@aitne/daemon 0.1.7 → 0.1.9

package/dist/settings/runtime-settings.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { ADVISOR_ALLOWED_MODELS, DEFAULT_AGENT_DISPLAY_NAME, EXECUTION_PERMISSION_MODES, INTEGRATION_KEYS, isAdvisorModel, isSupportedVoiceLanguage, validateAgentDisplayName, } from "@aitne/shared";
+import { ADVISOR_ALLOWED_MODELS, DEFAULT_AGENT_DISPLAY_NAME, EXECUTION_PERMISSION_MODES, INTEGRATION_KEYS, browserHistoryBrowserOverrideSchema, browserHistoryCategorySchema, browserHistoryLifecycleConfigSchema, isAdvisorModel, isSupportedVoiceLanguage, validateAgentDisplayName, } from "@aitne/shared";
 import { NOTIFICATION_DESTINATION_PLATFORMS, isNotificationDestinationPlatform, } from "../messaging/constants.js";
 import { ALWAYS_DISALLOWED_TOOLS } from "../safety/always-disallowed.js";
 /**
@@ -301,6 +301,80 @@ export const runtimeSettingsSchema = z.object({
         }
     }, { message: "Invalid IANA timezone (e.g., 'America/New_York', 'UTC')" }),
     dayBoundaryHour: z.number().int().min(0).max(9).default(4),
+    // Monthly Review kill switch — default OFF pre-release. The current
+    // task-flow synthesises 30 days of daily files + 4-5 weekly files into
+    // a user-facing snapshot whose downstream leverage is unimplemented
+    // (`<previous_month>` injection is documented as not-yet-implemented
+    // in docs/design/06-memory.md §6.2.8). Cost-to-value ratio is therefore
+    // poor in the current shape; the routine stays in-tree as a concept
+    // pending the Mirror+Prune redesign (one trend observation + aged
+    // carry-over kill/keep decisions, scoped to feed day-1-of-month
+    // morning_routine). Re-enable by setting `PA_MONTHLY_REVIEW_ENABLED=true`
+    // or PATCH /api/config — the scheduler reads the live flag at fire time
+    // so the flip takes effect on the next month-end without restart.
+    monthlyReviewEnabled: z.boolean().default(false),
+    /**
+     * BROWSER_TASK_REDESIGN_PLAN.md §5.1 — global concurrency cap for the
+     * `POST /api/browser-task` sub-agent surface. Per-siteKey slots are
+     * held across the entire non-terminal lifetime including parking
+     * (`awaiting_user` / `final_confirm`), so a parked context still
+     * occupies a slot until the round-trip resolves. Default 3; range
+     * [1, 5]. Lowering at runtime takes effect on the NEXT slot release
+     * (already-acquired slots are not preemptively yanked).
+     *
+     * Rationale for the upper bound: each parked context keeps a full
+     * Playwright BrowserContext resident in memory — the RAM ceiling at
+     * 5 is roughly 5 * ~200 MB. Users with more headroom can raise from
+     * the dashboard; the structural blocker for "checkpoint-to-disk and
+     * release the slot" (Plan B) is Chromium's SingletonLock on the
+     * per-siteKey user-data-dir.
+     */
+    browserTaskMaxConcurrent: z.number().int().min(1).max(5).default(3),
+    /**
+     * BROWSER_TASK_REDESIGN_PLAN.md §5.1 — safety valve for tasks that
+     * sit `pending` too long behind a parked task ahead of them. After
+     * this many minutes a queued task transitions directly to
+     * `failed (queue_timeout)` and DMs the originating channel. Default
+     * 30; range [5, 180]. The deadline scanner owns this sweep alongside
+     * the clarification-deadline scan on the same 30 s tick.
+     */
+    browserTaskPendingQueueTimeoutMinutes: z
+        .number()
+        .int()
+        .min(5)
+        .max(180)
+        .default(30),
+    /**
+     * BROWSER_TASK_REDESIGN_PLAN.md §12 Q#5 — when true (default), a
+     * `scheduled.browser_task` fire that would land inside quiet hours is
+     * deferred until quiet-hours-end. The scheduler writes a single
+     * `agent_actions(action_type='browser_task.deferred_for_quiet_hours')`
+     * row so the user can see the delay in audit. Flip to false for
+     * "run anyway" semantics — in which case the final-confirm DM is
+     * stashed in a pending queue and surfaced when quiet hours end (no
+     * quiet-hours DM noise either way).
+     */
+    browserTaskRespectQuietHours: z.boolean().default(true),
+    /**
+     * User-curated hostname denylist for the browser-task surface. Each
+     * entry is a bare hostname (`paypal.com`, `chase.com`, `*.example.com`);
+     * the runtime compiles them into suffix-anchored regexes via
+     * `compileUserHostnameDenylist` and passes the result to both the
+     * CDP route handler (`cdp-network-interception.ts`) and the §14.7
+     * screenshot retention check.
+     *
+     * Empty by default — the framework no longer ships hardcoded brand
+     * entries (payment processors, banks, government, healthcare, JP-
+     * specific). Operators add entries via Dashboard `/settings/browser`
+     * (PATCH /api/config). The IP CIDR layer (RFC1918 / loopback /
+     * cloud-metadata) remains hardcoded inside `shouldDenyEgress` and is
+     * NOT configurable here — it covers network-infrastructure protection,
+     * not third-party brand opinions.
+     */
