@geminixiang/mikan 1.0.0-beta.62 → 1.0.0-beta.64

package/dist/harness/runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/harness/runner.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EACL,oCAAoC,EACpC,cAAc,EAId,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAQrE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,SAAS,EACT,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AAEjC,4EAA4E;AAC5E,uEAAuE;AACvE,qEAAqE;AACrE,MAAM,mBAAmB,GAAG,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;AAEhF,KAAK,UAAU,4BAA4B,CAAC,MAS3C;IACC,MAAM,EACJ,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,aAAa,EACb,KAAK,EACL,WAAW,EACX,YAAY,EACZ,MAAM,GACP,GAAG,MAAM,CAAC;IACX,MAAM,cAAc,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC1D,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;QACpD,GAAG,CAAC,UAAU,CAAC,6BAA6B,UAAU,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAClD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAC5D,CACF,CAAC;IACF,IAAI,OAAsC,CAAC;IAC3C,MAAM,YAAY,GAAG,kBAAkB,CACrC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACjB,WAAW,CAAC;QACV,OAAO;QACP,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,YAAY,EAAE,KAAK;QACnB,aAAa;QACb,MAAM;QACN,YAAY;QACZ,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,mBAAmB;QAC1B,WAAW;QACX,cAAc,EAAE,CAAC,GAAG,OAAQ,CAAC,QAAQ,CAAC;QACtC,OAAO,EAAE,OAAQ,CAAC,wBAAwB,EAAE;KAC7C,CAAC,EACJ,gBAAgB,CACjB,CAAC;IAEF,OAAO,GAAG,IAAI,iBAAiB,CAAC;QAC9B,YAAY;QACZ,KAAK;QACL,aAAa;QACb,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC;QAC/C,WAAW;QACX,MAAM;QACN,YAAY;KACb,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;IACnD,IAAI,QAAQ,GAAG,CAAC;QAAE,GAAG,CAAC,OAAO,CAAC,YAAY,QAAQ,gCAAgC,CAAC,CAAC;IACpF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,4BAA4B,CACnC,aAA4B,EAC5B,YAAsC,EACtC,WAA+C,EAC/C,SAAoB;IAEpB,MAAM,iBAAiB,GACrB,YAAY,IAAI,aAAa,CAAC,IAAI,KAAK,MAAM;QAC3C,CAAC,CAAC,IAAI,sBAAsB,CAAC,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,CAAC;QACjF,CAAC,CAAC,SAAS,CAAC;IAEhB,oFAAoF;IACpF,8FAA8F;IAC9F,IAAI,cAAc,GAChB,iBAAiB,KAAK,SAAS;QAC7B,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAa;QACzB,IAAI,CAAC,OAAO,EAAE,OAAO;YACnB,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,OAAO;YACpB,OAAO,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,cAAc,CAAC,IAAI,EAAE,OAAO;YAC1B,OAAO,cAAc,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO;YAC9B,OAAO,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;QACD,gBAAgB,CAAC,QAAQ;YACvB,OAAO,cAAc,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACnD,CAAC;QACD,gBAAgB;YACd,OAAO,cAAc,CAAC,gBAAgB,EAAE,CAAC;QAC3C,CAAC;QACD,cAAc,CAAC,iBAAiB;YAC9B,OAAO,cAAc,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAC1D,CAAC;KACF,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,KAAK,CAAC,aAAa,CAAC,OAAO;YACzB,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC1D,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC;gBACnC,OAAO;oBACL,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;iBAChC,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;YACtD,oCAAoC,CAClC,aAAa,EACb,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,aAAa,CAAC,oBAAoB,KAAK,IAAI,CACvD,CAAC;YACF,OAAO;gBACL,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC;gBACpD,UAAU;aACX,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAiC;IAC/D,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,SAAS,GAAG,OAAO,EAAE,QAAQ,IAAI,OAAO,EAAE,IAAI,IAAI,SAAS,CAAC;IAClE,OAAO,IAAI,SAAS,MAAM,IAAI,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CAAC,OAMtC;IACC,IAAI,OAAO,CAAC,UAAU,KAAK,cAAc;QAAE,OAAO;IAClD,IAAI,CAAC;QACH,MAAM,0BAA0B,CAC9B,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,MAAM,CACf,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,GAAG,CAAC,UAAU,CACZ,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,6CAA6C,EACtF,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IACJ,CAAC;AACH,CAAC;AA+BD,KAAK,UAAU,oBAAoB,CAAC,MAAwB;IAC1D,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC/E,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;QACnC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC,CAAC;IACH,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;IACnD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc,cAAc,QAAQ,wBAAwB,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,qBAAqB,GAAG,eAAe,CAC3C,MAAM,EACN,WAAW,CAAC,oBAAoB,EAChC,UAAU,CACX,CAAC;IACF,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,iBAAiB,CAAC;QACrC,aAAa,EAAE,WAAW,CAAC,oBAAoB;QAC/C,MAAM;QACN,MAAM;QACN,aAAa,EAAE,QAAQ,CAAC,gBAAgB,EAAE;QAC1C,QAAQ;QACR,MAAM,EAAE,qBAAqB,CAAC,MAAM;QACpC,UAAU;QACV,iBAAiB,EAAE,qBAAqB,CAAC,iBAAiB;KAC3D,CAAC,CAAC;IACH,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IACtC,2EAA2E;IAC3E,6CAA6C;IAC7C,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,GAAG,CAAC,OAAO,CACT,IAAI,cAAc,2BAA2B,YAAY,CAAC,MAAM,eAAe,UAAU,EAAE,CAC5F,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAwB,EAAE,WAA+B;IACpF,MAAM,EACJ,OAAO,EACP,SAAS,EACT,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,SAAS,EACT,qBAAqB,GACtB,GAAG,MAAM,CAAC;IACX,eAAe,CAAC;QACd,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;QAC7C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,iBAAiB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,iBAAiB,CAAC,KAAK,EAAE,QAAgB,EAAE,KAAc,EAAE,EAAE;QAC3D,MAAM,WAAW,GAAG,0BAA0B,CAAC,QAAQ,EAAE,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAC3F,MAAM,qBAAqB,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,EAAE,EAAE,CAChE,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CACxC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,oFAAoF;IACpF,sBAAsB,CAAC,KAAK,EAAE,QAAgB,EAAE,KAAc,EAAE,EAAE;QAChE,MAAM,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,iEAAiE;IACjE,SAAS,CAAC,SAAS,CAAC,CAAC;IACrB,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE,CAAC,SAAS,CAAC,KAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5F,qBAAqB,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;QAC7C,YAAY,EAAE,QAAQ,CAAC,IAAI;QAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,MAAwB;IACvD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACvD,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAC7D,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACrC,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEzC,GAAG,CAAC,OAAO,CACT,2BAA2B,YAAY,CAAC,MAAM,mBAAmB,MAAM,CAAC,MAAM,QAAQ,CACvF,CAAC;IACF,GAAG,CAAC,OAAO,CAAC,aAAa,QAAQ,CAAC,QAAQ,CAAC,MAAM,YAAY,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtF,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,MAAM,kBAAkB,CAChE,OAAO,EACP,WAAW,CAAC,oBAAoB,EAChC,WAAW,EACX,CAAC,WAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,CAAC,CACtD,CAAC;IACF,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC/B,kBAAkB,EAClB,QAAQ,CAAC,IAAI,CACd,CAAC;IACF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,gBAAgB,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IAClG,OAAO;QACL,mBAAmB;QACnB,WAAW,EAAE,gBAAgB;QAC7B,gBAAgB;QAChB,kBAAkB;KACnB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,MAKvC;IACC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,eAAe,CACnD,MAAM,EACN,WAAW,CAAC,oBAAoB,EAChC,UAAU,CACX,CAAC;IACF,OAAO,iBAAiB,CAAC;QACvB,aAAa,EAAE,WAAW,CAAC,oBAAoB;QAC/C,MAAM;QACN,MAAM;QACN,aAAa;QACb,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM;YACZ,eAAe,EAAE,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,UAAU,EAAE,YAAY;SACzB;QACD,MAAM;QACN,UAAU;QACV,iBAAiB;KAClB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAAa,EAAE,OAA4B;IAC/E,IAAI,CAAC;QACH,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,UAAU,CAAC,6BAA6B,KAAK,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,MAKvC;IACC,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IACpF,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;QACpE,IACE,kBAAkB,CAAC,UAAU,CAAC;YAC9B,iBAAiB;YACjB,CAAC,MAAM,cAAc,CAAC,cAAc,EAAE,CAAC,KAAK,iBAAiB,EAC7D,CAAC;YACD,MAAM,cAAc,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,sBAAsB,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,MAWvC;IACC,MAAM,EACJ,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,WAAW,EACX,KAAK,EACL,WAAW,EACX,cAAc,EACd,aAAa,EACb,MAAM,GACP,GAAG,MAAM,CAAC;IACX,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC,UAAU,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IACvF,OAAO,4BAA4B,CAAC;QAClC,YAAY;QACZ,YAAY;QACZ,KAAK;QACL,aAAa,EAAE,WAAW,CAAC,aAAa;QACxC,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAClD,WAAW;QACX,YAAY,EAAE,cAAc;QAC5B,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;AACL,CAAC;AAkBD,KAAK,UAAU,eAAe,CAAC,MAA0B;IAIvD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,OAAO,EACP,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,KAAK,EACL,WAAW,EACX,WAAW,EACX,cAAc,EACd,WAAW,EACX,WAAW,GACZ,GAAG,MAAM,CAAC;IACX,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IAED,2BAA2B,CAAC;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,EAAE;QACf,UAAU,EAAE,QAAQ,CAAC,mBAAmB;QACxC,UAAU,EAAE,WAAW;QACvB,2BAA2B,EAAE,CAAC;QAC9B,wBAAwB,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM;QACrD,8BAA8B,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;QAChE,yBAAyB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;QAC3D,sBAAsB,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;KACxD,CAAC,CAAC;IACH,iBAAiB,CAAC,mBAAmB,EAAE;QACrC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,UAAU,EAAE,QAAQ,CAAC,mBAAmB;QACxC,UAAU,EAAE,WAAW;QACvB,gBAAgB,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;QAClD,sBAAsB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;KACzD,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE;QACzC,gBAAgB,EAAE,SAAS,CAAC,SAAS,KAAK,SAAS;QACnD,eAAe,EAAE,SAAS,CAAC,aAAa,KAAK,SAAS;QACtD,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;IACH,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;IAE1B,MAAM,qBAAqB,GAAG,WAAW,EAAE,UAAU,CAAC;IACtD,MAAM,wBAAwB,GAAG,WAAW,EAAE,aAAa,CAAC;IAC5D,IAAI,eAAmC,CAAC;IACxC,MAAM,qBAAqB,GACzB,qBAAqB,IAAI,wBAAwB;QAC/C,CAAC,CAAC,GAAG,EAAE;YACH,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC;oBACzC,QAAQ,EAAE,QAAQ,CAAC,IAAoB;oBACvC,cAAc,EAAE,OAAO,CAAC,MAAM;oBAC9B,cAAc;oBACd,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,WAAW,EAAE,WAAW;oBACxB,gBAAgB,EAAE,OAAO,CAAC,QAAQ;iBACnC,CAAC,CAAC;gBACH,eAAe,GAAG,GAAG,wBAAwB,kBAAkB,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/E,CAAC;YACD,OAAO,eAAe,CAAC;QACzB,CAAC;QACH,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,mBAAmB,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE;QACtD,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAC3C,kBAAkB,EAAE,yBAAyB,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACxE,CAAC,CAAC,qBAAqB,EAAE,EAAE;YAC3B,CAAC,CAAC,SAAS;QACb,kBAAkB,EAAE,qBAAqB;QACzC,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,KAAK;QACL,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,kBAAkB,CAAC;QACvB,OAAO;QACP,QAAQ;QACR,SAAS;QACT,QAAQ;QACR,KAAK;QACL,WAAW;QACX,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,WAAW;QACX,YAAY,EAAE,YAAY,CAAC,IAAI;KAChC,CAAC,CAAC;IACH,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;AAClF,CAAC;AAuBD,KAAK,UAAU,QAAQ,CACrB,OAA0B,EAC1B,aAA8C,EAC9C,OAA4B;IAE5B,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACjC,iFAAiF;IACjF,2EAA2E;IAC3E,MAAM,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC,OAAO,CAAC,WAAW;QACtB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;QACzC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,WAAW,EAAE,MAAM;QAC7B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA6B;IAC1D,MAAM,EACJ,cAAc,EACd,eAAe,EACf,UAAU,EACV,MAAM,EACN,WAAW,EACX,WAAW,EACX,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,OAAO,EACP,KAAK,EACL,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,YAAY,GACb,GAAG,MAAM,CAAC;IACX,IAAI,aAA8C,CAAC;IACnD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC;QAC7D,KAAK,CAAC,eAAe,CAAC,gBAAyB;YAC7C,MAAM,kBAAkB,CAAC,kBAAkB,CAAC;gBAC1C,eAAe;gBACf,UAAU;gBACV,cAAc;gBACd,gBAAgB;aACjB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ;YACpC,aAAa,GAAG,OAAO,CAAC;YACxB,OAAO,GAAG,KAAK,CAAC;YAChB,IAAI,YAAyC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC;oBACvC,OAAO;oBACP,SAAS;oBACT,QAAQ;oBACR,MAAM;oBACN,QAAQ;oBACR,aAAa;oBACb,OAAO;oBACP,eAAe,EAAE,YAAY,CAAC,eAAe;oBAC7C,iBAAiB,EAAE,YAAY,CAAC,iBAAiB;oBACjD,iBAAiB,EAAE,YAAY,CAAC,iBAAiB;oBACjD,sBAAsB,EAAE,YAAY,CAAC,sBAAsB;oBAC3D,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;oBAC/C,SAAS,EAAE,YAAY,CAAC,SAAS;oBACjC,qBAAqB,EAAE,YAAY,CAAC,qBAAqB;iBAC1D,CAAC,CAAC;gBACH,IAAI,OAAO;oBAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;gBAC9C,YAAY,GAAG,uBAAuB,CAAC,QAAQ,EAAE;oBAC/C,SAAS;oBACT,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;oBACjD,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,WAAW;oBACX,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;iBAChD,CAAC,CAAC;gBACH,OAAO,MAAM,eAAe,CAAC;oBAC3B,QAAQ;oBACR,YAAY;oBACZ,OAAO;oBACP,SAAS;oBACT,QAAQ;oBACR,QAAQ;oBACR,OAAO;oBACP,KAAK;oBACL,WAAW;oBACX,WAAW;oBACX,cAAc;oBACd,WAAW;oBACX,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,aAAa,GAAG,SAAS,CAAC;gBAC1B,YAAY,EAAE,OAAO,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,KAAK;YACH,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,OAAO;YACX,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;QAED,cAAc;YACZ,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC1D,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAG,KAAK,CAAC,IAA2B,EAAE,KAAK;aACjD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,MAcnC;IACC,MAAM,EACJ,OAAO,EACP,cAAc,EACd,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,KAAK,EACL,aAAa,EACb,WAAW,EACX,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,WAAW,GACZ,GAAG,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAClE,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,kBAAkB,GAAG,IAAI,eAAe,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC;YAC7C,YAAY;YACZ,YAAY;YACZ,KAAK;YACL,WAAW;YACX,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,WAAW;YACX,cAAc;YACd,aAAa;YACb,cAAc;YACd,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAEjC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,0BAA0B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAEtE,OAAO,qBAAqB,CAAC;YAC3B,cAAc;YACd,eAAe;YACf,UAAU;YACV,MAAM;YACN,WAAW;YACX,WAAW;YACX,WAAW;YACX,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,OAAO;YACP,KAAK;YACL,WAAW;YACX,cAAc;YACd,kBAAkB;YAClB,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,sBAAsB,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B;IAC7D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,EACJ,aAAa,EACb,UAAU,EACV,MAAM,EACN,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,yBAAyB,GAC1B,GAAG,OAAO,CAAC;IACZ,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;IACrD,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC;IACnC,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;IAC3C,MAAM,uBAAuB,CAAC;QAC5B,MAAM;QACN,UAAU;QACV,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAChE,4EAA4E;IAC5E,MAAM,WAAW,GAAG;QAClB,GAAG,mBAAmB;QACtB,UAAU,EAAE,UAAU,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,IAAI,EAAE,CAAC;KACxF,CAAC;IAEF,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACtD,0EAA0E;IAC1E,0EAA0E;IAC1E,oCAAoC,CAClC,aAAa,EACb,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,aAAa,CAAC,oBAAoB,KAAK,IAAI,CACvD,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,4BAA4B,CAC9D,aAAa,EACb,YAAY,EACZ,WAAW,EACX,MAAM,CAAC,SAAS,CACjB,CAAC;IACF,MAAM,WAAW,GAAG,+BAA+B,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACjF,oEAAoE;IACpE,iEAAiE;IACjE,MAAM,WAAW,GAAyB;QACxC,GAAG,EAAE,yBAAyB,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,oBAAoB,CAAC;KAC/F,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;IAC7D,IAAI,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,wBAAwB,EAAE,aAAa,CAAC,QAAQ,EAAG,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IAE7E,oEAAoE;IACpE,MAAM,YAAY,GAAG,gBAAgB,CACnC,QAAQ,EACR,IAAI,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,EACpD,EAAE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,IAAI,WAAW,EAAE,EACjF,yBAAyB,IAAI,EAAE,EAC/B;QACE,KAAK;QACL,SAAS,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACnE,sEAAsE;QACtE,sEAAsE;QACtE,sCAAsC;QACtC,SAAS,EAAE,eAAe;KAC3B,CACF,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC;QAClD,MAAM;QACN,WAAW;QACX,UAAU;QACV,aAAa;KACd,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,YAAY,CAAC;IACxD,MAAM,cAAc,GAAG,MAAM,wBAAwB,CAAC;QACpD,WAAW;QACX,oBAAoB,EAAE,WAAW,CAAC,oBAAoB;QACtD,UAAU;QACV,iBAAiB;KAClB,CAAC,CAAC;IACH,OAAO,oBAAoB,CAAC;QAC1B,OAAO;QACP,cAAc;QACd,eAAe;QACf,YAAY;QACZ,QAAQ;QACR,aAAa;QACb,KAAK;QACL,aAAa;QACb,WAAW;QACX,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,WAAW;KACZ,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { Office, Workspace } from \"../office/index.js\";\nimport type { ExecutionToolContext, ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model } from \"@earendil-works/pi-ai\";\nimport { MikanModels } from \"./models.js\";\nimport type { SessionStore } from \"../sessions/session-store.js\";\nimport { MikanAgentSession, DEFAULT_EVENT_BUDGET } from \"./session.js\";\nimport { runSubagent, DEFAULT_GLOBAL_SUBAGENT_SLOTS, SubagentSlotPool } from \"./subagent.js\";\nimport { loadSubagentProfiles } from \"./subagent-profiles.js\";\nimport { createMikanTools, createSubagentTool } from \"./tools/index.js\";\nimport { adaptAgentTool } from \"./tools/pi-tools.js\";\nimport { createSandboxExecutionEnv } from \"./execution-env.js\";\nimport { mkdir } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type {\n  ConversationMessage,\n  ConversationKind,\n  ConversationResponder,\n  MessagingInfo,\n  PlatformName,\n} from \"../adapter.js\";\nimport { ActorExecutionResolver } from \"./execution-resolver.js\";\nimport type { DockerContainerManager } from \"../sandbox/provisioner.js\";\nimport {\n  assertSandboxSupportsWorkspacePolicy,\n  createExecutor,\n  type Executor,\n  type RuntimePathContext,\n  type SandboxConfig,\n  getUnresolvedSandboxPathContext,\n} from \"../sandbox/index.js\";\nimport type { VaultManager } from \"../vault/index.js\";\nimport { resolveWorkspaceProjection } from \"../office/projection.js\";\nimport type {\n  RunnerExecutionContext,\n  PreparedRunContext,\n  RunPresentation,\n  RunnerSessionState,\n} from \"./types.js\";\nimport type { CreateRunnerOptions, OfficeAddress, PiAgentWrapper } from \"../types.js\";\nimport { createHash } from \"node:crypto\";\nimport { resolveConversationSettings } from \"../config.js\";\nimport { ensureDefaultOpenConnector } from \"./open-connector.js\";\nimport { OfficeEventStore } from \"../events/index.js\";\nimport { addLifecycleEvent, updateActiveSpanAttribution } from \"../observability/index.js\";\nimport { ChatHistorySync } from \"../sessions/chat-history-sync.js\";\nimport { conversationIdOf, isThreadSessionKey } from \"../sessions/session-key.js\";\nimport {\n  extractSessionUuid,\n  openManagedSession,\n  type ThreadRootMessage,\n} from \"../sessions/store.js\";\nimport type { PlatformToolRunContext } from \"./tools/types.js\";\nimport { loadMikanSkills } from \"./skills.js\";\nimport {\n  normalizeAttachRuntimePath,\n  withStagedRuntimeFile,\n  buildPromptPayload,\n  buildSystemPrompt,\n  buildTurnInstructions,\n  getMemory,\n  resolveTriggerAttribution,\n} from \"./prompt.js\";\nimport {\n  attachSessionEventHandlers,\n  activateRunPresentation,\n  createRunState,\n  finalizeRunResponse,\n  isEventTriggerAttribution,\n  reportUsageSummary,\n} from \"./presenter.js\";\n\nimport * as log from \"../log.js\";\n\n// One process-wide fan-out account: per-conversation queues serialize runs,\n// but each run can fan out up to the per-run cap — without this shared\n// ceiling, N busy conversations hold N × cap live subagent sessions.\nconst globalSubagentSlots = new SubagentSlotPool(DEFAULT_GLOBAL_SUBAGENT_SLOTS);\n\nasync function createConfiguredAgentSession(params: {\n  workspaceDir: string;\n  systemPrompt: string;\n  model: Model<Api>;\n  thinkingLevel: ThinkingLevel;\n  tools: Awaited<ReturnType<typeof createMikanTools>>[\"tools\"];\n  toolContext: ExecutionToolContext;\n  sessionStore: SessionStore;\n  models: MikanModels;\n}): Promise<MikanAgentSession> {\n  const {\n    workspaceDir,\n    systemPrompt,\n    model,\n    thinkingLevel,\n    tools,\n    toolContext,\n    sessionStore,\n    models,\n  } = params;\n  const loadedProfiles = loadSubagentProfiles(workspaceDir);\n  for (const diagnostic of loadedProfiles.diagnostics) {\n    log.logWarning(`Subagent profile ignored: ${diagnostic.path}`, diagnostic.message);\n  }\n\n  const availableToolNames = new Set(tools.map((tool) => tool.name));\n  const runnableProfiles = new Map(\n    [...loadedProfiles.profiles].filter(([, profile]) =>\n      profile.tools.every((tool) => availableToolNames.has(tool)),\n    ),\n  );\n  let session: MikanAgentSession | undefined;\n  const subagentTool = createSubagentTool(\n    (request, hooks) =>\n      runSubagent({\n        request,\n        ...(hooks?.onActivity ? { onActivity: hooks.onActivity } : {}),\n        defaultModel: model,\n        thinkingLevel,\n        models,\n        workspaceDir,\n        availableTools: tools.filter((tool) => ![\"start_task\", \"task_status\"].includes(tool.name)),\n        profiles: runnableProfiles,\n        slots: globalSubagentSlots,\n        toolContext,\n        parentMessages: [...session!.messages],\n        onUsage: session!.captureExternalUsageSink(),\n      }),\n    runnableProfiles,\n  );\n\n  session = new MikanAgentSession({\n    systemPrompt,\n    model,\n    thinkingLevel,\n    tools: [...tools, adaptAgentTool(subagentTool)],\n    toolContext,\n    models,\n    sessionStore,\n  });\n  const reloaded = await session.reloadFromSession();\n  if (reloaded > 0) log.logInfo(`Reloaded ${reloaded} messages from session context`);\n  return session;\n}\n\nfunction createRunnerExecutionContext(\n  sandboxConfig: SandboxConfig,\n  vaultManager: VaultManager | undefined,\n  provisioner: DockerContainerManager | undefined,\n  workspace: Workspace,\n): RunnerExecutionContext {\n  const executionResolver =\n    vaultManager && sandboxConfig.type !== \"host\"\n      ? new ActorExecutionResolver(sandboxConfig, vaultManager, provisioner, workspace)\n      : undefined;\n\n  // activeExecutor is replaced at the start of each run() call when executionResolver\n  // is present, so the stable `executor` wrapper always delegates to the latest resolved value.\n  let activeExecutor: Executor =\n    executionResolver !== undefined\n      ? createExecutor({ type: \"host\" })\n      : createExecutor(sandboxConfig);\n  const executor: Executor = {\n    exec(command, options) {\n      return activeExecutor.exec(command, options);\n    },\n    readFile(path, options) {\n      return activeExecutor.readFile(path, options);\n    },\n    readFileBase64(path, options) {\n      return activeExecutor.readFileBase64(path, options);\n    },\n    writeFile(path, content, options) {\n      return activeExecutor.writeFile(path, content, options);\n    },\n    getWorkspacePath(hostPath) {\n      return activeExecutor.getWorkspacePath(hostPath);\n    },\n    getSandboxConfig() {\n      return activeExecutor.getSandboxConfig();\n    },\n    getPathContext(hostWorkspaceRoot) {\n      return activeExecutor.getPathContext(hostWorkspaceRoot);\n    },\n  };\n\n  return {\n    executor,\n    async resolveForRun(context) {\n      if (executionResolver) {\n        const decision = await executionResolver.resolve(context);\n        activeExecutor = decision.executor;\n        return {\n          pathContext: decision.pathContext,\n          projection: decision.projection,\n        };\n      }\n\n      const office = workspace.office(context.address);\n      const projection = resolveWorkspaceProjection(office);\n      assertSandboxSupportsWorkspacePolicy(\n        sandboxConfig,\n        projection.doorPolicy,\n        projection.promptSources.globalMemoryReadOnly === true,\n      );\n      return {\n        pathContext: executor.getPathContext(workspace.root),\n        projection,\n      };\n    },\n  };\n}\n\nfunction buildThreadSessionName(message: ThreadRootMessage | null): string | undefined {\n  const text = message?.text?.trim();\n  if (!text) return undefined;\n  const userLabel = message?.userName || message?.user || \"unknown\";\n  return `[${userLabel}]: ${text}`;\n}\n\n/**\n * Fill in the deployment's default OpenConnector entry before settings are\n * read, so the runner then sees only ordinary MCP configuration. A failed\n * default is reported and skipped; the office keeps its other servers.\n */\nasync function ensureDefaultMcpServers(options: {\n  office: Office;\n  trustModel: CreateRunnerOptions[\"trustModel\"];\n  platformWorkspaceId?: string;\n  openConnector?: CreateRunnerOptions[\"openConnector\"];\n  signal?: AbortSignal;\n}): Promise<void> {\n  if (options.trustModel === \"open-trigger\") return;\n  try {\n    await ensureDefaultOpenConnector(\n      options.office,\n      options.platformWorkspaceId,\n      options.openConnector,\n      options.signal,\n    );\n  } catch (error) {\n    options.signal?.throwIfAborted();\n    log.logWarning(\n      `[${options.office.address.conversationId}] OpenConnector default provisioning failed`,\n      error instanceof Error ? error.message : String(error),\n    );\n  }\n}\n\ntype PrepareRunParams = {\n  message: ConversationMessage;\n  responder: ConversationResponder;\n  platform: MessagingInfo;\n  office: Office;\n  executor: Executor;\n  resolveForRun: RunnerExecutionContext[\"resolveForRun\"];\n  session: MikanAgentSession;\n  setEventContext: (context: {\n    platform: string;\n    conversationId: string;\n    conversationKind: ConversationKind;\n    userId: string;\n  }) => void;\n  setSandboxContext: (context: { address: OfficeAddress; userId: string }) => void;\n  setUploadFunction: (fn: (filePath: string, title?: string) => Promise<void>) => void;\n  setImageUploadFunction: (fn: (hostPath: string, title?: string) => Promise<void>) => void;\n  bindTasks: ReturnType<typeof createMikanTools>[\"bindTasks\"];\n  setReactFunction: (fn: ((emoji: string) => Promise<void>) | null) => void;\n  bindPlatformToolPacks: (ctx: PlatformToolRunContext) => void;\n};\n\ntype RunPromptContext = {\n  pathContext: RuntimePathContext;\n  memory: string;\n  systemPrompt: string;\n  triggerAttribution: string | undefined;\n};\n\nasync function preparePromptContext(params: PrepareRunParams): Promise<RunPromptContext> {\n  const { message, platform, office, executor, resolveForRun, session } = params;\n  const conversationId = office.address.conversationId;\n  const decision = await resolveForRun({\n    address: message.address,\n    userId: message.userId,\n    trustModel: platform.trustModel,\n  });\n  const { pathContext, projection } = decision;\n  const reloaded = await session.reloadFromSession();\n  if (reloaded > 0) {\n    log.logInfo(`[${conversationId}] Reloaded ${reloaded} messages from context`);\n  }\n\n  const memory = await getMemory(projection);\n  const conversationSkillLoad = loadMikanSkills(\n    office,\n    pathContext.runtimeWorkspaceRoot,\n    projection,\n  );\n  const triggerAttribution = resolveTriggerAttribution(message);\n  const systemPrompt = buildSystemPrompt({\n    workspacePath: pathContext.runtimeWorkspaceRoot,\n    office,\n    memory,\n    sandboxConfig: executor.getSandboxConfig(),\n    platform,\n    skills: conversationSkillLoad.skills,\n    projection,\n    skippedSkillLinks: conversationSkillLoad.skippedSkillLinks,\n  });\n  session.setSystemPrompt(systemPrompt);\n  // A stable hash across turns verifies that turn-specific data did not leak\n  // into the provider-cacheable system prompt.\n  const promptHash = createHash(\"sha256\").update(systemPrompt).digest(\"hex\").slice(0, 8);\n  log.logInfo(\n    `[${conversationId}] System prompt (base): ${systemPrompt.length} chars, sha ${promptHash}`,\n  );\n  return { pathContext, memory, systemPrompt, triggerAttribution };\n}\n\nfunction bindRunCapabilities(params: PrepareRunParams, pathContext: RuntimePathContext): void {\n  const {\n    message,\n    responder,\n    platform,\n    office,\n    executor,\n    setEventContext,\n    setSandboxContext,\n    setUploadFunction,\n    setImageUploadFunction,\n    setReactFunction,\n    bindTasks,\n    bindPlatformToolPacks,\n  } = params;\n  setEventContext({\n    platform: platform.name,\n    conversationId: office.address.conversationId,\n    conversationKind: message.conversationKind,\n    userId: message.userId,\n  });\n  setSandboxContext({ address: message.address, userId: message.userId });\n  setUploadFunction(async (filePath: string, title?: string) => {\n    const runtimePath = normalizeAttachRuntimePath(filePath, pathContext.runtimeWorkspaceRoot);\n    await withStagedRuntimeFile(executor, runtimePath, (stagedPath) =>\n      responder.uploadFile(stagedPath, title),\n    );\n  });\n  // Generated images already live host-side and must not be staged through a sandbox.\n  setImageUploadFunction(async (hostPath: string, title?: string) => {\n    await responder.uploadFile(hostPath, title);\n  });\n  // Unset reaction support when the active responder cannot react.\n  bindTasks(responder);\n  setReactFunction(responder.react ? async (emoji: string) => responder.react!(emoji) : null);\n  bindPlatformToolPacks({\n    conversationId: office.address.conversationId,\n    platformName: platform.name,\n    threadTs: message.threadTs,\n  });\n}\n\nasync function prepareRunContext(params: PrepareRunParams): Promise<PreparedRunContext> {\n  const { message, platform, office, executor } = params;\n  const sessionConversation = conversationIdOf(message.sessionKey);\n  await mkdir(join(office.dir, \"scratch\"), { recursive: true });\n  const { pathContext, memory, systemPrompt, triggerAttribution } =\n    await preparePromptContext(params);\n  bindRunCapabilities(params, pathContext);\n\n  log.logInfo(\n    `Context sizes - system: ${systemPrompt.length} chars, memory: ${memory.length} chars`,\n  );\n  log.logInfo(`Channels: ${platform.channels.length}, Users: ${platform.users.length}`);\n\n  const { userMessage, imageAttachments } = await buildPromptPayload(\n    message,\n    pathContext.runtimeWorkspaceRoot,\n    pathContext,\n    (runtimePath) => executor.readFileBase64(runtimePath),\n  );\n  const turnInstructions = buildTurnInstructions(\n    message.id.startsWith(\"event:\"),\n    triggerAttribution,\n    platform.name,\n  );\n  const finalUserMessage = turnInstructions ? `${turnInstructions}\\n\\n${userMessage}` : userMessage;\n  return {\n    sessionConversation,\n    userMessage: finalUserMessage,\n    imageAttachments,\n    triggerAttribution,\n  };\n}\n\nasync function buildInitialSystemPrompt(params: {\n  office: Office;\n  pathContext: RuntimePathContext;\n  projection: ReturnType<typeof resolveWorkspaceProjection>;\n  sandboxConfig: CreateRunnerOptions[\"sandboxConfig\"];\n}): Promise<string> {\n  const { office, pathContext, projection, sandboxConfig } = params;\n  const memory = await getMemory(projection);\n  const { skills, skippedSkillLinks } = loadMikanSkills(\n    office,\n    pathContext.runtimeWorkspaceRoot,\n    projection,\n  );\n  return buildSystemPrompt({\n    workspacePath: pathContext.runtimeWorkspaceRoot,\n    office,\n    memory,\n    sandboxConfig,\n    platform: {\n      name: \"chat\",\n      formattingGuide: \"\",\n      channels: [],\n      users: [],\n      trustModel: \"membership\",\n    },\n    skills,\n    projection,\n    skippedSkillLinks,\n  });\n}\n\nasync function rollbackRunnerResource(label: string, cleanup: () => Promise<void>): Promise<void> {\n  try {\n    await cleanup();\n  } catch (error) {\n    log.logWarning(`Runner rollback failed to ${label}`, String(error));\n  }\n}\n\nasync function openRunnerSessionManager(params: {\n  contextFile: string;\n  runtimeWorkspaceRoot: string;\n  sessionKey: string;\n  threadRootMessage: ThreadRootMessage | null;\n}) {\n  const { contextFile, runtimeWorkspaceRoot, sessionKey, threadRootMessage } = params;\n  const sessionManager = await openManagedSession(contextFile, runtimeWorkspaceRoot);\n  try {\n    const threadSessionName = buildThreadSessionName(threadRootMessage);\n    if (\n      isThreadSessionKey(sessionKey) &&\n      threadSessionName &&\n      (await sessionManager.getSessionName()) !