wicked-crew 0.7.1 → 0.7.3

package/dist/api/delivery-index.d.ts

@@ -0,0 +1,61 @@
+/**
+ * The run→delivered-PR index (CREW-UX-8, crew#321).
+ *
+ * `LaunchRunBody.deliver?: 'pr'` is input-only; the deliver phase computes the PR URL
+ * (`core/deliver.ts` — re-derived from the remote, refused without one) and prints it as the
+ * unit's last output line, which is console text, not a wire. This index is the read-side
+ * latency layer that lets the run DTOs echo `session.delivery` on BOTH `GET /runs` and
+ * `GET /runs/:id` without a `workOutput` read per request — the persisted field that makes a
+ * list surface's "4 of 5 siblings delivered" rollup affordable without an N-fetch fan-out
+ * (wicked-studio#27).
+ *
+ * Mirrors `RetryIndex`/`GuidanceIndex`'s posture exactly: the DURABLE record is the audit
+ * trail (the engine run record has no such field) — action `run.delivered`, `detail.url` —
+ * hydrated once at server start (best-effort: a missing or unreadable trail leaves deliveries
+ * blank, the pre-#321 behavior, not an error) and updated at the same post-terminal point
+ * that writes the audit entry.
+ *
+ * KNOWN LIMIT (stated in the contract too): runs that delivered before this landed have no
+ * `run.delivered` entry and carry no field. Do NOT backfill by scanning `work_output` at
+ * hydrate — that is an unbounded boot cost. Historical runs still resolve their URL through
+ * the per-run output endpoint.
+ */
+import type { AuditLog } from './audit.js';
+import type { SessionView, WorkUnit } from '../core/types.js';
+/** The wire shape `AgentSession.delivery` carries (api-types 0.11.0). */
+export interface SessionDelivery {
+    kind: 'pull_request';
+    url: string;
+}
+/**
+ * The PR URL in a deliver transcript — crew's own extraction, mirrored
+ * (`core/deliver.ts`: `grep -Eo 'https://[^[:space:]]+/pull/[0-9]+' | tail -1`). Requiring
+ * the digits keeps `…/pull/new/<branch>` — the create-PR form git prints on every push —
+ * from ever matching; the LAST match wins, same as `tail -1`.
+ */
+export declare function prUrlFrom(text: string): string | null;
+/**
+ * This run's deliver unit, or `null`. The composed id suffix (`<base>:deliver`) is the
+ * primary key; the `tool_cmd` probe is the fallback for an operator OVERLAY that carried the
+ * deliver phase under its own name — do NOT key on `workflow_id`, which is plain for
+ * overlay-carried deliver phases (crew#321).
+ */
+export declare function deliverUnitOf(view: SessionView): WorkUnit | null;
+export declare class DeliveryIndex {
+    private readonly runToUrl;
+    /**
+     * Load deliveries from EVERY `run.delivered` entry in the trail — exhaustively, not capped
+     * (BRIEF-UX-002 C5, the same defect class as `RetryIndex.hydrate`: a durable record must
+     * not vanish because 1000+ newer writes landed on top of it). The trail answers newest
+     * first, so the FIRST entry seen per run wins; older entries for the same run are
+     * superseded and skipped. Still best-effort, like its siblings; cost is one full-file scan
+     * at boot. (Third exhaustive trail scan at boot, after RetryIndex and GuidanceIndex — a
+     * FOURTH should trigger consolidating them into one pass, per crew#321.)
+     */
+    hydrate(audit: AuditLog, log?: (msg: string) => void): Promise<void>;
+    /** Record the run's delivered PR URL (idempotent — the newest write wins). */
+    set(runId: string, url: string): void;
+    /** The delivery for this run, or `undefined` (the DTO spells that as an ABSENT field). */
+    deliveryFor(runId: string): SessionDelivery | undefined;
+}
+//# sourceMappingURL=delivery-index.d.ts.map

package/dist/api/delivery-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-index.d.ts","sourceRoot":"","sources":["../../src/api/delivery-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE9D,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGrD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,QAAQ,GAAG,IAAI,CAIhE;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IAEtD;;;;;;;;OAQG;IACG,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAsB1E,8EAA8E;IAC9E,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAIrC,0FAA0F;IAC1F,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;CAIxD"}

package/dist/api/delivery-index.js

@@ -0,0 +1,87 @@
+/**
+ * The run→delivered-PR index (CREW-UX-8, crew#321).
+ *
+ * `LaunchRunBody.deliver?: 'pr'` is input-only; the deliver phase computes the PR URL
+ * (`core/deliver.ts` — re-derived from the remote, refused without one) and prints it as the
+ * unit's last output line, which is console text, not a wire. This index is the read-side
+ * latency layer that lets the run DTOs echo `session.delivery` on BOTH `GET /runs` and
+ * `GET /runs/:id` without a `workOutput` read per request — the persisted field that makes a
+ * list surface's "4 of 5 siblings delivered" rollup affordable without an N-fetch fan-out
+ * (wicked-studio#27).
