@evalops/maestro 0.10.21 → 0.10.22

package/dist/server/app-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-context.js","sourceRoot":"","sources":["../../src/server/app-context.ts"],"names":[],"mappings":"","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type {\n\tActionApprovalService,\n\tApprovalMode,\n} from \"../agent/action-approval.js\";\nimport type { Agent } from \"../agent/index.js\";\nimport type { ToolRetryService } from \"../agent/tool-retry.js\";\nimport type { ClientToolExecutionService } from \"../agent/transport.js\";\nimport type { ThinkingLevel } from \"../agent/types.js\";\nimport type { RegisteredModel } from \"../models/registry.js\";\nimport type { AuthCredential } from \"../providers/auth.js\";\nimport type { HeadlessRuntimeService } from \"./headless-runtime-service.js\";\nimport type { HostedRunnerLeaseSnapshot } from \"./hosted-runner-lease.js\";\n\nexport interface WebServerConfig {\n\tcorsHeaders: Record<string, string>;\n\tstaticMaxAge: number;\n\tdefaultApprovalMode: ApprovalMode;\n\tdefaultProvider: string;\n\tdefaultModelId: string;\n\thostedRunner?: HostedRunnerContext;\n}\n\nexport interface HostedRunnerContext {\n\tenabled: true;\n\trunnerSessionId: string;\n\townerInstanceId?: string;\n\tworkspaceRoot: string;\n\tsnapshotRoot?: string;\n\tlistenHost?: string;\n\tlistenPort?: number;\n\tworkspaceId?: string;\n\tagentId?: string;\n\tagentRunId?: string;\n\tagentRuntimeLeaseToken?: string;\n\ta2aMessageId?: string;\n\ta2aTaskId?: string;\n\tlastPlatformA2APush?: {\n\t\tkind: \"statusUpdate\" | \"artifactUpdate\" | \"task\" | \"message\";\n\t\ttaskId?: string;\n\t\tcontextId?: string;\n\t\tstate?: string;\n\t\tfinal?: boolean;\n\t\treceivedAt: string;\n\t\truntimeEventId?: string;\n\t\truntimeEventType?: string;\n\t};\n\tagentRuntimeWorkerQueue?: string;\n\tagentRuntimeCorrelationPath?: string;\n\tattachAudience?: string;\n\tconfiguredMaestroSessionId?: string;\n\tactiveMaestroSessionId?: string;\n\truntimeLease?: HostedRunnerLeaseSnapshot;\n\tdraining?: boolean;\n\tlastDrain?: {\n\t\tstatus: string;\n\t\tmanifestPath: string;\n\t\tdrainedAt: string;\n\t\treason?: string;\n\t\trequestedBy?: string;\n\t};\n}\n\nexport interface WebServerServices {\n\tcreateAgent: (\n\t\tmodel: RegisteredModel,\n\t\tthinking: ThinkingLevel,\n\t\tapproval: ApprovalMode,\n\t\toptions?: {\n\t\t\tcwd?: string;\n\t\t\tenableClientTools?: boolean;\n\t\t\tuseClientAskUser?: boolean;\n\t\t\tincludeVscodeTools?: boolean;\n\t\t\tincludeJetBrainsTools?: boolean;\n\t\t\tincludeConductorTools?: boolean;\n\t\t\tapprovalService?: ActionApprovalService;\n\t\t\tclientToolService?: ClientToolExecutionService;\n\t\t\ttoolRetryService?: ToolRetryService;\n\t\t},\n\t) => Promise<Agent>;\n\tcreateBackgroundAgent: (\n\t\tmodel: RegisteredModel,\n\t\toptions?: {\n\t\t\tcwd?: string;\n\t\t\tsystemPrompt?: string;\n\t\t},\n\t) => Promise<Agent>;\n\tgetRegisteredModel: (\n\t\tinput: string | null | undefined,\n\t) => Promise<RegisteredModel>;\n\tgetCurrentSelection: () => { provider: string; modelId: string };\n\tensureCredential: (provider: string) => Promise<AuthCredential>;\n\tsetModelSelection: (model: RegisteredModel) => void;\n\tacquireSse: () => symbol | null;\n\treleaseSse: (token: symbol | null) => void;\n\theadlessRuntimeService: HeadlessRuntimeService;\n}\n\nexport type WebServerContext = WebServerConfig & WebServerServices;\n"]}
+{"version":3,"file":"app-context.js","sourceRoot":"","sources":["../../src/server/app-context.ts"],"names":[],"mappings":"","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type {\n\tActionApprovalService,\n\tApprovalMode,\n} from \"../agent/action-approval.js\";\nimport type { Agent } from \"../agent/index.js\";\nimport type { ToolRetryService } from \"../agent/tool-retry.js\";\nimport type { ClientToolExecutionService } from \"../agent/transport.js\";\nimport type { ThinkingLevel } from \"../agent/types.js\";\nimport type { RegisteredModel } from \"../models/registry.js\";\nimport type { AuthCredential } from \"../providers/auth.js\";\nimport type { HeadlessRuntimeService } from \"./headless-runtime-service.js\";\nimport type { HostedRunnerLeaseSnapshot } from \"./hosted-runner-lease.js\";\n\nexport interface WebServerConfig {\n\tcorsHeaders: Record<string, string>;\n\tstaticMaxAge: number;\n\tdefaultApprovalMode: ApprovalMode;\n\tdefaultProvider: string;\n\tdefaultModelId: string;\n\thostedRunner?: HostedRunnerContext;\n}\n\nexport interface HostedRunnerContext {\n\tenabled: true;\n\trunnerSessionId: string;\n\townerInstanceId?: string;\n\tworkspaceRoot: string;\n\tsnapshotRoot?: string;\n\trestoreManifestPath?: string;\n\tlistenHost?: string;\n\tlistenPort?: number;\n\tworkspaceId?: string;\n\tagentId?: string;\n\tagentRunId?: string;\n\tagentRuntimeLeaseToken?: string;\n\ta2aMessageId?: string;\n\ta2aTaskId?: string;\n\tlastPlatformA2APush?: {\n\t\tkind: \"statusUpdate\" | \"artifactUpdate\" | \"task\" | \"message\";\n\t\ttaskId?: string;\n\t\tcontextId?: string;\n\t\tstate?: string;\n\t\tfinal?: boolean;\n\t\treceivedAt: string;\n\t\truntimeEventId?: string;\n\t\truntimeEventType?: string;\n\t};\n\tagentRuntimeWorkerQueue?: string;\n\tagentRuntimeCorrelationPath?: string;\n\tattachAudience?: string;\n\tconfiguredMaestroSessionId?: string;\n\tactiveMaestroSessionId?: string;\n\truntimeLease?: HostedRunnerLeaseSnapshot;\n\tdraining?: boolean;\n\tlastDrain?: {\n\t\tstatus: string;\n\t\tmanifestPath: string;\n\t\tdrainedAt: string;\n\t\treason?: string;\n\t\trequestedBy?: string;\n\t};\n}\n\nexport interface WebServerServices {\n\tcreateAgent: (\n\t\tmodel: RegisteredModel,\n\t\tthinking: ThinkingLevel,\n\t\tapproval: ApprovalMode,\n\t\toptions?: {\n\t\t\tcwd?: string;\n\t\t\tenableClientTools?: boolean;\n\t\t\tuseClientAskUser?: boolean;\n\t\t\tincludeVscodeTools?: boolean;\n\t\t\tincludeJetBrainsTools?: boolean;\n\t\t\tincludeConductorTools?: boolean;\n\t\t\tapprovalService?: ActionApprovalService;\n\t\t\tclientToolService?: ClientToolExecutionService;\n\t\t\ttoolRetryService?: ToolRetryService;\n\t\t},\n\t) => Promise<Agent>;\n\tcreateBackgroundAgent: (\n\t\tmodel: RegisteredModel,\n\t\toptions?: {\n\t\t\tcwd?: string;\n\t\t\tsystemPrompt?: string;\n\t\t},\n\t) => Promise<Agent>;\n\tgetRegisteredModel: (\n\t\tinput: string | null | undefined,\n\t) => Promise<RegisteredModel>;\n\tgetCurrentSelection: () => { provider: string; modelId: string };\n\tensureCredential: (provider: string) => Promise<AuthCredential>;\n\tsetModelSelection: (model: RegisteredModel) => void;\n\tacquireSse: () => symbol | null;\n\treleaseSse: (token: symbol | null) => void;\n\theadlessRuntimeService: HeadlessRuntimeService;\n}\n\nexport type WebServerContext = WebServerConfig & WebServerServices;\n"]}

package/dist/server/handlers/a2a-cockpit.d.ts

@@ -0,0 +1,3 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+export declare function handleA2ACockpit(req: IncomingMessage, res: ServerResponse, corsHeaders: Record<string, string>): Promise<void>;
+//# sourceMappingURL=a2a-cockpit.d.ts.map

package/dist/server/handlers/a2a-cockpit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a-cockpit.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/a2a-cockpit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAUjE,wBAAsB,gBAAgB,CACrC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/server/handlers/a2a-cockpit.js

@@ -0,0 +1,71 @@
+import { buildA2ACockpit } from "../../platform/a2a-cockpit.js";
+import { getVerifiedRequestPrincipal } from "../authz.js";
+import { ApiError, respondWithApiError, sendJson } from "../server-utils.js";
+import { resolveSessionScope } from "../session-scope.js";
+const DEFAULT_WEB_A2A_COCKPIT_TIMEOUT_MS = 2_500;
+const MAX_WEB_A2A_COCKPIT_TIMEOUT_MS = 10_000;
+export async function handleA2ACockpit(req, res, corsHeaders) {
+    try {
+        if (req.method !== "GET") {
+            throw new ApiError(405, "Method not allowed");
+        }
+        const url = new URL(req.url ?? "/api/a2a/cockpit", "http://localhost");
+        rejectHostedPathOverrides(url);
+        const cockpit = await buildA2ACockpit({
+            registryPath: undefined,
+            tasksPath: undefined,
+            timeoutMs: positiveIntegerQuery(url, "timeoutMs", {
+                max: MAX_WEB_A2A_COCKPIT_TIMEOUT_MS,
+            }) ?? DEFAULT_WEB_A2A_COCKPIT_TIMEOUT_MS,
+            peer: optionalQueryString(url, "peer"),
+            limit: positiveIntegerQuery(url, "limit"),
+            ownershipScope: ownershipScopeForRequest(req),
+        });
+        sendJson(res, 200, cockpit, corsHeaders, req);
+    }
+    catch (error) {
+        respondWithApiError(res, error, 500, corsHeaders, req);
+    }
+}
+function ownershipScopeForRequest(req) {
+    const principal = getVerifiedRequestPrincipal(req);
+    const scopeKey = resolveSessionScope(req) ??
