@ken-jo/agent-connector 0.4.8 → 0.4.43

package/dist/chunk-WI6YSXOC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/runtime/telemetry-accessor.ts","../src/telemetry/measure.ts","../src/runtime/hook-entrypoint.ts"],"sourcesContent":["/**\n * runtime/telemetry-accessor — build the handler-facing {@link TelemetryAccessor}.\n *\n * Every runtime entrypoint (hook / statusline / action) stamps `ctx.telemetry`\n * (or `evt.telemetry`) with the accessor built here so a connector handler can\n * read ITS OWN recorded usage on demand (`await ctx.telemetry?.()`), without the\n * handler reaching into the telemetry store directly.\n *\n * The accessor is LAZY (it opens the store only when called) and DEFENSIVE:\n *   - AGENT_CONNECTOR_TELEMETRY=0 → resolves zeros without touching disk;\n *   - any read error → resolves zeros (NEVER throws into a handler — the hook\n *     runtime is fail-open, the statusline fail-safe, and even the action\n *     surface must not have a usage read crash an otherwise-fine run).\n *\n * COST: each call reads the connector's telemetry file in full (the NDJSON\n * store has no since/limit bound) and linear-scans it. Cheap for normal stores,\n * but a handler on a HOT path (e.g. a status line rendered every refresh) should\n * call it sparingly and cache the result rather than invoking it per render.\n */\n\nimport type { TelemetryAccessor, TelemetryUsageSummary } from \"../core/types.js\";\nimport { openStore } from \"../telemetry/store.js\";\n\n/** The empty summary returned when telemetry is off or a read fails. */\nconst ZERO: TelemetryUsageSummary = {\n  inputTokens: 0,\n  outputTokens: 0,\n  totalTokens: 0,\n  calls: 0,\n};\n\n/**\n * Build a {@link TelemetryAccessor} bound to `connectorId`. The returned async\n * function sums every stored row's inputTokens/outputTokens for the connector\n * and counts the rows (`calls`). Honors the AGENT_CONNECTOR_TELEMETRY=0 kill\n * switch (zeros, no disk touch) and swallows any error (zeros) — it never throws.\n */\nexport function buildTelemetryAccessor(connectorId: string): TelemetryAccessor {\n  return async (): Promise<TelemetryUsageSummary> => {\n    if (process.env.AGENT_CONNECTOR_TELEMETRY === \"0\") return { ...ZERO };\n    try {\n      const store = openStore({});\n      try {\n        let inputTokens = 0;\n        let outputTokens = 0;\n        let calls = 0;\n        // COERCE each addend to a finite number: query() tolerates malformed\n        // LINES but does not validate field shapes, so a legacy/hand-edited row\n        // with a missing (→ NaN) or string (→ concat) token field must not\n        // poison the summary's numeric contract. A non-finite token reads as 0.\n        for (const row of store.query({ connectorId })) {\n          inputTokens += Number.isFinite(row.inputTokens) ? row.inputTokens : 0;\n          outputTokens += Number.isFinite(row.outputTokens) ? row.outputTokens : 0;\n          calls += 1;\n        }\n        return {\n          inputTokens,\n          outputTokens,\n          totalTokens: inputTokens + outputTokens,\n          calls,\n        };\n      } finally {\n        store.close();\n      }\n    } catch {\n      // Never throw into a handler — a usage read failure resolves to zeros.\n      return { ...ZERO };\n    }\n  };\n}\n","/**\n * telemetry/measure — pure measurement helpers over a single MCP tool call.\n *\n * The framework tokenizes its OWN bytes: the tool-call arguments going in, the\n * tool result coming out, and the fixed tool-definition schemas. These helpers\n * turn those into {@link TokenCount}s using the default {@link Tokenizer}.\n *\n * Honesty rules:\n *   • Binary modalities (image/audio/resource blobs) are NOT tokenized — base64\n *     would massively over-count. Each gets a flat per-modality estimate, and\n *     because that estimate is itself an approximation the combined confidence\n *     is pulled down to at least \"tokenizer-approx\".\n *   • When combining several counts, the reported confidence is the WORST\n *     (least-confident) of the inputs — never report \"exact\" for a mixed bag.\n *\n * Everything here is pure: no IO, no mutation of inputs.\n */\n\nimport { getTokenizer } from \"./tokenizer.js\";\nimport { worstConfidence } from \"./types.js\";\nimport type {\n  ConfidenceSource,\n  ModelFamily,\n  TokenCount,\n  Tokenizer,\n} from \"./types.js\";\n\n/** Per-call measurement: tokens in, tokens out, and combined confidence. */\nexport interface ToolCallMeasurement {\n  inputTokens: number;\n  outputTokens: number;\n  source: ConfidenceSource;\n}\n\n/**\n * Flat token estimates for non-text content blocks. These mirror common host\n * accounting (an image tile is roughly ~85 tokens at low detail); they are\n * deliberately coarse — we never tokenize the underlying base64 payload.\n */\nconst MODALITY_ESTIMATE: Record<string, number> = {\n  image: 85,\n  audio: 85,\n  resource: 85,\n};\n/** Fallback estimate for an unknown non-text block type. */\nconst UNKNOWN_BLOCK_ESTIMATE = 85;\n\n// Confidence ordering + the worst-of comparison live in ./types (the single\n// source of truth, imported as `worstConfidence` above). Re-exported here so\n// callers that already import `worstConfidence` from this module keep working\n// as a new ConfidenceSource value (e.g. tokenizer-calibrated) slots into the\n// shared ordering.\nexport { worstConfidence };\n\n/** Reduce a list of sources to the single worst (least-confident) one. */\nfunction combineSources(sources: readonly ConfidenceSource[]): ConfidenceSource {\n  // Default to the most-confident floor so an empty list combines to the only\n  // other source it is paired with; in practice callers always pass ≥1 source.\n  let worst: ConfidenceSource = \"host-native\";\n  for (const s of sources) worst = worstConfidence(worst, s);\n  return worst;\n}\n\n// ── Structural shapes we read from a tool result (kept local + narrow) ───────\n\n/** A text content block: `{ type: \"text\", text: \"...\" }`. */\ninterface TextBlock {\n  type: \"text\";\n  text?: unknown;\n}\n/** Any content block; only text blocks expose a `text` field we tokenize. */\ninterface ContentBlock {\n  type?: unknown;\n  text?: unknown;\n}\n/** The portion of an MCP tool result we measure. */\ninterface ToolResultLike {\n  content?: unknown;\n  structuredContent?: unknown;\n}\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null;\n}\n\nfunction isTextBlock(block: ContentBlock): block is TextBlock {\n  return block.type === \"text\";\n}\n\n/**\n * Measure one tool call.\n *\n * Input  = canonical JSON of `args`.\n * Output = tokens over the TEXTUAL parts of `result`:\n *   • If `result.content` is an array of blocks, text blocks are tokenized via\n *     their `text` field and non-text blocks add a flat per-modality estimate\n *     (no base64 tokenization).\n *   • `result.structuredContent`, when present, is tokenized as canonical JSON.\n *   • Anything else (string / arbitrary object) is tokenized as canonical JSON.\n *\n * The reported `source` is the worst of the input and output sources.\n */\nexport function measureToolCall(\n  args: unknown,\n  result: unknown,\n  family: ModelFamily,\n  tok: Tokenizer = getTokenizer(),\n): ToolCallMeasurement {\n  const input = tok.countValue(args, family);\n  const output = measureResult(result, family, tok);\n  return {\n    inputTokens: input.tokens,\n    outputTokens: output.tokens,\n    source: worstConfidence(input.source, output.source),\n  };\n}\n\n/** Tokenize the textual + structured parts of a tool result. */\nfunction measureResult(\n  result: unknown,\n  family: ModelFamily,\n  tok: Tokenizer,\n): TokenCount {\n  if (!isObject(result)) {\n    // Plain string or scalar result — count its canonical form directly.\n    return tok.countValue(result, family);\n  }\n\n  const res = result as ToolResultLike;\n  const sources: ConfidenceSource[] = [];\n  let tokens = 0;\n\n  if (Array.isArray(res.content)) {\n    for (const raw of res.content) {\n      if (!isObject(raw)) continue;\n      const block = raw as ContentBlock;\n      if (isTextBlock(block)) {\n        const text = typeof block.text === \"string\" ? block.text : \"\";\n        const c = tok.count(text, family);\n        tokens += c.tokens;\n        sources.push(c.source);\n      } else {\n        // image / audio / resource / unknown → flat estimate, no base64 BPE.\n        const key = typeof block.type === \"string\" ? block.type : \"\";\n        tokens += MODALITY_ESTIMATE[key] ?? UNKNOWN_BLOCK_ESTIMATE;\n        // A flat estimate is an approximation, never \"exact\".\n        sources.push(\"tokenizer-approx\");\n      }\n    }\n  } else if (res.content !== undefined) {\n    // content present but not an array (e.g. a bare string) → count it whole.\n    const c = tok.countValue(res.content, family);\n    tokens += c.tokens;\n    sources.push(c.source);\n  }\n\n  if (res.structuredContent !== undefined) {\n    const c = tok.countValue(res.structuredContent, family);\n    tokens += c.tokens;\n    sources.push(c.source);\n  }\n\n  // Nothing measurable found → count the whole object as a fallback so we never\n  // silently report zero for a non-empty result.\n  if (sources.length === 0) {\n    return tok.countValue(result, family);\n  }\n\n  return { tokens, source: combineSources(sources) };\n}\n\n/**\n * Measure the fixed tool-definition overhead: tokenize the JSON of the entire\n * `tools/list` array once. `tools` is the raw array of tool descriptors as the\n * server advertises them (shape is host/SDK-specific, so it is treated as\n * opaque JSON here).\n */\nexport function measureToolDefs(\n  tools: readonly unknown[],\n  family: ModelFamily,\n  tok: Tokenizer = getTokenizer(),\n): TokenCount {\n  return tok.countValue(tools, family);\n}\n\n/**\n * Measure one RUNTIME hook dispatch (the new `hook` developer-axis surface).\n *\n * Input  = canonical JSON of the inbound normalized event payload the handler\n *          reads (the host-provided fields: toolInput / prompt / raw / etc.).\n * Output = canonical JSON of what the handler RETURNS that becomes context or a\n *          decision the host consumes (additionalContext / updatedInput / reason\n *          and the rest of the normalized {@link HookResponse}).\n *\n * Uses the SAME tokenizer + worst-of confidence combination as the proxy. Pure:\n * no IO, no mutation. The two values are tokenized whole (a hook payload has no\n * binary content blocks to special-case, unlike a tool result).\n */\nexport function measureHook(\n  eventPayload: unknown,\n  handlerReturn: unknown,\n  family: ModelFamily,\n  tok: Tokenizer = getTokenizer(),\n): ToolCallMeasurement {\n  const input = tok.countValue(eventPayload, family);\n  const output = tok.countValue(handlerReturn, family);\n  return {\n    inputTokens: input.tokens,\n    outputTokens: output.tokens,\n    source: worstConfidence(input.source, output.source),\n  };\n}\n","/**\n * runtime/hook-entrypoint — the universal json-stdio hook dispatcher.\n *\n * Every json-stdio host points its hook config at the single stable home binary\n * (`<homeBin> hook <platformId> <event> --connector <id>`, built by\n * core/spawn.buildHomeBinHookCommand). The CLI reads stdin and calls\n * {@link runHook} with the parsed flags + the raw stdin string. This module:\n *\n *   1. Loads the registered connector (live handlers) and the host adapter.\n *   2. Parses the host's stdin payload into a normalized event via the adapter.\n *   3. Finds the connector's handler for the event, honoring the tool matcher.\n *   4. Runs the handler, normalizes its return, and formats the adapter's native\n *      reply.\n *\n * Fail-open is the safety contract: ANY error degrades to exit 0 (\"allow\") so a\n * framework or handler bug can never wedge a host's tool call — EXCEPT when the\n * event is PreToolUse or PermissionRequest and the handler explicitly denied,\n * in which case the deny (a deliberate security decision) is preserved rather\n * than swallowed.\n */\n\nimport type {\n  HookEventName,\n  HookResponse,\n  NativeHookDef,\n  NativeHookEvent,\n  PlatformId,\n  ResolvedConnector,\n} from \"../core/types.js\";\nimport { log } from \"../core/logger.js\";\nimport {\n  loadRegisteredConnector,\n  readRegisteredMeta,\n} from \"../core/load-connector.js\";\nimport { loadAdapter, REGISTERED_PLATFORM_IDS } from \"../adapters/registry.js\";\nimport { buildTelemetryAccessor } from \"./telemetry-accessor.js\";\nimport type { NormalizedEvent } from \"../adapters/spi.js\";\nimport { projectIdentity } from \"../core/paths.js\";\nimport { measureHook } from \"../telemetry/measure.js\";\nimport { openStore, newRecordId } from \"../telemetry/store.js\";\nimport { getTokenizer, inferModelFamily } from \"../telemetry/tokenizer.js\";\n\n/** Flags + stdin the CLI hands to {@link runHook}. */\nexport interface RunHookOptions {\n  /** Host platform id from the hook command (`hook <platformId> ...`). */\n  platformId: string;\n  /** Canonical lifecycle event name from the hook command. */\n  event: HookEventName;\n  /** Connector id from `--connector <id>`. */\n  connectorId: string;\n  /** Raw stdin payload (host-native JSON). Empty string is tolerated → `{}`. */\n  stdin: string;\n}\n\n/** Process-level result the CLI translates into exit code + stdout/stderr. */\nexport interface RunHookResult {\n  exitCode: number;\n  stdout?: string;\n  stderr?: string;\n}\n\n/** A pass-through \"allow\" reply with exit 0 and no payload. */\nconst ALLOW: RunHookResult = { exitCode: 0 };\n\n/**\n * The string a connector matcher filters on, when the event carries one:\n * tool events (PreToolUse / PostToolUse / PermissionRequest /\n * PostToolUseFailure) expose `toolName`; subagent events expose `agentType`.\n * Returns undefined when the event has neither (no filtering) — including a\n * SubagentStop arriving WITHOUT agent_type, which some hosts fail to populate;\n * filtering out such an event would silently drop a real stop, so we run the\n * handler instead (fail-open).\n */\nexport function eventMatcherSubject(evt: NormalizedEvent): string | undefined {\n  const name = (evt as { toolName?: unknown }).toolName;\n  if (typeof name === \"string\") return name;\n  const agentType = (evt as { agentType?: unknown }).agentType;\n  if (typeof agentType === \"string\") return agentType;\n  return undefined;\n}\n\n/**\n * Tolerantly parse the host's stdin payload. Empty / whitespace-only input is a\n * legitimate \"no payload\" signal from some hosts and resolves to `{}`. Malformed\n * JSON also degrades to `{}` rather than throwing — fail-open is the contract.\n */\nfunction parseStdin(stdin: string): unknown {\n  const trimmed = stdin.trim();\n  if (trimmed === \"\") return {};\n  try {\n    return JSON.parse(trimmed);\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Compile the connector's matcher (a regex string) for a tool event. A missing\n * or empty matcher matches everything (returns null → no filtering). An invalid\n * regex degrades to \"match everything\" so a typo never blocks tool calls.\n */\nexport function compileMatcher(matcher: string | undefined): RegExp | null {\n  if (!matcher || matcher === \"\") return null;\n  try {\n    return new RegExp(matcher);\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Normalize a handler return into a concrete HookResponse. A void/non-object\n * return becomes `{}` — NO decision — which every adapter formats as\n * pass-through allow (`response.decision ?? \"allow\"`). Deliberately NOT\n * `{decision:\"allow\"}`: on PermissionRequest an explicit \"allow\" is an ACTIVE\n * grant that suppresses the host's permission dialog, and a handler that\n * returns nothing must fall through to the dialog, never silently grant.\n */\nfunction normalizeResponse(value: HookResponse | void): HookResponse {\n  if (value == null || typeof value !== \"object\") return {};\n  return value;\n}\n\n/**\n * Resolve the host platform to stamp on a hook telemetry row. Mirrors the serve\n * `--host` plumbing: the install-target platform id is baked into the hook\n * command (`hook <platformId> <event> …`) so `opts.platformId` is authoritative,\n * but an explicit env override (AGENT_CONNECTOR_HOST) wins when it names a known\n * platform. Falls back to the event's adapter-stamped hostPlatform, then\n * \"unknown\" — never throws.\n */\nfunction resolveHookHostPlatform(\n  platformId: string,\n  evt: NormalizedEvent | NativeHookEvent,\n): PlatformId {\n  const override = process.env.AGENT_CONNECTOR_HOST;\n  if (\n    override !== undefined &&\n    REGISTERED_PLATFORM_IDS.has(override as PlatformId)\n  ) {\n    return override as PlatformId;\n  }\n  if (REGISTERED_PLATFORM_IDS.has(platformId as PlatformId)) {\n    return platformId as PlatformId;\n  }\n  const fromEvent = (evt as { hostPlatform?: unknown }).hostPlatform;\n  if (\n    typeof fromEvent === \"string\" &&\n    REGISTERED_PLATFORM_IDS.has(fromEvent as PlatformId)\n  ) {\n    return fromEvent as PlatformId;\n  }\n  return \"unknown\";\n}\n\n/**\n * Record one RUNTIME hook dispatch as a `hook` developer-axis telemetry row.\n *\n * input  = the inbound event payload the handler reads (normalized event, or\n *          the {@link NativeHookEvent} envelope for native passthrough hooks);\n * output = what the handler returned (a normalized {@link HookResponse}, or the\n *          verbatim native reply object). Tokenized with the SAME tokenizer the\n *          proxy uses. For a native hook `opts.event` is the host-native name.\n *\n * MUST be fail-open (the hook runtime is fail-open by contract): any error here\n * is swallowed so a measurement bug can NEVER break a host's hook. Honors the\n * AGENT_CONNECTOR_TELEMETRY=0 kill switch (skips entirely; the store's append is\n * already a no-op under it, but we also skip the tokenize work).\n */\nfunction recordHookTelemetry(\n  opts: { platformId: string; event: string; connectorId: string },\n  connector: ResolvedConnector,\n  evt: NormalizedEvent | NativeHookEvent,\n  response: unknown,\n): void {\n  if (process.env.AGENT_CONNECTOR_TELEMETRY === \"0\") return;\n  try {\n    const family = inferModelFamily(\"\", connector.telemetry.modelFamilyHint);\n    const measurement = measureHook(evt, response, family, getTokenizer());\n\n    const sessionId =\n      typeof (evt as { sessionId?: unknown }).sessionId === \"string\"\n        ? ((evt as { sessionId: string }).sessionId)\n        : \"\";\n    const evtProjectDir = (evt as { projectDir?: unknown }).projectDir;\n    const projectDir =\n      typeof evtProjectDir === \"string\" && evtProjectDir !== \"\"\n        ? evtProjectDir\n        : process.cwd();\n    const id = projectIdentity(projectDir);\n\n    const store = openStore({});\n    try {\n      store.append({\n        id: newRecordId(0),\n        ts: Date.now(),\n        connectorId: opts.connectorId,\n        toolName: opts.event, // for a hook row the per-item name IS the event\n        scope: \"hook\",\n        surfaceKind: \"hook\",\n        hostPlatform: resolveHookHostPlatform(opts.platformId, evt),\n        sessionId,\n        projectKey: id.key,\n        projectDir: id.dir,\n        inputTokens: measurement.inputTokens,\n        outputTokens: measurement.outputTokens,\n        confidenceSource: measurement.source,\n        isError: false,\n      });\n    } finally {\n      store.close();\n    }\n  } catch {\n    // Fail-open: a telemetry error must NEVER break the hook runtime.\n  }\n}\n\n/**\n * Dispatch one host hook invocation. Always resolves (never rejects): every\n * failure path returns a concrete {@link RunHookResult} so the CLI can exit\n * cleanly. See the module header for the fail-open contract.\n */\nexport async function runHook(opts: RunHookOptions): Promise<RunHookResult> {\n  const { platformId, event, connectorId, stdin } = opts;\n\n  try {\n    const connector = await loadRegisteredConnector(connectorId);\n    const adapter = await loadAdapter(platformId);\n\n    // mcp-only hosts (and any adapter without runtime dispatch) cannot parse a\n    // hook payload — nothing to do, allow.\n    if (!adapter || !adapter.parseEvent || !adapter.formatReply) {\n      return ALLOW;\n    }\n\n    const raw = parseStdin(stdin);\n    const evt = adapter.parseEvent(event, raw);\n    // The hook command carries the authoritative connector id; stamp it on the\n    // event so handlers see the connector they were dispatched for.\n    evt.connectorId = connectorId;\n    // Unify the hook event with HostCtx: the adapter's parseEvent has no\n    // capabilities/scope/telemetry at parse time (they are runtime-only), so the\n    // runtime ALWAYS backfills them before the handler runs. capabilities comes\n    // from the adapter; scope is recovered from the registered metadata (sync);\n    // telemetry is the lazy per-connector usage accessor. The SAME three\n    // assignments run on the error path (failOpenOrPreserveDeny) for symmetry.\n    evt.capabilities = adapter.capabilities;\n    evt.scope = readRegisteredMeta(connectorId)?.scope;\n    evt.telemetry = buildTelemetryAccessor(connectorId);\n\n    const definition = connector.hooks[event];\n    if (!definition || typeof definition.handler !== \"function\") {\n      // The connector declares no handler for this event — allow.\n      return ALLOW;\n    }\n\n    // Per-host handler override: when dispatching for host X, `hosts[X].handler`\n    // wins over the top-level handler; a host not listed (or a per-host entry\n    // that is somehow not a function) falls back to the top-level handler.\n    // Selection NEVER throws — fail-open is preserved.\n    // NOTE: keyed on the RAW install-baked platformId (the host this entrypoint\n    // was registered for), NOT resolveHookHostPlatform's AGENT_CONNECTOR_HOST\n    // override — that override only re-labels the telemetry row. The error path\n    // (failOpenOrPreserveDeny) resolves the IDENTICAL handler the same way, so a\n    // per-host deny is preserved consistently.\n    const perHost = definition.hosts?.[platformId as PlatformId]?.handler;\n    const handler = typeof perHost === \"function\" ? perHost : definition.handler;\n\n    // Matcher: if set and the event's subject (tool name, or agent type for\n    // Subagent* events) does not match, allow (the hook is simply not\n    // interested in this tool/agent). The matcher is the definition's — a\n    // per-host handler shares the top-level matcher.\n    const subject = eventMatcherSubject(evt);\n    if (subject !