@agimon-ai/po-core 0.0.0-alpha.2 → 0.0.0-alpha.21

package/dist/headlessProtocol.mjs

@@ -0,0 +1,326 @@
+import { harnessErrorMessage } from "./src/server/harnessErrorMessage.mjs";
+import { PO_SERVER_HOST } from "./src/schemas/protocolContracts.mjs";
+import { PoChannelsContract, PoChannelsStateSchema } from "./src/schemas/protocolChannelsContract.mjs";
+import { SessionSummarySchema, WorkspaceSchema } from "./src/schemas/httpApiContracts.mjs";
+import { HubNoticeSchema, PoHubContract } from "./src/schemas/protocolHubContract.mjs";
+import { PoThreadContract, PoThreadFrameSchema } from "./src/schemas/protocolThreadContract.mjs";
+import "./sessionProtocol.mjs";
+import { serveAgentSessions } from "./src/pi/piSessionRuntime.mjs";
+import { reportingLargeFrames } from "./src/server/largeFrameLink.mjs";
+import { createThreadJournals } from "./src/server/threadJournals.mjs";
+import { randomUUID } from "node:crypto";
+import { Type } from "typebox";
+import { createHost, forbidden } from "@earendil-works/chord";
+//#region src/server/headlessProtocol.ts
+const MAX_PENDING_NOTICES = 64;
+/** A browser switching back to a thread quickly keeps its tail open. */
+const THREAD_LINGER_MS = 5e3;
+function sessionView(session) {
+	return {
+		id: session.id,
+		...session.workspaceId === void 0 ? {} : { workspaceId: session.workspaceId },
+		...session.webComposition === void 0 ? {} : { webComposition: { ...session.webComposition } },
+		...session.nativeComposition === void 0 ? {} : { nativeComposition: { ...session.nativeComposition } },
+		name: session.name,
+		cwd: session.cwd,
+		createdAt: session.createdAt,
+		updatedAt: session.updatedAt ?? session.createdAt,
+		phase: session.phase ?? "idle",
+		phaseSince: session.phaseSince ?? session.createdAt,
+		attach: "attached",
+		pendingMessageCount: session.pendingMessageCount ?? 0,
+		everPrompted: session.everPrompted ?? false,
+		awaitingInput: session.awaitingInput ?? false,
+		...session.lastSettledAt === void 0 ? {} : { lastSettledAt: session.lastSettledAt },
+		...session.backgroundWorkActive == null ? {} : { backgroundWorkActive: session.backgroundWorkActive },
+		...session.git === void 0 ? {} : { git: {
+			branch: session.git.branch,
+			dirty: session.git.dirty
+		} },
+		...session.profile === void 0 ? {} : { profile: {
+			name: session.profile.name,
+			...session.profile.displayName === void 0 ? {} : { displayName: session.profile.displayName },
+			...session.profile.iconVersion === void 0 ? {} : { iconVersion: session.profile.iconVersion }
+		} },
+		...session.parentSessionId === void 0 ? {} : { parentSessionId: session.parentSessionId },
+		...session.sessionProvenance === void 0 ? {} : { sessionProvenance: session.sessionProvenance },
+		...session.groups === void 0 || session.groups.length === 0 ? {} : { groups: [...session.groups] },
+		...session.pendingSetups === void 0 ? {} : { pendingSetups: session.pendingSetups.map((setup) => ({
+			id: setup.id,
+			name: setup.name,
+			createdAt: setup.createdAt,
+			...setup.cwd === void 0 ? {} : { cwd: setup.cwd },
+			...setup.setupKind === void 0 ? {} : { setupKind: setup.setupKind },
+			...setup.status === void 0 ? {} : { status: setup.status },
+			...setup.errorCode === void 0 ? {} : { errorCode: setup.errorCode }
+		})) },
+		...session.activity === void 0 ? {} : { activity: {
+			label: session.activity.label,
+			...session.activity.attention === true ? { attention: true } : {},
+			...session.activity.since === void 0 ? {} : { since: session.activity.since }
+		} }
+	};
+}
+/**
+* A recorded session with no runtime behind it yet.
+*
+* Carries the same field set as a live session so the rail keys both by id and
+* swaps one for the other in place once the server reopens the journal.
+*/
+function dormantView(record) {
+	return {
+		id: record.sessionId,
+		workspaceId: record.workspaceId,
+		name: record.name,
+		cwd: record.cwd,
+		createdAt: record.createdAt,
+		updatedAt: record.createdAt,
+		phase: "idle",
+		phaseSince: record.createdAt,
+		attach: "attached",
+		pendingMessageCount: 0,
+		everPrompted: false,
+		awaitingInput: false,
+		dormant: true,
+		...record.parentSessionId === void 0 ? {} : { parentSessionId: record.parentSessionId },
+		...record.sessionProvenance === void 0 ? {} : { sessionProvenance: record.sessionProvenance },
+		...record.groups === void 0 || record.groups.length === 0 ? {} : { groups: [...record.groups] }
+	};
+}
+/** Each restarted session host gets a new generation, so its projection starts fresh. */
+const generations = /* @__PURE__ */ new WeakMap();
+let nextGeneration = 0;
+function generationOf(host) {
+	let generation = generations.get(host);
+	if (generation === void 0) {
+		generation = nextGeneration++;
+		generations.set(host, generation);
+	}
+	return generation;
+}
+function permitsSession(hub, mount, sessionId, authorize = () => true) {
+	const session = hub.session(sessionId);
+	return session !== void 0 && authorize(sessionId) && (mount.scope === "global" || session.workspaceId === mount.workspaceId && (mount.scope === "workspace" || mount.sessionId === sessionId));
+}
+function permitsDormant(mount, record) {
+	if (mount.scope === "global") return true;
+	if (record.workspaceId !== mount.workspaceId) return false;
+	return mount.scope === "workspace" || mount.sessionId === record.sessionId;
+}
