@cuna_labs/cli 0.1.0

package/dist/pty/node-host-terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-host-terminal.js","sourceRoot":"","sources":["../../src/pty/node-host-terminal.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,4BAA4B,GAAG,eAAe,CAAC;AACrD,4EAA4E;AAC5E,6DAA6D;AAC7D,MAAM,uBAAuB,GAAG,sDAAsD,CAAC;AACvF,MAAM,sBAAsB,GAAG,gBAAgB,uBAAuB,GAAG,4BAA4B,UAAU,CAAC;AAChH,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAC/C,MAAM,kBAAkB,GAAG;IACzB,mEAAmE;IACnE,4BAA4B;IAC5B,gDAAgD;IAChD,uCAAuC;IACvC,8BAA8B;CAC/B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACX,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAAU,CAAC;AAEjD,MAAM,UAAU,6BAA6B,CAAC,QAI1C,EAAE;IACJ,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC9C,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,qBAAqB,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,MAAM,EAAE,CAAC;QAC3F,MAAM,IAAI,UAAU,CAAC,uEAAuE,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY;YACV,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACjC,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,cAAc,CAAC,kBAAkB,EAAE,oEAAoE,CAAC,CAAC;YACjH,CAAC;YACD,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9B,WAAW,GAAG,IAAI,CAAC;YACnB,0EAA0E;YAC1E,4EAA4E;YAC5E,4DAA4D;YAC5D,uBAAuB,GAAG,KAAK,CAAC,eAAe,KAAK,IAAI,CAAC;YACzD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACvB,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,oBAAoB;YACxB,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACjC,MAAM,qBAAqB,CAAC,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,cAAc,CAAC,CAAC;QACxG,CAAC;QACD,KAAK,CAAC,kBAAkB;YACtB,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAM,qBAAqB,CAAC,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,cAAc,CAAC,CAAC;QACtH,CAAC;QACD,KAAK,CAAC,oBAAoB;YACxB,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAM,qBAAqB,CAAC,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,cAAc,CAAC,CAAC;QAC1H,CAAC;QACD,KAAK,CAAC,YAAY;YAChB,IAAI,CAAC,WAAW;gBAAE,OAAO;YACzB,IAAI,uBAAuB,EAAE,CAAC;gBAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,mEAAmE;gBACnE,uEAAuE;gBACvE,qEAAqE;gBACrE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,UAAU;gBAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACnF,uBAAuB,GAAG,KAAK,CAAC;YAChC,WAAW,GAAG,KAAK,CAAC;YACpB,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,QAI7C,EAAE;IACJ,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC9C,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,qBAAqB,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,MAAM,EAAE,CAAC;QAC3F,MAAM,IAAI,UAAU,CAAC,uEAAuE,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU;YACR,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,MAAM;YACzB,MAAM,OAAO,GAAG,6BAA6B,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACjF,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrE,IAAI,IAAI,KAAK,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAC;YACxF,OAAO,MAAM,iBAAiB,CAAC,OAAO,CAAC;gBACrC,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE;gBAC1C,uEAAuE;gBACvE,gEAAgE;gBAChE,oBAAoB,EAAE,KAAK,IAAI,EAAE;oBAC/B,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;oBACjC,MAAM,qBAAqB,CAAC,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,EAAE,cAAc,CAAC,CAAC;gBAC9G,CAAC;gBACD,kBAAkB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE;gBACtD,oBAAoB,EAAE,GAAG,EAAE,CAAC,SAAS;gBACrC,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,KAAiB;YAC3B,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACjC,MAAM,qBAAqB,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,QAAqC;YAC3C,MAAM,OAAO,GAAG,CAAC,KAAsB,EAAQ,EAAE,CAAC,QAAQ,CACxD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CACpF,CAAC;YACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC1B,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QACD,QAAQ,CAAC,QAAoB;YAC3B,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC9B,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiB,EAAE,MAAmB;IAC/D,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC5E,MAAM,cAAc,CAAC,iBAAiB,EAAE,kEAAkE,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,MAAmB,EAAE,KAAiB,EAAE,SAAiB;IAC5F,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/H,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAQ,EAAE;YAC5C,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,IAAI,CAAC,gBAAgB,IAAI,CAAC,aAAa;oBAAE,OAAO;gBAChD,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAQ,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,EAAE,CAAC;QACX,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,IAAI,QAAiB,CAAC;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;gBACpD,gBAAgB,GAAG,IAAI,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QACD,aAAa,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/pty/node-process.d.ts

