mstro-app 0.4.21 → 0.4.24

package/dist/server/services/deploy/board-execution-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"board-execution-handler.d.ts","sourceRoot":"","sources":["../../../../server/services/deploy/board-execution-handler.ts"],"names":[],"mappings":"AA2CA;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAoB5D;AAID,MAAM,WAAW,qBAAqB;IACpC,kFAAkF;IAClF,eAAe,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,+DAA+D;IAC/D,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,qDAAqD;IACrD,4BAA4B,EAAE,MAAM,CAAC;IACrC,yDAAyD;IACzD,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,uBAAuB,GAC/B,mBAAmB,GACnB,aAAa,GACb,wBAAwB,GACxB,0BAA0B,GAC1B,qBAAqB,GACrB,2BAA2B,GAC3B,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,uBAAuB,GAC/B,aAAa,GACb,WAAW,GACX,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,WAAW,GAAG,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,MAAM,CAAC;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,uBAAuB,CAAC;IAChC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACvC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAsd9C;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,oBAAoB,GAC3B,yBAAyB,CAkH3B;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,GACjB,0BAA0B,GAAG,IAAI,CAgBnC;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,YAAY,EAAE,MAAM,GAAG;IACtE,sBAAsB,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAOA;AAED;;;GAGG;AACH,wBAAgB,sCAAsC,CACpD,YAAY,EAAE,MAAM,GACnB,IAAI,CAEN;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CA+B/C"}

package/dist/server/services/deploy/board-execution-handler.js

@@ -0,0 +1,621 @@
+// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
+// Licensed under the MIT License. See LICENSE file for details.
+/**
+ * Board Execution Handler
+ *
+ * Handles PM Board execution requests from a developer's backend on behalf
+ * of end users. Each execution is isolated — no shared context between
+ * end users.
+ *
+ * Flow:
+ * 1. Validate boardTemplateId against deployment's allowedBoardTemplateIds
+ * 2. Load the referenced board template from .mstro/pm/boards/
+ * 3. Create an isolated working directory (git worktree)
+ * 4. Use headless Claude Code to customize the board from end-user prompt
+ * 5. Trigger PM Board "implement all" execution via PlanExecutor
+ * 6. Collect results and return them
+ *
+ * Board executions are long-running — returns a job ID immediately with
+ * polling for status and results.
+ *
+ * Security: End-user prompts are untrusted input. They are always passed
+ * as user messages, never injected into system instructions.
+ */
+import { execSync } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { cpSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, statSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { HeadlessRunner } from '../../cli/headless/runner.js';
+import { PlanExecutor } from '../plan/executor.js';
+import { parseBoardDirectory, resolvePmDir } from '../plan/parser.js';
+import { readOwnerApiCredential } from './deploy-ai-service.js';
+// ========== Prompt Sanitization ==========
+/**
+ * Maximum allowed length for an end-user prompt.
+ * Prevents memory abuse and ensures reasonable prompt sizes.
+ */
+const MAX_END_USER_PROMPT_LENGTH = 100_000;
+/**
+ * Sanitize an end-user prompt before passing it to the AI.
+ *
+ * SECURITY: End-user prompts are untrusted. This function:
+ * 1. Strips system instruction XML delimiters to prevent prompt escape
+ * 2. Removes null bytes and zero-width characters used for evasion
+ * 3. Truncates to MAX_END_USER_PROMPT_LENGTH
+ *
+ * Note: This does NOT strip tool-use instructions or path traversal text —
+ * those are handled by the Security Bouncer (tool execution level) and
+ * the isolated working directory (filesystem level).
