@onepointfour-packs/flaredeck-agent 0.1.0

package/dist/engine.d.ts

@@ -0,0 +1,122 @@
+import type { AgentEvent } from './agent.js';
+import type { Config } from './config.js';
+import type { Decider } from './permissions.js';
+/**
+ * The seam between the harness and whatever model actually runs a card.
+ *
+ * Almost none of this harness cares which model it is driving. `serve.ts` is a thousand lines of
+ * queue, sweep, approvals, worktrees, status and FlareDeck, and not one of them names a vendor —
+ * the vendor lives in `agent.ts` alone. Naming that boundary is what lets a second engine exist
+ * without a second harness, which is the only version of this worth maintaining: the alternative
+ * is keeping the sweep and the team panel and the approval flow working twice.
+ *
+ * `AgentEvent` is deliberately reused rather than redefined. It was already vendor-neutral —
+ * text, tool, todo, usage, done — because it was written for consumers rather than for the SDK
+ * that produces it. A parallel vocabulary here would be two names for one thing.
+ */
+/**
+ * What an engine can actually do, declared rather than assumed.
+ *
+ * Engines differ, and the differences matter at exactly the points this harness relies on. The
+ * Antigravity SDK's PreToolCallDecideHook can deny a call and rewrite its arguments, but its
+ * PostToolCallHook is an InspectHook — it can SEE a tool result and not change it. So a secret
+ * that comes back in output can be noticed there and never redacted, which is the half that
+ * matters. An engine that cannot redact must say so, so the harness can refuse to hand it a
+ * secret instead of handing one over and hoping. A capability that is checked beats a difference
+ * that is discovered.
+ */
+export type EngineCapabilities = {
+    /** Can a tool call be blocked before it runs, with a reason the model reads? */
+    denyToolCall: boolean;
+    /** Can a tool call's arguments be rewritten on the way out? ({{secret:NAME}} substitution) */
+    rewriteToolInput: boolean;
+    /** Can a tool's OUTPUT be rewritten before the model sees it? (the secret scrubber) */
+    redactToolOutput: boolean;
+    /** Can text be typed into a turn already in progress, rather than interrupting it? */
+    steerMidTurn: boolean;
+    /** Can a session be resumed, so a card picked back up remembers the last one? */
+    resumeSession: boolean;
+};
+/** Everything an engine needs to start a turn. Vendor-free on purpose. */
+export type RunContext = {
+    /**
+     * The ONE directory this card may change: its worktree. Absent when there is no worktree, and
+     * absent means nothing is confined — a turn with no checkout is told it may change nothing, and
+     * the publishing tools refuse it anyway.
+     */
+    sandbox?: string;
+    config: Config;
+    /** Who answers a tool call the agent is not already allowed to make. */
+    decider: Decider;
+    /** The harness's own FlareDeck token, so the model's tools act as the account the harness is. */
+    token: string;
+    /** Resume this session rather than starting a new one. */
+    resume?: string;
+    /** The model to use for this turn, when intake sized the work and chose one. */
+    model?: string;
+    /**
+     * How big the work is. The engine maps this to a model of its OWN — `model` above is one
+     * engine's reading of the same decision, and handing it to another is a 404.
+     */
+    size?: 'small' | 'medium' | 'large';
+    /**
+     * Tool sets to put in front of the model. Served in-process today; an out-of-process engine
+     * serves the same objects over local MCP rather than reimplementing them in its own language,
+     * which is the difference between one tool layer and two.
+     */
+    tools: {
+        git?: ToolSet;
+        team?: ToolSet;
+        runs?: ToolSet;
+        schedules?: ToolSet;
+        flaredeck?: ToolSet;
+    };
+    /** Hooks the harness insists on, whatever the engine: the guards. */
+    guard?: unknown;
+};
+export type ToolSet = {
+    server: unknown;
+    toolNames: string[];
+};
+/** One turn in flight. */
+export type EngineRun = {
+    events: AsyncGenerator<AgentEvent>;
+    /**
+     * Type into a turn already running. Resolves false when the engine cannot — a caller that
+     * checks gets to say "this engine can't be steered" rather than silently dropping what was
+     * typed, which is the sort of thing nobody notices until it matters.
+     */
+    steer(text: string): Promise<boolean>;
+    /** Stop this turn. */
+    stop(): Promise<void>;
+};
+export interface Engine {
+    /** For the pane and the logs: 'claude', 'antigravity'. */
+    readonly name: string;
+    readonly capabilities: EngineCapabilities;
+    run(brief: string, context: RunContext): EngineRun;
+}
+/**
+ * The engine this run uses, loaded ON DEMAND.
+ *
+ * Dynamic import rather than a top-level one, so selecting Gemini does not also load the Claude
+ * SDK and vice versa — the vendor an agent is not using should not be in its process at all. It
+ * is also what keeps the Antigravity engine from making its Python sidecar a hard dependency of
+ * every agent on the machine.
+ *
+ * The environment wins over the repo's config: trying the other engine on one card should not
+ * mean editing a file and remembering to put it back.
+ */
+export declare function engineFor(config: {
+    engine?: 'claude' | 'antigravity';
+}): Promise<Engine>;
+/**
+ * Thrown when a turn could not meaningfully run, so its event must NOT be acknowledged.
+ *
+ * The distinction the whole retry story rests on: a turn that ran and went wrong has used its
+ * event — the card has a comment, or at least the thread moved — and acknowledging it is right. A
+ * turn that never started has not, and acknowledging it silently drops the card. An engine that
+ * cannot start is firmly the second: no model saw the brief.
+ */
+export declare class CouldNotWork extends Error {
+}

