@posthog/wizard 2.81.1 → 2.83.0

package/dist/pi-DREdQRPP.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pi-DREdQRPP.js","names":[],"sources":["../src/shared/status-history.ts","../src/agent/runner/shared/progress-collector.ts","../src/agent/aio-capture.ts","../src/agent/runner/harness/pi/completion.ts","../src/agent/runner/harness/pi/cancellation.ts","../src/agent/runner/harness/pi/structured-output.ts","../src/agent/runner/harness/pi/index.ts"],"sourcesContent":["/** Shared FIFO window for agent snapshots and the terminal status panel. */\nexport const MAX_STATUS_MESSAGES = 10;\n\nexport function appendStatus(messages: string[], message: string): string[] {\n  if (messages.length > 0 && messages[messages.length - 1] === message) {\n    return messages;\n  }\n  return [...messages.slice(-(MAX_STATUS_MESSAGES - 1)), message];\n}\n","/**\n * The agent's own record of what it reported.\n *\n * `runAgent` accumulates its final `RunSnapshot` here, independently of any\n * observer, so a missing or throwing `onProgress` never makes the result\n * incomplete. The emitter wraps the caller's callback: it applies the event\n * here first, then hands a copy to the observer, and logs rather than\n * propagates anything the observer throws.\n */\n\nimport { logToFile } from '@utils/debug';\nimport { appendStatus } from '@shared/status-history';\nimport type {\n  AgentProgress,\n  ProgressEmitter,\n  SpinnerHandle,\n} from '../../progress';\nimport type { RunSnapshot } from './types';\n\nexport interface ProgressCollector {\n  emit: ProgressEmitter;\n  snapshot(): RunSnapshot;\n}\n\nexport function createProgressCollector(\n  onProgress?: (event: AgentProgress) => unknown,\n): ProgressCollector {\n  const snapshot: RunSnapshot = {\n    tasks: [],\n    statusMessages: [],\n    usage: {\n      inputTokens: 0,\n      outputTokens: 0,\n      cacheReadTokens: 0,\n      cacheCreationTokens: 0,\n    },\n  };\n\n  const apply = (event: AgentProgress): void => {\n    switch (event.kind) {\n      case 'tasks':\n        snapshot.tasks = event.tasks.map((t) => ({ ...t }));\n        break;\n      case 'status':\n        snapshot.statusMessages = appendStatus(\n          snapshot.statusMessages,\n          event.message,\n        );\n        break;\n      case 'stage':\n        snapshot.stage = event.stage;\n        break;\n      case 'url':\n        if (event.which === 'dashboard') snapshot.dashboardUrl = event.url;\n        else snapshot.notebookUrl = event.url;\n        break;\n      case 'usage':\n        snapshot.usage.inputTokens += event.delta.inputTokens;\n        snapshot.usage.outputTokens += event.delta.outputTokens;\n        snapshot.usage.cacheReadTokens += event.delta.cacheReadTokens;\n        snapshot.usage.cacheCreationTokens += event.delta.cacheCreationTokens;\n        break;\n      case 'finalCost':\n        snapshot.finalCostUsd = event.usd;\n        break;\n      case 'handoff':\n        snapshot.handoffText = event.text;\n        break;\n      default:\n        break;\n    }\n  };\n\n  const emit: ProgressEmitter = (event) => {\n    apply(event);\n    if (!onProgress) return;\n    try {\n      const observed = onProgress(structuredClone(event));\n      if (\n        observed &&\n        typeof (observed as PromiseLike<unknown>).then === 'function'\n      ) {\n        void Promise.resolve(observed).catch((error: unknown) => {\n          try {\n            logToFile(\n              `[agent] progress observer rejected on ${event.kind}:`,\n              error,\n            );\n          } catch {\n            // Logging is best effort.\n          }\n        });\n      }\n    } catch (error) {\n      // A broken projection is the host's problem, not the run's. Say so in\n      // the log and carry on; the snapshot above is the source of truth.\n      try {\n        logToFile(\n          `[agent] progress observer threw on ${event.kind}:`,\n          error instanceof Error ? error.message : error,\n        );\n      } catch {\n        // Logging is best effort.\n      }\n    }\n  };\n\n  return {\n    emit,\n    snapshot: () => ({\n      ...snapshot,\n      tasks: snapshot.tasks.map((t) => ({ ...t })),\n      statusMessages: [...snapshot.statusMessages],\n      usage: { ...snapshot.usage },\n    }),\n  };\n}\n\n/** The run spinner as a progress emitter. One per run, like `getUI().spinner()`. */\nexport function createEmitSpinner(emit: ProgressEmitter): SpinnerHandle {\n  return {\n    start: (message) => emit({ kind: 'spinner', action: 'start', message }),\n    stop: (message) => emit({ kind: 'spinner', action: 'stop', message }),\n    message: (message) => emit({ kind: 'spinner', action: 'message', message }),\n  };\n}\n\n/** A leveled logger as a progress emitter: each call is one `log` event. */\nexport function createEmitLog(emit: ProgressEmitter): {\n  info(message: string): void;\n  warn(message: string): void;\n  error(message: string): void;\n  success(message: string): void;\n  step(message: string): void;\n} {\n  return {\n    info: (message) => emit({ kind: 'log', level: 'info', message }),\n    warn: (message) => emit({ kind: 'log', level: 'warn', message }),\n    error: (message) => emit({ kind: 'log', level: 'error', message }),\n    success: (message) => emit({ kind: 'log', level: 'success', message }),\n    step: (message) => emit({ kind: 'log', level: 'step', message }),\n  };\n}\n","/**\n * aio-capture — mirror wizard LLM calls into the authenticated project's\n * AI Observability tab as `$ai_generation` events. Gated on `--capture-aio`\n * (dev/test builds only); returns a no-op instance when disabled so the\n * wire-in points stay a no-op with zero overhead.\n *\n * The wizard's LLM calls happen inside subprocesses we don't own (the\n * claude-agent-sdk CLI on the anthropic path, pi's own runtime on pi), so we\n * can't wrap the client with `posthog-node`'s `wrapAnthropic`. Instead, each\n * harness surfaces assistant turns on the way back — the SDK message stream\n * on anthropic, `agentSession.subscribe(message_end)` on pi — and this module\n * composes an `$ai_generation` event from either shape.\n *\n * For the Conversation tab in AIO to render anything, each generation needs\n * `$ai_input` (the messages the model saw when it produced this turn). The\n * initial prompt is passed to the SDK subprocess and never echoed back on\n * the stream, so callers must hand it to `setInitialPrompt` before the run\n * starts. From there we track user/assistant turns as they flow through the\n * stream, snapshotting the running conversation into each generation's\n * `$ai_input` and firing `$ai_input_state` / `$ai_output_state` on the\n * terminal `$ai_trace` event.\n *\n * POSTs are fire-and-forget: failures are debug-logged and never surfaced to\n * the main agent flow. Losing an AIO event must never break a run.\n */\n\nimport { logToFile } from '@utils/debug';\nimport { VERSION } from '@shared/version';\n\n/** Conversation turn shape both harnesses normalize to. Matches Anthropic\n *  message role/content conventions, which is also what AIO's Conversation\n *  tab knows how to render. */\ntype Turn = { role: 'user' | 'assistant'; content: unknown };\n\n/** Common shape both harness transforms emit; fed to the shared POST. */\ntype LLMTurn = {\n  provider: 'anthropic' | 'openai';\n  model: string;\n  /** Conversation up to (but not including) this assistant turn — the\n   *  messages the model saw. Sent as `$ai_input`. */\n  input: Turn[];\n  /** Content blocks (text + tool_use), passed through as $ai_output_choices. */\n  outputChoices: unknown[];\n  inputTokens?: number;\n  outputTokens?: number;\n  cacheReadTokens?: number;\n  cacheCreationTokens?: number;\n  /** Wall-clock ms since the previous assistant turn on this stream. */\n  latencyMs: number;\n  generationId?: string;\n  isError: boolean;\n};\n\nexport type AioCapture = {\n  /** Set the initial prompt the harness is about to send to the LLM. The\n   *  wizard passes this into the SDK subprocess out-of-band, so it never\n   *  appears on the return message stream — the caller must hand it to us\n   *  explicitly if we want `$ai_input` to include it. Safe to call multiple\n   *  times: latest wins, prior conversation state resets. */\n  setInitialPrompt(prompt: string): void;\n  /** Called for every SDK message on the anthropic harness stream. */\n  captureFromAnthropicSDKMessage(msg: unknown): void;\n  /** Called for every subscribe event on the pi harness. */\n  captureFromPiMessageEndEvent(event: unknown): void;\n  finishPiRun(isError: boolean): void;\n};\n\nconst noop = (_: unknown): void => undefined;\nconst NOOP: AioCapture = {\n  setInitialPrompt: noop,\n  captureFromAnthropicSDKMessage: noop,\n  captureFromPiMessageEndEvent: noop,\n  finishPiRun: noop,\n};\n\nexport function createAioCapture(args: {\n  enabled: boolean;\n  projectApiKey: string;\n  apiHost: string;\n  /** Trace tags from `buildRunTags` (program_id, integration, run_id, build, skill_id). */\n  runTags: Record<string, string>;\n}): AioCapture {\n  if (!args.enabled || !args.projectApiKey || !args.apiHost) return NOOP;\n\n  const { projectApiKey, apiHost, runTags } = args;\n  const distinctId = `wizard-cli-${VERSION}`;\n  const captureUrl = `${apiHost.replace(/\\/$/, '')}/capture/`;\n  const runStartAt = Date.now();\n  // Latency is measured against the previous assistant turn on this stream —\n  // a rough proxy for time-to-first-token that doesn't require SDK-internal\n  // timings. Reset per createAioCapture (once per agent run).