+ */
+export function sanitizeEndUserPrompt(prompt) {
+    let sanitized = prompt;
+    // Strip system instruction XML tags that could break prompt structure
+    sanitized = sanitized.replace(/<\/?system-instruction>/gi, '');
+    // Remove null bytes
+    sanitized = sanitized.replace(/\x00/g, '');
+    // Remove zero-width characters used for evasion
+    // U+200B Zero Width Space, U+200C Zero Width Non-Joiner,
+    // U+200D Zero Width Joiner, U+FEFF Byte Order Mark
+    sanitized = sanitized.replace(/\u200B|\u200C|\u200D|\uFEFF/g, '');
+    // Truncate to max length
+    if (sanitized.length > MAX_END_USER_PROMPT_LENGTH) {
+        sanitized = sanitized.slice(0, MAX_END_USER_PROMPT_LENGTH);
+    }
+    return sanitized;
+}
+const rateBuckets = new Map();
+function getBucket(deploymentId) {
+    let bucket = rateBuckets.get(deploymentId);
+    if (!bucket) {
+        bucket = { timestamps: [], activeExecutions: 0 };
+        rateBuckets.set(deploymentId, bucket);
+    }
+    return bucket;
+}
+function pruneTimestamps(bucket) {
+    const oneMinuteAgo = Date.now() - 60_000;
+    while (bucket.timestamps.length > 0 && bucket.timestamps[0] < oneMinuteAgo) {
+        bucket.timestamps.shift();
+    }
+}
+function checkRateLimit(config) {
+    const bucket = getBucket(config.deploymentId);
+    // Check concurrent executions
+    if (bucket.activeExecutions >= config.maxConcurrentBoardExecutions) {
+        return {
+            code: 'CONCURRENT_LIMIT_EXCEEDED',
+            message: `Deployment has reached the maximum of ${config.maxConcurrentBoardExecutions} concurrent board executions. Wait for an existing execution to complete.`,
+        };
+    }
+    // Check executions per minute
+    if (config.maxBoardExecutionsPerMinute !== null) {
+        pruneTimestamps(bucket);
+        if (bucket.timestamps.length >= config.maxBoardExecutionsPerMinute) {
+            return {
+                code: 'RATE_LIMIT_EXCEEDED',
+                message: `Deployment has exceeded the rate limit of ${config.maxBoardExecutionsPerMinute} board executions per minute. Try again shortly.`,
+            };
+        }
+    }
+    return null;
+}
+function recordExecutionStart(deploymentId) {
+    const bucket = getBucket(deploymentId);
+    bucket.timestamps.push(Date.now());
+    bucket.activeExecutions++;
+}
+function recordExecutionEnd(deploymentId) {
+    const bucket = getBucket(deploymentId);
+    bucket.activeExecutions = Math.max(0, bucket.activeExecutions - 1);
+}
+// ========== Job Store ==========
+/** Retention window for completed/failed jobs before cleanup (5 minutes) */
+const JOB_RETENTION_MS = 300_000;
+const jobs = new Map();
+function createJob(request) {
+    const jobId = `board-exec-${request.deploymentId}-${randomUUID()}`;
+    const now = Date.now();
+    const job = {
+        jobId,
+        deploymentId: request.deploymentId,
+        endUserId: request.endUserId,
+        boardTemplateId: request.boardTemplateId,
+        endUserPrompt: request.endUserPrompt,
+        status: 'customizing',
+        progress: {
+            phase: 'isolating',
+            issuesTotal: 0,
+            issuesCompleted: 0,
+            currentWaveIds: [],
+        },
+        result: null,
+        error: null,
+        createdAt: now,
+        updatedAt: now,
+        isolatedDir: null,
+    };
+    jobs.set(jobId, job);
+    return job;
+}
+function updateJob(jobId, updates) {
+    const job = jobs.get(jobId);
+    if (!job)
+        return;
+    Object.assign(job, updates, { updatedAt: Date.now() });
+}
+function scheduleJobCleanup(jobId) {
+    setTimeout(() => {
+        const job = jobs.get(jobId);
+        if (job && job.status !== 'customizing' && job.status !== 'executing') {
+            if (job.isolatedDir) {
+                cleanupIsolatedDir(job.isolatedDir);
+            }
+            jobs.delete(jobId);
+        }
+    }, JOB_RETENTION_MS);
+}
+// ========== Isolation ==========
+function isGitRepo(dir) {
+    try {
+        execSync('git rev-parse --is-inside-work-tree', { cwd: dir, stdio: 'pipe' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Create an isolated working directory for a board execution.
+ *
+ * Uses git worktree for git repos (efficient — shares object store).
+ * Falls back to a filtered directory copy for non-git repos.
+ *
+ * .mstro/pm/ is gitignored, so it is always copied manually.
