@rallycry/conveyor-agent 10.2.4 → 10.2.5

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts","../src/setup/sidecars.ts","../src/utils/session-identity.ts","../src/utils/agent-exit.ts","../src/setup/project-identity.ts","../src/runner/project-session-runner.ts","../src/runner/adhoc-session-runner.ts","../src/runner/review-child.ts"],"sourcesContent":["#!/usr/bin/env node\n/* oxlint-disable import/max-dependencies -- CLI entry point wires every runner variant (task/pm/code-review/adhoc) + setup; splitting would scatter the boot sequence */\nimport { readFileSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { SessionRunner } from \"./runner/session-runner.js\";\nimport type { AgentRunnerStatus, RunnerMode } from \"@project/shared\";\nimport { createServiceLogger } from \"./utils/logger.js\";\nimport {\n  applyBootstrapToEnv,\n  awaitGitReady,\n  buildSessionPreviewPorts,\n  fetchBootstrap,\n  loadConveyorConfig,\n  loadForwardPorts,\n  runSetupCommand,\n  runStartCommand,\n  startLazySidecars,\n  waitForSidecars,\n} from \"./setup/index.js\";\nimport { checkSessionTaskIdentity } from \"./utils/session-identity.js\";\nimport {\n  buildAgentExitLog,\n  exitLogLevel,\n  type AgentExitIdentity,\n  type AgentExitReason,\n} from \"./utils/agent-exit.js\";\nimport { resolveProjectRunnerIdentity } from \"./setup/project-identity.js\";\nimport { ProjectSessionRunner } from \"./runner/project-session-runner.js\";\nimport { AdhocSessionRunner } from \"./runner/adhoc-session-runner.js\";\nimport { ReviewChildSupervisor } from \"./runner/review-child.js\";\n\n// Handle --version flag before any other initialization\nif (process.argv.includes(\"--version\")) {\n  const __dirname = dirname(fileURLToPath(import.meta.url));\n  const pkgPath = join(__dirname, \"..\", \"package.json\");\n  const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\"));\n  process.stdout.write(pkg.version + \"\\n\");\n  process.exit(0);\n}\n\nconst logger = createServiceLogger(\"CLI\");\n\n// Pod-exit observability. The reconciler can only infer *that* an agent stopped\n// (stale heartbeat → Stranded); it never sees *why*. We log the cause from the\n// pod side at every catchable exit, keyed on the same sessionId the API's\n// `session_stranded` line carries so the two ends can be joined. Populated once\n// env identity resolves below; the early crash handlers read it live. (SIGKILL /\n// OOM 137 is uncatchable — diagnosed from GKE kernel logs, not this line.)\nconst exitContext: AgentExitIdentity = {};\nlet exitLogged = false;\nfunction logAgentExit(\n  reason: AgentExitReason,\n  opts: { exitCode: number; signal?: string; finalState?: string },\n): void {\n  // One line per process death; force_timeout is logged separately (it escalates\n  // an already-logged signal shutdown) so it bypasses this guard at its call site.\n  if (exitLogged) return;\n  exitLogged = true;\n  const payload = buildAgentExitLog({\n    reason,\n    exitCode: opts.exitCode,\n    signal: opts.signal,\n    finalState: opts.finalState,\n    uptimeSec: process.uptime(),\n    identity: exitContext,\n  });\n  logger[exitLogLevel(reason)](\"agent_exit\", payload as unknown as Record<string, unknown>);\n}\n\nasync function bootstrapFromCodespace(apiUrl: string, instanceName: string): Promise<void> {\n  const bootstrapToken = process.env.CONVEYOR_BOOTSTRAP_TOKEN;\n  const apiUrlFromEnv = Boolean(process.env.CONVEYOR_API_URL);\n  logger.info(\"Bootstrapping from codespace\", {\n    codespace: instanceName,\n    apiUrl,\n    apiUrlFromEnv,\n    bootstrapTokenPresent: Boolean(bootstrapToken),\n  });\n  const result = await fetchBootstrap({\n    apiUrl,\n    instanceName,\n    bootstrapToken,\n  });\n  if (!result.ok) {\n    logger.error(\"Bootstrap failed after retries\", {\n      reason: result.reason,\n      attempts: result.attempts,\n      status: result.status,\n      detail: result.detail,\n      apiUrl,\n      apiUrlFromEnv,\n      bootstrapTokenPresent: Boolean(bootstrapToken),\n      hint: apiUrlFromEnv\n        ? \"Verify the codespace was created by this Conveyor deployment and that the bootstrap token is current.\"\n        : \"CONVEYOR_API_URL was not set as a codespace secret — agent fell back to the built-in default. Re-create the codespace, or push CONVEYOR_API_URL via project settings.\",\n    });\n    process.exit(1);\n  }\n  applyBootstrapToEnv(result.config);\n  logger.info(\"Bootstrap complete\", {\n    taskId: result.config.taskId,\n    attempts: result.attempts,\n  });\n}\n\n// Helper to detect expected abort errors from SDK cleanup\nfunction isExpectedAbortError(error: Error | NodeJS.ErrnoException): boolean {\n  const message = error.message || \"\";\n  const hasAbortMessage = /operation aborted/i.test(message) || /abort/i.test(message);\n  const hasAbortCode = !(\"code\" in error) || error.code === undefined || error.code === \"ABORT_ERR\";\n  return hasAbortMessage && hasAbortCode;\n}\n\nprocess.on(\"uncaughtException\", (err: NodeJS.ErrnoException) => {\n  if (err.code === \"EPIPE\") return;\n\n  if (isExpectedAbortError(err)) {\n    logger.info(\"Ignored expected abort after shutdown\", { error: err.message, code: err.code });\n    return;\n  }\n\n  logger.error(\"Uncaught exception\", { error: err.message, code: err.code });\n  logAgentExit(\"uncaught_exception\", { exitCode: 1 });\n  process.exit(1);\n});\n\nprocess.on(\"unhandledRejection\", (reason: unknown) => {\n  const err = reason instanceof Error ? reason : new Error(String(reason));\n\n  if (isExpectedAbortError(err)) {\n    logger.info(\"Ignored expected abort rejection after shutdown\", { error: err.message });\n    return;\n  }\n\n  logger.error(\"Unhandled rejection\", { error: err.message });\n  logAgentExit(\"unhandled_rejection\", { exitCode: 1 });\n  process.exit(1);\n});\n\nconst DEFAULT_CONVEYOR_API_URL = \"https://api.conveyor.rallycryapp.com\";\nlet conveyorApiUrl = process.env.CONVEYOR_API_URL || DEFAULT_CONVEYOR_API_URL;\n\n// Step 1: Codespace bootstrap\nconst INSTANCE_NAME = process.env.CODESPACE_NAME || process.env.CLAUDESPACE_NAME;\nif (INSTANCE_NAME && !process.env.CONVEYOR_TASK_TOKEN) {\n  if (!conveyorApiUrl) {\n    logger.error(\"Could not resolve CONVEYOR_API_URL for codespace bootstrap\");\n    process.exit(1);\n  }\n  await bootstrapFromCodespace(conveyorApiUrl, INSTANCE_NAME);\n  conveyorApiUrl = process.env.CONVEYOR_API_URL ?? conveyorApiUrl;\n}\n\n// Step 2: Read env vars (bootstrap may have set them)\nconst CONVEYOR_TASK_TOKEN = process.env.CONVEYOR_TASK_TOKEN;\nconst CONVEYOR_TASK_ID = process.env.CONVEYOR_TASK_ID;\nconst CONVEYOR_WORKSPACE = process.env.CONVEYOR_WORKSPACE ?? process.cwd();\nconst CONVEYOR_MODE = (process.env.CONVEYOR_MODE ?? \"task\") as RunnerMode;\nconst CONVEYOR_AGENT_MODE = process.env.CONVEYOR_AGENT_MODE || undefined;\nconst CONVEYOR_IS_AUTO = CONVEYOR_AGENT_MODE\n  ? CONVEYOR_AGENT_MODE === \"auto\"\n  : process.env.CONVEYOR_IS_AUTO === \"true\";\n\n// Seed the pod-exit identity now that env is resolved (the specific runner\n// branches below refine sessionId/workspaceId to their own session).\nexitContext.taskId = CONVEYOR_TASK_ID;\nexitContext.workspaceId = process.env.CONVEYOR_WORKSPACE_ID;\nexitContext.runnerMode = CONVEYOR_MODE;\nexitContext.sessionId = process.env.CONVEYOR_SESSION_ID ?? CONVEYOR_TASK_ID;\n\n// Step 2.5: task-less PROJECT pods (Claudespace v3 project runners). The\n// bundle's session JWT carries {projectId, sessionId} and NO taskId; the\n// entrypoint exports CONVEYOR_PROJECT_ID (no CONVEYOR_TASK_ID) and sets\n// CONVEYOR_MODE=pm. Boot the project runner: connect + register session +\n// heartbeat + idle awaiting project-scoped messages. Never falls through to\n// the task lifecycle below.\nconst projectIdentity = resolveProjectRunnerIdentity(process.env);\n\n// Task-less ADHOC pods (Sessions view scratch pods). Same task-less identity as\n// a project pod (projectId + sessionId, no taskId), distinguished by\n// CONVEYOR_MODE=adhoc. Runs an interactive `claude` TUI relayed to the web\n// terminal — NOT the autonomous pm project runner below. Checked first so an\n// adhoc session never falls through to pm.\nif (!CONVEYOR_TASK_ID && projectIdentity && CONVEYOR_MODE === \"adhoc\") {\n  logger.info(\"Starting ad-hoc agent\", { projectId: projectIdentity.projectId });\n  const adhocRunner = new AdhocSessionRunner(\n    {\n      connection: {\n        apiUrl: conveyorApiUrl ?? \"\",\n        taskToken: projectIdentity.taskToken,\n        sessionId: projectIdentity.sessionId,\n        runnerMode: \"adhoc\",\n      },\n      projectId: projectIdentity.projectId,\n      workspaceId: projectIdentity.workspaceId,\n      workspaceDir: CONVEYOR_WORKSPACE,\n      ...(process.env.CLAUDESPACE_NAME ? { lifecycle: { idleTimeoutMs: 60 * 60 * 1000 } } : {}),\n    },\n    {\n      onEvent: (event) => {\n        logger.info(\"Ad-hoc runner event\", { eventType: event.type as string });\n      },\n    },\n  );\n  exitContext.sessionId = projectIdentity.sessionId;\n  exitContext.workspaceId = projectIdentity.workspaceId;\n  exitContext.runnerMode = \"adhoc\";\n  process.on(\"SIGTERM\", () => adhocRunner.stop());\n  process.on(\"SIGINT\", () => adhocRunner.stop());\n  await adhocRunner.run();\n  const adhocError = adhocRunner.finalState === \"error\";\n  logAgentExit(adhocError ? \"error\" : \"clean\", {\n    exitCode: adhocError ? 1 : 0,\n    finalState: adhocRunner.finalState ?? undefined,\n  });\n  process.exit(adhocError ? 1 : 0);\n}\n\nif (!CONVEYOR_TASK_ID && projectIdentity) {\n  logger.info(\"Starting project agent\", { projectId: projectIdentity.projectId });\n  const projectRunner = new ProjectSessionRunner(\n    {\n      connection: {\n        apiUrl: conveyorApiUrl ?? \"\",\n        taskToken: projectIdentity.taskToken,\n        sessionId: projectIdentity.sessionId,\n        runnerMode: \"pm\",\n      },\n      projectId: projectIdentity.projectId,\n      // Same extended idle window claudespace task pods get.\n      ...(process.env.CLAUDESPACE_NAME ? { lifecycle: { idleTimeoutMs: 60 * 60 * 1000 } } : {}),\n    },\n    {\n      onEvent: (event) => {\n        logger.info(\"Project runner event\", { eventType: event.type as string });\n      },\n    },\n  );\n  exitContext.sessionId = projectIdentity.sessionId;\n  exitContext.workspaceId = projectIdentity.workspaceId;\n  exitContext.runnerMode = \"pm\";\n  process.on(\"SIGTERM\", () => projectRunner.stop());\n  process.on(\"SIGINT\", () => projectRunner.stop());\n  await projectRunner.run();\n  const projectError = projectRunner.finalState === \"error\";\n  logAgentExit(projectError ? \"error\" : \"clean\", {\n    exitCode: projectError ? 1 : 0,\n    finalState: projectRunner.finalState ?? undefined,\n  });\n  process.exit(projectError ? 1 : 0);\n}\n\nif (!CONVEYOR_TASK_TOKEN || !CONVEYOR_TASK_ID) {\n  logger.error(\"Missing required environment variables\");\n  logger.error(\"  CONVEYOR_TASK_TOKEN - JWT token for task authentication\");\n  logger.error(\"  CONVEYOR_TASK_ID - ID of the task to execute\");\n  logger.error(\"\");\n  logger.error(\"CONVEYOR_API_URL is provided via codespace secret or bootstrap.\");\n  logger.error(\"\");\n  logger.error(\"Optional:\");\n  logger.error(\"  CONVEYOR_MODE - Runner mode: 'task' (default) or 'pm'\");\n  logger.error(\"  CONVEYOR_WORKSPACE - Working directory (defaults to cwd)\");\n  logger.error(\n    \"  Project pods instead require CONVEYOR_PROJECT_ID + CONVEYOR_SESSION_ID + CONVEYOR_MODE=pm\",\n  );\n  process.exit(1);\n}\n\nif (\n  CONVEYOR_MODE !== \"task\" &&\n  CONVEYOR_MODE !== \"pm\" &&\n  CONVEYOR_MODE !== \"code-review\" &&\n  CONVEYOR_MODE !== \"adhoc\"\n) {\n  logger.error(\"Invalid CONVEYOR_MODE\", {\n    mode: CONVEYOR_MODE,\n    expected: [\"task\", \"pm\", \"code-review\", \"adhoc\"],\n  });\n  process.exit(1);\n}\n\nlogger.info(\"Starting agent\", { mode: CONVEYOR_MODE });\n\n// Claudespace pods: longer idle timeout to stay alive for incoming messages.\n// Non-claudespace environments (local, workspace, GitHub Codespaces) have\n// persistent state and don't need the periodic WIP commit safety net, so\n// disable the git flush timer for them.\nconst lifecycleOverrides = process.env.CLAUDESPACE_NAME\n  ? { idleTimeoutMs: 60 * 60 * 1000 }\n  : { gitFlushIntervalMs: 0 };\n\nconst runner = new SessionRunner(\n  {\n    connection: {\n      apiUrl: conveyorApiUrl ?? \"\",\n      taskToken: CONVEYOR_TASK_TOKEN,\n      // CONVEYOR_SESSION_ID is the CodespaceSession ID for BaseService ACL.\n      // Falls back to CONVEYOR_TASK_ID for backward compat (codespace bootstrap sets only task ID).\n      sessionId: process.env.CONVEYOR_SESSION_ID ?? CONVEYOR_TASK_ID,\n      runnerMode: CONVEYOR_MODE,\n    },\n    runnerMode: CONVEYOR_MODE,\n    isAuto: CONVEYOR_IS_AUTO,\n    workspaceDir: CONVEYOR_WORKSPACE,\n    agentMode: CONVEYOR_AGENT_MODE as import(\"@project/shared\").AgentMode | undefined,\n    lifecycle: lifecycleOverrides,\n  },\n  {\n    onStatusChange: (status: AgentRunnerStatus) => {\n      logger.info(\"Status changed\", { status });\n    },\n    onEvent: (event: Record<string, unknown>) => {\n      const detail =\n        (event.message as string) ?? (event.content as string) ?? (event.summary as string) ?? \"\";\n      if (detail) {\n        logger.info(detail, { eventType: event.type as string });\n      }\n    },\n  },\n);\n\n// Same-pod review children (session:spawnReview). Wired only for the builder\n// (\"task\") runner mode below — a review child must never recursively spawn.\nconst reviewChildren = new ReviewChildSupervisor(runner.connection, CONVEYOR_WORKSPACE);\n\nlet shutdownSignal: \"SIGTERM\" | \"SIGINT\" | undefined;\n\nconst shutdownAgent = (signal: \"SIGTERM\" | \"SIGINT\") => {\n  logger.info(`Received ${signal}, flushing git and stopping agent`);\n  // Recorded (not logged yet) so the final agent_exit line — emitted once the\n  // real exit code is known below — can still attribute the cause to this\n  // signal. A graceful SIGTERM resolves runner.run() with finalState=\"finished\"\n  // and exits 0, so guessing exitCode here up front would misreport it as 1.\n  shutdownSignal = signal;\n  // Flush WIP commit + push BEFORE stop() tears down the connection, since\n  // the token-refresh RPC needs a live socket. Then stop the runner.\n  void (async () => {\n    try {\n      await reviewChildren.stopAll();\n    } catch {\n      /* best-effort */\n    }\n    try {\n      await runner.flushGitOnShutdown();\n    } finally {\n      runner.stop();\n    }\n  })();\n  setTimeout(() => {\n    logger.warn(`Forcing exit after ${signal} timeout`);\n    // The graceful flush/stop hung past the watchdog — emit directly (bypassing\n    // the one-line guard in logAgentExit) since run() will never resolve to log\n    // this exit itself.\n    logger.warn(\n      \"agent_exit\",\n      buildAgentExitLog({\n        reason: \"force_timeout\",\n        exitCode: 1,\n        signal,\n        finalState: runner.finalState ?? undefined,\n        uptimeSec: process.uptime(),\n        identity: exitContext,\n      }) as unknown as Record<string, unknown>,\n    );\n    process.exit(1);\n  }, 45_000).unref();\n};\n\nprocess.on(\"SIGTERM\", () => shutdownAgent(\"SIGTERM\"));\nprocess.on(\"SIGINT\", () => shutdownAgent(\"SIGINT\"));\n\n// Connect first so setup/start output is forwarded to the API\nawait runner.connect();\n\nconst logSetupOutput = (stream: \"stdout\" | \"stderr\", data: string) => {\n  runner.connection.sendEvent({ type: \"setup_output\", stream, data });\n  (stream === \"stderr\" ? process.stderr : process.stdout).write(data);\n};\n\ntype StartCommandChild = ReturnType<typeof runStartCommand>;\n\nlet startCommandChild: StartCommandChild | null = null;\nconst expectedStartCommandStops = new WeakSet<StartCommandChild>();\n\nconst stopStartCommandChild = (): void => {\n  const child = startCommandChild;\n  if (!child || child.exitCode !== null || child.killed) return;\n  expectedStartCommandStops.add(child);\n  try {\n    if (child.pid) process.kill(-child.pid, \"SIGTERM\");\n    else child.kill(\"SIGTERM\");\n  } catch {\n    try {\n      child.kill(\"SIGTERM\");\n    } catch {\n      /* already exited */\n    }\n  }\n};\n\nconst launchStartCommand = (command: string): void => {\n  logger.info(\"Running start command\", { command });\n  runner.connection.sendEvent({ type: \"start_command_started\" });\n  const child = runStartCommand(command, CONVEYOR_WORKSPACE, (stream, data) => {\n    runner.connection.sendEvent({ type: \"start_command_output\", stream, data });\n    (stream === \"stderr\" ? process.stderr : process.stdout).write(data);\n  });\n  startCommandChild = child;\n  child.on(\"exit\", (code, signal) => {\n    if (startCommandChild === child) startCommandChild = null;\n    if (expectedStartCommandStops.has(child)) return;\n\n    logger.info(\"Start command exited\", { code, signal });\n    runner.connection.sendEvent({\n      type: \"start_command_exited\",\n      code,\n      signal,\n      message: `start command exited${code === null ? \"\" : ` with code ${code}`}${signal ? ` (signal: ${signal})` : \"\"}`,\n    });\n    // Surface non-zero exits as a loud chat message too, so users know\n    // their dev server crashed and the agent may hit tool-use failures.\n    if (code !== null && code !== 0) {\n      runner.connection.sendEvent({\n        type: \"start_command_error\",\n        message: `start command exited with code ${code}${signal ? ` (signal: ${signal})` : \"\"}`,\n      });\n    }\n  });\n  child.on(\"error\", (err) => {\n    if (startCommandChild === child) startCommandChild = null;\n    logger.error(\"Start command error\", { error: err.message });\n    runner.connection.sendEvent({ type: \"start_command_error\", message: err.message });\n  });\n};\n\n// Wake lazy sidecars as soon as the agent is connected. Readiness still gates\n// only setup/start below; Claude startup remains gated only on workspace git.\nvoid startLazySidecars(process.env, (message) =>\n  logSetupOutput(\"stdout\", `[sidecars] ${message}\\n`),\n);\n\n// Defense-in-depth: warn loudly if CONVEYOR_SESSION_ID decodes to a different\n// task than CONVEYOR_TASK_ID. Authoritative checks are server-side\n// (requireTaskAuth + partial-unique index on active CodespaceSessions). This\n// is a visibility net in case those regress — see SEC-9 postmortem in\n// .claude/rules/agent-codespace.md.\nvoid checkSessionTaskIdentity({\n  sessionId: process.env.CONVEYOR_SESSION_ID,\n  taskId: CONVEYOR_TASK_ID,\n  fetchSessionTaskId: async (sessionId) => {\n    const ctx = await runner.connection.call(\"getTaskContext\", { sessionId });\n    return ctx.id;\n  },\n  logger,\n});\n\n// Run setup + start commands in the background so the agent can start\n// fetching context and thinking immediately. The dev environment will be\n// ready by the time the agent needs to actually execute anything in it.\n// Start command still runs after setup (install must finish before `bun\n// run dev` works), but both are decoupled from runner.run().\n//\n// INVARIANT: failures inside this IIFE are NON-FATAL. Any throw or non-zero\n// exit from setup/start must surface as a chat event, never as process.exit.\n// The agent continues so the user can still interact with it and debug.\n// Same-pod review: only the builder runner hosts review children. The push\n// arrives on the BUILDER's session room; the child binds the review session\n// via env overrides (its own JWT/sessionId, CONVEYOR_MODE=code-review).\nif (CONVEYOR_MODE === \"task\") {\n  runner.connection.onSpawnReview((data) => {\n    void reviewChildren.spawn(data).catch((err: unknown) => {\n      logger.error(\"Review child spawn threw\", {\n        error: err instanceof Error ? err.message : String(err),\n      });\n      runner.connection.reportReviewSpawnFailure(\n        data.sessionId,\n        err instanceof Error ? err.message : String(err),\n      );\n    });\n  });\n}\n\nconst conveyorConfig = loadConveyorConfig();\nrunner.connection.onRunStartCommand(() => {\n  if (!conveyorConfig?.startCommand) return;\n  runner.connection.sendEvent({\n    type: \"start_command_output\",\n    stream: \"stdout\",\n    data: \"[conveyor-agent] Restarting start command...\\n\",\n  });\n  stopStartCommandChild();\n  launchStartCommand(conveyorConfig.startCommand);\n});\n\nif (conveyorConfig) {\n  void (async () => {\n    // Gate setup/start on the entrypoint's backgrounded git preparation: these\n    // scripts need the repo present. If git never became ready, skip them —\n    // non-fatal, the agent keeps running so the user can still interact/debug.\n    // \"not-gated\" (GitHub Codespaces / local) and \"ready\" both proceed.\n    const gitState = await awaitGitReady({\n      onLog: (m) => logSetupOutput(\"stdout\", `[git] ${m}\\n`),\n    });\n    if (gitState === \"failed\" || gitState === \"timeout\") {\n      runner.connection.sendEvent({\n        type: \"setup_error\",\n        message: \"Workspace not ready — skipping setup/start\",\n      });\n      return;\n    }\n\n    // Gate setup/start on sidecar readiness. This wait used to live in the pod\n    // entrypoint AHEAD of the agent launch, blocking the thinking loop on\n    // postgres/firebase boot it never needed. It now runs here — inside the\n    // background IIFE, in parallel with runner.run() — so it only delays\n    // setup/start (which genuinely need a warm postgres), not the agent.\n    await waitForSidecars({\n      onLog: (message) => logSetupOutput(\"stdout\", `[sidecars] ${message}\\n`),\n      startLazy: false,\n    });\n\n    if (conveyorConfig.setupCommand) {\n      logger.info(\"Running setup command (background)\", {\n        command: conveyorConfig.setupCommand,\n      });\n      try {\n        await runSetupCommand(conveyorConfig.setupCommand, CONVEYOR_WORKSPACE, logSetupOutput);\n        logger.info(\"Setup command completed\");\n      } catch (error) {\n        const msg = error instanceof Error ? error.message : \"Setup command failed\";\n        logger.error(\"Setup command failed\", { error: msg });\n        runner.connection.sendEvent({ type: \"setup_error\", message: msg });\n      }\n    }\n\n    let startCommandRunning = false;\n    if (conveyorConfig.startCommand) {\n      launchStartCommand(conveyorConfig.startCommand);\n      startCommandRunning = true;\n    }\n\n    const forwardPorts = await loadForwardPorts(CONVEYOR_WORKSPACE);\n    const previewPorts = buildSessionPreviewPorts(forwardPorts);\n    runner.connection.sendEvent({\n      type: \"setup_complete\",\n      startCommandRunning,\n      ...(previewPorts.length > 0 ? { previewPorts } : {}),\n    });\n  })();\n}\n\n// Start the main agent lifecycle immediately in parallel with setup\n// (context fetch, mode resolution, core loop).\nrunner\n  .run()\n  .then(() => {\n    // Exit with code 0 for clean shutdown (entrypoint won't restart),\n    // code 1 for errors (entrypoint will restart). A SIGTERM-initiated shutdown\n    // resolves run() too (finalState=\"finished\"), so tag it \"signal\" rather\n    // than \"clean\" — but the exit code still follows the real finalState, not\n    // a guess made back when the signal first arrived.\n    const errored = runner.finalState === \"error\";\n    const reason: AgentExitReason = shutdownSignal ? \"signal\" : errored ? \"error\" : \"clean\";\n    logAgentExit(reason, {\n      exitCode: errored ? 1 : 0,\n      signal: shutdownSignal,\n      finalState: runner.finalState ?? undefined,\n    });\n    process.exit(errored ? 