package/dist/engine.js

@@ -0,0 +1,36 @@
+/**
+ * The engine this run uses, loaded ON DEMAND.
+ *
+ * Dynamic import rather than a top-level one, so selecting Gemini does not also load the Claude
+ * SDK and vice versa — the vendor an agent is not using should not be in its process at all. It
+ * is also what keeps the Antigravity engine from making its Python sidecar a hard dependency of
+ * every agent on the machine.
+ *
+ * The environment wins over the repo's config: trying the other engine on one card should not
+ * mean editing a file and remembering to put it back.
+ */
+export async function engineFor(config) {
+    const asked = (process.env['FLAREDECK_AGENT_ENGINE'] || config.engine || 'claude').toLowerCase();
+    if (asked === 'claude') {
+        const { ClaudeEngine } = await import('./engine-claude.js');
+        return new ClaudeEngine();
+    }
+    if (asked === 'antigravity') {
+        const { AntigravityEngine } = await import('./engine-antigravity.js');
+        return new AntigravityEngine();
+    }
+    // Naming an engine that does not exist must not quietly fall back to the other one: an agent
+    // silently running the wrong model is worse than one that refuses to start.
+    throw new Error(`Unknown engine "${asked}" — use "claude" or "antigravity".`);
+}
+/**
+ * Thrown when a turn could not meaningfully run, so its event must NOT be acknowledged.
+ *
+ * The distinction the whole retry story rests on: a turn that ran and went wrong has used its
+ * event — the card has a comment, or at least the thread moved — and acknowledging it is right. A
+ * turn that never started has not, and acknowledging it silently drops the card. An engine that
+ * cannot start is firmly the second: no model saw the brief.
+ */
+export class CouldNotWork extends Error {
+}
+//# sourceMappingURL=engine.js.map

package/dist/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAsGA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAA6C;IAC3E,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACjG,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC5D,OAAO,IAAI,YAAY,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACtE,OAAO,IAAI,iBAAiB,EAAE,CAAC;IACjC,CAAC;IACD,6FAA6F;IAC7F,4EAA4E;IAC5E,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,oCAAoC,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;CAAG"}

package/dist/env.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/env.js

@@ -0,0 +1,10 @@
+// Imported first from the entry point so it runs before anything else is evaluated.
+//
+// Ink renders through react-reconciler, which picks its DEVELOPMENT build whenever NODE_ENV
+// is unset. That build records a performance.measure() for every render and never clears
+// them, so a daemon that repaints a status line all day accumulates a million entries
+// ("MaxPerformanceEntryBufferExceededWarning") and grows without bound. Nothing else in the
+// harness reads NODE_ENV, so defaulting it costs nothing and an explicit value still wins.
+process.env['NODE_ENV'] ??= 'production';
+export {};
+//# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,EAAE;AACF,4FAA4F;AAC5F,yFAAyF;AACzF,sFAAsF;AACtF,4FAA4F;AAC5F,2FAA2F;AAC3F,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,CAAC"}

