@cursor/july 0.1.105 → 0.1.108

package/dist/internal/guest-network.js

@@ -12,11 +12,9 @@
  * so leftover races still return 503 `guest_network_unavailable` instead of
  * a redacted 500.
  *
- * Quiet guest Connect (`TypeError: fetch failed` with no errno, Connect
- * `[unknown]`/`[canceled]`/`[unavailable]`, headers/body timeout) is a
- * stall, not a dead NIC. Those become `guest_connect_stalled` so TAS
- * retries the same pod — including when `waitForCompletion` resolves
- * with that message instead of throwing.
+ * Quiet guest Connect failures with a typed Connect/undici code are stalls,
+ * not dead NICs. Those become `guest_connect_stalled` so TAS retries the same
+ * pod. Untyped errors stay unknown rather than being classified from prose.
  */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
@@ -27,6 +25,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
+import { HOSTED_GUEST_RETRY_TRANSIENT } from "./hosted-delivery-protocol.js";
 export const GUEST_NETWORK_UNAVAILABLE = "guest_network_unavailable";
 export const GUEST_CONNECT_STALLED = "guest_connect_stalled";
 /** Control-plane readiness probe. Auth none, same as `/v1/health`. */
@@ -66,11 +65,15 @@ export class GuestNetworkUnavailableError extends Error {
         this.probeAttempts = (_b = extras.probeAttempts) !== null && _b !== void 0 ? _b : 0;
     }
 }
+class GuestNetworkProbeFailedError extends Error {
+    constructor(cause) {
+        super("Guest network probe failed", { cause });
+        this.name = "GuestNetworkProbeFailedError";
+    }
+}
 /**
  * True when the error (or anything on its `cause` chain, or inside an
- * `AggregateError`) is a network-level fetch failure. Connect-web wraps
- * undici's `TypeError: fetch failed` as `ConnectError` and keeps the
- * original on `cause`.
+ * `AggregateError`) carries a known network-level code.
  */
 export function isTransientGuestNetworkError(error) {
     return isTransientAtDepth(error, 0);
@@ -85,7 +88,8 @@ const QUIET_CONNECT_ERROR_CODES = new Set([
     "UND_ERR_BODY_TIMEOUT",
     "UND_ERR_HEADERS_TIMEOUT",
 ]);
-const QUIET_CONNECT_MESSAGE = /^(?:\[(?:unknown|canceled|unavailable)\])|connection stalled|this operation was aborted/i;
+// gRPC Canceled, Unknown, and Unavailable.
+const QUIET_CONNECT_CODES = new Set([1, 2, 14]);
 export function hasGuestNetworkErrno(error) {
     return hasCodeAtDepth(error, 0, TRANSIENT_NETWORK_ERROR_CODES);
 }
@@ -104,14 +108,14 @@ export function isQuietGuestConnectStall(error) {
     }
     return isQuietSignatureAtDepth(error, 0);
 }
-/** Message-only form for `waitForCompletion` outcomes that do not throw. */
-export function isQuietGuestConnectStallMessage(message) {
-    return QUIET_CONNECT_MESSAGE.test(message);
-}
 function errorCode(error) {
     const code = error.code;
     return typeof code === "string" && code.length > 0 ? code : undefined;
 }
+function numericErrorCode(error) {
+    const code = error.code;
+    return typeof code === "number" ? code : undefined;
+}
 function hasCodeAtDepth(error, depth, codes) {
     if (depth >= MAX_CAUSE_DEPTH || !(error instanceof Error)) {
         return false;
@@ -130,14 +134,15 @@ function isQuietSignatureAtDepth(error, depth) {
     if (depth >= MAX_CAUSE_DEPTH || !(error instanceof Error)) {
         return false;
     }
-    if (error instanceof TypeError && error.message === "fetch failed") {
+    if (error.name === "AbortError") {
         return true;
     }
-    const code = errorCode(error);
-    if (code !== undefined && QUIET_CONNECT_ERROR_CODES.has(code)) {
+    const numericCode = numericErrorCode(error);
+    if (numericCode !== undefined && QUIET_CONNECT_CODES.has(numericCode)) {
         return true;
     }
-    if (QUIET_CONNECT_MESSAGE.test(error.message)) {
+    const code = errorCode(error);
+    if (code !== undefined && QUIET_CONNECT_ERROR_CODES.has(code)) {
         return true;
     }
     if (error instanceof AggregateError &&
@@ -150,10 +155,17 @@ function isTransientAtDepth(error, depth) {
     if (depth >= MAX_CAUSE_DEPTH || !(error instanceof Error)) {
         return false;
     }
-    if (error instanceof TypeError && error.message === "fetch failed") {
+    if (error instanceof GuestNetworkUnavailableError) {
+        return true;
+    }
+    if (error instanceof GuestNetworkProbeFailedError) {
         return true;
     }
-    if (error instanceof GuestNetworkUnavailableError) {
+    if (error.name === "AbortError") {
+        return true;
+    }
+    const numericCode = numericErrorCode(error);
+    if (numericCode !== undefined && QUIET_CONNECT_CODES.has(numericCode)) {
         return true;
     }
     const code = errorCode(error);
@@ -198,13 +210,18 @@ function waitEnabled(options) {
 function defaultProbe(probeUrl, probeTimeoutMs) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a;
-        // Any HTTP response means egress and DNS work. 401/404 are ready.
-        const response = yield fetch(probeUrl, {
-            method: "GET",
-            redirect: "manual",
-            signal: AbortSignal.timeout(probeTimeoutMs),
-        });
-        void ((_a = response.body) === null || _a === void 0 ? void 0 : _a.cancel());
+        try {
+            // Any HTTP response means egress and DNS work. 401/404 are ready.
+            const response = yield fetch(probeUrl, {
+                method: "GET",
+                redirect: "manual",
+                signal: AbortSignal.timeout(probeTimeoutMs),
+            });
+            void ((_a = response.body) === null || _a === void 0 ? void 0 : _a.cancel());
+        }
+        catch (error) {
+            throw new GuestNetworkProbeFailedError(error);
+        }
     });
 }
 /**
@@ -290,6 +307,7 @@ export function guestNetworkReadinessResponse() {
             return new Response(JSON.stringify({
                 ok: false,
                 error: GUEST_NETWORK_UNAVAILABLE,
+                retry: HOSTED_GUEST_RETRY_TRANSIENT,
                 message: error.message,
                 waitMs: error.waitMs,
                 probeAttempts: error.probeAttempts,

