@cluesmith/codev 3.3.5 → 3.3.7

package/dist/agent-farm/lib/builder-lookup.d.ts

@@ -14,9 +14,10 @@
  */
 import type { Builder } from '../types.js';
 /**
- * Find a builder by issue number. Local state first, then Tower fallback.
+ * Find a builder by issue number or tracker key. Local state first, then Tower
+ * fallback. Keys match case-insensitively (role ids are lower-cased).
  */
-export declare function findBuilderByIssue(issueNumber: number): Builder | null;
+export declare function findBuilderByIssue(issueNumber: number | string): Builder | null;
 /**
  * Find a builder by ID. Tries an exact getBuilder(id) lookup first, then
  * resolveAgentName against local builders, then resolveAgentName against

package/dist/agent-farm/lib/builder-lookup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builder-lookup.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/builder-lookup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAQ3C;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CActE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CA4B1D"}
+{"version":3,"file":"builder-lookup.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/builder-lookup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAS3C;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAW/E;AAkBD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CA4B1D"}

package/dist/agent-farm/lib/builder-lookup.js

@@ -18,24 +18,39 @@ import { getConfig } from '../utils/config.js';
 import { normalizeWorkspacePath } from '../servers/tower-utils.js';
 import { getGlobalDb } from '../db/index.js';
 import { resolveAgentName } from '@cluesmith/codev-sdk/agent-names';
+import { ISSUE_KEY_SOURCE, canonicalIssueId, sameIssueId } from '../../lib/issue-id.js';
 /**
- * Find a builder by issue number. Local state first, then Tower fallback.
+ * Find a builder by issue number or tracker key. Local state first, then Tower
+ * fallback. Keys match case-insensitively (role ids are lower-cased).
  */
 export function findBuilderByIssue(issueNumber) {
     // Issue #1118: scope to this workspace (matches loadTowerBuilderRows below),
     // now that builders from every workspace share one global.db.
     const workspaceRoot = normalizeWorkspacePath(getConfig().workspaceRoot);
-    const local = getBuilders(workspaceRoot).find((b) => b.issueNumber === issueNumber);
+    const local = getBuilders(workspaceRoot).find((b) => sameIssueId(b.issueNumber, issueNumber));
     if (local)
         return local;
     const rows = loadTowerBuilderRows();
-    const stripped = String(issueNumber);
-    const match = rows.find((r) => {
-        const m = r.role_id.match(/-bugfix-(\d+)/);
-        return m !== null && m[1] === stripped;
-    });
+    const wanted = String(issueNumber).toLowerCase();
+    const match = rows.find((r) => bugfixIssueOfRole(r.role_id) === wanted);
     return match ? towerRowToBuilder(match) : null;
 }
+/** The issue segment of a bugfix role id (`builder-bugfix-42`, `builder-bugfix-eng-12`), lower-cased. */
+function bugfixIssueOfRole(roleId) {
+    const m = roleId.match(BUGFIX_ROLE_ISSUE);
+    if (!m)
+        return null;
+    return m[1].toLowerCase();
+}
+const BUGFIX_ROLE_ISSUE = new RegExp(`-bugfix-(\\d+|${ISSUE_KEY_SOURCE})`, 'i');
+/** A role id's issue segment as a Builder issue: numbers as numbers, keys canonicalized. */
+function issueFromRoleSegment(segment) {
+    if (segment === null)
+        return undefined;
+    if (/^\d+$/.test(segment))
+        return Number(segment);
+    return canonicalIssueId(segment);
+}
 /**
  * Find a builder by ID. Tries an exact getBuilder(id) lookup first, then
  * resolveAgentName against local builders, then resolveAgentName against
@@ -94,7 +109,7 @@ function loadTowerBuilderRows() {
 }
 function towerRowToBuilder(row) {
     const isBugfix = row.role_id.includes('-bugfix-');
-    const issueMatch = isBugfix ? row.role_id.match(/-bugfix-(\d+)/) : null;
+    const issue = isBugfix ? bugfixIssueOfRole(row.role_id) : null;
     return {
         id: row.role_id,
         name: row.label ?? row.role_id,
@@ -103,7 +118,7 @@ function towerRowToBuilder(row) {
         worktree: row.cwd ?? '',
         branch: '',
         type: isBugfix ? 'bugfix' : 'spec',
-        issueNumber: issueMatch ? Number(issueMatch[1]) : undefined,
+        issueNumber: issueFromRoleSegment(issue),
     };
 }
 //# sourceMappingURL=builder-lookup.js.map

