@aitne/daemon 0.1.0

package/dist/services/delegated-task-session-pool.d.ts

@@ -0,0 +1,182 @@
+import type { BackendId, IntegrationKey } from "@aitne/shared";
+/**
+ * DELEGATED-TASK-MODE-DESIGN.md §13 Phase 3.2 — session-dir warm cache.
+ *
+ * Why this is a "session-dir pool" and NOT a "subprocess pool":
+ *   - Claude Agent SDK 0.2.98's V2 `SDKSession` (warm-resume API) is alpha.
+ *   - §15-5 requires "clear conversation between tasks" anyway — keeping a
+ *     live session would force per-task conversation reset, which collapses
+ *     the value of warm-reuse on Claude.
+ *   - Gemini CLI 0.40.0's `--prompt` mode is one-shot; there is no live
+ *     stdin protocol that lets us slip a second task into the same process.
+ *
+ * What we CAN safely reuse: the materialized session **directory**. The
+ * proxy profile (`CLAUDE.md` / `GEMINI.md`) and the chmod 0700 dir cost
+ * tens of milliseconds per call to materialize. Reusing the dir saves
+ * that cost for rapid sequential tasks (e.g. an agent running three
+ * Gmail searches in a row).
+ *
+ * Per-task allowedTools / admin-policy TOML are still rewritten per call
+ * (Claude passes them through SDK args; Gemini overwrites the TOML in
+ * `runDelegatedTask`), so write-class state never leaks between tasks.
+ *
+ * Entries are keyed by `(backendId, integrationKey | "run", modelId)`.
+ * `allowDestructive` is intentionally NOT in the key — it changes
+ * allowedTools but those are wired per-call, not per-dir, so two calls
+ * with different `allowDestructive` can share a dir safely.
+ */
+export interface SessionPoolKey {
+    backendId: BackendId;
+    /** `null` for `/api/delegated/run` calls (no integration). */
+    integrationKey: IntegrationKey | null;
+    modelId: string;
+}
+export interface SessionPoolOptions {
+    /** Idle TTL — entry is evictable after this many ms past `releasedAt`. */
+    ttlMs: number;
+    /**
+     * Hard cap on idle entries. Defaults to `delegatedProxyMaxConcurrent` so
+     * the pool can never strand more dirs than the concurrency surface.
+     */
+    maxIdle: number;
+    /**
+     * Filesystem materialiser. The invoker passes its `materializeProxySession`
+     * as a callback so the pool stays decoupled from the agent-profile path
+     * resolution + fallback profile body.
+     */
+    materializer: (sessionDir: string, backendId: BackendId) => void;
+    /** Tempdir basename prefix — distinct from the proxy- prefix so the boot
+     *  janitor can target pool-orphans separately. */
+    tempdirPrefix: string;
+    /**
+     * Sessions root (e.g. `<dataDir>/agent-sessions`). The pool creates dirs
+     * directly under this. Cleanup uses `rmSync(recursive, force)`.
+     */
+    sessionsRoot: string;
+    /** Now-source for deterministic tests. Defaults to `Date.now`. */
+    now?: () => number;
+}
+interface PooledEntry {
+    hashKey: string;
+    backendId: BackendId;
+    integrationKey: IntegrationKey | null;
+    modelId: string;
+    sessionDir: string;
+    /** Wall-clock ms when the dir became idle (release time). */
+    releasedAt: number;
+    /** True while a task is using this entry — cannot be evicted. */
+    inUse: boolean;
+}
+/**
+ * Acquire-release lifecycle:
+ *
+ *   const lease = pool.acquire(key);  // creates + materializes if no idle entry
+ *   try {
+ *     await runDelegatedTask({ sessionDir: lease.sessionDir, ... });
+ *   } finally {
+ *     pool.release(lease);              // returns to idle pool with TTL
+ *     // OR
+ *     pool.discard(lease);              // dir is already gone (e.g. SIGKILL)
+ *   }
+ *
+ * The pool is opt-in via `delegatedTaskSubprocessPoolEnabled`. When the
+ * invoker is configured without the pool, every call goes through the
+ * pre-Phase-3 path: makeTempdir → materialize → cleanup.
