@evalops/maestro 0.10.8 → 0.10.11

package/dist/server/handlers/fleet.d.ts

@@ -0,0 +1,4 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { WebServerContext } from "../app-context.js";
+export declare function handleFleet(req: IncomingMessage, res: ServerResponse, context: WebServerContext): void;
+//# sourceMappingURL=fleet.d.ts.map

package/dist/server/handlers/fleet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/fleet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAG1D,wBAAgB,WAAW,CAC1B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,GACvB,IAAI,CAmBN"}

package/dist/server/handlers/fleet.js

@@ -0,0 +1,9 @@
+import { sendJson } from "../server-utils.js";
+export function handleFleet(req, res, context) {
+    if (req.method !== "GET") {
+        sendJson(res, 405, { error: "Method not allowed" }, context.corsHeaders, req);
+        return;
+    }
+    sendJson(res, 200, context.headlessRuntimeService.getFleetDashboardSnapshot(), context.corsHeaders, req);
+}
+//# sourceMappingURL=fleet.js.map

package/dist/server/handlers/fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../../../src/server/handlers/fleet.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,UAAU,WAAW,CAC1B,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1B,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAC/B,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;QACF,OAAO;IACR,CAAC;IAED,QAAQ,CACP,GAAG,EACH,GAAG,EACH,OAAO,CAAC,sBAAsB,CAAC,yBAAyB,EAAE,EAC1D,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;AACH,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport { sendJson } from \"../server-utils.js\";\n\nexport function handleFleet(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n): void {\n\tif (req.method !== \"GET\") {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t405,\n\t\t\t{ error: \"Method not allowed\" },\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t\treturn;\n\t}\n\n\tsendJson(\n\t\tres,\n\t\t200,\n\t\tcontext.headlessRuntimeService.getFleetDashboardSnapshot(),\n\t\tcontext.corsHeaders,\n\t\treq,\n\t);\n}\n"]}

package/dist/server/handlers/headless-sessions.d.ts

@@ -1,5 +1,9 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
 import type { WebServerContext } from "../app-context.js";
+export declare enum HostedRunnerErrorType {
+    RuntimeNotReady = "runtime_not_ready",
+    RuntimeOwnedElsewhere = "runtime_owned_elsewhere"
+}
 export declare function handleHeadlessSessionCreate(req: IncomingMessage, res: ServerResponse, context: WebServerContext): Promise<void>;
 export declare function handleHeadlessConnectionCreate(req: IncomingMessage, res: ServerResponse, context: WebServerContext): Promise<void>;
 export declare function handleHeadlessSessionState(req: IncomingMessage, res: ServerResponse, context: WebServerContext, params?: Record<string, string>): void;

package/dist/server/handlers/headless-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"headless-sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAejE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAub1D,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAQzB;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAazB;AAED,wBAAgB,0BAA0B,CACzC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAI/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAyD/B;AAED,wBAAsB,gCAAgC,CACrD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAW/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiB/B;AAED,wBAAsB,+BAA+B,CACpD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAqB/B;AAED,wBAAgB,2BAA2B,CAC1C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAsE/B;AAED,wBAAsB,4BAA4B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAsB/B"}
+{"version":3,"file":"headless-sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAmBjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAqB1D,oBAAY,qBAAqB;IAChC,eAAe,sBAAsB;IACrC,qBAAqB,4BAA4B;CACjD;AAopBD,wBAAsB,2BAA2B,CAChD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAQzB;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,iBAazB;AAED,wBAAgB,0BAA0B,CACzC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAI/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAyD/B;AAED,wBAAsB,gCAAgC,CACrD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAW/B;AAED,wBAAsB,8BAA8B,CACnD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiB/B;AAED,wBAAsB,+BAA+B,CACpD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAqB/B;AAED,wBAAgB,2BAA2B,CAC1C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAsE/B;AAED,wBAAsB,4BAA4B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAsB/B"}

package/dist/server/handlers/headless-sessions.js

@@ -1,10 +1,18 @@
 import { headlessApprovalModes, headlessConnectionRoles, headlessNotificationTypes, headlessServerRequestTypes, headlessThinkingLevels, headlessToAgentMessageSchemasByType, headlessToAgentMessageTypes, headlessUtilityOperations, } from "@evalops/contracts";
 import { Type } from "@sinclair/typebox";
+import { resolveExistingWorkspaceRoot } from "../../headless/workspace-root.js";
+import { recordMaestroSessionRuntimeTrigger } from "../../platform/agent-runtime-client.js";
 import { normalizeApprovalMode, resolveApprovalModeForRequest, } from "../approval-mode-store.js";
-import { getAuthSubject } from "../authz.js";
+import { getAuthScopeKey, getAuthSubject } from "../authz.js";
 import { ApiError, getRequestHeader, readRequestBody, sendJson, } from "../server-utils.js";
 import { createSessionManagerForRequest } from "../session-scope.js";
 import { parseAndValidateJson, validatePayload } from "../validation.js";
+export var HostedRunnerErrorType;
+(function (HostedRunnerErrorType) {
+    HostedRunnerErrorType["RuntimeNotReady"] = "runtime_not_ready";
+    HostedRunnerErrorType["RuntimeOwnedElsewhere"] = "runtime_owned_elsewhere";
+})(HostedRunnerErrorType || (HostedRunnerErrorType = {}));
+const HOSTED_RUNNER_ERROR_DOMAIN = "maestro.hosted_runner";
 function stringLiteralUnion(values) {
     return Type.Unsafe(Type.Union(values.map((value) => Type.Literal(value))));
 }
@@ -18,6 +26,7 @@ const HeadlessCreateBaseProperties = {
         name: Type.String(),
         version: Type.Optional(Type.String()),
     })),
+    workspaceRoot: Type.Optional(Type.String()),
     model: Type.Optional(Type.String()),
     enableClientTools: Type.Optional(Type.Boolean()),
     capabilities: Type.Optional(Type.Object({
@@ -136,7 +145,113 @@ function parseOptOutNotifications(req) {
     return validatePayload(notifications, HeadlessOptOutNotificationsSchema, "query.optOutNotifications");
 }
 function getScopeKey(req) {
-    return getAuthSubject(req);
+    return getAuthScopeKey(req);
+}
+function hostedRunnerErrorMetadata(context, metadata) {
+    const hostedRunner = context.hostedRunner;
+    const detailMetadata = {};
+    for (const [key, value] of Object.entries({
+        runner_session_id: hostedRunner?.runnerSessionId,
+        owner_instance_id: hostedRunner?.ownerInstanceId,
+        workspace_id: hostedRunner?.workspaceId,
+        agent_run_id: hostedRunner?.agentRunId,
+        ...metadata,
+    })) {
+        if (value) {
+            detailMetadata[key] = value;
+        }
+    }
+    return detailMetadata;
+}
+function hostedRunnerOwnershipError(context, message, metadata) {
+    return new ApiError(409, message, [
+        {
+            reason: HostedRunnerErrorType.RuntimeOwnedElsewhere,
+            domain: HOSTED_RUNNER_ERROR_DOMAIN,
+            metadata: hostedRunnerErrorMetadata(context, metadata),
+        },
+    ], HostedRunnerErrorType.RuntimeOwnedElsewhere);
+}
+function hostedRunnerNotReadyError(context, message, metadata) {
+    return new ApiError(503, message, [
+        {
+            reason: HostedRunnerErrorType.RuntimeNotReady,
+            domain: HOSTED_RUNNER_ERROR_DOMAIN,
+            metadata: hostedRunnerErrorMetadata(context, metadata),
+        },
+    ], HostedRunnerErrorType.RuntimeNotReady);
+}
+function ensureHostedRunnerCanUseSession(context, requestedSessionId) {
+    const hostedRunner = context.hostedRunner;
+    if (!hostedRunner) {
+        return;
+    }
+    const activeSessionId = hostedRunner.activeMaestroSessionId ??
+        hostedRunner.configuredMaestroSessionId;
+    if (hostedRunner.draining) {
+        throw hostedRunnerNotReadyError(context, "Hosted runner is draining and not accepting headless session traffic", {
+            draining: "true",
+            maestro_session_id: activeSessionId,
+            requested_maestro_session_id: requestedSessionId,
+        });
+    }
+    if (!activeSessionId) {
+        return;
+    }
+    if (!requestedSessionId) {
+        throw hostedRunnerOwnershipError(context, `Hosted runner is already bound to Maestro session ${activeSessionId}`, {
+            maestro_session_id: activeSessionId,
+        });
+    }
+    if (requestedSessionId !== activeSessionId) {
+        throw hostedRunnerOwnershipError(context, `Hosted runner is bound to Maestro session ${activeSessionId}`, {
+            maestro_session_id: activeSessionId,
+            requested_maestro_session_id: requestedSessionId,
+        });
+    }
+}
+function claimHostedRunnerSession(context, sessionId) {
+    const hostedRunner = context.hostedRunner;
+    if (!hostedRunner) {
+        return;
+    }
+    const activeSessionId = hostedRunner.activeMaestroSessionId ??
+        hostedRunner.configuredMaestroSessionId;
+    if (activeSessionId && activeSessionId !== sessionId) {
+        throw hostedRunnerOwnershipError(context, `Hosted runner is bound to Maestro session ${activeSessionId}`, {
+            maestro_session_id: activeSessionId,
+            requested_maestro_session_id: sessionId,
+        });
+    }
+    hostedRunner.activeMaestroSessionId = sessionId;
+}
+function resolveRuntimeWorkspaceRoot(context, workspaceRoot) {
+    const requestedRoot = workspaceRoot?.trim() || undefined;
+    const hostedRoot = context.hostedRunner?.workspaceRoot?.trim() || undefined;
+    let resolvedRequestedRoot;
+    if (requestedRoot) {
+        try {
+            resolvedRequestedRoot = resolveExistingWorkspaceRoot(requestedRoot);
+        }
+        catch {
+            throw new ApiError(400, `workspaceRoot not found: ${requestedRoot}`);
+        }
+    }
+    let resolvedHostedRoot;
+    if (hostedRoot) {
+        try {
+            resolvedHostedRoot = resolveExistingWorkspaceRoot(hostedRoot);
+        }
+        catch {
+            throw new ApiError(500, `Hosted runner workspace root is unavailable: ${hostedRoot}`);
+        }
+    }
+    if (resolvedRequestedRoot &&
+        resolvedHostedRoot &&
+        resolvedRequestedRoot !== resolvedHostedRoot) {
+        throw new ApiError(409, `workspaceRoot must match hosted runner workspace root: ${resolvedHostedRoot}`);
+    }
+    return resolvedHostedRoot ?? resolvedRequestedRoot;
 }
 function rethrowHeadlessMessageError(error) {
     if (!(error instanceof Error)) {
@@ -176,6 +291,8 @@ async function ensureRuntime(req, context, input) {
     const sessionManager = createSessionManagerForRequest(req, false);
     const role = getHeadlessRole(req, input.role);
     const requestedSessionId = input.sessionId?.trim() || undefined;
+    const workspaceRoot = resolveRuntimeWorkspaceRoot(context, input.workspaceRoot);
+    ensureHostedRunnerCanUseSession(context, requestedSessionId);
     if (requestedSessionId) {
         const sessionFile = sessionManager.getSessionFileById(requestedSessionId);
         if (!sessionFile) {
@@ -203,10 +320,11 @@ async function ensureRuntime(req, context, input) {
         headerApprovalMode: input.approvalMode ?? headerApproval,
         defaultApprovalMode: context.defaultApprovalMode,
     });
-    return context.headlessRuntimeService.ensureRuntime({
+    const runtime = await context.headlessRuntimeService.ensureRuntime({
         scope_key: getScopeKey(req),
         sessionId: requestedSessionId,
         subject,
+        workspaceRoot,
         clientProtocolVersion: input.protocolVersion,
         clientInfo: input.clientInfo,
         capabilities: input.capabilities
@@ -227,11 +345,54 @@ async function ensureRuntime(req, context, input) {
         context,
         sessionManager,
     });
+    if (context.hostedRunner) {
+        claimHostedRunnerSession(context, runtime.getSnapshot().session_id);
+    }
+    if (input.recordAgentRuntimeTrigger !== false) {
+        await recordPlatformAgentRuntimeSessionStart({
+            context,
+            runtime,
+            subject,
+            registeredModel,
+            role,
+            thinkingLevel: (input.thinkingLevel ?? "off"),
+            approvalMode: effectiveApproval,
+            workspaceRoot,
+            input,
+        });
+    }
+    return runtime;
+}
+async function recordPlatformAgentRuntimeSessionStart(options) {
+    const snapshot = options.runtime.getSnapshot();
+    const hostedRunner = options.context.hostedRunner;
+    const result = await recordMaestroSessionRuntimeTrigger({
+        workspaceId: hostedRunner?.workspaceId,
+        sessionId: snapshot.session_id,
+        actorId: options.subject,
+        correlationId: `maestro-session:${snapshot.session_id}`,
+        metadata: {
+            model: options.registeredModel.id,
+            provider: options.registeredModel.provider,
+            role: options.role,
+            thinking_level: options.thinkingLevel,
+            approval_mode: options.approvalMode,
+            client: options.input.client ?? "generic",
+            protocol_version: options.input.protocolVersion,
+            workspace_root: options.workspaceRoot,
+            runner_session_id: hostedRunner?.runnerSessionId,
+            owner_instance_id: hostedRunner?.ownerInstanceId,
+        },
+    });
+    if (result?.run.id && hostedRunner && !hostedRunner.agentRunId) {
+        hostedRunner.agentRunId = result.run.id;
+    }
 }
 async function ensureConnection(req, context, input) {
     const runtime = await ensureRuntime(req, context, {
         ...input,
         registerConnection: false,
+        recordAgentRuntimeTrigger: false,
     });
     const role = getHeadlessRole(req, input.role);
     const heartbeat = runtime.registerConnection({
@@ -262,10 +423,14 @@ function getRuntime(req, context, sessionId) {
     if (!sessionId) {
         throw new ApiError(400, "Missing headless session id");
     }
+    ensureHostedRunnerCanUseSession(context, sessionId);
     const runtime = context.headlessRuntimeService.getRuntime(getScopeKey(req), sessionId);
     if (!runtime) {
         throw new ApiError(404, "Headless session not found");
     }
+    if (context.hostedRunner) {
+        claimHostedRunnerSession(context, runtime.getSnapshot().session_id);
+    }
     return runtime;
 }
 export async function handleHeadlessSessionCreate(req, res, context) {

