@qduc/term2 0.21.0 → 0.22.0

package/dist/tools/session-browser/session-browser-tools.js

@@ -1,15 +1,23 @@
 import { z } from 'zod';
 import { boundedJsonFailure, fitsSerializedText } from '../../utils/output/bounded-json.js';
-import { resolveToolResultMaxBytes } from '../../utils/output/bound-tool-result.js';
+import { isScriptedToolCall, resolveToolResultMaxBytes } from '../../utils/output/bound-tool-result.js';
 import { getCallIdFromItem, getOutputText, isSuccessOutput, normalizeToolArguments, createBaseMessage, } from '../format-helpers.js';
 const maxChars = z.number().int().min(512).max(12_000).optional();
 const limit = z.number().int().min(1).max(50).optional();
 const id = z.string().regex(/^[A-Za-z0-9][A-Za-z0-9_-]*$/);
+const sessionKind = z.enum(['user', 'assistant', 'reasoning', 'system', 'tool', 'subagent']);
 export function createSessionBrowserToolDefinitions(browser) {
     return [
-        definition('session_list', 'List prior locally persisted sessions for the current project. `total` is the number of browsable sessions in scope; `omitted` counts list entries dropped only because the output budget could not fit them (entries beyond `limit` are excluded by `total`).', z.object({ limit, maxChars }).strict(), (params) => browser.list(params)),
-        definition('session_search', 'Search prior locally persisted session transcripts for the current project. `total` is the number of ranked matches before `limit` is applied; `omitted` counts matches dropped only because the output budget could not fit them. Matches from the currently active session sort last, because searching indexes tool outputs and the query echoes in the live transcript.', z.object({ query: z.string().refine((value) => /\S/.test(value)), limit, maxChars }).strict(), (params) => browser.search(params)),
-        definition('session_read', 'Read a prior local session transcript progressively by cursor. Use `id: "previous"` for the persisted rollover predecessor, or an exact/unambiguous UUID prefix. Ambiguous prefixes return candidates and are never guessed. Use `from: "end"` on an initial read to start at the final projected record; omit `cursor` with this option, then use the returned cursor for any continuation. `total` is the projected record count for the whole session; `omitted` counts records not begun in this page (a partially emitted chunk still counts as begun), so `total - omitted` records were started here.', z
+        definition('session_list', 'List prior locally persisted sessions for the current project. `total` is the number of browsable sessions in scope; `omitted` counts list entries dropped only because the output budget could not fit them (entries beyond `limit` are excluded by `total`).', z.object({ limit, maxChars }).strict(), (params) => browser.list(params), '{ sessions: { id: string, shortRef: string, createdAt: string, updatedAt: string, firstUserMessage?: string, model?: string, provider?: string, messageCount: number }[], scope: string, total: number, omitted: number, unavailable: number, charsUsed: number } | { error: { code: string, message: string, candidates?: { id: string, shortRef: string }[] } }'),
+        definition('session_search', 'Search prior locally persisted session transcripts for the current project. Whitespace-separated query terms use OR matching, so prefer distinctive terms over broad words. Use `kinds: ["user", "assistant"]` to exclude noisy tool, reasoning, system, and subagent records when looking for conversation content. Without `kinds`, every projected record kind is searched. `total` is the number of ranked matches after the kind filter and before `limit` is applied; `omitted` counts matches dropped only because the output budget could not fit them. Matches from the currently active session sort last, because searching indexes tool outputs and the query echoes in the live transcript. Each match\'s `updatedAt` is the session\'s last-write timestamp, not per-message time.', z
+            .object({
+            query: z.string().refine((value) => /\S/.test(value)),
+            kinds: z.array(sessionKind).min(1).max(6).optional(),
+            limit,
+            maxChars,
+        })
+            .strict(), (params) => browser.search(params), '{ results: { sessionId: string, shortRef: string, kind: string, messageIndex: number, snippet: { text: string, truncated: boolean }, updatedAt: string }[], scope: string, total: number, omitted: number, unavailable: number, skippedMessageCount: number, charsUsed: number } | { error: { code: string, message: string, candidates?: { id: string, shortRef: string }[] } }'),
+        definition('session_read', 'Read a prior local session transcript progressively by cursor. Use `id: "previous"` for the persisted rollover predecessor, or an exact/unambiguous ID or shortRef returned by `session_list`/`session_search`; never reconstruct an ID. Ambiguous prefixes return candidates and are never guessed. On an initial read, `from: "end"` starts at the last `limit` projected records in chronological order (`limit` selects the tail region; without `from: "end"` the read starts at the first record); omit `cursor` with this option, then continue with the returned cursor and no `from`. Cursors are process-local opaque handles: use exactly the `nextCursor` returned by the preceding page with the same `id`. Never invent, edit, or reuse a cursor from another read; after an invalid or stale cursor, restart without one. `maxChars` may require continuation pages; `nextCursor` is returned only while forward content remains, so its absence after a tail read says nothing about earlier records. `total` is the projected record count for the whole session; `omitted` counts whole-session records not represented on this page for any reason — before the tail anchor, beyond `limit`, or awaiting continuation — unlike `session_list`/`session_search`, whose `omitted` counts only budget-dropped entries; a partial or resumed chunk still represents its record, so `total - omitted` records are represented here.', z
             .object({ id, from: z.literal('end').optional(), cursor: z.string().optional(), limit, maxChars })
             .strict()
             .superRefine((params, ctx) => {
@@ -19,18 +27,26 @@ export function createSessionBrowserToolDefinitions(browser) {
                     path: ['from'],
                     message: '`from: "end"` requires an initial read without cursor.',
                 });
-        }), (params) => browser.read(params)),
+        }), (params) => browser.read(params), '{ scope: string, session: { id: string, shortRef: string, createdAt: string, updatedAt: string, model?: string, provider?: string }, items: { index: number, kind: string, text: string, textOffset: number, totalTextChars: number, complete: boolean }[], nextCursor?: string, total: number, omitted: number, skippedMessageCount: number, charsUsed: number } | { error: { code: string, message: string, candidates?: { id: string, shortRef: string }[] } }'),
     ];
 }
-function definition(name, description, parameters, execute) {
+function definition(name, description, parameters, execute, scriptedReturnShape) {
     return {
         name,
         description,
         parameters,
+        scriptedReturnShape,
         preserveSerializedOutput: true,
         needsApproval: () => false,
-        execute: async (params) => {
-            const result = JSON.stringify(execute(params));
+        execute: async (params, context) => {
+            const value = await execute(params);
+            // A scripted call receives the structured envelope directly; the
+            // serialized-JSON-string form exists to bound what enters model
+            // context, and a script would otherwise have to JSON.parse every
+            // result before reading its fields.
+            if (isScriptedToolCall(context))
+                return value;
+            const result = JSON.stringify(value);
             const budget = params.maxChars ?? 12_000;
             return fitsSerializedText(result, { maxChars: budget, maxBytes: resolveToolResultMaxBytes() })
                 ? result

