@brutalist/mcp 1.8.1 → 1.9.0

package/dist/cli-adapters/codex-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-adapter.js","sourceRoot":"","sources":["../../src/cli-adapters/codex-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,cAAc,CAAC;AAKpD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;GAeG;AACH,SAAS,sBAAsB,CAC7B,SAAmB,EACnB,GAAqB;IAErB,IAAI,OAAO,qBAAqB,KAAK,UAAU,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;YACtC,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,IAAI,CAAC,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,YAAY,GAAqB;IACrC,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,uBAAuB,CAAC;IACxE,YAAY,EAAE,SAAS;IACvB,QAAQ,EAAE,QAAQ;IAClB,aAAa,EAAE,CAAC,kBAAkB,EAAE,aAAa,CAAC;IAClD,aAAa,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,OAAO,IAAI,gRAAgR;IAC/T,UAAU,EAAE;QACV,YAAY,EAAE,iBAAiB;QAC/B,iBAAiB,EAAE,aAAa;QAChC,eAAe,EAAE;YACf,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,WAAW,EAAE,yBAAyB;SAC9C;KACF;CACF,CAAC;AAEF,MAAM,OAAO,YAAY;IACd,IAAI,GAAY,OAAO,CAAC;IAEjC,SAAS;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,YAAoB,EACpB,OAAwB,EACxB,aAA4B,EAC5B,SAAiC;QAQjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAEvE,aAAa;QACb,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,aAAa,GAAG,aAAa,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjF,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;YAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QAED,oBAAoB;QACpB,IAAI,iBAAqC,CAAC;QAE1C,IAAI,UAAU,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACpC,4DAA4D;YAC5D,iDAAiD;YACjD,4BAA4B;YAC5B,MAAM,cAAc,GAAG,sBAAsB,CAAC,OAAO,CAAC,UAAW,EAAE,GAAG,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;YAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEzC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;gBAE9B,wFAAwF;gBACxF,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;gBACpD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,iBAAkB,IAAI,YAAY,EAAE,CAAC,CAAC;gBAC7D,gEAAgE;gBAEhE,GAAG,CAAC,IAAI,CAAC,qCAAqC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YAClE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,UAAU,CAAC;YAChD,CAAC,CAAC,GAAG,YAAY,OAAO,UAAU,EAAE,CAAC;QAEvC,uBAAuB;QACvB,MAAM,GAAG,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QAE7B,uBAAuB;QACvB,MAAM,OAAO,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QACrD,CAAC;QAED,8EAA8E;QAC9E,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACxC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC1C,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,GAAG,CAAC,oBAAoB,GAAG,GAAG,CAAC;QAE/B,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;IAC1F,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,SAAiB,EAAE,IAAc,EAAE,GAAsB;QACpE,gDAAgD;QAChD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,wBAAwB,CAAC,SAAS,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;IACrE,CAAC;IAEO,wBAAwB,CAAC,UAAkB,EAAE,GAAqB;QACxE,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,GAAG,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACnD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAE5C,GAAG,CAAC,KAAK,CAAC,wCAAwC,MAAM,CAAC,MAAM,cAAc,CAAC,CAAC;QAE/E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBAAE,SAAS;YAE1D,MAAM,UAAU,GAAG,KAAsC,CAAC;YAE1D,GAAG,CAAC,KAAK,CAAC,+CAA+C,UAAU,CAAC,IAAI,eAAe,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAEhH,qFAAqF;YACrF,gEAAgE;YAChE,IAAI,UAAU,CAAC,IAAI,KAAK,gBAAgB,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBAC5D,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACrE,+BAA+B;oBAC/B,GAAG,CAAC,IAAI,CAAC,6DAA6D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;oBAC3G,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,CAAC;gBACD,wBAAwB;gBACxB,uCAAuC;gBACvC,iDAAiD;gBACjD,6BAA6B;YAC/B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,uCAAuC,aAAa,CAAC,MAAM,oBAAoB,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAC;QAC/G,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/cli-adapters/gemini-adapter.d.ts

