openplanr 1.16.2 → 1.17.0

package/dist/services/operate/migration.js

@@ -0,0 +1,235 @@
+import { access, mkdir, readdir, readFile, rename, rm, unlink, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { canonicalize } from './canonical.js';
+import { OperatingEventStore } from './event-store.js';
+import { applyJournalTransaction, prepareJournalTransaction, recoverOperatingTransactions, } from './journal.js';
+import { assertOperatingArtifact, resolveOperatingPipelineRoot } from './protocol.js';
+import { OperateError } from './types.js';
+import { ensureOperatingDirectories, resolveOperatingPaths } from './workspace.js';
+const STATE_EVENTS = '.planr/operate/.state/events.jsonl';
+const STATE_RECORDS = '.planr/operate/.state/records.jsonl';
+const STATE_CHECKPOINT = '.planr/operate/.state/checkpoint.json';
+const MIGRATION_TRANSFORM_MODULE = ['lib', 'operate', 'records-migration.mjs'];
+let cachedTransform;
+/**
+ * Load the records-container transform directly from the installed pipeline. The
+ * v1.3 storage layout is only reachable when the pipeline ships this module, so
+ * we fail closed with a named error rather than degrade silently.
+ */
+async function loadRecordsMigration() {
+    const root = resolveOperatingPipelineRoot();
+    if (!root) {
+        throw new OperateError('E_PIPELINE_NOT_INSTALLED', 'The v1.3 storage-layout migration requires the installed pipeline package.', {
+            recovery: 'Run `npm install -g openplanr@latest` (without `--omit=optional`), then re-run.',
+        });
+    }
+    cachedTransform ??= import(pathToFileURL(path.join(root, ...MIGRATION_TRANSFORM_MODULE)).href).then((value) => value);
+    return cachedTransform;
+}
+async function fileExists(target) {
+    return access(target).then(() => true, () => false);
+}
+function legacyEventsPath(operateRoot) {
+    return path.join(operateRoot, 'events.jsonl');
+}
+function legacyCheckpointPath(operateRoot) {
+    return path.join(operateRoot, 'checkpoints', 'current.json');
+}
+function legacyRecordsDir(operateRoot) {
+    return path.join(operateRoot, 'records', 'sha256');
+}
+/**
+ * Detect which storage layout is on disk. `.state/` (or its events log) means the
+ * project is already on v1.3; any SPEC-002 internal without `.state/` means v1.2.
+ */
+export async function detectOperatingStorageLayout(projectRoot, options = {}) {
+    const paths = resolveOperatingPaths(projectRoot, options);
+    if ((await fileExists(paths.state)) || (await fileExists(paths.events)))
+        return 'v1.3';
+    if ((await fileExists(legacyEventsPath(paths.root))) ||
+        (await fileExists(legacyRecordsDir(paths.root))) ||
+        (await fileExists(legacyCheckpointPath(paths.root)))) {
+        return 'v1.2';
+    }
+    return 'absent';
+}
+async function readLegacyRecords(operateRoot) {
+    const recordsDir = legacyRecordsDir(operateRoot);
+    const records = [];
+    for (const prefix of await readdir(recordsDir).catch(() => [])) {
+        if (!/^[a-f0-9]{2}$/.test(prefix))
+            continue;
+        for (const name of await readdir(path.join(recordsDir, prefix)).catch(() => [])) {
+            if (!/^[a-f0-9]{62}\.json$/.test(name))
+                continue;
+            const raw = await readFile(path.join(recordsDir, prefix, name), 'utf8');
+            records.push(JSON.parse(raw));
+        }
+    }
+    return records.sort((left, right) => left.digest.localeCompare(right.digest));
+}
+async function removeLegacyLayout(operateRoot) {
+    await unlink(legacyEventsPath(operateRoot)).catch(() => undefined);
+    await rm(path.join(operateRoot, 'checkpoints'), { recursive: true, force: true });
+    await rm(path.join(operateRoot, 'records'), { recursive: true, force: true });
+}
+/**
+ * Idempotent, journal-safe SPEC-002 -> v1.3 migration. Writes the `.state/`
+ * internals through the write-ahead journal first (so a crash mid-migration
+ * unwinds cleanly), then removes the SPEC-002 tree only after the journal
+ * commits. A crash between commit and cleanup leaves a resolvable `.state/`
+ * project whose stale SPEC-002 residue is removed on the next open.