package/dist/tools/session-browser/session-browser-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-browser-tools.js","sourceRoot":"","sources":["../../../source/tools/session-browser/session-browser-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAClE,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACzD,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAE3D,MAAM,UAAU,mCAAmC,CAAC,OAAuB;IACzE,OAAO;QACL,UAAU,CACR,cAAc,EACd,gQAAgQ,EAChQ,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EACtC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CACjC;QACD,UAAU,CACR,gBAAgB,EAChB,6WAA6W,EAC7W,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAC7F,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CACnC;QACD,UAAU,CACR,cAAc,EACd,8kBAA8kB,EAC9kB,CAAC;aACE,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;aACjG,MAAM,EAAE;aACR,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;YAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBACtD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,wDAAwD;iBAClE,CAAC,CAAC;QACP,CAAC,CAAC,EACJ,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CACjC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,IAAY,EACZ,WAAmB,EACnB,UAAa,EACb,OAAwC;IAExC,OAAO;QACL,IAAI;QACJ,WAAW;QACX,UAAU;QACV,wBAAwB,EAAE,IAAI;QAC9B,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK;QAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACxB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAI,MAAgC,CAAC,QAAQ,IAAI,MAAM,CAAC;YACpE,OAAO,kBAAkB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAAE,CAAC;gBAC5F,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,oBAAoB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,GACR,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC;gBACnE,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,EAAE,CAAC;YACL,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO;gBACL,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE;oBACvC,OAAO,EAAE,GAAG,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE;oBAC1D,MAAM;oBACN,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC;oBAChC,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI;iBACf,CAAC;aACH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"session-browser-tools.js","sourceRoot":"","sources":["../../../source/tools/session-browser/session-browser-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACxG,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAClE,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACzD,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAC3D,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAkB,CAAC,CAAC;AAE9G,MAAM,UAAU,mCAAmC,CAAC,OAAuB;IACzE,OAAO;QACL,UAAU,CACR,cAAc,EACd,gQAAgQ,EAChQ,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EACtC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAChC,mWAAmW,CACpW;QACD,UAAU,CACR,gBAAgB,EAChB,kwBAAkwB,EAClwB,CAAC;aACE,MAAM,CAAC;YACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACpD,KAAK;YACL,QAAQ;SACT,CAAC;aACD,MAAM,EAAE,EACX,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAClC,kXAAkX,CACnX;QACD,UAAU,CACR,cAAc,EACd,m3CAAm3C,EACn3C,CAAC;aACE,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;aACjG,MAAM,EAAE;aACR,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;YAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBACtD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,MAAM,CAAC;oBACd,OAAO,EAAE,wDAAwD;iBAClE,CAAC,CAAC;QACP,CAAC,CAAC,EACJ,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAChC,mcAAmc,CACpc;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,IAAY,EACZ,WAAmB,EACnB,UAAa,EACb,OAAwC,EACxC,mBAA2B;IAE3B,OAAO;QACL,IAAI;QACJ,WAAW;QACX,UAAU;QACV,mBAAmB;QACnB,wBAAwB,EAAE,IAAI;QAC9B,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK;QAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;YACpC,iEAAiE;YACjE,gEAAgE;YAChE,iEAAiE;YACjE,oCAAoC;YACpC,IAAI,kBAAkB,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,MAAM,GAAI,MAAgC,CAAC,QAAQ,IAAI,MAAM,CAAC;YACpE,OAAO,kBAAkB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAAE,CAAC;gBAC5F,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,oBAAoB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,GACR,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC;gBACnE,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,EAAE,CAAC;YACL,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO;gBACL,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE;oBACvC,OAAO,EAAE,GAAG,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE;oBAC1D,MAAM;oBACN,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC;oBAChC,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI;iBACf,CAAC;aACH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/session-rollover/session-rollover-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-rollover-tool.d.ts","sourceRoot":"","sources":["../../../source/tools/session-rollover/session-rollover-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,qCAAqC,CAAC;AACjH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AASlD,eAAO,MAAM,yBAAyB;;;;;;kBAK3B,CAAC;AAEZ,wBAAgB,mCAAmC,CACjD,eAAe,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,6BAA6B,GAClF,cAAc,CAAC,OAAO,yBAAyB,CAAC,CAoClD"}
+{"version":3,"file":"session-rollover-tool.d.ts","sourceRoot":"","sources":["../../../source/tools/session-rollover/session-rollover-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,qCAAqC,CAAC;AACjH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AASlD,eAAO,MAAM,yBAAyB;;;;;;kBAW3B,CAAC;AAEZ,wBAAgB,mCAAmC,CACjD,eAAe,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,6BAA6B,GAClF,cAAc,CAAC,OAAO,yBAAyB,CAAC,CAsClD"}

