pi-daddy 0.28.0 → 0.32.0

package/dist/kernel/workspace.js

@@ -0,0 +1,223 @@
+import { createHash, randomUUID } from "node:crypto";
+import { execFile } from "node:child_process";
+import { once } from "node:events";
+import { mkdir, open, readFile, realpath, rename, stat, writeFile } from "node:fs/promises";
+import { constants } from "node:fs";
+import { homedir } from "node:os";
+import { isAbsolute, join } from "node:path";
+import { promisify } from "node:util";
+import { GovernanceRefusal, refusal } from "./refusals.js";
+import { isSafeWorkspaceId, workspaceCapability } from "./capabilities.js";
+import { ENV_WORKSPACE_REGISTRY } from "./env-names.js";
+export { ENV_WORKSPACE_REGISTRY } from "./env-names.js";
+const execFileAsync = promisify(execFile);
+/**
+ * How long a registry read may take before it is a refusal rather than a wait.
+ *
+ * **R-79's defect class, and this reader reintroduced it.** That entry records a probe that hung forever on
+ * a FIFO with "no timeout anywhere in the path". This function used a bare `readFile`, which was survivable
+ * while it ran only at spawn time — and stopped being survivable when 0.19.0 began reading the registry from
+ * `buildCatalog` and `registeredWorkspaceIds`, both awaited inside `session_start`. Measured on `52135ca`:
+ * `PI_DADDY_WORKSPACE_REGISTRY` pointing at a FIFO blocked session start indefinitely, so the session never
+ * reached the `holding [...]` line, the executor probe, or any control after it — and `delegate` awaits the
+ * same promise, so delegation hung too. A blocking special file, an unresponsive network mount or a hostile
+ * `mkfifo` all reach it.
+ *
+ * Two seconds because this is an operator-authored local JSON file: any legitimate one is a single-digit
+ * millisecond read (measured: 8ms), so the bound is three orders of magnitude of headroom and still bounded.
+ */
+const REGISTRY_READ_TIMEOUT_MS = 2_000;
+/** A registry is an operator-authored JSON file; anything approaching this is not one. */
+const REGISTRY_MAX_BYTES = 1 << 20;
+export async function loadWorkspaceRegistry(path) {
+    // **One handle, opened non-blocking, and every check made against THAT handle.** Three defects made this
+    // the shape rather than `stat`-then-`readFile`:
+    //
+    //  - `AbortSignal.timeout` cannot rescue a FIFO: a signal is observed between chunks, while a FIFO blocks
+    //    inside `open(2)` before any read begins. `O_NONBLOCK` makes the open itself return instead (measured:
+    //    1ms), which is what actually bounds this path. R-79's defect class, and R-136's.
+    //  - `stat` by name followed by `readFile` by name is a TOCTOU: swapping a regular file for a FIFO between
+    //    the two hung the loader indefinitely, and the attacker is any process at the same uid — precisely the
+    //    actor the mode check below cannot exclude. Measured, 5 of 6 iterations completing in ~1ms and the
+    //    sixth never returning. `fstat` on a held descriptor has no name to re-resolve.
+    //  - a second reader (the ADR-0035 registry pin, since reverted to its own PR) reimplemented the guards and
+    //    got them wrong. One reader is why that cannot happen again.
+    let handle;
+    try {
+        handle = await open(path, constants.O_RDONLY | constants.O_NONBLOCK);
+    }
+    catch (error) {
+        throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace registry ${path} could not be opened (${String(error)})`, {
+            registry_path: path,
+        }));
+    }
+    let raw;
+    try {
+        const info = await handle.stat();
+        if (!info.isFile()) {
+            throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace registry ${path} is not a regular file — refusing to read it. A FIFO, device or socket ` +
+                `at ${ENV_WORKSPACE_REGISTRY} would block session start rather than fail, because opening one ` +
+                `waits for a writer that may never come.`, { registry_path: path }));
+        }
+        if (info.size > REGISTRY_MAX_BYTES) {
+            throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace registry ${path} is ${info.size} bytes, over the ${REGISTRY_MAX_BYTES} limit — refusing ` +
+                `rather than reading it into memory at session start.`, { registry_path: path }));
+        }
+        // **Ownership and mode are NOT checked here, and that is a scope decision (R-137, ADR-0036).** A
+        // previous revision refused a registry not owned by this user or writable by others. Those guards are
+        // about *tamper resistance*, which is a different question from the one ADR-0035 raised, and they went in
+        // mid-review without an ADR — where they promptly acquired a false claim ("nobody ELSE may rewrite it":
+        // it inspects the file and never its parent directory, and `rename(2)` needs only directory write) and a
+        // false-positive refusal of `0664`, which `umask 002` produces for every file an operator creates.