+ */
+export async function applyStorageLayoutMigration(input) {
+    const layout = await detectOperatingStorageLayout(input.projectRoot, {
+        localRoot: input.localRoot,
+    });
+    if (layout === 'v1.3') {
+        const paths = resolveOperatingPaths(input.projectRoot, { localRoot: input.localRoot });
+        const legacyPresent = (await fileExists(legacyEventsPath(paths.root))) ||
+            (await fileExists(legacyRecordsDir(paths.root))) ||
+            (await fileExists(legacyCheckpointPath(paths.root)));
+        if (!legacyPresent) {
+            // Fully migrated (or a prior interrupted migration already reconciled):
+            // there is no SPEC-002 backup left to reconcile against.
+            return { migrated: false, layout };
+        }
+        // `.state/` and the SPEC-002 backup coexist, so a migration was interrupted.
+        // Roll back any non-terminal migration transaction FIRST: a crash mid-
+        // promotion leaves a partial `.state/` that detects as v1.3 while the SPEC-002
+        // backup is still the only complete copy. Removing the backup against that
+        // partial view (the previous behavior) destroyed the unpromoted records.
+        // Recovery reverts the partial `.state/` writes byte-exact before we decide.
+        await recoverOperatingTransactions(input.projectRoot, { localRoot: input.localRoot });
+        if (await fileExists(paths.events)) {
+            // The event log survived recovery, so the v1.3 view is committed and
+            // durable (a crash between commit and cleanup). The residue is safe to drop.
+            await removeLegacyLayout(paths.root);
+            return { migrated: false, layout };
+        }
+        // Recovery reverted a partial promotion; discard the now-empty `.state/`
+        // residue and re-migrate from the intact SPEC-002 backup.
+        await rm(paths.state, { recursive: true, force: true });
+        return applyStorageLayoutMigration(input);
+    }
+    if (layout === 'absent')
+        return { migrated: false, layout };
+    const paths = resolveOperatingPaths(input.projectRoot, { localRoot: input.localRoot });
+    const store = new OperatingEventStore(input.projectRoot, { localRoot: input.localRoot });
+    const head = (await store.replay()).eventHead;
+    const legacyRecords = await readLegacyRecords(paths.root);
+    const transform = await loadRecordsMigration();
+    const { lines, migrationRecord } = transform.migrateRecordsDirectoryToJsonl(legacyRecords, {
+        eventCount: head.sequence,
+        ...(input.now ? { migratedAt: input.now } : {}),
+    });
+    // Validate the transform output against the published Protocol v1.3 contract.
+    await assertOperatingArtifact('operating-migration-record', migrationRecord);
+    const previewDigest = migrationRecord.previewDigest;
+    const migrationId = migrationRecord.id;
+    const eventsBytes = await readFile(legacyEventsPath(paths.root), 'utf8').catch((error) => {
+        if (error.code === 'ENOENT')
+            return '';
+        throw error;
+    });
+    const checkpointBytes = await readFile(legacyCheckpointPath(paths.root), 'utf8').catch((error) => {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    });
+    await ensureOperatingDirectories(input.projectRoot, { localRoot: input.localRoot });
+    const writes = [
+        { relativePath: STATE_EVENTS, content: eventsBytes, operation: 'create' },
+        {
+            relativePath: STATE_RECORDS,
+            content: lines.length > 0 ? `${lines.join('\n')}\n` : '',
+            operation: 'create',
+        },
+        ...(checkpointBytes !== null
+            ? [{ relativePath: STATE_CHECKPOINT, content: checkpointBytes, operation: 'create' }]
+            : []),
+    ];
+    const transaction = await prepareJournalTransaction(input.projectRoot, {
+        writes,
+        eventHead: head,
+        previewDigest,
+        localRoot: input.localRoot,
+        transactionId: `TXN-${migrationId}`,
+        now: input.now,
+    });
+    await applyJournalTransaction(input.projectRoot, transaction, { currentEventHead: head });
+    // The `.state/` view is committed; the SPEC-002 tree is now safe to remove.