+        (principal?.authMethod !== "anon" ? principal?.scopeKey : undefined);
+    if (!scopeKey) {
+        return undefined;
+    }
+    return {
+        scopeKey,
+        ...(principal?.subject ? { subject: principal.subject } : {}),
+        ...(principal?.userId ? { userId: principal.userId } : {}),
+        ...(principal?.keyId ? { keyId: principal.keyId } : {}),
+        ...(principal?.workspaceId ? { workspaceId: principal.workspaceId } : {}),
+        ...(principal?.orgId ? { orgId: principal.orgId } : {}),
+        ...(principal?.teamId ? { teamId: principal.teamId } : {}),
+    };
+}
+function rejectHostedPathOverrides(url) {
+    const blockedParams = ["registry", "tasks"].filter((key) => url.searchParams.has(key));
+    if (blockedParams.length > 0) {
+        throw new ApiError(400, `${blockedParams.join(", ")} query parameter${blockedParams.length === 1 ? " is" : "s are"} not supported by the hosted A2A cockpit`);
+    }
+}
+function optionalQueryString(url, key) {
+    const value = url.searchParams.get(key)?.trim();
+    return value ? value : undefined;
+}
+function positiveIntegerQuery(url, key, options = {}) {
+    const value = optionalQueryString(url, key);
+    if (!value) {
+        return undefined;
+    }
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        throw new ApiError(400, `${key} must be a positive integer`);
+    }
+    if (options.max !== undefined && parsed > options.max) {
+        throw new ApiError(400, `${key} must be at most ${options.max}`);
+    }
+    return parsed;
+}
+//# sourceMappingURL=a2a-cockpit.js.map

package/dist/server/handlers/a2a-cockpit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a-cockpit.js","sourceRoot":"","sources":["../../../src/server/handlers/a2a-cockpit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,kCAAkC,GAAG,KAAK,CAAC;AACjD,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,GAAoB,EACpB,GAAmB,EACnB,WAAmC;IAEnC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;QACvE,yBAAyB,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACrC,YAAY,EAAE,SAAS;YACvB,SAAS,EAAE,SAAS;YACpB,SAAS,EACR,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE;gBACtC,GAAG,EAAE,8BAA8B;aACnC,CAAC,IAAI,kCAAkC;YACzC,IAAI,EAAE,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC;YACtC,KAAK,EAAE,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC;YACzC,cAAc,EAAE,wBAAwB,CAAC,GAAG,CAAC;SAC7C,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;AACF,CAAC;AAED,SAAS,wBAAwB,CAChC,GAAoB;IAEpB,MAAM,SAAS,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,QAAQ,GACb,mBAAmB,CAAC,GAAG,CAAC;QACxB,CAAC,SAAS,EAAE,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO;QACN,QAAQ;QACR,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAQ;IAC1C,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CACzB,CAAC;IACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,mBAC1B,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OACtC,0CAA0C,CAC1C,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAQ,EAAE,GAAW;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IAChD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAC5B,GAAQ,EACR,GAAW,EACX,UAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,6BAA6B,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,oBAAoB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { buildA2ACockpit } from \"../../platform/a2a-cockpit.js\";\nimport type { A2AOwnershipScope } from \"../../platform/a2a-ownership.js\";\nimport { getVerifiedRequestPrincipal } from \"../authz.js\";\nimport { ApiError, respondWithApiError, sendJson } from \"../server-utils.js\";\nimport { resolveSessionScope } from \"../session-scope.js\";\n\nconst DEFAULT_WEB_A2A_COCKPIT_TIMEOUT_MS = 2_500;\nconst MAX_WEB_A2A_COCKPIT_TIMEOUT_MS = 10_000;\n\nexport async function handleA2ACockpit(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcorsHeaders: Record<string, string>,\n): Promise<void> {\n\ttry {\n\t\tif (req.method !== \"GET\") {\n\t\t\tthrow new ApiError(405, \"Method not allowed\");\n\t\t}\n\t\tconst url = new URL(req.url ?? \"/api/a2a/cockpit\", \"http://localhost\");\n\t\trejectHostedPathOverrides(url);\n\t\tconst cockpit = await buildA2ACockpit({\n\t\t\tregistryPath: undefined,\n\t\t\ttasksPath: undefined,\n\t\t\ttimeoutMs:\n\t\t\t\tpositiveIntegerQuery(url, \"timeoutMs\", {\n\t\t\t\t\tmax: MAX_WEB_A2A_COCKPIT_TIMEOUT_MS,\n\t\t\t\t}) ?? DEFAULT_WEB_A2A_COCKPIT_TIMEOUT_MS,\n\t\t\tpeer: optionalQueryString(url, \"peer\"),\n\t\t\tlimit: positiveIntegerQuery(url, \"limit\"),\n\t\t\townershipScope: ownershipScopeForRequest(req),\n\t\t});\n\t\tsendJson(res, 200, cockpit, corsHeaders, req);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, corsHeaders, req);\n\t}\n}\n\nfunction ownershipScopeForRequest(\n\treq: IncomingMessage,\n): A2AOwnershipScope | undefined {\n\tconst principal = getVerifiedRequestPrincipal(req);\n\tconst scopeKey =\n\t\tresolveSessionScope(req) ??\n\t\t(principal?.authMethod !== \"anon\" ? principal?.scopeKey : undefined);\n\tif (!scopeKey) {\n\t\treturn undefined;\n\t}\n\treturn {\n\t\tscopeKey,\n\t\t...(principal?.subject ? { subject: principal.subject } : {}),\n\t\t...(principal?.userId ? { userId: principal.userId } : {}),\n\t\t...(principal?.keyId ? { keyId: principal.keyId } : {}),\n\t\t...(principal?.workspaceId ? { workspaceId: principal.workspaceId } : {}),\n\t\t...(principal?.orgId ? { orgId: principal.orgId } : {}),\n\t\t...(principal?.teamId ? { teamId: principal.teamId } : {}),\n\t};\n}\n\nfunction rejectHostedPathOverrides(url: URL): void {\n\tconst blockedParams = [\"registry\", \"tasks\"].filter((key) =>\n\t\turl.searchParams.has(key),\n\t);\n\tif (blockedParams.length > 0) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`${blockedParams.join(\", \")} query parameter${\n\t\t\t\tblockedParams.length === 1 ? \" is\" : \"s are\"\n\t\t\t} not supported by the hosted A2A cockpit`,\n\t\t);\n\t}\n}\n\nfunction optionalQueryString(url: URL, key: string): string | undefined {\n\tconst value = url.searchParams.get(key)?.trim();\n\treturn value ? value : undefined;\n}\n\nfunction positiveIntegerQuery(\n\turl: URL,\n\tkey: string,\n\toptions: { max?: number } = {},\n): number | undefined {\n\tconst value = optionalQueryString(url, key);\n\tif (!value) {\n\t\treturn undefined;\n\t}\n\tconst parsed = Number(value);\n\tif (!Number.isInteger(parsed) || parsed <= 0) {\n\t\tthrow new ApiError(400, `${key} must be a positive integer`);\n\t}\n\tif (options.max !== undefined && parsed > options.max) {\n\t\tthrow new ApiError(400, `${key} must be at most ${options.max}`);\n\t}\n\treturn parsed;\n}\n"]}

package/dist/server/handlers/headless-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"headless-sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAmBjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AA2B1D,oBAAY,qBAAqB;IAChC,eAAe,sBAAsB;IACrC,qBAAqB,4BAA4B;CACjD;AA8qBD,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAQzB;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAazB;AAED,wBAAgB,0BAA0B,CACzC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAI/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAyD/B;AAED,wBAAsB,gCAAgC,CACrD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAW/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiB/B;AAED,wBAAsB,+BAA+B,CACpD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAqB/B;AAED,wBAAgB,2BAA2B,CAC1C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAsE/B;AAED,wBAAsB,4BAA4B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAsB/B"}
+{"version":3,"file":"headless-sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAmBjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AA4B1D,oBAAY,qBAAqB;IAChC,eAAe,sBAAsB;IACrC,qBAAqB,4BAA4B;CACjD;AA+rBD,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAQzB;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAazB;AAED,wBAAgB,0BAA0B,CACzC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAI/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAyD/B;AAED,wBAAsB,gCAAgC,CACrD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAW/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiB/B;AAED,wBAAsB,+BAA+B,CACpD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAqB/B;AAED,wBAAgB,2BAA2B,CAC1C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAsE/B;AAED,wBAAsB,4BAA4B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAsB/B"}

package/dist/server/handlers/headless-sessions.js

@@ -1,9 +1,11 @@
+import { existsSync } from "node:fs";
 import { headlessApprovalModes, headlessConnectionRoles, headlessNotificationTypes, headlessServerRequestTypes, headlessThinkingLevels, headlessToAgentMessageSchemasByType, headlessToAgentMessageTypes, headlessUtilityOperations, } from "@evalops/contracts";
 import { Type } from "@sinclair/typebox";
 import { resolveExistingWorkspaceRoot } from "../../headless/workspace-root.js";
 import { recordMaestroSessionRuntimeTrigger } from "../../platform/agent-runtime-client.js";
 import { normalizeApprovalMode, resolveApprovalModeForRequest, } from "../approval-mode-store.js";
 import { getAuthScopeKey, getAuthSubject } from "../authz.js";
+import { loadHostedRunnerRestoreManifest } from "../headless-runtime-service.js";
 import { bindHostedRunnerPlatformLease, claimHostedRunnerLease, evaluateHostedRunnerLeaseUse, } from "../hosted-runner-lease.js";
 import { getTraceParentHeader } from "../request-context.js";
 import { ApiError, getRequestHeader, readRequestBody, sendJson, } from "../server-utils.js";
@@ -293,11 +295,24 @@ function rethrowHeadlessConnectionLifecycleError(error) {
 async function ensureRuntime(req, context, input) {
     const sessionManager = createSessionManagerForRequest(req, false);
     const role = getHeadlessRole(req, input.role);
-    const requestedSessionId = input.sessionId?.trim() || undefined;
+    const hostedRestoreSessionId = context.hostedRunner?.restoreManifestPath
+        ? (context.hostedRunner.activeMaestroSessionId ??
+            context.hostedRunner.configuredMaestroSessionId)
+        : undefined;
+    const requestedSessionId = input.sessionId?.trim() || hostedRestoreSessionId || undefined;
     const workspaceRoot = resolveRuntimeWorkspaceRoot(context, input.workspaceRoot);
     ensureHostedRunnerCanUseSession(context, requestedSessionId);
     if (requestedSessionId) {
-        const sessionFile = sessionManager.getSessionFileById(requestedSessionId);
+        let sessionFile = sessionManager.getSessionFileById(requestedSessionId);
+        if (!sessionFile && context.hostedRunner?.restoreManifestPath) {
+            const restoreManifest = await loadHostedRunnerRestoreManifest(context.hostedRunner.restoreManifestPath);
+            const restoreSessionFile = restoreManifest?.maestro_session_id === requestedSessionId
+                ? restoreManifest.runtime.session_file
+                : undefined;
+            if (restoreSessionFile && existsSync(restoreSessionFile)) {
+                sessionFile = restoreSessionFile;
+            }
+        }
         if (!sessionFile) {
             throw new ApiError(404, "Session not found");
         }

package/dist/server/handlers/headless-sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"headless-sessions.js","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"AACA,OAAO,EAEN,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,mCAAmC,EACnC,2BAA2B,EAC3B,yBAAyB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAA6B,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAEhF,OAAO,EAAE,kCAAkC,EAAE,MAAM,wCAAwC,CAAC;AAE5F,OAAO,EACN,qBAAqB,EACrB,6BAA6B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAO9D,OAAO,EACN,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EACN,QAAQ,EACR,gBAAgB,EAChB,eAAe,EACf,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEzE,MAAM,CAAN,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAChC,8DAAqC,CAAA;IACrC,0EAAiD,CAAA;AAClD,CAAC,EAHW,qBAAqB,KAArB,qBAAqB,QAGhC;AAED,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAE3D,SAAS,kBAAkB,CAAoC,MAAS;IACvE,OAAO,IAAI,CAAC,MAAM,CACjB,IAAI,CAAC,KAAK,CACT,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAGxC,CACD,CACD,CAAC;AACH,CAAC;AAED,MAAM,iCAAiC,GAAG,IAAI,CAAC,KAAK,CACnD,kBAAkB,CAAC,yBAAyB,CAAC,EAC7C;IACC,WAAW,EAAE,IAAI;CACjB,CACD,CAAC;AAEF,MAAM,4BAA4B,GAAG;IACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAChD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,KAAK,CAAC;QACV,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;KACzB,CAAC,CACF;IACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACxE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;CAC7D,CAAC;AAEX,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAE9E,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,GAAG,4BAA4B;IAC/B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,CAAC,MAAM,CAC5C;IACC,IAAI,EAAE,kBAAkB,CAAC,2BAA2B,CAAC;CACrD,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAEH,MAAM,+BAA+B,GAAG,IAAI,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAoBH,KAAK,UAAU,oBAAoB,CAClC,GAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAC/B,MAAM,EACN,yBAAyB,EACzB,MAAM,CACN,CAAC;IACF,OAAO,eAAe,CACrB,MAAM,EACN,mCAAmC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAClD,MAAM,CACN,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACvB,GAAoB,EACpB,YAAqC;IAErC,IAAI,YAAY,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAClC,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,CAAC;IACF,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,SAAS,gCAAgC,CACxC,cAEmB;IAEnB,IAAI,cAAc,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,OAAgB;IACtD,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAChC,GAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,GAAG,EACd,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,aAAa,GAAG,GAAG;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,eAAe,CAGrB,aAAa,EACb,iCAAiC,EACjC,2BAA2B,CAC3B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB;IACxC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAyB,EACzB,QAA4C;IAE5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QACzC,iBAAiB,EAAE,YAAY,EAAE,eAAe;QAChD,iBAAiB,EAAE,YAAY,EAAE,eAAe;QAChD,YAAY,EAAE,YAAY,EAAE,WAAW;QACvC,YAAY,EAAE,YAAY,EAAE,UAAU;QACtC,GAAG,QAAQ;KACX,CAAC,EAAE,CAAC;QACJ,IAAI,KAAK,EAAE,CAAC;YACX,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACF,CAAC;IACD,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,SAAS,0BAA0B,CAClC,OAAyB,EACzB,OAAe,EACf,QAA4C;IAE5C,OAAO,IAAI,QAAQ,CAClB,GAAG,EACH,OAAO,EACP;QACC;YACC,MAAM,EAAE,qBAAqB,CAAC,qBAAqB;YACnD,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;SACtD;KACD,EACD,qBAAqB,CAAC,qBAAqB,CAC3C,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAyB,EACzB,OAAe,EACf,QAA4C;IAE5C,OAAO,IAAI,QAAQ,CAClB,GAAG,EACH,OAAO,EACP;QACC;YACC,MAAM,EAAE,qBAAqB,CAAC,eAAe;YAC7C,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;SACtD;KACD,EACD,qBAAqB,CAAC,eAAe,CACrC,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACvC,OAAyB,EACzB,kBAAsC;IAEtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,4BAA4B,CAC5C,YAAY,EACZ,kBAAkB,CAClB,CAAC;IACF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;IACR,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC5C,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;YAC1D,QAAQ,EAAE,MAAM;YAChB,kBAAkB,EAAE,QAAQ,CAAC,eAAe;YAC5C,4BAA4B,EAAE,kBAAkB;YAChD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;SACtD,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;QAC3D,kBAAkB,EAAE,QAAQ,CAAC,eAAe;QAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB;QACzD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;KACtD,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAChC,OAAyB,EACzB,SAAiB;IAEjB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAC5C,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;gBAC1D,QAAQ,EAAE,MAAM;gBAChB,kBAAkB,EAAE,QAAQ,CAAC,eAAe;gBAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB,IAAI,SAAS;gBACtE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;aACtD,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;YAC3D,kBAAkB,EAAE,QAAQ,CAAC,eAAe;YAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB,IAAI,SAAS;YACtE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;SACtD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,SAAS,2BAA2B,CACnC,OAAyB,EACzB,aAAiC;IAEjC,MAAM,aAAa,GAAG,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAE5E,IAAI,qBAAyC,CAAC;IAC9C,IAAI,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC;YACJ,qBAAqB,GAAG,4BAA4B,CAAC,aAAa,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4BAA4B,aAAa,EAAE,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IAED,IAAI,kBAAsC,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,kBAAkB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,UAAU,EAAE,CAC5D,CAAC;QACH,CAAC;IACF,CAAC;IAED,IACC,qBAAqB;QACrB,kBAAkB;QAClB,qBAAqB,KAAK,kBAAkB,EAC3C,CAAC;QACF,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,0DAA0D,kBAAkB,EAAE,CAC9E,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,IAAI,qBAAqB,CAAC;AACpD,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IAClD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,kDAAkD,EAAE,CAAC;QAC1E,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,KAAK,+BAA+B;QACjD,KAAK,CAAC,OAAO,KAAK,qDAAqD;QACvE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EACvD,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,uCAAuC,CAAC,KAAc;IAC9D,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC1C,KAAK,CAAC,OAAO;YACZ,2DAA2D,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,KAAK,CAAC;AACb,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,GAAoB,EACpB,OAAyB,EACzB,KAGC;IAED,MAAM,cAAc,GAAG,8BAA8B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChE,MAAM,aAAa,GAAG,2BAA2B,CAChD,OAAO,EACP,KAAK,CAAC,aAAa,CACnB,CAAC;IACF,+BAA+B,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC7D,IAAI,kBAAkB,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC9C,CAAC;QACD,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,IACC,KAAK,CAAC,iBAAiB;QACvB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,mEAAmE,CACnE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,6DAA6D,CAC7D,CAAC;IACH,CAAC;IACD,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,qBAAqB,CAC3C,gBAAgB,CACf,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,IAAI,SAAS,CACd,CAAC;IACF,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;QACvD,SAAS,EAAE,kBAAkB,IAAI,cAAc,CAAC,YAAY,EAAE;QAC9D,OAAO;QACP,kBAAkB,EAAE,KAAK,CAAC,YAAY,IAAI,cAAc;QACxD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;KAChD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC;QAClE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;QAC3B,SAAS,EAAE,kBAAkB;QAC7B,OAAO;QACP,aAAa;QACb,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,eAAe;QACf,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAkB;QAC9D,YAAY,EAAE,iBAAiB;QAC/B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;QACpD,OAAO;QACP,cAAc;KACd,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,yBAAyB,KAAK,KAAK,EAAE,CAAC;QAC/C,MAAM,sCAAsC,CAAC;YAC5C,OAAO;YACP,OAAO;YACP,OAAO;YACP,eAAe;YACf,IAAI;YACJ,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAkB;YAC9D,YAAY,EAAE,iBAAiB;YAC/B,aAAa;YACb,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,sCAAsC,CAAC,OAUrD;IACA,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;IAClD,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,wCAAwC;IACxC,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC;QACvD,WAAW,EAAE,YAAY,EAAE,WAAW;QACtC,OAAO,EAAE,YAAY,EAAE,OAAO;QAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,mBAAmB,QAAQ,CAAC,UAAU,EAAE;QACvD,WAAW,EAAE,oBAAoB,EAAE;QACnC,QAAQ,EAAE;YACT,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE;YACjC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,QAAQ;YAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,aAAa,EAAE,OAAO,CAAC,YAAY;YACnC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS;YACzC,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe;YAC/C,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,iBAAiB,EAAE,YAAY,EAAE,eAAe;YAChD,iBAAiB,EAAE,YAAY,EAAE,eAAe;YAChD,QAAQ,EAAE,YAAY,EAAE,OAAO;SAC/B;KACD,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO;IACR,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,yCAAyC,CACnE,EAAE,UAAU,CAAC;IACd,6BAA6B,CAAC,YAAY,EAAE;QAC3C,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO;QACpC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK;KACnC,CAAC,CAAC;IACH,2EAA2E;IAC3E,0EAA0E;IAC1E,oEAAoE;IACpE,YAAY,CAAC,YAAY,GAAG,cAAc;QACzC,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACnD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,SAAS,GAAG,cAAc;QACtC,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,aAAa,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,uBAAuB,GAAG,cAAc;QACpD,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,2BAA2B,GAAG,cAAc;QACxD,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,kBAAkB,CAAC;QACrD,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CACvB,UAAmC,EACnC,GAAW;IAEX,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,GAAoB,EACpB,OAAyB,EACzB,KAAoC;IAEpC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE;QACjD,GAAG,KAAK;QACR,kBAAkB,EAAE,KAAK;QACzB,yBAAyB,EAAE,KAAK;KAChC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO;QACN,GAAG,SAAS;QACZ,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,IAAI;QACJ,qBAAqB,EAAE,KAAK,CAAC,mBAAmB;QAChD,QAAQ;KACR,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAClB,GAAoB,EACpB,OAAyB,EACzB,SAA6B;IAE7B,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IACxD,CAAC;IACD,+BAA+B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,UAAU,CACxD,WAAW,CAAC,GAAG,CAAC,EAChB,SAAS,CACT,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,2BAA2B,CAC3B,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,UAA6C,CAAC;IAClD,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,OAAO,CAAC,kBAAkB,CAAC;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI;YACJ,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,qBAAqB,EAAE,KAAK,CAAC,eAAe;YAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAC/B,CAAC,CAAC;oBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;oBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;oBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;iBACnD;gBACF,CAAC,CAAC,SAAS;YACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC9C,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IACC,KAAK,YAAY,KAAK;YACtB,KAAK,CAAC,OAAO,KAAK,wDAAwD,EACzE,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IACC,KAAK,YAAY,KAAK;YACtB,CAAC,KAAK,CAAC,OAAO,KAAK,+BAA+B;gBACjD,KAAK,CAAC,OAAO;oBACZ,2DAA2D,CAAC,EAC7D,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACrD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,gCAAgC,CAChC,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,SAA2C,CAAC;IAChD,IAAI,CAAC;QACJ,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC;YACvC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,+BAA+B,CAC/B,CAAC;IACF,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,MAAM,OAAO,CAAC,oBAAoB,CAAC;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,0BAA0B,MAAM,EAAE,EAAE,SAAS,EACxD,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,cAAc,GACnB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAExE,MAAM,MAAM,GAAG,cAAc;QAC5B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;YAC7B,MAAM;YACN,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;YAC1B,mBAAmB,EAAE,wBAAwB,CAAC,GAAG,CAAC;SAClD,CAAC,CAAC;IACL,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QAClB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,UAAU;QAC3B,UAAU,EAAE,YAAY;QACxB,GAAG,OAAO,CAAC,WAAW;KACtB,CAAC,CAAC;IACH,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,KAAK,GAAG,GAAG,EAAE;QAClB,IAAI,QAAQ,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACnC,OAAO;QACR,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,QAAQ,GAAG,KAAK,CAAC;gBACjB,OAAO;YACR,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,QAAQ,GAAG,KAAK,CAAC;oBACjB,KAAK,EAAE,CAAC;gBACT,CAAC,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;QACF,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACpC,KAAK,EAAE,CAAC;QACT,CAAC;IACF,CAAC,EAAE,KAAK,CAAC,CAAC;IACV,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,MAAM,OAAO,GAAG,GAAG,EAAE;QACpB,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,aAAa,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC;AACT,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC;QACJ,OAAO,CAAC,aAAa,CACpB,eAAe,CAAC,GAAG,CAAC,EACpB,uBAAuB,CAAC,GAAG,CAAC,EAC5B,uBAAuB,CAAC,GAAG,CAAC,CAC5B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,CAAC,IAAI,CAAC,KAA+B,EAAE;YACnD,YAAY,EAAE,uBAAuB,CAAC,GAAG,CAAC;YAC1C,cAAc,EAAE,uBAAuB,CAAC,GAAG,CAAC;SAC5C,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport {\n\ttype HeadlessConnectionRole,\n\theadlessApprovalModes,\n\theadlessConnectionRoles,\n\theadlessNotificationTypes,\n\theadlessServerRequestTypes,\n\theadlessThinkingLevels,\n\theadlessToAgentMessageSchemasByType,\n\theadlessToAgentMessageTypes,\n\theadlessUtilityOperations,\n} from \"@evalops/contracts\";\nimport { type Static, type TSchema, Type } from \"@sinclair/typebox\";\nimport type { ApprovalMode } from \"../../agent/action-approval.js\";\nimport type { ThinkingLevel } from \"../../agent/types.js\";\nimport type { HeadlessToAgentMessage } from \"../../cli/headless-protocol.js\";\nimport { resolveExistingWorkspaceRoot } from \"../../headless/workspace-root.js\";\nimport type { RegisteredModel } from \"../../models/registry.js\";\nimport { recordMaestroSessionRuntimeTrigger } from \"../../platform/agent-runtime-client.js\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport {\n\tnormalizeApprovalMode,\n\tresolveApprovalModeForRequest,\n} from \"../approval-mode-store.js\";\nimport { getAuthScopeKey, getAuthSubject } from \"../authz.js\";\nimport type {\n\tHeadlessRuntimeConnectionSnapshot,\n\tHeadlessRuntimeHeartbeatSnapshot,\n\tHeadlessRuntimeStreamEnvelope,\n\tHeadlessSessionRuntime,\n} from \"../headless-runtime-service.js\";\nimport {\n\tbindHostedRunnerPlatformLease,\n\tclaimHostedRunnerLease,\n\tevaluateHostedRunnerLeaseUse,\n} from \"../hosted-runner-lease.js\";\nimport { getTraceParentHeader } from \"../request-context.