+        //
+        // What IS checked above is what ADR-0035 made this reader's problem: it began reading the registry at
+        // SESSION START, so the read must be bounded and must not block. Integrity is R-137, open and measured.
+        // The deadline is checked BETWEEN chunks, which is all `AbortSignal.timeout` ever did on the previous
+        // implementation — review measured 74 of 200 one-MiB reads completing in full with `signal.aborted`
+        // already true, because a signal is never observed *inside* a libuv read request. An explicit check makes
+        // the bound as real as it can be in-process, and its limit is the same one honestly stated below: a
+        // stalled `open` or a single wedged read cannot be interrupted from here.
+        const deadline = Date.now() + REGISTRY_READ_TIMEOUT_MS;
+        const buffer = Buffer.allocUnsafe(REGISTRY_MAX_BYTES + 1);
+        let filled = 0;
+        while (filled < buffer.length) {
+            if (Date.now() > deadline) {
+                throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace registry ${path} did not finish reading within ${REGISTRY_READ_TIMEOUT_MS}ms — ` +
+                    `refusing rather than waiting, because session start awaits this read.`, { registry_path: path }));
+            }
+            const { bytesRead } = await handle.read(buffer, filled, buffer.length - filled, filled);
+            if (bytesRead === 0)
+                break;
+            filled += bytesRead;
+        }
+        if (filled > REGISTRY_MAX_BYTES) {
+            throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace registry ${path} exceeded the ${REGISTRY_MAX_BYTES} limit while being read — it grew ` +
+                `after its size was checked. Refusing rather than allocating it.`, { registry_path: path }));
+        }
+        raw = buffer.subarray(0, filled).toString("utf8");
+    }
+    catch (error) {
+        if (error instanceof GovernanceRefusal)
+            throw error;
+        const timedOut = error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError");
+        throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", timedOut
+            ? `workspace registry ${path} did not return within ${REGISTRY_READ_TIMEOUT_MS}ms — refusing rather ` +
+                `than waiting, because session start awaits this read.`
+            : `workspace registry ${path} could not be read (${String(error)})`, { registry_path: path }));
+    }
+    finally {
+        await handle.close().catch(() => { });
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (error) {
+        throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace registry ${path} is not valid JSON (${String(error)})`, {
+            registry_path: path,
+        }));
+    }
+    const file = parsed;
+    if (file?.version !== 1 ||
+        !file.workspaces ||
+        typeof file.workspaces !== "object" ||
+        Array.isArray(file.workspaces)) {
+        throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace registry ${path} must contain {version:1, workspaces:{id:{path}}}`, { registry_path: path }));
+    }
+    for (const [id, value] of Object.entries(file.workspaces)) {
+        if (!id || !value || typeof value.path !== "string" || !isAbsolute(value.path)) {
+            throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace registry entry ${JSON.stringify(id)} must name an absolute path`, { registry_path: path, workspace_id: id }));
+        }
+        // ADR-0035 made a registry id the tail of a CAPABILITY id (`workspace:<id>`), so this file is an input
+        // to the grant grammar and has to obey it — the STRICT one. This shipped with the loose
+        // `isWellFormedCapability` blocklist, and review measured what that let through: an id of `*` minted
+        // `WORKSPACE_WILDCARD` (an operator naming one worktree held routing over all of them), an id with a
+        // space became two capabilities because `ceilingForDefinition` splits on `[\s,]+`, and quote/`$()` ids
+        // reached a generated file whose own instructions say to paste them into `PI_DADDY_GRANT`. See
+        // `isSafeCapability`, which is now the one grammar for both channels into that file.
