@aitne/daemon 0.1.0

package/dist/core/backends/cli-utils.js

@@ -0,0 +1,464 @@
+import { execFileSync, spawn } from "node:child_process";
+import { accessSync, constants, existsSync, readFileSync, unlinkSync } from "node:fs";
+import { delimiter, join } from "node:path";
+import { createInterface } from "node:readline";
+import { randomUUID } from "node:crypto";
+/**
+ * Belt-and-suspenders cap on how long a kill can take to translate into
+ * a resolved Promise after `timeoutMs` (or `abortSignal`) has fired.
+ * killTree's SIGKILL + stdio destroy should fire `child.once("close")`
+ * within a few seconds; this margin gives even a pathologically uncooperative
+ * grandchild ample time before we abandon the Promise. If this fires it's a
+ * loud signal of a kill-path regression — the warning we log on this branch
+ * is intentionally noisy.
+ */
+const HARD_CEILING_AFTER_KILL_MS = 30_000;
+export async function runLineCommand(options) {
+    const stdoutLines = [];
+    const stderrLines = [];
+    return await new Promise((resolve, reject) => {
+        const child = spawn(options.command, options.args, {
+            cwd: options.cwd,
+            env: options.env,
+            stdio: ["pipe", "pipe", "pipe"],
+            // POSIX: detached=true makes the child a process-group leader so
+            // the timeout handler below can take down the whole subprocess
+            // tree (Claude/Codex/Gemini CLIs all spawn npm/node grandchildren
+            // that must be reaped on timeout to avoid resource leaks). All
+            // current callers are non-interactive batch invocations
+            // (`auth-recovery` device-auth/login flows go through bespoke
+            // spawn calls, not this helper), so the new process-group identity
+            // is invisible to them. Windows has no process groups; we rely on
+            // taskkill /T below to walk the parent-pid chain instead, and
+            // hide the helper console window so background CLI calls don't
+            // flash one on screen.
+            detached: process.platform !== "win32",
+            windowsHide: true,
+        });
+        let timedOut = false;
+        let settled = false;
+        let timeout;
+        let hardCeilingTimer;
+        const handleStdout = createInterface({ input: child.stdout });
+        const handleStderr = createInterface({ input: child.stderr });
+        handleStdout.on("line", (line) => {
+            stdoutLines.push(line);
+            options.onStdoutLine?.(line);
+        });
+        handleStderr.on("line", (line) => {
+            stderrLines.push(line);
+            options.onStderrLine?.(line);
+        });
+        child.once("error", (error) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            reject(error);
+        });
+        child.once("close", (exitCode, signal) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            resolve({
+                exitCode,
+                signal,
+                stdoutLines,
+                stderrLines,
+                timedOut,
+            });
+        });
+        if (options.input !== undefined) {
+            child.stdin.end(options.input);
+        }
+        else {
+            child.stdin.end();
+        }
+        /**
+         * Schedule the hard-ceiling watchdog. Idempotent — reset whenever a
+         * fresh kill is initiated (timeout fires, abortSignal fires, or
+         * SIGTERM-ignoring escalation in `killTree`). If this fires the
+         * subprocess kill chain has demonstrably failed; we resolve the
+         * Promise with a synthetic `timedOut` result so the caller is not
+         * stranded for the lifetime of the parent process.
+         */
+        function armHardCeiling() {
+            if (hardCeilingTimer)
+                clearTimeout(hardCeilingTimer);
+            hardCeilingTimer = setTimeout(() => {
+                if (settled)
+                    return;
+                settled = true;
+                // One more SIGKILL+destroy in case the previous kill quietly
+                // failed (signal lost, EPERM, etc.). Ignored on success.
