@multiplayer-app/agent 0.1.20 → 0.1.21

package/dist/app/static-server.js

@@ -0,0 +1,145 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.siteContentType = siteContentType;
+exports.createStaticSite = createStaticSite;
+exports.isProjectFilePath = isProjectFilePath;
+exports.findSiteFile = findSiteFile;
+exports.serveStatic = serveStatic;
+// A static service (no command for this mode, or built output in a deployment): its files served
+// by the guest itself, the way Vercel serves a static output — a file when one matches (`/about`
+// finds about.html with cleanUrls), else the service's own rewrites (an SPA's `/index.html`), with
+// its header rules applied to the path asked. Redirects answer before this (rules.ts).
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const workload_1 = require("../runtime/workload");
+const protocol_1 = require("../transport/protocol");
+const rules_1 = require("./rules");
+const CONTENT_TYPES = {
+    '.html': 'text/html; charset=utf-8',
+    '.htm': 'text/html; charset=utf-8',
+    '.css': 'text/css; charset=utf-8',
+    '.js': 'text/javascript; charset=utf-8',
+    '.mjs': 'text/javascript; charset=utf-8',
+    '.json': 'application/json; charset=utf-8',
+    '.map': 'application/json; charset=utf-8',
+    '.txt': 'text/plain; charset=utf-8',
+    '.md': 'text/markdown; charset=utf-8',
+    '.csv': 'text/csv; charset=utf-8',
+    '.xml': 'application/xml; charset=utf-8',
+    '.svg': 'image/svg+xml',
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.gif': 'image/gif',
+    '.webp': 'image/webp',
+    '.avif': 'image/avif',
+    '.ico': 'image/x-icon',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+    '.ttf': 'font/ttf',
+    '.otf': 'font/otf',
+    '.wasm': 'application/wasm',
+    '.pdf': 'application/pdf',
+    '.mp4': 'video/mp4',
+    '.webm': 'video/webm',
+    '.mp3': 'audio/mpeg',
+};
+/** The Content-Type a site's file is served with; undefined for one it doesn't know. */
+function siteContentType(file) {
+    return CONTENT_TYPES[node_path_1.default.extname(file).toLowerCase()];
+}
+function createStaticSite(dir, rules, { hideProjectFiles = false } = {}) {
+    return { dir: node_path_1.default.resolve(dir), rules, hideProjectFiles };
+}
+const PROJECT_FILE = /^\/(?:package\.json|package-lock\.json|npm-shrinkwrap\.json|pnpm-lock\.yaml|pnpm-workspace\.yaml|yarn\.lock|bun\.lockb?|requirements\.txt|pyproject\.toml|poetry\.lock|uv\.lock|Pipfile(?:\.lock)?)$/i;
+/** A project file at the top of a site (what describes and installs a service, not what it serves). */
+function isProjectFilePath(pathname) {
+    return PROJECT_FILE.test(node_path_1.default.posix.normalize(pathname).replace(/\/+$/, ''));
+}
+/**
+ * The file `pathname` names in the site (a directory's index.html), or undefined. Never outside
+ * it, and never a dotfile (.env, .git, the agent's .builder) but .well-known. A site that is its
+ * service's own folder doesn't hand out that service's project files either.
+ */
+async function findFile(site, pathname) {
+    if ((0, protocol_1.isHiddenSitePath)(pathname) || (site.hideProjectFiles && isProjectFilePath(pathname)))
+        return undefined;
+    const candidate = node_path_1.default.resolve(site.dir, `.${pathname}`);
+    if (!(0, workload_1.isInsideDir)(site.dir, candidate))
+        return undefined;
+    try {
+        // Compared as real paths: a symlink inside must not lead outside (and the site's own path may be one).
+        const root = await node_fs_1.promises.realpath(site.dir);
+        let file = await node_fs_1.promises.realpath(candidate);
+        if (!(0, workload_1.isInsideDir)(root, file))
+            return undefined;
+        let stat = await node_fs_1.promises.stat(file);
+        if (stat.isDirectory()) {
+            file = node_path_1.default.join(file, 'index.html');
+            stat = await node_fs_1.promises.stat(file);
+        }
+        return stat.isFile() ? { file, size: stat.size } : undefined;
+    }
+    catch (_a) {
+        return undefined;
+    }
+}
+/** A path's file as a static service finds it: the file itself, its clean URL's page, else its rewrites. */
+async function findSiteFile(rules, pathname, find) {
+    let found = await find(pathname);
+    if (!found && rules.cleanUrls && pathname !== '/')
+        found = await find(`${pathname.replace(/\/+$/, '')}.html`);
+    if (!found) {
+        const rewritten = (0, rules_1.rewriteFor)(rules, pathname);
+        if (rewritten)
+            found = await find(rewritten);
+    }
+    return found;
+}
+function send(res, status, body) {
+    res.writeHead(status, { 'Content-Type': 'text/plain; charset=utf-8', 'Content-Length': Buffer.byteLength(body) });
+    res.end(body);
+}
+/** Answers `req` from the site; with `next`, what the site can't answer goes there instead of a 404 or 405. */
+async function serveStatic(site, req, res, next) {
+    var _a;
+    if (req.method !== 'GET' && req.method !== 'HEAD') {
+        if (next)
+            return next();
+        res.setHeader('Allow', 'GET, HEAD');
+        return send(res, 405, 'Method Not Allowed');
+    }
+    let pathname;
+    try {
+        pathname = decodeURIComponent((0, protocol_1.requestUrl)(req.url).pathname);
+    }
+    catch (_b) {
+        return send(res, 400, 'Bad Request');
+    }
+    const found = await findSiteFile(site.rules, pathname, (candidate) => findFile(site, candidate));
+    if (!found)
+        return next ? next() : send(res, 404, 'Not Found');
+    // Opened before answering, and only what really is inside: a link swapped in since it was found fails here.
+    const opened = await (0, workload_1.openInside)(site.dir, found.file).catch(() => undefined);
+    if (!opened)
+        return next ? next() : send(res, 404, 'Not Found');
+    const headers = {
+        'Content-Type': (_a = CONTENT_TYPES[node_path_1.default.extname(found.file).toLowerCase()]) !== null && _a !== void 0 ? _a : 'application/octet-stream',
+        'Content-Length': (await opened.stat()).size,
+    };
+    for (const { key, value } of (0, rules_1.headersFor)(site.rules, pathname))
+        headers[key] = value;
+    res.writeHead(200, headers);
+    if (req.method === 'HEAD') {
+        await opened.close();
+        res.end();
+        return;
+    }
+    const stream = opened.createReadStream();
+    stream.on('error', () => res.destroy());
+    stream.pipe(res);
+}
+//# sourceMappingURL=static-server.js.map