== undefined) {\n      const re = compileMatcher(definition.matcher);\n      if (re && !re.test(subject)) return ALLOW;\n    }\n\n    // Run the resolved handler. Its return is normalized (void → allow) and\n    // handed to the adapter to render the host-native reply.\n    const handlerResult = await handler(\n      // The adapter parsed `evt` as exactly this event's payload type; the\n      // HooksConfig handler for the same event expects that payload.\n      evt as never,\n    );\n    const response = normalizeResponse(handlerResult);\n\n    // Developer-axis telemetry for the RUNTIME `hook` surface. Fail-open: never\n    // lets a measurement error break the hook (handled inside the helper).\n    recordHookTelemetry(opts, connector, evt, response);\n\n    const reply = adapter.formatReply(event, response);\n    return {\n      exitCode: reply.exitCode,\n      ...(reply.stdout !== undefined ? { stdout: reply.stdout } : {}),\n      ...(reply.stderr !== undefined ? { stderr: reply.stderr } : {}),\n    };\n  } catch (err) {\n    // Fail-open: a framework/handler error must not wedge the host's tool call.\n    // The ONE exception is a PreToolUse / PermissionRequest deny — a deliberate\n    // block we honor even if a later step threw. We re-derive that decision\n    // defensively from the adapter so a throw AFTER the deny still surfaces it.\n    const message = err instanceof Error ? err.message : String(err);\n    log.error(`hook ${platformId}/${event} (${connectorId}) failed:`, message);\n    return failOpenOrPreserveDeny(opts, message);\n  }\n}\n\n/**\n * Events whose explicit deny survives the fail-open error path. Both are\n * permission gates — a deny there is a deliberate security decision that must\n * never be silently downgraded to allow. (Stop-class denies are persistence\n * conveniences, not security boundaries, so they stay fail-open.)\n */\nconst DENY_PRESERVE_EVENTS: ReadonlySet<HookEventName> = new Set([\n  \"PreToolUse\",\n  \"PermissionRequest\",\n]);\n\n/**\n * Error path. Returns fail-open allow, UNLESS this is a deny-preserving event\n * (PreToolUse / PermissionRequest) whose handler explicitly denied — in which\n * case the deny is reconstructed and preserved (a security decision is never\n * silently downgraded to allow).\n *\n * Best-effort: if anything in the deny reconstruction itself throws, we fall\n * back to allow (we never escalate an error into a spurious block).\n */\nasync function failOpenOrPreserveDeny(\n  opts: RunHookOptions,\n  errorMessage: string,\n): Promise<RunHookResult> {\n  if (!DENY_PRESERVE_EVENTS.has(opts.event)) return ALLOW;\n  try {\n    const connector = await loadRegisteredConnector(opts.connectorId);\n    const adapter = await loadAdapter(opts.platformId);\n    if (!adapter?.parseEvent || !adapter.formatReply) return ALLOW;\n\n    const definition = connector.hooks[opts.event];\n    if (!definition || typeof definition.handler !== \"function\") return ALLOW;\n\n    // Reconstruct the deny from the SAME handler the main path would have run —\n    // the per-host override if one is declared for this host, else the top-level\n    // handler. Otherwise a per-host deny could be silently downgraded on the\n    // error path.\n    const perHost = definition.hosts?.[opts.platformId as PlatformId]?.handler;\n    const handler = typeof perHost === \"function\" ? perHost : definition.handler;\n\n    const raw = parseStdin(opts.stdin);\n    const evt = adapter.parseEvent(opts.event, raw);\n    evt.connectorId = opts.connectorId;\n    // Backfill the HostCtx fields here too (symmetry with the main path), so a\n    // per-host deny reconstructed on the error path still carries capabilities/\n    // scope/telemetry — a handler that branches on them denies identically.\n    evt.capabilities = adapter.capabilities;\n    evt.scope = readRegisteredMeta(opts.connectorId)?.scope;\n    evt.telemetry = buildTelemetryAccessor(opts.connectorId);\n\n    const subject = eventMatcherSubject(evt);\n    if (subject !== undefined) {\n      const re = compileMatcher(definition.matcher);\n      if (re && !re.test(subject)) return ALLOW;\n    }\n\n    const response = normalizeResponse(await handler(evt as never));\n    if (response.decision !== \"deny\") return ALLOW;\n\n    const reply = adapter.formatReply(opts.event, response);\n    return {\n      exitCode: reply.exitCode,\n      ...(reply.stdout !== undefined ? { stdout: reply.stdout } : {}),\n      ...(reply.stderr !== undefined\n        ? { stderr: reply.stderr }\n        : { stderr: errorMessage }),\n    };\n  } catch {\n    // Reconstruction failed — never escalate an internal error into a block.\n    return ALLOW;\n  }\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// Native (passthrough) hooks — host events OUTSIDE the normalized union\n// ─────────────────────────────────────────────────────────────────────────\n\n/** Flags + stdin for {@link runNativeHook}. `event` is HOST-NATIVE (non-union). */\nexport interface RunNativeHookOptions {\n  /** Host platform id from the hook command (`hook <platformId> ...`). */\n  platformId: string;\n  /** Host-native event name, verbatim (e.g. \"TaskCreated\"). */\n  event: string;\n  /** Connector id from `--connector <id>`. */\n  connectorId: string;\n  /** Raw stdin payload (host-native JSON). Empty string is tolerated → `{}`. */\n  stdin: string;\n}\n\n/** The connector's native hook definition for `platformId`/`event`, if any. */\nfunction nativeHookDef(\n  connector: ResolvedConnector,\n  platformId: string,\n  event: string,\n): NativeHookDef | undefined {\n  return connector.platforms[platformId as PlatformId]?.nativeHooks?.[event];\n}\n\n/**\n * True when the registered connector declares `event` under\n * `platforms[platformId].nativeHooks` with a live handler. Used by the hook CLI\n * to decide whether a non-union event name is accepted (declared → dispatch via\n * {@link runNativeHook}) or rejected with the strict unknown-event error.\n * Fail-safe: any load error reads as \"not declared\".\n */\nexport async function isNativeHookDeclared(\n  platformId: string,\n  event: string,\n  connectorId: string,\n): Promise<boolean> {\n  try {\n    const connector = await loadRegisteredConnector(connectorId);\n    return typeof nativeHookDef(connector, platformId, event)?.handler === \"function\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Dispatch one NATIVE (passthrough) hook invocation. No normalized parse, no\n * HookResponse mapping, no runtime matcher evaluation (the host's own matcher\n * already filtered — the def's matcher string was written verbatim into the\n * host config at install):\n *\n *   stdin JSON → NativeHookEvent{raw} → handler → VERBATIM JSON stdout (exit 0).\n *\n * void/undefined return → exit 0 with no output. Fail-open: ANY throw degrades\n * to exit 0 with no output — exit-2 blocking semantics are not modeled in v1.\n * Telemetry: records the same scope:\"hook\" developer-axis row as normalized\n * hooks, with the NATIVE event name as the per-item name.\n */\nexport async function runNativeHook(\n  opts: RunNativeHookOptions,\n): Promise<RunHookResult> {\n  const { platformId, event, connectorId, stdin } = opts;\n  try {\n    const connector = await loadRegisteredConnector(connectorId);\n    const def = nativeHookDef(connector, platformId, event);\n    if (!def || typeof def.handler !== \"function\") {\n      // Not declared for this platform — nothing to do, allow.\n      return ALLOW;\n    }\n\n    const raw = parseStdin(stdin);\n    // Best-effort session/project extraction from the json-stdio common shape\n    // (Claude Code: session_id / cwd). Everything else stays in `raw` untouched.\n    const sessionId =\n      typeof (raw as { session_id?: unknown })?.session_id === \"string\"\n        ? (raw as { session_id: string }).session_id\n        : \"\";\n    const cwd = (raw as { cwd?: unknown })?.cwd;\n    const evt: NativeHookEvent = {\n      event,\n      hostPlatform: REGISTERED_PLATFORM_IDS.has(platformId as PlatformId)\n        ? (platformId as PlatformId)\n        : \"unknown\",\n      sessionId,\n      ...(typeof cwd === \"string\" && cwd !== \"\" ? { projectDir: cwd } : {}),\n      raw,\n    };\n\n    const result = await def.handler(evt);\n\n    // Same scope:\"hook\" telemetry row as normalized hooks (fail-open inside).\n    recordHookTelemetry(opts, connector, evt, result === undefined ? {} : result);\n\n    if (result === undefined) return ALLOW; // void → exit 0, no output\n    const json = JSON.stringify(result);\n    // Non-JSON-serializable returns (functions/symbols) degrade to silence.\n    if (json === undefined) return ALLOW;\n    return { exitCode: 0, stdout: json };\n  } catch (err) {\n    // Fail-open, unconditionally: native hooks have no deny-preserve carve-out\n    // (there is no normalized decision to reconstruct).\n    const message = err instanceof Error ? err.message : String(err);\n    log.error(\n      `native hook ${platformId}/${event} (${connectorId}) failed:`,\n      message,\n    );\n    return ALLOW;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAwBA,IAAM,OAA8B;AAAA,EAClC,aAAa;AAAA,EACb,cAAc;AAAA,EACd,aAAa;AAAA,EACb,OAAO;AACT;AAQO,SAAS,uBAAuB,aAAwC;AAC7E,SAAO,YAA4C;AACjD,QAAI,QAAQ,IAAI,8BAA8B,IAAK,QAAO,EAAE,GAAG,KAAK;AACpE,QAAI;AACF,YAAM,QAAQ,UAAU,CAAC,CAAC;AAC1B,UAAI;AACF,YAAI,cAAc;AAClB,YAAI,eAAe;AACnB,YAAI,QAAQ;AAKZ,mBAAW,OAAO,MAAM,MAAM,EAAE,YAAY,CAAC,GAAG;AAC9C,yBAAe,OAAO,SAAS,IAAI,WAAW,IAAI,IAAI,cAAc;AACpE,0BAAgB,OAAO,SAAS,IAAI,YAAY,IAAI,IAAI,eAAe;AACvE,mBAAS;AAAA,QACX;AACA,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,aAAa,cAAc;AAAA,UAC3B;AAAA,QACF;AAAA,MACF,UAAE;AACA,cAAM,MAAM;AAAA,MACd;AAAA,IACF,QAAQ;AAEN,aAAO,EAAE,GAAG,KAAK;AAAA,IACnB;AAAA,EACF;AACF;;;AC9BA,IAAM,oBAA4C;AAAA,EAChD,OAAO;AAAA,EACP,OAAO;AAAA,EACP,UAAU;AACZ;AAEA,IAAM,yBAAyB;AAU/B,SAAS,eAAe,SAAwD;AAG9E,MAAI,QAA0B;AAC9B,aAAW,KAAK,QAAS,SAAQ,gBAAgB,OAAO,CAAC;AACzD,SAAO;AACT;AAoBA,SAAS,SAAS,GAA0C;AAC1D,SAAO,OAAO,MAAM,YAAY,MAAM;AACxC;AAEA,SAAS,YAAY,OAAyC;AAC5D,SAAO,MAAM,SAAS;AACxB;AAeO,SAAS,gBACd,MACA,QACA,QACA,MAAiB,aAAa,GACT;AACrB,QAAM,QAAQ,IAAI,WAAW,MAAM,MAAM;AACzC,QAAM,SAAS,cAAc,QAAQ,QAAQ,GAAG;AAChD,SAAO;AAAA,IACL,aAAa,MAAM;AAAA,IACnB,cAAc,OAAO;AAAA,IACrB,QAAQ,gBAAgB,MAAM,QAAQ,OAAO,MAAM;AAAA,EACrD;AACF;AAGA,SAAS,cACP,QACA,QACA,KACY;AACZ,MAAI,CAAC,SAAS,MAAM,GAAG;AAErB,WAAO,IAAI,WAAW,QAAQ,MAAM;AAAA,EACtC;AAEA,QAAM,MAAM;AACZ,QAAM,UAA8B,CAAC;AACrC,MAAI,SAAS;AAEb,MAAI,MAAM,QAAQ,IAAI,OAAO,GAAG;AAC9B,eAAW,OAAO,IAAI,SAAS;AAC7B,UAAI,CAAC,SAAS,GAAG,EAAG;AACpB,YAAM,QAAQ;AACd,UAAI,YAAY,KAAK,GAAG;AACtB,cAAM,OAAO,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAC3D,cAAM,IAAI,IAAI,MAAM,MAAM,MAAM;AAChC,kBAAU,EAAE;AACZ,gBAAQ,KAAK,EAAE,MAAM;AAAA,MACvB,OAAO;AAEL,cAAM,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAC1D,kBAAU,kBAAkB,GAAG,KAAK;AAEpC,gBAAQ,KAAK,kBAAkB;AAAA,MACjC;AAAA,IACF;AAAA,EACF,WAAW,IAAI,YAAY,QAAW;AAEpC,UAAM,IAAI,IAAI,WAAW,IAAI,SAAS,MAAM;AAC5C,cAAU,EAAE;AACZ,YAAQ,KAAK,EAAE,MAAM;AAAA,EACvB;AAEA,MAAI,IAAI,sBAAsB,QAAW;AACvC,UAAM,IAAI,IAAI,WAAW,IAAI,mBAAmB,MAAM;AACtD,cAAU,EAAE;AACZ,YAAQ,KAAK,EAAE,MAAM;AAAA,EACvB;AAIA,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,IAAI,WAAW,QAAQ,MAAM;AAAA,EACtC;AAEA,SAAO,EAAE,QAAQ,QAAQ,eAAe,OAAO,EAAE;AACnD;AAQO,SAAS,gBACd,OACA,QACA,MAAiB,aAAa,GAClB;AACZ,SAAO,IAAI,WAAW,OAAO,MAAM;AACrC;AAeO,SAAS,YACd,cACA,eACA,QACA,MAAiB,aAAa,GACT;AACrB,QAAM,QAAQ,IAAI,WAAW,cAAc,MAAM;AACjD,QAAM,SAAS,IAAI,WAAW,eAAe,MAAM;AACnD,SAAO;AAAA,IACL,aAAa,MAAM;AAAA,IACnB,cAAc,OAAO;AAAA,IACrB,QAAQ,gBAAgB,MAAM,QAAQ,OAAO,MAAM;AAAA,EACrD;AACF;;;ACrJA,IAAM,QAAuB,EAAE,UAAU,EAAE;AAWpC,SAAS,oBAAoB,KAA0C;AAC5E,QAAM,OAAQ,IAA+B;AAC7C,MAAI,OAAO,SAAS,SAAU,QAAO;AACrC,QAAM,YAAa,IAAgC;AACnD,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,SAAO;AACT;AAOA,SAAS,WAAW,OAAwB;AAC1C,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,YAAY,GAAI,QAAO,CAAC;AAC5B,MAAI;AACF,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAOO,SAAS,eAAe,SAA4C;AACzE,MAAI,CAAC,WAAW,YAAY,GAAI,QAAO;AACvC,MAAI;AACF,WAAO,IAAI,OAAO,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUA,SAAS,kBAAkB,OAA0C;AACnE,MAAI,SAAS,QAAQ,OAAO,UAAU,SAAU,QAAO,CAAC;AACxD,SAAO;AACT;AAUA,SAAS,wBACP,YACA,KACY;AACZ,QAAM,WAAW,QAAQ,IAAI;AAC7B,MACE,aAAa,UACb,wBAAwB,IAAI,QAAsB,GAClD;AACA,WAAO;AAAA,EACT;AACA,MAAI,wBAAwB,IAAI,UAAwB,GAAG;AACzD,WAAO;AAAA,EACT;AACA,QAAM,YAAa,IAAmC;AACtD,MACE,OAAO,cAAc,YACrB,wBAAwB,IAAI,SAAuB,GACnD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAgBA,SAAS,oBACP,MACA,WACA,KACA,UACM;AACN,MAAI,QAAQ,IAAI,8BAA8B,IAAK;AACnD,MAAI;AACF,UAAM,SAAS,iBAAiB,IAAI,UAAU,UAAU,eAAe;AACvE,UAAM,cAAc,YAAY,KAAK,UAAU,QAAQ,aAAa,CAAC;AAErE,UAAM,YACJ,OAAQ,IAAgC,cAAc,WAChD,IAA8B,YAChC;AACN,UAAM,gBAAiB,IAAiC;AACxD,UAAM,aACJ,OAAO,kBAAkB,YAAY,kBAAkB,KACnD,gBACA,QAAQ,IAAI;AAClB,UAAM,KAAK,gBAAgB,UAAU;AAErC,UAAM,QAAQ,UAAU,CAAC,CAAC;AAC1B,QAAI;AACF,YAAM,OAAO;AAAA,QACX,IAAI,YAAY,CAAC;AAAA,QACjB,IAAI,KAAK,IAAI;AAAA,QACb,aAAa,KAAK;AAAA,QAClB,UAAU,KAAK;AAAA;AAAA,QACf,OAAO;AAAA,QACP,aAAa;AAAA,QACb,cAAc,wBAAwB,KAAK,YAAY,GAAG;AAAA,QAC1D;AAAA,QACA,YAAY,GAAG;AAAA,QACf,YAAY,GAAG;AAAA,QACf,aAAa,YAAY;AAAA,QACzB,cAAc,YAAY;AAAA,QAC1B,kBAAkB,YAAY;AAAA,QAC9B,SAAS;AAAA,MACX,CAAC;AAAA,IACH,UAAE;AACA,YAAM,MAAM;AAAA,IACd;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAOA,eAAsB,QAAQ,MAA8C;AAC1E,QAAM,EAAE,YAAY,OAAO,aAAa,MAAM,IAAI;AAElD,MAAI;AACF,UAAM,YAAY,MAAM,wBAAwB,WAAW;AAC3D,UAAM,UAAU,MAAM,YAAY,UAAU;AAI5C,QAAI,CAAC,WAAW,CAAC,QAAQ,cAAc,CAAC,QAAQ,aAAa;AAC3D,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,WAAW,KAAK;AAC5B,UAAM,MAAM,QAAQ,WAAW,OAAO,GAAG;AAGzC,QAAI,cAAc;AAOlB,QAAI,eAAe,QAAQ;AAC3B,QAAI,QAAQ,mBAAmB,WAAW,GAAG;AAC7C,QAAI,YAAY,uBAAuB,WAAW;AAElD,UAAM,aAAa,UAAU,MAAM,KAAK;AACxC,QAAI,CAAC,cAAc,OAAO,WAAW,YAAY,YAAY;AAE3D,aAAO;AAAA,IACT;AAWA,UAAM,UAAU,WAAW,QAAQ,UAAwB,GAAG;AAC9D,UAAM,UAAU,OAAO,YAAY,aAAa,UAAU,WAAW;AAMrE,UAAM,UAAU,oBAAoB,GAAG;AACvC,QAAI,YAAY,QAAW;AACzB,YAAM,KAAK,eAAe,WAAW,OAAO;AAC5C,UAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAG,QAAO;AAAA,IACtC;AAIA,UAAM,gBAAgB,MAAM;AAAA;AAAA;AAAA,MAG1B;AAAA,IACF;AACA,UAAM,WAAW,kBAAkB,aAAa;AAIhD,wBAAoB,MAAM,WAAW,KAAK,QAAQ;AAElD,UAAM,QAAQ,QAAQ,YAAY,OAAO,QAAQ;AACjD,WAAO;AAAA,MACL,UAAU,MAAM;AAAA,MAChB,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC7D,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,IAC/D;AAAA,EACF,SAAS,KAAK;AAKZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,QAAI,MAAM,QAAQ,UAAU,IAAI,KAAK,KAAK,WAAW,aAAa,OAAO;AACzE,WAAO,uBAAuB,MAAM,OAAO;AAAA,EAC7C;AACF;AAQA,IAAM,uBAAmD,oBAAI,IAAI;AAAA,EAC/D;AAAA,EACA;AACF,CAAC;AAWD,eAAe,uBACb,MACA,cACwB;AACxB,MAAI,CAAC,qBAAqB,IAAI,KAAK,KAAK,EAAG,QAAO;AAClD,MAAI;AACF,UAAM,YAAY,MAAM,wBAAwB,KAAK,WAAW;AAChE,UAAM,UAAU,MAAM,YAAY,KAAK,UAAU;AACjD,QAAI,CAAC,SAAS,cAAc,CAAC,QAAQ,YAAa,QAAO;AAEzD,UAAM,aAAa,UAAU,MAAM,KAAK,KAAK;AAC7C,QAAI,CAAC,cAAc,OAAO,WAAW,YAAY,WAAY,QAAO;AAMpE,UAAM,UAAU,WAAW,QAAQ,KAAK,UAAwB,GAAG;AACnE,UAAM,UAAU,OAAO,YAAY,aAAa,UAAU,WAAW;AAErE,UAAM,MAAM,WAAW,KAAK,KAAK;AACjC,UAAM,MAAM,QAAQ,WAAW,KAAK,OAAO,GAAG;AAC9C,QAAI,cAAc,KAAK;AAIvB,QAAI,eAAe,QAAQ;AAC3B,QAAI,QAAQ,mBAAmB,KAAK,WAAW,GAAG;AAClD,QAAI,YAAY,uBAAuB,KAAK,WAAW;AAEvD,UAAM,UAAU,oBAAoB,GAAG;AACvC,QAAI,YAAY,QAAW;AACzB,YAAM,KAAK,eAAe,WAAW,OAAO;AAC5C,UAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAG,QAAO;AAAA,IACtC;AAEA,UAAM,WAAW,kBAAkB,MAAM,QAAQ,GAAY,CAAC;AAC9D,QAAI,SAAS,aAAa,OAAQ,QAAO;AAEzC,UAAM,QAAQ,QAAQ,YAAY,KAAK,OAAO,QAAQ;AACtD,WAAO;AAAA,MACL,UAAU,MAAM;AAAA,MAChB,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC7D,GAAI,MAAM,WAAW,SACjB,EAAE,QAAQ,MAAM,OAAO,IACvB,EAAE,QAAQ,aAAa;AAAA,IAC7B;AAAA,EACF,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;AAmBA,SAAS,cACP,WACA,YACA,OAC2B;AAC3B,SAAO,UAAU,UAAU,UAAwB,GAAG,cAAc,KAAK;AAC3E;AASA,eAAsB,qBACpB,YACA,OACA,aACkB;AAClB,MAAI;AACF,UAAM,YAAY,MAAM,wBAAwB,WAAW;AAC3D,WAAO,OAAO,cAAc,WAAW,YAAY,KAAK,GAAG,YAAY;AAAA,EACzE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAeA,eAAsB,cACpB,MACwB;AACxB,QAAM,EAAE,YAAY,OAAO,aAAa,MAAM,IAAI;AAClD,MAAI;AACF,UAAM,YAAY,MAAM,wBAAwB,WAAW;AAC3D,UAAM,MAAM,cAAc,WAAW,YAAY,KAAK;AACtD,QAAI,CAAC,OAAO,OAAO,IAAI,YAAY,YAAY;AAE7C,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,WAAW,KAAK;AAG5B,UAAM,YACJ,OAAQ,KAAkC,eAAe,WACpD,IAA+B,aAChC;AACN,UAAM,MAAO,KAA2B;AACxC,UAAM,MAAuB;AAAA,MAC3B;AAAA,MACA,cAAc,wBAAwB,IAAI,UAAwB,IAC7D,aACD;AAAA,MACJ;AAAA,MACA,GAAI,OAAO,QAAQ,YAAY,QAAQ,KAAK,EAAE,YAAY,IAAI,IAAI,CAAC;AAAA,MACnE;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,IAAI,QAAQ,GAAG;AAGpC,wBAAoB,MAAM,WAAW,KAAK,WAAW,SAAY,CAAC,IAAI,MAAM;AAE5E,QAAI,WAAW,OAAW,QAAO;AACjC,UAAM,OAAO,KAAK,UAAU,MAAM;AAElC,QAAI,SAAS,OAAW,QAAO;AAC/B,WAAO,EAAE,UAAU,GAAG,QAAQ,KAAK;AAAA,EACrC,SAAS,KAAK;AAGZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,QAAI;AAAA,MACF,eAAe,UAAU,IAAI,KAAK,KAAK,WAAW;AAAA,MAClD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/codex-EEVN43C2.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/adapters/codex/index.ts"],"sourcesContent":["/**\n * adapters/codex — Codex CLI platform adapter for agent-connector.\n *\n * Codex CLI hook paradigm is \"json-stdio\": the host pipes a JSON payload to a\n * command on stdin and reads JSON/exit-code back — the same wire protocol as\n * Claude Code (PascalCase fields, `hookSpecificOutput` reply wrapper).\n *\n * Two native config files live under the Codex config dir\n * (`$CODEX_HOME` || `~/.codex`, mirrored to `<projectDir>/.codex` for project\n * scope):\n *   - config.toml  → `[mcp_servers.<id>]` MCP registration (TOML, NO native\n *     interpolation, so env-refs are resolved to literals at install time).\n *   - hooks.json   → Claude-compatible hook registration ({ matcher, hooks }).\n *\n * Grounded in context-mode's proven Codex adapter (configs/codex/{config.toml,\n * hooks.json}, src/adapters/codex/*) — exact TOML MCP shape + hook JSON schema.\n *\n * Known Codex limitations (upstream): PreToolUse deny works but updatedInput is\n * not yet honored (openai/codex#18491); PostToolUse updatedMCPToolOutput is\n * parsed-but-unsupported — hence canModifyArgs / canModifyOutput are false.\n *\n * E1 extension events (verified against developers.openai.com/codex/hooks):\n *   - PermissionRequest — native, decision-capable via the nested\n *     hookSpecificOutput.decision{behavior:\"allow\"|\"deny\", message?} envelope.\n *     Codex docs: updatedInput / updatedPermissions / interrupt FAIL CLOSED on\n *     this event, so they are never emitted here.\n *   - SubagentStart — native; hookSpecificOutput.additionalContext is injected\n *     as developer context for the subagent (not blockable).\n *   - SubagentStop — native; the documented continuation shape is the TOP-LEVEL\n *     {\"decision\":\"block\",\"reason\"} (Stop semantics: keeps the subagent going).\n *   - PostToolUseFailure — NO Codex analog (PostToolUse only); declared hooks\n *     for it warn-skip at install and the capability flag stays unset.\n *   - PostCompact — native (Codex's hook system fires both PreCompact and\n *     PostCompact); observe-only, normalizing the `trigger` (manual|auto)\n *     exactly like PreCompact, with a passthrough formatReply.\n */\n\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nimport TOML from \"@iarna/toml\";\n\nimport type {\n  ChangeRecord,\n  DetectedPlatform,\n  HealthCheck,\n  HookEventName,\n  HookParadigm,\n  HookResponse,\n  PlatformCapabilities,\n  PlatformId,\n  ServerDef,\n  SkillDef,\n  SubagentDef,\n} from \"../../core/types.js\";\nimport { ensureDir } from \"../../core/paths.js\";\nimport { codexConfigHome } from \"../../core/host-paths.js\";\nimport { resolveEnvRefsDeep } from \"../../core/interpolate.js\";\nimport {\n  removeFromObjectMap,\n  upsertInObjectMap,\n  type ObjectMapCodec,\n} from \"../../core/object-map.js\";\nimport { writeTomlString } from \"../../core/toml.js\";\nimport {\n  buildHomeBinHookCommand,\n  buildWrappedStdio,\n} from \"../../core/spawn.js\";\nimport { renderCommandMd, renderSkillMd } from \"../claude-code/render.js\";\nimport { normalizeSessionSource } from \"../claude-code/wire.js\";\nimport { BaseAdapter, type HookMergeDescriptor } from \"../base.js\";\nimport type {\n  HookReply,\n  InstallContext,\n  MemoryTarget,\n  NormalizedEvent,\n} from \"../spi.js\";\n\n// ─────────────────────────────────────────────────────────────────────────\n// Native shapes\n// ─────────────────────────────────────────────────────────────────────────\n\n/** Raw Codex hook payload (PascalCase event, snake_case fields — Claude-style). */\ninterface CodexHookInput {\n  tool_name?: string;\n  tool_input?: Record<string, unknown>;\n  tool_response?: string;\n  session_id?: string;\n  cwd?: string;\n  hook_event_name?: string;\n  source?: string;\n  prompt?: string;\n  is_error?: boolean;\n  stop_hook_active?: boolean;\n  trigger?: string;\n  message?: string;\n  // PostToolUseFailure-style failure field. Codex has NO failure event today;\n  // parsed defensively only (the Claude-compatible wire would carry it).\n  error?: string;\n  // SubagentStart / SubagentStop (agent_type is the matcher subject).\n  agent_id?: string;\n  agent_type?: string;\n  // SubagentStop only — the subagent's own transcript + final message.\n  agent_transcript_path?: string;\n  last_assistant_message?: string;\n}\n\n/** One hook entry inside hooks.json (Claude-compatible). */\ninterface CodexHookEntry {\n  matcher?: string;\n  hooks: Array<{ type: \"command\"; command: string }>;\n}\n\n/** Rendered `[mcp_servers.<id>]` table — string env table, no interpolation. */\ninterface CodexMcpEntry {\n  // stdio transport\n  command?: string;\n  args?: string[];\n  env?: Record<string, string>;\n  // streamable HTTP transport (remote): codex infers the transport from `url`\n  // (no explicit transport key). Verified against codex-cli 0.139.0.\n  url?: string;\n  bearer_token_env_var?: string;\n  http_headers?: Record<string, string>;\n}\n\n/**\n * Codex hook events agent-connector registers, in the canonical → native order.\n * Codex uses the same PascalCase event names as Claude Code; the home-binary\n * hook command receives the lowercased event token.\n */\nconst CODEX_HOOK_EVENTS = [\n  \"SessionStart\",\n  \"PreToolUse\",\n  \"PostToolUse\",\n  \"PreCompact\",\n  \"UserPromptSubmit\",\n  \"Stop\",\n  \"PermissionRequest\",\n  \"SubagentStart\",\n  \"SubagentStop\",\n  \"PostCompact\",\n] as const;\n\ntype CodexHookEventName = (typeof CODEX_HOOK_EVENTS)[number];\n\n/**\n * Newer canonical events with NO Codex analog: Codex ships PostToolUse only —\n * there is no failure event on the live hooks page. Declared hooks for these\n * warn-skip at install so the degradation is reported, never silent. (The\n * legacy SessionEnd / Notification silent filter predates this convention and\n * is deliberately left untouched.)