@alpacakit/agents 0.1.0-beta.20 → 0.1.0-beta.24

package/dist/internal/controlled-process/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../src/internal/controlled-process/token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAe7E,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,uBAAuB,GAC9B,iBAAiB,CAYnB;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,uBAAuB,CAyBzB"}

package/dist/internal/controlled-process/token.js

@@ -0,0 +1,38 @@
+import { controlledProcessPlatformSchema, controlledProcessRecordIdSchema, processStartTokenSchema, supervisorBootIdSchema, supervisorCapabilitySchema, supervisorInstanceIdSchema, supervisorSocketLocatorSchema, } from "./schema.js";
+import { CONTROLLED_PROCESS_PROTOCOL_VERSION } from "./values.js";
+const TOKEN_SEPARATOR = ":";
+const PROCESS_START_TOKEN_SEGMENT_COUNT = 7;
+export function encodeProcessStartToken(fields) {
+    return processStartTokenSchema.parse([
+        fields.protocolVersion,
+        fields.platform,
+        fields.bootId,
+        fields.supervisorInstanceId,
+        fields.recordId,
+        fields.socketLocator,
+        fields.capability,
+    ].join(TOKEN_SEPARATOR));
+}
+export function decodeProcessStartToken(value) {
+    const token = processStartTokenSchema.parse(value);
+    const segments = token.split(TOKEN_SEPARATOR);
+    if (segments.length !== PROCESS_START_TOKEN_SEGMENT_COUNT) {
+        throw new Error("Validated process-start token has invalid segment count.");
+    }
+    const [protocolVersion, platform, bootId, supervisorInstanceId, recordId, socketLocator, capability,] = segments;
+    return {
+        protocolVersion: parseProtocolVersion(protocolVersion),
+        platform: controlledProcessPlatformSchema.parse(platform),
+        bootId: supervisorBootIdSchema.parse(bootId),
+        supervisorInstanceId: supervisorInstanceIdSchema.parse(supervisorInstanceId),
+        recordId: controlledProcessRecordIdSchema.parse(recordId),
+        socketLocator: supervisorSocketLocatorSchema.parse(socketLocator),
+        capability: supervisorCapabilitySchema.parse(capability),
+    };
+}
+function parseProtocolVersion(value) {
+    if (value !== CONTROLLED_PROCESS_PROTOCOL_VERSION) {
+        throw new Error("Validated process-start token has invalid protocol version.");
+    }
+    return value;
+}

package/dist/internal/controlled-process/values.d.ts

@@ -0,0 +1,39 @@
+export declare const CONTROLLED_PROCESS_PROTOCOL_VERSION: "alpacakit-supervisor-v1";
+export declare const CONTROLLED_PROCESS_PLATFORM: {
+    readonly darwin: "darwin";
+    readonly linux: "linux";
+};
+export declare const CONTROLLED_PROCESS_STATE: {
+    readonly reserved: "reserved";
+    readonly acked: "acked";
+    readonly running: "running";
+    readonly term: "term";
+    readonly killSent: "kill_sent";
+    readonly absent: "absent";
+    readonly released: "released";
+};
+export declare const SUPERVISOR_AUTHENTICATION_FRAME_KIND: {
+    readonly clientChallenge: "client_challenge";
+    readonly supervisorChallenge: "supervisor_challenge";
+    readonly clientProof: "client_proof";
+};
+export declare const SUPERVISOR_CHALLENGE_STATE_KIND: {
+    readonly awaitingClient: "awaiting_client";
+    readonly consumed: "consumed";
+};
+export declare const SUPERVISOR_AUTHENTICATION_RESULT_KIND: {
+    readonly accepted: "accepted";
+    readonly rejected: "rejected";
+};
+export declare const SUPERVISOR_AUTHENTICATION_REJECTION_REASON: {
+    readonly transcriptMismatch: "transcript_mismatch";
+    readonly invalidSupervisorMac: "invalid_supervisor_mac";
+    readonly invalidClientMac: "invalid_client_mac";
+    readonly replay: "replay";
+};
+export declare const SUPERVISOR_MAC_DOMAIN: {
+    readonly record: "alpacakit-supervisor-v1/record/v1";
+    readonly supervisorChallenge: "alpacakit-supervisor-v1/auth/supervisor/v1";
+    readonly clientProof: "alpacakit-supervisor-v1/auth/client/v1";
+};
+//# sourceMappingURL=values.d.ts.map

