pilotswarm 0.5.48 → 0.5.49

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pilotswarm",
-    "version": "0.5.48",
+    "version": "0.5.49",
     "description": "PilotSwarm application package: terminal UI, browser portal + Web API server, and MCP server — one install, three bins.",
     "type": "module",
     "license": "MIT",
@@ -81,7 +81,7 @@
         "ink": "^6.8.0",
         "jose": "^6.2.2",
         "mermaid": "^11.16.0",
-        "pilotswarm-sdk": "0.5.48",
+        "pilotswarm-sdk": "0.5.49",
         "react": "^19.2.4",
         "react-dom": "^19.2.4",
         "ws": "^8.18.2"

package/ui/core/src/controller.js

@@ -3455,6 +3455,12 @@ export class PilotSwarmUiController {
         });
     }
 
+    /** Does the selected provider type authenticate as the worker itself? */
+    _adminProviderTypeUsesWorkloadIdentity(typeId) {
+        const types = selectAdminConsole(this.getState()).modelProviders?.providerTypes || [];
+        return types.find((type) => type.id === typeId)?.usesWorkloadIdentity === true;
+    }
+
     cycleAdminProviderCreateType() {
         const providers = selectAdminConsole(this.getState()).modelProviders;
         const create = this.getState().admin?.modelProviders?.create;
@@ -3512,16 +3518,26 @@ export class PilotSwarmUiController {
     async saveAdminProviderCreate() {
         const create = this.getState().admin?.modelProviders?.create;
         if (!create?.editing || create.saving || create.stage !== "credential") return;
+        // A workload-identity type has no key to type. The stage is still
+        // reached — it is where the person confirms — but the draft is empty
+        // by design, so demanding a credential would make the type
+        // unusable from this screen.
+        const workloadIdentity = this._adminProviderTypeUsesWorkloadIdentity(create.typeId);
         const credential = String(create.draft || "").trim();
-        if (!credential) {
+        if (!credential && !workloadIdentity) {
             this.dispatch({ type: "admin/modelProviders/createFailed", error: "Enter a provider credential." });
             return;
         }
         const input = {
             name: create.name,
             type: create.typeId,
-            credentials: /github/i.test(create.typeId) ? { githubToken: credential } : { apiKey: credential },
-            shared: create.shared === true,
+            credentials: workloadIdentity
+                ? { kind: "workloadIdentity" }
+                : /github/i.test(create.typeId) ? { githubToken: credential } : { apiKey: credential },
+            // It runs on the worker's identity, which belongs to the
+            // organization, so it can only be shared. The server refuses a
+            // personal one; asking for it here would only earn an error.
+            shared: workloadIdentity ? true : create.shared === true,
         };
         // Clear the credential from shared state before any network await.
         this.dispatch({ type: "admin/modelProviders/createSaving" });

package/ui/core/src/selectors.js

@@ -39,6 +39,22 @@ import { isRecoverableTransportErrorText } from "./session-errors.js";
 