+    await removeLegacyLayout(paths.root);
+    return { migrated: true, layout, recordCount: legacyRecords.length, migrationId };
+}
+/**
+ * Automatic-on-open entry point. Any mutating operate action calls this before
+ * it proceeds; it is a fast no-op for a v1.3 or uninitialized project and only
+ * migrates a genuine SPEC-002-layout project. When the pipeline transform is
+ * unavailable the layout is left untouched — the mutation fails downstream with
+ * the standard pipeline-required error rather than half-migrating.
+ */
+export async function migrateOperatingStorageLayoutOnOpen(projectRoot, options = {}) {
+    const layout = await detectOperatingStorageLayout(projectRoot, options);
+    if (layout === 'v1.2' && !resolveOperatingPipelineRoot()) {
+        return { migrated: false, layout };
+    }
+    return applyStorageLayoutMigration({ projectRoot, localRoot: options.localRoot });
+}
+/** Read-only inspection of what an automatic migration would do. */
+export async function inspectStorageLayoutMigration(input) {
+    const layout = await detectOperatingStorageLayout(input.projectRoot, {
+        localRoot: input.localRoot,
+    });
+    const recordCount = layout === 'v1.2'
+        ? (await readLegacyRecords(resolveOperatingPaths(input.projectRoot, input).root)).length
+        : 0;
+    return { migrated: false, layout, recordCount };
+}
+async function atomicWrite(target, content) {
+    await mkdir(path.dirname(target), { recursive: true, mode: 0o700 });
+    const temporary = `${target}.${process.pid}.tmp`;
+    await writeFile(temporary, content, { mode: 0o600 });
+    await rename(temporary, target);
+}
+/**
+ * Byte-exact inverse: rebuild the SPEC-002 layout from the v1.3 `.state/` view.
+ * Restores `records/sha256/<pp>/<rest>.json` from `records.jsonl` via the
+ * pipeline's `reconstructDirectoryLayoutFromJsonl`, copies the events log and
+ * checkpoint back to their SPEC-002 locations, and removes `.state/`.
+ */
+export async function rollbackStorageLayoutMigration(input) {
+    const paths = resolveOperatingPaths(input.projectRoot, { localRoot: input.localRoot });
+    if (!(await fileExists(paths.state))) {
+        return {
+            migrated: false,
+            layout: await detectOperatingStorageLayout(input.projectRoot, input),
+        };
+    }
+    const transform = await loadRecordsMigration();
+    const recordsRaw = await readFile(paths.records, 'utf8').catch((error) => {
+        if (error.code === 'ENOENT')
+            return '';
+        throw error;
+    });
+    const lines = recordsRaw.split('\n').filter((line) => line.trim().length > 0);
+    const layout = transform.reconstructDirectoryLayoutFromJsonl(lines);
+    const recordsDir = legacyRecordsDir(paths.root);
+    for (const [prefix, bucket] of layout) {
+        for (const [rest, record] of bucket) {
+            // The SPEC-002 per-file record body is the canonical operating-record with
+            // no trailing newline, so the restored bytes match the original exactly.