package/dist/internal/controlled-process/values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"values.d.ts","sourceRoot":"","sources":["../../../src/internal/controlled-process/values.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mCAAmC,EAC9C,yBAAkC,CAAC;AAErC,eAAO,MAAM,2BAA2B;;;CAG9B,CAAC;AAEX,eAAO,MAAM,wBAAwB;;;;;;;;CAQ3B,CAAC;AAEX,eAAO,MAAM,oCAAoC;;;;CAIvC,CAAC;AAEX,eAAO,MAAM,+BAA+B;;;CAGlC,CAAC;AAEX,eAAO,MAAM,qCAAqC;;;CAGxC,CAAC;AAEX,eAAO,MAAM,0CAA0C;;;;;CAK7C,CAAC;AAEX,eAAO,MAAM,qBAAqB;;;;CAIxB,CAAC"}

package/dist/internal/controlled-process/values.js

@@ -0,0 +1,38 @@
+export const CONTROLLED_PROCESS_PROTOCOL_VERSION = "alpacakit-supervisor-v1";
+export const CONTROLLED_PROCESS_PLATFORM = {
+    darwin: "darwin",
+    linux: "linux",
+};
+export const CONTROLLED_PROCESS_STATE = {
+    reserved: "reserved",
+    acked: "acked",
+    running: "running",
+    term: "term",
+    killSent: "kill_sent",
+    absent: "absent",
+    released: "released",
+};
+export const SUPERVISOR_AUTHENTICATION_FRAME_KIND = {
+    clientChallenge: "client_challenge",
+    supervisorChallenge: "supervisor_challenge",
+    clientProof: "client_proof",
+};
+export const SUPERVISOR_CHALLENGE_STATE_KIND = {
+    awaitingClient: "awaiting_client",
+    consumed: "consumed",
+};
+export const SUPERVISOR_AUTHENTICATION_RESULT_KIND = {
+    accepted: "accepted",
+    rejected: "rejected",
+};
+export const SUPERVISOR_AUTHENTICATION_REJECTION_REASON = {
+    transcriptMismatch: "transcript_mismatch",
+    invalidSupervisorMac: "invalid_supervisor_mac",
+    invalidClientMac: "invalid_client_mac",
+    replay: "replay",
+};
+export const SUPERVISOR_MAC_DOMAIN = {
+    record: "alpacakit-supervisor-v1/record/v1",
+    supervisorChallenge: "alpacakit-supervisor-v1/auth/supervisor/v1",
+    clientProof: "alpacakit-supervisor-v1/auth/client/v1",
+};

package/dist/kernel/cli-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-agent.d.ts","sourceRoot":"","sources":["../../src/kernel/cli-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAQ5D,OAAO,KAAK,EACV,UAAU,EAGV,QAAQ,EACT,MAAM,gBAAgB,CAAC;AAOxB,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAIL,KAAK,cAAc,EAEpB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,eAAe,EAAwB,MAAM,iBAAiB,CAAC;AAE7E,OAAO,KAAK,EAEV,eAAe,EACf,WAAW,EACZ,MAAM,cAAc,CAAC;AAQtB,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;CACjC,CAAC;AAEF,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,EAAE,CAC5B,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC,EACxD,GAAG,EAAE,UAAU,KACZ,SAAS,MAAM,EAAE;CACvB,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI;IAC1D,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;IAChB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,uEAAuE;IACvE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,UAAU,EAAE,CAAC;IAC7D,oEAAoE;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;IACjE,yEAAyE;IACzE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC;CAC9B,CAAC;AA+QF,wBAAgB,cAAc,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EACpD,SAAS,EAAE,iBAAiB,CAAC,EAAE,CAAC,GAC/B,eAAe,CAAC,EAAE,CAAC,CA+CrB"}
+{"version":3,"file":"cli-agent.d.ts","sourceRoot":"","sources":["../../src/kernel/cli-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAoB5D,OAAO,KAAK,EACV,UAAU,EAGV,QAAQ,EACT,MAAM,gBAAgB,CAAC;AAOxB,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAIL,KAAK,cAAc,EAEpB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,eAAe,EAAwB,MAAM,iBAAiB,CAAC;AAE7E,OAAO,KAAK,EAEV,eAAe,EACf,WAAW,EACZ,MAAM,cAAc,CAAC;AAMtB,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;CACjC,CAAC;AAEF,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,EAAE,CAC5B,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC,EACxD,GAAG,EAAE,UAAU,KACZ,SAAS,MAAM,EAAE;CACvB,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI;IAC1D,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;IAChB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,uEAAuE;IACvE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,UAAU,EAAE,CAAC;IAC7D,oEAAoE;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;IACjE,yEAAyE;IACzE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC;CAC9B,CAAC;AAqrBF,wBAAgB,cAAc,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EACpD,SAAS,EAAE,iBAAiB,CAAC,EAAE,CAAC,GAC/B,eAAe,CAAC,EAAE,CAAC,CAmDrB"}