+ *
+ * Mirrors `RetryIndex`/`GuidanceIndex`'s posture exactly: the DURABLE record is the audit
+ * trail (the engine run record has no such field) — action `run.delivered`, `detail.url` —
+ * hydrated once at server start (best-effort: a missing or unreadable trail leaves deliveries
+ * blank, the pre-#321 behavior, not an error) and updated at the same post-terminal point
+ * that writes the audit entry.
+ *
+ * KNOWN LIMIT (stated in the contract too): runs that delivered before this landed have no
+ * `run.delivered` entry and carry no field. Do NOT backfill by scanning `work_output` at
+ * hydrate — that is an unbounded boot cost. Historical runs still resolve their URL through
+ * the per-run output endpoint.
+ */
+/**
+ * The PR URL in a deliver transcript — crew's own extraction, mirrored
+ * (`core/deliver.ts`: `grep -Eo 'https://[^[:space:]]+/pull/[0-9]+' | tail -1`). Requiring
+ * the digits keeps `…/pull/new/<branch>` — the create-PR form git prints on every push —
+ * from ever matching; the LAST match wins, same as `tail -1`.
+ */
+export function prUrlFrom(text) {
+    const matches = text.match(/https:\/\/\S+\/pull\/\d+/g);
+    return matches === null ? null : (matches[matches.length - 1] ?? null);
+}
+/**
+ * This run's deliver unit, or `null`. The composed id suffix (`<base>:deliver`) is the
+ * primary key; the `tool_cmd` probe is the fallback for an operator OVERLAY that carried the
+ * deliver phase under its own name — do NOT key on `workflow_id`, which is plain for
+ * overlay-carried deliver phases (crew#321).
+ */
+export function deliverUnitOf(view) {
+    const byId = view.units.find((u) => u.id.endsWith(':deliver'));
+    if (byId !== undefined)
+        return byId;
+    return view.units.find((u) => (u.tool_cmd ?? []).join(' ').includes('gh pr create')) ?? null;
+}
+export class DeliveryIndex {
+    runToUrl = new Map();
+    /**
+     * Load deliveries from EVERY `run.delivered` entry in the trail — exhaustively, not capped
+     * (BRIEF-UX-002 C5, the same defect class as `RetryIndex.hydrate`: a durable record must
+     * not vanish because 1000+ newer writes landed on top of it). The trail answers newest
+     * first, so the FIRST entry seen per run wins; older entries for the same run are
+     * superseded and skipped. Still best-effort, like its siblings; cost is one full-file scan
+     * at boot. (Third exhaustive trail scan at boot, after RetryIndex and GuidanceIndex — a
+     * FOURTH should trigger consolidating them into one pass, per crew#321.)
+     */
+    async hydrate(audit, log) {
+        try {
+            const seen = new Set();
+            for (const entry of await audit.readAll({ action: 'run.delivered' })) {
+                if (typeof entry.runId !== 'string')
+                    continue;
+                if (seen.has(entry.runId))
+                    continue;
+                // Newest entry decides, even when malformed — marking the run seen BEFORE the url
+                // check keeps a corrupt newest write from resurrecting an older one (the #312 rule).
+                seen.add(entry.runId);
+                const url = entry.detail?.['url'];
+                if (typeof url !== 'string' || url === '')
+                    continue;
+                this.runToUrl.set(entry.runId, url);
+            }
+        }
+        catch (err) {
+            log?.(`[runs] delivery-index hydrate failed (prior runs read as undelivered until restart): ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    /** Record the run's delivered PR URL (idempotent — the newest write wins). */
+    set(runId, url) {
+        this.runToUrl.set(runId, url);
+    }
+    /** The delivery for this run, or `undefined` (the DTO spells that as an ABSENT field). */
+    deliveryFor(runId) {
+        const url = this.runToUrl.get(runId);
+        return url === undefined ? undefined : { kind: 'pull_request', url };
+    }
+}
+//# sourceMappingURL=delivery-index.js.map

package/dist/api/delivery-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-index.js","sourceRoot":"","sources":["../../src/api/delivery-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAWH;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxD,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAiB;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,IAAI,CAAC;AAC/F,CAAC;AAED,MAAM,OAAO,aAAa;IACP,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEtD;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAC,KAAe,EAAE,GAA2B;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;gBACrE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACpC,kFAAkF;gBAClF,qFAAqF;gBACrF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtB,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;gBAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE;oBAAE,SAAS;gBACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,EAAE,CACH,wFACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,GAAG,CAAC,KAAa,EAAE,GAAW;QAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,0FAA0F;IAC1F,WAAW,CAAC,KAAa;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;IACvE,CAAC;CACF"}

package/dist/api/governance-steering.d.ts

@@ -0,0 +1,139 @@
+/**
+ * The `/api/v1/governance/steering/*` surface (STEERING program) — the management wire behind
+ * the studio's top-level Steering nav: batch IMPORT of steering docs/rules, and "add with chat"
+ * AUTHORING as a governed run. Per-rule CRUD deliberately lives elsewhere — this module adds no
+ * second door: `GET/POST /governance/rules` (now steering-aware: `?type=` facet,
+ * `?include_retired=`, steering-field writes) and `DELETE /governance/rules/:id` in
+ * `api/routes.ts` ARE the steering-rule CRUD, because a steering rule IS a conformance rule
+ * (the wiki/rules model and the old policy model merged into one).
