@ken-jo/agent-connector 0.4.0 → 0.4.1

package/dist/{chunk-BHUCB6LY.js.map → chunk-5OWS5CMA.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/runtime/serve.ts","../src/telemetry/calibration.ts","../src/telemetry/proxy.ts","../src/runtime/usage-event.ts","../src/runtime/statusline-entrypoint.ts","../src/runtime/action-entrypoint.ts"],"sourcesContent":["/**\n * runtime/serve — the `agent-connector serve` telemetry-wrapping entrypoint.\n *\n * When a stdio MCP server opts into transparent telemetry, its host config is\n * rewritten (by the adapter, via core/spawn.buildServeWrapperCommand) to launch\n *   <homeBin> serve --connector <id> -- <realCommand> <realArgs...>\n * instead of the server directly. The CLI parses those flags and calls\n * {@link runServe}, which stands up the per-session telemetry context (store,\n * tokenizer, project identity, host detection) and hands off to the proxy.\n *\n * The proxy (telemetry/proxy.runServeProxy) forwards bytes VERBATIM in both\n * directions and measures aggregate per-tool token counts out of band, so this\n * wrapper is transparent to both the host and the real server. It resolves with\n * the child server's exit code, which the CLI uses as its own.\n */\n\nimport { randomUUID } from \"node:crypto\";\n\nimport { detectRuntimeHost } from \"../adapters/detect.js\";\nimport { REGISTERED_PLATFORM_IDS } from \"../adapters/registry.js\";\nimport { loadRegisteredConnector } from \"../core/load-connector.js\";\nimport { projectIdentity } from \"../core/paths.js\";\nimport { detectLaunchMethod } from \"../core/spawn.js\";\nimport type { PlatformId } from \"../core/types.js\";\nimport { runServeProxy } from \"../telemetry/proxy.js\";\nimport { openStore } from \"../telemetry/store.js\";\nimport { getTokenizer } from \"../telemetry/tokenizer.js\";\nimport type { TelemetryInstallScope } from \"../telemetry/types.js\";\n\n/** Flags the CLI hands to {@link runServe}. */\nexport interface RunServeOptions {\n  /** Connector id from `--connector <id>`; selects telemetry config + stamps records. */\n  connectorId: string;\n  /** The real MCP server executable to spawn (everything after `--`). */\n  serverCommand: string;\n  /** Arguments passed to that executable. */\n  serverArgs: string[];\n  /**\n   * Install scope from `--scope <user|project>`. OPTIONAL: absent for configs\n   * written before scope plumbing existed — left unstamped so older rows read\n   * as \"unknown\". Stamped verbatim onto every telemetry record when present.\n   */\n  installScope?: TelemetryInstallScope;\n  /**\n   * Install TARGET platform id from `--host <platformId>` (baked into the\n   * wrapper at install time). OPTIONAL: when a recognized platform id, it\n   * OVERRIDES runtime env detection so headless spawns stamp hostPlatform\n   * correctly (detectRuntimeHost only knows env markers for a few hosts and\n   * otherwise mis-attributes). Absent/unrecognized → fall back to detection.\n   */\n  hostPlatformOverride?: PlatformId;\n}\n\n/**\n * Launch the developer's real MCP server under the telemetry-wrapping proxy.\n *\n * Resolves with the child server's exit code (propagated as this process's exit\n * code by the CLI). The session id comes from AGENT_CONNECTOR_SESSION when the\n * host sets it (empty otherwise); the host platform is detected from runtime env\n * markers; the project identity partitions telemetry by the stable project key.\n */\n/**\n * Resolve a session id for telemetry attribution. Prefers a host-provided\n * session/thread marker (so records from the same host session group together);\n * falls back to a per-process UUID — each `serve` invocation is one server\n * session, a sensible default granularity — so `--by session` rollups are never\n * collapsed into a single empty-keyed group.\n */\nfunction resolveSessionId(env: NodeJS.ProcessEnv = process.env): string {\n  return (\n    env.AGENT_CONNECTOR_SESSION ||\n    env.CLAUDE_SESSION_ID ||\n    env.CODEX_THREAD_ID ||\n    env.CURSOR_TRACE_ID ||\n    env.MCP_SESSION_ID ||\n    `proc-${randomUUID()}`\n  );\n}\n\nexport async function runServe(opts: RunServeOptions): Promise<number> {\n  const { connectorId, serverCommand, serverArgs, installScope, hostPlatformOverride } =\n    opts;\n\n  const connector = await loadRegisteredConnector(connectorId);\n\n  const id = projectIdentity(process.cwd());\n  // Prefer the install TARGET platform baked into the wrapper (--host), but only\n  // when it is a KNOWN registered platform id — a bad/unknown value falls back to\n  // runtime env detection so a config typo can never poison hostPlatform.\n  const hostPlatform: PlatformId =\n    hostPlatformOverride !== undefined &&\n    REGISTERED_PLATFORM_IDS.has(hostPlatformOverride)\n      ? hostPlatformOverride\n      : detectRuntimeHost().platform;\n  const sessionId = resolveSessionId();\n\n  // `serve` only ever wraps a locally-spawned stdio server (a remote/http server\n  // is never launched through the proxy), so isRemote is always false here.\n  const launchMethod = detectLaunchMethod(serverCommand, serverArgs);\n\n  const store = openStore({});\n  const tok = getTokenizer();\n\n  return runServeProxy({\n    connectorId,\n    command: serverCommand,\n    args: serverArgs,\n    store,\n    tokenizer: tok,\n    modelFamilyHint: connector.telemetry.modelFamilyHint,\n    hostPlatform,\n    sessionId,\n    projectKey: id.key,\n    projectDir: id.dir,\n    measureToolDefs: connector.telemetry.measureToolDefs,\n    installScope,\n    launchMethod,\n  });\n}\n","/**\n * telemetry/calibration — OPT-IN Anthropic count_tokens calibration.\n *\n * The default tokenizer counts every family with the OpenAI o200k_base BPE, so\n * an Anthropic session's counts are an honest-but-approximate stand-in\n * (\"tokenizer-approx\"). This module lets a developer OPT IN to calibrating that\n * approximation against Anthropic's real `count_tokens` endpoint: we sample a\n * tiny fraction of tool calls off-box, learn a per-family correction factor\n * (rolling mean of exact/approx), and apply it to the locally-tokenized counts\n * so they land much closer to the host's real numbers — labeled honestly as\n * \"tokenizer-calibrated\".\n *\n * PRIVACY + SAFETY — load-bearing invariants:\n *   • OPT-IN only. Nothing here runs unless BOTH AGENT_CONNECTOR_CALIBRATE\n *     contains \"anthropic\" AND ANTHROPIC_API_KEY is set (see isCalibrationEnabled).\n *   • Sampling only — shouldSample() rate-limits hard so we never hammer the API.\n *   • Content leaves the box ONLY on a sampled call, ONLY when opted in. We store\n *     a single scalar factor + sample count — NEVER the sampled text itself.\n *   • Fail-open everywhere: a network/parse/IO error returns null / passes the\n *     approximation through unchanged and NEVER throws into a tool call or hook.\n *\n * No new dependencies: uses Node's global fetch (Node >= 18) and node:fs.\n */\n\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nimport { dataRoot, ensureDir } from \"../core/paths.js\";\nimport type { ConfidenceSource, ModelFamily } from \"./types.js\";\n\n// ── Env switches ──────────────────────────────────────────────────────────\n\n/**\n * Is opt-in Anthropic calibration enabled for this process?\n *\n * Requires BOTH:\n *   • AGENT_CONNECTOR_CALIBRATE — a comma-separated allowlist that INCLUDES\n *     `anthropic` (so a future `AGENT_CONNECTOR_CALIBRATE=openai,anthropic` can\n *     opt other families in without touching this gate), and\n *   • ANTHROPIC_API_KEY — a non-empty key to authenticate the off-box call.\n *\n * Either missing → disabled (the privacy-safe default).\n */\nexport function isCalibrationEnabled(): boolean {\n  const families = (process.env.AGENT_CONNECTOR_CALIBRATE || \"\")\n    .split(\",\")\n    .map((s) => s.trim())\n    .filter((s) => s !== \"\");\n  const key = (process.env.ANTHROPIC_API_KEY || \"\").trim();\n  return families.includes(\"anthropic\") && key !== \"\";\n}\n\n// ── Factor store (dataRoot/calibration.json) ────────────────────────────────\n\n/** One learned correction factor for a model family: factor + sample count. */\nexport interface CalibrationFactor {\n  /** Multiply an approx count by this to estimate the real count. */\n  factor: number;\n  /** How many samples have folded into the rolling mean. */\n  samples: number;\n}\n\n/** The on-disk factor map, keyed by model family. */\nexport type CalibrationFactors = Partial<Record<ModelFamily, CalibrationFactor>>;\n\n/** Path to the learned-factor store: dataRoot()/calibration.json. */\nexport function calibrationPath(): string {\n  return join(dataRoot(), \"calibration.json\");\n}\n\n/**\n * Clamp a measured exact/approx ratio into a sane range. A pathological sample\n * (e.g. an empty-string approx of 0 → Infinity, or a parse glitch) must never\n * poison the rolling mean, so ratios are pinned to [0.2, 5].\n */\nconst RATIO_MIN = 0.2;\nconst RATIO_MAX = 5;\n\nfunction clampRatio(ratio: number): number | null {\n  if (!Number.isFinite(ratio) || ratio <= 0) return null;\n  if (ratio < RATIO_MIN) return RATIO_MIN;\n  if (ratio > RATIO_MAX) return RATIO_MAX;\n  return ratio;\n}\n\n/**\n * Load the learned factors from disk. Fail-open: a missing/unreadable/malformed\n * file returns an empty map rather than throwing.\n */\nexport function loadFactors(): CalibrationFactors {\n  const path = calibrationPath();\n  if (!existsSync(path)) return {};\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\")) as unknown;\n    if (parsed === null || typeof parsed !== \"object\") return {};\n    const out: CalibrationFactors = {};\n    for (const [family, value] of Object.entries(parsed as Record<string, unknown>)) {\n      if (value === null || typeof value !== \"object\") continue;\n      const rec = value as Record<string, unknown>;\n      const factor = rec[\"factor\"];\n      const samples = rec[\"samples\"];\n      if (\n        typeof factor === \"number\" &&\n        Number.isFinite(factor) &&\n        factor > 0 &&\n        typeof samples === \"number\" &&\n        Number.isFinite(samples) &&\n        samples >= 0\n      ) {\n        (out as Record<string, CalibrationFactor>)[family] = {\n          factor,\n          samples,\n        };\n      }\n    }\n    return out;\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Fold one observed exact/approx `ratio` into the rolling mean for `family` and\n * persist it. A running average converges to the true mean while staying cheap\n * and stateless across processes (each writer reads the prior count, blends in\n * the new sample, writes back). Fail-open: any read/write/clamp problem leaves\n * the store untouched and never throws.\n */\nexport function recordSample(family: ModelFamily, ratio: number): void {\n  const clamped = clampRatio(ratio);\n  if (clamped === null) return;\n  try {\n    const factors = loadFactors();\n    const prior = factors[family];\n    let next: CalibrationFactor;\n    if (prior === undefined || prior.samples <= 0) {\n      next = { factor: clamped, samples: 1 };\n    } else {\n      const samples = prior.samples + 1;\n      // Running average: new mean = old mean + (sample - old mean) / n.\n      const factor = prior.factor + (clamped - prior.factor) / samples;\n      next = { factor, samples };\n    }\n    const updated: CalibrationFactors = { ...factors, [family]: next };\n    const path = calibrationPath();\n    ensureDir(dataRoot());\n    writeFileSync(path, `${JSON.stringify(updated, null, 2)}\\n`, \"utf8\");\n  } catch {\n    /* fail-open: a calibration write must never break a tool call */\n  }\n}\n\n// ── Anthropic count_tokens (off-box, sampled, fail-open) ─────────────────────\n\n/** Default model used for count_tokens when no family→model map applies. */\nconst DEFAULT_ANTHROPIC_MODEL = \"claude-3-5-sonnet-latest\";\n\n/** Anthropic count_tokens endpoint. */\nconst COUNT_TOKENS_URL = \"https://api.anthropic.com/v1/messages/count_tokens\";\n\n/** The single field we read out of a successful response. */\ninterface CountTokensResponse {\n  input_tokens?: unknown;\n}\n\n/**\n * Ask Anthropic's `count_tokens` endpoint for the exact token count of `text`\n * under `model`. Returns the integer count, or `null` on ANY failure (no key,\n * non-200, network error, unparseable body) — fail-open by contract.\n *\n * Only ever called on a SAMPLED tool call when calibration is opted in, so the\n * sampled text leaves the box only under explicit operator consent.\n */\nexport async function countTokensAnthropic(\n  text: string,\n  model: string = DEFAULT_ANTHROPIC_MODEL,\n): Promise<number | null> {\n  const apiKey = (process.env.ANTHROPIC_API_KEY || \"\").trim();\n  if (apiKey === \"\") return null;\n  try {\n    const res = await fetch(COUNT_TOKENS_URL, {\n      method: \"POST\",\n      headers: {\n        \"x-api-key\": apiKey,\n        \"anthropic-version\": \"2023-06-01\",\n        \"content-type\": \"application/json\",\n      },\n      body: JSON.stringify({\n        model,\n        messages: [{ role: \"user\", content: text }],\n      }),\n    });\n    if (!res.ok) return null;\n    const body = (await res.json()) as CountTokensResponse;\n    const n = body.input_tokens;\n    if (typeof n === \"number\" && Number.isFinite(n) && n >= 0) {\n      return n;\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\n// ── Sampling (rate-limit so we never hammer the API) ─────────────────────────\n\n/**\n * Sample roughly 1 in {@link SAMPLE_EVERY} calls, with a hard per-minute cap so\n * a burst of tool calls can never fan out into a burst of API calls. Both\n * counters are in-memory (per process) — calibration is a best-effort,\n * low-volume background signal, not a per-call requirement.\n */\nconst SAMPLE_EVERY = 20;\nconst MAX_SAMPLES_PER_MINUTE = 10;\n\nlet callCounter = 0;\nlet windowStartMs = 0;\nlet samplesThisWindow = 0;\n\n/**\n * Should THIS call fire an off-box count_tokens sample? Combines a 1-in-N\n * counter with a rolling per-minute cap. Pure in-memory bookkeeping; never\n * throws, never blocks.\n */\nexport function shouldSample(now: number = Date.now()): boolean {\n  // Roll the per-minute window.\n  if (now - windowStartMs >= 60_000) {\n    windowStartMs = now;\n    samplesThisWindow = 0;\n  }\n  callCounter += 1;\n  if (callCounter % SAMPLE_EVERY !== 0) return false;\n  if (samplesThisWindow >= MAX_SAMPLES_PER_MINUTE) return false;\n  samplesThisWindow += 1;\n  return true;\n}\n\n/** Reset the in-memory sampling counters. Test-only seam; cheap + side-effect-free. */\nexport function _resetSamplingForTest(): void {\n  callCounter = 0;\n  windowStartMs = 0;\n  samplesThisWindow = 0;\n}\n\n// ── Apply a learned factor to a local approximation ──────────────────────────\n\n/** Result of {@link applyCalibration}: the adjusted count + its honest source. */\nexport interface CalibratedCount {\n  tokens: number;\n  source: Extract<ConfidenceSource, \"tokenizer-approx\" | \"tokenizer-calibrated\">;\n}\n\n/**\n * Adjust a locally-tokenized `approxTokens` count by the learned factor for\n * `family`. When a stored factor exists for the anthropic family, return the\n * scaled count labeled \"tokenizer-calibrated\"; otherwise pass the approximation\n * through unchanged as \"tokenizer-approx\". Pure: reads the factor store but\n * mutates nothing.\n */\nexport function applyCalibration(\n  approxTokens: number,\n  family: ModelFamily,\n  factors: CalibrationFactors = loadFactors(),\n): CalibratedCount {\n  if (family === \"anthropic\") {\n    const f = factors[family];\n    if (f !== undefined && f.samples > 0 && Number.isFinite(f.factor) && f.factor > 0) {\n      return {\n        tokens: Math.max(0, Math.round(approxTokens * f.factor)),\n        source: \"tokenizer-calibrated\",\n      };\n    }\n  }\n  return { tokens: approxTokens, source: \"tokenizer-approx\" };\n}\n\n/** The model used for a family's count_tokens sample (anthropic → default model). */\nexport function modelForFamily(_family: ModelFamily): string {\n  return DEFAULT_ANTHROPIC_MODEL;\n}\n","/**\n * telemetry/proxy — the telemetry-wrapping MCP stdio proxy.\n *\n * `agent-connector serve <command> <args…>` spawns the developer's REAL MCP\n * server as a child and sits transparently between the host and that server,\n * speaking the MCP stdio wire format: NEWLINE-DELIMITED JSON-RPC (one single-line\n * JSON object per message, terminated by `\\n`; stdio has NO Content-Length\n * framing). Bytes are forwarded VERBATIM in both directions so the proxy can\n * never corrupt the stream; a side line-buffer tees a COPY of each direction,\n * parses complete messages, and measures per-tool token usage out of band.\n *\n * Honesty / safety rules baked in here:\n *   • Forwarding always happens FIRST. Measurement runs after the bytes are out\n *     the door and is wrapped so a measurement bug can never break a tool call.\n *   • Telemetry stores AGGREGATE COUNTS ONLY — the parsed `tools/call` arguments\n *     and results are tokenized and discarded; raw content is never persisted.\n *   • AGENT_CONNECTOR_TELEMETRY=0 → still proxy transparently, skip all measure.\n *\n * The proxy resolves with the child's exit code and propagates SIGINT/SIGTERM.\n */\n\nimport type { PlatformId } from \"../core/types.js\";\nimport { spawnChild } from \"../core/spawn-child.js\";\nimport { type JsonRpcMessage, LineBuffer, idKey, isObject } from \"./jsonrpc.js\";\nimport {\n  applyCalibration,\n  countTokensAnthropic,\n  isCalibrationEnabled,\n  modelForFamily,\n  recordSample,\n  shouldSample,\n} from \"./calibration.js\";\nimport { measureToolCall, measureToolDefs } from \"./measure.js\";\nimport { newRecordId } from \"./store.js\";\nimport { inferModelFamily } from \"./tokenizer.js\";\nimport type {\n  ConfidenceSource,\n  LaunchMethod,\n  ModelFamily,\n  TelemetryInstallScope,\n  TelemetryStore,\n  Tokenizer,\n  ToolEventRecord,\n} from \"./types.js\";\n\n/** Options for {@link runServeProxy}. */\nexport interface RunServeProxyOptions {\n  /** Connector id this server belongs to (stamped on every record). */\n  connectorId: string;\n  /** The real MCP server executable to spawn. */\n  command: string;\n  /** Arguments passed to that executable. */\n  args: string[];\n  /** Where measured records are appended. */\n  store: TelemetryStore;\n  /** Tokenizer used for measurement (defaults baked into measure helpers). */\n  tokenizer: Tokenizer;\n  /**\n   * Telemetry model-family hint. \"auto\" infers the family from the MCP client's\n   * `initialize` clientInfo.name; any explicit family wins outright.\n   */\n  modelFamilyHint: \"auto\" | ModelFamily;\n  /** Host platform executing this proxy (stamped on every record). */\n  hostPlatform: PlatformId;\n  /** Host session id (stamped on every record). */\n  sessionId: string;\n  /** Hashed stable project identity (stamped on every record). */\n  projectKey: string;\n  /** Human-readable project directory (stamped on every record). */\n  projectDir: string;\n  /** When true, tokenize the `tools/list` schema once → tool-defs overhead. */\n  measureToolDefs: boolean;\n  /**\n   * Install scope (global user vs project-local) stamped on every record.\n   * OPTIONAL: omitted for configs written before scope plumbing existed, leaving\n   * the field off the row so it reads as \"unknown\".\n   */\n  installScope?: TelemetryInstallScope;\n  /**\n   * How the wrapped server was launched (npx/bunx/uvx/node/binary/http), stamped\n   * on every record. OPTIONAL for the same backward-compat reason as above.\n   */\n  launchMethod?: LaunchMethod;\n}\n\n// ── JSON-RPC shapes we read (kept local + narrow; everything else opaque) ─────\n\n/** A client→server `tools/call` we remember until its result comes back. */\ninterface PendingCall {\n  toolName: string;\n  args: unknown;\n}\n\n/**\n * Canonical string form of a tool call's arguments for an off-box count_tokens\n * sample — mirrors the tokenizer's own serialization so the sampled text equals\n * the bytes we approximated locally. A string passes through; anything else is\n * JSON-stringified; a value that stringifies to undefined becomes \"\".\n */\nfunction canonicalArgs(value: unknown): string {\n  if (typeof value === \"string\") return value;\n  try {\n    return JSON.stringify(value) ?? \"\";\n  } catch {\n    return \"\";\n  }\n}\n\n/**\n * Run the telemetry-wrapping MCP stdio proxy.\n *\n * Spawns `command args` with piped stdin/stdout (stderr inherited), forwards\n * both directions byte-for-byte, and measures `tools/call` round-trips and the\n * one-time `tools/list` tool-defs overhead into `store`. Resolves with the\n * child's exit code (or a signal-derived code) once the child closes.\n */\nexport async function runServeProxy(\n  opts: RunServeProxyOptions,\n): Promise<number> {\n  const {\n    connectorId,\n    command,\n    args,\n    store,\n    tokenizer,\n    modelFamilyHint,\n    hostPlatform,\n    sessionId,\n    projectKey,\n    projectDir,\n    measureToolDefs: shouldMeasureToolDefs,\n    installScope,\n    launchMethod,\n  } = opts;\n\n  // Global kill switch: still proxy transparently, but skip ALL measurement.\n  const measuringEnabled = process.env.AGENT_CONNECTOR_TELEMETRY !== \"0\";\n  // OPT-IN Anthropic count_tokens calibration. Resolved once per session — the\n  // gate (AGENT_CONNECTOR_CALIBRATE + ANTHROPIC_API_KEY) is process-level and\n  // does not change mid-session. Off by default; privacy-safe.\n  const calibrationEnabled = isCalibrationEnabled();\n\n  // spawnChild fixes native-Windows package-runner launches: a bare npx/uvx\n  // resolves to a .cmd shim that raw CreateProcess can't find/launch, so it is\n  // run via a quoted single command line with a shell. No-op on macOS/Linux.\n  const child = spawnChild(command, args, {\n    stdio: [\"pipe\", \"pipe\", \"inherit\"],\n    env: process.env,\n  });\n\n  // ── Per-session measurement state ───────────────────────────────────────\n  // Family resolved from the client's `initialize` (or the hint) and cached.\n  let family: ModelFamily = inferModelFamily(\"\", modelFamilyHint);\n  // Outstanding tools/call requests, keyed by JSON-RPC id.\n  const pending = new Map<string, PendingCall>();\n  // Monotonic sequence so two records in the same ms still get distinct ids.\n  let seq = 0;\n  // tools/list overhead is measured exactly once per session.\n  let toolDefsMeasured = false;\n\n  /**\n   * Build a base record stamped with the per-session identity fields plus the\n   * scope dimensions. `installScope` / `launchMethod` are spread in ONLY when\n   * defined, so a session without them leaves those fields off the row entirely\n   * (read as \"unknown\") rather than writing an explicit `undefined`.\n   */\n  function baseRecord(): Omit<\n    ToolEventRecord,\n    \"toolName\" | \"scope\" | \"inputTokens\" | \"outputTokens\" | \"confidenceSource\" | \"isError\"\n  > {\n    return {\n      id: newRecordId(seq++),\n      ts: Date.now(),\n      connectorId,\n      hostPlatform,\n      sessionId,\n      projectKey,\n      projectDir,\n      ...(installScope !== undefined ? { installScope } : {}),\n      ...(launchMethod !== undefined ? { launchMethod } : {}),\n    };\n  }\n\n  /**\n   * Inspect one parsed CLIENT→SERVER message. Caches the model family on\n   * `initialize` and remembers `tools/call` requests so their results can be\n   * measured when they come back. Never throws into the data path.\n   */\n  function onClientMessage(msg: JsonRpcMessage): void {\n    const method = msg.method;\n    if (method === \"initialize\") {\n      const params = isObject(msg.params) ? msg.params : undefined;\n      const clientInfo =\n        params && isObject(params[\"clientInfo\"])\n          ? (params[\"clientInfo\"] as Record<string, unknown>)\n          : undefined;\n      const clientName =\n        clientInfo && typeof clientInfo[\"name\"] === \"string\"\n          ? (clientInfo[\"name\"] as string)\n          : \"\";\n      family = inferModelFamily(clientName, modelFamilyHint);\n      return;\n    }\n\n    if (method === \"tools/call\") {\n      const key = idKey(msg.id);\n      if (key === null) return; // a call with no id has no result to match\n      const params = isObject(msg.params) ? msg.params : undefined;\n      const toolName =\n        params && typeof params[\"name\"] === \"string\"\n          ? (params[\"name\"] as string)\n          : \"unknown\";\n      const callArgs = params ? params[\"arguments\"] : undefined;\n      pending.set(key, { toolName, args: callArgs });\n    }\n  }\n\n  /**\n   * Inspect one parsed SERVER→CLIENT message. Matches `tools/call` results to\n   * remembered requests and measures them; measures `tools/list` results once.\n   * Never throws into the data path.\n   */\n  function onServerMessage(msg: JsonRpcMessage): void {\n    const key = idKey(msg.id);\n    if (key === null) return; // notifications carry no id we can correlate\n\n    const pendingCall = pending.get(key);\n    if (pendingCall !