+        if (!isSafeWorkspaceId(id)) {
+            throw new GovernanceRefusal(refusal("GRANT_ID_MALFORMED", `workspace registry id ${JSON.stringify(id)} cannot be used: since ADR-0035 an id becomes the ` +
+                `capability ${JSON.stringify(workspaceCapability(id))}, and an id must match ` +
+                `[A-Za-z0-9][A-Za-z0-9._/-]* — slashes and dots are fine (a worktree named after its branch ` +
+                `works), but not spaces, quotes, commas, wildcards, shell metacharacters or non-ASCII, each of ` +
+                `which either splits into several capabilities or reaches a file you are told to source. ` +
+                `Rename it in ${path}.`, { registry_path: path, workspace_id: id }));
+        }
+    }
+    return { version: 1, workspaces: structuredClone(file.workspaces), source: path };
+}
+/**
+ * The registered workspace ids, for `planInit` to scaffold and `/grants` to list. `[]` when there is no registry or it is broken.
+ *
+ * Fails SOFT, and only because nothing here is an authority: this decides which ids appear as COMMENTS in a
+ * generated file. `loadWorkspaceRegistry` throws a GovernanceRefusal naming the file, and that refusal is
+ * the operator's signal at the point of use, where routing genuinely depends on it. Swallowing it there
+ * would be unsafe; swallowing it here costs a suggestion. Same argument as `buildCatalog`'s.
+ *
+ * Lives here rather than in `init.ts` because it reads the filesystem, and `planInit` — the centrepiece of
+ * that module — documents itself as "Pure: no filesystem". It is a registry concern; this is where the
+ * registry lives. Moved when `init.ts` crossed the 400-line ceiling, which this project splits for rather
+ * than raising (`delegate.ts` at 413, `grants.ts` at 398).
+ */
+export async function registeredWorkspaceIds(registryPath = process.env[ENV_WORKSPACE_REGISTRY]) {
+    if (!registryPath)
+        return [];
+    try {
+        return Object.keys((await loadWorkspaceRegistry(registryPath)).workspaces).sort();
+    }
+    catch {
+        return [];
+    }
+}
+export async function resolveWorkspace(registry, workspaceId) {
+    const registered = Object.hasOwn(registry.workspaces, workspaceId) ? registry.workspaces[workspaceId] : undefined;
+    const known = Object.keys(registry.workspaces).sort();
+    if (!registered) {
+        throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace ${JSON.stringify(workspaceId)} is not present in the operator-owned registry` +
+            (registry.source ? ` ${registry.source}` : "") +
+            (known.length > 0 ? ` — it lists: ${known.join(", ")}` : " — it lists nothing"), { workspace_id: workspaceId, ...(registry.source ? { registry_path: registry.source } : {}) }));
+    }
+    return validateRegisteredWorkspace({ workspaceId, registeredRoot: registered.path });
+}
+/**
+ * Canonicalize and validate the initial workspace against Git's registered worktree list.
+ * This prevents accidental misrouting. It does not constrain any path a child accesses after spawn.
+ */
+export async function validateRegisteredWorkspace(input) {
+    let registered;
+    let supplied;
+    try {
+        registered = await realpath(input.registeredRoot);
+        supplied = await realpath(input.suppliedRoot ?? input.registeredRoot);
+        if (!(await stat(registered)).isDirectory())
+            throw new Error("registered root is not a directory");
+    }
+    catch (error) {
+        throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace ${input.workspaceId} root could not be canonicalized (${String(error)})`, { workspace_id: input.workspaceId }));
+    }
+    if (registered !== supplied) {
+        throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace ${input.workspaceId} resolved to ${supplied}, not its registered worktree ${registered}`, { workspace_id: input.workspaceId, supplied_root: supplied, registered_root: registered }));
+    }
+    try {
+        const top = (await execFileAsync("git", ["-C", registered, "rev-parse", "--show-toplevel"], { encoding: "utf8" })).stdout.trim();
+        const canonicalTop = await realpath(top);
+        if (canonicalTop !== registered)
+            throw new Error(`path is inside worktree ${canonicalTop}, not its root`);
+        const commonRaw = (await execFileAsync("git", ["-C", registered, "rev-parse", "--path-format=absolute", "--git-common-dir"], {
+            encoding: "utf8",
+        })).stdout.trim();
+        const gitCommonDir = await realpath(commonRaw);
