@ken-jo/agent-connector 0.3.1 → 0.4.0

package/dist/chunk-ZAM4M7LI.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/telemetry/measure.ts","../src/runtime/hook-entrypoint.ts","../src/runtime/serve.ts","../src/telemetry/calibration.ts","../src/telemetry/proxy.ts","../src/runtime/usage-event.ts"],"sourcesContent":["/**\n * telemetry/measure — pure measurement helpers over a single MCP tool call.\n *\n * The framework tokenizes its OWN bytes: the tool-call arguments going in, the\n * tool result coming out, and the fixed tool-definition schemas. These helpers\n * turn those into {@link TokenCount}s using the default {@link Tokenizer}.\n *\n * Honesty rules:\n *   • Binary modalities (image/audio/resource blobs) are NOT tokenized — base64\n *     would massively over-count. Each gets a flat per-modality estimate, and\n *     because that estimate is itself an approximation the combined confidence\n *     is pulled down to at least \"tokenizer-approx\".\n *   • When combining several counts, the reported confidence is the WORST\n *     (least-confident) of the inputs — never report \"exact\" for a mixed bag.\n *\n * Everything here is pure: no IO, no mutation of inputs.\n */\n\nimport { getTokenizer } from \"./tokenizer.js\";\nimport { worstConfidence } from \"./types.js\";\nimport type {\n  ConfidenceSource,\n  ModelFamily,\n  TokenCount,\n  Tokenizer,\n} from \"./types.js\";\n\n/** Per-call measurement: tokens in, tokens out, and combined confidence. */\nexport interface ToolCallMeasurement {\n  inputTokens: number;\n  outputTokens: number;\n  source: ConfidenceSource;\n}\n\n/**\n * Flat token estimates for non-text content blocks. These mirror common host\n * accounting (an image tile is roughly ~85 tokens at low detail); they are\n * deliberately coarse — we never tokenize the underlying base64 payload.\n */\nconst MODALITY_ESTIMATE: Record<string, number> = {\n  image: 85,\n  audio: 85,\n  resource: 85,\n};\n/** Fallback estimate for an unknown non-text block type. */\nconst UNKNOWN_BLOCK_ESTIMATE = 85;\n\n// Confidence ordering + the worst-of comparison live in ./types (the single\n// source of truth, imported as `worstConfidence` above). Re-exported here so\n// callers that already import `worstConfidence` from this module keep working\n// as a new ConfidenceSource value (e.g. tokenizer-calibrated) slots into the\n// shared ordering.\nexport { worstConfidence };\n\n/** Reduce a list of sources to the single worst (least-confident) one. */\nfunction combineSources(sources: readonly ConfidenceSource[]): ConfidenceSource {\n  // Default to the most-confident floor so an empty list combines to the only\n  // other source it is paired with; in practice callers always pass ≥1 source.\n  let worst: ConfidenceSource = \"host-native\";\n  for (const s of sources) worst = worstConfidence(worst, s);\n  return worst;\n}\n\n// ── Structural shapes we read from a tool result (kept local + narrow) ───────\n\n/** A text content block: `{ type: \"text\", text: \"...\" }`. */\ninterface TextBlock {\n  type: \"text\";\n  text?: unknown;\n}\n/** Any content block; only text blocks expose a `text` field we tokenize. */\ninterface ContentBlock {\n  type?: unknown;\n  text?: unknown;\n}\n/** The portion of an MCP tool result we measure. */\ninterface ToolResultLike {\n  content?: unknown;\n  structuredContent?: unknown;\n}\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null;\n}\n\nfunction isTextBlock(block: ContentBlock): block is TextBlock {\n  return block.type === \"text\";\n}\n\n/**\n * Measure one tool call.\n *\n * Input  = canonical JSON of `args`.\n * Output = tokens over the TEXTUAL parts of `result`:\n *   • If `result.content` is an array of blocks, text blocks are tokenized via\n *     their `text` field and non-text blocks add a flat per-modality estimate\n *     (no base64 tokenization).\n *   • `result.structuredContent`, when present, is tokenized as canonical JSON.\n *   • Anything else (string / arbitrary object) is tokenized as canonical JSON.\n *\n * The reported `source` is the worst of the input and output sources.\n */\nexport function measureToolCall(\n  args: unknown,\n  result: unknown,\n  family: ModelFamily,\n  tok: Tokenizer = getTokenizer(),\n): ToolCallMeasurement {\n  const input = tok.countValue(args, family);\n  const output = measureResult(result, family, tok);\n  return {\n    inputTokens: input.tokens,\n    outputTokens: output.tokens,\n    source: worstConfidence(input.source, output.source),\n  };\n}\n\n/** Tokenize the textual + structured parts of a tool result. */\nfunction measureResult(\n  result: unknown,\n  family: ModelFamily,\n  tok: Tokenizer,\n): TokenCount {\n  if (!isObject(result)) {\n    // Plain string or scalar result — count its canonical form directly.\n    return tok.countValue(result, family);\n  }\n\n  const res = result as ToolResultLike;\n  const sources: ConfidenceSource[] = [];\n  let tokens = 0;\n\n  if (Array.isArray(res.content)) {\n    for (const raw of res.content) {\n      if (!isObject(raw)) continue;\n      const block = raw as ContentBlock;\n      if (isTextBlock(block)) {\n        const text = typeof block.text === \"string\" ? block.text : \"\";\n        const c = tok.count(text, family);\n        tokens += c.tokens;\n        sources.push(c.source);\n      } else {\n        // image / audio / resource / unknown → flat estimate, no base64 BPE.\n        const key = typeof block.type === \"string\" ? block.type : \"\";\n        tokens += MODALITY_ESTIMATE[key] ?? UNKNOWN_BLOCK_ESTIMATE;\n        // A flat estimate is an approximation, never \"exact\".\n        sources.push(\"tokenizer-approx\");\n      }\n    }\n  } else if (res.content !== undefined) {\n    // content present but not an array (e.g. a bare string) → count it whole.\n    const c = tok.countValue(res.content, family);\n    tokens += c.tokens;\n    sources.push(c.source);\n  }\n\n  if (res.structuredContent !== undefined) {\n    const c = tok.countValue(res.structuredContent, family);\n    tokens += c.tokens;\n    sources.push(c.source);\n  }\n\n  // Nothing measurable found → count the whole object as a fallback so we never\n  // silently report zero for a non-empty result.\n  if (sources.length === 0) {\n    return tok.countValue(result, family);\n  }\n\n  return { tokens, source: combineSources(sources) };\n}\n\n/**\n * Measure the fixed tool-definition overhead: tokenize the JSON of the entire\n * `tools/list` array once. `tools` is the raw array of tool descriptors as the\n * server advertises them (shape is host/SDK-specific, so it is treated as\n * opaque JSON here).\n */\nexport function measureToolDefs(\n  tools: readonly unknown[],\n  family: ModelFamily,\n  tok: Tokenizer = getTokenizer(),\n): TokenCount {\n  return tok.countValue(tools, family);\n}\n\n/**\n * Measure one RUNTIME hook dispatch (the new `hook` developer-axis surface).\n *\n * Input  = canonical JSON of the inbound normalized event payload the handler\n *          reads (the host-provided fields: toolInput / prompt / raw / etc.).\n * Output = canonical JSON of what the handler RETURNS that becomes context or a\n *          decision the host consumes (additionalContext / updatedInput / reason\n *          and the rest of the normalized {@link HookResponse}).\n *\n * Uses the SAME tokenizer + worst-of confidence combination as the proxy. Pure:\n * no IO, no mutation. The two values are tokenized whole (a hook payload has no\n * binary content blocks to special-case, unlike a tool result).\n */\nexport function measureHook(\n  eventPayload: unknown,\n  handlerReturn: unknown,\n  family: ModelFamily,\n  tok: Tokenizer = getTokenizer(),\n): ToolCallMeasurement {\n  const input = tok.countValue(eventPayload, family);\n  const output = tok.countValue(handlerReturn, family);\n  return {\n    inputTokens: input.tokens,\n    outputTokens: output.tokens,\n    source: worstConfidence(input.source, output.source),\n  };\n}\n","/**\n * runtime/hook-entrypoint — the universal json-stdio hook dispatcher.\n *\n * Every json-stdio host points its hook config at the single stable home binary\n * (`<homeBin> hook <platformId> <event> --connector <id>`, built by\n * core/spawn.buildHomeBinHookCommand). The CLI reads stdin and calls\n * {@link runHook} with the parsed flags + the raw stdin string. This module:\n *\n *   1. Loads the registered connector (live handlers) and the host adapter.\n *   2. Parses the host's stdin payload into a normalized event via the adapter.\n *   3. Finds the connector's handler for the event, honoring the tool matcher.\n *   4. Runs the handler, normalizes its return, and formats the adapter's native\n *      reply.\n *\n * Fail-open is the safety contract: ANY error degrades to exit 0 (\"allow\") so a\n * framework or handler bug can never wedge a host's tool call — EXCEPT when the\n * event is PreToolUse or PermissionRequest and the handler explicitly denied,\n * in which case the deny (a deliberate security decision) is preserved rather\n * than swallowed.\n */\n\nimport type {\n  HookEventName,\n  HookResponse,\n  NativeHookDef,\n  NativeHookEvent,\n  PlatformId,\n  ResolvedConnector,\n} from \"../core/types.js\";\nimport { log } from \"../core/logger.js\";\nimport { loadRegisteredConnector } from \"../core/load-connector.js\";\nimport { loadAdapter, REGISTERED_PLATFORM_IDS } from \"../adapters/registry.js\";\nimport type { NormalizedEvent } from \"../adapters/spi.js\";\nimport { projectIdentity } from \"../core/paths.js\";\nimport { measureHook } from \"../telemetry/measure.js\";\nimport { openStore, newRecordId } from \"../telemetry/store.js\";\nimport { getTokenizer, inferModelFamily } from \"../telemetry/tokenizer.js\";\n\n/** Flags + stdin the CLI hands to {@link runHook}. */\nexport interface RunHookOptions {\n  /** Host platform id from the hook command (`hook <platformId> ...`). */\n  platformId: string;\n  /** Canonical lifecycle event name from the hook command. */\n  event: HookEventName;\n  /** Connector id from `--connector <id>`. */\n  connectorId: string;\n  /** Raw stdin payload (host-native JSON). Empty string is tolerated → `{}`. */\n  stdin: string;\n}\n\n/** Process-level result the CLI translates into exit code + stdout/stderr. */\nexport interface RunHookResult {\n  exitCode: number;\n  stdout?: string;\n  stderr?: string;\n}\n\n/** A pass-through \"allow\" reply with exit 0 and no payload. */\nconst ALLOW: RunHookResult = { exitCode: 0 };\n\n/**\n * The string a connector matcher filters on, when the event carries one:\n * tool events (PreToolUse / PostToolUse / PermissionRequest /\n * PostToolUseFailure) expose `toolName`; subagent events expose `agentType`.\n * Returns undefined when the event has neither (no filtering) — including a\n * SubagentStop arriving WITHOUT agent_type, which some hosts fail to populate;\n * filtering out such an event would silently drop a real stop, so we run the\n * handler instead (fail-open).\n */\nfunction eventMatcherSubject(evt: NormalizedEvent): string | undefined {\n  const name = (evt as { toolName?: unknown }).toolName;\n  if (typeof name === \"string\") return name;\n  const agentType = (evt as { agentType?: unknown }).agentType;\n  if (typeof agentType === \"string\") return agentType;\n  return undefined;\n}\n\n/**\n * Tolerantly parse the host's stdin payload. Empty / whitespace-only input is a\n * legitimate \"no payload\" signal from some hosts and resolves to `{}`. Malformed\n * JSON also degrades to `{}` rather than throwing — fail-open is the contract.\n */\nfunction parseStdin(stdin: string): unknown {\n  const trimmed = stdin.trim();\n  if (trimmed === \"\") return {};\n  try {\n    return JSON.parse(trimmed);\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Compile the connector's matcher (a regex string) for a tool event. A missing\n * or empty matcher matches everything (returns null → no filtering). An invalid\n * regex degrades to \"match everything\" so a typo never blocks tool calls.\n */\nfunction compileMatcher(matcher: string | undefined): RegExp | null {\n  if (!matcher || matcher === \"\") return null;\n  try {\n    return new RegExp(matcher);\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Normalize a handler return into a concrete HookResponse. A void/non-object\n * return becomes `{}` — NO decision — which every adapter formats as\n * pass-through allow (`response.decision ?? \"allow\"`). Deliberately NOT\n * `{decision:\"allow\"}`: on PermissionRequest an explicit \"allow\" is an ACTIVE\n * grant that suppresses the host's permission dialog, and a handler that\n * returns nothing must fall through to the dialog, never silently grant.\n */\nfunction normalizeResponse(value: HookResponse | void): HookResponse {\n  if (value == null || typeof value !== \"object\") return {};\n  return value;\n}\n\n/**\n * Resolve the host platform to stamp on a hook telemetry row. Mirrors the serve\n * `--host` plumbing: the install-target platform id is baked into the hook\n * command (`hook <platformId> <event> …`) so `opts.platformId` is authoritative,\n * but an explicit env override (AGENT_CONNECTOR_HOST) wins when it names a known\n * platform. Falls back to the event's adapter-stamped hostPlatform, then\n * \"unknown\" — never throws.\n */\nfunction resolveHookHostPlatform(\n  platformId: string,\n  evt: NormalizedEvent | NativeHookEvent,\n): PlatformId {\n  const override = process.env.AGENT_CONNECTOR_HOST;\n  if (\n    override !== undefined &&\n    REGISTERED_PLATFORM_IDS.has(override as PlatformId)\n  ) {\n    return override as PlatformId;\n  }\n  if (REGISTERED_PLATFORM_IDS.has(platformId as PlatformId)) {\n    return platformId as PlatformId;\n  }\n  const fromEvent = (evt as { hostPlatform?: unknown }).hostPlatform;\n  if (\n    typeof fromEvent === \"string\" &&\n    REGISTERED_PLATFORM_IDS.has(fromEvent as PlatformId)\n  ) {\n    return fromEvent as PlatformId;\n  }\n  return \"unknown\";\n}\n\n/**\n * Record one RUNTIME hook dispatch as a `hook` developer-axis telemetry row.\n *\n * input  = the inbound event payload the handler reads (normalized event, or\n *          the {@link NativeHookEvent} envelope for native passthrough hooks);\n * output = what the handler returned (a normalized {@link HookResponse}, or the\n *          verbatim native reply object). Tokenized with the SAME tokenizer the\n *          proxy uses. For a native hook `opts.event` is the host-native name.\n *\n * MUST be fail-open (the hook runtime is fail-open by contract): any error here\n * is swallowed so a measurement bug can NEVER break a host's hook. Honors the\n * AGENT_CONNECTOR_TELEMETRY=0 kill switch (skips entirely; the store's append is\n * already a no-op under it, but we also skip the tokenize work).\n */\nfunction recordHookTelemetry(\n  opts: { platformId: string; event: string; connectorId: string },\n  connector: ResolvedConnector,\n  evt: NormalizedEvent | NativeHookEvent,\n  response: unknown,\n): void {\n  if (process.env.AGENT_CONNECTOR_TELEMETRY === \"0\") return;\n  try {\n    const family = inferModelFamily(\"\", connector.telemetry.modelFamilyHint);\n    const measurement = measureHook(evt, response, family, getTokenizer());\n\n    const sessionId =\n      typeof (evt as { sessionId?: unknown }).sessionId === \"string\"\n        ? ((evt as { sessionId: string }).sessionId)\n        : \"\";\n    const evtProjectDir = (evt as { projectDir?: unknown }).projectDir;\n    const projectDir =\n      typeof evtProjectDir === \"string\" && evtProjectDir !== \"\"\n        ? evtProjectDir\n        : process.cwd();\n    const id = projectIdentity(projectDir);\n\n    const store = openStore({});\n    try {\n      store.append({\n        id: newRecordId(0),\n        ts: Date.now(),\n        connectorId: opts.connectorId,\n        toolName: opts.event, // for a hook row the per-item name IS the event\n        scope: \"hook\",\n        surfaceKind: \"hook\",\n        hostPlatform: resolveHookHostPlatform(opts.platformId, evt),\n        sessionId,\n        projectKey: id.key,\n        projectDir: id.dir,\n        inputTokens: measurement.inputTokens,\n        outputTokens: measurement.outputTokens,\n        confidenceSource: measurement.source,\n        isError: false,\n      });\n    } finally {\n      store.close();\n    }\n  } catch {\n    // Fail-open: a telemetry error must NEVER break the hook runtime.\n  }\n}\n\n/**\n * Dispatch one host hook invocation. Always resolves (never rejects): every\n * failure path returns a concrete {@link RunHookResult} so the CLI can exit\n * cleanly. See the module header for the fail-open contract.\n */\nexport async function runHook(opts: RunHookOptions): Promise<RunHookResult> {\n  const { platformId, event, connectorId, stdin } = opts;\n\n  try {\n    const connector = await loadRegisteredConnector(connectorId);\n    const adapter = await loadAdapter(platformId);\n\n    // mcp-only hosts (and any adapter without runtime dispatch) cannot parse a\n    // hook payload — nothing to do, allow.\n    if (!adapter || !adapter.parseEvent || !adapter.formatReply) {\n      return ALLOW;\n    }\n\n    const raw = parseStdin(stdin);\n    const evt = adapter.parseEvent(event, raw);\n    // The hook command carries the authoritative connector id; stamp it on the\n    // event so handlers see the connector they were dispatched for.\n    evt.connectorId = connectorId;\n\n    const definition = connector.hooks[event];\n    if (!definition || typeof definition.handler !== \"function\") {\n      // The connector declares no handler for this event — allow.\n      return ALLOW;\n    }\n\n    // Matcher: if set and the event's subject (tool name, or agent type for\n    // Subagent* events) does not match, allow (the hook is simply not\n    // interested in this tool/agent).\n    const subject = eventMatcherSubject(evt);\n    if (subject !== undefined) {\n      const re = compileMatcher(definition.matcher);\n      if (re && !re.test(subject)) return ALLOW;\n    }\n\n    // Run the handler. Its return is normalized (void → allow) and handed to the\n    // adapter to render the host-native reply.\n    const handlerResult = await definition.handler(\n      // The adapter parsed `evt` as exactly this event's payload type; the\n      // HooksConfig handler for the same event expects that payload.\n      evt as never,\n    );\n    const response = normalizeResponse(handlerResult);\n\n    // Developer-axis telemetry for the RUNTIME `hook` surface. Fail-open: never\n    // lets a measurement error break the hook (handled inside the helper).\n    recordHookTelemetry(opts, connector, evt, response);\n\n    const reply = adapter.formatReply(event, response);\n    return {\n      exitCode: reply.exitCode,\n      ...(reply.stdout !== undefined ? { stdout: reply.stdout } : {}),\n      ...(reply.stderr !== undefined ? { stderr: reply.stderr } : {}),\n    };\n  } catch (err) {\n    // Fail-open: a framework/handler error must not wedge the host's tool call.\n    // The ONE exception is a PreToolUse / PermissionRequest deny — a deliberate\n    // block we honor even if a later step threw. We re-derive that decision\n    // defensively from the adapter so a throw AFTER the deny still surfaces it.\n    const message = err instanceof Error ? err.message : String(err);\n    log.error(`hook ${platformId}/${event} (${connectorId}) failed:`, message);\n    return failOpenOrPreserveDeny(opts, message);\n  }\n}\n\n/**\n * Events whose explicit deny survives the fail-open error path. Both are\n * permission gates — a deny there is a deliberate security decision that must\n * never be silently downgraded to allow. (Stop-class denies are persistence\n * conveniences, not security boundaries, so they stay fail-open.)\n */\nconst DENY_PRESERVE_EVENTS: ReadonlySet<HookEventName> = new Set([\n  \"PreToolUse\",\n  \"PermissionRequest\",\n]);\n\n/**\n * Error path. Returns fail-open allow, UNLESS this is a deny-preserving event\n * (PreToolUse / PermissionRequest) whose handler explicitly denied — in which\n * case the deny is reconstructed and preserved (a security decision is never\n * silently downgraded to allow).\n *\n * Best-effort: if anything in the deny reconstruction itself throws, we fall\n * back to allow (we never escalate an error into a spurious block).\n */\nasync function failOpenOrPreserveDeny(\n  opts: RunHookOptions,\n  errorMessage: string,\n): Promise<RunHookResult> {\n  if (!DENY_PRESERVE_EVENTS.has(opts.event)) return ALLOW;\n  try {\n    const connector = await loadRegisteredConnector(opts.connectorId);\n    const adapter = await loadAdapter(opts.platformId);\n    if (!adapter?.parseEvent || !adapter.formatReply) return ALLOW;\n\n    const definition = connector.hooks[opts.event];\n    if (!definition || typeof definition.handler !== \"function\") return ALLOW;\n\n    const raw = parseStdin(opts.stdin);\n    const evt = adapter.parseEvent(opts.event, raw);\n    evt.connectorId = opts.connectorId;\n\n    const subject = eventMatcherSubject(evt);\n    if (subject !== undefined) {\n      const re = compileMatcher(definition.matcher);\n      if (re && !re.test(subject)) return ALLOW;\n    }\n\n    const response = normalizeResponse(await definition.handler(evt as never));\n    if (response.decision !== \"deny\") return ALLOW;\n\n    const reply = adapter.formatReply(opts.event, response);\n    return {\n      exitCode: reply.exitCode,\n      ...(reply.stdout !== undefined ? { stdout: reply.stdout } : {}),\n      ...(reply.stderr !== undefined\n        ? { stderr: reply.stderr }\n        : { stderr: errorMessage }),\n    };\n  } catch {\n    // Reconstruction failed — never escalate an internal error into a block.\n    return ALLOW;\n  }\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// Native (passthrough) hooks — host events OUTSIDE the normalized union\n// ─────────────────────────────────────────────────────────────────────────\n\n/** Flags + stdin for {@link runNativeHook}. `event` is HOST-NATIVE (non-union). */\nexport interface RunNativeHookOptions {\n  /** Host platform id from the hook command (`hook <platformId> ...`). */\n  platformId: string;\n  /** Host-native event name, verbatim (e.g. \"TaskCreated\"). */\n  event: string;\n  /** Connector id from `--connector <id>`. */\n  connectorId: string;\n  /** Raw stdin payload (host-native JSON). Empty string is tolerated → `{}`. */\n  stdin: string;\n}\n\n/** The connector's native hook definition for `platformId`/`event`, if any. */\nfunction nativeHookDef(\n  connector: ResolvedConnector,\n  platformId: string,\n  event: string,\n): NativeHookDef | undefined {\n  return connector.platforms[platformId as PlatformId]?.nativeHooks?.[event];\n}\n\n/**\n * True when the registered connector declares `event` under\n * `platforms[platformId].nativeHooks` with a live handler. Used by the hook CLI\n * to decide whether a non-union event name is accepted (declared → dispatch via\n * {@link runNativeHook}) or rejected with the strict unknown-event error.\n * Fail-safe: any load error reads as \"not declared\".\n */\nexport async function isNativeHookDeclared(\n  platformId: string,\n  event: string,\n  connectorId: string,\n): Promise<boolean> {\n  try {\n    const connector = await loadRegisteredConnector(connectorId);\n    return typeof nativeHookDef(connector, platformId, event)?.handler === \"function\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Dispatch one NATIVE (passthrough) hook invocation. No normalized parse, no\n * HookResponse mapping, no runtime matcher evaluation (the host's own matcher\n * already filtered — the def's matcher string was written verbatim into the\n * host config at install):\n *\n *   stdin JSON → NativeHookEvent{raw} → handler → VERBATIM JSON stdout (exit 0).\n *\n * void/undefined return → exit 0 with no output. Fail-open: ANY throw degrades\n * to exit 0 with no output — exit-2 blocking semantics are not modeled in v1.\n * Telemetry: records the same scope:\"hook\" developer-axis row as normalized\n * hooks, with the NATIVE event name as the per-item name.\n */\nexport async function runNativeHook(\n  opts: RunNativeHookOptions,\n): Promise<RunHookResult> {\n  const { platformId, event, connectorId, stdin } = opts;\n  try {\n    const connector = await loadRegisteredConnector(connectorId);\n    const def = nativeHookDef(connector, platformId, event);\n    if (!def || typeof def.handler !== \"function\") {\n      // Not declared for this platform — nothing to do, allow.\n      return ALLOW;\n    }\n\n    const raw = parseStdin(stdin);\n    // Best-effort session/project extraction from the json-stdio common shape\n    // (Claude Code: session_id / cwd). Everything else stays in `raw` untouched.\n    const sessionId =\n      typeof (raw as { session_id?: unknown })?.session_id === \"string\"\n        ? (raw as { session_id: string }).session_id\n        : \"\";\n    const cwd = (raw as { cwd?: unknown })?.cwd;\n    const evt: NativeHookEvent = {\n      event,\n      hostPlatform: REGISTERED_PLATFORM_IDS.has(platformId as PlatformId)\n        ? (platformId as PlatformId)\n        : \"unknown\",\n      sessionId,\n      ...(typeof cwd === \"string\" && cwd !== \"\" ? { projectDir: cwd } : {}),\n      raw,\n    };\n\n    const result = await def.handler(evt);\n\n    // Same scope:\"hook\" telemetry row as normalized hooks (fail-open inside).\n    recordHookTelemetry(opts, connector, evt, result === undefined ? {} : result);\n\n    if (result === undefined) return ALLOW; // void → exit 0, no output\n    const json = JSON.stringify(result);\n    // Non-JSON-serializable returns (functions/symbols) degrade to silence.