@evalops/maestro 0.10.22 → 0.10.24

package/dist/app-server/protocol-modes-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-modes-api.js","sourceRoot":"","sources":["../../src/app-server/protocol-modes-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAMN,6BAA6B,EAC7B,+BAA+B,EAC/B,6BAA6B,GAC7B,MAAM,oBAAoB,CAAC;AAI5B,MAAM,YAAY,GAAmC,UAAU,CAAC;AAEhE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAA+B;IACpE,eAAe;IACf,mBAAmB;IACnB,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,+BAA+B;IAC/B,qBAAqB;IACrB,cAAc;IACd,oBAAoB;IACpB,wBAAwB;IACxB,cAAc;IACd,oBAAoB;IACpB,WAAW;IACX,SAAS;IACT,UAAU;IACV,wBAAwB;IACxB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;CACf,CAAC,CAAC;AAEH,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAC5D,YACU,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IAClD,CAAC;CACD;AAoBD,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACtE,CAAC;IACD,IACC,+BAA+B,CAAC,QAAQ,CACvC,KAAuC,CACvC,EACA,CAAC;QACF,OAAO,KAAuC,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC;IACf,CAAC;IACD,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,SAAS,CAAC,IAAoC;IACtD,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,QAAQ;YACZ,OAAO,QAAQ,CAAC;QACjB,KAAK,UAAU;YACd,OAAO,UAAU,CAAC;QACnB,KAAK,UAAU;YACd,OAAO,UAAU,CAAC;IACpB,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAC7B,IAAoC,EACpC,MAAoC;IAEpC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CACpB,IAAoC;IAEpC,MAAM,cAAc,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACtE,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CACnC,CAAC;IACF,MAAM,cAAc,GAAG,6BAA6B,CAAC,MAAM,CAC1D,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAChD,CAAC;IACF,OAAO;QACN,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;QACtB,QAAQ,EAAE,IAAI,KAAK,QAAQ;QAC3B,QAAQ,EAAE,IAAI,KAAK,UAAU;QAC7B,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC;QACnC,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC;QACnC,mBAAmB,EAClB,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE;KAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CAClD,UAAgD,EAAE;IAElD,IAAI,UAAU,GACb,OAAO,CAAC,WAAW,KAAK,SAAS;QAChC,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO;QACN,SAAS,CAAC,MAAM;YACf,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO;gBACN,UAAU;gBACV,WAAW,EAAE,YAAY;gBACzB,KAAK,EAAE,+BAA+B,CAAC,GAAG,CAAC,YAAY,CAAC;aACxD,CAAC;QACH,CAAC;QAED,OAAO,CAAC,MAAM;YACb,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAC9C,UAAU,GAAG,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO;gBACN,UAAU;gBACV,IAAI,EAAE,YAAY,CAAC,UAAU,CAAC;aAC9B,CAAC;QACH,CAAC;QAED,WAAW,CAAC,MAAM;YACjB,IAAI,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC1B,CAAC;YACD,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,GAAG,MAAM,sCAAsC,UAAU,EAAE;aACnE,CAAC;QACH,CAAC;QAED,UAAU;YACT,OAAO,UAAU,CAAC;QACnB,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["import {\n\ttype MaestroAppServerClientMethod,\n\ttype MaestroAppServerProtocolMode,\n\ttype MaestroAppServerProtocolModeId,\n\ttype MaestroAppServerProtocolModeListResult,\n\ttype MaestroAppServerProtocolModeSetResult,\n\tmaestroAppServerClientMethods,\n\tmaestroAppServerProtocolModeIds,\n\tmaestroAppServerServerMethods,\n} from \"@evalops/contracts\";\n\ntype UnknownRecord = Record<string, unknown>;\n\nconst DEFAULT_MODE: MaestroAppServerProtocolModeId = \"standard\";\n\nconst REVIEW_BLOCKED_METHODS = new Set<MaestroAppServerClientMethod>([\n\t\"network/fetch\",\n\t\"sandbox/proof/run\",\n\t\"externalAgent/import\",\n\t\"pluginBundle/install\",\n\t\"pluginBundle/remove\",\n\t\"remoteControl/lease/heartbeat\",\n\t\"remoteControl/drain\",\n\t\"command/exec\",\n\t\"command/exec/write\",\n\t\"command/exec/terminate\",\n\t\"fs/writeFile\",\n\t\"fs/createDirectory\",\n\t\"fs/remove\",\n\t\"fs/copy\",\n\t\"fs/watch\",\n\t\"thread/metadata/update\",\n\t\"thread/name/set\",\n\t\"thread/goal/set\",\n\t\"thread/goal/clear\",\n\t\"thread/start\",\n\t\"thread/fork\",\n\t\"thread/archive\",\n\t\"thread/unarchive\",\n\t\"thread/delete\",\n]);\n\nexport class MaestroAppServerProtocolModesError extends Error {\n\tconstructor(\n\t\treadonly code: number,\n\t\tmessage: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"MaestroAppServerProtocolModesError\";\n\t}\n}\n\nexport interface MaestroAppServerProtocolModeDecision {\n\tallowed: boolean;\n\treason?: string;\n}\n\nexport interface MaestroAppServerProtocolModes {\n\tlistModes(params?: UnknownRecord): MaestroAppServerProtocolModeListResult;\n\tsetMode(params?: UnknownRecord): MaestroAppServerProtocolModeSetResult;\n\tcheckMethod(\n\t\tmethod: MaestroAppServerClientMethod,\n\t): MaestroAppServerProtocolModeDecision;\n\tactiveMode(): MaestroAppServerProtocolModeId;\n}\n\nexport interface MaestroAppServerProtocolModesOptions {\n\tinitialMode?: MaestroAppServerProtocolModeId;\n}\n\nfunction normalizeMode(value: unknown): MaestroAppServerProtocolModeId {\n\tif (value === undefined || value === null) {\n\t\tthrow new MaestroAppServerProtocolModesError(-32602, \"Missing mode\");\n\t}\n\tif (typeof value !== \"string\") {\n\t\tthrow new MaestroAppServerProtocolModesError(-32602, \"Invalid mode\");\n\t}\n\tif (\n\t\tmaestroAppServerProtocolModeIds.includes(\n\t\t\tvalue as MaestroAppServerProtocolModeId,\n\t\t)\n\t) {\n\t\treturn value as MaestroAppServerProtocolModeId;\n\t}\n\tthrow new MaestroAppServerProtocolModesError(-32602, \"Invalid mode\");\n}\n\nfunction isRecord(value: unknown): value is UnknownRecord {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction paramsRecord(params: unknown): UnknownRecord {\n\tif (params === undefined) {\n\t\treturn {};\n\t}\n\tif (isRecord(params)) {\n\t\treturn params;\n\t}\n\tthrow new MaestroAppServerProtocolModesError(-32602, \"Invalid params\");\n}\n\nfunction modeLabel(mode: MaestroAppServerProtocolModeId): string {\n\tswitch (mode) {\n\t\tcase \"review\":\n\t\t\treturn \"Review\";\n\t\tcase \"realtime\":\n\t\t\treturn \"Realtime\";\n\t\tcase \"standard\":\n\t\t\treturn \"Standard\";\n\t}\n}\n\nfunction isMethodAllowedInMode(\n\tmode: MaestroAppServerProtocolModeId,\n\tmethod: MaestroAppServerClientMethod,\n): boolean {\n\tif (mode !