+                try {
+                    if (process.platform === "win32" && child.pid != null) {
+                        try {
+                            execFileSync("taskkill", ["/T", "/F", "/PID", String(child.pid)], { stdio: "pipe", windowsHide: true });
+                        }
+                        catch {
+                            child.kill("SIGKILL");
+                        }
+                    }
+                    else if (child.pid != null) {
+                        try {
+                            process.kill(-child.pid, "SIGKILL");
+                        }
+                        catch {
+                            child.kill("SIGKILL");
+                        }
+                    }
+                }
+                catch {
+                    /* noop */
+                }
+                try {
+                    child.stdout?.destroy();
+                }
+                catch {
+                    /* noop */
+                }
+                try {
+                    child.stderr?.destroy();
+                }
+                catch {
+                    /* noop */
+                }
+                cleanup();
+                resolve({
+                    exitCode: null,
+                    signal: "SIGKILL",
+                    stdoutLines,
+                    stderrLines,
+                    timedOut: true,
+                });
+            }, HARD_CEILING_AFTER_KILL_MS);
+            hardCeilingTimer.unref?.();
+        }
+        if (options.timeoutMs && options.timeoutMs > 0) {
+            timeout = setTimeout(() => {
+                timedOut = true;
+                killTree(child);
+                armHardCeiling();
+            }, options.timeoutMs);
+            timeout.unref?.();
+        }
+        let abortListener;
+        if (options.abortSignal) {
+            if (options.abortSignal.aborted) {
+                killTree(child);
+                armHardCeiling();
+            }
+            else {
+                abortListener = () => {
+                    killTree(child);
+                    armHardCeiling();
+                };
+                options.abortSignal.addEventListener("abort", abortListener, {
+                    once: true,
+                });
+            }
+        }
+        function cleanup() {
+            if (timeout) {
+                clearTimeout(timeout);
+                timeout = undefined;
+            }
+            if (hardCeilingTimer) {
+                clearTimeout(hardCeilingTimer);
+                hardCeilingTimer = undefined;
+            }
+            if (abortListener && options.abortSignal) {
+                options.abortSignal.removeEventListener("abort", abortListener);
+            }
+            handleStdout.close();
+            handleStderr.close();
+        }
+    });
+}
+/**
+ * Tree-kill a child spawned by {@link runLineCommand}.
+ *
+ * Symmetric implementation across POSIX and Windows so timeouts reap the
+ * whole subprocess tree, not just the immediate child:
+ *
+ * - **POSIX** (with `detached: true` at spawn time): the child is its own
+ *   process-group leader. `process.kill(-pid, "SIGTERM")` signals every
+ *   member of that group, giving CLI grandchildren (npm/node spawned by
+ *   Claude/Codex/Gemini) a chance to clean up before they're reaped.
+ *   {@link SIGKILL_ESCALATION_MS} later, if the group is still alive, we
+ *   escalate to SIGKILL — without this, a Gemini subprocess (or a
+ *   grandchild) that catches SIGTERM and is mid-network-call leaves
+ *   `runLineCommand` hanging on `child.once("close")` indefinitely.
+ *   Observed 2026-04-29: an 18m delegated_proxy.invoke that should have
+ *   timed out at 240s (cli-utils.ts:99) because the abort signal landed
+ *   but the gemini grandchild ignored SIGTERM until the upstream HTTP
+ *   request unblocked.
+ * - **Windows**: no process groups; `taskkill /T /F /PID <pid>` walks
+ *   the parent-pid chain to terminate descendants. `/F` is forced
+ *   because Windows console apps don't honor a graceful close — Node
+ *   itself simulates SIGTERM as TerminateProcess in this scenario, so
+ *   no SIGKILL escalation is needed.
+ *
+ * After SIGKILL we additionally **destroy the parent-side stdout/stderr
+ * read ends** (POSIX path). Background: SIGKILL on the process group
+ * reaps the immediate child, but a grandchild that called `setsid()`
+ * (escaping the group) survives and can keep our pipe write-ends open.
