@alan-ai-hq/agent-manager 0.1.113 → 0.1.115

package/dist/sandbox-outbox-storage.js

@@ -0,0 +1,98 @@
+import { createHash } from "node:crypto";
+import { chmodSync, closeSync, cpSync, existsSync, fsyncSync, lstatSync, mkdirSync, mkdtempSync, openSync, readdirSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, isAbsolute, join } from "node:path";
+import { eventJournalDir, eventJournalSegmentsDir } from "./event-journal-paths.js";
+export const SANDBOX_OUTBOX_DIRECTORY_ENV = "ALAN_SANDBOX_OUTBOX_DIR";
+export const SANDBOX_OUTBOX_HOME_DIRECTORY = ".alan/event-outbox";
+export function sandboxOutboxSpoolPath(conversationId) {
+    const root = process.env[SANDBOX_OUTBOX_DIRECTORY_ENV] || join(homedir(), SANDBOX_OUTBOX_HOME_DIRECTORY);
+    if (!isAbsolute(root))
+        throw new Error(`${SANDBOX_OUTBOX_DIRECTORY_ENV} must be an absolute directory`);
+    // Identifiers never become path components, including legacy/non-UUID sessions.
+    const namespace = createHash("sha256").update(conversationId).digest("hex");
+    return join(root, namespace, "outbox.enc");
+}
+export function sandboxOutboxKeyPath(spoolPath) {
+    return `${spoolPath}.key`;
+}
+export function legacySandboxOutboxSpoolPath(conversationId) {
+    if (!/^[A-Za-z0-9_-]+$/.test(conversationId))
+        return undefined;
+    return `/tmp/alan-agent-outbox-${conversationId}.enc`;
+}
+function syncTree(path) {
+    const stat = lstatSync(path);
+    if (stat.isSymbolicLink())
+        throw new Error("Sandbox outbox migration refuses symbolic links");
+    if (!stat.isDirectory() && !stat.isFile()) {
+        throw new Error("Sandbox outbox migration requires regular files and directories");
+    }
+    if (stat.isDirectory()) {
+        for (const name of readdirSync(path))
+            syncTree(join(path, name));
+    }
+    const fd = openSync(path, "r");
+    try {
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/**
+ * Publish one complete conversation directory atomically. Copying through a
+ * staging directory works even when /tmp and the persistent volume differ.
+ * The source is retained: a failed copy or concurrent opener cannot destroy
+ * the only journal/key pair. Existing destinations always remain authoritative.
+ */
+export function prepareSandboxOutboxStorage(spoolPath, legacySpoolPath) {
+    const directory = dirname(spoolPath);
+    if (existsSync(directory))
+        return;
+    const root = dirname(directory);
+    mkdirSync(root, { recursive: true, mode: 0o700 });
+    const staging = mkdtempSync(join(root, ".outbox-migration-"));
+    const stagedSpool = join(staging, "outbox.enc");
+    try {
+        if (legacySpoolPath) {
+            for (const [source, destination] of [
+                [legacySpoolPath, stagedSpool],
+                [sandboxOutboxKeyPath(legacySpoolPath), sandboxOutboxKeyPath(stagedSpool)],
+                [eventJournalDir(legacySpoolPath), eventJournalDir(stagedSpool)],
+            ]) {
+                if (existsSync(source))
+                    cpSync(source, destination, { recursive: true });
+            }
+            const stagedJournal = eventJournalDir(stagedSpool);
+            if (existsSync(stagedJournal))
+                chmodSync(stagedJournal, 0o700);
+            const stagedSegments = eventJournalSegmentsDir(stagedJournal);
+            if (existsSync(stagedSegments))
+                chmodSync(stagedSegments, 0o700);
+        }
+        // Makes the published directory nonempty even on first use, so a second
+        // opener cannot replace it with an empty staging directory.
