takt 0.45.0 → 0.47.0

package/dist/core/workflow/findings/reconciler.js

@@ -0,0 +1,413 @@
+import { createHash } from 'node:crypto';
+import { assertLedgerIdAllocationInvariant } from './ledger-validation.js';
+import { validateFindingManagerOutput } from './manager-output-validation.js';
+function formatFindingId(nextId) {
+    return `F-${String(nextId).padStart(4, '0')}`;
+}
+function formatConflictId(conflict) {
+    const ids = conflict.findingIds.length > 0 ? conflict.findingIds : conflict.rawFindingIds;
+    const signature = [...ids].sort().join('\0');
+    const hash = createHash('sha256').update(signature).digest('hex').slice(0, 12).toUpperCase();
+    return `C-${hash}`;
+}
+function assertKnownFinding(findingIds, findingId) {
+    if (!findingIds.has(findingId)) {
+        throw new Error(`Unknown finding id "${findingId}"`);
+    }
+}
+function assertKnownConflict(conflictsById, conflictId) {
+    if (!conflictsById.has(conflictId)) {
+        throw new Error(`Unknown conflict id "${conflictId}"`);
+    }
+}
+function assertKnownRawFindings(rawFindingIds, referencedIds) {
+    if (referencedIds.length === 0) {
+        throw new Error('Manager output must reference at least one raw finding id');
+    }
+    assertUniqueIds(referencedIds, 'raw finding id');
+    for (const rawFindingId of referencedIds) {
+        if (!rawFindingIds.has(rawFindingId)) {
+            throw new Error(`Unknown raw finding id "${rawFindingId}"`);
+        }
+    }
+}
+function assertUniqueIds(ids, label) {
+    const seen = new Set();
+    for (const id of ids) {
+        if (seen.has(id)) {
+            throw new Error(`Duplicate ${label} "${id}"`);
+        }
+        seen.add(id);
+    }
+}
+function assertFindingStatus(finding, expectedStatus, action) {
+    if (finding.status !== expectedStatus) {
+        throw new Error(`Cannot ${action} finding "${finding.id}" because it is not ${expectedStatus}`);
+    }
+}
+function markRawFindingIdsUsed(usedRawFindingIds, rawFindingIds) {
+    for (const rawFindingId of rawFindingIds) {
+        if (usedRawFindingIds.has(rawFindingId)) {
+            throw new Error(`Raw finding id "${rawFindingId}" is referenced by multiple manager decisions`);
+        }
+        usedRawFindingIds.add(rawFindingId);
+    }
+}
+function markFindingIdDecision(usedFindingDecisions, findingId, decision) {
+    const previousDecision = usedFindingDecisions.get(findingId);
+    if (previousDecision !== undefined) {
+        throw new Error(`Finding id "${findingId}" appears in multiple manager decisions: ${previousDecision} and ${decision}`);
+    }
+    usedFindingDecisions.set(findingId, decision);
+}
+function assertFindingIdsHaveSingleDecision(managerOutput) {
+    const usedFindingDecisions = new Map();
+    for (const match of managerOutput.matches) {
+        markFindingIdDecision(usedFindingDecisions, match.findingId, 'match');
+    }
+    for (const resolved of managerOutput.resolvedFindings) {
+        markFindingIdDecision(usedFindingDecisions, resolved.findingId, 'resolve');
+    }
+    for (const reopened of managerOutput.reopenedFindings) {
+        markFindingIdDecision(usedFindingDecisions, reopened.findingId, 'reopen');
+    }
+    for (const conflict of managerOutput.conflicts) {
+        assertUniqueIds(conflict.findingIds, 'finding id');
+        for (const findingId of conflict.findingIds) {
+            markFindingIdDecision(usedFindingDecisions, findingId, 'conflict');
+        }
+    }
+}
+function assertNonEmptyIds(ids, label) {
+    if (ids.length === 0) {
+        throw new Error(`Manager output must reference at least one ${label}`);
+    }
+}
+function mergeRawFindingIds(current, next) {
+    return Array.from(new Set([...current, ...next]));
+}
+function mergeReviewers(current, rawFindings) {
+    return Array.from(new Set([...current, ...rawFindings.map((finding) => finding.reviewer)]));
+}
+function mergeRawFindingDetails(current, next) {
+    const byId = new Map();
+    for (const rawFinding of current) {
+        byId.set(rawFinding.rawFindingId, rawFinding);
+    }
+    for (const rawFinding of next) {
+        byId.set(rawFinding.rawFindingId, rawFinding);
+    }
+    return [...byId.values()];
+}
+function assertResolvedEvidenceRawFindings(input) {
+    assertKnownRawFindings(new Set(input.finding.rawFindingIds), input.resolvedRawFindingIds);
+    for (const rawFindingId of input.resolvedRawFindingIds) {
+        const rawFinding = input.previousRawFindingsById.get(rawFindingId);
+        if (rawFinding === undefined) {
+            throw new Error(`Resolved finding "${input.finding.id}" references previous raw finding "${rawFindingId}" that is not in the ledger`);
+        }
+    }
+}
+function getRawFinding(rawFindings, rawFindingIds) {
+    const rawFinding = rawFindings.find((finding) => rawFindingIds.includes(finding.rawFindingId));
+    if (rawFinding === undefined) {
+        throw new Error(`Raw finding ids were validated but not found: ${rawFindingIds.join(', ')}`);
+    }
