@narumitw/pi-langfuse 0.50.5 → 0.51.0

package/README.md

@@ -2,16 +2,17 @@
 
 [![npm](https://img.shields.io/npm/v/@narumitw/pi-langfuse)](https://www.npmjs.com/package/@narumitw/pi-langfuse) [![Pi extension](https://img.shields.io/badge/Pi-extension-blue)](https://pi.dev) [![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](./LICENSE)
 
-Trace Pi agent runs, model generations, retries, tools, compaction, usage, and timing in [Langfuse](https://langfuse.com/) through OpenTelemetry.
+Export Pi agent runs, model generations, retries, tools, compaction, usage, and timing to [Langfuse](https://langfuse.com/) through OpenTelemetry.
 
 ## ✨ Features
 
 - Groups each settled agent run into one trace with indexed attempt spans for retries and queued continuations.
-- Records bounded provider requests, final assistant output, identity, TTFT, usage, known costs, and safe response diagnostics.
+- Records bounded provider requests, final assistant output, model identity, time to first content, usage, known costs, and safe response diagnostics.
 - Captures final tool inputs and outputs, progress timing, duration, failures, and structural compaction events.
 - Adds session, context, Git branch, commit, and aggregate counters as searchable metadata.
 - Supports metadata-only tracing when content capture is disabled.
-- Reads credentials only from a private local settings file and redacts them from exported data.
+- Keeps the default extension's credentials in a private local settings file and redacts them from exported data.
+- Supports multiple concurrent Pi sessions through one process-owned runtime without sharing session trace state.
 - Batches exports without delaying normal completion and isolates its OpenTelemetry provider from other extensions.
 
 ## 📦 Install
@@ -26,24 +27,96 @@ Try the published package without installing it:
 pi -e npm:@narumitw/pi-langfuse
 ```
 
-Try a local checkout:
+Build and load a local checkout from the repository root:
 
 ```bash
 npm --workspace @narumitw/pi-langfuse run build
 pi -e ./packages/pi-langfuse
 ```
 
-An unbuilt local checkout must be built before loading the package directory.
-The Langfuse v4 SDK requires Node.js 20 or newer.
+The package declares `dist/index.ts`, so Pi cannot load an unbuilt local checkout.
+The installed Langfuse SDK dependencies require Node.js 20 or newer.
+Pi extensions run with your user permissions.
+Review this extension and its data-export behavior before installing it.
 
 ## 🚀 Quick start
 
-Run `/langfuse`, choose the setup action, enter the Langfuse credentials, and restart Pi.
-Subsequent agent runs are traced according to the saved content-capture and metadata settings.
+Run `/langfuse`, choose **Set up Langfuse for this Pi agent directory**, enter your credentials, and restart Pi.
+New agent runs are then traced with the saved content-capture and metadata settings.
+
+## 🧩 Host application embedding
+
+A host that manages multiple Pi sessions can share one process-level runtime and create one tracing controller for each session:
+
+```ts
+import { DefaultResourceLoader, createAgentSession } from "@earendil-works/pi-coding-agent";
+import {
+  createLangfuseRuntime,
+  createPiLangfuseSession,
+} from "@narumitw/pi-langfuse";
+
+const runtime = await createLangfuseRuntime({
+  config: { environment: "production" },
+  // publicKey, secretKey, baseUrl, and release may come from standard Langfuse env vars.
+});
+
+const tracing = createPiLangfuseSession(runtime, {
+  traceName: "support-agent",
+  sessionId: hostSessionId,
+  userId: accountId,
+  tags: ["support"],
+  metadata: { tenant: tenantId },
+  captureContent: false,
+  onTraceId: (traceId) => correlateTrace(hostSessionId, traceId),
+});
+
+const resourceLoader = new DefaultResourceLoader({
+  ...hostResourceOptions,
+  noExtensions: true, // Keep auto-discovered extensions out of this controlled host session.
+  extensionFactories: [{ name: "langfuse", factory: tracing.extension }],
+});
+await resourceLoader.reload();
+const { session } = await createAgentSession({
+  ...hostSessionOptions,
+  resourceLoader,
+});
+await session.bindExtensions({});
+
+tracing.setRequestId(incomingRequestId); // Applies to the next root trace only.
+await session.prompt(userPrompt);
+
+// When this session ends:
+await tracing.dispose();
+session.dispose();
+
+// Once, after every hosted session has been disposed:
+await runtime.shutdown();
+```
+
+Create the runtime once per process, create a separate controller per Pi `AgentSession`, and explicitly dispose the controller because `AgentSession.dispose()` does not emit Pi's `session_shutdown` event.
+The controller's extension factory may be reused when that session's resource loader reloads, but it must not be attached to another active `AgentSession`.
+Controller disposal ends only that session's open observations; it never flushes or shuts down the shared exporter.
+`runtime.shutdown()` rejects new work, disposes any remaining controllers, flushes, and shuts down the provider once.
+Both operations are idempotent.
+
+Do not also auto-load this package's default extension into a session that uses `tracing.extension`, or that session will be traced twice.
+One process supports one active Langfuse credential/endpoint combination; creating a conflicting runtime fails and requires a process restart rather than replacing the active provider.
+Restart the process before switching from a package version that uses an older runtime protocol so two providers cannot initialize concurrently.
+
+Host runtime fields resolve independently in this order: `config`, the supplied `env` object (or `process.env`), then defaults.
+The supported names are `LANGFUSE_PUBLIC_KEY`, `LANGFUSE_SECRET_KEY`, `LANGFUSE_BASE_URL`, `LANGFUSE_TRACING_ENVIRONMENT`, and `LANGFUSE_RELEASE`.
+Pass `env: false` to disable environment access.
+The default extension always uses its validated `pi-langfuse.json` with `env: false`, so its existing settings behavior does not change.
+
+`setRequestId()` snapshots `pi.request.id` when the next root trace starts; changing or clearing it never rewrites an active trace.
+`traceName` changes only the Langfuse trace name; schema-v2 observation names and hierarchy stay unchanged.
+`onTraceId` runs once after each root is created, including automatic-continuation roots, and callback errors are intentionally ignored so host code cannot corrupt tracing cleanup.
+Custom metadata is sanitized, bounded, and exported even when `captureContent` is `false`; package-owned `pi.*` fields cannot be overridden.
+Treat custom metadata, tags, session IDs, user IDs, request IDs, and trace names as exported data.
 
 ## ⚙️ Settings
 
-Run the interactive manager, then choose **Set up Langfuse for this Pi agent directory** or **Update Langfuse for this Pi agent directory**:
+Run the interactive manager and choose **Set up Langfuse for this Pi agent directory** or **Update Langfuse for this Pi agent directory**:
 
 ```text
 /langfuse
@@ -54,25 +127,24 @@ Leave either key blank to preserve its existing value when updating a valid conf
 Leave the base URL blank to use `https://us.cloud.langfuse.com`.
 The first successful setup creates the file.
 Within one Pi process, updates run in invocation order, reread the latest valid private document, preserve unknown fields, and save atomically with mode `0600`.
-Malformed JSON or invalid recognized fields block setup and update writes until repaired; errors redact entered and stored credentials.
-A failed save leaves the current session and prior file unchanged.
+Malformed JSON or invalid recognized fields block writes until you repair the file.
+Errors redact entered and stored credentials.
+A failed save leaves the current session and previous file unchanged.
 