== \"review\") {\n\t\treturn true;\n\t}\n\treturn !REVIEW_BLOCKED_METHODS.has(method);\n}\n\nfunction describeMode(\n\tmode: MaestroAppServerProtocolModeId,\n): MaestroAppServerProtocolMode {\n\tconst allowedMethods = maestroAppServerClientMethods.filter((method) =>\n\t\tisMethodAllowedInMode(mode, method),\n\t);\n\tconst blockedMethods = maestroAppServerClientMethods.filter(\n\t\t(method) => !isMethodAllowedInMode(mode, method),\n\t);\n\treturn {\n\t\tid: mode,\n\t\tlabel: modeLabel(mode),\n\t\treadOnly: mode === \"review\",\n\t\trealtime: mode === \"realtime\",\n\t\tallowedMethods: [...allowedMethods],\n\t\tblockedMethods: [...blockedMethods],\n\t\tserverNotifications:\n\t\t\tmode === \"realtime\" ? [...maestroAppServerServerMethods] : [],\n\t};\n}\n\nexport function createMaestroAppServerProtocolModes(\n\toptions: MaestroAppServerProtocolModesOptions = {},\n): MaestroAppServerProtocolModes {\n\tlet activeMode =\n\t\toptions.initialMode === undefined\n\t\t\t? DEFAULT_MODE\n\t\t\t: normalizeMode(options.initialMode);\n\treturn {\n\t\tlistModes(params) {\n\t\t\tparamsRecord(params);\n\t\t\treturn {\n\t\t\t\tactiveMode,\n\t\t\t\tdefaultMode: DEFAULT_MODE,\n\t\t\t\tmodes: maestroAppServerProtocolModeIds.map(describeMode),\n\t\t\t};\n\t\t},\n\n\t\tsetMode(params) {\n\t\t\tconst normalizedParams = paramsRecord(params);\n\t\t\tactiveMode = normalizeMode(normalizedParams.mode);\n\t\t\treturn {\n\t\t\t\tactiveMode,\n\t\t\t\tmode: describeMode(activeMode),\n\t\t\t};\n\t\t},\n\n\t\tcheckMethod(method) {\n\t\t\tif (isMethodAllowedInMode(activeMode, method)) {\n\t\t\t\treturn { allowed: true };\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tallowed: false,\n\t\t\t\treason: `${method} is blocked while protocol mode is ${activeMode}`,\n\t\t\t};\n\t\t},\n\n\t\tactiveMode() {\n\t\t\treturn activeMode;\n\t\t},\n\t};\n}\n"]}

package/dist/app-server/sandbox-proof-api.d.ts

@@ -0,0 +1,21 @@
+import type { MaestroAppServerSandboxProbeResult, MaestroAppServerSandboxProofResult, MaestroAppServerSandboxType } from "@evalops/contracts";
+import { type CreateSandboxOptions, type Sandbox } from "../sandbox/index.js";
+type UnknownRecord = Record<string, unknown>;
+export declare class MaestroAppServerSandboxProofError extends Error {
+    readonly code: number;
+    constructor(code: number, message: string);
+}
+export interface MaestroAppServerSandboxProof {
+    probe(): MaestroAppServerSandboxProbeResult;
+    runProof(params?: UnknownRecord): Promise<MaestroAppServerSandboxProofResult>;
+}
+export interface MaestroAppServerSandboxProofOptions {
+    cwd?: string;
+    isNativeSandboxAvailable?: () => boolean;
+    getNativeSandboxType?: () => MaestroAppServerSandboxType;
+    createSandbox?: (options: CreateSandboxOptions) => Promise<Sandbox | undefined>;
+}
+export declare function normalizeSandboxProofParams(value: unknown): UnknownRecord;
+export declare function createMaestroAppServerSandboxProof(options?: MaestroAppServerSandboxProofOptions): MaestroAppServerSandboxProof;
+export {};
+//# sourceMappingURL=sandbox-proof-api.d.ts.map

package/dist/app-server/sandbox-proof-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-proof-api.d.ts","sourceRoot":"","sources":["../../src/app-server/sandbox-proof-api.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACX,kCAAkC,EAElC,kCAAkC,EAClC,2BAA2B,EAC3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,OAAO,EAIZ,MAAM,qBAAqB,CAAC;AAE7B,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE7C,qBAAa,iCAAkC,SAAQ,KAAK;IAE1D,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKhB;AAED,MAAM,WAAW,4BAA4B;IAC5C,KAAK,IAAI,kCAAkC,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAC9E;AAED,MAAM,WAAW,mCAAmC;IACnD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC;IACzC,oBAAoB,CAAC,EAAE,MAAM,2BAA2B,CAAC;IACzD,aAAa,CAAC,EAAE,CACf,OAAO,EAAE,oBAAoB,KACzB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;CAClC;AAYD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAQzE;AAcD,wBAAgB,kCAAkC,CACjD,OAAO,GAAE,mCAAwC,GAC/C,4BAA4B,CA4I9B"}

package/dist/app-server/sandbox-proof-api.js

@@ -0,0 +1,127 @@
+import { existsSync, mkdtempSync, rmSync } from "node:fs";
+import { platform as osPlatform, tmpdir } from "node:os";
+import { join } from "node:path";
+import { createSandbox, getNativeSandboxType, isNativeSandboxAvailable, } from "../sandbox/index.js";
+export class MaestroAppServerSandboxProofError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "MaestroAppServerSandboxProofError";
+    }
+}
+function parseProofMode(value) {
+    if (value === undefined || value === null) {
+        return "workspace-write";
+    }
+    if (value === "read-only" || value === "workspace-write") {
+        return value;
+    }
+    throw new MaestroAppServerSandboxProofError(-32602, "Invalid sandbox mode");
+}
+export function normalizeSandboxProofParams(value) {
+    if (value === undefined || value === null) {
+        return {};
+    }
+    if (typeof value !== "object" || Array.isArray(value)) {
+        throw new MaestroAppServerSandboxProofError(-32602, "Invalid params");
+    }
+    return value;
+}
+function shellQuote(value) {
+    return `'${value.replaceAll("'", "'\\''")}'`;
+}
+function checkDetail(name, passed, detail) {
+    return { name, passed, detail };
+}
+export function createMaestroAppServerSandboxProof(options = {}) {
+    const available = options.isNativeSandboxAvailable ?? isNativeSandboxAvailable;
+    const sandboxType = options.getNativeSandboxType ?? getNativeSandboxType;
+    const sandboxFactory = options.createSandbox ?? createSandbox;
+    const cwd = options.cwd ?? process.cwd();
+    return {
+        probe() {
+            const isAvailable = available();
+            return {
+                available: isAvailable,
+                type: sandboxType(),
+                platform: osPlatform(),
+                supportedModes: isAvailable ? ["read-only", "workspace-write"] : [],
+                proofAvailable: isAvailable,
+            };
+        },
+        async runProof(params = {}) {