package/dist/internal/hosted-admission-adapter.d.ts

@@ -18,6 +18,8 @@ export type HostedAdmissionAdapter = {
      */
     prepareArgs?(args: ChannelHandlerArgs): ChannelHandlerArgs;
     dispatch(input: {
+        /** Mounted channel id the delivery addressed (always set by hosted delivery). */
+        channelId?: string;
         eventType: string;
         payload: unknown;
         deliveryId: string;

package/dist/internal/hosted-admission-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-admission-adapter.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-admission-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,CAAC,CAAC,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,CAAC;IAC3D,QAAQ,CAAC,KAAK,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,kBAAkB,CAAC;KAC1B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvB,CAAC;AAIF,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,sBAAsB,GAC9B,IAAI,CAEN;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,GACjB,sBAAsB,GAAG,SAAS,CAEpC"}
+{"version":3,"file":"hosted-admission-adapter.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-admission-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,CAAC,CAAC,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,CAAC;IAC3D,QAAQ,CAAC,KAAK,EAAE;QACd,iFAAiF;QACjF,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,kBAAkB,CAAC;KAC1B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvB,CAAC;AAIF,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,sBAAsB,GAC9B,IAAI,CAEN;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,GACjB,sBAAsB,GAAG,SAAS,CAEpC"}