+const eventsOf = (hub) => ({ subscribe: (listener) => hub.onEvent(listener) });
+/** One Chord host for every browser, native and relayed connection over the process-local hub. */
+function createHeadlessProtocol(options) {
+	const hub = options.hub;
+	const dormantSessions = () => options.dormantSessions === void 0 ? [] : options.dormantSessions();
+	const connections = /* @__PURE__ */ new Map();
+	const threads = createThreadJournals({ resolve: (sessionId, threadId) => hub.childThread(sessionId, threadId) });
+	const host = createHost({
+		name: PO_SERVER_HOST,
+		self: { connectionId: PO_SERVER_HOST },
+		principalKey: (principal) => principal.connectionId,
+		onError: (error) => options.onNotice?.(`headless protocol error (${harnessErrorMessage(error)})`)
+	});
+	const connectionOf = (principal) => {
+		const connection = connections.get(principal.connectionId);
+		if (connection === void 0) throw forbidden("This connection has closed.");
+		return {
+			...connection,
+			connectionId: principal.connectionId
+		};
+	};
+	const reachable = (connection, sessionId) => permitsSession(hub, connection.mount, sessionId, (id) => connection.authorizeSession(id));
+	const stopClaims = hub.computerUse?.subscribe?.(() => {
+		for (const [connectionId, connection] of connections) {
+			let revoked = false;
+			for (const sessionId of connection.sessions) if (!connection.authorizeSession(sessionId)) revoked = true;
+			if (!revoked) continue;
+			connection.sessions.clear();
+			host.invalidatePrincipal((principal) => principal.connectionId === connectionId);
+		}
+	});
+	host.serve(PoHubContract, (_input, principal, self) => {
+		const connection = connectionOf(principal);
+		const { mount } = connection;
+		const visibleSessions = () => {
+			const views = {};
+			for (const session of hub.snapshot()) if (reachable(connection, session.id)) views[session.id] = sessionView(session);
+			const registered = new Set(hub.workspaces().map((workspace) => workspace.id));
+			for (const record of dormantSessions()) if (views[record.sessionId] === void 0 && registered.has(record.workspaceId) && connection.authorizeSession(record.sessionId) && permitsDormant(mount, record)) views[record.sessionId] = dormantView(record);
+			return views;
+		};
+		const visibleWorkspaces = () => {
+			const views = {};
+			for (const workspace of hub.workspaces()) if (mount.scope === "global" || workspace.id === mount.workspaceId) views[workspace.id] = {
+				id: workspace.id,
+				root: workspace.root,
+				...workspace.name === void 0 ? {} : { name: workspace.name },
+				available: workspace.available !== false
+			};
+			return views;
+		};
+		const sessions = self.state("sessions", Type.Record(Type.String(), SessionSummarySchema), { init: visibleSessions });
+		const workspaces = self.state("workspaces", Type.Record(Type.String(), WorkspaceSchema), { init: visibleWorkspaces });
+		const pending = self.state("pending", Type.Array(HubNoticeSchema), []);
+		self.on("hub", eventsOf(hub), (event, ctx) => {
+			switch (event.kind) {
+				case "upsert":
+				case "removed":
+				case "dormant_changed":
+					sessions.replace(ctx, visibleSessions(), { diff: true });
+					return;
+				case "workspace_upsert":
+				case "workspace_removed":
+					workspaces.replace(ctx, visibleWorkspaces(), { diff: true });
+					return;
+				case "frame":
+					if (!reachable(connection, event.sessionId)) return;
+					pending.change(ctx, (draft) => {
+						draft.push({
+							id: randomUUID(),
+							sessionId: event.sessionId,
+							frame: event.frame
+						});
+						if (draft.length > MAX_PENDING_NOTICES) draft.splice(0, draft.length - MAX_PENDING_NOTICES);
+					});
+					return;
+				case "channel": return;
+			}
+		});
+		return {
+			variant: "default",
+			sessions,
+			workspaces,
+			pending,
+			readHome: async (request) => {
+				if (!hub.readHome) throw new Error("Home read is unavailable.");
+				return hub.readHome(request, (id) => reachable(connection, id));
+			},
+			invoke: async (call, ctx) => {
+				if (call.mount.scope === "session" && !connection.authorizeSession(call.mount.sessionId)) throw forbidden("This session belongs to its Desktop instance.");
+				if (mount.scope !== "global") {
+					if (!(call.mount.scope === "session" ? permitsSession(hub, mount, call.mount.sessionId) : mount.scope === "workspace" && call.mount.scope === "workspace" && call.mount.workspaceId === mount.workspaceId)) throw forbidden("Plugin is outside this WebSocket scope.");
+				}
+				return await hub.invokePlugin(call, "client-to-server", {
+					connectionId: connection.connectionId,
+					signal: ctx.signal
+				});
+			},
+			ackNotice: async ({ id }, ctx) => {
+				pending.change(ctx, (draft) => draft.filter((notice) => notice.id !== id));
+			}
+		};
+	});
+	host.serve(PoThreadContract, ({ sessionId, threadId }, principal, self) => {
+		const connection = connectionOf(principal);
+		if (!reachable(connection, sessionId)) throw forbidden(`No session ${sessionId}`);
+		connection.sessions.add(sessionId);
+		const tail = self.resource("tail", {
+			version: 1,
+			open: () => threads.subscribe(sessionId, threadId),
+			close: () => threads.unsubscribe(sessionId, threadId)
+		});
+		const frame = self.state("frame", PoThreadFrameSchema, { init: () => tail.value?.at(-1) ?? null });
+		self.on("frames", { subscribe: (listener) => threads.onFrame(listener) }, (event, ctx) => {
