@assemblyline-agents/runtime 0.1.0

package/dist/tool-execution.js

@@ -0,0 +1,573 @@
+import { boundModelOutput, normalizeApprovalPolicy, sandboxFilesystemContractMetadata } from "@assemblyline-agents/core";
+import { ASK_QUESTION_TOOL_NAME, CORE_HARNESS_TOOL_NAMES, isBuiltInToolName, LOAD_SKILL_TOOL_NAME, runtimeToolsForManifest, TOOL_CALL_TOOL_NAME, TOOL_DESCRIBE_TOOL_NAME, TOOL_SEARCH_TOOL_NAME } from "./builtin-tools.js";
+import { createConnectionRegistryForRunImpl, deferredLocalTools, executeConnectionSearchTool, executeConnectionTool, executeLoadSkillTool, executeToolDescribeTool, executeToolSearchTool, failRuntimeHandledTool } from "./builtin-tool-executors.js";
+import { CONNECTION_SEARCH_TOOL_NAME, parseQualifiedName } from "./connections.js";
+import { resolvePositiveIntegerEnv } from "./env-config.js";
+import { harnessPauseOutcome } from "./harness-continuation.js";
+import { evalRunOptionsForRun } from "./eval-run-options.js";
+import { isJsonObject, previewString, redactedToolInput, safeJson } from "./json-util.js";
+import { prepareToolModelOutput } from "./model-media.js";
+import { failRun } from "./run-outcome.js";
+import { sandboxWriteByteLength } from "./resource-projection-util.js";
+import { stringValue, timestamp, toolRequiresSandbox } from "./runtime-util.js";
+import { applyCoreToolPolicy, filterVisibleToolSet } from "./security.js";
+import { createToolContext, HumanInputRequired } from "./tool-apis.js";
+export function visibleToolSetImpl(host, defaultToolNames, activeSkills) {
+    void activeSkills;
+    return filterVisibleToolSet(defaultToolNames, host.coreToolPolicy);
+}
+export async function modelToolsImpl(host, activeToolNames, connectionRegistry, discoveredConnectionTools = new Map()) {
+    const tools = [];
+    for (const tool of runtimeToolsForManifest(host.manifest)) {
+        if (!activeToolNames.has(tool.name))
+            continue;
+        const policyTool = applyCoreToolPolicy(tool, host.coreToolPolicy);
+        if (!policyTool)
+            continue;
+        const definition = await host.loadTool(policyTool);
+        const descriptor = {
+            name: policyTool.name,
+            description: definition.description ?? policyTool.description,
+            inputSchema: definition.inputSchema ?? policyTool.inputSchema
+        };
+        // Statically pause-capable tools must serialize their batch: approval
+        // gates park the run before executing, ask_question always pauses, and
+        // the deferred-tool bridge can hit any of those through the tool it
+        // routes to.
+        if (policyTool.name === ASK_QUESTION_TOOL_NAME ||
+            policyTool.name === TOOL_CALL_TOOL_NAME ||
+            normalizeApprovalPolicy(policyTool.needsApproval).mode === "always") {
+            descriptor.execution = "sequential";
+        }
+        tools.push(descriptor);
+    }
+    if (connectionRegistry?.hasLiveConnections() && activeToolNames.has(CONNECTION_SEARCH_TOOL_NAME)) {
+        tools.push({
+            name: CONNECTION_SEARCH_TOOL_NAME,
+            description: "Search for tools across live external connections. Discovered tools become callable by qualified name, such as github__list_issues.",
+            inputSchema: {
+                type: "object",
+                additionalProperties: false,
+                properties: {
+                    keywords: {
+                        type: "string",
+                        description: "Search keywords for the remote tool capability."
+                    },
+                    connection: {
+                        type: "string",
+                        description: "Optional connection name to search within."
+                    },
+                    limit: {
+                        type: "number",
+                        description: "Maximum result count. Defaults to 10."
+                    }
+                },
+                required: ["keywords"]
+            }
+        });
+    }
+    for (const [qualifiedName, metadata] of discoveredConnectionTools) {
+        if (!activeToolNames.has(qualifiedName))
+            continue;
+        tools.push({
+            name: qualifiedName,
+            description: metadata.description,
+            inputSchema: metadata.inputSchema,
+            // Connection tools can pause for authorization at any call.