1 : 0);\n  })\n  .catch((error: unknown) => {\n    const msg = error instanceof Error ? error.message : String(error);\n    logger.error(\"Agent runner failed\", { error: msg });\n    logAgentExit(\"error\", { exitCode: 1, finalState: runner.finalState ?? undefined });\n    process.exit(1);\n  });\n","import net from \"node:net\";\nimport { mkdir, writeFile } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\n\n/**\n * Sidecar readiness gate.\n *\n * Previously the pod entrypoint blocked on postgres/firebase coming up BEFORE it\n * launched the agent, so the agent's thinking loop paid for up to ~60s of\n * sidecar boot it never needed. That wait now lives here and runs inside the\n * agent's background setup IIFE — it gates only `setupCommand`/`startCommand`\n * (which genuinely need a warm postgres), never the agent loop.\n *\n * Semantics deliberately match the old entrypoint: best-effort, NON-FATAL on\n * timeout (log a warning and continue), and a no-op when no sidecar env vars are\n * present. Per-target timeouts mirror what the entrypoint learned the hard way —\n * the firebase auth emulator cold-boots slowly and doesn't bind 9099 until ~50s\n * after its container starts, so it gets 60s.\n *\n * Postgres gets 120s: on a durable-sleep/pool pod the postgres sidecar restores\n * prior state, and an ungraceful previous pod death (e.g. OOMKill) leaves a torn\n * WAL that triggers crash recovery on boot. Cold boot + WAL replay routinely runs\n * past 30s, so the old deadline expired before postgres bound 5432 — setup's seed\n * then hit `DatabaseNotReachable` (P1001) and the whole dev env came up broken.\n */\n\nexport interface SidecarTarget {\n  /** Human label for logs (e.g. \"postgres\"). */\n  name: string;\n  host: string;\n  port: number;\n  /** Per-target readiness deadline in ms (overridden by an explicit opts.timeoutMs). */\n  timeoutMs?: number;\n}\n\nexport interface WaitForSidecarsOptions {\n  /** Env to read targets from. Defaults to `process.env`. */\n  env?: NodeJS.ProcessEnv;\n  /** Progress sink (one line per message, no trailing newline). */\n  onLog?: (message: string) => void;\n  /** Force a single deadline for every target, overriding per-target defaults. */\n  timeoutMs?: number;\n  /** Delay between probe attempts in ms. */\n  pollIntervalMs?: number;\n  /** TCP probe seam — returns true once the target accepts a connection. */\n  probe?: (target: SidecarTarget) => Promise<boolean>;\n  /** Whether to create the lazy sidecar start marker before probing. Defaults to true. */\n  startLazy?: boolean;\n}\n\nconst POSTGRES_TIMEOUT_MS = 120_000;\nconst FIREBASE_TIMEOUT_MS = 60_000;\nconst FALLBACK_TIMEOUT_MS = 30_000;\nconst DEFAULT_POLL_INTERVAL_MS = 1_000;\nconst DEFAULT_PROBE_TIMEOUT_MS = 2_000;\n\nconst POSTGRES_DEFAULT_PORT = 5432;\nconst FIREBASE_DEFAULT_PORT = 9099;\n\nexport async function startLazySidecars(\n  env: NodeJS.ProcessEnv,\n  onLog: (message: string) => void,\n): Promise<void> {\n  const markerPath = env.CONVEYOR_SIDECAR_START_FILE;\n  if (!markerPath) return;\n\n  try {\n    await mkdir(dirname(markerPath), { recursive: true });\n    await writeFile(markerPath, \"start\\n\", \"utf8\");\n    onLog(\"Started lazy sidecars\");\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    onLog(`WARNING: failed to start lazy sidecars: ${message}`);\n  }\n}\n\nfunction parseHostPort(value: string, defaultPort: number): { host: string; port: number } | null {\n  const trimmed = value.trim().replace(/^[a-z]+:\\/\\//i, \"\");\n  if (!trimmed) return null;\n  const idx = trimmed.lastIndexOf(\":\");\n  if (idx === -1) {\n    return { host: trimmed, port: defaultPort };\n  }\n  const host = trimmed.slice(0, idx) || \"localhost\";\n  const port = Number(trimmed.slice(idx + 1));\n  return { host, port: Number.isFinite(port) ? port : defaultPort };\n}\n\n/**\n * Resolve the sidecar targets the agent should wait for from env. Mirrors the\n * entrypoint's conditions: postgres when `DATABASE_URL` is set, firebase auth\n * emulator when `FIREBASE_AUTH_EMULATOR_HOST` is set.\n */\nexport function resolveSidecarTargets(env: NodeJS.ProcessEnv = process.env): SidecarTarget[] {\n  const targets: SidecarTarget[] = [];\n\n  const databaseUrl = env.DATABASE_URL;\n  if (databaseUrl) {\n    try {\n      const url = new URL(databaseUrl);\n      const host = url.hostname || \"localhost\";\n      const port = url.port ? Number(url.port) : POSTGRES_DEFAULT_PORT;\n      if (Number.isFinite(port)) {\n        targets.push({ name: \"postgres\", host, port, timeoutMs: POSTGRES_TIMEOUT_MS });\n      }\n    } catch {\n      // Unparseable DATABASE_URL — skip rather than crash the setup path.\n    }\n  }\n\n  const firebaseHost = env.FIREBASE_AUTH_EMULATOR_HOST;\n  if (firebaseHost) {\n    const parsed = parseHostPort(firebaseHost, FIREBASE_DEFAULT_PORT);\n    if (parsed) {\n      targets.push({\n        name: \"firebase auth emulator\",\n        host: parsed.host,\n        port: parsed.port,\n        timeoutMs: FIREBASE_TIMEOUT_MS,\n      });\n    }\n  }\n\n  return targets;\n}\n\nfunction defaultProbe(target: SidecarTarget): Promise<boolean> {\n  return new Promise((resolve) => {\n    let settled = false;\n    const socket = net.createConnection({ host: target.host, port: target.port });\n    const done = (ok: boolean) => {\n      if (settled) return;\n      settled = true;\n      socket.destroy();\n      resolve(ok);\n    };\n    socket.once(\"connect\", () => done(true));\n    socket.once(\"error\", () => done(false));\n    socket.setTimeout(DEFAULT_PROBE_TIMEOUT_MS, () => done(false));\n  });\n}\n\nconst delay = (ms: number): Promise<void> =>\n  new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n\nasync function waitForTarget(\n  target: SidecarTarget,\n  opts: {\n    onLog: (message: string) => void;\n    timeoutMs?: number;\n    pollIntervalMs: number;\n    probe: (target: SidecarTarget) => Promise<boolean>;\n  },\n): Promise<void> {\n  const { onLog, pollIntervalMs, probe } = opts;\n  const timeoutMs = opts.timeoutMs ?? target.timeoutMs ?? FALLBACK_TIMEOUT_MS;\n  const deadline = Date.now() + timeoutMs;\n  onLog(`Waiting for ${target.name} on ${target.host}:${target.port}...`);\n\n  while (true) {\n    if (await probe(target)) {\n      onLog(`${target.name} is ready`);\n      return;\n    }\n    if (Date.now() >= deadline) {\n      onLog(\n        `WARNING: ${target.name} not ready after ${Math.round(timeoutMs / 1000)}s, continuing anyway`,\n      );\n      return;\n    }\n    await delay(pollIntervalMs);\n  }\n}\n\n/**\n * Block until every configured sidecar is reachable (or its per-target deadline\n * elapses). Resolves immediately when no sidecar env vars are set. Never throws —\n * a timed-out sidecar logs a warning and is treated as \"continue anyway\".\n */\nexport async function waitForSidecars(opts: WaitForSidecarsOptions = {}): Promise<void> {\n  const {\n    env = process.env,\n    onLog = () => {},\n    timeoutMs,\n    pollIntervalMs = DEFAULT_POLL_INTERVAL_MS,\n    probe = defaultProbe,\n    startLazy = true,\n  } = opts;\n\n  if (startLazy) {\n    await startLazySidecars(env, onLog);\n  }\n\n  const targets = resolveSidecarTargets(env);\n  if (targets.length === 0) return;\n\n  await Promise.all(\n    targets.map((target) => waitForTarget(target, { onLog, timeoutMs, pollIntervalMs, probe })),\n  );\n}\n","// Defense-in-depth startup check. The authoritative guarantee that a session is\n// bound to the right task lives server-side (requireTaskAuth + the Postgres\n// partial-unique index on active CodespaceSessions). This check exists so that\n// if those invariants ever regress, a human sees a loud WARN immediately\n// instead of the symptoms SEC-9 produced (multiple agents silently clobbering\n// the same branch).\nexport interface SessionIdentityLogger {\n  warn(message: string, data?: Record<string, unknown>): void;\n  info?(message: string, data?: Record<string, unknown>): void;\n}\n\nexport interface CheckSessionTaskIdentityParams {\n  sessionId: string | undefined;\n  taskId: string;\n  fetchSessionTaskId: (sessionId: string) => Promise<string>;\n  logger: SessionIdentityLogger;\n}\n\nexport async function checkSessionTaskIdentity(\n  params: CheckSessionTaskIdentityParams,\n): Promise<\"match\" | \"mismatch\" | \"skipped\" | \"error\"> {\n  const { sessionId, taskId, fetchSessionTaskId, logger } = params;\n  if (!sessionId || sessionId === taskId) return \"skipped\";\n  let sessionTaskId: string;\n  try {\n    sessionTaskId = await fetchSessionTaskId(sessionId);\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    logger.warn(\"Could not verify session/task identity — continuing (defense-in-depth only)\", {\n      sessionId,\n      taskId,\n      error: message,\n    });\n    return \"error\";\n  }\n  if (sessionTaskId !== taskId) {\n    logger.warn(\n      \"!!! CONVEYOR_SESSION_ID is bound to a different task than CONVEYOR_TASK_ID — server-side guards should still block mutations, but this indicates a misconfiguration or replayed token.\",\n      { sessionId, envTaskId: taskId, sessionTaskId },\n    );\n    return \"mismatch\";\n  }\n  return \"match\";\n}\n","/**\n * Structured pod-exit log payload. The control plane (workspace reconciler) can\n * only ever infer *that* an agent stopped — it sees a stale heartbeat and marks\n * the session Stranded/Ended. It cannot see *why*. This log closes that gap from\n * the pod side: emitted at every catchable exit path so the claudespace pod logs\n * record the cause (teardown signal vs clean finish vs crash) alongside the\n * `sessionId` that joins to the API's `session_stranded` / reconcile logs.\n *\n * Caveat: an OOMKill (SIGKILL / 137) is uncatchable, so it never reaches here —\n * those are diagnosed from GKE kernel OOM logs, not this line.\n */\n// - signal: SIGTERM/SIGINT — teardown or a reaper asked us to stop\n// - clean: runner.run() resolved normally\n// - error: runner finalState=error, or run() rejected\n// - force_timeout: graceful-shutdown watchdog fired\nexport type AgentExitReason =\n  | \"signal\"\n  | \"clean\"\n  | \"error\"\n  | \"uncaught_exception\"\n  | \"unhandled_rejection\"\n  | \"force_timeout\";\n\nexport interface AgentExitIdentity {\n  sessionId?: string | undefined;\n  taskId?: string | undefined;\n  workspaceId?: string | undefined;\n  runnerMode?: string | undefined;\n}\n\nexport interface AgentExitLog extends AgentExitIdentity {\n  event: \"agent_exit\";\n  reason: AgentExitReason;\n  exitCode: number;\n  signal?: string;\n  finalState?: string;\n  uptimeSec: number;\n}\n\n/** Clean shutdowns are routine (info); every other exit is worth a warn so it\n * surfaces in severity-filtered log queries. */\nexport function exitLogLevel(reason: AgentExitReason): \"info\" | \"warn\" {\n  return reason === \"clean\" ? \"info\" : \"warn\";\n}\n\n/**\n * Build the `agent_exit` payload, dropping any undefined optional/identity keys\n * so the serialized log line stays tidy (no `\"workspaceId\":undefined` noise).\n */\nexport function buildAgentExitLog(args: {\n  reason: AgentExitReason;\n  exitCode: number;\n  uptimeSec: number;\n  signal?: string | undefined;\n  finalState?: string | undefined;\n  identity?: AgentExitIdentity | undefined;\n}): AgentExitLog {\n  const log: AgentExitLog = {\n    event: \"agent_exit\",\n    reason: args.reason,\n    exitCode: args.exitCode,\n    uptimeSec: Math.round(args.uptimeSec * 10) / 10,\n  };\n  if (args.signal !== undefined) log.signal = args.signal;\n  if (args.finalState !== undefined) log.finalState = args.finalState;\n  const id = args.identity;\n  if (id) {\n    if (id.sessionId !== undefined) log.sessionId = id.sessionId;\n    if (id.taskId !== undefined) log.taskId = id.taskId;\n    if (id.workspaceId !== undefined) log.workspaceId = id.workspaceId;\n    if (id.runnerMode !== undefined) log.runnerMode = id.runnerMode;\n  }\n  return log;\n}\n","/**\n * Task-less pod identity detection (Claudespace v3 project runners AND adhoc\n * scratch pods).\n *\n * A v3 task-less pod's bootstrap bundle carries a session JWT with\n * {projectId, workspaceId, sessionId, role} and NO taskId claim; the entrypoint\n * exports CONVEYOR_PROJECT_ID / CONVEYOR_SESSION_ID / CONVEYOR_WORKSPACE_ID from\n * the claims, does NOT export CONVEYOR_TASK_ID, and sets CONVEYOR_MODE to \"pm\"\n * (project runner) or \"adhoc\" (interactive scratch TUI). Both share this\n * identity shape — cli.ts branches on CONVEYOR_MODE afterward to pick the\n * runner. Every condition below is required — anything else falls through to\n * the task-runner path, which fail-closed exits without a task id.\n *\n * `workspaceId` is the stable `Workspace` row id — unlike `sessionId` (the\n * `WorkspaceSession` row), it survives a sleep/wake cycle: a user-initiated\n * wake mints a brand-new writer `WorkspaceSession` (fresh-session semantics,\n * see `ensure-adhoc.ts`), so `sessionId` changes on every wake. The adhoc\n * runner keys its Claude session lineage on `workspaceId` for exactly this\n * reason — keying on `sessionId` would never resume the prior transcript.\n */\n\nexport interface ProjectRunnerIdentity {\n  projectId: string;\n  sessionId: string;\n  workspaceId: string;\n  taskToken: string;\n}\n\nexport function resolveProjectRunnerIdentity(\n  env: Record<string, string | undefined>,\n): ProjectRunnerIdentity | null {\n  // A task id always wins: this is a task pod, never a project runner.\n  if (env.CONVEYOR_TASK_ID) return null;\n  if (!env.CONVEYOR_TASK_TOKEN) return null;\n  if (!env.CONVEYOR_PROJECT_ID || !env.CONVEYOR_SESSION_ID || !env.CONVEYOR_WORKSPACE_ID) {\n    return null;\n  }\n  // Task-less identity is shared by the project runner (\"pm\") and the adhoc\n  // scratch-pod TUI (\"adhoc\"); cli.ts branches on CONVEYOR_MODE afterward to\n  // pick the runner. Any OTHER mode (reader/review/task/absent) is not a valid\n  // task-less identity. NOTE: the adhoc branch in cli.ts gates on THIS resolver\n  // returning non-null AND CONVEYOR_MODE === \"adhoc\" — omitting \"adhoc\" here\n  // makes that branch unreachable and crash-loops every adhoc pod at the\n  // task-mode fall-through.\n  if (env.CONVEYOR_MODE !== \"pm\" && env.CONVEYOR_MODE !== \"adhoc\") return null;\n\n  return {\n    projectId: env.CONVEYOR_PROJECT_ID,\n    sessionId: env.CONVEYOR_SESSION_ID,\n    workspaceId: env.CONVEYOR_WORKSPACE_ID,\n    taskToken: env.CONVEYOR_TASK_TOKEN,\n  };\n}\n","/**\n * ProjectSessionRunner — the task-less PROJECT pod agent loop (Claudespace v3\n * project runners).\n *\n * What a project agent does today: connect, register its WorkspaceSession\n * (connectAgent), heartbeat (lease renewal via the server's v3 fallthrough),\n * and idle awaiting project-scoped messages. It deliberately does NOT run the\n * task-shaped SessionRunner lifecycle — getTaskContext, git branch sync, the\n * QueryBridge prompt loop and WIP flushing are all keyed on a Task, and the\n * server-side pm-conversation surface for project workspaces does not exist\n * yet (project chat is served by the server-side ProjectAgentService\n * responder). When that surface lands (project context RPC + project-keyed\n * message routing), this runner grows the message->query loop; until then an\n * inbound message is logged and acknowledged as activity only.\n */\nimport {\n  AgentConnection,\n  type AgentConnectionConfig,\n  type IncomingMessage,\n} from \"../connection/agent-connection.js\";\nimport { Lifecycle, DEFAULT_LIFECYCLE_CONFIG, type LifecycleConfig } from \"./lifecycle.js\";\nimport { sampleKeyUsage } from \"../execution/usage-sampler.js\";\n\nexport interface ProjectSessionRunnerConfig {\n  connection: AgentConnectionConfig;\n  projectId: string;\n  lifecycle?: Partial<LifecycleConfig>;\n}\n\nexport interface ProjectSessionRunnerCallbacks {\n  onEvent?: (event: Record<string, unknown>) => void;\n}\n\n/** The AgentConnection surface the project runner uses (injectable for tests). */\nexport interface ProjectRunnerConnection {\n  connect(): Promise<void>;\n  disconnect(): void;\n  call(\n    method: \"connectAgent\",\n    payload: { sessionId: string },\n  ): Promise<{ sessionId: string; taskId: string | null; pendingMessages: unknown[] }>;\n  sendEvent(event: { type: string; [key: string]: unknown }): void;\n  sendHeartbeat(): void;\n  emitStatus(status: string): Promise<void>;\n  onMessage(callback: (msg: IncomingMessage) => void): void;\n  onStop(callback: () => void): void;\n  refreshTaskTokenFromBootstrap(): Promise<boolean>;\n}\n\nexport class ProjectSessionRunner {\n  readonly connection: ProjectRunnerConnection;\n  readonly lifecycle: Lifecycle;\n\n  private readonly config: ProjectSessionRunnerConfig;\n  private readonly callbacks: ProjectSessionRunnerCallbacks;\n  private stopped = false;\n  private stopResolver: (() => void) | null = null;\n  private _finalState: \"finished\" | \"error\" | null = null;\n\n  constructor(\n    config: ProjectSessionRunnerConfig,\n    callbacks: ProjectSessionRunnerCallbacks = {},\n    connection?: ProjectRunnerConnection,\n  ) {\n    this.config = config;\n    this.callbacks = callbacks;\n    this.connection = connection ?? new AgentConnection(config.connection);\n    this.lifecycle = new Lifecycle(\n      // No git flush: the project runner does not (yet) mutate the checkout,\n      // and the WIP snapshot machinery is branch/task-shaped.\n      { ...DEFAULT_LIFECYCLE_CONFIG, gitFlushIntervalMs: 0, ...config.lifecycle },\n      {\n        onHeartbeat: () => this.connection.sendHeartbeat(),\n        onIdleTimeout: () => {\n          process.stderr.write(\"[conveyor-agent] Project runner idle timeout, shutting down\\n\");\n          this.requestStop();\n        },\n        onDormantTimeout: () => this.requestStop(),\n        // v3 credential refresh: re-poll the pod bootstrap route (session JWT,\n        // GitHub token, keys are all swapped in place). The task-scoped\n        // refreshGithubToken RPC does not apply to a task-less session.\n        onTokenRefresh: () => void this.connection.refreshTaskTokenFromBootstrap().catch(() => {}),\n        onGitFlush: () => {},\n        onUsageSample: () => void this.sampleAndReportKeyUsage(),\n      },\n    );\n  }\n\n  get finalState(): \"finished\" | \"error\" | null {\n    return this._finalState;\n  }\n\n  get isStopped(): boolean {\n    return this.stopped;\n  }\n\n  /** Connect, register the session, then idle until stopped or idle-timeout. */\n  async run(): Promise<void> {\n    try {\n      await this.connection.connect();\n      this.connection.sendEvent({\n        type: \"connected\",\n        sessionId: this.config.connection.sessionId,\n        projectId: this.config.projectId,\n      });\n\n      this.connection.onStop(() => this.requestStop());\n      this.connection.onMessage((msg) => this.handleMessage(msg));\n      this.lifecycle.startHeartbeat();\n      this.lifecycle.startTokenRefresh();\n      this.lifecycle.startUsageSample();\n\n      // Join the session room + activate the lease (server v3 fallthrough).\n      await this.connection.call(\"connectAgent\", {\n        sessionId: this.config.connection.sessionId,\n      });\n\n      process.stderr.write(\n        `[conveyor-agent] Project runner connected (project: ${this.config.projectId}) — idling\\n`,\n      );\n      await this.connection.emitStatus(\"idle\");\n      this.callbacks.onEvent?.({ type: \"project_runner_idle\", projectId: this.config.projectId });\n\n      this.lifecycle.startIdleTimer();\n      await this.waitUntilStopped();\n      this._finalState = \"finished\";\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      process.stderr.write(`[conveyor-agent] Project runner failed: ${message}\\n`);\n      this.connection.sendEvent({ type: \"error\", message });\n      this._finalState = \"error\";\n    } finally {\n      this.shutdown();\n    }\n  }\n\n  /**\n   * The pm-conversation surface is a follow-up: no server path routes chat to\n   * a task-less session yet, so any message that does arrive is surfaced in\n   * the logs and treated as activity (idle timer restarts) — never executed.\n   */\n  private handleMessage(msg: IncomingMessage): void {\n    const preview = msg.content.length > 120 ? `${msg.content.slice(0, 120)}…` : msg.content;\n    process.stderr.write(\n      `[conveyor-agent] Project runner received message (pm surface not wired yet): \"${preview.replace(/\\n/g, \"\\\\n\")}\"\\n`,\n    );\n    this.callbacks.onEvent?.({ type: \"project_message_received\", content: msg.content });\n    if (!this.stopped) this.lifecycle.startIdleTimer();\n  }\n\n  /** External stop (SIGTERM/SIGINT or server session:stop). */\n  stop(): void {\n    this.requestStop();\n  }\n\n  private requestStop(): void {\n    if (this.stopped) return;\n    this.stopped = true;\n    if (this.stopResolver) {\n      const resolve = this.stopResolver;\n      this.stopResolver = null;\n      resolve();\n    }\n  }\n\n  private waitUntilStopped(): Promise<void> {\n    if (this.stopped) return Promise.resolve();\n    return new Promise<void>((resolve) => {\n      this.stopResolver = resolve;\n    });\n  }\n\n  /** Report the running subscription key's rate-limit utilization (same path as\n   *  the task runner). Best-effort — never throws, no-op without an OAuth token. */\n  private async sampleAndReportKeyUsage(): Promise<void> {\n    if (this.stopped) return;\n    const samples = await sampleKeyUsage(process.env.CLAUDE_CODE_OAUTH_TOKEN);\n    for (const sample of samples) {\n      this.connection.sendEvent({\n        type: \"rate_limit_update\",\n        rateLimitType: sample.rateLimitType,\n        utilization: sample.utilization,\n        status: sample.status,\n      });\n    }\n  }\n\n  private shutdown(): void {\n    this.stopped = true;\n    this.lifecycle.destroy();\n    this.connection.sendEvent({ type: \"shutdown\", reason: this._finalState ?? \"finished\" });\n    this.connection.disconnect();\n  }\n}\n","/**\n * AdhocSessionRunner — the task-less USER SCRATCH pod agent loop (Sessions view\n * \"Launch ad-hoc session\"). Claudespace v3, `Workspace.purpose = \"adhoc\"`.\n *\n * Unlike the ProjectSessionRunner (autonomous pm) it runs NO autonomous loop:\n * it spawns the `claude` CLI under a pseudo-terminal in interactive/prefill mode\n * (empty input box, no auto-submit) and relays raw terminal I/O to the S2 relay,\n * so the web Sessions terminal (S5) renders it and forwards keystrokes back. The\n * human drives it directly — there is no task, plan, or Conveyor MCP tool\n * surface. Connect / register / heartbeat / idle are shared with the project\n * runner; the difference is the interactive PTY spawn.\n *\n * Idle-sleep is server-owned (decideFate + activity/tunnel holds): an idle\n * adhoc pod sleeps after the idle window like any workspace; the human wakes it\n * from the Sessions list. The agent's own idle timer is the secondary backstop.\n */\nimport { AgentConnection, type AgentConnectionConfig } from \"../connection/agent-connection.js\";\nimport { Lifecycle, DEFAULT_LIFECYCLE_CONFIG, type LifecycleConfig } from \"./lifecycle.js\";\nimport { resolveSessionStart } from \"../execution/query-executor.js\";\nimport { sampleKeyUsage } from \"../execution/usage-sampler.js\";\nimport { PtyHarness } from \"../harness/pty/index.js\";\nimport type { AgentHarness, HarnessQueryOptions, PtyBridge } from \"../harness/types.js\";\nimport { DEFAULT_SONNET_MODEL, type PtyChatEventPayload } from \"@project/shared\";\n\nconst ADHOC_SYSTEM_NOTE =\n  \"You are running in an ad-hoc Conveyor scratch pod — an interactive terminal \" +\n  \"on the project's repository checked out at its default branch. There is no \" +\n  \"task or plan; help the human with whatever they ask directly.