\n  let prevTurnAt = runStartAt;\n  // Fire the top-level `$ai_trace` event at most once per instance. Both\n  // harnesses can emit terminal signals, and pi in particular may emit\n  // multiple `agent_end` events across nudges — first-wins keeps trace\n  // metadata stable in AIO.\n  let traceEnded = false;\n\n  // Running conversation state — grows as user and assistant turns flow\n  // through the stream. Snapshotted into `$ai_input` on each generation.\n  let initialPrompt: string | undefined;\n  let conversation: Turn[] = [];\n  let lastAssistantContent: unknown[] | undefined;\n\n  const postEvent = (\n    event: string,\n    properties: Record<string, unknown>,\n  ): void => {\n    const body = {\n      api_key: projectApiKey,\n      event,\n      distinct_id: distinctId,\n      properties: {\n        $ai_trace_id: runTags.run_id ?? '',\n        ...runTags,\n        ...properties,\n      },\n      timestamp: new Date().toISOString(),\n    };\n\n    // Fire-and-forget. `.then` + `.catch` (not `await`) so the caller returns\n    // immediately; both branches only log. Errors must never propagate into\n    // the agent stream loop.\n    fetch(captureUrl, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(body),\n    })\n      .then((res) => {\n        if (!res.ok) {\n          logToFile(`[aio-capture] POST failed status=${res.status}`);\n        }\n      })\n      .catch((err) => {\n        logToFile(\n          `[aio-capture] POST error: ${\n            err instanceof Error ? err.message : String(err)\n          }`,\n        );\n      });\n  };\n\n  const postGeneration = (turn: LLMTurn): void => {\n    postEvent('$ai_generation', {\n      $ai_provider: turn.provider,\n      $ai_model: turn.model,\n      $ai_input: turn.input,\n      $ai_output_choices: turn.outputChoices,\n      $ai_input_tokens: turn.inputTokens ?? 0,\n      $ai_output_tokens: turn.outputTokens ?? 0,\n      $ai_cache_read_input_tokens: turn.cacheReadTokens ?? 0,\n      $ai_cache_creation_input_tokens: turn.cacheCreationTokens ?? 0,\n      $ai_latency: turn.latencyMs / 1000,\n      $ai_generation_id: turn.generationId ?? '',\n      $ai_is_error: turn.isError,\n    });\n  };\n\n  // Emit the top-level `$ai_trace` event. Without this, PostHog builds a\n  // pseudo-trace from the generations — the timeline and aggregates still\n  // work, but the trace has no readable name and the Conversation tab shows\n  // \"No top-level trace event\". Sending this once per run fills that in,\n  // and `$ai_input_state` / `$ai_output_state` populate the trace-level\n  // Conversation view.\n  const sendTraceEnd = (opts: { isError: boolean }): void => {\n    if (traceEnded) return;\n    traceEnded = true;\n    postEvent('$ai_trace', {\n      $ai_span_name: runTags.program_id ?? 'wizard-run',\n      $ai_latency: (Date.now() - runStartAt) / 1000,\n      $ai_is_error: opts.isError,\n      $ai_input_state: initialPrompt\n        ? [{ role: 'user', content: [{ type: 'text', text: initialPrompt }] }]\n        : [],\n      $ai_output_state: lastAssistantContent ?? [],\n    });\n  };\n\n  const anthropicAssistantTurn = (msg: unknown): LLMTurn | null => {\n    const m = msg as {\n      type?: string;\n      message?: {\n        id?: string;\n        model?: string;\n        content?: unknown;\n        usage?: {\n          input_tokens?: number;\n          output_tokens?: number;\n          cache_read_input_tokens?: number;\n          cache_creation_input_tokens?: number;\n        };\n      };\n    };\n    if (m?.type !== 'assistant' || !m.message) return null;\n    const now = Date.now();\n    const latencyMs = now - prevTurnAt;\n    prevTurnAt = now;\n    return {\n      provider: 'anthropic',\n      model: m.message.model ?? 'unknown',\n      input: [...conversation],\n      outputChoices: Array.isArray(m.message.content) ? m.message.content : [],\n      inputTokens: m.message.usage?.input_tokens,\n      outputTokens: m.message.usage?.output_tokens,\n      cacheReadTokens: m.message.usage?.cache_read_input_tokens,\n      cacheCreationTokens: m.message.usage?.cache_creation_input_tokens,\n      latencyMs,\n      generationId: m.message.id,\n      isError: false,\n    };\n  };\n\n  const piAssistantTurn = (event: unknown): LLMTurn | null => {\n    const e = event as {\n      type?: string;\n      message?: {\n        id?: string;\n        role?: string;\n        model?: string;\n        content?: unknown;\n        stopReason?: string;\n        usage?: {\n          input_tokens?: number;\n          output_tokens?: number;\n          cache_read_input_tokens?: number;\n          cache_creation_input_tokens?: number;\n        };\n      };\n    };\n    // Pi emits message_end for user prompts too — filter to assistant only,\n    // mirroring the existing role guard at harness/pi/index.ts:434.\n    if (e?.type !== 'message_end' || e.message?.role !== 'assistant') {\n      return null;\n    }\n    const now = Date.now();\n    const latencyMs = now - prevTurnAt;\n    prevTurnAt = now;\n    return {\n      provider: 'anthropic',\n      model: e.message.model ?? 'unknown',\n      input: [...conversation],\n      outputChoices: Array.isArray(e.message.content) ? e.message.content : [],\n      inputTokens: e.message.usage?.input_tokens,\n      outputTokens: e.message.usage?.output_tokens,\n      cacheReadTokens: e.message.usage?.cache_read_input_tokens,\n      cacheCreationTokens: e.message.usage?.cache_creation_input_tokens,\n      latencyMs,\n      generationId: e.message.id,\n      isError:\n        e.message.stopReason === 'error' || e.message.stopReason === 'aborted',\n    };\n  };\n\n  return {\n    setInitialPrompt(prompt) {\n      initialPrompt = prompt;\n      // Reset conversation to the initial user turn — this is the only way\n      // the initial prompt gets into `$ai_input` for the first generation,\n      // since the SDK subprocess consumes it internally and doesn't echo it\n      // on the return stream.\n      conversation = [\n        { role: 'user', content: [{ type: 'text', text: prompt }] },\n      ];\n      lastAssistantContent = undefined;\n    },\n    captureFromAnthropicSDKMessage(msg) {\n      try {\n        // User turns (tool_result blocks between assistant turns) accumulate\n        // in the conversation so the next assistant generation carries the\n        // full context the model actually saw.\n        const m = msg as {\n          type?: string;\n          message?: { role?: string; content?: unknown };\n          is_error?: boolean;\n        };\n        if (m?.type === 'user' && m.message) {\n          conversation.push({\n            role: 'user',\n            content: m.message.content ?? [],\n          });\n        }\n        const turn = anthropicAssistantTurn(msg);\n        if (turn) {\n          postGeneration(turn);\n          // Push the assistant turn AFTER posting so the current generation's\n          // $ai_input is the conversation as the model saw it (not including\n          // its own response), and later turns include this one.\n          conversation.push({\n            role: 'assistant',\n            content: turn.outputChoices,\n          });\n          lastAssistantContent = turn.outputChoices;\n        }\n        // Terminal: SDK emits a `result` message at end of run.\n        if (m?.type === 'result') {\n          sendTraceEnd({ isError: !!m.is_error });\n        }\n      } catch (err) {\n        logToFile(\n          `[aio-capture] anthropic compose failed: ${\n            err instanceof Error ? err.message : String(err)\n          }`,\n        );\n      }\n    },\n    captureFromPiMessageEndEvent(event) {\n      try {\n        // Pi's subscribe callback surfaces both user and assistant\n        // message_end events. Accumulate user turns the same way as the\n        // anthropic path so `$ai_input` matches the model's view.\n        const e = event as {\n          type?: string;\n          message?: { role?: string; content?: unknown };\n          willRetry?: boolean;\n        };\n        if (\n          e?.type === 'message_end' &&\n          e.message?.role === 'user' &&\n          e.message\n        ) {\n          conversation.push({\n            role: 'user',\n            content: e.message.content ?? [],\n          });\n        }\n        const turn = piAssistantTurn(event);\n        if (turn) {\n          postGeneration(turn);\n          conversation.push({\n            role: 'assistant',\n            content: turn.outputChoices,\n          });\n          lastAssistantContent = turn.outputChoices;\n        }\n        // The harness decides whether a final turn recovered before ending the trace.\n      } catch (err) {\n        logToFile(\n          `[aio-capture] pi compose failed: ${\n            err instanceof Error ? err.message : String(err)\n          }`,\n        );\n      }\n    },\n    finishPiRun(isError) {\n      sendTraceEnd({ isError });\n    },\n  };\n}\n","import { AgentErrorType } from '../../../signals';\n\n/** Which completion guard should fail a pi run, or undefined for a clean finish. */\nexport function completionFailure(args: {\n  toolCalls: number;\n  openTasks: boolean;\n}): AgentErrorType | undefined {\n  // No tool call at all — the project was never touched.\n  if (args.toolCalls === 0) return AgentErrorType.NO_PROGRESS;\n  // Acted but left tasks in its own plan unfinished (skill install not required).