== undefined) {\n      pending.delete(key);\n      recordToolCall(pendingCall, msg);\n      return;\n    }\n\n    // Not a tracked tools/call — it may be the tools/list result we measure\n    // once for the fixed tool-definition overhead.\n    if (shouldMeasureToolDefs && !toolDefsMeasured) {\n      const result = isObject(msg.result) ? msg.result : undefined;\n      const tools = result ? result[\"tools\"] : undefined;\n      if (Array.isArray(tools)) {\n        recordToolDefs(tools);\n      }\n    }\n  }\n\n  /** Measure a matched tools/call round-trip and append the record. */\n  function recordToolCall(call: PendingCall, response: JsonRpcMessage): void {\n    const hasError = response.error !== undefined;\n    const result = response.result;\n    // A JSON-RPC error has no `result`; measure against an empty object so the\n    // input (args) tokens are still recorded honestly.\n    const resultForMeasure = hasError ? {} : result;\n    const measurement = measureToolCall(\n      call.args,\n      resultForMeasure,\n      family,\n      tokenizer,\n    );\n\n    // OPT-IN calibration: for an anthropic session, nudge the locally-tokenized\n    // approx counts toward Anthropic's real numbers via the learned factor, and\n    // fire a sampled off-box count_tokens to keep that factor fresh. Both steps\n    // are best-effort and wrapped so they can never break the record path.\n    let inputTokens = measurement.inputTokens;\n    let outputTokens = measurement.outputTokens;\n    let confidenceSource: ConfidenceSource = measurement.source;\n    if (calibrationEnabled && family === \"anthropic\") {\n      try {\n        ({ inputTokens, outputTokens, confidenceSource } = calibrateCounts(\n          measurement.inputTokens,\n          measurement.outputTokens,\n          measurement.source,\n        ));\n        maybeSampleCalibration(call.args, measurement.inputTokens);\n      } catch {\n        // Calibration is a non-essential enrichment — fall back to the raw\n        // measurement values already captured above.\n      }\n    }\n\n    // MCP signals a tool-level failure via result.isError===true; a JSON-RPC\n    // protocol error (response.error) is also a failure.\n    const resultIsError =\n      isObject(result) && result[\"isError\"] === true;\n    store.append({\n      ...baseRecord(),\n      toolName: call.toolName,\n      scope: \"call\",\n      inputTokens,\n      outputTokens,\n      confidenceSource,\n      isError: hasError || resultIsError,\n    });\n  }\n\n  /**\n   * Apply the learned anthropic factor to the approx input/output counts. Only\n   * a `tokenizer-approx` measurement is calibratable (a heuristic fallback or\n   * host-native count is left exactly as-is); the combined source becomes\n   * `tokenizer-calibrated` only when at least one side was actually scaled.\n   */\n  function calibrateCounts(\n    rawIn: number,\n    rawOut: number,\n    rawSource: ConfidenceSource,\n  ): { inputTokens: number; outputTokens: number; confidenceSource: ConfidenceSource } {\n    if (rawSource !== \"tokenizer-approx\") {\n      return { inputTokens: rawIn, outputTokens: rawOut, confidenceSource: rawSource };\n    }\n    const cin = applyCalibration(rawIn, family);\n    const cout = applyCalibration(rawOut, family);\n    const calibrated =\n      cin.source === \"tokenizer-calibrated\" || cout.source === \"tokenizer-calibrated\";\n    return {\n      inputTokens: cin.tokens,\n      outputTokens: cout.tokens,\n      confidenceSource: calibrated ? \"tokenizer-calibrated\" : \"tokenizer-approx\",\n    };\n  }\n\n  /**\n   * On a SAMPLED call, fire-and-forget an off-box count_tokens for the call's\n   * input args and fold the resulting exact/approx ratio into the learned\n   * factor. Returns immediately — the network round-trip never blocks\n   * forwarding or measurement. Fail-open: any error is swallowed.\n   */\n  function maybeSampleCalibration(args: unknown, approxInputTokens: number): void {\n    if (approxInputTokens <= 0) return; // nothing to ratio against\n    if (!shouldSample()) return;\n    const text = canonicalArgs(args);\n    if (text === \"\") return;\n    // Detached promise — intentionally NOT awaited so the proxy never blocks on\n    // the network. Errors are handled inside countTokensAnthropic (returns null)\n    // and the .catch is a belt-and-braces guard against an unhandled rejection.\n    void countTokensAnthropic(text, modelForFamily(family))\n      .then((exact) => {\n        if (exact !== null && exact > 0) {\n          recordSample(family, exact / approxInputTokens);\n        }\n      })\n      .catch(() => {\n        /* fail-open: a calibration sample must never surface an error */\n      });\n  }\n\n  /** Measure the one-time tools/list overhead and append the record. */\n  function recordToolDefs(tools: readonly unknown[]): void {\n    toolDefsMeasured = true;\n    const count = measureToolDefs(tools, family, tokenizer);\n    store.append({\n      ...baseRecord(),\n      toolName: \"*\",\n      scope: \"tool_defs\",\n      inputTokens: count.tokens,\n      outputTokens: 0,\n      confidenceSource: count.source,\n      isError: false,\n    });\n  }\n\n  /** Parse one NDJSON line and route it, swallowing any measurement error. */\n  function handleLine(line: string, direction: \"client\" | \"server\"): void {\n    if (!measuringEnabled) return;\n    let msg: JsonRpcMessage;\n    try {\n      const parsed = JSON.parse(line) as unknown;\n      if (!isObject(parsed)) return;\n      msg = parsed as JsonRpcMessage;\n    } catch {\n      return; // not a complete/valid JSON message — ignore for telemetry\n    }\n    try {\n      if (direction === \"client\") onClientMessage(msg);\n      else onServerMessage(msg);\n    } catch {\n      // Measurement must NEVER break the proxy. Drop the record silently.\n    }\n  }\n\n  const clientLines = new LineBuffer((line) => handleLine(line, \"client\"));\n  const serverLines = new LineBuffer((line) => handleLine(line, \"server\"));\n\n  // ── Transparent byte forwarding (host stdin → child stdin) ───────────────\n  // Forward VERBATIM first, then tee a copy into the line buffer to measure.\n  // Honor backpressure: if the child's stdin buffer is full, pause the host\n  // stdin and resume on drain so a slow server can't make us buffer unboundedly.\n  process.stdin.on(\"data\", (chunk: Buffer) => {\n    if (child.stdin && child.stdin.writable) {\n      const ok = child.stdin.write(chunk);\n      if (!ok) {\n        process.stdin.pause();\n        child.stdin.once(\"drain\", () => process.stdin.resume());\n      }\n    }\n    if (measuringEnabled) {\n      try {\n        clientLines.push(chunk);\n      } catch {\n        /* tee side-channel must never affect forwarding */\n      }\n    }\n  });\n  process.stdin.on(\"end\", () => {\n    if (child.stdin && !child.stdin.destroyed) child.stdin.end();\n  });\n\n  // ── Transparent byte forwarding (child stdout → host stdout) ─────────────\n  if (child.stdout) {\n    const childStdout = child.stdout;\n    childStdout.on(\"data\", (chunk: Buffer) => {\n      const ok = process.stdout.write(chunk);\n      if (!ok) {\n        childStdout.pause();\n        process.stdout.once(\"drain\", () => childStdout.resume());\n      }\n      if (measuringEnabled) {\n        try {\n          serverLines.push(chunk);\n        } catch {\n          /* tee side-channel must never affect forwarding */\n        }\n      }\n    });\n  }\n\n  // ── Signal propagation: forward SIGINT/SIGTERM to the child ──────────────\n  const forwardSignal = (signal: NodeJS.Signals): void => {\n    try {\n      if (!child.killed) child.kill(signal);\n    } catch {\n      /* child may already be gone */\n    }\n  };\n  const onSigint = (): void => forwardSignal(\"SIGINT\");\n  const onSigterm = (): void => forwardSignal(\"SIGTERM\");\n  process.on(\"SIGINT\", onSigint);\n  process.on(\"SIGTERM\", onSigterm);\n\n  // ── Resolve with the child's exit code (or signal-derived code) ──────────\n  return await new Promise<number>((resolve) => {\n    const finish = (code: number): void => {\n      process.removeListener(\"SIGINT\", onSigint);\n      process.removeListener(\"SIGTERM\", onSigterm);\n      try {\n        store.close();\n      } catch {\n        /* best-effort flush */\n      }\n      resolve(code);\n    };\n\n    child.on(\"error\", () => {\n      // The server could not be spawned/launched. Surface a conventional\n      // \"command not executable\" style failure code.\n      finish(126);\n    });\n\n    child.on(\"close\", (code, signal) => {\n      if (typeof code === \"number\") {\n        finish(code);\n        return;\n      }\n      // Killed by a signal → conventional 128 + signal number where known.\n      if (signal) {\n        const num = signalToNumber(signal);\n        finish(num === undefined ? 1 : 128 + num);\n        return;\n      }\n      finish(1);\n    });\n  });\n}\n\n/** Map the common termination signals to their numbers for exit-code math. */\nfunction signalToNumber(signal: NodeJS.Signals): number | undefined {\n  const table: Partial<Record<NodeJS.Signals, number>> = {\n    SIGINT: 2,\n    SIGQUIT: 3,\n    SIGKILL: 9,\n    SIGTERM: 15,\n  };\n  return table[signal];\n}\n\nexport default runServeProxy;\n","/**\n * runtime/usage-event — the OPT-IN host-native turn-usage enricher (enricher 4a).\n *\n * Gemini CLI / Antigravity fire an `AfterModel` (Antigravity CLI: `PostInvocation`)\n * hook AFTER each model turn, whose stdin payload carries a `usageMetadata` block\n * with the host's OWN exact token accounting for that whole conversation turn:\n *   { promptTokenCount, candidatesTokenCount, cachedContentTokenCount,\n *     thoughtsTokenCount, totalTokenCount }\n * This is the single point in the whole matrix where a host reports REAL per-turn\n * usage to a command we control — so we record it as `confidenceSource:\"host-native\"`\n * (the top of CONFIDENCE_RANK), upgrading those rows from the serve-proxy estimate.\n *\n * DISTINCT, NEVER-SUMMED ORIGIN. Host-native turn usage is WHOLE-CONVERSATION, not\n * per-MCP. To avoid double-counting against (a) the per-MCP serve-proxy `call`\n * rows and (b) the usage-reader host-scan numbers, every record written here uses\n * the DISTINCT scope `\"model_turn\"`. The MCP leaderboard excludes that scope (just\n * as it special-cases `tool_defs`); the unified leaderboard surfaces it as its own\n * clearly-labeled section that is explicitly never added to the other two origins.\n *\n * PRIVACY + FAIL-OPEN. This enricher is OPT-IN at install time (see the adapters);\n * it stores AGGREGATE COUNTS ONLY (no raw content — the payload's prompt/response\n * text is never read). ANY parse / store / IO error degrades to exit 0 and records\n * NOTHING: a host-native usage hook must never break a model turn. This function\n * never throws.\n */\n\nimport { projectIdentity } from \"../core/paths.js\";\nimport { newRecordId, openStore } from \"../telemetry/store.js\";\nimport type { PlatformId } from \"../core/types.js\";\nimport type { ToolEventRecord } from \"../telemetry/types.js\";\n\n/** Flags + stdin the CLI hands to {@link runUsageEvent}. */\nexport interface RunUsageEventOptions {\n  /** Host platform id from the command (`usage-event <platformId> …`). */\n  platformId: string;\n  /** Connector id from `--connector <id>` (stamped on the record). */\n  connectorId: string;\n  /** Raw stdin payload (host-native JSON). Empty string is tolerated → no record. */\n  stdin: string;\n}\n\n/** Process-level result the CLI translates into an exit code. */\nexport interface RunUsageEventResult {\n  /** Always 0 — a host-native usage hook must never block a model turn. */\n  exitCode: number;\n  /** True when a `model_turn` record was appended (false on any fail-open path). */\n  recorded: boolean;\n}\n\n/** The never-records, never-throws result. */\nconst NOOP: RunUsageEventResult = { exitCode: 0, recorded: false };\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\n/** Coerce a value to a non-negative safe integer (NaN/negatives/floats → 0). */\nfunction toNonNegInt(v: unknown): number {\n  const n = typeof v === \"number\" ? v : typeof v === \"string\" ? Number(v) : NaN;\n  if (!Number.isFinite(n) || n < 0) return 0;\n  return Math.floor(n);\n}\n\n/** First non-empty string among the given keys of an object. */\nfunction firstStr(obj: Record<string, unknown>, keys: readonly string[]): string | undefined {\n  for (const k of keys) {\n    const v = obj[k];\n    if (typeof v === \"string\" && v.trim() !== \"\") return v;\n  }\n  return undefined;\n}\n\n/** Read a token field tolerant of both camelCase and snake_case spellings. */\nfunction tokenField(\n  meta: Record<string, unknown>,\n  keys: readonly string[],\n): number {\n  for (const k of keys) {\n    if (k in meta) return toNonNegInt(meta[k]);\n  }\n  return 0;\n}\n\n/** Locate the `usageMetadata` block under either spelling, top-level or nested. */\nfunction findUsageMetadata(root: Record<string, unknown>): Record<string, unknown> | undefined {\n  for (const k of [\"usageMetadata\", \"usage_metadata\"]) {\n    if (isObject(root[k])) return root[k] as Record<string, unknown>;\n  }\n  // Some hosts nest the model response (with its usage) under a `response` /\n  // `modelResponse` envelope — probe one level down, best-effort.\n  for (const k of [\"response\", \"modelResponse\", \"model_response\"]) {\n    const nested = root[k];\n    if (isObject(nested)) {\n      for (const mk of [\"usageMetadata\", \"usage_metadata\"]) {\n        if (isObject(nested[mk])) return nested[mk] as Record<string, unknown>;\n      }\n    }\n  }\n  return undefined;\n}\n\n/** A registered PlatformId, or \"unknown\" when the id is not one we know. */\nconst KNOWN_PLATFORMS: ReadonlySet<string> = new Set<PlatformId>([\n  \"claude-code\", \"codex\", \"cursor\", \"vscode-copilot\", \"jetbrains-copilot\",\n  \"copilot-cli\", \"gemini-cli\", \"opencode\", \"kilo\", \"kilo-cli\", \"warp\", \"hermes\",\n  \"openclaw\", \"zed\", \"antigravity\", \"antigravity-cli\", \"kiro\", \"qwen-code\",\n  \"kimi\", \"pi\", \"omp\", \"droid\", \"roo-code\", \"trae\", \"amp\", \"codebuff\", \"mux\",\n  \"crush\", \"goose\", \"synthetic\", \"unknown\",\n]);\n\nfunction asPlatformId(id: string): PlatformId {\n  return (KNOWN_PLATFORMS.has(id) ? id : \"unknown\") as PlatformId;\n}\n\n/**\n * Record one host-native model turn. Parses the host's `usageMetadata`, maps it to\n * a DISTINCT `model_turn` `ToolEventRecord` (confidence `host-native`, toolName\n * `\"*\"`), and appends it to the shared telemetry store. NEVER throws and never\n * blocks the turn: every failure path resolves to {@link NOOP} (exit 0, nothing\n * recorded).\n */\nexport async function runUsageEvent(\n  opts: RunUsageEventOptions,\n): Promise<RunUsageEventResult> {\n  try {\n    // Global telemetry kill switch is honored by the store's append (no-op when\n    // AGENT_CONNECTOR_TELEMETRY=0); we still parse cheaply and let append drop it.\n    const trimmed = opts.stdin.trim();\n    if (trimmed === \"\") return NOOP;\n\n    let raw: unknown;\n    try {\n      raw = JSON.parse(trimmed);\n    } catch {\n      return NOOP; // malformed payload → fail-open, record nothing\n    }\n    if (!isObject(raw)) return NOOP;\n\n    const meta = findUsageMetadata(raw);\n    if (meta === undefined) return NOOP;\n\n    const promptTokens = tokenField(meta, [\"promptTokenCount\", \"prompt_token_count\"]);\n    const candidates = tokenField(meta, [\"candidatesTokenCount\", \"candidates_token_count\"]);\n    const cached = tokenField(meta, [\"cachedContentTokenCount\", \"cached_content_token_count\"]);\n    const thoughts = tokenField(meta, [\"thoughtsTokenCount\", \"thoughts_token_count\"]);\n\n    // promptTokenCount is cache-INCLUSIVE (Gemini-family semantics, mirrored by\n    // the antigravity-shared usage reader): net fresh input = prompt - cached.\n    const inputTokens = Math.max(0, promptTokens - Math.min(cached, promptTokens));\n    // Output = generated candidates + reasoning (\"thoughts\") tokens.\n    const outputTokens = candidates + thoughts;\n\n    // A turn with no measurable tokens is not worth a row.\n    if (inputTokens === 0 && outputTokens === 0) return NOOP;\n\n    // Identity: prefer payload session/cwd; fall back to process.cwd() for the\n    // project key so a turn always lands in a stable project partition.\n    const sessionId =\n      firstStr(raw, [\"session_id\", \"sessionId\", \"conversationId\", \"conversation_id\"]) ?? \"\";\n    const cwd = firstStr(raw, [\"cwd\", \"workspace\", \"projectDir\", \"project_dir\"]) ?? process.cwd();\n    const id = projectIdentity(cwd);\n\n    const record: ToolEventRecord = {\n      id: newRecordId(0),\n      ts: Date.now(),\n      connectorId: opts.connectorId,\n      toolName: \"*\",\n      scope: \"model_turn\",\n      hostPlatform: asPlatformId(opts.platformId),\n      sessionId,\n      projectKey: id.key,\n      projectDir: id.dir,\n      inputTokens,\n      outputTokens,\n      confidenceSource: \"host-native\",\n      isError: false,\n    };\n\n    const store = openStore({});\n    try {\n      store.append(record);\n    } finally {\n      try {\n        store.close();\n      } catch {\n        /* best-effort flush */\n      }\n    }\n    return { exitCode: 0, recorded: true };\n  } catch {\n    // Fail-open: a host-native usage enricher must never surface an error.\n    return NOOP;\n  }\n}\n\nexport default runUsageEvent;\n","/**\n * runtime/statusline-entrypoint — the universal statusline (HUD) renderer.\n *\n * A statusline-supporting host points its status line config at the single stable\n * home binary (`<homeBin> statusline <platformId> --connector <id>`, built by\n * core/spawn.buildHomeBinStatuslineCommand). The CLI reads stdin and calls\n * {@link runStatusline} with the parsed flags + the raw stdin string. This module:\n *\n *   1. Loads the registered connector (live render handler) and the host adapter.\n *   2. Parses the host's raw status payload into a normalized StatuslineContext.\n *   3. Calls the connector's render(ctx) and coerces the result to a string.\n *   4. Formats the line into the host's native status reply (exit code + stdout).\n *\n * FAIL-SAFE is the contract (NOT fail-open with carve-outs like hooks): a status\n * line is decorative — it must NEVER wedge the host or spew an error/stack trace\n * into the status bar. So ANY error path — bad payload, missing connector,\n * throwing render, adapter without statusline support — returns exit 0 with NO\n * stdout (an empty status line), never a non-zero exit and never partial output.\n *\n * NOTE (follow-up): no telemetry is recorded for statusline renders in v1 (out of\n * scope). When added, it MUST stay inside the same fail-safe envelope.\n */\n\nimport type { PlatformId } from \"../core/types.js\";\nimport { log } from \"../core/logger.js\";\nimport {\n  loadRegisteredConnector,\n  readRegisteredMeta,\n} from \"../core/load-connector.js\";\nimport { loadAdapter } from \"../adapters/registry.js\";\nimport { buildTelemetryAccessor } from \"./telemetry-accessor.js\";\n\n/** Flags + stdin the CLI hands to {@link runStatusline}. */\nexport interface RunStatuslineOptions {\n  /** Host platform id from the command (`statusline <platformId> …`). */\n  platformId: string;\n  /** Connector id from `--connector <id>`. */\n  connectorId: string;\n  /** Raw stdin payload (host-native status JSON). Empty string is tolerated → `{}`. */\n  stdin: string;\n}\n\n/** Process-level result the CLI translates into exit code + stdout/stderr. */\nexport interface RunStatuslineResult {\n  exitCode: number;\n  stdout?: string;\n  stderr?: string;\n}\n\n/** The fail-safe result: exit 0, no output (an empty status line). */\nconst EMPTY: RunStatuslineResult = { exitCode: 0 };\n\n/**\n * Tolerantly parse the host's stdin payload. Empty / whitespace-only input is a\n * legitimate \"no payload\" signal and resolves to `{}`. Malformed JSON also\n * degrades to `{}` rather than throwing — fail-safe is the contract.\n */\nfunction parseStdin(stdin: string): unknown {\n  const trimmed = stdin.trim();\n  if (trimmed === \"\") return {};\n  try {\n    return JSON.parse(trimmed);\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Render one host status-line invocation. Always resolves (never rejects): every\n * failure path returns the empty {@link EMPTY} result so the CLI exits cleanly\n * with an empty status line. See the module header for the fail-safe contract.\n */\nexport async function runStatusline(\n  opts: RunStatuslineOptions,\n): Promise<RunStatuslineResult> {\n  const { platformId, connectorId, stdin } = opts;\n\n  try {\n    const connector = await loadRegisteredConnector(connectorId);\n    const adapter = await loadAdapter(platformId);\n\n    // Nothing to render: no statusline declared, or the host adapter has no\n    // statusline runtime support (parse/format pair). Empty line, exit 0.\n    if (\n      !connector.statusline ||\n      typeof connector.statusline.render !== \"function\" ||\n      !adapter ||\n      !adapter.parseStatusInput ||\n      !adapter.formatStatusOutput\n    ) {\n      return EMPTY;\n    }\n\n    const raw = parseStdin(stdin);\n    const ctx = adapter.parseStatusInput(raw);\n    // The command carries the authoritative connector id; stamp it so render()\n    // sees the connector it was dispatched for.\n    ctx.connectorId = connectorId;\n    // capabilities is REQUIRED on StatuslineContext. claude-code's parseStatusInput\n    // sets it, but a future/third-party adapter could omit it — backfill so the\n    // runtime guarantee matches the type (mirrors the simulate harness). Never\n    // let render() see undefined capabilities while the type claims it is present.\n    if (ctx.capabilities == null) ctx.capabilities = adapter.capabilities;\n    // Recover the install scope from the registered metadata (sync) and stamp it\n    // onto the ctx — scope is an install-time property the entrypoint has no\n    // other access to. Undefined when the meta carries none. Also expose the\n    // per-connector telemetry usage accessor (lazy, fail-safe to zeros).\n    ctx.scope = readRegisteredMeta(connectorId)?.scope;\n    ctx.telemetry = buildTelemetryAccessor(connectorId);\n\n    // Per-host render override: when rendering for host X, `hosts[X].render`\n    // wins over the top-level render; a host not listed (or a per-host entry\n    // that is somehow not a function) falls back to the top-level render.\n    // Selection NEVER throws — fail-safe is preserved.\n    const perHost = connector.statusline.hosts?.[platformId as PlatformId]?.render;\n    const render =\n      typeof perHost === \"function\" ? perHost : connector.statusline.render;\n\n    const rendered = await render(ctx);\n    // Coerce: a non-string return (number, accidental object) is stringified so\n    // a misbehaving render never crashes the format step. null/undefined → \"\".\n    const line = rendered == null ? \"\" : String(rendered);\n\n    const reply = adapter.formatStatusOutput(line);\n    return {\n      exitCode: reply.exitCode,\n      ...(reply.stdout !== undefined ? { stdout: reply.stdout } : {}),\n      ...(reply.stderr !== undefined ? { stderr: reply.stderr } : {}),\n    };\n  } catch (err) {\n    // FAIL-SAFE: a status line must never wedge the host or surface an error.\n    // Log for diagnostics (stderr of the home binary — not the status bar) and\n    // return the empty line.\n    const message = err instanceof Error ? err.message : String(err);\n    log.error(`statusline ${platformId} (${connectorId}) failed:`, message);\n    return EMPTY;\n  }\n}\n\nexport default runStatusline;\n","/**\n * runtime/action-entrypoint — the universal user-invokable action dispatcher.\n *\n * A future host affordance (slash command / keybinding) points at the single\n * stable home binary (`<homeBin> action <platformId> <actionId> --connector\n * <id>`, built by core/spawn.buildHomeBinActionCommand). The CLI parses the\n * flags and calls {@link runAction}. This module:\n *\n *   1. Loads the registered connector (live run handler) and the host adapter.\n *   2. Builds the shared {@link HostCtx} (host + the adapter's capabilities; NO\n *      stdin — an action takes no host payload, unlike a hook or status line).\n *   3. Finds the action by id, resolves the per-host run override, runs it, and\n *      prints the optional result.message.\n *\n * USER-TRIGGERED ERROR SEMANTICS (the key difference from hooks/statusline):\n * actions are invoked DELIBERATELY by a user, so errors are SURFACED, never\n * failed silently. An unknown action id or a throwing run → exit 1 + a stderr\n * message. (Hooks fail-open to exit 0; the statusline fail-safes to an empty\n * line — both are passive surfaces a host fires automatically. An action is not:\n * swallowing its failure would leave the user staring at nothing, unable to\n * tell the action ran.)\n *\n * NOTE (follow-up): no telemetry is recorded for action runs in v1 (out of\n * scope), and no adapter EMITS the affordance yet — v1 ships the dispatch\n * backbone only.