+        writeFileSync(join(staging, "storage-version"), "1\n", { mode: 0o600 });
+        syncTree(staging);
+        try {
+            renameSync(staging, directory);
+        }
+        catch (error) {
+            const code = error.code;
+            if ((code !== "EEXIST" && code !== "ENOTEMPTY") || !existsSync(directory))
+                throw error;
+        }
+        const fd = openSync(root, "r");
+        try {
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    finally {
+        rmSync(staging, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=sandbox-outbox-storage.js.map

package/dist/sandbox-outbox-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-outbox-storage.js","sourceRoot":"","sources":["../src/sandbox-outbox-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,SAAS,EACT,MAAM,EACN,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,WAAW,EACX,QAAQ,EACR,WAAW,EACX,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAEpF,MAAM,CAAC,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AACtE,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAElE,MAAM,UAAU,sBAAsB,CAAC,cAAsB;IAC3D,MAAM,IAAI,GACR,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,6BAA6B,CAAC,CAAC;IAC9F,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,GAAG,4BAA4B,gCAAgC,CAAC,CAAC;IACnF,gFAAgF;IAChF,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,GAAG,SAAS,MAAM,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,cAAsB;IACjE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/D,OAAO,0BAA0B,cAAc,MAAM,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC9F,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,SAAiB,EAAE,eAAwB;IACrF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,IAAI,eAAe,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI;gBAClC,CAAC,eAAe,EAAE,WAAW,CAAC;gBAC9B,CAAC,oBAAoB,CAAC,eAAe,CAAC,EAAE,oBAAoB,CAAC,WAAW,CAAC,CAAC;gBAC1E,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;aACxD,EAAE,CAAC;gBACX,IAAI,UAAU,CAAC,MAAM,CAAC;oBAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,aAAa,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,UAAU,CAAC,aAAa,CAAC;gBAAE,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;YAC9D,IAAI,UAAU,CAAC,cAAc,CAAC;gBAAE,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACnE,CAAC;QACD,wEAAwE;QACxE,4DAA4D;QAC5D,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,MAAM,KAAK,CAAC;QACzF,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/sandbox-outbox.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Durable, at-least-once event delivery for the CLOUD sandbox agent path.
+ *
+ * The local daemon already hardens its `agent.event` stream with
+ * {@link EncryptedEventOutbox} (spool-before-send, ack-to-remove, replay on
+ * reconnect). This module reuses that crypto/spool/cap logic for the cloud
+ * `agent_event` channel WITHOUT touching the daemon path:
+ *   - key material derives from ALAN_SESSION_TOKEN (the daemon derives from its
+ *     persisted config key — same 32-byte AES-256-GCM strength, different entry
+ *     point);
+ *   - the spool lives under a persistent, conversation-hashed directory so VM
+ *     restarts retain pending events without exposing identifiers as path components;
+ *   - {@link SandboxOutboxSocket} translates the daemon envelope onto the cloud
+ *     `agent_event` wire format (event + stable `eventId` + monotonic `seq`) and
+ *     maps the server's `{ ok, duplicate?, retryable? }` ack back to the outbox's
+ *     `{ ok, retryable? }` contract.
+ *
+ * Durable delivery is always on for the cloud agent. Launch env still sets
+ * `ALAN_EVENT_OUTBOX_ENABLED=true` so older published packages that still read
+ * the flag stay on the outbox during rollout.
+ */
+import { type AgentEventAck, EncryptedEventOutbox, type EventOutboxOptions, type OutboxSocket } from "./event-outbox.js";
+import type { AgentEvent } from "./types.js";
+export { sandboxOutboxKeyPath, sandboxOutboxSpoolPath } from "./sandbox-outbox-storage.js";
+/**
+ * Derive the initial 32-byte AES-256-GCM key for a sandbox outbox. This remains
+ * exported for compatibility and first-run migration: an existing spool was
+ * encrypted with this value before sandbox-local key persistence was added.
+ */
+export declare function deriveSandboxOutboxKey(sessionToken: string): string;
+/**
+ * Persist the first key used by this sandbox outbox and reuse it across session
+ * credential rotations. `wx` makes concurrent first-open attempts converge on
+ * one file without overwriting an established key.
+ */
+export declare function loadOrCreateSandboxOutboxKey(input: {
+    spoolPath: string;
+    sessionToken: string;
+}): string;
+/**
+ * Construct the durable outbox for one conversation. Session credential
+ * rotation does not change the persisted encryption key. If state is genuinely
+ * corrupt, preserve it under a quarantine name before starting a fresh journal.