package/dist/agent-farm/lib/builder-lookup.js.map

@@ -1 +1 @@
-{"version":3,"file":"builder-lookup.js","sourceRoot":"","sources":["../../../src/agent-farm/lib/builder-lookup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,aAAa,GAAG,sBAAsB,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;IACpF,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC3C,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,uEAAuE;IACvE,4CAA4C;IAC5C,MAAM,aAAa,GAAG,sBAAsB,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IAC5C,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACxC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,wCAAwC,CAAC,CAAC;QAClF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AASD,SAAS,oBAAoB;IAC3B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnE,OAAO,EAAE,CAAC,OAAO,CAAC;;;;;;;KAOjB,CAAC,CAAC,GAAG,CAAC,aAAa,CAAsB,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAoB;IAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,OAAO;QACf,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO;QAC9B,MAAM,EAAE,cAAc;QACtB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;QACvB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QAClC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;KAC5D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"builder-lookup.js","sourceRoot":"","sources":["../../../src/agent-farm/lib/builder-lookup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAExF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAA4B;IAC7D,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,aAAa,GAAG,sBAAsB,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9F,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,yGAAyG;AACzG,SAAS,iBAAiB,CAAC,MAAc;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,iBAAiB,gBAAgB,GAAG,EAAE,GAAG,CAAC,CAAC;AAEhF,4FAA4F;AAC5F,SAAS,oBAAoB,CAAC,OAAsB;IAClD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,uEAAuE;IACvE,4CAA4C;IAC5C,MAAM,aAAa,GAAG,sBAAsB,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IAC5C,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACxC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,wCAAwC,CAAC,CAAC;QAClF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AASD,SAAS,oBAAoB;IAC3B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnE,OAAO,EAAE,CAAC,OAAO,CAAC;;;;;;;KAOjB,CAAC,CAAC,GAAG,CAAC,aAAa,CAAsB,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAoB;IAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,OAAO;QACf,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO;QAC9B,MAAM,EAAE,cAAc;QACtB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;QACvB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QAClC,WAAW,EAAE,oBAAoB,CAAC,KAAK,CAAC;KACzC,CAAC;AACJ,CAAC"}

