@esso0428/pi-subagents 0.17.5 → 0.17.7

package/dist/workflow/collisions.js

@@ -0,0 +1,89 @@
+/**
+ * collisions.ts — deciding what to do when another extension already offers a
+ * workflow tool.
+ *
+ * Workflows are on by default, so this extension can be the *second*
+ * orchestrator in a session rather than the only one. Two workflow tools in one
+ * spec is worse than either alone: the model has to guess which to call, and
+ * pays for both descriptions to find out. The other extension was installed
+ * deliberately; a default of ours should not compete with it.
+ *
+ * ## What counts as a conflict
+ *
+ * An exact name match against {@link FOREIGN_WORKFLOW_TOOL_NAMES}, from a tool
+ * that is not ours. Exact and not a substring on purpose: `Workflow` is a
+ * common word in tool names that have nothing to do with orchestration
+ * (`github_workflow_run`, `list_workflows`), and silently disabling the feature
+ * against one of those would be a bug nobody could see.
+ *
+ * Two shapes, both decided here:
+ *
+ * 1. **A foreign tool took our name.** Registration is first-wins across
+ *    extensions (`getAllRegisteredTools` skips a name it already has), and the
+ *    winner also overwrites a built-in of the same name. Nothing throws, and
+ *    there is no tool-conflict diagnostic the way there is for shortcuts. Ours
+ *    never reached the registry, so there is nothing to withdraw — but the rest
+ *    of the feature (the menu, the CLI flag) is still live and would drive a
+ *    tool the model cannot call. It comes down with it.
+ * 2. **A foreign tool sits beside ours** under a different name, typically
+ *    Claude Code's bare `Workflow`. Both are registered and both are offered.
+ *    That one the caller can actually withdraw — `withdraw` says so.
+ *
+ * Only one direction of case 1 is detectable. If ours registered first, the
+ * other extension's tool is the one dropped, and pi exposes no way to see a
+ * tool that lost — the registry keeps winners only.
+ *
+ * Split from the acting half deliberately: everything here is a pure function
+ * of the tool list, so the policy can be tested without a host that can be made
+ * to register a competing extension. The caller owns `getAllTools`, the notify
+ * and the `setActiveTools` — see `resolveWorkflowCollisions` in index.ts.
+ */
+import { SUBAGENT_TOOL_NAMES } from "../agent-runner.js";
+/**
+ * Tool names that mean "another extension already orchestrates subagents".
+ *
+ * Our own name, because pi resolves a duplicate registration silently, and
+ * Claude Code's bare `Workflow`, because a port of that tool is what a second
+ * workflow extension most likely calls itself. Lowercase `workflow` is the same
+ * tool by pi convention: it is what `@quintinshaw/pi-dynamic-workflows`
+ * registers, and the match here is exact, so the case has to be listed by hand.
+ */
+export const FOREIGN_WORKFLOW_TOOL_NAMES = new Set([
+    SUBAGENT_TOOL_NAMES.WORKFLOW,
+    "Workflow",
+    "workflow",
+]);
+/**
+ * Decide, from the registered tools alone.
+ *
+ * `ownDescription` identifies our own registration: this extension does not
+ * know its install path, and the description is the one field that is certainly
+ * ours. `pinned` is an explicit `workflowsEnabled` — a default yields to
+ * evidence, a choice does not.
+ */
+export function decideWorkflowCollision(input) {
+    const foreign = input.tools.find(tool => FOREIGN_WORKFLOW_TOOL_NAMES.has(tool.name) && tool.description !== input.ownDescription);
+    if (foreign === undefined)
+        return { kind: "none" };
+    const source = foreign.sourceInfo?.source ?? "unknown source";
+    const tookOurName = foreign.name === SUBAGENT_TOOL_NAMES.WORKFLOW;
+    if (input.pinned) {
+        if (!tookOurName)
+            return { kind: "none" };
+        return {
+            kind: "report",
+            message: `Another extension (${source}) already registers a "${SUBAGENT_TOOL_NAMES.WORKFLOW}" tool. ` +
+                "Pi keeps the first registration, so this extension's workflow tool is not offered to the " +
+                "model. Disable one of the two.",
+        };
+    }
+    return {
+        kind: "standDown",
+        message: `Another extension (${source}) already provides a "${foreign.name}" tool, so this extension's ` +
+            "workflows are disabled for this session to avoid offering the model two orchestrators. " +
+            'Set `"workflowsEnabled": true` in .pi/subagents.json to keep both.',
+        // Case 1: ours never reached the registry, so there is nothing to withdraw.
+        withdraw: !tookOurName,
+    };
+}
+//# sourceMappingURL=collisions.js.map