-Configuration belongs to the displayed Pi agent directory, not just the current conversation.
-Restart each running Pi process after saving; the new connection applies to subsequent sessions in that process.
+Configuration applies to the displayed Pi agent directory, not only the current conversation.
+Restart every running Pi process after saving so later sessions use the new connection.
 `/reload` is not sufficient because the isolated Langfuse runtime is initialized once per process.
 In print or JSON mode, edit the file manually because the interactive manager is unavailable.
 
-You can also create the file manually:
+You can also create `<getAgentDir()>/pi-langfuse.json` (normally `~/.pi/agent/pi-langfuse.json`) manually.
+This minimal example keeps prompts, responses, and tool content local:
 
 ```json
 {
   "publicKey": "pk-lf-...",
   "secretKey": "sk-lf-...",
   "baseUrl": "https://us.cloud.langfuse.com",
-  "environment": "development",
-  "release": "local",
-  "userId": "your-user-id",
-  "captureContent": true
+  "captureContent": false
 }
 ```
 
@@ -84,7 +156,9 @@ Prefer HTTPS because HTTP sends Langfuse credentials and trace content without t
 `environment`, `release`, and `userId` are optional Langfuse trace attributes.
 An environment must match Langfuse's contract: at most 40 lowercase letters, numbers, hyphens, or underscores, and it cannot start with `langfuse`.
 `userId` populates the Langfuse user dimension, which is what the Sessions and Traces views group by; Langfuse accepts at most 200 characters, and leaving it unset reports no user.
-Set `captureContent` to `false` to trace timing, model, usage, cost, status, and bounded diagnostic metadata without sending prompts, provider-request snapshots, responses, or tool content.
+`captureContent` defaults to `true` when omitted.
+Set it to `false` to trace only timing, model, usage, cost, status, and bounded diagnostic metadata.
+In that mode, pi-langfuse does not export prompts, provider-request snapshots, responses, or tool content.
 
 The extension automatically restricts an existing config file to mode `0600` and refuses to load credentials if that protection cannot be enforced.
 You can also set it explicitly:
@@ -93,9 +167,10 @@ You can also set it explicitly:
 chmod 600 ~/.pi/agent/pi-langfuse.json
 ```
 
-Restart Pi after changing credentials, endpoint, environment, release, or `captureContent`.
+Changes to credentials, endpoint, environment, release, or `captureContent` require a Pi process restart.
 Changes to `userId` apply to new sessions without restarting Pi.
-The isolated OpenTelemetry tracer provider is initialized once per Pi process and selected only for Langfuse; it does not replace Pi's process-global provider or send Langfuse observations to another extension's exporter.
+The isolated OpenTelemetry tracer provider is initialized once per Pi process and used only for Langfuse.
+It does not replace Pi's process-global provider or send Langfuse observations to another extension's exporter.
 
 ## 🔭 What is traced
 
@@ -148,9 +223,13 @@ Each `pi.llm` generation records:
 - additive input, output, cache-read, cache-write, and total token usage plus known positive input, output, cache-read, cache-write, and total cost buckets;
 - non-additive `pi.usage.reasoning_tokens` and `pi.usage.cache_write_1h_tokens` in metadata so subsets are not double-counted.
 
-The request snapshot is the payload visible at this handler, not a guaranteed final wire payload: later extensions can still replace it.
+The request snapshot is the payload visible to this handler, not a guaranteed final wire payload.
+A later extension can still replace it.
 Final assistant content is reconciled from `turn_end` and `agent_end` after message transformation.
 A recovered sequence such as `429 -> 200` remains queryable in HTTP metadata but is not an error; the final assistant outcome decides generation severity.
+A provider request becomes a `pi.llm` generation only when Pi emits an assistant lifecycle event.
+Cache-warming requests emit provider hooks without that lifecycle, so they are excluded instead of becoming orphaned or interrupted ordinary generations.
+Dedicated cache-warm observations are deferred until Pi exposes a deterministic request-kind and completion signal.
 
 ### Tool and compaction fields
 
@@ -162,7 +241,8 @@ Existing `pi.tool.call_id` and `pi.tool.name` correlation fields remain.
 `tool_execution_update` partial-result bodies are never captured.
 Duplicate, parallel, failed, no-progress, and interrupted tools are closed independently.
 
-An active `pi.compaction` records `pi.compaction.reason`, `pi.compaction.will_retry`, `pi.compaction.from_extension`, `pi.compaction.tokens_before`, `pi.compaction.messages_to_summarize`, `pi.compaction.turn_prefix_messages`, `pi.compaction.branch_entries`, and `pi.compaction.is_split_turn`.
+An active `pi.compaction` records its reason, retry state, source, token count, message counts, branch-entry count, and split-turn state.
+The exported field names are `pi.compaction.reason`, `pi.compaction.will_retry`, `pi.compaction.from_extension`, `pi.compaction.tokens_before`, `pi.compaction.messages_to_summarize`, `pi.compaction.turn_prefix_messages`, `pi.compaction.branch_entries`, and `pi.compaction.is_split_turn`.
 It adds `pi.compaction.read_file_count`, `pi.compaction.modified_file_count`, and `pi.compaction.usage.*` / `pi.compaction.cost.*` when Pi reports them.
 It never records the summary, custom instructions, or message bodies.
 Manual compaction outside an active agent trace is ignored; incomplete compaction closes as a warning at settlement or shutdown.
@@ -190,35 +270,23 @@ To wait for completed exports, run `/langfuse` and choose **Flush completed trac
 
 ## 💬 Commands
 
-```text
-/langfuse
-```
-
-The command opens one context-aware standard menu in TUI or RPC mode.
-Its state lines show the current session's tracing state, endpoint, content-capture mode, initialization failure when applicable, and private configuration path.
-It never displays credentials.
-Escape closes the menu.
-Credential and endpoint text inputs remain extension-owned because they enforce secret-preserving setup/update semantics rather than standard navigation.
+Run `/langfuse` to configure tracing, inspect its state without exposing credentials, or flush completed traces for the current session in TUI or RPC mode.
+Arguments are ignored for compatibility and cannot bypass the menu.
+Print and JSON modes reject the command with an error containing tracing state and the manual configuration path.
 
-Available actions depend on that state:
-
-- **Flush completed traces for this session** appears first when tracing is active and waits for completed observations to export.
-- **Set up Langfuse for this Pi agent directory** appears when no valid config was loaded.
-- **Update Langfuse for this Pi agent directory** appears when a valid config exists.
-- **Show setup and privacy help** explains the agent-directory scope, manual configuration path, and content-capture risk.
-
-Connection actions state their agent-directory scope and per-process restart requirement before selection.
-Command arguments are intentionally ignored so remembered subcommands cannot silently bypass the menu.
-Print and JSON modes reject the interactive command with an observable error that includes current tracing state and the manual configuration path.
+Connection changes apply to the current Pi agent directory and require each process to restart; see [Settings](#-settings).
+Flushing exports completed observations to the configured endpoint; review [Security and privacy](#-security-and-privacy) before enabling content capture.
 
 ## 🔒 Security and privacy
 
 With content capture enabled, traces can contain user prompts, model responses, tool arguments, and tool results.
 These may include source code, file contents, shell output, or other sensitive project data.
-Review your Langfuse retention and access controls before enabling this extension.
+Review Langfuse retention and access controls before enabling the extension.
 
-Git branch names, commit ids, working directory, session/leaf ids, the configured `userId`, model identity, usage/cost, aggregate counts, and allowlisted response-header values are metadata.
-They remain exported when `captureContent` is `false`; branch names and diagnostic header values can themselves contain operational details, and a `userId` may itself be personally identifying if you set it to an email address or a real name.
+Metadata includes Git branch names, commit ids, working directory, session and leaf ids, the configured `userId`, model identity, usage, cost, aggregate counts, and allowlisted response-header values.
+This metadata remains exported when `captureContent` is `false`.
+Branch names and diagnostic header values can contain operational details.
+A `userId` can identify you if you set it to an email address or real name.
 Choose a pseudonymous value when that matters, or leave `userId` unset to export no user at all.
 
 The built-in mask specifically protects Langfuse credentials; it is not a general secret scanner.
@@ -227,26 +295,21 @@ Compaction summaries, tool partial results, opaque continuation signatures, auth
 
 ## 🗂️ Package layout
 
-```txt
+```text
 packages/pi-langfuse/
-├── src/
-│   ├── index.ts     # Thin repository entrypoint
-│   ├── langfuse.ts  # Pi lifecycle integration and slash command
-│   ├── tracing.ts   # Observation lifecycle, outcomes, and bounded metadata
-│   ├── sanitizer.ts # Content bounding and opaque-signature removal
-│   ├── runtime.ts   # Lazy Langfuse/OpenTelemetry runtime
-│   └── config.ts    # Private pi-langfuse.json loading and validation
-├── dist/            # Generated Jiti runtime and lazy chunks
-├── scripts/build-runtime.mjs
-├── test/
-├── README.md
-├── LICENSE
-├── tsconfig.json
-└── package.json
+├── src/                               # Authoritative implementation and helpers
+│   ├── index.ts                       # Thin default and public entrypoint
+│   ├── langfuse.ts                    # Default settings and command adapter
+│   ├── pi-session.ts                  # Per-session Pi lifecycle controller
+│   ├── runtime-core.ts                # Process-runtime ownership
+│   ├── runtime.ts                     # Lazy production Langfuse runtime
+│   └── tracing.ts                     # Schema-v2 observation recorder
+├── dist/                              # Generated Node, declaration, and Jiti runtime
+├── scripts/build-runtime.mjs          # Runtime builder
+└── test/                              # Behavior and lifecycle coverage
 ```
 