+ * Node fires `child.once("close")` only after BOTH the process exits AND
+ * stdio EOF arrives — so a surviving grandchild leaves runLineCommand's
+ * Promise stuck indefinitely. Forcibly destroying our read ends EOFs the
+ * readline interfaces locally so close fires as soon as the kernel reaps
+ * the (already-SIGKILLed) parent. Observed 2026-05-01: 5×
+ * delegated_proxy.invoke rows in the 10–18m range despite the 240s wall
+ * clock — every one was Gemini's google-workspace extension grandchild
+ * outliving the parent.
+ *
+ * The fall-through to `child.kill("SIGTERM")` covers two narrow races:
+ * (1) the process already exited between our pid check and the syscall,
+ * (2) on Windows, `taskkill` is unexpectedly missing from PATH (very
+ * rare — it ships with every Windows since XP).
+ */
+const SIGKILL_ESCALATION_MS = 5_000;
+function destroyChildPipes(child) {
+    // Best-effort. Streams may be in any state; destroy is idempotent.
+    try {
+        child.stdout?.destroy();
+    }
+    catch {
+        /* noop */
+    }
+    try {
+        child.stderr?.destroy();
+    }
+    catch {
+        /* noop */
+    }
+}
+function killTree(child) {
+    if (child.pid == null || child.killed)
+        return;
+    if (process.platform === "win32") {
+        try {
+            execFileSync("taskkill", ["/T", "/F", "/PID", String(child.pid)], {
+                stdio: "pipe",
+                windowsHide: true,
+            });
+        }
+        catch {
+            try {
+                child.kill("SIGKILL");
+            }
+            catch {
+                /* already gone */
+            }
+        }
+        // Same grandchild-pipe-survival defense as the POSIX path. taskkill /T
+        // walks the parent-pid chain, but a grandchild that detached from the
+        // job object (CREATE_BREAKAWAY_FROM_JOB) escapes the walk.
+        destroyChildPipes(child);
+        return;
+    }
+    const pid = child.pid;
+    try {
+        process.kill(-pid, "SIGTERM");
+    }
+    catch {
+        try {
+            child.kill("SIGTERM");
+        }
+        catch {
+            /* already gone */
+        }
+    }
+    const escalation = setTimeout(() => {
+        // `child.killed` flips to true the moment we call `child.kill()` even
+        // if the signal is ignored, so it is NOT a "is dead" predicate. Only
+        // exitCode/signalCode prove the kernel reaped the process.
+        if (child.exitCode === null && child.signalCode === null) {
+            try {
+                process.kill(-pid, "SIGKILL");
+            }
+            catch {
+                try {
+                    child.kill("SIGKILL");
+                }
+                catch {
+                    /* already gone */
+                }
+            }
+        }
+        // Always destroy parent-side pipes after the SIGKILL window. If the
+        // process exited cleanly, this is a no-op (the streams are already
+        // closed). If a detached grandchild is keeping the pipes alive, this
+        // is the only path that lets `child.once("close")` fire.
+        destroyChildPipes(child);
+    }, SIGKILL_ESCALATION_MS);
+    escalation.unref?.();
+    child.once("close", () => clearTimeout(escalation));
+}
+/**
+ * Single-target SIGTERM → SIGKILL escalation for a `ChildProcess` that was
+ * spawned WITHOUT `detached: true` (so there is no process group to signal).
+ *
+ * Distinct from {@link killTree} which targets the whole process group via
+ * `process.kill(-pid, ...)`. Use {@link killChildWithEscalation} for short
+ * auth-flow CLIs (`codex login --device-auth`, `claude auth login`) where
+ * grandchildren are unlikely and the politeness of SIGTERM is preferred —
+ * but if the child catches and ignores SIGTERM, escalate to SIGKILL after
+ * `gracePeriodMs` so the parent's `child.once("close")` listener actually
+ * fires. Same hang motivation as {@link killTree}'s SIGKILL escalation
+ * (see file-history note for the 2026-04-29 18m delegated_proxy.invoke).
