npm - @evalops/maestro - Versions diffs - 0.10.20 → 0.10.22 - Mend

@evalops/maestro 0.10.20 → 0.10.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1733) hide show

package/dist/server/app-context.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"app-context.js","sourceRoot":"","sources":["../../src/server/app-context.ts"],"names":[],"mappings":"","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type {\n\tActionApprovalService,\n\tApprovalMode,\n} from \"../agent/action-approval.js\";\nimport type { Agent } from \"../agent/index.js\";\nimport type { ToolRetryService } from \"../agent/tool-retry.js\";\nimport type { ClientToolExecutionService } from \"../agent/transport.js\";\nimport type { ThinkingLevel } from \"../agent/types.js\";\nimport type { RegisteredModel } from \"../models/registry.js\";\nimport type { AuthCredential } from \"../providers/auth.js\";\nimport type { HeadlessRuntimeService } from \"./headless-runtime-service.js\";\nimport type { HostedRunnerLeaseSnapshot } from \"./hosted-runner-lease.js\";\n\nexport interface WebServerConfig {\n\tcorsHeaders: Record<string, string>;\n\tstaticMaxAge: number;\n\tdefaultApprovalMode: ApprovalMode;\n\tdefaultProvider: string;\n\tdefaultModelId: string;\n\thostedRunner?: HostedRunnerContext;\n}\n\nexport interface HostedRunnerContext {\n\tenabled: true;\n\trunnerSessionId: string;\n\townerInstanceId?: string;\n\tworkspaceRoot: string;\n\tsnapshotRoot?: string;\n\tlistenHost?: string;\n\tlistenPort?: number;\n\tworkspaceId?: string;\n\tagentId?: string;\n\tagentRunId?: string;\n\tagentRuntimeLeaseToken?: string;\n\ta2aMessageId?: string;\n\ta2aTaskId?: string;\n\tlastPlatformA2APush?: {\n\t\tkind: \"statusUpdate\" \| \"artifactUpdate\" \| \"task\" \| \"message\";\n\t\ttaskId?: string;\n\t\tcontextId?: string;\n\t\tstate?: string;\n\t\tfinal?: boolean;\n\t\treceivedAt: string;\n\t\truntimeEventId?: string;\n\t\truntimeEventType?: string;\n\t};\n\tagentRuntimeWorkerQueue?: string;\n\tagentRuntimeCorrelationPath?: string;\n\tattachAudience?: string;\n\tconfiguredMaestroSessionId?: string;\n\tactiveMaestroSessionId?: string;\n\truntimeLease?: HostedRunnerLeaseSnapshot;\n\tdraining?: boolean;\n\tlastDrain?: {\n\t\tstatus: string;\n\t\tmanifestPath: string;\n\t\tdrainedAt: string;\n\t\treason?: string;\n\t\trequestedBy?: string;\n\t};\n}\n\nexport interface WebServerServices {\n\tcreateAgent: (\n\t\tmodel: RegisteredModel,\n\t\tthinking: ThinkingLevel,\n\t\tapproval: ApprovalMode,\n\t\toptions?: {\n\t\t\tcwd?: string;\n\t\t\tenableClientTools?: boolean;\n\t\t\tuseClientAskUser?: boolean;\n\t\t\tincludeVscodeTools?: boolean;\n\t\t\tincludeJetBrainsTools?: boolean;\n\t\t\tincludeConductorTools?: boolean;\n\t\t\tapprovalService?: ActionApprovalService;\n\t\t\tclientToolService?: ClientToolExecutionService;\n\t\t\ttoolRetryService?: ToolRetryService;\n\t\t},\n\t) => Promise<Agent>;\n\tcreateBackgroundAgent: (\n\t\tmodel: RegisteredModel,\n\t\toptions?: {\n\t\t\tcwd?: string;\n\t\t\tsystemPrompt?: string;\n\t\t},\n\t) => Promise<Agent>;\n\tgetRegisteredModel: (\n\t\tinput: string \| null \| undefined,\n\t) => Promise<RegisteredModel>;\n\tgetCurrentSelection: () => { provider: string; modelId: string };\n\tensureCredential: (provider: string) => Promise<AuthCredential>;\n\tsetModelSelection: (model: RegisteredModel) => void;\n\tacquireSse: () => symbol \| null;\n\treleaseSse: (token: symbol \| null) => void;\n\theadlessRuntimeService: HeadlessRuntimeService;\n}\n\nexport type WebServerContext = WebServerConfig & WebServerServices;\n"]}
1	+ {"version":3,"file":"app-context.js","sourceRoot":"","sources":["../../src/server/app-context.ts"],"names":[],"mappings":"","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type {\n\tActionApprovalService,\n\tApprovalMode,\n} from \"../agent/action-approval.js\";\nimport type { Agent } from \"../agent/index.js\";\nimport type { ToolRetryService } from \"../agent/tool-retry.js\";\nimport type { ClientToolExecutionService } from \"../agent/transport.js\";\nimport type { ThinkingLevel } from \"../agent/types.js\";\nimport type { RegisteredModel } from \"../models/registry.js\";\nimport type { AuthCredential } from \"../providers/auth.js\";\nimport type { HeadlessRuntimeService } from \"./headless-runtime-service.js\";\nimport type { HostedRunnerLeaseSnapshot } from \"./hosted-runner-lease.js\";\n\nexport interface WebServerConfig {\n\tcorsHeaders: Record<string, string>;\n\tstaticMaxAge: number;\n\tdefaultApprovalMode: ApprovalMode;\n\tdefaultProvider: string;\n\tdefaultModelId: string;\n\thostedRunner?: HostedRunnerContext;\n}\n\nexport interface HostedRunnerContext {\n\tenabled: true;\n\trunnerSessionId: string;\n\townerInstanceId?: string;\n\tworkspaceRoot: string;\n\tsnapshotRoot?: string;\n\trestoreManifestPath?: string;\n\tlistenHost?: string;\n\tlistenPort?: number;\n\tworkspaceId?: string;\n\tagentId?: string;\n\tagentRunId?: string;\n\tagentRuntimeLeaseToken?: string;\n\ta2aMessageId?: string;\n\ta2aTaskId?: string;\n\tlastPlatformA2APush?: {\n\t\tkind: \"statusUpdate\" \| \"artifactUpdate\" \| \"task\" \| \"message\";\n\t\ttaskId?: string;\n\t\tcontextId?: string;\n\t\tstate?: string;\n\t\tfinal?: boolean;\n\t\treceivedAt: string;\n\t\truntimeEventId?: string;\n\t\truntimeEventType?: string;\n\t};\n\tagentRuntimeWorkerQueue?: string;\n\tagentRuntimeCorrelationPath?: string;\n\tattachAudience?: string;\n\tconfiguredMaestroSessionId?: string;\n\tactiveMaestroSessionId?: string;\n\truntimeLease?: HostedRunnerLeaseSnapshot;\n\tdraining?: boolean;\n\tlastDrain?: {\n\t\tstatus: string;\n\t\tmanifestPath: string;\n\t\tdrainedAt: string;\n\t\treason?: string;\n\t\trequestedBy?: string;\n\t};\n}\n\nexport interface WebServerServices {\n\tcreateAgent: (\n\t\tmodel: RegisteredModel,\n\t\tthinking: ThinkingLevel,\n\t\tapproval: ApprovalMode,\n\t\toptions?: {\n\t\t\tcwd?: string;\n\t\t\tenableClientTools?: boolean;\n\t\t\tuseClientAskUser?: boolean;\n\t\t\tincludeVscodeTools?: boolean;\n\t\t\tincludeJetBrainsTools?: boolean;\n\t\t\tincludeConductorTools?: boolean;\n\t\t\tapprovalService?: ActionApprovalService;\n\t\t\tclientToolService?: ClientToolExecutionService;\n\t\t\ttoolRetryService?: ToolRetryService;\n\t\t},\n\t) => Promise<Agent>;\n\tcreateBackgroundAgent: (\n\t\tmodel: RegisteredModel,\n\t\toptions?: {\n\t\t\tcwd?: string;\n\t\t\tsystemPrompt?: string;\n\t\t},\n\t) => Promise<Agent>;\n\tgetRegisteredModel: (\n\t\tinput: string \| null \| undefined,\n\t) => Promise<RegisteredModel>;\n\tgetCurrentSelection: () => { provider: string; modelId: string };\n\tensureCredential: (provider: string) => Promise<AuthCredential>;\n\tsetModelSelection: (model: RegisteredModel) => void;\n\tacquireSse: () => symbol \| null;\n\treleaseSse: (token: symbol \| null) => void;\n\theadlessRuntimeService: HeadlessRuntimeService;\n}\n\nexport type WebServerContext = WebServerConfig & WebServerServices;\n"]}

package/dist/server/handlers/a2a-cockpit.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+export declare function handleA2ACockpit(req: IncomingMessage, res: ServerResponse, corsHeaders: Record<string, string>): Promise<void>;
+//# sourceMappingURL=a2a-cockpit.d.ts.map

package/dist/server/handlers/a2a-cockpit.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"a2a-cockpit.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/a2a-cockpit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAUjE,wBAAsB,gBAAgB,CACrC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/server/handlers/a2a-cockpit.js ADDED Viewed

@@ -0,0 +1,71 @@
+import { buildA2ACockpit } from "../../platform/a2a-cockpit.js";
+import { getVerifiedRequestPrincipal } from "../authz.js";
+import { ApiError, respondWithApiError, sendJson } from "../server-utils.js";
+import { resolveSessionScope } from "../session-scope.js";
+const DEFAULT_WEB_A2A_COCKPIT_TIMEOUT_MS = 2_500;
+const MAX_WEB_A2A_COCKPIT_TIMEOUT_MS = 10_000;
+export async function handleA2ACockpit(req, res, corsHeaders) {
+    try {
+        if (req.method !== "GET") {
+            throw new ApiError(405, "Method not allowed");
+        }
+        const url = new URL(req.url ?? "/api/a2a/cockpit", "http://localhost");
+        rejectHostedPathOverrides(url);
+        const cockpit = await buildA2ACockpit({
+            registryPath: undefined,
+            tasksPath: undefined,
+            timeoutMs: positiveIntegerQuery(url, "timeoutMs", {
+                max: MAX_WEB_A2A_COCKPIT_TIMEOUT_MS,
+            }) ?? DEFAULT_WEB_A2A_COCKPIT_TIMEOUT_MS,
+            peer: optionalQueryString(url, "peer"),
+            limit: positiveIntegerQuery(url, "limit"),
+            ownershipScope: ownershipScopeForRequest(req),
+        });
+        sendJson(res, 200, cockpit, corsHeaders, req);
+    }
+    catch (error) {
+        respondWithApiError(res, error, 500, corsHeaders, req);
+    }
+}
+function ownershipScopeForRequest(req) {
+    const principal = getVerifiedRequestPrincipal(req);
+    const scopeKey = resolveSessionScope(req) ??