-The package build generates the published Pi entrypoint at `dist/index.ts` and preserves `runtime.ts` as a first-use chunk.
-The source modules remain authoritative.
+The generated runtime is built from `src/index.ts` and does not import back into `src`.
 
 ## 🔎 Keywords
 

package/dist/chunks/chunk-IASLJKKB.js

@@ -0,0 +1,316 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- the generated entry uses a .ts extension for Pi's Jiti loader.
+
+// src/config.ts
+import { randomUUID } from "node:crypto";
+import { chmod, mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { getAgentDir } from "@earendil-works/pi-coding-agent";
+var CONFIG_FILE_NAME = "pi-langfuse.json";
+var DEFAULT_BASE_URL = "https://us.cloud.langfuse.com";
+function langfuseConfigPath() {
+  return join(getAgentDir(), CONFIG_FILE_NAME);
+}
+var configSaveQueues = /* @__PURE__ */ new Map();
+function writeLangfuseConfig(patch, path = langfuseConfigPath()) {
+  const previous = configSaveQueues.get(path) ?? Promise.resolve();
+  const operation = previous.then(() => writeLangfuseConfigNow(patch, path));
+  const tail = operation.then(
+    () => void 0,
+    () => void 0
+  );
+  configSaveQueues.set(path, tail);
+  void tail.then(() => {
+    if (configSaveQueues.get(path) === tail) configSaveQueues.delete(path);
+  });
+  return operation;
+}
+async function writeLangfuseConfigNow(patch, path) {
+  const currentDocument = await readLangfuseDocumentForUpdate(path);
+  const normalized = normalizeLangfuseConfig({ ...currentDocument, ...patch });
+  if (!normalized.ok) throw new Error(normalized.reason);
+  const {
+    publicKey: _publicKey,
+    secretKey: _secretKey,
+    baseUrl: _baseUrl,
+    environment: _environment,
+    release: _release,
+    userId: _userId,
+    captureContent: _captureContent,
+    ...unknownFields
+  } = currentDocument;
+  const nextDocument = { ...unknownFields, ...normalized.config };
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  const tempPath = `${path}.${process.pid}.${randomUUID()}.tmp`;
+  try {
+    await writeFile(tempPath, `${JSON.stringify(nextDocument, null, 2)}
+`, {
+      encoding: "utf8",
+      mode: 384
+    });
+    await chmod(tempPath, 384);
+    await rename(tempPath, path);
+    return normalized.config;
+  } catch (error) {
+    await rm(tempPath, { force: true }).catch(() => void 0);
+    throw error;
+  }
+}
+async function readLangfuseDocumentForUpdate(path) {
+  let parsed;
+  try {
+    parsed = JSON.parse(await readFile(path, "utf8"));
+  } catch (error) {
+    if (isNodeError(error) && error.code === "ENOENT") return {};
+    throw new Error(
+      `Cannot update ${CONFIG_FILE_NAME} because the existing file is malformed or unreadable; repair it first.`
+    );
+  }
+  const normalized = normalizeLangfuseConfig(parsed);
+  if (!normalized.ok) {
+    throw new Error(
+      `Cannot update ${CONFIG_FILE_NAME} because the existing file has invalid recognized fields; repair it first.`
+    );
+  }
+  return { ...parsed };
+}
+async function loadLangfuseConfig(path = langfuseConfigPath()) {
+  await configSaveQueues.get(path);
+  const warnings = [];
+  const permissionFailure = await ensurePrivatePermissions(path, warnings);
+  if (permissionFailure) {
+    return {
+      ok: false,
+      path,
+      warnings,
+      reason: `Refusing to load credentials: ${permissionFailure}`
+    };
+  }
+  let text;
+  try {
+    text = await readFile(path, "utf8");
+  } catch (error) {
+    if (isNodeError(error) && error.code === "ENOENT") {
+      return { ok: false, path, warnings, reason: `Configuration file not found: ${path}` };
+    }
+    return {
+      ok: false,
+      path,
+      warnings,
+      reason: `Failed to read ${path}: ${formatError(error)}`
+    };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return {
+      ok: false,
+      path,
+      warnings,
+      reason: `Failed to parse ${path} as JSON; repair the file before retrying.`
+    };
+  }
+  const normalized = normalizeLangfuseConfig(parsed);
+  if (!normalized.ok) return { ok: false, path, warnings, reason: normalized.reason };
+  return { ok: true, config: normalized.config, path, warnings };
+}
+function normalizeLangfuseConfig(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return { ok: false, reason: "pi-langfuse.json must contain a JSON object." };
+  }
+  const input = value;
+  const publicKey = normalizeString(input.publicKey);
+  const secretKey = normalizeString(input.secretKey);
+  if (!publicKey) {
+    return { ok: false, reason: "pi-langfuse.json requires a literal publicKey string." };
+  }
+  if (!secretKey) {
+    return { ok: false, reason: "pi-langfuse.json requires a literal secretKey string." };
+  }
+  if (isInterpolation(publicKey)) {
+    return {
+      ok: false,
+      reason: "pi-langfuse.json publicKey must be literal; environment and command interpolation are not supported."
+    };
+  }
+  if (isInterpolation(secretKey)) {
+    return {
+      ok: false,
+      reason: "pi-langfuse.json secretKey must be literal; environment and command interpolation are not supported."
+    };
+  }
+  const rawBaseUrl = input.baseUrl === void 0 ? DEFAULT_BASE_URL : normalizeString(input.baseUrl);
+  if (!rawBaseUrl) {
+    return { ok: false, reason: "pi-langfuse.json baseUrl must be a non-empty string." };
+  }
+  const baseUrl = normalizeBaseUrl(rawBaseUrl);
+  if (!baseUrl) {
+    return {
+      ok: false,
+      reason: "pi-langfuse.json baseUrl must use HTTP or HTTPS without credentials, a query, or a fragment."
+    };
+  }