\n    if (json === undefined) return ALLOW;\n    return { exitCode: 0, stdout: json };\n  } catch (err) {\n    // Fail-open, unconditionally: native hooks have no deny-preserve carve-out\n    // (there is no normalized decision to reconstruct).\n    const message = err instanceof Error ? err.message : String(err);\n    log.error(\n      `native hook ${platformId}/${event} (${connectorId}) failed:`,\n      message,\n    );\n    return ALLOW;\n  }\n}\n","/**\n * runtime/serve — the `agent-connector serve` telemetry-wrapping entrypoint.\n *\n * When a stdio MCP server opts into transparent telemetry, its host config is\n * rewritten (by the adapter, via core/spawn.buildServeWrapperCommand) to launch\n *   <homeBin> serve --connector <id> -- <realCommand> <realArgs...>\n * instead of the server directly. The CLI parses those flags and calls\n * {@link runServe}, which stands up the per-session telemetry context (store,\n * tokenizer, project identity, host detection) and hands off to the proxy.\n *\n * The proxy (telemetry/proxy.runServeProxy) forwards bytes VERBATIM in both\n * directions and measures aggregate per-tool token counts out of band, so this\n * wrapper is transparent to both the host and the real server. It resolves with\n * the child server's exit code, which the CLI uses as its own.\n */\n\nimport { randomUUID } from \"node:crypto\";\n\nimport { detectRuntimeHost } from \"../adapters/detect.js\";\nimport { REGISTERED_PLATFORM_IDS } from \"../adapters/registry.js\";\nimport { loadRegisteredConnector } from \"../core/load-connector.js\";\nimport { projectIdentity } from \"../core/paths.js\";\nimport { detectLaunchMethod } from \"../core/spawn.js\";\nimport type { PlatformId } from \"../core/types.js\";\nimport { runServeProxy } from \"../telemetry/proxy.js\";\nimport { openStore } from \"../telemetry/store.js\";\nimport { getTokenizer } from \"../telemetry/tokenizer.js\";\nimport type { TelemetryInstallScope } from \"../telemetry/types.js\";\n\n/** Flags the CLI hands to {@link runServe}. */\nexport interface RunServeOptions {\n  /** Connector id from `--connector <id>`; selects telemetry config + stamps records. */\n  connectorId: string;\n  /** The real MCP server executable to spawn (everything after `--`). */\n  serverCommand: string;\n  /** Arguments passed to that executable. */\n  serverArgs: string[];\n  /**\n   * Install scope from `--scope <user|project>`. OPTIONAL: absent for configs\n   * written before scope plumbing existed — left unstamped so older rows read\n   * as \"unknown\". Stamped verbatim onto every telemetry record when present.\n   */\n  installScope?: TelemetryInstallScope;\n  /**\n   * Install TARGET platform id from `--host <platformId>` (baked into the\n   * wrapper at install time). OPTIONAL: when a recognized platform id, it\n   * OVERRIDES runtime env detection so headless spawns stamp hostPlatform\n   * correctly (detectRuntimeHost only knows env markers for a few hosts and\n   * otherwise mis-attributes). Absent/unrecognized → fall back to detection.\n   */\n  hostPlatformOverride?: PlatformId;\n}\n\n/**\n * Launch the developer's real MCP server under the telemetry-wrapping proxy.\n *\n * Resolves with the child server's exit code (propagated as this process's exit\n * code by the CLI). The session id comes from AGENT_CONNECTOR_SESSION when the\n * host sets it (empty otherwise); the host platform is detected from runtime env\n * markers; the project identity partitions telemetry by the stable project key.\n */\n/**\n * Resolve a session id for telemetry attribution. Prefers a host-provided\n * session/thread marker (so records from the same host session group together);\n * falls back to a per-process UUID — each `serve` invocation is one server\n * session, a sensible default granularity — so `--by session` rollups are never\n * collapsed into a single empty-keyed group.\n */\nfunction resolveSessionId(env: NodeJS.ProcessEnv = process.env): string {\n  return (\n    env.AGENT_CONNECTOR_SESSION ||\n    env.CLAUDE_SESSION_ID ||\n    env.CODEX_THREAD_ID ||\n    env.CURSOR_TRACE_ID ||\n    env.MCP_SESSION_ID ||\n    `proc-${randomUUID()}`\n  );\n}\n\nexport async function runServe(opts: RunServeOptions): Promise<number> {\n  const { connectorId, serverCommand, serverArgs, installScope, hostPlatformOverride } =\n    opts;\n\n  const connector = await loadRegisteredConnector(connectorId);\n\n  const id = projectIdentity(process.cwd());\n  // Prefer the install TARGET platform baked into the wrapper (--host), but only\n  // when it is a KNOWN registered platform id — a bad/unknown value falls back to\n  // runtime env detection so a config typo can never poison hostPlatform.\n  const hostPlatform: PlatformId =\n    hostPlatformOverride !== undefined &&\n    REGISTERED_PLATFORM_IDS.has(hostPlatformOverride)\n      ? hostPlatformOverride\n      : detectRuntimeHost().platform;\n  const sessionId = resolveSessionId();\n\n  // `serve` only ever wraps a locally-spawned stdio server (a remote/http server\n  // is never launched through the proxy), so isRemote is always false here.\n  const launchMethod = detectLaunchMethod(serverCommand, serverArgs);\n\n  const store = openStore({});\n  const tok = getTokenizer();\n\n  return runServeProxy({\n    connectorId,\n    command: serverCommand,\n    args: serverArgs,\n    store,\n    tokenizer: tok,\n    modelFamilyHint: connector.telemetry.modelFamilyHint,\n    hostPlatform,\n    sessionId,\n    projectKey: id.key,\n    projectDir: id.dir,\n    measureToolDefs: connector.telemetry.measureToolDefs,\n    installScope,\n    launchMethod,\n  });\n}\n","/**\n * telemetry/calibration — OPT-IN Anthropic count_tokens calibration.\n *\n * The default tokenizer counts every family with the OpenAI o200k_base BPE, so\n * an Anthropic session's counts are an honest-but-approximate stand-in\n * (\"tokenizer-approx\"). This module lets a developer OPT IN to calibrating that\n * approximation against Anthropic's real `count_tokens` endpoint: we sample a\n * tiny fraction of tool calls off-box, learn a per-family correction factor\n * (rolling mean of exact/approx), and apply it to the locally-tokenized counts\n * so they land much closer to the host's real numbers — labeled honestly as\n * \"tokenizer-calibrated\".\n *\n * PRIVACY + SAFETY — load-bearing invariants:\n *   • OPT-IN only. Nothing here runs unless BOTH AGENT_CONNECTOR_CALIBRATE\n *     contains \"anthropic\" AND ANTHROPIC_API_KEY is set (see isCalibrationEnabled).\n *   • Sampling only — shouldSample() rate-limits hard so we never hammer the API.\n *   • Content leaves the box ONLY on a sampled call, ONLY when opted in. We store\n *     a single scalar factor + sample count — NEVER the sampled text itself.\n *   • Fail-open everywhere: a network/parse/IO error returns null / passes the\n *     approximation through unchanged and NEVER throws into a tool call or hook.\n *\n * No new dependencies: uses Node's global fetch (Node >= 18) and node:fs.\n */\n\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nimport { dataRoot, ensureDir } from \"../core/paths.js\";\nimport type { ConfidenceSource, ModelFamily } from \"./types.js\";\n\n// ── Env switches ──────────────────────────────────────────────────────────\n\n/**\n * Is opt-in Anthropic calibration enabled for this process?\n *\n * Requires BOTH:\n *   • AGENT_CONNECTOR_CALIBRATE — a comma-separated allowlist that INCLUDES\n *     `anthropic` (so a future `AGENT_CONNECTOR_CALIBRATE=openai,anthropic` can\n *     opt other families in without touching this gate), and\n *   • ANTHROPIC_API_KEY — a non-empty key to authenticate the off-box call.\n *\n * Either missing → disabled (the privacy-safe default).\n */\nexport function isCalibrationEnabled(): boolean {\n  const families = (process.env.AGENT_CONNECTOR_CALIBRATE || \"\")\n    .split(\",\")\n    .map((s) => s.trim())\n    .filter((s) => s !== \"\");\n  const key = (process.env.ANTHROPIC_API_KEY || \"\").trim();\n  return families.includes(\"anthropic\") && key !== \"\";\n}\n\n// ── Factor store (dataRoot/calibration.json) ────────────────────────────────\n\n/** One learned correction factor for a model family: factor + sample count. */\nexport interface CalibrationFactor {\n  /** Multiply an approx count by this to estimate the real count. */\n  factor: number;\n  /** How many samples have folded into the rolling mean. */\n  samples: number;\n}\n\n/** The on-disk factor map, keyed by model family. */\nexport type CalibrationFactors = Partial<Record<ModelFamily, CalibrationFactor>>;\n\n/** Path to the learned-factor store: dataRoot()/calibration.json. */\nexport function calibrationPath(): string {\n  return join(dataRoot(), \"calibration.json\");\n}\n\n/**\n * Clamp a measured exact/approx ratio into a sane range. A pathological sample\n * (e.g. an empty-string approx of 0 → Infinity, or a parse glitch) must never\n * poison the rolling mean, so ratios are pinned to [0.2, 5].\n */\nconst RATIO_MIN = 0.2;\nconst RATIO_MAX = 5;\n\nfunction clampRatio(ratio: number): number | null {\n  if (!Number.isFinite(ratio) || ratio <= 0) return null;\n  if (ratio < RATIO_MIN) return RATIO_MIN;\n  if (ratio > RATIO_MAX) return RATIO_MAX;\n  return ratio;\n}\n\n/**\n * Load the learned factors from disk. Fail-open: a missing/unreadable/malformed\n * file returns an empty map rather than throwing.\n */\nexport function loadFactors(): CalibrationFactors {\n  const path = calibrationPath();\n  if (!existsSync(path)) return {};\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\")) as unknown;\n    if (parsed === null || typeof parsed !== \"object\") return {};\n    const out: CalibrationFactors = {};\n    for (const [family, value] of Object.entries(parsed as Record<string, unknown>)) {\n      if (value === null || typeof value !== \"object\") continue;\n      const rec = value as Record<string, unknown>;\n      const factor = rec[\"factor\"];\n      const samples = rec[\"samples\"];\n      if (\n        typeof factor === \"number\" &&\n        Number.isFinite(factor) &&\n        factor > 0 &&\n        typeof samples === \"number\" &&\n        Number.isFinite(samples) &&\n        samples >= 0\n      ) {\n        (out as Record<string, CalibrationFactor>)[family] = {\n          factor,\n          samples,\n        };\n      }\n    }\n    return out;\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Fold one observed exact/approx `ratio` into the rolling mean for `family` and\n * persist it. A running average converges to the true mean while staying cheap\n * and stateless across processes (each writer reads the prior count, blends in\n * the new sample, writes back). Fail-open: any read/write/clamp problem leaves\n * the store untouched and never throws.\n */\nexport function recordSample(family: ModelFamily, ratio: number): void {\n  const clamped = clampRatio(ratio);\n  if (clamped === null) return;\n  try {\n    const factors = loadFactors();\n    const prior = factors[family];\n    let next: CalibrationFactor;\n    if (prior === undefined || prior.samples <= 0) {\n      next = { factor: clamped, samples: 1 };\n    } else {\n      const samples = prior.samples + 1;\n      // Running average: new mean = old mean + (sample - old mean) / n.\n      const factor = prior.factor + (clamped - prior.factor) / samples;\n      next = { factor, samples };\n    }\n    const updated: CalibrationFactors = { ...factors, [family]: next };\n    const path = calibrationPath();\n    ensureDir(dataRoot());\n    writeFileSync(path, `${JSON.stringify(updated, null, 2)}\\n`, \"utf8\");\n  } catch {\n    /* fail-open: a calibration write must never break a tool call */\n  }\n}\n\n// ── Anthropic count_tokens (off-box, sampled, fail-open) ─────────────────────\n\n/** Default model used for count_tokens when no family→model map applies. */\nconst DEFAULT_ANTHROPIC_MODEL = \"claude-3-5-sonnet-latest\";\n\n/** Anthropic count_tokens endpoint. */\nconst COUNT_TOKENS_URL = \"https://api.anthropic.com/v1/messages/count_tokens\";\n\n/** The single field we read out of a successful response. */\ninterface CountTokensResponse {\n  input_tokens?: unknown;\n}\n\n/**\n * Ask Anthropic's `count_tokens` endpoint for the exact token count of `text`\n * under `model`. Returns the integer count, or `null` on ANY failure (no key,\n * non-200, network error, unparseable body) — fail-open by contract.\n *\n * Only ever called on a SAMPLED tool call when calibration is opted in, so the\n * sampled text leaves the box only under explicit operator consent.\n */\nexport async function countTokensAnthropic(\n  text: string,\n  model: string = DEFAULT_ANTHROPIC_MODEL,\n): Promise<number | null> {\n  const apiKey = (process.env.ANTHROPIC_API_KEY || \"\").trim();\n  if (apiKey === \"\") return null;\n  try {\n    const res = await fetch(COUNT_TOKENS_URL, {\n      method: \"POST\",\n      headers: {\n        \"x-api-key\": apiKey,\n        \"anthropic-version\": \"2023-06-01\",\n        \"content-type\": \"application/json\",\n      },\n      body: JSON.stringify({\n        model,\n        messages: [{ role: \"user\", content: text }],\n      }),\n    });\n    if (!res.ok) return null;\n    const body = (await res.json()) as CountTokensResponse;\n    const n = body.input_tokens;\n    if (typeof n === \"number\" && Number.isFinite(n) && n >= 0) {\n      return n;\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\n// ── Sampling (rate-limit so we never hammer the API) ─────────────────────────\n\n/**\n * Sample roughly 1 in {@link SAMPLE_EVERY} calls, with a hard per-minute cap so\n * a burst of tool calls can never fan out into a burst of API calls. Both\n * counters are in-memory (per process) — calibration is a best-effort,\n * low-volume background signal, not a per-call requirement.\n */\nconst SAMPLE_EVERY = 20;\nconst MAX_SAMPLES_PER_MINUTE = 10;\n\nlet callCounter = 0;\nlet windowStartMs = 0;\nlet samplesThisWindow = 0;\n\n/**\n * Should THIS call fire an off-box count_tokens sample? Combines a 1-in-N\n * counter with a rolling per-minute cap. Pure in-memory bookkeeping; never\n * throws, never blocks.\n */\nexport function shouldSample(now: number = Date.now()): boolean {\n  // Roll the per-minute window.\n  if (now - windowStartMs >= 60_000) {\n    windowStartMs = now;\n    samplesThisWindow = 0;\n  }\n  callCounter += 1;\n  if (callCounter % SAMPLE_EVERY !== 0) return false;\n  if (samplesThisWindow >= MAX_SAMPLES_PER_MINUTE) return false;\n  samplesThisWindow += 1;\n  return true;\n}\n\n/** Reset the in-memory sampling counters. Test-only seam; cheap + side-effect-free. */\nexport function _resetSamplingForTest(): void {\n  callCounter = 0;\n  windowStartMs = 0;\n  samplesThisWindow = 0;\n}\n\n// ── Apply a learned factor to a local approximation ──────────────────────────\n\n/** Result of {@link applyCalibration}: the adjusted count + its honest source. */\nexport interface CalibratedCount {\n  tokens: number;\n  source: Extract<ConfidenceSource, \"tokenizer-approx\" | \"tokenizer-calibrated\">;\n}\n\n/**\n * Adjust a locally-tokenized `approxTokens` count by the learned factor for\n * `family`. When a stored factor exists for the anthropic family, return the\n * scaled count labeled \"tokenizer-calibrated\"; otherwise pass the approximation\n * through unchanged as \"tokenizer-approx\". Pure: reads the factor store but\n * mutates nothing.\n */\nexport function applyCalibration(\n  approxTokens: number,\n  family: ModelFamily,\n  factors: CalibrationFactors = loadFactors(),\n): CalibratedCount {\n  if (family === \"anthropic\") {\n    const f = factors[family];\n    if (f !== undefined && f.samples > 0 && Number.isFinite(f.factor) && f.factor > 0) {\n      return {\n        tokens: Math.max(0, Math.round(approxTokens * f.factor)),\n        source: \"tokenizer-calibrated\",\n      };\n    }\n  }\n  return { tokens: approxTokens, source: \"tokenizer-approx\" };\n}\n\n/** The model used for a family's count_tokens sample (anthropic → default model). */\nexport function modelForFamily(_family: ModelFamily): string {\n  return DEFAULT_ANTHROPIC_MODEL;\n}\n","/**\n * telemetry/proxy — the telemetry-wrapping MCP stdio proxy.\n *\n * `agent-connector serve <command> <args…>` spawns the developer's REAL MCP\n * server as a child and sits transparently between the host and that server,\n * speaking the MCP stdio wire format: NEWLINE-DELIMITED JSON-RPC (one single-line\n * JSON object per message, terminated by `\\n`; stdio has NO Content-Length\n * framing). Bytes are forwarded VERBATIM in both directions so the proxy can\n * never corrupt the stream; a side line-buffer tees a COPY of each direction,\n * parses complete messages, and measures per-tool token usage out of band.\n *\n * Honesty / safety rules baked in here:\n *   • Forwarding always happens FIRST. Measurement runs after the bytes are out\n *     the door and is wrapped so a measurement bug can never break a tool call.\n *   • Telemetry stores AGGREGATE COUNTS ONLY — the parsed `tools/call` arguments\n *     and results are tokenized and discarded; raw content is never persisted.\n *   • AGENT_CONNECTOR_TELEMETRY=0 → still proxy transparently, skip all measure.\n *\n * The proxy resolves with the child's exit code and propagates SIGINT/SIGTERM.\n */\n\nimport type { PlatformId } from \"../core/types.js\";\nimport { spawnChild } from \"../core/spawn-child.js\";\nimport { type JsonRpcMessage, LineBuffer, idKey, isObject } from \"./jsonrpc.js\";\nimport {\n  applyCalibration,\n  countTokensAnthropic,\n  isCalibrationEnabled,\n  modelForFamily,\n  recordSample,\n  shouldSample,\n} from \"./calibration.js\";\nimport { measureToolCall, measureToolDefs } from \"./measure.js\";\nimport { newRecordId } from \"./store.js\";\nimport { inferModelFamily } from \"./tokenizer.js\";\nimport type {\n  ConfidenceSource,\n  LaunchMethod,\n  ModelFamily,\n  TelemetryInstallScope,\n  TelemetryStore,\n  Tokenizer,\n  ToolEventRecord,\n} from \"./types.js\";\n\n/** Options for {@link runServeProxy}. */\nexport interface RunServeProxyOptions {\n  /** Connector id this server belongs to (stamped on every record). */\n  connectorId: string;\n  /** The real MCP server executable to spawn. */\n  command: string;\n  /** Arguments passed to that executable. */\n  args: string[];\n  /** Where measured records are appended. */\n  store: TelemetryStore;\n  /** Tokenizer used for measurement (defaults baked into measure helpers). */\n  tokenizer: Tokenizer;\n  /**\n   * Telemetry model-family hint. \"auto\" infers the family from the MCP client's\n   * `initialize` clientInfo.name; any explicit family wins outright.\n   */\n  modelFamilyHint: \"auto\" | ModelFamily;\n  /** Host platform executing this proxy (stamped on every record). */\n  hostPlatform: PlatformId;\n  /** Host session id (stamped on every record). */\n  sessionId: string;\n  /** Hashed stable project identity (stamped on every record). */\n  projectKey: string;\n  /** Human-readable project directory (stamped on every record). */\n  projectDir: string;\n  /** When true, tokenize the `tools/list` schema once → tool-defs overhead. */\n  measureToolDefs: boolean;\n  /**\n   * Install scope (global user vs project-local) stamped on every record.\n   * OPTIONAL: omitted for configs written before scope plumbing existed, leaving\n   * the field off the row so it reads as \"unknown\".\n   */\n  installScope?: TelemetryInstallScope;\n  /**\n   * How the wrapped server was launched (npx/bunx/uvx/node/binary/http), stamped\n   * on every record. OPTIONAL for the same backward-compat reason as above.\n   */\n  launchMethod?: LaunchMethod;\n}\n\n// ── JSON-RPC shapes we read (kept local + narrow; everything else opaque) ─────\n\n/** A client→server `tools/call` we remember until its result comes back. */\ninterface PendingCall {\n  toolName: string;\n  args: unknown;\n}\n\n/**\n * Canonical string form of a tool call's arguments for an off-box count_tokens\n * sample — mirrors the tokenizer's own serialization so the sampled text equals\n * the bytes we approximated locally. A string passes through; anything else is\n * JSON-stringified; a value that stringifies to undefined becomes \"\".\n */\nfunction canonicalArgs(value: unknown): string {\n  if (typeof value === \"string\") return value;\n  try {\n    return JSON.stringify(value) ?? \"\";\n  } catch {\n    return \"\";\n  }\n}\n\n/**\n * Run the telemetry-wrapping MCP stdio proxy.\n *\n * Spawns `command args` with piped stdin/stdout (stderr inherited), forwards\n * both directions byte-for-byte, and measures `tools/call` round-trips and the\n * one-time `tools/list` tool-defs overhead into `store`. Resolves with the\n * child's exit code (or a signal-derived code) once the child closes.\n */\nexport async function runServeProxy(\n  opts: RunServeProxyOptions,\n): Promise<number> {\n  const {\n    connectorId,\n    command,\n    args,\n    store,\n    tokenizer,\n    modelFamilyHint,\n    hostPlatform,\n    sessionId,\n    projectKey,\n    projectDir,\n    measureToolDefs: shouldMeasureToolDefs,\n    installScope,\n    launchMethod,\n  } = opts;\n\n  // Global kill switch: still proxy transparently, but skip ALL measurement.\n  const measuringEnabled = process.env.AGENT_CONNECTOR_TELEMETRY !== \"0\";\n  // OPT-IN Anthropic count_tokens calibration. Resolved once per session — the\n  // gate (AGENT_CONNECTOR_CALIBRATE + ANTHROPIC_API_KEY) is process-level and\n  // does not change mid-session. Off by default; privacy-safe.\n  const calibrationEnabled = isCalibrationEnabled();\n\n  // spawnChild fixes native-Windows package-runner launches: a bare npx/uvx\n  // resolves to a .cmd shim that raw CreateProcess can't find/launch, so it is\n  // run via a quoted single command line with a shell. No-op on macOS/Linux.\n  const child = spawnChild(command, args, {\n    stdio: [\"pipe\", \"pipe\", \"inherit\"],\n    env: process.env,\n  });\n\n  // ── Per-session measurement state ───────────────────────────────────────\n  // Family resolved from the client's `initialize` (or the hint) and cached.\n  let family: ModelFamily = inferModelFamily(\"\", modelFamilyHint);\n  // Outstanding tools/call requests, keyed by JSON-RPC id.\n  const pending = new Map<string, PendingCall>();\n  // Monotonic sequence so two records in the same ms still get distinct ids.\n  let seq = 0;\n  // tools/list overhead is measured exactly once per session.\n  let toolDefsMeasured = false;\n\n  /**\n   * Build a base record stamped with the per-session identity fields plus the\n   * scope dimensions. `installScope` / `launchMethod` are spread in ONLY when\n   * defined, so a session without them leaves those fields off the row entirely\n   * (read as \"unknown\") rather than writing an explicit `undefined`.\n   */\n  function baseRecord(): Omit<\n    ToolEventRecord,\n    \"toolName\" | \"scope\" | \"inputTokens\" | \"outputTokens\" | \"confidenceSource\" | \"isError\"\n  > {\n    return {\n      id: newRecordId(seq++),\n      ts: Date.now(),\n      connectorId,\n      hostPlatform,\n      sessionId,\n      projectKey,\n      projectDir,\n      ...(installScope !== undefined ? { installScope } : {}),\n      ...(launchMethod !== undefined ? { launchMethod } : {}),\n    };\n  }\n\n  /**\n   * Inspect one parsed CLIENT→SERVER message. Caches the model family on\n   * `initialize` and remembers `tools/call` requests so their results can be\n   * measured when they come back. Never throws into the data path.\n   */\n  function onClientMessage(msg: JsonRpcMessage): void {\n    const method = msg.method;\n    if (method === \"initialize\") {\n      const params = isObject(msg.params) ? msg.params : undefined;\n      const clientInfo =\n        params && isObject(params[\"clientInfo\"])\n          ? (params[\"clientInfo\"] as Record<string, unknown>)\n          : undefined;\n      const clientName =\n        clientInfo && typeof clientInfo[\"name\"] === \"string\"\n          ? (clientInfo[\"name\"] as string)\n          : \"\";\n      family = inferModelFamily(clientName, modelFamilyHint);\n      return;\n    }\n\n    if (method === \"tools/call\") {\n      const key = idKey(msg.id);\n      if (key === null) return; // a call with no id has no result to match\n      const params = isObject(msg.params) ? msg.params : undefined;\n      const toolName =\n        params && typeof params[\"name\"] === \"string\"\n          ? (params[\"name\"] as string)\n          : \"unknown\";\n      const callArgs = params ? params[\"arguments\"] : undefined;\n      pending.set(key, { toolName, args: callArgs });\n    }\n  }\n\n  /**\n   * Inspect one parsed SERVER→CLIENT message. Matches `tools/call` results to\n   * remembered requests and measures them; measures `tools/list` results once.\n   * Never throws into the data path.\n   */\n  function onServerMessage(msg: JsonRpcMessage): void {\n    const key = idKey(msg.id);\n    if (key === null) return; // notifications carry no id we can correlate\n\n    const pendingCall = pending.get(key);\n    if (pendingCall !== undefined) {\n      pending.delete(key);\n      recordToolCall(pendingCall, msg);\n      return;\n    }\n\n    // Not a tracked tools/call — it may be the tools/list result we measure\n    // once for the fixed tool-definition overhead.\n    if (shouldMeasureToolDefs && !toolDefsMeasured) {\n      const result = isObject(msg.result) ? msg.result : undefined;\n      const tools = result ? result[\"tools\"] : undefined;\n      if (Array.isArray(tools)) {\n        recordToolDefs(tools);\n      }\n    }\n  }\n\n  /** Measure a matched tools/call round-trip and append the record. */\n  function recordToolCall(call: PendingCall, response: JsonRpcMessage): void {\n    const hasError = response.error !== undefined;\n    const result = response.result;\n    // A JSON-RPC error has no `result`; measure against an empty object so the\n    // input (args) tokens are still recorded honestly.