@@ -0,0 +1,50 @@
+import type { StructuredLogger } from '../logger.js';
+import type { CLIAgentOptions } from '../cli-agents.js';
+import type { ModelResolver } from '../model-resolver.js';
+import type { CLIProvider, CLIBuilderConfig, CLIName } from './index.js';
+/**
+ * Frontier Gemini model chain.
+ *
+ * Ordered by preference: newest frontier preview → previous frontier preview
+ * → stable last-gen frontier. The orchestrator rotates through this chain
+ * on saturation failures (429 / "No capacity available"), trading "freshest
+ * capability" for "delivered response" as preview tiers are exhausted.
+ *
+ * Rationale: Gemini CLI's default Auto routing resolves to
+ * `gemini-2.5-flash-lite` for prompts the router classifies as "simple" —
+ * a classification our full adversarial verification protocol apparently
+ * does not escape. flash-lite lacks the capacity to maintain URL/quote
+ * source-provenance across 5+ citation verification loads, so it
+ * fabricates. Pinning the heaviest tier-3 model trades the Auto router's
+ * variable downselect for predictable frontier capacity; rotation handles
+ * the preview tier's variable availability.
+ *
+ * Probe-tested 2026-04-21 in Gemini CLI 0.30: the strings below are the
+ * only ones the CLI accepts for the tier-3 frontier. `gemini-3-pro`,
+ * `gemini-3.1-pro`, `gemini-3.0-pro`, `gemini-3-flash`, `gemini-3-pro-exp`,
+ * `gemini-3-pro-002`, and `gemini-pro-3` all return ModelNotFoundError.
+ * The `-preview` suffix is required for the 3.x tier.
+ *
+ * Override the whole chain with a single model via BRUTALIST_GEMINI_MODEL=...
+ * (disables rotation — operator takes responsibility for availability).
+ * Passing `models.gemini` on a tool call similarly disables rotation.
+ */
+export declare const GEMINI_FRONTIER_CHAIN: readonly string[];
+export declare class GeminiAdapter implements CLIProvider {
+    readonly name: CLIName;
+    getConfig(): CLIBuilderConfig;
+    buildCommand(userPrompt: string, systemPrompt: string, options: CLIAgentOptions, modelResolver: ModelResolver, secureEnv: Record<string, string>): Promise<{
+        command: string;
+        args: string[];
+        input: string;
+        env: Record<string, string>;
+        tempMcpConfigPath?: string;
+    }>;
+    /**
+     * Extract response text from Gemini --output-format json output.
+     * Parses a single JSON object and returns the `response` field.
+     */
+    decodeOutput(rawOutput: string, args: string[], log?: StructuredLogger): string;
+    private extractGeminiResponse;
+}
+//# sourceMappingURL=gemini-adapter.d.ts.map

package/dist/cli-adapters/gemini-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-adapter.d.ts","sourceRoot":"","sources":["../../src/cli-adapters/gemini-adapter.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAkEzE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAIjD,CAAC;AAIH,qBAAa,aAAc,YAAW,WAAW;IAC/C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAY;IAElC,SAAS,IAAI,gBAAgB;IAIvB,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,eAAe,EACxB,aAAa,EAAE,aAAa,EAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,OAAO,CAAC;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,EAAE,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IA6DF;;;OAGG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,gBAAgB,GAAG,MAAM;IAQ/E,OAAO,CAAC,qBAAqB;CA2B9B"}

