wicked-crew 0.7.1 → 0.7.3

package/dist/api/testing.d.ts

@@ -0,0 +1,117 @@
+/**
+ * The `/api/v1/testing/*` surface (crew-testing) — the wire behind the studio's Testing page:
+ * RUN the governance evals (does the steering corpus actually catch the behaviors it claims
+ * to?) and IMPORT a named eval corpus for later runs.
+ *
+ * Thin by design, like `governance-steering.ts`: validation is zod (strict, unknown keys named —
+ * the FINDING-031 doctrine); the evals themselves are the ENGINE's (`governanceEvals` pushes
+ * every sample through the same decide path enforcement runs, over a read-only connection to
+ * the steering store — the daemon computes no verdict of its own), and the report is the
+ * engine's serde output passed through VERBATIM (snake_case field names — the pinned crew/studio
+ * wire contract; the steering wave shipped a drift because each side guessed, so neither side
+ * reshapes it). Corpus import writes through the engine's knowledge seam under the
+ * `evals:<name>` scope — the daemon never opens a store itself.
+ *
+ * Error posture mirrors the steering surface: a build whose engine addon predates the evals
+ * bindings answers 501 (`GovernanceEvalsUnsupportedError` — "upgrade the engine"; wicked-core-ts
+ * 0.7.5 carries them, 0.7.4 does not), never 400 ("fix your request") — and never a crash: this
+ * daemon must serve both routes honestly against the released 0.7.4 addon.
+ */
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import { z } from 'zod';
+import { type CoreAdapter } from '../core/adapter.js';
+import type { Actor } from '../core/types.js';
+import type { AuditLog } from './audit.js';
+export declare const RunGovernanceEvalsSchema: z.ZodObject<{
+    type: z.ZodOptional<z.ZodEnum<["architecture", "development", "security", "testing", "operations", "compliance", "design-ux"]>>;
+    corpus: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    type?: "architecture" | "development" | "security" | "testing" | "operations" | "compliance" | "design-ux" | undefined;
+    corpus?: string | undefined;
+}, {
+    type?: "architecture" | "development" | "security" | "testing" | "operations" | "compliance" | "design-ux" | undefined;
+    corpus?: string | undefined;
+}>;
+export declare const ImportEvalCorpusSchema: z.ZodObject<{
+    name: z.ZodString;
+    samples: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        description: z.ZodString;
+        kind: z.ZodEnum<["good", "bad"]>;
+        steering_type: z.ZodString;
+        signals: z.ZodObject<{
+            phase: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+            files: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            content: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            content?: string | undefined;
+            tool?: string | undefined;
+            phase?: string | undefined;
+            files?: string[] | undefined;
+        }, {
+            content?: string | undefined;
+            tool?: string | undefined;
+            phase?: string | undefined;
+            files?: string[] | undefined;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        kind: "good" | "bad";
+        description: string;
+        steering_type: string;
+        signals: {
+            content?: string | undefined;
+            tool?: string | undefined;
+            phase?: string | undefined;
+            files?: string[] | undefined;
+        };
+    }, {
+        id: string;
+        kind: "good" | "bad";
+        description: string;
+        steering_type: string;
+        signals: {
+            content?: string | undefined;
+            tool?: string | undefined;
+            phase?: string | undefined;
+            files?: string[] | undefined;
+        };
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+    samples: {
+        id: string;
+        kind: "good" | "bad";
+        description: string;
+        steering_type: string;
+        signals: {
+            content?: string | undefined;
+            tool?: string | undefined;
+            phase?: string | undefined;
+            files?: string[] | undefined;
+        };
+    }[];
+}, {
+    name: string;
+    samples: {
+        id: string;
+        kind: "good" | "bad";
+        description: string;
+        steering_type: string;
+        signals: {
+            content?: string | undefined;
+            tool?: string | undefined;
+            phase?: string | undefined;
+            files?: string[] | undefined;
+        };
+    }[];
+}>;
+export interface TestingRoutesDeps {
+    audit: AuditLog;
+    actorOf: (req: FastifyRequest & {
+        actor?: Actor;
+    }) => Actor;
+}
+export declare function registerTestingRoutes(app: FastifyInstance, adapter: CoreAdapter, deps: TestingRoutesDeps): void;
+//# sourceMappingURL=testing.d.ts.map

package/dist/api/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../src/api/testing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAmC,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,KAAK,EAAE,KAAK,EAAwB,MAAM,kBAAkB,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAiD3C,eAAO,MAAM,wBAAwB;;;;;;;;;EAK1B,CAAC;AAEZ,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKxB,CAAC;AAEZ,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,GAAG;QAAE,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE,KAAK,KAAK,CAAC;CAC7D;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,iBAAiB,GACtB,IAAI,CAyFN"}

package/dist/api/testing.js

@@ -0,0 +1,152 @@
+/**
+ * The `/api/v1/testing/*` surface (crew-testing) — the wire behind the studio's Testing page:
+ * RUN the governance evals (does the steering corpus actually catch the behaviors it claims
+ * to?) and IMPORT a named eval corpus for later runs.