+ */
+function createIsolatedDir(workingDir) {
+    const prefix = join(tmpdir(), 'mstro-board-exec-');
+    if (isGitRepo(workingDir)) {
+        const isolatedDir = mkdtempSync(prefix);
+        // git worktree needs a non-existent path
+        rmSync(isolatedDir, { recursive: true, force: true });
+        execSync(`git worktree add --detach "${isolatedDir}"`, {
+            cwd: workingDir,
+            stdio: 'pipe',
+        });
+        // .mstro/ is gitignored — copy the PM directory manually
+        const pmDir = join(workingDir, '.mstro', 'pm');
+        const isolatedPmDir = join(isolatedDir, '.mstro', 'pm');
+        if (existsSync(pmDir) && !existsSync(isolatedPmDir)) {
+            mkdirSync(join(isolatedDir, '.mstro'), { recursive: true });
+            cpSync(pmDir, isolatedPmDir, { recursive: true });
+        }
+        return isolatedDir;
+    }
+    // Fallback: filtered directory copy for non-git repos
+    const isolatedDir = mkdtempSync(prefix);
+    cpSync(workingDir, isolatedDir, {
+        recursive: true,
+        filter: (src) => !src.includes('node_modules') && !src.includes('.git'),
+    });
+    return isolatedDir;
+}
+function cleanupIsolatedDir(isolatedDir) {
+    try {
+        // Try git worktree remove first
+        execSync(`git worktree remove --force "${isolatedDir}"`, { stdio: 'pipe' });
+    }
+    catch {
+        // Fallback: direct removal
+        try {
+            rmSync(isolatedDir, { recursive: true, force: true });
+        }
+        catch { /* best-effort cleanup */ }
+    }
+}
+// ========== Board Template Loading ==========
+function validateBoardTemplate(workingDir, boardTemplateId) {
+    const pmDir = resolvePmDir(workingDir);
+    if (!pmDir)
+        return null;
+    const boardState = parseBoardDirectory(pmDir, boardTemplateId);
+    if (!boardState)
+        return null;
+    return {
+        issueCount: boardState.issues.filter(i => i.type !== 'epic').length,
+    };
+}
+// ========== Board Customization ==========
+/**
+ * Build the customization prompt. The system instruction explains the task;
+ * the end-user prompt is in a separate, clearly delimited section.
+ *
+ * SECURITY: The end-user prompt is never interpolated into the system
+ * instruction. It appears in the user-message section only.
+ */
+function buildCustomizationPrompt(boardTemplateId, endUserPrompt, isolatedDir) {
+    const pmDir = resolvePmDir(isolatedDir);
+    const boardDir = pmDir ? join(pmDir, 'boards', boardTemplateId) : '';
+    const backlogDir = boardDir ? join(boardDir, 'backlog') : '';
+    const systemInstruction = `You are customizing a PM Board template for an end user's specific needs.
+
+## Board Template
+Board ID: ${boardTemplateId}
+Board directory: ${boardDir}
+Backlog directory: ${backlogDir}
+
+## Task
+
+Read all issue files in the board's backlog directory. Then adapt every issue to fulfill the end user's request below. For each issue:
+
+1. Update the description to be specific to the end user's needs
+2. Update acceptance criteria to match their requirements
+3. Update technical notes with relevant implementation details
+4. Update "Files to Modify" if applicable
+5. Preserve all YAML front matter fields (id, type, status, priority, blocked_by, etc.)
+6. Do NOT change issue IDs, dependency edges, or the overall board structure
+
+If issues need to be added or removed to properly serve the end user's request, you may do so — but preserve the dependency graph's integrity.
+
+## Rules
+
+- All changes must be within ${backlogDir}
+- Preserve YAML front matter structure exactly
+- Keep issue scoping appropriate (1-5 story points each)
+- Ensure blocked_by references remain valid
+- Do NOT modify board.md, STATE.md, or any files outside the backlog
+- Respond briefly describing what you changed`;
+    return [
+        '<system-instruction>',
+        systemInstruction,
+        '</system-instruction>',
+        '',
+        endUserPrompt,
+    ].join('\n');
+}
+/**
+ * Customize a board template via headless Claude Code session.