+            const normalizedParams = normalizeSandboxProofParams(params);
+            const mode = parseProofMode(normalizedParams.mode);
+            const type = sandboxType();
+            if (!available()) {
+                return {
+                    mode,
+                    available: false,
+                    type,
+                    passed: false,
+                    skippedReason: "Native sandbox is not available on this platform.",
+                    checks: [],
+                };
+            }
+            const outsidePath = join(tmpdir(), `maestro-native-proof-outside-${process.pid}-${Date.now()}`);
+            let workspace;
+            let sandbox;
+            const checks = [];
+            try {
+                workspace = mkdtempSync(join(cwd, "maestro-native-proof-"));
+                sandbox = await sandboxFactory({
+                    mode,
+                    cwd: workspace,
+                    native: {
+                        policy: mode,
+                        networkAccess: false,
+                        excludeSlashTmp: true,
+                        excludeTmpdir: true,
+                    },
+                });
+                if (!sandbox) {
+                    checks.push(checkDetail("native-sandbox-instance", false, "No sandbox instance was created."));
+                    return { mode, available: true, type, passed: false, checks };
+                }
+                const envMarker = await sandbox.exec('printf "%s" "$MAESTRO_SANDBOX"');
+                checks.push(checkDetail("native-env-marker", envMarker.exitCode === 0 && envMarker.stdout.trim() === type, `MAESTRO_SANDBOX=${envMarker.stdout.trim() || "(empty)"}`));
+                if (mode === "workspace-write") {
+                    const inside = await sandbox.exec("touch inside-proof.txt && test -f inside-proof.txt");
+                    checks.push(checkDetail("workspace-write", inside.exitCode === 0, inside.exitCode === 0
+                        ? "wrote inside workspace"
+                        : inside.stderr || inside.stdout || "inside write failed"));
+                }
+                else {
+                    const readOnly = await sandbox.exec("touch read-only-proof.txt 2>/dev/null");
+                    checks.push(checkDetail("read-only-write-blocked", readOnly.exitCode !== 0 &&
+                        !existsSync(join(workspace, "read-only-proof.txt")), readOnly.exitCode !== 0
+                        ? "blocked workspace write"
+                        : "workspace write unexpectedly succeeded"));
+                }
+                const outside = await sandbox.exec(`touch ${shellQuote(outsidePath)} 2>/dev/null`);
+                checks.push(checkDetail("outside-write-blocked", outside.exitCode !== 0 && !existsSync(outsidePath), outside.exitCode !== 0
+                    ? "blocked write outside workspace"
+                    : "outside write unexpectedly succeeded"));
+                return {
+                    mode,
+                    available: true,
+                    type,
+                    passed: checks.every((check) => check.passed),
+                    checks,
+                };
+            }
+            catch (error) {
+                checks.push(checkDetail("native-sandbox-proof", false, error instanceof Error ? error.message : "proof failed"));
+                return { mode, available: true, type, passed: false, checks };
+            }
+            finally {
+                await sandbox?.dispose();
+                if (workspace) {
+                    rmSync(workspace, { recursive: true, force: true });
+                }
+                rmSync(outsidePath, { force: true });
+            }
+        },
+    };
+}
+//# sourceMappingURL=sandbox-proof-api.js.map

package/dist/app-server/sandbox-proof-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-proof-api.js","sourceRoot":"","sources":["../../src/app-server/sandbox-proof-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOjC,OAAO,EAGN,aAAa,EACb,oBAAoB,EACpB,wBAAwB,GACxB,MAAM,qBAAqB,CAAC;AAI7B,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAC3D,YACU,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IACjD,CAAC;CACD;AAgBD,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,IAAI,iCAAiC,CAAC,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,iCAAiC,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAsB,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CACnB,IAAY,EACZ,MAAe,EACf,MAAc;IAEd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kCAAkC,CACjD,UAA+C,EAAE;IAEjD,MAAM,SAAS,GACd,OAAO,CAAC,wBAAwB,IAAI,wBAAwB,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,oBAAoB,IAAI,oBAAoB,CAAC;IACzE,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEzC,OAAO;QACN,KAAK;YACJ,MAAM,WAAW,GAAG,SAAS,EAAE,CAAC;YAChC,OAAO;gBACN,SAAS,EAAE,WAAW;gBACtB,IAAI,EAAE,WAAW,EAAE;gBACnB,QAAQ,EAAE,UAAU,EAAE;gBACtB,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE;gBACnE,cAAc,EAAE,WAAW;aAC3B,CAAC;QACH,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE;YACzB,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBAClB,OAAO;oBACN,IAAI;oBACJ,SAAS,EAAE,KAAK;oBAChB,IAAI;oBACJ,MAAM,EAAE,KAAK;oBACb,aAAa,EAAE,mDAAmD;oBAClE,MAAM,EAAE,EAAE;iBACV,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CACvB,MAAM,EAAE,EACR,gCAAgC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAC3D,CAAC;YACF,IAAI,SAA6B,CAAC;YAClC,IAAI,OAA4B,CAAC;YACjC,MAAM,MAAM,GAAiD,EAAE,CAAC;YAChE,IAAI,CAAC;gBACJ,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,CAAC;gBAC5D,OAAO,GAAG,MAAM,cAAc,CAAC;oBAC9B,IAAI;oBACJ,GAAG,EAAE,SAAS;oBACd,MAAM,EAAE;wBACP,MAAM,EAAE,IAAI;wBACZ,aAAa,EAAE,KAAK;wBACpB,eAAe,EAAE,IAAI;wBACrB,aAAa,EAAE,IAAI;qBACnB;iBACD,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,CACV,WAAW,CACV,yBAAyB,EACzB,KAAK,EACL,kCAAkC,CAClC,CACD,CAAC;oBACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gBAC/D,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBACvE,MAAM,CAAC,IAAI,CACV,WAAW,CACV,mBAAmB,EACnB,SAAS,CAAC,QAAQ,