+			if (event.sessionId === sessionId && event.threadId === threadId) frame.replace(ctx, event.frame, { diff: true });
+		});
+		return {
+			variant: "default",
+			frame
+		};
+	}, { linger: THREAD_LINGER_MS });
+	host.serve(PoChannelsContract, ({ sessionId }, principal, self) => {
+		const connection = connectionOf(principal);
+		if (!reachable(connection, sessionId)) throw forbidden(`No session ${sessionId}`);
+		connection.sessions.add(sessionId);
+		const visible = (frameType) => frameType !== "computer_use_state" || connection.authorizeComputerUse(sessionId);
+		const latest = self.state("latest", PoChannelsStateSchema, { init: () => {
+			const payloads = {};
+			for (const channelFrame of hub.channelFrames(sessionId)) if (visible(channelFrame.type)) payloads[channelFrame.type] = channelFrame.payload;
+			return payloads;
+		} });
+		self.on("hub", eventsOf(hub), (event, ctx) => {
+			if (event.kind !== "channel" || event.sessionId !== sessionId || !visible(event.frameType)) return;
+			if (event.connectionId !== void 0 && event.connectionId !== connection.connectionId) return;
+			latest.change(ctx, (draft) => {
+				draft[event.frameType] = event.payload;
+			});
+		});
+		return {
+			variant: "default",
+			latest,
+			receive: async ({ type, payload }) => {
+				if (!connection.authorizeSession(sessionId)) throw forbidden("This session belongs to Desktop.");
+				hub.receiveChannel(sessionId, type, payload, connection.connectionId, connection.authorizeDesktop(), connection.authorizeComputerUse(sessionId));
+			}
+		};
+	});
+	serveAgentSessions(host, { resolve(sessionId, principal) {
+		const connection = connectionOf(principal);
+		const session = hub.session(sessionId);
+		if (!session || !reachable(connection, session.id)) return void 0;
+		connection.sessions.add(sessionId);
+		const permitted = () => hub.session(session.id)?.host === session.host && connection.authorizeSession(session.id);
+		return {
+			generation: generationOf(session.host),
+			exited: session.host.runtime.exited,
+			permitted,
+			options: {
+				runtime: session.host.runtime,
+				onPresentationFrame: (listen) => session.host.onPresentationFrame((frame) => {
+					if (permitted()) listen(frame);
+				}),
+				respondToExtensionUi: (frame) => {
+					if (!permitted()) throw forbidden("This session belongs to Desktop.");
+					return session.host.respondToExtensionUi(frame);
+				},
+				readThreadTranscript: (threadId, request, readContext) => {
+					if (!permitted()) throw forbidden("This session belongs to Desktop.");
+					return threads.readPage(session.id, threadId, request, readContext);
+				},
+				sessionId: session.id,
+				sessionName: session.name,
+				cwd: session.cwd,
+				telemetry: options.telemetry
+			}
+		};
+	} });
+	let closing;
+	return {
+		accept(link, access = {}) {
+			if (closing !== void 0) {
+				link.close();
+				return;
+			}
+			const connectionId = randomUUID();
+			const authorizeSession = access.authorizeSession ?? ((id) => !hub.computerUse?.ownsSession?.(id));
+			const authorizeDesktop = access.authorizeDesktop ?? (() => false);
+			connections.set(connectionId, {
+				mount: access.mount ?? { scope: "global" },
+				authorizeSession,
+				authorizeDesktop,
+				authorizeComputerUse: access.authorizeComputerUse ?? (() => authorizeDesktop()),
+				sessions: /* @__PURE__ */ new Set()
+			});
+			link.onClose(() => {
+				connections.delete(connectionId);
+				hub.disconnectChannels(connectionId);
+			});
+			host.accept(options.onNotice ? reportingLargeFrames(link, options.onNotice) : link, {
+				principal: { connectionId },
+				kind: "client"
+			});
+		},
+		close() {
+			closing ??= (async () => {
+				stopClaims?.();
+				threads.close();
+				await host.close();
+			})();
+			return closing;
+		}
+	};
+}
+//#endregion
+export { createHeadlessProtocol };
+
+//# sourceMappingURL=headlessProtocol.mjs.map

package/dist/headlessProtocol.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"headlessProtocol.mjs","names":[],"sources":["../src/server/headlessProtocol.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport { createHost, forbidden, type Link, type Subscribable } from '@earendil-works/chord';\nimport { Type } from 'typebox';\n\nimport type { PoPluginCall } from '../exports/pluginProtocol';\nimport {\n  HubNoticeSchema,\n  PO_SERVER_HOST,\n  PoChannelsContract,\n  PoHubContract,\n  PoThreadContract,\n  type HubNotice,\n  type HubSessionView,\n  type HubWorkspaceView,\n  type JsonValue,\n} from '../exports/sessionProtocol';\nimport { serveAgentSessions, type AgentSessionBinding } from '../pi/piSessionRuntime';\nimport { SessionSummarySchema, WorkspaceSchema } from '../schemas/httpApiContracts';\nimport type { PoSocketMount } from '../schemas/packageApi';\nimport { PoChannelsStateSchema } from '../schemas/protocolChannelsContract';\nimport { PoThreadFrameSchema } from '../schemas/protocolThreadContract';\nimport type { OpenSessionRecord } from '../services/openSessionRegistry';\nimport type { ServerTelemetry } from '../services/serverTelemetry';\nimport { harnessErrorMessage } from './harnessErrorMessage';\nimport type { HeadlessHub, HeadlessHubEvent, HeadlessHubSession } from './headlessHub';\nimport { reportingLargeFrames } from './largeFrameLink';\nimport { createThreadJournals } from './threadJournals';\n\n// ponytail: unacknowledged notices beyond this drop oldest first; raise it if a client misses dialogs.