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\treadRequestBody,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { createSessionManagerForRequest } from \"../session-scope.js\";\nimport { parseAndValidateJson, validatePayload } from \"../validation.js\";\n\nexport enum HostedRunnerErrorType {\n\tRuntimeNotReady = \"runtime_not_ready\",\n\tRuntimeOwnedElsewhere = \"runtime_owned_elsewhere\",\n}\n\nconst HOSTED_RUNNER_ERROR_DOMAIN = \"maestro.hosted_runner\";\n\nfunction stringLiteralUnion<const T extends readonly string[]>(values: T) {\n\treturn Type.Unsafe<T[number]>(\n\t\tType.Union(\n\t\t\tvalues.map((value) => Type.Literal(value)) as unknown as [\n\t\t\t\tTSchema,\n\t\t\t\t...TSchema[],\n\t\t\t],\n\t\t),\n\t);\n}\n\nconst HeadlessOptOutNotificationsSchema = Type.Array(\n\tstringLiteralUnion(headlessNotificationTypes),\n\t{\n\t\tuniqueItems: true,\n\t},\n);\n\nconst HeadlessCreateBaseProperties = {\n\tsessionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tworkspaceRoot: Type.Optional(Type.String()),\n\tmodel: Type.Optional(Type.String()),\n\tenableClientTools: Type.Optional(Type.Boolean()),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\tclient: Type.Optional(\n\t\tType.Union([\n\t\t\tType.Literal(\"generic\"),\n\t\t\tType.Literal(\"vscode\"),\n\t\t\tType.Literal(\"jetbrains\"),\n\t\t\tType.Literal(\"conductor\"),\n\t\t]),\n\t),\n\tthinkingLevel: Type.Optional(stringLiteralUnion(headlessThinkingLevels)),\n\tapprovalMode: Type.Optional(stringLiteralUnion(headlessApprovalModes)),\n} as const;\n\nconst HeadlessSessionCreateSchema = Type.Object(HeadlessCreateBaseProperties);\n\nconst HeadlessConnectionCreateSchema = Type.Object({\n\t...HeadlessCreateBaseProperties,\n\tconnectionId: Type.Optional(Type.String()),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessMessageTypeSchema = Type.Object(\n\t{\n\t\ttype: stringLiteralUnion(headlessToAgentMessageTypes),\n\t},\n\t{ additionalProperties: true },\n);\n\nconst HeadlessSessionSubscribeSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessSessionUnsubscribeSchema = Type.Object({\n\tsubscriptionId: Type.String(),\n});\n\nconst HeadlessSessionHeartbeatSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\nconst HeadlessSessionDisconnectSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\ntype HeadlessSessionCreateInput = Static<typeof HeadlessSessionCreateSchema>;\ntype HeadlessConnectionCreateInput = Static<\n\ttypeof HeadlessConnectionCreateSchema\n>;\ntype HeadlessSessionSubscribeInput = Static<\n\ttypeof HeadlessSessionSubscribeSchema\n>;\ntype HeadlessSessionUnsubscribeInput = Static<\n\ttypeof HeadlessSessionUnsubscribeSchema\n>;\ntype HeadlessSessionHeartbeatInput = Static<\n\ttypeof HeadlessSessionHeartbeatSchema\n>;\ntype HeadlessSessionDisconnectInput = Static<\n\ttypeof HeadlessSessionDisconnectSchema\n>;\ntype HeadlessMessageTypeInput = Static<typeof HeadlessMessageTypeSchema>;\n\nasync function parseHeadlessMessage(\n\treq: IncomingMessage,\n): Promise<HeadlessToAgentMessage> {\n\tconst raw = await readRequestBody(req);\n\tif (!raw.length) {\n\t\tthrow new ApiError(400, \"Request body required\");\n\t}\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(raw.toString());\n\t} catch {\n\t\tthrow new ApiError(400, \"Invalid JSON payload\");\n\t}\n\tconst envelope = validatePayload<HeadlessMessageTypeInput>(\n\t\tparsed,\n\t\tHeadlessMessageTypeSchema,\n\t\t\"body\",\n\t);\n\treturn validatePayload<HeadlessToAgentMessage>(\n\t\tparsed,\n\t\theadlessToAgentMessageSchemasByType[envelope.type],\n\t\t\"body\",\n\t);\n}\n\nfunction getHeadlessRole(\n\treq: IncomingMessage,\n\texplicitRole?: HeadlessConnectionRole,\n): HeadlessConnectionRole {\n\tif (explicitRole) {\n\t\treturn explicitRole;\n\t}\n\tconst headerRole = getRequestHeader(\n\t\treq,\n\t\t\"x-composer-headless-role\",\n\t\t\"x-maestro-headless-role\",\n\t);\n\treturn headerRole === \"viewer\" ? \"viewer\" : \"controller\";\n}\n\nfunction getViewerDisallowedServerRequest(\n\tserverRequests?: Static<\n\t\ttypeof HeadlessCreateBaseProperties.capabilities\n\t>[\"serverRequests\"],\n): \"mcp_elicitation\" | \"user_input\" | undefined {\n\tif (serverRequests?.includes(\"mcp_elicitation\")) {\n\t\treturn \"mcp_elicitation\";\n\t}\n\tif (serverRequests?.includes(\"user_input\")) {\n\t\treturn \"user_input\";\n\t}\n\treturn undefined;\n}\n\nfunction writeSse(res: ServerResponse, payload: unknown): boolean {\n\treturn res.write(`data: ${JSON.stringify(payload)}\\n\\n`);\n}\n\nfunction getHeadlessSubscriberId(req: IncomingMessage): string | undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-subscriber-id\",\n\t\t\t\"x-maestro-headless-subscriber-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction getHeadlessConnectionId(req: IncomingMessage): string | undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-connection-id\",\n\t\t\t\"x-maestro-headless-connection-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction parseOptOutNotifications(\n\treq: IncomingMessage,\n): HeadlessSessionSubscribeInput[\"optOutNotifications\"] {\n\tconst url = new URL(\n\t\treq.url || \"/\",\n\t\t`http://${req.headers.host || \"localhost\"}`,\n\t);\n\tconst raw = url.searchParams.get(\"optOutNotifications\");\n\tif (!raw) {\n\t\treturn undefined;\n\t}\n\tconst notifications = raw\n\t\t.split(\",\")\n\t\t.map((value) => value.trim())\n\t\t.filter(Boolean);\n\tif (notifications.length === 0) {\n\t\treturn undefined;\n\t}\n\treturn validatePayload<\n\t\tNonNullable<HeadlessSessionSubscribeInput[\"optOutNotifications\"]>\n\t>(\n\t\tnotifications,\n\t\tHeadlessOptOutNotificationsSchema,\n\t\t\"query.optOutNotifications\",\n\t);\n}\n\nfunction getScopeKey(req: IncomingMessage): string {\n\treturn getAuthScopeKey(req);\n}\n\nfunction hostedRunnerErrorMetadata(\n\tcontext: WebServerContext,\n\tmetadata: Record<string, string | undefined>,\n): Record<string, string> {\n\tconst hostedRunner = context.hostedRunner;\n\tconst detailMetadata: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries({\n\t\trunner_session_id: hostedRunner?.runnerSessionId,\n\t\towner_instance_id: hostedRunner?.ownerInstanceId,\n\t\tworkspace_id: hostedRunner?.workspaceId,\n\t\tagent_run_id: hostedRunner?.agentRunId,\n\t\t...metadata,\n\t})) {\n\t\tif (value) {\n\t\t\tdetailMetadata[key] = value;\n\t\t}\n\t}\n\treturn detailMetadata;\n}\n\nfunction hostedRunnerOwnershipError(\n\tcontext: WebServerContext,\n\tmessage: string,\n\tmetadata: Record<string, string | undefined>,\n): ApiError {\n\treturn new ApiError(\n\t\t409,\n\t\tmessage,\n\t\t[\n\t\t\t{\n\t\t\t\treason: HostedRunnerErrorType.RuntimeOwnedElsewhere,\n\t\t\t\tdomain: HOSTED_RUNNER_ERROR_DOMAIN,\n\t\t\t\tmetadata: hostedRunnerErrorMetadata(context, metadata),\n\t\t\t},\n\t\t],\n\t\tHostedRunnerErrorType.RuntimeOwnedElsewhere,\n\t);\n}\n\nfunction hostedRunnerNotReadyError(\n\tcontext: WebServerContext,\n\tmessage: string,\n\tmetadata: Record<string, string | undefined>,\n): ApiError {\n\treturn new ApiError(\n\t\t503,\n\t\tmessage,\n\t\t[\n\t\t\t{\n\t\t\t\treason: HostedRunnerErrorType.RuntimeNotReady,\n\t\t\t\tdomain: HOSTED_RUNNER_ERROR_DOMAIN,\n\t\t\t\tmetadata: hostedRunnerErrorMetadata(context, metadata),\n\t\t\t},\n\t\t],\n\t\tHostedRunnerErrorType.RuntimeNotReady,\n\t);\n}\n\nfunction ensureHostedRunnerCanUseSession(\n\tcontext: WebServerContext,\n\trequestedSessionId: string | undefined,\n): void {\n\tconst hostedRunner = context.hostedRunner;\n\tif (!hostedRunner) {\n\t\treturn;\n\t}\n\tconst decision = evaluateHostedRunnerLeaseUse(\n\t\thostedRunner,\n\t\trequestedSessionId,\n\t);\n\tif (decision.ok) {\n\t\treturn;\n\t}\n\tif (decision.reason === \"runtime_draining\") {\n\t\tthrow hostedRunnerNotReadyError(context, decision.message, {\n\t\t\tdraining: \"true\",\n\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\trequested_maestro_session_id: requestedSessionId,\n\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t});\n\t}\n\tthrow hostedRunnerOwnershipError(context, decision.message, {\n\t\tmaestro_session_id: decision.activeSessionId,\n\t\trequested_maestro_session_id: decision.requestedSessionId,\n\t\tlease_generation: String(decision.snapshot.generation),\n\t});\n}\n\nfunction claimHostedRunnerSession(\n\tcontext: WebServerContext,\n\tsessionId: string,\n): void {\n\tconst hostedRunner = context.hostedRunner;\n\tif (!hostedRunner) {\n\t\treturn;\n\t}\n\tconst decision = claimHostedRunnerLease(hostedRunner, sessionId);\n\tif (!decision.ok) {\n\t\tif (decision.reason === \"runtime_draining\") {\n\t\t\tthrow hostedRunnerNotReadyError(context, decision.message, {\n\t\t\t\tdraining: \"true\",\n\t\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\t\trequested_maestro_session_id: decision.requestedSessionId ?? sessionId,\n\t\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t\t});\n\t\t}\n\t\tthrow hostedRunnerOwnershipError(context, decision.message, {\n\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\trequested_maestro_session_id: decision.requestedSessionId ?? sessionId,\n\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t});\n\t}\n}\n\nfunction resolveRuntimeWorkspaceRoot(\n\tcontext: WebServerContext,\n\tworkspaceRoot: string | undefined,\n): string | undefined {\n\tconst requestedRoot = workspaceRoot?.trim() || undefined;\n\tconst hostedRoot = context.hostedRunner?.workspaceRoot?.trim() || undefined;\n\n\tlet resolvedRequestedRoot: string | undefined;\n\tif (requestedRoot) {\n\t\ttry {\n\t\t\tresolvedRequestedRoot = resolveExistingWorkspaceRoot(requestedRoot);\n\t\t} catch {\n\t\t\tthrow new ApiError(400, `workspaceRoot not found: ${requestedRoot}`);\n\t\t}\n\t}\n\n\tlet resolvedHostedRoot: string | undefined;\n\tif (hostedRoot) {\n\t\ttry {\n\t\t\tresolvedHostedRoot = resolveExistingWorkspaceRoot(hostedRoot);\n\t\t} catch {\n\t\t\tthrow new ApiError(\n\t\t\t\t500,\n\t\t\t\t`Hosted runner workspace root is unavailable: ${hostedRoot}`,\n\t\t\t);\n\t\t}\n\t}\n\n\tif (\n\t\tresolvedRequestedRoot &&\n\t\tresolvedHostedRoot &&\n\t\tresolvedRequestedRoot !== resolvedHostedRoot\n\t) {\n\t\tthrow new ApiError(\n\t\t\t409,\n\t\t\t`workspaceRoot must match hosted runner workspace root: ${resolvedHostedRoot}`,\n\t\t);\n\t}\n\n\treturn resolvedHostedRoot ?? resolvedRequestedRoot;\n}\n\nfunction rethrowHeadlessMessageError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Viewer headless connections cannot send messages\") {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message === \"Headless subscriber not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message === \"Headless connection not found\" ||\n\t\terror.message === \"Headless connection does not have controller access\" ||\n\t\terror.message.includes(\"is owned by another connection\")\n\t) {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message.includes(\"Controller lease\")) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow new ApiError(403, error.message);\n}\n\nfunction rethrowHeadlessConnectionLifecycleError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Headless connection not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message.includes(\"Controller lease\") ||\n\t\terror.message ===\n\t\t\t\"Headless connection role does not match subscription role\"\n\t) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow error;\n}\n\nasync function ensureRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessSessionCreateInput & {\n\t\tregisterConnection?: boolean;\n\t\trecordAgentRuntimeTrigger?: boolean;\n\t},\n) {\n\tconst sessionManager = createSessionManagerForRequest(req, false);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst requestedSessionId = input.sessionId?.trim() || undefined;\n\tconst workspaceRoot = resolveRuntimeWorkspaceRoot(\n\t\tcontext,\n\t\tinput.workspaceRoot,\n\t);\n\tensureHostedRunnerCanUseSession(context, requestedSessionId);\n\tif (requestedSessionId) {\n\t\tconst sessionFile = sessionManager.getSessionFileById(requestedSessionId);\n\t\tif (!sessionFile) {\n\t\t\tthrow new ApiError(404, \"Session not found\");\n\t\t}\n\t\tsessionManager.setSessionFile(sessionFile);\n\t}\n\n\tconst registeredModel = await context.getRegisteredModel(input.model);\n\tconst subject = getAuthSubject(req);\n\tif (\n\t\tinput.enableClientTools &&\n\t\t!input.capabilities?.serverRequests?.includes(\"client_tool\")\n\t) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"client_tool capability is required when enableClientTools is true\",\n\t\t);\n\t}\n\tif (role === \"viewer\" && input.enableClientTools) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"viewer headless connections cannot enable client-side tools\",\n\t\t);\n\t}\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\tconst headerApproval = normalizeApprovalMode(\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-approval-mode\",\n\t\t\t\"x-maestro-approval-mode\",\n\t\t) ?? undefined,\n\t);\n\tconst effectiveApproval = resolveApprovalModeForRequest({\n\t\tsessionId: requestedSessionId ?? sessionManager.getSessionId(),\n\t\tsubject,\n\t\theaderApprovalMode: input.approvalMode ?? headerApproval,\n\t\tdefaultApprovalMode: context.defaultApprovalMode,\n\t});\n\n\tconst runtime = await context.headlessRuntimeService.ensureRuntime({\n\t\tscope_key: getScopeKey(req),\n\t\tsessionId: requestedSessionId,\n\t\tsubject,\n\t\tworkspaceRoot,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\tregisteredModel,\n\t\tthinkingLevel: (input.thinkingLevel ?? \"off\") as ThinkingLevel,\n\t\tapprovalMode: effectiveApproval,\n\t\tenableClientTools: input.enableClientTools,\n\t\tclient: input.client,\n\t\tregisterConnection: input.registerConnection ?? true,\n\t\tcontext,\n\t\tsessionManager,\n\t});\n\tif (context.hostedRunner) {\n\t\tclaimHostedRunnerSession(context, runtime.getSnapshot().session_id);\n\t}\n\tif (input.recordAgentRuntimeTrigger !