package/dist/internal/hosted-catch-protocol.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Catch ingress wire contract, July copy. The control plane keeps a
+ * byte-identical copy of these constants in
+ * `backend/packages/server-shared/src/agentServe/agentSdkCatch.ts`; a
+ * backend drift test compares the two as text. Neither package imports the
+ * other.
+ *
+ * A caught request is one hosted admission whose `eventType` is
+ * {@link AGENT_SDK_CATCH_EVENT_TYPE} and whose `payload` is a
+ * {@link CatchRequestEnvelope}: the HTTP request the control plane
+ * accepted on a manifest-declared route after verifying the deployment's
+ * secret. July replays it into the authored route handler; the control
+ * plane never runs channel code.
+ */
+export declare const AGENT_SDK_CATCH_ENVELOPE_VERSION = 1;
+export declare const AGENT_SDK_CATCH_EVENT_TYPE = "http.request";
+export declare const AGENT_SDK_CUSTOM_CHANNEL_KIND = "custom";
+export declare const AGENT_SDK_SESSION_EVENT_TYPE = "agentsdk.session";
+export declare const AGENT_SDK_HTTP_CHANNEL_ID = "http";
+export declare const AGENT_SDK_HTTP_CHANNEL_KIND = "http";
+export declare const AGENT_SDK_SESSION_RESUME_KEY_PREFIX = "cont:session:";
+export declare const AGENT_SDK_CATCH_MAX_BODY_BYTES: number;
+export declare const AGENT_SDK_CATCH_ROUTE_METHODS: readonly ["GET", "POST", "PUT", "PATCH", "DELETE"];
+export type CatchRouteMethod = (typeof AGENT_SDK_CATCH_ROUTE_METHODS)[number];
+export type CatchRequestEnvelope = {
+    v: 1;
+    method: CatchRouteMethod;
+    /** Channel-relative path, e.g. `/webhook`. */
+    path: string;
+    /** Raw query string without the leading `?`; empty when absent. */
+    query: string;
+    /** Lowercased header names. */
+    headers: Record<string, string>;
+    body: {
+        encoding: "utf8" | "base64";
+        data: string;
+    } | null;
+    receivedAt: string;
+};
+/**
+ * Mailbox key the control plane stamps on an explicit `ses_…` resume. The
+ * suffix is the CP session id the hosted execution also names, so the
+ * engine can recognise the key as "this existing session" rather than a
+ * new continuation identity.
+ */
+export declare function hostedSessionResumeKey(sessionPublicId: string): string;
+/** Strict parse of a claim-checked catch envelope; anything else is undefined. */
+export declare function parseCatchRequestEnvelope(value: unknown): CatchRequestEnvelope | undefined;
+/** Raw request bytes from an envelope body; empty for a null body. */
+export declare function decodeCatchBody(body: CatchRequestEnvelope["body"]): Buffer;
+//# sourceMappingURL=hosted-catch-protocol.d.ts.map

package/dist/internal/hosted-catch-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-catch-protocol.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-catch-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,0BAA0B,iBAAiB,CAAC;AACzD,eAAO,MAAM,6BAA6B,WAAW,CAAC;AACtD,eAAO,MAAM,4BAA4B,qBAAqB,CAAC;AAC/D,eAAO,MAAM,yBAAyB,SAAS,CAAC;AAChD,eAAO,MAAM,2BAA2B,SAAS,CAAC;AAClD,eAAO,MAAM,mCAAmC,kBAAkB,CAAC;AACnE,eAAO,MAAM,8BAA8B,EAAE,MAAmB,CAAC;AAEjE,eAAO,MAAM,6BAA6B,YACxC,KAAK,EACL,MAAM,EACN,KAAK,EACL,OAAO,EACP,QAAQ,CACA,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,MAAM,MAAM,oBAAoB,GAAG;IACjC,CAAC,EAAE,CAAC,CAAC;IACL,MAAM,EAAE,gBAAgB,CAAC;IACzB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3D,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAEtE;AAqBD,kFAAkF;AAClF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,GACb,oBAAoB,GAAG,SAAS,CA2ClC;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,GAAG,MAAM,CAK1E"}