\n    const resultForMeasure = hasError ? {} : result;\n    const measurement = measureToolCall(\n      call.args,\n      resultForMeasure,\n      family,\n      tokenizer,\n    );\n\n    // OPT-IN calibration: for an anthropic session, nudge the locally-tokenized\n    // approx counts toward Anthropic's real numbers via the learned factor, and\n    // fire a sampled off-box count_tokens to keep that factor fresh. Both steps\n    // are best-effort and wrapped so they can never break the record path.\n    let inputTokens = measurement.inputTokens;\n    let outputTokens = measurement.outputTokens;\n    let confidenceSource: ConfidenceSource = measurement.source;\n    if (calibrationEnabled && family === \"anthropic\") {\n      try {\n        ({ inputTokens, outputTokens, confidenceSource } = calibrateCounts(\n          measurement.inputTokens,\n          measurement.outputTokens,\n          measurement.source,\n        ));\n        maybeSampleCalibration(call.args, measurement.inputTokens);\n      } catch {\n        // Calibration is a non-essential enrichment — fall back to the raw\n        // measurement values already captured above.\n      }\n    }\n\n    // MCP signals a tool-level failure via result.isError===true; a JSON-RPC\n    // protocol error (response.error) is also a failure.\n    const resultIsError =\n      isObject(result) && result[\"isError\"] === true;\n    store.append({\n      ...baseRecord(),\n      toolName: call.toolName,\n      scope: \"call\",\n      inputTokens,\n      outputTokens,\n      confidenceSource,\n      isError: hasError || resultIsError,\n    });\n  }\n\n  /**\n   * Apply the learned anthropic factor to the approx input/output counts. Only\n   * a `tokenizer-approx` measurement is calibratable (a heuristic fallback or\n   * host-native count is left exactly as-is); the combined source becomes\n   * `tokenizer-calibrated` only when at least one side was actually scaled.\n   */\n  function calibrateCounts(\n    rawIn: number,\n    rawOut: number,\n    rawSource: ConfidenceSource,\n  ): { inputTokens: number; outputTokens: number; confidenceSource: ConfidenceSource } {\n    if (rawSource !== \"tokenizer-approx\") {\n      return { inputTokens: rawIn, outputTokens: rawOut, confidenceSource: rawSource };\n    }\n    const cin = applyCalibration(rawIn, family);\n    const cout = applyCalibration(rawOut, family);\n    const calibrated =\n      cin.source === \"tokenizer-calibrated\" || cout.source === \"tokenizer-calibrated\";\n    return {\n      inputTokens: cin.tokens,\n      outputTokens: cout.tokens,\n      confidenceSource: calibrated ? \"tokenizer-calibrated\" : \"tokenizer-approx\",\n    };\n  }\n\n  /**\n   * On a SAMPLED call, fire-and-forget an off-box count_tokens for the call's\n   * input args and fold the resulting exact/approx ratio into the learned\n   * factor. Returns immediately — the network round-trip never blocks\n   * forwarding or measurement. Fail-open: any error is swallowed.\n   */\n  function maybeSampleCalibration(args: unknown, approxInputTokens: number): void {\n    if (approxInputTokens <= 0) return; // nothing to ratio against\n    if (!shouldSample()) return;\n    const text = canonicalArgs(args);\n    if (text === \"\") return;\n    // Detached promise — intentionally NOT awaited so the proxy never blocks on\n    // the network. Errors are handled inside countTokensAnthropic (returns null)\n    // and the .catch is a belt-and-braces guard against an unhandled rejection.\n    void countTokensAnthropic(text, modelForFamily(family))\n      .then((exact) => {\n        if (exact !== null && exact > 0) {\n          recordSample(family, exact / approxInputTokens);\n        }\n      })\n      .catch(() => {\n        /* fail-open: a calibration sample must never surface an error */\n      });\n  }\n\n  /** Measure the one-time tools/list overhead and append the record. */\n  function recordToolDefs(tools: readonly unknown[]): void {\n    toolDefsMeasured = true;\n    const count = measureToolDefs(tools, family, tokenizer);\n    store.append({\n      ...baseRecord(),\n      toolName: \"*\",\n      scope: \"tool_defs\",\n      inputTokens: count.tokens,\n      outputTokens: 0,\n      confidenceSource: count.source,\n      isError: false,\n    });\n  }\n\n  /** Parse one NDJSON line and route it, swallowing any measurement error. */\n  function handleLine(line: string, direction: \"client\" | \"server\"): void {\n    if (!measuringEnabled) return;\n    let msg: JsonRpcMessage;\n    try {\n      const parsed = JSON.parse(line) as unknown;\n      if (!isObject(parsed)) return;\n      msg = parsed as JsonRpcMessage;\n    } catch {\n      return; // not a complete/valid JSON message — ignore for telemetry\n    }\n    try {\n      if (direction === \"client\") onClientMessage(msg);\n      else onServerMessage(msg);\n    } catch {\n      // Measurement must NEVER break the proxy. Drop the record silently.\n    }\n  }\n\n  const clientLines = new LineBuffer((line) => handleLine(line, \"client\"));\n  const serverLines = new LineBuffer((line) => handleLine(line, \"server\"));\n\n  // ── Transparent byte forwarding (host stdin → child stdin) ───────────────\n  // Forward VERBATIM first, then tee a copy into the line buffer to measure.\n  // Honor backpressure: if the child's stdin buffer is full, pause the host\n  // stdin and resume on drain so a slow server can't make us buffer unboundedly.\n  process.stdin.on(\"data\", (chunk: Buffer) => {\n    if (child.stdin && child.stdin.writable) {\n      const ok = child.stdin.write(chunk);\n      if (!ok) {\n        process.stdin.pause();\n        child.stdin.once(\"drain\", () => process.stdin.resume());\n      }\n    }\n    if (measuringEnabled) {\n      try {\n        clientLines.push(chunk);\n      } catch {\n        /* tee side-channel must never affect forwarding */\n      }\n    }\n  });\n  process.stdin.on(\"end\", () => {\n    if (child.stdin && !child.stdin.destroyed) child.stdin.end();\n  });\n\n  // ── Transparent byte forwarding (child stdout → host stdout) ─────────────\n  if (child.stdout) {\n    const childStdout = child.stdout;\n    childStdout.on(\"data\", (chunk: Buffer) => {\n      const ok = process.stdout.write(chunk);\n      if (!ok) {\n        childStdout.pause();\n        process.stdout.once(\"drain\", () => childStdout.resume());\n      }\n      if (measuringEnabled) {\n        try {\n          serverLines.push(chunk);\n        } catch {\n          /* tee side-channel must never affect forwarding */\n        }\n      }\n    });\n  }\n\n  // ── Signal propagation: forward SIGINT/SIGTERM to the child ──────────────\n  const forwardSignal = (signal: NodeJS.Signals): void => {\n    try {\n      if (!child.killed) child.kill(signal);\n    } catch {\n      /* child may already be gone */\n    }\n  };\n  const onSigint = (): void => forwardSignal(\"SIGINT\");\n  const onSigterm = (): void => forwardSignal(\"SIGTERM\");\n  process.on(\"SIGINT\", onSigint);\n  process.on(\"SIGTERM\", onSigterm);\n\n  // ── Resolve with the child's exit code (or signal-derived code) ──────────\n  return await new Promise<number>((resolve) => {\n    const finish = (code: number): void => {\n      process.removeListener(\"SIGINT\", onSigint);\n      process.removeListener(\"SIGTERM\", onSigterm);\n      try {\n        store.close();\n      } catch {\n        /* best-effort flush */\n      }\n      resolve(code);\n    };\n\n    child.on(\"error\", () => {\n      // The server could not be spawned/launched. Surface a conventional\n      // \"command not executable\" style failure code.\n      finish(126);\n    });\n\n    child.on(\"close\", (code, signal) => {\n      if (typeof code === \"number\") {\n        finish(code);\n        return;\n      }\n      // Killed by a signal → conventional 128 + signal number where known.\n      if (signal) {\n        const num = signalToNumber(signal);\n        finish(num === undefined ? 1 : 128 + num);\n        return;\n      }\n      finish(1);\n    });\n  });\n}\n\n/** Map the common termination signals to their numbers for exit-code math. */\nfunction signalToNumber(signal: NodeJS.Signals): number | undefined {\n  const table: Partial<Record<NodeJS.Signals, number>> = {\n    SIGINT: 2,\n    SIGQUIT: 3,\n    SIGKILL: 9,\n    SIGTERM: 15,\n  };\n  return table[signal];\n}\n\nexport default runServeProxy;\n","/**\n * runtime/usage-event — the OPT-IN host-native turn-usage enricher (enricher 4a).\n *\n * Gemini CLI / Antigravity fire an `AfterModel` (Antigravity CLI: `PostInvocation`)\n * hook AFTER each model turn, whose stdin payload carries a `usageMetadata` block\n * with the host's OWN exact token accounting for that whole conversation turn:\n *   { promptTokenCount, candidatesTokenCount, cachedContentTokenCount,\n *     thoughtsTokenCount, totalTokenCount }\n * This is the single point in the whole matrix where a host reports REAL per-turn\n * usage to a command we control — so we record it as `confidenceSource:\"host-native\"`\n * (the top of CONFIDENCE_RANK), upgrading those rows from the serve-proxy estimate.\n *\n * DISTINCT, NEVER-SUMMED ORIGIN. Host-native turn usage is WHOLE-CONVERSATION, not\n * per-MCP. To avoid double-counting against (a) the per-MCP serve-proxy `call`\n * rows and (b) the usage-reader host-scan numbers, every record written here uses\n * the DISTINCT scope `\"model_turn\"`. The MCP leaderboard excludes that scope (just\n * as it special-cases `tool_defs`); the unified leaderboard surfaces it as its own\n * clearly-labeled section that is explicitly never added to the other two origins.\n *\n * PRIVACY + FAIL-OPEN. This enricher is OPT-IN at install time (see the adapters);\n * it stores AGGREGATE COUNTS ONLY (no raw content — the payload's prompt/response\n * text is never read). ANY parse / store / IO error degrades to exit 0 and records\n * NOTHING: a host-native usage hook must never break a model turn. This function\n * never throws.\n */\n\nimport { projectIdentity } from \"../core/paths.js\";\nimport { newRecordId, openStore } from \"../telemetry/store.js\";\nimport type { PlatformId } from \"../core/types.js\";\nimport type { ToolEventRecord } from \"../telemetry/types.js\";\n\n/** Flags + stdin the CLI hands to {@link runUsageEvent}. */\nexport interface RunUsageEventOptions {\n  /** Host platform id from the command (`usage-event <platformId> …`). */\n  platformId: string;\n  /** Connector id from `--connector <id>` (stamped on the record). */\n  connectorId: string;\n  /** Raw stdin payload (host-native JSON). Empty string is tolerated → no record. */\n  stdin: string;\n}\n\n/** Process-level result the CLI translates into an exit code. */\nexport interface RunUsageEventResult {\n  /** Always 0 — a host-native usage hook must never block a model turn. */\n  exitCode: number;\n  /** True when a `model_turn` record was appended (false on any fail-open path). */\n  recorded: boolean;\n}\n\n/** The never-records, never-throws result. */\nconst NOOP: RunUsageEventResult = { exitCode: 0, recorded: false };\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\n/** Coerce a value to a non-negative safe integer (NaN/negatives/floats → 0). */\nfunction toNonNegInt(v: unknown): number {\n  const n = typeof v === \"number\" ? v : typeof v === \"string\" ? Number(v) : NaN;\n  if (!Number.isFinite(n) || n < 0) return 0;\n  return Math.floor(n);\n}\n\n/** First non-empty string among the given keys of an object. */\nfunction firstStr(obj: Record<string, unknown>, keys: readonly string[]): string | undefined {\n  for (const k of keys) {\n    const v = obj[k];\n    if (typeof v === \"string\" && v.trim() !== \"\") return v;\n  }\n  return undefined;\n}\n\n/** Read a token field tolerant of both camelCase and snake_case spellings. */\nfunction tokenField(\n  meta: Record<string, unknown>,\n  keys: readonly string[],\n): number {\n  for (const k of keys) {\n    if (k in meta) return toNonNegInt(meta[k]);\n  }\n  return 0;\n}\n\n/** Locate the `usageMetadata` block under either spelling, top-level or nested. */\nfunction findUsageMetadata(root: Record<string, unknown>): Record<string, unknown> | undefined {\n  for (const k of [\"usageMetadata\", \"usage_metadata\"]) {\n    if (isObject(root[k])) return root[k] as Record<string, unknown>;\n  }\n  // Some hosts nest the model response (with its usage) under a `response` /\n  // `modelResponse` envelope — probe one level down, best-effort.\n  for (const k of [\"response\", \"modelResponse\", \"model_response\"]) {\n    const nested = root[k];\n    if (isObject(nested)) {\n      for (const mk of [\"usageMetadata\", \"usage_metadata\"]) {\n        if (isObject(nested[mk])) return nested[mk] as Record<string, unknown>;\n      }\n    }\n  }\n  return undefined;\n}\n\n/** A registered PlatformId, or \"unknown\" when the id is not one we know. */\nconst KNOWN_PLATFORMS: ReadonlySet<string> = new Set<PlatformId>([\n  \"claude-code\", \"codex\", \"cursor\", \"vscode-copilot\", \"jetbrains-copilot\",\n  \"copilot-cli\", \"gemini-cli\", \"opencode\", \"kilo\", \"kilo-cli\", \"warp\", \"hermes\",\n  \"openclaw\", \"zed\", \"antigravity\", \"antigravity-cli\", \"kiro\", \"qwen-code\",\n  \"kimi\", \"pi\", \"omp\", \"droid\", \"roo-code\", \"trae\", \"amp\", \"codebuff\", \"mux\",\n  \"crush\", \"goose\", \"synthetic\", \"unknown\",\n]);\n\nfunction asPlatformId(id: string): PlatformId {\n  return (KNOWN_PLATFORMS.has(id) ? id : \"unknown\") as PlatformId;\n}\n\n/**\n * Record one host-native model turn. Parses the host's `usageMetadata`, maps it to\n * a DISTINCT `model_turn` `ToolEventRecord` (confidence `host-native`, toolName\n * `\"*\"`), and appends it to the shared telemetry store. NEVER throws and never\n * blocks the turn: every failure path resolves to {@link NOOP} (exit 0, nothing\n * recorded).\n */\nexport async function runUsageEvent(\n  opts: RunUsageEventOptions,\n): Promise<RunUsageEventResult> {\n  try {\n    // Global telemetry kill switch is honored by the store's append (no-op when\n    // AGENT_CONNECTOR_TELEMETRY=0); we still parse cheaply and let append drop it.\n    const trimmed = opts.stdin.trim();\n    if (trimmed === \"\") return NOOP;\n\n    let raw: unknown;\n    try {\n      raw = JSON.parse(trimmed);\n    } catch {\n      return NOOP; // malformed payload → fail-open, record nothing\n    }\n    if (!isObject(raw)) return NOOP;\n\n    const meta = findUsageMetadata(raw);\n    if (meta === undefined) return NOOP;\n\n    const promptTokens = tokenField(meta, [\"promptTokenCount\", \"prompt_token_count\"]);\n    const candidates = tokenField(meta, [\"candidatesTokenCount\", \"candidates_token_count\"]);\n    const cached = tokenField(meta, [\"cachedContentTokenCount\", \"cached_content_token_count\"]);\n    const thoughts = tokenField(meta, [\"thoughtsTokenCount\", \"thoughts_token_count\"]);\n\n    // promptTokenCount is cache-INCLUSIVE (Gemini-family semantics, mirrored by\n    // the antigravity-shared usage reader): net fresh input = prompt - cached.\n    const inputTokens = Math.max(0, promptTokens - Math.min(cached, promptTokens));\n    // Output = generated candidates + reasoning (\"thoughts\") tokens.\n    const outputTokens = candidates + thoughts;\n\n    // A turn with no measurable tokens is not worth a row.\n    if (inputTokens === 0 && outputTokens === 0) return NOOP;\n\n    // Identity: prefer payload session/cwd; fall back to process.cwd() for the\n    // project key so a turn always lands in a stable project partition.\n    const sessionId =\n      firstStr(raw, [\"session_id\", \"sessionId\", \"conversationId\", \"conversation_id\"]) ?? \"\";\n    const cwd = firstStr(raw, [\"cwd\", \"workspace\", \"projectDir\", \"project_dir\"]) ?? process.cwd();\n    const id = projectIdentity(cwd);\n\n    const record: ToolEventRecord = {\n      id: newRecordId(0),\n      ts: Date.now(),\n      connectorId: opts.connectorId,\n      toolName: \"*\",\n      scope: \"model_turn\",\n      hostPlatform: asPlatformId(opts.platformId),\n      sessionId,\n      projectKey: id.key,\n      projectDir: id.dir,\n      inputTokens,\n      outputTokens,\n      confidenceSource: \"host-native\",\n      isError: false,\n    };\n\n    const store = openStore({});\n    try {\n      store.append(record);\n    } finally {\n      try {\n        store.close();\n      } catch {\n        /* best-effort flush */\n      }\n    }\n    return { exitCode: 0, recorded: true };\n  } catch {\n    // Fail-open: a host-native usage enricher must never surface an error.\n    return NOOP;\n  }\n}\n\nexport default runUsageEvent;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAM,oBAA4C;AAAA,EAChD,OAAO;AAAA,EACP,OAAO;AAAA,EACP,UAAU;AACZ;AAEA,IAAM,yBAAyB;AAU/B,SAAS,eAAe,SAAwD;AAG9E,MAAI,QAA0B;AAC9B,aAAW,KAAK,QAAS,SAAQ,gBAAgB,OAAO,CAAC;AACzD,SAAO;AACT;AAoBA,SAASA,UAAS,GAA0C;AAC1D,SAAO,OAAO,MAAM,YAAY,MAAM;AACxC;AAEA,SAAS,YAAY,OAAyC;AAC5D,SAAO,MAAM,SAAS;AACxB;AAeO,SAAS,gBACd,MACA,QACA,QACA,MAAiB,aAAa,GACT;AACrB,QAAM,QAAQ,IAAI,WAAW,MAAM,MAAM;AACzC,QAAM,SAAS,cAAc,QAAQ,QAAQ,GAAG;AAChD,SAAO;AAAA,IACL,aAAa,MAAM;AAAA,IACnB,cAAc,OAAO;AAAA,IACrB,QAAQ,gBAAgB,MAAM,QAAQ,OAAO,MAAM;AAAA,EACrD;AACF;AAGA,SAAS,cACP,QACA,QACA,KACY;AACZ,MAAI,CAACA,UAAS,MAAM,GAAG;AAErB,WAAO,IAAI,WAAW,QAAQ,MAAM;AAAA,EACtC;AAEA,QAAM,MAAM;AACZ,QAAM,UAA8B,CAAC;AACrC,MAAI,SAAS;AAEb,MAAI,MAAM,QAAQ,IAAI,OAAO,GAAG;AAC9B,eAAW,OAAO,IAAI,SAAS;AAC7B,UAAI,CAACA,UAAS,GAAG,EAAG;AACpB,YAAM,QAAQ;AACd,UAAI,YAAY,KAAK,GAAG;AACtB,cAAM,OAAO,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAC3D,cAAM,IAAI,IAAI,MAAM,MAAM,MAAM;AAChC,kBAAU,EAAE;AACZ,gBAAQ,KAAK,EAAE,MAAM;AAAA,MACvB,OAAO;AAEL,cAAM,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAC1D,kBAAU,kBAAkB,GAAG,KAAK;AAEpC,gBAAQ,KAAK,kBAAkB;AAAA,MACjC;AAAA,IACF;AAAA,EACF,WAAW,IAAI,YAAY,QAAW;AAEpC,UAAM,IAAI,IAAI,WAAW,IAAI,SAAS,MAAM;AAC5C,cAAU,EAAE;AACZ,YAAQ,KAAK,EAAE,MAAM;AAAA,EACvB;AAEA,MAAI,IAAI,sBAAsB,QAAW;AACvC,UAAM,IAAI,IAAI,WAAW,IAAI,mBAAmB,MAAM;AACtD,cAAU,EAAE;AACZ,YAAQ,KAAK,EAAE,MAAM;AAAA,EACvB;AAIA,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,IAAI,WAAW,QAAQ,MAAM;AAAA,EACtC;AAEA,SAAO,EAAE,QAAQ,QAAQ,eAAe,OAAO,EAAE;AACnD;AAQO,SAAS,gBACd,OACA,QACA,MAAiB,aAAa,GAClB;AACZ,SAAO,IAAI,WAAW,OAAO,MAAM;AACrC;AAeO,SAAS,YACd,cACA,eACA,QACA,MAAiB,aAAa,GACT;AACrB,QAAM,QAAQ,IAAI,WAAW,cAAc,MAAM;AACjD,QAAM,SAAS,IAAI,WAAW,eAAe,MAAM;AACnD,SAAO;AAAA,IACL,aAAa,MAAM;AAAA,IACnB,cAAc,OAAO;AAAA,IACrB,QAAQ,gBAAgB,MAAM,QAAQ,OAAO,MAAM;AAAA,EACrD;AACF;;;ACzJA,IAAM,QAAuB,EAAE,UAAU,EAAE;AAW3C,SAAS,oBAAoB,KAA0C;AACrE,QAAM,OAAQ,IAA+B;AAC7C,MAAI,OAAO,SAAS,SAAU,QAAO;AACrC,QAAM,YAAa,IAAgC;AACnD,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,SAAO;AACT;AAOA,SAAS,WAAW,OAAwB;AAC1C,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,YAAY,GAAI,QAAO,CAAC;AAC5B,MAAI;AACF,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAOA,SAAS,eAAe,SAA4C;AAClE,MAAI,CAAC,WAAW,YAAY,GAAI,QAAO;AACvC,MAAI;AACF,WAAO,IAAI,OAAO,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUA,SAAS,kBAAkB,OAA0C;AACnE,MAAI,SAAS,QAAQ,OAAO,UAAU,SAAU,QAAO,CAAC;AACxD,SAAO;AACT;AAUA,SAAS,wBACP,YACA,KACY;AACZ,QAAM,WAAW,QAAQ,IAAI;AAC7B,MACE,aAAa,UACb,wBAAwB,IAAI,QAAsB,GAClD;AACA,WAAO;AAAA,EACT;AACA,MAAI,wBAAwB,IAAI,UAAwB,GAAG;AACzD,WAAO;AAAA,EACT;AACA,QAAM,YAAa,IAAmC;AACtD,MACE,OAAO,cAAc,YACrB,wBAAwB,IAAI,SAAuB,GACnD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAgBA,SAAS,oBACP,MACA,WACA,KACA,UACM;AACN,MAAI,QAAQ,IAAI,8BAA8B,IAAK;AACnD,MAAI;AACF,UAAM,SAAS,iBAAiB,IAAI,UAAU,UAAU,eAAe;AACvE,UAAM,cAAc,YAAY,KAAK,UAAU,QAAQ,aAAa,CAAC;AAErE,UAAM,YACJ,OAAQ,IAAgC,cAAc,WAChD,IAA8B,YAChC;AACN,UAAM,gBAAiB,IAAiC;AACxD,UAAM,aACJ,OAAO,kBAAkB,YAAY,kBAAkB,KACnD,gBACA,QAAQ,IAAI;AAClB,UAAM,KAAK,gBAAgB,UAAU;AAErC,UAAM,QAAQ,UAAU,CAAC,CAAC;AAC1B,QAAI;AACF,YAAM,OAAO;AAAA,QACX,IAAI,YAAY,CAAC;AAAA,QACjB,IAAI,KAAK,IAAI;AAAA,QACb,aAAa,KAAK;AAAA,QAClB,UAAU,KAAK;AAAA;AAAA,QACf,OAAO;AAAA,QACP,aAAa;AAAA,QACb,cAAc,wBAAwB,KAAK,YAAY,GAAG;AAAA,QAC1D;AAAA,QACA,YAAY,GAAG;AAAA,QACf,YAAY,GAAG;AAAA,QACf,aAAa,YAAY;AAAA,QACzB,cAAc,YAAY;AAAA,QAC1B,kBAAkB,YAAY;AAAA,QAC9B,SAAS;AAAA,MACX,CAAC;AAAA,IACH,UAAE;AACA,YAAM,MAAM;AAAA,IACd;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAOA,eAAsB,QAAQ,MAA8C;AAC1E,QAAM,EAAE,YAAY,OAAO,aAAa,MAAM,IAAI;AAElD,MAAI;AACF,UAAM,YAAY,MAAM,wBAAwB,WAAW;AAC3D,UAAM,UAAU,MAAM,YAAY,UAAU;AAI5C,QAAI,CAAC,WAAW,CAAC,QAAQ,cAAc,CAAC,QAAQ,aAAa;AAC3D,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,WAAW,KAAK;AAC5B,UAAM,MAAM,QAAQ,WAAW,OAAO,GAAG;AAGzC,QAAI,cAAc;AAElB,UAAM,aAAa,UAAU,MAAM,KAAK;AACxC,QAAI,CAAC,cAAc,OAAO,WAAW,YAAY,YAAY;AAE3D,aAAO;AAAA,IACT;AAKA,UAAM,UAAU,oBAAoB,GAAG;AACvC,QAAI,YAAY,QAAW;AACzB,YAAM,KAAK,eAAe,WAAW,OAAO;AAC5C,UAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAG,QAAO;AAAA,IACtC;AAIA,UAAM,gBAAgB,MAAM,WAAW;AAAA;AAAA;AAAA,MAGrC;AAAA,IACF;AACA,UAAM,WAAW,kBAAkB,aAAa;AAIhD,wBAAoB,MAAM,WAAW,KAAK,QAAQ;AAElD,UAAM,QAAQ,QAAQ,YAAY,OAAO,QAAQ;AACjD,WAAO;AAAA,MACL,UAAU,MAAM;AAAA,MAChB,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC7D,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,IAC/D;AAAA,EACF,SAAS,KAAK;AAKZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,QAAI,MAAM,QAAQ,UAAU,IAAI,KAAK,KAAK,WAAW,aAAa,OAAO;AACzE,WAAO,uBAAuB,MAAM,OAAO;AAAA,EAC7C;AACF;AAQA,IAAM,uBAAmD,oBAAI,IAAI;AAAA,EAC/D;AAAA,EACA;AACF,CAAC;AAWD,eAAe,uBACb,MACA,cACwB;AACxB,MAAI,CAAC,qBAAqB,IAAI,KAAK,KAAK,EAAG,QAAO;AAClD,MAAI;AACF,UAAM,YAAY,MAAM,wBAAwB,KAAK,WAAW;AAChE,UAAM,UAAU,MAAM,YAAY,KAAK,UAAU;AACjD,QAAI,CAAC,SAAS,cAAc,CAAC,QAAQ,YAAa,QAAO;AAEzD,UAAM,aAAa,UAAU,MAAM,KAAK,KAAK;AAC7C,QAAI,CAAC,cAAc,OAAO,WAAW,YAAY,WAAY,QAAO;AAEpE,UAAM,MAAM,WAAW,KAAK,KAAK;AACjC,UAAM,MAAM,QAAQ,WAAW,KAAK,OAAO,GAAG;AAC9C,QAAI,cAAc,KAAK;AAEvB,UAAM,UAAU,oBAAoB,GAAG;AACvC,QAAI,YAAY,QAAW;AACzB,YAAM,KAAK,eAAe,WAAW,OAAO;AAC5C,UAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAG,QAAO;AAAA,IACtC;AAEA,UAAM,WAAW,kBAAkB,MAAM,WAAW,QAAQ,GAAY,CAAC;AACzE,QAAI,SAAS,aAAa,OAAQ,QAAO;AAEzC,UAAM,QAAQ,QAAQ,YAAY,KAAK,OAAO,QAAQ;AACtD,WAAO;AAAA,MACL,UAAU,MAAM;AAAA,MAChB,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC7D,GAAI,MAAM,WAAW,SACjB,EAAE,QAAQ,MAAM,OAAO,IACvB,EAAE,QAAQ,aAAa;AAAA,IAC7B;AAAA,EACF,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;AAmBA,SAAS,cACP,WACA,YACA,OAC2B;AAC3B,SAAO,UAAU,UAAU,UAAwB,GAAG,cAAc,KAAK;AAC3E;AASA,eAAsB,qBACpB,YACA,OACA,aACkB;AAClB,MAAI;AACF,UAAM,YAAY,MAAM,wBAAwB,WAAW;AAC3D,WAAO,OAAO,cAAc,WAAW,YAAY,KAAK,GAAG,YAAY;AAAA,EACzE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAeA,eAAsB,cACpB,MACwB;AACxB,QAAM,EAAE,YAAY,OAAO,aAAa,MAAM,IAAI;AAClD,MAAI;AACF,UAAM,YAAY,MAAM,wBAAwB,WAAW;AAC3D,UAAM,MAAM,cAAc,WAAW,YAAY,KAAK;AACtD,QAAI,CAAC,OAAO,OAAO,IAAI,YAAY,YAAY;AAE7C,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,WAAW,KAAK;AAG5B,UAAM,YACJ,OAAQ,KAAkC,eAAe,WACpD,IAA+B,aAChC;AACN,UAAM,MAAO,KAA2B;AACxC,UAAM,MAAuB;AAAA,MAC3B;AAAA,MACA,cAAc,wBAAwB,IAAI,UAAwB,IAC7D,aACD;AAAA,MACJ;AAAA,MACA,GAAI,OAAO,QAAQ,YAAY,QAAQ,KAAK,EAAE,YAAY,IAAI,IAAI,CAAC;AAAA,MACnE;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,IAAI,QAAQ,GAAG;AAGpC,wBAAoB,MAAM,WAAW,KAAK,WAAW,SAAY,CAAC,IAAI,MAAM;AAE5E,QAAI,WAAW,OAAW,QAAO;AACjC,UAAM,OAAO,KAAK,UAAU,MAAM;AAElC,QAAI,SAAS,OAAW,QAAO;AAC/B,WAAO,EAAE,UAAU,GAAG,QAAQ,KAAK;AAAA,EACrC,SAAS,KAAK;AAGZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,QAAI;AAAA,MACF,eAAe,UAAU,IAAI,KAAK,KAAK,WAAW;AAAA,MAClD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;;;AClbA,SAAS,kBAAkB;;;ACQ3B,SAAS,YAAY,cAAc,qBAAqB;AACxD,SAAS,YAAY;AAkBd,SAAS,uBAAgC;AAC9C,QAAM,YAAY,QAAQ,IAAI,6BAA6B,IACxD,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,MAAM,EAAE;AACzB,QAAM,OAAO,QAAQ,IAAI,qBAAqB,IAAI,KAAK;AACvD,SAAO,SAAS,SAAS,WAAW,KAAK,QAAQ;AACnD;AAgBO,SAAS,kBAA0B;AACxC,SAAO,KAAK,SAAS,GAAG,kBAAkB;AAC5C;AAOA,IAAM,YAAY;AAClB,IAAM,YAAY;AAElB,SAAS,WAAW,OAA8B;AAChD,MAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,EAAG,QAAO;AAClD,MAAI,QAAQ,UAAW,QAAO;AAC9B,MAAI,QAAQ,UAAW,QAAO;AAC9B,SAAO;AACT;AAMO,SAAS,cAAkC;AAChD,QAAM,OAAO,gBAAgB;AAC7B,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AACpD,QAAI,WAAW,QAAQ,OAAO,WAAW,SAAU,QAAO,CAAC;AAC3D,UAAM,MAA0B,CAAC;AACjC,eAAW,CAAC,QAAQ,KAAK,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC/E,UAAI,UAAU,QAAQ,OAAO,UAAU,SAAU;AACjD,YAAM,MAAM;AACZ,YAAM,SAAS,IAAI,QAAQ;AAC3B,YAAM,UAAU,IAAI,SAAS;AAC7B,UACE,OAAO,WAAW,YAClB,OAAO,SAAS,MAAM,KACtB,SAAS,KACT,OAAO,YAAY,YACnB,OAAO,SAAS,OAAO,KACvB,WAAW,GACX;AACA,QAAC,IAA0C,MAAM,IAAI;AAAA,UACnD;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AASO,SAAS,aAAa,QAAqB,OAAqB;AACrE,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,YAAY,KAAM;AACtB,MAAI;AACF,UAAM,UAAU,YAAY;AAC5B,UAAM,QAAQ,QAAQ,MAAM;AAC5B,QAAI;AACJ,QAAI,UAAU,UAAa,MAAM,WAAW,GAAG;AAC7C,aAAO,EAAE,QAAQ,SAAS,SAAS,EAAE;AAAA,IACvC,OAAO;AACL,YAAM,UAAU,MAAM,UAAU;AAEhC,YAAM,SAAS,MAAM,UAAU,UAAU,MAAM,UAAU;AACzD,aAAO,EAAE,QAAQ,QAAQ;AAAA,IAC3B;AACA,UAAM,UAA8B,EAAE,GAAG,SAAS,CAAC,MAAM,GAAG,KAAK;AACjE,UAAM,OAAO,gBAAgB;AAC7B,cAAU,SAAS,CAAC;AACpB,kBAAc,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AAAA,EACrE,QAAQ;AAAA,EAER;AACF;AAKA,IAAM,0BAA0B;AAGhC,IAAM,mBAAmB;AAezB,eAAsB,qBACpB,MACA,QAAgB,yBACQ;AACxB,QAAM,UAAU,QAAQ,IAAI,qBAAqB,IAAI,KAAK;AAC1D,MAAI,WAAW,GAAI,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,kBAAkB;AAAA,MACxC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,aAAa;AAAA,QACb,qBAAqB;AAAA,QACrB,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA,QACA,UAAU,CAAC,EAAE,MAAM,QAAQ,SAAS,KAAK,CAAC;AAAA,MAC5C,CAAC;AAAA,IACH,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,UAAM,IAAI,KAAK;AACf,QAAI,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,KAAK,KAAK,GAAG;AACzD,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUA,IAAM,eAAe;AACrB,IAAM,yBAAyB;AAE/B,IAAI,cAAc;AAClB,IAAI,gBAAgB;AACpB,IAAI,oBAAoB;AAOjB,SAAS,aAAa,MAAc,KAAK,IAAI,GAAY;AAE9D,MAAI,MAAM,iBAAiB,KAAQ;AACjC,oBAAgB;AAChB,wBAAoB;AAAA,EACtB;AACA,iBAAe;AACf,MAAI,cAAc,iBAAiB,EAAG,QAAO;AAC7C,MAAI,qBAAqB,uBAAwB,QAAO;AACxD,uBAAqB;AACrB,SAAO;AACT;AAwBO,SAAS,iBACd,cACA,QACA,UAA8B,YAAY,GACzB;AACjB,MAAI,WAAW,aAAa;AAC1B,UAAM,IAAI,QAAQ,MAAM;AACxB,QAAI,MAAM,UAAa,EAAE,UAAU,KAAK,OAAO,SAAS,EAAE,MAAM,KAAK,EAAE,SAAS,GAAG;AACjF,aAAO;AAAA,QACL,QAAQ,KAAK,IAAI,GAAG,KAAK,MAAM,eAAe,EAAE,MAAM,CAAC;AAAA,QACvD,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,QAAQ,cAAc,QAAQ,mBAAmB;AAC5D;AAGO,SAAS,eAAe,SAA8B;AAC3D,SAAO;AACT;;;ACpLA,SAAS,cAAc,OAAwB;AAC7C,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUA,eAAsB,cACpB,MACiB;AACjB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,iBAAiB;AAAA,IACjB;AAAA,IACA;AAAA,EACF,IAAI;AAGJ,QAAM,mBAAmB,QAAQ,IAAI,8BAA8B;AAInE,QAAM,qBAAqB,qBAAqB;AAKhD,QAAM,QAAQ,WAAW,SAAS,MAAM;AAAA,IACtC,OAAO,CAAC,QAAQ,QAAQ,SAAS;AAAA,IACjC,KAAK,QAAQ;AAAA,EACf,CAAC;AAID,MAAI,SAAsB,iBAAiB,IAAI,eAAe;AAE9D,QAAM,UAAU,oBAAI,IAAyB;AAE7C,MAAI,MAAM;AAEV,MAAI,mBAAmB;AAQvB,WAAS,aAGP;AACA,WAAO;AAAA,MACL,IAAI,YAAY,KAAK;AAAA,MACrB,IAAI,KAAK,IAAI;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,iBAAiB,SAAY,EAAE,aAAa,IAAI,CAAC;AAAA,MACrD,GAAI,iBAAiB,SAAY,EAAE,aAAa,IAAI,CAAC;AAAA,IACvD;AAAA,EACF;AAOA,WAAS,gBAAgB,KAA2B;AAClD,UAAM,SAAS,IAAI;AACnB,QAAI,WAAW,cAAc;AAC3B,YAAM,SAAS,SAAS,IAAI,MAAM,IAAI,IAAI,SAAS;AACnD,YAAM,aACJ,UAAU,SAAS,OAAO,YAAY,CAAC,IAClC,OAAO,YAAY,IACpB;AACN,YAAM,aACJ,cAAc,OAAO,WAAW,MAAM,MAAM,WACvC,WAAW,MAAM,IAClB;AACN,eAAS,iBAAiB,YAAY,eAAe;AACrD;AAAA,IACF;AAEA,QAAI,WAAW,cAAc;AAC3B,YAAM,MAAM,MAAM,IAAI,EAAE;AACxB,UAAI,QAAQ,KAAM;AAClB,YAAM,SAAS,SAAS,IAAI,MAAM,IAAI,IAAI,SAAS;AACnD,YAAM,WACJ,UAAU,OAAO,OAAO,MAAM,MAAM,WAC/B,OAAO,MAAM,IACd;AACN,YAAM,WAAW,SAAS,OAAO,WAAW,IAAI;AAChD,cAAQ,IAAI,KAAK,EAAE,UAAU,MAAM,SAAS,CAAC;AAAA,IAC/C;AAAA,EACF;AAOA,WAAS,gBAAgB,KAA2B;AAClD,UAAM,MAAM,MAAM,IAAI,EAAE;AACxB,QAAI,QAAQ,KAAM;AAElB,UAAM,cAAc,QAAQ,IAAI,GAAG;AACnC,QAAI,gBAAgB,QAAW;AAC7B,cAAQ,OAAO,GAAG;AAClB,qBAAe,aAAa,GAAG;AAC/B;AAAA,IACF;AAIA,QAAI,yBAAyB,CAAC,kBAAkB;AAC9C,YAAM,SAAS,SAAS,IAAI,MAAM,IAAI,IAAI,SAAS;AACnD,YAAM,QAAQ,SAAS,OAAO,OAAO,IAAI;AACzC,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,uBAAe,KAAK;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAGA,WAAS,eAAe,MAAmB,UAAgC;AACzE,UAAM,WAAW,SAAS,UAAU;AACpC,UAAM,SAAS,SAAS;AAGxB,UAAM,mBAAmB,WAAW,CAAC,IAAI;AACzC,UAAM,cAAc;AAAA,MAClB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAMA,QAAI,cAAc,YAAY;AAC9B,QAAI,eAAe,YAAY;AAC/B,QAAI,mBAAqC,YAAY;AACrD,QAAI,sBAAsB,WAAW,aAAa;AAChD,UAAI;AACF,SAAC,EAAE,aAAa,cAAc,iBAAiB,IAAI;AAAA,UACjD,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AACA,+BAAuB,KAAK,MAAM,YAAY,WAAW;AAAA,MAC3D,QAAQ;AAAA,MAGR;AAAA,IACF;AAIA,UAAM,gBACJ,SAAS,MAAM,KAAK,OAAO,SAAS,MAAM;AAC5C,UAAM,OAAO;AAAA,MACX,GAAG,WAAW;AAAA,MACd,UAAU,KAAK;AAAA,MACf,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,YAAY;AAAA,IACvB,CAAC;AAAA,EACH;AAQA,WAAS,gBACP,OACA,QACA,WACmF;AACnF,QAAI,cAAc,oBAAoB;AACpC,aAAO,EAAE,aAAa,OAAO,cAAc,QAAQ,kBAAkB,UAAU;AAAA,IACjF;AACA,UAAM,MAAM,iBAAiB,OAAO,MAAM;AAC1C,UAAM,OAAO,iBAAiB,QAAQ,MAAM;AAC5C,UAAM,aACJ,IAAI,WAAW,0BAA0B,KAAK,WAAW;AAC3D,WAAO;AAAA,MACL,aAAa,IAAI;AAAA,MACjB,cAAc,KAAK;AAAA,MACnB,kBAAkB,aAAa,yBAAyB;AAAA,IAC1D;AAAA,EACF;AAQA,WAAS,uBAAuBC,OAAe,mBAAiC;AAC9E,QAAI,qBAAqB,EAAG;AAC5B,QAAI,CAAC,aAAa,EAAG;AACrB,UAAM,OAAO,cAAcA,KAAI;AAC/B,QAAI,SAAS,GAAI;AAIjB,SAAK,qBAAqB,MAAM,eAAe,MAAM,CAAC,EACnD,KAAK,CAAC,UAAU;AACf,UAAI,UAAU,QAAQ,QAAQ,GAAG;AAC/B,qBAAa,QAAQ,QAAQ,iBAAiB;AAAA,MAChD;AAAA,IACF,CAAC,EACA,MAAM,MAAM;AAAA,IAEb,CAAC;AAAA,EACL;AAGA,WAAS,eAAe,OAAiC;AACvD,uBAAmB;AACnB,UAAM,QAAQ,gBAAgB,OAAO,QAAQ,SAAS;AACtD,UAAM,OAAO;AAAA,MACX,GAAG,WAAW;AAAA,MACd,UAAU;AAAA,MACV,OAAO;AAAA,MACP,aAAa,MAAM;AAAA,MACnB,cAAc;AAAA,MACd,kBAAkB,MAAM;AAAA,MACxB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAGA,WAAS,WAAW,MAAc,WAAsC;AACtE,QAAI,CAAC,iBAAkB;AACvB,QAAI;AACJ,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,UAAI,CAAC,SAAS,MAAM,EAAG;AACvB,YAAM;AAAA,IACR,QAAQ;AACN;AAAA,IACF;AACA,QAAI;AACF,UAAI,cAAc,SAAU,iBAAgB,GAAG;AAAA,UAC1C,iBAAgB,GAAG;AAAA,IAC1B,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,QAAM,cAAc,IAAI,WAAW,CAAC,SAAS,WAAW,MAAM,QAAQ,CAAC;AACvE,QAAM,cAAc,IAAI,WAAW,CAAC,SAAS,WAAW,MAAM,QAAQ,CAAC;AAMvE,UAAQ,MAAM,GAAG,QAAQ,CAAC,UAAkB;AAC1C,QAAI,MAAM,SAAS,MAAM,MAAM,UAAU;AACvC,YAAM,KAAK,MAAM,MAAM,MAAM,KAAK;AAClC,UAAI,CAAC,IAAI;AACP,gBAAQ,MAAM,MAAM;AACpB,cAAM,MAAM,KAAK,SAAS,MAAM,QAAQ,MAAM,OAAO,CAAC;AAAA,MACxD;AAAA,IACF;AACA,QAAI,kBAAkB;AACpB,UAAI;AACF,oBAAY,KAAK,KAAK;AAAA,MACxB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,CAAC;AACD,UAAQ,MAAM,GAAG,OAAO,MAAM;AAC5B,QAAI,MAAM,SAAS,CAAC,MAAM,MAAM,UAAW,OAAM,MAAM,IAAI;AAAA,EAC7D,CAAC;AAGD,MAAI,MAAM,QAAQ;AAChB,UAAM,cAAc,MAAM;AAC1B,gBAAY,GAAG,QAAQ,CAAC,UAAkB;AACxC,YAAM,KAAK,QAAQ,OAAO,MAAM,KAAK;AACrC,UAAI,CAAC,IAAI;AACP,oBAAY,MAAM;AAClB,gBAAQ,OAAO,KAAK,SAAS,MAAM,YAAY,OAAO,CAAC;AAAA,MACzD;AACA,UAAI,kBAAkB;AACpB,YAAI;AACF,sBAAY,KAAK,KAAK;AAAA,QACxB,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAGA,QAAM,gBAAgB,CAAC,WAAiC;AACtD,QAAI;AACF,UAAI,CAAC,MAAM,OAAQ,OAAM,KAAK,MAAM;AAAA,IACtC,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,WAAW,MAAY,cAAc,QAAQ;AACnD,QAAM,YAAY,MAAY,cAAc,SAAS;AACrD,UAAQ,GAAG,UAAU,QAAQ;AAC7B,UAAQ,GAAG,WAAW,SAAS;AAG/B,SAAO,MAAM,IAAI,QAAgB,CAAC,YAAY;AAC5C,UAAM,SAAS,CAAC,SAAuB;AACrC,cAAQ,eAAe,UAAU,QAAQ;AACzC,cAAQ,eAAe,WAAW,SAAS;AAC3C,UAAI;AACF,cAAM,MAAM;AAAA,MACd,QAAQ;AAAA,MAER;AACA,cAAQ,IAAI;AAAA,IACd;AAEA,UAAM,GAAG,SAAS,MAAM;AAGtB,aAAO,GAAG;AAAA,IACZ,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,MAAM,WAAW;AAClC,UAAI,OAAO,SAAS,UAAU;AAC5B,eAAO,IAAI;AACX;AAAA,MACF;AAEA,UAAI,QAAQ;AACV,cAAM,MAAM,eAAe,MAAM;AACjC,eAAO,QAAQ,SAAY,IAAI,MAAM,GAAG;AACxC;AAAA,MACF;AACA,aAAO,CAAC;AAAA,IACV,CAAC;AAAA,EACH,CAAC;AACH;AAGA,SAAS,eAAe,QAA4C;AAClE,QAAM,QAAiD;AAAA,IACrD,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AACA,SAAO,MAAM,MAAM;AACrB;;;AF7ZA,SAAS,iBAAiB,MAAyB,QAAQ,KAAa;AACtE,SACE,IAAI,2BACJ,IAAI,qBACJ,IAAI,mBACJ,IAAI,mBACJ,IAAI,kBACJ,QAAQ,WAAW,CAAC;AAExB;AAEA,eAAsB,SAAS,MAAwC;AACrE,QAAM,EAAE,aAAa,eAAe,YAAY,cAAc,qBAAqB,IACjF;AAEF,QAAM,YAAY,MAAM,wBAAwB,WAAW;AAE3D,QAAM,KAAK,gBAAgB,QAAQ,IAAI,CAAC;AAIxC,QAAM,eACJ,yBAAyB,UACzB,wBAAwB,IAAI,oBAAoB,IAC5C,uBACA,kBAAkB,EAAE;AAC1B,QAAM,YAAY,iBAAiB;AAInC,QAAM,eAAe,mBAAmB,eAAe,UAAU;AAEjE,QAAM,QAAQ,UAAU,CAAC,CAAC;AAC1B,QAAM,MAAM,aAAa;AAEzB,SAAO,cAAc;AAAA,IACnB;AAAA,IACA,SAAS;AAAA,IACT,MAAM;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,iBAAiB,UAAU,UAAU;AAAA,IACrC;AAAA,IACA;AAAA,IACA,YAAY,GAAG;AAAA,IACf,YAAY,GAAG;AAAA,IACf,iBAAiB,UAAU,UAAU;AAAA,IACrC;AAAA,IACA;AAAA,EACF,CAAC;AACH;;;AGpEA,IAAM,OAA4B,EAAE,UAAU,GAAG,UAAU,MAAM;AAEjE,SAASC,UAAS,GAA0C;AAC1D,SAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC;AAChE;AAGA,SAAS,YAAY,GAAoB;AACvC,QAAM,IAAI,OAAO,MAAM,WAAW,IAAI,OAAO,MAAM,WAAW,OAAO,CAAC,IAAI;AAC1E,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAG,QAAO;AACzC,SAAO,KAAK,MAAM,CAAC;AACrB;AAGA,SAAS,SAAS,KAA8B,MAA6C;AAC3F,aAAW,KAAK,MAAM;AACpB,UAAM,IAAI,IAAI,CAAC;AACf,QAAI,OAAO,MAAM,YAAY,EAAE,KAAK,MAAM,GAAI,QAAO;AAAA,EACvD;AACA,SAAO;AACT;AAGA,SAAS,WACP,MACA,MACQ;AACR,aAAW,KAAK,MAAM;AACpB,QAAI,KAAK,KAAM,QAAO,YAAY,KAAK,CAAC,CAAC;AAAA,EAC3C;AACA,SAAO;AACT;AAGA,SAAS,kBAAkB,MAAoE;AAC7F,aAAW,KAAK,CAAC,iBAAiB,gBAAgB,GAAG;AACnD,QAAIA,UAAS,KAAK,CAAC,CAAC,EAAG,QAAO,KAAK,CAAC;AAAA,EACtC;AAGA,aAAW,KAAK,CAAC,YAAY,iBAAiB,gBAAgB,GAAG;AAC/D,UAAM,SAAS,KAAK,CAAC;AACrB,QAAIA,UAAS,MAAM,GAAG;AACpB,iBAAW,MAAM,CAAC,iBAAiB,gBAAgB,GAAG;AACpD,YAAIA,UAAS,OAAO,EAAE,CAAC,EAAG,QAAO,OAAO,EAAE;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAGA,IAAM,kBAAuC,oBAAI,IAAgB;AAAA,EAC/D;AAAA,EAAe;AAAA,EAAS;AAAA,EAAU;AAAA,EAAkB;AAAA,EACpD;AAAA,EAAe;AAAA,EAAc;AAAA,EAAY;AAAA,EAAQ;AAAA,EAAY;AAAA,EAAQ;AAAA,EACrE;AAAA,EAAY;AAAA,EAAO;AAAA,EAAe;AAAA,EAAmB;AAAA,EAAQ;AAAA,EAC7D;AAAA,EAAQ;AAAA,EAAM;AAAA,EAAO;AAAA,EAAS;AAAA,EAAY;AAAA,EAAQ;AAAA,EAAO;AAAA,EAAY;AAAA,EACrE;AAAA,EAAS;AAAA,EAAS;AAAA,EAAa;AACjC,CAAC;AAED,SAAS,aAAa,IAAwB;AAC5C,SAAQ,gBAAgB,IAAI,EAAE,IAAI,KAAK;AACzC;AASA,eAAsB,cACpB,MAC8B;AAC9B,MAAI;AAGF,UAAM,UAAU,KAAK,MAAM,KAAK;AAChC,QAAI,YAAY,GAAI,QAAO;AAE3B,QAAI;AACJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN,aAAO;AAAA,IACT;AACA,QAAI,CAACA,UAAS,GAAG,EAAG,QAAO;AAE3B,UAAM,OAAO,kBAAkB,GAAG;AAClC,QAAI,SAAS,OAAW,QAAO;AAE/B,UAAM,eAAe,WAAW,MAAM,CAAC,oBAAoB,oBAAoB,CAAC;AAChF,UAAM,aAAa,WAAW,MAAM,CAAC,wBAAwB,wBAAwB,CAAC;AACtF,UAAM,SAAS,WAAW,MAAM,CAAC,2BAA2B,4BAA4B,CAAC;AACzF,UAAM,WAAW,WAAW,MAAM,CAAC,sBAAsB,sBAAsB,CAAC;AAIhF,UAAM,cAAc,KAAK,IAAI,GAAG,eAAe,KAAK,IAAI,QAAQ,YAAY,CAAC;AAE7E,UAAM,eAAe,aAAa;AAGlC,QAAI,gBAAgB,KAAK,iBAAiB,EAAG,QAAO;AAIpD,UAAM,YACJ,SAAS,KAAK,CAAC,cAAc,aAAa,kBAAkB,iBAAiB,CAAC,KAAK;AACrF,UAAM,MAAM,SAAS,KAAK,CAAC,OAAO,aAAa,cAAc,aAAa,CAAC,KAAK,QAAQ,IAAI;AAC5F,UAAM,KAAK,gBAAgB,GAAG;AAE9B,UAAM,SAA0B;AAAA,MAC9B,IAAI,YAAY,CAAC;AAAA,MACjB,IAAI,KAAK,IAAI;AAAA,MACb,aAAa,KAAK;AAAA,MAClB,UAAU;AAAA,MACV,OAAO;AAAA,MACP,cAAc,aAAa,KAAK,UAAU;AAAA,MAC1C;AAAA,MACA,YAAY,GAAG;AAAA,MACf,YAAY,GAAG;AAAA,MACf;AAAA,MACA;AAAA,MACA,kBAAkB;AAAA,MAClB,SAAS;AAAA,IACX;AAEA,UAAM,QAAQ,UAAU,CAAC,CAAC;AAC1B,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,UAAE;AACA,UAAI;AACF,cAAM,MAAM;AAAA,MACd,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO,EAAE,UAAU,GAAG,UAAU,KAAK;AAAA,EACvC,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;","names":["isObject","args","isObject"]}

package/dist/claude-code-4275HQU4.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/adapters/claude-code/index.ts","../src/adapters/claude-code/wire.ts"],"sourcesContent":["/**\n * adapters/claude-code — Claude Code platform adapter for agent-connector.\n *\n * Generalized from context-mode's proven 15-platform Claude adapter: the served\n * identity is now `ctx.connector` (not a hardcoded \"context-mode\"), and every\n * hook command points at the single stable home binary\n * (`buildHomeBinHookCommand`) so one framework update propagates everywhere.\n *\n * Claude Code is a json-stdio host:\n *   - MCP servers: user scope → ~/.claude.json (\"mcpServers\"); project scope →\n *     <projectDir>/.mcp.json (\"mcpServers\").\n *   - Hooks: <configDir>/settings.json under \"hooks\", keyed by event name, each\n *     value an array of { matcher, hooks:[{ type:\"command\", command }] }.\n *   - Reply: a `hookSpecificOutput` object (allow|deny|ask + reason,\n *     additionalContext, updatedInput) on stdout with exit 0.\n */\n\nimport { copyFileSync, existsSync, lstatSync, readFileSync, realpathSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { basename, dirname, join } from \"node:path\";\n\nimport { BaseAdapter } from \"../base.js\";\nimport type { Adapter, HookReply, InstallContext, MemoryTarget, NormalizedEvent } from \"../spi.js\";\nimport type {\n  ChangeRecord,\n  CommandDef,\n  DetectedPlatform,\n  DiagnosticResult,\n  HealthCheck,\n  HookEventName,\n  HookParadigm,\n  HookResponse,\n  JsonValue,\n  NotificationEvent,\n  PermissionRequestEvent,\n  PlatformCapabilities,\n  PlatformId,\n  PostToolUseEvent,\n  PostToolUseFailureEvent,\n  PreCompactEvent,\n  PreToolUseEvent,\n  SessionEndEvent,\n  SessionStartEvent,\n  ServerDef,\n  SkillDef,\n  StopEvent,\n  SubagentDef,\n  SubagentStartEvent,\n  SubagentStopEvent,\n  Transport,\n  UserPromptSubmitEvent,\n} from \"../../core/types.js\";\nimport { resolveEnvRefsDeep, rewriteEnvRefs } from \"../../core/interpolate.js\";\nimport {\n  buildHomeBinHookCommand,\n  buildServeWrapperCommand,\n  isHomeBinHookCommand,\n  shouldWrapForTelemetry,\n} from \"../../core/spawn.js\";\nimport {\n  type ConfigPatchLedgerEntry,\n  addLedgerOwner,\n  configPatchManualEdit,\n  configPatchNamespaceViolation,\n  createLedgerEntry,\n  describeJsonValue,\n  dropLedgerEntry,\n  findLedgerEntry,\n  hashJsonValue,\n  isValidConfigPatchKey,\n  jsonDeepEquals,\n  ledgerEntriesOwnedBy,\n  loadConfigPatchLedger,\n  removeLedgerOwner,\n  saveConfigPatchLedger,\n} from \"../../core/config-patch-ledger.js\";\nimport { readRegisteredMeta } from \"../../core/load-connector.js\";\nimport {\n  linesOutsideFences,\n  listManagedBlocks,\n  loadMemoryLedger,\n  recordMemoryTarget,\n  removeBlocksFromText,\n  removeManagedBlocksFile,\n  saveMemoryLedger,\n  upsertManagedBlockFile,\n} from \"../../core/managed-block.js\";\nimport { backupsDir, ensureDir } from \"../../core/paths.js\";\nimport {\n  type ClaudeHookEvent,\n  type ClaudeWireInput,\n  extractSessionId,\n  toolResponseToString,\n} from \"./wire.js\";\nimport { renderCommandMd, renderSkillMd, renderSubagentMd } from \"./render.js\";\n\nconst HOST: PlatformId = \"claude-code\";\nconst MCP_ROOT_KEY = \"mcpServers\";\n\n/**\n * Reserved blockId of the SHARED `@AGENTS.md` import bridge in CLAUDE.md\n * (agents-import mode). The `_shared/` prefix cannot collide with a connector\n * blockId (connector ids match ^[a-z0-9][a-z0-9-]*$), and the bridge is\n * refcounted namespace-wide: it is removed only when the LAST agent-connector\n * block leaves the sibling AGENTS.md.\n */\nconst CLAUDE_AGENTS_IMPORT_BLOCK_ID = \"_shared/claude-agents-import\";\n\n/** A single hook registration entry as Claude Code stores it in settings.json. */\ninterface ClaudeHookEntry {\n  matcher: string;\n  hooks: Array<{ type: \"command\"; command: string }>;\n}\n\n/** Native MCP server entry shapes Claude Code accepts under `mcpServers`. */\ninterface ClaudeStdioServer {\n  type: \"stdio\";\n  command: string;\n  args: string[];\n  env?: Record<string, string>;\n  cwd?: string;\n}\ninterface ClaudeHttpServer {\n  type: \"http\";\n  url: string;\n  headers?: Record<string, string>;\n}\n\nexport class ClaudeCodeAdapter extends BaseAdapter implements Adapter {\n  readonly id: PlatformId = HOST;\n  readonly name = \"Claude Code\";\n  readonly paradigm: HookParadigm = \"json-stdio\";\n\n  readonly capabilities: PlatformCapabilities = {\n    preToolUse: true,\n    postToolUse: true,\n    preCompact: true,\n    sessionStart: true,\n    sessionEnd: true,\n    userPromptSubmit: true,\n    stop: true,\n    notification: true,\n    // Newer events — Claude Code is the reference host for all four.\n    permissionRequest: true,\n    postToolUseFailure: true,\n    subagentStart: true,\n    subagentStop: true,\n    // Claude Code can rewrite PreToolUse input (updatedInput) but does NOT let a\n    // PostToolUse hook rewrite already-emitted tool output.\n    canModifyArgs: true,\n    canModifyOutput: false,\n    canInjectSessionContext: true,\n    // Native passthrough hooks: settings.json hook keys are free-form event\n    // names, so any host event (TaskCreated, TeammateIdle, WorktreeCreate, …)\n    // declared under platforms[\"claude-code\"].nativeHooks installs verbatim.\n    supportsNativeHooks: true,\n    // Declarative host-config key patches: claude-code is the ONLY v1 host\n    // (set-if-absent leaf keys in settings.json, refcounted ownership ledger,\n    // sensitive-key denylist — see SENSITIVE_KEY_RULES below).\n    supportsConfigPatch: true,\n    transports: [\"stdio\", \"http\"],\n    // Content surfaces: Claude Code is the reference implementation for all three.\n    supportsCommands: true,\n    supportsSkills: true,\n    supportsSubagents: true,\n    // Memory surface — EXCEPTION host: Claude Code reads CLAUDE.md, NOT\n    // AGENTS.md (docs are explicit; no AGENTS.md support through v2.1.172), so\n    // memoryTargets/installMemory below override the base AGENTS.md default.\n    supportsMemory: true,\n  };\n\n  // ── Detection ────────────────────────────────────────────────────────────\n\n  detectInstalled(projectDir: string): DetectedPlatform {\n    const userDir = join(homedir(), \".claude\");\n    const userSettings = join(userDir, \"settings.json\");\n    const userServers = join(homedir(), \".claude.json\");\n    const projectServers = join(projectDir, \".mcp.json\");\n    const userInstalled =\n      existsSync(userDir) || existsSync(userSettings) || existsSync(userServers);\n    const projInstalled = existsSync(projectServers);\n    const installed = userInstalled || projInstalled;\n    // Report the scope/path/reason for the marker that actually matched, so a\n    // project-only install isn't misreported as a (non-existent) user install.\n    const scope = projInstalled && !userInstalled ? \"project\" : \"user\";\n    const configPath = scope === \"project\" ? projectServers : userSettings;\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath,\n      scope,\n      reason: installed\n        ? scope === \"project\"\n          ? `found project Claude Code config at ${projectServers}`\n          : `found Claude Code config under ${userDir}`\n        : `no Claude Code config at ${userDir}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Native paths ─────────────────────────────────────────────────────────\n\n  getConfigDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".claude\")\n      : join(homedir(), \".claude\");\n  }\n\n  getServerConfigPath(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".mcp.json\")\n      : join(homedir(), \".claude.json\");\n  }\n\n  getHookConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"settings.json\");\n  }\n\n  // ── MCP server install / uninstall ───────────────────────────────────────\n\n  installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST]?.server;\n    if (!connector.server || override === false) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail: connector.server\n            ? \"server registration disabled for claude-code\"\n            : \"connector declares no MCP server\",\n        },\n      ];\n    }\n\n    // Shallow-merge any per-platform server override into the base ServerDef.\n    const server: ServerDef =\n      override && typeof override === \"object\"\n        ? { ...connector.server, ...override }\n        : connector.server;\n\n    const serverPath = this.getServerConfigPath(ctx);\n    const entry = this.renderServerEntry(ctx, server);\n\n    return [\n      this.upsertServerInJson(serverPath, MCP_ROOT_KEY, connector.id, entry, ctx.dryRun),\n    ];\n  }\n\n  uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const serverPath = this.getServerConfigPath(ctx);\n    return [\n      this.removeServerFromJson(serverPath, MCP_ROOT_KEY, ctx.connector.id, ctx.dryRun),\n    ];\n  }\n\n  /** Render a normalized ServerDef into Claude Code's native mcpServers entry. */\n  private renderServerEntry(\n    ctx: InstallContext,\n    server: ServerDef,\n  ): ClaudeStdioServer | ClaudeHttpServer {\n    const transport: Transport = server.transport;\n\n    if (transport === \"stdio\") {\n      let command = server.command ?? \"\";\n      let args = [...(server.args ?? [])];\n\n      // Transparent telemetry wrapping: route the real command through\n      // `<homeBin> serve --connector <id> -- <command> <args...>`.\n      if (shouldWrapForTelemetry(server, ctx.connector.telemetry)) {\n        const wrapped = buildServeWrapperCommand(\n          ctx.homeBinPath,\n          ctx.connector.id,\n          command,\n          args,\n          ctx.scope,\n          this.id,\n        );\n        command = wrapped.command;\n        args = wrapped.args;\n      }\n\n      const entry: ClaudeStdioServer = { type: \"stdio\", command, args };\n      const env = this.renderEnv(server.env);\n      if (env) entry.env = env;\n      if (server.cwd) entry.cwd = resolveEnvRefsDeep(server.cwd);\n      return entry;\n    }\n\n    // http (and any other remote transport we surface) — Claude registers a URL.\n    const entry: ClaudeHttpServer = {\n      type: \"http\",\n      url: rewriteEnvRefs(server.url ?? \"\", claudeEnvToken),\n    };\n    if (server.headers) {\n      entry.headers = this.renderEnv(server.headers) ?? {};\n    }\n    return entry;\n  }\n\n  /**\n   * Render env/header values. Claude Code supports its own `${VAR}` native\n   * interpolation, so translate `${env:VAR}` refs to that native token rather\n   * than baking secrets into the file. Literals pass through unchanged.\n   */\n  private renderEnv(\n    env: Record<string, string> | undefined,\n  ): Record<string, string> | undefined {\n    if (!env || Object.keys(env).length === 0) return undefined;\n    const out: Record<string, string> = {};\n    for (const [k, v] of Object.entries(env)) {\n      out[k] = rewriteEnvRefs(v, claudeEnvToken);\n    }\n    return out;\n  }\n\n  // ── Hook install / uninstall ─────────────────────────────────────────────\n\n  installHooks(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST];\n\n    // `hooks: false` disables only the NORMALIZED hooks. nativeHooks is a\n    // sibling, explicitly claude-code-scoped declaration on the same override —\n    // it installs regardless (the dev wrote both keys on the same object).\n    const normalizedEvents = override?.hooks === false ? [] : connector.hookEvents;\n    const nativeHooks = override?.nativeHooks ?? {};\n    const nativeEvents = Object.keys(nativeHooks);\n\n    if (normalizedEvents.length === 0 && nativeEvents.length === 0) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail:\n            override?.hooks === false\n              ? \"hooks disabled for claude-code\"\n              : \"connector declares no hooks\",\n        },\n      ];\n    }\n\n    const settingsPath = this.getHookConfigPath(ctx);\n    const settings = this.readJson<Record<string, unknown>>(settingsPath) ?? {};\n    const hooks = (settings.hooks ??= {}) as Record<string, ClaudeHookEntry[]>;\n\n    const changes: ChangeRecord[] = [];\n    let mutated = false;\n\n    // One pass over normalized + NATIVE events: native event-name keys are\n    // written VERBATIM (e.g. \"TaskCreated\"), matcher from the def, and the\n    // exact same home-bin command shape — so uninstall/doctor/telemetry treat\n    // both identically.\n    const pending: Array<{ event: string; matcher: string }> = [\n      ...normalizedEvents.map((event) => ({\n        event: event as string,\n        matcher: connector.hooks[event]?.matcher ?? \"\",\n      })),\n      ...nativeEvents.map((event) => ({\n        event,\n        matcher: nativeHooks[event]?.matcher ?? \"\",\n      })),\n    ];\n\n    for (const { event, matcher } of pending) {\n      const command = buildHomeBinHookCommand(ctx.homeBinPath, HOST, event, connector.id);\n      const entry: ClaudeHookEntry = {\n        matcher,\n        hooks: [{ type: \"command\", command }],\n      };\n\n      const bucket = (hooks[event] ??= []);\n      const existingIdx = bucket.findIndex((e) => this.entryHasCommand(e, command));\n\n      if (existingIdx >= 0) {\n        if (JSON.stringify(bucket[existingIdx]) === JSON.stringify(entry)) {\n          changes.push({\n            platform: this.id,\n            action: \"skip\",\n            path: settingsPath,\n            detail: `hooks.${event} already registered`,\n          });\n          continue;\n        }\n        bucket[existingIdx] = entry;\n        changes.push({\n          platform: this.id,\n          action: \"update\",\n          path: settingsPath,\n          detail: `hooks.${event}`,\n        });\n      } else {\n        bucket.push(entry);\n        changes.push({\n          platform: this.id,\n          action: \"create\",\n          path: settingsPath,\n          detail: `hooks.${event}`,\n        });\n      }\n      mutated = true;\n    }\n\n    if (mutated) this.writeJson(settingsPath, settings, ctx.dryRun);\n    return changes;\n  }\n\n  uninstallHooks(ctx: InstallContext): ChangeRecord[] {\n    const settingsPath = this.getHookConfigPath(ctx);\n    const settings = this.readJson<Record<string, unknown>>(settingsPath);\n    const hooks = settings?.hooks as Record<string, ClaudeHookEntry[]> | undefined;\n    if (!settings || !hooks) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          path: settingsPath,\n          detail: \"no hooks section present\",\n        },\n      ];\n    }\n\n    const changes: ChangeRecord[] = [];\n    let mutated = false;\n\n    for (const event of Object.keys(hooks)) {\n      const bucket = hooks[event];\n      if (!Array.isArray(bucket)) continue;\n\n      // Strip our hook command from each entry; drop entries left empty.\n      const next: ClaudeHookEntry[] = [];\n      let removed = 0;\n      for (const e of bucket) {\n        const innerBefore = e.hooks?.length ?? 0;\n        const inner = (e.hooks ?? []).filter(\n          (h) => !this.isOurCommand(h.command, ctx),\n        );\n        removed += innerBefore - inner.length;\n        if (inner.length > 0) next.push({ matcher: e.matcher ?? \"\", hooks: inner });\n      }\n\n      if (removed > 0) {\n        if (next.length > 0) hooks[event] = next;\n        else delete hooks[event];\n        changes.push({\n          platform: this.id,\n          action: \"remove\",\n          path: settingsPath,\n          detail: `hooks.${event} (${removed})`,\n        });\n        mutated = true;\n      }\n    }\n\n    if (mutated) this.writeJson(settingsPath, settings, ctx.dryRun);\n    if (changes.length === 0) {\n      changes.push({\n        platform: this.id,\n        action: \"skip\",\n        path: settingsPath,\n        detail: \"no matching hook entries\",\n      });\n    }\n    return changes;\n  }\n\n  private entryHasCommand(entry: ClaudeHookEntry, command: string): boolean {\n    return (entry.hooks ?? []).some((h) => h.command === command);\n  }\n\n  // ── Declarative host-config key patches (configPatch) ────────────────────\n  // FIXED semantics (docs/ARCHITECTURE.md §4): set-if-absent on a single\n  // dotted LEAF key of settings.json, skip-warn on ANY conflict (present key,\n  // non-object intermediate, drift), refcounted ownership in the persisted\n  // ledger at <dataRoot>/state/config-patches.json. Reuses the adapter's\n  // existing whole-file settings.json JSON IO (the same handling the hook\n  // install performs on this exact file) — Claude Code itself rewrites this\n  // file, so format preservation is a non-issue here. NOTE for future hosts:\n  // VS Code JSONC needs jsonc-parser modify/applyEdits and Codex TOML needs an\n  // anchored edit — core/toml.ts's round-trip is BANNED for configPatch.