package/dist/kernel/cli-agent.js

@@ -6,7 +6,8 @@
  * `codex` are built with this factory; a third-party adapter is the same
  * ~20-line exercise.
  */
-import { AGENT_ERROR_CODE, AgentError, NOT_AVAILABLE_CAUSE, } from "../core/error.js";
+import { CHILD_PROCESS_TERMINATION_KIND, } from "../core/controlled-process.js";
+import { AGENT_ERROR_CODE, AGENT_INFRASTRUCTURE_FAILURE_CODE, AgentError, infrastructureFailure, NOT_AVAILABLE_CAUSE, } from "../core/error.js";
 import { redactSecrets } from "../core/redact.js";
 import { AGENT_EVENT_TYPE, RUN_COMPLETION_KIND } from "../core/run.js";
 import { OUTPUT_CHANNEL, PROCESS_SIGNAL, } from "../core/values.js";
@@ -14,10 +15,8 @@ import { DOCTOR_CHECK_STATUS } from "../host/capabilities.js";
 import { classifyFailure, sharedFailureMatchers, } from "./classify.js";
 import { requireKeyedHandler } from "./keyed.js";
 const SIGKILL_ESCALATION_MS = 5_000;
-const DEFAULT_COMPLETION_GRACE_MS = 1_000;
 const RAW_OUTPUT_CAP_BYTES = 10 * 1024 * 1024;
 const OUTPUT_TAIL_CHARS = 2_000;
-const CLASSIFIED_EVIDENCE_TAIL_CHARS = 2_000;
 function appendCapped(current, text) {
     const combined = current + text;
     return combined.length > RAW_OUTPUT_CAP_BYTES
@@ -91,8 +90,8 @@ class CliOutput {
  * they are born here together.
  */
 function* raiseClassifiedFailure(classified, agentId, evidence) {
-    const stdoutTail = redactSecrets(evidence.stdout.slice(-CLASSIFIED_EVIDENCE_TAIL_CHARS));
-    const stderrTail = redactSecrets(evidence.stderr.slice(-CLASSIFIED_EVIDENCE_TAIL_CHARS));
+    const stdoutTail = redactSecrets(evidence.stdout.slice(-OUTPUT_TAIL_CHARS));
+    const stderrTail = redactSecrets(evidence.stderr.slice(-OUTPUT_TAIL_CHARS));
     yield {
         type: AGENT_EVENT_TYPE.failureClassified,
         code: classified.code,
@@ -105,6 +104,7 @@ function* raiseClassifiedFailure(classified, agentId, evidence) {
     };
     throw new AgentError({
         ...classified,
+        classification: AgentError.agentFailure(classified.code),
         message: redactSecrets(classified.message),
         agentId,
         started: true,
@@ -116,6 +116,7 @@ function* finishCliRun(input) {
     if (ctx.signal.aborted) {
         throw new AgentError({
             code: AGENT_ERROR_CODE.cancelled,
+            classification: AgentError.agentFailure(AGENT_ERROR_CODE.cancelled),
             message: "Run aborted",
             data: { reason: null },
             agentId,
@@ -154,6 +155,7 @@ function* finishCliRun(input) {
     const stderrTail = redactSecrets(output.stderr.slice(-OUTPUT_TAIL_CHARS));
     throw new AgentError({
         code: AGENT_ERROR_CODE.failed,
+        classification: AgentError.agentFailure(AGENT_ERROR_CODE.failed),
         message: redactSecrets(`Agent "${agentId}" exited with code ${exit.code ?? "null"}${exit.signal === null ? "" : ` (signal ${exit.signal})`}`),
         data: {
             exitCode: exit.code,
@@ -165,13 +167,14 @@ function* finishCliRun(input) {
     });
 }
 function buildRun(blueprint, hooks, matchers, successMatchers) {
-    const graceMs = blueprint.completionGraceMs ?? DEFAULT_COMPLETION_GRACE_MS;
+    const graceMs = blueprint.completionGraceMs ?? 1_000;
     return async function* run(options, ctx) {
         const argBuilder = requireKeyedHandler(blueprint.args, options.sandbox.mode, blueprint.id, `sandbox mode "${options.sandbox.mode}"`);
         const command = await ctx.exec.which(blueprint.command, ctx.env);
         if (command === null) {
             throw new AgentError({
                 code: AGENT_ERROR_CODE.notAvailable,
+                classification: AgentError.agentFailure(AGENT_ERROR_CODE.notAvailable),
                 message: `Command "${blueprint.command}" was not found on PATH`,
                 data: { cause: NOT_AVAILABLE_CAUSE.notInstalled },
                 agentId: blueprint.id,
@@ -182,41 +185,54 @@ function buildRun(blueprint, hooks, matchers, successMatchers) {
             effort: options.effort,
             workspace: options.workspace,
         });
-        const child = ctx.exec.spawn({
+        const spawnOptions = {
             command,
             args: [...argv],
             cwd: options.workspace,
             env: ctx.env,
             stdin: options.prompt,
-        });
+        };
+        const child = await spawnCliChild(spawnOptions, options, ctx);
         const output = new CliOutput(hooks);
-        const cancels = [];
+        const completionCancels = [];
         let completion = { kind: RUN_COMPLETION_KIND.natural };
         const completionTimer = { graceArmed: false };
-        const onAbort = () => {
-            child.kill(PROCESS_SIGNAL.sigterm);