+ *
+ * Note on `subprocess.killed` semantics: Node sets `killed=true` as soon
+ * as `child.kill()` *sends* a signal — even if the child ignores it. So
+ * the only reliable "is the child actually gone" predicates are
+ * `exitCode !== null` (normal exit) and `signalCode !== null` (signal
+ * exit). The escalation timer must check those, NOT `killed`, or it
+ * would never SIGKILL after a swallowed SIGTERM.
+ */
+export function killChildWithEscalation(child, options = {}) {
+    if (!child || child.exitCode !== null || child.signalCode !== null) {
+        return;
+    }
+    try {
+        child.kill("SIGTERM");
+    }
+    catch {
+        /* already gone */
+        return;
+    }
+    const grace = options.gracePeriodMs ?? 5_000;
+    const escalation = setTimeout(() => {
+        if (child.exitCode !== null || child.signalCode !== null)
+            return;
+        try {
+            child.kill("SIGKILL");
+        }
+        catch {
+            /* already gone */
+        }
+    }, grace);
+    escalation.unref?.();
+    child.once("close", () => clearTimeout(escalation));
+}
+export function findExecutable(command) {
+    const pathValue = process.env.PATH;
+    if (!pathValue) {
+        return null;
+    }
+    const extensions = process.platform === "win32" && !/\.[A-Za-z0-9]+$/.test(command)
+        ? (process.env.PATHEXT?.split(";").filter(Boolean) ?? [".exe", ".cmd", ".bat"])
+        : [""];
+    for (const dir of pathValue.split(delimiter)) {
+        if (!dir)
+            continue;
+        for (const ext of extensions) {
+            const candidate = join(dir, `${command}${ext}`);
+            try {
+                accessSync(candidate, constants.X_OK);
+                return candidate;
+            }
+            catch {
+                // keep scanning PATH
+            }
+        }
+    }
+    return null;
+}
+/**
+ * Lazy CLI path resolver with TTL-based revalidation (roadmap §9.4).
+ *
+ * Eagerly resolves in the constructor (initial latency = one PATH scan),
+ * then re-checks via `accessSync(X_OK)` every {@link ttlMs} (default 60 s).
+ *
+ * Handles three scenarios without daemon restart:
+ *  - **CLI uninstall**: `accessSync` fails → re-resolve from PATH → returns null
+ *  - **CLI re-install** (possibly different path): re-resolve finds new location
+ *  - **Normal case**: returns cached value with zero filesystem access
+ */
+export class CliPathCache {
+    command;
+    ttlMs;
+    getNow;
+    cached;
+    lastCheckedAt;
+    constructor(command, ttlMs = 60_000, 
+    /** Overridable clock for deterministic testing. */
+    getNow = Date.now) {
+        this.command = command;
+        this.ttlMs = ttlMs;
+        this.getNow = getNow;
+        this.cached = findExecutable(command);
+        this.lastCheckedAt = this.getNow();
+    }
+    /** Return the resolved path, or null if the CLI is not installed. */
+    get() {
+        const now = this.getNow();
+        if (now - this.lastCheckedAt < this.ttlMs) {
+            return this.cached;
+        }
+        this.lastCheckedAt = now;
+        if (this.cached === null) {
+            // CLI wasn't found before — try again (install while daemon running)
+            this.cached = findExecutable(this.command);
+            return this.cached;
+        }
+        // CLI was found before — verify it still exists and is executable
+        try {
+            accessSync(this.cached, constants.X_OK);
+            return this.cached;
+        }
+        catch {
+            // File gone (uninstall / symlink broken) — re-resolve from PATH
+            this.cached = findExecutable(this.command);
+            return this.cached;
+        }
+    }
+}
+export function parseJsonLine(line) {
+    try {
+        return JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+}
+export function createOutputCapturePath(sessionDir, prefix) {
+    return join(sessionDir, `.${prefix}-${randomUUID()}.txt`);
+}
+export function readFileIfExists(path) {
+    if (!existsSync(path)) {
+        return null;
+    }
+    return readFileSync(path, "utf-8");
+}
+export function removeFileIfExists(path) {
+    if (!existsSync(path)) {
+        return;
+    }
+    unlinkSync(path);
+}
+/**
+ * Strict API-key format validators.