+ *
+ * Thin by design, like `governance-steering.ts`: validation is zod (strict, unknown keys named —
+ * the FINDING-031 doctrine); the evals themselves are the ENGINE's (`governanceEvals` pushes
+ * every sample through the same decide path enforcement runs, over a read-only connection to
+ * the steering store — the daemon computes no verdict of its own), and the report is the
+ * engine's serde output passed through VERBATIM (snake_case field names — the pinned crew/studio
+ * wire contract; the steering wave shipped a drift because each side guessed, so neither side
+ * reshapes it). Corpus import writes through the engine's knowledge seam under the
+ * `evals:<name>` scope — the daemon never opens a store itself.
+ *
+ * Error posture mirrors the steering surface: a build whose engine addon predates the evals
+ * bindings answers 501 (`GovernanceEvalsUnsupportedError` — "upgrade the engine"; wicked-core-ts
+ * 0.7.5 carries them, 0.7.4 does not), never 400 ("fix your request") — and never a crash: this
+ * daemon must serve both routes honestly against the released 0.7.4 addon.
+ */
+import { z } from 'zod';
+import { GovernanceEvalsUnsupportedError } from '../core/adapter.js';
+import { API_PREFIX } from './api-prefix.js';
+import { STEERING_TYPE_VALUES } from './governance-steering.js';
+const V = API_PREFIX;
+function message(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+/** Same unknown-key-naming 400 body builder as api/routes.ts (restated because that module does
+ *  not export it and importing routes.ts here would be a cycle through registerRoutes). */
+function invalidBody(err, what) {
+    const unknown = err.issues.flatMap((i) => (i.code === 'unrecognized_keys' ? i.keys : []));
+    const error = unknown.length > 0
+        ? `${what}: unknown field${unknown.length > 1 ? 's' : ''} ${unknown
+            .map((k) => `\`${k}\``)
+            .join(', ')} — this endpoint does not accept ${unknown.length > 1 ? 'them' : 'it'}, and ignoring ${unknown.length > 1 ? 'them' : 'it'} would run a different request than you sent`
+        : what;
+    return { error, details: err.issues };
+}
+// The sample shape is the PINNED wire contract (snake_case, the engine's serde spelling) —
+// `steering_type` stays an open string on purpose: the engine validates it against ITS
+// vocabulary, so engine-side validation stays the one spelling of what a type is (the steering
+// import doctrine). The run body's `type` IS closed here, because it selects from the same
+// 7-value facet the steering routes already export — one spelling, shared.
+const EvalSignalsSchema = z
+    .object({
+    phase: z.string().optional(),
+    tool: z.string().optional(),
+    files: z.array(z.string()).optional(),
+    content: z.string().optional(),
+})
+    .strict();
+const EvalSampleSchema = z
+    .object({
+    id: z.string().min(1),
+    description: z.string().min(1),
+    kind: z.enum(['good', 'bad']),
+    steering_type: z.string().min(1),
+    signals: EvalSignalsSchema,
+})
+    .strict();
+export const RunGovernanceEvalsSchema = z
+    .object({
+    type: z.enum(STEERING_TYPE_VALUES).optional(),
+    corpus: z.string().min(1).optional(),
+})
+    .strict();
+export const ImportEvalCorpusSchema = z
+    .object({
+    name: z.string().min(1),
+    samples: z.array(EvalSampleSchema).min(1),
+})
+    .strict();
+export function registerTestingRoutes(app, adapter, deps) {
+    const { audit, actorOf } = deps;
+    // ── Run the governance evals (the Testing page's Run action) ─────────────────
+    // Both fields optional — `{}` (or no body at all) means "the built-in default corpus, every
+    // steering type". The 200 body is the engine's serde report passed through verbatim
+    // (snake_case; `degraded` is `null`, kept in-band, when the run was full-fidelity).