package/dist/workflow/collisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collisions.js","sourceRoot":"","sources":["../../src/workflow/collisions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC;IACtE,mBAAmB,CAAC,QAAQ;IAC5B,UAAU;IACV,UAAU;CACX,CAAC,CAAC;AAyBH;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAIvC;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAC9B,IAAI,CAAC,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,cAAc,CAChG,CAAC;IACF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAEnD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,MAAM,IAAI,gBAAgB,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,KAAK,mBAAmB,CAAC,QAAQ,CAAC;IAElE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1C,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EACL,sBAAsB,MAAM,0BAA0B,mBAAmB,CAAC,QAAQ,UAAU;gBAC5F,2FAA2F;gBAC3F,gCAAgC;SACnC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,OAAO,EACL,sBAAsB,MAAM,yBAAyB,OAAO,CAAC,IAAI,8BAA8B;YAC/F,yFAAyF;YACzF,oEAAoE;QACtE,4EAA4E;QAC5E,QAAQ,EAAE,CAAC,WAAW;KACvB,CAAC;AACJ,CAAC"}

package/dist/workflow/entry.d.ts

@@ -0,0 +1,33 @@
+/**
+ * entry.ts — what a finished workflow leaves behind in the session transcript.
+ *
+ * A workflow started from `--subagents-workflow-file` has no tool call to hang
+ * its result card on, so it appends a custom session entry instead. That entry
+ * has to survive a reload, which is why this is a plain-JSON snapshot rather
+ * than the live {@link WorkflowTask}: the task holds an `AbortController`, the
+ * script source and the run's control handle, none of which belongs in a
+ * session file.
+ *
+ * Deliberately free of any renderer import. The card this data renders through
+ * lives in `ui/workflow-card.ts` (`renderWorkflowEntryCard`), so the shape a
+ * session file stores does not depend on the code that draws it.
+ */
+import type { WorkflowMeta } from "./meta.js";
+import type { WorkflowEntry, WorkflowRunStatus } from "./progress.js";
+import type { WorkflowTask } from "./task.js";
+/** `customType` of the session entry a flag-launched workflow renders through. */
+export declare const WORKFLOW_ENTRY_TYPE = "subagents:workflow";
+/** The persisted snapshot of a settled run. */
+export interface WorkflowEntryData {
+    name: string;
+    status: WorkflowRunStatus;
+    startTime: number;
+    endTime?: number;
+    progress: WorkflowEntry[];
+    agentCount: number;
+    totalTokens: number;
+    meta?: WorkflowMeta;
+}
+/** Snapshot a settled task for {@link WORKFLOW_ENTRY_TYPE}. */
+export declare function workflowEntryData(task: WorkflowTask): WorkflowEntryData;
+//# sourceMappingURL=entry.d.ts.map

package/dist/workflow/entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.d.ts","sourceRoot":"","sources":["../../src/workflow/entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9C,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,uBAAuB,CAAC;AAExD,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,YAAY,CAAC;CACrB;AAED,+DAA+D;AAC/D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,iBAAiB,CAWvE"}

package/dist/workflow/entry.js

@@ -0,0 +1,30 @@
+/**
+ * entry.ts — what a finished workflow leaves behind in the session transcript.
+ *
+ * A workflow started from `--subagents-workflow-file` has no tool call to hang
+ * its result card on, so it appends a custom session entry instead. That entry
+ * has to survive a reload, which is why this is a plain-JSON snapshot rather
+ * than the live {@link WorkflowTask}: the task holds an `AbortController`, the
+ * script source and the run's control handle, none of which belongs in a
+ * session file.
+ *
+ * Deliberately free of any renderer import. The card this data renders through
+ * lives in `ui/workflow-card.ts` (`renderWorkflowEntryCard`), so the shape a
+ * session file stores does not depend on the code that draws it.
+ */
+/** `customType` of the session entry a flag-launched workflow renders through. */
+export const WORKFLOW_ENTRY_TYPE = "subagents:workflow";
+/** Snapshot a settled task for {@link WORKFLOW_ENTRY_TYPE}. */
+export function workflowEntryData(task) {
+    return {
+        name: task.workflowName ?? task.id,
+        status: task.status,
+        startTime: task.startTime,
+        endTime: task.endTime,
+        progress: task.workflowProgress,
+        agentCount: task.agentCount,
+        totalTokens: task.totalTokens,
+        ...(task.meta !== undefined ? { meta: task.meta } : {}),
+    };
+}
+//# sourceMappingURL=entry.js.map

