@quickchatai/pi-quickreview 0.0.0-stage → 1.2.0

package/dist/src/engine/pisdk.js

@@ -0,0 +1,577 @@
+// The isolated SDK session builder: PiHost, and the ONLY module that imports the
+// pi SDK at runtime (the extension factories are the other, tests/fences-engine
+// pins both). An engine route that needs a pi session, the lens runner
+// included, gets it from PiHost.makeSession and never touches the SDK itself.
+//
+// "Isolated" means the host reads and writes nothing it was not handed:
+//
+//   - Every path pi would default to ~/.pi/agent is explicit: one private
+//     agentDir, and authPath / modelsPath / modelsStorePath inside it (the
+//     defaults are model-runtime.js:81, models-store.js:30 and
+//     settings-manager.js:223). PiHost refuses a relative or missing agentDir,
+//     so a forgotten path cannot fall through to the operator's home.
+//   - The ResourceLoader discovers nothing. No extension, skill, prompt
+//     template or theme is read from HOME, the agentDir, the cwd's .pi/ or
+//     .agents/ (the reviewed repo is untrusted input), or any ancestor. The
+//     only things a session sees are what the spec hands it: extension
+//     factories, the system prompt, and the context files (the reviewer
+//     stub, as data, never written into a checkout).
+//   - The model's bash gets an environment built from an allowlist over the
+//     spec's env, with the GitHub token names always stripped (envstrip.ts).
+//   - The tool list is an allowlist of exact names. A tool an extension
+//     registers that is not on it is dropped.
+//   - The model's tools do not reach what holds the run's secrets. Its
+//     bash runs as the separate tool uid when the host is given one
+//     (`toolUid`, from the image's QCR_TOOL_UID), which the kernel keeps out of
+//     /proc/<pid>/mem and environ of this process. Its file tools (read, grep,
+//     find, ls, edit, write) run in this process, so each path they are handed
+//     goes through a fence (toolfence.ts) that refuses /proc, /run/qcr-in and
+//     the agent dirs and the login's source, after resolving symlinks.
+//
+// The HTTP dispatcher follows the dispatcher ruling. pi's CLI installs an undici dispatcher at
+// startup (configureHttpDispatcher, which the package does not export); an
+// SDK host needs the same one, since provider requests and our own GitHub
+// fetches go through it. PiHost deep-imports pi's own function so the settings
+// match exactly, and installs it only when the route says it owns the process.
+// Inside a CLI pi (the debug round, the companion, the pi plugin's commands)
+// the dispatcher is pi's, and PiHost leaves it alone. Canary 6 pins the
+// function and its settings.
+//
+// A host built by an extension of the running pi (`hostPi`, the plugin's
+// /review) knows it is inside pi without the title heuristic, and loads
+// nothing from pi's dist/ by file path: the running pi may be a bundle or a
+// binary whose files are not the package's. pi's own location comes from its
+// exported getPackageDir(), never from a module-path walk.
+import { closeSync, existsSync, mkdirSync, openSync, readFileSync, readSync } from "node:fs";
+import { access } from "node:fs/promises";
+import { createRequire } from "node:module";
+import { dirname, join, isAbsolute } from "node:path";
+import { pathToFileURL } from "node:url";
+import { randomUUID } from "node:crypto";
+import { DefaultResourceLoader, ModelRuntime, SessionManager, SettingsManager, createAgentSession, createBashToolDefinition, createFindToolDefinition, createGrepToolDefinition, createLsToolDefinition, createReadToolDefinition, createEditToolDefinition, createWriteToolDefinition, getPackageDir, main as piCliMain, } from "@earendil-works/pi-coding-agent";
+import { isProtectedWriteTarget } from "../../extensions/bash-guard.js";
+import { GITHUB_TOKEN_ENVS } from "../envstrip.js";
+import { routeProvider, splitProvider, twinProvider } from "../modelroute.js";
+import { FENCED_TOOLS, createToolFence, credentialPaths, fencedOperations, guardedTool, loginSourceDirs, } from "./toolfence.js";
+import { inheritingBashOperations, isolatedBashOperations } from "./tooluid.js";
+// ---- the HTTP dispatcher -------------------------------------------------
+/** Where undici keeps the process-global dispatcher: both Node's bundled fetch
+ * and the npm undici pi installs read this one symbol. */
+export const UNDICI_GLOBAL_DISPATCHER = Symbol.for("undici.globalDispatcher.1");
+/** Set on globalThis to the dispatcher PiHost itself installed. */
+const INSTALLED_BY_PIHOST = Symbol.for("qcr.pisdk.dispatcher");
+/** The idle timeout the production routes run pi with (bench/aacr/Dockerfile's
+ * project settings). pi's own default is five minutes. */
+export const DEFAULT_HTTP_IDLE_TIMEOUT_MS = 120_000;
+/** The process title pi's CLI gives itself: its APP_NAME (`pi` unless the
+ * package's piConfig renames it), with `-rpc` appended by the rpc entry. */
+export function piCliTitles() {
+    let name = "pi";
+    try {
+        const pkg = JSON.parse(readFileSync(join(piPackageDir(), "package.json"), "utf8"));
+        name = pkg.piConfig?.name || name;
+    }
+    catch {
+        // pi not found: the default name is the best there is.