\n */\nconst WARN_SKIP_EVENTS: ReadonlySet<HookEventName> = new Set([\"PostToolUseFailure\"]);\n\n/**\n * PreToolUse matcher — canonical Codex tool names + bare MCP tool names +\n * external MCP catch-all literal. Charset-clean ([A-Za-z0-9_|] only) so Codex's\n * Rust `regex` exact-matcher short-circuits (no look-around, which Codex\n * rejects at boot). Copied from context-mode's proven matcher.\n */\nconst PRE_TOOL_USE_MATCHER =\n  \"local_shell|shell|shell_command|exec_command|Bash|Shell|apply_patch|Edit|Write|grep_files|mcp__\";\n\n// ─────────────────────────────────────────────────────────────────────────\n// Adapter\n// ─────────────────────────────────────────────────────────────────────────\n\nexport class CodexAdapter extends BaseAdapter {\n  readonly id: PlatformId = \"codex\";\n  readonly name = \"Codex CLI\";\n  readonly paradigm: HookParadigm = \"json-stdio\";\n\n  readonly capabilities: PlatformCapabilities = {\n    // Memory surface: AGENTS.md-first managed block. memoryTargets below probes\n    // AGENTS.override.md first (it shadows AGENTS.md per directory on codex).\n    supportsMemory: true,\n    preToolUse: true,\n    postToolUse: true,\n    preCompact: true,\n    sessionStart: true,\n    sessionEnd: false,\n    userPromptSubmit: true,\n    stop: true,\n    notification: false,\n    // E1 events: PermissionRequest (decision-capable) + SubagentStart/Stop are\n    // Codex-native. postToolUseFailure stays unset — Codex has no failure event,\n    // so a declared hook for it warn-skips at install.\n    permissionRequest: true,\n    subagentStart: true,\n    subagentStop: true,\n    // PostCompact: Codex's hook system fires both PreCompact and PostCompact\n    // (developers.openai.com/codex/hooks). Observational only — the reply\n    // contract mirrors PreCompact (cannot block/modify a completed compaction).\n    postCompact: true,\n    canModifyArgs: false,\n    canModifyOutput: false,\n    canInjectSessionContext: true,\n    transports: [\"stdio\", \"http\"],\n    // Content surfaces: Codex implements all three.\n    //   command  → ~/.codex/prompts/<name>.md   (md+frontmatter, USER SCOPE ONLY)\n    //   skill    → project: .codex/skills/<name>/SKILL.md · user: ~/.agents/skills/<name>/SKILL.md\n    //   subagent → <codexDir>/agents/<name>.toml (TOML)\n    supportsCommands: true,\n    supportsSkills: true,\n    supportsSubagents: true,\n  };\n\n  // ── Detection ──────────────────────────────────────────────────────────\n\n  detectInstalled(projectDir: string): DetectedPlatform {\n    const userDir = this.userConfigDir();\n    const projDir = join(projectDir, \".codex\");\n    const userCfg = join(userDir, \"config.toml\");\n    const projCfg = join(projDir, \"config.toml\");\n\n    const userInstalled = existsSync(userDir) || existsSync(userCfg);\n    const projInstalled = existsSync(projDir) || existsSync(projCfg);\n    const installed = userInstalled || projInstalled;\n    const scope = projInstalled && !userInstalled ? \"project\" : \"user\";\n    const configPath = scope === \"project\" ? projCfg : userCfg;\n\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath,\n      scope,\n      reason: installed\n        ? `Found Codex config dir (${scope})`\n        : `No .codex config dir at ${userDir} or ${projDir}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Native paths ───────────────────────────────────────────────────────\n\n  override getConfigDir(ctx: InstallContext): string {\n    if (ctx.scope === \"project\") return join(ctx.projectDir, \".codex\");\n    return this.userConfigDir();\n  }\n\n  override getServerConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"config.toml\");\n  }\n\n  override getHookConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"hooks.json\");\n  }\n\n  // ── Memory surface: AGENTS.override.md probe + 32 KiB doc-cap budget ─────\n  // Codex reads AGENTS.override.md > AGENTS.md per directory (one file per\n  // directory), so when the override file exists OUR block must live there or\n  // it is never loaded. Combined project docs are capped at 32 KiB\n  // (`project_doc_max_bytes`), hence the ~28 KiB per-file budget warn.\n  protected override memoryTargets(ctx: InstallContext): MemoryTarget[] {\n    // An explicit path override keeps the base resolution (escape hatch wins).\n    if (this.memoryOverride(ctx)?.path) return super.memoryTargets(ctx);\n    if (ctx.scope !== \"project\" && ctx.scope !== \"user\") return [];\n    const budgetBytes = 28 * 1024;\n    const dir = ctx.scope === \"project\" ? ctx.projectDir : this.userConfigDir();\n    const overrideMd = join(dir, \"AGENTS.override.md\");\n    if (existsSync(overrideMd)) {\n      return [\n        {\n          path: overrideMd,\n          reason: \"AGENTS.override.md shadows AGENTS.md on codex (one doc per directory)\",\n          budgetBytes,\n        },\n      ];\n    }\n    return [\n      {\n        path: join(dir, \"AGENTS.md\"),\n        reason:\n          ctx.scope === \"project\"\n            ? \"AGENTS.md standard (project root; codex is the format's originator)\"\n            : \"codex global guidance ($CODEX_HOME/AGENTS.md)\",\n        budgetBytes,\n      },\n    ];\n  }\n\n  /** `$CODEX_HOME` (tilde-expanded, then resolved) || `~/.codex` for user\n   *  scope. Shared with marketplace detection via `codexConfigHome` so the\n   *  config writer and the install probe never target different dirs. */\n  private userConfigDir(): string {\n    return codexConfigHome();\n  }\n\n  // ── TOML config IO (override JSON helpers — config.toml is TOML) ─────────\n\n  private readToml(path: string): Record<string, unknown> {\n    if (!existsSync(path)) return {};\n    try {\n      return TOML.parse(readFileSync(path, \"utf8\")) as Record<string, unknown>;\n    } catch {\n      return {};\n    }\n  }\n\n  private writeToml(path: string, data: Record<string, unknown>, dryRun: boolean): void {\n    if (dryRun) return;\n    ensureDir(dirname(path));\n    // @iarna/toml's stringify type wants its JsonMap; our object is structurally compatible.\n    writeFileSync(path, TOML.stringify(data as never), \"utf8\");\n  }\n\n  /** An ObjectMapCodec over config.toml for the core/object-map engine.\n   * `isPresentButUnparseable` is `() => false`: readToml fail-softs to {} and the\n   * server path has historically coerced/overwritten rather than warn-skip on an\n   * unparseable file — preserved here for byte-identical behavior. */\n  private tomlObjectMapCodec(): ObjectMapCodec {\n    return {\n      parse: (path) => this.readToml(path),\n      serialize: (path, data, dryRun) => this.writeToml(path, data, dryRun),\n      isPresentButUnparseable: () => false,\n    };\n  }\n\n  // ── Install server (config.toml → [mcp_servers.<id>]) ───────────────────\n\n  override installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector, dryRun } = ctx;\n    const server = this.effectiveServer(ctx);\n    const path = this.getServerConfigPath(ctx);\n\n    if (!server) {\n      return [{ platform: this.id, action: \"skip\", path, detail: \"no server declared\" }];\n    }\n    const isStdio = server.transport === \"stdio\" && !!server.command;\n    const isHttp = server.transport === \"http\" && !!server.url;\n    if (!isStdio && !isHttp) {\n      // Codex config.toml [mcp_servers] supports stdio (command) + streamable\n      // HTTP (url). Other remote transports (sse/ws) have no codex analog.\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          path,\n          detail: `transport \"${server.transport}\" not registrable in config.toml (stdio + streamable-http only)`,\n        },\n      ];\n    }\n\n    const entry = this.renderMcpEntry(ctx, server);\n\n    return [\n      upsertInObjectMap({\n        codec: this.tomlObjectMapCodec(),\n        rootKey: \"mcp_servers\",\n        policy: \"coerce\",\n        platform: this.id,\n        configPath: path,\n        entryId: connector.id,\n        entry,\n        dryRun,\n      }),\n    ];\n  }\n\n  override uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector, dryRun } = ctx;\n    const path = this.getServerConfigPath(ctx);\n    return [\n      removeFromObjectMap({\n        codec: this.tomlObjectMapCodec(),\n        rootKey: \"mcp_servers\",\n        policy: \"coerce\",\n        platform: this.id,\n        configPath: path,\n        entryId: connector.id,\n        dryRun,\n      }),\n    ];\n  }\n\n  // ── Install hooks (hooks.json) ──────────────────────────────────────────\n\n  override installHooks(ctx: InstallContext): ChangeRecord[] {\n    const path = this.getHookConfigPath(ctx);\n    const events = this.effectiveHookEvents(ctx);\n    const dropped = this.warnSkipHookEvents(ctx);\n\n    if (events.length === 0 && dropped.length === 0) {\n      return [{ platform: this.id, action: \"skip\", path, detail: \"no hooks declared\" }];\n    }\n\n    // HOST-ORDERED pending: warn-skip events (mapEvent → undefined → warn) FIRST,\n    // then the supported events in CODEX_HOOK_EVENTS order. Events neither\n    // supported nor in WARN_SKIP_EVENTS are never enqueued → silently dropped, as\n    // before. matcher is \"\" for every item; renderEntry derives the real matcher\n    // from the event (PreToolUse/PermissionRequest), never from this field.\n    const pending = [\n      ...dropped.map((event) => ({ event: event as string, matcher: \"\" })),\n      ...events.map((event) => ({ event: event as string, matcher: \"\" })),\n    ];\n    return this.upsertHookEntries(ctx, path, pending, this.hookDescriptor(ctx));\n  }\n\n  override uninstallHooks(ctx: InstallContext): ChangeRecord[] {\n    return this.removeHookEntries(ctx, this.getHookConfigPath(ctx), this.hookDescriptor(ctx));\n  }\n\n  /**\n   * Codex hook-merge policy for the shared object-map engine. EVENT-SPECIFIC by\n   * construction: every observable (coerce root + bucket, the path-normalized\n   * per-event ownership find, the event-derived matcher with `hooks`-then-\n   * `matcher` key order, the BARE `hooks.<event>` skip/remove details with NO\n   * count, the warn wording, and the absent/no-match skips) is carried here so\n   * the engine reproduces the prior in-adapter loop byte-for-byte.\n   */\n  private hookDescriptor(ctx: InstallContext): HookMergeDescriptor<CodexHookEntry> {\n    return {\n      // Codex's server path coerces a malformed root; the hook path matches it.\n      malformedPolicy: \"coerce\",\n      // Supported event → identity; a WARN_SKIP event (PostToolUseFailure, which\n      // is the only thing `dropped` ever contains) → undefined → warn.\n      mapEvent: (e) =>\n        (CODEX_HOOK_EVENTS as readonly string[]).includes(e) ? e : undefined,\n      unmappedWarnDetail: (e) => `${e} has no Codex hook equivalent — skipped`,\n      renderEntry: (event, _matcher, command) => {\n        const entry: CodexHookEntry = { hooks: [{ type: \"command\", command }] };\n        // KEY ORDER: hooks THEN matcher. Matcher is EVENT-derived, not from the\n        // connector's declared matcher: PermissionRequest matches tool names like\n        // PreToolUse (charset-clean), everything else registers \"\" (all).\n        entry.matcher =\n          event === \"PreToolUse\" || event === \"PermissionRequest\" ? PRE_TOOL_USE_MATCHER : \"\";\n        return entry;\n      },\n      // Idempotency find for the CANONICAL event the engine built `command` from —\n      // path-normalized, exact-command, the body of isOurEntry's command check.\n      entryOwnsCommand: (entry, command) =>\n        Array.isArray(entry.hooks) &&\n        entry.hooks.some(\n          (h) => (h.command ?? \"\").replace(/\\\\/g, \"/\") === command.replace(/\\\\/g, \"/\"),\n        ),\n      // FLAT whole-entry removal, EVENT-SPECIFIC: isOurEntry rebuilds our command\n      // from the event key being stripped, so a SubagentStop entry is never matched\n      // while iterating the PreToolUse bucket.\n      ownsEntryForRemove: (c, event) => (entry) =>\n        this.isOurEntry(c, event as CodexHookEventName, entry),\n      skipDetail: (e) => `hooks.${e}`,\n      removeDetail: (e, _n) => `hooks.${e}`,\n      absentDetail: \"no hooks.json\",\n      noMatchDetail: \"no agent-connector hooks present\",\n      // Uninstall scans EXACTLY codex's fixed event set (not Object.keys), so a\n      // home-bin command hand-placed under a foreign event key is left untouched —\n      // byte-identical to the prior `for (const event of CODEX_HOOK_EVENTS)` loop.\n      removeEventKeys: CODEX_HOOK_EVENTS,\n    };\n  }\n\n  // ── Health checks (default doctor renders these) ────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const path = this.getServerConfigPath(ctx);\n    const id = ctx.connector.id;\n    const checks: HealthCheck[] = [\n      {\n        name: `${this.name}: config.toml exists`,\n        check: () =>\n          existsSync(path)\n            ? { status: \"OK\", detail: path }\n            : { status: \"FAIL\", detail: `not found: ${path}` },\n      },\n      {\n        name: `${this.name}: mcp_servers.${id} registered`,\n        check: () => {\n          // Only assert what the connector declares (same rule as the\n          // content-surface checks below): a server-less connector — e.g. a\n          // catalog-only bundle of agents/skills/commands — never writes an\n          // [mcp_servers.<id>] table, so its absence is healthy.\n          if (!ctx.connector.server) {\n            return { status: \"OK\", detail: \"no MCP server declared\" };\n          }\n          const cfg = this.readToml(path);\n          const bucket = cfg[\"mcp_servers\"];\n          const present =\n            typeof bucket === \"object\" &&\n            bucket !== null &&\n            id in (bucket as Record<string, unknown>);\n          return present\n            ? { status: \"OK\", detail: `mcp_servers.${id}` }\n            : { status: \"FAIL\", detail: `mcp_servers.${id} not found in ${path}` };\n        },\n      },\n    ];\n\n    // Content-surface checks: assert presence only for surfaces this connector\n    // declares. Codex commands are user-scope only, so a project-scope install\n    // won't have written them — only check command files in user scope.\n    if (ctx.scope !== \"project\") {\n      for (const cmd of ctx.connector.commands) {\n        const p = this.commandPath(cmd.name);\n        checks.push({\n          name: `${this.name}: command ${cmd.name} present`,\n          check: () =>\n            existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n        });\n      }\n    }\n    for (const skill of ctx.connector.skills) {\n      const p = join(this.skillDir(ctx, skill.name), \"SKILL.md\");\n      checks.push({\n        name: `${this.name}: skill ${skill.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    for (const agent of ctx.connector.subagents) {\n      const p = this.subagentPath(ctx, agent.name);\n      checks.push({\n        name: `${this.name}: subagent ${agent.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    return checks;\n  }\n\n  // ── Content surfaces: commands / skills / subagents ──────────────────────\n  // CONTENT-ONLY: pure native-file writers. No runtime dispatch, no home-bin\n  // pointer, no telemetry wrap. Each method is idempotent (byte-identical →\n  // skip) via writeContentFile and reversible via removeContentFile. Honors\n  // platforms[\"codex\"] per-surface false to skip.\n  //\n  // Native locations:\n  //   command  → ~/.codex/prompts/<name>.md   md+frontmatter(description,argument-hint)\n  //              USER SCOPE ONLY — project scope yields a single \"warn\".\n  //   skill    → project: <projectDir>/.codex/skills/<name>/SKILL.md (+ resources)\n  //              user:    ~/.agents/skills/<name>/SKILL.md (~/.codex/skills is deprecated)\n  //   subagent → <codexDir>/agents/<name>.toml  TOML via writeTomlString\n\n  /** Command files always live under the USER codex dir: ~/.codex/prompts. */\n  private commandPath(name: string): string {\n    return join(this.userConfigDir(), \"prompts\", `${name}.md`);\n  }\n  private skillDir(ctx: InstallContext, name: string): string {\n    // Project scope: <projectDir>/.codex/skills/<name> — the Project config-layer\n    // skills root (codex-rs/core-skills/src/loader.rs, ConfigLayerSource::Project),\n    // NOT deprecated. User scope: $HOME/.agents/skills/<name> — codex's CURRENT\n    // user skills root. The older $CODEX_HOME/skills (~/.codex/skills) is still\n    // read but the loader labels it a \"Deprecated user skills location, kept for\n    // backward compatibility\". .agents is anchored to the OS home (home_dir), NOT\n    // $CODEX_HOME — so use homedir() here, never userConfigDir() (which honors\n    // CODEX_HOME).\n    if (ctx.scope === \"project\") return join(this.getConfigDir(ctx), \"skills\", name);\n    return join(homedir(), \".agents\", \"skills\", name);\n  }\n  private subagentPath(ctx: InstallContext, name: string): string {\n    return join(this.getConfigDir(ctx), \"agents\", `${name}.toml`);\n  }\n\n  // ── Commands (USER SCOPE ONLY) ───────────────────────────────────────────\n\n  override installCommands(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[this.id]?.commands === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"commands disabled for codex\" }];\n    }\n    if (ctx.scope === \"project\") {\n      return [{ platform: this.id, action: \"warn\", detail: \"codex commands are user-scope only\" }];\n    }\n    if (connector.commands.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\n    }\n    return connector.commands.map((cmd) =>\n      this.writeContentFile(\n        this.commandPath(cmd.name),\n        renderCommandMd(cmd, { includeToolsAndModel: false }),\n        ctx.dryRun,\n      ),\n    );\n  }\n\n  override uninstallCommands(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (ctx.scope === \"project\") {\n      return [{ platform: this.id, action: \"warn\", detail: \"codex commands are user-scope only\" }];\n    }\n    if (connector.commands.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\n    }\n    return connector.commands.map((cmd) =>\n      this.removeContentFile(this.commandPath(cmd.name), ctx.dryRun),\n    );\n  }\n\n  // ── Skills ───────────────────────────────────────────────────────────────\n\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[this.id]?.skills === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for codex\" }];\n    }\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      const rendered = renderSkillMd(skill);\n      changes.push(this.writeContentFile(join(dir, \"SKILL.md\"), rendered, ctx.dryRun));\n      // Bundle any resource files beside SKILL.md (relative path → contents).\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\n      // (config-time validation already rejects these, but never trust input).\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\n          });\n          continue;\n        }\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\n      }\n      // Migrate away an AC-owned copy at the deprecated user skills root so the\n      // skill is not double-registered after the move to ~/.agents/skills.\n      changes.push(...this.migrateDeprecatedUserSkill(ctx, skill, rendered));\n    }\n    return changes;\n  }\n\n  /**\n   * One-time, opt-out-safe migration: prior AC versions wrote user-scope skills\n   * to the now-deprecated $CODEX_HOME/skills/<name> root, which codex STILL reads\n   * (kept for backward compatibility). Once we write the same skill to the current\n   * ~/.agents/skills root, codex would register it TWICE (same frontmatter name,\n   * two User-scope roots). If a SKILL.md exists at the deprecated path AND is\n   * byte-identical to what we render — i.e. AC-owned, not hand-authored — remove\n   * it (and its now-empty dir). The content-equality guard guarantees we never\n   * delete a skill a user placed there by hand. No-op for project scope (where\n   * .codex/skills is the valid, non-deprecated Project config-layer path) and when\n   * a custom CODEX_HOME would make the deprecated path coincide with the new one.\n   */\n  private migrateDeprecatedUserSkill(\n    ctx: InstallContext,\n    skill: SkillDef,\n    rendered: string,\n  ): ChangeRecord[] {\n    if (ctx.scope === \"project\") return [];\n    const deprecated = join(this.userConfigDir(), \"skills\", skill.name, \"SKILL.md\");\n    // Never touch the file we just wrote (pathological CODEX_HOME === ~/.agents).\n    if (deprecated === join(this.skillDir(ctx, skill.name), \"SKILL.md\")) return [];\n    if (!existsSync(deprecated)) return [];\n    if (readFileSync(deprecated, \"utf8\") !== rendered) return []; // hand-authored — leave it\n    return [\n      this.removeContentFile(deprecated, ctx.dryRun),\n      this.removeDirIfEmpty(dirname(deprecated), ctx.dryRun),\n    ];\n  }\n\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\n      // skill dir itself when we own its full contents.\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\n      for (const rel of Object.keys(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) continue; // never delete outside the skill dir\n        changes.push(this.removeContentFile(target, ctx.dryRun));\n      }\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\n      // dir that still holds user-added / sibling-tool / shared files.\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\n    }\n    return changes;\n  }\n\n  // ── Subagents (TOML) ─────────────────────────────────────────────────────\n\n  override installSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[this.id]?.subagents === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"subagents disabled for codex\" }];\n    }\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.writeContentFile(this.subagentPath(ctx, agent.name), this.renderSubagent(agent), ctx.dryRun),\n    );\n  }\n\n  override uninstallSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.removeContentFile(this.subagentPath(ctx, agent.name), ctx.dryRun),\n    );\n  }\n\n  /**\n   * Render a subagent to a Codex agent TOML file:\n   *   { name, description, developer_instructions: prompt, model }.\n   * model is omitted when undefined so Codex applies its default.\n   */\n  private renderSubagent(agent: SubagentDef): string {\n    const table: Record<string, unknown> = {\n      name: agent.name,\n      description: agent.description,\n      developer_instructions: agent.prompt,\n    };\n    if (agent.model !