wicked-crew 0.16.11 → 0.16.13

package/README.md

@@ -11,13 +11,26 @@ Local-first: loopback only, no accounts, no billing, no model reselling. Crew dr
 
 ## Install
 
-Requires Node.js ≥ 22 and at least one coding-agent CLI on your machine (e.g. Claude Code, Codex).
+Before you start, you need:
+
+- **Node.js ≥ 22.**
+- **A container runtime** (Rancher Desktop, Docker, Podman, Colima or OrbStack), running. Governed
+  agents work in a hardened seat container, and you sign each one in from studio's Agents tab in a
+  login container. `WICKED_SEAT_FLOOR=host` keeps the labelled interim host floor instead.
+- **At least one coding-agent CLI** you can sign in (Claude Code, Codex, GitHub Copilot, OpenCode or Pi).
+- **wicked-garden ≥ 12.40.0**, the skills every governed worker follows. crew does not vendor it, and
+  without it every launch is refused: `npx wicked-installer install wicked-garden`, then restart
+  `wicked-crew serve`.
+- Optional: **wicked-estate** (`wicked-estate-mcp` on PATH) for code graphs and memory. It installs
+  with cargo today, so it needs a Rust toolchain.
 
 ```bash
 npm install -g wicked-crew
 wicked-crew serve
 ```
 
+Studio's Nerve Center names whichever of these is missing on a fresh install.
+
 Or without installing:
 
 ```bash
@@ -40,8 +53,9 @@ engine cannot store dead-letter to
 `WICKED_APPS_EMIT_DEADLETTER` is honoured), are counted on
 `GET /api/v1/diagnostics` → `governance` (a `governance.deadletter` finding), and are drained back
 with `wicked-crew governance replay <outbox>`. The interactive document bridge is spawned on demand
-as `npx wicked-interactive@^0.12.0` (0.12.0: export asset reads confined to the document's own and
-approved roots); `WICKED_INTERACTIVE_SPEC` overrides the range (semver range
+as `npx wicked-interactive@^0.15.0` (0.15.0 lands a chat-made draft only on the head it started from; 0.14.1
+carries the demo import crew's demo runs use; 0.12.0
+confined export asset reads to the document's own and approved roots); `WICKED_INTERACTIVE_SPEC` overrides the range (semver range
 only, validated; invalid values are named on the boot line and ignored, a floor below crew's need
 is warned about).
 
@@ -60,16 +74,20 @@ curl -X POST http://127.0.0.1:7701/api/v1/runs \
 # 3. Watch it move through the workflow's phases; approve or reject at the gates.
 ```
 
-One run token moves through the workflow's phases with a gate between every one — e.g. for
-`feature`: clarify → design → build → adversarial-review → test → review. Each phase is executed
+A launch of a preset workflow or a plan on a repository runs in **power mode** by default: a
+workflow's `build` step is one orchestrator seat building the whole change in checkpointed turns, rigor is re-scored from the
+actual diff, and the hand-off runs the review, security and QE steps that rigor calls for. Phased (`power: false`, or a launch power mode
+cannot run, such as one with no repository), one run token moves through the workflow's phases with a gate between every one — e.g.
+for `feature`: clarify → design → build → adversarial-review → test → review. Each phase is executed
 by a versioned skill on an assigned CLI worker; the gates decide, and every decision is audited.
 
 ## The governed-run model
 
 - **You own the workflow; the agent owns the work.** The orchestrator sequences phases and holds
   the gates; the agent does the coding inside a phase.
-- **Workflows are data.** `feature` / `bug` / `migration` ship built-in; new ones are drop-in JSON
-  files, not code.
+- **Workflows are data.** `feature`, `bug` and `migration` ship built-in, beside `domain-extraction`
+  (requirements), `mcp-server`, `editor-plugin`, `analyze` and others; new ones are drop-in JSON files,
+  not code.
 - **Gates are real, and they say what they checked.** A gated transition resolves
   **deny-dominates** on the layers that ran — a deterministic floor, repo checks, policies, an
   evaluator seat that reads cold evidence only — and a model may fail a gate, never solely approve
@@ -96,7 +114,7 @@ is a real answer about the gate, not an error); `?qeRun=<id>` pins the read to o
 ## CLI
 
 ```
-wicked-crew serve|start|resume|gate|status|mcp
+wicked-crew serve|start|resume|gate|status|mcp|governance|version
 ```
 
