@oscharko-dev/keiko-server 0.2.7 → 0.2.9

package/dist/command-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-runner.d.ts","sourceRoot":"","sources":["../src/command-runner.ts"],"names":[],"mappings":"AAaA,OAAO,EAOL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EAIL,KAAK,kBAAkB,EAGvB,KAAK,kBAAkB,EAEvB,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAMlE,OAAO,KAAK,EAAW,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAYzD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,MAAM,yBAAyB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;AAE5E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,kBAAkB,CAAC;IAC7D,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5E,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,yBAAyB,KAAK,MAAM,IAAI,CAAC;IACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;CAC3C;AAsYD,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,2BAA2B,GAChC,oBAAoB,CAEtB"}

package/dist/command-runner.js

@@ -0,0 +1,348 @@
+// Issue #1387 — controlled test/build/run command executor. A closed catalog of vetted tasks is
+// discovered from the project's package.json scripts; a run names a catalog task id (never free-form
+// argv) and is executed through the SINGLE governed spawn boundary, keiko-tools `runCommand`
+// (ADR-0043 D2): no shell, name-allowlisted env, ephemeral HOME, workspace-contained cwd, output
+// byte cap with truncation, timeout SIGTERM→SIGKILL, and AbortController cancellation. Nothing new is
+// invented here — the executor allowlist (COMMAND_TASK_RULES) and the discovery source are the only
+// additions over the proven ADR-0018 terminal machinery this module mirrors.
+//
+// Reuse (UNCHANGED): runCommand + DEFAULT_SANDBOX_POLICY (@oscharko-dev/keiko-tools), readWorkspaceFile
+// + path containment (@oscharko-dev/keiko-workspace), EvidenceStore (@oscharko-dev/keiko-evidence),
+// ProjectStore (./store). New (bounded composition): CommandRunnerManager + content-free run evidence.
+import { randomUUID } from "node:crypto";
+import { CommandCancelledError, CommandDeniedError, CommandTimeoutError, DEFAULT_SANDBOX_POLICY, runCommand, } from "@oscharko-dev/keiko-tools";
+import { nodeSpawnFn } from "@oscharko-dev/keiko-tools/internal/exec";
+import { readWorkspaceFile } from "@oscharko-dev/keiko-workspace";
+import { nodeWorkspaceFs } from "@oscharko-dev/keiko-workspace/internal/fs";
+import { COMMAND_RUNNER_SCHEMA_VERSION, COMMAND_TASK_RULES, } from "@oscharko-dev/keiko-contracts";
+import { CommandRunnerError } from "./command-runner-errors.js";
+import { appendCommandRunEvidence, buildCommandRunEvidenceEntry, } from "./command-runner-evidence.js";
+const MAX_CONCURRENT_RUNS = 8;
+const MIN_TIMEOUT_MS = 1_000;
+const PACKAGE_READ_BYTES = 262_144;
+const MAX_SCRIPT_NAME_LENGTH = 120;
+// First char must not be `-` (flag injection) and only conservative script-name characters are
+// allowed, so a discovered name can never smuggle a flag or shell metacharacter into `npm run`.
+const SAFE_SCRIPT_NAME = /^[A-Za-z0-9][A-Za-z0-9._:-]*$/;
+// ─── Discovery (package.json scripts → vetted task catalog) ──────────────────────
+function projectFor(store, projectId) {
+    for (const project of store.listProjects()) {
+        if (project.path === projectId) {
+            return project;
+        }
+    }
+    return undefined;
+}
+function projectRootOrThrow(project) {
+    try {
+        return nodeWorkspaceFs.realPath(project.path);
+    }
+    catch {
+        throw new CommandRunnerError("PROJECT_NOT_FOUND", "Project root path could not be resolved.");
+    }
+}
+function buildWorkspaceInfo(projectRoot) {
+    return {
+        root: projectRoot,
+        name: undefined,
+        version: undefined,
+        testFramework: "unknown",
+        sourceDirs: [],
+        testDirs: [],
+        languages: [],
+        ignoreLines: [],
+    };
+}
+function parseJsonObject(text) {
+    try {
+        const parsed = JSON.parse(text);
+        return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+            ? parsed
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function readPackageScripts(workspace, fs) {
+    let record;
+    try {
+        record = parseJsonObject(readWorkspaceFile(workspace, "package.json", { maxBytes: PACKAGE_READ_BYTES }, fs).text);
+    }
+    catch {
+        return [];
+    }
+    const scripts = record?.scripts;
+    if (typeof scripts !== "object" || scripts === null || Array.isArray(scripts)) {
+        return [];
+    }
+    return Object.entries(scripts)
+        .filter(([, value]) => typeof value === "string")
+        .map(([name]) => name)
+        .filter((name) => name.length > 0 && name.length <= MAX_SCRIPT_NAME_LENGTH)