+ * Claude reads the board's issues and adapts them for the end user's prompt.
+ */
+async function customizeBoard(boardTemplateId, endUserPrompt, isolatedDir, apiKey) {
+    const prompt = buildCustomizationPrompt(boardTemplateId, endUserPrompt, isolatedDir);
+    const runner = new HeadlessRunner({
+        workingDir: isolatedDir,
+        directPrompt: prompt,
+        stallWarningMs: 300_000, // 5 min
+        stallKillMs: 900_000, // 15 min
+        stallHardCapMs: 1_800_000, // 30 min hard cap
+        extraEnv: { ANTHROPIC_API_KEY: apiKey },
+        verbose: false,
+        deployMode: true, // Activate deploy-specific bouncer patterns
+    });
+    const result = await runner.run();
+    return { completed: result.completed, error: result.error };
+}
+// ========== Board Execution ==========
+/**
+ * Run the full board execution ("implement all") via PlanExecutor.
+ * Listens to executor events to track progress on the parent job.
+ */
+async function executeBoard(boardTemplateId, isolatedDir, job, apiKey) {
+    const startTime = Date.now();
+    const executor = new PlanExecutor(isolatedDir, {
+        extraEnv: { ANTHROPIC_API_KEY: apiKey },
+    });
+    // Track progress via executor events
+    executor.on('waveStarted', (data) => {
+        const current = jobs.get(job.jobId);
+        if (current) {
+            updateJob(job.jobId, {
+                progress: { ...current.progress, currentWaveIds: data.issueIds },
+            });
+        }
+    });
+    executor.on('issueCompleted', () => {
+        const current = jobs.get(job.jobId);
+        if (current) {
+            updateJob(job.jobId, {
+                progress: {
+                    ...current.progress,
+                    issuesCompleted: current.progress.issuesCompleted + 1,
+                    currentWaveIds: [],
+                },
+            });
+        }
+    });
+    await executor.startBoard(boardTemplateId);
+    // Collect output artifacts
+    const outputs = collectOutputs(isolatedDir, boardTemplateId);
+    const metrics = executor.getMetrics();
+    return {
+        completed: executor.getStatus() === 'complete',
+        issuesTotal: metrics.issuesAttempted,
+        issuesCompleted: metrics.issuesCompleted,
+        issuesFailed: metrics.issuesAttempted - metrics.issuesCompleted,
+        outputs,
+        durationMs: Date.now() - startTime,
+    };
+}
+// ========== Result Collection ==========
+function collectOutputs(isolatedDir, boardTemplateId) {
+    const pmDir = resolvePmDir(isolatedDir);
+    if (!pmDir)
+        return {};
+    const outDir = join(pmDir, 'boards', boardTemplateId, 'out');
+    if (!existsSync(outDir))
+        return {};
+    const outputs = {};
+    try {
+        for (const file of readdirSync(outDir)) {
+            if (file.endsWith('.md')) {
+                outputs[file] = readFileSync(join(outDir, file), 'utf-8');
+            }
+        }
+    }
+    catch { /* non-fatal */ }
+    return outputs;
+}
+// ========== Background Execution ==========
+/**
+ * Orchestrates the full board execution lifecycle. Updates job state
+ * as it progresses through isolation, customization, execution, and
+ * result collection phases.
