@jini-ai/daemon 0.1.0

package/dist/terminal-session.js

@@ -0,0 +1,316 @@
+/**
+ * @module terminal-session
+ *
+ * Interactive-terminal session manager: the `@jini-ai/daemon`-side wiring for
+ * OD's `apps/daemon/src/terminals.ts` + `apps/daemon/src/routes/terminal.ts`
+ * (see `ADS-memory/reports/proposals/PROP-http-route-packs-terminal-pty-2026-07-21.md`
+ * for the full design discussion this module implements a specific decision
+ * from). The generic ring-buffer/coalescing/SSE-agnostic session engine
+ * already exists as `@jini-ai/platform`'s `terminal.ts` (ported 2026-07-18,
+ * before this task) — this module does **not** reimplement that. It adds
+ * exactly the three things that engine deliberately left to a caller:
+ *
+ * 1. **A real `node-pty`-backed `PtySpawn`.** `@jini-ai/platform` intentionally
+ *    does not depend on `node-pty` (a native compiled addon); `@jini-ai/daemon`
+ *    does (see this package's `package.json` and `source-map.md`'s dated
+ *    section for why that dependency now lives here, not in `@jini-ai/http` or
+ *    `@jini-ai/platform`). {@link loadRealSpawnPty} is the real, dynamically
+ *    imported default the reference session manager below uses.
+ *
+ * 2. **Session-token gating.** The proposal's blocker was that a
+ *    *session-scoped* dangerous capability (once a shell is spawned, every
+ *    subsequent `stdin` write is arbitrary unaudited input for the
+ *    session's lifetime) does not fit `ToolExecutor`'s call-scoped shape.
+ *    The resolved design: `ToolExecutor.execute('terminal.create', ...)`
+ *    (via {@link createTerminalToolRegistrations}) is the one full
+ *    deny-by-default gated call — it authorizes *creating* a session.
+ *    Every subsequent `write`/`resize`/`kill`/`attach` call against that
+ *    session id is validated by a lighter, still-explicit check: this
+ *    module records which `Principal` created each session at `create()`
+ *    time, and every later call verifies the calling principal matches,
+ *    denying (as a `'not-found'` result, never a distinguishable "forbidden"
+ *    — see {@link checkOwnership}'s doc for why) otherwise. This is not
+ *    "the session id is unguessable therefore secure" — it is a real,
+ *    per-call identity check, independent of how hard the id is to guess.
+ *
+ * 3. **The kill/stdin/resize race fix.** OD's origin (and `@jini-ai/platform`'s
+ *    faithful port of it) has no lock between a `kill` and a concurrent
+ *    `write`/`resize` on the same session id: `kill()` only *requests* the
+ *    real OS process die (sends `SIGTERM`) — the session's `status` does not
+ *    flip to `'exited'` until the pty's own `onExit` callback fires,
+ *    asynchronously, once the real process actually dies. A `write`/`resize`
+ *    processed in that window still observes `status: 'running'` and still
+ *    reaches the real pty. This module closes that window with its own
+ *    immediate, lock-protected `killed` flag (see {@link runExclusive} and
+ *    the `write`/`resize`/`kill` implementations below): once a `kill` call
+ *    has run its own critical section, any `write`/`resize` queued behind it
+ *    for the same session id sees `killed: true` and is rejected — it never
+ *    depends on the real process having actually exited yet.
+ */
+import { createRequire } from 'node:module';
+import { createTerminalService, ensureSpawnHelperExecutable, spawnHelperCandidatePaths, } from '@jini-ai/platform';
+/** The `ToolRegistry` id `terminal.create` executes through — see module doc §2. */
+export const TERMINAL_CREATE_TOOL_ID = 'terminal.create';
+/**
+ * Deny-by-default `ToolPolicy` for `terminal.create`. Matching
+ * `db-ops.ts`'s `denyAllDaemonDbPolicy` / `@jini-ai/deploy`'s
+ * `denyAllDeployPublishPolicy` precedent: spawning an interactive shell is
+ * strictly more dangerous than any of those (it is not one bounded
+ * operation but an open-ended session), so a host must explicitly opt in
+ * with its own policy rather than getting a working shell spawner for free
+ * merely by registering the tool.