+    browserTaskHostnameDenylist: z
+        .array(z.string().min(1).max(253))
+        .max(500)
+        .default([]),
     hourlyCheckEnabled: z.boolean().default(true),
     // Any positive integer in [1, 1440] minutes (1 minute up to 24 hours).
     // Despite the "hourly" name, the operator can dial this anywhere in that
@@ -320,20 +394,6 @@ export const runtimeSettingsSchema = z.object({
     hourlyCheckActiveStartHour: z.number().int().min(0).max(23).default(4),
     hourlyCheckActiveEndHour: z.number().int().min(1).max(24).default(24),
     hourlyCheckMinObservations: z.number().int().nonnegative().default(1),
-    /**
-     * cost-reduction-structural §B — three-stage gate mode.
-     *  - `off`    : skip the gate entirely; every cron tick goes straight to
-     *               the legacy single-stage hourly_check (rollback switch).
-     *  - `shadow` : compute Stage 0/1 signals and the gate verdict, log them
-     *               to `agent_actions` for telemetry, but ALWAYS proceed to
-     *               Stage 3 anyway. Default for v1 — the design doc requires
-     *               14 days of shadow data before flipping to live.
-     *  - `live`   : honour the gate verdict. Stage 0 silent runs consume
-     *               observations + append one Agent Log line, Stage 2 spawns
-     *               the lite-tier triage (when enabled), Stage 3 spawns the
-     *               full session.
-     */
-    hourlyCheckGateMode: z.enum(["off", "shadow", "live"]).default("shadow"),
     /**
      * cost-reduction-structural §B — flag for the optional Stage 2 lite-tier
      * triage. Default `false` so cost remains bounded to Stage 0/1 + Stage 3
@@ -361,6 +421,29 @@ export const runtimeSettingsSchema = z.object({
         .nonnegative()
         .max(20)
         .default(0),
+    /**
+     * HOURLY_CHECK_GATE_REDESIGN_PLAN.md §3.4 — minimum minutes between
+     * pre-pass spawns for the same integration. The `harvestForGate`
+     * step in `HourlyCheckCoordinator.trigger` reads
+     * `runtime_state.pre_pass_last_run:<integrationKey>` and skips
+     * pre-pass when the prior successful run is more recent than this
+     * window. Default 30 — the cron interval is 60 min, so a 30-min
+     * window guarantees at most one pre-pass per integration per tick
+     * while still firing every tick under normal load.
+     *
+     * Bounded [0, 240]. `0` disables the freshness gate (pre-pass fires
+     * on every tick); 240 (4h) approximates "only fire when the
+     * heartbeat would have anyway" for cost-minimal deployments.
+     *
+     * `forced` runs (`POST /api/agent/run-now`) bypass the gate
+     * unconditionally — manual triggers explicitly want a fresh fetch.
+     */
+    hourlyCheckPrePassFreshnessMinutes: z
+        .number()
+        .int()
+        .min(0)
+        .max(240)
+        .default(30),
     /**
      * Phase 4 auth health probe kill switch — corresponds to
      * `PA_AUTH_PROBE_DISABLED` per `docs/design/09-safety-cost.md` §9.5.11
@@ -428,6 +511,14 @@ export const runtimeSettingsSchema = z.object({
     geminiExecutionPermissionMode: z
         .enum(EXECUTION_PERMISSION_MODES)
         .default("strict"),
+    opencodeExecutionPermissionMode: z
+        .enum(EXECUTION_PERMISSION_MODES)
+        .default("strict"),
+    opencodeBaseUrl: z
+        .string()
+        .url()
+        .default("http://127.0.0.1:4096"),
+    opencodeServerUsername: z.string().min(1).default("opencode"),
     obsidianDebounceSeconds: z.number().positive().default(5.0),
     gitPollIntervalSeconds: z.number().int().positive().default(3600),
     /**
@@ -451,6 +542,52 @@ export const runtimeSettingsSchema = z.object({
      * faster review-request alerts.
      */
     githubPollIntervalSeconds: z.number().int().min(60).default(1800),
+    /**
+     * Browser History P1 — dashboard consent latch and passive detector /
+     * lifecycle configuration. The integration's master enabled/disabled
+     * mode remains in the integrations registry; these fields carry the
+     * per-browser, category, retention, and lifecycle knobs behind that mode.
+     */
+    browserHistoryConsentAccepted: z.boolean().default(false),
+    browserHistoryBrowserOverrides: z
+        .record(z.string(), browserHistoryBrowserOverrideSchema)
+        .default({}),
+    browserHistoryCategories: z
+        .array(browserHistoryCategorySchema)
+        .default(["research", "news", "dev"]),
+    browserHistoryRetentionDays: z.number().int().min(1).max(365).default(30),
+    browserHistorySearchQueryRetentionDays: z.number().int().min(1).max(90).default(7),
+    browserHistoryLifecycle: browserHistoryLifecycleConfigSchema.prefault({}),
+    /**
+     * BROWSER_HISTORY_INTEGRATION_PLAN §5.F1.meaningful rule 6 — user-curated
+     * domain allowlist / denylist for the research-cluster meaningful filter.
+     *
+     * Both default to empty arrays. When empty, the filter runs in "emergent"
+     * mode (the design's default): any domain that passes rules 1-5 is