\nconst MAX_PENDING_NOTICES = 64;\n/** A browser switching back to a thread quickly keeps its tail open. */\nconst THREAD_LINGER_MS = 5_000;\n\nfunction sessionView(session: HeadlessHubSession): HubSessionView {\n  return {\n    id: session.id,\n    ...(session.workspaceId === undefined ? {} : { workspaceId: session.workspaceId }),\n    ...(session.webComposition === undefined ? {} : { webComposition: { ...session.webComposition } }),\n    ...(session.nativeComposition === undefined ? {} : { nativeComposition: { ...session.nativeComposition } }),\n    name: session.name,\n    cwd: session.cwd,\n    createdAt: session.createdAt,\n    updatedAt: session.updatedAt ?? session.createdAt,\n    phase: session.phase ?? 'idle',\n    phaseSince: session.phaseSince ?? session.createdAt,\n    attach: 'attached',\n    pendingMessageCount: session.pendingMessageCount ?? 0,\n    everPrompted: session.everPrompted ?? false,\n    awaitingInput: session.awaitingInput ?? false,\n    ...(session.lastSettledAt === undefined ? {} : { lastSettledAt: session.lastSettledAt }),\n    // null: the host has not reported yet.\n    ...(session.backgroundWorkActive == null ? {} : { backgroundWorkActive: session.backgroundWorkActive }),\n    ...(session.git === undefined ? {} : { git: { branch: session.git.branch, dirty: session.git.dirty } }),\n    ...(session.profile === undefined\n      ? {}\n      : {\n          profile: {\n            name: session.profile.name,\n            ...(session.profile.displayName === undefined ? {} : { displayName: session.profile.displayName }),\n            ...(session.profile.iconVersion === undefined ? {} : { iconVersion: session.profile.iconVersion }),\n          },\n        }),\n    ...(session.parentSessionId === undefined ? {} : { parentSessionId: session.parentSessionId }),\n    ...(session.sessionProvenance === undefined ? {} : { sessionProvenance: session.sessionProvenance }),\n    ...(session.groups === undefined || session.groups.length === 0 ? {} : { groups: [...session.groups] }),\n    ...(session.pendingSetups === undefined\n      ? {}\n      : {\n          pendingSetups: session.pendingSetups.map((setup) => ({\n            id: setup.id,\n            name: setup.name,\n            createdAt: setup.createdAt,\n            ...(setup.cwd === undefined ? {} : { cwd: setup.cwd }),\n            ...(setup.setupKind === undefined ? {} : { setupKind: setup.setupKind }),\n            ...(setup.status === undefined ? {} : { status: setup.status }),\n            ...(setup.errorCode === undefined ? {} : { errorCode: setup.errorCode }),\n          })),\n        }),\n    ...(session.activity === undefined\n      ? {}\n      : {\n          activity: {\n            label: session.activity.label,\n            ...(session.activity.attention === true ? { attention: true } : {}),\n            ...(session.activity.since === undefined ? {} : { since: session.activity.since }),\n          },\n        }),\n  };\n}\n\n/**\n * A recorded session with no runtime behind it yet.\n *\n * Carries the same field set as a live session so the rail keys both by id and\n * swaps one for the other in place once the server reopens the journal.\n */\nfunction dormantView(record: OpenSessionRecord): HubSessionView {\n  return {\n    id: record.sessionId,\n    workspaceId: record.workspaceId,\n    name: record.name,\n    cwd: record.cwd,\n    createdAt: record.createdAt,\n    updatedAt: record.createdAt,\n    phase: 'idle',\n    phaseSince: record.createdAt,\n    attach: 'attached',\n    pendingMessageCount: 0,\n    everPrompted: false,\n    awaitingInput: false,\n    dormant: true,\n    ...(record.parentSessionId === undefined ? {} : { parentSessionId: record.parentSessionId }),\n    ...(record.sessionProvenance === undefined ? {} : { sessionProvenance: record.sessionProvenance }),\n    ...(record.groups === undefined || record.groups.length === 0 ? {} : { groups: [...record.groups] }),\n  };\n}\n\n/** Each restarted session host gets a new generation, so its projection starts fresh. */\nconst generations = new WeakMap<object, number>();\nlet nextGeneration = 0;\nfunction generationOf(host: object): number {\n  let generation = generations.get(host);\n  if (generation === undefined) {\n    generation = nextGeneration++;\n    generations.set(host, generation);\n  }\n  return generation;\n}\n\nfunction permitsSession(\n  hub: HeadlessHub,\n  mount: PoSocketMount,\n  sessionId: string,\n  authorize: (id: string) => boolean = () => true,\n): boolean {\n  const session = hub.session(sessionId);\n  return (\n    session !== undefined &&\n    authorize(sessionId) &&\n    (mount.scope === 'global' ||\n      (session.workspaceId === mount.workspaceId && (mount.scope === 'workspace' || mount.sessionId === sessionId)))\n  );\n}\n\nfunction permitsDormant(mount: PoSocketMount, record: OpenSessionRecord): boolean {\n  if (mount.scope === 'global') return true;\n  if (record.workspaceId !