package/dist/server/handlers/headless-sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"headless-sessions.js","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"AACA,OAAO,EAEN,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,mCAAmC,EACnC,2BAA2B,EAC3B,yBAAyB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAA6B,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIpE,OAAO,EACN,qBAAqB,EACrB,6BAA6B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAO7C,OAAO,EACN,QAAQ,EACR,gBAAgB,EAChB,eAAe,EACf,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEzE,SAAS,kBAAkB,CAAoC,MAAS;IACvE,OAAO,IAAI,CAAC,MAAM,CACjB,IAAI,CAAC,KAAK,CACT,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAGxC,CACD,CACD,CAAC;AACH,CAAC;AAED,MAAM,iCAAiC,GAAG,IAAI,CAAC,KAAK,CACnD,kBAAkB,CAAC,yBAAyB,CAAC,EAC7C;IACC,WAAW,EAAE,IAAI;CACjB,CACD,CAAC;AAEF,MAAM,4BAA4B,GAAG;IACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAChD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,KAAK,CAAC;QACV,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;KACzB,CAAC,CACF;IACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACxE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;CAC7D,CAAC;AAEX,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAE9E,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,GAAG,4BAA4B;IAC/B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,CAAC,MAAM,CAC5C;IACC,IAAI,EAAE,kBAAkB,CAAC,2BAA2B,CAAC;CACrD,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAEH,MAAM,+BAA+B,GAAG,IAAI,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAoBH,KAAK,UAAU,oBAAoB,CAClC,GAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAC/B,MAAM,EACN,yBAAyB,EACzB,MAAM,CACN,CAAC;IACF,OAAO,eAAe,CACrB,MAAM,EACN,mCAAmC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAClD,MAAM,CACN,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACvB,GAAoB,EACpB,YAAqC;IAErC,IAAI,YAAY,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAClC,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,CAAC;IACF,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,SAAS,gCAAgC,CACxC,cAEmB;IAEnB,IAAI,cAAc,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,OAAgB;IACtD,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAChC,GAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,GAAG,EACd,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,aAAa,GAAG,GAAG;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,eAAe,CAGrB,aAAa,EACb,iCAAiC,EACjC,2BAA2B,CAC3B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB;IACxC,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IAClD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,kDAAkD,EAAE,CAAC;QAC1E,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,KAAK,+BAA+B;QACjD,KAAK,CAAC,OAAO,KAAK,qDAAqD;QACvE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EACvD,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,uCAAuC,CAAC,KAAc;IAC9D,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC1C,KAAK,CAAC,OAAO;YACZ,2DAA2D,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,KAAK,CAAC;AACb,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,GAAoB,EACpB,OAAyB,EACzB,KAAoE;IAEpE,MAAM,cAAc,GAAG,8BAA8B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChE,IAAI,kBAAkB,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC9C,CAAC;QACD,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,IACC,KAAK,CAAC,iBAAiB;QACvB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,mEAAmE,CACnE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,6DAA6D,CAC7D,CAAC;IACH,CAAC;IACD,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,qBAAqB,CAC3C,gBAAgB,CACf,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,IAAI,SAAS,CACd,CAAC;IACF,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;QACvD,SAAS,EAAE,kBAAkB,IAAI,cAAc,CAAC,YAAY,EAAE;QAC9D,OAAO;QACP,kBAAkB,EAAE,KAAK,CAAC,YAAY,IAAI,cAAc;QACxD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;KAChD,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC;QACnD,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;QAC3B,SAAS,EAAE,kBAAkB;QAC7B,OAAO;QACP,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,eAAe;QACf,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAkB;QAC9D,YAAY,EAAE,iBAAiB;QAC/B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;QACpD,OAAO;QACP,cAAc;KACd,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,GAAoB,EACpB,OAAyB,EACzB,KAAoC;IAEpC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE;QACjD,GAAG,KAAK;QACR,kBAAkB,EAAE,KAAK;KACzB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO;QACN,GAAG,SAAS;QACZ,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,IAAI;QACJ,qBAAqB,EAAE,KAAK,CAAC,mBAAmB;QAChD,QAAQ;KACR,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAClB,GAAoB,EACpB,OAAyB,EACzB,SAA6B;IAE7B,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,UAAU,CACxD,WAAW,CAAC,GAAG,CAAC,EAChB,SAAS,CACT,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,2BAA2B,CAC3B,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,UAA6C,CAAC;IAClD,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,OAAO,CAAC,kBAAkB,CAAC;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI;YACJ,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,qBAAqB,EAAE,KAAK,CAAC,eAAe;YAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAC/B,CAAC,CAAC;oBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;oBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;oBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;iBACnD;gBACF,CAAC,CAAC,SAAS;YACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC9C,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IACC,KAAK,YAAY,KAAK;YACtB,KAAK,CAAC,OAAO,KAAK,wDAAwD,EACzE,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IACC,KAAK,YAAY,KAAK;YACtB,CAAC,KAAK,CAAC,OAAO,KAAK,+BAA+B;gBACjD,KAAK,CAAC,OAAO;oBACZ,2DAA2D,CAAC,EAC7D,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACrD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,gCAAgC,CAChC,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,SAA2C,CAAC;IAChD,IAAI,CAAC;QACJ,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC;YACvC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,+BAA+B,CAC/B,CAAC;IACF,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,MAAM,OAAO,CAAC,oBAAoB,CAAC;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,0BAA0B,MAAM,EAAE,EAAE,SAAS,EACxD,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,cAAc,GACnB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAExE,MAAM,MAAM,GAAG,cAAc;QAC5B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;YAC7B,MAAM;YACN,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;YAC1B,mBAAmB,EAAE,wBAAwB,CAAC,GAAG,CAAC;SAClD,CAAC,CAAC;IACL,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QAClB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,UAAU;QAC3B,UAAU,EAAE,YAAY;QACxB,GAAG,OAAO,CAAC,WAAW;KACtB,CAAC,CAAC;IACH,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,KAAK,GAAG,GAAG,EAAE;QAClB,IAAI,QAAQ,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACnC,OAAO;QACR,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,QAAQ,GAAG,KAAK,CAAC;gBACjB,OAAO;YACR,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,QAAQ,GAAG,KAAK,CAAC;oBACjB,KAAK,EAAE,CAAC;gBACT,CAAC,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;QACF,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACpC,KAAK,EAAE,CAAC;QACT,CAAC;IACF,CAAC,EAAE,KAAK,CAAC,CAAC;IACV,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,MAAM,OAAO,GAAG,GAAG,EAAE;QACpB,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,aAAa,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC;AACT,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC;QACJ,OAAO,CAAC,aAAa,CACpB,eAAe,CAAC,GAAG,CAAC,EACpB,uBAAuB,CAAC,GAAG,CAAC,EAC5B,uBAAuB,CAAC,GAAG,CAAC,CAC5B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,CAAC,IAAI,CAAC,KAA+B,EAAE;YACnD,YAAY,EAAE,uBAAuB,CAAC,GAAG,CAAC;YAC1C,cAAc,EAAE,uBAAuB,CAAC,GAAG,CAAC;SAC5C,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport {\n\ttype HeadlessConnectionRole,\n\theadlessApprovalModes,\n\theadlessConnectionRoles,\n\theadlessNotificationTypes,\n\theadlessServerRequestTypes,\n\theadlessThinkingLevels,\n\theadlessToAgentMessageSchemasByType,\n\theadlessToAgentMessageTypes,\n\theadlessUtilityOperations,\n} from \"@evalops/contracts\";\nimport { type Static, type TSchema, Type } from \"@sinclair/typebox\";\nimport type { ThinkingLevel } from \"../../agent/types.js\";\nimport type { HeadlessToAgentMessage } from \"../../cli/headless-protocol.js\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport {\n\tnormalizeApprovalMode,\n\tresolveApprovalModeForRequest,\n} from \"../approval-mode-store.js\";\nimport { getAuthSubject } from \"../authz.js\";\nimport type {\n\tHeadlessRuntimeConnectionSnapshot,\n\tHeadlessRuntimeHeartbeatSnapshot,\n\tHeadlessRuntimeStreamEnvelope,\n\tHeadlessSessionRuntime,\n} from \"../headless-runtime-service.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\treadRequestBody,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { createSessionManagerForRequest } from \"../session-scope.js\";\nimport { parseAndValidateJson, validatePayload } from \"../validation.js\";\n\nfunction stringLiteralUnion<const T extends readonly string[]>(values: T) {\n\treturn Type.Unsafe<T[number]>(\n\t\tType.Union(\n\t\t\tvalues.map((value) => Type.Literal(value)) as unknown as [\n\t\t\t\tTSchema,\n\t\t\t\t...TSchema[],\n\t\t\t],\n\t\t),\n\t);\n}\n\nconst HeadlessOptOutNotificationsSchema = Type.Array(\n\tstringLiteralUnion(headlessNotificationTypes),\n\t{\n\t\tuniqueItems: true,\n\t},\n);\n\nconst HeadlessCreateBaseProperties = {\n\tsessionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tmodel: Type.Optional(Type.String()),\n\tenableClientTools: Type.Optional(Type.Boolean()),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\tclient: Type.Optional(\n\t\tType.Union([\n\t\t\tType.Literal(\"generic\"),\n\t\t\tType.Literal(\"vscode\"),\n\t\t\tType.Literal(\"jetbrains\"),\n\t\t\tType.Literal(\"conductor\"),\n\t\t]),\n\t),\n\tthinkingLevel: Type.Optional(stringLiteralUnion(headlessThinkingLevels)),\n\tapprovalMode: Type.Optional(stringLiteralUnion(headlessApprovalModes)),\n} as const;\n\nconst HeadlessSessionCreateSchema = Type.Object(HeadlessCreateBaseProperties);\n\nconst HeadlessConnectionCreateSchema = Type.Object({\n\t...HeadlessCreateBaseProperties,\n\tconnectionId: Type.Optional(Type.String()),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessMessageTypeSchema = Type.Object(\n\t{\n\t\ttype: stringLiteralUnion(headlessToAgentMessageTypes),\n\t},\n\t{ additionalProperties: true },\n);\n\nconst HeadlessSessionSubscribeSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessSessionUnsubscribeSchema = Type.Object({\n\tsubscriptionId: Type.String(),\n});\n\nconst HeadlessSessionHeartbeatSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\nconst HeadlessSessionDisconnectSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\ntype HeadlessSessionCreateInput = Static<typeof HeadlessSessionCreateSchema>;\ntype HeadlessConnectionCreateInput = Static<\n\ttypeof HeadlessConnectionCreateSchema\n>;\ntype HeadlessSessionSubscribeInput = Static<\n\ttypeof HeadlessSessionSubscribeSchema\n>;\ntype HeadlessSessionUnsubscribeInput = Static<\n\ttypeof HeadlessSessionUnsubscribeSchema\n>;\ntype HeadlessSessionHeartbeatInput = Static<\n\ttypeof HeadlessSessionHeartbeatSchema\n>;\ntype HeadlessSessionDisconnectInput = Static<\n\ttypeof HeadlessSessionDisconnectSchema\n>;\ntype HeadlessMessageTypeInput = Static<typeof HeadlessMessageTypeSchema>;\n\nasync function parseHeadlessMessage(\n\treq: IncomingMessage,\n): Promise<HeadlessToAgentMessage> {\n\tconst raw = await readRequestBody(req);\n\tif (!raw.length) {\n\t\tthrow new ApiError(400, \"Request body required\");\n\t}\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(raw.toString());\n\t} catch {\n\t\tthrow new ApiError(400, \"Invalid JSON payload\");\n\t}\n\tconst envelope = validatePayload<HeadlessMessageTypeInput>(\n\t\tparsed,\n\t\tHeadlessMessageTypeSchema,\n\t\t\"body\",\n\t);\n\treturn validatePayload<HeadlessToAgentMessage>(\n\t\tparsed,\n\t\theadlessToAgentMessageSchemasByType[envelope.type],\n\t\t\"body\",\n\t);\n}\n\nfunction getHeadlessRole(\n\treq: IncomingMessage,\n\texplicitRole?: HeadlessConnectionRole,\n): HeadlessConnectionRole {\n\tif (explicitRole) {\n\t\treturn explicitRole;\n\t}\n\tconst headerRole = getRequestHeader(\n\t\treq,\n\t\t\"x-composer-headless-role\",\n\t\t\"x-maestro-headless-role\",\n\t);\n\treturn headerRole === \"viewer\" ? \"viewer\" : \"controller\";\n}\n\nfunction getViewerDisallowedServerRequest(\n\tserverRequests?: Static<\n\t\ttypeof HeadlessCreateBaseProperties.capabilities\n\t>[\"serverRequests\"],\n): \"mcp_elicitation\" | \"user_input\" | undefined {\n\tif (serverRequests?.includes(\"mcp_elicitation\")) {\n\t\treturn \"mcp_elicitation\";\n\t}\n\tif (serverRequests?.includes(\"user_input\")) {\n\t\treturn \"user_input\";\n\t}\n\treturn undefined;\n}\n\nfunction writeSse(res: ServerResponse, payload: unknown): boolean {\n\treturn res.write(`data: ${JSON.stringify(payload)}\\n\\n`);\n}\n\nfunction getHeadlessSubscriberId(req: IncomingMessage): string | undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-subscriber-id\",\n\t\t\t\"x-maestro-headless-subscriber-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction getHeadlessConnectionId(req: IncomingMessage): string | undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-connection-id\",\n\t\t\t\"x-maestro-headless-connection-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction parseOptOutNotifications(\n\treq: IncomingMessage,\n): HeadlessSessionSubscribeInput[\"optOutNotifications\"] {\n\tconst url = new URL(\n\t\treq.url || \"/\",\n\t\t`http://${req.headers.host || \"localhost\"}`,\n\t);\n\tconst raw = url.searchParams.get(\"optOutNotifications\");\n\tif (!raw) {\n\t\treturn undefined;\n\t}\n\tconst notifications = raw\n\t\t.split(\",\")\n\t\t.map((value) => value.trim())\n\t\t.filter(Boolean);\n\tif (notifications.length === 0) {\n\t\treturn undefined;\n\t}\n\treturn validatePayload<\n\t\tNonNullable<HeadlessSessionSubscribeInput[\"optOutNotifications\"]>\n\t>(\n\t\tnotifications,\n\t\tHeadlessOptOutNotificationsSchema,\n\t\t\"query.optOutNotifications\",\n\t);\n}\n\nfunction getScopeKey(req: IncomingMessage): string {\n\treturn getAuthSubject(req);\n}\n\nfunction rethrowHeadlessMessageError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Viewer headless connections cannot send messages\") {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message === \"Headless subscriber not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message === \"Headless connection not found\" ||\n\t\terror.message === \"Headless connection does not have controller access\" ||\n\t\terror.message.includes(\"is owned by another connection\")\n\t) {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message.includes(\"Controller lease\")) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow new ApiError(403, error.message);\n}\n\nfunction rethrowHeadlessConnectionLifecycleError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Headless connection not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message.includes(\"Controller lease\") ||\n\t\terror.message ===\n\t\t\t\"Headless connection role does not match subscription role\"\n\t) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow error;\n}\n\nasync function ensureRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessSessionCreateInput & { registerConnection?: boolean },\n) {\n\tconst sessionManager = createSessionManagerForRequest(req, false);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst requestedSessionId = input.sessionId?.trim() || undefined;\n\tif (requestedSessionId) {\n\t\tconst sessionFile = sessionManager.getSessionFileById(requestedSessionId);\n\t\tif (!sessionFile) {\n\t\t\tthrow new ApiError(404, \"Session not found\");\n\t\t}\n\t\tsessionManager.setSessionFile(sessionFile);\n\t}\n\n\tconst registeredModel = await context.getRegisteredModel(input.model);\n\tconst subject = getAuthSubject(req);\n\tif (\n\t\tinput.enableClientTools &&\n\t\t!input.capabilities?.serverRequests?.includes(\"client_tool\")\n\t) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"client_tool capability is required when enableClientTools is true\",\n\t\t);\n\t}\n\tif (role === \"viewer\" && input.enableClientTools) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"viewer headless connections cannot enable client-side tools\",\n\t\t);\n\t}\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\tconst headerApproval = normalizeApprovalMode(\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-approval-mode\",\n\t\t\t\"x-maestro-approval-mode\",\n\t\t) ?? undefined,\n\t);\n\tconst effectiveApproval = resolveApprovalModeForRequest({\n\t\tsessionId: requestedSessionId ?? sessionManager.getSessionId(),\n\t\tsubject,\n\t\theaderApprovalMode: input.approvalMode ?? headerApproval,\n\t\tdefaultApprovalMode: context.defaultApprovalMode,\n\t});\n\n\treturn context.headlessRuntimeService.ensureRuntime({\n\t\tscope_key: getScopeKey(req),\n\t\tsessionId: requestedSessionId,\n\t\tsubject,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\tregisteredModel,\n\t\tthinkingLevel: (input.thinkingLevel ?? \"off\") as ThinkingLevel,\n\t\tapprovalMode: effectiveApproval,\n\t\tenableClientTools: input.enableClientTools,\n\t\tclient: input.client,\n\t\tregisterConnection: input.registerConnection ?? true,\n\t\tcontext,\n\t\tsessionManager,\n\t});\n}\n\nasync function ensureConnection(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessConnectionCreateInput,\n): Promise<HeadlessRuntimeConnectionSnapshot> {\n\tconst runtime = await ensureRuntime(req, context, {\n\t\t...input,\n\t\tregisterConnection: false,\n\t});\n\tconst role = getHeadlessRole(req, input.role);\n\tconst heartbeat = runtime.registerConnection({\n\t\tconnectionId: input.connectionId,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\ttakeControl: input.takeControl,\n\t});\n\tconst snapshot = runtime.getSnapshot();\n\treturn {\n\t\t...heartbeat,\n\t\tsession_id: snapshot.session_id,\n\t\trole,\n\t\topt_out_notifications: input.optOutNotifications,\n\t\tsnapshot,\n\t};\n}\n\nfunction getRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tsessionId: string | undefined,\n) {\n\tif (!sessionId) {\n\t\tthrow new ApiError(400, \"Missing headless session id\");\n\t}\n\tconst runtime = context.headlessRuntimeService.getRuntime(\n\t\tgetScopeKey(req),\n\t\tsessionId,\n\t);\n\tif (!runtime) {\n\t\tthrow new ApiError(404, \"Headless session not found\");\n\t}\n\treturn runtime;\n}\n\nexport async function handleHeadlessSessionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessSessionCreateInput>(\n\t\treq,\n\t\tHeadlessSessionCreateSchema,\n\t);\n\tconst runtime = await ensureRuntime(req, context, input);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessConnectionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessConnectionCreateInput>(\n\t\treq,\n\t\tHeadlessConnectionCreateSchema,\n\t);\n\tlet connection: HeadlessRuntimeConnectionSnapshot;\n\ttry {\n\t\tconnection = await ensureConnection(req, context, input);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, connection, context.corsHeaders, req);\n}\n\nexport function handleHeadlessSessionState(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionSubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionSubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionSubscribeSchema,\n\t);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\truntime.createSubscription({\n\t\t\t\tconnectionId: input.connectionId,\n\t\t\t\trole,\n\t\t\t\texplicit: true,\n\t\t\t\ttakeControl: input.takeControl,\n\t\t\t\tclientProtocolVersion: input.protocolVersion,\n\t\t\t\tclientInfo: input.clientInfo,\n\t\t\t\tcapabilities: input.capabilities\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t\t\t}\n\t\t\t\t\t: undefined,\n\t\t\t\toptOutNotifications: input.optOutNotifications,\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\terror.message === \"Controller lease is already held by another connection\"\n\t\t) {\n\t\t\tthrow new ApiError(409, error.message);\n\t\t}\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\t(error.message === \"Headless connection not found\" ||\n\t\t\t\terror.message ===\n\t\t\t\t\t\"Headless connection role does not match subscription role\")\n\t\t) {\n\t\t\tthrow new ApiError(400, error.message);\n\t\t}\n\t\tthrow error;\n\t}\n}\n\nexport async function handleHeadlessSessionUnsubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionUnsubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionUnsubscribeSchema,\n\t);\n\tif (!