package/dist/app/static-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-server.js","sourceRoot":"","sources":["../../src/app/static-server.ts"],"names":[],"mappings":";;;;;AA2CA,0CAEC;AASD,4CAEC;AAKD,8CAEC;AA4BD,oCAQC;AAQD,kCAgCC;AA3ID,iGAAiG;AACjG,iGAAiG;AACjG,mGAAmG;AACnG,uFAAuF;AACvF,qCAAwC;AAExC,0DAA4B;AAC5B,kDAA6D;AAC7D,oDAAoE;AACpE,mCAAmE;AAEnE,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,0BAA0B;IAClC,MAAM,EAAE,yBAAyB;IACjC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,iCAAiC;IACzC,MAAM,EAAE,2BAA2B;IACnC,KAAK,EAAE,8BAA8B;IACrC,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,YAAY;CACrB,CAAA;AAED,wFAAwF;AACxF,SAAgB,eAAe,CAAC,IAAY;IAC1C,OAAO,aAAa,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;AACxD,CAAC;AASD,SAAgB,gBAAgB,CAAC,GAAW,EAAE,KAAmB,EAAE,EAAE,gBAAgB,GAAG,KAAK,EAAE,GAAG,EAAE;IAClG,OAAO,EAAE,GAAG,EAAE,mBAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAA;AAC5D,CAAC;AAED,MAAM,YAAY,GAAG,uMAAuM,CAAA;AAE5N,uGAAuG;AACvG,SAAgB,iBAAiB,CAAC,QAAgB;IAChD,OAAO,YAAY,CAAC,IAAI,CAAC,mBAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;AAC9E,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,QAAQ,CAAC,IAAgB,EAAE,QAAgB;IACxD,IAAI,IAAA,2BAAgB,EAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1G,MAAM,SAAS,GAAG,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC,CAAA;IACxD,IAAI,CAAC,IAAA,sBAAW,EAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IACvD,IAAI,CAAC;QACH,uGAAuG;QACvG,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,IAAI,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,CAAC,IAAA,sBAAW,EAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QAC9C,IAAI,IAAI,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;YACpC,IAAI,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9D,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,4GAA4G;AACrG,KAAK,UAAU,YAAY,CAAI,KAAmB,EAAE,QAAgB,EAAE,IAAkD;IAC7H,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAA;IAChC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,QAAQ,KAAK,GAAG;QAAE,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAC7G,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,IAAA,kBAAU,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QAC7C,IAAI,SAAS;YAAE,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,IAAI,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAY;IAClE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACjH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,+GAA+G;AACxG,KAAK,UAAU,WAAW,CAAC,IAAgB,EAAE,GAAyB,EAAE,GAAwB,EAAE,IAAiB;;IACxH,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClD,IAAI,IAAI;YAAE,OAAO,IAAI,EAAE,CAAA;QACvB,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;QACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAA;IAC7C,CAAC;IACD,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,kBAAkB,CAAC,IAAA,qBAAU,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAC7D,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;IACtC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAA;IAChG,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;IAE9D,4GAA4G;IAC5G,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAU,EAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC5E,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;IAC/D,MAAM,OAAO,GAAoC;QAC/C,cAAc,EAAE,MAAA,aAAa,CAAC,mBAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,mCAAI,0BAA0B;QACnG,gBAAgB,EAAE,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI;KAC7C,CAAA;IACD,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,IAAA,kBAAU,EAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACnF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,GAAG,CAAC,GAAG,EAAE,CAAA;QACT,OAAM;IACR,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAA;IACxC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IACvC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAClB,CAAC"}

