@pellux/goodvibes-sdk 0.21.29 → 0.21.33

package/dist/_internal/platform/runtime/telemetry/api.js

@@ -1,4 +1,5 @@
 import { VERSION } from '../../version.js';
+import { sseSubscribers, telemetryBufferFill } from '../metrics.js';
 import { normalizeError } from '../../utils/error-display.js';
 import { SpanKind as SpanKinds, SpanStatusCode } from './types.js';
 import { ALL_DOMAINS, appendBounded, buildAttributes, buildListResponse, buildOtlpLogDocumentFromRecords, buildOtlpMetricDocumentFromState, buildOtlpTraceDocumentFromSpans, buildRecordId, buildSpanCursor, buildSpanId, clampLimit, DEFAULT_ERROR_LIMIT, DEFAULT_EVENT_LIMIT, DEFAULT_SPAN_LIMIT, extractErrorCandidate, extractProvider, extractRecordSequence, inferErrorSource, inferSeverity, isErrorEventType, normalizePayload, normalizeTraceId, sanitizeRecord, sanitizeSpan, SERVICE_NAME, summarizePayload, toAttributeValue, toObjectMap, } from './api-helpers.js';
@@ -153,6 +154,8 @@ export class TelemetryApiService {
         if (requestedCursor) {
             this.resolveCursor(this.records, requestedCursor);
         }
+        // Shared teardown closure — called from both abort and cancel paths (PERF-04).
+        let teardown = () => { };
         const stream = new ReadableStream({
             start: (controller) => {
                 if (requestedCursor) {
@@ -171,12 +174,21 @@ export class TelemetryApiService {
                     const projected = sanitizeRecord(record, view);
                     controller.enqueue(encoder.encode(`id: ${projected.id}\nevent: telemetry\ndata: ${JSON.stringify(projected)}\n\n`));
                 });
+                // C-1: update SSE subscriber gauge on open
+                sseSubscribers.set(this.subscribers.size, { stream_type: 'telemetry' });
                 const heartbeat = setInterval(() => {
                     controller.enqueue(encoder.encode(': heartbeat\n\n'));
                 }, 15_000);
-                request.signal.addEventListener('abort', () => {
+                // Don't block clean process exit (PERF-07).
+                heartbeat.unref?.();
+                teardown = () => {
                     clearInterval(heartbeat);
                     unsub();
+                    // C-1: update SSE subscriber gauge on close
+                    sseSubscribers.set(this.subscribers.size, { stream_type: 'telemetry' });
+                };
+                request.signal.addEventListener('abort', () => {
+                    teardown();
                     controller.close();
                 }, { once: true });
                 controller.enqueue(encoder.encode(`event: ready\ndata: ${JSON.stringify({
@@ -188,7 +200,8 @@ export class TelemetryApiService {
                 })}\n\n`));
             },
             cancel: () => {
-                unsub();
+                // PERF-04: cancel() path must also clear the heartbeat interval.
+                teardown();
             },
         });
         return new Response(stream, {
@@ -249,6 +262,8 @@ export class TelemetryApiService {
             appendBounded(this.errors, record, this.errorLimit);
             this.errorCountsByCategory.set(normalizedError.category, (this.errorCountsByCategory.get(normalizedError.category) ?? 0) + 1);
         }
+        // C-1: update telemetry buffer fill gauge
+        telemetryBufferFill.set(this.records.length / this.eventLimit);
         this.captureSyntheticSpan(record);
         this.notify(record);
     }
@@ -428,7 +443,7 @@ export class TelemetryApiService {
         return attributes;
     }
     applyRecordFilter(records, filter, view) {
-        const filtered = [...records].filter((record) => this.recordMatches(record, filter));
+        const filtered = records.filter((record) => this.recordMatches(record, filter));
         filtered.sort((left, right) => {
             const timestampDelta = right.timestamp - left.timestamp;
             if (timestampDelta !== 0)
@@ -452,7 +467,7 @@ export class TelemetryApiService {
     }
     applySpanFilter(filter, view) {
         const normalizedTraceId = filter.traceId ? normalizeTraceId(filter.traceId) : undefined;
-        const filtered = [...this.spans].filter((span) => {
+        const filtered = this.spans.filter((span) => {
             if (filter.since !== undefined && span.startTimeMs < filter.since)
                 return false;
             if (filter.until !== undefined && span.endTimeMs > filter.until)

