@evalops/maestro 0.10.49 → 0.10.51
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agent/agent-outcome.d.ts +54 -0
- package/dist/agent/agent-outcome.d.ts.map +1 -0
- package/dist/agent/agent-outcome.js +142 -0
- package/dist/agent/agent-outcome.js.map +1 -0
- package/dist/agent/agent-resume.d.ts.map +1 -1
- package/dist/agent/agent-resume.js +3 -3
- package/dist/agent/agent-resume.js.map +1 -1
- package/dist/agent/agent-run-summary.d.ts +37 -0
- package/dist/agent/agent-run-summary.d.ts.map +1 -0
- package/dist/agent/agent-run-summary.js +15 -0
- package/dist/agent/agent-run-summary.js.map +1 -0
- package/dist/agent/agent-work-board.d.ts +82 -0
- package/dist/agent/agent-work-board.d.ts.map +1 -0
- package/dist/agent/agent-work-board.js +312 -0
- package/dist/agent/agent-work-board.js.map +1 -0
- package/dist/agent/auto-compaction.d.ts +7 -2
- package/dist/agent/auto-compaction.d.ts.map +1 -1
- package/dist/agent/auto-compaction.js +23 -10
- package/dist/agent/auto-compaction.js.map +1 -1
- package/dist/agent/mission-artifacts.d.ts +62 -0
- package/dist/agent/mission-artifacts.d.ts.map +1 -0
- package/dist/agent/mission-artifacts.js +438 -0
- package/dist/agent/mission-artifacts.js.map +1 -0
- package/dist/agent/mission-manifest.d.ts +139 -3
- package/dist/agent/mission-manifest.d.ts.map +1 -1
- package/dist/agent/mission-manifest.js +549 -3
- package/dist/agent/mission-manifest.js.map +1 -1
- package/dist/agent/mission-store.d.ts +80 -0
- package/dist/agent/mission-store.d.ts.map +1 -0
- package/dist/agent/mission-store.js +603 -0
- package/dist/agent/mission-store.js.map +1 -0
- package/dist/agent/modes.d.ts +2 -2
- package/dist/agent/modes.d.ts.map +1 -1
- package/dist/agent/modes.js +10 -3
- package/dist/agent/modes.js.map +1 -1
- package/dist/agent/providers/codex-app-server.d.ts.map +1 -1
- package/dist/agent/providers/codex-app-server.js +1 -3
- package/dist/agent/providers/codex-app-server.js.map +1 -1
- package/dist/agent/providers/google-gemini-cli.js +203 -107
- package/dist/agent/providers/google.js +100 -41
- package/dist/agent/providers/scripted.d.ts.map +1 -1
- package/dist/agent/providers/scripted.js +1 -3
- package/dist/agent/providers/scripted.js.map +1 -1
- package/dist/agent/providers/validation.d.ts.map +1 -1
- package/dist/agent/providers/validation.js +1 -3
- package/dist/agent/providers/validation.js.map +1 -1
- package/dist/agent/providers/vertex.js +203 -107
- package/dist/agent/snapshot-store.d.ts +32 -0
- package/dist/agent/snapshot-store.d.ts.map +1 -0
- package/dist/agent/snapshot-store.js +195 -0
- package/dist/agent/snapshot-store.js.map +1 -0
- package/dist/agent/specialist-profiles.d.ts +36 -0
- package/dist/agent/specialist-profiles.d.ts.map +1 -0
- package/dist/agent/specialist-profiles.js +159 -0
- package/dist/agent/specialist-profiles.js.map +1 -0
- package/dist/agent/subagent-specs.d.ts +4 -1
- package/dist/agent/subagent-specs.d.ts.map +1 -1
- package/dist/agent/subagent-specs.js +81 -8
- package/dist/agent/subagent-specs.js.map +1 -1
- package/dist/agent/swarm/coverage-gate.d.ts +37 -0
- package/dist/agent/swarm/coverage-gate.d.ts.map +1 -0
- package/dist/agent/swarm/coverage-gate.js +48 -0
- package/dist/agent/swarm/coverage-gate.js.map +1 -0
- package/dist/agent/swarm/executor.d.ts +1 -0
- package/dist/agent/swarm/executor.d.ts.map +1 -1
- package/dist/agent/swarm/executor.js +151 -15
- package/dist/agent/swarm/executor.js.map +1 -1
- package/dist/agent/swarm/orchestrator-prompt.d.ts +25 -0
- package/dist/agent/swarm/orchestrator-prompt.d.ts.map +1 -0
- package/dist/agent/swarm/orchestrator-prompt.js +48 -0
- package/dist/agent/swarm/orchestrator-prompt.js.map +1 -0
- package/dist/agent/swarm/plan-parser.d.ts.map +1 -1
- package/dist/agent/swarm/plan-parser.js +27 -2
- package/dist/agent/swarm/plan-parser.js.map +1 -1
- package/dist/agent/swarm/types.d.ts +17 -0
- package/dist/agent/swarm/types.d.ts.map +1 -1
- package/dist/agent/swarm/types.js.map +1 -1
- package/dist/agent/swarm/validation-directive.d.ts +21 -0
- package/dist/agent/swarm/validation-directive.d.ts.map +1 -0
- package/dist/agent/swarm/validation-directive.js +25 -0
- package/dist/agent/swarm/validation-directive.js.map +1 -0
- package/dist/agent/transport/tool-execution-bridge.d.ts.map +1 -1
- package/dist/agent/transport/tool-execution-bridge.js +4 -1
- package/dist/agent/transport/tool-execution-bridge.js.map +1 -1
- package/dist/api/enterprise-routes.d.ts.map +1 -1
- package/dist/api/enterprise-routes.js +87 -10
- package/dist/api/enterprise-routes.js.map +1 -1
- package/dist/api/org-settings-merge.d.ts +12 -0
- package/dist/api/org-settings-merge.d.ts.map +1 -0
- package/dist/api/org-settings-merge.js +38 -0
- package/dist/api/org-settings-merge.js.map +1 -0
- package/dist/api/user-settings-merge.d.ts +16 -0
- package/dist/api/user-settings-merge.d.ts.map +1 -0
- package/dist/api/user-settings-merge.js +37 -0
- package/dist/api/user-settings-merge.js.map +1 -0
- package/dist/app-server/daemon-lifecycle-api.d.ts.map +1 -1
- package/dist/app-server/daemon-lifecycle-api.js +1 -3
- package/dist/app-server/daemon-lifecycle-api.js.map +1 -1
- package/dist/app-server/external-agent-import-api.d.ts.map +1 -1
- package/dist/app-server/external-agent-import-api.js +1 -3
- package/dist/app-server/external-agent-import-api.js.map +1 -1
- package/dist/app-server/network-governance-api.d.ts.map +1 -1
- package/dist/app-server/network-governance-api.js +1 -3
- package/dist/app-server/network-governance-api.js.map +1 -1
- package/dist/app-server/plugin-bundle-api.d.ts.map +1 -1
- package/dist/app-server/plugin-bundle-api.js +1 -3
- package/dist/app-server/plugin-bundle-api.js.map +1 -1
- package/dist/app-server/policy-control-api.d.ts.map +1 -1
- package/dist/app-server/policy-control-api.js +1 -3
- package/dist/app-server/policy-control-api.js.map +1 -1
- package/dist/app-server/protocol-modes-api.d.ts.map +1 -1
- package/dist/app-server/protocol-modes-api.js +1 -3
- package/dist/app-server/protocol-modes-api.js.map +1 -1
- package/dist/cli/args.d.ts +2 -0
- package/dist/cli/args.d.ts.map +1 -1
- package/dist/cli/args.js +15 -0
- package/dist/cli/args.js.map +1 -1
- package/dist/cli/commands/a2a.d.ts.map +1 -1
- package/dist/cli/commands/a2a.js +1 -3
- package/dist/cli/commands/a2a.js.map +1 -1
- package/dist/cli/commands/agents.d.ts +4 -0
- package/dist/cli/commands/agents.d.ts.map +1 -1
- package/dist/cli/commands/agents.js +149 -0
- package/dist/cli/commands/agents.js.map +1 -1
- package/dist/cli/commands/mission.d.ts +4 -0
- package/dist/cli/commands/mission.d.ts.map +1 -0
- package/dist/cli/commands/mission.js +196 -0
- package/dist/cli/commands/mission.js.map +1 -0
- package/dist/cli/commands/value.d.ts +10 -0
- package/dist/cli/commands/value.d.ts.map +1 -0
- package/dist/cli/commands/value.js +33 -0
- package/dist/cli/commands/value.js.map +1 -0
- package/dist/cli/headless-protocol.d.ts.map +1 -1
- package/dist/cli/headless-protocol.js +1 -3
- package/dist/cli/headless-protocol.js.map +1 -1
- package/dist/cli/help.d.ts.map +1 -1
- package/dist/cli/help.js +10 -0
- package/dist/cli/help.js.map +1 -1
- package/dist/cli/system-prompt.d.ts.map +1 -1
- package/dist/cli/system-prompt.js +38 -7
- package/dist/cli/system-prompt.js.map +1 -1
- package/dist/cli-command-runtime.js +2 -2
- package/dist/cli-command-runtime.js.map +1 -1
- package/dist/cli-runtime.js +7798 -2805
- package/dist/cli-tui/client-tools/client-tool-controller.d.ts.map +1 -1
- package/dist/cli-tui/client-tools/client-tool-controller.js +1 -3
- package/dist/cli-tui/client-tools/client-tool-controller.js.map +1 -1
- package/dist/cli-tui/commands/undo-handlers.d.ts.map +1 -1
- package/dist/cli-tui/commands/undo-handlers.js +7 -2
- package/dist/cli-tui/commands/undo-handlers.js.map +1 -1
- package/dist/cli-tui/tui-renderer/skills-controller.d.ts +3 -0
- package/dist/cli-tui/tui-renderer/skills-controller.d.ts.map +1 -1
- package/dist/cli-tui/tui-renderer/skills-controller.js +77 -33
- package/dist/cli-tui/tui-renderer/skills-controller.js.map +1 -1
- package/dist/cli.js +4 -6
- package/dist/cli.js.map +1 -1
- package/dist/codex/app-server-client.d.ts.map +1 -1
- package/dist/codex/app-server-client.js +1 -3
- package/dist/codex/app-server-client.js.map +1 -1
- package/dist/codex/compatibility.d.ts.map +1 -1
- package/dist/codex/compatibility.js +1 -3
- package/dist/codex/compatibility.js.map +1 -1
- package/dist/codex/subagent-dispatch-table.d.ts +8 -0
- package/dist/codex/subagent-dispatch-table.d.ts.map +1 -1
- package/dist/codex/subagent-dispatch-table.js +23 -0
- package/dist/codex/subagent-dispatch-table.js.map +1 -1
- package/dist/context/manifest.d.ts.map +1 -1
- package/dist/context/manifest.js +1 -3
- package/dist/context/manifest.js.map +1 -1
- package/dist/conversation/render-model.d.ts +0 -36
- package/dist/conversation/render-model.d.ts.map +1 -1
- package/dist/conversation/render-model.js +1 -3
- package/dist/conversation/render-model.js.map +1 -1
- package/dist/customer-value/ambient-learning.d.ts +75 -0
- package/dist/customer-value/ambient-learning.d.ts.map +1 -0
- package/dist/customer-value/ambient-learning.js +472 -0
- package/dist/customer-value/ambient-learning.js.map +1 -0
- package/dist/customer-value/internal-helpers.d.ts +13 -0
- package/dist/customer-value/internal-helpers.d.ts.map +1 -0
- package/dist/customer-value/internal-helpers.js +70 -0
- package/dist/customer-value/internal-helpers.js.map +1 -0
- package/dist/customer-value/report.d.ts +282 -0
- package/dist/customer-value/report.d.ts.map +1 -0
- package/dist/customer-value/report.js +2085 -0
- package/dist/customer-value/report.js.map +1 -0
- package/dist/db/health.d.ts +1 -1
- package/dist/db/health.d.ts.map +1 -1
- package/dist/db/health.js +10 -0
- package/dist/db/health.js.map +1 -1
- package/dist/db/migrations/0009_operating_layer_evidence.sql +30 -0
- package/dist/db/migrations/meta/_journal.json +7 -0
- package/dist/db/schema.d.ts +268 -1
- package/dist/db/schema.d.ts.map +1 -1
- package/dist/db/schema.js +28 -0
- package/dist/db/schema.js.map +1 -1
- package/dist/evalops/agent-bootstrap.d.ts.map +1 -1
- package/dist/evalops/agent-bootstrap.js +1 -3
- package/dist/evalops/agent-bootstrap.js.map +1 -1
- package/dist/evalops/agent-mcp-metadata.d.ts.map +1 -1
- package/dist/evalops/agent-mcp-metadata.js +1 -3
- package/dist/evalops/agent-mcp-metadata.js.map +1 -1
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +1 -0
- package/dist/index.js.map +1 -1
- package/dist/installers/maestro-review-workflow.d.ts +38 -0
- package/dist/installers/maestro-review-workflow.d.ts.map +1 -0
- package/dist/installers/maestro-review-workflow.js +163 -0
- package/dist/installers/maestro-review-workflow.js.map +1 -0
- package/dist/load-env.d.ts +13 -0
- package/dist/load-env.d.ts.map +1 -1
- package/dist/load-env.js +17 -0
- package/dist/load-env.js.map +1 -1
- package/dist/main.d.ts.map +1 -1
- package/dist/main.js +96 -7
- package/dist/main.js.map +1 -1
- package/dist/mcp/config.d.ts.map +1 -1
- package/dist/mcp/config.js +1 -3
- package/dist/mcp/config.js.map +1 -1
- package/dist/mcp/elicitation.d.ts.map +1 -1
- package/dist/mcp/elicitation.js +1 -3
- package/dist/mcp/elicitation.js.map +1 -1
- package/dist/mcp/official-registry.d.ts.map +1 -1
- package/dist/mcp/official-registry.js +1 -3
- package/dist/mcp/official-registry.js.map +1 -1
- package/dist/mcp/workspace-trust.d.ts.map +1 -1
- package/dist/mcp/workspace-trust.js +1 -3
- package/dist/mcp/workspace-trust.js.map +1 -1
- package/dist/memory/service-client.d.ts.map +1 -1
- package/dist/memory/service-client.js +1 -3
- package/dist/memory/service-client.js.map +1 -1
- package/dist/models/config-loader.d.ts.map +1 -1
- package/dist/models/config-loader.js +1 -3
- package/dist/models/config-loader.js.map +1 -1
- package/dist/node_modules/@evalops/contracts/dist/index.d.ts +1 -0
- package/dist/node_modules/@evalops/contracts/dist/index.d.ts.map +1 -1
- package/dist/node_modules/@evalops/contracts/dist/index.js +1 -0
- package/dist/node_modules/@evalops/contracts/dist/index.js.map +1 -1
- package/dist/node_modules/@evalops/contracts/dist/maestro-settings.d.ts +61 -0
- package/dist/node_modules/@evalops/contracts/dist/maestro-settings.d.ts.map +1 -0
- package/dist/node_modules/@evalops/contracts/dist/maestro-settings.js +183 -0
- package/dist/node_modules/@evalops/contracts/dist/maestro-settings.js.map +1 -0
- package/dist/node_modules/@evalops/contracts/package.json +1 -1
- package/dist/node_modules/@evalops/tui/package.json +1 -1
- package/dist/oauth/connectors.d.ts.map +1 -1
- package/dist/oauth/connectors.js +1 -3
- package/dist/oauth/connectors.js.map +1 -1
- package/dist/oauth/evalops.d.ts.map +1 -1
- package/dist/oauth/evalops.js +1 -3
- package/dist/oauth/evalops.js.map +1 -1
- package/dist/platform/a2a-client.d.ts.map +1 -1
- package/dist/platform/a2a-client.js +1 -3
- package/dist/platform/a2a-client.js.map +1 -1
- package/dist/platform/a2a-cockpit.d.ts +1 -0
- package/dist/platform/a2a-cockpit.d.ts.map +1 -1
- package/dist/platform/a2a-cockpit.js +42 -11
- package/dist/platform/a2a-cockpit.js.map +1 -1
- package/dist/platform/a2a-completion-audit.d.ts +1 -1
- package/dist/platform/a2a-completion-audit.d.ts.map +1 -1
- package/dist/platform/a2a-completion-audit.js +7 -11
- package/dist/platform/a2a-completion-audit.js.map +1 -1
- package/dist/platform/a2a-maestro-peer.js +16 -0
- package/dist/platform/a2a-maestro-peer.js.map +1 -1
- package/dist/platform/a2a-peer-pairing.d.ts.map +1 -1
- package/dist/platform/a2a-peer-pairing.js +1 -3
- package/dist/platform/a2a-peer-pairing.js.map +1 -1
- package/dist/platform/a2a-peer-registry.d.ts.map +1 -1
- package/dist/platform/a2a-peer-registry.js +1 -3
- package/dist/platform/a2a-peer-registry.js.map +1 -1
- package/dist/platform/a2a-task-ledger.d.ts +20 -0
- package/dist/platform/a2a-task-ledger.d.ts.map +1 -1
- package/dist/platform/a2a-task-ledger.js +207 -11
- package/dist/platform/a2a-task-ledger.js.map +1 -1
- package/dist/platform/a2a-work-graph.d.ts.map +1 -1
- package/dist/platform/a2a-work-graph.js +1 -3
- package/dist/platform/a2a-work-graph.js.map +1 -1
- package/dist/platform/operating-layer.d.ts +127 -0
- package/dist/platform/operating-layer.d.ts.map +1 -0
- package/dist/platform/operating-layer.js +360 -0
- package/dist/platform/operating-layer.js.map +1 -0
- package/dist/platform/tool-execution-client.d.ts.map +1 -1
- package/dist/platform/tool-execution-client.js +19 -2
- package/dist/platform/tool-execution-client.js.map +1 -1
- package/dist/providers/auth.d.ts.map +1 -1
- package/dist/providers/auth.js +1 -3
- package/dist/providers/auth.js.map +1 -1
- package/dist/runtime/env.d.ts +9 -1
- package/dist/runtime/env.d.ts.map +1 -1
- package/dist/runtime/env.js +63 -1
- package/dist/runtime/env.js.map +1 -1
- package/dist/safety/policy.d.ts.map +1 -1
- package/dist/safety/policy.js +1 -4
- package/dist/safety/policy.js.map +1 -1
- package/dist/sandbox/docker-sandbox.d.ts.map +1 -1
- package/dist/sandbox/docker-sandbox.js +6 -1
- package/dist/sandbox/docker-sandbox.js.map +1 -1
- package/dist/server/handlers/hosted-runner-drain.d.ts.map +1 -1
- package/dist/server/handlers/hosted-runner-drain.js +1 -3
- package/dist/server/handlers/hosted-runner-drain.js.map +1 -1
- package/dist/server/handlers/platform-a2a-push.d.ts.map +1 -1
- package/dist/server/handlers/platform-a2a-push.js +53 -2
- package/dist/server/handlers/platform-a2a-push.js.map +1 -1
- package/dist/server/handlers/runtime-app-server-ws.d.ts.map +1 -1
- package/dist/server/handlers/runtime-app-server-ws.js +1 -3
- package/dist/server/handlers/runtime-app-server-ws.js.map +1 -1
- package/dist/server/headless-runtime-service.d.ts +16 -0
- package/dist/server/headless-runtime-service.d.ts.map +1 -1
- package/dist/server/headless-runtime-service.js +232 -206
- package/dist/server/headless-runtime-service.js.map +1 -1
- package/dist/server/hosted-agent-runtime-progress.d.ts.map +1 -1
- package/dist/server/hosted-agent-runtime-progress.js +12 -3
- package/dist/server/hosted-agent-runtime-progress.js.map +1 -1
- package/dist/server/pending-request-payload.d.ts.map +1 -1
- package/dist/server/pending-request-payload.js +1 -3
- package/dist/server/pending-request-payload.js.map +1 -1
- package/dist/server/route-auth.d.ts.map +1 -1
- package/dist/server/route-auth.js +2 -0
- package/dist/server/route-auth.js.map +1 -1
- package/dist/server/session-serialization.d.ts.map +1 -1
- package/dist/server/session-serialization.js +1 -3
- package/dist/server/session-serialization.js.map +1 -1
- package/dist/services/compliance/normalize.d.ts.map +1 -1
- package/dist/services/compliance/normalize.js +1 -3
- package/dist/services/compliance/normalize.js.map +1 -1
- package/dist/services/intelligent-router/normalize.d.ts.map +1 -1
- package/dist/services/intelligent-router/normalize.js +1 -3
- package/dist/services/intelligent-router/normalize.js.map +1 -1
- package/dist/services/revenue-attribution/normalize.d.ts.map +1 -1
- package/dist/services/revenue-attribution/normalize.js +1 -3
- package/dist/services/revenue-attribution/normalize.js.map +1 -1
- package/dist/services/traces/normalize.d.ts.map +1 -1
- package/dist/services/traces/normalize.js +1 -3
- package/dist/services/traces/normalize.js.map +1 -1
- package/dist/services/workspace-config/normalize.d.ts.map +1 -1
- package/dist/services/workspace-config/normalize.js +1 -3
- package/dist/services/workspace-config/normalize.js.map +1 -1
- package/dist/skills/composer.d.ts.map +1 -1
- package/dist/skills/composer.js +13 -1
- package/dist/skills/composer.js.map +1 -1
- package/dist/skills/index.d.ts +1 -0
- package/dist/skills/index.d.ts.map +1 -1
- package/dist/skills/index.js +1 -0
- package/dist/skills/index.js.map +1 -1
- package/dist/skills/learned-guidelines.d.ts +33 -0
- package/dist/skills/learned-guidelines.d.ts.map +1 -0
- package/dist/skills/learned-guidelines.js +291 -0
- package/dist/skills/learned-guidelines.js.map +1 -0
- package/dist/skills/linter.d.ts.map +1 -1
- package/dist/skills/linter.js +1 -3
- package/dist/skills/linter.js.map +1 -1
- package/dist/skills/runtime-activation.d.ts +1 -0
- package/dist/skills/runtime-activation.d.ts.map +1 -1
- package/dist/skills/runtime-activation.js +2 -3
- package/dist/skills/runtime-activation.js.map +1 -1
- package/dist/skills/tool.d.ts.map +1 -1
- package/dist/skills/tool.js +26 -21
- package/dist/skills/tool.js.map +1 -1
- package/dist/skills/trust-cache.d.ts +7 -0
- package/dist/skills/trust-cache.d.ts.map +1 -1
- package/dist/skills/trust-cache.js +16 -0
- package/dist/skills/trust-cache.js.map +1 -1
- package/dist/telemetry/agent-workforce-native-event.d.ts.map +1 -1
- package/dist/telemetry/agent-workforce-native-event.js +1 -3
- package/dist/telemetry/agent-workforce-native-event.js.map +1 -1
- package/dist/telemetry/maestro-event-bus.d.ts.map +1 -1
- package/dist/telemetry/maestro-event-bus.js +42 -81
- package/dist/telemetry/maestro-event-bus.js.map +1 -1
- package/dist/telemetry/maestro-platform-replay-fixture.d.ts.map +1 -1
- package/dist/telemetry/maestro-platform-replay-fixture.js +1 -3
- package/dist/telemetry/maestro-platform-replay-fixture.js.map +1 -1
- package/dist/telemetry.d.ts.map +1 -1
- package/dist/telemetry.js +54 -43
- package/dist/telemetry.js.map +1 -1
- package/dist/theme/theme-loader.d.ts.map +1 -1
- package/dist/theme/theme-loader.js +1 -3
- package/dist/theme/theme-loader.js.map +1 -1
- package/dist/tools/apply-patch.d.ts.map +1 -1
- package/dist/tools/apply-patch.js +76 -8
- package/dist/tools/apply-patch.js.map +1 -1
- package/dist/tools/diff-preview.d.ts.map +1 -1
- package/dist/tools/diff-preview.js +10 -1
- package/dist/tools/diff-preview.js.map +1 -1
- package/dist/tools/edit.d.ts.map +1 -1
- package/dist/tools/edit.js +17 -0
- package/dist/tools/edit.js.map +1 -1
- package/dist/tools/write.d.ts.map +1 -1
- package/dist/tools/write.js +9 -0
- package/dist/tools/write.js.map +1 -1
- package/dist/undo/tracker.d.ts +5 -0
- package/dist/undo/tracker.d.ts.map +1 -1
- package/dist/undo/tracker.js +13 -0
- package/dist/undo/tracker.js.map +1 -1
- package/dist/utils/fs.d.ts +1 -1
- package/dist/utils/fs.d.ts.map +1 -1
- package/dist/utils/fs.js +29 -2
- package/dist/utils/fs.js.map +1 -1
- package/dist/utils/git-stash.d.ts.map +1 -1
- package/dist/utils/git-stash.js +15 -8
- package/dist/utils/git-stash.js.map +1 -1
- package/dist/utils/json.d.ts +11 -0
- package/dist/utils/json.d.ts.map +1 -1
- package/dist/utils/json.js +9 -0
- package/dist/utils/json.js.map +1 -1
- package/dist/utils/shell-env.d.ts.map +1 -1
- package/dist/utils/shell-env.js +2 -0
- package/dist/utils/shell-env.js.map +1 -1
- package/dist/utils/url-extractor-git.d.ts +26 -0
- package/dist/utils/url-extractor-git.d.ts.map +1 -0
- package/dist/utils/url-extractor-git.js +259 -0
- package/dist/utils/url-extractor-git.js.map +1 -0
- package/dist/utils/url-extractor.d.ts.map +1 -1
- package/dist/utils/url-extractor.js +23 -251
- package/dist/utils/url-extractor.js.map +1 -1
- package/dist/version.json +2 -2
- package/dist/web-server.d.ts.map +1 -1
- package/dist/web-server.js +2 -5
- package/dist/web-server.js.map +1 -1
- package/package.json +310 -306
- package/skills/incident-triage/SKILL.md +19 -1
- package/skills/install-code-review/SKILL.md +69 -0
- package/skills/security-review/SKILL.md +68 -0
- package/skills/security-review/reference/rubric.md +85 -0