package/dist/workflow/entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.js","sourceRoot":"","sources":["../../src/workflow/entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAcxD,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB,CAAC,IAAkB;IAClD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,EAAE;QAClC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,gBAAgB;QAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC"}

package/dist/workflow/host.d.ts

@@ -0,0 +1,63 @@
+/**
+ * host.ts — binds a workflow run to the real `AgentManager`.
+ *
+ * `runtime.ts` deliberately knows nothing about this extension: its only seam is
+ * the injected {@link WorkflowHost}, which is what keeps the runtime's tests
+ * free of sessions, models and git. This file is the other half of that seam —
+ * everything the script can reach through `agent()`, `resume` and `gate` ends up
+ * here, and nowhere else.
+ *
+ * Four mappings carry most of the weight:
+ *
+ *   - **ids.** The runtime hands out its own `wf-agent-N` handles before
+ *     anything spawns, because it needs a stable progress-entry identity. The
+ *     manager issues a different id when the child actually starts. `records`
+ *     is the translation, and it is kept for the whole run rather than cleared
+ *     on completion: `resume` reaches back to a child that has already
+ *     finished.
+ *   - **agent type and model.** Resolved through `resolveSpawnType` and
+ *     `getAgentConfig` — the same dispatch the `Agent` tool uses — so a
+ *     workflow and a tool call disagree about nothing.
+ *   - **failure.** A strict worktree-isolation failure throws out of
+ *     `spawnAndWait`; the script must see that as an agent that failed
+ *     (`{ok: false}` → `null`), not as an unhandled rejection that takes the
+ *     run down.
+ *   - **when a `gate` runs.** For an isolated child it cannot wait until the
+ *     spawn resolves: the manager commits the worktree to a branch and deletes
+ *     the copy inside the child's own settle, so by then the only tree left to
+ *     run `npm test` in is the main one — which would report on code the child
+ *     never wrote. So the gate runs from `onBeforeWorktreeCleanup`, inside that
+ *     settle, and the verdict travels back on the spawn result. `runGate` still
+ *     exists for a child that had no worktree; the runtime uses whichever of
+ *     the two happened, never both.
+ */
+import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
+import type { AgentManager } from "../agent-manager.js";
+import type { WorkflowHost } from "./runtime.js";
+/**
+ * Wall-clock bound on a `gate` command. Generous — a gate is routinely a test
+ * suite — but not unbounded: `pi.exec` reports a timeout as `killed`, and a
+ * gate that hangs forever would wedge the agent slot it is holding.
+ */
+export declare const DEFAULT_GATE_TIMEOUT_MS: number;
+export interface WorkflowHostOptions {
+    pi: ExtensionAPI;
+    ctx: ExtensionContext;
+    manager: AgentManager;
+    /** The run's abort signal, so killing the workflow kills its children. */
+    signal?: AbortSignal;
+    /** Groups child transcripts under the parent session. */
+    rootSessionId?: string;
+    /**
+     * The run id every child is stamped with.
+     *
+     * What makes them the workflow's rather than the session's: stamped children
+     * are filtered out of the fleet list, the widget, the `/agents` menus and
+     * `@handle` resolution, and they take no `maxConcurrent` slot. The run
+     * reports for them, and it has its own concurrency cap.
+     */
+    workflowId?: string;
+    gateTimeoutMs?: number;
+}
+export declare function createWorkflowHost(deps: WorkflowHostOptions): WorkflowHost;
+//# sourceMappingURL=host.d.ts.map

package/dist/workflow/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/workflow/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAMxD,OAAO,KAAK,EAAsB,YAAY,EAAuB,MAAM,cAAc,CAAC;AAG1F;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,QAAc,CAAC;AAEnD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,YAAY,CAAC;IACjB,GAAG,EAAE,gBAAgB,CAAC;IACtB,OAAO,EAAE,YAAY,CAAC;IACtB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAyFD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,GAAG,YAAY,CAmP1E"}