+  if (input.captureContent !== void 0 && typeof input.captureContent !== "boolean") {
+    return { ok: false, reason: "pi-langfuse.json captureContent must be a boolean." };
+  }
+  const environment = optionalString(input.environment, "environment");
+  if (!environment.ok) return environment;
+  if (environment.value && (environment.value.length > 40 || !/^(?!langfuse)[a-z0-9_-]+$/u.test(environment.value))) {
+    return {
+      ok: false,
+      reason: "pi-langfuse.json environment must be at most 40 lowercase letters, numbers, hyphens, or underscores and must not start with langfuse."
+    };
+  }
+  const release = optionalString(input.release, "release");
+  if (!release.ok) return release;
+  const userId = optionalString(input.userId, "userId");
+  if (!userId.ok) return userId;
+  if (userId.value && userId.value.length > 200) {
+    return { ok: false, reason: "pi-langfuse.json userId must be at most 200 characters." };
+  }
+  return {
+    ok: true,
+    config: {
+      publicKey,
+      secretKey,
+      baseUrl,
+      ...environment.value ? { environment: environment.value } : {},
+      ...release.value ? { release: release.value } : {},
+      ...userId.value ? { userId: userId.value } : {},
+      captureContent: input.captureContent ?? true
+    }
+  };
+}
+async function ensurePrivatePermissions(path, warnings) {
+  try {
+    const file = await stat(path);
+    if ((file.mode & 511) !== 384) {
+      await chmod(path, 384);
+      const repaired = await stat(path);
+      if ((repaired.mode & 511) !== 384) {
+        throw new Error(`permissions remained ${(repaired.mode & 511).toString(8)}`);
+      }
+      warnings.push(`Restricted ${path} permissions to 0600.`);
+    }
+  } catch (error) {
+    if (isNodeError(error) && error.code === "ENOENT") return void 0;
+    const failure = `Failed to enforce 0600 permissions for ${path}: ${formatError(error)}`;
+    warnings.push(failure);
+    return failure;
+  }
+  return void 0;
+}
+function normalizeBaseUrl(value) {
+  try {
+    const url = new URL(value);
+    if (url.protocol !== "http:" && url.protocol !== "https:") return void 0;
+    if (url.username || url.password || url.search || url.hash) return void 0;
+    return url.toString().replace(/\/+$/, "");
+  } catch {
+    return void 0;
+  }
+}
+function optionalString(value, name) {
+  if (value === void 0) return { ok: true };
+  const normalized = normalizeString(value);
+  return normalized ? { ok: true, value: normalized } : { ok: false, reason: `pi-langfuse.json ${name} must be a non-empty string.` };
+}
+function normalizeString(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function isInterpolation(value) {
+  return value.startsWith("$") || value.startsWith("!");
+}
+function isNodeError(error) {
+  return error instanceof Error && "code" in error;
+}
+function formatError(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+
+// src/runtime-core.ts
+var RUNTIME_INTERNAL_KEY = /* @__PURE__ */ Symbol.for("@narumitw/pi-langfuse/runtime-internal/v2");
+var ManagedLangfuseRuntime = class {
+  constructor(backend) {
+    this.backend = backend;
+  }
+  backend;
+  state = "open";
+  sessionDisposers = /* @__PURE__ */ new Set();
+  flushQueue = Promise.resolve();
+  shutdownPromise;
+  get closed() {
+    return this.state !== "open";
+  }
+  registerSession(disposer) {
+    if (this.state !== "open") throw new Error("Langfuse runtime is shutting down or already closed.");
+    this.sessionDisposers.add(disposer);
+    return () => this.sessionDisposers.delete(disposer);
+  }
+  flush() {
+    if (this.state !== "open") {
+      return Promise.reject(new Error("Langfuse runtime is shutting down or already closed."));
+    }
+    const operation = this.flushQueue.then(() => this.backend.forceFlush());
+    this.flushQueue = operation.then(
+      () => void 0,
+      () => void 0
+    );
+    return operation;
+  }
+  shutdown() {
+    if (this.shutdownPromise) return this.shutdownPromise;
+    this.state = "closing";
+    this.shutdownPromise = this.shutdownNow();
+    return this.shutdownPromise;
+  }
+  async shutdownNow() {
+    const errors = [];
+    for (const dispose of [...this.sessionDisposers]) {
+      try {
+        await dispose("Langfuse runtime shut down before the Pi session was disposed.");
+      } catch (error) {
+        errors.push(error);
+      }
+    }
+    this.sessionDisposers.clear();
+    await this.flushQueue;
+    try {
+      await this.backend.forceFlush();
+    } catch (error) {
+      errors.push(error);
+    }
+    try {
+      await this.backend.shutdown();
+    } catch (error) {
+      errors.push(error);
+    } finally {
+      this.state = "closed";
+    }
+    if (errors.length === 1) throw errors[0];
+    if (errors.length > 1) throw new AggregateError(errors, "Langfuse runtime shutdown failed.");
+  }
+};
+function getLangfuseRuntimeInternal(runtime) {
+  const internal = runtime[RUNTIME_INTERNAL_KEY];
+  if (!internal) throw new Error("Langfuse runtime was not created by @narumitw/pi-langfuse.");
+  return internal;
+}
+function createLangfuseRuntimeFromBackend(backend) {
+  return registerLangfuseRuntime(new ManagedLangfuseRuntime(backend));
+}
+function registerLangfuseRuntime(runtime) {
+  Object.defineProperty(runtime, RUNTIME_INTERNAL_KEY, { value: runtime });
+  return runtime;
+}
+
+export {
+  DEFAULT_BASE_URL,
+  writeLangfuseConfig,
+  loadLangfuseConfig,
+  normalizeLangfuseConfig,
+  getLangfuseRuntimeInternal,
+  createLangfuseRuntimeFromBackend
+};
+//# sourceMappingURL=chunk-IASLJKKB.js.map