 | command | what it does |
@@ -107,6 +125,8 @@ wicked-crew serve|start|resume|gate|status|mcp
 | `gate` | answer a pending human gate from the terminal |
 | `status` | inspect run state |
 | `mcp` | stdio MCP server — crew-as-a-tool for coding agents |
+| `governance` | `governance replay <outbox>` drains governance events the engine could not store |
+| `version` | the versions of this install (wicked-crew, wicked-core-ts, the bundled studio) |
 
 ## Links
 

package/dist/api/artifact-outline.d.ts

@@ -0,0 +1,64 @@
+/**
+ * What a chat seat is told about the artifact the person has open (DES-CHAT-ARTIFACTS-001 §5.1): its title, an outline
+ * by slide or section (so "what does slide 4 say?" has a numbered answer even before the seat opens the copy), and the
+ * text of each part the person selected, by `data-wid`.
+ *
+ * A small tolerant tokenizer, not a browser: the documents are interactive's own HTML (`<section class="wi-slide"
+ * data-slide-id=… data-wid=…>`, speaker notes in `<aside class="notes">`), and the result is only ever DATA handed to
+ * a seat, so a malformed document yields a rougher outline, never a crash. Scripts, styles, templates and comments are
+ * dropped before anything is read; nothing is evaluated.
+ */
+export interface HtmlNode {
+    tag: string;
+    attrs: Record<string, string>;
+    children: Array<HtmlNode | string>;
+    parent: HtmlNode | null;
+}
+export declare function decodeEntities(s: string): string;
+/**
+ * `html` without comments and raw-text bodies (scripts, styles, templates, noscript, svg), in one forward pass over the
+ * document as written (a lower-cased copy can differ in length: `İ` lower-cases to two units). An opening's own `>` is
+ * found with its quoted attributes; only an `<svg … />` closes itself (a `<script />` does not, as in HTML); an `svg`
+ * or `template` nests, so its close is the one that matches it; a raw block ends only at its own close tag, never a
+ * longer name (`</scriptlet>`). An opening that is never closed drops the rest of the document.
+ */
+export declare function stripRaw(html: string): string;
+/** Parse `html` into a loose tree. Unmatched closing tags are ignored; a close pops to its nearest open ancestor. */
+export declare function parseHtml(html: string): HtmlNode;
+/** The node's text, words separated at block boundaries, whitespace collapsed. `skip` drops matching subtrees. */
+export declare function textOf(node: HtmlNode, skip?: (n: HtmlNode) => boolean): string;
+export declare function findAll(node: HtmlNode, pred: (n: HtmlNode) => boolean, opts?: {
+    descendIntoMatches?: boolean;
+}): HtmlNode[];
+export interface OutlineItem {
+    /** 1-based place in the document. */
+    n: number;
+    /** "slide" for a deck's slides, "section" otherwise, "heading" for a document with neither. */
+    unit: 'slide' | 'section' | 'heading';
+    wid: string | null;
+    slideId: string | null;
+    text: string;
+    notes: string | null;
+}
+export interface ArtifactOutline {
+    title: string | null;
+    items: OutlineItem[];
+    /** Items past the cap were left out. */
+    more: number;
+}
+/** The outline: a deck's slides, else top-level `data-wid` sections, else its h1–h3 headings. */
+export declare function outlineOf(html: string, opts?: {
+    maxItems?: number;
+    itemChars?: number;
+}): ArtifactOutline;
+export interface AnchorText {
+    wid: string;
+    found: boolean;
+    /** The slide (1-based) the part sits on, for a deck. */
+    slide: number | null;
+    tag: string | null;
+    text: string;
+}
+/** The text of each selected part, by `data-wid`, with the slide it sits on. */
+export declare function anchorTexts(html: string, wids: readonly string[], itemChars?: number): AnchorText[];
+//# sourceMappingURL=artifact-outline.d.ts.map