@@ -0,0 +1,26 @@
+export interface PipeProcessRequest {
+    readonly executable: string;
+    readonly args: readonly string[];
+    readonly cwd?: string;
+    readonly environment?: Readonly<Record<string, string>>;
+}
+export interface PipeProcessExit {
+    readonly exitCode: number | null;
+    readonly signal: NodeJS.Signals | null;
+}
+export interface PipeProcessHandle {
+    readonly pid: number;
+    readonly stdout: AsyncIterable<Uint8Array>;
+    readonly stderr: AsyncIterable<Uint8Array>;
+    write(data: Uint8Array): Promise<void>;
+    closeInput(): void;
+    signal(signal: "interrupt" | "terminate"): boolean;
+    wait(): Promise<PipeProcessExit>;
+}
+export interface ProcessAdapter {
+    readonly kind: "pipe_process";
+    readonly platform: NodeJS.Platform;
+    spawn(request: PipeProcessRequest): PipeProcessHandle;
+}
+export declare function createNodeProcessAdapter(): ProcessAdapter;
+//# sourceMappingURL=node-process.d.ts.map

package/dist/pty/node-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-process.d.ts","sourceRoot":"","sources":["../../src/pty/node-process.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,UAAU,IAAI,IAAI,CAAC;IACnB,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,OAAO,CAAC;IACnD,IAAI,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACnC,KAAK,CAAC,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,CAAC;CACvD;AAsBD,wBAAgB,wBAAwB,IAAI,cAAc,CAgBzD"}

package/dist/pty/node-process.js

@@ -0,0 +1,102 @@
+import { spawn } from "node:child_process";
+import path from "node:path";
+import { runtimeFailure } from "../runtime/errors.js";
+const SAFE_INHERITED_ENVIRONMENT = new Set([
+    "PATH",
+    "Path",
+    "PATHEXT",
+    "SystemRoot",
+    "SYSTEMROOT",
+    "ComSpec",
+    "COMSPEC",
+    "WINDIR",
+    "TMP",
+    "TEMP",
+    "LANG",
+    "LC_ALL",
+    "TERM",
+    "COLORTERM",
+    "NO_COLOR",
+]);
+const FORBIDDEN_ENVIRONMENT_NAME = /(?:TOKEN|SECRET|PASSWORD|PASSWD|API_?KEY|AUTHORIZATION|CREDENTIAL|COOKIE)/iu;
+export function createNodeProcessAdapter() {
+    return Object.freeze({
+        kind: "pipe_process",
+        platform: process.platform,
+        spawn(request) {
+            validateRequest(request);
+            const child = spawn(request.executable, [...request.args], {
+                shell: false,
+                windowsHide: true,
+                stdio: ["pipe", "pipe", "pipe"],
+                env: buildEnvironment(request.environment),
+                ...(request.cwd === undefined ? {} : { cwd: request.cwd }),
+            });
+            return createHandle(child);
+        },
+    });
+}
+function createHandle(child) {
+    const wait = new Promise((resolve, reject) => {
+        child.once("error", (cause) => reject(runtimeFailure("process_failed", "The local process could not be started.", { cause })));
+        child.once("exit", (exitCode, signal) => resolve(Object.freeze({ exitCode, signal })));
+    });
+    return Object.freeze({
+        pid: child.pid,
+        stdout: child.stdout,
+        stderr: child.stderr,
+        async write(data) {
+            if (child.stdin.destroyed || !child.stdin.writable) {
+                throw runtimeFailure("process_failed", "The local process input stream is closed.");
+            }
+            if (child.stdin.write(data))
+                return;
+            await new Promise((resolve, reject) => {
+                const onDrain = () => { cleanup(); resolve(); };
+                const onError = (cause) => { cleanup(); reject(runtimeFailure("process_failed", "The local process input failed.", { cause })); };
+                const cleanup = () => {
+                    child.stdin.off("drain", onDrain);
+                    child.stdin.off("error", onError);
+                };
+                child.stdin.once("drain", onDrain);
+                child.stdin.once("error", onError);
+            });
+        },
+        closeInput() {
+            child.stdin.end();
+        },
+        signal(signal) {
+            return child.kill(signal === "interrupt" ? "SIGINT" : "SIGTERM");
+        },
+        wait() {
+            return wait;
+        },
+    });
+}
+function validateRequest(request) {
+    if (!path.isAbsolute(request.executable) || request.executable.length > 4096 || request.executable.includes("\0")) {
+        throw runtimeFailure("process_invalid", "The process executable must be an absolute admitted path.");
+    }
+    if (request.args.length > 1024 || request.args.some((argument) => argument.length > 65_536 || argument.includes("\0"))) {
+        throw runtimeFailure("process_invalid", "The process argument vector is outside supported bounds.");
+    }
+    if (request.cwd !== undefined && (!path.isAbsolute(request.cwd) || request.cwd.includes("\0"))) {
+        throw runtimeFailure("process_invalid", "The process working directory must be an absolute local path.");
+    }
+    for (const [name, value] of Object.entries(request.environment ?? {})) {
+        if (!/^[A-Za-z_][A-Za-z0-9_]{0,127}$/u.test(name) || FORBIDDEN_ENVIRONMENT_NAME.test(name) || value.includes("\0")) {
+            throw runtimeFailure("process_invalid", "The process environment contains an unsafe entry.");
+        }
+    }
+}
+function buildEnvironment(additions) {
+    const environment = {};
+    for (const [name, value] of Object.entries(process.env)) {
+        if (value !== undefined && SAFE_INHERITED_ENVIRONMENT.has(name))
+            environment[name] = value;
+    }
+    for (const [name, value] of Object.entries(additions ?? {}))
+        environment[name] = value;
+    return environment;
+}
+//# sourceMappingURL=node-process.js.map

