async function i(a){try{return await d.promises.lstat(a)}catch(a){if("ENOENT"===a.code)return null;throw a}}function j(a,b){if(!a||a.isSymbolicLink()||!a.isDirectory())throw Error(`${b} must be a real directory, not a symbolic link or junction.`)}async function k(a,b,c){let e=f().resolve(a),g=f().resolve(b);if(j(await i(e),"Workspace restore boundary"),!h(e,g,!0))throw Error(`Restore directory escapes workspace boundary: ${g}`);let k=f().relative(e,g),l=e;for(let a of k?k.split(f().sep):[]){l=f().join(l,a);let b=await i(l);if(!b&&c){try{await d.promises.mkdir(l)}catch(a){if("EEXIST"!==a.code)throw a}b=await i(l)}j(b,`Restore path component ${l}`)}if(!h(await d.promises.realpath(e),await d.promises.realpath(g),!0))throw Error(`Restore directory resolves outside workspace boundary: ${g}`)}async function l(a,b,c,e={}){let h=f().dirname(b);await k(a,h,!0);let j=await i(b);if(j?.isSymbolicLink())throw Error(`Refusing to replace symbolic link or junction: ${b}`);if(j&&!j.isFile())throw Error(`Refusing to replace non-file restore target: ${b}`);let m=f().join(h,`.flujo-restore-${(0,g.randomUUID)()}.tmp`),n=!1;try{let f=384|(e.mode??0)&64,g=await d.promises.open(m,d.constants.O_WRONLY|d.constants.O_CREAT|d.constants.O_EXCL,f);n=!0;try{await g.writeFile(c),await g.sync()}finally{await g.close()}await k(a,h,!1);let j=await i(b);if(j?.isSymbolicLink()||j&&!j.isFile())throw Error(`Restore target became unsafe: ${b}`);await d.promises.rename(m,b),n=!1}finally{n&&await d.promises.unlink(m).catch(()=>void 0)}}},87570:(a,b,c)=>{c.r(b),c.d(b,{restoreConfiguredWorkerSnapshot:()=>E,unlockWorkerSnapshot:()=>C,verifyWorkerCodexAuth:()=>A});var d=c(73024),e=c(77598),f=c(76760),g=c.n(f),h=c(48631),i=c.n(h),j=c(30314),k=c(87020),l=c(28461),m=c(16154),n=c(15837),o=c(21242),p=c(92103);let q="snapshot-manifest.json",r=".flujo-worker-snapshot.json",s=/^[a-f0-9]{64}$/;function t(a,b){let c=Number(process.env[a]);return Number.isSafeInteger(c)&&c>0?c:b}function u(a){return"object"==typeof a&&null!==a&&!Array.isArray(a)}function v(a,b){try{return JSON.parse(a)}catch{throw Error(b)}}function w(a,b=!1){let c=b?a.replace(/\/$/,""):a,d=c.split("/");if(!c||c.includes("\\")||c.includes("\0")||d.some(a=>!a||"."===a||".."===a||a.includes(":")||/[. ]$/.test(a)||/^(con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/i.test(a)))throw Error("Snapshot contains an unsafe archive path.");if(c!==q&&".workspace.json"!==c&&!l.WORKSPACE_SUBTREES.includes(d[0]))throw Error("Snapshot contains a file outside the supported workspace roots.");if(b&&(c===q||".workspace.json"===c))throw Error("Snapshot metadata must be a file.");if(!b&&l.WORKSPACE_SUBTREES.includes(c))throw Error("Snapshot workspace roots must be directories.");return c}async function x(a,b=!1){b&&await d.promises.mkdir(a,{recursive:!0,mode:448});let c=await d.promises.lstat(a);if(!c.isDirectory()||c.isSymbolicLink())throw Error("Worker restore destination must be a plain directory.")}async function y(a){try{return await d.promises.lstat(a)}catch(a){if("ENOENT"===a.code)return null;throw a}}async function z(a){await x(a);let b=await d.promises.readdir(a,{withFileTypes:!0});for(let c of b)if(!l.WORKSPACE_SUBTREES.includes(c.name)||!c.isDirectory()||c.isSymbolicLink()||0!==(await d.promises.readdir(g().join(a,c.name))).length)throw Error("Worker snapshot restore refuses to overwrite an existing workspace.");for(let c of b)await d.promises.rmdir(g().join(a,c.name));await d.promises.rmdir(a)}async function A(a,b=(0,l.getWorkspaceDir)(a.workspace)){if("chatgpt"!==a.codexAuth)return;let c=g().join(b,"db","codex-runtime");for(let a of["auth.json","flujo-auth-source.json"]){let b=await d.promises.lstat(g().join(c,a));if(!b.isFile()||b.isSymbolicLink()||b.nlink>1||b.size>1048576)throw Error("Worker Codex authentication is not a valid workspace credential file.")}let e=await d.promises.readFile(g().join(c,"auth.json")),f=v(await d.promises.readFile(g().join(c,"flujo-auth-source.json"),"utf8"),"Worker Codex authentication marker is invalid.");if(!(0,m.eK)(e)||!u(f)||1!==f.version||"workspace"!==f.source)throw Error("Worker Codex ChatGPT authentication is missing or invalid.")}async function B(a,b=(0,l.getWorkspaceDir)(a.workspace)){if("user"!==a.encryption)return null;let c=g().join(b,"db","worker-bootstrap-secrets.json"),e=await d.promises.lstat(c);if(!e.isFile()||e.isSymbolicLink()||e.nlink>1||e.size>4096)throw Error("Worker workspace encryption requires valid bootstrap credentials.");if("win32"!==process.platform&&(63&e.mode)!=0)throw Error("Worker workspace encryption credentials must be owner-only.");let f=v(await d.promises.readFile(c,"utf8"),"Worker workspace encryption bootstrap credentials are invalid.");if(!u(f)||1!==f.version||"string"!=typeof f.workspaceDek||!/^[a-f0-9]{16}$/.test(f.workspaceDek))throw Error("Worker workspace encryption bootstrap credentials are invalid.");return f.workspaceDek}async function C(a){if((0,l.getCurrentWorkspace)()!==a.workspace)throw Error("Worker encryption unlock workspace mismatch.");let b=await B(a);b&&(0,k.YM)(b)}async function D(a,b){let c;(0,p.Vv)({state:"restoring",archiveSha256:b,error:void 0});let f=t("FLUJO_SNAPSHOT_MAX_FILE_BYTES",0x10000000),h=t("FLUJO_SNAPSHOT_MAX_BYTES",0x40000000),k=!!process.env.FLUJO_WORKER_SNAPSHOT_KEY,m=h+8388608,C=k?Math.ceil(4*m/3)+4096:m,D=await d.promises.lstat(a);if(!D.isFile()||D.isSymbolicLink()||D.size>C)throw Error("Worker snapshot must be an ordinary ZIP file within the size limit.");let E=await d.promises.open(a,d.constants.O_RDONLY|(d.constants.O_NOFOLLOW||0));try{let a=await E.stat();if(!a.isFile()||a.dev!==D.dev||a.ino!==D.ino||a.size!==D.size)throw Error("Worker snapshot changed while it was opened.");c=await E.readFile()}finally{await E.close()}if(c.length>C)throw Error("Worker snapshot exceeds the size limit.");if(k&&(c=function(a,b){try{let c=JSON.parse(a.toString("utf8"));if(!u(c)||"flujo-workspace-encrypted"!