+        .sort();
+}
+function classifyScriptKind(name) {
+    const lower = name.toLowerCase();
+    if (lower === "test" || lower.startsWith("test:") || lower.startsWith("test-")) {
+        return "test";
+    }
+    if (lower === "build" || lower.startsWith("build:") || lower.startsWith("build-")) {
+        return "build";
+    }
+    return "run";
+}
+function discoverTasks(workspace, fs) {
+    const tasks = [];
+    for (const name of readPackageScripts(workspace, fs)) {
+        if (!SAFE_SCRIPT_NAME.test(name)) {
+            continue;
+        }
+        tasks.push({
+            id: `npm-script:${name}`,
+            kind: classifyScriptKind(name),
+            label: `npm run ${name}`,
+            executable: "npm",
+            args: ["run", name],
+            source: "package-json-script",
+        });
+    }
+    return tasks;
+}
+function outcomeFromResult(result) {
+    // runCommand resolves only on a real process exit (timeout/cancel reject); a clean exit can still
+    // be truncated. exitCode null here means an output-flood kill — not a clean exit, so non-zero-exit.
+    const failureReason = result.exitCode === 0 ? "none" : "non-zero-exit";
+    return {
+        exitCode: result.exitCode,
+        durationMs: result.durationMs,
+        truncated: result.truncated,
+        timedOut: false,
+        failureReason,
+        eventKind: "run-completed",
+        stdout: result.stdout,
+        stderr: result.stderr,
+    };
+}
+function deniedFailureReason(error) {
+    if (error instanceof CommandDeniedError && !error.message.includes("not found on PATH")) {
+        return "denied";
+    }
+    return "spawn-error";
+}
+function outcomeFromError(error, cancelledByUser, durationMs) {
+    const base = { exitCode: null, durationMs, truncated: false, stdout: "", stderr: "" };
+    if (error instanceof CommandCancelledError || cancelledByUser) {
+        return { ...base, timedOut: false, failureReason: "cancelled", eventKind: "run-cancelled" };
+    }
+    if (error instanceof CommandTimeoutError) {
+        // ADR-0018 D7 — a timeout is a "completed with timedOut=true" outcome, not an infra failure.
+        return { ...base, timedOut: true, failureReason: "timed-out", eventKind: "run-completed" };
+    }
+    return {
+        ...base,
+        timedOut: false,
+        failureReason: deniedFailureReason(error),
+        eventKind: "run-failed",
+    };
+}
+function clampTimeout(requested, ceiling) {
+    if (requested === undefined || !Number.isFinite(requested)) {
+        return ceiling;
+    }
+    const rounded = Math.round(requested);
+    if (rounded <= MIN_TIMEOUT_MS)
+        return MIN_TIMEOUT_MS;
+    if (rounded >= ceiling)
+        return ceiling;
+    return rounded;
+}
+function requestIdPayload(input) {
+    return input.requestId === undefined ? {} : { requestId: input.requestId };
+}
+class CommandRunnerManagerImpl {
+    store;
+    evidenceStore;
+    policy;
+    processEnv;
+    redactor;
+    runDeps;
+    now;
+    runs = new Map();
+    subscribers = new Set();
+    constructor(opts) {
+        this.store = opts.store;
+        this.evidenceStore = opts.evidenceStore;
+        this.policy = opts.policy ?? DEFAULT_SANDBOX_POLICY;
+        this.processEnv = opts.processEnv ?? process.env;
+        this.redactor = opts.redactor ?? ((input) => input);
+        this.runDeps = opts.runDeps ?? {};
+        this.now = opts.now ?? Date.now;
+    }
+    inFlightCount = () => this.runs.size;
+    subscribe = (listener) => {
+        this.subscribers.add(listener);
+        return () => {
+            this.subscribers.delete(listener);
+        };
+    };
+    abort = (runId) => {
+        const entry = this.runs.get(runId);
+        if (entry === undefined)
+            return false;
+        entry.cancelledByUser = true;
+        entry.controller.abort();
+        return true;
+    };
+    discover = (projectId) => {
+        const workspace = this.resolveWorkspace(projectId);
+        return {
+            schemaVersion: COMMAND_RUNNER_SCHEMA_VERSION,
+            projectId,
+            tasks: discoverTasks(workspace, this.fs()),
+        };
+    };
+    execute = async (input) => {
+        const workspace = this.resolveWorkspace(input.projectId);
+        // Re-discover the catalog at execute time on purpose: the requested taskId is untrusted, so the
+        // server re-derives the vetted task from the CURRENT package.json rather than trusting a catalog
+        // the client fetched earlier (which may be stale or forged). The extra manifest read is a
+        // deliberate security re-validation on a low-frequency, user-triggered path, not a hot loop.