== threadSessionName\n    ) {\n      await sessionManager.setSessionName(threadSessionName);\n    }\n    return sessionManager;\n  } catch (error) {\n    await rollbackRunnerResource(\"close the session writer\", () => sessionManager.close());\n    throw error;\n  }\n}\n\nasync function createRunnerAgentSession(params: {\n  workspaceDir: string;\n  systemPrompt: string;\n  model: Model<Api>;\n  agentConfig: ReturnType<typeof resolveConversationSettings>;\n  tools: ReturnType<typeof createMikanTools>[\"tools\"];\n  toolContext: ExecutionToolContext;\n  sessionManager: Awaited<ReturnType<typeof openManagedSession>>;\n  modelRegistry: MikanModels;\n  conversationId: string;\n  signal?: AbortSignal;\n}) {\n  const {\n    workspaceDir,\n    systemPrompt,\n    model,\n    agentConfig,\n    tools,\n    toolContext,\n    sessionManager,\n    modelRegistry,\n    signal,\n  } = params;\n  const mcpTools = await sessionManager.connectMcp(agentConfig.mcpServers ?? {}, signal);\n  return createConfiguredAgentSession({\n    workspaceDir,\n    systemPrompt,\n    model,\n    thinkingLevel: agentConfig.thinkingLevel,\n    tools: [...tools, ...mcpTools.map(adaptAgentTool)],\n    toolContext,\n    sessionStore: sessionManager,\n    models: modelRegistry,\n  });\n}\n\ntype PreparedTurnParams = {\n  prepared: PreparedRunContext;\n  presentation: RunPresentation;\n  message: ConversationMessage;\n  responder: ConversationResponder;\n  platform: MessagingInfo;\n  runState: RunnerSessionState;\n  session: MikanAgentSession;\n  model: Model<Api>;\n  agentConfig: ReturnType<typeof resolveConversationSettings>;\n  sessionUuid: string;\n  conversationId: string;\n  contextFile: string;\n  sessionView: CreateRunnerOptions[\"sessionView\"];\n};\n\nasync function runPreparedTurn(params: PreparedTurnParams): Promise<{\n  stopReason: string;\n  errorMessage?: string;\n}> {\n  const {\n    prepared,\n    presentation,\n    message,\n    responder,\n    platform,\n    runState,\n    session,\n    model,\n    agentConfig,\n    sessionUuid,\n    conversationId,\n    contextFile,\n    sessionView,\n  } = params;\n  if (runState.logCtx) {\n    log.logAgentRunStart(runState.logCtx, model.provider, model.id, model.name);\n  }\n\n  updateActiveSpanAttribution({\n    provider: model.provider,\n    model: model.id,\n    channel_id: prepared.sessionConversation,\n    session_id: sessionUuid,\n    \"mikan.input.message_count\": 1,\n    \"mikan.input.characters\": prepared.userMessage.length,\n    \"mikan.input.attachment_count\": message.attachments?.length ?? 0,\n    \"mikan.input.image_count\": prepared.imageAttachments.length,\n    \"mikan.input.has_text\": prepared.userMessage.length > 0,\n  });\n  addLifecycleEvent(\"agent.prompt.sent\", {\n    provider: model.provider,\n    model: agentConfig.model,\n    channel_id: prepared.sessionConversation,\n    session_id: sessionUuid,\n    attachment_count: message.attachments?.length ?? 0,\n    image_attachment_count: prepared.imageAttachments.length,\n  });\n\n  const isEventRun = message.id.startsWith(\"event:\");\n  await session.prompt(prepared.userMessage, {\n    allowTaskHandoff: responder.startTask !== undefined,\n    allowTaskStatus: responder.getTaskStatus !== undefined,\n    ...(prepared.imageAttachments.length > 0 ? { images: prepared.imageAttachments } : {}),\n    ...(isEventRun ? { budget: DEFAULT_EVENT_BUDGET } : {}),\n  });\n  await presentation.wait();\n\n  const sessionViewTokenStore = sessionView?.tokenStore;\n  const sessionViewPortalBaseUrl = sessionView?.portalBaseUrl;\n  let sessionViewLink: string | undefined;\n  const createSessionViewLink =\n    sessionViewTokenStore && sessionViewPortalBaseUrl\n      ? () => {\n          if (!sessionViewLink) {\n            const token = sessionViewTokenStore.create({\n              platform: platform.name as PlatformName,\n              platformUserId: message.userId,\n              conversationId,\n              sessionKey: message.sessionKey,\n              sessionFile: contextFile,\n              platformUserName: message.userName,\n            });\n            sessionViewLink = `${sessionViewPortalBaseUrl}/session?token=${token.token}`;\n          }\n          return sessionViewLink;\n        }\n      : undefined;\n\n  await finalizeRunResponse(responder, session, runState, {\n    initialTask: message.id.startsWith(\"task:\"),\n    triggerSessionLink: isEventTriggerAttribution(prepared.triggerAttribution)\n      ? createSessionViewLink?.()\n      : undefined,\n    createOverflowLink: createSessionViewLink,\n    platform: platform.name,\n    model,\n    sessionConversation: prepared.sessionConversation,\n    sessionUuid,\n  });\n  await reportUsageSummary({\n    session,\n    runState,\n    responder,\n    platform,\n    model,\n    agentConfig,\n    sessionConversation: prepared.sessionConversation,\n    sessionUuid,\n    waitForQueue: presentation.wait,\n  });\n  return { stopReason: runState.stopReason, errorMessage: runState.errorMessage };\n}\n\ntype MikanToolBindings = ReturnType<typeof createMikanTools>;\n\ntype RunnerInterfaceParams = {\n  conversationId: string;\n  conversationDir: string;\n  sessionKey: string;\n  office: Office;\n  sessionUuid: string;\n  contextFile: string;\n  sessionView: CreateRunnerOptions[\"sessionView\"];\n  runState: RunnerSessionState;\n  executor: Executor;\n  resolveForRun: RunnerExecutionContext[\"resolveForRun\"];\n  session: MikanAgentSession;\n  model: Model<Api>;\n  agentConfig: ReturnType<typeof resolveConversationSettings>;\n  sessionManager: Awaited<ReturnType<typeof openManagedSession>>;\n  chatSessionManager: ChatHistorySync;\n  toolBindings: MikanToolBindings;\n};\n\nasync function steerRun(\n  session: MikanAgentSession,\n  activeMessage: ConversationMessage | undefined,\n  message: ConversationMessage,\n): Promise<boolean> {\n  if (!activeMessage) return false;\n  // Claimed by the control path, including rejected/cancelled inputs: history sync\n  // must not turn a rejected control into a new instruction on the next run.\n  await session.sessionStore.appendCustomEntry(\"mikan.control_input\", { messageId: message.id });\n  if (!session.isActiveRun)\n    throw new Error(\"Task is preparing or settling. Please retry this update shortly.\");\n  if (message.userId !== activeMessage.userId)\n    throw new Error(\"Only the task's current actor can guide this run.\");\n  if (message.attachments?.length)\n    throw new Error(\"Stop the task before continuing with new attachments.\");\n  if (!(await session.steer(`[${message.userName ?? message.userId}]: ${message.text}`))) {\n    throw new Error(\"Task settled while receiving this update. Please send it again to continue.\");\n  }\n  return true;\n}\n\nfunction createRunnerInterface(params: RunnerInterfaceParams): PiAgentWrapper {\n  const {\n    conversationId,\n    conversationDir,\n    sessionKey,\n    office,\n    sessionUuid,\n    contextFile,\n    sessionView,\n    runState,\n    executor,\n    resolveForRun,\n    session,\n    model,\n    agentConfig,\n    sessionManager,\n    chatSessionManager,\n    toolBindings,\n  } = params;\n  let activeMessage: ConversationMessage | undefined;\n  let stopped = false;\n  return {\n    steer: (message) => steerRun(session, activeMessage, message),\n    async syncChatHistory(currentMessageId?: string): Promise<void> {\n      await chatSessionManager.syncSessionManager({\n        conversationDir,\n        sessionKey,\n        sessionManager,\n        currentMessageId,\n      });\n    },\n\n    async run(message, responder, platform) {\n      activeMessage = message;\n      stopped = false;\n      let presentation: RunPresentation | undefined;\n      try {\n        const prepared = await prepareRunContext({\n          message,\n          responder,\n          platform,\n          office,\n          executor,\n          resolveForRun,\n          session,\n          setEventContext: toolBindings.setEventContext,\n          setSandboxContext: toolBindings.setSandboxContext,\n          setUploadFunction: toolBindings.setUploadFunction,\n          setImageUploadFunction: toolBindings.setImageUploadFunction,\n          setReactFunction: toolBindings.setReactFunction,\n          bindTasks: toolBindings.bindTasks,\n          bindPlatformToolPacks: toolBindings.bindPlatformToolPacks,\n        });\n        if (stopped) return { stopReason: \"aborted\" };\n        presentation = activateRunPresentation(runState, {\n          responder,\n          sessionConversation: prepared.sessionConversation,\n          userName: message.userName,\n          sessionUuid,\n          triggerAttribution: prepared.triggerAttribution,\n        });\n        return await runPreparedTurn({\n          prepared,\n          presentation,\n          message,\n          responder,\n          platform,\n          runState,\n          session,\n          model,\n          agentConfig,\n          sessionUuid,\n          conversationId,\n          contextFile,\n          sessionView,\n        });\n      } finally {\n        activeMessage = undefined;\n        presentation?.dispose();\n      }\n    },\n\n    abort(): void {\n      stopped = true;\n      session.abort();\n    },\n\n    async dispose(): Promise<void> {\n      await sessionManager.close();\n    },\n\n    getCurrentStep(): { toolName?: string; label?: string } | undefined {\n      const first = runState.pendingTools.values().next().value;\n      if (!first) return undefined;\n      return {\n        toolName: first.toolName,\n        label: (first.args as { label?: string })?.label,\n      };\n    },\n  };\n}\n\nasync function finishRunnerCreation(params: {\n  options: CreateRunnerOptions;\n  conversationId: string;\n  conversationDir: string;\n  workspaceDir: string;\n  executor: Executor;\n  resolveForRun: RunnerExecutionContext[\"resolveForRun\"];\n  model: Model<Api>;\n  modelRegistry: MikanModels;\n  agentConfig: ReturnType<typeof resolveConversationSettings>;\n  systemPrompt: string;\n  sessionManager: Awaited<ReturnType<typeof openManagedSession>>;\n  toolBindings: MikanToolBindings;\n  toolContext: ExecutionToolContext;\n}): Promise<PiAgentWrapper> {\n  const {\n    options,\n    conversationId,\n    conversationDir,\n    workspaceDir,\n    executor,\n    resolveForRun,\n    model,\n    modelRegistry,\n    agentConfig,\n    systemPrompt,\n    sessionManager,\n    toolBindings,\n    toolContext,\n  } = params;\n  const { sessionKey, office, sessionScope, sessionView } = options;\n  const { contextFile } = sessionScope;\n  try {\n    const sessionUuid = extractSessionUuid(contextFile);\n    const chatSessionManager = new ChatHistorySync();\n    const session = await createRunnerAgentSession({\n      workspaceDir,\n      systemPrompt,\n      model,\n      agentConfig,\n      tools: toolBindings.tools,\n      toolContext,\n      sessionManager,\n      modelRegistry,\n      conversationId,\n      signal: options.signal,\n    });\n    options.signal?.throwIfAborted();\n\n    const runState = createRunState();\n    attachSessionEventHandlers({ session, runState, model, agentConfig });\n\n    return createRunnerInterface({\n      conversationId,\n      conversationDir,\n      sessionKey,\n      office,\n      sessionUuid,\n      contextFile,\n      sessionView,\n      runState,\n      executor,\n      resolveForRun,\n      session,\n      model,\n      agentConfig,\n      sessionManager,\n      chatSessionManager,\n      toolBindings,\n    });\n  } catch (error) {\n    await rollbackRunnerResource(\"close the session writer\", () => sessionManager.close());\n    throw error;\n  }\n}\n\nexport async function createRunner(options: CreateRunnerOptions): Promise<PiAgentWrapper> {\n  options.signal?.throwIfAborted();\n  const {\n    sandboxConfig,\n    sessionKey,\n    office,\n    trustModel,\n    sessionScope,\n    vaultManager,\n    provisioner,\n    resourceController,\n    platformToolPackFactories,\n  } = options;\n  const conversationId = office.address.conversationId;\n  const conversationDir = office.dir;\n  const workspaceDir = office.workspace.root;\n  await ensureDefaultMcpServers({\n    office,\n    trustModel,\n    platformWorkspaceId: options.platformWorkspaceId,\n    openConnector: options.openConnector,\n    signal: options.signal,\n  });\n  options.signal?.throwIfAborted();\n  const resolvedAgentConfig = resolveConversationSettings(office);\n  // open-trigger conversations get no MCP tools at all (see ARCHITECTURE.md).\n  const agentConfig = {\n    ...resolvedAgentConfig,\n    mcpServers: trustModel === \"open-trigger\" ? {} : (resolvedAgentConfig.mcpServers ?? {}),\n  };\n\n  const projection = resolveWorkspaceProjection(office);\n  // Bootstrap validation fails runner creation early. resolveForRun repeats\n  // the check against the actor-specific decision before any provider call.\n  assertSandboxSupportsWorkspacePolicy(\n    sandboxConfig,\n    projection.doorPolicy,\n    projection.promptSources.globalMemoryReadOnly === true,\n  );\n  const { executor, resolveForRun } = createRunnerExecutionContext(\n    sandboxConfig,\n    vaultManager,\n    provisioner,\n    office.workspace,\n  );\n  const pathContext = getUnresolvedSandboxPathContext(sandboxConfig, workspaceDir);\n  // The env wraps the stable executor wrapper, which delegates to the\n  // actor-resolved executor per call, so one env serves every run.\n  const toolContext: ExecutionToolContext = {\n    env: createSandboxExecutionEnv(executor, sandboxConfig.type, pathContext.runtimeWorkspaceRoot),\n  };\n\n  const modelRegistry = options.models ?? MikanModels.create();\n  if (modelRegistry.getError()) {\n    log.logWarning(\"models.json load error\", modelRegistry.getError()!);\n  }\n  const model = modelRegistry.resolve(agentConfig.provider, agentConfig.model);\n\n  // Create tools (per-runner, with per-runner upload function setter)\n  const toolBindings = createMikanTools(\n    executor,\n    new OfficeEventStore(office, options.eventScheduler),\n    { sandbox: sandboxConfig, resourceController: resourceController ?? provisioner },\n    platformToolPackFactories ?? [],\n    {\n      model,\n      getApiKey: () => modelRegistry.getApiKeyForProvider(model.provider),\n      // The conversation's own office dir: mounted into the sandbox, unlike\n      // the workspace base — generated images must land somewhere the agent\n      // (and a future run) can still reach.\n      outputDir: conversationDir,\n    },\n  );\n\n  const systemPrompt = await buildInitialSystemPrompt({\n    office,\n    pathContext,\n    projection,\n    sandboxConfig,\n  });\n  options.signal?.throwIfAborted();\n  const { contextFile, threadRootMessage } = sessionScope;\n  const sessionManager = await openRunnerSessionManager({\n    contextFile,\n    runtimeWorkspaceRoot: pathContext.runtimeWorkspaceRoot,\n    sessionKey,\n    threadRootMessage,\n  });\n  return finishRunnerCreation({\n    options,\n    conversationId,\n    conversationDir,\n    workspaceDir,\n    executor,\n    resolveForRun,\n    model,\n    modelRegistry,\n    agentConfig,\n    systemPrompt,\n    sessionManager,\n    toolBindings,\n    toolContext,\n  });\n}\n"]}