+    }
+    return [name, `${name}-rpc`];
+}
+/** True inside a pi CLI process (setupCli and rpc-entry set both signals): the
+ * dispatcher there is pi's own and must never be replaced. The environment flag
+ * alone is not proof: pi's bash tool hands it to every child, so a standalone
+ * `qcr review` started from a pi session inherits it. The process title is set
+ * per process and never inherited, so it must agree. */
+export function insideCliPi(env = process.env, title = process.title) {
+    return env["PI_CODING_AGENT"] === "true" && piCliTitles().includes(title);
+}
+/** The directory of the pi package this module runs against: pi's own answer
+ * (its exported getPackageDir), so an extension inside a running pi, whose
+ * package directory holds no pi of its own, gets the running one. */
+export function piPackageDir() {
+    return getPackageDir();
+}
+/** pi's own configureHttpDispatcher, deep-imported by file path (the export map
+ * does not publish it). It is the same module instance pi's SDK uses, so
+ * its fetch bookkeeping stays single. Throws if pi moved or renamed it: that is
+ * drift, and canary 6 is where a bump finds out. */
+export async function loadConfigureHttpDispatcher() {
+    const file = join(piPackageDir(), "dist", "core", "http-dispatcher.js");
+    let mod;
+    try {
+        mod = createRequire(import.meta.url)(file);
+    }
+    catch (e) {
+        // Node < 22.12 cannot require() an ES module; the import cache is shared either way.
+        if (e.code !== "ERR_REQUIRE_ESM")
+            throw e;
+        mod = (await import(pathToFileURL(file).href));
+    }
+    if (typeof mod.configureHttpDispatcher !== "function")
+        throw new Error(`pi's configureHttpDispatcher is gone from ${file}: the pinned pi drifted from what pisdk.ts deep-imports (canary 6)`);
+    return mod.configureHttpDispatcher;
+}
+const CWD_PINNED = Symbol.for("qcr.picwd.pinned");
+/** Make `SessionManager.open` default its cwd to `cwd()` (the launcher's, as its
+ * host resolves it) instead of the session header's, the way `resumeFile` below opens a session in the spec's cwd. Idempotent.
+ * An explicit override (pi's own missing-cwd recovery) still wins. VERIFY-ON-PIN: pi's
+ * CLI reaches the class's static `open` at call time (main.js createSessionManager;
+ * tests/picwd.test.ts drives the real one). */
+export function pinSessionCwd(manager, cwd) {
+    const holder = manager;
+    if (holder[CWD_PINNED])
+        return;
+    const open = manager.open.bind(manager);
+    holder.open = (path, sessionDir, cwdOverride) => open(path, sessionDir, cwdOverride ?? cwd());
+    holder[CWD_PINNED] = true;
+}
+/** pi's own CLI entry (its cli.js: setupCli, then main) with the session cwd pinned
+ * to `cwd()`, the launching process's (src/picwd.ts). setupCli's steps are repeated
+ * here because the package does not export it: the same title and flags (so
+ * `insideCliPi` answers as in the CLI binary) and the same HTTP dispatcher. */
+export async function runPiCliInCwd(argv, cwd) {
+    process.title = piCliTitles()[0];
+    process.env["PI_CODING_AGENT"] = "true";
+    process.env["AI_AGENT"] = "pi";
+    process.emitWarning = () => { };
+    (await loadConfigureHttpDispatcher())();
+    pinSessionCwd(SessionManager, cwd);
+    await piCliMain(argv);
+}
+let imageSniffer;
+/** pi's own image sniffer (utils/mime.js), deep-imported the way the dispatcher
+ * is: the fenced read tool tells an image from its first bytes with it. Null
+ * where pi moved it: a file is then read as text, never as an image. */
+export function loadImageSniffer() {
+    imageSniffer ??= (async () => {
+        try {
+            const file = join(piPackageDir(), "dist", "utils", "mime.js");
+            const mod = (await import(pathToFileURL(file).href));
+            return typeof mod.detectSupportedImageMimeType === "function"
+                ? mod.detectSupportedImageMimeType
+                : null;
+        }
+        catch {
+            return null;
+        }
+    })();
+    return imageSniffer;
+}
+/**
+ * Make sure provider requests (and every Node fetch in the process) go through
+ * pi's dispatcher, installing it at most once and only when `ownsProcess`.
+ *
+ * Inside a CLI pi the dispatcher is pi's own and is never touched, whatever the
+ * route claims. Nor is one that PiHost installed and something else has since
+ * replaced. (undici wraps every dispatcher it is given, and Node creates its own
+ * lazily on the first fetch, so a dispatcher cannot be recognised as pi's by
+ * looking at it: the flag and title pi's CLI sets, and PiHost's own marker,
+ * are the facts there are.)
