@ai-agent-forge/agent-forge 0.85.0

package/dist/profiles/suite-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suite-loader.js","sourceRoot":"","sources":["../../src/profiles/suite-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAI/C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAElF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAM1E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAG9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EACN,cAAc,EACd,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EAEpB,kBAAkB,GAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AACxC,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC;AACpD,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CAAC;AACpD,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AACjD,6GAAwG;AACxG,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAChD,iFAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAExD,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAU;IAC1D,OAAO,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;AAAA,CACvC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,OAAe,EAAU;IAC/E,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;AAAA,CACjD;AAED,sFAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,OAAe,EAAU;IACjF,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,CAC/D;AAED,mGAAyF;AACzF,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,OAAe,EAAU;IAClF,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;AAAA,CAChE;AAED,oFAA+E;AAC/E,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACrC,WAAW,CAAS;IACpB,iBAAiB,CAAoB;IAE9C,YAAY,WAAmB,EAAE,iBAAoC,EAAE;QACtE,KAAK,CAAC,kBAAkB,WAAW,wBAAwB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC;IAAA,CAC/D;CACD;AAED,gFAAgF;AAChF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAC1C,YAAY,OAAe,EAAE;QAC5B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IAAA,CAC/B;CACD;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAY;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS;YACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;gBAAE,SAAS;YAC9E,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAAA,CACvB;AAaD,SAAS,kBAAkB,CAAC,KAAc,EAAsB;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAChD;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAA8B,EAAU;IACtE,MAAM,SAAS,GACd,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpC,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9G,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/G,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC;IACrD,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAC3G,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAqBD;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAmB,EAAU;IAC1E,MAAM,OAAO,GAAG;QACf,QAAQ,EAAE;YACT,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;YAC5C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;YAC5C,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;SACzG;QACD,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC3B,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAAA,CAC/C;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAiB;IACtE,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;IACvC,IAAI,cAAc,KAAK,IAAI,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,QAAQ,GAAG,cAAyC,CAAC;IAC3D,IACC,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QACtC,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;QAC3C,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;QAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAC1C,CAAC;QACF,MAAM,IAAI,KAAK,CACd,mGAAmG,CACnG,CAAC;IACH,CAAC;IACD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACrE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,UAAU,GAAG,KAAgC,CAAC;QACpD,IAAI,OAAO,UAAU,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;IAAA,CAC1D,CAAC,CAAC;IACH,IACC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EACpC,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;SAC7F,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC7B,CAAC,CAAC;AAAA,CACH;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAIlC,EAAkB;IAClB,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,IAAI,KAAsB,CAAC;IAC3B,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,oBAAoB,CAAC,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3F,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,aAAa,CAAC,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAClE,iGAAqD;QACrD,0FAAoD;QACpD,6DAAmD;QACnD,KAAK,GAAG,OAAO,CAAC;IACjB,CAAC;SAAM,CAAC;QACP,MAAM,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE;YAClE,eAAe,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,SAAS;YACvD,UAAU,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAClC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;aAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,uEAAkE;YAClE,qEAAqE;YACrE,8DAA8D;YAC9D,KAAK,GAAG,OAAO,CAAC;YAChB,WAAW,CAAC,IAAI,CACf,iBAAiB,aAAa,uEAAuE,OAAO,cAAc,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpJ,CAAC;QACH,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACd,yBAAyB,aAAa,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,2DAA2D,QAAQ,mBAAmB,CACzJ,CAAC;QACH,CAAC;IACF,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,aAAa,CAAC,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,6EAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,uEAAuE;IACvE,yEAAuE;IACvE,YAAY;IACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACrD,IAAI,YAAuC,CAAC;IAC5C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACJ,YAAY,GAAG,yBAAyB,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,WAAW,CAAC,IAAI,CACf,mBAAmB,QAAQ,0EAC1B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,EAAE,CACF,CAAC;QACH,CAAC;IACF,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC;QACrC,KAAK;QACL,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;QACxF,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,QAAQ,EAAE,cAAc;KACxB,CAAC,CAAC;IACH,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC;YACJ,aAAa,CAAC,QAAQ,EAAE,6BAA6B,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,WAAW,CAAC,IAAI,CACf,+CAA+C,QAAQ,KACtD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,EAAE,CACF,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO;QACN,KAAK;QACL,QAAQ;QACR,aAAa;QACb,YAAY;QACZ,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,QAAQ;QACR,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;KACvF,CAAC;AAAA,CACF;AAkCD,SAAS,eAAe,CAAC,IAAY,EAAU;IAC9C,IAAI,CAAC;QACJ,OAAO,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;AAAA,CACD;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,GAAW,EAAW;IACvD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,GAAG,EAAE,CAAC;IAChF,OAAO,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAAA,CACvC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAA0C,EAAyB;IAC7G,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC;IAC1F,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,gBAAgB,GAAG,kBAAkB;SACzC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;SACnD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE/F,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;QACjC,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;IACF,CAAC;SAAM,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,WAAW,CAAC,IAAI,CACf,UAAU,KAAK,CAAC,EAAE,kIAAkI,gBAAgB;aAClK,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC;aAClC,IAAI,CACJ,IAAI,CACJ,uBAAuB,iBAAiB,4CAA4C,aAAa,GAAG,CACtG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,eAAe,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACtG,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,uEAAuE;IACvE,6DAA6D;IAC7D,6BAA6B;IAC7B,WAAW,CAAC,IAAI,CACf,UAAU,KAAK,CAAC,EAAE,yFAAyF,CAC3G,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;AAAA,CAChF;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACpC,KAAoC,EACpC,IAAsD,EACtD,OAA6B,EACc;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAA6C,EAAE,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChD,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACnD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC;AAAA,CACd;AAWD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CAC1C,KAAsB,EACtB,OAA0C,EAClB;IACxB,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAW,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,KAAK,CAAC,qBAAqB;YAAE,OAAO,IAAI,CAAC;QAC7C,MAAM,OAAO,GACZ,UAAU,KAAK,CAAC,EAAE,4EAA4E;YAC9F,8CAA8C,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,mBAAmB;YACjG,kBAAkB,WAAW,2DAA2D,CAAC;QAC1F,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC;IAAA,CACb,CAAC;IACF,OAAO;QACN,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,0BAA0B,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,WAAW;KACX,CAAC;AAAA,CACF;AAeD;;;GAGG;AACH,MAAM,UAAU,kCAAkC,CAAC,OAAe,EAAE,IAA0B,EAAE,IAAY,EAAU;IACrH,OAAO,UAAU,OAAO,2BAA2B,IAAI,MAAM,IAAI,mDAAmD,CAAC;AAAA,CACrH;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAChC,KAAsB,EACtB,MAA4B,EAC5B,OAAqC,EACC;IACtC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CACzB,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS;QACpC,CAAC,cAAc,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC5E,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAC3B,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAAA,CACnD;AAoBD;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CAC1C,KAAsB,EACtB,SAAyC,EACzC,OAAwB,EACQ;IAChC,IAAI,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7G,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrF,OAAO;QACN,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,UAAU,KAAK,CAAC,EAAE,wBAAwB,SAAS,CAAC,UAAU,QAAQ,SAAS,CAAC,YAAY,iCAAiC;KACzI,CAAC;AAAA,CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAC9C,KAAsB,EACtB,qBAAwC,EACpB;IACpB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC,YAAY,CAAC,OAAO;SAC/B,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,kCAAkC,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;AAAA,CAC3E;AAsDD;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC3C,OAAe,EACf,KAAwC,EACxC,OAA8D,EACrD;IACT,MAAM,UAAU,GAAwC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC5F,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC3B,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IAClD,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,UAAU,OAAO,gCAAgC,MAAM,GAAG,UAAU,GAAG,OAAO,gBAAgB,MAAM,UAAU,UAAU,YAAY,OAAO,eAAe,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,0BAA0B,OAAO,CAAC,mBAAmB,EAAE,CAAC;AAAA,CACrP;AAED;;;;;;;;;;GAUG;AACH,SAAS,0BAA0B,CAAC,OAAyC,EAAqB;IACjG,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,CAAC,+BAA+B,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB;QAAE,OAAO,CAAC,uCAAuC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAClH,IAAI,OAAO,CAAC,MAAM,KAAK,mBAAmB;QACzC,OAAO;YACN,qCAAqC,OAAO,CAAC,SAAS,cAAc,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,iBAAiB,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;SACpL,CAAC;IACH,MAAM,YAAY,GACjB,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;QACtC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;aACzB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC;aACvD,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACnB,MAAM,CAAC,WAAW,CAAC,GAAG,CACrB,CAAC,UAAU,EAAE,EAAE,CACd,sCAAsC,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,IAAI,MAAM,UAAU,CAAC,OAAO,EAAE,CACpG,CACD,CAAC;IACN,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;QAC1C,OAAO,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,2BAA2B,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,QAAQ,EAAE,MAAM,KAAK,YAAY;QAC5C,OAAO;YACN,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CACjC,CAAC,MAAM,EAAE,EAAE,CAAC,8BAA8B,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,aAAa,EAAE,CACnF;YACD,GAAG,YAAY;SACf,CAAC;IACH,OAAO,YAAY,CAAC;AAAA,CACpB;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAYnC,EAAiB;IACjB,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC3C,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC1C,IAAI,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC1E,aAAa;YACZ,OAAO,CAAC,UAAU,KAAK,SAAS;gBAC/B,CAAC,CAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC,eAAe,EAAY;gBAClF,CAAC,CAAC,6BAA6B,CAAC;oBAC9B,SAAS,EAAE,OAAO,CAAC,eAAe;oBAClC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;oBAC5C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;oBAC5C,IAAI,EAAE,OAAO,CAAC,UAAU;oBACxB,eAAe,EAAE,OAAO,CAAC,eAAe;oBACxC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;iBAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,CAAC;QACpC,QAAQ;QACR,OAAO;QACP,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,2BAA2B,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7E,4EAAkE;IAClE,yDAAyD;IACzD,MAAM,cAAc,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,eAAe,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,kBAAkB,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,mBAAmB,GAAG,iBAAiB;QAC5C,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM;QACnG,CAAC,CAAC,CAAC,CAAC;IACL,IAAI,gBAAgB,GAAsB,EAAE,CAAC;IAC7C,IAAI,gBAAgB,GAAsB,EAAE,CAAC;IAC7C,4EAA4E;IAC5E,oDAAoD;IACpD,IAAI,cAAyD,CAAC;IAC9D,gFAAmE;IACnE,2EAA2E;IAC3E,yEAAyE;IACzE,mDAAmD;IACnD,MAAM,OAAO,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,mBAAmB,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3G,MAAM,iBAAiB,GAAG,GAAsB,EAAE,CAAC;QAClD,IAAI,cAAc,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QAC5C,OAAO;YACN,4BAA4B,CAAC,OAAO,EAAE,cAAc,EAAE;gBACrD,YAAY,EAAE,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM;gBACrE,mBAAmB;aACnB,CAAC;SACF,CAAC;IAAA,CACF,CAAC;IACF,OAAO;QACN,SAAS;QACT,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;QACzD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,eAAe,EAAE;YAChB,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,0BAA0B,CAAC;oBAC3C,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,QAAQ;oBACR,aAAa,EAAE,SAAS,CAAC,aAAa;oBACtC,iBAAiB,EAAE,SAAS,CAAC,YAAY;oBACzC,kBAAkB,EAAE,IAAI,CAAC,WAAW;iBACpC,CAAC,CAAC;gBACH,gBAAgB,GAAG,QAAQ,CAAC,WAAW,CAAC;gBACxC,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC;gBAChC,OAAO,EAAE,WAAW,EAAE,qBAAqB,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YAAA,CAC9F;YACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;gBACrF,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACjD,kCAAkC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC3D,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;YAAA,CAChE;YACD,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;SAC3D;QACD,kBAAkB,EAAE,GAAG,EAAE,CACxB,MAAM,CAAC,MAAM,CAAC;YACb,GAAG,SAAS,CAAC,WAAW;YACxB,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,aAAa,CAAC,CAAC;YACjF,GAAG,mBAAmB;YACtB,GAAG,gBAAgB;YACnB,GAAG,gBAAgB;YACnB,GAAG,iBAAiB,EAAE;YACtB,GAAG,IAAI,CAAC,WAAW;SACnB,CAAC;KACH,CAAC;AAAA,CACF;AAED,8EAA8E;AAC9E,kEAAmD;AACnD,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,OAA6E,EACxD;IACrB,OAAO,uBAAuB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;AAAA,CACjD;AAOD,SAAS,sBAAsB,CAAC,KAAc,EAAiC;IAC9E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1F,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IACC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QAC9B,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;QACzC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;QACnC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;QACzC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,EACxC,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,kBAAkB,GAAsC,EAAE,CAAC;IACjE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1F,MAAM,UAAU,GAAG,KAAgC,CAAC;QACpD,IACC,OAAO,UAAU,CAAC,EAAE,KAAK,QAAQ;YACjC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE;YAC3B,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ;YACtC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;YACzC,UAAU,CAAC,OAAO,GAAG,CAAC,EACrB,CAAC;YACF,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAGjD;KACH,CAAC,CAAC;AAAA,CACH;AAED,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB,CACtC,OAA6E,EACzC;IACpC,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,wBAAwB;YAAE,SAAS;QACvF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,OAAO,GAAI,IAA8B,CAAC,OAAO,CAAC;YACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvD,MAAM,eAAe,GAAG,sBAAsB,CAAE,IAAsC,CAAC,eAAe,CAAC,CAAC;gBACxG,OAAO,MAAM,CAAC,MAAM,CAAC;oBACpB,OAAO;oBACP,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;iBAC7D,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,8EAA8E;AAC9E,0DAAqD;AACrD,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,KAAsB,EAAa;IAC5D,OAAO;QACN,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QACvB,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QACrC,YAAY,EAAE;YACb,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;YACtC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC;YAChC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC;SACxC;QACD,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC3B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE;YACvF,CAAC,CAAC,IAAI;QACP,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;KAC1F,CAAC;AAAA,CACF;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,KAAsB,EAAU;IACnE,OAAO,gBAAgB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CACjD;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACxC,KAAsB,EACtB,aAAgD,EAC5B;IACpB,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,mBAAmB,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,UAAU,GACf,aAAa,EAAE,MAAM,KAAK,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,MAAM,KAAK,OAAO;QAClF,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO;QACnD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,cAAc,GAAG,CAAC,GAAG,mBAAmB,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAC7G,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAChF,CAAC;IACF,OAAO,sBAAsB,CAAC;QAC7B,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,cAAc,EAAE,GAAG,oBAAoB,EAAE;QACzC,eAAe,EAAE;YAChB;gBACC,QAAQ,EAAE,GAAG,KAAK,CAAC,EAAE,aAAa;gBAClC,aAAa,EAAE,WAAW;gBAC1B,cAAc,EAAE,mBAAmB;aACnC;YACD,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,MAAM,KAAK,OAAO;gBACtF,CAAC,CAAC;oBACA;wBACC,QAAQ,EAAE,WAAW,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE;wBAC/C,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO;wBAC5C,cAAc,EAAE,EAAE;qBAClB;oBACD,GAAG,UAAU;iBACb;gBACF,CAAC,CAAC,EAAE,CAAC;SACN;QACD,kBAAkB,EAAE,cAAc;KAClC,CAAC,CAAC;AAAA,CACH;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAE9E,6DAAwD;AACxD,MAAM,UAAU,cAAc,CAAC,OAAe,EAAU;IACvD,OAAO,SAAS,OAAO,EAAE,CAAC;AAAA,CAC1B;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,eAAe,CAAC;AAChE,MAAM,CAAC,MAAM,6BAA6B,GAAG,YAAY,CAAC;AAC1D,iFAAiF;AACjF,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAC3C,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAEvC,iFAAiF;AACjF,SAAS,iBAAiB,CAAC,KAAsB,EAAU;IAC1D,OAAO,KAAK,CAAC,eAAe,IAAI,wBAAwB,CAAC;AAAA,CACzD;AAED,qFAAqF;AACrF,MAAM,UAAU,uBAAuB,CAAC,KAAsB,EAA0B;IACvF,OAAO;QACN,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,cAAc,EAAE,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAChD,cAAc,EAAE,mBAAmB,CAAC,KAAK,CAAC;KAC1C,CAAC;AAAA,CACF;AAED,kEAAkE;AAClE,MAAM,UAAU,+BAA+B,GAAqB;IACnE,OAAO;QACN,QAAQ,EAAE,gCAAgC;QAC1C,QAAQ,EAAE,+BAA+B;QACzC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,uBAAuB,CAAC;KACrD,CAAC;AAAA,CACF;AAED,gFAAgF;AAChF,MAAM,UAAU,4BAA4B,CAAC,MAAkC,EAAoB;IAClG,OAAO;QACN,QAAQ,EAAE,6BAA6B;QACvC,QAAQ,EAAE,4BAA4B;QACtC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC;KAC7C,CAAC;AAAA,CACF;AASD,iFAAoE;AACpE,MAAM,UAAU,6BAA6B,CAAC,OAAe,EAAE,OAA4B,EAAU;IACpG,OAAO,UAAU,OAAO,uBAAuB,OAAO,CAAC,eAAe,wBAAwB,OAAO,CAAC,YAAY,yBAAyB,OAAO,wBAAwB,CAAC;AAAA,CAC3K;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,SAA0B,EAAmC;IACtG,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;IACzC,QAAQ,CAAC,cAAc,CAAC,+BAA+B,EAAE,CAAC,CAAC;IAC3D,QAAQ,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,IAAI,UAAU,CAAC,QAAQ,KAAK,gCAAgC,EAAE,CAAC;QAClG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO;QACN,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/D,YAAY,EAAE,iBAAiB,CAAC,SAAS,CAAC;KAC1C,CAAC;AAAA,CACF;AAeD,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,OAMtC,EAA0B;IAC1B,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACjF,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,YAAmD,CAAC;IACxD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACxC,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,YAAY,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACrC,WAAW,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,KAAK,CAAC,EAAE,yBAAyB,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5F,CAAC;aAAM,IAAI,YAAY,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;YACzD,WAAW,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,KAAK,CAAC,EAAE,sCAAsC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QACzG,CAAC;IACF,CAAC;IACD,MAAM,IAAI,GACT,OAAO,CAAC,YAAY;QACpB,iBAAiB,CAAC,QAAQ,EAAE;YAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,cAAc;YAC5C,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SAC1D,CAAC,CAAC;IACJ,OAAO;QACN,QAAQ;QACR,IAAI;QACJ,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;KACvC,CAAC;AAAA,CACF","sourcesContent":["/**\n * Suite workspace location, lazy provisioning, and assembly (方案系统设计.md v2\n * §4/§5/§8/§9/§11/§12, M1a).\n *\n * The loader is the assembler layer of the suite system: it resolves the\n * active suite id (explicit > AGENT_FORGE_SUITE > project settings > global\n * settings > \"assistant\"), provisions the builtin suite workspaces under\n * `<agentDir>/suites/<id>/`, assembles the agents.md three-level chain\n * (system -> suite -> project, 设计 §8), gates the global SYSTEM.md/\n * APPEND_SYSTEM.md system prompt channel by inheritSystemAgentsMd (设计 §4:\n * the project-level `<cwd>/.agent-forge/` layer always passes), and bridges\n * the assembled suite onto the existing ProfileIdentityV1/ProfileLock\n * mechanisms. The project level of the chain is delegated to the existing\n * resource loader — the ancestor chain logic itself is never reimplemented\n * here.\n */\nimport { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join, resolve, sep } from \"node:path\";\nimport type { JsonValue } from \"@agent-forge/ai\";\nimport { CONFIG_DIR_NAME } from \"../config.ts\";\nimport type { ResourceDiagnostic } from \"../core/diagnostics.ts\";\nimport type { SettingsManager } from \"../core/settings-manager.ts\";\nimport type { Skill } from \"../core/skills.ts\";\nimport { loadSkills } from \"../core/skills.ts\";\nimport type { HostFactsV1 } from \"../plugins/ecosystem/types.ts\";\nimport type { ProfileIdentityV1 } from \"../profile/identity.ts\";\nimport { buildProfileIdentityV1, stableJsonDigest } from \"../profile/identity.ts\";\nimport type { ProfileLockV1, ProfileLockVerificationV1 } from \"../profile/lock.ts\";\nimport { createProfileLock, verifyProfileLock } from \"../profile/lock.ts\";\nimport type {\n\tBuiltinPluginManifestOverridesV1,\n\tBuiltinPluginProfileIdV1,\n\tBuiltinPluginProfileResolutionV1,\n} from \"../profile/plugin-profiles.ts\";\nimport { resolveBuiltinPluginProfileV1 } from \"../profile/plugin-profiles.ts\";\nimport type { VerifiedToolPluginV1 } from \"../profile/profile-assembly.ts\";\nimport type { RegistryProfileEntryV1, RegistrySourceV1 } from \"../profile/profile-registry.ts\";\nimport { createProfileRegistry } from \"../profile/profile-registry.ts\";\nimport { stripBom } from \"../utils/text.ts\";\nimport {\n\tBUILTIN_SUITES,\n\tDEFAULT_SUITE_ID,\n\tFACTORY_CONTENTS_VERSION,\n\tgetBuiltinSuite,\n\tisBuiltinSuiteId,\n\tisValidSuiteId,\n\tORIENTATION_PROMPTS,\n\tparseSuiteJson,\n\tSUITE_SCHEMA_VERSION,\n\ttype SuiteDefinition,\n\tserializeSuiteJson,\n} from \"./builtin-suites.ts\";\n\nexport { DEFAULT_SUITE_ID };\n\nexport const SUITES_DIR_NAME = \"suites\";\nexport const SUITE_MANIFEST_FILENAME = \"suite.json\";\nexport const SUITE_AGENTS_MD_FILENAME = \"agents.md\";\nexport const SUITE_ENV_VAR = \"AGENT_FORGE_SUITE\";\n/** customType of the session custom entry recording the suite a session was created with (设计 §10.1). */\nexport const SUITE_SESSION_ENTRY_TYPE = \"suite\";\n/** Persisted suite profile lock inside the suite workspace (M4, 设计 §12). */\nexport const SUITE_LOCK_FILENAME = \".profile-lock.json\";\n\nexport function getSuitesRootDir(agentDir: string): string {\n\treturn join(agentDir, SUITES_DIR_NAME);\n}\n\nexport function getSuiteWorkspaceDir(agentDir: string, suiteId: string): string {\n\treturn join(getSuitesRootDir(agentDir), suiteId);\n}\n\n/** The suite-local skill layer directory (统一修复轮 B): `<suiteDir>/skills`. */\nexport function getSuiteLocalSkillsDir(agentDir: string, suiteId: string): string {\n\treturn join(getSuiteWorkspaceDir(agentDir, suiteId), \"skills\");\n}\n\n/** The suite-local capability-plugin layer directory (统一修复轮 B): `<suiteDir>/plugins`. */\nexport function getSuiteLocalPluginsDir(agentDir: string, suiteId: string): string {\n\treturn join(getSuiteWorkspaceDir(agentDir, suiteId), \"plugins\");\n}\n\n/** Structured error for unknown suite ids; lists the available ids (设计 §9). */\nexport class SuiteResolutionError extends Error {\n\treadonly requestedId: string;\n\treadonly availableSuiteIds: readonly string[];\n\n\tconstructor(requestedId: string, availableSuiteIds: readonly string[]) {\n\t\tsuper(`Unknown suite \"${requestedId}\". Available suites: ${availableSuiteIds.join(\", \")}`);\n\t\tthis.name = \"SuiteResolutionError\";\n\t\tthis.requestedId = requestedId;\n\t\tthis.availableSuiteIds = Object.freeze([...availableSuiteIds]);\n\t}\n}\n\n/** Structured error for resuming a session under a suite it is not bound to. */\nexport class SuiteRebindError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"SuiteRebindError\";\n\t}\n}\n\n/**\n * Every suite id resolvable on this host: the builtin pair plus user\n * workspaces that already contain a suite.json.\n */\nexport function listSuiteIds(agentDir: string): string[] {\n\tconst ids = new Set(BUILTIN_SUITES.map((suite) => suite.id));\n\tconst rootDir = getSuitesRootDir(agentDir);\n\tif (existsSync(rootDir)) {\n\t\tfor (const entry of readdirSync(rootDir, { withFileTypes: true })) {\n\t\t\tif (!entry.isDirectory()) continue;\n\t\t\tif (!existsSync(join(rootDir, entry.name, SUITE_MANIFEST_FILENAME))) continue;\n\t\t\tids.add(entry.name);\n\t\t}\n\t}\n\treturn [...ids].sort();\n}\n\nexport interface ResolveSuiteIdOptions {\n\t/** Explicit suite id (SDK/CLI parameter); highest priority. */\n\texplicit?: string;\n\t/** Raw AGENT_FORGE_SUITE value; callers pass process.env[SUITE_ENV_VAR]. */\n\tenvSuite?: string;\n\t/** Settings source for the project/global `suite` keys. */\n\tsettings?: Pick<SettingsManager, \"getProjectSettings\" | \"getGlobalSettings\">;\n\t/** Agent dir used for workspace discovery and available-id listing. */\n\tagentDir: string;\n}\n\nfunction normalizeCandidate(value: unknown): string | undefined {\n\tif (typeof value !== \"string\") return undefined;\n\tconst trimmed = value.trim();\n\treturn trimmed.length > 0 ? trimmed : undefined;\n}\n\n/**\n * Resolves the active suite id: explicit > env AGENT_FORGE_SUITE > project\n * settings `suite` > global settings `suite` > \"assistant\" (设计 §9). The\n * first configured value wins; an unknown or malformed value is a structured\n * error, never a silent fallback.\n */\nexport function resolveSuiteId(options: ResolveSuiteIdOptions): string {\n\tconst candidate =\n\t\tnormalizeCandidate(options.explicit) ??\n\t\tnormalizeCandidate(options.envSuite) ??\n\t\t(options.settings === undefined ? undefined : normalizeCandidate(options.settings.getProjectSettings().suite)) ??\n\t\t(options.settings === undefined ? undefined : normalizeCandidate(options.settings.getGlobalSettings().suite));\n\tif (candidate === undefined) return DEFAULT_SUITE_ID;\n\tif (!isValidSuiteId(candidate)) throw new SuiteResolutionError(candidate, listSuiteIds(options.agentDir));\n\tif (!isBuiltinSuiteId(candidate)) {\n\t\tconst workspaceManifest = join(getSuiteWorkspaceDir(options.agentDir, candidate), SUITE_MANIFEST_FILENAME);\n\t\tif (!existsSync(workspaceManifest)) throw new SuiteResolutionError(candidate, listSuiteIds(options.agentDir));\n\t}\n\treturn candidate;\n}\n\nexport interface SuiteWorkspace {\n\treadonly suite: SuiteDefinition;\n\treadonly suiteDir: string;\n\treadonly suiteJsonPath: string;\n\treadonly agentsMdPath: string;\n\treadonly diagnostics: readonly string[];\n\t/** Persisted lock file path inside the workspace (M4). */\n\treadonly lockPath: string;\n\t/**\n\t * The suite profile lock (设计 §12): the persisted lock when one existed, a\n\t * fresh lock frozen over the current identity otherwise.\n\t */\n\treadonly lock: ProfileLockV1;\n\t/** Current resolved identity, including any selected optional domain Profile. */\n\treadonly identity: ProfileIdentityV1;\n\t/** Verify result against the persisted lock; absent when none existed. */\n\treadonly lockVerification?: ProfileLockVerificationV1;\n}\n\n/**\n * Serializes a ProfileLockV1 to the canonical `.profile-lock.json` text\n * (stable field order, trailing newline). Round-trips through\n * parseSuiteProfileLockFile.\n */\nexport function serializeSuiteProfileLockFile(lock: ProfileLockV1): string {\n\tconst ordered = {\n\t\tidentity: {\n\t\t\tprofileId: lock.identity.profileId,\n\t\t\tprofileVersion: lock.identity.profileVersion,\n\t\t\tmanifestDigest: lock.identity.manifestDigest,\n\t\t\tcapabilityVersions: lock.identity.capabilityVersions.map((ref) => ({ id: ref.id, version: ref.version })),\n\t\t},\n\t\tlockedAt: lock.lockedAt,\n\t\tlockedBy: lock.lockedBy,\n\t\tgeneration: lock.generation,\n\t};\n\treturn `${JSON.stringify(ordered, null, 2)}\\n`;\n}\n\n/**\n * Parses `.profile-lock.json` text back into a ProfileLockV1. Throws on any\n * structural mismatch so callers can apply their corruption policy.\n */\nexport function parseSuiteProfileLockFile(text: string): ProfileLockV1 {\n\tconst value: unknown = JSON.parse(text);\n\tif (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(\".profile-lock.json must be a JSON object\");\n\t}\n\tconst record = value as Record<string, unknown>;\n\tconst identityRecord = record.identity;\n\tif (identityRecord === null || typeof identityRecord !== \"object\" || Array.isArray(identityRecord)) {\n\t\tthrow new Error(\".profile-lock.json identity must be a JSON object\");\n\t}\n\tconst identity = identityRecord as Record<string, unknown>;\n\tif (\n\t\ttypeof identity.profileId !== \"string\" ||\n\t\ttypeof identity.profileVersion !== \"string\" ||\n\t\ttypeof identity.manifestDigest !== \"string\" ||\n\t\t!Array.isArray(identity.capabilityVersions)\n\t) {\n\t\tthrow new Error(\n\t\t\t\".profile-lock.json identity must carry profileId/profileVersion/manifestDigest/capabilityVersions\",\n\t\t);\n\t}\n\tconst capabilityVersions = identity.capabilityVersions.map((entry) => {\n\t\tif (entry === null || typeof entry !== \"object\" || Array.isArray(entry)) {\n\t\t\tthrow new Error(\".profile-lock.json identity.capabilityVersions entries must be objects\");\n\t\t}\n\t\tconst capability = entry as Record<string, unknown>;\n\t\tif (typeof capability.id !== \"string\" || typeof capability.version !== \"number\") {\n\t\t\tthrow new Error(\".profile-lock.json identity.capabilityVersions entries must carry id/version\");\n\t\t}\n\t\treturn { id: capability.id, version: capability.version };\n\t});\n\tif (\n\t\ttypeof record.lockedAt !== \"number\" ||\n\t\ttypeof record.lockedBy !== \"string\" ||\n\t\ttypeof record.generation !== \"number\"\n\t) {\n\t\tthrow new Error(\".profile-lock.json must carry lockedAt/lockedBy/generation\");\n\t}\n\treturn Object.freeze({\n\t\tidentity: Object.freeze({\n\t\t\tprofileId: identity.profileId,\n\t\t\tprofileVersion: identity.profileVersion,\n\t\t\tmanifestDigest: identity.manifestDigest,\n\t\t\tcapabilityVersions: Object.freeze(capabilityVersions.map((ref) => Object.freeze({ ...ref }))),\n\t\t}),\n\t\tlockedAt: record.lockedAt,\n\t\tlockedBy: record.lockedBy,\n\t\tgeneration: record.generation,\n\t});\n}\n\n/**\n * Locates and lazily provisions `<agentDir>/suites/<id>/`: the builtin pair\n * gets its factory suite.json plus an empty agents.md skeleton on first start\n * (设计 §5). Corruption policy (设计 §9): builtin suites fall back to factory\n * content with diagnostics; user suites fail fast with the file path.\n */\nexport function loadSuiteWorkspace(options: {\n\tagentDir: string;\n\tsuiteId: string;\n\tpluginProfile?: BuiltinPluginProfileResolutionV1;\n}): SuiteWorkspace {\n\tconst { agentDir, suiteId } = options;\n\tconst suiteDir = getSuiteWorkspaceDir(agentDir, suiteId);\n\tconst suiteJsonPath = join(suiteDir, SUITE_MANIFEST_FILENAME);\n\tconst agentsMdPath = join(suiteDir, SUITE_AGENTS_MD_FILENAME);\n\tconst diagnostics: string[] = [];\n\n\tlet suite: SuiteDefinition;\n\tif (!existsSync(suiteJsonPath)) {\n\t\tconst builtin = getBuiltinSuite(suiteId);\n\t\tif (builtin === undefined) throw new SuiteResolutionError(suiteId, listSuiteIds(agentDir));\n\t\tmkdirSync(suiteDir, { recursive: true });\n\t\twriteFileSync(suiteJsonPath, serializeSuiteJson(builtin), \"utf8\");\n\t\t// D-075 S4 第三批：首启不再预种角色文件——种子移到 subagent-delegate 插件\n\t\t// 注册期（entry 的幂等 seedFactoryRoleCatalog 补缺），插件安装并注册时\n\t\t// `<agentDir>/roles/{explore,reviewer}.json` 自然到位。\n\t\tsuite = builtin;\n\t} else {\n\t\tconst parsed = parseSuiteJson(readFileSync(suiteJsonPath, \"utf8\"), {\n\t\t\texpectedBuiltin: getBuiltinSuite(suiteId) !== undefined,\n\t\t\texpectedId: suiteId,\n\t\t});\n\t\tconst builtin = getBuiltinSuite(suiteId);\n\t\tif (parsed.valid && parsed.suite) {\n\t\t\tsuite = parsed.suite;\n\t\t} else if (builtin !== undefined) {\n\t\t\t// Builtin corruption policy (设计 §9): fall back to factory content\n\t\t\t// with diagnostics instead of locking the user out. The file on disk\n\t\t\t// is left untouched; recovery (reset) is an explicit M4 flow.\n\t\t\tsuite = builtin;\n\t\t\tdiagnostics.push(\n\t\t\t\t`suite.json at ${suiteJsonPath} is invalid; falling back to the factory content for builtin suite \"${suiteId}\". Errors: ${parsed.errors.join(\"; \")}`,\n\t\t\t);\n\t\t} else {\n\t\t\tthrow new Error(\n\t\t\t\t`Invalid suite.json at ${suiteJsonPath}: ${parsed.errors.join(\"; \")}. Fix the file, or delete the suite workspace directory ${suiteDir} and recreate it.`,\n\t\t\t);\n\t\t}\n\t}\n\n\tif (!existsSync(agentsMdPath)) {\n\t\twriteFileSync(agentsMdPath, \"\", \"utf8\");\n\t}\n\n\t// Suite profile lock persistence (M4, 设计 §12): an existing lock file is\n\t// verified against the current identity (drift/migration recorded, never\n\t// blocking and never silently replaced); without one a fresh lock is frozen\n\t// and persisted. A lock file that cannot be parsed is recreated with a\n\t// diagnostic — it carries no openable identity, so nothing is silently\n\t// replaced.\n\tconst lockPath = join(suiteDir, SUITE_LOCK_FILENAME);\n\tlet previousLock: ProfileLockV1 | undefined;\n\tif (existsSync(lockPath)) {\n\t\ttry {\n\t\t\tpreviousLock = parseSuiteProfileLockFile(readFileSync(lockPath, \"utf8\"));\n\t\t} catch (error) {\n\t\t\tdiagnostics.push(\n\t\t\t\t`Profile lock at ${lockPath} is unreadable; recreating it over the current suite identity. Errors: ${\n\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t}`,\n\t\t\t);\n\t\t}\n\t}\n\tconst bridge = bridgeSuiteProfileLock({\n\t\tsuite,\n\t\t...(options.pluginProfile === undefined ? {} : { pluginProfile: options.pluginProfile }),\n\t\t...(previousLock === undefined ? {} : { previousLock }),\n\t\tlockedBy: \"suite-loader\",\n\t});\n\tdiagnostics.push(...bridge.diagnostics);\n\tif (previousLock === undefined) {\n\t\ttry {\n\t\t\twriteFileSync(lockPath, serializeSuiteProfileLockFile(bridge.lock), \"utf8\");\n\t\t} catch (error) {\n\t\t\tdiagnostics.push(\n\t\t\t\t`Failed to persist the suite profile lock at ${lockPath}: ${\n\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t}`,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn {\n\t\tsuite,\n\t\tsuiteDir,\n\t\tsuiteJsonPath,\n\t\tagentsMdPath,\n\t\tdiagnostics: Object.freeze(diagnostics),\n\t\tlockPath,\n\t\tlock: bridge.lock,\n\t\tidentity: bridge.identity,\n\t\t...(bridge.verification === undefined ? {} : { lockVerification: bridge.verification }),\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// agents.md three-level chain (设计 §8)\n// ---------------------------------------------------------------------------\n\nexport type SuiteAgentsMdSource = \"system\" | \"suite\" | \"project\";\n\nexport interface SuiteAgentsMdEntry {\n\treadonly source: SuiteAgentsMdSource;\n\treadonly path: string;\n\treadonly content: string;\n}\n\nexport interface SuiteAgentsMdAssembly {\n\treadonly chain: readonly SuiteAgentsMdEntry[];\n\treadonly diagnostics: readonly string[];\n}\n\nexport interface AssembleSuiteAgentsMdChainOptions {\n\treadonly suite: SuiteDefinition;\n\treadonly agentDir: string;\n\treadonly suiteJsonPath: string;\n\treadonly suiteAgentsMdPath: string;\n\t/**\n\t * Project-level context files exactly as produced by the existing resource\n\t * loader (`ResourceLoader.getAgentsFiles()`: agentDir global entry first,\n\t * then the AGENTS.md/CLAUDE.md ancestor chain). The ancestor chain logic is\n\t * delegated, never reimplemented; entries under agentDir are classified as\n\t * system-layer candidates.