package/dist/chunks/chunk-IASLJKKB.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/config.ts", "../../src/runtime-core.ts"],
+  "sourcesContent": ["import { randomUUID } from \"node:crypto\";\nimport { chmod, mkdir, readFile, rename, rm, stat, writeFile } from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { getAgentDir } from \"@earendil-works/pi-coding-agent\";\n\nconst CONFIG_FILE_NAME = \"pi-langfuse.json\";\nexport const DEFAULT_BASE_URL = \"https://us.cloud.langfuse.com\";\n\nexport interface LangfuseConfig {\n  publicKey: string;\n  secretKey: string;\n  baseUrl: string;\n  environment?: string;\n  release?: string;\n  userId?: string;\n  captureContent: boolean;\n}\n\nexport type LangfuseConfigPatch = Partial<LangfuseConfig>;\n\nexport type LangfuseConfigResult =\n  | { ok: true; config: LangfuseConfig; path: string; warnings: string[] }\n  | { ok: false; path: string; warnings: string[]; reason: string };\n\nexport function langfuseConfigPath(): string {\n  return join(getAgentDir(), CONFIG_FILE_NAME);\n}\n\nconst configSaveQueues = new Map<string, Promise<void>>();\n\nexport async function waitForLangfuseConfigWrites(path = langfuseConfigPath()): Promise<void> {\n  await configSaveQueues.get(path);\n}\n\nexport function writeLangfuseConfig(patch: LangfuseConfigPatch, path = langfuseConfigPath()): Promise<LangfuseConfig> {\n  const previous = configSaveQueues.get(path) ?? Promise.resolve();\n  const operation = previous.then(() => writeLangfuseConfigNow(patch, path));\n  const tail = operation.then(\n    () => undefined,\n    () => undefined,\n  );\n  configSaveQueues.set(path, tail);\n  void tail.then(() => {\n    if (configSaveQueues.get(path) === tail) configSaveQueues.delete(path);\n  });\n  return operation;\n}\n\nasync function writeLangfuseConfigNow(patch: LangfuseConfigPatch, path: string): Promise<LangfuseConfig> {\n  const currentDocument = await readLangfuseDocumentForUpdate(path);\n  const normalized = normalizeLangfuseConfig({ ...currentDocument, ...patch });\n  if (!normalized.ok) throw new Error(normalized.reason);\n  const {\n    publicKey: _publicKey,\n    secretKey: _secretKey,\n    baseUrl: _baseUrl,\n    environment: _environment,\n    release: _release,\n    userId: _userId,\n    captureContent: _captureContent,\n    ...unknownFields\n  } = currentDocument;\n  const nextDocument = { ...unknownFields, ...normalized.config };\n\n  await mkdir(dirname(path), { recursive: true, mode: 0o700 });\n  const tempPath = `${path}.${process.pid}.${randomUUID()}.tmp`;\n  try {\n    await writeFile(tempPath, `${JSON.stringify(nextDocument, null, 2)}\\n`, {\n      encoding: \"utf8\",\n      mode: 0o600,\n    });\n    await chmod(tempPath, 0o600);\n    await rename(tempPath, path);\n    return normalized.config;\n  } catch (error) {\n    await rm(tempPath, { force: true }).catch(() => undefined);\n    throw error;\n  }\n}\n\nasync function readLangfuseDocumentForUpdate(path: string): Promise<Record<string, unknown>> {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(await readFile(path, \"utf8\")) as unknown;\n  } catch (error) {\n    if (isNodeError(error) && error.code === \"ENOENT\") return {};\n    throw new Error(\n      `Cannot update ${CONFIG_FILE_NAME} because the existing file is malformed or unreadable; repair it first.`,\n    );\n  }\n  const normalized = normalizeLangfuseConfig(parsed);\n  if (!normalized.ok) {\n    throw new Error(\n      `Cannot update ${CONFIG_FILE_NAME} because the existing file has invalid recognized fields; repair it first.`,\n    );\n  }\n  return { ...(parsed as Record<string, unknown>) };\n}\n\nexport async function loadLangfuseConfig(path = langfuseConfigPath()): Promise<LangfuseConfigResult> {\n  await configSaveQueues.get(path);\n  const warnings: string[] = [];\n  const permissionFailure = await ensurePrivatePermissions(path, warnings);\n  if (permissionFailure) {\n    return {\n      ok: false,\n      path,\n      warnings,\n      reason: `Refusing to load credentials: ${permissionFailure}`,\n    };\n  }\n\n  let text: string;\n  try {\n    text = await readFile(path, \"utf8\");\n  } catch (error) {\n    if (isNodeError(error) && error.code === \"ENOENT\") {\n      return { ok: false, path, warnings, reason: `Configuration file not found: ${path}` };\n    }\n    return {\n      ok: false,\n      path,\n      warnings,\n      reason: `Failed to read ${path}: ${formatError(error)}`,\n    };\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text) as unknown;\n  } catch {\n    return {\n      ok: false,\n      path,\n      warnings,\n      reason: `Failed to parse ${path} as JSON; repair the file before retrying.`,\n    };\n  }\n\n  const normalized = normalizeLangfuseConfig(parsed);\n  if (!normalized.ok) return { ok: false, path, warnings, reason: normalized.reason };\n  return { ok: true, config: normalized.config, path, warnings };\n}\n\nexport function normalizeLangfuseConfig(\n  value: unknown,\n): { ok: true; config: LangfuseConfig } | { ok: false; reason: string } {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return { ok: false, reason: \"pi-langfuse.json must contain a JSON object.