+    return rawFinding;
+}
+function getRawFindings(rawFindings, rawFindingIds) {
+    return rawFindingIds.map((rawFindingId) => {
+        const rawFinding = rawFindings.find((finding) => finding.rawFindingId === rawFindingId);
+        if (rawFinding === undefined) {
+            throw new Error(`Raw finding id was validated but not found: ${rawFindingId}`);
+        }
+        return rawFinding;
+    });
+}
+function assertSameFamilyTag(rawFindings, action) {
+    const [primary, ...rest] = rawFindings;
+    if (primary === undefined) {
+        throw new Error('At least one raw finding is required to validate familyTag');
+    }
+    for (const rawFinding of rest) {
+        if (rawFinding.familyTag !== primary.familyTag) {
+            throw new Error(`Cannot ${action} raw findings with different familyTag values: "${primary.familyTag}" and "${rawFinding.familyTag}"`);
+        }
+    }
+}
+function getPreviousRawFindingsForFinding(input) {
+    return input.finding.rawFindingIds.map((rawFindingId) => {
+        const rawFinding = input.previousRawFindingsById.get(rawFindingId);
+        if (rawFinding === undefined) {
+            throw new Error(`Finding "${input.finding.id}" references previous raw finding "${rawFindingId}" that is not in the ledger`);
+        }
+        return rawFinding;
+    });
+}
+function assertFindingFamilyTagCompatible(input) {
+    const previousRawFindings = getPreviousRawFindingsForFinding({
+        finding: input.finding,
+        previousRawFindingsById: input.previousRawFindingsById,
+    });
+    assertSameFamilyTag([...previousRawFindings, ...input.currentRawFindings], input.action);
+}
+function rawEvidenceFields(rawFindings) {
+    const primary = rawFindings[0];
+    if (primary === undefined) {
+        throw new Error('At least one raw finding is required to build finding evidence');
+    }
+    return {
+        ...(primary.location !== undefined ? { location: primary.location } : {}),
+        description: primary.description,
+        ...(primary.suggestion !== undefined ? { suggestion: primary.suggestion } : {}),
+        reviewers: Array.from(new Set(rawFindings.map((finding) => finding.reviewer))),
+    };
+}
+function buildNewFinding(input) {
+    const observation = {
+        runId: input.context.runId,
+        stepName: input.firstSeenStepName,
+        timestamp: input.context.timestamp,
+    };
+    return {
+        id: input.id,
+        status: 'open',
+        lifecycle: 'new',
+        severity: input.severity,
+        title: input.title,
+        ...rawEvidenceFields(input.rawFindings),
+        rawFindingIds: input.rawFindingIds,
+        firstSeen: observation,
+        lastSeen: observationFromContext(input.context),
+    };
+}
+function observationFromContext(context) {
+    return {
+        stepName: context.stepName,
+        runId: context.runId,
+        timestamp: context.timestamp,
+    };
+}
+function withoutResolutionFields(finding) {
+    return {
+        id: finding.id,
+        status: finding.status,
+        lifecycle: finding.lifecycle,
+        severity: finding.severity,
+        title: finding.title,
+        rawFindingIds: finding.rawFindingIds,
+        ...(finding.location !== undefined ? { location: finding.location } : {}),
+        ...(finding.description !== undefined ? { description: finding.description } : {}),
+        ...(finding.suggestion !== undefined ? { suggestion: finding.suggestion } : {}),
+        reviewers: finding.reviewers,
+        firstSeen: finding.firstSeen,
+        lastSeen: finding.lastSeen,
+        ...(finding.reopenedEvidence !== undefined ? { reopenedEvidence: finding.reopenedEvidence } : {}),
+    };
+}
+function withoutConflictResolutionFields(conflict) {
+    return {
+        id: conflict.id,
+        status: conflict.status,
+        findingIds: conflict.findingIds,
+        rawFindingIds: conflict.rawFindingIds,
+        description: conflict.description,
+        firstSeen: conflict.firstSeen,
+        lastSeen: conflict.lastSeen,
+    };
+}
+function reconcileLedgerConflicts(input) {
+    const conflictsById = new Map(input.previousLedger.conflicts.map((conflict) => [conflict.id, { ...conflict }]));
+    for (const resolvedConflict of input.managerOutput.resolvedConflicts) {
+        assertKnownConflict(conflictsById, resolvedConflict.conflictId);
+        const conflict = conflictsById.get(resolvedConflict.conflictId);
+        if (conflict.status !== 'active') {
+            throw new Error(`Cannot resolve conflict "${conflict.id}" because it is not active`);
+        }
+        conflictsById.set(conflict.id, {
+            ...conflict,
+            status: 'resolved',
+            resolvedAt: input.context.timestamp,
+            resolvedEvidence: resolvedConflict.evidence,
+        });
+    }
+    for (const conflict of input.managerOutput.conflicts) {
+        if (conflict.findingIds.length === 0) {
+            assertNonEmptyIds(conflict.rawFindingIds, 'raw finding id');
+        }