== undefined) table.model = agent.model;\n    if (agent.extra) Object.assign(table, agent.extra);\n    return writeTomlString(table);\n  }\n\n  // ── Runtime dispatch ────────────────────────────────────────────────────\n\n  parseEvent(event: HookEventName, raw: unknown): NormalizedEvent {\n    const input = (raw ?? {}) as CodexHookInput;\n    const base = {\n      hostPlatform: this.id,\n      connectorId: \"\",\n      sessionId: input.session_id ?? `pid-${process.ppid}`,\n      projectDir: input.cwd ?? process.env.CODEX_PROJECT_DIR ?? process.cwd(),\n      raw,\n    };\n\n    switch (event) {\n      case \"PreToolUse\":\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n        };\n      case \"PostToolUse\":\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          toolOutput: input.tool_response,\n          isError: input.is_error ?? false,\n        };\n      case \"SessionStart\":\n        return { ...base, source: normalizeSessionSource(input.source) };\n      case \"SessionEnd\":\n        return { ...base, reason: input.message };\n      case \"UserPromptSubmit\":\n        return { ...base, prompt: input.prompt ?? \"\" };\n      case \"PreCompact\":\n        return { ...base, trigger: input.trigger === \"manual\" ? \"manual\" : \"auto\" };\n      case \"PostCompact\":\n        // Post-compaction sibling of PreCompact — same `trigger` normalization\n        // (manual|auto), observe-only. Codex's PostCompact payload mirrors\n        // PreCompact's; everything else rides on `raw`.\n        return { ...base, trigger: input.trigger === \"manual\" ? \"manual\" : \"auto\" };\n      case \"Stop\":\n        return { ...base, stopHookActive: input.stop_hook_active ?? false };\n      case \"Notification\":\n        return { ...base, message: input.message ?? \"\" };\n      case \"PermissionRequest\":\n        // Codex documents tool_name/tool_input (+tool_input.description); it has\n        // no permission_suggestions field, so the normalized optional stays unset.\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n        };\n      case \"PostToolUseFailure\":\n        // No Codex analog — never fired natively. Parsed defensively (Claude-\n        // compatible wire) so a manual `hook codex PostToolUseFailure` invocation\n        // still normalizes instead of throwing.\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          error: input.error ?? \"\",\n        };\n      case \"SubagentStart\":\n        return {\n          ...base,\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\n          ...(typeof input.agent_type === \"string\" ? { agentType: input.agent_type } : {}),\n        };\n      case \"SubagentStop\":\n        // agent_id/agent_type stay optional — never depend on hosts populating\n        // them on stop (the Claude-family SDK quirk).\n        return {\n          ...base,\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\n          ...(typeof input.agent_type === \"string\" ? { agentType: input.agent_type } : {}),\n          ...(typeof input.agent_transcript_path === \"string\"\n            ? { agentTranscriptPath: input.agent_transcript_path }\n            : {}),\n          ...(typeof input.last_assistant_message === \"string\"\n            ? { lastAssistantMessage: input.last_assistant_message }\n            : {}),\n          ...(typeof input.stop_hook_active === \"boolean\"\n            ? { stopHookActive: input.stop_hook_active }\n            : {}),\n        };\n    }\n  }\n\n  formatReply(event: HookEventName, response: HookResponse): HookReply {\n    // Codex (like Claude Code) reads a `hookSpecificOutput` JSON wrapper from\n    // stdout; exit code 0 = allow. Fields the host cannot honor are dropped.\n\n    // PermissionRequest uses Codex's nested decision{behavior} envelope and is\n    // the ONE event where an EXPLICIT \"allow\" is an ACTIVE grant (suppresses the\n    // approval prompt). ask/context/void → NO decision output: fall through to\n    // the normal approval flow (the prompt IS the ask). Codex docs: updatedInput\n    // / updatedPermissions / interrupt FAIL CLOSED on this event, so \"modify\"\n    // also falls through — emitting a bare allow would grant the ORIGINAL input\n    // the handler wanted rewritten.\n    if (event === \"PermissionRequest\") {\n      if (response.decision === \"deny\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"PermissionRequest\",\n              decision: {\n                behavior: \"deny\",\n                message: response.reason ?? \"Blocked by hook\",\n              },\n            },\n          }),\n        };\n      }\n      if (response.decision === \"allow\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"PermissionRequest\",\n              decision: { behavior: \"allow\" },\n            },\n          }),\n        };\n      }\n      return { exitCode: 0 };\n    }\n\n    // SubagentStart is observe/context-only on Codex (continue:false is parsed\n    // but does not stop the subagent): \"context\" injects additionalContext as\n    // developer context for the SUBAGENT, and a \"deny\" DEGRADES to the same\n    // shape carrying the reason.\n    if (event === \"SubagentStart\") {\n      const context =\n        response.decision === \"context\"\n          ? response.additionalContext\n          : response.decision === \"deny\"\n            ? response.reason ?? response.additionalContext\n            : undefined;\n      if (context) {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"SubagentStart\",\n              additionalContext: context,\n            },\n          }),\n        };\n      }\n      return { exitCode: 0 };\n    }\n\n    if (response.decision === \"deny\") {\n      // PreToolUse deny is honored; other events fail-open to allow.\n      if (event === \"PreToolUse\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"PreToolUse\",\n              permissionDecision: \"deny\",\n              permissionDecisionReason: response.reason ?? \"Blocked by hook\",\n            },\n          }),\n        };\n      }\n      // SubagentStop deny = Stop semantics: the documented continuation shape is\n      // the TOP-LEVEL {\"decision\":\"block\",\"reason\"} (keeps the subagent going\n      // with `reason` as its next instruction).\n      if (event === \"SubagentStop\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            decision: \"block\",\n            reason: response.reason ?? \"Blocked by hook\",\n          }),\n        };\n      }\n      return { exitCode: 0 };\n    }\n\n    // Context injection: honored on SessionStart and PostToolUse (additionalContext).\n    // (SubagentStop accepts only the common output fields — no additionalContext.)\n    if (response.additionalContext && (event === \"SessionStart\" || event === \"PostToolUse\")) {\n      return {\n        exitCode: 0,\n        stdout: JSON.stringify({\n          hookSpecificOutput: {\n            hookEventName: event,\n            additionalContext: response.additionalContext,\n          },\n        }),\n      };\n    }\n\n    // \"allow\" / unsupported-on-Codex (modify, ask) → passthrough.\n    return { exitCode: 0 };\n  }\n\n  // ── Internal helpers ────────────────────────────────────────────────────\n\n  /** Resolve the per-platform server override into an effective ServerDef. */\n  private effectiveServer(ctx: InstallContext): ServerDef | undefined {\n    const override = ctx.connector.platforms[this.id]?.server;\n    if (override === false) return undefined;\n    const base = ctx.connector.server;\n    if (!base) return undefined;\n    return override ? { ...base, ...override } : base;\n  }\n\n  /** Which canonical hook events to register for Codex, honoring overrides. */\n  private effectiveHookEvents(ctx: InstallContext): CodexHookEventName[] {\n    const override = ctx.connector.platforms[this.id]?.hooks;\n    if (override === false) return [];\n    return CODEX_HOOK_EVENTS.filter((e) => ctx.connector.hookEvents.includes(e));\n  }\n\n  /** Declared events Codex has no analog for — install reports a warn-skip. */\n  private warnSkipHookEvents(ctx: InstallContext): HookEventName[] {\n    const override = ctx.connector.platforms[this.id]?.hooks;\n    if (override === false) return [];\n    return ctx.connector.hookEvents.filter((e) => WARN_SKIP_EVENTS.has(e));\n  }\n\n  /**\n   * Render the `[mcp_servers.<id>]` table. TOML has NO interpolation, so every\n   * `${env:VAR}` is resolved to a literal at install time. The env table is a\n   * plain string→string map. Honors the telemetry serve-wrapper.\n   */\n  private renderMcpEntry(ctx: InstallContext, server: ServerDef): CodexMcpEntry {\n    // Streamable HTTP server: codex infers the transport from `url` (no explicit\n    // transport key). VERIFIED against codex-cli 0.139.0 — `codex mcp add <id>\n    // --url <U> --bearer-token-env-var <E>` writes:\n    //   [mcp_servers.<id>]\n    //   url = \"…\"\n    //   bearer_token_env_var = \"…\"   (only with bearerEnv auth)\n    // Telemetry serve-wrapping is stdio-only (remote cannot be intercepted).\n    // installServer's guard only lets stdio+command or http+url reach here, so\n    // this branch is exactly the streamable-HTTP case (lock-step with the guard).\n    if (server.transport === \"http\") {\n      const remote: CodexMcpEntry = { url: resolveEnvRefsDeep(server.url ?? \"\") };\n      if (server.auth?.type === \"bearerEnv\" && server.auth.bearerEnvVar) {\n        remote.bearer_token_env_var = server.auth.bearerEnvVar;\n      }\n      if (server.headers && Object.keys(server.headers).length > 0) {\n        const headers: Record<string, string> = {};\n        for (const [k, v] of Object.entries(resolveEnvRefsDeep(server.headers))) {\n          headers[k] = String(v);\n        }\n        remote.http_headers = headers;\n      }\n      return remote;\n    }\n    let command = server.command as string;\n    let args = [...(server.args ?? [])];\n\n    ({ command, args } = buildWrappedStdio(ctx, server, this.id, command, args));\n\n    // Resolve env-refs to literals (TOML cannot interpolate).\n    command = resolveEnvRefsDeep(command);\n    args = resolveEnvRefsDeep(args);\n\n    const entry: CodexMcpEntry = { command };\n    if (args.length > 0) entry.args = args;\n\n    if (server.env && Object.keys(server.env).length > 0) {\n      const env: Record<string, string> = {};\n      for (const [k, v] of Object.entries(resolveEnvRefsDeep(server.env))) {\n        env[k] = String(v);\n      }\n      entry.env = env;\n    }\n    return entry;\n  }\n\n  /**\n   * Does this hooks.json entry belong to this connector for `event`? EVENT-\n   * SPECIFIC + path-normalized exact-command match. The engine binds this per\n   * event in the uninstall (whole-entry FLAT removal) and the install idempotency\n   * find reuses its command body via the descriptor's entryOwnsCommand.\n   */\n  private isOurEntry(ctx: InstallContext, event: CodexHookEventName, entry: CodexHookEntry): boolean {\n    if (!entry || typeof entry !== \"object\" || !Array.isArray(entry.hooks)) return false;\n    const ours = buildHomeBinHookCommand(ctx.homeBinPath, \"codex\", event, ctx.connector.id);\n    const needle = ours.replace(/\\\\/g, \"/\");\n    return entry.hooks.some((h) => (h.command ?? \"\").replace(/\\\\/g, \"/\") === needle);\n  }\n}\n\nexport const adapter = new CodexAdapter();\nexport default adapter;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,SAAS,YAAY,cAAc,qBAAqB;AACxD,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AAE9B,OAAO,UAAU;AA2FjB,IAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAWA,IAAM,mBAA+C,oBAAI,IAAI,CAAC,oBAAoB,CAAC;AAQnF,IAAM,uBACJ;AAMK,IAAM,eAAN,cAA2B,YAAY;AAAA,EACnC,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA,IAChB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA;AAAA;AAAA;AAAA,IAId,mBAAmB;AAAA,IACnB,eAAe;AAAA,IACf,cAAc;AAAA;AAAA;AAAA;AAAA,IAId,aAAa;AAAA,IACb,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,yBAAyB;AAAA,IACzB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,IAK5B,kBAAkB;AAAA,IAClB,gBAAgB;AAAA,IAChB,mBAAmB;AAAA,EACrB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,cAAc;AACnC,UAAM,UAAU,KAAK,YAAY,QAAQ;AACzC,UAAM,UAAU,KAAK,SAAS,aAAa;AAC3C,UAAM,UAAU,KAAK,SAAS,aAAa;AAE3C,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,YAAY,iBAAiB;AACnC,UAAM,QAAQ,iBAAiB,CAAC,gBAAgB,YAAY;AAC5D,UAAM,aAAa,UAAU,YAAY,UAAU;AAEnD,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,2BAA2B,KAAK,MAChC,2BAA2B,OAAO,OAAO,OAAO;AAAA,MACpD,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIS,aAAa,KAA6B;AACjD,QAAI,IAAI,UAAU,UAAW,QAAO,KAAK,IAAI,YAAY,QAAQ;AACjE,WAAO,KAAK,cAAc;AAAA,EAC5B;AAAA,EAES,oBAAoB,KAA6B;AACxD,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,aAAa;AAAA,EACnD;AAAA,EAES,kBAAkB,KAA6B;AACtD,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,YAAY;AAAA,EAClD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOmB,cAAc,KAAqC;AAEpE,QAAI,KAAK,eAAe,GAAG,GAAG,KAAM,QAAO,MAAM,cAAc,GAAG;AAClE,QAAI,IAAI,UAAU,aAAa,IAAI,UAAU,OAAQ,QAAO,CAAC;AAC7D,UAAM,cAAc,KAAK;AACzB,UAAM,MAAM,IAAI,UAAU,YAAY,IAAI,aAAa,KAAK,cAAc;AAC1E,UAAM,aAAa,KAAK,KAAK,oBAAoB;AACjD,QAAI,WAAW,UAAU,GAAG;AAC1B,aAAO;AAAA,QACL;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,QACE,MAAM,KAAK,KAAK,WAAW;AAAA,QAC3B,QACE,IAAI,UAAU,YACV,wEACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,gBAAwB;AAC9B,WAAO,gBAAgB;AAAA,EACzB;AAAA;AAAA,EAIQ,SAAS,MAAuC;AACtD,QAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,QAAI;AACF,aAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,IAC9C,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA,EAEQ,UAAU,MAAc,MAA+B,QAAuB;AACpF,QAAI,OAAQ;AACZ,cAAU,QAAQ,IAAI,CAAC;AAEvB,kBAAc,MAAM,KAAK,UAAU,IAAa,GAAG,MAAM;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,qBAAqC;AAC3C,WAAO;AAAA,MACL,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI;AAAA,MACnC,WAAW,CAAC,MAAM,MAAM,WAAW,KAAK,UAAU,MAAM,MAAM,MAAM;AAAA,MACpE,yBAAyB,MAAM;AAAA,IACjC;AAAA,EACF;AAAA;AAAA,EAIS,cAAc,KAAqC;AAC1D,UAAM,EAAE,WAAW,OAAO,IAAI;AAC9B,UAAM,SAAS,KAAK,gBAAgB,GAAG;AACvC,UAAM,OAAO,KAAK,oBAAoB,GAAG;AAEzC,QAAI,CAAC,QAAQ;AACX,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,qBAAqB,CAAC;AAAA,IACnF;AACA,UAAM,UAAU,OAAO,cAAc,WAAW,CAAC,CAAC,OAAO;AACzD,UAAM,SAAS,OAAO,cAAc,UAAU,CAAC,CAAC,OAAO;AACvD,QAAI,CAAC,WAAW,CAAC,QAAQ;AAGvB,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR;AAAA,UACA,QAAQ,cAAc,OAAO,SAAS;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,QAAQ,KAAK,eAAe,KAAK,MAAM;AAE7C,WAAO;AAAA,MACL,kBAAkB;AAAA,QAChB,OAAO,KAAK,mBAAmB;AAAA,QAC/B,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,UAAU,KAAK;AAAA,QACf,YAAY;AAAA,QACZ,SAAS,UAAU;AAAA,QACnB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,WAAW,OAAO,IAAI;AAC9B,UAAM,OAAO,KAAK,oBAAoB,GAAG;AACzC,WAAO;AAAA,MACL,oBAAoB;AAAA,QAClB,OAAO,KAAK,mBAAmB;AAAA,QAC/B,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,UAAU,KAAK;AAAA,QACf,YAAY;AAAA,QACZ,SAAS,UAAU;AAAA,QACnB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAAA,EAIS,aAAa,KAAqC;AACzD,UAAM,OAAO,KAAK,kBAAkB,GAAG;AACvC,UAAM,SAAS,KAAK,oBAAoB,GAAG;AAC3C,UAAM,UAAU,KAAK,mBAAmB,GAAG;AAE3C,QAAI,OAAO,WAAW,KAAK,QAAQ,WAAW,GAAG;AAC/C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,oBAAoB,CAAC;AAAA,IAClF;AAOA,UAAM,UAAU;AAAA,MACd,GAAG,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAwB,SAAS,GAAG,EAAE;AAAA,MACnE,GAAG,OAAO,IAAI,CAAC,WAAW,EAAE,OAAwB,SAAS,GAAG,EAAE;AAAA,IACpE;AACA,WAAO,KAAK,kBAAkB,KAAK,MAAM,SAAS,KAAK,eAAe,GAAG,CAAC;AAAA,EAC5E;AAAA,EAES,eAAe,KAAqC;AAC3D,WAAO,KAAK,kBAAkB,KAAK,KAAK,kBAAkB,GAAG,GAAG,KAAK,eAAe,GAAG,CAAC;AAAA,EAC1F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,eAAe,KAA0D;AAC/E,WAAO;AAAA;AAAA,MAEL,iBAAiB;AAAA;AAAA;AAAA,MAGjB,UAAU,CAAC,MACR,kBAAwC,SAAS,CAAC,IAAI,IAAI;AAAA,MAC7D,oBAAoB,CAAC,MAAM,GAAG,CAAC;AAAA,MAC/B,aAAa,CAAC,OAAO,UAAU,YAAY;AACzC,cAAM,QAAwB,EAAE,OAAO,CAAC,EAAE,MAAM,WAAW,QAAQ,CAAC,EAAE;AAItE,cAAM,UACJ,UAAU,gBAAgB,UAAU,sBAAsB,uBAAuB;AACnF,eAAO;AAAA,MACT;AAAA;AAAA;AAAA,MAGA,kBAAkB,CAAC,OAAO,YACxB,MAAM,QAAQ,MAAM,KAAK,KACzB,MAAM,MAAM;AAAA,QACV,CAAC,OAAO,EAAE,WAAW,IAAI,QAAQ,OAAO,GAAG,MAAM,QAAQ,QAAQ,OAAO,GAAG;AAAA,MAC7E;AAAA;AAAA;AAAA;AAAA,MAIF,oBAAoB,CAAC,GAAG,UAAU,CAAC,UACjC,KAAK,WAAW,GAAG,OAA6B,KAAK;AAAA,MACvD,YAAY,CAAC,MAAM,SAAS,CAAC;AAAA,MAC7B,cAAc,CAAC,GAAG,OAAO,SAAS,CAAC;AAAA,MACnC,cAAc;AAAA,MACd,eAAe;AAAA;AAAA;AAAA;AAAA,MAIf,iBAAiB;AAAA,IACnB;AAAA,EACF;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,OAAO,KAAK,oBAAoB,GAAG;AACzC,UAAM,KAAK,IAAI,UAAU;AACzB,UAAM,SAAwB;AAAA,MAC5B;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,IAAI,IACX,EAAE,QAAQ,MAAM,QAAQ,KAAK,IAC7B,EAAE,QAAQ,QAAQ,QAAQ,cAAc,IAAI,GAAG;AAAA,MACvD;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI,iBAAiB,EAAE;AAAA,QACrC,OAAO,MAAM;AAKX,cAAI,CAAC,IAAI,UAAU,QAAQ;AACzB,mBAAO,EAAE,QAAQ,MAAM,QAAQ,yBAAyB;AAAA,UAC1D;AACA,gBAAM,MAAM,KAAK,SAAS,IAAI;AAC9B,gBAAM,SAAS,IAAI,aAAa;AAChC,gBAAM,UACJ,OAAO,WAAW,YAClB,WAAW,QACX,MAAO;AACT,iBAAO,UACH,EAAE,QAAQ,MAAM,QAAQ,eAAe,EAAE,GAAG,IAC5C,EAAE,QAAQ,QAAQ,QAAQ,eAAe,EAAE,iBAAiB,IAAI,GAAG;AAAA,QACzE;AAAA,MACF;AAAA,IACF;AAKA,QAAI,IAAI,UAAU,WAAW;AAC3B,iBAAW,OAAO,IAAI,UAAU,UAAU;AACxC,cAAM,IAAI,KAAK,YAAY,IAAI,IAAI;AACnC,eAAO,KAAK;AAAA,UACV,MAAM,GAAG,KAAK,IAAI,aAAa,IAAI,IAAI;AAAA,UACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,QAC9F,CAAC;AAAA,MACH;AAAA,IACF;AACA,eAAW,SAAS,IAAI,UAAU,QAAQ;AACxC,YAAM,IAAI,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU;AACzD,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,WAAW,MAAM,IAAI;AAAA,QACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,eAAW,SAAS,IAAI,UAAU,WAAW;AAC3C,YAAM,IAAI,KAAK,aAAa,KAAK,MAAM,IAAI;AAC3C,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,cAAc,MAAM,IAAI;AAAA,QAC1C,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBQ,YAAY,MAAsB;AACxC,WAAO,KAAK,KAAK,cAAc,GAAG,WAAW,GAAG,IAAI,KAAK;AAAA,EAC3D;AAAA,EACQ,SAAS,KAAqB,MAAsB;AAS1D,QAAI,IAAI,UAAU,UAAW,QAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU,IAAI;AAC/E,WAAO,KAAK,QAAQ,GAAG,WAAW,UAAU,IAAI;AAAA,EAClD;AAAA,EACQ,aAAa,KAAqB,MAAsB;AAC9D,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU,GAAG,IAAI,OAAO;AAAA,EAC9D;AAAA;AAAA,EAIS,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,aAAa,OAAO;AACpD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,8BAA8B,CAAC;AAAA,IACtF;AACA,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,qCAAqC,CAAC;AAAA,IAC7F;AACA,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK;AAAA,QACH,KAAK,YAAY,IAAI,IAAI;AAAA,QACzB,gBAAgB,KAAK,EAAE,sBAAsB,MAAM,CAAC;AAAA,QACpD,IAAI;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAAA,EAES,kBAAkB,KAAqC;AAC9D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,qCAAqC,CAAC;AAAA,IAC7F;AACA,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK,kBAAkB,KAAK,YAAY,IAAI,IAAI,GAAG,IAAI,MAAM;AAAA,IAC/D;AAAA,EACF;AAAA;AAAA,EAIS,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,WAAW,OAAO;AAClD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,4BAA4B,CAAC;AAAA,IACpF;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AACzC,YAAM,WAAW,cAAc,KAAK;AACpC,cAAQ,KAAK,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,UAAU,IAAI,MAAM,CAAC;AAI/E,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAGA,cAAQ,KAAK,GAAG,KAAK,2BAA2B,KAAK,OAAO,QAAQ,CAAC;AAAA,IACvE;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcQ,2BACN,KACA,OACA,UACgB;AAChB,QAAI,IAAI,UAAU,UAAW,QAAO,CAAC;AACrC,UAAM,aAAa,KAAK,KAAK,cAAc,GAAG,UAAU,MAAM,MAAM,UAAU;AAE9E,QAAI,eAAe,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU,EAAG,QAAO,CAAC;AAC7E,QAAI,CAAC,WAAW,UAAU,EAAG,QAAO,CAAC;AACrC,QAAI,aAAa,YAAY,MAAM,MAAM,SAAU,QAAO,CAAC;AAC3D,WAAO;AAAA,MACL,KAAK,kBAAkB,YAAY,IAAI,MAAM;AAAA,MAC7C,KAAK,iBAAiB,QAAQ,UAAU,GAAG,IAAI,MAAM;AAAA,IACvD;AAAA,EACF;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIS,iBAAiB,KAAqC;AAC7D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,cAAc,OAAO;AACrD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,iBAAiB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,KAAK,eAAe,KAAK,GAAG,IAAI,MAAM;AAAA,IAClG;AAAA,EACF;AAAA,EAES,mBAAmB,KAAqC;AAC/D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,kBAAkB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,IAAI,MAAM;AAAA,IACvE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,eAAe,OAA4B;AACjD,UAAM,QAAiC;AAAA,MACrC,MAAM,MAAM;AAAA,MACZ,aAAa,MAAM;AAAA,MACnB,wBAAwB,MAAM;AAAA,IAChC;AACA,QAAI,MAAM,UAAU,OAAW,OAAM,QAAQ,MAAM;AACnD,QAAI,MAAM,MAAO,QAAO,OAAO,OAAO,MAAM,KAAK;AACjD,WAAO,gBAAgB,KAAK;AAAA,EAC9B;AAAA;AAAA,EAIA,WAAW,OAAsB,KAA+B;AAC9D,UAAM,QAAS,OAAO,CAAC;AACvB,UAAM,OAAO;AAAA,MACX,cAAc,KAAK;AAAA,MACnB,aAAa;AAAA,MACb,WAAW,MAAM,cAAc,OAAO,QAAQ,IAAI;AAAA,MAClD,YAAY,MAAM,OAAO,QAAQ,IAAI,qBAAqB,QAAQ,IAAI;AAAA,MACtE;AAAA,IACF;AAEA,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,YAAY,MAAM;AAAA,UAClB,SAAS,MAAM,YAAY;AAAA,QAC7B;AAAA,MACF,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,uBAAuB,MAAM,MAAM,EAAE;AAAA,MACjE,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,MAAM,QAAQ;AAAA,MAC1C,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,MAAM,UAAU,GAAG;AAAA,MAC/C,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,SAAS,MAAM,YAAY,WAAW,WAAW,OAAO;AAAA,MAC5E,KAAK;AAIH,eAAO,EAAE,GAAG,MAAM,SAAS,MAAM,YAAY,WAAW,WAAW,OAAO;AAAA,MAC5E,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,gBAAgB,MAAM,oBAAoB,MAAM;AAAA,MACpE,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,SAAS,MAAM,WAAW,GAAG;AAAA,MACjD,KAAK;AAGH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AAAA,MACF,KAAK;AAIH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,OAAO,MAAM,SAAS;AAAA,QACxB;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAAW,EAAE,WAAW,MAAM,WAAW,IAAI,CAAC;AAAA,QAChF;AAAA,MACF,KAAK;AAGH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAAW,EAAE,WAAW,MAAM,WAAW,IAAI,CAAC;AAAA,UAC9E,GAAI,OAAO,MAAM,0BAA0B,WACvC,EAAE,qBAAqB,MAAM,sBAAsB,IACnD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,2BAA2B,WACxC,EAAE,sBAAsB,MAAM,uBAAuB,IACrD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,qBAAqB,YAClC,EAAE,gBAAgB,MAAM,iBAAiB,IACzC,CAAC;AAAA,QACP;AAAA,IACJ;AAAA,EACF;AAAA,EAEA,YAAY,OAAsB,UAAmC;AAWnE,QAAI,UAAU,qBAAqB;AACjC,UAAI,SAAS,aAAa,QAAQ;AAChC,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,UAAU;AAAA,gBACR,UAAU;AAAA,gBACV,SAAS,SAAS,UAAU;AAAA,cAC9B;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,UAAI,SAAS,aAAa,SAAS;AACjC,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,UAAU,EAAE,UAAU,QAAQ;AAAA,YAChC;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAMA,QAAI,UAAU,iBAAiB;AAC7B,YAAM,UACJ,SAAS,aAAa,YAClB,SAAS,oBACT,SAAS,aAAa,SACpB,SAAS,UAAU,SAAS,oBAC5B;AACR,UAAI,SAAS;AACX,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,mBAAmB;AAAA,YACrB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAEA,QAAI,SAAS,aAAa,QAAQ;AAEhC,UAAI,UAAU,cAAc;AAC1B,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,oBAAoB;AAAA,cACpB,0BAA0B,SAAS,UAAU;AAAA,YAC/C;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAIA,UAAI,UAAU,gBAAgB;AAC5B,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,UAAU;AAAA,YACV,QAAQ,SAAS,UAAU;AAAA,UAC7B,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAIA,QAAI,SAAS,sBAAsB,UAAU,kBAAkB,UAAU,gBAAgB;AACvF,aAAO;AAAA,QACL,UAAU;AAAA,QACV,QAAQ,KAAK,UAAU;AAAA,UACrB,oBAAoB;AAAA,YAClB,eAAe;AAAA,YACf,mBAAmB,SAAS;AAAA,UAC9B;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAGA,WAAO,EAAE,UAAU,EAAE;AAAA,EACvB;AAAA;AAAA;AAAA,EAKQ,gBAAgB,KAA4C;AAClE,UAAM,WAAW,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG;AACnD,QAAI,aAAa,MAAO,QAAO;AAC/B,UAAM,OAAO,IAAI,UAAU;AAC3B,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,WAAW,EAAE,GAAG,MAAM,GAAG,SAAS,IAAI;AAAA,EAC/C;AAAA;AAAA,EAGQ,oBAAoB,KAA2C;AACrE,UAAM,WAAW,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG;AACnD,QAAI,aAAa,MAAO,QAAO,CAAC;AAChC,WAAO,kBAAkB,OAAO,CAAC,MAAM,IAAI,UAAU,WAAW,SAAS,CAAC,CAAC;AAAA,EAC7E;AAAA;AAAA,EAGQ,mBAAmB,KAAsC;AAC/D,UAAM,WAAW,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG;AACnD,QAAI,aAAa,MAAO,QAAO,CAAC;AAChC,WAAO,IAAI,UAAU,WAAW,OAAO,CAAC,MAAM,iBAAiB,IAAI,CAAC,CAAC;AAAA,EACvE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,eAAe,KAAqB,QAAkC;AAU5E,QAAI,OAAO,cAAc,QAAQ;AAC/B,YAAM,SAAwB,EAAE,KAAK,mBAAmB,OAAO,OAAO,EAAE,EAAE;AAC1E,UAAI,OAAO,MAAM,SAAS,eAAe,OAAO,KAAK,cAAc;AACjE,eAAO,uBAAuB,OAAO,KAAK;AAAA,MAC5C;AACA,UAAI,OAAO,WAAW,OAAO,KAAK,OAAO,OAAO,EAAE,SAAS,GAAG;AAC5D,cAAM,UAAkC,CAAC;AACzC,mBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,mBAAmB,OAAO,OAAO,CAAC,GAAG;AACvE,kBAAQ,CAAC,IAAI,OAAO,CAAC;AAAA,QACvB;AACA,eAAO,eAAe;AAAA,MACxB;AACA,aAAO;AAAA,IACT;AACA,QAAI,UAAU,OAAO;AACrB,QAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAElC,KAAC,EAAE,SAAS,KAAK,IAAI,kBAAkB,KAAK,QAAQ,KAAK,IAAI,SAAS,IAAI;AAG1E,cAAU,mBAAmB,OAAO;AACpC,WAAO,mBAAmB,IAAI;AAE9B,UAAM,QAAuB,EAAE,QAAQ;AACvC,QAAI,KAAK,SAAS,EAAG,OAAM,OAAO;AAElC,QAAI,OAAO,OAAO,OAAO,KAAK,OAAO,GAAG,EAAE,SAAS,GAAG;AACpD,YAAM,MAA8B,CAAC;AACrC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,mBAAmB,OAAO,GAAG,CAAC,GAAG;AACnE,YAAI,CAAC,IAAI,OAAO,CAAC;AAAA,MACnB;AACA,YAAM,MAAM;AAAA,IACd;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,WAAW,KAAqB,OAA2B,OAAgC;AACjG,QAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,KAAK,EAAG,QAAO;AAC/E,UAAM,OAAO,wBAAwB,IAAI,aAAa,SAAS,OAAO,IAAI,UAAU,EAAE;AACtF,UAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;AACtC,WAAO,MAAM,MAAM,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,QAAQ,OAAO,GAAG,MAAM,MAAM;AAAA,EACjF;AACF;AAEO,IAAM,UAAU,IAAI,aAAa;AACxC,IAAO,gBAAQ;","names":[]}