package/dist/pty/node-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-process.js","sourceRoot":"","sources":["../../src/pty/node-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA8BtD,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,MAAM;IACN,MAAM;IACN,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,SAAS;IACT,QAAQ;IACR,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,WAAW;IACX,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,6EAA6E,CAAC;AAEjH,MAAM,UAAU,wBAAwB;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,cAAuB;QAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,CAAC,OAA2B;YAC/B,eAAe,CAAC,OAAO,CAAC,CAAC;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE;gBACzD,KAAK,EAAE,KAAK;gBACZ,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC1C,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAqC;IACzD,MAAM,IAAI,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC5D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,gBAAgB,EAAE,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/H,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,KAAK,CAAC,GAAI;QACf,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,CAAC,KAAK,CAAC,IAAgB;YAC1B,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnD,MAAM,cAAc,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO;YACpC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,gBAAgB,EAAE,iCAAiC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzI,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAClC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACpC,CAAC,CAAC;gBACF,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACnC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,UAAU;YACR,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,MAAiC;YACtC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnE,CAAC;QACD,IAAI;YACF,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,OAA2B;IAClD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClH,MAAM,cAAc,CAAC,iBAAiB,EAAE,2DAA2D,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvH,MAAM,cAAc,CAAC,iBAAiB,EAAE,0DAA0D,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/F,MAAM,cAAc,CAAC,iBAAiB,EAAE,+DAA+D,CAAC,CAAC;IAC3G,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnH,MAAM,cAAc,CAAC,iBAAiB,EAAE,mDAAmD,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAuD;IAC/E,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS,IAAI,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC7F,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACvF,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/runtime/api-terminal-control-plane.d.ts

@@ -0,0 +1,7 @@
+import type { CunaApiClient } from "../api/client.js";
+import type { TerminalControlPlane } from "./terminal-transport.js";
+export declare function createApiTerminalControlPlane(input: {
+    readonly client: CunaApiClient;
+    readonly clock?: () => number;
+}): TerminalControlPlane;
+//# sourceMappingURL=api-terminal-control-plane.d.ts.map

package/dist/runtime/api-terminal-control-plane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-terminal-control-plane.d.ts","sourceRoot":"","sources":["../../src/runtime/api-terminal-control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAKtD,OAAO,KAAK,EAEV,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAEjC,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CAC/B,GAAG,oBAAoB,CAkHvB"}

package/dist/runtime/api-terminal-control-plane.js

@@ -0,0 +1,95 @@
+import { admitCapability } from "./capability-gate.js";
+import { runtimeFailure } from "./errors.js";
+export function createApiTerminalControlPlane(input) {
+    const clock = input.clock ?? Date.now;
+    const workspaceContexts = new Map();
+    return Object.freeze({
+        discoverCapabilities: (scope, resourceId, signal) => input.client.discoverCapabilities(scope, resourceId, signal),
+        async observeAgentSession(agentSessionId, signal) {
+            const [identity, session] = await Promise.all([
+                input.client.getIdentity(signal),
+                input.client.getAgentSession(agentSessionId, signal),
+            ]);
+            if (!identity.workspaceAssigned ||
+                session.id !== agentSessionId ||
+                session.processEpoch === undefined ||
+                session.runtimeObservedAt === undefined ||
+                session.runtimeExpiresAt === undefined) {
+                throw runtimeFailure("remote_state_unproven", "The AgentSession has no process identity for terminal attachment.");
+            }
+            const previous = workspaceContexts.get(agentSessionId);
+            if (previous !== undefined || session.cwd.startsWith("/workspace/workspaces/")) {
+                const capabilities = await input.client.discoverCapabilities("agent_session", agentSessionId, signal);
+                admitCapability(capabilities, { id: "agent_sessions.workspace.read", scope: "agent_session",
+                    subjectId: agentSessionId, surface: "cli", interaction: "read_only" }, clock());
+                const context = await input.client.getAgentSessionWorkspaceContext(agentSessionId, signal);
+                if (context.agentSessionId !== agentSessionId || context.machineId !== session.machineId ||
+                    context.remoteRoot !== `/workspace/workspaces/${context.executionWorkspaceId}` ||
+                    !(session.cwd === context.remoteRoot || session.cwd.startsWith(`${context.remoteRoot}/`)) ||
+                    session.cwd.split("/").some((part) => part === "." || part === "..") ||
+                    (previous !== undefined && (context.executionWorkspaceId !== previous.executionWorkspaceId ||
+                        context.workspaceGeneration !== previous.workspaceGeneration || context.remoteRoot !== previous.remoteRoot ||
+                        context.machineId !== previous.machineId))) {
+                    throw runtimeFailure("session_discontinuous", "The AgentSession Workspace changed. Reconnect cannot substitute its admitted Workspace.");
+                }
+                workspaceContexts.set(agentSessionId, Object.freeze({ ...context }));
+            }
+            return Object.freeze({
+                authority: "cuna_agent_session_supervisor",
+                userId: identity.id,
+                machineId: session.machineId,
+                agentSessionId: session.id,
+                processEpoch: session.processEpoch,
+                workspaceBindingId: session.workspaceBindingId ?? null,
+                workspaceBindingGeneration: session.workspaceGeneration ?? null,
+                state: session.processState,
+                observedAt: session.runtimeObservedAt,
+                expiresAt: session.runtimeExpiresAt,
+                evidenceRevision: `agent-session-row:${session.rowVersion}`,
+            });
+        },
+        async createTerminalConnection(request) {
+            if (request.capabilityEvidence.scope !== "agent_session" ||
+                request.capabilityEvidence.subjectId !== request.agentSessionId ||
+                request.capabilityEvidence.expiresAt <= clock()) {
+                throw runtimeFailure("capability_snapshot_expired", "The terminal mutation no longer has fresh capability authority.");
+            }
+            return input.client.createTerminalConnection(request.agentSessionId, {
+                protocol: request.protocol,
+                clientInstanceId: request.clientInstanceId,
+                ...(request.resumeHandle === undefined
+                    ? {}
+                    : { resumeHandle: request.resumeHandle }),
+                ...(request.accessMode === undefined ? {} : { accessMode: request.accessMode }),
+                ...(request.expectedWriterEpoch === undefined
+                    ? {}
+                    : { expectedWriterEpoch: request.expectedWriterEpoch }),
+            }, request.idempotencyKey, request.signal);
+        },
+        async transferTerminalWriter(request) {
+            if (request.capabilityEvidence.capabilityId !== "terminal_writers.transfer" ||
+                request.capabilityEvidence.scope !== "agent_session" ||
+                request.capabilityEvidence.subjectId !== request.agentSessionId ||
+                request.capabilityEvidence.expiresAt <= clock()) {
+                throw runtimeFailure("capability_snapshot_expired", "Writer transfer requires a fresh capability for this exact AgentSession.");
+            }
+            return input.client.transferTerminalWriter(request.agentSessionId, {
+                clientInstanceId: request.clientInstanceId,
+                ...(request.operationId === undefined ? {} : { operationId: request.operationId }),
+                ...(request.expectedWriterEpoch === undefined ? {} : { expectedWriterEpoch: request.expectedWriterEpoch }),
+            }, request.signal);
+        },
+        async cancelTerminalConnection(request) {
+            // Recovery of this already-authorized issuance: an expired lease or a
+            // failed discovery read must not prevent fencing its unredeemed grant.
+            // Server authorization still applies to the same subject and request key.
+            return input.client.cancelTerminalConnection(request.agentSessionId, {
+                protocol: request.protocol, clientInstanceId: request.clientInstanceId,
+                ...(request.resumeHandle === undefined ? {} : { resumeHandle: request.resumeHandle }),
+                ...(request.accessMode === undefined ? {} : { accessMode: request.accessMode }),
+                ...(request.expectedWriterEpoch === undefined ? {} : { expectedWriterEpoch: request.expectedWriterEpoch }),
+            }, request.idempotencyKey, request.signal);
+        },
+    });
+}
+//# sourceMappingURL=api-terminal-control-plane.js.map