package/dist/_internal/platform/runtime/telemetry/exporters/otlp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"otlp.d.ts","sourceRoot":"","sources":["../../../../../../src/_internal/platform/runtime/telemetry/exporters/otlp.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAgB,MAAM,YAAY,CAAC;AAkF3D;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,YAAa,YAAW,YAAY;IAC/C,QAAQ,CAAC,IAAI,UAAU;IAEvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAEtB;IACF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;gBAEnC,MAAM,EAAE,UAAU;IAyB9B;;;;;;;;OAQG;IACG,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAYlD;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAY5B;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAc/B;;;OAGG;YACW,WAAW;IA6BzB;;OAEG;IACH,OAAO,CAAC,eAAe;CAWxB"}
+{"version":3,"file":"otlp.d.ts","sourceRoot":"","sources":["../../../../../../src/_internal/platform/runtime/telemetry/exporters/otlp.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAgB,MAAM,YAAY,CAAC;AAoF3D;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,YAAa,YAAW,YAAY;IAC/C,QAAQ,CAAC,IAAI,UAAU;IAEvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAEtB;IACF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;gBAEnC,MAAM,EAAE,UAAU;IAyB9B;;;;;;;;OAQG;IACG,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAalD;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAa5B;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAe/B;;;OAGG;YACW,WAAW;IA6BzB;;OAEG;IACH,OAAO,CAAC,eAAe;CAexB"}

package/dist/_internal/platform/runtime/telemetry/exporters/otlp.js

@@ -1,5 +1,7 @@
 import { DEFAULT_OTLP_CONFIG, DEFAULT_QUEUE_CONFIG } from './types.js';
 import { ExportQueue } from './queue.js';
+import { logger } from '../../../utils/logger.js';
+import { instrumentedFetch } from '../../../utils/fetch-with-timeout.js';
 /**
  * Serialises a ReadableSpan[] into OTLP/HTTP JSON format (simplified).
  *
@@ -137,7 +139,8 @@ export class OtlpExporter {
             }
         }
         catch (err) {
-            console.error('[OtlpExporter] export() error (non-fatal):', err);
+            // OBS-07: use structured logger, not console
+            logger.error('[OtlpExporter] export() error (non-fatal)', { error: err instanceof Error ? err.message : String(err) });
         }
     }
     /**
@@ -153,7 +156,8 @@ export class OtlpExporter {
             await this._queue.drain();
         }
         catch (err) {
-            console.error('[OtlpExporter] flush() error (non-fatal):', err);
+            // OBS-07: use structured logger, not console
+            logger.error('[OtlpExporter] flush() error (non-fatal)', { error: err instanceof Error ? err.message : String(err) });
         }
     }
     /**
@@ -170,7 +174,8 @@ export class OtlpExporter {
             await this._queue.shutdown();
         }
         catch (err) {
-            console.error('[OtlpExporter] shutdown() error (non-fatal):', err);
+            // OBS-07: use structured logger, not console
+            logger.error('[OtlpExporter] shutdown() error (non-fatal)', { error: err instanceof Error ? err.message : String(err) });
         }
     }
     // ── Private HTTP transport ────────────────────────────────────────────────
@@ -183,7 +188,7 @@ export class OtlpExporter {
         const timer = setTimeout(() => controller.abort(), this._config.timeoutMs);
         try {
             const body = serialiseSpans(batch);
-            const response = await fetch(this._config.endpoint, {
+            const response = await instrumentedFetch(this._config.endpoint, {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
@@ -205,10 +210,18 @@ export class OtlpExporter {
      */
     _onExportResult(result) {
         if (result.code === 'failure') {
-            console.error(`[OtlpExporter] Export failed permanently — ${result.spanCount} span(s) lost after ${result.attempts} attempt(s): ${result.error}`);
+            // OBS-07: use structured logger so OTLP exporter failures appear in activity log
+            logger.error('[OtlpExporter] Export failed permanently — spans lost', {
+                spanCount: result.spanCount,
+                attempts: result.attempts,
+                error: result.error,
+            });
         }
         else if (result.code === 'dropped') {
-            console.warn(`[OtlpExporter] Dropped ${result.spanCount} span(s) due to queue overflow`);
+            // OBS-07: use structured logger
+            logger.warn('[OtlpExporter] Dropped spans due to queue overflow', {
+                spanCount: result.spanCount,
+            });
         }
     }
 }