+            await atomicWrite(path.join(recordsDir, prefix, `${rest}.json`), canonicalize(record));
+        }
+    }
+    const eventsBytes = await readFile(paths.events, 'utf8').catch(() => '');
+    await atomicWrite(legacyEventsPath(paths.root), eventsBytes);
+    const checkpointBytes = await readFile(paths.checkpoint, 'utf8').catch(() => null);
+    if (checkpointBytes !== null) {
+        await atomicWrite(legacyCheckpointPath(paths.root), checkpointBytes);
+    }
+    await rm(paths.state, { recursive: true, force: true });
+    return { migrated: true, layout: 'v1.2', recordCount: lines.length };
+}
+//# sourceMappingURL=migration.js.map

package/dist/services/operate/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration.js","sourceRoot":"","sources":["../../../src/services/operate/migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnG,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,uBAAuB,EAEvB,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AACtF,OAAO,EAAE,YAAY,EAAyD,MAAM,YAAY,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAmBnF,MAAM,YAAY,GAAG,oCAAoC,CAAC;AAC1D,MAAM,aAAa,GAAG,qCAAqC,CAAC;AAC5D,MAAM,gBAAgB,GAAG,uCAAuC,CAAC;AACjE,MAAM,0BAA0B,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,uBAAuB,CAAC,CAAC;AAe/E,IAAI,eAAyD,CAAC;AAE9D;;;;GAIG;AACH,KAAK,UAAU,oBAAoB;IACjC,MAAM,IAAI,GAAG,4BAA4B,EAAE,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,YAAY,CACpB,0BAA0B,EAC1B,4EAA4E,EAC5E;YACE,QAAQ,EAAE,iFAAiF;SAC5F,CACF,CAAC;IACJ,CAAC;IACD,eAAe,KAAK,MAAM,CACxB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,0BAA0B,CAAC,CAAC,CAAC,IAAI,CACnE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAuC,CAAC,CAAC;IAC3D,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACxB,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAmB;IAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAmB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAmB;IAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,WAAmB,EACnB,UAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACvF,IACE,CAAC,MAAM,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC,MAAM,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC,MAAM,UAAU,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EACpD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IAClD,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,KAAK,MAAM,MAAM,IAAI,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,SAAS;QAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IACnD,MAAM,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChF,CAAC;AASD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAIjD;IACC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC,WAAW,EAAE;QACnE,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACvF,MAAM,aAAa,GACjB,CAAC,MAAM,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAChD,CAAC,MAAM,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAChD,CAAC,MAAM,UAAU,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,wEAAwE;YACxE,yDAAyD;YACzD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACrC,CAAC;QACD,6EAA6E;QAC7E,uEAAuE;QACvE,+EAA+E;QAC/E,2EAA2E;QAC3E,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,4BAA4B,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACtF,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,qEAAqE;YACrE,6EAA6E;YAC7E,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACrC,CAAC;QACD,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAE5D,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACzF,MAAM,IAAI,GAAuB,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE1D,MAAM,SAAS,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC/C,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC,8BAA8B,CAAC,aAAa,EAAE;QACzF,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC;IACH,8EAA8E;IAC9E,MAAM,uBAAuB,CAAC,4BAA4B,EAAE,eAAe,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAG,eAAe,CAAC,aAAmC,CAAC;IAC1E,MAAM,WAAW,GAAG,eAAe,CAAC,EAAY,CAAC;IAEjD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACvF,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CACpF,CAAC,KAAK,EAAE,EAAE;QACR,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IAEF,MAAM,0BAA0B,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACpF,MAAM,MAAM,GAAmB;QAC7B,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE;QACzE;YACE,YAAY,EAAE,aAAa;YAC3B,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YACxD,SAAS,EAAE,QAAQ;SACpB;QACD,GAAG,CAAC,eAAe,KAAK,IAAI;YAC1B,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,QAAiB,EAAE,CAAC;YAC9F,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,WAAW,EAAE;QACrE,MAAM;QACN,SAAS,EAAE,IAAI;QACf,aAAa;QACb,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,OAAO,WAAW,EAAE;QACnC,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,CAAC,CAAC;IACH,MAAM,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1F,4EAA4E;IAC5E,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,WAAmB,EACnB,UAAkC,EAAE;IAEpC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxE,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,4BAA4B,EAAE,EAAE,CAAC;QACzD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,2BAA2B,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAGnD;IACC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC,WAAW,EAAE;QACnE,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,MAAM,WAAW,GACf,MAAM,KAAK,MAAM;QACf,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QACxF,CAAC,CAAC,CAAC,CAAC;IACR,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,OAAe;IACxD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACjD,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAGpD;IACC,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,MAAM,4BAA4B,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC;SACrE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACvE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,SAAS,CAAC,mCAAmC,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACpC,2EAA2E;YAC3E,yEAAyE;YACzE,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,WAAW,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnF,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,WAAW,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACvE,CAAC"}

package/dist/services/operate/mission-dispatch.d.ts

@@ -0,0 +1,193 @@
+import { type OperatingEvidenceIndexItem, type OperatingRoleId, type OperatingSensitivity } from './types.js';
+/**
+ * Bounded, read-only native mission dispatch (FR2 / E-002).