+ *
+ * These are format-only checks — they catch typos, truncation, and
+ * pasted-into-wrong-field mistakes, but do NOT prove the key is
+ * currently valid server-side. A real probe against the provider's
+ * smallest endpoint (e.g. `GET /v1/models`) is the only authoritative
+ * check; format validation is the cheap pre-flight.
+ *
+ * Any caller that returns `{ok: true, method: "api_key"}` based on
+ * these helpers MUST include a `detail` noting the check is
+ * format-only, so the dashboard doesn't misrepresent it as verified.
+ */
+export function isPlausibleAnthropicApiKey(raw) {
+    const key = raw?.trim();
+    if (!key)
+        return false;
+    // Anthropic keys: `sk-ant-api03-<base64url>` (current) and related
+    // prefixes. Minimum length ~60 chars in practice; be lenient on tail
+    // charset but strict on the prefix to reject environmental garbage.
+    return /^sk-ant-[A-Za-z0-9_-]{20,}$/.test(key);
+}
+//# sourceMappingURL=cli-utils.js.map

package/dist/core/backends/cli-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-utils.js","sourceRoot":"","sources":["../../../src/core/backends/cli-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA8BzC;;;;;;;;GAQG;AACH,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA0B;IAE1B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,OAAO,MAAM,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YACjD,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,iEAAiE;YACjE,+DAA+D;YAC/D,kEAAkE;YAClE,+DAA+D;YAC/D,wDAAwD;YACxD,8DAA8D;YAC9D,mEAAmE;YACnE,kEAAkE;YAClE,8DAA8D;YAC9D,+DAA+D;YAC/D,uBAAuB;YACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACtC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAkD,CAAC;QACvD,IAAI,gBAA2D,CAAC;QAEhE,MAAM,YAAY,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAE9D,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC/B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC/B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACvC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC;gBACN,QAAQ;gBACR,MAAM;gBACN,WAAW;gBACX,WAAW;gBACX,QAAQ;aACT,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QAED;;;;;;;WAOG;QACH,SAAS,cAAc;YACrB,IAAI,gBAAgB;gBAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC;YACrD,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;gBACjC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,6DAA6D;gBAC7D,yDAAyD;gBACzD,IAAI,CAAC;oBACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;wBACtD,IAAI,CAAC;4BACH,YAAY,CACV,UAAU,EACV,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EACvC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CACrC,CAAC;wBACJ,CAAC;wBAAC,MAAM,CAAC;4BACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACxB,CAAC;oBACH,CAAC;yBAAM,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;wBAC7B,IAAI,CAAC;4BACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;wBACtC,CAAC;wBAAC,MAAM,CAAC;4BACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACxB,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,UAAU;gBACZ,CAAC;gBACD,IAAI,CAAC;oBACH,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,UAAU;gBACZ,CAAC;gBACD,IAAI,CAAC;oBACH,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,UAAU;gBACZ,CAAC;gBACD,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC;oBACN,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,SAAS;oBACjB,WAAW;oBACX,WAAW;oBACX,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;YACL,CAAC,EAAE,0BAA0B,CAAC,CAAC;YAC/B,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAC/C,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxB,QAAQ,GAAG,IAAI,CAAC;gBAChB,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAChB,cAAc,EAAE,CAAC;YACnB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,CAAC;QAED,IAAI,aAAuC,CAAC;QAC5C,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAChC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAChB,cAAc,EAAE,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,aAAa,GAAG,GAAG,EAAE;oBACnB,QAAQ,CAAC,KAAK,CAAC,CAAC;oBAChB,cAAc,EAAE,CAAC;gBACnB,CAAC,CAAC;gBACF,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE;oBAC3D,IAAI,EAAE,IAAI;iBACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,SAAS,OAAO;YACd,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;YACD,IAAI,gBAAgB,EAAE,CAAC;gBACrB,YAAY,CAAC,gBAAgB,CAAC,CAAC;gBAC/B,gBAAgB,GAAG,SAAS,CAAC;YAC/B,CAAC;YACD,IAAI,aAAa,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzC,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAClE,CAAC;YACD,YAAY,CAAC,KAAK,EAAE,CAAC;YACrB,YAAY,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC,SAAS,iBAAiB,CAAC,KAA+B;IACxD,mEAAmE;IACnE,IAAI,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;IACD,IAAI,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAA+B;IAC/C,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO;IAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,YAAY,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE;gBAChE,KAAK,EAAE,MAAM;gBACb,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,sEAAsE;QACtE,2DAA2D;QAC3D,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;QACjC,sEAAsE;QACtE,qEAAqE;QACrE,2DAA2D;QAC3D,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACzD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,kBAAkB;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;QACD,oEAAoE;QACpE,mEAAmE;QACnE,qEAAqE;QACrE,yDAAyD;QACzD,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC1B,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAmB,EACnB,UAAsC,EAAE;IAExC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACnE,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;QAClB,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;IAC7C,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;QACjC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO;QACjE,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC,EAAE,KAAK,CAAC,CAAC;IACV,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IACnC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QACjF,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAET,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBACtC,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,YAAY;IAKJ;IACA;IAEA;IAPX,MAAM,CAAgB;IACtB,aAAa,CAAS;IAE9B,YACmB,OAAe,EACf,QAAQ,MAAM;IAC/B,mDAAmD;IAClC,SAAuB,IAAI,CAAC,GAAG;QAH/B,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAS;QAEd,WAAM,GAAN,MAAM,CAAyB;QAEhD,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IACrC,CAAC;IAED,qEAAqE;IACrE,GAAG;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC;QAEzB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,qEAAqE;YACrE,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,kEAAkE;QAClE,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;YAChE,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAI,IAAY;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,MAAc;IACxE,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,MAAM,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAuB;IAChE,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,mEAAmE;IACnE,qEAAqE;IACrE,oEAAoE;IACpE,OAAO,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC"}

package/dist/core/backends/codex-core.d.ts

@@ -0,0 +1,127 @@
+import { type AgentResult, type BackendModel } from "@aitne/shared";
+import type { AgentConfig } from "../../config.js";
+import type { AgentExecuteParams, AgentResumeParams, AuthCheckResult, DelegatedTaskInvokeParams, DelegatedTaskResultRaw, DelegatedToolInvokeParams, DelegatedToolResult, IAgentCore, McpSessionContext, StagedAttachment, StreamCallbacks } from "../agent-core.js";
+import { PriceFetcher } from "./price-fetcher.js";
+export declare const CODEX_PROBE_TOOLS_PROMPT: string;
+export declare class CodexCore implements IAgentCore {
+    private readonly config;
+    private readonly priceFetcher;
+    readonly backendId: "codex";
+    private readonly cliPathCache;
+    private get cliPath();
+    constructor(config: AgentConfig, priceFetcher?: PriceFetcher);
+    private mcpContext;
+    setMcpContext(context: McpSessionContext): void;
+    private materializeMcp;
+    execute(params: AgentExecuteParams, streamCallbacks?: StreamCallbacks): Promise<AgentResult>;
+    executeResume(params: AgentResumeParams, streamCallbacks?: StreamCallbacks): Promise<AgentResult>;
+    summarize(conversationText: string): Promise<string>;
+    checkAuth(): Promise<{
+        ok: true;
+        method: "cli_login" | "api_key" | "oauth" | "vertex";
+    } | {
+        ok: false;
+        reason: string;
+    }>;
+    /**
+     * Detailed auth probe. Two modes:
+     *  - **API key** (`OPENAI_API_KEY`): format check + server-side probe via
+     *    `probeApiKeyServerSide("openai", ...)` (roadmap §9.1). Throws on
+     *    network/timeout so `checkAll()` records `probe_network_error`.
