[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_228":-5,"_231":232,"_233":234},"routes/shell",{"_40":41,"_227":-5,"_228":-5,"_229":230},"routes/repo",{"_33":-7,"_34":35,"_36":37,"_38":39,"_40":41,"_42":31,"_43":31,"_44":31,"_45":31,"_46":31,"_47":31,"_48":49,"_50":49,"_51":31,"_52":-7,"_53":-7,"_54":55,"_56":57,"_58":59,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68},"routes/repo.blob",{"_13":14,"_15":16,"_17":18,"_19":20,"_21":14,"_22":23,"_24":-5,"_25":26,"_27":28,"_28":29,"_30":31,"_32":14},"ref","935ece24afa0ca79c8a18f5bdfb78e67b8632e4e","path","packages/question/src/draft.ts","oid","ff690f19f6196b01776e178b8f7e45ab88d9689f","size",8076,"commit","mounts",[],"source","plain",{"_13":14,"_15":16},"kind","text","/**\n * The shared answer draft.\n *\n * Everyone editing a questionnaire works on one collaborative document rather\n * than private answers, because the result is a single decision. The VM holds\n * the authoritative model and validates every patch against the definition\n * before accepting it — a client cannot introduce a shape the definition does\n * not describe.\n */\n\nimport * as crdt from \"json-joy/lib/json-crdt\";\n\nimport * as limits from \"./limits\";\nimport { reject } from \"./schema\";\n\nimport type { NodeBuilder } from \"json-joy/lib/json-crdt\";\nimport type { Definition, Item } from \"./schema\";\nimport type { Question } from \"@chopin/protocol\";\n\nexport type Mode = \"choices\" | \"custom\";\nexport type Draft = Question.DraftAnswer;\nexport type Drafts = Record;\n\nexport type Model = crdt.Model>>>;\n\n/**\n * Build the initial draft for a definition.\n *\n * Answer state is a fixed shape derived from the questions, so a patch that\n * adds or removes keys is invalid by construction rather than by convention.\n */\nexport function create(definition: Definition): Model {\n\tlet questions: Record = {};\n\n\tfor (let question of definition.questions) {\n\t\tlet options: Record = {};\n\t\tfor (let option of question.options) {\n\t\t\toptions[option.id] = crdt.schema.val(crdt.schema.con(false));\n\t\t}\n\n\t\tquestions[question.id] = crdt.schema.obj({\n\t\t\tmode: crdt.schema.val(\n\t\t\t\tcrdt.schema.con(question.verbatim && !question.options.length ? \"custom\" : \"choices\"),\n\t\t\t),\n\t\t\tchoice: crdt.schema.val(crdt.schema.con(null)),\n\t\t\toptions: crdt.schema.obj(options),\n\t\t\t// A CRDT string, so two people typing a custom answer merge rather\n\t\t\t// than overwrite.\n\t\t\tcustom: crdt.schema.str(\"\"),\n\t\t});\n\t}\n\n\tlet model = crdt.Model.create(crdt.schema.obj(questions));\n\tmodel.api.flush();\n\n\tif (model.toBinary().byteLength > limits.MAX_MODEL_BYTES) {\n\t\treject(\n\t\t\t`Questionnaire collaboration state exceeds the ${limits.MAX_MODEL_BYTES / 1024} KiB limit`,\n\t\t);\n\t}\n\n\treturn model;\n}\n\n/** Restore a complete shared draft, proving it still matches its definition. */\nexport function restore(binary: number[], definition: Definition): Model {\n\tif (binary.length > limits.MAX_MODEL_BYTES) {\n\t\treject(\n\t\t\t`Questionnaire collaboration state exceeds the ${limits.MAX_MODEL_BYTES / 1024} KiB limit`,\n\t\t);\n\t}\n\tlet model = crdt.Model.fromBinary>>>(\n\t\tnew Uint8Array(binary),\n\t);\n\tread(model, definition);\n\treturn model;\n}\n\nfunction keys(node: crdt.ObjNode, expected: string[], name: string): void {\n\tlet actual = [...node.keys.keys()].sort();\n\tlet sorted = expected.toSorted();\n\tif (actual.length !