package/dist/internal/hosted-catch-protocol.js

@@ -0,0 +1,103 @@
+/**
+ * Catch ingress wire contract, July copy. The control plane keeps a
+ * byte-identical copy of these constants in
+ * `backend/packages/server-shared/src/agentServe/agentSdkCatch.ts`; a
+ * backend drift test compares the two as text. Neither package imports the
+ * other.
+ *
+ * A caught request is one hosted admission whose `eventType` is
+ * {@link AGENT_SDK_CATCH_EVENT_TYPE} and whose `payload` is a
+ * {@link CatchRequestEnvelope}: the HTTP request the control plane
+ * accepted on a manifest-declared route after verifying the deployment's
+ * secret. July replays it into the authored route handler; the control
+ * plane never runs channel code.
+ */
+export const AGENT_SDK_CATCH_ENVELOPE_VERSION = 1;
+export const AGENT_SDK_CATCH_EVENT_TYPE = "http.request";
+export const AGENT_SDK_CUSTOM_CHANNEL_KIND = "custom";
+export const AGENT_SDK_SESSION_EVENT_TYPE = "agentsdk.session";
+export const AGENT_SDK_HTTP_CHANNEL_ID = "http";
+export const AGENT_SDK_HTTP_CHANNEL_KIND = "http";
+export const AGENT_SDK_SESSION_RESUME_KEY_PREFIX = "cont:session:";
+export const AGENT_SDK_CATCH_MAX_BODY_BYTES = 256 * 1024;
+export const AGENT_SDK_CATCH_ROUTE_METHODS = [
+    "GET",
+    "POST",
+    "PUT",
+    "PATCH",
+    "DELETE",
+];
+/**
+ * Mailbox key the control plane stamps on an explicit `ses_…` resume. The
+ * suffix is the CP session id the hosted execution also names, so the
+ * engine can recognise the key as "this existing session" rather than a
+ * new continuation identity.
+ */
+export function hostedSessionResumeKey(sessionPublicId) {
+    return `${AGENT_SDK_SESSION_RESUME_KEY_PREFIX}${sessionPublicId}`;
+}
+const ENVELOPE_KEYS = new Set([
+    "v",
+    "method",
+    "path",
+    "query",
+    "headers",
+    "body",
+    "receivedAt",
+]);
+const METHODS = new Set(AGENT_SDK_CATCH_ROUTE_METHODS);
+const MAX_PATH_CHARS = 1024;
+const MAX_QUERY_CHARS = 4096;
+const MAX_HEADER_COUNT = 64;
+const MAX_HEADER_BYTES = 16 * 1024;
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Strict parse of a claim-checked catch envelope; anything else is undefined. */
+export function parseCatchRequestEnvelope(value) {
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    if (Object.keys(value).some((key) => !ENVELOPE_KEYS.has(key)) ||
+        value.v !== AGENT_SDK_CATCH_ENVELOPE_VERSION ||
+        typeof value.method !== "string" ||
+        !METHODS.has(value.method) ||
+        typeof value.path !== "string" ||
+        !value.path.startsWith("/") ||
+        value.path.length > MAX_PATH_CHARS ||
+        typeof value.query !== "string" ||
+        value.query.length > MAX_QUERY_CHARS ||
+        typeof value.receivedAt !== "string" ||
+        !isRecord(value.headers)) {
+        return undefined;
+    }
+    const entries = Object.entries(value.headers);
+    if (entries.length > MAX_HEADER_COUNT) {
+        return undefined;
+    }
+    let headerBytes = 0;
+    for (const [name, headerValue] of entries) {
+        if (typeof headerValue !== "string" || name !== name.toLowerCase()) {
+            return undefined;
+        }
+        headerBytes += name.length + headerValue.length;
+    }
+    if (headerBytes > MAX_HEADER_BYTES) {
+        return undefined;
+    }
+    if (value.body !== null) {
+        if (!isRecord(value.body) ||
+            (value.body.encoding !== "utf8" && value.body.encoding !== "base64") ||
+            typeof value.body.data !== "string") {
+            return undefined;
+        }
+    }
+    return value;
+}
+/** Raw request bytes from an envelope body; empty for a null body. */
+export function decodeCatchBody(body) {
+    if (body === null) {
+        return Buffer.alloc(0);
+    }
+    return Buffer.from(body.data, body.encoding);
+}

package/dist/internal/hosted-catch.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Hosted admission for caught HTTP requests.
+ *
+ * The control plane accepted a request on one of this channel's declared
+ * routes, verified the deployment's secret, and claim-checked the request
+ * as a {@link CatchRequestEnvelope}. Admission replays that request into
+ * the authored route handler exactly as the local router would have
+ * (same route table, same Zod schema gate), with the control plane as the
+ * authenticated principal. A captured `send()` becomes the pending send;
+ * a handler that answers without sending is a `skip`.
+ */
+import type { AuthContext, ChannelDefinition, ChannelHandlerArgs, ChannelRoute } from "../types.js";
+import { type CatchRequestEnvelope } from "./hosted-catch-protocol.js";
+/** Header a replayed request carries so handlers can dedupe on delivery. */
+export declare const CATCH_DELIVERY_ID_HEADER = "x-agent-sdk-delivery-id";
+/**
+ * Principal for a replayed request. The deployment secret was checked by
+ * the control plane before compute existed; the channel's own auth chain
+ * does not run again in the VM.
+ */
+export declare const CATCH_AUTH_CONTEXT: AuthContext;
+export declare function catchRequestFromEnvelope(input: {
+    channelId: string;
+    deliveryId: string;
+    envelope: CatchRequestEnvelope;
+}): Request;
+export declare function replayCatchRequest(input: {
+    channelId: string;
+    deliveryId: string;
+    routes: readonly ChannelRoute[];
+    payload: unknown;
+    args: ChannelHandlerArgs;
+}): Promise<Response>;
+/**
+ * Attach catch admission to an authored channel. Provider packs attach
+ * their own adapter afterwards and replace this one; the control plane
+ * never sends `http.request` to a pack kind in any case.
+ */
+export declare function attachCatchAdmission(definition: ChannelDefinition<unknown>, routes: readonly ChannelRoute[]): void;
+//# sourceMappingURL=hosted-catch.d.ts.map