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hosted-runner-drain.js","sourceRoot":"","sources":["../../../src/server/handlers/hosted-runner-drain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EACN,0BAA0B,EAC1B,gCAAgC,EAChC,yBAAyB,EAEzB,yBAAyB,EACzB,iCAAiC,EACjC,oBAAoB,EACpB,sBAAsB,EACtB,6BAA6B,EAC7B,0BAA0B,EAC1B,WAAW,GACX,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAGxE,OAAO,EACN,oCAAoC,EAEpC,6BAA6B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEtE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,wBAAwB,GACpC,0CAA0C,CAAC;AAE5C,MAAM,CAAC,MAAM,oCAAoC,GAChD,gCAAgC,CAAC;AAElC,MAAM,CAAC,MAAM,uCAAuC,GACnD,4CAA4C,CAAC;AAE9C,MAAM,CAAC,MAAM,sCAAsC,GAClD,oCAAoC,CAAC;AAEtC,MAAM,CAAC,MAAM,qCAAqC,GACjD,0CAA0C,CAAC;AAE5C,MAAM,CAAC,MAAM,uCAAuC,GACnD,4CAA4C,CAAC;AAE9C,MAAM,CAAC,MAAM,wCAAwC,GACpD,6CAA6C,CAAC;AAE/C,MAAM,CAAN,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACvC,mDAAmB,CAAA;IACnB,2DAA2B,CAAA;AAC5B,CAAC,EAHW,4BAA4B,KAA5B,4BAA4B,QAGvC;AAED,MAAM,CAAN,IAAY,mCAIX;AAJD,WAAY,mCAAmC;IAC9C,8DAAuB,CAAA;IACvB,wDAAiB,CAAA;IACjB,0DAAmB,CAAA;AACpB,CAAC,EAJW,mCAAmC,KAAnC,mCAAmC,QAI9C;AAED,MAAM,CAAN,IAAY,wCAIX;AAJD,WAAY,wCAAwC;IACnD,yDAAa,CAAA;IACb,mEAAuB,CAAA;IACvB,2DAAe,CAAA;AAChB,CAAC,EAJW,wCAAwC,KAAxC,wCAAwC,QAInD;AAED,MAAM,CAAN,IAAY,oCAEX;AAFD,WAAY,oCAAoC;IAC/C,iFAAyC,CAAA;AAC1C,CAAC,EAFW,oCAAoC,KAApC,oCAAoC,QAE/C;AAED,MAAM,CAAN,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACvC,wEAAwC,CAAA;IACxC,oEAAoC,CAAA;AACrC,CAAC,EAHW,4BAA4B,KAA5B,4BAA4B,QAGvC;AAED,MAAM,CAAN,IAAY,iCAGX;AAHD,WAAY,iCAAiC;IAC5C,6EAAwC,CAAA;IACxC,4EAAuC,CAAA;AACxC,CAAC,EAHW,iCAAiC,KAAjC,iCAAiC,QAG5C;AAsDD,MAAM,6BAA8B,SAAQ,KAAK;IAUhD,YAAY,OAAe,EAAE,OAAuC;QACnE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IACxD,CAAC;CACD;AAyKD,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACpD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,8BAA8B,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,KAAK,8BAA8B,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,KAAK,wBAAwB,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,IAAa;IAEb,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,OAAO;QACN,MAAM,EACL,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;YAClC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC;QAC7C,WAAW,EACV,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC;YAC9C,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC;QAC7C,WAAW,EACV,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC;KAClD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,oBAAoB,CAC5B,eAAuB,EACvB,WAAmB;IAEnB,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACnE,OAAO,GAAG,WAAW,IAAI,aAAa,OAAO,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,oBAAoB,CAClC,YAAiC;IAEjC,IAAI,CAAC;QACJ,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,iDAAiD,CACjD,CAAC;QACH,CAAC;QACD,OAAO,aAAa,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDACC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,EAAE,CACF,CAAC;IACH,CAAC;AACF,CAAC;AAED,KAAK,UAAU,2BAA2B,CACzC,aAAqB,EACrB,WAA0C;IAE1C,MAAM,SAAS,GAAG,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC;YACpC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YAChB,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACjC,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,+BAA+B,KAAK,KACnC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,GAAG,CACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,qDAAqD,KAAK,EAAE,CAC5D,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC;YACV,KAAK;YACL,IAAI,EAAE,QAAQ;YACd,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,GAAG;YACvD,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE;gBAC3B,CAAC,CAAC,wCAAwC,CAAC,SAAS;gBACpD,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE;oBAClB,CAAC,CAAC,wCAAwC,CAAC,IAAI;oBAC/C,CAAC,CAAC,wCAAwC,CAAC,KAAK;SAClD,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CACvB,aAAqB,EACrB,IAAuB;IAEvB,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACrC,KAAK,EACL,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,EAC9B;YACC,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI;SACb,CACD,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,MAAM,IAAI,SAAS,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,eAAe,CAC7B,aAAqB;IAErB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClD,SAAS,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,SAAS,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAC/D,SAAS,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;KACnD,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO;QACN,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC;KACtB,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CACjC,SAAiB,EACjB,aAAqB,EACrB,OAAgD;IAEhD,MAAM,KAAK,GAAG,0BAA0B,EAAE,CAAC;IAC3C,KAAK,CAAC,gBAAgB;QACrB,OAAO,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;IACvD,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,GAAG,GAAG,aAAa,CAAC;IAC1B,KAAK,CAAC,QAAQ,GAAG,YAAY,CAAC;IAC9B,KAAK,CAAC,KAAK,GAAG,0BAA0B,CAAC;IACzC,KAAK,CAAC,QAAQ;QACb,OAAO,CAAC,YAAY,KAAK,mCAAmC,CAAC,SAAS,CAAC;IACxE,KAAK,CAAC,WAAW;QAChB,OAAO,CAAC,YAAY,KAAK,mCAAmC,CAAC,SAAS;YACrE,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,CAAC,YAAY,KAAK,mCAAmC,CAAC,MAAM;gBACpE,CAAC,CAAC,kDAAkD;gBACpD,CAAC,CAAC,kDAAkD,CAAC;IACxD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;QACjC,KAAK,CAAC,eAAe,GAAG,UAAU,CAAC;IACpC,CAAC;IACD,OAAO;QACN,eAAe,EAAE,OAAO,CAAC,gBAAgB,IAAI,yBAAyB;QACtE,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC;QAC3B,SAAS,EAAE,IAAI;QACf,KAAK;KACL,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC;IACxC,OAAO;QACN,cAAc,EAAE,sCAAsC;QACtD,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE;YACX,sBAAsB,EAAE,UAAU;YAClC,gBAAgB,EAAE,QAAQ;YAC1B,gBAAgB,EAAE,UAAU;YAC5B,YAAY,EAAE,UAAU;SACxB;QACD,SAAS,EAAE;YACV,oCAAoC,EAAE;gBACrC,kBAAkB;gBAClB,cAAc;aACd;YACD,mBAAmB,EAAE;gBACpB,sBAAsB;gBACtB,cAAc;gBACd,eAAe;gBACf,wBAAwB;gBACxB,iBAAiB;aACjB;SACD;KACD,CAAC;AACH,CAAC;AAED,SAAS,kCAAkC,CAAC,KAM3C;IACA,OAAO;QACN,gBAAgB,EAAE,wCAAwC;QAC1D,OAAO,EAAE,eAAe;QACxB,wBAAwB,EAAE,KAAK,CAAC,YAAY,CAAC,eAAe;QAC5D,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe;YACrC,CAAC,CAAC,EAAE,wBAAwB,EAAE,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;QACN,iBAAiB,EAAE,OAAO,CAAC,GAAG;QAC9B,oBAAoB,EAAE;YACrB,gBAAgB,EAAE,oCAAoC;YACtD,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK;YAChC,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;YAC1C,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,gBAAgB;gBACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,gBAAgB,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACN,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS;SACzC;QACD,uBAAuB,EAAE,wCAAwC;QACjE,qBAAqB,EAAE,KAAK,CAAC,YAAY;QACzC,aAAa,EAAE;YACd,4BAA4B,KAAK,CAAC,YAAY,CAAC,eAAe,iBAAiB;YAC/E,+BAA+B,KAAK,CAAC,gBAAgB,WACpD,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,CACzB,EAAE;SACF;KACD,CAAC;AACH,CAAC;AAED,SAAS,iCAAiC,CAAC,KAY1C;IACA,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,oBAAoB,IAAI,EAAE,CAAC;IAC9D,OAAO;QACN,gBAAgB,EAAE,uCAAuC;QACzD,UAAU,EAAE,uCAAuC;QACnD,iBAAiB,EAAE,KAAK,CAAC,YAAY,CAAC,eAAe;QACrD,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW;YACjC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU;YAChC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACN,kBAAkB,EAAE,KAAK,CAAC,gBAAgB;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;QAChD,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,yBAAyB,EAAE,uCAAuC;QAClE,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,eAAe,EAAE;YAChB,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,gBAAgB;YACvD,6BAA6B,EAC5B,KAAK,CAAC,cAAc,CAAC,6BAA6B;YACnD,iBAAiB,EAAE,KAAK,CAAC,cAAc,CAAC,iBAAiB;YACzD,kBAAkB,EAAE,KAAK,CAAC,cAAc,CAAC,kBAAkB;YAC3D,qBAAqB,EAAE,KAAK,CAAC,cAAc,CAAC,qBAAqB;YACjE,8BAA8B,EAC7B,KAAK,CAAC,cAAc,CAAC,4BAA4B,CAAC,MAAM;YACzD,8BAA8B,EAC7B,KAAK,CAAC,cAAc,CAAC,4BAA4B,CAAC,MAAM;YACzD,2BAA2B,EAC1B,KAAK,CAAC,cAAc,CAAC,yBAAyB,CAAC,MAAM;YACtD,yBAAyB,EAAE,KAAK,CAAC,MAAM;YACvC,4BAA4B,EAC3B,KAAK,CAAC,cAAc,CAAC,4BAA4B;YAClD,4BAA4B,EAC3B,KAAK,CAAC,cAAc,CAAC,4BAA4B;YAClD,yBAAyB,EAAE,KAAK,CAAC,cAAc,CAAC,yBAAyB;YACzE,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D;QACD,kBAAkB,EAAE;YACnB,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,CAAC,gBAAgB;YAC1D,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,OAAO;YACxC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,wBAAwB;gBACnD,CAAC,CAAC;oBACA,wBAAwB,EACvB,KAAK,CAAC,iBAAiB,CAAC,wBAAwB;iBACjD;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,iBAAiB;YAC5D,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,oBAAoB;gBAC/C,CAAC,CAAC;oBACA,+BAA+B,EAC9B,KAAK,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,UAAU;iBACxD;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,qBAAqB,EAAE,KAAK,CAAC,iBAAiB,CAAC,qBAAqB;SACpE;QACD,SAAS,EAAE;YACV,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,cAAc;YACpD,iCAAiC,EAChC,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,sBAAsB;YACxD,2BAA2B,EAC1B,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,gBAAgB;YAClD,8CAA8C,EAC7C,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,oCAAoC;SACrE;QACD,aAAa,EAAE;YACd,4BAA4B,KAAK,CAAC,YAAY,CAAC,eAAe,iBAAiB;YAC/E,+BAA+B,KAAK,CAAC,gBAAgB,QAAQ;YAC7D,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU;gBAChC,CAAC,CAAC,CAAC,sBAAsB,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;gBACzD,CAAC,CAAC,EAAE,CAAC;SACN;KACD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,mCAAmC,CAC3C,MAKC,EACD,KAAuD;IAEvD,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO;IACR,CAAC;IACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,iCAAiC,CAAC;QACpD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM;KACN,CAAC,EAAE,CAAC;QACJ,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;AACF,CAAC;AAED,SAAS,oBAAoB,CAC5B,IAAa,EACb,WAAwB,EACxB,SAAsB,EACtB,gBAAgB,GAAG,KAAK;IAExB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,gBAAgB,CAAC;IAC3D,MAAM,aAAa,GAClB,QAAQ,CAAC,KAAK,CAAC;QACf,CAAC,KAAK,CAAC,aAAa,KAAK,gCAAgC;YACxD,KAAK,CAAC,cAAc,KAAK,gCAAgC,CAAC,CAAC;IAC7D,IAAI,CAAC,gBAAgB,IAAI,CAAC,aAAa,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,WAAW,CACnC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,CACtC,EAAE,CAAC;QACH,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,WAAW,CACjC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,mBAAmB,CAClD,EAAE,CAAC;QACH,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC;QAC3D,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YACnD,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,EAAE,EAAE,CAAC;YACP,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,SAAS;YACV,CAAC;YACD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,YAAY,CAAC;YAChE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAClD,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC;YACzD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,EAAE,CAAC;gBAC9C,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,gBAAgB,IAAI,aAAa,CAAC;AAC1C,CAAC;AAED,SAAS,iCAAiC,CACzC,QAAiC;IAEjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAG/B,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACrD,kBAAkB,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC;IACD,MAAM,cAAc,GAAG;QACtB,GAAG,KAAK,CAAC,aAAa;QACtB,GAAG,KAAK,CAAC,iBAAiB;QAC1B,GAAG,KAAK,CAAC,oBAAoB;QAC7B,GAAG,KAAK,CAAC,wBAAwB;QACjC,GAAG,KAAK,CAAC,mBAAmB;QAC5B,GAAG,KAAK,CAAC,oBAAoB;KAC7B,CAAC;IACF,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAAU,CAAC;IACpD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,MAAM,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC;QACxE,MAAM,gBAAgB,GAAG,oBAAoB,CAC5C,MAAM,CAAC,IAAI,EACX,WAAW,EACX,SAAS,EACT,mBAAmB,CACnB,CAAC;QACF,IAAI,mBAAmB,IAAI,gBAAgB,EAAE,CAAC;YAC7C,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9C,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrC,mCAAmC,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACjE,CAAC;IACF,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC;YAC5D,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClE,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACvB,mCAAmC,CAClC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EACtD,kBAAkB,CAClB,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACzE,oBAAoB,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CACrE,CAAC;IACF,MAAM,4BAA4B,GAAG,WAAW,CAAC,MAAM,CACtD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CACrD,CAAC,MAAM,CAAC;IACT,MAAM,uBAAuB,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CACxD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAC3D,CAAC,MAAM,CAAC;IACT,MAAM,wBAAwB,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAC1D,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CACtD,CAAC,MAAM,CAAC;IACT,MAAM,yBAAyB,GAAG,IAAI,CAAC,GAAG,CACzC,gBAAgB,CAAC,IAAI,EACrB,WAAW,CAAC,MAAM,CAClB,CAAC;IACF,OAAO;QACN,gBAAgB,EAAE,qCAAqC;QACvD,6BAA6B,EAAE,gCAAgC;QAC/D,iBAAiB,EAChB,WAAW,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,uBAAuB,GAAG,4BAA4B;YACxD,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM;QAC7B,kBAAkB,EACjB,WAAW,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,wBAAwB,GAAG,yBAAyB;YACtD,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM;QAC9B,qBAAqB,EACpB,KAAK,CAAC,iBAAiB,CAAC,MAAM;YAC9B,KAAK,CAAC,oBAAoB,CAAC,MAAM;YACjC,KAAK,CAAC,wBAAwB,CAAC,MAAM;YACrC,KAAK,CAAC,mBAAmB,CAAC,MAAM;YAChC,KAAK,CAAC,oBAAoB,CAAC,MAAM;QAClC,4BAA4B,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE;QAC1D,4BAA4B,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE;QACrD,yBAAyB,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE;QAChD,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,KAA6B,EAC7B,OAAiC;IAEjC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IACtD,MAAM,aAAa,GAAG,6BAA6B,CAClD,YAAY,EACZ,eAAe,CACf,CAAC;IACF,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,EAAE,CAAC;IAClD,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,OAAO,CAC3B,aAAa,EACb,YAAY,CAAC,YAAY,IAAI,2BAA2B,CACxD,CAAC;IACF,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CACxB,YAAY,EACZ,oBAAoB,CAAC,YAAY,CAAC,eAAe,EAAE,WAAW,CAAC,CAC/D,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,2BAA2B,CACpD,aAAa,EACb,KAAK,CAAC,WAAW,CACjB,CAAC;IACF,MAAM,eAAe,GACpB,YAAY,CAAC,sBAAsB;QACnC,YAAY,CAAC,0BAA0B,CAAC;IACzC,MAAM,gBAAgB,GAAG,eAAe,IAAI,YAAY,CAAC,eAAe,CAAC;IAEzE,IAAI,MAAM,GAA4B,4BAA4B,CAAC,OAAO,CAAC;IAC3E,IAAI,OAAO,GAA4C;QACtD,YAAY,EAAE,mCAAmC,CAAC,OAAO;QACzD,UAAU,EAAE,gBAAgB;KAC5B,CAAC;IACF,IAAI,eAAoD,CAAC;IACzD,IAAI,mBAEQ,CAAC;IAEb,IAAI,eAAe,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAI,CAAC;YACJ,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,eAAe,EAAE;gBACjE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,YAAY,EAAE,YAAY;aAC1B,CAAC,CAAC;YACH,MAAM,sBAAsB,GAC3B,aAAa,EAAE,eAAe;gBAC9B,aAAa,EAAE,QAAQ,EAAE,eAAe,CAAC;YAC1C,MAAM,aAAa,GAClB,aAAa,EAAE,MAAM,IAAI,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC1D,OAAO,GAAG,aAAa;gBACtB,CAAC,CAAC;oBACA,YAAY,EAAE,mCAAmC,CAAC,SAAS;oBAC3D,UAAU,EAAE,aAAa,CAAC,SAAS;oBACnC,GAAG,CAAC,aAAa,CAAC,WAAW;wBAC5B,CAAC,CAAC,EAAE,YAAY,EAAE,aAAa,CAAC,WAAW,EAAE;wBAC7C,CAAC,CAAC,EAAE,CAAC;oBACN,GAAG,CAAC,sBAAsB;wBACzB,CAAC,CAAC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE;wBAC9C,CAAC,CAAC,EAAE,CAAC;oBACN,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE;gBACF,CAAC,CAAC;oBACA,YAAY,EAAE,mCAAmC,CAAC,OAAO;oBACzD,UAAU,EAAE,eAAe;iBAC3B,CAAC;YACJ,eAAe,GAAG,aAAa,EAAE,QAAQ,CAAC;YAC1C,mBAAmB,GAAG,aAAa,EAAE,mBAAmB,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,4BAA4B,CAAC,WAAW,CAAC;YAClD,MAAM,kBAAkB,GACvB,KAAK,YAAY,6BAA6B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,eAAe,GAAG,kBAAkB,EAAE,QAAQ,CAAC;YAC/C,mBAAmB,GAAG,kBAAkB,EAAE,mBAAmB,CAAC;YAC9D,OAAO,GAAG;gBACT,YAAY,EAAE,mCAAmC,CAAC,MAAM;gBACxD,UAAU,EAAE,kBAAkB,EAAE,SAAS,IAAI,eAAe;gBAC5D,GAAG,CAAC,kBAAkB,EAAE,WAAW;oBAClC,CAAC,CAAC,EAAE,YAAY,EAAE,kBAAkB,CAAC,WAAW,EAAE;oBAClD,CAAC,CAAC,EAAE,CAAC;gBACN,GAAG,CAAC,kBAAkB,EAAE,eAAe;oBACtC,CAAC,CAAC,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,eAAe,EAAE;oBAC1D,CAAC,CAAC,EAAE,CAAC;gBACN,GAAG,CAAC,kBAAkB,EAAE,MAAM,KAAK,SAAS;oBAC3C,CAAC,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,EAAE;oBACvC,CAAC,CAAC,EAAE,CAAC;gBACN,KAAK,EAAE,sBAAsB,CAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD;aACD,CAAC;QACH,CAAC;IACF,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,QAAQ,GACb,eAAe;QACf,yBAAyB,CAAC,gBAAgB,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,iCAAiC,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,gCAAgC,EAAE,CAAC;IAC3D,MAAM,iBAAiB,GAAG,kCAAkC,CAAC;QAC5D,YAAY;QACZ,gBAAgB;QAChB,YAAY,EAAE,YAAY;QAC1B,OAAO;QACP,aAAa;KACb,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,iCAAiC,CAAC;QAC1D,YAAY;QACZ,MAAM;QACN,gBAAgB;QAChB,SAAS,EAAE,WAAW;QACtB,YAAY,EAAE,YAAY;QAC1B,OAAO;QACP,iBAAiB;QACjB,cAAc;QACd,eAAe;QACf,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAiC;QAC9C,gBAAgB,EAAE,uCAAuC;QACzD,iBAAiB,EAAE,YAAY,CAAC,eAAe;QAC/C,GAAG,CAAC,YAAY,CAAC,WAAW;YAC3B,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,WAAW,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,YAAY,CAAC,UAAU;YAC1B,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,UAAU,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;QACN,kBAAkB,EAAE,gBAAgB;QACpC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,UAAU,EAAE,WAAW;QACvB,cAAc,EAAE,aAAa;QAC7B,OAAO;QACP,gBAAgB,EAAE;YACjB,IAAI,EAAE,oCAAoC,CAAC,iBAAiB;YAC5D,KAAK,EAAE,WAAW;SAClB;QACD,kBAAkB,EAAE,iBAAiB;QACrC,eAAe,EAAE,cAAc;QAC/B,iBAAiB,EAAE,gBAAgB;QACnC,QAAQ;QACR,gBAAgB,EAAE,eAAe;QACjC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvB,CAAC;IAEF,IAAI,CAAC;QACJ,MAAM,SAAS,CACd,YAAY,EACZ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACxC,MAAM,CACN,CAAC;QACF,YAAY,CAAC,SAAS,GAAG;YACxB,MAAM;YACN,YAAY,EAAE,YAAY;YAC1B,SAAS,EAAE,WAAW;YACtB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,oDACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,EAAE,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC;YAC3B,MAAM,EAAE,4BAA4B,CAAC,WAAW;YAChD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,OAAO,CAAC,YAAY;YACjC,YAAY,EAAE,YAAY;YAC1B,gBAAgB,EAAE,iCAAiC,CAAC;gBACnD,YAAY;gBACZ,MAAM,EAAE,4BAA4B,CAAC,WAAW;gBAChD,gBAAgB;gBAChB,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,YAAY;gBAC1B,OAAO;gBACP,iBAAiB;gBACjB,cAAc;gBACd,eAAe;gBACf,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC9B,CAAC;YACF,YAAY;SACZ,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACb,CAAC;IACD,MAAM,mBAAmB,EAAE,CAAC;QAC3B,MAAM;QACN,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,OAAO,CAAC,YAAY;QACjC,YAAY,EAAE,YAAY;QAC1B,gBAAgB;QAChB,YAAY,EAAE,OAAO,CAAC,KAAK;KAC3B,CAAC,CAAC;IAEH,OAAO;QACN,MAAM;QACN,iBAAiB,EAAE,YAAY,CAAC,eAAe;QAC/C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,aAAa,EAAE,YAAY;QAC3B,QAAQ;KACR,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAChC,OAAwC,EACxC,SAAiB,EACjB,SAA2C;IAE3C,MAAM,OAAO,GACZ,OAAO,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAC7C,MAAM,mBAAmB,GAAG,KAAK,EAChC,KAA2C,EAC1C,EAAE;QACH,MAAM,OAAO,CAAC,6BAA6B,CAAC;YAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAC/B,CAAC,CAAC,+BAA+B,KAAK,CAAC,YAAY,EAAE;gBACrD,CAAC,CAAC,SAAS;SACZ,CAAC,CAAC;IACJ,CAAC,CAAC;IACF,IAAI,CAAC;QACJ,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,6BAA6B,CACtC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACtD;YACC,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,WAAW;YACX,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ;YACR,mBAAmB;SACnB,CACD,CAAC;IACH,CAAC;IACD,OAAO;QACN,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,WAAW;QACX,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ;QACR,mBAAmB;KACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,OAAwC,EACxC,UAA+C,EAAE;IAEjD,OAAO,iBAAiB,CACvB;QACC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,4BAA4B,CAAC,eAAe;QACtE,WAAW,EACV,OAAO,CAAC,WAAW;YACnB,iCAAiC,CAAC,gBAAgB;KACnD,EACD;QACC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CACrC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;QACjD,GAAG,EAAE,OAAO,CAAC,GAAG;KAChB,CACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,YAAY,CAA0B,GAAG,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE;QAC7C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CACrC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;KACjD,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,KAAK,EAAE,iCAAiC;SACxC,EACD,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;QACF,OAAO;IACR,CAAC;IAED,QAAQ,CACP,GAAG,EACH,MAAM,CAAC,MAAM,KAAK,4BAA4B,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACtE;QACC,gBAAgB,EAAE,oCAAoC;QACtD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;KACzB,EACD,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;AACH,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { mkdir, realpath, stat, writeFile } from \"node:fs/promises\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { isAbsolute, join, relative, resolve } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport {\n\tCODEX_SUBAGENT_TOOL_PREFIX,\n\tCODEX_SUBAGENT_WORK_GRAPH_SCHEMA,\n\tHEADLESS_PROTOCOL_VERSION,\n\ttype HeadlessCodexSubagentContinuityEdge,\n\tactiveCodexSubagentStatus,\n\tbuildCodexSubagentContinuityEdges,\n\tcodexSubagentEdgeKey,\n\tcodexSubagentOperation,\n\tcodexSubagentStatusIsTerminal,\n\tcreateHeadlessRuntimeState,\n\tstringArray,\n} from \"../../cli/headless-protocol.js\";\nimport { sanitizeWithStaticMask } from \"../../utils/secret-redactor.js\";\nimport type { HostedRunnerContext, WebServerContext } from \"../app-context.js\";\nimport type { HeadlessRuntimeSnapshot } from \"../headless-runtime-service.js\";\nimport {\n\tHOSTED_RUNNER_LEASE_PROTOCOL_VERSION,\n\ttype HostedRunnerLeaseSnapshot,\n\tmarkHostedRunnerLeaseDraining,\n} from \"../hosted-runner-lease.js\";\nimport { ApiError, readJsonBody, sendJson } from \"../server-utils.js\";\n\nconst execFileAsync = promisify(execFile);\n\nexport const HOSTED_RUNNER_DRAIN_PATH =\n\t\"/.well-known/evalops/remote-runner/drain\";\n\nexport const HOSTED_RUNNER_DRAIN_PROTOCOL_VERSION =\n\t\"evalops.remote-runner.drain.v1\";\n\nexport const HOSTED_RUNNER_SNAPSHOT_MANIFEST_VERSION =\n\t\"evalops.remote-runner.snapshot-manifest.v1\";\n\nexport const HOSTED_RUNNER_RETENTION_POLICY_VERSION =\n\t\"evalops.remote-runner.retention.v1\";\n\nexport const HOSTED_RUNNER_WORK_CONTINUITY_VERSION =\n\t\"evalops.remote-runner.work-continuity.v1\";\n\nexport const HOSTED_RUNNER_PLATFORM_EVIDENCE_VERSION =\n\t\"evalops.remote-runner.platform-evidence.v1\";\n\nexport const HOSTED_RUNNER_RUNTIME_CONTINUITY_VERSION =\n\t\"evalops.remote-runner.runtime-continuity.v1\";\n\nexport enum HostedRunnerDrainStatusValue {\n\tDrained = \"drained\",\n\tInterrupted = \"interrupted\",\n}\n\nexport enum HostedRunnerRuntimeFlushStatusValue {\n\tCompleted = \"completed\",\n\tFailed = \"failed\",\n\tSkipped = \"skipped\",\n}\n\nexport enum HostedRunnerWorkspaceExportPathTypeValue {\n\tFile = \"file\",\n\tDirectory = \"directory\",\n\tOther = \"other\",\n}\n\nexport enum HostedRunnerWorkspaceExportModeValue {\n\tLocalPathContract = \"local_path_contract\",\n}\n\nexport enum HostedRunnerDrainReasonValue {\n\tKubernetesPreStop = \"kubernetes_prestop\",\n\tProcessShutdown = \"process_shutdown\",\n}\n\nexport enum HostedRunnerDrainRequestedByValue {\n\tKubernetesPreStop = \"kubernetes_prestop\",\n\tMaestroWebServer = \"maestro_web_server\",\n}\n\nexport type HostedRunnerDrainStatus = HostedRunnerDrainStatusValue;\nexport type HostedRunnerRuntimeFlushStatus =\n\tHostedRunnerRuntimeFlushStatusValue;\nexport type HostedRunnerWorkspaceExportPathType =\n\tHostedRunnerWorkspaceExportPathTypeValue;\nexport type HostedRunnerWorkspaceExportMode =\n\tHostedRunnerWorkspaceExportModeValue;\nexport type HostedRunnerDrainReason = HostedRunnerDrainReasonValue | string;\nexport type HostedRunnerDrainRequestedBy =\n\t| HostedRunnerDrainRequestedByValue\n\t| string;\n\nexport interface HostedRunnerRetentionPolicy {\n\tpolicy_version: typeof HOSTED_RUNNER_RETENTION_POLICY_VERSION;\n\tmanaged_by: \"platform\";\n\tvisibility: {\n\t\tcontrol_plane_metadata: \"operator\";\n\t\tworkspace_export: \"tenant\";\n\t\truntime_snapshot: \"internal\";\n\t\truntime_logs: \"operator\";\n\t};\n\tredaction: {\n\t\trequired_before_external_persistence: Array<\n\t\t\t\"runtime_snapshot\" | \"runtime_logs\"\n\t\t>;\n\t\tforbidden_plaintext: Array<\n\t\t\t| \"provider_credentials\"\n\t\t\t| \"tool_secrets\"\n\t\t\t| \"attach_tokens\"\n\t\t\t| \"artifact_access_tokens\"\n\t\t\t| \"raw_environment\"\n\t\t>;\n\t};\n}\n\nexport interface HostedRunnerDrainInput {\n\treason?: HostedRunnerDrainReason;\n\trequestedBy?: HostedRunnerDrainRequestedBy;\n\texportPaths?: string[];\n}\n\nexport interface HostedRunnerRuntimeDrainResult {\n\tsessionId: string;\n\tsessionFile?: string;\n\tprotocolVersion?: string;\n\tcursor?: number;\n\tsnapshot?: HeadlessRuntimeSnapshot;\n\trecordPlatformDrain?: (\n\t\tinput: HostedRunnerPlatformDrainRecordInput,\n\t) => Promise<void>;\n}\n\nclass HostedRunnerRuntimeDrainError extends Error {\n\treadonly sessionId: string;\n\treadonly sessionFile?: string;\n\treadonly protocolVersion?: string;\n\treadonly cursor?: number;\n\treadonly snapshot?: HeadlessRuntimeSnapshot;\n\treadonly recordPlatformDrain?: (\n\t\tinput: HostedRunnerPlatformDrainRecordInput,\n\t) => Promise<void>;\n\n\tconstructor(message: string, runtime: HostedRunnerRuntimeDrainResult) {\n\t\tsuper(message);\n\t\tthis.name = \"HostedRunnerRuntimeDrainError\";\n\t\tthis.sessionId = runtime.sessionId;\n\t\tthis.sessionFile = runtime.sessionFile;\n\t\tthis.protocolVersion = runtime.protocolVersion;\n\t\tthis.cursor = runtime.cursor;\n\t\tthis.snapshot = runtime.snapshot;\n\t\tthis.recordPlatformDrain = runtime.recordPlatformDrain;\n\t}\n}\n\nexport interface HostedRunnerWorkspaceExportPath {\n\tinput: string;\n\tpath: string;\n\trelative_path: string;\n\ttype: HostedRunnerWorkspaceExportPathType;\n}\n\nexport interface HostedRunnerSnapshotManifest {\n\tprotocol_version: typeof HOSTED_RUNNER_SNAPSHOT_MANIFEST_VERSION;\n\trunner_session_id: string;\n\tworkspace_id?: string;\n\tagent_run_id?: string;\n\tmaestro_session_id: string;\n\treason?: string;\n\trequested_by?: string;\n\tcreated_at: string;\n\tworkspace_root: string;\n\truntime: {\n\t\tflush_status: HostedRunnerRuntimeFlushStatus;\n\t\terror?: string;\n\t\tsession_id: string;\n\t\tsession_file?: string;\n\t\tprotocol_version?: string;\n\t\tcursor?: number;\n\t};\n\tworkspace_export: {\n\t\tmode: HostedRunnerWorkspaceExportMode;\n\t\tpaths: HostedRunnerWorkspaceExportPath[];\n\t};\n\truntime_continuity: HostedRunnerRuntimeContinuity;\n\twork_continuity: HostedRunnerWorkContinuity;\n\tplatform_evidence: HostedRunnerPlatformEvidence;\n\tsnapshot: HeadlessRuntimeSnapshot;\n\tretention_policy: HostedRunnerRetentionPolicy;\n\tgit?: {\n\t\tcommit?: string;\n\t\tbranch?: string;\n\t\tdirty?: boolean;\n\t};\n}\n\nexport interface HostedRunnerRuntimeContinuity {\n\tprotocol_version: typeof HOSTED_RUNNER_RUNTIME_CONTINUITY_VERSION;\n\thandoff: \"drain_restore\";\n\tsource_runner_session_id: string;\n\tsource_owner_instance_id?: string;\n\tsource_process_id: number;\n\tsource_runtime_lease?: {\n\t\tprotocol_version: typeof HOSTED_RUNNER_LEASE_PROTOCOL_VERSION;\n\t\tstate: HostedRunnerLeaseSnapshot[\"state\"];\n\t\tgeneration: number;\n\t\tmaestro_session_id?: string;\n\t\tupdated_at: string;\n\t};\n\trestore_environment_key: \"MAESTRO_REMOTE_RUNNER_RESTORE_MANIFEST\";\n\trestore_manifest_path: string;\n\tevidence_refs: string[];\n}\n\nexport