-            cancels.push(ctx.clock.setTimeout(() => child.kill(PROCESS_SIGNAL.sigkill), SIGKILL_ESCALATION_MS));
+        const termination = manageCliChildTermination(child, ctx);
+        let outcome;
+        let runFailure = null;
+        let childSettlementObserved = false;
+        const chunkIterator = child.process.chunks[Symbol.asyncIterator]();
+        const completionWatcher = createCompletionWatcher(child, termination);
+        let outputAbandoned = false;
+        const abandonOutput = async () => {
+            if (outputAbandoned)
+                return;
+            outputAbandoned = true;
+            await chunkIterator.return?.();
         };
-        if (ctx.signal.aborted) {
-            onAbort();
-        }
-        else {
-            ctx.signal.addEventListener("abort", onAbort, { once: true });
-        }
         try {
-            for await (const chunk of child.chunks) {
-                yield* output.append(chunk.channel, chunk.text);
-                if (output.completionDetected && !completionTimer.graceArmed) {
-                    completionTimer.graceArmed = true;
-                    cancels.push(ctx.clock.setTimeout(() => {
-                        completion = { kind: RUN_COMPLETION_KIND.earlyGrace };
-                        child.kill(PROCESS_SIGNAL.sigterm);
-                    }, graceMs));
-                }
+            completion = yield* streamCliOutput({
+                child,
+                chunkIterator,
+                completionWatcher,
+                output,
+                completionTimer,
+                completionCancels,
+                termination,
+                clock: ctx.clock,
+                graceMs,
+            });
+            let exit;
+            try {
+                exit = await resolveCliChildExit(child, completionWatcher, completion, ctx.signal);
+            }
+            catch (error) {
+                throw processLifecycleFailure(blueprint.id, output, error);
             }
-            yield* output.flush();
-            const exit = await child.exit;
-            return yield* finishCliRun({
+            finally {
+                childSettlementObserved = true;
+            }
+            outcome = yield* finishCliRun({
                 agentId: blueprint.id,
                 matchers,
                 successMatchers,
@@ -226,14 +242,295 @@ function buildRun(blueprint, hooks, matchers, successMatchers) {
                 ctx,
             });
         }
+        catch (error) {
+            const captured = await captureCliRunFailure({
+                error,
+                agentId: blueprint.id,
+                output,
+                childSettlementObserved,
+                termination,
+                abandonOutput,
+            });
+            runFailure = captured.failure;
+            childSettlementObserved = captured.childSettlementObserved;
+        }
         finally {
-            ctx.signal.removeEventListener("abort", onAbort);
-            for (const cancel of cancels.splice(0)) {
+            for (const cancel of completionCancels.splice(0)) {
                 cancel();
             }
+            runFailure = await joinCliCleanup(blueprint.id, output, termination, runFailure);
+        }
+        if (runFailure !== null) {
+            throw runFailure.error;
+        }
+        return outcome;
+    };
+}
+async function* streamCliOutput(input) {
+    let completion = { kind: RUN_COMPLETION_KIND.natural };
+    for (;;) {
+        const next = await nextCliChunk(input.chunkIterator, input.completionWatcher);
+        if (next.done)
+            break;
+        yield* input.output.append(next.value.channel, next.value.text);
+        if (input.output.completionDetected && !input.completionTimer.graceArmed) {
+            input.completionTimer.graceArmed = true;
+            input.completionCancels.push(input.clock.setTimeout(() => {
+                completion = { kind: RUN_COMPLETION_KIND.earlyGrace };
+                input.termination.requestEarlyCompletion();
+            }, input.graceMs));
+        }
+    }
+    yield* input.output.flush();
+    return completion;
+}
+async function captureCliRunFailure(input) {
+    const spontaneous = input.error instanceof ControlledCompletionFailure;
+    const observed = input.childSettlementObserved || spontaneous;
+    let failure = {
+        error: spontaneous
+            ? processLifecycleFailure(input.agentId, input.output, new Error(`Controlled process is unkillable: ${input.termination.claimUnkillable() ?? input.error.reason}`))
+            : input.error,
+    };
+    if (!observed)