+ */
+export declare class DelegatedTaskSessionPool {
+    private readonly entries;
+    private readonly opts;
+    private readonly now;
+    constructor(options: SessionPoolOptions);
+    /**
+     * Hash the pool key into a comparable string. Exposed for tests +
+     * eviction matching.
+     */
+    static hashKey(key: SessionPoolKey): string;
+    /**
+     * Acquire a session dir. Reuses an idle entry when possible; otherwise
+     * creates a fresh tempdir and materializes the proxy profile. Either
+     * path returns a lease the caller MUST release or discard.
+     *
+     * Pruning happens lazily on every acquire — cheap because the entries
+     * array is bounded at `maxIdle` (default 4).
+     */
+    acquire(key: SessionPoolKey): SessionPoolLease;
+    /**
+     * Mark `entry` as idle and stamp `releasedAt` so its TTL starts now.
+     * If we're over `maxIdle`, evict the LRU entry to free a slot. Called
+     * by `SessionPoolLease.release()`.
+     */
+    releaseEntry(entry: PooledEntry): void;
+    /**
+     * Caller knows the dir is gone (e.g. subprocess crashed mid-task and
+     * left it in an indeterminate state). Drop without TTL semantics so
+     * the next acquire materializes fresh.
+     */
+    discardEntry(entry: PooledEntry): void;
+    /**
+     * Sweep expired idle entries. Called eagerly on every acquire and by
+     * the periodic janitor. Returns number of dirs removed.
+     */
+    pruneExpired(): number;
+    /**
+     * Drop every idle entry. Used when `delegatedTaskSubprocessPoolEnabled`
+     * flips false mid-window OR when the daemon is shutting down. In-use
+     * entries are left alone — they'll be removed by their lease's
+     * release/discard.
+     */
+    evictAll(): number;
+    /** Visibility for /health.metrics. */
+    stats(): {
+        idle: number;
+        inUse: number;
+        total: number;
+        maxIdle: number;
+        ttlMs: number;
+    };
+    private removeEntry;
+}
+/**
+ * RAII-style lease the invoker holds for the duration of a task. The
+ * lease object is intentionally tiny — only the sessionDir is exposed
+ * to the rest of the invoker.
+ */
+export declare class SessionPoolLease {
+    private readonly pool;
+    private readonly entry;
+    /** True iff this lease was satisfied by an existing pool entry. */
+    readonly fromPool: boolean;
+    readonly sessionDir: string;
+    private released;
+    constructor(pool: DelegatedTaskSessionPool, entry: PooledEntry, fromPool: boolean);
+    /**
+     * Return the dir to the idle pool. Idempotent so a `finally { lease.release(); }`
+     * is safe even when the caller manually called `release()` already.
+     */
+    release(): void;
+    /**
+     * Drop the entry permanently — used when the dir is in an unknown
+     * state (e.g. a subprocess crash). The next acquire materializes fresh.
+     * Idempotent.
+     */
+    discard(): void;
+}
+/**
+ * Tempdir prefix the pool uses. Distinct from the `proxy-` prefix so
+ * `runProxyTempdirJanitor` doesn't sweep live pool dirs at boot. The
+ * pool has its own janitor for orphans (`runDelegatedTaskSessionPoolJanitor`
+ * lives in delegated-backend-invoker.ts).
+ */
+export declare const SESSION_POOL_TEMPDIR_PREFIX = "task-pool-";
+/**
+ * Boot-time janitor — scans `sessionsRoot` for `task-pool-*` dirs older
+ * than `maxAgeMs` and removes them. Runs once at startup before any pool
+ * is constructed, mirroring `runProxyTempdirJanitor` so a daemon crash
+ * cannot leave orphan dirs across restarts. Returns count removed.
