patchwork-os 0.2.0-alpha.34 → 0.2.0-alpha.36

package/dist/approvalSignals.js

@@ -0,0 +1,512 @@
+/**
+ * approvalSignals — passive risk personalization for the approval queue.
+ *
+ * Computes user-specific signals based on past approval / activity history.
+ * These supplement (not replace) the policy-engine `riskSignals` which are
+ * computed from the call's CONTENT (params shape, destructive flags, etc.).
+ *
+ * Personal signals describe the user's RELATIONSHIP to this tool/call:
+ * "you approved this 27 times" is a different signal class from "this
+ * command contains rm -rf". Both should reach the approval modal.
+ *
+ * Catalog (from docs/strategic/2026-05-02/memory-ecosystem-report.md §5):
+ * three of the twelve heuristics shipped here. Heuristics 4-12 follow.
+ *
+ *   1. "You approved similar actions N times" — past allow on same tool
+ *   2. "You rejected this tool before" — past deny on same tool
+ *   3. "First use of this connector" — connector namespace ∩ activity log
+ *   5. "Last called T days ago" — gap since most recent call (heuristic 4
+ *      from the catalog is satisfied by the first_connector_use kind above)
+ *   7. "Risk tier escalation" — current tier exceeds the user's typical
+ *      approved tier across recent decisions
+ *   6. "Mirrors a recipe step you trust" — primary param matches a step
+ *      from a successful past recipe run
+ *   8. "Often runs alongside X" — co-occurrence pairing in recent activity
+ *   9. "Workspace mismatch" — call from a workspace that has never
+ *      approved this tool before
+ *  10. "Time-of-day anomaly" — call hour outside the user's usual window
+ *      for this tool (opt-in: gate via `enableTimeOfDayAnomaly`)
+ *  11. "Param novelty" — primary param (command/url/pattern) prefix never
+ *      seen on prior approvals of this tool
+ *  12. "Cooldown breach" — same tool fired N+ times in a short window
+ *
+ * The signals are **transparent**: every signal has a `source` enum so a
+ * future "why is this signal here?" UI can link back to the rows that
+ * produced it. We do not infer; we count and match. No model, no
+ * fine-tuning. Honesty is the value proposition.
+ *
+ * Privacy: signals are computed locally over local logs. They flow into
+ * the approval queue's PendingApproval shape, which is exposed via
+ * GET /approvals (bearer-auth-gated) and the SSE stream (same auth).
+ * Nothing leaves the machine.
+ */
+import { isConnectorNamespace } from "./recipes/toolRegistry.js";
+/**
+ * Threshold under which heuristic 1 ("you approved this N times") does
+ * not surface. With < 3 prior approvals the signal is noise — it could
+ * be the first three exploratory calls a user always rubber-stamps. ≥ 3
+ * is "you have a pattern here."
+ */
+const PRIOR_APPROVALS_THRESHOLD = 3;
+/**
+ * Minimum gap before "you haven't used this in a while" surfaces. Under a
+ * week the user almost certainly remembers; past a week, the call may
+ * deserve a second look. Tunable, not load-bearing — change freely if
+ * dashboard feedback says it's noisy or too quiet.
+ */
+const STALE_TOOL_DAYS = 7;
+const STALE_TOOL_MS = STALE_TOOL_DAYS * 24 * 60 * 60 * 1_000;
+/** Bumped severity threshold — past a month away is "have you forgotten what this does" territory. */
+const STALE_TOOL_HIGH_DAYS = 30;
+/**
+ * Minimum prior-allow decisions needed to establish a "typical tier"
+ * baseline for heuristic 7. Below this we don't claim to know the user's
+ * pattern — first few approvals could be anything. 5 is small but enough
+ * to make a single outlier not dominate.
+ */
+const TIER_BASELINE_MIN_SAMPLES = 5;
+const TIER_RANK = { low: 0, medium: 1, high: 2 };
+/**
+ * Window for co-occurrence detection — 15 minutes lines up with the
+ * catalog's heuristic 8 description and is wide enough to capture an
+ * "I'm in the middle of doing X" workflow without crossing session
+ * boundaries.
+ */
+const COOCCURRENCE_WINDOW_MS = 15 * 60 * 1_000;
+/** Minimum co-occurrence count before the chip surfaces. < 3 is noise. */
+const COOCCURRENCE_MIN_COUNT = 3;
+/**
+ * Cooldown-breach window — five minutes is short enough that "fired N
+ * times" is a behavioral pattern (a runaway loop, a panicked retry, a
+ * stuck recipe) rather than ordinary use. ApprovalQueue.inflightKey
+ * already deduplicates concurrent identical requests; this surfaces the
+ * cumulative pattern that inflight dedup hides.