package/dist/tools/session-rollover/session-rollover-tool.js

@@ -2,14 +2,20 @@ import { z } from 'zod';
 import { createBaseMessage, getCallIdFromItem, getOutputText, isSuccessOutput, normalizeToolArguments, } from '../format-helpers.js';
 export const sessionRolloverParameters = z
     .object({
-    brief: z.string().max(8_000),
+    brief: z
+        .string()
+        .max(8_000)
+        .describe('Keep well below 8,000 characters. Give the next open step, unfinished decisions, completed effects, and durable paths/commits. ' +
+        'When a canonical artifact already holds the state, write a short delta and pointer instead of copying it.'),
     reason: z.enum(['context_pressure', 'task_boundary']).optional(),
 })
     .strict();
 export function createSessionRolloverToolDefinition(requestRollover) {
     return {
         name: 'session_rollover',
-        description: 'Request an idle-boundary rotation into a fresh session. Include a concise handoff brief with completed work, open work, and durable-state pointers.',
+        description: 'Request an idle-boundary rotation into a fresh session. Live background work survives the rotation; include its current status and next action in the brief, but do not wait for it merely to rotate. ' +
+            'Keep the brief well below the 8,000-character limit using durable-state pointers and the next open step. ' +
+            'The successor retains the session-owned live background registry and can inspect or control those handles; save durable results when they are ready rather than copying transient output into the brief.',
         parameters: sessionRolloverParameters,
         terminateAfterExecution: (result) => typeof result === 'string' &&
             (() => {

package/dist/tools/session-rollover/session-rollover-tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-rollover-tool.js","sourceRoot":"","sources":["../../../source/tools/session-rollover/session-rollover-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,mCAAmC,CACjD,eAAmF;IAEnF,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,qJAAqJ;QACvJ,UAAU,EAAE,yBAAyB;QACrC,uBAAuB,EAAE,CAAC,MAAM,EAAE,EAAE,CAClC,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,GAAG,EAAE;gBACJ,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA2C,CAAC;oBAC5E,OAAO,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,CAAC;gBACtE,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,EAAE;QACN,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK;QAC1B,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5D,oBAAoB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,GACR,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC;gBACnE,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,EAAE,CAAC;YACL,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO;gBACL,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE;oBACvC,OAAO,EAAE,kBAAkB;oBAC3B,MAAM;oBACN,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC;oBAChC,QAAQ,EAAE,kBAAkB;oBAC5B,QAAQ,EAAE,IAAI;iBACf,CAAC;aACH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"session-rollover-tool.js","sourceRoot":"","sources":["../../../source/tools/session-rollover/session-rollover-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,KAAK,CAAC;SACV,QAAQ,CACP,iIAAiI;QAC/H,2GAA2G,CAC9G;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,mCAAmC,CACjD,eAAmF;IAEnF,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,wMAAwM;YACxM,2GAA2G;YAC3G,0MAA0M;QAC5M,UAAU,EAAE,yBAAyB;QACrC,uBAAuB,EAAE,CAAC,MAAM,EAAE,EAAE,CAClC,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,GAAG,EAAE;gBACJ,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA2C,CAAC;oBAC5E,OAAO,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,CAAC;gBACtE,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,EAAE;QACN,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK;QAC1B,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5D,oBAAoB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,GACR,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC;gBACnE,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,EAAE,CAAC;YACL,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO;gBACL,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE;oBACvC,OAAO,EAAE,kBAAkB;oBAC3B,MAAM;oBACN,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC;oBAChC,QAAQ,EAAE,kBAAkB;oBAC5B,QAAQ,EAAE,IAAI;iBACf,CAAC;aACH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/system/run-code/index.d.ts