+ */
+export declare function runSessionPoolTempdirJanitor(sessionsRoot: string, options?: {
+    now?: () => number;
+    maxAgeMs?: number;
+}): number;
+export {};
+//# sourceMappingURL=delegated-task-session-pool.d.ts.map

package/dist/services/delegated-task-session-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-task-session-pool.d.ts","sourceRoot":"","sources":["../../src/services/delegated-task-session-pool.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAK/D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,SAAS,CAAC;IACrB,8DAA8D;IAC9D,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,KAAK,IAAI,CAAC;IACjE;sDACkD;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,UAAU,WAAW;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,OAAO,EAAE,kBAAkB;IAevC;;;OAGG;IACH,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM;IAQ3C;;;;;;;OAOG;IACH,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,gBAAgB;IAmD9C;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IActC;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAItC;;;OAGG;IACH,YAAY,IAAI,MAAM;IAYtB;;;;;OAKG;IACH,QAAQ,IAAI,MAAM;IAUlB,sCAAsC;IACtC,KAAK,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAgBvF,OAAO,CAAC,WAAW;CAYpB;AAED;;;;GAIG;AACH,qBAAa,gBAAgB;IAOzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAPxB,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAS;gBAGN,IAAI,EAAE,wBAAwB,EAC9B,KAAK,EAAE,WAAW,EACnC,QAAQ,EAAE,OAAO;IAMnB;;;OAGG;IACH,OAAO,IAAI,IAAI;IAMf;;;;OAIG;IACH,OAAO,IAAI,IAAI;CAKhB;AAED;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,eAAe,CAAC;AAExD;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,MAAM,CAkCR"}

package/dist/services/delegated-task-session-pool.js

@@ -0,0 +1,292 @@
+import { existsSync, mkdirSync, readdirSync, rmSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { randomUUID } from "node:crypto";
+import { createLogger } from "../logging.js";
+const logger = createLogger("delegated-task-session-pool");
+/**
+ * Acquire-release lifecycle:
+ *
+ *   const lease = pool.acquire(key);  // creates + materializes if no idle entry
+ *   try {
+ *     await runDelegatedTask({ sessionDir: lease.sessionDir, ... });
+ *   } finally {
+ *     pool.release(lease);              // returns to idle pool with TTL
+ *     // OR
+ *     pool.discard(lease);              // dir is already gone (e.g. SIGKILL)
+ *   }
+ *
+ * The pool is opt-in via `delegatedTaskSubprocessPoolEnabled`. When the
+ * invoker is configured without the pool, every call goes through the
+ * pre-Phase-3 path: makeTempdir → materialize → cleanup.
+ */
+export class DelegatedTaskSessionPool {
+    entries = [];
+    opts;
+    now;
+    constructor(options) {
+        if (!Number.isFinite(options.ttlMs) || options.ttlMs <= 0) {
+            throw new Error(`DelegatedTaskSessionPool: ttlMs must be > 0 (got ${options.ttlMs})`);
+        }
+        if (!Number.isFinite(options.maxIdle) || options.maxIdle <= 0) {
+            throw new Error(`DelegatedTaskSessionPool: maxIdle must be > 0 (got ${options.maxIdle})`);
+        }
+        this.opts = options;
+        this.now = options.now ?? Date.now;
+    }
+    /**
+     * Hash the pool key into a comparable string. Exposed for tests +
+     * eviction matching.
+     */
+    static hashKey(key) {
+        return [
+            key.backendId,
+            key.integrationKey ?? "run",
+            key.modelId,
+        ].join("|");
+    }
+    /**
+     * Acquire a session dir. Reuses an idle entry when possible; otherwise
+     * creates a fresh tempdir and materializes the proxy profile. Either
+     * path returns a lease the caller MUST release or discard.
+     *
+     * Pruning happens lazily on every acquire — cheap because the entries
+     * array is bounded at `maxIdle` (default 4).