\n */\n\nimport type {\n  HostCtx,\n  PlatformCapabilities,\n  PlatformId,\n} from \"../core/types.js\";\nimport {\n  loadRegisteredConnector,\n  readRegisteredMeta,\n} from \"../core/load-connector.js\";\nimport { loadAdapter, REGISTERED_PLATFORM_IDS } from \"../adapters/registry.js\";\nimport { buildTelemetryAccessor } from \"./telemetry-accessor.js\";\n\n/** Flags the CLI hands to {@link runAction} (no stdin — actions take no payload). */\nexport interface RunActionOptions {\n  /** Host platform id from the command (`action <platformId> <actionId> …`). */\n  platformId: string;\n  /** Connector id from `--connector <id>`. */\n  connectorId: string;\n  /** The action id positional (`action <platformId> <actionId> …`). */\n  actionId: string;\n}\n\n/** Process-level result the CLI translates into exit code + stdout/stderr. */\nexport interface RunActionResult {\n  exitCode: number;\n  stdout?: string;\n  stderr?: string;\n}\n\n/**\n * Minimal all-false capabilities for the fallback ctx when the host adapter is\n * unknown/unregistered. The action still runs (it takes no host payload), but\n * branching on `ctx.capabilities` reads every flag as off — no affordance is\n * advertised for a host we cannot describe.\n */\nconst EMPTY_CAPABILITIES: PlatformCapabilities = {\n  preToolUse: false,\n  postToolUse: false,\n  preCompact: false,\n  sessionStart: false,\n  sessionEnd: false,\n  userPromptSubmit: false,\n  stop: false,\n  notification: false,\n  canModifyArgs: false,\n  canModifyOutput: false,\n  canInjectSessionContext: false,\n  transports: [],\n};\n\n/**\n * Dispatch one user-invokable action. Always resolves (never rejects): every\n * path returns a concrete {@link RunActionResult} so the CLI can exit cleanly,\n * but UNLIKE the hook/statusline runtimes an error resolves to exit 1 + a stderr\n * message (actions are user-triggered — surface the failure). See the module\n * header for the user-triggered error contract.\n */\nexport async function runAction(\n  opts: RunActionOptions,\n): Promise<RunActionResult> {\n  const { platformId, connectorId, actionId } = opts;\n\n  let connector;\n  try {\n    connector = await loadRegisteredConnector(connectorId);\n  } catch (err) {\n    // A user asked to run an action on a connector we cannot load — surface it\n    // (do NOT fail-open: the user would otherwise see nothing and assume it ran).\n    const message = err instanceof Error ? err.message : String(err);\n    return { exitCode: 1, stderr: message };\n  }\n\n  const action = connector.actions.find((a) => a.id === actionId);\n  if (!action) {\n    return {\n      exitCode: 1,\n      stderr: `no action \"${actionId}\" on connector ${connectorId}`,\n    };\n  }\n\n  // Build the shared HostCtx. capabilities come from the adapter; an unknown\n  // adapter still runs with the minimal ctx (an action takes no host payload).\n  const adapter = await loadAdapter(platformId).catch(() => undefined);\n  const host: PlatformId = REGISTERED_PLATFORM_IDS.has(platformId as PlatformId)\n    ? (platformId as PlatformId)\n    : \"unknown\";\n  const ctx: HostCtx = {\n    host,\n    capabilities: adapter?.capabilities ?? EMPTY_CAPABILITIES,\n    // Recover the install scope from the registered metadata (sync) — scope is\n    // an install-time property the entrypoint otherwise has no access to —\n    // and expose the per-connector telemetry usage accessor (lazy, fail-safe).\n    scope: readRegisteredMeta(connectorId)?.scope,\n    telemetry: buildTelemetryAccessor(connectorId),\n  };\n\n  // Per-host run override: when running for host X, `hosts[X].run` wins over the\n  // top-level run; a host not listed (or a per-host entry that is somehow not a\n  // function) falls back to the top-level run.\n  const perHost = action.hosts?.[platformId as PlatformId]?.run;\n  const run = typeof perHost === \"function\" ? perHost : action.run;\n\n  try {\n    const result = await run(ctx);\n    const message = result?.message;\n    if (typeof message === \"string\" && message !== \"\") {\n      return { exitCode: 0, stdout: message };\n    }\n    // void / no message → success with no output.\n    return { exitCode: 0 };\n  } catch (err) {\n    // USER-TRIGGERED: a throwing action surfaces its failure (exit 1 + stderr),\n    // never a silent fail-open. This is the documented difference from\n    // hooks/statusline.\n    const message = err instanceof Error ? err.message : String(err);\n    return {\n      exitCode: 1,\n      stderr: `action \"${actionId}\" failed: ${message}`,\n    };\n  }\n}\n\nexport default runAction;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,SAAS,kBAAkB;;;ACQ3B,SAAS,YAAY,cAAc,qBAAqB;AACxD,SAAS,YAAY;AAkBd,SAAS,uBAAgC;AAC9C,QAAM,YAAY,QAAQ,IAAI,6BAA6B,IACxD,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,MAAM,EAAE;AACzB,QAAM,OAAO,QAAQ,IAAI,qBAAqB,IAAI,KAAK;AACvD,SAAO,SAAS,SAAS,WAAW,KAAK,QAAQ;AACnD;AAgBO,SAAS,kBAA0B;AACxC,SAAO,KAAK,SAAS,GAAG,kBAAkB;AAC5C;AAOA,IAAM,YAAY;AAClB,IAAM,YAAY;AAElB,SAAS,WAAW,OAA8B;AAChD,MAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,EAAG,QAAO;AAClD,MAAI,QAAQ,UAAW,QAAO;AAC9B,MAAI,QAAQ,UAAW,QAAO;AAC9B,SAAO;AACT;AAMO,SAAS,cAAkC;AAChD,QAAM,OAAO,gBAAgB;AAC7B,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AACpD,QAAI,WAAW,QAAQ,OAAO,WAAW,SAAU,QAAO,CAAC;AAC3D,UAAM,MAA0B,CAAC;AACjC,eAAW,CAAC,QAAQ,KAAK,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC/E,UAAI,UAAU,QAAQ,OAAO,UAAU,SAAU;AACjD,YAAM,MAAM;AACZ,YAAM,SAAS,IAAI,QAAQ;AAC3B,YAAM,UAAU,IAAI,SAAS;AAC7B,UACE,OAAO,WAAW,YAClB,OAAO,SAAS,MAAM,KACtB,SAAS,KACT,OAAO,YAAY,YACnB,OAAO,SAAS,OAAO,KACvB,WAAW,GACX;AACA,QAAC,IAA0C,MAAM,IAAI;AAAA,UACnD;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AASO,SAAS,aAAa,QAAqB,OAAqB;AACrE,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,YAAY,KAAM;AACtB,MAAI;AACF,UAAM,UAAU,YAAY;AAC5B,UAAM,QAAQ,QAAQ,MAAM;AAC5B,QAAI;AACJ,QAAI,UAAU,UAAa,MAAM,WAAW,GAAG;AAC7C,aAAO,EAAE,QAAQ,SAAS,SAAS,EAAE;AAAA,IACvC,OAAO;AACL,YAAM,UAAU,MAAM,UAAU;AAEhC,YAAM,SAAS,MAAM,UAAU,UAAU,MAAM,UAAU;AACzD,aAAO,EAAE,QAAQ,QAAQ;AAAA,IAC3B;AACA,UAAM,UAA8B,EAAE,GAAG,SAAS,CAAC,MAAM,GAAG,KAAK;AACjE,UAAM,OAAO,gBAAgB;AAC7B,cAAU,SAAS,CAAC;AACpB,kBAAc,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AAAA,EACrE,QAAQ;AAAA,EAER;AACF;AAKA,IAAM,0BAA0B;AAGhC,IAAM,mBAAmB;AAezB,eAAsB,qBACpB,MACA,QAAgB,yBACQ;AACxB,QAAM,UAAU,QAAQ,IAAI,qBAAqB,IAAI,KAAK;AAC1D,MAAI,WAAW,GAAI,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,kBAAkB;AAAA,MACxC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,aAAa;AAAA,QACb,qBAAqB;AAAA,QACrB,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA,QACA,UAAU,CAAC,EAAE,MAAM,QAAQ,SAAS,KAAK,CAAC;AAAA,MAC5C,CAAC;AAAA,IACH,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,UAAM,IAAI,KAAK;AACf,QAAI,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,KAAK,KAAK,GAAG;AACzD,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUA,IAAM,eAAe;AACrB,IAAM,yBAAyB;AAE/B,IAAI,cAAc;AAClB,IAAI,gBAAgB;AACpB,IAAI,oBAAoB;AAOjB,SAAS,aAAa,MAAc,KAAK,IAAI,GAAY;AAE9D,MAAI,MAAM,iBAAiB,KAAQ;AACjC,oBAAgB;AAChB,wBAAoB;AAAA,EACtB;AACA,iBAAe;AACf,MAAI,cAAc,iBAAiB,EAAG,QAAO;AAC7C,MAAI,qBAAqB,uBAAwB,QAAO;AACxD,uBAAqB;AACrB,SAAO;AACT;AAwBO,SAAS,iBACd,cACA,QACA,UAA8B,YAAY,GACzB;AACjB,MAAI,WAAW,aAAa;AAC1B,UAAM,IAAI,QAAQ,MAAM;AACxB,QAAI,MAAM,UAAa,EAAE,UAAU,KAAK,OAAO,SAAS,EAAE,MAAM,KAAK,EAAE,SAAS,GAAG;AACjF,aAAO;AAAA,QACL,QAAQ,KAAK,IAAI,GAAG,KAAK,MAAM,eAAe,EAAE,MAAM,CAAC;AAAA,QACvD,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,QAAQ,cAAc,QAAQ,mBAAmB;AAC5D;AAGO,SAAS,eAAe,SAA8B;AAC3D,SAAO;AACT;;;ACpLA,SAAS,cAAc,OAAwB;AAC7C,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUA,eAAsB,cACpB,MACiB;AACjB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,iBAAiB;AAAA,IACjB;AAAA,IACA;AAAA,EACF,IAAI;AAGJ,QAAM,mBAAmB,QAAQ,IAAI,8BAA8B;AAInE,QAAM,qBAAqB,qBAAqB;AAKhD,QAAM,QAAQ,WAAW,SAAS,MAAM;AAAA,IACtC,OAAO,CAAC,QAAQ,QAAQ,SAAS;AAAA,IACjC,KAAK,QAAQ;AAAA,EACf,CAAC;AAID,MAAI,SAAsB,iBAAiB,IAAI,eAAe;AAE9D,QAAM,UAAU,oBAAI,IAAyB;AAE7C,MAAI,MAAM;AAEV,MAAI,mBAAmB;AAQvB,WAAS,aAGP;AACA,WAAO;AAAA,MACL,IAAI,YAAY,KAAK;AAAA,MACrB,IAAI,KAAK,IAAI;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,iBAAiB,SAAY,EAAE,aAAa,IAAI,CAAC;AAAA,MACrD,GAAI,iBAAiB,SAAY,EAAE,aAAa,IAAI,CAAC;AAAA,IACvD;AAAA,EACF;AAOA,WAAS,gBAAgB,KAA2B;AAClD,UAAM,SAAS,IAAI;AACnB,QAAI,WAAW,cAAc;AAC3B,YAAM,SAAS,SAAS,IAAI,MAAM,IAAI,IAAI,SAAS;AACnD,YAAM,aACJ,UAAU,SAAS,OAAO,YAAY,CAAC,IAClC,OAAO,YAAY,IACpB;AACN,YAAM,aACJ,cAAc,OAAO,WAAW,MAAM,MAAM,WACvC,WAAW,MAAM,IAClB;AACN,eAAS,iBAAiB,YAAY,eAAe;AACrD;AAAA,IACF;AAEA,QAAI,WAAW,cAAc;AAC3B,YAAM,MAAM,MAAM,IAAI,EAAE;AACxB,UAAI,QAAQ,KAAM;AAClB,YAAM,SAAS,SAAS,IAAI,MAAM,IAAI,IAAI,SAAS;AACnD,YAAM,WACJ,UAAU,OAAO,OAAO,MAAM,MAAM,WAC/B,OAAO,MAAM,IACd;AACN,YAAM,WAAW,SAAS,OAAO,WAAW,IAAI;AAChD,cAAQ,IAAI,KAAK,EAAE,UAAU,MAAM,SAAS,CAAC;AAAA,IAC/C;AAAA,EACF;AAOA,WAAS,gBAAgB,KAA2B;AAClD,UAAM,MAAM,MAAM,IAAI,EAAE;AACxB,QAAI,QAAQ,KAAM;AAElB,UAAM,cAAc,QAAQ,IAAI,GAAG;AACnC,QAAI,gBAAgB,QAAW;AAC7B,cAAQ,OAAO,GAAG;AAClB,qBAAe,aAAa,GAAG;AAC/B;AAAA,IACF;AAIA,QAAI,yBAAyB,CAAC,kBAAkB;AAC9C,YAAM,SAAS,SAAS,IAAI,MAAM,IAAI,IAAI,SAAS;AACnD,YAAM,QAAQ,SAAS,OAAO,OAAO,IAAI;AACzC,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,uBAAe,KAAK;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAGA,WAAS,eAAe,MAAmB,UAAgC;AACzE,UAAM,WAAW,SAAS,UAAU;AACpC,UAAM,SAAS,SAAS;AAGxB,UAAM,mBAAmB,WAAW,CAAC,IAAI;AACzC,UAAM,cAAc;AAAA,MAClB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAMA,QAAI,cAAc,YAAY;AAC9B,QAAI,eAAe,YAAY;AAC/B,QAAI,mBAAqC,YAAY;AACrD,QAAI,sBAAsB,WAAW,aAAa;AAChD,UAAI;AACF,SAAC,EAAE,aAAa,cAAc,iBAAiB,IAAI;AAAA,UACjD,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AACA,+BAAuB,KAAK,MAAM,YAAY,WAAW;AAAA,MAC3D,QAAQ;AAAA,MAGR;AAAA,IACF;AAIA,UAAM,gBACJ,SAAS,MAAM,KAAK,OAAO,SAAS,MAAM;AAC5C,UAAM,OAAO;AAAA,MACX,GAAG,WAAW;AAAA,MACd,UAAU,KAAK;AAAA,MACf,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,YAAY;AAAA,IACvB,CAAC;AAAA,EACH;AAQA,WAAS,gBACP,OACA,QACA,WACmF;AACnF,QAAI,cAAc,oBAAoB;AACpC,aAAO,EAAE,aAAa,OAAO,cAAc,QAAQ,kBAAkB,UAAU;AAAA,IACjF;AACA,UAAM,MAAM,iBAAiB,OAAO,MAAM;AAC1C,UAAM,OAAO,iBAAiB,QAAQ,MAAM;AAC5C,UAAM,aACJ,IAAI,WAAW,0BAA0B,KAAK,WAAW;AAC3D,WAAO;AAAA,MACL,aAAa,IAAI;AAAA,MACjB,cAAc,KAAK;AAAA,MACnB,kBAAkB,aAAa,yBAAyB;AAAA,IAC1D;AAAA,EACF;AAQA,WAAS,uBAAuBA,OAAe,mBAAiC;AAC9E,QAAI,qBAAqB,EAAG;AAC5B,QAAI,CAAC,aAAa,EAAG;AACrB,UAAM,OAAO,cAAcA,KAAI;AAC/B,QAAI,SAAS,GAAI;AAIjB,SAAK,qBAAqB,MAAM,eAAe,MAAM,CAAC,EACnD,KAAK,CAAC,UAAU;AACf,UAAI,UAAU,QAAQ,QAAQ,GAAG;AAC/B,qBAAa,QAAQ,QAAQ,iBAAiB;AAAA,MAChD;AAAA,IACF,CAAC,EACA,MAAM,MAAM;AAAA,IAEb,CAAC;AAAA,EACL;AAGA,WAAS,eAAe,OAAiC;AACvD,uBAAmB;AACnB,UAAM,QAAQ,gBAAgB,OAAO,QAAQ,SAAS;AACtD,UAAM,OAAO;AAAA,MACX,GAAG,WAAW;AAAA,MACd,UAAU;AAAA,MACV,OAAO;AAAA,MACP,aAAa,MAAM;AAAA,MACnB,cAAc;AAAA,MACd,kBAAkB,MAAM;AAAA,MACxB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAGA,WAAS,WAAW,MAAc,WAAsC;AACtE,QAAI,CAAC,iBAAkB;AACvB,QAAI;AACJ,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,UAAI,CAAC,SAAS,MAAM,EAAG;AACvB,YAAM;AAAA,IACR,QAAQ;AACN;AAAA,IACF;AACA,QAAI;AACF,UAAI,cAAc,SAAU,iBAAgB,GAAG;AAAA,UAC1C,iBAAgB,GAAG;AAAA,IAC1B,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,QAAM,cAAc,IAAI,WAAW,CAAC,SAAS,WAAW,MAAM,QAAQ,CAAC;AACvE,QAAM,cAAc,IAAI,WAAW,CAAC,SAAS,WAAW,MAAM,QAAQ,CAAC;AAMvE,UAAQ,MAAM,GAAG,QAAQ,CAAC,UAAkB;AAC1C,QAAI,MAAM,SAAS,MAAM,MAAM,UAAU;AACvC,YAAM,KAAK,MAAM,MAAM,MAAM,KAAK;AAClC,UAAI,CAAC,IAAI;AACP,gBAAQ,MAAM,MAAM;AACpB,cAAM,MAAM,KAAK,SAAS,MAAM,QAAQ,MAAM,OAAO,CAAC;AAAA,MACxD;AAAA,IACF;AACA,QAAI,kBAAkB;AACpB,UAAI;AACF,oBAAY,KAAK,KAAK;AAAA,MACxB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,CAAC;AACD,UAAQ,MAAM,GAAG,OAAO,MAAM;AAC5B,QAAI,MAAM,SAAS,CAAC,MAAM,MAAM,UAAW,OAAM,MAAM,IAAI;AAAA,EAC7D,CAAC;AAGD,MAAI,MAAM,QAAQ;AAChB,UAAM,cAAc,MAAM;AAC1B,gBAAY,GAAG,QAAQ,CAAC,UAAkB;AACxC,YAAM,KAAK,QAAQ,OAAO,MAAM,KAAK;AACrC,UAAI,CAAC,IAAI;AACP,oBAAY,MAAM;AAClB,gBAAQ,OAAO,KAAK,SAAS,MAAM,YAAY,OAAO,CAAC;AAAA,MACzD;AACA,UAAI,kBAAkB;AACpB,YAAI;AACF,sBAAY,KAAK,KAAK;AAAA,QACxB,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAGA,QAAM,gBAAgB,CAAC,WAAiC;AACtD,QAAI;AACF,UAAI,CAAC,MAAM,OAAQ,OAAM,KAAK,MAAM;AAAA,IACtC,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,WAAW,MAAY,cAAc,QAAQ;AACnD,QAAM,YAAY,MAAY,cAAc,SAAS;AACrD,UAAQ,GAAG,UAAU,QAAQ;AAC7B,UAAQ,GAAG,WAAW,SAAS;AAG/B,SAAO,MAAM,IAAI,QAAgB,CAAC,YAAY;AAC5C,UAAM,SAAS,CAAC,SAAuB;AACrC,cAAQ,eAAe,UAAU,QAAQ;AACzC,cAAQ,eAAe,WAAW,SAAS;AAC3C,UAAI;AACF,cAAM,MAAM;AAAA,MACd,QAAQ;AAAA,MAER;AACA,cAAQ,IAAI;AAAA,IACd;AAEA,UAAM,GAAG,SAAS,MAAM;AAGtB,aAAO,GAAG;AAAA,IACZ,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,MAAM,WAAW;AAClC,UAAI,OAAO,SAAS,UAAU;AAC5B,eAAO,IAAI;AACX;AAAA,MACF;AAEA,UAAI,QAAQ;AACV,cAAM,MAAM,eAAe,MAAM;AACjC,eAAO,QAAQ,SAAY,IAAI,MAAM,GAAG;AACxC;AAAA,MACF;AACA,aAAO,CAAC;AAAA,IACV,CAAC;AAAA,EACH,CAAC;AACH;AAGA,SAAS,eAAe,QAA4C;AAClE,QAAM,QAAiD;AAAA,IACrD,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AACA,SAAO,MAAM,MAAM;AACrB;;;AF7ZA,SAAS,iBAAiB,MAAyB,QAAQ,KAAa;AACtE,SACE,IAAI,2BACJ,IAAI,qBACJ,IAAI,mBACJ,IAAI,mBACJ,IAAI,kBACJ,QAAQ,WAAW,CAAC;AAExB;AAEA,eAAsB,SAAS,MAAwC;AACrE,QAAM,EAAE,aAAa,eAAe,YAAY,cAAc,qBAAqB,IACjF;AAEF,QAAM,YAAY,MAAM,wBAAwB,WAAW;AAE3D,QAAM,KAAK,gBAAgB,QAAQ,IAAI,CAAC;AAIxC,QAAM,eACJ,yBAAyB,UACzB,wBAAwB,IAAI,oBAAoB,IAC5C,uBACA,kBAAkB,EAAE;AAC1B,QAAM,YAAY,iBAAiB;AAInC,QAAM,eAAe,mBAAmB,eAAe,UAAU;AAEjE,QAAM,QAAQ,UAAU,CAAC,CAAC;AAC1B,QAAM,MAAM,aAAa;AAEzB,SAAO,cAAc;AAAA,IACnB;AAAA,IACA,SAAS;AAAA,IACT,MAAM;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,iBAAiB,UAAU,UAAU;AAAA,IACrC;AAAA,IACA;AAAA,IACA,YAAY,GAAG;AAAA,IACf,YAAY,GAAG;AAAA,IACf,iBAAiB,UAAU,UAAU;AAAA,IACrC;AAAA,IACA;AAAA,EACF,CAAC;AACH;;;AGpEA,IAAM,OAA4B,EAAE,UAAU,GAAG,UAAU,MAAM;AAEjE,SAASC,UAAS,GAA0C;AAC1D,SAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC;AAChE;AAGA,SAAS,YAAY,GAAoB;AACvC,QAAM,IAAI,OAAO,MAAM,WAAW,IAAI,OAAO,MAAM,WAAW,OAAO,CAAC,IAAI;AAC1E,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAG,QAAO;AACzC,SAAO,KAAK,MAAM,CAAC;AACrB;AAGA,SAAS,SAAS,KAA8B,MAA6C;AAC3F,aAAW,KAAK,MAAM;AACpB,UAAM,IAAI,IAAI,CAAC;AACf,QAAI,OAAO,MAAM,YAAY,EAAE,KAAK,MAAM,GAAI,QAAO;AAAA,EACvD;AACA,SAAO;AACT;AAGA,SAAS,WACP,MACA,MACQ;AACR,aAAW,KAAK,MAAM;AACpB,QAAI,KAAK,KAAM,QAAO,YAAY,KAAK,CAAC,CAAC;AAAA,EAC3C;AACA,SAAO;AACT;AAGA,SAAS,kBAAkB,MAAoE;AAC7F,aAAW,KAAK,CAAC,iBAAiB,gBAAgB,GAAG;AACnD,QAAIA,UAAS,KAAK,CAAC,CAAC,EAAG,QAAO,KAAK,CAAC;AAAA,EACtC;AAGA,aAAW,KAAK,CAAC,YAAY,iBAAiB,gBAAgB,GAAG;AAC/D,UAAM,SAAS,KAAK,CAAC;AACrB,QAAIA,UAAS,MAAM,GAAG;AACpB,iBAAW,MAAM,CAAC,iBAAiB,gBAAgB,GAAG;AACpD,YAAIA,UAAS,OAAO,EAAE,CAAC,EAAG,QAAO,OAAO,EAAE;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAGA,IAAM,kBAAuC,oBAAI,IAAgB;AAAA,EAC/D;AAAA,EAAe;AAAA,EAAS;AAAA,EAAU;AAAA,EAAkB;AAAA,EACpD;AAAA,EAAe;AAAA,EAAc;AAAA,EAAY;AAAA,EAAQ;AAAA,EAAY;AAAA,EAAQ;AAAA,EACrE;AAAA,EAAY;AAAA,EAAO;AAAA,EAAe;AAAA,EAAmB;AAAA,EAAQ;AAAA,EAC7D;AAAA,EAAQ;AAAA,EAAM;AAAA,EAAO;AAAA,EAAS;AAAA,EAAY;AAAA,EAAQ;AAAA,EAAO;AAAA,EAAY;AAAA,EACrE;AAAA,EAAS;AAAA,EAAS;AAAA,EAAa;AACjC,CAAC;AAED,SAAS,aAAa,IAAwB;AAC5C,SAAQ,gBAAgB,IAAI,EAAE,IAAI,KAAK;AACzC;AASA,eAAsB,cACpB,MAC8B;AAC9B,MAAI;AAGF,UAAM,UAAU,KAAK,MAAM,KAAK;AAChC,QAAI,YAAY,GAAI,QAAO;AAE3B,QAAI;AACJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN,aAAO;AAAA,IACT;AACA,QAAI,CAACA,UAAS,GAAG,EAAG,QAAO;AAE3B,UAAM,OAAO,kBAAkB,GAAG;AAClC,QAAI,SAAS,OAAW,QAAO;AAE/B,UAAM,eAAe,WAAW,MAAM,CAAC,oBAAoB,oBAAoB,CAAC;AAChF,UAAM,aAAa,WAAW,MAAM,CAAC,wBAAwB,wBAAwB,CAAC;AACtF,UAAM,SAAS,WAAW,MAAM,CAAC,2BAA2B,4BAA4B,CAAC;AACzF,UAAM,WAAW,WAAW,MAAM,CAAC,sBAAsB,sBAAsB,CAAC;AAIhF,UAAM,cAAc,KAAK,IAAI,GAAG,eAAe,KAAK,IAAI,QAAQ,YAAY,CAAC;AAE7E,UAAM,eAAe,aAAa;AAGlC,QAAI,gBAAgB,KAAK,iBAAiB,EAAG,QAAO;AAIpD,UAAM,YACJ,SAAS,KAAK,CAAC,cAAc,aAAa,kBAAkB,iBAAiB,CAAC,KAAK;AACrF,UAAM,MAAM,SAAS,KAAK,CAAC,OAAO,aAAa,cAAc,aAAa,CAAC,KAAK,QAAQ,IAAI;AAC5F,UAAM,KAAK,gBAAgB,GAAG;AAE9B,UAAM,SAA0B;AAAA,MAC9B,IAAI,YAAY,CAAC;AAAA,MACjB,IAAI,KAAK,IAAI;AAAA,MACb,aAAa,KAAK;AAAA,MAClB,UAAU;AAAA,MACV,OAAO;AAAA,MACP,cAAc,aAAa,KAAK,UAAU;AAAA,MAC1C;AAAA,MACA,YAAY,GAAG;AAAA,MACf,YAAY,GAAG;AAAA,MACf;AAAA,MACA;AAAA,MACA,kBAAkB;AAAA,MAClB,SAAS;AAAA,IACX;AAEA,UAAM,QAAQ,UAAU,CAAC,CAAC;AAC1B,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,UAAE;AACA,UAAI;AACF,cAAM,MAAM;AAAA,MACd,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO,EAAE,UAAU,GAAG,UAAU,KAAK;AAAA,EACvC,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;;;AC/IA,IAAM,QAA6B,EAAE,UAAU,EAAE;AAOjD,SAAS,WAAW,OAAwB;AAC1C,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,YAAY,GAAI,QAAO,CAAC;AAC5B,MAAI;AACF,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAOA,eAAsB,cACpB,MAC8B;AAC9B,QAAM,EAAE,YAAY,aAAa,MAAM,IAAI;AAE3C,MAAI;AACF,UAAM,YAAY,MAAM,wBAAwB,WAAW;AAC3D,UAAM,UAAU,MAAM,YAAY,UAAU;AAI5C,QACE,CAAC,UAAU,cACX,OAAO,UAAU,WAAW,WAAW,cACvC,CAAC,WACD,CAAC,QAAQ,oBACT,CAAC,QAAQ,oBACT;AACA,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,WAAW,KAAK;AAC5B,UAAM,MAAM,QAAQ,iBAAiB,GAAG;AAGxC,QAAI,cAAc;AAKlB,QAAI,IAAI,gBAAgB,KAAM,KAAI,eAAe,QAAQ;AAKzD,QAAI,QAAQ,mBAAmB,WAAW,GAAG;AAC7C,QAAI,YAAY,uBAAuB,WAAW;AAMlD,UAAM,UAAU,UAAU,WAAW,QAAQ,UAAwB,GAAG;AACxE,UAAM,SACJ,OAAO,YAAY,aAAa,UAAU,UAAU,WAAW;AAEjE,UAAM,WAAW,MAAM,OAAO,GAAG;AAGjC,UAAM,OAAO,YAAY,OAAO,KAAK,OAAO,QAAQ;AAEpD,UAAM,QAAQ,QAAQ,mBAAmB,IAAI;AAC7C,WAAO;AAAA,MACL,UAAU,MAAM;AAAA,MAChB,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC7D,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,IAC/D;AAAA,EACF,SAAS,KAAK;AAIZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,QAAI,MAAM,cAAc,UAAU,KAAK,WAAW,aAAa,OAAO;AACtE,WAAO;AAAA,EACT;AACF;;;AC3EA,IAAM,qBAA2C;AAAA,EAC/C,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,kBAAkB;AAAA,EAClB,MAAM;AAAA,EACN,cAAc;AAAA,EACd,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,yBAAyB;AAAA,EACzB,YAAY,CAAC;AACf;AASA,eAAsB,UACpB,MAC0B;AAC1B,QAAM,EAAE,YAAY,aAAa,SAAS,IAAI;AAE9C,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,wBAAwB,WAAW;AAAA,EACvD,SAAS,KAAK;AAGZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO,EAAE,UAAU,GAAG,QAAQ,QAAQ;AAAA,EACxC;AAEA,QAAM,SAAS,UAAU,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ;AAC9D,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ,cAAc,QAAQ,kBAAkB,WAAW;AAAA,IAC7D;AAAA,EACF;AAIA,QAAM,UAAU,MAAM,YAAY,UAAU,EAAE,MAAM,MAAM,MAAS;AACnE,QAAM,OAAmB,wBAAwB,IAAI,UAAwB,IACxE,aACD;AACJ,QAAM,MAAe;AAAA,IACnB;AAAA,IACA,cAAc,SAAS,gBAAgB;AAAA;AAAA;AAAA;AAAA,IAIvC,OAAO,mBAAmB,WAAW,GAAG;AAAA,IACxC,WAAW,uBAAuB,WAAW;AAAA,EAC/C;AAKA,QAAM,UAAU,OAAO,QAAQ,UAAwB,GAAG;AAC1D,QAAM,MAAM,OAAO,YAAY,aAAa,UAAU,OAAO;AAE7D,MAAI;AACF,UAAM,SAAS,MAAM,IAAI,GAAG;AAC5B,UAAM,UAAU,QAAQ;AACxB,QAAI,OAAO,YAAY,YAAY,YAAY,IAAI;AACjD,aAAO,EAAE,UAAU,GAAG,QAAQ,QAAQ;AAAA,IACxC;AAEA,WAAO,EAAE,UAAU,EAAE;AAAA,EACvB,SAAS,KAAK;AAIZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ,WAAW,QAAQ,aAAa,OAAO;AAAA,IACjD;AAAA,EACF;AACF;","names":["args","isObject"]}
+{"version":3,"sources":["../src/runtime/serve.ts","../src/telemetry/calibration.ts","../src/telemetry/proxy.ts","../src/runtime/usage-event.ts","../src/runtime/statusline-entrypoint.ts","../src/runtime/action-entrypoint.ts"],"sourcesContent":["/**\n * runtime/serve — the `agent-connector serve` telemetry-wrapping entrypoint.\n *\n * When a stdio MCP server opts into transparent telemetry, its host config is\n * rewritten (by the adapter, via core/spawn.buildServeWrapperCommand) to launch\n *   <homeBin> serve --connector <id> -- <realCommand> <realArgs...>\n * instead of the server directly. The CLI parses those flags and calls\n * {@link runServe}, which stands up the per-session telemetry context (store,\n * tokenizer, project identity, host detection) and hands off to the proxy.\n *\n * The proxy (telemetry/proxy.runServeProxy) forwards bytes VERBATIM in both\n * directions and measures aggregate per-tool token counts out of band, so this\n * wrapper is transparent to both the host and the real server. It resolves with\n * the child server's exit code, which the CLI uses as its own.\n */\n\nimport { randomUUID } from \"node:crypto\";\n\nimport { detectRuntimeHost } from \"../adapters/detect.js\";\nimport { REGISTERED_PLATFORM_IDS } from \"../adapters/registry.js\";\nimport { loadRegisteredConnector } from \"../core/load-connector.js\";\nimport { projectIdentity } from \"../core/paths.js\";\nimport { detectLaunchMethod } from \"../core/spawn.js\";\nimport type { PlatformId } from \"../core/types.js\";\nimport { runServeProxy } from \"../telemetry/proxy.js\";\nimport { openStore } from \"../telemetry/store.js\";\nimport { getTokenizer } from \"../telemetry/tokenizer.js\";\nimport type { TelemetryInstallScope } from \"../telemetry/types.js\";\n\n/** Flags the CLI hands to {@link runServe}. */\nexport interface RunServeOptions {\n  /** Connector id from `--connector <id>`; selects telemetry config + stamps records. */\n  connectorId: string;\n  /** The real MCP server executable to spawn (everything after `--`). */\n  serverCommand: string;\n  /** Arguments passed to that executable. */\n  serverArgs: string[];\n  /**\n   * Install scope from `--scope <user|project>`. OPTIONAL: absent for configs\n   * written before scope plumbing existed — left unstamped so older rows read\n   * as \"unknown\". Stamped verbatim onto every telemetry record when present.\n   */\n  installScope?: TelemetryInstallScope;\n  /**\n   * Install TARGET platform id from `--host <platformId>` (baked into the\n   * wrapper at install time). OPTIONAL: when a recognized platform id, it\n   * OVERRIDES runtime env detection so headless spawns stamp hostPlatform\n   * correctly (detectRuntimeHost only knows env markers for a few hosts and\n   * otherwise mis-attributes). Absent/unrecognized → fall back to detection.\n   */\n  hostPlatformOverride?: PlatformId;\n}\n\n/**\n * Launch the developer's real MCP server under the telemetry-wrapping proxy.\n *\n * Resolves with the child server's exit code (propagated as this process's exit\n * code by the CLI). The session id comes from AGENT_CONNECTOR_SESSION when the\n * host sets it (empty otherwise); the host platform is detected from runtime env\n * markers; the project identity partitions telemetry by the stable project key.\n */\n/**\n * Resolve a session id for telemetry attribution. Prefers a host-provided\n * session/thread marker (so records from the same host session group together);\n * falls back to a per-process UUID — each `serve` invocation is one server\n * session, a sensible default granularity — so `--by session` rollups are never\n * collapsed into a single empty-keyed group.\n */\nfunction resolveSessionId(env: NodeJS.ProcessEnv = process.env): string {\n  return (\n    env.AGENT_CONNECTOR_SESSION ||\n    env.CLAUDE_SESSION_ID ||\n    env.CODEX_THREAD_ID ||\n    env.CURSOR_TRACE_ID ||\n    env.MCP_SESSION_ID ||\n    `proc-${randomUUID()}`\n  );\n}\n\nexport async function runServe(opts: RunServeOptions): Promise<number> {\n  const { connectorId, serverCommand, serverArgs, installScope, hostPlatformOverride } =\n    opts;\n\n  const connector = await loadRegisteredConnector(connectorId);\n\n  const id = projectIdentity(process.cwd());\n  // Prefer the install TARGET platform baked into the wrapper (--host), but only\n  // when it is a KNOWN registered platform id — a bad/unknown value falls back to\n  // runtime env detection so a config typo can never poison hostPlatform.\n  const hostPlatform: PlatformId =\n    hostPlatformOverride !== undefined &&\n    REGISTERED_PLATFORM_IDS.has(hostPlatformOverride)\n      ? hostPlatformOverride\n      : detectRuntimeHost().platform;\n  const sessionId = resolveSessionId();\n\n  // `serve` only ever wraps a locally-spawned stdio server (a remote/http server\n  // is never launched through the proxy), so isRemote is always false here.\n  const launchMethod = detectLaunchMethod(serverCommand, serverArgs);\n\n  const store = openStore({});\n  const tok = getTokenizer();\n\n  return runServeProxy({\n    connectorId,\n    command: serverCommand,\n    args: serverArgs,\n    store,\n    tokenizer: tok,\n    modelFamilyHint: connector.telemetry.modelFamilyHint,\n    hostPlatform,\n    sessionId,\n    projectKey: id.key,\n    projectDir: id.dir,\n    measureToolDefs: connector.telemetry.measureToolDefs,\n    installScope,\n    launchMethod,\n  });\n}\n","/**\n * telemetry/calibration — OPT-IN Anthropic count_tokens calibration.\n *\n * The default tokenizer counts every family with the OpenAI o200k_base BPE, so\n * an Anthropic session's counts are an honest-but-approximate stand-in\n * (\"tokenizer-approx\"). This module lets a developer OPT IN to calibrating that\n * approximation against Anthropic's real `count_tokens` endpoint: we sample a\n * tiny fraction of tool calls off-box, learn a per-family correction factor\n * (rolling mean of exact/approx), and apply it to the locally-tokenized counts\n * so they land much closer to the host's real numbers — labeled honestly as\n * \"tokenizer-calibrated\".\n *\n * PRIVACY + SAFETY — load-bearing invariants:\n *   • OPT-IN only. Nothing here runs unless BOTH AGENT_CONNECTOR_CALIBRATE\n *     contains \"anthropic\" AND ANTHROPIC_API_KEY is set (see isCalibrationEnabled).\n *   • Sampling only — shouldSample() rate-limits hard so we never hammer the API.\n *   • Content leaves the box ONLY on a sampled call, ONLY when opted in. We store\n *     a single scalar factor + sample count — NEVER the sampled text itself.