+            execution: "sequential"
+        });
+    }
+    for (const subagent of host.manifest.subagents) {
+        if (!activeToolNames.has(`delegate_${subagent.name}`))
+            continue;
+        tools.push({
+            name: `delegate_${subagent.name}`,
+            description: subagent.description,
+            inputSchema: {
+                type: "object",
+                properties: {
+                    task: { type: "string" },
+                    expectedOutput: { type: "string" },
+                    constraints: { type: "array", items: { type: "string" } }
+                },
+                additionalProperties: true
+            }
+        });
+    }
+    return tools;
+}
+export async function harnessExecuteToolImpl(host, call, state) {
+    const { toolCallId, name, input: params } = call;
+    if (name === LOAD_SKILL_TOOL_NAME) {
+        const outcome = await executeLoadSkillTool(host, state.run(), {
+            sandboxHandle: state.sandboxHandle
+        }, params, `tool:${state.run().id}:${name}:${toolCallId}`);
+        state.setRun(outcome.run);
+        if (outcome.skillName)
+            state.activeSkills.add(outcome.skillName);
+        return harnessResult(outcome.modelOutput, host.env);
+    }
+    if (name === TOOL_SEARCH_TOOL_NAME) {
+        const outcome = await executeToolSearchTool(host, state.run(), {
+            connectionRegistry: state.connectionRegistry,
+            discoveredConnectionTools: state.discoveredConnectionTools
+        }, params, `tool:${state.run().id}:${name}:${toolCallId}`);
+        state.setRun(outcome.run);
+        return harnessResult(outcome.modelOutput, host.env);
+    }
+    if (name === TOOL_DESCRIBE_TOOL_NAME) {
+        const outcome = await executeToolDescribeTool(host, state.run(), {
+            connectionRegistry: state.connectionRegistry,
+            discoveredConnectionTools: state.discoveredConnectionTools
+        }, params, `tool:${state.run().id}:${name}:${toolCallId}`);
+        state.setRun(outcome.run);
+        return harnessResult(outcome.modelOutput, host.env);
+    }
+    if (name === TOOL_CALL_TOOL_NAME) {
+        const outcome = await executeToolCallBridge(host, state.run(), {
+            sandboxHandle: state.sandboxHandle,
+            connectionRegistry: state.connectionRegistry,
+            discoveredConnectionTools: state.discoveredConnectionTools
+        }, params, `tool:${state.run().id}:deferred:${toolCallId}`);
+        state.setRun(outcome.run);
+        if (outcome.waitingForApproval || outcome.waitingForInput || outcome.waitingForConnection) {
+            const waiting = { run: outcome.run };
+            if (outcome.waitingForApproval !== undefined)
+                waiting.waitingForApproval = outcome.waitingForApproval;
+            if (outcome.waitingForInput !== undefined)
+                waiting.waitingForInput = outcome.waitingForInput;
+            if (outcome.waitingForConnection !== undefined)
+                waiting.waitingForConnection = outcome.waitingForConnection;
+            if (outcome.toolCallId)
+                waiting.toolCallId = outcome.toolCallId;
+            if (outcome.toolName)
+                waiting.toolName = outcome.toolName;
+            if (outcome.authorizationSessionId)
+                waiting.authorizationSessionId = outcome.authorizationSessionId;
+            state.setPause(waiting);
+            return harnessPauseOutcome(waiting);
+        }
+        return harnessResult(outcome.modelOutput ?? {}, host.env);
+    }
+    if (name.startsWith("delegate_")) {
+        const subagentName = name.slice("delegate_".length);
+        const task = isJsonObject(params) ? params : { task: String(params ?? "") };
+        const timeline = await host.runSubagent(state.run().id, subagentName, task);
+        return harnessResult({
+            runId: timeline.run.id,
+            status: timeline.run.status,
+            events: timeline.events.map((event) => ({ type: event.type, data: event.data })).slice(-8)
+        }, host.env);
+    }
+    if (name === CONNECTION_SEARCH_TOOL_NAME) {
+        const outcome = await executeConnectionSearchTool(host, state.run(), state.connectionRegistry, params, `tool:${state.run().id}:${name}:${toolCallId}`);
+        state.setRun(outcome.run);
+        for (const result of outcome.results) {
+            if (result.qualifiedName && result.tool && result.inputSchema) {
+                const metadata = {
+                    connection: result.connection,
+                    name: result.tool,
+                    qualifiedName: result.qualifiedName,
+                    description: result.description,
+                    inputSchema: result.inputSchema
+                };
+                if (result.outputSchema)
+                    metadata.outputSchema = result.outputSchema;
+                state.discoveredConnectionTools.set(result.qualifiedName, metadata);
+                state.defaultToolNames.add(result.qualifiedName);
+            }
+        }
+        return harnessResult(outcome.results, host.env);
+    }
+    if (parseQualifiedName(name)) {
+        const outcome = await executeConnectionTool(host, state.run(), state.connectionRegistry, name, params, false, `tool:${state.run().id}:${name}:${toolCallId}`);
+        state.setRun(outcome.run);
+        if (outcome.waitingForApproval || outcome.waitingForConnection) {
+            const waiting = { run: outcome.run };
+            if (outcome.waitingForApproval !== undefined)
+                waiting.waitingForApproval = outcome.waitingForApproval;
+            if (outcome.waitingForConnection !== undefined)
+                waiting.waitingForConnection = outcome.waitingForConnection;