package/dist/persistence/conversation-store.d.ts

@@ -0,0 +1,21 @@
+export interface ConversationStoreConfig {
+    /** The session's route in storage (SESSION_STORAGE_URL). */
+    url: string;
+    token: string;
+    /** Where this VM keeps it. */
+    file: string;
+}
+export declare class ConversationStore {
+    private readonly config;
+    private saved?;
+    constructor(config: ConversationStoreConfig);
+    private request;
+    /**
+     * Fetches the saved conversation. Only a 404 means there is none: an error must stop the VM
+     * from taking a turn with no memory of the session.
+     */
+    restore(): Promise<void>;
+    /** Uploads it if it changed. A failure propagates: checkpointed must mean it's durable. */
+    save(): Promise<void>;
+}
+//# sourceMappingURL=conversation-store.d.ts.map

package/dist/persistence/conversation-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-store.d.ts","sourceRoot":"","sources":["../../src/persistence/conversation-store.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,uBAAuB;IACtC,4DAA4D;IAC5D,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAA;CACb;AAMD,qBAAa,iBAAiB;IAGhB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,KAAK,CAAC,CAAQ;gBAEO,MAAM,EAAE,uBAAuB;IAE5D,OAAO,CAAC,OAAO;IASf;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAS9B,2FAA2F;IACrF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAY5B"}

package/dist/persistence/conversation-store.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConversationStore = void 0;
+// A session's conversation, the agent's own record of its turns. It lives in the runtime's state
+// directory, which the session's commands can't read, and is saved beside the session's folder in
+// storage through a route only a VM's token can use: not in the workspace, not in git, and not
+// where a signed-in user could open it. It's how a replacement VM picks up where the last one stopped.
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const TIMEOUT_MS = 60000;
+function hashOf(content) {
+    return (0, node_crypto_1.createHash)('sha256').update(content).digest('hex');
+}
+class ConversationStore {
+    constructor(config) {
+        this.config = config;
+    }
+    request(method, body) {
+        return fetch(`${this.config.url}/conversation`, {
+            method,
+            headers: { Authorization: `Bearer ${this.config.token}` },
+            ...(body ? { body: new Uint8Array(body) } : {}),
+            signal: AbortSignal.timeout(TIMEOUT_MS),
+        });
+    }
+    /**
+     * Fetches the saved conversation. Only a 404 means there is none: an error must stop the VM
+     * from taking a turn with no memory of the session.
+     */
+    async restore() {
+        const response = await this.request('GET');
+        if (response.status === 404)
+            return;
+        if (!response.ok)
+            throw new Error(`Could not restore the conversation: ${response.status}`);
+        const content = Buffer.from(await response.arrayBuffer());
+        await node_fs_1.promises.writeFile(this.config.file, content, { mode: 0o600 });
+        this.saved = hashOf(content);
+    }
+    /** Uploads it if it changed. A failure propagates: checkpointed must mean it's durable. */
+    async save() {
+        const content = await node_fs_1.promises.readFile(this.config.file).catch((error) => {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw error;
+        });
+        if (!content)
+            return;
+        const hash = hashOf(content);
+        if (hash === this.saved)
+            return;
+        const response = await this.request('PUT', content);
+        if (!response.ok)
+            throw new Error(`Could not save the conversation: ${response.status}`);
+        this.saved = hash;
+    }
+}
+exports.ConversationStore = ConversationStore;
+//# sourceMappingURL=conversation-store.js.map

package/dist/persistence/conversation-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-store.js","sourceRoot":"","sources":["../../src/persistence/conversation-store.ts"],"names":[],"mappings":";;;AAAA,iGAAiG;AACjG,kGAAkG;AAClG,+FAA+F;AAC/F,uGAAuG;AACvG,6CAAwC;AACxC,qCAAwC;AAExC,MAAM,UAAU,GAAG,KAAM,CAAA;AAUzB,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3D,CAAC;AAED,MAAa,iBAAiB;IAG5B,YAA6B,MAA+B;QAA/B,WAAM,GAAN,MAAM,CAAyB;IAAG,CAAC;IAExD,OAAO,CAAC,MAAqB,EAAE,IAAa;QAClD,OAAO,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,eAAe,EAAE;YAC9C,MAAM;YACN,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;YACzD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACxC,CAAC,CAAA;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAM;QACnC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QAC3F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;QACzD,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9D,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,IAAI;QACR,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;YACzF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YAC7C,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;QAC5B,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK;YAAE,OAAM;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QACxF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;IACnB,CAAC;CACF;AAxCD,8CAwCC"}

package/dist/persistence/conversation-store.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=conversation-store.test.d.ts.map

package/dist/persistence/conversation-store.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-store.test.d.ts","sourceRoot":"","sources":["../../src/persistence/conversation-store.test.ts"],"names":[],"mappings":""}