+        input.termination.requestFailureCleanup();
+    if (spontaneous || !observed) {
+        try {
+            await input.abandonOutput();
         }
+        catch (abandonFailure) {
+            failure = aggregateFailures(failure, abandonFailure, `Agent "${input.agentId}" output and abandonment both failed.`);
+        }
+    }
+    return { failure, childSettlementObserved: observed };
+}
+async function joinCliCleanup(agentId, output, termination, primary) {
+    try {
+        await termination.close();
+        return primary;
+    }
+    catch (error) {
+        const lifecycleFailure = processLifecycleFailure(agentId, output, error);
+        if (primary === null)
+            return { error: lifecycleFailure };
+        return {
+            error: processLifecycleFailure(agentId, output, new AggregateError([primary.error, lifecycleFailure], `Agent "${agentId}" run and controlled process cleanup both failed.`)),
+        };
+    }
+}
+function aggregateFailures(primary, cleanup, message) {
+    return primary === null
+        ? { error: cleanup }
+        : { error: new AggregateError([primary.error, cleanup], message) };
+}
+class ControlledCompletionFailure extends Error {
+    reason;
+    constructor(reason) {
+        super(reason);
+        this.reason = reason;
+    }
+}
+async function nextCliChunk(iterator, watcher) {
+    return watcher === null ? iterator.next() : watcher.next(iterator);
+}
+function createCompletionWatcher(child, termination) {
+    if (child.kind === CLI_CHILD_KIND.uncontrolled)
+        return null;
+    let unkillable = null;
+    let notify = null;
+    let settleCompletion = () => { };
+    let failCompletion = () => { };
+    const completionResult = new Promise((resolve, reject) => {
+        settleCompletion = resolve;
+        failCompletion = reject;
+    });
+    void completionResult.catch(() => undefined);
+    void child.process.completion.then((completion) => {
+        termination.observe(completion);
+        settleCompletion(completion);
+        if (completion.kind === CHILD_PROCESS_TERMINATION_KIND.unkillable) {
+            unkillable = completion;
+            notify?.();
+        }
+    }, failCompletion);
+    return {
+        completion: completionResult,
+        next: async (iterator) => {
+            if (unkillable !== null) {
+                throw new ControlledCompletionFailure(unkillable.reason);
+            }
+            const next = iterator.next();
+            return new Promise((resolve, reject) => {
+                notify = () => {
+                    notify = null;
+                    const observed = unkillable;
+                    if (observed === null ||
+                        observed.kind !== CHILD_PROCESS_TERMINATION_KIND.unkillable) {
+                        reject(new Error("Controlled completion watcher lost evidence."));
+                        return;
+                    }
+                    reject(new ControlledCompletionFailure(observed.reason));
+                };
+                void next.then((result) => {
+                    notify = null;
+                    resolve(result);
+                }, (error) => {
+                    notify = null;
+                    reject(error);
+                });
+            });
+        },
     };
 }
+const CLI_CHILD_KIND = {
+    controlled: "controlled",
+    uncontrolled: "uncontrolled",
+};
+async function spawnCliChild(spawnOptions, options, ctx) {
+    const resource = options.resources.childProcess;
+    if (resource === null) {
+        return {
+            kind: CLI_CHILD_KIND.uncontrolled,
+            process: ctx.exec.spawn(spawnOptions),
+        };
+    }
+    return {
+        kind: CLI_CHILD_KIND.controlled,
+        process: await resource.exec.spawn(spawnOptions, resource.lifecycle),
+    };
+}
+function manageCliChildTermination(child, ctx) {
+    let requested = null;
+    let observed = null;
+    let unkillableClaimed = false;
+    const observe = (completion) => {
+        observed = completion;
+    };
+    const requestControlled = () => {
+        if (child.kind !== CLI_CHILD_KIND.controlled || requested !== null) {
+            return;
+        }
+        requested = child.process.requestTermination().then((completion) => {
+            observe(completion);
+            return completion;
+        });
+        void requested.catch(() => undefined);
+    };
+    const onAbort = () => {
+        if (requested !== null) {
+            return;
+        }
+        if (child.kind === CLI_CHILD_KIND.controlled) {
+            requestControlled();
+        }
+        else {