package/dist/api/artifact-outline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-outline.d.ts","sourceRoot":"","sources":["../../src/api/artifact-outline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC;IACnC,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC;CACzB;AASD,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAQhD;AAgBD;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAsD7C;AAED,qHAAqH;AACrH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAqChD;AAED,kHAAkH;AAClH,wBAAgB,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,OAAO,GAAG,MAAM,CAe9E;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,OAAO,EAAE,IAAI,GAAE;IAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,QAAQ,EAAE,CAc/H;AAmBD,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,CAAC,EAAE,MAAM,CAAC;IACV,+FAA+F;IAC/F,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IACtC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,iGAAiG;AACjG,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,eAAe,CA+B7G;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;IACf,wDAAwD;IACxD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,SAAM,GAAG,UAAU,EAAE,CAgBhG"}

package/dist/api/artifact-outline.js

@@ -0,0 +1,254 @@
+/**
+ * What a chat seat is told about the artifact the person has open (DES-CHAT-ARTIFACTS-001 §5.1): its title, an outline
+ * by slide or section (so "what does slide 4 say?" has a numbered answer even before the seat opens the copy), and the
+ * text of each part the person selected, by `data-wid`.
+ *
+ * A small tolerant tokenizer, not a browser: the documents are interactive's own HTML (`<section class="wi-slide"
+ * data-slide-id=… data-wid=…>`, speaker notes in `<aside class="notes">`), and the result is only ever DATA handed to
+ * a seat, so a malformed document yields a rougher outline, never a crash. Scripts, styles, templates and comments are
+ * dropped before anything is read; nothing is evaluated.
+ */
+/** The deepest a parsed tree nests. */
+const MAX_DEPTH = 256;
+const VOID = new Set(['area', 'base', 'br', 'col', 'embed', 'hr', 'img', 'input', 'link', 'meta', 'param', 'source', 'track', 'wbr']);
+/** Elements that separate words when their text is joined. */
+const BLOCK = /^(address|article|aside|blockquote|br|dd|div|dl|dt|figcaption|figure|footer|h[1-6]|header|hr|li|main|nav|ol|p|pre|section|table|tbody|td|tfoot|th|thead|tr|ul)$/;
+const ENTITIES = {
+    amp: '&', lt: '<', gt: '>', quot: '"', apos: "'", nbsp: ' ', rarr: '→', larr: '←', harr: '↔', uarr: '↑', darr: '↓',
+    mdash: '—', ndash: '–', hellip: '…', lsquo: '‘', rsquo: '’', ldquo: '“', rdquo: '”', middot: '·', bull: '•',
+    times: '×', divide: '÷', plusmn: '±', le: '≤', ge: '≥', ne: '≠', deg: '°', copy: '©', reg: '®', trade: '™',
+    laquo: '«', raquo: '»', euro: '€', pound: '£', check: '✓', cross: '✗',
+};
+export function decodeEntities(s) {
+    return s.replace(/&(#x[0-9a-f]{1,6}|#[0-9]{1,7}|[a-z]{2,8});/gi, (m, name) => {
+        if (name[0] === '#') {
+            const code = name[1] === 'x' || name[1] === 'X' ? Number.parseInt(name.slice(2), 16) : Number.parseInt(name.slice(1), 10);
+            return Number.isFinite(code) && code > 0 && code <= 0x10ffff ? String.fromCodePoint(code) : m;
+        }
+        return ENTITIES[name.toLowerCase()] ?? m;
+    });
+}