==c.format||1!==c.version)throw Error();let d=a=>{if("string"!=typeof a||!/^[A-Za-z0-9+/]*={0,2}$/.test(a))throw Error();let b=Buffer.from(a,"base64");if(b.toString("base64")!==a)throw Error();return b},f=d(process.env.FLUJO_WORKER_SNAPSHOT_KEY),g=d(c.iv),h=d(c.tag),i=d(c.data);if(32!==f.length||12!==g.length||16!==h.length||i.length>b)throw Error();let j=(0,e.createDecipheriv)("aes-256-gcm",f,g);return j.setAuthTag(h),Buffer.concat([j.update(i),j.final()])}catch{throw Error("Worker snapshot decryption failed. Check the encrypted archive and its key.")}}(c,m)),(0,e.createHash)("sha256").update(c).digest("hex")!==b)throw Error("Worker snapshot SHA-256 mismatch.");let F=function(a,b,c){let d=-1;for(let b=a.length-22;b>=Math.max(0,a.length-65557);b--)if(0x6054b50===a.readUInt32LE(b)&&b+22+a.readUInt16LE(b+20)===a.length){d=b;break}if(d<0)throw Error("Invalid snapshot ZIP directory.");let e=a.readUInt16LE(d+10),f=a.readUInt32LE(d+12),g=a.readUInt32LE(d+16);if(0!==a.readUInt16LE(d+4)||0!==a.readUInt16LE(d+6)||a.readUInt16LE(d+8)!==e||65535===e||e>1e5||g+f!==d)throw Error("Unsupported snapshot ZIP structure.");let h=new Map,i=[],j=0;for(let f=0;f<e;f++){if(g+46>d||0x2014b50!==a.readUInt32LE(g))throw Error("Invalid snapshot ZIP member.");let e=a.readUInt16LE(g+8),f=a.readUInt16LE(g+10),k=a.readUInt32LE(g+24),l=a.readUInt16LE(g+28),m=a.readUInt16LE(g+30),n=a.readUInt16LE(g+32),o=g+46+l+m+n;if((1&e)!=0||![0,8].includes(f)||o>d||0xffffffff===a.readUInt32LE(g+20)||0xffffffff===k)throw Error("Unsupported snapshot ZIP member encoding.");let p=new TextDecoder("utf-8",{fatal:!0}).decode(a.subarray(g+46,g+46+l)),r=p.endsWith("/"),s=w(p,r).normalize("NFC").toLowerCase();if(h.has(s))throw Error("Snapshot contains duplicate or case-aliased archive paths.");h.set(s,r);let t=a.readUInt32LE(g+38)>>>16,u=61440&t;if(0!==u&&u!==(r?16384:32768))throw Error("Snapshot links and special files are unsupported.");if(k>(p===q?8388608:b)||r&&0!==k)throw Error("Snapshot file exceeds the restore size limit.");if((j+=k)>c+8388608)throw Error("Snapshot exceeds the restore size limit.");i.push({name:p,directory:r,size:k,mode:t}),g=o}if(g!==d)throw Error("Invalid snapshot ZIP directory length.");for(let{name:a,directory:b}of i){let c=w(a,b).split("/");for(let a=1;a<c.length;a++)if(!1===h.get(c.slice(0,a).join("/").normalize("NFC").toLowerCase()))throw Error("Snapshot contains a file/directory path conflict.")}return i}(c,f,h),G=await i().loadAsync(c),H=G.file(q);if(!H)throw Error("Worker snapshot manifest is missing.");let I=function(a){if(!u(a)||2!==a.formatVersion||a.layoutVersion!==o.q||!1!==a.externalRootsIncluded||!u(a.source)||"3.45.2"!==a.source.version||"string"!=typeof a.source.platform||!u(a.runtime)||!u(a.runtime.mcpTransfer)||1!==a.runtime.mcpTransfer.formatVersion||"string"!=typeof a.runtime.mcpTransfer.sourceWorkspaceRoot||!Array.isArray(a.runtime.mcpTransfer.servers)||!["chatgpt","none"].includes(a.runtime.codexAuth)||!["default","user"].includes(a.runtime.encryption)||!Array.isArray(a.files)||!Array.isArray(a.subtrees)||a.subtrees.length!==l.WORKSPACE_SUBTREES.length||l.WORKSPACE_SUBTREES.some(b=>!a.subtrees.includes(b)))throw Error("Snapshot format, FLUJO version, layout, or portable runtime metadata is incompatible.");return(0,l.assertValidWorkspaceName)(a.workspace),a}(v(await H.async("string"),"Worker snapshot manifest is invalid JSON.")),J={workspace:I.workspace,archiveSha256:b,mcpTransfer:I.runtime.mcpTransfer,codexAuth:I.runtime.codexAuth,encryption:I.runtime.encryption};(0,p.Vv)({workspace:J.workspace});let K=new Map,L=0;for(let a of I.files){if(!u(a)||"string"!=typeof a.path||a.path===q||!Number.isSafeInteger(a.size)||a.size<0||a.size>f||"string"!=typeof a.sha256||!s.test(a.sha256))throw Error("Invalid snapshot manifest member.");if(w(a.path),K.has(a.path))throw Error("Snapshot manifest has duplicate members.");if((L+=a.size)>h)throw Error("Snapshot manifest exceeds the restore size limit.");K.set(a.path,a)}let M=[];for(let a of F){if(a.directory||a.name===q)continue;let b=K.get(a.name);if(!b||b.size!==a.size)throw Error("Snapshot archive does not match its manifest.");let c=await G.file(a.name).async("nodebuffer");if(c.length!==b.size||(0,e.createHash)("sha256").update(c).digest("hex")!==b.sha256)throw Error("Snapshot member integrity check failed.");K.delete(a.name),M.push({name:a.name,content:c,mode:73&a.mode?448:384})}if(K.size)throw Error("Snapshot archive is missing a manifest member.");await x((0,j.ok)(),!0),await x((0,l.getWorkspacesDir)(),!0);let N=(0,l.getWorkspaceDir)(J.workspace);if((await d.promises.readdir((0,l.getWorkspacesDir)())).filter(a=>a.toLowerCase()===J.workspace.toLowerCase()).some(a=>a!==J.workspace))throw Error("Worker workspace has a case-alias conflict.");let O=await y(N);if(O){await x(N);let a=g().join(N,r);if(await y(a)){let c=await d.promises.lstat(a);if(!c.isFile()||c.isSymbolicLink()||c.nlink>1||c.size>4096)throw Error("Invalid worker restore marker.");let e=v(await d.promises.readFile(a,"utf8"),"Worker restore marker is invalid.");if(!u(e)||1!==e.formatVersion||e.archiveSha256!==b||e.workspace!==J.workspace)throw Error("Worker snapshot does not match the existing workspace.");return await A(J),await B(J),J}}let P=await d.promises.mkdtemp(g().join((0,l.getWorkspacesDir)(),".worker-restore-")),Q=!1;try{for(let a of(await d.promises.chmod(P,448),l.WORKSPACE_SUBTREES))await d.promises.mkdir(g().join(P,a),{mode:448});for(let a of F.filter(a=>a.directory))await d.promises.mkdir(g().join(P,...w(a.name,!0).split("/")),{recursive:!0,mode:448});for(let a of M){let b=".workspace.json"===a.name?Buffer.from('{"roots":[]}\n'):a.content;await (0,n.sA)(P,g().join(P,...a.name.split("/")),b,{mode:a.mode})}if(await A(J,P),await B(J,P),await (0,n.sA)(P,g().join(P,r),Buffer.from(JSON.stringify({formatVersion:1,workspace:J.workspace,archiveSha256:b}))),O)await z(N);else if(await y(N))throw Error("Worker restore destination was created concurrently.");return await d.promises.rename(P,N),Q=!0,await A(J),J}finally{Q||await d.promises.rm(P,{recursive:!0,force:!0})}}function E(){if(!