+        const list = (await execFileAsync("git", ["-C", registered, "worktree", "list", "--porcelain"], { encoding: "utf8" })).stdout;
+        const registeredWorktrees = await Promise.all(list
+            .split("\n")
+            .filter((line) => line.startsWith("worktree "))
+            .map((line) => realpath(line.slice(9))));
+        if (!registeredWorktrees.includes(registered))
+            throw new Error("Git does not list this path as a worktree");
+        return { workspaceId: input.workspaceId, root: registered, gitCommonDir };
+    }
+    catch (error) {
+        throw new GovernanceRefusal(refusal("WORKSPACE_NOT_REGISTERED", `workspace ${input.workspaceId} is not the registered Git worktree it claims to be (${String(error)})`, { workspace_id: input.workspaceId, registered_root: registered }));
+    }
+}
+//# sourceMappingURL=workspace.js.map

package/dist/kernel/workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/kernel/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE5F,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AA2B1C;;;;;;;;;;;;;;GAcG;AACH,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAEvC,0FAA0F;AAC1F,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,yGAAyG;IACzG,gDAAgD;IAChD,EAAE;IACF,0GAA0G;IAC1G,2GAA2G;IAC3G,sFAAsF;IACtF,2GAA2G;IAC3G,2GAA2G;IAC3G,uGAAuG;IACvG,oFAAoF;IACpF,4GAA4G;IAC5G,iEAAiE;IACjE,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,OAAO,CAAC,0BAA0B,EAAE,sBAAsB,IAAI,yBAAyB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YACvG,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,sBAAsB,IAAI,yEAAyE;gBACjG,MAAM,sBAAsB,mEAAmE;gBAC/F,yCAAyC,EAC3C,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;YACnC,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,sBAAsB,IAAI,OAAO,IAAI,CAAC,IAAI,oBAAoB,kBAAkB,oBAAoB;gBAClG,sDAAsD,EACxD,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;QACJ,CAAC;QACD,iGAAiG;QACjG,sGAAsG;QACtG,0GAA0G;QAC1G,wGAAwG;QACxG,yGAAyG;QACzG,mGAAmG;QACnG,EAAE;QACF,sGAAsG;QACtG,wGAAwG;QACxG,sGAAsG;QACtG,oGAAoG;QACpG,0GAA0G;QAC1G,oGAAoG;QACpG,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,wBAAwB,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC;QAC1D,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC1B,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,sBAAsB,IAAI,kCAAkC,wBAAwB,OAAO;oBACzF,uEAAuE,EACzE,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YACxF,IAAI,SAAS,KAAK,CAAC;gBAAE,MAAM;YAC3B,MAAM,IAAI,SAAS,CAAC;QACtB,CAAC;QACD,IAAI,MAAM,GAAG,kBAAkB,EAAE,CAAC;YAChC,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,sBAAsB,IAAI,iBAAiB,kBAAkB,oCAAoC;gBAC/F,iEAAiE,EACnE,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;QACJ,CAAC;QACD,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACpD,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QAC1G,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,QAAQ;YACN,CAAC,CAAC,sBAAsB,IAAI,0BAA0B,wBAAwB,uBAAuB;gBACjG,uDAAuD;YAC3D,CAAC,CAAC,sBAAsB,IAAI,uBAAuB,MAAM,CAAC,KAAK,CAAC,GAAG,EACrE,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,OAAO,CAAC,0BAA0B,EAAE,sBAAsB,IAAI,uBAAuB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YACrG,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAwC,CAAC;IACtD,IACE,IAAI,EAAE,OAAO,KAAK,CAAC;QACnB,CAAC,IAAI,CAAC,UAAU;QAChB,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,sBAAsB,IAAI,mDAAmD,EAC7E,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,4BAA4B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,6BAA6B,EAC3E,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAC1C,CACF,CAAC;QACJ,CAAC;QACD,uGAAuG;QACvG,wFAAwF;QACxF,qGAAqG;QACrG,qGAAqG;QACrG,uGAAuG;QACvG,+FAA+F;QAC/F,qFAAqF;QACrF,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,oBAAoB,EACpB,yBAAyB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,oDAAoD;gBAC7F,cAAc,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,yBAAyB;gBAC9E,6FAA6F;gBAC7F,gGAAgG;gBAChG,0FAA0F;gBAC1F,gBAAgB,IAAI,GAAG,EACzB,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAC1C,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC7F,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA+B,EAC/B,WAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,gDAAgD;YACtF,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,EACjF,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC9F,CACF,CAAC;IACJ,CAAC;IACD,OAAO,2BAA2B,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAIjD;IACC,IAAI,UAAkB,CAAC;IACvB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAClD,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACrG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,KAAK,CAAC,WAAW,qCAAqC,MAAM,CAAC,KAAK,CAAC,GAAG,EACnF,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CACpC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,KAAK,CAAC,WAAW,gBAAgB,QAAQ,iCAAiC,UAAU,EAAE,EACnG,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,CAC1F,CACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CACV,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CACrG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,YAAY,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,YAAY,gBAAgB,CAAC,CAAC;QAC1G,MAAM,SAAS,GAAG,CAChB,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,EAAE;YACxG,QAAQ,EAAE,MAAM;SACjB,CAAC,CACH,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,CACX,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CACxG,CAAC,MAAM,CAAC;QACT,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3C,IAAI;aACD,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;aAC9C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAC1C,CAAC;QACF,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC5G,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,KAAK,CAAC,WAAW,wDAAwD,MAAM,CAAC,KAAK,CAAC,GAAG,EACtG,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CACjE,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/products/activity-timeline.d.ts

@@ -0,0 +1,126 @@
+export declare const ACTIVITY_TIMELINE_VERSION: 1;
+export declare const ENV_ACTIVITY_TIMELINE = "PI_DADDY_ACTIVITY_TIMELINE";
+export declare const ENV_ACTIVITY_CONTENT = "PI_DADDY_ACTIVITY_CONTENT";
+/** Per-child transport; these are observation identities, not capability authority. */
+export declare const ENV_ACTIVITY_PATH = "PI_DADDY_ACTIVITY_PATH";
+export declare const ENV_ACTIVITY_ROOT = "PI_DADDY_ACTIVITY_ROOT";
+export declare const ENV_ACTIVITY_TASK = "PI_DADDY_ACTIVITY_TASK";
+export declare const ENV_ACTIVITY_PARENT_TASK = "PI_DADDY_ACTIVITY_PARENT_TASK";
+export type TimelineFilter = "everything" | "agents" | "skills" | "needs-you";
+export interface ContentReference {
+    digest: string;
+    bytes: number;
+    ref?: string;
+}
+export interface ActivitySkill {
+    name: string;
+    source: string;
+    digest: string;
+}
+export interface ActivityEvent {
+    version: 1;
+    id: string;
+    kind: string;
+    at: string;
+    rootId: string;
+    taskId: string;
+    parentTaskId?: string;
+    agentId?: string;
+    agent?: string;
+    outcome?: string;
+    model?: string;
+    thinking?: string;
+    prompt?: ContentReference;
+    final?: ContentReference;
+    skill?: ActivitySkill;
+}
+export interface TimelineSkill extends ActivitySkill {
+    available: boolean;
+    read: boolean;
+    active: boolean;
+    superseded: boolean;
+}
+export interface TimelineTask {
+    id: string;
+    rootId: string;
+    parentTaskId?: string;
+    agent?: string;
+    startedAt: string;
+    endedAt?: string;
+    status: "active" | "finished" | "failed" | "cancelled" | "needs-you";
+    model?: string;
+    thinking?: string;
+    prompt?: ContentReference;
+    final?: ContentReference;
+    skills: TimelineSkill[];
+    agents: Array<{
+        id: string;
+        parentTaskId?: string;
+        agent: string;
+        state: string;
+    }>;
+}
+export interface ActivityTimeline {
+    tasks: TimelineTask[];
+    refusals: string[];
+}
+export interface ActivityIdentity {
+    rootId: string;
+    path: string;
+    taskId?: string;
+    parentTaskId?: string;
+}
+/** Stable, unambiguous local selector: encoded root identity and task id, separated once by `:`. */
+export declare const activityTaskKey: (rootId: string, taskId: string) => string;
+export declare function parseActivityTimeline(text: string): ActivityTimeline;
+/** Session-local aliases never derive from private prompt text and never renumber after a refresh. */
+export declare class ActivityTimelineAliases {
+    private readonly roots;
+    private readonly tasks;
+    private readonly selectors;
+    selector(task: Pick<TimelineTask, "rootId" | "id">): string;
+    resolve(selector: string): string | undefined;
+}
+export declare function resolveActivityTaskSelector(timeline: ActivityTimeline, selector: string, aliases?: ActivityTimelineAliases): string | undefined;
+interface ActivityRenderOptions {
+    filter?: TimelineFilter;
+    details?: boolean;
+    history?: boolean;
+    color?: boolean;
+    width?: number;
+    aliases?: ActivityTimelineAliases;
+    content?: {
+        taskKey: string;
+        field: "prompt" | "final";
+        text: string;
+    };
+}
+/** Render only local observation. “Completed” and “ended” never mean accepted. */