package/dist/runtime/api-terminal-control-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-terminal-control-plane.js","sourceRoot":"","sources":["../../src/runtime/api-terminal-control-plane.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAM7C,MAAM,UAAU,6BAA6B,CAAC,KAG7C;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC;IACtC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAwC,CAAC;IAC1E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,oBAAoB,EAAE,CAAC,KAAsB,EAAE,UAAkB,EAAE,MAAoB,EAAE,EAAE,CACzF,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC;QAE9D,KAAK,CAAC,mBAAmB,CAAC,cAAsB,EAAE,MAAoB;YACpE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC5C,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;gBAChC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC;aACrD,CAAC,CAAC;YACH,IACE,CAAC,QAAQ,CAAC,iBAAiB;gBAC3B,OAAO,CAAC,EAAE,KAAK,cAAc;gBAC7B,OAAO,CAAC,YAAY,KAAK,SAAS;gBAClC,OAAO,CAAC,iBAAiB,KAAK,SAAS;gBACvC,OAAO,CAAC,gBAAgB,KAAK,SAAS,EACtC,CAAC;gBACD,MAAM,cAAc,CAClB,uBAAuB,EACvB,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBAC/E,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,eAAe,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;gBACtG,eAAe,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,+BAA+B,EAAE,KAAK,EAAE,eAAe;oBACzF,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClF,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,+BAA+B,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBAC3F,IAAI,OAAO,CAAC,cAAc,KAAK,cAAc,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;oBACpF,OAAO,CAAC,UAAU,KAAK,yBAAyB,OAAO,CAAC,oBAAoB,EAAE;oBAC9E,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC;oBACzF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;oBACpE,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,oBAAoB,KAAK,QAAQ,CAAC,oBAAoB;wBACxF,OAAO,CAAC,mBAAmB,KAAK,QAAQ,CAAC,mBAAmB,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;wBAC1G,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;oBACjD,MAAM,cAAc,CAAC,uBAAuB,EAC1C,yFAAyF,CAAC,CAAC;gBAC/F,CAAC;gBACD,iBAAiB,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,SAAS,EAAE,+BAA+B;gBAC1C,MAAM,EAAE,QAAQ,CAAC,EAAE;gBACnB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,cAAc,EAAE,OAAO,CAAC,EAAE;gBAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI;gBACtD,0BAA0B,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI;gBAC/D,KAAK,EAAE,OAAO,CAAC,YAAY;gBAC3B,UAAU,EAAE,OAAO,CAAC,iBAAiB;gBACrC,SAAS,EAAE,OAAO,CAAC,gBAAgB;gBACnC,gBAAgB,EAAE,qBAAqB,OAAO,CAAC,UAAU,EAAE;aAC5D,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,wBAAwB,CAC5B,OAAwE;YAExE,IACE,OAAO,CAAC,kBAAkB,CAAC,KAAK,KAAK,eAAe;gBACpD,OAAO,CAAC,kBAAkB,CAAC,SAAS,KAAK,OAAO,CAAC,cAAc;gBAC/D,OAAO,CAAC,kBAAkB,CAAC,SAAS,IAAI,KAAK,EAAE,EAC/C,CAAC;gBACD,MAAM,cAAc,CAClB,6BAA6B,EAC7B,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC,MAAM,CAAC,wBAAwB,CAC1C,OAAO,CAAC,cAAc,EACtB;gBACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC3C,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC/E,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS;oBAC3C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;aAC1D,EACD,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,MAAM,CACf,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,sBAAsB,CAC1B,OAAsE;YAEtE,IAAI,OAAO,CAAC,kBAAkB,CAAC,YAAY,KAAK,2BAA2B;gBACvE,OAAO,CAAC,kBAAkB,CAAC,KAAK,KAAK,eAAe;gBACpD,OAAO,CAAC,kBAAkB,CAAC,SAAS,KAAK,OAAO,CAAC,cAAc;gBAC/D,OAAO,CAAC,kBAAkB,CAAC,SAAS,IAAI,KAAK,EAAE,EAAE,CAAC;gBACpD,MAAM,cAAc,CAAC,6BAA6B,EAAE,0EAA0E,CAAC,CAAC;YAClI,CAAC;YACD,OAAO,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,cAAc,EAAE;gBACjE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;gBAClF,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;aAC3G,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,CAAC,wBAAwB,CAAC,OAAwE;YACrG,sEAAsE;YACtE,uEAAuE;YACvE,0EAA0E;YAC1E,OAAO,KAAK,CAAC,MAAM,CAAC,wBAAwB,CAAC,OAAO,CAAC,cAAc,EAAE;gBACnE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBACtE,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;gBACrF,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC/E,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;aAC3G,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/backoff.d.ts