package/dist/cli-adapters/gemini-adapter.js

@@ -0,0 +1,196 @@
+/**
+ * Gemini CLI Adapter
+ *
+ * Encapsulates Gemini-specific CLI configuration, command construction,
+ * and output decoding (JSON response field extraction).
+ *
+ * Pattern A (integrate-observability): logger is threaded via
+ * CLIAgentOptions.log (buildCommand) and the optional `log` parameter on
+ * decodeOutput. Falls back to the root logger singleton when absent so
+ * legacy test proxies keep working.
+ */
+import { logger as rootLogger } from '../logger.js';
+import { resolveServers, listRegisteredServers, ensureGeminiMCPServers, } from '../mcp-registry.js';
+/**
+ * Cycle 4 Task T19 (F10 — security): pre-filter caller-supplied MCP
+ * server names against the registry-known set BEFORE handing them to
+ * `resolveServers`. Unknown names must not reach
+ * `mcp-registry.ts:75` where they would be interpolated raw into the
+ * warning message. Emits only bounded metadata (counts) via the
+ * adapter's scoped logger — never the unknown-name strings
+ * themselves, which crossed the trust boundary from the MCP tool
+ * caller.
+ *
+ * Guarded via `typeof listRegisteredServers === 'function'` so that
+ * test harnesses which mock the mcp-registry module with a narrower
+ * surface (omitting listRegisteredServers) fall through the filter
+ * transparently. In production, `listRegisteredServers` is always a
+ * function, and the filter runs as intended.
+ */
+function sanitizeMcpServerNames(requested, log) {
+    if (typeof listRegisteredServers !== 'function') {
+        return requested;
+    }
+    const known = new Set(listRegisteredServers());
+    const kept = [];
+    let droppedCount = 0;
+    for (const name of requested) {
+        if (known.has(name)) {
+            kept.push(name);
+        }
+        else {
+            droppedCount++;
+        }
+    }
+    if (droppedCount > 0) {
+        log.warn('Unknown MCP servers skipped', {
+            unknownCount: droppedCount,
+            knownCount: kept.length,
+        });
+    }
+    return kept;
+}
+const GEMINI_CONFIG = {
+    command: 'gemini',
+    defaultArgs: ['--output-format', 'json'],
+    modelArgName: '--model',
+    envExtras: { TERM: 'dumb', NO_COLOR: '1', CI: 'true' },
+    mpcEnvCleanup: ['GEMINI_MCP_CONFIG', 'MCP_ENABLED'],
+    mcpSupport: {
+        configMethod: 'server-whitelist',
+        whitelistFlag: '--allowed-mcp-server-names',
+        writeProtection: {
+            method: 'approval-mode',
+            flag: '--approval-mode',
+            value: 'plan',
+        },
+    },
+};
+/**
+ * Frontier Gemini model chain.
+ *
+ * Ordered by preference: newest frontier preview → previous frontier preview
+ * → stable last-gen frontier. The orchestrator rotates through this chain
+ * on saturation failures (429 / "No capacity available"), trading "freshest
+ * capability" for "delivered response" as preview tiers are exhausted.
+ *
+ * Rationale: Gemini CLI's default Auto routing resolves to
+ * `gemini-2.5-flash-lite` for prompts the router classifies as "simple" —
+ * a classification our full adversarial verification protocol apparently
+ * does not escape. flash-lite lacks the capacity to maintain URL/quote
+ * source-provenance across 5+ citation verification loads, so it
+ * fabricates. Pinning the heaviest tier-3 model trades the Auto router's
+ * variable downselect for predictable frontier capacity; rotation handles
+ * the preview tier's variable availability.
+ *
+ * Probe-tested 2026-04-21 in Gemini CLI 0.30: the strings below are the
+ * only ones the CLI accepts for the tier-3 frontier. `gemini-3-pro`,
+ * `gemini-3.1-pro`, `gemini-3.0-pro`, `gemini-3-flash`, `gemini-3-pro-exp`,
+ * `gemini-3-pro-002`, and `gemini-pro-3` all return ModelNotFoundError.
+ * The `-preview` suffix is required for the 3.x tier.
+ *
+ * Override the whole chain with a single model via BRUTALIST_GEMINI_MODEL=...
+ * (disables rotation — operator takes responsibility for availability).
+ * Passing `models.gemini` on a tool call similarly disables rotation.
+ */
+export const GEMINI_FRONTIER_CHAIN = Object.freeze([
+    'gemini-3.1-pro-preview', // newest frontier, preview-tier (capacity-limited)
+    'gemini-3-pro-preview', // previous frontier, preview-tier
+    'gemini-2.5-pro', // stable last-gen frontier, ~always available
+]);
+const GEMINI_FRONTIER_MODEL = process.env.BRUTALIST_GEMINI_MODEL || GEMINI_FRONTIER_CHAIN[0];
+export class GeminiAdapter {
+    name = 'gemini';
+    getConfig() {
+        return GEMINI_CONFIG;
+    }
+    async buildCommand(userPrompt, systemPrompt, options, modelResolver, secureEnv) {
+        const log = options.log ?? rootLogger;
+        const config = GEMINI_CONFIG;
+        const mcpEnabled = options.mcpServers && options.mcpServers.length > 0;
+        // Build args
+        const args = [...config.defaultArgs];
+        // Priority: caller-specified > env override > frontier default.
+        // We always pass --model to prevent Gemini CLI's Auto router from
+        // silently downselecting to flash-lite under verification load.
+        const resolvedModel = modelResolver.resolveModel('gemini', options.models?.gemini) || GEMINI_FRONTIER_MODEL;
+        args.push(config.modelArgName, resolvedModel);
+        // MCP configuration
+        if (mcpEnabled && config.mcpSupport) {
+            // Pre-filter via sanitizeMcpServerNames — unknown names are
+            // dropped before they reach `mcp-registry.ts:75`
+            // (Cycle 4 Task T19 / F10).
+            const sanitizedNames = sanitizeMcpServerNames(options.mcpServers, log);
+            const servers = resolveServers(sanitizedNames);
+            const serverNames = Object.keys(servers);
+            if (serverNames.length > 0) {
+                const mcp = config.mcpSupport;
+                // Gemini: --allowed-mcp-server-names <names> --approval-mode plan
+                await ensureGeminiMCPServers(servers);
+                args.push(mcp.whitelistFlag, ...serverNames);
+                args.push(mcp.writeProtection.flag, mcp.writeProtection.value);
+                log.info(`\u{1F50C} MCP enabled for gemini: [${serverNames.join(', ')}]`);
+            }
+        }
+        // Build prompt -- no promptWrapper for Gemini
+        const combinedPrompt = `${systemPrompt}\n\n${userPrompt}`;
+        // Add CLI-specific env extras
+        const env = { ...secureEnv };
+        if (config.envExtras) {
+            Object.assign(env, config.envExtras);
+        }
+        // Add required API keys
+        const apiKeys = ['GOOGLE_API_KEY', 'GEMINI_API_KEY'];
+        for (const key of apiKeys) {
+            if (process.env[key])
+                env[key] = process.env[key];
+        }
+        // Clean up MPC env vars that could cause deadlock -- SKIP when MCP is enabled
+        if (!mcpEnabled && config.mpcEnvCleanup) {
+            for (const envVar of config.mpcEnvCleanup) {
+                delete env[envVar];
+            }
+        }
+        env.BRUTALIST_SUBPROCESS = '1';
+        return { command: config.command, args, input: combinedPrompt, env };
+    }
+    /**
+     * Extract response text from Gemini --output-format json output.
+     * Parses a single JSON object and returns the `response` field.
+     */
+    decodeOutput(rawOutput, args, log) {
+        // Only decode if Gemini was run with --output-format json
+        if (!(args.includes('--output-format') && args.includes('json'))) {
+            return rawOutput;
+        }
+        return this.extractGeminiResponse(rawOutput, log ?? rootLogger);
+    }
+    extractGeminiResponse(jsonOutput, log) {
+        if (!jsonOutput || !jsonOutput.trim()) {
+            log.debug('extractGeminiResponse: empty input');
+            return '';
+        }
+        try {
+            const parsed = JSON.parse(jsonOutput);
+            if (parsed.response && typeof parsed.response === 'string') {
+                log.info(`\u2705 extractGeminiResponse: extracted response with ${parsed.response.length} chars`);
+                return parsed.response;
+            }
+            log.warn('extractGeminiResponse: no response field in JSON output', {
+                keys: Object.keys(parsed)
+            });
+            return '';
+        }
+        catch (e) {
+            // Redacted: raw jsonOutput is never emitted — only its length plus
+            // the parse error reason. Prevents prompt / response leakage
+            // through log aggregators.
+            log.warn('extractGeminiResponse: failed to parse JSON, returning raw output', {
+                error: e instanceof Error ? e.message : String(e),
+                length: jsonOutput.length
+            });
+            return '';
+        }
+    }
+}
+//# sourceMappingURL=gemini-adapter.js.map