+export declare function renderActivityTimeline(timeline: ActivityTimeline, options?: ActivityRenderOptions): string;
+export declare const defaultActivityTimelinePath: (cwd: string) => string;
+export declare function activityIdentity(cwd: string, env?: NodeJS.ProcessEnv): ActivityIdentity;
+export declare class ActivityTimelineRecorder {
+    readonly enabled: boolean;
+    readonly contentEnabled: boolean;
+    readonly path: string;
+    readonly rootId: string;
+    private taskId?;
+    constructor(cwd: string, env?: NodeJS.ProcessEnv);
+    get task(): string | undefined;
+    attach(taskId: string): void;
+    start(prompt: string, model?: string, thinking?: string, parentTaskId?: string): Promise<string | undefined>;
+    childStarted(taskId: string, parentTaskId: string | undefined, agent: string, prompt: string, model?: string, thinking?: string): Promise<void>;
+    childFinished(taskId: string, parentTaskId: string | undefined, agent: string, final: string, outcome: "completed" | "failed" | "cancelled"): Promise<void>;
+    finish(final: string | undefined, outcome?: "completed" | "failed" | "cancelled"): Promise<void>;
+    skill(kind: "skill_available" | "skill_read" | "skill_active" | "skill_finished" | "skill_superseded", skill: ActivitySkill): Promise<void>;
+    append(kind: string, fields: Omit<Partial<ActivityEvent>, "version" | "id" | "kind" | "at" | "rootId" | "taskId">): Promise<void>;
+    private content;
+}
+export declare function readActivityContent(timelinePath: string, reference: ContentReference): Promise<string>;
+export declare function detailForTimeline(timelinePath: string, taskKey: string, field: "prompt" | "final"): Promise<{
+    taskKey: string;
+    field: "prompt" | "final";
+    text: string;
+}>;
+export {};
+//# sourceMappingURL=activity-timeline.d.ts.map

package/dist/products/activity-timeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-timeline.d.ts","sourceRoot":"","sources":["../../src/products/activity-timeline.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAC;AACpD,eAAO,MAAM,qBAAqB,+BAA+B,CAAC;AAClE,eAAO,MAAM,oBAAoB,8BAA8B,CAAC;AAChE,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,2BAA2B,CAAC;AAC1D,eAAO,MAAM,iBAAiB,2BAA2B,CAAC;AAC1D,eAAO,MAAM,iBAAiB,2BAA2B,CAAC;AAC1D,eAAO,MAAM,wBAAwB,kCAAkC,CAAC;AAKxE,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AACD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AACD,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;CACrB;AACD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpF;AACD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AACD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,oGAAoG;AACpG,eAAO,MAAM,eAAe,GAAI,QAAQ,MAAM,EAAE,QAAQ,MAAM,WACC,CAAC;AAqDhE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CA0FpE;AAED,sGAAsG;AACtG,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IACnD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,MAAM;IAiB3D,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;CAG9C;AACD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,gBAAgB,EAC1B,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,uBAAuB,GAChC,MAAM,GAAG,SAAS,CAMpB;AA4FD,UAAU,qBAAqB;IAC7B,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAClC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE;AAgBD,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,GAAE,qBAA0B,GAAG,MAAM,CA0I9G;AAED,eAAO,MAAM,2BAA2B,GAAI,KAAK,MAAM,WAA8B,CAAC;AACtF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,gBAAgB,CAcpG;AACD,qBAAa,wBAAwB;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,MAAM,CAAC,CAAS;gBACZ,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB;IAU7D,IAAI,IAAI,IAAI,MAAM,GAAG,SAAS,CAE7B;IACD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAGtB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAM5G,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC;IAaV,aAAa,CACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,GAC5C,OAAO,CAAC,IAAI,CAAC;IAMV,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,GAAE,WAAW,GAAG,QAAQ,GAAG,WAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7G,KAAK,CACT,IAAI,EAAE,iBAAiB,GAAG,YAAY,GAAG,cAAc,GAAG,gBAAgB,GAAG,kBAAkB,EAC/F,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,IAAI,CAAC;IAGV,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,GAAG,QAAQ,GAAG,QAAQ,CAAC,GAC3F,OAAO,CAAC,IAAI,CAAC;YAgBF,OAAO;CAgBtB;AACD,wBAAsB,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkB5G;AACD,wBAAsB,iBAAiB,CACrC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,QAAQ,GAAG,OAAO,GACxB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAQvE"}