+            requested = terminateUncontrolledChild(child.process, ctx.clock).then(() => undefined);
+            void requested.catch(() => undefined);
+        }
+    };
+    if (ctx.signal.aborted) {
+        onAbort();
+    }
+    else {
+        ctx.signal.addEventListener("abort", onAbort, { once: true });
+    }
+    return {
+        requestEarlyCompletion: () => {
+            if (child.kind === CLI_CHILD_KIND.controlled) {
+                requestControlled();
+            }
+            else {
+                child.process.kill(PROCESS_SIGNAL.sigterm);
+            }
+        },
+        requestFailureCleanup: requestControlled,
+        observe,
+        claimUnkillable: () => {
+            if (observed?.kind !== CHILD_PROCESS_TERMINATION_KIND.unkillable ||
+                unkillableClaimed) {
+                return null;
+            }
+            unkillableClaimed = true;
+            return observed.reason;
+        },
+        close: async () => {
+            ctx.signal.removeEventListener("abort", onAbort);
+            await requested;
+            if (observed?.kind === CHILD_PROCESS_TERMINATION_KIND.unkillable &&
+                !unkillableClaimed) {
+                unkillableClaimed = true;
+                throw new Error(`Controlled process is unkillable: ${observed.reason}`);
+            }
+        },
+    };
+}
+function terminateUncontrolledChild(child, clock) {
+    return new Promise((resolve, reject) => {
+        let termination;
+        try {
+            child.kill(PROCESS_SIGNAL.sigterm);
+            termination = child.awaitTerminationEscalation();
+        }
+        catch (error) {
+            reject(error);
+            return;
+        }
+        let cancelEscalation = clock.setTimeout(() => {
+            cancelEscalation = null;
+            try {
+                child.kill(PROCESS_SIGNAL.sigkill);
+            }
+            catch (error) {
+                reject(error);
+            }
+        }, SIGKILL_ESCALATION_MS);
+        void termination.then(() => {
+            cancelEscalation?.();
+            cancelEscalation = null;
+            resolve();
+        }, (error) => {
+            cancelEscalation?.();
+            cancelEscalation = null;
+            reject(error);
+        });
+    });
+}
+async function resolveCliChildExit(child, watcher, completion, signal) {
+    if (child.kind === CLI_CHILD_KIND.uncontrolled) {
+        return child.process.exit;
+    }
+    if (watcher === null) {
+        throw new Error("Controlled completion watcher is unavailable.");
+    }
+    const result = await watcher.completion;
+    if (result.kind === CHILD_PROCESS_TERMINATION_KIND.unkillable) {
+        throw new Error(`Controlled process is unkillable: ${result.reason}`);
+    }
+    if (result.workerExit !== null) {
+        return result.workerExit;
+    }
+    if (completion.kind === RUN_COMPLETION_KIND.natural && !signal.aborted) {
+        throw new Error("Natural controlled process completion lacks worker exit evidence.");
+    }
+    return { code: null, signal: null };
+}
+function processLifecycleFailure(agentId, output, cause) {
+    const stdoutTail = redactSecrets(output.stdout.slice(-OUTPUT_TAIL_CHARS));
+    const stderrTail = redactSecrets(output.stderr.slice(-OUTPUT_TAIL_CHARS));
+    return new AgentError({
+        code: AGENT_ERROR_CODE.failed,
+        classification: infrastructureFailure(AGENT_INFRASTRUCTURE_FAILURE_CODE.controlledProcessLifecycle),
+        message: `Agent "${agentId}" process lifecycle failed`,
+        data: {
+            exitCode: null,
+            stdoutTail: stdoutTail === "" ? null : stdoutTail,
+            stderrTail: stderrTail === "" ? null : stderrTail,
+        },
+        cause,
+        agentId,
+        started: true,
+    });
+}
 export function defineCliAgent(blueprint) {
     const hooks = {
         parseLine: blueprint.parseLine?.bind(blueprint) ?? (() => []),
@@ -241,7 +538,6 @@ export function defineCliAgent(blueprint) {
         detectCompletion: blueprint.detectCompletion?.bind(blueprint) ?? (() => false),
     };
     const matchers = [...(blueprint.classify ?? []), ...sharedFailureMatchers];
-    const successMatchers = blueprint.classifyOnSuccess ?? [];
     const doctor = blueprint.doctor ??
         {
             probe: async (ctx) => {
@@ -262,7 +558,7 @@ export function defineCliAgent(blueprint) {
         };
     const definition = {
         id: blueprint.id,
-        run: buildRun(blueprint, hooks, matchers, successMatchers),
+        run: buildRun(blueprint, hooks, matchers, blueprint.classifyOnSuccess ?? []),
         doctor,
     };
     if (blueprint.auth !== undefined) {