+ */
+export const denyAllTerminalCreatePolicy = {
+    authorize: () => 'deny',
+};
+const daemonRequire = createRequire(import.meta.url);
+/** Adapts a real `node-pty` `IPty` to `@jini-ai/platform`'s narrower `PtyProcess` port — explicit per-member mapping rather than relying on structural assignability, matching this package's established "explicit adapter, no implicit coercion" convention (e.g. `agent-executor.ts`'s `toStringEnvRecord`). */
+function toPtyProcess(pty) {
+    return {
+        onData: (cb) => {
+            pty.onData(cb);
+        },
+        onExit: (cb) => {
+            pty.onExit(cb);
+        },
+        write: (input) => pty.write(input),
+        resize: (cols, rows) => pty.resize(cols, rows),
+        kill: (signal) => pty.kill(signal),
+    };
+}
+/**
+ * The real, `node-pty`-backed {@link PtySpawn}. Dynamically imports
+ * `node-pty` (mirroring OD's origin `await import('node-pty')`, not a
+ * static top-level import) so a host process whose platform/environment
+ * lacks a usable `node-pty` addon can still boot — only an actual
+ * `terminal.create` call fails, cleanly, rather than crashing at
+ * module-eval time. Before the first spawn, repairs `node-pty`'s bundled
+ * `spawn-helper` binary's executable bit (pnpm unpacks it non-executable —
+ * see `@jini-ai/platform`'s `terminal.ts` module doc for the full story) via
+ * that package's own `spawnHelperCandidatePaths`/`ensureSpawnHelperExecutable`,
+ * but with the resolver anchored at **this** module
+ * (`createRequire(import.meta.url)` here, not `@jini-ai/platform`'s own
+ * default): `@jini-ai/platform` deliberately does not depend on `node-pty`, so
+ * its default `require.resolve('node-pty')` would not find the copy this
+ * package (`@jini-ai/daemon`) actually declares — this is exactly the
+ * resolver injection seam `spawnHelperCandidatePaths` was built for.
+ */
+export async function loadRealSpawnPty() {
+    ensureSpawnHelperExecutable(spawnHelperCandidatePaths({ resolve: (specifier) => daemonRequire.resolve(specifier) }));
+    const nodePty = await import('node-pty');
+    return (shell, args, options) => toPtyProcess(nodePty.spawn(shell, args, options));
+}
+function toSessionInfo(session, resourceRef) {
+    return {
+        id: session.id,
+        resourceRef,
+        cwd: session.cwd,
+        shell: session.shell,
+        cols: session.cols,
+        rows: session.rows,
+        status: session.status,
+        createdAt: session.createdAt,
+        updatedAt: session.updatedAt,
+        exitCode: session.exitCode,
+        signal: session.signal,
+    };
+}
+/**
+ * Serializes calls made for the same `id` through a per-id promise chain
+ * (matching this codebase's `oauth-tokens.ts` `withLock` precedent), so a
+ * `kill` and a concurrent `write`/`resize` against the same session never
+ * interleave — see module doc §3. Self-cleans `locks` once a chain becomes
+ * uncontended, so the map does not grow unbounded across a long-lived
+ * daemon process's many short-lived terminal sessions.
+ */
+async function runExclusive(locks, id, fn) {
+    const prior = locks.get(id) ?? Promise.resolve();
+    const task = prior.catch(() => undefined).then(fn);
+    locks.set(id, task);
+    try {
+        return await task;
+    }
+    finally {
+        if (locks.get(id) === task)
+            locks.delete(id);
+    }
+}
+/**
+ * Builds the reference `TerminalSessionManager`: an in-process wrapper
+ * around a `@jini-ai/platform` `TerminalService` adding session ownership,
+ * the kill/write/resize lock, and (via {@link createTerminalToolRegistrations})
+ * `ToolExecutor` gating for creation. See module doc for the full design.
+ */
+export function createTerminalSessionManager(options = {}) {
+    const terminalService = options.terminalService ??