package/dist/copilot-cli-A7G5WB4N.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/adapters/copilot-cli/index.ts"],"sourcesContent":["/**\n * adapters/copilot-cli — GitHub Copilot CLI platform adapter for agent-connector.\n *\n * GitHub Copilot CLI is a json-stdio host: the host pipes a JSON payload to a\n * hook command on stdin and reads JSON/exit-code back. Its hook event names and\n * reply shape are Claude-compatible (PascalCase events, `hookSpecificOutput`\n * reply wrapper), so the normalized HookEventName values map 1:1 — no event\n * rename table is needed.\n *\n * Native config (user/global only — Copilot CLI has no project-scoped config):\n *   - MCP servers: ~/.copilot/mcp-config.json, root key \"mcpServers\". An stdio\n *     server is written with type \"local\" (the host also accepts \"stdio\") plus\n *     `tools: [\"*\"]`. Remote servers use type \"http\".\n *   - Hooks: a Claude-compatible hooks file shaped `{ version: 1, hooks: { … } }`\n *     discovered from ~/.copilot/hooks/*.json. We write a single dedicated file,\n *     ~/.copilot/hooks/agent-connector.json, so we never disturb a user's own\n *     hook files and removal is a clean, scoped operation. Each event maps to an\n *     array of flat command entries `{ matcher?, hooks: [{ type:\"command\", command }] }`\n *     — the Claude shape, which Copilot CLI reads.\n *   - Reply: a `hookSpecificOutput` object keyed by `hookEventName` carrying\n *     `permissionDecision` (allow|deny|ask) + `permissionDecisionReason`,\n *     `additionalContext`, and (PreToolUse) `updatedInput`. PreToolUse is\n *     fail-closed on the host side; exit 0 + JSON refines the decision.\n *\n * Env handling: the host is not documented to support `${env:VAR}` interpolation\n * inside mcp-config.json, so env/header/url refs are resolved to literals at\n * install time via resolveEnvRefsDeep (the safe default for a no-native-interp\n * host, matching the Codex adapter's approach).\n *\n * Content surfaces (surfaces-design §4-5): Copilot CLI exposes skills and\n * subagents but NO prompt-file command surface, so commands inherit the\n * BaseAdapter skip/warn default (supportsCommands stays false).\n *   - skills: folder-per-skill `<dir>/skills/<name>/SKILL.md` (+ resource files).\n *     user scope → ~/.copilot/skills; project scope → <projectDir>/.github/skills.\n *   - subagents: user scope → ~/.copilot/agents/<name>.agent.md; project scope →\n *     <projectDir>/.github/agents/<name>.agent.md (md + frontmatter:\n *     name, description, tools, model).\n * The .github/ tree is shared with the vscode-copilot and jetbrains-copilot\n * connectors; we write identical, idempotent content and on uninstall remove\n * only the files this connector wrote.\n *\n * Grounded in docs/research/understand-report.md §2 (Platform Integration\n * Matrix, \"GitHub Copilot CLI\" row).\n */\n\nimport { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\nimport { BaseAdapter } from \"../base.js\";\nimport type { Adapter, HookReply, InstallContext, MemoryTarget, NormalizedEvent } from \"../spi.js\";\nimport type {\n  ChangeRecord,\n  DetectedPlatform,\n  HealthCheck,\n  HookEventName,\n  HookParadigm,\n  HookResponse,\n  NotificationEvent,\n  PermissionRequestEvent,\n  PlatformCapabilities,\n  PlatformId,\n  PostToolUseEvent,\n  PostToolUseFailureEvent,\n  PostCompactEvent,\n  PreCompactEvent,\n  PreToolUseEvent,\n  ServerDef,\n  SessionEndEvent,\n  SessionStartEvent,\n  StopEvent,\n  SubagentStartEvent,\n  SubagentStopEvent,\n  Transport,\n  UserPromptSubmitEvent,\n} from \"../../core/types.js\";\nimport { resolveEnvRefsDeep } from \"../../core/interpolate.js\";\nimport {\n  buildHomeBinHookCommand,\n  buildWrappedStdio,\n  isHomeBinHookCommand,\n} from \"../../core/spawn.js\";\nimport { renderSkillMd, renderSubagentMd } from \"../claude-code/render.js\";\nimport { normalizeSessionSource } from \"../claude-code/wire.js\";\n\nconst HOST: PlatformId = \"copilot-cli\";\nconst MCP_ROOT_KEY = \"mcpServers\";\n\n/** Native hooks-file version Copilot CLI expects (`{ version: 1, hooks: {…} }`). */\nconst COPILOT_HOOKS_VERSION = 1;\n\n/**\n * Copilot CLI accepts both camelCase and PascalCase hook event names; PascalCase\n * is the portable, Claude/VS Code-compatible form (and selects the snake_case\n * payload dialect), so we emit it directly. Our normalized HookEventName values\n * are already PascalCase and match 1:1, hence no rename table — every declared\n * event has a native equivalent, including the newer four: subagentStart\n * (additionalContext only, matcher on agent name), subagentStop (can block and\n * force continuation), permissionRequest (decision control), and\n * postToolUseFailure (recovery guidance; the host also has a broader\n * errorOccurred event with no normalized analog — reachable via\n * platforms[\"copilot-cli\"].nativeHooks, see capabilities.supportsNativeHooks).\n */\ntype CopilotHookEvent = HookEventName;\n\n/** A single Copilot CLI hook registration entry (Claude-shaped). */\ninterface CopilotHookEntry {\n  matcher: string;\n  hooks: Array<{ type: \"command\"; command: string }>;\n}\n\n/** The shape of the Copilot CLI hooks file we own. */\ninterface CopilotHooksFile {\n  version?: number;\n  hooks?: Record<string, CopilotHookEntry[]>;\n}\n\n/** Native MCP server entry shapes Copilot CLI accepts under `mcpServers`. */\ninterface CopilotLocalServer {\n  /** stdio transport is registered as type \"local\" (host also accepts \"stdio\"). */\n  type: \"local\";\n  command: string;\n  args?: string[];\n  env?: Record<string, string>;\n  cwd?: string;\n  tools: string[];\n}\ninterface CopilotHttpServer {\n  /** Remote transport: \"http\" (Streamable HTTP) or \"sse\" (legacy). */\n  type: \"http\" | \"sse\";\n  url: string;\n  headers?: Record<string, string>;\n  tools: string[];\n}\n\n/** Raw Copilot CLI hook stdin payload (Claude-style: PascalCase event, snake_case fields). */\ninterface CopilotWireInput {\n  connector?: unknown;\n  session_id?: string;\n  transcript_path?: string;\n  cwd?: string;\n  hook_event_name?: string;\n\n  // tool events\n  tool_name?: string;\n  tool_input?: Record<string, unknown>;\n  tool_response?: unknown;\n\n  // SessionStart\n  source?: string;\n  // SessionEnd\n  reason?: string;\n  // UserPromptSubmit\n  prompt?: string;\n  // PreCompact\n  trigger?: string;\n  // Stop / SubagentStop\n  stop_hook_active?: boolean;\n  // Notification\n  message?: string;\n\n  // PermissionRequest — permission-update entries the dialog would offer.\n  permission_suggestions?: unknown[];\n\n  // PostToolUseFailure\n  tool_use_id?: string;\n  error?: string;\n  is_interrupt?: boolean;\n  duration_ms?: number;\n\n  // SubagentStart / SubagentStop — agent_type is unreliable on SubagentStop\n  // (Claude-compatible quirk); treat both as optional everywhere.\n  agent_id?: string;\n  agent_type?: string;\n  // SubagentStop — the subagent's OWN transcript + its final response text.\n  agent_transcript_path?: string;\n  last_assistant_message?: string;\n}\n\nexport class CopilotCliAdapter extends BaseAdapter implements Adapter {\n  readonly id: PlatformId = HOST;\n  readonly name = \"GitHub Copilot CLI\";\n  readonly paradigm: HookParadigm = \"json-stdio\";\n\n  readonly capabilities: PlatformCapabilities = {\n    // Memory surface: AGENTS.md-first managed block (project <projectDir>/AGENTS.md\n    // via the base default; user scope → ~/.copilot/copilot-instructions.md below).\n    supportsMemory: true,\n    // Copilot CLI delivers the full Claude-compatible lifecycle event set.\n    preToolUse: true,\n    postToolUse: true,\n    preCompact: true,\n    sessionStart: true,\n    sessionEnd: true,\n    userPromptSubmit: true,\n    stop: true,\n    notification: true,\n    // Newer events — Copilot CLI has native analogs for all four:\n    // permissionRequest (decision control), postToolUseFailure (recovery\n    // guidance), subagentStart (context-only), subagentStop (blockable).\n    permissionRequest: true,\n    postToolUseFailure: true,\n    subagentStart: true,\n    subagentStop: true,\n    // PreToolUse is fail-closed and can rewrite tool input (updatedInput); a\n    // PostToolUse hook cannot rewrite already-emitted tool output.\n    canModifyArgs: true,\n    canModifyOutput: false,\n    canInjectSessionContext: true,\n    // Copilot CLI's mcp-config.json `type` accepts stdio (written \"local\"),\n    // http (Streamable HTTP), and sse (legacy) — per GitHub's add-mcp-servers docs.\n    transports: [\"stdio\", \"http\", \"sse\"],\n    // Content surfaces: Copilot CLI exposes skills + subagents, but has no\n    // prompt-file command surface, so commands stay false (inherits BaseAdapter\n    // skip/warn).\n    supportsCommands: false,\n    supportsSkills: true,\n    supportsSubagents: true,\n    // Native passthrough: Copilot CLI documents an `errorOccurred` lifecycle\n    // event (plus camelCase aliases) with NO canonical HookEventName analog —\n    // below the >=3-host core bar (docs/research/host-specific-hook-events-design.md).\n    // A connector reaches it via platforms[\"copilot-cli\"].nativeHooks; installHooks\n    // files the event-name key VERBATIM with the same home-bin command shape, and\n    // the generic uninstall reverses it.\n    supportsNativeHooks: true,\n  };\n\n  // ── Detection ────────────────────────────────────────────────────────────\n\n  detectInstalled(_projectDir: string): DetectedPlatform {\n    const userDir = join(homedir(), \".copilot\");\n    const mcpConfig = join(userDir, \"mcp-config.json\");\n    const hooksDir = join(userDir, \"hooks\");\n    const installed =\n      existsSync(userDir) || existsSync(mcpConfig) || existsSync(hooksDir);\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath: mcpConfig,\n      scope: \"user\",\n      reason: installed\n        ? `found GitHub Copilot CLI config under ${userDir}`\n        : `no GitHub Copilot CLI config at ${userDir}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Memory surface: user-scope global instructions file ─────────────────\n  // Project scope stays on the AGENTS.md base default (root AGENTS.md is the\n  // primary instructions file). User scope targets Copilot CLI's documented\n  // $HOME/.copilot/copilot-instructions.md — a markdown file shared with other\n  // writers, so the managed block (not whole-file ownership) applies as usual.\n  protected override memoryTargets(ctx: InstallContext): MemoryTarget[] {\n    if (this.memoryOverride(ctx)?.path || ctx.scope !== \"user\") {\n      return super.memoryTargets(ctx);\n    }\n    return [\n      {\n        path: join(homedir(), \".copilot\", \"copilot-instructions.md\"),\n        reason: \"copilot-cli global instructions (~/.copilot/copilot-instructions.md)\",\n      },\n    ];\n  }\n\n  // ── Native paths ─────────────────────────────────────────────────────────\n\n  /** Copilot CLI is user/global only — scope is ignored. */\n  getConfigDir(_ctx: InstallContext): string {\n    return join(homedir(), \".copilot\");\n  }\n\n  getServerConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"mcp-config.json\");\n  }\n\n  /**\n   * Copilot CLI discovers hooks from any `~/.copilot/hooks/*.json`. We write a\n   * single dedicated file so we never disturb the user's own hook files and\n   * uninstall is a clean, scoped operation.\n   */\n  getHookConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"hooks\", \"agent-connector.json\");\n  }\n\n  // ── MCP server install / uninstall ───────────────────────────────────────\n\n  installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST]?.server;\n    if (!connector.server || override === false) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail: connector.server\n            ? \"server registration disabled for copilot-cli\"\n            : \"connector declares no MCP server\",\n        },\n      ];\n    }\n\n    // Shallow-merge any per-platform server override into the base ServerDef.\n    const server: ServerDef =\n      override && typeof override === \"object\"\n        ? { ...connector.server, ...override }\n        : connector.server;\n\n    const serverPath = this.getServerConfigPath(ctx);\n    const entry = this.renderServerEntry(ctx, server);\n\n    return [\n      this.upsertServerInJson(serverPath, MCP_ROOT_KEY, connector.id, entry, ctx.dryRun),\n    ];\n  }\n\n  uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const serverPath = this.getServerConfigPath(ctx);\n    return [\n      this.removeServerFromJson(serverPath, MCP_ROOT_KEY, ctx.connector.id, ctx.dryRun),\n    ];\n  }\n\n  /** Render a normalized ServerDef into Copilot CLI's native mcpServers entry. */\n  private renderServerEntry(\n    ctx: InstallContext,\n    server: ServerDef,\n  ): CopilotLocalServer | CopilotHttpServer {\n    const transport: Transport = server.transport;\n    const tools = this.renderTools(server);\n\n    if (transport === \"stdio\") {\n      let command = server.command ?? \"\";\n      let args = [...(server.args ?? [])];\n\n      // Transparent telemetry wrapping: route the real command through\n      // `<homeBin> serve --connector <id> -- <command> <args...>`.\n      ({ command, args } = buildWrappedStdio(ctx, server, this.id, command, args));\n\n      const entry: CopilotLocalServer = {\n        type: \"local\",\n        command: resolveEnvRefsDeep(command),\n        tools,\n      };\n      if (args.length > 0) entry.args = args.map((a) => resolveEnvRefsDeep(a));\n      const env = this.renderEnv(server.env);\n      if (env) entry.env = env;\n      if (server.cwd) entry.cwd = resolveEnvRefsDeep(server.cwd);\n      return entry;\n    }\n\n    // remote (Streamable http / legacy sse) — Copilot registers a URL keyed by\n    // its `type`. AC's canonical \"sse\" → \"sse\"; everything else → \"http\".\n    const entry: CopilotHttpServer = {\n      type: server.transport === \"sse\" ? \"sse\" : \"http\",\n      url: resolveEnvRefsDeep(server.url ?? \"\"),\n      tools,\n    };\n    const headers = this.renderEnv(server.headers);\n    if (headers) entry.headers = headers;\n    return entry;\n  }\n\n  /**\n   * Render env/header values. Copilot CLI is not documented to support native\n   * `${env:VAR}` interpolation in mcp-config.json, so refs resolve to literals\n   * at install time (the safe default for a no-native-interp host).\n   */\n  private renderEnv(\n    env: Record<string, string> | undefined,\n  ): Record<string, string> | undefined {\n    if (!env || Object.keys(env).length === 0) return undefined;\n    return resolveEnvRefsDeep({ ...env });\n  }\n\n  /** Render the tool allow-list. Copilot CLI expects `tools` on every entry; default [\"*\"]. */\n  private renderTools(server: ServerDef): string[] {\n    const include = server.tools?.include;\n    return include && include.length > 0 ? [...include] : [\"*\"];\n  }\n\n  // ── Hook install / uninstall ─────────────────────────────────────────────\n\n  installHooks(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST];\n    const hooksDisabled = override?.hooks === false;\n    // `hooks: false` disables only the NORMALIZED events; nativeHooks is a\n    // sibling, copilot-cli-scoped declaration that installs regardless.\n    const normalizedEvents = hooksDisabled ? [] : connector.hookEvents;\n    const nativeHooks = override?.nativeHooks ?? {};\n    const nativeEvents = Object.keys(nativeHooks);\n\n    if (normalizedEvents.length === 0 && nativeEvents.length === 0) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail: hooksDisabled\n            ? \"hooks disabled for copilot-cli\"\n            : \"connector declares no hooks\",\n        },\n      ];\n    }\n\n    const hooksPath = this.getHookConfigPath(ctx);\n    const file = this.readJson<CopilotHooksFile>(hooksPath) ?? {};\n    const __skip = this.malformedHookRootSkip(hooksPath, (file as Record<string, unknown>).hooks);\n    if (__skip) return [__skip];\n    const hooks = (file.hooks ??= {});\n\n    const changes: ChangeRecord[] = [];\n    let mutated = false;\n\n    for (const event of normalizedEvents) {\n      // PascalCase events map 1:1 to Copilot CLI's native event names.\n      const copilotEvent: CopilotHookEvent = event;\n      const command = buildHomeBinHookCommand(ctx.homeBinPath, HOST, event, connector.id);\n      const matcher = connector.hooks[event]?.matcher ?? \"\";\n      const entry: CopilotHookEntry = {\n        matcher,\n        hooks: [{ type: \"command\", command }],\n      };\n\n      const bucket = (hooks[copilotEvent] ??= []);\n      const existingIdx = bucket.findIndex((e) => this.entryHasOurCommand(e, ctx));\n\n      if (existingIdx >= 0) {\n        if (JSON.stringify(bucket[existingIdx]) === JSON.stringify(entry)) {\n          changes.push({\n            platform: this.id,\n            action: \"skip\",\n            path: hooksPath,\n            detail: `hooks.${copilotEvent} already registered`,\n          });\n          continue;\n        }\n        bucket[existingIdx] = entry;\n        changes.push({\n          platform: this.id,\n          action: \"update\",\n          path: hooksPath,\n          detail: `hooks.${copilotEvent}`,\n        });\n      } else {\n        bucket.push(entry);\n        changes.push({\n          platform: this.id,\n          action: \"create\",\n          path: hooksPath,\n          detail: `hooks.${copilotEvent}`,\n        });\n      }\n      mutated = true;\n    }\n\n    // NATIVE passthrough events: copilot-cli-native event-name keys (e.g.\n    // ErrorOccurred) filed VERBATIM into the hooks map — no EVENT_MAP, since they\n    // ARE Copilot events. The command keeps the native token; matched by EXACT\n    // command so a native key coinciding with a normalized one never clobbers it.\n    for (const nativeEvent of nativeEvents) {\n      const command = buildHomeBinHookCommand(ctx.homeBinPath, HOST, nativeEvent, connector.id);\n      const entry: CopilotHookEntry = {\n        matcher: nativeHooks[nativeEvent]?.matcher ?? \"\",\n        hooks: [{ type: \"command\", command }],\n      };\n      const bucket = (hooks[nativeEvent] ??= []);\n      const existingIdx = bucket.findIndex((e) => e.hooks?.[0]?.command === command);\n      if (existingIdx >= 0) {\n        if (JSON.stringify(bucket[existingIdx]) === JSON.stringify(entry)) {\n          changes.push({\n            platform: this.id,\n            action: \"skip\",\n            path: hooksPath,\n            detail: `hooks.${nativeEvent} (native) already registered`,\n          });\n          continue;\n        }\n        bucket[existingIdx] = entry;\n        changes.push({\n          platform: this.id,\n          action: \"update\",\n          path: hooksPath,\n          detail: `hooks.${nativeEvent} (native)`,\n        });\n      } else {\n        bucket.push(entry);\n        changes.push({\n          platform: this.id,\n          action: \"create\",\n          path: hooksPath,\n          detail: `hooks.${nativeEvent} (native)`,\n        });\n      }\n      mutated = true;\n    }\n\n    if (mutated) {\n      file.version = COPILOT_HOOKS_VERSION;\n      this.writeJson(hooksPath, file, ctx.dryRun);\n    }\n    return changes;\n  }\n\n  uninstallHooks(ctx: InstallContext): ChangeRecord[] {\n    const hooksPath = this.getHookConfigPath(ctx);\n    const file = this.readJson<CopilotHooksFile>(hooksPath);\n    const hooks = file?.hooks;\n    if (!file || !hooks) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          path: hooksPath,\n          detail: \"no hooks section present\",\n        },\n      ];\n    }\n\n    const changes: ChangeRecord[] = [];\n    let mutated = false;\n\n    for (const copilotEvent of Object.keys(hooks)) {\n      const bucket = hooks[copilotEvent];\n      if (!Array.isArray(bucket)) continue;\n\n      // Strip our hook command from each entry; drop entries left empty so we\n      // never remove another connector's (or the user's own) hook commands.\n      const next: CopilotHookEntry[] = [];\n      let removed = 0;\n      for (const e of bucket) {\n        const innerBefore = e.hooks?.length ?? 