\n *   • Fail-open everywhere: a network/parse/IO error returns null / passes the\n *     approximation through unchanged and NEVER throws into a tool call or hook.\n *\n * No new dependencies: uses Node's global fetch (Node >= 18) and node:fs.\n */\n\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nimport { dataRoot, ensureDir } from \"../core/paths.js\";\nimport type { ConfidenceSource, ModelFamily } from \"./types.js\";\n\n// ── Env switches ──────────────────────────────────────────────────────────\n\n/**\n * Is opt-in Anthropic calibration enabled for this process?\n *\n * Requires BOTH:\n *   • AGENT_CONNECTOR_CALIBRATE — a comma-separated allowlist that INCLUDES\n *     `anthropic` (so a future `AGENT_CONNECTOR_CALIBRATE=openai,anthropic` can\n *     opt other families in without touching this gate), and\n *   • ANTHROPIC_API_KEY — a non-empty key to authenticate the off-box call.\n *\n * Either missing → disabled (the privacy-safe default).\n */\nexport function isCalibrationEnabled(): boolean {\n  const families = (process.env.AGENT_CONNECTOR_CALIBRATE || \"\")\n    .split(\",\")\n    .map((s) => s.trim())\n    .filter((s) => s !== \"\");\n  const key = (process.env.ANTHROPIC_API_KEY || \"\").trim();\n  return families.includes(\"anthropic\") && key !== \"\";\n}\n\n// ── Factor store (dataRoot/calibration.json) ────────────────────────────────\n\n/** One learned correction factor for a model family: factor + sample count. */\nexport interface CalibrationFactor {\n  /** Multiply an approx count by this to estimate the real count. */\n  factor: number;\n  /** How many samples have folded into the rolling mean. */\n  samples: number;\n}\n\n/** The on-disk factor map, keyed by model family. */\nexport type CalibrationFactors = Partial<Record<ModelFamily, CalibrationFactor>>;\n\n/** Path to the learned-factor store: dataRoot()/calibration.json. */\nexport function calibrationPath(): string {\n  return join(dataRoot(), \"calibration.json\");\n}\n\n/**\n * Clamp a measured exact/approx ratio into a sane range. A pathological sample\n * (e.g. an empty-string approx of 0 → Infinity, or a parse glitch) must never\n * poison the rolling mean, so ratios are pinned to [0.2, 5].\n */\nconst RATIO_MIN = 0.2;\nconst RATIO_MAX = 5;\n\nfunction clampRatio(ratio: number): number | null {\n  if (!Number.isFinite(ratio) || ratio <= 0) return null;\n  if (ratio < RATIO_MIN) return RATIO_MIN;\n  if (ratio > RATIO_MAX) return RATIO_MAX;\n  return ratio;\n}\n\n/**\n * Load the learned factors from disk. Fail-open: a missing/unreadable/malformed\n * file returns an empty map rather than throwing.\n */\nexport function loadFactors(): CalibrationFactors {\n  const path = calibrationPath();\n  if (!existsSync(path)) return {};\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\")) as unknown;\n    if (parsed === null || typeof parsed !== \"object\") return {};\n    const out: CalibrationFactors = {};\n    for (const [family, value] of Object.entries(parsed as Record<string, unknown>)) {\n      if (value === null || typeof value !== \"object\") continue;\n      const rec = value as Record<string, unknown>;\n      const factor = rec[\"factor\"];\n      const samples = rec[\"samples\"];\n      if (\n        typeof factor === \"number\" &&\n        Number.isFinite(factor) &&\n        factor > 0 &&\n        typeof samples === \"number\" &&\n        Number.isFinite(samples) &&\n        samples >= 0\n      ) {\n        (out as Record<string, CalibrationFactor>)[family] = {\n          factor,\n          samples,\n        };\n      }\n    }\n    return out;\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Fold one observed exact/approx `ratio` into the rolling mean for `family` and\n * persist it. A running average converges to the true mean while staying cheap\n * and stateless across processes (each writer reads the prior count, blends in\n * the new sample, writes back). Fail-open: any read/write/clamp problem leaves\n * the store untouched and never throws.\n */\nexport function recordSample(family: ModelFamily, ratio: number): void {\n  const clamped = clampRatio(ratio);\n  if (clamped === null) return;\n  try {\n    const factors = loadFactors();\n    const prior = factors[family];\n    let next: CalibrationFactor;\n    if (prior === undefined || prior.samples <= 0) {\n      next = { factor: clamped, samples: 1 };\n    } else {\n      const samples = prior.samples + 1;\n      // Running average: new mean = old mean + (sample - old mean) / n.\n      const factor = prior.factor + (clamped - prior.factor) / samples;\n      next = { factor, samples };\n    }\n    const updated: CalibrationFactors = { ...factors, [family]: next };\n    const path = calibrationPath();\n    ensureDir(dataRoot());\n    writeFileSync(path, `${JSON.stringify(updated, null, 2)}\\n`, \"utf8\");\n  } catch {\n    /* fail-open: a calibration write must never break a tool call */\n  }\n}\n\n// ── Anthropic count_tokens (off-box, sampled, fail-open) ─────────────────────\n\n/** Default model used for count_tokens when no family→model map applies. */\nconst DEFAULT_ANTHROPIC_MODEL = \"claude-3-5-sonnet-latest\";\n\n/** Anthropic count_tokens endpoint. */\nconst COUNT_TOKENS_URL = \"https://api.anthropic.com/v1/messages/count_tokens\";\n\n/** The single field we read out of a successful response. */\ninterface CountTokensResponse {\n  input_tokens?: unknown;\n}\n\n/**\n * Ask Anthropic's `count_tokens` endpoint for the exact token count of `text`\n * under `model`. Returns the integer count, or `null` on ANY failure (no key,\n * non-200, network error, unparseable body) — fail-open by contract.\n *\n * Only ever called on a SAMPLED tool call when calibration is opted in, so the\n * sampled text leaves the box only under explicit operator consent.\n */\nexport async function countTokensAnthropic(\n  text: string,\n  model: string = DEFAULT_ANTHROPIC_MODEL,\n): Promise<number | null> {\n  const apiKey = (process.env.ANTHROPIC_API_KEY || \"\").trim();\n  if (apiKey === \"\") return null;\n  try {\n    const res = await fetch(COUNT_TOKENS_URL, {\n      method: \"POST\",\n      headers: {\n        \"x-api-key\": apiKey,\n        \"anthropic-version\": \"2023-06-01\",\n        \"content-type\": \"application/json\",\n      },\n      body: JSON.stringify({\n        model,\n        messages: [{ role: \"user\", content: text }],\n      }),\n    });\n    if (!res.ok) return null;\n    const body = (await res.json()) as CountTokensResponse;\n    const n = body.input_tokens;\n    if (typeof n === \"number\" && Number.isFinite(n) && n >= 0) {\n      return n;\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\n// ── Sampling (rate-limit so we never hammer the API) ─────────────────────────\n\n/**\n * Sample roughly 1 in {@link SAMPLE_EVERY} calls, with a hard per-minute cap so\n * a burst of tool calls can never fan out into a burst of API calls. Both\n * counters are in-memory (per process) — calibration is a best-effort,\n * low-volume background signal, not a per-call requirement.\n */\nconst SAMPLE_EVERY = 20;\nconst MAX_SAMPLES_PER_MINUTE = 10;\n\nlet callCounter = 0;\nlet windowStartMs = 0;\nlet samplesThisWindow = 0;\n\n/**\n * Should THIS call fire an off-box count_tokens sample? Combines a 1-in-N\n * counter with a rolling per-minute cap. Pure in-memory bookkeeping; never\n * throws, never blocks.\n */\nexport function shouldSample(now: number = Date.now()): boolean {\n  // Roll the per-minute window.\n  if (now - windowStartMs >= 60_000) {\n    windowStartMs = now;\n    samplesThisWindow = 0;\n  }\n  callCounter += 1;\n  if (callCounter % SAMPLE_EVERY !== 0) return false;\n  if (samplesThisWindow >= MAX_SAMPLES_PER_MINUTE) return false;\n  samplesThisWindow += 1;\n  return true;\n}\n\n/** Reset the in-memory sampling counters. Test-only seam; cheap + side-effect-free. */\nexport function _resetSamplingForTest(): void {\n  callCounter = 0;\n  windowStartMs = 0;\n  samplesThisWindow = 0;\n}\n\n// ── Apply a learned factor to a local approximation ──────────────────────────\n\n/** Result of {@link applyCalibration}: the adjusted count + its honest source. */\nexport interface CalibratedCount {\n  tokens: number;\n  source: Extract<ConfidenceSource, \"tokenizer-approx\" | \"tokenizer-calibrated\">;\n}\n\n/**\n * Adjust a locally-tokenized `approxTokens` count by the learned factor for\n * `family`. When a stored factor exists for the anthropic family, return the\n * scaled count labeled \"tokenizer-calibrated\"; otherwise pass the approximation\n * through unchanged as \"tokenizer-approx\". Pure: reads the factor store but\n * mutates nothing.\n */\nexport function applyCalibration(\n  approxTokens: number,\n  family: ModelFamily,\n  factors: CalibrationFactors = loadFactors(),\n): CalibratedCount {\n  if (family === \"anthropic\") {\n    const f = factors[family];\n    if (f !== undefined && f.samples > 0 && Number.isFinite(f.factor) && f.factor > 0) {\n      return {\n        tokens: Math.max(0, Math.round(approxTokens * f.factor)),\n        source: \"tokenizer-calibrated\",\n      };\n    }\n  }\n  return { tokens: approxTokens, source: \"tokenizer-approx\" };\n}\n\n/** The model used for a family's count_tokens sample (anthropic → default model). */\nexport function modelForFamily(_family: ModelFamily): string {\n  return DEFAULT_ANTHROPIC_MODEL;\n}\n","/**\n * telemetry/proxy — the telemetry-wrapping MCP stdio proxy.\n *\n * `agent-connector serve <command> <args…>` spawns the developer's REAL MCP\n * server as a child and sits transparently between the host and that server,\n * speaking the MCP stdio wire format: NEWLINE-DELIMITED JSON-RPC (one single-line\n * JSON object per message, terminated by `\\n`; stdio has NO Content-Length\n * framing). Bytes are forwarded VERBATIM in both directions so the proxy can\n * never corrupt the stream; a side line-buffer tees a COPY of each direction,\n * parses complete messages, and measures per-tool token usage out of band.\n *\n * Honesty / safety rules baked in here:\n *   • Forwarding always happens FIRST. Measurement runs after the bytes are out\n *     the door and is wrapped so a measurement bug can never break a tool call.\n *   • Telemetry stores AGGREGATE COUNTS ONLY — the parsed `tools/call` arguments\n *     and results are tokenized and discarded; raw content is never persisted.\n *   • AGENT_CONNECTOR_TELEMETRY=0 → still proxy transparently, skip all measure.\n *\n * The proxy resolves with the child's exit code and propagates SIGINT/SIGTERM.\n */\n\nimport type { PlatformId } from \"../core/types.js\";\nimport { spawnChild } from \"../core/spawn-child.js\";\nimport { type JsonRpcMessage, LineBuffer, idKey, isObject } from \"./jsonrpc.js\";\nimport {\n  applyCalibration,\n  countTokensAnthropic,\n  isCalibrationEnabled,\n  modelForFamily,\n  recordSample,\n  shouldSample,\n} from \"./calibration.js\";\nimport { measureToolCall, measureToolDefs } from \"./measure.js\";\nimport { newRecordId } from \"./store.js\";\nimport { inferModelFamily } from \"./tokenizer.js\";\nimport type {\n  ConfidenceSource,\n  LaunchMethod,\n  ModelFamily,\n  TelemetryInstallScope,\n  TelemetryStore,\n  Tokenizer,\n  ToolEventRecord,\n} from \"./types.js\";\n\n/** Options for {@link runServeProxy}. */\nexport interface RunServeProxyOptions {\n  /** Connector id this server belongs to (stamped on every record). */\n  connectorId: string;\n  /** The real MCP server executable to spawn. */\n  command: string;\n  /** Arguments passed to that executable. */\n  args: string[];\n  /** Where measured records are appended. */\n  store: TelemetryStore;\n  /** Tokenizer used for measurement (defaults baked into measure helpers). */\n  tokenizer: Tokenizer;\n  /**\n   * Telemetry model-family hint. \"auto\" infers the family from the MCP client's\n   * `initialize` clientInfo.name; any explicit family wins outright.\n   */\n  modelFamilyHint: \"auto\" | ModelFamily;\n  /** Host platform executing this proxy (stamped on every record). */\n  hostPlatform: PlatformId;\n  /** Host session id (stamped on every record). */\n  sessionId: string;\n  /** Hashed stable project identity (stamped on every record). */\n  projectKey: string;\n  /** Human-readable project directory (stamped on every record). */\n  projectDir: string;\n  /** When true, tokenize the `tools/list` schema once → tool-defs overhead. */\n  measureToolDefs: boolean;\n  /**\n   * Install scope (global user vs project-local) stamped on every record.\n   * OPTIONAL: omitted for configs written before scope plumbing existed, leaving\n   * the field off the row so it reads as \"unknown\".\n   */\n  installScope?: TelemetryInstallScope;\n  /**\n   * How the wrapped server was launched (npx/bunx/uvx/node/binary/http), stamped\n   * on every record. OPTIONAL for the same backward-compat reason as above.\n   */\n  launchMethod?: LaunchMethod;\n}\n\n// ── JSON-RPC shapes we read (kept local + narrow; everything else opaque) ─────\n\n/** A client→server `tools/call` we remember until its result comes back. */\ninterface PendingCall {\n  toolName: string;\n  args: unknown;\n}\n\n/**\n * Canonical string form of a tool call's arguments for an off-box count_tokens\n * sample — mirrors the tokenizer's own serialization so the sampled text equals\n * the bytes we approximated locally. A string passes through; anything else is\n * JSON-stringified; a value that stringifies to undefined becomes \"\".\n */\nfunction canonicalArgs(value: unknown): string {\n  if (typeof value === \"string\") return value;\n  try {\n    return JSON.stringify(value) ?? \"\";\n  } catch {\n    return \"\";\n  }\n}\n\n/**\n * Run the telemetry-wrapping MCP stdio proxy.\n *\n * Spawns `command args` with piped stdin/stdout (stderr inherited), forwards\n * both directions byte-for-byte, and measures `tools/call` round-trips and the\n * one-time `tools/list` tool-defs overhead into `store`. Resolves with the\n * child's exit code (or a signal-derived code) once the child closes.\n */\nexport async function runServeProxy(\n  opts: RunServeProxyOptions,\n): Promise<number> {\n  const {\n    connectorId,\n    command,\n    args,\n    store,\n    tokenizer,\n    modelFamilyHint,\n    hostPlatform,\n    sessionId,\n    projectKey,\n    projectDir,\n    measureToolDefs: shouldMeasureToolDefs,\n    installScope,\n    launchMethod,\n  } = opts;\n\n  // Global kill switch: still proxy transparently, but skip ALL measurement.\n  const measuringEnabled = process.env.AGENT_CONNECTOR_TELEMETRY !== \"0\";\n  // OPT-IN Anthropic count_tokens calibration. Resolved once per session — the\n  // gate (AGENT_CONNECTOR_CALIBRATE + ANTHROPIC_API_KEY) is process-level and\n  // does not change mid-session. Off by default; privacy-safe.\n  const calibrationEnabled = isCalibrationEnabled();\n\n  // spawnChild fixes native-Windows package-runner launches: a bare npx/uvx\n  // resolves to a .cmd shim that raw CreateProcess can't find/launch, so it is\n  // run via a quoted single command line with a shell. No-op on macOS/Linux.\n  const child = spawnChild(command, args, {\n    stdio: [\"pipe\", \"pipe\", \"inherit\"],\n    env: process.env,\n  });\n\n  // ── Per-session measurement state ───────────────────────────────────────\n  // Family resolved from the client's `initialize` (or the hint) and cached.\n  let family: ModelFamily = inferModelFamily(\"\", modelFamilyHint);\n  // Outstanding tools/call requests, keyed by JSON-RPC id.\n  const pending = new Map<string, PendingCall>();\n  // Monotonic sequence so two records in the same ms still get distinct ids.\n  let seq = 0;\n  // tools/list overhead is measured exactly once per session.\n  let toolDefsMeasured = false;\n\n  /**\n   * Build a base record stamped with the per-session identity fields plus the\n   * scope dimensions. `installScope` / `launchMethod` are spread in ONLY when\n   * defined, so a session without them leaves those fields off the row entirely\n   * (read as \"unknown\") rather than writing an explicit `undefined`.\n   */\n  function baseRecord(): Omit<\n    ToolEventRecord,\n    \"toolName\" | \"scope\" | \"inputTokens\" | \"outputTokens\" | \"confidenceSource\" | \"isError\"\n  > {\n    return {\n      id: newRecordId(seq++),\n      ts: Date.now(),\n      connectorId,\n      hostPlatform,\n      sessionId,\n      projectKey,\n      projectDir,\n      ...(installScope !== undefined ? { installScope } : {}),\n      ...(launchMethod !== undefined ? { launchMethod } : {}),\n    };\n  }\n\n  /**\n   * Inspect one parsed CLIENT→SERVER message. Caches the model family on\n   * `initialize` and remembers `tools/call` requests so their results can be\n   * measured when they come back. Never throws into the data path.\n   */\n  function onClientMessage(msg: JsonRpcMessage): void {\n    const method = msg.method;\n    if (method === \"initialize\") {\n      const params = isObject(msg.params) ? msg.params : undefined;\n      const clientInfo =\n        params && isObject(params[\"clientInfo\"])\n          ? (params[\"clientInfo\"] as Record<string, unknown>)\n          : undefined;\n      const clientName =\n        clientInfo && typeof clientInfo[\"name\"] === \"string\"\n          ? (clientInfo[\"name\"] as string)\n          : \"\";\n      family = inferModelFamily(clientName, modelFamilyHint);\n      return;\n    }\n\n    if (method === \"tools/call\") {\n      const key = idKey(msg.id);\n      if (key === null) return; // a call with no id has no result to match\n      const params = isObject(msg.params) ? msg.params : undefined;\n      const toolName =\n        params && typeof params[\"name\"] === \"string\"\n          ? (params[\"name\"] as string)\n          : \"unknown\";\n      const callArgs = params ? params[\"arguments\"] : undefined;\n      pending.set(key, { toolName, args: callArgs });\n    }\n  }\n\n  /**\n   * Inspect one parsed SERVER→CLIENT message. Matches `tools/call` results to\n   * remembered requests and measures them; measures `tools/list` results once.\n   * Never throws into the data path.\n   */\n  function onServerMessage(msg: JsonRpcMessage): void {\n    const key = idKey(msg.id);\n    if (key === null) return; // notifications carry no id we can correlate\n\n    const pendingCall = pending.get(key);\n    if (pendingCall !== undefined) {\n      pending.delete(key);\n      recordToolCall(pendingCall, msg);\n      return;\n    }\n\n    // Not a tracked tools/call — it may be the tools/list result we measure\n    // once for the fixed tool-definition overhead.\n    if (shouldMeasureToolDefs && !toolDefsMeasured) {\n      const result = isObject(msg.result) ? msg.result : undefined;\n      const tools = result ? result[\"tools\"] : undefined;\n      if (Array.isArray(tools)) {\n        recordToolDefs(tools);\n      }\n    }\n  }\n\n  /** Measure a matched tools/call round-trip and append the record. */\n  function recordToolCall(call: PendingCall, response: JsonRpcMessage): void {\n    const hasError = response.error !== undefined;\n    const result = response.result;\n    // A JSON-RPC error has no `result`; measure against an empty object so the\n    // input (args) tokens are still recorded honestly.\n    const resultForMeasure = hasError ? {} : result;\n    const measurement = measureToolCall(\n      call.args,\n      resultForMeasure,\n      family,\n      tokenizer,\n    );\n\n    // OPT-IN calibration: for an anthropic session, nudge the locally-tokenized\n    // approx counts toward Anthropic's real numbers via the learned factor, and\n    // fire a sampled off-box count_tokens to keep that factor fresh. Both steps\n    // are best-effort and wrapped so they can never break the record path.\n    let inputTokens = measurement.inputTokens;\n    let outputTokens = measurement.outputTokens;\n    let confidenceSource: ConfidenceSource = measurement.source;\n    if (calibrationEnabled && family === \"anthropic\") {\n      try {\n        ({ inputTokens, outputTokens, confidenceSource } = calibrateCounts(\n          measurement.inputTokens,\n          measurement.outputTokens,\n          measurement.source,\n        ));\n        maybeSampleCalibration(call.args, measurement.inputTokens);\n      } catch {\n        // Calibration is a non-essential enrichment — fall back to the raw\n        // measurement values already captured above.\n      }\n    }\n\n    // MCP signals a tool-level failure via result.isError===true; a JSON-RPC\n    // protocol error (response.error) is also a failure.\n    const resultIsError =\n      isObject(result) && result[\"isError\"] === true;\n    store.append({\n      ...baseRecord(),\n      toolName: call.toolName,\n      scope: \"call\",\n      inputTokens,\n      outputTokens,\n      confidenceSource,\n      isError: hasError || resultIsError,\n    });\n  }\n\n  /**\n   * Apply the learned anthropic factor to the approx input/output counts. Only\n   * a `tokenizer-approx` measurement is calibratable (a heuristic fallback or\n   * host-native count is left exactly as-is); the combined source becomes\n   * `tokenizer-calibrated` only when at least one side was actually scaled.\n   */\n  function calibrateCounts(\n    rawIn: number,\n    rawOut: number,\n    rawSource: ConfidenceSource,\n  ): { inputTokens: number; outputTokens: number; confidenceSource: ConfidenceSource } {\n    if (rawSource !== \"tokenizer-approx\") {\n      return { inputTokens: rawIn, outputTokens: rawOut, confidenceSource: rawSource };\n    }\n    const cin = applyCalibration(rawIn, family);\n    const cout = applyCalibration(rawOut, family);\n    const calibrated =\n      cin.source === \"tokenizer-calibrated\" || cout.source === \"tokenizer-calibrated\";\n    return {\n      inputTokens: cin.tokens,\n      outputTokens: cout.tokens,\n      confidenceSource: calibrated ? \"tokenizer-calibrated\" : \"tokenizer-approx\",\n    };\n  }\n\n  /**\n   * On a SAMPLED call, fire-and-forget an off-box count_tokens for the call's\n   * input args and fold the resulting exact/approx ratio into the learned\n   * factor. Returns immediately — the network round-trip never blocks\n   * forwarding or measurement. Fail-open: any error is swallowed.\n   */\n  function maybeSampleCalibration(args: unknown, approxInputTokens: number): void {\n    if (approxInputTokens <= 0) return; // nothing to ratio against\n    if (!shouldSample()) return;\n    const text = canonicalArgs(args);\n    if (text === \"\") return;\n    // Detached promise — intentionally NOT awaited so the proxy never blocks on\n    // the network. Errors are handled inside countTokensAnthropic (returns null)\n    // and the .catch is a belt-and-braces guard against an unhandled rejection.\n    void countTokensAnthropic(text, modelForFamily(family))\n      .then((exact) => {\n        if (exact !== null && exact > 0) {\n          recordSample(family, exact / approxInputTokens);\n        }\n      })\n      .catch(() => {\n        /* fail-open: a calibration sample must never surface an error */\n      });\n  }\n\n  /** Measure the one-time tools/list overhead and append the record. */\n  function recordToolDefs(tools: readonly unknown[]): void {\n    toolDefsMeasured = true;\n    const count = measureToolDefs(tools, family, tokenizer);\n    store.append({\n      ...baseRecord(),\n      toolName: \"*\",\n      scope: \"tool_defs\",\n      inputTokens: count.tokens,\n      outputTokens: 0,\n      confidenceSource: count.source,\n      isError: false,\n    });\n  }\n\n  /** Parse one NDJSON line and route it, swallowing any measurement error. */\n  function handleLine(line: string, direction: \"client\" | \"server\"): void {\n    if (!measuringEnabled) return;\n    let msg: JsonRpcMessage;\n    try {\n      const parsed = JSON.parse(line) as unknown;\n      if (!isObject(parsed)) return;\n      msg = parsed as JsonRpcMessage;\n    } catch {\n      return; // not a complete/valid JSON message — ignore for telemetry\n    }\n    try {\n      if (direction === \"client\") onClientMessage(msg);\n      else onServerMessage(msg);\n    } catch {\n      // Measurement must NEVER break the proxy. Drop the record silently.\n    }\n  }\n\n  const clientLines = new LineBuffer((line) => handleLine(line, \"client\"));\n  const serverLines = new LineBuffer((line) => handleLine(line, \"server\"));\n\n  // ── Transparent byte forwarding (host stdin → child stdin) ───────────────\n  // Forward VERBATIM first, then tee a copy into the line buffer to measure.\n  // Honor backpressure: if the child's stdin buffer is full, pause the host\n  // stdin and resume on drain so a slow server can't make us buffer unboundedly.