package/dist/agent-farm/lib/ide-extensions.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Tower-owned IDE extensions directory and the embedded sidebar install (Spec 1789).
+ *
+ * The codev package ships the sidebar vsix in `ide-extension/`. Before Tower
+ * spawns a Codev IDE server it makes sure `~/.agent-farm/ide-extensions` holds
+ * that sidebar at exactly the embedded version, using the server's own CLI
+ * (`--install-extension <vsix> --force --extensions-dir <dir>`). Only the
+ * sidebar is touched: other extensions in the directory are left alone.
+ */
+import { type LogFn } from './ide-version.js';
+/**
+ * Embedded sidebar layout inside the installed package. Mirrors
+ * `scripts/ide-extension-manifest.mjs`, which writes it at build time but is
+ * not shipped; a parity test keeps the two in step.
+ */
+export declare const IDE_EXTENSION_DIR = "ide-extension";
+export declare const IDE_EXTENSION_VSIX = "codev-vscode.vsix";
+export declare const IDE_EXTENSION_MANIFEST = "manifest.json";
+/** Directory name of the Tower-owned extensions directory under AGENT_FARM_DIR. */
+export declare const IDE_EXTENSIONS_DIRNAME = "ide-extensions";
+export declare function getIdeExtensionsDir(): string;
+/** Thrown when the extensions directory exists but is unsafe to use. */
+export declare class IdeExtensionsDirError extends Error {
+    constructor(dir: string, problem: string);
+}
+export interface EnsureIdeExtensionsDirOptions {
+    /** Expected owner; tests override it because they cannot chown. */
+    uid?: number;
+}
+/**
+ * Create the extensions directory owner-only (0700), or validate an existing
+ * one: it must be a real directory, not a symlink, owned by the current user.
+ */
+export declare function ensureIdeExtensionsDir(dir: string, opts?: EnsureIdeExtensionsDirOptions): void;
+export interface EmbeddedSidebar {
+    vsixPath: string;
+    id: string;
+    version: string;
+}
+/**
+ * The sidebar vsix embedded in the installed package, or null when the vsix or
+ * its manifest is missing or unreadable (a source checkout without a package build).
+ */
+export declare function locateEmbeddedSidebar(embeddedDir?: string): EmbeddedSidebar | null;
+/**
+ * The version of extension `id` listed in the directory's `extensions.json`,
+ * matching the identifier case-insensitively as VS Code does. Null when the
+ * index is absent, unreadable or does not list the extension.
+ */
+export declare function readInstalledExtensionVersion(dir: string, id: string): string | null;
+/** Thrown when the server CLI fails to install the embedded sidebar. */
+export declare class IdeSidebarInstallError extends Error {
+    constructor(message: string);
+}
+export interface EnsureSidebarInstalledOptions {
+    /** Defaults to `getIdeExtensionsDir()`. */
+    extensionsDir?: string;
+    /** Directory holding the embedded vsix and manifest; defaults to the installed package's. */
+    embeddedDir?: string;
+    timeoutMs?: number;
+    env?: Record<string, string>;
+    log?: LogFn;
+    /** Passed through to `ensureIdeExtensionsDir`. */
+    uid?: number;
+}
+export interface SidebarInstallResult {
+    outcome: 'skipped' | 'installed' | 'missing-vsix';
+    /** The embedded sidebar version; null when the vsix is missing. */
+    version: string | null;
+    /** The version indexed before this call; null when none was. */
+    previousVersion: string | null;
+}
+/**
+ * Make the extensions directory hold the embedded sidebar at exactly the
+ * embedded version. Skips without a subprocess when that version is already
+ * indexed; otherwise installs with `--force` so an older or newer copy is
+ * replaced. Throws an `IdeSidebarInstallError` when the install fails, times
+ * out, or leaves the index without the embedded version. A missing embedded
+ * vsix is only a warning: the IDE works without the sidebar.
+ */
+export declare function ensureSidebarInstalled(serverPath: string, opts?: EnsureSidebarInstalledOptions): Promise<SidebarInstallResult>;
+//# sourceMappingURL=ide-extensions.d.ts.map

package/dist/agent-farm/lib/ide-extensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ide-extensions.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/ide-extensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EAGL,KAAK,KAAK,EAGX,MAAM,kBAAkB,CAAC;AAE1B;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AACjD,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AACtD,eAAO,MAAM,sBAAsB,kBAAkB,CAAC;AAEtD,mFAAmF;AACnF,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAUvD,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wEAAwE;AACxE,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAIzC;AAED,MAAM,WAAW,6BAA6B;IAC5C,mEAAmE;IACnE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,6BAAkC,GAAG,IAAI,CAmBlG;AAUD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,GAAE,MAA6B,GAAG,eAAe,GAAG,IAAI,CAcxG;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiBpF;AAED,wEAAwE;AACxE,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAOD,MAAM,WAAW,6BAA6B;IAC5C,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,KAAK,CAAC;IACZ,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,SAAS,GAAG,WAAW,GAAG,cAAc,CAAC;IAClD,mEAAmE;IACnE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,gEAAgE;IAChE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAMD;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,6BAAkC,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAkC/B"}

