@animalabs/agent-framework 0.23.1 → 0.24.0

package/dist/src/code-execution/engine.js

@@ -0,0 +1,494 @@
+/**
+ * code_execution's engine binding: QuickJS-ng compiled to WebAssembly (`quickjs.wasm`, built by
+ * `engine/build.sh` from the quickjs-ng release it pins and `engine/interface.c`), loaded into the child
+ * process that runs one script.
+ *
+ * The guest reaches nothing outside JavaScript except three of the slots the child fills: a host
+ * call, the interrupt check and output. The fourth, supervision, the guest can't reach: the engine
+ * calls it at each interrupt check. Only text crosses them: a tool's name and its arguments as
+ * JSON, output, and each result's JSON on the way back in. The module's memory is made here, with
+ * the maximum the child is given, so that maximum bounds everything the guest holds.
+ */
+import { readFile } from 'node:fs/promises';
+import { randomFillSync } from 'node:crypto';
+/** The engine failed, rather than the script: a slot threw, the engine crashed, or it was misused. */
+export class EngineError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'EngineError';
+    }
+}
+const PAGE = 65536;
+/** The link-time stack, at the start of linear memory (engine/build.sh). */
+const LINK_STACK_BYTES = 1024 * 1024;
+export const MIN_MEMORY_BYTES = 4 * 1024 * 1024;
+/**
+ * 2 GiB, so that every address in linear memory fits the signed 32-bit numbers the module's
+ * pointers arrive as, and no conversion is needed where the host reads them.
+ */
+export const MAX_MEMORY_BYTES = 2048 * 1024 * 1024;
+/**
+ * The most QuickJS's stack limit may be, and its default. QuickJS measures its stack in the
+ * module's linear memory, but each level of a script's recursion through calls also takes the
+ * host's own stack, two to three times as much in the 31 ways to recurse that were measured, and
+ * under Node that stack is about 984 KiB. Recursing through a getter, a proxy trap or a built-in
+ * that calls back (map, toString, for...of), the host's stack ran out first, crashing the engine,
+ * once QuickJS's limit passed about 320 KiB. At this limit, QuickJS's catchable RangeError comes
+ * first in each of the 31, with about two fifths of the host's stack to spare. Bun's stack is
+ * larger, and the same limit holds there, so recursion through calls ends the same way on either.
+ *
+ * Recursion in C that the check barely sees isn't held to it, and under Node crashes the run, the
+ * host's stack running out: a script's text nesting function expressions 300 deep or brackets 700
+ * deep (the parser), a chain of 3,000 iterator helpers, and the script's own data nested about
+ * 5,000 deep in JSON.stringify (4,000 with V8's optimizing tier alone), as a call's arguments
+ * are, or about 8,000 deep in JSON.parse (5,000; see MAX_RESULT_DEPTH). Under Bun, whose stack
+ * is larger, QuickJS's check ends JSON's recursion first, with a RangeError the script can catch,
+ * from about 15,000 deep, though a parse nested 22,000 deep still runs Bun's stack out. Each
+ * iterator helper's next calls the one before directly, past QuickJS's checks, so under Bun a
+ * chain of 30,000 runs the module's own 1 MiB stack out instead, and the module traps: the stack
+ * sits first in its memory, so an overflow wraps below address 0 to past the memory's end.
+ */
+export const MAX_STACK_BYTES = 192 * 1024;
+export const DEFAULT_STACK_BYTES = MAX_STACK_BYTES;
+/**
+ * The deepest nesting of arrays and objects a result may have. QuickJS's stack check measures the
+ * module's own stack, which the C recursion of JSON's parse and stringify barely uses, so under
+ * Node a parse nested about 8,000 deep (5,000 with V8's optimizing tier alone) overflows the
+ * host's stack first, and the engine crashes (under Bun, QuickJS's check comes first). A deeper
+ * result is unfit, since the call took effect. A script's own data isn't held to this, and nested
+ * thousands deep, it can crash its own run (see MAX_STACK_BYTES).
+ */
+export const MAX_RESULT_DEPTH = 2000;
+/** The most of the engine's own stdio a crash's message keeps. */
+const DIAGNOSTICS_CHARS = 4096;
+/**
+ * The longest ending text the binding decodes, in UTF-8 bytes: V8's longest string, 2^29 - 24
+ * characters (Node's `buffer.constants.MAX_STRING_LENGTH`), which a text of this many bytes can't
+ * exceed. Node can't decode a longer one. Bun's longest string is 2^31 - 1, and the same bound
+ * holds there, so a script ends the same way on either. A longer text is answered with a
+ * RangeError that gives its length: `rejected` for the script's own ending, its value's or what it
+ * threw, and `failed` for an exception that ended the run.