+    app.post(`${V}/testing/evals/run`, {
+        config: {
+            manifest: {
+                requestType: 'RunGovernanceEvalsBody',
+                responseType: 'GovernanceEvalReport',
+                // 501: the installed engine addon predates the evals bindings (wicked-core-ts < 0.7.5)
+                // — upgrade the engine, the request was already correct.
+                statusCodes: [200, 400, 500, 501],
+            },
+        },
+    }, async (req, reply) => {
+        // `?? {}`: a bodyless POST is a legal spelling of the all-defaults run.
+        const parsed = RunGovernanceEvalsSchema.safeParse(req.body ?? {});
+        if (!parsed.success) {
+            return reply.code(400).send(invalidBody(parsed.error, 'Invalid evals run body'));
+        }
+        try {
+            // Passed through verbatim — no reshaping on our side of the seam: the report IS the
+            // pinned contract, snake_case and all (`summary.false_positives`, `nearest_rules`).
+            // (Spread-rebuilt args: exactOptionalPropertyTypes — an absent key, never `undefined`.)
+            return await adapter.runGovernanceEvals({
+                ...(parsed.data.type !== undefined ? { type: parsed.data.type } : {}),
+                ...(parsed.data.corpus !== undefined ? { corpus: parsed.data.corpus } : {}),
+            });
+        }
+        catch (err) {
+            if (err instanceof GovernanceEvalsUnsupportedError) {
+                return reply.code(501).send({ error: err.message });
+            }
+            // An engine/store failure is OURS, not the caller's — the body already parsed, so
+            // nothing here maps to 400.
+            return reply.code(500).send({ error: message(err) });
+        }
+    });
+    // ── Import a named eval corpus (the Testing page's Import action) ────────────
+    // Samples land in the knowledge store under the `evals:<name>` scope — the string a later
+    // evals run names as `corpus`. Audited (a write), unlike the run above (compute over the
+    // existing stores — the wiki-scoreboard read posture).
+    app.post(`${V}/testing/corpora/import`, {
+        config: {
+            manifest: {
+                requestType: 'ImportEvalCorpusBody',
+                responseType: 'ImportEvalCorpusResponse',
+                // 501: same presence gate as the run route — the two bindings ship together, and
+                // importing a corpus no engine on this host can run would be a trap, not a feature.
+                statusCodes: [200, 400, 500, 501],
+            },
+        },
+    }, async (req, reply) => {
+        const parsed = ImportEvalCorpusSchema.safeParse(req.body);
+        if (!parsed.success) {
+            return reply.code(400).send(invalidBody(parsed.error, 'Invalid corpus import body'));
+        }
+        try {
+            const result = await adapter.importGovernanceCorpus(parsed.data.name, parsed.data.samples);
+            audit.record('testing.corpus.imported', actorOf(req), {
+                detail: {
+                    name: parsed.data.name,
+                    samples: parsed.data.samples.length,
+                    scope: result.scope,
+                    embedded: result.embedded,
+                },
+            });
+            return result;
+        }
+        catch (err) {
+            if (err instanceof GovernanceEvalsUnsupportedError) {
+                return reply.code(501).send({ error: err.message });
+            }
+            return reply.code(500).send({ error: message(err) });
+        }
+    });
+}
+//# sourceMappingURL=testing.js.map

package/dist/api/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../../src/api/testing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,+BAA+B,EAAoB,MAAM,oBAAoB,CAAC;AAGvF,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,MAAM,CAAC,GAAG,UAAU,CAAC;AAErB,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;2FAC2F;AAC3F,SAAS,WAAW,CAAC,GAAe,EAAE,IAAY;IAChD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,GAAG,IAAI,kBAAkB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO;aAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;aACtB,IAAI,CAAC,IAAI,CAAC,oCACX,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAChC,kBAAkB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,8CAA8C;QACpG,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,2FAA2F;AAC3F,uFAAuF;AACvF,+FAA+F;AAC/F,2FAA2F;AAC3F,2EAA2E;AAC3E,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,iBAAiB;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAOZ,MAAM,UAAU,qBAAqB,CACnC,GAAoB,EACpB,OAAoB,EACpB,IAAuB;IAEvB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEhC,gFAAgF;IAChF,4FAA4F;IAC5F,oFAAoF;IACpF,oFAAoF;IACpF,GAAG,CAAC,IAAI,CACN,GAAG,CAAC,oBAAoB,EACxB;QACE,MAAM,EAAE;YACN,QAAQ,EAAE;gBACR,WAAW,EAAE,wBAAwB;gBACrC,YAAY,EAAE,sBAAsB;gBACpC,uFAAuF;gBACvF,yDAAyD;gBACzD,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;aAClC;SACF;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,wEAAwE;QACxE,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC;YACH,oFAAoF;YACpF,oFAAoF;YACpF,wFAAwF;YACxF,OAAO,MAAM,OAAO,CAAC,kBAAkB,CAAC;gBACtC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,+BAA+B,EAAE,CAAC;gBACnD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,kFAAkF;YAClF,4BAA4B;YAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,gFAAgF;IAChF,0FAA0F;IAC1F,yFAAyF;IACzF,uDAAuD;IACvD,GAAG,CAAC,IAAI,CACN,GAAG,CAAC,yBAAyB,EAC7B;QACE,MAAM,EAAE;YACN,QAAQ,EAAE;gBACR,WAAW,EAAE,sBAAsB;gBACnC,YAAY,EAAE,0BAA0B;gBACxC,iFAAiF;gBACjF,oFAAoF;gBACpF,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;aAClC;SACF;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,sBAAsB,CACjD,MAAM,CAAC,IAAI,CAAC,IAAI,EAChB,MAAM,CAAC,IAAI,CAAC,OAAiC,CAC9C,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,yBAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;gBACpD,MAAM,EAAE;oBACN,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;oBACtB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;oBACnC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B;aACF,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,+BAA+B,EAAE,CAAC;gBACnD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/campaign/supervision.d.ts

@@ -0,0 +1,296 @@
+/** Kill policy applied to IN-FLIGHT nodes when a campaign-level budget exhausts. */
+export type CampaignKillPolicy = 'kill-running' | 'abandon-running';
+/**
+ * The resolved budget policy a campaign runs under. All ceilings are explicit values —
+ * resolution (`resolveBudgetPolicy`) fails closed on malformed input rather than silently
+ * falling back, because a typo'd budget must never mean "unbounded".
+ */
+export interface CampaignBudgetPolicy {
+    /** Campaign-level wall-clock budget, ms. Includes time spent waiting on humans. */
+    wallClockBudgetMs: number;
+    /** Per-node wall-clock timeout, ms, counted while the node is `running` only. */
+    nodeTimeoutMs: number;
+    /**
+     * The TH-8-style `WICKED_UNIT_TIMEOUT_SECS` pin every node environment must carry.
+     * An ambient value is HONORED (it is the pin); only when the environment says nothing
+     * does the campaign default apply. Unpinned means the engine's 2-hour default — the
+     * exact unbounded-spend hazard this module exists to close.
+     */
+    unitTimeoutSecs: number;
+    /** Nightly cap: hard ceiling on schedulable nodes per campaign (fail-closed preflight). */
+    maxNodes: number;
+    /** Optional campaign cost ceiling, USD. Absent ⇒ wall-clock stays the only hard ceiling. */
+    maxCostUsd?: number;
+    /** What happens to in-flight nodes at budget exhaustion. */
+    killPolicy: CampaignKillPolicy;
+}
+/** Campaign-proven pin (the 2026-08 studio E2E campaign ran `WICKED_UNIT_TIMEOUT_SECS=900`). */
+export declare const DEFAULT_UNIT_TIMEOUT_SECS = 900;
+/** Default per-node timeout: 30 min ≈ 4× the observed 7m41s governed feature run. */
+export declare const DEFAULT_NODE_TIMEOUT_SECS = 1800;
+/** Default campaign wall-clock budget: 4 h (a 21-node ladder ≈ 2.7 h serial at observed rate). */
+export declare const DEFAULT_WALL_CLOCK_BUDGET_SECS = 14400;
+/** Default nightly node cap (the proven ladder was 21 scenarios; 25 leaves headroom). */
+export declare const DEFAULT_MAX_NODES = 25;
+export declare const DEFAULT_KILL_POLICY: CampaignKillPolicy;
+/** The env knobs `resolveBudgetPolicy` reads. All crew-side; documented in docs/campaign-budgets.md. */
+export declare const ENV_BUDGET_SECS = "WICKED_CAMPAIGN_BUDGET_SECS";
+export declare const ENV_NODE_TIMEOUT_SECS = "WICKED_CAMPAIGN_NODE_TIMEOUT_SECS";
+export declare const ENV_UNIT_TIMEOUT_SECS = "WICKED_UNIT_TIMEOUT_SECS";
+export declare const ENV_MAX_NODES = "WICKED_CAMPAIGN_MAX_NODES";
+export declare const ENV_MAX_COST_USD = "WICKED_CAMPAIGN_MAX_COST_USD";
+export declare const ENV_KILL_POLICY = "WICKED_CAMPAIGN_KILL_POLICY";
+/**
+ * Resolve the budget policy from an environment (defaults ↦ documented ceilings; malformed
+ * values throw — fail closed, TH-8 posture). Pass `process.env` in the daemon; tests pass
+ * a literal.