interface HostedRunnerWorkContinuity {\n\tprotocol_version: typeof HOSTED_RUNNER_WORK_CONTINUITY_VERSION;\n\tcodex_subagent_schema_version: typeof CODEX_SUBAGENT_WORK_GRAPH_SCHEMA;\n\tactive_tool_count: number;\n\ttracked_tool_count: number;\n\tpending_request_count: number;\n\tcodex_subagent_tool_call_ids: string[];\n\tcodex_subagent_child_run_ids: string[];\n\tcodex_subagent_thread_ids: string[];\n\tcodex_subagent_edges?: HeadlessCodexSubagentContinuityEdge[];\n}\n\nexport interface HostedRunnerPlatformEvidence {\n\tprotocol_version: typeof HOSTED_RUNNER_PLATFORM_EVIDENCE_VERSION;\n\tevent_type: \"hosted_runner_drain_manifest_recorded\";\n\trunner_session_id: string;\n\tworkspace_id?: string;\n\tagent_run_id?: string;\n\tmaestro_session_id: string;\n\tstatus: HostedRunnerDrainStatus;\n\truntime_flush_status: HostedRunnerRuntimeFlushStatus;\n\tmanifest_path: string;\n\tmanifest_protocol_version: typeof HOSTED_RUNNER_SNAPSHOT_MANIFEST_VERSION;\n\tcreated_at: string;\n\treason?: string;\n\trequested_by?: string;\n\twork_continuity: {\n\t\tprotocol_version: typeof HOSTED_RUNNER_WORK_CONTINUITY_VERSION;\n\t\tcodex_subagent_schema_version: typeof CODEX_SUBAGENT_WORK_GRAPH_SCHEMA;\n\t\tactive_tool_count: number;\n\t\ttracked_tool_count: number;\n\t\tpending_request_count: number;\n\t\tcodex_subagent_tool_call_count: number;\n\t\tcodex_subagent_child_run_count: number;\n\t\tcodex_subagent_thread_count: number;\n\t\tcodex_subagent_edge_count: number;\n\t\tcodex_subagent_tool_call_ids: string[];\n\t\tcodex_subagent_child_run_ids: string[];\n\t\tcodex_subagent_thread_ids: string[];\n\t\tcodex_subagent_edges?: HeadlessCodexSubagentContinuityEdge[];\n\t};\n\truntime_continuity: {\n\t\tprotocol_version: typeof HOSTED_RUNNER_RUNTIME_CONTINUITY_VERSION;\n\t\thandoff: \"drain_restore\";\n\t\tsource_owner_instance_id?: string;\n\t\tsource_process_id: number;\n\t\tsource_runtime_lease_generation?: number;\n\t\trestore_manifest_path: string;\n\t};\n\tretention: {\n\t\tpolicy_version: typeof HOSTED_RUNNER_RETENTION_POLICY_VERSION;\n\t\tcontrol_plane_metadata_visibility: \"operator\";\n\t\truntime_snapshot_visibility: \"internal\";\n\t\tredaction_required_before_external_persistence: Array<\n\t\t\t\"runtime_snapshot\" | \"runtime_logs\"\n\t\t>;\n\t};\n\tevidence_refs: string[];\n}\n\nexport interface HostedRunnerPlatformDrainRecordInput {\n\tstatus: HostedRunnerDrainStatus;\n\treason?: string;\n\trequestedBy?: string;\n\tflushStatus: HostedRunnerRuntimeFlushStatus;\n\tmanifestPath: string;\n\tplatformEvidence: HostedRunnerPlatformEvidence;\n\terrorMessage?: string;\n}\n\nexport interface HostedRunnerDrainResult {\n\tstatus: HostedRunnerDrainStatus;\n\trunner_session_id: string;\n\treason?: string;\n\trequested_by?: string;\n\tmanifest_path: string;\n\tmanifest: HostedRunnerSnapshotManifest;\n}\n\nexport interface DrainHostedRunnerOptions {\n\thostedRunner?: HostedRunnerContext;\n\tdrainRuntime?: (\n\t\tsessionId: string,\n\t\tterminal: HostedRunnerRuntimeTerminalInput,\n\t) => Promise<HostedRunnerRuntimeDrainResult | null>;\n\tnow?: () => Date;\n}\n\ninterface HostedRunnerDrainRuntimeContext {\n\thostedRunner?: HostedRunnerContext;\n\theadlessRuntimeService: Pick<\n\t\tWebServerContext[\"headlessRuntimeService\"],\n\t\t\"getRuntimeBySessionId\"\n\t>;\n}\n\nexport interface DrainHostedRunnerForShutdownOptions {\n\tnow?: () => Date;\n\treason?: HostedRunnerDrainReason;\n\trequestedBy?: HostedRunnerDrainRequestedBy;\n}\n\ninterface HostedRunnerRuntimeTerminalInput {\n\treason?: HostedRunnerDrainReason;\n\trequestedBy?: HostedRunnerDrainRequestedBy;\n\tmanifestPath?: string;\n}\n\nfunction getString(value: unknown, field: string): string | undefined {\n\tif (value === undefined || value === null) {\n\t\treturn undefined;\n\t}\n\tif (typeof value !== \"string\") {\n\t\tthrow new ApiError(400, `${field} must be a string`);\n\t}\n\tconst trimmed = value.trim();\n\treturn trimmed || undefined;\n}\n\nfunction getStringArray(value: unknown, field: string): string[] | undefined {\n\tif (value === undefined || value === null) {\n\t\treturn undefined;\n\t}\n\tif (!Array.isArray(value)) {\n\t\tthrow new ApiError(400, `${field} must be an array of strings`);\n\t}\n\tconst strings = value.map((entry, index) => {\n\t\tif (typeof entry !== \"string\" || !entry.trim()) {\n\t\t\tthrow new ApiError(400, `${field}[${index}] must be a non-empty string`);\n\t\t}\n\t\tif (entry.includes(\"\\0\")) {\n\t\t\tthrow new ApiError(400, `${field}[${index}] contains a null byte`);\n\t\t}\n\t\treturn entry.trim();\n\t});\n\treturn strings.length ? strings : undefined;\n}\n\nexport function parseHostedRunnerDrainInput(\n\tbody: unknown,\n): HostedRunnerDrainInput {\n\tif (body === undefined || body === null) {\n\t\treturn {};\n\t}\n\tif (typeof body !== \"object\" || Array.isArray(body)) {\n\t\tthrow new ApiError(400, \"Drain payload must be a JSON object\");\n\t}\n\tconst record = body as Record<string, unknown>;\n\treturn {\n\t\treason:\n\t\t\tgetString(record.reason, \"reason\") ??\n\t\t\tgetString(record.stop_reason, \"stop_reason\"),\n\t\trequestedBy:\n\t\t\tgetString(record.requested_by, \"requested_by\") ??\n\t\t\tgetString(record.requestedBy, \"requestedBy\"),\n\t\texportPaths:\n\t\t\tgetStringArray(record.export_paths, \"export_paths\") ??\n\t\t\tgetStringArray(record.exportPaths, \"exportPaths\"),\n\t};\n}\n\nfunction isWithinPath(root: string, target: string): boolean {\n\tconst rel = relative(root, target);\n\treturn rel === \"\" || (!rel.startsWith(\"..\") && !isAbsolute(rel));\n}\n\nfunction safeManifestFileName(\n\trunnerSessionId: string,\n\trequestedAt: string,\n): string {\n\tconst safeSession = runnerSessionId.replace(/[^A-Za-z0-9_.-]/g, \"_\");\n\tconst safeTimestamp = requestedAt.replace(/[^A-Za-z0-9_.-]/g, \"_\");\n\treturn `${safeSession}-${safeTimestamp}.json`;\n}\n\nasync function resolveWorkspaceRoot(\n\thostedRunner: HostedRunnerContext,\n): Promise<string> {\n\ttry {\n\t\tconst workspaceRoot = await realpath(hostedRunner.workspaceRoot);\n\t\tconst stats = await stat(workspaceRoot);\n\t\tif (!stats.isDirectory()) {\n\t\t\tthrow new ApiError(\n\t\t\t\t503,\n\t\t\t\t\"Hosted runner workspace root is not a directory\",\n\t\t\t);\n\t\t}\n\t\treturn workspaceRoot;\n\t} catch (error) {\n\t\tif (error instanceof ApiError) {\n\t\t\tthrow error;\n\t\t}\n\t\tthrow new ApiError(\n\t\t\t503,\n\t\t\t`Hosted runner workspace root is unavailable: ${\n\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t}`,\n\t\t);\n\t}\n}\n\nasync function resolveWorkspaceExportPaths(\n\tworkspaceRoot: string,\n\texportPaths: readonly string[] | undefined,\n): Promise<HostedRunnerWorkspaceExportPath[]> {\n\tconst requested = exportPaths?.length ? exportPaths : [\".\"];\n\tconst paths: HostedRunnerWorkspaceExportPath[] = [];\n\tfor (const input of requested) {\n\t\tconst logicalPath = isAbsolute(input)\n\t\t\t? resolve(input)\n\t\t\t: resolve(workspaceRoot, input);\n\t\tlet realPath: string;\n\t\ttry {\n\t\t\trealPath = await realpath(logicalPath);\n\t\t} catch (error) {\n\t\t\tthrow new ApiError(\n\t\t\t\t400,\n\t\t\t\t`Export path is unavailable: ${input} (${\n\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t})`,\n\t\t\t);\n\t\t}\n\t\tif (!isWithinPath(workspaceRoot, realPath)) {\n\t\t\tthrow new ApiError(\n\t\t\t\t400,\n\t\t\t\t`Export path escapes hosted runner workspace root: ${input}`,\n\t\t\t);\n\t\t}\n\t\tconst pathStat = await stat(realPath);\n\t\tpaths.push({\n\t\t\tinput,\n\t\t\tpath: realPath,\n\t\t\trelative_path: relative(workspaceRoot, realPath) || \".\",\n\t\t\ttype: pathStat.isDirectory()\n\t\t\t\t? HostedRunnerWorkspaceExportPathTypeValue.Directory\n\t\t\t\t: pathStat.isFile()\n\t\t\t\t\t? HostedRunnerWorkspaceExportPathTypeValue.File\n\t\t\t\t\t: HostedRunnerWorkspaceExportPathTypeValue.Other,\n\t\t});\n\t}\n\treturn paths;\n}\n\nasync function gitOutput(\n\tworkspaceRoot: string,\n\targs: readonly string[],\n): Promise<string | undefined> {\n\ttry {\n\t\tconst { stdout } = await execFileAsync(\n\t\t\t\"git\",\n\t\t\t[\"-C\", workspaceRoot, ...args],\n\t\t\t{\n\t\t\t\tencoding: \"utf8\",\n\t\t\t\ttimeout: 1000,\n\t\t\t},\n\t\t);\n\t\tconst output = stdout.trim();\n\t\treturn output || undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nasync function collectGitState(\n\tworkspaceRoot: string,\n): Promise<HostedRunnerSnapshotManifest[\"git\"] | undefined> {\n\tconst [commit, branch, status] = await Promise.all([\n\t\tgitOutput(workspaceRoot, [\"rev-parse\", \"HEAD\"]),\n\t\tgitOutput(workspaceRoot, [\"rev-parse\", \"--abbrev-ref\", \"HEAD\"]),\n\t\tgitOutput(workspaceRoot, [\"status\", \"--porcelain\"]),\n\t]);\n\tif (!commit && !branch && status === undefined) {\n\t\treturn undefined;\n\t}\n\treturn {\n\t\t...(commit ? { commit } : {}),\n\t\t...(branch && branch !== \"HEAD\" ? { branch } : {}),\n\t\tdirty: Boolean(status),\n\t};\n}\n\nfunction buildHostedRunnerSnapshot(\n\tsessionId: string,\n\tworkspaceRoot: string,\n\truntime: HostedRunnerSnapshotManifest[\"runtime\"],\n): HeadlessRuntimeSnapshot {\n\tconst state = createHeadlessRuntimeState();\n\tstate.protocol_version =\n\t\truntime.protocol_version ?? HEADLESS_PROTOCOL_VERSION;\n\tstate.session_id = sessionId;\n\tstate.cwd = workspaceRoot;\n\tstate.provider = \"typescript\";\n\tstate.model = \"typescript-hosted-runner\";\n\tstate.is_ready =\n\t\truntime.flush_status === HostedRunnerRuntimeFlushStatusValue.Completed;\n\tstate.last_status =\n\t\truntime.flush_status === HostedRunnerRuntimeFlushStatusValue.Completed\n\t\t\t? \"Drained\"\n\t\t\t: runtime.flush_status === HostedRunnerRuntimeFlushStatusValue.Failed\n\t\t\t\t? \"Drain interrupted before runtime flush completed\"\n\t\t\t\t: \"Drain skipped: no runtime activity was available\";\n\tif (runtime.error) {\n\t\tstate.last_error = runtime.error;\n\t\tstate.last_error_type = \"protocol\";\n\t}\n\treturn {\n\t\tprotocolVersion: runtime.protocol_version ?? HEADLESS_PROTOCOL_VERSION,\n\t\tsession_id: sessionId,\n\t\tcursor: runtime.cursor ?? 0,\n\t\tlast_init: null,\n\t\tstate,\n\t};\n}\n\nfunction buildHostedRunnerRetentionPolicy(): HostedRunnerRetentionPolicy {\n\treturn {\n\t\tpolicy_version: HOSTED_RUNNER_RETENTION_POLICY_VERSION,\n\t\tmanaged_by: \"platform\",\n\t\tvisibility: {\n\t\t\tcontrol_plane_metadata: \"operator\",\n\t\t\tworkspace_export: \"tenant\",\n\t\t\truntime_snapshot: \"internal\",\n\t\t\truntime_logs: \"operator\",\n\t\t},\n\t\tredaction: {\n\t\t\trequired_before_external_persistence: [\n\t\t\t\t\"runtime_snapshot\",\n\t\t\t\t\"runtime_logs\",\n\t\t\t],\n\t\t\tforbidden_plaintext: [\n\t\t\t\t\"provider_credentials\",\n\t\t\t\t\"tool_secrets\",\n\t\t\t\t\"attach_tokens\",\n\t\t\t\t\"artifact_access_tokens\",\n\t\t\t\t\"raw_environment\",\n\t\t\t],\n\t\t},\n\t};\n}\n\nfunction buildHostedRunnerRuntimeContinuity(input: {\n\thostedRunner: HostedRunnerContext;\n\tmaestroSessionId: string;\n\tmanifestPath: string;\n\truntime: HostedRunnerSnapshotManifest[\"runtime\"];\n\tleaseSnapshot: HostedRunnerLeaseSnapshot;\n}): HostedRunnerRuntimeContinuity {\n\treturn {\n\t\tprotocol_version: HOSTED_RUNNER_RUNTIME_CONTINUITY_VERSION,\n\t\thandoff: \"drain_restore\",\n\t\tsource_runner_session_id: input.hostedRunner.runnerSessionId,\n\t\t...(input.hostedRunner.ownerInstanceId\n\t\t\t? { source_owner_instance_id: input.hostedRunner.ownerInstanceId }\n\t\t\t: {}),\n\t\tsource_process_id: process.pid,\n\t\tsource_runtime_lease: {\n\t\t\tprotocol_version: HOSTED_RUNNER_LEASE_PROTOCOL_VERSION,\n\t\t\tstate: input.leaseSnapshot.state,\n\t\t\tgeneration: input.leaseSnapshot.generation,\n\t\t\t...(input.leaseSnapshot.maestroSessionId\n\t\t\t\t? { maestro_session_id: input.leaseSnapshot.maestroSessionId }\n\t\t\t\t: {}),\n\t\t\tupdated_at: input.leaseSnapshot.updatedAt,\n\t\t},\n\t\trestore_environment_key: \"MAESTRO_REMOTE_RUNNER_RESTORE_MANIFEST\",\n\t\trestore_manifest_path: input.manifestPath,\n\t\tevidence_refs: [\n\t\t\t`remote-runner://sessions/${input.hostedRunner.runnerSessionId}/drain#snapshot`,\n\t\t\t`maestro://headless/sessions/${input.maestroSessionId}#cursor:${\n\t\t\t\tinput.runtime.cursor ?? 0\n\t\t\t}`,\n\t\t],\n\t};\n}\n\nfunction buildHostedRunnerPlatformEvidence(input: {\n\thostedRunner: HostedRunnerContext;\n\tstatus: HostedRunnerDrainStatus;\n\tmaestroSessionId: string;\n\tcreatedAt: string;\n\tmanifestPath: string;\n\truntime: HostedRunnerSnapshotManifest[\"runtime\"];\n\truntimeContinuity: HostedRunnerRuntimeContinuity;\n\tworkContinuity: HostedRunnerWorkContinuity;\n\tretentionPolicy: HostedRunnerRetentionPolicy;\n\treason?: string;\n\trequestedBy?: string;\n}): HostedRunnerPlatformEvidence {\n\tconst edges = input.workContinuity.codex_subagent_edges ?? [];\n\treturn {\n\t\tprotocol_version: HOSTED_RUNNER_PLATFORM_EVIDENCE_VERSION,\n\t\tevent_type: \"hosted_runner_drain_manifest_recorded\",\n\t\trunner_session_id: input.hostedRunner.runnerSessionId,\n\t\t...(input.hostedRunner.workspaceId\n\t\t\t? { workspace_id: input.hostedRunner.workspaceId }\n\t\t\t: {}),\n\t\t...(input.hostedRunner.agentRunId\n\t\t\t? { agent_run_id: input.hostedRunner.agentRunId }\n\t\t\t: {}),\n\t\tmaestro_session_id: input.maestroSessionId,\n\t\tstatus: input.status,\n\t\truntime_flush_status: input.runtime.flush_status,\n\t\tmanifest_path: input.manifestPath,\n\t\tmanifest_protocol_version: HOSTED_RUNNER_SNAPSHOT_MANIFEST_VERSION,\n\t\tcreated_at: input.createdAt,\n\t\t...(input.reason ? { reason: input.reason } : {}),\n\t\t...(input.requestedBy ? { requested_by: input.requestedBy } : {}),\n\t\twork_continuity: {\n\t\t\tprotocol_version: input.workContinuity.protocol_version,\n\t\t\tcodex_subagent_schema_version:\n\t\t\t\tinput.workContinuity.codex_subagent_schema_version,\n\t\t\tactive_tool_count: input.workContinuity.active_tool_count,\n\t\t\ttracked_tool_count: input.workContinuity.tracked_tool_count,\n\t\t\tpending_request_count: input.workContinuity.pending_request_count,\n\t\t\tcodex_subagent_tool_call_count:\n\t\t\t\tinput.workContinuity.codex_subagent_tool_call_ids.length,\n\t\t\tcodex_subagent_child_run_count:\n\t\t\t\tinput.workContinuity.codex_subagent_child_run_ids.length,\n\t\t\tcodex_subagent_thread_count:\n\t\t\t\tinput.workContinuity.codex_subagent_thread_ids.length,\n\t\t\tcodex_subagent_edge_count: edges.length,\n\t\t\tcodex_subagent_tool_call_ids:\n\t\t\t\tinput.workContinuity.codex_subagent_tool_call_ids,\n\t\t\tcodex_subagent_child_run_ids:\n\t\t\t\tinput.workContinuity.codex_subagent_child_run_ids,\n\t\t\tcodex_subagent_thread_ids: input.workContinuity.codex_subagent_thread_ids,\n\t\t\t...(edges.length > 0 ? { codex_subagent_edges: edges } : {}),\n\t\t},\n\t\truntime_continuity: {\n\t\t\tprotocol_version: input.runtimeContinuity.protocol_version,\n\t\t\thandoff: input.runtimeContinuity.handoff,\n\t\t\t...(input.runtimeContinuity.source_owner_instance_id\n\t\t\t\t? {\n\t\t\t\t\t\tsource_owner_instance_id:\n\t\t\t\t\t\t\tinput.runtimeContinuity.source_owner_instance_id,\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\tsource_process_id: input.runtimeContinuity.source_process_id,\n\t\t\t...(input.runtimeContinuity.source_runtime_lease\n\t\t\t\t? {\n\t\t\t\t\t\tsource_runtime_lease_generation:\n\t\t\t\t\t\t\tinput.runtimeContinuity.source_runtime_lease.generation,\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\trestore_manifest_path: input.runtimeContinuity.restore_manifest_path,\n\t\t},\n\t\tretention: {\n\t\t\tpolicy_version: input.retentionPolicy.policy_version,\n\t\t\tcontrol_plane_metadata_visibility:\n\t\t\t\tinput.retentionPolicy.visibility.control_plane_metadata,\n\t\t\truntime_snapshot_visibility:\n\t\t\t\tinput.retentionPolicy.visibility.runtime_snapshot,\n\t\t\tredaction_required_before_external_persistence:\n\t\t\t\tinput.retentionPolicy.redaction.required_before_external_persistence,\n\t\t},\n\t\tevidence_refs: [\n\t\t\t`remote-runner://sessions/${input.hostedRunner.runnerSessionId}/drain#manifest`,\n\t\t\t`maestro://headless/sessions/${input.maestroSessionId}#drain`,\n\t\t\t...(input.hostedRunner.agentRunId\n\t\t\t\t? [`platform-agent-run:${input.hostedRunner.agentRunId}`]\n\t\t\t\t: []),\n\t\t],\n\t};\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn Boolean(value && typeof value === \"object\" && !Array.isArray(value));\n}\n\nfunction collectCodexSubagentEdgesFromSource(\n\tsource: {\n\t\tcall_id: string;\n\t\ttool_execution_id?: string;\n\t\ttool: string;\n\t\targs?: unknown;\n\t},\n\tedges: Map<string, HeadlessCodexSubagentContinuityEdge>,\n): void {\n\tconst operation = codexSubagentOperation(source.tool);\n\tif (!operation) {\n\t\treturn;\n\t}\n\tconst status = activeCodexSubagentStatus(operation);\n\tfor (const edge of buildCodexSubagentContinuityEdges({\n\t\tcall_id: source.call_id,\n\t\ttool_execution_id: source.tool_execution_id,\n\t\ttool: source.tool,\n\t\targs: source.args,\n\t\tstatus,\n\t})) {\n\t\tedges.set(codexSubagentEdgeKey(edge), edge);\n\t}\n}\n\nfunction collectCodexWorkArgs(\n\targs: unknown,\n\tchildRunIds: Set<string>,\n\tthreadIds: Set<string>,\n\tincludeLooseArgs = false,\n): boolean {\n\tif (!isRecord(args)) {\n\t\treturn false;\n\t}\n\tconst graph = args.codexWorkGraph ?? args.codex_work_graph;\n\tconst hasCodexGraph =\n\t\tisRecord(graph) &&\n\t\t(graph.schemaVersion === CODEX_SUBAGENT_WORK_GRAPH_SCHEMA ||\n\t\t\tgraph.schema_version === CODEX_SUBAGENT_WORK_GRAPH_SCHEMA);\n\tif (!includeLooseArgs && !hasCodexGraph) {\n\t\treturn false;\n\t}\n\tfor (const childRunId of stringArray(\n\t\targs.childRunIds ?? args.child_run_ids,\n\t)) {\n\t\tchildRunIds.add(childRunId);\n\t}\n\tfor (const threadId of stringArray(\n\t\targs.receiverThreadIds ?? args.receiver_thread_ids,\n\t)) {\n\t\tthreadIds.add(threadId);\n\t}\n\tif (isRecord(graph)) {\n\t\tconst graphChildRuns = graph.childRuns ?? graph.child_runs;\n\t\tfor (const childRun of Array.isArray(graphChildRuns)\n\t\t\t? graphChildRuns\n\t\t\t: []) {\n\t\t\tif (!isRecord(childRun)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst childRunId = childRun.childRunId ?? childRun.child_run_id;\n\t\t\tif (typeof childRunId === \"string\" && childRunId) {\n\t\t\t\tchildRunIds.add(childRunId);\n\t\t\t}\n\t\t\tconst threadId = childRun.threadId ?? childRun.thread_id;\n\t\t\tif (typeof threadId === \"string\" && threadId) {\n\t\t\t\tthreadIds.add(threadId);\n\t\t\t}\n\t\t}\n\t}\n\treturn includeLooseArgs || hasCodexGraph;\n}\n\nfunction collectHostedRunnerWorkContinuity(\n\tsnapshot: HeadlessRuntimeSnapshot,\n): HostedRunnerWorkContinuity {\n\tconst state = snapshot.state;\n\tconst codexToolCallIds = new Set<string>();\n\tconst childRunIds = new Set<string>();\n\tconst threadIds = new Set<string>();\n\tconst codexSubagentEdges = new Map<\n\t\tstring,\n\t\tHeadlessCodexSubagentContinuityEdge\n\t>();\n\tfor (const edge of state.codex_subagent_edges ?? []) {\n\t\tcodexSubagentEdges.set(codexSubagentEdgeKey(edge), edge);\n\t\tif (edge.spawn_tool_call_id) {\n\t\t\tcodexToolCallIds.add(edge.spawn_tool_call_id);\n\t\t}\n\t\tif (edge.wait_tool_call_id) {\n\t\t\tcodexToolCallIds.add(edge.wait_tool_call_id);\n\t\t}\n\t\tif (edge.child_run_id) {\n\t\t\tchildRunIds.add(edge.child_run_id);\n\t\t}\n\t\tif (edge.thread_id) {\n\t\t\tthreadIds.add(edge.thread_id);\n\t\t}\n\t}\n\tconst trackedSources = [\n\t\t...state.tracked_tools,\n\t\t...state.pending_approvals,\n\t\t...state.pending_client_tools,\n\t\t...state.pending_mcp_elicitations,\n\t\t...state.pending_user_inputs,\n\t\t...state.pending_tool_retries,\n\t];\n\tconst codexTrackedSourceCallIds = new Set<string>();\n\tfor (const source of trackedSources) {\n\t\tconst tool = source.tool;\n\t\tconst isCodexSubagentTool = tool.startsWith(CODEX_SUBAGENT_TOOL_PREFIX);\n\t\tconst hasCodexWorkArgs = collectCodexWorkArgs(\n\t\t\tsource.args,\n\t\t\tchildRunIds,\n\t\t\tthreadIds,\n\t\t\tisCodexSubagentTool,\n\t\t);\n\t\tif (isCodexSubagentTool || hasCodexWorkArgs) {\n\t\t\tcodexTrackedSourceCallIds.add(source.call_id);\n\t\t\tcodexToolCallIds.add(source.call_id);\n\t\t\tcollectCodexSubagentEdgesFromSource(source, codexSubagentEdges);\n\t\t}\n\t}\n\tfor (const activeTool of state.active_tools) {\n\t\tif (activeTool.tool.startsWith(CODEX_SUBAGENT_TOOL_PREFIX)) {\n\t\t\tconst hasTrackedSource = codexToolCallIds.has(activeTool.call_id);\n\t\t\tcodexToolCallIds.add(activeTool.call_id);\n\t\t\tif (!hasTrackedSource) {\n\t\t\t\tcollectCodexSubagentEdgesFromSource(\n\t\t\t\t\t{ call_id: activeTool.call_id, tool: activeTool.tool },\n\t\t\t\t\tcodexSubagentEdges,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\tconst sortedEdges = [...codexSubagentEdges.values()].sort((left, right) =>\n\t\tcodexSubagentEdgeKey(left).localeCompare(codexSubagentEdgeKey(right)),\n\t);\n\tconst activeCodexSubagentEdgeCount = sortedEdges.filter(\n\t\t(edge) => !codexSubagentStatusIsTerminal(edge.status),\n\t).length;\n\tconst nonCodexActiveToolCount = state.active_tools.filter(\n\t\t(tool) => !tool.tool.startsWith(CODEX_SUBAGENT_TOOL_PREFIX),\n\t).length;\n\tconst nonCodexTrackedToolCount = state.tracked_tools.filter(\n\t\t(tool) => !codexTrackedSourceCallIds.has(tool.call_id),\n\t).length;\n\tconst trackedCodexSubagentCount = Math.max(\n\t\tcodexToolCallIds.size,\n\t\tsortedEdges.length,\n\t);\n\treturn {\n\t\tprotocol_version: HOSTED_RUNNER_WORK_CONTINUITY_VERSION,\n\t\tcodex_subagent_schema_version: CODEX_SUBAGENT_WORK_GRAPH_SCHEMA,\n\t\tactive_tool_count:\n\t\t\tsortedEdges.length > 0\n\t\t\t\t? nonCodexActiveToolCount + activeCodexSubagentEdgeCount\n\t\t\t\t: state.active_tools.length,\n\t\ttracked_tool_count:\n\t\t\tsortedEdges.length > 0\n\t\t\t\t? nonCodexTrackedToolCount + trackedCodexSubagentCount\n\t\t\t\t: state.tracked_tools.length,\n\t\tpending_request_count:\n\t\t\tstate.pending_approvals.length +\n\t\t\tstate.pending_client_tools.length +\n\t\t\tstate.pending_mcp_elicitations.length +\n\t\t\tstate.pending_user_inputs.length +\n\t\t\tstate.pending_tool_retries.length,\n\t\tcodex_subagent_tool_call_ids: [...codexToolCallIds].sort(),\n\t\tcodex_subagent_child_run_ids: [...childRunIds].sort(),\n\t\tcodex_subagent_thread_ids: [...threadIds].sort(),\n\t\t...(sortedEdges.length > 0 ? { codex_subagent_edges: sortedEdges } : {}),\n\t};\n}\n\nexport async function drainHostedRunner(\n\tinput: HostedRunnerDrainInput,\n\toptions: DrainHostedRunnerOptions,\n): Promise<HostedRunnerDrainResult | null> {\n\tconst hostedRunner = options.hostedRunner;\n\tif (!hostedRunner?.enabled || !hostedRunner.runnerSessionId) {\n\t\treturn null;\n\t}\n\n\tconst requestedAtDate = options.now?.() ?? new Date();\n\tconst leaseSnapshot = markHostedRunnerLeaseDraining(\n\t\thostedRunner,\n\t\trequestedAtDate,\n\t);\n\tconst requestedAt = requestedAtDate.toISOString();\n\tconst workspaceRoot = await resolveWorkspaceRoot(hostedRunner);\n\tconst snapshotRoot = resolve(\n\t\tworkspaceRoot,\n\t\thostedRunner.snapshotRoot ?? \".maestro/runner-snapshots\",\n\t);\n\tawait mkdir(snapshotRoot, { recursive: true });\n\tconst snapshotPath = join(\n\t\tsnapshotRoot,\n\t\tsafeManifestFileName(hostedRunner.runnerSessionId, requestedAt),\n\t);\n\tconst exportPaths = await resolveWorkspaceExportPaths(\n\t\tworkspaceRoot,\n\t\tinput.exportPaths,\n\t);\n\tconst activeSessionId =\n\t\thostedRunner.activeMaestroSessionId ??\n\t\thostedRunner.configuredMaestroSessionId;\n\tconst maestroSessionId = activeSessionId ?? hostedRunner.runnerSessionId;\n\n\tlet status: HostedRunnerDrainStatus = HostedRunnerDrainStatusValue.Drained;\n\tlet runtime: HostedRunnerSnapshotManifest[\"runtime\"] = {\n\t\tflush_status: HostedRunnerRuntimeFlushStatusValue.Skipped,\n\t\tsession_id: maestroSessionId,\n\t};\n\tlet runtimeSnapshot: HeadlessRuntimeSnapshot | undefined;\n\tlet recordPlatformDrain:\n\t\t| ((input: HostedRunnerPlatformDrainRecordInput) => Promise<void>)\n\t\t| undefined;\n\n\tif (activeSessionId && options.drainRuntime) {\n\t\ttry {\n\t\t\tconst runtimeResult = await options.drainRuntime(activeSessionId, {\n\t\t\t\treason: input.reason,\n\t\t\t\trequestedBy: input.requestedBy,\n\t\t\t\tmanifestPath: snapshotPath,\n\t\t\t});\n\t\t\tconst runtimeProtocolVersion =\n\t\t\t\truntimeResult?.protocolVersion ??\n\t\t\t\truntimeResult?.snapshot?.protocolVersion;\n\t\t\tconst runtimeCursor =\n\t\t\t\truntimeResult?.cursor ?? runtimeResult?.snapshot?.cursor;\n\t\t\truntime = runtimeResult\n\t\t\t\t? {\n\t\t\t\t\t\tflush_status: HostedRunnerRuntimeFlushStatusValue.Completed,\n\t\t\t\t\t\tsession_id: runtimeResult.sessionId,\n\t\t\t\t\t\t...