== sorted.length || actual.some((key, index) => key !== sorted[index])) {\n\t\treject(`${name} has invalid keys`);\n\t}\n}\n\nfunction register(node: unknown, name: string): unknown {\n\tif (!(node instanceof crdt.ValNode)) reject(`${name} must be an LWW register`);\n\treturn (node as crdt.ValNode).view();\n}\n\n/**\n * Read a model as drafts, rejecting anything that does not match the definition.\n *\n * This is the security boundary for collaborative edits: the VM applies a patch\n * to a clone and runs this before committing, so a malformed patch never\n * reaches the authoritative model.\n *\n * @throws {QuestionError}\n */\nexport function read(model: Model, definition: Definition): Drafts {\n\tlet root = model.root.child();\n\tif (!(root instanceof crdt.ObjNode)) reject(\"Questionnaire root must be an object\");\n\n\tkeys(root, definition.questions.map(question => question.id), \"Questionnaire root\");\n\n\tlet drafts: Drafts = {};\n\n\tfor (let question of definition.questions) {\n\t\tlet node = root.get(question.id);\n\t\tif (!(node instanceof crdt.ObjNode)) reject(`${question.id} must be an object`);\n\t\tkeys(node, [\"mode\", \"choice\", \"options\", \"custom\"], question.id);\n\n\t\tlet mode = register(node.get(\"mode\"), `${question.id}.mode`);\n\t\tif (mode !== \"choices\" && mode !== \"custom\") reject(`${question.id}.mode is invalid`);\n\n\t\tlet choice = register(node.get(\"choice\"), `${question.id}.choice`);\n\t\tif (choice !== null && typeof choice !== \"string\") {\n\t\t\treject(`${question.id}.choice must be an option ID or null`);\n\t\t}\n\t\tif (typeof choice === \"string\" && !question.options.some(option => option.id === choice)) {\n\t\t\treject(`${question.id}.choice contains an invalid option ID`);\n\t\t}\n\n\t\tlet optionNode = node.get(\"options\");\n\t\tif (!(optionNode instanceof crdt.ObjNode)) reject(`${question.id}.options must be an object`);\n\t\t// Options can be appended after a draft exists, and a draft never has to\n\t\t// be rewritten for it: a key is present only once somebody selects that\n\t\t// option. Keys must still belong to the definition.\n\t\tlet known = new Set(question.options.map(option => option.id));\n\t\tfor (let key of optionNode.keys.keys()) {\n\t\t\tif (!known.has(key)) reject(`${question.id}.options has invalid keys`);\n\t\t}\n\n\t\tlet options: Record = {};\n\t\tfor (let option of question.options) {\n\t\t\tlet node = optionNode.get(option.id);\n\t\t\tif (node === undefined) {\n\t\t\t\toptions[option.id] = false;\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tlet selected = register(node, `${question.id}.options.${option.id}`);\n\t\t\tif (typeof selected !== \"boolean\") {\n\t\t\t\treject(`${question.id}.options.${option.id} must be a boolean LWW register`);\n\t\t\t}\n\t\t\toptions[option.id] = selected;\n\t\t}\n\n\t\tlet custom = node.get(\"custom\");\n\t\tif (!(custom instanceof crdt.StrNode)) reject(`${question.id}.custom must be a CRDT string`);\n\t\tlet value = (custom as crdt.StrNode).view();\n\t\tif (!question.verbatim && value.length > limits.MAX_CUSTOM) {\n\t\t\treject(`${question.id}.custom exceeds ${limits.MAX_CUSTOM} characters`);\n\t\t}\n\n\t\tdrafts[question.id] = { mode: mode as Mode, choice, options, custom: value };\n\t}\n\n\treturn drafts;\n}\n\n/** Whether a question has enough of an answer to submit. */\nexport function answered(question: Item, draft: Draft | undefined): boolean {\n\tif (!draft) return