@@ -0,0 +1,2 @@
+export { bindRunCodeRegistry, createRunCodeToolDefinition, formatRunCodeCommandMessage, runCodeParametersSchema, RUN_CODE_LIMITS, RUN_CODE_PROHIBITED_TOOLS, TOOL_NAME_DESCRIBE, TOOL_NAME_RUN_CODE, isDirectlyCallable, type CreateRunCodeToolOptions, type RunCodeActionOutcome, type RunCodeActionReceipt, type RunCodeCallRecord, type RunCodeParams, } from './run-code.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/system/run-code/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../source/tools/system/run-code/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,2BAA2B,EAC3B,uBAAuB,EACvB,eAAe,EACf,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC"}

package/dist/tools/system/run-code/index.js

@@ -0,0 +1,2 @@
+export { bindRunCodeRegistry, createRunCodeToolDefinition, formatRunCodeCommandMessage, runCodeParametersSchema, RUN_CODE_LIMITS, RUN_CODE_PROHIBITED_TOOLS, TOOL_NAME_DESCRIBE, TOOL_NAME_RUN_CODE, isDirectlyCallable, } from './run-code.js';
+//# sourceMappingURL=index.js.map

package/dist/tools/system/run-code/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../source/tools/system/run-code/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,2BAA2B,EAC3B,uBAAuB,EACvB,eAAe,EACf,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GAMnB,MAAM,eAAe,CAAC"}

package/dist/tools/system/run-code/run-code-telemetry.d.ts

@@ -0,0 +1,92 @@
+import type { ILoggingService, LogMetadataContract } from '../../../services/service-interfaces.js';
+import type { HostResult } from '../../../services/sandboxed-code-host/host-types.js';
+import type { RunCodeActionReceipt, RunCodeCallRecord } from './run-code.js';
+/**
+ * Structured completion telemetry for one `run_code` invocation.
+ *
+ * One event per invocation, written through the application logger so it lands
+ * in the same durable JSONL app log as every other structured event. It exists
+ * to answer the question that gates the type-checked TypeScript slice
+ * (docs/plans/run-code-typescript.md): do statically preventable nested-call
+ * failures actually cause retries, false completion, or replay? The answer is
+ * derived by querying these events, not by re-reading conversations, so the
+ * event carries the join keys (sessionId, sourceDigest, outcome, timestamp) as
+ * well as the counts.
+ *
+ * Emitted at `info`: the default log level is `info`, so the older
+ * `run_code execution finished` line, which is `debug`, is absent from default
+ * app logs and cannot be counted.
+ *
+ * Privacy: every emitted value is a number, an enum drawn from a closed set, or
+ * a source digest. The script source, its arguments, the failure messages, tool
+ * names, workspace paths, and the model-authored `description` are deliberately
+ * never emitted — nested failure text routinely carries paths and arguments, and
+ * an unknown member name is arbitrary model-authored text. Failure attribution
+ * reads those messages in-process and emits only a class.
+ */
+export declare const RUN_CODE_COMPLETION_EVENT = "tool.run_code.completion";
+export declare const RUN_CODE_COMPLETION_MESSAGE = "run_code completed";
+/**
+ * How the invocation ended.
+ *
+ * The first six are the categories the plan requires. The remaining four are
+ * host outcomes that had no honest home among them: folding a cancellation into
+ * `timeout` would contradict the termination-reason distinction established for
+ * shell timeouts, and a rejected source or unavailable sandbox is not a script
+ * failure at all. `host-error` is unreachable while every `HostErrorCode` is
+ * mapped below.
+ */
+export type RunCodeCompletionOutcome = 'success' | 'parse' | 'nested-validation' | 'runtime' | 'return-serialization' | 'timeout' | 'cancelled' | 'input-rejected' | 'host-unavailable' | 'host-error';
+/**
+ * Which nested-call failure ended the invocation.
+ *
+ * `nested-validation` covers every uncaught `tools.*` rejection, including an
+ * approval denial, so this class is what says whether the failure was the
+ * statically preventable kind the TypeScript slice targets.
+ *
+ * `typescript-syntax` and `known-return-shape` are reserved: they are the
+ * classes the plan names for a checked script path, and nothing produces them
+ * while scripts are plain JavaScript and `scriptedReturnShape` stays prose.
+ */
+export type RunCodeFailureClass = 'unknown-tool' | 'parameter-shape' | 'nested-call' | 'approval-denied' | 'budget' | 'typescript-syntax' | 'known-return-shape';
+/** Nested `tools.*` calls this run observed, by outcome. */
+export interface RunCodeNestedCallCounts {
+    /** Execution calls; schema lookups are counted separately. */
+    calls: number;
+    schemaLookups: number;
+    ok: number;
+    unknownTool: number;
+    invalidParams: number;
+    approvalDenied: number;
+    prohibited: number;
+    otherFailures: number;
+}
+/** Host-observed action-effect evidence at the end of the run. */
+export interface RunCodeEffectReceiptCounts {
+    applied: number;
+    notApplied: number;
+    failed: number;
+    unknown: number;
+}
+export interface RunCodeCompletionInput {
+    code: string;
+    result: HostResult;
+    durationMs: number;
+    timeoutMs: number;
+    calls: readonly RunCodeCallRecord[];
+    receipts: readonly RunCodeActionReceipt[];
+    sessionId?: string;
+    /** Process-local bridge run id, for correlating this event with one run's result. */
+    runId?: string;
+}
+/**
+ * The event's fields. Exported for tests; the emit path below is the only
+ * caller in production.
+ */
+export declare const buildRunCodeCompletionMeta: (input: RunCodeCompletionInput) => LogMetadataContract;
+/**
+ * Record one completion. Telemetry is diagnostic: a failure to build or write
+ * the event must never change what the script did or what the caller receives.
+ */
+export declare function emitRunCodeCompletionTelemetry(loggingService: ILoggingService, input: RunCodeCompletionInput): void;
+//# sourceMappingURL=run-code-telemetry.d.ts.map