+        assertUniqueIds(conflict.rawFindingIds, 'raw finding id');
+        for (const findingId of conflict.findingIds) {
+            assertKnownFinding(input.knownFindingIds, findingId);
+        }
+        if (conflict.rawFindingIds.length > 0) {
+            assertKnownRawFindings(input.rawFindingIds, conflict.rawFindingIds);
+            markRawFindingIdsUsed(input.usedRawFindingIds, conflict.rawFindingIds);
+        }
+        const conflictId = formatConflictId(conflict);
+        const existing = conflictsById.get(conflictId);
+        const base = existing !== undefined
+            ? withoutConflictResolutionFields(existing)
+            : {
+                id: conflictId,
+                status: 'active',
+                findingIds: [...conflict.findingIds],
+                rawFindingIds: [],
+                description: conflict.description,
+                firstSeen: observationFromContext(input.context),
+                lastSeen: observationFromContext(input.context),
+            };
+        conflictsById.set(conflictId, {
+            ...base,
+            status: 'active',
+            rawFindingIds: mergeRawFindingIds(base.rawFindingIds, conflict.rawFindingIds),
+            description: conflict.description,
+            lastSeen: observationFromContext(input.context),
+        });
+    }
+    return [...conflictsById.values()];
+}
+export function reconcileFindingLedger(input) {
+    const validation = validateFindingManagerOutput({
+        previousLedger: input.previousLedger,
+        rawFindings: input.rawFindings,
+        managerOutput: input.managerOutput,
+    });
+    if (!validation.ok) {
+        throw new Error(validation.errors.join('\n'));
+    }
+    const rawFindingIds = new Set(input.rawFindings.map((finding) => finding.rawFindingId));
+    assertUniqueIds(input.rawFindings.map((finding) => finding.rawFindingId), 'raw finding id');
+    assertLedgerIdAllocationInvariant(input.previousLedger);
+    const previousById = new Map(input.previousLedger.findings.map((finding) => [finding.id, finding]));
+    const previousRawFindingsById = new Map(input.previousLedger.rawFindings.map((finding) => [
+        finding.rawFindingId,
+        finding,
+    ]));
+    const knownFindingIds = new Set(previousById.keys());
+    assertFindingIdsHaveSingleDecision(input.managerOutput);
+    let nextId = input.previousLedger.nextId;
+    const usedRawFindingIds = new Set();
+    const updatedById = new Map(input.previousLedger.findings.map((finding) => [finding.id, { ...finding }]));
+    for (const match of input.managerOutput.matches) {
+        assertKnownFinding(knownFindingIds, match.findingId);
+        assertKnownRawFindings(rawFindingIds, match.rawFindingIds);
+        markRawFindingIdsUsed(usedRawFindingIds, match.rawFindingIds);
+        const finding = updatedById.get(match.findingId);
+        assertFindingStatus(finding, 'open', 'match');
+        const matchedRawFindings = getRawFindings(input.rawFindings, match.rawFindingIds);
+        assertFindingFamilyTagCompatible({
+            finding,
+            previousRawFindingsById,
+            currentRawFindings: matchedRawFindings,
+            action: 'match',
+        });
+        const evidence = rawEvidenceFields(matchedRawFindings);
+        updatedById.set(match.findingId, {
+            ...finding,
+            status: 'open',
+            lifecycle: finding.lifecycle === 'reopened' ? 'reopened' : 'persists',
+            rawFindingIds: mergeRawFindingIds(finding.rawFindingIds, match.rawFindingIds),
+            location: evidence.location ?? finding.location,
+            description: evidence.description,
+            suggestion: evidence.suggestion ?? finding.suggestion,
+            reviewers: mergeReviewers(finding.reviewers, matchedRawFindings),
+            lastSeen: observationFromContext(input.context),
+        });
+    }
+    for (const resolved of input.managerOutput.resolvedFindings) {
+        assertKnownFinding(knownFindingIds, resolved.findingId);
+        const finding = updatedById.get(resolved.findingId);
+        assertFindingStatus(finding, 'open', 'resolve');
+        assertResolvedEvidenceRawFindings({
+            finding,
+            resolvedRawFindingIds: resolved.rawFindingIds,
+            previousRawFindingsById,
+        });
+        updatedById.set(resolved.findingId, {
+            ...finding,
+            status: 'resolved',
+            lifecycle: 'resolved',
+            resolvedAt: input.context.timestamp,
+            resolvedEvidence: resolved.evidence,
+        });
+    }
+    for (const reopened of input.managerOutput.reopenedFindings) {
+        assertKnownFinding(knownFindingIds, reopened.findingId);
+        assertKnownRawFindings(rawFindingIds, reopened.rawFindingIds);
+        markRawFindingIdsUsed(usedRawFindingIds, reopened.rawFindingIds);
+        const finding = updatedById.get(reopened.findingId);
+        assertFindingStatus(finding, 'resolved', 'reopen');
+        const reopenedRawFindings = getRawFindings(input.rawFindings, reopened.rawFindingIds);