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/harness/runner.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EACL,oCAAoC,EACpC,cAAc,EAId,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAQrE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,SAAS,EACT,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AAEjC,4EAA4E;AAC5E,uEAAuE;AACvE,qEAAqE;AACrE,MAAM,mBAAmB,GAAG,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;AAEhF,KAAK,UAAU,4BAA4B,CAAC,MAS3C;IACC,MAAM,EACJ,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,aAAa,EACb,KAAK,EACL,WAAW,EACX,YAAY,EACZ,MAAM,GACP,GAAG,MAAM,CAAC;IACX,MAAM,cAAc,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC1D,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;QACpD,GAAG,CAAC,UAAU,CAAC,6BAA6B,UAAU,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAClD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAC5D,CACF,CAAC;IACF,IAAI,OAAsC,CAAC;IAC3C,MAAM,YAAY,GAAG,kBAAkB,CACrC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACjB,WAAW,CAAC;QACV,OAAO;QACP,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,YAAY,EAAE,KAAK;QACnB,aAAa;QACb,MAAM;QACN,YAAY;QACZ,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,mBAAmB;QAC1B,WAAW;QACX,cAAc,EAAE,CAAC,GAAG,OAAQ,CAAC,QAAQ,CAAC;QACtC,OAAO,EAAE,OAAQ,CAAC,wBAAwB,EAAE;KAC7C,CAAC,EACJ,gBAAgB,CACjB,CAAC;IAEF,OAAO,GAAG,IAAI,iBAAiB,CAAC;QAC9B,YAAY;QACZ,KAAK;QACL,aAAa;QACb,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC;QAC/C,WAAW;QACX,MAAM;QACN,YAAY;KACb,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;IACnD,IAAI,QAAQ,GAAG,CAAC;QAAE,GAAG,CAAC,OAAO,CAAC,YAAY,QAAQ,gCAAgC,CAAC,CAAC;IACpF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,4BAA4B,CACnC,aAA4B,EAC5B,YAAsC,EACtC,WAA+C,EAC/C,SAAoB;IAEpB,MAAM,iBAAiB,GACrB,YAAY,IAAI,aAAa,CAAC,IAAI,KAAK,MAAM;QAC3C,CAAC,CAAC,IAAI,sBAAsB,CAAC,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,CAAC;QACjF,CAAC,CAAC,SAAS,CAAC;IAEhB,oFAAoF;IACpF,8FAA8F;IAC9F,IAAI,cAAc,GAChB,iBAAiB,KAAK,SAAS;QAC7B,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAa;QACzB,IAAI,CAAC,OAAO,EAAE,OAAO;YACnB,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,OAAO;YACpB,OAAO,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,cAAc,CAAC,IAAI,EAAE,OAAO;YAC1B,OAAO,cAAc,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO;YAC9B,OAAO,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;QACD,gBAAgB,CAAC,QAAQ;YACvB,OAAO,cAAc,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACnD,CAAC;QACD,gBAAgB;YACd,OAAO,cAAc,CAAC,gBAAgB,EAAE,CAAC;QAC3C,CAAC;QACD,cAAc,CAAC,iBAAiB;YAC9B,OAAO,cAAc,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAC1D,CAAC;KACF,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,KAAK,CAAC,aAAa,CAAC,OAAO;YACzB,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC1D,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC;gBACnC,OAAO;oBACL,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;iBAChC,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;YACtD,oCAAoC,CAAC,aAAa,EAAE,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACvF,OAAO;gBACL,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC;gBACpD,UAAU;aACX,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAiC;IAC/D,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,SAAS,GAAG,OAAO,EAAE,QAAQ,IAAI,OAAO,EAAE,IAAI,IAAI,SAAS,CAAC;IAClE,OAAO,IAAI,SAAS,MAAM,IAAI,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CAAC,OAMtC;IACC,IAAI,OAAO,CAAC,UAAU,KAAK,cAAc;QAAE,OAAO;IAClD,IAAI,CAAC;QACH,MAAM,0BAA0B,CAC9B,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,MAAM,CACf,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,GAAG,CAAC,UAAU,CACZ,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,6CAA6C,EACtF,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IACJ,CAAC;AACH,CAAC;AA+BD,KAAK,UAAU,oBAAoB,CAAC,MAAwB;IAC1D,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC/E,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;QACnC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC,CAAC;IACH,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;IACnD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc,cAAc,QAAQ,wBAAwB,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,qBAAqB,GAAG,eAAe,CAC3C,MAAM,EACN,WAAW,CAAC,oBAAoB,EAChC,UAAU,CACX,CAAC;IACF,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,iBAAiB,CAAC;QACrC,aAAa,EAAE,WAAW,CAAC,oBAAoB;QAC/C,MAAM;QACN,MAAM;QACN,aAAa,EAAE,QAAQ,CAAC,gBAAgB,EAAE;QAC1C,QAAQ;QACR,MAAM,EAAE,qBAAqB,CAAC,MAAM;QACpC,UAAU;QACV,iBAAiB,EAAE,qBAAqB,CAAC,iBAAiB;KAC3D,CAAC,CAAC;IACH,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IACtC,2EAA2E;IAC3E,6CAA6C;IAC7C,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,GAAG,CAAC,OAAO,CACT,IAAI,cAAc,2BAA2B,YAAY,CAAC,MAAM,eAAe,UAAU,EAAE,CAC5F,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAwB,EAAE,WAA+B;IACpF,MAAM,EACJ,OAAO,EACP,SAAS,EACT,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,SAAS,EACT,qBAAqB,GACtB,GAAG,MAAM,CAAC;IACX,eAAe,CAAC;QACd,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;QAC7C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,iBAAiB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,iBAAiB,CAAC,KAAK,EAAE,QAAgB,EAAE,KAAc,EAAE,EAAE;QAC3D,MAAM,WAAW,GAAG,0BAA0B,CAAC,QAAQ,EAAE,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAC3F,MAAM,qBAAqB,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,EAAE,EAAE,CAChE,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CACxC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,oFAAoF;IACpF,sBAAsB,CAAC,KAAK,EAAE,QAAgB,EAAE,KAAc,EAAE,EAAE;QAChE,MAAM,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,iEAAiE;IACjE,SAAS,CAAC,SAAS,CAAC,CAAC;IACrB,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE,CAAC,SAAS,CAAC,KAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5F,qBAAqB,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;QAC7C,YAAY,EAAE,QAAQ,CAAC,IAAI;QAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,MAAwB;IACvD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACvD,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAC7D,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACrC,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEzC,GAAG,CAAC,OAAO,CACT,2BAA2B,YAAY,CAAC,MAAM,mBAAmB,MAAM,CAAC,MAAM,QAAQ,CACvF,CAAC;IACF,GAAG,CAAC,OAAO,CAAC,aAAa,QAAQ,CAAC,QAAQ,CAAC,MAAM,YAAY,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtF,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,MAAM,kBAAkB,CAChE,OAAO,EACP,WAAW,CAAC,oBAAoB,EAChC,WAAW,EACX,CAAC,WAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,CAAC,CACtD,CAAC;IACF,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC/B,kBAAkB,EAClB,QAAQ,CAAC,IAAI,CACd,CAAC;IACF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,gBAAgB,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IAClG,OAAO;QACL,mBAAmB;QACnB,WAAW,EAAE,gBAAgB;QAC7B,gBAAgB;QAChB,kBAAkB;KACnB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,MAKvC;IACC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,eAAe,CACnD,MAAM,EACN,WAAW,CAAC,oBAAoB,EAChC,UAAU,CACX,CAAC;IACF,OAAO,iBAAiB,CAAC;QACvB,aAAa,EAAE,WAAW,CAAC,oBAAoB;QAC/C,MAAM;QACN,MAAM;QACN,aAAa;QACb,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM;YACZ,eAAe,EAAE,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,UAAU,EAAE,YAAY;SACzB;QACD,MAAM;QACN,UAAU;QACV,iBAAiB;KAClB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAAa,EAAE,OAA4B;IAC/E,IAAI,CAAC;QACH,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,UAAU,CAAC,6BAA6B,KAAK,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,MAKvC;IACC,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IACpF,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;QACpE,IACE,kBAAkB,CAAC,UAAU,CAAC;YAC9B,iBAAiB;YACjB,CAAC,MAAM,cAAc,CAAC,cAAc,EAAE,CAAC,KAAK,iBAAiB,EAC7D,CAAC;YACD,MAAM,cAAc,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,sBAAsB,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,MAWvC;IACC,MAAM,EACJ,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,WAAW,EACX,KAAK,EACL,WAAW,EACX,cAAc,EACd,aAAa,EACb,MAAM,GACP,GAAG,MAAM,CAAC;IACX,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC,UAAU,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IACvF,OAAO,4BAA4B,CAAC;QAClC,YAAY;QACZ,YAAY;QACZ,KAAK;QACL,aAAa,EAAE,WAAW,CAAC,aAAa;QACxC,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAClD,WAAW;QACX,YAAY,EAAE,cAAc;QAC5B,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;AACL,CAAC;AAkBD,KAAK,UAAU,eAAe,CAAC,MAA0B;IAIvD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,OAAO,EACP,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,KAAK,EACL,WAAW,EACX,WAAW,EACX,cAAc,EACd,WAAW,EACX,WAAW,GACZ,GAAG,MAAM,CAAC;IACX,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IAED,2BAA2B,CAAC;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,EAAE;QACf,UAAU,EAAE,QAAQ,CAAC,mBAAmB;QACxC,UAAU,EAAE,WAAW;QACvB,2BAA2B,EAAE,CAAC;QAC9B,wBAAwB,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM;QACrD,8BAA8B,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;QAChE,yBAAyB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;QAC3D,sBAAsB,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;KACxD,CAAC,CAAC;IACH,iBAAiB,CAAC,mBAAmB,EAAE;QACrC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,UAAU,EAAE,QAAQ,CAAC,mBAAmB;QACxC,UAAU,EAAE,WAAW;QACvB,gBAAgB,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;QAClD,sBAAsB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;KACzD,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE;QACzC,gBAAgB,EAAE,SAAS,CAAC,SAAS,KAAK,SAAS;QACnD,eAAe,EAAE,SAAS,CAAC,aAAa,KAAK,SAAS;QACtD,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;IACH,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;IAE1B,MAAM,qBAAqB,GAAG,WAAW,EAAE,UAAU,CAAC;IACtD,MAAM,wBAAwB,GAAG,WAAW,EAAE,aAAa,CAAC;IAC5D,IAAI,eAAmC,CAAC;IACxC,MAAM,qBAAqB,GACzB,qBAAqB,IAAI,wBAAwB;QAC/C,CAAC,CAAC,GAAG,EAAE;YACH,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC;oBACzC,QAAQ,EAAE,QAAQ,CAAC,IAAoB;oBACvC,cAAc,EAAE,OAAO,CAAC,MAAM;oBAC9B,cAAc;oBACd,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,WAAW,EAAE,WAAW;oBACxB,gBAAgB,EAAE,OAAO,CAAC,QAAQ;iBACnC,CAAC,CAAC;gBACH,eAAe,GAAG,GAAG,wBAAwB,kBAAkB,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/E,CAAC;YACD,OAAO,eAAe,CAAC;QACzB,CAAC;QACH,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,mBAAmB,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE;QACtD,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAC3C,kBAAkB,EAAE,yBAAyB,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACxE,CAAC,CAAC,qBAAqB,EAAE,EAAE;YAC3B,CAAC,CAAC,SAAS;QACb,kBAAkB,EAAE,qBAAqB;QACzC,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,KAAK;QACL,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,kBAAkB,CAAC;QACvB,OAAO;QACP,QAAQ;QACR,SAAS;QACT,QAAQ;QACR,KAAK;QACL,WAAW;QACX,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,WAAW;QACX,YAAY,EAAE,YAAY,CAAC,IAAI;KAChC,CAAC,CAAC;IACH,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;AAClF,CAAC;AAuBD,KAAK,UAAU,QAAQ,CACrB,OAA0B,EAC1B,aAA8C,EAC9C,OAA4B;IAE5B,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACjC,iFAAiF;IACjF,2EAA2E;IAC3E,MAAM,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC,OAAO,CAAC,WAAW;QACtB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;QACzC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,WAAW,EAAE,MAAM;QAC7B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA6B;IAC1D,MAAM,EACJ,cAAc,EACd,eAAe,EACf,UAAU,EACV,MAAM,EACN,WAAW,EACX,WAAW,EACX,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,OAAO,EACP,KAAK,EACL,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,YAAY,GACb,GAAG,MAAM,CAAC;IACX,IAAI,aAA8C,CAAC;IACnD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC;QAC7D,KAAK,CAAC,eAAe,CAAC,gBAAyB;YAC7C,MAAM,kBAAkB,CAAC,kBAAkB,CAAC;gBAC1C,eAAe;gBACf,UAAU;gBACV,cAAc;gBACd,gBAAgB;aACjB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ;YACpC,aAAa,GAAG,OAAO,CAAC;YACxB,OAAO,GAAG,KAAK,CAAC;YAChB,IAAI,YAAyC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC;oBACvC,OAAO;oBACP,SAAS;oBACT,QAAQ;oBACR,MAAM;oBACN,QAAQ;oBACR,aAAa;oBACb,OAAO;oBACP,eAAe,EAAE,YAAY,CAAC,eAAe;oBAC7C,iBAAiB,EAAE,YAAY,CAAC,iBAAiB;oBACjD,iBAAiB,EAAE,YAAY,CAAC,iBAAiB;oBACjD,sBAAsB,EAAE,YAAY,CAAC,sBAAsB;oBAC3D,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;oBAC/C,SAAS,EAAE,YAAY,CAAC,SAAS;oBACjC,qBAAqB,EAAE,YAAY,CAAC,qBAAqB;iBAC1D,CAAC,CAAC;gBACH,IAAI,OAAO;oBAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;gBAC9C,YAAY,GAAG,uBAAuB,CAAC,QAAQ,EAAE;oBAC/C,SAAS;oBACT,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;oBACjD,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,WAAW;oBACX,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;iBAChD,CAAC,CAAC;gBACH,OAAO,MAAM,eAAe,CAAC;oBAC3B,QAAQ;oBACR,YAAY;oBACZ,OAAO;oBACP,SAAS;oBACT,QAAQ;oBACR,QAAQ;oBACR,OAAO;oBACP,KAAK;oBACL,WAAW;oBACX,WAAW;oBACX,cAAc;oBACd,WAAW;oBACX,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,aAAa,GAAG,SAAS,CAAC;gBAC1B,YAAY,EAAE,OAAO,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,KAAK;YACH,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,OAAO;YACX,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;QAED,cAAc;YACZ,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC1D,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAG,KAAK,CAAC,IAA2B,EAAE,KAAK;aACjD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,MAcnC;IACC,MAAM,EACJ,OAAO,EACP,cAAc,EACd,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,KAAK,EACL,aAAa,EACb,WAAW,EACX,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,WAAW,GACZ,GAAG,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAClE,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,kBAAkB,GAAG,IAAI,eAAe,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC;YAC7C,YAAY;YACZ,YAAY;YACZ,KAAK;YACL,WAAW;YACX,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,WAAW;YACX,cAAc;YACd,aAAa;YACb,cAAc;YACd,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAEjC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,0BAA0B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAEtE,OAAO,qBAAqB,CAAC;YAC3B,cAAc;YACd,eAAe;YACf,UAAU;YACV,MAAM;YACN,WAAW;YACX,WAAW;YACX,WAAW;YACX,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,OAAO;YACP,KAAK;YACL,WAAW;YACX,cAAc;YACd,kBAAkB;YAClB,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,sBAAsB,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B;IAC7D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,EACJ,aAAa,EACb,UAAU,EACV,MAAM,EACN,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,yBAAyB,GAC1B,GAAG,OAAO,CAAC;IACZ,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;IACrD,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC;IACnC,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;IAC3C,MAAM,uBAAuB,CAAC;QAC5B,MAAM;QACN,UAAU;QACV,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAChE,4EAA4E;IAC5E,MAAM,WAAW,GAAG;QAClB,GAAG,mBAAmB;QACtB,UAAU,EAAE,UAAU,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,IAAI,EAAE,CAAC;KACxF,CAAC;IAEF,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACtD,0EAA0E;IAC1E,0EAA0E;IAC1E,oCAAoC,CAAC,aAAa,EAAE,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACvF,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,4BAA4B,CAC9D,aAAa,EACb,YAAY,EACZ,WAAW,EACX,MAAM,CAAC,SAAS,CACjB,CAAC;IACF,MAAM,WAAW,GAAG,+BAA+B,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACjF,oEAAoE;IACpE,iEAAiE;IACjE,MAAM,WAAW,GAAyB;QACxC,GAAG,EAAE,yBAAyB,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,oBAAoB,CAAC;KAC/F,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;IAC7D,IAAI,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,wBAAwB,EAAE,aAAa,CAAC,QAAQ,EAAG,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IAE7E,oEAAoE;IACpE,MAAM,YAAY,GAAG,gBAAgB,CACnC,QAAQ,EACR,IAAI,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,EACpD,EAAE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,IAAI,WAAW,EAAE,EACjF,yBAAyB,IAAI,EAAE,EAC/B;QACE,KAAK;QACL,SAAS,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACnE,sEAAsE;QACtE,sEAAsE;QACtE,sCAAsC;QACtC,SAAS,EAAE,eAAe;KAC3B,CACF,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC;QAClD,MAAM;QACN,WAAW;QACX,UAAU;QACV,aAAa;KACd,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,YAAY,CAAC;IACxD,MAAM,cAAc,GAAG,MAAM,wBAAwB,CAAC;QACpD,WAAW;QACX,oBAAoB,EAAE,WAAW,CAAC,oBAAoB;QACtD,UAAU;QACV,iBAAiB;KAClB,CAAC,CAAC;IACH,OAAO,oBAAoB,CAAC;QAC1B,OAAO;QACP,cAAc;QACd,eAAe;QACf,YAAY;QACZ,QAAQ;QACR,aAAa;QACb,KAAK;QACL,aAAa;QACb,WAAW;QACX,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,WAAW;KACZ,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { Office, Workspace } from \"../office/index.js\";\nimport type { ExecutionToolContext, ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model } from \"@earendil-works/pi-ai\";\nimport { MikanModels } from \"./models.js\";\nimport type { SessionStore } from \"../sessions/session-store.js\";\nimport { MikanAgentSession, DEFAULT_EVENT_BUDGET } from \"./session.js\";\nimport { runSubagent, DEFAULT_GLOBAL_SUBAGENT_SLOTS, SubagentSlotPool } from \"./subagent.js\";\nimport { loadSubagentProfiles } from \"./subagent-profiles.js\";\nimport { createMikanTools, createSubagentTool } from \"./tools/index.js\";\nimport { adaptAgentTool } from \"./tools/pi-tools.js\";\nimport { createSandboxExecutionEnv } from \"./execution-env.js\";\nimport { mkdir } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type {\n  ConversationMessage,\n  ConversationKind,\n  ConversationResponder,\n  MessagingInfo,\n  PlatformName,\n} from \"../adapter.js\";\nimport { ActorExecutionResolver } from \"./execution-resolver.js\";\nimport type { DockerContainerManager } from \"../sandbox/provisioner.js\";\nimport {\n  assertSandboxSupportsWorkspacePolicy,\n  createExecutor,\n  type Executor,\n  type RuntimePathContext,\n  type SandboxConfig,\n  getUnresolvedSandboxPathContext,\n} from \"../sandbox/index.js\";\nimport type { VaultManager } from \"../vault/index.js\";\nimport { resolveWorkspaceProjection } from \"../office/projection.js\";\nimport type {\n  RunnerExecutionContext,\n  PreparedRunContext,\n  RunPresentation,\n  RunnerSessionState,\n} from \"./types.js\";\nimport type { CreateRunnerOptions, OfficeAddress, PiAgentWrapper } from \"../types.js\";\nimport { createHash } from \"node:crypto\";\nimport { resolveConversationSettings } from \"../config.js\";\nimport { ensureDefaultOpenConnector } from \"./open-connector.js\";\nimport { OfficeEventStore } from \"../events/index.js\";\nimport { addLifecycleEvent, updateActiveSpanAttribution } from \"../observability/index.js\";\nimport { ChatHistorySync } from \"../sessions/chat-history-sync.js\";\nimport { conversationIdOf, isThreadSessionKey } from \"../sessions/session-key.js\";\nimport {\n  extractSessionUuid,\n  openManagedSession,\n  type ThreadRootMessage,\n} from \"../sessions/store.js\";\nimport type { PlatformToolRunContext } from \"./tools/types.js\";\nimport { loadMikanSkills } from \"./skills.js\";\nimport {\n  normalizeAttachRuntimePath,\n  withStagedRuntimeFile,\n  buildPromptPayload,\n  buildSystemPrompt,\n  buildTurnInstructions,\n  getMemory,\n  resolveTriggerAttribution,\n} from \"./prompt.js\";\nimport {\n  attachSessionEventHandlers,\n  activateRunPresentation,\n  createRunState,\n  finalizeRunResponse,\n  isEventTriggerAttribution,\n  reportUsageSummary,\n} from \"./presenter.js\";\n\nimport * as log from \"../log.js\";\n\n// One process-wide fan-out account: per-conversation queues serialize runs,\n// but each run can fan out up to the per-run cap — without this shared\n// ceiling, N busy conversations hold N × cap live subagent sessions.\nconst globalSubagentSlots = new SubagentSlotPool(DEFAULT_GLOBAL_SUBAGENT_SLOTS);\n\nasync function createConfiguredAgentSession(params: {\n  workspaceDir: string;\n  systemPrompt: string;\n  model: Model<Api>;\n  thinkingLevel: ThinkingLevel;\n  tools: Awaited<ReturnType<typeof createMikanTools>>[\"tools\"];\n  toolContext: ExecutionToolContext;\n  sessionStore: SessionStore;\n  models: MikanModels;\n}): Promise<MikanAgentSession> {\n  const {\n    workspaceDir,\n    systemPrompt,\n    model,\n    thinkingLevel,\n    tools,\n    toolContext,\n    sessionStore,\n    models,\n  } = params;\n  const loadedProfiles = loadSubagentProfiles(workspaceDir);\n  for (const diagnostic of loadedProfiles.diagnostics) {\n    log.logWarning(`Subagent profile ignored: ${diagnostic.path}`, diagnostic.message);\n  }\n\n  const availableToolNames = new Set(tools.map((tool) => tool.name));\n  const runnableProfiles = new Map(\n    [...loadedProfiles.profiles].filter(([, profile]) =>\n      profile.tools.every((tool) => availableToolNames.has(tool)),\n    ),\n  );\n  let session: MikanAgentSession | undefined;\n  const subagentTool = createSubagentTool(\n    (request, hooks) =>\n      runSubagent({\n        request,\n        ...(hooks?.onActivity ? { onActivity: hooks.onActivity } : {}),\n        defaultModel: model,\n        thinkingLevel,\n        models,\n        workspaceDir,\n        availableTools: tools.filter((tool) => ![\"start_task\", \"task_status\"].includes(tool.name)),\n        profiles: runnableProfiles,\n        slots: globalSubagentSlots,\n        toolContext,\n        parentMessages: [...session!.messages],\n        onUsage: session!.captureExternalUsageSink(),\n      }),\n    runnableProfiles,\n  );\n\n  session = new MikanAgentSession({\n    systemPrompt,\n    model,\n    thinkingLevel,\n    tools: [...tools, adaptAgentTool(subagentTool)],\n    toolContext,\n    models,\n    sessionStore,\n  });\n  const reloaded = await session.reloadFromSession();\n  if (reloaded > 0) log.logInfo(`Reloaded ${reloaded} messages from session context`);\n  return session;\n}\n\nfunction createRunnerExecutionContext(\n  sandboxConfig: SandboxConfig,\n  vaultManager: VaultManager | undefined,\n  provisioner: DockerContainerManager | undefined,\n  workspace: Workspace,\n): RunnerExecutionContext {\n  const executionResolver =\n    vaultManager && sandboxConfig.type !== \"host\"\n      ? new ActorExecutionResolver(sandboxConfig, vaultManager, provisioner, workspace)\n      : undefined;\n\n  // activeExecutor is replaced at the start of each run() call when executionResolver\n  // is present, so the stable `executor` wrapper always delegates to the latest resolved value.\n  let activeExecutor: Executor =\n    executionResolver !== undefined\n      ? createExecutor({ type: \"host\" })\n      : createExecutor(sandboxConfig);\n  const executor: Executor = {\n    exec(command, options) {\n      return activeExecutor.exec(command, options);\n    },\n    readFile(path, options) {\n      return activeExecutor.readFile(path, options);\n    },\n    readFileBase64(path, options) {\n      return activeExecutor.readFileBase64(path, options);\n    },\n    writeFile(path, content, options) {\n      return activeExecutor.writeFile(path, content, options);\n    },\n    getWorkspacePath(hostPath) {\n      return activeExecutor.getWorkspacePath(hostPath);\n    },\n    getSandboxConfig() {\n      return activeExecutor.getSandboxConfig();\n    },\n    getPathContext(hostWorkspaceRoot) {\n      return activeExecutor.getPathContext(hostWorkspaceRoot);\n    },\n  };\n\n  return {\n    executor,\n    async resolveForRun(context) {\n      if (executionResolver) {\n        const decision = await executionResolver.resolve(context);\n        activeExecutor = decision.executor;\n        return {\n          pathContext: decision.pathContext,\n          projection: decision.projection,\n        };\n      }\n\n      const office = workspace.office(context.address);\n      const projection = resolveWorkspaceProjection(office);\n      assertSandboxSupportsWorkspacePolicy(sandboxConfig, projection.visibility, office.key);\n      return {\n        pathContext: executor.getPathContext(workspace.root),\n        projection,\n      };\n    },\n  };\n}\n\nfunction buildThreadSessionName(message: ThreadRootMessage | null): string | undefined {\n  const text = message?.text?.trim();\n  if (!text) return undefined;\n  const userLabel = message?.userName || message?.user || \"unknown\";\n  return `[${userLabel}]: ${text}`;\n}\n\n/**\n * Fill in the deployment's default OpenConnector entry before settings are\n * read, so the runner then sees only ordinary MCP configuration. A failed\n * default is reported and skipped; the office keeps its other servers.\n */\nasync function ensureDefaultMcpServers(options: {\n  office: Office;\n  trustModel: CreateRunnerOptions[\"trustModel\"];\n  platformWorkspaceId?: string;\n  openConnector?: CreateRunnerOptions[\"openConnector\"];\n  signal?: AbortSignal;\n}): Promise<void> {\n  if (options.trustModel === \"open-trigger\") return;\n  try {\n    await ensureDefaultOpenConnector(\n      options.office,\n      options.platformWorkspaceId,\n      options.openConnector,\n      options.signal,\n    );\n  } catch (error) {\n    options.signal?.throwIfAborted();\n    log.logWarning(\n      `[${options.office.address.conversationId}] OpenConnector default provisioning failed`,\n      error instanceof Error ? error.message : String(error),\n    );\n  }\n}\n\ntype PrepareRunParams = {\n  message: ConversationMessage;\n  responder: ConversationResponder;\n  platform: MessagingInfo;\n  office: Office;\n  executor: Executor;\n  resolveForRun: RunnerExecutionContext[\"resolveForRun\"];\n  session: MikanAgentSession;\n  setEventContext: (context: {\n    platform: string;\n    conversationId: string;\n    conversationKind: ConversationKind;\n    userId: string;\n  }) => void;\n  setSandboxContext: (context: { address: OfficeAddress; userId: string }) => void;\n  setUploadFunction: (fn: (filePath: string, title?: string) => Promise<void>) => void;\n  setImageUploadFunction: (fn: (hostPath: string, title?: string) => Promise<void>) => void;\n  bindTasks: ReturnType<typeof createMikanTools>[\"bindTasks\"];\n  setReactFunction: (fn: ((emoji: string) => Promise<void>) | null) => void;\n  bindPlatformToolPacks: (ctx: PlatformToolRunContext) => void;\n};\n\ntype RunPromptContext = {\n  pathContext: RuntimePathContext;\n  memory: string;\n  systemPrompt: string;\n  triggerAttribution: string | undefined;\n};\n\nasync function preparePromptContext(params: PrepareRunParams): Promise<RunPromptContext> {\n  const { message, platform, office, executor, resolveForRun, session } = params;\n  const conversationId = office.address.conversationId;\n  const decision = await resolveForRun({\n    address: message.address,\n    userId: message.userId,\n    trustModel: platform.trustModel,\n  });\n  const { pathContext, projection } = decision;\n  const reloaded = await session.reloadFromSession();\n  if (reloaded > 0) {\n    log.logInfo(`[${conversationId}] Reloaded ${reloaded} messages from context`);\n  }\n\n  const memory = await getMemory(projection);\n  const conversationSkillLoad = loadMikanSkills(\n    office,\n    pathContext.runtimeWorkspaceRoot,\n    projection,\n  );\n  const triggerAttribution = resolveTriggerAttribution(message);\n  const systemPrompt = buildSystemPrompt({\n    workspacePath: pathContext.runtimeWorkspaceRoot,\n    office,\n    memory,\n    sandboxConfig: executor.getSandboxConfig(),\n    platform,\n    skills: conversationSkillLoad.skills,\n    projection,\n    skippedSkillLinks: conversationSkillLoad.skippedSkillLinks,\n  });\n  session.setSystemPrompt(systemPrompt);\n  // A stable hash across turns verifies that turn-specific data did not leak\n  // into the provider-cacheable system prompt.\n  const promptHash = createHash(\"sha256\").update(systemPrompt).digest(\"hex\").slice(0, 8);\n  log.logInfo(\n    `[${conversationId}] System prompt (base): ${systemPrompt.length} chars, sha ${promptHash}`,\n  );\n  return { pathContext, memory, systemPrompt, triggerAttribution };\n}\n\nfunction bindRunCapabilities(params: PrepareRunParams, pathContext: RuntimePathContext): void {\n  const {\n    message,\n    responder,\n    platform,\n    office,\n    executor,\n    setEventContext,\n    setSandboxContext,\n    setUploadFunction,\n    setImageUploadFunction,\n    setReactFunction,\n    bindTasks,\n    bindPlatformToolPacks,\n  } = params;\n  setEventContext({\n    platform: platform.name,\n    conversationId: office.address.conversationId,\n    conversationKind: message.conversationKind,\n    userId: message.userId,\n  });\n  setSandboxContext({ address: message.address, userId: message.userId });\n  setUploadFunction(async (filePath: string, title?: string) => {\n    const runtimePath = normalizeAttachRuntimePath(filePath, pathContext.runtimeWorkspaceRoot);\n    await withStagedRuntimeFile(executor, runtimePath, (stagedPath) =>\n      responder.uploadFile(stagedPath, title),\n    );\n  });\n  // Generated images already live host-side and must not be staged through a sandbox.\n  setImageUploadFunction(async (hostPath: string, title?: string) => {\n    await responder.uploadFile(hostPath, title);\n  });\n  // Unset reaction support when the active responder cannot react.\n  bindTasks(responder);\n  setReactFunction(responder.react ? async (emoji: string) => responder.react!(emoji) : null);\n  bindPlatformToolPacks({\n    conversationId: office.address.conversationId,\n    platformName: platform.name,\n    threadTs: message.threadTs,\n  });\n}\n\nasync function prepareRunContext(params: PrepareRunParams): Promise<PreparedRunContext> {\n  const { message, platform, office, executor } = params;\n  const sessionConversation = conversationIdOf(message.sessionKey);\n  await mkdir(join(office.dir, \"scratch\"), { recursive: true });\n  const { pathContext, memory, systemPrompt, triggerAttribution } =\n    await preparePromptContext(params);\n  bindRunCapabilities(params, pathContext);\n\n  log.logInfo(\n    `Context sizes - system: ${systemPrompt.length} chars, memory: ${memory.length} chars`,\n  );\n  log.logInfo(`Channels: ${platform.channels.length}, Users: ${platform.users.length}`);\n\n  const { userMessage, imageAttachments } = await buildPromptPayload(\n    message,\n    pathContext.runtimeWorkspaceRoot,\n    pathContext,\n    (runtimePath) => executor.readFileBase64(runtimePath),\n  );\n  const turnInstructions = buildTurnInstructions(\n    message.id.startsWith(\"event:\"),\n    triggerAttribution,\n    platform.name,\n  );\n  const finalUserMessage = turnInstructions ? `${turnInstructions}\\n\\n${userMessage}` : userMessage;\n  return {\n    sessionConversation,\n    userMessage: finalUserMessage,\n    imageAttachments,\n    triggerAttribution,\n  };\n}\n\nasync function buildInitialSystemPrompt(params: {\n  office: Office;\n  pathContext: RuntimePathContext;\n  projection: ReturnType<typeof resolveWorkspaceProjection>;\n  sandboxConfig: CreateRunnerOptions[\"sandboxConfig\"];\n}): Promise<string> {\n  const { office, pathContext, projection, sandboxConfig } = params;\n  const memory = await getMemory(projection);\n  const { skills, skippedSkillLinks } = loadMikanSkills(\n    office,\n    pathContext.runtimeWorkspaceRoot,\n    projection,\n  );\n  return buildSystemPrompt({\n    workspacePath: pathContext.runtimeWorkspaceRoot,\n    office,\n    memory,\n    sandboxConfig,\n    platform: {\n      name: \"chat\",\n      formattingGuide: \"\",\n      channels: [],\n      users: [],\n      trustModel: \"membership\",\n    },\n    skills,\n    projection,\n    skippedSkillLinks,\n  });\n}\n\nasync function rollbackRunnerResource(label: string, cleanup: () => Promise<void>): Promise<void> {\n  try {\n    await cleanup();\n  } catch (error) {\n    log.logWarning(`Runner rollback failed to ${label}`, String(error));\n  }\n}\n\nasync function openRunnerSessionManager(params: {\n  contextFile: string;\n  runtimeWorkspaceRoot: string;\n  sessionKey: string;\n  threadRootMessage: ThreadRootMessage | null;\n}) {\n  const { contextFile, runtimeWorkspaceRoot, sessionKey, threadRootMessage } = params;\n  const sessionManager = await openManagedSession(contextFile, runtimeWorkspaceRoot);\n  try {\n    const threadSessionName = buildThreadSessionName(threadRootMessage);\n    if (\n      isThreadSessionKey(sessionKey) &&\n      threadSessionName &&\n      (await sessionManager.getSessionName()) !