openplanr 1.25.2 → 2.0.0

package/dist/services/operate/mission-dispatch.js

@@ -1,590 +0,0 @@
-import { readdir, readFile, realpath, stat } from 'node:fs/promises';
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { resolveOperatingPipelineRoot } from './protocol.js';
-import { executeGitReadOnly } from './read-only-providers.js';
-import { compareSensitivity } from './redaction.js';
-import { OperateError } from './types.js';
-/**
- * The bounded read-only capability set for a mission-mode lens. Kept in lockstep
- * with the pipeline's `MISSION_READ_ONLY_TOOLS`: no write, execute, network, or
- * environment tool is present, so a grant assembled from it can never authorize
- * a mutating or escaping action.
- */
-export const MISSION_READ_ONLY_TOOLS = Object.freeze([
-    'file-read',
-    'glob',
-    'content-search',
-    'git-log',
-    'git-show',
-    'git-diff',
-    'git-blame',
-]);
-function isReadOnlyTool(tool) {
-    return MISSION_READ_ONLY_TOOLS.includes(tool);
-}
-// ---------------------------------------------------------------------------
-// Runtime enforceability (FR2)
-// ---------------------------------------------------------------------------
-let cachedRuntimeEnforcement = null;
-let cachedRuntimeCapabilities = null;
-async function loadRuntimeCapabilities() {
-    cachedRuntimeCapabilities ??= (async () => {
-        try {
-            const root = resolveOperatingPipelineRoot({ requireMission: true });
-            if (!root) {
-                return () => ({ supported: false, toolIsolation: 'none', dispatch: 'none' });
-            }
-            const module = (await import(pathToFileURL(path.join(root, 'lib', 'pipeline', 'runtime.mjs')).href));
-            const adapters = module.listRuntimeAdapters();
-            return (runtime) => {
-                if (!runtime || runtime === 'auto') {
-                    return { supported: false, toolIsolation: 'none', dispatch: 'none' };
-                }
-                let id;
-                try {
-                    id = module.normalizeRuntime(runtime);
-                }
-                catch {
-                    return { supported: false, toolIsolation: 'none', dispatch: 'none' };
-                }
-                const adapter = adapters.find((entry) => entry.id === id);
-                const dispatch = adapter?.capabilities?.operatingAdvisorDispatch ?? 'none';
-                return {
-                    supported: adapter?.capabilities?.operatingBoard === true &&
-                        ['native-agent', 'sequential-native', 'native-read-only'].includes(dispatch),
-                    toolIsolation: adapter?.capabilities?.toolIsolation ?? 'none',
-                    dispatch,
-                };
-            };
-        }
-        catch {
-            return () => ({ supported: false, toolIsolation: 'none', dispatch: 'none' });
-        }
-    })();
-    return cachedRuntimeCapabilities;
-}
-/**
- * Load the pipeline's runtime registry and derive, per runtime, whether it
- * natively enforces the bounded read-only boundary. The classification is the
- * published `capabilities.toolIsolation === 'enforced'` bit — the same one the
- * pipeline's adapter handoff uses — so it stays a single source of truth rather
- * than a field the registry schema cannot carry.
- *
- * Fails CLOSED: if the mission-capable pipeline root or its runtime module
- * cannot be resolved, nothing is treated as enforcing, so a runtime whose
- * isolation cannot be verified never receives a native lens (DoD).
- */
-async function loadRuntimeEnforcement() {
-    cachedRuntimeEnforcement ??= (async () => {
-        try {
-            const root = resolveOperatingPipelineRoot({ requireMission: true });
-            if (!root)
-                return () => false;
-            const module = (await import(pathToFileURL(path.join(root, 'lib', 'pipeline', 'runtime.mjs')).href));
-            const adapters = module.listRuntimeAdapters();
-            return (runtime) => {
-                if (!runtime || runtime === 'auto')
-                    return false;
-                let id;
-                try {
-                    id = module.normalizeRuntime(runtime);
-                }
-                catch {
-                    return false;
-                }
-                const adapter = adapters.find((entry) => entry.id === id);
-                return adapter?.capabilities?.toolIsolation === 'enforced';
-            };
-        }
-        catch {
-            return () => false;
-        }
-    })();
-    return cachedRuntimeEnforcement;
-}
-/**
- * Whether the given runtime natively enforces the mission read-only boundary.
- * `claude-code` enforces; `codex` and `cursor` are advisory and do not.