+ *
+ * This module owns the two enforcement guarantees the pack path never needed:
+ *
+ *  1. A native advisory lens receives EXACTLY the Protocol v1.3 read-only tool
+ *     grant — glob, file read, content search, and read-only git history —
+ *     confined to its declared, sensitivity-ceiling-narrowed roots. No write,
+ *     execute, network, or environment capability exists on the surface at all,
+ *     so a mission agent physically cannot mutate, shell out, egress, or read
+ *     ambient process state.
+ *  2. The sensitivity ceiling is enforced at READ time: even inside a granted
+ *     root, a file above the role's ceiling is refused. This preserves the
+ *     pack-era filter-before-handoff guarantee under agent-driven reads.
+ *
+ * It also owns the per-role dispatch-mode resolution (FR4 / E-004): the derived
+ * registry default (`mission`), the per-project `dispatchModeOverrides`, and the
+ * FR2-vs-FR4 reconciliation that routes non-enforcing runtimes to the structured
+ * provider path. The new mission honeytoken suite exercises every refusal here;
+ * the SPEC-002 empty-tool suite continues to govern the pack path unchanged.
+ */
+export type OperatingDispatchMode = 'pack' | 'mission';
+/**
+ * The effective isolation a role's dispatch resolves to. Mirrors the isolation
+ * vocabulary the pipeline's v1.3 adapter handoff emits so OpenPlanr and the
+ * published contract cannot drift:
+ *  - `enforced-empty-tools`         — the v1.2 pack path (empty-tool brief);
+ *  - `enforced-read-only-bounded`   — a native mission lens with the bounded
+ *                                     read-only grant, on a runtime that
+ *                                     natively enforces tool isolation;
+ *  - `fail-closed-structured-provider` — mission requested but the runtime
+ *                                     cannot enforce the boundary, so the role
+ *                                     falls back to the structured provider.
+ */
+export type OperatingDispatchIsolation = 'enforced-empty-tools' | 'enforced-read-only-bounded' | 'fail-closed-structured-provider';
+export interface OperatingDispatchModeResolution {
+    roleId: OperatingRoleId;
+    /** The configured mode: registry default, overridden by dispatchModeOverrides. */
+    mode: OperatingDispatchMode;
+    /** The effective isolation after the FR2/FR4 reconciliation. */
+    isolation: OperatingDispatchIsolation;
+    /** True only when a native, bounded read-only lens is actually dispatched. */
+    native: boolean;
+    /** Audit note explaining why this isolation was chosen (recorded in provenance). */
+    reconciliation: string;
+}
+/**
+ * The bounded read-only capability set for a mission-mode lens. Kept in lockstep
+ * with the pipeline's `MISSION_READ_ONLY_TOOLS`: no write, execute, network, or
+ * environment tool is present, so a grant assembled from it can never authorize
+ * a mutating or escaping action.
+ */
+export declare const MISSION_READ_ONLY_TOOLS: readonly ["file-read", "glob", "content-search", "git-log", "git-show", "git-diff", "git-blame"];
+export type MissionReadOnlyTool = (typeof MISSION_READ_ONLY_TOOLS)[number];
+/**
+ * The registry default dispatch mode for a role. The v1.3 role registry carries
+ * a `dispatchMode` field; while it is still published without one every role
+ * defaults to `mission`, and only a role explicitly marked `pack` opts out —
+ * exactly the pipeline's own `role?.dispatchMode ?? 'mission'` convention.