package/dist/kernel/cli-login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-login.d.ts","sourceRoot":"","sources":["../../src/kernel/cli-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,YAAY,EAIjB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACd,MAAM,kBAAkB,CAAC;AAM1B,OAAO,EAAiB,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AA8B9D,KAAK,sBAAsB,GAAG;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/C,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AA+FF,wBAAuB,eAAe,CACpC,OAAO,EAAE,sBAAsB,GAC9B,QAAQ,CA+GV"}
+{"version":3,"file":"cli-login.d.ts","sourceRoot":"","sources":["../../src/kernel/cli-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,YAAY,EAIjB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACd,MAAM,kBAAkB,CAAC;AAM1B,OAAO,EAAiB,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AA8B9D,KAAK,sBAAsB,GAAG;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/C,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAkGF,wBAAuB,eAAe,CACpC,OAAO,EAAE,sBAAsB,GAC9B,QAAQ,CAqHV"}

package/dist/kernel/cli-login.js

@@ -69,12 +69,14 @@ function loginExitError(input) {
     if (classified !== null) {
         return new AgentError({
             ...classified,
+            classification: AgentError.agentFailure(classified.code),
             message: redactSecrets(classified.message),
         });
     }
     const signal = exit.signal === null ? "" : ` (signal ${exit.signal})`;
     return new AgentError({
         code: AGENT_ERROR_CODE.failed,
+        classification: AgentError.agentFailure(AGENT_ERROR_CODE.failed),
         message: redactSecrets(`Login command "${command}" exited with code ${exit.code ?? "null"}${signal}`),
         data: {
             exitCode: exit.code,
@@ -96,6 +98,7 @@ export async function* cliLoginCommand(options) {
     if (command === null) {
         throw new AgentError({
             code: AGENT_ERROR_CODE.notAvailable,
+            classification: AgentError.agentFailure(AGENT_ERROR_CODE.notAvailable),
             message: `Login command "${options.command}" was not found on PATH`,
             data: { cause: NOT_AVAILABLE_CAUSE.notInstalled },
         });
@@ -167,6 +170,7 @@ export async function* cliLoginCommand(options) {
         if (signal.aborted) {
             throw new AgentError({
                 code: AGENT_ERROR_CODE.cancelled,
+                classification: AgentError.agentFailure(AGENT_ERROR_CODE.cancelled),
                 message: `Login command "${options.command}" was cancelled`,
                 data: {
                     reason: typeof signal.reason === "string" ? signal.reason : null,
@@ -176,6 +180,7 @@ export async function* cliLoginCommand(options) {
         if (timedOut) {
             throw new AgentError({
                 code: AGENT_ERROR_CODE.timeout,
+                classification: AgentError.agentFailure(AGENT_ERROR_CODE.timeout),
                 message: `Login command "${options.command}" exceeded its total timeout of ${timeoutMs}ms`,
                 data: { kind: TIMEOUT_KIND.total, limitMs: timeoutMs },
             });

package/dist/kernel/env-template.js

@@ -72,6 +72,7 @@ function assertValidEnvTemplate(value) {
 function invalidTemplateError(expression) {
     return new AgentError({
         code: AGENT_ERROR_CODE.invalidInput,
+        classification: AgentError.agentFailure(AGENT_ERROR_CODE.invalidInput),
         message: `Invalid environment template: ${expression}`,
         data: { reason: `invalid environment template: ${expression}` },
     });