+        (principal?.authMethod !== "anon" ? principal?.scopeKey : undefined);
+    if (!scopeKey) {
+        return undefined;
+    }
+    return {
+        scopeKey,
+        ...(principal?.subject ? { subject: principal.subject } : {}),
+        ...(principal?.userId ? { userId: principal.userId } : {}),
+        ...(principal?.keyId ? { keyId: principal.keyId } : {}),
+        ...(principal?.workspaceId ? { workspaceId: principal.workspaceId } : {}),
+        ...(principal?.orgId ? { orgId: principal.orgId } : {}),
+        ...(principal?.teamId ? { teamId: principal.teamId } : {}),
+    };
+}
+function rejectHostedPathOverrides(url) {
+    const blockedParams = ["registry", "tasks"].filter((key) => url.searchParams.has(key));
+    if (blockedParams.length > 0) {
+        throw new ApiError(400, `${blockedParams.join(", ")} query parameter${blockedParams.length === 1 ? " is" : "s are"} not supported by the hosted A2A cockpit`);
+    }
+}
+function optionalQueryString(url, key) {
+    const value = url.searchParams.get(key)?.trim();
+    return value ? value : undefined;
+}
+function positiveIntegerQuery(url, key, options = {}) {
+    const value = optionalQueryString(url, key);
+    if (!value) {
+        return undefined;
+    }
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        throw new ApiError(400, `${key} must be a positive integer`);
+    }
+    if (options.max !== undefined && parsed > options.max) {
+        throw new ApiError(400, `${key} must be at most ${options.max}`);
+    }
+    return parsed;
+}
+//# sourceMappingURL=a2a-cockpit.js.map

package/dist/server/handlers/a2a-cockpit.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"a2a-cockpit.js","sourceRoot":"","sources":["../../../src/server/handlers/a2a-cockpit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,kCAAkC,GAAG,KAAK,CAAC;AACjD,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,GAAoB,EACpB,GAAmB,EACnB,WAAmC;IAEnC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;QACvE,yBAAyB,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACrC,YAAY,EAAE,SAAS;YACvB,SAAS,EAAE,SAAS;YACpB,SAAS,EACR,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE;gBACtC,GAAG,EAAE,8BAA8B;aACnC,CAAC,IAAI,kCAAkC;YACzC,IAAI,EAAE,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC;YACtC,KAAK,EAAE,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC;YACzC,cAAc,EAAE,wBAAwB,CAAC,GAAG,CAAC;SAC7C,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;AACF,CAAC;AAED,SAAS,wBAAwB,CAChC,GAAoB;IAEpB,MAAM,SAAS,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,QAAQ,GACb,mBAAmB,CAAC,GAAG,CAAC;QACxB,CAAC,SAAS,EAAE,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO;QACN,QAAQ;QACR,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAQ;IAC1C,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CACzB,CAAC;IACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,mBAC1B,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OACtC,0CAA0C,CAC1C,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAQ,EAAE,GAAW;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IAChD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAC5B,GAAQ,EACR,GAAW,EACX,UAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,6BAA6B,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,oBAAoB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { buildA2ACockpit } from \"../../platform/a2a-cockpit.js\";\nimport type { A2AOwnershipScope } from \"../../platform/a2a-ownership.js\";\nimport { getVerifiedRequestPrincipal } from \"../authz.js\";\nimport { ApiError, respondWithApiError, sendJson } from \"../server-utils.js\";\nimport { resolveSessionScope } from \"../session-scope.js\";\n\nconst DEFAULT_WEB_A2A_COCKPIT_TIMEOUT_MS = 2_500;\nconst MAX_WEB_A2A_COCKPIT_TIMEOUT_MS = 10_000;\n\nexport async function handleA2ACockpit(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcorsHeaders: Record<string, string>,\n): Promise<void> {\n\ttry {\n\t\tif (req.method !== \"GET\") {\n\t\t\tthrow new ApiError(405, \"Method not allowed\");\n\t\t}\n\t\tconst url = new URL(req.url ?? \"/api/a2a/cockpit\", \"http://localhost\");\n\t\trejectHostedPathOverrides(url);\n\t\tconst cockpit = await buildA2ACockpit({\n\t\t\tregistryPath: undefined,\n\t\t\ttasksPath: undefined,\n\t\t\ttimeoutMs:\n\t\t\t\tpositiveIntegerQuery(url, \"timeoutMs\", {\n\t\t\t\t\tmax: MAX_WEB_A2A_COCKPIT_TIMEOUT_MS,\n\t\t\t\t}) ?? DEFAULT_WEB_A2A_COCKPIT_TIMEOUT_MS,\n\t\t\tpeer: optionalQueryString(url, \"peer\"),\n\t\t\tlimit: positiveIntegerQuery(url, \"limit\"),\n\t\t\townershipScope: ownershipScopeForRequest(req),\n\t\t});\n\t\tsendJson(res, 200, cockpit, corsHeaders, req);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, corsHeaders, req);\n\t}\n}\n\nfunction ownershipScopeForRequest(\n\treq: IncomingMessage,\n): A2AOwnershipScope | undefined {\n\tconst principal = getVerifiedRequestPrincipal(req);\n\tconst scopeKey =\n\t\tresolveSessionScope(req) ??\n\t\t(principal?.authMethod !== \"anon\" ? principal?.scopeKey : undefined);\n\tif (!scopeKey) {\n\t\treturn undefined;\n\t}\n\treturn {\n\t\tscopeKey,\n\t\t...(principal?.subject ? { subject: principal.subject } : {}),\n\t\t...(principal?.userId ? { userId: principal.userId } : {}),\n\t\t...(principal?.keyId ? { keyId: principal.keyId } : {}),\n\t\t...(principal?.workspaceId ? { workspaceId: principal.workspaceId } : {}),\n\t\t...(principal?.orgId ? { orgId: principal.orgId } : {}),\n\t\t...(principal?.teamId ? { teamId: principal.teamId } : {}),\n\t};\n}\n\nfunction rejectHostedPathOverrides(url: URL): void {\n\tconst blockedParams = [\"registry\", \"tasks\"].filter((key) =>\n\t\turl.searchParams.has(key),\n\t);\n\tif (blockedParams.length > 0) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`${blockedParams.join(\", \")} query parameter${\n\t\t\t\tblockedParams.length === 1 ? \" is\" : \"s are\"\n\t\t\t} not supported by the hosted A2A cockpit`,\n\t\t);\n\t}\n}\n\nfunction optionalQueryString(url: URL, key: string): string | undefined {\n\tconst value = url.searchParams.get(key)?.trim();\n\treturn value ? value : undefined;\n}\n\nfunction positiveIntegerQuery(\n\turl: URL,\n\tkey: string,\n\toptions: { max?: number } = {},\n): number | undefined {\n\tconst value = optionalQueryString(url, key);\n\tif (!value) {\n\t\treturn undefined;\n\t}\n\tconst parsed = Number(value);\n\tif (!Number.isInteger(parsed) || parsed <= 0) {\n\t\tthrow new ApiError(400, `${key} must be a positive integer`);\n\t}\n\tif (options.max !== undefined && parsed > options.max) {\n\t\tthrow new ApiError(400, `${key} must be at most ${options.max}`);\n\t}\n\treturn parsed;\n}\n"]}

package/dist/server/handlers/headless-sessions.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"headless-sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"~~AAAA~~,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAmBjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;~~AA2B1D~~,oBAAY,qBAAqB;IAChC,eAAe,sBAAsB;IACrC,qBAAqB,4BAA4B;CACjD;~~AA8qBD~~,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAQzB;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAazB;AAED,wBAAgB,0BAA0B,CACzC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAI/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAyD/B;AAED,wBAAsB,gCAAgC,CACrD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAW/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiB/B;AAED,wBAAsB,+BAA+B,CACpD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAqB/B;AAED,wBAAgB,2BAA2B,CAC1C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAsE/B;AAED,wBAAsB,4BAA4B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAsB/B"}
1	+ {"version":3,"file":"headless-sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAmBjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AA4B1D,oBAAY,qBAAqB;IAChC,eAAe,sBAAsB;IACrC,qBAAqB,4BAA4B;CACjD;AA+rBD,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAQzB;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAazB;AAED,wBAAgB,0BAA0B,CACzC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAI/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAyD/B;AAED,wBAAsB,gCAAgC,CACrD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAW/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiB/B;AAED,wBAAsB,+BAA+B,CACpD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAqB/B;AAED,wBAAgB,2BAA2B,CAC1C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAsE/B;AAED,wBAAsB,4BAA4B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAsB/B"}

package/dist/server/handlers/headless-sessions.js CHANGED Viewed

@@ -1,9 +1,11 @@
+import { existsSync } from "node:fs";
 import { headlessApprovalModes, headlessConnectionRoles, headlessNotificationTypes, headlessServerRequestTypes, headlessThinkingLevels, headlessToAgentMessageSchemasByType, headlessToAgentMessageTypes, headlessUtilityOperations, } from "@evalops/contracts";
 import { Type } from "@sinclair/typebox";
 import { resolveExistingWorkspaceRoot } from "../../headless/workspace-root.js";
 import { recordMaestroSessionRuntimeTrigger } from "../../platform/agent-runtime-client.js";
 import { normalizeApprovalMode, resolveApprovalModeForRequest, } from "../approval-mode-store.js";
 import { getAuthScopeKey, getAuthSubject } from "../authz.js";
+import { loadHostedRunnerRestoreManifest } from "../headless-runtime-service.js";
 import { bindHostedRunnerPlatformLease, claimHostedRunnerLease, evaluateHostedRunnerLeaseUse, } from "../hosted-runner-lease.js";
 import { getTraceParentHeader } from "../request-context.js";
 import { ApiError, getRequestHeader, readRequestBody, sendJson, } from "../server-utils.js";
@@ -293,11 +295,24 @@ function rethrowHeadlessConnectionLifecycleError(error) {
 async function ensureRuntime(req, context, input) {
     const sessionManager = createSessionManagerForRequest(req, false);
     const role = getHeadlessRole(req, input.role);
-    const requestedSessionId = input.sessionId?.trim() || undefined;
+    const hostedRestoreSessionId = context.hostedRunner?.restoreManifestPath
+        ? (context.hostedRunner.activeMaestroSessionId ??
+            context.hostedRunner.configuredMaestroSessionId)
+        : undefined;
+    const requestedSessionId = input.sessionId?.trim() || hostedRestoreSessionId || undefined;
     const workspaceRoot = resolveRuntimeWorkspaceRoot(context, input.workspaceRoot);
     ensureHostedRunnerCanUseSession(context, requestedSessionId);
     if (requestedSessionId) {
-        const sessionFile = sessionManager.getSessionFileById(requestedSessionId);
+        let sessionFile = sessionManager.getSessionFileById(requestedSessionId);
+        if (!sessionFile && context.hostedRunner?.restoreManifestPath) {
+            const restoreManifest = await loadHostedRunnerRestoreManifest(context.hostedRunner.restoreManifestPath);
+            const restoreSessionFile = restoreManifest?.maestro_session_id === requestedSessionId
+                ? restoreManifest.runtime.session_file
+                : undefined;
+            if (restoreSessionFile && existsSync(restoreSessionFile)) {
+                sessionFile = restoreSessionFile;
+            }
+        }
         if (!sessionFile) {
             throw new ApiError(404, "Session not found");
         }

package/dist/server/handlers/headless-sessions.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"headless-sessions.js","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"AACA,OAAO,EAEN,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,mCAAmC,EACnC,2BAA2B,EAC3B,yBAAyB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAA6B,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAEhF,OAAO,EAAE,kCAAkC,EAAE,MAAM,wCAAwC,CAAC;AAE5F,OAAO,EACN,qBAAqB,EACrB,6BAA6B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAO9D,OAAO,EACN,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EACN,QAAQ,EACR,gBAAgB,EAChB,eAAe,EACf,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEzE,MAAM,CAAN,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAChC,8DAAqC,CAAA;IACrC,0EAAiD,CAAA;AAClD,CAAC,EAHW,qBAAqB,KAArB,qBAAqB,QAGhC;AAED,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAE3D,SAAS,kBAAkB,CAAoC,MAAS;IACvE,OAAO,IAAI,CAAC,MAAM,CACjB,IAAI,CAAC,KAAK,CACT,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAGxC,CACD,CACD,CAAC;AACH,CAAC;AAED,MAAM,iCAAiC,GAAG,IAAI,CAAC,KAAK,CACnD,kBAAkB,CAAC,yBAAyB,CAAC,EAC7C;IACC,WAAW,EAAE,IAAI;CACjB,CACD,CAAC;AAEF,MAAM,4BAA4B,GAAG;IACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAChD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,KAAK,CAAC;QACV,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;KACzB,CAAC,CACF;IACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACxE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;CAC7D,CAAC;AAEX,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAE9E,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,GAAG,4BAA4B;IAC/B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,CAAC,MAAM,CAC5C;IACC,IAAI,EAAE,kBAAkB,CAAC,2BAA2B,CAAC;CACrD,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAEH,MAAM,+BAA+B,GAAG,IAAI,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAoBH,KAAK,UAAU,oBAAoB,CAClC,GAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAC/B,MAAM,EACN,yBAAyB,EACzB,MAAM,CACN,CAAC;IACF,OAAO,eAAe,CACrB,MAAM,EACN,mCAAmC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAClD,MAAM,CACN,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACvB,GAAoB,EACpB,YAAqC;