+     * eligible. When `browserHistoryResearchDomainAllowlist` is non-empty,
+     * the filter switches to allowlist-only: a visit is meaningful ONLY
+     * if its eTLD+1 is in the allowlist AND it passes rules 1-5.
+     * `browserHistoryResearchDomainDenylist` is always-on and wins over
+     * the allowlist (defensive — explicit deny always denies).
+     *
+     * Entries are eTLD+1 strings (`arxiv.org`, `simonwillison.net`). The
+     * meaningful-filter normalises inputs (`https://`/`www.`/paths/case)
+     * to eTLD+1 before lookup, so `arxiv.org`, `https://arxiv.org`, and
+     * `www.arxiv.org/abs/2402.06196` all resolve to the same key.
+     *
+     * Visits filtered out by this rule are still recorded in
+     * `browser_visits` (the integration's row history is unchanged) but
+     * do not contribute to `meaningful_*` totals on cluster rows. Settings
+     * changes take effect on the next poller cycle's new visits only;
+     * already-classified visits are not retroactively re-classified
+     * (they age out via `browserHistoryRetentionDays`).
+     */
+    browserHistoryResearchDomainAllowlist: z
+        .array(z.string().trim().min(1).max(253))
+        .default([]),
+    browserHistoryResearchDomainDenylist: z
+        .array(z.string().trim().min(1).max(253))
+        .default([]),
     /**
      * B-003 Phase 4.3 — auto-probe cadence for enabled MCP servers.
      *
@@ -512,7 +649,7 @@ export const runtimeSettingsSchema = z.object({
     mailAuthFailureRetryHours: z.number().int().positive().default(6),
     hourlyObservationCharBudget: z.number().int().positive().default(8000),
     /**
-     * PRE_PASS_FAN_OUT_DESIGN.md §6 — retry and budget controls for the
+     * docs/design/appendices/pre-pass-fan-out.md §6 — retry and budget controls for the
      * `routine.fetch_window` fan-out coordinator. Fan-out is now the only
      * pre-pass path (Phase 4 cleanup); the runner-level kill switch and
      * per-routine opt-outs that gated the staged rollout are gone.
@@ -617,7 +754,7 @@ export const runtimeSettingsSchema = z.object({
     vaultMode: z.enum(["obsidian", "plain"]).default("plain"),
     /**
      * B-004 Phase 1 — dossier injection for routine ProcessKeys. When true
-     * (default), `dossiers/<flow>.md` is appended to routine prompts as a
+     * (default), `knowledge/dossiers/<flow>.md` is appended to routine prompts as a
      * carry-forward state block. Flag exists to allow a fast disable if the
      * injection misbehaves in production; the design treats Phase 1 as
      * always-on once B-007 Phase 1 is shipped.
@@ -700,7 +837,7 @@ export const runtimeSettingsSchema = z.object({
             message: "primaryVaultName may only be set alongside primaryVaultPath.",
         });
     }
-    // PRE_PASS_FAN_OUT_DESIGN.md §6 — `prePassBackoffMs` must carry at least
+    // docs/design/appendices/pre-pass-fan-out.md §6 — `prePassBackoffMs` must carry at least
     // one entry per inter-attempt wait (`maxAttempts - 1`). A shorter array
     // is a misconfiguration: `RoutineFetchWindowRunner.backoffForAttempt`
     // would silently fall back to the last element for the missing slots,
@@ -767,15 +904,20 @@ export const RUNTIME_SETTING_KEYS = [
     "character",
     "timezone",
     "dayBoundaryHour",
+    "monthlyReviewEnabled",
+    "browserTaskMaxConcurrent",
+    "browserTaskPendingQueueTimeoutMinutes",
+    "browserTaskRespectQuietHours",
+    "browserTaskHostnameDenylist",
     "hourlyCheckEnabled",
     "hourlyCheckIntervalMinutes",
     "hourlyCheckActiveStartHour",
     "hourlyCheckActiveEndHour",
     "hourlyCheckMinObservations",
-    "hourlyCheckGateMode",
     "hourlyCheckStage2Enabled",
     "hourlyCheckHeartbeatHours",
     "hourlyCheckLowSignalPendingCeiling",
+    "hourlyCheckPrePassFreshnessMinutes",
     "authProbeDisabled",
     "authPreflightFreshnessMs",
     "schedulePollIntervalSeconds",
@@ -792,6 +934,9 @@ export const RUNTIME_SETTING_KEYS = [
     "claudeExecutionPermissionMode",
     "codexExecutionPermissionMode",
     "geminiExecutionPermissionMode",
+    "opencodeExecutionPermissionMode",
+    "opencodeBaseUrl",
+    "opencodeServerUsername",
     "obsidianDebounceSeconds",
     "gitPollIntervalSeconds",
     "gitPushOverdueMinutes",
@@ -800,6 +945,14 @@ export const RUNTIME_SETTING_KEYS = [
     "calendarPollIntervalSeconds",
     "gmailPollIntervalSeconds",
     "githubPollIntervalSeconds",
+    "browserHistoryConsentAccepted",
+    "browserHistoryBrowserOverrides",
+    "browserHistoryCategories",
+    "browserHistoryRetentionDays",
+    "browserHistorySearchQueryRetentionDays",
+    "browserHistoryLifecycle",
+    "browserHistoryResearchDomainAllowlist",
+    "browserHistoryResearchDomainDenylist",
     "mcpAutoProbeIntervalMinutes",
     "delegatedProbeIntervalMinutes",
     "enabledMailProviders",
@@ -846,4 +999,3 @@ const _assertRuntimeSettingCoverage = true;
 export function isRuntimeSettingKey(value) {
     return runtimeSettingKeySet.has(value);
 }
-//# sourceMappingURL=runtime-settings.js.map