\n\n  /** The ONLY file configPatch may touch on claude-code: settings.json at scope. */\n  getPatchableConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"settings.json\");\n  }\n\n  override installConfigPatches(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const patches = connector.platforms[HOST]?.configPatch ?? [];\n    if (patches.length === 0) {\n      return [\n        { platform: this.id, action: \"skip\", detail: \"connector declares no configPatch entries\" },\n      ];\n    }\n\n    const filePath = this.getPatchableConfigPath(ctx);\n    // OVERWRITE GUARD (upsertServerInJson precedent): never round-trip a\n    // present-but-unparseable settings file into `{}`.\n    if (this.isPresentButUnparseable(filePath)) {\n      return [\n        {\n          platform: this.id,\n          action: \"warn\",\n          path: filePath,\n          detail: `existing ${filePath} is not parseable; configPatch left unapplied (back it up / fix it, then re-run)`,\n        },\n      ];\n    }\n    const settings = this.readJson<Record<string, unknown>>(filePath) ?? {};\n    if (typeof settings !== \"object\" || Array.isArray(settings)) {\n      return [\n        {\n          platform: this.id,\n          action: \"warn\",\n          path: filePath,\n          detail: `existing ${filePath} is not a JSON object; configPatch left unapplied`,\n        },\n      ];\n    }\n\n    const ledger = loadConfigPatchLedger(ctx.dataRoot);\n    const changes: ChangeRecord[] = [];\n    let fileMutated = false;\n    let ledgerMutated = false;\n\n    for (const patch of patches) {\n      // Defense in depth: re-validate grammar + AC-namespace here (a connector\n      // loaded from raw meta/JSON must not bypass defineConnector's checks).\n      if (!isValidConfigPatchKey(patch.key)) {\n        changes.push({\n          platform: this.id,\n          action: \"warn\",\n          detail:\n            `configPatch ${JSON.stringify(patch.key)} refused: not a dotted leaf path ` +\n            `(segments must match [A-Za-z0-9_-]+; no array indices)`,\n        });\n        continue;\n      }\n      const namespace = configPatchNamespaceViolation(patch.key);\n      if (namespace) {\n        changes.push({\n          platform: this.id,\n          action: \"warn\",\n          detail: `configPatch refused: ${namespace}`,\n        });\n        continue;\n      }\n      // SENSITIVE-KEY DENYLIST — hard refuse, no override flag in v1.\n      const sensitive = claudeSensitiveKeyViolation(patch.key);\n      if (sensitive) {\n        changes.push({\n          platform: this.id,\n          action: \"warn\",\n          detail:\n            `configPatch ${patch.key} refused: matches the claude-code sensitive-key ` +\n            `denylist (${sensitive}); security-relevant keys are never patched`,\n        });\n        continue;\n      }\n\n      // `${env:VAR}` refs resolve at install time, matching server-entry behavior.\n      const desired = resolveEnvRefsDeep(patch.value) as JsonValue;\n      const segments = patch.key.split(\".\");\n      const leaf = readJsonLeaf(settings, segments);\n      const entry = findLedgerEntry(ledger, HOST, filePath, patch.key);\n\n      if (leaf.kind === \"blocked\") {\n        changes.push({\n          platform: this.id,\n          action: \"warn\",\n          path: filePath,\n          detail:\n            `configPatch ${patch.key} skipped: \"${leaf.atPath}\" exists but is not an ` +\n            `object — ${configPatchManualEdit(patch)}`,\n        });\n        continue;\n      }\n\n      if (leaf.kind === \"absent\") {\n        // SET-IF-ABSENT: the one write path. Intermediates created only as needed.\n        writeJsonLeaf(settings, segments, desired);\n        fileMutated = true;\n        if (entry) {\n          // Stale ledger row (key was deleted out from under us): re-assert the\n          // value, keep existing owners (they still rely on the key existing),\n          // and record what was actually (re)written.\n          entry.writtenValue = desired;\n          entry.writtenValueHash = hashJsonValue(desired);\n          addLedgerOwner(entry, connector.id, connector.version);\n        } else {\n          createLedgerEntry(ledger, {\n            platform: HOST,\n            file: filePath,\n            key: patch.key,\n            value: desired,\n            connectorId: connector.id,\n            connectorVersion: connector.version,\n          });\n        }\n        ledgerMutated = true;\n        changes.push({\n          platform: this.id,\n          action: \"create\",\n          path: filePath,\n          detail: `configPatch ${patch.key}: <absent> → ${describeJsonValue(desired)} (${patch.reason})`,\n        });\n        continue;\n      }\n\n      // Key PRESENT — never overwrite; the only question is ownership/refcount.\n      if (!entry) {\n        // User- (or other-tool-) owned. No ownership is taken even when values\n        // happen to match — uninstall must never delete a key we did not create.\n        changes.push({\n          platform: this.id,\n          action: \"warn\",\n          path: filePath,\n          detail:\n            `configPatch ${patch.key} skipped: already set to ${describeJsonValue(leaf.value)} ` +\n            `(not created by agent-connector; desired ${describeJsonValue(desired)}) — ` +\n            configPatchManualEdit(patch),\n        });\n        continue;\n      }\n\n      if (!jsonDeepEquals(leaf.value, entry.writtenValue)) {\n        // DRIFT: the user edited the value after we wrote it. Never revert —\n        // sync re-asserts only ABSENT keys.\n        changes.push({\n          platform: this.id,\n          action: \"warn\",\n          path: filePath,\n          detail:\n            `configPatch ${patch.key}: value changed since install ` +\n            `(current ${describeJsonValue(leaf.value)}, wrote ${describeJsonValue(entry.writtenValue)}); ` +\n            `leaving in place — ${configPatchManualEdit(patch)}`,\n        });\n        continue;\n      }\n\n      if (jsonDeepEquals(desired, leaf.value)) {\n        // Same value we own: register as co-owner (refcount++) or plain\n        // idempotent skip when this connector is already an owner.\n        const owners = entry.owners.map((o) => o.connectorId);\n        if (addLedgerOwner(entry, connector.id, connector.version)) {\n          ledgerMutated = true;\n          changes.push({\n            platform: this.id,\n            action: \"skip\",\n            path: filePath,\n            detail: `configPatch ${patch.key} already installed; registered as co-owner (co-owned with ${owners.join(\", \")})`,\n          });\n        } else {\n          changes.push({\n            platform: this.id,\n            action: \"skip\",\n            path: filePath,\n            detail: `configPatch ${patch.key} already installed`,\n          });\n        }\n        continue;\n      }\n\n      // FIRST-WRITER-WINS: another connector owns this key with a different value.\n      changes.push({\n        platform: this.id,\n        action: \"warn\",\n        path: filePath,\n        detail:\n          `configPatch ${patch.key} skipped: already owned by ${entry.owners\n            .map((o) => o.connectorId)\n            .join(\", \")} with a different value ` +\n          `(current ${describeJsonValue(leaf.value)}, desired ${describeJsonValue(desired)}) — ` +\n          configPatchManualEdit(patch),\n      });\n    }\n\n    if (fileMutated) this.writeJson(filePath, settings, ctx.dryRun);\n    if (ledgerMutated && !ctx.dryRun) saveConfigPatchLedger(ctx.dataRoot, ledger);\n    return changes;\n  }\n\n  override uninstallConfigPatches(ctx: InstallContext): ChangeRecord[] {\n    const connectorId = ctx.connector.id;\n    const ledger = loadConfigPatchLedger(ctx.dataRoot);\n    // Keyed off the LEDGER (not the declaration): releases ownership for every\n    // file/scope this connector ever patched, even when the uninstall context\n    // is a minimal synthetic connector or the scope flag differs from install.\n    const owned = ledgerEntriesOwnedBy(ledger, HOST, connectorId);\n    const declared = ctx.connector.platforms[HOST]?.configPatch ?? [];\n    const changes: ChangeRecord[] = [];\n\n    // Declared patches with NO ownership record anywhere: never delete a key\n    // we did not create (rule 1) — explicit skip so the outcome is never silent.\n    const ownedKeys = new Set(owned.map((e) => e.key));\n    for (const patch of declared) {\n      if (!ownedKeys.has(patch.key)) {\n        changes.push({\n          platform: this.id,\n          action: \"skip\",\n          detail: `configPatch ${patch.key}: no ownership recorded; left untouched`,\n        });\n      }\n    }\n    if (owned.length === 0) return changes;\n\n    let ledgerMutated = false;\n    const backedUp = new Set<string>();\n\n    // Group by file (entries may span scopes/files).\n    const byFile = new Map<string, ConfigPatchLedgerEntry[]>();\n    for (const entry of owned) {\n      const bucket = byFile.get(entry.file) ?? [];\n      bucket.push(entry);\n      byFile.set(entry.file, bucket);\n    }\n\n    for (const [filePath, entries] of byFile) {\n      const unparseable = this.isPresentButUnparseable(filePath);\n      const settings = unparseable\n        ? null\n        : this.readJson<Record<string, unknown>>(filePath);\n      let fileMutated = false;\n\n      for (const entry of entries) {\n        const { lastOwner } = removeLedgerOwner(entry, connectorId);\n        ledgerMutated = true;\n\n        if (!lastOwner) {\n          // The shared-flag case: A uninstalls, B still relies on the key.\n          changes.push({\n            platform: this.id,\n            action: \"skip\",\n            path: filePath,\n            detail: `configPatch ${entry.key} retained: still owned by ${entry.owners\n              .map((o) => o.connectorId)\n              .join(\", \")}`,\n          });\n          continue;\n        }\n\n        // Last owner out → the ledger row is dropped on every branch below;\n        // the KEY is removed only on the fully-verified branch.\n        dropLedgerEntry(ledger, entry);\n\n        if (unparseable) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            path: filePath,\n            detail: `configPatch ${entry.key}: ${filePath} is not parseable; key left in place (ownership released)`,\n          });\n          continue;\n        }\n        if (!settings || typeof settings !== \"object\" || Array.isArray(settings)) {\n          changes.push({\n            platform: this.id,\n            action: \"skip\",\n            path: filePath,\n            detail: `configPatch ${entry.key} already absent (no settings file); ownership record dropped`,\n          });\n          continue;\n        }\n        const leaf = readJsonLeaf(settings, entry.key.split(\".\"));\n        if (leaf.kind !== \"present\") {\n          changes.push({\n            platform: this.id,\n            action: \"skip\",\n            path: filePath,\n            detail: `configPatch ${entry.key} already absent; ownership record dropped`,\n          });\n          continue;\n        }\n        if (entry.prior?.present !== false || !jsonDeepEquals(leaf.value, entry.writtenValue)) {\n          // User edited the value after install (or the row predates the\n          // set-if-absent guarantee): deleting would clobber them. Leave it.\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            path: filePath,\n            detail:\n              `configPatch ${entry.key}: value changed since install ` +\n              `(current ${describeJsonValue(leaf.value)}, wrote ${describeJsonValue(entry.writtenValue)}); ` +\n              `left in place`,\n          });\n          continue;\n        }\n\n        // VERIFIED: last owner + current === writtenValue + prior was absent.\n        // Back up the exact file before its first mutation, then delete the\n        // leaf key (intermediate objects we created are left in place).\n        if (!ctx.dryRun && !backedUp.has(filePath) && existsSync(filePath)) {\n          const backup = this.backupFileForConfigPatch(filePath);\n          backedUp.add(filePath);\n          if (backup) {\n            changes.push({\n              platform: this.id,\n              action: \"create\",\n              path: backup,\n              detail: \"backed up settings before configPatch removal\",\n            });\n          }\n        }\n        deleteJsonLeaf(settings, entry.key.split(\".\"));\n        fileMutated = true;\n        changes.push({\n          platform: this.id,\n          action: \"remove\",\n          path: filePath,\n          detail: `configPatch ${entry.key} removed (was ${describeJsonValue(entry.writtenValue)})`,\n        });\n      }\n\n      if (fileMutated && settings) this.writeJson(filePath, settings, ctx.dryRun);\n    }\n\n    if (ledgerMutated && !ctx.dryRun) saveConfigPatchLedger(ctx.dataRoot, ledger);\n    return changes;\n  }\n\n  /**\n   * Back up ONE exact file (the ledger-recorded patch target, which may belong\n   * to a different scope than the current ctx) into the standard backups dir.\n   * Best-effort: a failed copy returns null and the caller proceeds — the\n   * removal is already value-verified.\n   */\n  private backupFileForConfigPatch(filePath: string): string | null {\n    try {\n      ensureDir(backupsDir());\n      const stamp = new Date().toISOString().replace(/[:.]/g, \"-\");\n      const dest = join(backupsDir(), `${this.id}-${stamp}-${basename(filePath)}`);\n      copyFileSync(filePath, dest);\n      return dest;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Doctor: per-ledger-entry configPatch state for this connector —\n   *   ok       → key present and still exactly what we wrote;\n   *   drifted  → user changed the value (we print the manual edit, NEVER\n   *              auto-fix — sync re-asserts only absent keys);\n   *   missing  → key deleted by the user; sync will re-assert it;\n   *   orphaned → ledger row whose owners' connector records are all gone.\n   * Plus a re-print of the manual edit for declared patches that hold no\n   * ownership (skipped at install).\n   */\n  private configPatchDiagnostics(ctx: InstallContext): DiagnosticResult[] {\n    const results: DiagnosticResult[] = [];\n    const ledger = loadConfigPatchLedger(ctx.dataRoot);\n    const connectorId = ctx.connector.id;\n    const platformEntries = ledger.entries.filter((e) => e.platform === this.id);\n\n    for (const entry of platformEntries) {\n      const ownedByThis = entry.owners.some((o) => o.connectorId === connectorId);\n      if (!ownedByThis) {\n        // ORPHAN check (global hygiene): every owner's connector record is gone.\n        const orphaned =\n          entry.owners.length === 0 ||\n          entry.owners.every((o) => readRegisteredMeta(o.connectorId) === null);\n        if (orphaned) {\n          results.push({\n            check: `${this.name}: configPatch ${entry.key}`,\n            status: \"warn\",\n            message:\n              `orphaned ledger entry in ${entry.file}: owning connector record(s) ` +\n              `gone (${entry.owners.map((o) => o.connectorId).join(\", \") || \"none\"})`,\n            fix:\n              `re-run \\`agent-connector uninstall <owner-id>\\` to release it, or remove ` +\n              `${entry.key} from ${entry.file} manually`,\n          });\n        }\n        continue;\n      }\n\n      const state = this.configPatchState(entry);\n      if (state.kind === \"ok\") {\n        results.push({\n          check: `${this.name}: configPatch ${entry.key}`,\n          status: \"pass\",\n          message: `ok — ${entry.key} = ${describeJsonValue(entry.writtenValue)} (${entry.file})`,\n        });\n      } else if (state.kind === \"missing\") {\n        results.push({\n          check: `${this.name}: configPatch ${entry.key}`,\n          status: \"warn\",\n          message: `missing — key deleted from ${entry.file} since install`,\n          fix: `agent-connector install (sync) will re-assert it`,\n        });\n      } else {\n        results.push({\n          check: `${this.name}: configPatch ${entry.key}`,\n          status: \"warn\",\n          message:\n            `drifted — value changed since install (current ${describeJsonValue(state.current)}, ` +\n            `wrote ${describeJsonValue(entry.writtenValue)}); never auto-fixed`,\n          fix: `manual edit if wanted: set ${entry.key} = ${describeJsonValue(entry.writtenValue)} in ${entry.file}`,\n        });\n      }\n    }\n\n    // Declared-but-unowned patches: re-print the manual edit (the patch was\n    // skipped at install — conflict, denylist, or simply not installed yet).\n    const declared = ctx.connector.platforms[HOST]?.configPatch ?? [];\n    const ownedKeys = new Set(\n      ledgerEntriesOwnedBy(ledger, HOST, connectorId).map((e) => e.key),\n    );\n    for (const patch of declared) {\n      if (ownedKeys.has(patch.key)) continue;\n      results.push({\n        check: `${this.name}: configPatch ${patch.key}`,\n        status: \"warn\",\n        message: `declared but not owned (skipped at install or not yet installed)`,\n        fix: configPatchManualEdit(patch),\n      });\n    }\n    return results;\n  }\n\n  /** Current on-disk state of one owned ledger entry. */\n  private configPatchState(\n    entry: ConfigPatchLedgerEntry,\n  ): { kind: \"ok\" } | { kind: \"missing\" } | { kind: \"drifted\"; current: JsonValue } {\n    const settings = this.readJson<Record<string, unknown>>(entry.file);\n    if (!settings || typeof settings !== \"object\" || Array.isArray(settings)) {\n      return { kind: \"missing\" };\n    }\n    const leaf = readJsonLeaf(settings, entry.key.split(\".\"));\n    if (leaf.kind !== \"present\") return { kind: \"missing\" };\n    if (jsonDeepEquals(leaf.value, entry.writtenValue)) return { kind: \"ok\" };\n    return { kind: \"drifted\", current: leaf.value };\n  }\n\n  override doctor(ctx: InstallContext): DiagnosticResult[] {\n    const results = super.doctor(ctx);\n    results.push(...this.configPatchDiagnostics(ctx));\n    return results;\n  }\n\n  // ── Content surfaces: commands / skills / subagents ──────────────────────\n  // CONTENT-ONLY: pure native-file writers under <configDir>/{commands,skills,\n  // agents}. No runtime dispatch, no home-bin pointer, no telemetry wrap. Each\n  // method is idempotent (byte-identical → skip) via BaseAdapter.writeContentFile\n  // and reversible via removeContentFile. Honors platforms[\"claude-code\"]\n  // per-surface false to skip.\n\n  private commandsDir(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"commands\");\n  }\n  private skillsDir(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"skills\");\n  }\n  private agentsDir(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"agents\");\n  }\n\n  /** Native command file path: <configDir>/commands/<name>.md. */\n  private commandPath(ctx: InstallContext, name: string): string {\n    return join(this.commandsDir(ctx), `${name}.md`);\n  }\n  /** Native skill dir: <configDir>/skills/<name>. */\n  private skillDir(ctx: InstallContext, name: string): string {\n    return join(this.skillsDir(ctx), name);\n  }\n  /** Native subagent file path: <configDir>/agents/<name>.md. */\n  private subagentPath(ctx: InstallContext, name: string): string {\n    return join(this.agentsDir(ctx), `${name}.md`);\n  }\n\n  // ── Commands ──────────────────────────────────────────────────────────────\n\n  override installCommands(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.commands === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"commands disabled for claude-code\" }];\n    }\n    if (connector.commands.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\n    }\n    return connector.commands.map((cmd) =>\n      this.writeContentFile(\n        this.commandPath(ctx, cmd.name),\n        this.renderCommand(cmd),\n        ctx.dryRun,\n      ),\n    );\n  }\n\n  override uninstallCommands(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.commands.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\n    }\n    return connector.commands.map((cmd) =>\n      this.removeContentFile(this.commandPath(ctx, cmd.name), ctx.dryRun),\n    );\n  }\n\n  /** Render a command to md+frontmatter (delegates to the shared renderer). */\n  private renderCommand(cmd: CommandDef): string {\n    return renderCommandMd(cmd);\n  }\n\n  // ── Skills ────────────────────────────────────────────────────────────────\n\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.skills === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for claude-code\" }];\n    }\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      changes.push(\n        this.writeContentFile(join(dir, \"SKILL.md\"), this.renderSkill(skill), ctx.dryRun),\n      );\n      // Bundle any resource files beside SKILL.md (relative path → contents).\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\n      // (config-time validation already rejects these, but never trust input).\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\n          });\n          continue;\n        }\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\n      }\n    }\n    return changes;\n  }\n\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\n      // skill dir itself when we own its full contents.\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\n      for (const rel of Object.keys(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) continue; // never delete outside the skill dir\n        changes.push(this.removeContentFile(target, ctx.dryRun));\n      }\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\n      // dir that still holds user-added / sibling-tool / shared files.\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\n    }\n    return changes;\n  }\n\n  /** Render a skill's SKILL.md (delegates to the shared renderer). */\n  private renderSkill(skill: SkillDef): string {\n    return renderSkillMd(skill);\n  }\n\n  // ── Subagents ───────────────────────────────────────────────────────────────\n\n  override installSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.subagents === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"subagents disabled for claude-code\" }];\n    }\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.writeContentFile(\n        this.subagentPath(ctx, agent.name),\n        this.renderSubagent(agent),\n        ctx.dryRun,\n      ),\n    );\n  }\n\n  override uninstallSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.removeContentFile(this.subagentPath(ctx, agent.name), ctx.dryRun),\n    );\n  }\n\n  /** Render a subagent to md+frontmatter (delegates to the shared renderer). */\n  private renderSubagent(agent: SubagentDef): string {\n    return renderSubagentMd(agent);\n  }\n\n  // ── Memory surface: CLAUDE.md managed block + AGENTS.md interop ────────────\n  // EXCEPTION host. Claude Code reads CLAUDE.md, NOT AGENTS.md (docs verbatim:\n  // \"Claude Code reads CLAUDE.md, not AGENTS.md\"; no AGENTS.md support through\n  // v2.1.172), so the base AGENTS.md-first default is overridden:\n  //   - mode \"block\" (default): the managed block goes straight into CLAUDE.md.\n  //     HTML-comment markers are CORRECT here — Claude strips HTML comments\n  //     from CLAUDE.md before context injection, so the markers and the\n  //     do-not-edit notice are INVISIBLE to the model while remaining fully\n  //     parseable by us for sync/doctor/uninstall.\n  //   - mode \"agents-import\" (opt-in via platforms[\"claude-code\"].memory.mode):\n  //     canonical block goes into AGENTS.md, plus a SHARED `@AGENTS.md` import\n  //     bridge block in CLAUDE.md (Anthropic's documented interop). Opt-in\n  //     because the import makes Claude read the ENTIRE AGENTS.md — a behavior\n  //     change agent-connector must not make silently.\n  //   - AUTO interop: when CLAUDE.md ALREADY imports `@AGENTS.md` (a line\n  //     outside code fences and outside our own blocks) or IS a symlink\n  //     resolving to AGENTS.md, the canonical block goes to AGENTS.md and\n  //     CLAUDE.md is NOT touched — the pre-existing user wiring is never\n  //     claimed as agent-connector-managed (prevents double-reads and writes\n  //     \"through\" a symlink). Order-independent: keyed off the import/symlink\n  //     existing, never off whether the AGENTS.md block was written yet.\n\n  /** CLAUDE.md path: project `<projectDir>/CLAUDE.md`, user `~/.claude/CLAUDE.md`. */\n  private claudeMdPath(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \"CLAUDE.md\")\n      : join(homedir(), \".claude\", \"CLAUDE.md\");\n  }\n\n  /** Sibling AGENTS.md at the same scope (agents-import / auto-interop target). */\n  private agentsMdPath(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \"AGENTS.md\")\n      : join(homedir(), \".claude\", \"AGENTS.md\");\n  }\n\n  /**\n   * True when the user ALREADY wired CLAUDE.md to AGENTS.md themselves:\n   * an `@AGENTS.md` import line outside code fences and outside agent-connector\n   * managed blocks (our own bridge must not count), or CLAUDE.md being a\n   * symlink that resolves to the sibling AGENTS.md.\n   */\n  private claudeMdWiredToAgentsMd(ctx: InstallContext): boolean {\n    const claudeMd = this.claudeMdPath(ctx);\n    if (!existsSync(claudeMd)) return false;\n    try {\n      if (lstatSync(claudeMd).isSymbolicLink()) {\n        const agentsMd = this.agentsMdPath(ctx);\n        const resolved = realpathSync(claudeMd);\n        const agentsResolved = existsSync(agentsMd) ? realpathSync(agentsMd) : agentsMd;\n        if (resolved === agentsResolved) return true;\n      }\n    } catch {\n      /* unreadable link — fall through to the content probe */\n    }\n    let raw: string;\n    try {\n      raw = readFileSync(claudeMd, \"utf8\");\n    } catch {\n      return false;\n    }\n    // Strip every agent-connector managed block first so OUR bridge import is\n    // never mistaken for user wiring (idempotence across modes).