(0,p.ye)())return Promise.resolve(null);let a=process.env.FLUJO_WORKER_SNAPSHOT?.trim(),b=process.env.FLUJO_WORKER_SNAPSHOT_SHA256?.trim().toLowerCase();if(!a||!b||!s.test(b)||!g().isAbsolute(a)){let a="Worker mode requires an absolute FLUJO_WORKER_SNAPSHOT path and FLUJO_WORKER_SNAPSHOT_SHA256.";return(0,p.Vv)({state:"error",error:a}),Promise.reject(Error(a))}let c=(0,e.createHash)("sha256").update(process.env.FLUJO_WORKER_SNAPSHOT_KEY??"").digest("hex"),d=`${(0,l.getWorkspacesDir)()}\0${a}\0${b}\0${c}`;if(global.__flujo_worker_snapshot_restore?.key===d)return global.__flujo_worker_snapshot_restore.promise;let f=D(a,b).catch(a=>{throw(0,p.Vv)({state:"error",error:a instanceof Error?a.message:"Worker restore failed."}),global.__flujo_worker_snapshot_restore?.promise===f&&(global.__flujo_worker_snapshot_restore=void 0),a});return global.__flujo_worker_snapshot_restore={key:d,promise:f},f}}};

package/.next/server/chunks/5399.js

@@ -1 +1 @@
-"use strict";exports.id=5399,exports.ids=[5399],exports.modules={15372:(a,b,c)=>{c.d(b,{H:()=>g});var d=c(74998);let e={now:()=>Date.now(),monotonicNow:()=>d.performance.now(),setTimer(a,b){let c=setTimeout(a,b);return{clear:()=>clearTimeout(c),unref:()=>c.unref?.()}},sleep:a=>new Promise(b=>setTimeout(b,a))},f={now:()=>e.now(),monotonicNow:()=>e.monotonicNow(),setTimer:(a,b)=>e.setTimer(a,b),sleep:a=>e.sleep(a)};function g(){return f}},25399:(a,b,c)=>{c.d(b,{_T:()=>ad,b7:()=>B,qU:()=>z,r4:()=>af,vd:()=>ae});var d=c(55511),e=c(79646),f=c(29021),g=c(33873),h=c.n(g),i=c(28354),j=c(65445),k=c(48970),l=c(15372),m=c(7986);let n=(0,l.H)(),o=[".runtime-locks","enduring-agents"],p=["darwin","linux","win32"].includes(process.platform),q=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,r=(0,i.promisify)(e.execFile),s=async(a,b,c)=>{let{stdout:d}=await r(a,b,c);return{stdout:String(d)}},t=global.__flujo_enduring_agent_process_instance_id??=(0,d.randomUUID)(),u=global.__flujo_enduring_agent_active_lock_owners??=new Set,v=global.__flujo_enduring_agent_issued_runtime_lock_scopes_v2??=new WeakMap,w=global.__flujo_enduring_agent_deferred_lock_cleanups??=new Set,x=new Map,y=new Map;async function z(a,b,c){let d=function(a,b){let c=v.get(a);if(!c||c.personaId!==b||c.workspace!==(0,m.getCurrentWorkspace)())throw Error("Persona runtime lock capability was not issued by this runtime.");return c}(a,b);if(d.closing)throw Error("Persona runtime lock capability is closing.");d.activeOperations+=1;try{return await a.assertOwned(),await c()}finally{if(d.activeOperations-=1,0===d.activeOperations){for(let a of d.idleWaiters)a();d.idleWaiters.clear()}}}async function A(a){let b=v.get(a);b&&(b.closing=!0,b.activeOperations>0&&await new Promise(a=>b.idleWaiters.add(a)))}class B extends Error{constructor(a){super(`Timed out acquiring the runtime lock for Persona ${JSON.stringify(a)}.`),this.personaId=a,this.code="PERSONA_RUNTIME_LOCK_TIMEOUT",this.name="PersonaRuntimeLockTimeoutError"}}class C extends Error{constructor(a){super(`Lost the runtime lock for Persona ${JSON.stringify(a)}.`),this.personaId=a,this.code="PERSONA_RUNTIME_LOCK_LOST",this.name="PersonaRuntimeLockLostError"}}function D(a){return n.sleep(a)}async function E(){await (0,m.ensureWorkspaceDirs)((0,m.getCurrentWorkspace)());let a=h().resolve((0,m.getWorkspaceDbDir)()),b=h().join(a,...o);await f.promises.mkdir(b,{recursive:!0});let[c,d]=await Promise.all([f.promises.realpath(a),f.promises.realpath(b)]),e=h().relative(c,d);if(""===e||e.startsWith("..")||h().isAbsolute(e))throw Error(`Persona runtime lock root escapes the workspace database: ${b}`);return d}async function F(a){try{let b=JSON.parse(await f.promises.readFile(a,"utf8"));if(!b||"object"!=typeof b||Array.isArray(b))throw Error(`Persona runtime lock ${JSON.stringify(a)} is malformed.`);return b}catch(a){if("ENOENT"===a.code)return null;throw a}}function G(a,b){if("string"!=typeof b.ownerId||!q.test(b.ownerId)||"string"!=typeof b.processInstanceId||"number"!=typeof b.pid||!Number.isInteger(b.pid)||b.pid<=0||void 0!==b.processBirthMarker&&"string"!=typeof b.processBirthMarker||void 0!==b.processBirthMarkerV2&&"string"!=typeof b.processBirthMarkerV2||"string"!=typeof b.workspace||"number"!=typeof b.acquiredAt)throw Error(`Persona runtime lock ${JSON.stringify(a)} is malformed.`);return b}async function H(a){let b=await F(a);return b?G(a,b):null}async function I(a){let b=await F(a);if(!b)return null;let c=G(a,b);if("string"!=typeof b.targetOwnerId||!q.test(b.targetOwnerId)||"string"!=typeof b.targetProcessInstanceId||"number"!=typeof b.targetPid||!Number.isInteger(b.targetPid)||b.targetPid<=0)throw Error(`Persona runtime recovery lock ${JSON.stringify(a)} is malformed.`);return{...c,...b}}async function J(a,b){let c=`${h().basename(b)}.recovery.`,d=(await f.promises.readdir(a)).filter(a=>a.startsWith(c)&&q.test(a.slice(c.length)));return(await Promise.all(d.map(async b=>{let c=h().join(a,b),d=await I(c);return d?{path:c,owner:d}:null}))).filter(a=>null!==a)}function K(a,b){if(!q.test(b))throw Error(`Persona runtime lock owner id ${JSON.stringify(b)} is malformed.`);let c=h().dirname(a),d=h().join(c,`${h().basename(a)}.abandoned.${b}`);if(h().dirname(d)!==c)throw Error("Persona runtime abandonment marker escapes its lock directory.");return d}async function L(a,b){let c=`${h().basename(b)}.abandoned.`;return new Set((await f.promises.readdir(a)).filter(a=>a.startsWith(c)&&q.test(a.slice(c.length))).map(a=>a.slice(c.length)))}async function M(a,b,c){let d=K(b,c.ownerId);return await Z(a,d,c),d}async function N(a){try{await X(a)}catch{}}async function O(){let a=global.__flujo_enduring_agent_linux_boot_id??=f.promises.readFile("/proc/sys/kernel/random/boot_id","utf8").then(a=>a.trim()||null).catch(()=>null),b=await a;return b||global.