+ */
+export async function ensureHttpDispatcher(o) {
+    const g = globalThis;
+    if (o.hostPi === true || insideCliPi())
+        return "reused";
+    const ours = g[INSTALLED_BY_PIHOST];
+    if (ours !== undefined)
+        return g[UNDICI_GLOBAL_DISPATCHER] === ours ? "installed" : "reused";
+    if (!o.ownsProcess)
+        return "none";
+    (await loadConfigureHttpDispatcher())(o.idleTimeoutMs);
+    g[INSTALLED_BY_PIHOST] = g[UNDICI_GLOBAL_DISPATCHER];
+    return "installed";
+}
+// ---- the model's bash environment ---------------------------------------------
+/** Names (or `PREFIX*` patterns) of the spec's env the model's bash receives by
+ * default. A route adds its own through `bashEnv.allow`. */
+export const DEFAULT_BASH_ENV_ALLOW = [
+    "PATH",
+    "HOME",
+    "USER",
+    "LOGNAME",
+    "SHELL",
+    "LANG",
+    "LANGUAGE",
+    "LC_*",
+    "TERM",
+    "TZ",
+    "TMPDIR",
+];
+/** The session identity pi itself puts in the bash env (bash.js:137-153); the
+ * tool's prompt text promises them, so they pass. */
+const PI_SESSION_ENV = [
+    "PI_SESSION_ID",
+    "PI_SESSION_FILE",
+    "PI_PROVIDER",
+    "PI_MODEL",
+    "PI_REASONING_LEVEL",
+];
+function allowed(name, patterns) {
+    return patterns.some((p) => (p.endsWith("*") ? name.startsWith(p.slice(0, -1)) : name === p));
+}
+/**
+ * The environment of one bash call: the spec's env filtered by the allowlist,
+ * pi's session identity, the route's explicit values, and never a GitHub token.
+ * The process's own env is not a source: a token the host holds cannot leak
+ * through here whatever the allowlist says.
+ */
+export function buildBashEnv(specEnv, piEnv, options = {}) {
+    const patterns = [...DEFAULT_BASH_ENV_ALLOW, ...(options.allow ?? [])];
+    const env = {};
+    for (const [name, value] of Object.entries(specEnv))
+        if (value !== undefined && allowed(name, patterns))
+            env[name] = value;
+    for (const name of PI_SESSION_ENV) {
+        const value = piEnv[name];
+        if (value !== undefined)
+            env[name] = value;
+    }
+    Object.assign(env, options.set);
+    for (const name of GITHUB_TOKEN_ENVS)
+        delete env[name];
+    return env;
+}
+// ---- provider auth discovery that does not look in HOME ------------------------
+/** pi-ai's default auth context expands `~` to the operator's home to look for
+ * ambient credentials (google-vertex checks ~/.config/gcloud for ADC). A review
+ * host takes its credentials from the auth file it was given and from env, so
+ * `~` paths are simply absent. */
+const ISOLATED_AUTH_CONTEXT = {
+    async env(name) {
+        const value = process.env[name];
+        return typeof value === "string" && value.trim().length > 0 ? value : undefined;
+    },
+    async fileExists(path) {
+        if (path.startsWith("~"))
+            return false;
+        try {
+            await access(path);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    },
+};
+/** ModelRuntime builds its provider collection with pi-ai's default context and
+ * exposes no way to pass another, so swap it on the collection. Fails closed:
+ * a pi that moved the field has to be looked at (canary 4). */
+function isolateProviderAuth(runtime) {
+    const models = runtime.models;
+    if (!models || typeof models.authContext !== "object" || models.authContext === null)
+        throw new Error("pi's ModelRuntime no longer holds an authContext pisdk.ts isolates (canary 4)");
+    models.authContext = ISOLATED_AUTH_CONTEXT;
+}
+// ---- the resource loader that discovers nothing -------------------------------
+/** What a package manager resolves to when there is nothing to resolve. */
+const NO_RESOURCES = { extensions: [], skills: [], prompts: [], themes: [] };
+class IsolatedResourceLoader extends DefaultResourceLoader {
+    constructor(o) {
+        super({
+            cwd: o.cwd,
+            agentDir: o.agentDir,
+            settingsManager: o.settingsManager,
+            extensionFactories: [...o.extensionFactories],
+            noExtensions: true,
+            noSkills: true,
+            noPromptTemplates: true,
+            noThemes: true,
+            noContextFiles: true,
+            // The belts to the switches' braces: whatever a discovery path still
+            // turned up (an extension's resources_discover, a pi that stops honouring
+            // a switch) is dropped here. This is where $HOME/.agents/skills is closed
+            // on the SDK route.