+     *  - **OAuth** (`codex login`): relies on `codex login status` exit code —
+     *    Phase 0 confirmed that `auth.json.last_refresh` age is not a
+     *    trustworthy staleness signal (CLI returns exit 0 even after 10+ days).
+     */
+    checkAuthDetailed(): Promise<AuthCheckResult>;
+    listModels(): ReadonlyArray<BackendModel>;
+    /**
+     * Phase 5 §4.11 live probe. Codex doesn't expose a zero-turn tool
+     * manifest, so we prompt the agent to discover and print connector tool
+     * names. Codex apps are lazy-loaded behind `tool_search` on current CLI
+     * builds, so the prompt explicitly opens that catalog before printing
+     * `mcp__...` names. The output is plain-text (one per line), one
+     * minimum-tokens turn.
+     *
+     * Tools whose names don't start with `mcp__` (built-ins like `Bash`,
+     * `Read`) are out of scope — probes are only used to evaluate
+     * connector-namespaced tools via `evaluateProbe`.
+     */
+    probeTools(): Promise<string[]>;
+    private runTurn;
+    private buildArgs;
+    private pickSummaryModel;
+    private classifyFailure;
+    private assertWithinMaxBudget;
+    private assertPromptWithinMaxBudget;
+    /**
+     * Delegated proxy invocation — Codex CLI path.
+     *
+     * Spawns `codex exec --json --ephemeral --skip-git-repo-check
+     * --output-last-message <path> --model <m> <prompt>` in the
+     * pre-materialized `sessionDir`, parses JSONL events, and matches the
+     * first `mcp__codex_apps__*` tool call whose name equals the requested
+     * tool. The tool result is extracted from item-output fields (`output`,
+     * `aggregated_output`, `stdout`) emitted on the same item or on a
+     * subsequent paired item — the precise pairing semantics differ across
+     * Codex CLI versions, so the implementation is defensive: it captures
+     * the first non-empty output that arrives after the matching call and
+     * within the same turn. The captured-last-message file is the final
+     * fallback (model-text path; less reliable but better than 502 if the
+     * structured pairing changes shape upstream).
+     *
+     * Error classes mirror the Claude path. `auth_error` is detected via
+     * the existing `classifyFailure` regex; `tool_error` arrives as a
+     * `turn.failed` event or as a non-zero subprocess exit code with a
+     * recognisable message.
+     */
+    runDelegatedTool(params: DelegatedToolInvokeParams): Promise<DelegatedToolResult>;
+    /**
+     * DELEGATED-TASK-MODE-DESIGN.md §9 — Codex task mode (Phase 1.5+).
+     *
+     * Codex CLI has no per-spawn allowedTools surface for MCP calls and no
+     * PreToolUse hook, so allowed-tools enforcement lives entirely in
+     * daemon-side stream pre-emption: we observe each `tool_use` item on
+     * stdout, gate it against `allowedTools` and the destructive denylist,
+     * and abort the subprocess (via the local AbortController) when the
+     * model reaches outside the per-task envelope.
+     *
+     * Race window (accepted): a fast tool's side effect can land before our
+     * SIGTERM arrives. The session's materialized `.codex/` config restricts
+     * the MCP surface to the integration's connector (so out-of-scope tools
+     * are unreachable to begin with), and `allowDestructive=false` removes
+     * destructive entries from `allowedTools` upstream — but a destructive
+     * connector tool that the prompt instructs the model NOT to call could
+     * still race a SIGTERM. The prompt's destructive-section + the
+     * `needsConfirmation` envelope are the load-bearing guardrails for that
+     * narrow case; stream pre-emption is the second line.
+     *
+     * Output extraction: Codex CLI does not expose a structured-output API
+     * (Anthropic-style `outputFormat: 'json_schema'`), so we pin
+     * `--output-last-message` to a file and let the runtime helper
+     * (`extractAndValidateResult`) handle fence-stripping + Ajv validation.