+ */
+async function runBoardExecution(job, config, apiKey) {
+    try {
+        // Phase 1: Create isolated working directory
+        updateJob(job.jobId, {
+            progress: { ...job.progress, phase: 'isolating' },
+        });
+        let isolatedDir;
+        try {
+            isolatedDir = createIsolatedDir(config.workingDir);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            updateJob(job.jobId, {
+                status: 'failed',
+                error: `Failed to create isolated directory: ${message}`,
+            });
+            return;
+        }
+        updateJob(job.jobId, { isolatedDir });
+        // Phase 2: Customize board via headless Claude Code
+        updateJob(job.jobId, {
+            status: 'customizing',
+            progress: { ...job.progress, phase: 'customizing' },
+        });
+        const customization = await customizeBoard(job.boardTemplateId, sanitizeEndUserPrompt(job.endUserPrompt), isolatedDir, apiKey);
+        if (!customization.completed) {
+            updateJob(job.jobId, {
+                status: 'failed',
+                error: `Board customization failed: ${customization.error || 'Unknown error'}`,
+            });
+            return;
+        }
+        // Phase 3: Execute board ("implement all")
+        updateJob(job.jobId, {
+            status: 'executing',
+            progress: { ...job.progress, phase: 'executing' },
+        });
+        const result = await executeBoard(job.boardTemplateId, isolatedDir, job, apiKey);
+        // Phase 4: Store results
+        updateJob(job.jobId, {
+            status: result.completed ? 'completed' : 'failed',
+            progress: {
+                phase: 'done',
+                issuesTotal: result.issuesTotal,
+                issuesCompleted: result.issuesCompleted,
+                currentWaveIds: [],
+            },
+            result,
+            error: result.completed ? null : 'Board execution did not complete all issues',
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        updateJob(job.jobId, {
+            status: 'failed',
+            error: message,
+        });
+    }
+    finally {
+        recordExecutionEnd(job.deploymentId);
+        scheduleJobCleanup(job.jobId);
+    }
+}
+// ========== Public API ==========
+/**
+ * Start a board execution for an end user. Returns a job ID immediately.
+ * The execution runs asynchronously — poll with getBoardExecutionStatus().
+ *
+ * Validates the deployment config, checks rate limits, verifies the board
+ * template exists and is allowed, then launches the background execution.
+ *
+ * @returns Structured result with either the job ID or an error.
+ */
+export function startBoardExecution(request, config) {
+    // ── Validate request ───────────────────────────────────────
+    if (!request.endUserPrompt || request.endUserPrompt.trim().length === 0) {
+        return {
+            ok: false,
+            error: { code: 'INVALID_REQUEST', message: 'endUserPrompt is required and must not be empty.' },
+        };
+    }
+    if (request.endUserPrompt.length > MAX_END_USER_PROMPT_LENGTH) {
+        return {
+            ok: false,
+            error: {
+                code: 'INVALID_REQUEST',
+                message: `endUserPrompt exceeds the maximum allowed length of ${MAX_END_USER_PROMPT_LENGTH.toLocaleString()} characters.`,
+            },
+        };
+    }
+    if (!request.endUserId || request.endUserId.trim().length === 0) {
+        return {
+            ok: false,
+            error: { code: 'INVALID_REQUEST', message: 'endUserId is required.' },
+        };
+    }
+    if (!request.boardTemplateId || request.boardTemplateId.trim().length === 0) {
+        return {
+            ok: false,
+            error: { code: 'INVALID_REQUEST', message: 'boardTemplateId is required.' },
+        };
+    }
+    // ── Validate boardTemplateId format (path traversal defense) ─
+    if (/[/\\]|\.\.|\x00/.test(request.boardTemplateId)) {
+        return {
+            ok: false,
+            error: {
+                code: 'INVALID_BOARD_TEMPLATE',
+                message: 'boardTemplateId contains invalid characters (/, \\, .., or null bytes).',
+            },
+        };
+    }