__flujo_enduring_agent_linux_boot_id!==a||(global.__flujo_enduring_agent_linux_boot_id=void 0),b}async function P(a){let b=process.env.SystemRoot??process.env.WINDIR;if(!b||!h().win32.isAbsolute(b))return null;let c=h().win32.normalize(b);if(!/^[a-z]:\\/i.test(c))return null;let d=h().win32.join(c,"System32","WindowsPowerShell","v1.0","powershell.exe"),{stdout:e}=await s(d,["-NoProfile","-NonInteractive","-Command",`$p=Get-Process -Id ${a} -ErrorAction Stop; $p.StartTime.ToUniversalTime().Ticks`],{encoding:"utf8",timeout:900,windowsHide:!0}),f=e.trim();return f?`win32-v2:${f}`:null}async function Q(a){try{if("linux"===process.platform){let[b,c]=await Promise.all([f.promises.readFile(`/proc/${a}/stat`,"utf8"),O()]);if(!c)return null;let d=b.lastIndexOf(")");if(d<0)return null;let e=b.slice(d+1).trim().split(/\s+/);if("Z"===e[0])return"dead:linux-zombie";let g=e[19];return g?`linux-v2:${c}:${g}`:null}if("win32"===process.platform)return await P(a);if("darwin"===process.platform){let{stdout:b}=await s("/bin/ps",["-o","state=","-o","lstart=","-p",String(a)],{encoding:"utf8",timeout:3e3,env:{...process.env,LANG:"C",LC_ALL:"C",TZ:"UTC"}}),c=b.trim(),d=/^(\S+)\s+(.+)$/.exec(c);if(!d)return null;if(d[1].includes("Z"))return"dead:darwin-zombie";return`darwin-v2:${d[2].trim()}`}}catch{}return null}async function R(a){try{return await Q(a)}catch{return null}}async function S(){let a=global.__flujo_enduring_agent_process_birth_marker_v2??=R(process.pid),b=await a;if(b||global.__flujo_enduring_agent_process_birth_marker_v2!==a||(global.__flujo_enduring_agent_process_birth_marker_v2=void 0),!b&&p)throw Error("Unable to establish this process birth identity for Persona locking.");return b}async function T(a){if(a===process.pid)return S();let b=x.get(a);if(b&&n.monotonicNow()-b.checkedAt<1e3)return b.marker;let c=y.get(a);if(c)return c;let d=R(a).then(b=>(x.set(a,{checkedAt:n.monotonicNow(),marker:b}),b)).finally(()=>{y.get(a)===d&&y.delete(a)});return y.set(a,d),d}function U(a){return/^linux-v2:[0-9a-f-]{36}:\d+$/i.test(a)?"linux-v2":/^darwin-v2:[A-Z][a-z]{2} [A-Z][a-z]{2}\s+\d{1,2} \d{2}:\d{2}:\d{2} \d{4}$/.test(a)?"darwin-v2":/^win32-v2:\d+$/.test(a)?"win32-v2":null}function V(a,b){if(b.startsWith("dead:"))return!0;let c=U(a);return!!(c&&c===U(b)&&a!==b)}async function W(a,b){if(b.has(a.ownerId))return!1;if(a.pid===process.pid){let b=await S();return!(a.processBirthMarkerV2&&b&&V(a.processBirthMarkerV2,b))&&(a.processInstanceId===t?u.has(a.ownerId):!a.processBirthMarkerV2||!b||!V(a.processBirthMarkerV2,b))}if(!function(a){try{return process.kill(a,0),!0}catch(a){if("ESRCH"===a.code)return!1;return!0}}(a.pid))return!1;if(!a.processBirthMarkerV2){let b=await T(a.pid);return b?.startsWith("dead:")&&(b=await R(a.pid),x.set(a.pid,{checkedAt:n.monotonicNow(),marker:b})),!b?.startsWith("dead:")}let c=await T(a.pid);return c&&V(a.processBirthMarkerV2,c)&&(c=await R(a.pid),x.set(a.pid,{checkedAt:n.monotonicNow(),marker:c})),!c||!V(a.processBirthMarkerV2,c)}async function X(a){for(let b=0;b<20;b+=1)try{await f.promises.unlink(a);return}catch(c){let a=c.code;if("ENOENT"===a)return;if(!["EACCES","EBUSY","EPERM"].includes(a??"")||19===b)throw c;await D(25)}}async function Y(a,b,c){let e=h().join(a,`${h().basename(b)}.candidate.${(0,d.randomUUID)()}`);try{await f.promises.writeFile(e,JSON.stringify(c),{encoding:"utf8",flag:"wx"});try{return await f.promises.link(e,b),!0}catch(a){if("EEXIST"===a.code)return!1;throw a}}finally{try{await f.promises.unlink(e)}catch{}}}async function Z(a,b,c){let d=n.monotonicNow();for(;;)try{return await Y(a,b,c)}catch(a){if(!["EACCES","EBUSY","EPERM"].includes(a.code??"")||n.monotonicNow()-d>=15e3)throw a;await D(25)}}function $(a){return new Promise(b=>{n.setTimer(b,a).unref()})}async function _(a,b,c,e){let f=await S(),g={ownerId:(0,d.randomUUID)(),processInstanceId:t,pid:process.pid,...f?{processBirthMarkerV2:f}:{},workspace:(0,m.getCurrentWorkspace)(),acquiredAt:n.now(),targetOwnerId:c.ownerId,targetProcessInstanceId:c.processInstanceId,targetPid:c.pid},h=`${b}.recovery.${g.ownerId}`;u.add(g.ownerId);let i=!1;try{if(!(i=await Z(a,h,g)))throw Error(`Recovery intent ${JSON.stringify(g.ownerId)} already exists.`);return await e(g)}finally{if(i){let c=null;try{c=await M(a,b,g)}catch{}u.delete(g.ownerId);try{await X(h),c&&await N(c)}catch{let c;c=`intent:${h}`,w.has(c)||(w.add(c),(async()=>{for(;;){let c=null;try{c=await M(a,b,g)}catch{}u.delete(g.ownerId);try{await X(h),c&&await N(c);return}catch{await $(1e3)}}})().finally(()=>{w.delete(c)}))}}else u.delete(g.ownerId)}}async function aa(a,b,c){await _(a,b,c,async()=>{let d=null;try{d=await M(a,b,c)}finally{u.delete(c.ownerId)}let e=!1;try{let a=await H(b);a?.ownerId===c.ownerId&&a.processInstanceId===c.processInstanceId&&a.pid===c.pid&&await X(b),e=!0}finally{e&&d&&await N(d)}})}function ab(a,b,c){let d=`canonical:${b}:${c.ownerId}`;w.has(d)||(w.add(d),(async()=>{for(;;)try{await aa(a,b,c);return}catch{try{let a=await H(b);if(!a||a.ownerId!==c.ownerId||a.processInstanceId!==c.processInstanceId||a.pid!==c.pid)return}catch{}await $(1e3)}})().finally(()=>{w.delete(d)}))}async function ac(a){let b=await E(),c=h().join(b,`${a}.lock`),e=await S(),f={ownerId:(0,d.randomUUID)(),processInstanceId:t,pid:process.pid,...e?{processBirthMarkerV2:e}:{},workspace:(0,m.getCurrentWorkspace)(),acquiredAt:n.now()};u.add(f.ownerId);let g=n.monotonicNow(),i=!1;try{for(;;){let[d,e]=await Promise.all([J(b,c),L(b,c)]),h=await Promise.all(d.map(async a=>({...a,alive:await W(a.owner,e)}))),j=h.filter(a=>a.alive);if(await Promise.all(h.filter(a=>!a.alive).map(async({path:a,owner:b})=>{await X(a),await N(K(c,b.ownerId))})),j.length>0){if(n.monotonicNow()-g>=15e3)throw new B(a);await D(25);continue}if(i){let a=await H(c);if(a?.ownerId===f.ownerId&&a.processInstanceId===f.processInstanceId&&a.pid===f.pid)break;i=!1}if(await Z(b,c,f)){i=!0;let[a,d]=await Promise.all([J(b,c),L(b,c)]);if((await Promise.all(a.map(({owner:a})=>W(a,d)))).some(Boolean)){await D(25);continue}let e=await H(c);if(e?.ownerId===f.ownerId&&e.processInstanceId===f.processInstanceId&&e.pid===f.pid)break;i=!1;continue}let k=await H(c);if(k){if(!await W(k,e)){await _(b,c,k,async a=>{let d=await H(c),e=await L(b,c);d&&d.ownerId===a.targetOwnerId&&d.processInstanceId===a.targetProcessInstanceId&&d.pid===a.targetPid&&!await W(d,e)&&(await X(c),await N(K(c,d.ownerId)))});continue}if(n.monotonicNow()-g>=15e3)throw new B(a);await D(25)}}}catch(a){try{if(i)try{await aa(b,c,f)}catch(a){throw ab(b,c,f),a}}finally{u.delete(f.ownerId)}throw a}let j=async()=>{let b=await H(c);if(b?.ownerId!