package/dist/settings/settings-store.d.ts

@@ -10,4 +10,3 @@ export interface SettingsStore {
 }
 export declare function createSettingsStore(db: Database.Database): SettingsStore;
 export declare function getRuntimeSettingsDefaults(): RuntimeSettings;
-//# sourceMappingURL=settings-store.d.ts.map

package/dist/settings/settings-store.js

@@ -19,14 +19,57 @@ class SqliteSettingsStore {
             }
         }
         const defaults = runtimeSettingsSchema.parse({});
+        // Gather every persisted key, then attempt a SINGLE full-object parse.
+        // Validating each key in isolation against peer *defaults* breaks
+        // cross-field refinements (e.g. prePassBackoffMs length must be
+        // >= prePassMaxAttemptsPerIntegration - 1): during a peer's per-key parse
+        // the other field still holds its default, so a mutually-consistent
+        // persisted pair could be wrongly rejected and silently reverted. The full
+        // parse lets such peers see each other.
+        const known = {};
+        for (const key of RUNTIME_SETTING_KEYS) {
+            if (key in rawValues) {
+                known[key] = rawValues[key];
+            }
+        }
         const result = {};
+        const full = runtimeSettingsSchema.safeParse({ ...defaults, ...known });
+        if (full.success) {
+            // Project back down to only the persisted keys — getAll() returns a
+            // Partial of what was stored, never schema defaults for absent keys.
+            for (const key of RUNTIME_SETTING_KEYS) {
+                if (key in known) {
+                    result[key] = full.data[key];
+                }
+            }
+            return result;
+        }
+        // Fallback: the full parse failed, so at least one persisted row is
+        // corrupt or part of an inconsistent cross-field combination. Seed peers
+        // from the persisted values that are INDIVIDUALLY valid (over defaults) —
+        // not raw `known` — so a corrupt value (e.g. a string where a number is
+        // expected) can't poison every other key's per-key parse. A valid
+        // cross-field pair still sees its persisted peer through `validPeers`.
+        const validPeers = {};
+        for (const key of RUNTIME_SETTING_KEYS) {
+            if (!(key in rawValues)) {
+                continue;
+            }
+            const single = runtimeSettingsSchema.safeParse({
+                ...defaults,
+                [key]: rawValues[key],
+            });
+            if (single.success) {
+                validPeers[key] = rawValues[key];
+            }
+        }
         for (const key of RUNTIME_SETTING_KEYS) {
             if (!(key in rawValues)) {
                 continue;
             }
             const candidate = runtimeSettingsSchema.safeParse({
                 ...defaults,
-                ...result,
+                ...validPeers,
                 [key]: rawValues[key],
             });
             if (!candidate.success) {
@@ -84,4 +127,3 @@ export function createSettingsStore(db) {
 export function getRuntimeSettingsDefaults() {
     return runtimeSettingsSchema.parse({});
 }
-//# sourceMappingURL=settings-store.js.map