package/dist/cli-adapters/gemini-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-adapter.js","sourceRoot":"","sources":["../../src/cli-adapters/gemini-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,cAAc,CAAC;AAKpD,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;GAeG;AACH,SAAS,sBAAsB,CAC7B,SAAmB,EACnB,GAAqB;IAErB,IAAI,OAAO,qBAAqB,KAAK,UAAU,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;YACtC,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,IAAI,CAAC,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,aAAa,GAAqB;IACtC,OAAO,EAAE,QAAQ;IACjB,WAAW,EAAE,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACxC,YAAY,EAAE,SAAS;IACvB,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE;IACtD,aAAa,EAAE,CAAC,mBAAmB,EAAE,aAAa,CAAC;IACnD,UAAU,EAAE;QACV,YAAY,EAAE,kBAAkB;QAChC,aAAa,EAAE,4BAA4B;QAC3C,eAAe,EAAE;YACf,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,MAAM;SACd;KACF;CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACpE,wBAAwB,EAAG,mDAAmD;IAC9E,sBAAsB,EAAK,kCAAkC;IAC7D,gBAAgB,EAAW,8CAA8C;CAC1E,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;AAE7F,MAAM,OAAO,aAAa;IACf,IAAI,GAAY,QAAQ,CAAC;IAElC,SAAS;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,YAAoB,EACpB,OAAwB,EACxB,aAA4B,EAC5B,SAAiC;QAQjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC;QACtC,MAAM,MAAM,GAAG,aAAa,CAAC;QAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAEvE,aAAa;QACb,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QACrC,gEAAgE;QAChE,kEAAkE;QAClE,gEAAgE;QAChE,MAAM,aAAa,GAAG,aAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,qBAAqB,CAAC;QAC5G,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAE9C,oBAAoB;QACpB,IAAI,UAAU,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACpC,4DAA4D;YAC5D,iDAAiD;YACjD,4BAA4B;YAC5B,MAAM,cAAc,GAAG,sBAAsB,CAAC,OAAO,CAAC,UAAW,EAAE,GAAG,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;YAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEzC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;gBAE9B,kEAAkE;gBAClE,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAc,EAAE,GAAG,WAAW,CAAC,CAAC;gBAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAE/D,GAAG,CAAC,IAAI,CAAC,sCAAsC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,MAAM,cAAc,GAAG,GAAG,YAAY,OAAO,UAAU,EAAE,CAAC;QAE1D,8BAA8B;QAC9B,MAAM,GAAG,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAED,wBAAwB;QACxB,MAAM,OAAO,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QACrD,CAAC;QAED,8EAA8E;QAC9E,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACxC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC1C,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,GAAG,CAAC,oBAAoB,GAAG,GAAG,CAAC;QAE/B,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;IACvE,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,SAAiB,EAAE,IAAc,EAAE,GAAsB;QACpE,0DAA0D;QAC1D,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;IAClE,CAAC;IAEO,qBAAqB,CAAC,UAAkB,EAAE,GAAqB;QACrE,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,GAAG,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC3D,GAAG,CAAC,IAAI,CAAC,yDAAyD,MAAM,CAAC,QAAQ,CAAC,MAAM,QAAQ,CAAC,CAAC;gBAClG,OAAO,MAAM,CAAC,QAAQ,CAAC;YACzB,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,yDAAyD,EAAE;gBAClE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aAC1B,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,mEAAmE;YACnE,6DAA6D;YAC7D,2BAA2B;YAC3B,GAAG,CAAC,IAAI,CAAC,mEAAmE,EAAE;gBAC5E,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/cli-adapters/index.d.ts