package/dist/agent-farm/lib/ide-extensions.js

@@ -0,0 +1,179 @@
+/**
+ * Tower-owned IDE extensions directory and the embedded sidebar install (Spec 1789).
+ *
+ * The codev package ships the sidebar vsix in `ide-extension/`. Before Tower
+ * spawns a Codev IDE server it makes sure `~/.agent-farm/ide-extensions` holds
+ * that sidebar at exactly the embedded version, using the server's own CLI
+ * (`--install-extension <vsix> --force --extensions-dir <dir>`). Only the
+ * sidebar is touched: other extensions in the directory are left alone.
+ */
+import { existsSync, lstatSync, mkdirSync, chmodSync, readFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { AGENT_FARM_DIR } from './tower-client.js';
+import { IDE_INSTALL_TIMEOUT_MS, IdeServerCommandError, buildIdeServerEnv, runIdeServerCommand, } from './ide-version.js';
+/**
+ * Embedded sidebar layout inside the installed package. Mirrors
+ * `scripts/ide-extension-manifest.mjs`, which writes it at build time but is
+ * not shipped; a parity test keeps the two in step.
+ */
+export const IDE_EXTENSION_DIR = 'ide-extension';
+export const IDE_EXTENSION_VSIX = 'codev-vscode.vsix';
+export const IDE_EXTENSION_MANIFEST = 'manifest.json';
+/** Directory name of the Tower-owned extensions directory under AGENT_FARM_DIR. */
+export const IDE_EXTENSIONS_DIRNAME = 'ide-extensions';
+/** VS Code's index of the extensions installed in an extensions directory. */
+const EXTENSIONS_INDEX = 'extensions.json';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+/** The installed package's `ide-extension/` (the same layout `dashboard-dist` uses). */
+const DEFAULT_EMBEDDED_DIR = resolve(__dirname, '../../..', IDE_EXTENSION_DIR);
+export function getIdeExtensionsDir() {
+    return resolve(AGENT_FARM_DIR, IDE_EXTENSIONS_DIRNAME);
+}
+/** Thrown when the extensions directory exists but is unsafe to use. */
+export class IdeExtensionsDirError extends Error {
+    constructor(dir, problem) {
+        super(`IDE extensions directory ${dir} ${problem}; remove or fix it and retry`);
+        this.name = 'IdeExtensionsDirError';
+    }
+}
+/**
+ * Create the extensions directory owner-only (0700), or validate an existing
+ * one: it must be a real directory, not a symlink, owned by the current user.
+ */
+export function ensureIdeExtensionsDir(dir, opts = {}) {
+    if (!existsSync(dir) && !isDanglingSymlink(dir)) {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        // mkdir's mode is filtered by the umask; set it explicitly.
+        chmodSync(dir, 0o700);
+        return;
+    }
+    const stat = lstatSync(dir);
+    if (stat.isSymbolicLink()) {
+        throw new IdeExtensionsDirError(dir, 'is a symlink');
+    }
+    if (!stat.isDirectory()) {
+        throw new IdeExtensionsDirError(dir, 'is not a directory');
+    }
+    const uid = opts.uid ?? process.getuid?.();
+    if (uid !== undefined && stat.uid !== uid) {
+        throw new IdeExtensionsDirError(dir, `is owned by uid ${stat.uid}, not the current user (uid ${uid})`);
+    }
+}
+function isDanglingSymlink(path) {
+    try {
+        return lstatSync(path).isSymbolicLink();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The sidebar vsix embedded in the installed package, or null when the vsix or
+ * its manifest is missing or unreadable (a source checkout without a package build).
+ */
+export function locateEmbeddedSidebar(embeddedDir = DEFAULT_EMBEDDED_DIR) {
+    const vsixPath = resolve(embeddedDir, IDE_EXTENSION_VSIX);
+    if (!existsSync(vsixPath))
+        return null;
+    let manifest;
+    try {
+        manifest = JSON.parse(readFileSync(resolve(embeddedDir, IDE_EXTENSION_MANIFEST), 'utf8'));
+    }
+    catch {
+        return null;
+    }
+    if (typeof manifest !== 'object' || manifest === null)
+        return null;
+    const { id, version } = manifest;
+    if (typeof id !== 'string' || id === '' || typeof version !== 'string' || version === '')
+        return null;
+    return { vsixPath, id, version };
+}
+/**
+ * The version of extension `id` listed in the directory's `extensions.json`,
+ * matching the identifier case-insensitively as VS Code does. Null when the
+ * index is absent, unreadable or does not list the extension.
+ */
+export function readInstalledExtensionVersion(dir, id) {
+    let index;
+    try {
+        index = JSON.parse(readFileSync(resolve(dir, EXTENSIONS_INDEX), 'utf8'));
+    }
+    catch {
+        return null;
+    }
+    if (!Array.isArray(index))
+        return null;
+    const wanted = id.toLowerCase();
+    for (const entry of index) {
+        if (typeof entry !== 'object' || entry === null)
+            continue;
+        const { identifier, version } = entry;
+        if (typeof identifier?.id !== 'string' || identifier.id.toLowerCase() !== wanted)
+            continue;
+        if (typeof version === 'string')
+            return version;
+    }
+    return null;
+}
+/** Thrown when the server CLI fails to install the embedded sidebar. */
+export class IdeSidebarInstallError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'IdeSidebarInstallError';
+    }
+}
+/** Likely cause of a refused install, appended only when the CLI itself failed. */
+const BUILT_IN_SIDEBAR_HINT = 'The usual cause is a Codev IDE server that bundles codev-vscode as a built-in extension, ' +
+    'which refuses the install; use a server package that does not ship the sidebar';
+function defaultLog(level, message) {
+    console.warn(`[${level}] ${message}`);
+}
+/**
+ * Make the extensions directory hold the embedded sidebar at exactly the
+ * embedded version. Skips without a subprocess when that version is already
+ * indexed; otherwise installs with `--force` so an older or newer copy is
+ * replaced. Throws an `IdeSidebarInstallError` when the install fails, times
+ * out, or leaves the index without the embedded version. A missing embedded
+ * vsix is only a warning: the IDE works without the sidebar.
+ */
+export async function ensureSidebarInstalled(serverPath, opts = {}) {
+    const dir = opts.extensionsDir ?? getIdeExtensionsDir();
+    const log = opts.log ?? defaultLog;
+    ensureIdeExtensionsDir(dir, { uid: opts.uid });
+    const sidebar = locateEmbeddedSidebar(opts.embeddedDir);
+    if (sidebar === null) {
+        log('WARN', 'Embedded Codev sidebar not found (run the package build); the IDE will start without it');
+        return { outcome: 'missing-vsix', version: null, previousVersion: null };
+    }
+    const previousVersion = readInstalledExtensionVersion(dir, sidebar.id);
+    if (previousVersion === sidebar.version) {
+        return { outcome: 'skipped', version: sidebar.version, previousVersion };
+    }
+    const timeoutMs = opts.timeoutMs ?? IDE_INSTALL_TIMEOUT_MS;
+    const args = ['--install-extension', sidebar.vsixPath, '--force', '--extensions-dir', dir];
+    log('INFO', `Installing Codev sidebar ${sidebar.version} into ${dir} (indexed: ${previousVersion ?? 'none'})`);
+    try {
+        await runIdeServerCommand(serverPath, args, { timeoutMs, env: opts.env ?? buildIdeServerEnv() });
+    }
+    catch (failure) {
+        if (!(failure instanceof IdeServerCommandError))
+            throw failure;
+        throw new IdeSidebarInstallError(describeInstallFailure(serverPath, sidebar, failure));
+    }
+    const installedVersion = readInstalledExtensionVersion(dir, sidebar.id);
+    if (installedVersion !== sidebar.version) {
+        throw new IdeSidebarInstallError(`IDE server at ${serverPath} reported success installing the Codev sidebar ${sidebar.version}, ` +
+            `but ${dir} lists ${installedVersion ?? 'no version'}`);
+    }
+    return { outcome: 'installed', version: sidebar.version, previousVersion };
+}
+function describeInstallFailure(serverPath, sidebar, failure) {
+    let detail = `IDE server at ${serverPath} failed to install the Codev sidebar ${sidebar.version} (${failure.message})`;
+    if (failure.stderr !== '') {
+        detail = `${detail}: ${failure.stderr}`;
+    }
+    return `${detail}. ${BUILT_IN_SIDEBAR_HINT}`;
+}
+//# sourceMappingURL=ide-extensions.js.map