\n\t */\n\treadonly projectAgentsFiles: ReadonlyArray<{ path: string; content: string }>;\n}\n\nfunction readContextFile(path: string): string {\n\ttry {\n\t\treturn stripBom(readFileSync(path, \"utf8\"));\n\t} catch {\n\t\treturn \"\";\n\t}\n}\n\nfunction isUnderDir(path: string, dir: string): boolean {\n\tconst resolvedPath = resolve(path);\n\tconst resolvedDir = resolve(dir);\n\tconst prefix = resolvedDir.endsWith(sep) ? resolvedDir : `${resolvedDir}${sep}`;\n\treturn resolvedPath.startsWith(prefix);\n}\n\n/**\n * Assembles the agents.md three-level chain (设计 §8): system layer (the\n * agentDir context file the resource loader's agentsFiles already carries,\n * e.g. AGENTS.md, gated by inheritSystemAgentsMd) -> suite layer\n * (`suites/<id>/agents.md`) -> project layer (existing ancestor chain, passed\n * in unchanged). The global SYSTEM.md/APPEND_SYSTEM.md never ride the chain:\n * they keep their native system prompt channel and are gated there by\n * createSuiteSystemPromptGate, so both channels stay single-sourced. Every\n * entry carries its source label; missing layers are skipped. Diagnostics\n * record a blocked system layer (one-time migration hint) and the empty\n * association counts (设计 §11.3: 惰性 + 可观测).\n */\nexport function assembleSuiteAgentsMdChain(options: AssembleSuiteAgentsMdChainOptions): SuiteAgentsMdAssembly {\n\tconst { suite, agentDir, suiteJsonPath, suiteAgentsMdPath, projectAgentsFiles } = options;\n\tconst diagnostics: string[] = [];\n\n\t// System-layer candidates are the agentDir entries already present in the\n\t// loader's agentsFiles; they are never read from disk here again.\n\tconst systemCandidates = projectAgentsFiles\n\t\t.filter((entry) => isUnderDir(entry.path, agentDir))\n\t\t.map((entry) => ({ path: entry.path, content: entry.content }));\n\tconst projectEntries = projectAgentsFiles.filter((entry) => !isUnderDir(entry.path, agentDir));\n\n\tconst chain: SuiteAgentsMdEntry[] = [];\n\tif (suite.inheritSystemAgentsMd) {\n\t\tfor (const candidate of systemCandidates) {\n\t\t\tchain.push({ source: \"system\", path: candidate.path, content: candidate.content });\n\t\t}\n\t} else if (systemCandidates.length > 0) {\n\t\tdiagnostics.push(\n\t\t\t`Suite \"${suite.id}\" does not inherit the system agents.md layer (inheritSystemAgentsMd=false); system-layer file(s) kept out of the suite chain: ${systemCandidates\n\t\t\t\t.map((candidate) => candidate.path)\n\t\t\t\t.join(\n\t\t\t\t\t\", \",\n\t\t\t\t)}. Migrate them into ${suiteAgentsMdPath} or set \"inheritSystemAgentsMd\": true in ${suiteJsonPath}.`,\n\t\t);\n\t}\n\n\tchain.push({ source: \"suite\", path: suiteAgentsMdPath, content: readContextFile(suiteAgentsMdPath) });\n\tfor (const entry of projectEntries) {\n\t\tchain.push({ source: \"project\", path: entry.path, content: entry.content });\n\t}\n\n\t// Plugin associations are wired since M3 (the sdk filters the external\n\t// capability plugin pool by associations.plugins); mcp stays\n\t// declaration-only until M4.\n\tdiagnostics.push(\n\t\t`Suite \"${suite.id}\" mcp associations are declaration-only until M4; MCP association filtering is unwired.`,\n\t);\n\n\treturn { chain: Object.freeze(chain), diagnostics: Object.freeze(diagnostics) };\n}\n\n/**\n * Merges the assembled chain with the resource loader's own agentsFiles for\n * the contextFiles injection channel: chain entries are prepended unless they\n * are empty or already present in the base. Entries with empty content inject\n * nothing, so a fresh factory skeleton changes no prompt bytes. Base entries\n * under agentDir are dropped unconditionally (设计 §8): with\n * inheritSystemAgentsMd=false the switch blocks the system layer, with true\n * the chain already carries it at the head — keeping it in the base too would\n * duplicate it and pin it after the suite layer, breaking the\n * system -> suite -> project order.\n */\nexport function mergeSuiteAgentsFiles(\n\tchain: readonly SuiteAgentsMdEntry[],\n\tbase: ReadonlyArray<{ path: string; content: string }>,\n\toptions: { agentDir: string },\n): Array<{ path: string; content: string }> {\n\tconst retainedBase = base.filter((entry) => !isUnderDir(entry.path, options.agentDir));\n\tconst basePathSet = new Set(retainedBase.map((entry) => resolve(entry.path)));\n\tconst merged: Array<{ path: string; content: string }> = [];\n\tfor (const entry of chain) {\n\t\tif (entry.content.trim().length === 0) continue;\n\t\tif (basePathSet.has(resolve(entry.path))) continue;\n\t\tmerged.push({ path: entry.path, content: entry.content });\n\t}\n\tmerged.push(...retainedBase.map((entry) => ({ path: entry.path, content: entry.content })));\n\treturn merged;\n}\n\nexport interface SuiteSystemPromptGate {\n\t/** Gates the loader's main system prompt: the discovered file's content, or undefined. */\n\treadonly systemPromptOverride: (base: string | undefined) => string | undefined;\n\t/** Gates the loader's append system prompt: the discovered file's content array. */\n\treadonly appendSystemPromptOverride: (base: string[]) => string[];\n\t/** Blocked global system-layer files; filled as the overrides run, deduplicated. */\n\treadonly diagnostics: readonly string[];\n}\n\n/**\n * Gates the global SYSTEM.md/APPEND_SYSTEM.md system prompt channel by\n * inheritSystemAgentsMd (设计 §8: the switch governs the whole system layer,\n * not just the agents.md chain). The resource loader feeds both overrides with\n * the resolved content of exactly one discovered file — project-level\n * `<cwd>/.agent-forge/<name>` first, else global `<agentDir>/<name>` — with no\n * path attached, so project-level existence identifies the base origin:\n * present means the project layer, which per 设计 §4 is the third level and\n * always passes the switch; absent means a global source, which passes only\n * when the suite inherits the system layer. Blocked global files are recorded\n * in diagnostics with their paths (one-time migration hint, 设计 §11.3).\n */\nexport function createSuiteSystemPromptGate(\n\tsuite: SuiteDefinition,\n\toptions: { cwd: string; agentDir: string },\n): SuiteSystemPromptGate {\n\tconst diagnostics: string[] = [];\n\tconst passes = (filename: string): boolean => {\n\t\tconst projectPath = join(options.cwd, CONFIG_DIR_NAME, filename);\n\t\tif (existsSync(projectPath)) return true;\n\t\tif (suite.inheritSystemAgentsMd) return true;\n\t\tconst message =\n\t\t\t`Suite \"${suite.id}\" does not inherit the global system layer (inheritSystemAgentsMd=false); ` +\n\t\t\t`global file kept out of the model context: ${join(options.agentDir, filename)}. Move it to the ` +\n\t\t\t`project level (${projectPath}) or set \"inheritSystemAgentsMd\": true in the suite.json.`;\n\t\tif (!diagnostics.includes(message)) diagnostics.push(message);\n\t\treturn false;\n\t};\n\treturn {\n\t\tsystemPromptOverride: (base) => (base === undefined || passes(\"SYSTEM.md\") ? base : undefined),\n\t\tappendSystemPromptOverride: (base) => (base.length === 0 || passes(\"APPEND_SYSTEM.md\") ? base : []),\n\t\tdiagnostics,\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Association filtering (设计 §3/§4/§11.3, M1b)\n// ---------------------------------------------------------------------------\n\nexport type SuiteAssociationKind = \"skills\" | \"plugins\" | \"capabilities\";\n\nexport interface SuiteAssociationFilterResult<T> {\n\t/** Entries that pass the filter, in input order. */\n\treadonly kept: T[];\n\t/** Association names that matched no discovered entry (设计 §11.3 dangling). */\n\treadonly dangling: readonly string[];\n}\n\n/**\n * Single-sourced dangling-association diagnostic text (设计 §11.3): reported\n * through the suiteDiagnostics channel, never thrown.\n */\nexport function suiteDanglingAssociationDiagnostic(suiteId: string, kind: SuiteAssociationKind, name: string): string {\n\treturn `Suite \"${suiteId}\" dangling association \"${name}\" (${kind}): not found in the discovered registry; ignored.`;\n}\n\n/**\n * Filters the discovered skills down to the suite's skill associations (设计\n * §3: the filter lives in the assembler; discovery stays untouched). Project\n * scope (`<cwd>/.agent-forge/`) is the third layer (设计 §4) and always passes;\n * every other entry is kept only when its `Skill.name` exactly matches an\n * `associations.skills` entry. Association names that match no discovered\n * skill — including case mismatches — are reported as dangling.\n *\n * `options.localSkillsDir` is the suite-local skill layer (统一修复轮 B:\n * `<agentDir>/suites/<id>/skills`): its entries live inside the active suite\n * workspace, so suite activation is their association and they pass the filter\n * by path — the suite-local layer exemption — instead of requiring an\n * association entry.\n */\nexport function filterSuiteSkills(\n\tsuite: SuiteDefinition,\n\tskills: ReadonlyArray<Skill>,\n\toptions?: { localSkillsDir?: string },\n): SuiteAssociationFilterResult<Skill> {\n\tconst associated = new Set(suite.associations.skills);\n\tconst discovered = new Set(skills.map((skill) => skill.name));\n\tconst dangling = suite.associations.skills.filter((name) => !discovered.has(name));\n\tconst localSkillsDir = options?.localSkillsDir;\n\tconst kept = skills.filter(\n\t\t(skill) =>\n\t\t\tskill.sourceInfo.scope === \"project\" ||\n\t\t\t(localSkillsDir !== undefined && isUnderDir(skill.filePath, localSkillsDir)) ||\n\t\t\tassociated.has(skill.name),\n\t);\n\treturn { kept, dangling: Object.freeze(dangling) };\n}\n\n// ---------------------------------------------------------------------------\n// Capability plugin pool filtering (设计 §10.4, M3)\n// ---------------------------------------------------------------------------\n\n/** One external capability plugin manifest discovered below a plugin pool root. */\nexport interface SuiteCapabilityPluginCandidate {\n\t/** Exact manifest id (`PluginManifest.id`). */\n\treadonly manifestId: string;\n\t/** Resolved manifest path, as it will be reported in diagnostics. */\n\treadonly manifestPath: string;\n}\n\nexport interface SuiteCapabilityPluginDecision {\n\treadonly keep: boolean;\n\t/** Diagnostic for a filtered-out plugin; absent when the plugin passes. */\n\treadonly diagnostic?: string;\n}\n\n/**\n * Decides one external capability plugin manifest against the suite's\n * `associations.plugins` (方案设计 §10.4, M3 双键语义: associations.plugins\n * governs only the external capability plugin pool; suite.capabilities governs\n * the compiled builtin ids). The project-level pool\n * (`<cwd>/.agent-forge/plugins`) is the third layer (设计 §4) and always\n * passes; every other manifest is kept only when its id matches an\n * association exactly. Filtered plugins surface as diagnostics, never as\n * errors.\n */\nexport function decideSuiteCapabilityPlugin(\n\tsuite: SuiteDefinition,\n\tcandidate: SuiteCapabilityPluginCandidate,\n\toptions: { cwd: string },\n): SuiteCapabilityPluginDecision {\n\tif (isUnderDir(candidate.manifestPath, join(options.cwd, CONFIG_DIR_NAME, \"plugins\"))) return { keep: true };\n\tif (suite.associations.plugins.includes(candidate.manifestId)) return { keep: true };\n\treturn {\n\t\tkeep: false,\n\t\tdiagnostic: `Suite \"${suite.id}\" capability plugin \"${candidate.manifestId}\" at ${candidate.manifestPath} is not associated; not loaded.`,\n\t};\n}\n\n/**\n * Dangling `associations.plugins` entries: association ids that matched no\n * candidate capability plugin manifest (设计 §11.3), single-sourced through\n * the shared dangling diagnostic text. The caller decides what counts as a\n * candidate: the sdk assembler passes every manifest id it loads, so explicit\n * capabilityPluginPaths count toward satisfying an association even though\n * they bypass the keep filter; only manifests absent from the passed ids\n * surface as dangling.\n */\nexport function suiteDanglingPluginAssociations(\n\tsuite: SuiteDefinition,\n\tdiscoveredManifestIds: readonly string[],\n): readonly string[] {\n\tconst discovered = new Set(discoveredManifestIds);\n\treturn suite.associations.plugins\n\t\t.filter((id) => !discovered.has(id))\n\t\t.map((id) => suiteDanglingAssociationDiagnostic(suite.id, \"plugins\", id));\n}\n\n// ---------------------------------------------------------------------------\n// Shared suite loader assembly (设计 §3/§4/§8, M2)\n// ---------------------------------------------------------------------------\n\n/**\n * The DefaultResourceLoader override subset that wires a resolved suite into a\n * loader: the agents.md three-level chain, the skill/extension association\n * filters, and the inheritSystemAgentsMd gate on the global SYSTEM.md/\n * APPEND_SYSTEM.md prompt channel. Structurally compatible with the matching\n * DefaultResourceLoaderOptions fields.\n */\nexport interface SuiteLoaderOverrides {\n\tagentsFilesOverride: (base: { agentsFiles: Array<{ path: string; content: string }> }) => {\n\t\tagentsFiles: Array<{ path: string; content: string }>;\n\t};\n\tskillsOverride: (base: { skills: Skill[]; diagnostics: ResourceDiagnostic[] }) => {\n\t\tskills: Skill[];\n\t\tdiagnostics: ResourceDiagnostic[];\n\t};\n\tsystemPromptOverride: (base: string | undefined) => string | undefined;\n\tappendSystemPromptOverride: (base: string[]) => string[];\n}\n\nexport interface SuiteAssembly {\n\treadonly workspace: SuiteWorkspace;\n\t/** Optional domain plugin profile selected for this suite. */\n\treadonly pluginProfile?: BuiltinPluginProfileResolutionV1;\n\t/** Spread into DefaultResourceLoader options to wire the suite in. */\n\treadonly loaderOverrides: SuiteLoaderOverrides;\n\t/**\n\t * The suite-local skill layer directory (统一修复轮 B) when it exists on\n\t * disk; inject it into the loader's skill paths so suites/<id>/skills load\n\t * with the suite itself. Undefined when the directory is absent, so empty\n\t * and missing directories both contribute nothing.\n\t */\n\treadonly localSkillsDir?: string;\n\t/**\n\t * The suite-local capability-plugin layer directory (统一修复轮 B) when it\n\t * exists on disk; discover its manifests into the session's capability\n\t * plugin candidates. Undefined when the directory is absent.\n\t */\n\treadonly localPluginsDir?: string;\n\t/**\n\t * Snapshot of every suite assembly diagnostic collected so far — workspace\n\t * provisioning, agents.md chain, extension/skill filters, system prompt\n\t * gate, context budget — in the canonical suiteDiagnostics order. Overrides\n\t * that have not run yet contribute nothing (the budget line needs the\n\t * assembled agents.md chain).\n\t */\n\tcollectDiagnostics(): readonly string[];\n}\n\n/**\n * Single-sourced assembly-layer context budget estimate (统一修复轮 B): pure\n * chars/4 arithmetic over the assembled agents.md chain (per source layer),\n * the orientation persona text, plus the count of suite-local workspace\n * skills. Diagnostic-only: it never blocks, gates, or degrades anything.\n */\nexport function suiteContextBudgetDiagnostic(\n\tsuiteId: string,\n\tchain: ReadonlyArray<SuiteAgentsMdEntry>,\n\toptions: { personaChars: number; workspaceSkillCount: number },\n): string {\n\tconst layerChars: Record<SuiteAgentsMdSource, number> = { system: 0, suite: 0, project: 0 };\n\tfor (const entry of chain) {\n\t\tlayerChars[entry.source] += entry.content.length;\n\t}\n\tconst tokens = (chars: number): number => Math.round(chars / 4);\n\tconst system = tokens(layerChars.system);\n\tconst suiteLayer = tokens(layerChars.suite);\n\tconst project = tokens(layerChars.project);\n\treturn `Suite \"${suiteId}\" context budget: agents.md ~${system + suiteLayer + project} tok (system ${system}/suite ${suiteLayer}/project ${project}), persona ~${tokens(options.personaChars)} tok, workspace skills ${options.workspaceSkillCount}`;\n}\n\n/**\n * Plugin-profile diagnostics in the canonical suiteDiagnostics order.\n *\n * D-075 S2 soft degradation: a resolved Profile renders structured per-plugin\n * misses (e.g. `manifest_missing` for a package-distributed plugin without an\n * installed active version) as readable diagnostics, so the session keeps\n * starting without the missing plugin's tools and the miss stays visible.\n * Blocked resolutions already render every plugin diagnostic through\n * `resolution.diagnostics`; the per-plugin lines are additive for the\n * non-blocked branches only.\n */\nfunction pluginProfileDiagnosticsV1(profile: BuiltinPluginProfileResolutionV1): readonly string[] {\n\tif (profile.status === \"not_found\") return [`Plugin profile unavailable: ${profile.profileId}`];\n\tif (profile.status === \"host_facts_required\") return [`Plugin profile host facts required: ${profile.profileId}`];\n\tif (profile.status === \"invalid_selection\")\n\t\treturn [\n\t\t\t`Plugin profile invalid selection: ${profile.profileId} (unknown: ${profile.unknownPluginIds.join(\", \") || \"none\"}; duplicates: ${profile.duplicatePluginIds.join(\", \") || \"none\"})`,\n\t\t];\n\tconst pluginMisses =\n\t\tprofile.resolution.status === \"blocked\"\n\t\t\t? []\n\t\t\t: profile.resolution.plugins\n\t\t\t\t\t.filter((plugin) => plugin.status !== \"installed-ready\")\n\t\t\t\t\t.flatMap((plugin) =>\n\t\t\t\t\t\tplugin.diagnostics.map(\n\t\t\t\t\t\t\t(diagnostic) =>\n\t\t\t\t\t\t\t\t`Plugin profile plugin unavailable: ${plugin.pluginId} (${diagnostic.code}): ${diagnostic.message}`,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\tif (profile.resolution.status === \"blocked\")\n\t\treturn profile.resolution.diagnostics.map((diagnostic) => `Plugin profile blocked: ${diagnostic.message}`);\n\tif (profile.assembly?.status === \"unverified\")\n\t\treturn [\n\t\t\t...profile.assembly.unverified.map(\n\t\t\t\t(plugin) => `Plugin profile unverified: ${plugin.pluginId}@${plugin.pluginVersion}`,\n\t\t\t),\n\t\t\t...pluginMisses,\n\t\t];\n\treturn pluginMisses;\n}\n\n/**\n * The single suite assembly used by both first-party entry paths (sdk.ts\n * self-built loader and agent-session-services `suiteAssembly`), so the two\n * cannot drift. Loads the suite workspace, builds the system prompt gate, and\n * returns the loader overrides plus a diagnostics collection channel.