package/dist/internal/hosted-catch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-catch.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-catch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACb,MAAM,aAAa,CAAC;AAUrB,OAAO,EAGL,KAAK,oBAAoB,EAG1B,MAAM,4BAA4B,CAAC;AAIpC,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAIlE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAIhC,CAAC;AAIF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,oBAAoB,CAAC;CAChC,GAAG,OAAO,CAgBV;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkFpB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,EACtC,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,IAAI,CAgBN"}

package/dist/internal/hosted-catch.js

@@ -0,0 +1,149 @@
+/**
+ * Hosted admission for caught HTTP requests.
+ *
+ * The control plane accepted a request on one of this channel's declared
+ * routes, verified the deployment's secret, and claim-checked the request
+ * as a {@link CatchRequestEnvelope}. Admission replays that request into
+ * the authored route handler exactly as the local router would have
+ * (same route table, same Zod schema gate), with the control plane as the
+ * authenticated principal. A captured `send()` becomes the pending send;
+ * a handler that answers without sending is a `skip`.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { acknowledgeTurn, dispatchOutcome, skipped, tagOutcome, } from "./channel-dispatch.js";
+import { invokeChannelRoute } from "./channel-route-dispatch.js";
+import { DeferredChannelSessionError } from "./deferred-channel-session.js";
+import { attachHostedAdmissionAdapter } from "./hosted-admission-adapter.js";
+import { AGENT_SDK_CATCH_EVENT_TYPE, AGENT_SDK_CUSTOM_CHANNEL_KIND, decodeCatchBody, parseCatchRequestEnvelope, } from "./hosted-catch-protocol.js";
+import { errorResponse } from "./http-channel.js";
+import { Router } from "./router.js";
+/** Header a replayed request carries so handlers can dedupe on delivery. */
+export const CATCH_DELIVERY_ID_HEADER = "x-agent-sdk-delivery-id";
+/** Placeholder origin for replayed requests; handlers see a well-formed URL. */
+const CATCH_REQUEST_ORIGIN = "http://agent-sdk.hosted";
+/**
+ * Principal for a replayed request. The deployment secret was checked by
+ * the control plane before compute existed; the channel's own auth chain
+ * does not run again in the VM.
+ */
+export const CATCH_AUTH_CONTEXT = {
+    authenticator: "control-plane-catch",
+    principalId: "agent-sdk:catch",
+    principalType: "runtime",
+};
+const BODYLESS_METHODS = new Set(["GET", "HEAD"]);
+export function catchRequestFromEnvelope(input) {
+    const { envelope } = input;
+    const url = `${CATCH_REQUEST_ORIGIN}/v1/channels/${input.channelId}${envelope.path}${envelope.query === "" ? "" : `?${envelope.query}`}`;
+    const headers = new Headers(envelope.headers);
+    headers.set(CATCH_DELIVERY_ID_HEADER, input.deliveryId);
+    const body = decodeCatchBody(envelope.body);
+    return new Request(url, {
+        method: envelope.method,
+        headers,
+        body: body.length === 0 || BODYLESS_METHODS.has(envelope.method)
+            ? undefined
+            : new Uint8Array(body),
+    });
+}
+export function replayCatchRequest(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const envelope = parseCatchRequestEnvelope(input.payload);
+        if (envelope === undefined) {
+            return errorResponse(400, "invalid_catch_envelope", "Expected a supported Agent SDK catch request envelope.");
+        }
+        const router = new Router();
+        for (const route of input.routes) {
+            router.add({
+                method: route.method,
+                pattern: route.path,
+                auth: "none",
+                handler: () => errorResponse(500, "unreachable", "unreachable"),
+            });
+        }
+        const matched = router.match(envelope.method, envelope.path);