+ *
+ * Thin by design, like `campaigns/routes.ts`: validation is zod (strict, unknown keys named —
+ * the FINDING-031 doctrine); import normalization/validation is the ENGINE's ingest path on the
+ * single-writer actor (fail-closed per entry — the daemon never opens the store for writes);
+ * authoring is the EXISTING run machinery (`launchRun` + the `steering-author` drop-in workflow
+ * + the standard `POST /runs/:id/gate` HITL flow) — no new chat stack. Error posture mirrors the
+ * campaign surface: a build whose engine addon predates the steering model answers 501
+ * (`SteeringUnsupportedError` — "upgrade the engine"), never 400 ("fix your request").
+ *
+ * estate's MCP surface stays READ-ONLY on rules; every steering WRITE flows through here (the
+ * governed operator path) — the AW-11 "no rules.write on estate" invariant is a design input of
+ * this module, not a coincidence.
+ */
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import { z } from 'zod';
+import { type CoreAdapter } from '../core/adapter.js';
+import type { Actor } from '../core/types.js';
+import type { AuditLog } from './audit.js';
+/**
+ * The steering-type vocabulary (`wicked-crew-api-types::SteeringType`) — enum-as-string, the
+ * engine's serde default is `architecture`. ONE spelling, exported: `api/routes.ts` reads it for
+ * the `?type=` browse facet so the two surfaces can never disagree about what a type is.
+ */
+export declare const STEERING_TYPE_VALUES: readonly ["architecture", "development", "security", "testing", "operations", "compliance", "design-ux"];
+export declare const STEERING_TYPES: ReadonlySet<string>;
+/** The engine's serde default for a rule row that predates (or omits) `steering_type`. */
+export declare const DEFAULT_STEERING_TYPE = "architecture";
+/** Per-entry ceiling on an import doc / rule payload (UTF-8 bytes) — mirrors the run-files cap. */
+export declare const STEERING_ENTRY_MAX_BYTES: number;
+/** Batch ceiling — an import is a page action, not a bulk-migration channel. */
+export declare const STEERING_IMPORT_MAX_ENTRIES = 200;
+/** Authoring intent is operator prose, not a document store (the guidance-cap doctrine). */
+export declare const STEERING_INSTRUCTIONS_MAX_BYTES: number;
+export declare const SteeringImportSchema: z.ZodObject<{
+    type: z.ZodOptional<z.ZodEnum<["architecture", "development", "security", "testing", "operations", "compliance", "design-ux"]>>;
+    entries: z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+        kind: z.ZodLiteral<"doc">;
+        name: z.ZodOptional<z.ZodString>;
+        content: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        kind: "doc";
+        content: string;
+        name?: string | undefined;
+    }, {
+        kind: "doc";
+        content: string;
+        name?: string | undefined;
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"rule">;
+        rule: z.ZodType<import("wicked-crew-api-types").ConformanceRule, z.ZodTypeDef, import("wicked-crew-api-types").ConformanceRule>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "rule";
+        rule: import("wicked-crew-api-types").ConformanceRule;
+    }, {
+        kind: "rule";
+        rule: import("wicked-crew-api-types").ConformanceRule;
+    }>]>, "many">;
+}, "strict", z.ZodTypeAny, {
+    entries: ({
+        kind: "doc";
+        content: string;
+        name?: string | undefined;
+    } | {
+        kind: "rule";
+        rule: import("wicked-crew-api-types").ConformanceRule;
+    })[];
+    type?: "architecture" | "development" | "security" | "testing" | "operations" | "compliance" | "design-ux" | undefined;
+}, {
+    entries: ({
+        kind: "doc";
+        content: string;
+        name?: string | undefined;
+    } | {
+        kind: "rule";
+        rule: import("wicked-crew-api-types").ConformanceRule;
+    })[];
+    type?: "architecture" | "development" | "security" | "testing" | "operations" | "compliance" | "design-ux" | undefined;
+}>;
+export declare const SteeringAuthorSchema: z.ZodObject<{
+    instructions: z.ZodString;
+    type: z.ZodOptional<z.ZodEnum<["architecture", "development", "security", "testing", "operations", "compliance", "design-ux"]>>;
+    paths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    documents: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        content: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        content: string;
+        name: string;
+    }, {
+        content: string;
+        name: string;
+    }>, "many">>;
+    repoRef: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    instructions: string;
+    type?: "architecture" | "development" | "security" | "testing" | "operations" | "compliance" | "design-ux" | undefined;
+    repoRef?: string | undefined;
+    paths?: string[] | undefined;
+    documents?: {
+        content: string;
+        name: string;
+    }[] | undefined;
+    sessionId?: string | undefined;
+}, {
+    instructions: string;
+    type?: "architecture" | "development" | "security" | "testing" | "operations" | "compliance" | "design-ux" | undefined;
+    repoRef?: string | undefined;
+    paths?: string[] | undefined;
+    documents?: {
+        content: string;
+        name: string;
+    }[] | undefined;
+    sessionId?: string | undefined;
+}>;
+/**
+ * Where the author route lands inline documents so the run can read them: a per-run inbox on the
+ * daemon host — the existing run file mechanism (runs read the daemon's filesystem; the paths
+ * ride the problem statement, never the prompt-fattening content itself).