\n */\nexport function createSuiteAssembly(options: {\n\tcwd: string;\n\tagentDir: string;\n\tsuiteId: string;\n\tpluginProfileId?: BuiltinPluginProfileIdV1;\n\tselectedPluginIds?: readonly string[];\n\tdisabledPluginIds?: readonly string[];\n\tpluginHost?: HostFactsV1;\n\tverifiedPlugins?: readonly VerifiedToolPluginV1[];\n\t/** Explicit host-owned active installed manifests; never discovered implicitly. */\n\tmanifestOverrides?: BuiltinPluginManifestOverridesV1;\n\tpluginProfile?: BuiltinPluginProfileResolutionV1;\n}): SuiteAssembly {\n\tconst { cwd, agentDir, suiteId } = options;\n\tlet pluginProfile = options.pluginProfile;\n\tif (pluginProfile === undefined && options.pluginProfileId !== undefined) {\n\t\tpluginProfile =\n\t\t\toptions.pluginHost === undefined\n\t\t\t\t? ({ status: \"host_facts_required\", profileId: options.pluginProfileId } as const)\n\t\t\t\t: resolveBuiltinPluginProfileV1({\n\t\t\t\t\t\tprofileId: options.pluginProfileId,\n\t\t\t\t\t\tselectedPluginIds: options.selectedPluginIds,\n\t\t\t\t\t\tdisabledPluginIds: options.disabledPluginIds,\n\t\t\t\t\t\thost: options.pluginHost,\n\t\t\t\t\t\tverifiedPlugins: options.verifiedPlugins,\n\t\t\t\t\t\tmanifestOverrides: options.manifestOverrides,\n\t\t\t\t\t});\n\t}\n\tconst workspace = loadSuiteWorkspace({\n\t\tagentDir,\n\t\tsuiteId,\n\t\t...(pluginProfile === undefined ? {} : { pluginProfile }),\n\t});\n\tconst gate = createSuiteSystemPromptGate(workspace.suite, { cwd, agentDir });\n\t// Suite-local asset layer (统一修复轮 B): present directories only, so\n\t// missing and empty directories both contribute nothing.\n\tconst localSkillsDir = getSuiteLocalSkillsDir(agentDir, suiteId);\n\tconst localPluginsDir = getSuiteLocalPluginsDir(agentDir, suiteId);\n\tconst hasLocalSkillsDir = existsSync(localSkillsDir);\n\tconst hasLocalPluginsDir = existsSync(localPluginsDir);\n\tconst workspaceSkillCount = hasLocalSkillsDir\n\t\t? loadSkills({ cwd, agentDir, skillPaths: [localSkillsDir], includeDefaults: false }).skills.length\n\t\t: 0;\n\tlet chainDiagnostics: readonly string[] = [];\n\tlet skillDiagnostics: readonly string[] = [];\n\t// The assembled chain as far as the agentsFilesOverride has run; the budget\n\t// line is only honest once the real chain is known.\n\tlet assembledChain: readonly SuiteAgentsMdEntry[] | undefined;\n\t// Factory upgrade proposal (M4, 设计 §9 升级合并): an unbounded registry\n\t// resolve only proposes when the factory source wins, i.e. its revision is\n\t// strictly greater than the disk revision. Daily assembly keeps the disk\n\t// contents; adoption is an explicit --suite-reset.\n\tconst upgrade = detectSuiteFactoryUpgrade(workspace.suite);\n\tconst proposalDiagnostics = upgrade === undefined ? [] : [suiteFactoryUpgradeDiagnostic(suiteId, upgrade)];\n\tconst budgetDiagnostics = (): readonly string[] => {\n\t\tif (assembledChain === undefined) return [];\n\t\treturn [\n\t\t\tsuiteContextBudgetDiagnostic(suiteId, assembledChain, {\n\t\t\t\tpersonaChars: ORIENTATION_PROMPTS[workspace.suite.orientation].length,\n\t\t\t\tworkspaceSkillCount,\n\t\t\t}),\n\t\t];\n\t};\n\treturn {\n\t\tworkspace,\n\t\t...(pluginProfile === undefined ? {} : { pluginProfile }),\n\t\t...(hasLocalSkillsDir ? { localSkillsDir } : {}),\n\t\t...(hasLocalPluginsDir ? { localPluginsDir } : {}),\n\t\tloaderOverrides: {\n\t\t\tagentsFilesOverride: (base) => {\n\t\t\t\tconst assembly = assembleSuiteAgentsMdChain({\n\t\t\t\t\tsuite: workspace.suite,\n\t\t\t\t\tagentDir,\n\t\t\t\t\tsuiteJsonPath: workspace.suiteJsonPath,\n\t\t\t\t\tsuiteAgentsMdPath: workspace.agentsMdPath,\n\t\t\t\t\tprojectAgentsFiles: base.agentsFiles,\n\t\t\t\t});\n\t\t\t\tchainDiagnostics = assembly.diagnostics;\n\t\t\t\tassembledChain = assembly.chain;\n\t\t\t\treturn { agentsFiles: mergeSuiteAgentsFiles(assembly.chain, base.agentsFiles, { agentDir }) };\n\t\t\t},\n\t\t\tskillsOverride: (base) => {\n\t\t\t\tconst filtered = filterSuiteSkills(workspace.suite, base.skills, { localSkillsDir });\n\t\t\t\tskillDiagnostics = filtered.dangling.map((name) =>\n\t\t\t\t\tsuiteDanglingAssociationDiagnostic(suiteId, \"skills\", name),\n\t\t\t\t);\n\t\t\t\treturn { skills: filtered.kept, diagnostics: base.diagnostics };\n\t\t\t},\n\t\t\tsystemPromptOverride: gate.systemPromptOverride,\n\t\t\tappendSystemPromptOverride: gate.appendSystemPromptOverride,\n\t\t},\n\t\tcollectDiagnostics: () =>\n\t\t\tObject.freeze([\n\t\t\t\t...workspace.diagnostics,\n\t\t\t\t...(pluginProfile === undefined ? [] : pluginProfileDiagnosticsV1(pluginProfile)),\n\t\t\t\t...proposalDiagnostics,\n\t\t\t\t...chainDiagnostics,\n\t\t\t\t...skillDiagnostics,\n\t\t\t\t...budgetDiagnostics(),\n\t\t\t\t...gate.diagnostics,\n\t\t\t]),\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Session suite binding reader (设计 §10.1, 统一修复轮 B)\n// ---------------------------------------------------------------------------\n\n/**\n * Reads the suite binding recorded as session protocol data (设计 §10.1): the\n * suiteId of the latest `SUITE_SESSION_ENTRY_TYPE` custom entry. Undefined\n * when the session carries no binding — pre-suite sessions, entries without a\n * data payload, or payloads without a non-empty string suiteId.\n */\nexport function readSessionSuiteId(\n\tentries: ReadonlyArray<{ type: string; customType?: string; data?: unknown }>,\n): string | undefined {\n\treturn readSessionSuiteBinding(entries)?.suiteId;\n}\n\nexport interface SessionSuiteBindingV1 {\n\treadonly suiteId: string;\n\treadonly profileIdentity?: ProfileIdentityV1;\n}\n\nfunction sessionProfileIdentity(value: unknown): ProfileIdentityV1 | undefined {\n\tif (value === null || typeof value !== \"object\" || Array.isArray(value)) return undefined;\n\tconst record = value as Record<string, unknown>;\n\tif (\n\t\ttypeof record.profileId !== \"string\" ||\n\t\trecord.profileId.trim() === \"\" ||\n\t\ttypeof record.profileVersion !== \"string\" ||\n\t\trecord.profileVersion.trim() === \"\" ||\n\t\ttypeof record.manifestDigest !== \"string\" ||\n\t\trecord.manifestDigest.trim() === \"\" ||\n\t\t!Array.isArray(record.capabilityVersions)\n\t) {\n\t\treturn undefined;\n\t}\n\tconst capabilityVersions: { id: string; version: number }[] = [];\n\tfor (const entry of record.capabilityVersions) {\n\t\tif (entry === null || typeof entry !== \"object\" || Array.isArray(entry)) return undefined;\n\t\tconst capability = entry as Record<string, unknown>;\n\t\tif (\n\t\t\ttypeof capability.id !== \"string\" ||\n\t\t\tcapability.id.trim() === \"\" ||\n\t\t\ttypeof capability.version !== \"number\" ||\n\t\t\t!Number.isSafeInteger(capability.version) ||\n\t\t\tcapability.version < 1\n\t\t) {\n\t\t\treturn undefined;\n\t\t}\n\t\tcapabilityVersions.push({ id: capability.id, version: capability.version });\n\t}\n\treturn Object.freeze({\n\t\tprofileId: record.profileId,\n\t\tprofileVersion: record.profileVersion,\n\t\tmanifestDigest: record.manifestDigest,\n\t\tcapabilityVersions: Object.freeze(capabilityVersions) as readonly {\n\t\t\treadonly id: string;\n\t\t\treadonly version: number;\n\t\t}[],\n\t});\n}\n\n/** Reads the latest suite and optional Profile identity bound to a session. */\nexport function readSessionSuiteBinding(\n\tentries: ReadonlyArray<{ type: string; customType?: string; data?: unknown }>,\n): SessionSuiteBindingV1 | undefined {\n\tfor (let index = entries.length - 1; index >= 0; index--) {\n\t\tconst entry = entries[index];\n\t\tif (entry.type !== \"custom\" || entry.customType !== SUITE_SESSION_ENTRY_TYPE) continue;\n\t\tconst data = entry.data;\n\t\tif (data !== null && typeof data === \"object\" && !Array.isArray(data)) {\n\t\t\tconst suiteId = (data as { suiteId?: unknown }).suiteId;\n\t\t\tif (typeof suiteId === \"string\" && suiteId.length > 0) {\n\t\t\t\tconst profileIdentity = sessionProfileIdentity((data as { profileIdentity?: unknown }).profileIdentity);\n\t\t\t\treturn Object.freeze({\n\t\t\t\t\tsuiteId,\n\t\t\t\t\t...(profileIdentity === undefined ? {} : { profileIdentity }),\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t\treturn undefined;\n\t}\n\treturn undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Suite -> ProfileIdentityV1 -> lock bridge (设计 §12)\n// ---------------------------------------------------------------------------\n\nfunction suiteToJsonValue(suite: SuiteDefinition): JsonValue {\n\treturn {\n\t\tschemaVersion: suite.schemaVersion,\n\t\tid: suite.id,\n\t\tname: suite.name,\n\t\tbuiltin: suite.builtin,\n\t\ttools: [...suite.tools],\n\t\tcapabilities: [...suite.capabilities],\n\t\tassociations: {\n\t\t\tskills: [...suite.associations.skills],\n\t\t\tmcp: [...suite.associations.mcp],\n\t\t\tplugins: [...suite.associations.plugins],\n\t\t},\n\t\tinheritSystemAgentsMd: suite.inheritSystemAgentsMd,\n\t\tmemory: suite.memory,\n\t\torientation: suite.orientation,\n\t\tmodel: suite.model,\n\t\tthinking: suite.thinking,\n\t\tclonedFrom: suite.clonedFrom\n\t\t\t? { id: suite.clonedFrom.id, digest: suite.clonedFrom.digest, at: suite.clonedFrom.at }\n\t\t\t: null,\n\t\t...(suite.factoryRevision === undefined ? {} : { factoryRevision: suite.factoryRevision }),\n\t};\n}\n\n/** The stable suite.json digest that rides as the suite profile manifest digest. */\nexport function suiteManifestDigest(suite: SuiteDefinition): string {\n\treturn stableJsonDigest(suiteToJsonValue(suite));\n}\n\n/**\n * Builds the ProfileIdentityV1 for an assembled suite. The identity is a pure\n * function of suite.json: the stable suite.json digest rides as the single\n * resolved \"manifest\", and the declared capabilities map to capability\n * references at version 1. No new identity/lock mechanism is introduced.\n */\nexport function buildSuiteProfileIdentity(\n\tsuite: SuiteDefinition,\n\tpluginProfile?: BuiltinPluginProfileResolutionV1,\n): ProfileIdentityV1 {\n\tconst fingerprint = suiteManifestDigest(suite);\n\tconst suiteCapabilityRefs = suite.capabilities.map((id) => ({ id, version: 1 }));\n\tconst pluginRefs =\n\t\tpluginProfile?.status === \"resolved\" && pluginProfile.resolution.status === \"ready\"\n\t\t\t? pluginProfile.resolution.resolvedManifest.plugins\n\t\t\t: [];\n\tconst capabilityRefs = [...suiteCapabilityRefs, ...pluginRefs.flatMap((plugin) => plugin.capabilityRefs)].sort(\n\t\t(left, right) => left.id.localeCompare(right.id) || left.version - right.version,\n\t);\n\treturn buildProfileIdentityV1({\n\t\tprofileId: suiteProfileId(suite.id),\n\t\tprofileVersion: `${SUITE_SCHEMA_VERSION}`,\n\t\tresolvedPlugins: [\n\t\t\t{\n\t\t\t\tpluginId: `${suite.id}/suite.json`,\n\t\t\t\tpluginVersion: fingerprint,\n\t\t\t\tcapabilityRefs: suiteCapabilityRefs,\n\t\t\t},\n\t\t\t...(pluginProfile?.status === \"resolved\" && pluginProfile.resolution.status === \"ready\"\n\t\t\t\t? [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tpluginId: `profile:${pluginProfile.profile.id}`,\n\t\t\t\t\t\t\tpluginVersion: pluginProfile.profile.version,\n\t\t\t\t\t\t\tcapabilityRefs: [],\n\t\t\t\t\t\t},\n\t\t\t\t\t\t...pluginRefs,\n\t\t\t\t\t]\n\t\t\t\t: []),\n\t\t],\n\t\tcapabilityVersions: capabilityRefs,\n\t});\n}\n\n// ---------------------------------------------------------------------------\n// ProfileRegistryV1 hookup: factory/disk sources and upgrade proposals (M4)\n// ---------------------------------------------------------------------------\n\n/** Registry profileId namespace for suites (设计 §12). */\nexport function suiteProfileId(suiteId: string): string {\n\treturn `suite:${suiteId}`;\n}\n\nexport const SUITE_FACTORY_REGISTRY_SOURCE_ID = \"suite-factory\";\nexport const SUITE_DISK_REGISTRY_SOURCE_ID = \"suite-disk\";\n/** Lower priority wins same-version ties: the disk contents beat the factory. */\nconst SUITE_FACTORY_REGISTRY_PRIORITY = 10;\nconst SUITE_DISK_REGISTRY_PRIORITY = 0;\n\n/** The effective on-disk revision: absent key means FACTORY_CONTENTS_VERSION. */\nfunction suiteDiskRevision(suite: SuiteDefinition): number {\n\treturn suite.factoryRevision ?? FACTORY_CONTENTS_VERSION;\n}\n\n/** Builds the registry entry of one suite definition (version = factoryRevision). */\nexport function buildSuiteRegistryEntry(suite: SuiteDefinition): RegistryProfileEntryV1 {\n\treturn {\n\t\tprofileId: suiteProfileId(suite.id),\n\t\tprofileVersion: String(suiteDiskRevision(suite)),\n\t\tmanifestDigest: suiteManifestDigest(suite),\n\t};\n}\n\n/** Factory source over the builtin declarations (priority 10). */\nexport function buildSuiteFactoryRegistrySource(): RegistrySourceV1 {\n\treturn {\n\t\tsourceId: SUITE_FACTORY_REGISTRY_SOURCE_ID,\n\t\tpriority: SUITE_FACTORY_REGISTRY_PRIORITY,\n\t\tprofiles: BUILTIN_SUITES.map(buildSuiteRegistryEntry),\n\t};\n}\n\n/** Disk source over workspace-effective definitions (priority 0; wins ties). */\nexport function buildSuiteDiskRegistrySource(suites: readonly SuiteDefinition[]): RegistrySourceV1 {\n\treturn {\n\t\tsourceId: SUITE_DISK_REGISTRY_SOURCE_ID,\n\t\tpriority: SUITE_DISK_REGISTRY_PRIORITY,\n\t\tprofiles: suites.map(buildSuiteRegistryEntry),\n\t};\n}\n\nexport interface SuiteFactoryUpgrade {\n\t/** Revision the factory builtin declaration carries. */\n\treadonly factoryRevision: number;\n\t/** Revision effective on disk. */\n\treadonly diskRevision: number;\n}\n\n/** Single-sourced upgrade-proposal diagnostic text (设计 §9 升级合并). */\nexport function suiteFactoryUpgradeDiagnostic(suiteId: string, upgrade: SuiteFactoryUpgrade): string {\n\treturn `Suite \"${suiteId}\": factory revision ${upgrade.factoryRevision} available (disk has ${upgrade.diskRevision}); run \"--suite-reset ${suiteId}\" to review and adopt.`;\n}\n\n/**\n * Detects a factory upgrade proposal for one disk-effective suite: an\n * unbounded registry resolve over the factory source (all builtins) plus a\n * disk source carrying exactly the effective definition. The factory source\n * wins only when its revision is strictly greater — same-version resolves\n * keep the disk contents (priority 0), so no proposal is emitted for\n * unchanged suites, and user suites (no factory entry) never resolve to the\n * factory. Pure function; the caller decides what to do with the proposal.\n */\nexport function detectSuiteFactoryUpgrade(diskSuite: SuiteDefinition): SuiteFactoryUpgrade | undefined {\n\tconst registry = createProfileRegistry();\n\tregistry.registerSource(buildSuiteFactoryRegistrySource());\n\tregistry.registerSource(buildSuiteDiskRegistrySource([diskSuite]));\n\tconst resolution = registry.resolve({ profileId: suiteProfileId(diskSuite.id) });\n\tif (resolution.status !== \"resolved\" || resolution.sourceId !== SUITE_FACTORY_REGISTRY_SOURCE_ID) {\n\t\treturn undefined;\n\t}\n\treturn {\n\t\tfactoryRevision: Number.parseInt(resolution.profileVersion, 10),\n\t\tdiskRevision: suiteDiskRevision(diskSuite),\n\t};\n}\n\nexport interface SuiteProfileLockBridge {\n\treadonly identity: ProfileIdentityV1;\n\t/**\n\t * The lock for this assembly. When a previous lock exists it is kept as-is\n\t * (a lock is never silently replaced); without one, a fresh lock freezes\n\t * the current identity.\n\t */\n\treadonly lock: ProfileLockV1;\n\treadonly verification?: ProfileLockVerificationV1;\n\t/** Drift/migration findings; recorded, never blocking in M1a (设计 §12). */\n\treadonly diagnostics: readonly string[];\n}\n\n/** Bridges an assembled suite onto the existing lock create/verify trio. */\nexport function bridgeSuiteProfileLock(options: {\n\treadonly suite: SuiteDefinition;\n\treadonly pluginProfile?: BuiltinPluginProfileResolutionV1;\n\treadonly previousLock?: ProfileLockV1;\n\treadonly lockedBy?: string;\n\treadonly now?: () => number;\n}): SuiteProfileLockBridge {\n\tconst identity = buildSuiteProfileIdentity(options.suite, options.pluginProfile);\n\tconst diagnostics: string[] = [];\n\tlet verification: ProfileLockVerificationV1 | undefined;\n\tif (options.previousLock !== undefined) {\n\t\tverification = verifyProfileLock(options.previousLock, identity);\n\t\tif (verification.status === \"drift\") {\n\t\t\tdiagnostics.push(`Suite \"${options.suite.id}\" profile lock drift: ${verification.reason}`);\n\t\t} else if (verification.status === \"migration_required\") {\n\t\t\tdiagnostics.push(`Suite \"${options.suite.id}\" profile lock migration required: ${verification.reason}`);\n\t\t}\n\t}\n\tconst lock =\n\t\toptions.previousLock ??\n\t\tcreateProfileLock(identity, {\n\t\t\tlockedBy: options.lockedBy ?? \"suite-loader\",\n\t\t\t...(options.now === undefined ? {} : { now: options.now }),\n\t\t});\n\treturn {\n\t\tidentity,\n\t\tlock,\n\t\t...(verification === undefined ? {} : { verification }),\n\t\tdiagnostics: Object.freeze(diagnostics),\n\t};\n}\n"]}

package/dist/remote/server-assembly.d.ts

@@ -0,0 +1,230 @@
+import type { Api, Model } from "@agent-forge/ai/compat";
+import type { ArtifactRef, JsonValue, ModelMetadata, ModelRef, SessionMetadata, SessionPhase, SessionSnapshot, ThinkingLevel, TranscriptItem } from "@agent-forge/protocol";
+import { type CreateSessionOptions, type MutationResponseStore, PiServer, type PiServerOptions, type PiServerService, type PiSessionArtifactStore, type PiSessionOperationStore, type PiSessionRuntime, type PiSessionRuntimeEvent } from "@agent-forge/server";
+import type { AgentSession } from "../core/agent-session.ts";
+import type { OutputArtifactRef } from "../core/extensions/public-api.ts";
+import { type DurableServiceV1 } from "../durable/durable-service.ts";
+/** Server-visible facts about one durable coding-agent session. */
+export interface CodingAgentSessionDescriptor {
+    readonly id: string;
+    readonly name?: string;
+    /** Working directory; omitted when unknown (legacy sessions record none). */
+    readonly cwd?: string;
+    /** Model instance to attach at creation; resolved from the protocol ref by the service. */
+    readonly model?: Model<Api>;
+    /** Thinking level for the created session. */
+    readonly thinkingLevel?: ThinkingLevel;
+    /**
+     * Optional creation-time profile lock (protocol create `profileId`/
+     * `profileVersion`) passed by the remote create command: stored unchanged
+     * and echoed in snapshots, never interpreted by the runtime. Persisted in
+     * the session header and echoed verbatim in snapshots across restarts;
+     * absent when the create command did not carry it.