(await runtime.unsubscribe(input.subscriptionId))) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionHeartbeat(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionHeartbeatInput>(\n\t\treq,\n\t\tHeadlessSessionHeartbeatSchema,\n\t);\n\tlet heartbeat: HeadlessRuntimeHeartbeatSnapshot;\n\ttry {\n\t\theartbeat = runtime.heartbeatConnection({\n\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, heartbeat, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionDisconnect(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionDisconnectInput>(\n\t\treq,\n\t\tHeadlessSessionDisconnectSchema,\n\t);\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\tawait runtime.disconnectConnection({\n\t\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n}\n\nexport function handleHeadlessSessionEvents(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst url = new URL(\n\t\treq.url || `/api/headless/sessions/${params?.id}/events`,\n\t\t`http://${req.headers.host || \"localhost\"}`,\n\t);\n\tconst cursorParam = url.searchParams.get(\"cursor\");\n\tconst cursor = cursorParam ? Number.parseInt(cursorParam, 10) : null;\n\tconst subscriptionId =\n\t\turl.searchParams.get(\"subscriptionId\") || getHeadlessSubscriberId(req);\n\n\tconst stream = subscriptionId\n\t\t? runtime.attachSubscription(subscriptionId)\n\t\t: runtime.createImplicitStream({\n\t\t\t\tcursor,\n\t\t\t\trole: getHeadlessRole(req),\n\t\t\t\toptOutNotifications: parseOptOutNotifications(req),\n\t\t\t});\n\tif (!stream) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\n\tres.writeHead(200, {\n\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\"Cache-Control\": \"no-cache\",\n\t\tConnection: \"keep-alive\",\n\t\t...context.corsHeaders,\n\t});\n\tlet flushing = false;\n\n\tconst flush = () => {\n\t\tif (flushing || res.writableEnded) {\n\t\t\treturn;\n\t\t}\n\t\tflushing = true;\n\t\twhile (!res.writableEnded) {\n\t\t\tconst next = stream.next();\n\t\t\tif (!next) {\n\t\t\t\tflushing = false;\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst wrote = writeSse(res, next);\n\t\t\tif (!wrote) {\n\t\t\t\tres.once(\"drain\", () => {\n\t\t\t\t\tflushing = false;\n\t\t\t\t\tflush();\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t\tflushing = false;\n\t};\n\tconst stopListening = stream.onAvailable(flush);\n\tconst heartbeat = setInterval(() => {\n\t\tif (!res.writableEnded) {\n\t\t\tstream.enqueue(runtime.heartbeat());\n\t\t\tflush();\n\t\t}\n\t}, 15000);\n\theartbeat.unref();\n\n\tconst cleanup = () => {\n\t\tclearInterval(heartbeat);\n\t\tstopListening();\n\t\tstream.close();\n\t};\n\treq.on(\"close\", cleanup);\n\tres.on(\"close\", cleanup);\n\tflush();\n}\n\nexport async function handleHeadlessSessionMessage(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseHeadlessMessage(req);\n\ttry {\n\t\truntime.assertCanSend(\n\t\t\tgetHeadlessRole(req),\n\t\t\tgetHeadlessSubscriberId(req),\n\t\t\tgetHeadlessConnectionId(req),\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\ttry {\n\t\tawait runtime.send(input as HeadlessToAgentMessage, {\n\t\t\tconnectionId: getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n"]}
+{"version":3,"file":"headless-sessions.js","sourceRoot":"","sources":["../../../src/server/handlers/headless-sessions.ts"],"names":[],"mappings":"AACA,OAAO,EAEN,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,mCAAmC,EACnC,2BAA2B,EAC3B,yBAAyB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAA6B,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAEhF,OAAO,EAAE,kCAAkC,EAAE,MAAM,wCAAwC,CAAC;AAE5F,OAAO,EACN,qBAAqB,EACrB,6BAA6B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAO9D,OAAO,EACN,QAAQ,EACR,gBAAgB,EAChB,eAAe,EACf,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEzE,MAAM,CAAN,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAChC,8DAAqC,CAAA;IACrC,0EAAiD,CAAA;AAClD,CAAC,EAHW,qBAAqB,KAArB,qBAAqB,QAGhC;AAED,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAE3D,SAAS,kBAAkB,CAAoC,MAAS;IACvE,OAAO,IAAI,CAAC,MAAM,CACjB,IAAI,CAAC,KAAK,CACT,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAGxC,CACD,CACD,CAAC;AACH,CAAC;AAED,MAAM,iCAAiC,GAAG,IAAI,CAAC,KAAK,CACnD,kBAAkB,CAAC,yBAAyB,CAAC,EAC7C;IACC,WAAW,EAAE,IAAI;CACjB,CACD,CAAC;AAEF,MAAM,4BAA4B,GAAG;IACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAChD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,KAAK,CAAC;QACV,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;KACzB,CAAC,CACF;IACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACxE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;CAC7D,CAAC;AAEX,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAE9E,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,GAAG,4BAA4B;IAC/B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,CAAC,MAAM,CAC5C;IACC,IAAI,EAAE,kBAAkB,CAAC,2BAA2B,CAAC;CACrD,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;AAEF,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,MAAM,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC,CACF;IACD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;QACX,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,EAAE;YAC1D,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC/B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;SACjB,CAAC,CACF;QACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KAC7C,CAAC,CACF;IACD,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAChE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAEH,MAAM,+BAA+B,GAAG,IAAI,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,CAAC;AAoBH,KAAK,UAAU,oBAAoB,CAClC,GAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAC/B,MAAM,EACN,yBAAyB,EACzB,MAAM,CACN,CAAC;IACF,OAAO,eAAe,CACrB,MAAM,EACN,mCAAmC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAClD,MAAM,CACN,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACvB,GAAoB,EACpB,YAAqC;IAErC,IAAI,YAAY,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAClC,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,CAAC;IACF,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,SAAS,gCAAgC,CACxC,cAEmB;IAEnB,IAAI,cAAc,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,OAAgB;IACtD,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACpD,OAAO,CACN,gBAAgB,CACf,GAAG,EACH,mCAAmC,EACnC,kCAAkC,CAClC,IAAI,SAAS,CACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAChC,GAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,GAAG,EACd,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,aAAa,GAAG,GAAG;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,eAAe,CAGrB,aAAa,EACb,iCAAiC,EACjC,2BAA2B,CAC3B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB;IACxC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAyB,EACzB,QAA4C;IAE5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QACzC,iBAAiB,EAAE,YAAY,EAAE,eAAe;QAChD,iBAAiB,EAAE,YAAY,EAAE,eAAe;QAChD,YAAY,EAAE,YAAY,EAAE,WAAW;QACvC,YAAY,EAAE,YAAY,EAAE,UAAU;QACtC,GAAG,QAAQ;KACX,CAAC,EAAE,CAAC;QACJ,IAAI,KAAK,EAAE,CAAC;YACX,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACF,CAAC;IACD,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,SAAS,0BAA0B,CAClC,OAAyB,EACzB,OAAe,EACf,QAA4C;IAE5C,OAAO,IAAI,QAAQ,CAClB,GAAG,EACH,OAAO,EACP;QACC;YACC,MAAM,EAAE,qBAAqB,CAAC,qBAAqB;YACnD,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;SACtD;KACD,EACD,qBAAqB,CAAC,qBAAqB,CAC3C,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAyB,EACzB,OAAe,EACf,QAA4C;IAE5C,OAAO,IAAI,QAAQ,CAClB,GAAG,EACH,OAAO,EACP;QACC;YACC,MAAM,EAAE,qBAAqB,CAAC,eAAe;YAC7C,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;SACtD;KACD,EACD,qBAAqB,CAAC,eAAe,CACrC,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACvC,OAAyB,EACzB,kBAAsC;IAEtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO;IACR,CAAC;IACD,MAAM,eAAe,GACpB,YAAY,CAAC,sBAAsB;QACnC,YAAY,CAAC,0BAA0B,CAAC;IACzC,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,yBAAyB,CAC9B,OAAO,EACP,sEAAsE,EACtE;YACC,QAAQ,EAAE,MAAM;YAChB,kBAAkB,EAAE,eAAe;YACnC,4BAA4B,EAAE,kBAAkB;SAChD,CACD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACtB,OAAO;IACR,CAAC;IACD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzB,MAAM,0BAA0B,CAC/B,OAAO,EACP,qDAAqD,eAAe,EAAE,EACtE;YACC,kBAAkB,EAAE,eAAe;SACnC,CACD,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,KAAK,eAAe,EAAE,CAAC;QAC5C,MAAM,0BAA0B,CAC/B,OAAO,EACP,6CAA6C,eAAe,EAAE,EAC9D;YACC,kBAAkB,EAAE,eAAe;YACnC,4BAA4B,EAAE,kBAAkB;SAChD,CACD,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,wBAAwB,CAChC,OAAyB,EACzB,SAAiB;IAEjB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO;IACR,CAAC;IACD,MAAM,eAAe,GACpB,YAAY,CAAC,sBAAsB;QACnC,YAAY,CAAC,0BAA0B,CAAC;IACzC,IAAI,eAAe,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,0BAA0B,CAC/B,OAAO,EACP,6CAA6C,eAAe,EAAE,EAC9D;YACC,kBAAkB,EAAE,eAAe;YACnC,4BAA4B,EAAE,SAAS;SACvC,CACD,CAAC;IACH,CAAC;IACD,YAAY,CAAC,sBAAsB,GAAG,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,2BAA2B,CACnC,OAAyB,EACzB,aAAiC;IAEjC,MAAM,aAAa,GAAG,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAE5E,IAAI,qBAAyC,CAAC;IAC9C,IAAI,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC;YACJ,qBAAqB,GAAG,4BAA4B,CAAC,aAAa,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4BAA4B,aAAa,EAAE,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IAED,IAAI,kBAAsC,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,kBAAkB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,UAAU,EAAE,CAC5D,CAAC;QACH,CAAC;IACF,CAAC;IAED,IACC,qBAAqB;QACrB,kBAAkB;QAClB,qBAAqB,KAAK,kBAAkB,EAC3C,CAAC;QACF,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,0DAA0D,kBAAkB,EAAE,CAC9E,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,IAAI,qBAAqB,CAAC;AACpD,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IAClD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,kDAAkD,EAAE,CAAC;QAC1E,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,KAAK,+BAA+B;QACjD,KAAK,CAAC,OAAO,KAAK,qDAAqD;QACvE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EACvD,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,uCAAuC,CAAC,KAAc;IAC9D,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,IACC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC1C,KAAK,CAAC,OAAO;YACZ,2DAA2D,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,KAAK,CAAC;AACb,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,GAAoB,EACpB,OAAyB,EACzB,KAGC;IAED,MAAM,cAAc,GAAG,8BAA8B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChE,MAAM,aAAa,GAAG,2BAA2B,CAChD,OAAO,EACP,KAAK,CAAC,aAAa,CACnB,CAAC;IACF,+BAA+B,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC7D,IAAI,kBAAkB,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC9C,CAAC;QACD,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,IACC,KAAK,CAAC,iBAAiB;QACvB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC3D,CAAC;QACF,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,mEAAmE,CACnE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,6DAA6D,CAC7D,CAAC;IACH,CAAC;IACD,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,qBAAqB,CAC3C,gBAAgB,CACf,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,IAAI,SAAS,CACd,CAAC;IACF,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;QACvD,SAAS,EAAE,kBAAkB,IAAI,cAAc,CAAC,YAAY,EAAE;QAC9D,OAAO;QACP,kBAAkB,EAAE,KAAK,