+     */
+    acquire(key) {
+        this.pruneExpired();
+        const hash = DelegatedTaskSessionPool.hashKey(key);
+        for (const entry of this.entries) {
+            if (entry.inUse)
+                continue;
+            if (entry.hashKey !== hash)
+                continue;
+            if (!existsSync(entry.sessionDir)) {
+                // Lost the directory between release and re-acquire (e.g. external
+                // janitor swept it). Drop the entry and fall through to a fresh
+                // materialize. This is a defensive path; production should never
+                // hit it because the pool's own janitor is the only thing
+                // expected to remove dirs in this prefix.
+                const idx = this.entries.indexOf(entry);
+                if (idx >= 0)
+                    this.entries.splice(idx, 1);
+                break;
+            }
+            entry.inUse = true;
+            return new SessionPoolLease(this, entry, /* fromPool */ true);
+        }
+        // No reusable entry — materialize fresh.
+        const sessionDir = join(this.opts.sessionsRoot, `${this.opts.tempdirPrefix}${randomUUID()}`);
+        mkdirSync(sessionDir, { recursive: true, mode: 0o700 });
+        try {
+            this.opts.materializer(sessionDir, key.backendId);
+        }
+        catch (err) {
+            // Materialisation failed — clean up and rethrow so the caller falls
+            // back to its own non-pool path. Don't add a half-materialized entry
+            // to the pool.
+            try {
+                rmSync(sessionDir, { recursive: true, force: true });
+            }
+            catch {
+                /* ignore double-cleanup */
+            }
+            throw err;
+        }
+        const entry = {
+            hashKey: hash,
+            backendId: key.backendId,
+            integrationKey: key.integrationKey,
+            modelId: key.modelId,
+            sessionDir,
+            releasedAt: this.now(),
+            inUse: true,
+        };
+        this.entries.push(entry);
+        return new SessionPoolLease(this, entry, /* fromPool */ false);
+    }
+    /**
+     * Mark `entry` as idle and stamp `releasedAt` so its TTL starts now.
+     * If we're over `maxIdle`, evict the LRU entry to free a slot. Called
+     * by `SessionPoolLease.release()`.
+     */
+    releaseEntry(entry) {
+        entry.inUse = false;
+        entry.releasedAt = this.now();
+        // Evict to maxIdle. Walk in releasedAt order to drop the LRU; we
+        // never evict the entry just released (it's the freshest).
+        const idle = this.entries.filter((e) => !e.inUse);
+        if (idle.length <= this.opts.maxIdle)
+            return;
+        idle.sort((a, b) => a.releasedAt - b.releasedAt);
+        const overflow = idle.length - this.opts.maxIdle;
+        for (let i = 0; i < overflow; i++) {
+            this.removeEntry(idle[i]);
+        }
+    }
+    /**
+     * Caller knows the dir is gone (e.g. subprocess crashed mid-task and
+     * left it in an indeterminate state). Drop without TTL semantics so
+     * the next acquire materializes fresh.
+     */
+    discardEntry(entry) {
+        this.removeEntry(entry);
+    }
+    /**
+     * Sweep expired idle entries. Called eagerly on every acquire and by
+     * the periodic janitor. Returns number of dirs removed.
+     */
+    pruneExpired() {
+        const cutoff = this.now() - this.opts.ttlMs;
+        let removed = 0;
+        for (const entry of [...this.entries]) {
+            if (entry.inUse)
+                continue;
+            if (entry.releasedAt > cutoff)
+                continue;
+            this.removeEntry(entry);
+            removed += 1;
+        }
+        return removed;
+    }
+    /**
+     * Drop every idle entry. Used when `delegatedTaskSubprocessPoolEnabled`
+     * flips false mid-window OR when the daemon is shutting down. In-use
+     * entries are left alone — they'll be removed by their lease's
+     * release/discard.