@@ -0,0 +1,75 @@
+/**
+ * CLI Provider Adapter Interface and Registry
+ *
+ * Defines the CLIProvider contract that all per-provider adapters implement,
+ * and provides a factory for resolving providers by name.
+ */
+import type { CLIAgentOptions } from '../cli-agents.js';
+import type { ModelResolver } from '../model-resolver.js';
+import type { StructuredLogger } from '../logger.js';
+export { parseNDJSON } from './shared.js';
+export type CLIName = 'claude' | 'codex' | 'gemini';
+export interface MCPSupportConfig {
+    /** How this CLI receives MCP server configuration */
+    configMethod: 'flag-file' | 'config-override' | 'server-whitelist';
+    configFlag?: string;
+    strictFlag?: string;
+    configOverrideKey?: string;
+    whitelistFlag?: string;
+    /** Hard write-prevention mechanism native to this CLI */
+    writeProtection: {
+        method: 'disallowed-tools' | 'sandbox' | 'approval-mode';
+        flag: string;
+        value: string;
+    };
+}
+export interface CLIBuilderConfig {
+    command: string;
+    defaultArgs: string[];
+    modelArgName: string;
+    promptWrapper?: (system: string, user: string) => string;
+    envExtras?: Record<string, string>;
+    jsonFlag?: string;
+    streamingArgs?: (options: CLIAgentOptions) => string[];
+    mpcEnvCleanup?: string[];
+    mcpSupport?: MCPSupportConfig;
+}
+export interface CLIProvider {
+    readonly name: CLIName;
+    /** Return the static configuration for this provider */
+    getConfig(): CLIBuilderConfig;
+    /**
+     * Build CLI command args, environment, and input for this provider.
+     * The orchestrator calls this instead of the old buildCLICommand method.
+     */
+    buildCommand(userPrompt: string, systemPrompt: string, options: CLIAgentOptions, modelResolver: ModelResolver, secureEnv: Record<string, string>): Promise<{
+        command: string;
+        args: string[];
+        input: string;
+        env: Record<string, string>;
+        tempMcpConfigPath?: string;
+    }>;
+    /**
+     * Decode raw CLI output into clean text.
+     * Claude decodes stream-json NDJSON, Codex extracts agent_messages,
+     * Gemini extracts the response field from JSON.
+     *
+     * Pattern A: `log` is optional. When provided (passed from the
+     * orchestrator via `this.log?.forOperation('<cli>_spawn')`), adapter
+     * warnings/errors during decode emit with the scoped logger. When
+     * absent, adapters fall back to the root logger so the legacy test
+     * proxies (cli-agents.ts decodeClaudeStreamJson / extractCodexAgentMessage
+     * / extractGeminiResponse) keep working with no args.
+     */
+    decodeOutput(rawOutput: string, args: string[], log?: StructuredLogger): string;
+}
+/**
+ * Get a provider adapter by name.
+ * Throws if the provider name is not recognized.
+ */
+export declare function getProvider(name: CLIName): CLIProvider;
+/**
+ * Get all registered provider names.
+ */
+export declare function getProviderNames(): CLIName[];
+//# sourceMappingURL=index.d.ts.map

package/dist/cli-adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli-adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI1C,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,YAAY,EAAE,WAAW,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;IAGnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAG3B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,yDAAyD;IACzD,eAAe,EAAE;QACf,MAAM,EAAE,kBAAkB,GAAG,SAAS,GAAG,eAAe,CAAC;QACzD,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,MAAM,EAAE,CAAC;IACvD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAEvB,wDAAwD;IACxD,SAAS,IAAI,gBAAgB,CAAC;IAE9B;;;OAGG;IACH,YAAY,CACV,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,eAAe,EACxB,aAAa,EAAE,aAAa,EAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,OAAO,CAAC;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,EAAE,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC,CAAC;IAEH;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAAC;CACjF;AAcD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,CAMtD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,EAAE,CAE5C"}

package/dist/cli-adapters/index.js

@@ -0,0 +1,29 @@
+// Re-export shared utilities
+export { parseNDJSON } from './shared.js';
+// ── Provider Registry ──────────────────────────────────────────────────────
+import { ClaudeAdapter } from './claude-adapter.js';
+import { CodexAdapter } from './codex-adapter.js';
+import { GeminiAdapter } from './gemini-adapter.js';
+const providers = {
+    claude: new ClaudeAdapter(),
+    codex: new CodexAdapter(),
+    gemini: new GeminiAdapter(),
+};
+/**
+ * Get a provider adapter by name.
+ * Throws if the provider name is not recognized.
+ */
+export function getProvider(name) {
+    const provider = providers[name];
+    if (!provider) {
+        throw new Error(`Unknown CLI provider: ${name}`);
+    }
+    return provider;
+}
+/**
+ * Get all registered provider names.
+ */
+export function getProviderNames() {
+    return Object.keys(providers);
+}
+//# sourceMappingURL=index.js.map

package/dist/cli-adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli-adapters/index.ts"],"names":[],"mappings":"AAUA,6BAA6B;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAiF1C,8EAA8E;AAE9E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,SAAS,GAAiC;IAC9C,MAAM,EAAE,IAAI,aAAa,EAAE;IAC3B,KAAK,EAAE,IAAI,YAAY,EAAE;IACzB,MAAM,EAAE,IAAI,aAAa,EAAE;CAC5B,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAc,CAAC;AAC7C,CAAC"}

package/dist/cli-adapters/shared.d.ts

@@ -0,0 +1,12 @@
+import type { StructuredLogger } from '../logger.js';
+/**
+ * Parse NDJSON with proper JSON boundary detection.
+ * Handles JSON objects that contain embedded newlines without data loss.
+ *
+ * Known quirk: when two valid JSON objects are separated by non-JSON text
+ * (e.g., "NOT_JSON"), the second object is lost because the parser's start
+ * pointer stays past the first object and the slice for the second object
+ * includes the garbage prefix, causing JSON.parse to fail.
+ */
+export declare function parseNDJSON(input: string, log?: StructuredLogger): object[];
+//# sourceMappingURL=shared.d.ts.map