\";\n\nexport interface AdhocSessionRunnerConfig {\n  connection: AgentConnectionConfig;\n  projectId: string;\n  /**\n   * Stable `Workspace` row id — the Claude session lineage key. Deliberately\n   * NOT `connection.sessionId`: that's the `WorkspaceSession` row, which is\n   * re-minted (fresh-session semantics) on every user-initiated wake, so\n   * keying resume on it would never find the prior GCS-FUSE transcript.\n   */\n  workspaceId: string;\n  /** Repo checkout the interactive CLI runs in. */\n  workspaceDir: string;\n  /** Model override; falls back to CONVEYOR_ADHOC_MODEL env, then the default. */\n  model?: string;\n  lifecycle?: Partial<LifecycleConfig>;\n}\n\nexport interface AdhocSessionRunnerCallbacks {\n  onEvent?: (event: Record<string, unknown>) => void;\n}\n\n/** AgentConnection surface the adhoc runner needs (injectable for tests). */\nexport interface AdhocRunnerConnection {\n  connect(): Promise<void>;\n  disconnect(): void;\n  call(method: \"connectAgent\", payload: { sessionId: string }): Promise<unknown>;\n  sendEvent(event: { type: string; [key: string]: unknown }): void;\n  sendHeartbeat(): void;\n  emitStatus(status: string): Promise<void>;\n  onStop(callback: () => void): void;\n  refreshTaskTokenFromBootstrap(): Promise<boolean>;\n  sendPtyOutput(data: string, dims?: { cols: number; rows: number }): void;\n  sendPtyChatEvent(event: PtyChatEventPayload): void;\n  onPtyInput(handler: (data: string) => void): () => void;\n  onPtyResize(handler: (cols: number, rows: number) => void): () => void;\n}\n\n/** Adapt an AdhocRunnerConnection into the harness-neutral PtyBridge. */\nexport function buildAdhocPtyBridge(connection: AdhocRunnerConnection): PtyBridge {\n  return {\n    sendOutput: (data, dims) => connection.sendPtyOutput(data, dims),\n    sendChatEvent: (event) => connection.sendPtyChatEvent(event),\n    onInput: (handler) => connection.onPtyInput(handler),\n    onResize: (handler) => connection.onPtyResize(handler),\n  };\n}\n\n/** The interactive-spawn options for an ad-hoc scratch TUI (no task context). */\nexport function buildAdhocQueryOptions(\n  workspaceDir: string,\n  model: string,\n  abortController: AbortController,\n  // Deterministic session start (fresh `sessionId` or `resume` target). Without\n  // one, PtySession.start() throws \"requires options.sessionId or a resume\n  // target\" and the pool crash-loops the runner — the interactive PTY never\n  // spawns. Mutually exclusive: exactly one of the two is ever set.\n  session?: { sessionId?: string; resume?: string },\n): HarnessQueryOptions {\n  return {\n    model,\n    systemPrompt: { type: \"preset\", preset: \"claude_code\", append: ADHOC_SYSTEM_NOTE },\n    appendSystemPrompt: ADHOC_SYSTEM_NOTE,\n    cwd: workspaceDir,\n    // Human-driven interactive shell — no plan-mode gating, no Conveyor tools.\n    permissionMode: \"bypassPermissions\",\n    allowDangerouslySkipPermissions: true,\n    tools: { type: \"preset\", preset: \"claude_code\" },\n    mcpServers: {},\n    settingSources: [\"user\", \"project\"],\n    // Empty box, unsubmitted: the human types the first prompt themselves.\n    promptDelivery: \"prefill\",\n    abortController,\n    ...(session?.sessionId ? { sessionId: session.sessionId } : {}),\n    ...(session?.resume ? { resume: session.resume } : {}),\n  };\n}\n\nexport class AdhocSessionRunner {\n  readonly connection: AdhocRunnerConnection;\n  readonly lifecycle: Lifecycle;\n  private readonly harness: AgentHarness;\n\n  private readonly config: AdhocSessionRunnerConfig;\n  private readonly callbacks: AdhocSessionRunnerCallbacks;\n  private readonly abortController = new AbortController();\n  private stopped = false;\n  private stopResolver: (() => void) | null = null;\n  private _finalState: \"finished\" | \"error\" | null = null;\n\n  constructor(\n    config: AdhocSessionRunnerConfig,\n    callbacks: AdhocSessionRunnerCallbacks = {},\n    deps?: { connection?: AdhocRunnerConnection; harness?: AgentHarness },\n  ) {\n    this.config = config;\n    this.callbacks = callbacks;\n    this.connection = deps?.connection ?? new AgentConnection(config.connection);\n    this.harness = deps?.harness ?? new PtyHarness(buildAdhocPtyBridge(this.connection));\n    this.lifecycle = new Lifecycle(\n      // No git flush: the WIP snapshot machinery is branch/task-shaped; the human\n      // commits/pushes explicitly from the interactive shell.\n      { ...DEFAULT_LIFECYCLE_CONFIG, gitFlushIntervalMs: 0, ...config.lifecycle },\n      {\n        onHeartbeat: () => this.connection.sendHeartbeat(),\n        onIdleTimeout: () => this.requestStop(),\n        onDormantTimeout: () => this.requestStop(),\n        onTokenRefresh: () => void this.connection.refreshTaskTokenFromBootstrap().catch(() => {}),\n        onGitFlush: () => {},\n        onUsageSample: () => void this.sampleAndReportKeyUsage(),\n      },\n    );\n  }\n\n  get finalState(): \"finished\" | \"error\" | null {\n    return this._finalState;\n  }\n\n  get isStopped(): boolean {\n    return this.stopped;\n  }\n\n  /** Connect, register, spawn the interactive TUI, and relay it until stopped. */\n  async run(): Promise<void> {\n    try {\n      await this.connection.connect();\n      this.connection.sendEvent({\n        type: \"connected\",\n        sessionId: this.config.connection.sessionId,\n        projectId: this.config.projectId,\n      });\n      this.connection.onStop(() => this.requestStop());\n      this.lifecycle.startHeartbeat();\n      this.lifecycle.startTokenRefresh();\n      this.lifecycle.startUsageSample();\n\n      await this.connection.call(\"connectAgent\", {\n        sessionId: this.config.connection.sessionId,\n      });\n      await this.connection.emitStatus(\"running\");\n      this.callbacks.onEvent?.({ type: \"adhoc_runner_started\", projectId: this.config.projectId });\n      this.lifecycle.startIdleTimer();\n\n      await this.runInteractiveTui();\n      this._finalState = \"finished\";\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      process.stderr.write(`[conveyor-agent] Ad-hoc runner failed: ${message}\\n`);\n      this.connection.sendEvent({ type: \"error\", message });\n      this._finalState = \"error\";\n    } finally {\n      this.shutdown();\n    }\n  }\n\n  /**\n   * Drive the `claude` CLI under a PTY. The bridge relays raw stdout to S2/S5\n   * and forwards keystrokes back, so consuming the event stream is enough — the\n   * loop blocks (keeping the pod alive) until the human exits or stop() aborts.\n   */\n  private async runInteractiveTui(): Promise<void> {\n    const model = this.config.model ?? process.env.CONVEYOR_ADHOC_MODEL ?? DEFAULT_SONNET_MODEL;\n    // Key the CLI session on the stable workspace id (NOT connection.sessionId\n    // — see the field doc on AdhocSessionRunnerConfig.workspaceId): a fresh\n    // pod spawns a new session, a woken pod resumes the GCS-FUSE-persisted\n    // transcript.\n    const session = resolveSessionStart(this.config.workspaceId, this.config.workspaceDir);\n    const options = buildAdhocQueryOptions(\n      this.config.workspaceDir,\n      model,\n      this.abortController,\n      session,\n    );\n    try {\n      for await (const _event of this.harness.executeQuery({ prompt: \"\", options })) {\n        if (this.stopped) break;\n      }\n    } catch (error) {\n      // An aborted interactive session is the normal stop path, not a failure.\n      if (!this.stopped) throw error;\n    }\n  }\n\n  stop(): void {\n    this.requestStop();\n  }\n\n  private requestStop(): void {\n    if (this.stopped) return;\n    this.stopped = true;\n    this.abortController.abort();\n    if (this.stopResolver) {\n      const resolve = this.stopResolver;\n      this.stopResolver = null;\n      resolve();\n    }\n  }\n\n  private async sampleAndReportKeyUsage(): Promise<void> {\n    if (this.stopped) return;\n    const samples = await sampleKeyUsage(process.env.CLAUDE_CODE_OAUTH_TOKEN);\n    for (const sample of samples) {\n      this.connection.sendEvent({\n        type: \"rate_limit_update\",\n        rateLimitType: sample.rateLimitType,\n        utilization: sample.utilization,\n        status: sample.status,\n      });\n    }\n  }\n\n  private shutdown(): void {\n    this.stopped = true;\n    this.lifecycle.destroy();\n    this.connection.sendEvent({ type: \"shutdown\", reason: this._finalState ?? \"finished\" });\n    this.connection.disconnect();\n  }\n}\n","/**\n * Same-pod review child supervisor. When the API parks a review session on\n * this (builder) pod and pushes `session:spawnReview`, the supervisor spawns a\n * SECOND conveyor-agent process — same CLI binary, same repo checkout — bound\n * to the review session via env overrides. The child owns its own\n * AgentConnection/PTY stream, so the card's \"Reviewer\" terminal tab appears\n * through the normal multi-session relay with no relay changes.\n *\n * Single-slot: a new spawn (re-review of a fresh push) kills and replaces the\n * previous child. Spawn failures are reported back to the API\n * (`reportReviewSpawnFailure`), which Ends the orphaned session and falls back\n * to a dedicated review pod.\n *\n * Shared-checkout caveat (v1, deliberate): the reviewer reads the builder's\n * working tree. At review time the builder is parked (ReviewPR + CI green),\n * so contention is low; a best-effort ff-only fetch freshens the branch. A\n * human typing in the builder TUI mid-review can still dirty the tree —\n * worktree isolation is a deferred follow-up.\n */\nimport { spawn as nodeSpawn, execFile, type ChildProcess } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport type { SpawnReviewData } from \"../connection/agent-connection.js\";\nimport { createServiceLogger } from \"../utils/logger.js\";\n\nconst execFileAsync = promisify(execFile);\nconst logger = createServiceLogger(\"ReviewChild\");\n\n/** Exit inside this window (non-zero) is treated as a spawn failure. */\nexport const SPAWN_FAILURE_GRACE_MS = 15_000;\n/** How long to wait for a SIGTERM'd child before SIGKILL. */\nconst KILL_WAIT_MS = 5_000;\n\nexport interface ReviewChildConnection {\n  reportReviewSpawnFailure(reviewSessionId: string, error?: string): void;\n}\n\nexport type SpawnFn = (\n  command: string,\n  args: string[],\n  options: {\n    cwd: string;\n    env: NodeJS.ProcessEnv;\n    stdio: [\"ignore\", \"pipe\", \"pipe\"];\n  },\n) => ChildProcess;\n\n/**\n * Build the child env from the builder's env. The child is the same CLI in\n * `code-review` mode, so it reuses the pod's credentials (git, Anthropic)\n * while swapping in the review session's identity.\n */\nexport function buildReviewChildEnv(\n  baseEnv: NodeJS.ProcessEnv,\n  data: SpawnReviewData,\n): NodeJS.ProcessEnv {\n  const env: NodeJS.ProcessEnv = { ...baseEnv };\n  // The review session's identity: its own JWT + sessionId, review runner\n  // mode. CONVEYOR_TASK_ID stays the parent's — same task (SEC-9 derives the\n  // task from the JWT server-side).\n  env.CONVEYOR_TASK_TOKEN = data.sessionJwt;\n  env.CONVEYOR_SESSION_ID = data.sessionId;\n  env.CONVEYOR_MODE = \"code-review\";\n\n  // The bootstrap-refresh path would replace the child's review JWT with the\n  // BUILDER's writer JWT (findBundleSession prefers the live writer), silently\n  // re-identifying the child as the builder. Reviews finish well inside the\n  // 24h JWT TTL, so the child never needs a refresh — remove the tokens.\n  delete env.POD_BOOTSTRAP_TOKEN;\n  delete env.CONVEYOR_BOOTSTRAP_TOKEN;\n\n  // The builder already ran (or is running) setup/start on this shared\n  // workspace — the child must never re-run `bun install` or spawn a second\n  // dev server.\n  delete env.CONVEYOR_SETUP_COMMAND;\n  delete env.CONVEYOR_START_COMMAND;\n\n  // The code-review runner forces its own mode (review + auto); a stale\n  // builder agent-mode hint must not leak in.\n  delete env.CONVEYOR_AGENT_MODE;\n  delete env.CONVEYOR_IS_AUTO;\n  return env;\n}\n\nexport class ReviewChildSupervisor {\n  private child: ChildProcess | null = null;\n  private childSessionId: string | null = null;\n\n  constructor(\n    private readonly connection: ReviewChildConnection,\n    private readonly workspaceDir: string,\n    private readonly spawnFn: SpawnFn = nodeSpawn as SpawnFn,\n  ) {}\n\n  /** Spawn (or replace) the review child for a `session:spawnReview` push. */\n  async spawn(data: SpawnReviewData): Promise<void> {\n    logger.info(\"Spawning same-pod review child\", {\n      reviewSessionId: data.sessionId,\n      branch: data.branch ?? undefined,\n      prNumber: data.prNumber ?? undefined,\n    });\n    await this.stopCurrent(\"superseded by new review spawn\");\n    await this.refreshCheckout(data.branch ?? null);\n\n    const env = buildReviewChildEnv(process.env, data);\n    const cliPath = process.argv[1];\n    if (!cliPath) {\n      this.connection.reportReviewSpawnFailure(data.sessionId, \"cannot resolve CLI entry path\");\n      return;\n    }\n\n    let child: ChildProcess;\n    try {\n      child = this.spawnFn(process.execPath, [cliPath], {\n        cwd: this.workspaceDir,\n        env,\n        stdio: [\"ignore\", \"pipe\", \"pipe\"],\n      });\n    } catch (err) {\n      this.connection.reportReviewSpawnFailure(\n        data.sessionId,\n        err instanceof Error ? err.message : String(err),\n      );\n      return;\n    }\n\n    this.child = child;\n    this.childSessionId = data.sessionId;\n    const spawnedAt = Date.now();\n    let reported = false;\n    const reportOnce = (message: string): void => {\n      if (reported) return;\n      reported = true;\n      this.connection.reportReviewSpawnFailure(data.sessionId, message);\n    };\n\n    // Child output lands in the pod log (the entrypoint tees our stdio),\n    // prefixed so builder and reviewer streams stay distinguishable.\n    child.stdout?.on(\"data\", (chunk: Buffer) => {\n      process.stdout.write(`[review-child] ${chunk.toString()}`);\n    });\n    child.stderr?.on(\"data\", (chunk: Buffer) => {\n      process.stderr.write(`[review-child] ${chunk.toString()}`);\n    });\n\n    child.on(\"error\", (err) => {\n      logger.error(\"Review child spawn error\", { error: err.message });\n      if (this.child === child) {\n        this.child = null;\n        this.childSessionId = null;\n      }\n      reportOnce(err.message);\n    });\n\n    child.on(\"exit\", (code, signal) => {\n      const wasCurrent = this.child === child;\n      if (wasCurrent) {\n        this.child = null;\n        this.childSessionId = null;\n      }\n      logger.info(\"Review child exited\", { code, signal, reviewSessionId: data.sessionId });\n      // A non-zero exit right after launch means the child never became the\n      // review agent — recover via the dedicated-pod fallback. Later exits\n      // (review finished, server-sent session:stop, supersede kill) are\n      // normal lifecycle: the server owns the session state there.\n      const withinGrace = Date.now() - spawnedAt < SPAWN_FAILURE_GRACE_MS;\n      if (wasCurrent && withinGrace && code !== null && code !== 0) {\n        reportOnce(`review child exited with code ${code} within startup grace`);\n      }\n    });\n  }\n\n  /** Stop any live child (parent shutdown / supersede). Best-effort. */\n  async stopAll(): Promise<void> {\n    await this.stopCurrent(\"parent shutting down\");\n  }\n\n  private async stopCurrent(reason: string): Promise<void> {\n    const child = this.child;\n    if (!child || child.exitCode !== null || child.killed) {\n      this.child = null;\n      this.childSessionId = null;\n      return;\n    }\n    logger.info(\"Stopping review child\", { reason, reviewSessionId: this.childSessionId });\n    // Detach bookkeeping first so the exit handler treats this as expected.\n    this.child = null;\n    this.childSessionId = null;\n\n    await new Promise<void>((resolve) => {\n      const timer = setTimeout(() => {\n        try {\n          child.kill(\"SIGKILL\");\n        } catch {\n          /* already gone */\n        }\n        resolve();\n      }, KILL_WAIT_MS);\n      timer.unref();\n      child.once(\"exit\", () => {\n        clearTimeout(timer);\n        resolve();\n      });\n      try {\n        child.kill(\"SIGTERM\");\n      } catch {\n        clearTimeout(timer);\n        resolve();\n      }\n    });\n  }\n\n  /**\n   * Best-effort branch freshen before the review reads the tree: fetch the PR\n   * branch and fast-forward only (never clobber local work — the builder's\n   * checkout is the source of truth on conflict). Failures are logged and\n   * skipped; the reviewer still reads the diff via the GitHub API.\n   */\n  private async refreshCheckout(branch: string | null): Promise<void> {\n    if (!branch) return;\n    try {\n      await execFileAsync(\"git\", [\"fetch\", \"origin\", branch], {\n        cwd: this.workspaceDir,\n        timeout: 60_000,\n      });\n      await execFileAsync(\"git\", [\"merge\", \"--ff-only\", `origin/${branch}`], {\n        cwd: this.workspaceDir,\n        timeout: 30_000,\n      });\n    } catch (err) {\n      logger.warn(\"Review checkout freshen skipped\", {\n        branch,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAEA,SAAS,oBAAoB;AAC7B,SAAS,MAAM,WAAAA,gBAAe;AAC9B,SAAS,qBAAqB;;;ACJ9B,OAAO,SAAS;AAChB,SAAS,OAAO,iBAAiB;AACjC,SAAS,eAAe;AAgDxB,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,2BAA2B;AACjC,IAAM,2BAA2B;AAEjC,IAAM,wBAAwB;AAC9B,IAAM,wBAAwB;AAE9B,eAAsB,kBACpB,KACA,OACe;AACf,QAAM,aAAa,IAAI;AACvB,MAAI,CAAC,WAAY;AAEjB,MAAI;AACF,UAAM,MAAM,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AACpD,UAAM,UAAU,YAAY,WAAW,MAAM;AAC7C,UAAM,uBAAuB;AAAA,EAC/B,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,2CAA2C,OAAO,EAAE;AAAA,EAC5D;AACF;AAEA,SAAS,cAAc,OAAe,aAA4D;AAChG,QAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,iBAAiB,EAAE;AACxD,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,MAAM,QAAQ,YAAY,GAAG;AACnC,MAAI,QAAQ,IAAI;AACd,WAAO,EAAE,MAAM,SAAS,MAAM,YAAY;AAAA,EAC5C;AACA,QAAM,OAAO,QAAQ,MAAM,GAAG,GAAG,KAAK;AACtC,QAAM,OAAO,OAAO,QAAQ,MAAM,MAAM,CAAC,CAAC;AAC1C,SAAO,EAAE,MAAM,MAAM,OAAO,SAAS,IAAI,IAAI,OAAO,YAAY;AAClE;AAOO,SAAS,sBAAsB,MAAyB,QAAQ,KAAsB;AAC3F,QAAM,UAA2B,CAAC;AAElC,QAAM,cAAc,IAAI;AACxB,MAAI,aAAa;AACf,QAAI;AACF,YAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,YAAM,OAAO,IAAI,YAAY;AAC7B,YAAM,OAAO,IAAI,OAAO,OAAO,IAAI,IAAI,IAAI;AAC3C,UAAI,OAAO,SAAS,IAAI,GAAG;AACzB,gBAAQ,KAAK,EAAE,MAAM,YAAY,MAAM,MAAM,WAAW,oBAAoB,CAAC;AAAA,MAC/E;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,QAAM,eAAe,IAAI;AACzB,MAAI,cAAc;AAChB,UAAM,SAAS,cAAc,cAAc,qBAAqB;AAChE,QAAI,QAAQ;AACV,cAAQ,KAAK;AAAA,QACX,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,QACb,MAAM,OAAO;AAAA,QACb,WAAW;AAAA,MACb,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,aAAa,QAAyC;AAC7D,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,UAAU;AACd,UAAM,SAAS,IAAI,iBAAiB,EAAE,MAAM,OAAO,MAAM,MAAM,OAAO,KAAK,CAAC;AAC5E,UAAM,OAAO,CAAC,OAAgB;AAC5B,UAAI,QAAS;AACb,gBAAU;AACV,aAAO,QAAQ;AACf,cAAQ,EAAE;AAAA,IACZ;AACA,WAAO,KAAK,WAAW,MAAM,KAAK,IAAI,CAAC;AACvC,WAAO,KAAK,SAAS,MAAM,KAAK,KAAK,CAAC;AACtC,WAAO,WAAW,0BAA0B,MAAM,KAAK,KAAK,CAAC;AAAA,EAC/D,CAAC;AACH;AAEA,IAAM,QAAQ,CAAC,OACb,IAAI,QAAQ,CAAC,YAAY;AACvB,aAAW,SAAS,EAAE;AACxB,CAAC;AAEH,eAAe,cACb,QACA,MAMe;AACf,QAAM,EAAE,OAAO,gBAAgB,MAAM,IAAI;AACzC,QAAM,YAAY,KAAK,aAAa,OAAO,aAAa;AACxD,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,QAAM,eAAe,OAAO,IAAI,OAAO,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK;AAEtE,SAAO,MAAM;AACX,QAAI,MAAM,MAAM,MAAM,GAAG;AACvB,YAAM,GAAG,OAAO,IAAI,WAAW;AAC/B;AAAA,IACF;AACA,QAAI,KAAK,IAAI,KAAK,UAAU;AAC1B;AAAA,QACE,YAAY,OAAO,IAAI,oBAAoB,KAAK,MAAM,YAAY,GAAI,CAAC;AAAA,MACzE;AACA;AAAA,IACF;AACA,UAAM,MAAM,cAAc;AAAA,EAC5B;AACF;AAOA,eAAsB,gBAAgB,OAA+B,CAAC,GAAkB;AACtF,QAAM;AAAA,IACJ,MAAM,QAAQ;AAAA,IACd,QAAQ,MAAM;AAAA,IAAC;AAAA,IACf;AAAA,IACA,iBAAiB;AAAA,IACjB,QAAQ;AAAA,IACR,YAAY;AAAA,EACd,IAAI;AAEJ,MAAI,WAAW;AACb,UAAM,kBAAkB,KAAK,KAAK;AAAA,EACpC;AAEA,QAAM,UAAU,sBAAsB,GAAG;AACzC,MAAI,QAAQ,WAAW,EAAG;AAE1B,QAAM,QAAQ;AAAA,IACZ,QAAQ,IAAI,CAAC,WAAW,cAAc,QAAQ,EAAE,OAAO,WAAW,gBAAgB,MAAM,CAAC,CAAC;AAAA,EAC5F;AACF;;;ACvLA,eAAsB,yBACpB,QACqD;AACrD,QAAM,EAAE,WAAW,QAAQ,oBAAoB,QAAAC,QAAO,IAAI;AAC1D,MAAI,CAAC,aAAa,cAAc,OAAQ,QAAO;AAC/C,MAAI;AACJ,MAAI;AACF,oBAAgB,MAAM,mBAAmB,SAAS;AAAA,EACpD,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,IAAAA,QAAO,KAAK,oFAA+E;AAAA,MACzF;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AACD,WAAO;AAAA,EACT;AACA,MAAI,kBAAkB,QAAQ;AAC5B,IAAAA,QAAO;AAAA,MACL;AAAA,MACA,EAAE,WAAW,WAAW,QAAQ,cAAc;AAAA,IAChD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;ACFO,SAAS,aAAa,QAA0C;AACrE,SAAO,WAAW,UAAU,SAAS;AACvC;AAMO,SAAS,kBAAkB,MAOjB;AACf,QAAM,MAAoB;AAAA,IACxB,OAAO;AAAA,IACP,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,WAAW,KAAK,MAAM,KAAK,YAAY,EAAE,IAAI;AAAA,EAC/C;AACA,MAAI,KAAK,WAAW,OAAW,KAAI,SAAS,KAAK;AACjD,MAAI,KAAK,eAAe,OAAW,KAAI,aAAa,KAAK;AACzD,QAAM,KAAK,KAAK;AAChB,MAAI,IAAI;AACN,QAAI,GAAG,cAAc,OAAW,KAAI,YAAY,GAAG;AACnD,QAAI,GAAG,WAAW,OAAW,KAAI,SAAS,GAAG;AAC7C,QAAI,GAAG,gBAAgB,OAAW,KAAI,cAAc,GAAG;AACvD,QAAI,GAAG,eAAe,OAAW,KAAI,aAAa,GAAG;AAAA,EACvD;AACA,SAAO;AACT;;;AC7CO,SAAS,6BACd,KAC8B;AAE9B,MAAI,IAAI,iBAAkB,QAAO;AACjC,MAAI,CAAC,IAAI,oBAAqB,QAAO;AACrC,MAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,uBAAuB,CAAC,IAAI,uBAAuB;AACtF,WAAO;AAAA,EACT;AAQA,MAAI,IAAI,kBAAkB,QAAQ,IAAI,kBAAkB,QAAS,QAAO;AAExE,SAAO;AAAA,IACL,WAAW,IAAI;AAAA,IACf,WAAW,IAAI;AAAA,IACf,aAAa,IAAI;AAAA,IACjB,WAAW,IAAI;AAAA,EACjB;AACF;;;ACHO,IAAM,uBAAN,MAA2B;AAAA,EACvB;AAAA,EACA;AAAA,EAEQ;AAAA,EACA;AAAA,EACT,UAAU;AAAA,EACV,eAAoC;AAAA,EACpC,cAA2C;AAAA,EAEnD,YACE,QACA,YAA2C,CAAC,GAC5C,YACA;AACA,SAAK,SAAS;AACd,SAAK,YAAY;AACjB,SAAK,aAAa,cAAc,IAAI,gBAAgB,OAAO,UAAU;AACrE,SAAK,YAAY,IAAI;AAAA;AAAA;AAAA,MAGnB,EAAE,GAAG,0BAA0B,oBAAoB,GAAG,GAAG,OAAO,UAAU;AAAA,MAC1E;AAAA,QACE,aAAa,MAAM,KAAK,WAAW,cAAc;AAAA,QACjD,eAAe,MAAM;AACnB,kBAAQ,OAAO,MAAM,+DAA+D;AACpF,eAAK,YAAY;AAAA,QACnB;AAAA,QACA,kBAAkB,MAAM,KAAK,YAAY;AAAA;AAAA;AAAA;AAAA,QAIzC,gBAAgB,MAAM,KAAK,KAAK,WAAW,8BAA8B,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,QACzF,YAAY,MAAM;AAAA,QAAC;AAAA,QACnB,eAAe,MAAM,KAAK,KAAK,wBAAwB;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,IAAI,aAA0C;AAC5C,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,YAAqB;AACvB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,MAAM,MAAqB;AACzB,QAAI;AACF,YAAM,KAAK,WAAW,QAAQ;AAC9B,WAAK,WAAW,UAAU;AAAA,QACxB,MAAM;AAAA,QACN,WAAW,KAAK,OAAO,WAAW;AAAA,QAClC,WAAW,KAAK,OAAO;AAAA,MACzB,CAAC;AAED,WAAK,WAAW,OAAO,MAAM,KAAK,YAAY,CAAC;AAC/C,WAAK,WAAW,UAAU,CAAC,QAAQ,KAAK,cAAc,GAAG,CAAC;AAC1D,WAAK,UAAU,eAAe;AAC9B,WAAK,UAAU,kBAAkB;AACjC,WAAK,UAAU,iBAAiB;AAGhC,YAAM,KAAK,WAAW,KAAK,gBAAgB;AAAA,QACzC,WAAW,KAAK,OAAO,WAAW;AAAA,MACpC,CAAC;AAED,cAAQ,OAAO;AAAA,QACb,uDAAuD,KAAK,OAAO,SAAS;AAAA;AAAA,MAC9E;AACA,YAAM,KAAK,WAAW,WAAW,MAAM;AACvC,WAAK,UAAU,UAAU,EAAE,MAAM,uBAAuB,WAAW,KAAK,OAAO,UAAU,CAAC;AAE1F,WAAK,UAAU,eAAe;AAC9B,YAAM,KAAK,iBAAiB;AAC5B,WAAK,cAAc;AAAA,IACrB,SAAS,OAAO;AACd,YAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,cAAQ,OAAO,MAAM,2CAA2C,OAAO;AAAA,CAAI;AAC3E,WAAK,WAAW,UAAU,EAAE,MAAM,SAAS,QAAQ,CAAC;AACpD,WAAK,cAAc;AAAA,IACrB,UAAE;AACA,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,cAAc,KAA4B;AAChD,UAAM,UAAU,IAAI,QAAQ,SAAS,MAAM,GAAG,IAAI,QAAQ,MAAM,GAAG,GAAG,CAAC,WAAM,IAAI;AACjF,YAAQ,OAAO;AAAA,MACb,iFAAiF,QAAQ,QAAQ,OAAO,KAAK,CAAC;AAAA;AAAA,IAChH;AACA,SAAK,UAAU,UAAU,EAAE,MAAM,4BAA4B,SAAS,IAAI,QAAQ,CAAC;AACnF,QAAI,CAAC,KAAK,QAAS,MAAK,UAAU,eAAe;AAAA,EACnD;AAAA;AAAA,EAGA,OAAa;AACX,SAAK,YAAY;AAAA,EACnB;AAAA,EAEQ,cAAoB;AAC1B,QAAI,KAAK,QAAS;