package/native/win-appcontainer/README.md

@@ -0,0 +1,66 @@
+# win-appcontainer — Windows AppContainer + Job Object launcher
+
+MANAGED_CHROMIUM_IMPLEMENTATION_PLAN.md §5.4 / §7.4.
+
+This native binding wraps `CreateProcessAsUser` +
+`AssignProcessToJobObject` so the Aitne daemon can launch its managed
+Chromium inside an AppContainer with a Job-Object resource ceiling. The
+binding is **only built on win32** — non-Windows installs skip the
+`node-gyp rebuild` step automatically (see `loader.js`).
+
+## Build prerequisites (Windows only)
+
+- Node ≥ 22 with `npm config get python` pointing at a working Python.
+- Visual Studio Build Tools 2022 ("Desktop development with C++"
+  workload).
+- `npm install -g node-gyp@latest`.
+
+The daemon installer runs:
+
+```cmd
+npm rebuild --filter @aitne/daemon
+```
+
+and that triggers `node-gyp` for this binding. The output `.node` file
+lands at `build/Release/win_appcontainer.node`; the `loader.js`
+fallback emits a clear runtime error if the addon is missing on a
+Windows host (a fresh source checkout that has not been rebuilt).
+
+## API surface (exported from `loader.js → loadHelper()`)
+
+```ts
+interface WindowsHelper {
+  spawnInAppContainer(opts: {
+    profileName: string;       // AppContainer profile (created if absent)
+    binary: string;            // Resolved Chromium binary path
+    args: readonly string[];
+    detached: boolean;
+    readableBindings: readonly string[];
+    writableBindings: readonly string[];
+  }): ChildProcess;
+}
+```
+
+The returned `ChildProcess` behaves like a standard Node spawn handle —
+`pid`, `kill()`, `on("exit")` all work. The actual process executes
+under an AppContainer SID with a Job Object enforcing memory + CPU
+ceilings.
+
+## Why a native binding and not PowerShell
+
+The existing daemon spawn path for secrets reading uses PowerShell
+(DPAPI / `secret-tool` equivalents). AppContainer creation is a
+multi-call Win32 sequence (`CreateAppContainerProfile`,
+`DeriveAppContainerSidFromAppContainerName`,
+`UpdateProcThreadAttribute`, etc.) that would be brittle and slow over
+a PowerShell hop. A small N-API addon is the right choice — it ships
+prebuilt for users who install the npm package and only requires VC++
+when rebuilding from source.
+
+## Sandbox status (B-1 milestone)
+
+The binding is shipped as a stub on non-Windows hosts and the
+`loadHelper()` fallback throws with a clear message. Windows users
+exercising B-1 will build the addon as part of `npm install`; the
+binding source (`src/win_appcontainer.cc`) lives next to this README
+for inspection and contribution.