package/dist/workflow/host.js

@@ -0,0 +1,363 @@
+/**
+ * host.ts — binds a workflow run to the real `AgentManager`.
+ *
+ * `runtime.ts` deliberately knows nothing about this extension: its only seam is
+ * the injected {@link WorkflowHost}, which is what keeps the runtime's tests
+ * free of sessions, models and git. This file is the other half of that seam —
+ * everything the script can reach through `agent()`, `resume` and `gate` ends up
+ * here, and nowhere else.
+ *
+ * Four mappings carry most of the weight:
+ *
+ *   - **ids.** The runtime hands out its own `wf-agent-N` handles before
+ *     anything spawns, because it needs a stable progress-entry identity. The
+ *     manager issues a different id when the child actually starts. `records`
+ *     is the translation, and it is kept for the whole run rather than cleared
+ *     on completion: `resume` reaches back to a child that has already
+ *     finished.
+ *   - **agent type and model.** Resolved through `resolveSpawnType` and
+ *     `getAgentConfig` — the same dispatch the `Agent` tool uses — so a
+ *     workflow and a tool call disagree about nothing.
+ *   - **failure.** A strict worktree-isolation failure throws out of
+ *     `spawnAndWait`; the script must see that as an agent that failed
+ *     (`{ok: false}` → `null`), not as an unhandled rejection that takes the
+ *     run down.
+ *   - **when a `gate` runs.** For an isolated child it cannot wait until the
+ *     spawn resolves: the manager commits the worktree to a branch and deletes
+ *     the copy inside the child's own settle, so by then the only tree left to
+ *     run `npm test` in is the main one — which would report on code the child
+ *     never wrote. So the gate runs from `onBeforeWorktreeCleanup`, inside that
+ *     settle, and the verdict travels back on the spawn result. `runGate` still
+ *     exists for a child that had no worktree; the runtime uses whichever of
+ *     the two happened, never both.
+ */
+import { existsSync } from "node:fs";
+import { getAgentConfig, resolveSpawnType } from "../agent-types.js";
+import { resolveModel } from "../model-resolver.js";
+import { checkModelScope } from "../model-scope.js";
+import { getLifetimeTotal } from "../usage.js";
+import { resolveWorkflowSource } from "./saved.js";
+/**
+ * Wall-clock bound on a `gate` command. Generous — a gate is routinely a test
+ * suite — but not unbounded: `pi.exec` reports a timeout as `killed`, and a
+ * gate that hangs forever would wedge the agent slot it is holding.
+ */
+export const DEFAULT_GATE_TIMEOUT_MS = 10 * 60_000;
+/**
+ * Where the child worked, when that directory still exists.
+ *
+ * The guard is not defensive padding. `cleanupWorktree` commits the child's
+ * changes to a branch and *removes* the copy before `spawnAndWait` resolves, so
+ * an isolated child's worktree is normally already gone by the time a result is
+ * built. That is exactly why a gate cannot wait until here — it runs from
+ * `onBeforeWorktreeCleanup` instead — and why this reports nothing rather than
+ * a path that no longer exists: handing a stale path to a command would fail
+ * every gated worktree agent with a spawn error instead of a test result.
+ */
+function childCwd(record) {
+    // `path`, not `workPath`: a workflow spawn never passes a cwd, so the manager
+    // runs the child at the copied repo's root.
+    const path = record.worktree?.path;
+    return path !== undefined && existsSync(path) ? path : undefined;
+}
+/**
+ * Whether the child itself succeeded — the same condition {@link toSpawnResult}
+ * turns into `ok`, read from the live record so the pre-cleanup hook can tell a
+ * finished child from a failed one before the result exists.
+ */
+function succeeded(record) {
+    return record?.status === "completed" || record?.status === "steered";
+}
+/** Translate a settled record into what the script sees. */
+/**
+ * The effective-configuration half of a record, in the runtime's pi-free shape.
+ *
+ * `AgentRecord.invocation` is the one authoritative place for it (#168); this
+ * only renames the fields across the boundary. Returns undefined until the
+ * child's session has reported a model, which is when any of it is knowable.
+ */
+function resolvedInfo(record) {
+    const invocation = record?.invocation;
+    if (invocation?.modelName === undefined)
+        return undefined;
+    return {
+        modelName: invocation.modelName,
+        modelId: invocation.modelId,
+        thinking: invocation.thinking,
+        requestedThinking: invocation.requestedThinking,
+        requestedModel: invocation.requestedModel,
+    };
+}
+function toSpawnResult(record) {
+    const tokens = getLifetimeTotal(record.lifetimeUsage);
+    // Reported separately from `tokens`, which is the lifetime total. The script's
+    // `budget` counts *output* tokens, as Claude Code's does — billing the input
+    // and cache reads a fan-out re-sends would over-report it by an order of
+    // magnitude and make the documented guards useless.