0;\n        const inner = (e.hooks ?? []).filter((h) => !this.isOurCommand(h.command, ctx));\n        removed += innerBefore - inner.length;\n        if (inner.length > 0) next.push({ matcher: e.matcher ?? \"\", hooks: inner });\n      }\n\n      if (removed > 0) {\n        if (next.length > 0) hooks[copilotEvent] = next;\n        else delete hooks[copilotEvent];\n        changes.push({\n          platform: this.id,\n          action: \"remove\",\n          path: hooksPath,\n          detail: `hooks.${copilotEvent} (${removed})`,\n        });\n        mutated = true;\n      }\n    }\n\n    if (mutated) this.writeJson(hooksPath, file, ctx.dryRun);\n    if (changes.length === 0) {\n      changes.push({\n        platform: this.id,\n        action: \"skip\",\n        path: hooksPath,\n        detail: \"no matching hook entries\",\n      });\n    }\n    return changes;\n  }\n\n  private entryHasOurCommand(entry: CopilotHookEntry, ctx: InstallContext): boolean {\n    return (entry.hooks ?? []).some((h) => this.isOurCommand(h.command, ctx));\n  }\n\n  /** True when a hook command references our home binary AND this connector id\n   *  (anchored so a shared-prefix id can't collide — see isHomeBinHookCommand). */\n  private isOurCommand(command: string | undefined, ctx: InstallContext): boolean {\n    return isHomeBinHookCommand(command, ctx.homeBinPath, ctx.connector.id);\n  }\n\n  // ── Content surfaces: skills / subagents ─────────────────────────────────\n  // CONTENT-ONLY: pure native-file writers. No runtime dispatch, no home-bin\n  // pointer, no telemetry wrap. Each method is idempotent (byte-identical →\n  // skip) via BaseAdapter.writeContentFile and reversible via removeContentFile.\n  // Honors platforms[\"copilot-cli\"] per-surface false to skip. Commands are\n  // unsupported here — they inherit the BaseAdapter skip/warn default.\n  //\n  // Path scoping: user scope lives under ~/.copilot (getConfigDir); project\n  // scope lives under the shared <projectDir>/.github tree (the same files\n  // vscode-copilot / jetbrains-copilot would write). We write identical content\n  // and on uninstall remove only the files this connector wrote.\n\n  /** Root dir for content surfaces: ~/.copilot (user) or <projectDir>/.github (project). */\n  private contentDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".github\")\n      : this.getConfigDir(ctx);\n  }\n\n  private skillsDir(ctx: InstallContext): string {\n    return join(this.contentDir(ctx), \"skills\");\n  }\n  private agentsDir(ctx: InstallContext): string {\n    return join(this.contentDir(ctx), \"agents\");\n  }\n\n  /** Native skill dir: <contentDir>/skills/<name>. */\n  private skillDir(ctx: InstallContext, name: string): string {\n    return join(this.skillsDir(ctx), name);\n  }\n  /** Native subagent file path: <contentDir>/agents/<name>.agent.md. */\n  private subagentPath(ctx: InstallContext, name: string): string {\n    return join(this.agentsDir(ctx), `${name}.agent.md`);\n  }\n\n  // ── Skills ────────────────────────────────────────────────────────────────\n\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.skills === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for copilot-cli\" }];\n    }\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      changes.push(\n        this.writeContentFile(join(dir, \"SKILL.md\"), renderSkillMd(skill), ctx.dryRun),\n      );\n      // Bundle any resource files beside SKILL.md (relative path → contents).\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\n      // (config-time validation already rejects these, but never trust input).\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\n          });\n          continue;\n        }\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\n      }\n    }\n    return changes;\n  }\n\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\n      // skill dir itself when we own its full contents.\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\n      for (const rel of Object.keys(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) continue; // never delete outside the skill dir\n        changes.push(this.removeContentFile(target, ctx.dryRun));\n      }\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\n      // dir that still holds user-added / sibling-tool / shared files.\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\n    }\n    return changes;\n  }\n\n  // ── Subagents ───────────────────────────────────────────────────────────────\n\n  override installSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.subagents === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"subagents disabled for copilot-cli\" }];\n    }\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.writeContentFile(\n        this.subagentPath(ctx, agent.name),\n        renderSubagentMd(agent),\n        ctx.dryRun,\n      ),\n    );\n  }\n\n  override uninstallSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.removeContentFile(this.subagentPath(ctx, agent.name), ctx.dryRun),\n    );\n  }\n\n  // ── Diagnostics ──────────────────────────────────────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const mcpPath = this.getServerConfigPath(ctx);\n    const hooksPath = this.getHookConfigPath(ctx);\n    const connectorId = ctx.connector.id;\n    const homeBin = ctx.homeBinPath;\n    const hookEvents = ctx.connector.hookEvents;\n    const checks: HealthCheck[] = [\n      {\n        name: `${this.name}: mcp-config.json present`,\n        check: () =>\n          existsSync(mcpPath)\n            ? { status: \"OK\", detail: mcpPath }\n            : { status: \"FAIL\", detail: `not found: ${mcpPath}` },\n      },\n      {\n        name: `${this.name}: hook command registered`,\n        check: () => {\n          if (hookEvents.length === 0) {\n            return { status: \"OK\", detail: \"no hooks declared\" };\n          }\n          const file = this.readJson<CopilotHooksFile>(hooksPath);\n          if (!file) return { status: \"FAIL\", detail: `cannot read ${hooksPath}` };\n          const hooks = file.hooks ?? {};\n          const registered = Object.values(hooks).some((entries) =>\n            (entries ?? []).some((e) =>\n              (e.hooks ?? []).some((h) =>\n                isHomeBinHookCommand(h.command, homeBin, connectorId),\n              ),\n            ),\n          );\n          return registered\n            ? { status: \"OK\", detail: \"hook command present\" }\n            : { status: \"FAIL\", detail: `no hook for ${connectorId} in ${hooksPath}` };\n        },\n      },\n    ];\n\n    // Content-surface checks: only assert presence of the surfaces this\n    // connector declares (skip silently for surfaces it never asked for).\n    // Commands are unsupported on Copilot CLI, so no command check.\n    for (const skill of ctx.connector.skills) {\n      const p = join(this.skillDir(ctx, skill.name), \"SKILL.md\");\n      checks.push({\n        name: `${this.name}: skill ${skill.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    for (const agent of ctx.connector.subagents) {\n      const p = this.subagentPath(ctx, agent.name);\n      checks.push({\n        name: `${this.name}: subagent ${agent.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    return checks;\n  }\n\n  // ── Runtime: parse Copilot CLI stdin JSON → normalized event ─────────────\n\n  parseEvent(event: HookEventName, raw: unknown): NormalizedEvent {\n    const input = (raw ?? {}) as CopilotWireInput;\n    const connectorId = typeof input.connector === \"string\" ? input.connector : \"\";\n    const sessionId = extractSessionId(input);\n    const projectDir = typeof input.cwd === \"string\" ? input.cwd : undefined;\n\n    const base = {\n      hostPlatform: HOST,\n      connectorId,\n      sessionId,\n      raw,\n      ...(projectDir !== undefined ? { projectDir } : {}),\n    } as const;\n\n    switch (event) {\n      case \"PreToolUse\": {\n        const ev: PreToolUseEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n        };\n        return ev;\n      }\n      case \"PostToolUse\": {\n        const toolOutput = toolResponseToString(input.tool_response);\n        const ev: PostToolUseEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          ...(toolOutput !== undefined ? { toolOutput } : {}),\n        };\n        return ev;\n      }\n      case \"SessionStart\": {\n        const ev: SessionStartEvent = {\n          ...base,\n          source: normalizeSessionSource(input.source),\n        };\n        return ev;\n      }\n      case \"SessionEnd\": {\n        const ev: SessionEndEvent = {\n          ...base,\n          ...(typeof input.reason === \"string\" ? { reason: input.reason } : {}),\n        };\n        return ev;\n      }\n      case \"UserPromptSubmit\": {\n        const ev: UserPromptSubmitEvent = {\n          ...base,\n          prompt: typeof input.prompt === \"string\" ? input.prompt : \"\",\n        };\n        return ev;\n      }\n      case \"PreCompact\": {\n        const ev: PreCompactEvent = {\n          ...base,\n          ...(input.trigger === \"auto\" || input.trigger === \"manual\"\n            ? { trigger: input.trigger }\n            : {}),\n        };\n        return ev;\n      }\n      case \"PostCompact\": {\n        // Copilot CLI does not fire PostCompact natively (postCompact unset →\n        // warn-skip at install). Parsed defensively, mirroring PreCompact, so a\n        // manual/mis-routed dispatch normalizes instead of hitting the guard.\n        const ev: PostCompactEvent = {\n          ...base,\n          ...(input.trigger === \"auto\" || input.trigger === \"manual\"\n            ? { trigger: input.trigger }\n            : {}),\n        };\n        return ev;\n      }\n      case \"Stop\": {\n        const ev: StopEvent = {\n          ...base,\n          ...(typeof input.stop_hook_active === \"boolean\"\n            ? { stopHookActive: input.stop_hook_active }\n            : {}),\n        };\n        return ev;\n      }\n      case \"Notification\": {\n        const ev: NotificationEvent = {\n          ...base,\n          message: typeof input.message === \"string\" ? input.message : \"\",\n        };\n        return ev;\n      }\n      case \"PermissionRequest\": {\n        const ev: PermissionRequestEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          ...(Array.isArray(input.permission_suggestions)\n            ? { permissionSuggestions: input.permission_suggestions }\n            : {}),\n        };\n        return ev;\n      }\n      case \"PostToolUseFailure\": {\n        const ev: PostToolUseFailureEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          error: typeof input.error === \"string\" ? input.error : \"\",\n          ...(typeof input.tool_use_id === \"string\"\n            ? { toolUseId: input.tool_use_id }\n            : {}),\n          ...(typeof input.is_interrupt === \"boolean\"\n            ? { isInterrupt: input.is_interrupt }\n            : {}),\n          ...(typeof input.duration_ms === \"number\"\n            ? { durationMs: input.duration_ms }\n            : {}),\n        };\n        return ev;\n      }\n      case \"SubagentStart\": {\n        const ev: SubagentStartEvent = {\n          ...base,\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\n          ...(typeof input.agent_type === \"string\"\n            ? { agentType: input.agent_type }\n            : {}),\n        };\n        return ev;\n      }\n      case \"SubagentStop\": {\n        // agent_id/agent_type stay optional — hosts do not reliably populate\n        // agent_type on SubagentStop (Claude-compatible quirk).\n        const ev: SubagentStopEvent = {\n          ...base,\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\n          ...(typeof input.agent_type === \"string\"\n            ? { agentType: input.agent_type }\n            : {}),\n          ...(typeof input.agent_transcript_path === \"string\"\n            ? { agentTranscriptPath: input.agent_transcript_path }\n            : {}),\n          ...(typeof input.last_assistant_message === \"string\"\n            ? { lastAssistantMessage: input.last_assistant_message }\n            : {}),\n          ...(typeof input.stop_hook_active === \"boolean\"\n            ? { stopHookActive: input.stop_hook_active }\n            : {}),\n        };\n        return ev;\n      }\n      default: {\n        // Exhaustive guard — every HookEventName is handled above.\n        const _never: never = event;\n        throw new Error(`unsupported copilot-cli hook event: ${String(_never)}`);\n      }\n    }\n  }\n\n  // ── Runtime: normalized response → Copilot CLI native hook reply ─────────\n\n  formatReply(event: HookEventName, response: HookResponse): HookReply {\n    const hookEventName = event;\n    const decision = response.decision ?? \"allow\";\n\n    // PermissionRequest replies use the Claude-compatible nested\n    // decision{behavior} envelope and are the ONE event where an EXPLICIT\n    // \"allow\" is an ACTIVE grant (it suppresses the permission dialog) rather\n    // than passthrough:\n    //   allow            → decision{behavior:\"allow\"} (+updatedInput when set);\n    //                      the host still enforces its own deny rules.\n    //   modify           → an allow grant carrying updatedInput.\n    //   deny             → decision{behavior:\"deny\", message}.\n    //   ask/context/void → NO decision output: fall through to the native\n    //                      dialog (the dialog IS the ask).\n    if (event === \"PermissionRequest\") {\n      if (response.decision === \"deny\") {\n        return this.stdout({\n          hookSpecificOutput: {\n            hookEventName,\n            decision: {\n              behavior: \"deny\",\n              message: response.reason ?? \"Blocked by hook\",\n            },\n          },\n        });\n      }\n      if (\n        response.decision === \"allow\" ||\n        (response.decision === \"modify\" && response.updatedInput)\n      ) {\n        return this.stdout({\n          hookSpecificOutput: {\n            hookEventName,\n            decision: {\n              behavior: \"allow\",\n              ...(response.updatedInput\n                ? { updatedInput: response.updatedInput }\n                : {}),\n            },\n          },\n        });\n      }\n      return { exitCode: 0 };\n    }\n\n    // PostToolUseFailure (recovery guidance beside the error) and SubagentStart\n    // (context prepended to the SUBAGENT's conversation — creation is not\n    // blockable on Copilot CLI) are observe/context-only: \"context\" emits\n    // additionalContext, and a \"deny\" DEGRADES to the same shape carrying the\n    // reason. Everything else passes through.\n    if (event === \"PostToolUseFailure\" || event === \"SubagentStart\") {\n      const context =\n        decision === \"context\"\n          ? response.additionalContext\n          : decision === \"deny\"\n            ? response.reason ?? response.additionalContext\n            : undefined;\n      if (context) {\n        return this.stdout({\n          hookSpecificOutput: { hookEventName, additionalContext: context },\n        });\n      }\n      return { exitCode: 0 };\n    }\n\n    // deny → block the action with a reason (exit 0; JSON carries the decision).\n    // SubagentStop is the Stop-semantics exception: like Claude, the block is\n    // the TOP-LEVEL {\"decision\":\"block\",\"reason\"} — it keeps the subagent\n    // running with `reason` as its next instruction (the host \"can block and\n    // force continuation\").\n    if (decision === \"deny\") {\n      if (event === \"SubagentStop\") {\n        return this.stdout({\n          decision: \"block\",\n          reason: response.reason ?? \"Blocked by hook\",\n        });\n      }\n      return this.stdout({\n        hookSpecificOutput: {\n          hookEventName,\n          permissionDecision: \"deny\",\n          permissionDecisionReason: response.reason ?? \"Blocked by hook\",\n        },\n      });\n    }\n\n    // ask → prompt the user to confirm.\n    if (decision === \"ask\") {\n      return this.stdout({\n        hookSpecificOutput: {\n          hookEventName,\n          permissionDecision: \"ask\",\n          permissionDecisionReason: response.reason ?? \"Confirmation required by hook\",\n        },\n      });\n    }\n\n    // modify → rewrite PreToolUse input (only where Copilot CLI supports it).\n    if (decision === \"modify\") {\n      if (event === \"PreToolUse\" && response.updatedInput) {\n        return this.stdout({\n          hookSpecificOutput: { hookEventName, updatedInput: response.updatedInput },\n        });\n      }\n      // Output rewrite is unsupported on Copilot CLI; fall through to allow.\n    }\n\n    // context → inject soft guidance (also the SessionStart context path).\n    if (decision === \"context\" && response.additionalContext) {\n      return this.stdout({\n        hookSpecificOutput: { hookEventName, additionalContext: response.additionalContext },\n      });\n    }\n\n    // allow / void / unsupported-degradation → pass through with exit 0.\n    return { exitCode: 0 };\n  }\n\n  private stdout(payload: unknown): HookReply {\n    return { exitCode: 0, stdout: JSON.stringify(payload) };\n  }\n}\n\n/**\n * Extract a stable session id from a Copilot CLI wire payload.\n * Priority mirrors the Claude wire protocol: transcript UUID > session_id > \"\".\n */\nfunction extractSessionId(input: CopilotWireInput): string {\n  if (typeof input.transcript_path === \"string\") {\n    const m = input.transcript_path.match(/([a-f0-9-]{36})\\.jsonl$/);\n    if (m && m[1]) return m[1];\n  }\n  if (typeof input.session_id === \"string\" && input.session_id !== \"\") {\n    return input.session_id;\n  }\n  return \"\";\n}\n\n/** Coerce a Copilot PostToolUse `tool_response` into a string for the normalized event. */\nfunction toolResponseToString(value: unknown): string | undefined {\n  if (value == null) return undefined;\n  if (typeof value === \"string\") return value;\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nexport const adapter = new CopilotCliAdapter();\nexport default adapter;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA6CA,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,YAAY;AAsCrB,IAAM,OAAmB;AACzB,IAAM,eAAe;AAGrB,IAAM,wBAAwB;AA0FvB,IAAM,oBAAN,cAAgC,YAA+B;AAAA,EAC3D,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA;AAAA,IAEhB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA;AAAA;AAAA;AAAA,IAId,mBAAmB;AAAA,IACnB,oBAAoB;AAAA,IACpB,eAAe;AAAA,IACf,cAAc;AAAA;AAAA;AAAA,IAGd,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,yBAAyB;AAAA;AAAA;AAAA,IAGzB,YAAY,CAAC,SAAS,QAAQ,KAAK;AAAA;AAAA;AAAA;AAAA,IAInC,kBAAkB;AAAA,IAClB,gBAAgB;AAAA,IAChB,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOnB,qBAAqB;AAAA,EACvB;AAAA;AAAA,EAIA,gBAAgB,aAAuC;AACrD,UAAM,UAAU,KAAK,QAAQ,GAAG,UAAU;AAC1C,UAAM,YAAY,KAAK,SAAS,iBAAiB;AACjD,UAAM,WAAW,KAAK,SAAS,OAAO;AACtC,UAAM,YACJ,WAAW,OAAO,KAAK,WAAW,SAAS,KAAK,WAAW,QAAQ;AACrE,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB,YAAY;AAAA,MACZ,OAAO;AAAA,MACP,QAAQ,YACJ,yCAAyC,OAAO,KAChD,mCAAmC,OAAO;AAAA,MAC9C,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOmB,cAAc,KAAqC;AACpE,QAAI,KAAK,eAAe,GAAG,GAAG,QAAQ,IAAI,UAAU,QAAQ;AAC1D,aAAO,MAAM,cAAc,GAAG;AAAA,IAChC;AACA,WAAO;AAAA,MACL;AAAA,QACE,MAAM,KAAK,QAAQ,GAAG,YAAY,yBAAyB;AAAA,QAC3D,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA,EAKA,aAAa,MAA8B;AACzC,WAAO,KAAK,QAAQ,GAAG,UAAU;AAAA,EACnC;AAAA,EAEA,oBAAoB,KAA6B;AAC/C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,iBAAiB;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,kBAAkB,KAA6B;AAC7C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,SAAS,sBAAsB;AAAA,EACrE;AAAA;AAAA,EAIA,cAAc,KAAqC;AACjD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI,GAAG;AAC5C,QAAI,CAAC,UAAU,UAAU,aAAa,OAAO;AAC3C,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,UAAU,SACd,iDACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAGA,UAAM,SACJ,YAAY,OAAO,aAAa,WAC5B,EAAE,GAAG,UAAU,QAAQ,GAAG,SAAS,IACnC,UAAU;AAEhB,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,UAAM,QAAQ,KAAK,kBAAkB,KAAK,MAAM;AAEhD,WAAO;AAAA,MACL,KAAK,mBAAmB,YAAY,cAAc,UAAU,IAAI,OAAO,IAAI,MAAM;AAAA,IACnF;AAAA,EACF;AAAA,EAEA,gBAAgB,KAAqC;AACnD,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,WAAO;AAAA,MACL,KAAK,qBAAqB,YAAY,cAAc,IAAI,UAAU,IAAI,IAAI,MAAM;AAAA,IAClF;AAAA,EACF;AAAA;AAAA,EAGQ,kBACN,KACA,QACwC;AACxC,UAAM,YAAuB,OAAO;AACpC,UAAM,QAAQ,KAAK,YAAY,MAAM;AAErC,QAAI,cAAc,SAAS;AACzB,UAAI,UAAU,OAAO,WAAW;AAChC,UAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAIlC,OAAC,EAAE,SAAS,KAAK,IAAI,kBAAkB,KAAK,QAAQ,KAAK,IAAI,SAAS,IAAI;AAE1E,YAAMA,SAA4B;AAAA,QAChC,MAAM;AAAA,QACN,SAAS,mBAAmB,OAAO;AAAA,QACnC;AAAA,MACF;AACA,UAAI,KAAK,SAAS,EAAG,CAAAA,OAAM,OAAO,KAAK,IAAI,CAAC,MAAM,mBAAmB,CAAC,CAAC;AACvE,YAAM,MAAM,KAAK,UAAU,OAAO,GAAG;AACrC,UAAI,IAAK,CAAAA,OAAM,MAAM;AACrB,UAAI,OAAO,IAAK,CAAAA,OAAM,MAAM,mBAAmB,OAAO,GAAG;AACzD,aAAOA;AAAA,IACT;AAIA,UAAM,QAA2B;AAAA,MAC/B,MAAM,OAAO,cAAc,QAAQ,QAAQ;AAAA,MAC3C,KAAK,mBAAmB,OAAO,OAAO,EAAE;AAAA,MACxC;AAAA,IACF;AACA,UAAM,UAAU,KAAK,UAAU,OAAO,OAAO;AAC7C,QAAI,QAAS,OAAM,UAAU;AAC7B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,UACN,KACoC;AACpC,QAAI,CAAC,OAAO,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAClD,WAAO,mBAAmB,EAAE,GAAG,IAAI,CAAC;AAAA,EACtC;AAAA;AAAA,EAGQ,YAAY,QAA6B;AAC/C,UAAM,UAAU,OAAO,OAAO;AAC9B,WAAO,WAAW,QAAQ,SAAS,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG;AAAA,EAC5D;AAAA;AAAA,EAIA,aAAa,KAAqC;AAChD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI;AACzC,UAAM,gBAAgB,UAAU,UAAU;AAG1C,UAAM,mBAAmB,gBAAgB,CAAC,IAAI,UAAU;AACxD,UAAM,cAAc,UAAU,eAAe,CAAC;AAC9C,UAAM,eAAe,OAAO,KAAK,WAAW;AAE5C,QAAI,iBAAiB,WAAW,KAAK,aAAa,WAAW,GAAG;AAC9D,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,gBACJ,mCACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,KAAK,kBAAkB,GAAG;AAC5C,UAAM,OAAO,KAAK,SAA2B,SAAS,KAAK,CAAC;AAC5D,UAAM,SAAS,KAAK,sBAAsB,WAAY,KAAiC,KAAK;AAC5F,QAAI,OAAQ,QAAO,CAAC,MAAM;AAC1B,UAAM,QAAS,KAAK,UAAU,CAAC;AAE/B,UAAM,UAA0B,CAAC;AACjC,QAAI,UAAU;AAEd,eAAW,SAAS,kBAAkB;AAEpC,YAAM,eAAiC;AACvC,YAAM,UAAU,wBAAwB,IAAI,aAAa,MAAM,OAAO,UAAU,EAAE;AAClF,YAAM,UAAU,UAAU,MAAM,KAAK,GAAG,WAAW;AACnD,YAAM,QAA0B;AAAA,QAC9B;AAAA,QACA,OAAO,CAAC,EAAE,MAAM,WAAW,QAAQ,CAAC;AAAA,MACtC;AAEA,YAAM,SAAU,MAAM,YAAY,MAAM,CAAC;AACzC,YAAM,cAAc,OAAO,UAAU,CAAC,MAAM,KAAK,mBAAmB,GAAG,GAAG,CAAC;AAE3E,UAAI,eAAe,GAAG;AACpB,YAAI,KAAK,UAAU,OAAO,WAAW,CAAC,MAAM,KAAK,UAAU,KAAK,GAAG;AACjE,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ,SAAS,YAAY;AAAA,UAC/B,CAAC;AACD;AAAA,QACF;AACA,eAAO,WAAW,IAAI;AACtB,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