IAErC,IAAI,YAAY,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAClC,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,CAAC;IACF,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,SAAS,gCAAgC,CACxC,cAEmB;IAEnB,IAAI,cAAc,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,OAAgB;IACtD,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAChC,GAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,GAAG,EACd,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,aAAa,GAAG,GAAG;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,eAAe,CAGrB,aAAa,EACb,iCAAiC,EACjC,2BAA2B,CAC3B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB;IACxC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAyB,EACzB,QAA4C;IAE5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QACzC,iBAAiB,EAAE,YAAY,EAAE,eAAe;QAChD,iBAAiB,EAAE,YAAY,EAAE,eAAe;QAChD,YAAY,EAAE,YAAY,EAAE,WAAW;QACvC,YAAY,EAAE,YAAY,EAAE,UAAU;QACtC,GAAG,QAAQ;KACX,CAAC,EAAE,CAAC;QACJ,IAAI,KAAK,EAAE,CAAC;YACX,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACF,CAAC;IACD,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,SAAS,0BAA0B,CAClC,OAAyB,EACzB,OAAe,EACf,QAA4C;IAE5C,OAAO,IAAI,QAAQ,CAClB,GAAG,EACH,OAAO,EACP;QACC;YACC,MAAM,EAAE,qBAAqB,CAAC,qBAAqB;YACnD,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;SACtD;KACD,EACD,qBAAqB,CAAC,qBAAqB,CAC3C,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAyB,EACzB,OAAe,EACf,QAA4C;IAE5C,OAAO,IAAI,QAAQ,CAClB,GAAG,EACH,OAAO,EACP;QACC;YACC,MAAM,EAAE,qBAAqB,CAAC,eAAe;YAC7C,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;SACtD;KACD,EACD,qBAAqB,CAAC,eAAe,CACrC,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACvC,OAAyB,EACzB,kBAAsC;IAEtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,4BAA4B,CAC5C,YAAY,EACZ,kBAAkB,CAClB,CAAC;IACF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;IACR,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC5C,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;YAC1D,QAAQ,EAAE,MAAM;YAChB,kBAAkB,EAAE,QAAQ,CAAC,eAAe;YAC5C,4BAA4B,EAAE,kBAAkB;YAChD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;SACtD,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;QAC3D,kBAAkB,EAAE,QAAQ,CAAC,eAAe;QAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB;QACzD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;KACtD,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAChC,OAAyB,EACzB,SAAiB;IAEjB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAC5C,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;gBAC1D,QAAQ,EAAE,MAAM;gBAChB,kBAAkB,EAAE,QAAQ,CAAC,eAAe;gBAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB,IAAI,SAAS;gBACtE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;aACtD,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;YAC3D,kBAAkB,EAAE,QAAQ,CAAC,eAAe;YAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB,IAAI,SAAS;YACtE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;SACtD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,SAAS,2BAA2B,CACnC,OAAyB,EACzB,aAAiC;IAEjC,MAAM,aAAa,GAAG,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAE5E,IAAI,qBAAyC,CAAC;IAC9C,IAAI,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC;YACJ,qBAAqB,GAAG,4BAA4B,CAAC,aAAa,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4BAA4B,aAAa,EAAE,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IAED,IAAI,kBAAsC,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,kBAAkB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,UAAU,EAAE,CAC5D,CAAC;QACH,CAAC;IACF,CAAC;IAED,IACC,qBAAqB;QACrB,kBAAkB;QAClB,qBAAqB,KAAK,kBAAkB,EAC3C,CAAC;QACF,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,0DAA0D,kBAAkB,EAAE,CAC9E,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,IAAI,qBAAqB,CAAC;AACpD,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IAClD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,kDAAkD,EAAE,CAAC;QAC1E,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,KAAK,+BAA+B;QACjD,KAAK,CAAC,OAAO,KAAK,qDAAqD;QACvE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EACvD,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,uCAAuC,CAAC,KAAc;IAC9D,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC1C,KAAK,CAAC,OAAO;YACZ,2DAA2D,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,KAAK,CAAC;AACb,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,GAAoB,EACpB,OAAyB,EACzB,KAGC;IAED,MAAM,cAAc,GAAG,8BAA8B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChE,MAAM,aAAa,GAAG,2BAA2B,CAChD,OAAO,EACP,KAAK,CAAC,aAAa,CACnB,CAAC;IACF,+BAA+B,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC7D,IAAI,kBAAkB,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC9C,CAAC;QACD,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,IACC,KAAK,CAAC,iBAAiB;QACvB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,mEAAmE,CACnE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,6DAA6D,CAC7D,CAAC;IACH,CAAC;IACD,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,qBAAqB,CAC3C,gBAAgB,CACf,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,IAAI,SAAS,CACd,CAAC;IACF,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;QACvD,SAAS,EAAE,kBAAkB,IAAI,cAAc,CAAC,YAAY,EAAE;QAC9D,OAAO;QACP,kBAAkB,EAAE,KAAK,CAAC,YAAY,IAAI,cAAc;QACxD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;KAChD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC;QAClE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;QAC3B,SAAS,EAAE,kBAAkB;QAC7B,OAAO;QACP,aAAa;QACb,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,eAAe;QACf,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAkB;QAC9D,YAAY,EAAE,iBAAiB;QAC/B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;QACpD,OAAO;QACP,cAAc;KACd,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,yBAAyB,KAAK,KAAK,EAAE,CAAC;QAC/C,MAAM,sCAAsC,CAAC;YAC5C,OAAO;YACP,OAAO;YACP,OAAO;YACP,eAAe;YACf,IAAI;YACJ,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAkB;YAC9D,YAAY,EAAE,iBAAiB;YAC/B,aAAa;YACb,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,sCAAsC,CAAC,OAUrD;IACA,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;IAClD,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,wCAAwC;IACxC,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC;QACvD,WAAW,EAAE,YAAY,EAAE,WAAW;QACtC,OAAO,EAAE,YAAY,EAAE,OAAO;QAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,mBAAmB,QAAQ,CAAC,UAAU,EAAE;QACvD,WAAW,EAAE,oBAAoB,EAAE;QACnC,QAAQ,EAAE;YACT,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE;YACjC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,QAAQ;YAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,aAAa,EAAE,OAAO,CAAC,YAAY;YACnC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS;YACzC,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe;YAC/C,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,iBAAiB,EAAE,YAAY,EAAE,eAAe;YAChD,iBAAiB,EAAE,YAAY,EAAE,eAAe;YAChD,QAAQ,EAAE,YAAY,EAAE,OAAO;SAC/B;KACD,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO;IACR,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,yCAAyC,CACnE,EAAE,UAAU,CAAC;IACd,6BAA6B,CAAC,YAAY,EAAE;QAC3C,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO;QACpC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK;KACnC,CAAC,CAAC;IACH,2EAA2E;IAC3E,0EAA0E;IAC1E,oEAAoE;IACpE,YAAY,CAAC,YAAY,GAAG,cAAc;QACzC,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACnD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,SAAS,GAAG,cAAc;QACtC,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,aAAa,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,uBAAuB,GAAG,cAAc;QACpD,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,2BAA2B,GAAG,cAAc;QACxD,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,kBAAkB,CAAC;QACrD,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CACvB,UAAmC,EACnC,GAAW;IAEX,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,GAAoB,EACpB,OAAyB,EACzB,KAAoC;IAEpC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE;QACjD,GAAG,KAAK;QACR,kBAAkB,EAAE,KAAK;QACzB,yBAAyB,EAAE,KAAK;KAChC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO;QACN,GAAG,SAAS;QACZ,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,IAAI;QACJ,qBAAqB,EAAE,KAAK,CAAC,mBAAmB;QAChD,QAAQ;KACR,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAClB,GAAoB,EACpB,OAAyB,EACzB,SAA6B;IAE7B,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IACxD,CAAC;IACD,+BAA+B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,UAAU,CACxD,WAAW,CAAC,GAAG,CAAC,EAChB,SAAS,CACT,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,2BAA2B,CAC3B,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,UAA6C,CAAC;IAClD,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,OAAO,CAAC,kBAAkB,CAAC;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI;YACJ,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,qBAAqB,EAAE,KAAK,CAAC,eAAe;YAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAC/B,CAAC,CAAC;oBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;oBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;oBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;iBACnD;gBACF,CAAC,CAAC,SAAS;YACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC9C,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IACC,KAAK,YAAY,KAAK;YACtB,KAAK,CAAC,OAAO,KAAK,wDAAwD,EACzE,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IACC,KAAK,YAAY,KAAK;YACtB,CAAC,KAAK,CAAC,OAAO,KAAK,+BAA+B;gBACjD,KAAK,CAAC,OAAO;oBACZ,2DAA2D,CAAC,EAC7D,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACrD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,gCAAgC,CAChC,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,SAA2C,CAAC;IAChD,IAAI,CAAC;QACJ,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC;YACvC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,+BAA+B,CAC/B,CAAC;IACF,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,MAAM,OAAO,CAAC,oBAAoB,CAAC;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,0BAA0B,MAAM,EAAE,EAAE,SAAS,EACxD,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,cAAc,GACnB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAExE,MAAM,MAAM,GAAG,cAAc;QAC5B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;YAC7B,MAAM;YACN,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;YAC1B,mBAAmB,EAAE,wBAAwB,CAAC,GAAG,CAAC;SAClD,CAAC,CAAC;IACL,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QAClB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,UAAU;QAC3B,UAAU,EAAE,YAAY;QACxB,GAAG,OAAO,CAAC,WAAW;KACtB,CAAC,CAAC;IACH,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,KAAK,GAAG,GAAG,EAAE;QAClB,IAAI,QAAQ,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACnC,OAAO;QACR,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,QAAQ,GAAG,KAAK,CAAC;gBACjB,OAAO;YACR,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,QAAQ,GAAG,KAAK,CAAC;oBACjB,KAAK,EAAE,CAAC;gBACT,CAAC,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;QACF,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACpC,KAAK,EAAE,CAAC;QACT,CAAC;IACF,CAAC,EAAE,KAAK,CAAC,CAAC;IACV,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,MAAM,OAAO,GAAG,GAAG,EAAE;QACpB,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,aAAa,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC;AACT,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC;QACJ,OAAO,CAAC,aAAa,CACpB,eAAe,CAAC,GAAG,CAAC,EACpB,uBAAuB,CAAC,GAAG,CAAC,EAC5B,uBAAuB,CAAC,GAAG,CAAC,CAC5B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,CAAC,IAAI,CAAC,KAA+B,EAAE;YACnD,YAAY,EAAE,uBAAuB,CAAC,GAAG,CAAC;YAC1C,cAAc,EAAE,uBAAuB,CAAC,GAAG,CAAC;SAC5C,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport {\n\ttype HeadlessConnectionRole,\n\theadlessApprovalModes,\n\theadlessConnectionRoles,\n\theadlessNotificationTypes,\n\theadlessServerRequestTypes,\n\theadlessThinkingLevels,\n\theadlessToAgentMessageSchemasByType,\n\theadlessToAgentMessageTypes,\n\theadlessUtilityOperations,\n} from \"@evalops/contracts\";\nimport { type Static, type TSchema, Type } from \"@sinclair/typebox\";\nimport type { ApprovalMode } from \"../../agent/action-approval.js\";\nimport type { ThinkingLevel } from \"../../agent/types.js\";\nimport type { HeadlessToAgentMessage } from \"../../cli/headless-protocol.js\";\nimport { resolveExistingWorkspaceRoot } from \"../../headless/workspace-root.js\";\nimport type { RegisteredModel } from \"../../models/registry.js\";\nimport { recordMaestroSessionRuntimeTrigger } from \"../../platform/agent-runtime-client.js\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport {\n\tnormalizeApprovalMode,\n\tresolveApprovalModeForRequest,\n} from \"../approval-mode-store.js\";\nimport { getAuthScopeKey, getAuthSubject } from \"../authz.js\";\nimport type {\n\tHeadlessRuntimeConnectionSnapshot,\n\tHeadlessRuntimeHeartbeatSnapshot,\n\tHeadlessRuntimeStreamEnvelope,\n\tHeadlessSessionRuntime,\n} from \"../headless-runtime-service.js\";\nimport {\n\tbindHostedRunnerPlatformLease,\n\tclaimHostedRunnerLease,\n\tevaluateHostedRunnerLeaseUse,\n} from \"../hosted-runner-lease.js\";\nimport { getTraceParentHeader } from \"../request-context.