+ */
+export declare function operatingRegistryDispatchMode(role: {
+    dispatchMode?: unknown;
+}): OperatingDispatchMode;
+/**
+ * Whether the given runtime natively enforces the mission read-only boundary.
+ * `claude-code` enforces; `codex` and `cursor` are advisory and do not.
+ */
+export declare function operatingRuntimeEnforcesBoundedReadOnly(runtime: string | undefined): Promise<boolean>;
+/**
+ * Resolve one role's effective dispatch isolation.
+ *
+ * FR4 states Codex SHOULD dispatch natively, but FR2's fail-closed rule
+ * overrides it: a runtime whose tool isolation is only advisory (`codex`,
+ * `cursor`) cannot guarantee the bounded read-only boundary, so it routes to the
+ * structured provider path until its isolation is enforceable. Only a runtime
+ * that natively enforces tool isolation (`toolIsolation === 'enforced'`, i.e.
+ * `claude-code`) hosting a native-isolated adapter receives a native mission
+ * lens; every other combination fails closed here. This is the exact FR2/FR4
+ * reconciliation the spec calls out, recorded in the returned `reconciliation`
+ * so it appears in the dispatch provenance.
+ */
+export declare function resolveOperatingDispatchMode(input: {
+    roleId: OperatingRoleId;
+    registryDefault: OperatingDispatchMode;
+    override?: OperatingDispatchMode;
+    runtimeEnforcesBoundedReadOnly: boolean;
+    adapterNativeCapable: boolean;
+}): OperatingDispatchModeResolution;
+/**
+ * Narrow a role's declared read roots by DENY-LISTING any root that contains an
+ * evidence item above the role's sensitivity ceiling, so no above-ceiling file
+ * is readable even inside a granted root. Pass the FULL (pre-ceiling-filter)
+ * evidence index: the narrowing needs to see the above-ceiling items the packet
+ * index itself excludes. Combined with the read-time ceiling check on the
+ * bounded reader, this is the belt-and-suspenders that preserves the pack-era
+ * filter-before-handoff guarantee under agent-driven reads.
+ */
+export declare function narrowMissionRootsToCeiling(input: {
+    declaredRoots: readonly string[];
+    evidenceIndex: readonly OperatingEvidenceIndexItem[];
+    ceiling: OperatingSensitivity;
+}): string[];
+export interface MissionReadBoundary {
+    /**
+     * Absolute, resolved read roots (already sensitivity-ceiling-narrowed). A read
+     * target must resolve inside one of these or it is refused as a root escape.
+     */
+    roots: readonly string[];
+    /** The role's sensitivity ceiling, enforced at read time. */
+    ceiling: OperatingSensitivity;
+    /**
+     * The sensitivity of a resolved absolute path. In production this is built
+     * from the ceiling-filtered evidence index; an in-root path with no explicit
+     * classification falls back to `defaultSensitivity`.
+     */
+    sensitivityByPath?: ReadonlyMap<string, OperatingSensitivity>;
+    /**
+     * Sensitivity assumed for an in-root path with no explicit classification.
+     * Defaults to the ceiling itself (readable) because the ceiling-filtered index
+     * and root narrowing already exclude above-ceiling material; individual
+     * above-ceiling files are still refused by the read-time check below.