==f.ownerId||b.processInstanceId!==f.processInstanceId||b.pid!==f.pid||b.workspace!==f.workspace)throw new C(a)},k={assertOwned:j};return v.set(k,{personaId:a,workspace:f.workspace,closing:!1,activeOperations:0,idleWaiters:new Set}),{lock:k,release:async()=>{let a;await A(k);try{await j()}catch(b){a=b}try{try{await aa(b,c,f)}catch(a){throw ab(b,c,f),a}}finally{u.delete(f.ownerId),v.delete(k)}if(a)throw a}}}function ad(a,b){return(0,j.ln)(a),(0,j.l_)(`enduring-agent-runtime/${a}`,async()=>{let c=await ac(a);try{return await b(c.lock)}finally{await c.release()}})}function ae(a,b){(0,j.ln)(a);let c=`.${a}`;return(0,j.l_)(`workspace-runtime/${a}`,async()=>{let a=await ac(c);try{return await b(a.lock)}finally{await a.release()}})}function af(a,b){return(0,j.ln)(a),ae((0,k.k$)("rolelock",{purpose:"role-definition-mutation-v1",roleDefinitionId:a}),b)}},48970:(a,b,c)=>{c.d(b,{NG:()=>l,WK:()=>k,k$:()=>j,vH:()=>m});var d=c(55511),e=c(19913),f=c(53912);let g=/^[A-Za-z][A-Za-z0-9_-]{0,15}$/;function h(a){if(!g.test(a))throw Error(`Invalid enduring-agent id prefix: ${JSON.stringify(a)}`)}function i(a){if(!e.sX.test(a))throw Error(`Generated invalid enduring-agent id: ${JSON.stringify(a)}`);return a}function j(a,b){h(a);let c=(0,d.createHash)("sha256").update((0,f.dj)(b)).digest("base64url");return i(`${a}_${c}`)}function k(a){return h(a),i(`${a}_${(0,d.randomUUID)().replaceAll("-","")}`)}function l(a,b){return j("deletion",{purpose:"persona-deletion-tombstone-v1",workspaceId:a,personaId:b})}function m(a,b){return j("appgrant",{purpose:"persona-app-grant-v1",personaId:a,mcpServerName:b})}},53912:(a,b,c)=>{c.d(b,{BX:()=>n,OY:()=>r,Yk:()=>t,b9:()=>u,dj:()=>p,lG:()=>k,n0:()=>q,xY:()=>s,z8:()=>v});var d=c(55511),e=c(52467);let f=new Set(["mcpNodes","resourceNodes"]),g=new Set(["selected","dragging","resizing","width","height","measured","positionAbsolute","zIndex"]),h=new Set(["createdAt","updatedAt","folder","favorite"]);class i extends Error{constructor(a){const b=Array.from(new Set(a));super(`Behavior Flow contains Subflow node${1===b.length?"":"s"} (${b.join(", ")}). Immutable Behavior revisions cannot resolve mutable child Flows until dependency snapshots and manifests are supported.`),this.code="BEHAVIOR_SUBFLOW_DEPENDENCY_UNSUPPORTED",this.name="BehaviorSubflowDependencyError",this.nodeIds=Object.freeze(b)}}function j(a){return JSON.parse(JSON.stringify(a))}function k(a,b){let c=j(a);return b&&(c.nodes=c.nodes.map(a=>"process"!==a.data.type||a.data.properties?.boundModel?a:{...a,data:{...a.data,properties:{...a.data.properties,boundModel:b}}})),c}function l(a){if("process"!==a.type||!a.data?.properties)return a;let b={...a.data.properties};for(let a of f)delete b[a];return{...a,data:{...a.data,properties:b}}}function m(a){let b=a.nodes.filter(a=>a?.type==="subflow"||a?.data?.type==="subflow").map(a=>"string"==typeof a.id&&a.id.length>0?a.id:"<unknown>");if(b.length>0)throw new i(b)}function n(a){if(!a||"object"!=typeof a)throw Error("Behavior Flow is required");if("string"!=typeof a.id||0===a.id.length)throw Error("Behavior Flow id is required");if("string"!=typeof a.name||0===a.name.trim().length)throw Error("Behavior Flow name is required");if(!Array.isArray(a.nodes)||!Array.isArray(a.edges))throw Error("Behavior Flow must contain node and edge arrays");m(a);let b=j((0,e.l)(a));return delete b.createdAt,delete b.updatedAt,b.nodes=b.nodes.map(l),b}function o(a){let b={};for(let[c,d]of Object.entries(a))h.has(c)||(b[c]=d);return b.nodes=a.nodes.map(a=>{let b={};for(let[c,d]of Object.entries(a))"position"===c||g.has(c)||(b[c]=d);return b}),b}function p(a){if(null===a||"object"!=typeof a)return JSON.stringify(a)??"null";if(Array.isArray(a))return`[${a.map(p).join(",")}]`;let b=Object.keys(a).sort().filter(b=>void 0!==a[b]).map(b=>`${JSON.stringify(b)}:${p(a[b])}`);return`{${b.join(",")}}`}function q(a){let b=n(a);return(0,d.createHash)("sha256").update(p(o(b))).digest("hex")}function r(a){if(!a||"object"!=typeof a||Array.isArray(a))throw Error("Legacy Behavior Flow is required");if("string"!=typeof a.id||0===a.id.length)throw Error("Legacy Behavior Flow id is required");if("string"!=typeof a.name||0===a.name.trim().length)throw Error("Legacy Behavior Flow name is required");if(!Array.isArray(a.nodes)||!Array.isArray(a.edges))throw Error("Legacy Behavior Flow must contain node and edge arrays");m(a);let b=j(a);return delete b.createdAt,delete b.updatedAt,b.nodes=b.nodes.map(l),(0,d.createHash)("sha256").update(p(o(b))).digest("hex")}function s(a,b){if(q(a)===b)return!0;let c=n(a);if(!Object.prototype.hasOwnProperty.call(c,"behaviorRules"))return!1;let{behaviorRules:d,...e}=c;return r({...e,permissionRules:d})===b}function t(a,b){let c=n({...b,id:a.id,name:a.name}),d=new Set;for(let[b,e]of a.nodes.entries()){if("process"!==e.data.type||e.data.properties?.boundModel)continue;let a=c.nodes[b]?.data.properties?.boundModel;"string"==typeof a&&a.length>0&&d.add(a)}if(d.size>1)return!1;let[e]=d,f=k(a,e);return q(c)===q(f)}function u(a){return"role_template"===a.source.kind?{sourceFlowRef:a.source.templateFlowId}:"persona_override"===a.source.kind?{...a.source.sourceFlowRef?{sourceFlowRef:a.source.sourceFlowRef}:{},...a.source.overrideFlowRef?{overrideFlowRef:a.source.overrideFlowRef}:{}}:{}}function v(a){let b=(0,d.createHash)("sha256").update(p(a)).digest("base64url");return`br_${b}`}}};