package/dist/kernel/facets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"facets.d.ts","sourceRoot":"","sources":["../../src/kernel/facets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,WAAW,EAEhB,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EAChB,UAAU,EAGX,MAAM,qBAAqB,CAAC;AAM7B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,KAAK,EACV,KAAK,EACL,IAAI,EACJ,UAAU,EACV,MAAM,EACN,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,EACd,aAAa,EACb,QAAQ,EACR,aAAa,EACb,cAAc,EACd,WAAW,EACX,gBAAgB,EACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMpE,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAC1C,mEAAmE;IACnE,KAAK,IAAI,gBAAgB,EAAE,CAAC;IAC5B,4DAA4D;IAC5D,QAAQ,IAAI,sBAAsB,EAAE,CAAC;IACrC,KAAK,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC5E,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,oEAAoE;IACpE,OAAO,IAAI,WAAW,EAAE,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC;IACvC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,GAAG,WAAW,CAAC;CACnE,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACxD,OAAO,CACL,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACxD,GAAG,CACD,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE;QAAE,KAAK,EAAE,QAAQ,CAAA;KAAE,GAC3B,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QAAE,KAAK,EAAE,QAAQ,CAAA;KAAE,GAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,eAAe,CAAC;CAC1B,CAAC;AA6BF,wBAAgB,QAAQ,CACtB,UAAU,EAAE,cAAc,EAC1B,OAAO,EAAE,YAAY,GACpB,SAAS,CAiCX;AAED,wBAAgB,SAAS,CACvB,UAAU,EAAE,eAAe,EAC3B,OAAO,EAAE,YAAY,GACpB,UAAU,CAuBZ;AAED,wBAAgB,UAAU,CACxB,UAAU,EAAE,gBAAgB,EAC5B,OAAO,EAAE,YAAY,GACpB,WAAW,CAIb;AAQD,wBAAgB,UAAU,CACxB,UAAU,EAAE,gBAAgB,EAC5B,OAAO,EAAE,YAAY,GACpB,WAAW,CAab;AASD,wBAAgB,OAAO,CACrB,UAAU,EAAE,aAAa,EACzB,OAAO,EAAE,YAAY,GACpB,QAAQ,CA2BV"}
+{"version":3,"file":"facets.d.ts","sourceRoot":"","sources":["../../src/kernel/facets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,WAAW,EAEhB,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EAChB,UAAU,EAGX,MAAM,qBAAqB,CAAC;AAM7B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,KAAK,EACV,KAAK,EACL,IAAI,EACJ,UAAU,EACV,MAAM,EACN,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,EACd,aAAa,EACb,QAAQ,EACR,aAAa,EACb,cAAc,EACd,WAAW,EACX,gBAAgB,EACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMpE,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAC1C,mEAAmE;IACnE,KAAK,IAAI,gBAAgB,EAAE,CAAC;IAC5B,4DAA4D;IAC5D,QAAQ,IAAI,sBAAsB,EAAE,CAAC;IACrC,KAAK,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC5E,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,oEAAoE;IACpE,OAAO,IAAI,WAAW,EAAE,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC;IACvC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,GAAG,WAAW,CAAC;CACnE,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACxD,OAAO,CACL,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACxD,GAAG,CACD,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE;QAAE,KAAK,EAAE,QAAQ,CAAA;KAAE,GAC3B,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QAAE,KAAK,EAAE,QAAQ,CAAA;KAAE,GAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,eAAe,CAAC;CAC1B,CAAC;AA6BF,wBAAgB,QAAQ,CACtB,UAAU,EAAE,cAAc,EAC1B,OAAO,EAAE,YAAY,GACpB,SAAS,CAiCX;AAED,wBAAgB,SAAS,CACvB,UAAU,EAAE,eAAe,EAC3B,OAAO,EAAE,YAAY,GACpB,UAAU,CAuBZ;AAED,wBAAgB,UAAU,CACxB,UAAU,EAAE,gBAAgB,EAC5B,OAAO,EAAE,YAAY,GACpB,WAAW,CAIb;AAQD,wBAAgB,UAAU,CACxB,UAAU,EAAE,gBAAgB,EAC5B,OAAO,EAAE,YAAY,GACpB,WAAW,CAab;AASD,wBAAgB,OAAO,CACrB,UAAU,EAAE,aAAa,EACzB,OAAO,EAAE,YAAY,GACpB,QAAQ,CA+BV"}