+    const outputTokens = record.lifetimeUsage?.output ?? 0;
+    const cwd = childCwd(record);
+    const common = {
+        ...(tokens > 0 ? { tokens } : {}),
+        ...(outputTokens > 0 ? { outputTokens } : {}),
+        ...(record.toolUses > 0 ? { toolCalls: record.toolUses } : {}),
+        ...(cwd !== undefined ? { cwd } : {}),
+    };
+    if (succeeded(record)) {
+        return {
+            ...common,
+            ok: true,
+            // The schema'd payload when there is one: `result` is prose, and for a
+            // worktree child it has had the branch note appended, so it would not
+            // parse. A child asked for a schema that produced none never reaches
+            // here — `runAgent` reports that through `failure`.
+            text: record.structuredJson ?? record.result ?? "",
+            ...(record.structuredRetried ? { structuredRetried: true } : {}),
+        };
+    }
+    // "stopped" is someone reaching in and stopping this child — /agents, the
+    // fleet list, a workflow abort. That is the same thing the workflows dialog's
+    // skip action means, so it renders as skipped rather than failed.
+    if (record.status === "stopped") {
+        return { ...common, ok: false, skipped: true, error: record.error ?? "Stopped." };
+    }
+    return { ...common, ok: false, error: record.error ?? `Agent ${record.status}.` };
+}
+/** Shell used to run a `gate` command, mirroring how a user would type it. */
+const GATE_SHELL = process.platform === "win32" ? ["cmd", "/c"] : ["sh", "-c"];
+export function createWorkflowHost(deps) {
+    const { pi, ctx, manager } = deps;
+    /** Runtime agent id → the manager record it spawned. Never pruned mid-run. */
+    const records = new Map();
+    /**
+     * scopeModels warnings already toasted, so a fan-out that pins one
+     * out-of-scope agent file raises one notification rather than one per child.
+     * Kept for the whole run: the same message is the same warning at agent 200
+     * as it was at agent 1.
+     */
+    const warnedScopeMessages = new Set();
+    /**
+     * Run a gate command in `cwd`. The only place a gate is executed — `runGate`
+     * and the pre-cleanup hook both come through here — so "gate passed" is
+     * decided from one behaviour, whichever route the command took.
+     */
+    async function executeGate(command, cwd) {
+        const result = await pi.exec(GATE_SHELL[0], [GATE_SHELL[1], command], {
+            cwd,
+            timeout: deps.gateTimeoutMs ?? DEFAULT_GATE_TIMEOUT_MS,
+            ...(deps.signal !== undefined ? { signal: deps.signal } : {}),
+        });
+        const output = [result.stdout, result.stderr]
+            .map(stream => stream.trim())
+            .filter(Boolean)
+            .join("\n");
+        // `pi.exec` reports a timeout as `killed` with exit code 0, so the code
+        // alone would read a killed gate as a passing one.
+        if (result.killed) {
+            return { ok: false, output: output || `Gate command timed out: ${command}` };
+        }
+        return { ok: result.code === 0, output };
+    }
+    return {
+        async spawnAgent(request) {
+            const dispatch = resolveSpawnType(request.agentType);
+            if (!dispatch.ok)
+                return { ok: false, error: dispatch.message };
+            // Same precedence as the Agent tool: the caller's model wins, the agent
+            // definition's is next, and the parent's is the floor. A model the script
+            // named and we cannot resolve is an error; one the definition named falls
+            // back to the parent silently, because the script never asked for it.
+            let model = ctx.model;
+            const config = getAgentConfig(dispatch.type);
+            const modelInput = request.model ?? config?.model;
+            if (modelInput !== undefined) {
+                const resolved = resolveModel(modelInput, ctx.modelRegistry);
+                if (typeof resolved === "string") {
+                    if (request.model !== undefined)
+                        return { ok: false, error: resolved };
+                }
+                else {
+                    model = resolved;
+                }
+            }
+            // Same scopeModels policy as the Agent tool and the nested delegation
+            // tools: a script's `agent({ model })` is a runtime LLM choice, and the
+            // script is written by the model, so it must not reach a model the user's
+            // enabledModels list excludes. `callerSupplied` keys off `request.model`
+            // and NOT `modelInput` — the latter has already absorbed the agent file's
+            // own `model:`, which is user-authored config and so earns the
+            // warn-and-proceed branch rather than a refusal.
+            const scopeVerdict = checkModelScope({
+                model,
+                cwd: ctx.cwd,
+                modelRegistry: ctx.modelRegistry,
+                callerSupplied: request.model !== undefined,