+function parseAttrs(raw) {
+    // No prototype: an attribute named `constructor` or `toString` is an attribute like any other.
+    const attrs = Object.create(null);
+    for (const m of raw.matchAll(/([^\s"'>/=]+)(?:\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'=<>`]+)))?/g)) {
+        const name = m[1].toLowerCase();
+        if (!Object.hasOwn(attrs, name))
+            attrs[name] = decodeEntities(m[2] ?? m[3] ?? m[4] ?? '');
+    }
+    return attrs;
+}
+/** A tag's attribute run: unquoted characters up to the next `<` or `>`, or quoted values (which may hold `<`, `>` or
+ *  `/>`) of bounded length, so a scan from one opening never runs past a few KiB without a decision. */
+const ATTRS = `(?:[^<>"']|"[^"]{0,4096}"|'[^']{0,4096}')*`;
+/**
+ * `html` without comments and raw-text bodies (scripts, styles, templates, noscript, svg), in one forward pass over the
+ * document as written (a lower-cased copy can differ in length: `İ` lower-cases to two units). An opening's own `>` is
+ * found with its quoted attributes; only an `<svg … />` closes itself (a `<script />` does not, as in HTML); an `svg`
+ * or `template` nests, so its close is the one that matches it; a raw block ends only at its own close tag, never a
+ * longer name (`</scriptlet>`). An opening that is never closed drops the rest of the document.
+ */
+export function stripRaw(html) {
+    const out = [];
+    // Ordinary tags are matched too (and copied as they are), so `<template>` or `<!--` inside a quoted attribute value of
+    // an ordinary element is stepped over with that element, never taken for an opening.
+    const open = new RegExp(`<!--|<(script|style|template|noscript|svg)(?=[\\s>/])(${ATTRS})>|</?[a-zA-Z][\\w:-]*(?![\\w:-])${ATTRS}>`, 'gi');
+    let from = 0;
+    for (;;) {
+        open.lastIndex = from;
+        const m = open.exec(html);
+        if (m === null)
+            break;
+        if (m[1] === undefined && !m[0].startsWith('<!--')) {
+            // An ordinary tag: kept, attributes and all.
+            out.push(html.slice(from, m.index + m[0].length));
+            from = m.index + m[0].length;
+            continue;
+        }
+        out.push(html.slice(from, m.index));
+        if (m[1] === undefined) {
+            const end = html.indexOf('-->', m.index + 4);
+            if (end === -1)
+                return out.join('');
+            from = end + 3;
+            continue;
+        }
+        const tag = m[1].toLowerCase();
+        const nests = tag === 'svg' || tag === 'template';
+        if (tag === 'svg' && /\/\s*$/.test(m[2] ?? '')) {
+            from = m.index + m[0].length;
+            continue;
+        }
+        // A comment inside an svg or a template is stepped over whole: a tag in it changes no depth. A script's or a
+        // style's body is raw text, where `<!--` is just characters: only its own close tag ends it.
+        const edge = new RegExp(`${nests ? '<!--|' : ''}<(/?)${tag}(?=[\\s>/])(${ATTRS})>`, 'gi');
+        edge.lastIndex = m.index + m[0].length;
+        let depth = 1;
+        let closedAt = -1;
+        for (let e = edge.exec(html); e !== null; e = edge.exec(html)) {
+            if (e[0] === '<!--') {
+                const end = html.indexOf('-->', e.index + 4);
+                if (end === -1)
+                    break;