+        const task = discoverTasks(workspace, this.fs()).find((entry) => entry.id === input.taskId);
+        if (task === undefined) {
+            throw new CommandRunnerError("TASK_NOT_FOUND", "Task is not in the discovered catalog.");
+        }
+        if (this.runs.size >= MAX_CONCURRENT_RUNS) {
+            throw new CommandRunnerError("RUN_LIMIT_EXCEEDED", "Too many in-flight command runs.");
+        }
+        return this.runExecution(task, workspace, input);
+    };
+    fs() {
+        return this.runDeps.fs ?? nodeWorkspaceFs;
+    }
+    resolveWorkspace(projectId) {
+        const project = projectFor(this.store, projectId);
+        if (project === undefined) {
+            throw new CommandRunnerError("PROJECT_NOT_FOUND", "Project not found.");
+        }
+        return buildWorkspaceInfo(projectRootOrThrow(project));
+    }
+    buildRunDeps(workspace) {
+        return {
+            workspace,
+            policy: this.policy,
+            commandRules: COMMAND_TASK_RULES,
+            spawn: this.runDeps.spawn ?? nodeSpawnFn,
+            processEnv: this.processEnv,
+            now: this.runDeps.now ?? this.now,
+            ...(this.runDeps.resolveExecutable === undefined
+                ? {}
+                : { resolveExecutable: this.runDeps.resolveExecutable }),
+            ...(this.runDeps.fs === undefined ? {} : { fs: this.runDeps.fs }),
+            ...(this.runDeps.home === undefined ? {} : { home: this.runDeps.home }),
+        };
+    }
+    async runExecution(task, workspace, input) {
+        const runId = randomUUID();
+        const controller = new AbortController();
+        const entry = { controller, cancelledByUser: false };
+        this.runs.set(runId, entry);
+        const startedAt = this.now();
+        this.emit({
+            kind: "run-started",
+            runId,
+            payload: { taskId: task.id, kind: task.kind, startedAt, ...requestIdPayload(input) },
+        });
+        try {
+            return await this.invoke(runId, task, workspace, input, entry, startedAt);
+        }
+        finally {
+            this.runs.delete(runId);
+        }
+    }
+    async invoke(runId, task, workspace, input, entry, startedAt) {
+        const deps = this.buildRunDeps(workspace);
+        const timeoutMs = clampTimeout(input.timeoutMs, this.policy.defaultTimeoutMs);
+        try {
+            const result = await runCommand({
+                command: task.executable,
+                args: task.args,
+                cwd: undefined,
+                timeoutMs,
+                signal: entry.controller.signal,
+            }, deps);
+            return this.finalize(runId, task, input, outcomeFromResult(result), startedAt);
+        }
+        catch (error) {
+            const outcome = outcomeFromError(error, entry.cancelledByUser, this.now() - startedAt);
+            return this.finalize(runId, task, input, outcome, startedAt);
+        }
+    }
+    finalize(runId, task, input, outcome, startedAt) {
+        this.persist(runId, task, input, outcome, startedAt);
+        this.emit({
+            kind: outcome.eventKind,
+            runId,
+            payload: {
+                exitCode: outcome.exitCode,
+                durationMs: outcome.durationMs,
+                truncated: outcome.truncated,
+                timedOut: outcome.timedOut,
+                failureReason: outcome.failureReason,
+                ...requestIdPayload(input),
+            },
+        });
+        return {
+            schemaVersion: COMMAND_RUNNER_SCHEMA_VERSION,
+            runId,
+            taskId: task.id,
+            kind: task.kind,
+            exitCode: outcome.exitCode,
+            durationMs: outcome.durationMs,
+            truncated: outcome.truncated,
+            timedOut: outcome.timedOut,
+            failureReason: outcome.failureReason,
+            stdout: outcome.stdout,
+            stderr: outcome.stderr,
+        };
+    }
+    persist(runId, task, input, outcome, startedAt) {
+        if (this.evidenceStore === undefined)
+            return;
+        try {
+            const evidence = buildCommandRunEvidenceEntry({
+                runId,
+                projectId: input.projectId,
+                taskId: task.id,
+                kind: task.kind,
+                executable: task.executable,
+                argCount: task.args.length,
+                exitCode: outcome.exitCode,
+                durationMs: outcome.durationMs,
+                timedOut: outcome.timedOut,
+                truncated: outcome.truncated,
+                failureReason: outcome.failureReason,
+                stdoutBytes: Buffer.byteLength(outcome.stdout, "utf8"),
+                stderrBytes: Buffer.byteLength(outcome.stderr, "utf8"),
+                startedAt,
+            });
+            appendCommandRunEvidence(this.evidenceStore, evidence, this.redactor);
+        }
+        catch {
+            // Evidence is best-effort process-evidence; a write hiccup must not corrupt a real run result.