\n  if (args.openTasks) return AgentErrorType.INCOMPLETE_TASKS;\n  return undefined;\n}\n\n/**\n * Which error type a thrown pi run reports.\n *\n * Both pi entry points classified the caught message inline with the same two\n * needles, and both did it *after* firing `agent aborted` — so the event that\n * announces the abort could not name it. Pulling the classification out lets\n * each entry point decide the type first and hand it to the event, and keeps\n * the one rule in one place.\n */\nexport function runErrorType(\n  message: string,\n): AgentErrorType.RATE_LIMIT | AgentErrorType.API_ERROR {\n  const lower = message.toLowerCase();\n  if (lower.includes('rate limit') || lower.includes('429')) {\n    return AgentErrorType.RATE_LIMIT;\n  }\n  return AgentErrorType.API_ERROR;\n}\n","/** Bind a host signal to Pi's abort-and-wait-for-idle operation. */\nexport function bindPiCancellation(\n  signal: AbortSignal | undefined,\n  session: { abort(): Promise<void> },\n  onAbortError?: (error: unknown) => void,\n): { settle(): Promise<void> } {\n  let abortPromise: Promise<void> | undefined;\n  const onAbort = () => {\n    abortPromise ??= Promise.resolve()\n      .then(() => session.abort())\n      .catch((error: unknown) => {\n        try {\n          onAbortError?.(error);\n        } catch {\n          /* Abort diagnostics are best effort. */\n        }\n      });\n  };\n  signal?.addEventListener('abort', onAbort, { once: true });\n  if (signal?.aborted) onAbort();\n\n  return {\n    async settle() {\n      signal?.removeEventListener('abort', onAbort);\n      await abortPromise;\n    },\n  };\n}\n","import type { ExtensionAPI } from '@earendil-works/pi-coding-agent';\nimport type { GatewayApi } from './gateway';\n\n/** Apply the output contract at the provider boundary on every agent turn. */\nexport function structuredOutputExtension(\n  schema: Record<string, unknown>,\n  api: GatewayApi,\n): (pi: ExtensionAPI) => void {\n  return (pi) => {\n    pi.on('before_provider_request', (event) => {\n      const payload = event.payload as Record<string, unknown>;\n      const format = { type: 'json_schema', schema };\n      switch (api) {\n        case 'anthropic-messages':\n          return {\n            ...payload,\n            output_config: { ...(payload.output_config as object), format },\n          };\n        case 'openai-responses':\n          return {\n            ...payload,\n            text: {\n              ...(payload.text as object),\n              format: { ...format, name: 'wizard_result', strict: true },\n            },\n          };\n        case 'openai-completions':\n          // `gatewayApiFor` never routes here, so no envelope is defined for it.\n          throw new Error(\n            'Structured output is not supported on Chat Completions',\n          );\n      }\n    });\n  };\n}\n","/**\n * The `pi` backend — the challenger. Drives pi.dev's coding agent\n * (`@earendil-works/pi-coding-agent`) against the PostHog LLM gateway, behind\n * `wizard-orchestrator`. It owns the agent loop and model transport; prompt\n * assembly, error routing, and the outro stay in `linear.ts`, shared with the\n * `anthropic` control.\n *\n * Transport: the gateway is registered as an `anthropic-messages` provider\n * (same protocol the claude-agent-sdk path uses), bearer auth, Bedrock-fallback\n * + wizard metadata/flag headers, model id matched to `anthropic` for a clean\n * A/B. Security parity (canUseTool + YARA) and skills/MCP discovery are\n * follow-ups (#525, #524 skills) — v1 uses pi's built-in coding tools.\n */\n\nimport fs from 'fs';\nimport path from 'path';\nimport { getLogFilePath, logToFile } from '@utils/debug';\nimport {\n  Harness,\n  Sequence,\n  WIZARD_REMARK_EVENT_NAME,\n  wizardUserAgentForProgram,\n} from '@shared/constants';\nimport { analytics } from '@utils/analytics';\nimport { AgentErrorType } from '../../../agent-interface';\nimport { AgentSignals, REMARK_INSTRUCTION } from '../../../signals';\nimport { AgentOutputSignals } from '../../../output-signals';\nimport { assembleCommandments } from '../../switchboard/commandments';\nimport { gatewayAuth, type GatewayAuth } from '../../../gateway-session';\nimport { currentAccessToken } from '@shared/oauth-session';\nimport {\n  buildGatewayProvider,\n  GATEWAY_PROVIDER,\n  withGatewayRemint,\n} from './gateway';\nimport { createAioCapture } from '../../../aio-capture';\nimport type {\n  AgentResult,\n  AgentHarness,\n  BackendRunInputs,\n  TaskRunInputs,\n} from '../types';\nimport type { BootstrapResult } from '../../shared/types';\nimport type { ProgressEmitter } from '../../../progress';\nimport { createEmitLog } from '../../shared/progress-collector';\nimport type { TaskStore } from './tasks';\nimport type { SecurityState } from './security';\nimport { completionFailure, runErrorType } from './completion';\nimport { bindPiCancellation } from './cancellation';\nimport { structuredOutputExtension } from './structured-output';\nimport { classifyRunFailure, ErrorCodes } from '@shared/errors';\n\n/** Injects the MCP server `instructions` pi-mcp-adapter drops (project env, skill steer, tool domains) into the system prompt, falling back to a bootstrap-derived project block when the warm-connect captured none. */\nfunction piMcpContext(\n  boot: BootstrapResult,\n  instructions?: string,\n  posthogMcp = true,\n): string {\n  // No tool, no block. The fallback below names `posthog_exec`, so emitting it\n  // after a failed handshake points the agent at a tool that is not registered.\n  if (!posthogMcp) return '';\n  if (instructions) {\n    // Heading + verbatim server instructions (see PR #862 for a full sample).\n    return ['', '## PostHog MCP server', instructions].join('\\n');\n  }\n  const project = boot.project?.name\n    ? `${boot.project.name} (id ${boot.credentials.projectId})`\n    : `id ${boot.credentials.projectId}`;\n  // Fallback: a `## PostHog project` block with name/id, host, region.\n  return [\n    '',\n    '## PostHog project',\n    'Your `posthog_exec` calls run against this project:',\n    `- Project: ${project}`,\n    `- Host: ${boot.credentials.host.apiHost}`,\n    `- Region: ${boot.credentials.host.region}`,\n  ].join('\\n');\n}\n\n/**\n * The ONLY environment variables pi's tool subprocesses (bash → npm/pip/…) are\n * allowed to see. Everything else — every secret (POSTHOG_PERSONAL_API_KEY,\n * ANTHROPIC_*, AWS_*), every ambient credential, the parent process's whole env\n * — is dropped before a child is spawned. pi's own gateway auth is programmatic\n * (the access token never lives in env), so a minimal env costs the agent\n * nothing while closing the leak that exposed the key before. Kept to what a\n * package manager genuinely needs to run.\n */\nconst ALLOWED_SUBPROCESS_ENV_KEYS = [\n  'PATH',\n  'HOME',\n  'SHELL',\n  'USER',\n  'LOGNAME',\n  'TMPDIR',\n  'TMP',\n  'TEMP',\n  'TERM',\n  'LANG',\n  'LC_ALL',\n  'LC_CTYPE',\n  'NODE_EXTRA_CA_CERTS',\n  'SSL_CERT_FILE',\n  'SSL_CERT_DIR',\n  'HTTP_PROXY',\n  'HTTPS_PROXY',\n  'NO_PROXY',\n  'http_proxy',\n  'https_proxy',\n  'no_proxy',\n];\n\n/** A fresh subprocess env holding only the allowlisted keys present in process.env. */\nexport function buildScrubbedEnv(): NodeJS.ProcessEnv {\n  const env: NodeJS.ProcessEnv = {};\n  for (const key of ALLOWED_SUBPROCESS_ENV_KEYS) {\n    const value = process.env[key];\n    if (value !== undefined) env[key] = value;\n  }\n  return env;\n}\n\n/**\n * Tag a tool with an execution mode (mutates + returns it). Read-only tools are\n * `parallel` so a single turn that batches independent reads/searches runs them\n * at once; mutating/install tools are `sequential` so a batch never races writes\n * or concurrent installs. pi-agent-core runs a batch in parallel only when no\n * tool in it is `sequential`.\n */\nexport function withMode<T>(tool: T, mode: 'sequential' | 'parallel'): T {\n  (tool as { executionMode?: 'sequential' | 'parallel' }).executionMode = mode;\n  return tool;\n}\n\n/**\n * The text blocks of a pi AgentMessage (content is text/image blocks). A\n * Responses model can send several message items in one turn, commentary\n * before its answer, and each becomes its own block.\n */\nfunction textBlocks(message: unknown): string[] {\n  const content = (message as { content?: unknown })?.content;\n  if (typeof content === 'string') return [content];\n  if (Array.isArray(content)) {\n    return content\n      .filter((c): c is { type: string; text: string } => {\n        const block = c as { type?: string; text?: unknown };\n        return block?.type === 'text' && typeof block.text === 'string';\n      })\n      .map((c) => c.text);\n  }\n  return [];\n}\n\n/** Pull plain text out of a pi AgentMessage. */\nexport function extractText(message: unknown): string {\n  return textBlocks(message).join('');\n}\n\n/**\n * Surface `[DASHBOARD_URL]` / `[NOTEBOOK_URL]` markers the agent prints (after\n * the MCP creates them) into the outro link, mirroring the anthropic path's\n * signal parsing (#9). The marker carries the URL the MCP returned.\n */\nexport function applyOutroMarkers(\n  textBlock: string,\n  emit: ProgressEmitter,\n): void {\n  const markers: Array<[string, (url: string) => void]> = [\n    [\n      AgentSignals.DASHBOARD_URL,\n      (url) => emit({ kind: 'url', which: 'dashboard', url }),\n    ],\n    [\n      AgentSignals.NOTEBOOK_URL,\n      (url) => emit({ kind: 'url', which: 'notebook', url }),\n    ],\n  ];\n  for (const [marker, apply] of markers) {\n    const idx = textBlock.indexOf(marker);\n    if (idx === -1) continue;\n    const url = textBlock\n      .slice(idx + marker.length)\n      .trim()\n      .split(/\\s/)[0];\n    if (url) apply(url);\n  }\n}\n\n/**\n * The text of the last `[STATUS] …` line in a block, if any. Last wins so the\n * spinner shows the most recent action when a turn prints several.