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\treadRequestBody,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { createSessionManagerForRequest } from \"../session-scope.js\";\nimport { parseAndValidateJson, validatePayload } from \"../validation.js\";\n\nexport enum HostedRunnerErrorType {\n\tRuntimeNotReady = \"runtime_not_ready\",\n\tRuntimeOwnedElsewhere = \"runtime_owned_elsewhere\",\n}\n\nconst HOSTED_RUNNER_ERROR_DOMAIN = \"maestro.hosted_runner\";\n\nfunction stringLiteralUnion<const T extends readonly string[]>(values: T) {\n\treturn Type.Unsafe<T[number]>(\n\t\tType.Union(\n\t\t\tvalues.map((value) => Type.Literal(value)) as unknown as [\n\t\t\t\tTSchema,\n\t\t\t\t...TSchema[],\n\t\t\t],\n\t\t),\n\t);\n}\n\nconst HeadlessOptOutNotificationsSchema = Type.Array(\n\tstringLiteralUnion(headlessNotificationTypes),\n\t{\n\t\tuniqueItems: true,\n\t},\n);\n\nconst HeadlessCreateBaseProperties = {\n\tsessionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tworkspaceRoot: Type.Optional(Type.String()),\n\tmodel: Type.Optional(Type.String()),\n\tenableClientTools: Type.Optional(Type.Boolean()),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\tclient: Type.Optional(\n\t\tType.Union([\n\t\t\tType.Literal(\"generic\"),\n\t\t\tType.Literal(\"vscode\"),\n\t\t\tType.Literal(\"jetbrains\"),\n\t\t\tType.Literal(\"conductor\"),\n\t\t]),\n\t),\n\tthinkingLevel: Type.Optional(stringLiteralUnion(headlessThinkingLevels)),\n\tapprovalMode: Type.Optional(stringLiteralUnion(headlessApprovalModes)),\n} as const;\n\nconst HeadlessSessionCreateSchema = Type.Object(HeadlessCreateBaseProperties);\n\nconst HeadlessConnectionCreateSchema = Type.Object({\n\t...HeadlessCreateBaseProperties,\n\tconnectionId: Type.Optional(Type.String()),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessMessageTypeSchema = Type.Object(\n\t{\n\t\ttype: stringLiteralUnion(headlessToAgentMessageTypes),\n\t},\n\t{ additionalProperties: true },\n);\n\nconst HeadlessSessionSubscribeSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessSessionUnsubscribeSchema = Type.Object({\n\tsubscriptionId: Type.String(),\n});\n\nconst HeadlessSessionHeartbeatSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\nconst HeadlessSessionDisconnectSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\ntype HeadlessSessionCreateInput = Static<typeof HeadlessSessionCreateSchema>;\ntype HeadlessConnectionCreateInput = Static<\n\ttypeof HeadlessConnectionCreateSchema\n>;\ntype HeadlessSessionSubscribeInput = Static<\n\ttypeof HeadlessSessionSubscribeSchema\n>;\ntype HeadlessSessionUnsubscribeInput = Static<\n\ttypeof HeadlessSessionUnsubscribeSchema\n>;\ntype HeadlessSessionHeartbeatInput = Static<\n\ttypeof HeadlessSessionHeartbeatSchema\n>;\ntype HeadlessSessionDisconnectInput = Static<\n\ttypeof HeadlessSessionDisconnectSchema\n>;\ntype HeadlessMessageTypeInput = Static<typeof HeadlessMessageTypeSchema>;\n\nasync function parseHeadlessMessage(\n\treq: IncomingMessage,\n): Promise<HeadlessToAgentMessage> {\n\tconst raw = await readRequestBody(req);\n\tif (!raw.length) {\n\t\tthrow new ApiError(400, \"Request body required\");\n\t}\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(raw.toString());\n\t} catch {\n\t\tthrow new ApiError(400, \"Invalid JSON payload\");\n\t}\n\tconst envelope = validatePayload<HeadlessMessageTypeInput>(\n\t\tparsed,\n\t\tHeadlessMessageTypeSchema,\n\t\t\"body\",\n\t);\n\treturn validatePayload<HeadlessToAgentMessage>(\n\t\tparsed,\n\t\theadlessToAgentMessageSchemasByType[envelope.type],\n\t\t\"body\",\n\t);\n}\n\nfunction getHeadlessRole(\n\treq: IncomingMessage,\n\texplicitRole?: HeadlessConnectionRole,\n): HeadlessConnectionRole {\n\tif (explicitRole) {\n\t\treturn explicitRole;\n\t}\n\tconst headerRole = getRequestHeader(\n\t\treq,\n\t\t\"x-composer-headless-role\",\n\t\t\"x-maestro-headless-role\",\n\t);\n\treturn headerRole === \"viewer\" ? \"viewer\" : \"controller\";\n}\n\nfunction getViewerDisallowedServerRequest(\n\tserverRequests?: Static<\n\t\ttypeof HeadlessCreateBaseProperties.capabilities\n\t>[\"serverRequests\"],\n): \"mcp_elicitation\" \| \"user_input\" \| undefined {\n\tif (serverRequests?.includes(\"mcp_elicitation\")) {\n\t\treturn \"mcp_elicitation\";\n\t}\n\tif (serverRequests?.includes(\"user_input\")) {\n\t\treturn \"user_input\";\n\t}\n\treturn undefined;\n}\n\nfunction writeSse(res: ServerResponse, payload: unknown): boolean {\n\treturn res.write(`data: ${JSON.stringify(payload)}\\n\\n`);\n}\n\nfunction getHeadlessSubscriberId(req: IncomingMessage): string \| undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-subscriber-id\",\n\t\t\t\"x-maestro-headless-subscriber-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction getHeadlessConnectionId(req: IncomingMessage): string \| undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-connection-id\",\n\t\t\t\"x-maestro-headless-connection-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction parseOptOutNotifications(\n\treq: IncomingMessage,\n): HeadlessSessionSubscribeInput[\"optOutNotifications\"] {\n\tconst url = new URL(\n\t\treq.url \|\| \"/\",\n\t\t`http://${req.headers.host \|\| \"localhost\"}`,\n\t);\n\tconst raw = url.searchParams.get(\"optOutNotifications\");\n\tif (!raw) {\n\t\treturn undefined;\n\t}\n\tconst notifications = raw\n\t\t.split(\",\")\n\t\t.map((value) => value.trim())\n\t\t.filter(Boolean);\n\tif (notifications.length === 0) {\n\t\treturn undefined;\n\t}\n\treturn validatePayload<\n\t\tNonNullable<HeadlessSessionSubscribeInput[\"optOutNotifications\"]>\n\t>(\n\t\tnotifications,\n\t\tHeadlessOptOutNotificationsSchema,\n\t\t\"query.optOutNotifications\",\n\t);\n}\n\nfunction getScopeKey(req: IncomingMessage): string {\n\treturn getAuthScopeKey(req);\n}\n\nfunction hostedRunnerErrorMetadata(\n\tcontext: WebServerContext,\n\tmetadata: Record<string, string \| undefined>,\n): Record<string, string> {\n\tconst hostedRunner = context.hostedRunner;\n\tconst detailMetadata: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries({\n\t\trunner_session_id: hostedRunner?.runnerSessionId,\n\t\towner_instance_id: hostedRunner?.ownerInstanceId,\n\t\tworkspace_id: hostedRunner?.workspaceId,\n\t\tagent_run_id: hostedRunner?.agentRunId,\n\t\t...metadata,\n\t})) {\n\t\tif (value) {\n\t\t\tdetailMetadata[key] = value;\n\t\t}\n\t}\n\treturn detailMetadata;\n}\n\nfunction hostedRunnerOwnershipError(\n\tcontext: WebServerContext,\n\tmessage: string,\n\tmetadata: Record<string, string \| undefined>,\n): ApiError {\n\treturn new ApiError(\n\t\t409,\n\t\tmessage,\n\t\t[\n\t\t\t{\n\t\t\t\treason: HostedRunnerErrorType.RuntimeOwnedElsewhere,\n\t\t\t\tdomain: HOSTED_RUNNER_ERROR_DOMAIN,\n\t\t\t\tmetadata: hostedRunnerErrorMetadata(context, metadata),\n\t\t\t},\n\t\t],\n\t\tHostedRunnerErrorType.RuntimeOwnedElsewhere,\n\t);\n}\n\nfunction hostedRunnerNotReadyError(\n\tcontext: WebServerContext,\n\tmessage: string,\n\tmetadata: Record<string, string \| undefined>,\n): ApiError {\n\treturn new ApiError(\n\t\t503,\n\t\tmessage,\n\t\t[\n\t\t\t{\n\t\t\t\treason: HostedRunnerErrorType.RuntimeNotReady,\n\t\t\t\tdomain: HOSTED_RUNNER_ERROR_DOMAIN,\n\t\t\t\tmetadata: hostedRunnerErrorMetadata(context, metadata),\n\t\t\t},\n\t\t],\n\t\tHostedRunnerErrorType.RuntimeNotReady,\n\t);\n}\n\nfunction ensureHostedRunnerCanUseSession(\n\tcontext: WebServerContext,\n\trequestedSessionId: string \| undefined,\n): void {\n\tconst hostedRunner = context.hostedRunner;\n\tif (!hostedRunner) {\n\t\treturn;\n\t}\n\tconst decision = evaluateHostedRunnerLeaseUse(\n\t\thostedRunner,\n\t\trequestedSessionId,\n\t);\n\tif (decision.ok) {\n\t\treturn;\n\t}\n\tif (decision.reason === \"runtime_draining\") {\n\t\tthrow hostedRunnerNotReadyError(context, decision.message, {\n\t\t\tdraining: \"true\",\n\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\trequested_maestro_session_id: requestedSessionId,\n\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t});\n\t}\n\tthrow hostedRunnerOwnershipError(context, decision.message, {\n\t\tmaestro_session_id: decision.activeSessionId,\n\t\trequested_maestro_session_id: decision.requestedSessionId,\n\t\tlease_generation: String(decision.snapshot.generation),\n\t});\n}\n\nfunction claimHostedRunnerSession(\n\tcontext: WebServerContext,\n\tsessionId: string,\n): void {\n\tconst hostedRunner = context.hostedRunner;\n\tif (!hostedRunner) {\n\t\treturn;\n\t}\n\tconst decision = claimHostedRunnerLease(hostedRunner, sessionId);\n\tif (!decision.ok) {\n\t\tif (decision.reason === \"runtime_draining\") {\n\t\t\tthrow hostedRunnerNotReadyError(context, decision.message, {\n\t\t\t\tdraining: \"true\",\n\t\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\t\trequested_maestro_session_id: decision.requestedSessionId ?? sessionId,\n\t\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t\t});\n\t\t}\n\t\tthrow hostedRunnerOwnershipError(context, decision.message, {\n\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\trequested_maestro_session_id: decision.requestedSessionId ?? sessionId,\n\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t});\n\t}\n}\n\nfunction resolveRuntimeWorkspaceRoot(\n\tcontext: WebServerContext,\n\tworkspaceRoot: string \| undefined,\n): string \| undefined {\n\tconst requestedRoot = workspaceRoot?.trim() \|\| undefined;\n\tconst hostedRoot = context.hostedRunner?.workspaceRoot?.trim() \|\| undefined;\n\n\tlet resolvedRequestedRoot: string \| undefined;\n\tif (requestedRoot) {\n\t\ttry {\n\t\t\tresolvedRequestedRoot = resolveExistingWorkspaceRoot(requestedRoot);\n\t\t} catch {\n\t\t\tthrow new ApiError(400, `workspaceRoot not found: ${requestedRoot}`);\n\t\t}\n\t}\n\n\tlet resolvedHostedRoot: string \| undefined;\n\tif (hostedRoot) {\n\t\ttry {\n\t\t\tresolvedHostedRoot = resolveExistingWorkspaceRoot(hostedRoot);\n\t\t} catch {\n\t\t\tthrow new ApiError(\n\t\t\t\t500,\n\t\t\t\t`Hosted runner workspace root is unavailable: ${hostedRoot}`,\n\t\t\t);\n\t\t}\n\t}\n\n\tif (\n\t\tresolvedRequestedRoot &&\n\t\tresolvedHostedRoot &&\n\t\tresolvedRequestedRoot !== resolvedHostedRoot\n\t) {\n\t\tthrow new ApiError(\n\t\t\t409,\n\t\t\t`workspaceRoot must match hosted runner workspace root: ${resolvedHostedRoot}`,\n\t\t);\n\t}\n\n\treturn resolvedHostedRoot ?? resolvedRequestedRoot;\n}\n\nfunction rethrowHeadlessMessageError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Viewer headless connections cannot send messages\") {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message === \"Headless subscriber not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message === \"Headless connection not found\" \|\|\n\t\terror.message === \"Headless connection does not have controller access\" \|\|\n\t\terror.message.includes(\"is owned by another connection\")\n\t) {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message.includes(\"Controller lease\")) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow new ApiError(403, error.message);\n}\n\nfunction rethrowHeadlessConnectionLifecycleError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Headless connection not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message.includes(\"Controller lease\") \|\|\n\t\terror.message ===\n\t\t\t\"Headless connection role does not match subscription role\"\n\t) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow error;\n}\n\nasync function ensureRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessSessionCreateInput & {\n\t\tregisterConnection?: boolean;\n\t\trecordAgentRuntimeTrigger?: boolean;\n\t},\n) {\n\tconst sessionManager = createSessionManagerForRequest(req, false);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst requestedSessionId = input.sessionId?.trim() \|\| undefined;\n\tconst workspaceRoot = resolveRuntimeWorkspaceRoot(\n\t\tcontext,\n\t\tinput.workspaceRoot,\n\t);\n\tensureHostedRunnerCanUseSession(context, requestedSessionId);\n\tif (requestedSessionId) {\n\t\tconst sessionFile = sessionManager.getSessionFileById(requestedSessionId);\n\t\tif (!sessionFile) {\n\t\t\tthrow new ApiError(404, \"Session not found\");\n\t\t}\n\t\tsessionManager.setSessionFile(sessionFile);\n\t}\n\n\tconst registeredModel = await context.getRegisteredModel(input.model);\n\tconst subject = getAuthSubject(req);\n\tif (\n\t\tinput.enableClientTools &&\n\t\t!input.capabilities?.serverRequests?.includes(\"client_tool\")\n\t) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"client_tool capability is required when enableClientTools is true\",\n\t\t);\n\t}\n\tif (role === \"viewer\" && input.enableClientTools) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"viewer headless connections cannot enable client-side tools\",\n\t\t);\n\t}\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\tconst headerApproval = normalizeApprovalMode(\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-approval-mode\",\n\t\t\t\"x-maestro-approval-mode\",\n\t\t) ?? undefined,\n\t);\n\tconst effectiveApproval = resolveApprovalModeForRequest({\n\t\tsessionId: requestedSessionId ?? sessionManager.getSessionId(),\n\t\tsubject,\n\t\theaderApprovalMode: input.approvalMode ?? headerApproval,\n\t\tdefaultApprovalMode: context.defaultApprovalMode,\n\t});\n\n\tconst runtime = await context.headlessRuntimeService.ensureRuntime({\n\t\tscope_key: getScopeKey(req),\n\t\tsessionId: requestedSessionId,\n\t\tsubject,\n\t\tworkspaceRoot,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\tregisteredModel,\n\t\tthinkingLevel: (input.thinkingLevel ?? \"off\") as ThinkingLevel,\n\t\tapprovalMode: effectiveApproval,\n\t\tenableClientTools: input.enableClientTools,\n\t\tclient: input.client,\n\t\tregisterConnection: input.registerConnection ?? true,\n\t\tcontext,\n\t\tsessionManager,\n\t});\n\tif (context.hostedRunner) {\n\t\tclaimHostedRunnerSession(context, runtime.getSnapshot().session_id);\n\t}\n\tif (input.recordAgentRuntimeTrigger !== false) {\n\t\tawait recordPlatformAgentRuntimeSessionStart({\n\t\t\tcontext,\n\t\t\truntime,\n\t\t\tsubject,\n\t\t\tregisteredModel,\n\t\t\trole,\n\t\t\tthinkingLevel: (input.thinkingLevel ?? \"off\") as ThinkingLevel,\n\t\t\tapprovalMode: effectiveApproval,\n\t\t\tworkspaceRoot,\n\t\t\tinput,\n\t\t});\n\t}\n\treturn runtime;\n}\n\nasync function recordPlatformAgentRuntimeSessionStart(options: {\n\tcontext: WebServerContext;\n\truntime: HeadlessSessionRuntime;\n\tsubject?: string;\n\tregisteredModel: RegisteredModel;\n\trole: HeadlessConnectionRole;\n\tthinkingLevel: ThinkingLevel;\n\tapprovalMode: ApprovalMode;\n\tworkspaceRoot: string \| undefined;\n\tinput: HeadlessSessionCreateInput;\n}): Promise<void> {\n\tconst snapshot = options.runtime.getSnapshot();\n\tconst hostedRunner = options.context.hostedRunner;\n\t// This is a projection, not ownership transfer. The local headless runtime\n\t// remains authoritative; Platform receives session-start metadata and trace\n\t// context so AgentRuntime, A2A, deploy smoke tests, and support endpoints can\n\t// all join on the same Maestro session.\n\tconst result = await recordMaestroSessionRuntimeTrigger({\n\t\tworkspaceId: hostedRunner?.workspaceId,\n\t\tagentId: hostedRunner?.agentId,\n\t\tsessionId: snapshot.session_id,\n\t\tactorId: options.subject,\n\t\tcorrelationId: `maestro-session:${snapshot.session_id}`,\n\t\ttraceparent: getTraceParentHeader(),\n\t\tmetadata: {\n\t\t\tmodel: options.registeredModel.id,\n\t\t\tprovider: options.registeredModel.provider,\n\t\t\trole: options.role,\n\t\t\tthinking_level: options.thinkingLevel,\n\t\t\tapproval_mode: options.approvalMode,\n\t\t\tclient: options.input.client ?? \"generic\",\n\t\t\tprotocol_version: options.input.protocolVersion,\n\t\t\tworkspace_root: options.workspaceRoot,\n\t\t\trunner_session_id: hostedRunner?.runnerSessionId,\n\t\t\towner_instance_id: hostedRunner?.ownerInstanceId,\n\t\t\tagent_id: hostedRunner?.agentId,\n\t\t},\n\t});\n\tif (!hostedRunner \|\| !result) {\n\t\treturn;\n\t}\n\tconst a2aCorrelation = result.events.find(\n\t\t(event) => event.type === \"maestro.platform_runtime.a2a_correlated\",\n\t)?.attributes;\n\tbindHostedRunnerPlatformLease(hostedRunner, {\n\t\tagentRunId: result.run.id,\n\t\tagentId: result.run.linkage?.agentId,\n\t\tleaseToken: result.run.lease?.token,\n\t});\n\t// Store only support-grade handles on the hosted runner. The full run/task\n\t// state stays in Platform; health and identity endpoints expose these ids\n\t// for operators without making Platform a session-state dependency.\n\thostedRunner.a2aMessageId = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"a2a_message_id\")\n\t\t: undefined;\n\thostedRunner.a2aTaskId = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"a2a_task_id\")\n\t\t: undefined;\n\thostedRunner.agentRuntimeWorkerQueue = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"worker_queue\")\n\t\t: undefined;\n\thostedRunner.agentRuntimeCorrelationPath = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"correlation_path\")\n\t\t: undefined;\n}\n\nfunction stringAttribute(\n\tattributes: Record<string, unknown>,\n\tkey: string,\n): string \| undefined {\n\tconst value = attributes[key];\n\treturn typeof value === \"string\" && value.trim().length > 0\n\t\t? value\n\t\t: undefined;\n}\n\nasync function ensureConnection(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessConnectionCreateInput,\n): Promise<HeadlessRuntimeConnectionSnapshot> {\n\tconst runtime = await ensureRuntime(req, context, {\n\t\t...input,\n\t\tregisterConnection: false,\n\t\trecordAgentRuntimeTrigger: false,\n\t});\n\tconst role = getHeadlessRole(req, input.role);\n\tconst heartbeat = runtime.registerConnection({\n\t\tconnectionId: input.connectionId,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\ttakeControl: input.takeControl,\n\t});\n\tconst snapshot = runtime.getSnapshot();\n\treturn {\n\t\t...heartbeat,\n\t\tsession_id: snapshot.session_id,\n\t\trole,\n\t\topt_out_notifications: input.optOutNotifications,\n\t\tsnapshot,\n\t};\n}\n\nfunction getRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tsessionId: string \| undefined,\n) {\n\tif (!sessionId) {\n\t\tthrow new ApiError(400, \"Missing headless session id\");\n\t}\n\tensureHostedRunnerCanUseSession(context, sessionId);\n\tconst runtime = context.headlessRuntimeService.getRuntime(\n\t\tgetScopeKey(req),\n\t\tsessionId,\n\t);\n\tif (!runtime) {\n\t\tthrow new ApiError(404, \"Headless session not found\");\n\t}\n\tif (context.hostedRunner) {\n\t\tclaimHostedRunnerSession(context, runtime.getSnapshot().session_id);\n\t}\n\treturn runtime;\n}\n\nexport async function handleHeadlessSessionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessSessionCreateInput>(\n\t\treq,\n\t\tHeadlessSessionCreateSchema,\n\t);\n\tconst runtime = await ensureRuntime(req, context, input);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessConnectionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessConnectionCreateInput>(\n\t\treq,\n\t\tHeadlessConnectionCreateSchema,\n\t);\n\tlet connection: HeadlessRuntimeConnectionSnapshot;\n\ttry {\n\t\tconnection = await ensureConnection(req, context, input);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, connection, context.corsHeaders, req);\n}\n\nexport function handleHeadlessSessionState(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionSubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionSubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionSubscribeSchema,\n\t);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\truntime.createSubscription({\n\t\t\t\tconnectionId: input.connectionId,\n\t\t\t\trole,\n\t\t\t\texplicit: true,\n\t\t\t\ttakeControl: input.takeControl,\n\t\t\t\tclientProtocolVersion: input.protocolVersion,\n\t\t\t\tclientInfo: input.clientInfo,\n\t\t\t\tcapabilities: input.capabilities\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t\t\t}\n\t\t\t\t\t: undefined,\n\t\t\t\toptOutNotifications: input.optOutNotifications,\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\terror.message === \"Controller lease is already held by another connection\"\n\t\t) {\n\t\t\tthrow new ApiError(409, error.message);\n\t\t}\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\t(error.message === \"Headless connection not found\" \|\|\n\t\t\t\terror.message ===\n\t\t\t\t\t\"Headless connection role does not match subscription role\")\n\t\t) {\n\t\t\tthrow new ApiError(400, error.message);\n\t\t}\n\t\tthrow error;\n\t}\n}\n\nexport async function handleHeadlessSessionUnsubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionUnsubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionUnsubscribeSchema,\n\t);\n\tif (!(await runtime.unsubscribe(input.subscriptionId))) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionHeartbeat(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionHeartbeatInput>(\n\t\treq,\n\t\tHeadlessSessionHeartbeatSchema,\n\t);\n\tlet heartbeat: HeadlessRuntimeHeartbeatSnapshot;\n\ttry {\n\t\theartbeat = runtime.heartbeatConnection({\n\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, heartbeat, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionDisconnect(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionDisconnectInput>(\n\t\treq,\n\t\tHeadlessSessionDisconnectSchema,\n\t);\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\tawait runtime.disconnectConnection({\n\t\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n}\n\nexport function handleHeadlessSessionEvents(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst url = new URL(\n\t\treq.url \|\| `/api/headless/sessions/${params?.id}/events`,\n\t\t`http://${req.headers.host \|\| \"localhost\"}`,\n\t);\n\tconst cursorParam = url.searchParams.get(\"cursor\");\n\tconst cursor = cursorParam ? Number.parseInt(cursorParam, 10) : null;\n\tconst subscriptionId =\n\t\turl.searchParams.get(\"subscriptionId\") \|\| getHeadlessSubscriberId(req);\n\n\tconst stream = subscriptionId\n\t\t? runtime.attachSubscription(subscriptionId)\n\t\t: runtime.createImplicitStream({\n\t\t\t\tcursor,\n\t\t\t\trole: getHeadlessRole(req),\n\t\t\t\toptOutNotifications: parseOptOutNotifications(req),\n\t\t\t});\n\tif (!stream) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\n\tres.writeHead(200, {\n\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\"Cache-Control\": \"no-cache\",\n\t\tConnection: \"keep-alive\",\n\t\t...context.corsHeaders,\n\t});\n\tlet flushing = false;\n\n\tconst flush = () => {\n\t\tif (flushing \|\| res.writableEnded) {\n\t\t\treturn;\n\t\t}\n\t\tflushing = true;\n\t\twhile (!res.writableEnded) {\n\t\t\tconst next = stream.next();\n\t\t\tif (!next) {\n\t\t\t\tflushing = false;\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst wrote = writeSse(res, next);\n\t\t\tif (!wrote) {\n\t\t\t\tres.once(\"drain\", () => {\n\t\t\t\t\tflushing = false;\n\t\t\t\t\tflush();\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t\tflushing = false;\n\t};\n\tconst stopListening = stream.onAvailable(flush);\n\tconst heartbeat = setInterval(() => {\n\t\tif (!res.writableEnded) {\n\t\t\tstream.enqueue(runtime.heartbeat());\n\t\t\tflush();\n\t\t}\n\t}, 15000);\n\theartbeat.unref();\n\n\tconst cleanup = () => {\n\t\tclearInterval(heartbeat);\n\t\tstopListening();\n\t\tstream.close();\n\t};\n\treq.on(\"close\", cleanup);\n\tres.on(\"close\", cleanup);\n\tflush();\n}\n\nexport async function handleHeadlessSessionMessage(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseHeadlessMessage(req);\n\ttry {\n\t\truntime.assertCanSend(\n\t\t\tgetHeadlessRole(req),\n\t\t\tgetHeadlessSubscriberId(req),\n\t\t\tgetHeadlessConnectionId(req),\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\ttry {\n\t\tawait runtime.send(input as HeadlessToAgentMessage, {\n\t\t\tconnectionId: getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n"]}
1	+ {"version":3,"file":"headless-sessions.js","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAEN,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,mCAAmC,EACnC,2BAA2B,EAC3B,yBAAyB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAA6B,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAEhF,OAAO,EAAE,kCAAkC,EAAE,MAAM,wCAAwC,CAAC;AAE5F,OAAO,EACN,qBAAqB,EACrB,6BAA6B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAO9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EACN,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EACN,QAAQ,EACR,gBAAgB,EAChB,eAAe,EACf,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEzE,MAAM,CAAN,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAChC,8DAAqC,CAAA;IACrC,0EAAiD,CAAA;AAClD,CAAC,EAHW,qBAAqB,KAArB,qBAAqB,QAGhC;AAED,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAE3D,SAAS,kBAAkB,CAAoC,MAAS;IACvE,OAAO,IAAI,CAAC,MAAM,CACjB,IAAI,CAAC,KAAK,CACT,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAGxC,CACD,CACD,CAAC;AACH,CAAC;AAED,MAAM,iCAAiC,GAAG,IAAI,CAAC,KAAK,CACnD,kBAAkB,CAAC,yBAAyB,CAAC,EAC7C;IACC,WAAW,EAAE,IAAI;CACjB,CACD,CAAC;AAEF,MAAM,4BAA4B,GAAG;IACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAChD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,KAAK,CAAC;QACV,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;KACzB,CAAC,CACF;IACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACxE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;CAC7D,CAAC;AAEX,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAE9E,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,GAAG,4BAA4B;IAC/B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,CAAC,MAAM,CAC5C;IACC,IAAI,EAAE,kBAAkB,CAAC,2BAA2B,CAAC;CACrD,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAEH,MAAM,+BAA+B,GAAG,IAAI,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAoBH,KAAK,UAAU,oBAAoB,CAClC,GAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAC/B,MAAM,EACN,yBAAyB,EACzB,MAAM,CACN,CAAC;IACF,OAAO,eAAe,CACrB,MAAM,EACN,mCAAmC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAClD,MAAM,CACN,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACvB,GAAoB,EACpB,YAAqC;IAErC,IAAI,YAAY,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAClC,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,CAAC;IACF,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,SAAS,gCAAgC,CACxC,cAEmB;IAEnB,IAAI,cAAc,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,OAAgB;IACtD,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAChC,GAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,GAAG,EACd,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,aAAa,GAAG,GAAG;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,eAAe,CAGrB,aAAa,EACb,iCAAiC,EACjC,2BAA2B,CAC3B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB;IACxC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAyB,EACzB,QAA4C;IAE5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QACzC,iBAAiB,EAAE,YAAY,EAAE,eAAe;QAChD,iBAAiB,EAAE,YAAY,EAAE,eAAe;QAChD,YAAY,EAAE,YAAY,EAAE,WAAW;QACvC,YAAY,EAAE,YAAY,EAAE,UAAU;QACtC,GAAG,QAAQ;KACX,CAAC,EAAE,CAAC;QACJ,IAAI,KAAK,EAAE,CAAC;YACX,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACF,CAAC;IACD,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,SAAS,0BAA0B,CAClC,OAAyB,EACzB,OAAe,EACf,QAA4C;IAE5C,OAAO,IAAI,QAAQ,CAClB,GAAG,EACH,OAAO,EACP;QACC;YACC,MAAM,EAAE,qBAAqB,CAAC,qBAAqB;YACnD,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;SACtD;KACD,EACD,qBAAqB,CAAC,qBAAqB,CAC3C,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAyB,EACzB,OAAe,EACf,QAA4C;IAE5C,OAAO,IAAI,QAAQ,CAClB,GAAG,EACH,OAAO,EACP;QACC;YACC,MAAM,EAAE,qBAAqB,CAAC,eAAe;YAC7C,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;SACtD;KACD,EACD,qBAAqB,CAAC,eAAe,CACrC,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACvC,OAAyB,EACzB,kBAAsC;IAEtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,4BAA4B,CAC5C,YAAY,EACZ,kBAAkB,CAClB,CAAC;IACF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;IACR,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC5C,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;YAC1D,QAAQ,EAAE,MAAM;YAChB,kBAAkB,EAAE,QAAQ,CAAC,eAAe;YAC5C,4BAA4B,EAAE,kBAAkB;YAChD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;SACtD,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;QAC3D,kBAAkB,EAAE,QAAQ,CAAC,eAAe;QAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB;QACzD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;KACtD,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAChC,OAAyB,EACzB,SAAiB;IAEjB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAC5C,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;gBAC1D,QAAQ,EAAE,MAAM;gBAChB,kBAAkB,EAAE,QAAQ,CAAC,eAAe;gBAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB,IAAI,SAAS;gBACtE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;aACtD,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;YAC3D,kBAAkB,EAAE,QAAQ,CAAC,eAAe;YAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB,IAAI,SAAS;YACtE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;SACtD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,SAAS,2BAA2B,CACnC,OAAyB,EACzB,aAAiC;IAEjC,MAAM,aAAa,GAAG,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAE5E,IAAI,qBAAyC,CAAC;IAC9C,IAAI,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC;YACJ,qBAAqB,GAAG,4BAA4B,CAAC,aAAa,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4BAA4B,aAAa,EAAE,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IAED,IAAI,kBAAsC,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,kBAAkB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,UAAU,EAAE,CAC5D,CAAC;QACH,CAAC;IACF,CAAC;IAED,IACC,qBAAqB;QACrB,kBAAkB;QAClB,qBAAqB,KAAK,kBAAkB,EAC3C,CAAC;QACF,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,0DAA0D,kBAAkB,EAAE,CAC9E,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,IAAI,qBAAqB,CAAC;AACpD,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IAClD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,kDAAkD,EAAE,CAAC;QAC1E,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,KAAK,+BAA+B;QACjD,KAAK,CAAC,OAAO,KAAK,qDAAqD;QACvE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EACvD,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,uCAAuC,CAAC,KAAc;IAC9D,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC1C,KAAK,CAAC,OAAO;YACZ,2DAA2D,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,KAAK,CAAC;AACb,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,GAAoB,EACpB,OAAyB,EACzB,KAGC;IAED,MAAM,cAAc,GAAG,8BAA8B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,sBAAsB,GAAG,OAAO,CAAC,YAAY,EAAE,mBAAmB;QACvE,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,sBAAsB;YAC7C,OAAO,CAAC,YAAY,CAAC,0BAA0B,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,kBAAkB,GACvB,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,sBAAsB,IAAI,SAAS,CAAC;IAChE,MAAM,aAAa,GAAG,2BAA2B,CAChD,OAAO,EACP,KAAK,CAAC,aAAa,CACnB,CAAC;IACF,+BAA+B,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC7D,IAAI,kBAAkB,EAAE,CAAC;QACxB,IAAI,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,mBAAmB,EAAE,CAAC;YAC/D,MAAM,eAAe,GAAG,MAAM,+BAA+B,CAC5D,OAAO,CAAC,YAAY,CAAC,mBAAmB,CACxC,CAAC;YACF,MAAM,kBAAkB,GACvB,eAAe,EAAE,kBAAkB,KAAK,kBAAkB;gBACzD,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,YAAY;gBACtC,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,kBAAkB,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC1D,WAAW,GAAG,kBAAkB,CAAC;YAClC,CAAC;QACF,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC9C,CAAC;QACD,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,IACC,KAAK,CAAC,iBAAiB;QACvB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,mEAAmE,CACnE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,6DAA6D,CAC7D,CAAC;IACH,CAAC;IACD,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,qBAAqB,CAC3C,gBAAgB,CACf,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,IAAI,SAAS,CACd,CAAC;IACF,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;QACvD,SAAS,EAAE,kBAAkB,IAAI,cAAc,CAAC,YAAY,EAAE;QAC9D,OAAO;QACP,kBAAkB,EAAE,KAAK,CAAC,YAAY,IAAI,cAAc;QACxD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;KAChD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC;QAClE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;QAC3B,SAAS,EAAE,kBAAkB;QAC7B,OAAO;QACP,aAAa;QACb,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,eAAe;QACf,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAkB;QAC9D,YAAY,EAAE,iBAAiB;QAC/B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;QACpD,OAAO;QACP,cAAc;KACd,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,yBAAyB,KAAK,KAAK,EAAE,CAAC;QAC/C,MAAM,sCAAsC,CAAC;YAC5C,OAAO;YACP,OAAO;YACP,OAAO;YACP,eAAe;YACf,IAAI;YACJ,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAkB;YAC9D,YAAY,EAAE,iBAAiB;YAC/B,aAAa;YACb,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,sCAAsC,CAAC,OAUrD;IACA,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;IAClD,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,wCAAwC;IACxC,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC;QACvD,WAAW,EAAE,YAAY,EAAE,WAAW;QACtC,OAAO,EAAE,YAAY,EAAE,OAAO;QAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,mBAAmB,QAAQ,CAAC,UAAU,EAAE;QACvD,WAAW,EAAE,oBAAoB,EAAE;QACnC,QAAQ,EAAE;YACT,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE;YACjC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,QAAQ;YAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,aAAa,EAAE,OAAO,CAAC,YAAY;YACnC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS;YACzC,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe;YAC/C,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,iBAAiB,EAAE,YAAY,EAAE,eAAe;YAChD,iBAAiB,EAAE,YAAY,EAAE,eAAe;YAChD,QAAQ,EAAE,YAAY,EAAE,OAAO;SAC/B;KACD,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO;IACR,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,yCAAyC,CACnE,EAAE,UAAU,CAAC;IACd,6BAA6B,CAAC,YAAY,EAAE;QAC3C,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO;QACpC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK;KACnC,CAAC,CAAC;IACH,2EAA2E;IAC3E,0EAA0E;IAC1E,oEAAoE;IACpE,YAAY,CAAC,YAAY,GAAG,cAAc;QACzC,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACnD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,SAAS,GAAG,cAAc;QACtC,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,aAAa,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,uBAAuB,GAAG,cAAc;QACpD,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,2BAA2B,GAAG,cAAc;QACxD,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,kBAAkB,CAAC;QACrD,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CACvB,UAAmC,EACnC,GAAW;IAEX,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,GAAoB,EACpB,OAAyB,EACzB,KAAoC;IAEpC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE;QACjD,GAAG,KAAK;QACR,kBAAkB,EAAE,KAAK;QACzB,yBAAyB,EAAE,KAAK;KAChC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO;QACN,GAAG,SAAS;QACZ,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,IAAI;QACJ,qBAAqB,EAAE,KAAK,CAAC,mBAAmB;QAChD,QAAQ;KACR,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAClB,GAAoB,EACpB,OAAyB,EACzB,SAA6B;IAE7B,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IACxD,CAAC;IACD,+BAA+B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,UAAU,CACxD,WAAW,CAAC,GAAG,CAAC,EAChB,SAAS,CACT,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,2BAA2B,CAC3B,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,UAA6C,CAAC;IAClD,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,OAAO,CAAC,kBAAkB,CAAC;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI;YACJ,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,qBAAqB,EAAE,KAAK,CAAC,eAAe;YAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAC/B,CAAC,CAAC;oBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;oBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;oBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;iBACnD;gBACF,CAAC,CAAC,SAAS;YACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC9C,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IACC,KAAK,YAAY,KAAK;YACtB,KAAK,CAAC,OAAO,KAAK,wDAAwD,EACzE,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IACC,KAAK,YAAY,KAAK;YACtB,CAAC,KAAK,CAAC,OAAO,KAAK,+BAA+B;gBACjD,KAAK,CAAC,OAAO;oBACZ,2DAA2D,CAAC,EAC7D,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACrD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,gCAAgC,CAChC,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,SAA2C,CAAC;IAChD,IAAI,CAAC;QACJ,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC;YACvC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,+BAA+B,CAC/B,CAAC;IACF,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,MAAM,OAAO,CAAC,oBAAoB,CAAC;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,0BAA0B,MAAM,EAAE,EAAE,SAAS,EACxD,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,cAAc,GACnB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAExE,MAAM,MAAM,GAAG,cAAc;QAC5B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;YAC7B,MAAM;YACN,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;YAC1B,mBAAmB,EAAE,wBAAwB,CAAC,GAAG,CAAC;SAClD,CAAC,CAAC;IACL,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QAClB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,UAAU;QAC3B,UAAU,EAAE,YAAY;QACxB,GAAG,OAAO,CAAC,WAAW;KACtB,CAAC,CAAC;IACH,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,KAAK,GAAG,GAAG,EAAE;QAClB,IAAI,QAAQ,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACnC,OAAO;QACR,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,QAAQ,GAAG,KAAK,CAAC;gBACjB,OAAO;YACR,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,QAAQ,GAAG,KAAK,CAAC;oBACjB,KAAK,EAAE,CAAC;gBACT,CAAC,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;QACF,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACpC,KAAK,EAAE,CAAC;QACT,CAAC;IACF,CAAC,EAAE,KAAK,CAAC,CAAC;IACV,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,MAAM,OAAO,GAAG,GAAG,EAAE;QACpB,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,aAAa,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC;AACT,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC;QACJ,OAAO,CAAC,aAAa,CACpB,eAAe,CAAC,GAAG,CAAC,EACpB,uBAAuB,CAAC,GAAG,CAAC,EAC5B,uBAAuB,CAAC,GAAG,CAAC,CAC5B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,CAAC,IAAI,CAAC,KAA+B,EAAE;YACnD,YAAY,EAAE,uBAAuB,CAAC,GAAG,CAAC;YAC1C,cAAc,EAAE,uBAAuB,CAAC,GAAG,CAAC;SAC5C,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC","sourcesContent":["import { existsSync } from \"node:fs\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport {\n\ttype HeadlessConnectionRole,\n\theadlessApprovalModes,\n\theadlessConnectionRoles,\n\theadlessNotificationTypes,\n\theadlessServerRequestTypes,\n\theadlessThinkingLevels,\n\theadlessToAgentMessageSchemasByType,\n\theadlessToAgentMessageTypes,\n\theadlessUtilityOperations,\n} from \"@evalops/contracts\";\nimport { type Static, type TSchema, Type } from \"@sinclair/typebox\";\nimport type { ApprovalMode } from \"../../agent/action-approval.js\";\nimport type { ThinkingLevel } from \"../../agent/types.js\";\nimport type { HeadlessToAgentMessage } from \"../../cli/headless-protocol.js\";\nimport { resolveExistingWorkspaceRoot } from \"../../headless/workspace-root.js\";\nimport type { RegisteredModel } from \"../../models/registry.js\";\nimport { recordMaestroSessionRuntimeTrigger } from \"../../platform/agent-runtime-client.js\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport {\n\tnormalizeApprovalMode,\n\tresolveApprovalModeForRequest,\n} from \"../approval-mode-store.js\";\nimport { getAuthScopeKey, getAuthSubject } from \"../authz.js\";\nimport type {\n\tHeadlessRuntimeConnectionSnapshot,\n\tHeadlessRuntimeHeartbeatSnapshot,\n\tHeadlessRuntimeStreamEnvelope,\n\tHeadlessSessionRuntime,\n} from \"../headless-runtime-service.js\";\nimport { loadHostedRunnerRestoreManifest } from \"../headless-runtime-service.js\";\nimport {\n\tbindHostedRunnerPlatformLease,\n\tclaimHostedRunnerLease,\n\tevaluateHostedRunnerLeaseUse,\n} from \"../hosted-runner-lease.js\";\nimport { getTraceParentHeader } from \"../request-context.