== false) {\n\t\tawait recordPlatformAgentRuntimeSessionStart({\n\t\t\tcontext,\n\t\t\truntime,\n\t\t\tsubject,\n\t\t\tregisteredModel,\n\t\t\trole,\n\t\t\tthinkingLevel: (input.thinkingLevel ?? \"off\") as ThinkingLevel,\n\t\t\tapprovalMode: effectiveApproval,\n\t\t\tworkspaceRoot,\n\t\t\tinput,\n\t\t});\n\t}\n\treturn runtime;\n}\n\nasync function recordPlatformAgentRuntimeSessionStart(options: {\n\tcontext: WebServerContext;\n\truntime: HeadlessSessionRuntime;\n\tsubject?: string;\n\tregisteredModel: RegisteredModel;\n\trole: HeadlessConnectionRole;\n\tthinkingLevel: ThinkingLevel;\n\tapprovalMode: ApprovalMode;\n\tworkspaceRoot: string | undefined;\n\tinput: HeadlessSessionCreateInput;\n}): Promise<void> {\n\tconst snapshot = options.runtime.getSnapshot();\n\tconst hostedRunner = options.context.hostedRunner;\n\t// This is a projection, not ownership transfer. The local headless runtime\n\t// remains authoritative; Platform receives session-start metadata and trace\n\t// context so AgentRuntime, A2A, deploy smoke tests, and support endpoints can\n\t// all join on the same Maestro session.\n\tconst result = await recordMaestroSessionRuntimeTrigger({\n\t\tworkspaceId: hostedRunner?.workspaceId,\n\t\tagentId: hostedRunner?.agentId,\n\t\tsessionId: snapshot.session_id,\n\t\tactorId: options.subject,\n\t\tcorrelationId: `maestro-session:${snapshot.session_id}`,\n\t\ttraceparent: getTraceParentHeader(),\n\t\tmetadata: {\n\t\t\tmodel: options.registeredModel.id,\n\t\t\tprovider: options.registeredModel.provider,\n\t\t\trole: options.role,\n\t\t\tthinking_level: options.thinkingLevel,\n\t\t\tapproval_mode: options.approvalMode,\n\t\t\tclient: options.input.client ?? \"generic\",\n\t\t\tprotocol_version: options.input.protocolVersion,\n\t\t\tworkspace_root: options.workspaceRoot,\n\t\t\trunner_session_id: hostedRunner?.runnerSessionId,\n\t\t\towner_instance_id: hostedRunner?.ownerInstanceId,\n\t\t\tagent_id: hostedRunner?.agentId,\n\t\t},\n\t});\n\tif (!hostedRunner || !result) {\n\t\treturn;\n\t}\n\tconst a2aCorrelation = result.events.find(\n\t\t(event) => event.type === \"maestro.platform_runtime.a2a_correlated\",\n\t)?.attributes;\n\tbindHostedRunnerPlatformLease(hostedRunner, {\n\t\tagentRunId: result.run.id,\n\t\tagentId: result.run.linkage?.agentId,\n\t\tleaseToken: result.run.lease?.token,\n\t});\n\t// Store only support-grade handles on the hosted runner. The full run/task\n\t// state stays in Platform; health and identity endpoints expose these ids\n\t// for operators without making Platform a session-state dependency.\n\thostedRunner.a2aMessageId = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"a2a_message_id\")\n\t\t: undefined;\n\thostedRunner.a2aTaskId = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"a2a_task_id\")\n\t\t: undefined;\n\thostedRunner.agentRuntimeWorkerQueue = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"worker_queue\")\n\t\t: undefined;\n\thostedRunner.agentRuntimeCorrelationPath = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"correlation_path\")\n\t\t: undefined;\n}\n\nfunction stringAttribute(\n\tattributes: Record<string, unknown>,\n\tkey: string,\n): string | undefined {\n\tconst value = attributes[key];\n\treturn typeof value === \"string\" && value.trim().length > 0\n\t\t? value\n\t\t: undefined;\n}\n\nasync function ensureConnection(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessConnectionCreateInput,\n): Promise<HeadlessRuntimeConnectionSnapshot> {\n\tconst runtime = await ensureRuntime(req, context, {\n\t\t...input,\n\t\tregisterConnection: false,\n\t\trecordAgentRuntimeTrigger: false,\n\t});\n\tconst role = getHeadlessRole(req, input.role);\n\tconst heartbeat = runtime.registerConnection({\n\t\tconnectionId: input.connectionId,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\ttakeControl: input.takeControl,\n\t});\n\tconst snapshot = runtime.getSnapshot();\n\treturn {\n\t\t...heartbeat,\n\t\tsession_id: snapshot.session_id,\n\t\trole,\n\t\topt_out_notifications: input.optOutNotifications,\n\t\tsnapshot,\n\t};\n}\n\nfunction getRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tsessionId: string | undefined,\n) {\n\tif (!sessionId) {\n\t\tthrow new ApiError(400, \"Missing headless session id\");\n\t}\n\tensureHostedRunnerCanUseSession(context, sessionId);\n\tconst runtime = context.headlessRuntimeService.getRuntime(\n\t\tgetScopeKey(req),\n\t\tsessionId,\n\t);\n\tif (!runtime) {\n\t\tthrow new ApiError(404, \"Headless session not found\");\n\t}\n\tif (context.hostedRunner) {\n\t\tclaimHostedRunnerSession(context, runtime.getSnapshot().session_id);\n\t}\n\treturn runtime;\n}\n\nexport async function handleHeadlessSessionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessSessionCreateInput>(\n\t\treq,\n\t\tHeadlessSessionCreateSchema,\n\t);\n\tconst runtime = await ensureRuntime(req, context, input);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessConnectionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessConnectionCreateInput>(\n\t\treq,\n\t\tHeadlessConnectionCreateSchema,\n\t);\n\tlet connection: HeadlessRuntimeConnectionSnapshot;\n\ttry {\n\t\tconnection = await ensureConnection(req, context, input);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, connection, context.corsHeaders, req);\n}\n\nexport function handleHeadlessSessionState(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionSubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionSubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionSubscribeSchema,\n\t);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\truntime.createSubscription({\n\t\t\t\tconnectionId: input.connectionId,\n\t\t\t\trole,\n\t\t\t\texplicit: true,\n\t\t\t\ttakeControl: input.takeControl,\n\t\t\t\tclientProtocolVersion: input.protocolVersion,\n\t\t\t\tclientInfo: input.clientInfo,\n\t\t\t\tcapabilities: input.capabilities\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t\t\t}\n\t\t\t\t\t: undefined,\n\t\t\t\toptOutNotifications: input.optOutNotifications,\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\terror.message === \"Controller lease is already held by another connection\"\n\t\t) {\n\t\t\tthrow new ApiError(409, error.message);\n\t\t}\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\t(error.message === \"Headless connection not found\" ||\n\t\t\t\terror.message ===\n\t\t\t\t\t\"Headless connection role does not match subscription role\")\n\t\t) {\n\t\t\tthrow new ApiError(400, error.message);\n\t\t}\n\t\tthrow error;\n\t}\n}\n\nexport async function handleHeadlessSessionUnsubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionUnsubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionUnsubscribeSchema,\n\t);\n\tif (!(await runtime.unsubscribe(input.subscriptionId))) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionHeartbeat(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionHeartbeatInput>(\n\t\treq,\n\t\tHeadlessSessionHeartbeatSchema,\n\t);\n\tlet heartbeat: HeadlessRuntimeHeartbeatSnapshot;\n\ttry {\n\t\theartbeat = runtime.heartbeatConnection({\n\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, heartbeat, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionDisconnect(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionDisconnectInput>(\n\t\treq,\n\t\tHeadlessSessionDisconnectSchema,\n\t);\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\tawait runtime.disconnectConnection({\n\t\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n}\n\nexport function handleHeadlessSessionEvents(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst url = new URL(\n\t\treq.url || `/api/headless/sessions/${params?.id}/events`,\n\t\t`http://${req.headers.host || \"localhost\"}`,\n\t);\n\tconst cursorParam = url.searchParams.get(\"cursor\");\n\tconst cursor = cursorParam ? Number.parseInt(cursorParam, 10) : null;\n\tconst subscriptionId =\n\t\turl.searchParams.get(\"subscriptionId\") || getHeadlessSubscriberId(req);\n\n\tconst stream = subscriptionId\n\t\t? runtime.attachSubscription(subscriptionId)\n\t\t: runtime.createImplicitStream({\n\t\t\t\tcursor,\n\t\t\t\trole: getHeadlessRole(req),\n\t\t\t\toptOutNotifications: parseOptOutNotifications(req),\n\t\t\t});\n\tif (!stream) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\n\tres.writeHead(200, {\n\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\"Cache-Control\": \"no-cache\",\n\t\tConnection: \"keep-alive\",\n\t\t...context.corsHeaders,\n\t});\n\tlet flushing = false;\n\n\tconst flush = () => {\n\t\tif (flushing || res.writableEnded) {\n\t\t\treturn;\n\t\t}\n\t\tflushing = true;\n\t\twhile (!res.writableEnded) {\n\t\t\tconst next = stream.next();\n\t\t\tif (!next) {\n\t\t\t\tflushing = false;\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst wrote = writeSse(res, next);\n\t\t\tif (!wrote) {\n\t\t\t\tres.once(\"drain\", () => {\n\t\t\t\t\tflushing = false;\n\t\t\t\t\tflush();\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t\tflushing = false;\n\t};\n\tconst stopListening = stream.onAvailable(flush);\n\tconst heartbeat = setInterval(() => {\n\t\tif (!res.writableEnded) {\n\t\t\tstream.enqueue(runtime.heartbeat());\n\t\t\tflush();\n\t\t}\n\t}, 15000);\n\theartbeat.unref();\n\n\tconst cleanup = () => {\n\t\tclearInterval(heartbeat);\n\t\tstopListening();\n\t\tstream.close();\n\t};\n\treq.on(\"close\", cleanup);\n\tres.on(\"close\", cleanup);\n\tflush();\n}\n\nexport async function handleHeadlessSessionMessage(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseHeadlessMessage(req);\n\ttry {\n\t\truntime.assertCanSend(\n\t\t\tgetHeadlessRole(req),\n\t\t\tgetHeadlessSubscriberId(req),\n\t\t\tgetHeadlessConnectionId(req),\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\ttry {\n\t\tawait runtime.send(input as HeadlessToAgentMessage, {\n\t\t\tconnectionId: getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n"]}
+{"version":3,"file":"headless-sessions.js","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAEN,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,mCAAmC,EACnC,2BAA2B,EAC3B,yBAAyB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAA6B,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAEhF,OAAO,EAAE,kCAAkC,EAAE,MAAM,wCAAwC,CAAC;AAE5F,OAAO,EACN,qBAAqB,EACrB,6BAA6B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAO9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EACN,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EACN,QAAQ,EACR,gBAAgB,EAChB,eAAe,EACf,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEzE,MAAM,CAAN,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAChC,8DAAqC,CAAA;IACrC,0EAAiD,CAAA;AAClD,CAAC,EAHW,qBAAqB,KAArB,qBAAqB,QAGhC;AAED,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAE3D,SAAS,kBAAkB,CAAoC,MAAS;IACvE,OAAO,IAAI,CAAC,MAAM,CACjB,IAAI,CAAC,KAAK,CACT,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAGxC,CACD,CACD,CAAC;AACH,CAAC;AAED,MAAM,iCAAiC,GAAG,IAAI,CAAC,KAAK,CACnD,kBAAkB,CAAC,yBAAyB,CAAC,EAC7C;IACC,WAAW,EAAE,IAAI;CACjB,CACD,CAAC;AAEF,MAAM,4BAA4B,GAAG;IACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAChD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,KAAK,CAAC;QACV,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;KACzB,CAAC,CACF;IACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACxE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;CAC7D,CAAC;AAEX,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAE9E,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,GAAG,4BAA4B;IAC/B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,CAAC,MAAM,CAC5C;IACC,IAAI,EAAE,kBAAkB,CAAC,2BAA2B,CAAC;CACrD,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAEH,MAAM,+BAA+B,GAAG,IAAI,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAoBH,KAAK,UAAU,oBAAoB,CAClC,GAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAC/B,MAAM,EACN,yBAAyB,EACzB,MAAM,CACN,CAAC;IACF,OAAO,eAAe,CACrB,MAAM,EACN,mCAAmC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAClD,MAAM,CACN,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACvB,GAAoB,EACpB,YAAqC;IAErC,IAAI,YAAY,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAClC,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,CAAC;IACF,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,SAAS,gCAAgC,CACxC,cAEmB;IAEnB,IAAI,cAAc,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,OAAgB;IACtD,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAChC,GAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,GAAG,EACd,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,aAAa,GAAG,GAAG;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,eAAe,CAGrB,aAAa,EACb,iCAAiC,EACjC,2BAA2B,CAC3B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB;IACxC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAyB,EACzB,QAA4C;IAE5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QACzC,iBAAiB,EAAE,YAAY,EAAE,eAAe;QAChD,iBAAiB,EAAE,YAAY,EAAE,eAAe;QAChD,YAAY,EAAE,YAAY,EAAE,WAAW;QACvC,YAAY,EAAE,YAAY,EAAE,UAAU;QACtC,GAAG,QAAQ;KACX,CAAC,EAAE,CAAC;QACJ,IAAI,KAAK,EAAE,CAAC;YACX,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACF,CAAC;IACD,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,SAAS,0BAA0B,CAClC,OAAyB,EACzB,OAAe,EACf,QAA4C;IAE5C,OAAO,IAAI,QAAQ,CAClB,GAAG,EACH,OAAO,EACP;QACC;YACC,MAAM,EAAE,qBAAqB,CAAC,qBAAqB;YACnD,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;SACtD;KACD,EACD,qBAAqB,CAAC,qBAAqB,CAC3C,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAyB,EACzB,OAAe,EACf,QAA4C;IAE5C,OAAO,IAAI,QAAQ,CAClB,GAAG,EACH,OAAO,EACP;QACC;YACC,MAAM,EAAE,qBAAqB,CAAC,eAAe;YAC7C,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;SACtD;KACD,EACD,qBAAqB,CAAC,eAAe,CACrC,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACvC,OAAyB,EACzB,kBAAsC;IAEtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,4BAA4B,CAC5C,YAAY,EACZ,kBAAkB,CAClB,CAAC;IACF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;IACR,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC5C,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;YAC1D,QAAQ,EAAE,MAAM;YAChB,kBAAkB,EAAE,QAAQ,CAAC,eAAe;YAC5C,4BAA4B,EAAE,kBAAkB;YAChD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;SACtD,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;QAC3D,kBAAkB,EAAE,QAAQ,CAAC,eAAe;QAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB;QACzD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;KACtD,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAChC,OAAyB,EACzB,SAAiB;IAEjB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAC5C,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;gBAC1D,QAAQ,EAAE,MAAM;gBAChB,kBAAkB,EAAE,QAAQ,CAAC,eAAe;gBAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB,IAAI,SAAS;gBACtE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;aACtD,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;YAC3D,kBAAkB,EAAE,QAAQ,CAAC,eAAe;YAC5C,4BAA4B,EAAE,QAAQ,CAAC,kBAAkB,IAAI,SAAS;YACtE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;SACtD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,SAAS,2BAA2B,CACnC,OAAyB,EACzB,aAAiC;IAEjC,MAAM,aAAa,GAAG,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAE5E,IAAI,qBAAyC,CAAC;IAC9C,IAAI,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC;YACJ,qBAAqB,GAAG,4BAA4B,CAAC,aAAa,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4BAA4B,aAAa,EAAE,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IAED,IAAI,kBAAsC,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,kBAAkB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,UAAU,EAAE,CAC5D,CAAC;QACH,CAAC;IACF,CAAC;IAED,IACC,qBAAqB;QACrB,kBAAkB;QAClB,qBAAqB,KAAK,kBAAkB,EAC3C,CAAC;QACF,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,0DAA0D,kBAAkB,EAAE,CAC9E,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,IAAI,qBAAqB,CAAC;AACpD,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IAClD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,kDAAkD,EAAE,CAAC;QAC1E,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,KAAK,+BAA+B;QACjD,KAAK,CAAC,OAAO,KAAK,qDAAqD;QACvE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EACvD,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,uCAAuC,CAAC,KAAc;IAC9D,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC1C,KAAK,CAAC,OAAO;YACZ,2DAA2D,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,KAAK,CAAC;AACb,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,GAAoB,EACpB,OAAyB,EACzB,KAGC;IAED,MAAM,cAAc,GAAG,8BAA8B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,sBAAsB,GAAG,OAAO,CAAC,YAAY,EAAE,mBAAmB;QACvE,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,sBAAsB;YAC7C,OAAO,CAAC,YAAY,CAAC,0BAA0B,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,kBAAkB,GACvB,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,sBAAsB,IAAI,SAAS,CAAC;IAChE,MAAM,aAAa,GAAG,2BAA2B,CAChD,OAAO,EACP,KAAK,CAAC,aAAa,CACnB,CAAC;IACF,+BAA+B,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC7D,IAAI,kBAAkB,EAAE,CAAC;QACxB,IAAI,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,mBAAmB,EAAE,CAAC;YAC/D,MAAM,eAAe,GAAG,MAAM,+BAA+B,CAC5D,OAAO,CAAC,YAAY,CAAC,mBAAmB,CACxC,CAAC;YACF,MAAM,kBAAkB,GACvB,eAAe,EAAE,kBAAkB,KAAK,kBAAkB;gBACzD,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,YAAY;gBACtC,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,kBAAkB,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC1D,WAAW,GAAG,kBAAkB,CAAC;YAClC,CAAC;QACF,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC9C,CAAC;QACD,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,IACC,KAAK,CAAC,iBAAiB;QACvB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,mEAAmE,CACnE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,6DAA6D,CAC7D,CAAC;IACH,CAAC;IACD,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,qBAAqB,CAC3C,gBAAgB,CACf,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,IAAI,SAAS,CACd,CAAC;IACF,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;QACvD,SAAS,EAAE,kBAAkB,IAAI,cAAc,CAAC,YAAY,EAAE;QAC9D,OAAO;QACP,kBAAkB,EAAE,KAAK,CAAC,YAAY,IAAI,cAAc;QACxD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;KAChD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC;QAClE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;QAC3B,SAAS,EAAE,kBAAkB;QAC7B,OAAO;QACP,aAAa;QACb,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,eAAe;QACf,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAkB;QAC9D,YAAY,EAAE,iBAAiB;QAC/B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;QACpD,OAAO;QACP,cAAc;KACd,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,yBAAyB,KAAK,KAAK,EAAE,CAAC;QAC/C,MAAM,sCAAsC,CAAC;YAC5C,OAAO;YACP,OAAO;YACP,OAAO;YACP,eAAe;YACf,IAAI;YACJ,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAkB;YAC9D,YAAY,EAAE,iBAAiB;YAC/B,aAAa;YACb,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,sCAAsC,CAAC,OAUrD;IACA,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;IAClD,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,wCAAwC;IACxC,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC;QACvD,WAAW,EAAE,YAAY,EAAE,WAAW;QACtC,OAAO,EAAE,YAAY,EAAE,OAAO;QAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,mBAAmB,QAAQ,CAAC,UAAU,EAAE;QACvD,WAAW,EAAE,oBAAoB,EAAE;QACnC,QAAQ,EAAE;YACT,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE;YACjC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,QAAQ;YAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,aAAa,EAAE,OAAO,CAAC,YAAY;YACnC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS;YACzC,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe;YAC/C,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,iBAAiB,EAAE,YAAY,EAAE,eAAe;YAChD,iBAAiB,EAAE,YAAY,EAAE,eAAe;YAChD,QAAQ,EAAE,YAAY,EAAE,OAAO;SAC/B;KACD,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO;IACR,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,yCAAyC,CACnE,EAAE,UAAU,CAAC;IACd,6BAA6B,CAAC,YAAY,EAAE;QAC3C,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO;QACpC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK;KACnC,CAAC,CAAC;IACH,2EAA2E;IAC3E,0EAA0E;IAC1E,oEAAoE;IACpE,YAAY,CAAC,YAAY,GAAG,cAAc;QACzC,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACnD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,SAAS,GAAG,cAAc;QACtC,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,aAAa,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,uBAAuB,GAAG,cAAc;QACpD,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IACb,YAAY,CAAC,2BAA2B,GAAG,cAAc;QACxD,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,kBAAkB,CAAC;QACrD,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CACvB,UAAmC,EACnC,GAAW;IAEX,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,GAAoB,EACpB,OAAyB,EACzB,KAAoC;IAEpC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE;QACjD,GAAG,KAAK;QACR,kBAAkB,EAAE,KAAK;QACzB,yBAAyB,EAAE,KAAK;KAChC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO;QACN,GAAG,SAAS;QACZ,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,IAAI;QACJ,qBAAqB,EAAE,KAAK,CAAC,mBAAmB;QAChD,QAAQ;KACR,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAClB,GAAoB,EACpB,OAAyB,EACzB,SAA6B;IAE7B,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IACxD,CAAC;IACD,+BAA+B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,UAAU,CACxD,WAAW,CAAC,GAAG,CAAC,EAChB,SAAS,CACT,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,2BAA2B,CAC3B,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,UAA6C,CAAC;IAClD,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,OAAO,CAAC,kBAAkB,CAAC;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI;YACJ,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,qBAAqB,EAAE,KAAK,CAAC,eAAe;YAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAC/B,CAAC,CAAC;oBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;oBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;oBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;iBACnD;gBACF,CAAC,CAAC,SAAS;YACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC9C,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IACC,KAAK,YAAY,KAAK;YACtB,KAAK,CAAC,OAAO,KAAK,wDAAwD,EACzE,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IACC,KAAK,YAAY,KAAK;YACtB,CAAC,KAAK,CAAC,OAAO,KAAK,+BAA+B;gBACjD,KAAK,CAAC,OAAO;oBACZ,2DAA2D,CAAC,EAC7D,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACrD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,gCAAgC,CAChC,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,SAA2C,CAAC;IAChD,IAAI,CAAC;QACJ,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC;YACvC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,+BAA+B,CAC/B,CAAC;IACF,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,MAAM,OAAO,CAAC,oBAAoB,CAAC;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,0BAA0B,MAAM,EAAE,EAAE,SAAS,EACxD,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,cAAc,GACnB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAExE,MAAM,MAAM,GAAG,cAAc;QAC5B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;YAC7B,MAAM;YACN,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;YAC1B,mBAAmB,EAAE,wBAAwB,CAAC,GAAG,CAAC;SAClD,CAAC,CAAC;IACL,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QAClB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,UAAU;QAC3B,UAAU,EAAE,YAAY;QACxB,GAAG,OAAO,CAAC,WAAW;KACtB,CAAC,CAAC;IACH,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,KAAK,GAAG,GAAG,EAAE;QAClB,IAAI,QAAQ,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACnC,OAAO;QACR,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,QAAQ,GAAG,KAAK,CAAC;gBACjB,OAAO;YACR,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,QAAQ,GAAG,KAAK,CAAC;oBACjB,KAAK,EAAE,CAAC;gBACT,CAAC,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;QACF,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACpC,KAAK,EAAE,CAAC;QACT,CAAC;IACF,CAAC,EAAE,KAAK,CAAC,CAAC;IACV,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,MAAM,OAAO,GAAG,GAAG,EAAE;QACpB,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,aAAa,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC;AACT,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC;QACJ,OAAO,CAAC,aAAa,CACpB,eAAe,CAAC,GAAG,CAAC,EACpB,uBAAuB,CAAC,GAAG,CAAC,EAC5B,uBAAuB,CAAC,GAAG,CAAC,CAC5B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,CAAC,IAAI,CAAC,KAA+B,EAAE;YACnD,YAAY,EAAE,uBAAuB,CAAC,GAAG,CAAC;YAC1C,cAAc,EAAE,uBAAuB,CAAC,GAAG,CAAC;SAC5C,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC","sourcesContent":["import { existsSync } from \"node:fs\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport {\n\ttype HeadlessConnectionRole,\n\theadlessApprovalModes,\n\theadlessConnectionRoles,\n\theadlessNotificationTypes,\n\theadlessServerRequestTypes,\n\theadlessThinkingLevels,\n\theadlessToAgentMessageSchemasByType,\n\theadlessToAgentMessageTypes,\n\theadlessUtilityOperations,\n} from \"@evalops/contracts\";\nimport { type Static, type TSchema, Type } from \"@sinclair/typebox\";\nimport type { ApprovalMode } from \"../../agent/action-approval.js\";\nimport type { ThinkingLevel } from \"../../agent/types.js\";\nimport type { HeadlessToAgentMessage } from \"../../cli/headless-protocol.js\";\nimport { resolveExistingWorkspaceRoot } from \"../../headless/workspace-root.js\";\nimport type { RegisteredModel } from \"../../models/registry.js\";\nimport { recordMaestroSessionRuntimeTrigger } from \"../../platform/agent-runtime-client.js\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport {\n\tnormalizeApprovalMode,\n\tresolveApprovalModeForRequest,\n} from \"../approval-mode-store.js\";\nimport { getAuthScopeKey, getAuthSubject } from \"../authz.js\";\nimport type {\n\tHeadlessRuntimeConnectionSnapshot,\n\tHeadlessRuntimeHeartbeatSnapshot,\n\tHeadlessRuntimeStreamEnvelope,\n\tHeadlessSessionRuntime,\n} from \"../headless-runtime-service.js\";\nimport { loadHostedRunnerRestoreManifest } from \"../headless-runtime-service.js\";\nimport {\n\tbindHostedRunnerPlatformLease,\n\tclaimHostedRunnerLease,\n\tevaluateHostedRunnerLeaseUse,\n} from \"../hosted-runner-lease.js\";\nimport { getTraceParentHeader } from \"../request-context.