\n */\nexport function lastStatusLine(textBlock: string): string | undefined {\n  let status: string | undefined;\n  for (const line of textBlock.split('\\n')) {\n    const idx = line.indexOf(AgentSignals.STATUS);\n    if (idx !== -1) {\n      status = line.slice(idx + AgentSignals.STATUS.length).trim();\n    }\n  }\n  return status || undefined;\n}\n\n/** Cap on completion-guard re-prompts while tasks remain open (see the run loop). */\nconst MAX_CONTINUE_NUDGES = 20;\n\n/** Nudge re-sent when the agent stops early with tasks still open. */\nconst CONTINUE_INSTRUCTION =\n  'You still have open tasks in your list (not all are marked `completed`). Do not stop — pick up the next `in_progress` or `pending` task and keep working until every task is `completed`. Continue now.';\n\n/** True while any task in the store is not yet `completed`. */\nfunction hasOpenTasks(store: TaskStore): boolean {\n  for (const t of store.values()) if (t.status !== 'completed') return true;\n  return false;\n}\n\nexport const piBackend: AgentHarness = {\n  name: Harness.pi,\n\n  async run(inputs: BackendRunInputs): Promise<AgentResult> {\n    if (inputs.signal?.aborted) {\n      return {\n        kind: 'abort',\n        classification: AgentErrorType.ABORT,\n        message: 'Agent run cancelled',\n      };\n    }\n    const {\n      config: runConfig,\n      input,\n      boot,\n      emit,\n      prompt,\n      spinner,\n      structured,\n    } = inputs;\n    const config = runConfig.run;\n    const modelId = inputs.model;\n    const log = createEmitLog(emit);\n\n    const capture = createAioCapture({\n      enabled: input.flags.captureAio,\n      projectApiKey: boot.credentials.projectApiKey,\n      apiHost: boot.credentials.host.apiHost,\n      runTags: boot.wizardMetadata,\n    });\n\n    // Init banner (parity #5).\n    if (!structured) {\n      log.step('Initializing Wizard agent...');\n      log.step(`Verbose logs: ${getLogFilePath()}`);\n      log.success(\"Agent initialized. Let's get cooking!\");\n    }\n\n    spinner.start(config.spinnerMessage ?? 'Customizing your PostHog setup...');\n\n    // Same `agent completed`/`agent aborted` shape as anthropic.\n    const startTime = Date.now();\n    const signals = new AgentOutputSignals();\n    let assistantTurns = 0;\n    let lastAssistantText = '';\n    // Tool calls across the whole run. Zero means the agent only ever produced\n    // text and never acted — a no-op that leaves the project untouched.\n    let toolCalls = 0;\n    const runDurations = () => {\n      const durationMs = Date.now() - startTime;\n      return {\n        duration_ms: durationMs,\n        duration_seconds: Math.round(durationMs / 1000),\n      };\n    };\n    // How this run failed: the closed AgentErrorType it is about to return.\n    // Without it every terminal path below — a security termination, a no-op\n    // run, a plan left open, a rate limit, a gateway error — arrived as the\n    // same unlabelled event, so a run that died could be counted but not\n    // diagnosed. Only two of those are errors; the rest are an enforcement\n    // stop and two agent behaviours, hence \"failure mode\" over \"error\".\n    //\n    // Not `reason`: the linear sequence emits this same event with a `reason`\n    // holding the agent's free-text [ABORT] string, and one property cannot be\n    // both a closed enum and unbounded prose without making either unreadable.\n    const captureAborted = (failureMode: AgentErrorType) =>\n      analytics.wizardCapture('agent aborted', {\n        failure_mode: failureMode,\n        ...runDurations(),\n        model: modelId,\n      });\n    const timedOutResult = (timeoutMs: number): AgentResult => {\n      spinner.stop('Agent run timed out');\n      captureAborted(AgentErrorType.AGENTIC_DETECTION_TIMEOUT);\n      return {\n        kind: 'failure',\n        classification: AgentErrorType.AGENTIC_DETECTION_TIMEOUT,\n        message: `Agent run timed out after ${timeoutMs / 1000}s`,\n      };\n    };\n\n    let mcpCleanup: (() => void) | undefined;\n    let aioFailed = true;\n    let cancellation: ReturnType<typeof bindPiCancellation> | undefined;\n    let timedOut = false;\n    let timeoutAbort: Promise<void> | undefined;\n    // Read by the catch path; undefined until setup creates the extension.\n    let securityState: SecurityState | undefined;\n    // A latched violation outranks the timer on both the success and catch paths.\n    const yaraViolationResult = (): AgentResult => {\n      spinner.stop('Security violation detected');\n      logToFile(\n        `[pi] terminated: YARA violation (blocked ${securityState?.blockedCount} call(s))`,\n      );\n      captureAborted(AgentErrorType.YARA_VIOLATION);\n      return {\n        kind: 'failure',\n        classification: AgentErrorType.YARA_VIOLATION,\n      };\n    };\n    try {\n      const {\n        createAgentSession,\n        DefaultResourceLoader,\n        SessionManager,\n        AuthStorage,\n        ModelRegistry,\n        getAgentDir,\n        createLsToolDefinition,\n        createFindToolDefinition,\n        createGrepToolDefinition,\n        createBashToolDefinition,\n        createReadToolDefinition,\n        createEditToolDefinition,\n        createWriteToolDefinition,\n      } = await import('@earendil-works/pi-coding-agent');\n\n      // the claude-agent-sdk path. The provider spec is shared with the\n      // orchestrator's per-task sessions (gateway.ts). gatewayAuth mints the\n      // run's scoped token.\n      // Reads the live OAuth token, so a mid-run rotation re-mints on the new one.\n      const refreshAuth = async () =>\n        gatewayAuth(\n          boot.credentials.host,\n          await currentAccessToken(boot.credentials),\n          boot.programId,\n        );\n      const auth = await refreshAuth();\n      const providerInputs = (current: GatewayAuth) => ({\n        gatewayUrl: current.gatewayUrl,\n        accessToken: current.token,\n        teamId: current.teamId,\n        wizardMetadata: boot.wizardMetadata,\n        wizardFlags: boot.wizardFlags,\n        modelId,\n        effort: inputs.thinkingLevel,\n      });\n      const { provider, caps, api } = buildGatewayProvider(\n        providerInputs(auth),\n      );\n      const registry = ModelRegistry.inMemory(AuthStorage.create());\n      registry.registerProvider(GATEWAY_PROVIDER, provider as never);\n\n      const model = registry.find(GATEWAY_PROVIDER, modelId);\n      if (!model) {\n        return {\n          kind: 'failure',\n          classification: AgentErrorType.API_ERROR,\n          message: 'pi: gateway model could not be resolved',\n        };\n      }\n\n      // System prompt = wizard commandments. Skip project context files /\n      // user extensions / skills so the run is hermetic; skills discovery is a\n      // follow-up (#524).\n      //\n      // Fail-closed security (#525): an extension intercepts EVERY tool call —\n      // built-in and custom — and reuses the anthropic policy (canUseTool\n      // allowlist + .env fencing + YARA). `noExtensions: true` only suppresses\n      // disk-discovered extensions; explicit `extensionFactories` still load,\n      // so the fence is on while the target project can't inject its own.\n      // Shared flag: true while a wizard_ask overlay is open. The ask tool\n      // flips it; the security gate reads it to block Write/Edit meanwhile.\n      const askState = { pending: false };\n\n      const { createSecurityExtension, READ_ONLY_PI_TOOLS } = await import(\n        './security'\n      );\n      const security = createSecurityExtension({\n        readOnly: config.readOnly,\n        disallowedTools: runConfig.disallowedTools,\n        getWizardAskPending: () => askState.pending,\n        triageProvider: boot.triageProvider,\n        // Where pi's bash runs; the rm allowance is confined to this tree.\n        workingDirectory: input.installDir,\n      });\n      securityState = security.state;\n\n      // Pay warlock's WASM-init + rule-compile cost now, off the tool-call\n      // path, so the first scanned call doesn't eat cold-start latency.\n      const { prewarmYaraScanner } = await import('../../../yara-hooks');\n      void prewarmYaraScanner();\n\n      // Wire the real PostHog MCP into pi (#10): load pi's MCP adapter and point\n      // it at the hosted MCP the anthropic path uses, so dashboards/insights are\n      // created through the sanctioned MCP. Best-effort — if it can't load or\n      // connect, the run continues (minus the dashboard step) rather than failing\n      // the whole integration. The security factory is always first.\n      const extensionFactories = [security.factory] as Array<\n        (pi: unknown) => void\n      >;\n      let mcpInstructions: string | undefined;\n      // Whether the agent really got the tool. The commandments below claim\n      // `posthog_exec` exists when this is true, so it must track the setup and\n      // not the intent — a hardcoded `true` told the agent to call a tool the\n      // failed handshake never registered. `task.ts` has always done this.