+        createTerminalService({
+            loadSpawnPty: options.loadSpawnPty ?? loadRealSpawnPty,
+            ...(options.maxEvents !== undefined ? { maxEvents: options.maxEvents } : {}),
+            ...(options.maxBufferBytes !== undefined ? { maxBufferBytes: options.maxBufferBytes } : {}),
+            ...(options.exitTailBytes !== undefined ? { exitTailBytes: options.exitTailBytes } : {}),
+            ...(options.flushIntervalMs !== undefined ? { flushIntervalMs: options.flushIntervalMs } : {}),
+            ...(options.flushThresholdBytes !== undefined ? { flushThresholdBytes: options.flushThresholdBytes } : {}),
+            ...(options.ttlMs !== undefined ? { ttlMs: options.ttlMs } : {}),
+            ...(options.shutdownGraceMs !== undefined ? { shutdownGraceMs: options.shutdownGraceMs } : {}),
+        });
+    const metadata = new Map();
+    const locks = new Map();
+    /**
+     * Looks up `id`, pruning this module's own metadata if the underlying
+     * `@jini-ai/platform` service has already reaped it (past its TTL) — bounds
+     * `metadata`'s growth to "until the next access attempt after expiry"
+     * rather than tracking every session forever.
+     */
+    function checkOwnership(principal, id) {
+        const session = terminalService.get(id);
+        if (!session) {
+            metadata.delete(id);
+            return null;
+        }
+        const meta = metadata.get(id);
+        // A session with no metadata (should not happen for anything created through this manager)
+        // or a mismatched principal is reported identically to "does not exist" — never a
+        // distinguishable "forbidden" — so this surface cannot be used to enumerate another
+        // principal's session ids. Matches OD's own `resolveSession`: a foreign session id was
+        // already a 404, not a 403.
+        if (!meta || meta.principalId !== principal.id)
+            return null;
+        return { session, meta };
+    }
+    async function create(principal, createOptions) {
+        const session = await terminalService.create({
+            cwd: createOptions.cwd,
+            ...(createOptions.cols !== undefined ? { cols: createOptions.cols } : {}),
+            ...(createOptions.rows !== undefined ? { rows: createOptions.rows } : {}),
+            ...(createOptions.shell !== undefined ? { shell: createOptions.shell } : {}),
+        });
+        const resourceRef = createOptions.resourceRef ?? null;
+        metadata.set(session.id, { principalId: principal.id, resourceRef, killed: false });
+        return toSessionInfo(session, resourceRef);
+    }
+    function get(principal, id) {
+        const found = checkOwnership(principal, id);
+        return found ? { status: 'ok', session: toSessionInfo(found.session, found.meta.resourceRef) } : { status: 'not-found' };
+    }
+    function list(principal, filter = {}) {
+        const result = [];
+        for (const session of terminalService.list()) {
+            const meta = metadata.get(session.id);
+            if (!meta || meta.principalId !== principal.id)
+                continue;
+            if (filter.resourceRef !== undefined && meta.resourceRef !== filter.resourceRef)
+                continue;
+            result.push(toSessionInfo(session, meta.resourceRef));
+        }
+        return result;
+    }
+    /** Snapshots the current session (or null if it has meanwhile vanished) for an action result — shared by `write`/`resize`/`kill`. */
+    function currentSnapshot(id, resourceRef) {
+        const session = terminalService.get(id);
+        return session ? toSessionInfo(session, resourceRef) : null;
+    }
+    async function write(principal, id, input) {
+        const found = checkOwnership(principal, id);
+        if (!found)
+            return { status: 'not-found' };
+        return runExclusive(locks, id, () => {
+            // Re-read (not reuse `found.meta`) so a `kill` that ran its own critical section between
+            // this call's ownership check and lock acquisition is observed — see module doc §3.
+            const meta = metadata.get(id);
+            if (!meta || meta.killed) {
+                return { status: 'ok', ok: false, session: currentSnapshot(id, meta?.resourceRef ?? null) };
+            }
+            const ok = terminalService.write(id, input);
+            return { status: 'ok', ok, session: currentSnapshot(id, meta.resourceRef) };
+        });
+    }
+    async function resize(principal, id, cols, rows) {
+        const found = checkOwnership(principal, id);
+        if (!found)
+            return { status: 'not-found' };
+        return runExclusive(locks, id, () => {
+            const meta = metadata.get(id);
+            if (!meta || meta.killed) {
+                return { status: 'ok', ok: false, session: currentSnapshot(id, meta?.resourceRef ?? null) };
+            }
+            const ok = terminalService.resize(id, cols, rows);
+            return { status: 'ok', ok, session: currentSnapshot(id, meta.resourceRef) };
+        });
+    }
+    async function kill(principal, id, signal) {
+        const found = checkOwnership(principal, id);
+        if (!found)
+            return { status: 'not-found' };
+        return runExclusive(locks, id, () => {
+            const meta = metadata.get(id);
+            // Set the flag before delegating, still inside the lock: any write()/resize() queued
+            // behind this call re-reads `meta.killed` once it acquires the lock (see those functions
+            // above), so it observes `true` regardless of whether the real OS process has exited yet.