== mount.workspaceId) return false;\n  return mount.scope === 'workspace' || mount.sessionId === record.sessionId;\n}\n\n/** What one upgraded connection may reach, decided from its request when it connected. */\nexport interface ConnectionAccess {\n  readonly mount: PoSocketMount;\n  /** Evaluated for every call, including references taken before a Desktop claim. */\n  authorizeSession(sessionId: string): boolean;\n  authorizeDesktop(): boolean;\n  authorizeComputerUse(sessionId: string): boolean;\n}\n\ninterface Connection extends ConnectionAccess {\n  /** Sessions this connection reached, rechecked when computer-use ownership changes. */\n  readonly sessions: Set<string>;\n}\n\ninterface Principal {\n  connectionId: string;\n}\n\nexport interface HeadlessProtocol {\n  /** Hands an authenticated link to the shared host. Without `access` it sees everything Desktop does not own. */\n  accept(link: Link, access?: Partial<ConnectionAccess>): void;\n  close(): Promise<void>;\n}\n\nconst eventsOf = (hub: HeadlessHub): Subscribable<HeadlessHubEvent> => ({\n  subscribe: (listener) => hub.onEvent(listener),\n});\n\n/** One Chord host for every browser, native and relayed connection over the process-local hub. */\nexport function createHeadlessProtocol(options: {\n  hub: HeadlessHub;\n  telemetry?: ServerTelemetry;\n  onNotice?: (message: string) => void;\n  /** Recorded sessions the server has not reopened. */\n  dormantSessions?: () => readonly OpenSessionRecord[];\n}): HeadlessProtocol {\n  const hub = options.hub;\n  const dormantSessions = () => (options.dormantSessions === undefined ? [] : options.dormantSessions());\n  const connections = new Map<string, Connection>();\n  const threads = createThreadJournals({\n    resolve: (sessionId, threadId) => hub.childThread(sessionId, threadId),\n  });\n  const host = createHost<Principal>({\n    name: PO_SERVER_HOST,\n    self: { connectionId: PO_SERVER_HOST },\n    principalKey: (principal) => principal.connectionId,\n    onError: (error) => options.onNotice?.(`headless protocol error (${harnessErrorMessage(error)})`),\n  });\n  const connectionOf = (principal: Principal): Connection & { connectionId: string } => {\n    const connection = connections.get(principal.connectionId);\n    if (connection === undefined) throw forbidden('This connection has closed.');\n    return { ...connection, connectionId: principal.connectionId };\n  };\n  const reachable = (connection: Connection, sessionId: string): boolean =>\n    permitsSession(hub, connection.mount, sessionId, (id) => connection.authorizeSession(id));\n\n  // A Desktop claim makes every reference the connection holds to that session gone at once.\n  const stopClaims = hub.computerUse?.subscribe?.(() => {\n    for (const [connectionId, connection] of connections) {\n      let revoked = false;\n      for (const sessionId of connection.sessions) if (!connection.authorizeSession(sessionId)) revoked = true;\n      if (!revoked) continue;\n      connection.sessions.clear();\n      void host.invalidatePrincipal((principal) => principal.connectionId === connectionId);\n    }\n  });\n\n  host.serve(PoHubContract, (_input, principal, self) => {\n    const connection = connectionOf(principal);\n    const { mount } = connection;\n    const visibleSessions = (): Record<string, HubSessionView> => {\n      const views: Record<string, HubSessionView> = {};\n      for (const session of hub.snapshot())\n        if (reachable(connection, session.id)) views[session.id] = sessionView(session);\n      // A dormant record of a removed workspace has no HTTP list to come from, so clients would never agree on it.\n      const registered = new Set(hub.workspaces().map((workspace) => workspace.id));\n      for (const record of dormantSessions())\n        if (\n          views[record.sessionId] === undefined &&\n          registered.has(record.workspaceId) &&\n          connection.authorizeSession(record.sessionId) &&\n          permitsDormant(mount, record)\n        )\n          views[record.sessionId] = dormantView(record);\n      return views;\n    };\n    const visibleWorkspaces = (): Record<string, HubWorkspaceView> => {\n      const views: Record<string, HubWorkspaceView> = {};\n      for (const workspace of hub.workspaces())\n        if (mount.scope === 'global' || workspace.id === mount.workspaceId)\n          views[workspace.id] = {\n            id: workspace.id,\n            root: workspace.root,\n            ...(workspace.name === undefined ? {} : { name: workspace.name }),\n            available: workspace.available !== false,\n          };\n      return views;\n    };\n    const sessions = self.state('sessions', Type.Record(Type.String(), SessionSummarySchema), {\n      init: visibleSessions,\n    });\n    const workspaces = self.state('workspaces', Type.Record(Type.String(), WorkspaceSchema), {\n      init: visibleWorkspaces,\n    });\n    const pending = self.state('pending', Type.Array(HubNoticeSchema), [] as HubNotice[]);\n    self.on('hub', eventsOf(hub), (event, ctx) => {\n      switch (event.kind) {\n        case 'upsert':\n        case 'removed':\n        case 'dormant_changed':\n          // Recomputed rather than patched, so an event before this listener started cannot leave a stale row.