\n    const withoutBlocks = removeBlocksFromText(raw, { blockIdPrefix: \"\" }).text;\n    const importRe = /(^|\\s)@(?:AGENTS\\.md|~\\/\\.claude\\/AGENTS\\.md)(\\s|$)/;\n    return linesOutsideFences(withoutBlocks).some((line) => importRe.test(line));\n  }\n\n  /**\n   * Effective memory mode for this install:\n   *   \"user-import\"   — the user already wired CLAUDE.md→AGENTS.md (wins over\n   *                     everything; we never write a duplicate or a second import);\n   *   \"agents-import\" — explicit opt-in via platforms[\"claude-code\"].memory.mode;\n   *   \"block\"         — the default (managed block directly in CLAUDE.md).\n   */\n  private effectiveMemoryMode(ctx: InstallContext): \"block\" | \"agents-import\" | \"user-import\" {\n    if (this.claudeMdWiredToAgentsMd(ctx)) return \"user-import\";\n    return this.memoryOverride(ctx)?.mode === \"agents-import\" ? \"agents-import\" : \"block\";\n  }\n\n  protected override memoryTargets(ctx: InstallContext): MemoryTarget[] {\n    // An explicit path override keeps the base resolution (escape hatch wins).\n    if (this.memoryOverride(ctx)?.path) return super.memoryTargets(ctx);\n    if (ctx.scope !== \"project\" && ctx.scope !== \"user\") return [];\n    const mode = this.effectiveMemoryMode(ctx);\n    if (mode === \"block\") {\n      return [\n        {\n          path: this.claudeMdPath(ctx),\n          reason:\n            \"CLAUDE.md (Claude Code reads CLAUDE.md, not AGENTS.md; \" +\n            \"HTML-comment markers are stripped from the model's context)\",\n        },\n      ];\n    }\n    return [\n      {\n        path: this.agentsMdPath(ctx),\n        reason:\n          mode === \"user-import\"\n            ? \"AGENTS.md (CLAUDE.md already imports/symlinks it — user wiring respected)\"\n            : \"AGENTS.md (agents-import mode; @AGENTS.md bridge managed in CLAUDE.md)\",\n      },\n    ];\n  }\n\n  override installMemory(ctx: InstallContext): ChangeRecord[] {\n    const changes = super.installMemory(ctx);\n    const { connector } = ctx;\n    // Bridge management applies only when the generic path actually installed.\n    if (connector.platforms[HOST]?.memory === false || (connector.memory ?? []).length === 0) {\n      return changes;\n    }\n    if (ctx.scope !== \"project\" && ctx.scope !== \"user\") return changes;\n    if (this.memoryOverride(ctx)?.path) return changes;\n\n    const mode = this.effectiveMemoryMode(ctx);\n    if (mode === \"user-import\") {\n      changes.push({\n        platform: this.id,\n        action: \"skip\",\n        path: this.claudeMdPath(ctx),\n        detail:\n          \"memory: CLAUDE.md already imports AGENTS.md; canonical block in AGENTS.md \" +\n          \"suffices (pre-existing user import never claimed as managed)\",\n      });\n      return changes;\n    }\n    if (mode !== \"agents-import\") return changes;\n\n    // agents-import: ensure the SHARED `@AGENTS.md` bridge block in CLAUDE.md.\n    const claudeMd = this.claudeMdPath(ctx);\n    const importLine = ctx.scope === \"project\" ? \"@AGENTS.md\" : \"@~/.claude/AGENTS.md\";\n    const res = upsertManagedBlockFile(claudeMd, {\n      blockId: CLAUDE_AGENTS_IMPORT_BLOCK_ID,\n      connectorId: \"_shared\",\n      content: importLine,\n      notice:\n        \"Managed by agent-connector (shared bridge). This import makes Claude Code read \" +\n        \"AGENTS.md; it is removed automatically when the last agent-connector block \" +\n        \"leaves AGENTS.md.\",\n      force: ctx.force ?? false,\n      dryRun: ctx.dryRun,\n    });\n    changes.push({\n      platform: this.id,\n      action: res.action,\n      path: claudeMd,\n      detail: `memory: ${res.detail} — @AGENTS.md import bridge (agents-import mode)`,\n    });\n    if (res.backupPath) {\n      changes.push({\n        platform: this.id,\n        action: \"create\",\n        path: res.backupPath,\n        detail: \"backed up CLAUDE.md before destructive change\",\n      });\n    }\n    if (res.action !== \"warn\" && !ctx.dryRun) {\n      const ledger = loadMemoryLedger(connector.id);\n      recordMemoryTarget(ledger, {\n        platform: this.id,\n        scope: ctx.scope,\n        path: claudeMd,\n        blockId: CLAUDE_AGENTS_IMPORT_BLOCK_ID,\n        createdFile: res.createdFile,\n        hash: res.hash,\n      });\n      saveMemoryLedger(connector.id, ledger);\n    }\n    return changes;\n  }\n\n  override uninstallMemory(ctx: InstallContext): ChangeRecord[] {\n    // Capture bridge facts BEFORE super prunes this platform's ledger rows.\n    const priorRows = loadMemoryLedger(ctx.connector.id).targets.filter(\n      (t) => t.platform === this.id && t.blockId === CLAUDE_AGENTS_IMPORT_BLOCK_ID,\n    );\n    const changes = super.uninstallMemory(ctx);\n\n    // Bridge candidates: the current-scope CLAUDE.md plus any CLAUDE.md the\n    // ledger recorded a bridge in (scope drift between install and uninstall).\n    const pairs = new Map<string, { agentsMd: string; createdFile: boolean }>();\n    if (ctx.scope === \"project\" || ctx.scope === \"user\") {\n      pairs.set(this.claudeMdPath(ctx), {\n        agentsMd: this.agentsMdPath(ctx),\n        createdFile: false,\n      });\n    }\n    for (const row of priorRows) {\n      const existing = pairs.get(row.path);\n      pairs.set(row.path, {\n        agentsMd: existing?.agentsMd ?? join(dirname(row.path), \"AGENTS.md\"),\n        createdFile: (existing?.createdFile ?? false) || row.createdFile,\n      });\n    }\n    for (const [claudeMd, { agentsMd, createdFile }] of pairs) {\n      changes.push(...this.releaseAgentsImportBridge(ctx, claudeMd, agentsMd, createdFile));\n    }\n    return changes;\n  }\n\n  /**\n   * Refcounted bridge release: remove the `_shared/claude-agents-import` block\n   * from CLAUDE.md ONLY when the sibling AGENTS.md holds zero agent-connector\n   * blocks from OTHER connectors (namespace-wide count, excluding this\n   * connector's own blocks so the answer is identical on dry-run and real run).\n   * A user-authored `@AGENTS.md` import (no markers) is NEVER touched.\n   */\n  private releaseAgentsImportBridge(\n    ctx: InstallContext,\n    claudeMd: string,\n    agentsMd: string,\n    createdFile: boolean,\n  ): ChangeRecord[] {\n    if (!existsSync(claudeMd)) return [];\n    let raw: string;\n    try {\n      raw = readFileSync(claudeMd, \"utf8\");\n    } catch {\n      return [];\n    }\n    if (!listManagedBlocks(raw).some((b) => b.blockId === CLAUDE_AGENTS_IMPORT_BLOCK_ID)) {\n      return []; // no managed bridge here (user wiring or block mode) — nothing to release\n    }\n    let remaining = 0;\n    if (existsSync(agentsMd)) {\n      try {\n        remaining = listManagedBlocks(readFileSync(agentsMd, \"utf8\")).filter(\n          (b) => !b.blockId.startsWith(`${ctx.connector.id}/`),\n        ).length;\n      } catch {\n        remaining = 1; // unreadable → conservative: keep the bridge\n      }\n    }\n    if (remaining > 0) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          path: claudeMd,\n          detail:\n            `memory: @AGENTS.md import bridge retained — ${remaining} agent-connector ` +\n            `block(s) from other connectors remain in ${agentsMd}`,\n        },\n      ];\n    }\n    return removeManagedBlocksFile(\n      claudeMd,\n      { blockId: CLAUDE_AGENTS_IMPORT_BLOCK_ID },\n      { dryRun: ctx.dryRun, deleteFileIfCreated: createdFile },\n    ).map((r) => ({\n      platform: this.id,\n      action: r.action,\n      path: r.path,\n      detail: `memory: ${r.detail}`,\n    }));\n  }\n\n  /** True when a hook command references our home binary AND this connector id\n   *  (anchored so a shared-prefix id can't collide — see isHomeBinHookCommand). */\n  private isOurCommand(command: string | undefined, ctx: InstallContext): boolean {\n    return isHomeBinHookCommand(command, ctx.homeBinPath, ctx.connector.id);\n  }\n\n  // ── Diagnostics ──────────────────────────────────────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const settingsPath = this.getHookConfigPath(ctx);\n    const connectorId = ctx.connector.id;\n    const homeBin = ctx.homeBinPath;\n    const hookEvents = ctx.connector.hookEvents;\n    // Native passthrough hooks count toward \"declares hooks\" ONLY when declared\n    // for this platform (the serialized meta keeps the event-name keys, so this\n    // works for doctor's handler-less meta-derived connectors too).\n    const declaredHookCount =\n      hookEvents.length +\n      Object.keys(ctx.connector.platforms[HOST]?.nativeHooks ?? {}).length;\n    const checks: HealthCheck[] = [\n      {\n        name: `${this.name}: settings.json present`,\n        check: () => {\n          // Same \"only assert what the connector declares\" rule as the\n          // content-surface checks below: a hookless connector never writes\n          // hooks into settings.json, so its absence is healthy, not a failure.\n          if (declaredHookCount === 0) {\n            return { status: \"OK\", detail: \"no hooks declared\" };\n          }\n          return existsSync(settingsPath)\n            ? { status: \"OK\", detail: settingsPath }\n            : { status: \"FAIL\", detail: `not found: ${settingsPath}` };\n        },\n      },\n      {\n        name: `${this.name}: hook command registered`,\n        check: () => {\n          if (declaredHookCount === 0) {\n            return { status: \"OK\", detail: \"no hooks declared\" };\n          }\n          const settings = this.readJson<{ hooks?: Record<string, ClaudeHookEntry[]> }>(\n            settingsPath,\n          );\n          if (!settings) return { status: \"FAIL\", detail: `cannot read ${settingsPath}` };\n          const hooks = settings.hooks ?? {};\n          const registered = Object.values(hooks).some((entries) =>\n            (entries ?? []).some((e) =>\n              (e.hooks ?? []).some((h) =>\n                isHomeBinHookCommand(h.command, homeBin, connectorId),\n              ),\n            ),\n          );\n          return registered\n            ? { status: \"OK\", detail: \"hook command present\" }\n            : {\n                status: \"FAIL\",\n                detail: `no hook for ${connectorId} in ${settingsPath}`,\n              };\n        },\n      },\n    ];\n\n    // Content-surface checks: only assert presence of the files this connector\n    // declares (skip silently for surfaces it never asked for).\n    for (const cmd of ctx.connector.commands) {\n      const p = this.commandPath(ctx, cmd.name);\n      checks.push({\n        name: `${this.name}: command ${cmd.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    for (const skill of ctx.connector.skills) {\n      const p = join(this.skillDir(ctx, skill.name), \"SKILL.md\");\n      checks.push({\n        name: `${this.name}: skill ${skill.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    for (const agent of ctx.connector.subagents) {\n      const p = this.subagentPath(ctx, agent.name);\n      checks.push({\n        name: `${this.name}: subagent ${agent.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    return checks;\n  }\n\n  // ── Runtime: parse Claude stdin JSON → normalized event ──────────────────\n\n  parseEvent(event: HookEventName, raw: unknown): NormalizedEvent {\n    const input = (raw ?? {}) as ClaudeWireInput;\n    const connectorId = typeof input.connector === \"string\" ? input.connector : \"\";\n    const sessionId = extractSessionId(input);\n    const projectDir = typeof input.cwd === \"string\" ? input.cwd : undefined;\n\n    const base = {\n      hostPlatform: HOST,\n      connectorId,\n      sessionId,\n      raw,\n      ...(projectDir !== undefined ? { projectDir } : {}),\n    } as const;\n\n    switch (event) {\n      case \"PreToolUse\": {\n        const ev: PreToolUseEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n        };\n        return ev;\n      }\n      case \"PostToolUse\": {\n        const ev: PostToolUseEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          ...(toolResponseToString(input.tool_response) !== undefined\n            ? { toolOutput: toolResponseToString(input.tool_response) }\n            : {}),\n        };\n        return ev;\n      }\n      case \"SessionStart\": {\n        const ev: SessionStartEvent = {\n          ...base,\n          source: normalizeSessionSource(input.source),\n        };\n        return ev;\n      }\n      case \"SessionEnd\": {\n        const ev: SessionEndEvent = {\n          ...base,\n          ...(typeof input.reason === \"string\" ? { reason: input.reason } : {}),\n        };\n        return ev;\n      }\n      case \"UserPromptSubmit\": {\n        const ev: UserPromptSubmitEvent = {\n          ...base,\n          prompt: typeof input.prompt === \"string\" ? input.prompt : \"\",\n        };\n        return ev;\n      }\n      case \"PreCompact\": {\n        const ev: PreCompactEvent = {\n          ...base,\n          ...(input.trigger === \"auto\" || input.trigger === \"manual\"\n            ? { trigger: input.trigger }\n            : {}),\n        };\n        return ev;\n      }\n      case \"Stop\": {\n        const ev: StopEvent = {\n          ...base,\n          ...(typeof input.stop_hook_active === \"boolean\"\n            ? { stopHookActive: input.stop_hook_active }\n            : {}),\n        };\n        return ev;\n      }\n      case \"Notification\": {\n        const ev: NotificationEvent = {\n          ...base,\n          message: typeof input.message === \"string\" ? input.message : \"\",\n        };\n        return ev;\n      }\n      case \"PermissionRequest\": {\n        const ev: PermissionRequestEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          ...(Array.isArray(input.permission_suggestions)\n            ? { permissionSuggestions: input.permission_suggestions }\n            : {}),\n        };\n        return ev;\n      }\n      case \"PostToolUseFailure\": {\n        const ev: PostToolUseFailureEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          error: typeof input.error === \"string\" ? input.error : \"\",\n          ...(typeof input.tool_use_id === \"string\"\n            ? { toolUseId: input.tool_use_id }\n            : {}),\n          ...(typeof input.is_interrupt === \"boolean\"\n            ? { isInterrupt: input.is_interrupt }\n            : {}),\n          ...(typeof input.duration_ms === \"number\"\n            ? { durationMs: input.duration_ms }\n            : {}),\n        };\n        return ev;\n      }\n      case \"SubagentStart\": {\n        const ev: SubagentStartEvent = {\n          ...base,\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\n          ...(typeof input.agent_type === \"string\"\n            ? { agentType: input.agent_type }\n            : {}),\n        };\n        return ev;\n      }\n      case \"SubagentStop\": {\n        // agent_id/agent_type stay optional — the SDK does not reliably\n        // populate agent_type on SubagentStop (real-world quirk).\n        const ev: SubagentStopEvent = {\n          ...base,\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\n          ...(typeof input.agent_type === \"string\"\n            ? { agentType: input.agent_type }\n            : {}),\n          ...(typeof input.agent_transcript_path === \"string\"\n            ? { agentTranscriptPath: input.agent_transcript_path }\n            : {}),\n          ...(typeof input.last_assistant_message === \"string\"\n            ? { lastAssistantMessage: input.last_assistant_message }\n            : {}),\n          ...(typeof input.stop_hook_active === \"boolean\"\n            ? { stopHookActive: input.stop_hook_active }\n            : {}),\n        };\n        return ev;\n      }\n      default: {\n        // Exhaustive guard — every HookEventName is handled above.\n        const _never: never = event;\n        throw new Error(`unsupported claude-code hook event: ${String(_never)}`);\n      }\n    }\n  }\n\n  // ── Runtime: normalized response → Claude native hook reply ──────────────\n\n  formatReply(event: HookEventName, response: HookResponse): HookReply {\n    const hookEventName = event as ClaudeHookEvent;\n    const decision = response.decision ?? \"allow\";\n\n    // PermissionRequest replies use Claude's nested decision{behavior} envelope\n    // and are the ONE event where an EXPLICIT \"allow\" is an ACTIVE grant (it\n    // suppresses the permission dialog) rather than passthrough:\n    //   allow            → decision{behavior:\"allow\"} (+updatedInput when set);\n    //                      Claude still enforces its own deny rules — an allow\n    //                      never overrides a matching deny rule (host-enforced).\n    //   modify           → an allow grant carrying updatedInput.\n    //   deny             → decision{behavior:\"deny\", message} (shown to Claude).\n    //   ask/context/void → NO decision output: fall through to the native\n    //                      dialog (the dialog IS the ask).\n    if (event === \"PermissionRequest\") {\n      if (response.decision === \"deny\") {\n        return this.stdout({\n          hookSpecificOutput: {\n            hookEventName,\n            decision: {\n              behavior: \"deny\",\n              message: response.reason ?? \"Blocked by hook\",\n            },\n          },\n        });\n      }\n      if (\n        response.decision === \"allow\" ||\n        (response.decision === \"modify\" && response.updatedInput)\n      ) {\n        return this.stdout({\n          hookSpecificOutput: {\n            hookEventName,\n            decision: {\n              behavior: \"allow\",\n              ...(response.updatedInput\n                ? { updatedInput: response.updatedInput }\n                : {}),\n            },\n          },\n        });\n      }\n      return { exitCode: 0 };\n    }\n\n    // PostToolUseFailure (feedback beside the error) and SubagentStart (context\n    // injected at the start of the SUBAGENT's conversation) are observe/context-\n    // only on Claude: \"context\" emits additionalContext, and a \"deny\" DEGRADES\n    // to the same shape carrying the reason (the tool already failed / the\n    // spawn is not blockable). Everything else passes through.\n    if (event === \"PostToolUseFailure\" || event === \"SubagentStart\") {\n      const context =\n        decision === \"context\"\n          ? response.additionalContext\n          : decision === \"deny\"\n            ? response.reason ?? response.additionalContext\n            : undefined;\n      if (context) {\n        return this.stdout({\n          hookSpecificOutput: { hookEventName, additionalContext: context },\n        });\n      }\n      return { exitCode: 0 };\n    }\n\n    // deny → block the action with a reason (exit 0; JSON carries the decision).\n    // Claude's deny shape is EVENT-SPECIFIC: PreToolUse uses\n    // hookSpecificOutput.permissionDecision, but Stop / SubagentStop /\n    // UserPromptSubmit / PostToolUse honor only the TOP-LEVEL\n    // {\"decision\":\"block\",\"reason\"} — rendering those as permissionDecision is\n    // silently ignored by Claude (found porting oh-my-claudecode: its ralph\n    // persistence loop denies the Stop event, which never blocked through the\n    // old shape). A SubagentStop block keeps the subagent running with `reason`\n    // as its next instruction (Stop semantics).\n    if (decision === \"deny\") {\n      if (\n        event === \"Stop\" ||\n        event === \"SubagentStop\" ||\n        event === \"UserPromptSubmit\" ||\n        event === \"PostToolUse\"\n      ) {\n        return this.stdout({\n          decision: \"block\",\n          reason: response.reason ?? \"Blocked by hook\",\n        });\n      }\n      return this.stdout({\n        hookSpecificOutput: {\n          hookEventName,\n          permissionDecision: \"deny\",\n          permissionDecisionReason: response.reason ?? \"Blocked by hook\",\n        },\n      });\n    }\n\n    // ask → prompt the user to confirm.\n    if (decision === \"ask\") {\n      return this.stdout({\n        hookSpecificOutput: {\n          hookEventName,\n          permissionDecision: \"ask\",\n          permissionDecisionReason:\n            response.reason ?? \"Confirmation required by hook\",\n        },\n      });\n    }\n\n    // modify → rewrite PreToolUse input (only where Claude supports it).\n    if (decision === \"modify\") {\n      if (event === \"PreToolUse\" && response.updatedInput) {\n        return this.stdout({\n          hookSpecificOutput: { hookEventName, updatedInput: response.updatedInput },\n        });\n      }\n      // Output rewrite is unsupported on Claude; fall through to allow.\n    }\n\n    // context → inject soft guidance (also the SessionStart context path).\n    if (decision === \"context\" && response.additionalContext) {\n      return this.stdout({\n        hookSpecificOutput: { hookEventName, additionalContext: response.additionalContext },\n      });\n    }\n\n    // allow / void / unsupported-degradation → pass through with exit 0.\n    return { exitCode: 0 };\n  }\n\n  private stdout(payload: unknown): HookReply {\n    return { exitCode: 0, stdout: JSON.stringify(payload) };\n  }\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// configPatch: sensitive-key denylist + JSON leaf-path helpers\n// ─────────────────────────────────────────────────────────────────────────\n\n/**\n * SENSITIVE-KEY DENYLIST (claude-code, v1) — THE documented list. configPatch\n * targeting any key below is HARD-REFUSED (warn ChangeRecord, never applied;\n * no override flag in v1). Rationale: configPatch writes bare host keys with\n * no inherent attribution, and these keys are security-relevant — permission\n * grants, tool allowlists, credential/auth helpers, login pinning, and any\n * env var that can reroute credentials or traffic. The OMC case\n * `env.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS` passes; credential rerouting and\n * self-granted permissions do not. Reviewed whenever the host matrix updates.\n *\n *   permissions, permissions.*            — self-granted permission rules\n *   allowedTools / disallowedTools (.*)   — tool allowlist tampering\n *   apiKey* (e.g. apiKeyHelper)           — credential helpers\n *   awsAuthRefresh / awsCredentialExport  — AWS credential plumbing\n *   forceLoginMethod / forceLoginOrgUUID  — login/org pinning\n *   otelHeadersHelper                     — telemetry-header (token) helper\n *   hooks*, mcpServers* (+ enable/enabled/disabledMcpjsonServers)\n *                                         — refused upstream by the\n *                                           agent-connector NAMESPACE guard\n *   env.ANTHROPIC_*                       — API key / base-URL rerouting\n *   env.AWS_*                             — AWS credentials\n *   env.*_PROXY                           — traffic interception\n *   env.*TOKEN* / env.*KEY* / env.*SECRET* — generic credential patterns\n */\nconst SENSITIVE_KEY_RULES: ReadonlyArray<{ re: RegExp; label: string }> = [\n  { re: /^permissions(\\.|$)/, label: \"permissions\" },\n  { re: /^allowedTools(\\.|$)/, label: \"allowedTools\" },\n  { re: /^disallowedTools(\\.|$)/, label: \"disallowedTools\" },\n  { re: /^apiKey/i, label: \"apiKey*\" },\n  { re: /^awsAuthRefresh$/, label: \"awsAuthRefresh\" },\n  { re: /^awsCredentialExport$/, label: \"awsCredentialExport\" },\n  { re: /^forceLoginMethod$/, label: \"forceLoginMethod\" },\n  { re: /^forceLoginOrgUUID$/, label: \"forceLoginOrgUUID\" },\n  { re: /^otelHeadersHelper$/, label: \"otelHeadersHelper\" },\n  { re: /^env\\.ANTHROPIC_/, label: \"env.ANTHROPIC_*\" },\n  { re: /^env\\.AWS_/, label: \"env.AWS_*\" },\n  { re: /^env\\.[^.]*_PROXY(\\.|$)/i, label: \"env.*_PROXY\" },\n  { re: /^env\\.[^.]*TOKEN/i, label: \"env.*TOKEN*\" },\n  { re: /^env\\.[^.]*KEY/i, label: \"env.*KEY*\" },\n  { re: /^env\\.[^.]*SECRET/i, label: \"env.*SECRET*\" },\n];\n\n/**\n * The matched denylist pattern label when `key` is sensitive on claude-code,\n * else null. Exported so tests and docs stay pinned to the real list.\n */\nexport function claudeSensitiveKeyViolation(key: string): string | null {\n  for (const rule of SENSITIVE_KEY_RULES) {\n    if (rule.re.test(key)) return rule.label;\n  }\n  return null;\n}\n\n/** Result of looking up a dotted leaf path in a parsed JSON object. */\ntype JsonLeafLookup =\n  | { kind: \"absent\" }\n  | { kind: \"present\"; value: JsonValue }\n  | { kind: \"blocked\"; atPath: string };\n\n/**\n * Walk `segments` (a validated dotted leaf path) through `root`. \"blocked\"\n * reports the first intermediate that exists but is not a plain object —\n * the skip-warn case (we never replace a non-object intermediate).\n */\nfunction readJsonLeaf(root: Record<string, unknown>, segments: string[]): JsonLeafLookup {\n  let node: Record<string, unknown> = root;\n  for (let i = 0; i < segments.length - 1; i++) {\n    const next = node[segments[i]!];\n    if (next === undefined) return { kind: \"absent\" };\n    if (next === null || typeof next !== \"object\" || Array.isArray(next)) {\n      return { kind: \"blocked\", atPath: segments.slice(0, i + 1).join(\".\") };\n    }\n    node = next as Record<string, unknown>;\n  }\n  const leaf = node[segments[segments.length - 1]!];\n  if (leaf === undefined) return { kind: \"absent\" };\n  return { kind: \"present\", value: leaf as JsonValue };\n}\n\n/**\n * Write `value` at the leaf, creating ONLY absent intermediate objects along\n * the way (callers must have verified the path is not blocked).