+ */
+export declare function resolveBudgetPolicy(env?: Record<string, string | undefined>): CampaignBudgetPolicy;
+/**
+ * The TH-8-style environment pins every campaign node MUST launch with. Until the full
+ * TH-8 environment manifest lands, this is the manifest's budget block: the interim
+ * mitigation test-R22 names ("the environment manifest must pin WICKED_UNIT_TIMEOUT_SECS").
+ */
+export declare function nodeEnvPins(policy: CampaignBudgetPolicy): Record<string, string>;
+/**
+ * Fail-closed preflight: a node environment must carry the exact `WICKED_UNIT_TIMEOUT_SECS`
+ * pin the policy resolved. Missing ⇒ the engine's 2-hour default applies silently;
+ * mismatched ⇒ the manifest lies about the environment. Both refuse.
+ */
+export declare function assertNodeEnvPinned(nodeEnv: Record<string, string | undefined>, policy: CampaignBudgetPolicy): void;
+/**
+ * Nightly cap, fail-closed (test-R22 interim: "the nightly recipe must cap campaign size
+ * explicitly"). Called with the campaign's node count BEFORE launch; over-cap refuses with
+ * both numbers so the operator sees exactly what to trim or raise.
+ */
+export declare function assertWithinNightlyCap(nodeCount: number, policy: CampaignBudgetPolicy): void;
+/**
+ * The scheduler-facing phase vocabulary, deliberately COARSER than core's `NodeStatus`
+ * (DES-CAMPAIGN-001 §2): supervision needs to know spend posture, not scheduling detail.
+ * `pending` = never launched (Pending/Ready); `running` = consuming a worker slot
+ * (Running); `awaiting-human` = quiet by design, no slot (AwaitingHuman/ReadyToResume);
+ * `terminal` = Completed/Failed/Blocked/Cancelled.
+ */
+export type SupervisedNodePhase = 'pending' | 'running' | 'awaiting-human' | 'terminal';
+/** One node as the scheduler reports it to a sweep. */
+export interface SchedulerNodeView {
+    nodeId: string;
+    phase: SupervisedNodePhase;
+    /** The node's live run id, when one was dispatched (core `node_run_id`). */
+    runId?: string;
+}
+/**
+ * The seam TH-9's campaign adapter implements (over core's `CancelRun` + the TS-bridge
+ * campaign state). Tests drive a fake. Every mutation carries the human-readable reason
+ * so the abort is visible AT THE SCHEDULER too, not only in supervision state.
+ */
+export interface SupervisedScheduler {
+    /** The campaign's nodes, right now. Read per sweep, never cached. */
+    listNodes(campaignId: string): Promise<SchedulerNodeView[]>;
+    /** Abort one live node (⇒ core CancelRun on its run). */
+    cancelNode(campaignId: string, nodeId: string, runId: string | undefined, reason: string): Promise<void>;
+    /** Prevent a never-launched node from ever dispatching. */
+    excludeNode(campaignId: string, nodeId: string, reason: string): Promise<void>;
+}
+/** Why a node was excluded/aborted by supervision. */
+export type ExclusionKind = 'campaign-budget' | 'cost-budget' | 'node-timeout';
+/** The excluded-with-reason record — the AC's "never silent" is this object existing. */
+export interface NodeExclusion {
+    kind: ExclusionKind;
+    reason: string;
+    /** ISO-8601 exclusion time (supervisor clock). */
+    at: string;
+    /**
+     * How the exclusion was effected: `excluded` = never launched, blocked at dispatch;
+     * `cancelled` = in-flight, killed; `abandoned` = in-flight, left to finish under
+     * `abandon-running` (still excluded from any post-budget launch, still reported).