+        const route = input.routes.find((candidate) => candidate.method === (matched === null || matched === void 0 ? void 0 : matched.route.method) &&
+            candidate.path === matched.route.pattern);
+        if (matched === undefined || route === undefined) {
+            // The control plane routes from the same pinned manifest this VM was
+            // frozen from; a miss here is drift, not a caller error.
+            return errorResponse(404, "route_not_declared", `No ${envelope.method} ${envelope.path} route is mounted on channel "${input.channelId}".`);
+        }
+        const request = catchRequestFromEnvelope({
+            channelId: input.channelId,
+            deliveryId: input.deliveryId,
+            envelope,
+        });
+        let response;
+        try {
+            response = yield invokeChannelRoute({
+                route,
+                request,
+                handlerArgs: Object.assign(Object.assign({}, input.args), { params: matched.params, auth: CATCH_AUTH_CONTEXT }),
+            });
+        }
+        catch (error) {
+            // `return Response.json({ sessionId: session.id })` after `send()` is
+            // the ordinary local webhook shape. Hosted, `send()` is captured and the
+            // handle is deferred, so reading `.id` throws — but nobody reads this
+            // handler's HTTP reply hosted; the captured send is the outcome.
+            if (error instanceof DeferredChannelSessionError) {
+                return acknowledgeTurn();
+            }
+            throw error;
+        }
+        // A 2xx the handler did not tag and in which nothing was captured means
+        // it handled the request itself (acknowledged, ignored, replied). There is
+        // nothing to execute: report skip instead of failing the delivery.
+        if (response.ok && dispatchOutcome(response) === undefined) {
+            return tagOutcome(response, "skip");
+        }
+        // A 4xx is the handler rejecting the sender (bad signature on a
+        // handler-verified `publicEndpoint()` route, schema mismatch, unknown
+        // event). The sender already has its 202; retrying the delivery cannot
+        // change the verdict, so report a cheap skip that lets the control plane
+        // discard the compute instead of failing and retrying the activity.
+        if (response.status >= 400 && response.status < 500) {
+            // Logged so a probed public route or a misconfigured provider secret is
+            // distinguishable from a benign "nothing to do" skip in the guest logs;
+            // the wire outcome to the control plane is still `skip`.
+            console.info(`[agent-sdk] catch replay rejected by handler deliveryId=${input.deliveryId} channelId=${input.channelId} route=${envelope.method} ${route.path} status=${String(response.status)}`);
+            return skipped(`handler rejected the request (${response.status})`, {
+                status: response.status,
+            });
+        }
+        return response;
+    });
+}
+/**
+ * Attach catch admission to an authored channel. Provider packs attach
+ * their own adapter afterwards and replace this one; the control plane
+ * never sends `http.request` to a pack kind in any case.
+ */
+export function attachCatchAdmission(definition, routes) {
+    var _a;
+    var _b;
+    attachHostedAdmissionAdapter(definition, {
+        kind: (_b = (_a = definition.meta) === null || _a === void 0 ? void 0 : _a.kind) !== null && _b !== void 0 ? _b : AGENT_SDK_CUSTOM_CHANNEL_KIND,
+        dispatch: ({ channelId, eventType, payload, deliveryId, args }) => {
+            if (eventType !== AGENT_SDK_CATCH_EVENT_TYPE) {
+                return Promise.resolve(skipped("not a caught http request"));
+            }
+            return replayCatchRequest({
+                channelId: channelId !== null && channelId !== void 0 ? channelId : "channel",
+                deliveryId,
+                routes,
+                payload,
+                args,
+            });
+        },
+    });
+}