+                agentLabel: config?.displayName ?? dispatch.type,
+                modelInput,
+            });
+            // This agent's failure, not the run's — the same shape a bad agent type
+            // takes above. The script sees `null` and its siblings carry on, which is
+            // the difference between one refused model and a discarded fan-out.
+            if (scopeVerdict.kind === "error")
+                return { ok: false, error: scopeVerdict.message };
+            if (scopeVerdict.kind === "warn" && !warnedScopeMessages.has(scopeVerdict.message)) {
+                warnedScopeMessages.add(scopeVerdict.message);
+                ctx.ui.notify(scopeVerdict.message, "warning");
+            }
+            /**
+             * The gate's verdict, set only if the hook below actually ran the command.
+             * Its presence is what stops the runtime running the gate a second time,
+             * so it is set on the failure route too — a gate we tried and could not
+             * complete is a failed gate, never an un-run one that then re-runs
+             * against the wrong tree.
+             */
+            let gate;
+            let spawnedId;
+            /**
+             * Hand the child's EFFECTIVE configuration back to the run.
+             *
+             * `AgentRecord.invocation` is the one authoritative place for it (#168),
+             * filled by the manager the moment the child's session exists — which is
+             * before this fires, so it is populated by the time we read it. Reading it
+             * rather than re-deriving "the session, else the request" is the whole
+             * point of that field existing.
+             */
+            let sessionReady = false;
+            const reportResolved = () => {
+                // Called from BOTH the session hook and the spawn hook, because their
+                // order is not guaranteed: the manager fires `onSpawned` after
+                // `runAgent` returns, but `runAgent` decides when its own
+                // `onSessionCreated` fires — synchronously, for a stub. Each fires once,
+                // so the first call finds a half missing and returns, and the second is
+                // the one that reports.
+                if (!sessionReady || spawnedId === undefined)
+                    return;
+                const info = resolvedInfo(manager.getRecord(spawnedId));
+                if (info !== undefined)
+                    request.onResolved?.(info);
+            };
+            const command = request.gate;
+            /**
+             * Verify the child's work while its worktree still exists.
+             *
+             * The manager destroys that copy inside the child's own settle, so this
+             * is the last (and only) moment at which `npm test` can mean "the code
+             * this child just wrote" rather than "whatever is in the main tree".
+             */
+            const onBeforeWorktreeCleanup = command === undefined
+                ? undefined
+                : async (worktreePath) => {
+                    // A failed child's gate is never consulted — the runtime reports
+                    // the child's own failure — so running it would be pure cost.
+                    if (spawnedId === undefined || !succeeded(manager.getRecord(spawnedId)))
+                        return;
+                    try {
+                        gate = await executeGate(command, worktreePath);
+                    }
+                    catch (error) {
+                        gate = { ok: false, output: error instanceof Error ? error.message : String(error) };
+                    }
+                };
+            try {
+                const { record } = await manager.spawnAndWait(pi, ctx, dispatch.type, request.prompt, {
+                    description: request.label,
+                    // The stamp is what keeps this child out of the session's
+                    // `maxConcurrent` pool — see `occupiesPoolSlot`. The run already
+                    // bounds how many of its agents run at once, and counting them
+                    // twice would let one fan-out starve everything else the user is
+                    // doing. No `bypassQueue` needed: an agent outside the pool is
+                    // never queued behind it.
+                    ...(deps.workflowId !== undefined ? { workflowId: deps.workflowId } : {}),
+                    ...(model !== undefined ? { model } : {}),
+                    // Validated worker-side against the same list pi accepts, so the
+                    // cast asserts what the boundary has already checked. Left unset,
+                    // the agent definition's `thinking` (then the parent's) still wins —
+                    // same precedence as `model` above.
+                    ...(request.effort !== undefined ? { thinkingLevel: request.effort } : {}),
+                    // Seeded with the REQUEST, not the outcome. The manager overwrites