\n      let posthogMcp = false;\n      if (!config.readOnly) {\n        try {\n          const { setupPostHogMcp, fetchInstructions } = await import('./mcp');\n          const mcpToken = await currentAccessToken(boot.credentials);\n          // The backend reads the `program:` marker off this UA to attribute what the run\n          // creates (a self-driving run's warehouse sources become created_via=self_driving).\n          // A plain WIZARD_USER_AGENT here records them as generic wizard work.\n          const mcpUserAgent = wizardUserAgentForProgram(\n            config.integrationLabel,\n          );\n          // Overlaps the network handshake with the adapter's jiti load.\n          const instructionsPromise = fetchInstructions(\n            boot.credentials.host.mcpUrl,\n            mcpToken,\n            mcpUserAgent,\n          );\n          const mcp = await setupPostHogMcp({\n            mcpUrl: boot.credentials.host.mcpUrl,\n            accessToken: mcpToken,\n            userAgent: mcpUserAgent,\n          });\n          extensionFactories.push(mcp.extensionFactory);\n          mcpCleanup = mcp.cleanup;\n          mcpInstructions = await instructionsPromise;\n          posthogMcp = true;\n        } catch (err) {\n          try {\n            mcpCleanup?.();\n          } catch {\n            /* Setup cleanup is best effort. */\n          }\n          mcpCleanup = undefined;\n          logToFile(`[pi] PostHog MCP setup skipped: ${String(err)}`);\n          analytics.wizardCapture('mcp setup failed', {\n            harness: 'pi',\n            scope: 'run',\n            error: String(err).slice(0, 300),\n          });\n        }\n      }\n\n      if (structured) {\n        extensionFactories.push(\n          structuredOutputExtension(structured.schema, api),\n        );\n      }\n\n      const resourceLoader = new DefaultResourceLoader({\n        cwd: input.installDir,\n        agentDir: getAgentDir(),\n        systemPrompt:\n          assembleCommandments({\n            program: runConfig.programId,\n            sequence: Sequence.linear,\n            harness: Harness.pi,\n            caps: { bash: true, posthogMcp },\n          }) +\n          '\\n' +\n          piMcpContext(boot, mcpInstructions, posthogMcp),\n        noExtensions: true,\n        noSkills: true,\n        noContextFiles: true,\n        noPromptTemplates: true,\n        noThemes: true,\n        extensionFactories,\n      });\n      await resourceLoader.reload();\n\n      // Wizard capabilities as custom tools (pi has no MCP): skill\n      // discovery/install + fenced .env edits, same names as the MCP server so\n      // the shared prompt is unchanged. pi's built-in Read/Write/Edit/Bash do\n      // the code changes. Loaded lazily — it pulls in typebox (ESM), which must\n      // stay out of the static module graph so CommonJS unit tests can load the\n      // backend seam without parsing it.\n      const { createWizardPiTools } = await import('./tools');\n      const { createWizardPiTaskTools } = await import('./tasks');\n      const { createDispatchAgentTool } = await import('./subagent');\n      // Created once so the run loop can read the store for the completion guard.\n      const wizardTaskTools = createWizardPiTaskTools((tasks) =>\n        emit({ kind: 'tasks', tasks }),\n      );\n      // The one bash the agent (and its subagents) may use: every subprocess it\n      // spawns gets a scrubbed env, so no secret or ambient variable reaches an\n      // `npm install`. Shared with the subagent so the lockdown is inherited.\n      const scrubbedBash = withMode(\n        createBashToolDefinition(input.installDir, {\n          spawnHook: (ctx) => ({ ...ctx, env: buildScrubbedEnv() }),\n        }),\n        'sequential',\n      );\n\n      const customTools = [\n        // Built-ins re-registered explicitly. `noTools: 'builtin'` disables pi's\n        // defaults so we can supply the env-scrubbed bash above; read/edit/write\n        // are the stock definitions. Reads run in parallel so a batched turn of\n        // independent reads executes at once; edit/write/bash stay sequential.\n        withMode(createReadToolDefinition(input.installDir), 'parallel'),\n        withMode(createEditToolDefinition(input.installDir), 'sequential'),\n        withMode(createWriteToolDefinition(input.installDir), 'sequential'),\n        scrubbedBash,\n        // Native ls/find/grep so the agent explores with proper tools instead\n        // of fence-blocked `bash {ls/find}` (the profiled retry-spirals came\n        // from this gap). Parallel — exploration batches cleanly.\n        withMode(createLsToolDefinition(input.installDir), 'parallel'),\n        withMode(createFindToolDefinition(input.installDir), 'parallel'),\n        withMode(createGrepToolDefinition(input.installDir), 'parallel'),\n        ...createWizardPiTools({\n          workingDirectory: input.installDir,\n          skillsBaseUrl: boot.skillsBaseUrl,\n          triageProvider: boot.triageProvider,\n          emit,\n          detectPackageManager: config.detectPackageManager,\n          // The host ask bridge — lets interactive programs (self-driving) ask\n          // the user through pi. Threaded from the runner, same path as the\n          // anthropic harness. Absent in CI → the tool errors on call.\n          askBridge: inputs.askBridge,\n          maxQuestions: config.maxQuestions,\n          onAskPendingChange: (pending) => {\n            askState.pending = pending;\n          },\n          // Skip wizard_ask when the program disallows it (bare pi tool names\n          // don't match the MCP-prefixed disallow list at the security gate).\n          disallowedTools: runConfig.disallowedTools,\n        }),\n        // Task/todo tools (#526): render the todo list live in the TUI, parity\n        // with the anthropic path.\n        ...wizardTaskTools.tools,\n        // Controlled subagent dispatch (#526): a nested fenced session with a\n        // read-only toolset and no dispatch_agent of its own, so it can't\n        // escape the fence or recurse.\n        createDispatchAgentTool({\n          model,\n          modelRegistry: registry,\n          cwd: input.installDir,\n          agentDir: getAgentDir(),\n          securityFactory: security.subagentFactory,\n          bashTool: scrubbedBash,\n          sdk: { createAgentSession, DefaultResourceLoader, SessionManager },\n        }),\n      ].filter((tool) => !config.readOnly || READ_ONLY_PI_TOOLS.has(tool.name));\n\n      const { session: agentSession } = await createAgentSession({\n        model,\n        modelRegistry: registry,\n        // Reasoning effort from the switchboard capability matrix (undefined =\n        // pi's default). Sent as `reasoning_effort` for openai-completions.\n        thinkingLevel: caps.thinkingLevel,\n        cwd: input.installDir,\n        sessionManager: SessionManager.inMemory(input.installDir),\n        resourceLoader,\n        // Disable the default built-in tools; `customTools` re-registers\n        // read/edit/write + an env-scrubbed bash, so no subprocess inherits the\n        // host env. Custom + extension tools stay enabled.\n        noTools: 'builtin',\n        customTools,\n      });\n\n      // Fire the extension lifecycle — what interactive mode does via\n      // rebindCurrentSession. createAgentSession builds the session but does not\n      // emit session_start on its own, and the MCP adapter connects on that\n      // event; without this its tools report \"MCP not initialized\".\n      cancellation = bindPiCancellation(\n        inputs.signal,\n        agentSession,\n        (error) => {\n          logToFile(`[pi] abort failed: ${String(error)}`);\n        },\n      );\n      await agentSession.bindExtensions({});\n\n      // A turn that ends on a 401 from an aged bearer re-mints once and\n      // continues; pi resolves the provider's apiKey per request, so\n      // re-registering is enough.\n      const turns = withGatewayRemint({\n        signal: inputs.signal,\n        session: agentSession,\n        registry,\n        auth,\n        refreshAuth,\n        providerInputs,\n        continueText: CONTINUE_INSTRUCTION,\n        onRemint: () => {\n          logToFile('[pi] gateway token renewed after a 401; continuing');\n          analytics.wizardCapture('gateway token reminted', { harness: 'pi' });\n        },\n      });\n\n      // Map pi events onto the run spinner + the log file, mirroring the\n      // anthropic path's log shape (assistant turns + tool I/O) and driving the\n      // single run spinner with one stable status at a time (no overlap).\n      const unsubscribe = agentSession.subscribe((event) => {\n        // Mirror the turn into AIO. No-op when --capture-aio is off. Runs\n        // before the role guard so the module's own filter (assistant-only)\n        // stays the single source of truth for what's captured.\n        capture.captureFromPiMessageEndEvent(event);\n\n        switch (event.type) {\n          case 'message_end': {\n            // User prompts also emit message_end; only assistant turns count.\n            if ((event.message as { role?: string })?.role !== 'assistant') {\n              break;\n            }\n            assistantTurns += 1;\n            turns.noteAssistantTurn(event.message);\n            const blocks = textBlocks(event.message);\n            const assistant = blocks.join('').trim();\n            // A schema-bound answer is the turn's last block, not the joined text.