+            waiting.toolCallId = toolCallId;
+            waiting.toolName = name;
+            if (outcome.authorizationSessionId)
+                waiting.authorizationSessionId = outcome.authorizationSessionId;
+            state.setPause(waiting);
+            return harnessPauseOutcome(waiting);
+        }
+        return harnessResult(outcome.modelOutput ?? {}, host.env);
+    }
+    const compiledTool = runtimeToolsForManifest(host.manifest).find((candidate) => candidate.name === name);
+    if (!compiledTool) {
+        await host.state.appendEvent(state.run().id, "tool.unavailable", { toolName: name });
+        return harnessResult({ error: `Unknown tool: ${name}` }, host.env);
+    }
+    const outcome = await executeToolImpl(host, state.run(), compiledTool, params, state.sandboxHandle, false, `tool:${state.run().id}:${compiledTool.name}:${toolCallId}`);
+    state.setRun(outcome.run);
+    if (outcome.waitingForApproval || outcome.waitingForInput) {
+        const waiting = { run: outcome.run };
+        if (outcome.waitingForApproval !== undefined)
+            waiting.waitingForApproval = outcome.waitingForApproval;
+        if (outcome.waitingForInput !== undefined)
+            waiting.waitingForInput = outcome.waitingForInput;
+        if (outcome.toolCallId)
+            waiting.toolCallId = outcome.toolCallId;
+        if (outcome.toolName)
+            waiting.toolName = outcome.toolName;
+        state.setPause(waiting);
+        return harnessPauseOutcome(waiting);
+    }
+    return harnessResult(outcome.modelOutput ?? {}, host.env);
+}
+function harnessResult(output, env) {
+    const prepared = prepareToolModelOutput(output, env);
+    if (prepared.media.length === 0)
+        return { kind: "result", output: prepared.output };
+    return { kind: "result", output: prepared.output, media: prepared.media };
+}
+async function executeToolCallBridge(host, run, state, input, idempotencyKey, approved = false) {
+    const raw = isJsonObject(input) ? input : {};
+    const name = stringValue(raw.name);
+    const args = isJsonObject(raw.arguments) ? raw.arguments : isJsonObject(raw.input) ? raw.input : {};
+    if (!name)
+        throw new Error("tool_call requires name.");
+    if (CORE_HARNESS_TOOL_NAMES.includes(name)) {
+        throw new Error(`Core harness tool ${name} is already directly visible; call it directly.`);
+    }
+    if (parseQualifiedName(name)) {
+        return executeConnectionTool(host, run, state.connectionRegistry, name, args, approved, `${idempotencyKey}:${name}`);
+    }
+    const compiledTool = deferredLocalTools(host).find((tool) => tool.name === name);
+    if (!compiledTool)
+        throw new Error(`Deferred tool not found: ${name}`);
+    const outcome = await executeToolImpl(host, run, compiledTool, args, state.sandboxHandle, approved, `${idempotencyKey}:${name}`);
+    return { ...outcome, toolName: compiledTool.name };
+}
+export function selectToolImpl(host, options) {
+    if (options.toolName) {
+        return runtimeToolsForManifest(host.manifest).find((tool) => tool.name === options.toolName);
+    }
+    return undefined;
+}
+export async function executeToolImpl(host, run, tool, input, sandboxHandle, approved, idempotencyKey = `tool:${run.id}:${tool.name}`) {
+    const policyTool = applyCoreToolPolicy(tool, host.coreToolPolicy);
+    if (!policyTool) {
+        await host.state.appendEvent(run.id, "tool.call_requested", { toolName: tool.name, input: redactedToolInput(input) });
+        const toolCall = await host.state.createToolCall({
+            runId: run.id,
+            toolName: tool.name,
+            status: "requested",
+            input: redactedToolInput(input),
+            idempotencyKey
+        });
+        return failRuntimeHandledTool(host, run, toolCall, tool.name, `Core tool ${tool.name} is disabled by the OpenEve core tool policy.`);
+    }
+    tool = policyTool;
+    if (tool.name === TOOL_SEARCH_TOOL_NAME) {
+        return executeToolSearchTool(host, run, {
+            connectionRegistry: createConnectionRegistryForRunImpl(host, run, "local"),
+            discoveredConnectionTools: new Map()
+        }, input, idempotencyKey);
+    }
+    if (tool.name === TOOL_DESCRIBE_TOOL_NAME) {
+        return executeToolDescribeTool(host, run, {
+            connectionRegistry: createConnectionRegistryForRunImpl(host, run, "local"),
+            discoveredConnectionTools: new Map()
+        }, input, idempotencyKey);
+    }
+    if (tool.name === TOOL_CALL_TOOL_NAME) {
+        return executeToolCallBridge(host, run, {
+            sandboxHandle,
+            connectionRegistry: createConnectionRegistryForRunImpl(host, run, "local", sandboxHandle),
+            discoveredConnectionTools: new Map()
+        }, input, idempotencyKey, approved);
+    }
+    await host.state.appendEvent(run.id, "tool.call_requested", { toolName: tool.name, input: redactedToolInput(input) });
+    let toolCall = await host.state.createToolCall({
+        runId: run.id,
+        toolName: tool.name,
+        status: "requested",
+        input: redactedToolInput(input),
+        idempotencyKey
+    });
+    const approval = normalizeApprovalPolicy(tool.needsApproval);
+    if (approval.mode === "always" && !approved && evalRunOptionsForRun(run)?.autoApproveTools) {
+        // Eval harness: record the approval request durably (assertable), then
+        // proceed approved in the same tick instead of parking the run.
+        await host.state.appendEvent(run.id, "tool.approval_requested", {
+            toolCallId: toolCall.id,
+            toolName: tool.name,
+            reason: approval.reason ?? "Approval required before side effects."