+                edge.lastIndex = end + 3;
+                continue;
+            }
+            if (e[1] === '/')
+                depth -= 1;
+            else if (nests && !(tag === 'svg' && /\/\s*$/.test(e[2] ?? '')))
+                depth += 1;
+            if (depth === 0) {
+                closedAt = e.index + e[0].length;
+                break;
+            }
+        }
+        if (closedAt === -1)
+            return out.join('');
+        from = closedAt;
+    }
+    out.push(html.slice(from));
+    return out.join('');
+}
+/** Parse `html` into a loose tree. Unmatched closing tags are ignored; a close pops to its nearest open ancestor. */
+export function parseHtml(html) {
+    const root = { tag: '#root', attrs: {}, children: [], parent: null };
+    let cur = root;
+    let depth = 0;
+    const src = stripRaw(html);
+    // Linear by construction: the tag name ends where name characters end (the lookahead stops it giving characters
+    // back to the attribute run), the unquoted attribute run stops at the next `<`, and a quoted value is bounded. A tag
+    // that never closes costs at most a few KiB of scanning, never the rest of the document.
+    for (const m of src.matchAll(new RegExp(`<(\\/?)([a-zA-Z][\\w:-]*)(?![\\w:-])(${ATTRS})>|([^<]+)|<`, 'g'))) {
+        if (m[4] !== undefined) {
+            cur.children.push(decodeEntities(m[4]));
+            continue;
+        }
+        if (m[2] === undefined)
+            continue; // a stray '<'
+        const tag = m[2].toLowerCase();
+        if (m[1] === '/') {
+            let up = 1;
+            for (let n = cur; n !== null && n !== root; n = n.parent, up += 1) {
+                if (n.tag === tag) {
+                    cur = n.parent ?? root;
+                    depth -= up;
+                    break;
+                }
+            }
+            continue;
+        }
+        const rawAttrs = m[3] ?? '';
+        const node = { tag, attrs: parseAttrs(rawAttrs.replace(/\/\s*$/, '')), children: [], parent: cur };
+        cur.children.push(node);
+        // Nesting is capped: past MAX_DEPTH an opening becomes a sibling, so a close's ancestor search and every
+        // recursive walk stay bounded on a document of unclosed tags.
+        if (!VOID.has(tag) && !/\/\s*$/.test(rawAttrs) && depth < MAX_DEPTH) {
+            cur = node;
+            depth += 1;
+        }
+    }
+    return root;
+}
+/** The node's text, words separated at block boundaries, whitespace collapsed. `skip` drops matching subtrees. */
+export function textOf(node, skip) {
+    const parts = [];
+    const walk = (n) => {
+        for (const c of n.children) {
+            if (typeof c === 'string')
+                parts.push(c);
+            else if (skip === undefined || !skip(c)) {
+                const block = BLOCK.test(c.tag);
+                if (block)
+                    parts.push(' ');
+                walk(c);
+                if (block)
+                    parts.push(' ');
+            }
+        }
+    };
+    walk(node);
+    return parts.join('').replace(/\s+/g, ' ').trim();
+}
+export function findAll(node, pred, opts = {}) {
+    const out = [];
+    const walk = (n) => {
+        for (const c of n.children) {
+            if (typeof c === 'string')
+                continue;
+            if (pred(c)) {