+        }
+    }
+    emit(event) {
+        for (const listener of [...this.subscribers]) {
+            try {
+                listener(event);
+            }
+            catch {
+                // A subscriber throwing must not stop fan-out (matches the terminal/browser tool pattern).
+            }
+        }
+    }
+}
+export function createCommandRunnerManager(opts) {
+    return new CommandRunnerManagerImpl(opts);
+}

package/dist/conversation-prompt.d.ts

@@ -1,8 +1,8 @@
-import type { ConversationDocumentContextWire } from "@oscharko-dev/keiko-contracts";
+import type { ConversationDocumentContextWire, DiscussionMode } from "@oscharko-dev/keiko-contracts";
 export declare const CONVERSATION_USER_BLOCK_HEADER = "User message:";
 export declare const CONVERSATION_CONTEXT_BLOCK_HEADER = "Attached document context:";
 export declare const CONVERSATION_MEMORY_BLOCK_HEADER = "Included memory context:";
 export declare const CONVERSATION_DOCUMENT_SEPARATOR = "---";
 export declare const CONVERSATION_SYSTEM_PROMPT: string;
-export declare function composeConversationPrompt(draft: string, documentContext: readonly ConversationDocumentContextWire[], memoryContextText?: string): string;
+export declare function composeConversationPrompt(draft: string, documentContext: readonly ConversationDocumentContextWire[], memoryContextText?: string, discussionMode?: DiscussionMode): string;
 //# sourceMappingURL=conversation-prompt.d.ts.map

package/dist/conversation-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conversation-prompt.d.ts","sourceRoot":"","sources":["../src/conversation-prompt.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAErF,eAAO,MAAM,8BAA8B,kBAAkB,CAAC;AAC9D,eAAO,MAAM,iCAAiC,+BAA+B,CAAC;AAC9E,eAAO,MAAM,gCAAgC,6BAA6B,CAAC;AAC3E,eAAO,MAAM,+BAA+B,QAAQ,CAAC;AACrD,eAAO,MAAM,0BAA0B,QAK0G,CAAC;AAUlJ,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,SAAS,+BAA+B,EAAE,EAC3D,iBAAiB,CAAC,EAAE,MAAM,GACzB,MAAM,CAgBR"}
+{"version":3,"file":"conversation-prompt.d.ts","sourceRoot":"","sources":["../src/conversation-prompt.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,+BAA+B,EAC/B,cAAc,EACf,MAAM,+BAA+B,CAAC;AAIvC,eAAO,MAAM,8BAA8B,kBAAkB,CAAC;AAC9D,eAAO,MAAM,iCAAiC,+BAA+B,CAAC;AAC9E,eAAO,MAAM,gCAAgC,6BAA6B,CAAC;AAC3E,eAAO,MAAM,+BAA+B,QAAQ,CAAC;AACrD,eAAO,MAAM,0BAA0B,QAK0G,CAAC;AAwClJ,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,SAAS,+BAA+B,EAAE,EAC3D,iBAAiB,CAAC,EAAE,MAAM,EAC1B,cAAc,CAAC,EAAE,cAAc,GAC9B,MAAM,CAMR"}

package/dist/conversation-prompt.js

@@ -4,6 +4,7 @@
 // labeled blocks separated by a fixed structural separator. The block headers and separator
 // are exported so the test suite and the gateway can assert the separation contract directly.