,SAAS,YAAY;AAAA,QAC/B,CAAC;AAAA,MACH,OAAO;AACL,eAAO,KAAK,KAAK;AACjB,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,SAAS,YAAY;AAAA,QAC/B,CAAC;AAAA,MACH;AACA,gBAAU;AAAA,IACZ;AAMA,eAAW,eAAe,cAAc;AACtC,YAAM,UAAU,wBAAwB,IAAI,aAAa,MAAM,aAAa,UAAU,EAAE;AACxF,YAAM,QAA0B;AAAA,QAC9B,SAAS,YAAY,WAAW,GAAG,WAAW;AAAA,QAC9C,OAAO,CAAC,EAAE,MAAM,WAAW,QAAQ,CAAC;AAAA,MACtC;AACA,YAAM,SAAU,MAAM,WAAW,MAAM,CAAC;AACxC,YAAM,cAAc,OAAO,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,YAAY,OAAO;AAC7E,UAAI,eAAe,GAAG;AACpB,YAAI,KAAK,UAAU,OAAO,WAAW,CAAC,MAAM,KAAK,UAAU,KAAK,GAAG;AACjE,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ,SAAS,WAAW;AAAA,UAC9B,CAAC;AACD;AAAA,QACF;AACA,eAAO,WAAW,IAAI;AACtB,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,SAAS,WAAW;AAAA,QAC9B,CAAC;AAAA,MACH,OAAO;AACL,eAAO,KAAK,KAAK;AACjB,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,SAAS,WAAW;AAAA,QAC9B,CAAC;AAAA,MACH;AACA,gBAAU;AAAA,IACZ;AAEA,QAAI,SAAS;AACX,WAAK,UAAU;AACf,WAAK,UAAU,WAAW,MAAM,IAAI,MAAM;AAAA,IAC5C;AACA,WAAO;AAAA,EACT;AAAA,EAEA,eAAe,KAAqC;AAClD,UAAM,YAAY,KAAK,kBAAkB,GAAG;AAC5C,UAAM,OAAO,KAAK,SAA2B,SAAS;AACtD,UAAM,QAAQ,MAAM;AACpB,QAAI,CAAC,QAAQ,CAAC,OAAO;AACnB,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAA0B,CAAC;AACjC,QAAI,UAAU;AAEd,eAAW,gBAAgB,OAAO,KAAK,KAAK,GAAG;AAC7C,YAAM,SAAS,MAAM,YAAY;AACjC,UAAI,CAAC,MAAM,QAAQ,MAAM,EAAG;AAI5B,YAAM,OAA2B,CAAC;AAClC,UAAI,UAAU;AACd,iBAAW,KAAK,QAAQ;AACtB,cAAM,cAAc,EAAE,OAAO,UAAU;AACvC,cAAM,SAAS,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,SAAS,GAAG,CAAC;AAC9E,mBAAW,cAAc,MAAM;AAC/B,YAAI,MAAM,SAAS,EAAG,MAAK,KAAK,EAAE,SAAS,EAAE,WAAW,IAAI,OAAO,MAAM,CAAC;AAAA,MAC5E;AAEA,UAAI,UAAU,GAAG;AACf,YAAI,KAAK,SAAS,EAAG,OAAM,YAAY,IAAI;AAAA,YACtC,QAAO,MAAM,YAAY;AAC9B,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,SAAS,YAAY,KAAK,OAAO;AAAA,QAC3C,CAAC;AACD,kBAAU;AAAA,MACZ;AAAA,IACF;AAEA,QAAI,QAAS,MAAK,UAAU,WAAW,MAAM,IAAI,MAAM;AACvD,QAAI,QAAQ,WAAW,GAAG;AACxB,cAAQ,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,mBAAmB,OAAyB,KAA8B;AAChF,YAAQ,MAAM,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,SAAS,GAAG,CAAC;AAAA,EAC1E;AAAA;AAAA;AAAA,EAIQ,aAAa,SAA6B,KAA8B;AAC9E,WAAO,qBAAqB,SAAS,IAAI,aAAa,IAAI,UAAU,EAAE;AAAA,EACxE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,WAAW,KAA6B;AAC9C,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,SAAS,IAC9B,KAAK,aAAa,GAAG;AAAA,EAC3B;AAAA,EAEQ,UAAU,KAA6B;AAC7C,WAAO,KAAK,KAAK,WAAW,GAAG,GAAG,QAAQ;AAAA,EAC5C;AAAA,EACQ,UAAU,KAA6B;AAC7C,WAAO,KAAK,KAAK,WAAW,GAAG,GAAG,QAAQ;AAAA,EAC5C;AAAA;AAAA,EAGQ,SAAS,KAAqB,MAAsB;AAC1D,WAAO,KAAK,KAAK,UAAU,GAAG,GAAG,IAAI;AAAA,EACvC;AAAA;AAAA,EAEQ,aAAa,KAAqB,MAAsB;AAC9D,WAAO,KAAK,KAAK,UAAU,GAAG,GAAG,GAAG,IAAI,WAAW;AAAA,EACrD;AAAA;AAAA,EAIS,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,WAAW,OAAO;AAC/C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AACzC,cAAQ;AAAA,QACN,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,cAAc,KAAK,GAAG,IAAI,MAAM;AAAA,MAC/E;AAIA,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIS,iBAAiB,KAAqC;AAC7D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,cAAc,OAAO;AAClD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,qCAAqC,CAAC;AAAA,IAC7F;AACA,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK;AAAA,QACH,KAAK,aAAa,KAAK,MAAM,IAAI;AAAA,QACjC,iBAAiB,KAAK;AAAA,QACtB,IAAI;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAAA,EAES,mBAAmB,KAAqC;AAC/D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,kBAAkB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,IAAI,MAAM;AAAA,IACvE;AAAA,EACF;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,UAAU,KAAK,oBAAoB,GAAG;AAC5C,UAAM,YAAY,KAAK,kBAAkB,GAAG;AAC5C,UAAM,cAAc,IAAI,UAAU;AAClC,UAAM,UAAU,IAAI;AACpB,UAAM,aAAa,IAAI,UAAU;AACjC,UAAM,SAAwB;AAAA,MAC5B;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,OAAO,IACd,EAAE,QAAQ,MAAM,QAAQ,QAAQ,IAChC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,OAAO,GAAG;AAAA,MAC1D;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AACX,cAAI,WAAW,WAAW,GAAG;AAC3B,mBAAO,EAAE,QAAQ,MAAM,QAAQ,oBAAoB;AAAA,UACrD;AACA,gBAAM,OAAO,KAAK,SAA2B,SAAS;AACtD,cAAI,CAAC,KAAM,QAAO,EAAE,QAAQ,QAAQ,QAAQ,eAAe,SAAS,GAAG;AACvE,gBAAM,QAAQ,KAAK,SAAS,CAAC;AAC7B,gBAAM,aAAa,OAAO,OAAO,KAAK,EAAE;AAAA,YAAK,CAAC,aAC3C,WAAW,CAAC,GAAG;AAAA,cAAK,CAAC,OACnB,EAAE,SAAS,CAAC,GAAG;AAAA,gBAAK,CAAC,MACpB,qBAAqB,EAAE,SAAS,SAAS,WAAW;AAAA,cACtD;AAAA,YACF;AAAA,UACF;AACA,iBAAO,aACH,EAAE,QAAQ,MAAM,QAAQ,uBAAuB,IAC/C,EAAE,QAAQ,QAAQ,QAAQ,eAAe,WAAW,OAAO,SAAS,GAAG;AAAA,QAC7E;AAAA,MACF;AAAA,IACF;AAKA,eAAW,SAAS,IAAI,UAAU,QAAQ;AACxC,YAAM,IAAI,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU;AACzD,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,WAAW,MAAM,IAAI;AAAA,QACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,eAAW,SAAS,IAAI,UAAU,WAAW;AAC3C,YAAM,IAAI,KAAK,aAAa,KAAK,MAAM,IAAI;AAC3C,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,cAAc,MAAM,IAAI;AAAA,QAC1C,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,WAAW,OAAsB,KAA+B;AAC9D,UAAM,QAAS,OAAO,CAAC;AACvB,UAAM,cAAc,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAC5E,UAAM,YAAY,iBAAiB,KAAK;AACxC,UAAM,aAAa,OAAO,MAAM,QAAQ,WAAW,MAAM,MAAM;AAE/D,UAAM,OAAO;AAAA,MACX,cAAc;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,IACnD;AAEA,YAAQ,OAAO;AAAA,MACb,KAAK,cAAc;AACjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,eAAe;AAClB,cAAM,aAAa,qBAAqB,MAAM,aAAa;AAC3D,cAAM,KAAuB;AAAA,UAC3B,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,QACnD;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,KAAwB;AAAA,UAC5B,GAAG;AAAA,UACH,QAAQ,uBAAuB,MAAM,MAAM;AAAA,QAC7C;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,cAAc;AACjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,WAAW,WAAW,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,QACrE;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,oBAAoB;AACvB,cAAM,KAA4B;AAAA,UAChC,GAAG;AAAA,UACH,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,QAC5D;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,cAAc;AACjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,GAAI,MAAM,YAAY,UAAU,MAAM,YAAY,WAC9C,EAAE,SAAS,MAAM,QAAQ,IACzB,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,eAAe;AAIlB,cAAM,KAAuB;AAAA,UAC3B,GAAG;AAAA,UACH,GAAI,MAAM,YAAY,UAAU,MAAM,YAAY,WAC9C,EAAE,SAAS,MAAM,QAAQ,IACzB,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,QAAQ;AACX,cAAM,KAAgB;AAAA,UACpB,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,qBAAqB,YAClC,EAAE,gBAAgB,MAAM,iBAAiB,IACzC,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,KAAwB;AAAA,UAC5B,GAAG;AAAA,UACH,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;AAAA,QAC/D;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,qBAAqB;AACxB,cAAM,KAA6B;AAAA,UACjC,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,GAAI,MAAM,QAAQ,MAAM,sBAAsB,IAC1C,EAAE,uBAAuB,MAAM,uBAAuB,IACtD,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,sBAAsB;AACzB,cAAM,KAA8B;AAAA,UAClC,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,OAAO,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ;AAAA,UACvD,GAAI,OAAO,MAAM,gBAAgB,WAC7B,EAAE,WAAW,MAAM,YAAY,IAC/B,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,iBAAiB,YAC9B,EAAE,aAAa,MAAM,aAAa,IAClC,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,gBAAgB,WAC7B,EAAE,YAAY,MAAM,YAAY,IAChC,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,iBAAiB;AACpB,cAAM,KAAyB;AAAA,UAC7B,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAC5B,EAAE,WAAW,MAAM,WAAW,IAC9B,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,gBAAgB;AAGnB,cAAM,KAAwB;AAAA,UAC5B,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAC5B,EAAE,WAAW,MAAM,WAAW,IAC9B,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,0BAA0B,WACvC,EAAE,qBAAqB,MAAM,sBAAsB,IACnD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,2BAA2B,WACxC,EAAE,sBAAsB,MAAM,uBAAuB,IACrD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,qBAAqB,YAClC,EAAE,gBAAgB,MAAM,iBAAiB,IACzC,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,SAAS;AAEP,cAAM,SAAgB;AACtB,cAAM,IAAI,MAAM,uCAAuC,OAAO,MAAM,CAAC,EAAE;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAIA,YAAY,OAAsB,UAAmC;AACnE,UAAM,gBAAgB;AACtB,UAAM,WAAW,SAAS,YAAY;AAYtC,QAAI,UAAU,qBAAqB;AACjC,UAAI,SAAS,aAAa,QAAQ;AAChC,eAAO,KAAK,OAAO;AAAA,UACjB,oBAAoB;AAAA,YAClB;AAAA,YACA,UAAU;AAAA,cACR,UAAU;AAAA,cACV,SAAS,SAAS,UAAU;AAAA,YAC9B;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,UACE,SAAS,aAAa,WACrB,SAAS,aAAa,YAAY,SAAS,cAC5C;AACA,eAAO,KAAK,OAAO;AAAA,UACjB,oBAAoB;AAAA,YAClB;AAAA,YACA,UAAU;AAAA,cACR,UAAU;AAAA,cACV,GAAI,SAAS,eACT,EAAE,cAAc,SAAS,aAAa,IACtC,CAAC;AAAA,YACP;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAOA,QAAI,UAAU,wBAAwB,UAAU,iBAAiB;AAC/D,YAAM,UACJ,aAAa,YACT,SAAS,oBACT,aAAa,SACX,SAAS,UAAU,SAAS,oBAC5B;AACR,UAAI,SAAS;AACX,eAAO,KAAK,OAAO;AAAA,UACjB,oBAAoB,EAAE,eAAe,mBAAmB,QAAQ;AAAA,QAClE,CAAC;AAAA,MACH;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAOA,QAAI,aAAa,QAAQ;AACvB,UAAI,UAAU,gBAAgB;AAC5B,eAAO,KAAK,OAAO;AAAA,UACjB,UAAU;AAAA,UACV,QAAQ,SAAS,UAAU;AAAA,QAC7B,CAAC;AAAA,MACH;AACA,aAAO,KAAK,OAAO;AAAA,QACjB,oBAAoB;AAAA,UAClB;AAAA,UACA,oBAAoB;AAAA,UACpB,0BAA0B,SAAS,UAAU;AAAA,QAC/C;AAAA,MACF,CAAC;AAAA,IACH;AAGA,QAAI,aAAa,OAAO;AACtB,aAAO,KAAK,OAAO;AAAA,QACjB,oBAAoB;AAAA,UAClB;AAAA,UACA,oBAAoB;AAAA,UACpB,0BAA0B,SAAS,UAAU;AAAA,QAC/C;AAAA,MACF,CAAC;AAAA,IACH;AAGA,QAAI,aAAa,UAAU;AACzB,UAAI,UAAU,gBAAgB,SAAS,cAAc;AACnD,eAAO,KAAK,OAAO;AAAA,UACjB,oBAAoB,EAAE,eAAe,cAAc,SAAS,aAAa;AAAA,QAC3E,CAAC;AAAA,MACH;AAAA,IAEF;AAGA,QAAI,aAAa,aAAa,SAAS,mBAAmB;AACxD,aAAO,KAAK,OAAO;AAAA,QACjB,oBAAoB,EAAE,eAAe,mBAAmB,SAAS,kBAAkB;AAAA,MACrF,CAAC;AAAA,IACH;AAGA,WAAO,EAAE,UAAU,EAAE;AAAA,EACvB;AAAA,EAEQ,OAAO,SAA6B;AAC1C,WAAO,EAAE,UAAU,GAAG,QAAQ,KAAK,UAAU,OAAO,EAAE;AAAA,EACxD;AACF;AAMA,SAAS,iBAAiB,OAAiC;AACzD,MAAI,OAAO,MAAM,oBAAoB,UAAU;AAC7C,UAAM,IAAI,MAAM,gBAAgB,MAAM,yBAAyB;AAC/D,QAAI,KAAK,EAAE,CAAC,EAAG,QAAO,EAAE,CAAC;AAAA,EAC3B;AACA,MAAI,OAAO,MAAM,eAAe,YAAY,MAAM,eAAe,IAAI;AACnE,WAAO,MAAM;AAAA,EACf;AACA,SAAO;AACT;AAGA,SAAS,qBAAqB,OAAoC;AAChE,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEO,IAAM,UAAU,IAAI,kBAAkB;AAC7C,IAAO,sBAAQ;","names":["entry"]}

package/dist/crush-AH24GDDB.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/adapters/crush/index.ts"],"sourcesContent":["/**\n * adapters/crush — Crush (Charm) platform adapter for agent-connector.\n *\n * Crush is a json-stdio host. A single JSON config file holds BOTH the MCP\n * server registrations and the hook registrations, and agent-connector MERGES\n * into it (never replaces it — unrelated keys are preserved verbatim):\n *   - User scope:    ~/.config/crush/crush.json\n *                    (Windows: %LOCALAPPDATA%\\crush\\crush.json)\n *   - Project scope: ./.crush.json  (preferred)  or  ./crush.json\n *\n * MCP servers live under the ROOT KEY \"mcp\" (NOT \"mcpServers\"). A stdio entry is\n *   { type:\"stdio\", command, args, env, timeout:120, disabled:false }.\n * Hooks live under the top-level \"hooks\" key. Crush supports PreToolUse ONLY;\n * the hook reads the host's JSON on stdin and writes a JSON object on stdout\n * carrying a `decision` field. A deny is `{ decision:\"deny\", reason }` on\n * stdout (exit 0); an allow is an empty stdout (exit 0). Crush cannot rewrite\n * tool args/output nor inject session context — every non-deny decision (and\n * every non-PreToolUse event) degrades to a silent allow.\n *\n * SECURITY NOTE: Crush expands `$(...)` command substitution in its config file\n * at load time. We therefore NEVER emit shell-substitution syntax into the\n * command/args/env we write — every value is a literal path/string built by the\n * spawn helpers (which quote, not interpolate). Connector ids are kebab-case and\n * the home-bin path is an absolute literal, so nothing we write can be coerced\n * into a `$(...)` substitution.\n */\n\nimport { existsSync, statSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nimport { BaseAdapter } from \"../base.js\";\nimport type { Adapter, HookReply, InstallContext, NormalizedEvent } from \"../spi.js\";\nimport type {\n  ChangeRecord,\n  DetectedPlatform,\n  HealthCheck,\n  HookEventName,\n  HookParadigm,\n  HookResponse,\n  PlatformCapabilities,\n  PlatformId,\n  PreToolUseEvent,\n  ServerDef,\n  Transport,\n} from \"../../core/types.js\";\nimport { resolveEnvRefsDeep } from \"../../core/interpolate.js\";\nimport { localAppData } from \"../../core/host-paths.js\";\nimport {\n  buildHomeBinHookCommand,\n  buildWrappedStdio,\n  isHomeBinHookCommand,\n} from \"../../core/spawn.js\";\nimport { renderSkillMd } from \"../claude-code/render.js\";\n\nconst HOST: PlatformId = \"crush\";\n/** Crush registers MCP servers under \"mcp\" — NOT the \"mcpServers\" of Claude/Gemini. */\nconst MCP_ROOT_KEY = \"mcp\";\n/** Default per-server timeout (seconds) Crush expects on a stdio entry. */\nconst STDIO_TIMEOUT_SECONDS = 120;\n\n/**\n * Crush hook events agent-connector can register. Crush honors PreToolUse ONLY,\n * and only its deny decision is meaningful; every other normalized event has no\n * Crush equivalent and is skipped at install time.\n */\nconst CRUSH_HOOK_EVENTS = [\"PreToolUse\"] as const;\ntype CrushHookEventName = (typeof CRUSH_HOOK_EVENTS)[number];\n\n/**\n * Newer canonical events with NO Crush analog: there is no permission-dialog,\n * tool-failure, or subagent lifecycle hook. Declared hooks for these warn-skip\n * at install so the degradation is reported, never silent. (The legacy silent\n * drop of the other unwired events — SessionStart, Stop, … — predates this\n * convention and is deliberately left untouched.)\n */\nconst WARN_SKIP_EVENTS: ReadonlySet<HookEventName> = new Set([\n  \"PermissionRequest\",\n  \"PostToolUseFailure\",\n  \"SubagentStart\",\n  \"SubagentStop\",\n]);\n\n// ─────────────────────────────────────────────────────────────────────────\n// Native config shapes (only the parts we touch; rest preserved verbatim)\n// ─────────────────────────────────────────────────────────────────────────\n\n/** One hook registration entry as Crush stores it under top-level \"hooks\". */\ninterface CrushHookEntry {\n  matcher?: string;\n  command: string;\n  [key: string]: unknown;\n}\n\n/** Crush's crush.json shape — only the keys we read/merge. */\ninterface CrushConfigFile {\n  mcp?: Record<string, unknown>;\n  hooks?: Record<string, CrushHookEntry[]>;\n  [key: string]: unknown;\n}\n\n/** Native stdio MCP server entry under \"mcp\". */\ninterface CrushStdioServer {\n  type: \"stdio\";\n  command: string;\n  args: string[];\n  env?: Record<string, string>;\n  timeout: number;\n  disabled: boolean;\n}\n\n/** Native HTTP MCP server entry under \"mcp\". */\ninterface CrushHttpServer {\n  type: \"http\";\n  url: string;\n  headers?: Record<string, string>;\n  timeout: number;\n  disabled: boolean;\n}\n\n/** Raw Crush hook stdin payload (Claude-style: PascalCase event, snake_case fields). */\ninterface CrushHookInput {\n  tool_name?: string;\n  tool_input?: Record<string, unknown>;\n  session_id?: string;\n  cwd?: string;\n  hook_event_name?: string;\n  connector?: unknown;\n}\n\nexport class CrushAdapter extends BaseAdapter implements Adapter {\n  readonly id: PlatformId = HOST;\n  readonly name = \"Crush\";\n  readonly paradigm: HookParadigm = \"json-stdio\";\n\n  readonly capabilities: PlatformCapabilities = {\n    // Memory surface: AGENTS.md-first managed block via the BaseAdapter default\n    // (memoryTargets: project <projectDir>/AGENTS.md; user scope where documented).\n    supportsMemory: true,\n    // PreToolUse deny is the only hook decision Crush honors.\n    preToolUse: true,\n    postToolUse: false,\n    preCompact: false,\n    sessionStart: false,\n    sessionEnd: false,\n    userPromptSubmit: false,\n    stop: false,\n    notification: false,\n    // Newer events: Crush honors PreToolUse ONLY — no permission-dialog,\n    // tool-failure, or subagent lifecycle events exist, so permissionRequest /\n    // postToolUseFailure / subagentStart / subagentStop stay unset — install\n    // reports the standard skip-warn for them.\n    // Crush is deny-only: it cannot rewrite tool args/output nor inject context.\n    canModifyArgs: false,\n    canModifyOutput: false,\n    canInjectSessionContext: false,\n    transports: [\"stdio\", \"http\"],\n    // Content surface: Crush auto-discovers Agent-Skills dirs (dir-per-skill\n    // SKILL.md). Paths are HARD-CODED — no crush.json entry needed\n    // (charmbracelet/crush internal/config/load.go GlobalSkillsDirs +\n    // ProjectSkillsDir, fetched 2026-06-16):\n    //   project → <projectDir>/.crush/skills/<name>/SKILL.md (crush-native, in\n    //             projectSkillSubdirs; preferred over .agents/.claude/.cursor)\n    //   user    → ~/.config/crush/skills/<name>/SKILL.md (home.Config()/crush/\n    //             skills; XDG_CONFIG_HOME or ~/.config).\n    supportsSkills: true,\n  };\n\n  // ── Detection ────────────────────────────────────────────────────────────\n\n  detectInstalled(projectDir: string): DetectedPlatform {\n    const userDir = this.userConfigDir();\n    const userConfig = join(userDir, \"crush.json\");\n    const projectDot = join(projectDir, \".crush.json\");\n    const projectBare = join(projectDir, \"crush.json\");\n    const userInstalled = existsSync(userDir) || existsSync(userConfig);\n    const projInstalled = existsSync(projectDot) || existsSync(projectBare);\n    const installed = userInstalled || projInstalled;\n    // Report the scope/path that actually matched so a project-only install is\n    // not misreported as a (non-existent) user install.\n    const scope = projInstalled && !userInstalled ? \"project\" : \"user\";\n    const projectPath = existsSync(projectBare) && !existsSync(projectDot) ? projectBare : projectDot;\n    const configPath = scope === \"project\" ? projectPath : userConfig;\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath,\n      scope,\n      reason: installed\n        ? scope === \"project\"\n          ? `found project Crush config at ${configPath}`\n          : `found Crush config under ${userDir}`\n        : `no Crush config at ${userConfig}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Native paths ─────────────────────────────────────────────────────────\n\n  getConfigDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\" ? ctx.projectDir : this.userConfigDir();\n  }\n\n  /** MCP servers and hooks share ONE crush.json file. */\n  getServerConfigPath(ctx: InstallContext): string {\n    if (ctx.scope === \"project\") {\n      // Prefer ./.crush.json, but MERGE into an existing ./crush.json if that is\n      // the file already present (so we don't fork the user's config in two).\n      const dot = join(ctx.projectDir, \".crush.json\");\n      const bare = join(ctx.projectDir, \"crush.json\");\n      if (existsSync(bare) && !existsSync(dot)) return bare;\n      return dot;\n    }\n    return join(this.userConfigDir(), \"crush.json\");\n  }\n\n  /** Hooks live in the SAME crush.json under the top-level \"hooks\" key. */\n  getHookConfigPath(ctx: InstallContext): string {\n    return this.getServerConfigPath(ctx);\n  }\n\n  /**\n   * Crush's user config dir:\n   *   - Windows: %LOCALAPPDATA%\\crush  (Local; falls back to AppData/Local)\n   *   - macOS / Linux: ~/.config/crush\n   */\n  private userConfigDir(): string {\n    if (process.platform === \"win32\") {\n      return join(localAppData(), \"crush\");\n    }\n    return join(homedir(), \".config\", \"crush\");\n  }\n\n  // ── MCP server install / uninstall (crush.json → mcp.<id>) ───────────────\n\n  installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST]?.server;\n    if (!connector.server || override === false) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail: connector.server\n            ? \"server registration disabled for crush\"\n            : \"connector declares no MCP server\",\n        },\n      ];\n    }\n\n    // Shallow-merge any per-platform server override into the base ServerDef.\n    const server: ServerDef =\n      override && typeof override === \"object\"\n        ? { ...connector.server, ...override }\n        : connector.server;\n\n    const serverPath = this.getServerConfigPath(ctx);\n    const entry = this.renderServerEntry(ctx, server);\n\n    return [\n      this.upsertServerInJson(serverPath, MCP_ROOT_KEY, connector.id, entry, ctx.dryRun),\n    ];\n  }\n\n  uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const serverPath = this.getServerConfigPath(ctx);\n    return [\n      this.removeServerFromJson(serverPath, MCP_ROOT_KEY, ctx.connector.id, ctx.dryRun),\n    ];\n  }\n\n  /**\n   * Render a normalized ServerDef into Crush's native \"mcp\" entry. Crush has no\n   * documented native `${env:VAR}` interpolation — and it expands `$(...)` at\n   * load time — so refs are resolved to LITERALS at install time (the safe\n   * posture for a host without native interpolation, matching Codex/Kimi).\n   */\n  private renderServerEntry(\n    ctx: InstallContext,\n    server: ServerDef,\n  ): CrushStdioServer | CrushHttpServer {\n    const transport: Transport = server.transport;\n    const disabled = server.enabled === false;\n\n    if (transport === \"stdio\") {\n      let command = server.command ?? \"\";\n      let args = [...(server.args ?? [])];\n\n      // Transparent telemetry wrapping: route the real command through\n      // `<homeBin> serve --connector <id> -- <command> <args...>`.\n      ({ command, args } = buildWrappedStdio(ctx, server, this.id, command, args));\n\n      // Resolve to literals — never emit `$(...)` Crush would expand at load.\n      command = resolveEnvRefsDeep(command);\n      args = resolveEnvRefsDeep(args);\n\n      const entry: CrushStdioServer = {\n        type: \"stdio\",\n        command,\n        args,\n        timeout: STDIO_TIMEOUT_SECONDS,\n        disabled,\n      };\n      const env = this.renderEnv(server.env);\n      if (env) entry.env = env;\n      return entry;\n    }\n\n    // http (and any other remote transport we surface) — Crush registers a URL.