package/dist/persistence/conversation-store.test.js

@@ -0,0 +1,98 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_fs_1 = require("node:fs");
+const node_http_1 = __importDefault(require("node:http"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_test_1 = require("node:test");
+const conversation_store_1 = require("./conversation-store");
+(0, node_test_1.describe)('a session\'s saved conversation', () => {
+    let root;
+    let server;
+    let stored;
+    let failWith;
+    let requests;
+    let store;
+    let file;
+    (0, node_test_1.beforeEach)(async () => {
+        root = await node_fs_1.promises.mkdtemp(node_path_1.default.join(node_os_1.default.tmpdir(), 'conversation-store-'));
+        file = node_path_1.default.join(root, 'conversation.json');
+        stored = undefined;
+        failWith = undefined;
+        requests = [];
+        server = node_http_1.default.createServer((req, res) => {
+            requests.push({ method: req.method, url: req.url, authorization: req.headers.authorization });
+            if (failWith)
+                return void res.writeHead(failWith).end();
+            if (req.method === 'PUT') {
+                const chunks = [];
+                req.on('data', (chunk) => chunks.push(chunk));
+                req.on('end', () => {
+                    stored = Buffer.concat(chunks);
+                    res.writeHead(204).end();
+                });
+                return;
+            }
+            if (!stored)
+                return void res.writeHead(404).end();
+            res.writeHead(200).end(stored);
+        });
+        await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+        const { port } = server.address();
+        store = new conversation_store_1.ConversationStore({ url: `http://127.0.0.1:${port}/workspaces/a/s`, token: 'tok', file });
+    });
+    (0, node_test_1.afterEach)(async () => {
+        await new Promise((resolve) => server.close(resolve));
+        await node_fs_1.promises.rm(root, { recursive: true, force: true });
+    });
+    (0, node_test_1.it)('asks its own route, with the VM\'s token', async () => {
+        await store.restore();
+        strict_1.default.deepEqual(requests, [{ method: 'GET', url: '/workspaces/a/s/conversation', authorization: 'Bearer tok' }]);
+    });
+    (0, node_test_1.it)('has nothing to restore for a new session', async () => {
+        await store.restore();
+        await strict_1.default.rejects(node_fs_1.promises.access(file));
+    });
+    (0, node_test_1.it)('stops a VM from starting with no memory when storage fails', async () => {
+        for (const status of [401, 403, 500, 503]) {
+            failWith = status;
+            await strict_1.default.rejects(store.restore(), new RegExp(String(status)));
+        }
+    });
+    (0, node_test_1.it)('restores what was saved, readable only by the runtime', async () => {
+        stored = Buffer.from('{"version":1}');
+        await store.restore();
+        strict_1.default.equal(await node_fs_1.promises.readFile(file, 'utf8'), '{"version":1}');
+        strict_1.default.equal((await node_fs_1.promises.stat(file)).mode & 0o077, 0);
+    });
+    (0, node_test_1.it)('saves only when it changed, including right after restoring it', async () => {
+        stored = Buffer.from('saved');
+        await store.restore();
+        requests = [];
+        await store.save();
+        strict_1.default.deepEqual(requests, []);
+        await node_fs_1.promises.writeFile(file, 'changed');
+        await store.save();
+        strict_1.default.equal(stored === null || stored === void 0 ? void 0 : stored.toString(), 'changed');
+        strict_1.default.equal(requests.length, 1);
+        await store.save();
+        strict_1.default.equal(requests.length, 1);
+    });
+    (0, node_test_1.it)('has nothing to save before the first turn', async () => {
+        await store.save();
+        strict_1.default.deepEqual(requests, []);
+    });
+    (0, node_test_1.it)('fails a checkpoint it couldn\'t save, and tries again the next time', async () => {
+        await node_fs_1.promises.writeFile(file, 'turn');
+        failWith = 503;
+        await strict_1.default.rejects(store.save(), /503/);
+        failWith = undefined;
+        await store.save();
+        strict_1.default.equal(stored === null || stored === void 0 ? void 0 : stored.toString(), 'turn');
+    });
+});
+//# sourceMappingURL=conversation-store.test.js.map

package/dist/persistence/conversation-store.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-store.test.js","sourceRoot":"","sources":["../../src/persistence/conversation-store.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAuC;AACvC,qCAAwC;AACxC,0DAA4B;AAE5B,sDAAwB;AACxB,0DAA4B;AAC5B,yCAA+D;AAC/D,6DAAwD;AAExD,IAAA,oBAAQ,EAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAI,IAAY,CAAA;IAChB,IAAI,MAAmB,CAAA;IACvB,IAAI,MAA0B,CAAA;IAC9B,IAAI,QAA4B,CAAA;IAChC,IAAI,QAA0E,CAAA;IAC9E,IAAI,KAAwB,CAAA;IAC5B,IAAI,IAAY,CAAA;IAEhB,IAAA,sBAAU,EAAC,KAAK,IAAI,EAAE;QACpB,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAA;QACtE,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAA;QAC3C,MAAM,GAAG,SAAS,CAAA;QAClB,QAAQ,GAAG,SAAS,CAAA;QACpB,QAAQ,GAAG,EAAE,CAAA;QACb,MAAM,GAAG,mBAAI,CAAC,YAAY,CAAC,CAAC,GAAyB,EAAE,GAAwB,EAAE,EAAE;YACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;YAC7F,IAAI,QAAQ;gBAAE,OAAO,KAAK,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAA;YACvD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAa,EAAE,CAAA;gBAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;gBACrD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBAC9B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;gBAC1B,CAAC,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;YACjD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;QACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC5E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAA;QAChD,KAAK,GAAG,IAAI,sCAAiB,CAAC,EAAE,GAAG,EAAE,oBAAoB,IAAI,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACvG,CAAC,CAAC,CAAA;IACF,IAAA,qBAAS,EAAC,KAAK,IAAI,EAAE;QACnB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACrD,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,KAAK,CAAC,OAAO,EAAE,CAAA;QACrB,gBAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,8BAA8B,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IACnH,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,KAAK,CAAC,OAAO,EAAE,CAAA;QACrB,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAC1C,QAAQ,GAAG,MAAM,CAAA;YACjB,MAAM,gBAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACnE,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACrC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAA;QACrB,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,eAAe,CAAC,CAAA;QAC9D,gBAAM,CAAC,KAAK,CAAC,CAAC,MAAM,kBAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC7B,MAAM,KAAK,CAAC,OAAO,EAAE,CAAA;QACrB,QAAQ,GAAG,EAAE,CAAA;QACb,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAClB,gBAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC9B,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACnC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAClB,gBAAM,CAAC,KAAK,CAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAA;QAC3C,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAChC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAClB,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAClB,gBAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAChC,QAAQ,GAAG,GAAG,CAAA;QACd,MAAM,gBAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAA;QACzC,QAAQ,GAAG,SAAS,CAAA;QACpB,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAClB,gBAAM,CAAC,KAAK,CAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/persistence/git-sync.d.ts