package/dist/agent-farm/lib/ide-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ide-extensions.js","sourceRoot":"","sources":["../../../src/agent-farm/lib/ide-extensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EAErB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AACtD,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAEtD,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAEvD,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,wFAAwF;AACxF,MAAM,oBAAoB,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;AAE/E,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;AACzD,CAAC;AAED,wEAAwE;AACxE,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,GAAW,EAAE,OAAe;QACtC,KAAK,CAAC,4BAA4B,GAAG,IAAI,OAAO,8BAA8B,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAOD;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,OAAsC,EAAE;IAC1F,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,4DAA4D;QAC5D,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3C,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,IAAI,CAAC,GAAG,+BAA+B,GAAG,GAAG,CAAC,CAAC;IACzG,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,cAAsB,oBAAoB;IAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,QAAmC,CAAC;IAC5D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACtG,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAW,EAAE,EAAU;IACnE,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1D,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,KAA6D,CAAC;QAC9F,IAAI,OAAO,UAAU,EAAE,EAAE,KAAK,QAAQ,IAAI,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,SAAS;QAC3F,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,qBAAqB,GACzB,2FAA2F;IAC3F,gFAAgF,CAAC;AAsBnF,SAAS,UAAU,CAAC,KAAgC,EAAE,OAAe;IACnE,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkB,EAClB,OAAsC,EAAE;IAExC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,IAAI,mBAAmB,EAAE,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,sBAAsB,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,EAAE,yFAAyF,CAAC,CAAC;QACvG,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,eAAe,GAAG,6BAA6B,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,eAAe,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,sBAAsB,CAAC;IAC3D,MAAM,IAAI,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;IAC3F,GAAG,CAAC,MAAM,EAAE,4BAA4B,OAAO,CAAC,OAAO,SAAS,GAAG,cAAc,eAAe,IAAI,MAAM,GAAG,CAAC,CAAC;IAC/G,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACnG,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC,CAAC,OAAO,YAAY,qBAAqB,CAAC;YAAE,MAAM,OAAO,CAAC;QAC/D,MAAM,IAAI,sBAAsB,CAAC,sBAAsB,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxE,IAAI,gBAAgB,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,sBAAsB,CAC9B,iBAAiB,UAAU,kDAAkD,OAAO,CAAC,OAAO,IAAI;YAC9F,OAAO,GAAG,UAAU,gBAAgB,IAAI,YAAY,EAAE,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB,EAAE,OAAwB,EAAE,OAA8B;IAC1G,IAAI,MAAM,GAAG,iBAAiB,UAAU,wCAAwC,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,GAAG,CAAC;IACvH,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,MAAM,KAAK,qBAAqB,EAAE,CAAC;AAC/C,CAAC"}