\n */\nfunction writeJsonLeaf(\n  root: Record<string, unknown>,\n  segments: string[],\n  value: JsonValue,\n): void {\n  let node: Record<string, unknown> = root;\n  for (let i = 0; i < segments.length - 1; i++) {\n    const seg = segments[i]!;\n    const next = node[seg];\n    if (next === undefined) {\n      const created: Record<string, unknown> = {};\n      node[seg] = created;\n      node = created;\n    } else {\n      node = next as Record<string, unknown>;\n    }\n  }\n  node[segments[segments.length - 1]!] = value;\n}\n\n/**\n * Delete the leaf key only. Intermediate objects — even ones we created — are\n * deliberately left in place (harmless; pruning risks collateral).\n */\nfunction deleteJsonLeaf(root: Record<string, unknown>, segments: string[]): void {\n  let node: Record<string, unknown> = root;\n  for (let i = 0; i < segments.length - 1; i++) {\n    const next = node[segments[i]!];\n    if (next === null || typeof next !== \"object\" || Array.isArray(next)) return;\n    node = next as Record<string, unknown>;\n  }\n  delete node[segments[segments.length - 1]!];\n}\n\n/** Claude Code native interpolation token: `${env:VAR}` → `${VAR}`. */\nfunction claudeEnvToken(name: string): string {\n  return `\\${${name}}`;\n}\n\nfunction normalizeSessionSource(source: string | undefined): SessionStartEvent[\"source\"] {\n  switch (source) {\n    case \"compact\":\n      return \"compact\";\n    case \"resume\":\n      return \"resume\";\n    case \"clear\":\n      return \"clear\";\n    default:\n      return \"startup\";\n  }\n}\n\nexport const adapter = new ClaudeCodeAdapter();\nexport default adapter;\n","/**\n * adapters/claude-code/wire — Claude Code hook wire protocol.\n *\n * Claude Code pipes a JSON object to a hook command on stdin and reads a JSON\n * object (or empty) from stdout, interpreting the exit code as well. This module\n * captures the exact stdin shape and the canonical reply shape so the adapter's\n * parse/format methods are a single source of truth.\n *\n * Stdin (documented Claude Code hook input):\n *   {\n *     session_id, transcript_path, cwd, hook_event_name,\n *     tool_name, tool_input, tool_response,            // tool events\n *     permission_suggestions,                          // PermissionRequest\n *     tool_use_id, error, is_interrupt, duration_ms,   // PostToolUseFailure\n *     agent_id, agent_type,                            // SubagentStart/Stop\n *     agent_transcript_path, last_assistant_message,   // SubagentStop\n *     source,                                          // SessionStart\n *     reason,                                          // SessionEnd\n *     prompt,                                          // UserPromptSubmit\n *     trigger,                                         // PreCompact\n *     stop_hook_active,                                // Stop / SubagentStop\n *     message                                          // Notification\n *   }\n *\n * Stdout (canonical reply): a `hookSpecificOutput` object keyed by\n * `hookEventName`, carrying `permissionDecision` (allow|deny|ask) +\n * `permissionDecisionReason`, `additionalContext`, and (PreToolUse)\n * `updatedInput`; PermissionRequest instead takes a nested\n * `decision: { behavior: \"allow\"|\"deny\", ... }`; Stop-class blocks\n * (Stop / SubagentStop / UserPromptSubmit / PostToolUse) take the TOP-LEVEL\n * `{\"decision\":\"block\",\"reason\"}`. Exit 0 = proceed; the JSON refines the\n * decision.\n */\n\n/** Canonical Claude Code hook event names (the values of `hook_event_name`). */\nexport const CLAUDE_HOOK_EVENTS = [\n  \"PreToolUse\",\n  \"PostToolUse\",\n  \"PreCompact\",\n  \"SessionStart\",\n  \"SessionEnd\",\n  \"UserPromptSubmit\",\n  \"Stop\",\n  \"Notification\",\n  \"PermissionRequest\",\n  \"PostToolUseFailure\",\n  \"SubagentStart\",\n  \"SubagentStop\",\n] as const;\n\nexport type ClaudeHookEvent = (typeof CLAUDE_HOOK_EVENTS)[number];\n\n/**\n * Raw Claude Code hook stdin payload. Every field is optional — a given event\n * only populates the subset relevant to it. `connector` is NOT a Claude field;\n * it is threaded in by the universal entrypoint so parseEvent can recover the\n * connector id (the home binary passes `--connector <id>` and may inject it).\n */\nexport interface ClaudeWireInput {\n  session_id?: string;\n  transcript_path?: string;\n  cwd?: string;\n  hook_event_name?: string;\n\n  // tool events\n  tool_name?: string;\n  tool_input?: Record<string, unknown>;\n  /** PostToolUse result payload (string or structured). */\n  tool_response?: unknown;\n\n  // PermissionRequest — permission-update entries the dialog would offer.\n  // NOTE: the docs explicitly state PermissionRequest has NO tool_use_id.\n  permission_suggestions?: unknown[];\n\n  // PostToolUseFailure\n  tool_use_id?: string;\n  error?: string;\n  is_interrupt?: boolean;\n  duration_ms?: number;\n\n  // SubagentStart / SubagentStop — agent_type is unreliable on SubagentStop\n  // (the SDK may not populate it); treat both as optional everywhere.\n  agent_id?: string;\n  agent_type?: string;\n  // SubagentStop — the subagent's OWN transcript (transcript_path stays the\n  // parent session's) + the text of its final response.\n  agent_transcript_path?: string;\n  last_assistant_message?: string;\n\n  // SessionStart\n  source?: string;\n  // SessionEnd\n  reason?: string;\n  // UserPromptSubmit\n  prompt?: string;\n  // PreCompact\n  trigger?: string;\n  // Stop / SubagentStop\n  stop_hook_active?: boolean;\n  // Notification\n  message?: string;\n\n  /** Injected by the entrypoint so the runtime knows which connector to dispatch. */\n  connector?: string;\n}\n\n/**\n * Extract a stable session id from a Claude wire payload.\n * Priority mirrors the proven adapter: transcript UUID > session_id > \"\".\n * (The framework's normalized event uses \"\" when no id is available, per\n * core/types BaseEvent.sessionId docstring — no ppid fabrication here.)\n */\nexport function extractSessionId(input: ClaudeWireInput): string {\n  if (typeof input.transcript_path === \"string\") {\n    const m = input.transcript_path.match(/([a-f0-9-]{36})\\.jsonl$/);\n    if (m && m[1]) return m[1];\n  }\n  if (typeof input.session_id === \"string\" && input.session_id !== \"\") {\n    return input.session_id;\n  }\n  return \"\";\n}\n\n/** Coerce a Claude PostToolUse `tool_response` into a string for the normalized event. */\nexport function toolResponseToString(value: unknown): string | undefined {\n  if (value == null) return undefined;\n  if (typeof value === \"string\") return value;\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,SAAS,cAAc,YAAY,WAAW,cAAc,oBAAoB;AAChF,SAAS,eAAe;AACxB,SAAS,UAAU,SAAS,YAAY;;;AC6FjC,SAAS,iBAAiB,OAAgC;AAC/D,MAAI,OAAO,MAAM,oBAAoB,UAAU;AAC7C,UAAM,IAAI,MAAM,gBAAgB,MAAM,yBAAyB;AAC/D,QAAI,KAAK,EAAE,CAAC,EAAG,QAAO,EAAE,CAAC;AAAA,EAC3B;AACA,MAAI,OAAO,MAAM,eAAe,YAAY,MAAM,eAAe,IAAI;AACnE,WAAO,MAAM;AAAA,EACf;AACA,SAAO;AACT;AAGO,SAAS,qBAAqB,OAAoC;AACvE,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;;;ADpCA,IAAM,OAAmB;AACzB,IAAM,eAAe;AASrB,IAAM,gCAAgC;AAsB/B,IAAM,oBAAN,cAAgC,YAA+B;AAAA,EAC3D,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA,IAC5C,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA;AAAA,IAEd,mBAAmB;AAAA,IACnB,oBAAoB;AAAA,IACpB,eAAe;AAAA,IACf,cAAc;AAAA;AAAA;AAAA,IAGd,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,yBAAyB;AAAA;AAAA;AAAA;AAAA,IAIzB,qBAAqB;AAAA;AAAA;AAAA;AAAA,IAIrB,qBAAqB;AAAA,IACrB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA,IAE5B,kBAAkB;AAAA,IAClB,gBAAgB;AAAA,IAChB,mBAAmB;AAAA;AAAA;AAAA;AAAA,IAInB,gBAAgB;AAAA,EAClB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,QAAQ,GAAG,SAAS;AACzC,UAAM,eAAe,KAAK,SAAS,eAAe;AAClD,UAAM,cAAc,KAAK,QAAQ,GAAG,cAAc;AAClD,UAAM,iBAAiB,KAAK,YAAY,WAAW;AACnD,UAAM,gBACJ,WAAW,OAAO,KAAK,WAAW,YAAY,KAAK,WAAW,WAAW;AAC3E,UAAM,gBAAgB,WAAW,cAAc;AAC/C,UAAM,YAAY,iBAAiB;AAGnC,UAAM,QAAQ,iBAAiB,CAAC,gBAAgB,YAAY;AAC5D,UAAM,aAAa,UAAU,YAAY,iBAAiB;AAC1D,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,UAAU,YACR,uCAAuC,cAAc,KACrD,kCAAkC,OAAO,KAC3C,4BAA4B,OAAO;AAAA,MACvC,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIA,aAAa,KAA6B;AACxC,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,SAAS,IAC9B,KAAK,QAAQ,GAAG,SAAS;AAAA,EAC/B;AAAA,EAEA,oBAAoB,KAA6B;AAC/C,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,WAAW,IAChC,KAAK,QAAQ,GAAG,cAAc;AAAA,EACpC;AAAA,EAEA,kBAAkB,KAA6B;AAC7C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,eAAe;AAAA,EACrD;AAAA;AAAA,EAIA,cAAc,KAAqC;AACjD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI,GAAG;AAC5C,QAAI,CAAC,UAAU,UAAU,aAAa,OAAO;AAC3C,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,UAAU,SACd,iDACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAGA,UAAM,SACJ,YAAY,OAAO,aAAa,WAC5B,EAAE,GAAG,UAAU,QAAQ,GAAG,SAAS,IACnC,UAAU;AAEhB,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,UAAM,QAAQ,KAAK,kBAAkB,KAAK,MAAM;AAEhD,WAAO;AAAA,MACL,KAAK,mBAAmB,YAAY,cAAc,UAAU,IAAI,OAAO,IAAI,MAAM;AAAA,IACnF;AAAA,EACF;AAAA,EAEA,gBAAgB,KAAqC;AACnD,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,WAAO;AAAA,MACL,KAAK,qBAAqB,YAAY,cAAc,IAAI,UAAU,IAAI,IAAI,MAAM;AAAA,IAClF;AAAA,EACF;AAAA;AAAA,EAGQ,kBACN,KACA,QACsC;AACtC,UAAM,YAAuB,OAAO;AAEpC,QAAI,cAAc,SAAS;AACzB,UAAI,UAAU,OAAO,WAAW;AAChC,UAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAIlC,UAAI,uBAAuB,QAAQ,IAAI,UAAU,SAAS,GAAG;AAC3D,cAAM,UAAU;AAAA,UACd,IAAI;AAAA,UACJ,IAAI,UAAU;AAAA,UACd;AAAA,UACA;AAAA,UACA,IAAI;AAAA,UACJ,KAAK;AAAA,QACP;AACA,kBAAU,QAAQ;AAClB,eAAO,QAAQ;AAAA,MACjB;AAEA,YAAMA,SAA2B,EAAE,MAAM,SAAS,SAAS,KAAK;AAChE,YAAM,MAAM,KAAK,UAAU,OAAO,GAAG;AACrC,UAAI,IAAK,CAAAA,OAAM,MAAM;AACrB,UAAI,OAAO,IAAK,CAAAA,OAAM,MAAM,mBAAmB,OAAO,GAAG;AACzD,aAAOA;AAAA,IACT;AAGA,UAAM,QAA0B;AAAA,MAC9B,MAAM;AAAA,MACN,KAAK,eAAe,OAAO,OAAO,IAAI,cAAc;AAAA,IACtD;AACA,QAAI,OAAO,SAAS;AAClB,YAAM,UAAU,KAAK,UAAU,OAAO,OAAO,KAAK,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,UACN,KACoC;AACpC,QAAI,CAAC,OAAO,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAClD,UAAM,MAA8B,CAAC;AACrC,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,UAAI,CAAC,IAAI,eAAe,GAAG,cAAc;AAAA,IAC3C;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,aAAa,KAAqC;AAChD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI;AAKzC,UAAM,mBAAmB,UAAU,UAAU,QAAQ,CAAC,IAAI,UAAU;AACpE,UAAM,cAAc,UAAU,eAAe,CAAC;AAC9C,UAAM,eAAe,OAAO,KAAK,WAAW;AAE5C,QAAI,iBAAiB,WAAW,KAAK,aAAa,WAAW,GAAG;AAC9D,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QACE,UAAU,UAAU,QAChB,mCACA;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,eAAe,KAAK,kBAAkB,GAAG;AAC/C,UAAM,WAAW,KAAK,SAAkC,YAAY,KAAK,CAAC;AAC1E,UAAM,QAAS,SAAS,UAAU,CAAC;AAEnC,UAAM,UAA0B,CAAC;AACjC,QAAI,UAAU;AAMd,UAAM,UAAqD;AAAA,MACzD,GAAG,iBAAiB,IAAI,CAAC,WAAW;AAAA,QAClC;AAAA,QACA,SAAS,UAAU,MAAM,KAAK,GAAG,WAAW;AAAA,MAC9C,EAAE;AAAA,MACF,GAAG,aAAa,IAAI,CAAC,WAAW;AAAA,QAC9B;AAAA,QACA,SAAS,YAAY,KAAK,GAAG,WAAW;AAAA,MAC1C,EAAE;AAAA,IACJ;AAEA,eAAW,EAAE,OAAO,QAAQ,KAAK,SAAS;AACxC,YAAM,UAAU,wBAAwB,IAAI,aAAa,MAAM,OAAO,UAAU,EAAE;AAClF,YAAM,QAAyB;AAAA,QAC7B;AAAA,QACA,OAAO,CAAC,EAAE,MAAM,WAAW,QAAQ,CAAC;AAAA,MACtC;AAEA,YAAM,SAAU,MAAM,KAAK,MAAM,CAAC;AAClC,YAAM,cAAc,OAAO,UAAU,CAAC,MAAM,KAAK,gBAAgB,GAAG,OAAO,CAAC;AAE5E,UAAI,eAAe,GAAG;AACpB,YAAI,KAAK,UAAU,OAAO,WAAW,CAAC,MAAM,KAAK,UAAU,KAAK,GAAG;AACjE,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ,SAAS,KAAK;AAAA,UACxB,CAAC;AACD;AAAA,QACF;AACA,eAAO,WAAW,IAAI;AACtB,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,SAAS,KAAK;AAAA,QACxB,CAAC;AAAA,MACH,OAAO;AACL,eAAO,KAAK,KAAK;AACjB,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,SAAS,KAAK;AAAA,QACxB,CAAC;AAAA,MACH;AACA,gBAAU;AAAA,IACZ;AAEA,QAAI,QAAS,MAAK,UAAU,cAAc,UAAU,IAAI,MAAM;AAC9D,WAAO;AAAA,EACT;AAAA,EAEA,eAAe,KAAqC;AAClD,UAAM,eAAe,KAAK,kBAAkB,GAAG;AAC/C,UAAM,WAAW,KAAK,SAAkC,YAAY;AACpE,UAAM,QAAQ,UAAU;AACxB,QAAI,CAAC,YAAY,CAAC,OAAO;AACvB,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAA0B,CAAC;AACjC,QAAI,UAAU;AAEd,eAAW,SAAS,OAAO,KAAK,KAAK,GAAG;AACtC,YAAM,SAAS,MAAM,KAAK;AAC1B,UAAI,CAAC,MAAM,QAAQ,MAAM,EAAG;AAG5B,YAAM,OAA0B,CAAC;AACjC,UAAI,UAAU;AACd,iBAAW,KAAK,QAAQ;AACtB,cAAM,cAAc,EAAE,OAAO,UAAU;AACvC,cAAM,SAAS,EAAE,SAAS,CAAC,GAAG;AAAA,UAC5B,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,SAAS,GAAG;AAAA,QAC1C;AACA,mBAAW,cAAc,MAAM;AAC/B,YAAI,MAAM,SAAS,EAAG,MAAK,KAAK,EAAE,SAAS,EAAE,WAAW,IAAI,OAAO,MAAM,CAAC;AAAA,MAC5E;AAEA,UAAI,UAAU,GAAG;AACf,YAAI,KAAK,SAAS,EAAG,OAAM,KAAK,IAAI;AAAA,YAC/B,QAAO,MAAM,KAAK;AACvB,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,SAAS,KAAK,KAAK,OAAO;AAAA,QACpC,CAAC;AACD,kBAAU;AAAA,MACZ;AAAA,IACF;AAEA,QAAI,QAAS,MAAK,UAAU,cAAc,UAAU,IAAI,MAAM;AAC9D,QAAI,QAAQ,WAAW,GAAG;AACxB,cAAQ,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,gBAAgB,OAAwB,SAA0B;AACxE,YAAQ,MAAM,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,YAAY,OAAO;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,uBAAuB,KAA6B;AAClD,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,eAAe;AAAA,EACrD;AAAA,EAES,qBAAqB,KAAqC;AACjE,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,UAAU,UAAU,UAAU,IAAI,GAAG,eAAe,CAAC;AAC3D,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO;AAAA,QACL,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,4CAA4C;AAAA,MAC3F;AAAA,IACF;AAEA,UAAM,WAAW,KAAK,uBAAuB,GAAG;AAGhD,QAAI,KAAK,wBAAwB,QAAQ,GAAG;AAC1C,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,YAAY,QAAQ;AAAA,QAC9B;AAAA,MACF;AAAA,IACF;AACA,UAAM,WAAW,KAAK,SAAkC,QAAQ,KAAK,CAAC;AACtE,QAAI,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG;AAC3D,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,YAAY,QAAQ;AAAA,QAC9B;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAS,sBAAsB,IAAI,QAAQ;AACjD,UAAM,UAA0B,CAAC;AACjC,QAAI,cAAc;AAClB,QAAI,gBAAgB;AAEpB,eAAW,SAAS,SAAS;AAG3B,UAAI,CAAC,sBAAsB,MAAM,GAAG,GAAG;AACrC,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QACE,eAAe,KAAK,UAAU,MAAM,GAAG,CAAC;AAAA,QAE5C,CAAC;AACD;AAAA,MACF;AACA,YAAM,YAAY,8BAA8B,MAAM,GAAG;AACzD,UAAI,WAAW;AACb,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,wBAAwB,SAAS;AAAA,QAC3C,CAAC;AACD;AAAA,MACF;AAEA,YAAM,YAAY,4BAA4B,MAAM,GAAG;AACvD,UAAI,WAAW;AACb,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QACE,eAAe,MAAM,GAAG,6DACX,SAAS;AAAA,QAC1B,CAAC;AACD;AAAA,MACF;AAGA,YAAM,UAAU,mBAAmB,MAAM,KAAK;AAC9C,YAAM,WAAW,MAAM,IAAI,MAAM,GAAG;AACpC,YAAM,OAAO,aAAa,UAAU,QAAQ;AAC5C,YAAM,QAAQ,gBAAgB,QAAQ,MAAM,UAAU,MAAM,GAAG;AAE/D,UAAI,KAAK,SAAS,WAAW;AAC3B,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QACE,eAAe,MAAM,GAAG,cAAc,KAAK,MAAM,wCACrC,sBAAsB,KAAK,CAAC;AAAA,QAC5C,CAAC;AACD;AAAA,MACF;AAEA,UAAI,KAAK,SAAS,UAAU;AAE1B,sBAAc,UAAU,UAAU,OAAO;AACzC,sBAAc;AACd,YAAI,OAAO;AAIT,gBAAM,eAAe;AACrB,gBAAM,mBAAmB,cAAc,OAAO;AAC9C,yBAAe,OAAO,UAAU,IAAI,UAAU,OAAO;AAAA,QACvD,OAAO;AACL,4BAAkB,QAAQ;AAAA,YACxB,UAAU;AAAA,YACV,MAAM;AAAA,YACN,KAAK,MAAM;AAAA,YACX,OAAO;AAAA,YACP,aAAa,UAAU;AAAA,YACvB,kBAAkB,UAAU;AAAA,UAC9B,CAAC;AAAA,QACH;AACA,wBAAgB;AAChB,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,eAAe,MAAM,GAAG,qBAAgB,kBAAkB,OAAO,CAAC,KAAK,MAAM,MAAM;AAAA,QAC7F,CAAC;AACD;AAAA,MACF;AAGA,UAAI,CAAC,OAAO;AAGV,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QACE,eAAe,MAAM,GAAG,4BAA4B,kBAAkB,KAAK,KAAK,CAAC,6CACrC,kBAAkB,OAAO,CAAC,cACtE,sBAAsB,KAAK;AAAA,QAC/B,CAAC;AACD;AAAA,MACF;AAEA,UAAI,CAAC,eAAe,KAAK,OAAO,MAAM,YAAY,GAAG;AAGnD,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QACE,eAAe,MAAM,GAAG,0CACZ,kBAAkB,KAAK,KAAK,CAAC,WAAW,kBAAkB,MAAM,YAAY,CAAC,8BACnE,sBAAsB,KAAK,CAAC;AAAA,QACtD,CAAC;AACD;AAAA,MACF;AAEA,UAAI,eAAe,SAAS,KAAK,KAAK,GAAG;AAGvC,cAAM,SAAS,MAAM,OAAO,IAAI,CAAC,MAAM,EAAE,WAAW;AACpD,YAAI,eAAe,OAAO,UAAU,IAAI,UAAU,OAAO,GAAG;AAC1D,0BAAgB;AAChB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ,eAAe,MAAM,GAAG,6DAA6D,OAAO,KAAK,IAAI,CAAC;AAAA,UAChH,CAAC;AAAA,QACH,OAAO;AACL,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ,eAAe,MAAM,GAAG;AAAA,UAClC,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAGA,cAAQ,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QACE,eAAe,MAAM,GAAG,8BAA8B,MAAM,OACzD,IAAI,CAAC,MAAM,EAAE,WAAW,EACxB,KAAK,IAAI,CAAC,oCACD,kBAAkB,KAAK,KAAK,CAAC,aAAa,kBAAkB,OAAO,CAAC,cAChF,sBAAsB,KAAK;AAAA,MAC/B,CAAC;AAAA,IACH;AAEA,QAAI,YAAa,MAAK,UAAU,UAAU,UAAU,IAAI,MAAM;AAC9D,QAAI,iBAAiB,CAAC,IAAI,OAAQ,uBAAsB,IAAI,UAAU,MAAM;AAC5E,WAAO;AAAA,EACT;AAAA,EAES,uBAAuB,KAAqC;AACnE,UAAM,cAAc,IAAI,UAAU;AAClC,UAAM,SAAS,sBAAsB,IAAI,QAAQ;AAIjD,UAAM,QAAQ,qBAAqB,QAAQ,MAAM,WAAW;AAC5D,UAAM,WAAW,IAAI,UAAU,UAAU,IAAI,GAAG,eAAe,CAAC;AAChE,UAAM,UAA0B,CAAC;AAIjC,UAAM,YAAY,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC;AACjD,eAAW,SAAS,UAAU;AAC5B,UAAI,CAAC,UAAU,IAAI,MAAM,GAAG,GAAG;AAC7B,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,eAAe,MAAM,GAAG;AAAA,QAClC,CAAC;AAAA,MACH;AAAA,IACF;AACA,QAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,QAAI,gBAAgB;AACpB,UAAM,WAAW,oBAAI,IAAY;AAGjC,UAAM,SAAS,oBAAI,IAAsC;AACzD,eAAW,SAAS,OAAO;AACzB,YAAM,SAAS,OAAO,IAAI,MAAM,IAAI,KAAK,CAAC;AAC1C,aAAO,KAAK,KAAK;AACjB,aAAO,IAAI,MAAM,MAAM,MAAM;AAAA,IAC/B;AAEA,eAAW,CAAC,UAAU,OAAO,KAAK,QAAQ;AACxC,YAAM,cAAc,KAAK,wBAAwB,QAAQ;AACzD,YAAM,WAAW,cACb,OACA,KAAK,SAAkC,QAAQ;AACnD,UAAI,cAAc;AAElB,iBAAW,SAAS,SAAS;AAC3B,cAAM,EAAE,UAAU,IAAI,kBAAkB,OAAO,WAAW;AAC1D,wBAAgB;AAEhB,YAAI,CAAC,WAAW;AAEd,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ,eAAe,MAAM,GAAG,6BAA6B,MAAM,OAChE,IAAI,CAAC,MAAM,EAAE,WAAW,EACxB,KAAK,IAAI,CAAC;AAAA,UACf,CAAC;AACD;AAAA,QACF;AAIA,wBAAgB,QAAQ,KAAK;AAE7B,YAAI,aAAa;AACf,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ,eAAe,MAAM,GAAG,KAAK,QAAQ;AAAA,UAC/C,CAAC;AACD;AAAA,QACF;AACA,YAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG;AACxE,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ,eAAe,MAAM,GAAG;AAAA,UAClC,CAAC;AACD;AAAA,QACF;AACA,cAAM,OAAO,aAAa,UAAU,MAAM,IAAI,MAAM,GAAG,CAAC;AACxD,YAAI,KAAK,SAAS,WAAW;AAC3B,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ,eAAe,MAAM,GAAG;AAAA,UAClC,CAAC;AACD;AAAA,QACF;AACA,YAAI,MAAM,OAAO,YAAY,SAAS,CAAC,eAAe,KAAK,OAAO,MAAM,YAAY,GAAG;AAGrF,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QACE,eAAe,MAAM,GAAG,0CACZ,kBAAkB,KAAK,KAAK,CAAC,WAAW,kBAAkB,MAAM,YAAY,CAAC;AAAA,UAE7F,CAAC;AACD;AAAA,QACF;AAKA,YAAI,CAAC,IAAI,UAAU,CAAC,SAAS,IAAI,QAAQ,KAAK,WAAW,QAAQ,GAAG;AAClE,gBAAM,SAAS,KAAK,yBAAyB,QAAQ;AACrD,mBAAS,IAAI,QAAQ;AACrB,cAAI,QAAQ;AACV,oBAAQ,KAAK;AAAA,cACX,UAAU,KAAK;AAAA,cACf,QAAQ;AAAA,cACR,MAAM;AAAA,cACN,QAAQ;AAAA,YACV,CAAC;AAAA,UACH;AAAA,QACF;AACA,uBAAe,UAAU,MAAM,IAAI,MAAM,GAAG,CAAC;AAC7C,sBAAc;AACd,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,eAAe,MAAM,GAAG,iBAAiB,kBAAkB,MAAM,YAAY,CAAC;AAAA,QACxF,CAAC;AAAA,MACH;AAEA,UAAI,eAAe,SAAU,MAAK,UAAU,UAAU,UAAU,IAAI,MAAM;AAAA,IAC5E;AAEA,QAAI,iBAAiB,CAAC,IAAI,OAAQ,uBAAsB,IAAI,UAAU,MAAM;AAC5E,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,yBAAyB,UAAiC;AAChE,QAAI;AACF,gBAAU,WAAW,CAAC;AACtB,YAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY,EAAE,QAAQ,SAAS,GAAG;AAC3D,YAAM,OAAO,KAAK,WAAW,GAAG,GAAG,KAAK,EAAE,IAAI,KAAK,IAAI,SAAS,QAAQ,CAAC,EAAE;AAC3E,mBAAa,UAAU,IAAI;AAC3B,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYQ,uBAAuB,KAAyC;AACtE,UAAM,UAA8B,CAAC;AACrC,UAAM,SAAS,sBAAsB,IAAI,QAAQ;AACjD,UAAM,cAAc,IAAI,UAAU;AAClC,UAAM,kBAAkB,OAAO,QAAQ,OAAO,CAAC,MAAM,EAAE,aAAa,KAAK,EAAE;AAE3E,eAAW,SAAS,iBAAiB;AACnC,YAAM,cAAc,MAAM,OAAO,KAAK,CAAC,MAAM,EAAE,gBAAgB,WAAW;AAC1E,UAAI,CAAC,aAAa;AAEhB,cAAM,WACJ,MAAM,OAAO,WAAW,KACxB,MAAM,OAAO,MAAM,CAAC,MAAM,mBAAmB,EAAE,WAAW,MAAM,IAAI;AACtE,YAAI,UAAU;AACZ,kBAAQ,KAAK;AAAA,YACX,OAAO,GAAG,KAAK,IAAI,iBAAiB,MAAM,GAAG;AAAA,YAC7C,QAAQ;AAAA,YACR,SACE,4BAA4B,MAAM,IAAI,sCAC7B,MAAM,OAAO,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,IAAI,KAAK,MAAM;AAAA,YACtE,KACE,4EACG,MAAM,GAAG,SAAS,MAAM,IAAI;AAAA,UACnC,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAEA,YAAM,QAAQ,KAAK,iBAAiB,KAAK;AACzC,UAAI,MAAM,SAAS,MAAM;AACvB,gBAAQ,KAAK;AAAA,UACX,OAAO,GAAG,KAAK,IAAI,iBAAiB,MAAM,GAAG;AAAA,UAC7C,QAAQ;AAAA,UACR,SAAS,aAAQ,MAAM,GAAG,MAAM,kBAAkB,MAAM,YAAY,CAAC,KAAK,MAAM,IAAI;AAAA,QACtF,CAAC;AAAA,MACH,WAAW,MAAM,SAAS,WAAW;AACnC,gBAAQ,KAAK;AAAA,UACX,OAAO,GAAG,KAAK,IAAI,iBAAiB,MAAM,GAAG;AAAA,UAC7C,QAAQ;AAAA,UACR,SAAS,mCAA8B,MAAM,IAAI;AAAA,UACjD,KAAK;AAAA,QACP,CAAC;AAAA,MACH,OAAO;AACL,gBAAQ,KAAK;AAAA,UACX,OAAO,GAAG,KAAK,IAAI,iBAAiB,MAAM,GAAG;AAAA,UAC7C,QAAQ;AAAA,UACR,SACE,uDAAkD,kBAAkB,MAAM,OAAO,CAAC,WACzE,kBAAkB,MAAM,YAAY,CAAC;AAAA,UAChD,KAAK,8BAA8B,MAAM,GAAG,MAAM,kBAAkB,MAAM,YAAY,CAAC,OAAO,MAAM,IAAI;AAAA,QAC1G,CAAC;AAAA,MACH;AAAA,IACF;AAIA,UAAM,WAAW,IAAI,UAAU,UAAU,IAAI,GAAG,eAAe,CAAC;AAChE,UAAM,YAAY,IAAI;AAAA,MACpB,qBAAqB,QAAQ,MAAM,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG;AAAA,IAClE;AACA,eAAW,SAAS,UAAU;AAC5B,UAAI,UAAU,IAAI,MAAM,GAAG,EAAG;AAC9B,cAAQ,KAAK;AAAA,QACX,OAAO,GAAG,KAAK,IAAI,iBAAiB,MAAM,GAAG;AAAA,QAC7C,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,KAAK,sBAAsB,KAAK;AAAA,MAClC,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,iBACN,OACgF;AAChF,UAAM,WAAW,KAAK,SAAkC,MAAM,IAAI;AAClE,QAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG;AACxE,aAAO,EAAE,MAAM,UAAU;AAAA,IAC3B;AACA,UAAM,OAAO,aAAa,UAAU,MAAM,IAAI,MAAM,GAAG,CAAC;AACxD,QAAI,KAAK,SAAS,UAAW,QAAO,EAAE,MAAM,UAAU;AACtD,QAAI,eAAe,KAAK,OAAO,MAAM,YAAY,EAAG,QAAO,EAAE,MAAM,KAAK;AACxE,WAAO,EAAE,MAAM,WAAW,SAAS,KAAK,MAAM;AAAA,EAChD;AAAA,EAES,OAAO,KAAyC;AACvD,UAAM,UAAU,MAAM,OAAO,GAAG;AAChC,YAAQ,KAAK,GAAG,KAAK,uBAAuB,GAAG,CAAC;AAChD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,YAAY,KAA6B;AAC/C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU;AAAA,EAChD;AAAA,EACQ,UAAU,KAA6B;AAC7C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,QAAQ;AAAA,EAC9C;AAAA,EACQ,UAAU,KAA6B;AAC7C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,QAAQ;AAAA,EAC9C;AAAA;AAAA,EAGQ,YAAY,KAAqB,MAAsB;AAC7D,WAAO,KAAK,KAAK,YAAY,GAAG,GAAG,GAAG,IAAI,KAAK;AAAA,EACjD;AAAA;AAAA,EAEQ,SAAS,KAAqB,MAAsB;AAC1D,WAAO,KAAK,KAAK,UAAU,GAAG,GAAG,IAAI;AAAA,EACvC;AAAA;AAAA,EAEQ,aAAa,KAAqB,MAAsB;AAC9D,WAAO,KAAK,KAAK,UAAU,GAAG,GAAG,GAAG,IAAI,KAAK;AAAA,EAC/C;AAAA;AAAA,EAIS,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,aAAa,OAAO;AACjD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,oCAAoC,CAAC;AAAA,IAC5F;AACA,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK;AAAA,QACH,KAAK,YAAY,KAAK,IAAI,IAAI;AAAA,QAC9B,KAAK,cAAc,GAAG;AAAA,QACtB,IAAI;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAAA,EAES,kBAAkB,KAAqC;AAC9D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK,kBAAkB,KAAK,YAAY,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM;AAAA,IACpE;AAAA,EACF;AAAA;AAAA,EAGQ,cAAc,KAAyB;AAC7C,WAAO,gBAAgB,GAAG;AAAA,EAC5B;AAAA;AAAA,EAIS,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,WAAW,OAAO;AAC/C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AACzC,cAAQ;AAAA,QACN,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,KAAK,YAAY,KAAK,GAAG,IAAI,MAAM;AAAA,MAClF;AAIA,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,YAAY,OAAyB;AAC3C,WAAO,cAAc,KAAK;AAAA,EAC5B;AAAA;AAAA,EAIS,iBAAiB,KAAqC;AAC7D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,cAAc,OAAO;AAClD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,qCAAqC,CAAC;AAAA,IAC7F;AACA,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK;AAAA,QACH,KAAK,aAAa,KAAK,MAAM,IAAI;AAAA,QACjC,KAAK,eAAe,KAAK;AAAA,QACzB,IAAI;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAAA,EAES,mBAAmB,KAAqC;AAC/D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,kBAAkB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,IAAI,MAAM;AAAA,IACvE;AAAA,EACF;AAAA;AAAA,EAGQ,eAAe,OAA4B;AACjD,WAAO,iBAAiB,KAAK;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyBQ,aAAa,KAA6B;AAChD,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,WAAW,IAChC,KAAK,QAAQ,GAAG,WAAW,WAAW;AAAA,EAC5C;AAAA;AAAA,EAGQ,aAAa,KAA6B;AAChD,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,WAAW,IAChC,KAAK,QAAQ,GAAG,WAAW,WAAW;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,wBAAwB,KAA8B;AAC5D,UAAM,WAAW,KAAK,aAAa,GAAG;AACtC,QAAI,CAAC,WAAW,QAAQ,EAAG,QAAO;AAClC,QAAI;AACF,UAAI,UAAU,QAAQ,EAAE,eAAe,GAAG;AACxC,cAAM,WAAW,KAAK,aAAa,GAAG;AACtC,cAAM,WAAW,aAAa,QAAQ;AACtC,cAAM,iBAAiB,WAAW,QAAQ,IAAI,aAAa,QAAQ,IAAI;AACvE,YAAI,aAAa,eAAgB,QAAO;AAAA,MAC1C;AAAA,IACF,QAAQ;AAAA,IAER;AACA,QAAI;AACJ,QAAI;AACF,YAAM,aAAa,UAAU,MAAM;AAAA,IACrC,QAAQ;AACN,aAAO;AAAA,IACT;AAGA,UAAM,gBAAgB,qBAAqB,KAAK,EAAE,eAAe,GAAG,CAAC,EAAE;AACvE,UAAM,WAAW;AACjB,WAAO,mBAAmB,aAAa,EAAE,KAAK,CAAC,SAAS,SAAS,KAAK,IAAI,CAAC;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,oBAAoB,KAAgE;AAC1F,QAAI,KAAK,wBAAwB,GAAG,EAAG,QAAO;AAC9C,WAAO,KAAK,eAAe,GAAG,GAAG,SAAS,kBAAkB,kBAAkB;AAAA,EAChF;AAAA,EAEmB,cAAc,KAAqC;AAEpE,QAAI,KAAK,eAAe,GAAG,GAAG,KAAM,QAAO,MAAM,cAAc,GAAG;AAClE,QAAI,IAAI,UAAU,aAAa,IAAI,UAAU,OAAQ,QAAO,CAAC;AAC7D,UAAM,OAAO,KAAK,oBAAoB,GAAG;AACzC,QAAI,SAAS,SAAS;AACpB,aAAO;AAAA,QACL;AAAA,UACE,MAAM,KAAK,aAAa,GAAG;AAAA,UAC3B,QACE;AAAA,QAEJ;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,QACE,MAAM,KAAK,aAAa,GAAG;AAAA,QAC3B,QACE,SAAS,gBACL,mFACA;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA,EAES,cAAc,KAAqC;AAC1D,UAAM,UAAU,MAAM,cAAc,GAAG;AACvC,UAAM,EAAE,UAAU,IAAI;AAEtB,QAAI,UAAU,UAAU,IAAI,GAAG,WAAW,UAAU,UAAU,UAAU,CAAC,GAAG,WAAW,GAAG;AACxF,aAAO;AAAA,IACT;AACA,QAAI,IAAI,UAAU,aAAa,IAAI,UAAU,OAAQ,QAAO;AAC5D,QAAI,KAAK,eAAe,GAAG,GAAG,KAAM,QAAO;AAE3C,UAAM,OAAO,KAAK,oBAAoB,GAAG;AACzC,QAAI,SAAS,eAAe;AAC1B,cAAQ,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,MAAM,KAAK,aAAa,GAAG;AAAA,QAC3B,QACE;AAAA,MAEJ,CAAC;AACD,aAAO;AAAA,IACT;AACA,QAAI,SAAS,gBAAiB,QAAO;AAGrC,UAAM,WAAW,KAAK,aAAa,GAAG;AACtC,UAAM,aAAa,IAAI,UAAU,YAAY,eAAe;AAC5D,UAAM,MAAM,uBAAuB,UAAU;AAAA,MAC3C,SAAS;AAAA,MACT,aAAa;AAAA,MACb,SAAS;AAAA,MACT,QACE;AAAA,MAGF,OAAO,IAAI,SAAS;AAAA,MACpB,QAAQ,IAAI;AAAA,IACd,CAAC;AACD,YAAQ,KAAK;AAAA,MACX,UAAU,KAAK;AAAA,MACf,QAAQ,IAAI;AAAA,MACZ,MAAM;AAAA,MACN,QAAQ,WAAW,IAAI,MAAM;AAAA,IAC/B,CAAC;AACD,QAAI,IAAI,YAAY;AAClB,cAAQ,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