+                    // the effective half at session creation; without a seed there is
+                    // nothing for it to compare against, so a level pi clamped would be
+                    // indistinguishable from one that was honoured.
+                    //
+                    // Only the level. #182's other half — a caller parameter an agent
+                    // file outranked — cannot arise here: this path resolves
+                    // `request.model ?? config?.model`, so the script always wins and
+                    // therefore always got what it asked for. Seeding a `requestedModel`
+                    // would describe a precedence this path does not have.
+                    invocation: {
+                        ...(request.effort !== undefined ? { thinking: request.effort } : {}),
+                    },
+                    // Fires once the child's session exists, which is where the model
+                    // and the clamped thinking level first become knowable.
+                    onSessionCreated: () => { sessionReady = true; reportResolved(); },
+                    ...(request.schema !== undefined ? { structuredOutput: request.schema } : {}),
+                    ...(request.isolation !== undefined ? { isolation: request.isolation } : {}),
+                    ...(deps.signal !== undefined ? { signal: deps.signal } : {}),
+                    ...(deps.rootSessionId !== undefined ? { rootSessionId: deps.rootSessionId } : {}),
+                    ...(onBeforeWorktreeCleanup !== undefined ? { onBeforeWorktreeCleanup } : {}),
+                }, id => {
+                    spawnedId = id;
+                    records.set(request.agentId, id);
+                    // Ahead of `reportResolved`, and not folded into it: that one waits
+                    // for the child's session so it can name the effective model, while
+                    // the record id is known here and is what the inspector opens a
+                    // conversation on. A child that fails before its session resolves
+                    // would otherwise never be openable at all.
+                    request.onResolved?.({ recordId: id });
+                    reportResolved();
+                });
+                return { ...toSpawnResult(record), ...(gate !== undefined ? { gate } : {}) };
+            }
+            catch (error) {
+                // Strict worktree isolation rejects out of `awaitStartup` — the child
+                // never ran. That is this agent's failure, not the run's: the script
+                // sees `null` and its siblings carry on.
+                return { ok: false, error: error instanceof Error ? error.message : String(error) };
+            }
+        },
+        abortAgent(agentId) {
+            const id = records.get(agentId);
+            // Nothing to abort before the manager has issued an id — the child is
+            // still in startup, and the run's own signal reaches it there.
+            if (id !== undefined)
+                manager.abort(id);
+        },
+        async resumeAgent(agentId, prompt, onResolved) {
+            const id = records.get(agentId);
+            if (id === undefined) {
+                return { ok: false, error: `Cannot resume "${agentId}" — it never started.` };
+            }
+            const record = await manager.resume(id, prompt, deps.signal);
+            if (record === undefined) {
+                return {
+                    ok: false,
+                    error: `Agent ${id} has no session left to resume — records are dropped ten minutes after they finish.`,
+                };
+            }
+            // The resumed row is built from scratch, so it has to be told the same
+            // thing the first one was — the child's session already exists, so this is
+            // simply read back rather than waited for. The id goes first for the same
+            // reason it does on the spawn path: it is knowable even when the rest is
+            // not.
+            onResolved?.({ recordId: id });
+            const info = resolvedInfo(record);
+            if (info !== undefined)
+                onResolved?.(info);
+            return toSpawnResult(record);
+        },
+        /**
+         * Resolve a nested `workflow()` reference. The runtime decides whether what
+         * comes back is a workflow; this only finds it.
+         */
+        loadWorkflow(ref) {
+            return resolveWorkflowSource(ref, ctx.cwd);
+        },
+        // Reached only for a gate the spawn did not already run — a child with no
+        // worktree of its own, or a host wired without the pre-cleanup hook.
+        async runGate(command, gate) {
+            // The child's worktree when it had one and it survived; otherwise the
+            // session's own directory, which is where a non-isolated child worked.
+            return await executeGate(command, gate.cwd ?? ctx.cwd);
+        },
+    };
+}
+//# sourceMappingURL=host.js.map