CAAC,YAAY,IAAI,cAAc;QACxD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;KAChD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC;QAClE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;QAC3B,SAAS,EAAE,kBAAkB;QAC7B,OAAO;QACP,aAAa;QACb,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,eAAe;QACf,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAkB;QAC9D,YAAY,EAAE,iBAAiB;QAC/B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;QACpD,OAAO;QACP,cAAc;KACd,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,yBAAyB,KAAK,KAAK,EAAE,CAAC;QAC/C,MAAM,sCAAsC,CAAC;YAC5C,OAAO;YACP,OAAO;YACP,OAAO;YACP,eAAe;YACf,IAAI;YACJ,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAkB;YAC9D,YAAY,EAAE,iBAAiB;YAC/B,aAAa;YACb,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,sCAAsC,CAAC,OAUrD;IACA,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC;QACvD,WAAW,EAAE,YAAY,EAAE,WAAW;QACtC,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,mBAAmB,QAAQ,CAAC,UAAU,EAAE;QACvD,QAAQ,EAAE;YACT,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE;YACjC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,QAAQ;YAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,aAAa,EAAE,OAAO,CAAC,YAAY;YACnC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS;YACzC,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe;YAC/C,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,iBAAiB,EAAE,YAAY,EAAE,eAAe;YAChD,iBAAiB,EAAE,YAAY,EAAE,eAAe;SAChD;KACD,CAAC,CAAC;IACH,IAAI,MAAM,EAAE,GAAG,CAAC,EAAE,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QAChE,YAAY,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACzC,CAAC;AACF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,GAAoB,EACpB,OAAyB,EACzB,KAAoC;IAEpC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE;QACjD,GAAG,KAAK;QACR,kBAAkB,EAAE,KAAK;QACzB,yBAAyB,EAAE,KAAK;KAChC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;aACnD;YACF,CAAC,CAAC,SAAS;QACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO;QACN,GAAG,SAAS;QACZ,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,IAAI;QACJ,qBAAqB,EAAE,KAAK,CAAC,mBAAmB;QAChD,QAAQ;KACR,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAClB,GAAoB,EACpB,OAAyB,EACzB,SAA6B;IAE7B,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IACxD,CAAC;IACD,+BAA+B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,UAAU,CACxD,WAAW,CAAC,GAAG,CAAC,EAChB,SAAS,CACT,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,2BAA2B,CAC3B,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,UAA6C,CAAC;IAClD,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,uBAAuB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,YAAY,EAAE,cAAc,CAClC,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,gDAAgD,uBAAuB,WAAW,CAClF,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,OAAO,CAAC,kBAAkB,CAAC;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI;YACJ,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,qBAAqB,EAAE,KAAK,CAAC,eAAe;YAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAC/B,CAAC,CAAC;oBACA,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;oBAClD,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;oBACxD,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;iBACnD;gBACF,CAAC,CAAC,SAAS;YACZ,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC9C,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IACC,KAAK,YAAY,KAAK;YACtB,KAAK,CAAC,OAAO,KAAK,wDAAwD,EACzE,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IACC,KAAK,YAAY,KAAK;YACtB,CAAC,KAAK,CAAC,OAAO,KAAK,+BAA+B;gBACjD,KAAK,CAAC,OAAO;oBACZ,2DAA2D,CAAC,EAC7D,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACrD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,gCAAgC,CAChC,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,8BAA8B,CAC9B,CAAC;IACF,IAAI,SAA2C,CAAC;IAChD,IAAI,CAAC;QACJ,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC;YACvC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,+BAA+B,CAC/B,CAAC;IACF,IAAI,CAAC;QACJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH,MAAM,OAAO,CAAC,oBAAoB,CAAC;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,GAAG,CAAC;SACpE,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,0BAA0B,MAAM,EAAE,EAAE,SAAS,EACxD,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,cAAc,GACnB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAExE,MAAM,MAAM,GAAG,cAAc;QAC5B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;YAC7B,MAAM;YACN,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;YAC1B,mBAAmB,EAAE,wBAAwB,CAAC,GAAG,CAAC;SAClD,CAAC,CAAC;IACL,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QAClB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,UAAU;QAC3B,UAAU,EAAE,YAAY;QACxB,GAAG,OAAO,CAAC,WAAW;KACtB,CAAC,CAAC;IACH,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,KAAK,GAAG,GAAG,EAAE;QAClB,IAAI,QAAQ,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACnC,OAAO;QACR,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,QAAQ,GAAG,KAAK,CAAC;gBACjB,OAAO;YACR,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,QAAQ,GAAG,KAAK,CAAC;oBACjB,KAAK,EAAE,CAAC;gBACT,CAAC,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;QACF,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACpC,KAAK,EAAE,CAAC;QACT,CAAC;IACF,CAAC,EAAE,KAAK,CAAC,CAAC;IACV,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,MAAM,OAAO,GAAG,GAAG,EAAE;QACpB,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,aAAa,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC;AACT,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC;QACJ,OAAO,CAAC,aAAa,CACpB,eAAe,CAAC,GAAG,CAAC,EACpB,uBAAuB,CAAC,GAAG,CAAC,EAC5B,uBAAuB,CAAC,GAAG,CAAC,CAC5B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,CAAC,IAAI,CAAC,KAA+B,EAAE;YACnD,YAAY,EAAE,uBAAuB,CAAC,GAAG,CAAC;YAC1C,cAAc,EAAE,uBAAuB,CAAC,GAAG,CAAC;SAC5C,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport {\n\ttype HeadlessConnectionRole,\n\theadlessApprovalModes,\n\theadlessConnectionRoles,\n\theadlessNotificationTypes,\n\theadlessServerRequestTypes,\n\theadlessThinkingLevels,\n\theadlessToAgentMessageSchemasByType,\n\theadlessToAgentMessageTypes,\n\theadlessUtilityOperations,\n} from \"@evalops/contracts\";\nimport { type Static, type TSchema, Type } from \"@sinclair/typebox\";\nimport type { ApprovalMode } from \"../../agent/action-approval.js\";\nimport type { ThinkingLevel } from \"../../agent/types.js\";\nimport type { HeadlessToAgentMessage } from \"../../cli/headless-protocol.js\";\nimport { resolveExistingWorkspaceRoot } from \"../../headless/workspace-root.js\";\nimport type { RegisteredModel } from \"../../models/registry.js\";\nimport { recordMaestroSessionRuntimeTrigger } from \"../../platform/agent-runtime-client.js\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport {\n\tnormalizeApprovalMode,\n\tresolveApprovalModeForRequest,\n} from \"../approval-mode-store.js\";\nimport { getAuthScopeKey, getAuthSubject } from \"../authz.js\";\nimport type {\n\tHeadlessRuntimeConnectionSnapshot,\n\tHeadlessRuntimeHeartbeatSnapshot,\n\tHeadlessRuntimeStreamEnvelope,\n\tHeadlessSessionRuntime,\n} from \"../headless-runtime-service.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\treadRequestBody,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { createSessionManagerForRequest } from \"../session-scope.js\";\nimport { parseAndValidateJson, validatePayload } from \"../validation.js\";\n\nexport enum HostedRunnerErrorType {\n\tRuntimeNotReady = \"runtime_not_ready\",\n\tRuntimeOwnedElsewhere = \"runtime_owned_elsewhere\",\n}\n\nconst HOSTED_RUNNER_ERROR_DOMAIN = \"maestro.hosted_runner\";\n\nfunction stringLiteralUnion<const T extends readonly string[]>(values: T) {\n\treturn Type.Unsafe<T[number]>(\n\t\tType.Union(\n\t\t\tvalues.map((value) => Type.Literal(value)) as unknown as [\n\t\t\t\tTSchema,\n\t\t\t\t...TSchema[],\n\t\t\t],\n\t\t),\n\t);\n}\n\nconst HeadlessOptOutNotificationsSchema = Type.Array(\n\tstringLiteralUnion(headlessNotificationTypes),\n\t{\n\t\tuniqueItems: true,\n\t},\n);\n\nconst HeadlessCreateBaseProperties = {\n\tsessionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tworkspaceRoot: Type.Optional(Type.String()),\n\tmodel: Type.Optional(Type.String()),\n\tenableClientTools: Type.Optional(Type.Boolean()),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\tclient: Type.Optional(\n\t\tType.Union([\n\t\t\tType.Literal(\"generic\"),\n\t\t\tType.Literal(\"vscode\"),\n\t\t\tType.Literal(\"jetbrains\"),\n\t\t\tType.Literal(\"conductor\"),\n\t\t]),\n\t),\n\tthinkingLevel: Type.Optional(stringLiteralUnion(headlessThinkingLevels)),\n\tapprovalMode: Type.Optional(stringLiteralUnion(headlessApprovalModes)),\n} as const;\n\nconst HeadlessSessionCreateSchema = Type.Object(HeadlessCreateBaseProperties);\n\nconst HeadlessConnectionCreateSchema = Type.Object({\n\t...HeadlessCreateBaseProperties,\n\tconnectionId: Type.Optional(Type.String()),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessMessageTypeSchema = Type.Object(\n\t{\n\t\ttype: stringLiteralUnion(headlessToAgentMessageTypes),\n\t},\n\t{ additionalProperties: true },\n);\n\nconst HeadlessSessionSubscribeSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tprotocolVersion: Type.Optional(Type.String()),\n\tclientInfo: Type.Optional(\n\t\tType.Object({\n\t\t\tname: Type.String(),\n\t\t\tversion: Type.Optional(Type.String()),\n\t\t}),\n\t),\n\tcapabilities: Type.Optional(\n\t\tType.Object({\n\t\t\tserverRequests: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessServerRequestTypes), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tutilityOperations: Type.Optional(\n\t\t\t\tType.Array(stringLiteralUnion(headlessUtilityOperations), {\n\t\t\t\t\tuniqueItems: true,\n\t\t\t\t}),\n\t\t\t),\n\t\t\trawAgentEvents: Type.Optional(Type.Boolean()),\n\t\t}),\n\t),\n\toptOutNotifications: Type.Optional(HeadlessOptOutNotificationsSchema),\n\trole: Type.Optional(stringLiteralUnion(headlessConnectionRoles)),\n\ttakeControl: Type.Optional(Type.Boolean()),\n});\n\nconst HeadlessSessionUnsubscribeSchema = Type.Object({\n\tsubscriptionId: Type.String(),\n});\n\nconst HeadlessSessionHeartbeatSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\nconst HeadlessSessionDisconnectSchema = Type.Object({\n\tconnectionId: Type.Optional(Type.String()),\n\tsubscriptionId: Type.Optional(Type.String()),\n});\n\ntype HeadlessSessionCreateInput = Static<typeof HeadlessSessionCreateSchema>;\ntype HeadlessConnectionCreateInput = Static<\n\ttypeof HeadlessConnectionCreateSchema\n>;\ntype HeadlessSessionSubscribeInput = Static<\n\ttypeof HeadlessSessionSubscribeSchema\n>;\ntype HeadlessSessionUnsubscribeInput = Static<\n\ttypeof HeadlessSessionUnsubscribeSchema\n>;\ntype