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\treadRequestBody,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { createSessionManagerForRequest } from \"../session-scope.js\";\nimport { parseAndValidateJson, validatePayload } from \"../validation.js\";\n\nexport enum HostedRunnerErrorType {\n\tRuntimeNotReady = \"runtime_not_ready\",\n\tRuntimeOwnedElsewhere = \"runtime_owned_elsewhere\",\n}\n\nconst HOSTED_RUNNER_ERROR_DOMAIN = \"maestro.hosted_runner\";\n\nfunction stringLiteralUnion<const T extends readonly string[]>(values: T) {\n\treturn Type.Unsafe<T[number]>(\n\t\tType.Union(\n\t\t\tvalues.map((value) => Type.Literal(value)) as unknown as [\n\t\t\t\tTSchema,\n\t\t\t\t...TSchema[],\n\t\t\t],\n\t\t),\n\t);\n}\n\nconst HeadlessOptOutNotificationsSchema = Type.Array(\n\tstringLiteralUnion(headlessNotificationTypes),\n\t{\n\t\tuniqueItems: true,\n\t},\n);\n\nconst HeadlessCreateBaseProperties = {\n\tsessionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tworkspaceRoot: Type.Optional(Type.String()),\n\tmodel: Type.Optional(Type.String()),\n\tenableClientTools: Type.Optional(Type.Boolean()),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\tclient: Type.Optional(\n\t\tType.Union([\n\t\t\tType.Literal(\"generic\"),\n\t\t\tType.Literal(\"vscode\"),\n\t\t\tType.Literal(\"jetbrains\"),\n\t\t\tType.Literal(\"conductor\"),\n\t\t]),\n\t),\n\tthinkingLevel: Type.Optional(stringLiteralUnion(headlessThinkingLevels)),\n\tapprovalMode: Type.Optional(stringLiteralUnion(headlessApprovalModes)),\n} as const;\n\nconst HeadlessSessionCreateSchema = Type.Object(HeadlessCreateBaseProperties);\n\nconst HeadlessConnectionCreateSchema = Type.Object({\n\t...HeadlessCreateBaseProperties,\n\tconnectionId: Type.Optional(Type.String()),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessMessageTypeSchema = Type.Object(\n\t{\n\t\ttype: stringLiteralUnion(headlessToAgentMessageTypes),\n\t},\n\t{ additionalProperties: true },\n);\n\nconst HeadlessSessionSubscribeSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessSessionUnsubscribeSchema = Type.Object({\n\tsubscriptionId: Type.String(),\n});\n\nconst HeadlessSessionHeartbeatSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\nconst HeadlessSessionDisconnectSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\ntype HeadlessSessionCreateInput = Static<typeof HeadlessSessionCreateSchema>;\ntype HeadlessConnectionCreateInput = Static<\n\ttypeof HeadlessConnectionCreateSchema\n>;\ntype HeadlessSessionSubscribeInput = Static<\n\ttypeof HeadlessSessionSubscribeSchema\n>;\ntype HeadlessSessionUnsubscribeInput = Static<\n\ttypeof HeadlessSessionUnsubscribeSchema\n>;\ntype HeadlessSessionHeartbeatInput = Static<\n\ttypeof HeadlessSessionHeartbeatSchema\n>;\ntype HeadlessSessionDisconnectInput = Static<\n\ttypeof HeadlessSessionDisconnectSchema\n>;\ntype HeadlessMessageTypeInput = Static<typeof HeadlessMessageTypeSchema>;\n\nasync function parseHeadlessMessage(\n\treq: IncomingMessage,\n): Promise<HeadlessToAgentMessage> {\n\tconst raw = await readRequestBody(req);\n\tif (!raw.length) {\n\t\tthrow new ApiError(400, \"Request body required\");\n\t}\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(raw.toString());\n\t} catch {\n\t\tthrow new ApiError(400, \"Invalid JSON payload\");\n\t}\n\tconst envelope = validatePayload<HeadlessMessageTypeInput>(\n\t\tparsed,\n\t\tHeadlessMessageTypeSchema,\n\t\t\"body\",\n\t);\n\treturn validatePayload<HeadlessToAgentMessage>(\n\t\tparsed,\n\t\theadlessToAgentMessageSchemasByType[envelope.type],\n\t\t\"body\",\n\t);\n}\n\nfunction getHeadlessRole(\n\treq: IncomingMessage,\n\texplicitRole?: HeadlessConnectionRole,\n): HeadlessConnectionRole {\n\tif (explicitRole) {\n\t\treturn explicitRole;\n\t}\n\tconst headerRole = getRequestHeader(\n\t\treq,\n\t\t\"x-composer-headless-role\",\n\t\t\"x-maestro-headless-role\",\n\t);\n\treturn headerRole === \"viewer\" ? \"viewer\" : \"controller\";\n}\n\nfunction getViewerDisallowedServerRequest(\n\tserverRequests?: Static<\n\t\ttypeof HeadlessCreateBaseProperties.capabilities\n\t>[\"serverRequests\"],\n): \"mcp_elicitation\" | \"user_input\" | undefined {\n\tif (serverRequests?.includes(\"mcp_elicitation\")) {\n\t\treturn \"mcp_elicitation\";\n\t}\n\tif (serverRequests?.includes(\"user_input\")) {\n\t\treturn \"user_input\";\n\t}\n\treturn undefined;\n}\n\nfunction writeSse(res: ServerResponse, payload: unknown): boolean {\n\treturn res.write(`data: ${JSON.stringify(payload)}\\n\\n`);\n}\n\nfunction getHeadlessSubscriberId(req: IncomingMessage): string | undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-subscriber-id\",\n\t\t\t\"x-maestro-headless-subscriber-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction getHeadlessConnectionId(req: IncomingMessage): string | undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-connection-id\",\n\t\t\t\"x-maestro-headless-connection-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction parseOptOutNotifications(\n\treq: IncomingMessage,\n): HeadlessSessionSubscribeInput[\"optOutNotifications\"] {\n\tconst url = new URL(\n\t\treq.url || \"/\",\n\t\t`http://${req.headers.host || \"localhost\"}`,\n\t);\n\tconst raw = url.searchParams.get(\"optOutNotifications\");\n\tif (!raw) {\n\t\treturn undefined;\n\t}\n\tconst notifications = raw\n\t\t.split(\",\")\n\t\t.map((value) => value.trim())\n\t\t.filter(Boolean);\n\tif (notifications.length === 0) {\n\t\treturn undefined;\n\t}\n\treturn validatePayload<\n\t\tNonNullable<HeadlessSessionSubscribeInput[\"optOutNotifications\"]>\n\t>(\n\t\tnotifications,\n\t\tHeadlessOptOutNotificationsSchema,\n\t\t\"query.optOutNotifications\",\n\t);\n}\n\nfunction getScopeKey(req: IncomingMessage): string {\n\treturn getAuthScopeKey(req);\n}\n\nfunction hostedRunnerErrorMetadata(\n\tcontext: WebServerContext,\n\tmetadata: Record<string, string | undefined>,\n): Record<string, string> {\n\tconst hostedRunner = context.hostedRunner;\n\tconst detailMetadata: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries({\n\t\trunner_session_id: hostedRunner?.runnerSessionId,\n\t\towner_instance_id: hostedRunner?.ownerInstanceId,\n\t\tworkspace_id: hostedRunner?.workspaceId,\n\t\tagent_run_id: hostedRunner?.agentRunId,\n\t\t...metadata,\n\t})) {\n\t\tif (value) {\n\t\t\tdetailMetadata[key] = value;\n\t\t}\n\t}\n\treturn detailMetadata;\n}\n\nfunction hostedRunnerOwnershipError(\n\tcontext: WebServerContext,\n\tmessage: string,\n\tmetadata: Record<string, string | undefined>,\n): ApiError {\n\treturn new ApiError(\n\t\t409,\n\t\tmessage,\n\t\t[\n\t\t\t{\n\t\t\t\treason: HostedRunnerErrorType.RuntimeOwnedElsewhere,\n\t\t\t\tdomain: HOSTED_RUNNER_ERROR_DOMAIN,\n\t\t\t\tmetadata: hostedRunnerErrorMetadata(context, metadata),\n\t\t\t},\n\t\t],\n\t\tHostedRunnerErrorType.RuntimeOwnedElsewhere,\n\t);\n}\n\nfunction hostedRunnerNotReadyError(\n\tcontext: WebServerContext,\n\tmessage: string,\n\tmetadata: Record<string, string | undefined>,\n): ApiError {\n\treturn new ApiError(\n\t\t503,\n\t\tmessage,\n\t\t[\n\t\t\t{\n\t\t\t\treason: HostedRunnerErrorType.RuntimeNotReady,\n\t\t\t\tdomain: HOSTED_RUNNER_ERROR_DOMAIN,\n\t\t\t\tmetadata: hostedRunnerErrorMetadata(context, metadata),\n\t\t\t},\n\t\t],\n\t\tHostedRunnerErrorType.RuntimeNotReady,\n\t);\n}\n\nfunction ensureHostedRunnerCanUseSession(\n\tcontext: WebServerContext,\n\trequestedSessionId: string | undefined,\n): void {\n\tconst hostedRunner = context.hostedRunner;\n\tif (!hostedRunner) {\n\t\treturn;\n\t}\n\tconst decision = evaluateHostedRunnerLeaseUse(\n\t\thostedRunner,\n\t\trequestedSessionId,\n\t);\n\tif (decision.ok) {\n\t\treturn;\n\t}\n\tif (decision.reason === \"runtime_draining\") {\n\t\tthrow hostedRunnerNotReadyError(context, decision.message, {\n\t\t\tdraining: \"true\",\n\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\trequested_maestro_session_id: requestedSessionId,\n\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t});\n\t}\n\tthrow hostedRunnerOwnershipError(context, decision.message, {\n\t\tmaestro_session_id: decision.activeSessionId,\n\t\trequested_maestro_session_id: decision.requestedSessionId,\n\t\tlease_generation: String(decision.snapshot.generation),\n\t});\n}\n\nfunction claimHostedRunnerSession(\n\tcontext: WebServerContext,\n\tsessionId: string,\n): void {\n\tconst hostedRunner = context.hostedRunner;\n\tif (!hostedRunner) {\n\t\treturn;\n\t}\n\tconst decision = claimHostedRunnerLease(hostedRunner, sessionId);\n\tif (!decision.ok) {\n\t\tif (decision.reason === \"runtime_draining\") {\n\t\t\tthrow hostedRunnerNotReadyError(context, decision.message, {\n\t\t\t\tdraining: \"true\",\n\t\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\t\trequested_maestro_session_id: decision.requestedSessionId ?? sessionId,\n\t\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t\t});\n\t\t}\n\t\tthrow hostedRunnerOwnershipError(context, decision.message, {\n\t\t\tmaestro_session_id: decision.activeSessionId,\n\t\t\trequested_maestro_session_id: decision.requestedSessionId ?? sessionId,\n\t\t\tlease_generation: String(decision.snapshot.generation),\n\t\t});\n\t}\n}\n\nfunction resolveRuntimeWorkspaceRoot(\n\tcontext: WebServerContext,\n\tworkspaceRoot: string | undefined,\n): string | undefined {\n\tconst requestedRoot = workspaceRoot?.trim() || undefined;\n\tconst hostedRoot = context.hostedRunner?.workspaceRoot?.trim() || undefined;\n\n\tlet resolvedRequestedRoot: string | undefined;\n\tif (requestedRoot) {\n\t\ttry {\n\t\t\tresolvedRequestedRoot = resolveExistingWorkspaceRoot(requestedRoot);\n\t\t} catch {\n\t\t\tthrow new ApiError(400, `workspaceRoot not found: ${requestedRoot}`);\n\t\t}\n\t}\n\n\tlet resolvedHostedRoot: string | undefined;\n\tif (hostedRoot) {\n\t\ttry {\n\t\t\tresolvedHostedRoot = resolveExistingWorkspaceRoot(hostedRoot);\n\t\t} catch {\n\t\t\tthrow new ApiError(\n\t\t\t\t500,\n\t\t\t\t`Hosted runner workspace root is unavailable: ${hostedRoot}`,\n\t\t\t);\n\t\t}\n\t}\n\n\tif (\n\t\tresolvedRequestedRoot &&\n\t\tresolvedHostedRoot &&\n\t\tresolvedRequestedRoot !== resolvedHostedRoot\n\t) {\n\t\tthrow new ApiError(\n\t\t\t409,\n\t\t\t`workspaceRoot must match hosted runner workspace root: ${resolvedHostedRoot}`,\n\t\t);\n\t}\n\n\treturn resolvedHostedRoot ?? resolvedRequestedRoot;\n}\n\nfunction rethrowHeadlessMessageError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Viewer headless connections cannot send messages\") {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message === \"Headless subscriber not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message === \"Headless connection not found\" ||\n\t\terror.message === \"Headless connection does not have controller access\" ||\n\t\terror.message.includes(\"is owned by another connection\")\n\t) {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message.includes(\"Controller lease\")) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow new ApiError(403, error.message);\n}\n\nfunction rethrowHeadlessConnectionLifecycleError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Headless connection not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message.includes(\"Controller lease\") ||\n\t\terror.message ===\n\t\t\t\"Headless connection role does not match subscription role\"\n\t) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow error;\n}\n\nasync function ensureRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessSessionCreateInput & {\n\t\tregisterConnection?: boolean;\n\t\trecordAgentRuntimeTrigger?: boolean;\n\t},\n) {\n\tconst sessionManager = createSessionManagerForRequest(req, false);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst hostedRestoreSessionId = context.hostedRunner?.restoreManifestPath\n\t\t? (context.hostedRunner.activeMaestroSessionId ??\n\t\t\tcontext.hostedRunner.configuredMaestroSessionId)\n\t\t: undefined;\n\tconst requestedSessionId =\n\t\tinput.sessionId?.trim() || hostedRestoreSessionId || undefined;\n\tconst workspaceRoot = resolveRuntimeWorkspaceRoot(\n\t\tcontext,\n\t\tinput.workspaceRoot,\n\t);\n\tensureHostedRunnerCanUseSession(context, requestedSessionId);\n\tif (requestedSessionId) {\n\t\tlet sessionFile = sessionManager.getSessionFileById(requestedSessionId);\n\t\tif (!sessionFile && context.hostedRunner?.restoreManifestPath) {\n\t\t\tconst restoreManifest = await loadHostedRunnerRestoreManifest(\n\t\t\t\tcontext.hostedRunner.restoreManifestPath,\n\t\t\t);\n\t\t\tconst restoreSessionFile =\n\t\t\t\trestoreManifest?.maestro_session_id === requestedSessionId\n\t\t\t\t\t? restoreManifest.runtime.session_file\n\t\t\t\t\t: undefined;\n\t\t\tif (restoreSessionFile && existsSync(restoreSessionFile)) {\n\t\t\t\tsessionFile = restoreSessionFile;\n\t\t\t}\n\t\t}\n\t\tif (!sessionFile) {\n\t\t\tthrow new ApiError(404, \"Session not found\");\n\t\t}\n\t\tsessionManager.setSessionFile(sessionFile);\n\t}\n\n\tconst registeredModel = await context.getRegisteredModel(input.model);\n\tconst subject = getAuthSubject(req);\n\tif (\n\t\tinput.enableClientTools &&\n\t\t!input.capabilities?.serverRequests?.includes(\"client_tool\")\n\t) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"client_tool capability is required when enableClientTools is true\",\n\t\t);\n\t}\n\tif (role === \"viewer\" && input.enableClientTools) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"viewer headless connections cannot enable client-side tools\",\n\t\t);\n\t}\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\tconst headerApproval = normalizeApprovalMode(\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-approval-mode\",\n\t\t\t\"x-maestro-approval-mode\",\n\t\t) ?? undefined,\n\t);\n\tconst effectiveApproval = resolveApprovalModeForRequest({\n\t\tsessionId: requestedSessionId ?? sessionManager.getSessionId(),\n\t\tsubject,\n\t\theaderApprovalMode: input.approvalMode ?? headerApproval,\n\t\tdefaultApprovalMode: context.defaultApprovalMode,\n\t});\n\n\tconst runtime = await context.headlessRuntimeService.ensureRuntime({\n\t\tscope_key: getScopeKey(req),\n\t\tsessionId: requestedSessionId,\n\t\tsubject,\n\t\tworkspaceRoot,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\tregisteredModel,\n\t\tthinkingLevel: (input.thinkingLevel ?? \"off\") as ThinkingLevel,\n\t\tapprovalMode: effectiveApproval,\n\t\tenableClientTools: input.enableClientTools,\n\t\tclient: input.client,\n\t\tregisterConnection: input.registerConnection ?? true,\n\t\tcontext,\n\t\tsessionManager,\n\t});\n\tif (context.hostedRunner) {\n\t\tclaimHostedRunnerSession(context, runtime.getSnapshot().session_id);\n\t}\n\tif (input.recordAgentRuntimeTrigger !