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAC5D,mBAAmB,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,EAAE,CACzD,CACD,CAAC;gBAEF,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAChC,oDAAoD,CACpD,CAAC;oBACF,MAAM,CAAC,IAAI,CACV,WAAW,CACV,iBAAiB,EACjB,MAAM,CAAC,QAAQ,KAAK,CAAC,EACrB,MAAM,CAAC,QAAQ,KAAK,CAAC;wBACpB,CAAC,CAAC,wBAAwB;wBAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,qBAAqB,CAC1D,CACD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACP,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAClC,uCAAuC,CACvC,CAAC;oBACF,MAAM,CAAC,IAAI,CACV,WAAW,CACV,yBAAyB,EACzB,QAAQ,CAAC,QAAQ,KAAK,CAAC;wBACtB,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,EACpD,QAAQ,CAAC,QAAQ,KAAK,CAAC;wBACtB,CAAC,CAAC,yBAAyB;wBAC3B,CAAC,CAAC,wCAAwC,CAC3C,CACD,CAAC;gBACH,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CACjC,SAAS,UAAU,CAAC,WAAW,CAAC,cAAc,CAC9C,CAAC;gBACF,MAAM,CAAC,IAAI,CACV,WAAW,CACV,uBAAuB,EACvB,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAClD,OAAO,CAAC,QAAQ,KAAK,CAAC;oBACrB,CAAC,CAAC,iCAAiC;oBACnC,CAAC,CAAC,sCAAsC,CACzC,CACD,CAAC;gBAEF,OAAO;oBACN,IAAI;oBACJ,SAAS,EAAE,IAAI;oBACf,IAAI;oBACJ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC7C,MAAM;iBACN,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CACV,WAAW,CACV,sBAAsB,EACtB,KAAK,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CACvD,CACD,CAAC;gBACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC/D,CAAC;oBAAS,CAAC;gBACV,MAAM,OAAO,EAAE,OAAO,EAAE,CAAC;gBACzB,IAAI,SAAS,EAAE,CAAC;oBACf,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["import { existsSync, mkdtempSync, rmSync } from \"node:fs\";\nimport { platform as osPlatform, tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type {\n\tMaestroAppServerSandboxProbeResult,\n\tMaestroAppServerSandboxProofMode,\n\tMaestroAppServerSandboxProofResult,\n\tMaestroAppServerSandboxType,\n} from \"@evalops/contracts\";\nimport {\n\ttype CreateSandboxOptions,\n\ttype Sandbox,\n\tcreateSandbox,\n\tgetNativeSandboxType,\n\tisNativeSandboxAvailable,\n} from \"../sandbox/index.js\";\n\ntype UnknownRecord = Record<string, unknown>;\n\nexport class MaestroAppServerSandboxProofError extends Error {\n\tconstructor(\n\t\treadonly code: number,\n\t\tmessage: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"MaestroAppServerSandboxProofError\";\n\t}\n}\n\nexport interface MaestroAppServerSandboxProof {\n\tprobe(): MaestroAppServerSandboxProbeResult;\n\trunProof(params?: UnknownRecord): Promise<MaestroAppServerSandboxProofResult>;\n}\n\nexport interface MaestroAppServerSandboxProofOptions {\n\tcwd?: string;\n\tisNativeSandboxAvailable?: () => boolean;\n\tgetNativeSandboxType?: () => MaestroAppServerSandboxType;\n\tcreateSandbox?: (\n\t\toptions: CreateSandboxOptions,\n\t) => Promise<Sandbox | undefined>;\n}\n\nfunction parseProofMode(value: unknown): MaestroAppServerSandboxProofMode {\n\tif (value === undefined || value === null) {\n\t\treturn \"workspace-write\";\n\t}\n\tif (value === \"read-only\" || value === \"workspace-write\") {\n\t\treturn value;\n\t}\n\tthrow new MaestroAppServerSandboxProofError(-32602, \"Invalid sandbox mode\");\n}\n\nexport function normalizeSandboxProofParams(value: unknown): UnknownRecord {\n\tif (value === undefined || value === null) {\n\t\treturn {};\n\t}\n\tif (typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new MaestroAppServerSandboxProofError(-32602, \"Invalid params\");\n\t}\n\treturn value as UnknownRecord;\n}\n\nfunction shellQuote(value: string): string {\n\treturn `'${value.replaceAll(\"'\", \"'\\\\''\")}'`;\n}\n\nfunction checkDetail(\n\tname: string,\n\tpassed: boolean,\n\tdetail: string,\n): MaestroAppServerSandboxProofResult[\"checks\"][number] {\n\treturn { name, passed, detail };\n}\n\nexport function createMaestroAppServerSandboxProof(\n\toptions: MaestroAppServerSandboxProofOptions = {},\n): MaestroAppServerSandboxProof {\n\tconst available =\n\t\toptions.isNativeSandboxAvailable ?? isNativeSandboxAvailable;\n\tconst sandboxType = options.getNativeSandboxType ?? getNativeSandboxType;\n\tconst sandboxFactory = options.createSandbox ?? createSandbox;\n\tconst cwd = options.cwd ?? process.cwd();\n\n\treturn {\n\t\tprobe() {\n\t\t\tconst isAvailable = available();\n\t\t\treturn {\n\t\t\t\tavailable: isAvailable,\n\t\t\t\ttype: sandboxType(),\n\t\t\t\tplatform: osPlatform(),\n\t\t\t\tsupportedModes: isAvailable ? [\"read-only\", \"workspace-write\"] : [],\n\t\t\t\tproofAvailable: isAvailable,\n\t\t\t};\n\t\t},\n\n\t\tasync runProof(params = {}) {\n\t\t\tconst normalizedParams = normalizeSandboxProofParams(params);\n\t\t\tconst mode = parseProofMode(normalizedParams.mode);\n\t\t\tconst type = sandboxType();\n\t\t\tif (!available()) {\n\t\t\t\treturn {\n\t\t\t\t\tmode,\n\t\t\t\t\tavailable: false,\n\t\t\t\t\ttype,\n\t\t\t\t\tpassed: false,\n\t\t\t\t\tskippedReason: \"Native sandbox is not available on this platform.\",\n\t\t\t\t\tchecks: [],\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tconst outsidePath = join(\n\t\t\t\ttmpdir(),\n\t\t\t\t`maestro-native-proof-outside-${process.pid}-${Date.now()}`,\n\t\t\t);\n\t\t\tlet workspace: string | undefined;\n\t\t\tlet sandbox: Sandbox | undefined;\n\t\t\tconst checks: MaestroAppServerSandboxProofResult[\"checks\"] = [];\n\t\t\ttry {\n\t\t\t\tworkspace = mkdtempSync(join(cwd, \"maestro-native-proof-\"));\n\t\t\t\tsandbox = await sandboxFactory({\n\t\t\t\t\tmode,\n\t\t\t\t\tcwd: workspace,\n\t\t\t\t\tnative: {\n\t\t\t\t\t\tpolicy: mode,\n\t\t\t\t\t\tnetworkAccess: false,\n\t\t\t\t\t\texcludeSlashTmp: true,\n\t\t\t\t\t\texcludeTmpdir: true,\n\t\t\t\t\t},\n\t\t\t\t});\n\t\t\t\tif (!sandbox) {\n\t\t\t\t\tchecks.push(\n\t\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\t\"native-sandbox-instance\",\n\t\t\t\t\t\t\tfalse,\n\t\t\t\t\t\t\t\"No sandbox instance was created.