 export const ACTIVE_HIGHLIGHT_BACKGROUND = "activeHighlightBackground";
 export const ACTIVE_HIGHLIGHT_FOREGROUND = "activeHighlightForeground";
+
+/**
+ * Provider types that authenticate as the worker rather than with a key.
+ *
+ * The same rule as `providerTypeUsesWorkloadIdentity` in the SDK, restated
+ * because the UI packages do not import from it. Both sides read the `type`
+ * field of the deployment's model-providers file, so they agree on the value
+ * even though they cannot share the function.
+ */
+export function providerTypeUsesWorkloadIdentity(type) {
+    return type === "anthropic-wif";
+}
+
+/** What the add-provider form says where the key field would be. */
+export const WORKLOAD_IDENTITY_CREDENTIAL_NOTE =
+    "Use the Workload Identity configured in the worker";
 const USER_CHAT_COLOR = "userChat";
 const USER_CHAT_LABEL_COLOR = "userChatLabel";
 // Speaker label for a message from another person in a shared session.
@@ -3939,11 +3955,19 @@ export function selectAdminConsole(state) {
         providerTypeMap.set(model.providerId, {
             id: model.providerId,
             label: model.providerType || model.providerId,
+            // Carried on the type so that no screen has to know which type
+            // names mean "no key": the add-provider form asks for a
+            // credential unless this says the worker already holds one.
+            usesWorkloadIdentity: providerTypeUsesWorkloadIdentity(model.providerType),
         });
     }
     const providerSummary = (provider) => ({
         name: provider.name,
         typeId: provider.typeId || provider.type || null,
+        // There is no key on this one to rotate, so the screens that offer
+        // "Update key" leave it off rather than offering an action the server
+        // refuses.
+        usesWorkloadIdentity: providerTypeMap.get(provider.typeId || provider.type)?.usesWorkloadIdentity === true,
         class: provider.class === "shared" ? "shared" : "personal",
         hasCredential: Boolean(provider.hasCredential),
         usableByMe: provider.usableByMe !== false,
@@ -4680,6 +4704,12 @@ export function selectAdminProviderCreateModal(state, maxWidth = 76) {
         ? "Add GitHub Copilot provider"
         : `Add ${create.typeId || "model"} provider`;
     const value = String(create.draft || "");
+    // A workload-identity type has no key to ask for. The stage still exists
+    // — it is where the person confirms what they are adding — but it prompts
+    // instead of demanding, and nothing is typed into it.
+    const typeRow = (admin.modelProviders?.models || [])
+        .find((model) => model?.providerId === create.typeId);
+    const workloadIdentity = providerTypeUsesWorkloadIdentity(typeRow?.providerType);
     return {
         type: "adminProviderCreate",
         title: updating
@@ -4687,10 +4717,12 @@ export function selectAdminProviderCreateModal(state, maxWidth = 76) {
             : credentialStage
             ? (shared ? "Add shared model provider" : ownTitle)
             : (shared ? "Name the shared provider" : ownTitle),
-        label: credentialStage ? "credential" : "provider name",
-        displayValue: credentialStage && value ? "•".repeat(value.length) : value,
+        label: credentialStage ? (workloadIdentity ? "authentication" : "credential") : "provider name",
+        displayValue: credentialStage && value && !workloadIdentity ? "•".repeat(value.length) : value,
         cursorIndex: Math.max(0, Math.min(Number(create.cursorIndex) || 0, value.length)),
-        placeholder: credentialStage ? "Paste token" : "my-ghcp",
+        placeholder: credentialStage
+            ? (workloadIdentity ? WORKLOAD_IDENTITY_CREDENTIAL_NOTE : "Paste token")
+            : "my-ghcp",
         saving: Boolean(create.saving),
         error: create.error || null,
         idealWidth: Math.max(56, Math.min(maxWidth, 76)),
@@ -4698,6 +4730,9 @@ export function selectAdminProviderCreateModal(state, maxWidth = 76) {
             ? [
                 { text: `Provider  ${create.name}`, color: "white", bold: true },
                 { text: `Type      ${create.typeId}`, color: "cyan" },
+                ...(workloadIdentity
+                    ? [{ text: WORKLOAD_IDENTITY_CREDENTIAL_NOTE, color: "gray" }]
+                    : []),
                 { text: shared ? "Shared" : "Only you", color: "gray" },
             ]
             : [
@@ -4706,7 +4741,9 @@ export function selectAdminProviderCreateModal(state, maxWidth = 76) {
                 { text: "Letters, numbers, dot, dash, and underscore only.", color: "gray" },
             ],
         helpLines: credentialStage
-            ? ["Type/paste credential", `Enter  ${updating ? "update key" : "create provider"}`, "Esc  cancel and clear"]
+            ? workloadIdentity
+                ? ["No key needed", "Enter  create provider", "Esc  cancel"]
+                : ["Type/paste credential", `Enter  ${updating ? "update key" : "create provider"}`, "Esc  cancel and clear"]
             : ["Type provider name", "Tab  next provider type", "Enter  continue to credential", "Esc  cancel"],
     };
 }