package/dist/tools/system/run-code/run-code-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-code-telemetry.d.ts","sourceRoot":"","sources":["../../../../source/tools/system/run-code/run-code-telemetry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACpG,OAAO,KAAK,EAAiB,UAAU,EAAE,MAAM,qDAAqD,CAAC;AACrG,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,yBAAyB,6BAA6B,CAAC;AACpE,eAAO,MAAM,2BAA2B,uBAAuB,CAAC;AAEhE;;;;;;;;;GASG;AACH,MAAM,MAAM,wBAAwB,GAChC,SAAS,GACT,OAAO,GACP,mBAAmB,GACnB,SAAS,GACT,sBAAsB,GACtB,SAAS,GACT,WAAW,GACX,gBAAgB,GAChB,kBAAkB,GAClB,YAAY,CAAC;AAEjB;;;;;;;;;;GAUG;AACH,MAAM,MAAM,mBAAmB,GAC3B,cAAc,GACd,iBAAiB,GACjB,aAAa,GACb,iBAAiB,GACjB,QAAQ,GACR,mBAAmB,GACnB,oBAAoB,CAAC;AAEzB,4DAA4D;AAC5D,MAAM,WAAW,uBAAuB;IACtC,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,kEAAkE;AAClE,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACpC,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA0ID;;;GAGG;AACH,eAAO,MAAM,0BAA0B,UAAW,sBAAsB,KAAG,mBAmB1E,CAAC;AAEF;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAMnH"}