\",\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t\treturn { mode, available: true, type, passed: false, checks };\n\t\t\t\t}\n\n\t\t\t\tconst envMarker = await sandbox.exec('printf \"%s\" \"$MAESTRO_SANDBOX\"');\n\t\t\t\tchecks.push(\n\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\"native-env-marker\",\n\t\t\t\t\t\tenvMarker.exitCode === 0 && envMarker.stdout.trim() === type,\n\t\t\t\t\t\t`MAESTRO_SANDBOX=${envMarker.stdout.trim() || \"(empty)\"}`,\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\t\t\tif (mode === \"workspace-write\") {\n\t\t\t\t\tconst inside = await sandbox.exec(\n\t\t\t\t\t\t\"touch inside-proof.txt && test -f inside-proof.txt\",\n\t\t\t\t\t);\n\t\t\t\t\tchecks.push(\n\t\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\t\"workspace-write\",\n\t\t\t\t\t\t\tinside.exitCode === 0,\n\t\t\t\t\t\t\tinside.exitCode === 0\n\t\t\t\t\t\t\t\t? \"wrote inside workspace\"\n\t\t\t\t\t\t\t\t: inside.stderr || inside.stdout || \"inside write failed\",\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t} else {\n\t\t\t\t\tconst readOnly = await sandbox.exec(\n\t\t\t\t\t\t\"touch read-only-proof.txt 2>/dev/null\",\n\t\t\t\t\t);\n\t\t\t\t\tchecks.push(\n\t\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\t\"read-only-write-blocked\",\n\t\t\t\t\t\t\treadOnly.exitCode !== 0 &&\n\t\t\t\t\t\t\t\t!existsSync(join(workspace, \"read-only-proof.txt\")),\n\t\t\t\t\t\t\treadOnly.exitCode !== 0\n\t\t\t\t\t\t\t\t? \"blocked workspace write\"\n\t\t\t\t\t\t\t\t: \"workspace write unexpectedly succeeded\",\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst outside = await sandbox.exec(\n\t\t\t\t\t`touch ${shellQuote(outsidePath)} 2>/dev/null`,\n\t\t\t\t);\n\t\t\t\tchecks.push(\n\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\"outside-write-blocked\",\n\t\t\t\t\t\toutside.exitCode !== 0 && !existsSync(outsidePath),\n\t\t\t\t\t\toutside.exitCode !== 0\n\t\t\t\t\t\t\t? \"blocked write outside workspace\"\n\t\t\t\t\t\t\t: \"outside write unexpectedly succeeded\",\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\t\t\treturn {\n\t\t\t\t\tmode,\n\t\t\t\t\tavailable: true,\n\t\t\t\t\ttype,\n\t\t\t\t\tpassed: checks.every((check) => check.passed),\n\t\t\t\t\tchecks,\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tchecks.push(\n\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\"native-sandbox-proof\",\n\t\t\t\t\t\tfalse,\n\t\t\t\t\t\terror instanceof Error ? error.message : \"proof failed\",\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\treturn { mode, available: true, type, passed: false, checks };\n\t\t\t} finally {\n\t\t\t\tawait sandbox?.dispose();\n\t\t\t\tif (workspace) {\n\t\t\t\t\trmSync(workspace, { recursive: true, force: true });\n\t\t\t\t}\n\t\t\t\trmSync(outsidePath, { force: true });\n\t\t\t}\n\t\t},\n\t};\n}\n"]}

package/dist/app-server/session-api.d.ts

@@ -1,8 +1,23 @@
-import { type MaestroAppServerClientRequest, type MaestroAppServerModelListResult, type MaestroAppServerModelProviderCapabilitiesReadResult, type MaestroAppServerResponse, type MaestroAppServerThread, type MaestroAppServerThreadGoal, type MaestroAppServerThreadGoalResult, type MaestroAppServerThreadListResult, type MaestroAppServerThreadMetadataUpdateResult, type MaestroAppServerTurn, type MaestroAppServerTurnsListResult } from "@evalops/contracts";
+import { type MaestroAppServerClientRequest, type MaestroAppServerCommandExecResult, type MaestroAppServerCommandProcessResult, type MaestroAppServerDaemonStatusResult, type MaestroAppServerEmptyResult, type MaestroAppServerExternalAgentImportResult, type MaestroAppServerFsMetadataResult, type MaestroAppServerFsReadDirectoryResult, type MaestroAppServerFsReadFileResult, type MaestroAppServerFsWatchResult, type MaestroAppServerModelListResult, type MaestroAppServerModelProviderCapabilitiesReadResult, type MaestroAppServerNetworkAuditListResult, type MaestroAppServerNetworkFetchResult, type MaestroAppServerPluginBundleListResult, type MaestroAppServerPluginBundleMutationResult, type MaestroAppServerPolicyCheckResult, type MaestroAppServerPolicyReadResult, type MaestroAppServerProtocolModeListResult, type MaestroAppServerProtocolModeSetResult, type MaestroAppServerRemoteControlDrainResult, type MaestroAppServerRemoteControlLeaseResult, type MaestroAppServerRemoteControlStatusResult, type MaestroAppServerRequirementsListResult, type MaestroAppServerResponse, type MaestroAppServerSandboxProbeResult, type MaestroAppServerSandboxProofResult, type MaestroAppServerServerNotification, type MaestroAppServerThread, type MaestroAppServerThreadArchiveResult, type MaestroAppServerThreadDeleteResult, type MaestroAppServerThreadForkResult, type MaestroAppServerThreadGoal, type MaestroAppServerThreadGoalResult, type MaestroAppServerThreadListResult, type MaestroAppServerThreadMetadataUpdateResult, type MaestroAppServerThreadStartResult, type MaestroAppServerTurn, type MaestroAppServerTurnsListResult, maestroAppServerClientMethods } from "@evalops/contracts";
 import type { SessionManager } from "../session/manager.js";
 import type { SessionEntry } from "../session/types.js";
+import { type MaestroAppServerDaemonLifecycle } from "./daemon-lifecycle-api.js";
+import { type MaestroAppServerExternalAgentImport } from "./external-agent-import-api.js";
+import { type MaestroAppServerHostControl } from "./host-control-api.js";
+import { type MaestroAppServerNetworkGovernance } from "./network-governance-api.js";
+import { type MaestroAppServerPluginBundleApi } from "./plugin-bundle-api.js";
+import { type MaestroAppServerPolicyControl } from "./policy-control-api.js";
+import { type MaestroAppServerProtocolModeDecision, type MaestroAppServerProtocolModes } from "./protocol-modes-api.js";
+import { type MaestroAppServerSandboxProof } from "./sandbox-proof-api.js";
+export type { MaestroAppServerServerNotification };
+export { type MaestroAppServerDaemonLifecycle, createMaestroAppServerDaemonLifecycle, } from "./daemon-lifecycle-api.js";
+export { type MaestroAppServerExternalAgentImport, createMaestroAppServerExternalAgentImport, } from "./external-agent-import-api.js";
+export { type MaestroAppServerPluginBundleApi, createMaestroAppServerPluginBundleApi, } from "./plugin-bundle-api.js";
+export { type MaestroAppServerProtocolModes, createMaestroAppServerProtocolModes, } from "./protocol-modes-api.js";