AAClB,SAAK,UAAU;AACf,QAAI,KAAK,cAAc;AACrB,YAAM,UAAU,KAAK;AACrB,WAAK,eAAe;AACpB,cAAQ;AAAA,IACV;AAAA,EACF;AAAA,EAEQ,mBAAkC;AACxC,QAAI,KAAK,QAAS,QAAO,QAAQ,QAAQ;AACzC,WAAO,IAAI,QAAc,CAAC,YAAY;AACpC,WAAK,eAAe;AAAA,IACtB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA,EAIA,MAAc,0BAAyC;AACrD,QAAI,KAAK,QAAS;AAClB,UAAM,UAAU,MAAM,eAAe,QAAQ,IAAI,uBAAuB;AACxE,eAAW,UAAU,SAAS;AAC5B,WAAK,WAAW,UAAU;AAAA,QACxB,MAAM;AAAA,QACN,eAAe,OAAO;AAAA,QACtB,aAAa,OAAO;AAAA,QACpB,QAAQ,OAAO;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,WAAiB;AACvB,SAAK,UAAU;AACf,SAAK,UAAU,QAAQ;AACvB,SAAK,WAAW,UAAU,EAAE,MAAM,YAAY,QAAQ,KAAK,eAAe,WAAW,CAAC;AACtF,SAAK,WAAW,WAAW;AAAA,EAC7B;AACF;;;ACzKA,IAAM,oBACJ;AA0CK,SAAS,oBAAoB,YAA8C;AAChF,SAAO;AAAA,IACL,YAAY,CAAC,MAAM,SAAS,WAAW,cAAc,MAAM,IAAI;AAAA,IAC/D,eAAe,CAAC,UAAU,WAAW,iBAAiB,KAAK;AAAA,IAC3D,SAAS,CAAC,YAAY,WAAW,WAAW,OAAO;AAAA,IACnD,UAAU,CAAC,YAAY,WAAW,YAAY,OAAO;AAAA,EACvD;AACF;AAGO,SAAS,uBACd,cACA,OACA,iBAKA,SACqB;AACrB,SAAO;AAAA,IACL;AAAA,IACA,cAAc,EAAE,MAAM,UAAU,QAAQ,eAAe,QAAQ,kBAAkB;AAAA,IACjF,oBAAoB;AAAA,IACpB,KAAK;AAAA;AAAA,IAEL,gBAAgB;AAAA,IAChB,iCAAiC;AAAA,IACjC,OAAO,EAAE,MAAM,UAAU,QAAQ,cAAc;AAAA,IAC/C,YAAY,CAAC;AAAA,IACb,gBAAgB,CAAC,QAAQ,SAAS;AAAA;AAAA,IAElC,gBAAgB;AAAA,IAChB;AAAA,IACA,GAAI,SAAS,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,IAC7D,GAAI,SAAS,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,EACtD;AACF;AAEO,IAAM,qBAAN,MAAyB;AAAA,EACrB;AAAA,EACA;AAAA,EACQ;AAAA,EAEA;AAAA,EACA;AAAA,EACA,kBAAkB,IAAI,gBAAgB;AAAA,EAC/C,UAAU;AAAA,EACV,eAAoC;AAAA,EACpC,cAA2C;AAAA,EAEnD,YACE,QACA,YAAyC,CAAC,GAC1C,MACA;AACA,SAAK,SAAS;AACd,SAAK,YAAY;AACjB,SAAK,aAAa,MAAM,cAAc,IAAI,gBAAgB,OAAO,UAAU;AAC3E,SAAK,UAAU,MAAM,WAAW,IAAI,WAAW,oBAAoB,KAAK,UAAU,CAAC;AACnF,SAAK,YAAY,IAAI;AAAA;AAAA;AAAA,MAGnB,EAAE,GAAG,0BAA0B,oBAAoB,GAAG,GAAG,OAAO,UAAU;AAAA,MAC1E;AAAA,QACE,aAAa,MAAM,KAAK,WAAW,cAAc;AAAA,QACjD,eAAe,MAAM,KAAK,YAAY;AAAA,QACtC,kBAAkB,MAAM,KAAK,YAAY;AAAA,QACzC,gBAAgB,MAAM,KAAK,KAAK,WAAW,8BAA8B,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,QACzF,YAAY,MAAM;AAAA,QAAC;AAAA,QACnB,eAAe,MAAM,KAAK,KAAK,wBAAwB;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,IAAI,aAA0C;AAC5C,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,YAAqB;AACvB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,MAAM,MAAqB;AACzB,QAAI;AACF,YAAM,KAAK,WAAW,QAAQ;AAC9B,WAAK,WAAW,UAAU;AAAA,QACxB,MAAM;AAAA,QACN,WAAW,KAAK,OAAO,WAAW;AAAA,QAClC,WAAW,KAAK,OAAO;AAAA,MACzB,CAAC;AACD,WAAK,WAAW,OAAO,MAAM,KAAK,YAAY,CAAC;AAC/C,WAAK,UAAU,eAAe;AAC9B,WAAK,UAAU,kBAAkB;AACjC,WAAK,UAAU,iBAAiB;AAEhC,YAAM,KAAK,WAAW,KAAK,gBAAgB;AAAA,QACzC,WAAW,KAAK,OAAO,WAAW;AAAA,MACpC,CAAC;AACD,YAAM,KAAK,WAAW,WAAW,SAAS;AAC1C,WAAK,UAAU,UAAU,EAAE,MAAM,wBAAwB,WAAW,KAAK,OAAO,UAAU,CAAC;AAC3F,WAAK,UAAU,eAAe;AAE9B,YAAM,KAAK,kBAAkB;AAC7B,WAAK,cAAc;AAAA,IACrB,SAAS,OAAO;AACd,YAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,cAAQ,OAAO,MAAM,0CAA0C,OAAO;AAAA,CAAI;AAC1E,WAAK,WAAW,UAAU,EAAE,MAAM,SAAS,QAAQ,CAAC;AACpD,WAAK,cAAc;AAAA,IACrB,UAAE;AACA,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,oBAAmC;AAC/C,UAAM,QAAQ,KAAK,OAAO,SAAS,QAAQ,IAAI,wBAAwB;AAKvE,UAAM,UAAU,oBAAoB,KAAK,OAAO,aAAa,KAAK,OAAO,YAAY;AACrF,UAAM,UAAU;AAAA,MACd,KAAK,OAAO;AAAA,MACZ;AAAA,MACA,KAAK;AAAA,MACL;AAAA,IACF;AACA,QAAI;AACF,uBAAiB,UAAU,KAAK,QAAQ,aAAa,EAAE,QAAQ,IAAI,QAAQ,CAAC,GAAG;AAC7E,YAAI,KAAK,QAAS;AAAA,MACpB;AAAA,IACF,SAAS,OAAO;AAEd,UAAI,CAAC,KAAK,QAAS,OAAM;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,OAAa;AACX,SAAK,YAAY;AAAA,EACnB;AAAA,EAEQ,cAAoB;AAC1B,QAAI,KAAK,QAAS;AAClB,SAAK,UAAU;AACf,SAAK,gBAAgB,MAAM;AAC3B,QAAI,KAAK,cAAc;AACrB,YAAM,UAAU,KAAK;AACrB,WAAK,eAAe;AACpB,cAAQ;AAAA,IACV;AAAA,EACF;AAAA,EAEA,MAAc,0BAAyC;AACrD,QAAI,KAAK,QAAS;AAClB,UAAM,UAAU,MAAM,eAAe,QAAQ,IAAI,uBAAuB;AACxE,eAAW,UAAU,SAAS;AAC5B,WAAK,WAAW,UAAU;AAAA,QACxB,MAAM;AAAA,QACN,eAAe,OAAO;AAAA,QACtB,aAAa,OAAO;AAAA,QACpB,QAAQ,OAAO;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,WAAiB;AACvB,SAAK,UAAU;AACf,SAAK,UAAU,QAAQ;AACvB,SAAK,WAAW,UAAU,EAAE,MAAM,YAAY,QAAQ,KAAK,eAAe,WAAW,CAAC;AACtF,SAAK,WAAW,WAAW;AAAA,EAC7B;AACF;;;AClOA,SAAS,SAAS,WAAW,gBAAmC;AAChE,SAAS,iBAAiB;AAI1B,IAAM,gBAAgB,UAAU,QAAQ;AACxC,IAAM,SAAS,oBAAoB,aAAa;AAGzC,IAAM,yBAAyB;AAEtC,IAAM,eAAe;AAqBd,SAAS,oBACd,SACA,MACmB;AACnB,QAAM,MAAyB,EAAE,GAAG,QAAQ;AAI5C,MAAI,sBAAsB,KAAK;AAC/B,MAAI,sBAAsB,KAAK;AAC/B,MAAI,gBAAgB;AAMpB,SAAO,IAAI;AACX,SAAO,IAAI;AAKX,SAAO,IAAI;AACX,SAAO,IAAI;AAIX,SAAO,IAAI;AACX,SAAO,IAAI;AACX,SAAO;AACT;AAEO,IAAM,wBAAN,MAA4B;AAAA,EAIjC,YACmB,YACA,cACA,UAAmB,WACpC;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EAHgB;AAAA,EACA;AAAA,EACA;AAAA,EANX,QAA6B;AAAA,EAC7B,iBAAgC;AAAA;AAAA,EASxC,MAAM,MAAM,MAAsC;AAChD,WAAO,KAAK,kCAAkC;AAAA,MAC5C,iBAAiB,KAAK;AAAA,MACtB,QAAQ,KAAK,UAAU;AAAA,MACvB,UAAU,KAAK,YAAY;AAAA,IAC7B,CAAC;AACD,UAAM,KAAK,YAAY,gCAAgC;AACvD,UAAM,KAAK,gBAAgB,KAAK,UAAU,IAAI;AAE9C,UAAM,MAAM,oBAAoB,QAAQ,KAAK,IAAI;AACjD,UAAM,UAAU,QAAQ,KAAK,CAAC;AAC9B,QAAI,CAAC,SAAS;AACZ,WAAK,WAAW,yBAAyB,KAAK,WAAW,+BAA+B;AACxF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,cAAQ,KAAK,QAAQ,QAAQ,UAAU,CAAC,OAAO,GAAG;AAAA,QAChD,KAAK,KAAK;AAAA,QACV;AAAA,QACA,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,MAClC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,WAAK,WAAW;AAAA,QACd,KAAK;AAAA,QACL,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACjD;AACA;AAAA,IACF;AAEA,SAAK,QAAQ;AACb,SAAK,iBAAiB,KAAK;AAC3B,UAAM,YAAY,KAAK,IAAI;AAC3B,QAAI,WAAW;AACf,UAAM,aAAa,CAAC,YAA0B;AAC5C,UAAI,SAAU;AACd,iBAAW;AACX,WAAK,WAAW,yBAAyB,KAAK,WAAW,OAAO;AAAA,IAClE;AAIA,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,cAAQ,OAAO,MAAM,kBAAkB,MAAM,SAAS,CAAC,EAAE;AAAA,IAC3D,CAAC;AACD,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,cAAQ,OAAO,MAAM,kBAAkB,MAAM,SAAS,CAAC,EAAE;AAAA,IAC3D,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,aAAO,MAAM,4BAA4B,EAAE,OAAO,IAAI,QAAQ,CAAC;AAC/D,UAAI,KAAK,UAAU,OAAO;AACxB,aAAK,QAAQ;AACb,aAAK,iBAAiB;AAAA,MACxB;AACA,iBAAW,IAAI,OAAO;AAAA,IACxB,CAAC;AAED,UAAM,GAAG,QAAQ,CAAC,MAAM,WAAW;AACjC,YAAM,aAAa,KAAK,UAAU;AAClC,UAAI,YAAY;AACd,aAAK,QAAQ;AACb,aAAK,iBAAiB;AAAA,MACxB;AACA,aAAO,KAAK,uBAAuB,EAAE,MAAM,QAAQ,iBAAiB,KAAK,UAAU,CAAC;AAKpF,YAAM,cAAc,KAAK,IAAI,IAAI,YAAY;AAC7C,UAAI,cAAc,eAAe,SAAS,QAAQ,SAAS,GAAG;AAC5D,mBAAW,iCAAiC,IAAI,uBAAuB;AAAA,MACzE;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAyB;AAC7B,UAAM,KAAK,YAAY,sBAAsB;AAAA,EAC/C;AAAA,EAEA,MAAc,YAAY,QAA+B;AACvD,UAAM,QAAQ,KAAK;AACnB,QAAI,CAAC,SAAS,MAAM,aAAa,QAAQ,MAAM,QAAQ;AACrD,WAAK,QAAQ;AACb,WAAK,iBAAiB;AACtB;AAAA,IACF;AACA,WAAO,KAAK,yBAAyB,EAAE,QAAQ,iBAAiB,KAAK,eAAe,CAAC;AAErF,SAAK,QAAQ;AACb,SAAK,iBAAiB;AAEtB,UAAM,IAAI,QAAc,CAAC,YAAY;AACnC,YAAM,QAAQ,WAAW,MAAM;AAC7B,YAAI;AACF,gBAAM,KAAK,SAAS;AAAA,QACtB,QAAQ;AAAA,QAER;AACA,gBAAQ;AAAA,MACV,GAAG,YAAY;AACf,YAAM,MAAM;AACZ,YAAM,KAAK,QAAQ,MAAM;AACvB,qBAAa,KAAK;AAClB,gBAAQ;AAAA,MACV,CAAC;AACD,UAAI;AACF,cAAM,KAAK,SAAS;AAAA,MACtB,QAAQ;AACN,qBAAa,KAAK;AAClB,gBAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAc,gBAAgB,QAAsC;AAClE,QAAI,CAAC,OAAQ;AACb,QAAI;AACF,YAAM,cAAc,OAAO,CAAC,SAAS,UAAU,MAAM,GAAG;AAAA,QACtD,KAAK,KAAK;AAAA,QACV,SAAS;AAAA,MACX,CAAC;AACD,YAAM,cAAc,OAAO,CAAC,SAAS,aAAa,UAAU,MAAM,EAAE,GAAG;AAAA,QACrE,KAAK,KAAK;AAAA,QACV,SAAS;AAAA,MACX,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,KAAK,mCAAmC;AAAA,QAC7C;AAAA,QACA,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AAAA,IACH;AAAA,EACF;AACF;;;AP1MA,IAAI,QAAQ,KAAK,SAAS,WAAW,GAAG;AACtC,QAAM,YAAYC,SAAQ,cAAc,YAAY,GAAG,CAAC;AACxD,QAAM,UAAU,KAAK,WAAW,MAAM,cAAc;AACpD,QAAM,MAAM,KAAK,MAAM,aAAa,SAAS,OAAO,CAAC;AACrD,UAAQ,OAAO,MAAM,IAAI,UAAU,IAAI;AACvC,UAAQ,KAAK,CAAC;AAChB;AAEA,IAAMC,UAAS,oBAAoB,KAAK;AAQxC,IAAM,cAAiC,CAAC;AACxC,IAAI,aAAa;AACjB,SAAS,aACP,QACA,MACM;AAGN,MAAI,WAAY;AAChB,eAAa;AACb,QAAM,UAAU,kBAAkB;AAAA,IAChC;AAAA,IACA,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb,YAAY,KAAK;AAAA,IACjB,WAAW,QAAQ,OAAO;AAAA,IAC1B,UAAU;AAAA,EACZ,CAAC;AACD,EAAAA,QAAO,aAAa,MAAM,CAAC,EAAE,cAAc,OAA6C;AAC1F;AAEA,eAAe,uBAAuB,QAAgB,cAAqC;AACzF,QAAM,iBAAiB,QAAQ,IAAI;AACnC,QAAM,gBAAgB,QAAQ,QAAQ,IAAI,gBAAgB;AAC1D,EAAAA,QAAO,KAAK,gCAAgC;AAAA,IAC1C,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA,uBAAuB,QAAQ,cAAc;AAAA,EAC/C,CAAC;AACD,QAAM,SAAS,MAAM,eAAe;AAAA,IAClC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,CAAC,OAAO,IAAI;AACd,IAAAA,QAAO,MAAM,kCAAkC;AAAA,MAC7C,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,MACjB,QAAQ,OAAO;AAAA,MACf,QAAQ,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA,uBAAuB,QAAQ,cAAc;AAAA,MAC7C,MAAM,gBACF,0GACA;AAAA,IACN,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,sBAAoB,OAAO,MAAM;AACjC,EAAAA,QAAO,KAAK,sBAAsB;AAAA,IAChC,QAAQ,OAAO,OAAO;AAAA,IACtB,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;AAGA,SAAS,qBAAqB,OAA+C;AAC3E,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,kBAAkB,qBAAqB,KAAK,OAAO,KAAK,SAAS,KAAK,OAAO;AACnF,QAAM,eAAe,EAAE,UAAU,UAAU,MAAM,SAAS,UAAa,MAAM,SAAS;AACtF,SAAO,mBAAmB;AAC5B;AAEA,QAAQ,GAAG,qBAAqB,CAAC,QAA+B;AAC9D,MAAI,IAAI,SAAS,QAAS;AAE1B,MAAI,qBAAqB,GAAG,GAAG;AAC7B,IAAAA,QAAO,KAAK,yCAAyC,EAAE,OAAO,IAAI,SAAS,MAAM,IAAI,KAAK,CAAC;AAC3F;AAAA,EACF;AAEA,EAAAA,QAAO,MAAM,sBAAsB,EAAE,OAAO,IAAI,SAAS,MAAM,IAAI,KAAK,CAAC;AACzE,eAAa,sBAAsB,EAAE,UAAU,EAAE,CAAC;AAClD,UAAQ,KAAK,CAAC;AAChB,CAAC;AAED,QAAQ,GAAG,sBAAsB,CAAC,WAAoB;AACpD,QAAM,MAAM,kBAAkB,QAAQ,SAAS,IAAI,MAAM,OAAO,MAAM,CAAC;AAEvE,MAAI,qBAAqB,GAAG,GAAG;AAC7B,IAAAA,QAAO,KAAK,mDAAmD,EAAE,OAAO,IAAI,QAAQ,CAAC;AACrF;AAAA,EACF;AAEA,EAAAA,QAAO,MAAM,uBAAuB,EAAE,OAAO,IAAI,QAAQ,CAAC;AAC1D,eAAa,uBAAuB,EAAE,UAAU,EAAE,CAAC;AACnD,UAAQ,KAAK,CAAC;AAChB,CAAC;AAED,IAAM,2BAA2B;AACjC,IAAI,iBAAiB,QAAQ,IAAI,oBAAoB;AAGrD,IAAM,gBAAgB,QAAQ,IAAI,kBAAkB,QAAQ,IAAI;AAChE,IAAI,iBAAiB,CAAC,QAAQ,IAAI,qBAAqB;AACrD,MAAI,CAAC,gBAAgB;AACnB,IAAAA,QAAO,MAAM,4DAA4D;AACzE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,uBAAuB,gBAAgB,aAAa;AAC1D,mBAAiB,QAAQ,IAAI,oBAAoB;AACnD;AAGA,IAAM,sBAAsB,QAAQ,IAAI;AACxC,IAAM,mBAAmB,QAAQ,IAAI;AACrC,IAAM,qBAAqB,QAAQ,IAAI,sBAAsB,QAAQ,IAAI;AACzE,IAAM,gBAAiB,QAAQ,IAAI,iBAAiB;AACpD,IAAM,sBAAsB,QAAQ,IAAI,uBAAuB;AAC/D,IAAM,mBAAmB,sBACrB,wBAAwB,SACxB,QAAQ,IAAI,qBAAqB;AAIrC,YAAY,SAAS;AACrB,YAAY,cAAc,QAAQ,IAAI;AACtC,YAAY,aAAa;AACzB,YAAY,YAAY,QAAQ,IAAI,uBAAuB;AAQ3D,IAAM,kBAAkB,6BAA6B,QAAQ,GAAG;AAOhE,IAAI,CAAC,oBAAoB,mBAAmB,kBAAkB,SAAS;AACrE,EAAAA,QAAO,KAAK,yBAAyB,EAAE,WAAW,gBAAgB,UAAU,CAAC;AAC7E,QAAM,cAAc,IAAI;AAAA,IACtB;AAAA,MACE,YAAY;AAAA,QACV,QAAQ,kBAAkB;AAAA,QAC1B,WAAW,gBAAgB;AAAA,QAC3B,WAAW,gBAAgB;AAAA,QAC3B,YAAY;AAAA,MACd;AAAA,MACA,WAAW,gBAAgB;AAAA,MAC3B,aAAa,gBAAgB;AAAA,MAC7B,cAAc;AAAA,MACd,GAAI,QAAQ,IAAI,mBAAmB,EAAE,WAAW,EAAE,eAAe,KAAK,KAAK,IAAK,EAAE,IAAI,CAAC;AAAA,IACzF;AAAA,IACA;AAAA,MACE,SAAS,CAAC,UAAU;AAClB,QAAAA,QAAO,KAAK,uBAAuB,EAAE,WAAW,MAAM,KAAe,CAAC;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AACA,cAAY,YAAY,gBAAgB;AACxC,cAAY,cAAc,gBAAgB;AAC1C,cAAY,aAAa;AACzB,UAAQ,GAAG,WAAW,MAAM,YAAY,KAAK,CAAC;AAC9C,UAAQ,GAAG,UAAU,MAAM,YAAY,KAAK,CAAC;AAC7C,QAAM,YAAY,IAAI;AACtB,QAAM,aAAa,YAAY,eAAe;AAC9C,eAAa,aAAa,UAAU,SAAS;AAAA,IAC3C,UAAU,aAAa,IAAI;AAAA,IAC3B,YAAY,YAAY,cAAc;AAAA,EACxC,CAAC;AACD,UAAQ,KAAK,aAAa,IAAI,CAAC;AACjC;AAEA,IAAI,CAAC,oBAAoB,iBAAiB;AACxC,EAAAA,QAAO,KAAK,0BAA0B,EAAE,WAAW,gBAAgB,UAAU,CAAC;AAC9E,QAAM,gBAAgB,IAAI;AAAA,IACxB;AAAA,MACE,YAAY;AAAA,QACV,QAAQ,kBAAkB;AAAA,QAC1B,WAAW,gBAAgB;AAAA,QAC3B,WAAW,gBAAgB;AAAA,QAC3B,YAAY;AAAA,MACd;AAAA,MACA,WAAW,gBAAgB;AAAA;AAAA,MAE3B,GAAI,QAAQ,IAAI,mBAAmB,EAAE,WAAW,EAAE,eAAe,KAAK,KAAK,IAAK,EAAE,IAAI,CAAC;AAAA,IACzF;AAAA,IACA;AAAA,MACE,SAAS,CAAC,UAAU;AAClB,QAAAA,QAAO,KAAK,wBAAwB,EAAE,WAAW,MAAM,KAAe,CAAC;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACA,cAAY,YAAY,gBAAgB;AACxC,cAAY,cAAc,gBAAgB;AAC1C,cAAY,aAAa;AACzB,UAAQ,GAAG,WAAW,MAAM,cAAc,KAAK,CAAC;AAChD,UAAQ,GAAG,UAAU,MAAM,cAAc,KAAK,CAAC;AAC/C,QAAM,cAAc,IAAI;AACxB,QAAM,eAAe,cAAc,eAAe;AAClD,eAAa,eAAe,UAAU,SAAS;AAAA,IAC7C,UAAU,eAAe,IAAI;AAAA,IAC7B,YAAY,cAAc,cAAc;AAAA,EAC1C,CAAC;AACD,UAAQ,KAAK,eAAe,IAAI,CAAC;AACnC;AAEA,IAAI,CAAC,uBAAuB,CAAC,kBAAkB;AAC7C,EAAAA,QAAO,MAAM,wCAAwC;AACrD,EAAAA,QAAO,MAAM,2DAA2D;AACxE,EAAAA,QAAO,MAAM,gDAAgD;AAC7D,EAAAA,QAAO,MAAM,EAAE;AACf,EAAAA,QAAO,MAAM,iEAAiE;AAC9E,EAAAA,QAAO,MAAM,EAAE;AACf,EAAAA,QAAO,MAAM,WAAW;AACxB,EAAAA,QAAO,MAAM,yDAAyD;AACtE,EAAAA,QAAO,MAAM,4DAA4D;AACzE,EAAAA,QAAO;AAAA,IACL;AAAA,EACF;AACA,UAAQ,KAAK,CAAC;AAChB;AAEA,IACE,kBAAkB,UAClB,kBAAkB,QAClB,kBAAkB,iBAClB,kBAAkB,SAClB;AACA,EAAAA,QAAO,MAAM,yBAAyB;AAAA,IACpC,MAAM;AAAA,IACN,UAAU,CAAC,QAAQ,MAAM,eAAe,OAAO;AAAA,EACjD,CAAC;AACD,UAAQ,KAAK,CAAC;AAChB;AAEAA,QAAO,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAMrD,IAAM,qBAAqB,QAAQ,IAAI,mBACnC,EAAE,eAAe,KAAK,KAAK,IAAK,IAChC,EAAE,oBAAoB,EAAE;AAE5B,IAAM,SAAS,IAAI;AAAA,EACjB;AAAA,IACE,YAAY;AAAA,MACV,QAAQ,kBAAkB;AAAA,MAC1B,WAAW;AAAA;AAAA;AAAA,MAGX,WAAW,QAAQ,IAAI,uBAAuB;AAAA,MAC9C,YAAY;AAAA,IACd;AAAA,IACA,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AAAA,EACA;AAAA,IACE,gBAAgB,CAAC,WAA8B;AAC7C,MAAAA,QAAO,KAAK,kBAAkB,EAAE,OAAO,CAAC;AAAA,IAC1C;AAAA,IACA,SAAS,CAAC,UAAmC;AAC3C,YAAM,SACH,MAAM,WAAuB,MAAM,WAAuB,MAAM,WAAsB;AACzF,UAAI,QAAQ;AACV,QAAAA,QAAO,KAAK,QAAQ,EAAE,WAAW,MAAM,KAAe,CAAC;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;AAIA,IAAM,iBAAiB,IAAI,sBAAsB,OAAO,YAAY,kBAAkB;AAEtF,IAAI;AAEJ,IAAM,gBAAgB,CAAC,WAAiC;AACtD,EAAAA,QAAO,KAAK,YAAY,MAAM,mCAAmC;AAKjE,mBAAiB;AAGjB,QAAM,YAAY;AAChB,QAAI;AACF,YAAM,eAAe,QAAQ;AAAA,IAC/B,QAAQ;AAAA,IAER;AACA,QAAI;AACF,YAAM,OAAO,mBAAmB;AAAA,IAClC,UAAE;AACA,aAAO,KAAK;AAAA,IACd;AAAA,EACF,GAAG;AACH,aAAW,MAAM;AACf,IAAAA,QAAO,KAAK,sBAAsB,MAAM,UAAU;AAIlD,IAAAA,QAAO;AAAA,MACL;AAAA,MACA,kBAAkB;AAAA,QAChB,QAAQ;AAAA,QACR,UAAU;AAAA,QACV;AAAA,QACA,YAAY,OAAO,cAAc;AAAA,QACjC,WAAW,QAAQ,OAAO;AAAA,QAC1B,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,GAAG,IAAM,EAAE,MAAM;AACnB;AAEA,QAAQ,GAAG,WAAW,MAAM,cAAc,SAAS,CAAC;AACpD,QAAQ,GAAG,UAAU,MAAM,cAAc,QAAQ,CAAC;AAGlD,MAAM,OAAO,QAAQ;AAErB,IAAM,iBAAiB,CAAC,QAA6B,SAAiB;AACpE,SAAO,WAAW,UAAU,EAAE,MAAM,gBAAgB,QAAQ,KAAK,CAAC;AAClE,GAAC,WAAW,WAAW,QAAQ,SAAS,QAAQ,QAAQ,MAAM,IAAI;AACpE;AAIA,IAAI,oBAA8C;AAClD,IAAM,4BAA4B,oBAAI,QAA2B;AAEjE,IAAM,wBAAwB,MAAY;AACxC,QAAM,QAAQ;AACd,MAAI,CAAC,SAAS,MAAM,aAAa,QAAQ,MAAM,OAAQ;AACvD,4BAA0B,IAAI,KAAK;AACnC,MAAI;AACF,QAAI,MAAM,IAAK,SAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;AAAA,QAC5C,OAAM,KAAK,SAAS;AAAA,EAC3B,QAAQ;AACN,QAAI;AACF,YAAM,KAAK,SAAS;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEA,IAAM,qBAAqB,CAAC,YAA0B;AACpD,EAAAA,QAAO,KAAK,yBAAyB,EAAE,QAAQ,CAAC;AAChD,SAAO,WAAW,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC7D,QAAM,QAAQ,gBAAgB,SAAS,oBAAoB,CAAC,QAAQ,SAAS;AAC3E,WAAO,WAAW,UAAU,EAAE,MAAM,wBAAwB,QAAQ,KAAK,CAAC;AAC1E,KAAC,WAAW,WAAW,QAAQ,SAAS,QAAQ,QAAQ,MAAM,IAAI;AAAA,EACpE,CAAC;AACD,sBAAoB;AACpB,QAAM,GAAG,QAAQ,CAAC,MAAM,WAAW;AACjC,QAAI,sBAAsB,MAAO,qBAAoB;AACrD,QAAI,0BAA0B,IAAI,KAAK,EAAG;AAE1C,IAAAA,QAAO,KAAK,wBAAwB,EAAE,MAAM,OAAO,CAAC;AACpD,WAAO,WAAW,UAAU;AAAA,MAC1B,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,SAAS,uBAAuB,SAAS,OAAO,KAAK,cAAc,IAAI,EAAE,GAAG,SAAS,aAAa,MAAM,MAAM,EAAE;AAAA,IAClH,CAAC;AAGD,QAAI,SAAS,QAAQ,SAAS,GAAG;AAC/B,aAAO,WAAW,UAAU;AAAA,QAC1B,MAAM;AAAA,QACN,SAAS,kCAAkC,IAAI,GAAG,SAAS,aAAa,MAAM,MAAM,EAAE;AAAA,MACxF,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACD,QAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,QAAI,sBAAsB,MAAO,qBAAoB;AACrD,IAAAA,QAAO,MAAM,uBAAuB,EAAE,OAAO,IAAI,QAAQ,CAAC;AAC1D,WAAO,WAAW,UAAU,EAAE,MAAM,uBAAuB,SAAS,IAAI,QAAQ,CAAC;AAAA,EACnF,CAAC;AACH;AAIA,KAAK;AAAA,EAAkB,QAAQ;AAAA,EAAK,CAAC,YACnC,eAAe,UAAU,cAAc,OAAO;AAAA,CAAI;AACpD;AAOA,KAAK,yBAAyB;AAAA,EAC5B,WAAW,QAAQ,IAAI;AAAA,EACvB,QAAQ;AAAA,EACR,oBAAoB,OAAO,cAAc;AACvC,UAAM,MAAM,MAAM,OAAO,WAAW,KAAK,kBAAkB,EAAE,UAAU,CAAC;AACxE,WAAO,IAAI;AAAA,EACb;AAAA,EACA,QAAAA;AACF,CAAC;AAcD,IAAI,kBAAkB,QAAQ;AAC5B,SAAO,WAAW,cAAc,CAAC,SAAS;AACxC,SAAK,eAAe,MAAM,IAAI,EAAE,MAAM,CAAC,QAAiB;AACtD,MAAAA,QAAO,MAAM,4BAA4B;AAAA,QACvC,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AACD,aAAO,WAAW;AAAA,QAChB,KAAK;AAAA,QACL,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACjD;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;AAEA,IAAM,iBAAiB,mBAAmB;AAC1C,OAAO,WAAW,kBAAkB,MAAM;AACxC,MAAI,CAAC,gBAAgB,aAAc;AACnC,SAAO,WAAW,UAAU;AAAA,IAC1B,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACD,wBAAsB;AACtB,qBAAmB,eAAe,YAAY;AAChD,CAAC;AAED,IAAI,gBAAgB;AAClB,QAAM,YAAY;AAKhB,UAAM,WAAW,MAAM,cAAc;AAAA,MACnC,OAAO,CAAC,MAAM,eAAe,UAAU,SAAS,CAAC;AAAA,CAAI;AAAA,IACvD,CAAC;AACD,QAAI,aAAa,YAAY,aAAa,WAAW;AACnD,aAAO,WAAW,UAAU;AAAA,QAC1B,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AAOA,UAAM,gBAAgB;AAAA,MACpB,OAAO,CAAC,YAAY,eAAe,UAAU,cAAc,OAAO;AAAA,CAAI;AAAA,MACtE,WAAW;AAAA,IACb,CAAC;AAED,QAAI,eAAe,cAAc;AAC/B,MAAAA,QAAO,KAAK,sCAAsC;AAAA,QAChD,SAAS,eAAe;AAAA,MAC1B,CAAC;AACD,UAAI;AACF,cAAM,gBAAgB,eAAe,cAAc,oBAAoB,cAAc;AACrF,QAAAA,QAAO,KAAK,yBAAyB;AAAA,MACvC,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU;AACrD,QAAAA,QAAO,MAAM,wBAAwB,EAAE,OAAO,IAAI,CAAC;AACnD,eAAO,WAAW,UAAU,EAAE,MAAM,eAAe,SAAS,IAAI,CAAC;AAAA,MACnE;AAAA,IACF;AAEA,QAAI,sBAAsB;AAC1B,QAAI,eAAe,cAAc;AAC/B,yBAAmB,eAAe,YAAY;AAC9C,4BAAsB;AAAA,IACxB;AAEA,UAAM,eAAe,MAAM,iBAAiB,kBAAkB;AAC9D,UAAM,eAAe,yBAAyB,YAAY;AAC1D,WAAO,WAAW,UAAU;AAAA,MAC1B,MAAM;AAAA,MACN;AAAA,MACA,GAAI,aAAa,SAAS,IAAI,EAAE,aAAa,IAAI,CAAC;AAAA,IACpD,CAAC;AAAA,EACH,GAAG;AACL;AAIA,OACG,IAAI,EACJ,KAAK,MAAM;AAMV,QAAM,UAAU,OAAO,eAAe;AACtC,QAAM,SAA0B,iBAAiB,WAAW,UAAU,UAAU;AAChF,eAAa,QAAQ;AAAA,IACnB,UAAU,UAAU,IAAI;AAAA,IACxB,QAAQ;AAAA,IACR,YAAY,OAAO,cAAc;AAAA,EACnC,CAAC;AACD,UAAQ,KAAK,UAAU,IAAI,CAAC;AAC9B,CAAC,EACA,MAAM,CAAC,UAAmB;AACzB,QAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,EAAAA,QAAO,MAAM,uBAAuB,EAAE,OAAO,IAAI,CAAC;AAClD,eAAa,SAAS,EAAE,UAAU,GAAG,YAAY,OAAO,cAAc,OAAU,CAAC;AACjF,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":["dirname","logger","dirname","logger"]}
+{"version":3,"sources":["../src/cli.ts","../src/setup/sidecars.ts","../src/utils/session-identity.ts","../src/utils/agent-exit.ts","../src/setup/project-identity.ts","../src/runner/project-session-runner.ts","../src/harness/pty/adapters/types.ts","../src/harness/pty/adapters/opencode.ts","../src/harness/pty/adapters/index.ts","../src/runner/adhoc-session-runner.ts","../src/runner/review-child.ts"],"sourcesContent":["#!/usr/bin/env node\n/* oxlint-disable import/max-dependencies -- CLI entry point wires every runner variant (task/pm/code-review/adhoc) + setup; splitting would scatter the boot sequence */\nimport { readFileSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { SessionRunner } from \"./runner/session-runner.js\";\nimport type { AgentRunnerStatus, RunnerMode } from \"@project/shared\";\nimport { createServiceLogger } from \"./utils/logger.js\";\nimport {\n  applyBootstrapToEnv,\n  awaitGitReady,\n  buildSessionPreviewPorts,\n  fetchBootstrap,\n  loadConveyorConfig,\n  loadForwardPorts,\n  runSetupCommand,\n  runStartCommand,\n  startLazySidecars,\n  waitForSidecars,\n} from \"./setup/index.js\";\nimport { checkSessionTaskIdentity } from \"./utils/session-identity.js\";\nimport {\n  buildAgentExitLog,\n  exitLogLevel,\n  type AgentExitIdentity,\n  type AgentExitReason,\n} from \"./utils/agent-exit.js\";\nimport { resolveProjectRunnerIdentity } from \"./setup/project-identity.js\";\nimport { ProjectSessionRunner } from \"./runner/project-session-runner.js\";\nimport { AdhocSessionRunner } from \"./runner/adhoc-session-runner.js\";\nimport { ReviewChildSupervisor } from \"./runner/review-child.js\";\n\n// Handle --version flag before any other initialization\nif (process.argv.includes(\"--version\")) {\n  const __dirname = dirname(fileURLToPath(import.meta.url));\n  const pkgPath = join(__dirname, \"..\", \"package.json\");\n  const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\"));\n  process.stdout.write(pkg.version + \"\\n\");\n  process.exit(0);\n}\n\nconst logger = createServiceLogger(\"CLI\");\n\n// Pod-exit observability. The reconciler can only infer *that* an agent stopped\n// (stale heartbeat → Stranded); it never sees *why*. We log the cause from the\n// pod side at every catchable exit, keyed on the same sessionId the API's\n// `session_stranded` line carries so the two ends can be joined. Populated once\n// env identity resolves below; the early crash handlers read it live. (SIGKILL /\n// OOM 137 is uncatchable — diagnosed from GKE kernel logs, not this line.)\nconst exitContext: AgentExitIdentity = {};\nlet exitLogged = false;\nfunction logAgentExit(\n  reason: AgentExitReason,\n  opts: { exitCode: number; signal?: string; finalState?: string },\n): void {\n  // One line per process death; force_timeout is logged separately (it escalates\n  // an already-logged signal shutdown) so it bypasses this guard at its call site.\n  if (exitLogged) return;\n  exitLogged = true;\n  const payload = buildAgentExitLog({\n    reason,\n    exitCode: opts.exitCode,\n    signal: opts.signal,\n    finalState: opts.finalState,\n    uptimeSec: process.uptime(),\n    identity: exitContext,\n  });\n  logger[exitLogLevel(reason)](\"agent_exit\", payload as unknown as Record<string, unknown>);\n}\n\nasync function bootstrapFromCodespace(apiUrl: string, instanceName: string): Promise<void> {\n  const bootstrapToken = process.env.CONVEYOR_BOOTSTRAP_TOKEN;\n  const apiUrlFromEnv = Boolean(process.env.CONVEYOR_API_URL);\n  logger.info(\"Bootstrapping from codespace\", {\n    codespace: instanceName,\n    apiUrl,\n    apiUrlFromEnv,\n    bootstrapTokenPresent: Boolean(bootstrapToken),\n  });\n  const result = await fetchBootstrap({\n    apiUrl,\n    instanceName,\n    bootstrapToken,\n  });\n  if (!result.ok) {\n    logger.error(\"Bootstrap failed after retries\", {\n      reason: result.reason,\n      attempts: result.attempts,\n      status: result.status,\n      detail: result.detail,\n      apiUrl,\n      apiUrlFromEnv,\n      bootstrapTokenPresent: Boolean(bootstrapToken),\n      hint: apiUrlFromEnv\n        ? \"Verify the codespace was created by this Conveyor deployment and that the bootstrap token is current.\"\n        : \"CONVEYOR_API_URL was not set as a codespace secret — agent fell back to the built-in default. Re-create the codespace, or push CONVEYOR_API_URL via project settings.\",\n    });\n    process.exit(1);\n  }\n  applyBootstrapToEnv(result.config);\n  logger.info(\"Bootstrap complete\", {\n    taskId: result.config.taskId,\n    attempts: result.attempts,\n  });\n}\n\n// Helper to detect expected abort errors from SDK cleanup\nfunction isExpectedAbortError(error: Error | NodeJS.ErrnoException): boolean {\n  const message = error.message || \"\";\n  const hasAbortMessage = /operation aborted/i.test(message) || /abort/i.test(message);\n  const hasAbortCode = !(\"code\" in error) || error.code === undefined || error.code === \"ABORT_ERR\";\n  return hasAbortMessage && hasAbortCode;\n}\n\nprocess.on(\"uncaughtException\", (err: NodeJS.ErrnoException) => {\n  if (err.code === \"EPIPE\") return;\n\n  if (isExpectedAbortError(err)) {\n    logger.info(\"Ignored expected abort after shutdown\", { error: err.message, code: err.code });\n    return;\n  }\n\n  logger.error(\"Uncaught exception\", { error: err.message, code: err.code });\n  logAgentExit(\"uncaught_exception\", { exitCode: 1 });\n  process.exit(1);\n});\n\nprocess.on(\"unhandledRejection\", (reason: unknown) => {\n  const err = reason instanceof Error ? reason : new Error(String(reason));\n\n  if (isExpectedAbortError(err)) {\n    logger.info(\"Ignored expected abort rejection after shutdown\", { error: err.message });\n    return;\n  }\n\n  logger.error(\"Unhandled rejection\", { error: err.message });\n  logAgentExit(\"unhandled_rejection\", { exitCode: 1 });\n  process.exit(1);\n});\n\nconst DEFAULT_CONVEYOR_API_URL = \"https://api.conveyor.rallycryapp.com\";\nlet conveyorApiUrl = process.env.CONVEYOR_API_URL || DEFAULT_CONVEYOR_API_URL;\n\n// Step 1: Codespace bootstrap\nconst INSTANCE_NAME = process.env.CODESPACE_NAME || process.env.CLAUDESPACE_NAME;\nif (INSTANCE_NAME && !process.env.CONVEYOR_TASK_TOKEN) {\n  if (!conveyorApiUrl) {\n    logger.error(\"Could not resolve CONVEYOR_API_URL for codespace bootstrap\");\n    process.exit(1);\n  }\n  await bootstrapFromCodespace(conveyorApiUrl, INSTANCE_NAME);\n  conveyorApiUrl = process.env.CONVEYOR_API_URL ?? conveyorApiUrl;\n}\n\n// Step 2: Read env vars (bootstrap may have set them)\nconst CONVEYOR_TASK_TOKEN = process.env.CONVEYOR_TASK_TOKEN;\nconst CONVEYOR_TASK_ID = process.env.CONVEYOR_TASK_ID;\nconst CONVEYOR_WORKSPACE = process.env.CONVEYOR_WORKSPACE ?? process.cwd();\nconst CONVEYOR_MODE = (process.env.CONVEYOR_MODE ?? \"task\") as RunnerMode;\nconst CONVEYOR_AGENT_MODE = process.env.CONVEYOR_AGENT_MODE || undefined;\nconst CONVEYOR_IS_AUTO = CONVEYOR_AGENT_MODE\n  ? CONVEYOR_AGENT_MODE === \"auto\"\n  : process.env.CONVEYOR_IS_AUTO === \"true\";\n\n// Seed the pod-exit identity now that env is resolved (the specific runner\n// branches below refine sessionId/workspaceId to their own session).