+        assertFindingFamilyTagCompatible({
+            finding,
+            previousRawFindingsById,
+            currentRawFindings: reopenedRawFindings,
+            action: 'reopen',
+        });
+        const evidence = rawEvidenceFields(reopenedRawFindings);
+        const reopenedFinding = withoutResolutionFields(finding);
+        updatedById.set(reopened.findingId, {
+            ...reopenedFinding,
+            status: 'open',
+            lifecycle: 'reopened',
+            rawFindingIds: mergeRawFindingIds(finding.rawFindingIds, reopened.rawFindingIds),
+            location: evidence.location ?? finding.location,
+            description: evidence.description,
+            suggestion: evidence.suggestion ?? finding.suggestion,
+            reviewers: mergeReviewers(finding.reviewers, reopenedRawFindings),
+            lastSeen: observationFromContext(input.context),
+            reopenedEvidence: reopened.evidence,
+        });
+    }
+    const newFindings = input.managerOutput.newFindings.map((newFinding) => {
+        assertKnownRawFindings(rawFindingIds, newFinding.rawFindingIds);
+        markRawFindingIdsUsed(usedRawFindingIds, newFinding.rawFindingIds);
+        const rawFinding = getRawFinding(input.rawFindings, newFinding.rawFindingIds);
+        const newRawFindings = getRawFindings(input.rawFindings, newFinding.rawFindingIds);
+        assertSameFamilyTag(newRawFindings, 'create a new finding from');
+        const id = formatFindingId(nextId);
+        nextId += 1;
+        return buildNewFinding({
+            id,
+            severity: newFinding.severity,
+            title: newFinding.title,
+            rawFindingIds: [...newFinding.rawFindingIds],
+            rawFindings: newRawFindings,
+            firstSeenStepName: rawFinding.stepName,
+            context: input.context,
+        });
+    });
+    const conflicts = reconcileLedgerConflicts({
+        previousLedger: input.previousLedger,
+        managerOutput: input.managerOutput,
+        knownFindingIds,
+        rawFindingIds,
+        usedRawFindingIds,
+        context: input.context,
+    });
+    const unmentionedNewFindings = input.rawFindings
+        .filter((rawFinding) => !usedRawFindingIds.has(rawFinding.rawFindingId))
+        .map((rawFinding) => {
+        const id = formatFindingId(nextId);
+        nextId += 1;
+        return buildNewFinding({
+            id,
+            severity: rawFinding.severity,
+            title: rawFinding.title,
+            rawFindingIds: [rawFinding.rawFindingId],
+            rawFindings: [rawFinding],
+            firstSeenStepName: rawFinding.stepName,
+            context: input.context,
+        });
+    });
+    return {
+        version: 1,
+        workflowName: input.context.workflowName,
+        nextId,
+        updatedAt: input.context.timestamp,
+        findings: [...updatedById.values(), ...newFindings, ...unmentionedNewFindings],
+        rawFindings: mergeRawFindingDetails(input.previousLedger.rawFindings, input.rawFindings),
+        conflicts,
+    };
+}
+//# sourceMappingURL=reconciler.js.map

package/dist/core/workflow/findings/reconciler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciler.js","sourceRoot":"","sources":["../../../../src/core/workflow/findings/reconciler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAUzC,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAS9E,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA6E;IACrG,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC1F,MAAM,SAAS,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7F,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAuB,EAAE,SAAiB;IACpE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,GAAG,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAyD,EAAE,UAAkB;IACxG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,GAAG,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,aAA0B,EAAE,aAAgC;IAC1F,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,eAAe,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACjD,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,2BAA2B,YAAY,GAAG,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAsB,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAsB,EAAE,cAAuC,EAAE,MAAc;IAC1G,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,aAAa,OAAO,CAAC,EAAE,uBAAuB,cAAc,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,iBAA8B,EAAE,aAAgC;IAC7F,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,IAAI,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,mBAAmB,YAAY,+CAA+C,CAAC,CAAC;QAClG,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,oBAAyC,EACzC,SAAiB,EACjB,QAAgB;IAEhB,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,eAAe,SAAS,4CAA4C,gBAAgB,QAAQ,QAAQ,EAAE,CACvG,CAAC;IACJ,CAAC;IACD,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,kCAAkC,CAAC,aAAmC;IAC7E,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvD,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1C,qBAAqB,CAAC,oBAAoB,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,aAAa,CAAC,gBAAgB,EAAE,CAAC;QACtD,qBAAqB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,aAAa,CAAC,gBAAgB,EAAE,CAAC;QACtD,qBAAqB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;QAC/C,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACnD,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5C,qBAAqB,CAAC,oBAAoB,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAsB,EAAE,KAAa;IAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA0B,EAAE,IAAuB;IAC7E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,cAAc,CAAC,OAA0B,EAAE,WAAkC;IACpF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA8B,EAAE,IAA2B;IACzF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC3C,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,iCAAiC,CAAC,KAI1C;IACC,sBAAsB,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC1F,KAAK,MAAM,YAAY,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,qBAAqB,KAAK,CAAC,OAAO,CAAC,EAAE,sCAAsC,YAAY,6BAA6B,CACrH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,WAAkC,EAAE,aAAgC;IACzF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/F,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iDAAiD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,WAAkC,EAAE,aAAgC;IAC1F,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;QACxC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;QACxF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,+CAA+C,YAAY,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAkC,EAAE,MAAc;IAC7E,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC;IACvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,CAAC;QAC9B,IAAI,UAAU,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,UAAU,MAAM,mDAAmD,OAAO,CAAC,SAAS,UAAU,UAAU,CAAC,SAAS,GAAG,CACtH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CAAC,KAGzC;IACC,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;QACtD,MAAM,UAAU,GAAG,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,YAAY,KAAK,CAAC,OAAO,CAAC,EAAE,sCAAsC,YAAY,6BAA6B,CAC5G,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gCAAgC,CAAC,KAKzC;IACC,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;QAC3D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;KACvD,CAAC,CAAC;IACH,mBAAmB,CAAC,CAAC,GAAG,mBAAmB,EAAE,GAAG,KAAK,CAAC,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAkC;IAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAQxB;IACC,MAAM,WAAW,GAAG;QAClB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;QAC1B,QAAQ,EAAE,KAAK,CAAC,iBAAiB;QACjC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;KACnC,CAAC;IACF,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC;QACvC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgC;IAC9D,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAsB;IACrD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClG,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,QAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAOjC;IACC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhH,KAAK,MAAM,gBAAgB,IAAI,KAAK,CAAC,aAAa,CAAC,iBAAiB,EAAE,CAAC;QACrE,mBAAmB,CAAC,aAAa,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAE,CAAC;QACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,EAAE,4BAA4B,CAAC,CAAC;QACvF,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC7B,GAAG,QAAQ;YACX,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YACnC,gBAAgB,EAAE,gBAAgB,CAAC,QAAQ;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QACrD,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,iBAAiB,CAAC,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QAC9D,CAAC;QACD,eAAe,CAAC,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QAC1D,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5C,kBAAkB,CAAC,KAAK,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,sBAAsB,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;YACpE,qBAAqB,CAAC,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS;YACjC,CAAC,CAAC,+BAA+B,CAAC,QAAQ,CAAC;YAC3C,CAAC,CAAC;gBACA,EAAE,EAAE,UAAU;gBACd,MAAM,EAAE,QAAiB;gBACzB,UAAU,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC;gBACpC,aAAa,EAAE,EAAE;gBACjB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,SAAS,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;gBAChD,QAAQ,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;aAChD,CAAC;QAEJ,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE;YAC5B,GAAG,IAAI;YACP,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC;YAC7E,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,UAAU,GAAG,4BAA4B,CAAC;QAC9C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACxF,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC5F,iCAAiC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACpG,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACxF,OAAO,CAAC,YAAY;QACpB,OAAO;KACR,CAAC,CAAC,CAAC;IACJ,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,kCAAkC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC;IACzC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAC7E,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAChD,kBAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACrD,sBAAsB,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3D,qBAAqB,CAAC,iBAAiB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC;QAClD,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,kBAAkB,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAClF,gCAAgC,CAAC;YAC/B,OAAO;YACP,uBAAuB;YACvB,kBAAkB,EAAE,kBAAkB;YACtC,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QACvD,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE;YAC/B,GAAG,OAAO;YACV,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;YACrE,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC;YAC7E,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;YAC/C,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;YACrD,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC;YAChE,QAAQ,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC;QAC5D,kBAAkB,CAAC,eAAe,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAE,CAAC;QACrD,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAChD,iCAAiC,CAAC;YAChC,OAAO;YACP,qBAAqB,EAAE,QAAQ,CAAC,aAAa;YAC7C,uBAAuB;SACxB,CAAC,CAAC;QACH,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE;YAClC,GAAG,OAAO;YACV,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,UAAU;YACrB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YACnC,gBAAgB,EAAE,QAAQ,CAAC,QAAQ;SACpC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC;QAC5D,kBAAkB,CAAC,eAAe,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxD,sBAAsB,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC9D,qBAAqB,CAAC,iBAAiB,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAE,CAAC;QACrD,mBAAmB,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,mBAAmB,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QACtF,gCAAgC,CAAC;YAC/B,OAAO;YACP,uBAAuB;YACvB,kBAAkB,EAAE,mBAAmB;YACvC,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;QACxD,MAAM,eAAe,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACzD,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE;YAClC,GAAG,eAAe;YAClB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,UAAU;YACrB,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC;YAChF,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;YAC/C,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;YACrD,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC;YACjE,QAAQ,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;YAC/C,gBAAgB,EAAE,QAAQ,CAAC,QAAQ;SACpC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAoB,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACtF,sBAAsB,CAAC,aAAa,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAChE,qBAAqB,CAAC,iBAAiB,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAC9E,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QACnF,mBAAmB,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;QACjE,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,CAAC;QACZ,OAAO,eAAe,CAAC;YACrB,EAAE;YACF,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,aAAa,EAAE,CAAC,GAAG,UAAU,CAAC,aAAa,CAAC;YAC5C,WAAW,EAAE,cAAc;YAC3B,iBAAiB,EAAE,UAAU,CAAC,QAAQ;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,wBAAwB,CAAC;QACzC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,eAAe;QACf,aAAa;QACb,iBAAiB;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,MAAM,sBAAsB,GAAG,KAAK,CAAC,WAAW;SAC7C,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;SACvE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAClB,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,CAAC;QACZ,OAAO,eAAe,CAAC;YACrB,EAAE;YACF,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,aAAa,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YACxC,WAAW,EAAE,CAAC,UAAU,CAAC;YACzB,iBAAiB,EAAE,UAAU,CAAC,QAAQ;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;QACL,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;QACxC,MAAM;QACN,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,QAAQ,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,WAAW,EAAE,GAAG,sBAAsB,CAAC;QAC9E,WAAW,EAAE,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC;QACxF,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/core/workflow/findings/schemas.d.ts

@@ -0,0 +1,2 @@
+export { FindingContractConfigRawSchema, FindingContractManagerConfigRawSchema, FindingLifecycleSchema, FindingLedgerEntrySchema, FindingLedgerSchema, FindingManagerOutputJsonSchema, FindingManagerOutputSchema, FindingObservationSchema, FindingSeveritySchema, FindingStatusSchema, RawFindingsOutputJsonSchema, RawFindingSchema, ReviewerRawFindingSchema, parseFindingLedger, parseFindingManagerOutput, parseRawFindings, parseReviewerRawFindings, } from '../../models/finding-schemas.js';
+//# sourceMappingURL=schemas.d.ts.map

package/dist/core/workflow/findings/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/findings/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,qCAAqC,EACrC,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,EACnB,2BAA2B,EAC3B,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC"}

package/dist/core/workflow/findings/schemas.js