+    // ── Validate AI is enabled ─────────────────────────────────
+    if (!config.aiEnabled) {
+        return {
+            ok: false,
+            error: { code: 'AI_DISABLED', message: 'AI features are not enabled for this deployment.' },
+        };
+    }
+    // ── Validate board-execution capability ────────────────────
+    if (!config.allowedAiCapabilities.includes('board-execution')) {
+        return {
+            ok: false,
+            error: {
+                code: 'CAPABILITY_DENIED',
+                message: "This deployment does not have the 'board-execution' AI capability enabled.",
+            },
+        };
+    }
+    // ── Validate board template is allowed ─────────────────────
+    if (!config.allowedBoardTemplateIds.includes(request.boardTemplateId)) {
+        return {
+            ok: false,
+            error: {
+                code: 'INVALID_BOARD_TEMPLATE',
+                message: `Board template '${request.boardTemplateId}' is not allowed for this deployment.`,
+            },
+        };
+    }
+    // ── Validate board template exists ─────────────────────────
+    const template = validateBoardTemplate(config.workingDir, request.boardTemplateId);
+    if (!template) {
+        return {
+            ok: false,
+            error: {
+                code: 'BOARD_TEMPLATE_NOT_FOUND',
+                message: `Board template '${request.boardTemplateId}' not found in project.`,
+            },
+        };
+    }
+    // ── Rate limit checks ─────────────────────────────────────
+    const rateLimitError = checkRateLimit(config);
+    if (rateLimitError) {
+        return { ok: false, error: rateLimitError };
+    }
+    // ── Verify API key ─────────────────────────────────────────
+    const credential = readOwnerApiCredential();
+    if (!credential || credential.type !== 'api-key') {
+        return {
+            ok: false,
+            error: {
+                code: 'EXECUTION_FAILED',
+                message: 'Deploy requires an Anthropic API key. Add your key in Deploy \u2192 AI Config or set ANTHROPIC_API_KEY in your environment.',
+            },
+        };
+    }
+    // ── Create job and launch background execution ─────────────
+    const job = createJob(request);
+    job.progress.issuesTotal = template.issueCount;
+    recordExecutionStart(config.deploymentId);
+    // Fire-and-forget — execution runs in background, errors captured in job
+    runBoardExecution(job, config, credential.key).catch(() => { });
+    return { ok: true, jobId: job.jobId };
+}
+/**
+ * Get the current status of a board execution job.
+ *
+ * Optionally pass endUserId to enforce isolation — returns null if the
+ * job belongs to a different end user.
+ *
+ * @returns Job status or null if not found / access denied.
+ */
+export function getBoardExecutionStatus(jobId, endUserId) {
+    const job = jobs.get(jobId);
+    if (!job)
+        return null;
+    // Enforce end-user isolation when endUserId is provided
+    if (endUserId !== undefined && job.endUserId !== endUserId) {
+        return null;
+    }
+    return {
+        jobId: job.jobId,
+        status: job.status,
+        progress: { ...job.progress },
+        result: job.result,
+        error: job.error,
+    };
+}
+/**
+ * Get the current rate limit state for a deployment's board executions.
+ * Useful for status/monitoring endpoints.
+ */
+export function getDeploymentBoardExecutionState(deploymentId) {
+    const bucket = getBucket(deploymentId);
+    pruneTimestamps(bucket);
+    return {
+        executionsInLastMinute: bucket.timestamps.length,
+        activeExecutions: bucket.activeExecutions,
+    };
+}
+/**
+ * Reset rate limit state for a deployment's board executions.
+ * Call when a deployment is deleted.
+ */
+export function resetDeploymentBoardExecutionRateLimit(deploymentId) {
+    rateBuckets.delete(deploymentId);
+}
+/**
+ * Sweep stale isolated directories left behind by crashed executions.
+ *
+ * Board execution creates temp dirs prefixed with 'mstro-board-exec-'.
+ * If the process crashes before cleanup, these dirs leak. This function
+ * removes any that are older than the retention window + buffer.
+ *
+ * Safe to call on startup or periodically.