\" };\n  }\n  const input = value as Record<string, unknown>;\n  const publicKey = normalizeString(input.publicKey);\n  const secretKey = normalizeString(input.secretKey);\n  if (!publicKey) {\n    return { ok: false, reason: \"pi-langfuse.json requires a literal publicKey string.\" };\n  }\n  if (!secretKey) {\n    return { ok: false, reason: \"pi-langfuse.json requires a literal secretKey string.\" };\n  }\n  if (isInterpolation(publicKey)) {\n    return {\n      ok: false,\n      reason: \"pi-langfuse.json publicKey must be literal; environment and command interpolation are not supported.\",\n    };\n  }\n  if (isInterpolation(secretKey)) {\n    return {\n      ok: false,\n      reason: \"pi-langfuse.json secretKey must be literal; environment and command interpolation are not supported.\",\n    };\n  }\n\n  const rawBaseUrl = input.baseUrl === undefined ? DEFAULT_BASE_URL : normalizeString(input.baseUrl);\n  if (!rawBaseUrl) {\n    return { ok: false, reason: \"pi-langfuse.json baseUrl must be a non-empty string.\" };\n  }\n  const baseUrl = normalizeBaseUrl(rawBaseUrl);\n  if (!baseUrl) {\n    return {\n      ok: false,\n      reason: \"pi-langfuse.json baseUrl must use HTTP or HTTPS without credentials, a query, or a fragment.\",\n    };\n  }\n\n  if (input.captureContent !== undefined && typeof input.captureContent !== \"boolean\") {\n    return { ok: false, reason: \"pi-langfuse.json captureContent must be a boolean.\" };\n  }\n  const environment = optionalString(input.environment, \"environment\");\n  if (!environment.ok) return environment;\n  if (environment.value && (environment.value.length > 40 || !/^(?!langfuse)[a-z0-9_-]+$/u.test(environment.value))) {\n    return {\n      ok: false,\n      reason:\n        \"pi-langfuse.json environment must be at most 40 lowercase letters, numbers, hyphens, or underscores and must not start with langfuse.\",\n    };\n  }\n  const release = optionalString(input.release, \"release\");\n  if (!release.ok) return release;\n  const userId = optionalString(input.userId, \"userId\");\n  if (!userId.ok) return userId;\n  if (userId.value && userId.value.length > 200) {\n    return { ok: false, reason: \"pi-langfuse.json userId must be at most 200 characters.\" };\n  }\n\n  return {\n    ok: true,\n    config: {\n      publicKey,\n      secretKey,\n      baseUrl,\n      ...(environment.value ? { environment: environment.value } : {}),\n      ...(release.value ? { release: release.value } : {}),\n      ...(userId.value ? { userId: userId.value } : {}),\n      captureContent: input.captureContent ?? true,\n    },\n  };\n}\n\nasync function ensurePrivatePermissions(path: string, warnings: string[]): Promise<string | undefined> {\n  try {\n    const file = await stat(path);\n    if ((file.mode & 0o777) !== 0o600) {\n      await chmod(path, 0o600);\n      const repaired = await stat(path);\n      if ((repaired.mode & 0o777) !== 0o600) {\n        throw new Error(`permissions remained ${(repaired.mode & 0o777).toString(8)}`);\n      }\n      warnings.push(`Restricted ${path} permissions to 0600.`);\n    }\n  } catch (error) {\n    if (isNodeError(error) && error.code === \"ENOENT\") return undefined;\n    const failure = `Failed to enforce 0600 permissions for ${path}: ${formatError(error)}`;\n    warnings.push(failure);\n    return failure;\n  }\n  return undefined;\n}\n\nfunction normalizeBaseUrl(value: string): string | undefined {\n  try {\n    const url = new URL(value);\n    if (url.protocol !== \"http:\" && url.protocol !== \"https:\") return undefined;\n    if (url.username || url.password || url.search || url.hash) return undefined;\n    return url.toString().replace(/\\/+$/, \"\");\n  } catch {\n    return undefined;\n  }\n}\n\nfunction optionalString(value: unknown, name: string): { ok: true; value?: string } | { ok: false; reason: string } {\n  if (value === undefined) return { ok: true };\n  const normalized = normalizeString(value);\n  return normalized\n    ? { ok: true, value: normalized }\n    : { ok: false, reason: `pi-langfuse.json ${name} must be a non-empty string.` };\n}\n\nfunction normalizeString(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.trim() ? value.trim() : undefined;\n}\n\nfunction isInterpolation(value: string): boolean {\n  return value.startsWith(\"$\") || value.startsWith(\"!