+            skillsOverride: () => ({ skills: [], diagnostics: [] }),
+            promptsOverride: () => ({ prompts: [], diagnostics: [] }),
+            themesOverride: () => ({ themes: [], diagnostics: [] }),
+            agentsFilesOverride: () => ({ agentsFiles: o.agentsFiles.map((f) => ({ ...f })) }),
+            systemPromptOverride: () => o.systemPrompt,
+            appendSystemPromptOverride: () => [...o.appendSystemPrompt],
+        });
+        // reload() asks the package manager to scan HOME (~/.agents/skills), the
+        // agentDir and every cwd ancestor before any switch applies, so the switches
+        // alone still read those directories. Nothing there may be read at all:
+        // replace the scan with an empty answer. Fail closed if pi's shape moves.
+        const self = this;
+        const pm = self.packageManager;
+        if (!pm ||
+            typeof pm["resolve"] !== "function" ||
+            typeof pm["resolveExtensionSources"] !== "function")
+            throw new Error("pi's DefaultResourceLoader no longer has the package manager pisdk.ts isolates (canary 4)");
+        pm["resolve"] = async () => NO_RESOURCES;
+        pm["resolveExtensionSources"] = async () => NO_RESOURCES;
+    }
+}
+/** pi's own default tool set at the pin (DEFAULT_TOOL_NAMES). Canary 5 holds it. */
+export const DEFAULT_TOOLS = ["read", "bash", "edit", "write"];
+function checkToolAllowlist(tools) {
+    for (const t of tools)
+        if (!/^[A-Za-z0-9_][A-Za-z0-9_.:-]*$/.test(t))
+            throw new Error(`tool allowlist entries are exact names, got ${JSON.stringify(t)}`);
+}
+/**
+ * The spec's model on this host. An OpenAI spec runs on the login that exists
+ * (modelroute.ts): the provider it names when that provider has a credential,
+ * else its twin (`openai-codex` <-> `openai`) when the twin has one and serves
+ * the same id. pi's own offline auth check decides (ModelRuntime.checkAuth
+ * reads the credential store and the runtime keys; the host's snapshot is
+ * empty, since it is created without a refresh).
+ */
+export async function resolveModel(runtime, model) {
+    if (typeof model !== "string")
+        return model;
+    const parts = splitProvider(model);
+    if (parts === null)
+        throw new Error(`model ${JSON.stringify(model)} is not known to the host`);
+    const twin = twinProvider(parts.provider);
+    let provider = parts.provider;
+    if (twin !== undefined) {
+        // VERIFY-ON-PIN (pi 1.4.0): checkAuth resolves undefined for a provider with
+        // no credential and an AuthCheck for one with an OAuth or API-key credential.
+        const usable = new Set();
+        for (const p of [parts.provider, twin])
+            if ((await runtime.checkAuth(p).catch(() => undefined)) !== undefined)
+                usable.add(p);
+        provider = routeProvider(parts.provider, parts.rest, {
+            hasCredential: (p) => usable.has(p),
+            hasModel: (p, id) => runtime.getModel(p, id) !== undefined,
+        });
+    }
+    const found = runtime.getModel(provider, parts.rest);
+    if (!found)
+        throw new Error(`model ${JSON.stringify(model)} is not known to the host`);
+    return found;
+}
+/** The id a session JSONL's header carries; null when the file does not start
+ * with a session header. */
+export function headerId(file) {
+    let first;
+    try {
+        // The header is the first line; a transcript can run to megabytes.
+        const fd = openSync(file, "r");
+        try {
+            const buf = Buffer.alloc(64 * 1024);
+            first = buf.toString("utf8", 0, readSync(fd, buf, 0, buf.length, 0)).split("\n", 1)[0];
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    catch {
+        return null;
+    }
+    try {
+        const h = JSON.parse(first ?? "");
+        return h.type === "session" && typeof h.id === "string" && h.id !== "" ? h.id : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** The session manager a spec asks for. A session file that already exists is a
+ * resume, not a create, and is refused for `sessionFile`: nothing opens an old
+ * session by accident. A resume names its file as `resumeFile`, which must hold
+ * a session header: pi would otherwise start a fresh session (a new id, so a
+ * cold prompt cache) at a missing or empty path. */
+function sessionManagerFor(spec) {
+    const { persist, sessionManager } = spec;
+    if (spec.sessionId !== undefined && (sessionManager || (persist && !("sessionDir" in persist))))
+        throw new Error("sessionId names a new session: not with a sessionManager, a sessionFile or a resumeFile");
+    if (spec.sessionId === "")
+        throw new Error("sessionId must not be empty");
+    if (sessionManager) {
+        if (persist)
+            throw new Error("give a sessionManager or persist, not both");
+        return sessionManager;
+    }
+    if (persist && "resumeFile" in persist) {
+        const file = persist.resumeFile;
+        if (!isAbsolute(file))
+            throw new Error(`a session file must be absolute, got ${file}`);
+        const id = headerId(file);
+        if (id === null)
+            throw new Error(`${file} is not a session JSONL to resume`);
+        // The cwd override keeps the session in the spec's cwd (the header's belongs
+        // to the machine that wrote it); the header on disk is not rewritten.