\nexitContext.taskId = CONVEYOR_TASK_ID;\nexitContext.workspaceId = process.env.CONVEYOR_WORKSPACE_ID;\nexitContext.runnerMode = CONVEYOR_MODE;\nexitContext.sessionId = process.env.CONVEYOR_SESSION_ID ?? CONVEYOR_TASK_ID;\n\n// Step 2.5: task-less PROJECT pods (Claudespace v3 project runners). The\n// bundle's session JWT carries {projectId, sessionId} and NO taskId; the\n// entrypoint exports CONVEYOR_PROJECT_ID (no CONVEYOR_TASK_ID) and sets\n// CONVEYOR_MODE=pm. Boot the project runner: connect + register session +\n// heartbeat + idle awaiting project-scoped messages. Never falls through to\n// the task lifecycle below.\nconst projectIdentity = resolveProjectRunnerIdentity(process.env);\n\n// Task-less ADHOC pods (Sessions view scratch pods). Same task-less identity as\n// a project pod (projectId + sessionId, no taskId), distinguished by\n// CONVEYOR_MODE=adhoc. Runs an interactive `claude` TUI relayed to the web\n// terminal — NOT the autonomous pm project runner below. Checked first so an\n// adhoc session never falls through to pm.\nif (!CONVEYOR_TASK_ID && projectIdentity && CONVEYOR_MODE === \"adhoc\") {\n  logger.info(\"Starting ad-hoc agent\", { projectId: projectIdentity.projectId });\n  const adhocRunner = new AdhocSessionRunner(\n    {\n      connection: {\n        apiUrl: conveyorApiUrl ?? \"\",\n        taskToken: projectIdentity.taskToken,\n        sessionId: projectIdentity.sessionId,\n        runnerMode: \"adhoc\",\n      },\n      projectId: projectIdentity.projectId,\n      workspaceId: projectIdentity.workspaceId,\n      workspaceDir: CONVEYOR_WORKSPACE,\n      ...(process.env.CLAUDESPACE_NAME ? { lifecycle: { idleTimeoutMs: 60 * 60 * 1000 } } : {}),\n    },\n    {\n      onEvent: (event) => {\n        logger.info(\"Ad-hoc runner event\", { eventType: event.type as string });\n      },\n    },\n  );\n  exitContext.sessionId = projectIdentity.sessionId;\n  exitContext.workspaceId = projectIdentity.workspaceId;\n  exitContext.runnerMode = \"adhoc\";\n  process.on(\"SIGTERM\", () => adhocRunner.stop());\n  process.on(\"SIGINT\", () => adhocRunner.stop());\n  await adhocRunner.run();\n  const adhocError = adhocRunner.finalState === \"error\";\n  logAgentExit(adhocError ? \"error\" : \"clean\", {\n    exitCode: adhocError ? 1 : 0,\n    finalState: adhocRunner.finalState ?? undefined,\n  });\n  process.exit(adhocError ? 1 : 0);\n}\n\nif (!CONVEYOR_TASK_ID && projectIdentity) {\n  logger.info(\"Starting project agent\", { projectId: projectIdentity.projectId });\n  const projectRunner = new ProjectSessionRunner(\n    {\n      connection: {\n        apiUrl: conveyorApiUrl ?? \"\",\n        taskToken: projectIdentity.taskToken,\n        sessionId: projectIdentity.sessionId,\n        runnerMode: \"pm\",\n      },\n      projectId: projectIdentity.projectId,\n      // Same extended idle window claudespace task pods get.\n      ...(process.env.CLAUDESPACE_NAME ? { lifecycle: { idleTimeoutMs: 60 * 60 * 1000 } } : {}),\n    },\n    {\n      onEvent: (event) => {\n        logger.info(\"Project runner event\", { eventType: event.type as string });\n      },\n    },\n  );\n  exitContext.sessionId = projectIdentity.sessionId;\n  exitContext.workspaceId = projectIdentity.workspaceId;\n  exitContext.runnerMode = \"pm\";\n  process.on(\"SIGTERM\", () => projectRunner.stop());\n  process.on(\"SIGINT\", () => projectRunner.stop());\n  await projectRunner.run();\n  const projectError = projectRunner.finalState === \"error\";\n  logAgentExit(projectError ? \"error\" : \"clean\", {\n    exitCode: projectError ? 1 : 0,\n    finalState: projectRunner.finalState ?? undefined,\n  });\n  process.exit(projectError ? 1 : 0);\n}\n\nif (!CONVEYOR_TASK_TOKEN || !CONVEYOR_TASK_ID) {\n  logger.error(\"Missing required environment variables\");\n  logger.error(\"  CONVEYOR_TASK_TOKEN - JWT token for task authentication\");\n  logger.error(\"  CONVEYOR_TASK_ID - ID of the task to execute\");\n  logger.error(\"\");\n  logger.error(\"CONVEYOR_API_URL is provided via codespace secret or bootstrap.\");\n  logger.error(\"\");\n  logger.error(\"Optional:\");\n  logger.error(\"  CONVEYOR_MODE - Runner mode: 'task' (default) or 'pm'\");\n  logger.error(\"  CONVEYOR_WORKSPACE - Working directory (defaults to cwd)\");\n  logger.error(\n    \"  Project pods instead require CONVEYOR_PROJECT_ID + CONVEYOR_SESSION_ID + CONVEYOR_MODE=pm\",\n  );\n  process.exit(1);\n}\n\nif (\n  CONVEYOR_MODE !== \"task\" &&\n  CONVEYOR_MODE !== \"pm\" &&\n  CONVEYOR_MODE !== \"code-review\" &&\n  CONVEYOR_MODE !== \"adhoc\"\n) {\n  logger.error(\"Invalid CONVEYOR_MODE\", {\n    mode: CONVEYOR_MODE,\n    expected: [\"task\", \"pm\", \"code-review\", \"adhoc\"],\n  });\n  process.exit(1);\n}\n\nlogger.info(\"Starting agent\", { mode: CONVEYOR_MODE });\n\n// Claudespace pods: longer idle timeout to stay alive for incoming messages.\n// Non-claudespace environments (local, workspace, GitHub Codespaces) have\n// persistent state and don't need the periodic WIP commit safety net, so\n// disable the git flush timer for them.\nconst lifecycleOverrides = process.env.CLAUDESPACE_NAME\n  ? { idleTimeoutMs: 60 * 60 * 1000 }\n  : { gitFlushIntervalMs: 0 };\n\nconst runner = new SessionRunner(\n  {\n    connection: {\n      apiUrl: conveyorApiUrl ?? \"\",\n      taskToken: CONVEYOR_TASK_TOKEN,\n      // CONVEYOR_SESSION_ID is the CodespaceSession ID for BaseService ACL.\n      // Falls back to CONVEYOR_TASK_ID for backward compat (codespace bootstrap sets only task ID).\n      sessionId: process.env.CONVEYOR_SESSION_ID ?? CONVEYOR_TASK_ID,\n      runnerMode: CONVEYOR_MODE,\n    },\n    runnerMode: CONVEYOR_MODE,\n    isAuto: CONVEYOR_IS_AUTO,\n    workspaceDir: CONVEYOR_WORKSPACE,\n    agentMode: CONVEYOR_AGENT_MODE as import(\"@project/shared\").AgentMode | undefined,\n    lifecycle: lifecycleOverrides,\n  },\n  {\n    onStatusChange: (status: AgentRunnerStatus) => {\n      logger.info(\"Status changed\", { status });\n    },\n    onEvent: (event: Record<string, unknown>) => {\n      const detail =\n        (event.message as string) ?? (event.content as string) ?? (event.summary as string) ?? \"\";\n      if (detail) {\n        logger.info(detail, { eventType: event.type as string });\n      }\n    },\n  },\n);\n\n// Same-pod review children (session:spawnReview). Wired only for the builder\n// (\"task\") runner mode below — a review child must never recursively spawn.\nconst reviewChildren = new ReviewChildSupervisor(runner.connection, CONVEYOR_WORKSPACE);\n\nlet shutdownSignal: \"SIGTERM\" | \"SIGINT\" | undefined;\n\nconst shutdownAgent = (signal: \"SIGTERM\" | \"SIGINT\") => {\n  logger.info(`Received ${signal}, flushing git and stopping agent`);\n  // Recorded (not logged yet) so the final agent_exit line — emitted once the\n  // real exit code is known below — can still attribute the cause to this\n  // signal. A graceful SIGTERM resolves runner.run() with finalState=\"finished\"\n  // and exits 0, so guessing exitCode here up front would misreport it as 1.\n  shutdownSignal = signal;\n  // Flush WIP commit + push BEFORE stop() tears down the connection, since\n  // the token-refresh RPC needs a live socket. Then stop the runner.\n  void (async () => {\n    try {\n      await reviewChildren.stopAll();\n    } catch {\n      /* best-effort */\n    }\n    try {\n      await runner.flushGitOnShutdown();\n    } finally {\n      runner.stop();\n    }\n  })();\n  setTimeout(() => {\n    logger.warn(`Forcing exit after ${signal} timeout`);\n    // The graceful flush/stop hung past the watchdog — emit directly (bypassing\n    // the one-line guard in logAgentExit) since run() will never resolve to log\n    // this exit itself.\n    logger.warn(\n      \"agent_exit\",\n      buildAgentExitLog({\n        reason: \"force_timeout\",\n        exitCode: 1,\n        signal,\n        finalState: runner.finalState ?? undefined,\n        uptimeSec: process.uptime(),\n        identity: exitContext,\n      }) as unknown as Record<string, unknown>,\n    );\n    process.exit(1);\n  }, 45_000).unref();\n};\n\nprocess.on(\"SIGTERM\", () => shutdownAgent(\"SIGTERM\"));\nprocess.on(\"SIGINT\", () => shutdownAgent(\"SIGINT\"));\n\n// Connect first so setup/start output is forwarded to the API\nawait runner.connect();\n\nconst logSetupOutput = (stream: \"stdout\" | \"stderr\", data: string) => {\n  runner.connection.sendEvent({ type: \"setup_output\", stream, data });\n  (stream === \"stderr\" ? process.stderr : process.stdout).write(data);\n};\n\ntype StartCommandChild = ReturnType<typeof runStartCommand>;\n\nlet startCommandChild: StartCommandChild | null = null;\nconst expectedStartCommandStops = new WeakSet<StartCommandChild>();\n\nconst stopStartCommandChild = (): void => {\n  const child = startCommandChild;\n  if (!child || child.exitCode !== null || child.killed) return;\n  expectedStartCommandStops.add(child);\n  try {\n    if (child.pid) process.kill(-child.pid, \"SIGTERM\");\n    else child.kill(\"SIGTERM\");\n  } catch {\n    try {\n      child.kill(\"SIGTERM\");\n    } catch {\n      /* already exited */\n    }\n  }\n};\n\nconst launchStartCommand = (command: string): void => {\n  logger.info(\"Running start command\", { command });\n  runner.connection.sendEvent({ type: \"start_command_started\" });\n  const child = runStartCommand(command, CONVEYOR_WORKSPACE, (stream, data) => {\n    runner.connection.sendEvent({ type: \"start_command_output\", stream, data });\n    (stream === \"stderr\" ? process.stderr : process.stdout).write(data);\n  });\n  startCommandChild = child;\n  child.on(\"exit\", (code, signal) => {\n    if (startCommandChild === child) startCommandChild = null;\n    if (expectedStartCommandStops.has(child)) return;\n\n    logger.info(\"Start command exited\", { code, signal });\n    runner.connection.sendEvent({\n      type: \"start_command_exited\",\n      code,\n      signal,\n      message: `start command exited${code === null ? \"\" : ` with code ${code}`}${signal ? ` (signal: ${signal})` : \"\"}`,\n    });\n    // Surface non-zero exits as a loud chat message too, so users know\n    // their dev server crashed and the agent may hit tool-use failures.\n    if (code !== null && code !== 0) {\n      runner.connection.sendEvent({\n        type: \"start_command_error\",\n        message: `start command exited with code ${code}${signal ? ` (signal: ${signal})` : \"\"}`,\n      });\n    }\n  });\n  child.on(\"error\", (err) => {\n    if (startCommandChild === child) startCommandChild = null;\n    logger.error(\"Start command error\", { error: err.message });\n    runner.connection.sendEvent({ type: \"start_command_error\", message: err.message });\n  });\n};\n\n// Wake lazy sidecars as soon as the agent is connected. Readiness still gates\n// only setup/start below; Claude startup remains gated only on workspace git.\nvoid startLazySidecars(process.env, (message) =>\n  logSetupOutput(\"stdout\", `[sidecars] ${message}\\n`),\n);\n\n// Defense-in-depth: warn loudly if CONVEYOR_SESSION_ID decodes to a different\n// task than CONVEYOR_TASK_ID. Authoritative checks are server-side\n// (requireTaskAuth + partial-unique index on active CodespaceSessions). This\n// is a visibility net in case those regress — see SEC-9 postmortem in\n// .claude/rules/agent-codespace.md.\nvoid checkSessionTaskIdentity({\n  sessionId: process.env.CONVEYOR_SESSION_ID,\n  taskId: CONVEYOR_TASK_ID,\n  fetchSessionTaskId: async (sessionId) => {\n    const ctx = await runner.connection.call(\"getTaskContext\", { sessionId });\n    return ctx.id;\n  },\n  logger,\n});\n\n// Run setup + start commands in the background so the agent can start\n// fetching context and thinking immediately. The dev environment will be\n// ready by the time the agent needs to actually execute anything in it.\n// Start command still runs after setup (install must finish before `bun\n// run dev` works), but both are decoupled from runner.run().\n//\n// INVARIANT: failures inside this IIFE are NON-FATAL. Any throw or non-zero\n// exit from setup/start must surface as a chat event, never as process.exit.\n// The agent continues so the user can still interact with it and debug.\n// Same-pod review: only the builder runner hosts review children. The push\n// arrives on the BUILDER's session room; the child binds the review session\n// via env overrides (its own JWT/sessionId, CONVEYOR_MODE=code-review).\nif (CONVEYOR_MODE === \"task\") {\n  runner.connection.onSpawnReview((data) => {\n    void reviewChildren.spawn(data).catch((err: unknown) => {\n      logger.error(\"Review child spawn threw\", {\n        error: err instanceof Error ? err.message : String(err),\n      });\n      runner.connection.reportReviewSpawnFailure(\n        data.sessionId,\n        err instanceof Error ? err.message : String(err),\n      );\n    });\n  });\n}\n\nconst conveyorConfig = loadConveyorConfig();\nrunner.connection.onRunStartCommand(() => {\n  if (!conveyorConfig?.startCommand) return;\n  runner.connection.sendEvent({\n    type: \"start_command_output\",\n    stream: \"stdout\",\n    data: \"[conveyor-agent] Restarting start command...\\n\",\n  });\n  stopStartCommandChild();\n  launchStartCommand(conveyorConfig.startCommand);\n});\n\nif (conveyorConfig) {\n  void (async () => {\n    // Gate setup/start on the entrypoint's backgrounded git preparation: these\n    // scripts need the repo present. If git never became ready, skip them —\n    // non-fatal, the agent keeps running so the user can still interact/debug.\n    // \"not-gated\" (GitHub Codespaces / local) and \"ready\" both proceed.\n    const gitState = await awaitGitReady({\n      onLog: (m) => logSetupOutput(\"stdout\", `[git] ${m}\\n`),\n    });\n    if (gitState === \"failed\" || gitState === \"timeout\") {\n      runner.connection.sendEvent({\n        type: \"setup_error\",\n        message: \"Workspace not ready — skipping setup/start\",\n      });\n      return;\n    }\n\n    // Gate setup/start on sidecar readiness. This wait used to live in the pod\n    // entrypoint AHEAD of the agent launch, blocking the thinking loop on\n    // postgres/firebase boot it never needed. It now runs here — inside the\n    // background IIFE, in parallel with runner.run() — so it only delays\n    // setup/start (which genuinely need a warm postgres), not the agent.\n    await waitForSidecars({\n      onLog: (message) => logSetupOutput(\"stdout\", `[sidecars] ${message}\\n`),\n      startLazy: false,\n    });\n\n    if (conveyorConfig.setupCommand) {\n      logger.info(\"Running setup command (background)\", {\n        command: conveyorConfig.setupCommand,\n      });\n      try {\n        await runSetupCommand(conveyorConfig.setupCommand, CONVEYOR_WORKSPACE, logSetupOutput);\n        logger.info(\"Setup command completed\");\n      } catch (error) {\n        const msg = error instanceof Error ? error.message : \"Setup command failed\";\n        logger.error(\"Setup command failed\", { error: msg });\n        runner.connection.sendEvent({ type: \"setup_error\", message: msg });\n      }\n    }\n\n    let startCommandRunning = false;\n    if (conveyorConfig.startCommand) {\n      launchStartCommand(conveyorConfig.startCommand);\n      startCommandRunning = true;\n    }\n\n    const forwardPorts = await loadForwardPorts(CONVEYOR_WORKSPACE);\n    const previewPorts = buildSessionPreviewPorts(forwardPorts);\n    runner.connection.sendEvent({\n      type: \"setup_complete\",\n      startCommandRunning,\n      ...(previewPorts.length > 0 ? { previewPorts } : {}),\n    });\n  })();\n}\n\n// Start the main agent lifecycle immediately in parallel with setup\n// (context fetch, mode resolution, core loop).\nrunner\n  .run()\n  .then(() => {\n    // Exit with code 0 for clean shutdown (entrypoint won't restart),\n    // code 1 for errors (entrypoint will restart). A SIGTERM-initiated shutdown\n    // resolves run() too (finalState=\"finished\"), so tag it \"signal\" rather\n    // than \"clean\" — but the exit code still follows the real finalState, not\n    // a guess made back when the signal first arrived.\n    const errored = runner.finalState === \"error\";\n    const reason: AgentExitReason = shutdownSignal ? \"signal\" : errored ? \"error\" : \"clean\";\n    logAgentExit(reason, {\n      exitCode: errored ? 1 : 0,\n      signal: shutdownSignal,\n      finalState: runner.finalState ?? undefined,\n    });\n    process.exit(errored ? 1 : 0);\n  })\n  .catch((error: unknown) => {\n    const msg = error instanceof Error ? error.message : String(error);\n    logger.error(\"Agent runner failed\", { error: msg });\n    logAgentExit(\"error\", { exitCode: 1, finalState: runner.finalState ?? undefined });\n    process.exit(1);\n  });\n","import net from \"node:net\";\nimport { mkdir, writeFile } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\n\n/**\n * Sidecar readiness gate.\n *\n * Previously the pod entrypoint blocked on postgres/firebase coming up BEFORE it\n * launched the agent, so the agent's thinking loop paid for up to ~60s of\n * sidecar boot it never needed. That wait now lives here and runs inside the\n * agent's background setup IIFE — it gates only `setupCommand`/`startCommand`\n * (which genuinely need a warm postgres), never the agent loop.\n *\n * Semantics deliberately match the old entrypoint: best-effort, NON-FATAL on\n * timeout (log a warning and continue), and a no-op when no sidecar env vars are\n * present. Per-target timeouts mirror what the entrypoint learned the hard way —\n * the firebase auth emulator cold-boots slowly and doesn't bind 9099 until ~50s\n * after its container starts, so it gets 60s.\n *\n * Postgres gets 120s: on a durable-sleep/pool pod the postgres sidecar restores\n * prior state, and an ungraceful previous pod death (e.g. OOMKill) leaves a torn\n * WAL that triggers crash recovery on boot. Cold boot + WAL replay routinely runs\n * past 30s, so the old deadline expired before postgres bound 5432 — setup's seed\n * then hit `DatabaseNotReachable` (P1001) and the whole dev env came up broken.\n */\n\nexport interface SidecarTarget {\n  /** Human label for logs (e.g. \"postgres\"). */\n  name: string;\n  host: string;\n  port: number;\n  /** Per-target readiness deadline in ms (overridden by an explicit opts.timeoutMs). */\n  timeoutMs?: number;\n}\n\nexport interface WaitForSidecarsOptions {\n  /** Env to read targets from. Defaults to `process.env`. */\n  env?: NodeJS.ProcessEnv;\n  /** Progress sink (one line per message, no trailing newline). */\n  onLog?: (message: string) => void;\n  /** Force a single deadline for every target, overriding per-target defaults. */\n  timeoutMs?: number;\n  /** Delay between probe attempts in ms. */\n  pollIntervalMs?: number;\n  /** TCP probe seam — returns true once the target accepts a connection. */\n  probe?: (target: SidecarTarget) => Promise<boolean>;\n  /** Whether to create the lazy sidecar start marker before probing. Defaults to true. */\n  startLazy?: boolean;\n}\n\nconst POSTGRES_TIMEOUT_MS = 120_000;\nconst FIREBASE_TIMEOUT_MS = 60_000;\nconst FALLBACK_TIMEOUT_MS = 30_000;\nconst DEFAULT_POLL_INTERVAL_MS = 1_000;\nconst DEFAULT_PROBE_TIMEOUT_MS = 2_000;\n\nconst POSTGRES_DEFAULT_PORT = 5432;\nconst FIREBASE_DEFAULT_PORT = 9099;\n\nexport async function startLazySidecars(\n  env: NodeJS.ProcessEnv,\n  onLog: (message: string) => void,\n): Promise<void> {\n  const markerPath = env.CONVEYOR_SIDECAR_START_FILE;\n  if (!markerPath) return;\n\n  try {\n    await mkdir(dirname(markerPath), { recursive: true });\n    await writeFile(markerPath, \"start\\n\", \"utf8\");\n    onLog(\"Started lazy sidecars\");\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    onLog(`WARNING: failed to start lazy sidecars: ${message}`);\n  }\n}\n\nfunction parseHostPort(value: string, defaultPort: number): { host: string; port: number } | null {\n  const trimmed = value.trim().replace(/^[a-z]+:\\/\\//i, \"\");\n  if (!trimmed) return null;\n  const idx = trimmed.lastIndexOf(\":\");\n  if (idx === -1) {\n    return { host: trimmed, port: defaultPort };\n  }\n  const host = trimmed.slice(0, idx) || \"localhost\";\n  const port = Number(trimmed.slice(idx + 1));\n  return { host, port: Number.isFinite(port) ? port : defaultPort };\n}\n\n/**\n * Resolve the sidecar targets the agent should wait for from env. Mirrors the\n * entrypoint's conditions: postgres when `DATABASE_URL` is set, firebase auth\n * emulator when `FIREBASE_AUTH_EMULATOR_HOST` is set.\n */\nexport function resolveSidecarTargets(env: NodeJS.ProcessEnv = process.env): SidecarTarget[] {\n  const targets: SidecarTarget[] = [];\n\n  const databaseUrl = env.DATABASE_URL;\n  if (databaseUrl) {\n    try {\n      const url = new URL(databaseUrl);\n      const host = url.hostname || \"localhost\";\n      const port = url.port ? Number(url.port) : POSTGRES_DEFAULT_PORT;\n      if (Number.isFinite(port)) {\n        targets.push({ name: \"postgres\", host, port, timeoutMs: POSTGRES_TIMEOUT_MS });\n      }\n    } catch {\n      // Unparseable DATABASE_URL — skip rather than crash the setup path.\n    }\n  }\n\n  const firebaseHost = env.FIREBASE_AUTH_EMULATOR_HOST;\n  if (firebaseHost) {\n    const parsed = parseHostPort(firebaseHost, FIREBASE_DEFAULT_PORT);\n    if (parsed) {\n      targets.push({\n        name: \"firebase auth emulator\",\n        host: parsed.host,\n        port: parsed.port,\n        timeoutMs: FIREBASE_TIMEOUT_MS,\n      });\n    }\n  }\n\n  return targets;\n}\n\nfunction defaultProbe(target: SidecarTarget): Promise<boolean> {\n  return new Promise((resolve) => {\n    let settled = false;\n    const socket = net.createConnection({ host: target.host, port: target.port });\n    const done = (ok: boolean) => {\n      if (settled) return;\n      settled = true;\n      socket.destroy();\n      resolve(ok);\n    };\n    socket.once(\"connect\", () => done(true));\n    socket.once(\"error\", () => done(false));\n    socket.setTimeout(DEFAULT_PROBE_TIMEOUT_MS, () => done(false));\n  });\n}\n\nconst delay = (ms: number): Promise<void> =>\n  new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n\nasync function waitForTarget(\n  target: SidecarTarget,\n  opts: {\n    onLog: (message: string) => void;\n    timeoutMs?: number;\n    pollIntervalMs: number;\n    probe: (target: SidecarTarget) => Promise<boolean>;\n  },\n): Promise<void> {\n  const { onLog, pollIntervalMs, probe } = opts;\n  const timeoutMs = opts.timeoutMs ?? target.timeoutMs ?? FALLBACK_TIMEOUT_MS;\n  const deadline = Date.now() + timeoutMs;\n  onLog(`Waiting for ${target.name} on ${target.host}:${target.port}...