+                out.push(c);
+                if (opts.descendIntoMatches !== true)
+                    continue;
+            }
+            walk(c);
+        }
+    };
+    walk(node);
+    return out;
+}
+function hasClass(n, cls) {
+    return (n.attrs['class'] ?? '').split(/\s+/).includes(cls);
+}
+const ID = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$/;
+function idOrNull(v) {
+    return v !== undefined && ID.test(v) ? v : null;
+}
+const isSlide = (n) => n.tag === 'section' && (hasClass(n, 'wi-slide') || 'data-slide-id' in n.attrs);
+const isNotes = (n) => n.tag === 'aside' && (hasClass(n, 'notes') || 'data-notes-for' in n.attrs);
+/** Cut `s` at `cap` characters with an ellipsis. */
+function cap(s, n) {
+    return s.length > n ? `${s.slice(0, n - 1).trimEnd()}…` : s;
+}
+/** The outline: a deck's slides, else top-level `data-wid` sections, else its h1–h3 headings. */
+export function outlineOf(html, opts = {}) {
+    const maxItems = opts.maxItems ?? 40;
+    const itemChars = opts.itemChars ?? 400;
+    const root = parseHtml(html);
+    const titleNode = findAll(root, (n) => n.tag === 'title')[0];
+    const h1 = findAll(root, (n) => n.tag === 'h1')[0];
+    const title = titleNode !== undefined && textOf(titleNode) !== '' ? textOf(titleNode) : h1 !== undefined ? textOf(h1) : null;
+    let nodes = findAll(root, isSlide);
+    let unit = 'slide';
+    if (nodes.length === 0) {
+        nodes = findAll(root, (n) => n.tag === 'section' && /^section-\d+$/.test(n.attrs['data-wid'] ?? ''));
+        unit = 'section';
+    }
+    if (nodes.length === 0) {
+        nodes = findAll(root, (n) => /^h[1-3]$/.test(n.tag));
+        unit = 'heading';
+    }
+    const items = nodes.slice(0, maxItems).map((node, i) => {
+        const notesNodes = findAll(node, isNotes);
+        const notes = notesNodes.map((x) => textOf(x)).filter((t) => t !== '').join(' ');
+        return {
+            n: i + 1,
+            unit,
+            // Ids from the document are data too: only one that is an id is shown, never a value that carries text.
+            wid: idOrNull(node.attrs['data-wid']),
+            slideId: idOrNull(node.attrs['data-slide-id']),
+            text: cap(textOf(node, isNotes), itemChars),
+            notes: notes === '' ? null : cap(notes, itemChars),
+        };
+    });
+    return { title: title === null ? null : cap(title, 200), items, more: Math.max(0, nodes.length - maxItems) };
+}
+/** The text of each selected part, by `data-wid`, with the slide it sits on. */
+export function anchorTexts(html, wids, itemChars = 600) {
+    const root = parseHtml(html);
+    const slides = findAll(root, isSlide);
+    return wids.map((wid) => {
+        const node = findAll(root, (n) => n.attrs['data-wid'] === wid, { descendIntoMatches: true })[0];
+        if (node === undefined)
+            return { wid, found: false, slide: null, tag: null, text: '' };
+        let slide = null;
+        for (let p = node; p !== null; p = p.parent) {
+            const at = slides.indexOf(p);
+            if (at !== -1) {
+                slide = at + 1;
+                break;
+            }
+        }
+        return { wid, found: true, slide, tag: node.tag, text: cap(textOf(node), itemChars) };
+    });
+}
+//# sourceMappingURL=artifact-outline.js.map