+     */
+    evictAll() {
+        let removed = 0;
+        for (const entry of [...this.entries]) {
+            if (entry.inUse)
+                continue;
+            this.removeEntry(entry);
+            removed += 1;
+        }
+        return removed;
+    }
+    /** Visibility for /health.metrics. */
+    stats() {
+        let inUse = 0;
+        let idle = 0;
+        for (const e of this.entries) {
+            if (e.inUse)
+                inUse += 1;
+            else
+                idle += 1;
+        }
+        return {
+            idle,
+            inUse,
+            total: this.entries.length,
+            maxIdle: this.opts.maxIdle,
+            ttlMs: this.opts.ttlMs,
+        };
+    }
+    removeEntry(entry) {
+        const idx = this.entries.indexOf(entry);
+        if (idx >= 0)
+            this.entries.splice(idx, 1);
+        try {
+            rmSync(entry.sessionDir, { recursive: true, force: true });
+        }
+        catch (err) {
+            logger.warn({ err, sessionDir: entry.sessionDir }, "session pool: failed to rm idle dir");
+        }
+    }
+}
+/**
+ * RAII-style lease the invoker holds for the duration of a task. The
+ * lease object is intentionally tiny — only the sessionDir is exposed
+ * to the rest of the invoker.
+ */
+export class SessionPoolLease {
+    pool;
+    entry;
+    /** True iff this lease was satisfied by an existing pool entry. */
+    fromPool;
+    sessionDir;
+    released = false;
+    constructor(pool, entry, fromPool) {
+        this.pool = pool;
+        this.entry = entry;
+        this.fromPool = fromPool;
+        this.sessionDir = entry.sessionDir;
+    }
+    /**
+     * Return the dir to the idle pool. Idempotent so a `finally { lease.release(); }`
+     * is safe even when the caller manually called `release()` already.
+     */
+    release() {
+        if (this.released)
+            return;
+        this.released = true;
+        this.pool.releaseEntry(this.entry);
+    }
+    /**
+     * Drop the entry permanently — used when the dir is in an unknown
+     * state (e.g. a subprocess crash). The next acquire materializes fresh.
+     * Idempotent.
+     */
+    discard() {
+        if (this.released)
+            return;
+        this.released = true;
+        this.pool.discardEntry(this.entry);
+    }
+}
+/**
+ * Tempdir prefix the pool uses. Distinct from the `proxy-` prefix so
+ * `runProxyTempdirJanitor` doesn't sweep live pool dirs at boot. The
+ * pool has its own janitor for orphans (`runDelegatedTaskSessionPoolJanitor`
+ * lives in delegated-backend-invoker.ts).
+ */
+export const SESSION_POOL_TEMPDIR_PREFIX = "task-pool-";
+/**
+ * Boot-time janitor — scans `sessionsRoot` for `task-pool-*` dirs older
+ * than `maxAgeMs` and removes them. Runs once at startup before any pool
+ * is constructed, mirroring `runProxyTempdirJanitor` so a daemon crash
+ * cannot leave orphan dirs across restarts. Returns count removed.
+ */
+export function runSessionPoolTempdirJanitor(sessionsRoot, options = {}) {
+    const now = options.now ?? Date.now;
+    const maxAgeMs = options.maxAgeMs ?? 5 * 60 * 1000;
+    if (!existsSync(sessionsRoot))
+        return 0;
+    let entries;
+    try {
+        entries = readdirSync(sessionsRoot);
+    }
+    catch (err) {
+        logger.warn({ err, sessionsRoot }, "session pool janitor: readdir failed");
+        return 0;
+    }
+    let removed = 0;
+    for (const entry of entries) {
+        if (!entry.startsWith(SESSION_POOL_TEMPDIR_PREFIX))
+            continue;
+        const path = join(sessionsRoot, entry);
+        let stat;
+        try {
+            stat = statSync(path);
+        }
+        catch {
+            continue;
+        }
+        if (!stat.isDirectory())
+            continue;
+        if (now() - stat.mtimeMs < maxAgeMs)
+            continue;
+        try {
+            rmSync(path, { recursive: true, force: true });
+            removed++;
+        }
+        catch (err) {
+            logger.warn({ err, path }, "session pool janitor: rm failed");
+        }
+    }
+    if (removed > 0) {
+        logger.info({ removed }, "session pool janitor: removed orphan dirs");
+    }
+    return removed;
+}
+//# sourceMappingURL=delegated-task-session-pool.js.map