package/native/win-appcontainer/binding.gyp

@@ -0,0 +1,33 @@
+{
+  "targets": [
+    {
+      "target_name": "win_appcontainer",
+      "conditions": [
+        ["OS=='win'", {
+          "sources": [ "src/win_appcontainer.cc" ],
+          "include_dirs": [
+            "<!@(node -p \"require('node-addon-api').include\")"
+          ],
+          "defines": [
+            "NAPI_DISABLE_CPP_EXCEPTIONS",
+            "NAPI_VERSION=8"
+          ],
+          "libraries": [
+            "-lUserenv.lib",
+            "-lAdvapi32.lib",
+            "-lKernel32.lib"
+          ],
+          "msvs_settings": {
+            "VCCLCompilerTool": {
+              "ExceptionHandling": 1,
+              "AdditionalOptions": [ "/std:c++17" ]
+            }
+          }
+        }],
+        ["OS!='win'", {
+          "type": "none"
+        }]
+      ]
+    }
+  ]
+}

package/native/win-appcontainer/loader.js

@@ -0,0 +1,29 @@
+/**
+ * Native helper loader. Returns the AppContainer launcher when running
+ * on Windows with the addon present; throws a descriptive error
+ * otherwise so callers (`sandbox-launcher.ts:loadWindowsHelper`) can
+ * surface the situation cleanly to the dashboard.
+ */
+
+"use strict";
+
+const path = require("node:path");
+const fs = require("node:fs");
+
+function loadHelper() {
+  if (process.platform !== "win32") {
+    throw new Error(
+      "win-appcontainer is Windows-only; the daemon should not have selected the appcontainer-jobobject sandbox primitive on this host",
+    );
+  }
+  const candidate = path.join(__dirname, "build", "Release", "win_appcontainer.node");
+  if (!fs.existsSync(candidate)) {
+    throw new Error(
+      `win_appcontainer.node missing at ${candidate}; run 'npm rebuild' inside packages/daemon to compile the native addon`,
+    );
+  }
+  // eslint-disable-next-line @typescript-eslint/no-require-imports, node/no-missing-require
+  return require(candidate);
+}
+
+module.exports = { loadHelper };

package/native/win-appcontainer/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "@aitne/win-appcontainer",
+  "version": "0.1.0",
+  "private": true,
+  "description": "Aitne managed-Chromium AppContainer + Job Object launcher (Windows-only native addon)",
+  "main": "loader.js",
+  "scripts": {
+    "install": "node-gyp-build || (echo \"non-Windows or addon missing; loader falls back at runtime\" && exit 0)"
+  },
+  "dependencies": {
+    "node-addon-api": "^7.1.0"
+  },
+  "os": [
+    "win32",
+    "darwin",
+    "linux"
+  ]
+}