package/dist/_internal/platform/runtime/telemetry/exporters/queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../../../../src/_internal/platform/runtime/telemetry/exporters/queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EACV,iBAAiB,EAEjB,oBAAoB,EACpB,QAAQ,EAET,MAAM,YAAY,CAAC;AA2BpB;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAuB;IAElD,2CAA2C;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,KAAK,CAAK;IAElB,0CAA0C;IAC1C,OAAO,CAAC,SAAS,CAAS;IAC1B,kEAAkE;IAClE,OAAO,CAAC,SAAS,CAAS;IAE1B;;;;OAIG;gBAED,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,EAChC,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,EACnC,QAAQ,CAAC,EAAE,oBAAoB;IAYjC,gDAAgD;IAChD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,+CAA+C;IAC/C,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;;;;;OAMG;IACH,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,IAAI;IA6BpC;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAO/B,0DAA0D;IAC1D,OAAO,CAAC,eAAe;IAOvB,4DAA4D;YAC9C,UAAU;IAgBxB,oEAAoE;IACpE,OAAO,CAAC,QAAQ;IAShB;;;OAGG;YACW,aAAa;IAyC3B,2DAA2D;IAC3D,OAAO,CAAC,WAAW;CAQpB"}
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../../../../src/_internal/platform/runtime/telemetry/exporters/queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EACV,iBAAiB,EAEjB,oBAAoB,EACpB,QAAQ,EAET,MAAM,YAAY,CAAC;AA4BpB;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAuB;IAElD,2CAA2C;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,KAAK,CAAK;IAElB,0CAA0C;IAC1C,OAAO,CAAC,SAAS,CAAS;IAC1B,kEAAkE;IAClE,OAAO,CAAC,SAAS,CAAS;IAE1B;;;;OAIG;gBAED,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,EAChC,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,EACnC,QAAQ,CAAC,EAAE,oBAAoB;IAYjC,gDAAgD;IAChD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,+CAA+C;IAC/C,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;;;;;OAMG;IACH,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,IAAI;IA4BpC;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAO/B,0DAA0D;IAC1D,OAAO,CAAC,eAAe;IAOvB,4DAA4D;YAC9C,UAAU;IAgBxB,oEAAoE;IACpE,OAAO,CAAC,QAAQ;IAShB;;;OAGG;YACW,aAAa;IA0C3B,2DAA2D;IAC3D,OAAO,CAAC,WAAW;CAQpB"}

package/dist/_internal/platform/runtime/telemetry/exporters/queue.js

@@ -1,5 +1,6 @@
 import { DEFAULT_QUEUE_CONFIG } from './types.js';
 import { summarizeError } from '../../../utils/error-display.js';
+import { logger } from '../../../utils/logger.js';
 /**
  * Computes the delay in milliseconds for a given retry attempt using
  * exponential backoff with jitter (±10%).
@@ -95,7 +96,8 @@ export class ExportQueue {
                     completedAt: Date.now(),
                 });
             }
-            console.warn(`[ExportQueue] Queue overflow — dropped oldest batch (size=${this._config.maxSize})`);
+            // OBS-07: structured logger, not console
+            logger.warn('[ExportQueue] Queue overflow — dropped oldest batch', { maxSize: this._config.maxSize });
         }
         this._ring[this._tail] = { batch, enqueuedAt: Date.now() };
         this._tail = (this._tail + 1) % this._config.maxSize;
@@ -183,13 +185,18 @@ export class ExportQueue {
                 lastError = summarizeError(err);
                 if (attempt < maxRetries) {
                     const delay = computeDelay(attempt, this._config.retry);
-                    console.warn(`[ExportQueue] Export attempt ${attempt + 1} failed — retrying in ${delay}ms: ${lastError}`);
+                    // OBS-07: structured logger, not console
+                    logger.warn('[ExportQueue] Export attempt failed — retrying', { attempt: attempt + 1, delayMs: delay, error: lastError });
                     await sleep(delay);
                 }
             }
         }
-        // All retries exhausted
-        console.error(`[ExportQueue] Export failed after ${attempts} attempt(s) — dropping batch of ${entry.batch.length} span(s): ${lastError}`);
+        // All retries exhausted — OBS-07: structured logger
+        logger.error('[ExportQueue] Export failed after all retries — batch dropped', {
+            attempts,
+            spanCount: entry.batch.length,
+            error: lastError,
+        });
         this._emitResult({
             code: 'failure',
             spanCount: entry.batch.length,

package/dist/_internal/platform/runtime/telemetry/meter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"meter.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/telemetry/meter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EACV,OAAO,EACP,KAAK,EACL,SAAS,EAET,WAAW,EAEZ,MAAM,YAAY,CAAC;AAwFpB;;;;;;;;;;;;;;GAcG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgC;IAC5D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;gBAExC,MAAM,EAAE,WAAW;IAI/B,qDAAqD;IACrD,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAS9B;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS;IASlC;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK;CAQ3B"}
+{"version":3,"file":"meter.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/telemetry/meter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EACV,OAAO,EACP,KAAK,EACL,SAAS,EAET,WAAW,EAEZ,MAAM,YAAY,CAAC;AA4FpB;;;;;;;;;;;;;;GAcG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgC;IAC5D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;gBAExC,MAAM,EAAE,WAAW;IAI/B,qDAAqD;IACrD,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAS9B;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS;IASlC;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK;CAQ3B"}