+"use strict";exports.id=5399,exports.ids=[5399],exports.modules={15372:(a,b,c)=>{c.d(b,{H:()=>g});var d=c(74998);let e={now:()=>Date.now(),monotonicNow:()=>d.performance.now(),setTimer(a,b){let c=setTimeout(a,b);return{clear:()=>clearTimeout(c),unref:()=>c.unref?.()}},sleep:a=>new Promise(b=>setTimeout(b,a))},f={now:()=>e.now(),monotonicNow:()=>e.monotonicNow(),setTimer:(a,b)=>e.setTimer(a,b),sleep:a=>e.sleep(a)};function g(){return f}},25399:(a,b,c)=>{c.d(b,{_T:()=>af,b7:()=>B,qU:()=>z,r4:()=>ah,vd:()=>ag});var d=c(55511),e=c(79646),f=c(29021),g=c(33873),h=c.n(g),i=c(28354),j=c(65445),k=c(48970),l=c(15372),m=c(7986);let n=(0,l.H)(),o=[".runtime-locks","enduring-agents"],p=["darwin","linux","win32"].includes(process.platform),q=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,r=(0,i.promisify)(e.execFile),s=async(a,b,c)=>{let{stdout:d}=await r(a,b,c);return{stdout:String(d)}},t=global.__flujo_enduring_agent_process_instance_id??=(0,d.randomUUID)(),u=global.__flujo_enduring_agent_active_lock_owners??=new Set,v=global.__flujo_enduring_agent_issued_runtime_lock_scopes_v2??=new WeakMap,w=global.__flujo_enduring_agent_deferred_lock_cleanups??=new Set,x=new Map,y=new Map;async function z(a,b,c){let d=function(a,b){let c=v.get(a);if(!c||c.personaId!==b||c.workspace!==(0,m.getCurrentWorkspace)())throw Error("Persona runtime lock capability was not issued by this runtime.");return c}(a,b);if(d.closing)throw Error("Persona runtime lock capability is closing.");d.activeOperations+=1;try{return await a.assertOwned(),await c()}finally{if(d.activeOperations-=1,0===d.activeOperations){for(let a of d.idleWaiters)a();d.idleWaiters.clear()}}}async function A(a){let b=v.get(a);b&&(b.closing=!0,b.activeOperations>0&&await new Promise(a=>b.idleWaiters.add(a)))}class B extends Error{constructor(a){super(`Timed out acquiring the runtime lock for Persona ${JSON.stringify(a)}.`),this.personaId=a,this.code="PERSONA_RUNTIME_LOCK_TIMEOUT",this.name="PersonaRuntimeLockTimeoutError"}}class C extends Error{constructor(a){super(`Lost the runtime lock for Persona ${JSON.stringify(a)}.`),this.personaId=a,this.code="PERSONA_RUNTIME_LOCK_LOST",this.name="PersonaRuntimeLockLostError"}}function D(a){return n.sleep(a)}async function E(){await (0,m.ensureWorkspaceDirs)((0,m.getCurrentWorkspace)());let a=h().resolve((0,m.getWorkspaceDbDir)()),b=h().join(a,...o);await f.promises.mkdir(b,{recursive:!0});let[c,d]=await Promise.all([f.promises.realpath(a),f.promises.realpath(b)]),e=h().relative(c,d);if(""===e||e.startsWith("..")||h().isAbsolute(e))throw Error(`Persona runtime lock root escapes the workspace database: ${b}`);return d}async function F(a){try{let b=JSON.parse(await f.promises.readFile(a,"utf8"));if(!b||"object"!=typeof b||Array.isArray(b))throw Error(`Persona runtime lock ${JSON.stringify(a)} is malformed.`);return b}catch(a){if("ENOENT"===a.code)return null;throw a}}function G(a,b){if("string"!=typeof b.ownerId||!q.test(b.ownerId)||"string"!=typeof b.processInstanceId||"number"!=typeof b.pid||!Number.isInteger(b.pid)||b.pid<=0||void 0!==b.processBirthMarker&&"string"!=typeof b.processBirthMarker||void 0!==b.processBirthMarkerV2&&"string"!=typeof b.processBirthMarkerV2||"string"!=typeof b.workspace||"number"!=typeof b.acquiredAt)throw Error(`Persona runtime lock ${JSON.stringify(a)} is malformed.`);return b}async function H(a){let b=await F(a);return b?G(a,b):null}async function I(a){let b=await F(a);if(!b)return null;let c=G(a,b);if("string"!=typeof b.targetOwnerId||!q.test(b.targetOwnerId)||"string"!=typeof b.targetProcessInstanceId||"number"!=typeof b.targetPid||!Number.isInteger(b.targetPid)||b.targetPid<=0)throw Error(`Persona runtime recovery lock ${JSON.stringify(a)} is malformed.`);return{...c,...b}}async function J(a,b){let c=`${h().basename(b)}.recovery.`,d=(await f.promises.readdir(a)).filter(a=>a.startsWith(c)&&q.test(a.slice(c.length)));return(await Promise.all(d.map(async b=>{let c=h().join(a,b),d=await I(c);return d?{path:c,owner:d}:null}))).filter(a=>null!==a)}function K(a,b){if(!q.test(b))throw Error(`Persona runtime lock owner id ${JSON.stringify(b)} is malformed.`);let c=h().dirname(a),d=h().join(c,`${h().basename(a)}.abandoned.${b}`);if(h().dirname(d)!==c)throw Error("Persona runtime abandonment marker escapes its lock directory.");return d}async function L(a,b){let c=`${h().basename(b)}.abandoned.`;return new Set((await f.promises.readdir(a)).filter(a=>a.startsWith(c)&&q.test(a.slice(c.length))).map(a=>a.slice(c.length)))}async function M(a,b,c){let d=K(b,c.ownerId);return await _(a,d,c),d}async function N(a){try{await Z(a)}catch{}}async function O(){let a=global.__flujo_enduring_agent_linux_boot_id??=f.promises.readFile("/proc/sys/kernel/random/boot_id","utf8").then(a=>a.trim()||null).catch(()=>null),b=await a;return b||global.__flujo_enduring_agent_linux_boot_id!==a||(global.__flujo_enduring_agent_linux_boot_id=void 0),b}async function P(a){let b=process.env.SystemRoot??process.env.WINDIR;if(!b||!h().win32.isAbsolute(b))return null;let c=h().win32.normalize(b);if(!/^[a-z]:\\/i.test(c))return null;let d=h().win32.join(c,"System32","WindowsPowerShell","v1.0","powershell.exe"),{stdout:e}=await s(d,["-NoProfile","-NonInteractive","-Command",`$p=Get-Process -Id ${a} -ErrorAction Stop; $p.StartTime.ToUniversalTime().Ticks`],{encoding:"utf8",timeout:a===process.pid?3e3:900,windowsHide:!0}),f=e.trim();return/^[1-9]\d*$/.test(f)?`win32-v2:${f}`:null}async function Q(a){if("linux"===process.platform){let[b,c]=await Promise.all([f.promises.readFile(`/proc/${a}/stat`,"utf8"),O()]);if(!c)return null;let d=b.lastIndexOf(")");if(d<0)return null;let e=b.slice(d+1).trim().split(/\s+/);if("Z"===e[0])return"dead:linux-zombie";let g=e[19];return g?