\n            lastAssistantText = (blocks.at(-1) ?? '').trim();\n            if (structured) {\n              // One block per transcript line, so recovery can parse each.\n              inputs.middleware?.onMessage({\n                type: 'assistant',\n                message: {\n                  content: blocks.map((text) => ({ type: 'text', text })),\n                },\n              });\n            }\n            if (assistant) {\n              logToFile(`[pi] assistant: ${assistant.slice(0, 1000)}`);\n              applyOutroMarkers(assistant, emit);\n              // Surface [STATUS] lines into the live spinner + status history,\n              // mirroring the anthropic path — pi otherwise drops them.\n              const statusText = lastStatusLine(assistant);\n              if (statusText) {\n                emit({ kind: 'status', message: statusText });\n                spinner.message(statusText);\n              }\n              for (const line of assistant.split('\\n')) signals.push(line);\n            }\n            break;\n          }\n          case 'tool_execution_start': {\n            toolCalls += 1;\n            const args = JSON.stringify(event.args ?? {}).slice(0, 200);\n            logToFile(`[pi] → ${event.toolName} ${args}`);\n            if (structured) {\n              inputs.middleware?.onMessage({\n                type: 'assistant',\n                message: {\n                  content: [\n                    {\n                      type: 'tool_use',\n                      name: event.toolName,\n                      input: event.args,\n                    },\n                  ],\n                },\n              });\n            }\n            // Don't surface raw tool names in the spinner — the anthropic path\n            // doesn't, and it reads as noise. The Task panel (syncTodos) is the\n            // visible progress, matching the anthropic presentation.\n            break;\n          }\n          case 'tool_execution_end': {\n            // Log every result in full, matching the anthropic path's\n            // SDK-message logging. Call-only logs make failed runs\n            // undiagnosable: a tool can fail (or return something the model\n            // misreads) with no trace of what came back.\n            logToFile(\n              `[pi] ${event.isError ? '✗' : '←'} ${event.toolName}: ${\n                typeof event.result === 'string'\n                  ? event.result\n                  : JSON.stringify(event.result ?? '')\n              }`,\n            );\n            break;\n          }\n          case 'agent_end': {\n            logToFile(`[pi] agent_end (willRetry=${String(event.willRetry)})`);\n            break;\n          }\n          default:\n            break;\n        }\n      });\n\n      // Seed AIO capture with the initial prompt so the first assistant\n      // turn's `$ai_input` includes it — pi's subscribe stream doesn't emit\n      // a message_end for the initial prompt, only for tool_result user\n      // turns that follow.\n      capture.setInitialPrompt(prompt);\n\n      let terminal = turns.terminalFailure();\n      // A structured run's budget starts once setup is done.\n      const timeout =\n        structured &&\n        setTimeout(() => {\n          timedOut = true;\n          timeoutAbort = agentSession.abort().catch((error: unknown) => {\n            logToFile(`[pi] timeout abort failed: ${String(error)}`);\n          });\n        }, structured.timeoutMs);\n      try {\n        if (inputs.signal?.aborted)\n          return {\n            kind: 'abort',\n            classification: AgentErrorType.ABORT,\n            message: 'Agent run cancelled',\n          };\n        // Non-streaming: resolves when the agent run completes. Throws if no\n        // model/api key, or on a transport error.\n        await turns.prompt(prompt);\n        terminal = turns.terminalFailure();\n\n        // Completion guard: pi's prompt() resolves the moment the model returns\n        // a turn with no tool call (e.g. a lone [STATUS] line), even mid-plan.\n        // While tasks remain open and we're under the cap, nudge it to continue.\n        // A schema-bound scan has no plan to finish, so it never gets nudged.\n        let continueNudges = 0;\n        while (\n          !structured &&\n          continueNudges < MAX_CONTINUE_NUDGES &&\n          !security.state.criticalViolation &&\n          !inputs.signal?.aborted &&\n          !terminal &&\n          hasOpenTasks(wizardTaskTools.store)\n        ) {\n          continueNudges += 1;\n          logToFile(\n            `[pi] completion guard: tasks still open, nudge ${continueNudges}/${MAX_CONTINUE_NUDGES}`,\n          );\n          await turns.prompt(CONTINUE_INSTRUCTION);\n          terminal = turns.terminalFailure();\n        }\n\n        // Best-effort remark ask — a failed turn never fails a successful run.\n        if (\n          !structured &&\n          !security.state.criticalViolation &&\n          !terminal &&\n          !inputs.signal?.aborted\n        ) {\n          try {\n            await agentSession.prompt(REMARK_INSTRUCTION);\n          } catch (err) {\n            logToFile(`[pi] remark request failed: ${String(err)}`);\n          }\n        }\n      } finally {\n        if (timeout) clearTimeout(timeout);\n        try {\n          unsubscribe();\n        } catch {\n          /* Keep the terminal result. */\n        }\n      }\n\n      if (inputs.signal?.aborted) {\n        return {\n          kind: 'abort',\n          classification: AgentErrorType.ABORT,\n          message: 'Agent run cancelled',\n        };\n      }\n      if (timedOut && structured && !security.state.criticalViolation)\n        return timedOutResult(structured.timeoutMs);\n\n      if (terminal && !security.state.criticalViolation) {\n        spinner.stop(\n          config.errorMessage ?? `${config.integrationLabel} failed`,\n        );\n        captureAborted(terminal.classification);\n        if (terminal.status === 401) {\n          return {\n            kind: 'decided_failure',\n            failure: {\n              code: ErrorCodes.AuthInvalidOrExpired,\n              message: 'Authentication failed (401)',\n              detail: { providerMessage: terminal.message },\n            },\n          };\n        }\n        return terminal.classification === AgentErrorType.ABORT\n          ? {\n              kind: 'abort',\n              classification: AgentErrorType.ABORT,\n              message: terminal.message,\n            }\n          : {\n              kind: 'failure',\n              classification: terminal.classification,\n              message: terminal.message,\n            };\n      }\n\n      // A latched post-scan violation terminates the run as a YARA violation,\n      // matching the anthropic path's AgentErrorType.YARA_VIOLATION.\n      if (security.state.criticalViolation) return yaraViolationResult();\n\n      // pi ends a run on any tool-call-less turn, so guard against a hollow\n      // success reaching the outro (nothing done, or stopped mid-plan).\n      const openTasks = !structured && hasOpenTasks(wizardTaskTools.store);\n      const failure = completionFailure({ toolCalls, openTasks });\n      if (failure === AgentErrorType.NO_PROGRESS) {\n        spinner.stop('Agent made no changes');\n        logToFile(\n          `[pi] no progress: ${assistantTurns} assistant turn(s), 0 tool calls`,\n        );\n        analytics.wizardCapture('agent no progress', {\n          assistant_turns: assistantTurns,\n        });\n        // A schema-bound run with no tool calls produced no typed result.\n        const classification = structured\n          ? AgentErrorType.INVALID_STRUCTURED_OUTPUT\n          : failure;\n        captureAborted(classification);\n        return { kind: 'failure', classification };\n      }\n      if (failure === AgentErrorType.INCOMPLETE_TASKS) {\n        spinner.stop('Agent stopped before finishing');\n        logToFile('[pi] incomplete: tasks left open');\n        analytics.wizardCapture('agent incomplete tasks', { open_tasks: true });\n        captureAborted(failure);\n        return { kind: 'failure', classification: failure };\n      }\n\n      const remark = signals.remark();\n      if (remark) {\n        analytics.capture(WIZARD_REMARK_EVENT_NAME, { remark });\n      }\n\n      // A failed install_skill is non-fatal — the agent continues best-effort\n      // without the skill — but every such run must be measurable.\n      const skillFailure = signals.skillInstallFailure();\n      if (skillFailure !== undefined) {\n        analytics.wizardCapture('agent continued without skill', {\n          detail: skillFailure,\n        });\n      }\n\n      // The skill plans events into .posthog-events.json then asks the agent to\n      // remove it on completion; clean it up host-side too, so a skipped step\n      // never leaves a stale (often empty) artifact (#15).\n      try {\n        const planFile = path.join(input.installDir, '.posthog-events.json');\n        if (!structured && fs.existsSync(planFile))\n          await fs.promises.rm(planFile);\n      } catch (err) {\n        logToFile(`[pi] .posthog-events.json cleanup skipped: ${String(err)}`);\n      }\n\n      const stats = agentSession.getSessionStats();\n      analytics.wizardCapture('agent completed', {\n        ...runDurations(),\n        model: modelId,\n        num_turns: assistantTurns,\n        // API-reported tokens only; no total_cost_usd — the API returns no\n        // cost, and $ai_generation already prices the run authoritatively.