package/dist/_internal/platform/runtime/telemetry/meter.js

@@ -1,3 +1,4 @@
+import { filterMetricLabels } from './api-helpers.js';
 // ── Label key serialisation ─────────────────────────────────────────────────────
 /**
  * Serialise a label set to a stable, deterministic string key.
@@ -17,7 +18,8 @@ class CounterImpl {
     add(delta = 1, labels) {
         if (delta < 0)
             return; // Counters are monotonically increasing
-        const key = labelKey(labels);
+        const filtered = labels ? filterMetricLabels(labels) : labels;
+        const key = labelKey(filtered);
         this._values.set(key, (this._values.get(key) ?? 0) + delta);
     }
     value(labels) {
@@ -27,7 +29,8 @@ class CounterImpl {
 class HistogramImpl {
     _accumulators = new Map();
     record(value, labels) {
-        const key = labelKey(labels);
+        const filtered = labels ? filterMetricLabels(labels) : labels;
+        const key = labelKey(filtered);
         const acc = this._accumulators.get(key);
         if (acc === undefined) {
             this._accumulators.set(key, { count: 1, sum: value, min: value, max: value });
@@ -59,7 +62,8 @@ class HistogramImpl {
 class GaugeImpl {
     _values = new Map();
     set(value, labels) {
-        this._values.set(labelKey(labels), value);
+        const filtered = labels ? filterMetricLabels(labels) : labels;
+        this._values.set(labelKey(filtered), value);
     }
     value(labels) {
         return this._values.get(labelKey(labels)) ?? 0;

package/dist/_internal/platform/runtime/telemetry/redaction-config.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Configure telemetry redaction behavior. Called once at daemon bootstrap from
+ * config.telemetry.includeRawPrompts. When true, a WARN log is emitted so ops
+ * can see the opt-in is active.
+ */
+export declare function setTelemetryIncludeRawPrompts(value: boolean): void;
+/** Read the current flag. Reserved for future view='raw' gating. */
+export declare function getTelemetryIncludeRawPrompts(): boolean;
+//# sourceMappingURL=redaction-config.d.ts.map

package/dist/_internal/platform/runtime/telemetry/redaction-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction-config.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/telemetry/redaction-config.ts"],"names":[],"mappings":"AAsCA;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAQlE;AAED,oEAAoE;AACpE,wBAAgB,6BAA6B,IAAI,OAAO,CAEvD"}

package/dist/_internal/platform/runtime/telemetry/redaction-config.js

@@ -0,0 +1,52 @@
+/**
+ * OBS-06: Telemetry prompt/response redaction configuration.
+ *
+ * Privacy model (what actually ships):
+ *
+ * - Internal RuntimeEventBus carries RAW prompt/response strings. Internal
+ *   consumers (conversation reducer, channel reply pipeline, stream UI)
+ *   require raw content to render and advance state.
+ *
+ * - TelemetryApiService ring buffer stores raw payloads.
+ *
+ * - Egress boundary: `listEvents({view: 'safe'})` (the default) runs records
+ *   through `sanitizeRecord` → `redactStructuredData` (see
+ *   `utils/redaction.ts`). Any string value whose key matches
+ *   `CONTENT_KEY_PATTERN` (prompt, response, content, accumulated, reasoning,
+ *   body, text, stdout, stderr, output, input, transcript, command,
+ *   arguments, query, detail, summary, message) is replaced with
+ *   `[REDACTED_TEXT length=N]`. Values carrying specific secret shapes
+ *   (API keys, tokens) are pattern-redacted regardless of key.
+ *
+ * - `listEvents({view: 'raw'})` skips redaction and is gated at the HTTP
+ *   boundary on the `admin` or `read:telemetry-sensitive` scope (see
+ *   daemon/telemetry-routes.ts).
+ *
+ * This module owns the `telemetry.includeRawPrompts` config flag. The flag
+ * is wired at daemon bootstrap by `facade-composition.ts` via
+ * `setTelemetryIncludeRawPrompts(configManager.get('telemetry.includeRawPrompts'))`.
+ * Opt-in (true) emits a startup WARN so operators can see the configuration.
+ *
+ * Known gap: `listEvents({view: 'raw'})` does not yet consult the flag — raw
+ * view access is gated by scope only. The flag is available for future
+ * hardening (e.g. refuse raw view regardless of scope when the flag is off).
+ */
+import { logger } from '../../utils/logger.js';
+/** Module-scoped flag. Wired once at daemon bootstrap. */
+let _includeRawPrompts = false;
+/**
+ * Configure telemetry redaction behavior. Called once at daemon bootstrap from
+ * config.telemetry.includeRawPrompts. When true, a WARN log is emitted so ops
+ * can see the opt-in is active.
+ */
+export function setTelemetryIncludeRawPrompts(value) {
+    _includeRawPrompts = value;
+    if (value) {
+        logger.warn('telemetry.includeRawPrompts is ENABLED — raw prompt/response content will appear in telemetry events. '
+            + 'This setting is for debugging only. Disable in production to avoid PII/secret exfiltration.');
+    }
+}
+/** Read the current flag. Reserved for future view='raw' gating. */
+export function getTelemetryIncludeRawPrompts() {
+    return _includeRawPrompts;
+}