package/dist/tools/system/run-code/run-code-telemetry.js

@@ -0,0 +1,189 @@
+import { createHash } from 'node:crypto';
+/**
+ * Structured completion telemetry for one `run_code` invocation.
+ *
+ * One event per invocation, written through the application logger so it lands
+ * in the same durable JSONL app log as every other structured event. It exists
+ * to answer the question that gates the type-checked TypeScript slice
+ * (docs/plans/run-code-typescript.md): do statically preventable nested-call
+ * failures actually cause retries, false completion, or replay? The answer is
+ * derived by querying these events, not by re-reading conversations, so the
+ * event carries the join keys (sessionId, sourceDigest, outcome, timestamp) as
+ * well as the counts.
+ *
+ * Emitted at `info`: the default log level is `info`, so the older
+ * `run_code execution finished` line, which is `debug`, is absent from default
+ * app logs and cannot be counted.
+ *
+ * Privacy: every emitted value is a number, an enum drawn from a closed set, or
+ * a source digest. The script source, its arguments, the failure messages, tool
+ * names, workspace paths, and the model-authored `description` are deliberately
+ * never emitted — nested failure text routinely carries paths and arguments, and
+ * an unknown member name is arbitrary model-authored text. Failure attribution
+ * reads those messages in-process and emits only a class.
+ */
+export const RUN_CODE_COMPLETION_EVENT = 'tool.run_code.completion';
+export const RUN_CODE_COMPLETION_MESSAGE = 'run_code completed';
+const SOURCE_DIGEST_CHARS = 16;
+/**
+ * Stable identity for a script's source, so repetition and replay are visible
+ * by joining events instead of storing the source itself.
+ */
+const digestSource = (code) => createHash('sha256').update(code, 'utf8').digest('hex').slice(0, SOURCE_DIGEST_CHARS);
+const NESTED_BUCKET_BY_OUTCOME = {
+    ok: 'ok',
+    error: 'otherFailures',
+    approval_required: 'approvalDenied',
+    unknown_policy: 'otherFailures',
+    policy_error: 'otherFailures',
+    interceptor_denied: 'otherFailures',
+    unknown_tool: 'unknownTool',
+    invalid_params: 'invalidParams',
+    prohibited: 'prohibited',
+    describe: 'schemaLookups',
+};
+const summarizeNestedCalls = (calls) => {
+    const counts = {
+        calls: 0,
+        schemaLookups: 0,
+        ok: 0,
+        unknownTool: 0,
+        invalidParams: 0,
+        approvalDenied: 0,
+        prohibited: 0,
+        otherFailures: 0,
+    };
+    for (const call of calls) {
+        const bucket = NESTED_BUCKET_BY_OUTCOME[call.outcome];
+        if (bucket === 'schemaLookups') {
+            counts.schemaLookups += 1;
+            continue;
+        }
+        counts.calls += 1;
+        counts[bucket] += 1;
+    }
+    return counts;
+};
+const summarizeEffectReceipts = (receipts) => {
+    const counts = { applied: 0, notApplied: 0, failed: 0, unknown: 0 };
+    for (const receipt of receipts) {
+        if (receipt.outcome === 'applied')
+            counts.applied += 1;
+        else if (receipt.outcome === 'not_applied')
+            counts.notApplied += 1;
+        else if (receipt.outcome === 'failed')
+            counts.failed += 1;
+        else
+            counts.unknown += 1;
+    }
+    return counts;
+};
+/**
+ * The namespace binding prefixes a refused nested call with `tools.<member>
+ * failed: ` and the capability's own message after it (host-worker.ts, pinned by
+ * sandboxed-code-host.test.ts). That prefix is the only host-side signal that
+ * separates a failure the script caused from one a nested call rejected, until
+ * Stage 3A gives the refusal a typed envelope.
+ */
+const FAILED_CALL_MARKER = ' failed: ';
+const NAMESPACE_PREFIX = 'tools.';
+const UNKNOWN_TOOL_PREFIX = 'Unknown tool "';
+const INVALID_PARAMS_PREFIX = 'Invalid parameters for "';
+const nestedRejectionDetail = (message) => {
+    if (!message.startsWith(NAMESPACE_PREFIX))
+        return null;
+    const marker = message.indexOf(FAILED_CALL_MARKER);
+    if (marker <= NAMESPACE_PREFIX.length)
+        return null;
+    return message.slice(marker + FAILED_CALL_MARKER.length);
+};
+/**
+ * Attribution is message-based, so a script that throws the same text itself is
+ * misattributed as a nested rejection. That approximation is bounded to the
+ * failure class: the host code, the ledgers, and the counts stay exact.
+ */
+const classifyNestedFailure = (message) => {
+    if (message.startsWith(UNKNOWN_TOOL_PREFIX))
+        return 'unknown-tool';
+    const detail = nestedRejectionDetail(message);
+    if (detail === null)
+        return 'nested-call';
+    if (detail.startsWith(UNKNOWN_TOOL_PREFIX))
+        return 'unknown-tool';
+    if (detail.startsWith(INVALID_PARAMS_PREFIX))
+        return 'parameter-shape';
+    return 'nested-call';
+};
+const isNestedRejection = (message) => message.startsWith(UNKNOWN_TOOL_PREFIX) || nestedRejectionDetail(message) !== null;
+const assertNeverHostCode = (code) => {
+    throw new Error('Unhandled host error code: ' + String(code));
+};
+const classifyRunCodeCompletion = (result) => {
+    if (result.ok)
+        return { outcome: 'success' };
+    const { code, message } = result.error;
+    switch (code) {
+        case 'syntax_error':
+            return { outcome: 'parse', hostErrorCode: code };
+        case 'runtime_error':
+            return isNestedRejection(message)
+                ? { outcome: 'nested-validation', hostErrorCode: code, failureClass: classifyNestedFailure(message) }
+                : { outcome: 'runtime', hostErrorCode: code };
+        case 'invalid_output':
+            return { outcome: 'return-serialization', hostErrorCode: code };
+        case 'timeout':
+        case 'deadline':
+            return { outcome: 'timeout', hostErrorCode: code };
+        case 'cancelled':
+            return { outcome: 'cancelled', hostErrorCode: code };
+        case 'code_too_large':
+            return { outcome: 'input-rejected', hostErrorCode: code };
+        case 'sandbox_unavailable':
+            return { outcome: 'host-unavailable', hostErrorCode: code };
+        case 'limit_exceeded':
+            return { outcome: 'nested-validation', hostErrorCode: code, failureClass: 'budget' };
+        case 'approval_required':
+            return { outcome: 'nested-validation', hostErrorCode: code, failureClass: 'approval-denied' };
+        default:
+            // Exhaustive over HostErrorCode: a new code fails to compile here rather
+            // than reaching a silent fallback.
+            return assertNeverHostCode(code);
+    }
+};
+/**
+ * The event's fields. Exported for tests; the emit path below is the only
+ * caller in production.
+ */
+export const buildRunCodeCompletionMeta = (input) => {
+    const classification = classifyRunCodeCompletion(input.result);
+    return {
+        eventType: RUN_CODE_COMPLETION_EVENT,
+        // Not imported from run-code.ts: that module imports this one.
+        toolName: 'run_code',
+        ...(input.sessionId ? { sessionId: input.sessionId } : {}),
+        ...(input.runId ? { runId: input.runId } : {}),
+        outcome: classification.outcome,
+        ...(classification.hostErrorCode ? { hostErrorCode: classification.hostErrorCode } : {}),
+        ...(classification.failureClass ? { failureClass: classification.failureClass } : {}),
+        durationMs: Math.max(0, Math.round(input.durationMs)),
+        timeoutMs: input.timeoutMs,
+        sourceBytes: Buffer.byteLength(input.code, 'utf8'),
+        sourceLines: input.code.length === 0 ? 0 : input.code.split('\n').length,
+        sourceDigest: digestSource(input.code),
+        nested: summarizeNestedCalls(input.calls),
+        effectReceipts: summarizeEffectReceipts(input.receipts),
+    };
+};
+/**
+ * Record one completion. Telemetry is diagnostic: a failure to build or write
+ * the event must never change what the script did or what the caller receives.
+ */
+export function emitRunCodeCompletionTelemetry(loggingService, input) {
+    try {
+        loggingService.info(RUN_CODE_COMPLETION_MESSAGE, buildRunCodeCompletionMeta(input));
+    }
+    catch {
+        // Intentionally ignored. See above.
+    }
+}
+//# sourceMappingURL=run-code-telemetry.js.map