\n          sessions.replace(ctx, visibleSessions(), { diff: true });\n          return;\n        case 'workspace_upsert':\n        case 'workspace_removed':\n          workspaces.replace(ctx, visibleWorkspaces(), { diff: true });\n          return;\n        case 'frame':\n          if (!reachable(connection, event.sessionId)) return;\n          pending.change(ctx, (draft) => {\n            draft.push({\n              id: randomUUID(),\n              sessionId: event.sessionId,\n              frame: event.frame as Record<string, JsonValue>,\n            });\n            if (draft.length > MAX_PENDING_NOTICES) draft.splice(0, draft.length - MAX_PENDING_NOTICES);\n          });\n          return;\n        case 'channel':\n          return;\n      }\n    });\n    return {\n      variant: 'default',\n      sessions,\n      workspaces,\n      pending,\n      readHome: async (request) => {\n        if (!hub.readHome) throw new Error('Home read is unavailable.');\n        return hub.readHome(request, (id) => reachable(connection, id));\n      },\n      invoke: async (call: PoPluginCall, ctx) => {\n        if (call.mount.scope === 'session' && !connection.authorizeSession(call.mount.sessionId))\n          throw forbidden('This session belongs to its Desktop instance.');\n        if (mount.scope !== 'global') {\n          const permitted =\n            call.mount.scope === 'session'\n              ? permitsSession(hub, mount, call.mount.sessionId)\n              : mount.scope === 'workspace' &&\n                call.mount.scope === 'workspace' &&\n                call.mount.workspaceId === mount.workspaceId;\n          if (!permitted) throw forbidden('Plugin is outside this WebSocket scope.');\n        }\n        return (await hub.invokePlugin(call, 'client-to-server', {\n          connectionId: connection.connectionId,\n          signal: ctx.signal,\n        })) as JsonValue;\n      },\n      ackNotice: async ({ id }, ctx) => {\n        pending.change(ctx, (draft) => draft.filter((notice) => notice.id !== id));\n      },\n    };\n  });\n\n  host.serve(\n    PoThreadContract,\n    ({ sessionId, threadId }, principal, self) => {\n      const connection = connectionOf(principal);\n      if (!reachable(connection, sessionId)) throw forbidden(`No session ${sessionId}`);\n      connection.sessions.add(sessionId);\n      const tail = self.resource('tail', {\n        version: 1,\n        open: () => threads.subscribe(sessionId, threadId),\n        close: () => threads.unsubscribe(sessionId, threadId),\n      });\n      const frame = self.state('frame', PoThreadFrameSchema, {\n        init: () => (tail.value?.at(-1) ?? null) as never,\n      });\n      self.on(\n        'frames',\n        { subscribe: (listener) => threads.onFrame(listener) } as Subscribable<{\n          sessionId: string;\n          threadId: string;\n          frame: Record<string, unknown>;\n        }>,\n        (event, ctx) => {\n          // Each frame is a fresh wrapper around the child's state, so only an explicit diff sends ops, not the whole state.\n          if (event.sessionId === sessionId && event.threadId === threadId)\n            frame.replace(ctx, event.frame as never, { diff: true });\n        },\n      );\n      return { variant: 'default', frame };\n    },\n    { linger: THREAD_LINGER_MS },\n  );\n\n  host.serve(PoChannelsContract, ({ sessionId }, principal, self) => {\n    const connection = connectionOf(principal);\n    if (!reachable(connection, sessionId)) throw forbidden(`No session ${sessionId}`);\n    connection.sessions.add(sessionId);\n    const visible = (frameType: string): boolean =>\n      frameType !== 'computer_use_state' || connection.authorizeComputerUse(sessionId);\n    const latest = self.state('latest', PoChannelsStateSchema, {\n      init: () => {\n        const payloads: Record<string, JsonValue> = {};\n        for (const channelFrame of hub.channelFrames(sessionId))\n          if (visible(channelFrame.type)) payloads[channelFrame.type] = channelFrame.payload as JsonValue;\n        return payloads;\n      },\n    });\n    // ponytail: a channel keeps only its latest payload; a package that needs every event must carry a sequence.\n    self.on('hub', eventsOf(hub), (event, ctx) => {\n      if (event.kind !== 'channel' || event.sessionId !== sessionId || !visible(event.frameType)) return;\n      if (event.connectionId !== undefined && event.connectionId !== connection.connectionId) return;\n      latest.change(ctx, (draft) => {\n        draft[event.frameType] = event.payload as JsonValue;\n      });\n    });\n    return {\n      variant: 'default',\n      latest,\n      receive: async ({ type, payload }) => {\n        if (!connection.authorizeSession(sessionId)) throw forbidden('This session belongs to Desktop.');\n        hub.receiveChannel(\n          sessionId,\n          type,\n          payload,\n          connection.connectionId,\n          connection.authorizeDesktop(),\n          connection.authorizeComputerUse(sessionId),\n        );\n      },\n    };\n  });\n\n  serveAgentSessions(host, {\n    resolve(sessionId, principal): AgentSessionBinding | undefined {\n      const connection = connectionOf(principal as Principal);\n      const session = hub.session(sessionId);\n      if (!session || !reachable(connection, session.id)) return undefined;\n      connection.sessions.add(sessionId);\n      const permitted = () => hub.session(session.id)?.host === session.host && connection.authorizeSession(session.id);\n      return {\n        generation: generationOf(session.host),\n        exited: session.host.runtime.exited,\n        permitted,\n        options: {\n          runtime: session.host.runtime,\n          onPresentationFrame: (listen) =>\n            session.host.onPresentationFrame((frame) => {\n              if (permitted()) listen(frame);\n            }),\n          respondToExtensionUi: (frame) => {\n            if (!permitted()) throw forbidden('This session belongs to Desktop.');\n            return session.host.respondToExtensionUi(frame);\n          },\n          readThreadTranscript: (threadId, request, readContext) => {\n            if (!permitted()) throw forbidden('This session belongs to Desktop.');\n            return threads.readPage(session.id, threadId, request, readContext);\n          },\n          sessionId: session.id,\n          sessionName: session.name,\n          cwd: session.cwd,\n          telemetry: options.telemetry,\n        },\n      };\n    },\n  });\n\n  let closing: Promise<void> | undefined;\n  return {\n    accept(link, access = {}) {\n      if (closing !