package/dist/_internal/platform/runtime/tools/phases/budget.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../../../../../../src/_internal/platform/runtime/tools/phases/budget.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAsB,WAAW,EAAsB,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAE5G;;;;;;;;;;;;;GAaG;AAEH,iEAAiE;AACjE,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEhD,wBAAsB,WAAW,CAC/B,KAAK,EAAE,QAAQ,EACf,KAAK,EAAE,IAAI,EACX,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,mBAAmB,EAC3B,UAAU,EAAE,gBAAgB,GAC3B,OAAO,CAAC,WAAW,CAAC,CA8CtB"}
+{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../../../../../../src/_internal/platform/runtime/tools/phases/budget.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAE9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAsB,WAAW,EAAsB,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAE5G;;;;;;;;;;;;;GAaG;AAEH,iEAAiE;AACjE,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEhD,wBAAsB,WAAW,CAC/B,KAAK,EAAE,QAAQ,EACf,KAAK,EAAE,IAAI,EACX,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,mBAAmB,EAC3B,UAAU,EAAE,gBAAgB,GAC3B,OAAO,CAAC,WAAW,CAAC,CA8CtB"}

package/dist/_internal/platform/runtime/tools/phases/budget.js

@@ -1,3 +1,4 @@
+import { toRecord } from '../../../utils/record-coerce.js';
 export async function budgetPhase(_call, _tool, context, record, checkpoint) {
     const start = performance.now();
     const phaseName = checkpoint === 'entry' ? 'budget-entry' : 'budget-exit';
@@ -71,7 +72,7 @@ function getTokenCount(record) {
         return undefined;
     // Double cast needed: ToolResult has no index signature, but tool implementations
     // may annotate results with extra numeric fields like `tokenCount`.
-    const raw = record.result['tokenCount'];
+    const raw = toRecord(record.result)['tokenCount'];
     return typeof raw === 'number' ? raw : undefined;
 }
 /**
@@ -82,6 +83,6 @@ function getCostUsd(record) {
     if (!record.result)
         return undefined;
     // Double cast needed: same reason as getTokenCount above.
-    const raw = record.result['costUsd'];
+    const raw = toRecord(record.result)['costUsd'];
     return typeof raw === 'number' ? raw : undefined;
 }

package/dist/_internal/platform/runtime/transports/daemon-http-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-http-client.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/transports/daemon-http-client.ts"],"names":[],"mappings":"AAiDA,OAAO,KAAK,EAoBV,aAAa,EAEb,oBAAoB,EAKrB,MAAM,iBAAiB,CAAC;AA0fzB,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CA8ChF"}
+{"version":3,"file":"daemon-http-client.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/transports/daemon-http-client.ts"],"names":[],"mappings":"AAiDA,OAAO,KAAK,EAoBV,aAAa,EAEb,oBAAoB,EAKrB,MAAM,iBAAiB,CAAC;AAupBzB,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CA8ChF"}