package/dist/api/artifact-outline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-outline.js","sourceRoot":"","sources":["../../src/api/artifact-outline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,uCAAuC;AACvC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AACtI,8DAA8D;AAC9D,MAAM,KAAK,GAAG,iKAAiK,CAAC;AAShL,MAAM,QAAQ,GAA2B;IACvC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG;IAClH,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG;IAC3G,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG;IAC1G,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG;CACtE,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,OAAO,CAAC,CAAC,OAAO,CAAC,8CAA8C,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;QACnF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1H,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,+FAA+F;IAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,kEAAkE,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;wGACwG;AACxG,MAAM,KAAK,GAAG,4CAA4C,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,uHAAuH;IACvH,qFAAqF;IACrF,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,yDAAyD,KAAK,oCAAoC,KAAK,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1I,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM;QACtB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,6CAA6C;YAC7C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC7C,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,UAAU,CAAC;QAClD,IAAI,GAAG,KAAK,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/C,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,6GAA6G;QAC7G,6FAA6F;QAC7F,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,eAAe,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACvC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;QAClB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC7C,IAAI,GAAG,KAAK,CAAC,CAAC;oBAAE,MAAM;gBACtB,IAAI,CAAC,SAAS,GAAG,GAAG,GAAG,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,KAAK,IAAI,CAAC,CAAC;iBACxB,IAAI,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAE,KAAK,IAAI,CAAC,CAAC;YAC5E,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,QAAQ,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACjC,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,IAAI,GAAa,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/E,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,gHAAgH;IAChH,qHAAqH;IACrH,yFAAyF;IACzF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,wCAAwC,KAAK,cAAc,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3G,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACvB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,SAAS,CAAC,cAAc;QAChD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,EAAE,GAAG,CAAC,CAAC;YACX,KAAK,IAAI,CAAC,GAAoB,GAAG,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;gBACnF,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;oBAClB,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;oBACvB,KAAK,IAAI,EAAE,CAAC;oBACZ,MAAM;gBACR,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAa,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC7G,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,yGAAyG;QACzG,8DAA8D;QAC9D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YACpE,GAAG,GAAG,IAAI,CAAC;YACX,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,MAAM,CAAC,IAAc,EAAE,IAA+B;IACpE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,CAAW,EAAQ,EAAE;QACjC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBACpC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,KAAK;oBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC3B,IAAI,CAAC,CAAC,CAAC,CAAC;gBACR,IAAI,KAAK;oBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC;IACX,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAc,EAAE,IAA8B,EAAE,OAAyC,EAAE;IACjH,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,CAAW,EAAQ,EAAE;QACjC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,SAAS;YACpC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACZ,IAAI,IAAI,CAAC,kBAAkB,KAAK,IAAI;oBAAE,SAAS;YACjD,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC;IACX,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,CAAW,EAAE,GAAW;IACxC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,EAAE,GAAG,qCAAqC,CAAC;AACjD,SAAS,QAAQ,CAAC,CAAqB;IACrC,OAAO,CAAC,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAW,EAAW,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,eAAe,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AACzH,MAAM,OAAO,GAAG,CAAC,CAAW,EAAW,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,gBAAgB,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AAErH,oDAAoD;AACpD,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS;IAC/B,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAoBD,iGAAiG;AACjG,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,OAAkD,EAAE;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7H,IAAI,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,IAAI,GAAwB,OAAO,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrG,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,OAAO;YACL,CAAC,EAAE,CAAC,GAAG,CAAC;YACR,IAAI;YACJ,wGAAwG;YACxG,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC9C,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC;YAC3C,KAAK,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC;SACnD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC;AAC/G,CAAC;AAWD,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAuB,EAAE,SAAS,GAAG,GAAG;IAChF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACvF,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,KAAK,IAAI,CAAC,GAAoB,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YAC7D,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACd,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;gBACf,MAAM;YACR,CAAC;QACH,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api/beneath.d.ts