+ */
+export declare function createSandboxEventOutbox(input: {
+    conversationId: string;
+    sessionToken: string;
+    pushLog?: (message: string) => void;
+    options?: EventOutboxOptions;
+    spoolPath?: string;
+}): EncryptedEventOutbox;
+export interface SandboxAgentEventAck {
+    ok: boolean;
+    duplicate?: boolean;
+    retryable?: boolean;
+}
+export interface SandboxEmitSocket {
+    readonly connected: boolean;
+    emit(event: "agent_event", payload: unknown, ack: (result: SandboxAgentEventAck) => void): unknown;
+}
+/**
+ * Bridges {@link EncryptedEventOutbox} (which speaks the daemon's
+ * `agent.event` envelope) onto the cloud `agent_event` channel.
+ *
+ * Every wire payload carries the outbox `eventId` (for server-side dedupe) plus
+ * a monotonic `seq` that is stable per event across retries and reconnect
+ * replays, so the server can order and de-duplicate an at-least-once stream.
+ */
+export declare class SandboxOutboxSocket implements OutboxSocket {
+    private readonly socket;
+    private readonly seqByEventId;
+    private seqCounter;
+    constructor(socket: SandboxEmitSocket);
+    get connected(): boolean;
+    emit(_event: "agent.event", payload: {
+        eventId: string;
+        conversationId: string;
+        runId: string;
+        event: AgentEvent;
+    }, acknowledge: (result: AgentEventAck) => void): void;
+}
+/**
+ * Owns the durable outbox for a single sandbox conversation and routes every
+ * agent event through it (enqueue-before-send, remove-on-ack).
+ */
+export declare class SandboxEventDispatcher {
+    private readonly conversationId;
+    private readonly outbox;
+    private readonly outboxSocket;
+    private currentRunId?;
+    constructor(input: {
+        conversationId: string;
+        sessionToken: string;
+        socket: SandboxEmitSocket;
+        pushLog?: (message: string) => void;
+        options?: EventOutboxOptions;
+        spoolPath?: string;
+    });
+    setRunId(runId: string | undefined): void;
+    /**
+     * Durably deliver one event (enqueue-before-send, remove-on-ack).
+     */
+    emit(event: AgentEvent): void;
+    flush(): void;
+    disconnect(): void;
+    pendingCount(): number;
+    /** Drain the async writer so a replacement process can recover the journal. */
+    flushDurable(): Promise<void>;
+    /** Stop producers first. A timeout preserves pending records for the next boot. */
+    drain(timeoutMs: number): Promise<{
+        pendingCount: number;
+        durable: boolean;
+    }>;
+}
+//# sourceMappingURL=sandbox-outbox.d.ts.map

package/dist/sandbox-outbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-outbox.d.ts","sourceRoot":"","sources":["../src/sandbox-outbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,OAAO,EACL,KAAK,aAAa,EAClB,oBAAoB,EACpB,KAAK,kBAAkB,EAEvB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAO3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAE3F;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAKnE;AAQD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAiBT;AASD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,oBAAoB,CAoBvB;AACD,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AACD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,IAAI,CACF,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,GAC1C,OAAO,CAAC;CACZ;AAED;;;;;;;GAOG;AACH,qBAAa,mBAAoB,YAAW,YAAY;IAI1C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,UAAU,CAAK;gBAEM,MAAM,EAAE,iBAAiB;IAEtD,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,IAAI,CACF,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,UAAU,CAAC;KACnB,EACD,WAAW,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAC3C,IAAI;CAoBR;AAED;;;GAGG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,YAAY,CAAC,CAAS;gBAElB,KAAK,EAAE;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,iBAAiB,CAAC;QAC1B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACpC,OAAO,CAAC,EAAE,kBAAkB,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB;IAWD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAIzC;;OAEG;IACH,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAY7B,KAAK,IAAI,IAAI;IAGb,UAAU,IAAI,IAAI;IAGlB,YAAY,IAAI,MAAM;IAItB,+EAA+E;IACzE,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAMnC,mFAAmF;IAC7E,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CAcpF"}

package/dist/sandbox-outbox.js

@@ -0,0 +1,213 @@
+/**
+ * Durable, at-least-once event delivery for the CLOUD sandbox agent path.