package/dist/cli-adapters/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/cli-adapters/shared.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAgF3E"}

package/dist/cli-adapters/shared.js

@@ -0,0 +1,99 @@
+/**
+ * Shared utilities for CLI provider adapters.
+ *
+ * parseNDJSON is the canonical NDJSON parser used by Claude and Codex decoders.
+ * It preserves the known second-object edge case (loss of second object when
+ * separated by non-JSON text) captured by characterization tests.
+ *
+ * Pattern A (integrate-observability): an optional StructuredLogger may be
+ * threaded in by callers that have a scoped logger available. When absent
+ * the root logger is used as the fallback — keeping the existing
+ * characterization-test call path (which supplies no logger) working
+ * unchanged.
+ */
+import { logger } from '../logger.js';
+/**
+ * Parse NDJSON with proper JSON boundary detection.
+ * Handles JSON objects that contain embedded newlines without data loss.
+ *
+ * Known quirk: when two valid JSON objects are separated by non-JSON text
+ * (e.g., "NOT_JSON"), the second object is lost because the parser's start
+ * pointer stays past the first object and the slice for the second object
+ * includes the garbage prefix, causing JSON.parse to fail.
+ */
+export function parseNDJSON(input, log) {
+    const emit = log ?? logger;
+    if (!input || !input.trim()) {
+        return [];
+    }
+    const results = [];
+    let depth = 0;
+    let inString = false;
+    let escape = false;
+    let start = 0;
+    for (let i = 0; i < input.length; i++) {
+        const char = input[i];
+        // Handle escape sequences
+        if (escape) {
+            escape = false;
+            continue;
+        }
+        if (char === '\\') {
+            escape = true;
+            continue;
+        }
+        // Track string boundaries
+        if (char === '"') {
+            inString = !inString;
+            continue;
+        }
+        // Only count braces/brackets outside of strings
+        if (inString)
+            continue;
+        // Track depth
+        if (char === '{' || char === '[') {
+            depth++;
+        }
+        else if (char === '}' || char === ']') {
+            depth--;
+            // When depth returns to 0, we've found a complete JSON object
+            if (depth === 0) {
+                const jsonStr = input.slice(start, i + 1).trim();
+                if (jsonStr) {
+                    try {
+                        const parsed = JSON.parse(jsonStr);
+                        results.push(parsed);
+                    }
+                    catch (e) {
+                        // Log unparseable segments (not silent). Redacted: the raw
+                        // segment text is never emitted — only its length plus the
+                        // parse error reason. This avoids leaking prompt / response
+                        // content through log aggregators.
+                        emit.warn(`Failed to parse JSON segment at position ${start}-${i + 1}:`, {
+                            length: jsonStr.length,
+                            error: e instanceof Error ? e.message : String(e)
+                        });
+                    }
+                }
+                // Move start pointer past this object and any whitespace
+                start = i + 1;
+                while (start < input.length && /\s/.test(input[start])) {
+                    start++;
+                }
+                i = start - 1; // Will be incremented by loop
+            }
+        }
+    }
+    // Warn about incomplete JSON at end of input. Redacted: emit length
+    // only — the raw tail text is never forwarded to the logger.
+    if (start < input.length) {
+        const remaining = input.slice(start).trim();
+        if (remaining) {
+            emit.warn(`Incomplete JSON at end of input:`, {
+                length: remaining.length
+            });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=shared.js.map

package/dist/cli-adapters/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/cli-adapters/shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAGtC;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,GAAsB;IAC/D,MAAM,IAAI,GAAqB,GAAG,IAAI,MAAM,CAAC;IAC7C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,0BAA0B;QAC1B,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,SAAS;QACX,CAAC;QAED,gDAAgD;QAChD,IAAI,QAAQ;YAAE,SAAS;QAEvB,cAAc;QACd,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxC,KAAK,EAAE,CAAC;YAER,8DAA8D;YAC9D,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBACnC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACvB,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,2DAA2D;wBAC3D,2DAA2D;wBAC3D,4DAA4D;wBAC5D,mCAAmC;wBACnC,IAAI,CAAC,IAAI,CAAC,4CAA4C,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;4BACvE,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;yBAClD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,yDAAyD;gBACzD,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBACvD,KAAK,EAAE,CAAC;gBACV,CAAC;gBACD,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,8BAA8B;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,6DAA6D;IAC7D,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC5C,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli-agents.d.ts