\n        input_tokens: stats.tokens.input,\n        output_tokens: stats.tokens.output,\n        cache_creation_input_tokens: stats.tokens.cacheWrite,\n        cache_read_input_tokens: stats.tokens.cacheRead,\n      });\n      spinner.stop(config.successMessage ?? 'PostHog integration complete');\n      aioFailed = false;\n      if (!structured) return { kind: 'success' };\n      try {\n        return {\n          kind: 'success',\n          structuredOutput: JSON.parse(lastAssistantText),\n        };\n      } catch {\n        // The caller validates the result and owns its bounded retry.\n        return { kind: 'success' };\n      }\n    } catch (err) {\n      if (inputs.signal?.aborted) {\n        return {\n          kind: 'abort',\n          classification: AgentErrorType.ABORT,\n          message: 'Agent run cancelled',\n        };\n      }\n      if (securityState?.criticalViolation) return yaraViolationResult();\n      if (timedOut && structured) return timedOutResult(structured.timeoutMs);\n      const message = err instanceof Error ? err.message : String(err);\n      logToFile(`[pi] run error: ${message}`);\n      spinner.stop(config.errorMessage ?? `${config.integrationLabel} failed`);\n      log.error(`pi backend error: ${message}`);\n      const coded = classifyRunFailure(err);\n      if (coded.coded && err instanceof Error) {\n        captureAborted(AgentErrorType.API_ERROR);\n        return {\n          kind: 'decided_failure',\n          failure: { code: coded.code, message: coded.message, error: err },\n        };\n      }\n      const classification = runErrorType(message);\n      captureAborted(classification);\n      return {\n        kind: 'failure',\n        classification,\n        message,\n        error: err instanceof Error ? err : undefined,\n      };\n    } finally {\n      await cancellation?.settle();\n      await timeoutAbort;\n      try {\n        mcpCleanup?.();\n      } catch {\n        /* Keep the terminal result. */\n      }\n      try {\n        capture.finishPiRun(aioFailed);\n      } catch {\n        /* Telemetry is best effort. */\n      }\n    }\n  },\n\n  // Orchestrator mode: one fresh pi session per seed plan / drained task, with\n  // the in-process queue tools registered as pi custom tools. Lazily imported —\n  // task.ts pulls in typebox (ESM), which must stay out of the static module\n  // graph so CommonJS unit tests can load the backend seam without parsing it.\n  async runTask(inputs: TaskRunInputs): Promise<AgentResult> {\n    const { runPiTask } = await import('./task');\n    return runPiTask(inputs);\n  },\n};\n"],"mappings":";;;;;;;;;AAGA,SAAgB,aAAa,UAAoB,SAA2B;AAC1E,KAAI,SAAS,SAAS,KAAK,SAAS,SAAS,SAAS,OAAO,QAC3D,QAAO;AAET,QAAO,CAAC,GAAG,SAAS,MAAM,GAA2B,EAAE,QAAQ;;;;;;;;;;;;;ACiBjE,SAAgB,wBACd,YACmB;CACnB,MAAM,WAAwB;EAC5B,OAAO,EAAE;EACT,gBAAgB,EAAE;EAClB,OAAO;GACL,aAAa;GACb,cAAc;GACd,iBAAiB;GACjB,qBAAqB;GACtB;EACF;CAED,MAAM,SAAS,UAA+B;AAC5C,UAAQ,MAAM,MAAd;GACE,KAAK;AACH,aAAS,QAAQ,MAAM,MAAM,KAAK,OAAO,EAAE,GAAG,GAAG,EAAE;AACnD;GACF,KAAK;AACH,aAAS,iBAAiB,aACxB,SAAS,gBACT,MAAM,QACP;AACD;GACF,KAAK;AACH,aAAS,QAAQ,MAAM;AACvB;GACF,KAAK;AACH,QAAI,MAAM,UAAU,YAAa,UAAS,eAAe,MAAM;QAC1D,UAAS,cAAc,MAAM;AAClC;GACF,KAAK;AACH,aAAS,MAAM,eAAe,MAAM,MAAM;AAC1C,aAAS,MAAM,gBAAgB,MAAM,MAAM;AAC3C,aAAS,MAAM,mBAAmB,MAAM,MAAM;AAC9C,aAAS,MAAM,uBAAuB,MAAM,MAAM;AAClD;GACF,KAAK;AACH,aAAS,eAAe,MAAM;AAC9B;GACF,KAAK;AACH,aAAS,cAAc,MAAM;AAC7B;GACF,QACE;;;CAIN,MAAM,QAAyB,UAAU;AACvC,QAAM,MAAM;AACZ,MAAI,CAAC,WAAY;AACjB,MAAI;GACF,MAAM,WAAW,WAAW,gBAAgB,MAAM,CAAC;AACnD,OACE,YACA,OAAQ,SAAkC,SAAS,WAE9C,SAAQ,QAAQ,SAAS,CAAC,OAAO,UAAmB;AACvD,QAAI;AACF,eACE,yCAAyC,MAAM,KAAK,IACpD,MACD;YACK;KAGR;WAEG,OAAO;AAGd,OAAI;AACF,cACE,sCAAsC,MAAM,KAAK,IACjD,iBAAiB,QAAQ,MAAM,UAAU,MAC1C;WACK;;;AAMZ,QAAO;EACL;EACA,iBAAiB;GACf,GAAG;GACH,OAAO,SAAS,MAAM,KAAK,OAAO,EAAE,GAAG,GAAG,EAAE;GAC5C,gBAAgB,CAAC,GAAG,SAAS,eAAe;GAC5C,OAAO,EAAE,GAAG,SAAS,OAAO;GAC7B;EACF;;;AAIH,SAAgB,kBAAkB,MAAsC;AACtE,QAAO;EACL,QAAQ,YAAY,KAAK;GAAE,MAAM;GAAW,QAAQ;GAAS;GAAS,CAAC;EACvE,OAAO,YAAY,KAAK;GAAE,MAAM;GAAW,QAAQ;GAAQ;GAAS,CAAC;EACrE,UAAU,YAAY,KAAK;GAAE,MAAM;GAAW,QAAQ;GAAW;GAAS,CAAC;EAC5E;;;AAIH,SAAgB,cAAc,MAM5B;AACA,QAAO;EACL,OAAO,YAAY,KAAK;GAAE,MAAM;GAAO,OAAO;GAAQ;GAAS,CAAC;EAChE,OAAO,YAAY,KAAK;GAAE,MAAM;GAAO,OAAO;GAAQ;GAAS,CAAC;EAChE,QAAQ,YAAY,KAAK;GAAE,MAAM;GAAO,OAAO;GAAS;GAAS,CAAC;EAClE,UAAU,YAAY,KAAK;GAAE,MAAM;GAAO,OAAO;GAAW;GAAS,CAAC;EACtE,OAAO,YAAY,KAAK;GAAE,MAAM;GAAO,OAAO;GAAQ;GAAS,CAAC;EACjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC1EH,MAAM,QAAQ,MAAqB,KAAA;AACnC,MAAM,OAAmB;CACvB,kBAAkB;CAClB,gCAAgC;CAChC,8BAA8B;CAC9B,aAAa;CACd;AAED,SAAgB,iBAAiB,MAMlB;AACb,KAAI,CAAC,KAAK,WAAW,CAAC,KAAK,iBAAiB,CAAC,KAAK,QAAS,QAAO;CAElE,MAAM,EAAE,eAAe,SAAS,YAAY;CAC5C,MAAM,aAAa,cAAc;CACjC,MAAM,aAAa,GAAG,QAAQ,QAAQ,OAAO,GAAG,CAAC;CACjD,MAAM,aAAa,KAAK,KAAK;CAI7B,IAAI,aAAa;CAKjB,IAAI,aAAa;CAIjB,IAAI;CACJ,IAAI,eAAuB,EAAE;CAC7B,IAAI;CAEJ,MAAM,aACJ,OACA,eACS;EACT,MAAM,OAAO;GACX,SAAS;GACT;GACA,aAAa;GACb,YAAY;IACV,cAAc,QAAQ,UAAU;IAChC,GAAG;IACH,GAAG;IACJ;GACD,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC;AAKD,QAAM,YAAY;GAChB,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC,CACC,MAAM,QAAQ;AACb,OAAI,CAAC,IAAI,GACP,WAAU,oCAAoC,IAAI,SAAS;IAE7D,CACD,OAAO,QAAQ;AACd,aACE,6BACE,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAEnD;IACD;;CAGN,MAAM,kBAAkB,SAAwB;AAC9C,YAAU,kBAAkB;GAC1B,cAAc,KAAK;GACnB,WAAW,KAAK;GAChB,WAAW,KAAK;GAChB,oBAAoB,KAAK;GACzB,kBAAkB,KAAK,eAAe;GACtC,mBAAmB,KAAK,gBAAgB;GACxC,6BAA6B,KAAK,mBAAmB;GACrD,iCAAiC,KAAK,uBAAuB;GAC7D,aAAa,KAAK,YAAY;GAC9B,mBAAmB,KAAK,gBAAgB;GACxC,cAAc,KAAK;GACpB,CAAC;;CASJ,MAAM,gBAAgB,SAAqC;AACzD,MAAI,WAAY;AAChB,eAAa;AACb,YAAU,aAAa;GACrB,eAAe,QAAQ,cAAc;GACrC,cAAc,KAAK,KAAK,GAAG,cAAc;GACzC,cAAc,KAAK;GACnB,iBAAiB,gBACb,CAAC;IAAE,MAAM;IAAQ,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM;KAAe,CAAC;IAAE,CAAC,GACpE,EAAE;GACN,kBAAkB,wBAAwB,EAAE;GAC7C,CAAC;;CAGJ,MAAM,0BAA0B,QAAiC;EAC/D,MAAM,IAAI;AAcV,MAAI,GAAG,SAAS,eAAe,CAAC,EAAE,QAAS,QAAO;EAClD,MAAM,MAAM,KAAK,KAAK;EACtB,MAAM,YAAY,MAAM;AACxB,eAAa;AACb,SAAO;GACL,UAAU;GACV,OAAO,EAAE,QAAQ,SAAS;GAC1B,OAAO,CAAC,GAAG,aAAa;GACxB,eAAe,MAAM,QAAQ,EAAE,QAAQ,QAAQ,GAAG,EAAE,QAAQ,UAAU,EAAE;GACxE,aAAa,EAAE,QAAQ,OAAO;GAC9B,cAAc,EAAE,QAAQ,OAAO;GAC/B,iBAAiB,EAAE,QAAQ,OAAO;GAClC,qBAAqB,EAAE,QAAQ,OAAO;GACtC;GACA,cAAc,EAAE,QAAQ;GACxB,SAAS;GACV;;CAGH,MAAM,mBAAmB,UAAmC;EAC1D,MAAM,IAAI;AAkBV,MAAI,GAAG,SAAS,iBAAiB,EAAE,SAAS,SAAS,YACnD,QAAO;EAET,MAAM,MAAM,KAAK,KAAK;EACtB,MAAM,YAAY,MAAM;AACxB,eAAa;AACb,SAAO;GACL,UAAU;GACV,OAAO,EAAE,QAAQ,SAAS;GAC1B,OAAO,CAAC,GAAG,aAAa;GACxB,eAAe,MAAM,QAAQ,EAAE,QAAQ,QAAQ,GAAG,EAAE,QAAQ,UAAU,EAAE;GACxE,aAAa,EAAE,QAAQ,OAAO;GAC9B,cAAc,EAAE,QAAQ,OAAO;GAC/B,iBAAiB,EAAE,QAAQ,OAAO;GAClC,qBAAqB,EAAE,QAAQ,OAAO;GACtC;GACA,cAAc,EAAE,QAAQ;GACxB,SACE,EAAE,QAAQ,eAAe,WAAW,EAAE,QAAQ,eAAe;GAChE;;AAGH,QAAO;EACL,iBAAiB,QAAQ;AACvB,mBAAgB;AAKhB,kBAAe,CACb;IAAE,MAAM;IAAQ,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM;KAAQ,CAAC;IAAE,CAC5D;AACD,0BAAuB,KAAA;;EAEzB,+BAA+B,KAAK;AAClC,OAAI;IAIF,MAAM,IAAI;AAKV,QAAI,GAAG,SAAS,UAAU,EAAE,QAC1B,cAAa,KAAK;KAChB,MAAM;KACN,SAAS,EAAE,QAAQ,WAAW,EAAE;KACjC,CAAC;IAEJ,MAAM,OAAO,uBAAuB,IAAI;AACxC,QAAI,MAAM;AACR,oBAAe,KAAK;AAIpB,kBAAa,KAAK;MAChB,MAAM;MACN,SAAS,KAAK;MACf,CAAC;AACF,4BAAuB,KAAK;;AAG9B,QAAI,GAAG,SAAS,SACd,cAAa,EAAE,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC;YAElC,KAAK;AACZ,cACE,2CACE,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAEnD;;;EAGL,6BAA6B,OAAO;AAClC,OAAI;IAIF,MAAM,IAAI;AAKV,QACE,GAAG,SAAS,iBACZ,EAAE,SAAS,SAAS,UACpB,EAAE,QAEF,cAAa,KAAK;KAChB,MAAM;KACN,SAAS,EAAE,QAAQ,WAAW,EAAE;KACjC,CAAC;IAEJ,MAAM,OAAO,gBAAgB,MAAM;AACnC,QAAI,MAAM;AACR,oBAAe,KAAK;AACpB,kBAAa,KAAK;MAChB,MAAM;MACN,SAAS,KAAK;MACf,CAAC;AACF,4BAAuB,KAAK;;YAGvB,KAAK;AACZ,cACE,oCACE,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAEnD;;;EAGL,YAAY,SAAS;AACnB,gBAAa,EAAE,SAAS,CAAC;;EAE5B;;;;;ACvVH,SAAgB,kBAAkB,MAGH;AAE7B,KAAI,KAAK,cAAc,EAAG,QAAA;AAE1B,KAAI,KAAK,UAAW,QAAA;;;;;;;;;;;AAatB,SAAgB,aACd,SACsD;CACtD,MAAM,QAAQ,QAAQ,aAAa;AACnC,KAAI,MAAM,SAAS,aAAa,IAAI,MAAM,SAAS,MAAM,CACvD,QAAA;AAEF,QAAA;;;;;AC7BF,SAAgB,mBACd,QACA,SACA,cAC6B;CAC7B,IAAI;CACJ,MAAM,gBAAgB;AACpB,mBAAiB,QAAQ,SAAS,CAC/B,WAAW,QAAQ,OAAO,CAAC,CAC3B,OAAO,UAAmB;AACzB,OAAI;AACF,mBAAe,MAAM;WACf;IAGR;;AAEN,SAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1D,KAAI,QAAQ,QAAS,UAAS;AAE9B,QAAO,EACL,MAAM,SAAS;AACb,UAAQ,oBAAoB,SAAS,QAAQ;AAC7C,QAAM;IAET;;;;;ACtBH,SAAgB,0BACd,QACA,KAC4B;AAC5B,SAAQ,OAAO;AACb,KAAG,GAAG,4BAA4B,UAAU;GAC1C,MAAM,UAAU,MAAM;GACtB,MAAM,SAAS;IAAE,MAAM;IAAe;IAAQ;AAC9C,WAAQ,KAAR;IACE,KAAK,qBACH,QAAO;KACL,GAAG;KACH,eAAe;MAAE,GAAI,QAAQ;MAA0B;MAAQ;KAChE;IACH,KAAK,mBACH,QAAO;KACL,GAAG;KACH,MAAM;MACJ,GAAI,QAAQ;MACZ,QAAQ;OAAE,GAAG;OAAQ,MAAM;OAAiB,QAAQ;OAAM;MAC3D;KACF;IACH,KAAK,qBAEH,OAAM,IAAI,MACR,yDACD;;IAEL;;;;;;;;;;;;;;;;;;;ACqBN,SAAS,aACP,MACA,cACA,aAAa,MACL;AAGR,KAAI,CAAC,WAAY,QAAO;AACxB,KAAI,aAEF,QAAO;EAAC;EAAI;EAAyB;EAAa,CAAC,KAAK,KAAK;AAM/D,QAAO;EACL;EACA;EACA;EACA,cARc,KAAK,SAAS,OAC1B,GAAG,KAAK,QAAQ,KAAK,OAAO,KAAK,YAAY,UAAU,KACvD,MAAM,KAAK,YAAY;EAOzB,WAAW,KAAK,YAAY,KAAK;EACjC,aAAa,KAAK,YAAY,KAAK;EACpC,CAAC,KAAK,KAAK;;;;;;;;;;;AAYd,MAAM,8BAA8B;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;AAGD,SAAgB,mBAAsC;CACpD,MAAM,MAAyB,EAAE;AACjC,MAAK,MAAM,OAAO,6BAA6B;EAC7C,MAAM,QAAQ,QAAQ,IAAI;AAC1B,MAAI,UAAU,KAAA,EAAW,KAAI,OAAO;;AAEtC,QAAO;;;;;;;;;AAUT,SAAgB,SAAY,MAAS,MAAoC;AACtE,MAAuD,gBAAgB;AACxE,QAAO;;;;;;;AAQT,SAAS,WAAW,SAA4B;CAC9C,MAAM,UAAW,SAAmC;AACpD,KAAI,OAAO,YAAY,SAAU,QAAO,CAAC,QAAQ;AACjD,KAAI