(runtimeResult.sessionFile\n\t\t\t\t\t\t\t? { session_file: runtimeResult.sessionFile }\n\t\t\t\t\t\t\t: {}),\n\t\t\t\t\t\t...(runtimeProtocolVersion\n\t\t\t\t\t\t\t? { protocol_version: runtimeProtocolVersion }\n\t\t\t\t\t\t\t: {}),\n\t\t\t\t\t\t...(runtimeCursor !== undefined ? { cursor: runtimeCursor } : {}),\n\t\t\t\t\t}\n\t\t\t\t: {\n\t\t\t\t\t\tflush_status: HostedRunnerRuntimeFlushStatusValue.Skipped,\n\t\t\t\t\t\tsession_id: activeSessionId,\n\t\t\t\t\t};\n\t\t\truntimeSnapshot = runtimeResult?.snapshot;\n\t\t\trecordPlatformDrain = runtimeResult?.recordPlatformDrain;\n\t\t} catch (error) {\n\t\t\tstatus = HostedRunnerDrainStatusValue.Interrupted;\n\t\t\tconst interruptedRuntime =\n\t\t\t\terror instanceof HostedRunnerRuntimeDrainError ? error : undefined;\n\t\t\truntimeSnapshot = interruptedRuntime?.snapshot;\n\t\t\trecordPlatformDrain = interruptedRuntime?.recordPlatformDrain;\n\t\t\truntime = {\n\t\t\t\tflush_status: HostedRunnerRuntimeFlushStatusValue.Failed,\n\t\t\t\tsession_id: interruptedRuntime?.sessionId ?? activeSessionId,\n\t\t\t\t...(interruptedRuntime?.sessionFile\n\t\t\t\t\t? { session_file: interruptedRuntime.sessionFile }\n\t\t\t\t\t: {}),\n\t\t\t\t...(interruptedRuntime?.protocolVersion\n\t\t\t\t\t? { protocol_version: interruptedRuntime.protocolVersion }\n\t\t\t\t\t: {}),\n\t\t\t\t...(interruptedRuntime?.cursor !== undefined\n\t\t\t\t\t? { cursor: interruptedRuntime.cursor }\n\t\t\t\t\t: {}),\n\t\t\t\terror: sanitizeWithStaticMask(\n\t\t\t\t\terror instanceof Error ? error.message : String(error),\n\t\t\t\t),\n\t\t\t};\n\t\t}\n\t}\n\n\tconst git = await collectGitState(workspaceRoot);\n\tconst snapshot =\n\t\truntimeSnapshot ??\n\t\tbuildHostedRunnerSnapshot(maestroSessionId, workspaceRoot, runtime);\n\tconst workContinuity = collectHostedRunnerWorkContinuity(snapshot);\n\tconst retentionPolicy = buildHostedRunnerRetentionPolicy();\n\tconst runtimeContinuity = buildHostedRunnerRuntimeContinuity({\n\t\thostedRunner,\n\t\tmaestroSessionId,\n\t\tmanifestPath: snapshotPath,\n\t\truntime,\n\t\tleaseSnapshot,\n\t});\n\tconst platformEvidence = buildHostedRunnerPlatformEvidence({\n\t\thostedRunner,\n\t\tstatus,\n\t\tmaestroSessionId,\n\t\tcreatedAt: requestedAt,\n\t\tmanifestPath: snapshotPath,\n\t\truntime,\n\t\truntimeContinuity,\n\t\tworkContinuity,\n\t\tretentionPolicy,\n\t\treason: input.reason,\n\t\trequestedBy: input.requestedBy,\n\t});\n\tconst manifest: HostedRunnerSnapshotManifest = {\n\t\tprotocol_version: HOSTED_RUNNER_SNAPSHOT_MANIFEST_VERSION,\n\t\trunner_session_id: hostedRunner.runnerSessionId,\n\t\t...(hostedRunner.workspaceId\n\t\t\t? { workspace_id: hostedRunner.workspaceId }\n\t\t\t: {}),\n\t\t...(hostedRunner.agentRunId\n\t\t\t? { agent_run_id: hostedRunner.agentRunId }\n\t\t\t: {}),\n\t\tmaestro_session_id: maestroSessionId,\n\t\t...(input.reason ? { reason: input.reason } : {}),\n\t\t...(input.requestedBy ? { requested_by: input.requestedBy } : {}),\n\t\tcreated_at: requestedAt,\n\t\tworkspace_root: workspaceRoot,\n\t\truntime,\n\t\tworkspace_export: {\n\t\t\tmode: HostedRunnerWorkspaceExportModeValue.LocalPathContract,\n\t\t\tpaths: exportPaths,\n\t\t},\n\t\truntime_continuity: runtimeContinuity,\n\t\twork_continuity: workContinuity,\n\t\tplatform_evidence: platformEvidence,\n\t\tsnapshot,\n\t\tretention_policy: retentionPolicy,\n\t\t...(git ? { git } : {}),\n\t};\n\n\ttry {\n\t\tawait writeFile(\n\t\t\tsnapshotPath,\n\t\t\t`${JSON.stringify(manifest, null, 2)}\\n`,\n\t\t\t\"utf8\",\n\t\t);\n\t\thostedRunner.lastDrain = {\n\t\t\tstatus,\n\t\t\tmanifestPath: snapshotPath,\n\t\t\tdrainedAt: requestedAt,\n\t\t\t...(input.reason ? { reason: input.reason } : {}),\n\t\t\t...(input.requestedBy ? { requestedBy: input.requestedBy } : {}),\n\t\t};\n\t} catch (error) {\n\t\tconst errorMessage = `Hosted runner drain manifest persistence failed: ${\n\t\t\terror instanceof Error ? error.message : String(error)\n\t\t}`;\n\t\tawait recordPlatformDrain?.({\n\t\t\tstatus: HostedRunnerDrainStatusValue.Interrupted,\n\t\t\treason: input.reason,\n\t\t\trequestedBy: input.requestedBy,\n\t\t\tflushStatus: runtime.flush_status,\n\t\t\tmanifestPath: snapshotPath,\n\t\t\tplatformEvidence: buildHostedRunnerPlatformEvidence({\n\t\t\t\thostedRunner,\n\t\t\t\tstatus: HostedRunnerDrainStatusValue.Interrupted,\n\t\t\t\tmaestroSessionId,\n\t\t\t\tcreatedAt: requestedAt,\n\t\t\t\tmanifestPath: snapshotPath,\n\t\t\t\truntime,\n\t\t\t\truntimeContinuity,\n\t\t\t\tworkContinuity,\n\t\t\t\tretentionPolicy,\n\t\t\t\treason: input.reason,\n\t\t\t\trequestedBy: input.requestedBy,\n\t\t\t}),\n\t\t\terrorMessage,\n\t\t});\n\t\tthrow error;\n\t}\n\tawait recordPlatformDrain?.({\n\t\tstatus,\n\t\treason: input.reason,\n\t\trequestedBy: input.requestedBy,\n\t\tflushStatus: runtime.flush_status,\n\t\tmanifestPath: snapshotPath,\n\t\tplatformEvidence,\n\t\terrorMessage: runtime.error,\n\t});\n\n\treturn {\n\t\tstatus,\n\t\trunner_session_id: hostedRunner.runnerSessionId,\n\t\t...(input.reason ? { reason: input.reason } : {}),\n\t\t...(input.requestedBy ? { requested_by: input.requestedBy } : {}),\n\t\tmanifest_path: snapshotPath,\n\t\tmanifest,\n\t};\n}\n\nasync function drainActiveRuntime(\n\tcontext: HostedRunnerDrainRuntimeContext,\n\tsessionId: string,\n\t_terminal: HostedRunnerRuntimeTerminalInput,\n): Promise<HostedRunnerRuntimeDrainResult | null> {\n\tconst runtime =\n\t\tcontext.headlessRuntimeService.getRuntimeBySessionId(sessionId);\n\tif (!runtime) {\n\t\treturn null;\n\t}\n\tconst snapshot = runtime.getSnapshot();\n\tconst sessionFile = runtime.getSessionFile();\n\tconst recordPlatformDrain = async (\n\t\tinput: HostedRunnerPlatformDrainRecordInput,\n\t) => {\n\t\tawait runtime.recordHostedAgentRuntimeDrain({\n\t\t\tstatus: input.status,\n\t\t\treason: input.reason,\n\t\t\trequestedBy: input.requestedBy,\n\t\t\tflushStatus: input.flushStatus,\n\t\t\tmanifestPath: input.manifestPath,\n\t\t\tplatformEvidence: input.platformEvidence,\n\t\t\terrorMessage: input.errorMessage\n\t\t\t\t? `Hosted runner drain failed: ${input.errorMessage}`\n\t\t\t\t: undefined,\n\t\t});\n\t};\n\ttry {\n\t\tawait runtime.dispose();\n\t} catch (error) {\n\t\tthrow new HostedRunnerRuntimeDrainError(\n\t\t\terror instanceof Error ? error.message : String(error),\n\t\t\t{\n\t\t\t\tsessionId: snapshot.session_id,\n\t\t\t\tsessionFile,\n\t\t\t\tprotocolVersion: snapshot.protocolVersion,\n\t\t\t\tcursor: snapshot.cursor,\n\t\t\t\tsnapshot,\n\t\t\t\trecordPlatformDrain,\n\t\t\t},\n\t\t);\n\t}\n\treturn {\n\t\tsessionId: snapshot.session_id,\n\t\tsessionFile,\n\t\tprotocolVersion: snapshot.protocolVersion,\n\t\tcursor: snapshot.cursor,\n\t\tsnapshot,\n\t\trecordPlatformDrain,\n\t};\n}\n\nexport async function drainHostedRunnerForShutdown(\n\tcontext: HostedRunnerDrainRuntimeContext,\n\toptions: DrainHostedRunnerForShutdownOptions = {},\n): Promise<HostedRunnerDrainResult | null> {\n\treturn drainHostedRunner(\n\t\t{\n\t\t\treason: options.reason ?? HostedRunnerDrainReasonValue.ProcessShutdown,\n\t\t\trequestedBy:\n\t\t\t\toptions.requestedBy ??\n\t\t\t\tHostedRunnerDrainRequestedByValue.MaestroWebServer,\n\t\t},\n\t\t{\n\t\t\thostedRunner: context.hostedRunner,\n\t\t\tdrainRuntime: (sessionId, terminal) =>\n\t\t\t\tdrainActiveRuntime(context, sessionId, terminal),\n\t\t\tnow: options.now,\n\t\t},\n\t);\n}\n\nexport async function handleHostedRunnerDrain(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n): Promise<void> {\n\tres.setHeader(\"Cache-Control\", \"no-store\");\n\tconst body = await readJsonBody<Record<string, unknown>>(req, 64_000);\n\tconst input = parseHostedRunnerDrainInput(body);\n\tconst result = await drainHostedRunner(input, {\n\t\thostedRunner: context.hostedRunner,\n\t\tdrainRuntime: (sessionId, terminal) =>\n\t\t\tdrainActiveRuntime(context, sessionId, terminal),\n\t});\n\n\tif (!result) {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t404,\n\t\t\t{\n\t\t\t\terror: \"hosted runner drain unavailable\",\n\t\t\t},\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t\treturn;\n\t}\n\n\tsendJson(\n\t\tres,\n\t\tresult.status === HostedRunnerDrainStatusValue.Interrupted ? 503 : 200,\n\t\t{\n\t\t\tprotocol_version: HOSTED_RUNNER_DRAIN_PROTOCOL_VERSION,\n\t\t\tstatus: result.status,\n\t\t\trunner_session_id: result.runner_session_id,\n\t\t\trequested_by: result.requested_by,\n\t\t\treason: result.reason,\n\t\t\tmanifest_path: result.manifest_path,\n\t\t\tmanifest: result.manifest,\n\t\t},\n\t\tcontext.corsHeaders,\n\t\treq,\n\t);\n}\n"]}
|
|
1
|
+
{"version":3,"file":"hosted-runner-drain.js","sourceRoot":"","sources":["../../../src/server/handlers/hosted-runner-drain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EACN,0BAA0B,EAC1B,gCAAgC,EAChC,yBAAyB,EAEzB,yBAAyB,EACzB,iCAAiC,EACjC,oBAAoB,EACpB,sBAAsB,EACtB,6BAA6B,EAC7B,0BAA0B,EAC1B,WAAW,GACX,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAGxE,OAAO,EACN,oCAAoC,EAEpC,6BAA6B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEtE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,wBAAwB,GACpC,0CAA0C,CAAC;AAE5C,MAAM,CAAC,MAAM,oCAAoC,GAChD,gCAAgC,CAAC;AAElC,MAAM,CAAC,MAAM,uCAAuC,GACnD,4CAA4C,CAAC;AAE9C,MAAM,CAAC,MAAM,sCAAsC,GAClD,oCAAoC,CAAC;AAEtC,MAAM,CAAC,MAAM,qCAAqC,GACjD,0CAA0C,CAAC;AAE5C,MAAM,CAAC,MAAM,uCAAuC,GACnD,4CAA4C,CAAC;AAE9C,MAAM,CAAC,MAAM,wCAAwC,GACpD,6CAA6C,CAAC;AAE/C,MAAM,CAAN,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACvC,mDAAmB,CAAA;IACnB,2DAA2B,CAAA;AAC5B,CAAC,EAHW,4BAA4B,KAA5B,4BAA4B,QAGvC;AAED,MAAM,CAAN,IAAY,mCAIX;AAJD,WAAY,mCAAmC;IAC9C,8DAAuB,CAAA;IACvB,wDAAiB,CAAA;IACjB,0DAAmB,CAAA;AACpB,CAAC,EAJW,mCAAmC,KAAnC,mCAAmC,QAI9C;AAED,MAAM,CAAN,IAAY,wCAIX;AAJD,WAAY,wCAAwC;IACnD,yDAAa,CAAA;IACb,mEAAuB,CAAA;IACvB,2DAAe,CAAA;AAChB,CAAC,EAJW,wCAAwC,KAAxC,wCAAwC,QAInD;AAED,MAAM,CAAN,IAAY,oCAEX;AAFD,WAAY,oCAAoC;IAC/C,iFAAyC,CAAA;AAC1C,CAAC,EAFW,oCAAoC,KAApC,oCAAoC,QAE/C;AAED,MAAM,CAAN,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACvC,wEAAwC,CAAA;IACxC,oEAAoC,CAAA;AACrC,CAAC,EAHW,4BAA4B,KAA5B,4BAA4B,QAGvC;AAED,MAAM,CAAN,IAAY,iCAGX;AAHD,WAAY,iCAAiC;IAC5C,6EAAwC,CAAA;IACxC,4EAAuC,CAAA;AACxC,CAAC,EAHW,iCAAiC,KAAjC,iCAAiC,QAG5C;AAsDD,MAAM,6BAA8B,SAAQ,KAAK;IAUhD,YAAY,OAAe,EAAE,OAAuC;QACnE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IACxD,CAAC;CACD;AAyKD,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACpD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,8BAA8B,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,KAAK,8BAA8B,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,KAAK,wBAAwB,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,IAAa;IAEb,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,OAAO;QACN,MAAM,EACL,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;YAClC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC;QAC7C,WAAW,EACV,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC;YAC9C,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC;QAC7C,WAAW,EACV,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC;KAClD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,oBAAoB,CAC5B,eAAuB,EACvB,WAAmB;IAEnB,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACnE,OAAO,GAAG,WAAW,IAAI,aAAa,OAAO,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,oBAAoB,CAClC,YAAiC;IAEjC,IAAI,CAAC;QACJ,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,iDAAiD,CACjD,CAAC;QACH,CAAC;QACD,OAAO,aAAa,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDACC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,EAAE,CACF,CAAC;IACH,CAAC;AACF,CAAC;AAED,KAAK,UAAU,2BAA2B,CACzC,aAAqB,EACrB,WAA0C;IAE1C,MAAM,SAAS,GAAG,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC;YACpC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YAChB,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACjC,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,+BAA+B,KAAK,KACnC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,GAAG,CACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,qDAAqD,KAAK,EAAE,CAC5D,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC;YACV,KAAK;YACL,IAAI,EAAE,QAAQ;YACd,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,GAAG;YACvD,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE;gBAC3B,CAAC,CAAC,wCAAwC,CAAC,SAAS;gBACpD,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE;oBAClB,CAAC,CAAC,wCAAwC,CAAC,IAAI;oBAC/C,CAAC,CAAC,wCAAwC,CAAC,KAAK;SAClD,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CACvB,aAAqB,EACrB,IAAuB;IAEvB,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACrC,KAAK,EACL,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,EAC9B;YACC,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI;SACb,CACD,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,MAAM,IAAI,SAAS,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,eAAe,CAC7B,aAAqB;IAErB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClD,SAAS,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,SAAS,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAC/D,SAAS,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;KACnD,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO;QACN,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC;KACtB,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CACjC,SAAiB,EACjB,aAAqB,EACrB,OAAgD;IAEhD,MAAM,KAAK,GAAG,0BAA0B,EAAE,CAAC;IAC3C,KAAK,CAAC,gBAAgB;QACrB,OAAO,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;IACvD,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,GAAG,GAAG,aAAa,CAAC;IAC1B,KAAK,CAAC,QAAQ,GAAG,YAAY,CAAC;IAC9B,KAAK,CAAC,KAAK,GAAG,0BAA0B,CAAC;IACzC,KAAK,CAAC,QAAQ;QACb,OAAO,CAAC,YAAY,KAAK,mCAAmC,CAAC,SAAS,CAAC;IACxE,KAAK,CAAC,WAAW;QAChB,OAAO,CAAC,YAAY,KAAK,mCAAmC,CAAC,SAAS;YACrE,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,CAAC,YAAY,KAAK,mCAAmC,CAAC,MAAM;gBACpE,CAAC,CAAC,kDAAkD;gBACpD,CAAC,CAAC,kDAAkD,CAAC;IACxD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;QACjC,KAAK,CAAC,eAAe,GAAG,UAAU,CAAC;IACpC,CAAC;IACD,OAAO;QACN,eAAe,EAAE,OAAO,CAAC,gBAAgB,IAAI,yBAAyB;QACtE,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC;QAC3B,SAAS,EAAE,IAAI;QACf,KAAK;KACL,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC;IACxC,OAAO;QACN,cAAc,EAAE,sCAAsC;QACtD,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE;YACX,sBAAsB,EAAE,UAAU;YAClC,gBAAgB,EAAE,QAAQ;YAC1B,gBAAgB,EAAE,UAAU;YAC5B,YAAY,EAAE,UAAU;SACxB;QACD,SAAS,EAAE;YACV,oCAAoC,EAAE;gBACrC,kBAAkB;gBAClB,cAAc;aACd;YACD,mBAAmB,EAAE;gBACpB,sBAAsB;gBACtB,cAAc;gBACd,eAAe;gBACf,wBAAwB;gBACxB,iBAAiB;aACjB;SACD;KACD,CAAC;AACH,CAAC;AAED,SAAS,kCAAkC,CAAC,KAM3C;IACA,OAAO;QACN,gBAAgB,EAAE,wCAAwC;QAC1D,OAAO,EAAE,eAAe;QACxB,wBAAwB,EAAE,KAAK,CAAC,YAAY,CAAC,eAAe;QAC5D,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe;YACrC,CAAC,CAAC,EAAE,wBAAwB,EAAE,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;QACN,iBAAiB,EAAE,OAAO,CAAC,GAAG;QAC9B,oBAAoB,EAAE;YACrB,gBAAgB,EAAE,oCAAoC;YACtD,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK;YAChC,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;YAC1C,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,gBAAgB;gBACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,gBAAgB,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACN,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS;SACzC;QACD,uBAAuB,EAAE,wCAAwC;QACjE,qBAAqB,EAAE,KAAK,CAAC,YAAY;QACzC,aAAa,EAAE;YACd,4BAA4B,KAAK,CAAC,YAAY,CAAC,eAAe,iBAAiB;YAC/E,+BAA+B,KAAK,CAAC,gBAAgB,WACpD,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,CACzB,EAAE;SACF;KACD,CAAC;AACH,CAAC;AAED,SAAS,iCAAiC,CAAC,KAY1C;IACA,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,oBAAoB,IAAI,EAAE,CAAC;IAC9D,OAAO;QACN,gBAAgB,EAAE,uCAAuC;QACzD,UAAU,EAAE,uCAAuC;QACnD,iBAAiB,EAAE,KAAK,CAAC,YAAY,CAAC,eAAe;QACrD,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW;YACjC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU;YAChC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACN,kBAAkB,EAAE,KAAK,CAAC,gBAAgB;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;QAChD,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,yBAAyB,EAAE,uCAAuC;QAClE,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,eAAe,EAAE;YAChB,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,gBAAgB;YACvD,6BAA6B,EAC5B,KAAK,CAAC,cAAc,CAAC,6BAA6B;YACnD,iBAAiB,EAAE,KAAK,CAAC,cAAc,CAAC,iBAAiB;YACzD,kBAAkB,EAAE,KAAK,CAAC,cAAc,CAAC,kBAAkB;YAC3D,qBAAqB,EAAE,KAAK,CAAC,cAAc,CAAC,qBAAqB;YACjE,8BAA8B,EAC7B,KAAK,CAAC,cAAc,CAAC,4BAA4B,CAAC,MAAM;YACzD,8BAA8B,EAC7B,KAAK,CAAC,cAAc,CAAC,4BAA4B,CAAC,MAAM;YACzD,2BAA2B,EAC1B,KAAK,CAAC,cAAc,CAAC,yBAAyB,CAAC,MAAM;YACtD,yBAAyB,EAAE,KAAK,CAAC,MAAM;YACvC,4BAA4B,EAC3B,KAAK,CAAC,cAAc,CAAC,4BAA4B;YAClD,4BAA4B,EAC3B,KAAK,CAAC,cAAc,CAAC,4BAA4B;YAClD,yBAAyB,EAAE,KAAK,CAAC,cAAc,CAAC,yBAAyB;YACzE,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D;QACD,kBAAkB,EAAE;YACnB,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,CAAC,gBAAgB;YAC1D,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,OAAO;YACxC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,wBAAwB;gBACnD,CAAC,CAAC;oBACA,wBAAwB,EACvB,KAAK,CAAC,iBAAiB,CAAC,wBAAwB;iBACjD;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,iBAAiB;YAC5D,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,oBAAoB;gBAC/C,CAAC,CAAC;oBACA,+BAA+B,EAC9B,KAAK,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,UAAU;iBACxD;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,qBAAqB,EAAE,KAAK,CAAC,iBAAiB,CAAC,qBAAqB;SACpE;QACD,SAAS,EAAE;YACV,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,cAAc;YACpD,iCAAiC,EAChC,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,sBAAsB;YACxD,2BAA2B,EAC1B,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,gBAAgB;YAClD,8CAA8C,EAC7C,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,oCAAoC;SACrE;QACD,aAAa,EAAE;YACd,4BAA4B,KAAK,CAAC,YAAY,CAAC,eAAe,iBAAiB;YAC/E,+BAA+B,KAAK,CAAC,gBAAgB,QAAQ;YAC7D,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU;gBAChC,CAAC,CAAC,CAAC,sBAAsB,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;gBACzD,CAAC,CAAC,EAAE,CAAC;SACN;KACD,CAAC;AACH,CAAC;AAED,SAAS,mCAAmC,CAC3C,MAKC,EACD,KAAuD;IAEvD,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO;IACR,CAAC;IACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,iCAAiC,CAAC;QACpD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM;KACN,CAAC,EAAE,CAAC;QACJ,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;AACF,CAAC;AAED,SAAS,oBAAoB,CAC5B,IAAa,EACb,WAAwB,EACxB,SAAsB,EACtB,gBAAgB,GAAG,KAAK;IAExB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,gBAAgB,CAAC;IAC3D,MAAM,aAAa,GAClB,QAAQ,CAAC,KAAK,CAAC;QACf,CAAC,KAAK,CAAC,aAAa,KAAK,gCAAgC;YACxD,KAAK,CAAC,cAAc,KAAK,gCAAgC,CAAC,CAAC;IAC7D,IAAI,CAAC,gBAAgB,IAAI,CAAC,aAAa,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,WAAW,CACnC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,CACtC,EAAE,CAAC;QACH,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,WAAW,CACjC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,mBAAmB,CAClD,EAAE,CAAC;QACH,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC;QAC3D,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YACnD,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,EAAE,EAAE,CAAC;YACP,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,SAAS;YACV,CAAC;YACD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,YAAY,CAAC;YAChE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAClD,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC;YACzD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,EAAE,CAAC;gBAC9C,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,gBAAgB,IAAI,aAAa,CAAC;AAC1C,CAAC;AAED,SAAS,iCAAiC,CACzC,QAAiC;IAEjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAG/B,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACrD,kBAAkB,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC;IACD,MAAM,cAAc,GAAG;QACtB,GAAG,KAAK,CAAC,aAAa;QACtB,GAAG,KAAK,CAAC,iBAAiB;QAC1B,GAAG,KAAK,CAAC,oBAAoB;QAC7B,GAAG,KAAK,CAAC,wBAAwB;QACjC,GAAG,KAAK,CAAC,mBAAmB;QAC5B,GAAG,KAAK,CAAC,oBAAoB;KAC7B,CAAC;IACF,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAAU,CAAC;IACpD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,MAAM,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC;QACxE,MAAM,gBAAgB,GAAG,oBAAoB,CAC5C,MAAM,CAAC,IAAI,EACX,WAAW,EACX,SAAS,EACT,mBAAmB,CACnB,CAAC;QACF,IAAI,mBAAmB,IAAI,gBAAgB,EAAE,CAAC;YAC7C,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9C,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrC,mCAAmC,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACjE,CAAC;IACF,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC;YAC5D,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClE,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACvB,mCAAmC,CAClC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EACtD,kBAAkB,CAClB,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACzE,oBAAoB,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CACrE,CAAC;IACF,MAAM,4BAA4B,GAAG,WAAW,CAAC,MAAM,CACtD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CACrD,CAAC,MAAM,CAAC;IACT,MAAM,uBAAuB,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CACxD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAC3D,CAAC,MAAM,CAAC;IACT,MAAM,wBAAwB,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAC1D,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CACtD,CAAC,MAAM,CAAC;IACT,MAAM,yBAAyB,GAAG,IAAI,CAAC,GAAG,CACzC,gBAAgB,CAAC,IAAI,EACrB,WAAW,CAAC,MAAM,CAClB,CAAC;IACF,OAAO;QACN,gBAAgB,EAAE,qCAAqC;QACvD,6BAA6B,EAAE,gCAAgC;QAC/D,iBAAiB,EAChB,WAAW,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,uBAAuB,GAAG,4BAA4B;YACxD,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM;QAC7B,kBAAkB,EACjB,WAAW,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,wBAAwB,GAAG,yBAAyB;YACtD,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM;QAC9B,qBAAqB,EACpB,KAAK,CAAC,iBAAiB,CAAC,MAAM;YAC9B,KAAK,CAAC,oBAAoB,CAAC,MAAM;YACjC,KAAK,CAAC,wBAAwB,CAAC,MAAM;YACrC,KAAK,CAAC,mBAAmB,CAAC,MAAM;YAChC,KAAK,CAAC,oBAAoB,CAAC,MAAM;QAClC,4BAA4B,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE;QAC1D,4BAA4B,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE;QACrD,yBAAyB,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE;QAChD,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,KAA6B,EAC7B,OAAiC;IAEjC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IACtD,MAAM,aAAa,GAAG,6BAA6B,CAClD,YAAY,EACZ,eAAe,CACf,CAAC;IACF,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,EAAE,CAAC;IAClD,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,OAAO,CAC3B,aAAa,EACb,YAAY,CAAC,YAAY,IAAI,2BAA2B,CACxD,CAAC;IACF,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CACxB,YAAY,EACZ,oBAAoB,CAAC,YAAY,CAAC,eAAe,EAAE,WAAW,CAAC,CAC/D,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,2BAA2B,CACpD,aAAa,EACb,KAAK,CAAC,WAAW,CACjB,CAAC;IACF,MAAM,eAAe,GACpB,YAAY,CAAC,sBAAsB;QACnC,YAAY,CAAC,0BAA0B,CAAC;IACzC,MAAM,gBAAgB,GAAG,eAAe,IAAI,YAAY,CAAC,eAAe,CAAC;IAEzE,IAAI,MAAM,GAA4B,4BAA4B,CAAC,OAAO,CAAC;IAC3E,IAAI,OAAO,GAA4C;QACtD,YAAY,EAAE,mCAAmC,CAAC,OAAO;QACzD,UAAU,EAAE,gBAAgB;KAC5B,CAAC;IACF,IAAI,eAAoD,CAAC;IACzD,IAAI,mBAEQ,CAAC;IAEb,IAAI,eAAe,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAI,CAAC;YACJ,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,eAAe,EAAE;gBACjE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,YAAY,EAAE,YAAY;aAC1B,CAAC,CAAC;YACH,MAAM,sBAAsB,GAC3B,aAAa,EAAE,eAAe;gBAC9B,aAAa,EAAE,QAAQ,EAAE,eAAe,CAAC;YAC1C,MAAM,aAAa,GAClB,aAAa,EAAE,MAAM,IAAI,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC1D,OAAO,GAAG,aAAa;gBACtB,CAAC,CAAC;oBACA,YAAY,EAAE,mCAAmC,CAAC,SAAS;oBAC3D,UAAU,EAAE,aAAa,CAAC,SAAS;oBACnC,GAAG,CAAC,aAAa,CAAC,WAAW;wBAC5B,CAAC,CAAC,EAAE,YAAY,EAAE,aAAa,CAAC,WAAW,EAAE;wBAC7C,CAAC,CAAC,EAAE,CAAC;oBACN,GAAG,CAAC,sBAAsB;wBACzB,CAAC,CAAC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE;wBAC9C,CAAC,CAAC,EAAE,CAAC;oBACN,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE;gBACF,CAAC,CAAC;oBACA,YAAY,EAAE,mCAAmC,CAAC,OAAO;oBACzD,UAAU,EAAE,eAAe;iBAC3B,CAAC;YACJ,eAAe,GAAG,aAAa,EAAE,QAAQ,CAAC;YAC1C,mBAAmB,GAAG,aAAa,EAAE,mBAAmB,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,4BAA4B,CAAC,WAAW,CAAC;YAClD,MAAM,kBAAkB,GACvB,KAAK,YAAY,6BAA6B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,eAAe,GAAG,kBAAkB,EAAE,QAAQ,CAAC;YAC/C,mBAAmB,GAAG,kBAAkB,EAAE,mBAAmB,CAAC;YAC9D,OAAO,GAAG;gBACT,YAAY,EAAE,mCAAmC,CAAC,MAAM;gBACxD,UAAU,EAAE,kBAAkB,EAAE,SAAS,IAAI,eAAe;gBAC5D,GAAG,CAAC,kBAAkB,EAAE,WAAW;oBAClC,CAAC,CAAC,EAAE,YAAY,EAAE,kBAAkB,CAAC,WAAW,EAAE;oBAClD,CAAC,CAAC,EAAE,CAAC;gBACN,GAAG,CAAC,kBAAkB,EAAE,eAAe;oBACtC,CAAC,CAAC,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,eAAe,EAAE;oBAC1D,CAAC,CAAC,EAAE,CAAC;gBACN,GAAG,CAAC,kBAAkB,EAAE,MAAM,KAAK,SAAS;oBAC3C,CAAC,