+            if (meta)
+                meta.killed = true;
+            const ok = terminalService.kill(id, signal);
+            return { status: 'ok', ok, session: currentSnapshot(id, meta?.resourceRef ?? null) };
+        });
+    }
+    function attach(principal, id, lastEventId, sink) {
+        const found = checkOwnership(principal, id);
+        if (!found)
+            return 'not-found';
+        return terminalService.attach(id, lastEventId, sink);
+    }
+    function detach(id, sink) {
+        terminalService.detach(id, sink);
+    }
+    async function shutdownActive(shutdownOptions) {
+        await terminalService.shutdownActive(shutdownOptions);
+    }
+    return { create, get, list, write, resize, kill, attach, detach, shutdownActive };
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * Builds the `{descriptor, handler, policy}` triple a host registers
+ * against `@jini-ai/core`'s `ToolRegistry` so `terminal.create` becomes
+ * reachable only via `ToolExecutor.execute(principal, run,
+ * 'terminal.create', input)` — never by a route calling
+ * `manager.create()` directly, which would bypass authorization and the
+ * audit trail (matching `db-ops.ts`'s `createDaemonDbToolRegistrations`
+ * precedent).
+ */
+export function createTerminalToolRegistrations(options) {
+    const { manager, policy = denyAllTerminalCreatePolicy, requiresConfirmation, timeoutMs } = options;
+    const descriptorExtras = {
+        ...(requiresConfirmation !== undefined ? { requiresConfirmation } : {}),
+        ...(timeoutMs !== undefined ? { timeoutMs } : {}),
+    };
+    return {
+        create: {
+            descriptor: {
+                id: TERMINAL_CREATE_TOOL_ID,
+                description: 'Spawns an interactive shell session (a real PTY) rooted at a resolved working directory and returns its session id. Every subsequent write/resize/kill against that id is validated separately (see terminal-session.ts) rather than re-gated through this tool.',
+                ...descriptorExtras,
+            },
+            policy,
+            handler: async (ctx) => {
+                const record = isRecord(ctx.input) ? ctx.input : {};
+                const cwd = record.cwd;
+                if (typeof cwd !== 'string' || cwd.length === 0) {
+                    throw new Error('terminal.create: input.cwd must be a non-empty string');
+                }
+                const resourceRef = typeof record.resourceRef === 'string' ? record.resourceRef : null;
+                const cols = typeof record.cols === 'number' ? record.cols : undefined;
+                const rows = typeof record.rows === 'number' ? record.rows : undefined;
+                const shell = typeof record.shell === 'string' ? record.shell : null;
+                return manager.create(ctx.principal, {
+                    resourceRef,
+                    cwd,
+                    ...(cols !== undefined ? { cols } : {}),
+                    ...(rows !== undefined ? { rows } : {}),
+                    shell,
+                });
+            },
+        },
+    };
+}
+//# sourceMappingURL=terminal-session.js.map

package/dist/terminal-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-session.js","sourceRoot":"","sources":["../src/terminal-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,yBAAyB,GAO1B,MAAM,mBAAmB,CAAC;AAI3B,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAe;IACrD,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM;CACxB,CAAC;AAEF,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErD,mTAAmT;AACnT,SAAS,YAAY,CAAC,GAAS;IAC7B,OAAO;QACL,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;YACb,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;YACb,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAClC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;QAC9C,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;KACnC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,2BAA2B,CACzB,yBAAyB,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CACxF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO,CAAC,KAAa,EAAE,IAAc,EAAE,OAAwB,EAAE,EAAE,CACjE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACtD,CAAC;AAiBD,SAAS,aAAa,CAAC,OAAgC,EAAE,WAA0B;IACjF,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,WAAW;QACX,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAsED;;;;;;;GAOG;AACH,KAAK,UAAU,YAAY,CAAI,KAAoC,EAAE,EAAU,EAAE,EAAW;IAC1F,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnD,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;YAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAA+C,EAAE;IAEjD,MAAM,eAAe,GACnB,OAAO,CAAC,eAAe;QACvB,qBAAqB,CAAC;YACpB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,gBAAgB;YACtD,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1G,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/F,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAElD;;;;;OAKG;IACH,SAAS,cAAc,CACrB,SAAoB,EACpB,EAAU;QAEV,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,2FAA2F;QAC3F,kFAAkF;QAClF,oFAAoF;QACpF,uFAAuF;QACvF,4BAA4B;