package/dist/services/delegated-task-session-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-task-session-pool.js","sourceRoot":"","sources":["../../src/services/delegated-task-session-pool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAC;AA0E3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,wBAAwB;IAClB,OAAO,GAAkB,EAAE,CAAC;IAC5B,IAAI,CAAqB;IACzB,GAAG,CAAe;IAEnC,YAAY,OAA2B;QACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,oDAAoD,OAAO,CAAC,KAAK,GAAG,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CACb,sDAAsD,OAAO,CAAC,OAAO,GAAG,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;QACpB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAAO,CAAC,GAAmB;QAChC,OAAO;YACL,GAAG,CAAC,SAAS;YACb,GAAG,CAAC,cAAc,IAAI,KAAK;YAC3B,GAAG,CAAC,OAAO;SACZ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,GAAmB;QACzB,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,KAAK;gBAAE,SAAS;YAC1B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;gBAAE,SAAS;YACrC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClC,mEAAmE;gBACnE,gEAAgE;gBAChE,iEAAiE;gBACjE,0DAA0D;gBAC1D,0CAA0C;gBAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACxC,IAAI,GAAG,IAAI,CAAC;oBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC1C,MAAM;YACR,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;YACnB,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC;QACD,yCAAyC;QACzC,MAAM,UAAU,GAAG,IAAI,CACrB,IAAI,CAAC,IAAI,CAAC,YAAY,EACtB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,UAAU,EAAE,EAAE,CAC5C,CAAC;QACF,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,qEAAqE;YACrE,eAAe;YACf,IAAI,CAAC;gBACH,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAgB;YACzB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU;YACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,KAAK,EAAE,IAAI;SACZ,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,KAAkB;QAC7B,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;QACpB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,iEAAiE;QACjE,2DAA2D;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC7C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,KAAkB;QAC7B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,KAAK;gBAAE,SAAS;YAC1B,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM;gBAAE,SAAS;YACxC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,KAAK;gBAAE,SAAS;YAC1B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,sCAAsC;IACtC,KAAK;QACH,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,KAAK;gBAAE,KAAK,IAAI,CAAC,CAAC;;gBACnB,IAAI,IAAI,CAAC,CAAC;QACjB,CAAC;QACD,OAAO;YACL,IAAI;YACJ,KAAK;YACL,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC1B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;SACvB,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,KAAkB;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,GAAG,IAAI,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EACrC,qCAAqC,CACtC,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAOR;IACA;IAPnB,mEAAmE;IAC1D,QAAQ,CAAU;IAClB,UAAU,CAAS;IACpB,QAAQ,GAAG,KAAK,CAAC;IAEzB,YACmB,IAA8B,EAC9B,KAAkB,EACnC,QAAiB;QAFA,SAAI,GAAJ,IAAI,CAA0B;QAC9B,UAAK,GAAL,KAAK,CAAa;QAGnC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,YAAY,CAAC;AAExD;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,YAAoB,EACpB,UAAqD,EAAE;IAEvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,CAAC,CAAC;IACxC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,sCAAsC,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,2BAA2B,CAAC;YAAE,SAAS;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,SAAS;QAClC,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,QAAQ;YAAE,SAAS;QAC9C,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,iCAAiC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,2CAA2C,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/services/delegated-tool-runtime.d.ts

@@ -0,0 +1,50 @@
+import type { DelegatedToolCost } from "../core/agent-core.js";
+/**
+ * Shared runtime helpers for the per-backend `runDelegatedTool`
+ * implementations. The backends own the spawn + stream-event semantics
+ * (Claude SDK `query()` vs Codex/Gemini JSONL CLI), but the prompt shape,
+ * the tool-result extraction (string-or-block-array), and the empty-cost
+ * sentinel are identical across them — centralising them here keeps the
+ * three backend files honest and prevents drift in the prompt that
+ * constrains the LLM to call exactly one tool.