`);\n\n  while (true) {\n    if (await probe(target)) {\n      onLog(`${target.name} is ready`);\n      return;\n    }\n    if (Date.now() >= deadline) {\n      onLog(\n        `WARNING: ${target.name} not ready after ${Math.round(timeoutMs / 1000)}s, continuing anyway`,\n      );\n      return;\n    }\n    await delay(pollIntervalMs);\n  }\n}\n\n/**\n * Block until every configured sidecar is reachable (or its per-target deadline\n * elapses). Resolves immediately when no sidecar env vars are set. Never throws —\n * a timed-out sidecar logs a warning and is treated as \"continue anyway\".\n */\nexport async function waitForSidecars(opts: WaitForSidecarsOptions = {}): Promise<void> {\n  const {\n    env = process.env,\n    onLog = () => {},\n    timeoutMs,\n    pollIntervalMs = DEFAULT_POLL_INTERVAL_MS,\n    probe = defaultProbe,\n    startLazy = true,\n  } = opts;\n\n  if (startLazy) {\n    await startLazySidecars(env, onLog);\n  }\n\n  const targets = resolveSidecarTargets(env);\n  if (targets.length === 0) return;\n\n  await Promise.all(\n    targets.map((target) => waitForTarget(target, { onLog, timeoutMs, pollIntervalMs, probe })),\n  );\n}\n","// Defense-in-depth startup check. The authoritative guarantee that a session is\n// bound to the right task lives server-side (requireTaskAuth + the Postgres\n// partial-unique index on active CodespaceSessions). This check exists so that\n// if those invariants ever regress, a human sees a loud WARN immediately\n// instead of the symptoms SEC-9 produced (multiple agents silently clobbering\n// the same branch).\nexport interface SessionIdentityLogger {\n  warn(message: string, data?: Record<string, unknown>): void;\n  info?(message: string, data?: Record<string, unknown>): void;\n}\n\nexport interface CheckSessionTaskIdentityParams {\n  sessionId: string | undefined;\n  taskId: string;\n  fetchSessionTaskId: (sessionId: string) => Promise<string>;\n  logger: SessionIdentityLogger;\n}\n\nexport async function checkSessionTaskIdentity(\n  params: CheckSessionTaskIdentityParams,\n): Promise<\"match\" | \"mismatch\" | \"skipped\" | \"error\"> {\n  const { sessionId, taskId, fetchSessionTaskId, logger } = params;\n  if (!sessionId || sessionId === taskId) return \"skipped\";\n  let sessionTaskId: string;\n  try {\n    sessionTaskId = await fetchSessionTaskId(sessionId);\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    logger.warn(\"Could not verify session/task identity — continuing (defense-in-depth only)\", {\n      sessionId,\n      taskId,\n      error: message,\n    });\n    return \"error\";\n  }\n  if (sessionTaskId !== taskId) {\n    logger.warn(\n      \"!!! CONVEYOR_SESSION_ID is bound to a different task than CONVEYOR_TASK_ID — server-side guards should still block mutations, but this indicates a misconfiguration or replayed token.\",\n      { sessionId, envTaskId: taskId, sessionTaskId },\n    );\n    return \"mismatch\";\n  }\n  return \"match\";\n}\n","/**\n * Structured pod-exit log payload. The control plane (workspace reconciler) can\n * only ever infer *that* an agent stopped — it sees a stale heartbeat and marks\n * the session Stranded/Ended. It cannot see *why*. This log closes that gap from\n * the pod side: emitted at every catchable exit path so the claudespace pod logs\n * record the cause (teardown signal vs clean finish vs crash) alongside the\n * `sessionId` that joins to the API's `session_stranded` / reconcile logs.\n *\n * Caveat: an OOMKill (SIGKILL / 137) is uncatchable, so it never reaches here —\n * those are diagnosed from GKE kernel OOM logs, not this line.\n */\n// - signal: SIGTERM/SIGINT — teardown or a reaper asked us to stop\n// - clean: runner.run() resolved normally\n// - error: runner finalState=error, or run() rejected\n// - force_timeout: graceful-shutdown watchdog fired\nexport type AgentExitReason =\n  | \"signal\"\n  | \"clean\"\n  | \"error\"\n  | \"uncaught_exception\"\n  | \"unhandled_rejection\"\n  | \"force_timeout\";\n\nexport interface AgentExitIdentity {\n  sessionId?: string | undefined;\n  taskId?: string | undefined;\n  workspaceId?: string | undefined;\n  runnerMode?: string | undefined;\n}\n\nexport interface AgentExitLog extends AgentExitIdentity {\n  event: \"agent_exit\";\n  reason: AgentExitReason;\n  exitCode: number;\n  signal?: string;\n  finalState?: string;\n  uptimeSec: number;\n}\n\n/** Clean shutdowns are routine (info); every other exit is worth a warn so it\n * surfaces in severity-filtered log queries. */\nexport function exitLogLevel(reason: AgentExitReason): \"info\" | \"warn\" {\n  return reason === \"clean\" ? \"info\" : \"warn\";\n}\n\n/**\n * Build the `agent_exit` payload, dropping any undefined optional/identity keys\n * so the serialized log line stays tidy (no `\"workspaceId\":undefined` noise).\n */\nexport function buildAgentExitLog(args: {\n  reason: AgentExitReason;\n  exitCode: number;\n  uptimeSec: number;\n  signal?: string | undefined;\n  finalState?: string | undefined;\n  identity?: AgentExitIdentity | undefined;\n}): AgentExitLog {\n  const log: AgentExitLog = {\n    event: \"agent_exit\",\n    reason: args.reason,\n    exitCode: args.exitCode,\n    uptimeSec: Math.round(args.uptimeSec * 10) / 10,\n  };\n  if (args.signal !== undefined) log.signal = args.signal;\n  if (args.finalState !== undefined) log.finalState = args.finalState;\n  const id = args.identity;\n  if (id) {\n    if (id.sessionId !== undefined) log.sessionId = id.sessionId;\n    if (id.taskId !== undefined) log.taskId = id.taskId;\n    if (id.workspaceId !== undefined) log.workspaceId = id.workspaceId;\n    if (id.runnerMode !== undefined) log.runnerMode = id.runnerMode;\n  }\n  return log;\n}\n","/**\n * Task-less pod identity detection (Claudespace v3 project runners AND adhoc\n * scratch pods).\n *\n * A v3 task-less pod's bootstrap bundle carries a session JWT with\n * {projectId, workspaceId, sessionId, role} and NO taskId claim; the entrypoint\n * exports CONVEYOR_PROJECT_ID / CONVEYOR_SESSION_ID / CONVEYOR_WORKSPACE_ID from\n * the claims, does NOT export CONVEYOR_TASK_ID, and sets CONVEYOR_MODE to \"pm\"\n * (project runner) or \"adhoc\" (interactive scratch TUI). Both share this\n * identity shape — cli.ts branches on CONVEYOR_MODE afterward to pick the\n * runner. Every condition below is required — anything else falls through to\n * the task-runner path, which fail-closed exits without a task id.\n *\n * `workspaceId` is the stable `Workspace` row id — unlike `sessionId` (the\n * `WorkspaceSession` row), it survives a sleep/wake cycle: a user-initiated\n * wake mints a brand-new writer `WorkspaceSession` (fresh-session semantics,\n * see `ensure-adhoc.ts`), so `sessionId` changes on every wake. The adhoc\n * runner keys its Claude session lineage on `workspaceId` for exactly this\n * reason — keying on `sessionId` would never resume the prior transcript.\n */\n\nexport interface ProjectRunnerIdentity {\n  projectId: string;\n  sessionId: string;\n  workspaceId: string;\n  taskToken: string;\n}\n\nexport function resolveProjectRunnerIdentity(\n  env: Record<string, string | undefined>,\n): ProjectRunnerIdentity | null {\n  // A task id always wins: this is a task pod, never a project runner.\n  if (env.CONVEYOR_TASK_ID) return null;\n  if (!env.CONVEYOR_TASK_TOKEN) return null;\n  if (!env.CONVEYOR_PROJECT_ID || !env.CONVEYOR_SESSION_ID || !env.CONVEYOR_WORKSPACE_ID) {\n    return null;\n  }\n  // Task-less identity is shared by the project runner (\"pm\") and the adhoc\n  // scratch-pod TUI (\"adhoc\"); cli.ts branches on CONVEYOR_MODE afterward to\n  // pick the runner. Any OTHER mode (reader/review/task/absent) is not a valid\n  // task-less identity. NOTE: the adhoc branch in cli.ts gates on THIS resolver\n  // returning non-null AND CONVEYOR_MODE === \"adhoc\" — omitting \"adhoc\" here\n  // makes that branch unreachable and crash-loops every adhoc pod at the\n  // task-mode fall-through.\n  if (env.CONVEYOR_MODE !== \"pm\" && env.CONVEYOR_MODE !== \"adhoc\") return null;\n\n  return {\n    projectId: env.CONVEYOR_PROJECT_ID,\n    sessionId: env.CONVEYOR_SESSION_ID,\n    workspaceId: env.CONVEYOR_WORKSPACE_ID,\n    taskToken: env.CONVEYOR_TASK_TOKEN,\n  };\n}\n","/**\n * ProjectSessionRunner — the task-less PROJECT pod agent loop (Claudespace v3\n * project runners).\n *\n * What a project agent does today: connect, register its WorkspaceSession\n * (connectAgent), heartbeat (lease renewal via the server's v3 fallthrough),\n * and idle awaiting project-scoped messages. It deliberately does NOT run the\n * task-shaped SessionRunner lifecycle — getTaskContext, git branch sync, the\n * QueryBridge prompt loop and WIP flushing are all keyed on a Task, and the\n * server-side pm-conversation surface for project workspaces does not exist\n * yet (project chat is served by the server-side ProjectAgentService\n * responder). When that surface lands (project context RPC + project-keyed\n * message routing), this runner grows the message->query loop; until then an\n * inbound message is logged and acknowledged as activity only.\n */\nimport {\n  AgentConnection,\n  type AgentConnectionConfig,\n  type IncomingMessage,\n} from \"../connection/agent-connection.js\";\nimport { Lifecycle, DEFAULT_LIFECYCLE_CONFIG, type LifecycleConfig } from \"./lifecycle.js\";\nimport { sampleKeyUsage } from \"../execution/usage-sampler.js\";\n\nexport interface ProjectSessionRunnerConfig {\n  connection: AgentConnectionConfig;\n  projectId: string;\n  lifecycle?: Partial<LifecycleConfig>;\n}\n\nexport interface ProjectSessionRunnerCallbacks {\n  onEvent?: (event: Record<string, unknown>) => void;\n}\n\n/** The AgentConnection surface the project runner uses (injectable for tests). */\nexport interface ProjectRunnerConnection {\n  connect(): Promise<void>;\n  disconnect(): void;\n  call(\n    method: \"connectAgent\",\n    payload: { sessionId: string },\n  ): Promise<{ sessionId: string; taskId: string | null; pendingMessages: unknown[] }>;\n  sendEvent(event: { type: string; [key: string]: unknown }): void;\n  sendHeartbeat(): void;\n  emitStatus(status: string): Promise<void>;\n  onMessage(callback: (msg: IncomingMessage) => void): void;\n  onStop(callback: () => void): void;\n  refreshTaskTokenFromBootstrap(): Promise<boolean>;\n}\n\nexport class ProjectSessionRunner {\n  readonly connection: ProjectRunnerConnection;\n  readonly lifecycle: Lifecycle;\n\n  private readonly config: ProjectSessionRunnerConfig;\n  private readonly callbacks: ProjectSessionRunnerCallbacks;\n  private stopped = false;\n  private stopResolver: (() => void) | null = null;\n  private _finalState: \"finished\" | \"error\" | null = null;\n\n  constructor(\n    config: ProjectSessionRunnerConfig,\n    callbacks: ProjectSessionRunnerCallbacks = {},\n    connection?: ProjectRunnerConnection,\n  ) {\n    this.config = config;\n    this.callbacks = callbacks;\n    this.connection = connection ?? new AgentConnection(config.connection);\n    this.lifecycle = new Lifecycle(\n      // No git flush: the project runner does not (yet) mutate the checkout,\n      // and the WIP snapshot machinery is branch/task-shaped.\n      { ...DEFAULT_LIFECYCLE_CONFIG, gitFlushIntervalMs: 0, ...config.lifecycle },\n      {\n        onHeartbeat: () => this.connection.sendHeartbeat(),\n        onIdleTimeout: () => {\n          process.stderr.write(\"[conveyor-agent] Project runner idle timeout, shutting down\\n\");\n          this.requestStop();\n        },\n        onDormantTimeout: () => this.requestStop(),\n        // v3 credential refresh: re-poll the pod bootstrap route (session JWT,\n        // GitHub token, keys are all swapped in place). The task-scoped\n        // refreshGithubToken RPC does not apply to a task-less session.\n        onTokenRefresh: () => void this.connection.refreshTaskTokenFromBootstrap().catch(() => {}),\n        onGitFlush: () => {},\n        onUsageSample: () => void this.sampleAndReportKeyUsage(),\n      },\n    );\n  }\n\n  get finalState(): \"finished\" | \"error\" | null {\n    return this._finalState;\n  }\n\n  get isStopped(): boolean {\n    return this.stopped;\n  }\n\n  /** Connect, register the session, then idle until stopped or idle-timeout. */\n  async run(): Promise<void> {\n    try {\n      await this.connection.connect();\n      this.connection.sendEvent({\n        type: \"connected\",\n        sessionId: this.config.connection.sessionId,\n        projectId: this.config.projectId,\n      });\n\n      this.connection.onStop(() => this.requestStop());\n      this.connection.onMessage((msg) => this.handleMessage(msg));\n      this.lifecycle.startHeartbeat();\n      this.lifecycle.startTokenRefresh();\n      this.lifecycle.startUsageSample();\n\n      // Join the session room + activate the lease (server v3 fallthrough).\n      await this.connection.call(\"connectAgent\", {\n        sessionId: this.config.connection.sessionId,\n      });\n\n      process.stderr.write(\n        `[conveyor-agent] Project runner connected (project: ${this.config.projectId}) — idling\\n`,\n      );\n      await this.connection.emitStatus(\"idle\");\n      this.callbacks.onEvent?.({ type: \"project_runner_idle\", projectId: this.config.projectId });\n\n      this.lifecycle.startIdleTimer();\n      await this.waitUntilStopped();\n      this._finalState = \"finished\";\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      process.stderr.write(`[conveyor-agent] Project runner failed: ${message}\\n`);\n      this.connection.sendEvent({ type: \"error\", message });\n      this._finalState = \"error\";\n    } finally {\n      this.shutdown();\n    }\n  }\n\n  /**\n   * The pm-conversation surface is a follow-up: no server path routes chat to\n   * a task-less session yet, so any message that does arrive is surfaced in\n   * the logs and treated as activity (idle timer restarts) — never executed.\n   */\n  private handleMessage(msg: IncomingMessage): void {\n    const preview = msg.content.length > 120 ? `${msg.content.slice(0, 120)}…` : msg.content;\n    process.stderr.write(\n      `[conveyor-agent] Project runner received message (pm surface not wired yet): \"${preview.replace(/\\n/g, \"\\\\n\")}\"\\n`,\n    );\n    this.callbacks.onEvent?.({ type: \"project_message_received\", content: msg.content });\n    if (!this.stopped) this.lifecycle.startIdleTimer();\n  }\n\n  /** External stop (SIGTERM/SIGINT or server session:stop). */\n  stop(): void {\n    this.requestStop();\n  }\n\n  private requestStop(): void {\n    if (this.stopped) return;\n    this.stopped = true;\n    if (this.stopResolver) {\n      const resolve = this.stopResolver;\n      this.stopResolver = null;\n      resolve();\n    }\n  }\n\n  private waitUntilStopped(): Promise<void> {\n    if (this.stopped) return Promise.resolve();\n    return new Promise<void>((resolve) => {\n      this.stopResolver = resolve;\n    });\n  }\n\n  /** Report the running subscription key's rate-limit utilization (same path as\n   *  the task runner). Best-effort — never throws, no-op without an OAuth token. */\n  private async sampleAndReportKeyUsage(): Promise<void> {\n    if (this.stopped) return;\n    const samples = await sampleKeyUsage(process.env.CLAUDE_CODE_OAUTH_TOKEN);\n    for (const sample of samples) {\n      this.connection.sendEvent({\n        type: \"rate_limit_update\",\n        rateLimitType: sample.rateLimitType,\n        utilization: sample.utilization,\n        status: sample.status,\n      });\n    }\n  }\n\n  private shutdown(): void {\n    this.stopped = true;\n    this.lifecycle.destroy();\n    this.connection.sendEvent({ type: \"shutdown\", reason: this._finalState ?? \"finished\" });\n    this.connection.disconnect();\n  }\n}\n","/**\n * TuiAdapter — the per-TUI seam inside the PTY harness. PtySession/PtyHarness\n * own the generic machinery (node-pty spawn, output coalescing, relay bridge,\n * park/reuse, teardown); everything specific to ONE interactive CLI (binary,\n * argv, credential materialization, prompt encoding, exit diagnostics) lives\n * behind this interface. Claude's structured-event machinery (transcript\n * tailer + hook socket + tool servers) stays in PtySession, gated on\n * `capabilities.structuredEvents` — promoting it into the adapter waits for a\n * second structured-events adapter.\n */\nimport { accessSync, constants, statSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type { TuiKind } from \"@project/shared\";\nimport type { HarnessQueryOptions } from \"../../types.js\";\n\nexport { TUI_KINDS } from \"@project/shared\";\nexport type { TuiKind } from \"@project/shared\";\n\nexport interface TuiCapabilities {\n  /** Can a later spawn resume a prior session lineage (across sleeps)? */\n  resume: boolean;\n  /** Does a trusted structured-event source exist (transcript/hooks)?\n   *  Gates PtySession's tailer/hook-socket/tool-server/settings machinery,\n   *  the submit nudge, and the plan-dialog auto-accept. */\n  structuredEvents: boolean;\n  /** Is paste-without-submit prompt delivery meaningful for this TUI? */\n  prefill: boolean;\n  /** Can typing into a parked TUI be detected (passive turns)? */\n  passiveTurns: boolean;\n}\n\nexport interface TuiSpawnInput {\n  options: HarnessQueryOptions;\n  resume?: string;\n  /** Per-process resources allocated by PtySession for structured-events\n   *  adapters only; absent otherwise. */\n  settingsPath?: string;\n  mcpConfigPath?: string;\n  hookSocketPath?: string;\n}\n\nexport interface TuiSpawnSpec {\n  file: string;\n  args: string[];\n  env: Record<string, string>;\n}\n\nexport interface TuiFingerprintInput {\n  model: string;\n  permissionMode: \"plan\" | \"bypassPermissions\";\n  appendSystemPrompt?: string;\n  cwd: string;\n}\n\n/** Thrown by resolveBinary when the TUI cannot run here — the fail-loud path. */\nexport class TuiUnavailableError extends Error {\n  constructor(\n    public readonly tui: TuiKind,\n    message: string,\n  ) {\n    super(message);\n    this.name = \"TuiUnavailableError\";\n  }\n}\n\nexport interface TuiAdapter {\n  readonly id: TuiKind;\n  readonly capabilities: TuiCapabilities;\n  /** Resolve the executable. Throws TuiUnavailableError when it cannot run. */\n  resolveBinary(env?: NodeJS.ProcessEnv): string;\n  /** Full spawn spec (file + argv + child env) for node-pty. */\n  buildSpawn(input: TuiSpawnInput): TuiSpawnSpec;\n  /** One-time per-process environment prep before first spawn (credential\n   *  files, onboarding seeds). Never on reuse. Must not throw on best-effort\n   *  IO failures — log and continue, matching ensureClaudeCredentials. */\n  prepareEnvironment(opts: { cwd: string; env?: NodeJS.ProcessEnv }): Promise<void>;\n  /** Park/reuse invalidation key. MUST be stable for identical inputs. */\n  spawnFingerprint(input: TuiFingerprintInput): string;\n  /** Encode prompt text into the stdin bytes for this TUI's input box. */\n  encodePromptBytes(text: string): string;\n  /** errors[] for a process that died before producing a result. */\n  buildExitErrors(exitCode: number, rawOutput: string): string[];\n}\n\nfunction isExecutable(path: string): boolean {\n  try {\n    if (!statSync(path).isFile()) return false;\n    accessSync(path, constants.X_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Minimal `which`: locate `binary` on env.PATH (or verify a given path when it\n * contains a slash). Returns null when not found/executable — callers turn\n * that into TuiUnavailableError.\n */\nexport function findOnPath(binary: string, env: NodeJS.ProcessEnv = process.env): string | null {\n  if (binary.includes(\"/\")) {\n    return isExecutable(binary) ? binary : null;\n  }\n  for (const dir of (env.PATH ?? \"\").split(\":\")) {\n    if (!dir) continue;\n    const candidate = join(dir, binary);\n    if (isExecutable(candidate)) return candidate;\n  }\n  return null;\n}\n","/**\n * OpenCodeTuiAdapter — drives the `opencode` TUI (https://opencode.ai) as a\n * raw relayed terminal. v1 declares NO structured events (no trusted\n * transcript/hook source is wired), no prefill, no passive turns, and no\n * resume (--continue behavior on an empty state dir is unverified; enable\n * after live verification). Auth is env-based: the bootstrap bundle delivers\n * CONVEYOR_AGENT_KEY/_PROVIDER/_MODEL and buildSpawn maps them to the\n * provider-native env var so the key never needs an on-disk auth file.\n */\nimport { buildPromptBytes, inheritedEnv } from \"../pty-support.js\";\nimport { cleanTerminalOutput } from \"../spawn-args.js\";\nimport {\n  findOnPath,\n  TuiUnavailableError,\n  type TuiAdapter,\n  type TuiCapabilities,\n  type TuiFingerprintInput,\n  type TuiSpawnInput,\n  type TuiSpawnSpec,\n} from \"./types.js\";\n\n/** provider → the env var its SDK/CLI reads natively. */\nconst PROVIDER_KEY_ENV: Record<string, string> = {\n  openai: \"OPENAI_API_KEY\",\n  anthropic: \"ANTHROPIC_API_KEY\",\n};\n\nexport class OpenCodeTuiAdapter implements TuiAdapter {\n  readonly id = \"opencode\" as const;\n  readonly capabilities: TuiCapabilities = {\n    resume: false,\n    structuredEvents: false,\n    prefill: false,\n    passiveTurns: false,\n  };\n\n  constructor(private readonly env: NodeJS.ProcessEnv = process.env) {}\n\n  resolveBinary(env: NodeJS.ProcessEnv = this.env): string {\n    const override = env.CONVEYOR_OPENCODE_BIN;\n    const found = override ? findOnPath(override, env) : findOnPath(\"opencode\", env);\n    if (!found) {\n      throw new TuiUnavailableError(\n        \"opencode\",\n        \"The opencode CLI is not available in this environment. It must be baked \" +\n          \"into the pod image (see Dockerfile.base) — re-run Build Image for this \" +\n          \"project, or set CONVEYOR_OPENCODE_BIN to its absolute path.\",\n      );\n    }\n    return found;\n  }\n\n  buildSpawn(input: TuiSpawnInput): TuiSpawnSpec {\n    const env = { ...inheritedEnv() };\n    delete env.CONVEYOR_AGENT_KEY;\n    const key = this.env.CONVEYOR_AGENT_KEY;\n    const provider = this.env.CONVEYOR_AGENT_PROVIDER ?? \"openai\";\n    const keyEnvVar = PROVIDER_KEY_ENV[provider];\n    if (key && keyEnvVar) env[keyEnvVar] = key;\n\n    const model = this.env.CONVEYOR_AGENT_MODEL ?? input.options.model;\n    const args: string[] = [];\n    if (model) args.push(\"--model\", model.includes(\"/\") ? model : `${provider}/${model}`);\n    return { file: this.resolveBinary(), args, env };\n  }\n\n  async prepareEnvironment(): Promise<void> {\n    // Env-based auth: nothing to materialize. Session state persistence is the\n    // entrypoint's job (GCS-FUSE symlinks for ~/.local/share/opencode).\n  }\n\n  spawnFingerprint(input: TuiFingerprintInput): string {\n    return JSON.stringify([\"opencode\", input.model, input.cwd]);\n  }\n\n  encodePromptBytes(text: string): string {\n    // Bracketed paste — standard for modern TUIs; revisit if live verification\n    // shows opencode's input mishandles it.\n    return buildPromptBytes(text);\n  }\n\n  buildExitErrors(exitCode: number, rawOutput: string): string[] {\n    const errors = [`opencode exited (code ${exitCode}) without a result`];\n    const tail = cleanTerminalOutput(rawOutput);\n    if (tail) errors.push(`Last terminal output before exit:\\n${tail}`);\n    return errors;\n  }\n}\n","import type { TuiAdapter, TuiKind } from \"./types.js\";\nimport { ClaudeTuiAdapter } from \"./claude.js\";\nimport { OpenCodeTuiAdapter } from \"./opencode.js\";\n\nexport * from \"./types.js\";\nexport { ClaudeTuiAdapter } from \"./claude.js\";\nexport { OpenCodeTuiAdapter } from \"./opencode.js\";\n\n/** Adapter factory. */\nexport function resolveTuiAdapter(kind: TuiKind = \"claude-code\"): TuiAdapter {\n  switch (kind) {\n    case \"claude-code\":\n      return new ClaudeTuiAdapter();\n    case \"opencode\":\n      return new OpenCodeTuiAdapter();\n    default:\n      throw new Error(`Unknown TUI kind: ${kind as string}`);\n  }\n}\n","/**\n * AdhocSessionRunner — the task-less USER SCRATCH pod agent loop (Sessions view\n * \"Launch ad-hoc session\"). Claudespace v3, `Workspace.purpose = \"adhoc\"`.