+ */
+const COOLDOWN_WINDOW_MS = 5 * 60 * 1_000;
+/** Min repeat count inside the window before the chip surfaces. */
+const COOLDOWN_BREACH_MIN = 3;
+/** Severity bumps to high once the burst is unmistakable. */
+const COOLDOWN_BREACH_HIGH = 6;
+/**
+ * Minimum prior calls (any hour) before the time-of-day histogram is
+ * trustworthy. Below this we don't claim to know the user's pattern —
+ * any single hour could legitimately be the first time the tool runs.
+ */
+const TIME_OF_DAY_BASELINE_MIN = 10;
+/** Most recent calls considered when building the per-hour histogram. */
+const TIME_OF_DAY_LOOKBACK = 200;
+/**
+ * Tools whose calls have a single high-signal "primary param" that's
+ * worth tracking for novelty. Map value = the param key. Other tools
+ * skip h11 entirely — generic approval-modal fields like "specifier"
+ * are too noisy to compare across calls.
+ */
+const PARAM_NOVELTY_PRIMARY_KEYS = {
+    runCommand: "command",
+    Bash: "command",
+    sendHttpRequest: "url",
+    WebFetch: "url",
+    searchAndReplace: "pattern",
+};
+/**
+ * Number of leading characters used as the prefix key for novelty
+ * comparison. Long enough to distinguish `git push` from `git pull` but
+ * short enough that param tail variation (file paths, sha args) doesn't
+ * make every call look novel.
+ */
+const PARAM_NOVELTY_PREFIX_LEN = 24;
+/** Minimum prior calls before the novelty signal is trustworthy. */
+const PARAM_NOVELTY_BASELINE_MIN = 5;
+/**
+ * How many recent successful recipe runs we scan for matching step
+ * results in heuristic 6. 200 is enough to catch any "you run this
+ * recipe daily" pattern without unbounded scan cost.
+ */
+const RECIPE_STEP_TRUST_LOOKBACK = 200;
+/**
+ * Minimum number of matching successful runs before we surface the
+ * "trusted recipe step" signal. ≥ 2 means "this isn't a one-off."
+ */
+const RECIPE_STEP_TRUST_MIN = 2;
+/**
+ * Compute the personal-signal set for an incoming approval request.
+ *
+ * Pure function over the activity log; no I/O of its own. Tested in
+ * isolation by feeding a mock ActivityLog. The activityLog argument is
+ * passed positionally rather than wired through deps so the surface
+ * stays inspectable.
+ */
+export function computePersonalSignals(input) {
+    const { toolName, activityLog, currentTier, currentWorkspace, enableTimeOfDayAnomaly, currentParams, recipeRunLog, } = input;
+    if (!toolName)
+        return [];
+    const signals = [];
+    // Heuristic 1: "You approved this N times before."
+    // Surface only when count crosses PRIOR_APPROVALS_THRESHOLD so we don't
+    // flag every second call. Cap the message at three buckets for legibility.
+    const priorApprovals = activityLog.queryApprovalDecisions({
+        toolName,
+        decision: "allow",
+    });
+    if (priorApprovals.length >= PRIOR_APPROVALS_THRESHOLD) {
+        signals.push({
+            kind: "prior_approvals",
+            label: priorApprovalsLabel(priorApprovals.length),
+            severity: "low",
+            source: "approval_history",
+            count: priorApprovals.length,
+        });
+    }
+    // Heuristic 2: "You rejected this tool before."
+    // Any prior rejection is signal — explicit rejections are rare and
+    // intentional. Severity scales with how recent and how many.
+    const priorRejections = activityLog.queryApprovalDecisions({
+        toolName,
+        decision: "deny",
+    });
+    if (priorRejections.length > 0) {
+        signals.push({
+            kind: "prior_rejection",
+            label: priorRejectionLabel(priorRejections.length),
+            severity: priorRejections.length >= 2 ? "high" : "medium",
+            source: "approval_history",
+            count: priorRejections.length,
+        });
+    }
+    // Heuristic 3: "First use of this connector" / "first use of this tool".
+    // For namespaced tool ids only (`namespace.subtool` shape). Two flavors:
+    //   - If the namespace is in the connector registry → "first connector use"
+    //     (high salience: connectors hit external services with credentials).
+    //   - Otherwise, plain "first use" with low salience.
+    // We require a namespaced tool id so we don't flag every CLI tool ever
+    // called with no prior history (which would fire on every fresh session).