package/dist/workflow/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/workflow/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGrC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,MAAM,CAAC;AAsBnD;;;;;;;;;;GAUG;AACH,SAAS,QAAQ,CAAC,MAAmB;IACnC,8EAA8E;IAC9E,4CAA4C;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;IACnC,OAAO,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,MAA+B;IAChD,OAAO,MAAM,EAAE,MAAM,KAAK,WAAW,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC;AACxE,CAAC;AAED,4DAA4D;AAC5D;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,MAA+B;IACnD,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,CAAC;IACtC,IAAI,UAAU,EAAE,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1D,OAAO;QACL,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,cAAc,EAAE,UAAU,CAAC,cAAc;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAmB;IACxC,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACtD,+EAA+E;IAC/E,6EAA6E;IAC7E,yEAAyE;IACzE,oDAAoD;IACpD,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC;IAEF,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,GAAG,MAAM;YACT,EAAE,EAAE,IAAI;YACR,uEAAuE;YACvE,sEAAsE;YACtE,qEAAqE;YACrE,oDAAoD;YACpD,IAAI,EAAE,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;YAClD,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,8EAA8E;IAC9E,kEAAkE;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,UAAU,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;AACpF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAE9D,MAAM,UAAU,kBAAkB,CAAC,IAAyB;IAC1D,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAClC,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C;;;;;OAKG;IACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C;;;;OAIG;IACH,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,GAAW;QACrD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE;YACpE,GAAG;YACH,OAAO,EAAE,IAAI,CAAC,aAAa,IAAI,uBAAuB;YACtD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;aAC1C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,wEAAwE;QACxE,mDAAmD;QACnD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,2BAA2B,OAAO,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;IAED,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;YAEhE,wEAAwE;YACxE,0EAA0E;YAC1E,0EAA0E;YAC1E,sEAAsE;YACtE,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACtB,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,EAAE,KAAK,CAAC;YAClD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;gBAC7D,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACjC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;wBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;gBACzE,CAAC;qBAAM,CAAC;oBACN,KAAK,GAAG,QAAQ,CAAC;gBACnB,CAAC;YACH,CAAC;YAED,sEAAsE;YACtE,wEAAwE;YACxE,0EAA0E;YAC1E,yEAAyE;YACzE,0EAA0E;YAC1E,+DAA+D;YAC/D,iDAAiD;YACjD,MAAM,YAAY,GAAG,eAAe,CAAC;gBACnC,KAAK;gBACL,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,cAAc,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS;gBAC3C,UAAU,EAAE,MAAM,EAAE,WAAW,IAAI,QAAQ,CAAC,IAAI;gBAChD,UAAU;aACX,CAAC,CAAC;YACH,wEAAwE;YACxE,0EAA0E;YAC1E,oEAAoE;YACpE,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;YACrF,IAAI,YAAY,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnF,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC9C,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACjD,CAAC;YAED;;;;;;eAMG;YACH,IAAI,IAAoC,CAAC;YACzC,IAAI,SAA6B,CAAC;YAElC;;;;;;;;eAQG;YACH,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,MAAM,cAAc,GAAG,GAAG,EAAE;gBAC1B,sEAAsE;gBACtE,+DAA+D;gBAC/D,0DAA0D;gBAC1D,yEAAyE;gBACzE,wEAAwE;gBACxE,wBAAwB;gBACxB,IAAI,CAAC,YAAY,IAAI,SAAS,KAAK,SAAS;oBAAE,OAAO;gBACrD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;gBACxD,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;YACrD,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YAC7B;;;;;;eAMG;YACH,MAAM,uBAAuB,GAC3B,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,EAAE,YAAoB,EAAiB,EAAE;oBAC5C,iEAAiE;oBACjE,8DAA8D;oBAC9D,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;wBAAE,OAAO;oBAChF,IAAI,CAAC;wBACH,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBAClD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvF,CAAC;gBACH,CAAC,CAAC;YAER,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,YAAY,CAC3C,EAAE,EACF,GAAG,EACH,QAAQ,CAAC,IAAI,EACb,OAAO,CAAC,MAAM,EACd;oBACE,WAAW,EAAE,OAAO,CAAC,KAAK;oBAC1B,0DAA0D;oBAC1D,iEAAiE;oBACjE,+DAA+D;oBAC/D,iEAAiE;oBACjE,+DAA+D;oBAC/D,0BAA0B;oBAC1B,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,iEAAiE;oBACjE,kEAAkE;oBAClE,qEAAqE;oBACrE,oCAAoC;oBACpC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,MAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,mEAAmE;oBACnE,kEAAkE;oBAClE,oEAAoE;oBACpE,gDAAgD;oBAChD,EAAE;oBACF,kEAAkE;oBAClE,yDAAyD;oBACzD,kEAAkE;oBAClE,qEAAqE;oBACrE,uDAAuD;oBACvD,UAAU,EAAE;wBACV,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACvF;oBACD,kEAAkE;oBAClE,wDAAwD;oBACxD,gBAAgB,EAAE,GAAG,EAAE,GAAG,YAAY,GAAG,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;oBAClE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7E,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5E,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClF,GAAG,CAAC,uBAAuB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9E,EACD,EAAE,CAAC,EAAE;oBACH,SAAS,GAAG,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACjC,oEAAoE;oBACpE,oEAAoE;oBACpE,gEAAgE;oBAChE,kEAAkE;oBAClE,4CAA4C;oBAC5C,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;oBACvC,cAAc,EAAE,CAAC;gBACnB,CAAC,CACF,CAAC;gBACF,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sEAAsE;gBACtE,qEAAqE;gBACrE,yCAAyC;gBACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACtF,CAAC;QACH,CAAC;QAED,UAAU,CAAC,OAAO;YAChB,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,sEAAsE;YACtE,+DAA+D;YAC/D,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU;YAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,OAAO,uBAAuB,EAAE,CAAC;YAChF,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,SAAS,EAAE,qFAAqF;iBACxG,CAAC;YACJ,CAAC;YACD,uEAAuE;YACvE,2EAA2E;YAC3E,0EAA0E;YAC1E,yEAAyE;YACzE,OAAO;YACP,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,IAAI,KAAK,SAAS;gBAAE,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAED;;;WAGG;QACH,YAAY,CAAC,GAAG;YACd,OAAO,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QAED,0EAA0E;QAC1E,qEAAqE;QACrE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI;YACzB,sEAAsE;YACtE,uEAAuE;YACvE,OAAO,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;KACF,CAAC;AACJ,CAAC"}