@@ -0,0 +1,17 @@
+export interface ReconnectPolicy {
+    readonly maximumAttempts: number;
+    readonly maximumElapsedMs: number;
+    readonly initialDelayMs: number;
+    readonly maximumDelayMs: number;
+    readonly jitterRatio: number;
+}
+export declare const DEFAULT_RECONNECT_POLICY: ReconnectPolicy;
+export declare function reconnectDelay(attempt: number, policy?: ReconnectPolicy, random?: () => number): number;
+export declare function waitForReconnectDelay(input: {
+    readonly attempt: number;
+    readonly elapsedMs: number;
+    readonly policy?: ReconnectPolicy;
+    readonly random?: () => number;
+    readonly signal?: AbortSignal;
+}): Promise<number>;
+//# sourceMappingURL=backoff.d.ts.map

package/dist/runtime/backoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backoff.d.ts","sourceRoot":"","sources":["../../src/runtime/backoff.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,wBAAwB,EAAE,eAMrC,CAAC;AAEH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,eAA0C,EAClD,MAAM,GAAE,MAAM,MAAoB,GACjC,MAAM,CAYR;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBlB"}

package/dist/runtime/backoff.js

@@ -0,0 +1,61 @@
+import { runtimeFailure } from "./errors.js";
+export const DEFAULT_RECONNECT_POLICY = Object.freeze({
+    maximumAttempts: 5,
+    maximumElapsedMs: 120_000,
+    initialDelayMs: 250,
+    maximumDelayMs: 30_000,
+    jitterRatio: 0.2,
+});
+export function reconnectDelay(attempt, policy = DEFAULT_RECONNECT_POLICY, random = Math.random) {
+    validatePolicy(policy);
+    if (!Number.isSafeInteger(attempt) || attempt < 1 || attempt > policy.maximumAttempts) {
+        throw runtimeFailure("terminal_disconnected", "Automatic reconnect attempts are exhausted.");
+    }
+    const base = Math.min(policy.maximumDelayMs, policy.initialDelayMs * (2 ** (attempt - 1)));
+    const sample = random();
+    if (!Number.isFinite(sample) || sample < 0 || sample >= 1) {
+        throw runtimeFailure("terminal_protocol_error", "Reconnect jitter produced an invalid value.");
+    }
+    const jitter = (sample * 2 - 1) * policy.jitterRatio;
+    return Math.max(0, Math.round(base * (1 + jitter)));
+}
+export async function waitForReconnectDelay(input) {
+    const policy = input.policy ?? DEFAULT_RECONNECT_POLICY;
+    const delay = reconnectDelay(input.attempt, policy, input.random);
+    if (input.elapsedMs + delay > policy.maximumElapsedMs) {
+        throw runtimeFailure("terminal_disconnected", "The bounded reconnect window is exhausted.");
+    }
+    await new Promise((resolve, reject) => {
+        if (input.signal?.aborted) {
+            reject(runtimeFailure("terminal_disconnected", "Reconnect was cancelled."));
+            return;
+        }
+        const timeout = setTimeout(() => { cleanup(); resolve(); }, delay);
+        const abort = () => { cleanup(); reject(runtimeFailure("terminal_disconnected", "Reconnect was cancelled.")); };
+        const cleanup = () => {
+            clearTimeout(timeout);
+            input.signal?.removeEventListener("abort", abort);
+        };
+        input.signal?.addEventListener("abort", abort, { once: true });
+    });
+    return delay;
+}
+function validatePolicy(policy) {
+    if (!Number.isSafeInteger(policy.maximumAttempts) ||
+        policy.maximumAttempts < 1 ||
+        policy.maximumAttempts > 5 ||
+        !Number.isSafeInteger(policy.maximumElapsedMs) ||
+        policy.maximumElapsedMs < 1 ||
+        policy.maximumElapsedMs > 120_000 ||
+        !Number.isSafeInteger(policy.initialDelayMs) ||
+        policy.initialDelayMs < 1 ||
+        !Number.isSafeInteger(policy.maximumDelayMs) ||
+        policy.maximumDelayMs < policy.initialDelayMs ||
+        policy.maximumDelayMs > policy.maximumElapsedMs ||
+        !Number.isFinite(policy.jitterRatio) ||
+        policy.jitterRatio < 0 ||
+        policy.jitterRatio > 0.5) {
+        throw runtimeFailure("terminal_protocol_error", "The reconnect policy is outside supported safety bounds.");
+    }
+}
+//# sourceMappingURL=backoff.js.map