+ */
+export declare function steeringInboxDir(runId: string): string;
+export interface SteeringRoutesDeps {
+    audit: AuditLog;
+    actorOf: (req: FastifyRequest & {
+        actor?: Actor;
+    }) => Actor;
+    /** The default council roster for the authoring run (already parsed). */
+    roster: () => unknown[];
+}
+export declare function registerGovernanceSteeringRoutes(app: FastifyInstance, adapter: CoreAdapter, deps: SteeringRoutesDeps): void;
+//# sourceMappingURL=governance-steering.d.ts.map

package/dist/api/governance-steering.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-steering.d.ts","sourceRoot":"","sources":["../../src/api/governance-steering.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAA4B,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,KAAK,EAA6C,MAAM,kBAAkB,CAAC;AACzF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAK3C;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,0GAQvB,CAAC;AAEX,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,CAAiC,CAAC;AAEjF,0FAA0F;AAC1F,eAAO,MAAM,qBAAqB,iBAAiB,CAAC;AAEpD,mGAAmG;AACnG,eAAO,MAAM,wBAAwB,QAAa,CAAC;AACnD,gFAAgF;AAChF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C,4FAA4F;AAC5F,eAAO,MAAM,+BAA+B,QAAY,CAAC;AA0CzD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQtB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYtB,CAAC;AAEZ;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQtD;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,GAAG;QAAE,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE,KAAK,KAAK,CAAC;IAC5D,yEAAyE;IACzE,MAAM,EAAE,MAAM,OAAO,EAAE,CAAC;CACzB;AAED,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,kBAAkB,GACvB,IAAI,CAkMN"}

package/dist/api/governance-steering.js

@@ -0,0 +1,302 @@
+/**
+ * The `/api/v1/governance/steering/*` surface (STEERING program) — the management wire behind
+ * the studio's top-level Steering nav: batch IMPORT of steering docs/rules, and "add with chat"
+ * AUTHORING as a governed run. Per-rule CRUD deliberately lives elsewhere — this module adds no
+ * second door: `GET/POST /governance/rules` (now steering-aware: `?type=` facet,
+ * `?include_retired=`, steering-field writes) and `DELETE /governance/rules/:id` in
+ * `api/routes.ts` ARE the steering-rule CRUD, because a steering rule IS a conformance rule
+ * (the wiki/rules model and the old policy model merged into one).
+ *
+ * Thin by design, like `campaigns/routes.ts`: validation is zod (strict, unknown keys named —
+ * the FINDING-031 doctrine); import normalization/validation is the ENGINE's ingest path on the
+ * single-writer actor (fail-closed per entry — the daemon never opens the store for writes);
+ * authoring is the EXISTING run machinery (`launchRun` + the `steering-author` drop-in workflow
+ * + the standard `POST /runs/:id/gate` HITL flow) — no new chat stack. Error posture mirrors the
+ * campaign surface: a build whose engine addon predates the steering model answers 501
+ * (`SteeringUnsupportedError` — "upgrade the engine"), never 400 ("fix your request").
+ *
+ * estate's MCP surface stays READ-ONLY on rules; every steering WRITE flows through here (the
+ * governed operator path) — the AW-11 "no rules.write on estate" invariant is a design input of
+ * this module, not a coincidence.
+ */
+import { randomUUID } from 'node:crypto';
+import { existsSync, promises as fsp } from 'node:fs';
+import { basename, isAbsolute, join } from 'node:path';
+import { z } from 'zod';
+import { SteeringUnsupportedError } from '../core/adapter.js';
+import { API_PREFIX } from './api-prefix.js';
+const V = API_PREFIX;
+/**
+ * The steering-type vocabulary (`wicked-crew-api-types::SteeringType`) — enum-as-string, the
+ * engine's serde default is `architecture`. ONE spelling, exported: `api/routes.ts` reads it for
+ * the `?type=` browse facet so the two surfaces can never disagree about what a type is.