\n *\n * Unlike the ProjectSessionRunner (autonomous pm) it runs NO autonomous loop:\n * it spawns the `claude` CLI under a pseudo-terminal in interactive/prefill mode\n * (empty input box, no auto-submit) and relays raw terminal I/O to the S2 relay,\n * so the web Sessions terminal (S5) renders it and forwards keystrokes back. The\n * human drives it directly — there is no task, plan, or Conveyor MCP tool\n * surface. Connect / register / heartbeat / idle are shared with the project\n * runner; the difference is the interactive PTY spawn.\n *\n * Idle-sleep is server-owned (decideFate + activity/tunnel holds): an idle\n * adhoc pod sleeps after the idle window like any workspace; the human wakes it\n * from the Sessions list. The agent's own idle timer is the secondary backstop.\n */\nimport { AgentConnection, type AgentConnectionConfig } from \"../connection/agent-connection.js\";\nimport { Lifecycle, DEFAULT_LIFECYCLE_CONFIG, type LifecycleConfig } from \"./lifecycle.js\";\nimport { resolveSessionStart } from \"../execution/query-executor.js\";\nimport { sampleKeyUsage } from \"../execution/usage-sampler.js\";\nimport { PtyHarness } from \"../harness/pty/index.js\";\nimport { resolveTuiAdapter } from \"../harness/pty/adapters/index.js\";\nimport { TUI_KINDS, type TuiKind } from \"../harness/pty/adapters/types.js\";\nimport type { AgentHarness, HarnessQueryOptions, PtyBridge } from \"../harness/types.js\";\nimport { DEFAULT_SONNET_MODEL, type PtyChatEventPayload } from \"@project/shared\";\n\nconst ADHOC_SYSTEM_NOTE =\n  \"You are running in an ad-hoc Conveyor scratch pod — an interactive terminal \" +\n  \"on the project's repository checked out at its default branch. There is no \" +\n  \"task or plan; help the human with whatever they ask directly.\";\n\nexport interface AdhocSessionRunnerConfig {\n  connection: AgentConnectionConfig;\n  projectId: string;\n  /**\n   * Stable `Workspace` row id — the Claude session lineage key. Deliberately\n   * NOT `connection.sessionId`: that's the `WorkspaceSession` row, which is\n   * re-minted (fresh-session semantics) on every user-initiated wake, so\n   * keying resume on it would never find the prior GCS-FUSE transcript.\n   */\n  workspaceId: string;\n  /** Repo checkout the interactive CLI runs in. */\n  workspaceDir: string;\n  /** Model override; falls back to CONVEYOR_ADHOC_MODEL env, then the default. */\n  model?: string;\n  lifecycle?: Partial<LifecycleConfig>;\n}\n\nexport interface AdhocSessionRunnerCallbacks {\n  onEvent?: (event: Record<string, unknown>) => void;\n}\n\n/** AgentConnection surface the adhoc runner needs (injectable for tests). */\nexport interface AdhocRunnerConnection {\n  connect(): Promise<void>;\n  disconnect(): void;\n  call(method: \"connectAgent\", payload: { sessionId: string }): Promise<unknown>;\n  sendEvent(event: { type: string; [key: string]: unknown }): void;\n  sendHeartbeat(): void;\n  emitStatus(status: string): Promise<void>;\n  onStop(callback: () => void): void;\n  refreshTaskTokenFromBootstrap(): Promise<boolean>;\n  sendPtyOutput(data: string, dims?: { cols: number; rows: number }): void;\n  sendPtyChatEvent(event: PtyChatEventPayload): void;\n  onPtyInput(handler: (data: string) => void): () => void;\n  onPtyResize(handler: (cols: number, rows: number) => void): () => void;\n}\n\n/** Which TUI this adhoc pod runs — from the bootstrap bundle's CONVEYOR_TUI.\n *  Unknown values throw (fail loudly): a typo'd config must not silently run\n *  Claude. */\nexport function resolveAdhocTui(env: NodeJS.ProcessEnv): TuiKind {\n  const raw = env.CONVEYOR_TUI ?? \"claude-code\";\n  if ((TUI_KINDS as readonly string[]).includes(raw)) return raw as TuiKind;\n  throw new Error(`Unknown TUI \"${raw}\" in CONVEYOR_TUI (expected: ${TUI_KINDS.join(\", \")})`);\n}\n\n/** Adapt an AdhocRunnerConnection into the harness-neutral PtyBridge. */\nexport function buildAdhocPtyBridge(connection: AdhocRunnerConnection): PtyBridge {\n  return {\n    sendOutput: (data, dims) => connection.sendPtyOutput(data, dims),\n    sendChatEvent: (event) => connection.sendPtyChatEvent(event),\n    onInput: (handler) => connection.onPtyInput(handler),\n    onResize: (handler) => connection.onPtyResize(handler),\n  };\n}\n\n/** The interactive-spawn options for an ad-hoc scratch TUI (no task context). */\nexport function buildAdhocQueryOptions(\n  workspaceDir: string,\n  model: string,\n  abortController: AbortController,\n  // Deterministic session start (fresh `sessionId` or `resume` target). Without\n  // one, PtySession.start() throws \"requires options.sessionId or a resume\n  // target\" and the pool crash-loops the runner — the interactive PTY never\n  // spawns. Mutually exclusive: exactly one of the two is ever set.\n  session?: { sessionId?: string; resume?: string },\n): HarnessQueryOptions {\n  return {\n    model,\n    systemPrompt: { type: \"preset\", preset: \"claude_code\", append: ADHOC_SYSTEM_NOTE },\n    appendSystemPrompt: ADHOC_SYSTEM_NOTE,\n    cwd: workspaceDir,\n    // Human-driven interactive shell — no plan-mode gating, no Conveyor tools.\n    permissionMode: \"bypassPermissions\",\n    allowDangerouslySkipPermissions: true,\n    tools: { type: \"preset\", preset: \"claude_code\" },\n    mcpServers: {},\n    settingSources: [\"user\", \"project\"],\n    // Empty box, unsubmitted: the human types the first prompt themselves.\n    promptDelivery: \"prefill\",\n    abortController,\n    ...(session?.sessionId ? { sessionId: session.sessionId } : {}),\n    ...(session?.resume ? { resume: session.resume } : {}),\n  };\n}\n\nexport class AdhocSessionRunner {\n  readonly connection: AdhocRunnerConnection;\n  readonly lifecycle: Lifecycle;\n  private readonly harness: AgentHarness;\n\n  private readonly config: AdhocSessionRunnerConfig;\n  private readonly callbacks: AdhocSessionRunnerCallbacks;\n  private readonly abortController = new AbortController();\n  private stopped = false;\n  private stopResolver: (() => void) | null = null;\n  private _finalState: \"finished\" | \"error\" | null = null;\n\n  constructor(\n    config: AdhocSessionRunnerConfig,\n    callbacks: AdhocSessionRunnerCallbacks = {},\n    deps?: { connection?: AdhocRunnerConnection; harness?: AgentHarness },\n  ) {\n    this.config = config;\n    this.callbacks = callbacks;\n    this.connection = deps?.connection ?? new AgentConnection(config.connection);\n    this.harness =\n      deps?.harness ??\n      new PtyHarness(\n        buildAdhocPtyBridge(this.connection),\n        resolveTuiAdapter(resolveAdhocTui(process.env)),\n      );\n    this.lifecycle = new Lifecycle(\n      // No git flush: the WIP snapshot machinery is branch/task-shaped; the human\n      // commits/pushes explicitly from the interactive shell.\n      { ...DEFAULT_LIFECYCLE_CONFIG, gitFlushIntervalMs: 0, ...config.lifecycle },\n      {\n        onHeartbeat: () => this.connection.sendHeartbeat(),\n        onIdleTimeout: () => this.requestStop(),\n        onDormantTimeout: () => this.requestStop(),\n        onTokenRefresh: () => void this.connection.refreshTaskTokenFromBootstrap().catch(() => {}),\n        onGitFlush: () => {},\n        onUsageSample: () => void this.sampleAndReportKeyUsage(),\n      },\n    );\n  }\n\n  get finalState(): \"finished\" | \"error\" | null {\n    return this._finalState;\n  }\n\n  get isStopped(): boolean {\n    return this.stopped;\n  }\n\n  /** Connect, register, spawn the interactive TUI, and relay it until stopped. */\n  async run(): Promise<void> {\n    try {\n      await this.connection.connect();\n      this.connection.sendEvent({\n        type: \"connected\",\n        sessionId: this.config.connection.sessionId,\n        projectId: this.config.projectId,\n      });\n      this.connection.onStop(() => this.requestStop());\n      this.lifecycle.startHeartbeat();\n      this.lifecycle.startTokenRefresh();\n      this.lifecycle.startUsageSample();\n\n      await this.connection.call(\"connectAgent\", {\n        sessionId: this.config.connection.sessionId,\n      });\n      await this.connection.emitStatus(\"running\");\n      this.callbacks.onEvent?.({ type: \"adhoc_runner_started\", projectId: this.config.projectId });\n      this.lifecycle.startIdleTimer();\n\n      await this.runInteractiveTui();\n      this._finalState = \"finished\";\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      process.stderr.write(`[conveyor-agent] Ad-hoc runner failed: ${message}\\n`);\n      this.connection.sendEvent({ type: \"error\", message });\n      this._finalState = \"error\";\n    } finally {\n      this.shutdown();\n    }\n  }\n\n  /**\n   * Drive the `claude` CLI under a PTY. The bridge relays raw stdout to S2/S5\n   * and forwards keystrokes back, so consuming the event stream is enough — the\n   * loop blocks (keeping the pod alive) until the human exits or stop() aborts.\n   */\n  private async runInteractiveTui(): Promise<void> {\n    const model =\n      this.config.model ??\n      process.env.CONVEYOR_AGENT_MODEL ??\n      process.env.CONVEYOR_ADHOC_MODEL ??\n      DEFAULT_SONNET_MODEL;\n    // Key the CLI session on the stable workspace id (NOT connection.sessionId\n    // — see the field doc on AdhocSessionRunnerConfig.workspaceId): a fresh\n    // pod spawns a new session, a woken pod resumes the GCS-FUSE-persisted\n    // transcript.\n    const session = resolveSessionStart(this.config.workspaceId, this.config.workspaceDir);\n    const options = buildAdhocQueryOptions(\n      this.config.workspaceDir,\n      model,\n      this.abortController,\n      session,\n    );\n    try {\n      for await (const event of this.harness.executeQuery({ prompt: \"\", options })) {\n        if (this.stopped) break;\n        if (event.type === \"result\" && event.subtype === \"error\") {\n          // Raw-mode adapters surface spawn/exit failures as a result error —\n          // fail the run loudly so the Sessions UI shows the reason.\n          throw new Error(event.errors.join(\"\\n\"));\n        }\n      }\n    } catch (error) {\n      // An aborted interactive session is the normal stop path, not a failure.\n      if (!this.stopped) throw error;\n    }\n  }\n\n  stop(): void {\n    this.requestStop();\n  }\n\n  private requestStop(): void {\n    if (this.stopped) return;\n    this.stopped = true;\n    this.abortController.abort();\n    if (this.stopResolver) {\n      const resolve = this.stopResolver;\n      this.stopResolver = null;\n      resolve();\n    }\n  }\n\n  private async sampleAndReportKeyUsage(): Promise<void> {\n    if (this.stopped) return;\n    const samples = await sampleKeyUsage(process.env.CLAUDE_CODE_OAUTH_TOKEN);\n    for (const sample of samples) {\n      this.connection.sendEvent({\n        type: \"rate_limit_update\",\n        rateLimitType: sample.rateLimitType,\n        utilization: sample.utilization,\n        status: sample.status,\n      });\n    }\n  }\n\n  private shutdown(): void {\n    this.stopped = true;\n    this.lifecycle.destroy();\n    this.connection.sendEvent({ type: \"shutdown\", reason: this._finalState ?? \"finished\" });\n    this.connection.disconnect();\n  }\n}\n","/**\n * Same-pod review child supervisor. When the API parks a review session on\n * this (builder) pod and pushes `session:spawnReview`, the supervisor spawns a\n * SECOND conveyor-agent process — same CLI binary, same repo checkout — bound\n * to the review session via env overrides. The child owns its own\n * AgentConnection/PTY stream, so the card's \"Reviewer\" terminal tab appears\n * through the normal multi-session relay with no relay changes.\n *\n * Single-slot: a new spawn (re-review of a fresh push) kills and replaces the\n * previous child. Spawn failures are reported back to the API\n * (`reportReviewSpawnFailure`), which Ends the orphaned session and falls back\n * to a dedicated review pod.\n *\n * Shared-checkout caveat (v1, deliberate): the reviewer reads the builder's\n * working tree. At review time the builder is parked (ReviewPR + CI green),\n * so contention is low; a best-effort ff-only fetch freshens the branch. A\n * human typing in the builder TUI mid-review can still dirty the tree —\n * worktree isolation is a deferred follow-up.\n */\nimport { spawn as nodeSpawn, execFile, type ChildProcess } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport type { SpawnReviewData } from \"../connection/agent-connection.js\";\nimport { createServiceLogger } from \"../utils/logger.js\";\n\nconst execFileAsync = promisify(execFile);\nconst logger = createServiceLogger(\"ReviewChild\");\n\n/** Exit inside this window (non-zero) is treated as a spawn failure. */\nexport const SPAWN_FAILURE_GRACE_MS = 15_000;\n/** How long to wait for a SIGTERM'd child before SIGKILL. */\nconst KILL_WAIT_MS = 5_000;\n\nexport interface ReviewChildConnection {\n  reportReviewSpawnFailure(reviewSessionId: string, error?: string): void;\n}\n\nexport type SpawnFn = (\n  command: string,\n  args: string[],\n  options: {\n    cwd: string;\n    env: NodeJS.ProcessEnv;\n    stdio: [\"ignore\", \"pipe\", \"pipe\"];\n  },\n) => ChildProcess;\n\n/**\n * Build the child env from the builder's env. The child is the same CLI in\n * `code-review` mode, so it reuses the pod's credentials (git, Anthropic)\n * while swapping in the review session's identity.\n */\nexport function buildReviewChildEnv(\n  baseEnv: NodeJS.ProcessEnv,\n  data: SpawnReviewData,\n): NodeJS.ProcessEnv {\n  const env: NodeJS.ProcessEnv = { ...baseEnv };\n  // The review session's identity: its own JWT + sessionId, review runner\n  // mode. CONVEYOR_TASK_ID stays the parent's — same task (SEC-9 derives the\n  // task from the JWT server-side).\n  env.CONVEYOR_TASK_TOKEN = data.sessionJwt;\n  env.CONVEYOR_SESSION_ID = data.sessionId;\n  env.CONVEYOR_MODE = \"code-review\";\n\n  // The bootstrap-refresh path would replace the child's review JWT with the\n  // BUILDER's writer JWT (findBundleSession prefers the live writer), silently\n  // re-identifying the child as the builder. Reviews finish well inside the\n  // 24h JWT TTL, so the child never needs a refresh — remove the tokens.\n  delete env.POD_BOOTSTRAP_TOKEN;\n  delete env.CONVEYOR_BOOTSTRAP_TOKEN;\n\n  // The builder already ran (or is running) setup/start on this shared\n  // workspace — the child must never re-run `bun install` or spawn a second\n  // dev server.\n  delete env.CONVEYOR_SETUP_COMMAND;\n  delete env.CONVEYOR_START_COMMAND;\n\n  // The code-review runner forces its own mode (review + auto); a stale\n  // builder agent-mode hint must not leak in.\n  delete env.CONVEYOR_AGENT_MODE;\n  delete env.CONVEYOR_IS_AUTO;\n  return env;\n}\n\nexport class ReviewChildSupervisor {\n  private child: ChildProcess | null = null;\n  private childSessionId: string | null = null;\n\n  constructor(\n    private readonly connection: ReviewChildConnection,\n    private readonly workspaceDir: string,\n    private readonly spawnFn: SpawnFn = nodeSpawn as SpawnFn,\n  ) {}\n\n  /** Spawn (or replace) the review child for a `session:spawnReview` push. */\n  async spawn(data: SpawnReviewData): Promise<void> {\n    logger.info(\"Spawning same-pod review child\", {\n      reviewSessionId: data.sessionId,\n      branch: data.branch ?? undefined,\n      prNumber: data.prNumber ?? undefined,\n    });\n    await this.stopCurrent(\"superseded by new review spawn\");\n    await this.refreshCheckout(data.branch ?? null);\n\n    const env = buildReviewChildEnv(process.env, data);\n    const cliPath = process.argv[1];\n    if (!cliPath) {\n      this.connection.reportReviewSpawnFailure(data.sessionId, \"cannot resolve CLI entry path\");\n      return;\n    }\n\n    let child: ChildProcess;\n    try {\n      child = this.spawnFn(process.execPath, [cliPath], {\n        cwd: this.workspaceDir,\n        env,\n        stdio: [\"ignore\", \"pipe\", \"pipe\"],\n      });\n    } catch (err) {\n      this.connection.reportReviewSpawnFailure(\n        data.sessionId,\n        err instanceof Error ? err.message : String(err),\n      );\n      return;\n    }\n\n    this.child = child;\n    this.childSessionId = data.sessionId;\n    const spawnedAt = Date.now();\n    let reported = false;\n    const reportOnce = (message: string): void => {\n      if (reported) return;\n      reported = true;\n      this.connection.reportReviewSpawnFailure(data.sessionId, message);\n    };\n\n    // Child output lands in the pod log (the entrypoint tees our stdio),\n    // prefixed so builder and reviewer streams stay distinguishable.\n    child.stdout?.on(\"data\", (chunk: Buffer) => {\n      process.stdout.write(`[review-child] ${chunk.toString()}`);\n    });\n    child.stderr?.on(\"data\", (chunk: Buffer) => {\n      process.stderr.write(`[review-child] ${chunk.toString()}`);\n    });\n\n    child.on(\"error\", (err) => {\n      logger.error(\"Review child spawn error\", { error: err.message });\n      if (this.child === child) {\n        this.child = null;\n        this.childSessionId = null;\n      }\n      reportOnce(err.message);\n    });\n\n    child.on(\"exit\", (code, signal) => {\n      const wasCurrent = this.child === child;\n      if (wasCurrent) {\n        this.child = null;\n        this.childSessionId = null;\n      }\n      logger.info(\"Review child exited\", { code, signal, reviewSessionId: data.sessionId });\n      // A non-zero exit right after launch means the child never became the\n      // review agent — recover via the dedicated-pod fallback. Later exits\n      // (review finished, server-sent session:stop, supersede kill) are\n      // normal lifecycle: the server owns the session state there.\n      const withinGrace = Date.now() - spawnedAt < SPAWN_FAILURE_GRACE_MS;\n      if (wasCurrent && withinGrace && code !== null && code !== 0) {\n        reportOnce(`review child exited with code ${code} within startup grace`);\n      }\n    });\n  }\n\n  /** Stop any live child (parent shutdown / supersede). Best-effort. */\n  async stopAll(): Promise<void> {\n    await this.stopCurrent(\"parent shutting down\");\n  }\n\n  private async stopCurrent(reason: string): Promise<void> {\n    const child = this.child;\n    if (!child || child.exitCode !== null || child.killed) {\n      this.child = null;\n      this.childSessionId = null;\n      return;\n    }\n    logger.info(\"Stopping review child\", { reason, reviewSessionId: this.childSessionId });\n    // Detach bookkeeping first so the exit handler treats this as expected.\n    this.child = null;\n    this.childSessionId = null;\n\n    await new Promise<void>((resolve) => {\n      const timer = setTimeout(() => {\n        try {\n          child.kill(\"SIGKILL\");\n        } catch {\n          /* already gone */\n        }\n        resolve();\n      }, KILL_WAIT_MS);\n      timer.unref();\n      child.once(\"exit\", () => {\n        clearTimeout(timer);\n        resolve();\n      });\n      try {\n        child.kill(\"SIGTERM\");\n      } catch {\n        clearTimeout(timer);\n        resolve();\n      }\n    });\n  }\n\n  /**\n   * Best-effort branch freshen before the review reads the tree: fetch the PR\n   * branch and fast-forward only (never clobber local work — the builder's\n   * checkout is the source of truth on conflict). Failures are logged and\n   * skipped; the reviewer still reads the diff via the GitHub API.\n   */\n  private async refreshCheckout(branch: string | null): Promise<void> {\n    if (!branch) return;\n    try {\n      await execFileAsync(\"git\", [\"fetch\", \"origin\", branch], {\n        cwd: this.workspaceDir,\n        timeout: 60_000,\n      });\n      await execFileAsync(\"git\", [\"merge\", \"--ff-only\", `origin/${branch}`], {\n        cwd: this.workspaceDir,\n        timeout: 30_000,\n      });\n    } catch (err) {\n      logger.warn(\"Review checkout freshen skipped\", {\n        