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\treadRequestBody,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { createSessionManagerForRequest } from \"../session-scope.js\";\nimport { parseAndValidateJson, validatePayload } from \"../validation.js\";\n\nexport enum HostedRunnerErrorType {\n\tRuntimeNotReady = \"runtime_not_ready\",\n\tRuntimeOwnedElsewhere = \"runtime_owned_elsewhere\",\n}\n\nconst HOSTED_RUNNER_ERROR_DOMAIN = \"maestro.hosted_runner\";\n\nfunction stringLiteralUnion<const T extends readonly string[]>(values: T) {\n\treturn Type.Unsafe<T[number]>(\n\t\tType.Union(\n\t\t\tvalues.map((value) => Type.Literal(value)) as unknown as [\n\t\t\t\tTSchema,\n\t\t\t\t...TSchema[],\n\t\t\t],\n\t\t),\n\t);\n}\n\nconst HeadlessOptOutNotificationsSchema = Type.Array(\n\tstringLiteralUnion(headlessNotificationTypes),\n\t{\n\t\tuniqueItems: true,\n\t},\n);\n\nconst HeadlessCreateBaseProperties = {\n\tsessionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tworkspaceRoot: Type.Optional(Type.String()),\n\tmodel: Type.Optional(Type.String()),\n\tenableClientTools: Type.Optional(Type.Boolean()),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\tclient: Type.Optional(\n\t\tType.Union([\n\t\t\tType.Literal(\"generic\"),\n\t\t\tType.Literal(\"vscode\"),\n\t\t\tType.Literal(\"jetbrains\"),\n\t\t\tType.Literal(\"conductor\"),\n\t\t]),\n\t),\n\tthinkingLevel: Type.Optional(stringLiteralUnion(headlessThinkingLevels)),\n\tapprovalMode: Type.Optional(stringLiteralUnion(headlessApprovalModes)),\n} as const;\n\nconst HeadlessSessionCreateSchema = Type.Object(HeadlessCreateBaseProperties);\n\nconst HeadlessConnectionCreateSchema = Type.Object({\n\t...HeadlessCreateBaseProperties,\n\tconnectionId: Type.Optional(Type.String()),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessMessageTypeSchema = Type.Object(\n\t{\n\t\ttype: stringLiteralUnion(headlessToAgentMessageTypes),\n\t},\n\t{ additionalProperties: true },\n);\n\nconst HeadlessSessionSubscribeSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessSessionUnsubscribeSchema = Type.Object({\n\tsubscriptionId: Type.String(),\n});\n\nconst HeadlessSessionHeartbeatSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\nconst HeadlessSessionDisconnectSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\ntype HeadlessSessionCreateInput = Static<typeof HeadlessSessionCreateSchema>;\ntype HeadlessConnectionCreateInput = Static<\n\ttypeof HeadlessConnectionCreateSchema\n>;\ntype HeadlessSessionSubscribeInput = Static<\n\ttypeof HeadlessSessionSubscribeSchema\n>;\ntype HeadlessSessionUnsubscribeInput = Static<\n\ttypeof HeadlessSessionUnsubscribeSchema\n>;\ntype HeadlessSessionHeartbeatInput = Static<\n\ttypeof HeadlessSessionHeartbeatSchema\n>;\ntype HeadlessSessionDisconnectInput = Static<\n\ttypeof HeadlessSessionDisconnectSchema\n>;\ntype HeadlessMessageTypeInput = Static<typeof HeadlessMessageTypeSchema>;\n\nasync function parseHeadlessMessage(\n\treq: IncomingMessage,\n): Promise<HeadlessToAgentMessage> {\n\tconst raw = await readRequestBody(req);\n\tif (!raw.length) {\n\t\tthrow new ApiError(400, \"Request body required\");\n\t}\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(raw.toString());\n\t} catch {\n\t\tthrow new ApiError(400, \"Invalid JSON payload\");\n\t}\n\tconst envelope = validatePayload<HeadlessMessageTypeInput>(\n\t\tparsed,\n\t\tHeadlessMessageTypeSchema,\n\t\t\"body\",\n\t);\n\treturn validatePayload<HeadlessToAgentMessage>(\n\t\tparsed,\n\t\theadlessToAgentMessageSchemasByType[envelope.type],\n\t\t\"body\",\n\t);\n}\n\nfunction getHeadlessRole(\n\treq: IncomingMessage,\n\texplicitRole?: HeadlessConnectionRole,\n): HeadlessConnectionRole {\n\tif (explicitRole) {\n\t\treturn explicitRole;\n\t}\n\tconst headerRole = getRequestHeader(\n\t\treq,\n\t\t\"x-composer-headless-role\",\n\t\t\"x-maestro-headless-role\",\n\t);\n\treturn headerRole === \"viewer\" ? \"viewer\" : \"controller\";\n}\n\nfunction getViewerDisallowedServerRequest(\n\tserverRequests?: Static<\n\t\ttypeof HeadlessCreateBaseProperties.capabilities\n\t>[\"serverRequests\"],\n): \"mcp_elicitation\" \| \"user_input\" \| undefined {\n\tif (serverRequests?.includes(\"mcp_elicitation\")) {\n\t\treturn \"mcp_elicitation\";\n\t}\n\tif (serverRequests?.includes(\"user_input\")) {\n\t\treturn \"user_input\";\n\t}\n\treturn undefined;\n}\n\nfunction writeSse(res: ServerResponse, payload: unknown): boolean {\n\treturn res.write(`data: ${JSON.stringify(payload)}\\n\\n`);\n}\n\nfunction getHeadlessSubscriberId(req: IncomingMessage): string \| undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-subscriber-id\",\n\t\t\t\"x-maestro-headless-subscriber-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction getHeadlessConnectionId(req: IncomingMessage): string \| undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-connection-id\",\n\t\t\t\"x-maestro-headless-connection-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction parseOptOutNotifications(\n\treq: IncomingMessage,\n): HeadlessSessionSubscribeInput[\"optOutNotifications\"] {\n\tconst url = new URL(\n\t\treq.url \|\| \"/\",\n\t\t`http://${req.headers.host \|\| \"localhost\"}`,\n\t);\n\tconst raw = url.searchParams.get(\"optOutNotifications\");\n\tif (!raw) {\n\t\treturn undefined;\n\t}\n\tconst notifications = raw\n\t\t.split(\",\")\n\t\t.map((value) => value.trim())\n\t\t.filter(Boolean);\n\tif (notifications.length === 0) {\n\t\treturn undefined;\n\t}\n\treturn validatePayload<\n\t\tNonNullable<HeadlessSessionSubscribeInput[\"optOutNotifications\"]>\n\t>(\n\t\tnotifications,\n\t\tHeadlessOptOutNotificationsSchema,\n\t\t\"query.optOutNotifications\",\n\t);\n}\n\nfunction getScopeKey(req: IncomingMessage): string {\n\treturn getAuthScopeKey(req);\n}\n\nfunction hostedRunnerErrorMetadata(\n\tcontext: WebServerContext,\n\tmetadata: Record<string, string \| undefined>,\n): Record<string, string> {\n\tconst hostedRunner = context.hostedRunner;\n\tconst detailMetadata: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries({\n\t\trunner_session_id: hostedRunner?.runnerSessionId,\n\t\towner_instance_id: hostedRunner?.ownerInstanceId,\n\t\tworkspace_id: hostedRunner?.workspaceId,\n\t\tagent_run_id: hostedRunner?.agentRunId,\n\t\t...metadata,\n\t})) {\n\t\tif (value) {\n\t\t\tdetailMetadata[key] = value;\n\t\t}\n\t}\n\treturn detailMetadata;\n}\n\nfunction hostedRunnerOwnershipError(\n\tcontext: WebServerContext,\n\tmessage: string,\n\tmetadata: Record<string, string \| undefined>,\n): ApiError {\n\treturn new ApiError(\n\t\t409,\n\t\tmessage,\n\t\t[\n\t\t\t{\n\t\t\t\treason: HostedRunnerErrorType.RuntimeOwnedElsewhere,\n\t\t\t\tdomain: HOSTED_RUNNER_ERROR_DOMAIN,\n\t\t\t\tmetadata: hostedRunnerErrorMetadata(context, metadata),\n\t\t\t},\n\t\t],\n\t\tHostedRunnerErrorType.RuntimeOwnedElsewhere,\n\t);\n}\n\nfunction hostedRunnerNotReadyError(\n\tcontext: WebServerContext,\n\tmessage: string,\n\tmetadata: Record<string, string \| undefined>,\n): ApiError {\n\treturn new ApiError(\n\t\t503,\n\t\tmessage,\n\t\t[\n\t\t\t{\n\t\t\t\treason: HostedRunnerErrorType.RuntimeNotReady,\n\t\t\t\tdomain: HOSTED_RUNNER_ERROR_DOMAIN,\n\t\t\t\tmetadata: hostedRunnerErrorMetadata(context, metadata),\n\t\t\t},\n\t\t],\n\t\tHostedRunnerErrorType.RuntimeNotReady,\n\t);\n}\n\nfunction ensureHostedRunnerCanUseSession(\n\tcontext: WebServerContext,\n\trequestedSessionId: string \| undefined,\n): void {\n\tconst hostedRunner = context.hostedRunner;\n\tif (!hostedRunner) {\n\t\treturn;\n\t}\n\tconst decision = evaluateHostedRunnerLeaseUse(\n\t\thostedRunner,\n\t\trequestedSessionId,\n\t);\n\tif (decision.ok) {\n\t\treturn;\n\t}\n\tif (decision.reason === \"runtime_draining\") {\n\t\tthrow hostedRunnerNotReadyError(context, decision.message, {\n\t\t\tdraining: \"true\",\n\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\trequested_maestro_session_id: requestedSessionId,\n\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t});\n\t}\n\tthrow hostedRunnerOwnershipError(context, decision.message, {\n\t\tmaestro_session_id: decision.activeSessionId,\n\t\trequested_maestro_session_id: decision.requestedSessionId,\n\t\tlease_generation: String(decision.snapshot.generation),\n\t});\n}\n\nfunction claimHostedRunnerSession(\n\tcontext: WebServerContext,\n\tsessionId: string,\n): void {\n\tconst hostedRunner = context.hostedRunner;\n\tif (!hostedRunner) {\n\t\treturn;\n\t}\n\tconst decision = claimHostedRunnerLease(hostedRunner, sessionId);\n\tif (!decision.ok) {\n\t\tif (decision.reason === \"runtime_draining\") {\n\t\t\tthrow hostedRunnerNotReadyError(context, decision.message, {\n\t\t\t\tdraining: \"true\",\n\t\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\t\trequested_maestro_session_id: decision.requestedSessionId ?? sessionId,\n\t\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t\t});\n\t\t}\n\t\tthrow hostedRunnerOwnershipError(context, decision.message, {\n\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\trequested_maestro_session_id: decision.requestedSessionId ?? sessionId,\n\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t});\n\t}\n}\n\nfunction resolveRuntimeWorkspaceRoot(\n\tcontext: WebServerContext,\n\tworkspaceRoot: string \| undefined,\n): string \| undefined {\n\tconst requestedRoot = workspaceRoot?.trim() \|\| undefined;\n\tconst hostedRoot = context.hostedRunner?.workspaceRoot?.trim() \|\| undefined;\n\n\tlet resolvedRequestedRoot: string \| undefined;\n\tif (requestedRoot) {\n\t\ttry {\n\t\t\tresolvedRequestedRoot = resolveExistingWorkspaceRoot(requestedRoot);\n\t\t} catch {\n\t\t\tthrow new ApiError(400, `workspaceRoot not found: ${requestedRoot}`);\n\t\t}\n\t}\n\n\tlet resolvedHostedRoot: string \| undefined;\n\tif (hostedRoot) {\n\t\ttry {\n\t\t\tresolvedHostedRoot = resolveExistingWorkspaceRoot(hostedRoot);\n\t\t} catch {\n\t\t\tthrow new ApiError(\n\t\t\t\t500,\n\t\t\t\t`Hosted runner workspace root is unavailable: ${hostedRoot}`,\n\t\t\t);\n\t\t}\n\t}\n\n\tif (\n\t\tresolvedRequestedRoot &&\n\t\tresolvedHostedRoot &&\n\t\tresolvedRequestedRoot !== resolvedHostedRoot\n\t) {\n\t\tthrow new ApiError(\n\t\t\t409,\n\t\t\t`workspaceRoot must match hosted runner workspace root: ${resolvedHostedRoot}`,\n\t\t);\n\t}\n\n\treturn resolvedHostedRoot ?? resolvedRequestedRoot;\n}\n\nfunction rethrowHeadlessMessageError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Viewer headless connections cannot send messages\") {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message === \"Headless subscriber not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message === \"Headless connection not found\" \|\|\n\t\terror.message === \"Headless connection does not have controller access\" \|\|\n\t\terror.message.includes(\"is owned by another connection\")\n\t) {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message.includes(\"Controller lease\")) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow new ApiError(403, error.message);\n}\n\nfunction rethrowHeadlessConnectionLifecycleError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Headless connection not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message.includes(\"Controller lease\") \|\|\n\t\terror.message ===\n\t\t\t\"Headless connection role does not match subscription role\"\n\t) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow error;\n}\n\nasync function ensureRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessSessionCreateInput & {\n\t\tregisterConnection?: boolean;\n\t\trecordAgentRuntimeTrigger?: boolean;\n\t},\n) {\n\tconst sessionManager = createSessionManagerForRequest(req, false);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst hostedRestoreSessionId = context.hostedRunner?.restoreManifestPath\n\t\t? (context.hostedRunner.activeMaestroSessionId ??\n\t\t\tcontext.hostedRunner.configuredMaestroSessionId)\n\t\t: undefined;\n\tconst requestedSessionId =\n\t\tinput.sessionId?.trim() \|\| hostedRestoreSessionId \|\| undefined;\n\tconst workspaceRoot = resolveRuntimeWorkspaceRoot(\n\t\tcontext,\n\t\tinput.workspaceRoot,\n\t);\n\tensureHostedRunnerCanUseSession(context, requestedSessionId);\n\tif (requestedSessionId) {\n\t\tlet sessionFile = sessionManager.getSessionFileById(requestedSessionId);\n\t\tif (!sessionFile && context.hostedRunner?.restoreManifestPath) {\n\t\t\tconst restoreManifest = await loadHostedRunnerRestoreManifest(\n\t\t\t\tcontext.hostedRunner.restoreManifestPath,\n\t\t\t);\n\t\t\tconst restoreSessionFile =\n\t\t\t\trestoreManifest?.maestro_session_id === requestedSessionId\n\t\t\t\t\t? restoreManifest.runtime.session_file\n\t\t\t\t\t: undefined;\n\t\t\tif (restoreSessionFile && existsSync(restoreSessionFile)) {\n\t\t\t\tsessionFile = restoreSessionFile;\n\t\t\t}\n\t\t}\n\t\tif (!sessionFile) {\n\t\t\tthrow new ApiError(404, \"Session not found\");\n\t\t}\n\t\tsessionManager.setSessionFile(sessionFile);\n\t}\n\n\tconst registeredModel = await context.getRegisteredModel(input.model);\n\tconst subject = getAuthSubject(req);\n\tif (\n\t\tinput.enableClientTools &&\n\t\t!input.capabilities?.serverRequests?.includes(\"client_tool\")\n\t) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"client_tool capability is required when enableClientTools is true\",\n\t\t);\n\t}\n\tif (role === \"viewer\" && input.enableClientTools) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"viewer headless connections cannot enable client-side tools\",\n\t\t);\n\t}\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\tconst headerApproval = normalizeApprovalMode(\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-approval-mode\",\n\t\t\t\"x-maestro-approval-mode\",\n\t\t) ?? undefined,\n\t);\n\tconst effectiveApproval = resolveApprovalModeForRequest({\n\t\tsessionId: requestedSessionId ?? sessionManager.getSessionId(),\n\t\tsubject,\n\t\theaderApprovalMode: input.approvalMode ?? headerApproval,\n\t\tdefaultApprovalMode: context.defaultApprovalMode,\n\t});\n\n\tconst runtime = await context.headlessRuntimeService.ensureRuntime({\n\t\tscope_key: getScopeKey(req),\n\t\tsessionId: requestedSessionId,\n\t\tsubject,\n\t\tworkspaceRoot,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\tregisteredModel,\n\t\tthinkingLevel: (input.thinkingLevel ?? \"off\") as ThinkingLevel,\n\t\tapprovalMode: effectiveApproval,\n\t\tenableClientTools: input.enableClientTools,\n\t\tclient: input.client,\n\t\tregisterConnection: input.registerConnection ?? true,\n\t\tcontext,\n\t\tsessionManager,\n\t});\n\tif (context.hostedRunner) {\n\t\tclaimHostedRunnerSession(context, runtime.getSnapshot().session_id);\n\t}\n\tif (input.recordAgentRuntimeTrigger !