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,EAAE;oBACvC,CAAC,CAAC,EAAE,CAAC;gBACN,KAAK,EAAE,sBAAsB,CAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD;aACD,CAAC;QACH,CAAC;IACF,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,QAAQ,GACb,eAAe;QACf,yBAAyB,CAAC,gBAAgB,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,iCAAiC,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,gCAAgC,EAAE,CAAC;IAC3D,MAAM,iBAAiB,GAAG,kCAAkC,CAAC;QAC5D,YAAY;QACZ,gBAAgB;QAChB,YAAY,EAAE,YAAY;QAC1B,OAAO;QACP,aAAa;KACb,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,iCAAiC,CAAC;QAC1D,YAAY;QACZ,MAAM;QACN,gBAAgB;QAChB,SAAS,EAAE,WAAW;QACtB,YAAY,EAAE,YAAY;QAC1B,OAAO;QACP,iBAAiB;QACjB,cAAc;QACd,eAAe;QACf,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAiC;QAC9C,gBAAgB,EAAE,uCAAuC;QACzD,iBAAiB,EAAE,YAAY,CAAC,eAAe;QAC/C,GAAG,CAAC,YAAY,CAAC,WAAW;YAC3B,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,WAAW,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,YAAY,CAAC,UAAU;YAC1B,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,UAAU,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;QACN,kBAAkB,EAAE,gBAAgB;QACpC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,UAAU,EAAE,WAAW;QACvB,cAAc,EAAE,aAAa;QAC7B,OAAO;QACP,gBAAgB,EAAE;YACjB,IAAI,EAAE,oCAAoC,CAAC,iBAAiB;YAC5D,KAAK,EAAE,WAAW;SAClB;QACD,kBAAkB,EAAE,iBAAiB;QACrC,eAAe,EAAE,cAAc;QAC/B,iBAAiB,EAAE,gBAAgB;QACnC,QAAQ;QACR,gBAAgB,EAAE,eAAe;QACjC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvB,CAAC;IAEF,IAAI,CAAC;QACJ,MAAM,SAAS,CACd,YAAY,EACZ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACxC,MAAM,CACN,CAAC;QACF,YAAY,CAAC,SAAS,GAAG;YACxB,MAAM;YACN,YAAY,EAAE,YAAY;YAC1B,SAAS,EAAE,WAAW;YACtB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,oDACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,EAAE,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC;YAC3B,MAAM,EAAE,4BAA4B,CAAC,WAAW;YAChD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,OAAO,CAAC,YAAY;YACjC,YAAY,EAAE,YAAY;YAC1B,gBAAgB,EAAE,iCAAiC,CAAC;gBACnD,YAAY;gBACZ,MAAM,EAAE,4BAA4B,CAAC,WAAW;gBAChD,gBAAgB;gBAChB,SAAS,EAAE,WAAW;gBACtB,YAAY,EAAE,YAAY;gBAC1B,OAAO;gBACP,iBAAiB;gBACjB,cAAc;gBACd,eAAe;gBACf,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC9B,CAAC;YACF,YAAY;SACZ,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACb,CAAC;IACD,MAAM,mBAAmB,EAAE,CAAC;QAC3B,MAAM;QACN,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,OAAO,CAAC,YAAY;QACjC,YAAY,EAAE,YAAY;QAC1B,gBAAgB;QAChB,YAAY,EAAE,OAAO,CAAC,KAAK;KAC3B,CAAC,CAAC;IAEH,OAAO;QACN,MAAM;QACN,iBAAiB,EAAE,YAAY,CAAC,eAAe;QAC/C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,aAAa,EAAE,YAAY;QAC3B,QAAQ;KACR,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAChC,OAAwC,EACxC,SAAiB,EACjB,SAA2C;IAE3C,MAAM,OAAO,GACZ,OAAO,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAC7C,MAAM,mBAAmB,GAAG,KAAK,EAChC,KAA2C,EAC1C,EAAE;QACH,MAAM,OAAO,CAAC,6BAA6B,CAAC;YAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAC/B,CAAC,CAAC,+BAA+B,KAAK,CAAC,YAAY,EAAE;gBACrD,CAAC,CAAC,SAAS;SACZ,CAAC,CAAC;IACJ,CAAC,CAAC;IACF,IAAI,CAAC;QACJ,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,6BAA6B,CACtC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACtD;YACC,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,WAAW;YACX,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ;YACR,mBAAmB;SACnB,CACD,CAAC;IACH,CAAC;IACD,OAAO;QACN,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,WAAW;QACX,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ;QACR,mBAAmB;KACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,OAAwC,EACxC,UAA+C,EAAE;IAEjD,OAAO,iBAAiB,CACvB;QACC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,4BAA4B,CAAC,eAAe;QACtE,WAAW,EACV,OAAO,CAAC,WAAW;YACnB,iCAAiC,CAAC,gBAAgB;KACnD,EACD;QACC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CACrC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;QACjD,GAAG,EAAE,OAAO,CAAC,GAAG;KAChB,CACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,YAAY,CAA0B,GAAG,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE;QAC7C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CACrC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;KACjD,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,KAAK,EAAE,iCAAiC;SACxC,EACD,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;QACF,OAAO;IACR,CAAC;IAED,QAAQ,CACP,GAAG,EACH,MAAM,CAAC,MAAM,KAAK,4BAA4B,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACtE;QACC,gBAAgB,EAAE,oCAAoC;QACtD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;KACzB,EACD,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;AACH,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { mkdir, realpath, stat, writeFile } from \"node:fs/promises\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { isAbsolute, join, relative, resolve } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport {\n\tCODEX_SUBAGENT_TOOL_PREFIX,\n\tCODEX_SUBAGENT_WORK_GRAPH_SCHEMA,\n\tHEADLESS_PROTOCOL_VERSION,\n\ttype HeadlessCodexSubagentContinuityEdge,\n\tactiveCodexSubagentStatus,\n\tbuildCodexSubagentContinuityEdges,\n\tcodexSubagentEdgeKey,\n\tcodexSubagentOperation,\n\tcodexSubagentStatusIsTerminal,\n\tcreateHeadlessRuntimeState,\n\tstringArray,\n} from \"../../cli/headless-protocol.js\";\nimport { isRecord } from \"../../utils/json.js\";\nimport { sanitizeWithStaticMask } from \"../../utils/secret-redactor.js\";\nimport type { HostedRunnerContext, WebServerContext } from \"../app-context.js\";\nimport type { HeadlessRuntimeSnapshot } from \"../headless-runtime-service.js\";\nimport {\n\tHOSTED_RUNNER_LEASE_PROTOCOL_VERSION,\n\ttype HostedRunnerLeaseSnapshot,\n\tmarkHostedRunnerLeaseDraining,\n} from \"../hosted-runner-lease.js\";\nimport { ApiError, readJsonBody, sendJson } from \"../server-utils.js\";\n\nconst execFileAsync = promisify(execFile);\n\nexport const HOSTED_RUNNER_DRAIN_PATH =\n\t\"/.well-known/evalops/remote-runner/drain\";\n\nexport const HOSTED_RUNNER_DRAIN_PROTOCOL_VERSION =\n\t\"evalops.remote-runner.drain.v1\";\n\nexport const HOSTED_RUNNER_SNAPSHOT_MANIFEST_VERSION =\n\t\"evalops.remote-runner.snapshot-manifest.v1\";\n\nexport const HOSTED_RUNNER_RETENTION_POLICY_VERSION =\n\t\"evalops.remote-runner.retention.v1\";\n\nexport const HOSTED_RUNNER_WORK_CONTINUITY_VERSION =\n\t\"evalops.remote-runner.work-continuity.v1\";\n\nexport const HOSTED_RUNNER_PLATFORM_EVIDENCE_VERSION =\n\t\"evalops.remote-runner.platform-evidence.v1\";\n\nexport const HOSTED_RUNNER_RUNTIME_CONTINUITY_VERSION =\n\t\"evalops.remote-runner.runtime-continuity.v1\";\n\nexport enum HostedRunnerDrainStatusValue {\n\tDrained = \"drained\",\n\tInterrupted = \"interrupted\",\n}\n\nexport enum HostedRunnerRuntimeFlushStatusValue {\n\tCompleted = \"completed\",\n\tFailed = \"failed\",\n\tSkipped = \"skipped\",\n}\n\nexport enum HostedRunnerWorkspaceExportPathTypeValue {\n\tFile = \"file\",\n\tDirectory = \"directory\",\n\tOther = \"other\",\n}\n\nexport enum HostedRunnerWorkspaceExportModeValue {\n\tLocalPathContract = \"local_path_contract\",\n}\n\nexport enum HostedRunnerDrainReasonValue {\n\tKubernetesPreStop = \"kubernetes_prestop\",\n\tProcessShutdown = \"process_shutdown\",\n}\n\nexport enum HostedRunnerDrainRequestedByValue {\n\tKubernetesPreStop = \"kubernetes_prestop\",\n\tMaestroWebServer = \"maestro_web_server\",\n}\n\nexport type HostedRunnerDrainStatus = HostedRunnerDrainStatusValue;\nexport type HostedRunnerRuntimeFlushStatus =\n\tHostedRunnerRuntimeFlushStatusValue;\nexport type HostedRunnerWorkspaceExportPathType =\n\tHostedRunnerWorkspaceExportPathTypeValue;\nexport type HostedRunnerWorkspaceExportMode =\n\tHostedRunnerWorkspaceExportModeValue;\nexport type HostedRunnerDrainReason = HostedRunnerDrainReasonValue | string;\nexport type HostedRunnerDrainRequestedBy =\n\t| HostedRunnerDrainRequestedByValue\n\t| string;\n\nexport interface HostedRunnerRetentionPolicy {\n\tpolicy_version: typeof HOSTED_RUNNER_RETENTION_POLICY_VERSION;\n\tmanaged_by: \"platform\";\n\tvisibility: {\n\t\tcontrol_plane_metadata: \"operator\";\n\t\tworkspace_export: \"tenant\";\n\t\truntime_snapshot: \"internal\";\n\t\truntime_logs: \"operator\";\n\t};\n\tredaction: {\n\t\trequired_before_external_persistence: Array<\n\t\t\t\"runtime_snapshot\" | \"runtime_logs\"\n\t\t>;\n\t\tforbidden_plaintext: Array<\n\t\t\t| \"provider_credentials\"\n\t\t\t| \"tool_secrets\"\n\t\t\t| \"attach_tokens\"\n\t\t\t| \"artifact_access_tokens\"\n\t\t\t| \"raw_environment\"\n\t\t>;\n\t};\n}\n\nexport interface HostedRunnerDrainInput {\n\treason?: HostedRunnerDrainReason;\n\trequestedBy?: HostedRunnerDrainRequestedBy;\n\texportPaths?: string[];\n}\n\nexport interface HostedRunnerRuntimeDrainResult {\n\tsessionId: string;\n\tsessionFile?: string;\n\tprotocolVersion?: string;\n\tcursor?: number;\n\tsnapshot?: HeadlessRuntimeSnapshot;\n\trecordPlatformDrain?: (\n\t\tinput: HostedRunnerPlatformDrainRecordInput,\n\t) => Promise<void>;\n}\n\nclass HostedRunnerRuntimeDrainError extends Error {\n\treadonly sessionId: string;\n\treadonly sessionFile?: string;\n\treadonly protocolVersion?: string;\n\treadonly cursor?: number;\n\treadonly snapshot?: HeadlessRuntimeSnapshot;\n\treadonly recordPlatformDrain?: (\n\t\tinput: HostedRunnerPlatformDrainRecordInput,\n\t) => Promise<void>;\n\n\tconstructor(message: string, runtime: HostedRunnerRuntimeDrainResult) {\n\t\tsuper(message);\n\t\tthis.name = \"HostedRunnerRuntimeDrainError\";\n\t\tthis.sessionId = runtime.sessionId;\n\t\tthis.sessionFile = runtime.sessionFile;\n\t\tthis.protocolVersion = runtime.protocolVersion;\n\t\tthis.cursor = runtime.cursor;\n\t\tthis.snapshot = runtime.snapshot;\n\t\tthis.recordPlatformDrain = runtime.recordPlatformDrain;\n\t}\n}\n\nexport interface HostedRunnerWorkspaceExportPath {\n\tinput: string;\n\tpath: string;\n\trelative_path: string;\n\ttype: HostedRunnerWorkspaceExportPathType;\n}\n\nexport interface HostedRunnerSnapshotManifest {\n\tprotocol_version: typeof HOSTED_RUNNER_SNAPSHOT_MANIFEST_VERSION;\n\trunner_session_id: string;\n\tworkspace_id?: string;\n\tagent_run_id?: string;\n\tmaestro_session_id: string;\n\treason?: string;\n\trequested_by?: string;\n\tcreated_at: string;\n\tworkspace_root: string;\n\truntime: {\n\t\tflush_status: HostedRunnerRuntimeFlushStatus;\n\t\terror?: string;\n\t\tsession_id: string;\n\t\tsession_file?: string;\n\t\tprotocol_version?: string;\n\t\tcursor?: number;\n\t};\n\tworkspace_export: {\n\t\tmode: HostedRunnerWorkspaceExportMode;\n\t\tpaths: HostedRunnerWorkspaceExportPath[];\n\t};\n\truntime_continuity: HostedRunnerRuntimeContinuity;\n\twork_continuity: HostedRunnerWorkContinuity;\n\tplatform_evidence: HostedRunnerPlatformEvidence;\n\tsnapshot: HeadlessRuntimeSnapshot;\n\tretention_policy: HostedRunnerRetentionPolicy;\n\tgit?: {\n\t\tcommit?: string;\n\t\tbranch?: string;\n\t\tdirty?: boolean;\n\t};\n}\n\nexport interface HostedRunnerRuntimeContinuity {\n\tprotocol_version: typeof HOSTED_RUNNER_RUNTIME_CONTINUITY_VERSION;\n\thandoff: \"drain_restore\";\n\tsource_runner_session_id: string;\n\tsource_owner_instance_id?: string;\n\tsource_process_id: number;\n\tsource_runtime_lease?: {\n\t\tprotocol_version: typeof HOSTED_RUNNER_LEASE_PROTOCOL_VERSION;\n\t\tstate: HostedRunnerLeaseSnapshot[\"state\"];\n\t\tgeneration: number;\n\t\tmaestro_session_id?: string;\n\t\tupdated_at: string;\n\t};\n\trestore_environment_key: \"MAESTRO_REMOTE_RUNNER_RESTORE_MANIFEST\";\n\trestore_manifest_path: string;\n\tevidence_refs: string[];\n}\n\nexport interface HostedRunnerWorkContinuity {\n\tprotocol_version: typeof HOSTED_RUNNER_WORK_CONTINUITY_VERSION;\n\tcodex_subagent_schema_version: typeof CODEX_SUBAGENT_WORK_GRAPH_SCHEMA;\n\tactive_tool_count: number;\n\ttracked_tool_count: number;\n\tpending_request_count: number;\n\tcodex_subagent_tool_call_ids: string[];\n\tcodex_subagent_child_run_ids: string[];\n\tcodex_subagent_thread_ids: string[];\n\tcodex_subagent_edges?: HeadlessCodexSubagentContinuityEdge[];\n}\n\nexport interface HostedRunnerPlatformEvidence {\n\tprotocol_version: typeof HOSTED_RUNNER_PLATFORM_EVIDENCE_VERSION;\n\tevent_type: \"hosted_runner_drain_manifest_recorded\";\n\trunner_session_id: string;\n\tworkspace_id?: string;\n\tagent_run_id?: string;\n\tmaestro_session_id: string;\n\tstatus: HostedRunnerDrainStatus;\n\truntime_flush_status: HostedRunnerRuntimeFlushStatus;\n\tmanifest_path: string;\n\tmanifest_protocol_version: typeof HOSTED_RUNNER_SNAPSHOT_MANIFEST_VERSION;\n\tcreated_at: string;\n\treason?: string;\n\trequested_by?: string;\n\twork_continuity: {\n\t\tprotocol_version: typeof HOSTED_RUNNER_WORK_CONTINUITY_VERSION;\n\t\tcodex_subagent_schema_version: typeof CODEX_SUBAGENT_WORK_GRAPH_SCHEMA;\n\t\tactive_tool_count: number;\n\t\ttracked_tool_count: number;\n\t\tpending_request_count: number;\n\t\tcodex_subagent_tool_call_count: number;\n\t\tcodex_subagent_child_run_count: number;\n\t\tcodex_subagent_thread_count: number;\n\t\tcodex_subagent_edge_count: number;\n\t\tcodex_subagent_tool_call_ids: string[];\n\t\tcodex_subagent_child_run_ids: string[];\n\t\tcodex_subagent_thread_ids: string[];\n\t\tcodex_subagent_edges?: HeadlessCodexSubagentContinuityEdge[];\n\t};\n\truntime_continuity: {\n\t\tprotocol_version: typeof HOSTED_RUNNER_RUNTIME_CONTINUITY_VERSION;\n\t\thandoff: \"drain_restore\";\n\t\tsource_owner_instance_id?: string;\n\t\tsource_process_id: number;\n\t\tsource_runtime_lease_generation?: number;\n\t\trestore_manifest_path: string;\n\t};\n\tretention: {\n\t\tpolicy_version: typeof HOSTED_RUNNER_RETENTION_POLICY_VERSION;\n\t\tcontrol_plane_metadata_visibility: \"operator\";\n\t\truntime_snapshot_visibility: \"internal\";\n\t\tredaction_required_before_external_persistence: Array<\n\t\t\t\"runtime_snapshot\" | \"runtime_logs\"\n\t\t>;\n\t};\n\tevidence_refs: string[];\n}\n\nexport interface HostedRunnerPlatformDrainRecordInput {\n\tstatus: HostedRunnerDrainStatus;\n\treason?: string;\n\trequestedBy?: string;\n\tflushStatus: HostedRunnerRuntimeFlushStatus;\n\tmanifestPath: string;\n\tplatformEvidence: HostedRunnerPlatformEvidence;\n\terrorMessage?: string;\n}\n\nexport interface HostedRunnerDrainResult {\n\tstatus: HostedRunnerDrainStatus;\n\trunner_session_id: string;\n\treason?: string;\n\trequested_by?: string;\n\tmanifest_path: string;\n\tmanifest: HostedRunnerSnapshotManifest;\n}\n\nexport interface DrainHostedRunnerOptions {\n\thostedRunner?: HostedRunnerContext;\n\tdrainRuntime?: (\n\t\tsessionId: string,\n\t\tterminal: HostedRunnerRuntimeTerminalInput,\n\t) => Promise<HostedRunnerRuntimeDrainResult | null>;\n\tnow?: () => Date;\n}\n\ninterface HostedRunnerDrainRuntimeContext {\n\thostedRunner?: HostedRunnerContext;\n\theadlessRuntimeService: Pick<\n\t\tWebServerContext[\"headlessRuntimeService\"],\n\t\t\"getRuntimeBySessionId\"\n\t>;\n}\n\nexport interface DrainHostedRunnerForShutdownOptions {\n\tnow?: () => Date;\n\treason?: HostedRunnerDrainReason;\n\trequestedBy?: HostedRunnerDrainRequestedBy;\n}\n\ninterface HostedRunnerRuntimeTerminalInput {\n\treason?: HostedRunnerDrainReason;\n\trequestedBy?: HostedRunnerDrainRequestedBy;\n\tmanifestPath?: string;\n}\n\nfunction getString(value: unknown, field: string): string | undefined {\n\tif (value === undefined || value === null) {\n\t\treturn undefined;\n\t}\n\tif (typeof value !== \"string\") {\n\t\tthrow new ApiError(400, `${field} must be a string`);\n\t}\n\tconst trimmed = value.trim();\n\treturn trimmed || undefined;\n}\n\nfunction getStringArray(value: unknown, field: string): string[] | undefined {\n\tif (value === undefined || value === null) {\n\t\treturn undefined;\n\t}\n\tif (!Array.isArray(value)) {\n\t\tthrow new ApiError(400, `${field} must be an array of strings`);\n\t}\n\tconst strings = value.map((entry, index) => {\n\t\tif (typeof entry !== \"string\" || !entry.trim()) {\n\t\t\tthrow new ApiError(400, `${field}[${index}] must be a non-empty string`);\n\t\t}\n\t\tif (entry.includes(\"\\0\")) {\n\t\t\tthrow new ApiError(400, `${field}[${index}] contains a null byte`);\n\t\t}\n\t\treturn entry.trim();\n\t});\n\treturn strings.length ? strings : undefined;\n}\n\nexport function parseHostedRunnerDrainInput(\n\tbody: unknown,\n): HostedRunnerDrainInput {\n\tif (body === undefined || body === null) {\n\t\treturn {};\n\t}\n\tif (typeof body !== \"object\" || Array.isArray(body)) {\n\t\tthrow new ApiError(400, \"Drain payload must be a JSON object\");\n\t}\n\tconst record = body as Record<string, unknown>;\n\treturn {\n\t\treason:\n\t\t\tgetString(record.reason, \"reason\") ??\n\t\t\tgetString(record.stop_reason, \"stop_reason\"),\n\t\trequestedBy:\n\t\t\tgetString(record.requested_by, \"requested_by\") ??\n\t\t\tgetString(record.requestedBy, \"requestedBy\"),\n\t\texportPaths:\n\t\t\tgetStringArray(record.export_paths, \"export_paths\") ??\n\t\t\tgetStringArray(record.exportPaths, \"exportPaths\"),\n\t};\n}\n\nfunction isWithinPath(root: string, target: string): boolean {\n\tconst rel = relative(root, target);\n\treturn rel === \"\" || (!rel.startsWith(\"..\") && !isAbsolute(rel));\n}\n\nfunction safeManifestFileName(\n\trunnerSessionId: string,\n\trequestedAt: string,\n): string {\n\tconst safeSession = runnerSessionId.replace(/[^A-Za-z0-9_.-]/g, \"_\");\n\tconst safeTimestamp = requestedAt.replace(/[^A-Za-z0-9_.-]/g, \"_\");\n\treturn `${safeSession}-${safeTimestamp}.json`;\n}\n\nasync function resolveWorkspaceRoot(\n\thostedRunner: HostedRunnerContext,\n): Promise<string> {\n\ttry {\n\t\tconst workspaceRoot = await realpath(hostedRunner.workspaceRoot);\n\t\tconst stats = await stat(workspaceRoot);\n\t\tif (!stats.isDirectory()) {\n\t\t\tthrow new ApiError(\n\t\t\t\t503,\n\t\t\t\t\"Hosted runner workspace root is not a directory\",\n\t\t\t);\n\t\t}\n\t\treturn workspaceRoot;\n\t} catch (error) {\n\t\tif (error instanceof ApiError) {\n\t\t\tthrow error;\n\t\t}\n\t\tthrow new ApiError(\n\t\t\t503,\n\t\t\t`Hosted runner workspace root is unavailable: ${\n\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t}`,\n\t\t);\n\t}\n}\n\nasync function resolveWorkspaceExportPaths(\n\tworkspaceRoot: string,\n\texportPaths: readonly string[] | undefined,\n): Promise<HostedRunnerWorkspaceExportPath[]> {\n\tconst requested = exportPaths?.length ? exportPaths : [\".\"];\n\tconst paths: HostedRunnerWorkspaceExportPath[] = [];\n\tfor (const input of requested) {\n\t\tconst logicalPath = isAbsolute(input)\n\t\t\t? resolve(input)\n\t\t\t: resolve(workspaceRoot, input);\n\t\tlet realPath: string;\n\t\ttry {\n\t\t\trealPath = await realpath(logicalPath);\n\t\t} catch (error) {\n\t\t\tthrow new ApiError(\n\t\t\t\t400,\n\t\t\t\t`Export path is unavailable: ${input} (${\n\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t})`,\n\t\t\t);\n\t\t}\n\t\tif (!isWithinPath(workspaceRoot, realPath)) {\n\t\t\tthrow new ApiError(\n\t\t\t\t400,\n\t\t\t\t`Export path escapes hosted runner workspace root: ${input}`,\n\t\t\t);\n\t\t}\n\t\tconst pathStat = await stat(realPath);\n\t\tpaths.push({\n\t\t\tinput,\n\t\t\tpath: realPath,\n\t\t\trelative_path: relative(workspaceRoot, realPath) || \".\",\n\t\t\ttype: pathStat.isDirectory()\n\t\t\t\t? HostedRunnerWorkspaceExportPathTypeValue.Directory\n\t\t\t\t: pathStat.isFile()\n\t\t\t\t\t? HostedRunnerWorkspaceExportPathTypeValue.File\n\t\t\t\t\t: HostedRunnerWorkspaceExportPathTypeValue.Other,\n\t\t});\n\t}\n\treturn paths;\n}\n\nasync function gitOutput(\n\tworkspaceRoot: string,\n\targs: readonly string[],\n): Promise<string | undefined> {\n\ttry {\n\t\tconst { stdout } = await execFileAsync(\n\t\t\t\"git\",\n\t\t\t[\"-C\", workspaceRoot, ...args],\n\t\t\t{\n\t\t\t\tencoding: \"utf8\",\n\t\t\t\ttimeout: 1000,\n\t\t\t},\n\t\t);\n\t\tconst output = stdout.trim();\n\t\treturn output || undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nasync function collectGitState(\n\tworkspaceRoot: string,\n): Promise<HostedRunnerSnapshotManifest[\"git\"] | undefined> {\n\tconst [commit, branch, status] = await Promise.all([\n\t\tgitOutput(workspaceRoot, [\"rev-parse\", \"HEAD\"]),\n\t\tgitOutput(workspaceRoot, [\"rev-parse\", \"--abbrev-ref\", \"HEAD\"]),\n\t\tgitOutput(workspaceRoot, [\"status\", \"--porcelain\"]),\n\t]);\n\tif (!commit && !branch && status === undefined) {\n\t\treturn undefined;\n\t}\n\treturn {\n\t\t...(commit ? { commit } : {}),\n\t\t...(branch && branch !== \"HEAD\" ? { branch } : {}),\n\t\tdirty: Boolean(status),\n\t};\n}\n\nfunction buildHostedRunnerSnapshot(\n\tsessionId: string,\n\tworkspaceRoot: string,\n\truntime: HostedRunnerSnapshotManifest[\"runtime\"],\n): HeadlessRuntimeSnapshot {\n\tconst state = createHeadlessRuntimeState();\n\tstate.protocol_version =\n\t\truntime.protocol_version ?? HEADLESS_PROTOCOL_VERSION;\n\tstate.session_id = sessionId;\n\tstate.cwd = workspaceRoot;\n\tstate.provider = \"typescript\";\n\tstate.model = \"typescript-hosted-runner\";\n\tstate.is_ready =\n\t\truntime.flush_status === HostedRunnerRuntimeFlushStatusValue.Completed;\n\tstate.last_status =\n\t\truntime.flush_status === HostedRunnerRuntimeFlushStatusValue.Completed\n\t\t\t? \"Drained\"\n\t\t\t: runtime.flush_status === HostedRunnerRuntimeFlushStatusValue.Failed\n\t\t\t\t? \"Drain interrupted before runtime flush completed\"\n\t\t\t\t: \"Drain skipped: no runtime activity was available\";\n\tif (runtime.error) {\n\t\tstate.last_error = runtime.error;\n\t\tstate.last_error_type = \"protocol\";\n\t}\n\treturn {\n\t\tprotocolVersion: runtime.protocol_version ?? HEADLESS_PROTOCOL_VERSION,\n\t\tsession_id: sessionId,\n\t\tcursor: runtime.cursor ?? 0,\n\t\tlast_init: null,\n\t\tstate,\n\t};\n}\n\nfunction buildHostedRunnerRetentionPolicy(): HostedRunnerRetentionPolicy {\n\treturn {\n\t\tpolicy_version: HOSTED_RUNNER_RETENTION_POLICY_VERSION,\n\t\tmanaged_by: \"platform\",\n\t\tvisibility: {\n\t\t\tcontrol_plane_metadata: \"operator\",\n\t\t\tworkspace_export: \"tenant\",\n\t\t\truntime_snapshot: \"internal\",\n\t\t\truntime_logs: \"operator\",\n\t\t},\n\t\tredaction: {\n\t\t\trequired_before_external_persistence: [\n\t\t\t\t\"runtime_snapshot\",\n\t\t\t\t\"runtime_logs\",\n\t\t\t],\n\t\t\tforbidden_plaintext: [\n\t\t\t\t\"provider_credentials\",\n\t\t\t\t\"tool_secrets\",\n\t\t\t\t\"attach_tokens\",\n\t\t\t\t\"artifact_access_tokens\",\n\t\t\t\t\"raw_environment\",\n\t\t\t],\n\t\t},\n\t};\n}\n\nfunction buildHostedRunnerRuntimeContinuity(input: {\n\thostedRunner: HostedRunnerContext;\n\tmaestroSessionId: string;\n\tmanifestPath: string;\n\truntime: HostedRunnerSnapshotManifest[\"runtime\"];\n\tleaseSnapshot: HostedRunnerLeaseSnapshot;\n}): HostedRunnerRuntimeContinuity {\n\treturn {\n\t\tprotocol_version: HOSTED_RUNNER_RUNTIME_CONTINUITY_VERSION,\n\t\thandoff: \"drain_restore\",\n\t\tsource_runner_session_id: input.hostedRunner.runnerSessionId,\n\t\t...(input.hostedRunner.ownerInstanceId\n\t\t\t? { source_owner_instance_id: input.hostedRunner.ownerInstanceId }\n\t\t\t: {}),\n\t\tsource_process_id: process.pid,\n\t\tsource_runtime_lease: {\n\t\t\tprotocol_version: HOSTED_RUNNER_LEASE_PROTOCOL_VERSION,\n\t\t\tstate: input.leaseSnapshot.state,\n\t\t\tgeneration: input.leaseSnapshot.generation,\n\t\t\t...(input.leaseSnapshot.maestroSessionId\n\t\t\t\t? { maestro_session_id: input.leaseSnapshot.maestroSessionId }\n\t\t\t\t: {}),\n\t\t\tupdated_at: input.leaseSnapshot.updatedAt,\n\t\t},\n\t\trestore_environment_key: \"MAESTRO_REMOTE_RUNNER_RESTORE_MANIFEST\",\n\t\trestore_manifest_path: input.manifestPath,\n\t\tevidence_refs: [\n\t\t\t`remote-runner://sessions/${input.hostedRunner.runnerSessionId}/drain#snapshot`,\n\t\t\t`maestro://headless/sessions/${input.maestroSessionId}#cursor:${\n\t\t\t\tinput.runtime.cursor ?? 0\n\t\t\t}`,\n\t\t],\n\t};\n}\n\nfunction buildHostedRunnerPlatformEvidence(input: {\n\thostedRunner: HostedRunnerContext;\n\tstatus: HostedRunnerDrainStatus;\n\tmaestroSessionId: string;\n\tcreatedAt: string;\n\tmanifestPath: string;\n\truntime: HostedRunnerSnapshotManifest[\"runtime\"];\n\truntimeContinuity: HostedRunnerRuntimeContinuity;\n\tworkContinuity: HostedRunnerWorkContinuity;\n\tretentionPolicy: HostedRunnerRetentionPolicy;\n\treason?: string;\n\trequestedBy?: string;\n}): HostedRunnerPlatformEvidence {\n\tconst edges = input.workContinuity.codex_subagent_edges ?? [];\n\treturn {\n\t\tprotocol_version: HOSTED_RUNNER_PLATFORM_EVIDENCE_VERSION,\n\t\tevent_type: \"hosted_runner_drain_manifest_recorded\",\n\t\trunner_session_id: input.hostedRunner.runnerSessionId,\n\t\t...(input.hostedRunner.workspaceId\n\t\t\t? { workspace_id: input.hostedRunner.workspaceId }\n\t\t\t: {}),\n\t\t...