package/dist/agent-farm/lib/ide-prefix.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The IDE forward prefix (Issue #1668 §D1) and its matcher. Dependency-free on
+ * purpose: the auth seam (`utils/server-utils.ts`) imports it, and it must stay
+ * a light leaf (Issue #1869). `ide-record.ts` re-exports both.
+ */
+/** The fixed Tower prefix that routes to the IDE server (Issue #1668 §D1). */
+export declare const IDE_DEFAULT_PREFIX = "/ide/";
+/** True if `pathname` targets the IDE forward prefix (`/ide` or `/ide/…`, never `/ideas`). */
+export declare function matchIdePrefix(pathname: string): boolean;
+//# sourceMappingURL=ide-prefix.d.ts.map

package/dist/agent-farm/lib/ide-prefix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ide-prefix.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/ide-prefix.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,UAAU,CAAC;AAE1C,8FAA8F;AAC9F,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGxD"}

package/dist/agent-farm/lib/ide-prefix.js

@@ -0,0 +1,13 @@
+/**
+ * The IDE forward prefix (Issue #1668 §D1) and its matcher. Dependency-free on
+ * purpose: the auth seam (`utils/server-utils.ts`) imports it, and it must stay
+ * a light leaf (Issue #1869). `ide-record.ts` re-exports both.
+ */
+/** The fixed Tower prefix that routes to the IDE server (Issue #1668 §D1). */
+export const IDE_DEFAULT_PREFIX = '/ide/';
+/** True if `pathname` targets the IDE forward prefix (`/ide` or `/ide/…`, never `/ideas`). */
+export function matchIdePrefix(pathname) {
+    const bare = IDE_DEFAULT_PREFIX.replace(/\/$/, ''); // "/ide"
+    return pathname === bare || pathname.startsWith(IDE_DEFAULT_PREFIX);
+}
+//# sourceMappingURL=ide-prefix.js.map

package/dist/agent-farm/lib/ide-prefix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ide-prefix.js","sourceRoot":"","sources":["../../../src/agent-farm/lib/ide-prefix.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAE1C,8FAA8F;AAC9F,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;IAC7D,OAAO,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;AACtE,CAAC"}