+    const namespace = toolName.split(".")[0];
+    if (namespace && namespace !== toolName) {
+        const priorInNamespace = activityLog.queryByNamespace(namespace, 50);
+        if (priorInNamespace.length === 0) {
+            const isConnector = isConnectorNamespace(namespace);
+            signals.push({
+                kind: isConnector ? "first_connector_use" : "first_tool_use",
+                label: isConnector
+                    ? `First use of the ${namespace} connector — credentials and external calls about to fire.`
+                    : `First use of any ${namespace}.* tool in this workspace.`,
+                severity: isConnector ? "high" : "low",
+                source: "activity_history",
+            });
+        }
+    }
+    // Heuristic 5: "Last called T days ago."
+    // Surfaces a low/medium signal when the user hasn't called this exact
+    // tool in a while. The message gives the user a beat to reconsider —
+    // memory of *why* a call was approved fades faster than the data does.
+    // No signal at all when there's no prior call (heuristic 3 handles
+    // first-use); no signal when the gap is under STALE_TOOL_DAYS.
+    const lastCall = activityLog.queryLastToolCall(toolName);
+    if (lastCall) {
+        const lastMs = Date.parse(lastCall.timestamp);
+        const gapMs = Number.isFinite(lastMs) ? Date.now() - lastMs : 0;
+        if (gapMs >= STALE_TOOL_MS) {
+            const days = Math.floor(gapMs / (24 * 60 * 60 * 1_000));
+            signals.push({
+                kind: "stale_tool_use",
+                label: staleToolLabel(days),
+                severity: days >= STALE_TOOL_HIGH_DAYS ? "medium" : "low",
+                source: "activity_history",
+                count: days,
+            });
+        }
+    }
+    // Heuristic 7: "Risk tier escalation."
+    // Compare the incoming call's tier against the user's typical approved
+    // tier across recent allow-decisions. If the user usually approves low
+    // and this is medium/high — or usually medium and this is high — surface.
+    // Cross-tool: the question is "is this user's threshold being exceeded",
+    // not "is this tool a step up from this tool's history". The latter is
+    // covered by heuristic 1 (prior approvals on the same tool).
+    if (currentTier) {
+        const recentAllows = activityLog
+            .queryApprovalDecisions({ decision: "allow", last: 50 })
+            .filter((e) => e.metadata?.tier === "low" ||
+            e.metadata?.tier === "medium" ||
+            e.metadata?.tier === "high");
+        if (recentAllows.length >= TIER_BASELINE_MIN_SAMPLES) {
+            // p50 over rank space — sort ranks, pick the middle. Equivalent to
+            // median; cheaper than a full distribution and stable on small N.
+            const ranks = recentAllows
+                .map((e) => TIER_RANK[e.metadata.tier])
+                .sort((a, b) => a - b);
+            const baselineRank = ranks[Math.floor(ranks.length / 2)] ?? 0;
+            const currentRank = TIER_RANK[currentTier];
+            if (currentRank > baselineRank) {
+                const baselineTier = Object.keys(TIER_RANK).find((t) => TIER_RANK[t] === baselineRank);
+                const jump = currentRank - baselineRank;
+                signals.push({
+                    kind: "tier_escalation",
+                    label: tierEscalationLabel(baselineTier ?? "low", currentTier),
+                    // jump of 1 (low→med, med→high) = medium; jump of 2 (low→high) = high
+                    severity: jump >= 2 ? "high" : "medium",
+                    source: "approval_history",
+                });
+            }
+        }
+    }
+    // Heuristic 8: "Often runs alongside X."
+    // Informational chip — when the user calls this tool it tends to run
+    // near another tool (within 15min). Surfaces the strongest partner.
+    // Distinct from heuristic 1 (history of THIS tool); this signal is
+    // about the workflow shape: "you're probably mid-deploy" / "this is
+    // your morning-brief sequence". Severity always low — this is context,
+    // not warning. Catalog flags this as medium-FP, so we underclaim.
+    const pairs = activityLog.coOccurrence(COOCCURRENCE_WINDOW_MS);
+    let bestPartner = null;
+    for (const { pair, count } of pairs) {
+        if (count < COOCCURRENCE_MIN_COUNT)
+            continue;
+        const [a, b] = pair.split("|");
+        const partner = a === toolName ? b : b === toolName ? a : null;
+        if (!partner)
+            continue;
+        // pairs is sorted by count desc, so the first match is the strongest.
+        bestPartner = { name: partner, count };
+        break;
+    }
+    if (bestPartner) {
+        signals.push({
+            kind: "cooccurrence_pattern",
+            label: `Often runs alongside ${bestPartner.name} (${bestPartner.count} co-occurrences in your recent activity).`,
+            severity: "low",
+            source: "activity_history",
+            count: bestPartner.count,
+        });
+    }
+    // Heuristic 9: "Workspace mismatch."