+     */
+    readonly profileId?: string;
+    readonly profileVersion?: string;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+}
+/**
+ * Persistence boundary owned by the host. `create`/`open` hand over exclusive
+ * ownership of one `AgentSession` to the server runtime until `dispose()`.
+ */
+export interface CodingAgentServerSessionSource {
+    list(): Promise<readonly CodingAgentSessionDescriptor[]>;
+    create(descriptor: CodingAgentSessionDescriptor): Promise<AgentSession>;
+    open(descriptor: CodingAgentSessionDescriptor): Promise<AgentSession>;
+}
+/** Model catalog projection used for `listModels` and `set_model` resolution. */
+export interface CodingAgentServerModels {
+    list(): Promise<readonly ModelMetadata[]>;
+    resolve(ref: ModelRef): Promise<Model<Api>>;
+}
+export interface CodingAgentServerAssemblyOptions {
+    readonly sessions: CodingAgentServerSessionSource;
+    readonly models: CodingAgentServerModels;
+    readonly listeners: PiServerOptions["listeners"];
+    readonly journal?: PiServerOptions["journal"];
+    readonly authenticate?: PiServerOptions["authenticate"];
+    readonly authorize?: PiServerOptions["authorize"];
+    readonly serverId?: string;
+    readonly maxFrameLength?: number;
+    readonly handshakeTimeoutMs?: number;
+    readonly onError?: (error: Error) => void;
+    /**
+     * Durable service backing operation and artifact records. Single-instance
+     * per store: the writer lease is process-local memory. Omission keeps the
+     * server `operations` surface undefined (clients see `durable_unavailable`)
+     * and the `artifacts` surface unconfigured (clients see `not_implemented`).
+     */
+    readonly durable?: DurableServiceV1;
+    /**
+     * Writer id claimed on the durable service. Hosts that also pass the same
+     * store into their session source (`agentTaskResults.writerId`) supply it
+     * here so one writer serves the whole process; omission generates a fresh
+     * id (claim/recover behavior is unchanged).
+     */
+    readonly writerId?: string;
+    /** Executors for submitted operation types; unknown types terminate as rejected. */
+    readonly operationExecutors?: readonly CodingAgentOperationExecutor[];
+    /** Clock for descriptor timestamps; defaults to the host clock. */
+    readonly now?: () => number;
+}
+/** Executes one submitted operation type; the abort signal fires on cancel requests. */
+export interface CodingAgentOperationExecutor {
+    readonly operationType: string;
+    execute(input: {
+        readonly sessionId: string;
+        readonly operationId: string;
+        readonly input?: JsonValue;
+        readonly signal: AbortSignal;
+    }): Promise<JsonValue>;
+}
+/**
+ * Projects the current `AgentSession` messages onto the protocol transcript.
+ * Tool inputs are recovered from the matching assistant `toolCall` content;
+ * `null` marks an unrecoverable input instead of fabricating one. `!`-command
+ * bash executions project as `bash` tool items. Session-level summary and
+ * extension messages (`branchSummary`, `compactionSummary`, `custom`) project
+ * as snapshot-only `note` items; they never enter streaming progress. Note
+ * items carry the text/summary face only — custom-message `details` and image
+ * content parts are not projected. Item ids
+ * stay positional (`t-<index>`): they are stable within one revision but not
+ * across history rewrites such as compaction.
+ */
+export declare function projectSessionTranscript(session: AgentSession): TranscriptItem[];
+/** Server-side runtime over one exclusively owned coding-agent session. */
+export declare class CodingAgentSessionRuntime implements PiSessionRuntime {
+    private readonly session;
+    private readonly descriptor;
+    private readonly models;
+    private readonly listeners;
+    private readonly unsubscribe;
+    private readonly onDisposed?;
+    private disposed;
+    constructor(session: AgentSession, descriptor: CodingAgentSessionDescriptor, options?: {
+        readonly models?: CodingAgentServerModels;
+        readonly onDisposed?: () => void;
+    });
+    snapshot(): SessionSnapshot;
+    getPhase(): SessionPhase;
+    prompt(input: {
+        readonly text: string;
+    }): Promise<void>;
+    steer(input: {
+        readonly text: string;
+    }): Promise<void>;
+    abort(): Promise<void>;
+    setModel(model: ModelRef): Promise<void>;
+    setThinking(thinkingLevel: ThinkingLevel): Promise<void>;
+    subscribe(listener: (event: PiSessionRuntimeEvent) => void): () => void;
+    dispose(): Promise<void>;
+    private assertUsable;
+    private onSessionEvent;
+    private currentModelRef;
+}
+/** Exclusive `PiServerService` over a coding-agent session source. */
+export declare class CodingAgentServerService implements PiServerService {
+    private readonly source;
+    private readonly models;
+    private readonly now;
+    private readonly acquired;
+    private readonly opening;
+    private readonly durable;
+    private readonly executors;
+    /** In-memory operation store surface; undefined without a durable service. */
+    private readonly operationStore;
+    /** In-memory artifact store surface; undefined without a durable service. */
+    private readonly artifactStore;
+    /** Durable mutation-response store surface; undefined without a durable service. */
+    private readonly mutationResponseStore;
+    private readonly writerId;
+    private leaseReady;
+    /** Idempotency key (`sessionId\0key`) -> recorded operation. */
+    private readonly idempotencyIndex;
+    /** Operation id -> recorded payload snapshot for idempotent acks. */
+    private readonly recordedOperations;
+    /** Active executor abort controllers by operation id. */
+    private readonly inFlight;
+    /** Cancel requests observed while the executor was still draining. */
+    private readonly cancelRequested;
+    constructor(options: {
+        readonly sessions: CodingAgentServerSessionSource;
+        readonly models: CodingAgentServerModels;
+        readonly durable?: DurableServiceV1;
+        readonly writerId?: string;
+        readonly operationExecutors?: readonly CodingAgentOperationExecutor[];
+        readonly now?: () => number;
+    });
+    /** Remote artifact access; unconfigured without a durable service. */
+    get artifacts(): PiSessionArtifactStore | undefined;
+    /** Durable operation commands; unconfigured without a durable service. */
+    get operations(): PiSessionOperationStore | undefined;
+    /** Durable replay of mutation-command responses; unconfigured without a durable service. */
+    get mutationResponses(): MutationResponseStore | undefined;
+    /**
+     * Claims the writer lease at startup. A holder found in restored state
+     * belonged to a dead process (snapshot import), so it is recovered; a live
+     * foreign writer keeps the lease and this service stays unavailable.
+     */
+    private claimWriterLease;
+    /**
+     * Releases the store writer lease on graceful shutdown (D-067 phase 2 S2)
+     * so a successor process can claim immediately. Best-effort: only a held
+     * lease is released, and failures are swallowed — a crashed process leaves
+     * the lease for the TTL recovery path instead.
+     */
+    releaseWriterLease(): void;
+    /** Persists one adapter-owned operation record; a lost lease degrades to `durable_unavailable`. */
+    private persistOperation;
+    private requireDurable;
+    /**
+     * Rejects operations that were pending when the previous process stopped:
+     * no executor survives a crash, so replayed `pending` records are swept to
+     * a rejected terminal and their idempotency keys keep returning that
+    /**
+     * recorded terminal.
+     */
+    private sweepInterruptedOperations;
+    private recordOperation;
+    private submitOperation;
+    private executeOperation;
+    private toTerminalError;
+    private completeOperation;
+    private cancelOperation;
+    private resultOperation;
+    private ackOf;
+    /**
+     * Mirrors one runtime output artifact into the durable store so remote
+     * `artifact_stat`/`artifact_read` can serve it, including after a restart
+     * via log replay. The runtime in-memory store (capability-runtime) stays
+     * the live write path; this adds durable persistence, not a second store.
+     */
+    persistOutputArtifact(sessionId: string, ref: OutputArtifactRef, bytes: Uint8Array): ArtifactRef;
+    private statArtifact;
+    private readArtifact;
+    /**
+     * Loads one artifact payload through the durable service.
+     */
+    private loadArtifactPayload;
+    /**
+     * Deterministic artifact id for one mutation-command response, following the
+     * `agent-task:<taskId>` precedent for derived artifact ids.
+     */
+    private mutationResponseArtifactId;
+    private loadMutationResponse;
+    private recordMutationResponse;
+    listSessions(): Promise<SessionMetadata[]>;
+    listModels(): Promise<ModelMetadata[]>;
+    createSession(options: CreateSessionOptions): Promise<PiSessionRuntime>;
+    openSession(sessionId: string): Promise<PiSessionRuntime>;
+    private openExclusively;
+    private acquireRuntime;
+    private assertNotAcquired;
+}
+/** Composes the coding-agent service with transport, journal, and auth hooks into one server. */
+export declare function assembleCodingAgentServer(options: CodingAgentServerAssemblyOptions): {
+    readonly server: PiServer;
+    readonly service: CodingAgentServerService;
+};
+//# sourceMappingURL=server-assembly.d.ts.map

package/dist/remote/server-assembly.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-assembly.d.ts","sourceRoot":"","sources":["../../src/remote/server-assembly.ts"],"names":[],"mappings":"AA0CA,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EACX,WAAW,EACX,SAAS,EACT,aAAa,EACb,QAAQ,EAGR,eAAe,EACf,YAAY,EACZ,eAAe,EACf,aAAa,EACb,cAAc,EAEd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,QAAQ,EAER,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAE3B,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAqB,MAAM,0BAA0B,CAAC;AAChF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAE7F,mEAAmE;AACnE,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,2FAA2F;IAC3F,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC9C,IAAI,IAAI,OAAO,CAAC,SAAS,4BAA4B,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,UAAU,EAAE,4BAA4B,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACxE,IAAI,CAAC,UAAU,EAAE,4BAA4B,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACtE;AAED,iFAAiF;AACjF,MAAM,WAAW,uBAAuB;IACvC,IAAI,IAAI,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC,cAAc,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACtE,mEAAmE;IACnE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAwJD,wFAAwF;AACxF,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,OAAO,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;KAC7B,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CACvB;AA+ED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,YAAY,GAAG,cAAc,EAAE,CAyKhF;AAQD,2EAA2E;AAC3E,qBAAa,yBAA0B,YAAW,gBAAgB;IACjE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqD;IAC/E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAS;IAEzB,YACC,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,4BAA4B,EACxC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE,EAYzF;IAED,QAAQ,IAAI,eAAe,CAiC1B;IAED,QAAQ,IAAI,YAAY,CAEvB;IAEK,MAAM,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5D;IAEK,KAAK,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAU3D;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAO3B;IAEK,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAU7C;IAEK,WAAW,CAAC,aAAa,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ7D;IAED,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,GAAG,MAAM,IAAI,CAGtE;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAS7B;IAED,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,cAAc;IActB,OAAO,CAAC,eAAe;CASvB;AAED,sEAAsE;AACtE,qBAAa,wBAAyB,YAAW,eAAe;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgD;IACzE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmD;IAC7E,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsC;IACrE,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqC;IACnE,oFAAoF;IACpF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAoC;IAC1E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,UAAU,CAAS;IAC3B,gEAAgE;IAChE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAwC;IACzE,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwC;IAC3E,yDAAyD;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;IAC/D,sEAAsE;IACtE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD,YAAY,OAAO,EAAE;QACpB,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC;QAClD,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;QACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;QACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;QACtE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;KAC5B,EAwBA;IAED,sEAAsE;IACtE,IAAI,SAAS,IAAI,sBAAsB,GAAG,SAAS,CAElD;IAED,0EAA0E;IAC1E,IAAI,UAAU,IAAI,uBAAuB,GAAG,SAAS,CAEpD;IAED,4FAA4F;IAC5F,IAAI,iBAAiB,IAAI,qBAAqB,GAAG,SAAS,CAEzD;IAMD;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAWxB;;;;;OAKG;IACH,kBAAkB,IAAI,IAAI,CAUzB;IAED,mGAAmG;IACnG,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,cAAc;IAOtB;;;;;;OAMG;IACH,OAAO,CAAC,0BAA0B;IAoBlC,OAAO,CAAC,eAAe;YAWT,eAAe;YA0Df,gBAAgB;IA0C9B,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,KAAK;IAyBb;;;;;OAKG;IACH,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,GAAG,WAAW,CAuB/F;IAED,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,YAAY;IAuBpB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAiB3B;;;OAGG;IACH,OAAO,CAAC,0BAA0B;YAWpB,oBAAoB;YAgBpB,sBAAsB;IAqB9B,YAAY,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAU/C;IAEK,UAAU,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAE3C;IAEK,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAwD5E;IAEK,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2B9D;YAGa,eAAe;IAY7B,OAAO,CAAC,cAAc;IAuBtB,OAAO,CAAC,iBAAiB;CAKzB;AAED,iGAAiG;AACjG,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,gCAAgC,GAAG;IACrF,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;CAC3C,CAoBA","sourcesContent":["/**\n * Minimal coding-agent runtime -> remote server assembly (1B.7h).\n *\n * Adapts first-party `AgentSession` instances to the public `@agent-forge/server`\n * session boundary so a preinstalled session adapter can run a deterministic\n * server end to end. The adapter only consumes the public `AgentSession` surface\n * and never reads private session objects.\n *\n * Snapshot transcripts use positional ids (`t-<index>`) that are stable within\n * one revision but not across history rewrites such as compaction; snapshots\n * stay authoritative and durable replay is journal-based, so replay does not\n * depend on these ids. Streaming is reported as snapshot-change notifications;\n * amortized delta progress belongs to a later slice.\n *\n * Durable operations and artifacts (E4-c): when a `DurableServiceV1` is\n * supplied, the service exposes the server `operations`/`artifacts` surfaces as\n * a thin adapter over the durable service — it never creates a second artifact\n * store. Artifact records project the protocol `ArtifactRef` 1:1 onto the SDK\n * `OutputArtifactRef` and carry base64 bytes so remote `artifact_stat` /\n * `artifact_read` survive restarts via the durable log replay; the runtime\n * in-memory artifact store remains the live write path (built in\n * capability-runtime). Keyed mutation commands (`operationId` on prompt/steer/\n * abort/set_model/set_thinking) persist their successful response snapshots as\n * deterministic `mutation-response:<sessionId>:<operationId>` artifact records\n * so a retry after a restart replays the recorded response; the server's\n * in-process LRU stays the live dedup path. Without a durable service the\n * surfaces stay undefined and the server answers `durable_unavailable` /\n * `not_implemented` explicitly.\n *\n * Deployment boundary: the durable writer lease is process-local memory. This\n * assembly is single-instance per durable store — the durable backend's file\n * writes are cross-process mutually exclusive (its `.lock`), while the writer\n * lease single-instance semantics remain process-local: who should claim the\n * lease still needs deployment-level coordination. On\n * startup the service claims the writer lease and, when the restored state\n * marks a dead writer (snapshot import), recovers it; a live foreign writer\n * keeps the service unavailable instead of fighting over the lease. Operations\n * left pending by a crashed process are swept to a rejected terminal so no\n * submitted operation can hang as `accepted` forever.\n */\nimport { Buffer } from \"node:buffer\";\nimport { randomUUID } from \"node:crypto\";\nimport type { Api, Model } from \"@agent-forge/ai/compat\";\nimport type {\n\tArtifactRef,\n\tJsonValue,\n\tModelMetadata,\n\tModelRef,\n\tProtocolError,\n\tProtocolErrorCode,\n\tSessionMetadata,\n\tSessionPhase,\n\tSessionSnapshot,\n\tThinkingLevel,\n\tTranscriptItem,\n\tUsage,\n} from \"@agent-forge/protocol\";\nimport {\n\ttype CreateSessionOptions,\n\ttype MutationResponseStore,\n\tPiServer,\n\tPiServerError,\n\ttype PiServerOptions,\n\ttype PiServerService,\n\ttype PiSessionArtifactStore,\n\ttype PiSessionOperationAck,\n\ttype PiSessionOperationStore,\n\ttype PiSessionRuntime,\n\ttype PiSessionRuntimeEvent,\n} from \"@agent-forge/server\";\nimport type { AgentSession, AgentSessionEvent } from \"../core/agent-session.ts\";\nimport type { OutputArtifactRef } from \"../core/extensions/public-api.ts\";\nimport { DurableServiceErrorV1, type DurableServiceV1 } from \"../durable/durable-service.ts\";\n\n/** Server-visible facts about one durable coding-agent session. */\nexport interface CodingAgentSessionDescriptor {\n\treadonly id: string;\n\treadonly name?: string;\n\t/** Working directory; omitted when unknown (legacy sessions record none). */\n\treadonly cwd?: string;\n\t/** Model instance to attach at creation; resolved from the protocol ref by the service. */\n\treadonly model?: Model<Api>;\n\t/** Thinking level for the created session. */\n\treadonly thinkingLevel?: ThinkingLevel;\n\t/**\n\t * Optional creation-time profile lock (protocol create `profileId`/\n\t * `profileVersion`) passed by the remote create command: stored unchanged\n\t * and echoed in snapshots, never interpreted by the runtime. Persisted in\n\t * the session header and echoed verbatim in snapshots across restarts;\n\t * absent when the create command did not carry it.