+ *
+ * The local daemon already hardens its `agent.event` stream with
+ * {@link EncryptedEventOutbox} (spool-before-send, ack-to-remove, replay on
+ * reconnect). This module reuses that crypto/spool/cap logic for the cloud
+ * `agent_event` channel WITHOUT touching the daemon path:
+ *   - key material derives from ALAN_SESSION_TOKEN (the daemon derives from its
+ *     persisted config key — same 32-byte AES-256-GCM strength, different entry
+ *     point);
+ *   - the spool lives under a persistent, conversation-hashed directory so VM
+ *     restarts retain pending events without exposing identifiers as path components;
+ *   - {@link SandboxOutboxSocket} translates the daemon envelope onto the cloud
+ *     `agent_event` wire format (event + stable `eventId` + monotonic `seq`) and
+ *     maps the server's `{ ok, duplicate?, retryable? }` ack back to the outbox's
+ *     `{ ok, retryable? }` contract.
+ *
+ * Durable delivery is always on for the cloud agent. Launch env still sets
+ * `ALAN_EVENT_OUTBOX_ENABLED=true` so older published packages that still read
+ * the flag stay on the outbox during rollout.
+ */
+import { createHash } from "node:crypto";
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { eventJournalDir } from "./event-journal-paths.js";
+import { EncryptedEventOutbox, isBackgroundHeartbeat, } from "./event-outbox.js";
+import { legacySandboxOutboxSpoolPath, prepareSandboxOutboxStorage, sandboxOutboxKeyPath, sandboxOutboxSpoolPath, } from "./sandbox-outbox-storage.js";
+export { sandboxOutboxKeyPath, sandboxOutboxSpoolPath } from "./sandbox-outbox-storage.js";
+/**
+ * Derive the initial 32-byte AES-256-GCM key for a sandbox outbox. This remains
+ * exported for compatibility and first-run migration: an existing spool was
+ * encrypted with this value before sandbox-local key persistence was added.
+ */
+export function deriveSandboxOutboxKey(sessionToken) {
+    if (!sessionToken) {
+        throw new Error("sandbox event outbox requires ALAN_SESSION_TOKEN for key derivation");
+    }
+    return createHash("sha256").update(sessionToken, "utf8").digest("base64url");
+}
+function assertValidOutboxKey(key, path) {
+    if (Buffer.from(key, "base64url").length !== 32) {
+        throw new Error(`sandbox event outbox key at ${path} must contain exactly 32 bytes`);
+    }
+    return key;
+}
+/**
+ * Persist the first key used by this sandbox outbox and reuse it across session
+ * credential rotations. `wx` makes concurrent first-open attempts converge on
+ * one file without overwriting an established key.
+ */
+export function loadOrCreateSandboxOutboxKey(input) {
+    const keyPath = sandboxOutboxKeyPath(input.spoolPath);
+    if (existsSync(keyPath)) {
+        chmodSync(keyPath, 0o600);
+        return assertValidOutboxKey(readFileSync(keyPath, "utf8").trim(), keyPath);
+    }
+    const initialKey = deriveSandboxOutboxKey(input.sessionToken);
+    mkdirSync(dirname(keyPath), { recursive: true, mode: 0o700 });
+    try {
+        writeFileSync(keyPath, initialKey, { encoding: "utf8", flag: "wx", mode: 0o600 });
+        return initialKey;
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+        chmodSync(keyPath, 0o600);
+        return assertValidOutboxKey(readFileSync(keyPath, "utf8").trim(), keyPath);
+    }
+}
+function quarantineUnusableOutbox(path) {
+    const suffix = `corrupt-${Date.now()}-${process.pid}`;
+    for (const candidate of [path, eventJournalDir(path)]) {
+        if (existsSync(candidate))
+            renameSync(candidate, `${candidate}.${suffix}`);
+    }
+}
+/**
+ * Construct the durable outbox for one conversation. Session credential
+ * rotation does not change the persisted encryption key. If state is genuinely
+ * corrupt, preserve it under a quarantine name before starting a fresh journal.
+ */
+export function createSandboxEventOutbox(input) {
+    const path = input.spoolPath ?? sandboxOutboxSpoolPath(input.conversationId);
+    if (!input.spoolPath) {
+        prepareSandboxOutboxStorage(path, legacySandboxOutboxSpoolPath(input.conversationId));
+    }
+    const key = loadOrCreateSandboxOutboxKey({
+        spoolPath: path,
+        sessionToken: input.sessionToken,
+    });
+    try {
+        return new EncryptedEventOutbox(path, key, input.pushLog, input.options);
+    }
+    catch (error) {
+        // Keep unreadable bytes for diagnosis or manual recovery; never silently
+        // destroy unacknowledged events merely to make the next process start.