`linux-v2:${c}:${g}`:null}if("win32"===process.platform)return P(a);if("darwin"===process.platform){let{stdout:b}=await s("/bin/ps",["-o","state=","-o","lstart=","-p",String(a)],{encoding:"utf8",timeout:3e3,env:{...process.env,LANG:"C",LC_ALL:"C",TZ:"UTC"}}),c=b.trim(),d=/^(\S+)\s+(.+)$/.exec(c);return d?d[1].includes("Z")?"dead:darwin-zombie":`darwin-v2:${d[2].trim()}`:null}return null}async function R(a){try{let b=await Q(a);return b?{marker:b}:{marker:null,failure:"probe returned no valid birth identity"}}catch(b){let a="string"==typeof b?.code&&/^[A-Z0-9_]{1,32}$/.test(b.code)?b.code:void 0;return{marker:null,failure:b?.killed===!0||"ETIMEDOUT"===a?"process birth probe timed out":`process birth probe failed${a?` (${a})`:""}`}}}async function S(a){return(await R(a)).marker}async function T(){if(!p)return S(process.pid);let a="probe returned no valid birth identity";for(let b=0;b<3;b+=1){let c=await R(process.pid);if(c.marker&&W(c.marker))return c.marker;a=c.failure??"probe returned an invalid birth identity",b+1<3&&await D(100)}throw Error(`Unable to establish this process birth identity for Persona locking. Failed after 3 attempts: ${a}.`)}async function U(){let a=global.__flujo_enduring_agent_process_birth_marker_v2??=T();try{let b=await a;if(p&&(!b||!W(b)))throw Error("Unable to establish this process birth identity for Persona locking. Shared process birth identity is missing or invalid.");return b||global.__flujo_enduring_agent_process_birth_marker_v2!==a||(global.__flujo_enduring_agent_process_birth_marker_v2=void 0),b}catch(b){throw global.__flujo_enduring_agent_process_birth_marker_v2===a&&(global.__flujo_enduring_agent_process_birth_marker_v2=void 0),b}}async function V(a){if(a===process.pid)return U();let b=x.get(a);if(b&&n.monotonicNow()-b.checkedAt<1e3)return b.marker;let c=y.get(a);if(c)return c;let d=S(a).then(b=>(x.set(a,{checkedAt:n.monotonicNow(),marker:b}),b)).finally(()=>{y.get(a)===d&&y.delete(a)});return y.set(a,d),d}function W(a){return/^linux-v2:[0-9a-f-]{36}:\d+$/i.test(a)?"linux-v2":/^darwin-v2:[A-Z][a-z]{2} [A-Z][a-z]{2}\s+\d{1,2} \d{2}:\d{2}:\d{2} \d{4}$/.test(a)?"darwin-v2":/^win32-v2:\d+$/.test(a)?"win32-v2":null}function X(a,b){if(b.startsWith("dead:"))return!0;let c=W(a);return!!(c&&c===W(b)&&a!==b)}async function Y(a,b){if(b.has(a.ownerId))return!1;if(a.pid===process.pid){let b=await U();return!(a.processBirthMarkerV2&&b&&X(a.processBirthMarkerV2,b))&&(a.processInstanceId===t?u.has(a.ownerId):!a.processBirthMarkerV2||!b||!X(a.processBirthMarkerV2,b))}if(!function(a){try{return process.kill(a,0),!0}catch(a){if("ESRCH"===a.code)return!1;return!0}}(a.pid))return!1;if(!a.processBirthMarkerV2){let b=await V(a.pid);return b?.startsWith("dead:")&&(b=await S(a.pid),x.set(a.pid,{checkedAt:n.monotonicNow(),marker:b})),!b?.startsWith("dead:")}let c=await V(a.pid);return c&&X(a.processBirthMarkerV2,c)&&(c=await S(a.pid),x.set(a.pid,{checkedAt:n.monotonicNow(),marker:c})),!c||!X(a.processBirthMarkerV2,c)}async function Z(a){for(let b=0;b<20;b+=1)try{await f.promises.unlink(a);return}catch(c){let a=c.code;if("ENOENT"===a)return;if(!["EACCES","EBUSY","EPERM"].includes(a??"")||19===b)throw c;await D(25)}}async function $(a,b,c){let e=h().join(a,`${h().basename(b)}.candidate.${(0,d.randomUUID)()}`);try{await f.promises.writeFile(e,JSON.stringify(c),{encoding:"utf8",flag:"wx"});try{return await f.promises.link(e,b),!0}catch(a){if("EEXIST"===a.code)return!1;throw a}}finally{try{await f.promises.unlink(e)}catch{}}}async function _(a,b,c){let d=n.monotonicNow();for(;;)try{return await $(a,b,c)}catch(a){if(!["EACCES","EBUSY","EPERM"].includes(a.code??"")||n.monotonicNow()-d>=15e3)throw a;await D(25)}}function aa(a){return new Promise(b=>{n.setTimer(b,a).unref()})}async function ab(a,b,c,e){let f=await U(),g={ownerId:(0,d.randomUUID)(),processInstanceId:t,pid:process.pid,...f?{processBirthMarkerV2:f}:{},workspace:(0,m.getCurrentWorkspace)(),acquiredAt:n.now(),targetOwnerId:c.ownerId,targetProcessInstanceId:c.processInstanceId,targetPid:c.pid},h=`${b}.recovery.${g.ownerId}`;u.add(g.ownerId);let i=!1;try{if(!(i=await _(a,h,g)))throw Error(`Recovery intent ${JSON.stringify(g.ownerId)} already exists.`);return await e(g)}finally{if(i){let c=null;try{c=await M(a,b,g)}catch{}u.delete(g.ownerId);try{await Z(h),c&&await N(c)}catch{let c;c=`intent:${h}`,w.has(c)||(w.add(c),(async()=>{for(;;){let c=null;try{c=await M(a,b,g)}catch{}u.delete(g.ownerId);try{await Z(h),c&&await N(c);return}catch{await aa(1e3)}}})().finally(()=>{w.delete(c)}))}}else u.delete(g.ownerId)}}async function ac(a,b,c){await ab(a,b,c,async()=>{let d=null;try{d=await M(a,b,c)}finally{u.delete(c.ownerId)}let e=!1;try{let a=await H(b);a?.ownerId===c.ownerId&&a.processInstanceId===c.processInstanceId&&a.pid===c.pid&&await Z(b),e=!0}finally{e&&d&&await N(d)}})}function ad(a,b,c){let d=`canonical:${b}:${c.ownerId}`;w.has(d)||(w.add(d),(async()=>{for(;;)try{await ac(a,b,c);return}catch{try{let a=await H(b);if(!a||a.ownerId!==c.ownerId||a.processInstanceId!==c.processInstanceId||a.pid!==c.pid)return}catch{}await aa(1e3)}})().finally(()=>{w.delete(d)}))}async function ae(a){let b=await E(),c=h().join(b,`${a}.lock`),e=await U(),f={ownerId:(0,d.randomUUID)(),processInstanceId:t,pid:process.pid,...e?{processBirthMarkerV2:e}:{},workspace:(0,m.getCurrentWorkspace)(),acquiredAt:n.now()};u.add(f.ownerId);let g=n.monotonicNow(),i=!1;try{for(;;){let[d,e]=await Promise.all([J(b,c),L(b,c)]),h=await Promise.all(d.map(async a=>({...a,alive:await Y(a.owner,e)}))),j=h.filter(a=>a.alive);if(await Promise.all(h.filter(a=>!a.alive).map(async({path:a,owner:b})=>{await Z(a),await N(K(c,b.ownerId))})),j.length>0){if(n.monotonicNow()-g>=15e3)throw new B(a);await D(25);continue}if(i){let a=await H(c);if(a?.ownerId===f.ownerId&&a.processInstanceId===f.processInstanceId&&a.pid===f.pid)break;i=!1}if(await _(b,c,f)){i=!0;let[a,d]=await Promise.all([J(b,c),L(b,c)]);if((await Promise.all(a.map(({owner:a})=>Y(a,d)))).some(Boolean)){await D(25);continue}let e=await H(c);if(e?.ownerId===f.ownerId&&e.processInstanceId===f.processInstanceId&&e.pid===f.pid)break;i=!1;continue}let k=await H(c);if(k){if(!await Y(k,e)){await ab(b,c,k,async a=>{let d=await H(c),e=await L(b,c);d&&d.ownerId===a.targetOwnerId&&d.processInstanceId===a.targetProcessInstanceId&&d.pid===a.targetPid&&!await Y(d,e)&&(await Z(c),await N(K(c,d.ownerId)))});continue}if(n.monotonicNow()-g>=15e3)throw new B(a);await D(25)}}}catch(a){try{if(i)try{await ac(b,c,f)}catch(a){throw ad(b,c,f),a}}finally{u.delete(f.ownerId)}throw a}let j=async()=>{let b=await H(c);if(b?.ownerId!