- */
-export async function operatingRuntimeEnforcesBoundedReadOnly(runtime) {
-    return (await loadRuntimeEnforcement())(runtime);
-}
-/** Whether the selected runtime has a generated, runtime-native Operate workflow. */
-export async function operatingRuntimeSupportsNativeOperate(runtime) {
-    return (await loadRuntimeCapabilities())(runtime).supported;
-}
-/**
- * Classify one role's dispatch isolation (FR10). Governance moved to OUTPUT
- * verification, so the runtime is no longer gated on a native-vs-structured
- * split before it may think — it is classified purely on whether it can carry a
- * mandate and return a schema-valid cited response. A runtime that natively
- * enforces the bounded read-only tool grant is `enforced-read-only-bounded`.
- * A compatible native-agent workflow running under the selected runtime's own
- * session permissions is `runtime-governed`. Only an adapter that cannot run
- * either workflow is unsupported. The specific reason is recorded in
- * `reconciliation` so it appears in dispatch provenance.
- */
-export function resolveOperatingDispatchIsolation(input) {
-    if (input.runtimeEnforcesBoundedReadOnly && input.adapterNativeCapable) {
-        return {
-            roleId: input.roleId,
-            isolation: 'enforced-read-only-bounded',
-            native: true,
-            reconciliation: 'runtime natively enforces tool isolation and can carry a mandate; a bounded read-only mission lens is dispatched',
-        };
-    }
-    if (input.runtimeWorkflowCapable && input.adapterNativeCapable) {
-        return {
-            roleId: input.roleId,
-            isolation: 'runtime-governed',
-            native: true,
-            reconciliation: 'the selected runtime executes the generated native-agent workflow under its current session permissions; citation and schema validation govern persistence',
-        };
-    }
-    return {
-        roleId: input.roleId,
-        isolation: 'unsupported',
-        native: false,
-        reconciliation: input.runtimeEnforcesBoundedReadOnly
-            ? 'adapter cannot host a bounded read-only mission lens, so this runtime is unsupported for operate; no silent structured-provider fallback exists'
-            : 'runtime tool isolation is advisory or unverifiable, so it cannot carry a mandate and is unsupported for operate; no silent structured-provider fallback exists',
-    };
-}
-/**
- * Classify a runtime for operate dispatch (FR10). A runtime that natively
- * enforces the bounded read-only boundary can carry a mandate and is
- * `enforced-read-only-bounded` (first-class). Compatible advisory runtimes are
- * `runtime-governed`; only missing/incompatible workflows are unsupported.
- */
-export async function classifyOperatingRuntime(runtime) {
-    const label = runtime && runtime !== 'auto' ? runtime : 'auto';
-    const capabilities = (await loadRuntimeCapabilities())(runtime);
-    if (capabilities.supported) {
-        const enforced = capabilities.toolIsolation === 'enforced';
-        return {
-            runtime: label,
-            isolation: enforced ? 'enforced-read-only-bounded' : 'runtime-governed',
-            mandateCapable: true,
-            reason: enforced
-                ? 'runs the generated native-agent workflow with enforced tool isolation'
-                : `runs the generated native-agent workflow under the runtime session's permissions; tool isolation is ${capabilities.toolIsolation} and governed writes still require verified cited output`,
-        };
-    }
-    return {
-        runtime: label,
-        isolation: 'unsupported',
-        mandateCapable: false,
-        reason: label === 'auto'
-            ? 'no runtime is selected, so mandate-capable tool isolation cannot be verified'
-            : 'the installed adapter does not expose a compatible native-agent or same-runtime sequential Operate workflow',
-    };
-}
-let cachedRuntimeResolver = null;
-/**
- * Resolve the active runtime id for a project WITHOUT probing installed binaries
- * (spawn-free) so `operate doctor` can classify it. Reads the runtime the
- * project/user already selected from the pipeline's reclassified registry. Fails
- * closed to `undefined` when no runtime is selected or the registry cannot be
- * resolved, so an unresolved runtime is classified `unsupported`, never assumed
- * mandate-capable.
- */
-export async function resolveActiveOperatingRuntime(projectRoot) {
-    cachedRuntimeResolver ??= (async () => {
-        try {
-            const root = resolveOperatingPipelineRoot({ requireMission: true });
-            if (!root)
-                return () => undefined;
-            const module = (await import(pathToFileURL(path.join(root, 'lib', 'pipeline', 'runtime.mjs')).href));
-            const resolve = module.resolveRuntimeAdapter;
-            if (typeof resolve !== 'function')
-                return () => undefined;
-            return (target) => {
-                try {
-                    return resolve({ projectRoot: target, installed: [] })?.adapter?.id;
-                }
-                catch {
-                    return undefined;
-                }
-            };
-        }
-        catch {
-            return () => undefined;
-        }
-    })();
-    return (await cachedRuntimeResolver)(projectRoot);
-}
-// ---------------------------------------------------------------------------
-// Read-boundary declaration (FR2)
-// ---------------------------------------------------------------------------
-/**
- * Declare a role's mission read roots directly from the granted workspace roots
- * minus the explicitly forbidden paths — the coarse boundary the mandate model
- * dispatches against. There is no evidence index to narrow (the mandate carries
- * none): every granted root is declared whole, and the sensitivity ceiling is
- * enforced not by dropping a root here but by the bounded reader's read-time
- * `assertBelowCeiling` and, at record time, by the citation resolver refusing an
- * above-ceiling citation. A root that exactly matches, or is nested under, a
- * forbidden path is dropped. The result is deduplicated and sorted so the
- * declared boundary is deterministic.