package/dist/environment.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Get the project running, if it has told us how.
+ *
+ * The contract is deliberately thin: `.flaredeck/start.sh` exits 0 when the environment is ready,
+ * and prints what it started as `name=value` lines. Nothing else is prescribed.
+ *
+ * It is an ADAPTER, not a replacement. Most repos already know how to start themselves — an npm
+ * script, docker compose, a Makefile, something in scripts/ — and reimplementing that would mean
+ * two ways to start the project, drifting apart. The file exists so there is one KNOWN name the
+ * harness can call without guessing; what it contains should usually be a couple of lines
+ * delegating to whatever the repo already does.
+ *
+ * The printed endpoints matter more than they look. A script that takes a free port so parallel
+ * worktrees do not collide leaves the agent unable to guess where anything is — so the script
+ * says, and the agent is told.
+ */
+export declare const START_SCRIPT: string;
+export type Started = {
+    ran: boolean;
+    ok: boolean;
+    /** Whatever the script announced: api, ui, db… */
+    endpoints: Record<string, string>;
+    detail: string;
+};
+export declare function hasStartScript(repo: string): boolean;
+export declare function startEnvironment(repo: string, onStep: (text: string) => void): Promise<Started>;
+/** What the agent is told about where things are, or why it cannot start. */
+/**
+ * `needsRunning` is Jev's answer to whether this card can be done without the project running —
+ * asked in the intake call it already makes, so it costs nothing.
+ *
+ * It matters because this paragraph used to appear on EVERY card in a repo with no start script,
+ * and it told the agent to write the script "and commit it". An agent working a read-only card
+ * did exactly that: created `.flaredeck/start.sh`, committed it straight to a shared branch, and
+ * reported it as an accomplishment. It was not disobeying the card — the harness spoke last, and
+ * spoke in imperatives. Most cards never need anything running, so most cards should hear nothing
+ * about it.
+ */
+export declare function environmentBrief(started: Started, repo: string, needsRunning?: boolean): string;