false;\n\tif (draft.mode === \"custom\") return question.verbatim || !!draft.custom.trim();\n\tif (question.multiple) return question.options.some(option => draft.options[option.id]);\n\treturn question.options.some(option => option.id === draft.choice);\n}\n\n/** Reject a patch that is malformed or too large before it is applied. */\nexport function assertPatch(binary: number[]): void {\n\tif (!Array.isArray(binary) || binary.length === 0) reject(\"Question edit patch is empty\");\n\tif (binary.length > limits.MAX_PATCH_BYTES) {\n\t\treject(`Question edit exceeds the ${limits.MAX_PATCH_BYTES / 1024} KiB patch limit`);\n\t}\n\tif (binary.some(byte => !Number.isInteger(byte) || byte < 0 || byte > 255)) {\n\t\treject(\"Question edit patch contains invalid bytes\");\n\t}\n}\n\nexport type Applied =\n\t| { ok: true; model: Model; changed: boolean }\n\t| { ok: false; message: string };\n\n/**\n * Apply one patch, if the result is still a draft the definition describes.\n *\n * The gate, and the reason a client cannot corrupt a shared answer: the patch\n * lands on a clone, the clone is read back against the definition, and only a\n * clone that survives that becomes the model. Anything else is a message.\n *\n * A patch that changes nothing reports `changed: false` rather than failing.\n * Peers have nothing to apply, and bumping a revision for it would invalidate\n * submissions that are in flight for no reason.\n */\nexport function apply(model: Model, definition: Definition, binary: number[]): Applied {\n\ttry {\n\t\tassertPatch(binary);\n\n\t\tlet before = model.toBinary();\n\t\tlet next = model.clone();\n\t\tnext.applyPatch(crdt.Patch.fromBinary(new Uint8Array(binary)));\n\t\tread(next, definition);\n\n\t\tlet after = next.toBinary();\n\t\tif (after.byteLength > limits.MAX_MODEL_BYTES) {\n\t\t\treject(`Answer exceeds the ${limits.MAX_MODEL_BYTES / 1024} KiB limit`);\n\t\t}\n\n\t\tlet changed = after.length !== before.length\n\t\t\t|| after.some((byte, index) => byte !== before[index]);\n\n\t\treturn { ok: true, model: changed ? next : model, changed };\n\t} catch (err) {\n\t\treturn { ok: false, message: err instanceof Error ? err.message : String(err) };\n\t}\n}\n\nexport { crdt };\n","editable",false,"branch","documentNavigation","repo","githubnext/chopin","repoId","7d1a8ac3-35b0-4dea-85d4-06a980f3bada","ownerId","org:89615882","site","nexthub","private","admin","settings","maintainer","triage","starred","stars",0,"watchers","watching","pinned","notify","views",[183,184,185,186,187,188,189,190,191,192,193,194,195],"navigation",{"_54":55,"_139":140,"_141":142,"_143":144,"_145":146,"_147":148,"_149":150},"sources",[],"viewer","meta",{"_131":132,"_133":134,"_135":136,"_42":31,"_137":126,"_138":31,"_48":49,"_50":49},"branches",[73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130],"tags",[69,70,71,72],"cloneUrl","https://git.nexthub.sh/githubnext/chopin.git","color-controls-slice-1","color-controls-slice-2","color-controls-slice-3","color-controls-slice-4","Krzysztof-Cieslak-patch-1","Krzysztof-Cieslak-patch-2","Maggie/app-preview-toolkit","Maggie/ci-playwright-install-timeout","Maggie/collaborative-visual-decision","Maggie/design-audit","Maggie/generic-visual-decision-runtime","Maggie/impeccable-chopin-metadata","Maggie/jev-chat-product","Maggie/jev-composed-assessment","Maggie/native-document-layouts","Maggie/openui-composition-product","Maggie/openui-composition-trial","Maggie/planner-visual-authoring","Maggie/planner-visual-requests","Maggie/visual-selection-eval","artifacts/pr-419-live-preview-20261009","automation/pr-maintenance-state","automation/use-effect/callout-disabled-picker-8cf9e49ba5c09471","automation/use-effect/collaboration-options-ref-4e3a5a08a879a5ae","automation/use-effect/room-workspace-effective-access-a57d40866c71bed0","chore/bun-1.4.2","color-controls","color-controls-plan","comments","design-pr-assets","design/archived-decisions-badge","design/channel-route-remount","design/chat-decision-entry","design/conversation-analysis-markers","design/decision-evidence","design/settled-line-icon","dev/integration","diagram-step-controls","feat/liveapp-frontend-pilot","feat/local-experiments","feat/local-launcher-tracer","fix/autolink-mdx-crash","github-pills/2-pills","github-pills/3-hover-card","maggie/app-preview-toolkit","maggie/ci-playwright-install-timeout","maggie/collaborative-visual-decision","maggie/design-audit","maggie/generic-visual-decision-runtime","maggie/impeccable-chopin-metadata","maggie/jev-composed-assessment","maggie/native-document-layouts","maggie/openui-composition-product","maggie/openui-composition-trial","maggie/planner-visual-authoring","maggie/planner-visual-requests","maggie/visual-selection-eval","main","plain-text-fence-chrome","tokens/09-copy","wireframes/2-renderer","wireframes/3-planner","description","Let's compose rich plans together","owner","githubnext","section","","head","empty","pins",[165,166,167],"documents",{"_160":161,"_162":163},"code",{"_156":157,"_158":159},"automations",{"_153":154,"_155":-5},"delivery",{"_151":49,"_152":-5},"tag","04zvKQ8QOrDUF8TO1Ovz0Zy8_TT","releases","applications","workflows",3,"deployments","commits",1000,"changes",13,"counts",{"_164":163},"total",11,"issue",{"_168":158,"_170":181,"_15":158,"_172":182,"_52":174,"_175":31,"_176":174,"_177":159},{"_168":178,"_170":179,"_15":178,"_172":180,"_52":174,"_175":31,"_176":174,"_177":49},{"_168":169,"_170":171,"_15":169,"_172":173,"_52":174,"_175":31,"_176":174,"_177":163},"id","issues","name","Issues","filters",{},true,"saved","pinnable","count","tasks","Tasks",{},"Changes",{},{"_168":158,"_170":181,"_15":158,"_172":226,"_52":174,"_175":31,"_176":174},{"_168":178,"_170":179,"_15":178,"_172":225,"_52":174,"_175":31,"_176":174},{"_168":169,"_170":171,"_15":169,"_172":224,"_52":174,"_175":31,"_176":174},{"_168":221,"_170":222,"_15":221,"_172":223,"_52":31,"_175":31,"_176":174},{"_168":218,"_170":219,"_15":218,"_172":220,"_52":31,"_175":31,"_176":174},{"_168":153,"_170":216,"_15":145,"_172":217,"_52":31,"_175":31,"_176":174},{"_168":155,"_170":213,"_15":214,"_172":215,"_52":31,"_175":31,"_176":174},{"_168":151,"_170":211,"_15":151,"_172":212,"_52":31,"_175":31,"_176":174},{"_168":207,"_170":208,"_15":209,"_172":210,"_52":31,"_175":31,"_176":174},{"_168":141,"_170":205,"_15":141,"_172":206,"_52":31,"_175":31,"_176":31},{"_168":202,"_170":203,"_15":202,"_172":204,"_52":31,"_175":31,"_176":31},{"_168":199,"_170":200,"_15":199,"_172":201,"_52":31,"_175":31,"_176":31},{"_168":196,"_170":197,"_15":196,"_172":198,"_52":31,"_175":31,"_176":31},"decisions","Decisions",{},"changelog","Changelog",{},"roadmap","Roadmap",{},"Documents",{},"activity","Activity","insights",{},"Releases",{},"Deployments","automations/deployments",{},"Workflows",{},"discussions","Discussions",{},"goals","Goals",{},{},{},{},"groups","user","agents",[],"now",1794437757901,"sidebar","expanded"]