== undefined) {\n        link.close();\n        return;\n      }\n      const connectionId = randomUUID();\n      const authorizeSession = access.authorizeSession ?? ((id: string) => !hub.computerUse?.ownsSession?.(id));\n      const authorizeDesktop = access.authorizeDesktop ?? (() => false);\n      connections.set(connectionId, {\n        mount: access.mount ?? { scope: 'global' },\n        authorizeSession,\n        authorizeDesktop,\n        authorizeComputerUse: access.authorizeComputerUse ?? (() => authorizeDesktop()),\n        sessions: new Set(),\n      });\n      link.onClose(() => {\n        connections.delete(connectionId);\n        hub.disconnectChannels(connectionId);\n      });\n      host.accept(options.onNotice ? reportingLargeFrames(link, options.onNotice) : link, {\n        principal: { connectionId },\n        kind: 'client',\n      });\n    },\n    close() {\n      closing ??= (async () => {\n        stopClaims?.();\n        threads.close();\n        await host.close();\n      })();\n      return closing;\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;AA8BA,MAAM,sBAAsB;;AAE5B,MAAM,mBAAmB;AAEzB,SAAS,YAAY,SAA6C;CAChE,OAAO;EACL,IAAI,QAAQ;EACZ,GAAI,QAAQ,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,QAAQ,YAAY;EAChF,GAAI,QAAQ,mBAAmB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,QAAQ,eAAe,EAAE;EAChG,GAAI,QAAQ,sBAAsB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,QAAQ,kBAAkB,EAAE;EACzG,MAAM,QAAQ;EACd,KAAK,QAAQ;EACb,WAAW,QAAQ;EACnB,WAAW,QAAQ,aAAa,QAAQ;EACxC,OAAO,QAAQ,SAAS;EACxB,YAAY,QAAQ,cAAc,QAAQ;EAC1C,QAAQ;EACR,qBAAqB,QAAQ,uBAAuB;EACpD,cAAc,QAAQ,gBAAgB;EACtC,eAAe,QAAQ,iBAAiB;EACxC,GAAI,QAAQ,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,eAAe,QAAQ,cAAc;EAEtF,GAAI,QAAQ,wBAAwB,OAAO,CAAC,IAAI,EAAE,sBAAsB,QAAQ,qBAAqB;EACrG,GAAI,QAAQ,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;GAAE,QAAQ,QAAQ,IAAI;GAAQ,OAAO,QAAQ,IAAI;EAAM,EAAE;EACrG,GAAI,QAAQ,YAAY,KAAA,IACpB,CAAC,IACD,EACE,SAAS;GACP,MAAM,QAAQ,QAAQ;GACtB,GAAI,QAAQ,QAAQ,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,QAAQ,QAAQ,YAAY;GAChG,GAAI,QAAQ,QAAQ,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,QAAQ,QAAQ,YAAY;EAClG,EACF;EACJ,GAAI,QAAQ,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB,QAAQ,gBAAgB;EAC5F,GAAI,QAAQ,sBAAsB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB,QAAQ,kBAAkB;EAClG,GAAI,QAAQ,WAAW,KAAA,KAAa,QAAQ,OAAO,WAAW,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,QAAQ,MAAM,EAAE;EACrG,GAAI,QAAQ,kBAAkB,KAAA,IAC1B,CAAC,IACD,EACE,eAAe,QAAQ,cAAc,KAAK,WAAW;GACnD,IAAI,MAAM;GACV,MAAM,MAAM;GACZ,WAAW,MAAM;GACjB,GAAI,MAAM,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK,MAAM,IAAI;GACpD,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;GACtE,GAAI,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;GAC7D,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;EACxE,EAAE,EACJ;EACJ,GAAI,QAAQ,aAAa,KAAA,IACrB,CAAC,IACD,EACE,UAAU;GACR,OAAO,QAAQ,SAAS;GACxB,GAAI,QAAQ,SAAS,cAAc,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;GACjE,GAAI,QAAQ,SAAS,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,SAAS,MAAM;EAClF,EACF;CACN;AACF;;;;;;;AAQA,SAAS,YAAY,QAA2C;CAC9D,OAAO;EACL,IAAI,OAAO;EACX,aAAa,OAAO;EACpB,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,WAAW,OAAO;EAClB,WAAW,OAAO;EAClB,OAAO;EACP,YAAY,OAAO;EACnB,QAAQ;EACR,qBAAqB;EACrB,cAAc;EACd,eAAe;EACf,SAAS;EACT,GAAI,OAAO,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB,OAAO,gBAAgB;EAC1F,GAAI,OAAO,sBAAsB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB,OAAO,kBAAkB;EAChG,GAAI,OAAO,WAAW,KAAA,KAAa,OAAO,OAAO,WAAW,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,OAAO,MAAM,EAAE;CACpG;AACF;;AAGA,MAAM,8BAAc,IAAI,QAAwB;AAChD,IAAI,iBAAiB;AACrB,SAAS,aAAa,MAAsB;CAC1C,IAAI,aAAa,YAAY,IAAI,IAAI;CACrC,IAAI,eAAe,KAAA,GAAW;EAC5B,aAAa;EACb,YAAY,IAAI,MAAM,UAAU;CAClC;CACA,OAAO;AACT;AAEA,SAAS,eACP,KACA,OACA,WACA,kBAA2C,MAClC;CACT,MAAM,UAAU,IAAI,QAAQ,SAAS;CACrC,OACE,YAAY,KAAA,KACZ,UAAU,SAAS,MAClB,MAAM,UAAU,YACd,QAAQ,gBAAgB,MAAM,gBAAgB,MAAM,UAAU,eAAe,MAAM,cAAc;AAExG;AAEA,SAAS,eAAe,OAAsB,QAAoC;CAChF,IAAI,MAAM,UAAU,UAAU,OAAO;CACrC,IAAI,OAAO,gBAAgB,MAAM,aAAa,OAAO;CACrD,OAAO,MAAM,UAAU,eAAe,MAAM,cAAc,OAAO;AACnE;AA0BA,MAAM,YAAY,SAAsD,EACtE,YAAY,aAAa,IAAI,QAAQ,QAAQ,EAC/C;;AAGA,SAAgB,uBAAuB,SAMlB;CACnB,MAAM,MAAM,QAAQ;CACpB,MAAM,wBAAyB,QAAQ,oBAAoB,KAAA,IAAY,CAAC,IAAI,QAAQ,gBAAgB;CACpG,MAAM,8BAAc,IAAI,IAAwB;CAChD,MAAM,UAAU,qBAAqB,EACnC,UAAU,WAAW,aAAa,IAAI,YAAY,WAAW,QAAQ,EACvE,CAAC;CACD,MAAM,OAAO,WAAsB;EACjC,MAAM;EACN,MAAM,EAAE,cAAc,eAAe;EACrC,eAAe,cAAc,UAAU;EACvC,UAAU,UAAU,QAAQ,WAAW,4BAA4B,oBAAoB,KAAK,EAAE,EAAE;CAClG,CAAC;CACD,MAAM,gBAAgB,cAAgE;EACpF,MAAM,aAAa,YAAY,IAAI,UAAU,YAAY;EACzD,IAAI,eAAe,KAAA,GAAW,MAAM,UAAU,6BAA6B;EAC3E,OAAO;GAAE,GAAG;GAAY,cAAc,UAAU;EAAa;CAC/D;CACA,MAAM,aAAa,YAAwB,cACzC,eAAe,KAAK,WAAW,OAAO,YAAY,OAAO,WAAW,iBAAiB,EAAE,CAAC;CAG1F,MAAM,aAAa,IAAI,aAAa,kBAAkB;EACpD,KAAK,MAAM,CAAC,cAAc,eAAe,aAAa;GACpD,IAAI,UAAU;GACd,KAAK,MAAM,aAAa,WAAW,UAAU,IAAI,CAAC,WAAW,iBAAiB,SAAS,GAAG,UAAU;GACpG,IAAI,CAAC,SAAS;GACd,WAAW,SAAS,MAAM;GAC1B,KAAU,qBAAqB,cAAc,UAAU,iBAAiB,YAAY;EACtF;CACF,CAAC;CAED,KAAK,MAAM,gBAAgB,QAAQ,WAAW,SAAS;EACrD,MAAM,aAAa,aAAa,SAAS;EACzC,MAAM,EAAE,UAAU;EAClB,MAAM,wBAAwD;GAC5D,MAAM,QAAwC,CAAC;GAC/C,KAAK,MAAM,WAAW,IAAI,SAAS,GACjC,IAAI,UAAU,YAAY,QAAQ,EAAE,GAAG,MAAM,QAAQ,MAAM,YAAY,OAAO;GAEhF,MAAM,aAAa,IAAI,IAAI,IAAI,WAAW,CAAC,CAAC,KAAK,cAAc,UAAU,EAAE,CAAC;GAC5E,KAAK,MAAM,UAAU,gBAAgB,GACnC,IACE,MAAM,OAAO,eAAe,KAAA,KAC5B,WAAW,IAAI,OAAO,WAAW,KACjC,WAAW,iBAAiB,OAAO,SAAS,KAC5C,eAAe,OAAO,MAAM,GAE5B,MAAM,OAAO,aAAa,YAAY,MAAM;GAChD,OAAO;EACT;EACA,MAAM,0BAA4D;GAChE,MAAM,QAA0C,CAAC;GACjD,KAAK,MAAM,aAAa,IAAI,WAAW,GACrC,IAAI,MAAM,UAAU,YAAY,UAAU,OAAO,MAAM,aACrD,MAAM,UAAU,MAAM;IACpB,IAAI,UAAU;IACd,MAAM,UAAU;IAChB,GAAI,UAAU,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,UAAU,KAAK;IAC/D,WAAW,UAAU,cAAc;GACrC;GACJ,OAAO;EACT;EACA,MAAM,WAAW,KAAK,MAAM,YAAY,KAAK,OAAO,KAAK,OAAO,GAAG,oBAAoB,GAAG,EACxF,MAAM,gBACR,CAAC;EACD,MAAM,aAAa,KAAK,MAAM,cAAc,KAAK,OAAO,KAAK,OAAO,GAAG,eAAe,GAAG,EACvF,MAAM,kBACR,CAAC;EACD,MAAM,UAAU,KAAK,MAAM,WAAW,KAAK,MAAM,eAAe,GAAG,CAAC,CAAgB;EACpF,KAAK,GAAG,OAAO,SAAS,GAAG,IAAI,OAAO,QAAQ;GAC5C,QAAQ,MAAM,MAAd;IACE,KAAK;IACL,KAAK;IACL,KAAK;KAEH,SAAS,QAAQ,KAAK,gBAAgB,GAAG,EAAE,MAAM,KAAK,CAAC;KACvD;IACF,KAAK;IACL,KAAK;KACH,WAAW,QAAQ,KAAK,kBAAkB,GAAG,EAAE,MAAM,KAAK,CAAC;KAC3D;IACF,KAAK;KACH,IAAI,CAAC,UAAU,YAAY,MAAM,SAAS,GAAG;KAC7C,QAAQ,OAAO,MAAM,UAAU;MAC7B,MAAM,KAAK;OACT,IAAI,WAAW;OACf,WAAW,MAAM;OACjB,OAAO,MAAM;MACf,CAAC;MACD,IAAI,MAAM,SAAS,qBAAqB,MAAM,OAAO,GAAG,MAAM,SAAS,mBAAmB;KAC5F,CAAC;KACD;IACF,KAAK,WACH;GACJ;EACF,CAAC;EACD,OAAO;GACL,SAAS;GACT;GACA;GACA;GACA,UAAU,OAAO,YAAY;IAC3B,IAAI,CAAC,IAAI,UAAU,MAAM,IAAI,MAAM,2BAA2B;IAC9D,OAAO,IAAI,SAAS,UAAU,OAAO,UAAU,YAAY,EAAE,CAAC;GAChE;GACA,QAAQ,OAAO,MAAoB,QAAQ;IACzC,IAAI,KAAK,MAAM,UAAU,aAAa,CAAC,WAAW,iBAAiB,KAAK,MAAM,SAAS,GACrF,MAAM,UAAU,+CAA+C;IACjE,IAAI,MAAM,UAAU,UAOd;SAAA,EALF,KAAK,MAAM,UAAU,YACjB,eAAe,KAAK,OAAO,KAAK,MAAM,SAAS,IAC/C,MAAM,UAAU,eAChB,KAAK,MAAM,UAAU,eACrB,KAAK,MAAM,gBAAgB,MAAM,cACvB,MAAM,UAAU,yCAAyC;IAAA;IAE3E,OAAQ,MAAM,IAAI,aAAa,MAAM,oBAAoB;KACvD,cAAc,WAAW;KACzB,QAAQ,IAAI;IACd,CAAC;GACH;GACA,WAAW,OAAO,EAAE,MAAM,QAAQ;IAChC,QAAQ,OAAO,MAAM,UAAU,MAAM,QAAQ,WAAW,OAAO,OAAO,EAAE,CAAC;GAC3E;EACF;CACF,CAAC;CAED,KAAK,MACH,mBACC,EAAE,WAAW,YAAY,WAAW,SAAS;EAC5C,MAAM,aAAa,aAAa,SAAS;EACzC,IAAI,CAAC,UAAU,YAAY,SAAS,GAAG,MAAM,UAAU,cAAc,WAAW;EAChF,WAAW,SAAS,IAAI,SAAS;EACjC,MAAM,OAAO,KAAK,SAAS,QAAQ;GACjC,SAAS;GACT,YAAY,QAAQ,UAAU,WAAW,QAAQ;GACjD,aAAa,QAAQ,YAAY,WAAW,QAAQ;EACtD,CAAC;EACD,MAAM,QAAQ,KAAK,MAAM,SAAS,qBAAqB,EACrD,YAAa,KAAK,OAAO,GAAG,EAAE,KAAK,KACrC,CAAC;EACD,KAAK,GACH,UACA,EAAE,YAAY,aAAa,QAAQ,QAAQ,QAAQ,EAAE,IAKpD,OAAO,QAAQ;GAEd,IAAI,MAAM,cAAc,aAAa,MAAM,aAAa,UACtD,MAAM,QAAQ,KAAK,MAAM,OAAgB,EAAE,MAAM,KAAK,CAAC;EAC3D,CACF;EACA,OAAO;GAAE,SAAS;GAAW;EAAM;CACrC,GACA,EAAE,QAAQ,iBAAiB,CAC7B;CAEA,KAAK,MAAM,qBAAqB,EAAE,aAAa,WAAW,SAAS;EACjE,MAAM,aAAa,aAAa,SAAS;EACzC,IAAI,CAAC,UAAU,YAAY,SAAS,GAAG,MAAM,UAAU,cAAc,WAAW;EAChF,WAAW,SAAS,IAAI,SAAS;EACjC,MAAM,WAAW,cACf,cAAc,wBAAwB,WAAW,qBAAqB,SAAS;EACjF,MAAM,SAAS,KAAK,MAAM,UAAU,uBAAuB,EACzD,YAAY;GACV,MAAM,WAAsC,CAAC;GAC7C,KAAK,MAAM,gBAAgB,IAAI,cAAc,SAAS,GACpD,IAAI,QAAQ,aAAa,IAAI,GAAG,SAAS,aAAa,QAAQ,aAAa;GAC7E,OAAO;EACT,EACF,CAAC;EAED,KAAK,GAAG,OAAO,SAAS,GAAG,IAAI,OAAO,QAAQ;GAC5C,IAAI,MAAM,SAAS,aAAa,MAAM,cAAc,aAAa,CAAC,QAAQ,MAAM,SAAS,GAAG;GAC5F,IAAI,MAAM,iBAAiB,KAAA,KAAa,MAAM,iBAAiB,WAAW,cAAc;GACxF,OAAO,OAAO,MAAM,UAAU;IAC5B,MAAM,MAAM,aAAa,MAAM;GACjC,CAAC;EACH,CAAC;EACD,OAAO;GACL,SAAS;GACT;GACA,SAAS,OAAO,EAAE,MAAM,cAAc;IACpC,IAAI,CAAC,WAAW,iBAAiB,SAAS,GAAG,MAAM,UAAU,kCAAkC;IAC/F,IAAI,eACF,WACA,MACA,SACA,WAAW,cACX,WAAW,iBAAiB,GAC5B,WAAW,qBAAqB,SAAS,CAC3C;GACF;EACF;CACF,CAAC;CAED,mBAAmB,MAAM,EACvB,QAAQ,WAAW,WAA4C;EAC7D,MAAM,aAAa,aAAa,SAAsB;EACtD,MAAM,UAAU,IAAI,QAAQ,SAAS;EACrC,IAAI,CAAC,WAAW,CAAC,UAAU,YAAY,QAAQ,EAAE,GAAG,OAAO,KAAA;EAC3D,WAAW,SAAS,IAAI,SAAS;EACjC,MAAM,kBAAkB,IAAI,QAAQ,QAAQ,EAAE,CAAC,EAAE,SAAS,QAAQ,QAAQ,WAAW,iBAAiB,QAAQ,EAAE;EAChH,OAAO;GACL,YAAY,aAAa,QAAQ,IAAI;GACrC,QAAQ,QAAQ,KAAK,QAAQ;GAC7B;GACA,SAAS;IACP,SAAS,QAAQ,KAAK;IACtB,sBAAsB,WACpB,QAAQ,KAAK,qBAAqB,UAAU;KAC1C,IAAI,UAAU,GAAG,OAAO,KAAK;IAC/B,CAAC;IACH,uBAAuB,UAAU;KAC/B,IAAI,CAAC,UAAU,GAAG,MAAM,UAAU,kCAAkC;KACpE,OAAO,QAAQ,KAAK,qBAAqB,KAAK;IAChD;IACA,uBAAuB,UAAU,SAAS,gBAAgB;KACxD,IAAI,CAAC,UAAU,GAAG,MAAM,UAAU,kCAAkC;KACpE,OAAO,QAAQ,SAAS,QAAQ,IAAI,UAAU,SAAS,WAAW;IACpE;IACA,WAAW,QAAQ;IACnB,aAAa,QAAQ;IACrB,KAAK,QAAQ;IACb,WAAW,QAAQ;GACrB;EACF;CACF,EACF,CAAC;CAED,IAAI;CACJ,OAAO;EACL,OAAO,MAAM,SAAS,CAAC,GAAG;GACxB,IAAI,YAAY,KAAA,GAAW;IACzB,KAAK,MAAM;IACX;GACF;GACA,MAAM,eAAe,WAAW;GAChC,MAAM,mBAAmB,OAAO,sBAAsB,OAAe,CAAC,IAAI,aAAa,cAAc,EAAE;GACvG,MAAM,mBAAmB,OAAO,2BAA2B;GAC3D,YAAY,IAAI,cAAc;IAC5B,OAAO,OAAO,SAAS,EAAE,OAAO,SAAS;IACzC;IACA;IACA,sBAAsB,OAAO,+BAA+B,iBAAiB;IAC7E,0BAAU,IAAI,IAAI;GACpB,CAAC;GACD,KAAK,cAAc;IACjB,YAAY,OAAO,YAAY;IAC/B,IAAI,mBAAmB,YAAY;GACrC,CAAC;GACD,KAAK,OAAO,QAAQ,WAAW,qBAAqB,MAAM,QAAQ,QAAQ,IAAI,MAAM;IAClF,WAAW,EAAE,aAAa;IAC1B,MAAM;GACR,CAAC;EACH;EACA,QAAQ;GACN,aAAa,YAAY;IACvB,aAAa;IACb,QAAQ,MAAM;IACd,MAAM,KAAK,MAAM;GACnB,EAAA,CAAG;GACH,OAAO;EACT;CACF;AACF"}