package/dist/tools/system/run-code/run-code-telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-code-telemetry.js","sourceRoot":"","sources":["../../../../source/tools/system/run-code/run-code-telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,0BAA0B,CAAC;AACpE,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AA6EhE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;GAGG;AACH,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE,CAC5C,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;AAExF,MAAM,wBAAwB,GAAyE;IACrG,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,eAAe;IACtB,iBAAiB,EAAE,gBAAgB;IACnC,cAAc,EAAE,eAAe;IAC/B,YAAY,EAAE,eAAe;IAC7B,kBAAkB,EAAE,eAAe;IACnC,YAAY,EAAE,aAAa;IAC3B,cAAc,EAAE,eAAe;IAC/B,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,eAAe;CAC1B,CAAC;AAIF,MAAM,oBAAoB,GAAG,CAAC,KAAmC,EAA2B,EAAE;IAC5F,MAAM,MAAM,GAA4B;QACtC,KAAK,EAAE,CAAC;QACR,aAAa,EAAE,CAAC;QAChB,EAAE,EAAE,CAAC;QACL,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,CAAC;QACjB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,CAAC;KACjB,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YAC/B,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,QAAyC,EAA8B,EAAE;IACxG,MAAM,MAAM,GAA+B,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAChG,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;aAClD,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa;YAAE,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;aAC9D,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;;YACrD,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,WAAW,CAAC;AACvC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAClC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAC7C,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEzD,MAAM,qBAAqB,GAAG,CAAC,OAAe,EAAiB,EAAE;IAC/D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnD,IAAI,MAAM,IAAI,gBAAgB,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,CAAC,OAAe,EAAuB,EAAE;IACrE,IAAI,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAAE,OAAO,cAAc,CAAC;IACnE,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC;IAC1C,IAAI,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAAE,OAAO,cAAc,CAAC;IAClE,IAAI,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACvE,OAAO,aAAa,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAW,EAAE,CACrD,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,qBAAqB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;AAErF,MAAM,mBAAmB,GAAG,CAAC,IAAW,EAAS,EAAE;IACjD,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAChE,CAAC,CAAC;AAQF,MAAM,yBAAyB,GAAG,CAAC,MAAkB,EAAmC,EAAE;IACxF,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC7C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;IACvC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACnD,KAAK,eAAe;YAClB,OAAO,iBAAiB,CAAC,OAAO,CAAC;gBAC/B,CAAC,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE;gBACrG,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAClD,KAAK,gBAAgB;YACnB,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAClE,KAAK,SAAS,CAAC;QACf,KAAK,UAAU;YACb,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACrD,KAAK,WAAW;YACd,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACvD,KAAK,gBAAgB;YACnB,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAC5D,KAAK,qBAAqB;YACxB,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAC9D,KAAK,gBAAgB;YACnB,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QACvF,KAAK,mBAAmB;YACtB,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;QAChG;YACE,yEAAyE;YACzE,mCAAmC;YACnC,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;AACH,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,KAA6B,EAAuB,EAAE;IAC/F,MAAM,cAAc,GAAG,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO;QACL,SAAS,EAAE,yBAAyB;QACpC,+DAA+D;QAC/D,QAAQ,EAAE,UAAU;QACpB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,cAAc,CAAC,OAAO;QAC/B,GAAG,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;QAClD,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM;QACxE,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;QACtC,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC;QACzC,cAAc,EAAE,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC;KACxD,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,cAA+B,EAAE,KAA6B;IAC3G,IAAI,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,2BAA2B,EAAE,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;AACH,CAAC"}