+ */
+export function sweepStaleIsolatedDirs() {
+    const prefix = 'mstro-board-exec-';
+    const maxAgeMs = JOB_RETENTION_MS * 2; // 10 minutes — generous buffer
+    let swept = 0;
+    try {
+        const tmpDir = tmpdir();
+        const entries = readdirSync(tmpDir);
+        const now = Date.now();
+        for (const entry of entries) {
+            if (!entry.startsWith(prefix))
+                continue;
+            const fullPath = join(tmpDir, entry);
+            try {
+                // Extract timestamp from dir name: mstro-board-exec-<random>
+                // Use filesystem stat for age instead of parsing name
+                const { mtimeMs } = statSync(fullPath);
+                if (now - mtimeMs > maxAgeMs) {
+                    cleanupIsolatedDir(fullPath);
+                    swept++;
+                }
+            }
+            catch {
+                // Can't stat or clean — skip
+            }
+        }
+    }
+    catch {
+        // Can't read tmpdir — skip
+    }
+    return swept;
+}
+//# sourceMappingURL=board-execution-handler.js.map

package/dist/server/services/deploy/board-execution-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"board-execution-handler.js","sourceRoot":"","sources":["../../../../server/services/deploy/board-execution-handler.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,gEAAgE;AAEhE;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAClH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,4CAA4C;AAE5C;;;GAGG;AACH,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAE3C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,IAAI,SAAS,GAAG,MAAM,CAAC;IAEvB,sEAAsE;IACtE,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;IAE/D,oBAAoB;IACpB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAE3C,gDAAgD;IAChD,yDAAyD;IACzD,mDAAmD;IACnD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;IAElE,yBAAyB;IACzB,IAAI,SAAS,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;QAClD,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAwGD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;AAElD,SAAS,SAAS,CAAC,YAAoB;IACrC,IAAI,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACjD,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,MAAkB;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACzC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,YAAY,EAAE,CAAC;QAC3E,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,MAA4B;IAE5B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE9C,8BAA8B;IAC9B,IAAI,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,4BAA4B,EAAE,CAAC;QACnE,OAAO;YACL,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,yCAAyC,MAAM,CAAC,4BAA4B,2EAA2E;SACjK,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,IAAI,MAAM,CAAC,2BAA2B,KAAK,IAAI,EAAE,CAAC;QAChD,eAAe,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,2BAA2B,EAAE,CAAC;YACnE,OAAO;gBACL,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,6CAA6C,MAAM,CAAC,2BAA2B,kDAAkD;aAC3I,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoB;IAChD,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,MAAM,CAAC,gBAAgB,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,kCAAkC;AAElC,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAA6B,CAAC;AAElD,SAAS,SAAS,CAAC,OAA8B;IAC/C,MAAM,KAAK,GAAG,cAAc,OAAO,CAAC,YAAY,IAAI,UAAU,EAAE,EAAE,CAAC;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,MAAM,GAAG,GAAsB;QAC7B,KAAK;QACL,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE;YACR,KAAK,EAAE,WAAW;YAClB,WAAW,EAAE,CAAC;YACd,eAAe,EAAE,CAAC;YAClB,cAAc,EAAE,EAAE;SACnB;QACD,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,IAAI;KAClB,CAAC;IAEF,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,OAAmC;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACtE,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACvB,CAAC;AAED,kCAAkC;AAElC,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,QAAQ,CAAC,qCAAqC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAEnD,IAAI,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACxC,yCAAyC;QACzC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,QAAQ,CAAC,8BAA8B,WAAW,GAAG,EAAE;YACrD,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QAEH,yDAAyD;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACpD,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,sDAAsD;IACtD,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE;QAC9B,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;KACxE,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,IAAI,CAAC;QACH,gCAAgC;QAChC,QAAQ,CAAC,gCAAgC,WAAW,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;QAC3B,IAAI,CAAC;YACH,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,+CAA+C;AAE/C,SAAS,qBAAqB,CAC5B,UAAkB,EAClB,eAAuB;IAEvB,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM;KACpE,CAAC;AACJ,CAAC;AAED,4CAA4C;AAE5C;;;;;;GAMG;AACH,SAAS,wBAAwB,CAC/B,eAAuB,EACvB,aAAqB,EACrB,WAAmB;IAEnB,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE7D,MAAM,iBAAiB,GAAG;;;YAGhB,eAAe;mBACR,QAAQ;qBACN,UAAU;;;;;;;;;;;;;;;;;+BAiBA,UAAU;;;;;8CAKK,CAAC;IAE7C,OAAO;QACL,sBAAsB;QACtB,iBAAiB;QACjB,uBAAuB;QACvB,EAAE;QACF,aAAa;KACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAC3B,eAAuB,EACvB,aAAqB,EACrB,WAAmB,EACnB,MAAc;IAEd,MAAM,MAAM,GAAG,wBAAwB,CAAC,eAAe,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAErF,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;QAChC,UAAU,EAAE,WAAW;QACvB,YAAY,EAAE,MAAM;QACpB,cAAc,EAAE,OAAO,EAAK,QAAQ;QACpC,WAAW,EAAE,OAAO,EAAQ,SAAS;QACrC,cAAc,EAAE,SAAS,EAAG,kBAAkB;QAC9C,QAAQ,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE;QACvC,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,IAAI,EAAY,4CAA4C;KACzE,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;IAClC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,wCAAwC;AAExC;;;GAGG;AACH,KAAK,UAAU,YAAY,CACzB,eAAuB,EACvB,WAAmB,EACnB,GAAsB,EACtB,MAAc;IAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,WAAW,EAAE;QAC7C,QAAQ,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE;KACxC,CAAC,CAAC;IAEH,qCAAqC;IACrC,QAAQ,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,IAA4B,EAAE,EAAE;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;gBACnB,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;gBACnB,QAAQ,EAAE;oBACR,GAAG,OAAO,CAAC,QAAQ;oBACnB,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,eAAe,GAAG,CAAC;oBACrD,cAAc,EAAE,EAAE;iBACnB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAE3C,2BAA2B;IAC3B,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;IAEtC,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,UAAU;QAC9C,WAAW,EAAE,OAAO,CAAC,eAAe;QACpC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,YAAY,EAAE,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe;QAC/D,OAAO;QACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC;AACJ,CAAC;AAED,0CAA0C;AAE1C,SAAS,cAAc,CACrB,WAAmB,EACnB,eAAuB;IAEvB,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAE3B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6CAA6C;AAE7C;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAsB,EACtB,MAA4B,EAC5B,MAAc;IAEd,IAAI,CAAC;QACH,6CAA6C;QAC7C,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACnB,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;SAClD,CAAC,CAAC;QAEH,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;gBACnB,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,wCAAwC,OAAO,EAAE;aACzD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAEtC,oDAAoD;QACpD,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE;SACpD,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,cAAc,CACxC,GAAG,CAAC,eAAe,EACnB,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,EACxC,WAAW,EACX,MAAM,CACP,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;YAC7B,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;gBACnB,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,+BAA+B,aAAa,CAAC,KAAK,IAAI,eAAe,EAAE;aAC/E,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,2CAA2C;QAC3C,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;SAClD,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,GAAG,CAAC,eAAe,EACnB,WAAW,EACX,GAAG,EACH,MAAM,CACP,CAAC;QAEF,yBAAyB;QACzB,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;YACjD,QAAQ,EAAE;gBACR,KAAK,EAAE,MAAM;gBACb,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,cAAc,EAAE,EAAE;aACnB;YACD,MAAM;YACN,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,6CAA6C;SAC/E,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,mCAAmC;AAEnC;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA8B,EAC9B,MAA4B;IAE5B,8DAA8D;IAC9D,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,kDAAkD,EAAE;SAChG,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,uDAAuD,0BAA0B,CAAC,cAAc,EAAE,cAAc;aAC1H;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,wBAAwB,EAAE;SACtE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8BAA8B,EAAE;SAC5E,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACpD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,yEAAyE;aACnF;SACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kDAAkD,EAAE;SAC5F,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,4EAA4E;aACtF;SACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACtE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,mBAAmB,OAAO,CAAC,eAAe,uCAAuC;aAC3F;SACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACnF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,mBAAmB,OAAO,CAAC,eAAe,yBAAyB;aAC7E;SACF,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC9C,CAAC;IAED,8DAA8D;IAC9D,MAAM,UAAU,GAAG,sBAAsB,EAAE,CAAC;IAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,6HAA6H;aACvI;SACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,GAAG,CAAC,QAAQ,CAAC,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC;IAE/C,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE1C,yEAAyE;IACzE,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAE/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,SAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,wDAAwD;IACxD,IAAI,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE;QAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAAC,YAAoB;IAInE,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACvC,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO;QACL,sBAAsB,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;QAChD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sCAAsC,CACpD,YAAoB;IAEpB,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,MAAM,GAAG,mBAAmB,CAAC;IACnC,MAAM,QAAQ,GAAG,gBAAgB,GAAG,CAAC,CAAC,CAAC,+BAA+B;IACtE,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YAExC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,6DAA6D;gBAC7D,sDAAsD;gBACtD,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACvC,IAAI,GAAG,GAAG,OAAO,GAAG,QAAQ,EAAE,CAAC;oBAC7B,kBAAkB,CAAC,QAAQ,CAAC,CAAC;oBAC7B,KAAK,EAAE,CAAC;gBACV,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}