package/dist/environment.js

@@ -0,0 +1,100 @@
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+/**
+ * Get the project running, if it has told us how.
+ *
+ * The contract is deliberately thin: `.flaredeck/start.sh` exits 0 when the environment is ready,
+ * and prints what it started as `name=value` lines. Nothing else is prescribed.
+ *
+ * It is an ADAPTER, not a replacement. Most repos already know how to start themselves — an npm
+ * script, docker compose, a Makefile, something in scripts/ — and reimplementing that would mean
+ * two ways to start the project, drifting apart. The file exists so there is one KNOWN name the
+ * harness can call without guessing; what it contains should usually be a couple of lines
+ * delegating to whatever the repo already does.
+ *
+ * The printed endpoints matter more than they look. A script that takes a free port so parallel
+ * worktrees do not collide leaves the agent unable to guess where anything is — so the script
+ * says, and the agent is told.
+ */
+export const START_SCRIPT = join('.flaredeck', 'start.sh');
+const TIMEOUT_MS = 5 * 60 * 1000;
+export function hasStartScript(repo) {
+    return existsSync(join(repo, START_SCRIPT));
+}
+export async function startEnvironment(repo, onStep) {
+    if (!hasStartScript(repo))
+        return { ran: false, ok: true, endpoints: {}, detail: '' };
+    onStep('starting the environment');
+    const { code, out } = await run(`bash ${START_SCRIPT}`, repo);
+    const endpoints = {};
+    for (const line of out.split('\n')) {
+        // `name=value`, one per line, value running to the end. Tolerant of surrounding noise, since
+        // a start script legitimately logs; and values may contain spaces, because what a project
+        // wants to announce is not always a URL — `tests=npm test` is just as useful.
+        const m = /^\s*([A-Za-z][\w.-]*)\s*=\s*(\S.*?)\s*$/.exec(line);
+        if (m?.[1] && m[2])
+            endpoints[m[1]] = m[2];
+    }
+    const names = Object.keys(endpoints);
+    onStep(code === 0
+        ? `environment ready${names.length ? ` — ${names.join(', ')}` : ''}`
+        : 'environment failed to start');
+    return {
+        ran: true,
+        ok: code === 0,
+        endpoints,
+        detail: out.trim().split('\n').slice(-5).join('\n').slice(0, 600),
+    };
+}
+/** What the agent is told about where things are, or why it cannot start. */
+/**
+ * `needsRunning` is Jev's answer to whether this card can be done without the project running —
+ * asked in the intake call it already makes, so it costs nothing.
+ *
+ * It matters because this paragraph used to appear on EVERY card in a repo with no start script,
+ * and it told the agent to write the script "and commit it". An agent working a read-only card
+ * did exactly that: created `.flaredeck/start.sh`, committed it straight to a shared branch, and
+ * reported it as an accomplishment. It was not disobeying the card — the harness spoke last, and
+ * spoke in imperatives. Most cards never need anything running, so most cards should hear nothing
+ * about it.
+ */
+export function environmentBrief(started, repo, needsRunning = false) {
+    if (!started.ran) {
+        if (!needsRunning)
+            return '';
+        return (`\n\nThis repo has no ${START_SCRIPT}, so nothing was started for you, and this card looks ` +
+            `like one that needs the project running. Find how the project already does it — an npm ` +
+            `script, docker compose, a Makefile, something in scripts/, or the README — and use that; ` +
+            `do not invent your own way. If you work it out and the card you are on permits changes, ` +
+            `you may leave ${START_SCRIPT} behind as a few lines calling it, ending with one ` +
+            `\`name=url\` line per thing it started (for example \`api=http://localhost:5000\`), so the ` +
+            `next session does not repeat the work. Leave it in your own branch with the rest of your ` +
+            `change — never commit it straight to a shared branch, and never on a card that asked you ` +
+            `to change nothing.`);
+    }
+    if (!started.ok) {
+        return (`\n\nSTOP — ${START_SCRIPT} failed, so the environment is not up:\n${started.detail}\n\n` +
+            `Do not diagnose the code: nothing is running, so anything you conclude would be wrong. If ` +
+            `the fix is obviously in the start script itself, fix that. Otherwise say on the card what ` +
+            `failed, call set-needs-human, and stop.`);
+    }
+    const listed = Object.entries(started.endpoints).map(([k, v]) => `  · ${k}: ${v}`).join('\n');
+    return listed
+        ? `\n\nThe environment is up and these are its addresses — use them rather than assuming ports:\n${listed}`
+        : `\n\nThe environment started cleanly (${repo}/${START_SCRIPT}).`;
+}
+function run(command, cwd) {
+    return new Promise((resolve) => {
+        const child = spawn(command, { cwd, shell: true, stdio: ['ignore', 'pipe', 'pipe'] });
+        let out = '';
+        const cap = (d) => { if (out.length < 8000)
+            out += String(d); };
+        child.stdout.on('data', cap);
+        child.stderr.on('data', cap);
+        const timer = setTimeout(() => { child.kill('SIGKILL'); resolve({ code: 124, out: `${out}\n(timed out)` }); }, TIMEOUT_MS);
+        child.on('close', (c) => { clearTimeout(timer); resolve({ code: c ?? 1, out }); });
+        child.on('error', (e) => { clearTimeout(timer); resolve({ code: 1, out: String(e) }); });
+    });
+}
+//# sourceMappingURL=environment.js.map

package/dist/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../src/environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAC3D,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAUjC,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAA8B;IACjF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAEtF,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACnC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,YAAY,EAAE,EAAE,IAAI,CAAC,CAAC;IAE9D,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,6FAA6F;QAC7F,0FAA0F;QAC1F,8EAA8E;QAC9E,MAAM,CAAC,GAAG,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,CAAC,IAAI,KAAK,CAAC;QACf,CAAC,CAAC,oBAAoB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACpE,CAAC,CAAC,6BAA6B,CAAC,CAAC;IAEnC,OAAO;QACL,GAAG,EAAE,IAAI;QACT,EAAE,EAAE,IAAI,KAAK,CAAC;QACd,SAAS;QACT,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB,EAAE,IAAY,EAAE,YAAY,GAAG,KAAK;IACnF,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAC;QAC7B,OAAO,CACL,wBAAwB,YAAY,wDAAwD;YAC5F,yFAAyF;YACzF,2FAA2F;YAC3F,0FAA0F;YAC1F,iBAAiB,YAAY,qDAAqD;YAClF,6FAA6F;YAC7F,2FAA2F;YAC3F,2FAA2F;YAC3F,oBAAoB,CACrB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CACL,cAAc,YAAY,2CAA2C,OAAO,CAAC,MAAM,MAAM;YACzF,4FAA4F;YAC5F,4FAA4F;YAC5F,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9F,OAAO,MAAM;QACX,CAAC,CAAC,iGAAiG,MAAM,EAAE;QAC3G,CAAC,CAAC,wCAAwC,IAAI,IAAI,YAAY,IAAI,CAAC;AACvE,CAAC;AAED,SAAS,GAAG,CAAC,OAAe,EAAE,GAAW;IACvC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACtF,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI;YAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC3H,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/flaredeck-check.d.ts