+ */
+const MAX_ENDING_BYTES = 2 ** 29 - 24;
+// interface.c's states and failures.
+const PENDING = 0, FULFILLED = 1, REJECTED = 2, INTERRUPTED = 3, HOST_FAILED = 4, FAILED = 5;
+const UNFIT = 16, DROPPED = 32;
+const MISUSE = -1, NO_MEMORY = -2, UNKNOWN_CALL = -3;
+const Wasm = globalThis.WebAssembly;
+let compiled;
+/** The committed module, compiled once per process. */
+function engineModule() {
+    compiled ??= readFile(new URL('./quickjs.wasm', import.meta.url)).then((bytes) => Wasm.compile(bytes));
+    return compiled;
+}
+/** Whether JSON text nests arrays and objects deeper than `limit`. */
+function nestsDeeper(json, limit) {
+    // The characters that count are ASCII, so UTF-8 bytes and UTF-16 code units read alike.
+    const at = typeof json === 'string' ? (i) => json.charCodeAt(i) : (i) => json[i];
+    let depth = 0, inString = false;
+    for (let i = 0; i < json.length; i++) {
+        const c = at(i);
+        if (inString) {
+            if (c === 0x5c)
+                i++; // a backslash escapes the next character
+            else if (c === 0x22)
+                inString = false;
+        }
+        else if (c === 0x22) {
+            inString = true;
+        }
+        else if (c === 0x5b || c === 0x7b) {
+            if (++depth > limit)
+                return true;
+        }
+        else if (c === 0x5d || c === 0x7d) {
+            depth--;
+        }
+    }
+    return false;
+}
+/** QuickJS's allocation limit for a given linear maximum: the stack and data, then a margin. */
+function quickjsMemoryLimit(memoryMaxBytes) {
+    return memoryMaxBytes - LINK_STACK_BYTES - 1024 * 1024 - Math.floor(memoryMaxBytes / 32);
+}
+/** Instantiates the committed module with these limits and slots. One instance per child. */
+export async function loadEngine(limits, slots) {
+    const { memoryMaxBytes } = limits;
+    const stackBytes = limits.maxStackBytes ?? DEFAULT_STACK_BYTES;
+    if (!Number.isSafeInteger(memoryMaxBytes) || memoryMaxBytes % PAGE !== 0 ||
+        memoryMaxBytes < MIN_MEMORY_BYTES || memoryMaxBytes > MAX_MEMORY_BYTES) {
+        throw new RangeError(`memoryMaxBytes must be a whole number of 64 KiB pages from ${MIN_MEMORY_BYTES} to ${MAX_MEMORY_BYTES}, not ${memoryMaxBytes}`);
+    }
+    if (!Number.isSafeInteger(stackBytes) || stackBytes < 16 * 1024 || stackBytes > MAX_STACK_BYTES) {
+        throw new RangeError(`maxStackBytes must be from 16384 to ${MAX_STACK_BYTES}, not ${stackBytes}`);
+    }
+    const memory = new Wasm.Memory({ initial: Math.ceil((LINK_STACK_BYTES + 2 * PAGE) / PAGE), maximum: memoryMaxBytes / PAGE });
+    // ignoreBOM, so text that starts with U+FEFF keeps it.
+    const decoder = new TextDecoder('utf-8', { ignoreBOM: true });
+    const encoder = new TextEncoder();
+    /** Whether a slot threw, and what: a slot may throw anything, undefined included. */
+    let slotFailed = false;
+    let slotError;
+    let broken;
+    /** What the engine wrote before it crashed. */
+    let diagnostics = '';
+    /** A call into the module is in progress, so a slot is the only thing that can call again. */
+    let busy = false;
+    /** interrupt() has returned true: the guest is stopped for good. */
+    let stopped = false;
+    /** The module trapped, so its state may be anything, and it isn't called again. */
+    let crashed = false;
+    /**
+     * A view of the module's memory. A corrupted guest could pass any pointer, and the view's own
+     * bounds check throws a RangeError for one outside the memory, which ends the run as a slot's
+     * failure. Made at each read, since a growing memory replaces its buffer.
+     */
+    const bytes = (ptr, len) => new Uint8Array(memory.buffer, ptr, len);
+    const text = (ptr, len) => decoder.decode(bytes(ptr, len));
+    /** Runs a slot. A throw is kept, and the engine told the slot failed. */
+    const guard = (fn) => {
+        if (slotFailed)
+            return 1;
+        try {
+            fn();
+            return 0;
+        }
+        catch (err) {
+            slotFailed = true;
+            slotError = err;
+            return 1;
+        }
+    };
+    const EBADF = 8, EINVAL = 28, ESPIPE = 70;
+    const env = {
+        memory,
+        host_call: (id, name, nameLen, args, argsLen) => guard(() => slots.hostCall(id >>> 0, text(name, nameLen), text(args, argsLen))),
+        // Once a slot has failed, this stops the guest at its next check.