,MAAM,IAAI;AAAA,QACV,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,QAAI,IAAI,WAAW,UAAU,CAAC,IAAI,QAAQ;AACxC,YAAM,SAAS,iBAAiB,UAAU,EAAE;AAC5C,yBAAmB,QAAQ;AAAA,QACzB,UAAU,KAAK;AAAA,QACf,OAAO,IAAI;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,QACT,aAAa,IAAI;AAAA,QACjB,MAAM,IAAI;AAAA,MACZ,CAAC;AACD,uBAAiB,UAAU,IAAI,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACT;AAAA,EAES,gBAAgB,KAAqC;AAE5D,UAAM,YAAY,iBAAiB,IAAI,UAAU,EAAE,EAAE,QAAQ;AAAA,MAC3D,CAAC,MAAM,EAAE,aAAa,KAAK,MAAM,EAAE,YAAY;AAAA,IACjD;AACA,UAAM,UAAU,MAAM,gBAAgB,GAAG;AAIzC,UAAM,QAAQ,oBAAI,IAAwD;AAC1E,QAAI,IAAI,UAAU,aAAa,IAAI,UAAU,QAAQ;AACnD,YAAM,IAAI,KAAK,aAAa,GAAG,GAAG;AAAA,QAChC,UAAU,KAAK,aAAa,GAAG;AAAA,QAC/B,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AACA,eAAW,OAAO,WAAW;AAC3B,YAAM,WAAW,MAAM,IAAI,IAAI,IAAI;AACnC,YAAM,IAAI,IAAI,MAAM;AAAA,QAClB,UAAU,UAAU,YAAY,KAAK,QAAQ,IAAI,IAAI,GAAG,WAAW;AAAA,QACnE,cAAc,UAAU,eAAe,UAAU,IAAI;AAAA,MACvD,CAAC;AAAA,IACH;AACA,eAAW,CAAC,UAAU,EAAE,UAAU,YAAY,CAAC,KAAK,OAAO;AACzD,cAAQ,KAAK,GAAG,KAAK,0BAA0B,KAAK,UAAU,UAAU,WAAW,CAAC;AAAA,IACtF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,0BACN,KACA,UACA,UACA,aACgB;AAChB,QAAI,CAAC,WAAW,QAAQ,EAAG,QAAO,CAAC;AACnC,QAAI;AACJ,QAAI;AACF,YAAM,aAAa,UAAU,MAAM;AAAA,IACrC,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AACA,QAAI,CAAC,kBAAkB,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,6BAA6B,GAAG;AACpF,aAAO,CAAC;AAAA,IACV;AACA,QAAI,YAAY;AAChB,QAAI,WAAW,QAAQ,GAAG;AACxB,UAAI;AACF,oBAAY,kBAAkB,aAAa,UAAU,MAAM,CAAC,EAAE;AAAA,UAC5D,CAAC,MAAM,CAAC,EAAE,QAAQ,WAAW,GAAG,IAAI,UAAU,EAAE,GAAG;AAAA,QACrD,EAAE;AAAA,MACJ,QAAQ;AACN,oBAAY;AAAA,MACd;AAAA,IACF;AACA,QAAI,YAAY,GAAG;AACjB,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QACE,oDAA+C,SAAS,6DACZ,QAAQ;AAAA,QACxD;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,MACA,EAAE,SAAS,8BAA8B;AAAA,MACzC,EAAE,QAAQ,IAAI,QAAQ,qBAAqB,YAAY;AAAA,IACzD,EAAE,IAAI,CAAC,OAAO;AAAA,MACZ,UAAU,KAAK;AAAA,MACf,QAAQ,EAAE;AAAA,MACV,MAAM,EAAE;AAAA,MACR,QAAQ,WAAW,EAAE,MAAM;AAAA,IAC7B,EAAE;AAAA,EACJ;AAAA;AAAA;AAAA,EAIQ,aAAa,SAA6B,KAA8B;AAC9E,WAAO,qBAAqB,SAAS,IAAI,aAAa,IAAI,UAAU,EAAE;AAAA,EACxE;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,eAAe,KAAK,kBAAkB,GAAG;AAC/C,UAAM,cAAc,IAAI,UAAU;AAClC,UAAM,UAAU,IAAI;AACpB,UAAM,aAAa,IAAI,UAAU;AAIjC,UAAM,oBACJ,WAAW,SACX,OAAO,KAAK,IAAI,UAAU,UAAU,IAAI,GAAG,eAAe,CAAC,CAAC,EAAE;AAChE,UAAM,SAAwB;AAAA,MAC5B;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AAIX,cAAI,sBAAsB,GAAG;AAC3B,mBAAO,EAAE,QAAQ,MAAM,QAAQ,oBAAoB;AAAA,UACrD;AACA,iBAAO,WAAW,YAAY,IAC1B,EAAE,QAAQ,MAAM,QAAQ,aAAa,IACrC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,YAAY,GAAG;AAAA,QAC7D;AAAA,MACF;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AACX,cAAI,sBAAsB,GAAG;AAC3B,mBAAO,EAAE,QAAQ,MAAM,QAAQ,oBAAoB;AAAA,UACrD;AACA,gBAAM,WAAW,KAAK;AAAA,YACpB;AAAA,UACF;AACA,cAAI,CAAC,SAAU,QAAO,EAAE,QAAQ,QAAQ,QAAQ,eAAe,YAAY,GAAG;AAC9E,gBAAM,QAAQ,SAAS,SAAS,CAAC;AACjC,gBAAM,aAAa,OAAO,OAAO,KAAK,EAAE;AAAA,YAAK,CAAC,aAC3C,WAAW,CAAC,GAAG;AAAA,cAAK,CAAC,OACnB,EAAE,SAAS,CAAC,GAAG;AAAA,gBAAK,CAAC,MACpB,qBAAqB,EAAE,SAAS,SAAS,WAAW;AAAA,cACtD;AAAA,YACF;AAAA,UACF;AACA,iBAAO,aACH,EAAE,QAAQ,MAAM,QAAQ,uBAAuB,IAC/C;AAAA,YACE,QAAQ;AAAA,YACR,QAAQ,eAAe,WAAW,OAAO,YAAY;AAAA,UACvD;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAIA,eAAW,OAAO,IAAI,UAAU,UAAU;AACxC,YAAM,IAAI,KAAK,YAAY,KAAK,IAAI,IAAI;AACxC,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,aAAa,IAAI,IAAI;AAAA,QACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,eAAW,SAAS,IAAI,UAAU,QAAQ;AACxC,YAAM,IAAI,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU;AACzD,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,WAAW,MAAM,IAAI;AAAA,QACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,eAAW,SAAS,IAAI,UAAU,WAAW;AAC3C,YAAM,IAAI,KAAK,aAAa,KAAK,MAAM,IAAI;AAC3C,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,cAAc,MAAM,IAAI;AAAA,QAC1C,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,WAAW,OAAsB,KAA+B;AAC9D,UAAM,QAAS,OAAO,CAAC;AACvB,UAAM,cAAc,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAC5E,UAAM,YAAY,iBAAiB,KAAK;AACxC,UAAM,aAAa,OAAO,MAAM,QAAQ,WAAW,MAAM,MAAM;AAE/D,UAAM,OAAO;AAAA,MACX,cAAc;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,IACnD;AAEA,YAAQ,OAAO;AAAA,MACb,KAAK,cAAc;AACjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,eAAe;AAClB,cAAM,KAAuB;AAAA,UAC3B,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,GAAI,qBAAqB,MAAM,aAAa,MAAM,SAC9C,EAAE,YAAY,qBAAqB,MAAM,aAAa,EAAE,IACxD,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,KAAwB;AAAA,UAC5B,GAAG;AAAA,UACH,QAAQ,uBAAuB,MAAM,MAAM;AAAA,QAC7C;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,cAAc;AACjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,WAAW,WAAW,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,QACrE;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,oBAAoB;AACvB,cAAM,KAA4B;AAAA,UAChC,GAAG;AAAA,UACH,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,QAC5D;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,cAAc;AACjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,GAAI,MAAM,YAAY,UAAU,MAAM,YAAY,WAC9C,EAAE,SAAS,MAAM,QAAQ,IACzB,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,QAAQ;AACX,cAAM,KAAgB;AAAA,UACpB,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,qBAAqB,YAClC,EAAE,gBAAgB,MAAM,iBAAiB,IACzC,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,KAAwB;AAAA,UAC5B,GAAG;AAAA,UACH,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;AAAA,QAC/D;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,qBAAqB;AACxB,cAAM,KAA6B;AAAA,UACjC,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,GAAI,MAAM,QAAQ,MAAM,sBAAsB,IAC1C,EAAE,uBAAuB,MAAM,uBAAuB,IACtD,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,sBAAsB;AACzB,cAAM,KAA8B;AAAA,UAClC,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,OAAO,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ;AAAA,UACvD,GAAI,OAAO,MAAM,gBAAgB,WAC7B,EAAE,WAAW,MAAM,YAAY,IAC/B,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,iBAAiB,YAC9B,EAAE,aAAa,MAAM,aAAa,IAClC,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,gBAAgB,WAC7B,EAAE,YAAY,MAAM,YAAY,IAChC,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,iBAAiB;AACpB,cAAM,KAAyB;AAAA,UAC7B,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAC5B,EAAE,WAAW,MAAM,WAAW,IAC9B,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,gBAAgB;AAGnB,cAAM,KAAwB;AAAA,UAC5B,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAC5B,EAAE,WAAW,MAAM,WAAW,IAC9B,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,0BAA0B,WACvC,EAAE,qBAAqB,MAAM,sBAAsB,IACnD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,2BAA2B,WACxC,EAAE,sBAAsB,MAAM,uBAAuB,IACrD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,qBAAqB,YAClC,EAAE,gBAAgB,MAAM,iBAAiB,IACzC,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,SAAS;AAEP,cAAM,SAAgB;AACtB,cAAM,IAAI,MAAM,uCAAuC,OAAO,MAAM,CAAC,EAAE;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAIA,YAAY,OAAsB,UAAmC;AACnE,UAAM,gBAAgB;AACtB,UAAM,WAAW,SAAS,YAAY;AAYtC,QAAI,UAAU,qBAAqB;AACjC,UAAI,SAAS,aAAa,QAAQ;AAChC,eAAO,KAAK,OAAO;AAAA,UACjB,oBAAoB;AAAA,YAClB;AAAA,YACA,UAAU;AAAA,cACR,UAAU;AAAA,cACV,SAAS,SAAS,UAAU;AAAA,YAC9B;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,UACE,SAAS,aAAa,WACrB,SAAS,aAAa,YAAY,SAAS,cAC5C;AACA,eAAO,KAAK,OAAO;AAAA,UACjB,oBAAoB;AAAA,YAClB;AAAA,YACA,UAAU;AAAA,cACR,UAAU;AAAA,cACV,GAAI,SAAS,eACT,EAAE,cAAc,SAAS,aAAa,IACtC,CAAC;AAAA,YACP;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAOA,QAAI,UAAU,wBAAwB,UAAU,iBAAiB;AAC/D,YAAM,UACJ,aAAa,YACT,SAAS,oBACT,aAAa,SACX,SAAS,UAAU,SAAS,oBAC5B;AACR,UAAI,SAAS;AACX,eAAO,KAAK,OAAO;AAAA,UACjB,oBAAoB,EAAE,eAAe,mBAAmB,QAAQ;AAAA,QAClE,CAAC;AAAA,MACH;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAWA,QAAI,aAAa,QAAQ;AACvB,UACE,UAAU,UACV,UAAU,kBACV,UAAU,sBACV,UAAU,eACV;AACA,eAAO,KAAK,OAAO;AAAA,UACjB,UAAU;AAAA,UACV,QAAQ,SAAS,UAAU;AAAA,QAC7B,CAAC;AAAA,MACH;AACA,aAAO,KAAK,OAAO;AAAA,QACjB,oBAAoB;AAAA,UAClB;AAAA,UACA,oBAAoB;AAAA,UACpB,0BAA0B,SAAS,UAAU;AAAA,QAC/C;AAAA,MACF,CAAC;AAAA,IACH;AAGA,QAAI,aAAa,OAAO;AACtB,aAAO,KAAK,OAAO;AAAA,QACjB,oBAAoB;AAAA,UAClB;AAAA,UACA,oBAAoB;AAAA,UACpB,0BACE,SAAS,UAAU;AAAA,QACvB;AAAA,MACF,CAAC;AAAA,IACH;AAGA,QAAI,aAAa,UAAU;AACzB,UAAI,UAAU,gBAAgB,SAAS,cAAc;AACnD,eAAO,KAAK,OAAO;AAAA,UACjB,oBAAoB,EAAE,eAAe,cAAc,SAAS,aAAa;AAAA,QAC3E,CAAC;AAAA,MACH;AAAA,IAEF;AAGA,QAAI,aAAa,aAAa,SAAS,mBAAmB;AACxD,aAAO,KAAK,OAAO;AAAA,QACjB,oBAAoB,EAAE,eAAe,mBAAmB,SAAS,kBAAkB;AAAA,MACrF,CAAC;AAAA,IACH;AAGA,WAAO,EAAE,UAAU,EAAE;AAAA,EACvB;AAAA,EAEQ,OAAO,SAA6B;AAC1C,WAAO,EAAE,UAAU,GAAG,QAAQ,KAAK,UAAU,OAAO,EAAE;AAAA,EACxD;AACF;AA8BA,IAAM,sBAAoE;AAAA,EACxE,EAAE,IAAI,sBAAsB,OAAO,cAAc;AAAA,EACjD,EAAE,IAAI,uBAAuB,OAAO,eAAe;AAAA,EACnD,EAAE,IAAI,0BAA0B,OAAO,kBAAkB;AAAA,EACzD,EAAE,IAAI,YAAY,OAAO,UAAU;AAAA,EACnC,EAAE,IAAI,oBAAoB,OAAO,iBAAiB;AAAA,EAClD,EAAE,IAAI,yBAAyB,OAAO,sBAAsB;AAAA,EAC5D,EAAE,IAAI,sBAAsB,OAAO,mBAAmB;AAAA,EACtD,EAAE,IAAI,uBAAuB,OAAO,oBAAoB;AAAA,EACxD,EAAE,IAAI,uBAAuB,OAAO,oBAAoB;AAAA,EACxD,EAAE,IAAI,oBAAoB,OAAO,kBAAkB;AAAA,EACnD,EAAE,IAAI,cAAc,OAAO,YAAY;AAAA,EACvC,EAAE,IAAI,4BAA4B,OAAO,cAAc;AAAA,EACvD,EAAE,IAAI,qBAAqB,OAAO,cAAc;AAAA,EAChD,EAAE,IAAI,mBAAmB,OAAO,YAAY;AAAA,EAC5C,EAAE,IAAI,sBAAsB,OAAO,eAAe;AACpD;AAMO,SAAS,4BAA4B,KAA4B;AACtE,aAAW,QAAQ,qBAAqB;AACtC,QAAI,KAAK,GAAG,KAAK,GAAG,EAAG,QAAO,KAAK;AAAA,EACrC;AACA,SAAO;AACT;AAaA,SAAS,aAAa,MAA+B,UAAoC;AACvF,MAAI,OAAgC;AACpC,WAAS,IAAI,GAAG,IAAI,SAAS,SAAS,GAAG,KAAK;AAC5C,UAAM,OAAO,KAAK,SAAS,CAAC,CAAE;AAC9B,QAAI,SAAS,OAAW,QAAO,EAAE,MAAM,SAAS;AAChD,QAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG;AACpE,aAAO,EAAE,MAAM,WAAW,QAAQ,SAAS,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,EAAE;AAAA,IACvE;AACA,WAAO;AAAA,EACT;AACA,QAAM,OAAO,KAAK,SAAS,SAAS,SAAS,CAAC,CAAE;AAChD,MAAI,SAAS,OAAW,QAAO,EAAE,MAAM,SAAS;AAChD,SAAO,EAAE,MAAM,WAAW,OAAO,KAAkB;AACrD;AAMA,SAAS,cACP,MACA,UACA,OACM;AACN,MAAI,OAAgC;AACpC,WAAS,IAAI,GAAG,IAAI,SAAS,SAAS,GAAG,KAAK;AAC5C,UAAM,MAAM,SAAS,CAAC;AACtB,UAAM,OAAO,KAAK,GAAG;AACrB,QAAI,SAAS,QAAW;AACtB,YAAM,UAAmC,CAAC;AAC1C,WAAK,GAAG,IAAI;AACZ,aAAO;AAAA,IACT,OAAO;AACL,aAAO;AAAA,IACT;AAAA,EACF;AACA,OAAK,SAAS,SAAS,SAAS,CAAC,CAAE,IAAI;AACzC;AAMA,SAAS,eAAe,MAA+B,UAA0B;AAC/E,MAAI,OAAgC;AACpC,WAAS,IAAI,GAAG,IAAI,SAAS,SAAS,GAAG,KAAK;AAC5C,UAAM,OAAO,KAAK,SAAS,CAAC,CAAE;AAC9B,QAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG;AACtE,WAAO;AAAA,EACT;AACA,SAAO,KAAK,SAAS,SAAS,SAAS,CAAC,CAAE;AAC5C;AAGA,SAAS,eAAe,MAAsB;AAC5C,SAAO,MAAM,IAAI;AACnB;AAEA,SAAS,uBAAuB,QAAyD;AACvF,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEO,IAAM,UAAU,IAAI,kBAAkB;AAC7C,IAAO,sBAAQ;","names":["entry"]}

package/dist/codebuff-LE3KBZGM.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/adapters/codebuff/index.ts"],"sourcesContent":["/**\n * adapters/codebuff — Codebuff platform adapter for agent-connector.\n *\n * Codebuff is an **mcp-only** host: it exposes no lifecycle hook system, and MCP\n * is its extensibility mechanism. This adapter therefore installs only the MCP\n * server and reports hooks as unavailable (mirrors the Warp reference path that\n * validates the `mcp-only` paradigm end-to-end).\n *\n * MCP config (SPEC):\n *   - project scope (preferred) → <projectDir>/.agents/mcp.json\n *   - user scope               → ~/.agents/mcp.json\n *   Both are JSON, root key \"mcpServers\". There is no separate hook file — the\n *   hook \"config path\" is the same mcp.json so the generic doctor/backup behave\n *   sensibly.\n *\n * A stdio server entry is the standard `{ type:\"stdio\", command, args, env }`\n * shape. Codebuff supports native `$VAR` interpolation, so `${env:VAR}` refs are\n * rewritten to Codebuff's native `$VAR` token (rewriteEnvRefs) rather than being\n * resolved to literals — secrets are never baked into the config file.\n */\n\nimport { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\nimport { BaseAdapter } from \"../base.js\";\nimport type { Adapter, InstallContext } from \"../spi.js\";\nimport type {\n  ChangeRecord,\n  DetectedPlatform,\n  HealthCheck,\n  HookParadigm,\n  PlatformCapabilities,\n  PlatformId,\n  ServerDef,\n  Transport,\n} from \"../../core/types.js\";\nimport { rewriteEnvRefs } from \"../../core/interpolate.js\";\nimport {\n  buildServeWrapperCommand,\n  shouldWrapForTelemetry,\n} from \"../../core/spawn.js\";\n\nconst HOST: PlatformId = \"codebuff\";\nconst MCP_ROOT_KEY = \"mcpServers\";\n\n/**\n * Render `${env:VAR}`/`${env:VAR:-default}` into Codebuff's native `$VAR` token.\n *\n * When the portable ref carried a default (`${env:VAR:-fallback}`), Codebuff's\n * native `$VAR` token cannot express it — so a bare native token would silently\n * DROP the default. Instead, resolve the default at install time: emit the live\n * value when VAR is set and non-empty, else the literal fallback. The native\n * token is only emitted when there is no default to preserve.\n */\nconst toNativeRef = (name: string, def?: string): string => {\n  if (def !== undefined) {\n    const v = process.env[name];\n    return v != null && v !== \"\" ? v : def;\n  }\n  return `$${name}`;\n};\n\n/** Recursively rewrite every `${env:VAR}` ref in a JSON-ish value to `$VAR`. */\nfunction rewriteEnvRefsDeep<T>(value: T): T {\n  if (typeof value === \"string\") {\n    return rewriteEnvRefs(value, toNativeRef) as unknown as T;\n  }\n  if (Array.isArray(value)) {\n    return value.map((v) => rewriteEnvRefsDeep(v)) as unknown as T;\n  }\n  if (value && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, v] of Object.entries(value)) out[k] = rewriteEnvRefsDeep(v);\n    return out as T;\n  }\n  return value;\n}\n\n/**\n * Native MCP server entry shapes Codebuff accepts under `mcpServers`.\n * A stdio entry is tagged with `type:\"stdio\"`; remote transports carry a `url`.\n */\ninterface CodebuffStdioServer {\n  type: \"stdio\";\n  command: string;\n  args?: string[];\n  env?: Record<string, string>;\n}\ninterface CodebuffHttpServer {\n  type: \"http\";\n  url: string;\n  headers?: Record<string, string>;\n}\n\nexport class CodebuffAdapter extends BaseAdapter implements Adapter {\n  readonly id: PlatformId = HOST;\n  readonly name = \"Codebuff\";\n  readonly paradigm: HookParadigm = \"mcp-only\";\n\n  readonly capabilities: PlatformCapabilities = {\n    // Memory surface: AGENTS.md-first managed block via the BaseAdapter default\n    // (memoryTargets: project <projectDir>/AGENTS.md; user scope where documented).\n    supportsMemory: true,\n    // Codebuff has no lifecycle hook system — every hook capability is false.\n    preToolUse: false,\n    postToolUse: false,\n    preCompact: false,\n    sessionStart: false,\n    sessionEnd: false,\n    userPromptSubmit: false,\n    stop: false,\n    notification: false,\n    canModifyArgs: false,\n    canModifyOutput: false,\n    canInjectSessionContext: false,\n    // Codebuff registers stdio and Streamable HTTP MCP servers.\n    transports: [\"stdio\", \"http\"],\n  };\n\n  // ── Detection ────────────────────────────────────────────────────────────\n\n  detectInstalled(projectDir: string): DetectedPlatform {\n    const userDir = join(homedir(), \".agents\");\n    const userMcp = join(userDir, \"mcp.json\");\n    const projDir = join(projectDir, \".agents\");\n    const projMcp = join(projDir, \"mcp.json\");\n\n    const userInstalled = existsSync(userDir) || existsSync(userMcp);\n    const projInstalled = existsSync(projDir) || existsSync(projMcp);\n    const installed = userInstalled || projInstalled;\n    // Project is the preferred scope; fall back to user when only that matched.\n    const scope = projInstalled && !userInstalled ? \"project\" : \"user\";\n    const configPath = scope === \"project\" ? projMcp : userMcp;\n\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath,\n      scope,\n      reason: installed\n        ? `found Codebuff config (${scope})`\n        : `no .agents config dir at ${userDir} or ${projDir}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Native paths ─────────────────────────────────────────────────────────\n\n  getConfigDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".agents\")\n      : join(homedir(), \".agents\");\n  }\n\n  getServerConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"mcp.json\");\n  }\n\n  /**\n   * Codebuff has no hook file — hooks are not a thing here. The hook \"config\n   * path\" is the same mcp.json so the generic doctor/backup behave sensibly.\n   */\n  getHookConfigPath(ctx: InstallContext): string {\n    return this.getServerConfigPath(ctx);\n  }\n\n  // ── MCP server install / uninstall ───────────────────────────────────────\n\n  installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST]?.server;\n    if (!connector.server || override === false) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail: connector.server\n            ? \"server registration disabled for codebuff\"\n            : \"connector declares no MCP server\",\n        },\n      ];\n    }\n\n    // Shallow-merge any per-platform server override into the base ServerDef.\n    const server: ServerDef =\n      override && typeof override === \"object\"\n        ? { ...connector.server, ...override }\n        : connector.server;\n\n    const serverPath = this.getServerConfigPath(ctx);\n    const entry = this.renderServerEntry(ctx, server);\n\n    return [\n      this.upsertServerInJson(serverPath, MCP_ROOT_KEY, connector.id, entry, ctx.dryRun),\n    ];\n  }\n\n  uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const serverPath = this.getServerConfigPath(ctx);\n    return [\n      this.removeServerFromJson(serverPath, MCP_ROOT_KEY, ctx.connector.id, ctx.dryRun),\n    ];\n  }\n\n  /** Render a normalized ServerDef into Codebuff's native mcpServers entry. */\n  private renderServerEntry(\n    ctx: InstallContext,\n    server: ServerDef,\n  ): CodebuffStdioServer | CodebuffHttpServer {\n    const transport: Transport = server.transport;\n\n    if (transport === \"stdio\") {\n      let command = server.command ?? \"\";\n      let args = [...(server.args ?? [])];\n\n      // Transparent telemetry wrapping: route the real command through\n      // `<homeBin> serve --connector <id> -- <command> <args...>`.\n      if (shouldWrapForTelemetry(server, ctx.connector.telemetry)) {\n        const wrapped = buildServeWrapperCommand(\n          ctx.homeBinPath,\n          ctx.connector.id,\n          command,\n          args,\n          ctx.scope,\n          this.id,\n        );\n        command = wrapped.command;\n        args = wrapped.args;\n      }\n\n      // Codebuff supports native `$VAR` interpolation, so rewrite every\n      // ${env:VAR} ref to `$VAR` rather than baking literals into the config.\n      const entry: CodebuffStdioServer = {\n        type: \"stdio\",\n        command: rewriteEnvRefsDeep(command),\n      };\n      if (args.length > 0) entry.args = rewriteEnvRefsDeep(args);\n      const env = this.renderEnv(server.env);\n      if (env) entry.env = env;\n      return entry;\n    }\n\n    // http (and any other remote transport) — Codebuff registers a URL.\n    const entry: CodebuffHttpServer = {\n      type: \"http\",\n      url: rewriteEnvRefsDeep(server.url ?? \"\"),\n    };\n    const headers = this.renderEnv(server.headers);\n    if (headers) entry.headers = headers;\n    return entry;\n  }\n\n  /**\n   * Render env/header values. Codebuff supports native `$VAR` interpolation, so\n   * rewrite `${env:VAR}` references to `$VAR` rather than resolving to literals.\n   */\n  private renderEnv(\n    env: Record<string, string> | undefined,\n  ): Record<string, string> | undefined {\n    if (!env || Object.keys(env).length === 0) return undefined;\n    return rewriteEnvRefsDeep({ ...env });\n  }\n\n  // ── Hooks (unavailable — Codebuff is mcp-only) ────────────────────────────\n\n  installHooks(_ctx: InstallContext): ChangeRecord[] {\n    return [\n      {\n        platform: this.id,\n        action: \"skip\",\n        detail: \"hooks unavailable (Codebuff is mcp-only)\",\n      },\n    ];\n  }\n\n  uninstallHooks(_ctx: InstallContext): ChangeRecord[] {\n    return [\n      {\n        platform: this.id,\n        action: \"skip\",\n        detail: \"hooks unavailable (Codebuff is mcp-only)\",\n      },\n    ];\n  }\n\n  // ── Diagnostics ──────────────────────────────────────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const mcpPath = this.getServerConfigPath(ctx);\n    const connectorId = ctx.connector.id;\n    return [\n      {\n        name: `${this.name}: mcp.json present`,\n        check: () =>\n          existsSync(mcpPath)\n            ? { status: \"OK\", detail: mcpPath }\n            : { status: \"FAIL\", detail: `not found: ${mcpPath}` },\n      },\n      {\n        name: `${this.name}: server entry registered`,\n        check: () => {\n          // Only assert what the connector declares: a server-less connector\n          // never writes a server entry, so its absence is healthy.\n          if (!ctx.connector.server) {\n            return { status: \"OK\", detail: \"no MCP server declared\" };\n          }\n          const cfg = this.readJson<{ [k: string]: Record<string, unknown> }>(mcpPath);\n          const bucket = cfg?.[MCP_ROOT_KEY];\n          if (!cfg || !bucket) {\n            return { status: \"FAIL\", detail: `no ${MCP_ROOT_KEY} in ${mcpPath}` };\n          }\n          return connectorId in bucket\n            ? { status: \"OK\", detail: `${MCP_ROOT_KEY}.${connectorId} present` }\n            : {\n                status: \"FAIL\",\n                detail: `no ${MCP_ROOT_KEY}.${connectorId} in ${mcpPath}`,\n              };\n        },\n      },\n    ];\n  }\n}\n\nexport const adapter = new CodebuffAdapter();\nexport default adapter;\n"],"mappings":";;;;;;;;;;;;;;;;AAqBA,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,YAAY;AAoBrB,IAAM,OAAmB;AACzB,IAAM,eAAe;AAWrB,IAAM,cAAc,CAAC,MAAc,QAAyB;AAC1D,MAAI,QAAQ,QAAW;AACrB,UAAM,IAAI,QAAQ,IAAI,IAAI;AAC1B,WAAO,KAAK,QAAQ,MAAM,KAAK,IAAI;AAAA,EACrC;AACA,SAAO,IAAI,IAAI;AACjB;AAGA,SAAS,mBAAsB,OAAa;AAC1C,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,eAAe,OAAO,WAAW;AAAA,EAC1C;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,IAAI,CAAC,MAAM,mBAAmB,CAAC,CAAC;AAAA,EAC/C;AACA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,EAAG,KAAI,CAAC,IAAI,mBAAmB,CAAC;AACzE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAkBO,IAAM,kBAAN,cAA8B,YAA+B;AAAA,EACzD,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA;AAAA,IAEhB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA,IACd,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,yBAAyB;AAAA;AAAA,IAEzB,YAAY,CAAC,SAAS,MAAM;AAAA,EAC9B;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,QAAQ,GAAG,SAAS;AACzC,UAAM,UAAU,KAAK,SAAS,UAAU;AACxC,UAAM,UAAU,KAAK,YAAY,SAAS;AAC1C,UAAM,UAAU,KAAK,SAAS,UAAU;AAExC,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,YAAY,iBAAiB;AAEnC,UAAM,QAAQ,iBAAiB,CAAC,gBAAgB,YAAY;AAC5D,UAAM,aAAa,UAAU,YAAY,UAAU;AAEnD,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,0BAA0B,KAAK,MAC/B,4BAA4B,OAAO,OAAO,OAAO;AAAA,MACrD,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIA,aAAa,KAA6B;AACxC,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,SAAS,IAC9B,KAAK,QAAQ,GAAG,SAAS;AAAA,EAC/B;AAAA,EAEA,oBAAoB,KAA6B;AAC/C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,kBAAkB,KAA6B;AAC7C,WAAO,KAAK,oBAAoB,GAAG;AAAA,EACrC;AAAA;AAAA,EAIA,cAAc,KAAqC;AACjD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI,GAAG;AAC5C,QAAI,CAAC,UAAU,UAAU,aAAa,OAAO;AAC3C,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,UAAU,SACd,8CACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAGA,UAAM,SACJ,YAAY,OAAO,aAAa,WAC5B,EAAE,GAAG,UAAU,QAAQ,GAAG,SAAS,IACnC,UAAU;AAEhB,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,UAAM,QAAQ,KAAK,kBAAkB,KAAK,MAAM;AAEhD,WAAO;AAAA,MACL,KAAK,mBAAmB,YAAY,cAAc,UAAU,IAAI,OAAO,IAAI,MAAM;AAAA,IACnF;AAAA,EACF;AAAA,EAEA,gBAAgB,KAAqC;AACnD,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,WAAO;AAAA,MACL,KAAK,qBAAqB,YAAY,cAAc,IAAI,UAAU,IAAI,IAAI,MAAM;AAAA,IAClF;AAAA,EACF;AAAA;AAAA,EAGQ,kBACN,KACA,QAC0C;AAC1C,UAAM,YAAuB,OAAO;AAEpC,QAAI,cAAc,SAAS;AACzB,UAAI,UAAU,OAAO,WAAW;AAChC,UAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAIlC,UAAI,uBAAuB,QAAQ,IAAI,UAAU,SAAS,GAAG;AAC3D,cAAM,UAAU;AAAA,UACd,IAAI;AAAA,UACJ,IAAI,UAAU;AAAA,UACd;AAAA,UACA;AAAA,UACA,IAAI;AAAA,UACJ,KAAK;AAAA,QACP;AACA,kBAAU,QAAQ;AAClB,eAAO,QAAQ;AAAA,MACjB;AAIA,YAAMA,SAA6B;AAAA,QACjC,MAAM;AAAA,QACN,SAAS,mBAAmB,OAAO;AAAA,MACrC;AACA,UAAI,KAAK,SAAS,EAAG,CAAAA,OAAM,OAAO,mBAAmB,IAAI;AACzD,YAAM,MAAM,KAAK,UAAU,OAAO,GAAG;AACrC,UAAI,IAAK,CAAAA,OAAM,MAAM;AACrB,aAAOA;AAAA,IACT;AAGA,UAAM,QAA4B;AAAA,MAChC,MAAM;AAAA,MACN,KAAK,mBAAmB,OAAO,OAAO,EAAE;AAAA,IAC1C;AACA,UAAM,UAAU,KAAK,UAAU,OAAO,OAAO;AAC7C,QAAI,QAAS,OAAM,UAAU;AAC7B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,UACN,KACoC;AACpC,QAAI,CAAC,OAAO,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAClD,WAAO,mBAAmB,EAAE,GAAG,IAAI,CAAC;AAAA,EACtC;AAAA;AAAA,EAIA,aAAa,MAAsC;AACjD,WAAO;AAAA,MACL;AAAA,QACE,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA,EAEA,eAAe,MAAsC;AACnD,WAAO;AAAA,MACL;AAAA,QACE,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,UAAU,KAAK,oBAAoB,GAAG;AAC5C,UAAM,cAAc,IAAI,UAAU;AAClC,WAAO;AAAA,MACL;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,OAAO,IACd,EAAE,QAAQ,MAAM,QAAQ,QAAQ,IAChC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,OAAO,GAAG;AAAA,MAC1D;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AAGX,cAAI,CAAC,IAAI,UAAU,QAAQ;AACzB,mBAAO,EAAE,QAAQ,MAAM,QAAQ,yBAAyB;AAAA,UAC1D;AACA,gBAAM,MAAM,KAAK,SAAmD,OAAO;AAC3E,gBAAM,SAAS,MAAM,YAAY;AACjC,cAAI,CAAC,OAAO,CAAC,QAAQ;AACnB,mBAAO,EAAE,QAAQ,QAAQ,QAAQ,MAAM,YAAY,OAAO,OAAO,GAAG;AAAA,UACtE;AACA,iBAAO,eAAe,SAClB,EAAE,QAAQ,MAAM,QAAQ,GAAG,YAAY,IAAI,WAAW,WAAW,IACjE;AAAA,YACE,QAAQ;AAAA,YACR,QAAQ,MAAM,YAAY,IAAI,WAAW,OAAO,OAAO;AAAA,UACzD;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,IAAM,UAAU,IAAI,gBAAgB;AAC3C,IAAO,mBAAQ;","names":["entry"]}