+ */
+export const STEERING_TYPE_VALUES = [
+    'architecture',
+    'development',
+    'security',
+    'testing',
+    'operations',
+    'compliance',
+    'design-ux',
+];
+export const STEERING_TYPES = new Set(STEERING_TYPE_VALUES);
+/** The engine's serde default for a rule row that predates (or omits) `steering_type`. */
+export const DEFAULT_STEERING_TYPE = 'architecture';
+/** Per-entry ceiling on an import doc / rule payload (UTF-8 bytes) — mirrors the run-files cap. */
+export const STEERING_ENTRY_MAX_BYTES = 512 * 1024;
+/** Batch ceiling — an import is a page action, not a bulk-migration channel. */
+export const STEERING_IMPORT_MAX_ENTRIES = 200;
+/** Authoring intent is operator prose, not a document store (the guidance-cap doctrine). */
+export const STEERING_INSTRUCTIONS_MAX_BYTES = 16 * 1024;
+function message(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+/** Same unknown-key-naming 400 body builder as api/routes.ts (restated because that module does
+ *  not export it and importing routes.ts here would be a cycle through registerRoutes). */
+function invalidBody(err, what) {
+    const unknown = err.issues.flatMap((i) => (i.code === 'unrecognized_keys' ? i.keys : []));
+    const error = unknown.length > 0
+        ? `${what}: unknown field${unknown.length > 1 ? 's' : ''} ${unknown
+            .map((k) => `\`${k}\``)
+            .join(', ')} — this endpoint does not accept ${unknown.length > 1 ? 'them' : 'it'}, and ignoring ${unknown.length > 1 ? 'them' : 'it'} would run a different request than you sent`
+        : what;
+    return { error, details: err.issues };
+}
+// A doc entry: frontmattered markdown, the SAME format `rules ingest --dir` consumes. The rule
+// entry's payload is validated shape-wise by the ENGINE's normalize/validate path (fail-closed
+// per entry) — the route checks only "is an object", so engine-side validation stays the ONE
+// spelling of what a rule is.
+const ImportDocSchema = z
+    .object({
+    kind: z.literal('doc'),
+    name: z.string().min(1).max(256).optional(),
+    content: z.string().min(1),
+})
+    .strict();
+const ImportRuleSchema = z
+    .object({
+    kind: z.literal('rule'),
+    rule: z.custom((v) => typeof v === 'object' && v !== null && !Array.isArray(v), { message: '`rule` must be a rule object' }),
+})
+    .strict();
+export const SteeringImportSchema = z
+    .object({
+    type: z.enum(STEERING_TYPE_VALUES).optional(),
+    entries: z
+        .array(z.discriminatedUnion('kind', [ImportDocSchema, ImportRuleSchema]))
+        .min(1)
+        .max(STEERING_IMPORT_MAX_ENTRIES),
+})
+    .strict();
+export const SteeringAuthorSchema = z
+    .object({
+    instructions: z.string().min(1),
+    type: z.enum(STEERING_TYPE_VALUES).optional(),
+    paths: z.array(z.string().min(1)).max(32).optional(),
+    documents: z
+        .array(z.object({ name: z.string().min(1).max(128), content: z.string().min(1) }).strict())
+        .max(32)
+        .optional(),
+    repoRef: z.string().min(1).optional(),
+    sessionId: z.string().min(1).optional(),
+})
+    .strict();
+/**
+ * Where the author route lands inline documents so the run can read them: a per-run inbox on the
+ * daemon host — the existing run file mechanism (runs read the daemon's filesystem; the paths
+ * ride the problem statement, never the prompt-fattening content itself).
+ */
+export function steeringInboxDir(runId) {
+    // Env override first (the workflowOverlayDir pattern) — what keeps tests out of the
+    // operator's real ~/.wicked.
+    if (process.env.WICKED_STEERING_INBOX_DIR) {
+        return join(process.env.WICKED_STEERING_INBOX_DIR, runId);
+    }
+    const home = process.env.HOME ?? process.env.USERPROFILE ?? '/tmp';
+    return join(home, '.wicked', 'steering-inbox', runId);
+}
+export function registerGovernanceSteeringRoutes(app, adapter, deps) {
+    const { audit, actorOf } = deps;
+    // ── Batch import (the Steering page's Import action) ─────────────────────────
+    // JSON body only, deliberately: this daemon speaks no multipart (no parser registered, and the
+    // studio client speaks JSON everywhere else), so doc bytes ride `content` inline. `type` is the
+    // page's inferred steering type, applied engine-side as the default for entries that omit one.