- */
-export function narrowMissionRootsToCeiling(input) {
-    const forbidden = input.forbiddenPaths ?? [];
-    const isForbidden = (root) => forbidden.some((path) => root === path || root.startsWith(`${path}/`));
-    return [...new Set(input.declaredRoots.filter((root) => !isForbidden(root)))].sort();
-}
-const MAX_MISSION_READ_BYTES = 256 * 1024;
-const MAX_MISSION_WALK_ENTRIES = 5_000;
-function refuseCapability(tool) {
-    throw new OperateError('E_OPERATE_PROVIDER_READ_ONLY', `Mission tool "${tool}" is not in the bounded read-only grant; write, execute, ` +
-        'network, and environment access are refused.', { tool, allowed: [...MISSION_READ_ONLY_TOOLS] });
-}
-function resolvedRoots(boundary) {
-    return boundary.roots.map((root) => path.resolve(root));
-}
-function isContained(roots, absolute) {
-    return roots.some((root) => absolute === root || absolute.startsWith(`${root}${path.sep}`));
-}
-function resolveWithinRoots(boundary, requestPath) {
-    if (typeof requestPath !== 'string' || requestPath.length === 0) {
-        throw new OperateError('E_OPERATE_PATH_ESCAPE', 'Mission read requires a non-empty path.');
-    }
-    const roots = resolvedRoots(boundary);
-    const candidates = path.isAbsolute(requestPath)
-        ? [path.resolve(requestPath)]
-        : roots.map((root) => path.resolve(root, requestPath));
-    for (const candidate of candidates) {
-        if (isContained(roots, candidate))
-            return candidate;
-    }
-    throw new OperateError('E_OPERATE_PATH_ESCAPE', `Mission read target "${requestPath}" resolves outside the declared read roots.`, { roots: [...boundary.roots] });
-}
-/**
- * Defeat symlink escapes: after path-based containment, resolve the real target
- * and re-check it against the real roots. Both sides are realpath-resolved so a
- * platform-level symlink on the temp namespace (e.g. macOS `/var`→`/private/var`)
- * does not produce a false escape.
- */
-async function assertNoSymlinkEscape(boundary, absolute) {
-    let real;
-    try {
-        real = await realpath(absolute);
-    }
-    catch {
-        // Target does not exist yet; the caller's read/stat surfaces the real error.
-        return;
-    }
-    const realRoots = await Promise.all(resolvedRoots(boundary).map((root) => realpath(root).catch(() => root)));
-    if (!isContained(realRoots, real)) {
-        throw new OperateError('E_OPERATE_PATH_ESCAPE', `Mission read target "${absolute}" escapes the declared read roots through a symlink.`);
-    }
-}
-function classify(boundary, absolute) {
-    return (boundary.sensitivityByPath?.get(absolute) ?? boundary.defaultSensitivity ?? boundary.ceiling);
-}
-function assertBelowCeiling(boundary, absolute) {
-    const sensitivity = classify(boundary, absolute);
-    if (compareSensitivity(sensitivity, boundary.ceiling) > 0) {
-        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', `Mission read of "${absolute}" is ${sensitivity}, above the ${boundary.ceiling} ceiling.`, { sensitivity, ceiling: boundary.ceiling });
-    }
-}
-async function readBoundedFile(boundary, requestPath) {
-    const absolute = resolveWithinRoots(boundary, requestPath);
-    await assertNoSymlinkEscape(boundary, absolute);
-    assertBelowCeiling(boundary, absolute);
-    const info = await stat(absolute);
-    if (!info.isFile()) {
-        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', `Mission read target "${absolute}" is not a file.`);
-    }
-    if (info.size > MAX_MISSION_READ_BYTES) {
-        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', `Mission read target "${absolute}" exceeds the ${MAX_MISSION_READ_BYTES}-byte read bound.`);
-    }
-    return readFile(absolute, 'utf8');
-}
-async function* walkRoot(root) {
-    let visited = 0;
-    const stack = [root];
-    while (stack.length > 0) {
-        const current = stack.pop();
-        const entries = await readdir(current, { withFileTypes: true }).catch(() => null);
-        if (!entries)
-            continue;
-        for (const entry of entries) {
-            if (entry.name === '.git' || entry.name === 'node_modules')
-                continue;
-            const child = path.join(current, entry.name);
-            if (entry.isDirectory()) {
-                stack.push(child);
-            }
-            else if (entry.isFile()) {
-                visited += 1;
-                if (visited > MAX_MISSION_WALK_ENTRIES)
-                    return;
-                yield child;
-            }
-        }
-    }
-}
-/**
- * Render a filesystem path with forward-slash separators so a glob pattern —
- * always authored with `/` — matches identically on every platform. `path.join`
- * yields `\` separators on Windows, which the pattern's `/` can never match, so
- * a recursive `.ts` glob would otherwise return nothing on Windows. Normalizing
- * only the candidate fed to the matcher (never the stored/returned path) keeps
- * the emitted matches in native form for the caller's own containment checks. On
- * POSIX `path.sep` is `/`, so this is a no-op.