\n  process.stdin.on(\"data\", (chunk: Buffer) => {\n    if (child.stdin && child.stdin.writable) {\n      const ok = child.stdin.write(chunk);\n      if (!ok) {\n        process.stdin.pause();\n        child.stdin.once(\"drain\", () => process.stdin.resume());\n      }\n    }\n    if (measuringEnabled) {\n      try {\n        clientLines.push(chunk);\n      } catch {\n        /* tee side-channel must never affect forwarding */\n      }\n    }\n  });\n  process.stdin.on(\"end\", () => {\n    if (child.stdin && !child.stdin.destroyed) child.stdin.end();\n  });\n\n  // ── Transparent byte forwarding (child stdout → host stdout) ─────────────\n  if (child.stdout) {\n    const childStdout = child.stdout;\n    childStdout.on(\"data\", (chunk: Buffer) => {\n      const ok = process.stdout.write(chunk);\n      if (!ok) {\n        childStdout.pause();\n        process.stdout.once(\"drain\", () => childStdout.resume());\n      }\n      if (measuringEnabled) {\n        try {\n          serverLines.push(chunk);\n        } catch {\n          /* tee side-channel must never affect forwarding */\n        }\n      }\n    });\n  }\n\n  // ── Signal propagation: forward SIGINT/SIGTERM to the child ──────────────\n  const forwardSignal = (signal: NodeJS.Signals): void => {\n    try {\n      if (!child.killed) child.kill(signal);\n    } catch {\n      /* child may already be gone */\n    }\n  };\n  const onSigint = (): void => forwardSignal(\"SIGINT\");\n  const onSigterm = (): void => forwardSignal(\"SIGTERM\");\n  process.on(\"SIGINT\", onSigint);\n  process.on(\"SIGTERM\", onSigterm);\n\n  // ── Resolve with the child's exit code (or signal-derived code) ──────────\n  return await new Promise<number>((resolve) => {\n    const finish = (code: number): void => {\n      process.removeListener(\"SIGINT\", onSigint);\n      process.removeListener(\"SIGTERM\", onSigterm);\n      try {\n        store.close();\n      } catch {\n        /* best-effort flush */\n      }\n      resolve(code);\n    };\n\n    child.on(\"error\", () => {\n      // The server could not be spawned/launched. Surface a conventional\n      // \"command not executable\" style failure code.\n      finish(126);\n    });\n\n    child.on(\"close\", (code, signal) => {\n      if (typeof code === \"number\") {\n        finish(code);\n        return;\n      }\n      // Killed by a signal → conventional 128 + signal number where known.\n      if (signal) {\n        const num = signalToNumber(signal);\n        finish(num === undefined ? 1 : 128 + num);\n        return;\n      }\n      finish(1);\n    });\n  });\n}\n\n/** Map the common termination signals to their numbers for exit-code math. */\nfunction signalToNumber(signal: NodeJS.Signals): number | undefined {\n  const table: Partial<Record<NodeJS.Signals, number>> = {\n    SIGINT: 2,\n    SIGQUIT: 3,\n    SIGKILL: 9,\n    SIGTERM: 15,\n  };\n  return table[signal];\n}\n\nexport default runServeProxy;\n","/**\n * runtime/usage-event — the OPT-IN host-native turn-usage enricher (enricher 4a).\n *\n * Gemini CLI / Antigravity fire an `AfterModel` (Antigravity CLI: `PostInvocation`)\n * hook AFTER each model turn, whose stdin payload carries a `usageMetadata` block\n * with the host's OWN exact token accounting for that whole conversation turn:\n *   { promptTokenCount, candidatesTokenCount, cachedContentTokenCount,\n *     thoughtsTokenCount, totalTokenCount }\n * This is the single point in the whole matrix where a host reports REAL per-turn\n * usage to a command we control — so we record it as `confidenceSource:\"host-native\"`\n * (the top of CONFIDENCE_RANK), upgrading those rows from the serve-proxy estimate.\n *\n * DISTINCT, NEVER-SUMMED ORIGIN. Host-native turn usage is WHOLE-CONVERSATION, not\n * per-MCP. To avoid double-counting against (a) the per-MCP serve-proxy `call`\n * rows and (b) the usage-reader host-scan numbers, every record written here uses\n * the DISTINCT scope `\"model_turn\"`. The MCP leaderboard excludes that scope (just\n * as it special-cases `tool_defs`); the unified leaderboard surfaces it as its own\n * clearly-labeled section that is explicitly never added to the other two origins.\n *\n * PRIVACY + FAIL-OPEN. This enricher is OPT-IN at install time (see the adapters);\n * it stores AGGREGATE COUNTS ONLY (no raw content — the payload's prompt/response\n * text is never read). ANY parse / store / IO error degrades to exit 0 and records\n * NOTHING: a host-native usage hook must never break a model turn. This function\n * never throws.\n */\n\nimport { projectIdentity } from \"../core/paths.js\";\nimport { newRecordId, openStore } from \"../telemetry/store.js\";\nimport type { PlatformId } from \"../core/types.js\";\nimport type { ToolEventRecord } from \"../telemetry/types.js\";\n\n/** Flags + stdin the CLI hands to {@link runUsageEvent}. */\nexport interface RunUsageEventOptions {\n  /** Host platform id from the command (`usage-event <platformId> …`). */\n  platformId: string;\n  /** Connector id from `--connector <id>` (stamped on the record). */\n  connectorId: string;\n  /** Raw stdin payload (host-native JSON). Empty string is tolerated → no record. */\n  stdin: string;\n}\n\n/** Process-level result the CLI translates into an exit code. */\nexport interface RunUsageEventResult {\n  /** Always 0 — a host-native usage hook must never block a model turn. */\n  exitCode: number;\n  /** True when a `model_turn` record was appended (false on any fail-open path). */\n  recorded: boolean;\n}\n\n/** The never-records, never-throws result. */\nconst NOOP: RunUsageEventResult = { exitCode: 0, recorded: false };\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\n/** Coerce a value to a non-negative safe integer (NaN/negatives/floats → 0). */\nfunction toNonNegInt(v: unknown): number {\n  const n = typeof v === \"number\" ? v : typeof v === \"string\" ? Number(v) : NaN;\n  if (!Number.isFinite(n) || n < 0) return 0;\n  return Math.floor(n);\n}\n\n/** First non-empty string among the given keys of an object. */\nfunction firstStr(obj: Record<string, unknown>, keys: readonly string[]): string | undefined {\n  for (const k of keys) {\n    const v = obj[k];\n    if (typeof v === \"string\" && v.trim() !== \"\") return v;\n  }\n  return undefined;\n}\n\n/** Read a token field tolerant of both camelCase and snake_case spellings. */\nfunction tokenField(\n  meta: Record<string, unknown>,\n  keys: readonly string[],\n): number {\n  for (const k of keys) {\n    if (k in meta) return toNonNegInt(meta[k]);\n  }\n  return 0;\n}\n\n/** Locate the `usageMetadata` block under either spelling, top-level or nested. */\nfunction findUsageMetadata(root: Record<string, unknown>): Record<string, unknown> | undefined {\n  for (const k of [\"usageMetadata\", \"usage_metadata\"]) {\n    if (isObject(root[k])) return root[k] as Record<string, unknown>;\n  }\n  // Some hosts nest the model response (with its usage) under a `response` /\n  // `modelResponse` envelope — probe one level down, best-effort.\n  for (const k of [\"response\", \"modelResponse\", \"model_response\"]) {\n    const nested = root[k];\n    if (isObject(nested)) {\n      for (const mk of [\"usageMetadata\", \"usage_metadata\"]) {\n        if (isObject(nested[mk])) return nested[mk] as Record<string, unknown>;\n      }\n    }\n  }\n  return undefined;\n}\n\n/** A registered PlatformId, or \"unknown\" when the id is not one we know. */\nconst KNOWN_PLATFORMS: ReadonlySet<string> = new Set<PlatformId>([\n  \"claude-code\", \"codex\", \"cursor\", \"vscode-copilot\", \"jetbrains-copilot\",\n  \"copilot-cli\", \"gemini-cli\", \"opencode\", \"kilo\", \"kilo-cli\", \"warp\", \"hermes\",\n  \"openclaw\", \"zed\", \"antigravity\", \"antigravity-cli\", \"kiro\", \"qwen-code\",\n  \"kimi\", \"pi\", \"omp\", \"droid\", \"roo-code\", \"trae\", \"amp\", \"codebuff\", \"mux\",\n  \"crush\", \"goose\", \"synthetic\", \"unknown\",\n]);\n\nfunction asPlatformId(id: string): PlatformId {\n  return (KNOWN_PLATFORMS.has(id) ? id : \"unknown\") as PlatformId;\n}\n\n/**\n * Record one host-native model turn. Parses the host's `usageMetadata`, maps it to\n * a DISTINCT `model_turn` `ToolEventRecord` (confidence `host-native`, toolName\n * `\"*\"`), and appends it to the shared telemetry store. NEVER throws and never\n * blocks the turn: every failure path resolves to {@link NOOP} (exit 0, nothing\n * recorded).\n */\nexport async function runUsageEvent(\n  opts: RunUsageEventOptions,\n): Promise<RunUsageEventResult> {\n  try {\n    // Global telemetry kill switch is honored by the store's append (no-op when\n    // AGENT_CONNECTOR_TELEMETRY=0); we still parse cheaply and let append drop it.\n    const trimmed = opts.stdin.trim();\n    if (trimmed === \"\") return NOOP;\n\n    let raw: unknown;\n    try {\n      raw = JSON.parse(trimmed);\n    } catch {\n      return NOOP; // malformed payload → fail-open, record nothing\n    }\n    if (!isObject(raw)) return NOOP;\n\n    const meta = findUsageMetadata(raw);\n    if (meta === undefined) return NOOP;\n\n    const promptTokens = tokenField(meta, [\"promptTokenCount\", \"prompt_token_count\"]);\n    const candidates = tokenField(meta, [\"candidatesTokenCount\", \"candidates_token_count\"]);\n    const cached = tokenField(meta, [\"cachedContentTokenCount\", \"cached_content_token_count\"]);\n    const thoughts = tokenField(meta, [\"thoughtsTokenCount\", \"thoughts_token_count\"]);\n\n    // promptTokenCount is cache-INCLUSIVE (Gemini-family semantics, mirrored by\n    // the antigravity-shared usage reader): net fresh input = prompt - cached.\n    const inputTokens = Math.max(0, promptTokens - Math.min(cached, promptTokens));\n    // Output = generated candidates + reasoning (\"thoughts\") tokens.\n    const outputTokens = candidates + thoughts;\n\n    // A turn with no measurable tokens is not worth a row.\n    if (inputTokens === 0 && outputTokens === 0) return NOOP;\n\n    // Identity: prefer payload session/cwd; fall back to process.cwd() for the\n    // project key so a turn always lands in a stable project partition.\n    const sessionId =\n      firstStr(raw, [\"session_id\", \"sessionId\", \"conversationId\", \"conversation_id\"]) ?? \"\";\n    const cwd = firstStr(raw, [\"cwd\", \"workspace\", \"projectDir\", \"project_dir\"]) ?? process.cwd();\n    const id = projectIdentity(cwd);\n\n    const record: ToolEventRecord = {\n      id: newRecordId(0),\n      ts: Date.now(),\n      connectorId: opts.connectorId,\n      toolName: \"*\",\n      scope: \"model_turn\",\n      hostPlatform: asPlatformId(opts.platformId),\n      sessionId,\n      projectKey: id.key,\n      projectDir: id.dir,\n      inputTokens,\n      outputTokens,\n      confidenceSource: \"host-native\",\n      isError: false,\n    };\n\n    const store = openStore({});\n    try {\n      store.append(record);\n    } finally {\n      try {\n        store.close();\n      } catch {\n        /* best-effort flush */\n      }\n    }\n    return { exitCode: 0, recorded: true };\n  } catch {\n    // Fail-open: a host-native usage enricher must never surface an error.\n    return NOOP;\n  }\n}\n\nexport default runUsageEvent;\n","/**\n * runtime/statusline-entrypoint — the universal statusline (HUD) renderer.\n *\n * A statusline-supporting host points its status line config at the single stable\n * home binary (`<homeBin> statusline <platformId> --connector <id>`, built by\n * core/spawn.buildHomeBinStatuslineCommand). The CLI reads stdin and calls\n * {@link runStatusline} with the parsed flags + the raw stdin string. This module:\n *\n *   1. Loads the registered connector (live render handler) and the host adapter.\n *   2. Parses the host's raw status payload into a normalized StatuslineContext.\n *   3. Calls the connector's render(ctx) and coerces the result to a string.\n *   4. Formats the line into the host's native status reply (exit code + stdout).\n *\n * FAIL-SAFE is the contract (NOT fail-open with carve-outs like hooks): a status\n * line is decorative — it must NEVER wedge the host or spew an error/stack trace\n * into the status bar. So ANY error path — bad payload, missing connector,\n * throwing render, adapter without statusline support — returns exit 0 with NO\n * stdout (an empty status line), never a non-zero exit and never partial output.\n *\n * NOTE (follow-up): no telemetry is recorded for statusline renders in v1 (out of\n * scope). When added, it MUST stay inside the same fail-safe envelope.\n */\n\nimport type { PlatformId } from \"../core/types.js\";\nimport { log } from \"../core/logger.js\";\nimport {\n  loadRegisteredConnector,\n  readRegisteredMeta,\n} from \"../core/load-connector.js\";\nimport { loadAdapter } from \"../adapters/registry.js\";\nimport { buildTelemetryAccessor } from \"./telemetry-accessor.js\";\n\n/** Flags + stdin the CLI hands to {@link runStatusline}. */\nexport interface RunStatuslineOptions {\n  /** Host platform id from the command (`statusline <platformId> …`). */\n  platformId: string;\n  /** Connector id from `--connector <id>`. */\n  connectorId: string;\n  /** Raw stdin payload (host-native status JSON). Empty string is tolerated → `{}`. */\n  stdin: string;\n}\n\n/** Process-level result the CLI translates into exit code + stdout/stderr. */\nexport interface RunStatuslineResult {\n  exitCode: number;\n  stdout?: string;\n  stderr?: string;\n}\n\n/** The fail-safe result: exit 0, no output (an empty status line). */\nconst EMPTY: RunStatuslineResult = { exitCode: 0 };\n\n/**\n * Tolerantly parse the host's stdin payload. Empty / whitespace-only input is a\n * legitimate \"no payload\" signal and resolves to `{}`. Malformed JSON also\n * degrades to `{}` rather than throwing — fail-safe is the contract.\n */\nfunction parseStdin(stdin: string): unknown {\n  const trimmed = stdin.trim();\n  if (trimmed === \"\") return {};\n  try {\n    return JSON.parse(trimmed);\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Render one host status-line invocation. Always resolves (never rejects): every\n * failure path returns the empty {@link EMPTY} result so the CLI exits cleanly\n * with an empty status line. See the module header for the fail-safe contract.\n */\nexport async function runStatusline(\n  opts: RunStatuslineOptions,\n): Promise<RunStatuslineResult> {\n  const { platformId, connectorId, stdin } = opts;\n\n  try {\n    const connector = await loadRegisteredConnector(connectorId);\n    const adapter = await loadAdapter(platformId);\n\n    // Nothing to render: no statusline declared, or the host adapter has no\n    // statusline runtime support (parse/format pair). Empty line, exit 0.\n    if (\n      !connector.statusline ||\n      typeof connector.statusline.render !== \"function\" ||\n      !adapter ||\n      !adapter.parseStatusInput ||\n      !adapter.formatStatusOutput\n    ) {\n      return EMPTY;\n    }\n\n    const raw = parseStdin(stdin);\n    const ctx = adapter.parseStatusInput(raw);\n    // The command carries the authoritative connector id; stamp it so render()\n    // sees the connector it was dispatched for.\n    ctx.connectorId = connectorId;\n    // capabilities is REQUIRED on StatuslineContext. claude-code's parseStatusInput\n    // sets it, but a future/third-party adapter could omit it — backfill so the\n    // runtime guarantee matches the type (mirrors the simulate harness). Never\n    // let render() see undefined capabilities while the type claims it is present.\n    if (ctx.capabilities == null) ctx.capabilities = adapter.capabilities;\n    // Recover the install scope from the registered metadata (sync) and stamp it\n    // onto the ctx — scope is an install-time property the entrypoint has no\n    // other access to. Undefined when the meta carries none. Also expose the\n    // per-connector telemetry usage accessor (lazy, fail-safe to zeros).\n    ctx.scope = readRegisteredMeta(connectorId)?.scope;\n    ctx.telemetry = buildTelemetryAccessor(connectorId);\n    // Pre-compute the connector's own all-time usage so render() can read it\n    // synchronously off `ctx.usage`. The accessor never throws (it swallows read\n    // errors + the kill switch to a zeros summary), so this resolves to a real\n    // summary, never undefined, and the outer try/catch is the fail-safe backstop.\n    // The read is synchronous and cheap for a normal store; the host's own\n    // statusline-subprocess timeout (a process boundary) is the real wedge guard,\n    // and bounding a pathologically large store is a tracked follow-up — see the\n    // accessor's hot-path note in runtime/telemetry-accessor.ts.\n    ctx.usage = await ctx.telemetry();\n\n    // Per-host render override: when rendering for host X, `hosts[X].render`\n    // wins over the top-level render; a host not listed (or a per-host entry\n    // that is somehow not a function) falls back to the top-level render.\n    // Selection NEVER throws — fail-safe is preserved.\n    const perHost = connector.statusline.hosts?.[platformId as PlatformId]?.render;\n    const render =\n      typeof perHost === \"function\" ? perHost : connector.statusline.render;\n\n    const rendered = await render(ctx);\n    // Coerce: a non-string return (number, accidental object) is stringified so\n    // a misbehaving render never crashes the format step. null/undefined → \"\".\n    const line = rendered == null ? \"\" : String(rendered);\n\n    const reply = adapter.formatStatusOutput(line);\n    return {\n      exitCode: reply.exitCode,\n      ...(reply.stdout !== undefined ? { stdout: reply.stdout } : {}),\n      ...(reply.stderr !== undefined ? { stderr: reply.stderr } : {}),\n    };\n  } catch (err) {\n    // FAIL-SAFE: a status line must never wedge the host or surface an error.\n    // Log for diagnostics (stderr of the home binary — not the status bar) and\n    // return the empty line.\n    const message = err instanceof Error ? err.message : String(err);\n    log.error(`statusline ${platformId} (${connectorId}) failed:`, message);\n    return EMPTY;\n  }\n}\n\nexport default runStatusline;\n","/**\n * runtime/action-entrypoint — the universal user-invokable action dispatcher.\n *\n * A future host affordance (slash command / keybinding) points at the single\n * stable home binary (`<homeBin> action <platformId> <actionId> --connector\n * <id>`, built by core/spawn.buildHomeBinActionCommand). The CLI parses the\n * flags and calls {@link runAction}. This module:\n *\n *   1. Loads the registered connector (live run handler) and the host adapter.\n *   2. Builds the shared {@link HostCtx} (host + the adapter's capabilities; NO\n *      stdin — an action takes no host payload, unlike a hook or status line).\n *   3. Finds the action by id, resolves the per-host run override, runs it, and\n *      prints the optional result.message.\n *\n * USER-TRIGGERED ERROR SEMANTICS (the key difference from hooks/statusline):\n * actions are invoked DELIBERATELY by a user, so errors are SURFACED, never\n * failed silently. An unknown action id or a throwing run → exit 1 + a stderr\n * message. (Hooks fail-open to exit 0; the statusline fail-safes to an empty\n * line — both are passive surfaces a host fires automatically. An action is not:\n * swallowing its failure would leave the user staring at nothing, unable to\n * tell the action ran.)\n *\n * NOTE (follow-up): no telemetry is recorded for action runs in v1 (out of\n * scope), and no adapter EMITS the affordance yet — v1 ships the dispatch\n * backbone only.\n */\n\nimport type {\n  HostCtx,\n  PlatformCapabilities,\n  PlatformId,\n} from \"../core/types.js\";\nimport {\n  loadRegisteredConnector,\n  readRegisteredMeta,\n} from \"../core/load-connector.js\";\nimport { loadAdapter, REGISTERED_PLATFORM_IDS } from \"../adapters/registry.js\";\nimport { buildTelemetryAccessor } from \"./telemetry-accessor.js\";\n\n/** Flags the CLI hands to {@link runAction} (no stdin — actions take no payload). */\nexport interface RunActionOptions {\n  /** Host platform id from the command (`action <platformId> <actionId> …`). */\n  platformId: string;\n  /** Connector id from `--connector <id>`. */\n  connectorId: string;\n  /** The action id positional (`action <platformId> <actionId> …`). */\n  actionId: string;\n}\n\n/** Process-level result the CLI translates into exit code + stdout/stderr. */\nexport interface RunActionResult {\n  exitCode: number;\n  stdout?: string;\n  stderr?: string;\n}\n\n/**\n * Minimal all-false capabilities for the fallback ctx when the host adapter is\n * unknown/unregistered. The action still runs (it takes no host payload), but\n * branching on `ctx.capabilities` reads every flag as off — no affordance is\n * advertised for a host we cannot describe.\n */\nconst EMPTY_CAPABILITIES: PlatformCapabilities = {\n  preToolUse: false,\n  postToolUse: false,\n  preCompact: false,\n  sessionStart: false,\n  sessionEnd: false,\n  userPromptSubmit: false,\n  stop: false,\n  notification: false,\n  canModifyArgs: false,\n  canModifyOutput: false,\n  canInjectSessionContext: false,\n  transports: [],\n};\n\n/**\n * Dispatch one user-invokable action. Always resolves (never rejects): every\n * path returns a concrete {@link RunActionResult} so the CLI can exit cleanly,\n * but UNLIKE the hook/statusline runtimes an error resolves to exit 1 + a stderr\n * message (actions are user-triggered — surface the failure). See the module\n * header for the user-triggered error contract.\n */\nexport async function runAction(\n  opts: RunActionOptions,\n): Promise<RunActionResult> {\n  const { platformId, connectorId, actionId } = opts;\n\n  let connector;\n  try {\n    connector = await loadRegisteredConnector(connectorId);\n  } catch (err) {\n    // A user asked to run an action on a connector we cannot load — surface it\n    // (do NOT fail-open: the user would otherwise see nothing and assume it ran).\n    const message = err instanceof Error ? err.message : String(err);\n    return { exitCode: 1, stderr: message };\n  }\n\n  const action = connector.actions.find((a) => a.id === actionId);\n  if (!action) {\n    return {\n      exitCode: 1,\n      stderr: `no action \"${actionId}\" on connector ${connectorId}`,\n    };\n  }\n\n  // Build the shared HostCtx. capabilities come from the adapter; an unknown\n  // adapter still runs with the minimal ctx (an action takes no host payload).\n  const adapter = await loadAdapter(platformId).catch(() => undefined);\n  const host: PlatformId = REGISTERED_PLATFORM_IDS.has(platformId as PlatformId)\n    ? (platformId as PlatformId)\n    : \"unknown\";\n  const ctx: HostCtx = {\n    host,\n    capabilities: adapter?.capabilities ?? EMPTY_CAPABILITIES,\n    // Recover the install scope from the registered metadata (sync) — scope is\n    // an install-time property the entrypoint otherwise has no access to —\n    // and expose the per-connector telemetry usage accessor (lazy, fail-safe).\n    scope: readRegisteredMeta(connectorId)?.scope,\n    telemetry: buildTelemetryAccessor(connectorId),\n  };\n\n  // Per-host run override: when running for host X, `hosts[X].run` wins over the\n  // top-level run; a host not listed (or a per-host entry that is somehow not a\n  // function) falls back to the top-level run.\n  const perHost = action.hosts?.[platformId as PlatformId]?.run;\n  const run = typeof perHost === \"function\" ? perHost : action.run;\n\n  try {\n    const result = await run(ctx);\n    const message = result?.message;\n    if (typeof message === \"string\" && message !== \"\") {\n      return { exitCode: 0, stdout: message };\n    }\n    // void / no message → success with no output.\n    return { exitCode: 0 };\n  } catch (err) {\n    // USER-TRIGGERED: a throwing action surfaces its failure (exit 1 + stderr),\n    // never a silent fail-open. This is the documented difference from\n    // hooks/statusline.