+     */
+    applied: 'excluded' | 'cancelled' | 'abandoned';
+}
+/** Per-node cost as recorded in evidence. Wall-clock is supervisor-stamped, always present. */
+export interface NodeCost {
+    /** Wall-clock the node spent `running` (ms), summed across observations. */
+    wallMs: number;
+    /** USD figure reported by the pipeline for this node, when its CLI exposes one. */
+    usd?: number;
+    inputTokens?: number;
+    outputTokens?: number;
+}
+/** Supervision's view of one node. */
+export interface NodeSupervision {
+    nodeId: string;
+    phase: SupervisedNodePhase;
+    runId?: string;
+    /** Epoch ms the node was first observed `running`. */
+    startedAt?: number;
+    cost: NodeCost;
+    exclusion?: NodeExclusion;
+}
+/** Campaign-level budget exhaustion record. */
+export interface BudgetExhaustion {
+    kind: 'wall-clock' | 'cost';
+    /** ISO-8601. */
+    at: string;
+    /** What was spent when the ceiling tripped (ms for wall-clock, USD for cost). */
+    spent: number;
+    /** The ceiling that tripped (ms for wall-clock, USD for cost). */
+    budget: number;
+    policyApplied: CampaignKillPolicy;
+}
+/** The full supervision state for one campaign — TH-9's `GET /campaigns/:id` merges this. */
+export interface CampaignSupervisionState {
+    campaignId: string;
+    policy: CampaignBudgetPolicy;
+    /** Epoch ms supervision began (campaign launch). */
+    startedAt: number;
+    /** Wall-clock elapsed at the last sweep, ms. */
+    elapsedMs: number;
+    /** Total recorded USD cost across nodes (absent until any node reports one). */
+    totalCostUsd?: number;
+    /** Set exactly once, when a campaign-level budget exhausts. The abort IS visible here. */
+    exhausted?: BudgetExhaustion;
+    nodes: NodeSupervision[];
+}
+/**
+ * Synthetic /ws frame: a campaign-level budget exhausted. LOCAL type like
+ * `WorkerStalledFrame` — NOTE for the next `wicked-crew-api-types` release: add this frame
+ * and `campaignNodeExcluded` to the published contract (forward-additive on the wire).
+ */
+export type CampaignBudgetExceededFrame = {
+    type: 'campaignBudgetExceeded';
+    campaign: string;
+    kind: 'wall-clock' | 'cost';
+    /** ms for wall-clock, USD for cost. */
+    budget: number;
+    spent: number;
+    policyApplied: CampaignKillPolicy;
+    /** Node ids excluded/aborted by this exhaustion, for the scoreboard's immediate redraw. */
+    nodes: string[];
+};
+/** Synthetic /ws frame: one node was excluded/aborted by supervision (incl. node timeouts). */
+export type CampaignNodeExcludedFrame = {
+    type: 'campaignNodeExcluded';
+    campaign: string;
+    node: string;
+    kind: ExclusionKind;
+    reason: string;
+    applied: NodeExclusion['applied'];
+};
+export interface CampaignSupervisorDeps {
+    scheduler: SupervisedScheduler;
+    /** The /ws fan-out for synthetic frames (`events/bus.ts` `broadcast` in the daemon). */
+    broadcast: (frame: CampaignBudgetExceededFrame | CampaignNodeExcludedFrame) => void;
+    /** Clock (tests stub it). */
+    now?: () => number;
+    /** Wired to the daemon's warn logger — an abort is an operator-attention signal. */
+    log?: (m: string) => void;
+}
+/** Default sweep cadence: budgets are minutes-scale; 15 s keeps overshoot ≪ any ceiling. */
+export declare const DEFAULT_SUPERVISION_SWEEP_INTERVAL_MS = 15000;
+export declare class CampaignSupervisor {
+    private readonly deps;
+    private readonly campaigns;
+    private readonly now;
+    private readonly log;
+    private handle;
+    private sweeping;
+    constructor(deps: CampaignSupervisorDeps);
+    /**
+     * Begin supervising a campaign under a policy. Call at launch — the wall clock starts
+     * HERE, not at the first sweep. Re-registering an id is a bug (two clocks, one spend).