package/dist/runtime/backoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backoff.js","sourceRoot":"","sources":["../../src/runtime/backoff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAU7C,MAAM,CAAC,MAAM,wBAAwB,GAAoB,MAAM,CAAC,MAAM,CAAC;IACrE,eAAe,EAAE,CAAC;IAClB,gBAAgB,EAAE,OAAO;IACzB,cAAc,EAAE,GAAG;IACnB,cAAc,EAAE,MAAM;IACtB,WAAW,EAAE,GAAG;CACjB,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,SAA0B,wBAAwB,EAClD,SAAuB,IAAI,CAAC,MAAM;IAElC,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QACtF,MAAM,cAAc,CAAC,uBAAuB,EAAE,6CAA6C,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,cAAc,CAAC,yBAAyB,EAAE,6CAA6C,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;IACrD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAM3C;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,wBAAwB,CAAC;IACxD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACtD,MAAM,cAAc,CAAC,uBAAuB,EAAE,4CAA4C,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,CAAC,cAAc,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChH,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAAuB;IAC7C,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,eAAe,CAAC;QAC7C,MAAM,CAAC,eAAe,GAAG,CAAC;QAC1B,MAAM,CAAC,eAAe,GAAG,CAAC;QAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC9C,MAAM,CAAC,gBAAgB,GAAG,CAAC;QAC3B,MAAM,CAAC,gBAAgB,GAAG,OAAO;QACjC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC;QAC5C,MAAM,CAAC,cAAc,GAAG,CAAC;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC;QAC5C,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc;QAC7C,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,gBAAgB;QAC/C,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;QACpC,MAAM,CAAC,WAAW,GAAG,CAAC;QACtB,MAAM,CAAC,WAAW,GAAG,GAAG,EACxB,CAAC;QACD,MAAM,cAAc,CAAC,yBAAyB,EAAE,0DAA0D,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC"}