\");\n}\n\nfunction isNodeError(error: unknown): error is NodeJS.ErrnoException {\n  return error instanceof Error && \"code\" in error;\n}\n\nfunction formatError(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n", "import type { TraceBackend } from \"./tracing.js\";\n\nexport interface LangfuseRuntimeConfig {\n  publicKey?: string;\n  secretKey?: string;\n  baseUrl?: string;\n  environment?: string;\n  release?: string;\n}\n\nexport interface CreateLangfuseRuntimeOptions {\n  config?: LangfuseRuntimeConfig;\n  env?: NodeJS.ProcessEnv | false;\n}\n\nexport interface LangfuseRuntime {\n  readonly closed: boolean;\n  flush(): Promise<void>;\n  shutdown(): Promise<void>;\n}\n\ntype RuntimeSessionDisposer = (statusMessage: string) => void | Promise<void>;\n\nexport interface LangfuseRuntimeInternal extends LangfuseRuntime {\n  readonly backend: TraceBackend;\n  registerSession(disposer: RuntimeSessionDisposer): () => void;\n}\n\nconst RUNTIME_INTERNAL_KEY = Symbol.for(\"@narumitw/pi-langfuse/runtime-internal/v2\");\n\nclass ManagedLangfuseRuntime implements LangfuseRuntimeInternal {\n  private state: \"open\" | \"closing\" | \"closed\" = \"open\";\n  private readonly sessionDisposers = new Set<RuntimeSessionDisposer>();\n  private flushQueue = Promise.resolve();\n  private shutdownPromise: Promise<void> | undefined;\n\n  constructor(readonly backend: TraceBackend) {}\n\n  get closed(): boolean {\n    return this.state !== \"open\";\n  }\n\n  registerSession(disposer: RuntimeSessionDisposer): () => void {\n    if (this.state !== \"open\") throw new Error(\"Langfuse runtime is shutting down or already closed.\");\n    this.sessionDisposers.add(disposer);\n    return () => this.sessionDisposers.delete(disposer);\n  }\n\n  flush(): Promise<void> {\n    if (this.state !== \"open\") {\n      return Promise.reject(new Error(\"Langfuse runtime is shutting down or already closed.\"));\n    }\n    const operation = this.flushQueue.then(() => this.backend.forceFlush());\n    this.flushQueue = operation.then(\n      () => undefined,\n      () => undefined,\n    );\n    return operation;\n  }\n\n  shutdown(): Promise<void> {\n    if (this.shutdownPromise) return this.shutdownPromise;\n    this.state = \"closing\";\n    this.shutdownPromise = this.shutdownNow();\n    return this.shutdownPromise;\n  }\n\n  private async shutdownNow(): Promise<void> {\n    const errors: unknown[] = [];\n    for (const dispose of [...this.sessionDisposers]) {\n      try {\n        await dispose(\"Langfuse runtime shut down before the Pi session was disposed.\");\n      } catch (error) {\n        errors.push(error);\n      }\n    }\n    this.sessionDisposers.clear();\n\n    await this.flushQueue;\n    try {\n      await this.backend.forceFlush();\n    } catch (error) {\n      errors.push(error);\n    }\n    try {\n      await this.backend.shutdown();\n    } catch (error) {\n      errors.push(error);\n    } finally {\n      this.state = \"closed\";\n    }\n\n    if (errors.length === 1) throw errors[0];\n    if (errors.length > 1) throw new AggregateError(errors, \"Langfuse runtime shutdown failed.\");\n  }\n}\n\nexport function getLangfuseRuntimeInternal(runtime: LangfuseRuntime): LangfuseRuntimeInternal {\n  const internal = (runtime as LangfuseRuntime & { [key: symbol]: LangfuseRuntimeInternal | undefined })[\n    RUNTIME_INTERNAL_KEY\n  ];\n  if (!internal) throw new Error(\"Langfuse runtime was not created by @narumitw/pi-langfuse.\");\n  return internal;\n}\n\nexport function createLangfuseRuntimeFromBackend(backend: TraceBackend): LangfuseRuntime {\n  return registerLangfuseRuntime(new ManagedLangfuseRuntime(backend));\n}\n\nexport function registerLangfuseRuntime(runtime: LangfuseRuntimeInternal): LangfuseRuntimeInternal {\n  Object.defineProperty(runtime, RUNTIME_INTERNAL_KEY, { value: runtime });\n  return runtime;\n}\n"],
+  "mappings": ";;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,OAAO,OAAO,UAAU,QAAQ,IAAI,MAAM,iBAAiB;AACpE,SAAS,SAAS,YAAY;AAC9B,SAAS,mBAAmB;AAE5B,IAAM,mBAAmB;AAClB,IAAM,mBAAmB;AAkBzB,SAAS,qBAA6B;AAC3C,SAAO,KAAK,YAAY,GAAG,gBAAgB;AAC7C;AAEA,IAAM,mBAAmB,oBAAI,IAA2B;AAMjD,SAAS,oBAAoB,OAA4B,OAAO,mBAAmB,GAA4B;AACpH,QAAM,WAAW,iBAAiB,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC/D,QAAM,YAAY,SAAS,KAAK,MAAM,uBAAuB,OAAO,IAAI,CAAC;AACzE,QAAM,OAAO,UAAU;AAAA,IACrB,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACA,mBAAiB,IAAI,MAAM,IAAI;AAC/B,OAAK,KAAK,KAAK,MAAM;AACnB,QAAI,iBAAiB,IAAI,IAAI,MAAM,KAAM,kBAAiB,OAAO,IAAI;AAAA,EACvE,CAAC;AACD,SAAO;AACT;AAEA,eAAe,uBAAuB,OAA4B,MAAuC;AACvG,QAAM,kBAAkB,MAAM,8BAA8B,IAAI;AAChE,QAAM,aAAa,wBAAwB,EAAE,GAAG,iBAAiB,GAAG,MAAM,CAAC;AAC3E,MAAI,CAAC,WAAW,GAAI,OAAM,IAAI,MAAM,WAAW,MAAM;AACrD,QAAM;AAAA,IACJ,WAAW;AAAA,IACX,WAAW;AAAA,IACX,SAAS;AAAA,IACT,aAAa;AAAA,IACb,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,GAAG;AAAA,EACL,IAAI;AACJ,QAAM,eAAe,EAAE,GAAG,eAAe,GAAG,WAAW,OAAO;AAE9D,QAAM,MAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC3D,QAAM,WAAW,GAAG,IAAI,IAAI,QAAQ,GAAG,IAAI,WAAW,CAAC;AACvD,MAAI;AACF,UAAM,UAAU,UAAU,GAAG,KAAK,UAAU,cAAc,MAAM,CAAC,CAAC;AAAA,GAAM;AAAA,MACtE,UAAU;AAAA,MACV,MAAM;AAAA,IACR,CAAC;AACD,UAAM,MAAM,UAAU,GAAK;AAC3B,UAAM,OAAO,UAAU,IAAI;AAC3B,WAAO,WAAW;AAAA,EACpB,SAAS,OAAO;AACd,UAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AACzD,UAAM;AAAA,EACR;AACF;AAEA,eAAe,8BAA8B,MAAgD;AAC3F,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AAAA,EAClD,SAAS,OAAO;AACd,QAAI,YAAY,KAAK,KAAK,MAAM,SAAS,SAAU,QAAO,CAAC;AAC3D,UAAM,IAAI;AAAA,MACR,iBAAiB,gBAAgB;AAAA,IACnC;AAAA,EACF;AACA,QAAM,aAAa,wBAAwB,MAAM;AACjD,MAAI,CAAC,WAAW,IAAI;AAClB,UAAM,IAAI;AAAA,MACR,iBAAiB,gBAAgB;AAAA,IACnC;AAAA,EACF;AACA,SAAO,EAAE,GAAI,OAAmC;AAClD;AAEA,eAAsB,mBAAmB,OAAO,mBAAmB,GAAkC;AACnG,QAAM,iBAAiB,IAAI,IAAI;AAC/B,QAAM,WAAqB,