+        const manager = SessionManager.open(file, dirname(file), spec.cwd);
+        if (manager.getSessionId() !== id)
+            throw new Error(`resuming ${file} changed the session id (${id} -> ${manager.getSessionId()})`);
+        return manager;
+    }
+    if (persist && "sessionFile" in persist) {
+        const file = persist.sessionFile;
+        if (!isAbsolute(file))
+            throw new Error(`a session file must be absolute, got ${file}`);
+        if (existsSync(file))
+            throw new Error(`session file ${file} already exists`);
+        // open() on a path that does not exist yet is how pi starts a session at a
+        // chosen file; the cwd override keeps the header's cwd the spec's.
+        return SessionManager.open(file, dirname(file), spec.cwd);
+    }
+    if (persist)
+        return SessionManager.create(spec.cwd, persist.sessionDir, spec.sessionId !== undefined ? { id: spec.sessionId } : undefined);
+    // VERIFY-ON-PIN (pi 1.3.0, re-read at 1.4.0): inMemory({id}) sets the session id the provider
+    // keys its cache on (prompt_cache_key, session-id, x-client-request-id).
+    return SessionManager.inMemory(spec.cwd, { id: spec.sessionId ?? randomUUID() });
+}
+export class PiHost {
+    options;
+    agentDir;
+    modelRuntime;
+    /** What the host found or did about the HTTP dispatcher. */
+    dispatcher;
+    httpIdleTimeoutMs;
+    /** What the file tools are kept out of, or null. */
+    fence;
+    sessions = new Set();
+    constructor(options, modelRuntime, dispatcher, httpIdleTimeoutMs) {
+        this.options = options;
+        this.agentDir = options.agentDir;
+        this.modelRuntime = modelRuntime;
+        this.dispatcher = dispatcher;
+        this.httpIdleTimeoutMs = httpIdleTimeoutMs;
+        this.fence =
+            options.fence === false
+                ? null
+                : (options.fence ??
+                    createToolFence({
+                        protectedWrite: isProtectedWriteTarget,
+                        dirs: [
+                            options.agentDir,
+                            ...(options.homeDir !== undefined ? [join(options.homeDir, ".pi")] : []),
+                            ...loginSourceDirs(process.env),
+                            ...credentialPaths(process.env),
+                            ...(options.fenceDirs ?? []),
+                        ],
+                    }));
+    }
+    static async create(options) {
+        if (!isAbsolute(options.agentDir))
+            throw new Error(`PiHost needs an absolute private agentDir, got ${options.agentDir}`);
+        mkdirSync(options.agentDir, { recursive: true });
+        const idle = options.httpIdleTimeoutMs ?? DEFAULT_HTTP_IDLE_TIMEOUT_MS;
+        if (options.hostPi === true && options.ownsProcess === true)
+            throw new Error("a host inside a running pi does not own its process");
+        const dispatcher = await ensureHttpDispatcher({
+            ownsProcess: options.ownsProcess ?? false,
+            idleTimeoutMs: idle,
+            ...(options.hostPi === true ? { hostPi: true } : {}),
+        });
+        const runtime = await ModelRuntime.create({
+            authPath: join(options.agentDir, "auth.json"),
+            modelsPath: join(options.agentDir, "models.json"),
+            modelsStorePath: join(options.agentDir, "models-store.json"),
+            ...(options.credentials ? { credentials: options.credentials } : {}),
+            // No catalog refresh over the network at create: a review run does not
+            // wait on, or leak to, a model-list endpoint.
+            refreshOnCreate: false,
+        });
+        isolateProviderAuth(runtime);
+        await options.configureModels?.(runtime);
+        return new PiHost(options, runtime, dispatcher, idle);
+    }
+    /** A fresh settings manager per session: sessions never share mutable
+     * settings, and project settings (the reviewed repo's .pi/) are never read. */
+    settings() {
+        return SettingsManager.inMemory({ httpIdleTimeoutMs: this.httpIdleTimeoutMs, ...this.options.settings }, { projectTrusted: false });
+    }
+    /** The file tools of the allowlist, behind the fence. None when there is no fence. */
+    async fileTools(cwd, names) {
+        const fence = this.fence;
+        if (fence === null)
+            return [];
+        const ops = fencedOperations(fence, this.options.hostPi === true ? null : await loadImageSniffer());
+        const make = {
+            read: () => createReadToolDefinition(cwd, { operations: ops.read }),
+            grep: () => createGrepToolDefinition(cwd, { operations: ops.grep }),
+            find: () => createFindToolDefinition(cwd),
+            ls: () => createLsToolDefinition(cwd, { operations: ops.ls }),
+            edit: () => createEditToolDefinition(cwd, { operations: ops.edit }),
+            write: () => createWriteToolDefinition(cwd, { operations: ops.write }),
+        };
+        return FENCED_TOOLS.filter((n) => names.includes(n)).map((n) => guardedTool(make[n](), fence, cwd, this.options.homeDir));
+    }
+    /**
+     * One isolated, extension-bound session. The caller owns it: dispose it, or
+     * dispose the host to dispose every session it made.