== threadSessionName\n    ) {\n      await sessionManager.setSessionName(threadSessionName);\n    }\n    return sessionManager;\n  } catch (error) {\n    await rollbackRunnerResource(\"close the session writer\", () => sessionManager.close());\n    throw error;\n  }\n}\n\nasync function createRunnerAgentSession(params: {\n  workspaceDir: string;\n  systemPrompt: string;\n  model: Model<Api>;\n  agentConfig: ReturnType<typeof resolveConversationSettings>;\n  tools: ReturnType<typeof createMikanTools>[\"tools\"];\n  toolContext: ExecutionToolContext;\n  sessionManager: Awaited<ReturnType<typeof openManagedSession>>;\n  modelRegistry: MikanModels;\n  conversationId: string;\n  signal?: AbortSignal;\n}) {\n  const {\n    workspaceDir,\n    systemPrompt,\n    model,\n    agentConfig,\n    tools,\n    toolContext,\n    sessionManager,\n    modelRegistry,\n    signal,\n  } = params;\n  const mcpTools = await sessionManager.connectMcp(agentConfig.mcpServers ?? {}, signal);\n  return createConfiguredAgentSession({\n    workspaceDir,\n    systemPrompt,\n    model,\n    thinkingLevel: agentConfig.thinkingLevel,\n    tools: [...tools, ...mcpTools.map(adaptAgentTool)],\n    toolContext,\n    sessionStore: sessionManager,\n    models: modelRegistry,\n  });\n}\n\ntype PreparedTurnParams = {\n  prepared: PreparedRunContext;\n  presentation: RunPresentation;\n  message: ConversationMessage;\n  responder: ConversationResponder;\n  platform: MessagingInfo;\n  runState: RunnerSessionState;\n  session: MikanAgentSession;\n  model: Model<Api>;\n  agentConfig: ReturnType<typeof resolveConversationSettings>;\n  sessionUuid: string;\n  conversationId: string;\n  contextFile: string;\n  sessionView: CreateRunnerOptions[\"sessionView\"];\n};\n\nasync function runPreparedTurn(params: PreparedTurnParams): Promise<{\n  stopReason: string;\n  errorMessage?: string;\n}> {\n  const {\n    prepared,\n    presentation,\n    message,\n    responder,\n    platform,\n    runState,\n    session,\n    model,\n    agentConfig,\n    sessionUuid,\n    conversationId,\n    contextFile,\n    sessionView,\n  } = params;\n  if (runState.logCtx) {\n    log.logAgentRunStart(runState.logCtx, model.provider, model.id, model.name);\n  }\n\n  updateActiveSpanAttribution({\n    provider: model.provider,\n    model: model.id,\n    channel_id: prepared.sessionConversation,\n    session_id: sessionUuid,\n    \"mikan.input.message_count\": 1,\n    \"mikan.input.characters\": prepared.userMessage.length,\n    \"mikan.input.attachment_count\": message.attachments?.length ?? 0,\n    \"mikan.input.image_count\": prepared.imageAttachments.length,\n    \"mikan.input.has_text\": prepared.userMessage.length > 0,\n  });\n  addLifecycleEvent(\"agent.prompt.sent\", {\n    provider: model.provider,\n    model: agentConfig.model,\n    channel_id: prepared.sessionConversation,\n    session_id: sessionUuid,\n    attachment_count: message.attachments?.length ?? 0,\n    image_attachment_count: prepared.imageAttachments.length,\n  });\n\n  const isEventRun = message.id.startsWith(\"event:\");\n  await session.prompt(prepared.userMessage, {\n    allowTaskHandoff: responder.startTask !== undefined,\n    allowTaskStatus: responder.getTaskStatus !== undefined,\n    ...(prepared.imageAttachments.length > 0 ? { images: prepared.imageAttachments } : {}),\n    ...(isEventRun ? { budget: DEFAULT_EVENT_BUDGET } : {}),\n  });\n  await presentation.wait();\n\n  const sessionViewTokenStore = sessionView?.tokenStore;\n  const sessionViewPortalBaseUrl = sessionView?.portalBaseUrl;\n  let sessionViewLink: string | undefined;\n  const createSessionViewLink =\n    sessionViewTokenStore && sessionViewPortalBaseUrl\n      ? () => {\n          if (!sessionViewLink) {\n            const token = sessionViewTokenStore.create({\n              platform: platform.name as PlatformName,\n              platformUserId: message.userId,\n              conversationId,\n              sessionKey: message.sessionKey,\n              sessionFile: contextFile,\n              platformUserName: message.userName,\n            });\n            sessionViewLink = `${sessionViewPortalBaseUrl}/session?token=${token.token}`;\n          }\n          return sessionViewLink;\n        }\n      : undefined;\n\n  await finalizeRunResponse(responder, session, runState, {\n    initialTask: message.id.startsWith(\"task:\"),\n    triggerSessionLink: isEventTriggerAttribution(prepared.triggerAttribution)\n      ? createSessionViewLink?.()\n      : undefined,\n    createOverflowLink: createSessionViewLink,\n    platform: platform.name,\n    model,\n    sessionConversation: prepared.sessionConversation,\n    sessionUuid,\n  });\n  await reportUsageSummary({\n    session,\n    runState,\n    responder,\n    platform,\n    model,\n    agentConfig,\n    sessionConversation: prepared.sessionConversation,\n    sessionUuid,\n    waitForQueue: presentation.wait,\n  });\n  return { stopReason: runState.stopReason, errorMessage: runState.errorMessage };\n}\n\ntype MikanToolBindings = ReturnType<typeof createMikanTools>;\n\ntype RunnerInterfaceParams = {\n  conversationId: string;\n  conversationDir: string;\n  sessionKey: string;\n  office: Office;\n  sessionUuid: string;\n  contextFile: string;\n  sessionView: CreateRunnerOptions[\"sessionView\"];\n  runState: RunnerSessionState;\n  executor: Executor;\n  resolveForRun: RunnerExecutionContext[\"resolveForRun\"];\n  session: MikanAgentSession;\n  model: Model<Api>;\n  agentConfig: ReturnType<typeof resolveConversationSettings>;\n  sessionManager: Awaited<ReturnType<typeof openManagedSession>>;\n  chatSessionManager: ChatHistorySync;\n  toolBindings: MikanToolBindings;\n};\n\nasync function steerRun(\n  session: MikanAgentSession,\n  activeMessage: ConversationMessage | undefined,\n  message: ConversationMessage,\n): Promise<boolean> {\n  if (!activeMessage) return false;\n  // Claimed by the control path, including rejected/cancelled inputs: history sync\n  // must not turn a rejected control into a new instruction on the next run.\n  await session.sessionStore.appendCustomEntry(\"mikan.control_input\", { messageId: message.id });\n  if (!session.isActiveRun)\n    throw new Error(\"Task is preparing or settling. Please retry this update shortly.\");\n  if (message.userId !== activeMessage.userId)\n    throw new Error(\"Only the task's current actor can guide this run.\");\n  if (message.attachments?.length)\n    throw new Error(\"Stop the task before continuing with new attachments.\");\n  if (!(await session.steer(`[${message.userName ?? message.userId}]: ${message.text}`))) {\n    throw new Error(\"Task settled while receiving this update. Please send it again to continue.\");\n  }\n  return true;\n}\n\nfunction createRunnerInterface(params: RunnerInterfaceParams): PiAgentWrapper {\n  const {\n    conversationId,\n    conversationDir,\n    sessionKey,\n    office,\n    sessionUuid,\n    contextFile,\n    sessionView,\n    runState,\n    executor,\n    resolveForRun,\n    session,\n    model,\n    agentConfig,\n    sessionManager,\n    chatSessionManager,\n    toolBindings,\n  } = params;\n  let activeMessage: ConversationMessage | undefined;\n  let stopped = false;\n  return {\n    steer: (message) => steerRun(session, activeMessage, message),\n    async syncChatHistory(currentMessageId?: string): Promise<void> {\n      await chatSessionManager.syncSessionManager({\n        conversationDir,\n        sessionKey,\n        sessionManager,\n        currentMessageId,\n      });\n    },\n\n    async run(message, responder, platform) {\n      activeMessage = message;\n      stopped = false;\n      let presentation: RunPresentation | undefined;\n      try {\n        const prepared = await prepareRunContext({\n          message,\n          responder,\n          platform,\n          office,\n          executor,\n          resolveForRun,\n          session,\n          setEventContext: toolBindings.setEventContext,\n          setSandboxContext: toolBindings.setSandboxContext,\n          setUploadFunction: toolBindings.setUploadFunction,\n          setImageUploadFunction: toolBindings.setImageUploadFunction,\n          setReactFunction: toolBindings.setReactFunction,\n          bindTasks: toolBindings.bindTasks,\n          bindPlatformToolPacks: toolBindings.bindPlatformToolPacks,\n        });\n        if (stopped) return { stopReason: \"aborted\" };\n        presentation = activateRunPresentation(runState, {\n          responder,\n          sessionConversation: prepared.sessionConversation,\n          userName: message.userName,\n          sessionUuid,\n          triggerAttribution: prepared.triggerAttribution,\n        });\n        return await runPreparedTurn({\n          prepared,\n          presentation,\n          message,\n          responder,\n          platform,\n          runState,\n          session,\n          model,\n          agentConfig,\n          sessionUuid,\n          conversationId,\n          contextFile,\n          sessionView,\n        });\n      } finally {\n        activeMessage = undefined;\n        presentation?.dispose();\n      }\n    },\n\n    abort(): void {\n      stopped = true;\n      session.abort();\n    },\n\n    async dispose(): Promise<void> {\n      await sessionManager.close();\n    },\n\n    getCurrentStep(): { toolName?: string; label?: string } | undefined {\n      const first = runState.pendingTools.values().next().value;\n      if (!first) return undefined;\n      return {\n        toolName: first.toolName,\n        label: (first.args as { label?: string })?.label,\n      };\n    },\n  };\n}\n\nasync function finishRunnerCreation(params: {\n  options: CreateRunnerOptions;\n  conversationId: string;\n  conversationDir: string;\n  workspaceDir: string;\n  executor: Executor;\n  resolveForRun: RunnerExecutionContext[\"resolveForRun\"];\n  model: Model<Api>;\n  modelRegistry: MikanModels;\n  agentConfig: ReturnType<typeof resolveConversationSettings>;\n  systemPrompt: string;\n  sessionManager: Awaited<ReturnType<typeof openManagedSession>>;\n  toolBindings: MikanToolBindings;\n  toolContext: ExecutionToolContext;\n}): Promise<PiAgentWrapper> {\n  const {\n    options,\n    conversationId,\n    conversationDir,\n    workspaceDir,\n    executor,\n    resolveForRun,\n    model,\n    modelRegistry,\n    agentConfig,\n    systemPrompt,\n    sessionManager,\n    toolBindings,\n    toolContext,\n  } = params;\n  const { sessionKey, office, sessionScope, sessionView } = options;\n  const { contextFile } = sessionScope;\n  try {\n    const sessionUuid = extractSessionUuid(contextFile);\n    const chatSessionManager = new ChatHistorySync();\n    const session = await createRunnerAgentSession({\n      workspaceDir,\n      systemPrompt,\n      model,\n      agentConfig,\n      tools: toolBindings.tools,\n      toolContext,\n      sessionManager,\n      modelRegistry,\n      conversationId,\n      signal: options.signal,\n    });\n    options.signal?.throwIfAborted();\n\n    const runState = createRunState();\n    attachSessionEventHandlers({ session, runState, model, agentConfig });\n\n    return createRunnerInterface({\n      conversationId,\n      conversationDir,\n      sessionKey,\n      office,\n      sessionUuid,\n      contextFile,\n      sessionView,\n      runState,\n      executor,\n      resolveForRun,\n      session,\n      model,\n      agentConfig,\n      sessionManager,\n      chatSessionManager,\n      toolBindings,\n    });\n  } catch (error) {\n    await rollbackRunnerResource(\"close the session writer\", () => sessionManager.close());\n    throw error;\n  }\n}\n\nexport async function createRunner(options: CreateRunnerOptions): Promise<PiAgentWrapper> {\n  options.signal?.throwIfAborted();\n  const {\n    sandboxConfig,\n    sessionKey,\n    office,\n    trustModel,\n    sessionScope,\n    vaultManager,\n    provisioner,\n    resourceController,\n    platformToolPackFactories,\n  } = options;\n  const conversationId = office.address.conversationId;\n  const conversationDir = office.dir;\n  const workspaceDir = office.workspace.root;\n  await ensureDefaultMcpServers({\n    office,\n    trustModel,\n    platformWorkspaceId: options.platformWorkspaceId,\n    openConnector: options.openConnector,\n    signal: options.signal,\n  });\n  options.signal?.throwIfAborted();\n  const resolvedAgentConfig = resolveConversationSettings(office);\n  // open-trigger conversations get no MCP tools at all (see ARCHITECTURE.md).\n  const agentConfig = {\n    ...resolvedAgentConfig,\n    mcpServers: trustModel === \"open-trigger\" ? {} : (resolvedAgentConfig.mcpServers ?? {}),\n  };\n\n  const projection = resolveWorkspaceProjection(office);\n  // Bootstrap validation fails runner creation early. resolveForRun repeats\n  // the check against the actor-specific decision before any provider call.\n  assertSandboxSupportsWorkspacePolicy(sandboxConfig, projection.visibility, office.key);\n  const { executor, resolveForRun } = createRunnerExecutionContext(\n    sandboxConfig,\n    vaultManager,\n    provisioner,\n    office.workspace,\n  );\n  const pathContext = getUnresolvedSandboxPathContext(sandboxConfig, workspaceDir);\n  // The env wraps the stable executor wrapper, which delegates to the\n  // actor-resolved executor per call, so one env serves every run.\n  const toolContext: ExecutionToolContext = {\n    env: createSandboxExecutionEnv(executor, sandboxConfig.type, pathContext.runtimeWorkspaceRoot),\n  };\n\n  const modelRegistry = options.models ?? MikanModels.create();\n  if (modelRegistry.getError()) {\n    log.logWarning(\"models.json load error\", modelRegistry.getError()!);\n  }\n  const model = modelRegistry.resolve(agentConfig.provider, agentConfig.model);\n\n  // Create tools (per-runner, with per-runner upload function setter)\n  const toolBindings = createMikanTools(\n    executor,\n    new OfficeEventStore(office, options.eventScheduler),\n    { sandbox: sandboxConfig, resourceController: resourceController ?? provisioner },\n    platformToolPackFactories ?? [],\n    {\n      model,\n      getApiKey: () => modelRegistry.getApiKeyForProvider(model.provider),\n      // The conversation's own office dir: mounted into the sandbox, unlike\n      // the workspace base — generated images must land somewhere the agent\n      // (and a future run) can still reach.\n      outputDir: conversationDir,\n    },\n  );\n\n  const systemPrompt = await buildInitialSystemPrompt({\n    office,\n    pathContext,\n    projection,\n    sandboxConfig,\n  });\n  options.signal?.throwIfAborted();\n  const { contextFile, threadRootMessage } = sessionScope;\n  const sessionManager = await openRunnerSessionManager({\n    contextFile,\n    runtimeWorkspaceRoot: pathContext.runtimeWorkspaceRoot,\n    sessionKey,\n    threadRootMessage,\n  });\n  return finishRunnerCreation({\n    options,\n    conversationId,\n    conversationDir,\n    workspaceDir,\n    executor,\n    resolveForRun,\n    model,\n    modelRegistry,\n    agentConfig,\n    systemPrompt,\n    sessionManager,\n    toolBindings,\n    toolContext,\n  });\n}\n"]}

package/dist/office/projection.d.ts

@@ -1,4 +1,5 @@
-import type { Office } from "./index.js";
+import { type Office } from "./index.js";
+import type { WorkspaceVisibility } from "../types.js";
 import type { PlatformChannelKind, WorkspaceProjection } from "./types.js";
 export type { PlatformChannelKind, WorkspaceProjection } from "./types.js";
 /**
@@ -13,10 +14,26 @@ export type { PlatformChannelKind, WorkspaceProjection } from "./types.js";
 export declare function recordPlatformChannelKind(office: Office, kind: PlatformChannelKind): void;
 /** The recorded platform channel kind, or undefined when never observed. */
 export declare function readPlatformChannelKind(office: Office): PlatformChannelKind | undefined;
+/** Where an office's visibility came from; shown to operators instead of raw values. */
+export interface OfficeVisibilityDecision {
+    visibility: WorkspaceVisibility;
+    source: "platform" | "override" | "unknown";
+}
+/**
+ * One dimension, derived from the platform (ADR 0008): public channels are
+ * public; private channels, DMs, group DMs, and externally shared
+ * conversations are private; an unknown kind fails closed to private. An
+ * operator may narrow a public conversation to private, never the reverse.
+ * Legacy door-policy settings are not consulted.
+ */
+export declare function resolveOfficeVisibility(office: Office): OfficeVisibilityDecision;
 /**
  * The single policy seam for a managed office. It both materializes the
  * host-side roots and authorizes the prompt sources that describe them.
- * Legacy image settings are deliberately translated here, never at callers.
+ * Every office gets the same shape (ADR 0008): its own directory read-write,
+ * every other public office read-only under /workspace/public, and the
+ * workspace-global knowledge read-write for public offices or read-only for
+ * private ones. No layout mounts the workspace root.