HeadlessSessionHeartbeatInput = Static<\n\ttypeof HeadlessSessionHeartbeatSchema\n>;\ntype HeadlessSessionDisconnectInput = Static<\n\ttypeof HeadlessSessionDisconnectSchema\n>;\ntype HeadlessMessageTypeInput = Static<typeof HeadlessMessageTypeSchema>;\n\nasync function parseHeadlessMessage(\n\treq: IncomingMessage,\n): Promise<HeadlessToAgentMessage> {\n\tconst raw = await readRequestBody(req);\n\tif (!raw.length) {\n\t\tthrow new ApiError(400, \"Request body required\");\n\t}\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(raw.toString());\n\t} catch {\n\t\tthrow new ApiError(400, \"Invalid JSON payload\");\n\t}\n\tconst envelope = validatePayload<HeadlessMessageTypeInput>(\n\t\tparsed,\n\t\tHeadlessMessageTypeSchema,\n\t\t\"body\",\n\t);\n\treturn validatePayload<HeadlessToAgentMessage>(\n\t\tparsed,\n\t\theadlessToAgentMessageSchemasByType[envelope.type],\n\t\t\"body\",\n\t);\n}\n\nfunction getHeadlessRole(\n\treq: IncomingMessage,\n\texplicitRole?: HeadlessConnectionRole,\n): HeadlessConnectionRole {\n\tif (explicitRole) {\n\t\treturn explicitRole;\n\t}\n\tconst headerRole = getRequestHeader(\n\t\treq,\n\t\t\"x-composer-headless-role\",\n\t\t\"x-maestro-headless-role\",\n\t);\n\treturn headerRole === \"viewer\" ? \"viewer\" : \"controller\";\n}\n\nfunction getViewerDisallowedServerRequest(\n\tserverRequests?: Static<\n\t\ttypeof HeadlessCreateBaseProperties.capabilities\n\t>[\"serverRequests\"],\n): \"mcp_elicitation\" | \"user_input\" | undefined {\n\tif (serverRequests?.includes(\"mcp_elicitation\")) {\n\t\treturn \"mcp_elicitation\";\n\t}\n\tif (serverRequests?.includes(\"user_input\")) {\n\t\treturn \"user_input\";\n\t}\n\treturn undefined;\n}\n\nfunction writeSse(res: ServerResponse, payload: unknown): boolean {\n\treturn res.write(`data: ${JSON.stringify(payload)}\\n\\n`);\n}\n\nfunction getHeadlessSubscriberId(req: IncomingMessage): string | undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-subscriber-id\",\n\t\t\t\"x-maestro-headless-subscriber-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction getHeadlessConnectionId(req: IncomingMessage): string | undefined {\n\treturn (\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-headless-connection-id\",\n\t\t\t\"x-maestro-headless-connection-id\",\n\t\t) ?? undefined\n\t);\n}\n\nfunction parseOptOutNotifications(\n\treq: IncomingMessage,\n): HeadlessSessionSubscribeInput[\"optOutNotifications\"] {\n\tconst url = new URL(\n\t\treq.url || \"/\",\n\t\t`http://${req.headers.host || \"localhost\"}`,\n\t);\n\tconst raw = url.searchParams.get(\"optOutNotifications\");\n\tif (!raw) {\n\t\treturn undefined;\n\t}\n\tconst notifications = raw\n\t\t.split(\",\")\n\t\t.map((value) => value.trim())\n\t\t.filter(Boolean);\n\tif (notifications.length === 0) {\n\t\treturn undefined;\n\t}\n\treturn validatePayload<\n\t\tNonNullable<HeadlessSessionSubscribeInput[\"optOutNotifications\"]>\n\t>(\n\t\tnotifications,\n\t\tHeadlessOptOutNotificationsSchema,\n\t\t\"query.optOutNotifications\",\n\t);\n}\n\nfunction getScopeKey(req: IncomingMessage): string {\n\treturn getAuthScopeKey(req);\n}\n\nfunction hostedRunnerErrorMetadata(\n\tcontext: WebServerContext,\n\tmetadata: Record<string, string | undefined>,\n): Record<string, string> {\n\tconst hostedRunner = context.hostedRunner;\n\tconst detailMetadata: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries({\n\t\trunner_session_id: hostedRunner?.runnerSessionId,\n\t\towner_instance_id: hostedRunner?.ownerInstanceId,\n\t\tworkspace_id: hostedRunner?.workspaceId,\n\t\tagent_run_id: hostedRunner?.agentRunId,\n\t\t...metadata,\n\t})) {\n\t\tif (value) {\n\t\t\tdetailMetadata[key] = value;\n\t\t}\n\t}\n\treturn detailMetadata;\n}\n\nfunction hostedRunnerOwnershipError(\n\tcontext: WebServerContext,\n\tmessage: string,\n\tmetadata: Record<string, string | undefined>,\n): ApiError {\n\treturn new ApiError(\n\t\t409,\n\t\tmessage,\n\t\t[\n\t\t\t{\n\t\t\t\treason: HostedRunnerErrorType.RuntimeOwnedElsewhere,\n\t\t\t\tdomain: HOSTED_RUNNER_ERROR_DOMAIN,\n\t\t\t\tmetadata: hostedRunnerErrorMetadata(context, metadata),\n\t\t\t},\n\t\t],\n\t\tHostedRunnerErrorType.RuntimeOwnedElsewhere,\n\t);\n}\n\nfunction hostedRunnerNotReadyError(\n\tcontext: WebServerContext,\n\tmessage: string,\n\tmetadata: Record<string, string | undefined>,\n): ApiError {\n\treturn new ApiError(\n\t\t503,\n\t\tmessage,\n\t\t[\n\t\t\t{\n\t\t\t\treason: HostedRunnerErrorType.RuntimeNotReady,\n\t\t\t\tdomain: HOSTED_RUNNER_ERROR_DOMAIN,\n\t\t\t\tmetadata: hostedRunnerErrorMetadata(context, metadata),\n\t\t\t},\n\t\t],\n\t\tHostedRunnerErrorType.RuntimeNotReady,\n\t);\n}\n\nfunction ensureHostedRunnerCanUseSession(\n\tcontext: WebServerContext,\n\trequestedSessionId: string | undefined,\n): void {\n\tconst hostedRunner = context.hostedRunner;\n\tif (!hostedRunner) {\n\t\treturn;\n\t}\n\tconst activeSessionId =\n\t\thostedRunner.activeMaestroSessionId ??\n\t\thostedRunner.configuredMaestroSessionId;\n\tif (hostedRunner.draining) {\n\t\tthrow hostedRunnerNotReadyError(\n\t\t\tcontext,\n\t\t\t\"Hosted runner is draining and not accepting headless session traffic\",\n\t\t\t{\n\t\t\t\tdraining: \"true\",\n\t\t\t\tmaestro_session_id: activeSessionId,\n\t\t\t\trequested_maestro_session_id: requestedSessionId,\n\t\t\t},\n\t\t);\n\t}\n\tif (!activeSessionId) {\n\t\treturn;\n\t}\n\tif (!requestedSessionId) {\n\t\tthrow hostedRunnerOwnershipError(\n\t\t\tcontext,\n\t\t\t`Hosted runner is already bound to Maestro session ${activeSessionId}`,\n\t\t\t{\n\t\t\t\tmaestro_session_id: activeSessionId,\n\t\t\t},\n\t\t);\n\t}\n\tif (requestedSessionId !== activeSessionId) {\n\t\tthrow hostedRunnerOwnershipError(\n\t\t\tcontext,\n\t\t\t`Hosted runner is bound to Maestro session ${activeSessionId}`,\n\t\t\t{\n\t\t\t\tmaestro_session_id: activeSessionId,\n\t\t\t\trequested_maestro_session_id: requestedSessionId,\n\t\t\t},\n\t\t);\n\t}\n}\n\nfunction claimHostedRunnerSession(\n\tcontext: WebServerContext,\n\tsessionId: string,\n): void {\n\tconst hostedRunner = context.hostedRunner;\n\tif (!hostedRunner) {\n\t\treturn;\n\t}\n\tconst activeSessionId =\n\t\thostedRunner.activeMaestroSessionId ??\n\t\thostedRunner.configuredMaestroSessionId;\n\tif (activeSessionId && activeSessionId !== sessionId) {\n\t\tthrow hostedRunnerOwnershipError(\n\t\t\tcontext,\n\t\t\t`Hosted runner is bound to Maestro session ${activeSessionId}`,\n\t\t\t{\n\t\t\t\tmaestro_session_id: activeSessionId,\n\t\t\t\trequested_maestro_session_id: sessionId,\n\t\t\t},\n\t\t);\n\t}\n\thostedRunner.activeMaestroSessionId = sessionId;\n}\n\nfunction resolveRuntimeWorkspaceRoot(\n\tcontext: WebServerContext,\n\tworkspaceRoot: string | undefined,\n): string | undefined {\n\tconst requestedRoot = workspaceRoot?.trim() || undefined;\n\tconst hostedRoot = context.hostedRunner?.workspaceRoot?.trim() || undefined;\n\n\tlet resolvedRequestedRoot: string | undefined;\n\tif (requestedRoot) {\n\t\ttry {\n\t\t\tresolvedRequestedRoot = resolveExistingWorkspaceRoot(requestedRoot);\n\t\t} catch {\n\t\t\tthrow new ApiError(400, `workspaceRoot not found: ${requestedRoot}`);\n\t\t}\n\t}\n\n\tlet resolvedHostedRoot: string | undefined;\n\tif (hostedRoot) {\n\t\ttry {\n\t\t\tresolvedHostedRoot = resolveExistingWorkspaceRoot(hostedRoot);\n\t\t} catch {\n\t\t\tthrow new ApiError(\n\t\t\t\t500,\n\t\t\t\t`Hosted runner workspace root is unavailable: ${hostedRoot}`,\n\t\t\t);\n\t\t}\n\t}\n\n\tif (\n\t\tresolvedRequestedRoot &&\n\t\tresolvedHostedRoot &&\n\t\tresolvedRequestedRoot !== resolvedHostedRoot\n\t) {\n\t\tthrow new ApiError(\n\t\t\t409,\n\t\t\t`workspaceRoot must match hosted runner workspace root: ${resolvedHostedRoot}`,\n\t\t);\n\t}\n\n\treturn resolvedHostedRoot ?? resolvedRequestedRoot;\n}\n\nfunction rethrowHeadlessMessageError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Viewer headless connections cannot send messages\") {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message === \"Headless subscriber not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message === \"Headless connection not found\" ||\n\t\terror.message === \"Headless connection does not have controller access\" ||\n\t\terror.message.includes(\"is owned by another connection\")\n\t) {\n\t\tthrow new ApiError(403, error.message);\n\t}\n\tif (error.message.includes(\"Controller lease\")) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow new ApiError(403, error.message);\n}\n\nfunction rethrowHeadlessConnectionLifecycleError(error: unknown): never {\n\tif (!(error instanceof Error)) {\n\t\tthrow error;\n\t}\n\tif (error.message === \"Headless connection not found\") {\n\t\tthrow new ApiError(404, error.message);\n\t}\n\tif (\n\t\terror.message.includes(\"Controller lease\") ||\n\t\terror.message ===\n\t\t\t\"Headless connection role does not match subscription role\"\n\t) {\n\t\tthrow new ApiError(409, error.message);\n\t}\n\tthrow error;\n}\n\nasync function ensureRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessSessionCreateInput & {\n\t\tregisterConnection?: boolean;\n\t\trecordAgentRuntimeTrigger?: boolean;\n\t},\n) {\n\tconst sessionManager = createSessionManagerForRequest(req, false);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst requestedSessionId = input.sessionId?.trim() || undefined;\n\tconst workspaceRoot = resolveRuntimeWorkspaceRoot(\n\t\tcontext,\n\t\tinput.workspaceRoot,\n\t);\n\tensureHostedRunnerCanUseSession(context, requestedSessionId);\n\tif (requestedSessionId) {\n\t\tconst sessionFile = sessionManager.getSessionFileById(requestedSessionId);\n\t\tif (!sessionFile) {\n\t\t\tthrow new ApiError(404, \"Session not found\");\n\t\t}\n\t\tsessionManager.setSessionFile(sessionFile);\n\t}\n\n\tconst registeredModel = await context.getRegisteredModel(input.model);\n\tconst subject = getAuthSubject(req);\n\tif (\n\t\tinput.enableClientTools &&\n\t\t!input.capabilities?.serverRequests?.includes(\"client_tool\")\n\t) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"client_tool capability is required when enableClientTools is true\",\n\t\t);\n\t}\n\tif (role === \"viewer\" && input.enableClientTools) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t\"viewer headless connections cannot enable client-side tools\",\n\t\t);\n\t}\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\tconst headerApproval = normalizeApprovalMode(\n\t\tgetRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-approval-mode\",\n\t\t\t\"x-maestro-approval-mode\",\n\t\t) ?? undefined,\n\t);\n\tconst effectiveApproval = resolveApprovalModeForRequest({\n\t\tsessionId: requestedSessionId ?? sessionManager.getSessionId(),\n\t\tsubject,\n\t\theaderApprovalMode: input.approvalMode ?? headerApproval,\n\t\tdefaultApprovalMode: context.defaultApprovalMode,\n\t});\n\n\tconst runtime = await context.headlessRuntimeService.ensureRuntime({\n\t\tscope_key: getScopeKey(req),\n\t\tsessionId: requestedSessionId,\n\t\tsubject,\n\t\tworkspaceRoot,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\tregisteredModel,\n\t\tthinkingLevel: (input.thinkingLevel ?? \"off\") as ThinkingLevel,\n\t\tapprovalMode: effectiveApproval,\n\t\tenableClientTools: input.enableClientTools,\n\t\tclient: input.client,\n\t\tregisterConnection: input.registerConnection ?? true,\n\t\tcontext,\n\t\tsessionManager,\n\t});\n\tif (context.hostedRunner) {\n\t\tclaimHostedRunnerSession(context, runtime.getSnapshot().session_id);\n\t}\n\tif (input.recordAgentRuntimeTrigger !