@@ -1,22 +1,35 @@
 import type { GitSyncConfig } from '../runtime/config';
-export declare const WORKSPACE_GITIGNORE: string;
 export declare class GitSync {
     private readonly config;
     private readonly remote;
     private readonly env;
+    readonly gitDir: string;
     private busy;
     constructor(config: GitSyncConfig);
     get dir(): string;
     /** Bounded: an unreachable git server must delay a boot or a checkpoint, never hang it. */
+    private run;
     private git;
+    /** Starts the checkout's git data outside it: `--separate-git-dir` leaves a pointer behind, which nothing needs. */
+    private detachGitDir;
     /** Serializes git operations: a periodic checkpoint must never race a suspend checkpoint. */
     private serialize;
     /**
      * Clone the session branch into the workspace, or pull it when a checkout already exists.
      * A brand-new session has no branch yet: start an empty repository on it so the first
      * checkpoint can push. Returns true when previous work was restored.
+     *
+     * Only the latest commit: a VM works on the files, and a project's history can be long. The
+     * server keeps all of it; a push only adds to it.
      */
     restore(): Promise<boolean>;
+    private excludeLocally;
+    /**
+     * The platform can commit to this branch too, if this VM was paused or still starting when it did.
+     * Refused for that, this VM's files win (people's edits reach it through live sync) with that
+     * commit kept in the history: pushing must not stay refused, or no checkpoint would ever land again.
+     */
+    private push;
     /** Commit everything and push, including commits left by a previously failed push. */
     commit(message: string): Promise<string | undefined>;
 }

package/dist/persistence/git-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git-sync.d.ts","sourceRoot":"","sources":["../../src/persistence/git-sync.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAKtD,eAAO,MAAM,mBAAmB,QAAkG,CAAA;AAWlI,qBAAa,OAAO;IAKN,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmB;IACvC,OAAO,CAAC,IAAI,CAAsC;gBAErB,MAAM,EAAE,aAAa;IAiBlD,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED,2FAA2F;IAC3F,OAAO,CAAC,GAAG;IAIX,6FAA6F;IAC7F,OAAO,CAAC,SAAS;IAMjB;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;IAwB3B,sFAAsF;IACtF,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAkBrD"}
+{"version":3,"file":"git-sync.d.ts","sourceRoot":"","sources":["../../src/persistence/git-sync.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAoBtD,qBAAa,OAAO;IAMN,OAAO,CAAC,QAAQ,CAAC,MAAM;IALnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,OAAO,CAAC,IAAI,CAAsC;gBAErB,MAAM,EAAE,aAAa;IA4BlD,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED,2FAA2F;IAC3F,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,GAAG;IAIX,oHAAoH;YACtG,YAAY;IAK1B,6FAA6F;IAC7F,OAAO,CAAC,SAAS;IAMjB;;;;;;;OAOG;IACH,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;YA0Bb,cAAc;IAM5B;;;;OAIG;YACW,IAAI;IAclB,sFAAsF;IACtF,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAgBrD"}