(input.hostedRunner.agentRunId\n\t\t\t? { agent_run_id: input.hostedRunner.agentRunId }\n\t\t\t: {}),\n\t\tmaestro_session_id: input.maestroSessionId,\n\t\tstatus: input.status,\n\t\truntime_flush_status: input.runtime.flush_status,\n\t\tmanifest_path: input.manifestPath,\n\t\tmanifest_protocol_version: HOSTED_RUNNER_SNAPSHOT_MANIFEST_VERSION,\n\t\tcreated_at: input.createdAt,\n\t\t...(input.reason ? { reason: input.reason } : {}),\n\t\t...(input.requestedBy ? { requested_by: input.requestedBy } : {}),\n\t\twork_continuity: {\n\t\t\tprotocol_version: input.workContinuity.protocol_version,\n\t\t\tcodex_subagent_schema_version:\n\t\t\t\tinput.workContinuity.codex_subagent_schema_version,\n\t\t\tactive_tool_count: input.workContinuity.active_tool_count,\n\t\t\ttracked_tool_count: input.workContinuity.tracked_tool_count,\n\t\t\tpending_request_count: input.workContinuity.pending_request_count,\n\t\t\tcodex_subagent_tool_call_count:\n\t\t\t\tinput.workContinuity.codex_subagent_tool_call_ids.length,\n\t\t\tcodex_subagent_child_run_count:\n\t\t\t\tinput.workContinuity.codex_subagent_child_run_ids.length,\n\t\t\tcodex_subagent_thread_count:\n\t\t\t\tinput.workContinuity.codex_subagent_thread_ids.length,\n\t\t\tcodex_subagent_edge_count: edges.length,\n\t\t\tcodex_subagent_tool_call_ids:\n\t\t\t\tinput.workContinuity.codex_subagent_tool_call_ids,\n\t\t\tcodex_subagent_child_run_ids:\n\t\t\t\tinput.workContinuity.codex_subagent_child_run_ids,\n\t\t\tcodex_subagent_thread_ids: input.workContinuity.codex_subagent_thread_ids,\n\t\t\t...(edges.length > 0 ? { codex_subagent_edges: edges } : {}),\n\t\t},\n\t\truntime_continuity: {\n\t\t\tprotocol_version: input.runtimeContinuity.protocol_version,\n\t\t\thandoff: input.runtimeContinuity.handoff,\n\t\t\t...(input.runtimeContinuity.source_owner_instance_id\n\t\t\t\t? {\n\t\t\t\t\t\tsource_owner_instance_id:\n\t\t\t\t\t\t\tinput.runtimeContinuity.source_owner_instance_id,\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\tsource_process_id: input.runtimeContinuity.source_process_id,\n\t\t\t...(input.runtimeContinuity.source_runtime_lease\n\t\t\t\t? {\n\t\t\t\t\t\tsource_runtime_lease_generation:\n\t\t\t\t\t\t\tinput.runtimeContinuity.source_runtime_lease.generation,\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\trestore_manifest_path: input.runtimeContinuity.restore_manifest_path,\n\t\t},\n\t\tretention: {\n\t\t\tpolicy_version: input.retentionPolicy.policy_version,\n\t\t\tcontrol_plane_metadata_visibility:\n\t\t\t\tinput.retentionPolicy.visibility.control_plane_metadata,\n\t\t\truntime_snapshot_visibility:\n\t\t\t\tinput.retentionPolicy.visibility.runtime_snapshot,\n\t\t\tredaction_required_before_external_persistence:\n\t\t\t\tinput.retentionPolicy.redaction.required_before_external_persistence,\n\t\t},\n\t\tevidence_refs: [\n\t\t\t`remote-runner://sessions/${input.hostedRunner.runnerSessionId}/drain#manifest`,\n\t\t\t`maestro://headless/sessions/${input.maestroSessionId}#drain`,\n\t\t\t...(input.hostedRunner.agentRunId\n\t\t\t\t? [`platform-agent-run:${input.hostedRunner.agentRunId}`]\n\t\t\t\t: []),\n\t\t],\n\t};\n}\n\nfunction collectCodexSubagentEdgesFromSource(\n\tsource: {\n\t\tcall_id: string;\n\t\ttool_execution_id?: string;\n\t\ttool: string;\n\t\targs?: unknown;\n\t},\n\tedges: Map<string, HeadlessCodexSubagentContinuityEdge>,\n): void {\n\tconst operation = codexSubagentOperation(source.tool);\n\tif (!operation) {\n\t\treturn;\n\t}\n\tconst status = activeCodexSubagentStatus(operation);\n\tfor (const edge of buildCodexSubagentContinuityEdges({\n\t\tcall_id: source.call_id,\n\t\ttool_execution_id: source.tool_execution_id,\n\t\ttool: source.tool,\n\t\targs: source.args,\n\t\tstatus,\n\t})) {\n\t\tedges.set(codexSubagentEdgeKey(edge), edge);\n\t}\n}\n\nfunction collectCodexWorkArgs(\n\targs: unknown,\n\tchildRunIds: Set<string>,\n\tthreadIds: Set<string>,\n\tincludeLooseArgs = false,\n): boolean {\n\tif (!isRecord(args)) {\n\t\treturn false;\n\t}\n\tconst graph = args.codexWorkGraph ?? args.codex_work_graph;\n\tconst hasCodexGraph =\n\t\tisRecord(graph) &&\n\t\t(graph.schemaVersion === CODEX_SUBAGENT_WORK_GRAPH_SCHEMA ||\n\t\t\tgraph.schema_version === CODEX_SUBAGENT_WORK_GRAPH_SCHEMA);\n\tif (!includeLooseArgs && !hasCodexGraph) {\n\t\treturn false;\n\t}\n\tfor (const childRunId of stringArray(\n\t\targs.childRunIds ?? args.child_run_ids,\n\t)) {\n\t\tchildRunIds.add(childRunId);\n\t}\n\tfor (const threadId of stringArray(\n\t\targs.receiverThreadIds ?? args.receiver_thread_ids,\n\t)) {\n\t\tthreadIds.add(threadId);\n\t}\n\tif (isRecord(graph)) {\n\t\tconst graphChildRuns = graph.childRuns ?? graph.child_runs;\n\t\tfor (const childRun of Array.isArray(graphChildRuns)\n\t\t\t? graphChildRuns\n\t\t\t: []) {\n\t\t\tif (!isRecord(childRun)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst childRunId = childRun.childRunId ?? childRun.child_run_id;\n\t\t\tif (typeof childRunId === \"string\" && childRunId) {\n\t\t\t\tchildRunIds.add(childRunId);\n\t\t\t}\n\t\t\tconst threadId = childRun.threadId ?? childRun.thread_id;\n\t\t\tif (typeof threadId === \"string\" && threadId) {\n\t\t\t\tthreadIds.add(threadId);\n\t\t\t}\n\t\t}\n\t}\n\treturn includeLooseArgs || hasCodexGraph;\n}\n\nfunction collectHostedRunnerWorkContinuity(\n\tsnapshot: HeadlessRuntimeSnapshot,\n): HostedRunnerWorkContinuity {\n\tconst state = snapshot.state;\n\tconst codexToolCallIds = new Set<string>();\n\tconst childRunIds = new Set<string>();\n\tconst threadIds = new Set<string>();\n\tconst codexSubagentEdges = new Map<\n\t\tstring,\n\t\tHeadlessCodexSubagentContinuityEdge\n\t>();\n\tfor (const edge of state.codex_subagent_edges ?? []) {\n\t\tcodexSubagentEdges.set(codexSubagentEdgeKey(edge), edge);\n\t\tif (edge.spawn_tool_call_id) {\n\t\t\tcodexToolCallIds.add(edge.spawn_tool_call_id);\n\t\t}\n\t\tif (edge.wait_tool_call_id) {\n\t\t\tcodexToolCallIds.add(edge.wait_tool_call_id);\n\t\t}\n\t\tif (edge.child_run_id) {\n\t\t\tchildRunIds.add(edge.child_run_id);\n\t\t}\n\t\tif (edge.thread_id) {\n\t\t\tthreadIds.add(edge.thread_id);\n\t\t}\n\t}\n\tconst trackedSources = [\n\t\t...state.tracked_tools,\n\t\t...state.pending_approvals,\n\t\t...state.pending_client_tools,\n\t\t...state.pending_mcp_elicitations,\n\t\t...state.pending_user_inputs,\n\t\t...state.pending_tool_retries,\n\t];\n\tconst codexTrackedSourceCallIds = new Set<string>();\n\tfor (const source of trackedSources) {\n\t\tconst tool = source.tool;\n\t\tconst isCodexSubagentTool = tool.startsWith(CODEX_SUBAGENT_TOOL_PREFIX);\n\t\tconst hasCodexWorkArgs = collectCodexWorkArgs(\n\t\t\tsource.args,\n\t\t\tchildRunIds,\n\t\t\tthreadIds,\n\t\t\tisCodexSubagentTool,\n\t\t);\n\t\tif (isCodexSubagentTool || hasCodexWorkArgs) {\n\t\t\tcodexTrackedSourceCallIds.add(source.call_id);\n\t\t\tcodexToolCallIds.add(source.call_id);\n\t\t\tcollectCodexSubagentEdgesFromSource(source, codexSubagentEdges);\n\t\t}\n\t}\n\tfor (const activeTool of state.active_tools) {\n\t\tif (activeTool.tool.startsWith(CODEX_SUBAGENT_TOOL_PREFIX)) {\n\t\t\tconst hasTrackedSource = codexToolCallIds.has(activeTool.call_id);\n\t\t\tcodexToolCallIds.add(activeTool.call_id);\n\t\t\tif (!hasTrackedSource) {\n\t\t\t\tcollectCodexSubagentEdgesFromSource(\n\t\t\t\t\t{ call_id: activeTool.call_id, tool: activeTool.tool },\n\t\t\t\t\tcodexSubagentEdges,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\tconst sortedEdges = [...codexSubagentEdges.values()].sort((left, right) =>\n\t\tcodexSubagentEdgeKey(left).localeCompare(codexSubagentEdgeKey(right)),\n\t);\n\tconst activeCodexSubagentEdgeCount = sortedEdges.filter(\n\t\t(edge) => !codexSubagentStatusIsTerminal(edge.status),\n\t).length;\n\tconst nonCodexActiveToolCount = state.active_tools.filter(\n\t\t(tool) => !tool.tool.startsWith(CODEX_SUBAGENT_TOOL_PREFIX),\n\t).length;\n\tconst nonCodexTrackedToolCount = state.tracked_tools.filter(\n\t\t(tool) => !codexTrackedSourceCallIds.has(tool.call_id),\n\t).length;\n\tconst trackedCodexSubagentCount = Math.max(\n\t\tcodexToolCallIds.size,\n\t\tsortedEdges.length,\n\t);\n\treturn {\n\t\tprotocol_version: HOSTED_RUNNER_WORK_CONTINUITY_VERSION,\n\t\tcodex_subagent_schema_version: CODEX_SUBAGENT_WORK_GRAPH_SCHEMA,\n\t\tactive_tool_count:\n\t\t\tsortedEdges.length > 0\n\t\t\t\t? nonCodexActiveToolCount + activeCodexSubagentEdgeCount\n\t\t\t\t: state.active_tools.length,\n\t\ttracked_tool_count:\n\t\t\tsortedEdges.length > 0\n\t\t\t\t? nonCodexTrackedToolCount + trackedCodexSubagentCount\n\t\t\t\t: state.tracked_tools.length,\n\t\tpending_request_count:\n\t\t\tstate.pending_approvals.length +\n\t\t\tstate.pending_client_tools.length +\n\t\t\tstate.pending_mcp_elicitations.length +\n\t\t\tstate.pending_user_inputs.length +\n\t\t\tstate.pending_tool_retries.length,\n\t\tcodex_subagent_tool_call_ids: [...codexToolCallIds].sort(),\n\t\tcodex_subagent_child_run_ids: [...childRunIds].sort(),\n\t\tcodex_subagent_thread_ids: [...threadIds].sort(),\n\t\t...(sortedEdges.length > 0 ? { codex_subagent_edges: sortedEdges } : {}),\n\t};\n}\n\nexport async function drainHostedRunner(\n\tinput: HostedRunnerDrainInput,\n\toptions: DrainHostedRunnerOptions,\n): Promise<HostedRunnerDrainResult | null> {\n\tconst hostedRunner = options.hostedRunner;\n\tif (!hostedRunner?.enabled || !hostedRunner.runnerSessionId) {\n\t\treturn null;\n\t}\n\n\tconst requestedAtDate = options.now?.() ?? new Date();\n\tconst leaseSnapshot = markHostedRunnerLeaseDraining(\n\t\thostedRunner,\n\t\trequestedAtDate,\n\t);\n\tconst requestedAt = requestedAtDate.toISOString();\n\tconst workspaceRoot = await resolveWorkspaceRoot(hostedRunner);\n\tconst snapshotRoot = resolve(\n\t\tworkspaceRoot,\n\t\thostedRunner.snapshotRoot ?? \".maestro/runner-snapshots\",\n\t);\n\tawait mkdir(snapshotRoot, { recursive: true });\n\tconst snapshotPath = join(\n\t\tsnapshotRoot,\n\t\tsafeManifestFileName(hostedRunner.runnerSessionId, requestedAt),\n\t);\n\tconst exportPaths = await resolveWorkspaceExportPaths(\n\t\tworkspaceRoot,\n\t\tinput.exportPaths,\n\t);\n\tconst activeSessionId =\n\t\thostedRunner.activeMaestroSessionId ??\n\t\thostedRunner.configuredMaestroSessionId;\n\tconst maestroSessionId = activeSessionId ?? hostedRunner.runnerSessionId;\n\n\tlet status: HostedRunnerDrainStatus = HostedRunnerDrainStatusValue.Drained;\n\tlet runtime: HostedRunnerSnapshotManifest[\"runtime\"] = {\n\t\tflush_status: HostedRunnerRuntimeFlushStatusValue.Skipped,\n\t\tsession_id: maestroSessionId,\n\t};\n\tlet runtimeSnapshot: HeadlessRuntimeSnapshot | undefined;\n\tlet recordPlatformDrain:\n\t\t| ((input: HostedRunnerPlatformDrainRecordInput) => Promise<void>)\n\t\t| undefined;\n\n\tif (activeSessionId && options.drainRuntime) {\n\t\ttry {\n\t\t\tconst runtimeResult = await options.drainRuntime(activeSessionId, {\n\t\t\t\treason: input.reason,\n\t\t\t\trequestedBy: input.requestedBy,\n\t\t\t\tmanifestPath: snapshotPath,\n\t\t\t});\n\t\t\tconst runtimeProtocolVersion =\n\t\t\t\truntimeResult?.protocolVersion ??\n\t\t\t\truntimeResult?.snapshot?.protocolVersion;\n\t\t\tconst runtimeCursor =\n\t\t\t\truntimeResult?.cursor ?? runtimeResult?.snapshot?.cursor;\n\t\t\truntime = runtimeResult\n\t\t\t\t? {\n\t\t\t\t\t\tflush_status: HostedRunnerRuntimeFlushStatusValue.Completed,\n\t\t\t\t\t\tsession_id: runtimeResult.sessionId,\n\t\t\t\t\t\t...(runtimeResult.sessionFile\n\t\t\t\t\t\t\t? { session_file: runtimeResult.sessionFile }\n\t\t\t\t\t\t\t: {}),\n\t\t\t\t\t\t...(runtimeProtocolVersion\n\t\t\t\t\t\t\t? { protocol_version: runtimeProtocolVersion }\n\t\t\t\t\t\t\t: {}),\n\t\t\t\t\t\t...(runtimeCursor !== undefined ? { cursor: runtimeCursor } : {}),\n\t\t\t\t\t}\n\t\t\t\t: {\n\t\t\t\t\t\tflush_status: HostedRunnerRuntimeFlushStatusValue.Skipped,\n\t\t\t\t\t\tsession_id: activeSessionId,\n\t\t\t\t\t};\n\t\t\truntimeSnapshot = runtimeResult?.snapshot;\n\t\t\trecordPlatformDrain = runtimeResult?.recordPlatformDrain;\n\t\t} catch (error) {\n\t\t\tstatus = HostedRunnerDrainStatusValue.Interrupted;\n\t\t\tconst interruptedRuntime =\n\t\t\t\terror instanceof HostedRunnerRuntimeDrainError ? error : undefined;\n\t\t\truntimeSnapshot = interruptedRuntime?.snapshot;\n\t\t\trecordPlatformDrain = interruptedRuntime?.recordPlatformDrain;\n\t\t\truntime = {\n\t\t\t\tflush_status: HostedRunnerRuntimeFlushStatusValue.Failed,\n\t\t\t\tsession_id: interruptedRuntime?.sessionId ?? activeSessionId,\n\t\t\t\t...(interruptedRuntime?.sessionFile\n\t\t\t\t\t? { session_file: interruptedRuntime.sessionFile }\n\t\t\t\t\t: {}),\n\t\t\t\t...(interruptedRuntime?.protocolVersion\n\t\t\t\t\t? { protocol_version: interruptedRuntime.protocolVersion }\n\t\t\t\t\t: {}),\n\t\t\t\t...(interruptedRuntime?.cursor !== undefined\n\t\t\t\t\t? { cursor: interruptedRuntime.cursor }\n\t\t\t\t\t: {}),\n\t\t\t\terror: sanitizeWithStaticMask(\n\t\t\t\t\terror instanceof Error ? error.message : String(error),\n\t\t\t\t),\n\t\t\t};\n\t\t}\n\t}\n\n\tconst git = await collectGitState(workspaceRoot);\n\tconst snapshot =\n\t\truntimeSnapshot ??\n\t\tbuildHostedRunnerSnapshot(maestroSessionId, workspaceRoot, runtime);\n\tconst workContinuity = collectHostedRunnerWorkContinuity(snapshot);\n\tconst retentionPolicy = buildHostedRunnerRetentionPolicy();\n\tconst runtimeContinuity = buildHostedRunnerRuntimeContinuity({\n\t\thostedRunner,\n\t\tmaestroSessionId,\n\t\tmanifestPath: snapshotPath,\n\t\truntime,\n\t\tleaseSnapshot,\n\t});\n\tconst platformEvidence = buildHostedRunnerPlatformEvidence({\n\t\thostedRunner,\n\t\tstatus,\n\t\tmaestroSessionId,\n\t\tcreatedAt: requestedAt,\n\t\tmanifestPath: snapshotPath,\n\t\truntime,\n\t\truntimeContinuity,\n\t\tworkContinuity,\n\t\tretentionPolicy,\n\t\treason: input.reason,\n\t\trequestedBy: input.requestedBy,\n\t});\n\tconst manifest: HostedRunnerSnapshotManifest = {\n\t\tprotocol_version: HOSTED_RUNNER_SNAPSHOT_MANIFEST_VERSION,\n\t\trunner_session_id: hostedRunner.runnerSessionId,\n\t\t...(hostedRunner.workspaceId\n\t\t\t? { workspace_id: hostedRunner.workspaceId }\n\t\t\t: {}),\n\t\t...(hostedRunner.agentRunId\n\t\t\t? { agent_run_id: hostedRunner.agentRunId }\n\t\t\t: {}),\n\t\tmaestro_session_id: maestroSessionId,\n\t\t...(input.reason ? { reason: input.reason } : {}),\n\t\t...(input.requestedBy ? { requested_by: input.requestedBy } : {}),\n\t\tcreated_at: requestedAt,\n\t\tworkspace_root: workspaceRoot,\n\t\truntime,\n\t\tworkspace_export: {\n\t\t\tmode: HostedRunnerWorkspaceExportModeValue.LocalPathContract,\n\t\t\tpaths: exportPaths,\n\t\t},\n\t\truntime_continuity: runtimeContinuity,\n\t\twork_continuity: workContinuity,\n\t\tplatform_evidence: platformEvidence,\n\t\tsnapshot,\n\t\tretention_policy: retentionPolicy,\n\t\t...(git ? { git } : {}),\n\t};\n\n\ttry {\n\t\tawait writeFile(\n\t\t\tsnapshotPath,\n\t\t\t`${JSON.stringify(manifest, null, 2)}\\n`,\n\t\t\t\"utf8\",\n\t\t);\n\t\thostedRunner.lastDrain = {\n\t\t\tstatus,\n\t\t\tmanifestPath: snapshotPath,\n\t\t\tdrainedAt: requestedAt,\n\t\t\t...(input.reason ? { reason: input.reason } : {}),\n\t\t\t...(input.requestedBy ? { requestedBy: input.requestedBy } : {}),\n\t\t};\n\t} catch (error) {\n\t\tconst errorMessage = `Hosted runner drain manifest persistence failed: ${\n\t\t\terror instanceof Error ? error.message : String(error)\n\t\t}`;\n\t\tawait recordPlatformDrain?.({\n\t\t\tstatus: HostedRunnerDrainStatusValue.Interrupted,\n\t\t\treason: input.reason,\n\t\t\trequestedBy: input.requestedBy,\n\t\t\tflushStatus: runtime.flush_status,\n\t\t\tmanifestPath: snapshotPath,\n\t\t\tplatformEvidence: buildHostedRunnerPlatformEvidence({\n\t\t\t\thostedRunner,\n\t\t\t\tstatus: HostedRunnerDrainStatusValue.Interrupted,\n\t\t\t\tmaestroSessionId,\n\t\t\t\tcreatedAt: requestedAt,\n\t\t\t\tmanifestPath: snapshotPath,\n\t\t\t\truntime,\n\t\t\t\truntimeContinuity,\n\t\t\t\tworkContinuity,\n\t\t\t\tretentionPolicy,\n\t\t\t\treason: input.reason,\n\t\t\t\trequestedBy: input.requestedBy,\n\t\t\t}),\n\t\t\terrorMessage,\n\t\t});\n\t\tthrow error;\n\t}\n\tawait recordPlatformDrain?.({\n\t\tstatus,\n\t\treason: input.reason,\n\t\trequestedBy: input.requestedBy,\n\t\tflushStatus: runtime.flush_status,\n\t\tmanifestPath: snapshotPath,\n\t\tplatformEvidence,\n\t\terrorMessage: runtime.error,\n\t});\n\n\treturn {\n\t\tstatus,\n\t\trunner_session_id: hostedRunner.runnerSessionId,\n\t\t...(input.reason ? { reason: input.reason } : {}),\n\t\t...(input.requestedBy ? { requested_by: input.requestedBy } : {}),\n\t\tmanifest_path: snapshotPath,\n\t\tmanifest,\n\t};\n}\n\nasync function drainActiveRuntime(\n\tcontext: HostedRunnerDrainRuntimeContext,\n\tsessionId: string,\n\t_terminal: HostedRunnerRuntimeTerminalInput,\n): Promise<HostedRunnerRuntimeDrainResult | null> {\n\tconst runtime =\n\t\tcontext.headlessRuntimeService.getRuntimeBySessionId(sessionId);\n\tif (!runtime) {\n\t\treturn null;\n\t}\n\tconst snapshot = runtime.getSnapshot();\n\tconst sessionFile = runtime.getSessionFile();\n\tconst recordPlatformDrain = async (\n\t\tinput: HostedRunnerPlatformDrainRecordInput,\n\t) => {\n\t\tawait runtime.recordHostedAgentRuntimeDrain({\n\t\t\tstatus: input.status,\n\t\t\treason: input.reason,\n\t\t\trequestedBy: input.requestedBy,\n\t\t\tflushStatus: input.flushStatus,\n\t\t\tmanifestPath: input.manifestPath,\n\t\t\tplatformEvidence: input.platformEvidence,\n\t\t\terrorMessage: input.errorMessage\n\t\t\t\t? `Hosted runner drain failed: ${input.errorMessage}`\n\t\t\t\t: undefined,\n\t\t});\n\t};\n\ttry {\n\t\tawait runtime.dispose();\n\t} catch (error) {\n\t\tthrow new HostedRunnerRuntimeDrainError(\n\t\t\terror instanceof Error ? error.message : String(error),\n\t\t\t{\n\t\t\t\tsessionId: snapshot.session_id,\n\t\t\t\tsessionFile,\n\t\t\t\tprotocolVersion: snapshot.protocolVersion,\n\t\t\t\tcursor: snapshot.cursor,\n\t\t\t\tsnapshot,\n\t\t\t\trecordPlatformDrain,\n\t\t\t},\n\t\t);\n\t}\n\treturn {\n\t\tsessionId: snapshot.session_id,\n\t\tsessionFile,\n\t\tprotocolVersion: snapshot.protocolVersion,\n\t\tcursor: snapshot.cursor,\n\t\tsnapshot,\n\t\trecordPlatformDrain,\n\t};\n}\n\nexport async function drainHostedRunnerForShutdown(\n\tcontext: HostedRunnerDrainRuntimeContext,\n\toptions: DrainHostedRunnerForShutdownOptions = {},\n): Promise<HostedRunnerDrainResult | null> {\n\treturn drainHostedRunner(\n\t\t{\n\t\t\treason: options.reason ?? HostedRunnerDrainReasonValue.ProcessShutdown,\n\t\t\trequestedBy:\n\t\t\t\toptions.requestedBy ??\n\t\t\t\tHostedRunnerDrainRequestedByValue.MaestroWebServer,\n\t\t},\n\t\t{\n\t\t\thostedRunner: context.hostedRunner,\n\t\t\tdrainRuntime: (sessionId, terminal) =>\n\t\t\t\tdrainActiveRuntime(context, sessionId, terminal),\n\t\t\tnow: options.now,\n\t\t},\n\t);\n}\n\nexport async function handleHostedRunnerDrain(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n): Promise<void> {\n\tres.setHeader(\"Cache-Control\", \"no-store\");\n\tconst body = await readJsonBody<Record<string, unknown>>(req, 64_000);\n\tconst input = parseHostedRunnerDrainInput(body);\n\tconst result = await drainHostedRunner(input, {\n\t\thostedRunner: context.hostedRunner,\n\t\tdrainRuntime: (sessionId, terminal) =>\n\t\t\tdrainActiveRuntime(context, sessionId, terminal),\n\t});\n\n\tif (!result) {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t404,\n\t\t\t{\n\t\t\t\terror: \"hosted runner drain unavailable\",\n\t\t\t},\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t\treturn;\n\t}\n\n\tsendJson(\n\t\tres,\n\t\tresult.status === HostedRunnerDrainStatusValue.Interrupted ? 503 : 200,\n\t\t{\n\t\t\tprotocol_version: HOSTED_RUNNER_DRAIN_PROTOCOL_VERSION,\n\t\t\tstatus: result.status,\n\t\t\trunner_session_id: result.runner_session_id,\n\t\t\trequested_by: result.requested_by,\n\t\t\treason: result.reason,\n\t\t\tmanifest_path: result.manifest_path,\n\t\t\tmanifest: result.manifest,\n\t\t},\n\t\tcontext.corsHeaders,\n\t\treq,\n\t);\n}\n"]}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-a2a-push.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/platform-a2a-push.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"platform-a2a-push.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/platform-a2a-push.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAuB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAgC/E,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AAOxE,wBAAgB,sCAAsC,IAAI,SAAS,MAAM,EAAE,CAE1E;AAkCD,wBAAsB,6BAA6B,CAClD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,GACvB,OAAO,CAAC,IAAI,CAAC,CAiBf"}
|
|
@@ -1,4 +1,21 @@
|
|
|
1
|
+
import { createHmac } from "node:crypto";
|
|
1
2
|
import { ApiError, getRequestHeader, readJsonBody, secureCompare, sendJson, } from "../server-utils.js";
|
|
3
|
+
// Agent-runtime derives a per-workspace notification token via HMAC and sends
|
|
4
|
+
// that in X-A2a-Notification-Token instead of the raw shared secret. See
|
|
5
|
+
// PushNotificationTokenForWorkspace in evalops/platform
|
|
6
|
+
// internal/agentruntime/a2a/push.go (constant prefix kept in sync).
|
|
7
|
+
const A2A_WORKSPACE_NOTIFICATION_TOKEN_PREFIX = "workspace-v1.";
|
|
8
|
+
function workspaceNotificationToken(secret, workspaceId) {
|
|
9
|
+
const trimmedSecret = secret.trim();
|
|
10
|
+
const trimmedWorkspace = workspaceId.trim();
|
|
11
|
+
if (!trimmedSecret || !trimmedWorkspace) {
|
|
12
|
+
return "";
|
|
13
|
+
}
|
|
14
|
+
const mac = createHmac("sha256", trimmedSecret);
|
|
15
|
+
mac.update(trimmedWorkspace);
|
|
16
|
+
return (A2A_WORKSPACE_NOTIFICATION_TOKEN_PREFIX +
|
|
17
|
+
mac.digest("base64url").replace(/=+$/, ""));
|
|
18
|
+
}
|
|
2
19
|
export const PLATFORM_A2A_PUSH_CALLBACK_PATH = "/api/platform/a2a/push";
|
|
3
20
|
const CALLBACK_TOKEN_ENV_VARS = [
|
|
4
21
|
"MAESTRO_PLATFORM_A2A_CALLBACK_TOKEN",
|
|
@@ -17,6 +34,7 @@ export async function handlePlatformA2APushCallback(req, res, context) {
|
|
|
17
34
|
if (!snapshot) {
|
|
18
35
|
throw new ApiError(400, "Invalid A2A push notification payload");
|
|
19
36
|
}
|
|
37
|
+
assertWorkspaceScopedCallbackTokenSnapshot(req, snapshot);
|
|
20
38
|
const hostedRunner = context.hostedRunner;
|
|
21
39
|
assertHostedRunnerA2APushBoundary(hostedRunner, snapshot);
|
|
22
40
|
if (hostedRunner) {
|
|
@@ -30,7 +48,40 @@ function assertCallbackToken(req) {
|
|
|
30
48
|
return;
|
|
31
49
|
}
|
|
32
50
|
const provided = getRequestHeader(req, "x-a2a-notification-token");
|
|
33
|
-
if (!provided
|
|
51
|
+
if (!provided) {
|
|
52
|
+
throw new ApiError(401, "Invalid A2A notification token");
|
|
53
|
+
}
|
|
54
|
+
if (secureCompare(provided, expected)) {
|
|
55
|
+
return;
|
|
56
|
+
}
|
|
57
|
+
// Agent-runtime derives a workspace-scoped HMAC token from the same shared
|
|
58
|
+
// secret when X-Evalops-Workspace-Id is present and the callback host/path
|
|
59
|
+
// matches its allowlist; accept that variant too.
|
|
60
|
+
const workspaceId = getRequestHeader(req, "x-evalops-workspace-id", "x-workspace-id");
|
|
61
|
+
if (workspaceId) {
|
|
62
|
+
const derived = workspaceNotificationToken(expected, workspaceId);
|
|
63
|
+
if (derived && secureCompare(provided, derived)) {
|
|
64
|
+
return;
|
|
65
|
+
}
|
|
66
|
+
}
|
|
67
|
+
throw new ApiError(401, "Invalid A2A notification token");
|
|
68
|
+
}
|
|
69
|
+
function assertWorkspaceScopedCallbackTokenSnapshot(req, snapshot) {
|
|
70
|
+
const expected = callbackToken();
|
|
71
|
+
if (!expected) {
|
|
72
|
+
return;
|
|
73
|
+
}
|
|
74
|
+
const provided = getRequestHeader(req, "x-a2a-notification-token");
|
|
75
|
+
if (!provided ||
|
|
76
|
+
!provided.startsWith(A2A_WORKSPACE_NOTIFICATION_TOKEN_PREFIX)) {
|
|
77
|
+
return;
|
|
78
|
+
}
|
|
79
|
+
const workspaceId = snapshot.workspaceId;
|
|
80
|
+
if (!workspaceId) {
|
|
81
|
+
throw new ApiError(401, "Invalid A2A notification token");
|
|
82
|
+
}
|
|
83
|
+
const derived = workspaceNotificationToken(expected, workspaceId);
|
|
84
|
+
if (!derived || !secureCompare(provided, derived)) {
|
|
34
85
|
throw new ApiError(401, "Invalid A2A notification token");
|
|
35
86
|
}
|
|
36
87
|
}
|
|
@@ -126,7 +177,7 @@ function platformA2APushRequestContext(req) {
|
|
|
126
177
|
tracestate: getRequestHeader(req, "tracestate") ?? undefined,
|
|
127
178
|
organizationId: getRequestHeader(req, "x-organization-id", "x-evalops-organization-id") ??
|
|
128
179
|
undefined,
|
|
129
|
-
workspaceId: getRequestHeader(req, "x-workspace-id", "x-
|
|
180
|
+
workspaceId: getRequestHeader(req, "x-evalops-workspace-id", "x-workspace-id") ??
|
|
130
181
|
undefined,
|
|
131
182
|
agentId: getRequestHeader(req, "x-evalops-agent-id", "x-maestro-agent-id") ??