@@ -0,0 +1,2 @@
+export { FindingContractConfigRawSchema, FindingContractManagerConfigRawSchema, FindingLifecycleSchema, FindingLedgerEntrySchema, FindingLedgerSchema, FindingManagerOutputJsonSchema, FindingManagerOutputSchema, FindingObservationSchema, FindingSeveritySchema, FindingStatusSchema, RawFindingsOutputJsonSchema, RawFindingSchema, ReviewerRawFindingSchema, parseFindingLedger, parseFindingManagerOutput, parseRawFindings, parseReviewerRawFindings, } from '../../models/finding-schemas.js';
+//# sourceMappingURL=schemas.js.map

package/dist/core/workflow/findings/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../../src/core/workflow/findings/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,qCAAqC,EACrC,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,EACnB,2BAA2B,EAC3B,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC"}

package/dist/core/workflow/findings/store.d.ts

@@ -0,0 +1,33 @@
+import type { FindingLedger, RawFinding } from './types.js';
+interface FindingLedgerStoreOptions {
+    projectCwd: string;
+    reportDir: string;
+    workflowName: string;
+    ledgerPath: string;
+    rawFindingsPath: string;
+}
+export interface FindingLedgerStore {
+    loadLedger: () => FindingLedger;
+    saveLedger: (ledger: FindingLedger) => void;
+    createRunCopy: () => string;
+    saveRawFindings: (runId: string, stepName: string, rawFindings: RawFinding[]) => string;
+    saveManagerValidationReport: (report: FindingManagerValidationReport) => string;
+}
+export interface FindingManagerValidationAttemptReport {
+    attempt: number;
+    managerOutput: unknown;
+    validationErrors: string[];
+}
+export interface FindingManagerValidationReport {
+    version: 1;
+    runId: string;
+    stepName: string;
+    retryCount: number;
+    ledgerUpdated: boolean;
+    finalErrors: string[];
+    attempts: FindingManagerValidationAttemptReport[];
+}
+export declare function createFindingLedgerStore(options: FindingLedgerStoreOptions): FindingLedgerStore;
+export declare function resolveFindingLedgerRoot(projectCwd: string): string;
+export {};
+//# sourceMappingURL=store.d.ts.map

package/dist/core/workflow/findings/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/findings/store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAK5D,UAAU,yBAAyB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAMD,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,aAAa,CAAC;IAChC,UAAU,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;IAC5C,aAAa,EAAE,MAAM,MAAM,CAAC;IAC5B,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,MAAM,CAAC;IACxF,2BAA2B,EAAE,CAAC,MAAM,EAAE,8BAA8B,KAAK,MAAM,CAAC;CACjF;AAED,MAAM,WAAW,qCAAqC;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,qCAAqC,EAAE,CAAC;CACnD;AA4HD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CAiD/F;AAED,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEnE"}

package/dist/core/workflow/findings/store.js

@@ -0,0 +1,169 @@
+import { chmodSync, lstatSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from 'node:fs';
+import { dirname, resolve, sep } from 'node:path';
+import { parseFindingLedger, parseRawFindings } from './schemas.js';
+import { assertLedgerIdAllocationInvariant } from './ledger-validation.js';
+import { writeReportFile } from '../report-writer.js';
+const PRIVATE_DIR_MODE = 0o700;
+const PRIVATE_FILE_MODE = 0o600;
+const READ_ONLY_PRIVATE_FILE_MODE = 0o400;
+function resolveInside(baseDir, path) {
+    const resolvedBase = resolve(baseDir);
+    const resolvedPath = resolve(resolvedBase, path);
+    assertPathInside(resolvedBase, resolvedPath, path);
+    return resolvedPath;
+}
+function assertPathInside(resolvedBase, resolvedPath, path) {
+    const basePrefix = resolvedBase.endsWith(sep) ? resolvedBase : resolvedBase + sep;
+    if (resolvedPath !== resolvedBase && !resolvedPath.startsWith(basePrefix)) {
+        throw new Error(`Finding ledger path escapes base directory: ${path}`);
+    }
+}
+function pathExists(path) {
+    try {
+        lstatSync(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return false;
+        }
+        throw error;
+    }
+}
+function assertNotSymlink(path) {
+    if (pathExists(path) && lstatSync(path).isSymbolicLink()) {
+        throw new Error(`Finding ledger path must not be a symbolic link: ${path}`);
+    }
+}
+function findExistingAncestor(path) {
+    let current = path;
+    while (!pathExists(current)) {
+        const parent = dirname(current);
+        if (parent === current) {
+            throw new Error(`Finding ledger parent directory does not exist: ${path}`);
+        }
+        current = parent;
+    }
+    return current;
+}
+function assertRealPathInside(baseDir, path) {
+    const resolvedBase = realpathSync(baseDir);
+    const resolvedPath = realpathSync(path);
+    assertPathInside(resolvedBase, resolvedPath, path);
+}
+function prepareWritableFilePath(baseDir, filePath) {
+    const parentDir = dirname(filePath);
+    assertRealPathInside(baseDir, findExistingAncestor(parentDir));