  */
 export declare function resolveWorkspaceProjection(office: Office): WorkspaceProjection;
 //# sourceMappingURL=projection.d.ts.map

package/dist/office/projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../src/office/projection.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAQzC,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE3E,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAU3E;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAIzF;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAiBvF;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAsD9E"}
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../src/office/projection.ts"],"names":[],"mappings":"AAIA,OAAO,EAAyB,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAEhE,OAAO,KAAK,EAAkB,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE3E,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAU3E;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAIzF;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAiBvF;AAED,wFAAwF;AACxF,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,mBAAmB,CAAC;IAChC,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;CAC7C;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CAOhF;AAsBD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAmC9E"}

package/dist/office/projection.js

@@ -1,7 +1,8 @@
 import { dirname, join } from "node:path";
 import { lstatSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { atomicWritePrivateFile, ensureDirExists } from "../file-guards.js";
-import { resolveConversationSettings } from "../config.js";
+import { loadOfficeVisibilityOverride } from "../config.js";
+import { listRegisteredOffices } from "./index.js";
 import * as log from "../log.js";
 const CHANNEL_KIND_FILE = "channel-kind";
 const CHANNEL_KINDS = [
@@ -35,7 +36,7 @@ export function readPlatformChannelKind(office) {
     catch (err) {
         if (err.code === "ENOENT")
             return undefined;
-        log.logWarning("Could not read platform channel kind; falling back to isolated workspace", `${path}: ${err instanceof Error ? err.message : String(err)}`);
+        log.logWarning("Could not read platform channel kind; treating the office as private", `${path}: ${err instanceof Error ? err.message : String(err)}`);
         return undefined;
     }
     const value = raw.trim();
@@ -43,119 +44,86 @@ export function readPlatformChannelKind(office) {
         ? value
         : undefined;
 }
+/**
+ * One dimension, derived from the platform (ADR 0008): public channels are
+ * public; private channels, DMs, group DMs, and externally shared
+ * conversations are private; an unknown kind fails closed to private. An
+ * operator may narrow a public conversation to private, never the reverse.
+ * Legacy door-policy settings are not consulted.
+ */
+export function resolveOfficeVisibility(office) {
+    if (loadOfficeVisibilityOverride(office) === "private") {
+        return { visibility: "private", source: "override" };
+    }
+    const kind = readPlatformChannelKind(office);
+    if (kind === undefined)
+        return { visibility: "private", source: "unknown" };
+    return { visibility: kind === "public_channel" ? "public" : "private", source: "platform" };
+}
+/**
+ * Every public office other than `self`, as read-only mounts under
+ * `/workspace/public/<key>`. Bind mounts rather than a symlink directory:
+ * symlinks would resolve against the container's own filesystem, where host
+ * paths do not exist. A public channel appearing or changing visibility
+ * changes the mount signature, so affected containers rebuild on their next
+ * message with contents preserved.
+ */
+function publicOfficeMounts(self) {
+    const { workspace } = self;
+    const mounts = [];
+    for (const record of listRegisteredOffices(workspace.stateDir)) {
+        const other = workspace.office(record);
+        if (other.key === self.key || !exists(other.dir))
+            continue;
+        if (resolveOfficeVisibility(other).visibility !== "public")
+            continue;
+        mounts.push({ source: other.dir, target: `/workspace/public/${other.key}`, readOnly: true });
+    }
+    return mounts.toSorted((a, b) => a.target.localeCompare(b.target));
+}
 /**
  * The single policy seam for a managed office. It both materializes the
  * host-side roots and authorizes the prompt sources that describe them.
- * Legacy image settings are deliberately translated here, never at callers.
+ * Every office gets the same shape (ADR 0008): its own directory read-write,
+ * every other public office read-only under /workspace/public, and the
+ * workspace-global knowledge read-write for public offices or read-only for
+ * private ones. No layout mounts the workspace root.
  */
 export function resolveWorkspaceProjection(office) {
     const { workspace } = office;
-    const effective = resolveEffectiveWorkspace(office);
+    const decision = resolveOfficeVisibility(office);
+    const readOnlyKnowledge = decision.visibility === "private";
     assertDirectory(workspace.root, "Host workspace root");
     office.ensure();
-    const shared = effective.layout === "shared-support";
-    if (shared) {
-        ensureRegularFile(workspace.memoryPath, "Workspace memory");
-        ensureDirectoryRoot(workspace.skillsDir, "Workspace skills");
-    }
-    // Private visibility only changes anything for shared-support: the shared
-    // MEMORY.md is the one file that leaks information between offices when
-    // writable, so a private office reads it but cannot write it (modeled on
-    // Claude Tag's private-channel memory). "full" mounts the whole workspace
-    // as one read-write bind with no separate memory file to gate, and
-    // "conversation" never sees workspace memory at all.
-    //
-    // The `readOnly` mount flag below is a kernel-enforced boundary only for
-    // backends with managed Workspace projection. Runner and actor execution
-    // resolution reject every other backend before the agent can start.
-    const globalMemoryReadOnly = shared && effective.visibility === "private";
-    const mounts = effective.layout === "full"
-        ? [{ source: workspace.root, target: "/workspace" }]
-        : effective.layout === "shared-support"
-            ? [
-                {
-                    source: workspace.memoryPath,
-                    target: "/workspace/MEMORY.md",
-                    ...(globalMemoryReadOnly ? { readOnly: true } : {}),
-                },
-                { source: workspace.skillsDir, target: "/workspace/skills" },
-                { source: office.dir, target: `/workspace/${office.key}` },
-            ]
-            : [{ source: office.dir, target: `/workspace/${office.key}` }];
+    ensureRegularFile(workspace.memoryPath, "Workspace memory");
+    ensureDirectoryRoot(workspace.skillsDir, "Workspace skills");
+    const ro = { readOnly: true };
     return {
-        ...effective,
-        mounts,
+        ...decision,
+        mounts: [
+            { source: office.dir, target: `/workspace/${office.key}` },
+            {
+                source: workspace.memoryPath,
+                target: "/workspace/MEMORY.md",
+                ...(readOnlyKnowledge ? ro : {}),
+            },
+            {
+                source: workspace.skillsDir,
+                target: "/workspace/skills",
+                ...(readOnlyKnowledge ? ro : {}),
+            },
+            ...publicOfficeMounts(office),
+        ],
         promptSources: {
             conversationDir: office.dir,
             conversationMemoryPath: office.memoryPath,
             conversationSkillsDir: office.skillsDir,
-            ...(effective.layout === "shared-support" || effective.layout === "full"
-                ? {
-                    globalMemoryPath: workspace.memoryPath,
-                    globalSkillsDir: workspace.skillsDir,
-                    ...(globalMemoryReadOnly ? { globalMemoryReadOnly: true } : {}),
-                }
-                : {}),
+            globalMemoryPath: workspace.memoryPath,
+            globalSkillsDir: workspace.skillsDir,
+            ...(readOnlyKnowledge ? { globalKnowledgeReadOnly: true } : {}),
         },
     };
 }
-function resolveEffectiveWorkspace(office) {
-    try {
-        const settings = resolveConversationSettings(office).sandbox;
-        if (settings?.workspace) {
-            return normalizeWorkspace(settings.workspace.doorPolicy, settings.workspace.layout, settings.workspace.visibility);
-        }
-        if (settings?.image?.workspaceMount) {
-            return legacyWorkspace(settings.image.workspaceMount);
-        }
-        return platformDerivedWorkspace(office);
-    }
-    catch (err) {
-        // Settings are host-authoritative. A malformed file must not fall back to
-        // an unvalidated value from a mounted legacy location.
-        log.logWarning("Refusing to resolve workspace projection from malformed settings", err instanceof Error ? err.message : String(err));
-        throw new Error("Cannot resolve workspace projection: settings are malformed", { cause: err });
-    }
-}
-/**
- * No explicit workspace setting anywhere: follow the platform's own channel
- * vocabulary (modeled on Claude Tag). A public channel's knowledge is shared
- * workspace-wide read-write; a private channel reads the shared pool but
- * writes only its own conversation memory; DMs, externally shared channels,
- * and conversations whose kind was never observed stay fully isolated —
- * platform-public is a necessary condition for sharing, never assumed.
- * An admin's explicit setting (conversation or global) always wins over this.
- */
-function platformDerivedWorkspace(office) {
-    switch (readPlatformChannelKind(office)) {
-        case "public_channel":
-            return { doorPolicy: "trusted", layout: "shared-support", visibility: "public" };
-        case "private_channel":
-            return { doorPolicy: "trusted", layout: "shared-support", visibility: "private" };
-        default:
-            return { doorPolicy: "isolated", layout: "conversation", visibility: "public" };
-    }
-}
-function normalizeWorkspace(doorPolicy, layout, visibility) {
-    const policy = doorPolicy ?? "isolated";
-    if (policy === "isolated") {
-        return { doorPolicy: policy, layout: "conversation", visibility: "public" };
-    }
-    return {
-        doorPolicy: policy,
-        layout: layout === "full" ? "full" : "shared-support",
-        // Missing visibility defaults to "public": every office that predates this
-        // setting keeps today's read-write shared MEMORY.md behavior unchanged.
-        visibility: visibility ?? "public",
-    };
-}
-function legacyWorkspace(mode) {
-    return mode === "full"
-        ? { doorPolicy: "trusted", layout: "full", visibility: "public" }
-        : mode === "private"
-            ? { doorPolicy: "trusted", layout: "shared-support", visibility: "public" }
-            : { doorPolicy: "isolated", layout: "conversation", visibility: "public" };
-}
 function ensureDirectoryRoot(path, label) {
     if (!exists(path)) {
         mkdirSync(path, { recursive: true, mode: 0o700 });

package/dist/office/projection.js.map

@@ -1 +1 @@
-{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/office/projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAE3D,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AAWjC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AACzC,MAAM,aAAa,GAAmC;IACpD,gBAAgB;IAChB,iBAAiB;IACjB,IAAI;IACJ,UAAU;CACX,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAc,EAAE,IAAyB;IACjF,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,OAAO;IACrD,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACtD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACvE,GAAG,CAAC,UAAU,CACZ,0EAA0E,EAC1E,GAAG,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/D,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,OAAQ,aAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACzD,CAAC,CAAE,KAA6B;QAChC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAEpD,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IACvD,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,KAAK,gBAAgB,CAAC;IACrD,IAAI,MAAM,EAAE,CAAC;QACX,iBAAiB,CAAC,SAAS,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;QAC5D,mBAAmB,CAAC,SAAS,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC/D,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,mEAAmE;IACnE,qDAAqD;IACrD,EAAE;IACF,yEAAyE;IACzE,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,oBAAoB,GAAG,MAAM,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC;IAC1E,MAAM,MAAM,GACV,SAAS,CAAC,MAAM,KAAK,MAAM;QACzB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACpD,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,gBAAgB;YACrC,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,SAAS,CAAC,UAAU;oBAC5B,MAAM,EAAE,sBAAsB;oBAC9B,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7D;gBACD,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE;gBAC5D,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,MAAM,CAAC,GAAG,EAAE,EAAE;aAC3D;YACH,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAErE,OAAO;QACL,GAAG,SAAS;QACZ,MAAM;QACN,aAAa,EAAE;YACb,eAAe,EAAE,MAAM,CAAC,GAAG;YAC3B,sBAAsB,EAAE,MAAM,CAAC,UAAU;YACzC,qBAAqB,EAAE,MAAM,CAAC,SAAS;YACvC,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,gBAAgB,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM;gBACtE,CAAC,CAAC;oBACE,gBAAgB,EAAE,SAAS,CAAC,UAAU;oBACtC,eAAe,EAAE,SAAS,CAAC,SAAS;oBACpC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChE;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;QAC7D,IAAI,QAAQ,EAAE,SAAS,EAAE,CAAC;YACxB,OAAO,kBAAkB,CACvB,QAAQ,CAAC,SAAS,CAAC,UAAU,EAC7B,QAAQ,CAAC,SAAS,CAAC,MAAM,EACzB,QAAQ,CAAC,SAAS,CAAC,UAAU,CAC9B,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACpC,OAAO,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,uDAAuD;QACvD,GAAG,CAAC,UAAU,CACZ,kEAAkE,EAClE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,6DAA6D,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,wBAAwB,CAC/B,MAAc;IAEd,QAAQ,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,KAAK,gBAAgB;YACnB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;QACnF,KAAK,iBAAiB;YACpB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QACpF;YACE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACpF,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,UAA2C,EAC3C,MAAmC,EACnC,UAA2C;IAE3C,MAAM,MAAM,GAAG,UAAU,IAAI,UAAU,CAAC;IACxC,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO;QACL,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB;QACrD,2EAA2E;QAC3E,wEAAwE;QACxE,UAAU,EAAE,UAAU,IAAI,QAAQ;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,IAAyC;IAEzC,OAAO,IAAI,KAAK,MAAM;QACpB,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE;QACjE,CAAC,CAAC,IAAI,KAAK,SAAS;YAClB,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE;YAC3E,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/B,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6CAA6C,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import { dirname, join } from \"node:path\";\nimport { lstatSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { atomicWritePrivateFile, ensureDirExists } from \"../file-guards.js\";\nimport { resolveConversationSettings } from \"../config.js\";\nimport type { Office } from \"./index.js\";\nimport * as log from \"../log.js\";\nimport type {\n  ImageWorkspaceMountMode,\n  WorkspaceDoorPolicy,\n  WorkspaceLayout,\n  WorkspaceVisibility,\n} from \"../types.js\";\nimport type { PlatformChannelKind, WorkspaceProjection } from \"./types.js\";\n\nexport type { PlatformChannelKind, WorkspaceProjection } from \"./types.js\";\n\nconst CHANNEL_KIND_FILE = \"channel-kind\";\nconst CHANNEL_KINDS: readonly PlatformChannelKind[] = [\n  \"public_channel\",\n  \"private_channel\",\n  \"im\",\n  \"external\",\n];\n\n/**\n * Record the platform's own channel kind for this conversation, as observed\n * by the adapter at message intake. Stored under the host-only office state\n * dir (never the sandbox-mounted workspace), so sandboxed code cannot\n * promote its own conversation into the shared pool. Written only on change;\n * the value is a snapshot as of the last message, which is exactly the\n * freshness the projection needs — a conversation that never speaks again\n * never needs a fresher value.\n */\nexport function recordPlatformChannelKind(office: Office, kind: PlatformChannelKind): void {\n  if (readPlatformChannelKind(office) === kind) return;\n  ensureDirExists(office.stateDir);\n  atomicWritePrivateFile(join(office.stateDir, CHANNEL_KIND_FILE), kind + \"\\n\");\n}\n\n/** The recorded platform channel kind, or undefined when never observed. */\nexport function readPlatformChannelKind(office: Office): PlatformChannelKind | undefined {\n  const path = join(office.stateDir, CHANNEL_KIND_FILE);\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf-8\");\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return undefined;\n    log.logWarning(\n      \"Could not read platform channel kind; falling back to isolated workspace\",\n      `${path}: ${err instanceof Error ? err.message : String(err)}`,\n    );\n    return undefined;\n  }\n  const value = raw.trim();\n  return (CHANNEL_KINDS as readonly string[]).includes(value)\n    ? (value as PlatformChannelKind)\n    : undefined;\n}\n\n/**\n * The single policy seam for a managed office. It both materializes the\n * host-side roots and authorizes the prompt sources that describe them.\n * Legacy image settings are deliberately translated here, never at callers.\n */\nexport function resolveWorkspaceProjection(office: Office): WorkspaceProjection {\n  const { workspace } = office;\n  const effective = resolveEffectiveWorkspace(office);\n\n  assertDirectory(workspace.root, \"Host workspace root\");\n  office.ensure();\n  const shared = effective.layout === \"shared-support\";\n  if (shared) {\n    ensureRegularFile(workspace.memoryPath, \"Workspace memory\");\n    ensureDirectoryRoot(workspace.skillsDir, \"Workspace skills\");\n  }\n\n  // Private visibility only changes anything for shared-support: the shared\n  // MEMORY.md is the one file that leaks information between offices when\n  // writable, so a private office reads it but cannot write it (modeled on\n  // Claude Tag's private-channel memory). \"full\" mounts the whole workspace\n  // as one read-write bind with no separate memory file to gate, and\n  // \"conversation\" never sees workspace memory at all.\n  //\n  // The `readOnly` mount flag below is a kernel-enforced boundary only for\n  // backends with managed Workspace projection. Runner and actor execution\n  // resolution reject every other backend before the agent can start.\n  const globalMemoryReadOnly = shared && effective.visibility === \"private\";\n  const mounts =\n    effective.layout === \"full\"\n      ? [{ source: workspace.root, target: \"/workspace\" }]\n      : effective.layout === \"shared-support\"\n        ? [\n            {\n              source: workspace.memoryPath,\n              target: \"/workspace/MEMORY.md\",\n              ...