+        });
+        await host.state.appendEvent(run.id, "tool.approval_auto_resolved", {
+            toolCallId: toolCall.id,
+            toolName: tool.name,
+            source: "eval"
+        });
+        return executeToolWithRecordImpl(host, run, tool, toolCall, input, sandboxHandle, true);
+    }
+    if (approval.mode === "always" && !approved) {
+        toolCall = await host.state.updateToolCall(toolCall.id, { status: "waiting_for_approval" });
+        const waitingRun = await host.state.updateRun(run.id, { status: "waiting_for_approval" });
+        await host.state.appendEvent(run.id, "tool.approval_requested", {
+            toolCallId: toolCall.id,
+            toolName: tool.name,
+            reason: approval.reason ?? "Approval required before side effects."
+        });
+        await host.createCheckpoint({
+            runId: run.id,
+            name: "tool.approval_requested",
+            data: { toolCallId: toolCall.id, toolName: tool.name }
+        });
+        return { run: waitingRun, waitingForApproval: true, toolCallId: toolCall.id, toolName: tool.name };
+    }
+    return executeToolWithRecordImpl(host, run, tool, toolCall, input, sandboxHandle, approved);
+}
+export async function executeToolWithRecordImpl(host, run, tool, toolCall, input, sandboxHandle, approvedToolCall = false) {
+    await host.state.updateToolCall(toolCall.id, { status: "running" });
+    await host.state.appendEvent(run.id, "tool.execution_started", { toolCallId: toolCall.id, toolName: tool.name });
+    const toolSpanStartedAt = timestamp();
+    if (toolRequiresSandbox(tool)) {
+        await sandboxHandle.get();
+    }
+    const ctx = createToolContext(host, run, sandboxHandle, approvedToolCall);
+    try {
+        const definition = await host.loadTool(tool, run);
+        if (!definition.execute)
+            throw new Error(`Tool ${tool.name} does not export execute().`);
+        const result = await withToolTimeout(Promise.resolve(definition.execute(input, ctx)), definition.timeoutMs ?? host.toolTimeoutMs, tool.name);
+        const modelOutput = definition.toModelOutput ? await definition.toModelOutput(result) : boundModelOutput(result, host.toolOutputMaxChars);
+        await host.state.updateToolCall(toolCall.id, {
+            status: "completed",
+            result: safeJson(result),
+            modelOutput: safeJson(modelOutput)
+        });
+        await host.state.appendEvent(run.id, "tool.execution_completed", {
+            toolCallId: toolCall.id,
+            toolName: tool.name,
+            modelOutput: safeJson(modelOutput)
+        });
+        await host.emitSpan("ai.toolCall", toolSpanStartedAt, host.runSpanAttributes(run, {
+            toolCallId: toolCall.id,
+            toolName: tool.name,
+            status: "completed",
+            ...host.toolContentAttributes(input, modelOutput)
+        }), {
+            parentSpanId: host.turnSpanId(run.id),
+            status: "ok"
+        });
+        await host.emitSpan("assembly-line.tool", toolSpanStartedAt, {
+            runId: run.id,
+            toolName: tool.name,
+            status: "completed"
+        });
+        await host.createCheckpoint({
+            runId: run.id,
+            name: "tool.execution_completed",
+            data: { toolCallId: toolCall.id, toolName: tool.name }
+        });
+        return { run: await host.state.getRun(run.id) ?? run, modelOutput };
+    }
+    catch (error) {
+        if (error instanceof HumanInputRequired) {
+            await host.state.updateToolCall(toolCall.id, { status: "waiting_for_approval", error: error.message });
+            const waitingRun = await host.state.updateRun(run.id, { status: "waiting_for_input" });
+            await host.state.appendEvent(run.id, "human_input.requested", {
+                toolCallId: toolCall.id,
+                question: error.question,
+                options: error.options ?? {}
+            });
+            await host.emitSpan("ai.toolCall", toolSpanStartedAt, host.runSpanAttributes(run, {
+                toolCallId: toolCall.id,
+                toolName: tool.name,
+                status: "waiting_for_input",
+                ...host.toolContentAttributes(input, undefined)
+            }), {
+                parentSpanId: host.turnSpanId(run.id),
+                status: "ok"
+            });
+            await host.emitSpan("assembly-line.tool", toolSpanStartedAt, {
+                runId: run.id,
+                toolName: tool.name,
+                status: "waiting_for_input"
+            });
+            return { run: waitingRun, waitingForInput: true, toolCallId: toolCall.id, toolName: tool.name };
+        }
+        // Core sandbox tools (read/write/edit/delete/list/grep/bash) operate on a
+        // filesystem: "not found", "empty", and non-zero exit are normal,
+        // recoverable conditions, not run-ending crashes. Their errors are a
+        // RESULT for the model to reason over (create the dir, try another path,
+        // report gracefully) — exactly what lets an autonomous agent survive an
+        // empty /workspace or a first-run state file that doesn't exist yet.
+        // Authored tools throwing is a stronger signal (the agent's own code
+        // broke) and remains a run failure, so routine/trigger failure detection
+        // is unchanged. Terminal conditions (human input, approval, connection
+        // auth) are explicit cases above and never reach here.