package/dist/_internal/platform/runtime/transports/daemon-http-client.js

@@ -26,6 +26,114 @@ async function withNullOnNotFound(run) {
 function asContractInput(input) {
     return input;
 }
+// ---------------------------------------------------------------------------
+// Runtime validators — replace `as unknown as X` casts with checked coercions
+// ---------------------------------------------------------------------------
+function assertObjectField(container, field, endpoint) {
+    if (container === null
+        || typeof container !== 'object'
+        || !(field in container)
+        || container[field] === null
+        || typeof container[field] !== 'object') {
+        throw new Error(`[${endpoint}] Expected response to contain object field "${field}"`);
+    }
+    return container[field];
+}
+function assertObjectOrNullField(container, field, endpoint) {
+    if (container === null || typeof container !== 'object') {
+        throw new Error(`[${endpoint}] Expected response to be an object`);
+    }
+    const value = container[field];
+    if (value === null || value === undefined)
+        return null;
+    if (typeof value !== 'object') {
+        throw new Error(`[${endpoint}] Expected field "${field}" to be an object or null`);
+    }
+    return value;
+}
+function assertArrayField(container, field, endpoint) {
+    if (container === null || typeof container !== 'object') {
+        throw new Error(`[${endpoint}] Expected response to be an object`);
+    }
+    const value = container[field];
+    if (!Array.isArray(value)) {
+        throw new Error(`[${endpoint}] Expected field "${field}" to be an array`);
+    }
+    return value;
+}
+function assertRuntimeTaskArray(tasks, endpoint) {
+    if (!Array.isArray(tasks)) {
+        throw new Error(`[${endpoint}] Expected "tasks" to be an array`);
+    }
+    for (const task of tasks) {
+        if (task === null || typeof task !== 'object' || typeof task.id !== 'string') {
+            throw new Error(`[${endpoint}] Task entry missing required "id" field`);
+        }
+    }
+    return tasks;
+}
+function assertSharedApprovalArray(approvals, endpoint) {
+    if (!Array.isArray(approvals)) {
+        throw new Error(`[${endpoint}] Expected "approvals" to be an array`);
+    }
+    return approvals;
+}
+function assertProviderRuntimeSnapshotArray(providers, endpoint) {
+    if (!Array.isArray(providers)) {
+        throw new Error(`[${endpoint}] Expected "providers" to be an array`);
+    }
+    for (const provider of providers) {
+        if (provider === null
+            || typeof provider !== 'object'
+            || typeof provider.providerId !== 'string') {
+            throw new Error(`[${endpoint}] Provider entry missing required "providerId" field`);
+        }
+    }
+    return providers;
+}
+function assertProviderRuntimeSnapshot(value, endpoint) {
+    if (value === null
+        || typeof value !== 'object'
+        || typeof value.providerId !== 'string') {
+        throw new Error(`[${endpoint}] Expected ProviderRuntimeSnapshot with "providerId" field`);
+    }
+    return value;
+}
+function assertProviderUsageSnapshot(value, endpoint) {
+    if (value === null
+        || typeof value !== 'object'
+        || typeof value.providerId !== 'string') {
+        throw new Error(`[${endpoint}] Expected ProviderUsageSnapshot with "providerId" field`);
+    }
+    return value;
+}
+function assertTelemetrySnapshot(value, endpoint) {
+    if (value === null
+        || typeof value !== 'object'
+        || value.version !== 1
+        || typeof value.generatedAt !== 'number') {
+        throw new Error(`[${endpoint}] Expected TelemetrySnapshot with version=1 and numeric "generatedAt"`);
+    }
+    return value;
+}
+function assertTelemetryListResponse(value, endpoint) {
+    if (value === null
+        || typeof value !== 'object'
+        || value.version !== 1
+        || !Array.isArray(value.items)) {
+        throw new Error(`[${endpoint}] Expected TelemetryListResponse with version=1 and "items" array`);
+    }
+    return value;
+}
+function assertTelemetryMetricsSnapshot(value, endpoint) {
+    if (value === null
+        || typeof value !== 'object'
+        || value.version !== 1
+        || typeof value.generatedAt !== 'number') {
+        throw new Error(`[${endpoint}] Expected HttpTransportTelemetryMetricsSnapshot with version=1 and numeric "generatedAt"`);
+    }
+    return value;
+}
 function normalizeSharedSessionRecord(record) {
     const candidate = record;
     return {
@@ -133,7 +241,7 @@ function createOperatorClient(transport, events) {
                 const response = await operatorApi.invoke('sessions.inputs.list', { sessionId, limit });
                 return (response.inputs ?? []).map((entry) => normalizeSharedSessionInput(entry));
             },
-            ensureSession: async (input = {}) => normalizeSharedSessionRecord((await operatorApi.sessions.create(buildSessionEnsureBody(input))).session),
+            ensureSession: async (input = {}) => normalizeSharedSessionRecord(assertObjectField(await operatorApi.sessions.create(buildSessionEnsureBody(input)), 'session', 'sessions.create')),
             close: async (sessionId) => {
                 const response = await withNullOnNotFound(() => operatorApi.sessions.close(sessionId));
                 return response?.session ? normalizeSharedSessionRecord(response.session) : null;
@@ -153,23 +261,25 @@ function createOperatorClient(transport, events) {
         tasks: {
             snapshot: async () => {
                 const { tasks } = await operatorApi.tasks.list();
-                return { tasks: tasks };
+                return { tasks: assertRuntimeTaskArray(tasks, 'tasks.list') };
             },
-            list: async (limit = 100) => (await operatorApi.tasks.list({ limit })).tasks,
+            list: async (limit = 100) => assertRuntimeTaskArray((await operatorApi.tasks.list({ limit })).tasks, 'tasks.list'),
             get: async (taskId) => {
                 const response = await withNullOnNotFound(() => operatorApi.tasks.get(taskId));