package/dist/tools/system/run-code/run-code.d.ts

@@ -0,0 +1,98 @@
+import type { ExecutionContext } from '../../../services/execution-context.js';
+import { z } from 'zod';
+import type { ILoggingService } from '../../../services/service-interfaces.js';
+import type { ToolApprovalPolicyRegistry } from '../../../services/approval/tool-approval-policy-registry.js';
+import type { NestedApprovalOwner } from '../../../services/approval/nested-approval-owner.js';
+import { type AnyToolDefinition, type FormatCommandMessage, type SchemaToolDefinition, type ToolRegistry } from '../../types.js';
+export declare const TOOL_NAME_RUN_CODE = "run_code";
+export declare const TOOL_NAME_DESCRIBE = "describe";
+/**
+ * Script-shaped limits. They are deliberately not the workflow's: a workflow
+ * spawns a handful of agents, while a script's whole point is looping over many
+ * cheap tool calls.
+ */
+export declare const RUN_CODE_LIMITS: {
+    /** Total `tools.*` calls one script may make. */
+    readonly maxCalls: 200;
+    /** Parallel-safe calls that may overlap; others take a serial lane of one. */
+    readonly maxConcurrency: 8;
+    /** Per-result cap. A larger result is truncated with an explicit marker. */
+    readonly maxResultChars: 100000;
+    /** Maximum raw bytes in one media attachment retained outside the script. */
+    readonly maxMediaBytes: number;
+    /** Maximum raw bytes and attachment count retained for one script run. */
+    readonly maxMediaTotalBytes: number;
+    readonly maxMediaAttachments: 32;
+    readonly maxCodeBytes: 65536;
+    readonly maxOutputBytes: 262144;
+    readonly maxConsoleBytes: 262144;
+};
+/**
+ * Tools a script may never call.
+ *
+ * `run_code` excludes itself because each run owns its own call budget, and
+ * nesting would let one run spend many. The rest are the workflow's prohibited
+ * set: `run_subagent` in particular spawns agents outside any run budget, so a
+ * script could loop on it indefinitely. Shell tools are excluded because their
+ * complete approval state also lives in the interactive batch coordinator.
+ */
+export declare const RUN_CODE_PROHIBITED_TOOLS: ReadonlySet<string>;
+export declare const runCodeParametersSchema: z.ZodObject<{
+    code: z.ZodString;
+    include_console: z.ZodOptional<z.ZodBoolean>;
+    timeout_ms: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    description: z.ZodString;
+}, z.core.$strip>;
+export type RunCodeParams = z.infer<typeof runCodeParametersSchema>;
+/**
+ * Terminal semantic outcome of one observed nested action call, derived
+ * host-side from the raw executor result. Promise fulfillment alone is never
+ * success: only the per-tool adapter maps a resolved value to `applied`.
+ */
+export type RunCodeActionOutcome = 'applied' | 'not_applied' | 'failed' | 'unknown';
+/**
+ * One host-observed nested action receipt. The ledger is host-private: script
+ * code has no write path to it, so a script cannot catch, relabel, or
+ * contradict its way out of an observed outcome.
+ */
+export interface RunCodeActionReceipt {
+    /** Stable call identity (`<bridgeRunId>:<callId>`, or `:rejected-<seq>` pre-admission). */
+    callId: string;
+    tool: string;
+    outcome: RunCodeActionOutcome;
+    reason?: string;
+}
+/** One `tools.*` call observed during a run, for the user-facing summary. */
+export interface RunCodeCallRecord {
+    tool: string;
+    outcome: 'ok' | 'error' | 'approval_required' | 'unknown_policy' | 'policy_error' | 'interceptor_denied' | 'unknown_tool' | 'invalid_params' | 'prohibited' | 'describe';
+    durationMs: number;
+    directlyCallable?: boolean;
+}
+export interface CreateRunCodeToolOptions {
+    loggingService: ILoggingService;
+    /**
+     * Resolves the tools exposed to the script. Supplying it directly is a test
+     * seam; in production {@link bindRunCodeRegistry} installs the wrapped
+     * registry, so scripts go through the same policy layer as a direct call.
+     */
+    getToolRegistry?: () => ToolRegistry;
+    /** Policy authority used for out-of-band script calls. */
+    approvalPolicyRegistry: ToolApprovalPolicyRegistry;
+    getCwd?: () => string;
+    executionContext?: ExecutionContext;
+    nestedApprovalOwner?: NestedApprovalOwner;
+    sessionAccess?: import('../../../services/session/session-access-state.js').SessionAccessState;
+    nestedCompatibility?: import('../../../services/session/nested-tool-compatibility-state.js').NestedToolCompatibilityState;
+}
+/** Installs the wrapped registry into any `run_code` definition in `tools`. */
+export declare function bindRunCodeRegistry(tools: ToolRegistry): void;
+export declare function bindRunCodeNestedApprovalOwner(tools: ToolRegistry, owner: NestedApprovalOwner): void;
+/**
+ * Direct calls are the tools a script structurally cannot reach, including
+ * `run_code` itself. Visibility does not depend on `canRequireApproval`.
+ */
+export declare function isDirectlyCallable(tool: Pick<AnyToolDefinition, 'name'>): boolean;
+export declare const formatRunCodeCommandMessage: FormatCommandMessage;
+export declare function createRunCodeToolDefinition(options: CreateRunCodeToolOptions): SchemaToolDefinition<typeof runCodeParametersSchema>;
+//# sourceMappingURL=run-code.d.ts.map

package/dist/tools/system/run-code/run-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-code.d.ts","sourceRoot":"","sources":["../../../../source/tools/system/run-code/run-code.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAE/E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6DAA6D,CAAC;AAC9G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAE/F,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAgBxB,eAAO,MAAM,kBAAkB,aAAa,CAAC;AAC7C,eAAO,MAAM,kBAAkB,aAAa,CAAC;AAU7C;;;;GAIG;AACH,eAAO,MAAM,eAAe;IAC1B,iDAAiD;aACjD,QAAQ,EAAE,GAAG;IACb,8EAA8E;aAC9E,cAAc,EAAE,CAAC;IACjB,4EAA4E;aAC5E,cAAc,EAAE,MAAO;IACvB,6EAA6E;aAC7E,aAAa;IACb,0EAA0E;aAC1E,kBAAkB;aAClB,mBAAmB,EAAE,EAAE;aACvB,YAAY,EAAE,KAAM;aACpB,cAAc,EAAE,MAAO;aACvB,eAAe,EAAE,MAAO;CAChB,CAAC;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAWxD,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;iBAqBlC,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AA6BpE;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEpF;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,2FAA2F;IAC3F,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,oBAAoB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA0DD,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EACH,IAAI,GACJ,OAAO,GACP,mBAAmB,GACnB,gBAAgB,GAChB,cAAc,GACd,oBAAoB,GACpB,cAAc,GACd,gBAAgB,GAChB,YAAY,GACZ,UAAU,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,eAAe,CAAC;IAChC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,YAAY,CAAC;IACrC,0DAA0D;IAC1D,sBAAsB,EAAE,0BAA0B,CAAC;IACnD,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,aAAa,CAAC,EAAE,OAAO,mDAAmD,EAAE,kBAAkB,CAAC;IAC/F,mBAAmB,CAAC,EAAE,OAAO,8DAA8D,EAAE,4BAA4B,CAAC;CAC3H;AAiBD,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAI7D;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAIpG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,OAAO,CAEjF;AA8QD,eAAO,MAAM,2BAA2B,EAAE,oBAkBzC,CAAC;AAoCF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,wBAAwB,GAChC,oBAAoB,CAAC,OAAO,uBAAuB,CAAC,CAqdtD"}