package/dist/internal/hosted-delivery-protocol.d.ts

@@ -2,6 +2,41 @@ export declare const HOSTED_DELIVERY_PROTOCOL_VERSION = 2;
 export declare const HOSTED_DELIVERY_HEADER = "x-agent-sdk-hosted-delivery";
 export declare const HOSTED_ADMISSION_PATH = "/v1/internal/hosted-admission";
 export declare const HOSTED_EXECUTION_PATH = "/v1/internal/hosted-execution";
+export declare const HOSTED_GUEST_RETRY_TRANSIENT = "transient";
+export declare const HOSTED_GUEST_RETRY_TERMINAL = "terminal";
+export type HostedGuestRetryDisposition = typeof HOSTED_GUEST_RETRY_TRANSIENT | typeof HOSTED_GUEST_RETRY_TERMINAL;
+export declare const HOSTED_FAILURE_CLASSIFICATION_VERSION = 1;
+export type HostedFailureDomain = "configuration" | "protocol" | "platform" | "agent" | "dependency" | "cancellation" | "unknown";
+export type HostedFailureSource = "tas" | "factory" | "anyrun" | "engine" | "agent";
+export type HostedFailureClassification = {
+    v: typeof HOSTED_FAILURE_CLASSIFICATION_VERSION;
+    domain: HostedFailureDomain;
+    source: HostedFailureSource;
+};
+export type HostedFailureCode = "agent_admission_threw" | "agent_dependency_failed" | "background_dispatch_failed" | "bound_secrets_not_consumed" | "channel_dispatch_failed" | "channel_kind_mismatch" | "channel_not_found" | "channel_outcome_missing" | "forbidden" | "guest_connect_stalled" | "guest_network_unavailable" | "hosted_admission_session_mismatch" | "hosted_admission_unavailable" | "hosted_deferred_session_unusable" | "hosted_local_send_rejected" | "hosted_send_limit_exceeded" | "internal_error" | "invalid_hosted_admission" | "invalid_hosted_execution" | "invalid_request" | "method_not_allowed" | "not_found" | "session_busy" | "turn_cancelled" | "turn_failed" | "unauthorized" | "v2_identity_conflict";
+export declare const HOSTED_FAILURE_CLASSIFICATIONS: Record<HostedFailureCode, Omit<HostedFailureClassification, "v">>;
+export declare function hostedFailureClassification(code: string): HostedFailureClassification;
+export declare function parseHostedFailureClassification(value: unknown): HostedFailureClassification | undefined;
+export type HostedGuestError = {
+    ok: false;
+    error: string;
+    retry: HostedGuestRetryDisposition;
+    classification: HostedFailureClassification;
+    message?: string;
+    turnStatus?: string;
+};
+/**
+ * Hosted delivery is the only HTTP surface whose failures drive Temporal
+ * retries. Keep its retry disposition explicit instead of making the shared
+ * HTTP error helper guess from a status code.
+ */
+export declare function hostedGuestErrorResponse(input: {
+    status: number;
+    error: string;
+    retry: HostedGuestRetryDisposition;
+    message?: string;
+    turnStatus?: string;
+}): Response;
 /**
  * Filename under the serve `--state-root` (not the per-slug SessionEngine
  * dir). Hosted freeze uses `/workspace/.agent-serve`; the Temporal host
@@ -9,6 +44,45 @@ export declare const HOSTED_EXECUTION_PATH = "/v1/internal/hosted-execution";
  * Must match `AGENT_SERVE_ENGINE_HOSTED_EXECUTION_DIAG_PATH` basename.
  */
 export declare const HOSTED_EXECUTION_DIAG_FILENAME = "hosted-execution.json";
+/**
+ * Reserved hosted-admission `channelKind` for durable reminder fires.
+ * Bypasses authored channel admission and invokes ReminderRunner.dispatch.
+ * Backend builds envelopes with this constant + {@link HOSTED_REMINDER_EVENT_TYPE}.
+ */
+export declare const HOSTED_REMINDER_CHANNEL_KIND = "agent-sdk:reminder";
+/**
+ * Reserved hosted-admission `eventType` for durable reminder fires.
+ * Payload is {@link HostedReminderFirePayload}.
+ */
+export declare const HOSTED_REMINDER_EVENT_TYPE = "agent-sdk.reminder/fire";
+/** Compact reminder-fire payload on the reserved hosted-admission path. */
+export type HostedReminderFirePayload = {
+    reminderId: string;
+    fireCount: number;
+};
+/** Protocol v1 immutable fire descriptor (architecture v2 CP path). */
+export type HostedReminderFireDescriptorPayload = {
+    protocolVersion: 1;
+    id: string;
+    fireCount: number;
+    generation: number;
+    purpose: string;
+    channelId: string;
+    continuationToken: string;
+    target?: Record<string, unknown>;
+    scheduleKind: "every" | "cron" | "delay" | "at";
+    scheduleValue: string;
+    intervalMs?: number;
+    prompt?: string;
+    handler?: string;
+    args?: Record<string, unknown>;
+    hasRunHandler: boolean;
+    hasUntilFn: boolean;
+    untilPrompt?: string;
+    busyPolicy: "skipIfBusy" | "queueBehindTurn";
+    nextFireAtMs: number;
+    claimedAtMs: number;
+};
 export type HostedAdmissionManagedAutomation = {
     automationUuid: string;
     mcpServerNames: string[];
@@ -57,5 +131,20 @@ export type HostedExecutionOutcome = {
 };
 export declare function parseHostedAdmission(value: unknown): HostedAdmission | undefined;
 export declare function parseHostedExecution(value: unknown): HostedExecution | undefined;
+/**
+ * True when the admission envelope is the reserved internal reminder fire
+ * path (not an authored channel event).
+ */
+export declare function isHostedReminderAdmission(delivery: HostedAdmission): boolean;
+/**
+ * Parse `{ reminderId, fireCount }` from a reserved reminder admission
+ * payload. Rejects unknown keys and non-integer fireCount.
+ */
+export declare function parseHostedReminderFirePayload(value: unknown): HostedReminderFirePayload | undefined;
+/**
+ * Parse the immutable CP fire descriptor. Rejects unknown keys, non-enum
+ * schedule/busy values, and non-JSON-safe optional object fields.
+ */
+export declare function parseHostedReminderFireDescriptorPayload(value: unknown): HostedReminderFireDescriptorPayload | undefined;
 export declare function parseHostedAdmissionOutcome(value: unknown): HostedAdmissionOutcome | undefined;
 //# sourceMappingURL=hosted-delivery-protocol.d.ts.map