|
|
132
183
|
undefined,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-a2a-push.js","sourceRoot":"","sources":["../../../src/server/handlers/platform-a2a-push.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAExE,MAAM,uBAAuB,GAAG;IAC/B,qCAAqC;IACrC,4BAA4B;CACnB,CAAC;AAEX,MAAM,UAAU,sCAAsC;IACrD,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAkCD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAU,GAAG,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,iCAAiC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,YAAY,EAAE,CAAC;QAClB,yBAAyB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAoB;IAChD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC;AAED,SAAS,uBAAuB,CAC/B,OAAgB,EAChB,GAAoB;IAEpB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,cAAc,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,0BAA0B,CAChC;YACC,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC;YACjD,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;YACzD,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC;YACjD,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC;YACxC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC;YAClD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,gBAAgB,CAAC;YACtE,gBAAgB,EAAE,cAAc,CAC/B,OAAO,CAAC,YAAY,EACpB,kBAAkB,CAClB;SACD,EACD,OAAO,CAAC,YAAY,EACpB,cAAc,CACd,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,0BAA0B,CAChC;YACC,IAAI,EAAE,MAAM;YACZ,MAAM;YACN,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;YACzC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;YACjD,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;YACzC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,EACD,OAAO,CAAC,IAAI,EACZ,cAAc,CACd,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,0BAA0B,CAChC;YACC,IAAI,EAAE,gBAAgB;YACtB,MAAM;YACN,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC;YACnD,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC;YAC3D,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC;YACnD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,EACD,OAAO,CAAC,cAAc,EACtB,cAAc,CACd,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,0BAA0B,CAChC;YACC,IAAI,EAAE,SAAS;YACf,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC;YAClC,GAAG,aAAa;YAChB,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;YACpD,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;YAC5C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,EACD,OAAO,CAAC,OAAO,EACf,cAAc,CACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,0BAA0B,CAClC,QAAiC,EACjC,OAAmB,EACnB,cAAsC;IAEtC,MAAM,eAAe,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC;IACnE,4BAA4B,CAAC,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IACrE,OAAO;QACN,GAAG,QAAQ;QACX,GAAG,eAAe;QAClB,GAAG,cAAc;QACjB,cAAc,EACb,QAAQ,CAAC,cAAc;YACvB,eAAe,CAAC,cAAc;YAC9B,cAAc,CAAC,cAAc;QAC9B,WAAW,EACV,QAAQ,CAAC,WAAW;YACpB,eAAe,CAAC,WAAW;YAC3B,cAAc,CAAC,WAAW;QAC3B,OAAO,EAAE,cAAc,IAAI,cAAc,CAAC,OAAO;KACjD,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACrC,GAAoB;IAEpB,OAAO,6BAA6B,CAAC;QACpC,WAAW,EAAE,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,SAAS;QAC9D,UAAU,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,SAAS;QAC5D,cAAc,EACb,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,EAAE,2BAA2B,CAAC;YACvE,SAAS;QACV,WAAW,EACV,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,EAAE,wBAAwB,CAAC;YACjE,SAAS;QACV,OAAO,EACN,gBAAgB,CAAC,GAAG,EAAE,oBAAoB,EAAE,oBAAoB,CAAC;YACjE,SAAS;QACV,OAAO,EACN,gBAAgB,CAAC,GAAG,EAAE,oBAAoB,EAAE,mBAAmB,CAAC;YAChE,SAAS;KACV,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACtC,KAAiB;IAEjB,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;IACX,CAAC;IACD,OAAO,6BAA6B,CAAC;QACpC,WAAW,EACV,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC;YACpC,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC;YACpC,WAAW,CAAC,QAAQ,EAAE,cAAc,CAAC;QACtC,UAAU,EACT,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC;YACnC,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC;YACnC,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC;QACrC,cAAc,EACb,WAAW,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YACvC,WAAW,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QACzC,WAAW,EACV,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC;YACpC,WAAW,CAAC,QAAQ,EAAE,cAAc,CAAC;QACtC,OAAO,EACN,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC;QACtE,OAAO,EACN,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC;KACtE,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CACrC,OAA+B;IAE/B,OAAO,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAC5D,CACyB,CAAC;AAC7B,CAAC;AAED,SAAS,iCAAiC,CACzC,YAA6C,EAC7C,QAAiC;IAEjC,IACC,YAAY,EAAE,SAAS;QACvB,QAAQ,CAAC,MAAM;QACf,YAAY,CAAC,SAAS,KAAK,QAAQ,CAAC,MAAM,EACzC,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,IACC,YAAY,EAAE,YAAY;QAC1B,oCAAoC,CAAC,QAAQ,CAAC;QAC9C,CAAC,yBAAyB,CAAC,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC,EAC9D,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAClD,CAAC;IACD,IACC,YAAY,EAAE,OAAO;QACrB,QAAQ,CAAC,OAAO;QAChB,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IACjE,CAAC;IACD,IACC,YAAY;QACZ,QAAQ,CAAC,IAAI,KAAK,SAAS;QAC3B,CAAC,YAAY,CAAC,YAAY;QAC1B,CAAC,oCAAoC,CAAC,QAAQ,CAAC,EAC9C,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,kDAAkD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC;QAChC,OAAO;IACR,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,WAAW,CAAC;IAC7C,IAAI,eAAe,EAAE,CAAC;QACrB,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;QACrE,CAAC;QACD,OAAO;IACR,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,qDAAqD,CACrD,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,yBAAyB,CACjC,YAAiC,EACjC,QAAiC;IAEjC,YAAY,CAAC,mBAAmB,GAAG,QAAQ,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAChD,YAAY,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC1C,CAAC;IACD,IACC,QAAQ,CAAC,SAAS;QAClB,CAAC,YAAY,CAAC,YAAY;QAC1B,QAAQ,CAAC,IAAI,KAAK,SAAS;QAC3B,oCAAoC,CAAC,QAAQ,CAAC,EAC7C,CAAC;QACF,YAAY,CAAC,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC;IAChD,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB,EAAE,GAAW;IACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,OAAO,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CACvB,OAAmB,EACnB,KAAiB;IAKjB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAC3E,mCAAmC,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO;QACN,GAAG,aAAa,CACf,aAAa,EACb,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAChE;QACD,GAAG,aAAa,CACf,gBAAgB,EAChB,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE;YAC/B,gBAAgB;YAChB,iBAAiB;YACjB,OAAO;YACP,QAAQ;SACR,CAAC,CACF;QACD,GAAG,aAAa,CACf,UAAU,EACV,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CACpE;QACD,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;KACxC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACxB,OAAmB,EACnB,KAAiB,EACjB,IAAuB;IAEvB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YACvD,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACvB,OAAmB,EACnB,KAAiB;IAEjB,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO;QACN,GAAG,aAAa,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5C,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC7B,OAAmB,EACnB,KAAiB;IAEjB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QACvD,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE;YACrC,WAAW;YACX,YAAY;YACZ,cAAc;YACd,gBAAgB;SAChB,CAAC,CAAC;QACH,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC;QACnD,CAAC,CAAC,OAAO,CAAC,OAAO;QACjB,CAAC,CAAC,SAAS,CAAC;IACb,IAAI,cAAc,EAAE,CAAC;QACpB,2BAA2B,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CACxB,OAAmB,EACnB,KAAiB;IAEjB,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,2BAA2B,CACnC,MAAgB,EAChB,OAAmB;IAEnB,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACzD,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE;QACtC,WAAW;QACX,YAAY;QACZ,cAAc;QACd,gBAAgB;KAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC7B,MAAgB,EAChB,KAAiB,EACjB,IAAuB;IAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;AACF,CAAC;AAED,SAAS,0BAA0B,CAClC,MAAgB,EAChB,KAAiB,EACjB,IAAuB;IAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC5B,oBAAoB,CACnB,MAAM,EACN,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACpD,CAAC;YACH,CAAC;QACF,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC5C,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrB,CAAC,CAAC,SAAS,CAAC;QACb,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC9B,oBAAoB,CACnB,MAAM,EACN,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACpD,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,oBAAoB,CAC5B,MAAgB,EAChB,KAAyB;IAEzB,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO;IACR,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,oCAAoC,CAC5C,QAAiC;IAEjC,OAAO,CACN,QAAQ,CAAC,IAAI,KAAK,SAAS;QAC3B,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAClE,CAAC;AACH,CAAC;AAED,SAAS,oCAAoC,CAC5C,QAAiC;IAEjC,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,yBAAyB,CACjC,QAAiC,EACjC,SAAiB;IAEjB,OAAO,CACN,CAAC,QAAQ,CAAC,SAAS;QAClB,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;QACtD,CAAC,CAAC,KAAK,CAAC;QACT,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC9C,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAC3C,CACD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACvB,OAAmB,EACnB,KAAiB,EACjB,IAAuB;IAEvB,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,EAAE,CAAC;gBACZ,OAAO,MAAM,CAAC;YACf,CAAC;YACD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC7C,IAAI,QAAQ,EAAE,CAAC;gBACd,OAAO,QAAQ,CAAC;YACjB,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CACxB,OAAmB,EACnB,KAAiB;IAEjB,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,IAAI,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC;IACD,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CACrB,GAAM,EACN,KAAyB;IAEzB,OAAO,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IAClD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,KAAa;IACzD,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,4BAA4B,CACpC,eAAmC,EACnC,cAAkC;IAElC,IACC,eAAe;QACf,cAAc;QACd,CAAC,mBAAmB,CAAC,eAAe,EAAE,cAAc,CAAC,EACpD,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IACjE,CAAC;AACF,CAAC;AAED,SAAS,mCAAmC,CAC3C,QAA2B;IAE3B,IACC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAC3E,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IACjE,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACvD,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB,EAAE,GAAW;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa;IACrB,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { HostedRunnerContext, WebServerContext } from \"../app-context.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\treadJsonBody,\n\tsecureCompare,\n\tsendJson,\n} from \"../server-utils.js\";\n\nexport const PLATFORM_A2A_PUSH_CALLBACK_PATH = \"/api/platform/a2a/push\";\n\nconst CALLBACK_TOKEN_ENV_VARS = [\n\t\"MAESTRO_PLATFORM_A2A_CALLBACK_TOKEN\",\n\t\"MAESTRO_A2A_CALLBACK_TOKEN\",\n] as const;\n\nexport function platformA2APushAuthBoundaryExemptPaths(): readonly string[] {\n\treturn callbackToken() ? [PLATFORM_A2A_PUSH_CALLBACK_PATH] : [];\n}\n\ntype JsonObject = Record<string, unknown>;\n\ninterface PlatformA2APushSnapshot {\n\tkind: \"statusUpdate\" | \"artifactUpdate\" | \"task\" | \"message\";\n\ttaskId?: string;\n\tmessageId?: string;\n\tmessageIds?: string[];\n\tcontextId?: string;\n\tworkspaceId?: string;\n\torganizationId?: string;\n\ttenantId?: string;\n\tstate?: string;\n\tfinal?: boolean;\n\treceivedAt: string;\n\truntimeEventId?: string;\n\truntimeEventType?: string;\n\ttraceparent?: string;\n\ttracestate?: string;\n\tagentId?: string;\n\tactorId?: string;\n}\n\ntype PlatformA2APushContext = Pick<\n\tPlatformA2APushSnapshot,\n\t| \"traceparent\"\n\t| \"tracestate\"\n\t| \"organizationId\"\n\t| \"workspaceId\"\n\t| \"agentId\"\n\t| \"actorId\"\n>;\n\nexport async function handlePlatformA2APushCallback(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n): Promise<void> {\n\tif (req.method !== \"POST\") {\n\t\tthrow new ApiError(405, \"Method not allowed\");\n\t}\n\tassertCallbackToken(req);\n\tconst body = await readJsonBody<unknown>(req);\n\tconst snapshot = platformA2APushSnapshot(body, req);\n\tif (!snapshot) {\n\t\tthrow new ApiError(400, \"Invalid A2A push notification payload\");\n\t}\n\tconst hostedRunner = context.hostedRunner;\n\tassertHostedRunnerA2APushBoundary(hostedRunner, snapshot);\n\tif (hostedRunner) {\n\t\trecordHostedRunnerA2APush(hostedRunner, snapshot);\n\t}\n\tsendJson(res, 202, { accepted: true, ...snapshot }, context.corsHeaders, req);\n}\n\nfunction assertCallbackToken(req: IncomingMessage): void {\n\tconst expected = callbackToken();\n\tif (!expected) {\n\t\treturn;\n\t}\n\tconst provided = getRequestHeader(req, \"x-a2a-notification-token\");\n\tif (!provided || !secureCompare(provided, expected)) {\n\t\tthrow new ApiError(401, \"Invalid A2A notification token\");\n\t}\n}\n\nfunction platformA2APushSnapshot(\n\tpayload: unknown,\n\treq: IncomingMessage,\n): PlatformA2APushSnapshot | null {\n\tif (!isJsonObject(payload)) {\n\t\treturn null;\n\t}\n\tconst requestContext = platformA2APushRequestContext(req);\n\tif (isJsonObject(payload.statusUpdate)) {\n\t\tconst taskId = stringField(payload.statusUpdate, \"taskId\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn withPlatformA2APushContext(\n\t\t\t{\n\t\t\t\tkind: \"statusUpdate\",\n\t\t\t\ttaskId,\n\t\t\t\t...messageIdFields(payload, payload.statusUpdate),\n\t\t\t\tcontextId: stringField(payload.statusUpdate, \"contextId\"),\n\t\t\t\t...ownershipFields(payload, payload.statusUpdate),\n\t\t\t\tstate: statusState(payload.statusUpdate),\n\t\t\t\tfinal: booleanField(payload.statusUpdate, \"final\"),\n\t\t\t\treceivedAt: new Date().toISOString(),\n\t\t\t\truntimeEventId: metadataString(payload.statusUpdate, \"runtimeEventId\"),\n\t\t\t\truntimeEventType: metadataString(\n\t\t\t\t\tpayload.statusUpdate,\n\t\t\t\t\t\"runtimeEventType\",\n\t\t\t\t),\n\t\t\t},\n\t\t\tpayload.statusUpdate,\n\t\t\trequestContext,\n\t\t);\n\t}\n\tif (isJsonObject(payload.task)) {\n\t\tconst taskId = stringField(payload.task, \"id\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn withPlatformA2APushContext(\n\t\t\t{\n\t\t\t\tkind: \"task\",\n\t\t\t\ttaskId,\n\t\t\t\t...messageIdFields(payload, payload.task),\n\t\t\t\tcontextId: stringField(payload.task, \"contextId\"),\n\t\t\t\t...ownershipFields(payload, payload.task),\n\t\t\t\tstate: statusState(payload.task),\n\t\t\t\treceivedAt: new Date().toISOString(),\n\t\t\t},\n\t\t\tpayload.task,\n\t\t\trequestContext,\n\t\t);\n\t}\n\tif (isJsonObject(payload.artifactUpdate)) {\n\t\tconst taskId = stringField(payload.artifactUpdate, \"taskId\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn withPlatformA2APushContext(\n\t\t\t{\n\t\t\t\tkind: \"artifactUpdate\",\n\t\t\t\ttaskId,\n\t\t\t\t...messageIdFields(payload, payload.artifactUpdate),\n\t\t\t\tcontextId: stringField(payload.artifactUpdate, \"contextId\"),\n\t\t\t\t...ownershipFields(payload, payload.artifactUpdate),\n\t\t\t\treceivedAt: new Date().toISOString(),\n\t\t\t},\n\t\t\tpayload.artifactUpdate,\n\t\t\trequestContext,\n\t\t);\n\t}\n\tif (isJsonObject(payload.message)) {\n\t\tconst taskId = stringField(payload.message, \"taskId\");\n\t\tconst messageFields = messageIdFields(payload, payload.message);\n\t\tif (!messageFields.messageId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn withPlatformA2APushContext(\n\t\t\t{\n\t\t\t\tkind: \"message\",\n\t\t\t\t...optionalField(\"taskId\", taskId),\n\t\t\t\t...messageFields,\n\t\t\t\tcontextId: stringField(payload.message, \"contextId\"),\n\t\t\t\t...ownershipFields(payload, payload.message),\n\t\t\t\treceivedAt: new Date().toISOString(),\n\t\t\t},\n\t\t\tpayload.message,\n\t\t\trequestContext,\n\t\t);\n\t}\n\treturn null;\n}\n\nfunction withPlatformA2APushContext(\n\tsnapshot: PlatformA2APushSnapshot,\n\tpayload: JsonObject,\n\trequestContext: PlatformA2APushContext,\n): PlatformA2APushSnapshot {\n\tconst metadataContext = platformA2APushMetadataContext(payload);\n\tconst payloadAgentId = snapshot.agentId ?? metadataContext.agentId;\n\tassertCompatibleAgentContext(payloadAgentId, requestContext.agentId);\n\treturn {\n\t\t...snapshot,\n\t\t...metadataContext,\n\t\t...requestContext,\n\t\torganizationId:\n\t\t\tsnapshot.organizationId ??\n\t\t\tmetadataContext.organizationId ??\n\t\t\trequestContext.organizationId,\n\t\tworkspaceId:\n\t\t\tsnapshot.workspaceId ??\n\t\t\tmetadataContext.workspaceId ??\n\t\t\trequestContext.workspaceId,\n\t\tagentId: payloadAgentId ?? requestContext.agentId,\n\t};\n}\n\nfunction platformA2APushRequestContext(\n\treq: IncomingMessage,\n): PlatformA2APushContext {\n\treturn compactPlatformA2APushContext({\n\t\ttraceparent: getRequestHeader(req, \"traceparent\") ?? undefined,\n\t\ttracestate: getRequestHeader(req, \"tracestate\") ?? undefined,\n\t\torganizationId:\n\t\t\tgetRequestHeader(req, \"x-organization-id\", \"x-evalops-organization-id\") ??\n\t\t\tundefined,\n\t\tworkspaceId:\n\t\t\tgetRequestHeader(req, \"x-workspace-id\", \"x-evalops-workspace-id\") ??\n\t\t\tundefined,\n\t\tagentId:\n\t\t\tgetRequestHeader(req, \"x-evalops-agent-id\", \"x-maestro-agent-id\") ??\n\t\t\tundefined,\n\t\tactorId:\n\t\t\tgetRequestHeader(req, \"x-evalops-actor-id\", \"x-evalops-user-id\") ??\n\t\t\tundefined,\n\t});\n}\n\nfunction platformA2APushMetadataContext(\n\tvalue: JsonObject,\n): PlatformA2APushContext {\n\tconst metadata = isJsonObject(value.metadata) ? value.metadata : undefined;\n\tif (!metadata) {\n\t\treturn {};\n\t}\n\treturn compactPlatformA2APushContext({\n\t\ttraceparent:\n\t\t\tstringField(metadata, \"traceparent\") ??\n\t\t\tstringField(metadata, \"traceParent\") ??\n\t\t\tstringField(metadata, \"trace_parent\"),\n\t\ttracestate:\n\t\t\tstringField(metadata, \"tracestate\") ??\n\t\t\tstringField(metadata, \"traceState\") ??\n\t\t\tstringField(metadata, \"trace_state\"),\n\t\torganizationId:\n\t\t\tstringField(metadata, \"organizationId\") ??\n\t\t\tstringField(metadata, \"organization_id\"),\n\t\tworkspaceId:\n\t\t\tstringField(metadata, \"workspaceId\") ??\n\t\t\tstringField(metadata, \"workspace_id\"),\n\t\tagentId:\n\t\t\tstringField(metadata, \"agentId\") ?? stringField(metadata, \"agent_id\"),\n\t\tactorId:\n\t\t\tstringField(metadata, \"actorId\") ?? stringField(metadata, \"actor_id\"),\n\t});\n}\n\nfunction compactPlatformA2APushContext(\n\tcontext: PlatformA2APushContext,\n): PlatformA2APushContext {\n\treturn Object.fromEntries(\n\t\tObject.entries(context).filter(\n\t\t\t([, value]) => typeof value === \"string\" && value.length > 0,\n\t\t),\n\t) as PlatformA2APushContext;\n}\n\nfunction assertHostedRunnerA2APushBoundary(\n\thostedRunner: HostedRunnerContext | undefined,\n\tsnapshot: PlatformA2APushSnapshot,\n): void {\n\tif (\n\t\thostedRunner?.a2aTaskId &&\n\t\tsnapshot.taskId &&\n\t\thostedRunner.a2aTaskId !== snapshot.taskId\n\t) {\n\t\tthrow new ApiError(404, \"A2A task not found\");\n\t}\n\tif (\n\t\thostedRunner?.a2aMessageId &&\n\t\tsnapshotHasBoundaryMessageIdEvidence(snapshot) &&\n\t\t!snapshotIncludesMessageId(snapshot, hostedRunner.a2aMessageId)\n\t) {\n\t\tthrow new ApiError(404, \"A2A message not found\");\n\t}\n\tif (\n\t\thostedRunner?.agentId &&\n\t\tsnapshot.agentId &&\n\t\t!sameExactIdentifier(snapshot.agentId, hostedRunner.agentId)\n\t) {\n\t\tthrow new ApiError(403, \"A2A push notification agent mismatch\");\n\t}\n\tif (\n\t\thostedRunner &&\n\t\tsnapshot.kind === \"message\" &&\n\t\t!hostedRunner.a2aMessageId &&\n\t\t!snapshotHasMessageBindingCorrelation(snapshot)\n\t) {\n\t\tthrow new ApiError(403, \"A2A message push is missing correlation metadata\");\n\t}\n\tif (!hostedRunner?.workspaceId) {\n\t\treturn;\n\t}\n\n\tconst workspaceMarker = snapshot.workspaceId;\n\tif (workspaceMarker) {\n\t\tif (!sameIdentifier(workspaceMarker, hostedRunner.workspaceId)) {\n\t\t\tthrow new ApiError(403, \"A2A push notification workspace mismatch\");\n\t\t}\n\t\treturn;\n\t}\n\n\tif (!hostedRunner.a2aTaskId) {\n\t\tthrow new ApiError(\n\t\t\t403,\n\t\t\t\"A2A push notification is missing workspace metadata\",\n\t\t);\n\t}\n}\n\nfunction recordHostedRunnerA2APush(\n\thostedRunner: HostedRunnerContext,\n\tsnapshot: PlatformA2APushSnapshot,\n): void {\n\thostedRunner.lastPlatformA2APush = snapshot;\n\tif (snapshot.taskId && !hostedRunner.a2aTaskId) {\n\t\thostedRunner.a2aTaskId = snapshot.taskId;\n\t}\n\tif (\n\t\tsnapshot.messageId &&\n\t\t!hostedRunner.a2aMessageId &&\n\t\tsnapshot.kind === \"message\" &&\n\t\tsnapshotHasMessageBindingCorrelation(snapshot)\n\t) {\n\t\thostedRunner.a2aMessageId = snapshot.messageId;\n\t}\n}\n\nfunction statusState(value: JsonObject): string | undefined {\n\tconst status = isJsonObject(value.status) ? value.status : undefined;\n\treturn status ? stringField(status, \"state\") : undefined;\n}\n\nfunction metadataString(value: JsonObject, key: string): string | undefined {\n\tconst metadata = isJsonObject(value.metadata) ? value.metadata : undefined;\n\treturn metadata ? stringField(metadata, key) : undefined;\n}\n\nfunction ownershipFields(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n): Pick<\n\tPlatformA2APushSnapshot,\n\t\"workspaceId\" | \"organizationId\" | \"tenantId\" | \"agentId\"\n> {\n\tconst agentIds = ownershipStrings(payload, value, [\"agentId\", \"agent_id\"]);\n\tassertCompatiblePayloadAgentContext(agentIds);\n\treturn {\n\t\t...optionalField(\n\t\t\t\"workspaceId\",\n\t\t\townershipString(payload, value, [\"workspaceId\", \"workspace_id\"]),\n\t\t),\n\t\t...optionalField(\n\t\t\t\"organizationId\",\n\t\t\townershipString(payload, value, [\n\t\t\t\t\"organizationId\",\n\t\t\t\t\"organization_id\",\n\t\t\t\t\"orgId\",\n\t\t\t\t\"org_id\",\n\t\t\t]),\n\t\t),\n\t\t...optionalField(\n\t\t\t\"tenantId\",\n\t\t\townershipString(payload, value, [\"tenantId\", \"tenant_id\", \"tenant\"]),\n\t\t),\n\t\t...optionalField(\"agentId\", agentIds[0]),\n\t};\n}\n\nfunction ownershipStrings(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n\tkeys: readonly string[],\n): string[] {\n\tconst result: string[] = [];\n\tfor (const source of ownershipSources(payload, value)) {\n\t\tfor (const key of keys) {\n\t\t\tpushUniqueIdentifier(result, stringField(source, key));\n\t\t\tpushUniqueIdentifier(result, metadataString(source, key));\n\t\t}\n\t}\n\treturn result;\n}\n\nfunction messageIdFields(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n): Pick<PlatformA2APushSnapshot, \"messageId\" | \"messageIds\"> {\n\tconst messageIds = messageIdsFromSources(payload, value);\n\treturn {\n\t\t...optionalField(\"messageId\", messageIds[0]),\n\t\t...(messageIds.length > 0 ? { messageIds } : {}),\n\t};\n}\n\nfunction messageIdsFromSources(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n): string[] {\n\tconst result: string[] = [];\n\tfor (const source of messageIdSources(payload, value)) {\n\t\tpushIdentifierStrings(result, source, [\n\t\t\t\"messageId\",\n\t\t\t\"message_id\",\n\t\t\t\"a2aMessageId\",\n\t\t\t\"a2a_message_id\",\n\t\t]);\n\t\tpushIdentifierArrayStrings(result, source, [\"messageIds\", \"message_ids\"]);\n\t}\n\tconst payloadMessage = isJsonObject(payload.message)\n\t\t? payload.message\n\t\t: undefined;\n\tif (payloadMessage) {\n\t\tpushMessageObjectIdentifier(result, payloadMessage);\n\t}\n\treturn result;\n}\n\nfunction messageIdSources(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n): JsonObject[] {\n\tconst sources = [value, payload];\n\tif (isJsonObject(value.artifact)) {\n\t\tsources.push(value.artifact);\n\t}\n\treturn sources;\n}\n\nfunction pushMessageObjectIdentifier(\n\ttarget: string[],\n\tmessage: JsonObject,\n): void {\n\tpushUniqueIdentifier(target, stringField(message, \"id\"));\n\tpushIdentifierStrings(target, message, [\n\t\t\"messageId\",\n\t\t\"message_id\",\n\t\t\"a2aMessageId\",\n\t\t\"a2a_message_id\",\n\t]);\n}\n\nfunction pushIdentifierStrings(\n\ttarget: string[],\n\tvalue: JsonObject,\n\tkeys: readonly string[],\n): void {\n\tfor (const key of keys) {\n\t\tpushUniqueIdentifier(target, stringField(value, key));\n\t\tconst metadata = metadataString(value, key);\n\t\tpushUniqueIdentifier(target, metadata);\n\t}\n}\n\nfunction pushIdentifierArrayStrings(\n\ttarget: string[],\n\tvalue: JsonObject,\n\tkeys: readonly string[],\n): void {\n\tfor (const key of keys) {\n\t\tconst direct = value[key];\n\t\tif (Array.isArray(direct)) {\n\t\t\tfor (const entry of direct) {\n\t\t\t\tpushUniqueIdentifier(\n\t\t\t\t\ttarget,\n\t\t\t\t\ttypeof entry === \"string\" ? entry.trim() : undefined,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t\tconst metadata = isJsonObject(value.metadata)\n\t\t\t? value.metadata[key]\n\t\t\t: undefined;\n\t\tif (Array.isArray(metadata)) {\n\t\t\tfor (const entry of metadata) {\n\t\t\t\tpushUniqueIdentifier(\n\t\t\t\t\ttarget,\n\t\t\t\t\ttypeof entry === \"string\" ? entry.trim() : undefined,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n}\n\nfunction pushUniqueIdentifier(\n\ttarget: string[],\n\tvalue: string | undefined,\n): void {\n\tif (!value || target.some((entry) => sameMessageIdentifier(entry, value))) {\n\t\treturn;\n\t}\n\ttarget.push(value);\n}\n\nfunction snapshotHasBoundaryMessageIdEvidence(\n\tsnapshot: PlatformA2APushSnapshot,\n): boolean {\n\treturn (\n\t\tsnapshot.kind === \"message\" ||\n\t\t(snapshot.kind === \"task\" && Boolean(snapshot.messageIds?.length))\n\t);\n}\n\nfunction snapshotHasMessageBindingCorrelation(\n\tsnapshot: PlatformA2APushSnapshot,\n): boolean {\n\treturn Boolean(snapshot.taskId || snapshot.workspaceId);\n}\n\nfunction snapshotIncludesMessageId(\n\tsnapshot: PlatformA2APushSnapshot,\n\tmessageId: string,\n): boolean {\n\treturn (\n\t\t(snapshot.messageId\n\t\t\t? sameMessageIdentifier(snapshot.messageId, messageId)\n\t\t\t: false) ||\n\t\t(snapshot.messageIds ?? []).some((candidate) =>\n\t\t\tsameMessageIdentifier(candidate, messageId),\n\t\t)\n\t);\n}\n\nfunction ownershipString(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n\tkeys: readonly string[],\n): string | undefined {\n\tfor (const source of ownershipSources(payload, value)) {\n\t\tfor (const key of keys) {\n\t\t\tconst direct = stringField(source, key);\n\t\t\tif (direct) {\n\t\t\t\treturn direct;\n\t\t\t}\n\t\t\tconst metadata = metadataString(source, key);\n\t\t\tif (metadata) {\n\t\t\t\treturn metadata;\n\t\t\t}\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction ownershipSources(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n): JsonObject[] {\n\tconst sources = [value, payload];\n\tconst status = isJsonObject(value.status) ? value.status : undefined;\n\tif (status) {\n\t\tsources.push(status);\n\t\tif (isJsonObject(status.message)) {\n\t\t\tsources.push(status.message);\n\t\t}\n\t}\n\tif (isJsonObject(value.artifact)) {\n\t\tsources.push(value.artifact);\n\t}\n\treturn sources;\n}\n\nfunction optionalField<K extends string>(\n\tkey: K,\n\tvalue: string | undefined,\n): Partial<Record<K, string>> {\n\treturn value ? ({ [key]: value } as Partial<Record<K, string>>) : {};\n}\n\nfunction sameIdentifier(left: string, right: string): boolean {\n\treturn left.trim().toLowerCase() === right.trim().toLowerCase();\n}\n\nfunction sameMessageIdentifier(left: string, right: string): boolean {\n\treturn left.trim() === right.trim();\n}\n\nfunction assertCompatibleAgentContext(\n\tmetadataAgentId: string | undefined,\n\trequestAgentId: string | undefined,\n): void {\n\tif (\n\t\tmetadataAgentId &&\n\t\trequestAgentId &&\n\t\t!sameExactIdentifier(metadataAgentId, requestAgentId)\n\t) {\n\t\tthrow new ApiError(403, \"A2A push notification agent mismatch\");\n\t}\n}\n\nfunction assertCompatiblePayloadAgentContext(\n\tagentIds: readonly string[],\n): void {\n\tif (\n\t\tagentIds.length > 1 &&\n\t\tagentIds.some((agentId) => !sameExactIdentifier(agentId, agentIds[0] ?? \"\"))\n\t) {\n\t\tthrow new ApiError(403, \"A2A push notification agent mismatch\");\n\t}\n}\n\nfunction sameExactIdentifier(left: string, right: string): boolean {\n\treturn left.trim() === right.trim();\n}\n\nfunction stringField(value: JsonObject, key: string): string | undefined {\n\tconst field = value[key];\n\treturn typeof field === \"string\" && field.trim().length > 0\n\t\t? field.trim()\n\t\t: undefined;\n}\n\nfunction booleanField(value: JsonObject, key: string): boolean | undefined {\n\tconst field = value[key];\n\treturn typeof field === \"boolean\" ? field : undefined;\n}\n\nfunction isJsonObject(value: unknown): value is JsonObject {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction callbackToken(): string | undefined {\n\tfor (const name of CALLBACK_TOKEN_ENV_VARS) {\n\t\tconst value = process.env[name]?.trim();\n\t\tif (value) {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n"]}
|
|
1
|
+