+export { type MaestroAppServerSandboxProof, createMaestroAppServerSandboxProof, } from "./sandbox-proof-api.js";
 type MaybePromise<T> = T | Promise<T>;
 type SessionStore = Pick<SessionManager, "getSessionFileById" | "loadAllSessions" | "listSessions" | "loadSession"> & {
+    getSessionFile?: () => string;
     loadEntries?: (sessionId: string) => Promise<SessionEntry[] | null>;
     flush?: () => Promise<void>;
     saveSessionSummary?: (summary: string, sessionPath?: string) => MaybePromise<void>;
@@ -10,12 +25,83 @@ type SessionStore = Pick<SessionManager, "getSessionFileById" | "loadAllSessions
     setSessionFavorite?: (sessionPath: string, favorite: boolean) => MaybePromise<void>;
     setSessionTitle?: (sessionPath: string, title: string) => MaybePromise<void>;
     setSessionTags?: (sessionPath: string, tags: string[]) => MaybePromise<void>;
+    setSessionArchived?: (sessionPath: string, archived: boolean) => MaybePromise<void>;
     setSessionAppServerGoal?: (sessionPath: string, goal: MaestroAppServerThreadGoal | null) => MaybePromise<void>;
+    createSession?: (options?: {
+        title?: string;
+    }) => Promise<{
+        id: string;
+        title?: string;
+        createdAt: string;
+        updatedAt: string;
+        messageCount: number;
+    }>;
+    canCreateSession?: () => boolean;
+    createBranchedSession?: (leafId: string) => string;
+    setSessionFile?: (path: string) => MaybePromise<void>;
+    resumeSession?: (sessionId: string) => Promise<boolean>;
+    getLeafId?: () => string | null;
+    getCurrentLeafId?: () => string | null;
+    branch?: (branchFromId: string) => MaybePromise<void>;
+    resetLeaf?: () => MaybePromise<void>;
+    deleteSession?: (sessionId: string) => MaybePromise<void>;
+    importSessionEntries?: (entries: SessionEntry[]) => {
+        sessionFile: string;
+        sessionId: string;
+        importedCount: number;
+    };
+    importPortableSession?: (path: string) => {
+        sessionFile: string;
+        sessionId: string;
+        importedCount: number;
+    };
 };
+export interface MaestroAppServerSessionApiOptions {
+    hostControl?: MaestroAppServerHostControl | false;
+    policyControl?: MaestroAppServerPolicyControl | false;
+    networkGovernance?: MaestroAppServerNetworkGovernance | false;
+    sandboxProof?: MaestroAppServerSandboxProof | false;
+    externalAgentImport?: MaestroAppServerExternalAgentImport | false;
+    pluginBundles?: MaestroAppServerPluginBundleApi | false;
+    daemonLifecycle?: MaestroAppServerDaemonLifecycle | false;
+    protocolModes?: MaestroAppServerProtocolModes | false;
+    onNotification?: (notification: MaestroAppServerServerNotification) => void;
+}
 export interface MaestroAppServerSessionApi {
     initialize(): MaestroAppServerResponse["result"];
+    checkProtocolMode(method: (typeof maestroAppServerClientMethods)[number]): MaestroAppServerProtocolModeDecision;
+    listProtocolModes(params?: Record<string, unknown>): Promise<MaestroAppServerProtocolModeListResult>;
+    setProtocolMode(params?: Record<string, unknown>): Promise<MaestroAppServerProtocolModeSetResult>;
     listModels(params?: Record<string, unknown>): Promise<MaestroAppServerModelListResult>;
     readModelProviderCapabilities(params?: Record<string, unknown>): Promise<MaestroAppServerModelProviderCapabilitiesReadResult>;
+    readPolicy(params?: Record<string, unknown>): Promise<MaestroAppServerPolicyReadResult>;
+    checkPolicy(params?: Record<string, unknown>): Promise<MaestroAppServerPolicyCheckResult>;
+    listRequirements(params?: Record<string, unknown>): Promise<MaestroAppServerRequirementsListResult>;
+    fetchNetwork(params?: Record<string, unknown>): Promise<MaestroAppServerNetworkFetchResult>;
+    listNetworkAudit(params?: Record<string, unknown>): Promise<MaestroAppServerNetworkAuditListResult>;
+    probeSandbox(params?: Record<string, unknown>): Promise<MaestroAppServerSandboxProbeResult>;
+    runSandboxProof(params?: Record<string, unknown>): Promise<MaestroAppServerSandboxProofResult>;
+    importExternalAgent(params?: Record<string, unknown>): Promise<MaestroAppServerExternalAgentImportResult>;
+    listPluginBundles(params?: Record<string, unknown>): Promise<MaestroAppServerPluginBundleListResult>;
+    installPluginBundle(params?: Record<string, unknown>): Promise<MaestroAppServerPluginBundleMutationResult>;
+    removePluginBundle(params?: Record<string, unknown>): Promise<MaestroAppServerPluginBundleMutationResult>;
+    readDaemonStatus(params?: Record<string, unknown>): Promise<MaestroAppServerDaemonStatusResult>;
+    readRemoteControlStatus(params?: Record<string, unknown>): Promise<MaestroAppServerRemoteControlStatusResult>;
+    readRemoteControlLease(params?: Record<string, unknown>): Promise<MaestroAppServerRemoteControlLeaseResult>;
+    heartbeatRemoteControlLease(params?: Record<string, unknown>): Promise<MaestroAppServerRemoteControlLeaseResult>;
+    drainRemoteControl(params?: Record<string, unknown>): Promise<MaestroAppServerRemoteControlDrainResult>;
+    execCommand(params?: Record<string, unknown>): Promise<MaestroAppServerCommandExecResult>;
+    writeCommandStdin(params?: Record<string, unknown>): Promise<MaestroAppServerCommandProcessResult>;
+    terminateCommand(params?: Record<string, unknown>): Promise<MaestroAppServerCommandProcessResult>;
+    readFile(params?: Record<string, unknown>): Promise<MaestroAppServerFsReadFileResult>;
+    writeFile(params?: Record<string, unknown>): Promise<MaestroAppServerEmptyResult>;
+    readDirectory(params?: Record<string, unknown>): Promise<MaestroAppServerFsReadDirectoryResult>;
+    getMetadata(params?: Record<string, unknown>): Promise<MaestroAppServerFsMetadataResult>;
+    createDirectory(params?: Record<string, unknown>): Promise<MaestroAppServerEmptyResult>;
+    remove(params?: Record<string, unknown>): Promise<MaestroAppServerEmptyResult>;
+    copy(params?: Record<string, unknown>): Promise<MaestroAppServerEmptyResult>;
+    watch(params?: Record<string, unknown>): Promise<MaestroAppServerFsWatchResult>;