@@ -1,6 +1,8 @@
+import type { StructuredLogger } from './logger.js';
 import { CLIAgentResponse } from './types/brutalist.js';
 import { ModelResolver } from './model-resolver.js';
-export type BrutalistPromptType = 'code' | 'codebase' | 'architecture' | 'idea' | 'research' | 'data' | 'security' | 'product' | 'infrastructure' | 'debate' | 'dependencies' | 'fileStructure' | 'gitHistory' | 'testCoverage' | 'design';
+import type { MetricsRegistry } from './metrics/index.js';
+export type BrutalistPromptType = 'code' | 'codebase' | 'architecture' | 'idea' | 'research' | 'data' | 'security' | 'product' | 'infrastructure' | 'debate' | 'dependencies' | 'fileStructure' | 'gitHistory' | 'testCoverage' | 'design' | 'legal';
 export declare const CLAUDE_ALIASES: readonly ["opus", "sonnet", "haiku"];
 export interface CLIAgentOptions {
     workingDirectory?: string;
@@ -19,6 +21,27 @@ export interface CLIAgentOptions {
     requestId?: string;
     debateMode?: boolean;
     mcpServers?: string[];
+    /**
+     * Optional scoped logger threaded into provider.buildCommand / decodeOutput.
+     * When present, adapters emit via this logger (narrowed with forOperation)
+     * instead of the root logger import. Absent → fall back to root logger.
+     * Pattern A per phase.md: preserves stateless adapter singletons in
+     * cli-adapters/index.ts.
+     */
+    log?: StructuredLogger;
+}
+/**
+ * Constructor-deps bag for CLIAgentOrchestrator.
+ *
+ * All fields optional — characterization tests construct
+ * `new CLIAgentOrchestrator()` with no args. In production the
+ * composition root passes the full set; in tests, instrumentation is a
+ * no-op and `this.log` falls back to the root logger via emitLog().
+ */
+export interface CLIAgentOrchestratorDeps {
+    modelResolver?: ModelResolver;
+    metrics?: MetricsRegistry;
+    log?: StructuredLogger;
 }
 export interface StreamingEvent {
     type: 'agent_start' | 'agent_progress' | 'agent_complete' | 'agent_error';
@@ -41,12 +64,37 @@ export declare class CLIAgentOrchestrator {
     private runningCLIs;
     private readonly MAX_CONCURRENT_CLIS;
     readonly modelResolver: ModelResolver;
+    private readonly metrics?;
+    private readonly log?;
     private streamingBuffers;
     private readonly STREAMING_FLUSH_INTERVAL;
     private readonly MAX_CHUNK_SIZE;
     private readonly HEARTBEAT_INTERVAL;
     private lastHeartbeat;
-    constructor(modelResolver?: ModelResolver);
+    /**
+     * Accepts a deps bag OR a bare `ModelResolver` (legacy positional form)
+     * OR nothing (characterization-test harnesses). The `instanceof ModelResolver`
+     * branch preserves the pre-observability signature.
+     */
+    constructor(deps?: CLIAgentOrchestratorDeps | ModelResolver);
+    /**
+     * Return the injected scoped logger if present, otherwise the root
+     * logger singleton. Keeps un-injected (test) instances working while
+     * scoping production emissions with `module='cli-orchestrator'`.
+     */
+    private emitLog;
+    /**
+     * Heuristic for classifying a spawnAsync error as a timeout.
+     * Centralized so all outcome paths share the same detection logic.
+     *
+     * Matches any of:
+     *   - execError.code === 'ETIMEDOUT' (Node's timeout code on some paths)
+     *   - execError.killed === true (child_process kill after SIGTERM/SIGKILL
+     *     escalation when the timeout timer fired — see spawnAsync timer block)
+     *   - execError.message matching /timed out|timeout/i (spawnAsync rejects
+     *     with "Command timed out after ..." on timer expiry)
+     */
+    private isTimeoutError;
     private parseNDJSON;
     private decodeClaudeStreamJson;
     private extractCodexAgentMessage;
@@ -60,6 +108,20 @@ export declare class CLIAgentOrchestrator {
     executeCodex(userPrompt: string, systemPromptSpec: string, options?: CLIAgentOptions): Promise<CLIAgentResponse>;
     executeGemini(userPrompt: string, systemPromptSpec: string, options?: CLIAgentOptions): Promise<CLIAgentResponse>;
     executeSingleCLI(cli: 'claude' | 'codex' | 'gemini', userPrompt: string, systemPromptSpec: string, options?: CLIAgentOptions): Promise<CLIAgentResponse>;
+    /**
+     * Gemini frontier rotation - iterate through GEMINI_FRONTIER_CHAIN on
+     * saturation failures.
+     *
+     * Only active when neither caller nor operator has chosen a model. Each
+     * attempt injects the model via options.models.gemini. Per-attempt
+     * saturation is detected via the existing quota-pattern detection in
+     * _executeCLI - saturation produces success=false with an error matching
+     * /\b429\b/ or quota-family patterns. On non-saturation failure,
+     * rotation stops immediately (a different model will not fix prompt
+     * errors, subprocess crashes, or auth failures). On chain exhaustion,
+     * the last failing response is returned.
+     */
+    private _executeGeminiWithRotation;
     private waitForAvailableSlot;
     executeCLIAgents(cliAgents: string[], systemPrompt: string, userPrompt: string, options?: CLIAgentOptions): Promise<CLIAgentResponse[]>;
     executeCLIAgent(agent: string, systemPrompt: string, userPrompt: string, options?: CLIAgentOptions): Promise<CLIAgentResponse>;