 // No IO, no redaction (the extractor already redacted), no error throwing.
+import { composeDiscussionDirectiveBlock } from "./discussion-prompt.js";
 export const CONVERSATION_USER_BLOCK_HEADER = "User message:";
 export const CONVERSATION_CONTEXT_BLOCK_HEADER = "Attached document context:";
 export const CONVERSATION_MEMORY_BLOCK_HEADER = "Included memory context:";
@@ -19,7 +20,10 @@ function renderDocumentBlock(doc) {
     const marker = doc.truncated && doc.truncationMarker !== undefined ? `\n${doc.truncationMarker}` : "";
     return `${header}\n${doc.text}${marker}\n${CONVERSATION_DOCUMENT_SEPARATOR}`;
 }
-export function composeConversationPrompt(draft, documentContext, memoryContextText) {
+// Composes the user-message body: the labeled user block followed by the optional memory and
+// document-context blocks, in their fixed order. Returns the bare draft when neither memory nor
+// document context is present (the legacy single-string form).
+function composeUserMessageBody(draft, documentContext, memoryContextText) {
     if (documentContext.length === 0 &&
         (memoryContextText === undefined || memoryContextText.length === 0)) {
         return draft;
@@ -34,3 +38,15 @@ export function composeConversationPrompt(draft, documentContext, memoryContextT
     }
     return blocks.join("\n\n");
 }
+// Issue #502 — the `discussionMode` PARAMETER is appended last in the signature (for backward-compat:
+// when it is omitted the return value is byte-identical to the pre-#502 composer). The rendered
+// directive BLOCK, however, is prepended BEFORE the user-message body when a mode is present — see the
+// return below. The block (content-free templates, see discussion-prompt.ts) is a labeled section
+// inserted between the system prompt and the user message; `CONVERSATION_SYSTEM_PROMPT` is never touched.
+export function composeConversationPrompt(draft, documentContext, memoryContextText, discussionMode) {
+    const body = composeUserMessageBody(draft, documentContext, memoryContextText);
+    if (discussionMode === undefined) {
+        return body;
+    }
+    return `${composeDiscussionDirectiveBlock(discussionMode)}\n\n${body}`;
+}

package/dist/csp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"csp.d.ts","sourceRoot":"","sources":["../src/csp.ts"],"names":[],"mappings":"AAoCA,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAgB7F;AAKD,wBAAgB,cAAc,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAsBtE"}
+{"version":3,"file":"csp.d.ts","sourceRoot":"","sources":["../src/csp.ts"],"names":[],"mappings":"AAoCA,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAgB7F;AAKD,wBAAgB,cAAc,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAyBtE"}

package/dist/csp.js

@@ -57,6 +57,9 @@ export function buildCspHeader(scriptHashes) {
         `script-src ${scriptSrc}`,
         "style-src 'self' 'unsafe-inline'",
         "img-src 'self' data:",
+        // Generated assistant speech is played from a per-turn blob: object URL in the browser.
+        // Keep media playback local to same-origin/static assets and ephemeral object URLs only.
+        "media-src 'self' blob:",
         "connect-src 'self'",
         "font-src 'self'",
         // `manifest-src 'self'` is required for the PWA manifest at /manifest.webmanifest to load

package/dist/deps.d.ts

@@ -5,13 +5,18 @@ import type { EvidenceStore } from "@oscharko-dev/keiko-evidence";
 import type { RunRegistry } from "./runs.js";
 import { type UiStore } from "./store/index.js";
 import { type TerminalExecutionManager } from "./terminal.js";
+import { type CommandRunnerManager } from "./command-runner.js";
+import { type ContainerRunnerManager } from "./runtime/containerRunner.js";
 import { type BrowserSessionManager } from "@oscharko-dev/keiko-tools";
 import { type MemoryVaultStore } from "@oscharko-dev/keiko-memory-vault";
 import { type ConsolidationJobRegistry } from "./memory-consolidation-registry.js";
-import type { OpenAIEmbeddingBatchOutcome, OpenAIEmbeddingBatchRequest, OpenAIEmbeddingOutcome, OpenAIEmbeddingRequest } from "@oscharko-dev/keiko-model-gateway";
+import type { OpenAIEmbeddingBatchOutcome, OpenAIEmbeddingBatchRequest, OpenAIEmbeddingOutcome, OpenAIEmbeddingRequest, RealtimeNegotiationOutcome, RealtimeNegotiationRequest, SpeechToTextOutcome, SpeechToTextRequest, TextToSpeechOutcome, TextToSpeechRequest, TextToSpeechStreamOutcome } from "@oscharko-dev/keiko-model-gateway";
 import { type RelationshipHandlerDeps } from "./relationship-handlers.js";
+import type { WorkspaceCleanupService, WorkspaceHealthService, WorkspaceLifecycleService, WorkspaceProvisioningService, WorkspaceReconciliationService, WorkspaceRepairService } from "./task-workspace/types.js";
 import { type GroundingLimits } from "@oscharko-dev/keiko-contracts/bff-wire";
 import type { EditorLanguageRouteOptions } from "./editor/languageRoutes.js";
+import type { RuntimeCapabilityRouteOptions } from "./runtime/capabilityRoutes.js";
+import type { GitRouteOptions } from "./gitRoutes.js";
 import type { KnowledgeStoreKeyProvider } from "@oscharko-dev/keiko-local-knowledge";