+    // 200 even when entries rejected — fail-closed PER ENTRY, and the per-entry results ARE the
+    // answer; only a malformed batch (400), a pre-steering engine (501), or an engine failure (500)
+    // refuse the request as a whole.
+    app.post(`${V}/governance/steering/import`, {
+        config: {
+            manifest: {
+                requestType: 'SteeringImportBody',
+                responseType: 'SteeringImportResponse',
+                // 501: the installed engine addon predates the steering model (wicked-core-ts < 0.7.5)
+                // — upgrade the engine, the request was already correct.
+                statusCodes: [200, 400, 500, 501],
+            },
+        },
+    }, async (req, reply) => {
+        const parsed = SteeringImportSchema.safeParse(req.body);
+        if (!parsed.success) {
+            return reply.code(400).send(invalidBody(parsed.error, 'Invalid steering import body'));
+        }
+        // Byte caps checked in the route, not zod's char-counting `max`, so the 400 names the
+        // actual limit (the guidance-cap doctrine).
+        for (const [i, entry] of parsed.data.entries.entries()) {
+            const payload = entry.kind === 'doc' ? entry.content : JSON.stringify(entry.rule);
+            const bytes = Buffer.byteLength(payload, 'utf8');
+            if (bytes > STEERING_ENTRY_MAX_BYTES) {
+                return reply.code(400).send({
+                    error: `entries[${i}] is ${bytes} bytes, over the ${STEERING_ENTRY_MAX_BYTES}-byte per-entry cap`,
+                });
+            }
+        }
+        try {
+            const results = await adapter.importSteeringRules(parsed.data.entries, parsed.data.type);
+            const imported = results.filter((r) => r.status === 'imported').length;
+            const rejected = results.length - imported;
+            audit.record('governance.steering.imported', actorOf(req), {
+                detail: {
+                    entries: results.length,
+                    imported,
+                    rejected,
+                    ...(parsed.data.type !== undefined ? { type: parsed.data.type } : {}),
+                },
+            });
+            return { results, imported, rejected };
+        }
+        catch (err) {
+            if (err instanceof SteeringUnsupportedError) {
+                return reply.code(501).send({ error: message(err) });
+            }
+            // An engine/store failure is OURS, not the caller's — the batch already parsed, so
+            // nothing here maps to 400 (per-ENTRY validation failures come back in `results`).
+            return reply.code(500).send({ error: message(err) });
+        }
+    });
+    // ── "Add with chat" (the Steering page's conversational authoring action) ────
+    // REUSES crew's run machinery end to end: launches the `steering-author` drop-in workflow
+    // (BUILTIN_WORKFLOWS — analyze → propose, with an unconditional human gate on the terminal
+    // propose phase: TH-12 propose-as-gate), inline documents land in the per-run steering inbox
+    // (the run reads the daemon host's filesystem — the existing run file mechanism), and the
+    // operator answers the proposal through the standard POST /runs/:id/gate. Approved rules land
+    // via POST /governance/rules with `provenance.source: "chat"` — the run itself writes nothing.
+    //
+    // Gated on the steering engine too, on purpose: the run only PROPOSES, but proposing rules
+    // whose steering fields the CRUD would then refuse (501) is a trap, not a feature.
+    app.post(`${V}/governance/steering/author`, {
+        config: {
+            manifest: {
+                requestType: 'SteeringAuthorBody',
+                responseType: '{ runId: string }',
+                // 409: engine busy / sessionId already exists; 501: pre-steering engine.
+                statusCodes: [201, 400, 409, 500, 501],
+            },
+        },
+    }, async (req, reply) => {
+        const parsed = SteeringAuthorSchema.safeParse(req.body);
+        if (!parsed.success) {
+            return reply.code(400).send(invalidBody(parsed.error, 'Invalid steering author body'));
+        }
+        const b = parsed.data;
+        const intentBytes = Buffer.byteLength(b.instructions, 'utf8');
+        if (intentBytes > STEERING_INSTRUCTIONS_MAX_BYTES) {
+            return reply.code(400).send({
+                error: `instructions is ${intentBytes} bytes, over the ${STEERING_INSTRUCTIONS_MAX_BYTES}-byte cap — put long material in \`documents\` or \`paths\`, not the intent`,
+            });
+        }
+        for (const [i, doc] of (b.documents ?? []).entries()) {
+            const bytes = Buffer.byteLength(doc.content, 'utf8');
+            if (bytes > STEERING_ENTRY_MAX_BYTES) {
+                return reply.code(400).send({
+                    error: `documents[${i}] is ${bytes} bytes, over the ${STEERING_ENTRY_MAX_BYTES}-byte per-document cap`,
+                });
+            }
+        }
+        // The run id NAMES the per-run inbox directory below, and `join` honors `../` — a
+        // free-form id could land inline documents outside the inbox (or alias another run's).