+        const message = error instanceof Error ? error.message : String(error);
+        await host.state.updateToolCall(toolCall.id, { status: "failed", error: message });
+        await host.state.appendEvent(run.id, "tool.execution_failed", { toolCallId: toolCall.id, toolName: tool.name, error: message });
+        const recoverable = isBuiltInToolName(tool.name);
+        const nextRun = recoverable
+            ? await host.state.getRun(run.id) ?? run
+            : await failRun({ state: host.state }, run.id, {
+                reason: "tool.execution_failed",
+                error: message,
+                data: { toolCallId: toolCall.id, toolName: tool.name }
+            });
+        await host.emitSpan("ai.toolCall", toolSpanStartedAt, host.runSpanAttributes(nextRun, {
+            toolCallId: toolCall.id,
+            toolName: tool.name,
+            status: "failed",
+            error: message,
+            ...host.toolContentAttributes(input, undefined)
+        }), {
+            parentSpanId: host.turnSpanId(run.id),
+            status: "error"
+        });
+        await host.emitSpan("assembly-line.tool", toolSpanStartedAt, {
+            runId: run.id,
+            toolName: tool.name,
+            status: "failed"
+        });
+        return { run: nextRun, modelOutput: { error: message } };
+    }
+}
+const DEFAULT_SHELL_TIMEOUT_MS = 30_000;
+const DEFAULT_SHELL_TIMEOUT_MAX_MS = 600_000;
+/** Clamp a (possibly model-supplied) shell timeout to [1s, OPENEVE_BASH_TIMEOUT_MAX_MS]; 0/negative/NaN fall to the default. */
+export function clampShellTimeoutMs(requested, env) {
+    const max = resolvePositiveIntegerEnv(env.OPENEVE_BASH_TIMEOUT_MAX_MS, DEFAULT_SHELL_TIMEOUT_MAX_MS);
+    if (typeof requested !== "number" || !Number.isFinite(requested) || requested <= 0) {
+        return Math.min(DEFAULT_SHELL_TIMEOUT_MS, max);
+    }
+    return Math.min(Math.max(Math.floor(requested), 1_000), max);
+}
+/**
+ * Race a tool `execute` against its deadline. The promise is not cancelled —
+ * the tool call fails (and flows through the recoverable/authored
+ * classification) but the underlying work is not forcibly stopped.
+ */
+function withToolTimeout(promise, timeoutMs, toolName) {
+    if (timeoutMs <= 0)
+        return promise;
+    return new Promise((resolve, reject) => {
+        // Ref'd on purpose: while a hung tool is the only pending work, an
+        // unref'd timer would drain the event loop before the deadline fires.
+        const timer = setTimeout(() => {
+            reject(new Error(`Tool ${toolName} timed out after ${timeoutMs}ms.`));
+        }, timeoutMs);
+        promise.then((value) => {
+            clearTimeout(timer);
+            resolve(value);
+        }, (error) => {
+            clearTimeout(timer);
+            reject(error instanceof Error ? error : new Error(String(error)));
+        });
+    });
+}
+export function wrapSandboxImpl(host, runId, session) {
+    return {
+        ...session,
+        readFile: async (path) => {
+            const contents = await session.readFile(path);
+            await host.state.appendEvent(runId, "sandbox.file_read", { path, bytes: contents.length });
+            return contents;
+        },
+        writeFile: async (path, contents) => {
+            await ensureSandboxSyncObligation(host, runId, session, "sandbox_write", { path });
+            await session.writeFile(path, contents);
+            await host.state.appendEvent(runId, "sandbox.file_written", { path, bytes: sandboxWriteByteLength(contents) });
+        },
+        shell: async (command, options) => {
+            await ensureSandboxSyncObligation(host, runId, session, "sandbox_shell", { command: previewString(command, 240) });
+            const spanStartedAt = timestamp();
+            // One choke point for every shell path (model bash tool + authored
+            // tools): a model-supplied 0/negative timeout would otherwise DISABLE
+            // the adapter timeout entirely and hang the run forever.