-                return (response?.task ?? null);
+                if (response?.task == null)
+                    return null;
+                return assertRuntimeTaskArray([response.task], 'tasks.get')[0] ?? null;
             },
-            running: async () => (await operatorApi.tasks.list()).tasks.filter((task) => task.status === 'running'),
+            running: async () => assertRuntimeTaskArray((await operatorApi.tasks.list()).tasks, 'tasks.list').filter((task) => task.status === 'running'),
             submit: async (input) => await operatorApi.invoke('tasks.create', buildTaskSubmitBody(input)),
             cancel: async (taskId) => await operatorApi.invoke('tasks.cancel', { taskId }),
             retry: async (taskId) => await operatorApi.invoke('tasks.retry', { taskId }),
         },
         approvals: {
-            list: async (limit = 100) => (await operatorApi.approvals.list({ limit })).approvals,
+            list: async (limit = 100) => assertSharedApprovalArray((await operatorApi.approvals.list({ limit })).approvals, 'approvals.list'),
             get: async (approvalId) => {
                 const approvals = await operatorApi.approvals.list({ limit: 200 });
-                return (approvals.approvals.find((entry) => entry.id === approvalId) ?? null);
+                return (assertSharedApprovalArray(approvals.approvals, 'approvals.list').find((entry) => entry.id === approvalId) ?? null);
             },
             claim: async (approvalId, actor, actorSurface = 'transport', note) => {
                 const response = await withNullOnNotFound(() => operatorApi.invoke('approvals.claim', { approvalId, actor, actorSurface, ...(note ? { note } : {}) }));
@@ -189,10 +299,21 @@ function createOperatorClient(transport, events) {
             },
         },
         providers: {
-            listIds: async () => (await operatorApi.providers.list()).providers.map((provider) => provider.providerId),
-            runtimeSnapshots: async () => (await operatorApi.providers.list()).providers,
-            runtimeSnapshot: async (providerId) => await withNullOnNotFound(() => operatorApi.providers.get(providerId)),
-            usageSnapshot: async (providerId) => await withNullOnNotFound(() => operatorApi.providers.usage(providerId)),
+            listIds: async () => assertProviderRuntimeSnapshotArray((await operatorApi.providers.list()).providers, 'providers.list')
+                .map((provider) => provider.providerId),
+            runtimeSnapshots: async () => assertProviderRuntimeSnapshotArray((await operatorApi.providers.list()).providers, 'providers.list'),
+            runtimeSnapshot: async (providerId) => {
+                const response = await withNullOnNotFound(() => operatorApi.providers.get(providerId));
+                if (response == null)
+                    return null;
+                return assertProviderRuntimeSnapshot(response, 'providers.get');
+            },
+            usageSnapshot: async (providerId) => {
+                const response = await withNullOnNotFound(() => operatorApi.providers.usage(providerId));
+                if (response == null)
+                    return null;
+                return assertProviderUsageSnapshot(response, 'providers.usage');
+            },
             accountSnapshot: async () => await operatorApi.accounts.snapshot(),
             localAuthSnapshot: async () => await operatorApi.localAuth.status(),
             snapshot: async () => {
@@ -201,7 +322,7 @@ function createOperatorClient(transport, events) {
                     operatorApi.accounts.snapshot(),
                     operatorApi.localAuth.status(),
                 ]);
-                const runtimeSnapshots = providerResponse.providers;
+                const runtimeSnapshots = assertProviderRuntimeSnapshotArray(providerResponse.providers, 'providers.list');
                 return {
                     providerIds: runtimeSnapshots.map((provider) => provider.providerId),
                     runtimeSnapshots,
@@ -216,11 +337,11 @@ function createOperatorClient(transport, events) {
             recentEvents: async (limit = 6) => (await operatorApi.invoke('control.messages.list', { limit })).messages ?? [],
         },
         telemetry: {
-            snapshot: async (query = 20) => await operatorApi.telemetry.snapshot(normalizeTelemetryQueryForSdk(query, 20)),
-            events: async (query = 100) => await operatorApi.telemetry.events(normalizeTelemetryQueryForSdk(query, 100)),
-            errors: async (query = 100) => await operatorApi.telemetry.errors(normalizeTelemetryQueryForSdk(query, 100)),
-            traces: async (query = 100) => await operatorApi.telemetry.traces(normalizeTelemetryQueryForSdk(query, 100)),
-            metrics: async (query = 100) => await operatorApi.telemetry.metrics(normalizeTelemetryQueryForSdk(query, 100)),
+            snapshot: async (query = 20) => assertTelemetrySnapshot(await operatorApi.telemetry.snapshot(normalizeTelemetryQueryForSdk(query, 20)), 'telemetry.snapshot'),
+            events: async (query = 100) => assertTelemetryListResponse(await operatorApi.telemetry.events(normalizeTelemetryQueryForSdk(query, 100)), 'telemetry.events'),
+            errors: async (query = 100) => assertTelemetryListResponse(await operatorApi.telemetry.errors(normalizeTelemetryQueryForSdk(query, 100)), 'telemetry.errors'),
+            traces: async (query = 100) => assertTelemetryListResponse(await operatorApi.telemetry.traces(normalizeTelemetryQueryForSdk(query, 100)), 'telemetry.traces'),
+            metrics: async (query = 100) => assertTelemetryMetricsSnapshot(await operatorApi.telemetry.metrics(normalizeTelemetryQueryForSdk(query, 100)), 'telemetry.metrics'),
             otlpTraces: async (query = 100) => await operatorApi.telemetry.otlp.traces(normalizeTelemetryQueryForSdk(query, 100)),
             otlpLogs: async (query = 100) => await operatorApi.telemetry.otlp.logs(normalizeTelemetryQueryForSdk(query, 100)),
             otlpMetrics: async (query = 100) => await operatorApi.telemetry.otlp.metrics(normalizeTelemetryQueryForSdk(query, 100)),