- */
-function toGlobMatchPath(target) {
-    return target.split(path.sep).join('/');
-}
-function simplePatternToRegExp(pattern) {
-    let out = '';
-    let index = 0;
-    while (index < pattern.length) {
-        const char = pattern[index];
-        if (char === '*') {
-            if (pattern[index + 1] === '*') {
-                out += '.*';
-                index += 2;
-            }
-            else {
-                out += '[^/]*';
-                index += 1;
-            }
-        }
-        else {
-            out += char.replace(/[.+^${}()|[\]\\]/g, '\\$&');
-            index += 1;
-        }
-    }
-    return new RegExp(`${out}$`);
-}
-async function globWithinRoots(boundary, pattern, root) {
-    const roots = root ? [resolveWithinRoots(boundary, root)] : resolvedRoots(boundary);
-    const matcher = simplePatternToRegExp(pattern || '**/*');
-    const matches = [];
-    for (const searchRoot of roots) {
-        for await (const file of walkRoot(searchRoot)) {
-            if (!matcher.test(toGlobMatchPath(file)))
-                continue;
-            try {
-                assertBelowCeiling(boundary, file);
-            }
-            catch {
-                continue;
-            }
-            matches.push(file);
-        }
-    }
-    return [...new Set(matches)].sort();
-}
-async function contentSearchWithinRoots(boundary, query, root) {
-    if (typeof query !== 'string' || query.length === 0) {
-        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'Mission content-search requires a query.');
-    }
-    const roots = root ? [resolveWithinRoots(boundary, root)] : resolvedRoots(boundary);
-    const hits = [];
-    for (const searchRoot of roots) {
-        for await (const file of walkRoot(searchRoot)) {
-            try {
-                assertBelowCeiling(boundary, file);
-            }
-            catch {
-                continue;
-            }
-            const info = await stat(file).catch(() => null);
-            if (!info?.isFile() || info.size > MAX_MISSION_READ_BYTES)
-                continue;
-            const content = await readFile(file, 'utf8').catch(() => null);
-            if (content === null)
-                continue;
-            content.split(/\r?\n/).forEach((text, index) => {
-                if (text.includes(query))
-                    hits.push({ path: file, line: index + 1, text: text.slice(0, 512) });
-            });
-        }
-    }
-    return hits;
-}
-function assertGitArgsBounded(args) {
-    for (const argument of args) {
-        if (typeof argument !== 'string') {
-            throw new OperateError('E_OPERATE_PROVIDER_READ_ONLY', 'Mission git arguments must be strings.');
-        }
-        if (argument.startsWith('--output') || argument === '-o' || argument.includes('../..')) {
-            throw new OperateError('E_OPERATE_PROVIDER_READ_ONLY', 'Mission git arguments cannot redirect output.');
-        }
-    }
-}
-async function runBoundedGit(boundary, subcommand, request) {
-    const repositoryRoot = boundary.repositoryRoot
-        ? path.resolve(boundary.repositoryRoot)
-        : resolvedRoots(boundary)[0];
-    if (!repositoryRoot) {
-        throw new OperateError('E_OPERATE_PROVIDER_READ_ONLY', 'Mission git tools require a repository root.');
-    }
-    const extra = request.args ?? [];
-    assertGitArgsBounded(extra);
-    const args = [subcommand, ...extra];
-    if (request.path) {
-        // Any path argument stays confined to the declared roots.
-        const confined = resolveWithinRoots(boundary, request.path);
-        args.push('--', path.relative(repositoryRoot, confined) || '.');
-    }
-    // `executeGitReadOnly` re-asserts the read-only git allowlist (no mutation,
-    // no repository/config overrides) as a second, independent gate.