@@ -0,0 +1,21 @@
+import { type Discovered } from './flaredeck-proxy.js';
+/**
+ * Is FlareDeck actually there, for this token, right now — and what does it offer?
+ *
+ * Asked before every turn, because an agent without FlareDeck is not an agent: it cannot read
+ * the card it was sent, comment on it, or ask for help. It will still produce a fluent answer —
+ * one explaining that it could not do the work — and a harness that then acknowledges the event
+ * has lost the card for good. That happened. This is the check that makes it impossible.
+ *
+ * What comes back is also what the session is given: the tool list becomes the in-process
+ * proxy for this turn, so the model can never see a tool the server did not just confirm.
+ */
+export type Preflight = {
+    ok: true;
+    discovered: Discovered;
+} | {
+    ok: false;
+    reason: string;
+    retryable: boolean;
+};
+export declare function preflightFlaredeck(mcpUrl: string, token: string): Promise<Preflight>;

package/dist/flaredeck-check.js

@@ -0,0 +1,12 @@
+import { discoverFlaredeck, FlaredeckUnavailable } from './flaredeck-proxy.js';
+export async function preflightFlaredeck(mcpUrl, token) {
+    try {
+        return { ok: true, discovered: await discoverFlaredeck(mcpUrl, token) };
+    }
+    catch (e) {
+        if (e instanceof FlaredeckUnavailable)
+            return { ok: false, reason: e.message, retryable: e.retryable };
+        return { ok: false, reason: e instanceof Error ? e.message : String(e), retryable: true };
+    }
+}
+//# sourceMappingURL=flaredeck-check.js.map

package/dist/flaredeck-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flaredeck-check.js","sourceRoot":"","sources":["../src/flaredeck-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAmB,MAAM,sBAAsB,CAAC;AAiBhG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,KAAa;IACpE,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,oBAAoB;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QACvG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC5F,CAAC;AACH,CAAC"}

package/dist/flaredeck-proxy.d.ts

@@ -0,0 +1,60 @@
+import { type ZodTypeAny } from 'zod';
+/**
+ * FlareDeck's tools, served to the session from inside this process.
+ *
+ * The CLI's own MCP client was the weak link. Its connection could sit 'pending' past the
+ * model's start, it held the bearer it was given at session start and never refreshed it — so a
+ * card that ran past the token's hour lost FlareDeck mid-turn — and a repo's own MCP config
+ * could shadow the server by name. Every one of those ended the same way: an agent explaining,
+ * fluently, that it could not read its card.
+ *
+ * So the harness is the client now. It asks FlareDeck for its tools, offers each one to the
+ * session under the same name, and forwards every call itself: a fresh token per call, a retry
+ * on a blip, and an error the model can act on when there is really nothing to be done. The
+ * session sees a server called `flaredeck` with the same tools it always had; what changed is
+ * who holds the connection.
+ */
+export type FlaredeckTool = {
+    name: string;
+    description?: string;
+    inputSchema: JsonSchema;
+};
+export type Discovered = {
+    instructions: string;
+    tools: FlaredeckTool[];
+};
+type JsonSchema = {
+    type?: string | string[];
+    description?: string;
+    properties?: Record<string, JsonSchema>;
+    required?: string[];
+    items?: JsonSchema;
+    enum?: (string | number)[];
+    oneOf?: JsonSchema[];
+    anyOf?: JsonSchema[];
+    [k: string]: unknown;
+};
+/**
+ * One FlareDeck tool call made by the HARNESS, not the model — for the few things the supervisor
+ * has to be able to do on its own, like flagging a card it decided not to start.
+ */
+export declare function callFlaredeckTool(mcpUrl: string, token: string, name: string, args: Record<string, unknown>): Promise<string>;
+export declare class FlaredeckUnavailable extends Error {
+    readonly retryable: boolean;
+    constructor(message: string, retryable: boolean);
+}
+/** What FlareDeck offers this token: its instructions and its tools. Throws when it cannot say. */
+export declare function discoverFlaredeck(mcpUrl: string, token: string): Promise<Discovered>;
+/**
+ * JSON Schema → Zod, for the shapes FlareDeck actually uses: objects of strings, numbers,
+ * booleans, enums, arrays, nested objects, and the odd oneOf of those. Anything else becomes
+ * `any` with a note, rather than a startup failure over one exotic field — the tool still
+ * works; only the argument check is looser.
+ */
+export declare function zodFor(schema: JsonSchema | undefined, notes: string[], path?: string): ZodTypeAny;
+/** The in-process server: FlareDeck's tools, forwarded with a fresh token each time. */
+export declare function flaredeckProxy(serverName: string, mcpUrl: string, token: () => Promise<string>, discovered: Discovered, warn?: (s: string) => void): {
+    server: unknown;
+    toolNames: string[];
+};
+export {};