+        host_interrupt: () => {
+            if (slotFailed)
+                return 1;
+            try {
+                if (!slots.interrupt())
+                    return 0;
+                stopped = true;
+                return 1;
+            }
+            catch (err) {
+                slotFailed = true;
+                slotError = err;
+                return 1;
+            }
+        },
+        host_output: (stream, ptr, len) => guard(() => slots.output(stream === 2 ? 2 : 1, text(ptr, len))),
+        // Not an ordinary slot: a slot's failure doesn't end it, so a guest that keeps its stop from
+        // landing is still watched.
+        host_supervise: () => {
+            try {
+                slots.supervise();
+            }
+            catch (err) {
+                if (!slotFailed) {
+                    slotFailed = true;
+                    slotError = err;
+                }
+            }
+        },
+    };
+    // The few WASI calls libc makes: the clocks (the real-time one for Date.now and the seed QuickJS
+    // gives Math.random, the monotonic one for performance.now), four random bytes libc asks for
+    // once as the module loads, and stdio, which only the engine's own diagnostics reach (an
+    // assertion's message before it traps).
+    const wasi = {
+        clock_time_get: (id, _precision, out) => {
+            let ns;
+            if (id === 0)
+                ns = BigInt(Date.now()) * 1000000n;
+            else if (id >= 1 && id <= 3)
+                ns = process.hrtime.bigint();
+            else
+                return EINVAL;
+            new DataView(memory.buffer).setBigUint64(bytes(out, 8).byteOffset, ns, true);
+            return 0;
+        },
+        random_get: (ptr, len) => {
+            randomFillSync(bytes(ptr, len));
+            return 0;
+        },
+        fd_write: (fd, iovs, iovsLen, written) => {
+            if (fd !== 1 && fd !== 2)
+                return EBADF;
+            const view = new DataView(memory.buffer);
+            let total = 0;
+            for (let i = 0; i < iovsLen; i++) {
+                const base = view.getUint32(bytes(iovs + i * 8, 8).byteOffset, true);
+                const len = view.getUint32(iovs + i * 8 + 4, true);
+                // Kept to DIAGNOSTICS_CHARS in all, clipped before decoding: each byte is at most a char.
+                const room = DIAGNOSTICS_CHARS - diagnostics.length;
+                if (room > 0)
+                    diagnostics += text(base, Math.min(len, room));
+                total += len;
+            }
+            view.setUint32(bytes(written, 4).byteOffset, total, true);
+            return 0;
+        },
+        fd_fdstat_get: (fd, out) => {
+            if (fd !== 1 && fd !== 2)
+                return EBADF;
+            const b = bytes(out, 24);
+            b.fill(0);
+            b[0] = 2; // a character device, so stdio writes unbuffered lines
+            return 0;
+        },
+        fd_seek: (fd) => (fd === 1 || fd === 2 ? ESPIPE : EBADF),
+        fd_close: () => EBADF,
+    };
+    const instance = await Wasm.instantiate(await engineModule(), { env, wasi_snapshot_preview1: wasi });
+    const ex = instance.exports;
+    /**
+     * Calls into the module. A trap leaves the engine broken, and every later call throws its error.
+     * One made from inside a slot, while another is in progress, is refused: the two would share the
+     * module's state.
+     */
+    const call = (what, fn) => {
+        if (broken)
+            throw broken;
+        if (busy)
+            throw new EngineError(`${what} was called from inside one of the engine's slots, which may not call back into it`);
+        busy = true;
+        let out;
+        try {
+            out = fn();
+        }
+        catch (err) {
+            if (err instanceof EngineError)
+                throw err;
+            // A trap, or an exception in reading what the module returned, which it only throws when the
+            // module returned something it couldn't have made whole: either way the module can't be
+            // taken as whole, so dispose() leaves it as it is.
+            crashed = true;
+            // A slot that failed first is why: the guest ran on, refused, until the module trapped.