 import { type QiRetentionAuditSink } from "./qualityIntelligence/retentionEnforcement.js";
 export type Redactor = (value: unknown) => unknown;
@@ -44,20 +49,36 @@ export interface UiHandlerDeps {
     readonly uiDbPath?: string | undefined;
     readonly preferredProjectPath?: string | undefined;
     readonly terminal?: TerminalExecutionManager | undefined;
+    readonly commandRunner?: CommandRunnerManager | undefined;
+    readonly containerRunner?: ContainerRunnerManager | undefined;
     readonly browser?: BrowserSessionManager | undefined;
     readonly memoryVault?: MemoryVaultStore | undefined;
     readonly consolidationJobs?: ConsolidationJobRegistry | undefined;
     readonly gatewayConfig?: RuntimeGatewayConfig | undefined;
     readonly gatewaySetupTester?: ((config: GatewayConfig, candidateModelIds: readonly string[]) => Promise<readonly string[]>) | undefined;
     readonly gatewayModelDiscovery?: ((baseUrl: string, apiKey: string, apiKeyHeaderName?: string, egress?: GatewayEgressConfig) => Promise<GatewayModelDiscoveryOutput>) | undefined;
+    readonly gatewayReadinessFetch?: typeof fetch | undefined;
     readonly figmaCredentialTester?: ((accessToken: string, egress?: GatewayEgressConfig) => Promise<void>) | undefined;
     readonly editorLanguageRouteOptions?: EditorLanguageRouteOptions | undefined;
+    readonly runtimeCapabilityRouteOptions?: RuntimeCapabilityRouteOptions | undefined;
+    readonly gitRouteOptions?: GitRouteOptions | undefined;
     readonly localKnowledgeEmbeddingRequest?: ((request: OpenAIEmbeddingRequest) => Promise<OpenAIEmbeddingOutcome>) | undefined;
     readonly localKnowledgeEmbeddingBatchRequest?: ((request: OpenAIEmbeddingBatchRequest) => Promise<OpenAIEmbeddingBatchOutcome>) | undefined;
     readonly relationship?: RelationshipHandlerDeps | undefined;
+    readonly workspaceProvisioning?: WorkspaceProvisioningService | undefined;
+    readonly managedTaskWorkspaceRoot?: string | undefined;
+    readonly workspaceLifecycle?: WorkspaceLifecycleService | undefined;
+    readonly workspaceReconciliation?: WorkspaceReconciliationService | undefined;
+    readonly workspaceRepair?: WorkspaceRepairService | undefined;
+    readonly workspaceHealth?: WorkspaceHealthService | undefined;
+    readonly workspaceCleanup?: WorkspaceCleanupService | undefined;
     readonly evidenceDir?: string | undefined;
     readonly localKnowledgeKeyProvider?: KnowledgeStoreKeyProvider | undefined;
     readonly contextProfile?: ContextProfile | undefined;
+    readonly voiceTranscriptionRequest?: ((request: SpeechToTextRequest) => Promise<SpeechToTextOutcome>) | undefined;
+    readonly voiceSpeechRequest?: ((request: TextToSpeechRequest) => Promise<TextToSpeechOutcome>) | undefined;
+    readonly voiceSpeechStreamRequest?: ((request: TextToSpeechRequest) => Promise<TextToSpeechStreamOutcome>) | undefined;
+    readonly voiceRealtimeNegotiationRequest?: ((request: RealtimeNegotiationRequest) => Promise<RealtimeNegotiationOutcome>) | undefined;
 }
 export interface BuildHandlerDepsOptions {
     readonly configPath: string | undefined;
@@ -67,6 +88,12 @@ export interface BuildHandlerDepsOptions {
     readonly modelPortFactory?: ModelPortFactory | undefined;
     readonly uiDbPath?: string | undefined;
     readonly store?: UiStore | undefined;
+    readonly workspaceProvisioning?: WorkspaceProvisioningService | undefined;
+    readonly workspaceLifecycle?: WorkspaceLifecycleService | undefined;
+    readonly workspaceReconciliation?: WorkspaceReconciliationService | undefined;
+    readonly workspaceRepair?: WorkspaceRepairService | undefined;
+    readonly workspaceHealth?: WorkspaceHealthService | undefined;
+    readonly workspaceCleanup?: WorkspaceCleanupService | undefined;
     readonly initialProjectPath?: string | undefined;
     readonly gatewaySetupTester?: ((config: GatewayConfig, candidateModelIds: readonly string[]) => Promise<readonly string[]>) | undefined;
     readonly gatewayModelDiscovery?: ((baseUrl: string, apiKey: string, apiKeyHeaderName?: string, egress?: GatewayEgressConfig) => Promise<GatewayModelDiscoveryOutput>) | undefined;

package/dist/deps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../src/deps.ts"],"names":[],"mappings":"AAQA,OAAO,EAML,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAM7D,OAAO,EAA2B,KAAK,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAG7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAML,KAAK,OAAO,EACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAkC,KAAK,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC9F,OAAO,EAA+B,KAAK,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACpG,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,EACvB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAG7E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,+CAA+C,CAAC;AAIvD,MAAM,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;AAMnD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,CAAC;AAC1E,KAAK,mBAAmB,GAAG,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;AAEhE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,OAAO,IAAI,aAAa,GAAG,SAAS,CAAC;IACrC,OAAO,IAAI,OAAO,CAAC;IACnB,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