package/dist/persistence/git-sync.js

@@ -3,19 +3,27 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GitSync = exports.WORKSPACE_GITIGNORE = void 0;
+exports.GitSync = void 0;
 // Durability for a session VM whose disk can vanish (Lambda terminates a long-suspended
 // MicroVM): the workspace is a checkout of branch `session/<id>` on the platform's git
 // server. restore() runs at boot, commit() at every checkpoint. Bulk downloads stay out of
-// git (see WORKSPACE_GITIGNORE) — the extracted text and the research outputs are what a
+// git (see EXCLUDES) — the extracted text and the research outputs are what a
 // restored VM needs; attachments can be fetched again.
+//
+// Its git data is kept outside the workspace, in the runtime's state directory. The runtime runs git
+// as root, and a workload owns the workspace: a hook or a .git/config it wrote there would run as
+// root with the token, or send the token to a server of its choosing.
 const child_process_1 = require("child_process");
 const fs_1 = require("fs");
 const path_1 = __importDefault(require("path"));
 const util_1 = require("util");
 const execFileAsync = (0, util_1.promisify)(child_process_1.execFile);
 const GIT_TIMEOUT_MS = 60000;
-exports.WORKSPACE_GITIGNORE = ['data/attachments/', 'node_modules/', '.venv/', '*.sqlite', '*.sqlite-journal', ''].join('\n');
+/**
+ * Never committed, whatever a repository's own .gitignore says: bulk downloads and caches, the app's
+ * logs (src/app/runner.ts).
+ */
+const EXCLUDES = ['data/attachments/', 'node_modules/', '.venv/', '*.sqlite', '*.sqlite-journal', '.builder/logs/'];
 async function pathExists(target) {
     try {
         await fs_1.promises.access(target);
@@ -27,30 +35,50 @@ async function pathExists(target) {
 }
 class GitSync {
     constructor(config) {
+        var _a;
         this.config = config;
         this.busy = Promise.resolve();
         this.remote = `${config.serverUrl}/git/${config.repository}.git`;
+        this.gitDir = (_a = config.gitDir) !== null && _a !== void 0 ? _a : `${config.dir}.gitdir`;
         // The token travels as a per-process http.extraheader, never on the remote URL or in
         // .git/config, so a `git remote -v` inside the workspace cannot leak it.
         this.env = {
             ...process.env,
             GIT_TERMINAL_PROMPT: '0',
-            GIT_CONFIG_COUNT: '3',
+            // Only this config counts: no user's or system's, and nothing here runs anything found in the
+            // workspace. A nested repository's own config can't either, since root doesn't trust its owner.
+            GIT_CONFIG_NOSYSTEM: '1',
+            GIT_CONFIG_GLOBAL: '/dev/null',
+            GIT_CONFIG_COUNT: '6',
             GIT_CONFIG_KEY_0: 'http.extraheader',
             GIT_CONFIG_VALUE_0: `Authorization: Bearer ${config.token}`,
             GIT_CONFIG_KEY_1: 'user.name',
             GIT_CONFIG_VALUE_1: 'session-agent',
             GIT_CONFIG_KEY_2: 'user.email',
             GIT_CONFIG_VALUE_2: 'agent@builder.local',
+            GIT_CONFIG_KEY_3: 'core.hooksPath',
+            GIT_CONFIG_VALUE_3: '/dev/null',
+            GIT_CONFIG_KEY_4: 'core.fsmonitor',
+            GIT_CONFIG_VALUE_4: 'false',
+            GIT_CONFIG_KEY_5: 'diff.ignoreSubmodules',
+            GIT_CONFIG_VALUE_5: 'all',
         };
     }
     get dir() {
         return this.config.dir;
     }
     /** Bounded: an unreachable git server must delay a boot or a checkpoint, never hang it. */
-    git(args, cwd = this.config.dir) {
+    run(args, cwd) {
         return execFileAsync('git', args, { cwd, env: this.env, maxBuffer: 8 * 1024 * 1024, timeout: GIT_TIMEOUT_MS });
     }
+    git(args) {
+        return this.run(['--git-dir', this.gitDir, '--work-tree', this.config.dir, ...args], this.config.dir);
+    }
+    /** Starts the checkout's git data outside it: `--separate-git-dir` leaves a pointer behind, which nothing needs. */
+    async detachGitDir() {
+        await fs_1.promises.rm(path_1.default.join(this.config.dir, '.git'), { force: true });
+        await this.excludeLocally();
+    }
     /** Serializes git operations: a periodic checkpoint must never race a suspend checkpoint. */
     serialize(work) {
         const next = this.busy.then(work, work);
@@ -61,40 +89,69 @@ class GitSync {
      * Clone the session branch into the workspace, or pull it when a checkout already exists.
      * A brand-new session has no branch yet: start an empty repository on it so the first
      * checkpoint can push. Returns true when previous work was restored.
+     *
+     * Only the latest commit: a VM works on the files, and a project's history can be long. The
+     * server keeps all of it; a push only adds to it.
      */
     restore() {
         return this.serialize(async () => {
             const { dir, branch } = this.config;