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,SAAoB,EAAE,aAA2C;QACrF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC;YAC3C,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,aAAa,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,IAAI,IAAI,CAAC;QACtD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,OAAO,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED,SAAS,GAAG,CAAC,SAAoB,EAAE,EAAU;QAC3C,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC3H,CAAC;IAED,SAAS,IAAI,CAAC,SAAoB,EAAE,SAAoC,EAAE;QACxE,MAAM,MAAM,GAA0B,EAAE,CAAC;QACzC,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE;gBAAE,SAAS;YACzD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBAAE,SAAS;YAC1F,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qIAAqI;IACrI,SAAS,eAAe,CAAC,EAAU,EAAE,WAA0B;QAC7D,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAED,KAAK,UAAU,KAAK,CAAC,SAAoB,EAAE,EAAU,EAAE,KAAa;QAClE,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC3C,OAAO,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE;YAClC,yFAAyF;YACzF,oFAAoF;YACpF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACzB,OAAO,EAAE,MAAM,EAAE,IAAa,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC,EAAE,CAAC;YACvG,CAAC;YACD,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,IAAa,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACvF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,SAAoB,EAAE,EAAU,EAAE,IAAY,EAAE,IAAY;QAChF,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC3C,OAAO,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE;YAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACzB,OAAO,EAAE,MAAM,EAAE,IAAa,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC,EAAE,CAAC;YACvG,CAAC;YACD,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,IAAa,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACvF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,SAAoB,EAAE,EAAU,EAAE,MAAe;QACnE,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC3C,OAAO,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE;YAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9B,qFAAqF;YACrF,yFAAyF;YACzF,0FAA0F;YAC1F,IAAI,IAAI;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAC7B,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,IAAa,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC,EAAE,CAAC;QAChG,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,MAAM,CAAC,SAAoB,EAAE,EAAU,EAAE,WAAmB,EAAE,IAAqB;QAC1F,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,WAAW,CAAC;QAC/B,OAAO,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,SAAS,MAAM,CAAC,EAAU,EAAE,IAAqB;QAC/C,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,eAAsC;QAClE,MAAM,eAAe,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AACpF,CAAC;AAcD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAA+C;IAE/C,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,2BAA2B,EAAE,oBAAoB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACnG,MAAM,gBAAgB,GAAG;QACvB,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;IAEF,OAAO;QACL,MAAM,EAAE;YACN,UAAU,EAAE;gBACV,EAAE,EAAE,uBAAuB;gBAC3B,WAAW,EACT,kQAAkQ;gBACpQ,GAAG,gBAAgB;aACpB;YACD,MAAM;YACN,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACrB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;gBACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBAC3E,CAAC;gBACD,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;gBACvF,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvE,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvE,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;gBACrE,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE;oBACnC,WAAW;oBACX,GAAG;oBACH,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/tokens.d.ts

@@ -0,0 +1,9 @@
+import type { EventLog } from './event-log.js';
+import type { RunLifecycle } from './run-lifecycle.js';
+import type { ToolExecutor } from './tool-executor.js';
+import type { AgentExecutor } from './agent-executor.js';
+export declare const RunLifecycleToken: import("@jini-ai/core").Token<RunLifecycle, string>;
+export declare const EventLogToken: import("@jini-ai/core").Token<EventLog, string>;
+export declare const ToolExecutorToken: import("@jini-ai/core").Token<ToolExecutor, string>;
+export declare const AgentExecutorToken: import("@jini-ai/core").Token<AgentExecutor, string>;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAO,MAAM,iBAAiB,qDAA2C,CAAC;AAC1E,eAAO,MAAM,aAAa,iDAAmC,CAAC;AAC9D,eAAO,MAAM,iBAAiB,qDAA2C,CAAC;AAC1E,eAAO,MAAM,kBAAkB,sDAA6C,CAAC"}

package/dist/tokens.js

@@ -0,0 +1,19 @@
+/**
+ * `@jini-ai/core` DI tokens for this package's kernel services, per
+ * extraction-plan §2.2 ("Kernel exports only kernel-service tokens... every
+ * other token lives in its owning feature package") — `RunLifecycle`,
+ * `EventLog`, and `ToolExecutor` are themselves kernel nouns (§2.1), so
+ * their tokens are defined here, alongside the services, rather than in
+ * `@jini-ai/core` itself. A pack composes against them the same way
+ * `packages/core/src/index.test.ts` demonstrates for its own example tokens.