package/ui/react/src/web-app.js

@@ -10733,14 +10733,26 @@ function CreateProviderSheet({
     // Bounded and named here instead, where the rule can be said precisely.
     const badChars = trimmed !== "" && !/^[A-Za-z0-9._-]+$/.test(trimmed);
     const tooLong = trimmed.length > 64;
+    // A workload-identity type carries no key: the worker authenticates as
+    // itself. So the form asks for nothing to paste, and requiring a
+    // credential would make the type impossible to add from this screen.
+    const workloadIdentity = types.find((option) => option.id === type)?.usesWorkloadIdentity === true;
+    // It runs on the worker's identity, which is the organization's, so it can
+    // only be shared — a personal one would spend the cluster's account under
+    // a name no administrator can cap. The server refuses it too.
+    const sharedOnly = workloadIdentity;
+    const effectiveShared = sharedOnly ? true : shared;
     const valid = Boolean(trimmed) && !taken && !badChars && !tooLong
-        && Boolean(type) && Boolean(credential.trim());
+        && Boolean(type) && (workloadIdentity || Boolean(credential.trim()))
+        && (!sharedOnly || isAdmin);
     const isGithub = /github/i.test(type);
     const submit = () => {
         if (!valid) return;
         const input = {
-            name: trimmed, type, shared,
-            credentials: isGithub ? { githubToken: credential.trim() } : { apiKey: credential.trim() },
+            name: trimmed, type, shared: effectiveShared,
+            credentials: workloadIdentity
+                ? { kind: "workloadIdentity" }
+                : isGithub ? { githubToken: credential.trim() } : { apiKey: credential.trim() },
             baseUrl: baseUrl.trim() || null,
         };
         setCredential("");
@@ -10753,7 +10765,7 @@ function CreateProviderSheet({
 