\n    const message = err instanceof Error ? err.message : String(err);\n    return {\n      exitCode: 1,\n      stderr: `action \"${actionId}\" failed: ${message}`,\n    };\n  }\n}\n\nexport default runAction;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,SAAS,kBAAkB;;;ACQ3B,SAAS,YAAY,cAAc,qBAAqB;AACxD,SAAS,YAAY;AAkBd,SAAS,uBAAgC;AAC9C,QAAM,YAAY,QAAQ,IAAI,6BAA6B,IACxD,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,MAAM,EAAE;AACzB,QAAM,OAAO,QAAQ,IAAI,qBAAqB,IAAI,KAAK;AACvD,SAAO,SAAS,SAAS,WAAW,KAAK,QAAQ;AACnD;AAgBO,SAAS,kBAA0B;AACxC,SAAO,KAAK,SAAS,GAAG,kBAAkB;AAC5C;AAOA,IAAM,YAAY;AAClB,IAAM,YAAY;AAElB,SAAS,WAAW,OAA8B;AAChD,MAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,EAAG,QAAO;AAClD,MAAI,QAAQ,UAAW,QAAO;AAC9B,MAAI,QAAQ,UAAW,QAAO;AAC9B,SAAO;AACT;AAMO,SAAS,cAAkC;AAChD,QAAM,OAAO,gBAAgB;AAC7B,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AACpD,QAAI,WAAW,QAAQ,OAAO,WAAW,SAAU,QAAO,CAAC;AAC3D,UAAM,MAA0B,CAAC;AACjC,eAAW,CAAC,QAAQ,KAAK,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC/E,UAAI,UAAU,QAAQ,OAAO,UAAU,SAAU;AACjD,YAAM,MAAM;AACZ,YAAM,SAAS,IAAI,QAAQ;AAC3B,YAAM,UAAU,IAAI,SAAS;AAC7B,UACE,OAAO,WAAW,YAClB,OAAO,SAAS,MAAM,KACtB,SAAS,KACT,OAAO,YAAY,YACnB,OAAO,SAAS,OAAO,KACvB,WAAW,GACX;AACA,QAAC,IAA0C,MAAM,IAAI;AAAA,UACnD;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AASO,SAAS,aAAa,QAAqB,OAAqB;AACrE,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,YAAY,KAAM;AACtB,MAAI;AACF,UAAM,UAAU,YAAY;AAC5B,UAAM,QAAQ,QAAQ,MAAM;AAC5B,QAAI;AACJ,QAAI,UAAU,UAAa,MAAM,WAAW,GAAG;AAC7C,aAAO,EAAE,QAAQ,SAAS,SAAS,EAAE;AAAA,IACvC,OAAO;AACL,YAAM,UAAU,MAAM,UAAU;AAEhC,YAAM,SAAS,MAAM,UAAU,UAAU,MAAM,UAAU;AACzD,aAAO,EAAE,QAAQ,QAAQ;AAAA,IAC3B;AACA,UAAM,UAA8B,EAAE,GAAG,SAAS,CAAC,MAAM,GAAG,KAAK;AACjE,UAAM,OAAO,gBAAgB;AAC7B,cAAU,SAAS,CAAC;AACpB,kBAAc,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AAAA,EACrE,QAAQ;AAAA,EAER;AACF;AAKA,IAAM,0BAA0B;AAGhC,IAAM,mBAAmB;AAezB,eAAsB,qBACpB,MACA,QAAgB,yBACQ;AACxB,QAAM,UAAU,QAAQ,IAAI,qBAAqB,IAAI,KAAK;AAC1D,MAAI,WAAW,GAAI,QAAO;AAC1B,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,kBAAkB;AAAA,MACxC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,aAAa;AAAA,QACb,qBAAqB;AAAA,QACrB,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA,QACA,UAAU,CAAC,EAAE,MAAM,QAAQ,SAAS,KAAK,CAAC;AAAA,MAC5C,CAAC;AAAA,IACH,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,UAAM,IAAI,KAAK;AACf,QAAI,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,KAAK,KAAK,GAAG;AACzD,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUA,IAAM,eAAe;AACrB,IAAM,yBAAyB;AAE/B,IAAI,cAAc;AAClB,IAAI,gBAAgB;AACpB,IAAI,oBAAoB;AAOjB,SAAS,aAAa,MAAc,KAAK,IAAI,GAAY;AAE9D,MAAI,MAAM,iBAAiB,KAAQ;AACjC,oBAAgB;AAChB,wBAAoB;AAAA,EACtB;AACA,iBAAe;AACf,MAAI,cAAc,iBAAiB,EAAG,QAAO;AAC7C,MAAI,qBAAqB,uBAAwB,QAAO;AACxD,uBAAqB;AACrB,SAAO;AACT;AAwBO,SAAS,iBACd,cACA,QACA,UAA8B,YAAY,GACzB;AACjB,MAAI,WAAW,aAAa;AAC1B,UAAM,IAAI,QAAQ,MAAM;AACxB,QAAI,MAAM,UAAa,EAAE,UAAU,KAAK,OAAO,SAAS,EAAE,MAAM,KAAK,EAAE,SAAS,GAAG;AACjF,aAAO;AAAA,QACL,QAAQ,KAAK,IAAI,GAAG,KAAK,MAAM,eAAe,EAAE,MAAM,CAAC;AAAA,QACvD,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,QAAQ,cAAc,QAAQ,mBAAmB;AAC5D;AAGO,SAAS,eAAe,SAA8B;AAC3D,SAAO;AACT;;;ACpLA,SAAS,cAAc,OAAwB;AAC7C,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUA,eAAsB,cACpB,MACiB;AACjB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,iBAAiB;AAAA,IACjB;AAAA,IACA;AAAA,EACF,IAAI;AAGJ,QAAM,mBAAmB,QAAQ,IAAI,8BAA8B;AAInE,QAAM,qBAAqB,qBAAqB;AAKhD,QAAM,QAAQ,WAAW,SAAS,MAAM;AAAA,IACtC,OAAO,CAAC,QAAQ,QAAQ,SAAS;AAAA,IACjC,KAAK,QAAQ;AAAA,EACf,CAAC;AAID,MAAI,SAAsB,iBAAiB,IAAI,eAAe;AAE9D,QAAM,UAAU,oBAAI,IAAyB;AAE7C,MAAI,MAAM;AAEV,MAAI,mBAAmB;AAQvB,WAAS,aAGP;AACA,WAAO;AAAA,MACL,IAAI,YAAY,KAAK;AAAA,MACrB,IAAI,KAAK,IAAI;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,iBAAiB,SAAY,EAAE,aAAa,IAAI,CAAC;AAAA,MACrD,GAAI,iBAAiB,SAAY,EAAE,aAAa,IAAI,CAAC;AAAA,IACvD;AAAA,EACF;AAOA,WAAS,gBAAgB,KAA2B;AAClD,UAAM,SAAS,IAAI;AACnB,QAAI,WAAW,cAAc;AAC3B,YAAM,SAAS,SAAS,IAAI,MAAM,IAAI,IAAI,SAAS;AACnD,YAAM,aACJ,UAAU,SAAS,OAAO,YAAY,CAAC,IAClC,OAAO,YAAY,IACpB;AACN,YAAM,aACJ,cAAc,OAAO,WAAW,MAAM,MAAM,WACvC,WAAW,MAAM,IAClB;AACN,eAAS,iBAAiB,YAAY,eAAe;AACrD;AAAA,IACF;AAEA,QAAI,WAAW,cAAc;AAC3B,YAAM,MAAM,MAAM,IAAI,EAAE;AACxB,UAAI,QAAQ,KAAM;AAClB,YAAM,SAAS,SAAS,IAAI,MAAM,IAAI,IAAI,SAAS;AACnD,YAAM,WACJ,UAAU,OAAO,OAAO,MAAM,MAAM,WAC/B,OAAO,MAAM,IACd;AACN,YAAM,WAAW,SAAS,OAAO,WAAW,IAAI;AAChD,cAAQ,IAAI,KAAK,EAAE,UAAU,MAAM,SAAS,CAAC;AAAA,IAC/C;AAAA,EACF;AAOA,WAAS,gBAAgB,KAA2B;AAClD,UAAM,MAAM,MAAM,IAAI,EAAE;AACxB,QAAI,QAAQ,KAAM;AAElB,UAAM,cAAc,QAAQ,IAAI,GAAG;AACnC,QAAI,gBAAgB,QAAW;AAC7B,cAAQ,OAAO,GAAG;AAClB,qBAAe,aAAa,GAAG;AAC/B;AAAA,IACF;AAIA,QAAI,yBAAyB,CAAC,kBAAkB;AAC9C,YAAM,SAAS,SAAS,IAAI,MAAM,IAAI,IAAI,SAAS;AACnD,YAAM,QAAQ,SAAS,OAAO,OAAO,IAAI;AACzC,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,uBAAe,KAAK;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAGA,WAAS,eAAe,MAAmB,UAAgC;AACzE,UAAM,WAAW,SAAS,UAAU;AACpC,UAAM,SAAS,SAAS;AAGxB,UAAM,mBAAmB,WAAW,CAAC,IAAI;AACzC,UAAM,cAAc;AAAA,MAClB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAMA,QAAI,cAAc,YAAY;AAC9B,QAAI,eAAe,YAAY;AAC/B,QAAI,mBAAqC,YAAY;AACrD,QAAI,sBAAsB,WAAW,aAAa;AAChD,UAAI;AACF,SAAC,EAAE,aAAa,cAAc,iBAAiB,IAAI;AAAA,UACjD,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AACA,+BAAuB,KAAK,MAAM,YAAY,WAAW;AAAA,MAC3D,QAAQ;AAAA,MAGR;AAAA,IACF;AAIA,UAAM,gBACJ,SAAS,MAAM,KAAK,OAAO,SAAS,MAAM;AAC5C,UAAM,OAAO;AAAA,MACX,GAAG,WAAW;AAAA,MACd,UAAU,KAAK;AAAA,MACf,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,YAAY;AAAA,IACvB,CAAC;AAAA,EACH;AAQA,WAAS,gBACP,OACA,QACA,WACmF;AACnF,QAAI,cAAc,oBAAoB;AACpC,aAAO,EAAE,aAAa,OAAO,cAAc,QAAQ,kBAAkB,UAAU;AAAA,IACjF;AACA,UAAM,MAAM,iBAAiB,OAAO,MAAM;AAC1C,UAAM,OAAO,iBAAiB,QAAQ,MAAM;AAC5C,UAAM,aACJ,IAAI,WAAW,0BAA0B,KAAK,WAAW;AAC3D,WAAO;AAAA,MACL,aAAa,IAAI;AAAA,MACjB,cAAc,KAAK;AAAA,MACnB,kBAAkB,aAAa,yBAAyB;AAAA,IAC1D;AAAA,EACF;AAQA,WAAS,uBAAuBA,OAAe,mBAAiC;AAC9E,QAAI,qBAAqB,EAAG;AAC5B,QAAI,CAAC,aAAa,EAAG;AACrB,UAAM,OAAO,cAAcA,KAAI;AAC/B,QAAI,SAAS,GAAI;AAIjB,SAAK,qBAAqB,MAAM,eAAe,MAAM,CAAC,EACnD,KAAK,CAAC,UAAU;AACf,UAAI,UAAU,QAAQ,QAAQ,GAAG;AAC/B,qBAAa,QAAQ,QAAQ,iBAAiB;AAAA,MAChD;AAAA,IACF,CAAC,EACA,MAAM,MAAM;AAAA,IAEb,CAAC;AAAA,EACL;AAGA,WAAS,eAAe,OAAiC;AACvD,uBAAmB;AACnB,UAAM,QAAQ,gBAAgB,OAAO,QAAQ,SAAS;AACtD,UAAM,OAAO;AAAA,MACX,GAAG,WAAW;AAAA,MACd,UAAU;AAAA,MACV,OAAO;AAAA,MACP,aAAa,MAAM;AAAA,MACnB,cAAc;AAAA,MACd,kBAAkB,MAAM;AAAA,MACxB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAGA,WAAS,WAAW,MAAc,WAAsC;AACtE,QAAI,CAAC,iBAAkB;AACvB,QAAI;AACJ,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,UAAI,CAAC,SAAS,MAAM,EAAG;AACvB,YAAM;AAAA,IACR,QAAQ;AACN;AAAA,IACF;AACA,QAAI;AACF,UAAI,cAAc,SAAU,iBAAgB,GAAG;AAAA,UAC1C,iBAAgB,GAAG;AAAA,IAC1B,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,QAAM,cAAc,IAAI,WAAW,CAAC,SAAS,WAAW,MAAM,QAAQ,CAAC;AACvE,QAAM,cAAc,IAAI,WAAW,CAAC,SAAS,WAAW,MAAM,QAAQ,CAAC;AAMvE,UAAQ,MAAM,GAAG,QAAQ,CAAC,UAAkB;AAC1C,QAAI,MAAM,SAAS,MAAM,MAAM,UAAU;AACvC,YAAM,KAAK,MAAM,MAAM,MAAM,KAAK;AAClC,UAAI,CAAC,IAAI;AACP,gBAAQ,MAAM,MAAM;AACpB,cAAM,MAAM,KAAK,SAAS,MAAM,QAAQ,MAAM,OAAO,CAAC;AAAA,MACxD;AAAA,IACF;AACA,QAAI,kBAAkB;AACpB,UAAI;AACF,oBAAY,KAAK,KAAK;AAAA,MACxB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,CAAC;AACD,UAAQ,MAAM,GAAG,OAAO,MAAM;AAC5B,QAAI,MAAM,SAAS,CAAC,MAAM,MAAM,UAAW,OAAM,MAAM,IAAI;AAAA,EAC7D,CAAC;AAGD,MAAI,MAAM,QAAQ;AAChB,UAAM,cAAc,MAAM;AAC1B,gBAAY,GAAG,QAAQ,CAAC,UAAkB;AACxC,YAAM,KAAK,QAAQ,OAAO,MAAM,KAAK;AACrC,UAAI,CAAC,IAAI;AACP,oBAAY,MAAM;AAClB,gBAAQ,OAAO,KAAK,SAAS,MAAM,YAAY,OAAO,CAAC;AAAA,MACzD;AACA,UAAI,kBAAkB;AACpB,YAAI;AACF,sBAAY,KAAK,KAAK;AAAA,QACxB,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAGA,QAAM,gBAAgB,CAAC,WAAiC;AACtD,QAAI;AACF,UAAI,CAAC,MAAM,OAAQ,OAAM,KAAK,MAAM;AAAA,IACtC,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,WAAW,MAAY,cAAc,QAAQ;AACnD,QAAM,YAAY,MAAY,cAAc,SAAS;AACrD,UAAQ,GAAG,UAAU,QAAQ;AAC7B,UAAQ,GAAG,WAAW,SAAS;AAG/B,SAAO,MAAM,IAAI,QAAgB,CAAC,YAAY;AAC5C,UAAM,SAAS,CAAC,SAAuB;AACrC,cAAQ,eAAe,UAAU,QAAQ;AACzC,cAAQ,eAAe,WAAW,SAAS;AAC3C,UAAI;AACF,cAAM,MAAM;AAAA,MACd,QAAQ;AAAA,MAER;AACA,cAAQ,IAAI;AAAA,IACd;AAEA,UAAM,GAAG,SAAS,MAAM;AAGtB,aAAO,GAAG;AAAA,IACZ,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,MAAM,WAAW;AAClC,UAAI,OAAO,SAAS,UAAU;AAC5B,eAAO,IAAI;AACX;AAAA,MACF;AAEA,UAAI,QAAQ;AACV,cAAM,MAAM,eAAe,MAAM;AACjC,eAAO,QAAQ,SAAY,IAAI,MAAM,GAAG;AACxC;AAAA,MACF;AACA,aAAO,CAAC;AAAA,IACV,CAAC;AAAA,EACH,CAAC;AACH;AAGA,SAAS,eAAe,QAA4C;AAClE,QAAM,QAAiD;AAAA,IACrD,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AACA,SAAO,MAAM,MAAM;AACrB;;;AF7ZA,SAAS,iBAAiB,MAAyB,QAAQ,KAAa;AACtE,SACE,IAAI,2BACJ,IAAI,qBACJ,IAAI,mBACJ,IAAI,mBACJ,IAAI,kBACJ,QAAQ,WAAW,CAAC;AAExB;AAEA,eAAsB,SAAS,MAAwC;AACrE,QAAM,EAAE,aAAa,eAAe,YAAY,cAAc,qBAAqB,IACjF;AAEF,QAAM,YAAY,MAAM,wBAAwB,WAAW;AAE3D,QAAM,KAAK,gBAAgB,QAAQ,IAAI,CAAC;AAIxC,QAAM,eACJ,yBAAyB,UACzB,wBAAwB,IAAI,oBAAoB,IAC5C,uBACA,kBAAkB,EAAE;AAC1B,QAAM,YAAY,iBAAiB;AAInC,QAAM,eAAe,mBAAmB,eAAe,UAAU;AAEjE,QAAM,QAAQ,UAAU,CAAC,CAAC;AAC1B,QAAM,MAAM,aAAa;AAEzB,SAAO,cAAc;AAAA,IACnB;AAAA,IACA,SAAS;AAAA,IACT,MAAM;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,iBAAiB,UAAU,UAAU;AAAA,IACrC;AAAA,IACA;AAAA,IACA,YAAY,GAAG;AAAA,IACf,YAAY,GAAG;AAAA,IACf,iBAAiB,UAAU,UAAU;AAAA,IACrC;AAAA,IACA;AAAA,EACF,CAAC;AACH;;;AGpEA,IAAM,OAA4B,EAAE,UAAU,GAAG,UAAU,MAAM;AAEjE,SAASC,UAAS,GAA0C;AAC1D,SAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC;AAChE;AAGA,SAAS,YAAY,GAAoB;AACvC,QAAM,IAAI,OAAO,MAAM,WAAW,IAAI,OAAO,MAAM,WAAW,OAAO,CAAC,IAAI;AAC1E,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAG,QAAO;AACzC,SAAO,KAAK,MAAM,CAAC;AACrB;AAGA,SAAS,SAAS,KAA8B,MAA6C;AAC3F,aAAW,KAAK,MAAM;AACpB,UAAM,IAAI,IAAI,CAAC;AACf,QAAI,OAAO,MAAM,YAAY,EAAE,KAAK,MAAM,GAAI,QAAO;AAAA,EACvD;AACA,SAAO;AACT;AAGA,SAAS,WACP,MACA,MACQ;AACR,aAAW,KAAK,MAAM;AACpB,QAAI,KAAK,KAAM,QAAO,YAAY,KAAK,CAAC,CAAC;AAAA,EAC3C;AACA,SAAO;AACT;AAGA,SAAS,kBAAkB,MAAoE;AAC7F,aAAW,KAAK,CAAC,iBAAiB,gBAAgB,GAAG;AACnD,QAAIA,UAAS,KAAK,CAAC,CAAC,EAAG,QAAO,KAAK,CAAC;AAAA,EACtC;AAGA,aAAW,KAAK,CAAC,YAAY,iBAAiB,gBAAgB,GAAG;AAC/D,UAAM,SAAS,KAAK,CAAC;AACrB,QAAIA,UAAS,MAAM,GAAG;AACpB,iBAAW,MAAM,CAAC,iBAAiB,gBAAgB,GAAG;AACpD,YAAIA,UAAS,OAAO,EAAE,CAAC,EAAG,QAAO,OAAO,EAAE;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAGA,IAAM,kBAAuC,oBAAI,IAAgB;AAAA,EAC/D;AAAA,EAAe;AAAA,EAAS;AAAA,EAAU;AAAA,EAAkB;AAAA,EACpD;AAAA,EAAe;AAAA,EAAc;AAAA,EAAY;AAAA,EAAQ;AAAA,EAAY;AAAA,EAAQ;AAAA,EACrE;AAAA,EAAY;AAAA,EAAO;AAAA,EAAe;AAAA,EAAmB;AAAA,EAAQ;AAAA,EAC7D;AAAA,EAAQ;AAAA,EAAM;AAAA,EAAO;AAAA,EAAS;AAAA,EAAY;AAAA,EAAQ;AAAA,EAAO;AAAA,EAAY;AAAA,EACrE;AAAA,EAAS;AAAA,EAAS;AAAA,EAAa;AACjC,CAAC;AAED,SAAS,aAAa,IAAwB;AAC5C,SAAQ,gBAAgB,IAAI,EAAE,IAAI,KAAK;AACzC;AASA,eAAsB,cACpB,MAC8B;AAC9B,MAAI;AAGF,UAAM,UAAU,KAAK,MAAM,KAAK;AAChC,QAAI,YAAY,GAAI,QAAO;AAE3B,QAAI;AACJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN,aAAO;AAAA,IACT;AACA,QAAI,CAACA,UAAS,GAAG,EAAG,QAAO;AAE3B,UAAM,OAAO,kBAAkB,GAAG;AAClC,QAAI,SAAS,OAAW,QAAO;AAE/B,UAAM,eAAe,WAAW,MAAM,CAAC,oBAAoB,oBAAoB,CAAC;AAChF,UAAM,aAAa,WAAW,MAAM,CAAC,wBAAwB,wBAAwB,CAAC;AACtF,UAAM,SAAS,WAAW,MAAM,CAAC,2BAA2B,4BAA4B,CAAC;AACzF,UAAM,WAAW,WAAW,MAAM,CAAC,sBAAsB,sBAAsB,CAAC;AAIhF,UAAM,cAAc,KAAK,IAAI,GAAG,eAAe,KAAK,IAAI,QAAQ,YAAY,CAAC;AAE7E,UAAM,eAAe,aAAa;AAGlC,QAAI,gBAAgB,KAAK,iBAAiB,EAAG,QAAO;AAIpD,UAAM,YACJ,SAAS,KAAK,CAAC,cAAc,aAAa,kBAAkB,iBAAiB,CAAC,KAAK;AACrF,UAAM,MAAM,SAAS,KAAK,CAAC,OAAO,aAAa,cAAc,aAAa,CAAC,KAAK,QAAQ,IAAI;AAC5F,UAAM,KAAK,gBAAgB,GAAG;AAE9B,UAAM,SAA0B;AAAA,MAC9B,IAAI,YAAY,CAAC;AAAA,MACjB,IAAI,KAAK,IAAI;AAAA,MACb,aAAa,KAAK;AAAA,MAClB,UAAU;AAAA,MACV,OAAO;AAAA,MACP,cAAc,aAAa,KAAK,UAAU;AAAA,MAC1C;AAAA,MACA,YAAY,GAAG;AAAA,MACf,YAAY,GAAG;AAAA,MACf;AAAA,MACA;AAAA,MACA,kBAAkB;AAAA,MAClB,SAAS;AAAA,IACX;AAEA,UAAM,QAAQ,UAAU,CAAC,CAAC;AAC1B,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,UAAE;AACA,UAAI;AACF,cAAM,MAAM;AAAA,MACd,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO,EAAE,UAAU,GAAG,UAAU,KAAK;AAAA,EACvC,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;;;AC/IA,IAAM,QAA6B,EAAE,UAAU,EAAE;AAOjD,SAAS,WAAW,OAAwB;AAC1C,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,YAAY,GAAI,QAAO,CAAC;AAC5B,MAAI;AACF,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAOA,eAAsB,cACpB,MAC8B;AAC9B,QAAM,EAAE,YAAY,aAAa,MAAM,IAAI;AAE3C,MAAI;AACF,UAAM,YAAY,MAAM,wBAAwB,WAAW;AAC3D,UAAM,UAAU,MAAM,YAAY,UAAU;AAI5C,QACE,CAAC,UAAU,cACX,OAAO,UAAU,WAAW,WAAW,cACvC,CAAC,WACD,CAAC,QAAQ,oBACT,CAAC,QAAQ,oBACT;AACA,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,WAAW,KAAK;AAC5B,UAAM,MAAM,QAAQ,iBAAiB,GAAG;AAGxC,QAAI,cAAc;AAKlB,QAAI,IAAI,gBAAgB,KAAM,KAAI,eAAe,QAAQ;AAKzD,QAAI,QAAQ,mBAAmB,WAAW,GAAG;AAC7C,QAAI,YAAY,uBAAuB,WAAW;AASlD,QAAI,QAAQ,MAAM,IAAI,UAAU;AAMhC,UAAM,UAAU,UAAU,WAAW,QAAQ,UAAwB,GAAG;AACxE,UAAM,SACJ,OAAO,YAAY,aAAa,UAAU,UAAU,WAAW;AAEjE,UAAM,WAAW,MAAM,OAAO,GAAG;AAGjC,UAAM,OAAO,YAAY,OAAO,KAAK,OAAO,QAAQ;AAEpD,UAAM,QAAQ,QAAQ,mBAAmB,IAAI;AAC7C,WAAO;AAAA,MACL,UAAU,MAAM;AAAA,MAChB,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC7D,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,IAC/D;AAAA,EACF,SAAS,KAAK;AAIZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,QAAI,MAAM,cAAc,UAAU,KAAK,WAAW,aAAa,OAAO;AACtE,WAAO;AAAA,EACT;AACF;;;ACpFA,IAAM,qBAA2C;AAAA,EAC/C,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,kBAAkB;AAAA,EAClB,MAAM;AAAA,EACN,cAAc;AAAA,EACd,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,yBAAyB;AAAA,EACzB,YAAY,CAAC;AACf;AASA,eAAsB,UACpB,MAC0B;AAC1B,QAAM,EAAE,YAAY,aAAa,SAAS,IAAI;AAE9C,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,wBAAwB,WAAW;AAAA,EACvD,SAAS,KAAK;AAGZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO,EAAE,UAAU,GAAG,QAAQ,QAAQ;AAAA,EACxC;AAEA,QAAM,SAAS,UAAU,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ;AAC9D,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ,cAAc,QAAQ,kBAAkB,WAAW;AAAA,IAC7D;AAAA,EACF;AAIA,QAAM,UAAU,MAAM,YAAY,UAAU,EAAE,MAAM,MAAM,MAAS;AACnE,QAAM,OAAmB,wBAAwB,IAAI,UAAwB,IACxE,aACD;AACJ,QAAM,MAAe;AAAA,IACnB;AAAA,IACA,cAAc,SAAS,gBAAgB;AAAA;AAAA;AAAA;AAAA,IAIvC,OAAO,mBAAmB,WAAW,GAAG;AAAA,IACxC,WAAW,uBAAuB,WAAW;AAAA,EAC/C;AAKA,QAAM,UAAU,OAAO,QAAQ,UAAwB,GAAG;AAC1D,QAAM,MAAM,OAAO,YAAY,aAAa,UAAU,OAAO;AAE7D,MAAI;AACF,UAAM,SAAS,MAAM,IAAI,GAAG;AAC5B,UAAM,UAAU,QAAQ;AACxB,QAAI,OAAO,YAAY,YAAY,YAAY,IAAI;AACjD,aAAO,EAAE,UAAU,GAAG,QAAQ,QAAQ;AAAA,IACxC;AAEA,WAAO,EAAE,UAAU,EAAE;AAAA,EACvB,SAAS,KAAK;AAIZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ,WAAW,QAAQ,aAAa,OAAO;AAAA,IACjD;AAAA,EACF;AACF;","names":["args","isObject"]}

package/dist/{chunk-IW77FFNX.js → chunk-CPLK7GTE.js}

@@ -2,6 +2,9 @@
 import {
   renderFrontmatterMd
 } from "./chunk-7L6ITC4T.js";
+import {
+  buildHomeBinActionCommand
+} from "./chunk-I5MLE6S7.js";
 import {
   MEMORY_CONTENT_SOFT_BUDGET_BYTES,
   listManagedBlocks,
@@ -400,7 +403,8 @@ var BaseAdapter = class {
           check,
           status: "warn",
           message: `memory file missing: ${row.path}`,
-          fix: "agent-connector install (sync) will re-create the block"
+          fix: "agent-connector install (sync) will re-create the block",
+          fixable: true
         });
         continue;
       }
@@ -417,7 +421,8 @@ var BaseAdapter = class {
           check,
           status: "warn",
           message: `managed block not found in ${row.path}`,
-          fix: "agent-connector install (sync) will re-append it"
+          fix: "agent-connector install (sync) will re-append it",
+          fixable: true
         });
       } else if (block.drifted) {
         results.push({
@@ -435,7 +440,8 @@ var BaseAdapter = class {
             check,
             status: "warn",
             message: `${this.id} now resolves its ${row.scope}-scope memory file to ${current[0].path} (${current[0].reason}) \u2014 the block in ${row.path} may no longer be read`,
-            fix: "agent-connector install (sync) re-probes and writes the file the host reads now"
+            fix: "agent-connector install (sync) re-probes and writes the file the host reads now",
+            fixable: true
           });
         }
       }
@@ -503,6 +509,31 @@ var BaseAdapter = class {
   uninstallActions(ctx) {
     return this.unsupportedSurface(ctx, "actions", (ctx.connector.actions ?? []).length);
   }
+  /**
+   * Shared, surface-agnostic helper for the action EMITTERS: yield one
+   * {@link ActionTrigger} per declared action, each carrying the home-bin verb
+   * command the host trigger must run
+   * (`<homeBin> action <host> <actionId> --connector <id>`, via
+   * {@link buildHomeBinActionCommand}) plus a `label`/`description` that fall
+   * back to the action id. Each supporting adapter iterates this and writes its
+   * host-native trigger (hermes quick_commands / warp workflow / droid exec
+   * file) — the per-host file shape is NOT this helper's concern, only the
+   * common (id, label, description, command) tuple. Callers own the standard
+   * guards (platforms[id].actions === false / empty actions).
+   */
+  actionTriggers(ctx) {
+    return (ctx.connector.actions ?? []).map((action) => ({
+      id: action.id,
+      label: action.description ?? action.id,
+      description: action.description ?? action.id,
+      command: buildHomeBinActionCommand(
+        ctx.homeBinPath,
+        this.id,
+        action.id,
+        ctx.connector.id
+      )
+    }));
+  }
   /**
    * Default response for a content surface this platform cannot honor: a single
    * skip when the connector declares none of that surface, else a single "warn"
@@ -775,7 +806,12 @@ var BaseAdapter = class {
         check: `${this.name}: config present`,
         status: "warn",
         message: `not found: ${cfg}`,
-        fix: `agent-connector install --targets ${this.id}`
+        fix: `agent-connector install --targets ${this.id}`,
+        // Only sync-recoverable when the connector actually declares a
+        // server — a re-sync writes the config file only then. For a
+        // serverless (memory/configPatch-only) connector the file is never
+        // created, so marking it fixable would loop it into "still failing".
+        fixable: !!ctx.connector.server
       }
     );
     for (const hc of this.getHealthChecks?.(ctx) ?? []) {
@@ -795,4 +831,4 @@ export {
   parseJsonc,
   BaseAdapter
 };
-//# sourceMappingURL=chunk-IW77FFNX.js.map
+//# sourceMappingURL=chunk-CPLK7GTE.js.map

package/dist/chunk-CPLK7GTE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/jsonc.ts","../src/adapters/base.ts"],"sourcesContent":["/**\n * core/jsonc — tolerant JSONC / JSON5-lite parsing.\n *\n * Many hosts document their config file as JSONC (or JSON5): // line comments,\n * /* *\\/ block comments, and trailing commas are all legal. A strict JSON.parse\n * false-fails such a perfectly valid file → null → and a careless `?? {}` then\n * OVERWRITES the user's entire config with just our entry (data loss). To avoid\n * that, every JSON/JSONC adapter parses through `parseJsonc`, which strips\n * comments + trailing commas in ONE string-aware pass before JSON.parse.\n *\n * The single pass is deliberately string-literal aware: a // or /* inside a\n * quoted value (e.g. \"http://x//y\") is NOT a comment, and a comma inside a\n * string (e.g. \"a,]\") is NOT a trailing comma — both must survive verbatim.\n */\n\n/**\n * Strip // line comments, /* *\\/ block comments, and trailing commas from JSONC\n * text in a SINGLE string-aware pass.\n *\n * Rules:\n *   - While inside a string literal, every character (including //, /*, and ,)\n *     is copied verbatim; backslash escapes the next character.\n *   - Outside a string, // … runs to end-of-line and /* … *\\/ to its close.\n *   - A comma is dropped ONLY when the next non-whitespace, non-comment token is\n *     a closing `}` or `]` (a trailing comma). A comma followed by another value\n *     or by end-of-input is preserved (the latter lets JSON.parse report the\n *     real syntax error instead of us masking it).\n */\nexport function stripJsonc(text: string): string {\n  const n = text.length;\n  let out = \"\";\n  let i = 0;\n  let inString = false;\n  let quote = \"\";\n\n  while (i < n) {\n    const ch = text[i] as string;\n\n    if (inString) {\n      out += ch;\n      if (ch === \"\\\\\") {\n        // Copy the escaped character verbatim (covers \\\" \\\\ \\/ etc.).\n        if (i + 1 < n) {\n          out += text[i + 1] as string;\n          i += 2;\n          continue;\n        }\n      } else if (ch === quote) {\n        inString = false;\n      }\n      i += 1;\n      continue;\n    }\n\n    const next = i + 1 < n ? (text[i + 1] as string) : \"\";\n\n    // Enter a string literal.\n    if (ch === '\"' || ch === \"'\") {\n      inString = true;\n      quote = ch;\n      out += ch;\n      i += 1;\n      continue;\n    }\n\n    // Line comment — skip to end of line (keep the newline for line tracking).\n    if (ch === \"/\" && next === \"/\") {\n      i += 2;\n      while (i < n && text[i] !== \"\\n\") i += 1;\n      continue;\n    }\n\n    // Block comment — skip to the closing */.\n    if (ch === \"/\" && next === \"*\") {\n      i += 2;\n      while (i < n && !(text[i] === \"*\" && text[i + 1] === \"/\")) i += 1;\n      i += 2; // consume the closing */\n      continue;\n    }\n\n    // Trailing comma — drop it only when the next significant token (skipping\n    // whitespace AND comments) is a closing } or ]. This stays string-aware\n    // because we only reach here outside a string.\n    if (ch === \",\") {\n      const closer = nextSignificant(text, i + 1);\n      if (closer === \"}\" || closer === \"]\") {\n        i += 1; // drop the trailing comma\n        continue;\n      }\n    }\n\n    out += ch;\n    i += 1;\n  }\n\n  return out;\n}\n\n/**\n * Peek the next significant (non-whitespace, non-comment) character at/after\n * `from`, returning \"\" at end-of-input. Used only outside string literals.\n */\nfunction nextSignificant(text: string, from: number): string {\n  const n = text.length;\n  let i = from;\n  while (i < n) {\n    const ch = text[i] as string;\n    if (ch === \" \" || ch === \"\\t\" || ch === \"\\r\" || ch === \"\\n\") {\n      i += 1;\n      continue;\n    }\n    const next = i + 1 < n ? (text[i + 1] as string) : \"\";\n    if (ch === \"/\" && next === \"/\") {\n      i += 2;\n      while (i < n && text[i] !== \"\\n\") i += 1;\n      continue;\n    }\n    if (ch === \"/\" && next === \"*\") {\n      i += 2;\n      while (i < n && !(text[i] === \"*\" && text[i + 1] === \"/\")) i += 1;\n      i += 2;\n      continue;\n    }\n    return ch;\n  }\n  return \"\";\n}\n\n/**\n * Parse JSONC text tolerantly: strip comments + trailing commas, then JSON.parse.\n * Throws (like JSON.parse) on genuinely malformed input — callers that want a\n * fail-soft null should wrap in try/catch (BaseAdapter.readJson does).\n */\nexport function parseJsonc<T = unknown>(text: string): T {\n  return JSON.parse(stripJsonc(text)) as T;\n}\n","/**\n * adapters/base — shared adapter foundation.\n *\n * Provides JSON config IO, settings backup, and a default doctor. Per-platform\n * specifics (paths, capabilities, native render format, runtime parse/format)\n * are abstract and implemented by each adapter. TOML/YAML adapters override the\n * JSON helpers entirely.\n */\n\nimport {\n  copyFileSync,\n  existsSync,\n  readdirSync,\n  readFileSync,\n  rmSync,\n  statSync,\n  writeFileSync,\n} from \"node:fs\";\nimport type { Dirent } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { basename, dirname, isAbsolute, join, relative, resolve, sep } from \"node:path\";\n\nimport type {\n  ChangeRecord,\n  DetectedPlatform,\n  DiagnosticResult,\n  HealthCheck,\n  HookParadigm,\n  PlatformCapabilities,\n  PlatformId,\n  PlatformMemoryOverride,\n} from \"../core/types.js\";\nimport { backupsDir, ensureDir } from \"../core/paths.js\";\nimport { parseJsonc } from \"../core/jsonc.js\";\nimport { buildHomeBinActionCommand } from \"../core/spawn.js\";\nimport {\n  MEMORY_CONTENT_SOFT_BUDGET_BYTES,\n  listManagedBlocks,\n  loadMemoryLedger,\n  recordMemoryTarget,\n  removeManagedBlocksFile,\n  saveMemoryLedger,\n  upsertManagedBlockFile,\n} from \"../core/managed-block.js\";\nimport { renderFrontmatterMd } from \"./claude-code/render.js\";\nimport type { Adapter, InstallContext, MemoryTarget } from \"./spi.js\";\n\n/** Content-surface kinds with BaseAdapter default install/uninstall handling. */\ntype ContentSurface =\n  | \"commands\"\n  | \"skills\"\n  | \"subagents\"\n  | \"memory\"\n  | \"statusline\"\n  | \"actions\";\n\n/**\n * One resolved action trigger for an EMITTER adapter: the host-native trigger\n * the adapter writes runs `command`, which re-enters the home binary at the\n * `action` verb. `label`/`description` fall back to the action id when the\n * connector declared none. Produced by {@link BaseAdapter.actionTriggers}.\n */\nexport interface ActionTrigger {\n  /** The action id — also the per-action file/key name on most hosts. */\n  id: string;\n  /** Display label (action.description ?? action.id). */\n  label: string;\n  /** One-line description (action.description ?? action.id). */\n  description: string;\n  /** `<homeBin> action <host> <id> --connector <connectorId>` (the verb the host runs). */\n  command: string;\n}\n\n/**\n * Documented USER-scope AGENTS.md locations, per host (the AGENTS.md-first\n * research matrix). Only hosts with a REAL user/global AGENTS.md file are\n * listed. Hosts whose documented user-scope memory lives in a DIFFERENT file\n * (qwen-code ~/.qwen/QWEN.md, goose .goosehints, kilo/roo/kiro rules dirs,\n * copilot-cli copilot-instructions.md) override memoryTargets in-adapter;\n * hosts whose user rules are app/UI/cloud-managed (warp Drive, trae,\n * jetbrains/cursor settings UI) deliberately have no row — user-scope memory\n * there reports the standard skip-warn (the JetBrains-MCP precedent), never a\n * write into a file the host ignores.\n */\nconst AGENTS_MD_USER_PATHS: Partial<Record<PlatformId, () => MemoryTarget>> = {\n  // codex resolves its own user path in-adapter ($CODEX_HOME with ~ expansion\n  // + the AGENTS.override.md shadow probe) — deliberately no row here.