+ *
+ * See DELEGATED-PROXY-API-DESIGN.md §4.1 (prompt shape) and §4.5
+ * (output normalization — tool result, not model text).
+ */
+/**
+ * Single user message that names the tool + verbatim JSON args. Mirrors
+ * the agent-profiles/proxy.md hard-rules block — restating the
+ * "no narration, single tool call" contract here is belt-and-suspenders
+ * for backends whose system-prompt injection is less reliable than the
+ * Claude Agent SDK's preset (Codex: prose AGENTS.md only; Gemini:
+ * GEMINI.md + admin-policy TOML).
+ */
+export declare function buildDelegatedToolPrompt(toolName: string, toolArgs: unknown): string;
+/**
+ * Flatten tool-result `content` blocks (Claude SDK shape) into a single
+ * string. The SDK can return either a raw string or an array of
+ * `{type: "text", text: "..."}` blocks; the route handler's responseMapper
+ * works on either, but the failure paths (`tool_error`, `parse_error`)
+ * want a single message field. Codex / Gemini paths reach this with
+ * a primitive string already, in which case it's a no-op.
+ */
+export declare function flattenToolResultContent(content: unknown): string;
+/**
+ * Parse a flattened tool result as JSON when possible; fall back to the
+ * raw string. The route handler's `responseMapper` accepts either shape;
+ * preferring parsed-JSON keeps the response-mapper from re-parsing for
+ * the common case (connector tools all emit JSON envelopes).
+ */
+export declare function tryParseToolResult(raw: unknown): unknown;
+export declare function emptyCost(): DelegatedToolCost;
+/**
+ * Cap a partial cost block's `durationMs` against the actual wall-clock
+ * spent before failure. The backends compute `durationMs` from a startMs
+ * captured before subprocess spawn — but the cost block we return on
+ * failure should reflect the wall-clock the invoker can attribute, not
+ * a model-reported duration. Backends call this as the final step
+ * before returning `{ok: false, cost}` so the invoker's
+ * `agent_actions.duration_ms` matches the real spend.
+ */
+export declare function withDurationMs(cost: DelegatedToolCost, startMs: number, now?: () => number): DelegatedToolCost;
+//# sourceMappingURL=delegated-tool-runtime.d.ts.map

package/dist/services/delegated-tool-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-tool-runtime.d.ts","sourceRoot":"","sources":["../../src/services/delegated-tool-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D;;;;;;;;;;;GAWG;AAEH;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,GAChB,MAAM,CASR;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAgCjE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAexD;AAED,wBAAgB,SAAS,IAAI,iBAAiB,CAU7C;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,MAAiB,GAC3B,iBAAiB,CAEnB"}

package/dist/services/delegated-tool-runtime.js

@@ -0,0 +1,120 @@
+/**
+ * Shared runtime helpers for the per-backend `runDelegatedTool`
+ * implementations. The backends own the spawn + stream-event semantics
+ * (Claude SDK `query()` vs Codex/Gemini JSONL CLI), but the prompt shape,
+ * the tool-result extraction (string-or-block-array), and the empty-cost
+ * sentinel are identical across them — centralising them here keeps the
+ * three backend files honest and prevents drift in the prompt that
+ * constrains the LLM to call exactly one tool.
+ *
+ * See DELEGATED-PROXY-API-DESIGN.md §4.1 (prompt shape) and §4.5
+ * (output normalization — tool result, not model text).
+ */
+/**
+ * Single user message that names the tool + verbatim JSON args. Mirrors
+ * the agent-profiles/proxy.md hard-rules block — restating the
+ * "no narration, single tool call" contract here is belt-and-suspenders
+ * for backends whose system-prompt injection is less reliable than the
+ * Claude Agent SDK's preset (Codex: prose AGENTS.md only; Gemini:
+ * GEMINI.md + admin-policy TOML).