-    return executeGitReadOnly(repositoryRoot, args);
-}
-/**
- * The single audited entry point for a mission lens's tool use. Every request is
- * checked against the bounded read-only grant BEFORE any filesystem or git
- * access: a tool outside the grant (write, execute, network, environment, or any
- * unknown surface) is refused, a target outside the declared roots is refused as
- * a path escape, and a target above the sensitivity ceiling is refused at read
- * time. There is deliberately no write/execute/network/environment tool to
- * invoke — those channels do not exist on this surface at all.
- */
-export async function invokeMissionTool(boundary, request) {
-    const tool = String(request.tool ?? '');
-    if (!isReadOnlyTool(tool))
-        refuseCapability(tool);
-    switch (tool) {
-        case 'file-read': {
-            const requestPath = String(request.path ?? '');
-            return {
-                tool: 'file-read',
-                path: requestPath,
-                content: await readBoundedFile(boundary, requestPath),
-            };
-        }
-        case 'glob': {
-            const pattern = request.pattern ?? '**/*';
-            const root = request.root;
-            return { tool: 'glob', matches: await globWithinRoots(boundary, pattern, root) };
-        }
-        case 'content-search': {
-            const query = String(request.query ?? '');
-            const root = request.root;
-            return {
-                tool: 'content-search',
-                matches: await contentSearchWithinRoots(boundary, query, root),
-            };
-        }
-        case 'git-log':
-        case 'git-show':
-        case 'git-diff':
-        case 'git-blame': {
-            const subcommand = tool.slice('git-'.length);
-            const typed = request;
-            return { tool, output: await runBoundedGit(boundary, subcommand, typed) };
-        }
-        default:
-            return refuseCapability(tool);
-    }
-}
-/**
- * The concrete callable tool surface handed to an in-process native harness:
- * exactly the read-only tools, each bound to this boundary. There is no write,
- * execute, network, or environment callable on the returned object, so a harness
- * that walks it can never reach a mutating or escaping capability.
- */
-export function createMissionToolset(boundary) {
-    const toolset = {};
-    for (const tool of MISSION_READ_ONLY_TOOLS) {
-        toolset[tool] = (request) => invokeMissionTool(boundary, { ...request, tool });
-    }
-    return toolset;
-}
-/**
- * Fan a per-item dispatch out in parallel where the adapter reports
- * `parallelDispatch: true`, sequentially otherwise. Results are always returned
- * in the SAME order as `items`, so the caller can restore registry order and the
- * reduced events are byte-identical across parallel and sequential dispatch.
- *
- * FR12 additions (all optional, all backward-compatible — the existing
- * `{ items, parallel, run }` call still type-checks and behaves identically):
- *  - `concurrency` bounds how many items run at once on the parallel path;
- *  - `perRoleBudgetMs` gives each `run` a graceful budget signal it MAY consult to
- *    stop researching and synthesize — the fan-out never aborts a role's promise,
- *    so a role's output is never cut off mid-stream;
- *  - `now` injects a clock for deterministic budget tests.
- *
- * FR3 addition (T-003): `lifecycle` reports each item's dispatch/return/error
- * boundary so the `AdvisorLifecycleDriver` can observe the per-role lifecycle
- * instead of only seeing a resolved/rejected promise. It is observability only and
- * never alters ordering, concurrency, the budget signal, or a result — a caller
- * that omits it behaves exactly as before.
- */
-export async function runMissionDispatchFanOut(input) {
-    const now = input.now ?? Date.now;
-    const budgetMs = input.perRoleBudgetMs && input.perRoleBudgetMs > 0
-        ? input.perRoleBudgetMs
-        : Number.POSITIVE_INFINITY;
-    const makeSignal = (item) => {
-        const startedAt = now();
-        const deadline = budgetMs === Number.POSITIVE_INFINITY ? Number.POSITIVE_INFINITY : startedAt + budgetMs;
-        let notified = false;
-        return {
-            deadline,
-            remainingMs: () => budgetMs === Number.POSITIVE_INFINITY
-                ? Number.POSITIVE_INFINITY
-                : Math.max(0, deadline - now()),
-            budgetExceeded: () => {
-                const elapsed = now() - startedAt;
-                const over = elapsed >= budgetMs;
-                if (over && !notified) {
-                    notified = true;
-                    input.onBudgetExceeded?.(item, elapsed);
-                }
-                return over;
-            },
-        };
-    };
-    // Report the dispatch/return/error boundary around a single `run` without
-    // changing its result, ordering, or rejection: `onDispatch` fires as the item
-    // begins (right where `makeSignal` captures its start), `onReturn` on resolve,
-    // `onError` on reject (and the rejection still propagates unchanged).