@@ -0,0 +1,76 @@
+/**
+ * OPEN BENEATH A ROOT, FOLLOWING NO LINK BELOW IT (crew#1274; DES-CHAT-ARTIFACTS-001 §5.3 containment).
+ *
+ * The chat's per-turn block reads and writes under directories a run or a seat can change: a run's evidence root, the
+ * chat's scratch root (the seat's own working directory), and a project's docs root. Checking a path (`realpath`,
+ * `lstat`) and then opening it is a race: `O_NOFOLLOW` covers only the last component, so an ancestor directory
+ * swapped for a link between the check and the open sends the open outside the root. Node has no `openat`, so this
+ * module opens with the platform's own guarantee instead of a check:
+ *
+ *  - macOS: `O_NOFOLLOW_ANY` (Darwin ≥ 20): the open fails with ELOOP if ANY component of the path is a link. The
+ *    root is passed as its real path (no link in it by construction), so the guarantee covers exactly the components
+ *    below it.
+ *  - Linux: a descriptor walk: the root is opened as a directory, then each component is opened through the magic
+ *    link `/proc/self/fd/<dir>/<name>` with `O_NOFOLLOW` — the kernel resolves the magic link to the directory the
+ *    descriptor holds (never a path re-read), so this is `openat(dir, name, O_NOFOLLOW)`.
+ *  - Anywhere else (Windows): refused, with the reason. A brief or a copy is then simply not made there.
+ *
+ * The root itself is trusted: its ancestors belong to the daemon, and a run or a seat cannot rename the root (it can
+ * write only inside it). Every component below it is checked on every open, by the kernel.
+ *
+ * Listing a directory is by IDENTITY, never by a path that could be re-resolved: the directory is first opened beneath
+ * the root, then listed through what that descriptor holds — on Linux `/proc/self/fd/<n>`, on macOS
+ * `/.vol/<dev>/<ino>` (the volume file system's by-identity name; `/dev/fd/<n>` cannot be listed there). A folder
+ * swapped for a link after it was opened still lists as the folder that was opened; a file system without `/.vol`
+ * refuses the listing.
+ */
+import { type Stats } from 'node:fs';
+export type BeneathMode = 'darwin' | 'procfd' | 'unsupported';
+/** How this platform opens beneath a root. */
+export declare function beneathMode(): BeneathMode;
+/** Test seams: called with the absolute path just before an open beneath a root (with its flags), and just before a
+ *  directory opened beneath a root is listed. */
+export declare const beneathTestHooks: {
+    beforeOpen?: (absPath: string, flags: number) => void;
+    beforeList?: (absPath: string) => void;
+    mode?: BeneathMode;
+};
+export declare class BeneathError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export interface OpenBeneathOptions {
+    /** Open flags for the leaf (`O_RDONLY` by default). No link is followed at the leaf either way. */
+    flags?: number;
+    /** The mode a created file gets. */
+    mode?: number;
+}
+/**
+ * Open `rel` beneath the real directory `root`, following no link at or below it. Throws the open's own error (its
+ * `code`: ELOOP for a link anywhere below the root, ENOENT, ENOTDIR, EEXIST…) or a {@link BeneathError}.
+ */
+export declare function openBeneath(root: string, rel: string, opts?: OpenBeneathOptions): number;
+/** Read the regular file `rel` beneath `root`, at most `max` bytes (over = refused, never cut), non-blocking (a FIFO
+ *  is refused, not waited on). Returns the bytes and the file's stats from the same descriptor. */
+export declare function readBeneath(root: string, rel: string, max: number): {
+    data: Buffer;
+    st: Stats;
+};
+/** What `rel` beneath `root` is (a regular file, a directory, something else), by its own descriptor; `null` if absent. */
+export declare function statBeneath(root: string, rel: string): Stats | null;
+/** Create the file `rel` beneath `root` exclusively (never through a link, never over an existing entry) with `data`. */
+export declare function createBeneath(root: string, rel: string, data: Buffer, mode: number): void;
+/**
+ * Make the directory `name` directly beneath `root` (one component: the root's own entry) and prove it is a real
+ * directory, not a link, by opening it beneath the root.
+ */
+export declare function mkdirBeneath(root: string, name: string, mode?: number): void;
+/**
+ * The names in the directory `rel` beneath `root` (`''` = the root itself, trusted), at most `max`, listed by the
+ * identity of the directory opened beneath the root (see the module doc). `null` when it cannot be listed.
+ */
+export declare function listBeneath(root: string, rel: string, max: number): {
+    names: string[];
+    more: boolean;
+} | null;
+//# sourceMappingURL=beneath.d.ts.map

package/dist/api/beneath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"beneath.d.ts","sourceRoot":"","sources":["../../src/api/beneath.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAqH,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAMxJ,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,aAAa,CAAC;AAG9D,8CAA8C;AAC9C,wBAAgB,WAAW,IAAI,WAAW,CAIzC;AAED;iDACiD;AACjD,eAAO,MAAM,gBAAgB,EAAE;IAAE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,IAAI,CAAC,EAAE,WAAW,CAAA;CAAO,CAAC;AAE1J,qBAAa,YAAa,SAAQ,KAAK;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAGnD;AAYD,MAAM,WAAW,kBAAkB;IACjC,mGAAmG;IACnG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,kBAAuB,GAAG,MAAM,CAgC5F;AAED;mGACmG;AACnG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,KAAK,CAAA;CAAE,CAiB/F;AAED,2HAA2H;AAC3H,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAanE;AAED,yHAAyH;AACzH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQzF;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,SAAQ,GAAG,IAAI,CAU3E;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAgC7G"}