(globalMemoryReadOnly ? { readOnly: true as const } : {}),\n            },\n            { source: workspace.skillsDir, target: \"/workspace/skills\" },\n            { source: office.dir, target: `/workspace/${office.key}` },\n          ]\n        : [{ source: office.dir, target: `/workspace/${office.key}` }];\n\n  return {\n    ...effective,\n    mounts,\n    promptSources: {\n      conversationDir: office.dir,\n      conversationMemoryPath: office.memoryPath,\n      conversationSkillsDir: office.skillsDir,\n      ...(effective.layout === \"shared-support\" || effective.layout === \"full\"\n        ? {\n            globalMemoryPath: workspace.memoryPath,\n            globalSkillsDir: workspace.skillsDir,\n            ...(globalMemoryReadOnly ? { globalMemoryReadOnly: true } : {}),\n          }\n        : {}),\n    },\n  };\n}\n\nfunction resolveEffectiveWorkspace(\n  office: Office,\n): Pick<WorkspaceProjection, \"doorPolicy\" | \"layout\" | \"visibility\"> {\n  try {\n    const settings = resolveConversationSettings(office).sandbox;\n    if (settings?.workspace) {\n      return normalizeWorkspace(\n        settings.workspace.doorPolicy,\n        settings.workspace.layout,\n        settings.workspace.visibility,\n      );\n    }\n    if (settings?.image?.workspaceMount) {\n      return legacyWorkspace(settings.image.workspaceMount);\n    }\n    return platformDerivedWorkspace(office);\n  } catch (err) {\n    // Settings are host-authoritative. A malformed file must not fall back to\n    // an unvalidated value from a mounted legacy location.\n    log.logWarning(\n      \"Refusing to resolve workspace projection from malformed settings\",\n      err instanceof Error ? err.message : String(err),\n    );\n    throw new Error(\"Cannot resolve workspace projection: settings are malformed\", { cause: err });\n  }\n}\n\n/**\n * No explicit workspace setting anywhere: follow the platform's own channel\n * vocabulary (modeled on Claude Tag). A public channel's knowledge is shared\n * workspace-wide read-write; a private channel reads the shared pool but\n * writes only its own conversation memory; DMs, externally shared channels,\n * and conversations whose kind was never observed stay fully isolated —\n * platform-public is a necessary condition for sharing, never assumed.\n * An admin's explicit setting (conversation or global) always wins over this.\n */\nfunction platformDerivedWorkspace(\n  office: Office,\n): Pick<WorkspaceProjection, \"doorPolicy\" | \"layout\" | \"visibility\"> {\n  switch (readPlatformChannelKind(office)) {\n    case \"public_channel\":\n      return { doorPolicy: \"trusted\", layout: \"shared-support\", visibility: \"public\" };\n    case \"private_channel\":\n      return { doorPolicy: \"trusted\", layout: \"shared-support\", visibility: \"private\" };\n    default:\n      return { doorPolicy: \"isolated\", layout: \"conversation\", visibility: \"public\" };\n  }\n}\n\nfunction normalizeWorkspace(\n  doorPolicy: WorkspaceDoorPolicy | undefined,\n  layout: WorkspaceLayout | undefined,\n  visibility: WorkspaceVisibility | undefined,\n): Pick<WorkspaceProjection, \"doorPolicy\" | \"layout\" | \"visibility\"> {\n  const policy = doorPolicy ?? \"isolated\";\n  if (policy === \"isolated\") {\n    return { doorPolicy: policy, layout: \"conversation\", visibility: \"public\" };\n  }\n  return {\n    doorPolicy: policy,\n    layout: layout === \"full\" ? \"full\" : \"shared-support\",\n    // Missing visibility defaults to \"public\": every office that predates this\n    // setting keeps today's read-write shared MEMORY.md behavior unchanged.\n    visibility: visibility ?? \"public\",\n  };\n}\n\nfunction legacyWorkspace(\n  mode: ImageWorkspaceMountMode | undefined,\n): Pick<WorkspaceProjection, \"doorPolicy\" | \"layout\" | \"visibility\"> {\n  return mode === \"full\"\n    ? { doorPolicy: \"trusted\", layout: \"full\", visibility: \"public\" }\n    : mode === \"private\"\n      ? { doorPolicy: \"trusted\", layout: \"shared-support\", visibility: \"public\" }\n      : { doorPolicy: \"isolated\", layout: \"conversation\", visibility: \"public\" };\n}\n\nfunction ensureDirectoryRoot(path: string, label: string): void {\n  if (!exists(path)) {\n    mkdirSync(path, { recursive: true, mode: 0o700 });\n    return;\n  }\n  assertDirectory(path, label);\n}\n\nfunction ensureRegularFile(path: string, label: string): void {\n  if (!exists(path)) {\n    ensureDirExists(dirname(path));\n    writeFileSync(path, \"\", { mode: 0o600, flag: \"wx\" });\n    return;\n  }\n  let stats;\n  try {\n    stats = lstatSync(path);\n  } catch (err) {\n    throw new Error(`${label} cannot be inspected: ${path}`, { cause: err });\n  }\n  if (stats.isSymbolicLink() || !stats.isFile()) {\n    throw new Error(`${label} must be a regular non-symlink file: ${path}`);\n  }\n}\n\nfunction assertDirectory(path: string, label: string): void {\n  let stats;\n  try {\n    stats = lstatSync(path);\n  } catch (err) {\n    throw new Error(`${label} cannot be inspected: ${path}`, { cause: err });\n  }\n  if (stats.isSymbolicLink() || !stats.isDirectory()) {\n    throw new Error(`${label} must be a regular non-symlink directory: ${path}`);\n  }\n}\n\nfunction exists(path: string): boolean {\n  try {\n    lstatSync(path);\n    return true;\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return false;\n    throw err;\n  }\n}\n"]}
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/office/projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAe,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AAMjC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AACzC,MAAM,aAAa,GAAmC;IACpD,gBAAgB;IAChB,iBAAiB;IACjB,IAAI;IACJ,UAAU;CACX,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAc,EAAE,IAAyB;IACjF,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,OAAO;IACrD,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACtD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACvE,GAAG,CAAC,UAAU,CACZ,sEAAsE,EACtE,GAAG,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/D,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,OAAQ,aAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACzD,CAAC,CAAE,KAA6B;QAChC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,IAAI,4BAA4B,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QACvD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC5E,OAAO,EAAE,UAAU,EAAE,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC9F,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3D,IAAI,uBAAuB,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK,QAAQ;YAAE,SAAS;QACrE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,qBAAqB,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC7B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC;IAE5D,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IACvD,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,iBAAiB,CAAC,SAAS,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC5D,mBAAmB,CAAC,SAAS,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC7D,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC;IACvC,OAAO;QACL,GAAG,QAAQ;QACX,MAAM,EAAE;YACN,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,MAAM,CAAC,GAAG,EAAE,EAAE;YAC1D;gBACE,MAAM,EAAE,SAAS,CAAC,UAAU;gBAC5B,MAAM,EAAE,sBAAsB;gBAC9B,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjC;YACD;gBACE,MAAM,EAAE,SAAS,CAAC,SAAS;gBAC3B,MAAM,EAAE,mBAAmB;gBAC3B,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjC;YACD,GAAG,kBAAkB,CAAC,MAAM,CAAC;SAC9B;QACD,aAAa,EAAE;YACb,eAAe,EAAE,MAAM,CAAC,GAAG;YAC3B,sBAAsB,EAAE,MAAM,CAAC,UAAU;YACzC,qBAAqB,EAAE,MAAM,CAAC,SAAS;YACvC,gBAAgB,EAAE,SAAS,CAAC,UAAU;YACtC,eAAe,EAAE,SAAS,CAAC,SAAS;YACpC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/B,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6CAA6C,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import { dirname, join } from \"node:path\";\nimport { lstatSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { atomicWritePrivateFile, ensureDirExists } from \"../file-guards.js\";\nimport { loadOfficeVisibilityOverride } from \"../config.js\";\nimport { listRegisteredOffices, type Office } from \"./index.js\";\nimport * as log from \"../log.js\";\nimport type { ContainerMount, WorkspaceVisibility } from \"../types.js\";\nimport type { PlatformChannelKind, WorkspaceProjection } from \"./types.js\";\n\nexport type { PlatformChannelKind, WorkspaceProjection } from \"./types.js\";\n\nconst CHANNEL_KIND_FILE = \"channel-kind\";\nconst CHANNEL_KINDS: readonly PlatformChannelKind[] = [\n  \"public_channel\",\n  \"private_channel\",\n  \"im\",\n  \"external\",\n];\n\n/**\n * Record the platform's own channel kind for this conversation, as observed\n * by the adapter at message intake. Stored under the host-only office state\n * dir (never the sandbox-mounted workspace), so sandboxed code cannot\n * promote its own conversation into the shared pool. Written only on change;\n * the value is a snapshot as of the last message, which is exactly the\n * freshness the projection needs — a conversation that never speaks again\n * never needs a fresher value.\n */\nexport function recordPlatformChannelKind(office: Office, kind: PlatformChannelKind): void {\n  if (readPlatformChannelKind(office) === kind) return;\n  ensureDirExists(office.stateDir);\n  atomicWritePrivateFile(join(office.stateDir, CHANNEL_KIND_FILE), kind + \"\\n\");\n}\n\n/** The recorded platform channel kind, or undefined when never observed. */\nexport function readPlatformChannelKind(office: Office): PlatformChannelKind | undefined {\n  const path = join(office.stateDir, CHANNEL_KIND_FILE);\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf-8\");\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return undefined;\n    log.logWarning(\n      \"Could not read platform channel kind; treating the office as private\",\n      `${path}: ${err instanceof Error ? err.message : String(err)}`,\n    );\n    return undefined;\n  }\n  const value = raw.trim();\n  return (CHANNEL_KINDS as readonly string[]).includes(value)\n    ? (value as PlatformChannelKind)\n    : undefined;\n}\n\n/** Where an office's visibility came from; shown to operators instead of raw values. */\nexport interface OfficeVisibilityDecision {\n  visibility: WorkspaceVisibility;\n  source: \"platform\" | \"override\" | \"unknown\";\n}\n\n/**\n * One dimension, derived from the platform (ADR 0008): public channels are\n * public; private channels, DMs, group DMs, and externally shared\n * conversations are private; an unknown kind fails closed to private. An\n * operator may narrow a public conversation to private, never the reverse.\n * Legacy door-policy settings are not consulted.\n */\nexport function resolveOfficeVisibility(office: Office): OfficeVisibilityDecision {\n  if (loadOfficeVisibilityOverride(office) === \"private\") {\n    return { visibility: \"private\", source: \"override\" };\n  }\n  const kind = readPlatformChannelKind(office);\n  if (kind === undefined) return { visibility: \"private\", source: \"unknown\" };\n  return { visibility: kind === \"public_channel\" ? \"public\" : \"private\", source: \"platform\" };\n}\n\n/**\n * Every public office other than `self`, as read-only mounts under\n * `/workspace/public/<key>`. Bind mounts rather than a symlink directory:\n * symlinks would resolve against the container's own filesystem, where host\n * paths do not exist. A public channel appearing or changing visibility\n * changes the mount signature, so affected containers rebuild on their next\n * message with contents preserved.\n */\nfunction publicOfficeMounts(self: Office): ContainerMount[] {\n  const { workspace } = self;\n  const mounts: ContainerMount[] = [];\n  for (const record of listRegisteredOffices(workspace.stateDir)) {\n    const other = workspace.office(record);\n    if (other.key === self.key || !exists(other.dir)) continue;\n    if (resolveOfficeVisibility(other).visibility !== \"public\") continue;\n    mounts.push({ source: other.dir, target: `/workspace/public/${other.key}`, readOnly: true });\n  }\n  return mounts.toSorted((a, b) => a.target.localeCompare(b.target));\n}\n\n/**\n * The single policy seam for a managed office. It both materializes the\n * host-side roots and authorizes the prompt sources that describe them.\n * Every office gets the same shape (ADR 0008): its own directory read-write,\n * every other public office read-only under /workspace/public, and the\n * workspace-global knowledge read-write for public offices or read-only for\n * private ones. No layout mounts the workspace root.\n */\nexport function resolveWorkspaceProjection(office: Office): WorkspaceProjection {\n  const { workspace } = office;\n  const decision = resolveOfficeVisibility(office);\n  const readOnlyKnowledge = decision.visibility === \"private\";\n\n  assertDirectory(workspace.root, \"Host workspace root\");\n  office.ensure();\n  ensureRegularFile(workspace.memoryPath, \"Workspace memory\");\n  ensureDirectoryRoot(workspace.skillsDir, \"Workspace skills\");\n  const ro = { readOnly: true as const };\n  return {\n    ...decision,\n    mounts: [\n      { source: office.dir, target: `/workspace/${office.key}` },\n      {\n        source: workspace.memoryPath,\n        target: \"/workspace/MEMORY.md\",\n        ...(readOnlyKnowledge ? ro : {}),\n      },\n      {\n        source: workspace.skillsDir,\n        target: \"/workspace/skills\",\n        ...(readOnlyKnowledge ? ro : {}),\n      },\n      ...publicOfficeMounts(office),\n    ],\n    promptSources: {\n      conversationDir: office.dir,\n      conversationMemoryPath: office.memoryPath,\n      conversationSkillsDir: office.skillsDir,\n      globalMemoryPath: workspace.memoryPath,\n      globalSkillsDir: workspace.skillsDir,\n      ...(readOnlyKnowledge ? { globalKnowledgeReadOnly: true } : {}),\n    },\n  };\n}\n\nfunction ensureDirectoryRoot(path: string, label: string): void {\n  if (!exists(path)) {\n    mkdirSync(path, { recursive: true, mode: 0o700 });\n    return;\n  }\n  assertDirectory(path, label);\n}\n\nfunction ensureRegularFile(path: string, label: string): void {\n  if (!exists(path)) {\n    ensureDirExists(dirname(path));\n    writeFileSync(path, \"\", { mode: 0o600, flag: \"wx\" });\n    return;\n  }\n  let stats;\n  try {\n    stats = lstatSync(path);\n  } catch (err) {\n    throw new Error(`${label} cannot be inspected: ${path}`, { cause: err });\n  }\n  if (stats.isSymbolicLink() || !stats.isFile()) {\n    throw new Error(`${label} must be a regular non-symlink file: ${path}`);\n  }\n}\n\nfunction assertDirectory(path: string, label: string): void {\n  let stats;\n  try {\n    stats = lstatSync(path);\n  } catch (err) {\n    throw new Error(`${label} cannot be inspected: ${path}`, { cause: err });\n  }\n  if (stats.isSymbolicLink() || !stats.isDirectory()) {\n    throw new Error(`${label} must be a regular non-symlink directory: ${path}`);\n  }\n}\n\nfunction exists(path: string): boolean {\n  try {\n    lstatSync(path);\n    return true;\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return false;\n    throw err;\n  }\n}\n"]}

package/dist/office/types.d.ts

@@ -1,4 +1,4 @@
-import type { ContainerMount, OfficeAddress, OfficeKey, WorkspaceDoorPolicy, WorkspaceLayout, WorkspaceVisibility } from "../types.js";
+import type { ContainerMount, OfficeAddress, OfficeKey, WorkspaceVisibility } from "../types.js";
 export interface OfficeMigrationRunSummary {
     /** Raw ids whose directories moved to the office-key layout this run. */
     migrated: string[];
@@ -97,16 +97,15 @@ interface WorkspacePromptSources {
     conversationDir: string;
     conversationMemoryPath: string;
     conversationSkillsDir: string;
-    globalMemoryPath?: string;
-    globalSkillsDir?: string;
-    /** True when globalMemoryPath is mounted read-only (shared-support + private visibility). */
-    globalMemoryReadOnly?: boolean;
+    globalMemoryPath: string;
+    globalSkillsDir: string;
+    /** True for private offices: global MEMORY.md and skills are mounted read-only. */
+    globalKnowledgeReadOnly?: boolean;
 }
 export interface WorkspaceProjection {
-    doorPolicy: WorkspaceDoorPolicy;
-    layout: WorkspaceLayout;
-    /** Only meaningful for shared-support layout; "public" is the default and preserves prior read-write behavior. */
     visibility: WorkspaceVisibility;
+    /** Where the visibility came from, for operator display. */
+    source: "platform" | "override" | "unknown";
     mounts: ContainerMount[];
     promptSources: WorkspacePromptSources;
 }

package/dist/office/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/office/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,SAAS,EACT,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACpB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,yBAAyB;IACxC,yEAAyE;IACzE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,uEAAuE;IACvE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,wEAAwE;IACxE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iEAAiE;IACjE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gFAAgF;IAChF,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kDAAkD;IAClD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gFAAgF;IAChF,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,qCAAqC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,wDAAwD;IACxD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C;;;OAGG;IACH,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,8DAA8D;IAC9D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B;;;;;OAKG;IACH,MAAM,IAAI,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,IAAI,GAAG,UAAU,CAAC;AAE3F,UAAU,sBAAsB;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6FAA6F;IAC7F,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,mBAAmB,CAAC;IAChC,MAAM,EAAE,eAAe,CAAC;IACxB,kHAAkH;IAClH,UAAU,EAAE,mBAAmB,CAAC;IAChC,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,aAAa,EAAE,sBAAsB,CAAC;CACvC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/office/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEjG,MAAM,WAAW,yBAAyB;IACxC,yEAAyE;IACzE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,uEAAuE;IACvE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,wEAAwE;IACxE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iEAAiE;IACjE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gFAAgF;IAChF,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kDAAkD;IAClD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gFAAgF;IAChF,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,qCAAqC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,wDAAwD;IACxD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C;;;OAGG;IACH,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,8DAA8D;IAC9D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B;;;;;OAKG;IACH,MAAM,IAAI,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,IAAI,GAAG,UAAU,CAAC;AAE3F,UAAU,sBAAsB;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,mBAAmB,CAAC;IAChC,4DAA4D;IAC5D,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5C,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,aAAa,EAAE,sBAAsB,CAAC;CACvC"}