-    const runItem = async (item) => {
-        input.lifecycle?.onDispatch?.(item);
-        try {
-            const result = await input.run(item, makeSignal(item));
-            input.lifecycle?.onReturn?.(item, result);
-            return result;
-        }
-        catch (error) {
-            input.lifecycle?.onError?.(item, error);
-            throw error;
-        }
-    };
-    if (input.parallel) {
-        const limit = input.concurrency && input.concurrency > 0
-            ? Math.min(input.concurrency, input.items.length)
-            : input.items.length;
-        if (limit >= input.items.length) {
-            return Promise.all(input.items.map((item) => runItem(item)));
-        }
-        // Bounded concurrency: a fixed worker pool drains a shared cursor. Each result
-        // is written back at its input index, so the returned order matches `items`
-        // exactly regardless of completion order.
-        const results = new Array(input.items.length);
-        let cursor = 0;
-        const worker = async () => {
-            while (true) {
-                const index = cursor;
-                cursor += 1;
-                if (index >= input.items.length)
-                    return;
-                const item = input.items[index];
-                results[index] = await runItem(item);
-            }
-        };
-        await Promise.all(Array.from({ length: Math.max(1, limit) }, () => worker()));
-        return results;
-    }
-    const results = [];
-    for (const item of input.items) {
-        results.push(await runItem(item));
-    }
-    return results;
-}
-//# sourceMappingURL=mission-dispatch.js.map

package/dist/services/operate/mission-dispatch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-dispatch.js","sourceRoot":"","sources":["../../../src/services/operate/mission-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAmD,MAAM,YAAY,CAAC;AAqD3F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IACnD,WAAW;IACX,MAAM;IACN,gBAAgB;IAChB,SAAS;IACT,UAAU;IACV,UAAU;IACV,WAAW;CACH,CAAC,CAAC;AAIZ,SAAS,cAAc,CAAC,IAAY;IAClC,OAAQ,uBAA6C,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,IAAI,wBAAwB,GAA6D,IAAI,CAAC;AAoB9F,IAAI,yBAAyB,GAElB,IAAI,CAAC;AAEhB,KAAK,UAAU,uBAAuB;IAGpC,yBAAyB,KAAK,CAAC,KAAK,IAAI,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,4BAA4B,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAC1B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CACtE,CAAqC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC9C,OAAO,CAAC,OAAO,EAAE,EAAE;gBACjB,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;oBACnC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;gBACvE,CAAC;gBACD,IAAI,EAAU,CAAC;gBACf,IAAI,CAAC;oBACH,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;gBACvE,CAAC;gBACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,MAAM,QAAQ,GAAG,OAAO,EAAE,YAAY,EAAE,wBAAwB,IAAI,MAAM,CAAC;gBAC3E,OAAO;oBACL,SAAS,EACP,OAAO,EAAE,YAAY,EAAE,cAAc,KAAK,IAAI;wBAC9C,CAAC,cAAc,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC9E,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,IAAI,MAAM;oBAC7D,QAAQ;iBACT,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,yBAAyB,CAAC;AACnC,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,sBAAsB;IACnC,wBAAwB,KAAK,CAAC,KAAK,IAAI,EAAE;QACvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,4BAA4B,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,IAAI;gBAAE,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC;YAC9B,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAC1B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CACtE,CAAqC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC9C,OAAO,CAAC,OAAO,EAAE,EAAE;gBACjB,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM;oBAAE,OAAO,KAAK,CAAC;gBACjD,IAAI,EAAU,CAAC;gBACf,IAAI,CAAC;oBACH,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,OAAO,OAAO,EAAE,YAAY,EAAE,aAAa,KAAK,UAAU,CAAC;YAC7D,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,OAA2B;IAE3B,OAAO,CAAC,MAAM,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,OAA2B;IAE3B,OAAO,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAKjD;IACC,IAAI,KAAK,CAAC,8BAA8B,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;QACvE,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,4BAA4B;YACvC,MAAM,EAAE,IAAI;YACZ,cAAc,EACZ,kHAAkH;SACrH,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,sBAAsB,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAC/D,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,kBAAkB;YAC7B,MAAM,EAAE,IAAI;YACZ,cAAc,EACZ,4JAA4J;SAC/J,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,aAAa;QACxB,MAAM,EAAE,KAAK;QACb,cAAc,EAAE,KAAK,CAAC,8BAA8B;YAClD,CAAC,CAAC,iJAAiJ;YACnJ,CAAC,CAAC,gKAAgK;KACrK,CAAC;AACJ,CAAC;AAeD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAA2B;IAE3B,MAAM,KAAK,GAAG,OAAO,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,YAAY,GAAG,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,YAAY,CAAC,aAAa,KAAK,UAAU,CAAC;QAC3D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,kBAAkB;YACvE,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