     return React.createElement(BudgetSheet, {
         title: updating ? `Update key for ${trimmed}` : (isGithub ? "Add GitHub Copilot provider" : "Add model provider"),
-        subtitle: shared ? "Shared" : "Personal",
+        subtitle: effectiveShared ? "Shared" : "Personal",
         confirmLabel: updating ? "Update key" : "Add provider", busy, disabled: !valid, error, onCancel: cancel, onConfirm: submit,
         // The whole point of an update is what does NOT change. Saying so is
         // the difference between "replace the key" and "did I just make a
@@ -10789,33 +10801,45 @@ function CreateProviderSheet({
     }, types.length === 0
         ? React.createElement("option", { value: "" }, "No provider types are listed on this deployment")
         : types.map((option) => React.createElement("option", { key: option.id, value: option.id }, option.id)))),
-    React.createElement(SheetField, {
-        label: updating
-            ? (isGithub ? "New GitHub Copilot token" : "New API key")
-            : (isGithub ? "GitHub Copilot token" : "API key"),
-        hint: updating
-            ? "Replaces the current one. The existing key is never shown."
-            : "Paste the token value.",
-    },
-    React.createElement("input", {
-        className: "ps-budget-input", type: "password", autoComplete: "off",
-        "aria-label": updating
-            ? (isGithub ? "New GitHub Copilot token" : "New API key")
-            : (isGithub ? "GitHub Copilot token" : "API key"),
-        value: credential, placeholder: "Paste token",
-        onChange: (event) => { onDirty?.(); setCredential(event.target.value); },
-        // While updating this is the only editable field, and the Name input
-        // that carries the other Enter handler is disabled — so without this
-        // the sheet cannot be submitted from the keyboard at all.
-        onKeyDown: (event) => { if (event.key === "Enter" && valid) submit(); },
-    })),
+    workloadIdentity
+        ? React.createElement(SheetField, {
+            label: "Authentication",
+            hint: "Nothing is stored. The worker mints a short-lived token for each request.",
+        },
+        React.createElement("div", { className: "ps-budget-input is-static", role: "note" },
+            "Use the Workload Identity configured in the worker"))
+        : React.createElement(SheetField, {
+            label: updating
+                ? (isGithub ? "New GitHub Copilot token" : "New API key")
+                : (isGithub ? "GitHub Copilot token" : "API key"),
+            hint: updating
+                ? "Replaces the current one. The existing key is never shown."
+                : "Paste the token value.",
+        },
+        React.createElement("input", {
+            className: "ps-budget-input", type: "password", autoComplete: "off",
+            "aria-label": updating
+                ? (isGithub ? "New GitHub Copilot token" : "New API key")
+                : (isGithub ? "GitHub Copilot token" : "API key"),
+            value: credential, placeholder: "Paste token",
+            onChange: (event) => { onDirty?.(); setCredential(event.target.value); },
+            // While updating this is the only editable field, and the Name input
+            // that carries the other Enter handler is disabled — so without this
+            // the sheet cannot be submitted from the keyboard at all.
+            onKeyDown: (event) => { if (event.key === "Enter" && valid) submit(); },
+        })),
     !updating ? React.createElement(SheetField, { label: "Base URL", hint: "Optional." },
         React.createElement("input", {
             className: "ps-budget-input", value: baseUrl, placeholder: "https://…",
             "aria-label": "Base URL",
             onChange: (event) => setBaseUrl(event.target.value),
         })) : null,
-    isAdmin && !updating ? React.createElement(SheetField, { label: "Access" },
+    sharedOnly && !updating ? React.createElement(SheetField, {
+        label: "Access",
+        hint: "It runs on the worker's own identity, which belongs to the organization, so it cannot be personal.",
+    },
+    React.createElement("div", { className: "ps-budget-input is-static", role: "note" }, "Shared"))
+    : isAdmin && !updating ? React.createElement(SheetField, { label: "Access" },
         React.createElement(Segmented, {
             value: shared ? "shared" : "mine", onChange: (value) => setShared(value === "shared"),
             label: "Access",
@@ -13385,7 +13409,9 @@ function AdminProviderRows({ providers, isAdmin, personal, busy, onSystemUse, on
             // drops the cluster-default flag, the allowance, any hold, the
             // system-use routing and the usage history, i.e. everything this
             // feature exists to preserve.
-            (personal || isAdmin) ? React.createElement("button", {
+            // A workload-identity provider has no stored key: the worker
+            // authenticates as itself, and the server refuses the update.
+            (personal || isAdmin) && !provider.usesWorkloadIdentity ? React.createElement("button", {
                 type: "button",
                 className: "ps-mini-button",
                 // Several providers means several identical "Update Key"

package/web/dist/assets/{abnfDiagram-VRR7QNED-6rYy4Wj8.js → abnfDiagram-VRR7QNED-CXF6f3n3.js}

@@ -1 +1 @@
-import{g as p,r as u,d as a}from"./chunk-MOJQB5TN-DA7ca6Jr.js";import{p as f}from"./chunk-JWPE2WC7-BBr7v6mo.js";import{_ as n,l as o}from"./mermaid.core-D8KnBjxP.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-Sb8l4Vm6.js";import"./pilotswarm-DMCBXi5A.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};
+import{g as p,r as u,d as a}from"./chunk-MOJQB5TN-B51xJi0l.js";import{p as f}from"./chunk-JWPE2WC7-BNQrzsa3.js";import{_ as n,l as o}from"./mermaid.core-CFdkmvEY.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-DLoMRcB-.js";import"./pilotswarm-CLJw14xm.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};

package/web/dist/assets/{arc-CrRZ1Za7.js → arc-MlDVINID.js}

@@ -1 +1 @@
-import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-D8KnBjxP.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};
+import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-CFdkmvEY.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};