+     */
+    supervise(campaignId: string, policy: CampaignBudgetPolicy): void;
+    /**
+     * Stop ENFORCING (campaign reached a terminal status). State stays readable — deliberately
+     * no delete, or a post-terminal report would be irrecoverable. Also reached automatically
+     * when a sweep observes every node terminal.
+     */
+    release(campaignId: string): void;
+    /** Record pipeline-reported cost for a node (tokens/USD — wall-clock is supervisor-owned). */
+    recordNodeCost(campaignId: string, nodeId: string, cost: {
+        usd?: number;
+        inputTokens?: number;
+        outputTokens?: number;
+    }): void;
+    /** The supervision state for one campaign, or undefined when it was never supervised. */
+    state(campaignId: string): CampaignSupervisionState | undefined;
+    /** One enforcement pass over every supervised campaign. Tests drive it directly. */
+    sweep(): Promise<void>;
+    /** Arm the periodic sweep. Unref'd — the daemon's server lifecycle owns shutdown. */
+    start(intervalMs?: number): void;
+    stop(): void;
+    private sweepCampaign;
+    /**
+     * Abort everything the budget no longer covers. Every touched node gets an
+     * excluded-with-reason record; one campaignBudgetExceeded frame + one
+     * campaignNodeExcluded frame per node ride the /ws fan-out; the warn log names them all.
+     */
+    private exhaust;
+    private excludeOne;
+    private trackNode;
+    private totalCostUsd;
+}
+/** Filename of the supervision evidence artifact inside a campaign's evidence dir. */
+export declare const SUPERVISION_REPORT_FILENAME = "campaign-supervision.json";
+/**
+ * The `campaign-supervision.json` evidence artifact (snake_case like the ledger's
+ * manifests). Per-node cost rows are what the TH-14 scoreboard's cost column diffs
+ * between campaigns — a cost regression shows up exactly like a verdict regression.
+ * Deliberately NOT new fields on wicked-ledger's manifest 2.1: that schema moves through
+ * its owner's release train (ADR 0006); this artifact rides in the same evidence dir.
+ */
+export interface CampaignSupervisionReport {
+    report: 'campaign-supervision';
+    version: 1;
+    campaign_id: string;
+    generated_at: string;
+    policy: {
+        wall_clock_budget_secs: number;
+        node_timeout_secs: number;
+        /** The TH-8-style WICKED_UNIT_TIMEOUT_SECS pin nodes ran under. */
+        unit_timeout_pin_secs: number;
+        max_nodes: number;
+        max_cost_usd?: number;
+        kill_policy: CampaignKillPolicy;
+    };
+    started_at: string;
+    elapsed_ms: number;
+    budget: {
+        exhausted: boolean;
+        kind?: 'wall-clock' | 'cost';
+        at?: string;
+        policy_applied?: CampaignKillPolicy;
+    };
+    totals: {
+        wall_ms: number;
+        cost_usd?: number;
+        input_tokens?: number;
+        output_tokens?: number;
+    };
+    nodes: Array<{
+        node_id: string;
+        phase: SupervisedNodePhase;
+        run_id?: string;
+        cost: {
+            wall_ms: number;
+            usd?: number;
+            input_tokens?: number;
+            output_tokens?: number;
+        };
+        excluded?: {
+            kind: ExclusionKind;
+            reason: string;
+            at: string;
+            applied: NodeExclusion['applied'];
+        };
+    }>;
+}
+/** Build the evidence report from live supervision state. */
+export declare function buildSupervisionReport(state: CampaignSupervisionState): CampaignSupervisionReport;
+/**
+ * Write the report into a campaign's evidence directory (caller resolves the dir — the
+ * QE pipeline owns evidence placement; crew never writes ledger DOMAIN records, and this
+ * is an artifact file, not a runs/verdicts row). Returns the absolute path written.