package/dist/_internal/platform/scheduler/scheduler.d.ts

@@ -37,10 +37,16 @@ interface TaskSchedulerConfig {
 export declare class TaskScheduler {
     private tasks;
     private timers;
-    private history;
+    /**
+     * Per-task run history indexed by taskId — O(1) push + trim per task run.
+     * The flat `history` array is derived from this on persist (PERF-03).
+     */
+    private historyByTask;
     private store;
     private readonly spawnTask?;
     private running;
+    /** Debounce handle for coalescing rapid successive save() calls (PERF-03). */
+    private _saveDebounceTimer;
     constructor(config: string | TaskSchedulerConfig);
     /** Load tasks from disk and start timers. */
     start(): Promise<void>;
@@ -54,7 +60,7 @@ export declare class TaskScheduler {
     setEnabled(taskId: string, enabled: boolean): boolean;
     /** Return all tasks as an array. */
     list(): ScheduledTask[];
-    /** Return the run history for a given task (up to MAX_HISTORY_PER_TASK). */
+    /** Return the run history for a given task (up to MAX_HISTORY_PER_TASK). O(1) via Map index. */
     getHistory(taskId: string): TaskRunRecord[];
     /** Return all run history records. */
     getAllHistory(): TaskRunRecord[];
@@ -77,8 +83,19 @@ export declare class TaskScheduler {
      * Returns the spawned agent ID.
      */
     private executeTask;
+    /**
+     * O(1) per-task history push + trim (PERF-03).
+     * The Map index makes both the push and the cap check O(1) instead of O(n) global filter.
+     */
     private pushHistory;
+    /** Flatten historyByTask Map into a single array for serialisation. */
+    private flatHistory;
     private save;
+    /**
+     * Debounced save: coalesces multiple rapid calls into a single disk write
+     * that fires SAVE_DEBOUNCE_MS after the last call (PERF-03).
+     */
+    private scheduleSave;
     private load;
 }
 export {};

package/dist/_internal/platform/scheduler/scheduler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/scheduler/scheduler.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAsBD,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,KAAK,MAAM,CAAC;CACd;AAiVD;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,KAAK,CAAyC;IACtD,OAAO,CAAC,MAAM,CAAyD;IACvE,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAId;IACb,OAAO,CAAC,OAAO,CAAS;gBAEZ,MAAM,EAAE,MAAM,GAAG,mBAAmB;IAehD,6CAA6C;IACvC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAY5B,uBAAuB;IACvB,IAAI,IAAI,IAAI;IAaZ,4EAA4E;IAC5E,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,UAAU,GAAG,WAAW,GAAG,YAAY,CAAC,GAAG,aAAa;IA+B9F,8DAA8D;IAC9D,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAQ/B,gCAAgC;IAChC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO;IAerD,oCAAoC;IACpC,IAAI,IAAI,aAAa,EAAE;IAIvB,4EAA4E;IAC5E,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,EAAE;IAI3C,sCAAsC;IACtC,aAAa,IAAI,aAAa,EAAE;IAIhC;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAI9D,oDAAoD;IACpD,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAIrC,2DAA2D;IAC3D,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAIzC,sDAAsD;IAChD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB7C,OAAO,CAAC,YAAY;IAkCpB,OAAO,CAAC,WAAW;IAQnB;;;;OAIG;YACW,WAAW;IA+CzB,OAAO,CAAC,WAAW;YAsBL,IAAI;YAOJ,IAAI;CAuDnB"}
+{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/scheduler/scheduler.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAsBD,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,KAAK,MAAM,CAAC;CACd;AAuVD;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,KAAK,CAAyC;IACtD,OAAO,CAAC,MAAM,CAAyD;IACvE;;;OAGG;IACH,OAAO,CAAC,aAAa,CAA2C;IAChE,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAId;IACb,OAAO,CAAC,OAAO,CAAS;IACxB,8EAA8E;IAC9E,OAAO,CAAC,kBAAkB,CAA8C;gBAE5D,MAAM,EAAE,MAAM,GAAG,mBAAmB;IAehD,6CAA6C;IACvC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAY5B,uBAAuB;IACvB,IAAI,IAAI,IAAI;IAaZ,4EAA4E;IAC5E,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,UAAU,GAAG,WAAW,GAAG,YAAY,CAAC,GAAG,aAAa;IA+B9F,8DAA8D;IAC9D,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAQ/B,gCAAgC;IAChC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO;IAerD,oCAAoC;IACpC,IAAI,IAAI,aAAa,EAAE;IAIvB,gGAAgG;IAChG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,EAAE;IAI3C,sCAAsC;IACtC,aAAa,IAAI,aAAa,EAAE;IAIhC;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAI9D,oDAAoD;IACpD,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAIrC,2DAA2D;IAC3D,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAIzC,sDAAsD;IAChD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB7C,OAAO,CAAC,YAAY;IAkCpB,OAAO,CAAC,WAAW;IAQnB;;;;OAIG;YACW,WAAW;IA+CzB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAcnB,uEAAuE;IACvE,OAAO,CAAC,WAAW;YAUL,IAAI;IAOlB;;;OAGG;IACH,OAAO,CAAC,YAAY;YASN,IAAI;CAgEnB"}