+     */
+    defaultSensitivity?: OperatingSensitivity;
+    /** Repository root for read-only git tools. Defaults to the first read root. */
+    repositoryRoot?: string;
+}
+export type MissionToolRequest = {
+    tool: 'file-read';
+    path: string;
+} | {
+    tool: 'glob';
+    pattern?: string;
+    root?: string;
+} | {
+    tool: 'content-search';
+    query: string;
+    root?: string;
+} | {
+    tool: 'git-log' | 'git-show' | 'git-diff' | 'git-blame';
+    args?: string[];
+    path?: string;
+} | {
+    tool: string;
+    [key: string]: unknown;
+};
+export type MissionToolResult = {
+    tool: 'file-read';
+    path: string;
+    content: string;
+} | {
+    tool: 'glob';
+    matches: string[];
+} | {
+    tool: 'content-search';
+    matches: Array<{
+        path: string;
+        line: number;
+        text: string;
+    }>;
+} | {
+    tool: 'git-log' | 'git-show' | 'git-diff' | 'git-blame';
+    output: string;
+};
+/**
+ * The single audited entry point for a mission lens's tool use. Every request is
+ * checked against the bounded read-only grant BEFORE any filesystem or git
+ * access: a tool outside the grant (write, execute, network, environment, or any
+ * unknown surface) is refused, a target outside the declared roots is refused as
+ * a path escape, and a target above the sensitivity ceiling is refused at read
+ * time. There is deliberately no write/execute/network/environment tool to
+ * invoke — those channels do not exist on this surface at all.
+ */
+export declare function invokeMissionTool(boundary: MissionReadBoundary, request: MissionToolRequest): Promise<MissionToolResult>;
+/**
+ * The concrete callable tool surface handed to an in-process native harness:
+ * exactly the read-only tools, each bound to this boundary. There is no write,
+ * execute, network, or environment callable on the returned object, so a harness
+ * that walks it can never reach a mutating or escaping capability.
+ */
+export declare function createMissionToolset(boundary: MissionReadBoundary): Record<MissionReadOnlyTool, (request: Omit<MissionToolRequest, 'tool'>) => Promise<MissionToolResult>>;
+/**
+ * Fan a per-item dispatch out in parallel where the adapter reports
+ * `parallelDispatch: true`, sequentially otherwise. Results are always returned
+ * in the SAME order as `items`, so the caller can restore registry order and the
+ * reduced events are byte-identical across parallel and sequential dispatch.
+ */
+export declare function runMissionDispatchFanOut<Item, Result>(input: {
+    items: readonly Item[];
+    parallel: boolean;
+    run: (item: Item) => Promise<Result>;
+}): Promise<Result[]>;
+//# sourceMappingURL=mission-dispatch.d.ts.map

package/dist/services/operate/mission-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-dispatch.d.ts","sourceRoot":"","sources":["../../../src/services/operate/mission-dispatch.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,SAAS,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,0BAA0B,GAClC,sBAAsB,GACtB,4BAA4B,GAC5B,iCAAiC,CAAC;AAEtC,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,eAAe,CAAC;IACxB,kFAAkF;IAClF,IAAI,EAAE,qBAAqB,CAAC;IAC5B,gEAAgE;IAChE,SAAS,EAAE,0BAA0B,CAAC;IACtC,8EAA8E;IAC9E,MAAM,EAAE,OAAO,CAAC;IAChB,oFAAoF;IACpF,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,kGAQzB,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAU3E;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,qBAAqB,CAExB;AA+CD;;;GAGG;AACH,wBAAsB,uCAAuC,CAC3D,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,OAAO,CAAC,CAElB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,MAAM,EAAE,eAAe,CAAC;IACxB,eAAe,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,8BAA8B,EAAE,OAAO,CAAC;IACxC,oBAAoB,EAAE,OAAO,CAAC;CAC/B,GAAG,+BAA+B,CAiClC;AAeD;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,aAAa,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACrD,OAAO,EAAE,oBAAoB,CAAC;CAC/B,GAAG,MAAM,EAAE,CASX;AAMD,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,6DAA6D;IAC7D,OAAO,EAAE,oBAAoB,CAAC;IAC9B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC9D;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;IAC1C,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3F;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAE7C,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAsQhF;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAoC5B;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,mBAAmB,GAC5B,MAAM,CACP,mBAAmB,EACnB,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAC1E,CAUA;AAMD;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;IAClE,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACtC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CASpB"}