+     */
+    async makeSession(spec) {
+        const tools = [...(spec.tools ?? DEFAULT_TOOLS)];
+        checkToolAllowlist(tools);
+        const sessionManager = sessionManagerFor(spec);
+        const settingsManager = this.settings();
+        const resourceLoader = new IsolatedResourceLoader({
+            cwd: spec.cwd,
+            agentDir: this.agentDir,
+            settingsManager,
+            extensionFactories: spec.extensions ?? [],
+            systemPrompt: spec.systemPrompt,
+            appendSystemPrompt: spec.appendSystemPrompt ?? [],
+            agentsFiles: spec.agentsFiles ?? this.options.agentsFiles ?? [],
+        });
+        await resourceLoader.reload();
+        // The model's bash: its environment from the allowlist, and, where the host
+        // has a tool uid, its command run as that uid (tooluid.ts).
+        const bash = createBashToolDefinition(spec.cwd, {
+            spawnHook: (ctx) => ({
+                command: ctx.command,
+                cwd: ctx.cwd,
+                env: buildBashEnv(spec.env, ctx.env, spec.bashEnv),
+            }),
+            ...(this.options.toolUid
+                ? {
+                    operations: isolatedBashOperations(this.options.toolUid, this.options.setprivBin, spec.inheritFds),
+                }
+                : spec.inheritFds?.length
+                    ? { operations: inheritingBashOperations(spec.inheritFds) }
+                    : {}),
+        });
+        const files = await this.fileTools(spec.cwd, tools);
+        const { session } = await createAgentSession({
+            cwd: spec.cwd,
+            agentDir: this.agentDir,
+            model: await resolveModel(this.modelRuntime, spec.model),
+            ...(spec.thinkingLevel ? { thinkingLevel: spec.thinkingLevel } : {}),
+            modelRuntime: this.modelRuntime,
+            resourceLoader,
+            sessionManager,
+            settingsManager,
+            tools,
+            customTools: [bash, ...files, ...(spec.customTools ?? [])],
+        });
+        try {
+            await session.bindExtensions({ onError: spec.onExtensionError });
+            // The allowlist is enforced by pi; this is the host checking pi's work.
+            const stray = session
+                .getAllTools()
+                .map((t) => t.name)
+                .filter((name) => !tools.includes(name));
+            if (stray.length > 0)
+                throw new Error(`tools outside the allowlist are registered: ${stray.join(", ")}`);
+        }
+        catch (e) {
+            session.dispose();
+            throw e;
+        }
+        this.sessions.add(session);
+        return session;
+    }
+    /** Dispose every session this host made. Idempotent. */
+    dispose() {
+        for (const s of this.sessions) {
+            try {
+                s.dispose();
+            }
+            catch {
+                /* already disposed */
+            }
+        }
+        this.sessions.clear();
+    }
+}
+/** pi's own parse of a session file, as a worker's first act on it: open it and
+ * rebuild the context. No session is started and nothing is written to `file`.
+ * The cutover preflight (src/preflight.ts) resumes every open PR's JSONL with it. */
+export function openSessionContext(file, sessionDir, cwd) {
+    SessionManager.open(file, sessionDir, cwd).buildSessionContext();
+}
+//# sourceMappingURL=pisdk.js.map

package/dist/src/engine/pisdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pisdk.js","sourceRoot":"","sources":["../../../src/engine/pisdk.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,gFAAgF;AAChF,uEAAuE;AACvE,8EAA8E;AAC9E,EAAE;AACF,wEAAwE;AACxE,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,+DAA+D;AAC/D,+EAA+E;AAC/E,sEAAsE;AACtE,wEAAwE;AACxE,2EAA2E;AAC3E,4EAA4E;AAC5E,uEAAuE;AACvE,wEAAwE;AACxE,qDAAqD;AACrD,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,8CAA8C;AAC9C,uEAAuE;AACvE,oEAAoE;AACpE,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,uEAAuE;AACvE,EAAE;AACF,+FAA+F;AAC/F,2EAA2E;AAC3E,0EAA0E;AAC1E,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,wEAAwE;AACxE,6BAA6B;AAC7B,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,2DAA2D;AAC3D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAOL,qBAAqB,EACrB,YAAY,EACZ,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,aAAa,EACb,IAAI,IAAI,SAAS,GAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE9E,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,eAAe,GAGhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAgB,MAAM,cAAc,CAAC;AAE9F,6EAA6E;AAE7E;0DAC0D;AAC1D,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAChF,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;AAC/D;0DAC0D;AAC1D,MAAM,CAAC,MAAM,4BAA4B,GAAG,OAAO,CAAC;AAQpD;4EAC4E;AAC5E,MAAM,UAAU,WAAW;IACzB,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAEhF,CAAC;QACF,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;wDAIwD;AACxD,MAAM,UAAU,WAAW,CACzB,MAAyB,OAAO,CAAC,GAAG,EACpC,QAAgB,OAAO,CAAC,KAAK;IAE7B,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,MAAM,IAAI,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED;;qEAEqE;AACrE,MAAM,UAAU,YAAY;IAC1B,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAID;;;oDAGoD;AACpD,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACxE,IAAI,GAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAe,CAAC;IAC3D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,qFAAqF;QACrF,IAAK,CAAuB,CAAC,IAAI,KAAK,iBAAiB;YAAE,MAAM,CAAC,CAAC;QACjE,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAe,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,uBAAuB,KAAK,UAAU;QACnD,MAAM,IAAI,KAAK,CACb,6CAA6C,IAAI,oEAAoE,CACtH,CAAC;IACJ,OAAO,GAAG,CAAC,uBAAkD,CAAC;AAChE,CAAC;AAKD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAElD;;;;+CAI+C;AAC/C,MAAM,UAAU,aAAa,CAAC,OAA8B,EAAE,GAAiB;IAC7E,MAAM,MAAM,GAAG,OAAqD,CAAC;IACrE,IAAI,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,IAAI,GAAG,EAAE,CAAC,CAAC;IAC9F,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;AAC5B,CAAC;AAED;;;+EAG+E;AAC/E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAc,EAAE,GAAiB;IACnE,OAAO,CAAC,KAAK,GAAG,WAAW,EAAE,CAAC,CAAC,CAAE,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAC/B,OAAO,CAAC,WAAW,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IAC/B,CAAC,MAAM,2BAA2B,EAAE,CAAC,EAAE,CAAC;IACxC,aAAa,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,IAAI,YAAsD,CAAC;AAE3D;;wEAEwE;AACxE,MAAM,UAAU,gBAAgB;IAC9B,YAAY,KAAK,CAAC,KAAK,IAAI,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YAC9D,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAElD,CAAC;YACF,OAAO,OAAO,GAAG,CAAC,4BAA4B,KAAK,UAAU;gBAC3D,CAAC,CAAE,GAAG,CAAC,4BAA6C;gBACpD,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,CAM1C;IACC,MAAM,CAAC,GAAG,UAAqC,CAAC;IAChD,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,WAAW,EAAE;QAAE,OAAO,QAAQ,CAAC;IACxD,MAAM,IAAI,GAAG,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,wBAAwB,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7F,IAAI,CAAC,CAAC,CAAC,WAAW;QAAE,OAAO,MAAM,CAAC;IAClC,CAAC,MAAM,2BAA2B,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACvD,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACrD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,kFAAkF;AAElF;4DAC4D;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,UAAU;IACV,MAAM;IACN,MAAM;IACN,IAAI;IACJ,QAAQ;CACT,CAAC;AAEF;qDACqD;AACrD,MAAM,cAAc,GAAG;IACrB,eAAe;IACf,iBAAiB;IACjB,aAAa;IACb,UAAU;IACV,oBAAoB;CACZ,CAAC;AAUX,SAAS,OAAO,CAAC,IAAY,EAAE,QAA2B;IACxD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAqD,EACrD,KAAmD,EACnD,UAA0B,EAAE;IAE5B,MAAM,QAAQ,GAAG,CAAC,GAAG,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACxE,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC7C,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,iBAAiB;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AAEnF;;;kCAGkC;AAClC,MAAM,qBAAqB,GAAG;IAC5B,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF,CAAC;AAEF;;+DAE+D;AAC/D,SAAS,mBAAmB,CAAC,OAAqB;IAChD,MAAM,MAAM,GAAI,OAA6D,CAAC,MAAM,CAAC;IACrF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;QAClF,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,MAAM,CAAC,WAAW,GAAG,qBAAqB,CAAC;AAC7C,CAAC;AAED,kFAAkF;AAElF,2EAA2E;AAC3E,MAAM,YAAY,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAE7E,MAAM,sBAAuB,SAAQ,qBAAqB;IACxD,YAAY,CAQX;QACC,KAAK,CAAC;YACJ,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC;YAC7C,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,iBAAiB,EAAE,IAAI;YACvB,QAAQ,EAAE,IAAI;YACd,cAAc,EAAE,IAAI;YACpB,qEAAqE;YACrE,0EAA0E;YAC1E,0EAA0E;YAC1E,oBAAoB;YACpB,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;YACvD,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;YACzD,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;YACvD,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAClF,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,YAAY;YAC1C,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC;SAC5D,CAAC,CAAC;QACH,yEAAyE;QACzE,6EAA6E;QAC7E,wEAAwE;QACxE,0EAA0E;QAC1E,MAAM,IAAI,GAAG,IAA+D,CAAC;QAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;QAC/B,IACE,CAAC,EAAE;YACH,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,UAAU;YACnC,OAAO,EAAE,CAAC,yBAAyB,CAAC,KAAK,UAAU;YAEnD,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;QACJ,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC;QACzC,EAAE,CAAC,yBAAyB,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC;IAC3D,CAAC;CACF;AAsGD,oFAAoF;AACpF,MAAM,CAAC,MAAM,aAAa,GAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAElF,SAAS,kBAAkB,CAAC,KAAwB;IAClD,KAAK,MAAM,CAAC,IAAI,KAAK;QACnB,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAqD,EACrD,KAA0B;IAE1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,6EAA6E;QAC7E,8EAA8E;QAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;YACpC,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvF,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;YACnD,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACnC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,SAAS;SAC3D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;4BAC4B;AAC5B,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,mEAAmE;QACnE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;YACpC,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAqC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;oDAIoD;AACpD,SAAS,iBAAiB,CAAC,IAAqB;IAC9C,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACzC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC,CAAC;QAC7F,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC1E,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC3E,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,IAAI,YAAY,IAAI,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,EAAE,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;QAC7E,6EAA6E;QAC7E,sEAAsE;QACtE,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE;YAC/B,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,4BAA4B,EAAE,OAAO,OAAO,CAAC,YAAY,EAAE,GAAG,CAC/E,CAAC;QACJ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,IAAI,aAAa,IAAI,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;QACvF,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,iBAAiB,CAAC,CAAC;QAC7E,2EAA2E;QAC3E,mEAAmE;QACnE,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO;QACT,OAAO,cAAc,CAAC,MAAM,CAC1B,IAAI,CAAC,GAAG,EACR,OAAO,CAAC,UAAU,EAClB,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAClE,CAAC;IACJ,8FAA8F;IAC9F,yEAAyE;IACzE,OAAO,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,OAAO,MAAM;IAWE;IAVV,QAAQ,CAAS;IACjB,YAAY,CAAe;IACpC,4DAA4D;IACnD,UAAU,CAAoB;IAC9B,iBAAiB,CAAS;IACnC,oDAAoD;IAC3C,KAAK,CAAmB;IAChB,QAAQ,GAAG,IAAI,GAAG,EAAgB,CAAC;IAEpD,YACmB,OAAsB,EACvC,YAA0B,EAC1B,UAA6B,EAC7B,iBAAyB;QAHR,YAAO,GAAP,OAAO,CAAe;QAKvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,KAAK;YACR,OAAO,CAAC,KAAK,KAAK,KAAK;gBACrB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;oBACd,eAAe,CAAC;wBACd,cAAc,EAAE,sBAAsB;wBACtC,IAAI,EAAE;4BACJ,OAAO,CAAC,QAAQ;4BAChB,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;4BACxE,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;4BAC/B,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;4BAC/B,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;yBAC7B;qBACF,CAAC,CAAC,CAAC;IACZ,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAsB;QACxC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,kDAAkD,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxF,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,IAAI,4BAA4B,CAAC;QACvE,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI;YACzD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC;YAC5C,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;YACzC,aAAa,EAAE,IAAI;YACnB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;YACxC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC;YAC7C,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC;YACjD,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC;YAC5D,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,uEAAuE;YACvE,8CAA8C;YAC9C,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;QACH,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,OAAO,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED;mFAC+E;IACvE,QAAQ;QACd,OAAO,eAAe,CAAC,QAAQ,CAC7B,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EACvE,EAAE,cAAc,EAAE,KAAK,EAAE,CAC1B,CAAC;IACJ,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,KAAwB;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,gBAAgB,CAC1B,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,gBAAgB,EAAE,CAC/D,CAAC;QACF,MAAM,IAAI,GAAyD;YACjE,IAAI,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;YACnE,IAAI,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;YACnE,IAAI,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC;YACzC,EAAE,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YAC7D,IAAI,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;YACnE,KAAK,EAAE,GAAG,EAAE,CAAC,yBAAyB,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;SACvE,CAAC;QACF,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7D,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAC3E,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,IAAqB;QACrC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC,CAAC;QACjD,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,cAAc,GAAG,IAAI,sBAAsB,CAAC;YAChD,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,eAAe;YACf,kBAAkB,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YACzC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,EAAE;YACjD,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE;SAChE,CAAC,CAAC;QACH,MAAM,cAAc,CAAC,MAAM,EAAE,CAAC;QAC9B,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE;YAC9C,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC;aACnD,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;gBACtB,CAAC,CAAC;oBACE,UAAU,EAAE,sBAAsB,CAChC,IAAI,CAAC,OAAO,CAAC,OAAO,EACpB,IAAI,CAAC,OAAO,CAAC,UAAU,EACvB,IAAI,CAAC,UAAU,CAChB;iBACF;gBACH,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM;oBACvB,CAAC,CAAC,EAAE,UAAU,EAAE,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;oBAC3D,CAAC,CAAC,EAAE,CAAC;SACV,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CAAC;YAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,cAAc;YACd,cAAc;YACd,eAAe;YACf,KAAK;YACL,WAAW,EAAE,CAAC,IAAiC,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;SACxF,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACjE,wEAAwE;YACxE,MAAM,KAAK,GAAG,OAAO;iBAClB,WAAW,EAAE;iBACb,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,+CAA+C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,CAAC,CAAC;QACV,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,wDAAwD;IACxD,OAAO;QACL,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAED;;qFAEqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,UAAkB,EAAE,GAAW;IAC9E,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,mBAAmB,EAAE,CAAC;AACnE,CAAC"}