\n\t */\n\treadonly profileId?: string;\n\treadonly profileVersion?: string;\n\treadonly createdAt: number;\n\treadonly updatedAt: number;\n}\n\n/**\n * Persistence boundary owned by the host. `create`/`open` hand over exclusive\n * ownership of one `AgentSession` to the server runtime until `dispose()`.\n */\nexport interface CodingAgentServerSessionSource {\n\tlist(): Promise<readonly CodingAgentSessionDescriptor[]>;\n\tcreate(descriptor: CodingAgentSessionDescriptor): Promise<AgentSession>;\n\topen(descriptor: CodingAgentSessionDescriptor): Promise<AgentSession>;\n}\n\n/** Model catalog projection used for `listModels` and `set_model` resolution. */\nexport interface CodingAgentServerModels {\n\tlist(): Promise<readonly ModelMetadata[]>;\n\tresolve(ref: ModelRef): Promise<Model<Api>>;\n}\n\nexport interface CodingAgentServerAssemblyOptions {\n\treadonly sessions: CodingAgentServerSessionSource;\n\treadonly models: CodingAgentServerModels;\n\treadonly listeners: PiServerOptions[\"listeners\"];\n\treadonly journal?: PiServerOptions[\"journal\"];\n\treadonly authenticate?: PiServerOptions[\"authenticate\"];\n\treadonly authorize?: PiServerOptions[\"authorize\"];\n\treadonly serverId?: string;\n\treadonly maxFrameLength?: number;\n\treadonly handshakeTimeoutMs?: number;\n\treadonly onError?: (error: Error) => void;\n\t/**\n\t * Durable service backing operation and artifact records. Single-instance\n\t * per store: the writer lease is process-local memory. Omission keeps the\n\t * server `operations` surface undefined (clients see `durable_unavailable`)\n\t * and the `artifacts` surface unconfigured (clients see `not_implemented`).\n\t */\n\treadonly durable?: DurableServiceV1;\n\t/**\n\t * Writer id claimed on the durable service. Hosts that also pass the same\n\t * store into their session source (`agentTaskResults.writerId`) supply it\n\t * here so one writer serves the whole process; omission generates a fresh\n\t * id (claim/recover behavior is unchanged).\n\t */\n\treadonly writerId?: string;\n\t/** Executors for submitted operation types; unknown types terminate as rejected. */\n\treadonly operationExecutors?: readonly CodingAgentOperationExecutor[];\n\t/** Clock for descriptor timestamps; defaults to the host clock. */\n\treadonly now?: () => number;\n}\n\nfunction requireIdle(session: AgentSession, action: string): void {\n\tif (!session.isIdle) {\n\t\tthrow new PiServerError(\"busy\", `Cannot ${action} while the session is busy`);\n\t}\n}\n\nfunction toError(error: unknown): PiServerError {\n\tif (error instanceof PiServerError) return error;\n\tconst message = error instanceof Error ? error.message : String(error);\n\tif (/reload in progress/i.test(message)) return new PiServerError(\"busy\", message);\n\tif (/compaction is in progress/i.test(message)) return new PiServerError(\"busy\", message);\n\tif (/already processing/i.test(message)) return new PiServerError(\"busy\", message);\n\t// Operational session failures (missing credentials, no active model,\n\t// extension rejections) must reach the remote client with their original\n\t// message instead of being folded into an unspecific internal error.\n\treturn new PiServerError(\"invalid_request\", message);\n}\n\nfunction jsonSafe(value: unknown): boolean {\n\tif (value === null || typeof value === \"string\" || typeof value === \"boolean\") return true;\n\tif (typeof value === \"number\") return Number.isFinite(value);\n\tif (Array.isArray(value)) return value.every(jsonSafe);\n\tif (typeof value !== \"object\" || Object.getPrototypeOf(value) !== Object.prototype) return false;\n\treturn Object.values(value).every(jsonSafe);\n}\n\n/** Payload stored in `DurableOperationRecordV1.data`. Adapter-owned shape. */\ninterface DurableOperationPayloadV1 {\n\treadonly status: \"pending\" | \"completed\" | \"rejected\";\n\treadonly sessionId: string;\n\treadonly operationType: string;\n\treadonly idempotencyKey?: string;\n\treadonly result?: JsonValue;\n\treadonly error?: { readonly code: ProtocolErrorCode; readonly message: string };\n\treadonly submittedAt: number;\n\treadonly terminalAt?: number;\n}\n\n/** Payload stored in `DurableArtifactRecordV1.data`. Adapter-owned shape. */\ninterface DurableArtifactPayloadV1 {\n\treadonly ref: OutputArtifactRef;\n\t/** Base64 artifact bytes so records survive the JSONL log replay. */\n\treadonly bytes: string;\n}\n\n/** An operation id paired with its latest recorded payload snapshot. */\ninterface RecordedOperation {\n\treadonly operationId: string;\n\treadonly payload: DurableOperationPayloadV1;\n}\n\n/** Parses an adapter-owned operation payload; undefined for foreign or malformed records. */\nfunction parseOperationPayload(value: unknown): DurableOperationPayloadV1 | undefined {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) return undefined;\n\tconst record = value as Record<string, unknown>;\n\tif (record.status !== \"pending\" && record.status !== \"completed\" && record.status !== \"rejected\") return undefined;\n\tif (typeof record.sessionId !== \"string\" || record.sessionId === \"\") return undefined;\n\tif (typeof record.operationType !== \"string\") return undefined;\n\tif (typeof record.submittedAt !== \"number\" || !Number.isFinite(record.submittedAt)) return undefined;\n\tlet error: DurableOperationPayloadV1[\"error\"];\n\tif (record.error !== undefined) {\n\t\tif (typeof record.error !== \"object\" || record.error === null || Array.isArray(record.error)) return undefined;\n\t\tconst entry = record.error as Record<string, unknown>;\n\t\tif (typeof entry.code !== \"string\" || typeof entry.message !== \"string\") return undefined;\n\t\terror = { code: entry.code as ProtocolErrorCode, message: entry.message };\n\t}\n\treturn {\n\t\tstatus: record.status,\n\t\tsessionId: record.sessionId,\n\t\toperationType: record.operationType,\n\t\t...(typeof record.idempotencyKey === \"string\" ? { idempotencyKey: record.idempotencyKey } : {}),\n\t\t...(record.result === undefined ? {} : { result: record.result as JsonValue }),\n\t\t...(error === undefined ? {} : { error }),\n\t\tsubmittedAt: record.submittedAt,\n\t\t...(typeof record.terminalAt === \"number\" ? { terminalAt: record.terminalAt } : {}),\n\t};\n}\n\n/** Parses an adapter-owned artifact payload; undefined for foreign or malformed records. */\nfunction parseArtifactPayload(value: unknown): DurableArtifactPayloadV1 | undefined {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) return undefined;\n\tconst record = value as Record<string, unknown>;\n\tconst ref = record.ref;\n\tif (typeof ref !== \"object\" || ref === null || Array.isArray(ref)) return undefined;\n\tconst entry = ref as Record<string, unknown>;\n\tif (\n\t\ttypeof entry.sessionId !== \"string\" ||\n\t\ttypeof entry.operationId !== \"string\" ||\n\t\ttypeof entry.artifactId !== \"string\" ||\n\t\ttypeof entry.kind !== \"string\" ||\n\t\ttypeof entry.mediaType !== \"string\" ||\n\t\ttypeof entry.truncated !== \"boolean\" ||\n\t\ttypeof entry.createdAt !== \"number\" ||\n\t\ttypeof record.bytes !== \"string\"\n\t) {\n\t\treturn undefined;\n\t}\n\treturn {\n\t\tref: {\n\t\t\tsessionId: entry.sessionId,\n\t\t\toperationId: entry.operationId,\n\t\t\tartifactId: entry.artifactId,\n\t\t\tkind: entry.kind,\n\t\t\tmediaType: entry.mediaType,\n\t\t\t...(typeof entry.sizeBytes === \"number\" ? { sizeBytes: entry.sizeBytes } : {}),\n\t\t\ttruncated: entry.truncated,\n\t\t\tcreatedAt: entry.createdAt,\n\t\t},\n\t\tbytes: record.bytes,\n\t};\n}\n\n/**\n * Parses a stored mutation-response payload; undefined for foreign or\n * malformed records. The required-field assertion is deliberately minimal: the\n * full `SessionSnapshot` shape is already enforced by the wire codec when the\n * replayed snapshot is encoded into a response, so a damaged record only needs\n * to fail this check to fall back to a fresh execution.\n */\nfunction parseMutationResponsePayload(value: unknown, sessionId: string): SessionSnapshot | undefined {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) return undefined;\n\tconst record = value as Record<string, unknown>;\n\tif (\n\t\trecord.id !== sessionId ||\n\t\ttypeof record.cwd !== \"string\" ||\n\t\trecord.cwd === \"\" ||\n\t\ttypeof record.revision !== \"number\" ||\n\t\t!Number.isInteger(record.revision) ||\n\t\trecord.revision < 0 ||\n\t\t!Array.isArray(record.transcript)\n\t) {\n\t\treturn undefined;\n\t}\n\treturn value as SessionSnapshot;\n}\n\n/** Protocol `ArtifactRef` is a 1:1 projection of the SDK `OutputArtifactRef`. */\nfunction toProtocolArtifactRef(ref: OutputArtifactRef): ArtifactRef {\n\treturn {\n\t\tsessionId: ref.sessionId,\n\t\toperationId: ref.operationId,\n\t\tartifactId: ref.artifactId,\n\t\tkind: ref.kind,\n\t\tmediaType: ref.mediaType,\n\t\t...(ref.sizeBytes === undefined ? {} : { sizeBytes: ref.sizeBytes }),\n\t\ttruncated: ref.truncated,\n\t\tcreatedAt: ref.createdAt,\n\t};\n}\n\n/** Executes one submitted operation type; the abort signal fires on cancel requests. */\nexport interface CodingAgentOperationExecutor {\n\treadonly operationType: string;\n\texecute(input: {\n\t\treadonly sessionId: string;\n\t\treadonly operationId: string;\n\t\treadonly input?: JsonValue;\n\t\treadonly signal: AbortSignal;\n\t}): Promise<JsonValue>;\n}\n\nfunction projectUsage(usage: unknown): Usage | undefined {\n\tif (!usage || typeof usage !== \"object\" || Array.isArray(usage)) return undefined;\n\tconst record = usage as Record<string, unknown>;\n\tconst readCount = (key: string): number | undefined => {\n\t\tconst value = record[key];\n\t\treturn typeof value === \"number\" && Number.isFinite(value) ? Math.max(0, Math.trunc(value)) : undefined;\n\t};\n\tconst input = readCount(\"input\");\n\tconst output = readCount(\"output\");\n\tconst cacheRead = readCount(\"cacheRead\");\n\tconst cacheWrite = readCount(\"cacheWrite\");\n\tconst totalTokens = readCount(\"totalTokens\");\n\tif (input === undefined || output === undefined || cacheRead === undefined || cacheWrite === undefined) {\n\t\treturn undefined;\n\t}\n\tif (totalTokens === undefined) return undefined;\n\tconst cost = record.cost;\n\tif (!cost || typeof cost !== \"object\" || Array.isArray(cost)) return undefined;\n\tconst costRecord = cost as Record<string, unknown>;\n\tconst readCost = (key: string): number | undefined => {\n\t\tconst value = costRecord[key];\n\t\treturn typeof value === \"number\" && Number.isFinite(value) ? value : undefined;\n\t};\n\tconst costInput = readCost(\"input\");\n\tconst costOutput = readCost(\"output\");\n\tconst costCacheRead = readCost(\"cacheRead\");\n\tconst costCacheWrite = readCost(\"cacheWrite\");\n\tconst costTotal = readCost(\"total\");\n\tif (\n\t\tcostInput === undefined ||\n\t\tcostOutput === undefined ||\n\t\tcostCacheRead === undefined ||\n\t\tcostCacheWrite === undefined ||\n\t\tcostTotal === undefined\n\t) {\n\t\treturn undefined;\n\t}\n\tconst reasoning = readCount(\"reasoning\");\n\treturn {\n\t\tinput,\n\t\toutput,\n\t\tcacheRead,\n\t\tcacheWrite,\n\t\t...(reasoning === undefined ? {} : { reasoning }),\n\t\ttotalTokens,\n\t\tcost: {\n\t\t\tinput: costInput,\n\t\t\toutput: costOutput,\n\t\t\tcacheRead: costCacheRead,\n\t\t\tcacheWrite: costCacheWrite,\n\t\t\ttotal: costTotal,\n\t\t},\n\t};\n}\n\ntype ImagePart = { type: \"image\"; data: string; mimeType: string };\ntype TextPart = { type: \"text\"; text: string };\n\nfunction projectUserContent(content: string | readonly unknown[]): Array<TextPart | ImagePart> {\n\tif (typeof content === \"string\") return [{ type: \"text\", text: content }];\n\tconst projected: Array<TextPart | ImagePart> = [];\n\tfor (const part of content) {\n\t\tif (!part || typeof part !== \"object\") continue;\n\t\tconst record = part as Record<string, unknown>;\n\t\tif (record.type === \"text\" && typeof record.text === \"string\") {\n\t\t\tprojected.push({ type: \"text\", text: record.text });\n\t\t} else if (record.type === \"image\" && typeof record.data === \"string\" && typeof record.mimeType === \"string\") {\n\t\t\tprojected.push({ type: \"image\", data: record.data, mimeType: record.mimeType });\n\t\t}\n\t}\n\treturn projected;\n}\n\nfunction projectToolResultContent(content: readonly unknown[]): Array<TextPart | ImagePart> {\n\treturn projectUserContent(content);\n}\n\n/**\n * Projects the current `AgentSession` messages onto the protocol transcript.\n * Tool inputs are recovered from the matching assistant `toolCall` content;\n * `null` marks an unrecoverable input instead of fabricating one. `!`-command\n * bash executions project as `bash` tool items. Session-level summary and\n * extension messages (`branchSummary`, `compactionSummary`, `custom`) project\n * as snapshot-only `note` items; they never enter streaming progress. Note\n * items carry the text/summary face only — custom-message `details` and image\n * content parts are not projected. Item ids\n * stay positional (`t-<index>`): they are stable within one revision but not\n * across history rewrites such as compaction.\n */\nexport function projectSessionTranscript(session: AgentSession): TranscriptItem[] {\n\tconst messages = session.messages;\n\tconst toolInputs = new Map<string, JsonValue>();\n\tfor (const message of messages) {\n\t\tif (message.role !== \"assistant\") continue;\n\t\tfor (const part of message.content) {\n\t\t\tif (part.type === \"toolCall\") toolInputs.set(part.id, part.arguments as JsonValue);\n\t\t}\n\t}\n\tconst items: TranscriptItem[] = [];\n\tfor (const message of messages) {\n\t\tconst id = `t-${items.length}`;\n\t\tconst timestamp = Math.max(0, Math.trunc(message.timestamp));\n\t\tif (message.role === \"user\") {\n\t\t\titems.push({\n\t\t\t\tid,\n\t\t\t\trole: \"user\",\n\t\t\t\tcontent: projectUserContent(message.content),\n\t\t\t\ttimestamp,\n\t\t\t});\n\t\t\tcontinue;\n\t\t}\n\t\tif (message.role === \"toolResult\") {\n\t\t\tconst input = toolInputs.get(message.toolCallId);\n\t\t\tconst usage = projectUsage(message.usage);\n\t\t\tconst details = jsonSafe(message.details) ? (message.details as JsonValue) : undefined;\n\t\t\tconst base = {\n\t\t\t\tid,\n\t\t\t\trole: \"tool\" as const,\n\t\t\t\ttoolCallId: message.toolCallId,\n\t\t\t\ttoolName: message.toolName,\n\t\t\t\tinput: input !== undefined && jsonSafe(input) ? input : null,\n\t\t\t\tcontent: projectToolResultContent(message.content),\n\t\t\t\t...(details === undefined ? {} : { details }),\n\t\t\t\t...(usage === undefined ? {} : { usage }),\n\t\t\t\ttimestamp,\n\t\t\t};\n\t\t\tif (message.isError) {\n\t\t\t\tconst item: TranscriptItem = { ...base, status: \"error\", isError: true };\n\t\t\t\titems.push(item);\n\t\t\t} else {\n\t\t\t\tconst item: TranscriptItem = { ...base, status: \"complete\", isError: false };\n\t\t\t\titems.push(item);\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\t\tif (message.role === \"bashExecution\") {\n\t\t\tconst failed = message.cancelled || (message.exitCode !== undefined && message.exitCode !== 0);\n\t\t\tconst base = {\n\t\t\t\tid,\n\t\t\t\trole: \"tool\" as const,\n\t\t\t\ttoolCallId: `bash-${id}`,\n\t\t\t\ttoolName: \"bash\",\n\t\t\t\tinput: { command: message.command } satisfies JsonValue,\n\t\t\t\tcontent: [{ type: \"text\" as const, text: message.output }],\n\t\t\t\tdetails: {\n\t\t\t\t\texitCode: message.exitCode ?? null,\n\t\t\t\t\tcancelled: message.cancelled,\n\t\t\t\t\ttruncated: message.truncated,\n\t\t\t\t} satisfies JsonValue,\n\t\t\t\ttimestamp,\n\t\t\t};\n\t\t\tif (failed) {\n\t\t\t\tconst item: TranscriptItem = { ...base, status: \"error\", isError: true };\n\t\t\t\titems.push(item);\n\t\t\t} else {\n\t\t\t\tconst item: TranscriptItem = { ...base, status: \"complete\", isError: false };\n\t\t\t\titems.push(item);\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\t\tif (message.role === \"branchSummary\") {\n\t\t\titems.push({\n\t\t\t\tid,\n\t\t\t\trole: \"note\",\n\t\t\t\tkind: \"branchSummary\",\n\t\t\t\ttext: message.summary,\n\t\t\t\tfromId: message.fromId,\n\t\t\t\ttimestamp,\n\t\t\t});\n\t\t\tcontinue;\n\t\t}\n\t\tif (message.role === \"compactionSummary\") {\n\t\t\titems.push({\n\t\t\t\tid,\n\t\t\t\trole: \"note\",\n\t\t\t\tkind: \"compactionSummary\",\n\t\t\t\ttext: message.summary,\n\t\t\t\ttokensBefore: Math.max(0, Math.trunc(message.tokensBefore)),\n\t\t\t\ttimestamp,\n\t\t\t});\n\t\t\tcontinue;\n\t\t}\n\t\tif (message.role === \"custom\") {\n\t\t\tconst text =\n\t\t\t\ttypeof message.content === \"string\"\n\t\t\t\t\t? message.content\n\t\t\t\t\t: message.content\n\t\t\t\t\t\t\t.filter((part) => part.type === \"text\")\n\t\t\t\t\t\t\t.map((part) => part.text)\n\t\t\t\t\t\t\t.join(\"\\n\");\n\t\t\titems.push({\n\t\t\t\tid,\n\t\t\t\trole: \"note\",\n\t\t\t\tkind: \"custom\",\n\t\t\t\ttext,\n\t\t\t\tcustomType: message.customType,\n\t\t\t\tdisplay: message.display,\n\t\t\t\ttimestamp,\n\t\t\t});\n\t\t\tcontinue;\n\t\t}\n\t\tif (message.role !== \"assistant\") continue;\n\t\tconst streaming = session.isStreaming && message === messages.at(-1);\n\t\tconst content: Array<\n\t\t\t| { type: \"text\"; text: string }\n\t\t\t| { type: \"thinking\"; thinking: string; redacted?: boolean }\n\t\t\t| { type: \"toolCall\"; toolCallId: string; toolName: string; input: JsonValue }\n\t\t> = message.content.map((part) => {\n\t\t\tif (part.type === \"text\") return { type: \"text\", text: part.text };\n\t\t\tif (part.type === \"thinking\") {\n\t\t\t\treturn {\n\t\t\t\t\ttype: \"thinking\",\n\t\t\t\t\tthinking: part.thinking,\n\t\t\t\t\t...