+            if (slotFailed)
+                return slotFailure(what);
+            const why = diagnostics.trim();
+            broken = new EngineError(`the engine crashed in ${what}: ${describe(err)}${why ? ` (${why})` : ''}`, { cause: err });
+            throw broken;
+        }
+        finally {
+            busy = false;
+        }
+        return out;
+    };
+    /** A thrown value as text, for a message: it may have no string form, or one that throws. */
+    const describe = (err) => {
+        try {
+            return String(err instanceof Error ? err.message : err);
+        }
+        catch {
+            return 'a value with no string form';
+        }
+    };
+    /** Copies text, or UTF-8 bytes, into the module with the NUL its C expects. The caller frees it, or hands it to engine_settle, which does. */
+    const put = (value) => {
+        const len = typeof value === 'string' ? Buffer.byteLength(value, 'utf8') : value.length;
+        const ptr = ex.engine_alloc(len + 1);
+        if (ptr === 0)
+            return { ptr: 0, len };
+        const dst = new Uint8Array(memory.buffer, ptr, len + 1);
+        if (typeof value === 'string')
+            encoder.encodeInto(value, dst);
+        else
+            dst.set(value);
+        dst[len] = 0;
+        return { ptr, len };
+    };
+    /** The ending's text, or its length alone when it's too long to decode, or nothing when the module couldn't make it. */
+    const result = () => {
+        const ptr = ex.engine_result();
+        if (ptr === 0)
+            return undefined;
+        const view = new DataView(memory.buffer);
+        const kind = view.getUint32(ptr, true);
+        const len = view.getUint32(ptr + 4, true);
+        if (len > MAX_ENDING_BYTES) {
+            ex.engine_free(ptr);
+            return { kind, tooLong: len };
+        }
+        const out = decoder.decode(new Uint8Array(memory.buffer, ptr + 8, len));
+        ex.engine_free(ptr);
+        return { kind, text: out };
+    };
+    const errorState = (json, kind) => {
+        const e = JSON.parse(json);
+        const state = { kind, name: e.name ?? '', message: e.message ?? '' };
+        if (typeof e.stack === 'string')
+            state.stack = e.stack;
+        return state;
+    };
+    /** What an ending that can't be read out is answered with, by what it is. */
+    const unread = {
+        [FULFILLED]: {
+            memory: 'out of memory while serializing the script\'s return value; return less, or let go of data the script no longer needs',
+            long: (n) => `the script's return value comes to ${n} bytes as text, more than the ${MAX_ENDING_BYTES} the engine reads back; return less`,
+        },
+        [REJECTED]: {
+            memory: 'out of memory while reading what the script threw; throw something smaller, such as an Error with a shorter message, or let go of data the script no longer needs',
+            long: (n) => `what the script threw comes to ${n} bytes as text, more than the ${MAX_ENDING_BYTES} the engine reads back; throw something smaller`,
+        },
+        [FAILED]: {
+            memory: 'out of memory while reading the exception that ended the run; let go of data the script no longer needs, and if a callback given to queueMicrotask or a FinalizationRegistry threw it, throw something smaller or catch it there',
+            long: (n) => `the exception that ended the run comes to ${n} bytes as text, more than the ${MAX_ENDING_BYTES} the engine reads back; if a callback given to queueMicrotask or a FinalizationRegistry threw it, throw something smaller or catch it there`,
+        },
+    };
+    /**
+     * Each ending as it was first read. Reading one serializes the script's value or error in the
+     * guest, which can run the script's own code (a toJSON, a getter), and every settle after the
+     * script has ended answers that ending again: read once, that code runs once.
+     */
+    const endings = new Map();
+    /** The run ended because a slot threw. */
+    const slotFailure = (what) => {
+        broken = new EngineError(`a slot threw during ${what}: ${describe(slotError)}`, { cause: slotError });
+        throw broken;
+    };
+    /** Reads a state code into a RunState, or throws for the engine's own failures. */
+    const toState = (code, what) => {
+        switch (code) {
+            case PENDING:
+                return { kind: 'pending' };
+            case INTERRUPTED:
+                // A slot's failure stops the guest through the interrupt, so this can be that failure.
+                if (slotFailed)
+                    return slotFailure(what);
+                return { kind: 'interrupted' };
+            case FULFILLED:
+            case REJECTED:
+            case FAILED: {
+                // Each kept under its own code, so a failure after the script's own ending is read anew.
+                const known = endings.get(code);
+                if (known)
+                    return { ...known };
+                const r = result();
+                // Reading runs the interrupt slot, which can throw, or stop the guest. A stop that lands
+                // while the script's own ending is read leaves none to give (the module returns nothing),
+                // so this call answers as any call does in which that happens. One that lands in the jobs
+                // the read queued comes after a whole ending, which this call answers. An exception
+                // escaping those jobs ends the run after its ending, and is what this call answers. An
+                // exception that ended the run is read with the parts a stop cut off left out.