CAAC;AAC5B,QAAM,oBAAoB,MAAM,yBAAyB,MAAM,QAAQ;AACvE,MAAI,mBAAmB;AACrB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,QAAQ,iCAAiC,iBAAiB;AAAA,IAC5D;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EACpC,SAAS,OAAO;AACd,QAAI,YAAY,KAAK,KAAK,MAAM,SAAS,UAAU;AACjD,aAAO,EAAE,IAAI,OAAO,MAAM,UAAU,QAAQ,iCAAiC,IAAI,GAAG;AAAA,IACtF;AACA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,QAAQ,kBAAkB,IAAI,KAAK,YAAY,KAAK,CAAC;AAAA,IACvD;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,IAAI;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,MACL,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,QAAQ,mBAAmB,IAAI;AAAA,IACjC;AAAA,EACF;AAEA,QAAM,aAAa,wBAAwB,MAAM;AACjD,MAAI,CAAC,WAAW,GAAI,QAAO,EAAE,IAAI,OAAO,MAAM,UAAU,QAAQ,WAAW,OAAO;AAClF,SAAO,EAAE,IAAI,MAAM,QAAQ,WAAW,QAAQ,MAAM,SAAS;AAC/D;AAEO,SAAS,wBACd,OACsE;AACtE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,WAAO,EAAE,IAAI,OAAO,QAAQ,+CAA+C;AAAA,EAC7E;AACA,QAAM,QAAQ;AACd,QAAM,YAAY,gBAAgB,MAAM,SAAS;AACjD,QAAM,YAAY,gBAAgB,MAAM,SAAS;AACjD,MAAI,CAAC,WAAW;AACd,WAAO,EAAE,IAAI,OAAO,QAAQ,wDAAwD;AAAA,EACtF;AACA,MAAI,CAAC,WAAW;AACd,WAAO,EAAE,IAAI,OAAO,QAAQ,wDAAwD;AAAA,EACtF;AACA,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,aAAa,MAAM,YAAY,SAAY,mBAAmB,gBAAgB,MAAM,OAAO;AACjG,MAAI,CAAC,YAAY;AACf,WAAO,EAAE,IAAI,OAAO,QAAQ,uDAAuD;AAAA,EACrF;AACA,QAAM,UAAU,iBAAiB,UAAU;AAC3C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,MAAI,MAAM,mBAAmB,UAAa,OAAO,MAAM,mBAAmB,WAAW;AACnF,WAAO,EAAE,IAAI,OAAO,QAAQ,qDAAqD;AAAA,EACnF;AACA,QAAM,cAAc,eAAe,MAAM,aAAa,aAAa;AACnE,MAAI,CAAC,YAAY,GAAI,QAAO;AAC5B,MAAI,YAAY,UAAU,YAAY,MAAM,SAAS,MAAM,CAAC,6BAA6B,KAAK,YAAY,KAAK,IAAI;AACjH,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QACE;AAAA,IACJ;AAAA,EACF;AACA,QAAM,UAAU,eAAe,MAAM,SAAS,SAAS;AACvD,MAAI,CAAC,QAAQ,GAAI,QAAO;AACxB,QAAM,SAAS,eAAe,MAAM,QAAQ,QAAQ;AACpD,MAAI,CAAC,OAAO,GAAI,QAAO;AACvB,MAAI,OAAO,SAAS,OAAO,MAAM,SAAS,KAAK;AAC7C,WAAO,EAAE,IAAI,OAAO,QAAQ,0DAA0D;AAAA,EACxF;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,YAAY,QAAQ,EAAE,aAAa,YAAY,MAAM,IAAI,CAAC;AAAA,MAC9D,GAAI,QAAQ,QAAQ,EAAE,SAAS,QAAQ,MAAM,IAAI,CAAC;AAAA,MAClD,GAAI,OAAO,QAAQ,EAAE,QAAQ,OAAO,MAAM,IAAI,CAAC;AAAA,MAC/C,gBAAgB,MAAM,kBAAkB;AAAA,IAC1C;AAAA,EACF;AACF;AAEA,eAAe,yBAAyB,MAAc,UAAiD;AACrG,MAAI;AACF,UAAM,OAAO,MAAM,KAAK,IAAI;AAC5B,SAAK,KAAK,OAAO,SAAW,KAAO;AACjC,YAAM,MAAM,MAAM,GAAK;AACvB,YAAM,WAAW,MAAM,KAAK,IAAI;AAChC,WAAK,SAAS,OAAO,SAAW,KAAO;AACrC,cAAM,IAAI,MAAM,yBAAyB,SAAS,OAAO,KAAO,SAAS,CAAC,CAAC,EAAE;AAAA,MAC/E;AACA,eAAS,KAAK,cAAc,IAAI,uBAAuB;AAAA,IACzD;AAAA,EACF,SAAS,OAAO;AACd,QAAI,YAAY,KAAK,KAAK,MAAM,SAAS,SAAU,QAAO;AAC1D,UAAM,UAAU,0CAA0C,IAAI,KAAK,YAAY,KAAK,CAAC;AACrF,aAAS,KAAK,OAAO;AACrB,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAmC;AAC3D,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,QAAI,IAAI,aAAa,WAAW,IAAI,aAAa,SAAU,QAAO;AAClE,QAAI,IAAI,YAAY,IAAI,YAAY,IAAI,UAAU,IAAI,KAAM,QAAO;AACnE,WAAO,IAAI,SAAS,EAAE,QAAQ,QAAQ,EAAE;AAAA,EAC1C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,OAAgB,MAA4E;AAClH,MAAI,UAAU,OAAW,QAAO,EAAE,IAAI,KAAK;AAC3C,QAAM,aAAa,gBAAgB,KAAK;AACxC,SAAO,aACH,EAAE,IAAI,MAAM,OAAO,WAAW,IAC9B,EAAE,IAAI,OAAO,QAAQ,oBAAoB,IAAI,+BAA+B;AAClF;AAEA,SAAS,gBAAgB,OAAoC;AAC3D,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,MAAM,KAAK,IAAI;AACpE;AAEA,SAAS,gBAAgB,OAAwB;AAC/C,SAAO,MAAM,WAAW,GAAG,KAAK,MAAM,WAAW,GAAG;AACtD;AAEA,SAAS,YAAY,OAAgD;AACnE,SAAO,iBAAiB,SAAS,UAAU;AAC7C;AAEA,SAAS,YAAY,OAAwB;AAC3C,SAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;;;ACnPA,IAAM,uBAAuB,uBAAO,IAAI,2CAA2C;AAEnF,IAAM,yBAAN,MAAgE;AAAA,EAM9D,YAAqB,SAAuB;AAAvB;AAAA,EAAwB;AAAA,EAAxB;AAAA,EALb,QAAuC;AAAA,EAC9B,mBAAmB,oBAAI,IAA4B;AAAA,EAC5D,aAAa,QAAQ,QAAQ;AAAA,EAC7B;AAAA,EAIR,IAAI,SAAkB;AACpB,WAAO,KAAK,UAAU;AAAA,EACxB;AAAA,EAEA,gBAAgB,UAA8C;AAC5D,QAAI,KAAK,UAAU,OAAQ,OAAM,IAAI,MAAM,sDAAsD;AACjG,SAAK,iBAAiB,IAAI,QAAQ;AAClC,WAAO,MAAM,KAAK,iBAAiB,OAAO,QAAQ;AAAA,EACpD;AAAA,EAEA,QAAuB;AACrB,QAAI,KAAK,UAAU,QAAQ;AACzB,aAAO,QAAQ,OAAO,IAAI,MAAM,sDAAsD,CAAC;AAAA,IACzF;AACA,UAAM,YAAY,KAAK,WAAW,KAAK,MAAM,KAAK,QAAQ,WAAW,CAAC;AACtE,SAAK,aAAa,UAAU;AAAA,MAC1B,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AACA,WAAO;AAAA,EACT;AAAA,EAEA,WAA0B;AACxB,QAAI,KAAK,gBAAiB,QAAO,KAAK;AACtC,SAAK,QAAQ;AACb,SAAK,kBAAkB,KAAK,YAAY;AACxC,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAc,cAA6B;AACzC,UAAM,SAAoB,CAAC;AAC3B,eAAW,WAAW,CAAC,GAAG,KAAK,gBAAgB,GAAG;AAChD,UAAI;AACF,cAAM,QAAQ,gEAAgE;AAAA,MAChF,SAAS,OAAO;AACd,eAAO,KAAK,KAAK;AAAA,MACnB;AAAA,IACF;AACA,SAAK,iBAAiB,MAAM;AAE5B,UAAM,KAAK;AACX,QAAI;AACF,YAAM,KAAK,QAAQ,WAAW;AAAA,IAChC,SAAS,OAAO;AACd,aAAO,KAAK,KAAK;AAAA,IACnB;AACA,QAAI;AACF,YAAM,KAAK,QAAQ,SAAS;AAAA,IAC9B,SAAS,OAAO;AACd,aAAO,KAAK,KAAK;AAAA,IACnB,UAAE;AACA,WAAK,QAAQ;AAAA,IACf;AAEA,QAAI,OAAO,WAAW,EAAG,OAAM,OAAO,CAAC;AACvC,QAAI,OAAO,SAAS,EAAG,OAAM,IAAI,eAAe,QAAQ,mCAAmC;AAAA,EAC7F;AACF;AAEO,SAAS,2BAA2B,SAAmD;AAC5F,QAAM,WAAY,QAChB,oBACF;AACA,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,4DAA4D;AAC3F,SAAO;AACT;AAEO,SAAS,iCAAiC,SAAwC;AACvF,SAAO,wBAAwB,IAAI,uBAAuB,OAAO,CAAC;AACpE;AAEO,SAAS,wBAAwB,SAA2D;AACjG,SAAO,eAAe,SAAS,sBAAsB,EAAE,OAAO,QAAQ,CAAC;AACvE,SAAO;AACT;",
+  "names": []
+}