+ *
+ * `ArtifactStoreToken` used to live here too — moved to `@jini-ai/artifacts`'s own
+ * `tokens.ts` on 2026-07-19 (see that file's doc comment) after the swarm-consensus
+ * architecture debate found it violated §2.1's "NO ... artifacts ... in the kernel" rule.
+ */
+import { token } from '@jini-ai/core';
+export const RunLifecycleToken = token('jini.runLifecycle');
+export const EventLogToken = token('jini.eventLog');
+export const ToolExecutorToken = token('jini.toolExecutor');
+export const AgentExecutorToken = token('jini.agentExecutor');
+//# sourceMappingURL=tokens.js.map

package/dist/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAMtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAe,mBAAmB,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAW,eAAe,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAe,mBAAmB,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAgB,oBAAoB,CAAC,CAAC"}

package/dist/tool-executor.d.ts

@@ -0,0 +1,97 @@
+import type { AuthorizationDecision, Principal, RunRef, ToolDescriptor, ToolRegistry } from '@jini-ai/core';
+export type ConfirmationDecision = 'confirm' | 'deny';
+export interface ToolAuthorizationRequest {
+    readonly principal: Principal;
+    readonly run: RunRef;
+    readonly tool: ToolDescriptor;
+    readonly input: unknown;
+}
+export interface ToolConfirmationRequest {
+    readonly executionId: string;
+    readonly principal: Principal;
+    readonly run: RunRef;
+    readonly tool: ToolDescriptor;
+    readonly input: unknown;
+}
+/**
+ * The transport-supplied seam for the two touchpoints a headless kernel
+ * cannot render itself. Both are optional: a tool whose `ToolPolicy`
+ * always resolves definitively needs no `onAuthorize`, and a tool with
+ * `requiresConfirmation` unset never triggers `onConfirm`.
+ */
+export interface ExecutionDelegate {
+    /**
+     * Consulted only when the tool's own `ToolPolicy.authorize` already
+     * returned `'allow'` — an additional transport-level veto (e.g. "does
+     * this session actually have an active grant for this tool"), not a
+     * replacement for the policy. Returning `'deny'` (or a Promise resolving
+     * to `'deny'`) overrides an `'allow'` from the policy; omitting
+     * `onAuthorize` entirely leaves the policy's decision as final.
+     */
+    onAuthorize?(request: ToolAuthorizationRequest): AuthorizationDecision | Promise<AuthorizationDecision>;
+    /**
+     * Notified when a tool requiring confirmation is about to run. Return a
+     * decision (sync value or Promise) to supply it inline; return/resolve
+     * `undefined` — including simply omitting `onConfirm` — to signal "I'll
+     * call `resumeConfirmation` later" instead. Note the synchronous-`void`
+     * case is what actually parks the wait: an `async` implementation that
+     * resolves to `undefined` is treated as "the decision is `undefined`"
+     * (denied) rather than "pending" — an implementation that wants the
+     * resumable path should return a bare `undefined`, not a resolved
+     * Promise of one. See the module doc for why.