+                if (slotFailed)
+                    return slotFailure(what);
+                if (code !== FAILED) {
+                    if (ex.engine_state() === FAILED)
+                        return toState(FAILED, what);
+                    if (!r && stopped)
+                        return { kind: 'interrupted' };
+                }
+                const kind = code === FAILED ? 'failed' : 'rejected';
+                const state = !r ? { kind, name: 'InternalError', message: unread[code].memory }
+                    : 'tooLong' in r ? { kind, name: 'RangeError', message: unread[code].long(r.tooLong) }
+                        : r.kind === 0 ? { kind: 'fulfilled', json: undefined }
+                            : r.kind === 1 ? { kind: 'fulfilled', json: r.text }
+                                : errorState(r.text, kind);
+                endings.set(code, state);
+                return { ...state };
+            }
+            case HOST_FAILED:
+                return slotFailure(what);
+            case UNKNOWN_CALL:
+                throw new EngineError(`${what}: no pending call with that id`);
+            case NO_MEMORY:
+                broken = new EngineError(`${what}: the engine ran out of memory for its own state`);
+                throw broken;
+            case MISUSE:
+            default:
+                throw new EngineError(`${what}: the engine refused the call (${code})`);
+        }
+    };
+    call('initialization', () => ex._initialize());
+    const init = call('initialization', () => ex.engine_init(quickjsMemoryLimit(memoryMaxBytes), stackBytes));
+    if (init !== 0)
+        throw new EngineError(`the engine couldn't initialize (${init})`);
+    let started = false;
+    let disposed = false;
+    const live = (what) => {
+        if (disposed)
+            throw new EngineError(`${what} after dispose()`);
+    };
+    return {
+        start(prelude, script, filename) {
+            live('start()');
+            if (broken)
+                throw broken;
+            if (started)
+                throw new EngineError('start() was already called');
+            started = true;
+            return call('start()', () => {
+                const p = put(prelude), s = put(script), f = put(filename);
+                try {
+                    if (!p.ptr || !s.ptr || !f.ptr)
+                        return { kind: 'rejected', name: 'InternalError', message: 'out of memory while loading the script' };
+                    return toState(ex.engine_start(p.ptr, p.len, s.ptr, s.len, f.ptr), 'start()');
+                }
+                finally {
+                    for (const b of [p, s, f])
+                        if (b.ptr)
+                            ex.engine_free(b.ptr);
+                }
+            });
+        },
+        settle(callId, ok, json, unfitJson) {
+            live('settle()');
+            if (broken)
+                throw broken;
+            if (!started)
+                throw new EngineError('settle() before start()');
+            if (callId >>> 0 !== callId)
+                throw new EngineError(`settle(): ${callId} isn't a call id`);
+            return call('settle()', () => {
+                // The small error first, so a result that takes the last of the memory leaves it room,
+                // and once more if refused: the refusal opens the allocator's headroom, which it fits in.
+                // A copy the module can't make room for goes as a null pointer, and so does a result
+                // nested too deeply to parse. The module frees both copies, each as soon as it's parsed.
+                let u = put(unfitJson);
+                if (!u.ptr)
+                    u = put(unfitJson);
+                const j = nestsDeeper(json, MAX_RESULT_DEPTH) ? { ptr: 0, len: 0 } : put(json);
+                const code = ex.engine_settle(callId, ok ? 1 : 0, j.ptr, j.len, u.ptr, u.len);
+                if (code < 0)
+                    return toState(code, 'settle()');
+                const state = toState(code & ~(UNFIT | DROPPED), 'settle()');
+                if (code & UNFIT)
+                    state.unfit = true;
+                if (code & DROPPED)
+                    state.dropped = true;
+                return state;
+            });
+        },
+        dispose() {
+            if (disposed)
+                return;
+            // Refused from inside a slot, it isn't marked done, so it can be made again.
+            if (busy)
+                throw new EngineError('dispose() was called from inside one of the engine\'s slots, which may not call back into it');
+            // A module whose call ended in an exception, a trap or otherwise, may have stopped anywhere,
+            // so it's left as it is. One that ended for a slot's failure, or for want of memory for its
+            // own state, is whole, and frees its runtime.