(part.redacted === undefined ? {} : { redacted: part.redacted }),\n\t\t\t\t};\n\t\t\t}\n\t\t\treturn {\n\t\t\t\ttype: \"toolCall\",\n\t\t\t\ttoolCallId: part.id,\n\t\t\t\ttoolName: part.name,\n\t\t\t\tinput: part.arguments as JsonValue,\n\t\t\t};\n\t\t});\n\t\tconst usage = projectUsage(message.usage);\n\t\tconst common = {\n\t\t\tid,\n\t\t\trole: \"assistant\" as const,\n\t\t\tcontent,\n\t\t\tmodel: { provider: message.provider, id: message.model } satisfies ModelRef,\n\t\t\t...(message.responseModel ? { responseModel: message.responseModel } : {}),\n\t\t\t...(usage === undefined ? {} : { usage }),\n\t\t\ttimestamp,\n\t\t};\n\t\tif (streaming || message.stopReason === \"pending\" || message.stopReason === \"deferred\") {\n\t\t\tconst item: TranscriptItem = { ...common, status: \"streaming\" };\n\t\t\titems.push(item);\n\t\t} else if (message.stopReason === \"error\") {\n\t\t\tconst item: TranscriptItem = {\n\t\t\t\t...common,\n\t\t\t\tstatus: \"error\",\n\t\t\t\tstopReason: \"error\",\n\t\t\t\t...(message.errorMessage ? { errorMessage: message.errorMessage } : {}),\n\t\t\t};\n\t\t\titems.push(item);\n\t\t} else if (message.stopReason === \"aborted\") {\n\t\t\tconst item: TranscriptItem = {\n\t\t\t\t...common,\n\t\t\t\tstatus: \"aborted\",\n\t\t\t\tstopReason: \"aborted\",\n\t\t\t\t...(message.errorMessage ? { errorMessage: message.errorMessage } : {}),\n\t\t\t};\n\t\t\titems.push(item);\n\t\t} else {\n\t\t\tconst item: TranscriptItem = { ...common, status: \"complete\", stopReason: message.stopReason };\n\t\t\titems.push(item);\n\t\t}\n\t}\n\treturn items;\n}\n\nfunction sessionPhase(session: AgentSession): SessionPhase {\n\tif (session.isCompacting) return \"compaction\";\n\tif (session.isStreaming) return \"turn\";\n\treturn \"idle\";\n}\n\n/** Server-side runtime over one exclusively owned coding-agent session. */\nexport class CodingAgentSessionRuntime implements PiSessionRuntime {\n\tprivate readonly session: AgentSession;\n\tprivate readonly descriptor: CodingAgentSessionDescriptor;\n\tprivate readonly models: CodingAgentServerModels;\n\tprivate readonly listeners = new Set<(event: PiSessionRuntimeEvent) => void>();\n\tprivate readonly unsubscribe: () => void;\n\tprivate readonly onDisposed?: () => void;\n\tprivate disposed = false;\n\n\tconstructor(\n\t\tsession: AgentSession,\n\t\tdescriptor: CodingAgentSessionDescriptor,\n\t\toptions?: { readonly models?: CodingAgentServerModels; readonly onDisposed?: () => void },\n\t) {\n\t\tthis.session = session;\n\t\tthis.descriptor = descriptor;\n\t\tthis.models = options?.models ?? {\n\t\t\tlist: async () => [],\n\t\t\tresolve: () => {\n\t\t\t\tthrow new PiServerError(\"not_implemented\", \"Model resolution is not configured\");\n\t\t\t},\n\t\t};\n\t\tthis.onDisposed = options?.onDisposed;\n\t\tthis.unsubscribe = session.subscribe((event: AgentSessionEvent) => this.onSessionEvent(event));\n\t}\n\n\tsnapshot(): SessionSnapshot {\n\t\tconst queuedSteer = this.session.getSteeringMessages();\n\t\tconst name = this.session.sessionName ?? this.descriptor.name;\n\t\treturn {\n\t\t\tid: this.descriptor.id,\n\t\t\t...(name === undefined ? {} : { name }),\n\t\t\t// The protocol requires a non-empty snapshot cwd. This runtime only\n\t\t\t// describes acquired sessions: creates validate a non-empty cwd and\n\t\t\t// opens fall back to a non-empty cwd inside the source, so the\n\t\t\t// SessionManager cwd is the authoritative value when the descriptor\n\t\t\t// carries none (legacy sessions record no cwd).\n\t\t\tcwd: this.descriptor.cwd ?? this.session.sessionManager.getCwd(),\n\t\t\tcreatedAt: this.descriptor.createdAt,\n\t\t\tupdatedAt: this.descriptor.updatedAt,\n\t\t\tphase: sessionPhase(this.session),\n\t\t\tmodel: this.currentModelRef(),\n\t\t\tthinkingLevel: this.session.thinkingLevel,\n\t\t\t...(this.descriptor.profileId === undefined ? {} : { profileId: this.descriptor.profileId }),\n\t\t\t...(this.descriptor.profileVersion === undefined ? {} : { profileVersion: this.descriptor.profileVersion }),\n\t\t\tattached: false,\n\t\t\tlocked: false,\n\t\t\t// Durable revision: the SessionManager entry sequence. It survives\n\t\t\t// reopen and only advances when a persisted entry lands.\n\t\t\trevision: this.session.getRevision().sequence,\n\t\t\ttranscript: projectSessionTranscript(this.session),\n\t\t\tqueuedSteer: queuedSteer.map((text, index) => ({\n\t\t\t\tid: `steer-${index}`,\n\t\t\t\trole: \"user\" as const,\n\t\t\t\tcontent: [{ type: \"text\" as const, text }],\n\t\t\t\ttimestamp: this.descriptor.updatedAt,\n\t\t\t})),\n\t\t\tqueuedSteerCount: queuedSteer.length,\n\t\t};\n\t}\n\n\tgetPhase(): SessionPhase {\n\t\treturn sessionPhase(this.session);\n\t}\n\n\tasync prompt(input: { readonly text: string }): Promise<void> {\n\t\tthis.assertUsable();\n\t\trequireIdle(this.session, \"submit a prompt\");\n\t\ttry {\n\t\t\tawait this.session.prompt(input.text);\n\t\t} catch (error) {\n\t\t\tthrow toError(error);\n\t\t}\n\t}\n\n\tasync steer(input: { readonly text: string }): Promise<void> {\n\t\tthis.assertUsable();\n\t\tif (this.session.isIdle) {\n\t\t\tthrow new PiServerError(\"busy\", \"There is no active prompt to steer\");\n\t\t}\n\t\ttry {\n\t\t\tawait this.session.steer(input.text);\n\t\t} catch (error) {\n\t\t\tthrow toError(error);\n\t\t}\n\t}\n\n\tasync abort(): Promise<void> {\n\t\tthis.assertUsable();\n\t\ttry {\n\t\t\tawait this.session.abort();\n\t\t} catch (error) {\n\t\t\tthrow toError(error);\n\t\t}\n\t}\n\n\tasync setModel(model: ModelRef): Promise<void> {\n\t\tthis.assertUsable();\n\t\trequireIdle(this.session, \"change the model\");\n\t\tlet resolved: Model<Api>;\n\t\ttry {\n\t\t\tresolved = await this.models.resolve(model);\n\t\t\tawait this.session.setModel(resolved);\n\t\t} catch (error) {\n\t\t\tthrow toError(error);\n\t\t}\n\t}\n\n\tasync setThinking(thinkingLevel: ThinkingLevel): Promise<void> {\n\t\tthis.assertUsable();\n\t\trequireIdle(this.session, \"change the thinking level\");\n\t\ttry {\n\t\t\tthis.session.setThinkingLevel(thinkingLevel);\n\t\t} catch (error) {\n\t\t\tthrow toError(error);\n\t\t}\n\t}\n\n\tsubscribe(listener: (event: PiSessionRuntimeEvent) => void): () => void {\n\t\tthis.listeners.add(listener);\n\t\treturn () => this.listeners.delete(listener);\n\t}\n\n\tasync dispose(): Promise<void> {\n\t\tif (this.disposed) return;\n\t\tthis.disposed = true;\n\t\tthis.unsubscribe();\n\t\ttry {\n\t\t\tawait this.session.dispose();\n\t\t} finally {\n\t\t\tthis.onDisposed?.();\n\t\t}\n\t}\n\n\tprivate assertUsable(): void {\n\t\tif (this.disposed) throw new PiServerError(\"invalid_request\", \"Session runtime is disposed\");\n\t}\n\n\tprivate onSessionEvent(_event: AgentSessionEvent): void {\n\t\t// Every event still broadcasts a snapshot, but the revision value is the\n\t\t// durable SessionManager sequence: events that persist no entry keep the\n\t\t// same revision number. Clients accept equal-revision snapshots (only\n\t\t// regressions are dropped), so no state is lost.\n\t\tfor (const listener of [...this.listeners]) {\n\t\t\ttry {\n\t\t\t\tlistener({ type: \"snapshot\" });\n\t\t\t} catch {\n\t\t\t\t// Snapshot observers must not affect the session.\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate currentModelRef(): ModelRef {\n\t\tconst model = this.session.model;\n\t\t// Defensive layer: the create/open preflights reject model-less sessions,\n\t\t// so a live runtime always has a model. A residual model-less runtime must\n\t\t// still fail diagnosably instead of surfacing as an unspecific internal\n\t\t// error through snapshot projection.\n\t\tif (!model) throw new PiServerError(\"invalid_request\", \"Session has no active model\");\n\t\treturn { provider: model.provider, id: model.id };\n\t}\n}\n\n/** Exclusive `PiServerService` over a coding-agent session source. */\nexport class CodingAgentServerService implements PiServerService {\n\tprivate readonly source: CodingAgentServerSessionSource;\n\tprivate readonly models: CodingAgentServerModels;\n\tprivate readonly now: () => number;\n\tprivate readonly acquired = new Map<string, CodingAgentSessionRuntime>();\n\tprivate readonly opening = new Set<string>();\n\tprivate readonly durable: DurableServiceV1 | undefined;\n\tprivate readonly executors = new Map<string, CodingAgentOperationExecutor>();\n\t/** In-memory operation store surface; undefined without a durable service. */\n\tprivate readonly operationStore: PiSessionOperationStore | undefined;\n\t/** In-memory artifact store surface; undefined without a durable service. */\n\tprivate readonly artifactStore: PiSessionArtifactStore | undefined;\n\t/** Durable mutation-response store surface; undefined without a durable service. */\n\tprivate readonly mutationResponseStore: MutationResponseStore | undefined;\n\tprivate readonly writerId: string | undefined;\n\tprivate leaseReady = false;\n\t/** Idempotency key (`sessionId\\0key`) -> recorded operation. */\n\tprivate readonly idempotencyIndex = new Map<string, RecordedOperation>();\n\t/** Operation id -> recorded payload snapshot for idempotent acks. */\n\tprivate readonly recordedOperations = new Map<string, RecordedOperation>();\n\t/** Active executor abort controllers by operation id. */\n\tprivate readonly inFlight = new Map<string, AbortController>();\n\t/** Cancel requests observed while the executor was still draining. */\n\tprivate readonly cancelRequested = new Set<string>();\n\n\tconstructor(options: {\n\t\treadonly sessions: CodingAgentServerSessionSource;\n\t\treadonly models: CodingAgentServerModels;\n\t\treadonly durable?: DurableServiceV1;\n\t\treadonly writerId?: string;\n\t\treadonly operationExecutors?: readonly CodingAgentOperationExecutor[];\n\t\treadonly now?: () => number;\n\t}) {\n\t\tthis.source = options.sessions;\n\t\tthis.models = options.models;\n\t\tthis.now = options.now ?? (() => Date.now());\n\t\tfor (const executor of options.operationExecutors ?? []) this.executors.set(executor.operationType, executor);\n\t\tif (options.durable) {\n\t\t\tthis.durable = options.durable;\n\t\t\tthis.writerId = options.writerId ?? randomUUID();\n\t\t\tthis.claimWriterLease();\n\t\t\tif (this.leaseReady) this.sweepInterruptedOperations();\n\t\t\tthis.operationStore = {\n\t\t\t\tsubmit: (input) => this.submitOperation(input),\n\t\t\t\tcancel: (input) => this.cancelOperation(input),\n\t\t\t\tresult: (input) => this.resultOperation(input),\n\t\t\t};\n\t\t\tthis.artifactStore = {\n\t\t\t\tstat: (sessionId, artifactId) => this.statArtifact(sessionId, artifactId),\n\t\t\t\tread: (sessionId, artifactId, readerOptions) => this.readArtifact(sessionId, artifactId, readerOptions),\n\t\t\t};\n\t\t\tthis.mutationResponseStore = {\n\t\t\t\tload: (sessionId, operationId) => this.loadMutationResponse(sessionId, operationId),\n\t\t\t\trecord: (sessionId, operationId, snapshot) => this.recordMutationResponse(sessionId, operationId, snapshot),\n\t\t\t};\n\t\t}\n\t}\n\n\t/** Remote artifact access; unconfigured without a durable service. */\n\tget artifacts(): PiSessionArtifactStore | undefined {\n\t\treturn this.artifactStore;\n\t}\n\n\t/** Durable operation commands; unconfigured without a durable service. */\n\tget operations(): PiSessionOperationStore | undefined {\n\t\treturn this.operationStore;\n\t}\n\n\t/** Durable replay of mutation-command responses; unconfigured without a durable service. */\n\tget mutationResponses(): MutationResponseStore | undefined {\n\t\treturn this.mutationResponseStore;\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Durable writer lease (single-instance boundary)\n\t// -------------------------------------------------------------------------\n\n\t/**\n\t * Claims the writer lease at startup. A holder found in restored state\n\t * belonged to a dead process (snapshot import), so it is recovered; a live\n\t * foreign writer keeps the lease and this service stays unavailable.\n\t */\n\tprivate claimWriterLease(): void {\n\t\tconst durable = this.durable;\n\t\tconst writerId = this.writerId;\n\t\tif (!durable || !writerId) return;\n\t\tif (durable.claimWriter(writerId).status === \"claimed\") {\n\t\t\tthis.leaseReady = true;\n\t\t\treturn;\n\t\t}\n\t\tthis.leaseReady = durable.recoverWriter(writerId).status === \"recovered\";\n\t}\n\n\t/**\n\t * Releases the store writer lease on graceful shutdown (D-067 phase 2 S2)\n\t * so a successor process can claim immediately. Best-effort: only a held\n\t * lease is released, and failures are swallowed — a crashed process leaves\n\t * the lease for the TTL recovery path instead.\n\t */\n\treleaseWriterLease(): void {\n\t\tconst durable = this.durable;\n\t\tconst writerId = this.writerId;\n\t\tif (!durable || !writerId || !this.leaseReady) return;\n\t\ttry {\n\t\t\tdurable.releaseWriter(writerId);\n\t\t\tthis.leaseReady = false;\n\t\t} catch {\n\t\t\t// Shutdown release is advisory; the TTL recovery path handles the rest.\n\t\t}\n\t}\n\n\t/** Persists one adapter-owned operation record; a lost lease degrades to `durable_unavailable`. */\n\tprivate persistOperation(operationId: string, sessionId: string, payload: DurableOperationPayloadV1): void {\n\t\ttry {\n\t\t\tthis.durable?.persistOperation({\n\t\t\t\twriterId: this.writerId ?? \"\",\n\t\t\t\toperationId,\n\t\t\t\tsessionId,\n\t\t\t\tdata: payload,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tif (error instanceof DurableServiceErrorV1) {\n\t\t\t\tthrow new PiServerError(\"durable_unavailable\", error.message);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tprivate requireDurable(): DurableServiceV1 {\n\t\tif (!this.durable || !this.leaseReady) {\n\t\t\tthrow new PiServerError(\"durable_unavailable\", \"Durable operation store is not ready\");\n\t\t}\n\t\treturn this.durable;\n\t}\n\n\t/**\n\t * Rejects operations that were pending when the previous process stopped:\n\t * no executor survives a crash, so replayed `pending` records are swept to\n\t * a rejected terminal and their idempotency keys keep returning that\n\t/**\n\t * recorded terminal.\n\t */\n\tprivate sweepInterruptedOperations(): void {\n\t\tconst durable = this.durable;\n\t\tif (!durable) return;\n\t\tfor (const record of durable.exportState().operations) {\n\t\t\tconst payload = parseOperationPayload(record.data);\n\t\t\tif (!payload) continue;\n\t\t\tconst resolved: DurableOperationPayloadV1 =\n\t\t\t\tpayload.status === \"pending\"\n\t\t\t\t\t? {\n\t\t\t\t\t\t\t...payload,\n\t\t\t\t\t\t\tstatus: \"rejected\",\n\t\t\t\t\t\t\terror: { code: \"internal_error\", message: \"Operation did not complete before the server stopped\" },\n\t\t\t\t\t\t\tterminalAt: this.now(),\n\t\t\t\t\t\t}\n\t\t\t\t\t: payload;\n\t\t\tif (resolved !== payload) this.persistOperation(record.operationId, payload.sessionId, resolved);\n\t\t\tthis.recordOperation(record.operationId, resolved);\n\t\t}\n\t}\n\n\tprivate recordOperation(operationId: string, payload: DurableOperationPayloadV1): void {\n\t\tthis.recordedOperations.set(operationId, { operationId, payload });\n\t\tif (payload.idempotencyKey !== undefined) {\n\t\t\tthis.idempotencyIndex.set(`${payload.sessionId}\\0${payload.idempotencyKey}`, { operationId, payload });\n\t\t}\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Operation commands (server `operations` surface)\n\t// -------------------------------------------------------------------------\n\n\tprivate async submitOperation(input: {\n\t\treadonly sessionId: string;\n\t\treadonly operationType: string;\n\t\treadonly input?: JsonValue;\n\t\treadonly idempotencyKey?: string;\n\t\treadonly expectedRevision?: number;\n\t}): Promise<PiSessionOperationAck> {\n\t\tthis.requireDurable();\n\t\t// Idempotent replay precedes the live-session check: a recorded terminal\n\t\t// must stay answerable after a restart even though no runtime is open.\n\t\tif (input.idempotencyKey !== undefined) {\n\t\t\tconst recorded = this.idempotencyIndex.get(`${input.sessionId}\\0${input.idempotencyKey}`);\n\t\t\tif (recorded) return this.ackOf(recorded);\n\t\t}\n\t\tconst runtime = this.acquired.get(input.sessionId);\n\t\tif (!runtime) throw new PiServerError(\"not_found\", `Session is not open: ${input.sessionId}`);\n\t\tif (input.expectedRevision !== undefined) {\n\t\t\tconst revision = (await runtime.snapshot()).revision;\n\t\t\tif (revision !== input.expectedRevision) {\n\t\t\t\tthrow new PiServerError(\n\t\t\t\t\t\"operation_conflict\",\n\t\t\t\t\t`Session revision is ${revision}, expectedRevision was ${input.expectedRevision}`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t\tconst operationId = randomUUID();\n\t\tconst payload: DurableOperationPayloadV1 = {\n\t\t\tstatus: \"pending\",\n\t\t\tsessionId: input.sessionId,\n\t\t\toperationType: input.operationType,\n\t\t\t...(input.idempotencyKey === undefined ? {} : { idempotencyKey: input.idempotencyKey }),\n\t\t\tsubmittedAt: this.now(),\n\t\t};\n\t\tthis.persistOperation(operationId, input.sessionId, payload);\n\t\tthis.recordOperation(operationId, payload);\n\t\t// Fire-and-forget execution: the ack must reach the client immediately,\n\t\t// otherwise a long operation hides its own operationId and cancel/result\n\t\t// stay unreachable. `executeOperation` records executor failures as\n\t\t// rejected terminals; only a terminal persist failure can still escape,\n\t\t// so pin the in-memory record to a rejected terminal carrying the\n\t\t// original error. The durable log keeps `pending` and the restart sweep\n\t\t// converges the record.\n\t\tthis.executeOperation(operationId, payload, input.input).catch((error: unknown) => {\n\t\t\tthis.recordOperation(operationId, {\n\t\t\t\t...payload,\n\t\t\t\tstatus: \"rejected\",\n\t\t\t\terror: { code: \"internal_error\", message: error instanceof Error ? error.message : String(error) },\n\t\t\t\tterminalAt: this.now(),\n\t\t\t});\n\t\t});\n\t\treturn this.ackOf({ operationId, payload });\n\t}\n\n\t/**\n\t * Runs the executor and persists the terminal state. Cancel is only a\n\t * request: the terminal record is written strictly after the executor\n\t * drains, so `cancel -> drain -> terminal` is the observable order.