+        // Same doctrine as the document `name` scrub: caller text is never a path — but the id
+        // must round-trip exactly (it is the run's identity), so refuse loudly instead of
+        // scrubbing silently.
+        if (b.sessionId !== undefined && !/^(?!\.+$)[A-Za-z0-9._-]{1,128}$/.test(b.sessionId)) {
+            return reply.code(400).send({
+                error: 'sessionId must be 1-128 characters of [A-Za-z0-9._-] (and not dots only) — it names ' +
+                    "the run's steering-inbox directory on the daemon host",
+            });
+        }
+        if (!adapter.steeringSupported()) {
+            return reply
+                .code(501)
+                .send({ error: new SteeringUnsupportedError('Authoring steering rules').message });
+        }
+        // Paths are read on the DAEMON host — validate loudly here rather than letting the run
+        // burn a phase discovering a browser-local path. Absolute only (the extraWriteRoots
+        // doctrine), and existing (a named 400 beats a worker's "no such file" mid-run).
+        for (const p of b.paths ?? []) {
+            if (!isAbsolute(p)) {
+                return reply
+                    .code(400)
+                    .send({ error: `paths: \`${p}\` must be absolute on the daemon host` });
+            }
+            if (!existsSync(p)) {
+                return reply.code(400).send({
+                    error: `paths: \`${p}\` does not exist on the daemon host — the authoring run reads the daemon's filesystem, not the browser's`,
+                });
+            }
+        }
+        const runId = b.sessionId ?? randomUUID();
+        // Inline documents → per-run inbox files; only their PATHS ride the problem statement
+        // (content in the prompt would fatten it past what prompt transports tolerate).
+        const docPaths = [];
+        if (b.documents !== undefined && b.documents.length > 0) {
+            const dir = steeringInboxDir(runId);
+            await fsp.mkdir(dir, { recursive: true });
+            for (const [i, doc] of b.documents.entries()) {
+                // basename + charset scrub: the caller's `name` is display text, never a path. The
+                // index prefix keeps scrubbed names collision-free and the filename non-empty.
+                const safe = `${i}-${basename(doc.name).replace(/[^a-zA-Z0-9._-]/g, '_')}`;
+                const target = join(dir, safe);
+                await fsp.writeFile(target, doc.content, 'utf8');
+                docPaths.push(target);
+            }
+        }
+        const type = b.type ?? DEFAULT_STEERING_TYPE;
+        const sources = [...(b.paths ?? []), ...docPaths];
+        const problem = [
+            `Author steering rules for the '${type}' steering type (use it as the default steering_type for every proposed rule without a better fit).`,
+            '',
+            'Operator intent:',
+            b.instructions,
+            ...(sources.length > 0
+                ? ['', 'Analyze these files/directories on this machine:', ...sources.map((s) => `- ${s}`)]
+                : []),
+        ].join('\n');
+        try {
+            await adapter.launchRun({
+                problem,
+                sessionId: runId,
+                clisJson: JSON.stringify(deps.roster()),
+                workflow: 'steering-author',
+                ...(b.repoRef !== undefined ? { repoRef: b.repoRef } : {}),
+            });
+            // The same trail entry POST /runs writes — this IS a run launch, findable by the same
+            // `?action=run.launched` query — plus the steering detail the Steering header renders.
+            audit.record('run.launched', actorOf(req), {
+                runId,
+                detail: {
+                    workflow: 'steering-author',
+                    steeringType: type,
+                    sources: sources.length,
+                    ...(b.repoRef !== undefined ? { repoRef: b.repoRef } : {}),
+                },
+            });
+            return reply.code(201).send({ runId });
+        }
+        catch (err) {
+            const msg = message(err);
+            const busy = /busy|in flight|already/i.test(msg);
+            return reply.code(busy ? 409 : 400).send({ error: msg });
+        }
+    });
+}
+//# sourceMappingURL=governance-steering.js.map

package/dist/api/governance-steering.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-steering.js","sourceRoot":"","sources":["../../src/api/governance-steering.