,QAAQ;gBACd,CAAC,CAAC,uEAAuE;gBACzE,CAAC,CAAC,uGAAuG,YAAY,CAAC,aAAa,0DAA0D;SAChM,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,aAAa;QACxB,cAAc,EAAE,KAAK;QACrB,MAAM,EACJ,KAAK,KAAK,MAAM;YACd,CAAC,CAAC,8EAA8E;YAChF,CAAC,CAAC,6GAA6G;KACpH,CAAC;AACJ,CAAC;AAED,IAAI,qBAAqB,GAAgE,IAAI,CAAC;AAE9F;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,WAAmB;IAEnB,qBAAqB,KAAK,CAAC,KAAK,IAAI,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,4BAA4B,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,IAAI;gBAAE,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC;YAClC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAC1B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CACtE,CAIA,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC;YAC7C,IAAI,OAAO,OAAO,KAAK,UAAU;gBAAE,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC;YAC1D,OAAO,CAAC,MAAM,EAAE,EAAE;gBAChB,IAAI,CAAC;oBACH,OAAO,OAAO,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;gBACtE,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,CAAC,MAAM,qBAAqB,CAAC,CAAC,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAG3C;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;IAC7C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAW,EAAE,CAC5C,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvF,CAAC;AA4CD,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC1C,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAEvC,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,IAAI,YAAY,CACpB,8BAA8B,EAC9B,iBAAiB,IAAI,2DAA2D;QAC9E,8CAA8C,EAChD,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,uBAAuB,CAAC,EAAE,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAA6B;IAClD,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAwB,EAAE,QAAgB;IAC7D,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA6B,EAAE,WAAmB;IAC5E,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,yCAAyC,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAC7C,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,YAAY,CACpB,uBAAuB,EACvB,wBAAwB,WAAW,6CAA6C,EAChF,EAAE,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAC/B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB,CAClC,QAA6B,EAC7B,QAAgB;IAEhB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,aAAa,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CACxE,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,YAAY,CACpB,uBAAuB,EACvB,wBAAwB,QAAQ,sDAAsD,CACvF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,QAA6B,EAAE,QAAgB;IAC/D,OAAO,CACL,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,kBAAkB,IAAI,QAAQ,CAAC,OAAO,CAC7F,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA6B,EAAE,QAAgB;IACzE,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,oBAAoB,QAAQ,QAAQ,WAAW,eAAe,QAAQ,CAAC,OAAO,WAAW,EACzF,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAA6B,EAC7B,WAAmB;IAEnB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChD,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,wBAAwB,QAAQ,kBAAkB,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,wBAAwB,QAAQ,iBAAiB,sBAAsB,mBAAmB,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAY;IACnC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAY,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAS;YACrE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,OAAO,GAAG,wBAAwB;oBAAE,OAAO;gBAC/C,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAW,CAAC;QACtC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC/B,GAAG,IAAI,IAAI,CAAC;gBACZ,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;iBAAM,CAAC;gBACN,GAAG,IAAI,OAAO,CAAC;gBACf,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;YACjD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAA6B,EAC7B,OAAe,EACf,IAAa;IAEb,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;IACzD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,UAAU,IAAI,KAAK,EAAE,CAAC;QAC/B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBAAE,SAAS;YACnD,IAAI,CAAC;gBACH,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,QAA6B,EAC7B,KAAa,EACb,IAAa;IAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACpF,MAAM,IAAI,GAAwD,EAAE,CAAC;IACrE,KAAK,MAAM,UAAU,IAAI,KAAK,EAAE,CAAC;QAC/B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,sBAAsB;gBAAE,SAAS;YACpE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,OAAO,KAAK,IAAI;gBAAE,SAAS;YAC/B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACtB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAuB;IACnD,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,YAAY,CACpB,8BAA8B,EAC9B,wCAAwC,CACzC,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,YAAY,CACpB,8BAA8B,EAC9B,+CAA+C,CAChD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAA6B,EAC7B,UAA6C,EAC7C,OAA2C;IAE3C,MAAM,cAAc,GAAG,QAAQ,CAAC,cAAc;QAC5C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QACvC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,YAAY,CACpB,8BAA8B,EAC9B,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IACjC,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,4EAA4E;IAC5E,iEAAiE;IACjE,OAAO,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAA6B,