+    // Surfaces when this tool has been approved (allow OR deny — any
+    // human decision counts as a "this workspace has seen this tool"
+    // signal) in other workspaces but not in the one the call is coming
+    // from. Catches "I just opened a new project and the agent wants to
+    // run the same risky tool — fresh workspace, no consent record."
+    // Skipped when currentWorkspace is missing (test fixtures, callers
+    // without a workspace context).
+    if (currentWorkspace) {
+        const allDecisions = activityLog.queryApprovalDecisions({ toolName });
+        const seenWorkspaces = new Set();
+        let priorWithWorkspace = 0;
+        for (const e of allDecisions) {
+            const ws = e.metadata?.workspace;
+            if (typeof ws === "string" && ws.length > 0) {
+                seenWorkspaces.add(ws);
+                priorWithWorkspace++;
+            }
+        }
+        // Need ≥ 1 prior decision *with workspace metadata* to claim a
+        // baseline. Older rows lacking the field can't tell us anything.
+        if (priorWithWorkspace > 0 && !seenWorkspaces.has(currentWorkspace)) {
+            signals.push({
+                kind: "workspace_mismatch",
+                label: workspaceMismatchLabel(seenWorkspaces.size),
+                // Catalog says "FP low" — workspace is a strong intent boundary.
+                // But it's still informational rather than a hard warning.
+                severity: "medium",
+                source: "approval_history",
+                count: seenWorkspaces.size,
+            });
+        }
+    }
+    // Heuristic 10: "Time-of-day anomaly."
+    // Build a 24-bucket hour-of-day histogram for past calls of this tool.
+    // If the current hour has zero prior calls AND total prior calls is
+    // past the baseline, surface as informational (low severity). Catalog
+    // flags this as medium-FP so it stays opt-in and never escalates to
+    // medium/high — purely a "huh, that's unusual" chip.
+    if (enableTimeOfDayAnomaly) {
+        const recent = activityLog.query({
+            tool: toolName,
+            last: TIME_OF_DAY_LOOKBACK,
+        });
+        if (recent.length >= TIME_OF_DAY_BASELINE_MIN) {
+            const hourCounts = new Array(24).fill(0);
+            for (const e of recent) {
+                const hr = new Date(e.timestamp).getHours();
+                if (Number.isFinite(hr) && hr >= 0 && hr < 24) {
+                    hourCounts[hr] = (hourCounts[hr] ?? 0) + 1;
+                }
+            }
+            const currentHour = new Date().getHours();
+            if ((hourCounts[currentHour] ?? 0) === 0) {
+                signals.push({
+                    kind: "time_of_day_anomaly",
+                    label: timeOfDayLabel(currentHour, recent.length),
+                    severity: "low",
+                    source: "activity_history",
+                    count: recent.length,
+                });
+            }
+        }
+    }
+    // Heuristic 11: "Param novelty."
+    // For tools with a clear primary string param (runCommand → command,
+    // sendHttpRequest → url, etc.), build a Set of past param prefixes
+    // from approval_decision metadata. If the current call's prefix isn't
+    // in that set AND we have enough baseline, surface as informational.
+    // Compares only the leading PARAM_NOVELTY_PREFIX_LEN chars so the
+    // tail (file paths, sha args, query params) doesn't make every call
+    // look novel.
+    const primaryKey = PARAM_NOVELTY_PRIMARY_KEYS[toolName];
+    if (primaryKey && currentParams) {
+        const currentRaw = currentParams[primaryKey];
+        if (typeof currentRaw === "string" && currentRaw.length > 0) {
+            const currentPrefix = paramPrefix(currentRaw);
+            const priorDecisions = activityLog.queryApprovalDecisions({
+                toolName,
+            });
+            const seenPrefixes = new Set();
+            for (const e of priorDecisions) {
+                const params = e.metadata?.params;
+                if (typeof params !== "object" || params === null)
+                    continue;
+                const v = params[primaryKey];
+                if (typeof v === "string" && v.length > 0) {
+                    seenPrefixes.add(paramPrefix(v));
+                }
+            }
+            if (seenPrefixes.size >= PARAM_NOVELTY_BASELINE_MIN &&
+                !seenPrefixes.has(currentPrefix)) {
+                signals.push({
+                    kind: "param_novelty",
+                    label: paramNoveltyLabel(primaryKey, seenPrefixes.size),
+                    severity: "medium",
+                    source: "approval_history",
+                    count: seenPrefixes.size,
+                });
+            }
+        }
+    }
+    // Heuristic 6: "Mirrors a recipe step you trust."