+            if (!crashed) {
+                busy = true;
+                try {
+                    ex.engine_dispose();
+                }
+                catch (err) {
+                    crashed = true;
+                    disposed = true;
+                    broken = new EngineError(`the engine crashed in dispose(): ${describe(err)}`, { cause: err });
+                    throw broken;
+                }
+                finally {
+                    busy = false;
+                }
+            }
+            disposed = true;
+        },
+    };
+}
+//# sourceMappingURL=engine.js.map

package/dist/src/code-execution/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/code-execution/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAqH7C,sGAAsG;AACtG,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,IAAI,GAAG,KAAK,CAAC;AACnB,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AACnD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC;AAC1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;AACnD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,kEAAkE;AAClE,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;AAEtC,qCAAqC;AACrC,MAAM,OAAO,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,EAAE,WAAW,GAAG,CAAC,EAAE,WAAW,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;AAC7F,MAAM,KAAK,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,CAAC;AAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;AAuBrD,MAAM,IAAI,GAAI,UAA+C,CAAC,WAAW,CAAC;AAE1E,IAAI,QAAqC,CAAC;AAE1C,uDAAuD;AACvD,SAAS,YAAY;IACnB,QAAQ,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACvG,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAAC,IAAyB,EAAE,KAAa;IAC3D,wFAAwF;IACxF,MAAM,EAAE,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,KAAK,GAAG,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAChB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC,CAAC,yCAAyC;iBACzD,IAAI,CAAC,KAAK,IAAI;gBAAE,QAAQ,GAAG,KAAK,CAAC;QACxC,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACtB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,IAAI,EAAE,KAAK,GAAG,KAAK;gBAAE,OAAO,IAAI,CAAC;QACnC,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gGAAgG;AAChG,SAAS,kBAAkB,CAAC,cAAsB;IAChD,OAAO,cAAc,GAAG,gBAAgB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAoB,EAAE,KAAkB;IACvE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IAClC,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,IAAI,mBAAmB,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,IAAI,KAAK,CAAC;QACpE,cAAc,GAAG,gBAAgB,IAAI,cAAc,GAAG,gBAAgB,EAAE,CAAC;QAC3E,MAAM,IAAI,UAAU,CAAC,8DAA8D,gBAAgB,OAAO,gBAAgB,SAAS,cAAc,EAAE,CAAC,CAAC;IACvJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,EAAE,GAAG,IAAI,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;QAChG,MAAM,IAAI,UAAU,CAAC,uCAAuC,eAAe,SAAS,UAAU,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,gBAAgB,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,EAAE,CAAC,CAAC;IAC7H,uDAAuD;IACvD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,qFAAqF;IACrF,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,SAAkB,CAAC;IACvB,IAAI,MAA+B,CAAC;IACpC,+CAA+C;IAC/C,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,8FAA8F;IAC9F,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,oEAAoE;IACpE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,mFAAmF;IACnF,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB;;;;OAIG;IACH,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,GAAW,EAAc,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3E,yEAAyE;IACzE,MAAM,KAAK,GAAG,CAAC,EAAc,EAAU,EAAE;QACvC,IAAI,UAAU;YAAE,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,EAAE,EAAE,CAAC;YACL,OAAO,CAAC,CAAC;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS,GAAG,GAAG,CAAC;YAChB,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG;QACV,MAAM;QACN,SAAS,EAAE,CAAC,EAAU,EAAE,IAAY,EAAE,OAAe,EAAE,IAAY,EAAE,OAAe,EAAE,EAAE,CACtF,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,kEAAkE;QAClE,cAAc,EAAE,GAAG,EAAE;YACnB,IAAI,UAAU;gBAAE,OAAO,CAAC,CAAC;YACzB,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;oBAAE,OAAO,CAAC,CAAC;gBACjC,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,CAAC;YACX,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,UAAU,GAAG,IAAI,CAAC;gBAClB,SAAS,GAAG,GAAG,CAAC;gBAChB,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,WAAW,EAAE,CAAC,MAAc,EAAE,GAAW,EAAE,GAAW,EAAE,EAAE,CACxD,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACjE,6FAA6F;QAC7F,4BAA4B;QAC5B,cAAc,EAAE,GAAG,EAAE;YACnB,IAAI,CAAC;gBACH,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,UAAU,GAAG,IAAI,CAAC;oBAClB,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;IACF,iGAAiG;IACjG,6FAA6F;IAC7F,yFAAyF;IACzF,wCAAwC;IACxC,MAAM,IAAI,GAAG;QACX,cAAc,EAAE,CAAC,EAAU,EAAE,UAAkB,EAAE,GAAW,EAAE,EAAE;YAC9D,IAAI,EAAU,CAAC;YACf,IAAI,EAAE,KAAK,CAAC;gBAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,QAAU,CAAC;iBAC9C,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;;gBACrD,OAAO,MAAM,CAAC;YACnB,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;YAC7E,OAAO,CAAC,CAAC;QACX,CAAC;QACD,UAAU,EAAE,CAAC,GAAW,EAAE,GAAW,EAAE,EAAE;YACvC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAChC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,QAAQ,EAAE,CAAC,EAAU,EAAE,IAAY,EAAE,OAAe,EAAE,OAAe,EAAE,EAAE;YACvE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBACrE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;gBACnD,0FAA0F;gBAC1F,MAAM,IAAI,GAAG,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC;gBACpD,IAAI,IAAI,GAAG,CAAC;oBAAE,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC7D,KAAK,IAAI,GAAG,CAAC;YACf,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC1D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,aAAa,EAAE,CAAC,EAAU,EAAE,GAAW,EAAE,EAAE;YACzC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACV,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,uDAAuD;YACjE,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QAChE,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;KACtB,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,YAAY,EAAE,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC;IACrG,MAAM,EAAE,GAAG,QAAQ,CAAC,OAA6B,CAAC;IAElD;;;;OAIG;IACH,MAAM,IAAI,GAAG,CAAI,IAAY,EAAE,EAAW,EAAK,EAAE;QAC/C,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC;QACzB,IAAI,IAAI;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,oFAAoF,CAAC,CAAC;QAC7H,IAAI,GAAG,IAAI,CAAC;QACZ,IAAI,GAAM,CAAC;QACX,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW;gBAAE,MAAM,GAAG,CAAC;YAC1C,6FAA6F;YAC7F,wFAAwF;YACxF,mDAAmD;YACnD,OAAO,GAAG,IAAI,CAAC;YACf,wFAAwF;YACxF,IAAI,UAAU;gBAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,GAAG,IAAI,WAAW,CAAC,yBAAyB,IAAI,KAAK,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrH,MAAM,MAAM,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,IAAI,GAAG,KAAK,CAAC;QACf,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,6FAA6F;IAC7F,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAU,EAAE;QACxC,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,6BAA6B,CAAC;QACvC,CAAC;IACH,CAAC,CAAC;IACF,8IAA8I;IAC9I,MAAM,GAAG,GAAG,CAAC,KAA0B,EAAgC,EAAE;QACvE,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QACxF,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;;YACzD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACtB,CAAC,CAAC;IACF,wHAAwH;IACxH,MAAM,MAAM,GAAG,GAAmF,EAAE;QAClG,MAAM,GAAG,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;QAC/B,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,gBAAgB,EAAE,CAAC;YAC3B,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACpB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAChC,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACxE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC7B,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAA2B,EAAY,EAAE;QACzE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwD,CAAC;QAClF,MAAM,KAAK,GACT,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACzD,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QACvD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,6EAA6E;IAC7E,MAAM,MAAM,GAAG;QACb,CAAC,SAAS,CAAC,EAAE;YACX,MAAM,EAAE,uHAAuH;YAC/H,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,sCAAsC,CAAC,iCAAiC,gBAAgB,qCAAqC;SACnJ;QACD,CAAC,QAAQ,CAAC,EAAE;YACV,MAAM,EAAE,mKAAmK;YAC3K,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,kCAAkC,CAAC,iCAAiC,gBAAgB,iDAAiD;SAC3J;QACD,CAAC,MAAM,CAAC,EAAE;YACR,MAAM,EAAE,kOAAkO;YAC1O,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,6CAA6C,CAAC,iCAAiC,gBAAgB,6IAA6I;SAClQ;KACO,CAAC;IACX;;;;OAIG;IACH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,0CAA0C;IAC1C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAS,EAAE;QAC1C,MAAM,GAAG,IAAI,WAAW,CAAC,uBAAuB,IAAI,KAAK,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACtG,MAAM,MAAM,CAAC;IACf,CAAC,CAAC;IACF,mFAAmF;IACnF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAY,EAAY,EAAE;QACvD,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,OAAO;gBACV,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC7B,KAAK,WAAW;gBACd,uFAAuF;gBACvF,IAAI,UAAU;oBAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;gBACzC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YACjC,KAAK,SAAS,CAAC;YACf,KAAK,QAAQ,CAAC;YACd,KAAK,MAAM,EAAE,CAAC;gBACZ,yFAAyF;gBACzF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,KAAK;oBAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;gBACnB,yFAAyF;gBACzF,0FAA0F;gBAC1F,0FAA0F;gBAC1F,oFAAoF;gBACpF,uFAAuF;gBACvF,+EAA+E;gBAC/E,IAAI,UAAU;oBAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBACpB,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,MAAM;wBAAE,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBAC/D,IAAI,CAAC,CAAC,IAAI,OAAO;wBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;gBACpD,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;gBACrD,MAAM,KAAK,GAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;oBACxF,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;wBACtF,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;4BACvD,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gCACpD,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACzB,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;YACtB,CAAC;YACD,KAAK,WAAW;gBACd,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;YAC3B,KAAK,YAAY;gBACf,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;YACjE,KAAK,SAAS;gBACZ,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,IAAI,kDAAkD,CAAC,CAAC;gBACpF,MAAM,MAAM,CAAC;YACf,KAAK,MAAM,CAAC;YACZ;gBACE,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,kCAAkC,IAAI,GAAG,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1G,IAAI,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,mCAAmC,IAAI,GAAG,CAAC,CAAC;IAElF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