== false) {\n\t\tawait recordPlatformAgentRuntimeSessionStart({\n\t\t\tcontext,\n\t\t\truntime,\n\t\t\tsubject,\n\t\t\tregisteredModel,\n\t\t\trole,\n\t\t\tthinkingLevel: (input.thinkingLevel ?? \"off\") as ThinkingLevel,\n\t\t\tapprovalMode: effectiveApproval,\n\t\t\tworkspaceRoot,\n\t\t\tinput,\n\t\t});\n\t}\n\treturn runtime;\n}\n\nasync function recordPlatformAgentRuntimeSessionStart(options: {\n\tcontext: WebServerContext;\n\truntime: HeadlessSessionRuntime;\n\tsubject?: string;\n\tregisteredModel: RegisteredModel;\n\trole: HeadlessConnectionRole;\n\tthinkingLevel: ThinkingLevel;\n\tapprovalMode: ApprovalMode;\n\tworkspaceRoot: string | undefined;\n\tinput: HeadlessSessionCreateInput;\n}): Promise<void> {\n\tconst snapshot = options.runtime.getSnapshot();\n\tconst hostedRunner = options.context.hostedRunner;\n\t// This is a projection, not ownership transfer. The local headless runtime\n\t// remains authoritative; Platform receives session-start metadata and trace\n\t// context so AgentRuntime, A2A, deploy smoke tests, and support endpoints can\n\t// all join on the same Maestro session.\n\tconst result = await recordMaestroSessionRuntimeTrigger({\n\t\tworkspaceId: hostedRunner?.workspaceId,\n\t\tagentId: hostedRunner?.agentId,\n\t\tsessionId: snapshot.session_id,\n\t\tactorId: options.subject,\n\t\tcorrelationId: `maestro-session:${snapshot.session_id}`,\n\t\ttraceparent: getTraceParentHeader(),\n\t\tmetadata: {\n\t\t\tmodel: options.registeredModel.id,\n\t\t\tprovider: options.registeredModel.provider,\n\t\t\trole: options.role,\n\t\t\tthinking_level: options.thinkingLevel,\n\t\t\tapproval_mode: options.approvalMode,\n\t\t\tclient: options.input.client ?? \"generic\",\n\t\t\tprotocol_version: options.input.protocolVersion,\n\t\t\tworkspace_root: options.workspaceRoot,\n\t\t\trunner_session_id: hostedRunner?.runnerSessionId,\n\t\t\towner_instance_id: hostedRunner?.ownerInstanceId,\n\t\t\tagent_id: hostedRunner?.agentId,\n\t\t},\n\t});\n\tif (!hostedRunner || !result) {\n\t\treturn;\n\t}\n\tconst a2aCorrelation = result.events.find(\n\t\t(event) => event.type === \"maestro.platform_runtime.a2a_correlated\",\n\t)?.attributes;\n\tbindHostedRunnerPlatformLease(hostedRunner, {\n\t\tagentRunId: result.run.id,\n\t\tagentId: result.run.linkage?.agentId,\n\t\tleaseToken: result.run.lease?.token,\n\t});\n\t// Store only support-grade handles on the hosted runner. The full run/task\n\t// state stays in Platform; health and identity endpoints expose these ids\n\t// for operators without making Platform a session-state dependency.\n\thostedRunner.a2aMessageId = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"a2a_message_id\")\n\t\t: undefined;\n\thostedRunner.a2aTaskId = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"a2a_task_id\")\n\t\t: undefined;\n\thostedRunner.agentRuntimeWorkerQueue = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"worker_queue\")\n\t\t: undefined;\n\thostedRunner.agentRuntimeCorrelationPath = a2aCorrelation\n\t\t? stringAttribute(a2aCorrelation, \"correlation_path\")\n\t\t: undefined;\n}\n\nfunction stringAttribute(\n\tattributes: Record<string, unknown>,\n\tkey: string,\n): string | undefined {\n\tconst value = attributes[key];\n\treturn typeof value === \"string\" && value.trim().length > 0\n\t\t? value\n\t\t: undefined;\n}\n\nasync function ensureConnection(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessConnectionCreateInput,\n): Promise<HeadlessRuntimeConnectionSnapshot> {\n\tconst runtime = await ensureRuntime(req, context, {\n\t\t...input,\n\t\tregisterConnection: false,\n\t\trecordAgentRuntimeTrigger: false,\n\t});\n\tconst role = getHeadlessRole(req, input.role);\n\tconst heartbeat = runtime.registerConnection({\n\t\tconnectionId: input.connectionId,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\ttakeControl: input.takeControl,\n\t});\n\tconst snapshot = runtime.getSnapshot();\n\treturn {\n\t\t...heartbeat,\n\t\tsession_id: snapshot.session_id,\n\t\trole,\n\t\topt_out_notifications: input.optOutNotifications,\n\t\tsnapshot,\n\t};\n}\n\nfunction getRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tsessionId: string | undefined,\n) {\n\tif (!sessionId) {\n\t\tthrow new ApiError(400, \"Missing headless session id\");\n\t}\n\tensureHostedRunnerCanUseSession(context, sessionId);\n\tconst runtime = context.headlessRuntimeService.getRuntime(\n\t\tgetScopeKey(req),\n\t\tsessionId,\n\t);\n\tif (!runtime) {\n\t\tthrow new ApiError(404, \"Headless session not found\");\n\t}\n\tif (context.hostedRunner) {\n\t\tclaimHostedRunnerSession(context, runtime.getSnapshot().session_id);\n\t}\n\treturn runtime;\n}\n\nexport async function handleHeadlessSessionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessSessionCreateInput>(\n\t\treq,\n\t\tHeadlessSessionCreateSchema,\n\t);\n\tconst runtime = await ensureRuntime(req, context, input);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessConnectionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessConnectionCreateInput>(\n\t\treq,\n\t\tHeadlessConnectionCreateSchema,\n\t);\n\tlet connection: HeadlessRuntimeConnectionSnapshot;\n\ttry {\n\t\tconnection = await ensureConnection(req, context, input);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, connection, context.corsHeaders, req);\n}\n\nexport function handleHeadlessSessionState(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionSubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionSubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionSubscribeSchema,\n\t);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\truntime.createSubscription({\n\t\t\t\tconnectionId: input.connectionId,\n\t\t\t\trole,\n\t\t\t\texplicit: true,\n\t\t\t\ttakeControl: input.takeControl,\n\t\t\t\tclientProtocolVersion: input.protocolVersion,\n\t\t\t\tclientInfo: input.clientInfo,\n\t\t\t\tcapabilities: input.capabilities\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t\t\t}\n\t\t\t\t\t: undefined,\n\t\t\t\toptOutNotifications: input.optOutNotifications,\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\terror.message === \"Controller lease is already held by another connection\"\n\t\t) {\n\t\t\tthrow new ApiError(409, error.message);\n\t\t}\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\t(error.message === \"Headless connection not found\" ||\n\t\t\t\terror.message ===\n\t\t\t\t\t\"Headless connection role does not match subscription role\")\n\t\t) {\n\t\t\tthrow new ApiError(400, error.message);\n\t\t}\n\t\tthrow error;\n\t}\n}\n\nexport async function handleHeadlessSessionUnsubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionUnsubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionUnsubscribeSchema,\n\t);\n\tif (!(await runtime.unsubscribe(input.subscriptionId))) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionHeartbeat(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionHeartbeatInput>(\n\t\treq,\n\t\tHeadlessSessionHeartbeatSchema,\n\t);\n\tlet heartbeat: HeadlessRuntimeHeartbeatSnapshot;\n\ttry {\n\t\theartbeat = runtime.heartbeatConnection({\n\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, heartbeat, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionDisconnect(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionDisconnectInput>(\n\t\treq,\n\t\tHeadlessSessionDisconnectSchema,\n\t);\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\tawait runtime.disconnectConnection({\n\t\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n}\n\nexport function handleHeadlessSessionEvents(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst url = new URL(\n\t\treq.url || `/api/headless/sessions/${params?.id}/events`,\n\t\t`http://${req.headers.host || \"localhost\"}`,\n\t);\n\tconst cursorParam = url.searchParams.get(\"cursor\");\n\tconst cursor = cursorParam ? Number.parseInt(cursorParam, 10) : null;\n\tconst subscriptionId =\n\t\turl.searchParams.get(\"subscriptionId\") || getHeadlessSubscriberId(req);\n\n\tconst stream = subscriptionId\n\t\t? runtime.attachSubscription(subscriptionId)\n\t\t: runtime.createImplicitStream({\n\t\t\t\tcursor,\n\t\t\t\trole: getHeadlessRole(req),\n\t\t\t\toptOutNotifications: parseOptOutNotifications(req),\n\t\t\t});\n\tif (!stream) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\n\tres.writeHead(200, {\n\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\"Cache-Control\": \"no-cache\",\n\t\tConnection: \"keep-alive\",\n\t\t...context.corsHeaders,\n\t});\n\tlet flushing = false;\n\n\tconst flush = () => {\n\t\tif (flushing || res.writableEnded) {\n\t\t\treturn;\n\t\t}\n\t\tflushing = true;\n\t\twhile (!res.writableEnded) {\n\t\t\tconst next = stream.next();\n\t\t\tif (!next) {\n\t\t\t\tflushing = false;\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst wrote = writeSse(res, next);\n\t\t\tif (!wrote) {\n\t\t\t\tres.once(\"drain\", () => {\n\t\t\t\t\tflushing = false;\n\t\t\t\t\tflush();\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t\tflushing = false;\n\t};\n\tconst stopListening = stream.onAvailable(flush);\n\tconst heartbeat = setInterval(() => {\n\t\tif (!res.writableEnded) {\n\t\t\tstream.enqueue(runtime.heartbeat());\n\t\t\tflush();\n\t\t}\n\t}, 15000);\n\theartbeat.unref();\n\n\tconst cleanup = () => {\n\t\tclearInterval(heartbeat);\n\t\tstopListening();\n\t\tstream.close();\n\t};\n\treq.on(\"close\", cleanup);\n\tres.on(\"close\", cleanup);\n\tflush();\n}\n\nexport async function handleHeadlessSessionMessage(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseHeadlessMessage(req);\n\ttry {\n\t\truntime.assertCanSend(\n\t\t\tgetHeadlessRole(req),\n\t\t\tgetHeadlessSubscriberId(req),\n\t\t\tgetHeadlessConnectionId(req),\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\ttry {\n\t\tawait runtime.send(input as HeadlessToAgentMessage, {\n\t\t\tconnectionId: getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n"]}

package/dist/server/handlers/session-artifacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-artifacts.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/session-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA2TjE,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiC5B;AAED,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAsF5B;AAED,wBAAsB,yBAAyB,CAC9C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAuE5B;AAED,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA4S5B;AAED,wBAAsB,4BAA4B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiF5B;AAED,wBAAsB,yBAAyB,CAC9C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA6C5B"}
+{"version":3,"file":"session-artifacts.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/session-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA2UjE,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiC5B;AAED,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAsF5B;AAED,wBAAsB,yBAAyB,CAC9C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAuE5B;AAED,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA4S5B;AAED,wBAAsB,4BAA4B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiF5B;AAED,wBAAsB,yBAAyB,CAC9C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA6C5B"}

package/dist/server/handlers/session-artifacts.js

@@ -129,6 +129,21 @@ function injectArtifactsSnapshotRuntime(htmlContent, artifacts) {
 function asString(value) {
     return typeof value === "string" ? value : undefined;
 }
+function hasControlCharacter(value) {
+    for (let index = 0; index < value.length; index += 1) {
+        const code = value.charCodeAt(index);
+        if (code < 32 || code === 127)
+            return true;
+    }
+    return false;
+}
+function isValidArtifactFilename(filename) {
+    return (filename.length > 0 &&
+        !filename.includes("..") &&
+        !filename.includes("/") &&
+        !filename.includes("\\") &&
+        !hasControlCharacter(filename));
+}
 function reconstructArtifactsFromMessages(messages) {
     const byFilename = new Map();
     for (const msg of messages) {
@@ -150,6 +165,8 @@ function reconstructArtifactsFromMessages(messages) {
             const filename = asString(args.filename)?.trim();
             if (!command || !filename)
                 continue;
+            if (!isValidArtifactFilename(filename))
+                continue;
             if (command === "get" || command === "logs")
                 continue;
             if (command === "create") {
@@ -172,6 +189,8 @@ function reconstructArtifactsFromMessages(messages) {
                 const newStr = asString(args.new_str);
                 if (oldStr === undefined || newStr === undefined)
                     continue;
+                if (oldStr.length === 0)
+                    continue;
                 if (!current.includes(oldStr))
                     continue;
                 byFilename.set(filename, current.replace(oldStr, newStr));
@@ -194,9 +213,7 @@ async function loadComposerMessages(req, sessionId) {
 }
 function validateFilename(filename) {
     // Keep this strict: no path traversal, no folder hierarchies.
-    if (filename.includes("..") ||
-        filename.includes("/") ||
-        filename.includes("\\")) {
+    if (!isValidArtifactFilename(filename.trim())) {
         throw new ApiError(400, "Invalid filename");
     }
 }