+    // Scan recent SUCCESSFUL recipe runs for a step whose tool matches
+    // and whose resolvedParams primary key shares the same 24-char prefix
+    // as the current call. If we find ≥ RECIPE_STEP_TRUST_MIN such runs,
+    // surface the recipe name and the count. Reuses h11's primary-key
+    // map so "this tool needs a primary param to compare" is one decision.
+    // Trust signal — low severity (informational reassurance, not warning).
+    const recipePrimaryKey = PARAM_NOVELTY_PRIMARY_KEYS[toolName];
+    if (recipeRunLog && recipePrimaryKey && currentParams) {
+        const currentRaw = currentParams[recipePrimaryKey];
+        if (typeof currentRaw === "string" && currentRaw.length > 0) {
+            const currentPrefix = paramPrefix(currentRaw);
+            const recentRuns = recipeRunLog.query({
+                status: "done",
+                limit: RECIPE_STEP_TRUST_LOOKBACK,
+            });
+            const matchingRecipes = new Map();
+            for (const run of recentRuns) {
+                if (!run.stepResults)
+                    continue;
+                for (const step of run.stepResults) {
+                    if (step.tool !== toolName || step.status !== "ok")
+                        continue;
+                    const sp = step.resolvedParams;
+                    if (typeof sp !== "object" || sp === null)
+                        continue;
+                    const v = sp[recipePrimaryKey];
+                    if (typeof v === "string" &&
+                        v.length > 0 &&
+                        paramPrefix(v) === currentPrefix) {
+                        matchingRecipes.set(run.recipeName, (matchingRecipes.get(run.recipeName) ?? 0) + 1);
+                        // One match per run is enough — same step run repeatedly in
+                        // a single recipe execution doesn't add weight.
+                        break;
+                    }
+                }
+            }
+            let totalMatches = 0;
+            let topRecipe = null;
+            let topCount = 0;
+            for (const [name, count] of matchingRecipes) {
+                totalMatches += count;
+                if (count > topCount) {
+                    topCount = count;
+                    topRecipe = name;
+                }
+            }
+            if (totalMatches >= RECIPE_STEP_TRUST_MIN && topRecipe) {
+                signals.push({
+                    kind: "recipe_step_trust",
+                    label: recipeStepTrustLabel(topRecipe, totalMatches),
+                    severity: "low",
+                    source: "recipe_run_log",
+                    count: totalMatches,
+                });
+            }
+        }
+    }
+    // Heuristic 12: "Cooldown breach."
+    // Same tool fired N+ times within a short window — pattern of a runaway
+    // loop, panicked retry, or stuck recipe. Distinct from heuristic 1
+    // (long-tail history): h1 says "you usually approve this", h12 says
+    // "you're approving this RIGHT NOW more than usual." Approvals modal
+    // should show both when both fire.
+    const recentCalls = activityLog.query({ tool: toolName, last: 50 });
+    const cutoff = Date.now() - COOLDOWN_WINDOW_MS;
+    const burstCount = recentCalls.filter((e) => Date.parse(e.timestamp) >= cutoff).length;
+    if (burstCount >= COOLDOWN_BREACH_MIN) {
+        signals.push({
+            kind: "cooldown_breach",
+            label: cooldownBreachLabel(burstCount),
+            severity: burstCount >= COOLDOWN_BREACH_HIGH ? "high" : "medium",
+            source: "activity_history",
+            count: burstCount,
+        });
+    }
+    return signals;
+}
+function workspaceMismatchLabel(otherCount) {
+    if (otherCount === 1) {
+        return "Approved in a different workspace before — first time you've allowed it here.";
+    }
+    return `Approved in ${otherCount} other workspaces before — first time you've allowed it here.`;
+}
+function paramPrefix(s) {
+    // Trim leading whitespace so " git push" and "git push" hash the same.