;QAC5B,IAAI,QAAQ;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ;YAC7B,IAAI,CAAC,SAAS,CAAC,CAAC;YAChB,IAAI,MAAM;gBAAE,MAAM,MAAM,CAAC;YACzB,IAAI,OAAO;gBAAE,MAAM,IAAI,WAAW,CAAC,4BAA4B,CAAC,CAAC;YACjE,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC3D,IAAI,CAAC;oBACH,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG;wBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,wCAAwC,EAAc,CAAC;oBAClJ,OAAO,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;gBAChF,CAAC;wBAAS,CAAC;oBACT,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;wBAAE,IAAI,CAAC,CAAC,GAAG;4BAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS;YAChC,IAAI,CAAC,UAAU,CAAC,CAAC;YACjB,IAAI,MAAM;gBAAE,MAAM,MAAM,CAAC;YACzB,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,WAAW,CAAC,yBAAyB,CAAC,CAAC;YAC/D,IAAI,MAAM,KAAK,CAAC,KAAK,MAAM;gBAAE,MAAM,IAAI,WAAW,CAAC,aAAa,MAAM,kBAAkB,CAAC,CAAC;YAC1F,OAAO,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE;gBAC3B,uFAAuF;gBACvF,0FAA0F;gBAC1F,qFAAqF;gBACrF,yFAAyF;gBACzF,IAAI,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;gBACvB,IAAI,CAAC,CAAC,CAAC,GAAG;oBAAE,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/B,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC/E,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC9E,IAAI,IAAI,GAAG,CAAC;oBAAE,OAAO,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAC/C,MAAM,KAAK,GAAgB,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;gBAC1E,IAAI,IAAI,GAAG,KAAK;oBAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;gBACrC,IAAI,IAAI,GAAG,OAAO;oBAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;gBACzC,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO;YACrB,6EAA6E;YAC7E,IAAI,IAAI;gBAAE,MAAM,IAAI,WAAW,CAAC,8FAA8F,CAAC,CAAC;YAChI,6FAA6F;YAC7F,4FAA4F;YAC5F,8CAA8C;YAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,GAAG,IAAI,CAAC;gBACZ,IAAI,CAAC;oBACH,EAAE,CAAC,cAAc,EAAE,CAAC;gBACtB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,QAAQ,GAAG,IAAI,CAAC;oBAChB,MAAM,GAAG,IAAI,WAAW,CAAC,oCAAoC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC9F,MAAM,MAAM,CAAC;gBACf,CAAC;wBAAS,CAAC;oBACT,IAAI,GAAG,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/code-execution/index.d.ts

@@ -1,14 +1,9 @@
 /**
- * Client-side programmatic tool calling (PTC) for the connectome native stack.
- *
- * Mirrors the surface Anthropic's server-side PTC was trained on
- * (code_execution tool + tools exposed as async python functions), but runs
- * the interpreter on the host and dispatches inner tool calls in-process
- * through the framework's own tool routing — intermediate results never
- * enter the model's context; the full trace stays on-box.
+ * Client-side programmatic tool calling (`code_execution`): an agent's
+ * scripts call its other tools in-process through the framework's own tool
+ * routing, so intermediate results never enter the model's context. Each
+ * script runs in a process of its own, in QuickJS compiled to WebAssembly
+ * (engine.ts), and reaches nothing but the agent's tools.
  */
-export { PyRunner, buildInjectedTools } from './py-runner.js';
-export type { InjectedTool, ExecResult, PyRunnerOptions, ScriptToolCallHandler, ScriptToolResult, BackgroundExecOptions, } from './py-runner.js';
-export { PYTHON_RUNTIME_SOURCE } from './runtime-py.js';
 export { buildCodeExecutionToolDefinition, CODE_EXECUTION_TOOL_NAME } from './tool-definition.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/code-execution/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/code-execution/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,YAAY,EACV,YAAY,EACZ,UAAU,EACV,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,gCAAgC,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/code-execution/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gCAAgC,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/src/code-execution/index.js

@@ -1,13 +1,9 @@
 /**
- * Client-side programmatic tool calling (PTC) for the connectome native stack.
- *
- * Mirrors the surface Anthropic's server-side PTC was trained on
- * (code_execution tool + tools exposed as async python functions), but runs
- * the interpreter on the host and dispatches inner tool calls in-process
- * through the framework's own tool routing — intermediate results never
- * enter the model's context; the full trace stays on-box.
+ * Client-side programmatic tool calling (`code_execution`): an agent's
+ * scripts call its other tools in-process through the framework's own tool
+ * routing, so intermediate results never enter the model's context. Each
+ * script runs in a process of its own, in QuickJS compiled to WebAssembly
+ * (engine.ts), and reaches nothing but the agent's tools.
  */
-export { PyRunner, buildInjectedTools } from './py-runner.js';
-export { PYTHON_RUNTIME_SOURCE } from './runtime-py.js';
 export { buildCodeExecutionToolDefinition, CODE_EXECUTION_TOOL_NAME } from './tool-definition.js';
 //# sourceMappingURL=index.js.map

package/dist/src/code-execution/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/code-execution/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAS9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,gCAAgC,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/code-execution/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gCAAgC,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC"}