package/dist/flaredeck-proxy.js

@@ -0,0 +1,186 @@
+import { createSdkMcpServer, tool } from '@anthropic-ai/claude-agent-sdk';
+import { z } from 'zod';
+const TIMEOUT_MS = 25_000;
+async function rpc(mcpUrl, token, method, params) {
+    const res = await fetch(mcpUrl, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${token}`,
+            'Content-Type': 'application/json',
+            Accept: 'application/json, text/event-stream',
+        },
+        body: JSON.stringify({ jsonrpc: '2.0', id: 1, method, ...(params !== undefined ? { params } : {}) }),
+        signal: AbortSignal.timeout(TIMEOUT_MS),
+    });
+    const text = await res.text();
+    let body = null;
+    // Plain JSON today; SSE-framed if the server ever switches. Take the first JSON object either way.
+    const start = text.indexOf('{');
+    if (start >= 0) {
+        try {
+            body = JSON.parse(text.slice(start).split('\n').find((l) => l.trim().startsWith('{')) ?? '');
+        }
+        catch {
+            body = null;
+        }
+    }
+    return { status: res.status, body };
+}
+/**
+ * One FlareDeck tool call made by the HARNESS, not the model — for the few things the supervisor
+ * has to be able to do on its own, like flagging a card it decided not to start.
+ */
+export async function callFlaredeckTool(mcpUrl, token, name, args) {
+    const res = await rpc(mcpUrl, token, 'tools/call', { name, arguments: args });
+    const result = res.body?.result;
+    const text = (result?.content ?? []).filter((c) => c?.type === 'text').map((c) => c.text).join('\n');
+    if (res.status >= 400 || res.body?.error || result?.isError)
+        throw new Error(text || res.body?.error?.message || `${name} failed (${res.status})`);
+    return text;
+}
+export class FlaredeckUnavailable extends Error {
+    retryable;
+    constructor(message, retryable) {
+        super(message);
+        this.retryable = retryable;
+    }
+}
+/** What FlareDeck offers this token: its instructions and its tools. Throws when it cannot say. */
+export async function discoverFlaredeck(mcpUrl, token) {
+    const once = async () => {
+        let init;
+        try {
+            init = await rpc(mcpUrl, token, 'initialize', {
+                protocolVersion: '2025-03-26',
+                capabilities: {},
+                clientInfo: { name: 'flaredeck-agent', version: '1' },
+            });
+        }
+        catch (e) {
+            throw new FlaredeckUnavailable(`FlareDeck unreachable: ${e instanceof Error ? e.message : String(e)}`, true);
+        }
+        if (init.status === 401 || init.status === 403) {
+            throw new FlaredeckUnavailable(`FlareDeck rejected this token (${init.status}) — run \`flaredeck-agent login\``, false);
+        }
+        if (init.status >= 400)
+            throw new FlaredeckUnavailable(`FlareDeck answered ${init.status}`, true);
+        const instructions = String(init.body?.result?.instructions ?? '');
+        const list = await rpc(mcpUrl, token, 'tools/list');
+        if (list.status >= 400)
+            throw new FlaredeckUnavailable(`FlareDeck answered ${list.status} to tools/list`, true);
+        const tools = (list.body?.result?.tools ?? []);
+        if (!tools.length)
+            throw new FlaredeckUnavailable('FlareDeck listed no tools', true);
+        return { instructions, tools };
+    };
+    try {
+        return await once();
+    }
+    catch (e) {
+        if (!(e instanceof FlaredeckUnavailable) || !e.retryable)
+            throw e;
+        // One more try after a breath: a cold start should not cost a card a minute.
+        await new Promise((r) => setTimeout(r, 3000));
+        return once();
+    }
+}
+/**
+ * JSON Schema → Zod, for the shapes FlareDeck actually uses: objects of strings, numbers,
+ * booleans, enums, arrays, nested objects, and the odd oneOf of those. Anything else becomes
+ * `any` with a note, rather than a startup failure over one exotic field — the tool still
+ * works; only the argument check is looser.
+ */
+export function zodFor(schema, notes, path = '') {
+    if (!schema)
+        return z.any();
+    const alts = schema.oneOf ?? schema.anyOf;
+    if (alts?.length) {
+        const members = alts.map((a, i) => zodFor(a, notes, `${path}|${i}`));
+        const out = members.length === 1 ? members[0] : z.union([members[0], members[1], ...members.slice(2)]);