package/dist/internal/hosted-delivery-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-delivery-protocol.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-delivery-protocol.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AACpE,eAAO,MAAM,qBAAqB,kCAAkC,CAAC;AACrE,eAAO,MAAM,qBAAqB,kCAAkC,CAAC;AACrE;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,0BAA0B,CAAC;AAEtE,MAAM,MAAM,gCAAgC,GAAG;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,GAAG,cAAc,CAAC;IACtC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,gCAAgC,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,CAAC,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,GAC5C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,CAAC,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,CAAC,EAAE,CAAC,CAAC;IACL,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAyEF,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,eAAe,GAAG,SAAS,CAuB7B;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,eAAe,GAAG,SAAS,CAe7B;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,GACb,sBAAsB,GAAG,SAAS,CAkBpC"}
+{"version":3,"file":"hosted-delivery-protocol.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-delivery-protocol.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AACpE,eAAO,MAAM,qBAAqB,kCAAkC,CAAC;AACrE,eAAO,MAAM,qBAAqB,kCAAkC,CAAC;AACrE,eAAO,MAAM,4BAA4B,cAAc,CAAC;AACxD,eAAO,MAAM,2BAA2B,aAAa,CAAC;AAEtD,MAAM,MAAM,2BAA2B,GACnC,OAAO,4BAA4B,GACnC,OAAO,2BAA2B,CAAC;AAEvC,eAAO,MAAM,qCAAqC,IAAI,CAAC;AAEvD,MAAM,MAAM,mBAAmB,GAC3B,eAAe,GACf,UAAU,GACV,UAAU,GACV,OAAO,GACP,YAAY,GACZ,cAAc,GACd,SAAS,CAAC;AAEd,MAAM,MAAM,mBAAmB,GAC3B,KAAK,GACL,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,MAAM,2BAA2B,GAAG;IACxC,CAAC,EAAE,OAAO,qCAAqC,CAAC;IAChD,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,mBAAmB,CAAC;CAC7B,CAAC;AAmBF,MAAM,MAAM,iBAAiB,GACzB,uBAAuB,GACvB,yBAAyB,GACzB,4BAA4B,GAC5B,4BAA4B,GAC5B,yBAAyB,GACzB,uBAAuB,GACvB,mBAAmB,GACnB,yBAAyB,GACzB,WAAW,GACX,uBAAuB,GACvB,2BAA2B,GAC3B,mCAAmC,GACnC,8BAA8B,GAC9B,kCAAkC,GAClC,4BAA4B,GAC5B,4BAA4B,GAC5B,gBAAgB,GAChB,0BAA0B,GAC1B,0BAA0B,GAC1B,iBAAiB,GACjB,oBAAoB,GACpB,WAAW,GACX,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,cAAc,GACd,sBAAsB,CAAC;AAE3B,eAAO,MAAM,8BAA8B,EAAE,MAAM,CACjD,iBAAiB,EACjB,IAAI,CAAC,2BAA2B,EAAE,GAAG,CAAC,CA6BvC,CAAC;AAEF,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,GACX,2BAA2B,CAO7B;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,GACb,2BAA2B,GAAG,SAAS,CAezC;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,2BAA2B,CAAC;IACnC,cAAc,EAAE,2BAA2B,CAAC;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,2BAA2B,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,QAAQ,CAUX;AAED;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,0BAA0B,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,0BAA0B,4BAA4B,CAAC;AAEpE,2EAA2E;AAC3E,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,mCAAmC,GAAG;IAChD,eAAe,EAAE,CAAC,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,YAAY,GAAG,iBAAiB,CAAC;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,GAAG,cAAc,CAAC;IACtC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,gCAAgC,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,CAAC,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,GAC5C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,CAAC,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,CAAC,EAAE,CAAC,CAAC;IACL,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAyEF,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,eAAe,GAAG,SAAS,CAuB7B;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,eAAe,GAAG,SAAS,CAe7B;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAK5E;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GACb,yBAAyB,GAAG,SAAS,CAqBvC;AA0GD;;;GAGG;AACH,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,OAAO,GACb,mCAAmC,GAAG,SAAS,CAoHjD;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,GACb,sBAAsB,GAAG,SAAS,CAkBpC"}