+    return s.trimStart().slice(0, PARAM_NOVELTY_PREFIX_LEN);
+}
+function recipeStepTrustLabel(recipeName, totalMatches) {
+    return `Matches a step in your ${recipeName} recipe (${totalMatches} successful runs).`;
+}
+function paramNoveltyLabel(paramKey, baselineSize) {
+    return `Novel ${paramKey} prefix — across ${baselineSize} prior approvals you've never run this exact shape.`;
+}
+function timeOfDayLabel(hour, baselineCount) {
+    const hh = hour.toString().padStart(2, "0");
+    return `First call at ${hh}:00 — outside your usual hours for this tool (across ${baselineCount} prior calls).`;
+}
+function cooldownBreachLabel(count) {
+    return `Called ${count} times in the last 5 minutes — possible runaway loop or panicked retry.`;
+}
+function tierEscalationLabel(baseline, current) {
+    return `You usually approve ${baseline}-tier calls — this one is ${current}.`;
+}
+function priorApprovalsLabel(count) {
+    if (count >= 100) {
+        return `You've approved this tool ${count}+ times — well-trusted in your workflow.`;
+    }
+    if (count >= 20) {
+        return `You've approved this tool ${count} times before.`;
+    }
+    return `You've approved this tool ${count} times before.`;
+}
+function staleToolLabel(days) {
+    if (days >= 365)
+        return `Last called over a year ago (${days} days).`;
+    if (days >= 30) {
+        const months = Math.floor(days / 30);
+        return `Last called ${months === 1 ? "a month" : `${months} months`} ago — context may have changed since.`;
+    }
+    return `Last called ${days} days ago.`;
+}
+function priorRejectionLabel(count) {
+    if (count === 1) {
+        return "You rejected this tool once before — context may have changed since.";
+    }
+    return `You've rejected this tool ${count} times before — recurring pattern of caution.`;
+}
+//# sourceMappingURL=approvalSignals.js.map

package/dist/approvalSignals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvalSignals.js","sourceRoot":"","sources":["../src/approvalSignals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AA+BjE;;;;;GAKG;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,aAAa,GAAG,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAC7D,sGAAsG;AACtG,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC,MAAM,SAAS,GAA6B,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAC/C,0EAA0E;AAC1E,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAC1C,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,6DAA6D;AAC7D,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,yEAAyE;AACzE,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,0BAA0B,GAA2B;IACzD,UAAU,EAAE,SAAS;IACrB,IAAI,EAAE,SAAS;IACf,eAAe,EAAE,KAAK;IACtB,QAAQ,EAAE,KAAK;IACf,gBAAgB,EAAE,SAAS;CAC5B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,oEAAoE;AACpE,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAErC;;;;GAIG;AACH,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC;;;GAGG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAqBhC;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAuCtC;IACC,MAAM,EACJ,QAAQ,EACR,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,EACb,YAAY,GACb,GAAG,KAAK,CAAC;IACV,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,mDAAmD;IACnD,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,cAAc,GAAG,WAAW,CAAC,sBAAsB,CAAC;QACxD,QAAQ;QACR,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IACH,IAAI,cAAc,CAAC,MAAM,IAAI,yBAAyB,EAAE,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,mBAAmB,CAAC,cAAc,CAAC,MAAM,CAAC;YACjD,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,kBAAkB;YAC1B,KAAK,EAAE,cAAc,CAAC,MAAM;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,gDAAgD;IAChD,mEAAmE;IACnE,6DAA6D;IAC7D,MAAM,eAAe,GAAG,WAAW,CAAC,sBAAsB,CAAC;QACzD,QAAQ;QACR,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,mBAAmB,CAAC,eAAe,CAAC,MAAM,CAAC;YAClD,QAAQ,EAAE,eAAe,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACzD,MAAM,EAAE,kBAAkB;YAC1B,KAAK,EAAE,eAAe,CAAC,MAAM;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,4EAA4E;IAC5E,0EAA0E;IAC1E,sDAAsD;IACtD,uEAAuE;IACvE,0EAA0E;IAC1E,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,SAAS,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,gBAAgB,GAAG,WAAW,CAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB;gBAC5D,KAAK,EAAE,WAAW;oBAChB,CAAC,CAAC,oBAAoB,SAAS,4DAA4D;oBAC3F,CAAC,CAAC,oBAAoB,SAAS,4BAA4B;gBAC7D,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;gBACtC,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,mEAAmE;IACnE,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,KAAK,IAAI,aAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC;gBAC3B,QAAQ,EAAE,IAAI,IAAI,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;gBACzD,MAAM,EAAE,kBAAkB;gBAC1B,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,uEAAuE;IACvE,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,6DAA6D;IAC7D,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