+     */
+    onConfirm?(request: ToolConfirmationRequest): ConfirmationDecision | Promise<ConfirmationDecision> | void;
+}
+export type ToolExecutionPhase = 'requested' | 'authorized' | 'denied' | 'confirmed' | 'confirmation-denied' | 'started' | 'completed' | 'failed' | 'timed-out' | 'cancelled';
+export interface ToolExecutionAuditEvent {
+    readonly phase: ToolExecutionPhase;
+    readonly at: number;
+    readonly detail?: string;
+}
+export interface ToolExecutionAuditRecord {
+    readonly executionId: string;
+    readonly toolId: string;
+    readonly principalId: string;
+    readonly runId: string;
+    readonly events: readonly ToolExecutionAuditEvent[];
+}
+export type ToolExecutionStatus = 'completed' | 'denied' | 'confirmation-denied' | 'timed-out' | 'cancelled' | 'failed';
+export interface ToolExecutionResult {
+    readonly executionId: string;
+    readonly status: ToolExecutionStatus;
+    readonly output?: unknown;
+    readonly truncated?: boolean;
+    readonly error?: string;
+}
+export interface ToolExecutor {
+    /** @throws If `toolId` isn't registered — a routing/programming error, distinct from the denial/confirmation-denial states `ToolExecutionResult.status` covers. */
+    execute(principal: Principal, run: RunRef, toolId: string, input: unknown, signal?: AbortSignal): Promise<ToolExecutionResult>;
+    /** @throws If `executionId` has no confirmation currently pending (already resumed, never required one, or unknown). */
+    resumeConfirmation(executionId: string, decision: ConfirmationDecision): void;
+    /** Aborts an in-flight handler, or resolves a still-pending confirmation as denied. No-op if `executionId` is already terminal or unknown. */
+    cancel(executionId: string): void;
+    getAuditRecord(executionId: string): ToolExecutionAuditRecord | null;
+}
+export interface CreateToolExecutorOptions {
+    readonly registry: ToolRegistry;
+    readonly delegate?: ExecutionDelegate;
+    /** Injectable clock for audit timestamps — defaults to `Date.now`. Test-only hook. */
+    readonly now?: () => number;
+}
+/**
+ * Creates the `ToolExecutor` reference implementation: an in-process,
+ * in-memory gate over a `ToolRegistry`. No persistence — a real host that
+ * needs audit records to survive a restart layers a durable store behind
+ * `getAuditRecord`/an append hook later; out of this task's scope (see
+ * `source-map.md`).
+ *
+ * @param options.registry - The `ToolRegistry` to resolve `{descriptor,
+ * handler, policy}` triples from, via `@jini-ai/core/internal`'s
+ * `getToolRegistration` — the one and only caller of that internal export.
+ * @param options.delegate - Transport-supplied authorize/confirm UI seam;
+ * omit for a headless caller whose tools never need interactive gating.
+ * @complexity `execute` is O(1) plus the handler's own cost; `resumeConfirmation`/`cancel`/`getAuditRecord` are O(1) map lookups.
+ * @overallScore 100/100
+ */
+export declare function createToolExecutor(options: CreateToolExecutorOptions): ToolExecutor;
+//# sourceMappingURL=tool-executor.d.ts.map

package/dist/tool-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-executor.d.ts","sourceRoot":"","sources":["../src/tool-executor.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EACV,qBAAqB,EACrB,SAAS,EACT,MAAM,EACN,cAAc,EACd,YAAY,EACb,MAAM,eAAe,CAAC;AAGvB,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;;;OAOG;IACH,WAAW,CAAC,CAAC,OAAO,EAAE,wBAAwB,GAAG,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACxG;;;;;;;;;;OAUG;IACH,SAAS,CAAC,CAAC,OAAO,EAAE,uBAAuB,GAAG,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC;CAC3G;AAED,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,YAAY,GACZ,QAAQ,GACR,WAAW,GACX,qBAAqB,GACrB,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACrD;AAED,MAAM,MAAM,mBAAmB,GAC3B,WAAW,GACX,QAAQ,GACR,qBAAqB,GACrB,WAAW,GACX,WAAW,GACX,QAAQ,CAAC;AAEb,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,mKAAmK;IACnK,OAAO,CACL,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChC,wHAAwH;IACxH,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC9E,8IAA8I;IAC9I,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAAC;CACtE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IACtC,sFAAsF;IACtF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AASD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,YAAY,CAuJnF"}