branch,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,SAAS,oBAAoB;AAC7B,SAAS,QAAAA,OAAM,WAAAC,gBAAe;AAC9B,SAAS,qBAAqB;;;ACJ9B,OAAO,SAAS;AAChB,SAAS,OAAO,iBAAiB;AACjC,SAAS,eAAe;AAgDxB,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,2BAA2B;AACjC,IAAM,2BAA2B;AAEjC,IAAM,wBAAwB;AAC9B,IAAM,wBAAwB;AAE9B,eAAsB,kBACpB,KACA,OACe;AACf,QAAM,aAAa,IAAI;AACvB,MAAI,CAAC,WAAY;AAEjB,MAAI;AACF,UAAM,MAAM,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AACpD,UAAM,UAAU,YAAY,WAAW,MAAM;AAC7C,UAAM,uBAAuB;AAAA,EAC/B,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,2CAA2C,OAAO,EAAE;AAAA,EAC5D;AACF;AAEA,SAAS,cAAc,OAAe,aAA4D;AAChG,QAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,iBAAiB,EAAE;AACxD,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,MAAM,QAAQ,YAAY,GAAG;AACnC,MAAI,QAAQ,IAAI;AACd,WAAO,EAAE,MAAM,SAAS,MAAM,YAAY;AAAA,EAC5C;AACA,QAAM,OAAO,QAAQ,MAAM,GAAG,GAAG,KAAK;AACtC,QAAM,OAAO,OAAO,QAAQ,MAAM,MAAM,CAAC,CAAC;AAC1C,SAAO,EAAE,MAAM,MAAM,OAAO,SAAS,IAAI,IAAI,OAAO,YAAY;AAClE;AAOO,SAAS,sBAAsB,MAAyB,QAAQ,KAAsB;AAC3F,QAAM,UAA2B,CAAC;AAElC,QAAM,cAAc,IAAI;AACxB,MAAI,aAAa;AACf,QAAI;AACF,YAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,YAAM,OAAO,IAAI,YAAY;AAC7B,YAAM,OAAO,IAAI,OAAO,OAAO,IAAI,IAAI,IAAI;AAC3C,UAAI,OAAO,SAAS,IAAI,GAAG;AACzB,gBAAQ,KAAK,EAAE,MAAM,YAAY,MAAM,MAAM,WAAW,oBAAoB,CAAC;AAAA,MAC/E;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,QAAM,eAAe,IAAI;AACzB,MAAI,cAAc;AAChB,UAAM,SAAS,cAAc,cAAc,qBAAqB;AAChE,QAAI,QAAQ;AACV,cAAQ,KAAK;AAAA,QACX,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,QACb,MAAM,OAAO;AAAA,QACb,WAAW;AAAA,MACb,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,aAAa,QAAyC;AAC7D,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,UAAU;AACd,UAAM,SAAS,IAAI,iBAAiB,EAAE,MAAM,OAAO,MAAM,MAAM,OAAO,KAAK,CAAC;AAC5E,UAAM,OAAO,CAAC,OAAgB;AAC5B,UAAI,QAAS;AACb,gBAAU;AACV,aAAO,QAAQ;AACf,cAAQ,EAAE;AAAA,IACZ;AACA,WAAO,KAAK,WAAW,MAAM,KAAK,IAAI,CAAC;AACvC,WAAO,KAAK,SAAS,MAAM,KAAK,KAAK,CAAC;AACtC,WAAO,WAAW,0BAA0B,MAAM,KAAK,KAAK,CAAC;AAAA,EAC/D,CAAC;AACH;AAEA,IAAM,QAAQ,CAAC,OACb,IAAI,QAAQ,CAAC,YAAY;AACvB,aAAW,SAAS,EAAE;AACxB,CAAC;AAEH,eAAe,cACb,QACA,MAMe;AACf,QAAM,EAAE,OAAO,gBAAgB,MAAM,IAAI;AACzC,QAAM,YAAY,KAAK,aAAa,OAAO,aAAa;AACxD,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,QAAM,eAAe,OAAO,IAAI,OAAO,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK;AAEtE,SAAO,MAAM;AACX,QAAI,MAAM,MAAM,MAAM,GAAG;AACvB,YAAM,GAAG,OAAO,IAAI,WAAW;AAC/B;AAAA,IACF;AACA,QAAI,KAAK,IAAI,KAAK,UAAU;AAC1B;AAAA,QACE,YAAY,OAAO,IAAI,oBAAoB,KAAK,MAAM,YAAY,GAAI,CAAC;AAAA,MACzE;AACA;AAAA,IACF;AACA,UAAM,MAAM,cAAc;AAAA,EAC5B;AACF;AAOA,eAAsB,gBAAgB,OAA+B,CAAC,GAAkB;AACtF,QAAM;AAAA,IACJ,MAAM,QAAQ;AAAA,IACd,QAAQ,MAAM;AAAA,IAAC;AAAA,IACf;AAAA,IACA,iBAAiB;AAAA,IACjB,QAAQ;AAAA,IACR,YAAY;AAAA,EACd,IAAI;AAEJ,MAAI,WAAW;AACb,UAAM,kBAAkB,KAAK,KAAK;AAAA,EACpC;AAEA,QAAM,UAAU,sBAAsB,GAAG;AACzC,MAAI,QAAQ,WAAW,EAAG;AAE1B,QAAM,QAAQ;AAAA,IACZ,QAAQ,IAAI,CAAC,WAAW,cAAc,QAAQ,EAAE,OAAO,WAAW,gBAAgB,MAAM,CAAC,CAAC;AAAA,EAC5F;AACF;;;ACvLA,eAAsB,yBACpB,QACqD;AACrD,QAAM,EAAE,WAAW,QAAQ,oBAAoB,QAAAC,QAAO,IAAI;AAC1D,MAAI,CAAC,aAAa,cAAc,OAAQ,QAAO;AAC/C,MAAI;AACJ,MAAI;AACF,oBAAgB,MAAM,mBAAmB,SAAS;AAAA,EACpD,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,IAAAA,QAAO,KAAK,oFAA+E;AAAA,MACzF;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AACD,WAAO;AAAA,EACT;AACA,MAAI,kBAAkB,QAAQ;AAC5B,IAAAA,QAAO;AAAA,MACL;AAAA,MACA,EAAE,WAAW,WAAW,QAAQ,cAAc;AAAA,IAChD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;ACFO,SAAS,aAAa,QAA0C;AACrE,SAAO,WAAW,UAAU,SAAS;AACvC;AAMO,SAAS,kBAAkB,MAOjB;AACf,QAAM,MAAoB;AAAA,IACxB,OAAO;AAAA,IACP,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,WAAW,KAAK,MAAM,KAAK,YAAY,EAAE,IAAI;AAAA,EAC/C;AACA,MAAI,KAAK,WAAW,OAAW,KAAI,SAAS,KAAK;AACjD,MAAI,KAAK,eAAe,OAAW,KAAI,aAAa,KAAK;AACzD,QAAM,KAAK,KAAK;AAChB,MAAI,IAAI;AACN,QAAI,GAAG,cAAc,OAAW,KAAI,YAAY,GAAG;AACnD,QAAI,GAAG,WAAW,OAAW,KAAI,SAAS,GAAG;AAC7C,QAAI,GAAG,gBAAgB,OAAW,KAAI,cAAc,GAAG;AACvD,QAAI,GAAG,eAAe,OAAW,KAAI,aAAa,GAAG;AAAA,EACvD;AACA,SAAO;AACT;;;AC7CO,SAAS,6BACd,KAC8B;AAE9B,MAAI,IAAI,iBAAkB,QAAO;AACjC,MAAI,CAAC,IAAI,oBAAqB,QAAO;AACrC,MAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,uBAAuB,CAAC,IAAI,uBAAuB;AACtF,WAAO;AAAA,EACT;AAQA,MAAI,IAAI,kBAAkB,QAAQ,IAAI,kBAAkB,QAAS,QAAO;AAExE,SAAO;AAAA,IACL,WAAW,IAAI;AAAA,IACf,WAAW,IAAI;AAAA,IACf,aAAa,IAAI;AAAA,IACjB,WAAW,IAAI;AAAA,EACjB;AACF;;;ACHO,IAAM,uBAAN,MAA2B;AAAA,EACvB;AAAA,EACA;AAAA,EAEQ;AAAA,EACA;AAAA,EACT,UAAU;AAAA,EACV,eAAoC;AAAA,EACpC,cAA2C;AAAA,EAEnD,YACE,QACA,YAA2C,CAAC,GAC5C,YACA;AACA,SAAK,SAAS;AACd,SAAK,YAAY;AACjB,SAAK,aAAa,cAAc,IAAI,gBAAgB,OAAO,UAAU;AACrE,SAAK,YAAY,IAAI;AAAA;AAAA;AAAA,MAGnB,EAAE,GAAG,0BAA0B,oBAAoB,GAAG,GAAG,OAAO,UAAU;AAAA,MAC1E;AAAA,QACE,aAAa,MAAM,KAAK,WAAW,cAAc;AAAA,QACjD,eAAe,MAAM;AACnB,kBAAQ,OAAO,MAAM,+DAA+D;AACpF,eAAK,YAAY;AAAA,QACnB;AAAA,QACA,kBAAkB,MAAM,KAAK,YAAY;AAAA;AAAA;AAAA;AAAA,QAIzC,gBAAgB,MAAM,KAAK,KAAK,WAAW,8BAA8B,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,QACzF,YAAY,MAAM;AAAA,QAAC;AAAA,QACnB,eAAe,MAAM,KAAK,KAAK,wBAAwB;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,IAAI,aAA0C;AAC5C,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,YAAqB;AACvB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,MAAM,MAAqB;AACzB,QAAI;AACF,YAAM,KAAK,WAAW,QAAQ;AAC9B,WAAK,WAAW,UAAU;AAAA,QACxB,MAAM;AAAA,QACN,WAAW,KAAK,OAAO,WAAW;AAAA,QAClC,WAAW,KAAK,OAAO;AAAA,MACzB,CAAC;AAED,WAAK,WAAW,OAAO,MAAM,KAAK,YAAY,CAAC;AAC/C,WAAK,WAAW,UAAU,CAAC,QAAQ,KAAK,cAAc,GAAG,CAAC;AAC1D,WAAK,UAAU,eAAe;AAC9B,WAAK,UAAU,kBAAkB;AACjC,WAAK,UAAU,iBAAiB;AAGhC,YAAM,KAAK,WAAW,KAAK,gBAAgB;AAAA,QACzC,WAAW,KAAK,OAAO,WAAW;AAAA,MACpC,CAAC;AAED,cAAQ,OAAO;AAAA,QACb,uDAAuD,KAAK,OAAO,SAAS;AAAA;AAAA,MAC9E;AACA,YAAM,KAAK,WAAW,WAAW,MAAM;AACvC,WAAK,UAAU,UAAU,EAAE,MAAM,uBAAuB,WAAW,KAAK,OAAO,UAAU,CAAC;AAE1F,WAAK,UAAU,eAAe;AAC9B,YAAM,KAAK,iBAAiB;AAC5B,WAAK,cAAc;AAAA,IACrB,SAAS,OAAO;AACd,YAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,cAAQ,OAAO,MAAM,2CAA2C,OAAO;AAAA,CAAI;AAC3E,WAAK,WAAW,UAAU,EAAE,MAAM,SAAS,QAAQ,CAAC;AACpD,WAAK,cAAc;AAAA,IACrB,UAAE;AACA,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,cAAc,KAA4B;AAChD,UAAM,UAAU,IAAI,QAAQ,SAAS,MAAM,GAAG,IAAI,QAAQ,MAAM,GAAG,GAAG,CAAC,WAAM,IAAI;AACjF,YAAQ,OAAO;AAAA,MACb,iFAAiF,QAAQ,QAAQ,OAAO,KAAK,CAAC;AAAA;AAAA,IAChH;AACA,SAAK,UAAU,UAAU,EAAE,MAAM,4BAA4B,SAAS,IAAI,QAAQ,CAAC;AACnF,QAAI,CAAC,KAAK,QAAS,MAAK,UAAU,eAAe;AAAA,EACnD;AAAA;AAAA,EAGA,OAAa;AACX,SAAK,YAAY;AAAA,EACnB;AAAA,EAEQ,cAAoB;AAC1B,QAAI,KAAK,QAAS;AAClB,SAAK,UAAU;AACf,QAAI,KAAK,cAAc;AACrB,YAAM,UAAU,KAAK;AACrB,WAAK,eAAe;AACpB,cAAQ;AAAA,IACV;AAAA,EACF;AAAA,EAEQ,mBAAkC;AACxC,QAAI,KAAK,QAAS,QAAO,QAAQ,QAAQ;AACzC,WAAO,IAAI,QAAc,CAAC,YAAY;AACpC,WAAK,eAAe;AAAA,IACtB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA,EAIA,MAAc,0BAAyC;AACrD,QAAI,KAAK,QAAS;AAClB,UAAM,UAAU,MAAM,eAAe,QAAQ,IAAI,uBAAuB;AACxE,eAAW,UAAU,SAAS;AAC5B,WAAK,WAAW,UAAU;AAAA,QACxB,MAAM;AAAA,QACN,eAAe,OAAO;AAAA,QACtB,aAAa,OAAO;AAAA,QACpB,QAAQ,OAAO;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,WAAiB;AACvB,SAAK,UAAU;AACf,SAAK,UAAU,QAAQ;AACvB,SAAK,WAAW,UAAU,EAAE,MAAM,YAAY,QAAQ,KAAK,eAAe,WAAW,CAAC;AACtF,SAAK,WAAW,WAAW;AAAA,EAC7B;AACF;;;ACvLA,SAAS,YAAY,WAAW,gBAAgB;AAChD,SAAS,YAAY;AA4Cd,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YACkB,KAChB,SACA;AACA,UAAM,OAAO;AAHG;AAIhB,SAAK,OAAO;AAAA,EACd;AAAA,EALkB;AAMpB;AAqBA,SAAS,aAAa,MAAuB;AAC3C,MAAI;AACF,QAAI,CAAC,SAAS,IAAI,EAAE,OAAO,EAAG,QAAO;AACrC,eAAW,MAAM,UAAU,IAAI;AAC/B,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOO,SAAS,WAAW,QAAgB,MAAyB,QAAQ,KAAoB;AAC9F,MAAI,OAAO,SAAS,GAAG,GAAG;AACxB,WAAO,aAAa,MAAM,IAAI,SAAS;AAAA,EACzC;AACA,aAAW,QAAQ,IAAI,QAAQ,IAAI,MAAM,GAAG,GAAG;AAC7C,QAAI,CAAC,IAAK;AACV,UAAM,YAAY,KAAK,KAAK,MAAM;AAClC,QAAI,aAAa,SAAS,EAAG,QAAO;AAAA,EACtC;AACA,SAAO;AACT;;;ACvFA,IAAM,mBAA2C;AAAA,EAC/C,QAAQ;AAAA,EACR,WAAW;AACb;AAEO,IAAM,qBAAN,MAA+C;AAAA,EASpD,YAA6B,MAAyB,QAAQ,KAAK;AAAtC;AAAA,EAAuC;AAAA,EAAvC;AAAA,EARpB,KAAK;AAAA,EACL,eAAgC;AAAA,IACvC,QAAQ;AAAA,IACR,kBAAkB;AAAA,IAClB,SAAS;AAAA,IACT,cAAc;AAAA,EAChB;AAAA,EAIA,cAAc,MAAyB,KAAK,KAAa;AACvD,UAAM,WAAW,IAAI;AACrB,UAAM,QAAQ,WAAW,WAAW,UAAU,GAAG,IAAI,WAAW,YAAY,GAAG;AAC/E,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,MAGF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,WAAW,OAAoC;AAC7C,UAAM,MAAM,EAAE,GAAG,aAAa,EAAE;AAChC,WAAO,IAAI;AACX,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,WAAW,KAAK,IAAI,2BAA2B;AACrD,UAAM,YAAY,iBAAiB,QAAQ;AAC3C,QAAI,OAAO,UAAW,KAAI,SAAS,IAAI;AAEvC,UAAM,QAAQ,KAAK,IAAI,wBAAwB,MAAM,QAAQ;AAC7D,UAAM,OAAiB,CAAC;AACxB,QAAI,MAAO,MAAK,KAAK,WAAW,MAAM,SAAS,GAAG,IAAI,QAAQ,GAAG,QAAQ,IAAI,KAAK,EAAE;AACpF,WAAO,EAAE,MAAM,KAAK,cAAc,GAAG,MAAM,IAAI;AAAA,EACjD;AAAA,EAEA,MAAM,qBAAoC;AAAA,EAG1C;AAAA,EAEA,iBAAiB,OAAoC;AACnD,WAAO,KAAK,UAAU,CAAC,YAAY,MAAM,OAAO,MAAM,GAAG,CAAC;AAAA,EAC5D;AAAA,EAEA,kBAAkB,MAAsB;AAGtC,WAAO,iBAAiB,IAAI;AAAA,EAC9B;AAAA,EAEA,gBAAgB,UAAkB,WAA6B;AAC7D,UAAM,SAAS,CAAC,yBAAyB,QAAQ,oBAAoB;AACrE,UAAM,OAAO,oBAAoB,SAAS;AAC1C,QAAI,KAAM,QAAO,KAAK;AAAA,EAAsC,IAAI,EAAE;AAClE,WAAO;AAAA,EACT;AACF;;;AC9EO,SAAS,kBAAkB,OAAgB,eAA2B;AAC3E,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO,IAAI,iBAAiB;AAAA,IAC9B,KAAK;AACH,aAAO,IAAI,mBAAmB;AAAA,IAChC;AACE,YAAM,IAAI,MAAM,qBAAqB,IAAc,EAAE;AAAA,EACzD;AACF;;;ACQA,IAAM,oBACJ;AA4CK,SAAS,gBAAgB,KAAiC;AAC/D,QAAM,MAAM,IAAI,gBAAgB;AAChC,MAAK,UAAgC,SAAS,GAAG,EAAG,QAAO;AAC3D,QAAM,IAAI,MAAM,gBAAgB,GAAG,gCAAgC,UAAU,KAAK,IAAI,CAAC,GAAG;AAC5F;AAGO,SAAS,oBAAoB,YAA8C;AAChF,SAAO;AAAA,IACL,YAAY,CAAC,MAAM,SAAS,WAAW,cAAc,MAAM,IAAI;AAAA,IAC/D,eAAe,CAAC,UAAU,WAAW,iBAAiB,KAAK;AAAA,IAC3D,SAAS,CAAC,YAAY,WAAW,WAAW,OAAO;AAAA,IACnD,UAAU,CAAC,YAAY,WAAW,YAAY,OAAO;AAAA,EACvD;AACF;AAGO,SAAS,uBACd,cACA,OACA,iBAKA,SACqB;AACrB,SAAO;AAAA,IACL;AAAA,IACA,cAAc,EAAE,MAAM,UAAU,QAAQ,eAAe,QAAQ,kBAAkB;AAAA,IACjF,oBAAoB;AAAA,IACpB,KAAK;AAAA;AAAA,IAEL,gBAAgB;AAAA,IAChB,iCAAiC;AAAA,IACjC,OAAO,EAAE,MAAM,UAAU,QAAQ,cAAc;AAAA,IAC/C,YAAY,CAAC;AAAA,IACb,gBAAgB,CAAC,QAAQ,SAAS;AAAA;AAAA,IAElC,gBAAgB;AAAA,IAChB;AAAA,IACA,GAAI,SAAS,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,IAC7D,GAAI,SAAS,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,EACtD;AACF;AAEO,IAAM,qBAAN,MAAyB;AAAA,EACrB;AAAA,EACA;AAAA,EACQ;AAAA,EAEA;AAAA,EACA;AAAA,EACA,kBAAkB,IAAI,gBAAgB;AAAA,EAC/C,UAAU;AAAA,EACV,eAAoC;AAAA,EACpC,cAA2C;AAAA,EAEnD,YACE,QACA,YAAyC,CAAC,GAC1C,MACA;AACA,SAAK,SAAS;AACd,SAAK,YAAY;AACjB,SAAK,aAAa,MAAM,cAAc,IAAI,gBAAgB,OAAO,UAAU;AAC3E,SAAK,UACH,MAAM,WACN,IAAI;AAAA,MACF,oBAAoB,KAAK,UAAU;AAAA,MACnC,kBAAkB,gBAAgB,QAAQ,GAAG,CAAC;AAAA,IAChD;AACF,SAAK,YAAY,IAAI;AAAA;AAAA;AAAA,MAGnB,EAAE,GAAG,0BAA0B,oBAAoB,GAAG,GAAG,OAAO,UAAU;AAAA,MAC1E;AAAA,QACE,aAAa,MAAM,KAAK,WAAW,cAAc;AAAA,QACjD,eAAe,MAAM,KAAK,YAAY;AAAA,QACtC,kBAAkB,MAAM,KAAK,YAAY;AAAA,QACzC,gBAAgB,MAAM,KAAK,KAAK,WAAW,8BAA8B,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,QACzF,YAAY,MAAM;AAAA,QAAC;AAAA,QACnB,eAAe,MAAM,KAAK,KAAK,wBAAwB;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,IAAI,aAA0C;AAC5C,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,YAAqB;AACvB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,MAAM,MAAqB;AACzB,QAAI;AACF,YAAM,KAAK,WAAW,QAAQ;AAC9B,WAAK,WAAW,UAAU;AAAA,QACxB,MAAM;AAAA,QACN,WAAW,KAAK,OAAO,WAAW;AAAA,QAClC,WAAW,KAAK,OAAO;AAAA,MACzB,CAAC;AACD,WAAK,WAAW,OAAO,MAAM,KAAK,YAAY,CAAC;AAC/C,WAAK,UAAU,eAAe;AAC9B,WAAK,UAAU,kBAAkB;AACjC,WAAK,UAAU,iBAAiB;AAEhC,YAAM,KAAK,WAAW,KAAK,gBAAgB;AAAA,QACzC,WAAW,KAAK,OAAO,WAAW;AAAA,MACpC,CAAC;AACD,YAAM,KAAK,WAAW,WAAW,SAAS;AAC1C,WAAK,UAAU,UAAU,EAAE,MAAM,wBAAwB,WAAW,KAAK,OAAO,UAAU,CAAC;AAC3F,WAAK,UAAU,eAAe;AAE9B,YAAM,KAAK,kBAAkB;AAC7B,WAAK,cAAc;AAAA,IACrB,SAAS,OAAO;AACd,YAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,cAAQ,OAAO,MAAM,0CAA0C,OAAO;AAAA,CAAI;AAC1E,WAAK,WAAW,UAAU,EAAE,MAAM,SAAS,QAAQ,CAAC;AACpD,WAAK,cAAc;AAAA,IACrB,UAAE;AACA,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,oBAAmC;AAC/C,UAAM,QACJ,KAAK,OAAO,SACZ,QAAQ,IAAI,wBACZ,QAAQ,IAAI,wBACZ;AAKF,UAAM,UAAU,oBAAoB,KAAK,OAAO,aAAa,KAAK,OAAO,YAAY;AACrF,UAAM,UAAU;AAAA,MACd,KAAK,OAAO;AAAA,MACZ;AAAA,MACA,KAAK;AAAA,MACL;AAAA,IACF;AACA,QAAI;AACF,uBAAiB,SAAS,KAAK,QAAQ,aAAa,EAAE,QAAQ,IAAI,QAAQ,CAAC,GAAG;AAC5E,YAAI,KAAK,QAAS;AAClB,YAAI,MAAM,SAAS,YAAY,MAAM,YAAY,SAAS;AAGxD,gBAAM,IAAI,MAAM,MAAM,OAAO,KAAK,IAAI,CAAC;AAAA,QACzC;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AAEd,UAAI,CAAC,KAAK,QAAS,OAAM;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,OAAa;AACX,SAAK,YAAY;AAAA,EACnB;AAAA,EAEQ,cAAoB;AAC1B,QAAI,KAAK,QAAS;AAClB,SAAK,UAAU;AACf,SAAK,gBAAgB,MAAM;AAC3B,QAAI,KAAK,cAAc;AACrB,YAAM,UAAU,KAAK;AACrB,WAAK,eAAe;AACpB,cAAQ;AAAA,IACV;AAAA,EACF;AAAA,EAEA,MAAc,0BAAyC;AACrD,QAAI,KAAK,QAAS;AAClB,UAAM,UAAU,MAAM,eAAe,QAAQ,IAAI,uBAAuB;AACxE,eAAW,UAAU,SAAS;AAC5B,WAAK,WAAW,UAAU;AAAA,QACxB,MAAM;AAAA,QACN,eAAe,OAAO;AAAA,QACtB,aAAa,OAAO;AAAA,QACpB,QAAQ,OAAO;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,WAAiB;AACvB,SAAK,UAAU;AACf,SAAK,UAAU,QAAQ;AACvB,SAAK,WAAW,UAAU,EAAE,MAAM,YAAY,QAAQ,KAAK,eAAe,WAAW,CAAC;AACtF,SAAK,WAAW,WAAW;AAAA,EAC7B;AACF;;;AC3PA,SAAS,SAAS,WAAW,gBAAmC;AAChE,SAAS,iBAAiB;AAI1B,IAAM,gBAAgB,UAAU,QAAQ;AACxC,IAAM,SAAS,oBAAoB,aAAa;AAGzC,IAAM,yBAAyB;AAEtC,IAAM,eAAe;AAqBd,SAAS,oBACd,SACA,MACmB;AACnB,QAAM,MAAyB,EAAE,GAAG,QAAQ;AAI5C,MAAI,sBAAsB,KAAK;AAC/B,MAAI,sBAAsB,KAAK;AAC/B,MAAI,gBAAgB;AAMpB,SAAO,IAAI;AACX,SAAO,IAAI;AAKX,SAAO,IAAI;AACX,SAAO,IAAI;AAIX,SAAO,IAAI;AACX,SAAO,IAAI;AACX,SAAO;AACT;AAEO,IAAM,wBAAN,MAA4B;AAAA,EAIjC,YACmB,YACA,cACA,UAAmB,WACpC;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EAHgB;AAAA,EACA;AAAA,EACA;AAAA,EANX,QAA6B;AAAA,EAC7B,iBAAgC;AAAA;AAAA,EASxC,MAAM,MAAM,MAAsC;AAChD,WAAO,KAAK,kCAAkC;AAAA,MAC5C,iBAAiB,KAAK;AAAA,MACtB,QAAQ,KAAK,UAAU;AAAA,MACvB,UAAU,KAAK,YAAY;AAAA,IAC7B,CAAC;AACD,UAAM,KAAK,YAAY,gCAAgC;AACvD,UAAM,KAAK,gBAAgB,KAAK,UAAU,IAAI;AAE9C,UAAM,MAAM,oBAAoB,QAAQ,KAAK,IAAI;AACjD,UAAM,UAAU,QAAQ,KAAK,CAAC;AAC9B,QAAI,CAAC,SAAS;AACZ,WAAK,WAAW,yBAAyB,KAAK,WAAW,+BAA+B;AACxF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,cAAQ,KAAK,QAAQ,QAAQ,UAAU,CAAC,OAAO,GAAG;AAAA,QAChD,KAAK,KAAK;AAAA,QACV;AAAA,QACA,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,MAClC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,WAAK,WAAW;AAAA,QACd,KAAK;AAAA,QACL,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACjD;AACA;AAAA,IACF;AAEA,SAAK,QAAQ;AACb,SAAK,iBAAiB,KAAK;AAC3B,UAAM,YAAY,KAAK,IAAI;AAC3B,QAAI,WAAW;AACf,UAAM,aAAa,CAAC,YAA0B;AAC5C,UAAI,SAAU;AACd,iBAAW;AACX,WAAK,WAAW,yBAAyB,KAAK,WAAW,OAAO;AAAA,IAClE;AAIA,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,cAAQ,OAAO,MAAM,kBAAkB,MAAM,SAAS,CAAC,EAAE;AAAA,IAC3D,CAAC;AACD,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,cAAQ,OAAO,MAAM,kBAAkB,MAAM,SAAS,CAAC,EAAE;AAAA,IAC3D,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,aAAO,MAAM,4BAA4B,EAAE,OAAO,IAAI,QAAQ,CAAC;AAC/D,UAAI,KAAK,UAAU,OAAO;AACxB,aAAK,QAAQ;AACb,aAAK,iBAAiB;AAAA,MACxB;AACA,iBAAW,IAAI,OAAO;AAAA,IACxB,CAAC;AAED,UAAM,GAAG,QAAQ,CAAC,MAAM,WAAW;AACjC,YAAM,aAAa,KAAK,UAAU;AAClC,UAAI,YAAY;AACd,aAAK,QAAQ;AACb,aAAK,iBAAiB;AAAA,MACxB;AACA,aAAO,KAAK,uBAAuB,EAAE,MAAM,QAAQ,iBAAiB,KAAK,UAAU,CAAC;AAKpF,YAAM,cAAc,KAAK,IAAI,IAAI,YAAY;AAC7C,UAAI,cAAc,eAAe,SAAS,QAAQ,SAAS,GAAG;AAC5D,mBAAW,iCAAiC,IAAI,uBAAuB;AAAA,MACzE;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAyB;AAC7B,UAAM,KAAK,YAAY,sBAAsB;AAAA,EAC/C;AAAA,EAEA,MAAc,YAAY,QAA+B;AACvD,UAAM,QAAQ,KAAK;AACnB,QAAI,CAAC,SAAS,MAAM,aAAa,QAAQ,MAAM,QAAQ;AACrD,WAAK,QAAQ;AACb,WAAK,iBAAiB;AACtB;AAAA,IACF;AACA,WAAO,KAAK,yBAAyB,EAAE,QAAQ,iBAAiB,KAAK,eAAe,CAAC;AAErF,SAAK,QAAQ;AACb,SAAK,iBAAiB;AAEtB,UAAM,IAAI,QAAc,CAAC,YAAY;AACnC,YAAM,QAAQ,WAAW,MAAM;AAC7B,YAAI;AACF,gBAAM,KAAK,SAAS;AAAA,QACtB,QAAQ;AAAA,QAER;AACA,gBAAQ;AAAA,MACV,GAAG,YAAY;AACf,YAAM,MAAM;AACZ,YAAM,KAAK,QAAQ,MAAM;AACvB,qBAAa,KAAK;AAClB,gBAAQ;AAAA,MACV,CAAC;AACD,UAAI;AACF,cAAM,KAAK,SAAS;AAAA,MACtB,QAAQ;AACN,qBAAa,KAAK;AAClB,gBAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAc,gBAAgB,QAAsC;AAClE,QAAI,CAAC,OAAQ;AACb,QAAI;AACF,YAAM,cAAc,OAAO,CAAC,SAAS,UAAU,MAAM,GAAG;AAAA,QACtD,KAAK,KAAK;AAAA,QACV,SAAS;AAAA,MACX,CAAC;AACD,YAAM,cAAc,OAAO,CAAC,SAAS,aAAa,UAAU,MAAM,EAAE,GAAG;AAAA,QACrE,KAAK,KAAK;AAAA,QACV,SAAS;AAAA,MACX,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,KAAK,mCAAmC;AAAA,QAC7C;AAAA,QACA,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AAAA,IACH;AAAA,EACF;AACF;;;AV1MA,IAAI,QAAQ,KAAK,SAAS,WAAW,GAAG;AACtC,QAAM,YAAYC,SAAQ,cAAc,YAAY,GAAG,CAAC;AACxD,QAAM,UAAUC,MAAK,WAAW,MAAM,cAAc;AACpD,QAAM,MAAM,KAAK,MAAM,aAAa,SAAS,OAAO,CAAC;AACrD,UAAQ,OAAO,MAAM,IAAI,UAAU,IAAI;AACvC,UAAQ,KAAK,CAAC;AAChB;AAEA,IAAMC,UAAS,oBAAoB,KAAK;AAQxC,IAAM,cAAiC,CAAC;AACxC,IAAI,aAAa;AACjB,SAAS,aACP,QACA,MACM;AAGN,MAAI,WAAY;AAChB,eAAa;AACb,QAAM,UAAU,kBAAkB;AAAA,IAChC;AAAA,IACA,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb,YAAY,KAAK;AAAA,IACjB,WAAW,QAAQ,OAAO;AAAA,IAC1B,UAAU;AAAA,EACZ,CAAC;AACD,EAAAA,QAAO,aAAa,MAAM,CAAC,EAAE,cAAc,OAA6C;AAC1F;AAEA,eAAe,uBAAuB,QAAgB,cAAqC;AACzF,QAAM,iBAAiB,QAAQ,IAAI;AACnC,QAAM,gBAAgB,QAAQ,QAAQ,IAAI,gBAAgB;AAC1D,EAAAA,QAAO,KAAK,gCAAgC;AAAA,IAC1C,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA,uBAAuB,QAAQ,cAAc;AAAA,EAC/C,CAAC;AACD,QAAM,SAAS,MAAM,eAAe;AAAA,IAClC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,CAAC,OAAO,IAAI;AACd,IAAAA,QAAO,MAAM,kCAAkC;AAAA,MAC7C,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,MACjB,QAAQ,OAAO;AAAA,MACf,QAAQ,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA,uBAAuB,QAAQ,cAAc;AAAA,MAC7C,MAAM,gBACF,0GACA;AAAA,IACN,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,sBAAoB,OAAO,MAAM;AACjC,EAAAA,QAAO,KAAK,sBAAsB;AAAA,IAChC,QAAQ,OAAO,OAAO;AAAA,IACtB,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;AAGA,SAAS,qBAAqB,OAA+C;AAC3E,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,kBAAkB,qBAAqB,KAAK,OAAO,KAAK,SAAS,KAAK,OAAO;AACnF,QAAM,eAAe,EAAE,UAAU,UAAU,MAAM,SAAS,UAAa,MAAM,SAAS;AACtF,SAAO,mBAAmB;AAC5B;AAEA,QAAQ,GAAG,qBAAqB,CAAC,QAA+B;AAC9D,MAAI,IAAI,SAAS,QAAS;AAE1B,MAAI,qBAAqB,GAAG,GAAG;AAC7B,IAAAA,QAAO,KAAK,yCAAyC,EAAE,OAAO,IAAI,SAAS,MAAM,IAAI,KAAK,CAAC;AAC3F;AAAA,EACF;AAEA,EAAAA,QAAO,MAAM,sBAAsB,EAAE,OAAO,IAAI,SAAS,MAAM,IAAI,KAAK,CAAC;AACzE,eAAa,sBAAsB,EAAE,UAAU,EAAE,CAAC;AAClD,UAAQ,KAAK,CAAC;AAChB,CAAC;AAED,QAAQ,GAAG,sBAAsB,CAAC,WAAoB;AACpD,QAAM,MAAM,kBAAkB,QAAQ,SAAS,IAAI,MAAM,OAAO,MAAM,CAAC;AAEvE,MAAI,qBAAqB,GAAG,GAAG;AAC7B,IAAAA,QAAO,KAAK,mDAAmD,EAAE,OAAO,IAAI,QAAQ,CAAC;AACrF;AAAA,EACF;AAEA,EAAAA,QAAO,MAAM,uBAAuB,EAAE,OAAO,IAAI,QAAQ,CAAC;AAC1D,eAAa,uBAAuB,EAAE,UAAU,EAAE,CAAC;AACnD,UAAQ,KAAK,CAAC;AAChB,CAAC;AAED,IAAM,2BAA2B;AACjC,IAAI,iBAAiB,QAAQ,IAAI,oBAAoB;AAGrD,IAAM,gBAAgB,QAAQ,IAAI,kBAAkB,QAAQ,IAAI;AAChE,IAAI,iBAAiB,CAAC,QAAQ,IAAI,qBAAqB;AACrD,MAAI,CAAC,gBAAgB;AACnB,IAAAA,QAAO,MAAM,4DAA4D;AACzE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,uBAAuB,gBAAgB,aAAa;AAC1D,mBAAiB,QAAQ,IAAI,oBAAoB;AACnD;AAGA,IAAM,sBAAsB,QAAQ,IAAI;AACxC,IAAM,mBAAmB,QAAQ,IAAI;AACrC,IAAM,qBAAqB,QAAQ,IAAI,sBAAsB,QAAQ,IAAI;AACzE,IAAM,gBAAiB,QAAQ,IAAI,iBAAiB;AACpD,IAAM,sBAAsB,QAAQ,IAAI,uBAAuB;AAC/D,IAAM,mBAAmB,sBACrB,wBAAwB,SACxB,QAAQ,IAAI,qBAAqB;AAIrC,YAAY,SAAS;AACrB,YAAY,cAAc,QAAQ,IAAI;AACtC,YAAY,aAAa;AACzB,YAAY,YAAY,QAAQ,IAAI,uBAAuB;AAQ3D,IAAM,kBAAkB,6BAA6B,QAAQ,GAAG;AAOhE,IAAI,CAAC,oBAAoB,mBAAmB,kBAAkB,SAAS;AACrE,EAAAA,QAAO,KAAK,yBAAyB,EAAE,WAAW,gBAAgB,UAAU,CAAC;AAC7E,QAAM,cAAc,IAAI;AAAA,IACtB;AAAA,MACE,YAAY;AAAA,QACV,QAAQ,kBAAkB;AAAA,QAC1B,WAAW,gBAAgB;AAAA,QAC3B,WAAW,gBAAgB;AAAA,QAC3B,YAAY;AAAA,MACd;AAAA,MACA,WAAW,gBAAgB;AAAA,MAC3B,aAAa,gBAAgB;AAAA,MAC7B,cAAc;AAAA,MACd,GAAI,QAAQ,IAAI,mBAAmB,EAAE,WAAW,EAAE,eAAe,KAAK,KAAK,IAAK,EAAE,IAAI,CAAC;AAAA,IACzF;AAAA,IACA;AAAA,MACE,SAAS,CAAC,UAAU;AAClB,QAAAA,QAAO,KAAK,uBAAuB,EAAE,WAAW,MAAM,KAAe,CAAC;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AACA,cAAY,YAAY,gBAAgB;AACxC,cAAY,cAAc,gBAAgB;AAC1C,cAAY,aAAa;AACzB,UAAQ,GAAG,WAAW,MAAM,YAAY,KAAK,CAAC;AAC9C,UAAQ,GAAG,UAAU,MAAM,YAAY,KAAK,CAAC;AAC7C,QAAM,YAAY,IAAI;AACtB,QAAM,aAAa,YAAY,eAAe;AAC9C,eAAa,aAAa,UAAU,SAAS;AAAA,IAC3C,UAAU,aAAa,IAAI;AAAA,IAC3B,YAAY,YAAY,cAAc;AAAA,EACxC,CAAC;AACD,UAAQ,KAAK,aAAa,IAAI,CAAC;AACjC;AAEA,IAAI,CAAC,oBAAoB,iBAAiB;AACxC,EAAAA,QAAO,KAAK,0BAA0B,EAAE,WAAW,gBAAgB,UAAU,CAAC;AAC9E,QAAM,gBAAgB,IAAI;AAAA,IACxB;AAAA,MACE,YAAY;AAAA,QACV,QAAQ,kBAAkB;AAAA,QAC1B,WAAW,gBAAgB;AAAA,QAC3B,WAAW,gBAAgB;AAAA,QAC3B,YAAY;AAAA,MACd;AAAA,MACA,WAAW,gBAAgB;AAAA;AAAA,MAE3B,GAAI,QAAQ,IAAI,mBAAmB,EAAE,WAAW,EAAE,eAAe,KAAK,KAAK,IAAK,EAAE,IAAI,CAAC;AAAA,IACzF;AAAA,IACA;AAAA,MACE,SAAS,CAAC,UAAU;AAClB,QAAAA,QAAO,KAAK,wBAAwB,EAAE,WAAW,MAAM,KAAe,CAAC;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACA,cAAY,YAAY,gBAAgB;AACxC,cAAY,cAAc,gBAAgB;AAC1C,cAAY,aAAa;AACzB,UAAQ,GAAG,WAAW,MAAM,cAAc,KAAK,CAAC;AAChD,UAAQ,GAAG,UAAU,MAAM,cAAc,KAAK,CAAC;AAC/C,QAAM,cAAc,IAAI;AACxB,QAAM,eAAe,cAAc,eAAe;AAClD,eAAa,eAAe,UAAU,SAAS;AAAA,IAC7C,UAAU,eAAe,IAAI;AAAA,IAC7B,YAAY,cAAc,cAAc;AAAA,EAC1C,CAAC;AACD,UAAQ,KAAK,eAAe,IAAI,CAAC;AACnC;AAEA,IAAI,CAAC,uBAAuB,CAAC,kBAAkB;AAC7C,EAAAA,QAAO,MAAM,wCAAwC;AACrD,EAAAA,QAAO,MAAM,2DAA2D;AACxE,EAAAA,QAAO,MAAM,gDAAgD;AAC7D,EAAAA,QAAO,MAAM,EAAE;AACf,EAAAA,QAAO,MAAM,iEAAiE;AAC9E,EAAAA,QAAO,MAAM,EAAE;AACf,EAAAA,QAAO,MAAM,WAAW;AACxB,EAAAA,QAAO,MAAM,yDAAyD;AACtE,EAAAA,QAAO,MAAM,4DAA4D;AACzE,EAAAA,QAAO;AAAA,IACL;AAAA,EACF;AACA,UAAQ,KAAK,CAAC;AAChB;AAEA,IACE,kBAAkB,UAClB,kBAAkB,QAClB,kBAAkB,iBAClB,kBAAkB,SAClB;AACA,EAAAA,QAAO,MAAM,yBAAyB;AAAA,IACpC,MAAM;AAAA,IACN,UAAU,CAAC,QAAQ,MAAM,eAAe,OAAO;AAAA,EACjD,CAAC;AACD,UAAQ,KAAK,CAAC;AAChB;AAEAA,QAAO,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAMrD,IAAM,qBAAqB,QAAQ,IAAI,mBACnC,EAAE,eAAe,KAAK,KAAK,IAAK,IAChC,EAAE,oBAAoB,EAAE;AAE5B,IAAM,SAAS,IAAI;AAAA,EACjB;AAAA,IACE,YAAY;AAAA,MACV,QAAQ,kBAAkB;AAAA,MAC1B,WAAW;AAAA;AAAA;AAAA,MAGX,WAAW,QAAQ,IAAI,uBAAuB;AAAA,MAC9C,YAAY;AAAA,IACd;AAAA,IACA,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AAAA,EACA;AAAA,IACE,gBAAgB,CAAC,WAA8B;AAC7C,MAAAA,QAAO,KAAK,kBAAkB,EAAE,OAAO,CAAC;AAAA,IAC1C;AAAA,IACA,SAAS,CAAC,UAAmC;AAC3C,YAAM,SACH,MAAM,WAAuB,MAAM,WAAuB,MAAM,WAAsB;AACzF,UAAI,QAAQ;AACV,QAAAA,QAAO,KAAK,QAAQ,EAAE,WAAW,MAAM,KAAe,CAAC;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;AAIA,IAAM,iBAAiB,IAAI,sBAAsB,OAAO,YAAY,kBAAkB;AAEtF,IAAI;AAEJ,IAAM,gBAAgB,CAAC,WAAiC;AACtD,EAAAA,QAAO,KAAK,YAAY,MAAM,mCAAmC;AAKjE,mBAAiB;AAGjB,QAAM,YAAY;AAChB,QAAI;AACF,YAAM,eAAe,QAAQ;AAAA,IAC/B,QAAQ;AAAA,IAER;AACA,QAAI;AACF,YAAM,OAAO,mBAAmB;AAAA,IAClC,UAAE;AACA,aAAO,KAAK;AAAA,IACd;AAAA,EACF,GAAG;AACH,aAAW,MAAM;AACf,IAAAA,QAAO,KAAK,sBAAsB,MAAM,UAAU;AAIlD,IAAAA,QAAO;AAAA,MACL;AAAA,MACA,kBAAkB;AAAA,QAChB,QAAQ;AAAA,QACR,UAAU;AAAA,QACV;AAAA,QACA,YAAY,OAAO,cAAc;AAAA,QACjC,WAAW,QAAQ,OAAO;AAAA,QAC1B,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,GAAG,IAAM,EAAE,MAAM;AACnB;AAEA,QAAQ,GAAG,WAAW,MAAM,cAAc,SAAS,CAAC;AACpD,QAAQ,GAAG,UAAU,MAAM,cAAc,QAAQ,CAAC;AAGlD,MAAM,OAAO,QAAQ;AAErB,IAAM,iBAAiB,CAAC,QAA6B,SAAiB;AACpE,SAAO,WAAW,UAAU,EAAE,MAAM,gBAAgB,QAAQ,KAAK,CAAC;AAClE,GAAC,WAAW,WAAW,QAAQ,SAAS,QAAQ,QAAQ,MAAM,IAAI;AACpE;AAIA,IAAI,oBAA8C;AAClD,IAAM,4BAA4B,oBAAI,QAA2B;AAEjE,IAAM,wBAAwB,MAAY;AACxC,QAAM,QAAQ;AACd,MAAI,CAAC,SAAS,MAAM,aAAa,QAAQ,MAAM,OAAQ;AACvD,4BAA0B,IAAI,KAAK;AACnC,MAAI;AACF,QAAI,MAAM,IAAK,SAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;AAAA,QAC5C,OAAM,KAAK,SAAS;AAAA,EAC3B,QAAQ;AACN,QAAI;AACF,YAAM,KAAK,SAAS;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEA,IAAM,qBAAqB,CAAC,YAA0B;AACpD,EAAAA,QAAO,KAAK,yBAAyB,EAAE,QAAQ,CAAC;AAChD,SAAO,WAAW,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC7D,QAAM,QAAQ,gBAAgB,SAAS,oBAAoB,CAAC,QAAQ,SAAS;AAC3E,WAAO,WAAW,UAAU,EAAE,MAAM,wBAAwB,QAAQ,KAAK,CAAC;AAC1E,KAAC,WAAW,WAAW,QAAQ,SAAS,QAAQ,QAAQ,MAAM,IAAI;AAAA,EACpE,CAAC;AACD,sBAAoB;AACpB,QAAM,GAAG,QAAQ,CAAC,MAAM,WAAW;AACjC,QAAI,sBAAsB,MAAO,qBAAoB;AACrD,QAAI,0BAA0B,IAAI,KAAK,EAAG;AAE1C,IAAAA,QAAO,KAAK,wBAAwB,EAAE,MAAM,OAAO,CAAC;AACpD,WAAO,WAAW,UAAU;AAAA,MAC1B,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,SAAS,uBAAuB,SAAS,OAAO,KAAK,cAAc,IAAI,EAAE,GAAG,SAAS,aAAa,MAAM,MAAM,EAAE;AAAA,IAClH,CAAC;AAGD,QAAI,SAAS,QAAQ,SAAS,GAAG;AAC/B,aAAO,WAAW,UAAU;AAAA,QAC1B,MAAM;AAAA,QACN,SAAS,kCAAkC,IAAI,GAAG,SAAS,aAAa,MAAM,MAAM,EAAE;AAAA,MACxF,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACD,QAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,QAAI,sBAAsB,MAAO,qBAAoB;AACrD,IAAAA,QAAO,MAAM,uBAAuB,EAAE,OAAO,IAAI,QAAQ,CAAC;AAC1D,WAAO,WAAW,UAAU,EAAE,MAAM,uBAAuB,SAAS,IAAI,QAAQ,CAAC;AAAA,EACnF,CAAC;AACH;AAIA,KAAK;AAAA,EAAkB,QAAQ;AAAA,EAAK,CAAC,YACnC,eAAe,UAAU,cAAc,OAAO;AAAA,CAAI;AACpD;AAOA,KAAK,yBAAyB;AAAA,EAC5B,WAAW,QAAQ,IAAI;AAAA,EACvB,QAAQ;AAAA,EACR,oBAAoB,OAAO,cAAc;AACvC,UAAM,MAAM,MAAM,OAAO,WAAW,KAAK,kBAAkB,EAAE,UAAU,CAAC;AACxE,WAAO,IAAI;AAAA,EACb;AAAA,EACA,QAAAA;AACF,CAAC;AAcD,IAAI,kBAAkB,QAAQ;AAC5B,SAAO,WAAW,cAAc,CAAC,SAAS;AACxC,SAAK,eAAe,MAAM,IAAI,EAAE,MAAM,CAAC,QAAiB;AACtD,MAAAA,QAAO,MAAM,4BAA4B;AAAA,QACvC,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AACD,aAAO,WAAW;AAAA,QAChB,KAAK;AAAA,QACL,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACjD;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;AAEA,IAAM,iBAAiB,mBAAmB;AAC1C,OAAO,WAAW,kBAAkB,MAAM;AACxC,MAAI,CAAC,gBAAgB,aAAc;AACnC,SAAO,WAAW,UAAU;AAAA,IAC1B,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACD,wBAAsB;AACtB,qBAAmB,eAAe,YAAY;AAChD,CAAC;AAED,IAAI,gBAAgB;AAClB,QAAM,YAAY;AAKhB,UAAM,WAAW,MAAM,cAAc;AAAA,MACnC,OAAO,CAAC,MAAM,eAAe,UAAU,SAAS,CAAC;AAAA,CAAI;AAAA,IACvD,CAAC;AACD,QAAI,aAAa,YAAY,aAAa,WAAW;AACnD,aAAO,WAAW,UAAU;AAAA,QAC1B,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AAOA,UAAM,gBAAgB;AAAA,MACpB,OAAO,CAAC,YAAY,eAAe,UAAU,cAAc,OAAO;AAAA,CAAI;AAAA,MACtE,WAAW;AAAA,IACb,CAAC;AAED,QAAI,eAAe,cAAc;AAC/B,MAAAA,QAAO,KAAK,sCAAsC;AAAA,QAChD,SAAS,eAAe;AAAA,MAC1B,CAAC;AACD,UAAI;AACF,cAAM,gBAAgB,eAAe,cAAc,oBAAoB,cAAc;AACrF,QAAAA,QAAO,KAAK,yBAAyB;AAAA,MACvC,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU;AACrD,QAAAA,QAAO,MAAM,wBAAwB,EAAE,OAAO,IAAI,CAAC;AACnD,eAAO,WAAW,UAAU,EAAE,MAAM,eAAe,SAAS,IAAI,CAAC;AAAA,MACnE;AAAA,IACF;AAEA,QAAI,sBAAsB;AAC1B,QAAI,eAAe,cAAc;AAC/B,yBAAmB,eAAe,YAAY;AAC9C,4BAAsB;AAAA,IACxB;AAEA,UAAM,eAAe,MAAM,iBAAiB,kBAAkB;AAC9D,UAAM,eAAe,yBAAyB,YAAY;AAC1D,WAAO,WAAW,UAAU;AAAA,MAC1B,MAAM;AAAA,MACN;AAAA,MACA,GAAI,aAAa,SAAS,IAAI,EAAE,aAAa,IAAI,CAAC;AAAA,IACpD,CAAC;AAAA,EACH,GAAG;AACL;AAIA,OACG,IAAI,EACJ,KAAK,MAAM;AAMV,QAAM,UAAU,OAAO,eAAe;AACtC,QAAM,SAA0B,iBAAiB,WAAW,UAAU,UAAU;AAChF,eAAa,QAAQ;AAAA,IACnB,UAAU,UAAU,IAAI;AAAA,IACxB,QAAQ;AAAA,IACR,YAAY,OAAO,cAAc;AAAA,EACnC,CAAC;AACD,UAAQ,KAAK,UAAU,IAAI,CAAC;AAC9B,CAAC,EACA,MAAM,CAAC,UAAmB;AACzB,QAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,EAAAA,QAAO,MAAM,uBAAuB,EAAE,OAAO,IAAI,CAAC;AAClD,eAAa,SAAS,EAAE,UAAU,GAAG,YAAY,OAAO,cAAc,OAAU,CAAC;AACjF,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":["join","dirname","logger","dirname","join","logger"]}

package/dist/index.js

@@ -20,7 +20,7 @@ import {
   unshallowRepo,
   updateRemoteToken,
   uploadSnapshotToGcs
-} from "./chunk-DEMRCBJN.js";
+} from "./chunk-CFELRV35.js";
 import "./chunk-7TQO4ZF4.js";
 
 // src/runner/worktree.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rallycry/conveyor-agent",
-  "version": "10.2.4",
+  "version": "10.2.5",
   "description": "Conveyor Agent Runner v10 - PTY harness for the task chat (SDK harness for audit/project-chat). Agent-as-User architecture with BaseService patterns. Works locally too.",
   "keywords": [
     "agent",