,WAAW;aAC7B,sBAAsB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;aACvD,MAAM,CACL,CAAC,CAAC,EAAoD,EAAE,CACtD,CAAC,CAAC,QAAQ,EAAE,IAAI,KAAK,KAAK;YAC1B,CAAC,CAAC,QAAQ,EAAE,IAAI,KAAK,QAAQ;YAC7B,CAAC,CAAC,QAAQ,EAAE,IAAI,KAAK,MAAM,CAC9B,CAAC;QACJ,IAAI,YAAY,CAAC,MAAM,IAAI,yBAAyB,EAAE,CAAC;YACrD,mEAAmE;YACnE,kEAAkE;YAClE,MAAM,KAAK,GAAG,YAAY;iBACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;iBACtC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YAC3C,IAAI,WAAW,GAAG,YAAY,EAAE,CAAC;gBAC/B,MAAM,YAAY,GAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAgB,CAAC,IAAI,CAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,YAAY,CACrC,CAAC;gBACF,MAAM,IAAI,GAAG,WAAW,GAAG,YAAY,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,mBAAmB,CAAC,YAAY,IAAI,KAAK,EAAE,WAAW,CAAC;oBAC9D,sEAAsE;oBACtE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;oBACvC,MAAM,EAAE,kBAAkB;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,qEAAqE;IACrE,oEAAoE;IACpE,mEAAmE;IACnE,oEAAoE;IACpE,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC;IAC/D,IAAI,WAAW,GAA2C,IAAI,CAAC;IAC/D,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,EAAE,CAAC;QACpC,IAAI,KAAK,GAAG,sBAAsB;YAAE,SAAS;QAC7C,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,sEAAsE;QACtE,WAAW,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACvC,MAAM;IACR,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,wBAAwB,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,KAAK,2CAA2C;YAChH,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,kBAAkB;YAC1B,KAAK,EAAE,WAAW,CAAC,KAAK;SACzB,CAAC,CAAC;IACL,CAAC;IAED,qCAAqC;IACrC,iEAAiE;IACjE,iEAAiE;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,mEAAmE;IACnE,gCAAgC;IAChC,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,YAAY,GAAG,WAAW,CAAC,sBAAsB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACzC,IAAI,kBAAkB,GAAG,CAAC,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;YACjC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvB,kBAAkB,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,+DAA+D;QAC/D,iEAAiE;QACjE,IAAI,kBAAkB,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,oBAAoB;gBAC1B,KAAK,EAAE,sBAAsB,CAAC,cAAc,CAAC,IAAI,CAAC;gBAClD,iEAAiE;gBACjE,2DAA2D;gBAC3D,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,kBAAkB;gBAC1B,KAAK,EAAE,cAAc,CAAC,IAAI;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,uEAAuE;IACvE,oEAAoE;IACpE,sEAAsE;IACtE,oEAAoE;IACpE,qDAAqD;IACrD,IAAI,sBAAsB,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,oBAAoB;SAC3B,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,IAAI,wBAAwB,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,IAAI,KAAK,CAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC5C,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;oBAC9C,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,qBAAqB;oBAC3B,KAAK,EAAE,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;oBACjD,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,kBAAkB;oBAC1B,KAAK,EAAE,MAAM,CAAC,MAAM;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,qEAAqE;IACrE,mEAAmE;IACnE,sEAAsE;IACtE,qEAAqE;IACrE,kEAAkE;IAClE,oEAAoE;IACpE,cAAc;IACd,MAAM,UAAU,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,UAAU,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,cAAc,GAAG,WAAW,CAAC,sBAAsB,CAAC;gBACxD,QAAQ;aACT,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;YACvC,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;oBAAE,SAAS;gBAC5D,MAAM,CAAC,GAAI,MAAkC,CAAC,UAAU,CAAC,CAAC;gBAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1C,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YACD,IACE,YAAY,CAAC,IAAI,IAAI,0BAA0B;gBAC/C,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,EAChC,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,iBAAiB,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC;oBACvD,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,kBAAkB;oBAC1B,KAAK,EAAE,YAAY,CAAC,IAAI;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,mEAAmE;IACnE,sEAAsE;IACtE,qEAAqE;IACrE,kEAAkE;IAClE,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,YAAY,IAAI,gBAAgB,IAAI,aAAa,EAAE,CAAC;QACtD,MAAM,UAAU,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;QACnD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC;gBACpC,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,0BAA0B;aAClC,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;YAClD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,WAAW;oBAAE,SAAS;gBAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;oBACnC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;wBAAE,SAAS;oBAC7D,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;oBAC/B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI;wBAAE,SAAS;oBACpD,MAAM,CAAC,GAAI,EAA8B,CAAC,gBAAgB,CAAC,CAAC;oBAC5D,IACE,OAAO,CAAC,KAAK,QAAQ;wBACrB,CAAC,CAAC,MAAM,GAAG,CAAC;wBACZ,WAAW,CAAC,CAAC,CAAC,KAAK,aAAa,EAChC,CAAC;wBACD,eAAe,CAAC,GAAG,CACjB,GAAG,CAAC,UAAU,EACd,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAC/C,CAAC;wBACF,4DAA4D;wBAC5D,gDAAgD;wBAChD,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;gBAC5C,YAAY,IAAI,KAAK,CAAC;gBACtB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;oBACrB,QAAQ,GAAG,KAAK,CAAC;oBACjB,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,IAAI,YAAY,IAAI,qBAAqB,IAAI,SAAS,EAAE,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,oBAAoB,CAAC,SAAS,EAAE,YAAY,CAAC;oBACpD,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,gBAAgB;oBACxB,KAAK,EAAE,YAAY;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,wEAAwE;IACxE,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IACrE,mCAAmC;IACnC,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC;IAC/C,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,CACzC,CAAC,MAAM,CAAC;IACT,IAAI,UAAU,IAAI,mBAAmB,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,mBAAmB,CAAC,UAAU,CAAC;YACtC,QAAQ,EAAE,UAAU,IAAI,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YAChE,MAAM,EAAE,kBAAkB;YAC1B,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB;IAChD,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,+EAA+E,CAAC;IACzF,CAAC;IACD,OAAO,eAAe,UAAU,+DAA+D,CAAC;AAClG,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,uEAAuE;IACvE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAAkB,EAClB,YAAoB;IAEpB,OAAO,0BAA0B,UAAU,YAAY,YAAY,oBAAoB,CAAC;AAC1F,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,YAAoB;IAC/D,OAAO,SAAS,QAAQ,oBAAoB,YAAY,qDAAqD,CAAC;AAChH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,aAAqB;IACzD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,iBAAiB,EAAE,wDAAwD,aAAa,gBAAgB,CAAC;AAClH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,UAAU,KAAK,yEAAyE,CAAC;AAClG,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAkB,EAAE,OAAiB;IAChE,OAAO,uBAAuB,QAAQ,6BAA6B,OAAO,GAAG,CAAC;AAChF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QACjB,OAAO,6BAA6B,KAAK,0CAA0C,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAChB,OAAO,6BAA6B,KAAK,gBAAgB,CAAC;IAC5D,CAAC;IACD,OAAO,6BAA6B,KAAK,gBAAgB,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,gCAAgC,IAAI,SAAS,CAAC;IACtE,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACrC,OAAO,eAAe,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,SAAS,wCAAwC,CAAC;IAC9G,CAAC;IACD,OAAO,eAAe,IAAI,YAAY,CAAC;AACzC,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,sEAAsE,CAAC;IAChF,CAAC;IACD,OAAO,6BAA6B,KAAK,+CAA+C,CAAC;AAC3F,CAAC"}

package/dist/automation.d.ts

@@ -506,6 +506,43 @@ export declare class AutomationHooks {
     /** Last interpreter run promise — allows tests to await completion. */
     private _lastRunPromise;
     constructor(policy: AutomationPolicy, orchestrator: ClaudeOrchestrator, log: (msg: string) => void, _extensionClient?: ExtensionClient, _workspace?: string);
+    /**
+     * Tracks whether `_lastRunPromise` represents a still-running interpreter
+     * call. When false, we know the prior promise is settled and can start the
+     * next run synchronously (preserving start-sync semantics tests depend on).
+     * When true, we chain via `.then()` so the new run reads the post-state of
+     * the prior one — fixing the race where two concurrent events both observed
+     * stale `_automationState` and the second writer clobbered the first.
+     */
+    private _chainBusy;
+    /**
+     * Enqueue an interpreter run, serializing it after any prior in-flight run.
+     *
+     * Concurrent events (e.g. a file save and a diagnostic update in the same
+     * tick) used to overwrite `_lastRunPromise`, so both runs read the same
+     * stale `_automationState` and the second writer's `updatedState` clobbered
+     * the first's. Cooldown/dedup writes from one event were silently lost;
+     * orphaned tasks accumulated in `activeTasks`.
+     *
+     * Chain through `_lastRunPromise` so each run sees the post-state of the
+     * previous one. We start the next run synchronously when the chain is idle
+     * (preserves the contract that `_runInterpreter` body executes up to its
+     * first await before this call returns); only when a run is in flight do
+     * we defer via `.then()`.
+     */
+    private _enqueueRun;
+    /**
+     * Enqueue a synchronous state mutation to run after any in-flight
+     * interpreter call. Without this, handler-side `_automationState =
+     * setLatestDiagnostics(...)` writes done synchronously between
+     * `_enqueueRun` calls would be overwritten when the first run's
+     * `result.value.updatedState` writeback fires (the writeback replaces
+     * the full state, including the handler's incremental change).
+     *
+     * When the chain is idle, run the mutation synchronously to preserve
+     * test ergonomics that assume state is observable on the next line.
+     */
+    private _enqueueMutation;
     private _runInterpreter;
     /**
      * Returns a Promise that resolves once all in-flight interpreter runs finish.