+    mkdirSync(parentDir, { recursive: true, mode: PRIVATE_DIR_MODE });
+    chmodSync(parentDir, PRIVATE_DIR_MODE);
+    assertRealPathInside(baseDir, parentDir);
+    assertNotSymlink(filePath);
+    if (pathExists(filePath)) {
+        chmodSync(filePath, PRIVATE_FILE_MODE);
+    }
+}
+function prepareWritableCopyPath(baseDir, filePath) {
+    prepareWritableFilePath(baseDir, filePath);
+}
+function prepareWritableDirectory(baseDir, dirPath) {
+    assertRealPathInside(baseDir, findExistingAncestor(dirPath));
+    mkdirSync(dirPath, { recursive: true, mode: PRIVATE_DIR_MODE });
+    chmodSync(dirPath, PRIVATE_DIR_MODE);
+    assertRealPathInside(baseDir, dirPath);
+}
+function createEmptyLedger(workflowName) {
+    return {
+        version: 1,
+        workflowName,
+        nextId: 1,
+        findings: [],
+        rawFindings: [],
+        conflicts: [],
+        updatedAt: new Date().toISOString(),
+    };
+}
+function readLedgerFile(path) {
+    const ledger = parseFindingLedger(JSON.parse(readFileSync(path, 'utf-8')));
+    assertLedgerIdAllocationInvariant(ledger);
+    return ledger;
+}
+function readProjectLedgerFile(baseDir, path) {
+    assertNotSymlink(path);
+    assertRealPathInside(baseDir, path);
+    return readLedgerFile(path);
+}
+function readProjectLedgerOrEmpty(baseDir, path, workflowName) {
+    assertRealPathInside(baseDir, findExistingAncestor(dirname(path)));
+    assertNotSymlink(path);
+    if (!pathExists(path)) {
+        return createEmptyLedger(workflowName);
+    }
+    const ledger = readProjectLedgerFile(baseDir, path);
+    assertLedgerWorkflowName(ledger, workflowName, path);
+    return ledger;
+}
+function assertLedgerWorkflowName(ledger, workflowName, source) {
+    if (ledger.workflowName !== workflowName) {
+        throw new Error(`Finding ledger workflowName mismatch in ${source}: expected "${workflowName}", got "${ledger.workflowName}"`);
+    }
+}
+function sanitizeFileSegment(value) {
+    const sanitized = value.replace(/[^A-Za-z0-9._-]+/g, '-').replace(/^-+|-+$/g, '');
+    if (sanitized.length === 0) {
+        throw new Error(`Invalid finding file segment: ${value}`);
+    }
+    return sanitized;
+}
+export function createFindingLedgerStore(options) {
+    const ledgerRoot = resolveFindingLedgerRoot(options.projectCwd);
+    assertNotSymlink(ledgerRoot);
+    const ledgerPath = resolveInside(ledgerRoot, options.ledgerPath);
+    const copyPath = resolveInside(options.reportDir, 'findings-ledger.json');
+    const rawFindingsDir = resolveInside(ledgerRoot, options.rawFindingsPath);
+    return {
+        loadLedger: () => {
+            return readProjectLedgerOrEmpty(ledgerRoot, ledgerPath, options.workflowName);
+        },
+        saveLedger: (ledger) => {
+            assertLedgerWorkflowName(ledger, options.workflowName, ledgerPath);
+            assertLedgerIdAllocationInvariant(ledger);
+            prepareWritableFilePath(ledgerRoot, ledgerPath);
+            writeFileSync(ledgerPath, JSON.stringify(ledger, null, 2), { encoding: 'utf-8', mode: PRIVATE_FILE_MODE });
+            chmodSync(ledgerPath, PRIVATE_FILE_MODE);
+        },
+        createRunCopy: () => {
+            const ledger = readProjectLedgerOrEmpty(ledgerRoot, ledgerPath, options.workflowName);
+            prepareWritableCopyPath(options.reportDir, copyPath);
+            writeFileSync(copyPath, JSON.stringify(ledger, null, 2), { encoding: 'utf-8', mode: PRIVATE_FILE_MODE });
+            chmodSync(copyPath, READ_ONLY_PRIVATE_FILE_MODE);
+            return copyPath;
+        },
+        saveRawFindings: (runId, stepName, rawFindings) => {
+            const parsedRawFindings = parseRawFindings(rawFindings);
+            prepareWritableDirectory(ledgerRoot, rawFindingsDir);
+            const baseName = `${sanitizeFileSegment(runId)}.${sanitizeFileSegment(stepName)}`;
+            let rawFindingsFile = `${baseName}.json`;
+            let generation = 2;
+            while (pathExists(resolveInside(rawFindingsDir, rawFindingsFile))) {
+                rawFindingsFile = `${baseName}.${generation}.json`;
+                generation += 1;
+            }
+            const rawFindingsFilePath = resolveInside(rawFindingsDir, rawFindingsFile);
+            assertNotSymlink(rawFindingsFilePath);
+            writeFileSync(rawFindingsFilePath, JSON.stringify(parsedRawFindings, null, 2), {
+                encoding: 'utf-8',
+                mode: PRIVATE_FILE_MODE,
+            });
+            chmodSync(rawFindingsFilePath, PRIVATE_FILE_MODE);
+            return rawFindingsFilePath;
+        },
+        saveManagerValidationReport: (report) => {
+            const fileName = `findings-manager-validation.${sanitizeFileSegment(report.stepName)}.json`;
+            return writeReportFile(options.reportDir, fileName, JSON.stringify(report, null, 2));
+        },
+    };
+}
+export function resolveFindingLedgerRoot(projectCwd) {
+    return resolve(projectCwd);
+}
+//# sourceMappingURL=store.js.map