package/native/win-appcontainer/src/win_appcontainer.cc

@@ -0,0 +1,67 @@
+// Aitne win-appcontainer — Windows AppContainer + Job Object launcher.
+//
+// Compiled into a .node addon by node-gyp on Windows only (see
+// binding.gyp `conditions`). The TypeScript-side loader
+// (loader.js) refuses to call into this on non-Windows hosts.
+//
+// API:
+//   spawnInAppContainer({profileName, binary, args, detached,
+//                       readableBindings, writableBindings})
+//     -> { pid, kill }
+//
+// Strategy:
+//   1. Create (or fetch) an AppContainer profile via
+//      CreateAppContainerProfile / DeriveAppContainerSidFromAppContainerName.
+//   2. Build a STARTUPINFOEX with PROC_THREAD_ATTRIBUTE_SECURITY_CAPABILITIES
+//      bearing the derived SID + the requested capability set.
+//   3. CreateProcessAsUser the Chromium binary inside the AppContainer.
+//   4. AssignProcessToJobObject to enforce memory / CPU ceilings.
+//   5. Return a small JS object exposing pid + a kill() that calls
+//      TerminateJobObject (so the job's whole tree dies, not just the
+//      root process).
+//
+// This file ships as a stub today — full integration depends on the
+// daemon's secret-store layer and the BROWSER_HISTORY_INTEGRATION_PLAN
+// §19.1 native-helper contract that is itself in flight. Build, link,
+// and minimal `spawnInAppContainer({...}) -> { pid: -1 }` are wired so
+// the node-gyp pipeline + npm install path exercise on Windows before
+// the implementation lands.
+
+#define NAPI_DISABLE_CPP_EXCEPTIONS
+
+#include <napi.h>
+
+#ifdef _WIN32
+#include <Windows.h>
+#include <UserEnv.h>
+#endif
+
+namespace {
+
+Napi::Value SpawnInAppContainer(const Napi::CallbackInfo& info) {
+  Napi::Env env = info.Env();
+
+#ifdef _WIN32
+  // TODO(aitne#managed-chromium): wire CreateAppContainerProfile +
+  // CreateProcessAsUser + AssignProcessToJobObject per the header
+  // comment. Until then the binding errors loudly so callers do not
+  // silently fall back to an unsandboxed launch.
+  Napi::Error::New(env, "spawnInAppContainer not yet implemented on this build of win-appcontainer").ThrowAsJavaScriptException();
+  return env.Null();
+#else
+  Napi::Error::New(env, "win-appcontainer is Windows-only").ThrowAsJavaScriptException();
+  return env.Null();
+#endif
+}
+
+Napi::Object Init(Napi::Env env, Napi::Object exports) {
+  exports.Set(
+    Napi::String::New(env, "spawnInAppContainer"),
+    Napi::Function::New(env, SpawnInAppContainer)
+  );
+  return exports;
+}
+
+}  // namespace
+
+NODE_API_MODULE(win_appcontainer, Init)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aitne/daemon",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Aitne daemon — long-running TypeScript service that hosts the event bus, scheduler, observers, safety layer, and HTTP API. Consumed by the `aitne` CLI; not intended for standalone use.",
   "homepage": "https://github.com/Aitne-sh/Aitne#readme",
   "bugs": {
@@ -21,7 +21,8 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "native"
   ],
   "publishConfig": {
     "access": "public"
@@ -34,6 +35,7 @@
     "@iarna/toml": "^2.2.5",
     "@notionhq/client": "^5.17.0",
     "@octokit/rest": "^22.0.1",
+    "@opencode-ai/sdk": "1.14.50",
     "@slack/bolt": "^4.7.0",
     "@whiskeysockets/baileys": "7.0.0-rc.9",
     "ajv": "^8.20.0",
@@ -51,23 +53,26 @@
     "html-to-text": "^9.0.5",
     "ical.js": "^2.2.1",
     "imapflow": "^1.3.1",
+    "js-yaml": "^4.1.0",
     "mailparser": "^3.9.8",
     "node-cron": "^4.2.1",
     "nodemailer": "^8.0.5",
     "open": "^10.2.0",
     "pino": "^9.6.0",
     "pino-pretty": "^13.1.3",
+    "playwright-core": "^1.49.0",
     "qrcode": "^1.5.4",
     "qrcode-terminal": "^0.12.0",
     "telegraf": "^4.16.3",
     "tsdav": "^2.1.8",
     "zod": "^4.3.6",
-    "@aitne/shared": "0.1.7"
+    "@aitne/shared": "0.1.9"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",
     "@types/busboy": "^1.5.4",
     "@types/html-to-text": "^9.0.4",
+    "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.0.0",
     "@types/node-cron": "^3.0.11",
     "@types/qrcode": "^1.5.6",

package/dist/adapters/composite-dashboard-stream.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"composite-dashboard-stream.d.ts","sourceRoot":"","sources":["../../src/adapters/composite-dashboard-stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEvE;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,wBAAyB,YAAW,gBAAgB;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,SAAS,gBAAgB,EAAE;IAEjE,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIvD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAItC,eAAe,CACb,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAChF,IAAI;IAIP,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,IAAI;IAIlE,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAInD,eAAe,CACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,KAAK,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC,GACD,IAAI;CAGR"}

package/dist/adapters/composite-dashboard-stream.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"composite-dashboard-stream.js","sourceRoot":"","sources":["../../src/adapters/composite-dashboard-stream.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,wBAAwB;IACN;IAA7B,YAA6B,OAAoC;QAApC,YAAO,GAAP,OAAO,CAA6B;IAAG,CAAC;IAErE,eAAe,CAAC,SAAiB,EAAE,KAAa;QAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,aAAa,CAAC,SAAiB;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;IAED,eAAe,CACb,SAAiB,EACjB,IAAiF;QAEjF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,eAAe,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IAED,eAAe,CAAC,SAAiB,EAAE,IAAwB;QACzD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,eAAe,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IAED,SAAS,CAAC,SAAiB,EAAE,OAAe;QAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,eAAe,CACb,SAAiB,EACjB,WAME;QAEF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,eAAe,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5E,CAAC;CACF"}