package/dist/runtime/boundary.d.ts

@@ -0,0 +1,171 @@
+import { type DaemonLifecycleSnapshot } from "../daemon/lifecycle.js";
+import { LocalSyncSupervisor, type SupervisorConfiguration } from "../sync/supervisor.js";
+import { type TerminalGeometryPayload, type TerminalFrame, type TerminalLocalActionKind } from "../terminal/codec.js";
+import { type WriterTransferCapability } from "./capability-gate.js";
+import { type TerminalAttachmentAdmission, type TerminalConnector, type TerminalControlPlane } from "./terminal-transport.js";
+export type RuntimeTerminalState = "attaching" | "active" | "interrupted" | "reconnecting" | "detached" | "closed" | "failed";
+export interface RuntimeStartupEvidence {
+    readonly endpointOwnership: "verified" | "unverified";
+    readonly durableState: "verified" | "recovery_required" | "unknown";
+    readonly source: string;
+    readonly observedAt: number;
+    readonly expiresAt: number;
+}
+export type RuntimeBoundaryMode = "daemon" | "foreground";
+export type ForegroundRuntimeLifecycleState = "absent" | "ready" | "quiescing" | "stopped" | "cleanup_failed";
+export interface ForegroundRuntimeLifecycleSnapshot {
+    readonly state: ForegroundRuntimeLifecycleState;
+    readonly reason: string;
+    readonly updatedAt: number;
+}
+export interface RuntimeTerminalSnapshot {
+    readonly terminalView?: {
+        readonly viewId: string | null;
+        readonly ready: boolean;
+    };
+    readonly writerTransferCapability?: WriterTransferCapability;
+    readonly tabId: string;
+    readonly viewId: string;
+    readonly userId: string;
+    readonly machineId: string;
+    readonly workspaceBindingId: string | null;
+    readonly workspaceBindingGeneration: number | null;
+    readonly agentSessionId: string;
+    readonly processEpoch: string;
+    readonly state: RuntimeTerminalState;
+    readonly fencingGeneration: number;
+    readonly inputSequence: bigint;
+    readonly acknowledgedInputSequence: bigint;
+    readonly inputContinuity: "none" | "complete" | "uncertain";
+    readonly historicalInputUncertainty: boolean;
+    readonly outputSequence: bigint;
+    readonly outputContinuity: "complete" | "unknown" | "incomplete";
+    readonly resizeCapability: "live" | "initial_resize_only";
+    readonly accessMode: "writer" | "observer";
+    readonly writerEpoch: number;
+    readonly writerClientInstanceId: string | null;
+    readonly geometry: TerminalGeometryPayload | null;
+    readonly heartbeatObservedAt: number;
+    readonly heartbeatExpiresAt: number;
+    readonly reason?: string;
+    /**
+     * The safe code the remote side gave for a `failed` state, when it gave one
+     * (`view.lease_expired`, `opencode_server_exited`, ...). `reason` alone said
+     * only `terminal_protocol_error` for every remote ERROR frame, so a lapsed
+     * lease, a dead provider and a decode fault all rendered the same sentence
+     * (production 2026-09-06, AgentSession 4ce7fd8d).
+     */
+    readonly remoteReason?: string;
+}
+export interface RuntimeTerminalResponse {
+    readonly tabId: string;
+    readonly binding: {
+        readonly userId: string;
+        readonly machineId: string;
+        readonly agentSessionId: string;
+        readonly processEpoch: string;
+        readonly fencingGeneration: number;
+    };
+    readonly bytes: Uint8Array;
+}
+export interface RuntimeSyncHandle {
+    readonly bindingId: string;
+    readonly fence: number;
+    readonly supervisor: LocalSyncSupervisor;
+    close(): Promise<void>;
+}
+export interface RuntimeBoundaryOptions {
+    readonly canonicalTerminalViews?: boolean;
+    readonly onTerminalViewStarted?: (event: {
+        readonly snapshot: RuntimeTerminalSnapshot;
+        readonly columns: number;
+        readonly rows: number;
+        readonly signal: AbortSignal;
+    }) => void | Promise<void>;
+    readonly mode?: RuntimeBoundaryMode;
+    readonly controlPlane: TerminalControlPlane;
+    readonly terminalConnector: TerminalConnector;
+    readonly allowedCunaOrigins: readonly string[];
+    readonly terminalCapabilityId: string;
+    readonly clientInstanceId: string;
+    readonly clock?: () => number;
+    readonly idempotencyKey?: () => string;
+    readonly readyTimeoutMs?: number;
+    readonly outputDeliveryTimeoutMs?: number;
+    readonly heartbeatTimeoutMs?: number;
+    readonly onTerminalReady?: (snapshot: RuntimeTerminalSnapshot) => void | Promise<void>;
+    readonly onTerminalGeometry?: (event: {
+        readonly snapshot: RuntimeTerminalSnapshot;
+        readonly signal: AbortSignal;
+    }) => void | Promise<void>;
+    readonly onTerminalOutput?: (event: {
+        readonly provenance: "live" | "replay_or_unknown";
+        readonly tabId: string;
+        readonly agentSessionId: string;
+        readonly binding: RuntimeTerminalResponse["binding"];
+        readonly sequence: bigint;
+        readonly bytes: Uint8Array;
+        readonly signal: AbortSignal;
+    }) => void | Promise<void>;
+    readonly onTerminalState?: (snapshot: RuntimeTerminalSnapshot) => void;
+    /**
+     * The negotiated action surface is attachment-scoped.  A single foreground
+     * may host several providers, so advertising a process-wide superset would
+     * let a provider see kinds it can never use.
+     */
+    readonly localActionKinds?: readonly TerminalLocalActionKind[] | ((agentSessionId: string) => readonly TerminalLocalActionKind[]);
+    readonly onLocalActionFrame?: (event: {
+        readonly tabId: string;
+        readonly frame: TerminalFrame;
+        readonly payload: Readonly<Record<string, unknown>>;
+    }) => void | Promise<void>;
+}
+export declare class CunaRuntimeBoundary {
+    #private;
+    constructor(options: RuntimeBoundaryOptions);
+    get daemon(): DaemonLifecycleSnapshot;
+    get activeTabId(): string | undefined;
+    get mode(): RuntimeBoundaryMode;
+    get foreground(): ForegroundRuntimeLifecycleSnapshot;
+    start(evidence: RuntimeStartupEvidence): DaemonLifecycleSnapshot;
+    startForeground(): ForegroundRuntimeLifecycleSnapshot;
+    attach(input: {
+        readonly tabId: string;
+        readonly agentSessionId: string;
+        readonly columns: number;
+        readonly rows: number;
+        readonly expectedAdmission?: TerminalAttachmentAdmission;
+        readonly signal?: AbortSignal;
+    }): Promise<RuntimeTerminalSnapshot>;
+    switchActive(tabId: string): RuntimeTerminalSnapshot;
+    refreshTerminalLiveness(tabId?: string | undefined): RuntimeTerminalSnapshot;
+    sendInput(bytes: Uint8Array, tabId?: string | undefined, expectedBinding?: RuntimeTerminalResponse["binding"]): Promise<void>;
+    sendTerminalResponse(response: RuntimeTerminalResponse): Promise<void>;
+    resize(columns: number, rows: number, tabId?: string | undefined): Promise<void>;
+    signal(signal: "interrupt" | "suspend" | "terminate", tabId?: string | undefined): Promise<void>;
+    sendLocalActionControl(type: "local_action_result" | "local_stream_open" | "local_stream_data" | "local_stream_close" | "local_stream_window_update", payload: Readonly<Record<string, unknown>>, tabId?: string | undefined): Promise<void>;
+    /**
+     * Ask for the terminal's writing seat. The durable transfer is confirmed by
+     * the API; the seat this attachment holds changes only when the server's
+     * writer_epoch notice arrives, because the gateway fences input on that
+     * notice and a locally-assumed promotion would be closed on its first byte.
+     */
+    takeWriter(input: {
+        readonly tabId: string;
+        readonly signal?: AbortSignal;
+    }): Promise<RuntimeTerminalSnapshot>;
+    reconnect(input: {
+        readonly tabId: string;
+        readonly signal?: AbortSignal;
+    }): Promise<RuntimeTerminalSnapshot>;
+    detach(tabId: string): Promise<void>;
+    listTerminals(): readonly RuntimeTerminalSnapshot[];
+    openSync(input: {
+        readonly configuration: SupervisorConfiguration;
+        readonly journalDirectory: string;
+        readonly ownerId: string;
+        readonly leaseMs?: number;
+    }): Promise<RuntimeSyncHandle>;
+    shutdown(): Promise<void>;
+}
+//# sourceMappingURL=boundary.d.ts.map