+        input.pushLog?.(`sandbox_outbox_spool_quarantined ${error instanceof Error ? error.message : String(error)}`);
+        quarantineUnusableOutbox(path);
+        return new EncryptedEventOutbox(path, key, input.pushLog, input.options);
+    }
+}
+/**
+ * Bridges {@link EncryptedEventOutbox} (which speaks the daemon's
+ * `agent.event` envelope) onto the cloud `agent_event` channel.
+ *
+ * Every wire payload carries the outbox `eventId` (for server-side dedupe) plus
+ * a monotonic `seq` that is stable per event across retries and reconnect
+ * replays, so the server can order and de-duplicate an at-least-once stream.
+ */
+export class SandboxOutboxSocket {
+    socket;
+    seqByEventId = new Map();
+    seqCounter = 0;
+    constructor(socket) {
+        this.socket = socket;
+    }
+    get connected() {
+        return this.socket.connected;
+    }
+    emit(_event, payload, acknowledge) {
+        let seq = this.seqByEventId.get(payload.eventId);
+        if (seq === undefined) {
+            this.seqCounter += 1;
+            seq = this.seqCounter;
+            this.seqByEventId.set(payload.eventId, seq);
+        }
+        // Embed transport metadata alongside the event. The server strips `eventId`
+        // and `seq` before persisting, so this never leaks into stored events.
+        const wirePayload = {
+            ...payload.event,
+            eventId: payload.eventId,
+            seq,
+            deliveryRunId: payload.runId,
+        };
+        this.socket.emit("agent_event", wirePayload, (result) => {
+            if (result?.ok)
+                this.seqByEventId.delete(payload.eventId);
+            acknowledge({ ok: Boolean(result?.ok), retryable: result?.retryable });
+        });
+    }
+}
+/**
+ * Owns the durable outbox for a single sandbox conversation and routes every
+ * agent event through it (enqueue-before-send, remove-on-ack).
+ */
+export class SandboxEventDispatcher {
+    conversationId;
+    outbox;
+    outboxSocket;
+    currentRunId;
+    constructor(input) {
+        this.conversationId = input.conversationId;
+        this.outbox = createSandboxEventOutbox({
+            conversationId: input.conversationId,
+            sessionToken: input.sessionToken,
+            pushLog: input.pushLog,
+            options: input.options,
+            spoolPath: input.spoolPath,
+        });
+        this.outboxSocket = new SandboxOutboxSocket(input.socket);
+    }
+    setRunId(runId) {
+        this.currentRunId = runId;
+    }
+    /**
+     * Durably deliver one event (enqueue-before-send, remove-on-ack).
+     */
+    emit(event) {
+        // Parity with the daemon RuntimePresenter (daemon.ts): a background_work
+        // heartbeat only proves liveness to a currently-connected backend. While the
+        // socket is down there is nobody to prove it to, and enqueuing one every ~10s
+        // would durably churn the encrypted spool and occupy per-run cap slots for the
+        // whole offline stretch — evicting real transcript content (including `start`)
+        // ahead of reconnect. Drop it; the next heartbeat (10s later) is retried the
+        // same way once the socket is back.