+        return schema.description ? out.describe(schema.description) : out;
+    }
+    const type = Array.isArray(schema.type) ? schema.type.find((t) => t !== 'null') : schema.type;
+    let out;
+    if (schema.enum?.length) {
+        const strs = schema.enum.filter((v) => typeof v === 'string');
+        out = strs.length === schema.enum.length && strs.length > 0
+            ? z.enum(strs)
+            : z.union(schema.enum.map((v) => z.literal(v)));
+    }
+    else if (type === 'string')
+        out = z.string();
+    else if (type === 'number' || type === 'integer')
+        out = z.number();
+    else if (type === 'boolean')
+        out = z.boolean();
+    else if (type === 'array')
+        out = z.array(zodFor(schema.items, notes, `${path}[]`));
+    else if (type === 'object' || schema.properties) {
+        const shape = {};
+        const required = new Set(schema.required ?? []);
+        for (const [k, v] of Object.entries(schema.properties ?? {})) {
+            const inner = zodFor(v, notes, `${path}.${k}`);
+            shape[k] = required.has(k) ? inner : inner.optional();
+        }
+        out = z.object(shape).passthrough();
+    }
+    else {
+        notes.push(`${path || '(root)'}: no usable type, accepting anything`);
+        out = z.any();
+    }
+    return schema.description ? out.describe(schema.description) : out;
+}
+/** The in-process server: FlareDeck's tools, forwarded with a fresh token each time. */
+export function flaredeckProxy(serverName, mcpUrl, token, discovered, warn = () => { }) {
+    const notes = [];
+    const tools = discovered.tools.map((t) => {
+        const shape = zodFor(t.inputSchema, notes, t.name).shape ?? {};
+        return tool(t.name, t.description ?? '', shape, async (args) => {
+            const sending = (args ?? {});
+            // Two retries on a blip; none on a rejection, which a retry will not change.
+            let last = '';
+            for (let attempt = 0; attempt < 3; attempt++) {
+                if (attempt)
+                    await new Promise((r) => setTimeout(r, attempt * 1500));
+                let res;
+                try {
+                    res = await rpc(mcpUrl, await token(), 'tools/call', { name: t.name, arguments: sending });
+                }
+                catch (e) {
+                    last = `FlareDeck unreachable: ${e instanceof Error ? e.message : String(e)}`;
+                    continue;
+                }
+                if (res.status === 401 || res.status === 403) {
+                    return { content: [{ type: 'text', text: `❌ FlareDeck rejected the agent's token (${res.status}). The harness will need \`flaredeck-agent login\` — say so on the card with set-needs-human if you can, otherwise stop.` }], isError: true };
+                }
+                if (res.status >= 500) {
+                    last = `FlareDeck answered ${res.status}`;
+                    continue;
+                }
+                if (res.body?.error) {
+                    return { content: [{ type: 'text', text: `❌ ${res.body.error.message ?? JSON.stringify(res.body.error)}` }], isError: true };
+                }
+                const result = res.body?.result;
+                if (!result) {
+                    last = `FlareDeck answered ${res.status} with no result`;
+                    continue;
+                }
+                return {
+                    content: Array.isArray(result.content) && result.content.length ? result.content : [{ type: 'text', text: JSON.stringify(result) }],
+                    ...(result.isError ? { isError: true } : {}),
+                };
+            }
+            return { content: [{ type: 'text', text: `❌ ${last} — tried three times. FlareDeck is not answering right now; do not pretend the call happened.` }], isError: true };
+        });
+    });
+    if (notes.length)
+        warn(`FlareDeck tool schemas partly loosened: ${notes.slice(0, 4).join('; ')}${notes.length > 4 ? ` (+${notes.length - 4})` : ''}`);
+    const server = createSdkMcpServer({
+        name: serverName,
+        version: '1.0.0',
+        ...(discovered.instructions ? { instructions: discovered.instructions } : {}),
+        tools,
+    });
+    return { server, toolNames: discovered.tools.map((t) => `mcp__${serverName}__${t.name}`) };
+}
+//# sourceMappingURL=flaredeck-proxy.js.map