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,wBAAwB,EAAoB,MAAM,oBAAoB,CAAC;AAGhF,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,CAAC,GAAG,UAAU,CAAC;AAErB;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,cAAc;IACd,aAAa;IACb,UAAU;IACV,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,WAAW;CACH,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAEjF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CAAC;AAEpD,mGAAmG;AACnG,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAC;AACnD,gFAAgF;AAChF,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAC/C,4FAA4F;AAC5F,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;2FAC2F;AAC3F,SAAS,WAAW,CAAC,GAAe,EAAE,IAAY;IAChD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,GAAG,IAAI,kBAAkB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO;aAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;aACtB,IAAI,CAAC,IAAI,CAAC,oCACX,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAChC,kBAAkB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,8CAA8C;QACpG,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,+FAA+F;AAC/F,+FAA+F;AAC/F,6FAA6F;AAC7F,8BAA8B;AAC9B,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,CACZ,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAC/D,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAC5C;CACF,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC7C,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;SACxE,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,2BAA2B,CAAC;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC7C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAC1F,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;IACb,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,oFAAoF;IACpF,6BAA6B;IAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC;IACnE,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC;AASD,MAAM,UAAU,gCAAgC,CAC9C,GAAoB,EACpB,OAAoB,EACpB,IAAwB;IAExB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEhC,gFAAgF;IAChF,+FAA+F;IAC/F,gGAAgG;IAChG,+FAA+F;IAC/F,4FAA4F;IAC5F,gGAAgG;IAChG,iCAAiC;IACjC,GAAG,CAAC,IAAI,CACN,GAAG,CAAC,6BAA6B,EACjC;QACE,MAAM,EAAE;YACN,QAAQ,EAAE;gBACR,WAAW,EAAE,oBAAoB;gBACjC,YAAY,EAAE,wBAAwB;gBACtC,uFAAuF;gBACvF,yDAAyD;gBACzD,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;aAClC;SACF;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,sFAAsF;QACtF,4CAA4C;QAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,KAAK,GAAG,wBAAwB,EAAE,CAAC;gBACrC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,KAAK,EAAE,WAAW,CAAC,QAAQ,KAAK,oBAAoB,wBAAwB,qBAAqB;iBAClG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAA2B,MAAM,OAAO,CAAC,mBAAmB,CACvE,MAAM,CAAC,IAAI,CAAC,OAAgC,EAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CACjB,CAAC;YACF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;YACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC3C,KAAK,CAAC,MAAM,CAAC,8BAA8B,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;gBACzD,MAAM,EAAE;oBACN,OAAO,EAAE,OAAO,CAAC,MAAM;oBACvB,QAAQ;oBACR,QAAQ;oBACR,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtE;aACF,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;gBAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,mFAAmF;YACnF,mFAAmF;YACnF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,gFAAgF;IAChF,0FAA0F;IAC1F,2FAA2F;IAC3F,6FAA6F;IAC7F,0FAA0F;IAC1F,8FAA8F;IAC9F,+FAA+F;IAC/F,EAAE;IACF,2FAA2F;IAC3F,mFAAmF;IACnF,GAAG,CAAC,IAAI,CACN,GAAG,CAAC,6BAA6B,EACjC;QACE,MAAM,EAAE;YACN,QAAQ,EAAE;gBACR,WAAW,EAAE,oBAAoB;gBACjC,YAAY,EAAE,mBAAmB;gBACjC,yEAAyE;gBACzE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;aACvC;SACF;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QACtB,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,WAAW,GAAG,+BAA+B,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,mBAAmB,WAAW,oBAAoB,+BAA+B,6EAA6E;aACtK,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,IAAI,KAAK,GAAG,wBAAwB,EAAE,CAAC;gBACrC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,KAAK,EAAE,aAAa,CAAC,QAAQ,KAAK,oBAAoB,wBAAwB,wBAAwB;iBACvG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,kFAAkF;QAClF,uFAAuF;QACvF,uFAAuF;QACvF,kFAAkF;QAClF,sBAAsB;QACtB,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACtF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EACH,sFAAsF;oBACtF,uDAAuD;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACjC,OAAO,KAAK;iBACT,IAAI,CAAC,GAAG,CAAC;iBACT,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,wBAAwB,CAAC,0BAA0B,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,uFAAuF;QACvF,oFAAoF;QACpF,iFAAiF;QACjF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,OAAO,KAAK;qBACT,IAAI,CAAC,GAAG,CAAC;qBACT,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,wCAAwC,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,KAAK,EAAE,YAAY,CAAC,2GAA2G;iBAChI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;QAC1C,sFAAsF;QACtF,gFAAgF;QAChF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7C,mFAAmF;gBACnF,+EAA+E;gBAC/E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC/B,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,qBAAqB,CAAC;QAC7C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG;YACd,kCAAkC,IAAI,qGAAqG;YAC3I,EAAE;YACF,kBAAkB;YAClB,CAAC,CAAC,YAAY;YACd,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBACpB,CAAC,CAAC,CAAC,EAAE,EAAE,kDAAkD,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC3F,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,SAAS,CAAC;gBACtB,OAAO;gBACP,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvC,QAAQ,EAAE,iBAAiB;gBAC3B,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,sFAAsF;YACtF,uFAAuF;YACvF,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;gBACzC,KAAK;gBACL,MAAM,EAAE;oBACN,QAAQ,EAAE,iBAAiB;oBAC3B,YAAY,EAAE,IAAI;oBAClB,OAAO,EAAE,OAAO,CAAC,MAAM;oBACvB,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D;aACF,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}