+        if (isBackgroundHeartbeat(event) && !this.outboxSocket.connected)
+            return;
+        this.outbox.enqueue(this.conversationId, this.currentRunId ?? this.conversationId, event);
+        this.outbox.flush(this.outboxSocket);
+    }
+    flush() {
+        this.outbox.flush(this.outboxSocket);
+    }
+    disconnect() {
+        this.outbox.disconnect();
+    }
+    pendingCount() {
+        return this.outbox.pendingCount();
+    }
+    /** Drain the async writer so a replacement process can recover the journal. */
+    async flushDurable() {
+        await this.outbox.flushDurable();
+        const failure = this.outbox.metrics().persistFailure;
+        if (failure)
+            throw new Error(`Sandbox event journal flush failed: ${failure}`);
+    }
+    /** Stop producers first. A timeout preserves pending records for the next boot. */
+    async drain(timeoutMs) {
+        const deadline = Date.now() + Math.max(0, timeoutMs);
+        await this.flushDurable();
+        this.flush();
+        while (this.pendingCount() > 0 && Date.now() < deadline) {
+            await new Promise((resolve) => setTimeout(resolve, Math.min(25, deadline - Date.now())));
+        }
+        await this.flushDurable();
+        const metrics = this.outbox.metrics();
+        return {
+            pendingCount: this.pendingCount(),
+            durable: metrics.writerDepth === 0 && metrics.persistFailure === null,
+        };
+    }
+}
+//# sourceMappingURL=sandbox-outbox.js.map

package/dist/sandbox-outbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-outbox.js","sourceRoot":"","sources":["../src/sandbox-outbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAEL,oBAAoB,EAEpB,qBAAqB,GAEtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAE3F;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,YAAoB;IACzD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AACD,SAAS,oBAAoB,CAAC,GAAW,EAAE,IAAY;IACrD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,gCAAgC,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAG5C;IACC,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,OAAO,oBAAoB,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9D,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,OAAO,oBAAoB,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,MAAM,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtD,KAAK,MAAM,SAAS,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACtD,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,UAAU,CAAC,SAAS,EAAE,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAMxC;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,2BAA2B,CAAC,IAAI,EAAE,4BAA4B,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,GAAG,GAAG,4BAA4B,CAAC;QACvC,SAAS,EAAE,IAAI;QACf,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,uEAAuE;QACvE,KAAK,CAAC,OAAO,EAAE,CACb,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;QACF,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAeD;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IAID;IAHZ,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,UAAU,GAAG,CAAC,CAAC;IAEvB,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAE1D,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;IAED,IAAI,CACF,MAAqB,EACrB,OAKC,EACD,WAA4C;QAE5C,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACrB,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;YACtB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,4EAA4E;QAC5E,uEAAuE;QACvE,MAAM,WAAW,GAAG;YAClB,GAAG,OAAO,CAAC,KAAK;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG;YACH,aAAa,EAAE,OAAO,CAAC,KAAK;SAC7B,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE;YACtD,IAAI,MAAM,EAAE,EAAE;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC1D,WAAW,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IAChB,cAAc,CAAS;IACvB,MAAM,CAAuB;IAC7B,YAAY,CAAsB;IAC3C,YAAY,CAAU;IAE9B,YAAY,KAOX;QACC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,wBAAwB,CAAC;YACrC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,QAAQ,CAAC,KAAyB;QAChC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,KAAiB;QACpB,yEAAyE;QACzE,6EAA6E;QAC7E,8EAA8E;QAC9E,+EAA+E;QAC/E,+EAA+E;QAC/E,6EAA6E;QAC7E,oCAAoC;QACpC,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS;YAAE,OAAO;QACzE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IACD,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IACD,UAAU;QACR,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IACD,YAAY;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;IACpC,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC;QACrD,IAAI,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,KAAK,CAAC,SAAiB;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YACxD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;YACjC,OAAO,EAAE,OAAO,CAAC,WAAW,KAAK,CAAC,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI;SACtE,CAAC;IACJ,CAAC;CACF"}

package/dist/sandbox.d.ts

@@ -0,0 +1,34 @@
+import { AgentLifecycleLogger } from "./lifecycle-logger.js";
+export interface SandboxConfig {
+    wsUrl: string;
+    apiUrl?: string;
+    sessionId: string;
+    taskId: string;
+    teamId?: string;
+    sessionToken: string;
+    task: string;
+    projectPath: string;
+    backendKind?: string;
+    agentId?: string;
+    agentPrompt?: string;
+    mode?: string;
+    model?: string;
+    contextWindow?: string | null;
+    effortLevel?: string | null;
+    providerSessionId?: string;
+    resumeFallbackContext?: string;
+    currentUser?: {
+        id: string;
+        name: string | null;
+        email: string;
+    };
+    maxIterations?: number;
+    workflowId?: string;
+    workflowExecutionId?: string;
+    sandboxId?: string;
+    provider?: string;
+    runId?: string;
+    lifecycle?: AgentLifecycleLogger;
+}
+export declare function runSandbox(config: SandboxConfig): Promise<void>;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAa7D,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAClC;AA8BD,wBAAsB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA2crE"}