== false) {\n\t\tawait recordPlatformAgentRuntimeSessionStart({\n\t\t\tcontext,\n\t\t\truntime,\n\t\t\tsubject,\n\t\t\tregisteredModel,\n\t\t\trole,\n\t\t\tthinkingLevel: (input.thinkingLevel ?? \"off\") as ThinkingLevel,\n\t\t\tapprovalMode: effectiveApproval,\n\t\t\tworkspaceRoot,\n\t\t\tinput,\n\t\t});\n\t}\n\treturn runtime;\n}\n\nasync function recordPlatformAgentRuntimeSessionStart(options: {\n\tcontext: WebServerContext;\n\truntime: HeadlessSessionRuntime;\n\tsubject?: string;\n\tregisteredModel: RegisteredModel;\n\trole: HeadlessConnectionRole;\n\tthinkingLevel: ThinkingLevel;\n\tapprovalMode: ApprovalMode;\n\tworkspaceRoot: string \| undefined;\n\tinput: HeadlessSessionCreateInput;\n}): Promise<void> {\n\tconst snapshot = options.runtime.getSnapshot();\n\tconst hostedRunner = options.context.hostedRunner;\n\t// This is a projection, not ownership transfer. The local headless runtime\n\t// remains authoritative; Platform receives session-start metadata and trace\n\t// context so AgentRuntime, A2A, deploy smoke tests, and support endpoints can\n\t// all join on the same Maestro session.\n\tconst result = await recordMaestroSessionRuntimeTrigger({\n\t\tworkspaceId: hostedRunner?.workspaceId,\n\t\tagentId: hostedRunner?.agentId,\n\t\tsessionId: snapshot.session_id,\n\t\tactorId: options.subject,\n\t\tcorrelationId: `maestro-session:${snapshot.session_id}`,\n\t\ttraceparent: getTraceParentHeader(),\n\t\tmetadata: {\n\t\t\tmodel: options.registeredModel.id,\n\t\t\tprovider: options.registeredModel.provider,\n\t\t\trole: options.role,\n\t\t\tthinking_level: options.thinkingLevel,\n\t\t\tapproval_mode: options.approvalMode,\n\t\t\tclient: options.input.client ?? \"generic\",\n\t\t\tprotocol_version: options.input.protocolVersion,\n\t\t\tworkspace_root: options.workspaceRoot,\n\t\t\trunner_session_id: hostedRunner?.runnerSessionId,\n\t\t\towner_instance_id: hostedRunner?.ownerInstanceId,\n\t\t\tagent_id: hostedRunner?.agentId,\n\t\t},\n\t});\n\tif (!hostedRunner \|\| !result) {\n\t\treturn;\n\t}\n\tconst a2aCorrelation = result.events.find(\n\t\t(event) => event.type === \"maestro.platform_runtime.a2a_correlated\",\n\t)?.attributes;\n\tbindHostedRunnerPlatformLease(hostedRunner, {\n\t\tagentRunId: result.run.id,\n\t\tagentId: result.run.linkage?.agentId,\n\t\tleaseToken: result.run.lease?.token,\n\t});\n\t// Store only support-grade handles on the hosted runner. The full run/task\n\t// state stays in Platform; health and identity endpoints expose these ids\n\t// for operators without making Platform a session-state dependency.\n\thostedRunner.a2aMessageId = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"a2a_message_id\")\n\t\t: undefined;\n\thostedRunner.a2aTaskId = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"a2a_task_id\")\n\t\t: undefined;\n\thostedRunner.agentRuntimeWorkerQueue = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"worker_queue\")\n\t\t: undefined;\n\thostedRunner.agentRuntimeCorrelationPath = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"correlation_path\")\n\t\t: undefined;\n}\n\nfunction stringAttribute(\n\tattributes: Record<string, unknown>,\n\tkey: string,\n): string \| undefined {\n\tconst value = attributes[key];\n\treturn typeof value === \"string\" && value.trim().length > 0\n\t\t? value\n\t\t: undefined;\n}\n\nasync function ensureConnection(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessConnectionCreateInput,\n): Promise<HeadlessRuntimeConnectionSnapshot> {\n\tconst runtime = await ensureRuntime(req, context, {\n\t\t...input,\n\t\tregisterConnection: false,\n\t\trecordAgentRuntimeTrigger: false,\n\t});\n\tconst role = getHeadlessRole(req, input.role);\n\tconst heartbeat = runtime.registerConnection({\n\t\tconnectionId: input.connectionId,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\ttakeControl: input.takeControl,\n\t});\n\tconst snapshot = runtime.getSnapshot();\n\treturn {\n\t\t...heartbeat,\n\t\tsession_id: snapshot.session_id,\n\t\trole,\n\t\topt_out_notifications: input.optOutNotifications,\n\t\tsnapshot,\n\t};\n}\n\nfunction getRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tsessionId: string \| undefined,\n) {\n\tif (!sessionId) {\n\t\tthrow new ApiError(400, \"Missing headless session id\");\n\t}\n\tensureHostedRunnerCanUseSession(context, sessionId);\n\tconst runtime = context.headlessRuntimeService.getRuntime(\n\t\tgetScopeKey(req),\n\t\tsessionId,\n\t);\n\tif (!runtime) {\n\t\tthrow new ApiError(404, \"Headless session not found\");\n\t}\n\tif (context.hostedRunner) {\n\t\tclaimHostedRunnerSession(context, runtime.getSnapshot().session_id);\n\t}\n\treturn runtime;\n}\n\nexport async function handleHeadlessSessionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessSessionCreateInput>(\n\t\treq,\n\t\tHeadlessSessionCreateSchema,\n\t);\n\tconst runtime = await ensureRuntime(req, context, input);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessConnectionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessConnectionCreateInput>(\n\t\treq,\n\t\tHeadlessConnectionCreateSchema,\n\t);\n\tlet connection: HeadlessRuntimeConnectionSnapshot;\n\ttry {\n\t\tconnection = await ensureConnection(req, context, input);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, connection, context.corsHeaders, req);\n}\n\nexport function handleHeadlessSessionState(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionSubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionSubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionSubscribeSchema,\n\t);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\truntime.createSubscription({\n\t\t\t\tconnectionId: input.connectionId,\n\t\t\t\trole,\n\t\t\t\texplicit: true,\n\t\t\t\ttakeControl: input.takeControl,\n\t\t\t\tclientProtocolVersion: input.protocolVersion,\n\t\t\t\tclientInfo: input.clientInfo,\n\t\t\t\tcapabilities: input.capabilities\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t\t\t}\n\t\t\t\t\t: undefined,\n\t\t\t\toptOutNotifications: input.optOutNotifications,\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\terror.message === \"Controller lease is already held by another connection\"\n\t\t) {\n\t\t\tthrow new ApiError(409, error.message);\n\t\t}\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\t(error.message === \"Headless connection not found\" \|\|\n\t\t\t\terror.message ===\n\t\t\t\t\t\"Headless connection role does not match subscription role\")\n\t\t) {\n\t\t\tthrow new ApiError(400, error.message);\n\t\t}\n\t\tthrow error;\n\t}\n}\n\nexport async function handleHeadlessSessionUnsubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionUnsubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionUnsubscribeSchema,\n\t);\n\tif (!(await runtime.unsubscribe(input.subscriptionId))) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionHeartbeat(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionHeartbeatInput>(\n\t\treq,\n\t\tHeadlessSessionHeartbeatSchema,\n\t);\n\tlet heartbeat: HeadlessRuntimeHeartbeatSnapshot;\n\ttry {\n\t\theartbeat = runtime.heartbeatConnection({\n\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, heartbeat, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionDisconnect(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionDisconnectInput>(\n\t\treq,\n\t\tHeadlessSessionDisconnectSchema,\n\t);\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\tawait runtime.disconnectConnection({\n\t\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n}\n\nexport function handleHeadlessSessionEvents(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst url = new URL(\n\t\treq.url \|\| `/api/headless/sessions/${params?.id}/events`,\n\t\t`http://${req.headers.host \|\| \"localhost\"}`,\n\t);\n\tconst cursorParam = url.searchParams.get(\"cursor\");\n\tconst cursor = cursorParam ? Number.parseInt(cursorParam, 10) : null;\n\tconst subscriptionId =\n\t\turl.searchParams.get(\"subscriptionId\") \|\| getHeadlessSubscriberId(req);\n\n\tconst stream = subscriptionId\n\t\t? runtime.attachSubscription(subscriptionId)\n\t\t: runtime.createImplicitStream({\n\t\t\t\tcursor,\n\t\t\t\trole: getHeadlessRole(req),\n\t\t\t\toptOutNotifications: parseOptOutNotifications(req),\n\t\t\t});\n\tif (!stream) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\n\tres.writeHead(200, {\n\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\"Cache-Control\": \"no-cache\",\n\t\tConnection: \"keep-alive\",\n\t\t...context.corsHeaders,\n\t});\n\tlet flushing = false;\n\n\tconst flush = () => {\n\t\tif (flushing \|\| res.writableEnded) {\n\t\t\treturn;\n\t\t}\n\t\tflushing = true;\n\t\twhile (!res.writableEnded) {\n\t\t\tconst next = stream.next();\n\t\t\tif (!next) {\n\t\t\t\tflushing = false;\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst wrote = writeSse(res, next);\n\t\t\tif (!wrote) {\n\t\t\t\tres.once(\"drain\", () => {\n\t\t\t\t\tflushing = false;\n\t\t\t\t\tflush();\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t\tflushing = false;\n\t};\n\tconst stopListening = stream.onAvailable(flush);\n\tconst heartbeat = setInterval(() => {\n\t\tif (!res.writableEnded) {\n\t\t\tstream.enqueue(runtime.heartbeat());\n\t\t\tflush();\n\t\t}\n\t}, 15000);\n\theartbeat.unref();\n\n\tconst cleanup = () => {\n\t\tclearInterval(heartbeat);\n\t\tstopListening();\n\t\tstream.close();\n\t};\n\treq.on(\"close\", cleanup);\n\tres.on(\"close\", cleanup);\n\tflush();\n}\n\nexport async function handleHeadlessSessionMessage(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseHeadlessMessage(req);\n\ttry {\n\t\truntime.assertCanSend(\n\t\t\tgetHeadlessRole(req),\n\t\t\tgetHeadlessSubscriberId(req),\n\t\t\tgetHeadlessConnectionId(req),\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\ttry {\n\t\tawait runtime.send(input as HeadlessToAgentMessage, {\n\t\t\tconnectionId: getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n"]}

package/dist/server/handlers/session-artifacts.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"session-artifacts.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/session-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;~~AA2TjE~~,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiC5B;AAED,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAsF5B;AAED,wBAAsB,yBAAyB,CAC9C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAuE5B;AAED,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA4S5B;AAED,wBAAsB,4BAA4B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiF5B;AAED,wBAAsB,yBAAyB,CAC9C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA6C5B"}
1	+ {"version":3,"file":"session-artifacts.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/session-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA2UjE,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiC5B;AAED,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAsF5B;AAED,wBAAsB,yBAAyB,CAC9C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAuE5B;AAED,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA4S5B;AAED,wBAAsB,4BAA4B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiF5B;AAED,wBAAsB,yBAAyB,CAC9C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA6C5B"}

package/dist/server/handlers/session-artifacts.js CHANGED Viewed

@@ -129,6 +129,21 @@ function injectArtifactsSnapshotRuntime(htmlContent, artifacts) {
 function asString(value) {
     return typeof value === "string" ? value : undefined;
 }
+function hasControlCharacter(value) {
+    for (let index = 0; index < value.length; index += 1) {
+        const code = value.charCodeAt(index);
+        if (code < 32 || code === 127)
+            return true;
+    }
+    return false;
+}
+function isValidArtifactFilename(filename) {
+    return (filename.length > 0 &&
+        !filename.includes("..") &&
+        !filename.includes("/") &&
+        !filename.includes("\\") &&
+        !hasControlCharacter(filename));
+}
 function reconstructArtifactsFromMessages(messages) {
     const byFilename = new Map();
     for (const msg of messages) {
@@ -150,6 +165,8 @@ function reconstructArtifactsFromMessages(messages) {
             const filename = asString(args.filename)?.trim();
             if (!command || !filename)
                 continue;
+            if (!isValidArtifactFilename(filename))
+                continue;
             if (command === "get" || command === "logs")
                 continue;
             if (command === "create") {
@@ -172,6 +189,8 @@ function reconstructArtifactsFromMessages(messages) {
                 const newStr = asString(args.new_str);
                 if (oldStr === undefined || newStr === undefined)
                     continue;
+                if (oldStr.length === 0)
+                    continue;
                 if (!current.includes(oldStr))
                     continue;
                 byFilename.set(filename, current.replace(oldStr, newStr));
@@ -194,9 +213,7 @@ async function loadComposerMessages(req, sessionId) {
 }
 function validateFilename(filename) {
     // Keep this strict: no path traversal, no folder hierarchies.
-    if (filename.includes("..") ||
-        filename.includes("/") ||
-        filename.includes("\\")) {
+    if (!isValidArtifactFilename(filename.trim())) {
         throw new ApiError(400, "Invalid filename");
     }
 }