\n    const entry: CrushHttpServer = {\n      type: \"http\",\n      url: resolveEnvRefsDeep(server.url ?? \"\"),\n      timeout: STDIO_TIMEOUT_SECONDS,\n      disabled,\n    };\n    const headers = this.renderEnv(server.headers);\n    if (headers) entry.headers = headers;\n    return entry;\n  }\n\n  /** Resolve env/header values to literals (no native interpolation on Crush). */\n  private renderEnv(\n    env: Record<string, string> | undefined,\n  ): Record<string, string> | undefined {\n    if (!env || Object.keys(env).length === 0) return undefined;\n    const out: Record<string, string> = {};\n    for (const [k, v] of Object.entries(resolveEnvRefsDeep({ ...env }))) {\n      out[k] = String(v);\n    }\n    return out;\n  }\n\n  // ── Hook install / uninstall (crush.json → hooks.PreToolUse[]) ───────────\n\n  installHooks(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.hooks === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"hooks disabled for crush\" }];\n    }\n\n    const events = this.effectiveHookEvents(ctx);\n    const dropped = this.warnSkipHookEvents(ctx);\n    const path = this.getHookConfigPath(ctx);\n\n    if (events.length === 0 && dropped.length === 0) {\n      return [{ platform: this.id, action: \"skip\", path, detail: \"no hooks declared\" }];\n    }\n\n    const cfg = this.readJson<CrushConfigFile>(path) ?? {};\n    const __skip = this.malformedHookRootSkip(path, (cfg as Record<string, unknown>).hooks);\n    if (__skip) return [__skip];\n    const hooks = (cfg.hooks ??= {});\n\n    const changes: ChangeRecord[] = [];\n    let mutated = false;\n\n    // Declared events Crush cannot fire are reported, never silently dropped.\n    for (const event of dropped) {\n      changes.push({\n        platform: this.id,\n        action: \"warn\",\n        path,\n        detail: `${event} has no Crush hook equivalent — skipped`,\n      });\n    }\n\n    for (const event of events) {\n      const command = buildHomeBinHookCommand(ctx.homeBinPath, HOST, event, connector.id);\n      const matcher = connector.hooks[event]?.matcher ?? \"\";\n      const entry: CrushHookEntry = { matcher, command };\n\n      const bucket = (hooks[event] ??= []);\n      const existingIdx = bucket.findIndex((e) => this.isOurHook(e, ctx));\n\n      if (existingIdx >= 0) {\n        if (JSON.stringify(bucket[existingIdx]) === JSON.stringify(entry)) {\n          changes.push({\n            platform: this.id,\n            action: \"skip\",\n            path,\n            detail: `hooks.${event} already registered`,\n          });\n          continue;\n        }\n        bucket[existingIdx] = entry;\n        changes.push({ platform: this.id, action: \"update\", path, detail: `hooks.${event}` });\n      } else {\n        bucket.push(entry);\n        changes.push({ platform: this.id, action: \"create\", path, detail: `hooks.${event}` });\n      }\n      mutated = true;\n    }\n\n    if (mutated) this.writeJson(path, cfg, ctx.dryRun);\n    return changes;\n  }\n\n  uninstallHooks(ctx: InstallContext): ChangeRecord[] {\n    const path = this.getHookConfigPath(ctx);\n    const cfg = this.readJson<CrushConfigFile>(path);\n    const hooks = cfg?.hooks;\n    if (!cfg || !hooks) {\n      return [\n        { platform: this.id, action: \"skip\", path, detail: \"no hooks section present\" },\n      ];\n    }\n\n    const changes: ChangeRecord[] = [];\n    let mutated = false;\n\n    for (const event of Object.keys(hooks)) {\n      const bucket = hooks[event];\n      if (!Array.isArray(bucket)) continue;\n\n      // Keep every entry that is NOT ours (anchored match) so a shared-prefix\n      // connector id — or the user's own hook — is never stripped.\n      const kept = bucket.filter((e) => !this.isOurHook(e, ctx));\n      const removed = bucket.length - kept.length;\n      if (removed > 0) {\n        if (kept.length > 0) hooks[event] = kept;\n        else delete hooks[event];\n        changes.push({\n          platform: this.id,\n          action: \"remove\",\n          path,\n          detail: `hooks.${event} (${removed})`,\n        });\n        mutated = true;\n      }\n    }\n\n    if (mutated) this.writeJson(path, cfg, ctx.dryRun);\n    if (changes.length === 0) {\n      changes.push({\n        platform: this.id,\n        action: \"skip\",\n        path,\n        detail: \"no matching hook entries\",\n      });\n    }\n    return changes;\n  }\n\n  // ── Internal helpers ─────────────────────────────────────────────────────\n\n  /** Which canonical hook events to register for Crush, honoring overrides. */\n  private effectiveHookEvents(ctx: InstallContext): CrushHookEventName[] {\n    if (ctx.connector.platforms[HOST]?.hooks === false) return [];\n    return CRUSH_HOOK_EVENTS.filter((e) => ctx.connector.hookEvents.includes(e));\n  }\n\n  /** Declared events Crush has no analog for — install reports a warn-skip. */\n  private warnSkipHookEvents(ctx: InstallContext): HookEventName[] {\n    if (ctx.connector.platforms[HOST]?.hooks === false) return [];\n    return ctx.connector.hookEvents.filter((e) => WARN_SKIP_EVENTS.has(e));\n  }\n\n  /**\n   * Does this hook entry belong to this connector? Anchored on the home-bin +\n   * connector-id token (isHomeBinHookCommand) so uninstalling a shared-prefix\n   * connector id never strips a sibling's hook.\n   */\n  private isOurHook(entry: CrushHookEntry | undefined, ctx: InstallContext): boolean {\n    if (!entry || typeof entry !== \"object\") return false;\n    return isHomeBinHookCommand(entry.command, ctx.homeBinPath, ctx.connector.id);\n  }\n\n  // ── Content surface: skills (dir-per-skill SKILL.md) ─────────────────────\n  // CONTENT-ONLY: pure native-file writers, mirroring goose/openclaw. No\n  // runtime dispatch, no home-bin pointer, no telemetry wrap. Each write is\n  // idempotent (byte-identical → skip) via writeContentFile and reversible via\n  // removeContentFile + removeDirIfEmpty (never rm -rf a shared dir). Honors\n  // platforms[\"crush\"].skills === false. No crush.json entry is written — Crush\n  // auto-discovers these hard-coded dirs (load.go GlobalSkillsDirs/ProjectSkillsDir).\n  //\n  // Native locations (Agent-Skills spec — dir-per-skill SKILL.md + resources):\n  //   project → <projectDir>/.crush/skills/<name>/SKILL.md\n  //   user    → ~/.config/crush/skills/<name>/SKILL.md\n\n  /** The skills ROOT dir for ctx.scope (parent of every per-skill dir). */\n  private skillsDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".crush\", \"skills\")\n      : join(this.userConfigDir(), \"skills\");\n  }\n\n  /** Per-skill directory: <skillsDir>/<name>. */\n  private skillDir(ctx: InstallContext, name: string): string {\n    return join(this.skillsDir(ctx), name);\n  }\n\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.skills === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for crush\" }];\n    }\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      // Guard a skills path occupied by a regular FILE (would throw ENOTDIR on\n      // mkdir): skip-warn rather than crash (the cline `.clinerules`-is-a-file\n      // precedent). The per-skill dir or any parent up to the scope root counts.\n      const blockingFile = firstFileOnPath(this.skillsDir(ctx), dir);\n      if (blockingFile !== null) {\n        changes.push({\n          platform: this.id,\n          action: \"warn\",\n          path: blockingFile,\n          detail: `${blockingFile} is a file, not a directory; skill \"${skill.name}\" skipped`,\n        });\n        continue;\n      }\n      changes.push(\n        this.writeContentFile(join(dir, \"SKILL.md\"), renderSkillMd(skill), ctx.dryRun),\n      );\n      // Bundle any resource files beside SKILL.md (relative path → contents).\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\n      // (config-time validation already rejects these, but never trust input).\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\n          });\n          continue;\n        }\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\n      }\n    }\n    return changes;\n  }\n\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\n      // skill dir itself when we own its full contents.\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\n      for (const rel of Object.keys(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) continue; // never delete outside the skill dir\n        changes.push(this.removeContentFile(target, ctx.dryRun));\n      }\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\n      // dir that still holds user-added / sibling-tool / shared files.\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\n    }\n    return changes;\n  }\n\n  // ── Diagnostics ──────────────────────────────────────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const configPath = this.getServerConfigPath(ctx);\n    const connectorId = ctx.connector.id;\n    const homeBin = ctx.homeBinPath;\n    const hookEvents = this.effectiveHookEvents(ctx);\n    return [\n      {\n        name: `${this.name}: crush.json present`,\n        check: () =>\n          existsSync(configPath)\n            ? { status: \"OK\", detail: configPath }\n            : { status: \"FAIL\", detail: `not found: ${configPath}` },\n      },\n      {\n        name: `${this.name}: mcp.${connectorId} registered`,\n        check: () => {\n          if (!ctx.connector.server) return { status: \"OK\", detail: \"no MCP server declared\" };\n          const cfg = this.readJson<CrushConfigFile>(configPath);\n          const bucket = cfg?.[MCP_ROOT_KEY];\n          const present =\n            typeof bucket === \"object\" && bucket !== null && connectorId in bucket;\n          return present\n            ? { status: \"OK\", detail: `mcp.${connectorId}` }\n            : { status: \"FAIL\", detail: `mcp.${connectorId} not found in ${configPath}` };\n        },\n      },\n      {\n        name: `${this.name}: hook command registered`,\n        check: () => {\n          if (hookEvents.length === 0) {\n            return { status: \"OK\", detail: \"no hooks declared\" };\n          }\n          const cfg = this.readJson<CrushConfigFile>(configPath);\n          if (!cfg) return { status: \"FAIL\", detail: `cannot read ${configPath}` };\n          const hooks = cfg.hooks ?? {};\n          const registered = Object.values(hooks).some((entries) =>\n            (entries ?? []).some((e) => isHomeBinHookCommand(e?.command, homeBin, connectorId)),\n          );\n          return registered\n            ? { status: \"OK\", detail: \"hook command present\" }\n            : { status: \"FAIL\", detail: `no hook for ${connectorId} in ${configPath}` };\n        },\n      },\n    ];\n  }\n\n  // ── Runtime: parse Crush stdin JSON → normalized event ───────────────────\n\n  parseEvent(event: HookEventName, raw: unknown): NormalizedEvent {\n    const input = (raw ?? {}) as CrushHookInput;\n    const connectorId = typeof input.connector === \"string\" ? input.connector : \"\";\n    const sessionId = typeof input.session_id === \"string\" ? input.session_id : \"\";\n    const projectDir = typeof input.cwd === \"string\" ? input.cwd : undefined;\n\n    const base = {\n      hostPlatform: HOST,\n      connectorId,\n      sessionId,\n      raw,\n      ...(projectDir !== undefined ? { projectDir } : {}),\n    } as const;\n\n    if (event === \"PreToolUse\") {\n      const ev: PreToolUseEvent = {\n        ...base,\n        toolName: input.tool_name ?? \"\",\n        toolInput: input.tool_input ?? {},\n      };\n      return ev;\n    }\n\n    // Crush only ever delivers PreToolUse. Surface anything else loudly rather\n    // than silently mis-parsing a payload the host cannot actually produce.\n    throw new Error(`unsupported crush hook event: ${String(event)}`);\n  }\n\n  // ── Runtime: normalized response → Crush native hook reply ───────────────\n\n  formatReply(event: HookEventName, response: HookResponse): HookReply {\n    const decision = response.decision ?? \"allow\";\n\n    // deny → Crush blocks the pending tool call via a stdout JSON object with a\n    // `decision:\"deny\"` (+ reason). Only PreToolUse is honored; every other\n    // event/decision degrades to a silent allow.\n    if (decision === \"deny\" && event === \"PreToolUse\") {\n      return this.stdout({\n        decision: \"deny\",\n        reason: response.reason ?? \"Blocked by hook\",\n      });\n    }\n\n    // allow / modify / context / ask / unsupported → pass through (exit 0, empty\n    // stdout). Crush cannot rewrite args/output or inject context, so those are\n    // dropped fail-open here (the deny path above is the only fail-safe lever).\n    return { exitCode: 0 };\n  }\n\n  private stdout(payload: unknown): HookReply {\n    return { exitCode: 0, stdout: JSON.stringify(payload) };\n  }\n}\n\n/**\n * Walk every path segment from `root` down to (and including) `leaf` and return\n * the FIRST one that exists as a regular file (which would make a mkdir for the\n * skill dir throw ENOTDIR), else null. Used to skip-warn instead of crashing\n * when a user has a `.crush/skills` file where we need a directory.\n */\nfunction firstFileOnPath(root: string, leaf: string): string | null {\n  const segments: string[] = [];\n  let cur = leaf;\n  while (cur.length >= root.length) {\n    segments.unshift(cur);\n    if (cur === root) break;\n    const parent = dirname(cur);\n    if (parent === cur) break;\n    cur = parent;\n  }\n  for (const p of segments) {\n    if (!existsSync(p)) return null; // nothing planted from here down\n    try {\n      if (statSync(p).isFile()) return p;\n    } catch {\n      return null;\n    }\n  }\n  return null;\n}\n\nexport const adapter = new CrushAdapter();\nexport default adapter;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA2BA,SAAS,YAAY,gBAAgB;AACrC,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AA0B9B,IAAM,OAAmB;AAEzB,IAAM,eAAe;AAErB,IAAM,wBAAwB;AAO9B,IAAM,oBAAoB,CAAC,YAAY;AAUvC,IAAM,mBAA+C,oBAAI,IAAI;AAAA,EAC3D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAiDM,IAAM,eAAN,cAA2B,YAA+B;AAAA,EACtD,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA;AAAA,IAEhB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMd,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,yBAAyB;AAAA,IACzB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAS5B,gBAAgB;AAAA,EAClB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,cAAc;AACnC,UAAM,aAAa,KAAK,SAAS,YAAY;AAC7C,UAAM,aAAa,KAAK,YAAY,aAAa;AACjD,UAAM,cAAc,KAAK,YAAY,YAAY;AACjD,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,UAAU;AAClE,UAAM,gBAAgB,WAAW,UAAU,KAAK,WAAW,WAAW;AACtE,UAAM,YAAY,iBAAiB;AAGnC,UAAM,QAAQ,iBAAiB,CAAC,gBAAgB,YAAY;AAC5D,UAAM,cAAc,WAAW,WAAW,KAAK,CAAC,WAAW,UAAU,IAAI,cAAc;AACvF,UAAM,aAAa,UAAU,YAAY,cAAc;AACvD,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,UAAU,YACR,iCAAiC,UAAU,KAC3C,4BAA4B,OAAO,KACrC,sBAAsB,UAAU;AAAA,MACpC,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIA,aAAa,KAA6B;AACxC,WAAO,IAAI,UAAU,YAAY,IAAI,aAAa,KAAK,cAAc;AAAA,EACvE;AAAA;AAAA,EAGA,oBAAoB,KAA6B;AAC/C,QAAI,IAAI,UAAU,WAAW;AAG3B,YAAM,MAAM,KAAK,IAAI,YAAY,aAAa;AAC9C,YAAM,OAAO,KAAK,IAAI,YAAY,YAAY;AAC9C,UAAI,WAAW,IAAI,KAAK,CAAC,WAAW,GAAG,EAAG,QAAO;AACjD,aAAO;AAAA,IACT;AACA,WAAO,KAAK,KAAK,cAAc,GAAG,YAAY;AAAA,EAChD;AAAA;AAAA,EAGA,kBAAkB,KAA6B;AAC7C,WAAO,KAAK,oBAAoB,GAAG;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,gBAAwB;AAC9B,QAAI,QAAQ,aAAa,SAAS;AAChC,aAAO,KAAK,aAAa,GAAG,OAAO;AAAA,IACrC;AACA,WAAO,KAAK,QAAQ,GAAG,WAAW,OAAO;AAAA,EAC3C;AAAA;AAAA,EAIA,cAAc,KAAqC;AACjD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI,GAAG;AAC5C,QAAI,CAAC,UAAU,UAAU,aAAa,OAAO;AAC3C,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,UAAU,SACd,2CACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAGA,UAAM,SACJ,YAAY,OAAO,aAAa,WAC5B,EAAE,GAAG,UAAU,QAAQ,GAAG,SAAS,IACnC,UAAU;AAEhB,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,UAAM,QAAQ,KAAK,kBAAkB,KAAK,MAAM;AAEhD,WAAO;AAAA,MACL,KAAK,mBAAmB,YAAY,cAAc,UAAU,IAAI,OAAO,IAAI,MAAM;AAAA,IACnF;AAAA,EACF;AAAA,EAEA,gBAAgB,KAAqC;AACnD,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,WAAO;AAAA,MACL,KAAK,qBAAqB,YAAY,cAAc,IAAI,UAAU,IAAI,IAAI,MAAM;AAAA,IAClF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,kBACN,KACA,QACoC;AACpC,UAAM,YAAuB,OAAO;AACpC,UAAM,WAAW,OAAO,YAAY;AAEpC,QAAI,cAAc,SAAS;AACzB,UAAI,UAAU,OAAO,WAAW;AAChC,UAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAIlC,OAAC,EAAE,SAAS,KAAK,IAAI,kBAAkB,KAAK,QAAQ,KAAK,IAAI,SAAS,IAAI;AAG1E,gBAAU,mBAAmB,OAAO;AACpC,aAAO,mBAAmB,IAAI;AAE9B,YAAMA,SAA0B;AAAA,QAC9B,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA,SAAS;AAAA,QACT;AAAA,MACF;AACA,YAAM,MAAM,KAAK,UAAU,OAAO,GAAG;AACrC,UAAI,IAAK,CAAAA,OAAM,MAAM;AACrB,aAAOA;AAAA,IACT;AAGA,UAAM,QAAyB;AAAA,MAC7B,MAAM;AAAA,MACN,KAAK,mBAAmB,OAAO,OAAO,EAAE;AAAA,MACxC,SAAS;AAAA,MACT;AAAA,IACF;AACA,UAAM,UAAU,KAAK,UAAU,OAAO,OAAO;AAC7C,QAAI,QAAS,OAAM,UAAU;AAC7B,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,UACN,KACoC;AACpC,QAAI,CAAC,OAAO,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAClD,UAAM,MAA8B,CAAC;AACrC,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,mBAAmB,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG;AACnE,UAAI,CAAC,IAAI,OAAO,CAAC;AAAA,IACnB;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,aAAa,KAAqC;AAChD,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,UAAU,OAAO;AAC9C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,2BAA2B,CAAC;AAAA,IACnF;AAEA,UAAM,SAAS,KAAK,oBAAoB,GAAG;AAC3C,UAAM,UAAU,KAAK,mBAAmB,GAAG;AAC3C,UAAM,OAAO,KAAK,kBAAkB,GAAG;AAEvC,QAAI,OAAO,WAAW,KAAK,QAAQ,WAAW,GAAG;AAC/C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,oBAAoB,CAAC;AAAA,IAClF;AAEA,UAAM,MAAM,KAAK,SAA0B,IAAI,KAAK,CAAC;AACrD,UAAM,SAAS,KAAK,sBAAsB,MAAO,IAAgC,KAAK;AACtF,QAAI,OAAQ,QAAO,CAAC,MAAM;AAC1B,UAAM,QAAS,IAAI,UAAU,CAAC;AAE9B,UAAM,UAA0B,CAAC;AACjC,QAAI,UAAU;AAGd,eAAW,SAAS,SAAS;AAC3B,cAAQ,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR;AAAA,QACA,QAAQ,GAAG,KAAK;AAAA,MAClB,CAAC;AAAA,IACH;AAEA,eAAW,SAAS,QAAQ;AAC1B,YAAM,UAAU,wBAAwB,IAAI,aAAa,MAAM,OAAO,UAAU,EAAE;AAClF,YAAM,UAAU,UAAU,MAAM,KAAK,GAAG,WAAW;AACnD,YAAM,QAAwB,EAAE,SAAS,QAAQ;AAEjD,YAAM,SAAU,MAAM,KAAK,MAAM,CAAC;AAClC,YAAM,cAAc,OAAO,UAAU,CAAC,MAAM,KAAK,UAAU,GAAG,GAAG,CAAC;AAElE,UAAI,eAAe,GAAG;AACpB,YAAI,KAAK,UAAU,OAAO,WAAW,CAAC,MAAM,KAAK,UAAU,KAAK,GAAG;AACjE,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR;AAAA,YACA,QAAQ,SAAS,KAAK;AAAA,UACxB,CAAC;AACD;AAAA,QACF;AACA,eAAO,WAAW,IAAI;AACtB,gBAAQ,KAAK,EAAE,UAAU,KAAK,IAAI,QAAQ,UAAU,MAAM,QAAQ,SAAS,KAAK,GAAG,CAAC;AAAA,MACtF,OAAO;AACL,eAAO,KAAK,KAAK;AACjB,gBAAQ,KAAK,EAAE,UAAU,KAAK,IAAI,QAAQ,UAAU,MAAM,QAAQ,SAAS,KAAK,GAAG,CAAC;AAAA,MACtF;AACA,gBAAU;AAAA,IACZ;AAEA,QAAI,QAAS,MAAK,UAAU,MAAM,KAAK,IAAI,MAAM;AACjD,WAAO;AAAA,EACT;AAAA,EAEA,eAAe,KAAqC;AAClD,UAAM,OAAO,KAAK,kBAAkB,GAAG;AACvC,UAAM,MAAM,KAAK,SAA0B,IAAI;AAC/C,UAAM,QAAQ,KAAK;AACnB,QAAI,CAAC,OAAO,CAAC,OAAO;AAClB,aAAO;AAAA,QACL,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,2BAA2B;AAAA,MAChF;AAAA,IACF;AAEA,UAAM,UAA0B,CAAC;AACjC,QAAI,UAAU;AAEd,eAAW,SAAS,OAAO,KAAK,KAAK,GAAG;AACtC,YAAM,SAAS,MAAM,KAAK;AAC1B,UAAI,CAAC,MAAM,QAAQ,MAAM,EAAG;AAI5B,YAAM,OAAO,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,UAAU,GAAG,GAAG,CAAC;AACzD,YAAM,UAAU,OAAO,SAAS,KAAK;AACrC,UAAI,UAAU,GAAG;AACf,YAAI,KAAK,SAAS,EAAG,OAAM,KAAK,IAAI;AAAA,YAC/B,QAAO,MAAM,KAAK;AACvB,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR;AAAA,UACA,QAAQ,SAAS,KAAK,KAAK,OAAO;AAAA,QACpC,CAAC;AACD,kBAAU;AAAA,MACZ;AAAA,IACF;AAEA,QAAI,QAAS,MAAK,UAAU,MAAM,KAAK,IAAI,MAAM;AACjD,QAAI,QAAQ,WAAW,GAAG;AACxB,cAAQ,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA,EAKQ,oBAAoB,KAA2C;AACrE,QAAI,IAAI,UAAU,UAAU,IAAI,GAAG,UAAU,MAAO,QAAO,CAAC;AAC5D,WAAO,kBAAkB,OAAO,CAAC,MAAM,IAAI,UAAU,WAAW,SAAS,CAAC,CAAC;AAAA,EAC7E;AAAA;AAAA,EAGQ,mBAAmB,KAAsC;AAC/D,QAAI,IAAI,UAAU,UAAU,IAAI,GAAG,UAAU,MAAO,QAAO,CAAC;AAC5D,WAAO,IAAI,UAAU,WAAW,OAAO,CAAC,MAAM,iBAAiB,IAAI,CAAC,CAAC;AAAA,EACvE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,UAAU,OAAmC,KAA8B;AACjF,QAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,WAAO,qBAAqB,MAAM,SAAS,IAAI,aAAa,IAAI,UAAU,EAAE;AAAA,EAC9E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,UAAU,KAA6B;AAC7C,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,UAAU,QAAQ,IACvC,KAAK,KAAK,cAAc,GAAG,QAAQ;AAAA,EACzC;AAAA;AAAA,EAGQ,SAAS,KAAqB,MAAsB;AAC1D,WAAO,KAAK,KAAK,UAAU,GAAG,GAAG,IAAI;AAAA,EACvC;AAAA,EAES,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,WAAW,OAAO;AAC/C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,4BAA4B,CAAC;AAAA,IACpF;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAIzC,YAAM,eAAe,gBAAgB,KAAK,UAAU,GAAG,GAAG,GAAG;AAC7D,UAAI,iBAAiB,MAAM;AACzB,gBAAQ,KAAK;AAAA,UACX,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,GAAG,YAAY,uCAAuC,MAAM,IAAI;AAAA,QAC1E,CAAC;AACD;AAAA,MACF;AACA,cAAQ;AAAA,QACN,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,cAAc,KAAK,GAAG,IAAI,MAAM;AAAA,MAC/E;AAIA,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,UAAM,cAAc,IAAI,UAAU;AAClC,UAAM,UAAU,IAAI;AACpB,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,WAAO;AAAA,MACL;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,UAAU,IACjB,EAAE,QAAQ,MAAM,QAAQ,WAAW,IACnC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,UAAU,GAAG;AAAA,MAC7D;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI,SAAS,WAAW;AAAA,QACtC,OAAO,MAAM;AACX,cAAI,CAAC,IAAI,UAAU,OAAQ,QAAO,EAAE,QAAQ,MAAM,QAAQ,yBAAyB;AACnF,gBAAM,MAAM,KAAK,SAA0B,UAAU;AACrD,gBAAM,SAAS,MAAM,YAAY;AACjC,gBAAM,UACJ,OAAO,WAAW,YAAY,WAAW,QAAQ,eAAe;AAClE,iBAAO,UACH,EAAE,QAAQ,MAAM,QAAQ,OAAO,WAAW,GAAG,IAC7C,EAAE,QAAQ,QAAQ,QAAQ,OAAO,WAAW,iBAAiB,UAAU,GAAG;AAAA,QAChF;AAAA,MACF;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AACX,cAAI,WAAW,WAAW,GAAG;AAC3B,mBAAO,EAAE,QAAQ,MAAM,QAAQ,oBAAoB;AAAA,UACrD;AACA,gBAAM,MAAM,KAAK,SAA0B,UAAU;AACrD,cAAI,CAAC,IAAK,QAAO,EAAE,QAAQ,QAAQ,QAAQ,eAAe,UAAU,GAAG;AACvE,gBAAM,QAAQ,IAAI,SAAS,CAAC;AAC5B,gBAAM,aAAa,OAAO,OAAO,KAAK,EAAE;AAAA,YAAK,CAAC,aAC3C,WAAW,CAAC,GAAG,KAAK,CAAC,MAAM,qBAAqB,GAAG,SAAS,SAAS,WAAW,CAAC;AAAA,UACpF;AACA,iBAAO,aACH,EAAE,QAAQ,MAAM,QAAQ,uBAAuB,IAC/C,EAAE,QAAQ,QAAQ,QAAQ,eAAe,WAAW,OAAO,UAAU,GAAG;AAAA,QAC9E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAIA,WAAW,OAAsB,KAA+B;AAC9D,UAAM,QAAS,OAAO,CAAC;AACvB,UAAM,cAAc,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAC5E,UAAM,YAAY,OAAO,MAAM,eAAe,WAAW,MAAM,aAAa;AAC5E,UAAM,aAAa,OAAO,MAAM,QAAQ,WAAW,MAAM,MAAM;AAE/D,UAAM,OAAO;AAAA,MACX,cAAc;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,IACnD;AAEA,QAAI,UAAU,cAAc;AAC1B,YAAM,KAAsB;AAAA,QAC1B,GAAG;AAAA,QACH,UAAU,MAAM,aAAa;AAAA,QAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,MAClC;AACA,aAAO;AAAA,IACT;AAIA,UAAM,IAAI,MAAM,iCAAiC,OAAO,KAAK,CAAC,EAAE;AAAA,EAClE;AAAA;AAAA,EAIA,YAAY,OAAsB,UAAmC;AACnE,UAAM,WAAW,SAAS,YAAY;AAKtC,QAAI,aAAa,UAAU,UAAU,cAAc;AACjD,aAAO,KAAK,OAAO;AAAA,QACjB,UAAU;AAAA,QACV,QAAQ,SAAS,UAAU;AAAA,MAC7B,CAAC;AAAA,IACH;AAKA,WAAO,EAAE,UAAU,EAAE;AAAA,EACvB;AAAA,EAEQ,OAAO,SAA6B;AAC1C,WAAO,EAAE,UAAU,GAAG,QAAQ,KAAK,UAAU,OAAO,EAAE;AAAA,EACxD;AACF;AAQA,SAAS,gBAAgB,MAAc,MAA6B;AAClE,QAAM,WAAqB,CAAC;AAC5B,MAAI,MAAM;AACV,SAAO,IAAI,UAAU,KAAK,QAAQ;AAChC,aAAS,QAAQ,GAAG;AACpB,QAAI,QAAQ,KAAM;AAClB,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,aAAW,KAAK,UAAU;AACxB,QAAI,CAAC,WAAW,CAAC,EAAG,QAAO;AAC3B,QAAI;AACF,UAAI,SAAS,CAAC,EAAE,OAAO,EAAG,QAAO;AAAA,IACnC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,IAAM,UAAU,IAAI,aAAa;AACxC,IAAO,gBAAQ;","names":["entry"]}