             await fs_1.promises.mkdir(dir, { recursive: true });
-            if (await pathExists(path_1.default.join(dir, '.git'))) {
+            if (await pathExists(path_1.default.join(this.gitDir, 'HEAD'))) {
                 await this.git(['fetch', 'origin', branch]);
                 // Preserve any locally committed checkpoint whose push was interrupted.
                 await this.git(['merge', '--ff-only', 'FETCH_HEAD']);
                 return true;
             }
+            await fs_1.promises.mkdir(path_1.default.dirname(this.gitDir), { recursive: true, mode: 0o700 });
             // Only a successful lookup with no branch means a new session. A network/auth error
             // must never let a replacement agent accept a turn against an empty workspace.
-            const remoteBranches = (await this.git(['ls-remote', '--heads', this.remote, branch], process.cwd())).stdout.trim();
+            const remoteBranches = (await this.run(['ls-remote', '--heads', this.remote, branch], process.cwd())).stdout.trim();
             if (remoteBranches) {
-                await this.git(['clone', '--branch', branch, '--single-branch', this.remote, dir], process.cwd());
+                await this.run(['clone', '--depth', '1', '--branch', branch, '--single-branch', '--separate-git-dir', this.gitDir, this.remote, dir], process.cwd());
+                await this.detachGitDir();
                 return true;
             }
-            await this.git(['init', '--initial-branch', branch]);
+            await this.run(['init', '--initial-branch', branch, '--separate-git-dir', this.gitDir, dir], process.cwd());
+            await this.detachGitDir();
             await this.git(['remote', 'add', 'origin', this.remote]);
-            await fs_1.promises.writeFile(path_1.default.join(dir, '.gitignore'), exports.WORKSPACE_GITIGNORE);
             return false;
         });
     }
+    async excludeLocally() {
+        const file = path_1.default.join(this.gitDir, 'info', 'exclude');
+        await fs_1.promises.mkdir(path_1.default.dirname(file), { recursive: true });
+        await fs_1.promises.writeFile(file, `${EXCLUDES.join('\n')}\n`);
+    }
+    /**
+     * The platform can commit to this branch too, if this VM was paused or still starting when it did.
+     * Refused for that, this VM's files win (people's edits reach it through live sync) with that
+     * commit kept in the history: pushing must not stay refused, or no checkpoint would ever land again.
+     */
+    async push(sha) {
+        const push = () => this.git(['push', '-u', 'origin', `HEAD:${this.config.branch}`]);
+        try {
+            await push();
+            return sha;
+        }
+        catch (error) {
+            if (!/\[rejected\]|non-fast-forward|fetch first/.test(String(error.stderr)))
+                throw error;
+        }
+        await this.git(['fetch', 'origin', this.config.branch]);
+        await this.git(['merge', '-q', '-s', 'ours', '--allow-unrelated-histories', '-m', 'Keep this session\'s files', 'FETCH_HEAD']);
+        await push();
+        return (await this.git(['rev-parse', 'HEAD'])).stdout.trim();
+    }
     /** Commit everything and push, including commits left by a previously failed push. */
     commit(message) {
         return this.serialize(async () => {
-            if (!(await pathExists(path_1.default.join(this.config.dir, '.gitignore')))) {
-                await fs_1.promises.writeFile(path_1.default.join(this.config.dir, '.gitignore'), exports.WORKSPACE_GITIGNORE);
-            }
             await this.git(['add', '-A']);
             const status = (await this.git(['status', '--porcelain'])).stdout.trim();
-            if (status)
-                await this.git(['commit', '-q', '-m', message]);
+            // Even with nothing in it, a new session's first checkpoint starts its branch.
+            const started = await this.git(['rev-parse', '--verify', '-q', 'HEAD']).then(() => true, () => false);
+            if (status || !started)
+                await this.git(['commit', '-q', '--allow-empty', '-m', message]);
             const sha = (await this.git(['rev-parse', 'HEAD'])).stdout.trim();
             // No network request for an unchanged, already-pushed workspace. A failed push leaves
             // the upstream behind HEAD, so a later periodic checkpoint still retries it.
@@ -102,8 +159,7 @@ class GitSync {
             if ((upstream === null || upstream === void 0 ? void 0 : upstream.stdout.trim()) === sha)
                 return undefined;
             // Propagate failure: checkpointed must mean the commit actually reached durable storage.
-            await this.git(['push', '-u', 'origin', `HEAD:${this.config.branch}`]);
-            return sha;
+            return await this.push(sha);
         });
     }
 }