==f.ownerId||b.processInstanceId!==f.processInstanceId||b.pid!==f.pid||b.workspace!==f.workspace)throw new C(a)},k={assertOwned:j};return v.set(k,{personaId:a,workspace:f.workspace,closing:!1,activeOperations:0,idleWaiters:new Set}),{lock:k,release:async()=>{let a;await A(k);try{await j()}catch(b){a=b}try{try{await ac(b,c,f)}catch(a){throw ad(b,c,f),a}}finally{u.delete(f.ownerId),v.delete(k)}if(a)throw a}}}function af(a,b){return(0,j.ln)(a),(0,j.l_)(`enduring-agent-runtime/${a}`,async()=>{let c=await ae(a);try{return await b(c.lock)}finally{await c.release()}})}function ag(a,b){(0,j.ln)(a);let c=`.${a}`;return(0,j.l_)(`workspace-runtime/${a}`,async()=>{let a=await ae(c);try{return await b(a.lock)}finally{await a.release()}})}function ah(a,b){return(0,j.ln)(a),ag((0,k.k$)("rolelock",{purpose:"role-definition-mutation-v1",roleDefinitionId:a}),b)}},48970:(a,b,c)=>{c.d(b,{NG:()=>l,WK:()=>k,k$:()=>j,vH:()=>m});var d=c(55511),e=c(19913),f=c(53912);let g=/^[A-Za-z][A-Za-z0-9_-]{0,15}$/;function h(a){if(!g.test(a))throw Error(`Invalid enduring-agent id prefix: ${JSON.stringify(a)}`)}function i(a){if(!e.sX.test(a))throw Error(`Generated invalid enduring-agent id: ${JSON.stringify(a)}`);return a}function j(a,b){h(a);let c=(0,d.createHash)("sha256").update((0,f.dj)(b)).digest("base64url");return i(`${a}_${c}`)}function k(a){return h(a),i(`${a}_${(0,d.randomUUID)().replaceAll("-","")}`)}function l(a,b){return j("deletion",{purpose:"persona-deletion-tombstone-v1",workspaceId:a,personaId:b})}function m(a,b){return j("appgrant",{purpose:"persona-app-grant-v1",personaId:a,mcpServerName:b})}},53912:(a,b,c)=>{c.d(b,{BX:()=>n,OY:()=>r,Yk:()=>t,b9:()=>u,dj:()=>p,lG:()=>k,n0:()=>q,xY:()=>s,z8:()=>v});var d=c(55511),e=c(52467);let f=new Set(["mcpNodes","resourceNodes"]),g=new Set(["selected","dragging","resizing","width","height","measured","positionAbsolute","zIndex"]),h=new Set(["createdAt","updatedAt","folder","favorite"]);class i extends Error{constructor(a){const b=Array.from(new Set(a));super(`Behavior Flow contains Subflow node${1===b.length?"":"s"} (${b.join(", ")}). Immutable Behavior revisions cannot resolve mutable child Flows until dependency snapshots and manifests are supported.`),this.code="BEHAVIOR_SUBFLOW_DEPENDENCY_UNSUPPORTED",this.name="BehaviorSubflowDependencyError",this.nodeIds=Object.freeze(b)}}function j(a){return JSON.parse(JSON.stringify(a))}function k(a,b){let c=j(a);return b&&(c.nodes=c.nodes.map(a=>"process"!==a.data.type||a.data.properties?.boundModel?a:{...a,data:{...a.data,properties:{...a.data.properties,boundModel:b}}})),c}function l(a){if("process"!==a.type||!a.data?.properties)return a;let b={...a.data.properties};for(let a of f)delete b[a];return{...a,data:{...a.data,properties:b}}}function m(a){let b=a.nodes.filter(a=>a?.type==="subflow"||a?.data?.type==="subflow").map(a=>"string"==typeof a.id&&a.id.length>0?a.id:"<unknown>");if(b.length>0)throw new i(b)}function n(a){if(!a||"object"!=typeof a)throw Error("Behavior Flow is required");if("string"!=typeof a.id||0===a.id.length)throw Error("Behavior Flow id is required");if("string"!=typeof a.name||0===a.name.trim().length)throw Error("Behavior Flow name is required");if(!Array.isArray(a.nodes)||!Array.isArray(a.edges))throw Error("Behavior Flow must contain node and edge arrays");m(a);let b=j((0,e.l)(a));return delete b.createdAt,delete b.updatedAt,b.nodes=b.nodes.map(l),b}function o(a){let b={};for(let[c,d]of Object.entries(a))h.has(c)||(b[c]=d);return b.nodes=a.nodes.map(a=>{let b={};for(let[c,d]of Object.entries(a))"position"===c||g.has(c)||(b[c]=d);return b}),b}function p(a){if(null===a||"object"!=typeof a)return JSON.stringify(a)??"null";if(Array.isArray(a))return`[${a.map(p).join(",")}]`;let b=Object.keys(a).sort().filter(b=>void 0!==a[b]).map(b=>`${JSON.stringify(b)}:${p(a[b])}`);return`{${b.join(",")}}`}function q(a){let b=n(a);return(0,d.createHash)("sha256").update(p(o(b))).digest("hex")}function r(a){if(!a||"object"!=typeof a||Array.isArray(a))throw Error("Legacy Behavior Flow is required");if("string"!=typeof a.id||0===a.id.length)throw Error("Legacy Behavior Flow id is required");if("string"!=typeof a.name||0===a.name.trim().length)throw Error("Legacy Behavior Flow name is required");if(!Array.isArray(a.nodes)||!Array.isArray(a.edges))throw Error("Legacy Behavior Flow must contain node and edge arrays");m(a);let b=j(a);return delete b.createdAt,delete b.updatedAt,b.nodes=b.nodes.map(l),(0,d.createHash)("sha256").update(p(o(b))).digest("hex")}function s(a,b){if(q(a)===b)return!0;let c=n(a);if(!Object.prototype.hasOwnProperty.call(c,"behaviorRules"))return!1;let{behaviorRules:d,...e}=c;return r({...e,permissionRules:d})===b}function t(a,b){let c=n({...b,id:a.id,name:a.name}),d=new Set;for(let[b,e]of a.nodes.entries()){if("process"!==e.data.type||e.data.properties?.boundModel)continue;let a=c.nodes[b]?.data.properties?.boundModel;"string"==typeof a&&a.length>0&&d.add(a)}if(d.size>1)return!1;let[e]=d,f=k(a,e);return q(c)===q(f)}function u(a){return"role_template"===a.source.kind?{sourceFlowRef:a.source.templateFlowId}:"persona_override"===a.source.kind?{...a.source.sourceFlowRef?{sourceFlowRef:a.source.sourceFlowRef}:{},...a.source.overrideFlowRef?{overrideFlowRef:a.source.overrideFlowRef}:{}}:{}}function v(a){let b=(0,d.createHash)("sha256").update(p(a)).digest("base64url");return`br_${b}`}}};