\n  zed: () => ({\n    path:\n      process.platform === \"win32\" && process.env.APPDATA\n        ? join(process.env.APPDATA, \"Zed\", \"AGENTS.md\")\n        : join(homedir(), \".config\", \"zed\", \"AGENTS.md\"),\n    reason: \"zed personal instructions file\",\n  }),\n  amp: () => ({\n    path: join(homedir(), \".config\", \"amp\", \"AGENTS.md\"),\n    reason: \"amp user-scope AGENTS.md\",\n  }),\n  mux: () => ({\n    path: join(homedir(), \".mux\", \"AGENTS.md\"),\n    reason: \"mux global AGENTS.md\",\n  }),\n  pi: () => ({\n    path: join(homedir(), \".pi\", \"agent\", \"AGENTS.md\"),\n    reason: \"pi global AGENTS.md\",\n  }),\n  droid: () => ({\n    path: join(homedir(), \".factory\", \"AGENTS.md\"),\n    reason: \"droid (Factory) personal AGENTS.md\",\n  }),\n  opencode: () => ({\n    path: join(homedir(), \".config\", \"opencode\", \"AGENTS.md\"),\n    reason: \"opencode global AGENTS.md\",\n  }),\n  antigravity: () => ({\n    path: join(homedir(), \".gemini\", \"AGENTS.md\"),\n    reason: \"antigravity global rules (~/.gemini/AGENTS.md, shared tree)\",\n  }),\n  \"antigravity-cli\": () => ({\n    path: join(homedir(), \".gemini\", \"AGENTS.md\"),\n    reason: \"agy shares the IDE's ~/.gemini tree (idempotent upsert dedupes)\",\n  }),\n  omp: () => ({\n    path: join(homedir(), \".omp\", \"agent\", \"AGENTS.md\"),\n    reason: \"omp global AGENTS.md (pi-parity; verify for your version)\",\n  }),\n};\n\nexport abstract class BaseAdapter implements Adapter {\n  abstract readonly id: PlatformId;\n  abstract readonly name: string;\n  abstract readonly paradigm: HookParadigm;\n  abstract readonly capabilities: PlatformCapabilities;\n\n  abstract detectInstalled(projectDir: string): DetectedPlatform;\n  abstract getConfigDir(ctx: InstallContext): string;\n  abstract getServerConfigPath(ctx: InstallContext): string;\n  abstract getHookConfigPath(ctx: InstallContext): string;\n  abstract installServer(ctx: InstallContext): ChangeRecord[];\n  abstract uninstallServer(ctx: InstallContext): ChangeRecord[];\n  abstract installHooks(ctx: InstallContext): ChangeRecord[];\n  abstract uninstallHooks(ctx: InstallContext): ChangeRecord[];\n\n  // ── Content surfaces (commands / skills / subagents) ─────────────────────\n  // CONCRETE (overridable) defaults so every adapter inherits all six methods\n  // and the installer can call them without optional-chaining. Each returns a\n  // single skip when the connector declares no entries of that surface, else a\n  // single \"warn\" — mirroring the mcp-only hook handling. Supporting adapters\n  // override only the surfaces they honor.\n\n  installCommands(ctx: InstallContext): ChangeRecord[] {\n    return this.unsupportedSurface(ctx, \"commands\", ctx.connector.commands.length);\n  }\n  uninstallCommands(ctx: InstallContext): ChangeRecord[] {\n    return this.unsupportedSurface(ctx, \"commands\", ctx.connector.commands.length);\n  }\n  installSkills(ctx: InstallContext): ChangeRecord[] {\n    return this.unsupportedSurface(ctx, \"skills\", ctx.connector.skills.length);\n  }\n  uninstallSkills(ctx: InstallContext): ChangeRecord[] {\n    return this.unsupportedSurface(ctx, \"skills\", ctx.connector.skills.length);\n  }\n  installSubagents(ctx: InstallContext): ChangeRecord[] {\n    return this.unsupportedSurface(ctx, \"subagents\", ctx.connector.subagents.length);\n  }\n  uninstallSubagents(ctx: InstallContext): ChangeRecord[] {\n    return this.unsupportedSurface(ctx, \"subagents\", ctx.connector.subagents.length);\n  }\n\n  // ── Memory surface (managed marker blocks; AGENTS.md-first) ───────────────\n  // ONE generic implementation for every supporting host: the per-adapter\n  // `memoryTargets()` hook resolves WHERE to write (AGENTS.md defaults below;\n  // claude-code → CLAUDE.md and gemini-cli → GEMINI.md override it), and the\n  // core/managed-block engine performs the surgical, hash-stamped block edit.\n  // Unlike commands/skills/subagents these files are SHARED and user-authored —\n  // bytes outside this connector's own marker pair are never touched.\n\n  /**\n   * Resolve the memory/rules file(s) this host actually reads at ctx.scope.\n   * Base default (AGENTS.md-first, owner mandate):\n   *   - an explicit `platforms[<id>].memory.path` override wins;\n   *   - project scope → `<projectDir>/AGENTS.md` (the agents.md standard);\n   *   - user scope → the host's documented user-scope AGENTS.md, when one\n   *     exists ({@link AGENTS_MD_USER_PATHS}); otherwise [] → skip-warn.\n   * Exception hosts (claude-code, gemini-cli) override this hook.\n   */\n  protected memoryTargets(ctx: InstallContext): MemoryTarget[] {\n    const override = this.memoryOverride(ctx);\n    if (override?.path) {\n      const base = ctx.scope === \"project\" ? ctx.projectDir : homedir();\n      return [\n        {\n          path: isAbsolute(override.path) ? override.path : join(base, override.path),\n          reason: `platforms.${this.id}.memory.path override`,\n        },\n      ];\n    }\n    if (ctx.scope === \"project\") {\n      return [\n        { path: join(ctx.projectDir, \"AGENTS.md\"), reason: \"AGENTS.md standard (project root)\" },\n      ];\n    }\n    if (ctx.scope === \"user\") {\n      const user = AGENTS_MD_USER_PATHS[this.id]?.();\n      return user ? [user] : [];\n    }\n    return [];\n  }\n\n  /** The per-platform memory override object, when one is declared. */\n  protected memoryOverride(ctx: InstallContext): PlatformMemoryOverride | undefined {\n    const o = ctx.connector.platforms[this.id]?.memory;\n    return o && typeof o === \"object\" ? o : undefined;\n  }\n\n  installMemory(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    // `?? []` tolerates pre-resolved connectors from versions before the\n    // memory surface existed (the installer applies the same guard).\n    const entries = connector.memory ?? [];\n    if (connector.platforms[this.id]?.memory === false) {\n      return [{ platform: this.id, action: \"skip\", detail: `memory disabled for ${this.id}` }];\n    }\n    if (entries.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no memory\" }];\n    }\n    if (!(this.capabilities.supportsMemory ?? false)) {\n      return this.unsupportedSurface(ctx, \"memory\", entries.length);\n    }\n\n    const changes: ChangeRecord[] = [];\n    const override = this.memoryOverride(ctx);\n    if (override?.mode && this.id !== \"claude-code\") {\n      changes.push({\n        platform: this.id,\n        action: \"warn\",\n        detail: `memory.mode is claude-code-only; ignored on ${this.id}`,\n      });\n    }\n    if (ctx.scope !== \"project\" && ctx.scope !== \"user\") {\n      // system/profile/managed memory files are admin-owned — out of scope (v1).\n      changes.push({\n        platform: this.id,\n        action: \"warn\",\n        detail:\n          `memory not supported at ${ctx.scope} scope on ${this.id} ` +\n          `(managed/admin memory files are out of scope); ${entries.length} skipped`,\n      });\n      return changes;\n    }\n    const targets = this.memoryTargets(ctx);\n    if (targets.length === 0) {\n      changes.push({\n        platform: this.id,\n        action: \"warn\",\n        detail:\n          `no ${ctx.scope}-scope memory file on ${this.id} ` +\n          `(user rules are app/UI-managed or undocumented); ${entries.length} skipped`,\n      });\n      return changes;\n    }\n    changes.push(...this.writeMemoryBlocks(ctx, targets));\n    return changes;\n  }\n\n  /**\n   * Upsert every declared memory entry's block into every resolved target and\n   * record the ownership ledger rows (`connectorDir(id)/memory-state.json`).\n   * Shared by the base implementation and the exception-host overrides.\n   */\n  protected writeMemoryBlocks(ctx: InstallContext, targets: MemoryTarget[]): ChangeRecord[] {\n    const changes: ChangeRecord[] = [];\n    const ledger = loadMemoryLedger(ctx.connector.id);\n    let ledgerMutated = false;\n\n    for (const target of targets) {\n      for (const entry of ctx.connector.memory ?? []) {\n        const blockId = `${ctx.connector.id}/${entry.name ?? \"memory\"}`;\n        const res = upsertManagedBlockFile(target.path, {\n          blockId,\n          connectorId: ctx.connector.id,\n          content: entry.content,\n          ...(target.commentStyle ? { commentStyle: target.commentStyle } : {}),\n          force: ctx.force ?? false,\n          dryRun: ctx.dryRun,\n        });\n        changes.push({\n          platform: this.id,\n          action: res.action,\n          path: target.path,\n          detail: `memory: ${res.detail} — ${target.reason}`,\n        });\n        if (res.backupPath) {\n          changes.push({\n            platform: this.id,\n            action: \"create\",\n            path: res.backupPath,\n            detail: \"backed up memory file before destructive change\",\n          });\n        }\n        const bytes = Buffer.byteLength(entry.content, \"utf8\");\n        if (bytes > MEMORY_CONTENT_SOFT_BUDGET_BYTES) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            path: target.path,\n            detail:\n              `memory entry \"${entry.name ?? \"memory\"}\" is ${bytes} bytes ` +\n              `(soft budget ${MEMORY_CONTENT_SOFT_BUDGET_BYTES}); this file is injected into ` +\n              `every prompt — keep guidance terse`,\n          });\n        }\n        if (res.action !== \"warn\") {\n          recordMemoryTarget(ledger, {\n            platform: this.id,\n            scope: ctx.scope,\n            path: target.path,\n            blockId,\n            createdFile: res.createdFile,\n            hash: res.hash,\n          });\n          ledgerMutated = true;\n        }\n      }\n      // Per-FILE budget (e.g. codex caps combined project docs at 32 KiB —\n      // budgetBytes ≈ 28 KiB leaves headroom): warn when the whole target file\n      // (user content + every block) outgrows what the host will actually load.\n      if (target.budgetBytes !== undefined && !ctx.dryRun && existsSync(target.path)) {\n        const fileBytes = statSync(target.path).size;\n        if (fileBytes > target.budgetBytes) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            path: target.path,\n            detail:\n              `memory file is ${fileBytes} bytes — over this host's ~${target.budgetBytes}-byte ` +\n              `budget; the host may truncate or drop it`,\n          });\n        }\n      }\n    }\n\n    if (ledgerMutated && !ctx.dryRun) saveMemoryLedger(ctx.connector.id, ledger);\n    return changes;\n  }\n\n  uninstallMemory(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (!(this.capabilities.supportsMemory ?? false)) {\n      // Nothing could ever have been written by a non-supporting adapter.\n      return this.unsupportedSurface(ctx, \"memory\", (connector.memory ?? []).length);\n    }\n\n    // Candidate files = union of (a) memoryTargets recomputed NOW (probe re-run\n    // — catches teammate machines with no ledger; the markers in the committed\n    // file are the source of truth) and (b) ledger rows for this platform from\n    // EVERY scope (catches a scope flag that differs from install time).\n    const ledger = loadMemoryLedger(connector.id);\n    const mine = ledger.targets.filter((t) => t.platform === this.id);\n    const candidates = new Map<string, { createdFile: boolean }>();\n    if (ctx.scope === \"project\" || ctx.scope === \"user\") {\n      for (const t of this.memoryTargets(ctx)) {\n        candidates.set(t.path, { createdFile: false });\n      }\n    }\n    for (const row of mine) {\n      const existing = candidates.get(row.path);\n      candidates.set(row.path, { createdFile: (existing?.createdFile ?? false) || row.createdFile });\n    }\n    if (candidates.size === 0) {\n      return [\n        { platform: this.id, action: \"skip\", detail: `no memory targets to clean on ${this.id}` },\n      ];\n    }\n\n    // Prefix scan (`<connectorId>/`), NOT the declared entry list: renamed or\n    // removed entries and stale blocks from older versions are reclaimed too.\n    const changes: ChangeRecord[] = [];\n    for (const [path, { createdFile }] of candidates) {\n      const results = removeManagedBlocksFile(\n        path,\n        { blockIdPrefix: `${connector.id}/` },\n        { dryRun: ctx.dryRun, deleteFileIfCreated: createdFile },\n      );\n      for (const r of results) {\n        changes.push({\n          platform: this.id,\n          action: r.action,\n          path: r.path,\n          detail: `memory: ${r.detail}`,\n        });\n        if (r.backupPath) {\n          changes.push({\n            platform: this.id,\n            action: \"create\",\n            path: r.backupPath,\n            detail: \"backed up memory file before block removal\",\n          });\n        }\n      }\n    }\n\n    // Prune this connector's ledger rows for this platform (the file itself is\n    // deleted when no rows remain). Markers stay the uninstall source of truth.\n    if (!ctx.dryRun && mine.length > 0) {\n      ledger.targets = ledger.targets.filter((t) => t.platform !== this.id);\n      saveMemoryLedger(connector.id, ledger);\n    }\n    return changes;\n  }\n\n  /**\n   * Doctor: per-ledger-row memory state for this platform — file present,\n   * block present, and recorded-vs-actual inner hash (drift → warn, the\n   * user edited inside our block; sync reports the same drift and never\n   * clobbers it without --force).\n   */\n  protected memoryDiagnostics(ctx: InstallContext): DiagnosticResult[] {\n    const results: DiagnosticResult[] = [];\n    const rows = loadMemoryLedger(ctx.connector.id).targets.filter(\n      (t) => t.platform === this.id,\n    );\n    for (const row of rows) {\n      const check = `${this.name}: memory block ${row.blockId}`;\n      if (!existsSync(row.path)) {\n        results.push({\n          check,\n          status: \"warn\",\n          message: `memory file missing: ${row.path}`,\n          fix: \"agent-connector install (sync) will re-create the block\",\n          fixable: true,\n        });\n        continue;\n      }\n      let raw: string;\n      try {\n        raw = readFileSync(row.path, \"utf8\");\n      } catch {\n        results.push({ check, status: \"warn\", message: `cannot read ${row.path}` });\n        continue;\n      }\n      const block = listManagedBlocks(raw).find((b) => b.blockId === row.blockId);\n      if (!block) {\n        results.push({\n          check,\n          status: \"warn\",\n          message: `managed block not found in ${row.path}`,\n          fix: \"agent-connector install (sync) will re-append it\",\n          fixable: true,\n        });\n      } else if (block.drifted) {\n        results.push({\n          check,\n          status: \"warn\",\n          message:\n            `user-edited: inner content hash ${block.actualHash} differs from recorded ` +\n            `${block.recordedHash} in ${row.path}; sync leaves it intact (use --force to overwrite)`,\n        });\n      } else {\n        results.push({ check, status: \"pass\", message: `intact in ${row.path}` });\n      }\n      // Shadow-flip probe: re-run memoryTargets NOW for the row's scope — if\n      // the host's resolution moved (a WARP.md / AGENTS.override.md / .rules /\n      // .hermes.md appeared, gemini context.fileName changed), the written\n      // block sits in a file the host no longer reads. The #1 wrong-file\n      // risk; doctor is the detection layer.\n      // (`_shared/` bridge rows deliberately live OUTSIDE memoryTargets —\n      // e.g. claude-code's @AGENTS.md import in CLAUDE.md — skip those.)\n      if (\n        !row.blockId.startsWith(\"_shared/\") &&\n        row.scope === ctx.scope &&\n        (ctx.scope === \"project\" || ctx.scope === \"user\")\n      ) {\n        const current = this.memoryTargets(ctx);\n        if (current.length > 0 && !current.some((t) => t.path === row.path)) {\n          results.push({\n            check,\n            status: \"warn\",\n            message:\n              `${this.id} now resolves its ${row.scope}-scope memory file to ` +\n              `${current[0]!.path} (${current[0]!.reason}) — the block in ${row.path} ` +\n              `may no longer be read`,\n            fix: \"agent-connector install (sync) re-probes and writes the file the host reads now\",\n            fixable: true,\n          });\n        }\n      }\n    }\n    return results;\n  }\n\n  // ── Declarative host-config key patches (configPatch) ─────────────────────\n  // CONCRETE (overridable) defaults, mirroring the content surfaces above: the\n  // installer additionally guards these behind capabilities.supportsConfigPatch\n  // (the nativeHooks precedent), so these defaults only fire if a capability-\n  // flagged adapter forgot to override them — still skip-warn, never silent.\n\n  installConfigPatches(ctx: InstallContext): ChangeRecord[] {\n    const count = (ctx.connector.platforms[this.id]?.configPatch ?? []).length;\n    if (count === 0) {\n      return [\n        { platform: this.id, action: \"skip\", detail: \"connector declares no configPatch entries\" },\n      ];\n    }\n    return [\n      {\n        platform: this.id,\n        action: \"warn\",\n        detail: `configPatch not supported on ${this.id}; ${count} skipped`,\n      },\n    ];\n  }\n\n  uninstallConfigPatches(_ctx: InstallContext): ChangeRecord[] {\n    // Nothing was ever applied by a non-supporting adapter → nothing to release.\n    return [];\n  }\n\n  // ── Statusline surface (a HUD/status line) ────────────────────────────────\n  // CONCRETE (overridable) defaults, mirroring the content surfaces: the\n  // installer calls these unconditionally (BaseAdapter defines them), and they\n  // self-skip when the connector declares no statusline, else skip-warn on a\n  // non-supporting host. Only claude-code overrides them today.\n\n  installStatusline(ctx: InstallContext): ChangeRecord[] {\n    if (ctx.connector.statusline == null) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no statusline\" }];\n    }\n    if (ctx.connector.platforms[this.id]?.statusline === false) {\n      return [{ platform: this.id, action: \"skip\", detail: `statusline disabled for ${this.id}` }];\n    }\n    if (!(this.capabilities.supportsStatusline ?? false)) {\n      return this.unsupportedSurface(ctx, \"statusline\", 1);\n    }\n    // A supporting adapter must override this; the default is the same skip-warn\n    // safety net the configPatch defaults provide (never silent).\n    return this.unsupportedSurface(ctx, \"statusline\", 1);\n  }\n\n  uninstallStatusline(ctx: InstallContext): ChangeRecord[] {\n    if (ctx.connector.statusline == null) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no statusline\" }];\n    }\n    if (!(this.capabilities.supportsStatusline ?? false)) {\n      // Nothing could ever have been written by a non-supporting adapter.\n      return this.unsupportedSurface(ctx, \"statusline\", 1);\n    }\n    return this.unsupportedSurface(ctx, \"statusline\", 1);\n  }\n\n  // ── Action surface (a user-invokable action) ──────────────────────────────\n  // CONCRETE (overridable) defaults, mirroring the statusline pair. v1 ships\n  // ONLY the dispatch backbone: there is no verifiable host affordance to emit,\n  // so EVERY host honestly skip-warns and NO adapter overrides these. (`?? []`\n  // tolerates pre-resolved connectors from versions before the action surface\n  // existed, exactly like installMemory.)\n\n  installActions(ctx: InstallContext): ChangeRecord[] {\n    return this.unsupportedSurface(ctx, \"actions\", (ctx.connector.actions ?? []).length);\n  }\n  uninstallActions(ctx: InstallContext): ChangeRecord[] {\n    return this.unsupportedSurface(ctx, \"actions\", (ctx.connector.actions ?? []).length);\n  }\n\n  /**\n   * Shared, surface-agnostic helper for the action EMITTERS: yield one\n   * {@link ActionTrigger} per declared action, each carrying the home-bin verb\n   * command the host trigger must run\n   * (`<homeBin> action <host> <actionId> --connector <id>`, via\n   * {@link buildHomeBinActionCommand}) plus a `label`/`description` that fall\n   * back to the action id. Each supporting adapter iterates this and writes its\n   * host-native trigger (hermes quick_commands / warp workflow / droid exec\n   * file) — the per-host file shape is NOT this helper's concern, only the\n   * common (id, label, description, command) tuple. Callers own the standard\n   * guards (platforms[id].actions === false / empty actions).\n   */\n  protected actionTriggers(ctx: InstallContext): ActionTrigger[] {\n    return (ctx.connector.actions ?? []).map((action) => ({\n      id: action.id,\n      label: action.description ?? action.id,\n      description: action.description ?? action.id,\n      command: buildHomeBinActionCommand(\n        ctx.homeBinPath,\n        this.id,\n        action.id,\n        ctx.connector.id,\n      ),\n    }));\n  }\n\n  /**\n   * Default response for a content surface this platform cannot honor: a single\n   * skip when the connector declares none of that surface, else a single \"warn\"\n   * ChangeRecord noting how many were skipped. Mirrors mcp-only hook handling.\n   */\n  protected unsupportedSurface(\n    _ctx: InstallContext,\n    surface: ContentSurface,\n    count: number,\n  ): ChangeRecord[] {\n    if (count === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: `connector declares no ${surface}` }];\n    }\n    return [\n      {\n        platform: this.id,\n        action: \"warn\",\n        detail: `${surface} not supported on ${this.id}; ${count} skipped`,\n      },\n    ];\n  }\n\n  // ── Content-file helpers (used by surface-supporting adapters) ────────────\n\n  /**\n   * Write a content file idempotently: \"skip\" when the existing bytes are\n   * already identical, else \"create\"/\"update\". Creates parent dirs (mkdir -p).\n   * Honors dryRun (computes the action but writes nothing).\n   */\n  protected writeContentFile(path: string, contents: string, dryRun: boolean): ChangeRecord {\n    let action: ChangeRecord[\"action\"];\n    if (!existsSync(path)) {\n      action = \"create\";\n    } else {\n      let current: string | null = null;\n      try {\n        current = readFileSync(path, \"utf8\");\n      } catch {\n        current = null;\n      }\n      action = current === contents ? \"skip\" : \"update\";\n    }\n    if (action !== \"skip\" && !dryRun) {\n      ensureDir(dirname(path));\n      writeFileSync(path, contents, \"utf8\");\n    }\n    return { platform: this.id, action, path, detail: basename(path) };\n  }\n\n  /**\n   * Remove a content file we wrote; \"skip\" when already absent. Honors dryRun.\n   * Uses rmSync with `force` to also tolerate a path that is a directory tree\n   * (e.g. a skill folder removed by the supporting adapter).\n   */\n  protected removeContentFile(path: string, dryRun: boolean): ChangeRecord {\n    if (!existsSync(path)) {\n      return { platform: this.id, action: \"skip\", path, detail: `${basename(path)} absent` };\n    }\n    if (!dryRun) {\n      rmSync(path, { recursive: true, force: true });\n    }\n    return { platform: this.id, action: \"remove\", path, detail: basename(path) };\n  }\n\n  /**\n   * Defense-in-depth path containment: resolve `rel` against `baseDir` and\n   * return the absolute path ONLY when it stays inside `baseDir`. Returns null\n   * when `rel` escapes (absolute path, `..` traversal, etc.) so a caller can\n   * skip-and-warn rather than write/delete outside the surface dir. This is the\n   * runtime backstop behind the config-time validation in normalizeSkills.\n   */\n  protected resolveWithin(baseDir: string, rel: string): string | null {\n    const base = resolve(baseDir);\n    const target = resolve(base, rel);\n    if (target === base) return null; // rel resolved to the dir itself (e.g. \"\" / \".\")\n    const rind = relative(base, target);\n    // Outside when the relative path climbs out (`..`) or is itself absolute.\n    if (rind === \"\" || rind.startsWith(\"..\") || resolve(base, rind) !== target) {\n      return null;\n    }\n    if (rind === \"..\" || rind.startsWith(`..${sep}`)) return null;\n    return target;\n  }\n\n  /**\n   * Recursively report whether a directory tree contains any regular FILE (vs\n   * only empty/nested-empty subdirectories). Symlinks count as files (we never\n   * recurse through them). Used by removeDirIfEmpty to decide if a tree is safe\n   * to drop. An unreadable entry is treated as \"a file is present\" (conservative).\n   */\n  private dirTreeHasFile(dir: string): boolean {\n    let entries: Dirent[];\n    try {\n      entries = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      return true; // unreadable → assume it holds data; do not remove\n    }\n    for (const e of entries) {\n      if (e.isDirectory()) {\n        if (this.dirTreeHasFile(join(dir, e.name))) return true;\n      } else {\n        return true; // a file / symlink / special → the tree is not \"empty\"\n      }\n    }\n    return false;\n  }\n\n  /**\n   * Remove a directory ONLY when its tree holds NO regular files — i.e. it is\n   * empty or contains only (nested) empty directories, such as the intermediate\n   * dirs our own nested skill resources created. Replaces the unconditional\n   * `rm -rf <dir>` that uninstallSkills used to call, which destroyed user-added\n   * files / sibling-tool files / shared skill dirs the connector never wrote.\n   * When ANY file remains (at any depth) the whole tree is left in place and the\n   * skip is noted. Honors dryRun (computes the action but removes nothing). A\n   * missing dir is a no-op \"skip\".