CAChE;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjD;AAED,MAAM,MAAM,2BAA2B,GAAG,SAAS,MAAM,EAAE,GAAG,uBAAuB,CAAC;AAEtF,MAAM,WAAW,aAAa;IAE5B,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;IAE3C,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAEhC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IAEtC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IAExB,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAElD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAE5B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAE/B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAE5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAG1D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAGxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAGvC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAGnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAGzD,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IAGrD,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAEpD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAGlE,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAE1D,QAAQ,CAAC,kBAAkB,CAAC,EACxB,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC,GAC7F,SAAS,CAAC;IAEd,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,CAAC,CACC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,gBAAgB,CAAC,EAAE,MAAM,EACzB,MAAM,CAAC,EAAE,mBAAmB,KACzB,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAC1C,SAAS,CAAC;IAEd,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GACtE,SAAS,CAAC;IAGd,QAAQ,CAAC,0BAA0B,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAG7E,QAAQ,CAAC,8BAA8B,CAAC,EACpC,CAAC,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC,GACtE,SAAS,CAAC;IAId,QAAQ,CAAC,mCAAmC,CAAC,EACzC,CAAC,CAAC,OAAO,EAAE,2BAA2B,KAAK,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAChF,SAAS,CAAC;IAId,QAAQ,CAAC,YAAY,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAI5D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAK1C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAK3E,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;CACtD;AAED,MAAM,WAAW,uBAAuB;IAEtC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAExC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IAExB,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAE5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAGzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEvC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAGrC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEjD,QAAQ,CAAC,kBAAkB,CAAC,EACxB,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC,GAC7F,SAAS,CAAC;IAEd,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,CAAC,CACC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,gBAAgB,CAAC,EAAE,MAAM,EACzB,MAAM,CAAC,EAAE,mBAAmB,KACzB,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAC1C,SAAS,CAAC;IAEd,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GACtE,SAAS,CAAC;IAId,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACjE,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;CACtD;AA2HD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,GAAG,SAAS,CAEnF;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAExE;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,GAAG,eAAe,GAAG,KAAK,GAAG,QAAQ,CAAC,GACvE,mBAAmB,GAAG,SAAS,CAOjC;AA0CD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe,CAG3E;AAGD,YAAY,EAAE,eAAe,EAAE,CAAC;AA8FhC,wBAAgB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,QAAQ,CAS9E;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE,CAE9E;AAED,wBAAgB,uCAAuC,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE,CAO9F;AAED,wBAAgB,0CAA0C,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAMvF;AA8LD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa,CAiDlF"}
+{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../src/deps.ts"],"names":[],"mappings":"AAQA,OAAO,EAML,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAM7D,OAAO,EAA2B,KAAK,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAG7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAML,KAAK,OAAO,EACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAkC,KAAK,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC9F,OAAO,EAA8B,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAA+B,KAAK,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACpG,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,4BAA4B,CAAC;AAoBpC,OAAO,KAAK,EACV,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,4BAA4B,EAC5B,8BAA8B,EAC9B,sBAAsB,EACvB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGtD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,+CAA+C,CAAC;AAIvD,MAAM,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;AAMnD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,CAAC;AAC1E,KAAK,mBAAmB,GAAG,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;AAEhE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,OAAO,IAAI,aAAa,GAAG,SAAS,CAAC;IACrC,OAAO,IAAI,OAAO,CAAC;IACnB,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CAChE;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjD;AAED,MAAM,MAAM,2BAA2B,GAAG,SAAS,MAAM,EAAE,GAAG,uBAAuB,CAAC;AAEtF,MAAM,WAAW,aAAa;IAE5B,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;IAE3C,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAEhC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IAEtC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IAExB,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAElD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAE5B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAE/B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAE5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAG1D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAGxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAGvC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAGnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAIzD,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAI1D,QAAQ,CAAC,eAAe,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAG9D,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IAGrD,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAEpD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAGlE,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAE1D,QAAQ,CAAC,kBAAkB,CAAC,EACxB,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC,GAC7F,SAAS,CAAC;IAEd,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,CAAC,CACC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,gBAAgB,CAAC,EAAE,MAAM,EACzB,MAAM,CAAC,EAAE,mBAAmB,KACzB,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAC1C,SAAS,CAAC;IAGd,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;IAE1D,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GACtE,SAAS,CAAC;IAGd,QAAQ,CAAC,0BAA0B,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAG7E,QAAQ,CAAC,6BAA6B,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAGnF,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAGvD,QAAQ,CAAC,8BAA8B,CAAC,EACpC,CAAC,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC,GACtE,SAAS,CAAC;IAId,QAAQ,CAAC,mCAAmC,CAAC,EACzC,CAAC,CAAC,OAAO,EAAE,2BAA2B,KAAK,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAChF,SAAS,CAAC;IAId,QAAQ,CAAC,YAAY,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAI5D,QAAQ,CAAC,qBAAqB,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IAG1E,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAKvD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAIpE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,eAAe,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAK9D,QAAQ,CAAC,eAAe,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAIhE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAK1C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAK3E,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAKrD,QAAQ,CAAC,yBAAyB,CAAC,EAC/B,CAAC,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC,GAChE,SAAS,CAAC;IAMd,QAAQ,CAAC,kBAAkB,CAAC,EACxB,CAAC,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC,GAChE,SAAS,CAAC;IAId,QAAQ,CAAC,wBAAwB,CAAC,EAC9B,CAAC,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,yBAAyB,CAAC,CAAC,GACtE,SAAS,CAAC;IAOd,QAAQ,CAAC,+BAA+B,CAAC,EACrC,CAAC,CAAC,OAAO,EAAE,0BAA0B,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC,GAC9E,SAAS,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IAEtC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAExC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IAExB,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAE5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAGzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEvC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAGrC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IAG1E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAGpE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,eAAe,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAG9D,QAAQ,CAAC,eAAe,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAGhE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEjD,QAAQ,CAAC,kBAAkB,CAAC,EACxB,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC,GAC7F,SAAS,CAAC;IAEd,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,CAAC,CACC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,gBAAgB,CAAC,EAAE,MAAM,EACzB,MAAM,CAAC,EAAE,mBAAmB,KACzB,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAC1C,SAAS,CAAC;IAEd,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GACtE,SAAS,CAAC;IAId,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACjE,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;CACtD;AA2HD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,GAAG,SAAS,CAEnF;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAExE;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,GAAG,eAAe,GAAG,KAAK,GAAG,QAAQ,CAAC,GACvE,mBAAmB,GAAG,SAAS,CAOjC;AA0CD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe,CAG3E;AAGD,YAAY,EAAE,eAAe,EAAE,CAAC;AA8FhC,wBAAgB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,QAAQ,CAS9E;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE,CAE9E;AAED,wBAAgB,uCAAuC,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE,CAO9F;AAED,wBAAgB,0CAA0C,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAMvF;AAuoBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa,CA0ClF"}