\n\t */\n\tprivate async executeOperation(\n\t\toperationId: string,\n\t\tpayload: DurableOperationPayloadV1,\n\t\tinput: JsonValue | undefined,\n\t): Promise<PiSessionOperationAck> {\n\t\tconst executor = this.executors.get(payload.operationType);\n\t\tif (!executor) {\n\t\t\treturn this.completeOperation(operationId, {\n\t\t\t\t...payload,\n\t\t\t\tstatus: \"rejected\",\n\t\t\t\terror: {\n\t\t\t\t\tcode: \"not_implemented\",\n\t\t\t\t\tmessage: `No executor is registered for operation type ${payload.operationType}`,\n\t\t\t\t},\n\t\t\t\tterminalAt: this.now(),\n\t\t\t});\n\t\t}\n\t\tconst controller = new AbortController();\n\t\tthis.inFlight.set(operationId, controller);\n\t\tlet terminal: DurableOperationPayloadV1;\n\t\ttry {\n\t\t\tconst result = await executor.execute({\n\t\t\t\tsessionId: payload.sessionId,\n\t\t\t\toperationId,\n\t\t\t\t...(input === undefined ? {} : { input }),\n\t\t\t\tsignal: controller.signal,\n\t\t\t});\n\t\t\tterminal = { ...payload, status: \"completed\", result, terminalAt: this.now() };\n\t\t} catch (error) {\n\t\t\tterminal = {\n\t\t\t\t...payload,\n\t\t\t\tstatus: \"rejected\",\n\t\t\t\terror: this.toTerminalError(operationId, error),\n\t\t\t\tterminalAt: this.now(),\n\t\t\t};\n\t\t} finally {\n\t\t\tthis.inFlight.delete(operationId);\n\t\t\tthis.cancelRequested.delete(operationId);\n\t\t}\n\t\treturn this.completeOperation(operationId, terminal);\n\t}\n\n\tprivate toTerminalError(\n\t\toperationId: string,\n\t\terror: unknown,\n\t): {\n\t\treadonly code: ProtocolErrorCode;\n\t\treadonly message: string;\n\t} {\n\t\tif (this.cancelRequested.has(operationId)) {\n\t\t\treturn { code: \"operation_cancelled\", message: \"Operation was cancelled before completion\" };\n\t\t}\n\t\tif (error instanceof PiServerError) return { code: error.code, message: error.message };\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\treturn { code: \"invalid_request\", message };\n\t}\n\n\tprivate completeOperation(operationId: string, terminal: DurableOperationPayloadV1): PiSessionOperationAck {\n\t\tthis.persistOperation(operationId, terminal.sessionId, terminal);\n\t\tthis.recordOperation(operationId, terminal);\n\t\treturn this.ackOf({ operationId, payload: terminal });\n\t}\n\n\tprivate cancelOperation(input: { readonly sessionId: string; readonly operationId: string }): PiSessionOperationAck {\n\t\tthis.requireDurable();\n\t\tconst recorded = this.recordedOperations.get(input.operationId);\n\t\t// Session ownership is part of the lookup: a foreign session gets the\n\t\t// same not-found answer as a missing id, without leaking ownership.\n\t\tif (!recorded || recorded.payload.sessionId !== input.sessionId) {\n\t\t\tthrow new PiServerError(\"operation_not_found\", `Unknown operation: ${input.operationId}`);\n\t\t}\n\t\tif (recorded.payload.status !== \"pending\") return this.ackOf(recorded);\n\t\t// Record the cancel request and signal the executor. The terminal state\n\t\t// is only written once the executor drained (or nothing is draining).\n\t\tthis.cancelRequested.add(input.operationId);\n\t\tthis.inFlight.get(input.operationId)?.abort();\n\t\treturn { operationId: input.operationId, status: \"accepted\" };\n\t}\n\n\tprivate resultOperation(input: { readonly sessionId: string; readonly operationId: string }): PiSessionOperationAck {\n\t\tthis.requireDurable();\n\t\tconst recorded = this.recordedOperations.get(input.operationId);\n\t\t// Session ownership is part of the lookup: a foreign session gets the\n\t\t// same not-found answer as a missing id, without leaking ownership.\n\t\tif (!recorded || recorded.payload.sessionId !== input.sessionId) {\n\t\t\tthrow new PiServerError(\"operation_not_found\", `Unknown operation: ${input.operationId}`);\n\t\t}\n\t\treturn this.ackOf(recorded);\n\t}\n\n\tprivate ackOf(recorded: RecordedOperation): PiSessionOperationAck {\n\t\tconst { operationId, payload } = recorded;\n\t\tif (payload.status === \"completed\") {\n\t\t\treturn {\n\t\t\t\toperationId,\n\t\t\t\tstatus: \"completed\",\n\t\t\t\t...(payload.result === undefined ? {} : { result: payload.result }),\n\t\t\t};\n\t\t}\n\t\tif (payload.status === \"rejected\") {\n\t\t\treturn {\n\t\t\t\toperationId,\n\t\t\t\tstatus: \"rejected\",\n\t\t\t\t...(payload.error === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: { error: { code: payload.error.code, message: payload.error.message } satisfies ProtocolError }),\n\t\t\t};\n\t\t}\n\t\treturn { operationId, status: \"accepted\" };\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Artifact adapter (output-artifacts face + durable persistence)\n\t// -------------------------------------------------------------------------\n\n\t/**\n\t * Mirrors one runtime output artifact into the durable store so remote\n\t * `artifact_stat`/`artifact_read` can serve it, including after a restart\n\t * via log replay. The runtime in-memory store (capability-runtime) stays\n\t * the live write path; this adds durable persistence, not a second store.\n\t */\n\tpersistOutputArtifact(sessionId: string, ref: OutputArtifactRef, bytes: Uint8Array): ArtifactRef {\n\t\tthis.requireDurable();\n\t\tif (ref.sessionId !== sessionId) {\n\t\t\tthrow new PiServerError(\"invalid_request\", \"Artifact sessionId must match the owning session\");\n\t\t}\n\t\tif (ref.artifactId === \"\") throw new PiServerError(\"invalid_request\", \"Artifact id must not be empty\");\n\t\tif (ref.sizeBytes !== undefined && ref.sizeBytes !== bytes.byteLength) {\n\t\t\tthrow new PiServerError(\"invalid_request\", \"Artifact sizeBytes must match the payload length\");\n\t\t}\n\t\ttry {\n\t\t\tthis.durable?.persistArtifact({\n\t\t\t\twriterId: this.writerId ?? \"\",\n\t\t\t\tartifactId: ref.artifactId,\n\t\t\t\tsessionId,\n\t\t\t\tdata: { ref, bytes: Buffer.from(bytes).toString(\"base64\") } satisfies DurableArtifactPayloadV1,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tif (error instanceof DurableServiceErrorV1) {\n\t\t\t\tthrow new PiServerError(\"durable_unavailable\", error.message);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t\treturn toProtocolArtifactRef(ref);\n\t}\n\n\tprivate statArtifact(sessionId: string, artifactId: string): ArtifactRef {\n\t\treturn toProtocolArtifactRef(this.loadArtifactPayload(sessionId, artifactId).ref);\n\t}\n\n\tprivate readArtifact(\n\t\tsessionId: string,\n\t\tartifactId: string,\n\t\toptions: { readonly offset: number; readonly maxBytes: number },\n\t): {\n\t\treadonly artifact: ArtifactRef;\n\t\treadonly data: Uint8Array;\n\t\treadonly nextOffset?: number;\n\t\treadonly eof: boolean;\n\t} {\n\t\tconst payload = this.loadArtifactPayload(sessionId, artifactId);\n\t\tconst bytes = Buffer.from(payload.bytes, \"base64\");\n\t\tconst end = Math.min(options.offset + options.maxBytes, bytes.byteLength);\n\t\tconst data = new Uint8Array(bytes.subarray(options.offset, end));\n\t\tconst eof = end >= bytes.byteLength;\n\t\treturn {\n\t\t\tartifact: toProtocolArtifactRef(payload.ref),\n\t\t\tdata,\n\t\t\t...(eof ? {} : { nextOffset: end }),\n\t\t\teof,\n\t\t};\n\t}\n\n\t/**\n\t * Loads one artifact payload through the durable service.\n\t */\n\tprivate loadArtifactPayload(sessionId: string, artifactId: string): DurableArtifactPayloadV1 {\n\t\tconst durable = this.requireDurable();\n\t\tconst record = durable.loadArtifact({ artifactId });\n\t\tif (!record || record.sessionId !== sessionId) {\n\t\t\tthrow new PiServerError(\"not_found\", `Unknown artifact: ${artifactId}`);\n\t\t}\n\t\tconst payload = parseArtifactPayload(record.data);\n\t\tif (!payload || payload.ref.sessionId !== sessionId || payload.ref.artifactId !== artifactId) {\n\t\t\tthrow new PiServerError(\"durable_unavailable\", \"Stored artifact record is malformed\");\n\t\t}\n\t\treturn payload;\n\t}\n\n\t// -------------------------------------------------------------------------\n\t// Mutation-response store (idempotent replay of keyed mutation commands)\n\t// -------------------------------------------------------------------------\n\n\t/**\n\t * Deterministic artifact id for one mutation-command response, following the\n\t * `agent-task:<taskId>` precedent for derived artifact ids.\n\t */\n\tprivate mutationResponseArtifactId(sessionId: string, operationId: string): string {\n\t\treturn `mutation-response:${sessionId}:${operationId}`;\n\t}\n\n\t/**\n\t * Loads a recorded response through the durable service. The durable log\n\t * was already replayed into memory at construction, so this read never\n\t * touches the disk. A missing or malformed record yields undefined so the\n\t * caller re-executes; unexpected durable failures propagate and are\n\t * reported (and treated as a miss) by the server's idempotency layer.\n\t */\n\tprivate async loadMutationResponse(sessionId: string, operationId: string): Promise<SessionSnapshot | undefined> {\n\t\tconst durable = this.requireDurable();\n\t\tconst record = durable.loadArtifact({\n\t\t\tartifactId: this.mutationResponseArtifactId(sessionId, operationId),\n\t\t});\n\t\tif (record === undefined || record.sessionId !== sessionId) return undefined;\n\t\tconst snapshot = parseMutationResponsePayload(record.data, sessionId);\n\t\treturn snapshot === undefined ? undefined : structuredClone(snapshot);\n\t}\n\n\t/**\n\t * Persists one successful response snapshot as a durable artifact record so\n\t * retries after a restart replay it. The payload is the `SessionSnapshot`\n\t * itself: every field is JSON-safe, so the JSONL durable log round-trips it\n\t * without an adapter-specific envelope.\n\t */\n\tprivate async recordMutationResponse(\n\t\tsessionId: string,\n\t\toperationId: string,\n\t\tsnapshot: SessionSnapshot,\n\t): Promise<void> {\n\t\tconst durable = this.requireDurable();\n\t\ttry {\n\t\t\tdurable.persistArtifact({\n\t\t\t\twriterId: this.writerId ?? \"\",\n\t\t\t\tartifactId: this.mutationResponseArtifactId(sessionId, operationId),\n\t\t\t\tsessionId,\n\t\t\t\tdata: snapshot,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tif (error instanceof DurableServiceErrorV1) {\n\t\t\t\tthrow new PiServerError(\"durable_unavailable\", error.message);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync listSessions(): Promise<SessionMetadata[]> {\n\t\tconst descriptors = await this.source.list();\n\t\treturn descriptors.map((descriptor) => ({\n\t\t\tid: descriptor.id,\n\t\t\tcreatedAt: descriptor.createdAt,\n\t\t\tupdatedAt: descriptor.updatedAt,\n\t\t\t...(descriptor.name === undefined ? {} : { sessionName: descriptor.name }),\n\t\t\t// Legacy sessions record no cwd; the protocol marks it optional.\n\t\t\t...(descriptor.cwd === undefined ? {} : { cwd: descriptor.cwd }),\n\t\t}));\n\t}\n\n\tasync listModels(): Promise<ModelMetadata[]> {\n\t\treturn [...(await this.models.list())];\n\t}\n\n\tasync createSession(options: CreateSessionOptions): Promise<PiSessionRuntime> {\n\t\tthis.assertNotAcquired(options.id);\n\t\tif (options.cwd === undefined || options.cwd.trim() === \"\") {\n\t\t\tthrow new PiServerError(\"invalid_request\", \"Creating a coding-agent session requires a cwd\");\n\t\t}\n\t\t// The protocol carries a model ref; resolve it to a Model instance the\n\t\t// same way runtime `set_model` does. An unknown ref fails the create\n\t\t// instead of being silently dropped.\n\t\tlet model: Model<Api> | undefined;\n\t\ttry {\n\t\t\tmodel = options.model === undefined ? undefined : await this.models.resolve(options.model);\n\t\t} catch (error) {\n\t\t\tthrow toError(error);\n\t\t}\n\t\tconst timestamp = Math.max(0, Math.trunc(this.now()));\n\t\tconst descriptor: CodingAgentSessionDescriptor = {\n\t\t\tid: options.id,\n\t\t\t...(options.name === undefined ? {} : { name: options.name }),\n\t\t\tcwd: options.cwd,\n\t\t\t...(model === undefined ? {} : { model }),\n\t\t\t...(options.thinkingLevel === undefined ? {} : { thinkingLevel: options.thinkingLevel }),\n\t\t\t...(options.profileId === undefined ? {} : { profileId: options.profileId }),\n\t\t\t...(options.profileVersion === undefined ? {} : { profileVersion: options.profileVersion }),\n\t\t\tcreatedAt: timestamp,\n\t\t\tupdatedAt: timestamp,\n\t\t};\n\t\tlet session: AgentSession;\n\t\ttry {\n\t\t\tsession = await this.openExclusively(descriptor.id, () => this.source.create(descriptor));\n\t\t} catch (error) {\n\t\t\tthrow toError(error);\n\t\t}\n\t\t// Lazy-model contract: createAgentSession does not fail when no model is\n\t\t// resolvable (no auth, empty catalog); it returns a session whose model is\n\t\t// undefined. A model-less live session cannot serve prompts and breaks\n\t\t// every client's list/server_snapshot, so the create fails explicitly.\n\t\t// Disposing rolls the session back before any registration; the\n\t\t// SessionManager has not flushed the JSONL yet (persistence defers until\n\t\t// the first assistant message), so nothing stays on disk, and a flushed\n\t\t// residue would still be harmless: reopening it runs into the same\n\t\t// preflight in openSession.\n\t\tif (session.model === undefined) {\n\t\t\t// Keep the structured rejection even if rollback fails; the cleanup\n\t\t\t// failure is appended to the message instead of masking it.\n\t\t\tlet cleanupNote = \"\";\n\t\t\ttry {\n\t\t\t\tawait session.dispose();\n\t\t\t} catch (disposeError) {\n\t\t\t\tcleanupNote = ` (session cleanup also failed: ${disposeError instanceof Error ? disposeError.message : String(disposeError)})`;\n\t\t\t}\n\t\t\tthrow new PiServerError(\n\t\t\t\t\"invalid_request\",\n\t\t\t\t`Creating a coding-agent session requires a resolvable model; none is available for this server's agent directory${cleanupNote}`,\n\t\t\t);\n\t\t}\n\t\treturn this.acquireRuntime(descriptor, session);\n\t}\n\n\tasync openSession(sessionId: string): Promise<PiSessionRuntime> {\n\t\tthis.assertNotAcquired(sessionId);\n\t\tconst descriptors = await this.source.list();\n\t\tconst descriptor = descriptors.find((entry) => entry.id === sessionId);\n\t\tif (!descriptor) throw new PiServerError(\"not_found\", `Unknown session: ${sessionId}`);\n\t\tlet session: AgentSession;\n\t\ttry {\n\t\t\tsession = await this.openExclusively(descriptor.id, () => this.source.open(descriptor));\n\t\t} catch (error) {\n\t\t\tthrow toError(error);\n\t\t}\n\t\t// Same preflight as create: a history session whose stored model no longer\n\t\t// resolves (model removed, auth missing) must fail the open instead of\n\t\t// going live model-less and breaking every client's list/server_snapshot.\n\t\tif (session.model === undefined) {\n\t\t\tlet cleanupNote = \"\";\n\t\t\ttry {\n\t\t\t\tawait session.dispose();\n\t\t\t} catch (disposeError) {\n\t\t\t\tcleanupNote = ` (session cleanup also failed: ${disposeError instanceof Error ? disposeError.message : String(disposeError)})`;\n\t\t\t}\n\t\t\tthrow new PiServerError(\n\t\t\t\t\"invalid_request\",\n\t\t\t\t`Reopening session ${sessionId} requires a resolvable model; none is available for this server's agent directory${cleanupNote}`,\n\t\t\t);\n\t\t}\n\t\treturn this.acquireRuntime(descriptor, session);\n\t}\n\n\t/** Serializes the acquired-check with the async source call to keep opens exclusive. */\n\tprivate async openExclusively(id: string, open: () => Promise<AgentSession>): Promise<AgentSession> {\n\t\tif (this.opening.has(id) || this.acquired.has(id)) {\n\t\t\tthrow new PiServerError(\"session_locked\", `Session is already open: ${id}`);\n\t\t}\n\t\tthis.opening.add(id);\n\t\ttry {\n\t\t\treturn await open();\n\t\t} finally {\n\t\t\tthis.opening.delete(id);\n\t\t}\n\t}\n\n\tprivate acquireRuntime(descriptor: CodingAgentSessionDescriptor, session: AgentSession): CodingAgentSessionRuntime {\n\t\t// Auto-mirror: with a durable service configured, every artifact committed\n\t\t// by the session's capability runtime is mirrored here, so the wire face\n\t\t// serves it without an explicit persist call. Without a durable service\n\t\t// nothing is registered (no behavior change). Mirror failures surface as\n\t\t// runtime commit-observer log records; they never fail the artifact put.\n\t\tconst unsubscribeArtifactMirror =\n\t\t\tthis.durable === undefined\n\t\t\t\t? undefined\n\t\t\t\t: session.onOutputArtifactCommit(({ ref, bytes }) => {\n\t\t\t\t\t\tthis.persistOutputArtifact(descriptor.id, ref, bytes);\n\t\t\t\t\t});\n\t\tconst runtime = new CodingAgentSessionRuntime(session, descriptor, {\n\t\t\tmodels: this.models,\n\t\t\tonDisposed: () => {\n\t\t\t\tunsubscribeArtifactMirror?.();\n\t\t\t\tthis.acquired.delete(descriptor.id);\n\t\t\t},\n\t\t});\n\t\tthis.acquired.set(descriptor.id, runtime);\n\t\treturn runtime;\n\t}\n\n\tprivate assertNotAcquired(id: string): void {\n\t\tif (this.acquired.has(id) || this.opening.has(id)) {\n\t\t\tthrow new PiServerError(\"session_locked\", `Session is already open: ${id}`);\n\t\t}\n\t}\n}\n\n/** Composes the coding-agent service with transport, journal, and auth hooks into one server. */\nexport function assembleCodingAgentServer(options: CodingAgentServerAssemblyOptions): {\n\treadonly server: PiServer;\n\treadonly service: CodingAgentServerService;\n} {\n\tconst service = new CodingAgentServerService({\n\t\tsessions: options.sessions,\n\t\tmodels: options.models,\n\t\tnow: options.now,\n\t\t...(options.durable === undefined ? {} : { durable: options.durable }),\n\t\t...(options.writerId === undefined ? {} : { writerId: options.writerId }),\n\t\t...(options.operationExecutors === undefined ? {} : { operationExecutors: options.operationExecutors }),\n\t});\n\tconst server = new PiServer(service, {\n\t\tlisteners: options.listeners,\n\t\t...(options.journal === undefined ? {} : { journal: options.journal }),\n\t\t...(options.authenticate === undefined ? {} : { authenticate: options.authenticate }),\n\t\t...(options.authorize === undefined ? {} : { authorize: options.authorize }),\n\t\t...(options.serverId === undefined ? {} : { serverId: options.serverId }),\n\t\t...(options.maxFrameLength === undefined ? {} : { maxFrameLength: options.maxFrameLength }),\n\t\t...(options.handshakeTimeoutMs === undefined ? {} : { handshakeTimeoutMs: options.handshakeTimeoutMs }),\n\t\t...(options.onError === undefined ? {} : { onError: options.onError }),\n\t});\n\treturn { server, service };\n}\n"]}