package/dist/cli-agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-agents.d.ts","sourceRoot":"","sources":["../src/cli-agents.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAgBpD,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,UAAU,GACV,cAAc,GACd,MAAM,GACN,UAAU,GACV,MAAM,GACN,UAAU,GACV,SAAS,GACT,gBAAgB,GAChB,QAAQ,GACR,cAAc,GACd,eAAe,GACf,YAAY,GACZ,cAAc,GACd,QAAQ,CAAC;AAiBb,eAAO,MAAM,cAAc,sCAAuC,CAAC;AAqbnE,MAAM,WAAW,eAAe;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC;IACzC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACnD,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,aAAa,CAAC;IAC1E,KAAK,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,CAAC,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC;CAClD;AA4FD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,cAAc,CAAW;IACjC,OAAO,CAAC,iBAAiB,CAAiB;IAC1C,OAAO,CAAC,UAAU,CAAqC;IACvD,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAU;IACxC,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAuB;IAG3D,SAAgB,aAAa,EAAE,aAAa,CAAC;IAG7C,OAAO,CAAC,gBAAgB,CAA8D;IACtF,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAO;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAC3C,OAAO,CAAC,aAAa,CAAK;gBAEd,aAAa,CAAC,EAAE,aAAa;IAoBzC,OAAO,CAAC,WAAW;IAkFnB,OAAO,CAAC,sBAAsB;IAiE9B,OAAO,CAAC,wBAAwB;IAuChC,OAAO,CAAC,qBAAqB;IAyB7B,OAAO,CAAC,2BAA2B;YA4DrB,eAAe;IA6GvB,gBAAgB,IAAI,OAAO,CAAC,UAAU,CAAC;IAuC7C,eAAe,CACb,YAAY,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,EAC5C,YAAY,CAAC,EAAE,mBAAmB,GACjC,QAAQ,GAAG,OAAO,GAAG,QAAQ;YAwClB,WAAW;IA+NnB,iBAAiB,CACrB,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAUtB,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAUtB,aAAa,CACjB,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAUtB,gBAAgB,CACpB,GAAG,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,EAClC,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC;YA2Bd,oBAAoB;IAS5B,gBAAgB,CACpB,SAAS,EAAE,MAAM,EAAE,EACnB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAoCxB,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAQtB,wBAAwB,CAC5B,YAAY,EAAE,mBAAmB,EACjC,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,MAAM,EACxB,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,EAAE,CAAC;IA2F9B,2BAA2B,CAAC,SAAS,EAAE,gBAAgB,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM;IA6BxF,OAAO,CAAC,mBAAmB;CA8B5B"}
+{"version":3,"file":"cli-agents.d.ts","sourceRoot":"","sources":["../src/cli-agents.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAOpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AA0B1D,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,UAAU,GACV,cAAc,GACd,MAAM,GACN,UAAU,GACV,MAAM,GACN,UAAU,GACV,SAAS,GACT,gBAAgB,GAChB,QAAQ,GACR,cAAc,GACd,eAAe,GACf,YAAY,GACZ,cAAc,GACd,QAAQ,GACR,OAAO,CAAC;AAiBZ,eAAO,MAAM,cAAc,sCAAuC,CAAC;AA0cnE,MAAM,WAAW,eAAe;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC;IACzC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACnD,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,gBAAgB,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,GAAG,CAAC,EAAE,gBAAgB,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,aAAa,CAAC;IAC1E,KAAK,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,CAAC,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC;CAClD;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,cAAc,CAAW;IACjC,OAAO,CAAC,iBAAiB,CAAiB;IAC1C,OAAO,CAAC,UAAU,CAAqC;IACvD,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAU;IACxC,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAuB;IAG3D,SAAgB,aAAa,EAAE,aAAa,CAAC;IAM7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAmB;IAGxC,OAAO,CAAC,gBAAgB,CAA8D;IACtF,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAO;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAC3C,OAAO,CAAC,aAAa,CAAK;IAE1B;;;;OAIG;gBACS,IAAI,CAAC,EAAE,wBAAwB,GAAG,aAAa;IA2B3D;;;;OAIG;IACH,OAAO,CAAC,OAAO;IAIf;;;;;;;;;;OAUG;IACH,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,sBAAsB;IAK9B,OAAO,CAAC,wBAAwB;IAKhC,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,2BAA2B;YA6DrB,eAAe;IAqBvB,gBAAgB,IAAI,OAAO,CAAC,UAAU,CAAC;IAyC7C,eAAe,CACb,YAAY,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,EAC5C,YAAY,CAAC,EAAE,mBAAmB,GACjC,QAAQ,GAAG,OAAO,GAAG,QAAQ;YAwClB,WAAW;IA+UnB,iBAAiB,CACrB,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAUtB,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAUtB,aAAa,CACjB,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAUtB,gBAAgB,CACpB,GAAG,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,EAClC,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAkC5B;;;;;;;;;;;;OAYG;YACW,0BAA0B;YAmD1B,oBAAoB;IAS5B,gBAAgB,CACpB,SAAS,EAAE,MAAM,EAAE,EACnB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAoCxB,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAQtB,wBAAwB,CAC5B,YAAY,EAAE,mBAAmB,EACjC,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,MAAM,EACxB,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,EAAE,CAAC;IA2F9B,2BAA2B,CAAC,SAAS,EAAE,gBAAgB,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM;IA6BxF,OAAO,CAAC,mBAAmB;CA8B5B"}