== false) {\n\t\tawait recordPlatformAgentRuntimeSessionStart({\n\t\t\tcontext,\n\t\t\truntime,\n\t\t\tsubject,\n\t\t\tregisteredModel,\n\t\t\trole,\n\t\t\tthinkingLevel: (input.thinkingLevel ?? \"off\") as ThinkingLevel,\n\t\t\tapprovalMode: effectiveApproval,\n\t\t\tworkspaceRoot,\n\t\t\tinput,\n\t\t});\n\t}\n\treturn runtime;\n}\n\nasync function recordPlatformAgentRuntimeSessionStart(options: {\n\tcontext: WebServerContext;\n\truntime: HeadlessSessionRuntime;\n\tsubject?: string;\n\tregisteredModel: RegisteredModel;\n\trole: HeadlessConnectionRole;\n\tthinkingLevel: ThinkingLevel;\n\tapprovalMode: ApprovalMode;\n\tworkspaceRoot: string | undefined;\n\tinput: HeadlessSessionCreateInput;\n}): Promise<void> {\n\tconst snapshot = options.runtime.getSnapshot();\n\tconst hostedRunner = options.context.hostedRunner;\n\tconst result = await recordMaestroSessionRuntimeTrigger({\n\t\tworkspaceId: hostedRunner?.workspaceId,\n\t\tsessionId: snapshot.session_id,\n\t\tactorId: options.subject,\n\t\tcorrelationId: `maestro-session:${snapshot.session_id}`,\n\t\tmetadata: {\n\t\t\tmodel: options.registeredModel.id,\n\t\t\tprovider: options.registeredModel.provider,\n\t\t\trole: options.role,\n\t\t\tthinking_level: options.thinkingLevel,\n\t\t\tapproval_mode: options.approvalMode,\n\t\t\tclient: options.input.client ?? \"generic\",\n\t\t\tprotocol_version: options.input.protocolVersion,\n\t\t\tworkspace_root: options.workspaceRoot,\n\t\t\trunner_session_id: hostedRunner?.runnerSessionId,\n\t\t\towner_instance_id: hostedRunner?.ownerInstanceId,\n\t\t},\n\t});\n\tif (result?.run.id && hostedRunner && !hostedRunner.agentRunId) {\n\t\thostedRunner.agentRunId = result.run.id;\n\t}\n}\n\nasync function ensureConnection(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tinput: HeadlessConnectionCreateInput,\n): Promise<HeadlessRuntimeConnectionSnapshot> {\n\tconst runtime = await ensureRuntime(req, context, {\n\t\t...input,\n\t\tregisterConnection: false,\n\t\trecordAgentRuntimeTrigger: false,\n\t});\n\tconst role = getHeadlessRole(req, input.role);\n\tconst heartbeat = runtime.registerConnection({\n\t\tconnectionId: input.connectionId,\n\t\tclientProtocolVersion: input.protocolVersion,\n\t\tclientInfo: input.clientInfo,\n\t\tcapabilities: input.capabilities\n\t\t\t? {\n\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\toptOutNotifications: input.optOutNotifications,\n\t\trole,\n\t\ttakeControl: input.takeControl,\n\t});\n\tconst snapshot = runtime.getSnapshot();\n\treturn {\n\t\t...heartbeat,\n\t\tsession_id: snapshot.session_id,\n\t\trole,\n\t\topt_out_notifications: input.optOutNotifications,\n\t\tsnapshot,\n\t};\n}\n\nfunction getRuntime(\n\treq: IncomingMessage,\n\tcontext: WebServerContext,\n\tsessionId: string | undefined,\n) {\n\tif (!sessionId) {\n\t\tthrow new ApiError(400, \"Missing headless session id\");\n\t}\n\tensureHostedRunnerCanUseSession(context, sessionId);\n\tconst runtime = context.headlessRuntimeService.getRuntime(\n\t\tgetScopeKey(req),\n\t\tsessionId,\n\t);\n\tif (!runtime) {\n\t\tthrow new ApiError(404, \"Headless session not found\");\n\t}\n\tif (context.hostedRunner) {\n\t\tclaimHostedRunnerSession(context, runtime.getSnapshot().session_id);\n\t}\n\treturn runtime;\n}\n\nexport async function handleHeadlessSessionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessSessionCreateInput>(\n\t\treq,\n\t\tHeadlessSessionCreateSchema,\n\t);\n\tconst runtime = await ensureRuntime(req, context, input);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessConnectionCreate(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\tconst input = await parseAndValidateJson<HeadlessConnectionCreateInput>(\n\t\treq,\n\t\tHeadlessConnectionCreateSchema,\n\t);\n\tlet connection: HeadlessRuntimeConnectionSnapshot;\n\ttry {\n\t\tconnection = await ensureConnection(req, context, input);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, connection, context.corsHeaders, req);\n}\n\nexport function handleHeadlessSessionState(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tsendJson(res, 200, runtime.getSnapshot(), context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionSubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionSubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionSubscribeSchema,\n\t);\n\tconst role = getHeadlessRole(req, input.role);\n\tconst disallowedViewerRequest = getViewerDisallowedServerRequest(\n\t\tinput.capabilities?.serverRequests,\n\t);\n\tif (role === \"viewer\" && disallowedViewerRequest) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`viewer headless connections cannot negotiate ${disallowedViewerRequest} requests`,\n\t\t);\n\t}\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\truntime.createSubscription({\n\t\t\t\tconnectionId: input.connectionId,\n\t\t\t\trole,\n\t\t\t\texplicit: true,\n\t\t\t\ttakeControl: input.takeControl,\n\t\t\t\tclientProtocolVersion: input.protocolVersion,\n\t\t\t\tclientInfo: input.clientInfo,\n\t\t\t\tcapabilities: input.capabilities\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tserver_requests: input.capabilities.serverRequests,\n\t\t\t\t\t\t\tutility_operations: input.capabilities.utilityOperations,\n\t\t\t\t\t\t\traw_agent_events: input.capabilities.rawAgentEvents,\n\t\t\t\t\t\t}\n\t\t\t\t\t: undefined,\n\t\t\t\toptOutNotifications: input.optOutNotifications,\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\terror.message === \"Controller lease is already held by another connection\"\n\t\t) {\n\t\t\tthrow new ApiError(409, error.message);\n\t\t}\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\t(error.message === \"Headless connection not found\" ||\n\t\t\t\terror.message ===\n\t\t\t\t\t\"Headless connection role does not match subscription role\")\n\t\t) {\n\t\t\tthrow new ApiError(400, error.message);\n\t\t}\n\t\tthrow error;\n\t}\n}\n\nexport async function handleHeadlessSessionUnsubscribe(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionUnsubscribeInput>(\n\t\treq,\n\t\tHeadlessSessionUnsubscribeSchema,\n\t);\n\tif (!(await runtime.unsubscribe(input.subscriptionId))) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionHeartbeat(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionHeartbeatInput>(\n\t\treq,\n\t\tHeadlessSessionHeartbeatSchema,\n\t);\n\tlet heartbeat: HeadlessRuntimeHeartbeatSnapshot;\n\ttry {\n\t\theartbeat = runtime.heartbeatConnection({\n\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n\tsendJson(res, 200, heartbeat, context.corsHeaders, req);\n}\n\nexport async function handleHeadlessSessionDisconnect(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseAndValidateJson<HeadlessSessionDisconnectInput>(\n\t\treq,\n\t\tHeadlessSessionDisconnectSchema,\n\t);\n\ttry {\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\tawait runtime.disconnectConnection({\n\t\t\t\tconnectionId: input.connectionId ?? getHeadlessConnectionId(req),\n\t\t\t\tsubscriptionId: input.subscriptionId ?? getHeadlessSubscriberId(req),\n\t\t\t}),\n\t\t\tcontext.corsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessConnectionLifecycleError(error);\n\t}\n}\n\nexport function handleHeadlessSessionEvents(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst url = new URL(\n\t\treq.url || `/api/headless/sessions/${params?.id}/events`,\n\t\t`http://${req.headers.host || \"localhost\"}`,\n\t);\n\tconst cursorParam = url.searchParams.get(\"cursor\");\n\tconst cursor = cursorParam ? Number.parseInt(cursorParam, 10) : null;\n\tconst subscriptionId =\n\t\turl.searchParams.get(\"subscriptionId\") || getHeadlessSubscriberId(req);\n\n\tconst stream = subscriptionId\n\t\t? runtime.attachSubscription(subscriptionId)\n\t\t: runtime.createImplicitStream({\n\t\t\t\tcursor,\n\t\t\t\trole: getHeadlessRole(req),\n\t\t\t\toptOutNotifications: parseOptOutNotifications(req),\n\t\t\t});\n\tif (!stream) {\n\t\tthrow new ApiError(404, \"Headless subscriber not found\");\n\t}\n\n\tres.writeHead(200, {\n\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\"Cache-Control\": \"no-cache\",\n\t\tConnection: \"keep-alive\",\n\t\t...context.corsHeaders,\n\t});\n\tlet flushing = false;\n\n\tconst flush = () => {\n\t\tif (flushing || res.writableEnded) {\n\t\t\treturn;\n\t\t}\n\t\tflushing = true;\n\t\twhile (!res.writableEnded) {\n\t\t\tconst next = stream.next();\n\t\t\tif (!next) {\n\t\t\t\tflushing = false;\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst wrote = writeSse(res, next);\n\t\t\tif (!wrote) {\n\t\t\t\tres.once(\"drain\", () => {\n\t\t\t\t\tflushing = false;\n\t\t\t\t\tflush();\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t\tflushing = false;\n\t};\n\tconst stopListening = stream.onAvailable(flush);\n\tconst heartbeat = setInterval(() => {\n\t\tif (!res.writableEnded) {\n\t\t\tstream.enqueue(runtime.heartbeat());\n\t\t\tflush();\n\t\t}\n\t}, 15000);\n\theartbeat.unref();\n\n\tconst cleanup = () => {\n\t\tclearInterval(heartbeat);\n\t\tstopListening();\n\t\tstream.close();\n\t};\n\treq.on(\"close\", cleanup);\n\tres.on(\"close\", cleanup);\n\tflush();\n}\n\nexport async function handleHeadlessSessionMessage(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams?: Record<string, string>,\n) {\n\tconst runtime = getRuntime(req, context, params?.id);\n\tconst input = await parseHeadlessMessage(req);\n\ttry {\n\t\truntime.assertCanSend(\n\t\t\tgetHeadlessRole(req),\n\t\t\tgetHeadlessSubscriberId(req),\n\t\t\tgetHeadlessConnectionId(req),\n\t\t);\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\ttry {\n\t\tawait runtime.send(input as HeadlessToAgentMessage, {\n\t\t\tconnectionId: getHeadlessConnectionId(req),\n\t\t\tsubscriptionId: getHeadlessSubscriberId(req),\n\t\t});\n\t} catch (error) {\n\t\trethrowHeadlessMessageError(error);\n\t}\n\tsendJson(res, 200, { success: true }, context.corsHeaders, req);\n}\n"]}