package/dist/persistence/git-sync.js.map

@@ -1 +1 @@
-{"version":3,"file":"git-sync.js","sourceRoot":"","sources":["../../src/persistence/git-sync.ts"],"names":[],"mappings":";;;;;;AAAA,wFAAwF;AACxF,uFAAuF;AACvF,2FAA2F;AAC3F,yFAAyF;AACzF,uDAAuD;AACvD,iDAAwC;AACxC,2BAAmC;AACnC,gDAAuB;AACvB,+BAAgC;AAGhC,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAA;AACzC,MAAM,cAAc,GAAG,KAAM,CAAA;AAEhB,QAAA,mBAAmB,GAAG,CAAC,mBAAmB,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAElI,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,IAAI,CAAC;QACH,MAAM,aAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACvB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAa,OAAO;IAKlB,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;QAF1C,SAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAA;QAGhD,IAAI,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,QAAQ,MAAM,CAAC,UAAU,MAAM,CAAA;QAChE,qFAAqF;QACrF,yEAAyE;QACzE,IAAI,CAAC,GAAG,GAAG;YACT,GAAG,OAAO,CAAC,GAAG;YACd,mBAAmB,EAAE,GAAG;YACxB,gBAAgB,EAAE,GAAG;YACrB,gBAAgB,EAAE,kBAAkB;YACpC,kBAAkB,EAAE,yBAAyB,MAAM,CAAC,KAAK,EAAE;YAC3D,gBAAgB,EAAE,WAAW;YAC7B,kBAAkB,EAAE,eAAe;YACnC,gBAAgB,EAAE,YAAY;YAC9B,kBAAkB,EAAE,qBAAqB;SAC1C,CAAA;IACH,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;IACxB,CAAC;IAED,2FAA2F;IACnF,GAAG,CAAC,IAAc,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG;QAC/C,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAA;IAChH,CAAC;IAED,6FAA6F;IACrF,SAAS,CAAI,IAAsB;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACvC,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;YACnC,MAAM,aAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACxC,IAAI,MAAM,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;gBAC3C,wEAAwE;gBACxE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAA;gBACpD,OAAO,IAAI,CAAA;YACb,CAAC;YACD,oFAAoF;YACpF,+EAA+E;YAC/E,MAAM,cAAc,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;YACnH,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;gBACjG,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAA;YACpD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;YACxD,MAAM,aAAE,CAAC,SAAS,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,2BAAmB,CAAC,CAAA;YACrE,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,sFAAsF;IACtF,MAAM,CAAC,OAAe;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,MAAM,aAAE,CAAC,SAAS,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,2BAAmB,CAAC,CAAA;YACnF,CAAC;YACD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;YAC7B,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;YACxE,IAAI,MAAM;gBAAE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;YAC3D,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;YACjE,sFAAsF;YACtF,6EAA6E;YAC7E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAChG,IAAI,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,MAAM,CAAC,IAAI,EAAE,MAAK,GAAG;gBAAE,OAAO,SAAS,CAAA;YACrD,yFAAyF;YACzF,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;YACtE,OAAO,GAAG,CAAA;QACZ,CAAC,CAAC,CAAA;IACJ,CAAC;CACF;AAtFD,0BAsFC"}
+{"version":3,"file":"git-sync.js","sourceRoot":"","sources":["../../src/persistence/git-sync.ts"],"names":[],"mappings":";;;;;;AAAA,wFAAwF;AACxF,uFAAuF;AACvF,2FAA2F;AAC3F,8EAA8E;AAC9E,uDAAuD;AACvD,EAAE;AACF,qGAAqG;AACrG,kGAAkG;AAClG,sEAAsE;AACtE,iDAAwC;AACxC,2BAAmC;AACnC,gDAAuB;AACvB,+BAAgC;AAGhC,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAA;AACzC,MAAM,cAAc,GAAG,KAAM,CAAA;AAE7B;;;GAGG;AACH,MAAM,QAAQ,GAAG,CAAC,mBAAmB,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAA;AAEnH,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,IAAI,CAAC;QACH,MAAM,aAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACvB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAa,OAAO;IAMlB,YAA6B,MAAqB;;QAArB,WAAM,GAAN,MAAM,CAAe;QAF1C,SAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAA;QAGhD,IAAI,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,QAAQ,MAAM,CAAC,UAAU,MAAM,CAAA;QAChE,IAAI,CAAC,MAAM,GAAG,MAAA,MAAM,CAAC,MAAM,mCAAI,GAAG,MAAM,CAAC,GAAG,SAAS,CAAA;QACrD,qFAAqF;QACrF,yEAAyE;QACzE,IAAI,CAAC,GAAG,GAAG;YACT,GAAG,OAAO,CAAC,GAAG;YACd,mBAAmB,EAAE,GAAG;YACxB,8FAA8F;YAC9F,gGAAgG;YAChG,mBAAmB,EAAE,GAAG;YACxB,iBAAiB,EAAE,WAAW;YAC9B,gBAAgB,EAAE,GAAG;YACrB,gBAAgB,EAAE,kBAAkB;YACpC,kBAAkB,EAAE,yBAAyB,MAAM,CAAC,KAAK,EAAE;YAC3D,gBAAgB,EAAE,WAAW;YAC7B,kBAAkB,EAAE,eAAe;YACnC,gBAAgB,EAAE,YAAY;YAC9B,kBAAkB,EAAE,qBAAqB;YACzC,gBAAgB,EAAE,gBAAgB;YAClC,kBAAkB,EAAE,WAAW;YAC/B,gBAAgB,EAAE,gBAAgB;YAClC,kBAAkB,EAAE,OAAO;YAC3B,gBAAgB,EAAE,uBAAuB;YACzC,kBAAkB,EAAE,KAAK;SAC1B,CAAA;IACH,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;IACxB,CAAC;IAED,2FAA2F;IACnF,GAAG,CAAC,IAAc,EAAE,GAAW;QACrC,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAA;IAChH,CAAC;IAEO,GAAG,CAAC,IAAc;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACvG,CAAC;IAED,oHAAoH;IAC5G,KAAK,CAAC,YAAY;QACxB,MAAM,aAAE,CAAC,EAAE,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAChE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;IAC7B,CAAC;IAED,6FAA6F;IACrF,SAAS,CAAI,IAAsB;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACvC,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;OAOG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;YACnC,MAAM,aAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACxC,IAAI,MAAM,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;gBAC3C,wEAAwE;gBACxE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAA;gBACpD,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,aAAE,CAAC,KAAK,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAC3E,oFAAoF;YACpF,+EAA+E;YAC/E,MAAM,cAAc,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;YACnH,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;gBACpJ,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;gBACzB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;YAC3G,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;YACzB,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;YACxD,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,IAAI,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;QACtD,MAAM,aAAE,CAAC,KAAK,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,MAAM,aAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtD,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,IAAI,CAAC,GAAW;QAC5B,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QACnF,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,CAAA;YACZ,OAAO,GAAG,CAAA;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,2CAA2C,CAAC,IAAI,CAAC,MAAM,CAAE,KAA6B,CAAC,MAAM,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAA;QACnH,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACvD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,IAAI,EAAE,4BAA4B,EAAE,YAAY,CAAC,CAAC,CAAA;QAC9H,MAAM,IAAI,EAAE,CAAA;QACZ,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAC9D,CAAC;IAED,sFAAsF;IACtF,MAAM,CAAC,OAAe;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;YAC7B,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;YACxE,+EAA+E;YAC/E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;YACrG,IAAI,MAAM,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;YACxF,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;YACjE,sFAAsF;YACtF,6EAA6E;YAC7E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAChG,IAAI,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,MAAM,CAAC,IAAI,EAAE,MAAK,GAAG;gBAAE,OAAO,SAAS,CAAA;YACrD,yFAAyF;YACzF,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC7B,CAAC,CAAC,CAAA;IACJ,CAAC;CACF;AAxID,0BAwIC"}