+     * The `structuredOutput` field on the result is intentionally omitted
+     * for Codex; the invoker falls back to text-extract automatically.
+     */
+    runDelegatedTask(params: DelegatedTaskInvokeParams): Promise<DelegatedTaskResultRaw>;
+}
+/**
+ * Codex argv byte budget. macOS `ARG_MAX` is ~1 MB and the kernel counts
+ * env vars too, so we cap our contribution at 120 KB to leave plenty of
+ * headroom for the prompt body (which can exceed 50 KB on long-context
+ * routines) + env. Matches the chat-file-attachments envelope (see
+ * `docs/design/04-daemon-api.md` §4.3.23).
+ */
+export declare const CODEX_ARGV_BUDGET_BYTES = 120000;
+/**
+ * Translate staged image attachments into repeated `--image <absolutePath>`
+ * argv pairs. Non-image attachments stay staged-only (the agent opens them
+ * via shell `cat` / `grep`). If emitting flags for every image would push
+ * argv past the budget, drop the entire list — partial emission would
+ * silently bias the model's attention toward the first N images in an
+ * order that's not visible in the prompt. All-or-nothing is easier to
+ * diagnose and the `[Attached files]` text block still names every file.
+ *
+ * Pure function — unit-testable without a CLI subprocess.
+ */
+export declare function buildCodexImageArgs(staged: StagedAttachment[] | undefined, budgetBytes: number): string[];
+//# sourceMappingURL=codex-core.d.ts.map

package/dist/core/backends/codex-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-core.d.ts","sourceRoot":"","sources":["../../../src/core/backends/codex-core.ts"],"names":[],"mappings":"AAGA,OAAO,EAML,KAAK,WAAW,EAChB,KAAK,YAAY,EAGlB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGnD,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,yBAAyB,EACzB,sBAAsB,EAEtB,yBAAyB,EACzB,mBAAmB,EACnB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAuC1B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAmBlD,eAAO,MAAM,wBAAwB,QA4DjC,CAAC;AAkBL,qBAAa,SAAU,YAAW,UAAU;IAUxC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAV/B,QAAQ,CAAC,SAAS,EAAG,OAAO,CAAU;IAEtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAE5C,OAAO,KAAK,OAAO,GAElB;gBAGkB,MAAM,EAAE,WAAW,EACnB,YAAY,eAAmC;IAKlE,OAAO,CAAC,UAAU,CAAgC;IAClD,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;YAIjC,cAAc;IA4BtB,OAAO,CACX,MAAM,EAAE,kBAAkB,EAC1B,eAAe,CAAC,EAAE,eAAe,GAChC,OAAO,CAAC,WAAW,CAAC;IAwBjB,aAAa,CACjB,MAAM,EAAE,iBAAiB,EACzB,eAAe,CAAC,EAAE,eAAe,GAChC,OAAO,CAAC,WAAW,CAAC;IAmBjB,SAAS,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUpD,SAAS,IAAI,OAAO,CACtB;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAA;KAAE,GAClE;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAChC;IAuBD;;;;;;;;OAQG;IACG,iBAAiB,IAAI,OAAO,CAAC,eAAe,CAAC;IAgEnD,UAAU,IAAI,aAAa,CAAC,YAAY,CAAC;IAIzC;;;;;;;;;;;OAWG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAsEvB,OAAO;IA4QrB,OAAO,CAAC,SAAS;IA4IjB,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,eAAe;IAoBvB,OAAO,CAAC,qBAAqB;IAgB7B,OAAO,CAAC,2BAA2B;IA+BnC;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,gBAAgB,CACpB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,mBAAmB,CAAC;IAmX/B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,gBAAgB,CACpB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,sBAAsB,CAAC;CAqZnC;AAiFD;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,SAAU,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,EAAE,GAAG,SAAS,EACtC,WAAW,EAAE,MAAM,GAClB,MAAM,EAAE,CAyBV"}