package/dist/agent-farm/lib/ide-record.d.ts

@@ -12,8 +12,7 @@
  * never hand-edited. Tower is the sole writer; `afx ide` drives it through the
  * local `/api/ide` endpoint.
  */
-/** The fixed Tower prefix that routes to the IDE server (Issue #1668 §D1). */
-export declare const IDE_DEFAULT_PREFIX = "/ide/";
+export { IDE_DEFAULT_PREFIX, matchIdePrefix } from './ide-prefix.js';
 /** Default port the local IDE server listens on when `--port` is not given. */
 export declare const IDE_DEFAULT_PORT = 8200;
 /**
@@ -27,8 +26,13 @@ export interface IdeServerRecord {
     port: number;
     serverPath: string;
     pid: number;
-    defaultFolder?: string;
     startedAt: string;
+    /** Base version the server reported at its spawn preflight (Spec 1789). Absent on a pre-#1789 record. */
+    serverVersion?: string;
+    /** The `--extensions-dir` the server was spawned with (Spec 1789). Absent on a pre-#1789 record. */
+    extensionsDir?: string;
+    /** Embedded sidebar version installed for the server (Spec 1789). Absent when none was embedded. */
+    sidebarVersion?: string;
 }
 /** Path to `~/.agent-farm/ide-server.json`. */
 export declare function getIdeRecordPath(): string;
@@ -55,11 +59,24 @@ export declare function deleteIdeRecord(): void;
  * Tower injects it at the forward instead.
  */
 export declare function readIdeConnectionToken(): string | null;
+/**
+ * Write a fresh connection token (randomBytes(32) hex, 0600), replacing any
+ * existing one, and return it (Issue #1869). Called before every IDE server
+ * SPAWN (never on adopt: a live server keeps the token it was started with), so
+ * a token that ever leaked into a browser jar is valid only for that server's
+ * uptime. Tower reads the token from this file on every forwarded request and
+ * overwrites any browser-held copy, so rotation breaks no client.
+ */
+export declare function rotateIdeConnectionToken(): string;
 /**
  * Return the Tower-owned connection token, generating and persisting one (0600)
  * on first use. This token is the IDE server's own inner auth layer (passed via
  * `--connection-token-file`); it is NOT a substitute for Tower's key check on
  * the forward (Issue #1668 §D2).
+ *
+ * TEST SEAM: production code no longer calls this. Every spawn uses
+ * `rotateIdeConnectionToken` (Issue #1869), and the forward only reads the
+ * file. Tests use it to provision a token without forcing a new one.
  */
 export declare function ensureIdeConnectionToken(): string;
 //# sourceMappingURL=ide-record.d.ts.map

package/dist/agent-farm/lib/ide-record.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ide-record.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/ide-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAcH,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,UAAU,CAAC;AAE1C,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAKrC;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+CAA+C;AAC/C,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,yDAAyD;AACzD,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,eAAe,GAAG,IAAI,CAyBtD;AAED,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAQ5D;AAED,gEAAgE;AAChE,wBAAgB,eAAe,IAAI,IAAI,CAGtC;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAKtD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAajD"}
+{"version":3,"file":"ide-record.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/ide-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAiBH,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAErE,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAKrC;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,yGAAyG;IACzG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oGAAoG;IACpG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oGAAoG;IACpG,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,+CAA+C;AAC/C,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,yDAAyD;AACzD,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,eAAe,GAAG,IAAI,CA2BtD;AAOD,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAQ5D;AAED,gEAAgE;AAChE,wBAAgB,eAAe,IAAI,IAAI,CAGtC;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAKtD;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CASjD;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAajD"}