+    unwatch(params?: Record<string, unknown>): Promise<MaestroAppServerEmptyResult>;
     listThreads(params?: Record<string, unknown>): Promise<MaestroAppServerThreadListResult>;
     readThread(params?: Record<string, unknown>): Promise<MaestroAppServerThread>;
     updateThreadMetadata(params?: Record<string, unknown>): Promise<MaestroAppServerThreadMetadataUpdateResult>;
@@ -23,6 +109,11 @@ export interface MaestroAppServerSessionApi {
     getThreadGoal(params?: Record<string, unknown>): Promise<MaestroAppServerThreadGoalResult>;
     setThreadGoal(params?: Record<string, unknown>): Promise<MaestroAppServerThreadGoalResult>;
     clearThreadGoal(params?: Record<string, unknown>): Promise<MaestroAppServerThreadGoalResult>;
+    startThread(params?: Record<string, unknown>): Promise<MaestroAppServerThreadStartResult>;
+    forkThread(params?: Record<string, unknown>): Promise<MaestroAppServerThreadForkResult>;
+    archiveThread(params?: Record<string, unknown>): Promise<MaestroAppServerThreadArchiveResult>;
+    unarchiveThread(params?: Record<string, unknown>): Promise<MaestroAppServerThreadArchiveResult>;
+    deleteThread(params?: Record<string, unknown>): Promise<MaestroAppServerThreadDeleteResult>;
     listTurns(params?: Record<string, unknown>): Promise<MaestroAppServerTurnsListResult>;
 }
 export declare class MaestroAppServerError extends Error {
@@ -30,7 +121,6 @@ export declare class MaestroAppServerError extends Error {
     constructor(code: number, message: string);
 }
 export declare function buildTurnsFromSessionEntries(entries: SessionEntry[]): MaestroAppServerTurn[];
-export declare function createMaestroAppServerSessionApi(store: SessionStore): MaestroAppServerSessionApi;
+export declare function createMaestroAppServerSessionApi(store: SessionStore, options?: MaestroAppServerSessionApiOptions): MaestroAppServerSessionApi;
 export declare function handleMaestroAppServerRequest(api: MaestroAppServerSessionApi, request: MaestroAppServerClientRequest): Promise<MaestroAppServerResponse>;
-export {};
 //# sourceMappingURL=session-api.d.ts.map

package/dist/app-server/session-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-api.d.ts","sourceRoot":"","sources":["../../src/app-server/session-api.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,6BAA6B,EAElC,KAAK,+BAA+B,EAEpC,KAAK,mDAAmD,EACxD,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,EAGrC,KAAK,gCAAgC,EACrC,KAAK,0CAA0C,EAE/C,KAAK,oBAAoB,EACzB,KAAK,+BAA+B,EAGpC,MAAM,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAM5D,OAAO,KAAK,EACX,YAAY,EAKZ,MAAM,qBAAqB,CAAC;AAM7B,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtC,KAAK,YAAY,GAAG,IAAI,CACvB,cAAc,EACd,oBAAoB,GAAG,iBAAiB,GAAG,cAAc,GAAG,aAAa,CACzE,GAAG;IACH,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,CAAC;IACpE,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,kBAAkB,CAAC,EAAE,CACpB,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,KAChB,YAAY,CAAC,IAAI,CAAC,CAAC;IACxB,wBAAwB,CAAC,EAAE,CAC1B,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,KAChB,YAAY,CAAC,IAAI,CAAC,CAAC;IACxB,kBAAkB,CAAC,EAAE,CACpB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,KACb,YAAY,CAAC,IAAI,CAAC,CAAC;IACxB,eAAe,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7E,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7E,uBAAuB,CAAC,EAAE,CACzB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,0BAA0B,GAAG,IAAI,KACnC,YAAY,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAEF,MAAM,WAAW,0BAA0B;IAC1C,UAAU,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACjD,UAAU,CACT,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC5C,6BAA6B,CAC5B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,mDAAmD,CAAC,CAAC;IAChE,WAAW,CACV,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9E,oBAAoB,CACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACvD,aAAa,CACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACvD,aAAa,CACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,aAAa,CACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,eAAe,CACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,SAAS,CACR,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,+BAA+B,CAAC,CAAC;CAC5C;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKhB;AA0JD,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,YAAY,EAAE,GACrB,oBAAoB,EAAE,CAExB;AA2SD,wBAAgB,gCAAgC,CAC/C,KAAK,EAAE,YAAY,GACjB,0BAA0B,CAyR5B;AAqDD,wBAAsB,6BAA6B,CAClD,GAAG,EAAE,0BAA0B,EAC/B,OAAO,EAAE,6BAA6B,GACpC,OAAO,CAAC,wBAAwB,CAAC,CAmGnC"}
+{"version":3,"file":"session-api.d.ts","sourceRoot":"","sources":["../../src/app-server/session-api.ts"],"names":[],"mappings":"AACA,OAAO,EACN,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACtC,KAAK,oCAAoC,EACzC,KAAK,kCAAkC,EACvC,KAAK,2BAA2B,EAChC,KAAK,yCAAyC,EAC9C,KAAK,gCAAgC,EACrC,KAAK,qCAAqC,EAC1C,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAElC,KAAK,+BAA+B,EAEpC,KAAK,mDAAmD,EACxD,KAAK,sCAAsC,EAC3C,KAAK,kCAAkC,EACvC,KAAK,sCAAsC,EAC3C,KAAK,0CAA0C,EAC/C,KAAK,iCAAiC,EACtC,KAAK,gCAAgC,EACrC,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC1C,KAAK,wCAAwC,EAC7C,KAAK,wCAAwC,EAC7C,KAAK,yCAAyC,EAC9C,KAAK,sCAAsC,EAC3C,KAAK,wBAAwB,EAC7B,KAAK,kCAAkC,EACvC,KAAK,kCAAkC,EACvC,KAAK,kCAAkC,EACvC,KAAK,sBAAsB,EAC3B,KAAK,mCAAmC,EACxC,KAAK,kCAAkC,EACvC,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,EAGrC,KAAK,gCAAgC,EACrC,KAAK,0CAA0C,EAC/C,KAAK,iCAAiC,EAEtC,KAAK,oBAAoB,EACzB,KAAK,+BAA+B,EACpC,6BAA6B,EAG7B,MAAM,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAM5D,OAAO,KAAK,EACX,YAAY,EAKZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,KAAK,+BAA+B,EAGpC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,KAAK,mCAAmC,EAIxC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACN,KAAK,2BAA2B,EAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,KAAK,iCAAiC,EAGtC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,KAAK,+BAA+B,EAGpC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,KAAK,6BAA6B,EAGlC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,KAAK,oCAAoC,EACzC,KAAK,6BAA6B,EAGlC