package/dist/flaredeck-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flaredeck-proxy.js","sourceRoot":"","sources":["../src/flaredeck-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,CAAC,EAAmB,MAAM,KAAK,CAAC;AAsCzC,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,KAAK,UAAU,GAAG,CAChB,MAAc,EACd,KAAa,EACb,MAAc,EACd,MAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;QAC9B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,qCAAqC;SAC9C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACpG,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;KACxC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAQ,IAAI,CAAC;IACrB,mGAAmG;IACnG,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QACrG,MAAM,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC;QAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,KAAa,EAAE,IAAY,EAAE,IAA6B;IAChH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/G,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,IAAI,YAAY,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACnJ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACP;IAAtC,YAAY,OAAe,EAAW,SAAkB;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAArC,cAAS,GAAT,SAAS,CAAS;IAAoB,CAAC;CAC9E;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,KAAa;IACnE,MAAM,IAAI,GAAG,KAAK,IAAyB,EAAE;QAC3C,IAAI,IAAmC,CAAC;QACxC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE;gBAC5C,eAAe,EAAE,YAAY;gBAC7B,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/G,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC/C,MAAM,IAAI,oBAAoB,CAAC,kCAAkC,IAAI,CAAC,MAAM,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC1H,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QAClG,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;QAEnE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,IAAI,CAAC,MAAM,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAChH,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAoB,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;QACrF,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC,CAAC;IACF,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,YAAY,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,MAAM,CAAC,CAAC;QAClE,6EAA6E;QAC7E,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,MAA8B,EAAE,KAAe,EAAE,IAAI,GAAG,EAAE;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC;IAC1C,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9F,IAAI,GAAe,CAAC;IACpB,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC3E,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YACzD,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAA6B,CAAC;YACvC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAyD,CAAC,CAAC;IAC5G,CAAC;SAAM,IAAI,IAAI,KAAK,QAAQ;QAAE,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;SAC1C,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;QAAE,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;SAC9D,IAAI,IAAI,KAAK,SAAS;QAAE,GAAG,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;SAC1C,IAAI,IAAI,KAAK,OAAO;QAAE,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;SAC9E,IAAI,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,KAAK,GAA+B,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/C,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACxD,CAAC;QACD,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,QAAQ,sCAAsC,CAAC,CAAC;QACtE,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACrE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,cAAc,CAC5B,UAAkB,EAClB,MAAc,EACd,KAA4B,EAC5B,UAAsB,EACtB,OAA4B,GAAG,EAAE,GAAE,CAAC;IAEpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACvC,MAAM,KAAK,GAAI,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAsB,CAAC,KAAK,IAAI,EAAE,CAAC;QACrF,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7D,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;YACxD,6EAA6E;YAC7E,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC7C,IAAI,OAAO;oBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;gBACrE,IAAI,GAAkC,CAAC;gBACvC,IAAI,CAAC;oBACH,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC7F,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,GAAG,0BAA0B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9E,SAAS;gBACX,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC7C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2CAA2C,GAAG,CAAC,MAAM,0HAA0H,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC/O,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAAC,IAAI,GAAG,sBAAsB,GAAG,CAAC,MAAM,EAAE,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC/E,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;oBACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC/H,CAAC;gBACD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC;gBAChC,IAAI,CAAC,MAAM,EAAE,CAAC;oBAAC,IAAI,GAAG,sBAAsB,GAAG,CAAC,MAAM,iBAAiB,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACpF,OAAO;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7C,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,+FAA+F,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACxK,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM;QAAE,IAAI,CAAC,2CAA2C,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtJ,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,KAAK;KACN,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,UAAU,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AAC7F,CAAC"}