package/dist/agent-farm/lib/ide-record.js

@@ -16,8 +16,10 @@ import { readFileSync, writeFileSync, unlinkSync, existsSync, mkdirSync, chmodSy
 import { randomBytes } from 'node:crypto';
 import { resolve } from 'node:path';
 import { AGENT_FARM_DIR } from './tower-client.js';
-/** The fixed Tower prefix that routes to the IDE server (Issue #1668 §D1). */
-export const IDE_DEFAULT_PREFIX = '/ide/';
+// The prefix and its matcher live in a dependency-free module so the auth seam
+// (`utils/server-utils.ts`) can use them without importing this file's
+// filesystem and tower-client dependencies (Issue #1869).
+export { IDE_DEFAULT_PREFIX, matchIdePrefix } from './ide-prefix.js';
 /** Default port the local IDE server listens on when `--port` is not given. */
 export const IDE_DEFAULT_PORT = 8200;
 const IDE_RECORD_FILENAME = 'ide-server.json';
@@ -53,14 +55,21 @@ export function readIdeRecord() {
             port: parsed.port,
             serverPath: parsed.serverPath,
             pid: parsed.pid,
-            defaultFolder: typeof parsed.defaultFolder === 'string' ? parsed.defaultFolder : undefined,
             startedAt: parsed.startedAt,
+            serverVersion: optionalString(parsed.serverVersion),
+            extensionsDir: optionalString(parsed.extensionsDir),
+            sidebarVersion: optionalString(parsed.sidebarVersion),
         };
     }
     catch {
         return null;
     }
 }
+function optionalString(value) {
+    if (typeof value === 'string')
+        return value;
+    return undefined;
+}
 /** Write the IDE server record, creating `~/.agent-farm/` if needed. */
 export function writeIdeRecord(record) {
     if (!existsSync(AGENT_FARM_DIR)) {
@@ -94,11 +103,33 @@ export function readIdeConnectionToken() {
     const token = readFileSync(path, 'utf-8').trim();
     return token.length > 0 ? token : null;
 }
+/**
+ * Write a fresh connection token (randomBytes(32) hex, 0600), replacing any
+ * existing one, and return it (Issue #1869). Called before every IDE server
+ * SPAWN (never on adopt: a live server keeps the token it was started with), so
+ * a token that ever leaked into a browser jar is valid only for that server's
+ * uptime. Tower reads the token from this file on every forwarded request and
+ * overwrites any browser-held copy, so rotation breaks no client.
+ */
+export function rotateIdeConnectionToken() {
+    const path = getIdeConnectionTokenPath();
+    if (!existsSync(AGENT_FARM_DIR)) {
+        mkdirSync(AGENT_FARM_DIR, { recursive: true, mode: 0o700 });
+    }
+    const token = randomBytes(32).toString('hex');
+    writeFileSync(path, token + '\n', { mode: 0o600 });
+    chmodSync(path, 0o600);
+    return token;
+}
 /**
  * Return the Tower-owned connection token, generating and persisting one (0600)
  * on first use. This token is the IDE server's own inner auth layer (passed via
  * `--connection-token-file`); it is NOT a substitute for Tower's key check on
  * the forward (Issue #1668 §D2).
+ *
+ * TEST SEAM: production code no longer calls this. Every spawn uses
+ * `rotateIdeConnectionToken` (Issue #1869), and the forward only reads the
+ * file. Tests use it to provision a token without forcing a new one.
  */
 export function ensureIdeConnectionToken() {
     const path = getIdeConnectionTokenPath();

package/dist/agent-farm/lib/ide-record.js.map

@@ -1 +1 @@
-{"version":3,"file":"ide-record.js","sourceRoot":"","sources":["../../../src/agent-farm/lib/ide-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,YAAY,EACZ,aAAa,EACb,UAAU,EACV,UAAU,EACV,SAAS,EACT,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAE1C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAC9C,MAAM,6BAA6B,GAAG,sBAAsB,CAAC;AAiB7D,+CAA+C;AAC/C,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;AACtD,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,yBAAyB;IACvC,OAAO,OAAO,CAAC,cAAc,EAAE,6BAA6B,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA6B,CAAC;QACnF,IACE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YACjC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACrC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,aAAa,EAAE,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;YAC1F,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,MAAuB;IACpD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,8EAA8E;IAC9E,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,IAAI,GAAG,yBAAyB,EAAE,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,IAAI,GAAG,yBAAyB,EAAE,CAAC;IACzC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,4CAA4C;IACpE,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"ide-record.js","sourceRoot":"","sources":["../../../src/agent-farm/lib/ide-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,YAAY,EACZ,aAAa,EACb,UAAU,EACV,UAAU,EACV,SAAS,EACT,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,+EAA+E;AAC/E,uEAAuE;AACvE,0DAA0D;AAC1D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAErE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAC9C,MAAM,6BAA6B,GAAG,sBAAsB,CAAC;AAsB7D,+CAA+C;AAC/C,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;AACtD,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,yBAAyB;IACvC,OAAO,OAAO,CAAC,cAAc,EAAE,6BAA6B,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA6B,CAAC;QACnF,IACE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YACjC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACrC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC;YACnD,aAAa,EAAE,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC;YACnD,cAAc,EAAE,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC;SACtD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,MAAuB;IACpD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,8EAA8E;IAC9E,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,IAAI,GAAG,yBAAyB,EAAE,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,IAAI,GAAG,yBAAyB,EAAE,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,IAAI,GAAG,yBAAyB,EAAE,CAAC;IACzC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,4CAA4C;IACpE,OAAO,KAAK,CAAC;AACf,CAAC"}