{"version":3,"file":"platform-a2a-push.js","sourceRoot":"","sources":["../../../src/server/handlers/platform-a2a-push.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACN,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAE5B,8EAA8E;AAC9E,yEAAyE;AACzE,wDAAwD;AACxD,oEAAoE;AACpE,MAAM,uCAAuC,GAAG,eAAe,CAAC;AAEhE,SAAS,0BAA0B,CAClC,MAAc,EACd,WAAmB;IAEnB,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,gBAAgB,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,aAAa,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAChD,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC7B,OAAO,CACN,uCAAuC;QACvC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAC1C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAExE,MAAM,uBAAuB,GAAG;IAC/B,qCAAqC;IACrC,4BAA4B;CACnB,CAAC;AAEX,MAAM,UAAU,sCAAsC;IACrD,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAkCD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAU,GAAG,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;IAClE,CAAC;IACD,0CAA0C,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,iCAAiC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,YAAY,EAAE,CAAC;QAClB,yBAAyB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAoB;IAChD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACvC,OAAO;IACR,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,kDAAkD;IAClD,MAAM,WAAW,GAAG,gBAAgB,CACnC,GAAG,EACH,wBAAwB,EACxB,gBAAgB,CAChB,CAAC;IACF,IAAI,WAAW,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,0BAA0B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAClE,IAAI,OAAO,IAAI,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YACjD,OAAO;QACR,CAAC;IACF,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,0CAA0C,CAClD,GAAoB,EACpB,QAAiC;IAEjC,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACnE,IACC,CAAC,QAAQ;QACT,CAAC,QAAQ,CAAC,UAAU,CAAC,uCAAuC,CAAC,EAC5D,CAAC;QACF,OAAO;IACR,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACzC,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAClE,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC;AAED,SAAS,uBAAuB,CAC/B,OAAgB,EAChB,GAAoB;IAEpB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,cAAc,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,0BAA0B,CAChC;YACC,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC;YACjD,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;YACzD,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC;YACjD,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC;YACxC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC;YAClD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,gBAAgB,CAAC;YACtE,gBAAgB,EAAE,cAAc,CAC/B,OAAO,CAAC,YAAY,EACpB,kBAAkB,CAClB;SACD,EACD,OAAO,CAAC,YAAY,EACpB,cAAc,CACd,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,0BAA0B,CAChC;YACC,IAAI,EAAE,MAAM;YACZ,MAAM;YACN,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;YACzC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;YACjD,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;YACzC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,EACD,OAAO,CAAC,IAAI,EACZ,cAAc,CACd,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,0BAA0B,CAChC;YACC,IAAI,EAAE,gBAAgB;YACtB,MAAM;YACN,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC;YACnD,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC;YAC3D,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC;YACnD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,EACD,OAAO,CAAC,cAAc,EACtB,cAAc,CACd,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,0BAA0B,CAChC;YACC,IAAI,EAAE,SAAS;YACf,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC;YAClC,GAAG,aAAa;YAChB,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;YACpD,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;YAC5C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,EACD,OAAO,CAAC,OAAO,EACf,cAAc,CACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,0BAA0B,CAClC,QAAiC,EACjC,OAAmB,EACnB,cAAsC;IAEtC,MAAM,eAAe,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC;IACnE,4BAA4B,CAAC,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IACrE,OAAO;QACN,GAAG,QAAQ;QACX,GAAG,eAAe;QAClB,GAAG,cAAc;QACjB,cAAc,EACb,QAAQ,CAAC,cAAc;YACvB,eAAe,CAAC,cAAc;YAC9B,cAAc,CAAC,cAAc;QAC9B,WAAW,EACV,QAAQ,CAAC,WAAW;YACpB,eAAe,CAAC,WAAW;YAC3B,cAAc,CAAC,WAAW;QAC3B,OAAO,EAAE,cAAc,IAAI,cAAc,CAAC,OAAO;KACjD,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACrC,GAAoB;IAEpB,OAAO,6BAA6B,CAAC;QACpC,WAAW,EAAE,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,SAAS;QAC9D,UAAU,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,SAAS;QAC5D,cAAc,EACb,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,EAAE,2BAA2B,CAAC;YACvE,SAAS;QACV,WAAW,EACV,gBAAgB,CAAC,GAAG,EAAE,wBAAwB,EAAE,gBAAgB,CAAC;YACjE,SAAS;QACV,OAAO,EACN,gBAAgB,CAAC,GAAG,EAAE,oBAAoB,EAAE,oBAAoB,CAAC;YACjE,SAAS;QACV,OAAO,EACN,gBAAgB,CAAC,GAAG,EAAE,oBAAoB,EAAE,mBAAmB,CAAC;YAChE,SAAS;KACV,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACtC,KAAiB;IAEjB,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;IACX,CAAC;IACD,OAAO,6BAA6B,CAAC;QACpC,WAAW,EACV,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC;YACpC,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC;YACpC,WAAW,CAAC,QAAQ,EAAE,cAAc,CAAC;QACtC,UAAU,EACT,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC;YACnC,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC;YACnC,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC;QACrC,cAAc,EACb,WAAW,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YACvC,WAAW,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QACzC,WAAW,EACV,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC;YACpC,WAAW,CAAC,QAAQ,EAAE,cAAc,CAAC;QACtC,OAAO,EACN,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC;QACtE,OAAO,EACN,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC;KACtE,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CACrC,OAA+B;IAE/B,OAAO,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAC5D,CACyB,CAAC;AAC7B,CAAC;AAED,SAAS,iCAAiC,CACzC,YAA6C,EAC7C,QAAiC;IAEjC,IACC,YAAY,EAAE,SAAS;QACvB,QAAQ,CAAC,MAAM;QACf,YAAY,CAAC,SAAS,KAAK,QAAQ,CAAC,MAAM,EACzC,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,IACC,YAAY,EAAE,YAAY;QAC1B,oCAAoC,CAAC,QAAQ,CAAC;QAC9C,CAAC,yBAAyB,CAAC,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC,EAC9D,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAClD,CAAC;IACD,IACC,YAAY,EAAE,OAAO;QACrB,QAAQ,CAAC,OAAO;QAChB,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IACjE,CAAC;IACD,IACC,YAAY;QACZ,QAAQ,CAAC,IAAI,KAAK,SAAS;QAC3B,CAAC,YAAY,CAAC,YAAY;QAC1B,CAAC,oCAAoC,CAAC,QAAQ,CAAC,EAC9C,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,kDAAkD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC;QAChC,OAAO;IACR,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,WAAW,CAAC;IAC7C,IAAI,eAAe,EAAE,CAAC;QACrB,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;QACrE,CAAC;QACD,OAAO;IACR,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,qDAAqD,CACrD,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,yBAAyB,CACjC,YAAiC,EACjC,QAAiC;IAEjC,YAAY,CAAC,mBAAmB,GAAG,QAAQ,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAChD,YAAY,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC1C,CAAC;IACD,IACC,QAAQ,CAAC,SAAS;QAClB,CAAC,YAAY,CAAC,YAAY;QAC1B,QAAQ,CAAC,IAAI,KAAK,SAAS;QAC3B,oCAAoC,CAAC,QAAQ,CAAC,EAC7C,CAAC;QACF,YAAY,CAAC,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC;IAChD,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB,EAAE,GAAW;IACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,OAAO,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CACvB,OAAmB,EACnB,KAAiB;IAKjB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAC3E,mCAAmC,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO;QACN,GAAG,aAAa,CACf,aAAa,EACb,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAChE;QACD,GAAG,aAAa,CACf,gBAAgB,EAChB,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE;YAC/B,gBAAgB;YAChB,iBAAiB;YACjB,OAAO;YACP,QAAQ;SACR,CAAC,CACF;QACD,GAAG,aAAa,CACf,UAAU,EACV,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CACpE;QACD,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;KACxC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACxB,OAAmB,EACnB,KAAiB,EACjB,IAAuB;IAEvB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YACvD,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACvB,OAAmB,EACnB,KAAiB;IAEjB,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO;QACN,GAAG,aAAa,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5C,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC7B,OAAmB,EACnB,KAAiB;IAEjB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QACvD,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE;YACrC,WAAW;YACX,YAAY;YACZ,cAAc;YACd,gBAAgB;SAChB,CAAC,CAAC;QACH,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC;QACnD,CAAC,CAAC,OAAO,CAAC,OAAO;QACjB,CAAC,CAAC,SAAS,CAAC;IACb,IAAI,cAAc,EAAE,CAAC;QACpB,2BAA2B,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CACxB,OAAmB,EACnB,KAAiB;IAEjB,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,2BAA2B,CACnC,MAAgB,EAChB,OAAmB;IAEnB,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACzD,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE;QACtC,WAAW;QACX,YAAY;QACZ,cAAc;QACd,gBAAgB;KAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC7B,MAAgB,EAChB,KAAiB,EACjB,IAAuB;IAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;AACF,CAAC;AAED,SAAS,0BAA0B,CAClC,MAAgB,EAChB,KAAiB,EACjB,IAAuB;IAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC5B,oBAAoB,CACnB,MAAM,EACN,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACpD,CAAC;YACH,CAAC;QACF,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC5C,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrB,CAAC,CAAC,SAAS,CAAC;QACb,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC9B,oBAAoB,CACnB,MAAM,EACN,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACpD,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,oBAAoB,CAC5B,MAAgB,EAChB,KAAyB;IAEzB,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO;IACR,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,oCAAoC,CAC5C,QAAiC;IAEjC,OAAO,CACN,QAAQ,CAAC,IAAI,KAAK,SAAS;QAC3B,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAClE,CAAC;AACH,CAAC;AAED,SAAS,oCAAoC,CAC5C,QAAiC;IAEjC,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,yBAAyB,CACjC,QAAiC,EACjC,SAAiB;IAEjB,OAAO,CACN,CAAC,QAAQ,CAAC,SAAS;QAClB,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;QACtD,CAAC,CAAC,KAAK,CAAC;QACT,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC9C,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAC3C,CACD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACvB,OAAmB,EACnB,KAAiB,EACjB,IAAuB;IAEvB,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,EAAE,CAAC;gBACZ,OAAO,MAAM,CAAC;YACf,CAAC;YACD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC7C,IAAI,QAAQ,EAAE,CAAC;gBACd,OAAO,QAAQ,CAAC;YACjB,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CACxB,OAAmB,EACnB,KAAiB;IAEjB,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,IAAI,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC;IACD,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CACrB,GAAM,EACN,KAAyB;IAEzB,OAAO,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IAClD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,KAAa;IACzD,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,4BAA4B,CACpC,eAAmC,EACnC,cAAkC;IAElC,IACC,eAAe;QACf,cAAc;QACd,CAAC,mBAAmB,CAAC,eAAe,EAAE,cAAc,CAAC,EACpD,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IACjE,CAAC;AACF,CAAC;AAED,SAAS,mCAAmC,CAC3C,QAA2B;IAE3B,IACC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAC3E,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IACjE,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACvD,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB,EAAE,GAAW;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa;IACrB,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC","sourcesContent":["import { createHmac } from \"node:crypto\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { HostedRunnerContext, WebServerContext } from \"../app-context.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\treadJsonBody,\n\tsecureCompare,\n\tsendJson,\n} from \"../server-utils.js\";\n\n// Agent-runtime derives a per-workspace notification token via HMAC and sends\n// that in X-A2a-Notification-Token instead of the raw shared secret. See\n// PushNotificationTokenForWorkspace in evalops/platform\n// internal/agentruntime/a2a/push.go (constant prefix kept in sync).\nconst A2A_WORKSPACE_NOTIFICATION_TOKEN_PREFIX = \"workspace-v1.\";\n\nfunction workspaceNotificationToken(\n\tsecret: string,\n\tworkspaceId: string,\n): string {\n\tconst trimmedSecret = secret.trim();\n\tconst trimmedWorkspace = workspaceId.trim();\n\tif (!trimmedSecret || !trimmedWorkspace) {\n\t\treturn \"\";\n\t}\n\tconst mac = createHmac(\"sha256\", trimmedSecret);\n\tmac.update(trimmedWorkspace);\n\treturn (\n\t\tA2A_WORKSPACE_NOTIFICATION_TOKEN_PREFIX +\n\t\tmac.digest(\"base64url\").replace(/=+$/, \"\")\n\t);\n}\n\nexport const PLATFORM_A2A_PUSH_CALLBACK_PATH = \"/api/platform/a2a/push\";\n\nconst CALLBACK_TOKEN_ENV_VARS = [\n\t\"MAESTRO_PLATFORM_A2A_CALLBACK_TOKEN\",\n\t\"MAESTRO_A2A_CALLBACK_TOKEN\",\n] as const;\n\nexport function platformA2APushAuthBoundaryExemptPaths(): readonly string[] {\n\treturn callbackToken() ? [PLATFORM_A2A_PUSH_CALLBACK_PATH] : [];\n}\n\ntype JsonObject = Record<string, unknown>;\n\ninterface PlatformA2APushSnapshot {\n\tkind: \"statusUpdate\" | \"artifactUpdate\" | \"task\" | \"message\";\n\ttaskId?: string;\n\tmessageId?: string;\n\tmessageIds?: string[];\n\tcontextId?: string;\n\tworkspaceId?: string;\n\torganizationId?: string;\n\ttenantId?: string;\n\tstate?: string;\n\tfinal?: boolean;\n\treceivedAt: string;\n\truntimeEventId?: string;\n\truntimeEventType?: string;\n\ttraceparent?: string;\n\ttracestate?: string;\n\tagentId?: string;\n\tactorId?: string;\n}\n\ntype PlatformA2APushContext = Pick<\n\tPlatformA2APushSnapshot,\n\t| \"traceparent\"\n\t| \"tracestate\"\n\t| \"organizationId\"\n\t| \"workspaceId\"\n\t| \"agentId\"\n\t| \"actorId\"\n>;\n\nexport async function handlePlatformA2APushCallback(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n): Promise<void> {\n\tif (req.method !== \"POST\") {\n\t\tthrow new ApiError(405, \"Method not allowed\");\n\t}\n\tassertCallbackToken(req);\n\tconst body = await readJsonBody<unknown>(req);\n\tconst snapshot = platformA2APushSnapshot(body, req);\n\tif (!snapshot) {\n\t\tthrow new ApiError(400, \"Invalid A2A push notification payload\");\n\t}\n\tassertWorkspaceScopedCallbackTokenSnapshot(req, snapshot);\n\tconst hostedRunner = context.hostedRunner;\n\tassertHostedRunnerA2APushBoundary(hostedRunner, snapshot);\n\tif (hostedRunner) {\n\t\trecordHostedRunnerA2APush(hostedRunner, snapshot);\n\t}\n\tsendJson(res, 202, { accepted: true, ...snapshot }, context.corsHeaders, req);\n}\n\nfunction assertCallbackToken(req: IncomingMessage): void {\n\tconst expected = callbackToken();\n\tif (!expected) {\n\t\treturn;\n\t}\n\tconst provided = getRequestHeader(req, \"x-a2a-notification-token\");\n\tif (!provided) {\n\t\tthrow new ApiError(401, \"Invalid A2A notification token\");\n\t}\n\tif (secureCompare(provided, expected)) {\n\t\treturn;\n\t}\n\t// Agent-runtime derives a workspace-scoped HMAC token from the same shared\n\t// secret when X-Evalops-Workspace-Id is present and the callback host/path\n\t// matches its allowlist; accept that variant too.\n\tconst workspaceId = getRequestHeader(\n\t\treq,\n\t\t\"x-evalops-workspace-id\",\n\t\t\"x-workspace-id\",\n\t);\n\tif (workspaceId) {\n\t\tconst derived = workspaceNotificationToken(expected, workspaceId);\n\t\tif (derived && secureCompare(provided, derived)) {\n\t\t\treturn;\n\t\t}\n\t}\n\tthrow new ApiError(401, \"Invalid A2A notification token\");\n}\n\nfunction assertWorkspaceScopedCallbackTokenSnapshot(\n\treq: IncomingMessage,\n\tsnapshot: PlatformA2APushSnapshot,\n): void {\n\tconst expected = callbackToken();\n\tif (!expected) {\n\t\treturn;\n\t}\n\tconst provided = getRequestHeader(req, \"x-a2a-notification-token\");\n\tif (\n\t\t!provided ||\n\t\t!provided.startsWith(A2A_WORKSPACE_NOTIFICATION_TOKEN_PREFIX)\n\t) {\n\t\treturn;\n\t}\n\tconst workspaceId = snapshot.workspaceId;\n\tif (!workspaceId) {\n\t\tthrow new ApiError(401, \"Invalid A2A notification token\");\n\t}\n\tconst derived = workspaceNotificationToken(expected, workspaceId);\n\tif (!derived || !secureCompare(provided, derived)) {\n\t\tthrow new ApiError(401, \"Invalid A2A notification token\");\n\t}\n}\n\nfunction platformA2APushSnapshot(\n\tpayload: unknown,\n\treq: IncomingMessage,\n): PlatformA2APushSnapshot | null {\n\tif (!isJsonObject(payload)) {\n\t\treturn null;\n\t}\n\tconst requestContext = platformA2APushRequestContext(req);\n\tif (isJsonObject(payload.statusUpdate)) {\n\t\tconst taskId = stringField(payload.statusUpdate, \"taskId\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn withPlatformA2APushContext(\n\t\t\t{\n\t\t\t\tkind: \"statusUpdate\",\n\t\t\t\ttaskId,\n\t\t\t\t...messageIdFields(payload, payload.statusUpdate),\n\t\t\t\tcontextId: stringField(payload.statusUpdate, \"contextId\"),\n\t\t\t\t...ownershipFields(payload, payload.statusUpdate),\n\t\t\t\tstate: statusState(payload.statusUpdate),\n\t\t\t\tfinal: booleanField(payload.statusUpdate, \"final\"),\n\t\t\t\treceivedAt: new Date().toISOString(),\n\t\t\t\truntimeEventId: metadataString(payload.statusUpdate, \"runtimeEventId\"),\n\t\t\t\truntimeEventType: metadataString(\n\t\t\t\t\tpayload.statusUpdate,\n\t\t\t\t\t\"runtimeEventType\",\n\t\t\t\t),\n\t\t\t},\n\t\t\tpayload.statusUpdate,\n\t\t\trequestContext,\n\t\t);\n\t}\n\tif (isJsonObject(payload.task)) {\n\t\tconst taskId = stringField(payload.task, \"id\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn withPlatformA2APushContext(\n\t\t\t{\n\t\t\t\tkind: \"task\",\n\t\t\t\ttaskId,\n\t\t\t\t...messageIdFields(payload, payload.task),\n\t\t\t\tcontextId: stringField(payload.task, \"contextId\"),\n\t\t\t\t...ownershipFields(payload, payload.task),\n\t\t\t\tstate: statusState(payload.task),\n\t\t\t\treceivedAt: new Date().toISOString(),\n\t\t\t},\n\t\t\tpayload.task,\n\t\t\trequestContext,\n\t\t);\n\t}\n\tif (isJsonObject(payload.artifactUpdate)) {\n\t\tconst taskId = stringField(payload.artifactUpdate, \"taskId\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn withPlatformA2APushContext(\n\t\t\t{\n\t\t\t\tkind: \"artifactUpdate\",\n\t\t\t\ttaskId,\n\t\t\t\t...messageIdFields(payload, payload.artifactUpdate),\n\t\t\t\tcontextId: stringField(payload.artifactUpdate, \"contextId\"),\n\t\t\t\t...ownershipFields(payload, payload.artifactUpdate),\n\t\t\t\treceivedAt: new Date().toISOString(),\n\t\t\t},\n\t\t\tpayload.artifactUpdate,\n\t\t\trequestContext,\n\t\t);\n\t}\n\tif (isJsonObject(payload.message)) {\n\t\tconst taskId = stringField(payload.message, \"taskId\");\n\t\tconst messageFields = messageIdFields(payload, payload.message);\n\t\tif (!messageFields.messageId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn withPlatformA2APushContext(\n\t\t\t{\n\t\t\t\tkind: \"message\",\n\t\t\t\t...optionalField(\"taskId\", taskId),\n\t\t\t\t...messageFields,\n\t\t\t\tcontextId: stringField(payload.message, \"contextId\"),\n\t\t\t\t...ownershipFields(payload, payload.message),\n\t\t\t\treceivedAt: new Date().toISOString(),\n\t\t\t},\n\t\t\tpayload.message,\n\t\t\trequestContext,\n\t\t);\n\t}\n\treturn null;\n}\n\nfunction withPlatformA2APushContext(\n\tsnapshot: PlatformA2APushSnapshot,\n\tpayload: JsonObject,\n\trequestContext: PlatformA2APushContext,\n): PlatformA2APushSnapshot {\n\tconst metadataContext = platformA2APushMetadataContext(payload);\n\tconst payloadAgentId = snapshot.agentId ?? metadataContext.agentId;\n\tassertCompatibleAgentContext(payloadAgentId, requestContext.agentId);\n\treturn {\n\t\t...snapshot,\n\t\t...metadataContext,\n\t\t...requestContext,\n\t\torganizationId:\n\t\t\tsnapshot.organizationId ??\n\t\t\tmetadataContext.organizationId ??\n\t\t\trequestContext.organizationId,\n\t\tworkspaceId:\n\t\t\tsnapshot.workspaceId ??\n\t\t\tmetadataContext.workspaceId ??\n\t\t\trequestContext.workspaceId,\n\t\tagentId: payloadAgentId ?? requestContext.agentId,\n\t};\n}\n\nfunction platformA2APushRequestContext(\n\treq: IncomingMessage,\n): PlatformA2APushContext {\n\treturn compactPlatformA2APushContext({\n\t\ttraceparent: getRequestHeader(req, \"traceparent\") ?? undefined,\n\t\ttracestate: getRequestHeader(req, \"tracestate\") ?? undefined,\n\t\torganizationId:\n\t\t\tgetRequestHeader(req, \"x-organization-id\", \"x-evalops-organization-id\") ??\n\t\t\tundefined,\n\t\tworkspaceId:\n\t\t\tgetRequestHeader(req, \"x-evalops-workspace-id\", \"x-workspace-id\") ??\n\t\t\tundefined,\n\t\tagentId:\n\t\t\tgetRequestHeader(req, \"x-evalops-agent-id\", \"x-maestro-agent-id\") ??\n\t\t\tundefined,\n\t\tactorId:\n\t\t\tgetRequestHeader(req, \"x-evalops-actor-id\", \"x-evalops-user-id\") ??\n\t\t\tundefined,\n\t});\n}\n\nfunction platformA2APushMetadataContext(\n\tvalue: JsonObject,\n): PlatformA2APushContext {\n\tconst metadata = isJsonObject(value.metadata) ? value.metadata : undefined;\n\tif (!metadata) {\n\t\treturn {};\n\t}\n\treturn compactPlatformA2APushContext({\n\t\ttraceparent:\n\t\t\tstringField(metadata, \"traceparent\") ??\n\t\t\tstringField(metadata, \"traceParent\") ??\n\t\t\tstringField(metadata, \"trace_parent\"),\n\t\ttracestate:\n\t\t\tstringField(metadata, \"tracestate\") ??\n\t\t\tstringField(metadata, \"traceState\") ??\n\t\t\tstringField(metadata, \"trace_state\"),\n\t\torganizationId:\n\t\t\tstringField(metadata, \"organizationId\") ??\n\t\t\tstringField(metadata, \"organization_id\"),\n\t\tworkspaceId:\n\t\t\tstringField(metadata, \"workspaceId\") ??\n\t\t\tstringField(metadata, \"workspace_id\"),\n\t\tagentId:\n\t\t\tstringField(metadata, \"agentId\") ?? stringField(metadata, \"agent_id\"),\n\t\tactorId:\n\t\t\tstringField(metadata, \"actorId\") ?? stringField(metadata, \"actor_id\"),\n\t});\n}\n\nfunction compactPlatformA2APushContext(\n\tcontext: PlatformA2APushContext,\n): PlatformA2APushContext {\n\treturn Object.fromEntries(\n\t\tObject.entries(context).filter(\n\t\t\t([, value]) => typeof value === \"string\" && value.length > 0,\n\t\t),\n\t) as PlatformA2APushContext;\n}\n\nfunction assertHostedRunnerA2APushBoundary(\n\thostedRunner: HostedRunnerContext | undefined,\n\tsnapshot: PlatformA2APushSnapshot,\n): void {\n\tif (\n\t\thostedRunner?.a2aTaskId &&\n\t\tsnapshot.taskId &&\n\t\thostedRunner.a2aTaskId !== snapshot.taskId\n\t) {\n\t\tthrow new ApiError(404, \"A2A task not found\");\n\t}\n\tif (\n\t\thostedRunner?.a2aMessageId &&\n\t\tsnapshotHasBoundaryMessageIdEvidence(snapshot) &&\n\t\t!snapshotIncludesMessageId(snapshot, hostedRunner.a2aMessageId)\n\t) {\n\t\tthrow new ApiError(404, \"A2A message not found\");\n\t}\n\tif (\n\t\thostedRunner?.agentId &&\n\t\tsnapshot.agentId &&\n\t\t!sameExactIdentifier(snapshot.agentId, hostedRunner.agentId)\n\t) {\n\t\tthrow new ApiError(403, \"A2A push notification agent mismatch\");\n\t}\n\tif (\n\t\thostedRunner &&\n\t\tsnapshot.kind === \"message\" &&\n\t\t!hostedRunner.a2aMessageId &&\n\t\t!snapshotHasMessageBindingCorrelation(snapshot)\n\t) {\n\t\tthrow new ApiError(403, \"A2A message push is missing correlation metadata\");\n\t}\n\tif (!hostedRunner?.workspaceId) {\n\t\treturn;\n\t}\n\n\tconst workspaceMarker = snapshot.workspaceId;\n\tif (workspaceMarker) {\n\t\tif (!sameIdentifier(workspaceMarker, hostedRunner.workspaceId)) {\n\t\t\tthrow new ApiError(403, \"A2A push notification workspace mismatch\");\n\t\t}\n\t\treturn;\n\t}\n\n\tif (!hostedRunner.a2aTaskId) {\n\t\tthrow new ApiError(\n\t\t\t403,\n\t\t\t\"A2A push notification is missing workspace metadata\",\n\t\t);\n\t}\n}\n\nfunction recordHostedRunnerA2APush(\n\thostedRunner: HostedRunnerContext,\n\tsnapshot: PlatformA2APushSnapshot,\n): void {\n\thostedRunner.lastPlatformA2APush = snapshot;\n\tif (snapshot.taskId && !hostedRunner.a2aTaskId) {\n\t\thostedRunner.a2aTaskId = snapshot.taskId;\n\t}\n\tif (\n\t\tsnapshot.messageId &&\n\t\t!hostedRunner.a2aMessageId &&\n\t\tsnapshot.kind === \"message\" &&\n\t\tsnapshotHasMessageBindingCorrelation(snapshot)\n\t) {\n\t\thostedRunner.a2aMessageId = snapshot.messageId;\n\t}\n}\n\nfunction statusState(value: JsonObject): string | undefined {\n\tconst status = isJsonObject(value.status) ? value.status : undefined;\n\treturn status ? stringField(status, \"state\") : undefined;\n}\n\nfunction metadataString(value: JsonObject, key: string): string | undefined {\n\tconst metadata = isJsonObject(value.metadata) ? value.metadata : undefined;\n\treturn metadata ? stringField(metadata, key) : undefined;\n}\n\nfunction ownershipFields(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n): Pick<\n\tPlatformA2APushSnapshot,\n\t\"workspaceId\" | \"organizationId\" | \"tenantId\" | \"agentId\"\n> {\n\tconst agentIds = ownershipStrings(payload, value, [\"agentId\", \"agent_id\"]);\n\tassertCompatiblePayloadAgentContext(agentIds);\n\treturn {\n\t\t...optionalField(\n\t\t\t\"workspaceId\",\n\t\t\townershipString(payload, value, [\"workspaceId\", \"workspace_id\"]),\n\t\t),\n\t\t...optionalField(\n\t\t\t\"organizationId\",\n\t\t\townershipString(payload, value, [\n\t\t\t\t\"organizationId\",\n\t\t\t\t\"organization_id\",\n\t\t\t\t\"orgId\",\n\t\t\t\t\"org_id\",\n\t\t\t]),\n\t\t),\n\t\t...optionalField(\n\t\t\t\"tenantId\",\n\t\t\townershipString(payload, value, [\"tenantId\", \"tenant_id\", \"tenant\"]),\n\t\t),\n\t\t...optionalField(\"agentId\", agentIds[0]),\n\t};\n}\n\nfunction ownershipStrings(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n\tkeys: readonly string[],\n): string[] {\n\tconst result: string[] = [];\n\tfor (const source of ownershipSources(payload, value)) {\n\t\tfor (const key of keys) {\n\t\t\tpushUniqueIdentifier(result, stringField(source, key));\n\t\t\tpushUniqueIdentifier(result, metadataString(source, key));\n\t\t}\n\t}\n\treturn result;\n}\n\nfunction messageIdFields(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n): Pick<PlatformA2APushSnapshot, \"messageId\" | \"messageIds\"> {\n\tconst messageIds = messageIdsFromSources(payload, value);\n\treturn {\n\t\t...optionalField(\"messageId\", messageIds[0]),\n\t\t...(messageIds.length > 0 ? { messageIds } : {}),\n\t};\n}\n\nfunction messageIdsFromSources(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n): string[] {\n\tconst result: string[] = [];\n\tfor (const source of messageIdSources(payload, value)) {\n\t\tpushIdentifierStrings(result, source, [\n\t\t\t\"messageId\",\n\t\t\t\"message_id\",\n\t\t\t\"a2aMessageId\",\n\t\t\t\"a2a_message_id\",\n\t\t]);\n\t\tpushIdentifierArrayStrings(result, source, [\"messageIds\", \"message_ids\"]);\n\t}\n\tconst payloadMessage = isJsonObject(payload.message)\n\t\t? payload.message\n\t\t: undefined;\n\tif (payloadMessage) {\n\t\tpushMessageObjectIdentifier(result, payloadMessage);\n\t}\n\treturn result;\n}\n\nfunction messageIdSources(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n): JsonObject[] {\n\tconst sources = [value, payload];\n\tif (isJsonObject(value.artifact)) {\n\t\tsources.push(value.artifact);\n\t}\n\treturn sources;\n}\n\nfunction pushMessageObjectIdentifier(\n\ttarget: string[],\n\tmessage: JsonObject,\n): void {\n\tpushUniqueIdentifier(target, stringField(message, \"id\"));\n\tpushIdentifierStrings(target, message, [\n\t\t\"messageId\",\n\t\t\"message_id\",\n\t\t\"a2aMessageId\",\n\t\t\"a2a_message_id\",\n\t]);\n}\n\nfunction pushIdentifierStrings(\n\ttarget: string[],\n\tvalue: JsonObject,\n\tkeys: readonly string[],\n): void {\n\tfor (const key of keys) {\n\t\tpushUniqueIdentifier(target, stringField(value, key));\n\t\tconst metadata = metadataString(value, key);\n\t\tpushUniqueIdentifier(target, metadata);\n\t}\n}\n\nfunction pushIdentifierArrayStrings(\n\ttarget: string[],\n\tvalue: JsonObject,\n\tkeys: readonly string[],\n): void {\n\tfor (const key of keys) {\n\t\tconst direct = value[key];\n\t\tif (Array.isArray(direct)) {\n\t\t\tfor (const entry of direct) {\n\t\t\t\tpushUniqueIdentifier(\n\t\t\t\t\ttarget,\n\t\t\t\t\ttypeof entry === \"string\" ? entry.trim() : undefined,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t\tconst metadata = isJsonObject(value.metadata)\n\t\t\t? value.metadata[key]\n\t\t\t: undefined;\n\t\tif (Array.isArray(metadata)) {\n\t\t\tfor (const entry of metadata) {\n\t\t\t\tpushUniqueIdentifier(\n\t\t\t\t\ttarget,\n\t\t\t\t\ttypeof entry === \"string\" ? entry.trim() : undefined,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n}\n\nfunction pushUniqueIdentifier(\n\ttarget: string[],\n\tvalue: string | undefined,\n): void {\n\tif (!value || target.some((entry) => sameMessageIdentifier(entry, value))) {\n\t\treturn;\n\t}\n\ttarget.push(value);\n}\n\nfunction snapshotHasBoundaryMessageIdEvidence(\n\tsnapshot: PlatformA2APushSnapshot,\n): boolean {\n\treturn (\n\t\tsnapshot.kind === \"message\" ||\n\t\t(snapshot.kind === \"task\" && Boolean(snapshot.messageIds?.length))\n\t);\n}\n\nfunction snapshotHasMessageBindingCorrelation(\n\tsnapshot: PlatformA2APushSnapshot,\n): boolean {\n\treturn Boolean(snapshot.taskId || snapshot.workspaceId);\n}\n\nfunction snapshotIncludesMessageId(\n\tsnapshot: PlatformA2APushSnapshot,\n\tmessageId: string,\n): boolean {\n\treturn (\n\t\t(snapshot.messageId\n\t\t\t? sameMessageIdentifier(snapshot.messageId, messageId)\n\t\t\t: false) ||\n\t\t(snapshot.messageIds ?? []).some((candidate) =>\n\t\t\tsameMessageIdentifier(candidate, messageId),\n\t\t)\n\t);\n}\n\nfunction ownershipString(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n\tkeys: readonly string[],\n): string | undefined {\n\tfor (const source of ownershipSources(payload, value)) {\n\t\tfor (const key of keys) {\n\t\t\tconst direct = stringField(source, key);\n\t\t\tif (direct) {\n\t\t\t\treturn direct;\n\t\t\t}\n\t\t\tconst metadata = metadataString(source, key);\n\t\t\tif (metadata) {\n\t\t\t\treturn metadata;\n\t\t\t}\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction ownershipSources(\n\tpayload: JsonObject,\n\tvalue: JsonObject,\n): JsonObject[] {\n\tconst sources = [value, payload];\n\tconst status = isJsonObject(value.status) ? value.status : undefined;\n\tif (status) {\n\t\tsources.push(status);\n\t\tif (isJsonObject(status.message)) {\n\t\t\tsources.push(status.message);\n\t\t}\n\t}\n\tif (isJsonObject(value.artifact)) {\n\t\tsources.push(value.artifact);\n\t}\n\treturn sources;\n}\n\nfunction optionalField<K extends string>(\n\tkey: K,\n\tvalue: string | undefined,\n): Partial<Record<K, string>> {\n\treturn value ? ({ [key]: value } as Partial<Record<K, string>>) : {};\n}\n\nfunction sameIdentifier(left: string, right: string): boolean {\n\treturn left.trim().toLowerCase() === right.trim().toLowerCase();\n}\n\nfunction sameMessageIdentifier(left: string, right: string): boolean {\n\treturn left.trim() === right.trim();\n}\n\nfunction assertCompatibleAgentContext(\n\tmetadataAgentId: string | undefined,\n\trequestAgentId: string | undefined,\n): void {\n\tif (\n\t\tmetadataAgentId &&\n\t\trequestAgentId &&\n\t\t!sameExactIdentifier(metadataAgentId, requestAgentId)\n\t) {\n\t\tthrow new ApiError(403, \"A2A push notification agent mismatch\");\n\t}\n}\n\nfunction assertCompatiblePayloadAgentContext(\n\tagentIds: readonly string[],\n): void {\n\tif (\n\t\tagentIds.length > 1 &&\n\t\tagentIds.some((agentId) => !sameExactIdentifier(agentId, agentIds[0] ?? \"\"))\n\t) {\n\t\tthrow new ApiError(403, \"A2A push notification agent mismatch\");\n\t}\n}\n\nfunction sameExactIdentifier(left: string, right: string): boolean {\n\treturn left.trim() === right.trim();\n}\n\nfunction stringField(value: JsonObject, key: string): string | undefined {\n\tconst field = value[key];\n\treturn typeof field === \"string\" && field.trim().length > 0\n\t\t? field.trim()\n\t\t: undefined;\n}\n\nfunction booleanField(value: JsonObject, key: string): boolean | undefined {\n\tconst field = value[key];\n\treturn typeof field === \"boolean\" ? field : undefined;\n}\n\nfunction isJsonObject(value: unknown): value is JsonObject {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction callbackToken(): string | undefined {\n\tfor (const name of CALLBACK_TOKEN_ENV_VARS) {\n\t\tconst value = process.env[name]?.trim();\n\t\tif (value) {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n"]}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"runtime-app-server-ws.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/runtime-app-server-ws.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;
|
|
1
|
+
{"version":3,"file":"runtime-app-server-ws.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/runtime-app-server-ws.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAGpC,OAAO,EAEN,KAAK,oBAAoB,EAEzB,MAAM,8BAA8B,CAAC;AAEtC,UAAU,uBAAuB;IAChC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1E;AAwGD,wBAAgB,+BAA+B,CAC9C,EAAE,EAAE,SAAS,EACb,OAAO,GAAE,uBAA4B,GACnC,IAAI,CA8HN"}
|
|
@@ -1,9 +1,7 @@
|
|
|
1
1
|
import { runtimeAppServerProtocolVersion, } from "@evalops/contracts";
|
|
2
2
|
import { getRegisteredModels } from "../../models/registry.js";
|
|
3
|
+
import { isRecord } from "../../utils/json.js";
|
|
3
4
|
import { serverRequestManager as defaultServerRequestManager, } from "../server-request-manager.js";
|
|
4
|
-
function isRecord(value) {
|
|
5
|
-
return Boolean(value && typeof value === "object" && !Array.isArray(value));
|
|
6
|
-
}
|
|
7
5
|
function canWrite(ws) {
|
|
8
6
|
return ws.readyState === 1;
|
|
9
7
|
}
|