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,KAAK,4BAA4B,EAIjC,MAAM,wBAAwB,CAAC;AAKhC,YAAY,EAAE,kCAAkC,EAAE,CAAC;AACnD,OAAO,EACN,KAAK,+BAA+B,EACpC,qCAAqC,GACrC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,KAAK,mCAAmC,EACxC,yCAAyC,GACzC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACN,KAAK,+BAA+B,EACpC,qCAAqC,GACrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,KAAK,6BAA6B,EAClC,mCAAmC,GACnC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,KAAK,4BAA4B,EACjC,kCAAkC,GAClC,MAAM,wBAAwB,CAAC;AAGhC,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtC,KAAK,YAAY,GAAG,IAAI,CACvB,cAAc,EACd,oBAAoB,GAAG,iBAAiB,GAAG,cAAc,GAAG,aAAa,CACzE,GAAG;IACH,cAAc,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,CAAC;IACpE,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,kBAAkB,CAAC,EAAE,CACpB,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,KAChB,YAAY,CAAC,IAAI,CAAC,CAAC;IACxB,wBAAwB,CAAC,EAAE,CAC1B,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,KAChB,YAAY,CAAC,IAAI,CAAC,CAAC;IACxB,kBAAkB,CAAC,EAAE,CACpB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,KACb,YAAY,CAAC,IAAI,CAAC,CAAC;IACxB,eAAe,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7E,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7E,kBAAkB,CAAC,EAAE,CACpB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,KACb,YAAY,CAAC,IAAI,CAAC,CAAC;IACxB,uBAAuB,CAAC,EAAE,CACzB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,0BAA0B,GAAG,IAAI,KACnC,YAAY,CAAC,IAAI,CAAC,CAAC;IACxB,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QACzD,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC;IACjC,qBAAqB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IACnD,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IACtD,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IACtD,SAAS,CAAC,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1D,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK;QACnD,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,qBAAqB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QACzC,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;KACtB,CAAC;CACF,CAAC;AAEF,MAAM,WAAW,iCAAiC;IACjD,WAAW,CAAC,EAAE,2BAA2B,GAAG,KAAK,CAAC;IAClD,aAAa,CAAC,EAAE,6BAA6B,GAAG,KAAK,CAAC;IACtD,iBAAiB,CAAC,EAAE,iCAAiC,GAAG,KAAK,CAAC;IAC9D,YAAY,CAAC,EAAE,4BAA4B,GAAG,KAAK,CAAC;IACpD,mBAAmB,CAAC,EAAE,mCAAmC,GAAG,KAAK,CAAC;IAClE,aAAa,CAAC,EAAE,+BAA+B,GAAG,KAAK,CAAC;IACxD,eAAe,CAAC,EAAE,+BAA+B,GAAG,KAAK,CAAC;IAC1D,aAAa,CAAC,EAAE,6BAA6B,GAAG,KAAK,CAAC;IACtD,cAAc,CAAC,EAAE,CAAC,YAAY,EAAE,kCAAkC,KAAK,IAAI,CAAC;CAC5E;AAED,MAAM,WAAW,0BAA0B;IAC1C,UAAU,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACjD,iBAAiB,CAChB,MAAM,EAAE,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,GACpD,oCAAoC,CAAC;IACxC,iBAAiB,CAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACnD,eAAe,CACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAClD,UAAU,CACT,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC5C,6BAA6B,CAC5B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,mDAAmD,CAAC,CAAC;IAChE,UAAU,CACT,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,WAAW,CACV,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC9C,gBAAgB,CACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACnD,YAAY,CACX,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC/C,gBAAgB,CACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACnD,YAAY,CACX,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC/C,eAAe,CACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC/C,mBAAmB,CAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,yCAAyC,CAAC,CAAC;IACtD,iBAAiB,CAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACnD,mBAAmB,CAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACvD,kBAAkB,CACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACvD,gBAAgB,CACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC/C,uBAAuB,CACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,yCAAyC,CAAC,CAAC;IACtD,sBAAsB,CACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,wCAAwC,CAAC,CAAC;IACrD,2BAA2B,CAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,wCAAwC,CAAC,CAAC;IACrD,kBAAkB,CACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,wCAAwC,CAAC,CAAC;IACrD,WAAW,CACV,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC9C,iBAAiB,CAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACjD,gBAAgB,CACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACjD,QAAQ,CACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,SAAS,CACR,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxC,aAAa,CACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAClD,WAAW,CACV,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,eAAe,CACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxC,MAAM,CACL,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC7E,KAAK,CACJ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC1C,OAAO,CACN,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxC,WAAW,CACV,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9E,oBAAoB,CACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACvD,aAAa,CACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACvD,aAAa,CACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,aAAa,CACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,eAAe,CACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,WAAW,CACV,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC9C,UAAU,CACT,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC7C,aAAa,CACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAChD,eAAe,CACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAChD,YAAY,CACX,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC/C,SAAS,CACR,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,+BAA+B,CAAC,CAAC;CAC5C;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKhB;AAiLD,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,YAAY,EAAE,GACrB,oBAAoB,EAAE,CAExB;AAmVD,wBAAgB,gCAAgC,CAC/C,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE,iCAAsC,GAC7C,0BAA0B,CA+zB5B;AAqDD,wBAAsB,6BAA6B,CAClD,GAAG,EAAE,0BAA0B,EAC/B,OAAO,EAAE,6BAA6B,GACpC,OAAO,CAAC,wBAAwB,CAAC,CAyUnC"}