\n   */\n  protected removeDirIfEmpty(dir: string, dryRun: boolean): ChangeRecord {\n    if (!existsSync(dir)) {\n      return { platform: this.id, action: \"skip\", path: dir, detail: `${basename(dir)} absent` };\n    }\n    let stat: ReturnType<typeof statSync>;\n    try {\n      stat = statSync(dir);\n    } catch {\n      return {\n        platform: this.id,\n        action: \"skip\",\n        path: dir,\n        detail: `${basename(dir)} unreadable; left in place`,\n      };\n    }\n    if (!stat.isDirectory()) {\n      return {\n        platform: this.id,\n        action: \"skip\",\n        path: dir,\n        detail: `${basename(dir)} not a directory; left in place`,\n      };\n    }\n    if (this.dirTreeHasFile(dir)) {\n      return {\n        platform: this.id,\n        action: \"skip\",\n        path: dir,\n        detail: `${basename(dir)} still holds files we did not write; left in place`,\n      };\n    }\n    if (!dryRun) {\n      try {\n        // The tree is files-free: only (possibly nested) empty dirs remain, which\n        // are ours / inert. A recursive remove drops them without touching data.\n        rmSync(dir, { recursive: true, force: true });\n      } catch {\n        // Lost a race or perms — non-fatal; report as a skip.\n        return {\n          platform: this.id,\n          action: \"skip\",\n          path: dir,\n          detail: `${basename(dir)} could not be removed; left in place`,\n        };\n      }\n    }\n    return { platform: this.id, action: \"remove\", path: dir, detail: basename(dir) };\n  }\n\n  /**\n   * Render a YAML-frontmatter + markdown body document:\n   *   \"---\\n\" + <yaml> + \"---\\n\\n\" + <body> + \"\\n\".\n   * Delegates to the shared renderer (adapters/claude-code/render) so every\n   * content-file path — adapters AND the plugin packager — emits identical bytes.\n   */\n  protected renderFrontmatterMd(\n    frontmatter: Record<string, unknown>,\n    body: string,\n  ): string {\n    return renderFrontmatterMd(frontmatter, body);\n  }\n\n  // ── JSON config helpers (used by JSON-format adapters) ───────────────────\n\n  /**\n   * Read + parse a JSON/JSONC config file, returning null when it is absent OR\n   * unparseable. Parses TOLERANTLY via parseJsonc (strips // and /* *\\/ comments\n   * and trailing commas) so a perfectly valid JSONC file never false-fails to\n   * null — that null is what `?? {}` would otherwise turn into a clobbering\n   * overwrite of the user's whole config.\n   */\n  protected readJson<T = Record<string, unknown>>(path: string): T | null {\n    if (!existsSync(path)) return null;\n    try {\n      return parseJsonc<T>(readFileSync(path, \"utf8\"));\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * True when `path` exists and holds non-whitespace content but readJson cannot\n   * parse it (even after JSONC stripping). The overwrite guard: writing a\n   * `{}`-based config over a present-but-broken settings file would silently\n   * destroy the user's data, so callers warn-and-skip instead.\n   */\n  protected isPresentButUnparseable(path: string): boolean {\n    if (!existsSync(path)) return false;\n    let raw: string;\n    try {\n      if (statSync(path).size === 0) return false;\n      raw = readFileSync(path, \"utf8\");\n    } catch {\n      return false;\n    }\n    if (raw.trim() === \"\") return false;\n    return this.readJson(path) === null;\n  }\n\n  protected writeJson(path: string, data: unknown, dryRun = false): void {\n    if (dryRun) return;\n    ensureDir(dirname(path));\n    writeFileSync(path, `${JSON.stringify(data, null, 2)}\\n`, \"utf8\");\n  }\n\n  /**\n   * Upsert `entry` at `config[rootKey][serverId]` in a JSON file, creating the\n   * file/object as needed. Returns a ChangeRecord describing create/update/skip.\n   * Idempotent: an identical entry yields \"skip\".\n   */\n  protected upsertServerInJson(\n    configPath: string,\n    rootKey: string,\n    serverId: string,\n    entry: unknown,\n    dryRun = false,\n  ): ChangeRecord {\n    // OVERWRITE GUARD: never replace a present, non-empty, unparseable settings\n    // file with a `{}`-based config — that would silently destroy the user's\n    // data. Warn and skip so they can back it up / fix it and re-run.\n    if (this.isPresentButUnparseable(configPath)) {\n      return {\n        platform: this.id,\n        action: \"warn\",\n        path: configPath,\n        detail: `existing ${configPath} is not parseable; left untouched (back it up / fix it, then re-run)`,\n      };\n    }\n    const cfg = this.readJson<Record<string, Record<string, unknown>>>(configPath) ?? {};\n    const bucket = (cfg[rootKey] ??= {});\n    const before = JSON.stringify(bucket[serverId]);\n    const after = JSON.stringify(entry);\n    let action: ChangeRecord[\"action\"];\n    if (before === undefined) action = \"create\";\n    else if (before === after) action = \"skip\";\n    else action = \"update\";\n    if (action !== \"skip\") {\n      bucket[serverId] = entry;\n      this.writeJson(configPath, cfg, dryRun);\n    }\n    return { platform: this.id, action, path: configPath, detail: `${rootKey}.${serverId}` };\n  }\n\n  /** Remove `config[rootKey][serverId]` from a JSON file. */\n  protected removeServerFromJson(\n    configPath: string,\n    rootKey: string,\n    serverId: string,\n    dryRun = false,\n  ): ChangeRecord {\n    // OVERWRITE GUARD (see upsertServerInJson): a present-but-unparseable file\n    // would round-trip to `{}` and erase the user's config, so warn and skip.\n    if (this.isPresentButUnparseable(configPath)) {\n      return {\n        platform: this.id,\n        action: \"warn\",\n        path: configPath,\n        detail: `existing ${configPath} is not parseable; left untouched (back it up / fix it, then re-run)`,\n      };\n    }\n    const cfg = this.readJson<Record<string, Record<string, unknown>>>(configPath);\n    const bucket = cfg?.[rootKey];\n    if (!cfg || !bucket || !(serverId in bucket)) {\n      return { platform: this.id, action: \"skip\", path: configPath, detail: `${rootKey}.${serverId} absent` };\n    }\n    delete bucket[serverId];\n    this.writeJson(configPath, cfg, dryRun);\n    return { platform: this.id, action: \"remove\", path: configPath, detail: `${rootKey}.${serverId}` };\n  }\n\n  // ── Backup ───────────────────────────────────────────────────────────────\n\n  backupSettings(ctx: InstallContext): string | null {\n    const files = [...new Set([this.getServerConfigPath(ctx), this.getHookConfigPath(ctx)])].filter(\n      (f) => existsSync(f),\n    );\n    if (files.length === 0) return null;\n    if (ctx.dryRun) return null;\n    ensureDir(backupsDir());\n    const stamp = new Date().toISOString().replace(/[:.]/g, \"-\");\n    let last: string | null = null;\n    for (const f of files) {\n      const dest = join(backupsDir(), `${this.id}-${stamp}-${basename(f)}`);\n      copyFileSync(f, dest);\n      last = dest;\n    }\n    return last;\n  }\n\n  // ── Diagnostics ─────────────────────────────────────────────────────────\n\n  getHealthChecks?(ctx: InstallContext): readonly HealthCheck[];\n\n  doctor(ctx: InstallContext): DiagnosticResult[] {\n    const results: DiagnosticResult[] = [];\n    const cfg = this.getServerConfigPath(ctx);\n    results.push(\n      existsSync(cfg)\n        ? { check: `${this.name}: config present`, status: \"pass\", message: cfg }\n        : {\n            check: `${this.name}: config present`,\n            status: \"warn\",\n            message: `not found: ${cfg}`,\n            fix: `agent-connector install --targets ${this.id}`,\n            // Only sync-recoverable when the connector actually declares a\n            // server — a re-sync writes the config file only then. For a\n            // serverless (memory/configPatch-only) connector the file is never\n            // created, so marking it fixable would loop it into \"still failing\".\n            fixable: !!ctx.connector.server,\n          },\n    );\n    for (const hc of this.getHealthChecks?.(ctx) ?? []) {\n      const r = hc.check();\n      results.push({\n        check: hc.name,\n        status: r.status === \"OK\" ? \"pass\" : \"fail\",\n        message: r.detail ?? r.status,\n      });\n    }\n    // Memory-surface checks are ledger-driven: no installed memory → no rows →\n    // no noise. Shared by every adapter (the overrides call super.doctor()).\n    results.push(...this.memoryDiagnostics(ctx));\n    return results;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA4BO,SAAS,WAAW,MAAsB;AAC/C,QAAM,IAAI,KAAK;AACf,MAAI,MAAM;AACV,MAAI,IAAI;AACR,MAAI,WAAW;AACf,MAAI,QAAQ;AAEZ,SAAO,IAAI,GAAG;AACZ,UAAM,KAAK,KAAK,CAAC;AAEjB,QAAI,UAAU;AACZ,aAAO;AACP,UAAI,OAAO,MAAM;AAEf,YAAI,IAAI,IAAI,GAAG;AACb,iBAAO,KAAK,IAAI,CAAC;AACjB,eAAK;AACL;AAAA,QACF;AAAA,MACF,WAAW,OAAO,OAAO;AACvB,mBAAW;AAAA,MACb;AACA,WAAK;AACL;AAAA,IACF;AAEA,UAAM,OAAO,IAAI,IAAI,IAAK,KAAK,IAAI,CAAC,IAAe;AAGnD,QAAI,OAAO,OAAO,OAAO,KAAK;AAC5B,iBAAW;AACX,cAAQ;AACR,aAAO;AACP,WAAK;AACL;AAAA,IACF;AAGA,QAAI,OAAO,OAAO,SAAS,KAAK;AAC9B,WAAK;AACL,aAAO,IAAI,KAAK,KAAK,CAAC,MAAM,KAAM,MAAK;AACvC;AAAA,IACF;AAGA,QAAI,OAAO,OAAO,SAAS,KAAK;AAC9B,WAAK;AACL,aAAO,IAAI,KAAK,EAAE,KAAK,CAAC,MAAM,OAAO,KAAK,IAAI,CAAC,MAAM,KAAM,MAAK;AAChE,WAAK;AACL;AAAA,IACF;AAKA,QAAI,OAAO,KAAK;AACd,YAAM,SAAS,gBAAgB,MAAM,IAAI,CAAC;AAC1C,UAAI,WAAW,OAAO,WAAW,KAAK;AACpC,aAAK;AACL;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AACP,SAAK;AAAA,EACP;AAEA,SAAO;AACT;AAMA,SAAS,gBAAgB,MAAc,MAAsB;AAC3D,QAAM,IAAI,KAAK;AACf,MAAI,IAAI;AACR,SAAO,IAAI,GAAG;AACZ,UAAM,KAAK,KAAK,CAAC;AACjB,QAAI,OAAO,OAAO,OAAO,OAAQ,OAAO,QAAQ,OAAO,MAAM;AAC3D,WAAK;AACL;AAAA,IACF;AACA,UAAM,OAAO,IAAI,IAAI,IAAK,KAAK,IAAI,CAAC,IAAe;AACnD,QAAI,OAAO,OAAO,SAAS,KAAK;AAC9B,WAAK;AACL,aAAO,IAAI,KAAK,KAAK,CAAC,MAAM,KAAM,MAAK;AACvC;AAAA,IACF;AACA,QAAI,OAAO,OAAO,SAAS,KAAK;AAC9B,WAAK;AACL,aAAO,IAAI,KAAK,EAAE,KAAK,CAAC,MAAM,OAAO,KAAK,IAAI,CAAC,MAAM,KAAM,MAAK;AAChE,WAAK;AACL;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAOO,SAAS,WAAwB,MAAiB;AACvD,SAAO,KAAK,MAAM,WAAW,IAAI,CAAC;AACpC;;;AC9HA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,eAAe;AACxB,SAAS,UAAU,SAAS,YAAY,MAAM,UAAU,SAAS,WAAW;AAgE5E,IAAM,uBAAwE;AAAA;AAAA;AAAA,EAG5E,KAAK,OAAO;AAAA,IACV,MACE,QAAQ,aAAa,WAAW,QAAQ,IAAI,UACxC,KAAK,QAAQ,IAAI,SAAS,OAAO,WAAW,IAC5C,KAAK,QAAQ,GAAG,WAAW,OAAO,WAAW;AAAA,IACnD,QAAQ;AAAA,EACV;AAAA,EACA,KAAK,OAAO;AAAA,IACV,MAAM,KAAK,QAAQ,GAAG,WAAW,OAAO,WAAW;AAAA,IACnD,QAAQ;AAAA,EACV;AAAA,EACA,KAAK,OAAO;AAAA,IACV,MAAM,KAAK,QAAQ,GAAG,QAAQ,WAAW;AAAA,IACzC,QAAQ;AAAA,EACV;AAAA,EACA,IAAI,OAAO;AAAA,IACT,MAAM,KAAK,QAAQ,GAAG,OAAO,SAAS,WAAW;AAAA,IACjD,QAAQ;AAAA,EACV;AAAA,EACA,OAAO,OAAO;AAAA,IACZ,MAAM,KAAK,QAAQ,GAAG,YAAY,WAAW;AAAA,IAC7C,QAAQ;AAAA,EACV;AAAA,EACA,UAAU,OAAO;AAAA,IACf,MAAM,KAAK,QAAQ,GAAG,WAAW,YAAY,WAAW;AAAA,IACxD,QAAQ;AAAA,EACV;AAAA,EACA,aAAa,OAAO;AAAA,IAClB,MAAM,KAAK,QAAQ,GAAG,WAAW,WAAW;AAAA,IAC5C,QAAQ;AAAA,EACV;AAAA,EACA,mBAAmB,OAAO;AAAA,IACxB,MAAM,KAAK,QAAQ,GAAG,WAAW,WAAW;AAAA,IAC5C,QAAQ;AAAA,EACV;AAAA,EACA,KAAK,OAAO;AAAA,IACV,MAAM,KAAK,QAAQ,GAAG,QAAQ,SAAS,WAAW;AAAA,IAClD,QAAQ;AAAA,EACV;AACF;AAEO,IAAe,cAAf,MAA8C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsBnD,gBAAgB,KAAqC;AACnD,WAAO,KAAK,mBAAmB,KAAK,YAAY,IAAI,UAAU,SAAS,MAAM;AAAA,EAC/E;AAAA,EACA,kBAAkB,KAAqC;AACrD,WAAO,KAAK,mBAAmB,KAAK,YAAY,IAAI,UAAU,SAAS,MAAM;AAAA,EAC/E;AAAA,EACA,cAAc,KAAqC;AACjD,WAAO,KAAK,mBAAmB,KAAK,UAAU,IAAI,UAAU,OAAO,MAAM;AAAA,EAC3E;AAAA,EACA,gBAAgB,KAAqC;AACnD,WAAO,KAAK,mBAAmB,KAAK,UAAU,IAAI,UAAU,OAAO,MAAM;AAAA,EAC3E;AAAA,EACA,iBAAiB,KAAqC;AACpD,WAAO,KAAK,mBAAmB,KAAK,aAAa,IAAI,UAAU,UAAU,MAAM;AAAA,EACjF;AAAA,EACA,mBAAmB,KAAqC;AACtD,WAAO,KAAK,mBAAmB,KAAK,aAAa,IAAI,UAAU,UAAU,MAAM;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBU,cAAc,KAAqC;AAC3D,UAAM,WAAW,KAAK,eAAe,GAAG;AACxC,QAAI,UAAU,MAAM;AAClB,YAAM,OAAO,IAAI,UAAU,YAAY,IAAI,aAAa,QAAQ;AAChE,aAAO;AAAA,QACL;AAAA,UACE,MAAM,WAAW,SAAS,IAAI,IAAI,SAAS,OAAO,KAAK,MAAM,SAAS,IAAI;AAAA,UAC1E,QAAQ,aAAa,KAAK,EAAE;AAAA,QAC9B;AAAA,MACF;AAAA,IACF;AACA,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO;AAAA,QACL,EAAE,MAAM,KAAK,IAAI,YAAY,WAAW,GAAG,QAAQ,oCAAoC;AAAA,MACzF;AAAA,IACF;AACA,QAAI,IAAI,UAAU,QAAQ;AACxB,YAAM,OAAO,qBAAqB,KAAK,EAAE,IAAI;AAC7C,aAAO,OAAO,CAAC,IAAI,IAAI,CAAC;AAAA,IAC1B;AACA,WAAO,CAAC;AAAA,EACV;AAAA;AAAA,EAGU,eAAe,KAAyD;AAChF,UAAM,IAAI,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG;AAC5C,WAAO,KAAK,OAAO,MAAM,WAAW,IAAI;AAAA,EAC1C;AAAA,EAEA,cAAc,KAAqC;AACjD,UAAM,EAAE,UAAU,IAAI;AAGtB,UAAM,UAAU,UAAU,UAAU,CAAC;AACrC,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,WAAW,OAAO;AAClD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,uBAAuB,KAAK,EAAE,GAAG,CAAC;AAAA,IACzF;AACA,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,QAAI,EAAE,KAAK,aAAa,kBAAkB,QAAQ;AAChD,aAAO,KAAK,mBAAmB,KAAK,UAAU,QAAQ,MAAM;AAAA,IAC9D;AAEA,UAAM,UAA0B,CAAC;AACjC,UAAM,WAAW,KAAK,eAAe,GAAG;AACxC,QAAI,UAAU,QAAQ,KAAK,OAAO,eAAe;AAC/C,cAAQ,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ,+CAA+C,KAAK,EAAE;AAAA,MAChE,CAAC;AAAA,IACH;AACA,QAAI,IAAI,UAAU,aAAa,IAAI,UAAU,QAAQ;AAEnD,cAAQ,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QACE,2BAA2B,IAAI,KAAK,aAAa,KAAK,EAAE,mDACN,QAAQ,MAAM;AAAA,MACpE,CAAC;AACD,aAAO;AAAA,IACT;AACA,UAAM,UAAU,KAAK,cAAc,GAAG;AACtC,QAAI,QAAQ,WAAW,GAAG;AACxB,cAAQ,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QACE,MAAM,IAAI,KAAK,yBAAyB,KAAK,EAAE,qDACK,QAAQ,MAAM;AAAA,MACtE,CAAC;AACD,aAAO;AAAA,IACT;AACA,YAAQ,KAAK,GAAG,KAAK,kBAAkB,KAAK,OAAO,CAAC;AACpD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOU,kBAAkB,KAAqB,SAAyC;AACxF,UAAM,UAA0B,CAAC;AACjC,UAAM,SAAS,iBAAiB,IAAI,UAAU,EAAE;AAChD,QAAI,gBAAgB;AAEpB,eAAW,UAAU,SAAS;AAC5B,iBAAW,SAAS,IAAI,UAAU,UAAU,CAAC,GAAG;AAC9C,cAAM,UAAU,GAAG,IAAI,UAAU,EAAE,IAAI,MAAM,QAAQ,QAAQ;AAC7D,cAAM,MAAM,uBAAuB,OAAO,MAAM;AAAA,UAC9C;AAAA,UACA,aAAa,IAAI,UAAU;AAAA,UAC3B,SAAS,MAAM;AAAA,UACf,GAAI,OAAO,eAAe,EAAE,cAAc,OAAO,aAAa,IAAI,CAAC;AAAA,UACnE,OAAO,IAAI,SAAS;AAAA,UACpB,QAAQ,IAAI;AAAA,QACd,CAAC;AACD,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ,IAAI;AAAA,UACZ,MAAM,OAAO;AAAA,UACb,QAAQ,WAAW,IAAI,MAAM,WAAM,OAAO,MAAM;AAAA,QAClD,CAAC;AACD,YAAI,IAAI,YAAY;AAClB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM,IAAI;AAAA,YACV,QAAQ;AAAA,UACV,CAAC;AAAA,QACH;AACA,cAAM,QAAQ,OAAO,WAAW,MAAM,SAAS,MAAM;AACrD,YAAI,QAAQ,kCAAkC;AAC5C,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM,OAAO;AAAA,YACb,QACE,iBAAiB,MAAM,QAAQ,QAAQ,QAAQ,KAAK,uBACpC,gCAAgC;AAAA,UAEpD,CAAC;AAAA,QACH;AACA,YAAI,IAAI,WAAW,QAAQ;AACzB,6BAAmB,QAAQ;AAAA,YACzB,UAAU,KAAK;AAAA,YACf,OAAO,IAAI;AAAA,YACX,MAAM,OAAO;AAAA,YACb;AAAA,YACA,aAAa,IAAI;AAAA,YACjB,MAAM,IAAI;AAAA,UACZ,CAAC;AACD,0BAAgB;AAAA,QAClB;AAAA,MACF;AAIA,UAAI,OAAO,gBAAgB,UAAa,CAAC,IAAI,UAAU,WAAW,OAAO,IAAI,GAAG;AAC9E,cAAM,YAAY,SAAS,OAAO,IAAI,EAAE;AACxC,YAAI,YAAY,OAAO,aAAa;AAClC,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM,OAAO;AAAA,YACb,QACE,kBAAkB,SAAS,mCAA8B,OAAO,WAAW;AAAA,UAE/E,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,QAAI,iBAAiB,CAAC,IAAI,OAAQ,kBAAiB,IAAI,UAAU,IAAI,MAAM;AAC3E,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,KAAqC;AACnD,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,EAAE,KAAK,aAAa,kBAAkB,QAAQ;AAEhD,aAAO,KAAK,mBAAmB,KAAK,WAAW,UAAU,UAAU,CAAC,GAAG,MAAM;AAAA,IAC/E;AAMA,UAAM,SAAS,iBAAiB,UAAU,EAAE;AAC5C,UAAM,OAAO,OAAO,QAAQ,OAAO,CAAC,MAAM,EAAE,aAAa,KAAK,EAAE;AAChE,UAAM,aAAa,oBAAI,IAAsC;AAC7D,QAAI,IAAI,UAAU,aAAa,IAAI,UAAU,QAAQ;AACnD,iBAAW,KAAK,KAAK,cAAc,GAAG,GAAG;AACvC,mBAAW,IAAI,EAAE,MAAM,EAAE,aAAa,MAAM,CAAC;AAAA,MAC/C;AAAA,IACF;AACA,eAAW,OAAO,MAAM;AACtB,YAAM,WAAW,WAAW,IAAI,IAAI,IAAI;AACxC,iBAAW,IAAI,IAAI,MAAM,EAAE,cAAc,UAAU,eAAe,UAAU,IAAI,YAAY,CAAC;AAAA,IAC/F;AACA,QAAI,WAAW,SAAS,GAAG;AACzB,aAAO;AAAA,QACL,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,KAAK,EAAE,GAAG;AAAA,MAC1F;AAAA,IACF;AAIA,UAAM,UAA0B,CAAC;AACjC,eAAW,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,YAAY;AAChD,YAAM,UAAU;AAAA,QACd;AAAA,QACA,EAAE,eAAe,GAAG,UAAU,EAAE,IAAI;AAAA,QACpC,EAAE,QAAQ,IAAI,QAAQ,qBAAqB,YAAY;AAAA,MACzD;AACA,iBAAW,KAAK,SAAS;AACvB,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ,EAAE;AAAA,UACV,MAAM,EAAE;AAAA,UACR,QAAQ,WAAW,EAAE,MAAM;AAAA,QAC7B,CAAC;AACD,YAAI,EAAE,YAAY;AAChB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM,EAAE;AAAA,YACR,QAAQ;AAAA,UACV,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAIA,QAAI,CAAC,IAAI,UAAU,KAAK,SAAS,GAAG;AAClC,aAAO,UAAU,OAAO,QAAQ,OAAO,CAAC,MAAM,EAAE,aAAa,KAAK,EAAE;AACpE,uBAAiB,UAAU,IAAI,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQU,kBAAkB,KAAyC;AACnE,UAAM,UAA8B,CAAC;AACrC,UAAM,OAAO,iBAAiB,IAAI,UAAU,EAAE,EAAE,QAAQ;AAAA,MACtD,CAAC,MAAM,EAAE,aAAa,KAAK;AAAA,IAC7B;AACA,eAAW,OAAO,MAAM;AACtB,YAAM,QAAQ,GAAG,KAAK,IAAI,kBAAkB,IAAI,OAAO;AACvD,UAAI,CAAC,WAAW,IAAI,IAAI,GAAG;AACzB,gBAAQ,KAAK;AAAA,UACX;AAAA,UACA,QAAQ;AAAA,UACR,SAAS,wBAAwB,IAAI,IAAI;AAAA,UACzC,KAAK;AAAA,UACL,SAAS;AAAA,QACX,CAAC;AACD;AAAA,MACF;AACA,UAAI;AACJ,UAAI;AACF,cAAM,aAAa,IAAI,MAAM,MAAM;AAAA,MACrC,QAAQ;AACN,gBAAQ,KAAK,EAAE,OAAO,QAAQ,QAAQ,SAAS,eAAe,IAAI,IAAI,GAAG,CAAC;AAC1E;AAAA,MACF;AACA,YAAM,QAAQ,kBAAkB,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,IAAI,OAAO;AAC1E,UAAI,CAAC,OAAO;AACV,gBAAQ,KAAK;AAAA,UACX;AAAA,UACA,QAAQ;AAAA,UACR,SAAS,8BAA8B,IAAI,IAAI;AAAA,UAC/C,KAAK;AAAA,UACL,SAAS;AAAA,QACX,CAAC;AAAA,MACH,WAAW,MAAM,SAAS;AACxB,gBAAQ,KAAK;AAAA,UACX;AAAA,UACA,QAAQ;AAAA,UACR,SACE,mCAAmC,MAAM,UAAU,0BAChD,MAAM,YAAY,OAAO,IAAI,IAAI;AAAA,QACxC,CAAC;AAAA,MACH,OAAO;AACL,gBAAQ,KAAK,EAAE,OAAO,QAAQ,QAAQ,SAAS,aAAa,IAAI,IAAI,GAAG,CAAC;AAAA,MAC1E;AAQA,UACE,CAAC,IAAI,QAAQ,WAAW,UAAU,KAClC,IAAI,UAAU,IAAI,UACjB,IAAI,UAAU,aAAa,IAAI,UAAU,SAC1C;AACA,cAAM,UAAU,KAAK,cAAc,GAAG;AACtC,YAAI,QAAQ,SAAS,KAAK,CAAC,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI,GAAG;AACnE,kBAAQ,KAAK;AAAA,YACX;AAAA,YACA,QAAQ;AAAA,YACR,SACE,GAAG,KAAK,EAAE,qBAAqB,IAAI,KAAK,yBACrC,QAAQ,CAAC,EAAG,IAAI,KAAK,QAAQ,CAAC,EAAG,MAAM,yBAAoB,IAAI,IAAI;AAAA,YAExE,KAAK;AAAA,YACL,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,qBAAqB,KAAqC;AACxD,UAAM,SAAS,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG,eAAe,CAAC,GAAG;AACpE,QAAI,UAAU,GAAG;AACf,aAAO;AAAA,QACL,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,4CAA4C;AAAA,MAC3F;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,QACE,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ,gCAAgC,KAAK,EAAE,KAAK,KAAK;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AAAA,EAEA,uBAAuB,MAAsC;AAE3D,WAAO,CAAC;AAAA,EACV;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,kBAAkB,KAAqC;AACrD,QAAI,IAAI,UAAU,cAAc,MAAM;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,mCAAmC,CAAC;AAAA,IAC3F;AACA,QAAI,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG,eAAe,OAAO;AAC1D,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,2BAA2B,KAAK,EAAE,GAAG,CAAC;AAAA,IAC7F;AACA,QAAI,EAAE,KAAK,aAAa,sBAAsB,QAAQ;AACpD,aAAO,KAAK,mBAAmB,KAAK,cAAc,CAAC;AAAA,IACrD;AAGA,WAAO,KAAK,mBAAmB,KAAK,cAAc,CAAC;AAAA,EACrD;AAAA,EAEA,oBAAoB,KAAqC;AACvD,QAAI,IAAI,UAAU,cAAc,MAAM;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,mCAAmC,CAAC;AAAA,IAC3F;AACA,QAAI,EAAE,KAAK,aAAa,sBAAsB,QAAQ;AAEpD,aAAO,KAAK,mBAAmB,KAAK,cAAc,CAAC;AAAA,IACrD;AACA,WAAO,KAAK,mBAAmB,KAAK,cAAc,CAAC;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,eAAe,KAAqC;AAClD,WAAO,KAAK,mBAAmB,KAAK,YAAY,IAAI,UAAU,WAAW,CAAC,GAAG,MAAM;AAAA,EACrF;AAAA,EACA,iBAAiB,KAAqC;AACpD,WAAO,KAAK,mBAAmB,KAAK,YAAY,IAAI,UAAU,WAAW,CAAC,GAAG,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcU,eAAe,KAAsC;AAC7D,YAAQ,IAAI,UAAU,WAAW,CAAC,GAAG,IAAI,CAAC,YAAY;AAAA,MACpD,IAAI,OAAO;AAAA,MACX,OAAO,OAAO,eAAe,OAAO;AAAA,MACpC,aAAa,OAAO,eAAe,OAAO;AAAA,MAC1C,SAAS;AAAA,QACP,IAAI;AAAA,QACJ,KAAK;AAAA,QACL,OAAO;AAAA,QACP,IAAI,UAAU;AAAA,MAChB;AAAA,IACF,EAAE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOU,mBACR,MACA,SACA,OACgB;AAChB,QAAI,UAAU,GAAG;AACf,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,yBAAyB,OAAO,GAAG,CAAC;AAAA,IAC3F;AACA,WAAO;AAAA,MACL;AAAA,QACE,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ,GAAG,OAAO,qBAAqB,KAAK,EAAE,KAAK,KAAK;AAAA,MAC1D;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASU,iBAAiB,MAAc,UAAkB,QAA+B;AACxF,QAAI;AACJ,QAAI,CAAC,WAAW,IAAI,GAAG;AACrB,eAAS;AAAA,IACX,OAAO;AACL,UAAI,UAAyB;AAC7B,UAAI;AACF,kBAAU,aAAa,MAAM,MAAM;AAAA,MACrC,QAAQ;AACN,kBAAU;AAAA,MACZ;AACA,eAAS,YAAY,WAAW,SAAS;AAAA,IAC3C;AACA,QAAI,WAAW,UAAU,CAAC,QAAQ;AAChC,gBAAU,QAAQ,IAAI,CAAC;AACvB,oBAAc,MAAM,UAAU,MAAM;AAAA,IACtC;AACA,WAAO,EAAE,UAAU,KAAK,IAAI,QAAQ,MAAM,QAAQ,SAAS,IAAI,EAAE;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOU,kBAAkB,MAAc,QAA+B;AACvE,QAAI,CAAC,WAAW,IAAI,GAAG;AACrB,aAAO,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,GAAG,SAAS,IAAI,CAAC,UAAU;AAAA,IACvF;AACA,QAAI,CAAC,QAAQ;AACX,aAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IAC/C;AACA,WAAO,EAAE,UAAU,KAAK,IAAI,QAAQ,UAAU,MAAM,QAAQ,SAAS,IAAI,EAAE;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASU,cAAc,SAAiB,KAA4B;AACnE,UAAM,OAAO,QAAQ,OAAO;AAC5B,UAAM,SAAS,QAAQ,MAAM,GAAG;AAChC,QAAI,WAAW,KAAM,QAAO;AAC5B,UAAM,OAAO,SAAS,MAAM,MAAM;AAElC,QAAI,SAAS,MAAM,KAAK,WAAW,IAAI,KAAK,QAAQ,MAAM,IAAI,MAAM,QAAQ;AAC1E,aAAO;AAAA,IACT;AACA,QAAI,SAAS,QAAQ,KAAK,WAAW,KAAK,GAAG,EAAE,EAAG,QAAO;AACzD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,eAAe,KAAsB;AAC3C,QAAI;AACJ,QAAI;AACF,gBAAU,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IACpD,QAAQ;AACN,aAAO;AAAA,IACT;AACA,eAAW,KAAK,SAAS;AACvB,UAAI,EAAE,YAAY,GAAG;AACnB,YAAI,KAAK,eAAe,KAAK,KAAK,EAAE,IAAI,CAAC,EAAG,QAAO;AAAA,MACrD,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYU,iBAAiB,KAAa,QAA+B;AACrE,QAAI,CAAC,WAAW,GAAG,GAAG;AACpB,aAAO,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,KAAK,QAAQ,GAAG,SAAS,GAAG,CAAC,UAAU;AAAA,IAC3F;AACA,QAAI;AACJ,QAAI;AACF,aAAO,SAAS,GAAG;AAAA,IACrB,QAAQ;AACN,aAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ,GAAG,SAAS,GAAG,CAAC;AAAA,MAC1B;AAAA,IACF;AACA,QAAI,CAAC,KAAK,YAAY,GAAG;AACvB,aAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ,GAAG,SAAS,GAAG,CAAC;AAAA,MAC1B;AAAA,IACF;AACA,QAAI,KAAK,eAAe,GAAG,GAAG;AAC5B,aAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ,GAAG,SAAS,GAAG,CAAC;AAAA,MAC1B;AAAA,IACF;AACA,QAAI,CAAC,QAAQ;AACX,UAAI;AAGF,eAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,MAC9C,QAAQ;AAEN,eAAO;AAAA,UACL,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,GAAG,SAAS,GAAG,CAAC;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,UAAU,KAAK,IAAI,QAAQ,UAAU,MAAM,KAAK,QAAQ,SAAS,GAAG,EAAE;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQU,oBACR,aACA,MACQ;AACR,WAAO,oBAAoB,aAAa,IAAI;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWU,SAAsC,MAAwB;AACtE,QAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,QAAI;AACF,aAAO,WAAc,aAAa,MAAM,MAAM,CAAC;AAAA,IACjD,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQU,wBAAwB,MAAuB;AACvD,QAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,QAAI;AACJ,QAAI;AACF,UAAI,SAAS,IAAI,EAAE,SAAS,EAAG,QAAO;AACtC,YAAM,aAAa,MAAM,MAAM;AAAA,IACjC,QAAQ;AACN,aAAO;AAAA,IACT;AACA,QAAI,IAAI,KAAK,MAAM,GAAI,QAAO;AAC9B,WAAO,KAAK,SAAS,IAAI,MAAM;AAAA,EACjC;AAAA,EAEU,UAAU,MAAc,MAAe,SAAS,OAAa;AACrE,QAAI,OAAQ;AACZ,cAAU,QAAQ,IAAI,CAAC;AACvB,kBAAc,MAAM,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOU,mBACR,YACA,SACA,UACA,OACA,SAAS,OACK;AAId,QAAI,KAAK,wBAAwB,UAAU,GAAG;AAC5C,aAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ,YAAY,UAAU;AAAA,MAChC;AAAA,IACF;AACA,UAAM,MAAM,KAAK,SAAkD,UAAU,KAAK,CAAC;AACnF,UAAM,SAAU,IAAI,OAAO,MAAM,CAAC;AAClC,UAAM,SAAS,KAAK,UAAU,OAAO,QAAQ,CAAC;AAC9C,UAAM,QAAQ,KAAK,UAAU,KAAK;AAClC,QAAI;AACJ,QAAI,WAAW,OAAW,UAAS;AAAA,aAC1B,WAAW,MAAO,UAAS;AAAA,QAC/B,UAAS;AACd,QAAI,WAAW,QAAQ;AACrB,aAAO,QAAQ,IAAI;AACnB,WAAK,UAAU,YAAY,KAAK,MAAM;AAAA,IACxC;AACA,WAAO,EAAE,UAAU,KAAK,IAAI,QAAQ,MAAM,YAAY,QAAQ,GAAG,OAAO,IAAI,QAAQ,GAAG;AAAA,EACzF;AAAA;AAAA,EAGU,qBACR,YACA,SACA,UACA,SAAS,OACK;AAGd,QAAI,KAAK,wBAAwB,UAAU,GAAG;AAC5C,aAAO;AAAA,QACL,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ,YAAY,UAAU;AAAA,MAChC;AAAA,IACF;AACA,UAAM,MAAM,KAAK,SAAkD,UAAU;AAC7E,UAAM,SAAS,MAAM,OAAO;AAC5B,QAAI,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,SAAS;AAC5C,aAAO,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,YAAY,QAAQ,GAAG,OAAO,IAAI,QAAQ,UAAU;AAAA,IACxG;AACA,WAAO,OAAO,QAAQ;AACtB,SAAK,UAAU,YAAY,KAAK,MAAM;AACtC,WAAO,EAAE,UAAU,KAAK,IAAI,QAAQ,UAAU,MAAM,YAAY,QAAQ,GAAG,OAAO,IAAI,QAAQ,GAAG;AAAA,EACnG;AAAA;AAAA,EAIA,eAAe,KAAoC;AACjD,UAAM,QAAQ,CAAC,GAAG,oBAAI,IAAI,CAAC,KAAK,oBAAoB,GAAG,GAAG,KAAK,kBAAkB,GAAG,CAAC,CAAC,CAAC,EAAE;AAAA,MACvF,CAAC,MAAM,WAAW,CAAC;AAAA,IACrB;AACA,QAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAI,IAAI,OAAQ,QAAO;AACvB,cAAU,WAAW,CAAC;AACtB,UAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY,EAAE,QAAQ,SAAS,GAAG;AAC3D,QAAI,OAAsB;AAC1B,eAAW,KAAK,OAAO;AACrB,YAAM,OAAO,KAAK,WAAW,GAAG,GAAG,KAAK,EAAE,IAAI,KAAK,IAAI,SAAS,CAAC,CAAC,EAAE;AACpE,mBAAa,GAAG,IAAI;AACpB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAMA,OAAO,KAAyC;AAC9C,UAAM,UAA8B,CAAC;AACrC,UAAM,MAAM,KAAK,oBAAoB,GAAG;AACxC,YAAQ;AAAA,MACN,WAAW,GAAG,IACV,EAAE,OAAO,GAAG,KAAK,IAAI,oBAAoB,QAAQ,QAAQ,SAAS,IAAI,IACtE;AAAA,QACE,OAAO,GAAG,KAAK,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR,SAAS,cAAc,GAAG;AAAA,QAC1B,KAAK,qCAAqC,KAAK,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,QAKjD,SAAS,CAAC,CAAC,IAAI,UAAU;AAAA,MAC3B;AAAA,IACN;AACA,eAAW,MAAM,KAAK,kBAAkB,GAAG,KAAK,CAAC,GAAG;AAClD,YAAM,IAAI,GAAG,MAAM;AACnB,cAAQ,KAAK;AAAA,QACX,OAAO,GAAG;AAAA,QACV,QAAQ,EAAE,WAAW,OAAO,SAAS;AAAA,QACrC,SAAS,EAAE,UAAU,EAAE;AAAA,MACzB,CAAC;AAAA,IACH;AAGA,YAAQ,KAAK,GAAG,KAAK,kBAAkB,GAAG,CAAC;AAC3C,WAAO;AAAA,EACT;AACF;","names":[]}