+            const result = await session.shell(command, { ...options, timeoutMs: clampShellTimeoutMs(options?.timeoutMs, host.env) });
+            await host.state.appendEvent(runId, "sandbox.command_completed", {
+                command,
+                exitCode: result.exitCode,
+                durationMs: result.durationMs
+            });
+            const run = await host.state.getRun(runId);
+            if (run) {
+                await host.emitSpan("ai.assembly-line.sandbox.command", spanStartedAt, host.runSpanAttributes(run, {
+                    sandboxId: session.id,
+                    command: previewString(command, 240),
+                    exitCode: result.exitCode,
+                    durationMs: result.durationMs,
+                    status: result.exitCode === 0 ? "completed" : "failed"
+                }), {
+                    parentSpanId: host.turnSpanId(runId),
+                    status: result.exitCode === 0 ? "ok" : "error"
+                });
+            }
+            return result;
+        }
+    };
+}
+async function ensureSandboxSyncObligation(host, runId, session, reason, metadata = {}) {
+    const run = await host.state.getRun(runId);
+    if (!run)
+        throw new Error(`Run not found for sandbox sync obligation: ${runId}`);
+    const sessionKey = host.sandboxSessionKey(run);
+    const existing = await host.state.getSandboxSession(sessionKey);
+    const syncJob = await host.state.enqueueSandboxSyncJob({
+        runId,
+        sandboxId: session.id,
+        status: "pending",
+        idempotencyKey: `sandbox-sync:${runId}:${session.id}`,
+        reason,
+        maxAttempts: host.sandboxSyncMaxAttempts,
+        manifest: {
+            ...(existing?.manifest ?? {}),
+            roots: ["/memory", "/skills", "/workspace"],
+            sandboxRoot: session.root,
+            sessionKey,
+            ...sandboxFilesystemContractMetadata(session.provider === "local" ? "emulated" : "physical")
+        },
+        metadata
+    });
+    await host.state.updateSandboxSession(sessionKey, {
+        sandboxId: session.id,
+        runId,
+        state: "dirty",
+        dirty: true,
+        lastSeenAt: timestamp(),
+        syncJobId: syncJob.id,
+        manifest: {
+            ...(existing?.manifest ?? {}),
+            roots: ["/memory", "/skills", "/workspace"],
+            sandboxRoot: session.root,
+            sessionKey,
+            ...sandboxFilesystemContractMetadata(session.provider === "local" ? "emulated" : "physical")
+        }
+    }).catch(async () => {
+        await host.state.upsertSandboxSession({
+            sessionKey,
+            provider: session.provider ?? host.sandbox.provider ?? "sandbox",
+            sandboxId: session.id,
+            runId,
+            state: "dirty",
+            dirty: true,
+            lastSeenAt: timestamp(),
+            syncJobId: syncJob.id,
+            manifest: {
+                roots: ["/memory", "/skills", "/workspace"],
+                sandboxRoot: session.root,
+                sessionKey,
+                ...sandboxFilesystemContractMetadata(session.provider === "local" ? "emulated" : "physical")
+            }
+        });
+    });
+    await host.state.appendEvent(runId, "sandbox.sync_obligation", {
+        jobId: syncJob.id,
+        sandboxId: session.id,
+        sessionKey,
+        reason,
+        metadata
+    });
+    return syncJob;
+}
+//# sourceMappingURL=tool-execution.js.map

package/dist/tool-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-execution.js","sourceRoot":"","sources":["../src/tool-execution.ts"],"names":[],"mappings":"AAeA,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,iCAAiC,EAGlC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kCAAkC,EAClC,kBAAkB,EAClB,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAKnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAqB,MAAM,2BAA2B,CAAC;AAEnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAUvE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAA+B,MAAM,eAAe,CAAC;AAiBvG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAwGvE,MAAM,UAAU,kBAAkB,CAAC,IAAuB,EAAE,gBAA6B,EAAE,YAAyB;IAClH,KAAK,YAAY,CAAC;IAClB,OAAO,oBAAoB,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAuB,EACvB,eAA4B,EAC5B,kBAA8C,EAC9C,4BAAiE,IAAI,GAAG,EAAE;IAE1E,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9C,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,UAAU,GAA0B;YACxC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW;YAC7D,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW;SAC9D,CAAC;QACF,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,aAAa;QACb,IACE,UAAU,CAAC,IAAI,KAAK,sBAAsB;YAC1C,UAAU,CAAC,IAAI,KAAK,mBAAmB;YACvC,uBAAuB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,QAAQ,EACnE,CAAC;YACD,UAAU,CAAC,SAAS,GAAG,YAAY,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,kBAAkB,EAAE,kBAAkB,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACjG,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,2BAA2B;YACjC,WAAW,EACT,qIAAqI;YACvI,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,QAAQ,EAAE;wBACR,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,iDAAiD;qBAC/D;oBACD,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,4CAA4C;qBAC1D;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,uCAAuC;qBACrD;iBACF;gBACD,QAAQ,EAAE,CAAC,UAAU,CAAC;aACvB;SACF,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,yBAAyB,EAAE,CAAC;QAClE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,SAAS;QAClD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,4DAA4D;YAC5D,SAAS,EAAE,YAAY;SACxB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,IAAI,EAAE,CAAC;YAAE,SAAS;QAChE,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,YAAY,QAAQ,CAAC,IAAI,EAAE;YACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAClC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBAC1D;gBACD,oBAAoB,EAAE,IAAI;aAC3B;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAuB,EACvB,IAA0D,EAC1D,KAAuB;IAEvB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAC7C,KAAK,CAAC,GAAG,EAAE,EACX;YACE,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,EACD,MAAM,EACN,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI,UAAU,EAAE,CAC/C,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,CAAC,SAAS;YAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjE,OAAO,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAC9C,KAAK,CAAC,GAAG,EAAE,EACX;YACE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;SAC3D,EACD,MAAM,EACN,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI,UAAU,EAAE,CAC/C,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAChD,KAAK,CAAC,GAAG,EAAE,EACX;YACE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;SAC3D,EACD,MAAM,EACN,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI,UAAU,EAAE,CAC/C,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAC9C,KAAK,CAAC,GAAG,EAAE,EACX;YACE,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;SAC3D,EACD,MAAM,EACN,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,aAAa,UAAU,EAAE,CAChD,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAC1F,MAAM,OAAO,GAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS;gBAAE,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YACtG,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;gBAAE,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;YAC7F,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS;gBAAE,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;YAC5G,IAAI,OAAO,CAAC,UAAU;gBAAE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAChE,IAAI,OAAO,CAAC,QAAQ;gBAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC1D,IAAI,OAAO,CAAC,sBAAsB;gBAAE,OAAO,CAAC,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;YACpG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACxB,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;QAC5E,OAAO,aAAa,CAAC;YACnB,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE;YACtB,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM;YAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3F,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAED,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,IAAI,EACpD,KAAK,CAAC,GAAG,EAAE,EACX,KAAK,CAAC,kBAAkB,EACxB,MAAM,EACN,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI,UAAU,EAAE,CAC/C,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC9D,MAAM,QAAQ,GAA2B;oBACvC,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;iBAChC,CAAC;gBACF,IAAI,MAAM,CAAC,YAAY;oBAAE,QAAQ,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;gBACrE,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;gBACpE,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,OAAO,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAC9C,KAAK,CAAC,GAAG,EAAE,EACX,KAAK,CAAC,kBAAkB,EACxB,IAAI,EACJ,MAAM,EACN,KAAK,EACL,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI,UAAU,EAAE,CAC/C,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAC/D,MAAM,OAAO,GAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS;gBAAE,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YACtG,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS;gBAAE,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;YAC5G,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;YAChC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;YACxB,IAAI,OAAO,CAAC,sBAAsB;gBAAE,OAAO,CAAC,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;YACpG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACxB,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACzG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,kBAAkB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,iBAAiB,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,EACxC,KAAK,CAAC,GAAG,EAAE,EACX,YAAY,EACZ,MAAM,EACN,KAAK,CAAC,aAAa,EACnB,KAAK,EACL,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,YAAY,CAAC,IAAI,IAAI,UAAU,EAAE,CAC5D,CAAC;IACF,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QACnD,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS;YAAE,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;QACtG,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;YAAE,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC7F,IAAI,OAAO,CAAC,UAAU;YAAE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAChE,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC1D,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxB,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,MAAe,EAAE,GAAuC;IAC7E,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACpF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAuB,EACvB,GAAc,EACd,KAIC,EACD,KAAc,EACd,cAAsB,EACtB,QAAQ,GAAG,KAAK;IAWhB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACvD,IAAI,uBAAuB,CAAC,QAAQ,CAAC,IAA8C,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,iDAAiD,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,qBAAqB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,cAAc,IAAI,IAAI,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACjF,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,GAAG,cAAc,IAAI,IAAI,EAAE,CAAC,CAAC;IACjI,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAuB,EAAE,OAAwB;IAC9E,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAuB,EACvB,GAAc,EACd,IAAkB,EAClB,KAAc,EACd,aAAmC,EACnC,QAAiB,EACjB,cAAc,GAAG,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE;IAW9C,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,qBAAqB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;YAC/C,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC;YAC/B,cAAc;SACf,CAAC,CAAC;QACH,OAAO,sBAAsB,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,IAAI,CAAC,IAAI,+CAA+C,CAAC,CAAC;IACvI,CAAC;IACD,IAAI,GAAG,UAAU,CAAC;IAClB,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACxC,OAAO,qBAAqB,CAAC,IAAI,EAAE,GAAG,EAAE;YACtC,kBAAkB,EAAE,kCAAkC,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC;YAC1E,yBAAyB,EAAE,IAAI,GAAG,EAAE;SACrC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC1C,OAAO,uBAAuB,CAAC,IAAI,EAAE,GAAG,EAAE;YACxC,kBAAkB,EAAE,kCAAkC,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC;YAC1E,yBAAyB,EAAE,IAAI,GAAG,EAAE;SACrC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACtC,OAAO,qBAAqB,CAAC,IAAI,EAAE,GAAG,EAAE;YACtC,aAAa;YACb,kBAAkB,EAAE,kCAAkC,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC;YACzF,yBAAyB,EAAE,IAAI,GAAG,EAAE;SACrC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,qBAAqB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtH,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAC7C,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC;QAC/B,cAAc;KACf,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAC3F,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,yBAAyB,EAAE;YAC9D,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,wCAAwC;SACpE,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,6BAA6B,EAAE;YAClE,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,OAAO,yBAAyB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5C,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC5F,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,yBAAyB,EAAE;YAC9D,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,wCAAwC;SACpE,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;SACvD,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACrG,CAAC;IAED,OAAO,yBAAyB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAuB,EACvB,GAAc,EACd,IAAkB,EAClB,QAAwB,EACxB,KAAc,EACd,aAAmC,EACnC,gBAAgB,GAAG,KAAK;IAExB,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,wBAAwB,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjH,MAAM,iBAAiB,GAAG,SAAS,EAAE,CAAC;IACtC,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,aAAa,CAAC,GAAG,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,6BAA6B,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAc,EAAE,GAAG,CAAC,CAAC,EACxD,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,EAC1C,IAAI,CAAC,IAAI,CACV,CAAC;QACF,MAAM,WAAW,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,MAAe,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnJ,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC3C,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;YACxB,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;SACnC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,0BAA0B,EAAE;YAC/D,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;SACnC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE;YAChF,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,WAAW;YACnB,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC;SAClD,CAAC,EAAE;YACF,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,iBAAiB,EAAE;YAC3D,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,IAAI,EAAE,0BAA0B;YAChC,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;SACvD,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,WAAW,EAAE,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACvG,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACvF,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,EAAE;gBAC5D,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE;gBAChF,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,mBAAmB;gBAC3B,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC;aAChD,CAAC,EAAE;gBACF,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,iBAAiB,EAAE;gBAC3D,KAAK,EAAE,GAAG,CAAC,EAAE;gBACb,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,mBAAmB;aAC5B,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAClG,CAAC;QACD,0EAA0E;QAC1E,kEAAkE;QAClE,qEAAqE;QACrE,yEAAyE;QACzE,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,yEAAyE;QACzE,uEAAuE;QACvE,uDAAuD;QACvD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAChI,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,WAAW;YACzB,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG;YACxC,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;gBAC3C,MAAM,EAAE,uBAAuB;gBAC/B,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;aACvD,CAAC,CAAC;QACP,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE;YACpF,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,OAAO;YACd,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC;SAChD,CAAC,EAAE;YACF,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,iBAAiB,EAAE;YAC3D,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,4BAA4B,GAAG,OAAO,CAAC;AAE7C,gIAAgI;AAChI,MAAM,UAAU,mBAAmB,CAAC,SAA6B,EAAE,GAAuC;IACxG,MAAM,GAAG,GAAG,yBAAyB,CAAC,GAAG,CAAC,2BAA2B,EAAE,4BAA4B,CAAC,CAAC;IACrG,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAI,OAAmB,EAAE,SAAiB,EAAE,QAAgB;IAClF,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,mEAAmE;QACnE,sEAAsE;QACtE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,QAAQ,oBAAoB,SAAS,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAuB,EAAE,KAAa,EAAE,OAAuB;IAC7F,OAAO;QACL,GAAG,OAAO;QACV,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3F,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAClC,MAAM,2BAA2B,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACxC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjH,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YAChC,MAAM,2BAA2B,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACnH,MAAM,aAAa,GAAG,SAAS,EAAE,CAAC;YAClC,mEAAmE;YACnE,sEAAsE;YACtE,yDAAyD;YACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1H,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,2BAA2B,EAAE;gBAC/D,OAAO;gBACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,IAAI,CAAC,QAAQ,CAAC,kCAAkC,EAAE,aAAa,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE;oBACjG,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC;oBACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;iBACvD,CAAC,EAAE;oBACF,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;oBACpC,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;iBAC/C,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,IAAuB,EACvB,KAAa,EACb,OAAuB,EACvB,MAAc,EACd,WAAuB,EAAE;IAEzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC;QACrD,KAAK;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,SAAS;QACjB,cAAc,EAAE,gBAAgB,KAAK,IAAI,OAAO,CAAC,EAAE,EAAE;QACrD,MAAM;QACN,WAAW,EAAE,IAAI,CAAC,sBAAsB;QACxC,QAAQ,EAAE;YACR,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC7B,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC;YAC3C,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,UAAU;YACV,GAAG,iCAAiC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;SAC7F;QACD,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,EAAE;QAChD,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,KAAK;QACL,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,SAAS,EAAE;QACvB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,QAAQ,EAAE;YACR,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC7B,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC;YAC3C,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,UAAU;YACV,GAAG,iCAAiC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;SAC7F;KACF,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE;QAClB,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC;YACpC,UAAU;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,SAAS;YAChE,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK;YACL,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,SAAS,EAAE;YACvB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,QAAQ,EAAE;gBACR,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC;gBAC3C,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,UAAU;gBACV,GAAG,iCAAiC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;aAC7F;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,yBAAyB,EAAE;QAC7D,KAAK,EAAE,OAAO,CAAC,EAAE;QACjB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,UAAU;QACV,MAAM;QACN,QAAQ;KACT,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/trusted-attachments.d.ts

@@ -0,0 +1,20 @@
+import type { JsonObject } from "@assemblyline-agents/core";
+import { type AttachmentDownloadRequest } from "./attachments.js";
+/**
+ * Provider download builders (Slack files.info, Telegram getFile, Teams token
+ * flow, Photon bridge headers) for direct `run({ trustedAttachmentProvider })`
+ * callers — embedders injecting attachments without a channel dispatch.
+ *
+ * Channel dispatches never reach this module: channels own attachment
+ * resolution through `ChannelModule.resolveAttachment`, and that resolver
+ * wins whenever the turn has one. The same trust rules apply here — an
+ * attachment only receives a provider's credentials when its own trust
+ * markers claim that provider (`trustedProviderForAttachment`), and download
+ * hosts are allowlisted per provider before any token is attached.
+ */
+export declare function trustedProviderDownloadRequest(attachment: JsonObject, input: {
+    trustedProvider?: string;
+    env: Record<string, string | undefined>;
+    fetch: typeof fetch;
+}): Promise<AttachmentDownloadRequest | undefined>;
+//# sourceMappingURL=trusted-attachments.d.ts.map

package/dist/trusted-attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-attachments.d.ts","sourceRoot":"","sources":["../src/trusted-attachments.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAKL,KAAK,yBAAyB,EAC/B,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;;;GAWG;AACH,wBAAsB,8BAA8B,CAClD,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE;IACL,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,KAAK,EAAE,OAAO,KAAK,CAAC;CACrB,GACA,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAgBhD"}