+ */
+export function buildDelegatedToolPrompt(toolName, toolArgs) {
+    const argsJson = JSON.stringify(toolArgs ?? {});
+    return [
+        `Call the tool \`${toolName}\` with these arguments (verbatim JSON):`,
+        argsJson,
+        "",
+        "Return only the tool's raw result. Do not summarize, do not narrate, do not call other tools.",
+        "If the tool errors, return the error verbatim.",
+    ].join("\n");
+}
+/**
+ * Flatten tool-result `content` blocks (Claude SDK shape) into a single
+ * string. The SDK can return either a raw string or an array of
+ * `{type: "text", text: "..."}` blocks; the route handler's responseMapper
+ * works on either, but the failure paths (`tool_error`, `parse_error`)
+ * want a single message field. Codex / Gemini paths reach this with
+ * a primitive string already, in which case it's a no-op.
+ */
+export function flattenToolResultContent(content) {
+    if (typeof content === "string")
+        return content;
+    if (!Array.isArray(content)) {
+        if (content && typeof content === "object") {
+            try {
+                return JSON.stringify(content);
+            }
+            catch {
+                return String(content);
+            }
+        }
+        return content == null ? "" : String(content);
+    }
+    const parts = [];
+    for (const block of content) {
+        if (typeof block === "string") {
+            parts.push(block);
+            continue;
+        }
+        if (block && typeof block === "object") {
+            const text = block.text;
+            if (typeof text === "string") {
+                parts.push(text);
+                continue;
+            }
+            try {
+                parts.push(JSON.stringify(block));
+            }
+            catch {
+                parts.push(String(block));
+            }
+        }
+    }
+    return parts.join("\n");
+}
+/**
+ * Parse a flattened tool result as JSON when possible; fall back to the
+ * raw string. The route handler's `responseMapper` accepts either shape;
+ * preferring parsed-JSON keeps the response-mapper from re-parsing for
+ * the common case (connector tools all emit JSON envelopes).
+ */
+export function tryParseToolResult(raw) {
+    if (typeof raw !== "string")
+        return raw;
+    const trimmed = raw.trim();
+    if (trimmed.length >= 2
+        && (trimmed.startsWith("{") || trimmed.startsWith("["))) {
+        try {
+            return JSON.parse(trimmed);
+        }
+        catch {
+            // Connector returned malformed JSON; surface the raw string. The
+            // route handler's responseMapper still gets a chance to inspect.
+        }
+    }
+    return raw;
+}
+export function emptyCost() {
+    return {
+        tokensInput: 0,
+        tokensOutput: 0,
+        cacheCreationTokens: 0,
+        cacheReadTokens: 0,
+        costUsd: 0,
+        durationMs: 0,
+        numTurns: 0,
+    };
+}
+/**
+ * Cap a partial cost block's `durationMs` against the actual wall-clock
+ * spent before failure. The backends compute `durationMs` from a startMs
+ * captured before subprocess spawn — but the cost block we return on
+ * failure should reflect the wall-clock the invoker can attribute, not
+ * a model-reported duration. Backends call this as the final step
+ * before returning `{ok: false, cost}` so the invoker's
+ * `agent_actions.duration_ms` matches the real spend.
+ */
+export function withDurationMs(cost, startMs, now = Date.now) {
+    return { ...cost, durationMs: Math.max(0, now() - startMs) };
+}
+//# sourceMappingURL=delegated-tool-runtime.js.map

package/dist/services/delegated-tool-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-tool-runtime.js","sourceRoot":"","sources":["../../src/services/delegated-tool-runtime.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,QAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAChD,OAAO;QACL,mBAAmB,QAAQ,0CAA0C;QACrE,QAAQ;QACR,EAAE;QACF,+FAA+F;QAC/F,gDAAgD;KACjD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;YAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IACE,OAAO,CAAC,MAAM,IAAI,CAAC;WAChB,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EACvD,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,iEAAiE;QACnE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,mBAAmB,EAAE,CAAC;QACtB,eAAe,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,CAAC;KACZ,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAuB,EACvB,OAAe,EACf,MAAoB,IAAI,CAAC,GAAG;IAE5B,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;AAC/D,CAAC"}