EAC7B,OAA2B;IAE3B,MAAM,IAAI,GAAG,MAAM,CAAE,OAA8B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;QAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAClD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,WAAW,GAAG,MAAM,CAAE,OAA8B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACvE,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC;aACtD,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,OAAO,GAAI,OAAgC,CAAC,OAAO,IAAI,MAAM,CAAC;YACpE,MAAM,IAAI,GAAI,OAA6B,CAAC,IAAI,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;QACnF,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,KAAK,GAAG,MAAM,CAAE,OAA+B,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,IAAI,GAAI,OAA6B,CAAC,IAAI,CAAC;YACjD,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,MAAM,wBAAwB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC;aAC/D,CAAC;QACJ,CAAC;QACD,KAAK,SAAS,CAAC;QACf,KAAK,UAAU,CAAC;QAChB,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAsC,CAAC;YAClF,MAAM,KAAK,GAAG,OAA6C,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QAC5E,CAAC;QACD;YACE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAA6B;IAK7B,MAAM,OAAO,GAAG,EAGf,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAC1B,iBAAiB,CAAC,QAAQ,EAAE,EAAE,GAAI,OAAkB,EAAE,IAAI,EAAwB,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AA4CD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAe,KAc5D;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,MAAM,QAAQ,GACZ,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC;QAChD,CAAC,CAAC,KAAK,CAAC,eAAe;QACvB,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAC/B,MAAM,UAAU,GAAG,CAAC,IAAU,EAA+B,EAAE;QAC7D,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,MAAM,QAAQ,GACZ,QAAQ,KAAK,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1F,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO;YACL,QAAQ;YACR,WAAW,EAAE,GAAG,EAAE,CAChB,QAAQ,KAAK,MAAM,CAAC,iBAAiB;gBACnC,CAAC,CAAC,MAAM,CAAC,iBAAiB;gBAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,GAAG,EAAE,CAAC;YACnC,cAAc,EAAE,GAAG,EAAE;gBACnB,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,SAAS,CAAC;gBAClC,MAAM,IAAI,GAAG,OAAO,IAAI,QAAQ,CAAC;gBACjC,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACtB,QAAQ,GAAG,IAAI,CAAC;oBAChB,KAAK,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC1C,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;IACF,0EAA0E;IAC1E,8EAA8E;IAC9E,+EAA+E;IAC/E,sEAAsE;IACtE,MAAM,OAAO,GAAG,KAAK,EAAE,IAAU,EAAmB,EAAE;QACpD,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YACvD,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,KAAK,GACT,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,GAAG,CAAC;YACxC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;YACjD,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACzB,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,+EAA+E;QAC/E,4EAA4E;QAC5E,0CAA0C;QAC1C,MAAM,OAAO,GAAG,IAAI,KAAK,CAAS,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;YACvC,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,MAAM,CAAC;gBACrB,MAAM,IAAI,CAAC,CAAC;gBACZ,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM;oBAAE,OAAO;gBACxC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAChC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9E,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/services/operate/outcomes.d.ts

@@ -1,48 +0,0 @@
-import { type OperatingOutcome, type OperatingOutcomeObservation, type OperatingState } from './types.js';
-export declare function createOperatingOutcome(input: Omit<OperatingOutcome, 'kind' | 'schemaVersion' | 'protocolVersion' | 'status' | 'createdAt' | 'updatedAt'> & {
-    createdAt?: string;
-}): Promise<OperatingOutcome>;
-export declare function evaluateOperatingOutcome(input: {
-    outcome: OperatingOutcome;
-    observationId: string;
-    observedAt: string;
-    window: {
-        from: string;
-        to: string;
-    };
-    value: number | null;
-    unit: string;
-    queryIdentity: string;
-    aggregation: OperatingOutcome['aggregation'];
-    sampleSize: number;
-    coverage: number;
-    freshness: 'fresh' | 'stale' | 'unknown';
-    guardrailValues: Record<string, number | null>;
-    evidenceRefs: string[];
-}): Promise<OperatingOutcomeObservation>;
-/**
- * Commits one immutable observation and derives its evaluation, learning, and
- * optional follow-up gap under the same event-head lease. Replays are
- * idempotent by observation ID.
- */
-export declare function recordOperatingOutcomeObservation(input: {
-    projectRoot: string;
-    observation: OperatingOutcomeObservation;
-    localRoot?: string;
-}): Promise<{
-    applied: boolean;
-    state: OperatingState;
-}>;
-/**
- * Imports validated observation envelopes dropped into the committed outcome
- * inbox. This is the zero-model reconciliation performed by review-only runs.
- */
-export declare function reconcileOperatingOutcomeFiles(input: {
-    projectRoot: string;
-    localRoot?: string;
-}): Promise<{
-    reconciled: number;
-    shipObserved: number;
-    state: OperatingState;
-}>;
-//# sourceMappingURL=outcomes.d.ts.map