package/dist/adapters/dashboard-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dashboard-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/dashboard-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAiB,SAAS,EAAS,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAKxE,+DAA+D;AAC/D,UAAU,SAAS;IACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,qBAAa,gBAAiB,YAAW,cAAc;IACrD,QAAQ,CAAC,YAAY,eAAe;IACpC,QAAQ,CAAC,oBAAoB,SAAS;IAEtC,IAAI,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAEpC;IAED,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IACxD,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,eAAe,CAAgC;gBAE3C,SAAS,EAAE,iBAAiB;IAIxC;;kCAE8B;IAC9B,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAI1C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAK3B;gEAC4D;IAC5D,cAAc,CACZ,MAAM,EAAE,SAAS,EACjB,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,EAAE,kBAAkB,CAAC;QACjC;yDACiD;QACjD,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB;4EACoE;QACpE,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,GACA,MAAM;IAqBT,0DAA0D;IAC1D,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKzC;;;;;;;;;+BAS2B;IAC3B,qBAAqB,CACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,cAAc,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;QACnC,kBAAkB,CAAC,EAAE,SAAS,CAAC;QAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,GACA,IAAI;IAkCP,OAAO,CAAC,yBAAyB;IAwBjC,oDAAoD;IAC9C,WAAW,CAAC,MAAM,EAAE;QACxB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAC;KACvC,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BjB,mDAAmD;IACnD,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IASvD,iDAAiD;IACjD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAStC;;8DAE0D;IAC1D,eAAe,CACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,KAAK,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC,GACD,IAAI;IASP,oFAAoF;IACpF,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAS3H,+CAA+C;IAC/C,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IASvE,iFAAiF;IACjF,eAAe,CACb,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,kBAAkB,GACvB,IAAI;IASP,4GAA4G;IAC5G,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IASnD,sDAAsD;IACtD,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAKvC,iCAAiC;IACjC,iBAAiB,IAAI,MAAM,EAAE;CAG9B"}

package/dist/adapters/dashboard-adapter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dashboard-adapter.js","sourceRoot":"","sources":["../../src/adapters/dashboard-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAK3D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAQjD;;;;;;;;GAQG;AACH,MAAM,OAAO,gBAAgB;IAClB,YAAY,GAAG,WAAW,CAAC;IAC3B,oBAAoB,GAAG,KAAK,CAAC;IAEtC,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAEgB,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAChD,SAAS,CAAoB;IAC7B,eAAe,GAA2B,IAAI,CAAC;IAEvD,YAAY,SAA4B;QACtC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;kCAE8B;IAC9B,kBAAkB,CAAC,KAAsB;QACvC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAED;gEAC4D;IAC5D,cAAc,CACZ,MAAiB,EACjB,OAQC;QAED,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEpC,MAAM,gBAAgB,GACpB,OAAO,EAAE,eAAe,IAAI,IAAI,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC;QAC1E,MAAM,IAAI,GAAuB;YAC/B,SAAS;YACT,GAAG,OAAO,EAAE,WAAW;YACvB,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;QACF,MAAM;aACH,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;aAC9C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC/F,MAAM,CAAC,KAAK,CACV,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,EAAE,EACzG,4BAA4B,CAC7B,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,0DAA0D;IAC1D,gBAAgB,CAAC,SAAiB;QAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,+BAA+B,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;;;;+BAS2B;IAC3B,qBAAqB,CACnB,SAAiB,EACjB,OAAe,EACf,OAMC;QAED,MAAM,KAAK,GAAU,WAAW,CAAC;YAC/B,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,aAAa,CAAC,IAAI;SAC7B,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAE3E,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,SAAS;YAClB,OAAO;YACP,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,KAAK;YAChB,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,OAAO,EAAE,kBAAkB,IAAI,OAAO,EAAE,gBAAgB;gBAC1D,CAAC,CAAC;oBACE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;iBAC3C;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,CAAC;QAEH,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAEO,yBAAyB,CAC/B,aAAmC;QAEnC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,MAAM,EAAE,EAAE,0CAA0C,CAAC,CAAC;YACzF,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1B,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,WAAW,CAAC,MAKjB;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,OAAO,GAUT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrD,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD,CAAC,CAAC,CAAC;QACN,CAAC;QACD,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,mDAAmD;IACnD,eAAe,CAAC,SAAiB,EAAE,KAAa;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM;iBACH,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;iBAClD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,aAAa,CAAC,SAAiB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM;iBACH,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;iBAC1B,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED;;8DAE0D;IAC1D,eAAe,CACb,SAAiB,EACjB,WAME;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM;iBACH,QAAQ,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;iBAC7D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,eAAe,CAAC,SAAiB,EAAE,IAAiF;QAClH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM;iBACH,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;iBAC3C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,gBAAgB,CAAC,SAAiB,EAAE,IAAY,EAAE,MAAc;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM;iBACH,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;iBAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,eAAe,CACb,SAAiB,EACjB,IAAwB;QAExB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM;iBACH,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;iBAC9C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAED,4GAA4G;IAC5G,SAAS,CAAC,SAAiB,EAAE,OAAe;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM;iBACH,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;iBACnD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,WAAW,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAChD,CAAC;IAED,iCAAiC;IACjC,iBAAiB;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;CACF"}