package/dist/runtime/boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary.d.ts","sourceRoot":"","sources":["../../src/runtime/boundary.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmB,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAGvF,OAAO,EACL,mBAAmB,EAEnB,KAAK,uBAAuB,EAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAQL,KAAK,uBAAuB,EAM5B,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAE7B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAA6C,KAAK,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGhH,OAAO,EAOL,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EAE1B,MAAM,yBAAyB,CAAC;AAIjC,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,QAAQ,GACR,aAAa,GACb,cAAc,GACd,UAAU,GACV,QAAQ,GACR,QAAQ,CAAC;AAEb,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,GAAG,YAAY,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,UAAU,GAAG,mBAAmB,GAAG,SAAS,CAAC;IACpE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE1D,MAAM,MAAM,+BAA+B,GACvC,QAAQ,GACR,OAAO,GACP,WAAW,GACX,SAAS,GACT,gBAAgB,CAAC;AAErB,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IACpF,QAAQ,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IAC5D,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,UAAU,GAAG,SAAS,GAAG,YAAY,CAAC;IACjE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,qBAAqB,CAAC;IAC1D,QAAQ,CAAC,UAAU,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAClD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAC1C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChM,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,MAAM,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5I,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,CAAC;QAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;KAC9B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACvE;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,KAAK,SAAS,uBAAuB,EAAE,CAAC,CAAC;IAClI,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE;QACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC9B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACrD,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AA0DD,qBAAa,mBAAmB;;gBAiClB,OAAO,EAAE,sBAAsB;IAkB3C,IAAI,MAAM,IAAI,uBAAuB,CAEpC;IAED,IAAI,WAAW,IAAI,MAAM,GAAG,SAAS,CAEpC;IAED,IAAI,IAAI,IAAI,mBAAmB,CAE9B;IAED,IAAI,UAAU,IAAI,kCAAkC,CAEnD;IAED,KAAK,CAAC,QAAQ,EAAE,sBAAsB,GAAG,uBAAuB;IA4BhE,eAAe,IAAI,kCAAkC;IAgB/C,MAAM,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,CAAC;QACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC/B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAgOpC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB;IAUpD,uBAAuB,CAAC,KAAK,qBAAoB,GAAG,uBAAuB;IAOrE,SAAS,CACb,KAAK,EAAE,UAAU,EACjB,KAAK,qBAAoB,EACzB,eAAe,CAAC,EAAE,uBAAuB,CAAC,SAAS,CAAC,GACnD,OAAO,CAAC,IAAI,CAAC;IAkBV,oBAAoB,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuDtE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,qBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAc/E,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,EAAE,KAAK,qBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAW/F,sBAAsB,CAC1B,IAAI,EAAE,qBAAqB,GAAG,mBAAmB,GAAG,mBAAmB,GAAG,oBAAoB,GAAG,4BAA4B,EAC7H,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC1C,KAAK,qBAAoB,GACxB,OAAO,CAAC,IAAI,CAAC;IAsEhB;;;;;OAKG;IACG,UAAU,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAkE9G,SAAS,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA8Q7G,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4B1C,aAAa,IAAI,SAAS,uBAAuB,EAAE;IAI7C,QAAQ,CAAC,KAAK,EAAE;QACpB,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;QAChD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAoExB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CA2wBhC"}