+ */
+export declare function writeSupervisionReport(evidenceDir: string, report: CampaignSupervisionReport): Promise<string>;
+//# sourceMappingURL=supervision.d.ts.map

package/dist/campaign/supervision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervision.d.ts","sourceRoot":"","sources":["../../src/campaign/supervision.ts"],"names":[],"mappings":"AAgDA,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,iBAAiB,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,mFAAmF;IACnF,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,2FAA2F;IAC3F,QAAQ,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,UAAU,EAAE,kBAAkB,CAAC;CAChC;AAED,gGAAgG;AAChG,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,qFAAqF;AACrF,eAAO,MAAM,yBAAyB,OAAQ,CAAC;AAC/C,kGAAkG;AAClG,eAAO,MAAM,8BAA8B,QAAS,CAAC;AACrD,yFAAyF;AACzF,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,eAAO,MAAM,mBAAmB,EAAE,kBAAmC,CAAC;AAEtE,wGAAwG;AACxG,eAAO,MAAM,eAAe,gCAAgC,CAAC;AAC7D,eAAO,MAAM,qBAAqB,sCAAsC,CAAC;AACzE,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAChE,eAAO,MAAM,aAAa,8BAA8B,CAAC;AACzD,eAAO,MAAM,gBAAgB,iCAAiC,CAAC;AAC/D,eAAO,MAAM,eAAe,gCAAgC,CAAC;AAe7D;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,oBAAoB,CAwDtB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEhF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC3C,MAAM,EAAE,oBAAoB,GAC3B,IAAI,CAgBN;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAW5F;AAMD;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,GAAG,UAAU,CAAC;AAExF,uDAAuD;AACvD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,mBAAmB,CAAC;IAC3B,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC5D,yDAAyD;IACzD,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzG,2DAA2D;IAC3D,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChF;AAED,sDAAsD;AACtD,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAAG,aAAa,GAAG,cAAc,CAAC;AAE/E,yFAAyF;AACzF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,OAAO,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC;CACjD;AAED,+FAA+F;AAC/F,MAAM,WAAW,QAAQ;IACvB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,sCAAsC;AACtC,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAQD,+CAA+C;AAC/C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,YAAY,GAAG,MAAM,CAAC;IAC5B,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,kBAAkB,CAAC;CACnC;AAED,6FAA6F;AAC7F,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,YAAY,GAAG,MAAM,CAAC;IAC5B,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,kBAAkB,CAAC;IAClC,2FAA2F;IAC3F,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,+FAA+F;AAC/F,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,mBAAmB,CAAC;IAC/B,wFAAwF;IACxF,SAAS,EAAE,CAAC,KAAK,EAAE,2BAA2B,GAAG,yBAAyB,KAAK,IAAI,CAAC;IACpF,6BAA6B;IAC7B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,oFAAoF;IACpF,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3B;AAED,4FAA4F;AAC5F,eAAO,MAAM,qCAAqC,QAAS,CAAC;AAa5D,qBAAa,kBAAkB;IAOjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAsB;IAC1C,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,QAAQ,CAAS;gBAEI,IAAI,EAAE,sBAAsB;IAKzD;;;OAGG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI;IAajE;;;;OAIG;IACH,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAKjC,8FAA8F;IAC9F,cAAc,CACZ,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAClE,IAAI;IAaP,yFAAyF;IACzF,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS;IAuB/D,oFAAoF;IAC9E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB5B,qFAAqF;IACrF,KAAK,CAAC,UAAU,SAAwC,GAAG,IAAI;IAU/D,IAAI,IAAI,IAAI;YAOE,aAAa;IA2E3B;;;;OAIG;YACW,OAAO;YAmDP,UAAU;IA2BxB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,YAAY;CAOrB;AAMD,sFAAsF;AACtF,eAAO,MAAM,2BAA2B,8BAA8B,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE;QACN,sBAAsB,EAAE,MAAM,CAAC;QAC/B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,mEAAmE;QACnE,qBAAqB,EAAE,MAAM,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,kBAAkB,CAAC;KACjC,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QACN,SAAS,EAAE,OAAO,CAAC;QACnB,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC;QAC7B,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,cAAc,CAAC,EAAE,kBAAkB,CAAC;KACrC,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,KAAK,EAAE,KAAK,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,mBAAmB,CAAC;QAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE;YACJ,OAAO,EAAE,MAAM,CAAC;YAChB,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,aAAa,CAAC,EAAE,MAAM,CAAC;SACxB,CAAC;QACF,QAAQ,CAAC,EAAE;YACT,IAAI,EAAE,aAAa,CAAC;YACpB,MAAM,EAAE,MAAM,CAAC;YACf,EAAE,EAAE,MAAM,CAAC;YACX,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;SACnC,CAAC;KACH,CAAC,CAAC;CACJ;AAED,6DAA6D;AAC7D,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,wBAAwB,GAAG,yBAAyB,CA8DjG;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,MAAM,CAAC,CAIjB"}