,MAAM,QAAQ,QAAQ,CACxB,QAAO,QACJ,QAAQ,MAA2C;EAClD,MAAM,QAAQ;AACd,SAAO,OAAO,SAAS,UAAU,OAAO,MAAM,SAAS;GACvD,CACD,KAAK,MAAM,EAAE,KAAK;AAEvB,QAAO,EAAE;;;AAIX,SAAgB,YAAY,SAA0B;AACpD,QAAO,WAAW,QAAQ,CAAC,KAAK,GAAG;;;;;;;AAQrC,SAAgB,kBACd,WACA,MACM;CACN,MAAM,UAAkD,CACtD,CACE,aAAa,gBACZ,QAAQ,KAAK;EAAE,MAAM;EAAO,OAAO;EAAa;EAAK,CAAC,CACxD,EACD,CACE,aAAa,eACZ,QAAQ,KAAK;EAAE,MAAM;EAAO,OAAO;EAAY;EAAK,CAAC,CACvD,CACF;AACD,MAAK,MAAM,CAAC,QAAQ,UAAU,SAAS;EACrC,MAAM,MAAM,UAAU,QAAQ,OAAO;AACrC,MAAI,QAAQ,GAAI;EAChB,MAAM,MAAM,UACT,MAAM,MAAM,OAAO,OAAO,CAC1B,MAAM,CACN,MAAM,KAAK,CAAC;AACf,MAAI,IAAK,OAAM,IAAI;;;;;;;AAQvB,SAAgB,eAAe,WAAuC;CACpE,IAAI;AACJ,MAAK,MAAM,QAAQ,UAAU,MAAM,KAAK,EAAE;EACxC,MAAM,MAAM,KAAK,QAAQ,aAAa,OAAO;AAC7C,MAAI,QAAQ,GACV,UAAS,KAAK,MAAM,MAAM,aAAa,OAAO,OAAO,CAAC,MAAM;;AAGhE,QAAO,UAAU,KAAA;;;AAInB,MAAM,sBAAsB;;AAG5B,MAAM,uBACJ;;AAGF,SAAS,aAAa,OAA2B;AAC/C,MAAK,MAAM,KAAK,MAAM,QAAQ,CAAE,KAAI,EAAE,WAAW,YAAa,QAAO;AACrE,QAAO;;AAGT,MAAa,YAA0B;CACrC,MAAA;CAEA,MAAM,IAAI,QAAgD;AACxD,MAAI,OAAO,QAAQ,QACjB,QAAO;GACL,MAAM;GACN,gBAAA;GACA,SAAS;GACV;EAEH,MAAM,EACJ,QAAQ,WACR,OACA,MACA,MACA,QACA,SACA,eACE;EACJ,MAAM,SAAS,UAAU;EACzB,MAAM,UAAU,OAAO;EACvB,MAAM,MAAM,cAAc,KAAK;EAE/B,MAAM,UAAU,iBAAiB;GAC/B,SAAS,MAAM,MAAM;GACrB,eAAe,KAAK,YAAY;GAChC,SAAS,KAAK,YAAY,KAAK;GAC/B,SAAS,KAAK;GACf,CAAC;AAGF,MAAI,CAAC,YAAY;AACf,OAAI,KAAK,+BAA+B;AACxC,OAAI,KAAK,iBAAiB,gBAAgB,GAAG;AAC7C,OAAI,QAAQ,wCAAwC;;AAGtD,UAAQ,MAAM,OAAO,kBAAkB,oCAAoC;EAG3E,MAAM,YAAY,KAAK,KAAK;EAC5B,MAAM,UAAU,IAAI,oBAAoB;EACxC,IAAI,iBAAiB;EACrB,IAAI,oBAAoB;EAGxB,IAAI,YAAY;EAChB,MAAM,qBAAqB;GACzB,MAAM,aAAa,KAAK,KAAK,GAAG;AAChC,UAAO;IACL,aAAa;IACb,kBAAkB,KAAK,MAAM,aAAa,IAAK;IAChD;;EAYH,MAAM,kBAAkB,gBACtB,UAAU,cAAc,iBAAiB;GACvC,cAAc;GACd,GAAG,cAAc;GACjB,OAAO;GACR,CAAC;EACJ,MAAM,kBAAkB,cAAmC;AACzD,WAAQ,KAAK,sBAAsB;AACnC,kBAAA,mCAAwD;AACxD,UAAO;IACL,MAAM;IACN,gBAAA;IACA,SAAS,6BAA6B,YAAY,IAAK;IACxD;;EAGH,IAAI;EACJ,IAAI,YAAY;EAChB,IAAI;EACJ,IAAI,WAAW;EACf,IAAI;EAEJ,IAAI;EAEJ,MAAM,4BAAyC;AAC7C,WAAQ,KAAK,8BAA8B;AAC3C,aACE,4CAA4C,eAAe,aAAa,WACzE;AACD,kBAAA,wBAA6C;AAC7C,UAAO;IACL,MAAM;IACN,gBAAA;IACD;;AAEH,MAAI;GACF,MAAM,EACJ,oBACA,uBACA,gBACA,aACA,eACA,aACA,wBACA,0BACA,0BACA,0BACA,0BACA,0BACA,8BACE,MAAM,OAAO;GAMjB,MAAM,cAAc,YAClB,YACE,KAAK,YAAY,MACjB,MAAM,mBAAmB,KAAK,YAAY,EAC1C,KAAK,UACN;GACH,MAAM,OAAO,MAAM,aAAa;GAChC,MAAM,kBAAkB,aAA0B;IAChD,YAAY,QAAQ;IACpB,aAAa,QAAQ;IACrB,QAAQ,QAAQ;IAChB,gBAAgB,KAAK;IACrB,aAAa,KAAK;IAClB;IACA,QAAQ,OAAO;IAChB;GACD,MAAM,EAAE,UAAU,MAAM,QAAQ,qBAC9B,eAAe,KAAK,CACrB;GACD,MAAM,WAAW,cAAc,SAAS,YAAY,QAAQ,CAAC;AAC7D,YAAS,iBAAiB,kBAAkB,SAAkB;GAE9D,MAAM,QAAQ,SAAS,KAAK,kBAAkB,QAAQ;AACtD,OAAI,CAAC,MACH,QAAO;IACL,MAAM;IACN,gBAAA;IACA,SAAS;IACV;GAcH,MAAM,WAAW,EAAE,SAAS,OAAO;GAEnC,MAAM,EAAE,yBAAyB,uBAAuB,MAAM,OAC5D;GAEF,MAAM,WAAW,wBAAwB;IACvC,UAAU,OAAO;IACjB,iBAAiB,UAAU;IAC3B,2BAA2B,SAAS;IACpC,gBAAgB,KAAK;IAErB,kBAAkB,MAAM;IACzB,CAAC;AACF,mBAAgB,SAAS;GAIzB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AACvC,uBAAoB;GAOzB,MAAM,qBAAqB,CAAC,SAAS,QAAQ;GAG7C,IAAI;GAKJ,IAAI,aAAa;AACjB,OAAI,CAAC,OAAO,SACV,KAAI;IACF,MAAM,EAAE,iBAAiB,sBAAsB,MAAM,OAAO;IAC5D,MAAM,WAAW,MAAM,mBAAmB,KAAK,YAAY;IAI3D,MAAM,eAAe,0BACnB,OAAO,iBACR;IAED,MAAM,sBAAsB,kBAC1B,KAAK,YAAY,KAAK,QACtB,UACA,aACD;IACD,MAAM,MAAM,MAAM,gBAAgB;KAChC,QAAQ,KAAK,YAAY,KAAK;KAC9B,aAAa;KACb,WAAW;KACZ,CAAC;AACF,uBAAmB,KAAK,IAAI,iBAAiB;AAC7C,iBAAa,IAAI;AACjB,sBAAkB,MAAM;AACxB,iBAAa;YACN,KAAK;AACZ,QAAI;AACF,mBAAc;YACR;AAGR,iBAAa,KAAA;AACb,cAAU,mCAAmC,OAAO,IAAI,GAAG;AAC3D,cAAU,cAAc,oBAAoB;KAC1C,SAAS;KACT,OAAO;KACP,OAAO,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI;KACjC,CAAC;;AAIN,OAAI,WACF,oBAAmB,KACjB,0BAA0B,WAAW,QAAQ,IAAI,CAClD;GAGH,MAAM,iBAAiB,IAAI,sBAAsB;IAC/C,KAAK,MAAM;IACX,UAAU,aAAa;IACvB,cACE,qBAAqB;KACnB,SAAS,UAAU;KACnB,UAAA;KACA,SAAA;KACA,MAAM;MAAE,MAAM;MAAM;MAAY;KACjC,CAAC,GACF,OACA,aAAa,MAAM,iBAAiB,WAAW;IACjD,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,UAAU;IACV;IACD,CAAC;AACF,SAAM,eAAe,QAAQ;GAQ7B,MAAM,EAAE,wBAAwB,MAAM,OAAO;GAC7C,MAAM,EAAE,4BAA4B,MAAM,OAAO;GACjD,MAAM,EAAE,4BAA4B,MAAM,OAAO;GAEjD,MAAM,kBAAkB,yBAAyB,UAC/C,KAAK;IAAE,MAAM;IAAS;IAAO,CAAC,CAC/B;GAID,MAAM,eAAe,SACnB,yBAAyB,MAAM,YAAY,EACzC,YAAY,SAAS;IAAE,GAAG;IAAK,KAAK,kBAAkB;IAAE,GACzD,CAAC,EACF,aACD;GAED,MAAM,cAAc;IAKlB,SAAS,yBAAyB,MAAM,WAAW,EAAE,WAAW;IAChE,SAAS,yBAAyB,MAAM,WAAW,EAAE,aAAa;IAClE,SAAS,0BAA0B,MAAM,WAAW,EAAE,aAAa;IACnE;IAIA,SAAS,uBAAuB,MAAM,WAAW,EAAE,WAAW;IAC9D,SAAS,yBAAyB,MAAM,WAAW,EAAE,WAAW;IAChE,SAAS,yBAAyB,MAAM,WAAW,EAAE,WAAW;IAChE,GAAG,oBAAoB;KACrB,kBAAkB,MAAM;KACxB,eAAe,KAAK;KACpB,gBAAgB,KAAK;KACrB;KACA,sBAAsB,OAAO;KAI7B,WAAW,OAAO;KAClB,cAAc,OAAO;KACrB,qBAAqB,YAAY;AAC/B,eAAS,UAAU;;KAIrB,iBAAiB,UAAU;KAC5B,CAAC;IAGF,GAAG,gBAAgB;IAInB,wBAAwB;KACtB;KACA,eAAe;KACf,KAAK,MAAM;KACX,UAAU,aAAa;KACvB,iBAAiB,SAAS;KAC1B,UAAU;KACV,KAAK;MAAE;MAAoB;MAAuB;MAAgB;KACnE,CAAC;IACH,CAAC,QAAQ,SAAS,CAAC,OAAO,YAAY,mBAAmB,IAAI,KAAK,KAAK,CAAC;GAEzE,MAAM,EAAE,SAAS,iBAAiB,MAAM,mBAAmB;IACzD;IACA,eAAe;IAGf,eAAe,KAAK;IACpB,KAAK,MAAM;IACX,gBAAgB,eAAe,SAAS,MAAM,WAAW;IACzD;IAIA,SAAS;IACT;IACD,CAAC;AAMF,kBAAe,mBACb,OAAO,QACP,eACC,UAAU;AACT,cAAU,sBAAsB,OAAO,MAAM,GAAG;KAEnD;AACD,SAAM,aAAa,eAAe,EAAE,CAAC;GAKrC,MAAM,QAAQ,kBAAkB;IAC9B,QAAQ,OAAO;IACf,SAAS;IACT;IACA;IACA;IACA;IACA,cAAc;IACd,gBAAgB;AACd,eAAU,qDAAqD;AAC/D,eAAU,cAAc,0BAA0B,EAAE,SAAS,MAAM,CAAC;;IAEvE,CAAC;GAKF,MAAM,cAAc,aAAa,WAAW,UAAU;AAIpD,YAAQ,6BAA6B,MAAM;AAE3C,YAAQ,MAAM,MAAd;KACE,KAAK,eAAe;AAElB,UAAK,MAAM,SAA+B,SAAS,YACjD;AAEF,wBAAkB;AAClB,YAAM,kBAAkB,MAAM,QAAQ;MACtC,MAAM,SAAS,WAAW,MAAM,QAAQ;MACxC,MAAM,YAAY,OAAO,KAAK,GAAG,CAAC,MAAM;AAExC,2BAAqB,OAAO,GAAG,GAAG,IAAI,IAAI,MAAM;AAChD,UAAI,WAEF,QAAO,YAAY,UAAU;OAC3B,MAAM;OACN,SAAS,EACP,SAAS,OAAO,KAAK,UAAU;QAAE,MAAM;QAAQ;QAAM,EAAE,EACxD;OACF,CAAC;AAEJ,UAAI,WAAW;AACb,iBAAU,mBAAmB,UAAU,MAAM,GAAG,IAAK,GAAG;AACxD,yBAAkB,WAAW,KAAK;OAGlC,MAAM,aAAa,eAAe,UAAU;AAC5C,WAAI,YAAY;AACd,aAAK;SAAE,MAAM;SAAU,SAAS;SAAY,CAAC;AAC7C,gBAAQ,QAAQ,WAAW;;AAE7B,YAAK,MAAM,QAAQ,UAAU,MAAM,KAAK,CAAE,SAAQ,KAAK,KAAK;;AAE9D;;KAEF,KAAK,wBAAwB;AAC3B,mBAAa;MACb,MAAM,OAAO,KAAK,UAAU,MAAM,QAAQ,EAAE,CAAC,CAAC,MAAM,GAAG,IAAI;AAC3D,gBAAU,UAAU,MAAM,SAAS,GAAG,OAAO;AAC7C,UAAI,WACF,QAAO,YAAY,UAAU;OAC3B,MAAM;OACN,SAAS,EACP,SAAS,CACP;QACE,MAAM;QACN,MAAM,MAAM;QACZ,OAAO,MAAM;QACd,CACF,EACF;OACF,CAAC;AAKJ;;KAEF,KAAK;AAKH,gBACE,QAAQ,MAAM,UAAU,MAAM,IAAI,GAAG,MAAM,SAAS,IAClD,OAAO,MAAM,WAAW,WACpB,MAAM,SACN,KAAK,UAAU,MAAM,UAAU,GAAG,GAEzC;AACD;KAEF,KAAK;AACH,gBAAU,6BAA6B,OAAO,MAAM,UAAU,CAAC,GAAG;AAClE;KAEF,QACE;;KAEJ;AAMF,WAAQ,iBAAiB,OAAO;GAEhC,IAAI,WAAW,MAAM,iBAAiB;GAEtC,MAAM,UACJ,cACA,iBAAiB;AACf,eAAW;AACX,mBAAe,aAAa,OAAO,CAAC,OAAO,UAAmB;AAC5D,eAAU,8BAA8B,OAAO,MAAM,GAAG;MACxD;MACD,WAAW,UAAU;AAC1B,OAAI;AACF,QAAI,OAAO,QAAQ,QACjB,QAAO;KACL,MAAM;KACN,gBAAA;KACA,SAAS;KACV;AAGH,UAAM,MAAM,OAAO,OAAO;AAC1B,eAAW,MAAM,iBAAiB;IAMlC,IAAI,iBAAiB;AACrB,WACE,CAAC,cACD,iBAAiB,uBACjB,CAAC,SAAS,MAAM,qBAChB,CAAC,OAAO,QAAQ,WAChB,CAAC,YACD,aAAa,gBAAgB,MAAM,EACnC;AACA,uBAAkB;AAClB,eACE,kDAAkD,eAAe,GAAG,sBACrE;AACD,WAAM,MAAM,OAAO,qBAAqB;AACxC,gBAAW,MAAM,iBAAiB;;AAIpC,QACE,CAAC,cACD,CAAC,SAAS,MAAM,qBAChB,CAAC,YACD,CAAC,OAAO,QAAQ,QAEhB,KAAI;AACF,WAAM,aAAa,OAAO,mBAAmB;aACtC,KAAK;AACZ,eAAU,+BAA+B,OAAO,IAAI,GAAG;;aAGnD;AACR,QAAI,QAAS,cAAa,QAAQ;AAClC,QAAI;AACF,kBAAa;YACP;;AAKV,OAAI,OAAO,QAAQ,QACjB,QAAO;IACL,MAAM;IACN,gBAAA;IACA,SAAS;IACV;AAEH,OAAI,YAAY,cAAc,CAAC,SAAS,MAAM,kBAC5C,QAAO,eAAe,WAAW,UAAU;AAE7C,OAAI,YAAY,CAAC,SAAS,MAAM,mBAAmB;AACjD,YAAQ,KACN,OAAO,gBAAgB,GAAG,OAAO,iBAAiB,SACnD;AACD,mBAAe,SAAS,eAAe;AACvC,QAAI,SAAS,WAAW,IACtB,QAAO;KACL,MAAM;KACN,SAAS;MACP,MAAM,WAAW;MACjB,SAAS;MACT,QAAQ,EAAE,iBAAiB,SAAS,SAAS;MAC9C;KACF;AAEH,WAAO,SAAS,mBAAA,iBACZ;KACE,MAAM;KACN,gBAAA;KACA,SAAS,SAAS;KACnB,GACD;KACE,MAAM;KACN,gBAAgB,SAAS;KACzB,SAAS,SAAS;KACnB;;AAKP,OAAI,SAAS,MAAM,kBAAmB,QAAO,qBAAqB;GAIlE,MAAM,YAAY,CAAC,cAAc,aAAa,gBAAgB,MAAM;GACpE,MAAM,UAAU,kBAAkB;IAAE;IAAW;IAAW,CAAC;AAC3D,OAAI,YAAA,sBAAwC;AAC1C,YAAQ,KAAK,wBAAwB;AACrC,cACE,qBAAqB,eAAe,kCACrC;AACD,cAAU,cAAc,qBAAqB,EAC3C,iBAAiB,gBAClB,CAAC;IAEF,MAAM,iBAAiB,aAAA,qCAEnB;AACJ,mBAAe,eAAe;AAC9B,WAAO;KAAE,MAAM;KAAW;KAAgB;;AAE5C,OAAI,YAAA,2BAA6C;AAC/C,YAAQ,KAAK,iCAAiC;AAC9C,cAAU,mCAAmC;AAC7C,cAAU,cAAc,0BAA0B,EAAE,YAAY,MAAM,CAAC;AACvE,mBAAe,QAAQ;AACvB,WAAO;KAAE,MAAM;KAAW,gBAAgB;KAAS;;GAGrD,MAAM,SAAS,QAAQ,QAAQ;AAC/B,OAAI,OACF,WAAU,QAAQ,0BAA0B,EAAE,QAAQ,CAAC;GAKzD,MAAM,eAAe,QAAQ,qBAAqB;AAClD,OAAI,iBAAiB,KAAA,EACnB,WAAU,cAAc,iCAAiC,EACvD,QAAQ,cACT,CAAC;AAMJ,OAAI;IACF,MAAM,WAAW,KAAK,KAAK,MAAM,YAAY,uBAAuB;AACpE,QAAI,CAAC,cAAc,GAAG,WAAW,SAAS,CACxC,OAAM,GAAG,SAAS,GAAG,SAAS;YACzB,KAAK;AACZ,cAAU,8CAA8C,OAAO,IAAI,GAAG;;GAGxE,MAAM,QAAQ,aAAa,iBAAiB;AAC5C,aAAU,cAAc,mBAAmB;IACzC,GAAG,cAAc;IACjB,OAAO;IACP,WAAW;IAGX,cAAc,MAAM,OAAO;IAC3B,eAAe,MAAM,OAAO;IAC5B,6BAA6B,MAAM,OAAO;IAC1C,yBAAyB,MAAM,OAAO;IACvC,CAAC;AACF,WAAQ,KAAK,OAAO,kBAAkB,+BAA+B;AACrE,eAAY;AACZ,OAAI,CAAC,WAAY,QAAO,EAAE,MAAM,WAAW;AAC3C,OAAI;AACF,WAAO;KACL,MAAM;KACN,kBAAkB,KAAK,MAAM,kBAAkB;KAChD;WACK;AAEN,WAAO,EAAE,MAAM,WAAW;;WAErB,KAAK;AACZ,OAAI,OAAO,QAAQ,QACjB,QAAO;IACL,MAAM;IACN,gBAAA;IACA,SAAS;IACV;AAEH,OAAI,eAAe,kBAAmB,QAAO,qBAAqB;AAClE,OAAI,YAAY,WAAY,QAAO,eAAe,WAAW,UAAU;GACvE,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,aAAU,mBAAmB,UAAU;AACvC,WAAQ,KAAK,OAAO,gBAAgB,GAAG,OAAO,iBAAiB,SAAS;AACxE,OAAI,MAAM,qBAAqB,UAAU;GACzC,MAAM,QAAQ,mBAAmB,IAAI;AACrC,OAAI,MAAM,SAAS,eAAe,OAAO;AACvC,mBAAA,mBAAwC;AACxC,WAAO;KACL,MAAM;KACN,SAAS;MAAE,MAAM,MAAM;MAAM,SAAS,MAAM;MAAS,OAAO;MAAK;KAClE;;GAEH,MAAM,iBAAiB,aAAa,QAAQ;AAC5C,kBAAe,eAAe;AAC9B,UAAO;IACL,MAAM;IACN;IACA;IACA,OAAO,eAAe,QAAQ,MAAM,KAAA;IACrC;YACO;AACR,SAAM,cAAc,QAAQ;AAC5B,SAAM;AACN,OAAI;AACF,kBAAc;WACR;AAGR,OAAI;AACF,YAAQ,YAAY,UAAU;WACxB;;;CAUZ,MAAM,QAAQ,QAA6C;EACzD,MAAM,EAAE,cAAc,MAAM,OAAO;AACnC,SAAO,UAAU,OAAO;;CAE3B"}