package/dist/server/handlers/health.d.ts

@@ -1,14 +1,43 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
+import type { HostedRunnerContext } from "../app-context.js";
 export interface HealthCheckResult {
     status: "healthy" | "degraded" | "unhealthy";
     checks: {
         database: {
             status: "up" | "down" | "unconfigured";
             latencyMs?: number;
+            criticalTables?: {
+                status: "ok" | "missing" | "error";
+                checked: string[];
+                missing: string[];
+                error?: string;
+            };
+        };
+        hostedRunner?: {
+            status: "ready" | "draining" | "unavailable";
+            runnerSessionId: string;
+            ownerInstanceId?: string;
+            workspaceRoot: string;
+            snapshotRoot?: string;
+            workspaceId?: string;
+            agentRunId?: string;
+            maestroSessionId?: string;
+            lastDrain?: {
+                status: string;
+                manifestPath: string;
+                drainedAt: string;
+                reason?: string;
+                requestedBy?: string;
+            };
+            error?: string;
         };
     };
     timestamp: number;
 }
-export declare function handleReadyz(req: IncomingMessage, res: ServerResponse, cors: Record<string, string>): Promise<void>;
-export declare function runHealthChecks(): Promise<HealthCheckResult>;
+export type HostedRunnerHealthCheck = NonNullable<HealthCheckResult["checks"]["hostedRunner"]>;
+export declare function handleReadyz(req: IncomingMessage, res: ServerResponse, cors: Record<string, string>, hostedRunner?: HostedRunnerContext): Promise<void>;
+export declare function checkHostedRunnerReadiness(hostedRunner: HostedRunnerContext): Promise<HostedRunnerHealthCheck>;
+export declare function runHealthChecks(options?: {
+    hostedRunner?: HostedRunnerContext;
+}): Promise<HealthCheckResult>;
 //# sourceMappingURL=health.d.ts.map

package/dist/server/handlers/health.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAQjE,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IAC7C,MAAM,EAAE;QACP,QAAQ,EAAE;YACT,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,cAAc,CAAC;YACvC,SAAS,CAAC,EAAE,MAAM,CAAC;SACnB,CAAC;KACF,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,YAAY,CACjC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAgClE"}
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/health.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAMjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAG7D,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IAC7C,MAAM,EAAE;QACP,QAAQ,EAAE;YACT,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,cAAc,CAAC;YACvC,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,cAAc,CAAC,EAAE;gBAChB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,CAAC;gBAClB,OAAO,EAAE,MAAM,EAAE,CAAC;gBAClB,KAAK,CAAC,EAAE,MAAM,CAAC;aACf,CAAC;SACF,CAAC;QACF,YAAY,CAAC,EAAE;YACd,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,aAAa,CAAC;YAC7C,eAAe,EAAE,MAAM,CAAC;YACxB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,aAAa,EAAE,MAAM,CAAC;YACtB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;YAC1B,SAAS,CAAC,EAAE;gBACX,MAAM,EAAE,MAAM,CAAC;gBACf,YAAY,EAAE,MAAM,CAAC;gBACrB,SAAS,EAAE,MAAM,CAAC;gBAClB,MAAM,CAAC,EAAE,MAAM,CAAC;gBAChB,WAAW,CAAC,EAAE,MAAM,CAAC;aACrB,CAAC;YACF,KAAK,CAAC,EAAE,MAAM,CAAC;SACf,CAAC;KACF,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,CAChD,iBAAiB,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,CAC3C,CAAC;AAEF,wBAAsB,YAAY,CACjC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,YAAY,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,0BAA0B,CAC/C,YAAY,EAAE,mBAAmB,GAC/B,OAAO,CAAC,uBAAuB,CAAC,CA2ClC;AAED,wBAAsB,eAAe,CACpC,OAAO,GAAE;IACR,YAAY,CAAC,EAAE,mBAAmB,CAAC;CAC9B,GACJ,OAAO,CAAC,iBAAiB,CAAC,CAgE5B"}